[yashiels]

Every change is traced to the 4.3.0 app call site and verified live (read-only):

• config app-version: platform + app_version defaults (was 500)
• cms page: platform=android, real slug; cms route: positional sent as link
• account group form: named group ids (personal, ...)
• help context: real context slug; help search: positional sent as search (+ page/page_size), --autocomplete (help search and help search autocomplete return 500 #43)
• plus cancel/claim-discount/manage plan: app sends no extra params; the not-subscribed response (id + status + notification text) now maps to exit 4 with a clear message; anything else stays the raw API error
• returns pickup-points: only needs an active return checkout; generic 500 is left as the raw error; returns tracking needs a real returnId
• recommend pdp (recommend pdp: context encoding unknown, rejected locally #44): context=PLID:; recommend pdp --plid P --model K returns products live
• --plid options reject non-positive / fractional / unsafe ids with exit 4

397 tests. Oracle signed off (2 rounds).

Closes #42
Closes #43
Closes #44

[sentinel-skyner]

🛡️ Sentinel review

No material issues found in this diff.

_{Automated review via cursorbridge:gpt-5.3-codex. Findings only — not an approval. Push new commits to re-review.}