@whop/cli 0.14.2 → 0.14.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@whop/cli",
-  "version": "0.14.2",
+  "version": "0.14.3",
   "description": "The Whop CLI — build and manage Whop apps from your terminal. Human and agent friendly.",
   "keywords": [
     "agent",

package/skills/whop-audiences/SKILL.md

@@ -9,6 +9,27 @@ An Audience represents a customer list uploaded to Whop for ad targeting. Audien
 
 Use the Audiences API to create audiences from CSV uploads, monitor processing status, and list or delete audiences for an account. Created audiences are usable for targeting after processing reaches `ready` or `partial`.
 
+# whop audiences add_people
+
+Add People
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `audience_id` | `string` | yes | Audience ID, prefixed `adaud_`. |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--file_id` | `string` | yes |  | The new customer CSV — a file id (`file_...`) returned by `POST /files`. Its headers must match the audience's saved column mapping. |
+| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
 # whop audiences create
 
 Create Audience
@@ -78,7 +99,7 @@ Update Audience
 
 | Flag | Type | Required | Default | Description |
 |------|------|----------|---------|-------------|
-| `--filters` | `object` | no |  | Only for an audience that keeps itself up to date. Replaces the People filters that define membership, keyed as `GET /people` accepts them. With auto refresh off the audience keeps the people it matched when it was built, so its filters can't be replaced — create a new audience instead. |
-| `--name` | `string` | no |  | New audience display name. |
+| `--filters` | `object` | no |  | Replaces the People filters that define membership. The whole definition is replaced rather than merged, so send every filter you want to keep — a filter you leave out stops applying. Keys and values are the ones `GET /people` accepts, such as an `os` of `iOS` or a `country` of `US`, and at least one filter is required. Date filters must be rolling windows — `first_seen_within_days` or `last_seen_within_days` — so the audience re-anchors every time it rebuilds; fixed dates such as `first_seen_after` are rejected, as is `audience_id`. An array value holds at most 500 items, and each value at most 10 KB. Only an audience with a `source_type` of `people_filter` and `auto_refresh` of `true` accepts filters: an uploaded list has no filters to replace, and with auto refresh off the audience keeps the people it matched when it was built, so create a new audience instead. |
+| `--name` | `string` | no |  | New audience display name. A blank value is ignored rather than clearing the name. |
 
 > Confirm with the user before executing this destructive command.

package/skills/whop-exports/SKILL.md

@@ -297,11 +297,13 @@ Mirrors the filtering query params of `GET /api/v1/transfers`.
 
 </details>
 <details>
-<summary>webhooks (1)</summary>
+<summary>webhooks (3)</summary>
 
 Mirrors the filtering query params of `GET /api/v1/webhooks`.
 
 - `app_id` `string` — Only return webhooks attached to this app. Omit to list the account's own webhooks.
+- `has_failures` `boolean` — Only return webhooks whose endpoint is currently failing — every delivery since the current failure streak began has been rejected. Clears as soon as a delivery succeeds.
+- `include_app_webhooks` `boolean` — Also return webhooks attached to the account's apps, not just the account's own. Cannot be combined with `app_id`.
 
 </details>
 </details> |

package/skills/whop-payments/SKILL.md

@@ -0,0 +1,40 @@
+---
+name: whop-payments
+description: A charge against a buyer, and the step they still owe. Run `whop payments --help` for usage details.
+requires_bin: whop
+command: whop payments
+---
+
+A Payment is one charge against a buyer. Create it with a payment method already on file, or with a `confirmation_token` describing a method the buyer has just supplied.
+
+Collection runs in the background, so the create response is not the outcome. Poll [Retrieve status](https://docs.whop.com/api-reference/beta/payments/retrieve-status) for how far the payment has got and, while it is `requires_action`, what the buyer must do next — follow a redirect, complete 3D Secure, display transfer instructions, or link a bank account. Use the return_url operation to change where they land afterwards, up until they come back.
+
+# whop payments return_url
+
+Update payment return URL
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `payment_id` | `string` | yes | The unique identifier of the payment. |
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--return_url` | `string` | yes |  | Where the buyer continues after completing an off-site step. Must be an absolute https URL without credentials, at most 2,048 characters. |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
+# whop payments status
+
+Retrieve payment status
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `payment_id` | `string` | yes | The unique identifier of the payment. |

package/skills/whop-setup-intents/SKILL.md

@@ -0,0 +1,20 @@
+---
+name: whop-setup-intents
+description: Saving a buyer's payment method without charging it. Run `whop setup-intents --help` for usage details.
+requires_bin: whop
+command: whop setup-intents
+---
+
+A Setup Intent saves a buyer's payment method for later without taking money now. It runs the same collection flow a payment does, so the buyer may still owe a step — 3D Secure on a card, a hosted enrollment, or linking a bank account.
+
+Poll [Retrieve status](https://docs.whop.com/api-reference/beta/setup-intents/retrieve-status) for how far the setup has got and what is outstanding. Once it reaches `succeeded` the method is on file and can be charged.
+
+# whop setup-intents status
+
+Retrieve setup status
+
+## Arguments
+
+| Name | Type | Required | Description |
+|------|------|----------|-------------|
+| `setup_intent_id` | `string` | yes | The unique identifier of the setup intent. |

package/skills/whop-users/SKILL.md

@@ -22,6 +22,30 @@ Check User Access
 
 ---
 
+# whop users authorize-app
+
+Authorize an App
+
+## Options
+
+| Flag | Type | Required | Default | Description |
+|------|------|----------|---------|-------------|
+| `--account_id` | `string` | no |  | Authorize the app for one of the user's accounts rather than for the user alone, prefixed `biz_`. The user must have access to it. |
+| `--client_id` | `string` | yes |  | The app being authorized, prefixed `app_`. |
+| `--code_challenge` | `string` | yes |  | The PKCE code challenge: the base64url-encoded SHA-256 of your code verifier, without padding. |
+| `--code_challenge_method` | `string` | yes |  | How `code_challenge` was derived. Only `S256` is accepted. |
+| `--consent_shown` | `boolean` | no | `true` | Whether the consent UI listed these scopes for the user. Sending `false` succeeds only when the user has already granted every scope requested. |
+| `--nonce` | `string` | no |  | OIDC nonce, echoed into the resulting ID token. Required when `requested_scopes` includes `openid`. |
+| `--redirect_uri` | `string` | yes |  | Where to send the user once they have consented. Must match one of the app's registered redirect URIs exactly — it is compared as a string, not normalized. |
+| `--requested_scopes` | `array` | yes |  | The permissions the app is asking for, for example `member:basic:read`. `GET /api_keys/permissions` names and describes each one. Granting adds to whatever the user already granted this app rather than replacing it. |
+| `--response_type` | `string` | no |  | The OAuth response type. Only `code` is accepted; defaults to `code`. |
+| `--state` | `string` | no |  | Opaque value appended to `redirect_url` unchanged, for the client to correlate the response with its request. |
+| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
+
+> Confirm with the user before executing this destructive command.
+
+---
+
 # whop users delete-passkey
 
 Delete