@visa/cli 4.1.0-rc.325 → 4.1.0-rc.327
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -11
- package/dist/cli.js +355 -361
- package/dist/mcp-server/index.js +275 -281
- package/dist/merchant-ucp-mcp/index.js +6 -6
- package/dist/skills/pair-visa-agent/SKILL.md +3 -9
- package/native/bin/darwin-arm64/visa-runtime-signer +0 -0
- package/native/bin/darwin-x64/visa-runtime-signer +0 -0
- package/native/bin/linux-arm64/visa-runtime-signer +0 -0
- package/native/bin/linux-x64/visa-runtime-signer +0 -0
- package/native/bin/win32-arm64/visa-runtime-signer.exe +0 -0
- package/native/bin/win32-x64/visa-keychain-win.exe +0 -0
- package/native/bin/win32-x64/visa-runtime-signer.exe +0 -0
- package/package.json +2 -12
- package/server.json +2 -2
- package/dist/subway-direct.mjs +0 -1
package/README.md
CHANGED
|
@@ -257,7 +257,7 @@ are classified as `legacy_door_removed`. Follow `agent_enroll` /
|
|
|
257
257
|
|
|
258
258
|
| Tool | Description |
|
|
259
259
|
|------|-------------|
|
|
260
|
-
| `agent_capabilities` | Derived live capability map (identity, wallet, card, mail, tap
|
|
260
|
+
| `agent_capabilities` | Derived live capability map (identity, wallet, card, mail, tap) with upgrade paths |
|
|
261
261
|
| `agent_login` | Start/claim the owner's device account session (required before a grant) |
|
|
262
262
|
| `wallet_status` | Delegated wallet address, network, and policy state |
|
|
263
263
|
| `wallet_policy_set` | Set per-transaction / daily caps (with human approval) |
|
|
@@ -410,7 +410,7 @@ and resolves its owner root from the independently claimed selection. The device
|
|
|
410
410
|
ceremonies (`connect-device`, `renew`, `resume`, `revoke --purpose tap`) travel the
|
|
411
411
|
public identity-device relay with native possession proofs, so a missing or expired
|
|
412
412
|
`visa agent login` never blocks them; the owner approval and owner revocation pages
|
|
413
|
-
remain required. Hosted purposes (`card:vic`, `wallet:x402`, hosted `tap
|
|
413
|
+
remain required. Hosted purposes (`card:vic`, `wallet:x402`, hosted `tap`)
|
|
414
414
|
still need a locally paired agent and its Auth session.
|
|
415
415
|
|
|
416
416
|
`visa agent keychain renew --agent <name-or-id> --purpose tap` creates an independently
|
|
@@ -435,15 +435,6 @@ handle until exact terminal readback, then deletes keys idempotently; `keychain
|
|
|
435
435
|
retries locked cleanup. A public revoked selection tombstone prevents legacy TAP fallback.
|
|
436
436
|
After cleanup completes, `connect-device` explicitly enrolls a new runtime.
|
|
437
437
|
|
|
438
|
-
### Native Subway owner certificates
|
|
439
|
-
|
|
440
|
-
Subway certificate issuance and renewal retired with the runtime certificate plane
|
|
441
|
-
(UNIFY D2); `agent keychain renew` and `revoke` accept only `--purpose tap`. A Subway
|
|
442
|
-
certificate an earlier build already selected keeps signing through the native
|
|
443
|
-
financial-presence key while its owner signature stays valid: WebSocket messages and
|
|
444
|
-
direct libp2p Noise authentication use structured native signing operations, and an
|
|
445
|
-
invalid, expired, revoked, or unavailable selection fails closed. Existing unpaired
|
|
446
|
-
mesh usage retains its current behavior.
|
|
447
438
|
|
|
448
439
|
### Protected managed-wallet rollout
|
|
449
440
|
|