@solidnumber/cli 2.18.0 → 2.20.0

package/README.md

@@ -118,6 +118,7 @@ solid agent mission "Create a Valentine's campaign for VIP customers"
 | `solid auth logout` | Clear stored credentials |
 | `solid auth whoami` | Show current session |
 | `solid status` | Company dashboard |
+| `solid update` | Update the CLI — knows npm, Homebrew and scoop |
 | `solid pull` | Download pages, KB, settings as files |
 | `solid push` | Push local changes to production |
 | `solid diff` | Preview changes before pushing |
@@ -402,6 +403,20 @@ Full contract: see the [Scripting Contract doc](https://github.com/Adam-Camp-Kin
 
 ## Update notifier
 
+When it says there's a new version, run:
+
+```bash
+solid update            # check, then upgrade this copy
+solid update --check    # say what would happen, change nothing
+```
+
+It works out how this copy was installed and runs the right thing —
+`npm install -g`, `brew upgrade`, or `scoop update`. It also warns when a
+**second** `solid` is on your PATH at a different version: an npm global under
+nvm in front of a Homebrew formula is easy to end up with, whichever comes
+first in PATH wins, and upgrading one leaves the other lying in wait. The
+notifier cannot see that — it only ever looks at the copy that is running.
+
 The CLI checks npm once every **4 hours** for a newer release and prints
 a boxed notice on the next run. Suppress it:
 

package/dist/commands/accounting.d.ts

@@ -1,5 +1,14 @@
 /**
- * Accounting command for Solid CLI — QuickBooks / Xero sync.
+ * `solid accounting` — the OPTIONAL mirror of Solid#'s books into QuickBooks,
+ * Xero or FreshBooks. The books themselves are `solid books`, `solid invoices`
+ * and `solid expenses` (commands/books.ts) — every company has those, with or
+ * without an accounting system.
+ *
+ * ⛔ Fixed 2026-09-11 — all three commands spoke to an API that never existed:
+ * `sync` POSTed with no connection_id (the backend requires one → 422),
+ * `history` called /sync/history (only /sync/history/{connection_id} exists → 404),
+ * and `status` read provider/status/last_sync at the top level when the backend
+ * returns {connections: [...]}.
  */
 import { Command } from 'commander';
 export declare const accountingCommand: Command;

package/dist/commands/accounting.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accounting.d.ts","sourceRoot":"","sources":["../../src/commands/accounting.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC,eAAO,MAAM,iBAAiB,SAE4B,CAAC"}
+{"version":3,"file":"accounting.d.ts","sourceRoot":"","sources":["../../src/commands/accounting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+BpC,eAAO,MAAM,iBAAiB,SAE4B,CAAC"}

package/dist/commands/accounting.js

@@ -38,36 +38,63 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.accountingCommand = void 0;
 /**
- * Accounting command for Solid CLI — QuickBooks / Xero sync.
+ * `solid accounting` — the OPTIONAL mirror of Solid#'s books into QuickBooks,
+ * Xero or FreshBooks. The books themselves are `solid books`, `solid invoices`
+ * and `solid expenses` (commands/books.ts) — every company has those, with or
+ * without an accounting system.
+ *
+ * ⛔ Fixed 2026-09-11 — all three commands spoke to an API that never existed:
+ * `sync` POSTed with no connection_id (the backend requires one → 422),
+ * `history` called /sync/history (only /sync/history/{connection_id} exists → 404),
+ * and `status` read provider/status/last_sync at the top level when the backend
+ * returns {connections: [...]}.
  */
 const commander_1 = require("commander");
 const chalk_1 = __importDefault(require("chalk"));
-const config_1 = require("../lib/config");
 const api_client_1 = require("../lib/api-client");
-const ui_1 = require("../lib/ui");
+const command_kit_1 = require("../lib/command-kit");
 const json_output_1 = require("../lib/json-output");
+const ui_1 = require("../lib/ui");
+const dispatch_shortcuts_1 = require("./dispatch_shortcuts");
+async function connectionFor(connectionId) {
+    const res = await api_client_1.apiClient.get('/api/v1/accounting/connections');
+    const list = ((res.data || {}).connections || []);
+    if (list.length === 0) {
+        throw new Error('No accounting system is connected — connect one in Integrations → Accounting.');
+    }
+    if (!connectionId)
+        return list[0];
+    const match = list.find((c) => c.id === Number(connectionId));
+    if (!match)
+        throw new Error(`No accounting connection ${connectionId} on this account.`);
+    return match;
+}
 exports.accountingCommand = new commander_1.Command('accounting')
-    .description('Accounting sync — QuickBooks, Xero')
+    .description('Optional mirror of your books into QuickBooks / Xero / FreshBooks (the books: `solid books`)')
     .action(async () => { exports.accountingCommand.outputHelp(); });
-exports.accountingCommand.command('sync').description('Trigger a full accounting sync')
+exports.accountingCommand.command('status').description('Each connected accounting system and how its last sync went')
     .option('--json', 'JSON output')
     .action(async (options) => {
-    if (!config_1.config.isLoggedIn()) {
-        console.error(chalk_1.default.red('Not logged in.'));
-        process.exit(1);
-    }
+    (0, command_kit_1.requireAuth)();
     const ora = (await Promise.resolve().then(() => __importStar(require('ora')))).default;
-    const spinner = ora('Starting accounting sync...').start();
+    const spinner = ora('Loading...').start();
     try {
-        const res = await api_client_1.apiClient.post('/api/v1/accounting/sync');
+        const res = await api_client_1.apiClient.get('/api/v1/accounting/sync/status');
         spinner.stop();
         if ((0, json_output_1.isJsonOutput)(options)) {
             console.log(JSON.stringify(res.data, null, 2));
             return;
         }
-        const d = res.data;
+        const connections = ((res.data || {}).connections || []);
         console.log('');
-        console.log(ui_1.ui.successBox('Sync Started', [`${chalk_1.default.dim('Status:')}  ${d.status || 'running'}`, `${chalk_1.default.dim('Sync ID:')} ${d.sync_id || d.id || 'n/a'}`]));
+        console.log(ui_1.ui.header('Accounting'));
+        if (connections.length === 0)
+            console.log(chalk_1.default.dim('  Nothing connected — your books live in Solid# (`solid books summary`).'));
+        for (const c of connections) {
+            const status = c.last_status === 'success' ? chalk_1.default.green(c.last_status)
+                : c.last_status ? chalk_1.default.yellow(c.last_status) : chalk_1.default.dim('never synced');
+            console.log(ui_1.ui.label(`${c.provider} (#${c.connection_id})`, `${status}${c.last_sync ? chalk_1.default.dim(`  ${c.last_sync}`) : ''}`));
+        }
         console.log('');
     }
     catch (e) {
@@ -76,33 +103,26 @@ exports.accountingCommand.command('sync').description('Trigger a full accounting
         process.exit(1);
     }
 });
-exports.accountingCommand.command('status').description('Check sync status')
+exports.accountingCommand.command('sync').description('Send what is waiting to the connected accounting system now')
+    .option('--connection-id <id>', 'Which connection (default: the first)')
     .option('--json', 'JSON output')
     .action(async (options) => {
-    if (!config_1.config.isLoggedIn()) {
-        console.error(chalk_1.default.red('Not logged in.'));
-        process.exit(1);
-    }
+    (0, command_kit_1.requireAuth)();
     const ora = (await Promise.resolve().then(() => __importStar(require('ora')))).default;
-    const spinner = ora('Loading...').start();
+    const spinner = ora('Starting sync...').start();
     try {
-        const res = await api_client_1.apiClient.get('/api/v1/accounting/sync/status');
+        const connection = await connectionFor(options.connectionId);
+        const res = await api_client_1.apiClient.post('/api/v1/accounting/sync', { connection_id: connection.id });
         spinner.stop();
         if ((0, json_output_1.isJsonOutput)(options)) {
             console.log(JSON.stringify(res.data, null, 2));
             return;
         }
-        const d = res.data;
         console.log('');
-        console.log(ui_1.ui.header('Accounting Sync'));
-        if (d.provider)
-            console.log(ui_1.ui.label('Provider', d.provider));
-        if (d.status)
-            console.log(ui_1.ui.label('Status', d.status === 'connected' ? chalk_1.default.green(d.status) : chalk_1.default.yellow(d.status)));
-        if (d.last_sync)
-            console.log(ui_1.ui.label('Last Sync', d.last_sync));
-        if (d.records_synced !== undefined)
-            console.log(ui_1.ui.label('Records', String(d.records_synced)));
+        console.log(ui_1.ui.successBox('Sync started', [
+            `${chalk_1.default.dim('Provider:')} ${connection.provider}`,
+            chalk_1.default.dim('Each expense and invoice records how it landed — `solid accounting history`.'),
+        ]));
         console.log('');
     }
     catch (e) {
@@ -111,34 +131,31 @@ exports.accountingCommand.command('status').description('Check sync status')
         process.exit(1);
     }
 });
-exports.accountingCommand.command('history').description('View sync history')
-    .option('--limit <n>', 'Entries', '10').option('--json', 'JSON output')
+exports.accountingCommand.command('history').description('What was sent, and how each landed')
+    .option('--connection-id <id>', 'Which connection (default: the first)')
+    .option('--limit <n>', 'Entries', '20')
+    .option('--json', 'JSON output')
     .action(async (options) => {
-    if (!config_1.config.isLoggedIn()) {
-        console.error(chalk_1.default.red('Not logged in.'));
-        process.exit(1);
-    }
+    (0, command_kit_1.requireAuth)();
     const ora = (await Promise.resolve().then(() => __importStar(require('ora')))).default;
     const spinner = ora('Loading...').start();
     try {
-        const res = await api_client_1.apiClient.get('/api/v1/accounting/sync/history', { params: { limit: options.limit } });
+        const connection = await connectionFor(options.connectionId);
+        const res = await api_client_1.apiClient.get(`/api/v1/accounting/sync/history/${connection.id}`, { params: { limit: options.limit } });
         spinner.stop();
         if ((0, json_output_1.isJsonOutput)(options)) {
             console.log(JSON.stringify(res.data, null, 2));
             return;
         }
-        const d = res.data;
-        const entries = d.history || d.syncs || [];
+        const items = ((res.data || {}).items || []);
         console.log('');
-        console.log(ui_1.ui.header(`Sync History (${entries.length})`));
-        if (entries.length === 0) {
-            console.log(chalk_1.default.dim('  No sync history yet.'));
-        }
-        else {
-            for (const e of entries) {
-                const s = e.status === 'success' ? chalk_1.default.green('✓') : chalk_1.default.red('✗');
-                console.log(`  ${s} ${e.created_at || e.date} — ${e.records || 0} records`);
-            }
+        console.log(ui_1.ui.header(`${connection.provider} — sync history (${items.length})`));
+        if (items.length === 0)
+            console.log(chalk_1.default.dim('  Nothing sent yet.'));
+        for (const e of items) {
+            const mark = e.status === 'success' ? chalk_1.default.green('✓') : e.status === 'failed' ? chalk_1.default.red('✗') : chalk_1.default.yellow('…');
+            const where = e.remote_id ? ` → ${e.remote_id}` : '';
+            console.log(`  ${mark} ${e.entity_type} ${e.solid_id}${where}  ${chalk_1.default.dim(e.synced_at || '')}${e.error ? chalk_1.default.red(`  ${e.error}`) : ''}`);
         }
         console.log('');
     }
@@ -148,10 +165,18 @@ exports.accountingCommand.command('history').description('View sync history')
         process.exit(1);
     }
 });
-const command_kit_1 = require("../lib/command-kit");
+exports.accountingCommand.command('setup').description('Where money out and money in land in the connected books, and what is still missing')
+    .option('--accounts', 'Also list the accounts in their books to choose from')
+    .option('--json', 'JSON output')
+    .action(async (options) => {
+    const payload = { include_accounts: Boolean(options.accounts) };
+    await (0, dispatch_shortcuts_1.invokeAgentVerbShortcut)('integration.accounting_expense_setup', payload, options, 'Money out...');
+    await (0, dispatch_shortcuts_1.invokeAgentVerbShortcut)('integration.accounting_receivable_setup', payload, options, 'Money in...');
+});
 (0, command_kit_1.appendExamples)(exports.accountingCommand, [
-    { cmd: 'solid accounting sync', why: 'Sync orders → QuickBooks/Xero now' },
-    { cmd: 'solid accounting status', why: 'Connected provider + last sync time' },
-    { cmd: 'solid accounting history', why: 'Sync attempts + failures' },
+    { cmd: 'solid accounting status', why: 'Connected systems + how the last sync went' },
+    { cmd: 'solid accounting setup --accounts', why: 'Where expenses and invoices land, what to choose' },
+    { cmd: 'solid accounting sync', why: 'Send what is waiting now' },
+    { cmd: 'solid accounting history', why: 'What was sent, and how each landed' },
 ]);
 //# sourceMappingURL=accounting.js.map

package/dist/commands/accounting.js.map

@@ -1 +1 @@
-{"version":3,"file":"accounting.js","sourceRoot":"","sources":["../../src/commands/accounting.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;GAEG;AACH,yCAAoC;AACpC,kDAA0B;AAC1B,0CAAuC;AACvC,kDAA8D;AAC9D,kCAA+B;AAC/B,oDAAkD;AAErC,QAAA,iBAAiB,GAAG,IAAI,mBAAO,CAAC,YAAY,CAAC;KACvD,WAAW,CAAC,oCAAoC,CAAC;KACjD,MAAM,CAAC,KAAK,IAAI,EAAE,GAAG,yBAAiB,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3D,yBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,gCAAgC,CAAC;KAC5E,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;KAC/B,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAI,CAAC,eAAM,CAAC,UAAU,EAAE,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,CAAC,wDAAa,KAAK,GAAC,CAAC,CAAC,OAAO,CAAC;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC,KAAK,EAAE,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,sBAAS,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,IAAI,IAAA,0BAAY,EAAC,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtF,MAAM,CAAC,GAAG,GAAG,CAAC,IAA2B,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,OAAE,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC,GAAG,eAAK,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,SAAS,EAAE,EAAE,GAAG,eAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5J,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,IAAA,2BAAc,EAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAC/G,CAAC,CAAC,CAAC;AAEL,yBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,mBAAmB,CAAC;KACjE,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;KAC/B,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAI,CAAC,eAAM,CAAC,UAAU,EAAE,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,CAAC,wDAAa,KAAK,GAAC,CAAC,CAAC,OAAO,CAAC;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,sBAAS,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,IAAI,IAAA,0BAAY,EAAC,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtF,MAAM,CAAC,GAAG,GAAG,CAAC,IAA2B,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,OAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,CAAC,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,OAAE,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,OAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,eAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzH,IAAI,CAAC,CAAC,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,OAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,OAAE,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAC/F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,IAAA,2BAAc,EAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAC/G,CAAC,CAAC,CAAC;AAEL,yBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,mBAAmB,CAAC;KAClE,MAAM,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;KACtE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAI,CAAC,eAAM,CAAC,UAAU,EAAE,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,CAAC,wDAAa,KAAK,GAAC,CAAC,CAAC,OAAO,CAAC;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,sBAAS,CAAC,GAAG,CAAC,iCAAiC,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzG,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,IAAI,IAAA,0BAAY,EAAC,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtF,MAAM,CAAC,GAAG,GAAG,CAAC,IAA2B,CAAC;QAC1C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,OAAE,CAAC,MAAM,CAAC,iBAAiB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAAC,CAAC;aAC1E,CAAC;YAAC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,eAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;QAAC,CAAC;QACxL,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,IAAA,2BAAc,EAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAC/G,CAAC,CAAC,CAAC;AAEL,oDAAuE;AACvE,IAAA,4BAAe,EAAC,yBAAiB,EAAE;IACjC,EAAE,GAAG,EAAE,uBAAuB,EAAW,GAAG,EAAE,mCAAmC,EAAE;IACnF,EAAE,GAAG,EAAE,yBAAyB,EAAS,GAAG,EAAE,qCAAqC,EAAE;IACrF,EAAE,GAAG,EAAE,0BAA0B,EAAQ,GAAG,EAAE,0BAA0B,EAAE;CAC3E,CAAC,CAAC"}
+{"version":3,"file":"accounting.js","sourceRoot":"","sources":["../../src/commands/accounting.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;;;GAWG;AACH,yCAAoC;AACpC,kDAA0B;AAE1B,kDAA8D;AAC9D,oDAAiE;AACjE,oDAAkD;AAClD,kCAA+B;AAC/B,6DAAuE;AAYvE,KAAK,UAAU,aAAa,CAAC,YAAqB;IAChD,MAAM,GAAG,GAAG,MAAM,sBAAS,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,CAAC,CAAE,GAAG,CAAC,IAAY,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE,CAAiB,CAAC;IAC3E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,YAAY,mBAAmB,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AAEY,QAAA,iBAAiB,GAAG,IAAI,mBAAO,CAAC,YAAY,CAAC;KACvD,WAAW,CAAC,8FAA8F,CAAC;KAC3G,MAAM,CAAC,KAAK,IAAI,EAAE,GAAG,yBAAiB,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3D,yBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,6DAA6D,CAAC;KAC3G,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;KAC/B,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAA,yBAAW,GAAE,CAAC;IACd,MAAM,GAAG,GAAG,CAAC,wDAAa,KAAK,GAAC,CAAC,CAAC,OAAO,CAAC;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,sBAAS,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,IAAI,IAAA,0BAAY,EAAC,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtF,MAAM,WAAW,GAAG,CAAC,CAAE,GAAG,CAAC,IAAY,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE,CAA+B,CAAC;QAChG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,OAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QACrC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC,CAAC;QACjI,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,eAAK,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;gBACrE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,OAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,aAAa,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/H,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,IAAA,2BAAc,EAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAC/G,CAAC,CAAC,CAAC;AAEL,yBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,6DAA6D,CAAC;KACzG,MAAM,CAAC,sBAAsB,EAAE,uCAAuC,CAAC;KACvE,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;KAC/B,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAA,yBAAW,GAAE,CAAC;IACd,MAAM,GAAG,GAAG,CAAC,wDAAa,KAAK,GAAC,CAAC,CAAC,OAAO,CAAC;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,sBAAS,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9F,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,IAAI,IAAA,0BAAY,EAAC,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,OAAE,CAAC,UAAU,CAAC,cAAc,EAAE;YACxC,GAAG,eAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE;YAClD,eAAK,CAAC,GAAG,CAAC,8EAA8E,CAAC;SAC1F,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,IAAA,2BAAc,EAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAC/G,CAAC,CAAC,CAAC;AAEL,yBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,oCAAoC,CAAC;KACnF,MAAM,CAAC,sBAAsB,EAAE,uCAAuC,CAAC;KACvE,MAAM,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC;KACtC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;KAC/B,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAA,yBAAW,GAAE,CAAC;IACd,MAAM,GAAG,GAAG,CAAC,wDAAa,KAAK,GAAC,CAAC,CAAC,OAAO,CAAC;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,sBAAS,CAAC,GAAG,CAAC,mCAAmC,UAAU,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1H,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,IAAI,IAAA,0BAAY,EAAC,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtF,MAAM,KAAK,GAAG,CAAC,CAAE,GAAG,CAAC,IAAY,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,CAA+B,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,OAAE,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,oBAAoB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;QACtE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,eAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpH,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,GAAG,KAAK,KAAK,eAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9I,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,IAAA,2BAAc,EAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAC/G,CAAC,CAAC,CAAC;AAEL,yBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,qFAAqF,CAAC;KAClI,MAAM,CAAC,YAAY,EAAE,sDAAsD,CAAC;KAC5E,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;KAC/B,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,MAAM,OAAO,GAAG,EAAE,gBAAgB,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IAChE,MAAM,IAAA,4CAAI,EAAC,sCAAsC,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IACrF,MAAM,IAAA,4CAAI,EAAC,yCAAyC,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AACzF,CAAC,CAAC,CAAC;AAEL,IAAA,4BAAc,EAAC,yBAAiB,EAAE;IAChC,EAAE,GAAG,EAAE,yBAAyB,EAAE,GAAG,EAAE,4CAA4C,EAAE;IACrF,EAAE,GAAG,EAAE,mCAAmC,EAAE,GAAG,EAAE,kDAAkD,EAAE;IACrG,EAAE,GAAG,EAAE,uBAAuB,EAAE,GAAG,EAAE,0BAA0B,EAAE;IACjE,EAAE,GAAG,EAAE,0BAA0B,EAAE,GAAG,EAAE,oCAAoC,EAAE;CAC/E,CAAC,CAAC"}

package/dist/commands/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/commands/agent.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoFpC,eAAO,MAAM,YAAY,SAC2B,CAAC"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/commands/agent.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqFpC,eAAO,MAAM,YAAY,SAC2B,CAAC"}

package/dist/commands/agent.js

@@ -77,12 +77,13 @@ function scoreBar(value, width = 15) {
 }
 function fmt(n) { return n.toLocaleString(); }
 function trunc(s, max) { return !s ? '' : s.length > max ? s.slice(0, max - 1) + '…' : s; }
+// Returns a rejection handler that FAILS the command: exit 1, and under
+// --json a structured error envelope on stdout. The previous version wrote
+// the error box to stdout via console.log and then returned normally, so an
+// agent piping this command got exit 0 with an error box mixed into the
+// payload it was trying to parse.
 function catchError(spinner, label) {
-    return (error) => {
-        spinner.fail(chalk_1.default.red(label));
-        console.log(ui_1.ui.errorBox('Error', [(0, api_client_1.handleApiError)(error).message]));
-        console.log('');
-    };
+    return (error) => (0, command_kit_1.fail)(spinner, label, error);
 }
 // ── Command Tree ─────────────────────────────────────────────────────
 exports.agentCommand = new commander_1.Command('agent')
@@ -136,11 +137,17 @@ exports.agentCommand
         const detail = detailRes.status === 'fulfilled' ? detailRes.value.data : null;
         const data = dataRes.status === 'fulfilled' ? dataRes.value.data : null;
         if (!detail) {
-            console.log(ui_1.ui.errorBox('Not Found', [`Agent "${name}" (${agentType}) not found.`]));
-            return;
+            // Was: print an error box to STDOUT and return — exit 0, with the box
+            // landing in the payload an agent was parsing. Synthesize the 404 so
+            // it takes the identical path (and envelope) as a real one.
+            const msg = `Agent "${name}" (${agentType}) not found.`;
+            (0, command_kit_1.emitErrorAndExit)(Object.assign(new Error(msg), {
+                isAxiosError: true,
+                response: { status: 404, data: { detail: msg } },
+            }));
         }
         if ((0, json_output_1.isJsonOutput)(opts)) {
-            console.log(JSON.stringify({ detail, data }, null, 2));
+            (0, json_output_1.printJson)({ detail, data });
             return;
         }
         console.log(ui_1.ui.header(detail.name || agentType));
@@ -360,7 +367,7 @@ exports.agentCommand
         const dash = dashRes.status === 'fulfilled' ? dashRes.value.data : null;
         const tel = telRes.status === 'fulfilled' ? telRes.value.data : null;
         if ((0, json_output_1.isJsonOutput)(opts)) {
-            console.log(JSON.stringify({ dashboard: dash, telemetry: tel }, null, 2));
+            (0, json_output_1.printJson)({ dashboard: dash, telemetry: tel });
             return;
         }
         console.log(ui_1.ui.header('Agent Dashboard'));
@@ -445,7 +452,7 @@ exports.agentCommand
             const { data: result } = await api_client_1.apiClient.missionExecute(mission.mission_id);
             spinner.stop();
             if ((0, json_output_1.isJsonOutput)(opts)) {
-                console.log(JSON.stringify({ mission, execution: result }, null, 2));
+                (0, json_output_1.printJson)({ mission, execution: result });
                 return;
             }
             console.log(ui_1.ui.successBox('Mission Executed', [
@@ -1043,6 +1050,204 @@ exports.agentCommand
         catchError(spinner, 'Uninstall failed')(e);
     }
 });
+// ── SPRINT-AGENT-FIREWALL — identity, quarantine, reputation ─────────
+//
+//   solid agent identity list|create|revoke|use|clear
+//   solid agent quarantine <id> [--reason]
+//   solid agent release <id>
+//   solid agent reputation <id>
+//   solid agent risk [--days 7]
+function printIdentity(i) {
+    const status = String(i.status);
+    const badge = status === 'active' ? chalk_1.default.green('active') : status === 'quarantined' ? chalk_1.default.red('quarantined') : chalk_1.default.dim('revoked');
+    console.log(`  #${String(i.id).padEnd(5)} ${badge.padEnd(20)} ${chalk_1.default.bold(String(i.agent_type)).padEnd(24)} tier=${String(i.trust_tier).padEnd(9)} rep=${Number(i.reputation ?? 1).toFixed(2)}  ${chalk_1.default.dim(String(i.key_prefix))}…  ${chalk_1.default.dim(String(i.label ?? ''))}`);
+}
+const identityCommand = new commander_1.Command('identity')
+    .description('Agent identities — a revocable key that says WHICH agent acted (sent as X-Agent-Id)');
+identityCommand
+    .command('list').alias('ls')
+    .description('List agent identities on the current company')
+    .option('--all', 'Include revoked identities', false)
+    .option('--json', 'Output as JSON')
+    .action(async (options) => {
+    requireLogin();
+    try {
+        const res = await api_client_1.apiClient.agentIdentityList(Boolean(options.all));
+        if ((0, json_output_1.isJsonOutput)(options)) {
+            console.log(JSON.stringify(res.data, null, 2));
+            return;
+        }
+        console.log('');
+        if (!res.data.identities.length) {
+            console.log(chalk_1.default.dim('  No agent identities. Create one: solid agent identity create --type custom-bot --tier custom'));
+            return;
+        }
+        res.data.identities.forEach(printIdentity);
+        const active = config_1.config.agentKey;
+        console.log(active ? chalk_1.default.dim(`\n  This CLI is sending X-Agent-Id (${active.slice(0, 12)}…)`) : chalk_1.default.dim('\n  This CLI is not sending an agent identity. `solid agent identity use <key>` to attach one.'));
+    }
+    catch (error) {
+        const apiError = (0, api_client_1.handleApiError)(error);
+        console.error(chalk_1.default.red(`  ${apiError.message}`));
+        process.exit(1);
+    }
+});
+identityCommand
+    .command('create')
+    .description('Create an agent identity — the key is shown ONCE')
+    .requiredOption('--type <agent_type>', 'sarah | marcus | ada | cli | mcp | custom-<slug>')
+    .option('--tier <trust_tier>', 'platform | agency | custom (rate-limit tier)', 'custom')
+    .option('--label <label>', 'Human label')
+    .option('--use', 'Attach the new key to this CLI immediately', false)
+    .option('--json', 'Output as JSON')
+    .action(async (options) => {
+    requireLogin();
+    const spinner = (0, ora_1.default)(`Creating identity ${options.type} (${options.tier})...`).start();
+    try {
+        const res = await api_client_1.apiClient.agentIdentityCreate({ agent_type: options.type, trust_tier: options.tier, label: options.label });
+        spinner.succeed(chalk_1.default.green(`Created #${res.data.id}`));
+        if ((0, json_output_1.isJsonOutput)(options)) {
+            console.log(JSON.stringify(res.data, null, 2));
+            return;
+        }
+        console.log('');
+        console.log(`  ${chalk_1.default.bold('Agent key (shown once):')} ${chalk_1.default.cyan(res.data.agent_key)}`);
+        console.log(chalk_1.default.dim('  Attach it:  solid agent identity use <key>     or   export SOLID_AGENT_KEY=<key>'));
+        if (options.use) {
+            config_1.config.agentKey = res.data.agent_key;
+            console.log(chalk_1.default.green('  ✔ attached to this CLI'));
+        }
+    }
+    catch (error) {
+        (0, command_kit_1.fail)(spinner, 'Create failed', error);
+    }
+});
+identityCommand
+    .command('revoke <id>')
+    .description('Revoke an agent identity — its key stops resolving immediately (403 on every call)')
+    .action(async (idArg) => {
+    requireLogin();
+    const spinner = (0, ora_1.default)(`Revoking #${idArg}...`).start();
+    try {
+        const res = await api_client_1.apiClient.agentIdentityRevoke(parseInt(idArg, 10));
+        spinner.succeed(chalk_1.default.green(`Revoked #${idArg}`));
+        printIdentity(res.data);
+    }
+    catch (error) {
+        (0, command_kit_1.fail)(spinner, 'Revoke failed', error);
+    }
+});
+identityCommand
+    .command('use <key>')
+    .description('Attach an agent key to this CLI (sent as X-Agent-Id on every request)')
+    .action((key) => {
+    if (!String(key).startsWith('sak_')) {
+        console.error(chalk_1.default.red('That is not an agent key (expected sak_…). Create one: solid agent identity create'));
+        process.exit(1);
+    }
+    config_1.config.agentKey = String(key);
+    console.log(chalk_1.default.green(`✔ This CLI now identifies as ${String(key).slice(0, 12)}…`));
+});
+identityCommand
+    .command('clear')
+    .description('Stop sending an agent identity from this CLI')
+    .action(() => {
+    config_1.config.agentKey = undefined;
+    console.log(chalk_1.default.green('✔ Agent identity detached'));
+});
+exports.agentCommand.addCommand(identityCommand);
+exports.agentCommand
+    .command('quarantine <id>')
+    .description('Quarantine an agent identity — every write is denied until released')
+    .option('--reason <reason>', 'Why', 'manual')
+    .action(async (idArg, options) => {
+    requireLogin();
+    const spinner = (0, ora_1.default)(`Quarantining #${idArg}...`).start();
+    try {
+        const res = await api_client_1.apiClient.agentIdentityQuarantine(parseInt(idArg, 10), String(options.reason));
+        spinner.succeed(chalk_1.default.red(`Quarantined #${idArg}`));
+        printIdentity(res.data);
+    }
+    catch (error) {
+        (0, command_kit_1.fail)(spinner, 'Quarantine failed', error);
+    }
+});
+exports.agentCommand
+    .command('release <id>')
+    .description('Release a quarantined agent identity')
+    .action(async (idArg) => {
+    requireLogin();
+    const spinner = (0, ora_1.default)(`Releasing #${idArg}...`).start();
+    try {
+        const res = await api_client_1.apiClient.agentIdentityRelease(parseInt(idArg, 10));
+        spinner.succeed(chalk_1.default.green(`Released #${idArg}`));
+        printIdentity(res.data);
+    }
+    catch (error) {
+        (0, command_kit_1.fail)(spinner, 'Release failed', error);
+    }
+});
+exports.agentCommand
+    .command('reputation <id>')
+    .description('Reputation score, effective rate limit and recent deductions for an agent identity')
+    .option('--json', 'Output as JSON')
+    .action(async (idArg, options) => {
+    requireLogin();
+    try {
+        const res = await api_client_1.apiClient.agentIdentityReputation(parseInt(idArg, 10));
+        if ((0, json_output_1.isJsonOutput)(options)) {
+            console.log(JSON.stringify(res.data, null, 2));
+            return;
+        }
+        const d = res.data;
+        console.log('');
+        printIdentity(d.identity);
+        console.log(`  ${chalk_1.default.bold('Reputation:')}      ${d.reputation.toFixed(3)}`);
+        console.log(`  ${chalk_1.default.bold('Rate limit:')}      ${d.effective_limit_per_min}/min effective (tier ${d.trust_tier} base ${d.base_limit_per_min}/min)`);
+        if (!d.deductions.length) {
+            console.log(chalk_1.default.dim('  No deductions in the window.'));
+            return;
+        }
+        console.log(chalk_1.default.bold('\n  Recent deductions:'));
+        d.deductions.forEach((x) => {
+            console.log(`    ${chalk_1.default.dim(String(x.at ?? '').slice(0, 19))}  -${Number(x.amount ?? 0).toFixed(3)}  ${x.reason.padEnd(20)} ${chalk_1.default.dim(`${Number(x.before ?? 0).toFixed(2)} → ${Number(x.after ?? 0).toFixed(2)}`)}`);
+        });
+    }
+    catch (error) {
+        const apiError = (0, api_client_1.handleApiError)(error);
+        console.error(chalk_1.default.red(`  ${apiError.message}`));
+        process.exit(1);
+    }
+});
+exports.agentCommand
+    .command('risk')
+    .description('Trust Surface: agents with elevated risk this week, and who is quarantined')
+    .option('--days <n>', 'Window in days', '7')
+    .option('--json', 'Output as JSON')
+    .action(async (options) => {
+    requireLogin();
+    try {
+        const res = await api_client_1.apiClient.agentRisk(parseInt(String(options.days), 10) || 7);
+        if ((0, json_output_1.isJsonOutput)(options)) {
+            console.log(JSON.stringify(res.data, null, 2));
+            return;
+        }
+        console.log('');
+        if (!res.data.elevated.length && !res.data.quarantined.length) {
+            console.log(chalk_1.default.green(`  No elevated-risk agents in the last ${res.data.window_days} days.`));
+            return;
+        }
+        res.data.elevated.forEach((a) => {
+            console.log(`  ${chalk_1.default.bold(String(a.agent_key)).padEnd(16)} max risk ${chalk_1.default.yellow(Number(a.max_risk).toFixed(2))}  flagged=${a.flagged_actions} blocked=${a.blocked} approvals=${a.approvals_required}  ${chalk_1.default.dim(a.reasons.join(', '))}`);
+        });
+        res.data.quarantined.forEach((i) => printIdentity(i));
+    }
+    catch (error) {
+        const apiError = (0, api_client_1.handleApiError)(error);
+        console.error(chalk_1.default.red(`  ${apiError.message}`));
+        process.exit(1);
+    }
+});
 const command_kit_1 = require("../lib/command-kit");
 (0, command_kit_1.appendExamples)(exports.agentCommand, [
     { cmd: 'solid agent dashboard', why: 'All agents + telemetry' },
@@ -1055,6 +1260,10 @@ const command_kit_1 = require("../lib/command-kit");
     { cmd: 'solid agent grant <id> --scope kb:read', why: 'Grant scopes after install' },
     { cmd: 'solid agent call <id> "summarize pricing"', why: 'Invoke an installed agent' },
     { cmd: 'solid agent dispatch kb_entry_create --args \'{"title":"FAQ","content":"...","category_id":1}\' --confirm', why: 'Run any ADA verb directly' },
+    { cmd: 'solid agent identity create --type custom-bot --tier custom --use', why: 'Issue a revocable agent key and attach it (X-Agent-Id)' },
+    { cmd: 'solid agent reputation 5', why: 'Score, effective rate limit, deductions' },
+    { cmd: 'solid agent quarantine 5 --reason "bulk delete"', why: 'Hard-block an agent until released' },
+    { cmd: 'solid agent risk', why: 'Agents with elevated risk this week' },
 ]);
 // ── solid agent dispatch <verb> — generic verb dispatcher ────────────
 //