@drip-apex/apex-cli 0.12.0 → 0.13.0

package/AGENTS.md

@@ -18,7 +18,10 @@ Use `apex` as the canonical command name. `drip` is a compatibility alias.
 - Launch is dashboard-only. The API and CLI do not start traffic.
 - Prefer `--json`; piped stdout defaults to JSON automatically.
 - JSON output is a stable contract: top level is `{ ok, version, command, data | error }`.
-- Diagnostics, prompts, progress, and update notices go to stderr.
+- With `--json`, stdout is exactly one JSON document. Diagnostics, prompts, progress,
+  and update notices go to stderr.
+- For single-request commands `data` is the API response body as returned (lists at
+  `.data.data[]`). API failures carry the API error body in `error.api`.
 - Do not parse human tables. Use `apex schema --json` first if you need flags.
 - Keep command names exact. Do not infer or guess names from the CLI's
   "did you mean" hints — those are stderr diagnostics for humans; machine

package/README.md

@@ -100,6 +100,42 @@ Summary timestamps include `created_at` and `archived_at`; experiments have no `
 `--include-archived` to include them; archived rows display their archive date
 when the API provides `archived_at`.
 
+## JSON output contract
+
+With `--json`, or whenever stdout is piped, stdout carries exactly one JSON
+document and nothing else. Spinners, progress, prompts, warnings, human text and
+child-process output go to stderr, so `apex ... --json | jq` always parses.
+
+```json
+{ "ok": true, "version": "0.13.0", "command": "apex flags get", "data": {}, "context": {} }
+```
+
+- `data` is the API response body exactly as the API returned it for every command
+  backed by one API request. Lists keep the API's `{ "data": [...], "pagination": {...} }`
+  shape, so rows are at `.data.data[]`; single resources are at `.data` directly.
+- `apex experiments get` adds one CLI-derived key, `dashboard_url`, beside the
+  experiment fields.
+- Commands that combine several requests or local files (`experiments create`,
+  `pull`, `plan`, `apply`, `qa approve`, `triggers`, `project-code`, `harness`,
+  `workspace`, `doctor`, `whoami`, `push`, `analytics urls`, `flags status`,
+  `goals test`) print a documented CLI-composed `data` object.
+- Failures print `{ "ok": false, "version", "command", "error", "context" }`.
+  `error.code` is the CLI exit code, `error.details` carries retry hints and
+  server details, and `error.api` is `{ "status", "body" }` with the API error
+  envelope verbatim whenever an API response caused the failure.
+- `deprecated` appears on the envelope only when a deprecated flag was used.
+
+**Breaking in 0.13.0.** Earlier releases re-nested or renamed API bodies. Update
+scripts: `.data.experiments[]` becomes `.data.data[]`; `experiments get`
+`.data.experiment.id` becomes `.data.id`; `.data.flag`, `.data.goal`,
+`.data.funnel`, `.data.signal`, `.data.backlog_item`, `.data.personalization`,
+`.data.exclusion_group`, `.data.asset`, `.data.landing_page`, `.data.webhook`,
+`.data.targeting` and `.data.verification` wrappers are gone (read the fields at
+`.data`); `experiments results` reads at `.data` instead of `.data.results`,
+`funnels run` at `.data` instead of `.data.run`, and `brand` at `.data.data`
+instead of `.data.brandContext`; lifecycle and delete commands return the API's
+body instead of a CLI summary.
+
 ## Command index
 
 Use `apex schema --json` to emit the complete machine-readable command surface,
@@ -352,5 +388,29 @@ config-fetch p50/p95 (milliseconds), and inline/cache/network/none counts.
 JSON output includes the API body in the standard envelope and assignment-ready
 percentiles. Fewer than five measured samples have null percentiles. Natural
 loads are shop-wide non-QA loads without forced IDs; a QA-session bucket can
-overlap forced loads. Analytics failures return errors. Preload and anti-flicker
-changes remain under evaluation pending the first report.
+overlap forced loads. Analytics failures return errors. The API position is
+`runtime_inline_no_change`.
+
+The runtime remains unchanged. Natural runtime decides within tens of milliseconds
+of SDK start when config ships inline with the snippet (measured p50 12 ms /
+p95 54 ms on a large storefront). QA previews, screenshot-mode previews and
+cookie-forced sessions take the QA config lane and fetch fresh config over the
+network (measured p50 1.3 s / p95 7 s); they are not representative of launch
+behaviour. URL-forced sessions without a `qa` parameter keep the inline or cached
+config, so these measurements do not describe them. No config preload or
+anti-flicker hold is planned.
+
+### Connection troubleshooting
+
+Connection errors retain the underlying failure. JSON output exposes
+`error.details.reason` and, when available, `error.details.code`; the numeric
+`error.code` remains the CLI exit code.
+
+| Reason | Meaning and usual fix |
+| --- | --- |
+| `dns` | The host could not be resolved. Check `APEX_BASE_URL` (or `DRIP_BASE_URL`), DNS, and whether your sandbox permits network access. |
+| `refused` | The host rejected the connection. Check the base URL, port, and whether the server is running. |
+| `reset` | The connection was interrupted. Check network stability and proxy settings before retrying. |
+| `tls` | Certificate or TLS validation failed. Check expired certificates and your corporate TLS proxy's trusted CA configuration. |
+| `timeout` | The request was aborted or exceeded its deadline. Check server availability and network access. |
+| `unknown` | Another network failure occurred. Use the included cause message to diagnose network or sandbox restrictions. |

package/dist/cli.js

@@ -7112,7 +7112,7 @@ var import_node_os3 = __toESM(require("node:os"));
 // package.json
 var package_default = {
   name: "@drip-apex/apex-cli",
-  version: "0.12.0",
+  version: "0.13.0",
   license: "MIT",
   description: "Apex CLI for managing experiments, approved roadmap ideas, and draft workspaces.",
   private: false,
@@ -7172,16 +7172,42 @@ var EXIT_CODES = {
   confirmationRequired: 4,
   conflict: 5
 };
+var MAX_RECORDED_API_FAILURES = 32;
+var recentApiFailures = [];
+function recordApiResponse(response) {
+  if (response.ok) return;
+  recentApiFailures.push({
+    status: response.status,
+    body: response.data ?? null,
+    message: response.error,
+    details: response.errorDetails
+  });
+  if (recentApiFailures.length > MAX_RECORDED_API_FAILURES) recentApiFailures.shift();
+}
+function matchApiFailure(message, details) {
+  const byDetails = details !== void 0 ? recentApiFailures.find((entry) => entry.details === details) : void 0;
+  if (byDetails) return { status: byDetails.status, body: byDetails.body };
+  const byMessage = recentApiFailures.filter(
+    (entry) => Boolean(entry.message) && message.includes(entry.message)
+  );
+  if (byMessage.length !== 1) return void 0;
+  return { status: byMessage[0].status, body: byMessage[0].body };
+}
 var CliError = class extends Error {
   exitCode;
   details;
-  constructor(message, exitCode = EXIT_CODES.general, details) {
+  api;
+  constructor(message, exitCode = EXIT_CODES.general, details, api) {
     super(message);
     this.name = "CliError";
     this.exitCode = exitCode;
     this.details = details;
+    this.api = api ?? matchApiFailure(message, details);
   }
 };
+function apiFailureOf(response) {
+  return response.ok ? void 0 : { status: response.status, body: response.data ?? null };
+}
 var initialEnvironmentApiKey = process.env.APEX_API_KEY || process.env.DRIP_API_KEY;
 var envelopeContext = {
   org_id: null,
@@ -7196,6 +7222,7 @@ var commandName = "apex";
 var wroteEnvelope = false;
 var stdoutLines = [];
 var originalConsoleLog = null;
+var rawStdoutWrite = null;
 var deprecationMarker = null;
 var interceptedCommands = /* @__PURE__ */ new WeakMap();
 function interceptCliError(err, command) {
@@ -7222,18 +7249,52 @@ function formatConsoleArgs(args) {
     return JSON.stringify(arg);
   }).join(" ");
 }
+function installJsonStdoutGuard() {
+  if (rawStdoutWrite) return;
+  const stdout = process.stdout;
+  const original = stdout.write.bind(stdout);
+  rawStdoutWrite = (text) => original(text);
+  stdout.write = ((chunk, ...args) => process.stderr.write(
+    chunk,
+    ...args
+  ));
+}
+function isJsonMode() {
+  return jsonMode;
+}
 function configureRuntime(command) {
   commandName = commandPath(command) || commandName;
   jsonMode = shouldUseJson(command);
-  if (!jsonMode || originalConsoleLog) return;
+  if (!jsonMode) return;
+  installJsonStdoutGuard();
+  if (originalConsoleLog) return;
   originalConsoleLog = console.log;
   console.log = (...args) => {
     stdoutLines.push(formatConsoleArgs(args));
   };
 }
+function writeJsonDocument(envelope) {
+  const text = `${JSON.stringify(envelope, null, 2)}
+`;
+  if (wroteEnvelope) {
+    process.stderr.write(text);
+    return;
+  }
+  wroteEnvelope = true;
+  const pendingHumanLines = stdoutLines;
+  stdoutLines = [];
+  restoreConsoleLog();
+  if (pendingHumanLines.length > 0) process.stderr.write(`${pendingHumanLines.join("\n")}
+`);
+  if (rawStdoutWrite) rawStdoutWrite(text);
+  else process.stdout.write(text);
+}
 function flushFallbackEnvelope() {
-  if (!jsonMode || wroteEnvelope || stdoutLines.length === 0) return;
-  writeEnvelope({ output: stdoutLines.join("\n") });
+  if (!jsonMode || wroteEnvelope) return;
+  if (process.exitCode !== void 0 && process.exitCode !== 0) return;
+  const output2 = stdoutLines.join("\n");
+  stdoutLines = [];
+  writeEnvelope(output2 ? { output: output2 } : null);
 }
 function restoreConsoleLog() {
   if (!originalConsoleLog) return;
@@ -7252,10 +7313,7 @@ function writeEnvelope(data, command = commandName) {
     context: envelopeContext,
     ...deprecationMarker ? { deprecated: deprecationMarker } : {}
   };
-  wroteEnvelope = true;
-  restoreConsoleLog();
-  process.stdout.write(`${JSON.stringify(envelope, null, 2)}
-`);
+  writeJsonDocument(envelope);
 }
 function writeErrorEnvelope(error, command = commandName) {
   const envelope = {
@@ -7265,14 +7323,12 @@ function writeErrorEnvelope(error, command = commandName) {
     error: {
       message: error.message,
       code: error.exitCode,
-      ...error.details ? { details: error.details } : {}
+      ...error.details ? { details: error.details } : {},
+      ...error.api ? { api: error.api } : {}
     },
     context: envelopeContext
   };
-  wroteEnvelope = true;
-  restoreConsoleLog();
-  process.stdout.write(`${JSON.stringify(envelope, null, 2)}
-`);
+  writeJsonDocument(envelope);
 }
 function output(command, data, human) {
   if (shouldUseJson(command)) {
@@ -7291,8 +7347,8 @@ function commandPath(command) {
   }
   return names.join(" ");
 }
-function fail(command, message, exitCode = EXIT_CODES.general, details) {
-  throw new CliError(message, exitCode, details);
+function fail(command, message, exitCode = EXIT_CODES.general, details, api) {
+  throw new CliError(message, exitCode, details, api);
 }
 function classifyStatus(status2) {
   if (status2 === 401 || status2 === 403) return EXIT_CODES.auth;
@@ -7666,11 +7722,20 @@ function createHttpClient(creds, options) {
     try {
       response = await fetch(`${creds.baseUrl}${path24}`, { method, headers, body: form ? body5 : body5 ? JSON.stringify(body5) : void 0, signal: AbortSignal.timeout(timeoutMs) });
     } catch (error) {
-      return options.onNetworkError({ baseUrl: creds.baseUrl, timeoutMs, cause: error instanceof Error ? error.message : String(error) });
+      const outer = error && typeof error === "object" ? error : void 0;
+      const nested = outer?.cause && typeof outer.cause === "object" ? outer.cause : void 0;
+      return options.onNetworkError({
+        baseUrl: creds.baseUrl,
+        timeoutMs,
+        cause: error instanceof Error ? error.message : String(error),
+        code: typeof nested?.code === "string" ? nested.code : typeof outer?.code === "string" ? outer.code : void 0,
+        name: typeof outer?.name === "string" ? outer.name : void 0,
+        causeMessage: typeof nested?.message === "string" ? nested.message : void 0
+      });
     }
     inspectVersion(response.headers);
     const json = await response.json().catch(() => null);
-    if (!response.ok) return { ok: false, status: response.status, data: form ? void 0 : json, error: extractErrorMessage(json, response.status), errorDetails: extractErrorDetails(json), requestId: response.headers.get("x-request-id"), rateLimit: { limit: response.headers.get("x-ratelimit-limit"), remaining: response.headers.get("x-ratelimit-remaining"), reset: response.headers.get("x-ratelimit-reset") } };
+    if (!response.ok) return { ok: false, status: response.status, data: json, error: extractErrorMessage(json, response.status), errorDetails: extractErrorDetails(json), requestId: response.headers.get("x-request-id"), rateLimit: { limit: response.headers.get("x-ratelimit-limit"), remaining: response.headers.get("x-ratelimit-remaining"), reset: response.headers.get("x-ratelimit-reset") } };
     return { ok: true, status: response.status, data: json };
   }
   return { request: (method, path24, body5, timeoutMs) => request2(method, path24, body5, timeoutMs), requestForm: (method, path24, body5) => request2(method, path24, body5, void 0, true) };
@@ -7739,10 +7804,42 @@ function sharedClient(creds) {
       transport: testTransport,
       testTransportVersion: () => testTransport ? process.env[["APEX", "CLI", "MOCK", "API", "VERSION"].join("_")] : void 0,
       onNetworkError: (info) => {
+        let url;
+        try {
+          url = new URL(info.baseUrl);
+        } catch {
+        }
+        const host = url?.hostname ?? info.baseUrl;
+        const code = info.code;
+        let reason = "unknown";
+        let message = info.causeMessage ?? info.cause;
+        if (info.name === "TimeoutError" || info.name === "AbortError" || code === "UND_ERR_CONNECT_TIMEOUT") {
+          reason = "timeout";
+          message = `server did not respond within ${info.timeoutMs / 1e3}s`;
+        } else if (code === "ENOTFOUND" || code === "EAI_AGAIN") {
+          reason = "dns";
+          message = `could not resolve host ${host}`;
+        } else if (code === "ECONNREFUSED") {
+          reason = "refused";
+          message = `connection refused by ${host}:${url?.port || (url?.protocol === "https:" ? "443" : "80")}`;
+        } else if (code === "ECONNRESET" || code === "EPIPE") {
+          reason = "reset";
+          message = `connection reset by ${host}`;
+        } else if (code?.startsWith("CERT_") || code?.startsWith("ERR_TLS_") || [
+          "DEPTH_ZERO_SELF_SIGNED_CERT",
+          "UNABLE_TO_VERIFY_LEAF_SIGNATURE",
+          "SELF_SIGNED_CERT_IN_CHAIN",
+          "UNABLE_TO_GET_ISSUER_CERT_LOCALLY",
+          "UNABLE_TO_GET_ISSUER_CERT",
+          "HOSTNAME_MISMATCH"
+        ].includes(code ?? "")) {
+          reason = "tls";
+          message = `TLS error (${code})`;
+        }
         throw new CliError(
-          `Could not reach ${info.baseUrl}: check APEX_BASE_URL (or DRIP_BASE_URL) / network; server did not respond within ${info.timeoutMs / 1e3}s.`,
+          `Could not reach ${info.baseUrl}: check APEX_BASE_URL (or DRIP_BASE_URL) / network; ${message}.`,
           EXIT_CODES.general,
-          { ...info }
+          { reason, code, name: info.name, baseUrl: info.baseUrl, timeoutMs: info.timeoutMs }
         );
       }
     });
@@ -7751,10 +7848,14 @@ function sharedClient(creds) {
   return client;
 }
 async function request(creds, method, path24, body5, requestTimeoutMs) {
-  return sharedClient(creds).request(method, path24, body5, requestTimeoutMs);
+  const response = await sharedClient(creds).request(method, path24, body5, requestTimeoutMs);
+  recordApiResponse(response);
+  return response;
 }
 async function requestForm(creds, method, path24, body5) {
-  return sharedClient(creds).requestForm(method, path24, body5);
+  const response = await sharedClient(creds).requestForm(method, path24, body5);
+  recordApiResponse(response);
+  return response;
 }
 function listExperiments(creds, opts) {
   const params = new URLSearchParams();
@@ -9800,7 +9901,8 @@ async function resolveExperiment(idOrSlug) {
     throw new CliError(
       res2.status === 404 && isTestKeyReference(idOrSlug) ? `Experiment "${idOrSlug}" not found in selected shop ${creds.resolvedContext?.shopId ?? "(API key shop)"}. Test keys resolve within the selected shop; use --shop <shop-id> to change it.` : res2.error ?? `Experiment "${idOrSlug}" not found`,
       classifyStatus(res2.status),
-      res2.errorDetails
+      res2.errorDetails,
+      apiFailureOf(res2)
     );
   }
   const slug = idOrSlug.startsWith("slug:") ? idOrSlug.slice(5) : idOrSlug;
@@ -9809,7 +9911,8 @@ async function resolveExperiment(idOrSlug) {
   throw new CliError(
     res.error ?? `Experiment "${idOrSlug}" not found`,
     classifyStatus(res.status),
-    res.errorDetails
+    res.errorDetails,
+    apiFailureOf(res)
   );
 }
 var list = new Command("list").alias("ls").description(
@@ -9836,7 +9939,7 @@ var list = new Command("list").alias("ls").description(
   }
   spinner?.stop();
   const experiments = res.data.data;
-  output(this, { experiments, pagination: res.data.pagination }, () => {
+  output(this, res.data, () => {
     if (experiments.length === 0) {
       console.log(source_default.dim("No experiments found."));
       return;
@@ -9888,11 +9991,7 @@ var get = new Command("get").description(
     exp.shop_id ?? creds.resolvedContext?.shopId,
     exp.id
   );
-  output(
-    this,
-    { experiment: exp, dashboard_url: dashboardUrl },
-    () => printExperiment(exp, dashboardUrl)
-  );
+  output(this, { ...exp, dashboard_url: dashboardUrl }, () => printExperiment(exp, dashboardUrl));
 });
 var attachIdea = new Command("attach-idea").description("Attach an experiment to an idea").argument("<experiment>", EXPERIMENT_REFERENCE_DESCRIPTION).requiredOption("--idea <key>", "Idea UUID or Apex backlog key").option("--follow-up", "Attach as a follow-up test").action(async function action5(experimentRef, opts) {
   const experiment = await resolveExperiment(experimentRef);
@@ -9949,7 +10048,7 @@ var results = new Command("results").description("Read experiment results and ti
     spinner?.stop();
     output(
       this,
-      { experiment: exp, results: res.data },
+      res.data,
       () => printExperimentResults(res.data, opts.currency)
     );
   } catch (error) {
@@ -10535,7 +10634,7 @@ var pause = new Command("pause").description("Pause a running experiment").argum
       res.errorDetails
     );
   }
-  output(this, { experiment: { id: exp.id, name: exp.name, status: "paused" } }, () => {
+  output(this, res.data, () => {
     spinner.succeed(`Experiment "${exp.name}" is now ${statusBadge("paused")}`);
   });
 });
@@ -10557,7 +10656,7 @@ var complete = new Command("complete").description("Complete/stop an experiment"
       res.errorDetails
     );
   }
-  output(this, { experiment: { id: exp.id, name: exp.name, status: "completed" } }, () => {
+  output(this, res.data, () => {
     spinner.succeed(`Experiment "${exp.name}" is now ${statusBadge("completed")}`);
   });
 });
@@ -10585,7 +10684,7 @@ var del = new Command("delete").alias("rm").description("Delete an experiment").
     });
     rl.close();
     if (answer.toLowerCase() !== "y") {
-      console.log("Aborted.");
+      output(this, { aborted: true }, () => console.log("Aborted."));
       return;
     }
   }
@@ -10600,11 +10699,7 @@ var del = new Command("delete").alias("rm").description("Delete an experiment").
       res.errorDetails
     );
   }
-  output(
-    this,
-    { experiment: { id: exp.id, name: exp.name }, deleted: true },
-    () => spinner.succeed(`Experiment "${exp.name}" deleted.`)
-  );
+  output(this, res.data, () => spinner.succeed(`Experiment "${exp.name}" deleted.`));
 });
 var pullFilesystem = new Command("pull").description("Pull an experiment as an editable filesystem").argument("<id-or-slug>", EXPERIMENT_REFERENCE_DESCRIPTION).option("--out <path>", "Target folder").action(async function action13(idOrSlug, opts) {
   const creds = requireCredentials();
@@ -10773,7 +10868,7 @@ var applyFilesystem = new Command("apply").option("--sync", "Refresh local autho
         );
       }
       if (!ok) {
-        console.log("Aborted.");
+        output(this, { aborted: true }, () => console.log("Aborted."));
         return;
       }
     }
@@ -10879,7 +10974,7 @@ var qaStatus = new Command("status").description(
       resolved.folder,
       resolved.experimentId
     );
-    output(this, { run: res.data.run }, () => printQaRun(res.data.run));
+    output(this, res.data, () => printQaRun(res.data.run));
   } catch (error) {
     spinner.fail("Failed to fetch QA run");
     throw error;
@@ -10921,7 +11016,7 @@ var qaCheck = new Command("check").description("Update one QA checklist item wit
       resolved.folder,
       resolved.experimentId
     );
-    const data = opts.summary ? qaSummary(run3, run3.checklist.find((item) => item.id === opts.item) ?? null) : { run: run3 };
+    const data = opts.summary ? qaSummary(run3, run3.checklist.find((item) => item.id === opts.item) ?? null) : res.data;
     output(this, data, () => {
       spinner.succeed("Updated QA checklist");
       if (opts.summary) process.stdout.write(`${JSON.stringify(data, null, 2)}
@@ -10970,7 +11065,7 @@ var qaNotes = new Command("notes").description("Update QA run notes or acceptanc
     const data = opts.summary ? qaSummary(run3, {
       notes: run3.notes,
       acceptanceCriteriaSummary: run3.acceptanceCriteriaSummary
-    }) : { run: run3 };
+    }) : res.data;
     output(this, data, () => {
       spinner.succeed("Updated QA notes");
       if (opts.summary) process.stdout.write(`${JSON.stringify(data, null, 2)}
@@ -11051,11 +11146,7 @@ var qaReopen = new Command("reopen").description("Reopen QA and clear scheduled
       resolved.folder,
       resolved.experimentId
     );
-    output(
-      this,
-      { experimentId: resolved.experimentId, qaStatus: "open" },
-      () => spinner.succeed(`QA reopened for ${resolved.label}`)
-    );
+    output(this, res.data, () => spinner.succeed(`QA reopened for ${resolved.label}`));
   } catch (error) {
     spinner.fail("Failed to reopen QA");
     throw error;
@@ -11162,7 +11253,7 @@ var qaEvidence = new Command("evidence").description("Attach screenshot jobs or
     const data = opts.summary ? qaSummary(
       run3,
       run3.evidenceRecords.filter((record2) => !previousIds.has(record2.id))
-    ) : { run: run3 };
+    ) : response.data;
     output(this, data, () => {
       if (opts.summary) process.stdout.write(`${JSON.stringify(data, null, 2)}
 `);
@@ -12016,7 +12107,10 @@ function cleanupResetJs(experiment) {
 function runAbHarness(args, cwd) {
   const bin = process.env.AB_HARNESS_BIN || "ab-harness";
   return new Promise((resolve2, reject) => {
-    const child = (0, import_node_child_process6.spawn)(bin, args, { cwd, stdio: "inherit" });
+    const child = (0, import_node_child_process6.spawn)(bin, args, {
+      cwd,
+      stdio: isJsonMode() ? ["inherit", 2, "inherit"] : "inherit"
+    });
     child.on("error", reject);
     child.on("exit", (code) => {
       if (code === 0) resolve2();
@@ -13025,29 +13119,36 @@ function printManifestPlan(manifest) {
 var trackingCommand = new Command("tracking").description(
   "Create Apex-first tracking ingestion manifests and QA handoffs"
 );
-trackingCommand.command("inspect").description("Create a local tracking manifest from funnel URLs").argument("<urls...>", "Landing, storefront, checkout, or confirmation URLs").option("--shop-id <id>", "Apex shop ID for snippet generation").option("--endpoint <url>", "Apex Worker endpoint", "https://events.drip-apex.com").option("--out <path>", "Manifest output path", defaultManifestPath()).action((urls, opts) => {
+trackingCommand.command("inspect").description("Create a local tracking manifest from funnel URLs").argument("<urls...>", "Landing, storefront, checkout, or confirmation URLs").option("--shop-id <id>", "Apex shop ID for snippet generation").option("--endpoint <url>", "Apex Worker endpoint", "https://events.drip-apex.com").option("--out <path>", "Manifest output path", defaultManifestPath()).action(function(urls, opts) {
   const manifest = buildManifest(urls, opts);
   const outPath = manifestPath(opts.out);
   writeManifest(outPath, manifest);
-  printSuccess(`Wrote ${outPath}`);
-  if (manifest.recommendedCookieDomain) {
-    console.log(`Recommended cookie domain: ${source_default.cyan(manifest.recommendedCookieDomain)}`);
-  }
-  if (manifest.snippet.html) {
-    console.log(`Head snippet: ${source_default.cyan(manifest.snippet.html)}`);
-  } else {
+  if (!manifest.snippet.html)
     printWarning("No shop ID provided, so the manifest has no install snippet.");
-  }
+  output(this, { path: outPath, manifest }, () => {
+    printSuccess(`Wrote ${outPath}`);
+    if (manifest.recommendedCookieDomain) {
+      console.log(`Recommended cookie domain: ${source_default.cyan(manifest.recommendedCookieDomain)}`);
+    }
+    if (manifest.snippet.html) {
+      console.log(`Head snippet: ${source_default.cyan(manifest.snippet.html)}`);
+    }
+  });
 });
-trackingCommand.command("plan").description("Print the implementation plan from a tracking manifest").argument("[manifest]", "Tracking manifest path", defaultManifestPath()).action((input) => {
-  printManifestPlan(readManifest(manifestPath(input)));
+trackingCommand.command("plan").description("Print the implementation plan from a tracking manifest").argument("[manifest]", "Tracking manifest path", defaultManifestPath()).action(function(input) {
+  const filePath = manifestPath(input);
+  const manifest = readManifest(filePath);
+  output(this, { path: filePath, manifest }, () => printManifestPlan(manifest));
 });
-trackingCommand.command("qa").description("Print the QA checklist for a tracking manifest").argument("[manifest]", "Tracking manifest path", defaultManifestPath()).action((input) => {
-  const manifest = readManifest(manifestPath(input));
-  console.log(source_default.bold("Apex tracking QA"));
-  console.log();
-  manifest.qa.checks.forEach((check, index) => {
-    console.log(`${index + 1}. ${check}`);
+trackingCommand.command("qa").description("Print the QA checklist for a tracking manifest").argument("[manifest]", "Tracking manifest path", defaultManifestPath()).action(function(input) {
+  const filePath = manifestPath(input);
+  const manifest = readManifest(filePath);
+  output(this, { path: filePath, checks: manifest.qa.checks }, () => {
+    console.log(source_default.bold("Apex tracking QA"));
+    console.log();
+    manifest.qa.checks.forEach((check, index) => {
+      console.log(`${index + 1}. ${check}`);
+    });
   });
 });
 trackingCommand.command("verify").description("Verify live tracking events for the current shop").option("--minutes <n>", "Lookback window in minutes", "120").option("--limit <n>", "Recent events to include", "20").option("--experiment <id>", "Filter to one experiment ID").option("--event-type <type>", "Filter to one event type; repeat with comma-separated values").action(async function action33(opts) {
@@ -13066,7 +13167,7 @@ trackingCommand.command("verify").description("Verify live tracking events for t
       res.errorDetails
     );
   }
-  output(this, { verification: res.data }, () => {
+  output(this, res.data, () => {
     const totals = res.data.totals;
     console.log(source_default.bold("Apex tracking verification"));
     console.log();
@@ -13153,8 +13254,9 @@ trackingCommand.command("latency").description("Measure forced-preview versus na
         ].join("/")
       ])
     );
+    console.log("Times in ms. Fewer than 5 measured samples: -.");
     console.log(
-      "Times in ms. Fewer than 5 measured samples: -. Preload/anti-flicker position: under evaluation."
+      "Position: runtime unchanged (inline config decides within tens of ms; forced previews fetch config over the network and are not representative)"
     );
   });
 });
@@ -13370,7 +13472,7 @@ var list2 = new Command("list").alias("ls").description("List goals").option("-n
   if (!res.ok || !res.data) {
     fail(this, res.error ?? "Failed to list goals", classifyStatus(res.status), res.errorDetails);
   }
-  output(this, { goals: res.data.data, pagination: res.data.pagination }, () => {
+  output(this, res.data, () => {
     if (res.data.data.length === 0) {
       console.log(source_default.dim("No goals found."));
       return;
@@ -13412,7 +13514,7 @@ var create2 = new Command("create").description("Create a goal").requiredOption(
       res.errorDetails
     );
   }
-  output(this, { goal: res.data }, () => printGoal(res.data));
+  output(this, res.data, () => printGoal(res.data));
 });
 var update2 = new Command("update").description("Update a goal").argument("<id>", "Goal ID").option("--name <name>", "Goal name").option("--type <type>", "click|pageview|custom|revenue").option("--measurement <measurement>", "conversion|value").option(
   "--value-property <property>",
@@ -13444,7 +13546,7 @@ var update2 = new Command("update").description("Update a goal").argument("<id>"
       res.errorDetails
     );
   }
-  output(this, { goal: res.data }, () => printGoal(res.data));
+  output(this, res.data, () => printGoal(res.data));
 });
 var test = new Command("test").description("Dry run a goal URL pattern against traffic").option(
   "--pattern <regex>",
@@ -13541,9 +13643,8 @@ var suggest = new Command("suggest").description("Suggest goals and funnels from
       classifyStatus(res.status),
       res.errorDetails
     );
-  output(this, res.data, () => printSuggestions(res.data));
-  if (!opts.create) return;
-  for (const goal of res.data.goals) {
+  if (!shouldUseJson(this)) printSuggestions(res.data);
+  for (const goal of opts.create ? res.data.goals : []) {
     console.error(`Would create ${goal.type} goal: ${goal.name}`);
     if (!opts.yes) {
       if (!process.stdin.isTTY || !process.stdout.isTTY)
@@ -13578,6 +13679,7 @@ var suggest = new Command("suggest").description("Suggest goals and funnels from
         created.errorDetails
       );
   }
+  output(this, res.data, () => void 0);
 });
 var goalsCommand = new Command("goals").description("Manage conversion and revenue goals").addCommand(list2).addCommand(create2).addCommand(update2).addCommand(test).addCommand(suggest).addHelpText(
   "after",
@@ -13632,7 +13734,7 @@ var list3 = new Command("list").alias("ls").description("List funnels").action(a
     );
   output(
     this,
-    { funnels: res.data.data },
+    res.data,
     () => printTable(
       ["NAME", "ID", "STEPS"],
       res.data.data.map((f) => [f.name.slice(0, 36), f.id, String(f.steps.length)]),
@@ -13652,7 +13754,7 @@ var create3 = new Command("create").description("Create a funnel").requiredOptio
       classifyStatus(res.status),
       res.errorDetails
     );
-  output(this, { funnel: res.data }, () => printFunnel(res.data));
+  output(this, res.data, () => printFunnel(res.data));
 });
 var update3 = new Command("update").description("Replace a funnel's steps").argument("<id>", "Funnel ID").requiredOption("--steps-file <file>", "JSON array of { label, pattern }").action(async function action41(id, opts) {
   const res = await updateFunnel(requireCredentials(), id, {
@@ -13665,7 +13767,7 @@ var update3 = new Command("update").description("Replace a funnel's steps").argu
       classifyStatus(res.status),
       res.errorDetails
     );
-  output(this, { funnel: res.data }, () => printFunnel(res.data));
+  output(this, res.data, () => printFunnel(res.data));
 });
 var del2 = new Command("delete").description("Delete a funnel").argument("<id>", "Funnel ID").action(async function action42(id) {
   const res = await deleteFunnel(requireCredentials(), id);
@@ -13676,7 +13778,7 @@ var del2 = new Command("delete").description("Delete a funnel").argument("<id>",
       classifyStatus(res.status),
       res.errorDetails
     );
-  output(this, { deleted: true, id }, () => console.log(`Deleted funnel ${id}`));
+  output(this, res.data ?? null, () => console.log(`Deleted funnel ${id}`));
 });
 var run = new Command("run").description("Run funnel analysis").argument("<id>", "Funnel ID").option("--days <n>", "Analysis window", "30").action(async function action43(id, opts) {
   if (!/^[1-9]\d*$/.test(opts.days))
@@ -13689,7 +13791,7 @@ var run = new Command("run").description("Run funnel analysis").argument("<id>",
     fail(this, res.error ?? "Failed to run funnel", classifyStatus(res.status), res.errorDetails);
   output(
     this,
-    { run: res.data },
+    res.data,
     () => printTable(
       ["STEP", "LABEL", "VISITORS", "DROP-OFF"],
       res.data.steps.map((s) => [
@@ -13764,8 +13866,8 @@ async function load2(command) {
   return result.data;
 }
 var list4 = new Command("list").alias("ls").description("List runtime environments and mapped domains").action(async function action45() {
-  const { environments } = await load2(this);
-  output(this, { environments }, () => printEnvironments(environments.items));
+  const body5 = await load2(this);
+  output(this, body5, () => printEnvironments(body5.environments.items));
 });
 var setDomain = new Command("set-domain").description("Map a domain to a runtime environment").argument("<domain>", "Domain to map").requiredOption("--environment <env>", "Environment key").action(async function action46(domain, opts) {
   const normalizedDomain = normalizeEnvironmentDomain(domain);
@@ -13808,11 +13910,7 @@ var setDomain = new Command("set-domain").description("Map a domain to a runtime
     );
   }
   warnOnPrecompileError(this, result.data.precompile);
-  output(
-    this,
-    { environments: result.data.environments, precompile: result.data.precompile },
-    () => printEnvironments(result.data.environments.items)
-  );
+  output(this, result.data, () => printEnvironments(result.data.environments.items));
 });
 var removeDomain = new Command("remove-domain").description("Remove a domain mapping").argument("<domain>", "Domain to remove").action(async function action47(domain) {
   const normalizedDomain = normalizeEnvironmentDomain(domain);
@@ -13843,11 +13941,7 @@ var removeDomain = new Command("remove-domain").description("Remove a domain map
     );
   }
   warnOnPrecompileError(this, result.data.precompile);
-  output(
-    this,
-    { environments: result.data.environments, precompile: result.data.precompile },
-    () => printEnvironments(result.data.environments.items)
-  );
+  output(this, result.data, () => printEnvironments(result.data.environments.items));
 });
 var environmentsCommand = new Command("environments").description("Manage runtime environments and domain mappings").addCommand(list4).addCommand(setDomain).addCommand(removeDomain);
 
@@ -15724,7 +15818,9 @@ async function runDoctor(options = {}) {
         null,
         res.error ?? `Failed to load ${label}`,
         classifyStatus(res.status),
-        res.errorDetails
+        res.errorDetails,
+        // Parallel reads: name this response's envelope explicitly.
+        apiFailureOf(res)
       );
   }
   for (const [label, res] of [
@@ -16085,7 +16181,7 @@ function analyticsSubcommand(name, description, defaultDays) {
         classifyStatus(result.status),
         result.errorDetails
       );
-    output(this, { data: result.data.data }, () => printAnalytics(result.data.data));
+    output(this, result.data, () => printAnalytics(result.data.data));
   });
 }
 function urlsCommand() {
@@ -16922,7 +17018,7 @@ var list6 = new Command("list").alias("ls").description("List flags").option("-n
     fail(this, r.error ?? "Failed to list", classifyStatus(r.status), r.errorDetails);
   output(
     this,
-    { flags: r.data.data, pagination: r.data.pagination },
+    r.data,
     () => printTable(
       ["KEY/NAME", "STATE", "UPDATED"],
       r.data.data.map((x) => [x.key || x.name, x.status, x.updated_at ?? "-"]),
@@ -16934,7 +17030,7 @@ var get5 = new Command("get").description("Get a flag").argument("<id>").action(
   const r = await getManagedDelivery(requireCredentials(), kind, id);
   if (!r.ok || !r.data)
     fail(this, r.error ?? "Failed to get", classifyStatus(r.status), r.errorDetails);
-  output(this, { flag: r.data }, () => detail(r.data));
+  output(this, r.data, () => detail(r.data));
 });
 var status = new Command("status").description("Check whether a flag publication is live at the edge").argument("<id>").action(async function(id) {
   const r = await getFlagStatus(requireCredentials(), id);
@@ -16995,7 +17091,7 @@ function write(name) {
     const r = name === "create" ? await createManagedDelivery(requireCredentials(), kind, b) : await updateManagedDelivery(requireCredentials(), kind, id, b);
     if (!r.ok || !r.data)
       fail(this, r.error ?? `Failed to ${name}`, classifyStatus(r.status), r.errorDetails);
-    output(this, { flag: r.data }, () => detail(r.data));
+    output(this, r.data, () => detail(r.data));
   });
   return c;
 }
@@ -17004,7 +17100,7 @@ function lifecycle(action74) {
     const r = await transitionManagedDelivery(requireCredentials(), kind, id, action74);
     if (!r.ok || !r.data)
       fail(this, r.error ?? `Failed to ${action74}`, classifyStatus(r.status), r.errorDetails);
-    output(this, { flag: r.data }, () => detail(r.data));
+    output(this, r.data, () => detail(r.data));
   });
 }
 var flagsCommand = new Command("flags").description("Manage flags").addCommand(list6).addCommand(get5).addCommand(status).addCommand(write("create")).addCommand(write("update")).addCommand(lifecycle("activate")).addCommand(lifecycle("pause")).addCommand(lifecycle("archive")).addHelpText(
@@ -17121,7 +17217,7 @@ var list7 = new Command("list").alias("ls").description("List backlog items iden
     fail(this, r.error ?? "Failed to list", classifyStatus(r.status), r.errorDetails);
   output(
     this,
-    { backlog: r.data.data, pagination: r.data.pagination },
+    r.data,
     () => printTable(
       ["ID", "NAME", "STATE"],
       r.data.data.map((x) => [
@@ -17138,7 +17234,7 @@ var get6 = new Command("get").description("Get a backlog item identified as apex
   if (!r.ok || !r.data)
     fail(this, r.error ?? "Failed to get", classifyStatus(r.status), r.errorDetails);
   const labels = await fieldLabels(this, r.data);
-  output(this, { backlog_item: r.data }, () => detail2(r.data, labels));
+  output(this, r.data, () => detail2(r.data, labels));
 });
 function write2(action74) {
   const c = new Command(action74).description(
@@ -17165,7 +17261,7 @@ function write2(action74) {
     if (!r.ok || !r.data)
       fail(this, r.error ?? `Failed to ${action74}`, classifyStatus(r.status), r.errorDetails);
     const labels = await fieldLabels(this, r.data);
-    output(this, { backlog_item: r.data }, () => detail2(r.data, labels));
+    output(this, r.data, () => detail2(r.data, labels));
   });
   return c;
 }
@@ -17178,13 +17274,13 @@ var archive = new Command("archive").description("Archive a backlog item with a
   const r = await archiveBacklogInsight(requireCredentials(), id, opts.reason.trim());
   if (!r.ok || !r.data)
     fail(this, r.error ?? "Failed to archive", classifyStatus(r.status), r.errorDetails);
-  output(this, { archived: true, id }, () => console.log(`Archived ${id}`));
+  output(this, r.data, () => console.log(`Archived ${id}`));
 });
 var restore = new Command("restore").description("Restore an archived backlog item").argument("<id>", "backlog item ID").action(async function(id) {
   const r = await restoreBacklogInsight(requireCredentials(), id);
   if (!r.ok || !r.data)
     fail(this, r.error ?? "Failed to restore", classifyStatus(r.status), r.errorDetails);
-  output(this, { restored: true, id }, () => console.log(`Restored ${id}`));
+  output(this, r.data, () => console.log(`Restored ${id}`));
 });
 var remove2 = new Command("delete").description("Delete a backlog item").argument("<id>", "backlog item ID").option("-f, --force", "Skip confirmation").action(async function(id, opts) {
   if (!opts.force) {
@@ -17201,14 +17297,14 @@ var remove2 = new Command("delete").description("Delete a backlog item").argumen
     );
     rl.close();
     if (answer.toLowerCase() !== "y") {
-      console.log("Aborted.");
+      output(this, { aborted: true }, () => console.log("Aborted."));
       return;
     }
   }
   const r = await deleteInsight(requireCredentials(), kind2, id);
   if (!r.ok || !r.data)
     fail(this, r.error ?? "Failed to delete", classifyStatus(r.status), r.errorDetails);
-  output(this, { deleted: true, id }, () => console.log(`Deleted ${id}`));
+  output(this, r.data, () => console.log(`Deleted ${id}`));
 });
 function fieldDetail(field) {
   console.log();
@@ -17235,7 +17331,7 @@ var fieldsList = new Command("list").alias("ls").description("List the shop's id
     fail(this, r.error ?? "Failed to list fields", classifyStatus(r.status), r.errorDetails);
   output(
     this,
-    { fields: r.data.data },
+    r.data,
     () => printTable(
       ["KEY", "LABEL", "TYPE", "REQUIRED", "CLIENT"],
       r.data.data.map((field) => [
@@ -17270,7 +17366,7 @@ var fieldsCreate = new Command("create").description("Add an idea field").requir
   });
   if (!r.ok || !r.data)
     fail(this, r.error ?? "Failed to create field", classifyStatus(r.status), r.errorDetails);
-  output(this, { field: r.data }, () => fieldDetail(r.data));
+  output(this, r.data, () => fieldDetail(r.data));
 });
 var fieldsUpdate = new Command("update").description("Update an idea field").argument("<id>", "field ID").option("--label <text>", "What the field is called").option(
   "--option <value>",
@@ -17293,13 +17389,13 @@ var fieldsUpdate = new Command("update").description("Update an idea field").arg
   const r = await updateBacklogField(requireCredentials(), id, body5);
   if (!r.ok || !r.data)
     fail(this, r.error ?? "Failed to update field", classifyStatus(r.status), r.errorDetails);
-  output(this, { field: r.data }, () => fieldDetail(r.data));
+  output(this, r.data, () => fieldDetail(r.data));
 });
 var fieldsArchive = new Command("archive").description("Archive an idea field; values already on ideas are kept").argument("<id>", "field ID").action(async function(id) {
   const r = await archiveBacklogField(requireCredentials(), id);
   if (!r.ok || !r.data)
     fail(this, r.error ?? "Failed to archive field", classifyStatus(r.status), r.errorDetails);
-  output(this, { field: r.data }, () => fieldDetail(r.data));
+  output(this, r.data, () => fieldDetail(r.data));
 });
 var fields2 = new Command("fields").description("Manage the shop's own idea fields").addCommand(fieldsList).addCommand(fieldsCreate).addCommand(fieldsUpdate).addCommand(fieldsArchive);
 var backlogCommand = new Command("backlog").description("Manage backlog").addCommand(list7).addCommand(get6).addCommand(write2("create")).addCommand(write2("update")).addCommand(archive).addCommand(restore).addCommand(remove2).addCommand(fields2);
@@ -17346,7 +17442,7 @@ var list8 = new Command("list").alias("ls").description("List signals").option("
     fail(this, r.error ?? "Failed to list", classifyStatus(r.status), r.errorDetails);
   output(
     this,
-    { signals: r.data.data, pagination: r.data.pagination },
+    r.data,
     () => printTable(
       ["ID", "NAME", "STATE"],
       r.data.data.map((x) => [
@@ -17362,7 +17458,7 @@ var get7 = new Command("get").description("Get a signal").argument("<id>", "sign
   const r = await getInsight(requireCredentials(), kind3, id);
   if (!r.ok || !r.data)
     fail(this, r.error ?? "Failed to get", classifyStatus(r.status), r.errorDetails);
-  output(this, { signal: r.data }, () => detail3(r.data));
+  output(this, r.data, () => detail3(r.data));
 });
 function write3(action74) {
   const c = new Command(action74).description(
@@ -17382,7 +17478,7 @@ function write3(action74) {
     const r = action74 === "create" ? await createInsight(requireCredentials(), kind3, body5) : await updateInsight(requireCredentials(), kind3, id, body5);
     if (!r.ok || !r.data)
       fail(this, r.error ?? `Failed to ${action74}`, classifyStatus(r.status), r.errorDetails);
-    output(this, { signal: r.data }, () => detail3(r.data));
+    output(this, r.data, () => detail3(r.data));
   });
   return c;
 }
@@ -17390,7 +17486,7 @@ var remove3 = new Command("delete").alias("archive").description("Delete or arch
   const r = await deleteInsight(requireCredentials(), kind3, id);
   if (!r.ok || !r.data)
     fail(this, r.error ?? "Failed to delete", classifyStatus(r.status), r.errorDetails);
-  output(this, { deleted: true, id }, () => console.log(`Deleted ${id}`));
+  output(this, r.data, () => console.log(`Deleted ${id}`));
 });
 var signalsCommand = new Command("signals").description("Manage signals").addCommand(list8).addCommand(get7).addCommand(write3("create")).addCommand(write3("update")).addCommand(remove3);
 
@@ -17439,7 +17535,7 @@ var list9 = new Command("list").alias("ls").description("List personalizations")
     fail(this, r.error ?? "Failed to list", classifyStatus(r.status), r.errorDetails);
   output(
     this,
-    { personalizations: r.data.data, pagination: r.data.pagination },
+    r.data,
     () => printTable(
       ["KEY/NAME", "STATE", "UPDATED"],
       r.data.data.map((x) => [x.key || x.name, x.status, x.updated_at ?? "-"]),
@@ -17451,7 +17547,7 @@ var get8 = new Command("get").description("Get a personalization").argument("<id
   const r = await getManagedDelivery(requireCredentials(), kind4, id);
   if (!r.ok || !r.data)
     fail(this, r.error ?? "Failed to get", classifyStatus(r.status), r.errorDetails);
-  output(this, { personalization: r.data }, () => detail4(r.data));
+  output(this, r.data, () => detail4(r.data));
 });
 function write4(name) {
   const c = new Command(name).description(
@@ -17469,7 +17565,7 @@ function write4(name) {
     const r = name === "create" ? await createManagedDelivery(requireCredentials(), kind4, b) : await updateManagedDelivery(requireCredentials(), kind4, id, b);
     if (!r.ok || !r.data)
       fail(this, r.error ?? `Failed to ${name}`, classifyStatus(r.status), r.errorDetails);
-    output(this, { personalization: r.data }, () => detail4(r.data));
+    output(this, r.data, () => detail4(r.data));
   });
   return c;
 }
@@ -17478,7 +17574,7 @@ function lifecycle2(action74) {
     const r = await transitionManagedDelivery(requireCredentials(), kind4, id, action74);
     if (!r.ok || !r.data)
       fail(this, r.error ?? `Failed to ${action74}`, classifyStatus(r.status), r.errorDetails);
-    output(this, { personalization: r.data }, () => detail4(r.data));
+    output(this, r.data, () => detail4(r.data));
   });
 }
 var personalizationsCommand = new Command("personalizations").description("Manage personalizations").addCommand(list9).addCommand(get8).addCommand(write4("create")).addCommand(write4("update")).addCommand(lifecycle2("activate")).addCommand(lifecycle2("pause")).addCommand(lifecycle2("archive"));
@@ -17528,7 +17624,7 @@ function targetingResourceCommand(kind5) {
       const page = response.data;
       output(
         this,
-        { [kind5.replace("-", "_")]: page.data, pagination: page.pagination },
+        page,
         () => printTable(
           ["NAME", "ID", "UPDATED"],
           page.data.map((item) => [
@@ -17554,7 +17650,7 @@ function targetingResourceCommand(kind5) {
           );
         output(
           this,
-          { exclusion_group: response.data },
+          response.data,
           () => console.log(source_default.bold(response.data.name ?? id))
         );
       })
@@ -17585,13 +17681,7 @@ function targetingResourceCommand(kind5) {
           classifyStatus(response.status),
           response.errorDetails
         );
-      output(
-        this,
-        {
-          [kind5 === "exclusion-groups" ? "exclusion_group" : singular3]: response.data
-        },
-        () => console.log(source_default.green(`${action74}d ${singular3}`))
-      );
+      output(this, response.data, () => console.log(source_default.green(`${action74}d ${singular3}`)));
     });
     root.addCommand(command);
   }
@@ -17616,7 +17706,7 @@ function targetingResourceCommand(kind5) {
         });
         rl.close();
         if (answer.toLowerCase() !== "y") {
-          console.log("Aborted.");
+          output(this, { aborted: true }, () => console.log("Aborted."));
           return;
         }
       }
@@ -17628,7 +17718,7 @@ function targetingResourceCommand(kind5) {
           classifyStatus(response.status),
           response.errorDetails
         );
-      output(this, { deleted: true, id }, () => console.log(source_default.green(`Deleted ${singular3}`)));
+      output(this, response.data ?? null, () => console.log(source_default.green(`Deleted ${singular3}`)));
     })
   );
   if (kind5 === "exclusion-groups")
@@ -17648,11 +17738,7 @@ function targetingResourceCommand(kind5) {
             classifyStatus(response.status),
             response.errorDetails
           );
-        output(
-          this,
-          { exclusion_group: response.data },
-          () => console.log(source_default.green("Replaced members"))
-        );
+        output(this, response.data, () => console.log(source_default.green("Replaced members")));
       })
     );
   return root;
@@ -17668,7 +17754,9 @@ var brandCommand = new Command("brand").description("Print the shop brand contex
   const creds = requireCredentials();
   const res = await getBrandContext(creds);
   if (res.status === 404) {
-    output(this, { brandContext: null, message: NO_PROFILE_MESSAGE }, () => {
+    if (shouldUseJson(this)) process.stderr.write(`${NO_PROFILE_MESSAGE}
+`);
+    output(this, { data: null }, () => {
       console.log(source_default.dim(NO_PROFILE_MESSAGE));
     });
     return;
@@ -17682,7 +17770,7 @@ var brandCommand = new Command("brand").description("Print the shop brand contex
     );
   }
   const brandContext = res.data.data;
-  output(this, { brandContext }, () => {
+  output(this, res.data, () => {
     if (!brandContext.hasProfile) {
       console.log(source_default.dim(NO_PROFILE_MESSAGE));
       return;
@@ -17708,7 +17796,7 @@ var test2 = new Command("test").description("Evaluate experiment URL targeting f
       res.errorDetails
     );
   }
-  output(this, { targeting: res.data }, () => {
+  output(this, res.data, () => {
     console.log(source_default.bold("Apex targeting test"));
     console.log();
     console.log(`URL: ${source_default.cyan(res.data.url)}`);
@@ -17782,7 +17870,7 @@ var create4 = new Command("create").description("Create an Apex SOS ticket").opt
   "--type <type>",
   "full_handover|design|development|qa|config|bug|help (internal types require a DRIP account)",
   "qa"
-).option("--loom <url>", "Loom URL with reproduction or QA context").option("--experiment <id>", "Experiment ID").option("--sub-class <text>", "SOS sub-classification").option("--description <text-or-@file>", "Description text or @path").argument("[description]", "Description text").action(async function action64(descriptionArg, opts) {
+).option("--loom <url>", "Loom URL with reproduction or QA context").option("--experiment <id>", "Experiment ID").option("--backlog-item <id>", "Backlog item ID (internal SOS only)").option("--sub-class <text>", "SOS sub-classification").option("--description <text-or-@file>", "Description text or @path").argument("[description]", "Description text").action(async function action64(descriptionArg, opts) {
   if (!SOS_TYPES.has(opts.type)) {
     fail(
       this,
@@ -17790,12 +17878,16 @@ var create4 = new Command("create").description("Create an Apex SOS ticket").opt
       3
     );
   }
+  if (opts.experiment && opts.backlogItem) {
+    fail(this, "Provide only one of --experiment or --backlog-item", 3);
+  }
   const creds = requireCredentials();
   const description = readText(opts.description) ?? descriptionArg ?? `Apex CLI ${opts.type} SOS request${opts.loom ? ` with Loom evidence: ${opts.loom}` : "."}`;
   const res = await createSos(creds, {
     type: opts.type,
     description,
     experiment_id: opts.experiment ?? null,
+    backlog_item_id: opts.backlogItem ?? null,
     sub_class: opts.subClass ?? null,
     loom_url: opts.loom ?? null
   });
@@ -17820,7 +17912,7 @@ var mine = new Command("mine").description("List SOS tickets created by this API
       res.errorDetails
     );
   }
-  output(this, { tickets: res.data.tickets }, () => {
+  output(this, res.data, () => {
     if (res.data.tickets.length === 0) {
       console.log(source_default.dim("No SOS tickets found for this API key."));
       return;
@@ -17921,7 +18013,7 @@ var list12 = new Command("list").alias("ls").description("List organization shop
     fail(this, r.error ?? "Failed to list shops", classifyStatus(r.status), r.errorDetails);
   output(
     this,
-    { shops: r.data.data },
+    r.data,
     () => printTable(
       ["ID", "NAME", "DOMAIN", "TIER"],
       r.data.data.map((s) => [s.id, s.name ?? "-", s.domain ?? "-", s.tier ?? "-"]),
@@ -18699,7 +18791,7 @@ var discoverCommand = new Command("discover").description("Read back the trackin
         created.errorDetails
       );
     }
-    output(this, { signal: created.data }, () => {
+    output(this, created.data, () => {
       process.stdout.write(`Created dimension ${created.data.id}.
 `);
       process.stdout.write("Next: open Audience > Attributes in the Apex dashboard.\n");
@@ -18851,7 +18943,10 @@ async function confirmArchive(command, shopId, force) {
   return true;
 }
 var archive2 = new Command("archive").description("Archive a shop and disable Apex delivery").argument("<shopId>", "Shop ID").option("-f, --force", "Skip confirmation").action(async function(shopId, opts) {
-  if (!await confirmArchive(this, shopId, opts.force)) return;
+  if (!await confirmArchive(this, shopId, opts.force)) {
+    output(this, { aborted: true }, () => void 0);
+    return;
+  }
   const res = await archiveAdminShop(requireUserCredentials(), shopId);
   if (!res.ok || !res.data)
     fail(
@@ -19095,7 +19190,9 @@ var create6 = new Command("create").requiredOption("--name <name>").requiredOpti
       classifyApiError(res.status, res.errorDetails),
       res.errorDetails
     );
-  output(this, res.data.data, () => {
+  if (shouldUseJson(this))
+    process.stderr.write("Warning: this secret will not be shown again.\n");
+  output(this, res.data, () => {
     console.error("Warning: this secret will not be shown again.");
     console.log(res.data.data.key);
   });
@@ -19392,21 +19489,18 @@ var create7 = new Command("create").description(`Create a webhook. Prints the si
     await createWebhook(requireCredentials(), { url: opts.url, events }),
     "Failed to create webhook"
   );
-  output(
-    this,
-    {
-      webhook: result,
-      secret: result.secret,
-      signatureDoc: SIGNATURE_DOC,
-      warning: "Store this signing secret now. Apex will not show it again."
-    },
-    () => {
-      console.log(source_default.green(`Created webhook ${result.id}`));
-      console.log(source_default.yellow("Store this signing secret now. Apex will not show it again."));
-      console.log(result.secret);
-      console.log(`Signature verification: ${SIGNATURE_DOC}`);
-    }
-  );
+  if (shouldUseJson(this))
+    process.stderr.write(
+      `Store this signing secret now. Apex will not show it again.
+Signature verification: ${SIGNATURE_DOC}
+`
+    );
+  output(this, result, () => {
+    console.log(source_default.green(`Created webhook ${result.id}`));
+    console.log(source_default.yellow("Store this signing secret now. Apex will not show it again."));
+    console.log(result.secret);
+    console.log(`Signature verification: ${SIGNATURE_DOC}`);
+  });
 });
 var remove4 = new Command("delete").alias("rm").description("Delete a webhook").argument("<id>", "Webhook id").action(async function action70(id) {
   requireShopSecretKey(this);
@@ -19465,7 +19559,7 @@ var update5 = new Command("update").description("Update a webhook URL, events, o
     await updateWebhook(requireCredentials(), id, body5),
     "Failed to update webhook"
   );
-  output(this, { webhook: result }, () => printWebhooks([result]));
+  output(this, result, () => printWebhooks([result]));
 });
 var test3 = new Command("test").description("Send a signed test event to a webhook").argument("<id>", "Webhook id").action(async function action73(id) {
   requireShopSecretKey(this);
@@ -19660,10 +19754,7 @@ function readFamily(family, label) {
       fail(this, r.error ?? `Failed to list ${label}`, classifyStatus(r.status), r.errorDetails);
     output(
       this,
-      {
-        [family.replace("-", "_")]: r.data.data,
-        pagination: r.data.pagination
-      },
+      r.data,
       () => printTable(
         ["ID", "NAME", "STATUS"],
         r.data.data.map((x) => [x.id, x.name ?? "-", x.status ?? "-"]),
@@ -19675,11 +19766,7 @@ function readFamily(family, label) {
     const r = await getConfigResource(requireCredentials(), family, id);
     if (!r.ok || !r.data)
       fail(this, r.error ?? "Failed to get resource", classifyStatus(r.status), r.errorDetails);
-    output(
-      this,
-      { [family === "assets" ? "asset" : "landing_page"]: r.data },
-      () => show(r.data)
-    );
+    output(this, r.data, () => show(r.data));
   });
   return { list: list15, get: get10 };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drip-apex/apex-cli",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "license": "MIT",
   "description": "Apex CLI for managing experiments, approved roadmap ideas, and draft workspaces.",
   "private": false,

package/skills/apex-cli/SKILL.md

@@ -11,7 +11,9 @@ Start by asking the installed CLI for its live contract:
 apex schema --json
 ```
 
-Prefer JSON output. When stdout is piped, Apex emits JSON by default.
+Prefer JSON output. When stdout is piped, Apex emits JSON by default. Stdout then
+carries exactly one JSON document; `data` is the API response body as returned
+(lists at `.data.data[]`), and API failures carry the API error body in `error.api`.
 
 ## Zero-Experiment Shop Bootstrap