@whop/cli 0.16.0 → 0.16.1

package/skills/whop-team-members/SKILL.md

@@ -1,93 +0,0 @@
----
-name: whop-team-members
-description: An account's team members and the roles that scope their access. Run `whop team-members --help` for usage details.
-requires_bin: whop
-command: whop team-members
----
-
-A Team Member is a member of an account's team: the link between a user and an account, carrying the role that controls what they can do. Roles are either system roles (like `admin` or `moderator`) or `custom` roles managed from the dashboard.
-
-Use the Team Members API to list an account's team, add a user to the team with a system role, change a member's role, and remove members. Adding a user who has not yet accepted sends an invitation instead.
-
-# whop team-members create
-
-Create Team Member
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--account_id` | `string` | yes |  | Account ID, prefixed `biz_`. |
-| `--email` | `string` | no |  | Email address to invite. Mutually exclusive with `user_id`. If the email already belongs to a Whop account it is treated the same as passing that account's `user_id`; otherwise a pending invite is created for the email. |
-| `--role` | `string` | yes |  | The system role to grant. |
-| `--user_id` | `string` | no |  | The user to add to the team, prefixed `user_`. Mutually exclusive with `email`. |
-| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
-
-> Confirm with the user before executing this destructive command.
-
----
-
-# whop team-members delete
-
-Delete Team Member
-
-## Arguments
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| `id` | `string` | yes | Team member ID — `ausr_` for accepted members, `ausri_` for pending invites. |
-
-> Confirm with the user before executing this destructive command.
-
----
-
-# whop team-members get
-
-Retrieve Team Member
-
-## Arguments
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| `id` | `string` | yes | Team member ID — `ausr_` for accepted members, `ausri_` for pending invites. |
-
----
-
-# whop team-members list
-
-List Team Members
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--account_id` | `string` | no |  | Account ID, prefixed `biz_`. |
-| `--status` | `string` | no |  | Only return members with this status: `joined` (accepted members) or `pending` (pending invites). Both are returned by default. |
-| `--user_id` | `string` | no |  | Only return the membership for this user ID, prefixed `user_`. |
-| `--role` | `string` | no |  | Only return members with this role. `custom` matches members on a dashboard-managed custom role. |
-| `--created_before` | `string` | no |  | Only return members added before this ISO 8601 timestamp. |
-| `--created_after` | `string` | no |  | Only return members added after this ISO 8601 timestamp. |
-| `--order` | `string` | no |  | Field used to sort members. |
-| `--direction` | `string` | no |  | Sort direction. Defaults to `desc`. |
-| `--first` | `number` | no |  | Number of members to return. Defaults to 20; maximum 100. |
-| `--after` | `string` | no |  | Cursor for the next page of members. |
-
----
-
-# whop team-members update
-
-Update Team Member
-
-## Arguments
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| `id` | `string` | yes | Team member ID — `ausr_` for accepted members, `ausri_` for pending invites. |
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--role` | `string` | yes |  | The system role to grant. |
-
-> Confirm with the user before executing this destructive command.

package/skills/whop-transfers/SKILL.md

@@ -1,80 +0,0 @@
----
-name: whop-transfers
-description: Move funds between Whop accounts and users. Run `whop transfers --help` for usage details.
-requires_bin: whop
-command: whop transfers
----
-
-Transfers move value between identities on Whop. They are used for account-to-account money movement, user payouts inside Whop, crypto transfers, and claim links depending on the destination type.
-
-Use the Transfers API to create a transfer, list previous transfers, and retrieve a transfer by ID when reconciling money movement between accounts or users.
-
-# whop transfers create
-
-Create Transfer
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--amount` | `number` | yes |  | The amount to move, in the transfer currency. For example 25.00. |
-| `--currency` | `string` | no |  | Currency, such as `usd`. Required for ledger transfers. |
-| `--destination_id` | `string` | no |  | The recipient. Required for ledger and wallet_send (a user_/biz_/ldgr_ ID, or — for sends — an email). Omit for claim_link. |
-| `--expires_at` | `unknown` | no |  | claim_link only. Link expiry as an ISO 8601 timestamp. Defaults to 24 hours from creation. |
-| `--idempotence_key` | `unknown` | no |  | Ledger transfers and wallet sends. A unique key that makes retries safe. Retrying with the same key returns the original transfer, or attaches to the original wallet send, instead of moving money twice. |
-| `--metadata` | `unknown` | no |  | Ledger transfers only. Custom key-value pairs attached to the transfer. Max 50 keys, 100 chars per key, 500 chars per string value. |
-| `--notes` | `unknown` | no |  | Ledger transfers only. A short note describing the transfer. |
-| `--origin_id` | `string` | yes |  | The account sending the funds. A user ID (user_xxx), account ID (biz_xxx), or ledger account ID (ldgr_xxx). |
-| `--redeemable_count` | `number` | no |  | claim_link only. How many different users can claim the link. Defaults to 1. |
-| `--type` | `string` | no |  | The kind of money movement, which decides what comes back. Defaults to ledger. `ledger` moves credit between two Whop balances and returns a `transfer`; `wallet_send` sends USDT from the origin account's Ethereum wallet and returns a `send`; `claim_link` funds a shareable link anyone with the URL can redeem and returns a `claim_link`. A `ledger` transfer from a stablecoin-rails account settles on-chain when covered, and still returns a `transfer`. |
-| `--idempotency-key` | `string` | yes |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
-
-> Confirmation policy: For `--type ledger` only, the user's request to execute the transfer counts as confirmation when it includes exact `--origin_id`, `--destination_id`, `--amount`, and `--currency` values and both IDs use a `biz_`, `user_`, or `ldgr_` prefix. Execute that confirmed transfer yourself. This exception does not apply to `wallet_send` or `claim_link`; ask for explicit confirmation before executing those transfer types. Always include a unique `--idempotency-key`. If a result is uncertain, retry the same transfer with the same key.
-
----
-
-# whop transfers get
-
-Retrieve Transfer
-
-## Arguments
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| `id` | `string` | yes | The transfer ID. |
-
----
-
-# whop transfers list
-
-List Transfers
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--origin_id` | `string` | no |  | Filter to transfers sent from this account. Provide this or destination_id. |
-| `--destination_id` | `string` | no |  | Filter to transfers received by this account. Provide this or origin_id. |
-| `--order` | `string` | no |  | Sort column. Defaults to created_at. |
-| `--direction` | `string` | no |  | Sort direction. Defaults to desc. |
-| `--created_before` | `string` | no |  | Only transfers created strictly before this ISO 8601 timestamp. |
-| `--created_after` | `string` | no |  | Only transfers created strictly after this ISO 8601 timestamp. |
-| `--first` | `number` | no | `50` | Number of transfers to return from the start of the window. |
-| `--after` | `string` | no |  | Cursor to fetch the page after (from page_info.end_cursor). |
-| `--last` | `number` | no |  | Number of transfers to return from the end of the window. |
-| `--before` | `string` | no |  | Cursor to fetch the page before (from page_info.start_cursor). |
-
----
-
-# whop transfers recipients
-
-List Transfer Recipients
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--origin_id` | `string` | yes |  | The account sending the money: a company account ID (`biz_`), or a user ID (`user_`) for that user's own personal balance. |
-| `--query` | `string` | no |  | Search anyone on Whop by name or username, plus your own accounts by name or ID. Omit it to get the team around the balance, the people you follow, and your own accounts. The list is the same whether the balance belongs to a company or to you. Searching from a `biz_` origin additionally requires the member:basic:read scope. A credential scoped to a single company is the exception to the search itself: it only ever sees that company's own people. Complete email addresses return no matches. |
-| `--first` | `number` | no | `20` | Number of recipients per page. Search queries preserve the dashboard's 20-result maximum. |
-| `--after` | `string` | no |  | Cursor to fetch the page after (from page_info.end_cursor). |

package/skills/whop-users/SKILL.md

@@ -1,309 +0,0 @@
----
-name: whop-users
-description: "A person on Whop: profile and connected identities. Run `whop users --help` for usage details."
-requires_bin: whop
-command: whop users
----
-
-A User represents a person on Whop. Users have a public profile and can buy products, join accounts, and access experiences.
-
-Use the Users API to search for users, retrieve or update profiles, and check whether a user has access to an account, product, or experience.
-
-# whop users access
-
-Check User Access
-
-## Arguments
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| `id` | `string` | yes | The user_ tag or username to check access for. |
-| `resource_id` | `string` | yes | An account (biz_), product (prod_), or experience (exp_) ID. |
-
----
-
-# whop users authorize-app
-
-Authorize an App
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--account_id` | `string` | no |  | Authorize the app for one of the user's accounts rather than for the user alone, prefixed `biz_`. The user must have access to it. |
-| `--client_id` | `string` | yes |  | The app being authorized, prefixed `app_`. |
-| `--code_challenge` | `string` | yes |  | The PKCE code challenge: the base64url-encoded SHA-256 of your code verifier, without padding. |
-| `--code_challenge_method` | `string` | yes |  | How `code_challenge` was derived. Only `S256` is accepted. |
-| `--consent_shown` | `boolean` | no | `true` | Whether the consent UI listed these scopes for the user. Sending `false` succeeds only when the user has already granted every scope requested. |
-| `--nonce` | `string` | no |  | OIDC nonce, echoed into the resulting ID token. Required when `requested_scopes` includes `openid`. |
-| `--redirect_uri` | `string` | yes |  | Where to send the user once they have consented. Must match one of the app's registered redirect URIs exactly — it is compared as a string, not normalized. |
-| `--requested_scopes` | `array` | yes |  | The permissions the app is asking for, for example `member:basic:read`. `GET /api_keys/permissions` names and describes each one. Granting adds to whatever the user already granted this app rather than replacing it. |
-| `--response_type` | `string` | no |  | The OAuth response type. Only `code` is accepted; defaults to `code`. |
-| `--state` | `string` | no |  | Opaque value appended to `redirect_url` unchanged, for the client to correlate the response with its request. |
-| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
-
-> Confirm with the user before executing this destructive command.
-
----
-
-# whop users delete-passkey
-
-Delete
-
-## Arguments
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| `id` | `string` | yes | Passkey ID, prefixed `wcred_`. |
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--authenticator_data` | `string` | yes |  | The `authenticatorData` from the WebAuthn assertion, base64url-encoded. |
-| `--client_data_json` | `string` | yes |  | The `clientDataJSON` from the WebAuthn assertion, base64url-encoded. |
-| `--signature` | `string` | yes |  | The `signature` from the WebAuthn assertion, base64url-encoded. |
-
-> Confirm with the user before executing this destructive command.
-
----
-
-# whop users experience-notification-preferences
-
-List Experiences
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--first` | `number` | no |  | The number of preferences to return. |
-| `--after` | `string` | no |  | A cursor; returns preferences after this position. |
-
----
-
-# whop users get
-
-Retrieve User
-
-## Arguments
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| `id` | `string` | yes | User ID (prefixed `user_`) or username. |
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--account_id` | `string` | no |  | When set, returns the user's account-specific profile overrides for this account. |
-
----
-
-# whop users list
-
-List Users
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--query` | `string` | no |  | A search term to filter users by name or username. |
-| `--first` | `number` | no |  | The number of users to return (max 50). |
-| `--after` | `string` | no |  | A cursor; returns users after this position. |
-| `--last` | `number` | no |  | The number of users to return from the end of the range. |
-| `--before` | `string` | no |  | A cursor; returns users before this position. |
-
----
-
-# whop users me
-
-Retrieve Current User
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--account_id` | `string` | no |  | When set, returns your account-specific profile overrides for this account. |
-| `--include_balance_history` | `boolean` | no |  | Also compute your balance history (opt-in; runs a heavier query). Ignored for callers without balance-read scope. |
-| `--from` | `string` | no |  | Balance-history window start, ISO 8601 date or datetime. Defaults to 30 days ago. Only used with `include_balance_history`. |
-| `--to` | `string` | no |  | Balance-history window end, ISO 8601 date or datetime. Defaults to now. Only used with `include_balance_history`. |
-| `--interval` | `string` | no |  | Balance-history point granularity. Defaults to `day`. Only used with `include_balance_history`. |
-| `--time_zone` | `string` | no |  | IANA time zone the balance-history points are bucketed in. Defaults to `UTC`. Only used with `include_balance_history`. |
-
----
-
-# whop users me-oauth_grants
-
-List OAuth Grants
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--app_id` | `string` | no |  | Only return grants for this app, prefixed `app_`. An app the user has never authorized returns an empty list. |
-| `--first` | `number` | no |  | The number of grants to return (default 20, max 100). |
-| `--after` | `string` | no |  | A cursor; returns grants after this position. |
-| `--last` | `number` | no |  | The number of grants to return from the end of the range. |
-| `--before` | `string` | no |  | A cursor; returns grants before this position. |
-| `--order` | `string` | no |  | The field to sort grants by. |
-| `--direction` | `string` | no |  | Sort direction. |
-
----
-
-# whop users notification-topic-preferences
-
-List Topics
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--channel` | `string` | no |  | Only return preferences for this delivery channel (or not narrowed to a channel). |
-| `--account_id` | `string` | no |  | Only return preferences scoped to this account's member notifications (`biz_` tag). |
-| `--team_account_id` | `string` | no |  | Only return preferences scoped to this account's team notifications (`biz_` tag). |
-| `--experience_id` | `string` | no |  | Only return preferences scoped to this experience (`exp_` tag). |
-| `--topic_id` | `string` | no |  | Only return preferences scoped to this notification topic (`topic_` tag). |
-| `--first` | `number` | no |  | The number of preferences to return. |
-| `--after` | `string` | no |  | A cursor; returns preferences after this position. |
-
----
-
-# whop users passkey-challenge
-
-Create Challenge
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--challenge_type` | `string` | yes |  | The ceremony this challenge is for. |
-| `--passkey_id` | `string` | no |  | The passkey the ceremony targets, prefixed `wcred_`. Required when `challenge_type` is `deletion`, ignored otherwise. |
-| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
-
-> Confirm with the user before executing this destructive command.
-
----
-
-# whop users passkeys
-
-List
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--first` | `number` | no |  | The number of passkeys to return (default 20, max 100). |
-| `--after` | `string` | no |  | A cursor; returns passkeys after this position. |
-| `--last` | `number` | no |  | The number of passkeys to return from the end of the range. |
-| `--before` | `string` | no |  | A cursor; returns passkeys before this position. |
-| `--order` | `string` | no |  | The field to sort passkeys by. |
-| `--direction` | `string` | no |  | Sort direction. |
-
----
-
-# whop users preferences
-
-Retrieve
-
----
-
-# whop users recommend_actions
-
-List Recommended Actions
-
-## Arguments
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| `id` | `string` | yes | `me`, or the authenticated user's own `user_` tag or username. |
-
----
-
-# whop users register-passkey
-
-Register
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--attestation_object` | `string` | yes |  | The `attestationObject` from the WebAuthn attestation response, base64url-encoded. |
-| `--client_data_json` | `string` | yes |  | The `clientDataJSON` from the WebAuthn attestation response, base64url-encoded. |
-| `--credential_id` | `string` | yes |  | The WebAuthn credential ID the authenticator returned, base64url-encoded. |
-| `--nickname` | `string` | yes |  | A name for this passkey, usually the device it lives on. 255 characters or fewer. |
-| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
-
-> Confirm with the user before executing this destructive command.
-
----
-
-# whop users set-notification-preferences
-
-Set
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--preferences` | `array` | yes |  | The preferences to set, at most 100 per request. |
-
-> Confirm with the user before executing this destructive command.
-
----
-
-# whop users update
-
-Update User
-
-## Arguments
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| `id` | `string` | yes | User ID (prefixed `user_`) or username. |
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--account_id` | `string` | no |  | The account whose profile override to update. Required for API key callers. |
-| `--banner` | `unknown` | no |  |  |
-| `--bio` | `string` | no |  |  |
-| `--name` | `string` | no |  |  |
-| `--profile_picture` | `object` | no |  |  |
-| `--username` | `string` | no |  |  |
-
-> Confirm with the user before executing this destructive command.
-
----
-
-# whop users update-me
-
-Update Current User
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--account_id` | `string` | no |  | When set, updates the authenticated user's profile override for this account instead of their global profile. |
-| `--banner` | `unknown` | no |  |  |
-| `--bio` | `string` | no |  |  |
-| `--name` | `string` | no |  |  |
-| `--profile_picture` | `object` | no |  |  |
-| `--username` | `string` | no |  |  |
-
-> Confirm with the user before executing this destructive command.
-
----
-
-# whop users update-preferences
-
-Update
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--bounty_worker_onboarding_dismissed` | `boolean` | no |  | Whether the user has dismissed the first-time bounty worker onboarding. Set to `false` to show it again. |
-| `--investigation_enabled` | `boolean` | no |  | Whether investigation mode is enabled for the user. Only meaningful for staff users with investigation access. |
-
-> Confirm with the user before executing this destructive command.

package/skills/whop-verifications/SKILL.md

@@ -1,67 +0,0 @@
----
-name: whop-verifications
-description: Legal identity required before payouts and card issuing. Run `whop verifications --help` for usage details.
-requires_bin: whop
-command: whop verifications
----
-
-A Verification represents a legal identity for a person or business. Accounts and users complete verification when Whop needs to confirm who they are before enabling payouts or compliance-sensitive workflows.
-
-Use the Verifications API to start or resume a hosted verification session, check review status, and submit requested details or documents. If `requested_information` contains items, submit answers with [Update Verification](https://docs.whop.com/api-reference/beta/verifications/update-verification).
-
-# whop verifications create
-
-Create Verification
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--account_id` | `string` | no |  | Account or user ID whose identity you want to verify. Use a `biz_` account ID for account verifications, or the caller's `user_` ID for personal verification. |
-| `--idempotency-key` | `string` | no |  | A unique key that makes this request safe to retry. See [Idempotent requests](https://docs.whop.com/developer/api/idempotency). |
-
-> Confirm with the user before executing this destructive command.
-
----
-
-# whop verifications get
-
-Retrieve Verification
-
-## Arguments
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| `id` | `string` | yes | Verification profile ID, prefixed `idpf_`. |
-
----
-
-# whop verifications list
-
-List Verifications
-
-## Options
-
-| Flag | Type | Required | Default | Description |
-|------|------|----------|---------|-------------|
-| `--account_id` | `string` | no |  | Account or user ID whose verifications you want to list. Use a `biz_` account ID, or the caller's `user_` ID for personal verifications. |
-| `--order` | `string` | no |  | Field used to sort returned verifications. |
-| `--direction` | `string` | no |  | Sort direction for returned verifications. |
-
----
-
-# whop verifications update
-
-Update Verification
-
-## Arguments
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| `id` | `string` | yes | Verification profile ID, prefixed `idpf_`. |
-
-> Confirm with the user before executing this destructive command.
-
-## Steps that finish in the browser
-
-Some commands respond with a URL the user must open in a browser to finish the flow (`authorize_url`, `session_url`, `deposit_url`, `checkout_url`) — the CLI cannot complete that step itself. When a response contains one of these fields, or the CLI prints "Action required: open this link in the user's browser", open that link in the user's browser for them, tell them what to complete there, then re-run the matching `get`/`list` command to confirm the step finished.