b098ef2f6e
Move authentication ownership into CLI ( #261 )
...
* Move authentication ownership into CLI
Committed-By-Agent: codex
Co-authored-by: codex <noreply@openai.com >
* Test legacy CLI auth storage compatibility
Committed-By-Agent: codex
Co-authored-by: codex <noreply@openai.com >
---------
Co-authored-by: codex <noreply@openai.com >
2026-08-25 11:04:14 -04:00
c949b62610
Validate SDK resource responses ( #260 )
...
* Validate SDK resource responses
Committed-By-Agent: codex
Co-authored-by: codex <noreply@openai.com >
* Fix approval response fixtures
Committed-By-Agent: codex
Co-authored-by: codex <noreply@openai.com >
* Use Zod for SDK response validation
Committed-By-Agent: codex
Co-authored-by: codex <noreply@openai.com >
Committed-By-Agent: codex
Co-authored-by: codex <noreply@openai.com >
Committed-By-Agent: codex
Co-authored-by: codex <noreply@openai.com >
* Keep spend request responses forward-compatible
Committed-By-Agent: codex
Co-authored-by: codex <noreply@openai.com >
* Normalize approval response URLs
Committed-By-Agent: codex
Co-authored-by: codex <noreply@openai.com >
---------
Co-authored-by: codex <noreply@openai.com >
2026-08-25 10:29:37 -04:00
f7e62f792c
chore(deps): bump nanoid from 3.3.17 to 3.3.18 ( #253 )
...
Bumps [nanoid](https://github.com/ai/nanoid ) from 3.3.17 to 3.3.18.
- [Release notes](https://github.com/ai/nanoid/releases )
- [Changelog](https://github.com/ai/nanoid/blob/3.3.18/CHANGELOG.md )
- [Commits](https://github.com/ai/nanoid/compare/3.3.17...3.3.18 )
---
updated-dependencies:
- dependency-name: nanoid
dependency-version: 3.3.18
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 11:17:06 -04:00
9612d71d97
update npm deps ( #238 )
...
* update npm deps
* fix ci
2026-08-10 14:04:29 -04:00
20a964f912
chore(deps): bump ip-address from 10.2.0 to 10.3.1 ( #226 )
...
Bumps [ip-address](https://github.com/beaugunderson/ip-address ) from 10.2.0 to 10.3.1.
- [Release notes](https://github.com/beaugunderson/ip-address/releases )
- [Commits](https://github.com/beaugunderson/ip-address/compare/v10.2.0...v10.3.1 )
---
updated-dependencies:
- dependency-name: ip-address
dependency-version: 10.3.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 13:06:32 -04:00
35023ae48c
fix: bump versions to latest ( #132 )
2026-05-29 12:13:28 -04:00
0387b25ee6
fix: sanitize server-returned text to prevent ANSI escape injection ( #85 )
...
Server-returned string fields (merchant_name, line_items[].name,
billing_address.*, payment method brand/nickname) are now sanitized
before rendering in Ink components using strip-ansi plus control
character stripping. This prevents terminal escape sequence injection
that could spoof the approval UI.
Committed-By-Agent: claude
Co-authored-by: Ben Davis <ben@bencdavis.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-05-10 15:38:29 -04:00
c78c467be8
chore: bump mppx to 0.6.16 ( #83 )
2026-05-07 15:06:00 -04:00
dac4966646
fix: bump incur to 0.4.5 to fix misleading validation errors ( #82 )
...
When context was provided but too short (< 100 chars), the CLI
incorrectly reported "Error: missing required argument <context>"
instead of the actual Zod validation message. This was fixed
upstream in incur PR #138 (incur@0.4.5) which distinguishes
between truly missing fields and invalid values.
Fixes LINK_AI_WALLET-208
Committed-By-Agent: claude
2026-05-07 09:56:56 -07:00
317eba8a1f
Add viem as an explicit dependency ( #61 )
2026-05-02 12:54:04 -04:00
eb2115d658
migrate commander -> incur enabling mcp server ( #18 )
...
* migrate commander -> incur enabling mcp server
* save
* use incur skill handling and clarify to use mcp if running
* add changeset
* fix type error
* fix fmt
* fix tests
* fmt
2026-04-27 13:37:10 -04:00
91ce9f035d
Update notifier
...
Use update notifier to indicate new versions. In TTY outputs, this is a very standard update-notifier integration. For JSON outputs consumed by agents, we include the info in the auth status command to not interfere with agents parsing output in other commands.
2026-04-25 17:30:46 -04:00
95a3d26f15
Bump postcss from 8.5.8 to 8.5.10 ( #13 )
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.8 to 8.5.10.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.8...8.5.10 )
---
updated-dependencies:
- dependency-name: postcss
dependency-version: 8.5.10
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-25 15:27:09 -04:00
3b372f2209
Initial commit
...
Co-authored-by: ben-davis <2607068+ben-davis@users.noreply.github.com >
Co-authored-by: bensnell-stripe <47830399+bensnell-stripe@users.noreply.github.com >
Co-authored-by: danhilltech <876990+danhilltech@users.noreply.github.com >
Co-authored-by: kreese-stripe <215516483+kreese-stripe@users.noreply.github.com >
Co-authored-by: qaisjp <923242+qaisjp@users.noreply.github.com >
Co-authored-by: raubrey-stripe <185865758+raubrey-stripe@users.noreply.github.com >
Co-authored-by: shirleyz-stripe <264516373+shirleyz-stripe@users.noreply.github.com >
Co-authored-by: sjkaliski <602845+sjkaliski@users.noreply.github.com >
2026-04-23 17:22:09 -04:00
Steve Kaliski