@visa/cli 4.1.0-rc.228 → 4.1.0-rc.229

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -67,6 +67,39 @@ args = ["<npm root -g>/@visa/cli/dist/mcp-server/index.js"]
67
67
 
68
68
  There is no CLI subcommand for starting the MCP server directly — the MCP server is the bundled `dist/mcp-server/index.js` entrypoint, which `visa-cli connect <client>` registers for you.
69
69
 
70
+ ### UCP commerce bundle
71
+
72
+ Install the Visa pairing skill, discovery-first UCP shopping skill, bounded
73
+ Shopify checkout skill, and both Visa and Shopify UCP MCP entries in one step:
74
+
75
+ ```bash
76
+ visa agent skill --commerce --runtime codex
77
+ # runtimes with writable MCP config: codex, openclaw, hermes
78
+
79
+ # Before the first canary, also verify the pinned local UCP profile:
80
+ visa agent skill --commerce --runtime codex --check
81
+ ```
82
+
83
+ The shopping skill turns broad requests into a short seller/variant list and
84
+ requires an exact selection plus an all-in ceiling before checkout. The pinned
85
+ Shopify UCP server requires Node.js 22 or newer. A successful run
86
+ reports both MCP entries as mounted or already mounted; restart or reload the
87
+ agent before using the new tools. The installer never performs discovery or a
88
+ checkout itself. The install-only command exits successfully after writing the
89
+ bundle, but reports `commerceReady: false` / `ucp_check_required` until the
90
+ explicit `--check` gate passes.
91
+
92
+ Checked readiness runs the pinned `ucp doctor --skip-network` diagnostic and
93
+ reports the exact profile initialization command if local state is missing. It
94
+ also refuses to claim natural-language shopping readiness when a top-level
95
+ `ucp` or `shop` skill with a `SKILL.md` is present in the same runtime directory. The
96
+ installer reports those paths but never deletes or disables user-owned skills.
97
+
98
+ If the selected runtime already has a non-equivalent `shopify-ucp` entry, the
99
+ command fails without changing that entry or its environment, authentication,
100
+ timeout, or filtering fields. Rename or remove the existing entry explicitly
101
+ before rerunning; the installer does not silently replace or downgrade it.
102
+
70
103
  ### MCP 2026-07-28 compatibility
71
104
 
72
105
  This release speaks the modern, stateless MCP `2026-07-28` protocol over stdio and deliberately rejects the legacy `initialize` handshake. Your client must support per-request protocol envelopes and `server/discover`; update the client before upgrading Visa CLI if it still sends MCP `2025-*` traffic. `visa-cli connect` can write configuration for every listed client, but configuration support does not imply that an older installed client understands the new wire revision.