@visa/cli 4.1.0-rc.99 → 5.0.0-rc.335

package/install.sh

@@ -10,7 +10,7 @@
 _visa_install() {
 set -euo pipefail
 
-REQUIRED_NODE_MAJOR=18
+REQUIRED_NODE_MAJOR=20
 PACKAGE="@visa/cli@rc"
 
 # ── colours (disabled when piped) ─────────────────────────────────────────────
@@ -109,7 +109,12 @@ echo ""
 if [ -n "$VISA_VERSION" ]; then
   ok "Visa CLI ${VISA_VERSION} installed."
   info "Connect an AI client with: visa-cli connect <client>"
-  info "Then ask your agent to call enroll_agent."
+  # The door, named as the shell sees it. This line used to name the retired
+  # setup ceremony, so an owner who followed it to the letter got
+  # legacy_door_removed at the end of a clean install (owner report,
+  # 2026-09-15). `pnpm lint:docs-sync` now reads this file.
+  info "Then create your agent with: visa agent enroll"
+  info "Or ask your agent to call agent_enroll. You approve it in the browser."
 else
   warn "Installed, but 'visa-cli' was not found on PATH."
   warn "Restart your shell, then run: visa-cli connect <client>"

package/package.json

@@ -1,15 +1,16 @@
 {
   "name": "@visa/cli",
-  "version": "4.1.0-rc.99",
+  "version": "5.0.0-rc.335",
   "description": "Visa CLI runtime for stable agent identity and separately authorized payment capabilities",
   "bin": {
     "visa-cli": "./bin/visa-cli.js",
-    "visa": "./bin/visa-cli.js"
+    "visa": "./bin/visa-cli.js",
+    "visa-runtime-converge": "./dist/managed-runtime/resolve-and-update.mjs"
   },
   "scripts": {
     "sync:server-json": "node scripts/sync-server-json.mjs",
     "check:server-json": "node scripts/sync-server-json.mjs --check",
-    "prebuild": "node scripts/sync-server-json.mjs && pnpm --filter @visa/shared build && pnpm --filter @visa/observability build && pnpm --filter @visa/money build && pnpm --filter @visa/crypto build && pnpm --filter subway-sdk build && pnpm --filter @visa-cli/tools build && pnpm --filter @visa/identity build && pnpm --filter @visa/wallet build && pnpm --filter @visa/agent-mail build && pnpm --filter @visa/wallet-tools build && pnpm --filter @visa/checkout-engine build",
+    "prebuild": "node scripts/sync-server-json.mjs && pnpm --filter @visa/shared build && pnpm --filter @visa/observability build && pnpm --filter @visa/money build && pnpm --filter @visa/crypto build && pnpm --filter @visa-cli/tools build && pnpm --filter @visa/identity build && pnpm --filter @visa/wallet build && pnpm --filter @visa/agent-mail build && pnpm --filter @visa/wallet-tools build",
     "build": "tsc --noEmit && node esbuild.config.js",
     "prepack": "node scripts/sync-server-json.mjs --check",
     "dev": "tsc --watch",
@@ -20,8 +21,10 @@
     "test:unit:watch": "jest --config jest.config.js --watch",
     "test:unit:coverage": "jest --config jest.config.js --coverage",
     "test:smoke": "VISA_AUTH_URL=https://auth.visacli.sh jest --config jest.smoke.config.js",
+    "test:packed": "node scripts/packed-cli-smoke.mjs",
     "test:integration": "jest --config jest.integration.config.js",
     "test:e2e": "jest --config jest.e2e.config.js",
+    "coinbase:onramp": "pnpm exec tsx tests/e2e/coinbase-onramp-harness/run.ts",
     "test:all": "npm run test:unit && npm run test:integration && npm run test:e2e",
     "prepublishOnly": "npm run build && npm test",
     "lint": "eslint src/**/*.ts",
@@ -41,51 +44,40 @@
   "author": "Visa Crypto Labs",
   "license": "SEE LICENSE IN LICENSE",
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.0",
-    "@ucp-js/sdk": "0.4.1",
+    "@modelcontextprotocol/ext-apps": "1.7.5",
+    "@modelcontextprotocol/server": "2.0.0",
+    "@ucp-js/sdk": "0.4.4",
     "commander": "^12.1.0",
     "punycode": "^2.3.1",
-    "zod": "^3.23.0"
-  },
-  "optionalDependencies": {
-    "libp2p": "^3.3.8",
-    "@libp2p/tcp": "^11.0.26",
-    "@libp2p/crypto": "^5.1.22",
-    "@chainsafe/libp2p-noise": "^17.0.0",
-    "@chainsafe/libp2p-yamux": "^8.0.1",
-    "@multiformats/multiaddr": "^13.0.3",
-    "uint8arrays": "^6.1.1",
-    "playwright-core": "^1.48.2"
+    "toml": "^4.3.0",
+    "yaml": "^2.9.0",
+    "zod": "^3.25.76"
   },
   "devDependencies": {
+    "@types/express": "^5.0.0",
+    "@types/jest": "^30.0.0",
+    "@types/node": "^26.1.0",
+    "@typescript-eslint/eslint-plugin": "^8.68.0",
+    "@typescript-eslint/parser": "^8.68.0",
+    "@visa-cli/tools": "workspace:*",
     "@visa/agent-mail": "workspace:*",
-    "@visa/checkout-engine": "workspace:*",
     "@visa/crypto": "workspace:*",
     "@visa/identity": "workspace:*",
-    "subway-sdk": "workspace:*",
     "@visa/money": "workspace:*",
+    "@visa/observability": "workspace:*",
+    "@visa/shared": "workspace:*",
     "@visa/wallet": "workspace:*",
     "@visa/wallet-tools": "workspace:*",
-    "@visa/observability": "workspace:*",
-    "@visa-cli/tools": "workspace:*",
-    "@changesets/changelog-git": "^0.2.1",
-    "@changesets/cli": "^2.31.0",
-    "@types/jest": "^30.0.0",
-    "@types/node": "^26.1.0",
-    "@typescript-eslint/eslint-plugin": "^8.65.0",
-    "@typescript-eslint/parser": "^8.65.0",
-    "@types/express": "^5.0.0",
     "esbuild": "^0.28.1",
-    "express": "^4.21.0",
     "eslint": "^10.0.2",
-    "eslint-config-prettier": "^10.1.8",
+    "express": "^4.21.0",
     "jest": "^29.7.0",
     "prettier": "^3.9.6",
     "ts-jest": "^29.4.12",
     "typescript": "^5.7.0"
   },
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=20.0.0"
   },
   "mcpName": "io.github.visa-crypto-labs/visa-cli",
   "files": [
@@ -99,6 +91,6 @@
     "native/bin/win32-x64/visa-keychain-win.exe",
     "server.json",
     "README.md",
-    "LICENSE"
+    "native/bin/*/visa-runtime-signer*"
   ]
 }

package/server.json

@@ -1,7 +1,7 @@
 {
-  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-10-17/server.schema.json",
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.visa-crypto-labs/visa-cli",
-  "version": "4.1.0-rc.99",
+  "version": "5.0.0-rc.335",
   "title": "Visa CLI",
   "description": "Pair a human-approved agent identity, configure payment capabilities separately, and discover and pay x402 services from your AI coding assistant.",
   "websiteUrl": "https://github.com/Visa-Crypto-Labs/Visa-mono/tree/main/packages/cli#readme",
@@ -9,7 +9,7 @@
     {
       "registryType": "npm",
       "identifier": "@visa/cli",
-      "version": "4.1.0-rc.99",
+      "version": "5.0.0-rc.335",
       "transport": {
         "type": "stdio"
       },

package/dist/checkout-engine/adapters/generic.d.ts

@@ -1,23 +0,0 @@
-import type { Page, Locator } from 'playwright-core';
-import type { DetectResult, FieldEntry, FieldMap } from '../detect.js';
-import type { CardCredential } from '../instrument.js';
-import type { Contact, FillResult, FilledField } from '../types.js';
-export interface CheckoutAdapter {
-    name: string;
-    matches(detected: DetectResult): boolean;
-    prepareContact?: (page: Page, contact: Contact) => Promise<FillResult>;
-    fill(page: Page, fields: FieldMap, credential: CardCredential, contact: Contact): Promise<FillResult>;
-}
-export declare function resolveLocator(page: Page, entry: FieldEntry): Locator;
-export declare function scrubFillErrorMessage(message: string, value: string): string;
-export declare function fillContactFieldMap(page: Page, fields: FieldMap, contact: Contact, opts?: {
-    fillTimeoutMs?: number;
-}): Promise<FilledField[]>;
-export declare function fillFieldMap(page: Page, fields: FieldMap, credential: CardCredential, contact: Contact, opts?: {
-    fillTimeoutMs?: number;
-}): Promise<FilledField[]>;
-export declare class GenericAdapter implements CheckoutAdapter {
-    name: string;
-    matches(_detected: DetectResult): boolean;
-    fill(page: Page, fields: FieldMap, credential: CardCredential, contact: Contact): Promise<FillResult>;
-}

package/dist/checkout-engine/adapters/generic.js

@@ -1,216 +0,0 @@
-// Generic adapter. Drives the detect.ts field map: fills text inputs and
-// <select> dropdowns, handles split vs combined expiry, two- vs four-digit
-// years, and split first/last name. It is the fallback that should beat any
-// well-behaved guest checkout on its own.
-import { maskCvc, maskExpiry, maskPan, redactContact } from '../evidence.js';
-function pad2(n) {
-    return String(n).padStart(2, '0');
-}
-export function resolveLocator(page, entry) {
-    if (entry.frame)
-        return page.frameLocator(entry.frame).locator(entry.locator);
-    return page.locator(entry.locator);
-}
-function matchOption(options, wanted) {
-    for (const w of wanted) {
-        const lc = w.toLowerCase();
-        for (const o of options) {
-            if (o.value === w)
-                return o.value;
-            if (o.value.toLowerCase() === lc)
-                return o.value;
-            if (o.text.toLowerCase() === lc)
-                return o.value;
-        }
-    }
-    // looser: contains
-    for (const w of wanted) {
-        const lc = w.toLowerCase();
-        for (const o of options)
-            if (o.text.toLowerCase().includes(lc))
-                return o.value;
-    }
-    return null;
-}
-const MONTH_NAMES = [
-    'january',
-    'february',
-    'march',
-    'april',
-    'may',
-    'june',
-    'july',
-    'august',
-    'september',
-    'october',
-    'november',
-    'december',
-];
-function monthOptionValue(options, month) {
-    return matchOption(options, [pad2(month), String(month), MONTH_NAMES[month - 1] ?? '']);
-}
-function yearOptionValue(options, year) {
-    return matchOption(options, [String(year), pad2(year % 100), String(year % 100)]);
-}
-// value chosen for a select-style role, or the typed string for inputs.
-function expCombinedValue(entry, month, year) {
-    const mm = pad2(month);
-    const yy = pad2(year % 100);
-    const max = entry.maxlength ?? 0;
-    // A maxlength of exactly 4 means MMYY with no separator.
-    if (max === 4)
-        return `${mm}${yy}`;
-    return `${mm}/${yy}`;
-}
-// Playwright failure messages embed the attempted value in their call log
-// (`- fill("4242…")`, `- selectOption("123")`), so an unscrubbed error from a
-// FAILED fill would write the exact secret it was typing (cvc/DAVV, expiry,
-// contact PII) into evidence — and from there into the persisted receipt.
-// Scrub the call-log payloads and every literal occurrence of the value.
-export function scrubFillErrorMessage(message, value) {
-    let scrubbed = message.replace(/\b(fill|selectOption)\("(?:[^"\\]|\\.)*"\)/g, '$1("<redacted>")');
-    if (value)
-        scrubbed = scrubbed.split(value).join('<redacted>');
-    return scrubbed;
-}
-const DEFAULT_FILL_TIMEOUT_MS = 5000;
-async function fillOne(page, role, entry, value, displayValue, fillTimeoutMs) {
-    const base = {
-        role,
-        locator: entry.locator,
-        confidence: entry.confidence,
-        source: entry.source,
-        frame: entry.frame,
-        value: displayValue,
-    };
-    try {
-        const loc = resolveLocator(page, entry);
-        if (entry.tag === 'select') {
-            await loc.selectOption(value, { timeout: fillTimeoutMs });
-        }
-        else {
-            await loc.fill(value, { timeout: fillTimeoutMs });
-        }
-        return { ...base, ok: true };
-    }
-    catch (err) {
-        return { ...base, ok: false, error: scrubFillErrorMessage(err.message, value) };
-    }
-}
-async function fillFields(page, fields, credential, contact, opts = {}) {
-    const fillTimeoutMs = opts.fillTimeoutMs ?? DEFAULT_FILL_TIMEOUT_MS;
-    const filled = [];
-    const fullName = contact.fullName ?? credential?.cardholderName;
-    const first = contact.firstName ?? fullName?.split(/\s+/)[0];
-    const last = contact.lastName ?? fullName?.split(/\s+/).slice(1).join(' ');
-    // Order matters a little: contact/name before card is harmless, but we fill
-    // card fields explicitly per role so order is not load-bearing.
-    const jobs = [];
-    const add = (role, entry, value, display) => {
-        if (!entry)
-            return;
-        // Skip fields that are not currently visible (e.g. a collapsed accordion
-        // panel or a not-yet-reached step). The executor reveals them and re-fills.
-        if (entry.visible === false)
-            return;
-        jobs.push({
-            role,
-            entry,
-            run: async () => fillOne(page, role, entry, value(), display(), fillTimeoutMs),
-        });
-    };
-    if (credential) {
-        add('number', fields.number, () => credential.pan, () => maskPan(credential.pan));
-        add('cvc', fields.cvc, () => credential.cvc, () => maskCvc(credential.cvc));
-    }
-    if (fullName)
-        add('name', fields.name, () => fullName, () => redactContact('name', fullName));
-    if (first)
-        add('nameFirst', fields.nameFirst, () => first, () => redactContact('nameFirst', first));
-    if (last)
-        add('nameLast', fields.nameLast, () => last, () => redactContact('nameLast', last));
-    // Expiry display values are always redacted: the expiry is part of the
-    // keyable credential (DPAN + expiry + DAVV) and never enters the log.
-    if (credential && fields.expCombined) {
-        const e = fields.expCombined;
-        const v = expCombinedValue(e, credential.expMonth, credential.expYear);
-        add('expCombined', e, () => v, () => maskExpiry());
-    }
-    if (credential && fields.expMonth) {
-        const e = fields.expMonth;
-        const value = e.tag === 'select'
-            ? (monthOptionValue(e.options ?? [], credential.expMonth) ?? pad2(credential.expMonth))
-            : pad2(credential.expMonth);
-        add('expMonth', e, () => value, () => maskExpiry());
-    }
-    if (credential && fields.expYear) {
-        const e = fields.expYear;
-        let value;
-        if (e.tag === 'select') {
-            value = yearOptionValue(e.options ?? [], credential.expYear) ?? String(credential.expYear);
-        }
-        else if ((e.maxlength ?? 0) === 2) {
-            value = pad2(credential.expYear % 100);
-        }
-        else {
-            value = String(credential.expYear);
-        }
-        add('expYear', e, () => value, () => maskExpiry());
-    }
-    // Contact / shipping. Display values are always redacted: these are PII and
-    // the evidence log is built to be persistable.
-    if (contact.email)
-        add('email', fields.email, () => contact.email, () => redactContact('email', contact.email));
-    if (contact.phone)
-        add('phone', fields.phone, () => contact.phone, () => redactContact('phone', contact.phone));
-    if (contact.addressLine1)
-        add('addressLine1', fields.addressLine1, () => contact.addressLine1, () => redactContact('addressLine1', contact.addressLine1));
-    if (contact.addressLine2)
-        add('addressLine2', fields.addressLine2, () => contact.addressLine2, () => redactContact('addressLine2', contact.addressLine2));
-    if (contact.city)
-        add('city', fields.city, () => contact.city, () => redactContact('city', contact.city));
-    if (contact.postalCode)
-        add('postalCode', fields.postalCode, () => contact.postalCode, () => redactContact('postalCode', contact.postalCode));
-    if (fields.state && contact.state) {
-        const e = fields.state;
-        const wanted = contact.state;
-        const value = e.tag === 'select' ? (matchOption(e.options ?? [], [wanted]) ?? wanted) : wanted;
-        add('state', e, () => value, () => redactContact('state', value));
-    }
-    if (fields.country && contact.country) {
-        const e = fields.country;
-        const value = e.tag === 'select'
-            ? (matchOption(e.options ?? [], [contact.country]) ?? contact.country)
-            : contact.country;
-        add('country', e, () => value, () => redactContact('country', value));
-    }
-    for (const j of jobs) {
-        const r = await j.run();
-        if (r)
-            filled.push(r);
-    }
-    return filled;
-}
-// Credential-free contact prefill for merchants that must calculate shipping,
-// tax, and the final total before a human reviews the payment.
-export async function fillContactFieldMap(page, fields, contact, opts = {}) {
-    return fillFields(page, fields, null, contact, opts);
-}
-// The shared post-approval fill routine used by every adapter.
-export async function fillFieldMap(page, fields, credential, contact, opts = {}) {
-    return fillFields(page, fields, credential, contact, opts);
-}
-export class GenericAdapter {
-    name = 'generic';
-    matches(_detected) {
-        // The generic adapter is the universal fallback; it always matches.
-        return true;
-    }
-    async fill(page, fields, credential, contact) {
-        const filled = await fillFieldMap(page, fields, credential, contact);
-        return {
-            ok: filled.some((f) => f.role === 'number' && f.ok),
-            filled,
-        };
-    }
-}

package/dist/checkout-engine/adapters/index.d.ts

@@ -1,10 +0,0 @@
-import type { DetectResult } from '../detect.js';
-import type { CheckoutAdapter } from './generic.js';
-export type { CheckoutAdapter } from './generic.js';
-export { GenericAdapter } from './generic.js';
-export { ShopifyAdapter } from './shopify.js';
-export { StripeLikeAdapter } from './stripe-like.js';
-export { fillFieldMap, resolveLocator } from './generic.js';
-export declare function selectAdapter(detected: DetectResult, pageKind?: {
-    shopify?: boolean;
-}): CheckoutAdapter;

package/dist/checkout-engine/adapters/index.js

@@ -1,24 +0,0 @@
-// Adapter registry. Specific adapters get first crack; the generic adapter is
-// the universal fallback and always matches last. Selection is a pure
-// function of an already-run detection — adapters never re-detect.
-import { GenericAdapter } from './generic.js';
-import { ShopifyAdapter } from './shopify.js';
-import { StripeLikeAdapter } from './stripe-like.js';
-export { GenericAdapter } from './generic.js';
-export { ShopifyAdapter } from './shopify.js';
-export { StripeLikeAdapter } from './stripe-like.js';
-export { fillFieldMap, resolveLocator } from './generic.js';
-const FALLBACK = new GenericAdapter();
-export function selectAdapter(detected, pageKind = {}) {
-    // Shopify owns the outer checkout form and can still delegate card fields to
-    // an iframe, so it gets first crack and reuses fillFieldMap for both.
-    const shopify = new ShopifyAdapter(detected);
-    if (pageKind.shopify === true)
-        return shopify;
-    const specific = [shopify, new StripeLikeAdapter()];
-    for (const a of specific) {
-        if (a.matches(detected))
-            return a;
-    }
-    return FALLBACK;
-}

package/dist/checkout-engine/adapters/shopify.d.ts

@@ -1,31 +0,0 @@
-import type { Page } from 'playwright-core';
-import { type PageAmountRead } from '../amount.js';
-import { type DetectResult, type FieldMap } from '../detect.js';
-import type { CardCredential } from '../instrument.js';
-import type { Contact, FillResult } from '../types.js';
-import { type CheckoutAdapter } from './generic.js';
-type ShopifySummary = {
-    subtotalMinor: number | null;
-    shippingMinor: number | null;
-    taxMinor: number | null;
-    discountMinor: number;
-    totalMinor: number | null;
-    currency: string | null;
-    verified: boolean;
-};
-export declare function parseShopifySummary(text: string): ShopifySummary;
-export declare function readShopifyAmount(page: Page, requireVerified: boolean): Promise<PageAmountRead>;
-export declare function readStableShopifyAmount(page: Page, timeoutMs?: number): Promise<PageAmountRead>;
-export declare function isShopifyCheckoutPage(page: Page): Promise<boolean>;
-export declare function detectShopifyChallenge(page: Page): Promise<{
-    signal: string;
-} | null>;
-export declare class ShopifyAdapter implements CheckoutAdapter {
-    private readonly detected;
-    name: string;
-    constructor(detected: DetectResult);
-    matches(detected: DetectResult): boolean;
-    prepareContact(page: Page, contact: Contact): Promise<FillResult>;
-    fill(page: Page, _fields: FieldMap, credential: CardCredential, _contact: Contact): Promise<FillResult>;
-}
-export {};