frontpage-host 0.1.13 → 0.1.15

package/AGENTS.md

@@ -109,7 +109,7 @@ Sites are Astro 6 + Tailwind v4. More detail: `frontpage help site-building` or
 ## Modules & articles
 
 - Forms: `data-fp-form` markup in pages + `frontpage modules` for enable/config. No submit JS / honeypot / `action`.
-- Wizard / connect-once modules (payments/shop/ordering/google_reviews): after building gated markup, `frontpage modules request-setup <key> --reason "…"` once — owner finishes in the **editor status bar** (CLI cannot show it). Auto-active modules (forms/callbar/…) need markup, not request-setup. `frontpage modules <key>` prints that key's CLI usage (exit 2). Index: https://frontpage.host/developers/modules
+- Wizard / connect-once modules (payments/shop/ordering): `frontpage modules <key> connect` opens the browser (Stripe or Square). Finish there, then `status`. `--no-open` for CI. `request-setup` remains valid when you want the **editor amber bar** instead. payments and shop share one Stripe account. Auto-active modules (forms/callbar/…) need markup, not request-setup. Typed settings: `frontpage modules callbar|forms|booking|signups get|set` (forms set needs `--instance`; do not target `default`). `frontpage modules <key>` prints that key's CLI usage (exit 2). Index: https://frontpage.host/developers/modules · payments/shop/ordering pages under /developers/modules/<key>
 - Google reviews: platform nodes only (`data-fp-google-reviews` / `data-fp-google-ask` + required `data-fp-requires="google_reviews"`). `data-layout` is `feed` (default), `badge`, or `link`. Never invent stars, quotes, a 1–10, or a Maps URL. Do not pick a Place ID via Autocomplete and do not write `placeId` through `modules config`. Owner-supplied Place ID / Maps URL: `frontpage modules google_reviews connect --place-id …` or `--maps-url …` (server resolves + seeds). Curation: `list-reviews`, `hide --id`, `show --id`, `set-stars`, `set-sort`, `set-weight`, `reset-weights`, `refresh`, `disconnect`. Usage: `frontpage modules google_reviews`. Docs: https://frontpage.host/developers/modules/google-reviews. Ask-widget scores: `frontpage inbox google_reviews`.
 - Articles: `frontpage articles …` for lifecycle; bodies via sync under `content/` or `articles content get|set`. Section landing is an owned `src/pages/<section>/index.astro`.
 - Migrate a folder into Articles: prefer `frontpage prompt "migrate … into articles"` — do not invent a mass delete+write migration.

package/dist/commands/modules.js

@@ -4,6 +4,8 @@ import { takeFlag } from "../argv.js";
 import { emitUsage } from "../runtime.js";
 import { formatModuleUsage, formatModulesIndex, isCliModuleAction, isDocumentedModuleKey, isGenericModuleVerb, } from "../modules/commands.js";
 import { runGoogleReviews } from "../modules/google_reviews.js";
+import { isTypedConfigCliKey, runTypedConfig } from "../modules/typed_config.js";
+import { isOauthCliKey, runOauthHandoff } from "../modules/oauth.js";
 /** Drop --site so we can print local usage without resolving a checkout. */
 function positionalArgs(args) {
     const rest = [];
@@ -38,7 +40,16 @@ export async function runModules(args) {
             }
             if (isCliModuleAction(peekedKey, peekedAction)) {
                 const { slug } = await resolveSlug(args);
-                return await runGoogleReviews(slug, peekedAction, positionalArgs(args).slice(2));
+                const extraFlags = positionalArgs(args).slice(2);
+                if (peekedKey === "google_reviews") {
+                    return await runGoogleReviews(slug, peekedAction, extraFlags);
+                }
+                if (isTypedConfigCliKey(peekedKey)) {
+                    return await runTypedConfig(peekedKey, slug, peekedAction, extraFlags);
+                }
+                if (isOauthCliKey(peekedKey)) {
+                    return await runOauthHandoff(peekedKey, slug, peekedAction, extraFlags);
+                }
             }
             if (!isGenericModuleVerb(peekedAction)) {
                 return emitUsage("modules", `${formatModuleUsage(peekedKey)}\n\nUnknown action "${peekedAction}". Not in this CLI yet — use Modules or the editor.`);

package/dist/completions/generate.js

@@ -27,6 +27,12 @@ _frontpage_completions() {
     modules)
       if [[ \${COMP_CWORD} -ge 3 && \${COMP_WORDS[2]} == google_reviews ]]; then
         COMPREPLY=( $(compgen -W "docs request-setup enable disable archive config connect resolve status list-reviews hide show set-stars set-sort set-weight reset-weights write-review-url refresh disconnect" -- "\${cur}") )
+      elif [[ \${COMP_CWORD} -ge 3 && (\${COMP_WORDS[2]} == callbar || \${COMP_WORDS[2]} == forms || \${COMP_WORDS[2]} == booking || \${COMP_WORDS[2]} == signups) ]]; then
+        COMPREPLY=( $(compgen -W "docs request-setup enable disable archive config get set" -- "\${cur}") )
+      elif [[ \${COMP_CWORD} -ge 3 && (\${COMP_WORDS[2]} == payments || \${COMP_WORDS[2]} == shop) ]]; then
+        COMPREPLY=( $(compgen -W "docs request-setup enable disable archive config status connect disconnect" -- "\${cur}") )
+      elif [[ \${COMP_CWORD} -ge 3 && \${COMP_WORDS[2]} == ordering ]]; then
+        COMPREPLY=( $(compgen -W "docs request-setup enable disable archive config status connect disconnect sync" -- "\${cur}") )
       else
         COMPREPLY=( $(compgen -W "list docs request-setup enable disable archive config callbar forms booking signups payments shop ordering articles google_reviews" -- "\${cur}") )
       fi
@@ -62,6 +68,12 @@ _frontpage() {
         modules)
           if [[ $words[2] == google_reviews ]]; then
             _values 'subcommand' docs request-setup enable disable archive config connect resolve status list-reviews hide show set-stars set-sort set-weight reset-weights write-review-url refresh disconnect
+          elif [[ $words[2] == callbar || $words[2] == forms || $words[2] == booking || $words[2] == signups ]]; then
+            _values 'subcommand' docs request-setup enable disable archive config get set
+          elif [[ $words[2] == payments || $words[2] == shop ]]; then
+            _values 'subcommand' docs request-setup enable disable archive config status connect disconnect
+          elif [[ $words[2] == ordering ]]; then
+            _values 'subcommand' docs request-setup enable disable archive config status connect disconnect sync
           else
             _values 'subcommand' list docs request-setup enable disable archive config callbar forms booking signups payments shop ordering articles google_reviews
           fi
@@ -89,6 +101,9 @@ export function generateFishCompletion() {
         `complete -c frontpage -n "__fish_seen_subcommand_from analytics" -a "dashboard summary query funnel timeseries compare sql"`,
         `complete -c frontpage -n "__fish_seen_subcommand_from modules" -a "list docs request-setup enable disable archive config callbar forms booking signups payments shop ordering articles google_reviews"`,
         `complete -c frontpage -n "__fish_seen_subcommand_from modules; and __fish_seen_subcommand_from google_reviews" -a "connect resolve status list-reviews hide show set-stars set-sort set-weight reset-weights write-review-url refresh disconnect"`,
+        `complete -c frontpage -n "__fish_seen_subcommand_from modules; and __fish_seen_subcommand_from callbar forms booking signups" -a "get set"`,
+        `complete -c frontpage -n "__fish_seen_subcommand_from modules; and __fish_seen_subcommand_from payments shop" -a "status connect disconnect"`,
+        `complete -c frontpage -n "__fish_seen_subcommand_from modules; and __fish_seen_subcommand_from ordering" -a "status connect disconnect sync"`,
         `complete -c frontpage -n "__fish_seen_subcommand_from extensions" -a "list docs enable disable config"`,
         `complete -c frontpage -l site -d "Site subdomain slug"`,
     ];

package/dist/modules/commands.d.ts

@@ -17,6 +17,9 @@ export type ModuleCommandDef = {
 };
 export declare const MODULE_COMMANDS: readonly ModuleCommandDef[];
 export declare const GOOGLE_REVIEWS_CLI_ACTIONS: readonly ["connect", "resolve", "status", "list-reviews", "hide", "show", "set-stars", "set-sort", "set-weight", "reset-weights", "write-review-url", "refresh", "disconnect"];
+export declare const TYPED_CONFIG_CLI_ACTIONS: readonly ["get", "set"];
+export declare const STRIPE_OAUTH_CLI_ACTIONS: readonly ["status", "connect", "disconnect"];
+export declare const ORDERING_OAUTH_CLI_ACTIONS: readonly ["status", "connect", "disconnect", "sync"];
 export declare function isCliModuleAction(key: DocumentedModuleKey, action: string): boolean;
 export declare function isDocumentedModuleKey(raw: string): raw is DocumentedModuleKey;
 export declare function isGenericModuleVerb(raw: string): boolean;

package/dist/modules/commands.js

@@ -37,67 +37,86 @@ export const MODULE_COMMANDS = [
     {
         key: "callbar",
         name: "Call bar",
-        summary: "Phone / SMS bar. Generic enable and JSON config only in this CLI.",
+        summary: "Phone / SMS bar. Typed get/set for phone, sms, and label.",
         genericActions: GENERIC_ACTIONS,
-        extraActions: [],
-        notYet: ["get", "set --phone"],
+        extraActions: [
+            "get",
+            "set --phone +1… [--sms yes|no] [--label \"Call\"]",
+        ],
+        notYet: [],
         examples: [
             "frontpage modules callbar",
+            "frontpage modules callbar get",
+            "frontpage modules callbar set --phone +14085551234 --sms no",
             "frontpage modules callbar docs",
-            "frontpage modules callbar enable",
             `frontpage modules config callbar --config '{"phone":"+1…"}'`,
         ],
         notes: [
-            "Typed get/set flags are not in this CLI yet — use Modules or `modules config`.",
+            "Typed flags write the same whitelist as `modules config`. Generic JSON config still works.",
         ],
     },
     {
         key: "forms",
         name: "Forms",
-        summary: "Lead forms. Multi-instance; use --instance for one form.",
+        summary: "Lead forms. Get lists instances; set requires --instance.",
         genericActions: GENERIC_ACTIONS,
-        extraActions: [],
-        notYet: ["get", "set --notify-email"],
+        extraActions: [
+            "get [--instance <slug>]",
+            "set --instance <slug> [--notify-email] [--confirm yes|no]",
+        ],
+        notYet: [],
         examples: [
             "frontpage modules forms",
+            "frontpage modules forms get",
+            "frontpage modules forms get --instance lead-gen",
+            "frontpage modules forms set --instance lead-gen --notify-email hi@example.com",
             "frontpage modules forms docs",
-            "frontpage modules forms enable --instance lead-gen",
             `frontpage modules config forms --instance lead-gen --config '{"notifyEmail":"hi@example.com"}'`,
         ],
         notes: [
-            "Typed get/set flags are not in this CLI yet — use Modules or `modules config`.",
+            "Without --instance, get lists each form (id, status, notifyEmail). Do not target `default`.",
+            "Confirmation emails require a paid plan (same as Modules).",
         ],
     },
     {
         key: "booking",
         name: "Booking",
-        summary: "Booking requests. Generic enable and JSON config only in this CLI.",
+        summary: "Booking requests. Typed get/set for notify email and hours.",
         genericActions: GENERIC_ACTIONS,
-        extraActions: [],
-        notYet: ["get", "set --notify-email"],
+        extraActions: [
+            "get",
+            "set [--notify-email] [--hours \"…\"]",
+        ],
+        notYet: [],
         examples: [
             "frontpage modules booking",
+            "frontpage modules booking get",
+            "frontpage modules booking set --notify-email book@example.com --hours \"Mon–Fri 9–5\"",
             "frontpage modules booking docs",
-            "frontpage modules booking enable",
         ],
         notes: [
-            "Typed get/set flags are not in this CLI yet — use Modules or `modules config`.",
+            "Typed flags write the same whitelist as `modules config`. Generic JSON config still works.",
         ],
     },
     {
         key: "signups",
         name: "Mailing list",
-        summary: "Email signups. Generic enable and JSON config only in this CLI.",
+        summary: "Email signups. Typed get/set for notify email and confirmations.",
         genericActions: GENERIC_ACTIONS,
-        extraActions: [],
-        notYet: ["get", "set --notify-email"],
+        extraActions: [
+            "get",
+            "set [--notify-email] [--confirm yes|no]",
+        ],
+        notYet: [],
         examples: [
             "frontpage modules signups",
+            "frontpage modules signups get",
+            "frontpage modules signups set --notify-email hello@example.com --confirm no",
             "frontpage modules signups docs",
-            "frontpage modules signups enable",
         ],
         notes: [
-            "Typed get/set flags are not in this CLI yet — use Modules or `modules config`.",
+            "Confirmation emails require a paid plan (same as Modules).",
+            "Typed flags write the same whitelist as `modules config`. Generic JSON config still works.",
         ],
     },
     {
@@ -105,16 +124,24 @@ export const MODULE_COMMANDS = [
         name: "Payments",
         summary: "Stripe payments. Connect finishes in the browser, not the terminal.",
         genericActions: GENERIC_ACTIONS,
-        extraActions: [],
-        notYet: ["connect", "disconnect", "status"],
+        extraActions: [
+            "status",
+            "connect [--no-open]",
+            "disconnect [--yes]",
+        ],
+        notYet: [],
         examples: [
             "frontpage modules payments",
+            "frontpage modules payments status",
+            "frontpage modules payments connect --no-open",
+            "frontpage modules payments disconnect --yes",
             "frontpage modules payments docs",
             'frontpage modules payments request-setup --reason "Deposit button needs Stripe"',
         ],
         notes: [
-            "OAuth cannot finish in this CLI. Use request-setup (editor amber bar) or the Modules hub.",
-            "payments and shop share one Stripe account.",
+            "Connect opens Stripe. Finish in the browser, then re-run status. This CLI cannot complete OAuth.",
+            "payments and shop share one Stripe account — disconnect says so.",
+            "request-setup still lights the editor amber bar when you want the owner to finish there.",
         ],
     },
     {
@@ -122,16 +149,25 @@ export const MODULE_COMMANDS = [
         name: "Online store",
         summary: "Stripe shop. Shares the payments Stripe account.",
         genericActions: GENERIC_ACTIONS,
-        extraActions: [],
-        notYet: ["connect", "disconnect", "status"],
+        extraActions: [
+            "status",
+            "connect [--no-open]",
+            "disconnect [--yes]",
+        ],
+        notYet: [],
         examples: [
             "frontpage modules shop",
+            "frontpage modules shop status",
+            "frontpage modules shop connect --no-open",
+            "frontpage modules shop disconnect --yes",
             "frontpage modules shop docs",
             'frontpage modules shop request-setup --reason "You asked for a store — Stripe setup makes checkout live"',
         ],
         notes: [
-            "OAuth cannot finish in this CLI. Use request-setup (editor amber bar) or the Modules hub.",
-            "payments and shop share one Stripe account.",
+            "Connect opens Stripe. Finish in the browser, then re-run status. This CLI cannot complete OAuth.",
+            "payments and shop share one Stripe account — disconnect says so.",
+            "Shop still needs the shipping step in Modules if you have not set it.",
+            "request-setup still lights the editor amber bar when you want the owner to finish there.",
         ],
     },
     {
@@ -139,15 +175,27 @@ export const MODULE_COMMANDS = [
         name: "Online ordering",
         summary: "Square ordering. Connect finishes in the browser, not the terminal.",
         genericActions: GENERIC_ACTIONS,
-        extraActions: [],
-        notYet: ["connect", "disconnect", "sync", "status"],
+        extraActions: [
+            "status",
+            "connect [--no-open]",
+            "disconnect [--yes]",
+            "sync",
+        ],
+        notYet: ["fulfillment get|set"],
         examples: [
             "frontpage modules ordering",
+            "frontpage modules ordering status",
+            "frontpage modules ordering connect --no-open",
+            "frontpage modules ordering sync",
+            "frontpage modules ordering disconnect --yes",
             "frontpage modules ordering docs",
             'frontpage modules ordering request-setup --reason "You asked for online ordering — Square setup makes it live"',
         ],
         notes: [
-            "OAuth cannot finish in this CLI. Use request-setup (editor amber bar) or the Modules hub.",
+            "Connect opens Square. Finish in the browser, then re-run status. This CLI cannot complete OAuth.",
+            "sync refreshes the Square catalog (same as the hub Sync button).",
+            "request-setup still lights the editor amber bar when you want the owner to finish there.",
+            "Fulfillment (pickup/delivery) is not in this CLI yet — use Modules or the editor.",
         ],
     },
     {
@@ -220,10 +268,22 @@ export const GOOGLE_REVIEWS_CLI_ACTIONS = [
     "refresh",
     "disconnect",
 ];
+export const TYPED_CONFIG_CLI_ACTIONS = ["get", "set"];
+export const STRIPE_OAUTH_CLI_ACTIONS = ["status", "connect", "disconnect"];
+export const ORDERING_OAUTH_CLI_ACTIONS = ["status", "connect", "disconnect", "sync"];
 export function isCliModuleAction(key, action) {
     if (key === "google_reviews") {
         return GOOGLE_REVIEWS_CLI_ACTIONS.includes(action);
     }
+    if (key === "callbar" || key === "forms" || key === "booking" || key === "signups") {
+        return TYPED_CONFIG_CLI_ACTIONS.includes(action);
+    }
+    if (key === "payments" || key === "shop") {
+        return STRIPE_OAUTH_CLI_ACTIONS.includes(action);
+    }
+    if (key === "ordering") {
+        return ORDERING_OAUTH_CLI_ACTIONS.includes(action);
+    }
     return false;
 }
 export function isDocumentedModuleKey(raw) {

package/dist/modules/oauth.d.ts

@@ -0,0 +1,4 @@
+export declare const OAUTH_CLI_KEYS: readonly ["payments", "shop", "ordering"];
+export type OauthCliKey = (typeof OAUTH_CLI_KEYS)[number];
+export declare function isOauthCliKey(key: string): key is OauthCliKey;
+export declare function runOauthHandoff(key: OauthCliKey, slug: string, action: string, flags: string[]): Promise<number>;

package/dist/modules/oauth.js

@@ -0,0 +1,122 @@
+/**
+ * §CLI-MOD-OAUTH — payments / shop / ordering connect, status, disconnect, sync.
+ */
+import { spawn } from "node:child_process";
+import { assertNoUnknownFlags, hasFlag } from "../argv.js";
+import { apiBase, EXIT_OK, v1Get, v1Post } from "../http/client.js";
+import { emitOk, emitUsage, isJson, requireYesOrTty } from "../runtime.js";
+import { formatModuleUsage } from "./commands.js";
+export const OAUTH_CLI_KEYS = ["payments", "shop", "ordering"];
+export function isOauthCliKey(key) {
+    return OAUTH_CLI_KEYS.includes(key);
+}
+const FINISH = "Finish in the browser, then re-run status. This CLI cannot complete OAuth.";
+function pathFor(slug, key) {
+    return `/api/v1/sites/${encodeURIComponent(slug)}/modules/${encodeURIComponent(key)}`;
+}
+function resolveOpenUrl(raw) {
+    if (typeof raw !== "string" || !raw.trim())
+        return null;
+    const trimmed = raw.trim();
+    if (/^https?:\/\//i.test(trimmed))
+        return trimmed;
+    if (trimmed.startsWith("/"))
+        return `${apiBase()}${trimmed}`;
+    return null;
+}
+function openBrowser(url) {
+    const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
+    const openerArgs = process.platform === "win32" ? ["/c", "start", "", url] : [url];
+    spawn(opener, openerArgs, { detached: true, stdio: "ignore" }).unref();
+}
+function printStatus(key, data) {
+    const connection = (data.connection ?? {});
+    const display = connection.display ?? {};
+    console.log(`connected  ${connection.ready ? "yes" : "no"}`);
+    if (key === "ordering") {
+        console.log(`merchant   ${display.merchantName ?? "—"}`);
+        if (display.locationCount != null)
+            console.log(`locations  ${display.locationCount}`);
+        if (display.cardProcessing != null)
+            console.log(`cards      ${display.cardProcessing ? "yes" : "no"}`);
+        if (display.menuSyncedAt)
+            console.log(`menu sync  ${display.menuSyncedAt}`);
+    }
+    else {
+        console.log(`charges    ${display.chargesEnabled == null ? "—" : display.chargesEnabled ? "yes" : "no"}`);
+        console.log(`account    ${display.accountPresent ? "present" : "none"}`);
+        if (typeof data.sharedStripe === "string")
+            console.log(`note       ${data.sharedStripe}`);
+    }
+    if (typeof data.connectUrl === "string")
+        console.log(`connect    ${data.connectUrl}`);
+}
+export async function runOauthHandoff(key, slug, action, flags) {
+    const work = [...flags];
+    const usage = formatModuleUsage(key);
+    if (action === "status") {
+        assertNoUnknownFlags(work, "modules");
+        const data = await v1Get(pathFor(slug, key));
+        if (isJson()) {
+            emitOk("modules", data);
+            return EXIT_OK;
+        }
+        printStatus(key, data);
+        return EXIT_OK;
+    }
+    if (action === "connect") {
+        const noOpen = hasFlag(work, "--no-open");
+        assertNoUnknownFlags(work, "modules");
+        const data = await v1Post(pathFor(slug, key), { action: "connect" });
+        if (isJson()) {
+            emitOk("modules", data);
+        }
+        else {
+            const url = resolveOpenUrl(data.connectUrl);
+            if (url)
+                console.log(url);
+            console.log(typeof data.message === "string" ? data.message : FINISH);
+            if (typeof data.warning === "string")
+                console.log(data.warning);
+        }
+        const url = resolveOpenUrl(data.connectUrl);
+        if (url && !noOpen)
+            openBrowser(url);
+        return EXIT_OK;
+    }
+    if (action === "disconnect") {
+        assertNoUnknownFlags(work, "modules");
+        const label = key === "ordering"
+            ? "disconnect Square"
+            : key === "payments"
+                ? "disconnect payments (shared Stripe account with the store)"
+                : "disconnect the store (shared Stripe account with payments)";
+        const refuse = requireYesOrTty(label);
+        if (refuse)
+            return emitUsage("modules", refuse);
+        const data = await v1Post(pathFor(slug, key), { action: "disconnect" });
+        if (isJson()) {
+            emitOk("modules", data);
+            return EXIT_OK;
+        }
+        console.log(typeof data.message === "string" ? data.message : "Disconnected.");
+        if (typeof data.warning === "string" && data.warning !== data.message) {
+            console.log(data.warning);
+        }
+        return EXIT_OK;
+    }
+    if (action === "sync") {
+        if (key !== "ordering") {
+            return emitUsage("modules", `sync is only available for ordering.\n\n${usage}`);
+        }
+        assertNoUnknownFlags(work, "modules");
+        const data = await v1Post(pathFor(slug, key), { action: "sync" });
+        if (isJson()) {
+            emitOk("modules", data);
+            return EXIT_OK;
+        }
+        console.log(`Synced — ${data.itemCount ?? 0} items, ${data.locationCount ?? 0} locations.`);
+        return EXIT_OK;
+    }
+    return emitUsage("modules", `${usage}\n\nUnknown action "${action}".`);
+}

package/dist/modules/typed_config.d.ts

@@ -0,0 +1,4 @@
+export declare const TYPED_CONFIG_CLI_KEYS: readonly ["callbar", "forms", "booking", "signups"];
+export type TypedConfigCliKey = (typeof TYPED_CONFIG_CLI_KEYS)[number];
+export declare function isTypedConfigCliKey(key: string): key is TypedConfigCliKey;
+export declare function runTypedConfig(key: TypedConfigCliKey, slug: string, action: string, flags: string[]): Promise<number>;

package/dist/modules/typed_config.js

@@ -0,0 +1,146 @@
+/**
+ * §CLI-MOD-CFG — typed get/set for callbar, forms, booking, signups.
+ */
+import { assertNoUnknownFlags, takeFlag } from "../argv.js";
+import { EXIT_OK, v1Get, v1Post } from "../http/client.js";
+import { emitOk, emitUsage, isJson } from "../runtime.js";
+import { formatModuleUsage } from "./commands.js";
+export const TYPED_CONFIG_CLI_KEYS = ["callbar", "forms", "booking", "signups"];
+export function isTypedConfigCliKey(key) {
+    return TYPED_CONFIG_CLI_KEYS.includes(key);
+}
+function pathFor(slug, key) {
+    return `/api/v1/sites/${encodeURIComponent(slug)}/modules/${encodeURIComponent(key)}`;
+}
+function dash(v) {
+    if (v == null || v === "")
+        return "—";
+    return String(v);
+}
+function yesNo(v) {
+    if (v === true || v === "yes" || v === "true")
+        return "yes";
+    if (v === false || v === "no" || v === "false")
+        return "no";
+    return "—";
+}
+function printLine(label, value) {
+    console.log(`${label.padEnd(10)} ${value}`);
+}
+function printCallbar(config) {
+    printLine("phone", dash(config.phone));
+    printLine("sms", yesNo(config.sms));
+    printLine("label", dash(config.label));
+}
+function printBooking(config) {
+    printLine("notify", dash(config.notifyEmail));
+    printLine("hours", dash(config.hours));
+}
+function printConfirmable(config, confirmations) {
+    printLine("notify", dash(config.notifyEmail));
+    const on = config.confirmEnabled === true;
+    if (confirmations && !confirmations.available)
+        printLine("confirm", `${yesNo(on)}  (coming soon)`);
+    else if (confirmations && !confirmations.paid)
+        printLine("confirm", `${yesNo(on)}  (paid plan required)`);
+    else
+        printLine("confirm", yesNo(on));
+}
+function printFormsList(instances) {
+    if (!instances.length) {
+        console.log("(no forms)");
+        return;
+    }
+    for (const i of instances) {
+        const id = i.instance ?? "";
+        const label = i.label && i.label !== id ? i.label : "";
+        const status = String(i.status ?? "—");
+        const email = typeof i.config?.notifyEmail === "string" ? i.config.notifyEmail : "(account email)";
+        console.log(`${id.padEnd(20)}  ${status.padEnd(12)}  ${label ? `${label}  ` : ""}${email}`);
+    }
+}
+function parseYesNoFlag(raw, flag) {
+    if (raw == null)
+        return undefined;
+    if (raw === "yes" || raw === "true")
+        return true;
+    if (raw === "no" || raw === "false")
+        return false;
+    throw Object.assign(new Error(`${flag} must be yes or no.`), { exitCode: 2 });
+}
+export async function runTypedConfig(key, slug, action, flags) {
+    const usage = formatModuleUsage(key);
+    const work = [...flags];
+    if (action === "get") {
+        const instanceId = takeFlag(work, "--instance");
+        assertNoUnknownFlags(work, "modules");
+        const q = instanceId ? `?instanceId=${encodeURIComponent(instanceId)}` : "";
+        const data = await v1Get(`${pathFor(slug, key)}${q}`);
+        if (isJson()) {
+            emitOk("modules", data);
+            return EXIT_OK;
+        }
+        if (key === "forms" && !instanceId) {
+            printFormsList(data.instances ?? []);
+            return EXIT_OK;
+        }
+        if (key === "callbar")
+            printCallbar(data.config ?? {});
+        else if (key === "booking")
+            printBooking(data.config ?? {});
+        else
+            printConfirmable(data.config ?? {}, data.confirmations);
+        return EXIT_OK;
+    }
+    if (action === "set") {
+        const instanceId = takeFlag(work, "--instance");
+        const phone = takeFlag(work, "--phone");
+        const sms = takeFlag(work, "--sms");
+        const label = takeFlag(work, "--label");
+        const notifyEmail = takeFlag(work, "--notify-email");
+        const hours = takeFlag(work, "--hours");
+        const confirmRaw = takeFlag(work, "--confirm");
+        assertNoUnknownFlags(work, "modules");
+        let confirmEnabled;
+        try {
+            confirmEnabled = parseYesNoFlag(confirmRaw, "--confirm");
+        }
+        catch (err) {
+            return emitUsage("modules", `${err instanceof Error ? err.message : String(err)}\n\n${usage}`);
+        }
+        const body = { action: "set" };
+        if (instanceId)
+            body.instanceId = instanceId;
+        if (phone !== undefined)
+            body.phone = phone;
+        if (sms !== undefined)
+            body.sms = sms;
+        if (label !== undefined)
+            body.label = label;
+        if (notifyEmail !== undefined)
+            body.notifyEmail = notifyEmail;
+        if (hours !== undefined)
+            body.hours = hours;
+        if (confirmEnabled !== undefined)
+            body.confirmEnabled = confirmEnabled;
+        if (key === "forms" && !instanceId) {
+            return emitUsage("modules", `Usage: frontpage modules forms set --instance <slug> [--notify-email] [--confirm yes|no]\n\n${usage}`);
+        }
+        const data = await v1Post(pathFor(slug, key), body);
+        if (isJson()) {
+            emitOk("modules", data);
+            return EXIT_OK;
+        }
+        const updated = Array.isArray(data.updated) ? data.updated.join(", ") : "settings";
+        console.log(`Updated ${key}${instanceId ? ` ${instanceId}` : ""} — ${updated}.`);
+        const cfg = data.config ?? {};
+        if (key === "callbar")
+            printCallbar(cfg);
+        else if (key === "booking")
+            printBooking(cfg);
+        else
+            printConfirmable(cfg);
+        return EXIT_OK;
+    }
+    return emitUsage("modules", `${usage}\n\nUnknown action "${action}".`);
+}

package/dist/registry.js

@@ -324,6 +324,12 @@ export const COMMANDS = [
             "frontpage modules google_reviews connect --place-id ChIJ…",
             "frontpage modules google_reviews list-reviews --stars 4,5",
             "frontpage modules google_reviews enable",
+            "frontpage modules callbar get",
+            "frontpage modules callbar set --phone +14085551234 --sms no",
+            "frontpage modules forms get",
+            "frontpage modules forms set --instance lead-gen --notify-email hi@example.com",
+            "frontpage modules ordering connect --no-open",
+            "frontpage modules payments status",
             "frontpage modules docs forms",
             "frontpage modules docs google_reviews",
             "frontpage modules docs signups",
@@ -335,11 +341,15 @@ export const COMMANDS = [
             "Bare `frontpage modules <key>` prints that key's CLI usage (exit 2) — not agentDocs",
             "Key-first and verb-first both work: `modules google_reviews enable` = `modules enable google_reviews`",
             "google_reviews extras: connect / resolve / status / list-reviews / hide / show / set-stars / set-sort / set-weight / reset-weights / refresh / disconnect / write-review-url",
+            "callbar/forms/booking/signups: typed get / set (same whitelist as `modules config`)",
+            "payments/shop/ordering: connect opens the browser; finish there, then status. --no-open for CI. request-setup still lights the editor amber bar.",
             "See https://frontpage.host/developers/modules and /developers/modules/google-reviews",
         ],
         dangers: [
             "Secret values are never returned — masks only",
             "request-setup surfaces an owner prompt in the editor status bar (CLI cannot show it)",
+            "payments and shop share one Stripe account — disconnect warns before teardown",
+            "OAuth cannot finish in the terminal; connect only opens the vendor URL",
             "Do not write placeId through generic config — that skips listing resolve + seed",
         ],
         seeAlso: ["articles", "inbox"],
@@ -585,7 +595,9 @@ export const TOPICS = {
   frontpage fonts [list|search] [--slot …] [--query …]
   frontpage tokens set --group … --key … --value …
   frontpage modules list|docs|request-setup|enable|disable|archive|config <key>
-  frontpage modules <key>            # that key's CLI usage (generic only in this phase)
+  frontpage modules <key>            # that key's CLI usage
+  frontpage modules payments|shop|ordering connect [--no-open]   # opens Stripe/Square; then status
+  frontpage modules ordering sync
   # mailing list key: signups. Index: https://frontpage.host/developers/modules
   frontpage extensions list|docs|enable|disable|config <key>
   frontpage settings get|set
@@ -595,7 +607,7 @@ export const TOPICS = {
   Do not fake payments/checkout. LOCKED extensions → do not fake; say plan required.
   Migrate pages → articles: prefer frontpage prompt "migrate …" over mass delete+write.
   edit uses click-edit (exact single occurrence), not push / gated-write.
-  Module OAuth and secret values are not exposed via the CLI.
+  Connect opens Stripe/Square in the browser; this CLI never accepts or returns OAuth secrets.
   Site contract: frontpage help site-building · https://frontpage.host/developers/site-building
   Domains, billing, members, and site delete are out of v1.`,
     history: `History

package/llms.txt

@@ -8,7 +8,7 @@
 - Fonts: frontpage fonts [--slot] [--query] → exact value → tokens set fonts.<role> → APPLY font-sans|serif|mono|display. Build bundles catalog faces from tokens.ts and/or CSS font-family contexts (not prose). Inline-only without tokens works for catalog faces after rebuild; prefer tokens+utilities for brand roles.
 - Module/extension docs: frontpage modules docs <key> | frontpage extensions docs <key>
 - Search flags: --regex --case-sensitive --whole-word --files-only --context-lines --max-results
-- Modules setup: frontpage modules request-setup <key> --reason "…" (owner status bar; CLI cannot show it). frontpage modules <key> prints that key's CLI usage. Index: https://frontpage.host/developers/modules. google_reviews: frontpage modules google_reviews connect --place-id | --maps-url (server resolve + seed; no Autocomplete; do not write placeId via config). Also status, list-reviews, hide/show, set-stars, set-sort, set-weight, reset-weights, refresh, disconnect. Docs: https://frontpage.host/developers/modules/google-reviews. Markup: data-fp-google-reviews / data-fp-google-ask + required data-fp-requires="google_reviews". Ask scores: frontpage inbox google_reviews.
+- Modules setup: wizard modules (payments/shop/ordering): frontpage modules <key> connect [--no-open] opens Stripe/Square; finish in the browser, then status. request-setup remains valid for the editor amber bar. payments and shop share one Stripe account. frontpage modules <key> prints that key's CLI usage. Index: https://frontpage.host/developers/modules. Typed config: frontpage modules callbar|forms|booking|signups get|set (forms set needs --instance; confirm emails paid-plan only). google_reviews: frontpage modules google_reviews connect --place-id | --maps-url (server resolve + seed; no Autocomplete; do not write placeId via config). Also status, list-reviews, hide/show, set-stars, set-sort, set-weight, reset-weights, refresh, disconnect. Docs: https://frontpage.host/developers/modules/google-reviews. Markup: data-fp-google-reviews / data-fp-google-ask + required data-fp-requires="google_reviews". Ask scores: frontpage inbox google_reviews.
 - Analytics ops: frontpage analytics summary|query|funnel|timeseries|compare|sql (bare analytics = dashboard)
 - Media: frontpage media upload <file> (images/PDF ≤25 MB, video ≤50 MB, SVG/text ≤4 MB); human prints sitePath first — use /__media/uploads/<slug>/… in markup. Text/CSV is inline only (not media library; --json omits full content).
 - Prompt attachments: frontpage prompt "…" --attach <file|/__media/…|https://…> [--asset-url https://…] (same media caps as media upload)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "frontpage-host",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "description": "Frontpage CLI — manage your site from the terminal",
   "type": "module",
   "bin": {