@visa/cli 4.1.0-rc.2 → 4.1.0-rc.200

package/dist/skills/pair-visa-agent/scripts/setup.mjs

@@ -0,0 +1,48 @@
+#!/usr/bin/env node
+// Portable provisioner for the pair-visa-agent skill.
+//
+// Ensures the `visa` CLI is installed so ANY Agent Skills runtime can pair —
+// not just OpenClaw (whose `metadata.openclaw.install` auto-runs). Hermes,
+// Claude Code, and any other agentskills.io-compatible runtime run this bundled
+// script per the standard's `scripts/` execution stage.
+//
+// Safe to run repeatedly: it no-ops when `visa` already resolves. Pinned to @rc
+// because the v4 agent surface is prerelease (the @latest tag predates the
+// `visa agent` commands); drop the tag once 4.1.0 is promoted to latest.
+
+import { execSync } from 'node:child_process'
+
+function resolves(cmd) {
+  try {
+    execSync(`${cmd} --version`, { stdio: 'ignore' })
+    return true
+  } catch {
+    return false
+  }
+}
+
+if (resolves('visa') || resolves('visa-cli')) {
+  console.log('✓ visa CLI already installed — nothing to do. Run the pairing flow in SKILL.md.')
+  process.exit(0)
+}
+
+console.log('Installing @visa/cli@rc (the v4 agent surface is prerelease)…')
+try {
+  execSync('npm install -g @visa/cli@rc', { stdio: 'inherit' })
+} catch {
+  console.error(
+    'Global install failed. Try `npm install -g @visa/cli@rc` manually (may need sudo, or set a\n' +
+      'user-writable npm prefix: `npm config set prefix ~/.npm-global` and add its `bin` to PATH).'
+  )
+  process.exit(1)
+}
+
+if (!resolves('visa') && !resolves('visa-cli')) {
+  console.error(
+    'Installed, but `visa` is not on PATH. Ensure your npm global bin dir is on PATH\n' +
+      '(`npm bin -g` shows it), then re-run this script.'
+  )
+  process.exit(1)
+}
+
+console.log('✓ visa CLI ready. Now run the pairing flow in SKILL.md.')

package/dist/subway-direct.mjs

@@ -0,0 +1 @@
+import{createLibp2p as x}from"libp2p";import{tcp as A}from"@libp2p/tcp";import{noise as E}from"@chainsafe/libp2p-noise";import{yamux as U}from"@chainsafe/libp2p-yamux";import{generateKeyPairFromSeed as b}from"@libp2p/crypto/keys";import{multiaddr as q}from"@multiformats/multiaddr";import{toString as D}from"uint8arrays/to-string";var m=new TextEncoder,R=new TextDecoder;function y(r,e){let n=typeof e=="bigint"?e:BigInt(e);for(;n>0x7fn;)r.push(Number(n&0x7fn|0x80n)),n>>=7n;r.push(Number(n))}function d(r,e){let n=0n,t=0n,o=e;for(;;){let s=r[o++];if(n|=BigInt(s&127)<<t,(s&128)===0)break;t+=7n}return[n,o]}function g(r,e){return r<<3|e}function f(r,e,n){r.push(g(e,2)),y(r,n.length);for(let t of n)r.push(t)}function M(r,e){let n=[];return f(n,1,m.encode(r)),e&&e.length>0&&f(n,2,m.encode(e)),Uint8Array.from(n)}function O(r,e,n){let t=[];return n!==0n&&(t.push(g(1,0)),y(t,n)),f(t,2,M(r,e)),Uint8Array.from(t)}function T(r){let e=[];return f(e,1,m.encode(r)),Uint8Array.from(e)}function P(r,e){let n=[];return e!==0n&&(n.push(g(1,0)),y(n,e)),f(n,3,T(r)),Uint8Array.from(n)}var S="Name not found";function L(r){let e=0,n={success:!1,error:""};for(;e<r.length;){let[t,o]=d(r,e);e=o;let s=Number(t)>>3,i=Number(t)&7;if(s===1&&i===0){let[u,l]=d(r,e);e=l,n.success=u!==0n}else if(s===2&&i===2){let[u,l]=d(r,e),a=l,c=a+Number(u);n.error=R.decode(r.subarray(a,c)),e=c}else e=h(r,e,i)}return n}function F(r){let e=0,n={peerId:new Uint8Array(0),error:""};for(;e<r.length;){let[t,o]=d(r,e);e=o;let s=Number(t)>>3,i=Number(t)&7;if(s===1&&i===2){let[u,l]=d(r,e),a=l,c=a+Number(u);n.peerId=r.subarray(a,c),e=c}else if(s===2&&i===2){let[u,l]=d(r,e),a=l,c=a+Number(u);n.error=R.decode(r.subarray(a,c)),e=c}else e=h(r,e,i)}return n}function h(r,e,n){if(n===0)return d(r,e)[1];if(n===2){let[t,o]=d(r,e);return o+Number(t)}if(n===5)return e+4;if(n===1)return e+8;throw new Error(`unsupported wire type ${n}`)}function v(r){let e=0,n={requestId:0n};for(;e<r.length;){let[t,o]=d(r,e);e=o;let s=Number(t)>>3,i=Number(t)&7;if(s===1&&i===0){let[u,l]=d(r,e);e=l,n.requestId=u}else if(s===13&&i===2){let[u,l]=d(r,e),a=l,c=a+Number(u);n.registerNameResponse=L(r.subarray(a,c)),e=c}else if(s===14&&i===2){let[u,l]=d(r,e),a=l,c=a+Number(u);n.resolveNameResponse=F(r.subarray(a,c)),e=c}else e=h(r,e,i)}return n}function B(r){let e=new Uint8Array(4+r.length);return new DataView(e.buffer).setUint32(0,r.length,!1),e.set(r,4),e}function w(r){return new DataView(r.buffer,r.byteOffset,4).getUint32(0,!1)}function V(r){if(r.length<4)return{success:!1,error:"short reply (no length prefix)"};let e=w(r.subarray(0,4));return r.length<4+e?{success:!1,error:`truncated frame (have ${r.length-4}, need ${e})`}:v(r.subarray(4,4+e)).registerNameResponse??{success:!1,error:"reply carried no register_name_response"}}function $(r){if(r.length<4)return{peerId:new Uint8Array(0),error:"short reply (no length prefix)"};let e=w(r.subarray(0,4));return r.length<4+e?{peerId:new Uint8Array(0),error:`truncated frame (have ${r.length-4}, need ${e})`}:v(r.subarray(4,4+e)).resolveNameResponse??{peerId:new Uint8Array(0),error:"reply carried no resolve_name_response"}}var k="/subway/p2p/1.0.0",Y=15e3,z=15e3,N=1<<20;function p(r){let e=r.reduce((o,s)=>o+s.length,0),n=new Uint8Array(e),t=0;for(let o of r)n.set(o,t),t+=o.length;return n}async function K(r){let e=[],n=0,t=-1;for await(let o of r){let s=o instanceof Uint8Array?o:o.subarray();if(e.push(s),n+=s.length,n>N)throw new Error("subway: reply exceeded max size");if(t<0&&n>=4&&(t=4+w(p(e).subarray(0,4)),t>N))throw new Error("subway: declared frame exceeds max size");if(t>=0&&n>=t)return p(e).subarray(0,t)}return p(e)}async function _(r){return x({...r?{privateKey:await b("Ed25519",r)}:{},transports:[A()],connectionEncrypters:[E()],streamMuxers:[U()],connectionGater:{denyDialMultiaddr:async()=>!1}})}async function I(r,e,n){let t=await r.dialProtocol(q(e),k,{signal:AbortSignal.timeout(Y)});t.send(B(n));let o;return Promise.race([K(t),new Promise((s,i)=>{o=setTimeout(()=>i(new Error("subway: request timed out")),z)})]).finally(()=>clearTimeout(o))}async function C(r){let e=await _(r.seed);try{let n=await I(e,r.relayMultiaddr,O(r.name,r.binding,r.requestId??1n)),t=V(n);return{success:t.success,error:t.error,peerId:e.peerId.toString()}}finally{await e.stop()}}async function G(r){let e=await _(r.seed);try{let n=await I(e,r.relayMultiaddr,P(r.name,r.requestId??1n)),t=$(n);if(t.peerId.length===0){let o=t.error||"name not found";return{outcome:o===S?"not_found":"lookup_failed",found:!1,peerId:"",error:o}}return{outcome:"found",found:!0,peerId:D(t.peerId,"base58btc"),error:""}}finally{await e.stop()}}export{C as registerDirect,G as resolveDirect};

package/install.ps1

@@ -108,8 +108,8 @@ try {
     }
 
     $major = [int]$nodeMatch.Groups['major'].Value
-    if ($major -lt 18) {
-        Write-Host "  Node.js $nodeVersion is too old. Version 18+ required." -ForegroundColor Red
+    if ($major -lt 20) {
+        Write-Host "  Node.js $nodeVersion is too old. Version 20+ required." -ForegroundColor Red
         Write-Host "  Install from https://nodejs.org/ and try again." -ForegroundColor Yellow
         Wait-BeforeExit
         exit 1
@@ -168,7 +168,6 @@ if ($npmExitCode -ne 0) {
 # Verify
 $cliCommandNames = Get-InstalledCliCommands
 $verifiedCommand = $null
-$verifiedCommandPath = $null
 $visaVersion = $null
 
 foreach ($commandName in $cliCommandNames) {
@@ -177,12 +176,9 @@ foreach ($commandName in $cliCommandNames) {
         continue
     }
 
-    # Capture the resolved executable path so the setup hand-off below runs
-    # exactly the binary verified here, not a fresh PATH lookup.
     $versionOutput = (& $commandInfo.Source --version 2>$null | Select-Object -First 1)
     if ($LASTEXITCODE -eq 0 -and $versionOutput) {
         $verifiedCommand = $commandName
-        $verifiedCommandPath = $commandInfo.Source
         $visaVersion = $versionOutput.Trim()
         break
     }
@@ -191,46 +187,12 @@ foreach ($commandName in $cliCommandNames) {
 Write-Host ""
 if ($verifiedCommand) {
     Write-Host "  Visa CLI $visaVersion installed." -ForegroundColor Green
-
-    # Hand off straight into setup so install -> setup -> signed-in is one
-    # uninterrupted flow. Hardening:
-    #  * Auto-launch only on an interactive console with input/output/error
-    #    all attached - setup must prompt and open a browser. Redirected
-    #    streams and CI fall back to printing the next step.
-    #  * Invoke $verifiedCommandPath (the path verified just above), not a
-    #    bare command name re-resolved through PATH.
-    #  * Pass only the literal "setup" argument - nothing caller-controlled.
-    if ($Host.Name -eq 'ConsoleHost' -and -not [Console]::IsInputRedirected -and -not [Console]::IsOutputRedirected -and -not [Console]::IsErrorRedirected -and -not $env:CI) {
-        Write-Host ""
-        Write-Host "  Continuing to setup..." -ForegroundColor Cyan
-        Write-Host ""
-        try {
-            $setupProcess = Start-Process -FilePath $verifiedCommandPath -ArgumentList @('setup') -Wait -NoNewWindow -PassThru -ErrorAction Stop
-        } catch {
-            Write-Host ""
-            Write-Host "  Setup could not start. Visa CLI is installed." -ForegroundColor Yellow
-            Write-Host "  PowerShell error: $($_.Exception.Message)" -ForegroundColor Yellow
-            Write-Host "  run '$verifiedCommand setup' when you're ready to finish." -ForegroundColor Yellow
-            Wait-BeforeExit
-            exit 1
-        }
-        if ($setupProcess.ExitCode -ne 0) {
-            Write-Host ""
-            Write-Host "  Setup exited before completion. Visa CLI is installed." -ForegroundColor Yellow
-            Write-Host "  run '$verifiedCommand setup' when you're ready to finish." -ForegroundColor Yellow
-            Wait-BeforeExit
-            exit 1
-        }
-        exit 0
-    } else {
-        Write-Host "  Run '$verifiedCommand setup' to get started." -ForegroundColor Cyan
-        Write-Host "  After setup, run /mcp inside Claude Code, not PowerShell, if Claude Code was already open." -ForegroundColor Cyan
-    }
+    Write-Host "  Connect an AI client with: $verifiedCommand connect <client>" -ForegroundColor Cyan
+    Write-Host "  Then ask your agent to call enroll_agent." -ForegroundColor Cyan
     Write-Host ""
 } else {
     $primaryCommand = $cliCommandNames | Select-Object -First 1
     Write-Host "  Installed but '$primaryCommand' was not runnable from PATH yet." -ForegroundColor Yellow
-    Write-Host "  Close and reopen PowerShell, then run: $primaryCommand setup" -ForegroundColor Yellow
-    Write-Host "  Run /mcp inside Claude Code after setup if you need to reconnect the MCP server." -ForegroundColor Yellow
+    Write-Host "  Close and reopen PowerShell, then run: $primaryCommand connect <client>" -ForegroundColor Yellow
     Write-Host ""
 }

package/install.sh

@@ -10,8 +10,8 @@
 _visa_install() {
 set -euo pipefail
 
-REQUIRED_NODE_MAJOR=18
-PACKAGE="@visa/cli"
+REQUIRED_NODE_MAJOR=20
+PACKAGE="@visa/cli@rc"
 
 # ── colours (disabled when piped) ─────────────────────────────────────────────
 if [ -t 1 ]; then
@@ -99,9 +99,6 @@ fi
 echo "$NPM_OUTPUT"
 
 # ── verify ────────────────────────────────────────────────────────────────────
-# Capture the absolute path resolved here so the setup hand-off below invokes
-# exactly the binary we just verified, instead of re-resolving "visa-cli"
-# through $PATH a second time.
 VISA_BIN=""
 VISA_VERSION=""
 if VISA_BIN="$(command -v visa-cli 2>/dev/null)"; then
@@ -111,40 +108,11 @@ fi
 echo ""
 if [ -n "$VISA_VERSION" ]; then
   ok "Visa CLI ${VISA_VERSION} installed."
-  # Hand off straight into setup so install -> setup -> signed-in is one
-  # uninterrupted flow. Hardening:
-  #  * Auto-launch only when output streams are real terminals and setup can
-  #    read from either stdin or /dev/tty. That keeps `curl ... | bash` usable:
-  #    the script arrives on stdin, while setup prompts still read from the
-  #    user's terminal. CI and redirected output print the next step instead.
-  #  * Invoke "$VISA_BIN" (the path verified just above), never a bare
-  #    "visa-cli" re-resolved through $PATH at call time.
-  #  * Pass only the literal "setup" argument — "$@" is never forwarded — so
-  #    nothing the script's caller controls reaches the installed binary.
-  if [ -t 1 ] && [ -t 2 ] && { [ -t 0 ] || [ -r /dev/tty ]; }; then
-    echo ""
-    info "Continuing to setup..."
-    echo ""
-    SETUP_EXIT=0
-    if [ -t 0 ]; then
-      "$VISA_BIN" setup || SETUP_EXIT=$?
-    else
-      "$VISA_BIN" setup </dev/tty || SETUP_EXIT=$?
-    fi
-    if [ "$SETUP_EXIT" -ne 0 ]; then
-      echo ""
-      warn "Setup exited before completion. Visa CLI is installed."
-      warn "run 'visa-cli setup' when you're ready to finish."
-      exit 1
-    fi
-    exit 0
-  else
-    info "Run 'visa-cli setup' to get started."
-    info "After setup, run /mcp inside Claude Code, not Terminal, if Claude Code was already open."
-  fi
+  info "Connect an AI client with: visa-cli connect <client>"
+  info "Then ask your agent to call enroll_agent."
 else
   warn "Installed, but 'visa-cli' was not found on PATH."
-  warn "You may need to restart your shell, then run: visa-cli setup"
+  warn "Restart your shell, then run: visa-cli connect <client>"
 fi
 echo ""
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@visa/cli",
-  "version": "4.1.0-rc.2",
-  "description": "AI-powered payments for Claude Code",
+  "version": "4.1.0-rc.200",
+  "description": "Visa CLI runtime for stable agent identity and separately authorized payment capabilities",
   "bin": {
     "visa-cli": "./bin/visa-cli.js",
     "visa": "./bin/visa-cli.js"
@@ -9,7 +9,7 @@
   "scripts": {
     "sync:server-json": "node scripts/sync-server-json.mjs",
     "check:server-json": "node scripts/sync-server-json.mjs --check",
-    "prebuild": "node scripts/sync-server-json.mjs && pnpm --filter @visa/money build && pnpm --filter @visa/crypto build && pnpm --filter subway-sdk build && pnpm --filter @visa-cli/tools build && pnpm --filter @visa/identity build && pnpm --filter @visa/wallet build && pnpm --filter @visa/wallet-tools build",
+    "prebuild": "node scripts/sync-server-json.mjs && pnpm --filter @visa/shared build && pnpm --filter @visa/observability build && pnpm --filter @visa/money build && pnpm --filter @visa/crypto build && pnpm --filter subway-sdk build && pnpm --filter @visa-cli/tools build && pnpm --filter @visa/identity build && pnpm --filter @visa/wallet build && pnpm --filter @visa/agent-mail build && pnpm --filter @visa/wallet-tools build && pnpm --filter @visa/checkout-engine build",
     "build": "tsc --noEmit && node esbuild.config.js",
     "prepack": "node scripts/sync-server-json.mjs --check",
     "dev": "tsc --watch",
@@ -20,9 +20,9 @@
     "test:unit:watch": "jest --config jest.config.js --watch",
     "test:unit:coverage": "jest --config jest.config.js --coverage",
     "test:smoke": "VISA_AUTH_URL=https://auth.visacli.sh jest --config jest.smoke.config.js",
+    "test:packed": "node scripts/packed-cli-smoke.mjs",
     "test:integration": "jest --config jest.integration.config.js",
     "test:e2e": "jest --config jest.e2e.config.js",
-    "test:catalog-e2e": "jest --config jest.catalog-e2e.config.js",
     "test:all": "npm run test:unit && npm run test:integration && npm run test:e2e",
     "prepublishOnly": "npm run build && npm test",
     "lint": "eslint src/**/*.ts",
@@ -42,45 +42,54 @@
   "author": "Visa Crypto Labs",
   "license": "SEE LICENSE IN LICENSE",
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.0",
+    "@modelcontextprotocol/core": "2.0.0",
+    "@modelcontextprotocol/ext-apps": "1.7.5",
+    "@modelcontextprotocol/server": "2.0.0",
+    "@ucp-js/sdk": "0.4.4",
     "commander": "^12.1.0",
-    "zod": "^3.23.0"
+    "punycode": "^2.3.1",
+    "zod": "^3.25.76"
   },
   "optionalDependencies": {
-    "libp2p": "^3.3.4",
-    "@libp2p/tcp": "^11.0.22",
-    "@libp2p/crypto": "^5.1.20",
     "@chainsafe/libp2p-noise": "^17.0.0",
     "@chainsafe/libp2p-yamux": "^8.0.1",
+    "@libp2p/crypto": "^5.1.22",
+    "@libp2p/tcp": "^11.0.26",
     "@multiformats/multiaddr": "^13.0.3",
+    "libp2p": "^3.3.8",
+    "playwright-core": "^1.48.2",
     "uint8arrays": "^6.1.1"
   },
   "devDependencies": {
+    "@changesets/changelog-git": "^0.2.1",
+    "@types/express": "^5.0.0",
+    "@changesets/cli": "^2.31.1",
+    "@types/jest": "^30.0.0",
+    "@types/node": "^26.1.0",
+    "@typescript-eslint/eslint-plugin": "^8.65.0",
+    "@typescript-eslint/parser": "^8.65.0",
+    "@visa-cli/tools": "workspace:*",
+    "@visa/agent-mail": "workspace:*",
+    "@visa/checkout-engine": "workspace:*",
     "@visa/crypto": "workspace:*",
-    "subway-sdk": "workspace:*",
+    "@visa/identity": "workspace:*",
     "@visa/money": "workspace:*",
+    "@visa/observability": "workspace:*",
+    "@visa/shared": "workspace:*",
     "@visa/wallet": "workspace:*",
     "@visa/wallet-tools": "workspace:*",
-    "@visa/observability": "workspace:*",
-    "@visa-cli/tools": "workspace:*",
-    "@changesets/changelog-git": "^0.2.1",
-    "@changesets/cli": "^2.31.0",
-    "@types/jest": "^30.0.0",
-    "@types/node": "^26.1.0",
-    "@typescript-eslint/eslint-plugin": "^8.63.0",
-    "@typescript-eslint/parser": "^8.63.0",
-    "@types/express": "^5.0.0",
     "esbuild": "^0.28.1",
-    "express": "^4.21.0",
     "eslint": "^10.0.2",
     "eslint-config-prettier": "^10.1.8",
+    "express": "^4.21.0",
     "jest": "^29.7.0",
-    "prettier": "^3.9.4",
-    "ts-jest": "^29.4.11",
+    "prettier": "^3.9.6",
+    "subway-sdk": "workspace:*",
+    "ts-jest": "^29.4.12",
     "typescript": "^5.7.0"
   },
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=20.0.0"
   },
   "mcpName": "io.github.visa-crypto-labs/visa-cli",
   "files": [
@@ -93,7 +102,6 @@
     "native/build-win.bat",
     "native/bin/win32-x64/visa-keychain-win.exe",
     "server.json",
-    "README.md",
-    "LICENSE"
+    "README.md"
   ]
 }

package/server.json

@@ -1,15 +1,15 @@
 {
-  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-10-17/server.schema.json",
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.visa-crypto-labs/visa-cli",
-  "version": "4.1.0-rc.2",
+  "version": "4.1.0-rc.200",
   "title": "Visa CLI",
-  "description": "AI-powered payments and creative tools for coding agents. Generate images, music, video, query crypto prices, and make purchases — all from your AI coding assistant.",
+  "description": "Pair a human-approved agent identity, configure payment capabilities separately, and discover and pay x402 services from your AI coding assistant.",
   "websiteUrl": "https://github.com/Visa-Crypto-Labs/Visa-mono/tree/main/packages/cli#readme",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@visa/cli",
-      "version": "4.1.0-rc.2",
+      "version": "4.1.0-rc.200",
       "transport": {
         "type": "stdio"
       },