@whop/cli 0.14.0 → 0.14.2

package/skills/whop-app-builds/SKILL.md

@@ -9,13 +9,73 @@ An App Build is a versioned artifact uploaded for an app — a hosted web archiv
 
 Use the App Builds API to upload a build for an app, list an app's builds with platform and status filters, retrieve a build, and promote a draft or approved build to production.
 
-## Commands
+# whop app-builds create
 
-| Command | Description |
-|---------|-------------|
-| `whop app-builds list` | List App Builds |
-| `whop app-builds create` | Create App Build |
-| `whop app-builds get` | Retrieve App Build |
-| `whop app-builds promote` | Promote App Build |
+Create App Build
 
-Run `whop app-builds <command> --help` for options, or `whop app-builds <command> --schema` for full argument details.
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--ai_prompt_id` | `string` | no |  | The AI prompt that generated this build, if applicable. |
+| `--app_id` | `string` | no |  | The app to create the build for, prefixed `app_`. Defaults to the app behind the presented credential. |
+| `--attachment` | `object` | yes |  | The uploaded build file: `{ id }` for an existing file or `{ direct_upload_id }` for a completed direct upload. |
+| `--checksum` | `string` | yes |  | A client-generated checksum of the build file, used to verify file integrity when unpacked. |
+| `--platform` | `string` | yes |  | The target platform for the build. |
+| `--source_attachment` | `object` | no |  | An optional compressed archive (.zip or .gz) of the source code that produced this build, stored alongside the build so it can be downloaded later. Referenced like `attachment`, and must be a different file. |
+| `--supported_app_view_types` | `array` | no |  | The view types this build supports. Only list the ones its code implements. |
+| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop app-builds get
+
+Retrieve App Build
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | App build ID, prefixed `abld_`. |
+
+---
+
+# whop app-builds list
+
+List App Builds
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--app_id` | `string` | yes |  | The app to list builds for, prefixed `app_`. |
+| `--platform` | `string` | no |  | Filter builds by target platform. |
+| `--status` | `string` | no |  | Filter builds by review status. |
+| `--created_before` | `number` | no |  | Only return builds created before this ISO 8601 timestamp. |
+| `--created_after` | `number` | no |  | Only return builds created after this ISO 8601 timestamp. |
+| `--first` | `number` | no |  | The number of builds to return (default 20, max 100). |
+| `--after` | `string` | no |  | A cursor; returns builds after this position. |
+| `--last` | `number` | no |  | The number of builds to return from the end of the range. |
+| `--before` | `string` | no |  | A cursor; returns builds before this position. |
+
+---
+
+# whop app-builds promote
+
+Promote App Build
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | App build ID, prefixed `abld_`. |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirm with the user before executing this destructive command.

package/skills/whop-apps/SKILL.md

@@ -9,15 +9,138 @@ An App is software you build on Whop. It can be a hosted web app served at `<rou
 
 Use the Apps API to manage app configuration and, for hosted apps, read server runtime logs for console output, uncaught exceptions, and failed requests. Logs are retained for 7 days and can be filtered by build, level, time window, and message text.
 
-## Commands
-
-| Command | Description |
-|---------|-------------|
-| `whop apps list` | List Apps |
-| `whop apps create` | Create App |
-| `whop apps get` | Retrieve App |
-| `whop apps update` | Update App |
-| `whop apps logs` | List App Logs |
-| `whop apps permissions` | Update App Permissions |
-
-Run `whop apps <command> --help` for options, or `whop apps <command> --schema` for full argument details.
+# whop apps create
+
+Create App
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | The account to create the app for (`biz_` tag). Defaults to the account behind the presented credential. |
+| `--base_url` | `unknown` | no |  | The base production URL where the app is hosted, such as `https://myapp.example.com`. |
+| `--icon` | `object` | no |  | The icon image for the app in PNG, JPEG, or GIF format, referencing an uploaded file: `{ id }` for an existing attachment or `{ direct_upload_id }` for a new direct upload. |
+| `--name` | `string` | yes |  | The display name for the app, shown to users on the app store and product pages. |
+| `--redirect_uris` | `array` | no |  | The whitelisted OAuth callback URLs that users are redirected to after authorizing the app. |
+| `--route` | `unknown` | no |  | The subdomain route where the app's hosted web builds are served, such as `myapp` for myapp.whop.app. |
+| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop apps get
+
+Retrieve App
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | App ID (prefixed `app_`), the app's claimed route, or its proxy domain id. |
+
+---
+
+# whop apps list
+
+List Apps
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | Only return apps created by this account (`biz_` tag). With developer access to the account this includes its unlisted and hidden apps. |
+| `--app_type` | `string` | no |  | Filter apps by the type of end-user they are built for. |
+| `--view_type` | `string` | no |  | Only return apps supporting this view type, such as `dashboard` or `hub`. |
+| `--verified_apps_only` | `boolean` | no |  | Whether to only return apps verified by Whop. |
+| `--query` | `string` | no |  | A search string matched against app names. |
+| `--order` | `string` | no |  | The field to sort apps by. Defaults to discoverable_at, showing the most recently published apps first. |
+| `--direction` | `string` | no |  | Sort direction. |
+| `--first` | `number` | no |  | The number of apps to return (default 20, max 100). |
+| `--after` | `string` | no |  | A cursor; returns apps after this position. |
+| `--last` | `number` | no |  | The number of apps to return from the end of the range. |
+| `--before` | `string` | no |  | A cursor; returns apps before this position. |
+
+---
+
+# whop apps logs
+
+List App Logs
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | The ID of the app, which will look like app_*************. |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--app_build_id` | `string` | no |  | Only return logs from this build. |
+| `--level` | `string` | no |  | Only return console lines of this level. |
+| `--query` | `string` | no |  | Only return logs whose message contains this text (case-insensitive). |
+| `--created_after` | `string` | no |  | Start of the time window as an ISO 8601 timestamp. Defaults to 7 days before created_before. |
+| `--created_before` | `string` | no |  | End of the time window as an ISO 8601 timestamp. Defaults to now. |
+| `--first` | `number` | no |  | The number of log lines to return (max 500). |
+| `--after` | `string` | no |  | A cursor for fetching logs after a previous page. |
+| `--before` | `string` | no |  | A cursor for fetching logs before a later page. |
+
+---
+
+# whop apps permissions
+
+Update App Permissions
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | App ID, prefixed `app_`. |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--requested_permissions` | `array` | yes |  | The full set of permissions the app requests on install; permissions not listed are removed. |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop apps update
+
+Update App
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | App ID (prefixed `app_`), the app's claimed route, or its proxy domain id. |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--app_store_description` | `string` | no |  | The detailed description shown on the app store's in-depth app view page. |
+| `--app_type` | `string` | no |  | The type of end-user the app is built for. |
+| `--base_url` | `string` | no |  | The base production URL where the app is hosted. |
+| `--dashboard_path` | `unknown` | no |  | The URL path for the account dashboard view. |
+| `--description` | `string` | no |  | A short description of the app shown in listings and search results. |
+| `--discover_path` | `unknown` | no |  | The URL path for the discover view. |
+| `--experience_path` | `unknown` | no |  | The URL path for the member-facing hub view, such as `/experiences/[experienceId]`. |
+| `--icon` | `object` | no |  | The icon image for the app in PNG, JPEG, or GIF format, referencing an uploaded file: `{ id }` for an existing attachment or `{ direct_upload_id }` for a new direct upload. |
+| `--name` | `string` | no |  | The display name for the app, shown to users on the app store and product pages. |
+| `--oauth_client_type` | `string` | no |  | How the app authenticates at the OAuth token endpoint. |
+| `--openapi_path` | `unknown` | no |  | The URL path to the app's OpenAPI spec file (requires the ai_chat capability). |
+| `--production_android_build_id` | `unknown` | no |  | The app build (`abld_` tag) to serve as the Android production build, or `null` to unassign it. Same rules as `production_web_build_id`. |
+| `--production_ios_build_id` | `unknown` | no |  | The app build (`abld_` tag) to serve as the iOS production build, or `null` to unassign it. Same rules as `production_web_build_id`. |
+| `--production_web_build_id` | `unknown` | no |  | The app build (`abld_` tag) to serve as the web production build, or `null` to unassign it. The build must belong to this app, target web, and be in the draft or approved status; a draft build is queued for approval and takes over once approved. Requires the `developer:manage_builds` scope. |
+| `--redirect_uris` | `array` | no |  | The whitelisted OAuth callback URLs users are redirected to after authorizing the app. |
+| `--required_scopes` | `array` | no |  | The OAuth scopes the app requests from users when they install it. |
+| `--route` | `string` | no |  | The subdomain route where the app's hosted web builds are served. |
+| `--secrets` | `object` | no |  | Secrets to add or overwrite on the app, as an object of string values. Keys not included are left untouched; pass null or an empty string as the value to delete a secret. Encrypted at rest and injected into the app's hosted server runtime. |
+| `--skills_path` | `unknown` | no |  | The URL path to the app's skills directory (requires the ai_chat capability). |
+| `--status` | `string` | no |  | Controls whether the app is published on Whop discovery or accessible only through its direct link. Publishing requires a name, icon, and description. |
+
+> Confirm with the user before executing this destructive command.

package/skills/whop-audiences/SKILL.md

@@ -9,13 +9,76 @@ An Audience represents a customer list uploaded to Whop for ad targeting. Audien
 
 Use the Audiences API to create audiences from CSV uploads, monitor processing status, and list or delete audiences for an account. Created audiences are usable for targeting after processing reaches `ready` or `partial`.
 
-## Commands
+# whop audiences create
 
-| Command | Description |
-|---------|-------------|
-| `whop audiences list` | List Audiences |
-| `whop audiences create` | Create Audience |
-| `whop audiences delete` | Delete Audience |
-| `whop audiences update` | Update Audience |
+Create Audience
 
-Run `whop audiences <command> --help` for options, or `whop audiences <command> --schema` for full argument details.
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | yes |  | Account ID, prefixed `biz_`. |
+| `--audience_type` | `string` | no |  | What to create. Defaults to `custom` (CSV upload). |
+| `--auto_refresh` | `boolean` | no |  | Filter audiences only, and set only at creation. `true` (the default) rebuilds membership from the filters twice a day. `false` keeps whoever matched at creation and never rebuilds. |
+| `--column_mapping` | `object` | no |  | Custom audiences only. Maps supported identity fields to CSV column headers. Map at least one of `email` or `phone`. |
+| `--count` | `number` | no |  | Lookalikes only. Number of lookalike audiences to create (1–6). |
+| `--file_id` | `string` | no |  | Custom audiences only. The uploaded customer CSV — a file id (`file_...`) returned by `POST /files`. |
+| `--filters` | `object` | no |  | Filter audiences only. The People filters that define membership, keyed exactly as `GET /people` accepts them — for example `{"os": "iOS", "country": "US"}`. Date filters must be rolling windows — `first_seen_within_days` or `last_seen_within_days` — so the audience re-anchors on every refresh; fixed dates such as `first_seen_after` are rejected. Source values are canonical source paths (`whop:<campaign>:<group>:<ad>`, `ext:<platform>:...`, `referrer:<domain>`, `direct`), exact or with a trailing `:*` wildcard. |
+| `--name` | `string` | no |  | Audience display name. Required for custom audiences; lookalike names are generated from the source audience. |
+| `--percentage` | `number` | no |  | Lookalikes only. Total similarity reach as a whole percent (1–20), sliced evenly across `count` — must be divisible by `count`. |
+| `--source_audience_id` | `string` | no |  | Lookalikes only. The ready custom audience (`adaud_`) to build from; it needs at least 100 matched people. |
+| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop audiences delete
+
+Delete Audience
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `audience_id` | `string` | yes | Audience ID, prefixed `adaud_`. |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop audiences list
+
+List Audiences
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | Account ID, prefixed `biz_`. |
+| `--audience_id` | `string` | no |  | Audience ID, prefixed `adaud_`, used to filter the response to one audience. |
+| `--audience_type` | `string` | no |  | Filter by audience type: `custom` (uploaded lists) or `lookalike`. |
+| `--source_type` | `string` | no |  | Filter by member source: `csv_upload` (uploaded lists) or `people_filter` (automatic audiences built from saved People filters). |
+| `--first` | `number` | no |  | Number of audiences to return. Defaults to 20; maximum 100. |
+| `--after` | `string` | no |  | Cursor for the next page of audiences. |
+
+---
+
+# whop audiences update
+
+Update Audience
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `audience_id` | `string` | yes | Audience ID, prefixed `adaud_`. |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--filters` | `object` | no |  | Only for an audience that keeps itself up to date. Replaces the People filters that define membership, keyed as `GET /people` accepts them. With auto refresh off the audience keeps the people it matched when it was built, so its filters can't be replaced — create a new audience instead. |
+| `--name` | `string` | no |  | New audience display name. |
+
+> Confirm with the user before executing this destructive command.

package/skills/whop-bounties/SKILL.md

@@ -9,14 +9,109 @@ A Bounty is a paid task posted by an account or user. The reward is held in escr
 
 Use the Bounties API to create and publish a bounty, list an account's bounties for reporting or dashboards, list the bounties a user can work or has participated in, and retrieve a single bounty by ID.
 
-## Commands
+# whop bounties cancel
 
-| Command | Description |
-|---------|-------------|
-| `whop bounties list` | List Bounties |
-| `whop bounties create` | Create Bounty |
-| `whop bounties get` | Retrieve Bounty |
-| `whop bounties update` | Update Bounty |
-| `whop bounties cancel` | Cancel |
+Cancel
 
-Run `whop bounties <command> --help` for options, or `whop bounties <command> --schema` for full argument details.
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | Bounty ID (`bnty_` tag). |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop bounties create
+
+Create Bounty
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--accepted_submissions_limit` | `number` | no |  | Number of submissions that can be accepted (winner slots). Defaults to 1. The escrowed total is `gross_reward_amount` times this limit and must be at least $5. |
+| `--account_id` | `unknown` | no |  | Account whose balance funds the bounty pool (`biz_` tag). Defaults to the caller's personal balance. Requires permission to move the account's funds. |
+| `--allowed_country_codes` | `unknown` | no |  | Countries whose residents can work the bounty, as ISO 3166 alpha-2 codes. Empty means worldwide. |
+| `--business_goal_type` | `string` | no |  | What the poster wants the work to achieve, declared once here. |
+| `--capture_spec` | `object` | no |  | Per-bounty overrides of the served capture contract. Only accepted when `business_goal_type` is `data_capture`; omitted fields keep the platform defaults, and the resulting contract is echoed back as `capture_spec` on the bounty. |
+| `--description` | `string` | yes |  | Full task instructions shown to workers. |
+| `--experience_id` | `unknown` | no |  | Experience to host the bounty in (`exp_` tag). Any visibility — public for an open bounty, private for an invited one. Required unless account_id is set, in which case the bounty anchors in that account's public forum. |
+| `--frequency` | `string` | no |  | How often the schedule creates a new bounty. Each occurrence is a separate bounty. Defaults to `once`; only applies with `publish_at`. |
+| `--gross_reward_amount` | `number` | yes |  | Gross bounty-pool amount (USD) escrowed per accepted submission, in whole dollars. Platform fees and affiliate shares are paid from this amount. |
+| `--publish_at` | `unknown` | no |  | ISO 8601 time to publish the bounty. When set, the bounty is created as a hidden draft and funded + published at this time instead of immediately. |
+| `--publish_at_timezone` | `unknown` | no |  | IANA timezone for recurring occurrences. Required when publish_at is set. |
+| `--title` | `string` | yes |  | Short name of the task shown to workers. |
+| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop bounties get
+
+Retrieve Bounty
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | Bounty ID (`bnty_` tag). |
+
+---
+
+# whop bounties list
+
+List Bounties
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | Scope the list to this account (`biz_` tag). Requires read access to the account; account API keys may pass their own account or a connected account. |
+| `--user_id` | `string` | no |  | List the bounties this user participated in (`user_` tag). Must be the authenticated user. |
+| `--status` | `string` | no |  | Filter by lifecycle state. |
+| `--query` | `string` | no |  | Substring match on the bounty title or ID. |
+| `--created_after` | `string` | no |  | Only bounties created after this ISO 8601 timestamp. |
+| `--created_before` | `string` | no |  | Only bounties created before this ISO 8601 timestamp. |
+| `--order` | `string` | no |  | Sort field. |
+| `--direction` | `string` | no |  | Sort direction. |
+| `--first` | `number` | no | `20` | Number of bounties to return from the start of the window. |
+| `--after` | `string` | no |  | Cursor to paginate forwards from. |
+| `--last` | `number` | no |  | Number of bounties to return from the end of the window. |
+| `--before` | `string` | no |  | Cursor to paginate backwards from. |
+
+---
+
+# whop bounties update
+
+Update Bounty
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | Bounty ID (`bnty_` tag). |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--accepted_submissions_limit` | `number` | no |  | Scheduled drafts only. Number of submissions that can be accepted (winner slots). |
+| `--allowed_country_codes` | `unknown` | no |  | Replace the countries whose residents can work the bounty, as ISO 3166 alpha-2 codes. Empty means worldwide. |
+| `--business_goal_type` | `string` | no |  | What the poster wants the work to achieve, declared once here. |
+| `--description` | `string` | no |  | New full task instructions. |
+| `--frequency` | `string` | no |  | Scheduled drafts only. How often the schedule creates a new bounty. |
+| `--gross_reward_amount` | `number` | no |  | Scheduled drafts only. Gross bounty-pool amount (USD) escrowed per accepted submission. The escrowed total (this times accepted_submissions_limit) must stay at least $5. |
+| `--publish_at` | `unknown` | no |  | Scheduled drafts only. New ISO 8601 time to publish the draft. Must be in the future. |
+| `--publish_at_timezone` | `unknown` | no |  | Scheduled drafts only. IANA timezone for recurring occurrences. |
+| `--title` | `string` | no |  | New short name of the task. |
+
+> Confirm with the user before executing this destructive command.

package/skills/whop-bounty-submissions/SKILL.md

@@ -9,14 +9,87 @@ A Bounty Submission is one worker's attempt on a bounty. It starts as an in-prog
 
 Use the Bounty Submissions API to submit proof of completed work to a bounty, list the submissions you authored, and review the submissions on your bounties — across every bounty or narrowed to one.
 
-## Commands
+# whop bounty-submissions create
 
-| Command | Description |
-|---------|-------------|
-| `whop bounty-submissions list` | List Bounty Submissions |
-| `whop bounty-submissions create` | Create Bounty Submission |
-| `whop bounty-submissions delete` | Cancel Bounty Submission |
-| `whop bounty-submissions get` | Retrieve Bounty Submission |
-| `whop bounty-submissions submit` | Submit Bounty Submission |
+Create Bounty Submission
 
-Run `whop bounty-submissions <command> --help` for options, or `whop bounty-submissions <command> --schema` for full argument details.
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--affiliate_code` | `unknown` | no |  | Affiliate code crediting the referrer, when the worker arrived through one. |
+| `--bounty_id` | `string` | yes |  | The bounty to submit to (`bnty_` tag). |
+| `--deliverable` | `unknown` | no |  | The submitted work. Combine `urls`, `file_ids`, and `caption` freely; at least one link or file is required. |
+| `--metadata` | `unknown` | no |  | Optional capture metadata describing where and how the footage was recorded. Persisted on the submission. On a `data_capture` bounty every field except `fov` is required whenever metadata is provided. |
+| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop bounty-submissions delete
+
+Cancel Bounty Submission
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `bounty_submission_id` | `string` | yes | The bounty submission to act on (`btys_` tag). |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop bounty-submissions get
+
+Retrieve Bounty Submission
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `bounty_submission_id` | `string` | yes | The bounty submission to act on (`btys_` tag). |
+
+---
+
+# whop bounty-submissions list
+
+List Bounty Submissions
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | Scope the list to submissions on this account's bounties (`biz_` tag). Requires read access to the account. |
+| `--bounty_id` | `string` | no |  | Only submissions on this bounty (`bnty_` tag). |
+| `--status` | `string` | no |  | Filter by lifecycle state. |
+| `--created_after` | `string` | no |  | Only submissions created after this ISO 8601 timestamp. |
+| `--created_before` | `string` | no |  | Only submissions created before this ISO 8601 timestamp. |
+| `--order` | `string` | no |  | Sort field. |
+| `--direction` | `string` | no |  | Sort direction. |
+| `--first` | `number` | no | `20` | Number of submissions to return from the start of the window. |
+| `--after` | `string` | no |  | Cursor to paginate forwards from. |
+| `--last` | `number` | no |  | Number of submissions to return from the end of the window. |
+| `--before` | `string` | no |  | Cursor to paginate backwards from. |
+
+---
+
+# whop bounty-submissions submit
+
+Submit Bounty Submission
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `bounty_submission_id` | `string` | yes | The claimed attempt to submit for review (`btys_` tag). |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--deliverable` | `unknown` | no |  | Work to attach to the submission. Combine `urls`, `file_ids`, and `caption` freely; all are optional. |
+| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirm with the user before executing this destructive command.

package/skills/whop-cards/SKILL.md

@@ -9,13 +9,125 @@ Cards represent Whop-issued virtual payment cards that spend from an account or
 
 Use the Cards API to issue cards, list cards for an account or user, and retrieve active card details such as the card number and CVC.
 
-## Commands
+# whop cards create
 
-| Command | Description |
-|---------|-------------|
-| `whop cards list` | List Cards |
-| `whop cards create` | Create Card |
-| `whop cards get` | Retrieve Card |
-| `whop cards update` | Update Card |
+Create Card
 
-Run `whop cards <command> --help` for options, or `whop cards <command> --schema` for full argument details.
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | The owning account ID (a biz_ identifier). Provide this or user_id. |
+| `--assigned_user_id` | `string` | no |  | The account member (a user_ identifier) to assign the card to. Required for business card issuing accounts. |
+| `--name` | `string` | no |  | A display name for the card. |
+| `--spend_limit` | `number` | no |  | Spending limit amount, in dollars. |
+| `--spend_limit_frequency` | `string` | no |  | The window the spend limit applies to. |
+| `--transaction_limit` | `number` | no |  | Per-transaction limit amount, in dollars. |
+| `--user_id` | `string` | no |  | The owning user ID (a user_ identifier). Provide this or account_id. |
+| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop cards get
+
+Retrieve Card
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `card_id` | `string` | yes | Card ID to retrieve, prefixed `icrd_`. |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | The owning account ID (a biz_ identifier). Provide this or user_id. |
+| `--user_id` | `string` | no |  | The owning user ID (a user_ identifier). Provide this or account_id. |
+
+---
+
+# whop cards get-transaction
+
+Retrieve Card Transaction
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `id` | `string` | yes | The card transaction ID, prefixed `citx_`. |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | The account that owns the transaction, prefixed `biz_`. Defaults to the credential's account. |
+
+---
+
+# whop cards list
+
+List Cards
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | The owning account ID (a biz_ identifier). Provide this or user_id. |
+| `--user_id` | `string` | no |  | The owning user ID (a user_ identifier). Provide this or account_id. |
+
+---
+
+# whop cards transactions
+
+List Card Transactions
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | The account whose card transactions to list, prefixed `biz_`. Defaults to the credential's account. |
+| `--transaction_ids` | `array` | no |  | Return only these card transactions, each prefixed `citx_`. Repeat the parameter, or pass one comma-separated value. |
+| `--card_id` | `array` | no |  | Return only transactions charged to these cards, each prefixed `icrd_`. |
+| `--cardholder_id` | `array` | no |  | Return only transactions on cards assigned to these users, each prefixed `user_`. |
+| `--status` | `string` | no |  | Return only transactions with this status. |
+| `--created_after` | `string` | no |  | Return only transactions authorized at or after this ISO 8601 timestamp. |
+| `--created_before` | `string` | no |  | Return only transactions authorized at or before this ISO 8601 timestamp. |
+| `--order` | `string` | no |  | The field to sort by. Defaults to `created_at`. |
+| `--direction` | `string` | no |  | The sort direction. Defaults to `desc`. |
+| `--first` | `number` | no |  | The number of card transactions to return. |
+| `--after` | `string` | no |  | A cursor; returns card transactions after this position. |
+| `--last` | `number` | no |  | The number of card transactions to return, counting back from the end. |
+| `--before` | `string` | no |  | A cursor; returns card transactions before this position. |
+
+---
+
+# whop cards update
+
+Update Card
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `card_id` | `string` | yes | Card ID to retrieve, prefixed `icrd_`. |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | The owning account ID (a biz_ identifier). Provide this or user_id. |
+| `--billing` | `object` | no |  | New billing address. Requires line1, city, region, postal_code, and country_code. On an invited card, passing billing alone (as the invited user) completes onboarding and starts card provisioning. |
+| `--canceled` | `boolean` | no |  | Pass `true` to permanently cancel the card. A canceled card cannot be uncanceled. Cannot be combined with other fields. |
+| `--frozen` | `boolean` | no |  | Pass `true` to freeze the card, `false` to unfreeze it. The assigned cardholder may freeze their own card without the payout:account:update scope. |
+| `--name` | `string` | no |  | A display name for the card. |
+| `--pin` | `string` | no |  | New 4-digit PIN. Can only be set on a card assigned to the acting user, who may set it without the payout:account:update scope. |
+| `--remove_limit` | `boolean` | no |  | Pass `true` to remove the spending limit (make the card unlimited). |
+| `--spend_limit` | `number` | no |  | Spending limit amount, in dollars. |
+| `--spend_limit_frequency` | `string` | no |  | The window the spend limit applies to. |
+| `--transaction_limit` | `number` | no |  | Per-transaction limit amount, in dollars. |
+| `--user_id` | `string` | no |  | The owning user ID (a user_ identifier). Provide this or account_id. |
+
+> Confirm with the user before executing this destructive command.