@affonso/cli 0.1.3 → 0.1.5

package/dist/index.js

@@ -26,13 +26,880 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 // src/cli.ts
 var import_commander = require("commander");
 
-// src/lib/client.ts
-var import_sdk = require("@affonso/sdk");
+// package.json
+var package_default = {
+  name: "@affonso/cli",
+  version: "0.1.5",
+  description: "Command line interface for the Affonso affiliate marketing platform",
+  bin: {
+    affonso: "dist/index.js"
+  },
+  files: [
+    "dist"
+  ],
+  scripts: {
+    build: "tsup",
+    prepack: "npm run build -- --silent",
+    dev: "tsup --watch",
+    test: "vitest run",
+    "test:package": "npm run build && node scripts/smoke-package.mjs",
+    "test:watch": "vitest",
+    lint: "biome check src/",
+    "lint:fix": "biome check --write src/",
+    typecheck: "tsc --noEmit"
+  },
+  engines: {
+    node: ">=18"
+  },
+  dependencies: {
+    "@affonso/sdk": "^0.2.0",
+    commander: "^12.0.0",
+    open: "^10.0.0"
+  },
+  devDependencies: {
+    "@biomejs/biome": "^1.9.0",
+    "@types/node": "^20.0.0",
+    tsup: "^8.0.0",
+    typescript: "^5.7.0",
+    vitest: "^2.0.0"
+  },
+  keywords: [
+    "affonso",
+    "affiliate",
+    "cli"
+  ],
+  license: "MIT"
+};
+
+// node_modules/@affonso/sdk/dist/index.mjs
+var AffonsoError = class extends Error {
+  status;
+  code;
+  field;
+  details;
+  headers;
+  constructor(message, opts2) {
+    super(message);
+    this.name = "AffonsoError";
+    this.status = opts2?.status;
+    this.code = opts2?.code;
+    this.field = opts2?.field;
+    this.details = opts2?.details;
+    this.headers = opts2?.headers;
+  }
+};
+var AuthenticationError = class extends AffonsoError {
+  constructor(message, opts2) {
+    super(message, { ...opts2, status: 401 });
+    this.name = "AuthenticationError";
+  }
+};
+var PermissionError = class extends AffonsoError {
+  constructor(message, opts2) {
+    super(message, { ...opts2, status: 403 });
+    this.name = "PermissionError";
+  }
+};
+var NotFoundError = class extends AffonsoError {
+  constructor(message, opts2) {
+    super(message, { ...opts2, status: 404 });
+    this.name = "NotFoundError";
+  }
+};
+var ValidationError = class extends AffonsoError {
+  details;
+  constructor(message, details, opts2) {
+    super(message, { ...opts2, status: 400, details });
+    this.name = "ValidationError";
+    this.details = details;
+  }
+};
+var DuplicateError = class extends AffonsoError {
+  constructor(message, opts2) {
+    super(message, { ...opts2, status: 409 });
+    this.name = "DuplicateError";
+  }
+};
+var RateLimitError = class extends AffonsoError {
+  retryAfter;
+  constructor(message, retryAfter, opts2) {
+    super(message, { ...opts2, status: 429 });
+    this.name = "RateLimitError";
+    this.retryAfter = retryAfter;
+  }
+};
+var InternalError = class extends AffonsoError {
+  constructor(message, opts2) {
+    super(message, opts2);
+    this.name = "InternalError";
+  }
+};
+var ConnectionError = class extends AffonsoError {
+  constructor(message) {
+    super(message, { status: void 0 });
+    this.name = "ConnectionError";
+  }
+};
+function errorFromResponse(status, body, headers) {
+  const err = body.error ?? {};
+  const message = err.message ?? `Request failed with status ${status}`;
+  const code = err.code;
+  const opts2 = { status, code, field: err.field, details: err.details, headers };
+  if (code === "VALIDATION_ERROR" || !code && status === 400) {
+    return new ValidationError(message, err.details ?? [], opts2);
+  }
+  if (code === "RATE_LIMIT_EXCEEDED" || !code && status === 429) {
+    const retry = headers.get("x-ratelimit-reset");
+    return new RateLimitError(message, retry ? Number(retry) : void 0, opts2);
+  }
+  if (code === "UNAUTHORIZED" || !code && status === 401) {
+    return new AuthenticationError(message, opts2);
+  }
+  if (code === "FORBIDDEN" || !code && status === 403) {
+    return new PermissionError(message, opts2);
+  }
+  if (code === "NOT_FOUND" || !code && status === 404) {
+    return new NotFoundError(message, opts2);
+  }
+  if (code === "DUPLICATE_ERROR" || !code && status === 409) {
+    return new DuplicateError(message, opts2);
+  }
+  if (status >= 500) return new InternalError(message, opts2);
+  return new AffonsoError(message, opts2);
+}
+var VERSION = true ? "0.2.0" : "0.1.0";
+function buildQueryString(params) {
+  const parts = [];
+  for (const [key, value] of Object.entries(params)) {
+    if (value === void 0 || value === null) continue;
+    if (Array.isArray(value)) {
+      for (const v of value) {
+        parts.push(`${encodeURIComponent(key)}=${encodeURIComponent(String(v))}`);
+      }
+    } else {
+      parts.push(`${encodeURIComponent(key)}=${encodeURIComponent(String(value))}`);
+    }
+  }
+  return parts.length > 0 ? `?${parts.join("&")}` : "";
+}
+function isRetryable(status) {
+  return status === 429 || status >= 500;
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function isNode() {
+  return typeof process !== "undefined" && process.versions != null && process.versions.node != null;
+}
+var HttpClient = class {
+  config;
+  constructor(config) {
+    this.config = config;
+  }
+  async request(opts2) {
+    const url = `${this.config.baseUrl}${opts2.path}${opts2.query ? buildQueryString(opts2.query) : ""}`;
+    const headers = {
+      Authorization: `Bearer ${this.config.apiKey}`,
+      "Content-Type": "application/json"
+    };
+    if (isNode()) {
+      headers["User-Agent"] = `affonso-sdk/${VERSION}`;
+    }
+    let lastError;
+    for (let attempt = 0; attempt <= this.config.maxRetries; attempt++) {
+      const controller = new AbortController();
+      const timeoutId = setTimeout(
+        () => controller.abort(new Error("Request timed out")),
+        this.config.timeout
+      );
+      try {
+        const response = await this.config.fetch(url, {
+          method: opts2.method,
+          headers,
+          body: opts2.body ? JSON.stringify(opts2.body) : void 0,
+          signal: controller.signal
+        });
+        clearTimeout(timeoutId);
+        if (response.status === 204) {
+          return void 0;
+        }
+        let body;
+        try {
+          body = await response.json();
+        } catch {
+          throw new AffonsoError(
+            `Expected JSON response but received unparseable body (status ${response.status})`,
+            { status: response.status, headers: response.headers }
+          );
+        }
+        if (!response.ok || body.success === false) {
+          const error = errorFromResponse(response.status, body, response.headers);
+          if (isRetryable(response.status) && attempt < this.config.maxRetries) {
+            lastError = error;
+            const waitMs = this.getRetryDelay(attempt, response.headers);
+            await sleep(waitMs);
+            continue;
+          }
+          throw error;
+        }
+        return body;
+      } catch (err) {
+        clearTimeout(timeoutId);
+        if (err instanceof Error && err.name === "AbortError") {
+          const connErr = new ConnectionError("Request timed out");
+          if (attempt < this.config.maxRetries) {
+            lastError = connErr;
+            await sleep(this.getRetryDelay(attempt));
+            continue;
+          }
+          throw connErr;
+        }
+        if (err instanceof AffonsoError) {
+          throw err;
+        }
+        if (err instanceof Error) {
+          const connErr = new ConnectionError(err.message);
+          if (attempt < this.config.maxRetries) {
+            lastError = connErr;
+            await sleep(this.getRetryDelay(attempt));
+            continue;
+          }
+          throw connErr;
+        }
+        throw err;
+      }
+    }
+    throw lastError ?? new ConnectionError("Request failed after retries");
+  }
+  getRetryDelay(attempt, headers) {
+    if (headers) {
+      const reset = headers.get("x-ratelimit-reset");
+      if (reset) {
+        const resetMs = Number(reset) * 1e3 - Date.now();
+        if (resetMs > 0 && resetMs < 6e4) return resetMs;
+      }
+    }
+    return Math.min(1e3 * 2 ** attempt, 1e4);
+  }
+};
+var OffsetPage = class _OffsetPage {
+  data;
+  pagination;
+  httpClient;
+  requestOpts;
+  constructor(data, pagination, httpClient, requestOpts) {
+    this.data = data;
+    this.pagination = pagination;
+    this.httpClient = httpClient;
+    this.requestOpts = requestOpts;
+  }
+  async getNextPage() {
+    if (!this.pagination.has_next_page) return null;
+    const nextOpts = {
+      ...this.requestOpts,
+      query: {
+        ...this.requestOpts.query,
+        page: this.pagination.page + 1
+      }
+    };
+    const response = await this.httpClient.request(nextOpts);
+    return new _OffsetPage(response.data, response.pagination, this.httpClient, nextOpts);
+  }
+  async *autoPaginate(maxPages = 1e3) {
+    let page = this;
+    let pageCount = 0;
+    while (page && pageCount < maxPages) {
+      for (const item of page.data) {
+        yield item;
+      }
+      pageCount++;
+      page = await page.getNextPage();
+    }
+  }
+};
+var CursorPage = class _CursorPage {
+  data;
+  hasMore;
+  httpClient;
+  requestOpts;
+  constructor(data, hasMore, httpClient, requestOpts) {
+    this.data = data;
+    this.hasMore = hasMore;
+    this.httpClient = httpClient;
+    this.requestOpts = requestOpts;
+  }
+  async getNextPage() {
+    if (!this.hasMore || this.data.length === 0) return null;
+    const lastId = this.data[this.data.length - 1].id;
+    const nextOpts = {
+      ...this.requestOpts,
+      query: {
+        ...this.requestOpts.query,
+        starting_after: lastId
+      }
+    };
+    const response = await this.httpClient.request(nextOpts);
+    return new _CursorPage(response.data, response.has_more, this.httpClient, nextOpts);
+  }
+  async *autoPaginate(maxPages = 1e3) {
+    let page = this;
+    let pageCount = 0;
+    while (page && pageCount < maxPages) {
+      for (const item of page.data) {
+        yield item;
+      }
+      pageCount++;
+      page = await page.getNextPage();
+    }
+  }
+};
+var Affiliates = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async list(params) {
+    const query = params ? { ...params } : {};
+    const requestOpts = { method: "GET", path: "/affiliates", query };
+    const response = await this.httpClient.request(requestOpts);
+    return new OffsetPage(response.data, response.pagination, this.httpClient, requestOpts);
+  }
+  async retrieve(id, params) {
+    const query = params ? { ...params } : void 0;
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: `/affiliates/${encodeURIComponent(id)}`,
+      query
+    });
+    return response.data;
+  }
+  async create(params) {
+    const response = await this.httpClient.request({
+      method: "POST",
+      path: "/affiliates",
+      body: params
+    });
+    return response.data;
+  }
+  async update(id, params) {
+    const response = await this.httpClient.request({
+      method: "PUT",
+      path: `/affiliates/${encodeURIComponent(id)}`,
+      body: params
+    });
+    return response.data;
+  }
+  async del(id) {
+    return this.httpClient.request({
+      method: "DELETE",
+      path: `/affiliates/${encodeURIComponent(id)}`
+    });
+  }
+};
+var Clicks = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async create(params) {
+    const response = await this.httpClient.request({
+      method: "POST",
+      path: "/clicks",
+      body: params
+    });
+    return response.data;
+  }
+};
+var Commissions = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async list(params) {
+    const query = params ? { ...params } : {};
+    const requestOpts = { method: "GET", path: "/commissions", query };
+    const response = await this.httpClient.request(requestOpts);
+    return new OffsetPage(response.data, response.pagination, this.httpClient, requestOpts);
+  }
+  async retrieve(id, params) {
+    const query = params ? { ...params } : void 0;
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: `/commissions/${encodeURIComponent(id)}`,
+      query
+    });
+    return response.data;
+  }
+  async create(params) {
+    const response = await this.httpClient.request({
+      method: "POST",
+      path: "/commissions",
+      body: params
+    });
+    return response.data;
+  }
+  async update(id, params) {
+    const response = await this.httpClient.request({
+      method: "PUT",
+      path: `/commissions/${encodeURIComponent(id)}`,
+      body: params
+    });
+    return response.data;
+  }
+  async del(id) {
+    return this.httpClient.request({
+      method: "DELETE",
+      path: `/commissions/${encodeURIComponent(id)}`
+    });
+  }
+};
+var Coupons = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async list(params) {
+    const query = params ? { ...params } : {};
+    const requestOpts = { method: "GET", path: "/coupons", query };
+    const response = await this.httpClient.request(requestOpts);
+    return new OffsetPage(response.data, response.pagination, this.httpClient, requestOpts);
+  }
+  async retrieve(id, params) {
+    const query = params ? { ...params } : void 0;
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: `/coupons/${encodeURIComponent(id)}`,
+      query
+    });
+    return response.data;
+  }
+  async create(params) {
+    const response = await this.httpClient.request({
+      method: "POST",
+      path: "/coupons",
+      body: params
+    });
+    return response.data;
+  }
+  async del(id) {
+    return this.httpClient.request({
+      method: "DELETE",
+      path: `/coupons/${encodeURIComponent(id)}`
+    });
+  }
+};
+var EmbedTokens = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async create(params) {
+    const response = await this.httpClient.request({
+      method: "POST",
+      path: "/embed/token",
+      body: params
+    });
+    return response.data;
+  }
+};
+var Marketplace = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async list(params) {
+    const query = params ? { ...params } : {};
+    const requestOpts = { method: "GET", path: "/marketplace", query };
+    const response = await this.httpClient.request(requestOpts);
+    return new OffsetPage(response.data, response.pagination, this.httpClient, requestOpts);
+  }
+  async retrieve(id) {
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: `/marketplace/${encodeURIComponent(id)}`
+    });
+    return response.data;
+  }
+};
+var Payouts = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async list(params) {
+    const query = params ? { ...params } : {};
+    const requestOpts = { method: "GET", path: "/payouts", query };
+    const response = await this.httpClient.request(requestOpts);
+    return new OffsetPage(response.data, response.pagination, this.httpClient, requestOpts);
+  }
+  async retrieve(id) {
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: `/payouts/${encodeURIComponent(id)}`
+    });
+    return response.data;
+  }
+  async update(id, params) {
+    const response = await this.httpClient.request({
+      method: "PUT",
+      path: `/payouts/${encodeURIComponent(id)}`,
+      body: params
+    });
+    return response.data;
+  }
+};
+var ProgramCreatives = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async list(params) {
+    const query = params ? { ...params } : {};
+    const requestOpts = { method: "GET", path: "/program/creatives", query };
+    const response = await this.httpClient.request(requestOpts);
+    return new OffsetPage(response.data, response.pagination, this.httpClient, requestOpts);
+  }
+  async retrieve(id) {
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: `/program/creatives/${encodeURIComponent(id)}`
+    });
+    return response.data;
+  }
+  async create(params) {
+    const response = await this.httpClient.request({
+      method: "POST",
+      path: "/program/creatives",
+      body: params
+    });
+    return response.data;
+  }
+  async update(id, params) {
+    const response = await this.httpClient.request({
+      method: "PATCH",
+      path: `/program/creatives/${encodeURIComponent(id)}`,
+      body: params
+    });
+    return response.data;
+  }
+  async del(id) {
+    return this.httpClient.request({
+      method: "DELETE",
+      path: `/program/creatives/${encodeURIComponent(id)}`
+    });
+  }
+};
+var ProgramFraudRules = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async retrieve() {
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: "/program/fraud-rules"
+    });
+    return response.data;
+  }
+  async update(params) {
+    const response = await this.httpClient.request({
+      method: "PATCH",
+      path: "/program/fraud-rules",
+      body: params
+    });
+    return response.data;
+  }
+};
+var ProgramGroups = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async list(params) {
+    const query = params ? { ...params } : void 0;
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: "/program/groups",
+      query
+    });
+    return response.data;
+  }
+  async retrieve(id, params) {
+    const query = params ? { ...params } : void 0;
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: `/program/groups/${encodeURIComponent(id)}`,
+      query
+    });
+    return response.data;
+  }
+  async create(params) {
+    const response = await this.httpClient.request({
+      method: "POST",
+      path: "/program/groups",
+      body: params
+    });
+    return response.data;
+  }
+  async update(id, params) {
+    const response = await this.httpClient.request({
+      method: "PATCH",
+      path: `/program/groups/${encodeURIComponent(id)}`,
+      body: params
+    });
+    return response.data;
+  }
+  async del(id) {
+    return this.httpClient.request({
+      method: "DELETE",
+      path: `/program/groups/${encodeURIComponent(id)}`
+    });
+  }
+};
+var ProgramNotifications = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async list() {
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: "/program/notifications"
+    });
+    return response.data;
+  }
+  async update(emailTypeId, params) {
+    const response = await this.httpClient.request({
+      method: "PATCH",
+      path: `/program/notifications/${encodeURIComponent(emailTypeId)}`,
+      body: params
+    });
+    return response.data;
+  }
+};
+var ProgramPaymentTerms = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async retrieve() {
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: "/program/payment-terms"
+    });
+    return response.data;
+  }
+  async update(params) {
+    const response = await this.httpClient.request({
+      method: "PATCH",
+      path: "/program/payment-terms",
+      body: params
+    });
+    return response.data;
+  }
+};
+var ProgramPortal = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async retrieve() {
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: "/program/portal"
+    });
+    return response.data;
+  }
+  async update(params) {
+    const response = await this.httpClient.request({
+      method: "PATCH",
+      path: "/program/portal",
+      body: params
+    });
+    return response.data;
+  }
+};
+var ProgramRestrictions = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async retrieve() {
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: "/program/restrictions"
+    });
+    return response.data;
+  }
+  async update(params) {
+    const response = await this.httpClient.request({
+      method: "PATCH",
+      path: "/program/restrictions",
+      body: params
+    });
+    return response.data;
+  }
+};
+var ProgramSettingsResource = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async retrieve() {
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: "/program"
+    });
+    return response.data;
+  }
+  async update(params) {
+    const response = await this.httpClient.request({
+      method: "PATCH",
+      path: "/program",
+      body: params
+    });
+    return response.data;
+  }
+};
+var ProgramTracking = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async retrieve() {
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: "/program/tracking"
+    });
+    return response.data;
+  }
+  async update(params) {
+    const response = await this.httpClient.request({
+      method: "PATCH",
+      path: "/program/tracking",
+      body: params
+    });
+    return response.data;
+  }
+};
+var Program = class {
+  paymentTerms;
+  tracking;
+  restrictions;
+  groups;
+  creatives;
+  notifications;
+  portal;
+  fraudRules;
+  settings;
+  constructor(httpClient) {
+    this.settings = new ProgramSettingsResource(httpClient);
+    this.paymentTerms = new ProgramPaymentTerms(httpClient);
+    this.tracking = new ProgramTracking(httpClient);
+    this.restrictions = new ProgramRestrictions(httpClient);
+    this.groups = new ProgramGroups(httpClient);
+    this.creatives = new ProgramCreatives(httpClient);
+    this.notifications = new ProgramNotifications(httpClient);
+    this.portal = new ProgramPortal(httpClient);
+    this.fraudRules = new ProgramFraudRules(httpClient);
+  }
+  async retrieve() {
+    return this.settings.retrieve();
+  }
+  async update(params) {
+    return this.settings.update(params);
+  }
+};
+var Referrals = class {
+  httpClient;
+  constructor(httpClient) {
+    this.httpClient = httpClient;
+  }
+  async list(params) {
+    const query = params ? { ...params } : {};
+    const requestOpts = { method: "GET", path: "/referrals", query };
+    const response = await this.httpClient.request(requestOpts);
+    return new CursorPage(response.data, response.has_more, this.httpClient, requestOpts);
+  }
+  async retrieve(id, params) {
+    const query = params ? { ...params } : void 0;
+    const response = await this.httpClient.request({
+      method: "GET",
+      path: `/referrals/${encodeURIComponent(id)}`,
+      query
+    });
+    return response.data;
+  }
+  async create(params) {
+    const response = await this.httpClient.request({
+      method: "POST",
+      path: "/referrals",
+      body: params
+    });
+    return response.data;
+  }
+  async update(id, params) {
+    const response = await this.httpClient.request({
+      method: "PUT",
+      path: `/referrals/${encodeURIComponent(id)}`,
+      body: params
+    });
+    return response.data;
+  }
+  async del(id) {
+    return this.httpClient.request({
+      method: "DELETE",
+      path: `/referrals/${encodeURIComponent(id)}`
+    });
+  }
+};
+var DEFAULT_BASE_URL = "https://api.affonso.io/v1";
+var DEFAULT_TIMEOUT = 3e4;
+var DEFAULT_MAX_RETRIES = 2;
+var Affonso = class {
+  affiliates;
+  referrals;
+  clicks;
+  commissions;
+  coupons;
+  payouts;
+  program;
+  embedTokens;
+  marketplace;
+  constructor(apiKey, config) {
+    if (!apiKey) {
+      throw new Error(
+        "An API key is required. Pass it as the first argument: new Affonso('sk_...')"
+      );
+    }
+    const httpConfig = {
+      apiKey,
+      baseUrl: config?.baseUrl ?? DEFAULT_BASE_URL,
+      timeout: config?.timeout ?? DEFAULT_TIMEOUT,
+      maxRetries: config?.maxRetries ?? DEFAULT_MAX_RETRIES,
+      fetch: config?.fetch ?? ((...args) => globalThis.fetch(...args))
+    };
+    const httpClient = new HttpClient(httpConfig);
+    this.affiliates = new Affiliates(httpClient);
+    this.referrals = new Referrals(httpClient);
+    this.clicks = new Clicks(httpClient);
+    this.commissions = new Commissions(httpClient);
+    this.coupons = new Coupons(httpClient);
+    this.payouts = new Payouts(httpClient);
+    this.program = new Program(httpClient);
+    this.embedTokens = new EmbedTokens(httpClient);
+    this.marketplace = new Marketplace(httpClient);
+  }
+};
+
+// src/auth/oauth.ts
+var import_node_crypto = __toESM(require("crypto"));
+var import_node_http = __toESM(require("http"));
 
 // src/auth/storage.ts
 var import_node_fs = __toESM(require("fs"));
-var import_node_path = __toESM(require("path"));
 var import_node_os = __toESM(require("os"));
+var import_node_path = __toESM(require("path"));
 var CONFIG_DIR = import_node_path.default.join(import_node_os.default.homedir(), ".config", "affonso");
 var AUTH_FILE = import_node_path.default.join(CONFIG_DIR, "auth.json");
 var CONFIG_FILE = import_node_path.default.join(CONFIG_DIR, "config.json");
@@ -85,38 +952,7 @@ function saveConfig(config) {
   });
 }
 
-// src/auth/resolve.ts
-function resolveAuth(flagApiKey) {
-  if (flagApiKey) {
-    return { apiKey: flagApiKey, source: "flag" };
-  }
-  const envKey = process.env.AFFONSO_API_KEY;
-  if (envKey) {
-    return { apiKey: envKey, source: "env" };
-  }
-  const config = loadConfig();
-  if (config.api_key) {
-    return { apiKey: config.api_key, source: "config" };
-  }
-  const auth = loadAuth();
-  if (auth?.access_token) {
-    if (auth.expires_at && Date.now() > auth.expires_at) {
-      return null;
-    }
-    return { apiKey: auth.access_token, source: "oauth" };
-  }
-  return null;
-}
-function resolveBaseUrl(flagBaseUrl) {
-  if (flagBaseUrl) return flagBaseUrl;
-  const config = loadConfig();
-  if (config.base_url) return config.base_url;
-  return "https://api.affonso.io/v1";
-}
-
 // src/auth/oauth.ts
-var import_node_crypto = __toESM(require("crypto"));
-var import_node_http = __toESM(require("http"));
 var CLIENT_ID = "d4e5f6a7-b8c9-4d0e-a1f2-b3c4d5e6f7a8";
 var SCOPES = "read write";
 var LOGIN_TIMEOUT_MS = 5 * 60 * 1e3;
@@ -139,7 +975,7 @@ async function login(baseUrl) {
   const { verifier, challenge } = generatePKCE();
   return new Promise((resolve, reject) => {
     const server = import_node_http.default.createServer(async (req, res) => {
-      const url = new URL(req.url ?? "/", `http://localhost`);
+      const url = new URL(req.url ?? "/", "http://localhost");
       if (url.pathname !== "/callback") {
         res.writeHead(404);
         res.end("Not found");
@@ -254,17 +1090,46 @@ async function refreshToken(baseUrl, refreshTokenValue) {
     return false;
   }
 }
-function successPage() {
-  return `<!DOCTYPE html><html><body style="font-family:system-ui;text-align:center;padding:60px">
-<h1>&#10003; Logged in to Affonso</h1>
-<p>You can close this window and return to the terminal.</p>
-</body></html>`;
-}
-function errorPage(message) {
-  return `<!DOCTYPE html><html><body style="font-family:system-ui;text-align:center;padding:60px">
-<h1>Authentication Error</h1>
-<p>${escapeHtml(message)}</p>
-</body></html>`;
+function successPage() {
+  return `<!DOCTYPE html><html><body style="font-family:system-ui;text-align:center;padding:60px">
+<h1>&#10003; Logged in to Affonso</h1>
+<p>You can close this window and return to the terminal.</p>
+</body></html>`;
+}
+function errorPage(message) {
+  return `<!DOCTYPE html><html><body style="font-family:system-ui;text-align:center;padding:60px">
+<h1>Authentication Error</h1>
+<p>${escapeHtml(message)}</p>
+</body></html>`;
+}
+
+// src/auth/resolve.ts
+function resolveAuth(flagApiKey) {
+  if (flagApiKey) {
+    return { apiKey: flagApiKey, source: "flag" };
+  }
+  const envKey = process.env.AFFONSO_API_KEY;
+  if (envKey) {
+    return { apiKey: envKey, source: "env" };
+  }
+  const config = loadConfig();
+  if (config.api_key) {
+    return { apiKey: config.api_key, source: "config" };
+  }
+  const auth = loadAuth();
+  if (auth?.access_token) {
+    if (auth.expires_at && Date.now() > auth.expires_at) {
+      return null;
+    }
+    return { apiKey: auth.access_token, source: "oauth" };
+  }
+  return null;
+}
+function resolveBaseUrl(flagBaseUrl) {
+  if (flagBaseUrl) return flagBaseUrl;
+  const config = loadConfig();
+  if (config.base_url) return config.base_url;
+  return "https://api.affonso.io/v1";
 }
 
 // src/lib/client.ts
@@ -278,7 +1143,9 @@ async function getClient(opts2) {
       if (refreshed) {
         auth = resolveAuth(opts2.apiKey);
       } else {
-        console.error("Error: Session expired and token refresh failed. Run `affonso login` to re-authenticate.");
+        console.error(
+          "Error: Session expired and token refresh failed. Run `affonso login` to re-authenticate."
+        );
         process.exit(1);
       }
     }
@@ -287,13 +1154,12 @@ async function getClient(opts2) {
     console.error("Error: Authentication required. Run `affonso login` or set AFFONSO_API_KEY.");
     process.exit(1);
   }
-  return new import_sdk.Affonso(auth.apiKey, { baseUrl });
+  return new Affonso(auth.apiKey, { baseUrl });
 }
 
 // src/lib/errors.ts
-var import_sdk2 = require("@affonso/sdk");
 function handleError(err, json) {
-  if (err instanceof import_sdk2.AffonsoError) {
+  if (err instanceof AffonsoError) {
     if (json) {
       console.error(
         JSON.stringify(
@@ -334,7 +1200,13 @@ function handleError(err, json) {
   }
   if (err instanceof Error) {
     if (json) {
-      console.error(JSON.stringify({ success: false, error: { code: "CLI_ERROR", message: err.message } }, null, 2));
+      console.error(
+        JSON.stringify(
+          { success: false, error: { code: "CLI_ERROR", message: err.message } },
+          null,
+          2
+        )
+      );
     } else {
       console.error(`Error: ${err.message}`);
     }
@@ -388,9 +1260,11 @@ function formatTable(data, columns) {
       return truncated.padEnd(widths[col]);
     }).join("  ")
   );
-  return [header, dim("\u2500".repeat(header.replace(/\x1b\[[0-9;]*m/g, "").length)), ...rows].join(
-    "\n"
+  const tableWidth = cols.reduce(
+    (total, col) => total + widths[col],
+    Math.max(0, cols.length - 1) * 2
   );
+  return [header, dim("\u2500".repeat(tableWidth)), ...rows].join("\n");
 }
 function formatValue(val) {
   if (val === null || val === void 0) return "\u2014";
@@ -422,10 +1296,8 @@ function output(result, opts2, columns) {
     console.log(formatTable(result.data, columns));
     if (result.pagination) {
       const p = result.pagination;
-      console.log(
-        `
-Page ${p.page}/${p.total_pages} (${p.total} total)`
-      );
+      console.log(`
+Page ${p.page}/${p.total_pages} (${p.total} total)`);
     }
     return;
   }
@@ -469,7 +1341,14 @@ function registerAffiliateCommands(program2) {
         dateFrom: o.dateFrom,
         dateTo: o.dateTo
       });
-      output(result, o, ["id", "name", "email", "partnership_status", "tracking_id", "created_at"]);
+      output(result, o, [
+        "id",
+        "name",
+        "email",
+        "partnership_status",
+        "tracking_id",
+        "created_at"
+      ]);
     } catch (err) {
       handleError(err, o.json);
     }
@@ -536,88 +1415,6 @@ function registerAffiliateCommands(program2) {
   });
 }
 
-// src/commands/referrals.ts
-function registerReferralCommands(program2) {
-  const referrals = program2.command("referrals").description("Manage referrals");
-  referrals.command("list").description("List referrals").option("--limit <n>", "Items per page", "50").option("--starting-after <id>", "Cursor: fetch items after this ID").option("--ending-before <id>", "Cursor: fetch items before this ID").option("--affiliate-id <id>", "Filter by affiliate ID").option("--status <status>", "Filter by status").option("--order <dir>", "Order (asc, desc)").option("--expand <fields>", "Expand fields").option("--created-gte <date>", "Created after date").option("--created-lte <date>", "Created before date").action(async function() {
-    const o = opts(this);
-    try {
-      const client = await getClient(o);
-      const result = await client.referrals.list({
-        limit: Number(o.limit),
-        starting_after: o.startingAfter,
-        ending_before: o.endingBefore,
-        affiliate_id: o.affiliateId,
-        status: o.status,
-        order: o.order,
-        expand: o.expand,
-        created_gte: o.createdGte,
-        created_lte: o.createdLte
-      });
-      output(result, o, ["id", "affiliate_id", "email", "status", "created_at"]);
-    } catch (err) {
-      handleError(err, o.json);
-    }
-  });
-  referrals.command("get <id>").description("Get a referral by ID").option("--expand <fields>", "Expand fields").option("--include <fields>", "Include fields").action(async function(id) {
-    const o = opts(this);
-    try {
-      const client = await getClient(o);
-      const result = await client.referrals.retrieve(id, {
-        expand: o.expand,
-        include: o.include
-      });
-      output(result, o);
-    } catch (err) {
-      handleError(err, o.json);
-    }
-  });
-  referrals.command("create").description("Create a referral").requiredOption("--email <email>", "Referral email").requiredOption("--affiliate-id <id>", "Affiliate ID").option("--subscription-id <id>", "Subscription ID").option("--customer-id <id>", "Customer ID").option("--click-id <id>", "Click ID").option("--status <status>", "Initial status").option("--name <name>", "Referral name").action(async function() {
-    const o = opts(this);
-    try {
-      const client = await getClient(o);
-      const result = await client.referrals.create({
-        email: o.email,
-        affiliate_id: o.affiliateId,
-        subscription_id: o.subscriptionId,
-        customer_id: o.customerId,
-        click_id: o.clickId,
-        status: o.status,
-        name: o.name
-      });
-      output(result, o);
-    } catch (err) {
-      handleError(err, o.json);
-    }
-  });
-  referrals.command("update <id>").description("Update a referral").option("--email <email>", "Referral email").option("--status <status>", "Status").option("--subscription-id <id>", "Subscription ID").option("--customer-id <id>", "Customer ID").option("--name <name>", "Referral name").action(async function(id) {
-    const o = opts(this);
-    try {
-      const client = await getClient(o);
-      const params = {};
-      if (o.email !== void 0) params.email = o.email;
-      if (o.status !== void 0) params.status = o.status;
-      if (o.subscriptionId !== void 0) params.subscription_id = o.subscriptionId;
-      if (o.customerId !== void 0) params.customer_id = o.customerId;
-      if (o.name !== void 0) params.name = o.name;
-      const result = await client.referrals.update(id, params);
-      output(result, o);
-    } catch (err) {
-      handleError(err, o.json);
-    }
-  });
-  referrals.command("delete <id>").description("Delete a referral").action(async function(id) {
-    const o = opts(this);
-    try {
-      const client = await getClient(o);
-      const result = await client.referrals.del(id);
-      outputSuccess(result.message ?? "Referral deleted.", o);
-    } catch (err) {
-      handleError(err, o.json);
-    }
-  });
-}
-
 // src/commands/clicks.ts
 function registerClickCommands(program2) {
   const clicks = program2.command("clicks").description("Track click events");
@@ -732,86 +1529,253 @@ function registerCommissionCommands(program2) {
       handleError(err, o.json);
     }
   });
-  commissions.command("delete <id>").description("Delete a commission").action(async function(id) {
+  commissions.command("delete <id>").description("Delete a commission").action(async function(id) {
+    const o = opts(this);
+    try {
+      const client = await getClient(o);
+      const result = await client.commissions.del(id);
+      outputSuccess(result.message ?? "Commission deleted.", o);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+}
+
+// src/commands/config.ts
+var VALID_KEYS = ["api-key", "base-url"];
+var KEY_MAP = {
+  "api-key": "api_key",
+  "base-url": "base_url"
+};
+function registerConfigCommands(program2) {
+  const config = program2.command("config").description("Manage CLI configuration");
+  config.command("get <key>").description("Get a config value (api-key, base-url)").action(async function(key) {
+    const o = opts(this);
+    try {
+      if (!VALID_KEYS.includes(key)) {
+        console.error(`Unknown config key: ${key}. Valid keys: ${VALID_KEYS.join(", ")}`);
+        process.exit(1);
+      }
+      const stored = loadConfig();
+      const mappedKey = KEY_MAP[key];
+      const value = stored[mappedKey];
+      if (value) {
+        if (key === "api-key") {
+          const v = value;
+          console.log(`${v.slice(0, 10)}...${v.slice(-4)}`);
+        } else {
+          console.log(value);
+        }
+      } else {
+        console.log(`${key} is not set.`);
+      }
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+  config.command("set <key> <value>").description("Set a config value (api-key, base-url)").action(async function(key, value) {
+    const o = opts(this);
+    try {
+      if (!VALID_KEYS.includes(key)) {
+        console.error(`Unknown config key: ${key}. Valid keys: ${VALID_KEYS.join(", ")}`);
+        process.exit(1);
+      }
+      const mappedKey = KEY_MAP[key];
+      saveConfig({ [mappedKey]: value });
+      console.log(`${key} saved.`);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+}
+
+// src/commands/coupons.ts
+function registerCouponCommands(program2) {
+  const coupons = program2.command("coupons").description("Manage coupons");
+  coupons.command("list").description("List coupons").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option("--affiliate-id <id>", "Filter by affiliate ID").option("--program-id <id>", "Filter by program ID").option("--search <query>", "Search by code").option("--expand <fields>", "Expand fields").option("--sort <field:dir>", "Sort").action(async function() {
+    const o = opts(this);
+    try {
+      const client = await getClient(o);
+      const result = await client.coupons.list({
+        limit: Number(o.limit),
+        page: Number(o.page),
+        affiliate_id: o.affiliateId,
+        program_id: o.programId,
+        search: o.search,
+        expand: o.expand,
+        sort: o.sort
+      });
+      output(result, o, [
+        "id",
+        "affiliate_id",
+        "code",
+        "discount_type",
+        "discount_value",
+        "duration",
+        "created_at"
+      ]);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+  coupons.command("get <id>").description("Get a coupon by ID").option("--expand <fields>", "Expand fields").action(async function(id) {
+    const o = opts(this);
+    try {
+      const client = await getClient(o);
+      const result = await client.coupons.retrieve(id, {
+        expand: o.expand
+      });
+      output(result, o);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+  coupons.command("create").description("Create a coupon").requiredOption("--affiliate-id <id>", "Affiliate ID").requiredOption("--code <code>", "Coupon code").requiredOption("--discount-type <type>", "Discount type (percentage, fixed)").requiredOption("--discount-value <n>", "Discount value").requiredOption("--duration <dur>", "Duration (forever, once, repeating)").option("--duration-in-months <n>", "Duration in months (for repeating)").option("--currency <code>", "Currency code").option("--product-ids <ids>", "Product IDs (comma-separated)").action(async function() {
+    const o = opts(this);
+    try {
+      const client = await getClient(o);
+      const result = await client.coupons.create({
+        affiliate_id: o.affiliateId,
+        code: o.code,
+        discount_type: o.discountType,
+        discount_value: Number(o.discountValue),
+        duration: o.duration,
+        duration_in_months: o.durationInMonths ? Number(o.durationInMonths) : void 0,
+        currency: o.currency,
+        product_ids: o.productIds?.split(",")
+      });
+      output(result, o);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+  coupons.command("delete <id>").description("Delete a coupon").action(async function(id) {
+    const o = opts(this);
+    try {
+      const client = await getClient(o);
+      const result = await client.coupons.del(id);
+      outputSuccess(result.message ?? "Coupon deleted.", o);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+}
+
+// src/commands/embed-tokens.ts
+function registerEmbedTokenCommands(program2) {
+  const embedTokens = program2.command("embed-tokens").description("Generate embed tokens");
+  embedTokens.command("create").description("Create an embed token").option("--affiliate-id <id>", "Affiliate ID").option("--external-user-id <id>", "External user ID").option("--email <email>", "Partner email").option("--name <name>", "Partner name").action(async function() {
+    const o = opts(this);
+    try {
+      const client = await getClient(o);
+      const result = await client.embedTokens.create({
+        affiliate_id: o.affiliateId,
+        external_user_id: o.externalUserId,
+        email: o.email,
+        name: o.name
+      });
+      output(result, o);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+}
+
+// src/commands/login.ts
+function registerLoginCommand(program2) {
+  program2.command("login").description("Log in via browser (OAuth 2.1)").action(async function() {
     const o = opts(this);
     try {
-      const client = await getClient(o);
-      const result = await client.commissions.del(id);
-      outputSuccess(result.message ?? "Commission deleted.", o);
+      const existing = resolveAuth();
+      if (existing?.source === "oauth") {
+        console.log("Already logged in. Run `affonso logout` first to switch accounts.");
+        return;
+      }
+      const baseUrl = resolveBaseUrl(o.baseUrl);
+      await login(baseUrl);
+      console.log("Successfully logged in!");
     } catch (err) {
       handleError(err, o.json);
     }
   });
 }
 
-// src/commands/coupons.ts
-function registerCouponCommands(program2) {
-  const coupons = program2.command("coupons").description("Manage coupons");
-  coupons.command("list").description("List coupons").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option("--affiliate-id <id>", "Filter by affiliate ID").option("--program-id <id>", "Filter by program ID").option("--search <query>", "Search by code").option("--expand <fields>", "Expand fields").option("--sort <field:dir>", "Sort").action(async function() {
+// src/commands/logout.ts
+function registerLogoutCommand(program2) {
+  program2.command("logout").description("Log out and remove stored credentials").action(async function() {
     const o = opts(this);
     try {
-      const client = await getClient(o);
-      const result = await client.coupons.list({
-        limit: Number(o.limit),
-        page: Number(o.page),
-        affiliate_id: o.affiliateId,
-        program_id: o.programId,
-        search: o.search,
-        expand: o.expand,
-        sort: o.sort
-      });
-      output(result, o, ["id", "affiliate_id", "code", "discount_type", "discount_value", "duration", "created_at"]);
+      const auth = loadAuth();
+      if (auth?.access_token) {
+        const baseUrl = resolveBaseUrl(o.baseUrl);
+        const issuer = baseUrl.replace(/\/v1\/?$/, "");
+        try {
+          await fetch(`${issuer}/oauth/revoke`, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: new URLSearchParams({
+              token: auth.access_token,
+              client_id: CLIENT_ID
+            })
+          });
+        } catch {
+        }
+      }
+      clearAuth();
+      console.log("Logged out.");
     } catch (err) {
       handleError(err, o.json);
     }
   });
-  coupons.command("get <id>").description("Get a coupon by ID").option("--expand <fields>", "Expand fields").action(async function(id) {
+}
+
+// src/commands/marketplace.ts
+function registerMarketplaceCommands(program2) {
+  const marketplace = program2.command("marketplace").description("Browse the affiliate marketplace (public, no auth required)");
+  marketplace.command("list").description("List marketplace programs").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option("--category <cat>", "Filter by category").option("--search <query>", "Search programs").option("--sort <field:dir>", "Sort").action(async function() {
     const o = opts(this);
     try {
-      const client = await getClient(o);
-      const result = await client.coupons.retrieve(id, {
-        expand: o.expand
+      const baseUrl = resolveBaseUrl(o.baseUrl);
+      const client = new Affonso("public", { baseUrl });
+      const result = await client.marketplace.list({
+        limit: Number(o.limit),
+        page: Number(o.page),
+        category: o.category,
+        search: o.search,
+        sort: o.sort
       });
-      output(result, o);
+      output(result, o, [
+        "id",
+        "name",
+        "category",
+        "commission_type",
+        "commission_rate",
+        "cookie_lifetime"
+      ]);
     } catch (err) {
       handleError(err, o.json);
     }
   });
-  coupons.command("create").description("Create a coupon").requiredOption("--affiliate-id <id>", "Affiliate ID").requiredOption("--code <code>", "Coupon code").requiredOption("--discount-type <type>", "Discount type (percentage, fixed)").requiredOption("--discount-value <n>", "Discount value").requiredOption("--duration <dur>", "Duration (forever, once, repeating)").option("--duration-in-months <n>", "Duration in months (for repeating)").option("--currency <code>", "Currency code").option("--product-ids <ids>", "Product IDs (comma-separated)").action(async function() {
+  marketplace.command("get <id>").description("Get a marketplace program by ID").action(async function(id) {
     const o = opts(this);
     try {
-      const client = await getClient(o);
-      const result = await client.coupons.create({
-        affiliate_id: o.affiliateId,
-        code: o.code,
-        discount_type: o.discountType,
-        discount_value: Number(o.discountValue),
-        duration: o.duration,
-        duration_in_months: o.durationInMonths ? Number(o.durationInMonths) : void 0,
-        currency: o.currency,
-        product_ids: o.productIds?.split(",")
-      });
+      const baseUrl = resolveBaseUrl(o.baseUrl);
+      const client = new Affonso("public", { baseUrl });
+      const result = await client.marketplace.retrieve(id);
       output(result, o);
     } catch (err) {
       handleError(err, o.json);
     }
   });
-  coupons.command("delete <id>").description("Delete a coupon").action(async function(id) {
-    const o = opts(this);
-    try {
-      const client = await getClient(o);
-      const result = await client.coupons.del(id);
-      outputSuccess(result.message ?? "Coupon deleted.", o);
-    } catch (err) {
-      handleError(err, o.json);
-    }
-  });
 }
 
 // src/commands/payouts.ts
 function registerPayoutCommands(program2) {
   const payouts = program2.command("payouts").description("Manage payouts");
-  payouts.command("list").description("List payouts").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option("--status <status>", "Filter by status (pending, processing, completed, failed, cancelled)").option("--affiliate-id <id>", "Filter by affiliate ID").option("--sort <field:dir>", "Sort").option("--date-from <date>", "Filter from date").option("--date-to <date>", "Filter to date").action(async function() {
+  payouts.command("list").description("List payouts").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option(
+    "--status <status>",
+    "Filter by status (pending, processing, completed, failed, cancelled)"
+  ).option("--affiliate-id <id>", "Filter by affiliate ID").option("--sort <field:dir>", "Sort").option("--date-from <date>", "Filter from date").option("--date-to <date>", "Filter to date").action(async function() {
     const o = opts(this);
     try {
       const client = await getClient(o);
@@ -824,7 +1788,14 @@ function registerPayoutCommands(program2) {
         dateFrom: o.dateFrom,
         dateTo: o.dateTo
       });
-      output(result, o, ["id", "affiliate_id", "amount", "status", "payment_method", "created_at"]);
+      output(result, o, [
+        "id",
+        "affiliate_id",
+        "amount",
+        "status",
+        "payment_method",
+        "created_at"
+      ]);
     } catch (err) {
       handleError(err, o.json);
     }
@@ -868,7 +1839,7 @@ function registerProgramCommands(program2) {
       handleError(err, o.json);
     }
   });
-  prog.command("update").description("Update program settings").option("--name <name>", "Program name").option("--tagline <text>", "Tagline").option("--category <cat>", "Category").option("--description <text>", "Description").option("--website-url <url>", "Website URL").option("--logo-url <url>", "Logo URL").option("--auto-approve", "Enable auto-approve").option("--no-auto-approve", "Disable auto-approve").option("--affiliate-links-enabled", "Enable affiliate links").option("--no-affiliate-links-enabled", "Disable affiliate links").action(async function() {
+  prog.command("update").description("Update program settings").option("--name <name>", "Program name").option("--tagline <text>", "Tagline").option("--category <cat>", "Category").option("--description <text>", "Description").option("--website-url <url>", "Website URL").option("--logo-url <url>", "Logo URL").option("--access-mode <mode>", "Access mode: PUBLIC, PRIVATE, or INVITE").option("--affiliate-links-enabled", "Enable affiliate links").option("--no-affiliate-links-enabled", "Disable affiliate links").action(async function() {
     const o = opts(this);
     try {
       const client = await getClient(o);
@@ -879,7 +1850,7 @@ function registerProgramCommands(program2) {
       if (o.description !== void 0) params.description = o.description;
       if (o.websiteUrl !== void 0) params.website_url = o.websiteUrl;
       if (o.logoUrl !== void 0) params.logo_url = o.logoUrl;
-      if (o.autoApprove !== void 0) params.auto_approve = o.autoApprove;
+      if (o.accessMode !== void 0) params.access_mode = o.accessMode;
       if (o.affiliateLinksEnabled !== void 0)
         params.affiliate_links_enabled = o.affiliateLinksEnabled;
       const result = await client.program.update(params);
@@ -1021,7 +1992,8 @@ function registerFraudRules(prog) {
       if (o.selfReferral !== void 0) params.self_referral = o.selfReferral;
       if (o.duplicateIp !== void 0) params.duplicate_ip = o.duplicateIp;
       if (o.vpnProxy !== void 0) params.vpn_proxy = o.vpnProxy;
-      if (o.suspiciousConversion !== void 0) params.suspicious_conversion = o.suspiciousConversion;
+      if (o.suspiciousConversion !== void 0)
+        params.suspicious_conversion = o.suspiciousConversion;
       const result = await client.program.fraudRules.update(params);
       output(result, o);
     } catch (err) {
@@ -1053,10 +2025,8 @@ function registerPortal(prog) {
       if (o.customDomain !== void 0) params.custom_domain = o.customDomain;
       if (o.termsUrl !== void 0) params.terms_url = o.termsUrl;
       if (o.privacyUrl !== void 0) params.privacy_url = o.privacyUrl;
-      if (o.onboardingEnabled !== void 0)
-        params.onboarding_enabled = o.onboardingEnabled;
-      if (o.resourcesEnabled !== void 0)
-        params.resources_enabled = o.resourcesEnabled;
+      if (o.onboardingEnabled !== void 0) params.onboarding_enabled = o.onboardingEnabled;
+      if (o.resourcesEnabled !== void 0) params.resources_enabled = o.resourcesEnabled;
       const result = await client.program.portal.update(params);
       output(result, o);
     } catch (err) {
@@ -1099,7 +2069,14 @@ function registerGroups(prog) {
       const result = await client.program.groups.list({
         expand: o.expand
       });
-      output(result, o, ["id", "name", "description", "is_default", "affiliate_count", "created_at"]);
+      output(result, o, [
+        "id",
+        "name",
+        "description",
+        "is_default",
+        "affiliate_count",
+        "created_at"
+      ]);
     } catch (err) {
       handleError(err, o.json);
     }
@@ -1230,51 +2207,53 @@ function registerCreatives(prog) {
   });
 }
 
-// src/commands/marketplace.ts
-var import_sdk3 = require("@affonso/sdk");
-function registerMarketplaceCommands(program2) {
-  const marketplace = program2.command("marketplace").description("Browse the affiliate marketplace (public, no auth required)");
-  marketplace.command("list").description("List marketplace programs").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option("--category <cat>", "Filter by category").option("--search <query>", "Search programs").option("--sort <field:dir>", "Sort").action(async function() {
+// src/commands/referrals.ts
+function registerReferralCommands(program2) {
+  const referrals = program2.command("referrals").description("Manage referrals");
+  referrals.command("list").description("List referrals").option("--limit <n>", "Items per page", "50").option("--starting-after <id>", "Cursor: fetch items after this ID").option("--ending-before <id>", "Cursor: fetch items before this ID").option("--affiliate-id <id>", "Filter by affiliate ID").option("--status <status>", "Filter by status").option("--order <dir>", "Order (asc, desc)").option("--expand <fields>", "Expand fields").option("--created-gte <date>", "Created after date").option("--created-lte <date>", "Created before date").action(async function() {
     const o = opts(this);
     try {
-      const baseUrl = resolveBaseUrl(o.baseUrl);
-      const client = new import_sdk3.Affonso("public", { baseUrl });
-      const result = await client.marketplace.list({
+      const client = await getClient(o);
+      const result = await client.referrals.list({
         limit: Number(o.limit),
-        page: Number(o.page),
-        category: o.category,
-        search: o.search,
-        sort: o.sort
+        starting_after: o.startingAfter,
+        ending_before: o.endingBefore,
+        affiliate_id: o.affiliateId,
+        status: o.status,
+        order: o.order,
+        expand: o.expand,
+        created_gte: o.createdGte,
+        created_lte: o.createdLte
       });
-      output(result, o, ["id", "name", "category", "commission_type", "commission_rate", "cookie_lifetime"]);
+      output(result, o, ["id", "affiliate_id", "email", "status", "created_at"]);
     } catch (err) {
       handleError(err, o.json);
     }
   });
-  marketplace.command("get <id>").description("Get a marketplace program by ID").action(async function(id) {
+  referrals.command("get <id>").description("Get a referral by ID").option("--expand <fields>", "Expand fields").option("--include <fields>", "Include fields").action(async function(id) {
     const o = opts(this);
     try {
-      const baseUrl = resolveBaseUrl(o.baseUrl);
-      const client = new import_sdk3.Affonso("public", { baseUrl });
-      const result = await client.marketplace.retrieve(id);
+      const client = await getClient(o);
+      const result = await client.referrals.retrieve(id, {
+        expand: o.expand,
+        include: o.include
+      });
       output(result, o);
     } catch (err) {
       handleError(err, o.json);
     }
   });
-}
-
-// src/commands/embed-tokens.ts
-function registerEmbedTokenCommands(program2) {
-  const embedTokens = program2.command("embed-tokens").description("Generate embed tokens");
-  embedTokens.command("create").description("Create an embed token").option("--affiliate-id <id>", "Affiliate ID").option("--external-user-id <id>", "External user ID").option("--email <email>", "Partner email").option("--name <name>", "Partner name").action(async function() {
+  referrals.command("create").description("Create a referral").requiredOption("--email <email>", "Referral email").requiredOption("--affiliate-id <id>", "Affiliate ID").option("--subscription-id <id>", "Subscription ID").option("--customer-id <id>", "Customer ID").option("--click-id <id>", "Click ID").option("--status <status>", "Initial status").option("--name <name>", "Referral name").action(async function() {
     const o = opts(this);
     try {
       const client = await getClient(o);
-      const result = await client.embedTokens.create({
-        affiliate_id: o.affiliateId,
-        external_user_id: o.externalUserId,
+      const result = await client.referrals.create({
         email: o.email,
+        affiliate_id: o.affiliateId,
+        subscription_id: o.subscriptionId,
+        customer_id: o.customerId,
+        click_id: o.clickId,
+        status: o.status,
         name: o.name
       });
       output(result, o);
@@ -1282,50 +2261,28 @@ function registerEmbedTokenCommands(program2) {
       handleError(err, o.json);
     }
   });
-}
-
-// src/commands/login.ts
-function registerLoginCommand(program2) {
-  program2.command("login").description("Log in via browser (OAuth 2.1)").action(async function() {
+  referrals.command("update <id>").description("Update a referral").option("--email <email>", "Referral email").option("--status <status>", "Status").option("--subscription-id <id>", "Subscription ID").option("--customer-id <id>", "Customer ID").option("--name <name>", "Referral name").action(async function(id) {
     const o = opts(this);
     try {
-      const existing = resolveAuth();
-      if (existing?.source === "oauth") {
-        console.log("Already logged in. Run `affonso logout` first to switch accounts.");
-        return;
-      }
-      const baseUrl = resolveBaseUrl(o.baseUrl);
-      await login(baseUrl);
-      console.log("Successfully logged in!");
+      const client = await getClient(o);
+      const params = {};
+      if (o.email !== void 0) params.email = o.email;
+      if (o.status !== void 0) params.status = o.status;
+      if (o.subscriptionId !== void 0) params.subscription_id = o.subscriptionId;
+      if (o.customerId !== void 0) params.customer_id = o.customerId;
+      if (o.name !== void 0) params.name = o.name;
+      const result = await client.referrals.update(id, params);
+      output(result, o);
     } catch (err) {
       handleError(err, o.json);
     }
   });
-}
-
-// src/commands/logout.ts
-function registerLogoutCommand(program2) {
-  program2.command("logout").description("Log out and remove stored credentials").action(async function() {
+  referrals.command("delete <id>").description("Delete a referral").action(async function(id) {
     const o = opts(this);
     try {
-      const auth = loadAuth();
-      if (auth?.access_token) {
-        const baseUrl = resolveBaseUrl(o.baseUrl);
-        const issuer = baseUrl.replace(/\/v1\/?$/, "");
-        try {
-          await fetch(`${issuer}/oauth/revoke`, {
-            method: "POST",
-            headers: { "Content-Type": "application/x-www-form-urlencoded" },
-            body: new URLSearchParams({
-              token: auth.access_token,
-              client_id: CLIENT_ID
-            })
-          });
-        } catch {
-        }
-      }
-      clearAuth();
-      console.log("Logged out.");
+      const client = await getClient(o);
+      const result = await client.referrals.del(id);
+      outputSuccess(result.message ?? "Referral deleted.", o);
     } catch (err) {
       handleError(err, o.json);
     }
@@ -1363,58 +2320,10 @@ function registerWhoamiCommand(program2) {
   });
 }
 
-// src/commands/config.ts
-var VALID_KEYS = ["api-key", "base-url"];
-var KEY_MAP = {
-  "api-key": "api_key",
-  "base-url": "base_url"
-};
-function registerConfigCommands(program2) {
-  const config = program2.command("config").description("Manage CLI configuration");
-  config.command("get <key>").description("Get a config value (api-key, base-url)").action(async function(key) {
-    const o = opts(this);
-    try {
-      if (!VALID_KEYS.includes(key)) {
-        console.error(`Unknown config key: ${key}. Valid keys: ${VALID_KEYS.join(", ")}`);
-        process.exit(1);
-      }
-      const stored = loadConfig();
-      const mappedKey = KEY_MAP[key];
-      const value = stored[mappedKey];
-      if (value) {
-        if (key === "api-key") {
-          const v = value;
-          console.log(`${v.slice(0, 10)}...${v.slice(-4)}`);
-        } else {
-          console.log(value);
-        }
-      } else {
-        console.log(`${key} is not set.`);
-      }
-    } catch (err) {
-      handleError(err, o.json);
-    }
-  });
-  config.command("set <key> <value>").description("Set a config value (api-key, base-url)").action(async function(key, value) {
-    const o = opts(this);
-    try {
-      if (!VALID_KEYS.includes(key)) {
-        console.error(`Unknown config key: ${key}. Valid keys: ${VALID_KEYS.join(", ")}`);
-        process.exit(1);
-      }
-      const mappedKey = KEY_MAP[key];
-      saveConfig({ [mappedKey]: value });
-      console.log(`${key} saved.`);
-    } catch (err) {
-      handleError(err, o.json);
-    }
-  });
-}
-
 // src/cli.ts
 function createProgram() {
   const program2 = new import_commander.Command();
-  program2.name("affonso").description("Affonso CLI \u2014 manage your affiliate program from the terminal").version("0.1.0").option("--json", "Output as JSON").option("--api-key <key>", "API key for this request").option("--base-url <url>", "Custom API base URL").option("--no-color", "Disable colored output");
+  program2.name("affonso").description("Affonso CLI \u2014 manage your affiliate program from the terminal").version(package_default.version).option("--json", "Output as JSON").option("--api-key <key>", "API key for this request").option("--base-url <url>", "Custom API base URL").option("--no-color", "Disable colored output");
   registerLoginCommand(program2);
   registerLogoutCommand(program2);
   registerWhoamiCommand(program2);