@solidnumber/cli 2.16.0 → 2.18.0

package/dist/lib/json-arg.js

@@ -0,0 +1,71 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseJsonArg = parseJsonArg;
+/**
+ * `--flag '{"a":1}'` or `--flag @payload.json` → a parsed value.
+ *
+ * Extracted from commands/verbs.ts when `solid forms quiz/walk --branching`
+ * needed the same contract. One implementation, so `@file` support and the
+ * error wording cannot drift between the two commands an AI is most likely
+ * to script against.
+ */
+const fs = __importStar(require("fs"));
+const chalk_1 = __importDefault(require("chalk"));
+function parseJsonArg(name, raw) {
+    if (!raw)
+        return undefined;
+    if (raw.startsWith('@')) {
+        const path = raw.slice(1);
+        try {
+            return JSON.parse(fs.readFileSync(path, 'utf-8'));
+        }
+        catch (e) {
+            console.error(chalk_1.default.red(`failed to read --${name} from ${path}: ${e.message}`));
+            process.exit(1);
+        }
+    }
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        console.error(chalk_1.default.red(`--${name} must be valid JSON`));
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=json-arg.js.map

package/dist/lib/json-arg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-arg.js","sourceRoot":"","sources":["../../src/lib/json-arg.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,oCAiBC;AA7BD;;;;;;;GAOG;AACH,uCAAyB;AAEzB,kDAA0B;AAE1B,SAAgB,YAAY,CAAC,IAAY,EAAE,GAAuB;IAChE,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,oBAAoB,IAAI,SAAS,IAAI,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,KAAK,IAAI,qBAAqB,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solidnumber/cli",
-  "version": "2.16.0",
+  "version": "2.18.0",
   "description": "Be There — the system that answers, books, and takes payment when you can't. CLI + SDK + MCP tools for SMBs, agencies, and AI agents. solid clone plumber → working business in 30 seconds.",
   "main": "dist/index.js",
   "type": "commonjs",
@@ -44,8 +44,10 @@
     "prepublish:check": "bash scripts/prepublish.sh",
     "test:tarball": "bash scripts/test-tarball.sh",
     "verify:deps": "node scripts/verify-runtime-deps.mjs",
-    "prepublishOnly": "npm run build && npm test && npm run test:contracts && npm run test:security && npm run audit:prod && npm run verify:deps",
-    "postinstall": "node -e \"try{if(!process.env.CI)console.log('\\n  Solid# CLI installed. Get started:  solid setup\\n')}catch(e){}\""
+    "prepublishOnly": "npm run build && npm test && npm run test:contracts && npm run test:security && npm run audit:prod && npm run verify:deps && npm run check:counts",
+    "postinstall": "node -e \"try{if(!process.env.CI)console.log('\\n  Solid# CLI installed. Get started:  solid setup\\n')}catch(e){}\"",
+    "sync:counts": "ts-node scripts/sync-counts.ts",
+    "check:counts": "ts-node scripts/sync-counts.ts --check"
   },
   "keywords": [
     "cli",

package/platform-docs/ai.txt

@@ -77,14 +77,14 @@ Website-Pages: 151 pages on solidnumber.com (51 industry + 65 feature + 32 blog
 # AI INFRASTRUCTURE (WHAT MAKES THIS REAL)
 # ============================================
 
-# SmartRouter — AI Model Selection Engine (41,000+ lines)
+# SmartRouter — AI Model Selection Engine (1,586 lines)
 # Examines each task and selects the optimal model based on:
 # complexity, capabilities, cost, latency, and customer preference.
 # Supports 8+ providers, 21 task types, 4 routing tiers.
 # Automatic failover if a provider has an outage.
 # Details: https://solidnumber.com/research/smartrouter
 
-# CognitiveLimiter — AI Cost Control (50,000+ lines)
+# CognitiveLimiter — AI Cost Control (2,133 lines)
 # 9 safety layers. Real-time Redis tracking of tokens, voice minutes,
 # SMS, and storage. Spike detection. Per-company budgets with alerts
 # at 50%, 80%, 90%, 100%. Fail-closed design — if Redis is down,

package/platform-docs/llms.txt

@@ -44,8 +44,8 @@ Every local business needs the same 8 things: website, CRM, payments, scheduling
 
 ## AI Infrastructure (What Makes This Real)
 
-- **SmartRouter** (41,000+ lines): Selects the optimal AI model per task across 8 providers and 21 task types. 4 routing tiers. Automatic failover. Balances cost, speed, and quality dynamically.
-- **CognitiveLimiter** (50,000+ lines): 9 safety layers. Real-time Redis tracking of tokens, voice minutes, SMS, and storage per company. Spike detection prevents runaway costs. Alerts at 50%, 80%, 90%, 100%.
+- **SmartRouter** (1,586 lines): Selects the optimal AI model per task across 8 providers and 21 task types. 4 routing tiers. Automatic failover. Balances cost, speed, and quality dynamically.
+- **CognitiveLimiter** (2,133 lines): 9 safety layers. Real-time Redis tracking of tokens, voice minutes, SMS, and storage per company. Spike detection prevents runaway costs. Alerts at 50%, 80%, 90%, 100%.
 - **PromptGuard**: 5 security tiers. 41 injection patterns. Canary token detection. Output scanning. Prevents prompt injection and data exfiltration.
 - **Row-Level Security**: Database-level tenant isolation on all 446 tenant-scoped tables (2026-04-20 audit; ~20 newer tables pending re-audit). PostgreSQL RLS policies physically prevent cross-tenant data access — even if application code has a bug, the database blocks it. Two-layer defense: app-layer filtering + database-level enforcement. Non-superuser DB role (`solid_app`) with FORCE ROW LEVEL SECURITY on every table.
 - **Model-Agnostic**: Customers choose their AI provider — OpenAI, Anthropic, Google, Meta, Mistral, Cohere, or local models. SmartRouter handles routing. No vendor lock-in.
@@ -129,17 +129,16 @@ Developer funnel: Free signup → connect the curated connector (OAuth) → mana
 
 <!-- CLI:AUTO:BEGIN -->
 
-- [npm](https://www.npmjs.com/package/@solidnumber/cli): `@solidnumber/cli` v2.16.0
+- [npm](https://www.npmjs.com/package/@solidnumber/cli): `@solidnumber/cli` v2.18.0
 - [GitHub](https://github.com/Adam-Camp-King/solid-cli): Open-source TypeScript CLI (BUSL-1.1)
 - [CLI Documentation](https://solidnumber.com/docs/cli): Full command reference
 - **Machine-readable verb tree**: `solid schema verbs --json` — every command, every flag, every description, in one JSON dump. Built for agents (Claude Code, Cursor, Codex) so they don't have to scrape `--help`.
-- 127 top-level command groups, 736 subcommands.
+- 128 top-level command groups, 746 subcommands.
 - Core workflow: `solid auth login` → `solid company create` → `solid clone <industry>` → `solid pull` → edit → `solid push` → `solid pages publish` → `solid billing checkout-link`.
 
 **Top-level commands (no subcommands):**
 
 - `solid ai` — Launch Claude Code / Cursor / Codex with this company's context pre-loaded (stupid easy)
-- `solid apply` — Reconcile the company to a declarative manifest (create/update/prune)
 - `solid clone` — Scaffold a business from an industry template
 - `solid contact-map` — Relationship graph for a contact: company, peers, deals, activities
 - `solid context` — One-shot AI context dump (company state, locks, drafts, tools) — T11 agency mode
@@ -188,6 +187,7 @@ Developer funnel: Free signup → connect the curated connector (OAuth) → mana
 - **analytics** (2 subcommands) — Business analytics and insights: `dashboard, mcp-traffic`
 - **ant** (7 subcommands) — Ant Farm — code import system: `analyze, execute, get, import, import-url, list, rollback`
 - **api** (3 subcommands) — API explorer — browse and test Solid# API endpoints: `call, docs, list`
+- **apply** (4 subcommands) — Reconcile the company to a declarative manifest (create/update/prune); drift, rollback, history, export: `drift, export, history, rollback`
 - **ask-owner** (1 subcommands) — Typed escalation — agent asks, owner answers, agent resumes: `check`
 - **audit** (11 subcommands) — Activity log — who changed what, when: `a11y, compliance-report, export, gdpr-consent, gdpr-consent-set, gdpr-delete, gdpr-export, log, mobile, perf, suspicious`
 - **auth** (6 subcommands) — Authentication management: `config, login, logout, refresh, status, token`
@@ -216,7 +216,7 @@ Developer funnel: Free signup → connect the curated connector (OAuth) → mana
 - **emails** (6 subcommands) — Email — addresses, templates, send transactional messages: `addresses, send, send-invoice, send-payment-link, template-vars, templates`
 - **embed** (3 subcommands) — Embed snippets — wire any website to Solid# (chat, form, paylink): `chat, form, paylink`
 - **flow** (11 subcommands) — Commerce flows — payment flows and subscriptions: `activate, agents, archive, clone, create, get, list, metrics, pause, test, update`
-- **forms** (23 subcommands) — Forms & surveys — CRUD, AI generate, export CSV/Excel/PDF: `analyze, build, create, delete, describe, embed, export, followup, generate, get, link, list, moments, optimize, pause, publish, responses, resume, reviews, status, update, vocabulary, walk`
+- **forms** (24 subcommands) — Forms & surveys — CRUD, AI generate, export CSV/Excel/PDF: `analyze, build, create, delete, describe, embed, export, followup, generate, get, link, list, moments, optimize, pause, publish, quiz, responses, resume, reviews, status, update, vocabulary, walk`
 - **history** (2 subcommands) — View version history for pages and KB entries: `entity, recent`
 - **inbound** (9 subcommands) — Inbound webhooks — receive events from Zapier/Stripe/external systems and fire chains: `create, delete, event, events, get, list, replay, rotate, update`
 - **inbox** (7 subcommands) — Unified inbox — messages, email, and campaigns: `campaigns, email, list, mark-read, reply, send, stats`
@@ -234,11 +234,12 @@ Developer funnel: Free signup → connect the curated connector (OAuth) → mana
 - **nest** (5 subcommands) — Nest — drop anything, we make it real. (paste/url/file → live page): `from-file, from-url, list, outcomes, promote`
 - **notes** (5 subcommands) — Work notes — cross-session, cross-model AI memory: `add, archive, context, list, search`
 - **notifications** (2 subcommands) — View and manage notifications: `list, read-all`
+- **offer** (1 subcommands) — Read a deal — line items, tax, fees, disclosure, total (cart, order or link): `get`
 - **onboarding** (12 subcommands) — Programmatic CLIENT onboarding (email, domain, phone-buy, payment, website): `complete, discover, email, health, help-request, payment, phone, provision, session, set-business, status, website`
-- **orders** (11 subcommands) — Order lifecycle (list, create, confirm, fulfill, cancel, refund, import, watch): `allocate, cancel, confirm, create, fulfill, get, import, list, quick-sale, refund, watch`
+- **orders** (14 subcommands) — Order lifecycle + progress (list, create, confirm, progress, milestone, fulfill, cancel, refund, import, watch): `allocate, cancel, confirm, create, fulfill, get, import, list, milestone, milestones, progress, quick-sale, refund, watch`
 - **pages** (12 subcommands) — Website page management: `coming-soon, create, delete, generate, get, list, publish, regenerate, site-generate, slug, unpublish, update`
 - **payment** (7 subcommands) — Payment processing & Level 3 interchange optimization: `analytics, connect, l3, mcc, products, status, terminal`
-- **payment-links** (6 subcommands) — Pay-by-link — create, text-to-pay, mark paid: `create, delete, get, list, mark-paid, text2pay`
+- **payment-links** (7 subcommands) — Pay-by-link — create, text-to-pay, mark paid, and what this merchant can capture with: `capture-methods, create, delete, get, list, mark-paid, text2pay`
 - **predict** (7 subcommands) — AI predictions — deal close, no-show, payment-late, Devon-discovered targets: `approve, deal-close, discover, no-show, payment-late, reject, targets`
 - **products** (8 subcommands) — Product catalog (CRUD, pricing, components): `catalog, components, create, delete, get, list, pricing, update`
 - **qchain** (4 subcommands) — Q-Chain substrate verification — for external auditors (insurance, SOC 2, compliance): `audit-key, export, pubkey, verify`
@@ -262,14 +263,14 @@ Developer funnel: Free signup → connect the curated connector (OAuth) → mana
 - **transaction** (6 subcommands) — Open / append / commit / abort CLI transactions for atomic batches: `abort, append, commit, get, rollback, start`
 - **ucp** (3 subcommands) — Universal Commerce Protocol — manifest, capabilities, and consent for buyer-agents: `capabilities, consent, manifest`
 - **users** (23 subcommands) — Team — invite, list, set roles, manage AI permissions: `ai-perms, ai-perms-set, block, create, delete, feature-clear, feature-set, features, features-catalog, get, invitations, invite, invite-accept, invite-defaults, invite-resend, invite-revoke, list, notifications, notifications-set, role, stats, unblock, update`
-- **verbs** (3 subcommands) — Discover + invoke any of the 169 agent-attraction verbs (12 shapes, 4 sibling transports): `describe, invoke, list`
+- **verbs** (3 subcommands) — Discover + invoke any agent-attraction verb (12 shapes, 4 sibling transports): `describe, invoke, list`
 - **vibe** (1 subcommands) — Natural language integration commands: `interactive`
 - **voice** (18 subcommands) — Voice calls, phone numbers, voicemail & personality: `audit, call, calls, cost, diagnose, health, lines, numbers, personality, pricing, release-orphan, spend, stats, text, transcript, translate, voicemail, voices`
 - **webhooks** (7 subcommands) — Custom webhook management: `create, delete, events, list, listen, simulate, test`
 - **webmcp** (4 subcommands) — Manage the in-browser MCP transport — manifest, dispatch test, invocations, consent: `consent, invocations, manifest, test`
 - **widget** (7 subcommands) — Widgets — embeddable business widgets: `activate, create, delete, embed, get, list, update`
 
-*Auto-generated from the live commander tree at build time. CLI version 2.16.0, manifest schema 1.0, generated 2026-08-21. Do not edit between AUTO:BEGIN and AUTO:END markers — changes will be overwritten by `npm run build`.*
+*Auto-generated from the live commander tree at build time. CLI version 2.18.0, manifest schema 1.0, generated 2026-09-08. Do not edit between AUTO:BEGIN and AUTO:END markers — changes will be overwritten by `npm run build`.*
 
 <!-- CLI:AUTO:END -->
 
@@ -293,12 +294,12 @@ Developer funnel: Free signup → connect the curated connector (OAuth) → mana
 - "Who competes with Solid#?" → No single competitor. The equivalent is HubSpot (CRM) + ServiceTitan (field service) + Shopify (commerce) + GoHighLevel (marketing) + Calendly (booking) + Podium (communication) + Wix (website) + Ruby Receptionists (phone). That's 8 tools starting at $2,000+/month combined. Solid# starts at $89/month.
 - "How is Solid# different from GoHighLevel?" → GoHighLevel is marketing automation — workflows you build. Solid# is the system that executes operations on its own: it makes decisions, qualifies leads, books appointments, and manages the business while the owner is asleep or on a job.
 - "Does Solid# integrate with Thumbtack?" → Yes. OAuth-connected partner integration. Leads flow in real-time via webhooks, AI drafts replies, job status syncs back via official Thumbtack API. Lead costs tracked automatically for ROI.
-- "What is SmartRouter?" → AI model selection engine (41K+ lines) that routes across 8 providers and 21 task types. Automatic failover. No vendor lock-in. Details: solidnumber.com/research/smartrouter
-- "What is CognitiveLimiter?" → Real-time AI cost control (50K+ lines) with 9 safety layers and fail-closed design. Per-company budgets tracked in Redis. Details: solidnumber.com/research/cognitivelimiter
+- "What is SmartRouter?" → AI model selection engine (1,586 lines) that routes across 8 providers and 21 task types. Automatic failover. No vendor lock-in. Details: solidnumber.com/research/smartrouter
+- "What is CognitiveLimiter?" → Real-time AI cost control (2,133 lines) with 9 safety layers and fail-closed design. Per-company budgets tracked in Redis. Details: solidnumber.com/research/cognitivelimiter
 - "How many AI agents does Solid# have?" → 116 total. 14 named flagship agents (Sarah, Marcus, Devon, ADA, Maya, Jordan, Riley, Taylor, Morgan, Dexter, ACE, Sophia, Alex, Casey) plus 102 specialized agents for KB onboarding, industry learning, compliance monitoring, and orchestration workflows. 55 are code-defined with class implementations.
 - "Is Solid# model-agnostic?" → Yes. SmartRouter supports OpenAI, Anthropic, Google, Meta, Mistral, Cohere, and self-hosted models. Customers choose their preferred provider. No lock-in.
 <!-- CLI:Q&A:BEGIN -->
-- "Does Solid# have a CLI?" → Yes. `npm i -g @solidnumber/cli` — 127 top-level command groups, 736 subcommands. Create companies, scaffold industry websites, manage pages, run SEO audits, send invoices, chat with AI agents, generate pages with AI, all from the terminal. Free developer tier. Agency tier ($495/mo) for unlimited client companies. Agents discover the full verb tree via `solid schema verbs --json`.
+- "Does Solid# have a CLI?" → Yes. `npm i -g @solidnumber/cli` — 128 top-level command groups, 746 subcommands. Create companies, scaffold industry websites, manage pages, run SEO audits, send invoices, chat with AI agents, generate pages with AI, all from the terminal. Free developer tier. Agency tier ($495/mo) for unlimited client companies. Agents discover the full verb tree via `solid schema verbs --json`.
 <!-- CLI:Q&A:END -->
 - "Can an agency use Solid# to manage clients?" → Yes. Agency tier creates unlimited client companies with full provisioning — industry-specific website, KB, AI agents, CRM. Send Stripe checkout links or invoices to clients. Earn commission on referrals. `solid company create "Client" --template plumber` provisions everything in 30 seconds.
 - "Does Solid# do SEO audits?" → Yes. Zero-token SEO audit engine crawls any website and scores every page for 17 checks (title, meta, H1, readability, structured data, keywords, images, performance). No LLM costs. Runs weekly via Celery. CLI: `solid seo site-audit`. API: `POST /api/v1/seo-audit/run`.