@drip-apex/apex-cli 0.15.1 → 0.15.2

package/README.md

@@ -227,6 +227,7 @@ command inventory:
 
 | Command | Purpose |
 | --- | --- |
+| `apex admin customers set-category <org-id>` | Change an existing account to internal, demo, dogfood or customer with a platform user key. Requires an 8 to 500 character `--reason` and `--confirm`. |
 | `apex admin customers create` | Create internal, demo or dogfood accounts with a platform user key. Requires `--name`, `--category`, an 8 to 500 character `--reason`, and `--confirm`. |
 | `apex admin shops archive <shopId>` | Archive a shop and disable Apex delivery; use `--force` in non-interactive environments. |
 | `apex admin shops restore <shopId>` | Restore an archived shop while leaving its runtime kill switch unchanged. |
@@ -541,6 +542,7 @@ are created in **Admin, Links**.
 ```sh
 apex admin customers create --name "Demo workspace" --category demo --reason "Workshop demo account" --confirm --json
 apex admin customers create --name "Dogfood store" --category dogfood --domain dogfood.example.com --platform woo --owner owner@example.com --reason "Engineering dogfood account" --confirm
+apex admin customers set-category 22222222-2222-4222-8222-222222222222 --category internal --reason "Engineering dev store" --confirm --json
 ```
 
 `--type` defaults to `company` (`company|agency`); `--plan` defaults to

package/dist/cli.js

@@ -7325,7 +7325,7 @@ async function checkForUpdate(current) {
 // package.json
 var package_default = {
   name: "@drip-apex/apex-cli",
-  version: "0.15.1",
+  version: "0.15.2",
   license: "MIT",
   description: "Apex CLI for managing experiments, approved roadmap ideas, and draft workspaces.",
   private: false,
@@ -8530,6 +8530,7 @@ function applyExperimentFilesystem(creds, id, body5) {
     `/api/v1/experiments/${id}/filesystem/apply`,
     {
       files: body5.files,
+      ...body5.accept_qa_invalidation !== void 0 ? { accept_qa_invalidation: body5.accept_qa_invalidation } : {},
       ...body5.confirmTargetingReplace === true ? { confirmTargetingReplace: true } : {}
     }
   );
@@ -8746,7 +8747,7 @@ function testTargeting(creds, url, opts) {
   if (opts?.status) params.set("status", opts.status);
   return request(creds, "GET", `/api/v1/targeting/test?${params.toString()}`);
 }
-function createSos(creds, body5) {
+function createSos(creds, body5, options = {}) {
   const idempotency_key = body5.idempotency_key ?? (0, import_node_crypto2.createHash)("sha256").update(
     [
       body5.type,
@@ -8754,11 +8755,29 @@ function createSos(creds, body5) {
       body5.description,
       body5.sub_class ?? "",
       body5.loom_url ?? "",
+      ...options.attachmentDigests ?? [],
       String(Math.floor(Date.now() / 36e5))
     ].join("\0")
   ).digest("hex");
   return request(creds, "POST", "/api/v1/sos", { ...body5, idempotency_key });
 }
+function createSosUploadGrants(creds, files) {
+  return request(
+    creds,
+    "POST",
+    "/api/v1/sos/attachment-uploads",
+    { files }
+  );
+}
+async function uploadSosAttachment(signedUrl, contentType, bytes) {
+  const response = await fetch(signedUrl, {
+    method: "PUT",
+    headers: { "Content-Type": contentType },
+    body: bytes,
+    signal: AbortSignal.timeout(12e4)
+  });
+  if (!response.ok) throw new Error(`Attachment upload failed (${response.status})`);
+}
 function listMySos(creds) {
   return request(creds, "GET", "/api/v1/sos/mine");
 }
@@ -8869,6 +8888,9 @@ function createAdminCustomer(creds, body5) {
     body5
   );
 }
+function setAdminCustomerCategory(creds, orgId, body5) {
+  return request(userCredentials(creds), "PATCH", `/api/v1/admin/customers/${orgId}`, body5);
+}
 function getAdminSettings(creds) {
   return request(userCredentials(creds), "GET", "/api/v1/admin/settings");
 }
@@ -10507,14 +10529,31 @@ function printFilesystemPlan(plan2) {
   }
   console.log();
   console.log(`QA invalidated: ${plan2.invalidatesQa ? source_default.yellow("yes") : "no"}`);
-  console.log(`Acknowledgment: ${plan2.invalidatesQa ? "--accept-qa-invalidation" : "none"}`);
+  console.log(
+    `QA approval:   ${!plan2.qaApproval ? "unknown (older server)" : plan2.qaApproval.present ? `present${plan2.qaApproval.approvedAt ? ` (approved ${plan2.qaApproval.approvedAt})` : ""}` : "none"}`
+  );
+  console.log(`Acknowledgment: ${requiredQaAcknowledgment(plan2) ?? "none"}`);
   console.log(`Precompile:     ${plan2.precompileRequired ? "yes" : "no"}`);
 }
+function requiredQaAcknowledgment(plan2) {
+  return "requiredAcknowledgment" in plan2 ? plan2.requiredAcknowledgment ?? null : plan2.invalidatesQa ? "accept-qa-invalidation" : null;
+}
 function blockingIssueSummary(issues) {
   if (!issues?.length) return "Experiment filesystem plan has errors.";
   const remaining = issues.length - 1;
   return `Experiment filesystem plan has errors. ${issues[0].message}${remaining ? ` and ${remaining} more` : ""}`;
 }
+function qaApprovalRefusal(approvedAt, folderArg) {
+  return {
+    message: `Applying these changes revokes the QA approval from ${approvedAt ?? "an unspecified time"}; pass --accept-qa-invalidation to confirm.`,
+    details: {
+      reason: "qa_approval_present",
+      qa_approved_at: approvedAt,
+      required_acknowledgment: "accept-qa-invalidation",
+      retry: `apex experiments apply ${folderArg} --accept-qa-invalidation`
+    }
+  };
+}
 async function getQaPreviewUrls(creds, experimentId) {
   const fallbackDashboardUrl = buildDashboardUrl(
     creds.baseUrl,
@@ -11890,7 +11929,7 @@ var planFilesystem = new Command("plan").description("Plan experiment filesystem
         folder,
         experimentId: session.experimentId,
         plan: res.data,
-        requiredAcknowledgment: res.data.invalidatesQa ? "accept-qa-invalidation" : null
+        requiredAcknowledgment: requiredQaAcknowledgment(res.data)
       },
       () => printFilesystemPlan(res.data)
     );
@@ -11902,7 +11941,10 @@ var planFilesystem = new Command("plan").description("Plan experiment filesystem
 var applyFilesystem = new Command("apply").option(
   "--confirm-targeting-replace",
   "Confirm that attaching a Page may replace URL targeting authored through the API"
-).option("--sync", "Refresh local authored files with the stored server bytes").description("Apply experiment filesystem changes to Apex").argument("[folder]", "Experiment filesystem folder", ".").option("--accept-qa-invalidation", "Acknowledge that applying changes invalidates QA approval").addOption(new Option("-f, --force", "Deprecated alias for --accept-qa-invalidation").hideHelp()).option("--no-asset-upload", "Keep inline and local image references unchanged").action(async function action15(folderArg, opts) {
+).option("--sync", "Refresh local authored files with the stored server bytes").description("Apply experiment filesystem changes to Apex").argument("[folder]", "Experiment filesystem folder", ".").option(
+  "--accept-qa-invalidation",
+  "Confirm an apply that revokes an existing QA approval (required only when the experiment holds one)"
+).addOption(new Option("-f, --force", "Deprecated alias for --accept-qa-invalidation").hideHelp()).option("--no-asset-upload", "Keep inline and local image references unchanged").action(async function action15(folderArg, opts) {
   const creds = requireCredentials();
   try {
     const folder = folderPath(folderArg);
@@ -11949,7 +11991,7 @@ var applyFilesystem = new Command("apply").option(
             why: "Retry with hosted asset upload."
           }
         ] : [],
-        requiredAcknowledgment: planRes.data.invalidatesQa ? "accept-qa-invalidation" : null
+        requiredAcknowledgment: requiredQaAcknowledgment(planRes.data)
       });
     }
     if (planRes.data.changes.length === 0) {
@@ -11966,7 +12008,7 @@ var applyFilesystem = new Command("apply").option(
           synced: synced2,
           dashboardUrl: dashboardUrl2,
           plan: planRes.data,
-          requiredAcknowledgment: planRes.data.invalidatesQa ? "accept-qa-invalidation" : null,
+          requiredAcknowledgment: requiredQaAcknowledgment(planRes.data),
           message: "No changes."
         },
         () => {
@@ -11978,23 +12020,23 @@ var applyFilesystem = new Command("apply").option(
       );
       return;
     }
-    if (planRes.data.invalidatesQa && !opts.force && !opts.acceptQaInvalidation) {
-      const ok = await confirmApply("This apply invalidates QA approval. Continue?");
+    let acceptQaInvalidation = Boolean(opts.force || opts.acceptQaInvalidation);
+    if (requiredQaAcknowledgment(planRes.data) && !acceptQaInvalidation) {
+      const refusal = qaApprovalRefusal(planRes.data.qaApproval?.approvedAt ?? null, folderArg);
+      const ok = await confirmApply(`${refusal.message} Continue?`);
       if (ok === null) {
-        confirmationRequired(
-          this,
-          "Applying these changes invalidates QA approval and requires confirmation.",
-          `apex experiments apply ${folderArg} --accept-qa-invalidation`
-        );
+        fail(this, refusal.message, EXIT_CODES.confirmationRequired, refusal.details);
       }
       if (!ok) {
         output(this, { aborted: true }, () => console.log("Aborted."));
         return;
       }
+      acceptQaInvalidation = true;
     }
     const spinner = process.stderr.isTTY ? await createSpinner("Applying experiment filesystem...") : null;
     let res = await applyExperimentFilesystem(creds, session.experimentId, {
       files,
+      accept_qa_invalidation: acceptQaInvalidation,
       ...opts.confirmTargetingReplace ? { confirmTargetingReplace: true } : {}
     });
     if (!res.ok && res.status === 409 && res.errorDetails?.code === "confirm_targeting_replace_required" && !opts.confirmTargetingReplace) {
@@ -12015,9 +12057,19 @@ var applyFilesystem = new Command("apply").option(
       }
       res = await applyExperimentFilesystem(creds, session.experimentId, {
         files,
+        accept_qa_invalidation: acceptQaInvalidation,
         confirmTargetingReplace: true
       });
     }
+    if (!res.ok && res.status === 409 && res.errorDetails?.code === "qa_acknowledgment_required") {
+      spinner?.stop();
+      const approvedAt = res.errorDetails.qa_approved_at;
+      const refusal = qaApprovalRefusal(
+        typeof approvedAt === "string" ? approvedAt : null,
+        folderArg
+      );
+      fail(this, refusal.message, EXIT_CODES.confirmationRequired, refusal.details);
+    }
     if (!res.ok || !res.data?.applied) {
       spinner?.fail("Failed to apply experiment filesystem");
       fail(this, res.error ?? "Apply failed", classifyStatus(res.status), {
@@ -12056,7 +12108,7 @@ var applyFilesystem = new Command("apply").option(
         experimentId: session.experimentId,
         applied: true,
         plan: planRes.data,
-        requiredAcknowledgment: planRes.data.invalidatesQa ? "accept-qa-invalidation" : null,
+        requiredAcknowledgment: requiredQaAcknowledgment(planRes.data),
         result: res.data,
         synced,
         dashboardUrl,
@@ -13057,6 +13109,25 @@ var pushCommand = new Command("push").description("Push experiment definitions f
 
 // src/commands/preview.ts
 init_source();
+async function signedPreviewFromReadiness(creds, experimentId, variationId, targetUrl) {
+  try {
+    const client = createHttpClient(creds, {
+      onNetworkError: (info) => {
+        throw new Error(info.cause);
+      }
+    });
+    const query = new URLSearchParams({ variation_id: variationId, target_url: targetUrl });
+    const response = await client.request(
+      "GET",
+      `/api/v1/experiments/${encodeURIComponent(experimentId)}/readiness?${query}`,
+      void 0,
+      5e3
+    );
+    return response.ok ? response.data?.data : void 0;
+  } catch {
+    return void 0;
+  }
+}
 var previewCommand = new Command("preview").description(
   "Open QA preview URL for an experiment variation; proxy previews return a QA run receipt"
 ).argument("<id-or-slug>", "Experiment ID or slug").argument("[variation-id]", "Variation ID (defaults to first non-control)").option("--store-url <url>", "Override experiment store_url (target website URL)").option("--proxy", "Create an artifact-injecting proxy preview").option("--ttl <hours>", "Proxy preview lifetime in hours (1-168)").option("--no-open", "Print URL instead of opening browser").action(
@@ -13168,7 +13239,7 @@ var previewCommand = new Command("preview").description(
       variation = exp.variations.find((v) => !v.is_control) ?? exp.variations[0];
     }
     spinner.stop();
-    const storeUrl = opts?.storeUrl ?? exp.preview_target?.url ?? exp.store_url;
+    const storeUrl = opts?.storeUrl ?? (!variation.is_control && variation.redirect_url?.trim() ? variation.redirect_url : null) ?? exp.preview_target?.url ?? exp.store_url;
     if (!storeUrl) {
       fail(
         previewCommand,
@@ -13184,12 +13255,18 @@ var previewCommand = new Command("preview").description(
         'Invalid store URL. Pass an absolute URL like "https://example.com/products/item".'
       );
     }
+    const signed = await signedPreviewFromReadiness(creds, exp.id, variation.id, storeUrl);
+    const selectedPreviewUrl = signed?.signed_preview_url ?? previewUrl.toString();
+    const warning = signed?.signed_preview_url ? null : "Test images may not load on this unsigned link. Open Apex \u2192 QA for a signed link.";
+    if (warning) console.error(warning);
     output(
       previewCommand,
       {
         experimentId: exp.id,
         variationId: variation.id,
-        previewUrl: previewUrl.toString(),
+        previewUrl: selectedPreviewUrl,
+        expiresAt: signed?.signed_preview_expires_at ?? null,
+        ...warning ? { warning } : {},
         ...!opts?.storeUrl && exp.preview_target ? { previewTarget: exp.preview_target } : {}
       },
       () => {
@@ -13205,14 +13282,16 @@ var previewCommand = new Command("preview").description(
           }
         }
         console.log();
-        console.log(source_default.cyan(previewUrl.toString()));
+        console.log(source_default.cyan(selectedPreviewUrl));
+        if (signed?.signed_preview_expires_at)
+          console.log(`Valid until ${signed.signed_preview_expires_at}.`);
         console.log();
       }
     );
     if (opts?.open !== false && !shouldUseJson(previewCommand)) {
       try {
         const open3 = (await Promise.resolve().then(() => (init_open(), open_exports))).default;
-        await open3(previewUrl.toString());
+        await open3(selectedPreviewUrl);
         console.log(source_default.dim("Opened in browser."));
       } catch {
         console.log(source_default.dim("Copy the URL above to preview."));
@@ -14199,9 +14278,7 @@ function commonCookieDomain(hostnames) {
   const suffix = suffixes[0];
   return suffix && suffixes.every((candidate) => candidate === suffix) ? `.${suffix}` : null;
 }
-function defaultManifestPath() {
-  return import_node_path11.default.resolve(process.cwd(), ".apex", "tracking-manifest.json");
-}
+var DEFAULT_MANIFEST_PATH = ".apex/tracking-manifest.json";
 function readManifest(filePath) {
   if (!import_node_fs13.default.existsSync(filePath)) throw new Error(`Manifest not found: ${filePath}`);
   const parsed = JSON.parse(import_node_fs13.default.readFileSync(filePath, "utf8"));
@@ -14277,7 +14354,7 @@ function buildManifest(urlArgs, opts) {
   };
 }
 function manifestPath(input) {
-  return import_node_path11.default.resolve(process.cwd(), input ?? defaultManifestPath());
+  return import_node_path11.default.resolve(process.cwd(), input ?? DEFAULT_MANIFEST_PATH);
 }
 function printManifestPlan(manifest) {
   console.log(source_default.bold("Apex tracking ingestion plan"));
@@ -14305,7 +14382,11 @@ function printManifestPlan(manifest) {
 var trackingCommand = new Command("tracking").description(
   "Create Apex-first tracking ingestion manifests and QA handoffs"
 );
-trackingCommand.command("inspect").description("Create a local tracking manifest from funnel URLs").argument("<urls...>", "Landing, storefront, checkout, or confirmation URLs").option("--shop-id <id>", "Apex shop ID for snippet generation").option("--endpoint <url>", "Apex Worker endpoint", "https://events.drip-apex.com").option("--out <path>", "Manifest output path", defaultManifestPath()).action(function(urls, opts) {
+trackingCommand.command("inspect").description("Create a local tracking manifest from funnel URLs").argument("<urls...>", "Landing, storefront, checkout, or confirmation URLs").option("--shop-id <id>", "Apex shop ID for snippet generation").option("--endpoint <url>", "Apex Worker endpoint", "https://events.drip-apex.com").option(
+  "--out <path>",
+  "Manifest output path, relative to the current directory",
+  DEFAULT_MANIFEST_PATH
+).action(function(urls, opts) {
   const manifest = buildManifest(urls, opts);
   const outPath = manifestPath(opts.out);
   writeManifest(outPath, manifest);
@@ -14321,12 +14402,20 @@ trackingCommand.command("inspect").description("Create a local tracking manifest
     }
   });
 });
-trackingCommand.command("plan").description("Print the implementation plan from a tracking manifest").argument("[manifest]", "Tracking manifest path", defaultManifestPath()).action(function(input) {
+trackingCommand.command("plan").description("Print the implementation plan from a tracking manifest").argument(
+  "[manifest]",
+  "Tracking manifest path, relative to the current directory",
+  DEFAULT_MANIFEST_PATH
+).action(function(input) {
   const filePath = manifestPath(input);
   const manifest = readManifest(filePath);
   output(this, { path: filePath, manifest }, () => printManifestPlan(manifest));
 });
-trackingCommand.command("qa").description("Print the QA checklist for a tracking manifest").argument("[manifest]", "Tracking manifest path", defaultManifestPath()).action(function(input) {
+trackingCommand.command("qa").description("Print the QA checklist for a tracking manifest").argument(
+  "[manifest]",
+  "Tracking manifest path, relative to the current directory",
+  DEFAULT_MANIFEST_PATH
+).action(function(input) {
   const filePath = manifestPath(input);
   const manifest = readManifest(filePath);
   output(this, { path: filePath, checks: manifest.qa.checks }, () => {
@@ -18540,16 +18629,21 @@ async function checkServedConfig(configUrl, workerBaseUrl, workerBaseSource) {
     message: "Worker served a recognized config document for this shop."
   };
 }
-var installCommand = new Command("install").description("Check Apex storefront installation").command("check").description("Verify snippet, served config, and recent tracking for the current shop").option("--url <url>", "Check one explicit bound storefront URL").option("--shop-id <id>", "Apex shop ID to verify (falls back to DRIP_SHOP_ID)").option(
+var installCommand = new Command("install").description("Check Apex storefront installation").command("check").description(
+  "Verify snippet, served config, and recent tracking using --shop-id, the selected shop, or DRIP_SHOP_ID"
+).option("--url <url>", "Check one explicit bound storefront URL").option(
+  "--shop-id <id>",
+  "Apex shop ID to verify (falls back to --shop/apex use, then DRIP_SHOP_ID)"
+).option(
   "--worker-url <url>",
   "Apex Worker base URL that serves /config (defaults to the URL in the served snippet, then DRIP_WORKER_URL, then the production worker)"
 ).option("--environment <key>", "Environment key to request from the worker", "production").action(async function action65(opts) {
   const creds = requireCredentials();
-  const shopId = opts.shopId?.trim() || process.env.DRIP_SHOP_ID?.trim() || null;
+  const shopId = opts.shopId?.trim() || resolveContext(creds).shopId?.trim() || process.env.DRIP_SHOP_ID?.trim() || null;
   if (!shopId)
     fail(
       this,
-      "Shop ID is required: pass --shop-id <id> or set DRIP_SHOP_ID",
+      "Shop ID is required: pass --shop-id <id>, select a shop with --shop <id> or apex use, or set DRIP_SHOP_ID",
       EXIT_CODES.validation,
       { field: "shop-id" }
     );
@@ -19589,6 +19683,7 @@ var test2 = new Command("test").description("Evaluate experiment URL targeting f
 var targetingCommand = new Command("targeting").description("Test experiment targeting").addCommand(test2);
 
 // src/commands/sos.ts
+var import_node_crypto7 = require("node:crypto");
 init_source();
 var import_node_fs24 = __toESM(require("node:fs"));
 var import_node_path21 = __toESM(require("node:path"));
@@ -19630,6 +19725,11 @@ var create4 = new Command("create").description("Create an Apex SOS ticket").opt
   "--type <type>",
   "full_handover|design|development|qa|config|bug|help (internal types require a DRIP account)",
   "qa"
+).option(
+  "--attach <file>",
+  "Attach an image or video (repeatable, maximum 5)",
+  (file, files) => [...files, file],
+  []
 ).option("--loom <url>", "Loom URL with reproduction or QA context").option("--experiment <id>", "Experiment ID").option("--backlog-item <id>", "Backlog item ID (internal SOS only)").option("--sub-class <text>", "SOS sub-classification").option("--description <text-or-@file>", "Description text or @path").argument("[description]", "Description text").action(async function action68(descriptionArg, opts) {
   if (!SOS_TYPES.has(opts.type)) {
     fail(
@@ -19641,16 +19741,76 @@ var create4 = new Command("create").description("Create an Apex SOS ticket").opt
   if (opts.experiment && opts.backlogItem) {
     fail(this, "Provide only one of --experiment or --backlog-item", 3);
   }
+  const mediaTypes = {
+    ".png": "image/png",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".webp": "image/webp",
+    ".gif": "image/gif",
+    ".mp4": "video/mp4",
+    ".webm": "video/webm",
+    ".mov": "video/quicktime"
+  };
+  if (opts.attach.length > 5) fail(this, "Attach no more than 5 files", 3);
+  const files = opts.attach.map((file) => {
+    const filename = import_node_path21.default.basename(file);
+    const content_type = mediaTypes[import_node_path21.default.extname(file).toLowerCase()];
+    if (!content_type) fail(this, "Unsupported attachment type", 3);
+    let size;
+    try {
+      size = import_node_fs24.default.statSync(file).size;
+    } catch {
+      fail(this, `Attachment not found: ${file}`, 3);
+    }
+    const cap = (content_type.startsWith("video/") ? 50 : 10) * 1024 * 1024;
+    if (size <= 0 || size > cap) fail(this, "Attachment exceeds its size limit or is empty", 3);
+    let bytes;
+    try {
+      bytes = import_node_fs24.default.readFileSync(file);
+    } catch {
+      fail(this, `Attachment not found: ${file}`, 3);
+    }
+    return { filename, content_type, size, bytes };
+  });
   const creds = requireCredentials();
+  const attachmentPaths = [];
+  const attachmentDigests = [];
+  if (files.length) {
+    const grants = await createSosUploadGrants(
+      creds,
+      files.map(({ filename, content_type, size }) => ({ filename, content_type, size }))
+    );
+    if (!grants.ok || !grants.data)
+      fail(
+        this,
+        grants.error ?? "Failed to get upload grants",
+        classifyStatus(grants.status),
+        grants.errorDetails
+      );
+    if (grants.data.data.uploads.length !== files.length)
+      fail(this, "Invalid upload grant response", 1);
+    for (const [index, file] of files.entries()) {
+      const grant = grants.data.data.uploads[index];
+      const bytes = file.bytes;
+      await uploadSosAttachment(grant.signed_url, file.content_type, bytes);
+      attachmentPaths.push(grant.path);
+      attachmentDigests.push((0, import_node_crypto7.createHash)("sha256").update(bytes).digest("hex"));
+    }
+  }
   const description = readText(opts.description) ?? descriptionArg ?? `Apex CLI ${opts.type} SOS request${opts.loom ? ` with Loom evidence: ${opts.loom}` : "."}`;
-  const res = await createSos(creds, {
-    type: opts.type,
-    description,
-    experiment_id: opts.experiment ?? null,
-    backlog_item_id: opts.backlogItem ?? null,
-    sub_class: opts.subClass ?? null,
-    loom_url: opts.loom ?? null
-  });
+  const res = await createSos(
+    creds,
+    {
+      ...attachmentPaths.length ? { attachment_paths: attachmentPaths } : {},
+      type: opts.type,
+      description,
+      experiment_id: opts.experiment ?? null,
+      backlog_item_id: opts.backlogItem ?? null,
+      sub_class: opts.subClass ?? null,
+      loom_url: opts.loom ?? null
+    },
+    { attachmentDigests }
+  );
   if (!res.ok || !res.data) {
     fail(
       this,
@@ -19955,6 +20115,7 @@ function optionSchema(option) {
     description: option.description,
     required: option.required,
     optional: option.optional,
+    mandatory: Boolean(option.mandatory),
     variadic: option.variadic,
     ...option.defaultValue === void 0 ? {} : { defaultValue: option.defaultValue }
   };
@@ -19977,8 +20138,16 @@ function commandSchema(command) {
   };
 }
 function createSchemaCommand(program3) {
-  return new Command("schema").description("Print the current Apex CLI command and flag schema").option("--json", "Print JSON schema").action(function action78() {
-    const schema = commandSchema(program3);
+  return new Command("schema").description("Print the current Apex CLI command, flag, and mandatory-option schema").option("--json", "Print JSON schema").action(function action78() {
+    const schema = {
+      schemaVersion: 2,
+      contract: {
+        optionValueArity: "Options' required and optional fields describe whether the option's value is required or optional when the flag is given.",
+        mandatoryOptions: "An option's mandatory field is true only when the flag itself must be passed.",
+        requiredArguments: "An argument's required field means the positional is mandatory."
+      },
+      ...commandSchema(program3)
+    };
     output(this, schema, () => {
       process.stdout.write(`${JSON.stringify(schema, null, 2)}
 `);
@@ -20619,6 +20788,7 @@ var skillsCommand = new Command("skills").description("Print or install the Apex
 });
 
 // src/commands/admin.ts
+var uuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function switchValue(value) {
   if (value === "on") return true;
   if (value === "off") return false;
@@ -20745,7 +20915,6 @@ var create6 = new Command("create").description("Create an internal, demo or dog
     fail(this, "--name must be 1 to 60 characters", 3);
   if (opts.reason.trim().length < 8 || opts.reason.trim().length > 500)
     fail(this, "--reason must be 8 to 500 characters", 3);
-  const uuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
   if (opts.claimShop && !uuid.test(opts.claimShop)) fail(this, "--claim-shop must be a UUID", 3);
   if (opts.claimShop && (opts.domain || opts.platform))
     fail(this, "Use --claim-shop or --domain with --platform", 3);
@@ -20831,7 +21000,39 @@ var create6 = new Command("create").description("Create an internal, demo or dog
       );
   });
 });
-var customers = new Command("customers").description("Create engineering accounts; customer accounts use Admin, Links").addCommand(create6);
+var setCategory = new Command("set-category").description("Change an existing account's category with an audit reason").argument("<org-id>", "Organization UUID").requiredOption("--category <category>", "internal, demo, dogfood or customer").requiredOption("--reason <text>", "Audit reason, 8 to 500 characters").option("--confirm", "Confirm category change").option("--json", "Output JSON").action(async function(orgId, opts) {
+  if (!uuid.test(orgId)) fail(this, "<org-id> must be a UUID", 3);
+  if (!["internal", "demo", "dogfood", "customer"].includes(opts.category))
+    fail(this, "--category must be internal, demo, dogfood or customer", 3);
+  const reason2 = opts.reason.trim();
+  if (reason2.length < 8 || reason2.length > 500)
+    fail(this, "--reason must be 8 to 500 characters", 3);
+  if (!opts.confirm) {
+    const quote = (value) => `'${value.replaceAll("'", "'\\''")}'`;
+    confirmationRequired(
+      this,
+      "--confirm is required to change an account category",
+      `apex admin customers set-category ${orgId} --category ${quote(opts.category)} --reason ${quote(reason2)} --confirm`
+    );
+  }
+  const body5 = {
+    category: opts.category,
+    reason: reason2
+  };
+  const res = await setAdminCustomerCategory(requireUserCredentials(), orgId, body5);
+  if (!res.ok || !res.data)
+    fail(
+      this,
+      res.error ?? "Failed to change account category",
+      classifyStatus(res.status),
+      res.errorDetails
+    );
+  output(this, res.data, () => {
+    const result = res.data.data;
+    printTable(["RESULT"], [[`Customer ${result.customerId} moved to ${result.category}`]]);
+  });
+});
+var customers = new Command("customers").description("Create engineering accounts and manage existing account categories").addCommand(create6).addCommand(setCategory);
 var adminCommand = new Command("admin").description("Operate allowlisted platform controls").addCommand(settingsGet).addCommand(quarantine).addCommand(shops).addCommand(customers);
 
 // src/commands/membership.ts
@@ -21568,7 +21769,7 @@ var import_node_fs29 = __toESM(require("node:fs"));
 var import_node_path26 = __toESM(require("node:path"));
 
 // src/commands/landing-pages.ts
-var import_node_crypto7 = __toESM(require("node:crypto"));
+var import_node_crypto8 = __toESM(require("node:crypto"));
 var import_node_fs28 = __toESM(require("node:fs"));
 var import_node_path25 = __toESM(require("node:path"));
 function apiFailure(command, response, fallback2) {
@@ -21582,7 +21783,7 @@ function apiFailure(command, response, fallback2) {
   }
 }
 function sha256(body5) {
-  return import_node_crypto7.default.createHash("sha256").update(body5).digest("hex");
+  return import_node_crypto8.default.createHash("sha256").update(body5).digest("hex");
 }
 function markerPath(folder) {
   return import_node_path25.default.join(folder, LANDING_PAGE_CHECKOUT_MARKER);
@@ -21910,7 +22111,10 @@ async function pullCheckout(command, creds, id, folder, force = false) {
     notes: listing.data.notes ?? []
   };
 }
-var create9 = new Command("create").description("Create a landing page to build outside Apex").requiredOption("--name <name>", "Page name").option("--slug <slug>", "URL slug (default: from the name)").option("--idea <key>", "Idea key or id the page is built for").option("--out <folder>", "Also pull the new page into this folder").action(async function(opts) {
+var create9 = new Command("create").description("Create a landing page to build outside Apex").requiredOption("--name <name>", "Page name").option(
+  "--slug <slug>",
+  "URL slug (default: from the name; -2, -3 added only if the shop already uses it)"
+).option("--idea <key>", "Idea key or id the page is built for").option("--out <folder>", "Also pull the new page into this folder").action(async function(opts) {
   const creds = requireCredentials();
   const created = await landingPages(creds).create({
     name: opts.name,
@@ -22405,6 +22609,35 @@ program2.hook("preAction", (_thisCommand, actionCommand) => {
 process.on("beforeExit", () => {
   flushFallbackEnvelope();
 });
-maybeCheckForUpdate().then(() => program2.parseAsync(process.argv)).then(async () => {
+function isExplicitJsonVersionRequest(args) {
+  let hasJson = false;
+  let hasVersion = false;
+  for (let index = 0; index < args.length; index++) {
+    const arg = args[index];
+    if (arg === "--") break;
+    if (arg === "--json") {
+      hasJson = true;
+    } else if (arg === "--version" || arg === "-V") {
+      hasVersion = true;
+    } else if (arg === "--org" || arg === "--shop") {
+      const value = args[++index];
+      if (!value || value.startsWith("-")) return false;
+    } else if (arg.startsWith("--org=") || arg.startsWith("--shop=")) {
+      const value = arg.slice(arg.indexOf("=") + 1);
+      if (!value || value.startsWith("-")) return false;
+    } else {
+      return false;
+    }
+  }
+  return hasJson && hasVersion;
+}
+var explicitJsonVersionRequest = isExplicitJsonVersionRequest(process.argv.slice(2));
+maybeCheckForUpdate().then(() => {
+  if (explicitJsonVersionRequest) {
+    writeEnvelope({ name: "@drip-apex/apex-cli", version: CLI_VERSION }, "version");
+    return;
+  }
+  return program2.parseAsync(process.argv);
+}).then(async () => {
   await finishInvocation({ exitCode: process.exitCode ?? 0 });
 }).catch((err) => handleCliError(err, program2));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drip-apex/apex-cli",
-  "version": "0.15.1",
+  "version": "0.15.2",
   "license": "MIT",
   "description": "Apex CLI for managing experiments, approved roadmap ideas, and draft workspaces.",
   "private": false,