@visa/cli 5.0.0-rc.417 → 5.0.0-rc.419

package/README.md

@@ -66,7 +66,7 @@ Can spend up to $100 more, asking you each time.
 
 or, for an agent connected to earn only, `Can earn.` A remaining spending step (such as adding funds) follows the limit. Status exposes the current connection and spending step in `connection`.
 
-Every connect result, and an unfinished setup in status, carries the one connect `status`: a word (`Connected`, `Finishing…`, `Needs you`, `Didn’t finish` or `Visa needs to look`), at most one owner action (`Continue`, `Remove`, `Retry` or `Contact support`) with its link, and a stable `agent` code. The terminal, MCP and Console say the same word.
+Every connect result, and an unfinished setup in status, carries the one connect `status`: a word (`Connected`, `Finishing…`, `Needs you`, `Didn’t finish` or `Visa needs to look`), at most one owner action (`Continue`, `Remove`, `Retry`, or the human hand-off the Console shows as Tell Visa) with its link, and a stable `agent` code. The terminal, MCP and Console say the same word.
 
 Limits set at connect start on **Ask me each time**. The owner can change them later in the Console. App connections ask before each payment.
 
@@ -169,12 +169,12 @@ stable launcher) serves the laptop column of the one Visa tool catalogue:
 | ---------------- | ---------------------------------------------------------------------------------------------------------------------------------- |
 | `status`         | Who this agent is, what is ready, and who takes the next step. Call first.                                                         |
 | `connect`        | Connect this computer (or replace its key). Returns the owner link; picks up approval automatically.                               |
-| `discover`       | Search paid services or probe one URL with GET and no body. Answers `unavailable` until the discovery source is live.                                   |
+| `discover`       | Search paid services, task marketplaces and open tasks, or probe one URL with GET and no body. `marketplaces: true` lists every task marketplace. Answers `unavailable` until the discovery source is live. |
 | `pay`            | Pay a URL that answers HTTP 402 with a Tempo charge (OUSD). Needs `max` including the network fee and a new `idempotency_key` per purchase. Optional `userRequest`: the person's words, kept by Visa for product analysis. **Moves real money.** |
 | `task_post`      | Post a claim task with a reward in USD and an `idempotency_key`; uses the existing payment limits and approval. |
-| `task_action`    | Claim, submit, accept or release a task. Claim and submit show the owner the task and reward; submission also binds the work fingerprint and shows a work preview. Approve once, then repeat the same call; submitting requires a merchant receipt for the reviewed work. Submit and accept pay and need `max`. Every action first needs Visa's clearance of that task. **Moves real money.** |
-| `task_list`      | List open screened tasks (or one named task with `task_id`) and short-lived clearances for task actions. Never pays. |
-| `task_status`    | Read a task’s status, reward and available claimant or submission. Never pays. |
+| `task_action`    | Claim, submit, accept or release a task. Claim and submit show the owner the task and reward; submission also binds the work fingerprint and shows a work preview. Approve once, then repeat the same call; submitting requires a merchant receipt for the reviewed work. With "Ask before paying" off, claim and release of a screened, unstaked task need no approval; submit and forfeit always ask. Submit and accept pay and need `max`. Visa screens the task before every signature and payment. A claim on a task another worker holds, or a submission on a task you no longer hold, is refused before the owner is asked. **Moves real money.** |
+| `task_list`      | List open screened tasks (or one named task with `task_id`). Never pays. |
+| `task_status`    | Read a task’s state, reward, claimant and submissions (ids and states only; its description only as Visa’s screen cleared it). Never pays. |
 | `payment_status` | Read one purchase by its `idempotency_key`: a plain read. To wait, repeat the call that started it (it holds on your turn).          |
 | `payment_cancel` | Cancel a purchase awaiting owner approval.                                                                                           |
 | `history`        | This agent's purchases, newest first.                                                                                              |
@@ -196,17 +196,26 @@ The shell adapter, `visa-tool`, prints the object as JSON and appends a
 
 When a `discover` query finds no services, its `next` hint offers `task_post` with
 the query as the suggested description. Posting requires an explicit `reward`
-(USD decimal), `idempotency_key`, optional `duration_seconds` (default 3600) and an
+(USD decimal), `idempotency_key`, optional `duration_seconds` (default 86400, a day) and an
 optional documented `terms_preset` (`standard`, `fast` or `flexible`; a staked task
-names one). Unknown fields are refused. Local rules give fast feedback; the edge must allow the exact draft before paying.
-Tasks needing review are not posted. The CLI obtains fresh clearance before each
-task action; callers do not supply it to `task_action`. Submit needs `text` and
+names one). Unknown fields are refused. Visa screens the exact draft before paying.
+Tasks needing review are not posted. Visa screens the task itself before every
+signature and payment; no agent carries a clearance. The work upload goes through
+`pay` to a public address only. Submit needs `text` and
 `max`; accept needs `max`. A missing or invalid `max` is corrected on the same task action with the same `idempotency_key`. Reuse the same arguments and idempotency key to resume; a task response
 does not prove payment settlement. Listed tasks show `net_reward` and any stake;
 a task that pays the worker nothing is never listed. A task outage or malformed task answer is named in
 `task_screening`, while successful service results remain available. `task_status` reads `/api/tasks/:id` without paying.
-Taskmarket defaults to its testnet on Tempo Moderato and to `api.taskmarket.dev`
-on mainnet; `VISA_TASKMARKET_URL=off` turns tasks off. The live testnet currently refuses access-key signatures;
+`discover` with `marketplaces: true` (or a query that names one) lists the task
+marketplaces Visa supports: what agents do on each, how its tasks are paid, which
+steps carry the agent's own signature, the fields Visa screens, and `available`
+(whether this computer's task tools reach it). Each listed task names its
+`marketplace`; pass it as `marketplace` to `task_post`, `task_action`,
+`task_status` or `task_list` (a task link names its own; with none, the first
+marketplace). Each marketplace's API defaults to its descriptor's for the network;
+`VISA_<ID>_URL` overrides it and `off` turns it off. For Taskmarket that is
+`VISA_TASKMARKET_URL`: its testnet on Tempo Moderato and `api.taskmarket.dev`
+on mainnet. The live testnet currently refuses access-key signatures;
 the harness models requested support separately.
 
 `task_post` accepts `require_verified: "tap:identity:verified"` (verified workers),
@@ -366,7 +375,7 @@ exact message or, on a device, an explicit literal prefix using
 Permissions currently last at most five minutes and the current key expiry;
 renewal needs new owner consent. Hosted signatures require exact owner consent
 and an independent owner vote each time; a hosted repeat of the request waits up
-to 40 seconds for the owner. A hosted Taskmarket claim, submit or release needs
+to 40 seconds for the owner. A Taskmarket claim, submit or release needs
 no clearance from the agent: Visa screens the task on every call and at the
 owner's approval, and refuses a changed or missing task before signing. A
 hosted connector is also served `task_status`, `task_action` and `task_post`:
@@ -429,7 +438,7 @@ Hosted discover searches by query. To price a URL, use discover with target in V
 
 A validation refusal describes the rejected input. It does not establish an earlier purchase’s outcome; read that purchase with payment_status and its original reference.
 
-A refused or unavailable task directs the agent to another permitted task. A task needing review directs it to Visa support; these refusals do not direct purchase-status reads.
+A refused or unavailable task directs the agent to another permitted task. A task needing review tells the agent not to repost it and to choose another task (a person at Visa reviews it); these refusals do not direct purchase-status reads.
 
 For a signing input conflict, repeat sign_action with its original inputs and idempotency_key. The repeat_original_sign_action continuation refers to signing; payment_status retrieves purchases.