Stripe CLI

Fixed generated file uploads when using OpenAPI-driven multipart encoding.

The CLI now reaps peer plugins when the process exits abnormally.

The CLI now checks for new versions at most once a day, with an environment variable to disable the check.

The Stripe CLI now publishes sandbox management commands and can install a specific version via install.ps1. It also rejects dot and empty positional path arguments, with minor copy changes to stripe login.

The deprecated P400 Terminal quickstart is removed, and OAuth sessions can now be managed in parallel via profiles. Also escapes positional resource IDs in API paths, and the auto-update script now handles custom install directories.

The stripe version command now supports a --notes flag.

OAuth login now prefills the user code, and --confirm and boolean flags on resource commands are fixed. Accounts v1 fixture errors now come with an explanation, plus an OpenAPI update.

Adds support for custom request headers, and the upgrade notice is now held until a release is a day old. Also removes a redundant chmod on the config file at every CLI invocation.

CLIs installed with the install script now update automatically, with update downloads bounded and unverifiable artifacts refused from staging. Auto-update check and failure status are now reported, and stripe agent setup supports grok.

The stripe listen event selection flags are redesigned, unused CLI commands are removed, and context switching behavior is enhanced. Also fixes an error when fetching endpoints during stripe listen -a, refreshes expired UAT in stripe whoami, and fixes Codex marketplace detection in agent setup.

stripe reauth is folded into stripe login, and stripe plugin uninstall --all removes all installed plugins. Plugin uninstalling is now documented.

Added stripe agent report_usage telemetry command.

Improved CLI install method detection, added Stripe-Context/Stripe-Livemode header forwarding in the docs client, and now print the upgrade command when the CLI is out of date. Also restored telemetry and root pre-run for docs commands.

Plugin installation now enforces min_core_version, ensuring compatibility with the client's core version.

OAuth whoami output now supports --format json, and the directory plugin auto-installs on first use. Improved preview Data API command discoverability and guidance, and fixed refresh preserving display_name/account_id/user_id.

Categorizes Codex hosts and closes two agent detection gaps, restores docs navigation scroll positions, and updates the OAuth login prompt.

Added a provision command as an alias to stripe projects add, and whoami now displays user information. Also improved claimable sandbox status messaging and made docs search results render without styling for AI agents.

Adds a ResolveCredentialsForAnyMode plugin RPC, letting plugins retrieve credentials regardless of the current authentication mode.

Dotted profile names can now be removed and generate warnings, and grammar and terminology in login flows were corrected. GitHub Actions workflows were hardened against supply-chain attacks.