@visa/cli 4.1.0-rc.327 → 4.1.0-rc.329

package/README.md

@@ -12,7 +12,7 @@ The protected product flow has three explicit parts:
 1. **Enrollment** — call `agent_enroll` or have the owner run `visa agent enroll`
    and approves the exact device and its limits in the browser. The private key
    stays on the runtime device. Retired setup, pairing, handoff, and per-rail
-   grant names return `legacy_door_removed`; they never resume or proxy work.
+   grant names are not registered at all; they never resume or proxy work.
 2. **Capabilities** — payment methods, spend grants, email and directory
    bindings are configured separately, each with its own human-visible terms.
 3. **Use** — when a separately provisioned capability exists, the wallet and
@@ -241,18 +241,19 @@ is required so the CLI never guesses which agent can spend.
 ## MCP tools (v4 surface)
 
 Rows marked **Removed** are kept so old transcripts still resolve: the tool is
-no longer in `tools/list`, and a direct call by name answers
-`legacy_door_removed` naming the one door for a new agent,
-`visa agent enroll-protected`.
+no longer in `tools/list`, and a direct call by name is an unknown-tool error.
+The one door for a new agent is `visa agent enroll` / `agent_enroll`.
 
 A leftover direct-mode `turnkey.json` is not usable wallet authority.
 `agent_capabilities` reports wallet status `legacy_direct_mode` and unavailable;
 `get_status` directs even an already paired agent to `agent_enroll`. Have the
 owner complete `visa agent enroll` before attempting payment.
 
-Auth HTTP 410 responses with `code: route_retired` or `error: route_retired`
-are classified as `legacy_door_removed`. Follow `agent_enroll` /
-`visa agent enroll`; retrying the retired route does not restore it.
+A deploy that predates the tombstone removal can still answer HTTP 410 with
+`code: route_retired`; the CLI classifies that as `legacy_door_removed`. Once
+the removal is deployed the same paths answer a typed JSON 404
+(`ROUTE_NOT_FOUND`). Either way, follow `agent_enroll` / `visa agent enroll`;
+retrying the retired route does not restore it.
 
 
 | Tool | Description |