@usethrottle/cli 1.0.4 → 2.0.1

package/dist/cli.js

@@ -3,8 +3,31 @@
 // src/index.ts
 import { Command } from "commander";
 
-// src/commands/bc-connect.ts
-import prompts from "prompts";
+// src/version.ts
+import { readFileSync } from "fs";
+import { fileURLToPath } from "url";
+var pkg = JSON.parse(
+  readFileSync(fileURLToPath(new URL("../package.json", import.meta.url)), "utf8")
+);
+var CLI_VERSION = pkg.version;
+
+// src/banner.ts
+var BRAND_BLUE = "\x1B[38;2;29;86;232m";
+var RESET = "\x1B[0m";
+var DIM = "\x1B[2m";
+var BOLD = "\x1B[1m";
+function printBanner(opts) {
+  if (process.env.THROTTLE_CLI_NO_BANNER === "1") return;
+  if (!process.stdout.isTTY) return;
+  const v = opts?.version ? `v${opts.version}` : "";
+  process.stderr.write(
+    `${BRAND_BLUE}${BOLD}\u25B8 throttle${RESET} ${DIM}CLI${v ? " " + v : ""} \xB7 docs https://docs.usethrottle.dev${RESET}
+
+`
+  );
+}
+
+// src/lib/errors.ts
 import pc from "picocolors";
 
 // ../errors/dist/index.js
@@ -23,22 +46,29 @@ var ThrottleError = class extends Error {
     Object.setPrototypeOf(this, new.target.prototype);
   }
 };
+function isThrottleError(value) {
+  return value instanceof ThrottleError;
+}
 
-// src/lib/throttle-api.ts
+// src/lib/client.ts
 var ThrottleApiError = class extends ThrottleError {
   constructor(code, message, statusCode) {
     super({ code, message, statusCode });
     this.name = "ThrottleApiError";
   }
 };
-async function callThrottle(opts, path, init2 = {}) {
-  const url = `${opts.apiBaseUrl.replace(/\/$/, "")}${path}`;
-  const headers = {
-    "content-type": "application/json",
-    "x-api-key": opts.apiKey,
-    ...init2.headers ?? {}
-  };
-  const res = await fetch(url, { ...init2, headers });
+function url(auth, path) {
+  return `${auth.apiBaseUrl.replace(/\/$/, "")}${path}`;
+}
+function headers(auth, init2) {
+  return { "content-type": "application/json", "x-api-key": auth.apiKey, ...init2.headers ?? {} };
+}
+async function callThrottle(auth, path, init2 = {}) {
+  const method = (init2.method ?? "GET").toUpperCase();
+  if (init2.body == null && (method === "POST" || method === "PATCH" || method === "PUT")) {
+    init2 = { ...init2, body: "{}" };
+  }
+  const res = await fetch(url(auth, path), { ...init2, headers: headers(auth, init2) });
   const text = await res.text();
   let body = {};
   try {
@@ -50,248 +80,41 @@ async function callThrottle(opts, path, init2 = {}) {
     const message = body.error?.message ?? `Request failed (${res.status}): ${text.slice(0, 120)}`;
     throw new ThrottleApiError(code, message, res.status);
   }
-  return body.data ?? body;
-}
-
-// src/commands/bc-connect.ts
-async function bcConnect(options) {
-  const apiKey = options.apiKey ?? process.env.THROTTLE_API_KEY ?? await promptApiKey();
-  const storeHash = options.storeHash ?? await promptStoreHash();
-  const accessToken = options.accessToken ?? await promptAccessToken();
-  console.log();
-  console.log(pc.dim("Connecting..."));
-  try {
-    const result = await callThrottle(
-      { apiBaseUrl: options.apiBaseUrl, apiKey },
-      "/api/v1/bigcommerce/connect",
-      {
-        method: "POST",
-        body: JSON.stringify({ storeHash, accessToken })
-      }
-    );
-    console.log(pc.green("\u2713") + ` BigCommerce store ${pc.bold(storeHash)} connected`);
-    console.log(pc.dim(`  Connection id:    ${result.id}`));
-    console.log(pc.dim(`  Webhooks created: ${result.webhookCount}`));
-    console.log(pc.dim(`  Status:           ${result.status}`));
-    console.log();
-    console.log(pc.dim("Next steps:"));
-    console.log(pc.dim("  \u2022 Test by placing a sandbox order \u2014 throttle should receive a webhook"));
-    console.log(pc.dim("  \u2022 Run `throttle bc-disconnect` if you ever need to remove this connection"));
-  } catch (err) {
-    if (err instanceof ThrottleApiError) {
-      console.error(pc.red("\u2717") + ` Failed (${err.code}): ${err.message}`);
-      if (err.code === "invalid_bc_credentials") {
-        console.error(
-          pc.dim("  Re-check your store hash and API token in your BigCommerce dashboard.")
-        );
-        console.error(
-          pc.dim(
-            "  Store hash: settings \u2192 API accounts \u2192 store URL contains it (e.g. abc123 in stores/abc123/)"
-          )
-        );
-        console.error(
-          pc.dim(
-            "  API token: settings \u2192 advanced settings \u2192 API accounts \u2192 create V2/V3 API token"
-          )
-        );
-      }
-      process.exitCode = 1;
-      return;
-    }
-    throw err;
-  }
-}
-async function promptApiKey() {
-  const res = await prompts(
-    {
-      type: "password",
-      name: "apiKey",
-      message: "Throttle API key (sk_...)",
-      validate: (v) => v.startsWith("sk_") && v.length > 20 ? true : "Must look like sk_\u2026 (paste from https://checkout.usethrottle.dev/welcome)"
-    },
-    { onCancel: () => process.exit(1) }
-  );
-  return res.apiKey;
-}
-async function promptStoreHash() {
-  const res = await prompts(
-    {
-      type: "text",
-      name: "storeHash",
-      message: "BigCommerce store hash (e.g. abc123 from stores/abc123/...)",
-      validate: (v) => v.length >= 4 ? true : "Must be at least 4 characters"
-    },
-    { onCancel: () => process.exit(1) }
-  );
-  return res.storeHash.trim();
-}
-async function promptAccessToken() {
-  console.log(
-    pc.dim(
-      "  Generate a token at: BigCommerce dashboard \u2192 Settings \u2192 API accounts \u2192 Create API account"
-    )
-  );
-  console.log(
-    pc.dim(
-      '  Required scopes: Orders, Customers, Carts, Webhooks (all "Modify"); Information & Products (Read-only)'
-    )
-  );
-  const res = await prompts(
-    {
-      type: "password",
-      name: "accessToken",
-      message: "BigCommerce API token",
-      validate: (v) => v.length >= 10 ? true : "Token looks too short \u2014 paste the full value"
-    },
-    { onCancel: () => process.exit(1) }
-  );
-  return res.accessToken;
-}
-
-// src/commands/bc-disconnect.ts
-import prompts2 from "prompts";
-import pc2 from "picocolors";
-async function bcDisconnect(options) {
-  const apiKey = options.apiKey ?? process.env.THROTTLE_API_KEY ?? await promptApiKey2();
-  const connectionId = options.connectionId ?? await promptConnectionId();
-  if (!options.yes) {
-    const confirm = await prompts2(
-      {
-        type: "confirm",
-        name: "ok",
-        message: `Disconnect ${connectionId}? (will be hard-deleted in 90 days)`,
-        initial: false
-      },
-      { onCancel: () => process.exit(1) }
-    );
-    if (!confirm.ok) {
-      console.log(pc2.dim("Aborted."));
-      return;
-    }
-  }
-  try {
-    await callThrottle(
-      { apiBaseUrl: options.apiBaseUrl, apiKey },
-      `/api/v1/bigcommerce/connections/${encodeURIComponent(connectionId)}`,
-      { method: "DELETE" }
-    );
-    console.log(pc2.green("\u2713") + ` Disconnected ${connectionId}`);
-  } catch (err) {
-    if (err instanceof ThrottleApiError) {
-      console.error(pc2.red("\u2717") + ` Failed (${err.code}): ${err.message}`);
-      process.exitCode = 1;
-      return;
-    }
-    throw err;
-  }
-}
-async function promptApiKey2() {
-  const res = await prompts2(
-    { type: "password", name: "apiKey", message: "Throttle API key (sk_...)" },
-    { onCancel: () => process.exit(1) }
-  );
-  return res.apiKey;
+  return body && typeof body === "object" && "data" in body ? body.data : body;
 }
-async function promptConnectionId() {
-  const res = await prompts2(
-    { type: "text", name: "id", message: "Connection id (conn_...)" },
-    { onCancel: () => process.exit(1) }
-  );
-  return res.id.trim();
+async function callThrottleText(auth, path, init2 = {}) {
+  const res = await fetch(url(auth, path), { ...init2, headers: headers(auth, init2) });
+  const text = await res.text();
+  if (!res.ok) throw new ThrottleApiError(`http_${res.status}`, text.slice(0, 120), res.status);
+  return text;
 }
 
-// src/commands/embed-config.ts
-import prompts3 from "prompts";
-import pc3 from "picocolors";
-async function resolveApiKey(provided) {
-  if (provided) return provided;
-  if (process.env.THROTTLE_API_KEY) return process.env.THROTTLE_API_KEY;
-  const res = await prompts3(
-    {
-      type: "password",
-      name: "apiKey",
-      message: "Throttle API key (sk_...)",
-      validate: (v) => v.startsWith("sk_") && v.length > 20 ? true : "Must look like sk_\u2026 (paste from your dashboard)"
-    },
-    { onCancel: () => process.exit(1) }
-  );
-  return res.apiKey;
-}
-function printConfig(cfg) {
-  console.log(pc3.dim("  allowedOrigins:"));
-  if (cfg.allowedOrigins.length === 0) {
-    console.log(pc3.dim("    (none \u2014 embeds are disabled until you add an origin)"));
-  } else {
-    for (const o of cfg.allowedOrigins) console.log(pc3.dim(`    ${o}`));
-  }
-  console.log(pc3.dim(`  primaryColor:    ${cfg.primaryColor ?? "(unset)"}`));
-  console.log(pc3.dim(`  logoUrl:         ${cfg.logoUrl ?? "(unset)"}`));
-  console.log(pc3.dim(`  merchantName:    ${cfg.merchantName ?? "(unset)"}`));
-}
-async function embedConfigShow(options) {
-  const apiKey = await resolveApiKey(options.apiKey);
-  try {
-    const data = await callThrottle(
-      { apiBaseUrl: options.apiBaseUrl, apiKey },
-      "/api/v1/embed-config",
-      { method: "GET" }
-    );
-    console.log(pc3.green("\u2713") + " Current embed config");
-    printConfig(data);
-  } catch (err) {
-    if (err instanceof ThrottleApiError) {
-      console.error(pc3.red("\u2717") + ` Failed (${err.code}): ${err.message}`);
-      process.exitCode = 1;
-      return;
-    }
-    throw err;
-  }
-}
-async function embedConfigSet(options) {
-  const apiKey = await resolveApiKey(options.apiKey);
-  const body = {};
-  if (options.origins) {
-    body.allowedOrigins = options.origins.split(",").map((s) => s.trim()).filter(Boolean);
-  }
-  if (options.primary) body.primaryColor = options.primary;
-  if (options.logo) body.logoUrl = options.logo;
-  if (options.merchantName) body.merchantName = options.merchantName;
-  if (Object.keys(body).length === 0) {
-    console.error(
-      pc3.red("\u2717") + " No fields provided. Pass --origins, --primary, --logo, or --merchant-name."
-    );
-    process.exitCode = 1;
-    return;
-  }
-  try {
-    const data = await callThrottle(
-      { apiBaseUrl: options.apiBaseUrl, apiKey },
-      "/api/v1/embed-config",
-      { method: "PUT", body: JSON.stringify(body) }
-    );
-    console.log(pc3.green("\u2713") + " Embed config updated");
-    printConfig(data);
-  } catch (err) {
-    if (err instanceof ThrottleApiError) {
-      console.error(pc3.red("\u2717") + ` Failed (${err.code}): ${err.message}`);
-      if (err.code === "invalid_origin") {
-        console.error(
-          pc3.dim(
-            "  Origins must be https://host[:port]. No paths, no trailing slash, no wildcards."
-          )
-        );
-      }
-      process.exitCode = 1;
-      return;
-    }
-    throw err;
+// src/lib/errors.ts
+var HINTS = {
+  insufficient_scopes: "Your API key lacks a required scope. Mint a key with the needed scope in the dashboard.",
+  environment_mismatch: "This resource is in a different environment than your key. Use a key for the right environment.",
+  refund_amount_exceeds_balance: "The refund is larger than the captured balance remaining on this payment.",
+  invalid_api_key: "The API key is invalid or expired. Re-run `throttle config set` with a fresh key.",
+  not_found: "Not found (or your key cannot see it in this environment)."
+};
+function handleError(err) {
+  if (isThrottleError(err)) {
+    process.stderr.write(pc.red("\u2717") + ` (${err.code}): ${err.message}
+`);
+    const hint = HINTS[err.code];
+    if (hint) process.stderr.write(pc.dim("  " + hint) + "\n");
+    return 1;
   }
+  const exitCode = typeof err?.exitCode === "number" ? err.exitCode : 1;
+  const message = err instanceof Error ? err.message : String(err);
+  process.stderr.write(pc.red("\u2717") + " " + message + "\n");
+  return exitCode;
 }
 
 // src/sentry.ts
-import { readFileSync } from "fs";
+import { readFileSync as readFileSync2 } from "fs";
 import { dirname, resolve } from "path";
-import { fileURLToPath } from "url";
+import { fileURLToPath as fileURLToPath2 } from "url";
 import * as Sentry from "@sentry/node";
 function normalizeKey(key) {
   return key.toLowerCase().replace(/[^a-z0-9]/g, "");
@@ -329,8 +152,8 @@ function isOptInValue(value) {
 }
 function readCliPackageRelease() {
   try {
-    const packageJsonPath = resolve(dirname(fileURLToPath(import.meta.url)), "../package.json");
-    const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf8"));
+    const packageJsonPath = resolve(dirname(fileURLToPath2(import.meta.url)), "../package.json");
+    const packageJson = JSON.parse(readFileSync2(packageJsonPath, "utf8"));
     return packageJson.version ? `@usethrottle/cli@${packageJson.version}` : void 0;
   } catch {
     return void 0;
@@ -381,81 +204,598 @@ async function flushCliSentry(timeout = 2e3) {
   await Sentry.flush(timeout);
 }
 
-// src/banner.ts
-var BRAND_BLUE = "\x1B[38;2;29;86;232m";
-var RESET = "\x1B[0m";
-var DIM = "\x1B[2m";
-var ART = [
-  "  \u2513     \u2513   \u2513 ",
-  " \u2513\u2523 \u2513\u250F\u2513\u254B\u254B\u2503\u250F\u2513 ",
-  " \u2517\u251B\u251B\u2517\u251B\u2517\u2517\u2517\u2517 "
-].join("\n");
-function printBanner(opts) {
-  if (process.env.THROTTLE_CLI_NO_BANNER === "1") return;
-  if (!process.stdout.isTTY) return;
-  const v = opts?.version ? `v${opts.version}` : "";
-  process.stderr.write(`${BRAND_BLUE}${ART}${RESET}
-`);
-  process.stderr.write(`${BRAND_BLUE}\u25B8${RESET} ${DIM}throttle CLI${v ? " " + v : ""} \xB7 docs https://docs.usethrottle.dev${RESET}
+// src/config/profiles.ts
+import { mkdirSync, readFileSync as readFileSync3, writeFileSync, existsSync, chmodSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+var DEFAULT_API_URL = "https://api.usethrottle.dev";
+var ConfigError = class extends Error {
+  exitCode = 2;
+};
+function home() {
+  return process.env.THROTTLE_CONFIG_HOME || join(homedir(), ".throttle");
+}
+function configPath() {
+  return join(home(), "config.json");
+}
+function loadConfig() {
+  const p = configPath();
+  if (!existsSync(p)) return { profiles: {} };
+  try {
+    return JSON.parse(readFileSync3(p, "utf8"));
+  } catch {
+    throw new ConfigError(`Config at ${p} is not valid JSON`);
+  }
+}
+function saveConfig(cfg) {
+  mkdirSync(home(), { recursive: true });
+  const p = configPath();
+  writeFileSync(p, JSON.stringify(cfg, null, 2) + "\n", { mode: 384 });
+  chmodSync(p, 384);
+}
+function setProfile(name, prof) {
+  const cfg = loadConfig();
+  cfg.profiles[name] = prof;
+  if (!cfg.defaultProfile) cfg.defaultProfile = name;
+  saveConfig(cfg);
+}
+function useProfile(name) {
+  const cfg = loadConfig();
+  if (!cfg.profiles[name]) throw new ConfigError(`No profile named "${name}"`);
+  cfg.defaultProfile = name;
+  saveConfig(cfg);
+}
+function removeProfile(name) {
+  const cfg = loadConfig();
+  if (!cfg.profiles[name]) throw new ConfigError(`No profile named "${name}"`);
+  delete cfg.profiles[name];
+  if (cfg.defaultProfile === name) cfg.defaultProfile = Object.keys(cfg.profiles)[0];
+  saveConfig(cfg);
+}
+function maskKey(key) {
+  if (key.length <= 12) return "****";
+  const m = key.match(/^(sk|pk)_(live|test)_/);
+  const prefix = m ? m[0] : key.slice(0, 4);
+  return `${prefix}\u2026${key.slice(-4)}`;
+}
+function resolveAuth(globals) {
+  const cfg = loadConfig();
+  const profName = globals.profile ?? cfg.defaultProfile;
+  const prof = profName ? cfg.profiles[profName] : void 0;
+  if (globals.profile && !prof) throw new ConfigError(`No profile named "${globals.profile}"`);
+  const apiKey = globals.apiKey ?? process.env.THROTTLE_API_KEY ?? prof?.apiKey;
+  if (!apiKey) throw new ConfigError("No API key. Set one with `throttle config set <name> --api-key sk_...`, pass --api-key, or set $THROTTLE_API_KEY.");
+  const apiBaseUrl = globals.api ?? process.env.THROTTLE_API_URL ?? prof?.apiBaseUrl ?? DEFAULT_API_URL;
+  return { apiKey, apiBaseUrl };
+}
 
+// src/lib/output.ts
+import pc2 from "picocolors";
+function cell(v) {
+  return v === null || v === void 0 ? "" : String(v);
+}
+function printJson(data) {
+  process.stdout.write(JSON.stringify(data, null, 2) + "\n");
+}
+function renderList(rows, columns, opts) {
+  if (opts.json) {
+    printJson(rows);
+    return;
+  }
+  if (rows.length === 0) {
+    process.stdout.write(pc2.dim("No results.\n"));
+    return;
+  }
+  const headers2 = columns.map((c) => c.header);
+  const body = rows.map((r) => columns.map((c) => cell(c.get(r))));
+  const widths = headers2.map((h, i) => Math.max(h.length, ...body.map((row) => row[i].length)));
+  const line = (cells) => cells.map((v, i) => v.padEnd(widths[i])).join("  ").trimEnd();
+  process.stdout.write(pc2.bold(line(headers2)) + "\n");
+  for (const row of body) process.stdout.write(line(row) + "\n");
+}
+function renderObject(obj, opts) {
+  if (opts.json) {
+    printJson(obj);
+    return;
+  }
+  if (obj === null || typeof obj !== "object") {
+    process.stdout.write(cell(obj) + "\n");
+    return;
+  }
+  const entries = Object.entries(obj);
+  const w = Math.max(0, ...entries.map(([k]) => k.length));
+  for (const [k, v] of entries) {
+    const val = v !== null && typeof v === "object" ? JSON.stringify(v) : cell(v);
+    process.stdout.write(`${pc2.dim(k.padEnd(w))}  ${val}
 `);
+  }
+}
+function success(msg) {
+  process.stdout.write(pc2.green("\u2713") + " " + msg + "\n");
 }
 
-// src/version.ts
-import { readFileSync as readFileSync2 } from "fs";
-import { fileURLToPath as fileURLToPath2 } from "url";
-var pkg = JSON.parse(
-  readFileSync2(fileURLToPath2(new URL("../package.json", import.meta.url)), "utf8")
-);
-var CLI_VERSION = pkg.version;
+// src/commands/config.ts
+function register(program2) {
+  const config = program2.command("config").description("Manage local CLI profiles (~/.throttle/config.json)");
+  config.command("set <profile>").description("Create or update a profile").option("--api-key <sk_>", "Throttle API key").option("--api <url>", "API base URL", "https://api.usethrottle.dev").option("--label <text>", "Human label").action((name, opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    if (!g.apiKey) throw new ConfigError("required option '--api-key <sk_>' not specified");
+    setProfile(name, { apiKey: g.apiKey, apiBaseUrl: g.api, label: opts.label });
+    success(`Saved profile "${name}"`);
+  });
+  config.command("use <profile>").description("Set the default profile").action((name) => {
+    useProfile(name);
+    success(`Default profile is now "${name}"`);
+  });
+  config.command("remove <profile>").description("Delete a profile").action((name) => {
+    removeProfile(name);
+    success(`Removed profile "${name}"`);
+  });
+  config.command("list").description("List profiles (keys masked)").option("--json", "Output JSON").action((opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const cfg = loadConfig();
+    const rows = Object.entries(cfg.profiles).map(([name, p]) => ({
+      name,
+      default: name === cfg.defaultProfile ? "*" : "",
+      apiBaseUrl: p.apiBaseUrl,
+      apiKey: maskKey(p.apiKey),
+      label: p.label ?? ""
+    }));
+    renderList(rows, [
+      { header: "NAME", get: (r) => r.name },
+      { header: "DEFAULT", get: (r) => r.default },
+      { header: "API", get: (r) => r.apiBaseUrl },
+      { header: "KEY", get: (r) => r.apiKey },
+      { header: "LABEL", get: (r) => r.label }
+    ], { json: Boolean(g.json) });
+  });
+}
 
-// src/index.ts
-var DEFAULT_API_URL = "https://api.usethrottle.dev";
-initCliSentry();
-var args = process.argv.slice(2);
-var isHelpOrVersion = args.length === 0 || args.includes("--help") || args.includes("-h") || args.includes("--version") || args.includes("-V");
-if (!isHelpOrVersion) {
-  printBanner({ version: CLI_VERSION });
+// src/commands/whoami.ts
+function modeFromKey(key) {
+  if (key.startsWith("sk_live_") || key.startsWith("pk_live_")) return "live";
+  if (key.startsWith("sk_test_") || key.startsWith("pk_test_")) return "test";
+  return "unknown";
 }
-var program = new Command();
-program.name("throttle").description("Throttle command-line tool").version(CLI_VERSION);
-program.command("bc-connect").description("Connect a BigCommerce store to throttle").option("--api <url>", "Throttle API base URL", process.env.THROTTLE_API_URL ?? DEFAULT_API_URL).option("--api-key <sk_*>", "Throttle API key (else $THROTTLE_API_KEY else interactive prompt)").option("--store-hash <hash>", "BigCommerce store hash").option("--access-token <token>", "BigCommerce API token").action(async (opts) => {
-  await bcConnect({
-    apiBaseUrl: opts.api,
-    apiKey: opts.apiKey,
-    storeHash: opts.storeHash,
-    accessToken: opts.accessToken
+function storedPrefix(key) {
+  const hex = key.replace(/^(sk|pk)_(test|live)_/, "");
+  return `${key.slice(0, 2)}_${hex.slice(0, 16)}`;
+}
+function register2(program2) {
+  program2.command("whoami").description("Show the active key context (environment + granted scopes)").action(async (_opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const auth = resolveAuth(g);
+    const info = {
+      apiBaseUrl: auth.apiBaseUrl,
+      mode: modeFromKey(auth.apiKey),
+      keyPrefix: storedPrefix(auth.apiKey)
+    };
+    try {
+      const keys = await callThrottle(auth, "/api/v1/api-keys");
+      const first = keys[0];
+      if (first) {
+        info.applicationId = first.applicationId;
+        info.environmentId = first.environmentId;
+        if (first.environmentSlug) info.environment = first.environmentSlug;
+        if (first.environmentKind) info.environmentKind = first.environmentKind;
+      }
+      const mine = keys.find((k) => k.keyPrefix === info.keyPrefix);
+      info.scopes = mine ? mine.scopes : "(this key not found in the catalog)";
+      info.authenticated = true;
+    } catch (err) {
+      if (!isThrottleError(err)) throw err;
+      info.authenticated = err.statusCode === 401 ? false : true;
+      if (err.statusCode !== 401) {
+        info.note = `key valid; environment/scopes unavailable to api keys (${err.code})`;
+      }
+    }
+    renderObject(info, { json: Boolean(g.json) });
   });
-});
-program.command("bc-disconnect [connectionId]").description("Disconnect a BigCommerce store from throttle").option("--api <url>", "Throttle API base URL", process.env.THROTTLE_API_URL ?? DEFAULT_API_URL).option("--api-key <sk_*>", "Throttle API key (else $THROTTLE_API_KEY else interactive prompt)").option("-y, --yes", "Skip confirmation").action(async (connectionId, opts) => {
-  await bcDisconnect({
-    apiBaseUrl: opts.api,
-    apiKey: opts.apiKey,
-    connectionId,
-    yes: opts.yes
+}
+
+// src/commands/orders.ts
+import { writeFileSync as writeFileSync2 } from "fs";
+
+// src/lib/confirm.ts
+import prompts from "prompts";
+var ConfirmError = class extends Error {
+  exitCode;
+  constructor(m, code = 1) {
+    super(m);
+    this.exitCode = code;
+  }
+};
+async function confirmAction(opts) {
+  if (opts.yes) return;
+  if (opts.json || !process.stdin.isTTY) {
+    throw new ConfirmError("This action needs confirmation. Re-run with --yes to proceed non-interactively.", 2);
+  }
+  const res = await prompts({ type: "confirm", name: "ok", message: opts.message, initial: false }, { onCancel: () => {
+    throw new ConfirmError("Aborted.", 1);
+  } });
+  if (!res.ok) throw new ConfirmError("Aborted.", 1);
+}
+
+// src/commands/fulfillments.ts
+var base = (orderId) => `/api/v1/orders/${orderId}/fulfillments`;
+function registerFulfillments(orders) {
+  const f = orders.command("fulfillments").description("Order fulfillments");
+  f.command("list <orderId>").action(async (orderId, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const data = await callThrottle(resolveAuth(g), base(orderId));
+    renderList(data, [{ header: "ID", get: (x) => x.id }, { header: "STATUS", get: (x) => x.status }, { header: "TYPE", get: (x) => x.type }], { json: Boolean(g.json) });
   });
-});
-var embedConfig = program.command("embed-config").description("Manage embed allowlist + branding (origins permitted to host PaymentEmbed/CheckoutEmbed)");
-embedConfig.command("show").description("Print the current embed config (allowlist + branding)").option("--api <url>", "Throttle API base URL", process.env.THROTTLE_API_URL ?? DEFAULT_API_URL).option("--api-key <sk_*>", "Throttle API key (else $THROTTLE_API_KEY else interactive prompt)").action(async (opts) => {
-  await embedConfigShow({ apiBaseUrl: opts.api, apiKey: opts.apiKey });
-});
-embedConfig.command("set").description("Update the embed config (any combination of --origins, --primary, --logo, --merchant-name)").option("--api <url>", "Throttle API base URL", process.env.THROTTLE_API_URL ?? DEFAULT_API_URL).option("--api-key <sk_*>", "Throttle API key (else $THROTTLE_API_KEY else interactive prompt)").option(
-  "--origins <list>",
-  "Comma-separated parent origins (e.g. https://shop.example.com,https://staging.example.com). No paths, no trailing slash, no wildcards."
-).option("--primary <hex>", "Primary brand color in #rrggbb form").option("--logo <url>", "Logo URL (https)").option("--merchant-name <name>", "Merchant display name").action(async (opts) => {
-  await embedConfigSet({
-    apiBaseUrl: opts.api,
-    apiKey: opts.apiKey,
-    origins: opts.origins,
-    primary: opts.primary,
-    logo: opts.logo,
-    merchantName: opts.merchantName
+  f.command("get <orderId> <id>").action(async (orderId, id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    renderObject(await callThrottle(resolveAuth(g), `${base(orderId)}/${id}`), { json: Boolean(g.json) });
   });
-});
+  f.command("create <orderId>").option("--items <json>", "JSON array of items").action(async (orderId, opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: `Create a fulfillment on ${orderId}?`, yes: g.yes, json: g.json });
+    const body = opts.items ? { items: JSON.parse(opts.items) } : {};
+    renderObject(await callThrottle(resolveAuth(g), base(orderId), { method: "POST", body: JSON.stringify(body) }), { json: Boolean(g.json) });
+  });
+  const transition = (name, verb, suffix, msg) => f.command(`${name} <orderId> <id>`).action(async (orderId, id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: msg(orderId, id), yes: g.yes, json: g.json });
+    const r = await callThrottle(resolveAuth(g), `${base(orderId)}/${id}/${suffix}`, { method: verb });
+    g.json ? renderObject(r, { json: true }) : success(`Fulfillment ${id} \u2192 ${name}`);
+  });
+  transition("processing", "POST", "processing", (o, i) => `Mark fulfillment ${i} processing?`);
+  transition("complete", "POST", "complete", (o, i) => `Complete fulfillment ${i}?`);
+  transition("cancel", "POST", "cancel", (o, i) => `Cancel fulfillment ${i}?`);
+  f.command("ship <orderId> <id>").requiredOption("--carrier <c>").requiredOption("--tracking <t>").action(async (orderId, id, opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: `Mark fulfillment ${id} shipped (${opts.carrier} ${opts.tracking})?`, yes: g.yes, json: g.json });
+    const r = await callThrottle(resolveAuth(g), `${base(orderId)}/${id}/shipment`, { method: "PATCH", body: JSON.stringify({ carrier: opts.carrier, trackingNumber: opts.tracking }) });
+    g.json ? renderObject(r, { json: true }) : success(`Fulfillment ${id} shipped`);
+  });
+}
+
+// src/lib/qs.ts
+function qs(params) {
+  const s = new URLSearchParams();
+  for (const [k, v] of Object.entries(params)) if (v !== void 0) s.set(k, v);
+  const str = s.toString();
+  return str ? `?${str}` : "";
+}
+
+// src/commands/orders.ts
+function register3(program2) {
+  const orders = program2.command("orders").description("Orders + order detail");
+  orders.command("list").description("List orders").option("--status <s>").option("--payment-status <s>").option("--type <t>").option("--source <s>").option("-q, --query <text>").option("--limit <n>").option("--cursor <c>").action(async (opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const auth = resolveAuth(g);
+    const path = "/api/v1/orders" + qs({ status: opts.status, paymentStatus: opts.paymentStatus, type: opts.type, source: opts.source, q: opts.query, limit: opts.limit, cursor: opts.cursor });
+    const data = await callThrottle(auth, path);
+    renderList(data, [
+      { header: "ID", get: (o) => o.id },
+      { header: "NUMBER", get: (o) => o.orderNumber },
+      { header: "STATUS", get: (o) => o.status },
+      { header: "PAYMENT", get: (o) => o.paymentStatus },
+      { header: "TOTAL", get: (o) => `${(o.total / 100).toFixed(2)} ${o.currency}` }
+    ], { json: Boolean(g.json) });
+  });
+  orders.command("get <id>").description("Show an order").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/orders/${id}`), { json: Boolean(g.json) });
+  });
+  orders.command("cancel <id>").description("Cancel an order").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: `Cancel order ${id}?`, yes: g.yes, json: g.json });
+    const r = await callThrottle(resolveAuth(g), `/api/v1/orders/${id}/cancel`, { method: "POST" });
+    g.json ? renderObject(r, { json: true }) : success(`Order ${id} cancelled`);
+  });
+  orders.command("export").description("Export orders as CSV (respects filters)").option("--status <s>").option("--payment-status <s>").option("--type <t>").option("--source <s>").option("-o, --out <file>", "Write to file instead of stdout").action(async (opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const path = "/api/v1/orders/export.csv" + qs({ status: opts.status, paymentStatus: opts.paymentStatus, type: opts.type, source: opts.source });
+    const csv = await callThrottleText(resolveAuth(g), path);
+    if (opts.out) {
+      writeFileSync2(opts.out, csv);
+      success(`Wrote ${opts.out}`);
+    } else process.stdout.write(csv);
+  });
+  orders.command("line-items <id>").description("Edit order line items (JSON for add/update; comma ids for remove)").option("--add <json>", 'JSON array: [{"name","unitPrice","quantity"}]').option("--update <json>", 'JSON array: [{"lineItemId","quantity"?,"unitPrice"?}]').option("--remove <ids>", "Comma-separated line item ids").action(async (id, opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const body = {};
+    if (opts.add) body.add = JSON.parse(opts.add);
+    if (opts.update) body.update = JSON.parse(opts.update);
+    if (opts.remove) body.remove = String(opts.remove).split(",").map((s) => s.trim());
+    await confirmAction({ message: `Edit line items on ${id} (may charge/refund the delta)?`, yes: g.yes, json: g.json });
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/orders/${id}/line-items`, { method: "PATCH", body: JSON.stringify(body) }), { json: Boolean(g.json) });
+  });
+  registerFulfillments(orders);
+}
+
+// src/commands/returns.ts
+function register4(program2) {
+  const r = program2.command("returns").description("Returns / RMA (order detail \u2192 Returns)");
+  r.command("list").requiredOption("--order <orderId>").action(async (opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const data = await callThrottle(resolveAuth(g), `/api/v1/orders/${opts.order}/returns`);
+    renderList(data, [{ header: "ID", get: (x) => x.id }, { header: "STATUS", get: (x) => x.status }, { header: "REFUND", get: (x) => x.refundAmount }], { json: Boolean(g.json) });
+  });
+  r.command("open").requiredOption("--order <orderId>").requiredOption("--items <json>", "JSON array of {lineItemId, quantity}").option("--reason <r>").option("--restock").action(async (opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: `Open a return on order ${opts.order}?`, yes: g.yes, json: g.json });
+    const body = { items: JSON.parse(opts.items), reason: opts.reason, restock: Boolean(opts.restock) };
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/orders/${opts.order}/returns`, { method: "POST", body: JSON.stringify(body) }), { json: Boolean(g.json) });
+  });
+  r.command("get <id>").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/returns/${id}`), { json: Boolean(g.json) });
+  });
+  r.command("transition <id>").requiredOption("--action <a>", "approve|receive|complete|reject|cancel").action(async (id, opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: `Transition return ${id} \u2192 ${opts.action}?`, yes: g.yes, json: g.json });
+    const res = await callThrottle(resolveAuth(g), `/api/v1/returns/${id}/transition`, { method: "POST", body: JSON.stringify({ action: opts.action }) });
+    g.json ? renderObject(res, { json: true }) : success(`Return ${id} \u2192 ${opts.action}`);
+  });
+  r.command("exchange <id>").requiredOption("--items <json>", "JSON array of replacement items").action(async (id, opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: `Complete return ${id} as an exchange (may charge/refund the delta)?`, yes: g.yes, json: g.json });
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/returns/${id}/exchange`, { method: "POST", body: JSON.stringify({ items: JSON.parse(opts.items) }) }), { json: Boolean(g.json) });
+  });
+}
+
+// src/commands/payments.ts
+function register5(program2) {
+  const p = program2.command("payments").description("Payment actions (order detail + invoices)");
+  p.command("get <id>").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/payments/${id}`), { json: Boolean(g.json) });
+  });
+  p.command("refund <id>").option("--amount <cents>", "Amount in minor units (default: full)").option("--reason <r>").action(async (id, opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: `Refund ${opts.amount ? opts.amount + " minor units" : "the full balance"} on payment ${id}?`, yes: g.yes, json: g.json });
+    const body = {};
+    if (opts.amount) body.amount = Number(opts.amount);
+    if (opts.reason) body.reason = opts.reason;
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/payments/${id}/refund`, { method: "POST", body: JSON.stringify(body) }), { json: Boolean(g.json) });
+  });
+  p.command("capture <id>").option("--amount <cents>", "Amount to capture (default: full authorized)").action(async (id, opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: `Capture ${opts.amount ? opts.amount + " minor units" : "the full authorized amount"} on payment ${id}?`, yes: g.yes, json: g.json });
+    const body = opts.amount ? { amount: Number(opts.amount) } : {};
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/payments/${id}/capture`, { method: "POST", body: JSON.stringify(body) }), { json: Boolean(g.json) });
+  });
+  p.command("resend-invoice <id>").description("Re-send the invoice email for a payment").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const r = await callThrottle(resolveAuth(g), `/api/v1/payments/${id}/invoice/resend`, { method: "POST" });
+    g.json ? renderObject(r, { json: true }) : success(`Invoice resent for payment ${id}`);
+  });
+}
+
+// src/commands/customers.ts
+function register6(program2) {
+  const c = program2.command("customers").description("Customers");
+  c.command("list").option("-q, --query <text>").option("--limit <n>").option("--cursor <c>").action(async (opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const data = await callThrottle(resolveAuth(g), "/api/v1/customers" + qs({ q: opts.query, limit: opts.limit, cursor: opts.cursor }));
+    renderList(data, [{ header: "ID", get: (x) => x.id }, { header: "EMAIL", get: (x) => x.email }, { header: "NAME", get: (x) => [x.firstName, x.lastName].filter(Boolean).join(" ") }, { header: "EXTERNAL", get: (x) => x.externalId }], { json: Boolean(g.json) });
+  });
+  c.command("get <id>").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/customers/${id}`), { json: Boolean(g.json) });
+  });
+  c.command("create").requiredOption("--email <e>").option("--name <n>").option("--external-id <x>").action(async (opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const body = { email: opts.email };
+    if (opts.name) body.firstName = opts.name;
+    if (opts.externalId) body.externalId = opts.externalId;
+    renderObject(await callThrottle(resolveAuth(g), "/api/v1/customers", { method: "POST", body: JSON.stringify(body) }), { json: Boolean(g.json) });
+  });
+  c.command("update <id>").option("--email <e>").option("--name <n>").option("--external-id <x>").action(async (id, opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const body = {};
+    if (opts.email) body.email = opts.email;
+    if (opts.name) body.firstName = opts.name;
+    if (opts.externalId !== void 0) body.externalId = opts.externalId;
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/customers/${id}`, { method: "PATCH", body: JSON.stringify(body) }), { json: Boolean(g.json) });
+  });
+  const addr = c.command("addresses").description("Customer addresses");
+  addr.command("list <id>").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const data = await callThrottle(resolveAuth(g), `/api/v1/customers/${id}/addresses`);
+    renderList(data, [{ header: "ID", get: (x) => x.id }, { header: "LINE1", get: (x) => x.line1 }, { header: "CITY", get: (x) => x.city }, { header: "COUNTRY", get: (x) => x.country }], { json: Boolean(g.json) });
+  });
+  addr.command("add <id>").requiredOption("--json-body <json>", "Address JSON").action(async (id, opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/customers/${id}/addresses`, { method: "POST", body: opts.jsonBody }), { json: Boolean(g.json) });
+  });
+  addr.command("update <id> <addrId>").requiredOption("--json-body <json>", "Address JSON").action(async (id, addrId, opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/customers/${id}/addresses/${addrId}`, { method: "PATCH", body: opts.jsonBody }), { json: Boolean(g.json) });
+  });
+  addr.command("remove <id> <addrId>").action(async (id, addrId, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: `Delete address ${addrId} on customer ${id}?`, yes: g.yes, json: g.json });
+    await callThrottle(resolveAuth(g), `/api/v1/customers/${id}/addresses/${addrId}`, { method: "DELETE" });
+    success(`Address ${addrId} removed`);
+  });
+}
+
+// src/commands/subscriptions.ts
+function register7(program2) {
+  const s = program2.command("subscriptions").description("Subscriptions");
+  s.command("list").option("--customer <id>").option("--limit <n>").option("--cursor <c>").action(async (opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const data = await callThrottle(resolveAuth(g), "/api/v1/subscriptions" + qs({ customerId: opts.customer, limit: opts.limit, cursor: opts.cursor }));
+    renderList(data, [{ header: "ID", get: (x) => x.id }, { header: "STATUS", get: (x) => x.status }, { header: "PLAN", get: (x) => x.planName ?? x.planReference }, { header: "AMOUNT", get: (x) => x.amount }, { header: "RENEWS", get: (x) => x.currentPeriodEnd }], { json: Boolean(g.json) });
+  });
+  s.command("get <id>").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/subscriptions/${id}`), { json: Boolean(g.json) });
+  });
+  s.command("cancel <id>").option("--at-period-end", "Cancel at the period boundary instead of now").action(async (id, opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: `Cancel subscription ${id}${opts.atPeriodEnd ? " at period end" : " now"}?`, yes: g.yes, json: g.json });
+    const res = await callThrottle(resolveAuth(g), `/api/v1/subscriptions/${id}/cancel`, { method: "POST", body: JSON.stringify({ atPeriodEnd: Boolean(opts.atPeriodEnd) }) });
+    g.json ? renderObject(res, { json: true }) : success(`Subscription ${id} cancelled`);
+  });
+  for (const verb of ["pause", "resume"]) {
+    s.command(`${verb} <id>`).action(async (id, _o, cmd) => {
+      const g = cmd.optsWithGlobals();
+      await confirmAction({ message: `${verb[0].toUpperCase() + verb.slice(1)} subscription ${id}?`, yes: g.yes, json: g.json });
+      const res = await callThrottle(resolveAuth(g), `/api/v1/subscriptions/${id}/${verb}`, { method: "POST" });
+      g.json ? renderObject(res, { json: true }) : success(`Subscription ${id} ${verb}d`);
+    });
+  }
+  s.command("change-plan <id>").requiredOption("--amount <cents>").requiredOption("--interval <i>").option("--plan-reference <r>").option("--plan-name <n>").option("--effective <e>", "now|period_end", "now").action(async (id, opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: `Change plan on ${id} \u2192 ${opts.amount}/${opts.interval} (${opts.effective})?`, yes: g.yes, json: g.json });
+    const body = { amount: Number(opts.amount), interval: opts.interval, effective: opts.effective };
+    if (opts.planReference) body.planReference = opts.planReference;
+    if (opts.planName) body.planName = opts.planName;
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/subscriptions/${id}/change-plan`, { method: "POST", body: JSON.stringify(body) }), { json: Boolean(g.json) });
+  });
+  s.command("cancel-pending-change <id>").description("Cancel a scheduled plan change").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await callThrottle(resolveAuth(g), `/api/v1/subscriptions/${id}/pending-change`, { method: "DELETE" });
+    success(`Cleared pending change on ${id}`);
+  });
+}
+
+// src/commands/discounts.ts
+function register8(program2) {
+  const d = program2.command("discounts").description("Discount codes");
+  d.command("list").action(async (_o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const data = await callThrottle(resolveAuth(g), "/api/v1/discounts");
+    renderList(data, [{ header: "ID", get: (x) => x.id }, { header: "CODE", get: (x) => x.code }, { header: "TYPE", get: (x) => x.type }, { header: "VALUE", get: (x) => x.value }, { header: "ACTIVE", get: (x) => x.active }], { json: Boolean(g.json) });
+  });
+  d.command("create").requiredOption("--json-body <json>", "Discount JSON (code, type, value, \u2026)").action(async (opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    renderObject(await callThrottle(resolveAuth(g), "/api/v1/discounts", { method: "POST", body: opts.jsonBody }), { json: Boolean(g.json) });
+  });
+  d.command("toggle <id>").option("--active", "Enable").option("--inactive", "Disable").action(async (id, opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    if (Boolean(opts.active) === Boolean(opts.inactive)) {
+      const e = new Error("Pass exactly one of --active or --inactive");
+      e.exitCode = 2;
+      throw e;
+    }
+    const active = Boolean(opts.active);
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/discounts/${id}`, { method: "PATCH", body: JSON.stringify({ active }) }), { json: Boolean(g.json) });
+  });
+  d.command("delete <id>").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: `Delete discount ${id}?`, yes: g.yes, json: g.json });
+    await callThrottle(resolveAuth(g), `/api/v1/discounts/${id}`, { method: "DELETE" });
+    success(`Discount ${id} deleted`);
+  });
+}
+
+// src/commands/webhooks.ts
+function register9(program2) {
+  const w = program2.command("webhooks").description("Webhook endpoints + deliveries");
+  const ep = w.command("endpoints").description("Manage endpoints");
+  ep.command("list").action(async (_o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const data = await callThrottle(resolveAuth(g), "/api/v1/webhook-endpoints");
+    renderList(data, [{ header: "ID", get: (x) => x.id }, { header: "URL", get: (x) => x.url }, { header: "ACTIVE", get: (x) => x.isActive }, { header: "EVENTS", get: (x) => (x.enabledEvents ?? []).length }], { json: Boolean(g.json) });
+  });
+  ep.command("create").requiredOption("--url <u>").requiredOption("--events <list>", "Comma-separated event types").action(async (opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const body = { url: opts.url, enabledEvents: String(opts.events).split(",").map((s) => s.trim()) };
+    renderObject(await callThrottle(resolveAuth(g), "/api/v1/webhook-endpoints", { method: "POST", body: JSON.stringify(body) }), { json: Boolean(g.json) });
+  });
+  ep.command("update <id>").option("--url <u>").option("--events <list>").option("--active <bool>").action(async (id, opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const body = {};
+    if (opts.url) body.url = opts.url;
+    if (opts.events) body.enabledEvents = String(opts.events).split(",").map((s) => s.trim());
+    if (opts.active !== void 0) body.isActive = opts.active === "true";
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/webhook-endpoints/${id}`, { method: "PATCH", body: JSON.stringify(body) }), { json: Boolean(g.json) });
+  });
+  ep.command("delete <id>").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: `Delete webhook endpoint ${id}?`, yes: g.yes, json: g.json });
+    await callThrottle(resolveAuth(g), `/api/v1/webhook-endpoints/${id}`, { method: "DELETE" });
+    success(`Endpoint ${id} deleted`);
+  });
+  ep.command("send-test <id>").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const r = await callThrottle(resolveAuth(g), `/api/v1/webhook-endpoints/${id}/test`, { method: "POST" });
+    g.json ? renderObject(r, { json: true }) : success(`Test event queued to ${id}`);
+  });
+  ep.command("rotate-secret <id>").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: `Rotate the signing secret for ${id}? (old secret stops validating)`, yes: g.yes, json: g.json });
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/webhook-endpoints/${id}/rotate-secret`, { method: "POST" }), { json: Boolean(g.json) });
+  });
+  const del = w.command("deliveries").description("Inspect + replay deliveries");
+  del.command("list").option("--endpoint <id>").option("--status <s>").action(async (opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const data = await callThrottle(resolveAuth(g), "/api/v1/webhook-deliveries" + qs({ endpointId: opts.endpoint, status: opts.status }));
+    renderList(data, [{ header: "ID", get: (x) => x.id }, { header: "EVENT", get: (x) => x.eventType }, { header: "STATUS", get: (x) => x.status }, { header: "ATTEMPTS", get: (x) => x.attemptCount }], { json: Boolean(g.json) });
+  });
+  del.command("get <id>").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/webhook-deliveries/${id}`), { json: Boolean(g.json) });
+  });
+  del.command("replay <id>").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await confirmAction({ message: `Replay delivery ${id}?`, yes: g.yes, json: g.json });
+    const r = await callThrottle(resolveAuth(g), `/api/v1/webhook-deliveries/${id}/replay`, { method: "POST" });
+    g.json ? renderObject(r, { json: true }) : success(`Delivery ${id} replayed`);
+  });
+}
+
+// src/commands/events.ts
+function register10(program2) {
+  const e = program2.command("events").description("Emitted events + catalog");
+  e.command("list").option("--type <t>").option("--limit <n>").option("--cursor <c>").action(async (opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const data = await callThrottle(resolveAuth(g), "/api/v1/events" + qs({ type: opts.type, limit: opts.limit, cursor: opts.cursor }));
+    renderList(data, [{ header: "ID", get: (x) => x.id }, { header: "TYPE", get: (x) => x.type }, { header: "ENTITY", get: (x) => x.entityId }, { header: "CREATED", get: (x) => x.createdAt }], { json: Boolean(g.json) });
+  });
+  e.command("get <id>").action(async (id, _o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    renderObject(await callThrottle(resolveAuth(g), `/api/v1/events/${id}`), { json: Boolean(g.json) });
+  });
+  e.command("types").description("List the event-type catalog").action(async (_o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const data = await callThrottle(resolveAuth(g), "/api/v1/event-types");
+    renderList(data, [{ header: "TYPE", get: (x) => typeof x === "string" ? x : x.type }, { header: "SCOPE", get: (x) => typeof x === "string" ? "" : x.readScope }], { json: Boolean(g.json) });
+  });
+}
+
+// src/commands/embed.ts
+function register11(program2) {
+  const e = program2.command("embed").description("Embed allowlist + branding");
+  e.command("show").action(async (_o, cmd) => {
+    const g = cmd.optsWithGlobals();
+    renderObject(await callThrottle(resolveAuth(g), "/api/v1/embed-config"), { json: Boolean(g.json) });
+  });
+  e.command("set").option("--origins <csv>", "Comma-separated parent origins").option("--primary <hex>", "Primary brand color #rrggbb").option("--logo <url>").option("--merchant-name <name>").action(async (opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    const body = {};
+    if (opts.origins) body.allowedOrigins = String(opts.origins).split(",").map((s) => s.trim()).filter(Boolean);
+    if (opts.primary) body.primaryColor = opts.primary;
+    if (opts.logo) body.logoUrl = opts.logo;
+    if (opts.merchantName) body.merchantName = opts.merchantName;
+    if (Object.keys(body).length === 0) {
+      const err = new Error("Pass at least one of --origins, --primary, --logo, --merchant-name");
+      err.exitCode = 2;
+      throw err;
+    }
+    renderObject(await callThrottle(resolveAuth(g), "/api/v1/embed-config", { method: "PUT", body: JSON.stringify(body) }), { json: Boolean(g.json) });
+  });
+}
+
+// src/index.ts
+initCliSentry();
+var program = new Command();
+program.name("throttle").description("Throttle command-line tool").version(CLI_VERSION, "-v, --version", "Print the CLI version").option("--json", "Machine-readable JSON output (implies non-interactive)").option("-q, --quiet", "Suppress the banner").option("--profile <name>", "Config profile to use").option("--api-key <sk_>", "API key (overrides profile / $THROTTLE_API_KEY)").option("--api <url>", "API base URL (overrides profile / $THROTTLE_API_URL)").option("-y, --yes", "Skip confirmation prompts");
+var args = process.argv.slice(2);
+var bannerless = args.includes("--json") || args.includes("-q") || args.includes("--quiet") || args.length === 0 || args.includes("-h") || args.includes("--help") || args.includes("-v") || args.includes("--version");
+if (!bannerless) printBanner({ version: CLI_VERSION });
+for (const reg of [register, register2, register3, register4, register5, register6, register7, register8, register9, register10, register11]) reg(program);
 program.parseAsync().catch(async (err) => {
+  const code = handleError(err);
   captureCliException(err);
-  console.error(err);
   await flushCliSentry();
-  process.exit(1);
+  process.exit(code);
 });
 //# sourceMappingURL=cli.js.map