@a8techads/cli 0.3.0 → 0.4.1

package/dist/a8techads.js

@@ -2628,6 +2628,18 @@ async function login(opts = {}) {
   const authUrl = opts.authUrl ?? DEFAULT_AUTH_URL;
   const tokenEndpoint = `${authUrl}/.ory/hydra/oauth2/token`;
   const authorizationEndpoint = `${authUrl}/.ory/hydra/oauth2/auth`;
+  if (opts.forceLogin) {
+    const existingCreds = loadCredentials();
+    if (existingCreds.profiles[profileName]) {
+      delete existingCreds.profiles[profileName];
+      saveCredentials(existingCreds);
+    }
+    const existingCtx = loadContext();
+    if (existingCtx.profiles[profileName]) {
+      delete existingCtx.profiles[profileName];
+      saveContext(existingCtx);
+    }
+  }
   const codeVerifier = generateRandomCodeVerifier();
   const codeChallenge = await calculatePKCECodeChallenge(codeVerifier);
   const state = generateRandomState();
@@ -3200,6 +3212,58 @@ function createProfileCommand() {
   return profile;
 }
 
+// src/utils/http.ts
+async function apiRequest(opts) {
+  const request = await buildAuthenticatedRequest(opts);
+  return fetch(request.url, request.init);
+}
+async function buildAuthenticatedRequest(opts) {
+  await refreshTokenIfNeeded();
+  const creds = loadCredentials();
+  const profile = getCurrentProfile(creds);
+  if (!profile) {
+    throw new Error('No active profile. Run "a8techads auth login" to authenticate.');
+  }
+  const ctx = loadContext();
+  const context = getCurrentContext(ctx);
+  validateTenantMatch(profile.access_token, context?.tenant_id ?? null);
+  const headers = {
+    Authorization: `Bearer ${profile.access_token}`,
+    "Content-Type": "application/json",
+    ...opts.headers
+  };
+  if (context?.impersonation) {
+    headers["X-Impersonate-Tenant"] = context.impersonation.target_tenant_id;
+    if (context.impersonation.effective_capability) {
+      headers["X-Impersonate-Capability"] = context.impersonation.effective_capability;
+    }
+  } else if (context?.current_capability) {
+    headers["X-Effective-Capability"] = context.current_capability;
+  }
+  const url = `${opts.baseUrl ?? profile.api_url}${opts.path}`;
+  return {
+    url,
+    init: {
+      method: opts.method ?? "GET",
+      headers,
+      body: opts.body ? JSON.stringify(opts.body) : undefined
+    }
+  };
+}
+function validateTenantMatch(accessToken, contextTenantId) {
+  const claims = decodeJwt(accessToken);
+  if (!claims)
+    return;
+  const authClaims = getAuthClaims(claims);
+  const tokenTenantId = authClaims?.tenant_id ?? null;
+  if (!contextTenantId || !tokenTenantId)
+    return;
+  if (contextTenantId !== tokenTenantId) {
+    throw new Error(`Token tenant mismatch. Context tenant: ${contextTenantId}, token tenant: ${tokenTenantId}.
+` + `Run 'a8techads context set-tenant ${contextTenantId}' to re-authenticate.`);
+  }
+}
+
 // src/commands/context.ts
 function createContextCommand() {
   const context = new Command("context").description("Workspace context — tenant, capability, and app selection").addHelpText("after", `
@@ -3242,6 +3306,16 @@ Examples:
     }
     console.log(`App:          ${profileCtx?.app ?? "none"}`);
     console.log(`Capability:   ${profileCtx?.current_capability ?? "null (platform)"}`);
+    if (profileCtx?.impersonation) {
+      const imp = profileCtx.impersonation;
+      console.log(`
+--- Managed Access Session ---`);
+      console.log(`Target:       ${imp.target_tenant_name} (${imp.target_tenant_id})`);
+      console.log(`Capability:   ${imp.effective_capability}`);
+      console.log(`Role:         ${imp.effective_role}`);
+      console.log(`Grant:        ${imp.managed_grant_id ?? "none"}`);
+      console.log(`Started:      ${imp.started_at}`);
+    }
   });
   context.command("set-tenant").description(`Switch to a different tenant. Triggers re-authentication if the
 tenant differs from the current token tenant.
@@ -3376,6 +3450,74 @@ Shortcuts:
     console.log("Capability: PUBLISHER");
     console.log("App: ssp");
   });
+  context.command("assume-role").description(`Start a managed access session as a platform operator.
+
+Requires: platform_owner or platform_admin role.`).option("--tenant <id>", "Target tenant ID (required)").option("--capability <cap>", "Effective capability: ADVERTISER or PUBLISHER").addHelpText("after", `
+Examples:
+  $ a8techads context assume-role --tenant 00000000-... --capability ADVERTISER
+  $ a8techads context assume-role --tenant <id>`).action(async (opts) => {
+    if (!opts.tenant) {
+      console.error("Error: --tenant is required.");
+      console.error('Run "a8techads context assume-role --help" for usage.');
+      process.exit(1);
+    }
+    try {
+      const body = { target_tenant_id: opts.tenant };
+      if (opts.capability)
+        body.target_capability = opts.capability;
+      const resp = await apiRequest({
+        method: "POST",
+        path: "/api/v1/console/impersonation/start",
+        body
+      });
+      if (!resp.ok) {
+        const err = await resp.json().catch(() => ({ error: resp.statusText }));
+        console.error(`Error: ${err.error || resp.statusText}`);
+        process.exit(1);
+      }
+      const data = await resp.json();
+      const targetTenant = data.target_tenant || {};
+      const ctx = loadContext();
+      const impersonation = {
+        target_tenant_id: opts.tenant,
+        target_tenant_name: targetTenant.company_name || "Unknown",
+        effective_capability: data.effective_capability || opts.capability || "",
+        effective_role: data.effective_role || "",
+        managed_grant_id: data.managed_grant_id || null,
+        started_at: new Date().toISOString()
+      };
+      setCurrentContext(ctx, { impersonation });
+      saveContext(ctx);
+      console.log("Managed access session started.");
+      console.log(`Target:      ${impersonation.target_tenant_name} (${opts.tenant})`);
+      console.log(`Capability:  ${impersonation.effective_capability}`);
+      console.log(`Grant:       ${impersonation.managed_grant_id || "auto-created"}`);
+    } catch (err) {
+      console.error(`Failed: ${err.message}`);
+      process.exit(1);
+    }
+  });
+  context.command("end-session").description(`End the current managed access session.
+
+Requires: an active managed access session.`).addHelpText("after", `
+Examples:
+  $ a8techads context end-session`).action(async () => {
+    const ctx = loadContext();
+    const profileCtx = getCurrentContext(ctx);
+    if (!profileCtx?.impersonation) {
+      console.log("No active managed access session.");
+      return;
+    }
+    try {
+      await apiRequest({
+        method: "POST",
+        path: "/api/v1/console/impersonation/end"
+      });
+    } catch {}
+    setCurrentContext(ctx, { impersonation: null });
+    saveContext(ctx);
+    console.log("Managed access session ended.");
+  });
   return context;
 }
 function deriveAppFromTenant(tenant) {
@@ -3392,46 +3534,6 @@ function deriveAuthUrl(tokenEndpoint) {
   return url.origin;
 }
 
-// src/utils/http.ts
-async function apiRequest(opts) {
-  await refreshTokenIfNeeded();
-  const creds = loadCredentials();
-  const profile = getCurrentProfile(creds);
-  if (!profile) {
-    throw new Error('No active profile. Run "a8techads auth login" to authenticate.');
-  }
-  const ctx = loadContext();
-  const context = getCurrentContext(ctx);
-  validateTenantMatch(profile.access_token, context?.tenant_id ?? null);
-  const headers = {
-    Authorization: `Bearer ${profile.access_token}`,
-    "Content-Type": "application/json",
-    ...opts.headers
-  };
-  if (context?.current_capability) {
-    headers["X-Effective-Capability"] = context.current_capability;
-  }
-  const url = `${profile.api_url}${opts.path}`;
-  return fetch(url, {
-    method: opts.method ?? "GET",
-    headers,
-    body: opts.body ? JSON.stringify(opts.body) : undefined
-  });
-}
-function validateTenantMatch(accessToken, contextTenantId) {
-  const claims = decodeJwt(accessToken);
-  if (!claims)
-    return;
-  const authClaims = getAuthClaims(claims);
-  const tokenTenantId = authClaims?.tenant_id ?? null;
-  if (!contextTenantId || !tokenTenantId)
-    return;
-  if (contextTenantId !== tokenTenantId) {
-    throw new Error(`Token tenant mismatch. Context tenant: ${contextTenantId}, token tenant: ${tokenTenantId}.
-` + `Run 'a8techads context set-tenant ${contextTenantId}' to re-authenticate.`);
-  }
-}
-
 // src/utils/api-prefix.ts
 function getApiPrefix() {
   const ctx = loadContext();
@@ -3454,6 +3556,9 @@ function dspPrefix() {
 function sspPrefix() {
   return "/api/v1/ssp";
 }
+function consolePrefix() {
+  return "/api/v1/console";
+}
 
 // src/utils/output.ts
 function printData(data, columns, format = "table") {
@@ -3562,21 +3667,24 @@ Examples:
     printData(rows, COLUMNS, opts.format);
   });
   addFormatOption(cmd.command("get").description("Get audience details by ID.").argument("<id>", "Audience ID")).action(async (id, opts) => {
-    const resp = await apiRequest({ path: `${dspPrefix()}/audiences/${id}` });
-    const json = await resp.json();
-    if (!resp.ok) {
-      console.error(`Error: ${json.error ?? resp.statusText}`);
-      process.exit(1);
-    }
-    printDetail(json.data ?? json, opts.format);
+    const audience = await fetchAudience(id);
+    printDetail(audience, opts.format);
   });
-  cmd.command("create").description(`Create a new audience.
-
-Phase 1 only supports type UPLOADED_LIST.`).option("--name <name>", "Audience name (required)").option("--type <type>", "Audience type (default: UPLOADED_LIST)", "UPLOADED_LIST").option("--description <desc>", "Description").option("--ttl <days>", "Membership TTL in days (default: 90)", "90").option("--from-json <file>", "Create from JSON file").addHelpText("after", `
+  addFormatOption(cmd.command("size").description("Show the current estimated audience size.").argument("<id>", "Audience ID")).action(async (id, opts) => {
+    const audience = await fetchAudience(id);
+    const detail = {
+      id: audience.id,
+      name: audience.name,
+      status: audience.status,
+      estimatedSize: audience.estimatedSize ?? audience.estimated_size ?? null
+    };
+    printDetail(detail, opts.format);
+  });
+  cmd.command("create").description("Create a new audience.").option("--name <name>", "Audience name (required)").option("--type <type>", "Audience type: UPLOADED_LIST, RETARGETING, or LOOKALIKE", "UPLOADED_LIST").option("--description <desc>", "Description").option("--ttl <days>", "Membership TTL in days (default: 90)", "90").option("--goal-id <id>", "Conversion goal ID (required for RETARGETING type)").option("--seed <id>", "Seed audience ID (required for LOOKALIKE type)").option("--ratio <n>", "Expansion ratio for LOOKALIKE (default: 0.05)", "0.05").option("--from-json <file>", "Create from JSON file").addHelpText("after", `
 Examples:
   $ a8techads audiences create --name "High-Value Customers"
-  $ a8techads audiences create --name "Retarget Pool" --ttl 30
-  $ a8techads audiences create --from-json audience.json`).action(async (opts) => {
+  $ a8techads audiences create --name "Retarget Pool" --type RETARGETING --goal-id <id>
+  $ a8techads audiences create --name "Similar Users" --type LOOKALIKE --seed <id> --ratio 0.05`).action(async (opts) => {
     let body;
     if (opts.fromJson) {
       const { readFileSync: readFileSync3 } = await import("fs");
@@ -3586,6 +3694,14 @@ Examples:
         console.error('Error: --name is required. Run "a8techads audiences create --help".');
         process.exit(1);
       }
+      if (opts.type === "RETARGETING" && !opts.goalId) {
+        console.error("Error: --goal-id is required for RETARGETING type.");
+        process.exit(1);
+      }
+      if (opts.type === "LOOKALIKE" && !opts.seed) {
+        console.error("Error: --seed is required for LOOKALIKE type.");
+        process.exit(1);
+      }
       body = {
         name: opts.name,
         type: opts.type,
@@ -3593,6 +3709,12 @@ Examples:
       };
       if (opts.description)
         body.description = opts.description;
+      if (opts.goalId) {
+        body.rules = { source: "conversion_goal", goal_id: opts.goalId, action: "positive", recency_days: 30 };
+      }
+      if (opts.seed) {
+        body.rules = { seed_audience_id: opts.seed, expansion_ratio: Number(opts.ratio) };
+      }
     }
     const resp = await apiRequest({ method: "POST", path: `${dspPrefix()}/audiences`, body });
     const json = await resp.json();
@@ -3657,31 +3779,89 @@ Examples:
     }
     console.log(`Audience ${id} archived.`);
   });
-  cmd.command("upload").description(`Upload a user list to populate audience membership.
+  cmd.command("upload").description(`Upload user identifiers to populate audience membership.
 
-Accepts CSV or JSON files with user identifiers.`).argument("<id>", "Audience ID").option("--file <path>", "File path (CSV or JSON)").option("--identifier-type <type>", "Identifier type: EMAIL_HASH or DEVICE_ID", "EMAIL_HASH").option("--estimated-size <n>", "Estimated number of users in file").addHelpText("after", `
+Reads a file with one identifier per line (email hash, device ID, etc.)
+and uploads to the audience membership store.`).argument("<id>", "Audience ID").option("--file <path>", "File path (one identifier per line, or JSON array)").option("--identifier-type <type>", "Identifier type: EMAIL_HASH or DEVICE_ID", "EMAIL_HASH").addHelpText("after", `
 Examples:
-  $ a8techads audiences upload <id> --file users.csv --identifier-type EMAIL_HASH
-  $ a8techads audiences upload <id> --file devices.json --identifier-type DEVICE_ID`).action(async (id, opts) => {
+  $ a8techads audiences upload <id> --file users.txt --identifier-type EMAIL_HASH
+  $ a8techads audiences upload <id> --file devices.txt --identifier-type DEVICE_ID
+
+File format (one per line):
+  a1b2c3d4e5f6...
+  f6e5d4c3b2a1...`).action(async (id, opts) => {
     if (!opts.file) {
       console.error("Error: --file is required.");
       process.exit(1);
     }
+    const { readFileSync: readFileSync3 } = await import("fs");
+    let identifiers;
+    try {
+      const content = readFileSync3(opts.file, "utf-8").trim();
+      try {
+        identifiers = JSON.parse(content);
+        if (!Array.isArray(identifiers))
+          throw new Error("not array");
+      } catch {
+        identifiers = content.split(`
+`).map((l) => l.trim()).filter((l) => l.length > 0);
+      }
+    } catch (err) {
+      console.error(`Error reading file: ${err.message}`);
+      process.exit(1);
+    }
+    if (identifiers.length === 0) {
+      console.error("Error: file contains no identifiers.");
+      process.exit(1);
+    }
+    console.log(`Uploading ${identifiers.length} identifiers...`);
     const body = {
+      identifiers,
       identifierType: opts.identifierType
     };
-    if (opts.estimatedSize)
-      body.estimatedSize = Number(opts.estimatedSize);
     const resp = await apiRequest({ method: "POST", path: `${dspPrefix()}/audiences/${id}/upload`, body });
     const json = await resp.json();
     if (!resp.ok) {
       console.error(`Error: ${json.error ?? resp.statusText}`);
       process.exit(1);
     }
-    console.log(`Upload processed. Audience status: ${json.data?.status ?? json.status}`);
+    console.log(`Upload complete. Status: ${json.data?.status ?? json.status}, Members: ${json.data?.uploadedCount ?? json.uploadedCount ?? "?"}`);
+  });
+  cmd.command("wait-ready").description("Poll audience status until it becomes READY, ACTIVE, or ERROR.").argument("<id>", "Audience ID").option("--timeout <seconds>", "Timeout in seconds", "120").option("--interval <seconds>", "Polling interval in seconds", "3").action(async (id, opts) => {
+    const timeoutMs = Number(opts.timeout) * 1000;
+    const intervalMs = Number(opts.interval) * 1000;
+    const started = Date.now();
+    while (true) {
+      const audience = await fetchAudience(id);
+      const status = audience.status;
+      const size = audience.estimatedSize ?? audience.estimated_size ?? null;
+      console.log(`Status: ${status}${size != null ? ` | Size: ${Number(size).toLocaleString()}` : ""}`);
+      if (status === "READY" || status === "ACTIVE") {
+        console.log(`Audience ${id} is ready.`);
+        return;
+      }
+      if (status === "ERROR" || status === "ARCHIVED") {
+        console.error(`Audience ${id} reached terminal status: ${status}`);
+        process.exit(1);
+      }
+      if (Date.now() - started >= timeoutMs) {
+        console.error(`Timed out waiting for audience ${id}.`);
+        process.exit(1);
+      }
+      await new Promise((resolve) => setTimeout(resolve, intervalMs));
+    }
   });
   return cmd;
 }
+async function fetchAudience(id) {
+  const resp = await apiRequest({ path: `${dspPrefix()}/audiences/${id}` });
+  const json = await resp.json();
+  if (!resp.ok) {
+    console.error(`Error: ${json.error ?? resp.statusText}`);
+    process.exit(1);
+  }
+  return json.data ?? json;
+}
 
 // src/commands/campaigns.ts
 var COLUMNS2 = [
@@ -3826,8 +4006,178 @@ Examples:
     }
     console.log(`Campaign duplicated. New ID: ${json.data?.id ?? json.id}`);
   });
+  const targetingCmd = new Command("targeting").description("Show or update campaign targeting without editing full JSON.").addHelpText("after", `
+Examples:
+  $ a8techads campaigns targeting show <campaign-id>
+  $ a8techads campaigns targeting set-geo <campaign-id> --countries US,CA --mode target
+  $ a8techads campaigns targeting add-audience <campaign-id> --audience <id> --mode include
+  $ a8techads campaigns targeting set-day-parting <campaign-id> --timezone UTC --from-json schedule.json`);
+  addFormatOption(targetingCmd.command("show").description("Show campaign targeting, audience include/exclude, and day parting.").argument("<id>", "Campaign ID")).action(async (id, opts) => {
+    const campaign = await fetchCampaign(id);
+    const detail = {
+      campaignId: campaign.id,
+      campaignName: campaign.name,
+      targeting: campaign.targeting ?? {},
+      timezone: campaign.timezone ?? "UTC",
+      dayParting: campaign.dayParting ?? null
+    };
+    printDetail(detail, opts.format);
+  });
+  targetingCmd.command("set-geo").description("Replace campaign geo countries and mode.").argument("<id>", "Campaign ID").requiredOption("--countries <codes>", "Comma-separated country codes, e.g. US,CA").option("--mode <mode>", "target or block", "target").action(async (id, opts) => {
+    const campaign = await fetchCampaign(id);
+    const targeting = normalizeTargeting(campaign.targeting);
+    const countries = parseCsvList(opts.countries);
+    const mode = opts.mode === "block" ? "block" : "target";
+    targeting.geo = {
+      ...targeting.geo ?? {},
+      countries,
+      mode,
+      countriesMode: mode
+    };
+    await patchCampaign(id, { targeting });
+    console.log(`Campaign ${id} geo targeting updated.`);
+  });
+  targetingCmd.command("add-audience").description("Add an audience to include or exclude targeting.").argument("<id>", "Campaign ID").requiredOption("--audience <audience-id>", "Audience ID").requiredOption("--mode <mode>", "include or exclude").action(async (id, opts) => {
+    const mode = normalizeAudienceMode(opts.mode);
+    const campaign = await fetchCampaign(id);
+    const targeting = normalizeTargeting(campaign.targeting);
+    const audiences = normalizeAudiences(targeting.audiences);
+    const list = new Set(mode === "include" ? audiences.include : audiences.exclude);
+    list.add(opts.audience);
+    targeting.audiences = {
+      ...audiences,
+      [mode]: Array.from(list)
+    };
+    await patchCampaign(id, { targeting });
+    console.log(`Campaign ${id} audience ${opts.audience} added to ${mode}.`);
+  });
+  targetingCmd.command("remove-audience").description("Remove an audience from include or exclude targeting.").argument("<id>", "Campaign ID").requiredOption("--audience <audience-id>", "Audience ID").requiredOption("--mode <mode>", "include or exclude").action(async (id, opts) => {
+    const mode = normalizeAudienceMode(opts.mode);
+    const campaign = await fetchCampaign(id);
+    const targeting = normalizeTargeting(campaign.targeting);
+    const audiences = normalizeAudiences(targeting.audiences);
+    targeting.audiences = {
+      ...audiences,
+      [mode]: (mode === "include" ? audiences.include : audiences.exclude).filter((audId) => audId !== opts.audience)
+    };
+    await patchCampaign(id, { targeting });
+    console.log(`Campaign ${id} audience ${opts.audience} removed from ${mode}.`);
+  });
+  targetingCmd.command("set-day-parting").description("Set or disable day parting schedule.").argument("<id>", "Campaign ID").option("--timezone <tz>", "Timezone (default: keep existing or UTC)").option("--from-json <file>", "Schedule JSON file").option("--disable", "Disable day parting").action(async (id, opts) => {
+    if (!opts.disable && !opts.fromJson) {
+      console.error("Error: provide --from-json <file> or --disable.");
+      process.exit(1);
+    }
+    const campaign = await fetchCampaign(id);
+    let dayParting;
+    if (opts.disable) {
+      dayParting = null;
+    } else {
+      const { readFileSync: readFileSync3 } = await import("fs");
+      dayParting = JSON.parse(readFileSync3(opts.fromJson, "utf-8"));
+    }
+    await patchCampaign(id, {
+      dayParting,
+      timezone: opts.timezone ?? campaign.timezone ?? "UTC"
+    });
+    console.log(`Campaign ${id} day parting updated.`);
+  });
+  for (const [resourceName, field] of [
+    ["domain", "domains"],
+    ["keyword", "keywords"],
+    ["ip-range", "ipRanges"]
+  ]) {
+    targetingCmd.command(`add-${resourceName}`).description(`Add a ${resourceName} to targeting list.`).argument("<id>", "Campaign ID").requiredOption(`--${resourceName} <value>`, `Value to add`).option("--mode <mode>", "target or block (default: keep current or target)", "target").action(async (id, opts) => {
+      const campaign = await fetchCampaign(id);
+      const targeting = normalizeTargeting(campaign.targeting);
+      const existing = normalizeListTargeting(targeting[field]);
+      const value = String(opts[camelizeOption(resourceName)]).trim();
+      if (!value) {
+        console.error(`Error: --${resourceName} is required.`);
+        process.exit(1);
+      }
+      const list = new Set(existing.list);
+      list.add(value);
+      targeting[field] = {
+        mode: opts.mode === "block" ? "block" : existing.mode,
+        list: Array.from(list)
+      };
+      await patchCampaign(id, { targeting });
+      console.log(`Campaign ${id} ${resourceName} added.`);
+    });
+    targetingCmd.command(`remove-${resourceName}`).description(`Remove a ${resourceName} from targeting list.`).argument("<id>", "Campaign ID").requiredOption(`--${resourceName} <value>`, `Value to remove`).action(async (id, opts) => {
+      const campaign = await fetchCampaign(id);
+      const targeting = normalizeTargeting(campaign.targeting);
+      const existing = normalizeListTargeting(targeting[field]);
+      const value = String(opts[camelizeOption(resourceName)]).trim();
+      targeting[field] = {
+        ...existing,
+        list: existing.list.filter((item) => item !== value)
+      };
+      await patchCampaign(id, { targeting });
+      console.log(`Campaign ${id} ${resourceName} removed.`);
+    });
+    targetingCmd.command(`set-${resourceName}-mode`).description(`Set ${resourceName} targeting mode.`).argument("<id>", "Campaign ID").requiredOption("--mode <mode>", "target or block").action(async (id, opts) => {
+      const campaign = await fetchCampaign(id);
+      const targeting = normalizeTargeting(campaign.targeting);
+      const existing = normalizeListTargeting(targeting[field]);
+      targeting[field] = {
+        ...existing,
+        mode: opts.mode === "block" ? "block" : "target"
+      };
+      await patchCampaign(id, { targeting });
+      console.log(`Campaign ${id} ${resourceName} mode updated.`);
+    });
+  }
+  cmd.addCommand(targetingCmd);
   return cmd;
 }
+async function fetchCampaign(id) {
+  const resp = await apiRequest({ path: `${dspPrefix()}/campaigns/${id}` });
+  const json = await resp.json();
+  if (!resp.ok) {
+    console.error(`Error: ${json.error ?? resp.statusText}`);
+    process.exit(1);
+  }
+  return json.data ?? json;
+}
+async function patchCampaign(id, body) {
+  const resp = await apiRequest({ method: "PATCH", path: `${dspPrefix()}/campaigns/${id}`, body });
+  const json = await resp.json().catch(() => ({}));
+  if (!resp.ok) {
+    console.error(`Error: ${json.error ?? json.errors ?? resp.statusText}`);
+    process.exit(1);
+  }
+}
+function parseCsvList(value) {
+  return value.split(",").map((item) => item.trim()).filter(Boolean);
+}
+function normalizeAudienceMode(value) {
+  const normalized = String(value).toLowerCase();
+  if (normalized !== "include" && normalized !== "exclude") {
+    console.error("Error: --mode must be include or exclude.");
+    process.exit(1);
+  }
+  return normalized;
+}
+function normalizeTargeting(targeting) {
+  return targeting && typeof targeting === "object" ? { ...targeting } : {};
+}
+function normalizeAudiences(audiences) {
+  return {
+    include: Array.isArray(audiences?.include) ? audiences.include : [],
+    exclude: Array.isArray(audiences?.exclude) ? audiences.exclude : []
+  };
+}
+function normalizeListTargeting(value) {
+  return {
+    mode: value?.mode === "block" ? "block" : "target",
+    list: Array.isArray(value?.list) ? value.list : []
+  };
+}
+function camelizeOption(value) {
+  return value.replace(/-([a-z])/g, (_, char) => char.toUpperCase());
+}
 
 // src/commands/variations.ts
 var COLUMNS3 = [
@@ -3925,85 +4275,295 @@ Examples:
   return cmd;
 }
 
-// src/commands/sites.ts
+// src/commands/media-assets.ts
+import { basename, extname } from "node:path";
+import { readFileSync as readFileSync3 } from "node:fs";
 var COLUMNS4 = [
   { key: "id", header: "ID", width: 36 },
-  { key: "name", header: "NAME", width: 25 },
-  { key: "domain", header: "DOMAIN", width: 25 },
-  { key: "status", header: "STATUS", width: 12 },
-  { key: "zoneCount", header: "ZONES", width: 6 }
+  { key: "name", header: "NAME", width: 24 },
+  { key: "type", header: "TYPE", width: 10 },
+  { key: "status", header: "STATUS", width: 10 },
+  { key: "adFormat", header: "FORMAT", width: 12 },
+  { key: "mimeType", header: "MIME", width: 20 }
 ];
-function createSitesCommand() {
-  const cmd = new Command("sites").description(`Site management (SSP)
+function inferMimeType(filePath) {
+  switch (extname(filePath).toLowerCase()) {
+    case ".png":
+      return "image/png";
+    case ".jpg":
+    case ".jpeg":
+      return "image/jpeg";
+    case ".gif":
+      return "image/gif";
+    case ".webp":
+      return "image/webp";
+    case ".svg":
+      return "image/svg+xml";
+    case ".mp4":
+      return "video/mp4";
+    case ".mov":
+      return "video/quicktime";
+    case ".html":
+      return "text/html";
+    case ".txt":
+      return "text/plain";
+    default:
+      return "application/octet-stream";
+  }
+}
+function normalizeAsset(asset) {
+  return {
+    id: asset.id,
+    name: asset.name,
+    type: asset.type,
+    status: asset.status,
+    adFormat: asset.adFormat ?? asset.ad_format,
+    mimeType: asset.mimeType ?? asset.mime_type
+  };
+}
+function createMediaAssetsCommand() {
+  const cmd = new Command("media-assets").description(`Media library management (DSP)
 
-Requires: PUBLISHER capability.`).addHelpText("after", `
+Requires: ADVERTISER capability.`).addHelpText("after", `
 Examples:
-  $ a8techads sites list
-  $ a8techads sites get <id>
-  $ a8techads sites create --name "My Blog" --domain blog.example.com`);
-  addFormatOption(cmd.command("list").description("List publisher sites.").option("--status <status>", "Filter by status").option("--limit <n>", "Max results", "20")).action(async (opts) => {
+  $ a8techads media-assets list
+  $ a8techads media-assets get <id>
+  $ a8techads media-assets upload --file ./banner.png --ad-format BANNER
+  $ a8techads media-assets pause <id>`);
+  addFormatOption(cmd.command("list").description("List media assets.").option("--status <status>", "Filter by status").option("--type <type>", "Filter by type").option("--ad-format <format>", "Filter by ad format").option("--search <text>", "Search by name").option("--limit <n>", "Max results", "20").option("--offset <n>", "Offset", "0")).action(async (opts) => {
     const params = new URLSearchParams;
+    params.set("limit", opts.limit);
+    params.set("offset", opts.offset);
     if (opts.status)
       params.set("status", opts.status);
-    params.set("limit", opts.limit);
-    const resp = await apiRequest({ path: `${sspPrefix()}/sites?${params}` });
+    if (opts.type)
+      params.set("type", opts.type);
+    if (opts.adFormat)
+      params.set("adFormat", opts.adFormat);
+    if (opts.search)
+      params.set("search", opts.search);
+    const resp = await apiRequest({ path: `${dspPrefix()}/media-assets?${params}` });
     const json = await resp.json();
     if (!resp.ok) {
       console.error(`Error: ${json.error ?? resp.statusText}`);
       process.exit(1);
     }
-    const rows = (json.data ?? json).map((s) => ({
-      id: s.id,
-      name: s.name,
-      domain: s.domain,
-      status: s.status,
-      zoneCount: s.zoneCount ?? s.zone_count ?? "-"
-    }));
+    const rows = (json.data ?? json).map(normalizeAsset);
     printData(rows, COLUMNS4, opts.format);
   });
-  addFormatOption(cmd.command("get").description("Get site details by ID.").argument("<id>", "Site ID")).action(async (id, opts) => {
-    const resp = await apiRequest({ path: `${sspPrefix()}/sites/${id}` });
+  addFormatOption(cmd.command("active").description("List active media assets.").option("--ad-format <format>", "Filter by ad format").option("--width <n>", "Required width").option("--height <n>", "Required height").option("--limit <n>", "Max results", "20").option("--offset <n>", "Offset", "0")).action(async (opts) => {
+    const params = new URLSearchParams;
+    params.set("limit", opts.limit);
+    params.set("offset", opts.offset);
+    if (opts.adFormat)
+      params.set("adFormat", opts.adFormat);
+    if (opts.width)
+      params.set("width", opts.width);
+    if (opts.height)
+      params.set("height", opts.height);
+    const resp = await apiRequest({
+      path: `${dspPrefix()}/media-assets/active?${params}`
+    });
     const json = await resp.json();
     if (!resp.ok) {
       console.error(`Error: ${json.error ?? resp.statusText}`);
       process.exit(1);
     }
-    printDetail(json.data ?? json, opts.format);
+    const rows = (json.data ?? json).map(normalizeAsset);
+    printData(rows, COLUMNS4, opts.format);
   });
-  cmd.command("create").description("Create a new site.").option("--name <name>", "Site name (required)").option("--domain <domain>", "Site domain (required)").option("--type <type>", "Site type: WEB, APP, CTV", "WEB").option("--from-json <file>", "Create from JSON file").action(async (opts) => {
-    let body;
-    if (opts.fromJson) {
-      const { readFileSync: readFileSync3 } = await import("fs");
-      body = JSON.parse(readFileSync3(opts.fromJson, "utf-8"));
-    } else {
-      if (!opts.name || !opts.domain) {
-        console.error("Error: --name and --domain are required.");
-        process.exit(1);
-      }
-      body = { name: opts.name, domain: opts.domain, type: opts.type };
-    }
-    const resp = await apiRequest({ method: "POST", path: `${sspPrefix()}/sites`, body });
+  addFormatOption(cmd.command("get").description("Get media asset details.").argument("<id>", "Media asset ID")).action(async (id, opts) => {
+    const resp = await apiRequest({ path: `${dspPrefix()}/media-assets/${id}` });
     const json = await resp.json();
     if (!resp.ok) {
       console.error(`Error: ${json.error ?? resp.statusText}`);
       process.exit(1);
     }
-    console.log(`Site created: ${json.data?.id ?? json.id}`);
+    printDetail(json.data ?? json, opts.format);
   });
-  cmd.command("update").description("Update a site.").argument("<id>", "Site ID").option("--name <name>", "New name").option("--from-json <file>", "Update from JSON file").action(async (id, opts) => {
-    let body;
-    if (opts.fromJson) {
-      const { readFileSync: readFileSync3 } = await import("fs");
-      body = JSON.parse(readFileSync3(opts.fromJson, "utf-8"));
-    } else {
-      body = {};
-      if (opts.name)
-        body.name = opts.name;
-    }
-    const resp = await apiRequest({ method: "PATCH", path: `${sspPrefix()}/sites/${id}`, body });
+  addFormatOption(cmd.command("size-limits").description("Get media asset size limits.")).action(async (opts) => {
+    const resp = await apiRequest({ path: `${dspPrefix()}/media-assets/size-limits` });
+    const json = await resp.json();
     if (!resp.ok) {
-      const j = await resp.json();
-      console.error(`Error: ${j.error ?? resp.statusText}`);
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  cmd.command("upload").description("Upload a media asset file.").requiredOption("--file <path>", "Path to local file").option("--name <name>", "Override asset name").option("--ad-format <format>", "Ad format, e.g. BANNER, NATIVE, VIDEO").action(async (opts) => {
+    const filePath = opts.file;
+    const fileName = basename(filePath);
+    const request = await buildAuthenticatedRequest({
+      method: "POST",
+      path: `${dspPrefix()}/media-assets/upload`,
+      headers: {}
+    });
+    const headers = new Headers(request.init.headers);
+    headers.delete("Content-Type");
+    const body = new FormData;
+    const fileBytes = readFileSync3(filePath);
+    body.append("file", new Blob([fileBytes], { type: inferMimeType(filePath) }), fileName);
+    if (opts.name)
+      body.append("name", opts.name);
+    if (opts.adFormat)
+      body.append("adFormat", opts.adFormat);
+    const resp = await fetch(request.url, {
+      ...request.init,
+      headers,
+      body
+    });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? json.errors ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const asset = json.data ?? json;
+    console.log(`Media asset uploaded: ${asset.id}`);
+    if (asset.name)
+      console.log(`  Name: ${asset.name}`);
+    if (asset.cdnUrl ?? asset.cdn_url) {
+      console.log(`  CDN URL: ${asset.cdnUrl ?? asset.cdn_url}`);
+    }
+  });
+  cmd.command("update").description("Update media asset metadata.").argument("<id>", "Media asset ID").option("--name <name>", "New name").option("--description <text>", "New description").option("--product-category <value>", "Product category").option("--target-audience <value>", "Target audience").option("--from-json <file>", "Update from JSON file").action(async (id, opts) => {
+    let body = {};
+    if (opts.fromJson) {
+      body = JSON.parse(readFileSync3(opts.fromJson, "utf-8"));
+    } else {
+      if (opts.name)
+        body.name = opts.name;
+      if (opts.description)
+        body.description = opts.description;
+      if (opts.productCategory)
+        body.productCategory = opts.productCategory;
+      if (opts.targetAudience)
+        body.targetAudience = opts.targetAudience;
+    }
+    const resp = await apiRequest({
+      method: "PATCH",
+      path: `${dspPrefix()}/media-assets/${id}`,
+      body
+    });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Media asset ${id} updated.`);
+  });
+  cmd.command("delete").description("Delete a media asset.").argument("<id>", "Media asset ID").option("--yes", "Skip confirmation").action(async (id, opts) => {
+    if (!opts.yes) {
+      console.error("Add --yes to confirm deletion.");
+      process.exit(1);
+    }
+    const resp = await apiRequest({
+      method: "DELETE",
+      path: `${dspPrefix()}/media-assets/${id}`
+    });
+    if (!resp.ok && resp.status !== 204) {
+      const json = await resp.json();
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Media asset ${id} deleted.`);
+  });
+  for (const action of ["pause", "resume", "archive", "unarchive"]) {
+    cmd.command(action).description(`${action.charAt(0).toUpperCase() + action.slice(1)} a media asset.`).argument("<id>", "Media asset ID").action(async (id) => {
+      const resp = await apiRequest({
+        method: "PATCH",
+        path: `${dspPrefix()}/media-assets/${id}/${action}`,
+        body: {}
+      });
+      const json = await resp.json();
+      if (!resp.ok) {
+        console.error(`Error: ${json.error ?? resp.statusText}`);
+        process.exit(1);
+      }
+      console.log(`Media asset ${id} ${action}d.`);
+    });
+  }
+  return cmd;
+}
+
+// src/commands/sites.ts
+var COLUMNS5 = [
+  { key: "id", header: "ID", width: 36 },
+  { key: "name", header: "NAME", width: 25 },
+  { key: "domain", header: "DOMAIN", width: 25 },
+  { key: "status", header: "STATUS", width: 12 },
+  { key: "zoneCount", header: "ZONES", width: 6 }
+];
+function createSitesCommand() {
+  const cmd = new Command("sites").description(`Site management (SSP)
+
+Requires: PUBLISHER capability.`).addHelpText("after", `
+Examples:
+  $ a8techads sites list
+  $ a8techads sites get <id>
+  $ a8techads sites create --name "My Blog" --domain blog.example.com`);
+  addFormatOption(cmd.command("list").description("List publisher sites.").option("--status <status>", "Filter by status").option("--limit <n>", "Max results", "20")).action(async (opts) => {
+    const params = new URLSearchParams;
+    if (opts.status)
+      params.set("status", opts.status);
+    params.set("limit", opts.limit);
+    const resp = await apiRequest({ path: `${sspPrefix()}/sites?${params}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const rows = (json.data ?? json).map((s) => ({
+      id: s.id,
+      name: s.name,
+      domain: s.domain,
+      status: s.status,
+      zoneCount: s.zoneCount ?? s.zone_count ?? "-"
+    }));
+    printData(rows, COLUMNS5, opts.format);
+  });
+  addFormatOption(cmd.command("get").description("Get site details by ID.").argument("<id>", "Site ID")).action(async (id, opts) => {
+    const resp = await apiRequest({ path: `${sspPrefix()}/sites/${id}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  cmd.command("create").description("Create a new site.").option("--name <name>", "Site name (required)").option("--domain <domain>", "Site domain (required)").option("--type <type>", "Site type: WEB, APP, CTV", "WEB").option("--from-json <file>", "Create from JSON file").action(async (opts) => {
+    let body;
+    if (opts.fromJson) {
+      const { readFileSync: readFileSync4 } = await import("fs");
+      body = JSON.parse(readFileSync4(opts.fromJson, "utf-8"));
+    } else {
+      if (!opts.name || !opts.domain) {
+        console.error("Error: --name and --domain are required.");
+        process.exit(1);
+      }
+      body = { name: opts.name, domain: opts.domain, type: opts.type };
+    }
+    const resp = await apiRequest({ method: "POST", path: `${sspPrefix()}/sites`, body });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Site created: ${json.data?.id ?? json.id}`);
+  });
+  cmd.command("update").description("Update a site.").argument("<id>", "Site ID").option("--name <name>", "New name").option("--from-json <file>", "Update from JSON file").action(async (id, opts) => {
+    let body;
+    if (opts.fromJson) {
+      const { readFileSync: readFileSync4 } = await import("fs");
+      body = JSON.parse(readFileSync4(opts.fromJson, "utf-8"));
+    } else {
+      body = {};
+      if (opts.name)
+        body.name = opts.name;
+    }
+    const resp = await apiRequest({ method: "PATCH", path: `${sspPrefix()}/sites/${id}`, body });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
       process.exit(1);
     }
     console.log(`Site ${id} updated.`);
@@ -4045,7 +4605,7 @@ Examples:
 }
 
 // src/commands/zones.ts
-var COLUMNS5 = [
+var COLUMNS6 = [
   { key: "id", header: "ID", width: 36 },
   { key: "name", header: "NAME", width: 25 },
   { key: "format", header: "FORMAT", width: 18 },
@@ -4077,7 +4637,7 @@ Examples:
       format: z.adFormat ?? z.ad_format ?? "-",
       status: z.status
     }));
-    printData(rows, COLUMNS5, opts.format);
+    printData(rows, COLUMNS6, opts.format);
   });
   addFormatOption(cmd.command("get").description("Get zone details by ID.").argument("<id>", "Zone ID")).action(async (id, opts) => {
     const resp = await apiRequest({ path: `${sspPrefix()}/zones/${id}` });
@@ -4091,8 +4651,8 @@ Examples:
   cmd.command("create").description("Create a new ad zone.").option("--site <id>", "Site ID (required)").option("--name <name>", "Zone name (required)").option("--format <format>", "Ad format (e.g., banner_300x250)").option("--from-json <file>", "Create from JSON file").action(async (opts) => {
     let body;
     if (opts.fromJson) {
-      const { readFileSync: readFileSync3 } = await import("fs");
-      body = JSON.parse(readFileSync3(opts.fromJson, "utf-8"));
+      const { readFileSync: readFileSync4 } = await import("fs");
+      body = JSON.parse(readFileSync4(opts.fromJson, "utf-8"));
     } else {
       if (!opts.site || !opts.name) {
         console.error("Error: --site and --name are required.");
@@ -4113,8 +4673,8 @@ Examples:
   cmd.command("update").description("Update a zone.").argument("<id>", "Zone ID").option("--name <name>", "New name").option("--from-json <file>", "Update from JSON file").action(async (id, opts) => {
     let body;
     if (opts.fromJson) {
-      const { readFileSync: readFileSync3 } = await import("fs");
-      body = JSON.parse(readFileSync3(opts.fromJson, "utf-8"));
+      const { readFileSync: readFileSync4 } = await import("fs");
+      body = JSON.parse(readFileSync4(opts.fromJson, "utf-8"));
     } else {
       body = {};
       if (opts.name)
@@ -4163,11 +4723,12 @@ Examples:
   $ a8techads reports templates`);
   addFormatOption(cmd.command("query").description(`Execute an ad-hoc analytics query.
 
-Requires: authenticated profile with DSP or SSP capability.`).option("--metrics <list>", "Comma-separated metrics (e.g., spend,impressions,clicks,ctr)", "impressions,clicks,spend").option("--dimensions <list>", "Comma-separated dimensions (e.g., date,campaign,geo)", "date").option("--from <date>", "Start date (YYYY-MM-DD)").option("--to <date>", "End date (YYYY-MM-DD)").option("--limit <n>", "Max rows", "100").addHelpText("after", `
+Requires: authenticated profile with DSP or SSP capability.`).option("--metrics <list>", "Comma-separated metrics (e.g., spend,impressions,clicks,ctr)", "impressions,clicks,spend").option("--dimensions <list>", "Comma-separated dimensions (e.g., date,campaign,geo,goal,goal_id,goal_order)", "date").option("--from <date>", "Start date (YYYY-MM-DD)").option("--to <date>", "End date (YYYY-MM-DD)").option("--limit <n>", "Max rows", "100").addHelpText("after", `
 Examples:
   $ a8techads reports query --metrics spend,impressions --dimensions date --from 2026-03-01 --to 2026-03-20
   $ a8techads reports query --metrics revenue --dimensions publisher --format json
-  $ a8techads reports query --dimensions geo --limit 10`)).action(async (opts) => {
+  $ a8techads reports query --dimensions geo --limit 10
+  $ a8techads reports query --dimensions goal,date --metrics conversions,spend,cpa --from 2026-03-01`)).action(async (opts) => {
     const body = {
       metrics: opts.metrics.split(","),
       dimensions: opts.dimensions.split(","),
@@ -4183,19 +4744,20 @@ Examples:
       console.error(`Error: ${json.error ?? resp.statusText}`);
       process.exit(1);
     }
-    const rows = json.data?.rows ?? json.rows ?? [];
+    const data = json.data ?? json;
+    const rows = data.rows ?? data.results ?? json.rows ?? json.results ?? [];
     if (rows.length === 0) {
       console.log("No results.");
       return;
     }
     if (opts.format === "json") {
-      console.log(JSON.stringify(json.data ?? json, null, 2));
+      console.log(JSON.stringify(data, null, 2));
       return;
     }
     const keys = Object.keys(rows[0]);
     const columns = keys.map((k) => ({ key: k, header: k.toUpperCase(), width: Math.max(k.length, 12) }));
     printData(rows, columns, opts.format);
-    const summary = json.data?.summary ?? json.summary;
+    const summary = data.summary ?? data.totals ?? json.summary ?? json.totals;
     if (summary && opts.format === "table") {
       console.log(`
 Summary:`);
@@ -4211,7 +4773,9 @@ Summary:`);
       console.error(`Error: ${json.error ?? resp.statusText}`);
       process.exit(1);
     }
-    const rows = (json.data ?? json).map((r) => ({ id: r.id, name: r.name, createdAt: r.createdAt ?? r.created_at }));
+    const data = json.data ?? json;
+    const reports = data.reports ?? json.reports ?? data;
+    const rows = (Array.isArray(reports) ? reports : []).map((r) => ({ id: r.id, name: r.name, createdAt: r.createdAt ?? r.created_at }));
     printData(rows, [
       { key: "id", header: "ID", width: 36 },
       { key: "name", header: "NAME", width: 30 },
@@ -4234,7 +4798,9 @@ Summary:`);
       console.error(`Error: ${json.error ?? resp.statusText}`);
       process.exit(1);
     }
-    const rows = (json.data ?? json).map((t) => ({ id: t.id, name: t.name, description: t.description }));
+    const data = json.data ?? json;
+    const templates = data.templates ?? json.templates ?? data;
+    const rows = (Array.isArray(templates) ? templates : []).map((t) => ({ id: t.id, name: t.name, description: t.description }));
     printData(rows, [
       { key: "id", header: "ID", width: 20 },
       { key: "name", header: "NAME", width: 25 },
@@ -4244,8 +4810,8 @@ Summary:`);
   cmd.command("create").description("Create a saved report.").option("--name <name>", "Report name (required)").option("--from-json <file>", "Create from JSON file").action(async (opts) => {
     let body;
     if (opts.fromJson) {
-      const { readFileSync: readFileSync3 } = await import("fs");
-      body = JSON.parse(readFileSync3(opts.fromJson, "utf-8"));
+      const { readFileSync: readFileSync4 } = await import("fs");
+      body = JSON.parse(readFileSync4(opts.fromJson, "utf-8"));
     } else {
       if (!opts.name) {
         console.error("Error: --name is required.");
@@ -4347,8 +4913,8 @@ Examples:
   cmd.command("settings-update").description("Update billing settings.").option("--auto-recharge <bool>", "Enable/disable auto-recharge (true/false)").option("--from-json <file>", "Update from JSON file").action(async (opts) => {
     let body;
     if (opts.fromJson) {
-      const { readFileSync: readFileSync3 } = await import("fs");
-      body = JSON.parse(readFileSync3(opts.fromJson, "utf-8"));
+      const { readFileSync: readFileSync4 } = await import("fs");
+      body = JSON.parse(readFileSync4(opts.fromJson, "utf-8"));
     } else {
       body = {};
       if (opts.autoRecharge !== undefined)
@@ -4362,6 +4928,60 @@ Examples:
     }
     console.log("Billing settings updated.");
   });
+  addFormatOption(cmd.command("payment-methods").description("List saved payment methods.")).action(async (opts) => {
+    const resp = await apiRequest({ path: `${dspPrefix()}/payments/stripe/payment-methods` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const columns = [
+      { key: "id", header: "ID", width: 30 },
+      { key: "type", header: "TYPE", width: 10 },
+      { key: "last4", header: "LAST4", width: 6 },
+      { key: "brand", header: "BRAND", width: 12 },
+      { key: "expires", header: "EXPIRES", width: 10 }
+    ];
+    const rows = (json.data ?? json).map((pm) => ({
+      id: pm.id,
+      type: pm.type,
+      last4: pm.last4 ?? pm.card?.last4,
+      brand: pm.brand ?? pm.card?.brand,
+      expires: pm.expires ?? (pm.card ? `${pm.card.exp_month}/${pm.card.exp_year}` : "-")
+    }));
+    printData(rows, columns, opts.format);
+  });
+  cmd.command("usdt-deposit").description("Initiate a USDT deposit.").option("--amount <dollars>", "Deposit amount in dollars (required)").option("--network <network>", "Blockchain network", "TRC20").option("--yes", "Skip confirmation prompt").action(async (opts) => {
+    if (!opts.amount) {
+      console.error("Error: --amount is required.");
+      process.exit(1);
+    }
+    const amount = Number(opts.amount);
+    if (isNaN(amount) || amount <= 0) {
+      console.error("Error: Amount must be a positive number.");
+      process.exit(1);
+    }
+    if (!opts.yes) {
+      const rl = await import("readline");
+      const iface = rl.createInterface({ input: process.stdin, output: process.stdout });
+      const answer = await new Promise((resolve) => iface.question(`Initiate USDT deposit of $${amount.toFixed(2)}? (y/N) `, resolve));
+      iface.close();
+      if (answer.toLowerCase() !== "y") {
+        console.log("Cancelled.");
+        process.exit(0);
+      }
+    }
+    const resp = await apiRequest({ method: "POST", path: `${dspPrefix()}/payments/usdt/checkout`, body: { amount, network: opts.network } });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`USDT deposit of $${amount.toFixed(2)} initiated.`);
+    if (json.data?.paymentUrl || json.paymentUrl) {
+      console.log(`Payment URL: ${json.data?.paymentUrl ?? json.paymentUrl}`);
+    }
+  });
   return cmd;
 }
 
@@ -4378,7 +4998,7 @@ function usersPrefix() {
   }
   return app === "ssp" ? "/api/v1/ssp" : "/api/v1/dsp";
 }
-var COLUMNS6 = [
+var COLUMNS7 = [
   { key: "id", header: "ID", width: 36 },
   { key: "email", header: "EMAIL", width: 30 },
   { key: "name", header: "NAME", width: 20 },
@@ -4409,7 +5029,7 @@ Examples:
       role: u.role,
       status: u.status
     }));
-    printData(rows, COLUMNS6, opts.format);
+    printData(rows, COLUMNS7, opts.format);
   });
   addFormatOption(cmd.command("get").description("Get team member details.").argument("<id>", "User ID")).action(async (id, opts) => {
     const resp = await apiRequest({ path: `${usersPrefix()}/users/${id}` });
@@ -4488,39 +5108,52 @@ Examples:
   return cmd;
 }
 
-// src/commands/settings.ts
-function settingsPrefix() {
-  const ctx = loadContext();
-  const context = getCurrentContext(ctx);
-  const app = context?.app ?? "dsp";
-  if (app === "console") {
-    console.error("Error: Settings commands are not available in Console mode.");
-    console.error('Switch to DSP or SSP context: "a8techads context dsp" or "a8techads context ssp"');
-    process.exit(1);
+// src/commands/admin.ts
+async function confirmAction(message, yes) {
+  if (yes)
+    return;
+  const rl = await import("readline");
+  const iface = rl.createInterface({ input: process.stdin, output: process.stdout });
+  const answer = await new Promise((resolve) => iface.question(`${message} (y/N) `, resolve));
+  iface.close();
+  if (answer.toLowerCase() !== "y") {
+    console.log("Cancelled.");
+    process.exit(0);
   }
-  return app === "ssp" ? "/api/v1/ssp" : "/api/v1/dsp";
 }
-function createSettingsCommand() {
-  const cmd = new Command("settings").description(`Tenant settings (DSP / SSP only)
+function createAdminCommand() {
+  const cmd = new Command("admin").description(`Platform administration (Console)
 
-Requires: ADVERTISER or PUBLISHER capability.
-Not available in Console mode.`).addHelpText("after", `
+Requires: platform_owner or platform_admin role.`).addHelpText("after", `
 Examples:
-  $ a8techads settings show
-  $ a8techads settings update --from-json settings.json
-  $ a8techads settings profile
-  $ a8techads settings profile-update --company-name "New Name"`);
-  addFormatOption(cmd.command("show").description("Show current tenant settings.")).action(async (opts) => {
-    const resp = await apiRequest({ path: `${settingsPrefix()}/settings` });
+  $ a8techads admin tenants list
+  $ a8techads admin tenants get <id>
+  $ a8techads admin audit-logs
+  $ a8techads admin system health`);
+  const tenants = cmd.command("tenants").description("Tenant management");
+  addFormatOption(tenants.command("list").description("List all tenants.")).action(async (opts) => {
+    const resp = await apiRequest({ path: "/api/v1/console/tenants" });
     const json = await resp.json();
     if (!resp.ok) {
       console.error(`Error: ${json.error ?? resp.statusText}`);
       process.exit(1);
     }
-    printDetail(json.data ?? json, opts.format);
+    const rows = (json.data ?? json).map((t) => ({
+      id: t.id,
+      name: t.companyName ?? t.company_name,
+      type: t.tenantType ?? t.tenant_type,
+      status: t.status
+    }));
+    const columns = [
+      { key: "id", header: "ID", width: 36 },
+      { key: "name", header: "NAME", width: 25 },
+      { key: "type", header: "TYPE", width: 12 },
+      { key: "status", header: "STATUS", width: 10 }
+    ];
+    printData(rows, columns, opts.format);
   });
-  addFormatOption(cmd.command("profile").description("Show tenant profile (contact/business info).")).action(async (opts) => {
-    const resp = await apiRequest({ path: `${settingsPrefix()}/settings/profile` });
+  addFormatOption(tenants.command("get").description("Get tenant details.").argument("<id>", "Tenant ID")).action(async (id, opts) => {
+    const resp = await apiRequest({ path: `/api/v1/console/tenants/${id}` });
     const json = await resp.json();
     if (!resp.ok) {
       console.error(`Error: ${json.error ?? resp.statusText}`);
@@ -4528,76 +5161,1364 @@ Examples:
     }
     printDetail(json.data ?? json, opts.format);
   });
-  cmd.command("update").description(`Update tenant settings.
-
-Requires: admin role.`).option("--from-json <file>", "Update from JSON file").action(async (opts) => {
-    if (!opts.fromJson) {
-      console.error("Error: --from-json is required for settings update.");
+  tenants.command("create").description("Create a new tenant with admin user.").option("--name <name>", "Company name (required)").option("--email <email>", "Admin email (required)").option("--admin-name <name>", "Admin user name").option("--capabilities <caps>", "Comma-separated capabilities: ADVERTISER,PUBLISHER", "ADVERTISER").addHelpText("after", `
+Examples:
+  $ a8techads admin tenants create --name "Acme Corp" --email admin@acme.com
+  $ a8techads admin tenants create --name "MediaCo" --email admin@media.co --capabilities ADVERTISER,PUBLISHER`).action(async (opts) => {
+    if (!opts.name) {
+      console.error("Error: --name is required.");
       process.exit(1);
     }
-    const { readFileSync: readFileSync3 } = await import("fs");
-    const body = JSON.parse(readFileSync3(opts.fromJson, "utf-8"));
-    const resp = await apiRequest({ method: "PATCH", path: `${settingsPrefix()}/settings`, body });
+    if (!opts.email) {
+      console.error("Error: --email is required.");
+      process.exit(1);
+    }
+    const capabilities = opts.capabilities.split(",").map((c) => c.trim().toUpperCase());
+    const body = {
+      tenant: {
+        companyName: opts.name,
+        capabilities
+      },
+      admin: {
+        email: opts.email,
+        name: opts.adminName ?? undefined
+      }
+    };
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/tenants`, body });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? json.errors ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const data = json.data ?? json;
+    const tenant = data.tenant ?? data;
+    console.log(`Tenant created: ${tenant.id}`);
+    if (tenant.companyName)
+      console.log(`  Name: ${tenant.companyName}`);
+    if (tenant.status)
+      console.log(`  Status: ${tenant.status}`);
+    if (data.admin) {
+      console.log(`  Admin: ${data.admin.email} (userId: ${data.admin.userId})`);
+    }
+  });
+  tenants.command("update").description("Update a tenant.").argument("<id>", "Tenant ID").option("--name <name>", "New company name").option("--status <status>", "New status: ACTIVE, SUSPENDED, TESTING").action(async (id, opts) => {
+    const body = {};
+    if (opts.name)
+      body.companyName = opts.name;
+    if (opts.status)
+      body.status = opts.status.toUpperCase();
+    if (Object.keys(body).length === 0) {
+      console.error("Error: at least one of --name or --status is required.");
+      process.exit(1);
+    }
+    const resp = await apiRequest({ method: "PATCH", path: `${consolePrefix()}/tenants/${id}`, body });
     if (!resp.ok) {
       const j = await resp.json();
       console.error(`Error: ${j.error ?? resp.statusText}`);
       process.exit(1);
     }
-    console.log("Settings updated.");
+    console.log(`Tenant ${id} updated.`);
   });
-  cmd.command("profile-update").description("Update tenant profile.").option("--company-name <name>", "Company name").option("--from-json <file>", "Update from JSON file").action(async (opts) => {
-    let body;
-    if (opts.fromJson) {
-      const { readFileSync: readFileSync3 } = await import("fs");
-      body = JSON.parse(readFileSync3(opts.fromJson, "utf-8"));
-    } else {
-      body = {};
-      if (opts.companyName)
-        body.companyName = opts.companyName;
-    }
-    const resp = await apiRequest({ method: "PATCH", path: `${settingsPrefix()}/settings/profile`, body });
+  tenants.command("suspend").description("Suspend a tenant (set status to SUSPENDED).").argument("<id>", "Tenant ID").action(async (id) => {
+    const resp = await apiRequest({
+      method: "PATCH",
+      path: `${consolePrefix()}/tenants/${id}`,
+      body: { status: "SUSPENDED" }
+    });
     if (!resp.ok) {
       const j = await resp.json();
       console.error(`Error: ${j.error ?? resp.statusText}`);
       process.exit(1);
     }
-    console.log("Profile updated.");
+    console.log(`Tenant ${id} suspended.`);
   });
-  return cmd;
-}
-
-// src/commands/invoices.ts
-function createInvoicesCommand() {
-  const cmd = new Command("invoices").description(`Invoice management (DSP)
-
-Requires: ADVERTISER capability.`).addHelpText("after", `
-Examples:
-  $ a8techads invoices list
-  $ a8techads invoices get <id>
-  $ a8techads invoices spending`);
-  addFormatOption(cmd.command("list").description("List invoices.")).action(async (opts) => {
-    const resp = await apiRequest({ path: `${dspPrefix()}/invoices` });
-    const json = await resp.json();
+  tenants.command("activate").description("Activate a tenant (set status to ACTIVE).").argument("<id>", "Tenant ID").action(async (id) => {
+    const resp = await apiRequest({
+      method: "PATCH",
+      path: `${consolePrefix()}/tenants/${id}`,
+      body: { status: "ACTIVE" }
+    });
     if (!resp.ok) {
-      console.error(`Error: ${json.error ?? resp.statusText}`);
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Tenant ${id} activated.`);
+  });
+  const members = tenants.command("members").description("Tenant member management");
+  addFormatOption(members.command("list").description("List tenant members.").option("--tenant <id>", "Tenant ID (required)")).action(async (opts) => {
+    if (!opts.tenant) {
+      console.error("Error: --tenant is required.");
+      process.exit(1);
+    }
+    const resp = await apiRequest({ path: `/api/v1/console/tenants/${opts.tenant}/members` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const rows = (json.data ?? json).map((m) => ({
+      id: m.userId ?? m.user_id ?? m.id,
+      email: m.email,
+      role: m.role,
+      status: m.status
+    }));
+    printData(rows, [
+      { key: "id", header: "USER ID", width: 36 },
+      { key: "email", header: "EMAIL", width: 30 },
+      { key: "role", header: "ROLE", width: 20 }
+    ], opts.format);
+  });
+  addFormatOption(cmd.command("audit-logs").description("View audit logs.").option("--tenant <id>", "Filter by tenant").option("--limit <n>", "Max results", "20")).action(async (opts) => {
+    const params = new URLSearchParams({ limit: opts.limit });
+    if (opts.tenant)
+      params.set("tenant_id", opts.tenant);
+    const resp = await apiRequest({ path: `/api/v1/console/audit-logs?${params}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const rows = (json.data ?? json).map((l) => ({
+      action: l.action,
+      target: l.targetType ?? l.target_type,
+      targetId: l.targetId ?? l.target_id,
+      user: l.adminUserId ?? l.admin_user_id,
+      time: l.createdAt ?? l.created_at
+    }));
+    printData(rows, [
+      { key: "action", header: "ACTION", width: 25 },
+      { key: "target", header: "TARGET", width: 12 },
+      { key: "targetId", header: "TARGET ID", width: 36 },
+      { key: "time", header: "TIME", width: 22 }
+    ], opts.format);
+  });
+  const system = cmd.command("system").description("System operations");
+  addFormatOption(system.command("health").description("System health check.")).action(async (opts) => {
+    const resp = await apiRequest({ path: "/api/v1/console/system/health" });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  system.command("cache-clear").description("Clear system cache.").action(async () => {
+    const resp = await apiRequest({ method: "POST", path: "/api/v1/console/system/cache/clear" });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log("Cache cleared.");
+  });
+  const tracking = cmd.command("tracking-identities").description("User identity graph stats");
+  tracking.command("stats").description("Show tracking identity statistics.").action(async () => {
+    const resp = await apiRequest({ path: "/api/v1/console/tracking-identities/stats" });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const data = json.data ?? json;
+    console.log(`Tracking Identity Stats:`);
+    console.log(`  Total Identities: ${(data.total_identities ?? 0).toLocaleString()}`);
+    console.log(`  Active (30d):     ${(data.active_30d ?? 0).toLocaleString()}`);
+    console.log(`  Active (7d):      ${(data.active_7d ?? 0).toLocaleString()}`);
+    console.log(`  Active (1d):      ${(data.active_1d ?? 0).toLocaleString()}`);
+    if (data.earliest_seen)
+      console.log(`  Earliest Seen:    ${data.earliest_seen}`);
+    if (data.latest_seen)
+      console.log(`  Latest Seen:      ${data.latest_seen}`);
+  });
+  const finance = cmd.command("finance").description("Financial overview and audit");
+  addFormatOption(finance.command("summary").description("Financial summary.")).action(async (opts) => {
+    const resp = await apiRequest({ path: `${consolePrefix()}/billing-ops/summary` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  finance.command("finalize-daily").description("Run daily billing finalization for a date.").option("--date <yyyy-mm-dd>", "Date to finalize (default: today UTC)").option("--yes", "Skip confirmation", false).action(async (opts) => {
+    const targetDate = opts.date || new Date().toISOString().slice(0, 10);
+    await confirmAction(`Run daily billing finalization for ${targetDate}?`, opts.yes);
+    const body = {};
+    if (opts.date)
+      body.date = opts.date;
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/billing-ops/finalize-daily`, body });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const data = json.data ?? json;
+    console.log(`Daily billing finalized for ${data.date ?? targetDate}.`);
+  });
+  addFormatOption(finance.command("events").description("List billing events.").option("--limit <n>", "Max results", "20").option("--aggregate-type <type>", "Filter by aggregate type").option("--event-type <type>", "Filter by event type")).action(async (opts) => {
+    const params = new URLSearchParams({ limit: opts.limit });
+    if (opts.aggregateType)
+      params.set("aggregate_type", opts.aggregateType);
+    if (opts.eventType)
+      params.set("event_type", opts.eventType);
+    const resp = await apiRequest({ path: `${consolePrefix()}/billing-ops/events?${params}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const payload = json.data ?? json;
+    const rows = (payload.events ?? payload).map((e) => ({
+      id: e.id,
+      eventType: e.eventType ?? e.event_type,
+      aggregateType: e.aggregateType ?? e.aggregate_type,
+      createdAt: e.createdAt ?? e.created_at
+    }));
+    printData(rows, [
+      { key: "id", header: "ID", width: 36 },
+      { key: "eventType", header: "EVENT_TYPE", width: 25 },
+      { key: "aggregateType", header: "AGGREGATE_TYPE", width: 20 },
+      { key: "createdAt", header: "CREATED_AT", width: 22 }
+    ], opts.format);
+  });
+  addFormatOption(finance.command("operations").description("List billing operations.").option("--limit <n>", "Max results", "20").option("--type <type>", "Filter by operation type").option("--status <status>", "Filter by status")).action(async (opts) => {
+    const params = new URLSearchParams({ limit: opts.limit });
+    if (opts.type)
+      params.set("type", opts.type);
+    if (opts.status)
+      params.set("status", opts.status);
+    const resp = await apiRequest({ path: `${consolePrefix()}/billing-ops/operations?${params}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const payload = json.data ?? json;
+    const rows = (payload.operations ?? payload).map((o) => ({
+      id: o.id,
+      type: o.type,
+      target: o.target ?? o.targetId ?? o.target_id,
+      amount: o.amount,
+      status: o.status,
+      createdAt: o.createdAt ?? o.created_at
+    }));
+    printData(rows, [
+      { key: "id", header: "ID", width: 36 },
+      { key: "type", header: "TYPE", width: 18 },
+      { key: "target", header: "TARGET", width: 20 },
+      { key: "amount", header: "AMOUNT", width: 12 },
+      { key: "status", header: "STATUS", width: 12 },
+      { key: "createdAt", header: "CREATED_AT", width: 22 }
+    ], opts.format);
+  });
+  const invoices = cmd.command("invoices").description("Invoice management");
+  addFormatOption(invoices.command("list").description("List invoices.").option("--limit <n>", "Max results", "20").option("--status <status>", "Filter by status").option("--tenant-type <type>", "Filter by tenant type")).action(async (opts) => {
+    const params = new URLSearchParams({ limit: opts.limit });
+    if (opts.status)
+      params.set("status", opts.status);
+    if (opts.tenantType)
+      params.set("tenantType", opts.tenantType);
+    const resp = await apiRequest({ path: `${consolePrefix()}/billing-ops/invoices?${params}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const rows = (json.data ?? json).map((i) => ({
+      invoiceNumber: i.invoiceNumber ?? i.invoice_number ?? i.id,
+      tenant: i.tenantName ?? i.tenant_name ?? i.tenantId ?? i.tenant_id,
+      amount: i.amount,
+      status: i.status,
+      dueDate: i.dueDate ?? i.due_date
+    }));
+    printData(rows, [
+      { key: "invoiceNumber", header: "INVOICE#", width: 20 },
+      { key: "tenant", header: "TENANT", width: 25 },
+      { key: "amount", header: "AMOUNT", width: 12 },
+      { key: "status", header: "STATUS", width: 12 },
+      { key: "dueDate", header: "DUE_DATE", width: 16 }
+    ], opts.format);
+  });
+  addFormatOption(invoices.command("preview").description("Preview unbilled invoices for current period.")).action(async (opts) => {
+    const resp = await apiRequest({ path: `${consolePrefix()}/billing-ops/invoices/preview?tenantType=advertiser` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const data = json.data ?? json;
+    if (data.summary) {
+      console.log(`
+Period: ${data.summary.period}  |  Accounts: ${data.summary.accountCount}  |  Estimated Total Due: $${data.summary.totalAmount?.toFixed(2)}  |  As of: ${data.summary.asOfDate}
+`);
+    }
+    const rows = (data.previews ?? []).map((p) => ({
+      tenant: p.tenantName,
+      adSpend: p.adSpend,
+      platformFee: p.platformFee,
+      totalDue: p.totalDue,
+      days: p.daysWithData,
+      impressions: p.impressions
+    }));
+    printData(rows, [
+      { key: "tenant", header: "TENANT", width: 25 },
+      { key: "adSpend", header: "AD_SPEND", width: 12, format: (v) => `$${Number(v).toFixed(2)}` },
+      { key: "platformFee", header: "PLATFORM_FEE", width: 14, format: (v) => `$${Number(v).toFixed(2)}` },
+      { key: "totalDue", header: "TOTAL_DUE", width: 12, format: (v) => `$${Number(v).toFixed(2)}` },
+      { key: "days", header: "DAYS", width: 6 },
+      { key: "impressions", header: "IMPRESSIONS", width: 12 }
+    ], opts.format);
+  });
+  addFormatOption(invoices.command("get").description("Get invoice details.").argument("<id>", "Invoice ID")).action(async (id, opts) => {
+    const resp = await apiRequest({ path: `${consolePrefix()}/billing-ops/invoices/${id}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  invoices.command("issue").description("Issue an invoice.").argument("<id>", "Invoice ID").option("--yes", "Skip confirmation", false).action(async (id, opts) => {
+    await confirmAction(`Issue invoice ${id}?`, opts.yes);
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/billing-ops/invoices/${id}/issue` });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Invoice ${id} issued.`);
+  });
+  invoices.command("void").description("Void an invoice.").argument("<id>", "Invoice ID").option("--yes", "Skip confirmation", false).action(async (id, opts) => {
+    await confirmAction(`Void invoice ${id}?`, opts.yes);
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/billing-ops/invoices/${id}/void` });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Invoice ${id} voided.`);
+  });
+  invoices.command("mark-paid").description("Mark an invoice as paid.").argument("<id>", "Invoice ID").option("--yes", "Skip confirmation", false).action(async (id, opts) => {
+    await confirmAction(`Mark invoice ${id} as paid?`, opts.yes);
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/billing-ops/invoices/${id}/mark-paid` });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Invoice ${id} marked as paid.`);
+  });
+  const statements = cmd.command("statements").description("Publisher statement management");
+  addFormatOption(statements.command("list").description("List publisher statements.").option("--limit <n>", "Max results", "20").option("--status <status>", "Filter by status")).action(async (opts) => {
+    const params = new URLSearchParams({ limit: opts.limit, tenantType: "publisher" });
+    if (opts.status)
+      params.set("status", opts.status);
+    const resp = await apiRequest({ path: `${consolePrefix()}/billing-ops/invoices?${params}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const rows = (json.data ?? json).map((i) => ({
+      invoiceNumber: i.invoiceNumber ?? i.invoice_number ?? i.id,
+      tenant: i.tenantName ?? i.tenant_name ?? i.tenantId ?? i.tenant_id,
+      amount: i.amount,
+      status: i.status,
+      dueDate: i.dueDate ?? i.due_date
+    }));
+    printData(rows, [
+      { key: "invoiceNumber", header: "INVOICE#", width: 20 },
+      { key: "tenant", header: "TENANT", width: 25 },
+      { key: "amount", header: "AMOUNT", width: 12 },
+      { key: "status", header: "STATUS", width: 12 },
+      { key: "dueDate", header: "DUE_DATE", width: 16 }
+    ], opts.format);
+  });
+  addFormatOption(statements.command("preview").description("Preview unbilled statements for current period.")).action(async (opts) => {
+    const resp = await apiRequest({ path: `${consolePrefix()}/billing-ops/invoices/preview?tenantType=publisher` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const data = json.data ?? json;
+    if (data.summary) {
+      console.log(`
+Period: ${data.summary.period}  |  Accounts: ${data.summary.accountCount}  |  Estimated Net Payable: $${data.summary.totalAmount?.toFixed(2)}  |  As of: ${data.summary.asOfDate}
+`);
+    }
+    const rows = (data.previews ?? []).map((p) => ({
+      tenant: p.tenantName,
+      grossRevenue: p.grossRevenue,
+      commission: p.platformCommission,
+      netPayable: p.netPayable,
+      days: p.daysWithData,
+      impressions: p.impressions
+    }));
+    printData(rows, [
+      { key: "tenant", header: "TENANT", width: 25 },
+      { key: "grossRevenue", header: "GROSS_REV", width: 12, format: (v) => `$${Number(v).toFixed(2)}` },
+      { key: "commission", header: "COMMISSION", width: 12, format: (v) => `$${Number(v).toFixed(2)}` },
+      { key: "netPayable", header: "NET_PAY", width: 12, format: (v) => `$${Number(v).toFixed(2)}` },
+      { key: "days", header: "DAYS", width: 6 },
+      { key: "impressions", header: "IMPRESSIONS", width: 12 }
+    ], opts.format);
+  });
+  addFormatOption(statements.command("get").description("Get statement details.").argument("<id>", "Statement ID")).action(async (id, opts) => {
+    const resp = await apiRequest({ path: `${consolePrefix()}/billing-ops/invoices/${id}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  const payoutsAdmin = cmd.command("payouts").description("Payout operations");
+  addFormatOption(payoutsAdmin.command("list").description("List payouts.").option("--limit <n>", "Max results", "20").option("--status <status>", "Filter by status")).action(async (opts) => {
+    const params = new URLSearchParams({ limit: opts.limit });
+    if (opts.status)
+      params.set("status", opts.status);
+    const resp = await apiRequest({ path: `${consolePrefix()}/payout-ops/payouts?${params}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const rows = (json.data ?? json).map((p) => ({
+      id: p.id,
+      publisher: p.publisherName ?? p.publisher_name ?? p.tenantId ?? p.tenant_id,
+      amount: p.amount,
+      status: p.status,
+      requestedAt: p.requestedAt ?? p.requested_at ?? p.createdAt ?? p.created_at
+    }));
+    printData(rows, [
+      { key: "id", header: "ID", width: 36 },
+      { key: "publisher", header: "PUBLISHER", width: 25 },
+      { key: "amount", header: "AMOUNT", width: 12 },
+      { key: "status", header: "STATUS", width: 12 },
+      { key: "requestedAt", header: "REQUESTED_AT", width: 22 }
+    ], opts.format);
+  });
+  payoutsAdmin.command("approve").description("Approve a payout.").argument("<id>", "Payout ID").option("--yes", "Skip confirmation", false).action(async (id, opts) => {
+    await confirmAction(`Approve payout ${id}?`, opts.yes);
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/payout-ops/payouts/${id}/approve` });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Payout ${id} approved.`);
+  });
+  payoutsAdmin.command("reject").description("Reject a payout.").argument("<id>", "Payout ID").option("--yes", "Skip confirmation", false).option("--reason <reason>", "Rejection reason").action(async (id, opts) => {
+    await confirmAction(`Reject payout ${id}?`, opts.yes);
+    const body = {};
+    if (opts.reason)
+      body.reason = opts.reason;
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/payout-ops/payouts/${id}/reject`, body });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Payout ${id} rejected.`);
+  });
+  payoutsAdmin.command("process").description("Process a payout.").argument("<id>", "Payout ID").option("--yes", "Skip confirmation", false).action(async (id, opts) => {
+    await confirmAction(`Process payout ${id}?`, opts.yes);
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/payout-ops/payouts/${id}/process` });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Payout ${id} processed.`);
+  });
+  payoutsAdmin.command("manual-create").description("Manually create a payout.").option("--tenant-id <id>", "Publisher tenant ID (required)").option("--amount <amount>", "Payout amount (required)").option("--reason <reason>", "Reason for manual payout").option("--wallet <wallet>", "Wallet address").option("--network <network>", "Payment network").option("--yes", "Skip confirmation", false).action(async (opts) => {
+    if (!opts.tenantId) {
+      console.error("Error: --tenant-id is required.");
+      process.exit(1);
+    }
+    if (!opts.amount) {
+      console.error("Error: --amount is required.");
+      process.exit(1);
+    }
+    await confirmAction(`Create manual payout of ${opts.amount} for tenant ${opts.tenantId}?`, opts.yes);
+    const body = { tenantId: opts.tenantId, amount: opts.amount };
+    if (opts.reason)
+      body.reason = opts.reason;
+    if (opts.wallet)
+      body.wallet = opts.wallet;
+    if (opts.network)
+      body.network = opts.network;
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/billing-ops/manual-payout`, body });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Manual payout created: ${(json.data ?? json).id ?? "OK"}`);
+  });
+  const deposits = cmd.command("deposits").description("Deposit operations");
+  addFormatOption(deposits.command("list").description("List deposits.").option("--limit <n>", "Max results", "20").option("--status <status>", "Filter by status")).action(async (opts) => {
+    const params = new URLSearchParams({ limit: opts.limit });
+    if (opts.status)
+      params.set("status", opts.status);
+    const resp = await apiRequest({ path: `${consolePrefix()}/payments-ops/deposits?${params}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const transactions = json.data?.transactions ?? json.transactions ?? json.data ?? json;
+    const items = Array.isArray(transactions) ? transactions : [];
+    const rows = items.map((d) => ({
+      id: d.id,
+      advertiser: d.advertiser?.name ?? d.advertiserName ?? d.advertiser_name ?? d.tenantId ?? d.tenant_id,
+      amount: d.amount,
+      status: d.status,
+      date: d.createdAt ?? d.created_at ?? d.date
+    }));
+    printData(rows, [
+      { key: "id", header: "ID", width: 36 },
+      { key: "advertiser", header: "ADVERTISER", width: 25 },
+      { key: "amount", header: "AMOUNT", width: 12 },
+      { key: "status", header: "STATUS", width: 12 },
+      { key: "date", header: "DATE", width: 22 }
+    ], opts.format);
+  });
+  deposits.command("confirm").description("Confirm a deposit.").argument("<id>", "Deposit ID").option("--yes", "Skip confirmation", false).action(async (id, opts) => {
+    await confirmAction(`Confirm deposit ${id}?`, opts.yes);
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/payments-ops/deposits/${id}/confirm` });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Deposit ${id} confirmed.`);
+  });
+  deposits.command("manual-create").description("Manually create a deposit.").option("--tenant-id <id>", "Advertiser tenant ID (required)").option("--amount <amount>", "Deposit amount (required)").option("--reason <reason>", "Reason for manual deposit").option("--reference <ref>", "External reference").option("--notes <notes>", "Additional notes").option("--yes", "Skip confirmation", false).action(async (opts) => {
+    if (!opts.tenantId) {
+      console.error("Error: --tenant-id is required.");
+      process.exit(1);
+    }
+    if (!opts.amount) {
+      console.error("Error: --amount is required.");
+      process.exit(1);
+    }
+    await confirmAction(`Create manual deposit of ${opts.amount} for tenant ${opts.tenantId}?`, opts.yes);
+    const body = { tenantId: opts.tenantId, amount: opts.amount };
+    if (opts.reason)
+      body.reason = opts.reason;
+    if (opts.reference)
+      body.reference = opts.reference;
+    if (opts.notes)
+      body.notes = opts.notes;
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/billing-ops/manual-deposit`, body });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Manual deposit created: ${(json.data ?? json).id ?? "OK"}`);
+  });
+  const refunds = cmd.command("refunds").description("Refund operations");
+  addFormatOption(refunds.command("list").description("List refunds.").option("--limit <n>", "Max results", "20").option("--status <status>", "Filter by status")).action(async (opts) => {
+    const params = new URLSearchParams({ limit: opts.limit });
+    if (opts.status)
+      params.set("status", opts.status);
+    const resp = await apiRequest({ path: `${consolePrefix()}/payments-ops/refunds?${params}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const rows = (json.data ?? json).map((r) => ({
+      id: r.id,
+      advertiser: r.advertiserName ?? r.advertiser_name ?? r.accountId ?? r.account_id,
+      amount: r.amount,
+      reason: r.reason,
+      status: r.status
+    }));
+    printData(rows, [
+      { key: "id", header: "ID", width: 36 },
+      { key: "advertiser", header: "ADVERTISER", width: 25 },
+      { key: "amount", header: "AMOUNT", width: 12 },
+      { key: "reason", header: "REASON", width: 20 },
+      { key: "status", header: "STATUS", width: 12 }
+    ], opts.format);
+  });
+  addFormatOption(refunds.command("get").description("Get refund details.").argument("<id>", "Refund ID")).action(async (id, opts) => {
+    const resp = await apiRequest({ path: `${consolePrefix()}/payments-ops/refunds/${id}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  refunds.command("create").description("Create a refund.").option("--account-id <id>", "Account ID (required)").option("--amount <amount>", "Refund amount (required)").option("--reason <reason>", "Refund reason").option("--yes", "Skip confirmation", false).action(async (opts) => {
+    if (!opts.accountId) {
+      console.error("Error: --account-id is required.");
+      process.exit(1);
+    }
+    if (!opts.amount) {
+      console.error("Error: --amount is required.");
+      process.exit(1);
+    }
+    await confirmAction(`Create refund of ${opts.amount} for account ${opts.accountId}?`, opts.yes);
+    const body = { accountId: opts.accountId, amount: opts.amount };
+    if (opts.reason)
+      body.reason = opts.reason;
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/payments-ops/refunds`, body });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Refund created: ${(json.data ?? json).id ?? "OK"}`);
+  });
+  refunds.command("approve").description("Approve a refund.").argument("<id>", "Refund ID").option("--yes", "Skip confirmation", false).action(async (id, opts) => {
+    await confirmAction(`Approve refund ${id}?`, opts.yes);
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/payments-ops/refunds/${id}/approve` });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Refund ${id} approved.`);
+  });
+  refunds.command("reject").description("Reject a refund.").argument("<id>", "Refund ID").option("--yes", "Skip confirmation", false).option("--reason <reason>", "Rejection reason").action(async (id, opts) => {
+    await confirmAction(`Reject refund ${id}?`, opts.yes);
+    const body = {};
+    if (opts.reason)
+      body.reason = opts.reason;
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/payments-ops/refunds/${id}/reject`, body });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Refund ${id} rejected.`);
+  });
+  refunds.command("process").description("Process an approved refund.").argument("<id>", "Refund ID").option("--yes", "Skip confirmation", false).action(async (id, opts) => {
+    await confirmAction(`Process refund ${id}?`, opts.yes);
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/payments-ops/refunds/${id}/process` });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Refund ${id} processed.`);
+  });
+  const balances = cmd.command("balances").description("Account balance management");
+  addFormatOption(balances.command("list").description("List account balances.")).action(async (opts) => {
+    const resp = await apiRequest({ path: `${consolePrefix()}/billing-ops/balances` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  balances.command("adjust").description("Adjust an account balance.").option("--tenant-id <id>", "Tenant ID (required)").option("--amount <amount>", "Adjustment amount (required)").option("--reason <reason>", "Reason for adjustment").option("--account-type <type>", "Account type", "advertiser").option("--yes", "Skip confirmation", false).action(async (opts) => {
+    if (!opts.tenantId) {
+      console.error("Error: --tenant-id is required.");
+      process.exit(1);
+    }
+    if (!opts.amount) {
+      console.error("Error: --amount is required.");
+      process.exit(1);
+    }
+    await confirmAction(`Adjust balance by ${opts.amount} for tenant ${opts.tenantId} (${opts.accountType})?`, opts.yes);
+    const body = { tenantId: opts.tenantId, amount: opts.amount, accountType: opts.accountType };
+    if (opts.reason)
+      body.reason = opts.reason;
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/billing-ops/adjust`, body });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Balance adjusted for tenant ${opts.tenantId}.`);
+  });
+  return cmd;
+}
+
+// src/commands/external-ssp.ts
+var COLUMNS8 = [
+  { key: "id", header: "ID", width: 36 },
+  { key: "name", header: "NAME", width: 25 },
+  { key: "code", header: "CODE", width: 15 },
+  { key: "status", header: "STATUS", width: 12 },
+  { key: "formats", header: "FORMATS", width: 25, format: (v) => Array.isArray(v) ? v.join(", ") : "-" }
+];
+function createExternalSspCommand() {
+  const cmd = new Command("external-ssp").description(`External SSP Partner management (Console)
+
+Requires: platform_owner or platform_admin role.`).addHelpText("after", `
+Examples:
+  $ a8techads external-ssp list
+  $ a8techads external-ssp get <id>
+  $ a8techads external-ssp create --name "OpenX" --code OPENX --formats BANNER,VIDEO
+  $ a8techads external-ssp activate <id>
+  $ a8techads external-ssp pause <id>`);
+  addFormatOption(cmd.command("list").description("List all external SSP partners.").option("--status <status>", "Filter by status (TESTING, ACTIVE, SUSPENDED)").option("--limit <n>", "Max results", "20")).action(async (opts) => {
+    const params = new URLSearchParams;
+    if (opts.status)
+      params.set("status", opts.status);
+    params.set("limit", opts.limit);
+    const resp = await apiRequest({ path: `${consolePrefix()}/ssp-partners?${params}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const rows = (json.data ?? json).map((p) => ({
+      id: p.id,
+      name: p.name,
+      code: p.code,
+      status: p.status,
+      formats: p.supportedFormats ?? p.supported_formats ?? []
+    }));
+    printData(rows, COLUMNS8, opts.format);
+  });
+  addFormatOption(cmd.command("get").description("Get external SSP partner details (includes API key).").argument("<id>", "Partner ID")).action(async (id, opts) => {
+    const resp = await apiRequest({ path: `${consolePrefix()}/ssp-partners/${id}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  cmd.command("create").description("Create a new external SSP partner.").option("--name <name>", "Partner name (required)").option("--code <code>", "Partner code (auto-generated from name if omitted)").option("--formats <formats>", "Supported formats, comma-separated (default: BANNER,VIDEO,NATIVE)").addHelpText("after", `
+Examples:
+  $ a8techads external-ssp create --name "OpenX"
+  $ a8techads external-ssp create --name "AppLovin" --code APPLOVIN --formats BANNER,VIDEO`).action(async (opts) => {
+    if (!opts.name) {
+      console.error('Error: --name is required. Run "a8techads external-ssp create --help".');
+      process.exit(1);
+    }
+    const body = { name: opts.name };
+    if (opts.code)
+      body.code = opts.code;
+    if (opts.formats)
+      body.supportedFormats = opts.formats.split(",").map((f) => f.trim());
+    const resp = await apiRequest({ method: "POST", path: `${consolePrefix()}/ssp-partners`, body });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? json.errors ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const data = json.data ?? json;
+    console.log(`Partner created: ${data.id}`);
+    if (data.code)
+      console.log(`  Code: ${data.code}`);
+    if (data.apiKey)
+      console.log(`  API Key: ${data.apiKey}`);
+  });
+  cmd.command("update").description("Update an external SSP partner.").argument("<id>", "Partner ID").option("--name <name>", "New partner name").option("--formats <formats>", "Supported formats, comma-separated").action(async (id, opts) => {
+    const body = {};
+    if (opts.name)
+      body.name = opts.name;
+    if (opts.formats)
+      body.supportedFormats = opts.formats.split(",").map((f) => f.trim());
+    const resp = await apiRequest({ method: "PATCH", path: `${consolePrefix()}/ssp-partners/${id}`, body });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Partner ${id} updated.`);
+  });
+  cmd.command("delete").description("Delete an external SSP partner.").argument("<id>", "Partner ID").option("--yes", "Skip confirmation").action(async (id, opts) => {
+    if (!opts.yes) {
+      console.error("Add --yes to confirm deletion.");
+      process.exit(1);
+    }
+    const resp = await apiRequest({ method: "DELETE", path: `${consolePrefix()}/ssp-partners/${id}` });
+    if (!resp.ok && resp.status !== 204) {
+      console.error(`Error: ${resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Partner ${id} deleted.`);
+  });
+  cmd.command("activate").description("Activate an external SSP partner (TESTING/SUSPENDED → ACTIVE).").argument("<id>", "Partner ID").action(async (id) => {
+    const resp = await apiRequest({
+      method: "PATCH",
+      path: `${consolePrefix()}/ssp-partners/${id}/status`,
+      body: { status: "ACTIVE" }
+    });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Partner ${id} activated.`);
+  });
+  cmd.command("pause").description("Pause an external SSP partner (ACTIVE → SUSPENDED).").argument("<id>", "Partner ID").action(async (id) => {
+    const resp = await apiRequest({
+      method: "PATCH",
+      path: `${consolePrefix()}/ssp-partners/${id}/status`,
+      body: { status: "SUSPENDED" }
+    });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Partner ${id} paused.`);
+  });
+  return cmd;
+}
+
+// src/commands/settings.ts
+function settingsPrefix() {
+  const ctx = loadContext();
+  const context = getCurrentContext(ctx);
+  const app = context?.app ?? "dsp";
+  if (app === "console") {
+    console.error("Error: Settings commands are not available in Console mode.");
+    console.error('Switch to DSP or SSP context: "a8techads context dsp" or "a8techads context ssp"');
+    process.exit(1);
+  }
+  return app === "ssp" ? "/api/v1/ssp" : "/api/v1/dsp";
+}
+function createSettingsCommand() {
+  const cmd = new Command("settings").description(`Tenant settings (DSP / SSP only)
+
+Requires: ADVERTISER or PUBLISHER capability.
+Not available in Console mode.`).addHelpText("after", `
+Examples:
+  $ a8techads settings show
+  $ a8techads settings update --from-json settings.json
+  $ a8techads settings profile
+  $ a8techads settings profile-update --company-name "New Name"`);
+  addFormatOption(cmd.command("show").description("Show current tenant settings.")).action(async (opts) => {
+    const resp = await apiRequest({ path: `${settingsPrefix()}/settings` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  addFormatOption(cmd.command("profile").description("Show tenant profile (contact/business info).")).action(async (opts) => {
+    const resp = await apiRequest({ path: `${settingsPrefix()}/settings/profile` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  cmd.command("update").description(`Update tenant settings.
+
+Requires: admin role.`).option("--from-json <file>", "Update from JSON file").action(async (opts) => {
+    if (!opts.fromJson) {
+      console.error("Error: --from-json is required for settings update.");
+      process.exit(1);
+    }
+    const { readFileSync: readFileSync4 } = await import("fs");
+    const body = JSON.parse(readFileSync4(opts.fromJson, "utf-8"));
+    const resp = await apiRequest({ method: "PATCH", path: `${settingsPrefix()}/settings`, body });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log("Settings updated.");
+  });
+  cmd.command("profile-update").description("Update tenant profile.").option("--company-name <name>", "Company name").option("--from-json <file>", "Update from JSON file").action(async (opts) => {
+    let body;
+    if (opts.fromJson) {
+      const { readFileSync: readFileSync4 } = await import("fs");
+      body = JSON.parse(readFileSync4(opts.fromJson, "utf-8"));
+    } else {
+      body = {};
+      if (opts.companyName)
+        body.companyName = opts.companyName;
+    }
+    const resp = await apiRequest({ method: "PATCH", path: `${settingsPrefix()}/settings/profile`, body });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log("Profile updated.");
+  });
+  return cmd;
+}
+
+// src/commands/invoices.ts
+function createInvoicesCommand() {
+  const cmd = new Command("invoices").description(`Invoice management (DSP)
+
+Requires: ADVERTISER capability.`).addHelpText("after", `
+Examples:
+  $ a8techads invoices list
+  $ a8techads invoices get <id>
+  $ a8techads invoices spending`);
+  addFormatOption(cmd.command("list").description("List invoices.")).action(async (opts) => {
+    const resp = await apiRequest({ path: `${dspPrefix()}/invoices` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const columns = [
+      { key: "id", header: "ID", width: 36 },
+      { key: "period", header: "PERIOD", width: 20 },
+      { key: "amount", header: "AMOUNT", width: 12, format: (v) => v != null ? `$${Number(v).toFixed(2)}` : "-" },
+      { key: "status", header: "STATUS", width: 12 }
+    ];
+    const rows = (json.data ?? json).map((i) => ({
+      id: i.id,
+      period: i.period ?? i.billingPeriod,
+      amount: i.amount ?? i.totalAmount,
+      status: i.status
+    }));
+    printData(rows, columns, opts.format);
+  });
+  addFormatOption(cmd.command("get").description("Get invoice details.").argument("<id>", "Invoice ID")).action(async (id, opts) => {
+    const resp = await apiRequest({ path: `${dspPrefix()}/invoices/${id}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  addFormatOption(cmd.command("spending").description("Show current period spending summary.")).action(async (opts) => {
+    const resp = await apiRequest({ path: `${dspPrefix()}/invoices/spending` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  return cmd;
+}
+
+// src/commands/conversion-goals.ts
+var COLUMNS9 = [
+  { key: "id", header: "ID", width: 36 },
+  { key: "name", header: "NAME", width: 24 },
+  { key: "goalOrder", header: "G#", width: 4 },
+  { key: "conversionType", header: "TYPE", width: 20 },
+  { key: "valueType", header: "VALUE", width: 10 },
+  { key: "status", header: "STATUS", width: 10 }
+];
+function createConversionGoalsCommand() {
+  const cmd = new Command("conversion-goals").description(`Conversion goal management (DSP)
+
+Requires: ADVERTISER capability.`).addHelpText("after", `
+Examples:
+  $ a8techads conversion-goals list
+  $ a8techads conversion-goals get <id>
+  $ a8techads conversion-goals create --name "Purchase" --conversion-type PURCHASE_CC --goal-order 1
+  $ a8techads conversion-goals pause <id>`);
+  addFormatOption(cmd.command("list").description("List conversion goals.").option("--status <status>", "Filter by status (ACTIVE, PAUSED, ARCHIVED)").option("--limit <n>", "Max results", "20")).action(async (opts) => {
+    const params = new URLSearchParams;
+    if (opts.status)
+      params.set("status", opts.status);
+    params.set("limit", opts.limit);
+    const resp = await apiRequest({ path: `${dspPrefix()}/conversion-goals?${params}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const rows = (json.data ?? json).map((g) => ({
+      id: g.id,
+      name: g.name,
+      goalOrder: `G${g.goalOrder ?? g.goal_order}`,
+      conversionType: g.conversionType ?? g.conversion_type,
+      valueType: g.valueType ?? g.value_type,
+      status: g.status
+    }));
+    printData(rows, COLUMNS9, opts.format);
+  });
+  addFormatOption(cmd.command("get").description("Get conversion goal details.").argument("<id>", "Goal ID")).action(async (id, opts) => {
+    const resp = await apiRequest({ path: `${dspPrefix()}/conversion-goals/${id}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  cmd.command("create").description(`Create a conversion goal.
+
+Conversion types: APP_INSTALL, LEAD_SOI, LEAD_DOI, PURCHASE_CC, PURCHASE_COD,
+  PURCHASE_CARRIER, SUBSCRIPTION_CC, SUBSCRIPTION_CARRIER, WEBSITE_INTERACTION, MULTIPLE, OTHER`).option("--name <name>", "Goal name (required)").option("--conversion-type <type>", "Conversion type (required)").option("--goal-order <n>", "Priority 1-10, maps to G1-G10 (required)").option("--value-type <type>", "NO_VALUE, FIXED, or DYNAMIC", "NO_VALUE").option("--fixed-value <amount>", "Fixed value per conversion (when value-type is FIXED)").option("--count-type <type>", "ONE per user or EVERY conversion", "EVERY").option("--window <hours>", "Attribution window in hours", "720").option("--description <text>", "Goal description").option("--from-json <file>", "Create from JSON file").action(async (opts) => {
+    let body;
+    if (opts.fromJson) {
+      const { readFileSync: readFileSync4 } = await import("fs");
+      body = JSON.parse(readFileSync4(opts.fromJson, "utf-8"));
+    } else {
+      if (!opts.name) {
+        console.error("Error: --name is required");
+        process.exit(1);
+      }
+      if (!opts.conversionType) {
+        console.error("Error: --conversion-type is required");
+        process.exit(1);
+      }
+      if (!opts.goalOrder) {
+        console.error("Error: --goal-order is required (1-10)");
+        process.exit(1);
+      }
+      body = {
+        name: opts.name,
+        conversionType: opts.conversionType,
+        goalOrder: Number(opts.goalOrder),
+        valueType: opts.valueType,
+        countType: opts.countType,
+        conversionWindowHours: Number(opts.window)
+      };
+      if (opts.fixedValue)
+        body.fixedValue = Number(opts.fixedValue);
+      if (opts.description)
+        body.description = opts.description;
+    }
+    const resp = await apiRequest({ method: "POST", path: `${dspPrefix()}/conversion-goals`, body });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? json.errors ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const goal = json.data ?? json;
+    console.log(`Conversion goal created: ${goal.id}`);
+    console.log(`  Goal ID: ${goal.goalId ?? goal.goal_id}`);
+    console.log(`  Postback URL: ${goal.postbackUrl ?? goal.postback_url ?? "(see get)"}`);
+  });
+  cmd.command("update").description("Update a conversion goal.").argument("<id>", "Goal ID").option("--name <name>", "New name").option("--description <text>", "New description").option("--value-type <type>", "NO_VALUE, FIXED, or DYNAMIC").option("--fixed-value <amount>", "Fixed value").option("--count-type <type>", "ONE or EVERY").option("--window <hours>", "Attribution window").option("--from-json <file>", "Update from JSON file").action(async (id, opts) => {
+    let body;
+    if (opts.fromJson) {
+      const { readFileSync: readFileSync4 } = await import("fs");
+      body = JSON.parse(readFileSync4(opts.fromJson, "utf-8"));
+    } else {
+      body = {};
+      if (opts.name)
+        body.name = opts.name;
+      if (opts.description)
+        body.description = opts.description;
+      if (opts.valueType)
+        body.valueType = opts.valueType;
+      if (opts.fixedValue)
+        body.fixedValue = Number(opts.fixedValue);
+      if (opts.countType)
+        body.countType = opts.countType;
+      if (opts.window)
+        body.conversionWindowHours = Number(opts.window);
+    }
+    const resp = await apiRequest({ method: "PATCH", path: `${dspPrefix()}/conversion-goals/${id}`, body });
+    if (!resp.ok) {
+      const j = await resp.json();
+      console.error(`Error: ${j.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Conversion goal ${id} updated.`);
+  });
+  cmd.command("delete").description("Delete a conversion goal.").argument("<id>", "Goal ID").option("--yes", "Skip confirmation").action(async (id, opts) => {
+    if (!opts.yes) {
+      console.error("Add --yes to confirm deletion.");
+      process.exit(1);
+    }
+    const resp = await apiRequest({ method: "DELETE", path: `${dspPrefix()}/conversion-goals/${id}` });
+    if (!resp.ok && resp.status !== 204) {
+      console.error(`Error: ${resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Conversion goal ${id} deleted.`);
+  });
+  for (const action of ["pause", "activate", "archive"]) {
+    cmd.command(action).description(`${action.charAt(0).toUpperCase() + action.slice(1)} a conversion goal.`).argument("<id>", "Goal ID").action(async (id) => {
+      const resp = await apiRequest({ method: "PATCH", path: `${dspPrefix()}/conversion-goals/${id}/${action}` });
+      if (!resp.ok) {
+        const j = await resp.json();
+        console.error(`Error: ${j.error ?? resp.statusText}`);
+        process.exit(1);
+      }
+      console.log(`Conversion goal ${id} ${action}d.`);
+    });
+  }
+  cmd.command("regenerate-secret").description("Regenerate secret key and postback URL.").argument("<id>", "Goal ID").action(async (id) => {
+    const resp = await apiRequest({ method: "POST", path: `${dspPrefix()}/conversion-goals/${id}/regenerate-secret` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const goal = json.data ?? json;
+    console.log(`Secret regenerated for goal ${id}`);
+    console.log(`  New postback URL: ${goal.postbackUrl ?? goal.postback_url}`);
+  });
+  return cmd;
+}
+
+// src/commands/algorithms.ts
+var COLUMNS10 = [
+  { key: "id", header: "ID", width: 36 },
+  { key: "name", header: "NAME", width: 28 },
+  { key: "goal", header: "GOAL", width: 8 },
+  { key: "conversionGoalId", header: "CONV_GOAL", width: 36 },
+  { key: "status", header: "STATUS", width: 10 },
+  { key: "campaignCount", header: "CAMPAIGNS", width: 10 }
+];
+function createAlgorithmsCommand() {
+  const cmd = new Command("algorithms").description(`Bidder algorithm management (DSP)
+
+Requires: ADVERTISER capability.`).addHelpText("after", `
+Examples:
+  $ a8techads algorithms list
+  $ a8techads algorithms get <id>
+  $ a8techads algorithms create --name "CPA Base" --optimization-goal CPA --target-value 5
+  $ a8techads algorithms update <id> --conversion-goal-id <goal-id>
+  $ a8techads algorithms pause <id>`);
+  addFormatOption(cmd.command("list").description("List bidder algorithms.").option("--status <status>", "Filter by status (ACTIVE, PAUSED, ARCHIVED)").option("--limit <n>", "Max results", "20")).action(async (opts) => {
+    const params = new URLSearchParams;
+    if (opts.status)
+      params.set("status", opts.status);
+    params.set("limit", opts.limit);
+    const resp = await apiRequest({ path: `${dspPrefix()}/bidder-algorithms?${params}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const rows = (json.data ?? json).map((algo) => ({
+      id: algo.id,
+      name: algo.name,
+      goal: algo.optimizationGoal,
+      conversionGoalId: algo.conversionGoalId,
+      status: algo.status,
+      campaignCount: algo.campaignCount ?? 0
+    }));
+    printData(rows, COLUMNS10, opts.format);
+  });
+  addFormatOption(cmd.command("get").description("Get bidder algorithm details.").argument("<id>", "Algorithm ID")).action(async (id, opts) => {
+    const resp = await apiRequest({ path: `${dspPrefix()}/bidder-algorithms/${id}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  cmd.command("create").description("Create a bidder algorithm.").option("--name <name>", "Algorithm name (required)").option("--description <text>", "Description").option("--optimization-goal <goal>", "CPA, ROAS, CTR, or CVR").option("--target-value <number>", "Target value").option("--conversion-goal-id <id>", "Conversion goal ID").option("--from-json <file>", "Create from JSON file").action(async (opts) => {
+    const body = await buildAlgorithmBody(opts, true);
+    const resp = await apiRequest({ method: "POST", path: `${dspPrefix()}/bidder-algorithms`, body });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? json.errors ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Algorithm created: ${json.data?.id ?? json.id}`);
+  });
+  cmd.command("update").description("Update a bidder algorithm.").argument("<id>", "Algorithm ID").option("--name <name>", "Algorithm name").option("--description <text>", "Description").option("--optimization-goal <goal>", "CPA, ROAS, CTR, or CVR").option("--target-value <number>", "Target value").option("--conversion-goal-id <id>", "Conversion goal ID").option("--from-json <file>", "Update from JSON file").action(async (id, opts) => {
+    const body = await buildAlgorithmBody(opts, false);
+    const resp = await apiRequest({ method: "PATCH", path: `${dspPrefix()}/bidder-algorithms/${id}`, body });
+    const json = await resp.json().catch(() => ({}));
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? json.errors ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Algorithm ${id} updated.`);
+  });
+  cmd.command("archive").description("Archive a bidder algorithm by setting status to ARCHIVED.").argument("<id>", "Algorithm ID").option("--yes", "Skip confirmation").action(async (id, opts) => {
+    if (!opts.yes) {
+      console.error("Add --yes to confirm archiving.");
+      process.exit(1);
+    }
+    const resp = await apiRequest({
+      method: "PATCH",
+      path: `${dspPrefix()}/bidder-algorithms/${id}`,
+      body: { status: "ARCHIVED" }
+    });
+    const json = await resp.json().catch(() => ({}));
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? json.errors ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Algorithm ${id} archived.`);
+  });
+  for (const action of ["pause", "activate"]) {
+    cmd.command(action).description(`${action.charAt(0).toUpperCase() + action.slice(1)} a bidder algorithm.`).argument("<id>", "Algorithm ID").action(async (id) => {
+      const resp = await apiRequest({
+        method: "PATCH",
+        path: `${dspPrefix()}/bidder-algorithms/${id}/${action}`
+      });
+      const json = await resp.json().catch(() => ({}));
+      if (!resp.ok) {
+        console.error(`Error: ${json.error ?? json.errors ?? resp.statusText}`);
+        process.exit(1);
+      }
+      console.log(`Algorithm ${id} ${action}d.`);
+    });
+  }
+  return cmd;
+}
+async function buildAlgorithmBody(opts, creating) {
+  if (opts.fromJson) {
+    const { readFileSync: readFileSync4 } = await import("fs");
+    return JSON.parse(readFileSync4(opts.fromJson, "utf-8"));
+  }
+  const body = {};
+  if (opts.name)
+    body.name = opts.name;
+  if (opts.description)
+    body.description = opts.description;
+  if (opts.optimizationGoal)
+    body.optimizationGoal = String(opts.optimizationGoal).toUpperCase();
+  if (opts.targetValue !== undefined)
+    body.targetValue = Number(opts.targetValue);
+  if (opts.conversionGoalId)
+    body.conversionGoalId = opts.conversionGoalId;
+  if (creating) {
+    if (!body.name) {
+      console.error("Error: --name is required.");
+      process.exit(1);
+    }
+    if (!body.optimizationGoal) {
+      console.error("Error: --optimization-goal is required.");
+      process.exit(1);
+    }
+    if (body.targetValue === undefined) {
+      console.error("Error: --target-value is required.");
+      process.exit(1);
+    }
+  }
+  return body;
+}
+
+// src/commands/payouts.ts
+function createPayoutsCommand() {
+  const cmd = new Command("payouts").description(`Payout management (SSP)
+
+Requires: PUBLISHER capability.`).addHelpText("after", `
+Examples:
+  $ a8techads payouts balance
+  $ a8techads payouts account
+  $ a8techads payouts list --limit 10
+  $ a8techads payouts request --amount 50 --method usdt --yes`);
+  addFormatOption(cmd.command("balance").description("Show current payout balance.")).action(async (opts) => {
+    const resp = await apiRequest({ path: `${sspPrefix()}/payouts/balance` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  addFormatOption(cmd.command("account").description("Show payout account details.")).action(async (opts) => {
+    const resp = await apiRequest({ path: `${sspPrefix()}/payouts/account` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json.data ?? json, opts.format);
+  });
+  addFormatOption(cmd.command("list").description("List payout history.").option("--limit <n>", "Max results", "20").option("--status <status>", "Filter by status")).action(async (opts) => {
+    const params = new URLSearchParams({ limit: opts.limit });
+    if (opts.status)
+      params.set("status", opts.status);
+    const resp = await apiRequest({ path: `${sspPrefix()}/payouts/list?${params}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
       process.exit(1);
     }
     const columns = [
       { key: "id", header: "ID", width: 36 },
-      { key: "period", header: "PERIOD", width: 20 },
+      { key: "amount", header: "AMOUNT", width: 12, format: (v) => v != null ? `$${Number(v).toFixed(2)}` : "-" },
+      { key: "status", header: "STATUS", width: 14 },
+      { key: "method", header: "METHOD", width: 10 },
+      { key: "requestedAt", header: "REQUESTED_AT", width: 20 }
+    ];
+    const rows = (json.data ?? json).map((t) => ({
+      id: t.id,
+      amount: t.amount,
+      status: t.status,
+      method: t.method,
+      requestedAt: t.requestedAt ?? t.requested_at
+    }));
+    printData(rows, columns, opts.format);
+  });
+  cmd.command("request").description("Request a payout.").option("--amount <dollars>", "Payout amount in dollars (required)").option("--method <method>", "Payout method", "usdt").option("--wallet <address>", "Wallet address").option("--network <network>", "Network for crypto payouts", "TRC20").option("--yes", "Skip confirmation prompt").action(async (opts) => {
+    if (!opts.amount) {
+      console.error("Error: --amount is required.");
+      process.exit(1);
+    }
+    const amount = Number(opts.amount);
+    if (isNaN(amount) || amount <= 0) {
+      console.error("Error: Amount must be a positive number.");
+      process.exit(1);
+    }
+    if (!opts.yes) {
+      const rl = await import("readline");
+      const iface = rl.createInterface({ input: process.stdin, output: process.stdout });
+      const answer = await new Promise((resolve) => iface.question(`Request payout of $${amount.toFixed(2)}? (y/N) `, resolve));
+      iface.close();
+      if (answer.toLowerCase() !== "y") {
+        console.log("Cancelled.");
+        process.exit(0);
+      }
+    }
+    let resp;
+    if (opts.method === "usdt") {
+      const body = { amount, walletAddress: opts.wallet, network: opts.network };
+      resp = await apiRequest({ method: "POST", path: `${sspPrefix()}/payments/usdt/payout`, body });
+    } else {
+      resp = await apiRequest({ method: "POST", path: `${sspPrefix()}/payouts/request`, body: { amount } });
+    }
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(`Payout of $${amount.toFixed(2)} requested successfully.`);
+  });
+  return cmd;
+}
+
+// src/commands/statements.ts
+function createStatementsCommand() {
+  const cmd = new Command("statements").description(`Statement management (SSP)
+
+Requires: PUBLISHER capability.`).addHelpText("after", `
+Examples:
+  $ a8techads statements list
+  $ a8techads statements get <id>`);
+  addFormatOption(cmd.command("list").description("List statements.").option("--limit <n>", "Max results", "20")).action(async (opts) => {
+    const params = new URLSearchParams({ limit: opts.limit });
+    const resp = await apiRequest({ path: `${sspPrefix()}/statements?${params}` });
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    const columns = [
+      { key: "id", header: "ID", width: 36 },
+      { key: "number", header: "NUMBER", width: 14 },
+      { key: "period", header: "PERIOD", width: 16 },
       { key: "amount", header: "AMOUNT", width: 12, format: (v) => v != null ? `$${Number(v).toFixed(2)}` : "-" },
       { key: "status", header: "STATUS", width: 12 }
     ];
-    const rows = (json.data ?? json).map((i) => ({
-      id: i.id,
-      period: i.period ?? i.billingPeriod,
-      amount: i.amount ?? i.totalAmount,
-      status: i.status
+    const rows = (json.data ?? json).map((t) => ({
+      id: t.id,
+      number: t.number,
+      period: t.period,
+      amount: t.amount,
+      status: t.status
     }));
     printData(rows, columns, opts.format);
   });
-  addFormatOption(cmd.command("get").description("Get invoice details.").argument("<id>", "Invoice ID")).action(async (id, opts) => {
-    const resp = await apiRequest({ path: `${dspPrefix()}/invoices/${id}` });
+  addFormatOption(cmd.command("get <id>").description("Show statement details.")).action(async (id, opts) => {
+    const resp = await apiRequest({ path: `${sspPrefix()}/statements/${id}` });
     const json = await resp.json();
     if (!resp.ok) {
       console.error(`Error: ${json.error ?? resp.statusText}`);
@@ -4605,21 +6526,122 @@ Examples:
     }
     printDetail(json.data ?? json, opts.format);
   });
-  addFormatOption(cmd.command("spending").description("Show current period spending summary.")).action(async (opts) => {
-    const resp = await apiRequest({ path: `${dspPrefix()}/invoices/spending` });
+  return cmd;
+}
+
+// src/commands/simulator.ts
+import { readFileSync as readFileSync4 } from "fs";
+async function confirmAction2(message, yes) {
+  if (yes)
+    return;
+  const rl = await import("readline");
+  const iface = rl.createInterface({ input: process.stdin, output: process.stdout });
+  const answer = await new Promise((resolve) => iface.question(`${message} (y/N) `, resolve));
+  iface.close();
+  if (answer.toLowerCase() !== "y") {
+    console.log("Cancelled.");
+    process.exit(0);
+  }
+}
+function createSimulatorCommand() {
+  const cmd = new Command("simulator").description(`Simulator control and inspection
+
+Used for replay and traffic verification workflows.`).addHelpText("after", `
+Examples:
+  $ a8techads simulator status
+  $ a8techads simulator start
+  $ a8techads simulator stop --yes
+  $ a8techads simulator reset --yes
+  $ a8techads simulator config show
+  $ a8techads simulator config update --from-json ./simulator-config.json`);
+  addFormatOption(cmd.command("status").description("Show simulator runtime status and counters.")).action(async (opts) => {
+    const resp = await simulatorRequest("GET", "/api/v1/simulator/status");
     const json = await resp.json();
     if (!resp.ok) {
       console.error(`Error: ${json.error ?? resp.statusText}`);
       process.exit(1);
     }
-    printDetail(json.data ?? json, opts.format);
+    printDetail(json, opts.format);
+  });
+  cmd.command("start").description("Start the simulator.").option("--from-json <file>", "Optional JSON file used as start config override").action(async (opts) => {
+    let body = undefined;
+    if (opts.fromJson) {
+      body = JSON.parse(readFileSync4(opts.fromJson, "utf-8"));
+    }
+    const resp = await simulatorRequest("POST", "/api/v1/simulator/start", body);
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(json.message ?? "Simulator started.");
+  });
+  cmd.command("stop").description("Stop the simulator.").option("--yes", "Skip confirmation prompt").action(async (opts) => {
+    await confirmAction2("Stop simulator?", opts.yes);
+    const resp = await simulatorRequest("POST", "/api/v1/simulator/stop");
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(json.message ?? "Simulator stopped.");
+  });
+  cmd.command("reset").description("Reset simulator counters and stats.").option("--yes", "Skip confirmation prompt").action(async (opts) => {
+    await confirmAction2("Reset simulator stats?", opts.yes);
+    const resp = await simulatorRequest("POST", "/api/v1/simulator/reset");
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log(json.message ?? "Simulator stats reset.");
+  });
+  const config = cmd.command("config").description("Simulator config management");
+  addFormatOption(config.command("show").description("Show current simulator config.")).action(async (opts) => {
+    const resp = await simulatorRequest("GET", "/api/v1/simulator/config");
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    printDetail(json, opts.format);
+  });
+  config.command("update").description("Update simulator config from a JSON file.").requiredOption("--from-json <file>", "JSON file path").action(async (opts) => {
+    const body = JSON.parse(readFileSync4(opts.fromJson, "utf-8"));
+    const resp = await simulatorRequest("POST", "/api/v1/simulator/config", body);
+    const json = await resp.json();
+    if (!resp.ok) {
+      console.error(`Error: ${json.error ?? resp.statusText}`);
+      process.exit(1);
+    }
+    console.log("Simulator config updated.");
+    if (json.config) {
+      printDetail(json.config, "table");
+    }
   });
   return cmd;
 }
+async function simulatorRequest(method, path, body) {
+  const creds = loadCredentials();
+  const profile = getCurrentProfile(creds);
+  if (!profile) {
+    throw new Error('No active profile. Run "a8techads auth login" to authenticate.');
+  }
+  const baseUrl = toConsoleApiBase(profile.api_url);
+  const request = await buildAuthenticatedRequest({ method, path, body, baseUrl });
+  return fetch(request.url, request.init);
+}
+function toConsoleApiBase(apiUrl) {
+  const url = new URL(apiUrl);
+  if (url.hostname.startsWith("api.")) {
+    url.hostname = url.hostname.replace(/^api\./, "console.");
+  }
+  return url.origin;
+}
 
 // src/index.ts
 function createProgram() {
-  const program2 = new Command().name("a8techads").description("A8TechAds CLI — programmatic ad platform management").version("0.2.0").addHelpText("after", `
+  const program2 = new Command().name("a8techads").description("A8TechAds CLI — programmatic ad platform management").version("0.4.1").addHelpText("after", `
 Command Groups:
   auth          Authentication (login, logout, token, status)
   profile       Multi-profile management
@@ -4627,13 +6649,21 @@ Command Groups:
   audiences     Audience management (DSP)
   campaigns     Campaign management (DSP)
   variations    Ad variation management (DSP)
+  conversion-goals  Conversion goal management (DSP)
+  media-assets  Media library management (DSP)
+  algorithms    Bidder algorithm management (DSP)
   sites         Site management (SSP)
   zones         Ad zone management (SSP)
   reports       Analytics and reporting
   billing       Billing and payments (DSP)
   invoices      Invoice management (DSP)
+  payouts       Payout management (SSP)
+  statements    Statement management (SSP)
+  simulator     Simulator control and replay support
   users         Team member management
   settings      Tenant settings
+  admin         Platform administration (Console)
+  external-ssp  External SSP partner management (Console)
 
 Getting Started:
   $ a8techads auth login                    # Authenticate
@@ -4647,13 +6677,21 @@ Getting Started:
   program2.addCommand(createAudiencesCommand());
   program2.addCommand(createCampaignsCommand());
   program2.addCommand(createVariationsCommand());
+  program2.addCommand(createMediaAssetsCommand());
+  program2.addCommand(createConversionGoalsCommand());
+  program2.addCommand(createAlgorithmsCommand());
   program2.addCommand(createSitesCommand());
   program2.addCommand(createZonesCommand());
   program2.addCommand(createReportsCommand());
   program2.addCommand(createBillingCommand());
+  program2.addCommand(createPayoutsCommand());
+  program2.addCommand(createStatementsCommand());
+  program2.addCommand(createSimulatorCommand());
   program2.addCommand(createUsersCommand());
   program2.addCommand(createSettingsCommand());
   program2.addCommand(createInvoicesCommand());
+  program2.addCommand(createAdminCommand());
+  program2.addCommand(createExternalSspCommand());
   return program2;
 }