@visa/cli 4.1.0-rc.77 → 4.1.0-rc.79

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -111,11 +111,21 @@ exact web origin that started the flow.
111
111
  Session recovery currently fails closed on Windows until the CLI can apply and
112
112
  verify an owner-only ACL for this pending verifier.
113
113
 
114
- ## Existing wallet capability: caps, then funding
114
+ ## Wallet capability: grant, caps, then funding
115
115
 
116
- These commands apply only to a pre-cutover/test runtime that already has a
117
- valid, separately provisioned wallet credential. Pairing again cannot create or
118
- repair that payment capability.
116
+ Pairing never creates or repairs payment authority the owner delegates it in
117
+ a separate grant ceremony, and re-pairing is not a substitute:
118
+
119
+ ```bash
120
+ visa agent login # owner account session, once
121
+ visa agent grant-wallet <agent-id> --ceiling 25 --per-transaction 1 --wait
122
+ ```
123
+
124
+ The owner approves once in the browser; the runtime polls to activation and
125
+ receives a delegated, capped, revocable signer (it can never mint one itself).
126
+ `visa agent revoke <agent-id>` withdraws spending without touching identity.
127
+
128
+ With a wallet delegated, set caps before funding:
119
129
 
120
130
  ```bash
121
131
  visa wallet limits --per-transaction 0.25 --daily 2.00 # BEFORE any funds arrive
@@ -151,7 +161,11 @@ command.
151
161
  | Tool | Description |
152
162
  |------|-------------|
153
163
  | `enroll_agent` | Two-step identity-only pairing: start opens the exact runtime/key review; `{"action":"claim"}` activates and stores the agent identity |
154
- | `wallet_status` | Separately provisioned wallet address, network, and policy state |
164
+ | `agent_capabilities` | Derived live capability map (identity, wallet, card, mail, tap, subway) with upgrade paths |
165
+ | `setup_agent` | Next-step resolver for the wallet rail: `{state, nextAction, blockedBy, steps}`; never spends |
166
+ | `agent_login` | Start/claim the owner's device account session (required before a grant) |
167
+ | `agent_connect` / `agent_connect_poll` | Initiate an owner-approved spending grant, then poll it to activation |
168
+ | `wallet_status` | Delegated wallet address, network, and policy state |
155
169
  | `wallet_policy_set` | Set per-transaction / daily caps (with human approval) |
156
170
  | `wallet_discover` | Sweep x402 directories for services, with live re-probing |
157
171
  | `wallet_probe` | Fetch a service's live 402 challenge without paying |