@myapihq/cli 1.3.12 → 2.0.1

package/dist/commands/fn.js

@@ -15,6 +15,8 @@ export const EXPOSES = [
 ];
 export const SCHEMA = {
     cron: 'string',
+    scope: 'string',
+    set: 'string',
 };
 // Backend: Story 1 (function CRUD + scoped key) and Story 2/4/5 (deploy a
 // JS bundle to Cloudflare Workers, list runs, set env secrets).
@@ -67,6 +69,14 @@ export async function create(flags) {
     };
     if (cron)
         payload.cron_schedule = cron;
+    // --scope narrows the minted key's slot grants. Repeatable, but the flag
+    // parser keeps only the last occurrence, so we also accept a comma-joined
+    // list (e.g. --scope email,storage). Grants can never exceed the caller's.
+    if (typeof flags.scope === 'string') {
+        const scopes = flags.scope.split(',').map(s => s.trim()).filter(Boolean);
+        if (scopes.length > 0)
+            payload.scopes = scopes;
+    }
     const result = await sdkFn.createFunction(config.api_key, orgId, payload);
     success(`Function created: ${result.function.id}`);
     info(`Name:            ${result.function.name}`);
@@ -77,7 +87,8 @@ export async function create(flags) {
     info('');
     info(`Scoped API key (returned once — save it if you need it):`);
     info(`  ${result.scoped_api_key}`);
-    info(`  (id: ${result.scoped_api_key_id}; scopes: slot_call; rejected at /hq/*, /admin/*, /internal/*)`);
+    const scopeNote = payload.scopes && payload.scopes.length > 0 ? `slots: ${payload.scopes.join(', ')}` : 'scopes: slot_call';
+    info(`  (id: ${result.scoped_api_key_id}; ${scopeNote}; rejected at /hq/*, /admin/*, /internal/*)`);
     if (!result.function.invocation_url) {
         info('');
         banner(`Next: deploy code with  myapi fn deploy ${result.function.id} <bundle.js>`);
@@ -153,14 +164,48 @@ export async function deploy(id, bundlePath, flags) {
     info(`Scoped API key was rotated. New value (returned once — save it if you need it):`);
     info(`  ${result.scoped_api_key}`);
 }
-// env sets a Worker Secret (Stripe key, etc.) on a deployed function.
+// _parseSetPairs parses `--set K=V` entries into a map. Accepts a single
+// string (comma-joined: K=V,K2=V2) or an array of strings (when the flag is
+// repeated and the parser preserves them). Returns the map or an error
+// message string (pure form, for tests).
+export function _parseSetPairs(raw) {
+    const entries = [];
+    for (const chunk of Array.isArray(raw) ? raw : [raw]) {
+        for (const pair of chunk.split(',').map(s => s.trim()).filter(Boolean))
+            entries.push(pair);
+    }
+    const env = {};
+    for (const pair of entries) {
+        const eq = pair.indexOf('=');
+        if (eq < 1)
+            return `Invalid --set entry "${pair}". Use KEY=VALUE.`;
+        env[pair.slice(0, eq)] = pair.slice(eq + 1);
+    }
+    return env;
+}
+// env sets Worker Secret(s) (Stripe key, etc.) on a deployed function.
+// Single form:  myapi fn env <id> <name> <value>
+// Bulk form:    myapi fn env <id> --set K=V[,K2=V2 ...]
 export async function setEnv(id, name, value, flags) {
     const config = requireConfig();
-    const orgId = requireOrg(flags, config, 'myapi fn env <id> <name> <value> [--org <id>]');
+    const orgId = requireOrg(flags, config, 'myapi fn env <id> <name> <value> | --set K=V [--org <id>]');
     if (!id)
-        error('Missing id.\nUsage: myapi fn env <id> <name> <value>');
+        error('Missing id.\nUsage: myapi fn env <id> <name> <value>   (or --set K=V for bulk)');
+    // Bulk path: one --set string (comma-joined) or repeated --set occurrences.
+    if (flags.set !== undefined && flags.set !== true) {
+        const env = _parseSetPairs(flags.set);
+        if (typeof env === 'string')
+            error(env);
+        if (Object.keys(env).length === 0)
+            error('No secrets given. Usage: myapi fn env <id> --set KEY=VALUE');
+        const result = await sdkFn.setFunctionEnvBulk(config.api_key, orgId, id, env);
+        success(`Set ${result.set} secret${result.set === 1 ? '' : 's'} on function ${id}`);
+        info('Values are encrypted at rest by Cloudflare and never stored or echoed by MyAPI.');
+        return;
+    }
+    // Single-secret path (original form).
     if (!name)
-        error('Missing secret name.\nUsage: myapi fn env <id> <name> <value>');
+        error('Missing secret name.\nUsage: myapi fn env <id> <name> <value>   (or --set K=V for bulk)');
     if (value === undefined)
         error('Missing secret value.\nUsage: myapi fn env <id> <name> <value>');
     await sdkFn.setFunctionEnv(config.api_key, orgId, id, name, value);
@@ -191,7 +236,7 @@ export async function runs(id, flags) {
 }
 // ── Dispatcher ───────────────────────────────────────────────────────────────
 const SUBCOMMAND_USAGE = {
-    'create': `myapi fn create --name <name> [--cron <expr>] [--org <id>]
+    'create': `myapi fn create --name <name> [--cron <expr>] [--scope <slot>[,<slot>...]] [--org <id>]
 
 Persists a function record + issues a scoped API key. Deploy code separately
 with "myapi fn deploy".
@@ -200,9 +245,15 @@ Triggers:
   (default)         HTTP — function gets a public invocation URL once deployed.
   --cron <expr>     Cron — function runs on the schedule (e.g. "0 8 * * *").
 
+Scoping:
+  --scope <slot>    Narrow the minted key's slot grants (comma-separated list,
+                    e.g. --scope email,storage). Omit to inherit your grants.
+                    The key can never out-reach the credential that created it.
+
 Examples:
   myapi fn create --name my-app-api
   myapi fn create --name daily-report --cron "0 8 * * *"
+  myapi fn create --name mailer --scope email,storage
 
 The response returns the scoped API key ONCE. It lets the function call
 other MyAPI slots with its own permissions (scopes=slot_call; rejected at
@@ -218,13 +269,14 @@ once. After deploy the function has a live invocation URL.
 Example:
   myapi fn deploy <id> ./dist/bundle.js`,
     'env': `myapi fn env <id> <name> <value> [--org <id>]
+       myapi fn env <id> --set KEY=VALUE[,KEY2=VALUE2 ...] [--org <id>]
 
-Sets a secret (Stripe key, API token, ...) as a Cloudflare Worker Secret on
-a deployed function. The value is encrypted at rest and never stored in
-MyAPI or echoed back. The function must already be deployed.
+Sets one or more secrets (Stripe key, API token, ...) as Cloudflare Worker
+Secrets on a deployed function. Values are encrypted at rest and never stored
+in MyAPI or echoed back. The function must already be deployed.
 
-Example:
-  myapi fn env <id> STRIPE_KEY sk_live_...`,
+  Single:  myapi fn env <id> STRIPE_KEY sk_live_...
+  Bulk:    myapi fn env <id> --set STRIPE_KEY=sk_live_...,WEBHOOK_SECRET=whsec_...`,
     'runs': `myapi fn runs <id> [--org <id>] [--json]
 
 Lists recent invocation records (most recent first, up to 100).`,
@@ -242,7 +294,7 @@ Subcommands:
   create               Register a function and get its scoped API key (returned once)
   delete <id>          Soft-delete and revoke its scoped API key
   deploy <id> <file>   Upload a JS bundle and go live
-  env <id> <k> <v>     Set a Worker Secret on a deployed function
+  env <id> <k> <v>     Set a Worker Secret (or --set K=V for bulk) on a deployed function
   get <id>             Inspect a function
   list                 List functions in your org
   runs <id>            List recent invocation records

package/dist/commands/keys.js

@@ -162,7 +162,7 @@ export async function revokeAll(flags) {
     const res = await hq.revokeAllKeys(config.api_key, kind);
     success(`Revoked ${res.revoked} key(s).`);
     if (!kind) {
-        info('Your current key was revoked too — re-authenticate with: myapi auth setup');
+        info('Your current key was revoked too — re-authenticate with: myapi account setup');
     }
 }
 // ── Dispatcher ───────────────────────────────────────────────────────────────
@@ -186,7 +186,7 @@ create flags:
   --org <org_id>       Lock the key to one org. Omit for account-wide.
   --spend-cap <usd>    Per-key spend ceiling in dollars, e.g. --spend-cap 50
 
-${prefix === 'keys' ? 'Alias for: myapi auth api-keys' : 'Alias: myapi keys <subcommand>'}`;
+${prefix === 'keys' ? 'Alias for: myapi account api-keys' : 'Alias: myapi keys <subcommand>'}`;
 }
 function subcommandUsage(prefix) {
     return {
@@ -203,7 +203,7 @@ Omitting --grant mints an unrestricted key. --grant slots: ${[...hq.GRANTABLE_SL
         'revoke-all': `myapi ${prefix} revoke-all [--kind function|manual|account] [--yes]
 
 Kill switch. With no --kind, revokes EVERY active key in the account — including
-the key this CLI is authenticated with (recovery: myapi auth setup). --kind
+the key this CLI is authenticated with (recovery: myapi account setup). --kind
 narrows it to one provenance class. Destructive — confirms unless --yes.`,
     };
 }

package/dist/commands/queue.d.ts

@@ -11,4 +11,5 @@ export declare function get(name: string, flags: Flags): Promise<void>;
 export declare function enqueue(name: string, flags: Flags): Promise<void>;
 export declare function jobs(name: string, flags: Flags): Promise<void>;
 export declare function job(jobId: string, flags: Flags): Promise<void>;
+export declare function del(name: string, flags: Flags): Promise<void>;
 export declare function run(subcommand: string | undefined, args: string[], flags: Flags): Promise<void>;

package/dist/commands/queue.js

@@ -165,11 +165,19 @@ export async function job(jobId, flags) {
     if (j.last_error)
         info(`Error:    ${j.last_error}`);
 }
+export async function del(name, flags) {
+    const config = requireConfig();
+    const orgId = requireOrg(flags, config, 'myapi queue delete <name> [--org <id>]');
+    requireArg(name, 'name', 'myapi queue delete <name>');
+    await sdkQueue.deleteQueue(config.api_key, orgId, name);
+    success(`Deleted queue: ${name}`);
+}
 // ── Dispatcher ───────────────────────────────────────────────────────────────
 const SUBCOMMAND_USAGE = {
     'create': 'myapi queue create <name> --consumer-url <url> [--max-attempts <n>] [--max-concurrency <n>] [--org <id>]',
     'list': 'myapi queue list [--org <id>] [--json]',
     'get': 'myapi queue get <name> [--org <id>] [--json]',
+    'delete': 'myapi queue delete <name> [--org <id>]',
     'enqueue': 'myapi queue enqueue <name> --payload <json> [--dedup-key <k>] [--delay <seconds>] [--depends-on <id,id>] [--org <id>]',
     'jobs': 'myapi queue jobs <name> [--status <s>] [--limit <n>] [--org <id>] [--json]',
     'job': 'myapi queue job <job_id> [--org <id>] [--json]',
@@ -185,6 +193,7 @@ Queues:
   create <name>     Create a queue (--consumer-url, --max-attempts, --max-concurrency)
   list              List queues
   get <name>        Show a queue's policy
+  delete <name>     Delete a queue (and its jobs)
 
 Jobs:
   enqueue <name>    Enqueue a job (--payload, --dedup-key, --delay, --depends-on)
@@ -208,6 +217,7 @@ All commands accept --org <id> (or set default: myapi config set-org <id>).`);
         case 'create': return create(args[0], flags);
         case 'list': return list(flags);
         case 'get': return get(args[0], flags);
+        case 'delete': return del(args[0], flags);
         case 'enqueue': return enqueue(args[0], flags);
         case 'jobs': return jobs(args[0], flags);
         case 'job': return job(args[0], flags);

package/dist/commands/setup.js

@@ -172,10 +172,10 @@ async function anonymousFlow() {
 // ---------------------------------------------------------------------------
 // Main setup command
 // ---------------------------------------------------------------------------
-const IMPORT_KEY_HELP = `Usage: myapi auth import-key <api_key> [--install-skills] [--no-skills]
+const IMPORT_KEY_HELP = `Usage: myapi account import-key <api_key> [--install-skills] [--no-skills]
 
 Imports an existing API key non-interactively. Use this in CI, Docker, or any
-environment where the interactive "myapi auth setup" flow is not practical.
+environment where the interactive "myapi account setup" flow is not practical.
 
 The key is validated against the API before being saved. Your default org and
 funnel are auto-detected from the account and written to the local config.
@@ -185,9 +185,9 @@ Flags:
   --no-skills        Skip skills installation even if previously installed
 
 Examples:
-  myapi auth import-key hq_live_xxxxxxxxxxxxxxxxxxxx
-  myapi auth import-key hq_live_xxxxxxxxxxxxxxxxxxxx --install-skills`;
-const SETUP_HELP = `Usage: myapi auth setup [--anonymous] [--yes] [--install-skills|--no-skills]
+  myapi account import-key hq_live_xxxxxxxxxxxxxxxxxxxx
+  myapi account import-key hq_live_xxxxxxxxxxxxxxxxxxxx --install-skills`;
+const SETUP_HELP = `Usage: myapi account setup [--anonymous] [--yes] [--install-skills|--no-skills]
 
 Configures your account and stores your default org and funnel so you don't
 need to pass --org or --funnel on every command.
@@ -197,7 +197,7 @@ Flags:
   --yes             Skip confirmation prompts
   --install-skills  Auto-install skills pack
   --no-skills       Skip skills installation`;
-// myapi auth import-key <key> — non-interactively import a raw API key.
+// myapi account import-key <key> — non-interactively import a raw API key.
 export async function importKey(apiKey, flags) {
     if (flags.help || !apiKey) {
         info(IMPORT_KEY_HELP);
@@ -278,7 +278,7 @@ export async function setup(flags = {}) {
     }
     else {
         info('› Continuing as anonymous — sites ship to *.makeautonomous.com');
-        info('  (Anonymous accounts have $0 credit. Link an email anytime to unlock $5 free credit and paid actions: myapi auth link <email>)');
+        info('  (Anonymous accounts have $0 credit. Link an email anytime to unlock $5 free credit and paid actions: myapi account link <email>)');
         const data = await anonymousFlow();
         apiKey = data.api_key;
         accountId = data.account_id;
@@ -320,7 +320,7 @@ export async function setup(flags = {}) {
         success('› Setup complete. No card, no email, ready to ship.');
         if (subdomainUrl)
             info(`› Your funnel: ${subdomainUrl}`);
-        info('› Upgrade anytime — myapi auth link');
+        info('› Upgrade anytime — myapi account link');
     }
     else {
         success(`› Setup complete. Org ${defaultOrg} ready · $5.00 free credits added.`);

package/dist/commands/status.d.ts

@@ -3,5 +3,5 @@ import { type Flags } from '../helpers.js';
 import type { Exposes } from '../exposes.js';
 export declare const EXPOSES: Exposes;
 export declare const SCHEMA: FlagSchema;
-export declare const STATUS_HELP = "Usage: myapi status [--org <id>] [--json]\n\nSingle-screen view of your account and what's running in the default org:\nidentity, balance, free-tier usage, plus resource counts across domains,\nfunnels, campaigns, webhooks, and workflows. Useful before a\nco-build session or when checking \"what's mid-flight\" without running six\nlist commands.\n\nEach section is best-effort \u2014 a failing service is shown as \"\u2014\", not an\nerror, so the rest of the snapshot still prints.\n";
+export declare const STATUS_HELP = "Usage: myapi status [--org <id>] [--json]\n\nSingle-screen view of your account and what's running in the default org:\nidentity, balance, free-tier usage, plus resource counts across domains,\nfunnels, webhooks, and workflows. Useful before a\nco-build session or when checking \"what's mid-flight\" without running six\nlist commands.\n\nEach section is best-effort \u2014 a failing service is shown as \"\u2014\", not an\nerror, so the rest of the snapshot still prints.\n";
 export declare function run(_subcommand: string | undefined, _args: string[], flags?: Flags): Promise<void>;

package/dist/commands/status.js

@@ -1,4 +1,4 @@
-import { hq, domain, funnel, email, webhook, workflow, MyApiError } from '@myapihq/sdk';
+import { hq, domain, funnel, webhook, workflow, MyApiError } from '@myapihq/sdk';
 // listMailboxes is omitted from this view: the backend requires a domain or
 // filter, so there is no global "all mailboxes in this org" call. Use
 // `myapi email mailbox list --domain <d>` for per-domain detail.
@@ -7,9 +7,8 @@ import { info, error, printJson } from '../output.js';
 export const EXPOSES = [
     'GET /hq/billing/balance',
     'GET /hq/account/free-tier',
-    'GET /domain/orgs/{org_id}/domains',
+    'GET /domain/orgs/{org_id}/list',
     'GET /funnel/orgs/{org_id}/funnels',
-    'GET /email/orgs/{org_id}/campaigns',
     'GET /webhook/orgs/{org_id}/endpoints',
     'GET /workflow/orgs/{org_id}/workflows',
 ];
@@ -20,7 +19,7 @@ export const STATUS_HELP = `Usage: myapi status [--org <id>] [--json]
 
 Single-screen view of your account and what's running in the default org:
 identity, balance, free-tier usage, plus resource counts across domains,
-funnels, campaigns, webhooks, and workflows. Useful before a
+funnels, webhooks, and workflows. Useful before a
 co-build session or when checking "what's mid-flight" without running six
 list commands.
 
@@ -37,7 +36,7 @@ export async function run(_subcommand, _args, flags = {}) {
     }
     const config = loadConfig();
     if (!config?.api_key)
-        error('Not configured. Run: myapi auth setup');
+        error('Not configured. Run: myapi account setup');
     const orgId = flags.org ?? config.default_org;
     // Account-level info works without an org; org-scoped resources are skipped if none set.
     const orgKnown = Boolean(orgId);
@@ -55,20 +54,18 @@ export async function run(_subcommand, _args, flags = {}) {
     // the snapshot as untrustworthy rather than silently printing local config.
     const keyRejected = accountResults.some(r => r.status === 'rejected' && r.reason instanceof MyApiError && r.reason.status === 401);
     // Org-scoped (skipped if no default org set).
-    let domains = null, funnels = null, campaigns = null, webhooks = null, workflows = null;
+    let domains = null, funnels = null, webhooks = null, workflows = null;
     if (orgKnown) {
         const orgResults = await Promise.allSettled([
             domain.listDomains(config.api_key, orgId),
             funnel.listFunnels(config.api_key, orgId),
-            email.listCampaigns(config.api_key, orgId),
             webhook.listEndpoints(config.api_key, orgId),
             workflow.listWorkflows(config.api_key, orgId),
         ]);
         domains = unwrap(orgResults[0]);
         funnels = unwrap(orgResults[1]);
-        campaigns = unwrap(orgResults[2]);
-        webhooks = unwrap(orgResults[3]);
-        workflows = unwrap(orgResults[4]);
+        webhooks = unwrap(orgResults[2]);
+        workflows = unwrap(orgResults[3]);
     }
     if (flags.json) {
         printJson({
@@ -83,13 +80,13 @@ export async function run(_subcommand, _args, flags = {}) {
             balance,
             free_tier: freeTier,
             org_resources: orgKnown ? {
-                domains, funnels, campaigns, webhooks, workflows,
+                domains, funnels, webhooks, workflows,
             } : null,
         });
         return;
     }
     if (keyRejected) {
-        info('⚠ The backend rejected your API key. Values may be stale — run: myapi auth setup');
+        info('⚠ The backend rejected your API key. Values may be stale — run: myapi account setup');
         info('');
     }
     // ── Identity ──────────────────────────────────────────────────────────────
@@ -101,7 +98,7 @@ export async function run(_subcommand, _args, flags = {}) {
     info(`Type:     ${config.is_anonymous ? 'anonymous' : 'registered'}`);
     info(`Balance:  ${balance ? `${balance.balance_display}  |  Credits: ${balance.credits_display}` : '—'}`);
     if (config.is_anonymous) {
-        info('          → Link an email to unlock $5 free credit + paid actions: myapi auth link <email>');
+        info('          → Link an email to unlock $5 free credit + paid actions: myapi account link <email>');
     }
     if (Array.isArray(freeTier) && freeTier.length > 0) {
         const parts = freeTier
@@ -114,7 +111,7 @@ export async function run(_subcommand, _args, flags = {}) {
     info('');
     info('Resources:');
     if (!orgKnown) {
-        info('  (set a default org to see domains/funnels/campaigns/webhooks/workflows)');
+        info('  (set a default org to see domains/funnels/webhooks/workflows)');
         return;
     }
     if (domains) {
@@ -126,19 +123,6 @@ export async function run(_subcommand, _args, flags = {}) {
     else
         info('  Domains:   —');
     info(`  Funnels:   ${funnels ? funnels.length : '—'}`);
-    if (campaigns) {
-        // Campaigns: backend statuses include 'draft', 'active', 'paused', 'completed'.
-        // Surface counts for the two states that matter mid-flight.
-        const active = campaigns.filter(c => /active|running/i.test(c.status)).length;
-        const paused = campaigns.filter(c => /paused/i.test(c.status)).length;
-        const extras = [
-            active > 0 ? `${active} active` : null,
-            paused > 0 ? `${paused} paused` : null,
-        ].filter(Boolean).join(', ');
-        info(`  Campaigns: ${campaigns.length}${extras ? ` (${extras})` : ''}`);
-    }
-    else
-        info('  Campaigns: —');
     info(`  Webhooks:  ${webhooks ? webhooks.length : '—'}`);
     if (workflows) {
         const enabled = workflows.filter(w => w.enabled).length;

package/dist/commands/storage.js

@@ -26,6 +26,8 @@ const EXT_TO_CT = {
     '.jpeg': 'image/jpeg',
     '.gif': 'image/gif',
     '.webp': 'image/webp',
+    '.svg': 'image/svg+xml',
+    '.pdf': 'application/pdf',
     '.mp4': 'video/mp4',
     '.webm': 'video/webm',
 };
@@ -64,7 +66,7 @@ async function upload(filePath, flags) {
     const ext = extname(filePath).toLowerCase();
     const contentType = EXT_TO_CT[ext];
     if (!contentType) {
-        error(`Unsupported file extension "${ext}". Supported: ${Object.keys(EXT_TO_CT).join(', ')}.\n(SVG and PDF still go through "myapi storage ingest <url>" today.)`);
+        error(`Unsupported file extension "${ext}". Supported: ${Object.keys(EXT_TO_CT).join(', ')}.\nFor other types, host the file and use "myapi storage ingest <url>".`);
     }
     let data;
     try {

package/dist/commands/workflow.js

@@ -19,6 +19,8 @@ export const SCHEMA = {
     'endpoint-id': 'string',
     steps: 'string',
     'no-enable': 'boolean',
+    limit: 'number',
+    cursor: 'string',
 };
 // Mirrors the backend's SupportedStepTypes list. Both alias and underscore
 // forms are accepted by the workflow runner. Keep this in sync if the
@@ -279,18 +281,27 @@ export async function del(id, flags) {
 }
 export async function runs(id, flags) {
     const config = requireConfig();
-    const orgId = requireOrg(flags, config, 'myapi workflow runs <id> [--org <id>]');
+    const orgId = requireOrg(flags, config, 'myapi workflow runs <id> [--limit <n>] [--cursor <id>] [--org <id>]');
     if (!id)
-        error('Missing required arguments.\nUsage: myapi workflow runs <workflow_id> [--org <id>]');
-    const wRuns = await sdkWorkflow.listWorkflowRuns(config.api_key, orgId, id);
+        error('Missing required arguments.\nUsage: myapi workflow runs <workflow_id> [--limit <n>] [--cursor <id>] [--org <id>]');
+    const opts = {};
+    if (typeof flags.limit === 'number')
+        opts.limit = flags.limit;
+    if (typeof flags.cursor === 'string')
+        opts.cursor = flags.cursor;
+    const page = await sdkWorkflow.listWorkflowRuns(config.api_key, orgId, id, opts);
     if (flags.json) {
-        printJson(wRuns);
+        printJson(page);
         return;
     }
-    printTable(wRuns.map(summarizeRun), {
+    printTable(page.runs.map(summarizeRun), {
         flags,
         empty: 'No runs yet for this workflow.',
     });
+    if (page.next_cursor) {
+        info('');
+        info(`More runs available. Next page: myapi workflow runs ${id} --cursor ${page.next_cursor}`);
+    }
 }
 export async function getRun(runId, flags) {
     const config = requireConfig();
@@ -360,7 +371,11 @@ See the my-workflow-api skill for the full form-to-email recipe.`,
     'enable': 'myapi workflow enable <id> [--org <id>]',
     'disable': 'myapi workflow disable <id> [--org <id>]',
     'delete': 'myapi workflow delete <id> [--org <id>]',
-    'runs': 'myapi workflow runs <workflow_id> [--org <id>] [--json]',
+    'runs': `myapi workflow runs <workflow_id> [--limit <n>] [--cursor <id>] [--org <id>] [--json]
+
+Lists recent runs, newest first (keyset-paginated). --limit is 1-500
+(default 100). When more pages exist, the next cursor is printed; pass it
+back with --cursor to fetch the following page.`,
     'get-run': 'myapi workflow get-run <run_id> [--org <id>]',
 };
 export async function run(subcommand, args, flags) {

package/dist/completion.js

@@ -35,15 +35,16 @@ export const COMMANDS = [
 // command → subcommands, for `myapi <command> <TAB>`. Mirrors each
 // command's dispatcher; commands absent here take no subcommand.
 export const SUBCOMMANDS = {
-    account: ['mailing-address'],
-    auth: ['setup', 'import-key', 'whoami', 'link', 'switch', 'install-skills', 'config', 'registrant', 'api-keys'],
+    account: ['setup', 'import-key', 'whoami', 'link', 'switch', 'install-skills', 'config', 'registrant', 'api-keys', 'keys', 'mailing-address'],
+    // The end-user auth product. Operator/account commands live under `account`.
+    auth: ['tenant', 'client', 'usage', 'domain'],
     org: ['create', 'delete', 'get', 'import', 'list', 'sync-brand', 'update'],
     billing: ['balance', 'history', 'usage', 'setup', 'topup', 'spend-cap'],
     domain: ['assign', 'check', 'email-setup', 'import', 'list', 'mail-server-resync', 'records', 'register', 'renew', 'retry-provisioning', 'settings', 'status'],
     funnel: ['create', 'delete', 'get', 'list', 'pages', 'publish', 'push', 'verify'],
     webhook: ['create', 'delete', 'delivery', 'list', 'update'],
     workflow: ['create', 'delete', 'disable', 'enable', 'get', 'get-run', 'list', 'runs', 'update'],
-    email: ['mailbox', 'message', 'warmup', 'template', 'campaign', 'verify'],
+    email: ['mailbox', 'message', 'warmup', 'template', 'verify'],
     image: ['delete', 'generate', 'get', 'get-url', 'list', 'models'],
     storage: ['delete', 'get', 'get-url', 'ingest', 'list', 'upload'],
     pixel: ['audience', 'events', 'identity', 'interactions', 'visits'],
@@ -60,7 +61,7 @@ export const SUBCOMMANDS = {
     payments: ['connect', 'status', 'charge', 'list', 'get', 'refund'],
     container: ['create', 'deploy', 'list', 'get', 'logs', 'domain', 'delete'],
     git: ['create', 'list', 'get', 'delete', 'refs', 'log', 'show', 'tree', 'blob', 'diff', 'commit', 'create-branch', 'delete-branch', 'tag', 'merge', 'repack'],
-    queue: ['create', 'list', 'get', 'enqueue', 'jobs', 'job'],
+    queue: ['create', 'list', 'get', 'delete', 'enqueue', 'jobs', 'job'],
     task: ['create', 'list', 'get', 'claim', 'extend', 'resolve', 'fail', 'cancel'],
     completion: ['install', 'uninstall'],
 };

package/dist/config.js

@@ -98,7 +98,7 @@ export function listAccounts() {
 export function requireConfig() {
     const config = loadConfig();
     if (!config || !config.api_key) {
-        console.error("No API key found. Provide MYAPI_KEY env var or run: myapi auth setup");
+        console.error("No API key found. Provide MYAPI_KEY env var or run: myapi account setup");
         process.exit(1);
     }
     return config;

package/dist/exposes.test.js

@@ -7,7 +7,7 @@ import * as url from 'url';
 // surface.
 const COMMAND_MODULES = [
     './commands/account.js',
-    './commands/auth.js',
+    './commands/authproduct.js',
     './commands/billing.js',
     './commands/config.js',
     './commands/crm/index.js',
@@ -19,7 +19,6 @@ const COMMAND_MODULES = [
     './commands/email/mailbox.js',
     './commands/email/message.js',
     './commands/email/template.js',
-    './commands/email/campaign.js',
     './commands/email/warmup.js',
     './commands/email/verify.js',
     './commands/funnel.js',