@affonso/cli 0.1.4 → 0.2.0

package/dist/index.js

@@ -26,13 +26,62 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 // src/cli.ts
 var import_commander = require("commander");
 
+// package.json
+var package_default = {
+  name: "@affonso/cli",
+  version: "0.2.0",
+  description: "Command line interface for the Affonso affiliate marketing platform",
+  bin: {
+    affonso: "dist/index.js"
+  },
+  files: [
+    "dist"
+  ],
+  scripts: {
+    build: "tsup",
+    prepack: "npm run build -- --silent",
+    dev: "tsup --watch",
+    test: "vitest run",
+    "test:package": "npm run build && node scripts/smoke-package.mjs",
+    "test:watch": "vitest",
+    lint: "biome check src/",
+    "lint:fix": "biome check --write src/",
+    typecheck: "tsc --noEmit"
+  },
+  engines: {
+    node: ">=18"
+  },
+  dependencies: {
+    "@affonso/sdk": "^1.0.2",
+    commander: "^12.0.0",
+    open: "^10.0.0"
+  },
+  devDependencies: {
+    "@biomejs/biome": "^1.9.0",
+    "@types/node": "^20.0.0",
+    tsup: "^8.0.0",
+    typescript: "^5.7.0",
+    vitest: "^2.0.0"
+  },
+  keywords: [
+    "affonso",
+    "affiliate",
+    "cli"
+  ],
+  license: "MIT"
+};
+
 // src/lib/client.ts
 var import_sdk = require("@affonso/sdk");
 
+// src/auth/oauth.ts
+var import_node_crypto = __toESM(require("crypto"));
+var import_node_http = __toESM(require("http"));
+
 // src/auth/storage.ts
 var import_node_fs = __toESM(require("fs"));
-var import_node_path = __toESM(require("path"));
 var import_node_os = __toESM(require("os"));
+var import_node_path = __toESM(require("path"));
 var CONFIG_DIR = import_node_path.default.join(import_node_os.default.homedir(), ".config", "affonso");
 var AUTH_FILE = import_node_path.default.join(CONFIG_DIR, "auth.json");
 var CONFIG_FILE = import_node_path.default.join(CONFIG_DIR, "config.json");
@@ -85,38 +134,7 @@ function saveConfig(config) {
   });
 }
 
-// src/auth/resolve.ts
-function resolveAuth(flagApiKey) {
-  if (flagApiKey) {
-    return { apiKey: flagApiKey, source: "flag" };
-  }
-  const envKey = process.env.AFFONSO_API_KEY;
-  if (envKey) {
-    return { apiKey: envKey, source: "env" };
-  }
-  const config = loadConfig();
-  if (config.api_key) {
-    return { apiKey: config.api_key, source: "config" };
-  }
-  const auth = loadAuth();
-  if (auth?.access_token) {
-    if (auth.expires_at && Date.now() > auth.expires_at) {
-      return null;
-    }
-    return { apiKey: auth.access_token, source: "oauth" };
-  }
-  return null;
-}
-function resolveBaseUrl(flagBaseUrl) {
-  if (flagBaseUrl) return flagBaseUrl;
-  const config = loadConfig();
-  if (config.base_url) return config.base_url;
-  return "https://api.affonso.io/v1";
-}
-
 // src/auth/oauth.ts
-var import_node_crypto = __toESM(require("crypto"));
-var import_node_http = __toESM(require("http"));
 var CLIENT_ID = "d4e5f6a7-b8c9-4d0e-a1f2-b3c4d5e6f7a8";
 var SCOPES = "read write";
 var LOGIN_TIMEOUT_MS = 5 * 60 * 1e3;
@@ -139,7 +157,7 @@ async function login(baseUrl) {
   const { verifier, challenge } = generatePKCE();
   return new Promise((resolve, reject) => {
     const server = import_node_http.default.createServer(async (req, res) => {
-      const url = new URL(req.url ?? "/", `http://localhost`);
+      const url = new URL(req.url ?? "/", "http://localhost");
       if (url.pathname !== "/callback") {
         res.writeHead(404);
         res.end("Not found");
@@ -267,6 +285,35 @@ function errorPage(message) {
 </body></html>`;
 }
 
+// src/auth/resolve.ts
+function resolveAuth(flagApiKey) {
+  if (flagApiKey) {
+    return { apiKey: flagApiKey, source: "flag" };
+  }
+  const envKey = process.env.AFFONSO_API_KEY;
+  if (envKey) {
+    return { apiKey: envKey, source: "env" };
+  }
+  const config = loadConfig();
+  if (config.api_key) {
+    return { apiKey: config.api_key, source: "config" };
+  }
+  const auth = loadAuth();
+  if (auth?.access_token) {
+    if (auth.expires_at && Date.now() > auth.expires_at) {
+      return null;
+    }
+    return { apiKey: auth.access_token, source: "oauth" };
+  }
+  return null;
+}
+function resolveBaseUrl(flagBaseUrl) {
+  if (flagBaseUrl) return flagBaseUrl;
+  const config = loadConfig();
+  if (config.base_url) return config.base_url;
+  return "https://api.affonso.io/v1";
+}
+
 // src/lib/client.ts
 async function getClient(opts2) {
   const baseUrl = resolveBaseUrl(opts2.baseUrl);
@@ -278,7 +325,9 @@ async function getClient(opts2) {
       if (refreshed) {
         auth = resolveAuth(opts2.apiKey);
       } else {
-        console.error("Error: Session expired and token refresh failed. Run `affonso login` to re-authenticate.");
+        console.error(
+          "Error: Session expired and token refresh failed. Run `affonso login` to re-authenticate."
+        );
         process.exit(1);
       }
     }
@@ -287,7 +336,17 @@ async function getClient(opts2) {
     console.error("Error: Authentication required. Run `affonso login` or set AFFONSO_API_KEY.");
     process.exit(1);
   }
-  return new import_sdk.Affonso(auth.apiKey, { baseUrl });
+  return new import_sdk.Affonso(auth.apiKey, {
+    baseUrl,
+    signingSecret: process.env.AFFONSO_SIGNING_SECRET,
+    sourceSigningSecrets: {
+      ...process.env.AFFONSO_CUSTOM_SOURCE_SIGNING_SECRET ? { custom: process.env.AFFONSO_CUSTOM_SOURCE_SIGNING_SECRET } : {},
+      ...process.env.AFFONSO_SEGMENT_SIGNING_SECRET ? {
+        segment: process.env.AFFONSO_SEGMENT_SIGNING_SECRET,
+        segment_webhook: process.env.AFFONSO_SEGMENT_SIGNING_SECRET
+      } : {}
+    }
+  });
 }
 
 // src/lib/errors.ts
@@ -334,7 +393,13 @@ function handleError(err, json) {
   }
   if (err instanceof Error) {
     if (json) {
-      console.error(JSON.stringify({ success: false, error: { code: "CLI_ERROR", message: err.message } }, null, 2));
+      console.error(
+        JSON.stringify(
+          { success: false, error: { code: "CLI_ERROR", message: err.message } },
+          null,
+          2
+        )
+      );
     } else {
       console.error(`Error: ${err.message}`);
     }
@@ -355,6 +420,35 @@ function opts(cmd) {
   return merged;
 }
 
+// src/lib/parse.ts
+var import_node_fs2 = require("fs");
+function readJsonInput(value) {
+  if (!value.startsWith("@")) return value;
+  const path2 = value.slice(1);
+  if (!path2) throw new Error("JSON file path must follow @.");
+  return (0, import_node_fs2.readFileSync)(path2, "utf8");
+}
+function parseJson(value, optionName) {
+  try {
+    return JSON.parse(readJsonInput(value));
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    throw new Error(`Invalid JSON for ${optionName}: ${detail}`);
+  }
+}
+function parseJsonObject(value, optionName) {
+  if (value === void 0) return void 0;
+  const parsed = parseJson(value, optionName);
+  if (parsed === null || Array.isArray(parsed) || typeof parsed !== "object") {
+    throw new Error(`${optionName} must contain a JSON object.`);
+  }
+  return parsed;
+}
+function commaSeparated(value) {
+  if (value === void 0) return void 0;
+  return value.split(",").map((item) => item.trim()).filter(Boolean);
+}
+
 // src/output/json.ts
 function formatJson(data) {
   return JSON.stringify(data, null, 2);
@@ -388,9 +482,11 @@ function formatTable(data, columns) {
       return truncated.padEnd(widths[col]);
     }).join("  ")
   );
-  return [header, dim("\u2500".repeat(header.replace(/\x1b\[[0-9;]*m/g, "").length)), ...rows].join(
-    "\n"
+  const tableWidth = cols.reduce(
+    (total, col) => total + widths[col],
+    Math.max(0, cols.length - 1) * 2
   );
+  return [header, dim("\u2500".repeat(tableWidth)), ...rows].join("\n");
 }
 function formatValue(val) {
   if (val === null || val === void 0) return "\u2014";
@@ -422,10 +518,8 @@ function output(result, opts2, columns) {
     console.log(formatTable(result.data, columns));
     if (result.pagination) {
       const p = result.pagination;
-      console.log(
-        `
-Page ${p.page}/${p.total_pages} (${p.total} total)`
-      );
+      console.log(`
+Page ${p.page}/${p.total_pages} (${p.total} total)`);
     }
     return;
   }
@@ -453,7 +547,7 @@ function outputSuccess(message, opts2) {
 // src/commands/affiliates.ts
 function registerAffiliateCommands(program2) {
   const affiliates = program2.command("affiliates").description("Manage affiliates");
-  affiliates.command("list").description("List affiliates").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option("--status <status>", "Filter by status (pending, approved, rejected)").option("--search <query>", "Search by name or email").option("--group-id <id>", "Filter by group ID").option("--program-id <id>", "Filter by program ID").option("--expand <fields>", "Expand fields (comma-separated)").option("--sort <field:dir>", "Sort (e.g. createdAt:desc)").option("--date-from <date>", "Filter from date").option("--date-to <date>", "Filter to date").action(async function() {
+  affiliates.command("list").description("List affiliates").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option("--status <status>", "Filter by status (pending, approved, rejected)").option("--search <query>", "Search by name or email").option("--group-id <id>", "Filter by group ID").option("--expand <fields>", "Expand fields (comma-separated)").option("--sort <field:dir>", "Sort (e.g. createdAt:desc)").option("--date-from <date>", "Filter from date").option("--date-to <date>", "Filter to date").action(async function() {
     const o = opts(this);
     try {
       const client = await getClient(o);
@@ -463,13 +557,19 @@ function registerAffiliateCommands(program2) {
         partnership_status: o.status,
         search: o.search,
         group_id: o.groupId,
-        program_id: o.programId,
         expand: o.expand,
         sort: o.sort,
         dateFrom: o.dateFrom,
         dateTo: o.dateTo
       });
-      output(result, o, ["id", "name", "email", "partnership_status", "tracking_id", "created_at"]);
+      output(result, o, [
+        "id",
+        "name",
+        "email",
+        "partnership_status",
+        "tracking_id",
+        "created_at"
+      ]);
     } catch (err) {
       handleError(err, o.json);
     }
@@ -486,29 +586,33 @@ function registerAffiliateCommands(program2) {
       handleError(err, o.json);
     }
   });
-  affiliates.command("create").description("Create an affiliate").requiredOption("--name <name>", "Affiliate name").requiredOption("--email <email>", "Affiliate email").requiredOption("--program-id <id>", "Program ID").option("--tracking-id <id>", "Custom tracking ID").option("--group-id <id>", "Group ID").option("--company-name <name>", "Company name").option("--country-code <code>", "Country code").option("--external-user-id <id>", "External user ID").action(async function() {
+  affiliates.command("create").description("Create an affiliate").requiredOption("--name <name>", "Affiliate name").requiredOption("--email <email>", "Affiliate email").option("--tracking-id <id>", "Custom tracking ID").option("--group-id <id>", "Group ID").option("--company-name <name>", "Company name").option("--country-code <code>", "Country code").option("--status <status>", "Partnership status (pending, approved, rejected)").option("--onboarding-completed", "Mark onboarding as completed").option("--payout-method <method>", "Payout method").option("--payout-details-json <json|@file>", "Payout details as JSON or @file").option("--external-user-id <id>", "External user ID").option("--metadata-json <json|@file>", "Metadata as JSON or @file").action(async function() {
     const o = opts(this);
     try {
-      const client = await getClient(o);
-      const result = await client.affiliates.create({
+      const params = {
         name: o.name,
         email: o.email,
-        program_id: o.programId,
         tracking_id: o.trackingId,
         group_id: o.groupId,
         company_name: o.companyName,
         country_code: o.countryCode,
-        external_user_id: o.externalUserId
-      });
+        status: o.status,
+        onboarding_completed: o.onboardingCompleted || void 0,
+        payout_method: o.payoutMethod,
+        payout_details: parseJsonObject(o.payoutDetailsJson, "--payout-details-json"),
+        external_user_id: o.externalUserId,
+        metadata: parseJsonObject(o.metadataJson, "--metadata-json")
+      };
+      const client = await getClient(o);
+      const result = await client.affiliates.create(params);
       output(result, o);
     } catch (err) {
       handleError(err, o.json);
     }
   });
-  affiliates.command("update <id>").description("Update an affiliate").option("--name <name>", "Affiliate name").option("--email <email>", "Affiliate email").option("--status <status>", "Status (pending, approved, rejected)").option("--group-id <id>", "Group ID").option("--company-name <name>", "Company name").option("--country-code <code>", "Country code").option("--external-user-id <id>", "External user ID").option("--onboarding-completed", "Mark onboarding as completed").action(async function(id) {
+  affiliates.command("update <id>").description("Update an affiliate").option("--name <name>", "Affiliate name").option("--email <email>", "Affiliate email").option("--status <status>", "Status (pending, approved, rejected)").option("--group-id <id>", "Group ID").option("--company-name <name>", "Company name").option("--country-code <code>", "Country code").option("--invoice-details-json <json|@file>", "Invoice details as JSON or @file").option("--payout-method <method>", "Payout method").option("--payout-details-json <json|@file>", "Payout details as JSON or @file").option("--external-user-id <id>", "External user ID").option("--metadata-json <json|@file>", "Metadata as JSON or @file").option("--onboarding-completed", "Mark onboarding as completed").option("--no-onboarding-completed", "Mark onboarding as incomplete").action(async function(id) {
     const o = opts(this);
     try {
-      const client = await getClient(o);
       const params = {};
       if (o.name !== void 0) params.name = o.name;
       if (o.email !== void 0) params.email = o.email;
@@ -516,8 +620,17 @@ function registerAffiliateCommands(program2) {
       if (o.groupId !== void 0) params.group_id = o.groupId;
       if (o.companyName !== void 0) params.company_name = o.companyName;
       if (o.countryCode !== void 0) params.country_code = o.countryCode;
+      if (o.invoiceDetailsJson !== void 0)
+        params.invoice_details = parseJsonObject(o.invoiceDetailsJson, "--invoice-details-json");
+      if (o.payoutMethod !== void 0) params.payout_method = o.payoutMethod;
+      if (o.payoutDetailsJson !== void 0)
+        params.payout_details = parseJsonObject(o.payoutDetailsJson, "--payout-details-json");
       if (o.externalUserId !== void 0) params.external_user_id = o.externalUserId;
-      if (o.onboardingCompleted) params.onboarding_completed = true;
+      if (o.metadataJson !== void 0)
+        params.metadata = parseJsonObject(o.metadataJson, "--metadata-json");
+      if (o.onboardingCompleted !== void 0)
+        params.onboarding_completed = o.onboardingCompleted;
+      const client = await getClient(o);
       const result = await client.affiliates.update(id, params);
       output(result, o);
     } catch (err) {
@@ -534,84 +647,42 @@ function registerAffiliateCommands(program2) {
       handleError(err, o.json);
     }
   });
-}
-
-// src/commands/referrals.ts
-function registerReferralCommands(program2) {
-  const referrals = program2.command("referrals").description("Manage referrals");
-  referrals.command("list").description("List referrals").option("--limit <n>", "Items per page", "50").option("--starting-after <id>", "Cursor: fetch items after this ID").option("--ending-before <id>", "Cursor: fetch items before this ID").option("--affiliate-id <id>", "Filter by affiliate ID").option("--status <status>", "Filter by status").option("--order <dir>", "Order (asc, desc)").option("--expand <fields>", "Expand fields").option("--created-gte <date>", "Created after date").option("--created-lte <date>", "Created before date").action(async function() {
-    const o = opts(this);
-    try {
-      const client = await getClient(o);
-      const result = await client.referrals.list({
-        limit: Number(o.limit),
-        starting_after: o.startingAfter,
-        ending_before: o.endingBefore,
-        affiliate_id: o.affiliateId,
-        status: o.status,
-        order: o.order,
-        expand: o.expand,
-        created_gte: o.createdGte,
-        created_lte: o.createdLte
-      });
-      output(result, o, ["id", "affiliate_id", "email", "status", "created_at"]);
-    } catch (err) {
-      handleError(err, o.json);
-    }
-  });
-  referrals.command("get <id>").description("Get a referral by ID").option("--expand <fields>", "Expand fields").option("--include <fields>", "Include fields").action(async function(id) {
-    const o = opts(this);
-    try {
-      const client = await getClient(o);
-      const result = await client.referrals.retrieve(id, {
-        expand: o.expand,
-        include: o.include
-      });
-      output(result, o);
-    } catch (err) {
-      handleError(err, o.json);
-    }
-  });
-  referrals.command("create").description("Create a referral").requiredOption("--email <email>", "Referral email").requiredOption("--affiliate-id <id>", "Affiliate ID").option("--subscription-id <id>", "Subscription ID").option("--customer-id <id>", "Customer ID").option("--click-id <id>", "Click ID").option("--status <status>", "Initial status").option("--name <name>", "Referral name").action(async function() {
+  const onboarding = affiliates.command("onboarding-responses").description("Manage affiliate onboarding responses");
+  onboarding.command("get <affiliate-id>").description("Get an affiliate's onboarding responses").action(async function(affiliateId) {
     const o = opts(this);
     try {
       const client = await getClient(o);
-      const result = await client.referrals.create({
-        email: o.email,
-        affiliate_id: o.affiliateId,
-        subscription_id: o.subscriptionId,
-        customer_id: o.customerId,
-        click_id: o.clickId,
-        status: o.status,
-        name: o.name
-      });
-      output(result, o);
+      output(await client.affiliates.retrieveOnboardingResponses(affiliateId), o);
     } catch (err) {
       handleError(err, o.json);
     }
   });
-  referrals.command("update <id>").description("Update a referral").option("--email <email>", "Referral email").option("--status <status>", "Status").option("--subscription-id <id>", "Subscription ID").option("--customer-id <id>", "Customer ID").option("--name <name>", "Referral name").action(async function(id) {
+  onboarding.command("submit <affiliate-id>").description("Submit an affiliate's onboarding responses").requiredOption("--responses-json <json|@file>", "Response array as JSON or @file").option("--mark-complete", "Mark onboarding as complete").action(async function(affiliateId) {
     const o = opts(this);
     try {
+      const responses = parseJson(
+        o.responsesJson,
+        "--responses-json"
+      );
+      if (!Array.isArray(responses))
+        throw new Error("--responses-json must contain a JSON array.");
       const client = await getClient(o);
-      const params = {};
-      if (o.email !== void 0) params.email = o.email;
-      if (o.status !== void 0) params.status = o.status;
-      if (o.subscriptionId !== void 0) params.subscription_id = o.subscriptionId;
-      if (o.customerId !== void 0) params.customer_id = o.customerId;
-      if (o.name !== void 0) params.name = o.name;
-      const result = await client.referrals.update(id, params);
-      output(result, o);
+      output(
+        await client.affiliates.submitOnboardingResponses(affiliateId, {
+          responses,
+          mark_complete: o.markComplete || void 0
+        }),
+        o
+      );
     } catch (err) {
       handleError(err, o.json);
     }
   });
-  referrals.command("delete <id>").description("Delete a referral").action(async function(id) {
+  affiliates.command("portal-token <id>").description("Create a portal login token for an affiliate").action(async function(id) {
     const o = opts(this);
     try {
       const client = await getClient(o);
-      const result = await client.referrals.del(id);
-      outputSuccess(result.message ?? "Referral deleted.", o);
+      output(await client.affiliates.createPortalToken(id), o);
     } catch (err) {
       handleError(err, o.json);
     }
@@ -621,13 +692,13 @@ function registerReferralCommands(program2) {
 // src/commands/clicks.ts
 function registerClickCommands(program2) {
   const clicks = program2.command("clicks").description("Track click events");
-  clicks.command("create").description("Record a click event").requiredOption("--program-id <id>", "Program ID").requiredOption("--tracking-id <id>", "Tracking ID").option("--referrer <url>", "Referrer URL").option("--utm-source <val>", "UTM source").option("--utm-medium <val>", "UTM medium").option("--utm-campaign <val>", "UTM campaign").option("--utm-term <val>", "UTM term").option("--utm-content <val>", "UTM content").option("--sub1 <val>", "Sub-tracking parameter 1").option("--sub2 <val>", "Sub-tracking parameter 2").option("--sub3 <val>", "Sub-tracking parameter 3").option("--sub4 <val>", "Sub-tracking parameter 4").option("--sub5 <val>", "Sub-tracking parameter 5").option("--ip <ip>", "IP address").option("--user-agent <ua>", "User agent string").action(async function() {
+  clicks.command("create").description("Record a click event").requiredOption("--tracking-id <id>", "Tracking ID").option("--created-at <date>", "Creation timestamp (ISO 8601)").option("--referrer <url>", "Referrer URL").option("--utm-source <val>", "UTM source").option("--utm-medium <val>", "UTM medium").option("--utm-campaign <val>", "UTM campaign").option("--utm-term <val>", "UTM term").option("--utm-content <val>", "UTM content").option("--sub1 <val>", "Sub-tracking parameter 1").option("--sub2 <val>", "Sub-tracking parameter 2").option("--sub3 <val>", "Sub-tracking parameter 3").option("--sub4 <val>", "Sub-tracking parameter 4").option("--sub5 <val>", "Sub-tracking parameter 5").option("--ip <ip>", "IP address").option("--user-agent <ua>", "User agent string").option("--gclid <id>", "Google click ID").option("--fbclid <id>", "Meta click ID").option("--msclkid <id>", "Microsoft click ID").option("--ttclid <id>", "TikTok click ID").action(async function() {
     const o = opts(this);
     try {
       const client = await getClient(o);
       const result = await client.clicks.create({
-        programId: o.programId,
         trackingId: o.trackingId,
+        createdAt: o.createdAt,
         referrer: o.referrer,
         utmSource: o.utmSource,
         utmMedium: o.utmMedium,
@@ -640,7 +711,11 @@ function registerClickCommands(program2) {
         sub4: o.sub4,
         sub5: o.sub5,
         ip: o.ip,
-        userAgent: o.userAgent
+        userAgent: o.userAgent,
+        gclid: o.gclid,
+        fbclid: o.fbclid,
+        msclkid: o.msclkid,
+        ttclid: o.ttclid
       });
       output(result, o);
     } catch (err) {
@@ -693,7 +768,7 @@ function registerCommissionCommands(program2) {
       handleError(err, o.json);
     }
   });
-  commissions.command("create").description("Create a commission").requiredOption("--referral-id <id>", "Referral ID").requiredOption("--sale-amount <n>", "Sale amount").requiredOption("--sale-amount-currency <code>", "Sale currency (e.g. USD)").requiredOption("--commission-amount <n>", "Commission amount").requiredOption("--commission-currency <code>", "Commission currency").option("--is-subscription", "Mark as subscription commission").option("--status <status>", "Commission status").option("--sales-status <status>", "Sales status").option("--payment-intent-id <id>", "Payment intent ID").option("--hold-period-days <n>", "Hold period in days").action(async function() {
+  commissions.command("create").description("Create a commission").requiredOption("--referral-id <id>", "Referral ID").requiredOption("--sale-amount <n>", "Sale amount").option("--sale-amount-currency <code>", "Sale currency (defaults to program currency)").requiredOption("--commission-amount <n>", "Commission amount").option("--commission-currency <code>", "Commission currency").option("--is-subscription", "Mark as subscription commission").option("--status <status>", "Commission status").option("--sales-status <status>", "Sales status").option("--payment-intent-id <id>", "Payment intent ID").option("--hold-period-days <n>", "Hold period in days").option("--created-at <date>", "Creation timestamp (ISO 8601)").action(async function() {
     const o = opts(this);
     try {
       const client = await getClient(o);
@@ -707,7 +782,8 @@ function registerCommissionCommands(program2) {
         status: o.status,
         sales_status: o.salesStatus,
         payment_intent_id: o.paymentIntentId,
-        hold_period_days: o.holdPeriodDays ? Number(o.holdPeriodDays) : void 0
+        hold_period_days: o.holdPeriodDays ? Number(o.holdPeriodDays) : void 0,
+        created_at: o.createdAt
       });
       output(result, o);
     } catch (err) {
@@ -744,10 +820,109 @@ function registerCommissionCommands(program2) {
   });
 }
 
+// src/commands/config.ts
+var VALID_KEYS = ["api-key", "base-url"];
+var KEY_MAP = {
+  "api-key": "api_key",
+  "base-url": "base_url"
+};
+function registerConfigCommands(program2) {
+  const config = program2.command("config").description("Manage CLI configuration");
+  config.command("get <key>").description("Get a config value (api-key, base-url)").action(async function(key) {
+    const o = opts(this);
+    try {
+      if (!VALID_KEYS.includes(key)) {
+        console.error(`Unknown config key: ${key}. Valid keys: ${VALID_KEYS.join(", ")}`);
+        process.exit(1);
+      }
+      const stored = loadConfig();
+      const mappedKey = KEY_MAP[key];
+      const value = stored[mappedKey];
+      if (value) {
+        if (key === "api-key") {
+          const v = value;
+          console.log(`${v.slice(0, 10)}...${v.slice(-4)}`);
+        } else {
+          console.log(value);
+        }
+      } else {
+        console.log(`${key} is not set.`);
+      }
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+  config.command("set <key> <value>").description("Set a config value (api-key, base-url)").action(async function(key, value) {
+    const o = opts(this);
+    try {
+      if (!VALID_KEYS.includes(key)) {
+        console.error(`Unknown config key: ${key}. Valid keys: ${VALID_KEYS.join(", ")}`);
+        process.exit(1);
+      }
+      const mappedKey = KEY_MAP[key];
+      saveConfig({ [mappedKey]: value });
+      console.log(`${key} saved.`);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+}
+
+// src/commands/conversions.ts
+function registerConversionCommands(program2) {
+  const conversions = program2.command("conversions").description("Track and refund conversions");
+  conversions.command("create").description("Create a conversion (requires AFFONSO_SIGNING_SECRET)").requiredOption("--sale-amount <n>", "Sale amount").requiredOption("--external-event-id <id>", "Idempotent external event ID").option("--referral-id <id>", "Referral ID").option("--click-id <id>", "Click ID").option("--affonso-id <id>", "Affonso click ID").option("--affonso-referral <id>", "Affonso referral identifier").option("--customer-id <id>", "Customer ID").option("--external-user-id <id>", "External user ID").option("--sale-amount-currency <code>", "Sale currency").option("--product-ids <ids>", "Product IDs (comma-separated)").option("--price-ids <ids>", "Price IDs (comma-separated)").option("--interval <interval>", "Billing interval (monthly, yearly)").option("--is-subscription", "Mark as a subscription").option("--created-at <date>", "Creation timestamp (ISO 8601)").option("--status <status>", "Commission status").option("--sales-status <status>", "Sales status").option("--metadata-json <json|@file>", "Metadata as JSON or @file").action(async function() {
+    const o = opts(this);
+    try {
+      const params = {
+        referral_id: o.referralId,
+        click_id: o.clickId,
+        affonso_id: o.affonsoId,
+        affonso_referral: o.affonsoReferral,
+        customer_id: o.customerId,
+        external_user_id: o.externalUserId,
+        sale_amount: Number(o.saleAmount),
+        sale_amount_currency: o.saleAmountCurrency,
+        product_ids: commaSeparated(o.productIds),
+        price_ids: commaSeparated(o.priceIds),
+        interval: o.interval,
+        is_subscription: o.isSubscription || void 0,
+        external_event_id: o.externalEventId,
+        created_at: o.createdAt,
+        status: o.status,
+        sales_status: o.salesStatus,
+        metadata: parseJsonObject(o.metadataJson, "--metadata-json")
+      };
+      const client = await getClient(o);
+      output(await client.conversions.create(params), o);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+  conversions.command("refund <id>").description("Refund a conversion (requires AFFONSO_SIGNING_SECRET)").option("--amount <n>", "Partial refund amount").option("--currency <code>", "Refund currency").option("--reason <reason>", "Refund reason").option("--external-event-id <id>", "Idempotent external event ID").option("--refunded-at <date>", "Refund timestamp (ISO 8601)").action(async function(id) {
+    const o = opts(this);
+    try {
+      const client = await getClient(o);
+      output(
+        await client.conversions.refund(id, {
+          amount: o.amount === void 0 ? void 0 : Number(o.amount),
+          currency: o.currency,
+          reason: o.reason,
+          external_event_id: o.externalEventId,
+          refunded_at: o.refundedAt
+        }),
+        o
+      );
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+}
+
 // src/commands/coupons.ts
 function registerCouponCommands(program2) {
   const coupons = program2.command("coupons").description("Manage coupons");
-  coupons.command("list").description("List coupons").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option("--affiliate-id <id>", "Filter by affiliate ID").option("--program-id <id>", "Filter by program ID").option("--search <query>", "Search by code").option("--expand <fields>", "Expand fields").option("--sort <field:dir>", "Sort").action(async function() {
+  coupons.command("list").description("List coupons").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option("--affiliate-id <id>", "Filter by affiliate ID").option("--search <query>", "Search by code").option("--expand <fields>", "Expand fields").option("--sort <field:dir>", "Sort").action(async function() {
     const o = opts(this);
     try {
       const client = await getClient(o);
@@ -755,12 +930,19 @@ function registerCouponCommands(program2) {
         limit: Number(o.limit),
         page: Number(o.page),
         affiliate_id: o.affiliateId,
-        program_id: o.programId,
         search: o.search,
         expand: o.expand,
         sort: o.sort
       });
-      output(result, o, ["id", "affiliate_id", "code", "discount_type", "discount_value", "duration", "created_at"]);
+      output(result, o, [
+        "id",
+        "affiliate_id",
+        "code",
+        "discount_type",
+        "discount_value",
+        "duration",
+        "created_at"
+      ]);
     } catch (err) {
       handleError(err, o.json);
     }
@@ -789,7 +971,7 @@ function registerCouponCommands(program2) {
         duration: o.duration,
         duration_in_months: o.durationInMonths ? Number(o.durationInMonths) : void 0,
         currency: o.currency,
-        product_ids: o.productIds?.split(",")
+        product_ids: o.productIds?.split(",").map((id) => id.trim()).filter(Boolean)
       });
       output(result, o);
     } catch (err) {
@@ -808,31 +990,248 @@ function registerCouponCommands(program2) {
   });
 }
 
-// src/commands/payouts.ts
-function registerPayoutCommands(program2) {
-  const payouts = program2.command("payouts").description("Manage payouts");
-  payouts.command("list").description("List payouts").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option("--status <status>", "Filter by status (pending, processing, completed, failed, cancelled)").option("--affiliate-id <id>", "Filter by affiliate ID").option("--sort <field:dir>", "Sort").option("--date-from <date>", "Filter from date").option("--date-to <date>", "Filter to date").action(async function() {
+// src/commands/embed-tokens.ts
+function registerEmbedTokenCommands(program2) {
+  const embedTokens = program2.command("embed-tokens").description("Generate embed tokens");
+  embedTokens.command("create").description("Create an embed token").requiredOption("--email <email>", "Partner email").option("--external-user-id <id>", "External user ID").option("--name <name>", "Partner name").option("--image <url>", "Partner image URL").option("--group-id <id>", "Affiliate group ID").option("--metadata-json <json|@file>", "Metadata as JSON or @file").action(async function() {
     const o = opts(this);
     try {
+      const metadata = parseJsonObject(o.metadataJson, "--metadata-json");
       const client = await getClient(o);
-      const result = await client.payouts.list({
-        limit: Number(o.limit),
-        page: Number(o.page),
-        status: o.status,
-        affiliateId: o.affiliateId,
-        sort: o.sort,
-        dateFrom: o.dateFrom,
-        dateTo: o.dateTo
+      const result = await client.embedTokens.create({
+        partner: {
+          email: o.email,
+          name: o.name,
+          image: o.image
+        },
+        groupId: o.groupId,
+        externalUserId: o.externalUserId,
+        metadata
       });
-      output(result, o, ["id", "affiliate_id", "amount", "status", "payment_method", "created_at"]);
+      output(result, o);
     } catch (err) {
       handleError(err, o.json);
     }
   });
-  payouts.command("get <id>").description("Get a payout by ID").action(async function(id) {
+}
+
+// src/commands/events.ts
+function registerEventCommands(program2) {
+  program2.command("events").description("Track server-side events").command("create").description("Create a server-side event (requires AFFONSO_SIGNING_SECRET)").requiredOption("--event-name <name>", "Event name").option("--event-type <type>", "Event type (conversion, lead, trial, milestone)").option("--referral-id <id>", "Referral ID").option("--click-id <id>", "Click ID").option("--affonso-id <id>", "Affonso click ID").option("--affonso-referral <id>", "Affonso referral identifier").option("--customer-id <id>", "Customer ID").option("--external-user-id <id>", "External user ID").option("--occurred-at <date>", "Event timestamp (ISO 8601)").option("--external-event-id <id>", "Idempotent external event ID").option("--sale-amount <n>", "Sale amount").option("--sale-amount-currency <code>", "Sale currency").option("--product-ids <ids>", "Product IDs (comma-separated)").option("--price-ids <ids>", "Price IDs (comma-separated)").option("--interval <interval>", "Billing interval (monthly, yearly)").option("--is-subscription", "Mark as a subscription").option("--metadata-json <json|@file>", "Metadata as JSON or @file").action(async function() {
     const o = opts(this);
     try {
-      const client = await getClient(o);
+      const params = {
+        event_name: o.eventName,
+        event_type: o.eventType,
+        referral_id: o.referralId,
+        click_id: o.clickId,
+        affonso_id: o.affonsoId,
+        affonso_referral: o.affonsoReferral,
+        customer_id: o.customerId,
+        external_user_id: o.externalUserId,
+        occurred_at: o.occurredAt,
+        external_event_id: o.externalEventId,
+        sale_amount: o.saleAmount === void 0 ? void 0 : Number(o.saleAmount),
+        sale_amount_currency: o.saleAmountCurrency,
+        product_ids: commaSeparated(o.productIds),
+        price_ids: commaSeparated(o.priceIds),
+        interval: o.interval,
+        is_subscription: o.isSubscription || void 0,
+        metadata: parseJsonObject(o.metadataJson, "--metadata-json")
+      };
+      const client = await getClient(o);
+      output(await client.events.create(params), o);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+}
+
+// src/commands/login.ts
+function registerLoginCommand(program2) {
+  program2.command("login").description("Log in via browser (OAuth 2.1)").action(async function() {
+    const o = opts(this);
+    try {
+      const existing = resolveAuth();
+      if (existing?.source === "oauth") {
+        console.log("Already logged in. Run `affonso logout` first to switch accounts.");
+        return;
+      }
+      const baseUrl = resolveBaseUrl(o.baseUrl);
+      await login(baseUrl);
+      console.log("Successfully logged in!");
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+}
+
+// src/commands/logout.ts
+function registerLogoutCommand(program2) {
+  program2.command("logout").description("Log out and remove stored credentials").action(async function() {
+    const o = opts(this);
+    try {
+      const auth = loadAuth();
+      if (auth?.access_token) {
+        const baseUrl = resolveBaseUrl(o.baseUrl);
+        const issuer = baseUrl.replace(/\/v1\/?$/, "");
+        try {
+          await fetch(`${issuer}/oauth/revoke`, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: new URLSearchParams({
+              token: auth.access_token,
+              client_id: CLIENT_ID
+            })
+          });
+        } catch {
+        }
+      }
+      clearAuth();
+      console.log("Logged out.");
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+}
+
+// src/commands/marketplace.ts
+var import_sdk3 = require("@affonso/sdk");
+function registerMarketplaceCommands(program2) {
+  const marketplace = program2.command("marketplace").description("Browse the affiliate marketplace (public, no auth required)");
+  marketplace.command("list").description("List marketplace programs").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option("--category <cat>", "Filter by category").action(async function() {
+    const o = opts(this);
+    try {
+      const baseUrl = resolveBaseUrl(o.baseUrl);
+      const client = new import_sdk3.Affonso("public", { baseUrl });
+      const result = await client.marketplace.list({
+        limit: Number(o.limit),
+        page: Number(o.page),
+        category: o.category
+      });
+      output(result, o, [
+        "id",
+        "name",
+        "marketplace_joined_at",
+        "access_mode",
+        "currency",
+        "website_url"
+      ]);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+  marketplace.command("get <id>").description("Get a marketplace program by ID").action(async function(id) {
+    const o = opts(this);
+    try {
+      const baseUrl = resolveBaseUrl(o.baseUrl);
+      const client = new import_sdk3.Affonso("public", { baseUrl });
+      const result = await client.marketplace.retrieve(id);
+      output(result, o);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+}
+
+// src/commands/onboarding-form.ts
+function questions(value) {
+  const parsed = parseJson(value, "--questions-json");
+  if (!Array.isArray(parsed)) throw new Error("--questions-json must contain a JSON array.");
+  return parsed;
+}
+function registerOnboardingFormCommands(program2) {
+  const form = program2.command("onboarding-form").description("Manage the onboarding form");
+  form.command("get").description("Get the onboarding form").action(async function() {
+    const o = opts(this);
+    try {
+      const client = await getClient(o);
+      output(await client.onboardingForm.retrieve(), o);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+  form.command("create").description("Create the onboarding form").requiredOption("--name <name>", "Form name").requiredOption("--questions-json <json|@file>", "Questions array as JSON or @file").option("--description <text>", "Form description").action(async function() {
+    const o = opts(this);
+    try {
+      const parsedQuestions = questions(o.questionsJson);
+      const client = await getClient(o);
+      output(
+        await client.onboardingForm.create({
+          name: o.name,
+          description: o.description,
+          questions: parsedQuestions
+        }),
+        o
+      );
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+  form.command("update").description("Update the onboarding form").option("--name <name>", "Form name").option("--description <text>", "Form description").option("--questions-json <json|@file>", "Questions array as JSON or @file").action(async function() {
+    const o = opts(this);
+    try {
+      const parsedQuestions = o.questionsJson === void 0 ? void 0 : questions(o.questionsJson);
+      const client = await getClient(o);
+      output(
+        await client.onboardingForm.update({
+          name: o.name,
+          description: o.description,
+          questions: parsedQuestions
+        }),
+        o
+      );
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+  form.command("delete").description("Delete the onboarding form").action(async function() {
+    const o = opts(this);
+    try {
+      const client = await getClient(o);
+      const result = await client.onboardingForm.del();
+      outputSuccess(result.message ?? "Onboarding form deleted.", o);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+}
+
+// src/commands/payouts.ts
+function registerPayoutCommands(program2) {
+  const payouts = program2.command("payouts").description("Manage payouts");
+  payouts.command("list").description("List payouts").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option(
+    "--status <status>",
+    "Filter by status (pending, processing, completed, failed, cancelled)"
+  ).option("--affiliate-id <id>", "Filter by affiliate ID").option("--sort <field:dir>", "Sort").option("--date-from <date>", "Filter from date").option("--date-to <date>", "Filter to date").action(async function() {
+    const o = opts(this);
+    try {
+      const client = await getClient(o);
+      const result = await client.payouts.list({
+        limit: Number(o.limit),
+        page: Number(o.page),
+        status: o.status,
+        affiliateId: o.affiliateId,
+        sort: o.sort,
+        dateFrom: o.dateFrom,
+        dateTo: o.dateTo
+      });
+      output(result, o, [
+        "id",
+        "affiliate_id",
+        "amount",
+        "status",
+        "payment_method",
+        "created_at"
+      ]);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+  payouts.command("get <id>").description("Get a payout by ID").action(async function(id) {
+    const o = opts(this);
+    try {
+      const client = await getClient(o);
       const result = await client.payouts.retrieve(id);
       output(result, o);
     } catch (err) {
@@ -868,20 +1267,24 @@ function registerProgramCommands(program2) {
       handleError(err, o.json);
     }
   });
-  prog.command("update").description("Update program settings").option("--name <name>", "Program name").option("--tagline <text>", "Tagline").option("--category <cat>", "Category").option("--description <text>", "Description").option("--website-url <url>", "Website URL").option("--logo-url <url>", "Logo URL").option("--access-mode <mode>", "Access mode: PUBLIC, PRIVATE, or INVITE").option("--affiliate-links-enabled", "Enable affiliate links").option("--no-affiliate-links-enabled", "Disable affiliate links").action(async function() {
+  prog.command("update").description("Update program settings").option("--name <name>", "Program name").option("--tagline <text>", "Tagline").option("--description <text>", "Description").option("--website-url <url>", "Website URL").option("--logo-url <url>", "Logo URL").option("--access-mode <mode>", "Access mode: PUBLIC, PRIVATE, or INVITE").option("--affiliate-links-enabled", "Enable affiliate links").option("--no-affiliate-links-enabled", "Disable affiliate links").option(
+    "--customer-information-visibility <visibility>",
+    "Customer data visibility (HIDDEN, NAME, EMAIL, NAME_AND_EMAIL)"
+  ).action(async function() {
     const o = opts(this);
     try {
       const client = await getClient(o);
       const params = {};
       if (o.name !== void 0) params.name = o.name;
       if (o.tagline !== void 0) params.tagline = o.tagline;
-      if (o.category !== void 0) params.category = o.category;
       if (o.description !== void 0) params.description = o.description;
       if (o.websiteUrl !== void 0) params.website_url = o.websiteUrl;
       if (o.logoUrl !== void 0) params.logo_url = o.logoUrl;
       if (o.accessMode !== void 0) params.access_mode = o.accessMode;
       if (o.affiliateLinksEnabled !== void 0)
         params.affiliate_links_enabled = o.affiliateLinksEnabled;
+      if (o.customerInformationVisibility !== void 0)
+        params.customer_information_visibility = o.customerInformationVisibility;
       const result = await client.program.update(params);
       output(result, o);
     } catch (err) {
@@ -909,7 +1312,10 @@ function registerPaymentTerms(prog) {
       handleError(err, o.json);
     }
   });
-  pt.command("update").description("Update payment terms").option("--commission-type <type>", "Commission type (percentage, fixed)").option("--commission-rate <n>", "Commission rate").option("--commission-duration <dur>", "Duration (forever, once, first_month, custom)").option("--commission-duration-value <n>", "Custom duration value").option("--payment-threshold <n>", "Minimum payout threshold").option("--payment-frequency <freq>", "Payment frequency (monthly, biweekly, weekly)").option("--cookie-lifetime <days>", "Cookie lifetime in days").option("--auto-payout", "Enable auto payout").option("--no-auto-payout", "Disable auto payout").option("--invoice-required", "Require invoices").option("--no-invoice-required", "Don't require invoices").action(async function() {
+  pt.command("update").description("Update payment terms").option("--commission-type <type>", "Commission type (PERCENTAGE, FIXED, CREDITS)").option("--commission-rate <n>", "Commission rate").option("--commission-duration <dur>", "Duration (lifetime, time_limited, payment_limited)").option("--commissions-limit <n>", "Commission duration limit").option("--commissions-hold-days <n>", "Commission hold period in days").option("--payment-threshold <n>", "Minimum payout threshold").option("--payment-frequency <freq>", "Payment frequency (weekly, monthly)").option("--payment-methods <methods>", "Payment methods (comma-separated)").option("--custom-payment-terms <text>", "Custom payment terms").option("--cookie-lifetime <days>", "Cookie lifetime in days").option("--auto-payout", "Enable auto payout").option("--no-auto-payout", "Disable auto payout").option(
+    "--invoice-rule <rule>",
+    "Invoice rule (NONE, OWNER_PROVIDES, AFFILIATE_PROVIDES, SELF_BILLING)"
+  ).option("--invoice-prefix <prefix>", "Invoice number prefix").option("--require-tax-forms", "Require tax forms").option("--no-require-tax-forms", "Do not require tax forms").option("--owner-company-name <name>", "Owner company name").option("--owner-address-line-1 <value>", "Owner address line 1").option("--owner-address-line-2 <value>", "Owner address line 2").option("--owner-city <city>", "Owner city").option("--owner-postal-code <code>", "Owner postal code").option("--owner-country <code>", "Owner country code").option("--owner-vat-id <id>", "Owner VAT ID").option("--owner-vat-rate <n>", "Owner VAT rate").action(async function() {
     const o = opts(this);
     try {
       const client = await getClient(o);
@@ -917,13 +1323,27 @@ function registerPaymentTerms(prog) {
       if (o.commissionType !== void 0) params.commission_type = o.commissionType;
       if (o.commissionRate !== void 0) params.commission_rate = Number(o.commissionRate);
       if (o.commissionDuration !== void 0) params.commission_duration = o.commissionDuration;
-      if (o.commissionDurationValue !== void 0)
-        params.commission_duration_value = Number(o.commissionDurationValue);
+      if (o.commissionsLimit !== void 0) params.commissions_limit = Number(o.commissionsLimit);
+      if (o.commissionsHoldDays !== void 0)
+        params.commissions_hold_days = Number(o.commissionsHoldDays);
       if (o.paymentThreshold !== void 0) params.payment_threshold = Number(o.paymentThreshold);
       if (o.paymentFrequency !== void 0) params.payment_frequency = o.paymentFrequency;
+      if (o.paymentMethods !== void 0)
+        params.payment_methods = commaSeparated(o.paymentMethods) ?? [];
+      if (o.customPaymentTerms !== void 0) params.custom_payment_terms = o.customPaymentTerms;
       if (o.cookieLifetime !== void 0) params.cookie_lifetime = Number(o.cookieLifetime);
       if (o.autoPayout !== void 0) params.auto_payout = o.autoPayout;
-      if (o.invoiceRequired !== void 0) params.invoice_required = o.invoiceRequired;
+      if (o.invoiceRule !== void 0) params.invoice_rule = o.invoiceRule;
+      if (o.invoicePrefix !== void 0) params.invoice_prefix = o.invoicePrefix;
+      if (o.requireTaxForms !== void 0) params.require_tax_forms = o.requireTaxForms;
+      if (o.ownerCompanyName !== void 0) params.owner_company_name = o.ownerCompanyName;
+      if (o.ownerAddressLine1 !== void 0) params.owner_address_line_1 = o.ownerAddressLine1;
+      if (o.ownerAddressLine2 !== void 0) params.owner_address_line_2 = o.ownerAddressLine2;
+      if (o.ownerCity !== void 0) params.owner_city = o.ownerCity;
+      if (o.ownerPostalCode !== void 0) params.owner_postal_code = o.ownerPostalCode;
+      if (o.ownerCountry !== void 0) params.owner_country = o.ownerCountry;
+      if (o.ownerVatId !== void 0) params.owner_vat_id = o.ownerVatId;
+      if (o.ownerVatRate !== void 0) params.owner_vat_rate = Number(o.ownerVatRate);
       const result = await client.program.paymentTerms.update(params);
       output(result, o);
     } catch (err) {
@@ -943,17 +1363,30 @@ function registerTracking(prog) {
       handleError(err, o.json);
     }
   });
-  tracking.command("update").description("Update tracking settings").option("--default-referral-parameter <param>", "Default referral parameter").option("--enabled-referral-parameters <params>", "Enabled parameters (comma-separated)").option("--track-email", "Track email").option("--no-track-email", "Don't track email").option("--track-name", "Track name").option("--no-track-name", "Don't track name").action(async function() {
+  tracking.command("update").description("Update tracking settings").option("--default-referral-parameter <param>", "Default referral parameter").option("--enabled-referral-parameters <params>", "Enabled parameters (comma-separated)").option("--email-tracking-enabled", "Enable email tracking").option("--no-email-tracking-enabled", "Disable email tracking").option("--name-tracking-enabled", "Enable name tracking").option("--no-name-tracking-enabled", "Disable name tracking").option("--postbacks-enabled", "Enable postbacks").option("--no-postbacks-enabled", "Disable postbacks").option("--append-affonso-id-enabled", "Append the Affonso click ID").option("--no-append-affonso-id-enabled", "Do not append the Affonso click ID").option("--tracking-template-enabled", "Enable the tracking template").option("--no-tracking-template-enabled", "Disable the tracking template").option("--tracking-template-json <json|@file>", "Tracking template array as JSON or @file").action(async function() {
     const o = opts(this);
     try {
-      const client = await getClient(o);
       const params = {};
       if (o.defaultReferralParameter !== void 0)
         params.default_referral_parameter = o.defaultReferralParameter;
       if (o.enabledReferralParameters !== void 0)
-        params.enabled_referral_parameters = o.enabledReferralParameters.split(",");
-      if (o.trackEmail !== void 0) params.track_email = o.trackEmail;
-      if (o.trackName !== void 0) params.track_name = o.trackName;
+        params.enabled_referral_parameters = commaSeparated(o.enabledReferralParameters) ?? [];
+      if (o.emailTrackingEnabled !== void 0)
+        params.email_tracking_enabled = o.emailTrackingEnabled;
+      if (o.nameTrackingEnabled !== void 0)
+        params.name_tracking_enabled = o.nameTrackingEnabled;
+      if (o.postbacksEnabled !== void 0) params.postbacks_enabled = o.postbacksEnabled;
+      if (o.appendAffonsoIdEnabled !== void 0)
+        params.append_affonso_id_enabled = o.appendAffonsoIdEnabled;
+      if (o.trackingTemplateEnabled !== void 0)
+        params.tracking_template_enabled = o.trackingTemplateEnabled;
+      if (o.trackingTemplateJson !== void 0) {
+        const template = parseJson(o.trackingTemplateJson, "--tracking-template-json");
+        if (!Array.isArray(template))
+          throw new Error("--tracking-template-json must contain a JSON array.");
+        params.tracking_template = template;
+      }
+      const client = await getClient(o);
       const result = await client.program.tracking.update(params);
       output(result, o);
     } catch (err) {
@@ -973,7 +1406,7 @@ function registerRestrictions(prog) {
       handleError(err, o.json);
     }
   });
-  restrictions.command("update").description("Update restrictions").option("--websites", "Allow websites").option("--no-websites", "Disallow websites").option("--social-marketing", "Allow social marketing").option("--no-social-marketing", "Disallow social marketing").option("--organic-social", "Allow organic social").option("--no-organic-social", "Disallow organic social").option("--email-marketing", "Allow email marketing").option("--no-email-marketing", "Disallow email marketing").option("--paid-ads", "Allow paid ads").option("--no-paid-ads", "Disallow paid ads").option("--content-marketing", "Allow content marketing").option("--no-content-marketing", "Disallow content marketing").option("--coupon-sites", "Allow coupon sites").option("--no-coupon-sites", "Disallow coupon sites").option("--review-sites", "Allow review sites").option("--no-review-sites", "Disallow review sites").option("--incentivized-traffic", "Allow incentivized traffic").option("--no-incentivized-traffic", "Disallow incentivized traffic").option("--trademark-bidding", "Allow trademark bidding").option("--no-trademark-bidding", "Disallow trademark bidding").action(async function() {
+  restrictions.command("update").description("Update restrictions").option("--websites", "Allow websites").option("--no-websites", "Disallow websites").option("--social-marketing", "Allow social marketing").option("--no-social-marketing", "Disallow social marketing").option("--organic-social", "Allow organic social").option("--no-organic-social", "Disallow organic social").option("--email-marketing", "Allow email marketing").option("--no-email-marketing", "Disallow email marketing").option("--mobile-traffic", "Allow mobile traffic").option("--no-mobile-traffic", "Disallow mobile traffic").option("--search-engine-marketing", "Allow search engine marketing").option("--no-search-engine-marketing", "Disallow search engine marketing").option("--organic-search", "Allow organic search").option("--no-organic-search", "Disallow organic search").option("--rebrokering", "Allow rebrokering").option("--no-rebrokering", "Disallow rebrokering").option("--incent", "Allow incentivized traffic").option("--no-incent", "Disallow incentivized traffic").option("--brand-bidding", "Allow brand bidding").option("--no-brand-bidding", "Disallow brand bidding").option("--additional-restrictions <text>", "Additional restriction text").action(async function() {
     const o = opts(this);
     try {
       const client = await getClient(o);
@@ -983,17 +1416,19 @@ function registerRestrictions(prog) {
         ["socialMarketing", "social_marketing"],
         ["organicSocial", "organic_social"],
         ["emailMarketing", "email_marketing"],
-        ["paidAds", "paid_ads"],
-        ["contentMarketing", "content_marketing"],
-        ["couponSites", "coupon_sites"],
-        ["reviewSites", "review_sites"],
-        ["incentivizedTraffic", "incentivized_traffic"],
-        ["trademarkBidding", "trademark_bidding"]
+        ["mobileTraffic", "mobile_traffic"],
+        ["searchEngineMarketing", "search_engine_marketing"],
+        ["organicSearch", "organic_search"],
+        ["rebrokering", "rebrokering"],
+        ["incent", "incent"],
+        ["brandBidding", "brand_bidding"]
       ];
       for (const [camel, snake] of fieldMap) {
         const val = o[camel];
         if (val !== void 0) params[snake] = val;
       }
+      if (o.additionalRestrictions !== void 0)
+        params.additional_restrictions = o.additionalRestrictions;
       const result = await client.program.restrictions.update(params);
       output(result, o);
     } catch (err) {
@@ -1013,15 +1448,36 @@ function registerFraudRules(prog) {
       handleError(err, o.json);
     }
   });
-  fraud.command("update").description("Update fraud rules").option("--self-referral <mode>", "Self-referral mode (off, detect, block)").option("--duplicate-ip <mode>", "Duplicate IP mode (off, detect, block)").option("--vpn-proxy <mode>", "VPN/Proxy mode (off, detect, block)").option("--suspicious-conversion <mode>", "Suspicious conversion mode (off, detect, block)").action(async function() {
+  fraud.command("update").description("Update fraud rules").option("--self-referral-mode <mode>", "Self-referral mode (off, detect, block)").option("--cross-program-ban-mode <mode>", "Cross-program ban mode").option("--duplicate-payout-mode <mode>", "Duplicate payout mode").option("--suspicious-email-mode <mode>", "Suspicious email mode").option("--banned-referral-mode <mode>", "Banned referral mode").option("--paid-traffic-mode <mode>", "Paid traffic mode").option("--blocked-country-mode <mode>", "Blocked country mode").option("--banned-referral-config-json <json|@file>", "Banned referral config").option("--paid-traffic-config-json <json|@file>", "Paid traffic config").option("--blocked-country-config-json <json|@file>", "Blocked country config").action(async function() {
     const o = opts(this);
     try {
-      const client = await getClient(o);
       const params = {};
-      if (o.selfReferral !== void 0) params.self_referral = o.selfReferral;
-      if (o.duplicateIp !== void 0) params.duplicate_ip = o.duplicateIp;
-      if (o.vpnProxy !== void 0) params.vpn_proxy = o.vpnProxy;
-      if (o.suspiciousConversion !== void 0) params.suspicious_conversion = o.suspiciousConversion;
+      if (o.selfReferralMode !== void 0) params.self_referral_mode = o.selfReferralMode;
+      if (o.crossProgramBanMode !== void 0)
+        params.cross_program_ban_mode = o.crossProgramBanMode;
+      if (o.duplicatePayoutMode !== void 0)
+        params.duplicate_payout_mode = o.duplicatePayoutMode;
+      if (o.suspiciousEmailMode !== void 0)
+        params.suspicious_email_mode = o.suspiciousEmailMode;
+      if (o.bannedReferralMode !== void 0) params.banned_referral_mode = o.bannedReferralMode;
+      if (o.paidTrafficMode !== void 0) params.paid_traffic_mode = o.paidTrafficMode;
+      if (o.blockedCountryMode !== void 0) params.blocked_country_mode = o.blockedCountryMode;
+      if (o.bannedReferralConfigJson !== void 0)
+        params.banned_referral_config = parseJsonObject(
+          o.bannedReferralConfigJson,
+          "--banned-referral-config-json"
+        );
+      if (o.paidTrafficConfigJson !== void 0)
+        params.paid_traffic_config = parseJsonObject(
+          o.paidTrafficConfigJson,
+          "--paid-traffic-config-json"
+        );
+      if (o.blockedCountryConfigJson !== void 0)
+        params.blocked_country_config = parseJsonObject(
+          o.blockedCountryConfigJson,
+          "--blocked-country-config-json"
+        );
+      const client = await getClient(o);
       const result = await client.program.fraudRules.update(params);
       output(result, o);
     } catch (err) {
@@ -1041,22 +1497,29 @@ function registerPortal(prog) {
       handleError(err, o.json);
     }
   });
-  portal.command("update").description("Update portal settings").option("--primary-color <color>", "Primary color (hex)").option("--accent-color <color>", "Accent color (hex)").option("--logo-url <url>", "Logo URL").option("--favicon-url <url>", "Favicon URL").option("--custom-domain <domain>", "Custom domain").option("--terms-url <url>", "Terms URL").option("--privacy-url <url>", "Privacy URL").option("--onboarding-enabled", "Enable onboarding").option("--no-onboarding-enabled", "Disable onboarding").option("--resources-enabled", "Enable resources").option("--no-resources-enabled", "Disable resources").action(async function() {
+  portal.command("update").description("Update portal settings").option("--single-program-portal", "Enable the single-program portal").option("--no-single-program-portal", "Disable the single-program portal").option("--hide-branding", "Hide Affonso branding").option("--no-hide-branding", "Show Affonso branding").option("--hide-details", "Hide program details").option("--no-hide-details", "Show program details").option("--primary-color <color>", "Primary color (hex)").option("--secondary-color <color>", "Secondary color (hex)").option("--show-leaderboard", "Show the leaderboard").option("--no-show-leaderboard", "Hide the leaderboard").option("--terms-conditions-status", "Enable terms and conditions").option("--no-terms-conditions-status", "Disable terms and conditions").option("--terms-conditions-value <value>", "Terms text or URL").option("--privacy-policy-status", "Enable the privacy policy").option("--no-privacy-policy-status", "Disable the privacy policy").option("--privacy-policy-value <value>", "Privacy policy text or URL").option("--support-email-status", "Show the support email").option("--no-support-email-status", "Hide the support email").option("--support-email-value <email>", "Support email").option("--custom-texts-json <json|@file>", "Custom texts as JSON or @file").action(async function() {
     const o = opts(this);
     try {
-      const client = await getClient(o);
       const params = {};
+      if (o.singleProgramPortal !== void 0)
+        params.single_program_portal = o.singleProgramPortal;
+      if (o.hideBranding !== void 0) params.hide_branding = o.hideBranding;
+      if (o.hideDetails !== void 0) params.hide_details = o.hideDetails;
       if (o.primaryColor !== void 0) params.primary_color = o.primaryColor;
-      if (o.accentColor !== void 0) params.accent_color = o.accentColor;
-      if (o.logoUrl !== void 0) params.logo_url = o.logoUrl;
-      if (o.faviconUrl !== void 0) params.favicon_url = o.faviconUrl;
-      if (o.customDomain !== void 0) params.custom_domain = o.customDomain;
-      if (o.termsUrl !== void 0) params.terms_url = o.termsUrl;
-      if (o.privacyUrl !== void 0) params.privacy_url = o.privacyUrl;
-      if (o.onboardingEnabled !== void 0)
-        params.onboarding_enabled = o.onboardingEnabled;
-      if (o.resourcesEnabled !== void 0)
-        params.resources_enabled = o.resourcesEnabled;
+      if (o.secondaryColor !== void 0) params.secondary_color = o.secondaryColor;
+      if (o.showLeaderboard !== void 0) params.show_leaderboard = o.showLeaderboard;
+      if (o.termsConditionsStatus !== void 0)
+        params.terms_conditions_status = o.termsConditionsStatus;
+      if (o.termsConditionsValue !== void 0)
+        params.terms_conditions_value = o.termsConditionsValue;
+      if (o.privacyPolicyStatus !== void 0)
+        params.privacy_policy_status = o.privacyPolicyStatus;
+      if (o.privacyPolicyValue !== void 0) params.privacy_policy_value = o.privacyPolicyValue;
+      if (o.supportEmailStatus !== void 0) params.support_email_status = o.supportEmailStatus;
+      if (o.supportEmailValue !== void 0) params.support_email_value = o.supportEmailValue;
+      if (o.customTextsJson !== void 0)
+        params.custom_texts = parseJsonObject(o.customTextsJson, "--custom-texts-json");
+      const client = await getClient(o);
       const result = await client.program.portal.update(params);
       output(result, o);
     } catch (err) {
@@ -1071,18 +1534,19 @@ function registerNotifications(prog) {
     try {
       const client = await getClient(o);
       const result = await client.program.notifications.list();
-      output(result, o, ["id", "email_type", "subject", "enabled", "recipient"]);
+      output(result, o, ["email_type_id", "is_active", "custom_subject", "custom_body"]);
     } catch (err) {
       handleError(err, o.json);
     }
   });
-  notifications.command("update <id>").description("Update a notification setting").option("--subject <text>", "Email subject").option("--enabled", "Enable notification").option("--no-enabled", "Disable notification").action(async function(id) {
+  notifications.command("update <id>").description("Update a notification setting").option("--custom-subject <text>", "Custom email subject").option("--custom-body <text>", "Custom email body").option("--active", "Enable notification").option("--no-active", "Disable notification").action(async function(id) {
     const o = opts(this);
     try {
       const client = await getClient(o);
       const params = {};
-      if (o.subject !== void 0) params.subject = o.subject;
-      if (o.enabled !== void 0) params.enabled = o.enabled;
+      if (o.customSubject !== void 0) params.custom_subject = o.customSubject;
+      if (o.customBody !== void 0) params.custom_body = o.customBody;
+      if (o.active !== void 0) params.is_active = o.active;
       const result = await client.program.notifications.update(id, params);
       output(result, o);
     } catch (err) {
@@ -1099,7 +1563,14 @@ function registerGroups(prog) {
       const result = await client.program.groups.list({
         expand: o.expand
       });
-      output(result, o, ["id", "name", "description", "is_default", "affiliate_count", "created_at"]);
+      output(result, o, [
+        "id",
+        "name",
+        "description",
+        "custom_website_url",
+        "is_default",
+        "created_at"
+      ]);
     } catch (err) {
       handleError(err, o.json);
     }
@@ -1116,13 +1587,14 @@ function registerGroups(prog) {
       handleError(err, o.json);
     }
   });
-  groups.command("create").description("Create a group").requiredOption("--name <name>", "Group name").option("--description <text>", "Group description").option("--is-default", "Set as default group").action(async function() {
+  groups.command("create").description("Create a group").requiredOption("--name <name>", "Group name").option("--description <text>", "Group description").option("--custom-website-url <url>", "Custom website URL").option("--is-default", "Set as default group").action(async function() {
     const o = opts(this);
     try {
       const client = await getClient(o);
       const result = await client.program.groups.create({
         name: o.name,
         description: o.description,
+        custom_website_url: o.customWebsiteUrl,
         is_default: o.isDefault
       });
       output(result, o);
@@ -1130,13 +1602,14 @@ function registerGroups(prog) {
       handleError(err, o.json);
     }
   });
-  groups.command("update <id>").description("Update a group").option("--name <name>", "Group name").option("--description <text>", "Group description").option("--is-default", "Set as default group").option("--no-is-default", "Unset as default group").action(async function(id) {
+  groups.command("update <id>").description("Update a group").option("--name <name>", "Group name").option("--description <text>", "Group description").option("--custom-website-url <url>", "Custom website URL").option("--is-default", "Set as default group").option("--no-is-default", "Unset as default group").action(async function(id) {
     const o = opts(this);
     try {
       const client = await getClient(o);
       const params = {};
       if (o.name !== void 0) params.name = o.name;
       if (o.description !== void 0) params.description = o.description;
+      if (o.customWebsiteUrl !== void 0) params.custom_website_url = o.customWebsiteUrl;
       if (o.isDefault !== void 0) params.is_default = o.isDefault;
       const result = await client.program.groups.update(id, params);
       output(result, o);
@@ -1157,17 +1630,16 @@ function registerGroups(prog) {
 }
 function registerCreatives(prog) {
   const creatives = prog.command("creatives").description("Manage creatives");
-  creatives.command("list").description("List creatives").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option("--type <type>", "Filter by type").option("--search <query>", "Search by name").action(async function() {
+  creatives.command("list").description("List creatives").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option("--category <category>", "Filter by category").action(async function() {
     const o = opts(this);
     try {
       const client = await getClient(o);
       const result = await client.program.creatives.list({
         limit: Number(o.limit),
         page: Number(o.page),
-        type: o.type,
-        search: o.search
+        category: o.category
       });
-      output(result, o, ["id", "name", "type", "url", "created_at"]);
+      output(result, o, ["id", "name", "category", "url", "created_at"]);
     } catch (err) {
       handleError(err, o.json);
     }
@@ -1182,36 +1654,48 @@ function registerCreatives(prog) {
       handleError(err, o.json);
     }
   });
-  creatives.command("create").description("Create a creative").requiredOption("--name <name>", "Creative name").requiredOption("--type <type>", "Creative type").option("--description <text>", "Description").option("--url <url>", "URL").option("--file-url <url>", "File URL").option("--width <n>", "Width in pixels").option("--height <n>", "Height in pixels").action(async function() {
+  creatives.command("create").description("Create a creative").option("--name <name>", "Creative name").option("--category <category>", "Creative category").option("--subcategory <subcategory>", "Creative subcategory").option("--description <text>", "Description").option("--url <url>", "URL").option("--content <content>", "Text or embed content").option("--tags <tags>", "Tags (comma-separated)").option("--width <n>", "Width in pixels").option("--height <n>", "Height in pixels").option("--usage-notes <text>", "Usage notes").option("--restrictions <text>", "Usage restrictions").action(async function() {
     const o = opts(this);
     try {
       const client = await getClient(o);
-      const result = await client.program.creatives.create({
+      if (o.width === void 0 !== (o.height === void 0))
+        throw new Error("--width and --height must be provided together.");
+      const params = {
         name: o.name,
-        type: o.type,
+        category: o.category,
+        subcategory: o.subcategory,
         description: o.description,
         url: o.url,
-        file_url: o.fileUrl,
-        width: o.width ? Number(o.width) : void 0,
-        height: o.height ? Number(o.height) : void 0
-      });
+        content: o.content,
+        tags: commaSeparated(o.tags),
+        dimensions: o.width !== void 0 ? { width: Number(o.width), height: Number(o.height) } : void 0,
+        usage_notes: o.usageNotes,
+        restrictions: o.restrictions
+      };
+      const result = await client.program.creatives.create(params);
       output(result, o);
     } catch (err) {
       handleError(err, o.json);
     }
   });
-  creatives.command("update <id>").description("Update a creative").option("--name <name>", "Creative name").option("--type <type>", "Creative type").option("--description <text>", "Description").option("--url <url>", "URL").option("--file-url <url>", "File URL").option("--width <n>", "Width in pixels").option("--height <n>", "Height in pixels").action(async function(id) {
+  creatives.command("update <id>").description("Update a creative").option("--name <name>", "Creative name").option("--category <category>", "Creative category").option("--subcategory <subcategory>", "Creative subcategory").option("--description <text>", "Description").option("--url <url>", "URL").option("--content <content>", "Text or embed content").option("--tags <tags>", "Tags (comma-separated)").option("--width <n>", "Width in pixels").option("--height <n>", "Height in pixels").option("--usage-notes <text>", "Usage notes").option("--restrictions <text>", "Usage restrictions").action(async function(id) {
     const o = opts(this);
     try {
       const client = await getClient(o);
+      if (o.width === void 0 !== (o.height === void 0))
+        throw new Error("--width and --height must be provided together.");
       const params = {};
       if (o.name !== void 0) params.name = o.name;
-      if (o.type !== void 0) params.type = o.type;
+      if (o.category !== void 0) params.category = o.category;
+      if (o.subcategory !== void 0) params.subcategory = o.subcategory;
       if (o.description !== void 0) params.description = o.description;
       if (o.url !== void 0) params.url = o.url;
-      if (o.fileUrl !== void 0) params.file_url = o.fileUrl;
-      if (o.width !== void 0) params.width = Number(o.width);
-      if (o.height !== void 0) params.height = Number(o.height);
+      if (o.content !== void 0) params.content = o.content;
+      if (o.tags !== void 0) params.tags = commaSeparated(o.tags);
+      if (o.width !== void 0)
+        params.dimensions = { width: Number(o.width), height: Number(o.height) };
+      if (o.usageNotes !== void 0) params.usage_notes = o.usageNotes;
+      if (o.restrictions !== void 0) params.restrictions = o.restrictions;
       const result = await client.program.creatives.update(id, params);
       output(result, o);
     } catch (err) {
@@ -1230,102 +1714,163 @@ function registerCreatives(prog) {
   });
 }
 
-// src/commands/marketplace.ts
-var import_sdk3 = require("@affonso/sdk");
-function registerMarketplaceCommands(program2) {
-  const marketplace = program2.command("marketplace").description("Browse the affiliate marketplace (public, no auth required)");
-  marketplace.command("list").description("List marketplace programs").option("--limit <n>", "Items per page", "50").option("--page <n>", "Page number", "1").option("--category <cat>", "Filter by category").option("--search <query>", "Search programs").option("--sort <field:dir>", "Sort").action(async function() {
+// src/commands/referrals.ts
+function registerReferralCommands(program2) {
+  const referrals = program2.command("referrals").description("Manage referrals");
+  referrals.command("list").description("List referrals").option("--limit <n>", "Items per page", "50").option("--starting-after <id>", "Cursor: fetch items after this ID").option("--ending-before <id>", "Cursor: fetch items before this ID").option("--affiliate-id <id>", "Filter by affiliate ID").option("--external-user-id <id>", "Filter by external user ID").option("--status <status>", "Filter by status").option("--order <dir>", "Order (asc, desc)").option("--expand <fields>", "Expand fields").option("--created-gte <date>", "Created after date").option("--created-lte <date>", "Created before date").action(async function() {
     const o = opts(this);
     try {
-      const baseUrl = resolveBaseUrl(o.baseUrl);
-      const client = new import_sdk3.Affonso("public", { baseUrl });
-      const result = await client.marketplace.list({
+      const client = await getClient(o);
+      const result = await client.referrals.list({
         limit: Number(o.limit),
-        page: Number(o.page),
-        category: o.category,
-        search: o.search,
-        sort: o.sort
+        starting_after: o.startingAfter,
+        ending_before: o.endingBefore,
+        affiliate_id: o.affiliateId,
+        external_user_id: o.externalUserId,
+        status: o.status,
+        order: o.order,
+        expand: o.expand,
+        created_gte: o.createdGte,
+        created_lte: o.createdLte
       });
-      output(result, o, ["id", "name", "category", "commission_type", "commission_rate", "cookie_lifetime"]);
+      output(result, o, ["id", "affiliate_id", "email", "status", "created_at"]);
     } catch (err) {
       handleError(err, o.json);
     }
   });
-  marketplace.command("get <id>").description("Get a marketplace program by ID").action(async function(id) {
+  referrals.command("get <id>").description("Get a referral by ID").option("--expand <fields>", "Expand fields").option("--include <fields>", "Include fields").action(async function(id) {
     const o = opts(this);
     try {
-      const baseUrl = resolveBaseUrl(o.baseUrl);
-      const client = new import_sdk3.Affonso("public", { baseUrl });
-      const result = await client.marketplace.retrieve(id);
+      const client = await getClient(o);
+      const result = await client.referrals.retrieve(id, {
+        expand: o.expand,
+        include: o.include
+      });
       output(result, o);
     } catch (err) {
       handleError(err, o.json);
     }
   });
-}
-
-// src/commands/embed-tokens.ts
-function registerEmbedTokenCommands(program2) {
-  const embedTokens = program2.command("embed-tokens").description("Generate embed tokens");
-  embedTokens.command("create").description("Create an embed token").option("--affiliate-id <id>", "Affiliate ID").option("--external-user-id <id>", "External user ID").option("--email <email>", "Partner email").option("--name <name>", "Partner name").action(async function() {
+  referrals.command("create").description("Create a referral").requiredOption("--email <email>", "Referral email").requiredOption("--affiliate-id <id>", "Affiliate ID").option("--subscription-id <id>", "Subscription ID").option("--customer-id <id>", "Customer ID").option("--click-id <id>", "Click ID").option("--status <status>", "Initial status").option("--name <name>", "Referral name").option("--created-at <date>", "Creation timestamp (ISO 8601)").option("--metadata-json <json|@file>", "Metadata as JSON or @file").action(async function() {
     const o = opts(this);
     try {
+      const metadata = parseJsonObject(o.metadataJson, "--metadata-json");
       const client = await getClient(o);
-      const result = await client.embedTokens.create({
-        affiliate_id: o.affiliateId,
-        external_user_id: o.externalUserId,
+      const result = await client.referrals.create({
         email: o.email,
-        name: o.name
+        affiliate_id: o.affiliateId,
+        subscription_id: o.subscriptionId,
+        customer_id: o.customerId,
+        click_id: o.clickId,
+        status: o.status,
+        name: o.name,
+        created_at: o.createdAt,
+        metadata
       });
       output(result, o);
     } catch (err) {
       handleError(err, o.json);
     }
   });
+  referrals.command("update <id>").description("Update a referral").option("--email <email>", "Referral email").option("--status <status>", "Status").option("--subscription-id <id>", "Subscription ID").option("--customer-id <id>", "Customer ID").option("--name <name>", "Referral name").option("--metadata-json <json|@file>", "Metadata as JSON or @file").action(async function(id) {
+    const o = opts(this);
+    try {
+      const params = {};
+      if (o.email !== void 0) params.email = o.email;
+      if (o.status !== void 0) params.status = o.status;
+      if (o.subscriptionId !== void 0) params.subscription_id = o.subscriptionId;
+      if (o.customerId !== void 0) params.customer_id = o.customerId;
+      if (o.name !== void 0) params.name = o.name;
+      if (o.metadataJson !== void 0)
+        params.metadata = parseJsonObject(o.metadataJson, "--metadata-json");
+      const client = await getClient(o);
+      const result = await client.referrals.update(id, params);
+      output(result, o);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+  referrals.command("delete <id>").description("Delete a referral").action(async function(id) {
+    const o = opts(this);
+    try {
+      const client = await getClient(o);
+      const result = await client.referrals.del(id);
+      outputSuccess(result.message ?? "Referral deleted.", o);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
 }
 
-// src/commands/login.ts
-function registerLoginCommand(program2) {
-  program2.command("login").description("Log in via browser (OAuth 2.1)").action(async function() {
+// src/commands/signups.ts
+function registerSignupCommands(program2) {
+  program2.command("signups").description("Manage server-side signups").command("create").description("Create a server-side signup").requiredOption("--click-id <id>", "Click ID").option("--email <email>", "Customer email").option("--external-user-id <id>", "External user ID").option("--name <name>", "Customer name").action(async function() {
     const o = opts(this);
     try {
-      const existing = resolveAuth();
-      if (existing?.source === "oauth") {
-        console.log("Already logged in. Run `affonso logout` first to switch accounts.");
-        return;
-      }
-      const baseUrl = resolveBaseUrl(o.baseUrl);
-      await login(baseUrl);
-      console.log("Successfully logged in!");
+      const client = await getClient(o);
+      output(
+        await client.signups.create({
+          click_id: o.clickId,
+          email: o.email,
+          external_user_id: o.externalUserId,
+          name: o.name
+        }),
+        o
+      );
     } catch (err) {
       handleError(err, o.json);
     }
   });
 }
 
-// src/commands/logout.ts
-function registerLogoutCommand(program2) {
-  program2.command("logout").description("Log out and remove stored credentials").action(async function() {
+// src/commands/sources.ts
+function registerSourceCommands(program2) {
+  program2.command("sources").description("Ingest source events").command("ingest <source>").description(
+    "Ingest a signed source event (custom or segment_webhook; configure its signing-secret environment variable)"
+  ).requiredOption("--payload-json <json|@file>", "Source payload as JSON or @file").action(async function(source) {
     const o = opts(this);
     try {
-      const auth = loadAuth();
-      if (auth?.access_token) {
-        const baseUrl = resolveBaseUrl(o.baseUrl);
-        const issuer = baseUrl.replace(/\/v1\/?$/, "");
-        try {
-          await fetch(`${issuer}/oauth/revoke`, {
-            method: "POST",
-            headers: { "Content-Type": "application/x-www-form-urlencoded" },
-            body: new URLSearchParams({
-              token: auth.access_token,
-              client_id: CLIENT_ID
-            })
-          });
-        } catch {
-        }
-      }
-      clearAuth();
-      console.log("Logged out.");
+      const payload = parseJsonObject(o.payloadJson, "--payload-json");
+      if (!payload) throw new Error("--payload-json is required.");
+      const client = await getClient(o);
+      output(await client.sources.ingest(source, payload), o);
+    } catch (err) {
+      handleError(err, o.json);
+    }
+  });
+}
+
+// src/commands/tracking.ts
+var import_sdk4 = require("@affonso/sdk");
+function registerTrackingCommands(program2) {
+  program2.command("tracking").description("Track public referral traffic").command("track").description("Resolve and record a public tracking request").requiredOption("--program-id <id>", "Program ID").option("--tracking-id <id>", "Affiliate tracking ID").option("--referrer <url>", "Referrer URL").option("--user-agent <value>", "User agent").option("--utm-source <value>", "UTM source").option("--utm-medium <value>", "UTM medium").option("--utm-campaign <value>", "UTM campaign").option("--utm-term <value>", "UTM term").option("--utm-content <value>", "UTM content").option("--sub1 <value>", "Sub-tracking parameter 1").option("--sub2 <value>", "Sub-tracking parameter 2").option("--sub3 <value>", "Sub-tracking parameter 3").option("--sub4 <value>", "Sub-tracking parameter 4").option("--sub5 <value>", "Sub-tracking parameter 5").option("--gclid <id>", "Google click ID").option("--fbclid <id>", "Meta click ID").option("--msclkid <id>", "Microsoft click ID").option("--ttclid <id>", "TikTok click ID").option("--has-consent", "Record that tracking consent was granted").action(async function() {
+    const o = opts(this);
+    try {
+      const client = new import_sdk4.Affonso("public", { baseUrl: resolveBaseUrl(o.baseUrl) });
+      output(
+        await client.tracking.track({
+          programId: o.programId,
+          trackingId: o.trackingId,
+          referrer: o.referrer,
+          userAgent: o.userAgent,
+          utmSource: o.utmSource,
+          utmMedium: o.utmMedium,
+          utmCampaign: o.utmCampaign,
+          utmTerm: o.utmTerm,
+          utmContent: o.utmContent,
+          sub1: o.sub1,
+          sub2: o.sub2,
+          sub3: o.sub3,
+          sub4: o.sub4,
+          sub5: o.sub5,
+          gclid: o.gclid,
+          fbclid: o.fbclid,
+          msclkid: o.msclkid,
+          ttclid: o.ttclid,
+          hasConsent: o.hasConsent || void 0
+        }),
+        o
+      );
     } catch (err) {
       handleError(err, o.json);
     }
@@ -1363,58 +1908,10 @@ function registerWhoamiCommand(program2) {
   });
 }
 
-// src/commands/config.ts
-var VALID_KEYS = ["api-key", "base-url"];
-var KEY_MAP = {
-  "api-key": "api_key",
-  "base-url": "base_url"
-};
-function registerConfigCommands(program2) {
-  const config = program2.command("config").description("Manage CLI configuration");
-  config.command("get <key>").description("Get a config value (api-key, base-url)").action(async function(key) {
-    const o = opts(this);
-    try {
-      if (!VALID_KEYS.includes(key)) {
-        console.error(`Unknown config key: ${key}. Valid keys: ${VALID_KEYS.join(", ")}`);
-        process.exit(1);
-      }
-      const stored = loadConfig();
-      const mappedKey = KEY_MAP[key];
-      const value = stored[mappedKey];
-      if (value) {
-        if (key === "api-key") {
-          const v = value;
-          console.log(`${v.slice(0, 10)}...${v.slice(-4)}`);
-        } else {
-          console.log(value);
-        }
-      } else {
-        console.log(`${key} is not set.`);
-      }
-    } catch (err) {
-      handleError(err, o.json);
-    }
-  });
-  config.command("set <key> <value>").description("Set a config value (api-key, base-url)").action(async function(key, value) {
-    const o = opts(this);
-    try {
-      if (!VALID_KEYS.includes(key)) {
-        console.error(`Unknown config key: ${key}. Valid keys: ${VALID_KEYS.join(", ")}`);
-        process.exit(1);
-      }
-      const mappedKey = KEY_MAP[key];
-      saveConfig({ [mappedKey]: value });
-      console.log(`${key} saved.`);
-    } catch (err) {
-      handleError(err, o.json);
-    }
-  });
-}
-
 // src/cli.ts
 function createProgram() {
   const program2 = new import_commander.Command();
-  program2.name("affonso").description("Affonso CLI \u2014 manage your affiliate program from the terminal").version("0.1.0").option("--json", "Output as JSON").option("--api-key <key>", "API key for this request").option("--base-url <url>", "Custom API base URL").option("--no-color", "Disable colored output");
+  program2.name("affonso").description("Affonso CLI \u2014 manage your affiliate program from the terminal").version(package_default.version).option("--json", "Output as JSON").option("--api-key <key>", "API key for this request").option("--base-url <url>", "Custom API base URL").option("--no-color", "Disable colored output");
   registerLoginCommand(program2);
   registerLogoutCommand(program2);
   registerWhoamiCommand(program2);
@@ -1423,11 +1920,17 @@ function createProgram() {
   registerReferralCommands(program2);
   registerClickCommands(program2);
   registerCommissionCommands(program2);
+  registerConversionCommands(program2);
+  registerEventCommands(program2);
+  registerSignupCommands(program2);
+  registerSourceCommands(program2);
   registerCouponCommands(program2);
   registerPayoutCommands(program2);
   registerProgramCommands(program2);
   registerMarketplaceCommands(program2);
   registerEmbedTokenCommands(program2);
+  registerOnboardingFormCommands(program2);
+  registerTrackingCommands(program2);
   return program2;
 }