@visa/cli 4.1.0-rc.316 → 4.1.0-rc.318

package/README.md

@@ -245,6 +245,16 @@ no longer in `tools/list`, and a direct call by name answers
 `legacy_door_removed` naming the one door for a new agent,
 `visa agent enroll-protected`.
 
+A leftover direct-mode `turnkey.json` is not usable wallet authority.
+`agent_capabilities` reports wallet status `legacy_direct_mode` and unavailable;
+`get_status` directs even an already paired agent to `agent_enroll`. Have the
+owner complete `visa agent enroll` before attempting payment.
+
+Auth HTTP 410 responses with `code: route_retired` or `error: route_retired`
+are classified as `legacy_door_removed`. Follow `agent_enroll` /
+`visa agent enroll`; retrying the retired route does not restore it.
+
+
 | Tool | Description |
 |------|-------------|
 | `agent_capabilities` | Derived live capability map (identity, wallet, card, mail, tap, subway) with upgrade paths |
@@ -300,27 +310,14 @@ visa activity
 visa receipt <receipt-id>
 
 # Primary same-machine setup
-visa setup start "Name" --rails card,wallet
-visa setup status
+visa agent enroll --wait
 
-# Existing-account session recovery (separate from identity pairing)
+# Existing-account session
 visa agent login
-visa agent login-claim
-
-# Recovery compatibility for a legacy split-device ceremony already in flight
-visa agent create
-visa agent claim <pairing-id> --runtime <name> --context "<purpose>"
-visa agent verify <pairing-id> <code>
-visa agent pairing-resume <pairing-id>
-visa agent cancel [pairing-id]
 visa agent list
 
-# Human-approved VIC browser purchase
-visa checkout review <checkout-url> <amount>
-visa checkout pay <review-id>
-visa mandate start <checkout-url> <ceiling>
-visa mandate budget <ceiling>
-visa mandate list
+# Retired doors (they refuse — do not retry)
+# visa setup start / visa checkout pay / visa mandate start
 
 # MCP client connections
 visa connections                    # detected / configured / loaded
@@ -366,8 +363,8 @@ A cap or allowlist said no; nothing was signed. Raise caps only via `visa wallet
 That URL isn't payment-gated — probe the service's actual paid route (`wallet_probe` / `visa find`).
 
 **Setup ended `expired` or `cancelled`**
-The ceremony timed out — restart with `visa setup start "Name"`, then follow
-`visa setup status` until it reports the next action.
+The ceremony timed out — restart with `visa agent enroll --wait`. Do not retry
+`visa setup start`; that door is removed.
 
 **Tools don't appear in the AI client**
 Restart the client or reconnect the MCP server (`/mcp` → `visa-cli` → reconnect in Claude Code). Re-run `visa-cli connect <client>` to rewrite the config.