@visa/cli 5.0.0-rc.372 → 5.0.0-rc.374

package/README.md

@@ -211,12 +211,16 @@ are kept as `*.replaced-<time>` backups). `--restart` never touches the
 installed `pair-visa-agent` skill; `--force-skill` replaces it, moving a locally
 edited copy to `.visa-cli-managed/backups/` first.
 
-On macOS and Linux the private identity key lives under `~/.visa-cli/` in an
-owner-only directory with file mode `0600`. It is an exportable local file:
-copying it transfers identity proof, and losing it blocks new proofs, because
-same-agent key recovery does not exist yet. Protocol-v2 identity pairing fails
-closed on Windows until the CLI can apply and verify an owner-only Windows ACL.
-The approval link carries no credential and no private key.
+The agent's keys (wallet, card and TAP) live in the operating system's
+store: the macOS Keychain, Windows data protection (DPAPI), or the Linux Secret
+Service; a server without one uses an owner-only `0600` file only when
+`VISA_RUNTIME_CUSTODY_PROFILE=headless` is set. There are no password prompts,
+and software running as you on this machine can use the keys, so treat the
+machine as the key: pause or revoke the agent in the Console if it is lost. To
+move an agent to another computer, run `visa connect` there and choose
+**Replacing** on the approval page: the same agent gets new keys, keeps its
+budget and history, and the old keys are retired. The approval link carries no
+credential and no private key.
 
 ## Limits: what may be spent
 
@@ -480,6 +484,7 @@ Deterministic preconditions always resolve to a specific code:
 | Local identity record missing for the selected agent (`pay`) | `identity_required` | `caller` |
 | Identity root migrated; direct signing retired (`pay`) | `universal_required_managed_only` | `platform` |
 | Managed wallet limits are owner-set (`limits` with caps) | `managed_limits_owner_controlled` | `platform` |
+| The owner's spending approval for this agent has run out (`pay`, card purchases); nothing was charged, and the owner renews it at the `remedyUrl` limits page with the same limits | `grant_expired` | `platform` |
 | Listing is not x402 (`pay`) | `invalid_argument` | `caller` |
 | Activity id not found or not attributable (`history {id}`) | `activity_entry_not_found` | `caller` |
 | The bundled signer is missing from this install (`agent_enroll`, `pay`) | `native_runtime_signer_not_installed` | `platform` |