@vonpay/checkout-cli 0.20.0 → 0.22.0

package/README.md

@@ -56,6 +56,8 @@ All commands are namespaced under `vonpay checkout`:
 | `vonpay checkout tokens create` | Create a payment-method token for saved-card / MIT flows |
 | `vonpay checkout subscription-products list` | List your subscription products, newest first, each with its price, how often it renews and the terms a sign-up on it states (`--product-ref`, `--status active\|archived`, `--limit`, `--starting-after`). Read-only |
 | `vonpay checkout subscription-products terms <product>` | Read one product's renewal terms (by id or reference): the disclosure to show next to the order button before the sign-up charge, its price phrase and terms version. `--amount` for an intro first payment in minor units. Read-only |
+| `vonpay checkout subscription-products get <product>` | Read one product (by id, or the reference of an active one): price, schedule, routing profile, stores, how many subscriptions are on it (active, past due, paused or held). Read-only. *Unreleased: the API is not served yet* |
+| `vonpay checkout subscription-products create` / `update <product>` / `change-price <product>` / `archive <product>` / `unarchive <product>` | Create and change subscription products (the dashboard's rules). Every write needs `--idempotency-key` (never generated; reuse it only to retry that exact change) and takes `--actor-label` (1-64 lowercase letters, digits and `_ . : -`, starting with a letter or digit). On a live key, a person confirms at the terminal `update`, `archive`, `unarchive` and `change-price --apply-to-existing` (it lowers what existing subscribers pay), after the product is looked up; `create` and a price for new sign-ups only are not prompted. `change-price` exits 0 while a large cut is still being applied (it is saved): a script reading `--json` must check `outcome` (`completed` or `in_progress`) and, on `in_progress`, run the same command with the same `--idempotency-key` again. *Unreleased: the API is not served yet* |
 | `vonpay checkout capabilities` | Show what this merchant's binder supports |
 | `vonpay checkout trigger <event>` | Trigger a synthetic webhook event against your local endpoint (`charge.*`, `refund.failed`, `payment_intent.*`, `mirror.order.created`, `subscription.*`, `merchant.card_testing_suspected`, `session.*`; `vonpay checkout trigger --help` lists them all) |
 | `vonpay checkout listen` | Stream live webhook delivery attempts; optionally re-forward each to a local URL with `--forward-to` |
@@ -97,7 +99,7 @@ The money commands always send an idempotency key. **On a live key you must pass
 
 **A live key is only sent to a Von Payments API host** (`https://checkout.vonpay.com` or `https://checkout-staging.vonpay.com`). If `VONPAY_BASE_URL` or `baseUrl` in `~/.vonpay/config.json` points anywhere else, live-key commands refuse (before any confirmation is asked), and `doctor` skips its key-carrying probe and says why. For a proxy you run yourself, set `VONPAY_ALLOW_CUSTOM_BASE_URL=1` **and** pass `--allow-custom-base-url` on each command (it is accepted after any command); either alone is refused. The environment variable, like the base URL it unlocks, can be left behind by someone else and would then apply to every later command; the flag has to be typed on each command, where it shows. Whoever controls your shell can do both, which is why the money commands still need a person at the terminal and show the API host they will use. The variable is read from the real environment only (the CLI loads no `.env` file). Sandbox keys are not restricted, but a base URL with a user name or password in it, or one that is not a valid URL, is refused for every key.
 
-**A local audit log of every command (on by default).** Each command appends one line to `~/.vonpay/audit/cli-YYYY-MM-DD.jsonl` (UTC date; the folder is readable only by you, each file `0600`): when, which command, test or live key, a key fingerprint, and what happened — `sent`, `local` (a command that sends nothing to the API, such as `login` or `trigger`), `approved` (a person typed `confirm`), `declined`, `withheld` (no person at a terminal), `lookup_refused`, `refused_local` (including a command line the CLI cannot parse, such as an unknown command or option) or `error` (including `interrupted` for Ctrl-C and `internal_error` for a crash) — with the API's error code and request id when there is one, and for money commands the amount, currency and payment, transaction or session id. A money command also writes a `pending` line just before it sends, so a run that is killed mid-send still leaves a trace. **The key fingerprint is the key's first 12 and last 4 characters.** The first 12 are `vp_sk_live_` or `vp_sk_test_` plus one character of the secret, so the log holds 5 of your key's secret characters — enough to tell your keys apart, not enough to use one. A key with a prefix the SDK does not know is written as `[unknown key]` and a short hash instead, with none of its characters. It never holds a request body, metadata, a reason or note, a description, a URL, an email, card data, an idempotency key, the full key, the command line you typed or any other free text; an id, error code or request id that does not have the API's exact shape is written as a fixed placeholder. After an incident, read it to see what was run on this machine — by you, a script or an AI agent — and what happened. `VONPAY_AUDIT_DIR` moves it, `VONPAY_AUDIT_LOG=off` turns it off, and files older than `VONPAY_AUDIT_RETENTION_DAYS` (1–365, default 30) are deleted when a command starts. The folder must be your own real folder: a symbolic link, or a folder another user owns, is refused (with one warning). A day's file holds at most 50 MiB, and the last 5 MiB are kept for money lines: once the file reaches 45 MiB only `pending`, `approved` and `budget_refused` lines, and `sent` / `error` lines of a command that moves money, are written (one warning on stderr), so a loop of cheap refused calls cannot crowd out a later money record. A sandbox key's lines never use those last 5 MiB, so a sandbox loop cannot use them up either. When even a money line no longer fits, the file ends with ONE final line, `{"ts":"…","surface":"cli","version":"…","outcome":"log_full"}`, and nothing more is written to it that day (one more warning). The key's mode is the Node SDK's `keyMode`: `test`, `live`, `publishable_test`, `publishable_live` or `unknown` (held to the live-key rules). If the log cannot be written, the command warns once on stderr and carries on.
+**A local audit log of every command (on by default).** Each command appends one line to `~/.vonpay/audit/cli-YYYY-MM-DD.jsonl` (UTC date; the folder is readable only by you, each file `0600`): when, which command, test or live key, a key fingerprint, and what happened — `sent`, `local` (a command that sends nothing to the API, such as `login` or `trigger`), `approved` (a person typed `confirm`), `declined`, `withheld` (no person at a terminal), `lookup_refused`, `refused_local` (including a command line the CLI cannot parse, such as an unknown command or option) or `error` (including `interrupted` for Ctrl-C and `internal_error` for a crash) — with the API's error code and request id when there is one, and for money commands the amount, currency and payment, transaction or session id (for a subscription product write: the product id, and the price and currency where the command takes them). A money command (and, on a live key, a subscription product write) also writes a `pending` line just before it sends, so a run that is killed mid-send still leaves a trace. **The key fingerprint is the key's first 12 and last 4 characters.** The first 12 are `vp_sk_live_` or `vp_sk_test_` plus one character of the secret, so the log holds 5 of your key's secret characters — enough to tell your keys apart, not enough to use one. A key with a prefix the SDK does not know is written as `[unknown key]` and a short hash instead, with none of its characters. It never holds a request body, metadata, a reason or note, a description, a URL, an email, card data, an idempotency key, the full key, the command line you typed or any other free text; an id, error code or request id that does not have the API's exact shape is written as a fixed placeholder. After an incident, read it to see what was run on this machine — by you, a script or an AI agent — and what happened. `VONPAY_AUDIT_DIR` moves it, `VONPAY_AUDIT_LOG=off` turns it off, and files older than `VONPAY_AUDIT_RETENTION_DAYS` (1–365, default 30) are deleted when a command starts. The folder must be your own real folder: a symbolic link, or a folder another user owns, is refused (with one warning). A day's file holds at most 50 MiB, and the last 5 MiB are kept for money lines: once the file reaches 45 MiB only `pending`, `approved` and `budget_refused` lines, and `sent` / `error` lines of a command that moves money, are written (one warning on stderr), so a loop of cheap refused calls cannot crowd out a later money record. A sandbox key's lines never use those last 5 MiB, so a sandbox loop cannot use them up either. When even a money line no longer fits, the file ends with ONE final line, `{"ts":"…","surface":"cli","version":"…","outcome":"log_full"}`, and nothing more is written to it that day (one more warning). The key's mode is the Node SDK's `keyMode`: `test`, `live`, `publishable_test`, `publishable_live` or `unknown` (held to the live-key rules). If the log cannot be written, the command warns once on stderr and carries on.
 
 `trigger` and `listen --forward-to` never follow a redirect from your endpoint: a 3xx answer is reported as a failure, so the signed event is never re-sent somewhere else.
 

package/dist/index.js

@@ -41,9 +41,9 @@ function jsonErrorsEnabled() {
 function printJsonError(obj) {
   console.error(JSON.stringify(obj));
 }
-function emitCliError(json, text) {
+function emitCliError(json, text2) {
   if (jsonErrors) printJsonError(json);
-  else console.error(text);
+  else console.error(text2);
   return process.exit(1);
 }
 
@@ -245,6 +245,12 @@ var COMMAND_KIND = {
   "checkout tokens create": "api",
   "checkout subscription-products list": "api",
   "checkout subscription-products terms": "api",
+  "checkout subscription-products get": "api",
+  "checkout subscription-products create": "api",
+  "checkout subscription-products update": "api",
+  "checkout subscription-products change-price": "api",
+  "checkout subscription-products archive": "api",
+  "checkout subscription-products unarchive": "api",
   "checkout capabilities": "api",
   "checkout listen": "api",
   "checkout health": "api",
@@ -255,7 +261,12 @@ var MONEY = {
   "checkout payment-intents capture": (o, a) => ({ amount: wholeNumber(o.amountToCapture), target: a[0] }),
   "checkout payment-intents void": (_o, a) => ({ target: a[0] }),
   "checkout refunds create": (o) => ({ amount: wholeNumber(o.amount), currency: o.currency, target: o.paymentIntent ?? o.transaction }),
-  "checkout sessions create": (o) => ({ amount: wholeNumber(o.amount), currency: o.currency })
+  "checkout sessions create": (o) => ({ amount: wholeNumber(o.amount), currency: o.currency }),
+  "checkout subscription-products create": (o) => ({ amount: wholeNumber(o.renewalPrice), currency: o.currency }),
+  "checkout subscription-products update": (_o, a) => ({ target: a[0] }),
+  "checkout subscription-products change-price": (o, a) => ({ amount: wholeNumber(o.renewalPrice), target: a[0], apply_to_existing: o.applyToExisting === true }),
+  "checkout subscription-products archive": (_o, a) => ({ target: a[0] }),
+  "checkout subscription-products unarchive": (_o, a) => ({ target: a[0] })
 };
 function isMoneyCommand(command) {
   return Object.prototype.hasOwnProperty.call(MONEY, command);
@@ -674,15 +685,15 @@ import chalk6 from "chalk";
 
 // src/utils/spinner.ts
 import ora from "ora";
-function startSpinner(text) {
-  return ora({ text, isSilent: jsonErrorsEnabled() }).start();
+function startSpinner(text2) {
+  return ora({ text: text2, isSilent: jsonErrorsEnabled() }).start();
 }
 
 // src/commands/sessions.ts
 import { formatMinorUnits } from "@vonpay/checkout-node";
 
 // src/client-factory.ts
-import { VonPayCheckout } from "@vonpay/checkout-node";
+import { VonPayCheckout, heldAsLive } from "@vonpay/checkout-node";
 
 // src/app-info.ts
 import { readFileSync as readFileSync3 } from "fs";
@@ -797,19 +808,19 @@ function uniqueKey(cleaned, taken) {
 }
 function cleanJsonValue(value, options = {}) {
   const { lines = "keep", maxChars = Number.MAX_SAFE_INTEGER, redact = redactSecretShapes, exactKeys } = options;
-  const text = (s) => {
+  const text2 = (s) => {
     if (PLAIN_TEXT_PATTERN.test(s)) return truncate(s, maxChars);
     return lines === "join" ? safeInline(s, maxChars) : truncate(stripAnsi(s.replace(LINE_SEPARATOR_PATTERN, " ")), maxChars);
   };
   const walk = (v, exact) => {
-    if (typeof v === "string") return exact ? text(v) : redact(text(v));
+    if (typeof v === "string") return exact ? text2(v) : redact(text2(v));
     if (v === null || typeof v !== "object") return v;
     const toJSON = v.toJSON;
     if (typeof toJSON === "function") return walk(toJSON.call(v), exact);
     if (Array.isArray(v)) return v.map((item) => walk(item, exact));
     const taken = /* @__PURE__ */ new Set();
     return Object.fromEntries(
-      Object.entries(v).map(([k, item]) => [uniqueKey(text(k), taken), walk(item, exact || exactKeys?.has(k) === true)])
+      Object.entries(v).map(([k, item]) => [uniqueKey(text2(k), taken), walk(item, exact || exactKeys?.has(k) === true)])
     );
   };
   return walk(value, false);
@@ -890,6 +901,10 @@ var FIELD_PRINTERS = {
   amountCurrency: (e) => e.amountCurrency ? `Renewal charge currency: ${safeInline(String(e.amountCurrency))}` : null,
   pendingKind: (e) => e.pendingKind ? `Schedule change waiting for its customer notice: ${safeInline(String(e.pendingKind))}` : null,
   nextChangeAllowedOn: (e) => e.nextChangeAllowedOn ? `Customer's next schedule change allowed from: ${safeInline(String(e.nextChangeAllowedOn))}` : null,
+  // subscription_pause_too_long (served by checkout production since 2026-11-14):
+  // the business's customer pause limit, checked by the SDK.
+  maxCycles: (e) => typeof e.maxCycles === "number" ? `Longest customer pause this business allows: ${e.maxCycles} billing cycles` : null,
+  maxResumesOn: (e) => e.maxResumesOn ? `Latest resume date for a customer pause: ${safeInline(String(e.maxResumesOn))}` : null,
   // A charge the payment provider refused before any money moved (served in
   // production since 2026-10-30): the failed payment intent that records
   // the attempt. The SDK has checked it is a vpi_* id; printed through
@@ -905,6 +920,9 @@ var FIELD_PRINTERS = {
   // A payment report too large to answer (report_too_large): which limit refused it. The SDK
   // validates both as positive whole numbers.
   maxGroups: (e) => typeof e.maxGroups === "number" ? `Most groups one summary returns: ${e.maxGroups} \u2014 group by fewer dimensions or a coarser time unit, or add filters` : null,
+  // A product price change refused presets_not_lower: the keep-offer prices at or above the
+  // new renewal price. The SDK validates them as positive whole numbers.
+  conflictingPrices: (e) => Array.isArray(e.conflictingPrices) && e.conflictingPrices.length > 0 ? `Keep-offer prices at or above the new price: ${e.conflictingPrices.join(", ")} (minor units) \u2014 send --keep-offer-prices below the new price` : null,
   timeoutMs: (e) => typeof e.timeoutMs === "number" ? `Time limit exceeded: ${e.timeoutMs} ms \u2014 use a shorter window or add filters (retrying unchanged fails the same way)` : null,
   paymentIntentId: (e) => e.paymentIntentId ? `Refused attempt recorded as: ${safeInline(String(e.paymentIntentId))} (status failed, nothing was charged; ` + (e.code === "payment_method_unvaulted" ? "wait a few seconds, then send the same charge again with a NEW --idempotency-key)" : "fix the request or the card, then charge with a NEW --idempotency-key)") : null,
   // On a withheld retry the SDK sets this to RETRY_WITHHELD_HELP.llmHint — the
@@ -939,9 +957,9 @@ function errorJson(err) {
   const message = err instanceof Error ? err.message : String(err);
   return { error: scrubSecrets(oneLine(message)), code: null };
 }
-function exitWithCliError(message, text) {
+function exitWithCliError(message, text2) {
   auditNote({ outcome: "refused_local", code: "local_refusal" }, true);
-  return emitCliError({ error: cleanJsonValue(message, ERROR_JSON_CLEANING), code: null }, text);
+  return emitCliError({ error: cleanJsonValue(message, ERROR_JSON_CLEANING), code: null }, text2);
 }
 function handleError(err) {
   auditError(err);
@@ -985,8 +1003,12 @@ var MONEY_METHODS = {
   refunds: ["create"],
   sessions: ["create"]
 };
-function withAuditIntent(client) {
-  for (const [resource, methods] of Object.entries(MONEY_METHODS)) {
+var LIVE_MONEY_METHODS = {
+  subscriptionProducts: ["create", "update", "changePrice", "archive", "unarchive"]
+};
+function withAuditIntent(client, live) {
+  const watched = { ...MONEY_METHODS, ...live ? LIVE_MONEY_METHODS : {} };
+  for (const [resource, methods] of Object.entries(watched)) {
     const target = client[resource];
     for (const method of methods) {
       const original = target?.[method];
@@ -1003,7 +1025,7 @@ function makeCheckoutClient() {
   const apiKey = requireApiKey();
   const baseUrl = getBaseUrl();
   refuseUnsafeLiveDestination(apiKey);
-  return withAuditIntent(new VonPayCheckout({
+  const client = new VonPayCheckout({
     apiKey,
     ...baseUrl ? { baseUrl } : {},
     // The SDK applies the same host rule at construction; the opt-in is the
@@ -1013,14 +1035,15 @@ function makeCheckoutClient() {
     // The CLI prints every error itself (handleError / --json). Without this the SDK's fallback
     // reporter adds its own `[vonpay] …` line to stderr on EVERY API error, live key included.
     errorReporter: SILENT_ERROR_REPORTER
-  }));
+  });
+  return withAuditIntent(client, heldAsLive(apiKey));
 }
 
 // src/utils/live-key.ts
 import { createInterface as createInterface2 } from "readline";
 import chalk5 from "chalk";
 import { Option as Option2 } from "commander";
-import { heldAsLive, isLiveKey } from "@vonpay/checkout-node";
+import { heldAsLive as heldAsLive2, isLiveKey } from "@vonpay/checkout-node";
 var CONFIRM_WORD = "confirm";
 var terminal = {
   /**
@@ -1052,7 +1075,7 @@ function keyFingerprint(key) {
   return m ? `${m[1]}${m[2]}\u2026` : "a key that is not a sandbox key";
 }
 async function confirmLiveAction(key, summary, opts = {}) {
-  if (!heldAsLive(key)) return;
+  if (!heldAsLive2(key)) return;
   if (!terminal.isInteractive()) {
     const message = `Refusing to ${summary.action} with a live key: no person is at an interactive terminal to confirm it. A live-key action must be confirmed by a person typing at a terminal (stdin and stdout both a terminal); scripts, CI jobs and AI agents cannot confirm it, and --confirm-live is no longer enough. Use a sandbox key (vp_sk_test_\u2026) for automation, or run the command yourself in a terminal. Nothing was sent.`;
     auditNote({ outcome: "withheld", code: "no_terminal" });
@@ -1087,7 +1110,7 @@ function retiredConfirmLiveOption() {
   ).hideHelp();
 }
 function warnLiveSecretFlag(key, flag) {
-  if (!heldAsLive(key)) return;
+  if (!heldAsLive2(key)) return;
   console.warn(
     chalk5.yellow(
       `Warning: passing ${flag} as a command argument with a live key exposes it to shell history and process-list (\`ps\`). Consider piping or env-injecting the value instead.`
@@ -1098,9 +1121,9 @@ function warnLiveSecretFlag(key, flag) {
 // src/utils/amount.ts
 var WHOLE_NUMBER = /^\d+$/;
 function parseMinorUnits(raw, flag) {
-  const text = raw.trim();
-  const value = Number(text);
-  if (!WHOLE_NUMBER.test(text) || !Number.isSafeInteger(value)) {
+  const text2 = raw.trim();
+  const value = Number(text2);
+  if (!WHOLE_NUMBER.test(text2) || !Number.isSafeInteger(value)) {
     return {
       ok: false,
       message: `${flag} must be a whole number in minor units (the currency's smallest unit): for example 1499 = 14.99 USD. Got ${JSON.stringify(raw)}.`
@@ -1291,7 +1314,7 @@ import { formatMinorUnits as formatMinorUnits3 } from "@vonpay/checkout-node";
 // src/utils/idempotency.ts
 import { randomUUID } from "crypto";
 import chalk7 from "chalk";
-import { heldAsLive as heldAsLive2 } from "@vonpay/checkout-node";
+import { heldAsLive as heldAsLive3 } from "@vonpay/checkout-node";
 function resolveIdempotencyKey(flag) {
   const given = flag?.trim();
   if (given) return { key: given, generated: false };
@@ -1299,7 +1322,7 @@ function resolveIdempotencyKey(flag) {
 }
 function idempotencyKeyFor(flag, what, apiKey) {
   const { key, generated } = resolveIdempotencyKey(flag);
-  if (generated && apiKey !== void 0 && heldAsLive2(apiKey)) {
+  if (generated && apiKey !== void 0 && heldAsLive3(apiKey)) {
     const message = `Refusing to send this ${what} with a live key without --idempotency-key. Choose one key for this ${what} (for example your order id plus the action, such as "order_1042:${what}") and pass the SAME key if you ever run the command again: a new key is a new action and can move money twice. Nothing was sent.`;
     auditNote({ outcome: "refused_local", code: "idempotency_key_required" });
     exitWithCliError(message, chalk7.red(message));
@@ -1313,6 +1336,13 @@ function idempotencyKeyFor(flag, what, apiKey) {
   }
   return key;
 }
+function requiredIdempotencyKey(flag, what) {
+  const given = flag?.trim();
+  if (given) return given;
+  const message = `Refusing to send this ${what} without --idempotency-key: Von Payments refuses it without one, and the CLI never makes one up. Choose one key for this ${what} (for example "spring-offer:${what.replace(/ /g, "-")}") and pass the SAME key if you ever run the command again: a new key is a new change. Nothing was sent.`;
+  auditNote({ outcome: "refused_local", code: "idempotency_key_required" });
+  exitWithCliError(message, chalk7.red(message));
+}
 var DISPLAYABLE_KEY = /^[A-Za-z0-9_:.-]{1,64}$/;
 function displayIdempotencyKey(key) {
   return DISPLAYABLE_KEY.test(key) ? key : "[custom key withheld]";
@@ -1358,7 +1388,7 @@ function parseMetadata(pairs) {
   return out;
 }
 var METADATA_FILTER_KEY = /^[A-Za-z0-9_.:-]{1,64}$/;
-var METADATA_FILTER_VALUE_MAX = 500;
+var METADATA_FILTER_VALUE_MAX = 128;
 function assertMetadataFilterKey(key, flag) {
   if (!METADATA_FILTER_KEY.test(key)) {
     throw new Error(
@@ -1378,6 +1408,41 @@ function parseMetadataFilter(raw, flag) {
   return { [key]: value };
 }
 
+// src/utils/processor-detail.ts
+import { SAFE_CODE_PATTERN, SAFE_CONNECTION_ID_PATTERN, safeValueOrWithheld } from "@vonpay/checkout-node";
+var INCLUDE_PROCESSOR_DETAIL_HELP = "With --json: also print the card processor's own answer (untrusted text), every try with its connection name, the connection's name, and the card's first six digits";
+var PROCESSOR_DETAIL_KEYS = ["processorResponse", "attempts", "attemptsStatus"];
+function cardForDisplay(card) {
+  if (card === null || typeof card !== "object" || Array.isArray(card)) return card;
+  const c = card;
+  return { brand: c.brand ?? null, last4: c.last4 ?? null };
+}
+function attemptSummary(a) {
+  return {
+    connectionId: safeValueOrWithheld(a.processorConnection?.id, SAFE_CONNECTION_ID_PATTERN),
+    result: safeValueOrWithheld(a.result, SAFE_CODE_PATTERN),
+    declineCode: safeValueOrWithheld(a.declineCode, SAFE_CODE_PATTERN),
+    outcome: safeValueOrWithheld(a.outcome, SAFE_CODE_PATTERN)
+  };
+}
+function attemptsStatusForDisplay(value) {
+  return safeValueOrWithheld(value, SAFE_CODE_PATTERN);
+}
+function connectionForDisplay(connection) {
+  if (connection === null || typeof connection !== "object" || Array.isArray(connection)) return connection;
+  return { id: connection.id ?? null };
+}
+function withoutProcessorDetail(obj, includeProcessorDetail) {
+  const src = obj;
+  if (includeProcessorDetail) return src;
+  const out = { ...src };
+  for (const k of PROCESSOR_DETAIL_KEYS) delete out[k];
+  if ("card" in out) out.card = cardForDisplay(out.card);
+  if ("processorConnection" in out) out.processorConnection = connectionForDisplay(out.processorConnection);
+  return out;
+}
+var PROCESSOR_DETAIL_NEEDS_JSON = "--include-processor-detail is used with --json.";
+
 // src/commands/payment-reports.ts
 import chalk8 from "chalk";
 import { formatMinorUnits as formatMinorUnits2 } from "@vonpay/checkout-node";
@@ -1430,12 +1495,24 @@ var PAYMENT_LIST_JSON_FIELDS = [
   "declineCode",
   "action",
   "ruleCode",
-  "networkAdvice"
+  "networkAdvice",
+  // Each try as the safe summary only (connection id, result, decline code, outcome), and
+  // whether that list is the full record. --include-processor-detail prints the whole tries.
+  "attempts",
+  "attemptsStatus"
 ];
-function listItemJson(pi, includeMetadata) {
-  if (includeMetadata) return pi;
+function listItemJson(pi, includeMetadata, includeProcessorDetail) {
   const src = pi;
-  return Object.fromEntries(PAYMENT_LIST_JSON_FIELDS.filter((k) => src[k] !== void 0).map((k) => [k, src[k]]));
+  const out = includeMetadata ? { ...src } : Object.fromEntries(PAYMENT_LIST_JSON_FIELDS.filter((k) => src[k] !== void 0).map((k) => [k, src[k]]));
+  if (includeProcessorDetail) {
+    if (src.processorResponse !== void 0) out.processorResponse = src.processorResponse;
+    return out;
+  }
+  const safe = withoutProcessorDetail(out, false);
+  if (src.attemptsStatus !== void 0) safe.attemptsStatus = attemptsStatusForDisplay(src.attemptsStatus);
+  if (pi.attempts === null) safe.attempts = null;
+  else if (Array.isArray(pi.attempts)) safe.attempts = pi.attempts.map(attemptSummary);
+  return safe;
 }
 var ALL_DEFAULT_MAX_ITEMS = 1e4;
 function stoppedAtDefaultCap() {
@@ -1450,6 +1527,7 @@ function buildListParams(opts) {
   if (opts.startingAfter !== void 0) params.startingAfter = opts.startingAfter;
   if (opts.maxItems !== void 0 && !opts.all) throw new Error("--max-items is used with --all.");
   if (opts.includeMetadata && !opts.json) throw new Error("--include-metadata is used with --json.");
+  if (opts.includeProcessorDetail && !opts.json) throw new Error(PROCESSOR_DETAIL_NEEDS_JSON);
   const maxItems = opts.maxItems !== void 0 ? positiveWholeNumber(opts.maxItems, "--max-items") : opts.all ? ALL_DEFAULT_MAX_ITEMS : void 0;
   return { params, ...maxItems !== void 0 ? { maxItems } : {} };
 }
@@ -1514,7 +1592,7 @@ var FILTER_HELP = {
   createdLt: "End of the window, exclusive (default: now). At most 31 days after the start (7 with summary --group-by hour)",
   outcome: "Only these outcomes, comma-separated (e.g. bank_declined,refused_before_bank)",
   store: "Only payments for this connected store hostname (e.g. shop.example.com)",
-  metadata: "Only payments with this metadata tag, key=value (ONE tag; key 1-64 of letters, digits, _ . : -; value 1-500 characters)",
+  metadata: "Only payments with this metadata tag, key=value (ONE tag; key 1-64 of letters, digits, _ . : -; value 1-128 characters)",
   cardBrand: "Only these card brands, comma-separated (visa, mastercard, amex, discover, unionpay, jcb, diners, unknown)",
   currency: "Only payments in this currency (e.g. USD)",
   initiator: "merchant (merchant-initiated charges on a saved card) or customer",
@@ -1541,7 +1619,7 @@ function addPaymentReportCommands(intents) {
   ).option("--max-items <n>", `With --all: stop after this many payments (default ${ALL_DEFAULT_MAX_ITEMS})`).option(
     "--json",
     "Output JSON: each payment's status, outcome, amount, card, store and decline fields \u2014 not your metadata (with --all: one JSON array)"
-  ).option("--include-metadata", "With --json: print every field of each payment, your metadata included").action(async (opts) => {
+  ).option("--include-metadata", "With --json: print every field of each payment, your metadata included (not the processor detail: see --include-processor-detail)").option("--include-processor-detail", INCLUDE_PROCESSOR_DETAIL_HELP).action(async (opts) => {
     let built;
     try {
       built = buildListParams(opts);
@@ -1558,7 +1636,7 @@ function addPaymentReportCommands(intents) {
         });
         if (opts.json) {
           const items = [];
-          for await (const pi of pager) items.push(listItemJson(pi, opts.includeMetadata));
+          for await (const pi of pager) items.push(listItemJson(pi, opts.includeMetadata, opts.includeProcessorDetail));
           spinner.stop();
           console.log(jsonOutput(items));
           if (opts.maxItems === void 0 && items.length >= ALL_DEFAULT_MAX_ITEMS) console.error(stoppedAtDefaultCap());
@@ -1579,7 +1657,12 @@ function addPaymentReportCommands(intents) {
       const page = await client.paymentIntents.list(built.params);
       spinner.stop();
       if (opts.json) {
-        console.log(jsonOutput({ ...page, data: page.data.map((pi) => listItemJson(pi, opts.includeMetadata)) }));
+        console.log(
+          jsonOutput({
+            ...page,
+            data: page.data.map((pi) => listItemJson(pi, opts.includeMetadata, opts.includeProcessorDetail))
+          })
+        );
         return;
       }
       for (const line of paymentListLines(page)) console.log(line);
@@ -1620,6 +1703,9 @@ function addPaymentReportCommands(intents) {
 }
 
 // src/commands/payment-intents.ts
+function refuseProcessorDetailWithoutJson(opts) {
+  if (opts.includeProcessorDetail && !opts.json) exitWithCliError(PROCESSOR_DETAIL_NEEDS_JSON, chalk9.red(PROCESSOR_DETAIL_NEEDS_JSON));
+}
 var MIT_INITIATORS = ["merchant", "customer"];
 var MIT_REASONS = [
   "recurring",
@@ -1755,7 +1841,8 @@ function paymentIntentsCommand() {
   ).option("--buyer-email <email>", "Buyer email for this charge").option(
     "--idempotency-key <key>",
     "Idempotency key for this charge. Reuse the SAME key to retry the same charge safely. REQUIRED on a live key; on a sandbox key generated (and printed) when omitted"
-  ).addOption(retiredConfirmLiveOption()).option("--json", "Output raw JSON").action(async (raw) => {
+  ).addOption(retiredConfirmLiveOption()).option("--json", "Output raw JSON").option("--include-processor-detail", INCLUDE_PROCESSOR_DETAIL_HELP).action(async (raw) => {
+    refuseProcessorDetailWithoutJson(raw);
     const apiKey = requireApiKey();
     const opts = { ...raw, amount: minorUnitsOrExit(raw.amount, "--amount") };
     const captureMethod = opts.captureMethod?.toLowerCase();
@@ -1797,7 +1884,7 @@ function paymentIntentsCommand() {
       });
       spinner.stop();
       if (opts.json) {
-        console.log(jsonOutput(intent));
+        console.log(jsonOutput(withoutProcessorDetail(intent, opts.includeProcessorDetail)));
       } else {
         console.log(chalk9.green("\u2713 Payment intent created"));
         printPaymentIntent(intent);
@@ -1809,14 +1896,15 @@ function paymentIntentsCommand() {
   });
   intents.command("get").description(
     "Read a payment intent back \u2014 the way to check a payment whose outcome was unclear before doing anything else"
-  ).argument("<id>", "Payment intent ID (vpi_*)").option("--json", "Output raw JSON").action(async (id, opts) => {
+  ).argument("<id>", "Payment intent ID (vpi_*)").option("--json", "Output raw JSON").option("--include-processor-detail", INCLUDE_PROCESSOR_DETAIL_HELP).action(async (id, opts) => {
+    refuseProcessorDetailWithoutJson(opts);
     const client = makeCheckoutClient();
     const spinner = startSpinner("Fetching payment intent...");
     try {
       const intent = await client.paymentIntents.retrieve(id);
       spinner.stop();
       if (opts.json) {
-        console.log(jsonOutput(intent));
+        console.log(jsonOutput(withoutProcessorDetail(intent, opts.includeProcessorDetail)));
       } else {
         printPaymentIntent(intent);
       }
@@ -1831,8 +1919,9 @@ function paymentIntentsCommand() {
   ).option(
     "--idempotency-key <key>",
     "Idempotency key. Reuse the SAME key to retry safely. REQUIRED on a live key; on a sandbox key generated (and printed) when omitted"
-  ).addOption(retiredConfirmLiveOption()).option("--json", "Output raw JSON").action(
+  ).addOption(retiredConfirmLiveOption()).option("--json", "Output raw JSON").option("--include-processor-detail", INCLUDE_PROCESSOR_DETAIL_HELP).action(
     async (id, opts) => {
+      refuseProcessorDetailWithoutJson(opts);
       const apiKey = requireApiKey();
       const amountToCapture = optionalMinorUnitsOrExit(
         opts.amountToCapture,
@@ -1866,7 +1955,7 @@ function paymentIntentsCommand() {
         );
         spinner.stop();
         if (opts.json) {
-          console.log(jsonOutput(intent));
+          console.log(jsonOutput(withoutProcessorDetail(intent, opts.includeProcessorDetail)));
         } else {
           const captureLabel = amountToCapture !== void 0 ? ` (partial: ${formatMinorUnits3(amountToCapture, intent.currency)})` : "";
           console.log(chalk9.green(`\u2713 Payment intent captured${captureLabel}`));
@@ -1881,8 +1970,9 @@ function paymentIntentsCommand() {
   intents.command("void").description("Void an authorized (uncaptured) payment intent").argument("<id>", "Payment intent ID (vpi_*)").option(
     "--idempotency-key <key>",
     "Idempotency key. Reuse the SAME key to retry safely. REQUIRED on a live key; on a sandbox key generated (and printed) when omitted"
-  ).addOption(retiredConfirmLiveOption()).option("--json", "Output raw JSON").action(
+  ).addOption(retiredConfirmLiveOption()).option("--json", "Output raw JSON").option("--include-processor-detail", INCLUDE_PROCESSOR_DETAIL_HELP).action(
     async (id, opts) => {
+      refuseProcessorDetailWithoutJson(opts);
       const apiKey = requireApiKey();
       refuseUnsafeLiveDestination(apiKey);
       const idempotencyKey = idempotencyKeyFor(opts.idempotencyKey, "void", apiKey);
@@ -1905,7 +1995,7 @@ function paymentIntentsCommand() {
         const intent = await client.paymentIntents.void(id, { idempotencyKey });
         spinner.stop();
         if (opts.json) {
-          console.log(jsonOutput(intent));
+          console.log(jsonOutput(withoutProcessorDetail(intent, opts.includeProcessorDetail)));
         } else {
           console.log(chalk9.green("\u2713 Payment intent voided"));
           printPaymentIntent(intent);
@@ -1923,7 +2013,7 @@ function paymentIntentsCommand() {
 // src/commands/refunds.ts
 import { Command as Command6 } from "commander";
 import chalk10 from "chalk";
-import { formatMinorUnits as formatMinorUnits4, heldAsLive as heldAsLive3, VonPayError as VonPayError2 } from "@vonpay/checkout-node";
+import { formatMinorUnits as formatMinorUnits4, heldAsLive as heldAsLive4, VonPayError as VonPayError2 } from "@vonpay/checkout-node";
 function present(v) {
   return v !== void 0 && v.trim() !== "";
 }
@@ -2085,11 +2175,11 @@ function refundsCommand() {
       handleError(err);
     }
     const target = resolveRefundTarget(opts);
-    const sessionProblem = refundSessionProblem(target, opts.sessionId, heldAsLive3(apiKey));
+    const sessionProblem = refundSessionProblem(target, opts.sessionId, heldAsLive4(apiKey));
     if (sessionProblem) exitWithCliError(sessionProblem, chalk10.red(sessionProblem));
     refuseUnsafeLiveDestination(apiKey);
     const idempotencyKey = idempotencyKeyFor(opts.idempotencyKey, "refund", apiKey);
-    const lookedUp = heldAsLive3(apiKey) && terminal.isInteractive() ? await refundLookupDetails(makeCheckoutClient(), target, opts.sessionId?.trim(), params.amount, params.currency) : [];
+    const lookedUp = heldAsLive4(apiKey) && terminal.isInteractive() ? await refundLookupDetails(makeCheckoutClient(), target, opts.sessionId?.trim(), params.amount, params.currency) : [];
     await confirmLiveAction(
       apiKey,
       {
@@ -2262,8 +2352,9 @@ function formatTokenCard(card) {
 // src/commands/subscription-products.ts
 import { Command as Command8 } from "commander";
 import chalk12 from "chalk";
-import { formatMinorUnits as formatMinorUnits5 } from "@vonpay/checkout-node";
+import { formatMinorUnits as formatMinorUnits5, heldAsLive as heldAsLive5, VonPayError as VonPayError3 } from "@vonpay/checkout-node";
 var STATUSES = ["active", "archived"];
+var INTERVALS = ["day", "week", "month"];
 function buildListParams2(opts) {
   const params = {};
   if (opts.productRef !== void 0) params.productRef = opts.productRef;
@@ -2285,18 +2376,149 @@ function buildTermsParams(opts) {
   if (parsed.value < 1) throw new Error(`--amount must be at least 1 (minor units); got ${JSON.stringify(opts.amount)}.`);
   return { amount: parsed.value };
 }
+function minorUnits(raw, flag) {
+  const parsed = parseMinorUnits(raw, flag);
+  if (!parsed.ok) throw new Error(parsed.message);
+  return parsed.value;
+}
+function nonEmpty(raw, flag) {
+  if (raw.trim() === "") throw new Error(`${flag} must not be empty.`);
+  return raw;
+}
+function intervalFlag(raw) {
+  const unit = raw.trim().toLowerCase();
+  if (!INTERVALS.includes(unit)) {
+    throw new Error(`--interval must be day, week or month; got ${JSON.stringify(raw)}.`);
+  }
+  return unit;
+}
+var STORE_LINK_KEYS = ["platform", "store", "store_product_id", "store_variant_id"];
+var STORE_LINK_REQUIRED = ["platform", "store", "store_product_id"];
+function parseStoreLink(raw) {
+  const fields = {};
+  for (const part of raw.split(",")) {
+    const idx = part.indexOf("=");
+    const key = (idx === -1 ? part : part.slice(0, idx)).trim();
+    const value = idx === -1 ? "" : part.slice(idx + 1).trim();
+    if (!STORE_LINK_KEYS.includes(key)) {
+      throw new Error(
+        `--store-link: ${JSON.stringify(key)} is not a store link field. Use ${STORE_LINK_KEYS.join(", ")} as key=value pairs separated by commas; got ${JSON.stringify(raw)}.`
+      );
+    }
+    const k = key;
+    if (fields[k] !== void 0) throw new Error(`--store-link: ${k} is given twice in ${JSON.stringify(raw)}.`);
+    if (value === "") throw new Error(`--store-link: ${k} has no value in ${JSON.stringify(raw)}.`);
+    fields[k] = value;
+  }
+  const missing = STORE_LINK_REQUIRED.filter((k) => fields[k] === void 0);
+  if (missing.length > 0) {
+    throw new Error(`--store-link needs ${missing.join(", ")}; got ${JSON.stringify(raw)}.`);
+  }
+  return {
+    platform: fields.platform,
+    store: fields.store,
+    storeProductId: fields.store_product_id,
+    ...fields.store_variant_id !== void 0 ? { storeVariantId: fields.store_variant_id } : {}
+  };
+}
+function buildCreateParams2(opts) {
+  const required = [
+    ["name", "--name"],
+    ["productRef", "--product-ref"],
+    ["renewalPrice", "--renewal-price"],
+    ["currency", "--currency"],
+    ["interval", "--interval"],
+    ["intervalCount", "--interval-count"]
+  ];
+  const missing = required.filter(([k]) => opts[k] === void 0).map(([, flag]) => flag);
+  if (missing.length > 0) throw new Error(`A new subscription product needs ${missing.join(", ")}.`);
+  const params = {
+    name: nonEmpty(opts.name, "--name"),
+    productRef: nonEmpty(opts.productRef, "--product-ref"),
+    renewalPrice: minorUnits(opts.renewalPrice, "--renewal-price"),
+    currency: nonEmpty(opts.currency, "--currency").trim().toUpperCase(),
+    interval: intervalFlag(opts.interval),
+    intervalCount: positiveWholeNumber(opts.intervalCount, "--interval-count")
+  };
+  if (opts.routingProfile !== void 0) params.routingProfile = nonEmpty(opts.routingProfile, "--routing-profile").trim();
+  if (opts.storeLink !== void 0 && opts.storeLink.length > 0) params.storeLinks = opts.storeLink.map(parseStoreLink);
+  return params;
+}
+function buildUpdateParams(opts) {
+  if (opts.routingProfile !== void 0 && opts.removeRoutingProfile) {
+    throw new Error("Pass --routing-profile or --remove-routing-profile, not both.");
+  }
+  if (opts.storeLink !== void 0 && opts.storeLink.length > 0 && opts.removeStoreLinks) {
+    throw new Error("Pass --store-link or --remove-store-links, not both.");
+  }
+  if (opts.interval === void 0 !== (opts.intervalCount === void 0)) {
+    throw new Error("Pass --interval and --interval-count together (the schedule is one setting).");
+  }
+  const params = {};
+  if (opts.name !== void 0) params.name = nonEmpty(opts.name, "--name");
+  if (opts.interval !== void 0) {
+    params.interval = intervalFlag(opts.interval);
+    params.intervalCount = positiveWholeNumber(opts.intervalCount, "--interval-count");
+  }
+  if (opts.routingProfile !== void 0) params.routingProfile = nonEmpty(opts.routingProfile, "--routing-profile").trim();
+  if (opts.removeRoutingProfile) params.routingProfile = null;
+  if (opts.storeLink !== void 0 && opts.storeLink.length > 0) params.storeLinks = opts.storeLink.map(parseStoreLink);
+  if (opts.removeStoreLinks) params.storeLinks = [];
+  if (Object.keys(params).length === 0) {
+    throw new Error(
+      "Nothing to change: pass at least one of --name, --interval with --interval-count, --routing-profile, --remove-routing-profile, --store-link, --remove-store-links. The price changes with change-price."
+    );
+  }
+  return params;
+}
+function buildChangePriceParams(opts) {
+  if (opts.renewalPrice === void 0) throw new Error("A price change needs --renewal-price (the new price, in minor units).");
+  const params = {
+    renewalPrice: minorUnits(opts.renewalPrice, "--renewal-price"),
+    applyToExisting: opts.applyToExisting === true
+  };
+  if (opts.keepOfferPrices !== void 0) {
+    params.keepOfferPrices = parseListFlag(opts.keepOfferPrices, "--keep-offer-prices").map((p) => minorUnits(p, "--keep-offer-prices"));
+  }
+  return params;
+}
+var ACTOR_LABEL_PATTERN = /^[a-z0-9][a-z0-9_.:-]{0,63}$/;
+function actorLabelFlag(raw) {
+  const label = raw.trim();
+  if (label === "") throw new Error("--actor-label must not be empty.");
+  if (!ACTOR_LABEL_PATTERN.test(label)) {
+    throw new Error(
+      "--actor-label must be 1-64 characters: lowercase letters, digits and _ . : - , starting with a letter or digit (for example campaign-tool). Nothing was sent."
+    );
+  }
+  return label;
+}
+function writeOptions(opts, what) {
+  const idempotencyKey = requiredIdempotencyKey(opts.idempotencyKey, what);
+  if (opts.actorLabel === void 0) return { idempotencyKey };
+  let actorLabel;
+  try {
+    actorLabel = actorLabelFlag(opts.actorLabel);
+  } catch (err) {
+    exitOnBadFlag2(err);
+  }
+  return { idempotencyKey, actorLabel };
+}
 var LEGAL_TEXT_MAX_CHARS = 500;
 var CUT_MARK = "\u2026 [CUT: not the full text; use --json to read all of it]";
 function legalText(raw) {
   const clean = safeInline(raw, Number.MAX_SAFE_INTEGER);
   return clean.length > LEGAL_TEXT_MAX_CHARS ? { text: `${clean.slice(0, LEGAL_TEXT_MAX_CHARS)}${CUT_MARK}`, cut: true } : { text: clean, cut: false };
 }
+function text(v, max = 200) {
+  return typeof v === "string" ? safeInline(v, max) : "?";
+}
 function money(amount, currency) {
   if (typeof amount !== "number") return "?";
-  return currency ? safeInline(formatMinorUnits5(amount, currency)) : `${amount} in minor units`;
+  return typeof currency === "string" && currency ? safeInline(formatMinorUnits5(amount, currency)) : `${amount} in minor units`;
 }
 function every(count, interval) {
-  if (!interval) return "";
+  if (typeof interval !== "string" || !interval) return "";
   const unit = safeInline(interval);
   return typeof count === "number" && count !== 1 ? `every ${count} ${unit}s` : `every ${unit}`;
 }
@@ -2304,13 +2526,63 @@ function statusTone2(status) {
   return status === "active" ? chalk12.green(status) : chalk12.yellow(status);
 }
 function productLines(p) {
-  const head = `  ${safeInline(p.id)}  ${statusTone2(safeInline(p.status))}  ${safeInline(p.name, 120)}  (ref ${safeInline(p.productRef, 128)})`;
+  const head = `  ${text(p.id)}  ${statusTone2(text(p.status))}  ${text(p.name, 120)}  (ref ${text(p.productRef, 128)})`;
   const schedule = p.interval ? `first payment ${money(p.firstPrice, p.currency)}, then ${money(p.renewalPrice, p.currency)} ${every(p.intervalCount, p.interval)}` : `${money(p.renewalPrice, p.currency)} \u2014 no renewal schedule yet (it cannot start a subscription)`;
   const lines = [head, `    ${schedule}`];
   const terms = p.terms;
   if (terms && typeof terms.disclosure === "string") lines.push(`    Disclosure: ${legalText(terms.disclosure).text}`);
   return lines;
 }
+function productDetailLines(p) {
+  const lines = productLines(p);
+  const rp = p.routingProfile;
+  if (rp && typeof rp === "object") {
+    const r = rp;
+    lines.push(`    Routing profile: ${text(r.id)} (${text(r.name, 120)}, ${text(r.status)})`);
+  } else {
+    lines.push("    Routing profile: none");
+  }
+  const links = Array.isArray(p.storeLinks) ? p.storeLinks : [];
+  if (links.length === 0) lines.push("    Sold in: no store");
+  for (const raw of links) {
+    if (!raw || typeof raw !== "object") continue;
+    const l = raw;
+    const variant = typeof l.storeVariantId === "string" ? ` variant ${text(l.storeVariantId)}` : "";
+    const storePrice = typeof l.storePrice === "number" ? ` \u2014 the store's price when last read: ${money(l.storePrice, l.storeCurrency)} (subscribers pay the product's price)` : "";
+    lines.push(`    Sold in: ${text(l.platform)} ${text(l.store)} product ${text(l.storeProductId)}${variant}${storePrice}`);
+  }
+  lines.push(`    Subscriptions on it (active, past due, paused or held): ${typeof p.activeSubscriptionCount === "number" ? p.activeSubscriptionCount : "?"}`);
+  const warnings = Array.isArray(p.warnings) ? p.warnings : [];
+  for (const raw of warnings) {
+    if (!raw || typeof raw !== "object") continue;
+    const w = raw;
+    lines.push(chalk12.yellow(`    \u26A0 ${text(w.code)} (${text(w.field)}): ${text(w.message, 500)}`));
+  }
+  return lines;
+}
+var REPLAYED_LINE = "  This answers an earlier request with the same --idempotency-key: nothing was changed a second time.";
+var UNCHANGED_LINE = "  Nothing changed: the product was already that way (the key was not kept).";
+function changedLines(result, done) {
+  const lines = [result.changed === false ? chalk12.yellow(UNCHANGED_LINE) : chalk12.green(`\u2713 Subscription product ${done}`)];
+  if (result.replayed === true) lines.push(REPLAYED_LINE);
+  lines.push(...productDetailLines(result));
+  return lines;
+}
+function inProgressLine(updated) {
+  return `The price cut is still being applied: ${typeof updated === "number" ? updated : "?"} subscriptions lowered so far. Run the SAME command again, with the SAME --idempotency-key and the same flags, to continue (Von Payments also finishes it on its own). Never use a new key for it: a new key is a new price change.`;
+}
+function priceChangeLines(result) {
+  if (result.outcome === "in_progress") {
+    const lines2 = [chalk12.yellow(`  ${inProgressLine(result.updatedSubscriptionCount)}`)];
+    if (result.replayed === true) lines2.push(REPLAYED_LINE);
+    return lines2;
+  }
+  const lines = [chalk12.green("\u2713 Renewal price changed")];
+  if (result.replayed === true) lines.push(REPLAYED_LINE);
+  lines.push(`  Existing subscriptions lowered: ${typeof result.updatedSubscriptionCount === "number" ? result.updatedSubscriptionCount : "?"}`);
+  if (result.product && typeof result.product === "object") lines.push(...productDetailLines(result.product));
+  return lines;
+}
 function productListLines(page) {
   const lines = [];
   if (page.data.length === 0) lines.push("  No subscription products match.");
@@ -2337,9 +2609,112 @@ function exitOnBadFlag2(err) {
   const message = err.message;
   exitWithCliError(message, chalk12.red(`Error: ${message}`));
 }
+function errorCodeSuffix2(err) {
+  const code = err instanceof VonPayError3 ? err.code : void 0;
+  return typeof code === "string" && /^[a-z_]{1,64}$/.test(code) ? ` (error code: ${code})` : "";
+}
+var ROUTING_PROFILE_ID = /^vsrp_(test|live)_[A-Za-z0-9_-]{1,128}$/;
+function routingProfileShown(id) {
+  return ROUTING_PROFILE_ID.test(id) ? id : "[unrecognised id withheld]";
+}
+function currencyOf(p) {
+  return typeof p.currency === "string" && /^[A-Z]{3}$/.test(p.currency) ? p.currency : void 0;
+}
+function currentProductLines(current) {
+  return [
+    ["Current price", money(current.renewalPrice, currencyOf(current))],
+    ["Status", STATUSES.includes(current.status) ? current.status : "[unrecognised status withheld]"],
+    ["Subscriptions", typeof current.activeSubscriptionCount === "number" ? `${current.activeSubscriptionCount} (active, past due, paused or held)` : "not reported"]
+  ];
+}
+async function confirmLiveProductWrite(product, write, idempotencyKey, opts) {
+  const apiKey = requireApiKey();
+  refuseUnsafeLiveDestination(apiKey);
+  let current;
+  if (heldAsLive5(apiKey) && terminal.isInteractive()) {
+    try {
+      current = await makeCheckoutClient().subscriptionProducts.retrieve(product);
+    } catch (err) {
+      const message = `Refusing the ${write.what}: the product could not be looked up${errorCodeSuffix2(err)}, so what it changes cannot be shown to you before you confirm. Nothing was sent.`;
+      auditNote({ outcome: "lookup_refused", code: "lookup_failed" });
+      exitWithCliError(message, chalk12.red(message));
+    }
+  }
+  await confirmLiveAction(
+    apiKey,
+    {
+      action: write.action,
+      details: [
+        ...apiHostDetail(),
+        ["Product", product],
+        ...write.details(current),
+        ...current ? currentProductLines(current) : [],
+        ["Idempotency key", displayIdempotencyKey(idempotencyKey)]
+      ],
+      consequence: write.consequence
+    },
+    opts
+  );
+}
+function updateWrite(params) {
+  const replacesLinks = params.storeLinks !== void 0;
+  return {
+    action: "change a subscription product",
+    what: "product update",
+    details: (current) => {
+      const lines = [];
+      if (params.name !== void 0) lines.push(["Name", "changes (the new name is not shown here; check it in the dashboard after)"]);
+      if (params.interval !== void 0) lines.push(["New sign-ups renew", every(params.intervalCount, params.interval)]);
+      if (params.routingProfile !== void 0) {
+        lines.push(["Routing profile", params.routingProfile === null ? "removed (new sign-ups)" : `${routingProfileShown(params.routingProfile)} (new sign-ups)`]);
+      }
+      if (params.storeLinks !== void 0) {
+        const n = params.storeLinks.length;
+        lines.push(["Store links", n === 0 ? "ALL REMOVED: it is sold in no store" : `REPLACED by ${n} link${n === 1 ? "" : "s"} (store details not shown here)`]);
+        if (current) {
+          const now = Array.isArray(current.storeLinks) ? current.storeLinks.length : void 0;
+          lines.push(["Store links now", now === void 0 ? "not reported" : `${now} (every one is dropped)`]);
+        }
+      }
+      return lines;
+    },
+    consequence: replacesLinks ? "The store links given here REPLACE the current ones, and the current ones are dropped for good: putting one back means typing it in again. A schedule or routing change applies to new sign-ups only." : "A schedule or routing change applies to new sign-ups only; existing subscribers keep what they have."
+  };
+}
+function priceCutWrite(renewalPrice) {
+  return {
+    action: "lower a subscription product's price for its EXISTING subscribers",
+    what: "price change",
+    details: (current) => {
+      if (!current) return [["New price", `${renewalPrice} in minor units`]];
+      const lines = [["New price", money(renewalPrice, currencyOf(current))]];
+      if (typeof current.renewalPrice === "number" && renewalPrice >= current.renewalPrice) {
+        lines.push(["\u26A0 Check", "the new price is NOT lower than the current price: only a cut can apply to existing subscribers"]);
+      }
+      return lines;
+    },
+    consequence: "Every subscription still on the old price is charged the new, lower price from its next renewal. Raising the price again later does not raise them back."
+  };
+}
+var ARCHIVE_WRITE = {
+  action: "archive a subscription product",
+  what: "archive",
+  details: () => [],
+  consequence: "No new sign-ups or switches to it; existing subscribers keep renewing. Its reference is freed at once: if another product takes it, unarchive is refused, so this may not be undoable."
+};
+var UNARCHIVE_WRITE = {
+  action: "open an archived subscription product to new sign-ups again",
+  what: "unarchive",
+  details: () => [],
+  consequence: "New sign-ups and switches to it start again, at its current price."
+};
+var IDEMPOTENCY_HELP = "REQUIRED (every key, sandbox too; never generated). One key per change you mean to make; reuse the SAME key only to retry that exact change";
+var ACTOR_LABEL_HELP = "Your own name for the system making the change (for example campaign-tool), shown in the settings history: 1-64 lowercase letters, digits and _ . : - , starting with a letter or digit. Never personal data";
+var LIVE_CONFIRM_NOTE = "On a live key a person confirms it at the terminal";
+var STORE_LINK_HELP = "A store it is sold in, as key=value pairs separated by commas: platform=nextcommerce,store=<store address>,store_product_id=<id>[,store_variant_id=<id>]. Repeat the flag for each store";
 function subscriptionProductsCommand() {
   const products = new Command8("subscription-products").description(
-    "Read your subscription products and the renewal terms a sign-up states (read-only; products are created and changed in the dashboard)"
+    "Read, create and change your subscription products, and read the renewal terms a sign-up states"
   );
   products.command("list").description("List your subscription products, newest first, each with the terms a sign-up on it states").option("--product-ref <ref>", "Only the product with this reference (your store's product number), matched exactly").option("--status <status>", "Only products with this status: active or archived").option("--limit <n>", "Page size, 1 to 100 (default 10)").option("--starting-after <id>", "The id of the last product on the previous page (printed by a previous run)").option("--json", "Output raw JSON").action(async (opts) => {
     let params;
@@ -2387,6 +2762,155 @@ function subscriptionProductsCommand() {
       handleError(err);
     }
   });
+  products.command("get <product>").description(
+    "Read one subscription product: its price, schedule, routing profile, the stores it is sold in and how many subscriptions use it. <product> is its id (vsprod_*) or the reference of an ACTIVE product (an archived one is found by id only)"
+  ).option("--json", "Output raw JSON").action(async (product, opts) => {
+    const client = makeCheckoutClient();
+    const spinner = startSpinner("Reading subscription product...");
+    try {
+      const detail = await client.subscriptionProducts.retrieve(product);
+      spinner.stop();
+      if (opts.json) {
+        console.log(jsonOutput(detail));
+        return;
+      }
+      for (const line of productDetailLines(detail)) console.log(line);
+    } catch (err) {
+      spinner.stop();
+      handleError(err);
+    }
+  });
+  products.command("create").description(
+    "Create a subscription product (the same rules as the dashboard). It is made in your ACCOUNT's mode: make test products on your sandbox account with its test key"
+  ).option("--name <name>", "REQUIRED. The product's name, 1-120 characters").option("--product-ref <ref>", "REQUIRED. Your store's product number, unique among your active products").option("--renewal-price <minor>", "REQUIRED. What each renewal charges, in minor units (e.g. 2999 = 29.99 USD)").option("--currency <code>", "REQUIRED. ISO 4217 currency (e.g. USD)").option("--interval <unit>", "REQUIRED. How often it renews: day, week or month (at most a year between charges)").option("--interval-count <n>", "REQUIRED. How many units between charges, 1-365 (e.g. --interval month --interval-count 3)").option("--routing-profile <id>", "A routing profile of yours (vsrp_*) in the key's mode").option("--store-link <link...>", STORE_LINK_HELP).option("--idempotency-key <key>", IDEMPOTENCY_HELP).option("--actor-label <label>", ACTOR_LABEL_HELP).option("--json", "Output raw JSON").action(async (opts) => {
+    let params;
+    try {
+      params = buildCreateParams2(opts);
+    } catch (err) {
+      exitOnBadFlag2(err);
+    }
+    const options = writeOptions(opts, "product create");
+    const client = makeCheckoutClient();
+    const spinner = startSpinner("Creating subscription product...");
+    try {
+      const created = await client.subscriptionProducts.create(params, options);
+      spinner.stop();
+      if (opts.json) {
+        console.log(jsonOutput(created));
+        return;
+      }
+      console.log(chalk12.green("\u2713 Subscription product created"));
+      if (created.replayed === true) console.log(REPLAYED_LINE);
+      for (const line of productDetailLines(created)) console.log(line);
+    } catch (err) {
+      spinner.stop();
+      handleError(err);
+    }
+  });
+  products.command("update <product>").description(
+    `Change a product's name, schedule, routing profile or store links. A schedule or routing change applies to NEW sign-ups only. ${LIVE_CONFIRM_NOTE}. <product> is its id (vsprod_*). The price changes with change-price`
+  ).option("--name <name>", "The new name, 1-120 characters").option("--interval <unit>", "The new schedule: day, week or month. With --interval-count").option("--interval-count <n>", "How many units between charges, 1-365. With --interval").option("--routing-profile <id>", "A routing profile of yours (vsrp_*) in the key's mode. A restricted key also needs subscriptions.write_billing").option("--remove-routing-profile", "Take the routing profile off the product. A restricted key also needs subscriptions.write_billing").option("--store-link <link...>", `${STORE_LINK_HELP}. The links given REPLACE every current one, and the current ones are dropped for good`).option("--remove-store-links", "Take every store link off the product (they are dropped for good)").option("--idempotency-key <key>", IDEMPOTENCY_HELP).option("--actor-label <label>", ACTOR_LABEL_HELP).addOption(retiredConfirmLiveOption()).option("--json", "Output raw JSON").action(async (product, opts) => {
+    let params;
+    try {
+      params = buildUpdateParams(opts);
+    } catch (err) {
+      exitOnBadFlag2(err);
+    }
+    const options = writeOptions(opts, "product update");
+    await confirmLiveProductWrite(product, updateWrite(params), options.idempotencyKey, opts);
+    const client = makeCheckoutClient();
+    const spinner = startSpinner("Updating subscription product...");
+    try {
+      const changed = await client.subscriptionProducts.update(product, params, options);
+      spinner.stop();
+      if (opts.json) {
+        console.log(jsonOutput(changed));
+        return;
+      }
+      for (const line of changedLines(changed, "updated")) console.log(line);
+    } catch (err) {
+      spinner.stop();
+      handleError(err);
+    }
+  });
+  products.command("change-price <product>").description(
+    "Change a product's renewal price (the same rule as the dashboard). A raise applies to new sign-ups only. A cut with --apply-to-existing also lowers subscriptions still on the old price, from their next charge. <product> is its id (vsprod_*)"
+  ).option("--renewal-price <minor>", "REQUIRED. The new renewal price, in minor units (e.g. 2499 = 24.99 USD)").option(
+    "--apply-to-existing",
+    `A cut ALSO lowers what existing subscribers on the old price pay, from their next charge (never raises anyone). ${LIVE_CONFIRM_NOTE}. A restricted key also needs subscriptions.write_billing`
+  ).option(
+    "--keep-offer-prices <prices>",
+    "New keep-offer prices in minor units, comma-separated, each below --renewal-price. Send them when the cut would go below a current keep-offer price"
+  ).option("--idempotency-key <key>", `${IDEMPOTENCY_HELP}. A large cut answers "still being applied": run the SAME command with the SAME key to continue`).option("--actor-label <label>", ACTOR_LABEL_HELP).addOption(retiredConfirmLiveOption()).option(
+    "--json",
+    'Output raw JSON. The exit code is 0 also while a cut is still being applied (it is saved): a script must read "outcome" ("completed" or "in_progress") and, on "in_progress", run the same command with the same key again'
+  ).action(async (product, opts) => {
+    let params;
+    try {
+      params = buildChangePriceParams(opts);
+    } catch (err) {
+      exitOnBadFlag2(err);
+    }
+    const options = writeOptions(opts, "price change");
+    if (params.applyToExisting === true) {
+      await confirmLiveProductWrite(product, priceCutWrite(params.renewalPrice), options.idempotencyKey, opts);
+    }
+    const client = makeCheckoutClient();
+    const spinner = startSpinner("Changing the renewal price...");
+    try {
+      const result = await client.subscriptionProducts.changePrice(product, params, options);
+      spinner.stop();
+      if (opts.json) {
+        console.log(jsonOutput(result));
+        if (result.outcome === "in_progress") console.error(chalk12.yellow(inProgressLine(result.updatedSubscriptionCount)));
+        return;
+      }
+      for (const line of priceChangeLines(result)) console.log(line);
+    } catch (err) {
+      spinner.stop();
+      handleError(err);
+    }
+  });
+  products.command("archive <product>").description(
+    `Archive a product: no new sign-ups or customer switches to it; existing subscribers keep renewing; its reference is freed at once, so another product can take it (unarchive is then refused). ${LIVE_CONFIRM_NOTE}. <product> is its id (vsprod_*)`
+  ).option("--idempotency-key <key>", IDEMPOTENCY_HELP).option("--actor-label <label>", ACTOR_LABEL_HELP).addOption(retiredConfirmLiveOption()).option("--json", "Output raw JSON").action(async (product, opts) => {
+    const options = writeOptions(opts, "archive");
+    await confirmLiveProductWrite(product, ARCHIVE_WRITE, options.idempotencyKey, opts);
+    const client = makeCheckoutClient();
+    const spinner = startSpinner("Archiving subscription product...");
+    try {
+      const changed = await client.subscriptionProducts.archive(product, options);
+      spinner.stop();
+      if (opts.json) {
+        console.log(jsonOutput(changed));
+        return;
+      }
+      for (const line of changedLines(changed, "archived")) console.log(line);
+    } catch (err) {
+      spinner.stop();
+      handleError(err);
+    }
+  });
+  products.command("unarchive <product>").description(
+    `Open an archived product to new sign-ups again. Refused when another active product now has its reference. ${LIVE_CONFIRM_NOTE}. <product> is its id (vsprod_*)`
+  ).option("--idempotency-key <key>", IDEMPOTENCY_HELP).option("--actor-label <label>", ACTOR_LABEL_HELP).addOption(retiredConfirmLiveOption()).option("--json", "Output raw JSON").action(async (product, opts) => {
+    const options = writeOptions(opts, "unarchive");
+    await confirmLiveProductWrite(product, UNARCHIVE_WRITE, options.idempotencyKey, opts);
+    const client = makeCheckoutClient();
+    const spinner = startSpinner("Unarchiving subscription product...");
+    try {
+      const changed = await client.subscriptionProducts.unarchive(product, options);
+      spinner.stop();
+      if (opts.json) {
+        console.log(jsonOutput(changed));
+        return;
+      }
+      for (const line of changedLines(changed, "unarchived")) console.log(line);
+    } catch (err) {
+      spinner.stop();
+      handleError(err);
+    }
+  });
   return products;
 }
 
@@ -3652,7 +4176,7 @@ function lifecycleSeverity(kind) {
 // src/commands/health.ts
 import { Command as Command12 } from "commander";
 import chalk16 from "chalk";
-import { VonPayError as VonPayError3 } from "@vonpay/checkout-node";
+import { VonPayError as VonPayError4 } from "@vonpay/checkout-node";
 function healthCommand() {
   return new Command12("health").description("Check checkout API health").option("--json", "Output raw JSON").action(async (opts) => {
     const client = makeCheckoutClient();
@@ -3674,7 +4198,7 @@ function healthCommand() {
       spinner.stop();
       auditError(err);
       if (jsonErrorsEnabled()) handleError(err);
-      if (err instanceof VonPayError3) {
+      if (err instanceof VonPayError4) {
         console.error(chalk16.red(`API error: ${scrubSecrets(safeInline(err.message, 2e3))}`));
         console.error(chalk16.dim(`  Code: ${safeInline(String(err.code))}`));
       } else {
@@ -3697,7 +4221,7 @@ import { homedir as homedir2 } from "os";
 import { existsSync as existsSync3 } from "fs";
 import {
   VonPayCheckout as VonPayCheckout3,
-  VonPayError as VonPayError4,
+  VonPayError as VonPayError5,
   helpFor
 } from "@vonpay/checkout-node";
 var RELEVANT_ENV_VARS = [
@@ -3845,7 +4369,7 @@ async function gather() {
         );
       }
     } catch (err) {
-      if (err instanceof VonPayError4) {
+      if (err instanceof VonPayError5) {
         const help = helpFor(err.code);
         report.validateProbe = {
           ok: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vonpay/checkout-cli",
-  "version": "0.20.0",
+  "version": "0.22.0",
   "description": "Von Payments CLI — developer tools for checkout integration",
   "repository": {
     "type": "git",
@@ -20,7 +20,7 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@vonpay/checkout-node": "^4.8.0",
+    "@vonpay/checkout-node": "^4.11.0",
     "commander": "^13.0.0",
     "chalk": "^5.4.0",
     "ora": "^8.2.0"