@myapihq/cli 1.3.5 → 1.3.8

package/dist/commands/audience.js

@@ -211,12 +211,12 @@ export async function run(subcommand, args, flags) {
 
 Subcommands:
   create     Save a filter as a named audience (people or company source)
-  list       List all audiences in the org
-  get        Get a single audience (with its filter + current member_count)
-  update     Patch name / description / filter (re-evaluates count if filter changes)
   delete     Remove an audience
+  get        Get a single audience (with its filter + current member_count)
+  list       List all audiences in the org
   members    Get paged member snapshot (people or companies depending on source)
   refresh    Re-evaluate filter against current data; returns delta vs previous
+  update     Patch name / description / filter (re-evaluates count if filter changes)
 
 All commands accept --org <id> (or set a default: myapi config set-org <id>).
 

package/dist/commands/auth.d.ts

@@ -3,7 +3,7 @@ import type { Flags } from '../helpers.js';
 import type { Exposes } from '../exposes.js';
 export declare const EXPOSES: Exposes;
 export declare const SCHEMA: FlagSchema;
-export declare const HELP = "Usage: myapi auth <subcommand>\n\nSubcommands:\n  setup           Configure your account\n  import-key      Import an existing API key non-interactively\n  whoami          Show current account \u00B7 supports --json\n  link [email]    Upgrade anonymous account to registered (or add a second session)\n                  Use myapi auth setup to create a completely new account\n  switch [index]  Switch active account by index or email\n  config          Manage CLI defaults (org, funnel, domain) \u00B7 supports set-org / set-funnel / set-domain\n  registrant      Manage stored WHOIS contact info for domain registration \u00B7 set / get / clear\n  install-skills  DEPRECATED \u2014 use `myapi install-skills` instead\n  api-keys        Manage API keys \u00B7 list / create / revoke\n  keys            Alias for api-keys";
+export declare const HELP = "Usage: myapi auth <subcommand>\n\nSubcommands:\n  api-keys        Manage API keys \u00B7 list / create / revoke\n  config          Manage CLI defaults (org, funnel, domain) \u00B7 supports set-org / set-funnel / set-domain\n  import-key      Import an existing API key non-interactively\n  install-skills  DEPRECATED \u2014 use `myapi install-skills` instead\n  keys            Alias for api-keys\n  link [email]    Upgrade anonymous account to registered (or add a second session)\n                  Use myapi auth setup to create a completely new account\n  registrant      Manage stored WHOIS contact info for domain registration \u00B7 set / get / clear\n  setup           Configure your account\n  switch [index]  Switch active account by index or email\n  whoami          Show current account \u00B7 supports --json";
 export declare const INSTALL_SKILLS_HELP = "Usage: myapi install-skills\n\nInstalls the MyAPI skills pack for AI coding agents (Claude, Gemini, Cursor).\n\nThis command writes skill definition files to:\n  ~/.agents/skills/myapi/\n\nAnd creates symlinks in the appropriate agent config directories:\n  ~/.claude/  (Claude)\n  ~/.gemini/  (Gemini)\n  ~/.cursor/  (Cursor, if detected)\n\nThese files teach agents how to use the MyAPI CLI and API directly.\nRun this command again to update existing skills to the latest version.\n\nNote: `myapi auth install-skills` is deprecated and will be removed in the next minor.\nUse `myapi install-skills` going forward.";
 export declare function link(flags?: Flags, emailArg?: string): Promise<void>;
 export declare function whoami(flags?: Flags): Promise<void>;

package/dist/commands/auth.js

@@ -20,17 +20,17 @@ export const SCHEMA = {
 export const HELP = `Usage: myapi auth <subcommand>
 
 Subcommands:
-  setup           Configure your account
+  api-keys        Manage API keys · list / create / revoke
+  config          Manage CLI defaults (org, funnel, domain) · supports set-org / set-funnel / set-domain
   import-key      Import an existing API key non-interactively
-  whoami          Show current account · supports --json
+  install-skills  DEPRECATED — use \`myapi install-skills\` instead
+  keys            Alias for api-keys
   link [email]    Upgrade anonymous account to registered (or add a second session)
                   Use myapi auth setup to create a completely new account
-  switch [index]  Switch active account by index or email
-  config          Manage CLI defaults (org, funnel, domain) · supports set-org / set-funnel / set-domain
   registrant      Manage stored WHOIS contact info for domain registration · set / get / clear
-  install-skills  DEPRECATED — use \`myapi install-skills\` instead
-  api-keys        Manage API keys · list / create / revoke
-  keys            Alias for api-keys`;
+  setup           Configure your account
+  switch [index]  Switch active account by index or email
+  whoami          Show current account · supports --json`;
 export const INSTALL_SKILLS_HELP = `Usage: myapi install-skills
 
 Installs the MyAPI skills pack for AI coding agents (Claude, Gemini, Cursor).
@@ -274,10 +274,10 @@ requires (ICANN-mandated). Stored in ~/.myapi/config.json under the active
 account; never synced to the backend except as a per-request field.
 
 Subcommands:
-  set       Interactive prompt for all fields. Or pass --registrant-json
-            '<json>' to set non-interactively (agent-friendly).
+  clear     Remove the stored registrant from the active account.
   get       Print the stored registrant (or "not set").
-  clear     Remove the stored registrant from the active account.`;
+  set       Interactive prompt for all fields. Or pass --registrant-json
+            '<json>' to set non-interactively (agent-friendly).`;
 export async function registrant(sub, flags = {}) {
     if (flags.help || !sub) {
         info(REGISTRANT_HELP);

package/dist/commands/billing.js

@@ -50,10 +50,10 @@ export async function run(subcommand, args, flags) {
 Subcommands:
   balance    Check balance, credits, and payment method status
   history    View recent transactions and top-ups
-  usage      Spend rolled up by service (this month, or --period 30d)
-  topup      Top up your balance (whole dollars)
   setup      Open a checkout link to add or update payment method
-  spend-cap  Set/show/clear the account-level spend ceiling (IAM Layer 2)`);
+  spend-cap  Set/show/clear the account-level spend ceiling (IAM Layer 2)
+  topup      Top up your balance (whole dollars)
+  usage      Spend rolled up by service (this month, or --period 30d)`);
         return;
     }
     if (flags.help) {

package/dist/commands/company.js

@@ -126,8 +126,8 @@ export async function run(subcommand, args, flags) {
         info(`Usage: myapi company <subcommand>
 
 Subcommands:
-  search    Filter companies across the Goldfox database
   get       Get a single company (optionally with embedded people)
+  search    Filter companies across the Goldfox database
 
 All commands accept --org <id> (or set a default: myapi config set-org <id>).
 Filter shape is shared with people + audience — see myapi audience --help.`);

package/dist/commands/config.js

@@ -98,10 +98,10 @@ export async function run(subcommand, args, flags) {
 Manages CLI defaults (org, funnel, domain) so you don't have to pass --org / --domain on every command.
 
 Subcommands:
-  view         Show current defaults
-  set-org      Set default organization (validates access)
-  set-funnel   Set default funnel (must be owned by default org)
   set-domain   Set default domain
+  set-funnel   Set default funnel (must be owned by default org)
+  set-org      Set default organization (validates access)
+  view         Show current defaults
 
 Examples:
   myapi ${via} set-org <id>

package/dist/commands/container.js

@@ -280,12 +280,12 @@ dependencies and long execution.
 
 Subcommands:
   create               Register a container and get its scoped API key (returned once)
+  delete <id>          Soft-delete and revoke its scoped API key
   deploy <id> <image>  Ship a pre-built image and go live
-  list                 List containers in your org
+  domain <id> <domain> Bind a custom domain (--remove to unbind)
   get <id>             Inspect a container
+  list                 List containers in your org
   logs <id>            Show recent runtime logs (--tail <n>)
-  domain <id> <domain> Bind a custom domain (--remove to unbind)
-  delete <id>          Soft-delete and revoke its scoped API key
 
 All commands accept --org <id> (or set default: myapi config set-org <id>).`);
         return;

package/dist/commands/crm/companies.js

@@ -10,6 +10,7 @@ export const EXPOSES = [
     'GET /crm/orgs/{org_id}/companies/{id}',
     'PATCH /crm/orgs/{org_id}/companies/{id}',
     'DELETE /crm/orgs/{org_id}/companies/{id}',
+    'POST /crm/orgs/{org_id}/companies/{id}/restore',
 ];
 export const SCHEMA = {};
 function csv(v) {
@@ -159,14 +160,14 @@ export async function run(subcommand, args, flags) {
         info(`Usage: myapi crm companies <subcommand>
 
 Subcommands:
-  list                List all companies
-  search              Filter by stage / source / domain
   create <domain>     Manually create (source='manual')
-  get <id>            Fetch one company
-  update <id>         Patch stage, name, custom JSON
   delete <id>         Soft-delete
-  restore <id>        Undo a soft-delete
+  get <id>            Fetch one company
+  list                List all companies
   promote <domain>    Promote a Goldfox company → CRM (Goldfox company id IS the domain)
+  restore <id>        Undo a soft-delete
+  search              Filter by stage / source / domain
+  update <id>         Patch stage, name, custom JSON
 
 All commands accept --org <id> (or set default: myapi config set-org <id>).`);
         return;

package/dist/commands/crm/contacts.js

@@ -10,6 +10,7 @@ export const EXPOSES = [
     'GET /crm/orgs/{org_id}/contacts/{id}',
     'PATCH /crm/orgs/{org_id}/contacts/{id}',
     'DELETE /crm/orgs/{org_id}/contacts/{id}',
+    'POST /crm/orgs/{org_id}/contacts/{id}/restore',
     'GET /crm/orgs/{org_id}/contacts/{id}/events',
 ];
 export const SCHEMA = {};
@@ -205,15 +206,15 @@ export async function run(subcommand, args, flags) {
         info(`Usage: myapi crm contacts <subcommand>
 
 Subcommands:
-  list                        Most-recently-engaged contacts (no filter)
-  search                      Filter by stage / source / email / engagement window
   create <email>              Manually create (source='manual')
-  get <id>                    Fetch one contact (with embedded Goldfox enrichment, when available)
-  update <id>                 Patch stage, names, company_id, custom JSON
   delete <id>                 Soft-delete (events retained)
-  restore <id>                Undo a soft-delete
-  promote <goldfox_person_id> Promote a Goldfox lead → CRM contact (idempotent)
   events <id>                 Timeline of events on a contact (newest first)
+  get <id>                    Fetch one contact (with embedded Goldfox enrichment, when available)
+  list                        Most-recently-engaged contacts (no filter)
+  promote <goldfox_person_id> Promote a Goldfox lead → CRM contact (idempotent)
+  restore <id>                Undo a soft-delete
+  search                      Filter by stage / source / email / engagement window
+  update <id>                 Patch stage, names, company_id, custom JSON
 
 All commands accept --org <id> (or set default: myapi config set-org <id>).`);
         return;

package/dist/commands/crm/index.js

@@ -39,8 +39,8 @@ export async function run(subcommand, args, flags) {
         info(`Usage: myapi crm <namespace> <subcommand>
 
 Namespaces:
-  contacts   The people you've engaged with (private to org)
   companies  The companies you've engaged with (private to org)
+  contacts   The people you've engaged with (private to org)
 
 Each namespace shares the same subcommands:
   list                       List with no filter (alias for search)

package/dist/commands/database.js

@@ -224,9 +224,9 @@ export async function run(subcommand, args, flags) {
         info(`Usage: myapi database <subcommand>
 
 Namespaces:
-  namespaces                    List namespaces in the org
   create <name>                 Create a namespace
   delete-namespace <name>       Delete a namespace AND all its keys (irreversible)
+  namespaces                    List namespaces in the org
 
 Keys (require --ns <namespace>):
   keys                          List keys in a namespace

package/dist/commands/doctor.js

@@ -276,6 +276,6 @@ Exit codes:
   1  one or more critical issues
 
 Options:
-  --verbose    Show passing checks too.
   --json       Machine-readable output.
-  --org <id>   Override the default org.`;
+  --org <id>   Override the default org.
+  --verbose    Show passing checks too.`;

package/dist/commands/domain.js

@@ -443,12 +443,12 @@ async function recordsDelete(domainArg, recordId, flags) {
 const RECORDS_HELP = `Usage: myapi domain records <subcommand> <domain> [...]
 
 Subcommands:
-  list <domain> [--type A|AAAA|CNAME|MX|TXT]
-  get <domain> <record-id>
   create <domain> --type <T> --name <n> --content <c> [--ttl <n>]
                                                        [--priority <n>] [--proxied]
-  update <domain> <record-id> [--content ...] [--ttl ...] [--priority ...] [--proxied]
   delete <domain> <record-id> [--yes]
+  get <domain> <record-id>
+  list <domain> [--type A|AAAA|CNAME|MX|TXT]
+  update <domain> <record-id> [--content ...] [--ttl ...] [--priority ...] [--proxied]
 
 Name normalization:
   --name=@                       Apex (e.g. example.com)
@@ -605,19 +605,19 @@ export async function run(subcommand, args, flags) {
         info(`Usage: myapi domain <subcommand>
 
 Subcommands:
-  list             List domains
+  assign           Assign domain to an org
   check            Check domain availability
-  register         Register a domain
+  email-setup      Opt in to MyAPI-managed email on a subdomain (default: mail.<domain>)
   import           Bring your own domain (BYOD) — registrar-agnostic
+  list             List domains
+  records          Manage DNS records in the zone (list / get / create / update / delete)
+  register         Register a domain
   renew            Renew a registered domain for another period
-  assign           Assign domain to an org
-  unassign         Unassign domain from its current org
-  status           Get domain status
+  retry-provisioning  Re-run provisioning when status=infra_error and the failure is retryable
   settings         Get edge/CDN settings
+  status           Get domain status
+  unassign         Unassign domain from its current org
   update-settings  Update edge/CDN settings
-  records          Manage DNS records in the zone (list / get / create / update / delete)
-  email-setup      Opt in to MyAPI-managed email on a subdomain (default: mail.<domain>)
-  retry-provisioning  Re-run provisioning when status=infra_error and the failure is retryable
 
 Tip: Set defaults with "myapi config set-org <id>" / "set-domain <domain>" to skip flags on every command.`);
         return;

package/dist/commands/email/campaign.js

@@ -163,15 +163,15 @@ export async function run(sub, args, flags) {
 
 Subcommands:
   create <name>       Create a campaign (--template-id --from)
-  list                List campaigns
   get <id>            Get a single campaign
-  update <id>         Patch name / per-day-limit
-  upload-contacts <id>       Upload contact list (--emails a@x,b@y)
-  upload-contacts-file <id>  Upload contacts from a CSV file (--file path/to/contacts.csv)
-  start <id>          Start a campaign
+  list                List campaigns
   pause <id>          Pause a campaign
   resume <id>         Resume a campaign
+  start <id>          Start a campaign
   stats <id>          Get campaign stats
+  update <id>         Patch name / per-day-limit
+  upload-contacts <id>       Upload contact list (--emails a@x,b@y)
+  upload-contacts-file <id>  Upload contacts from a CSV file (--file path/to/contacts.csv)
 
 All commands accept --org <id> (or set default: myapi config set-org <id>).`);
         return;

package/dist/commands/email/index.js

@@ -79,12 +79,12 @@ export async function run(subcommand, args, flags) {
         info(`Usage: myapi email <namespace> <subcommand>
 
 Namespaces:
+  campaign   Email campaigns (org-scoped) — create, list, get, update, upload-contacts, start, pause, resume, stats
   mailbox    Mailboxes (account-scoped) — create, list, activate-sending
   message    Send & read mail (account-scoped) — send, status, sent, inbox, outbox, get
-  warmup     Warmup controls (account-scoped) — start, pause, resume, stop, stats
   template   Email templates (org-scoped) — generate, list, edit, send-test, delete
-  campaign   Email campaigns (org-scoped) — create, list, get, update, upload-contacts, start, pause, resume, stats
   verify     Sync single-address email verification (org-scoped) — syntax + DNS + Microsoft probe
+  warmup     Warmup controls (account-scoped) — start, pause, resume, stop, stats
 
 Examples:
   myapi email mailbox create hello@example.com

package/dist/commands/email/mailbox.js

@@ -94,11 +94,11 @@ export async function run(sub, args, flags) {
         info(`Usage: myapi email mailbox <subcommand>
 
 Subcommands:
+  activate-sending   Activate outbound sending for a mailbox
+  clear-forwarding   Stop forwarding for a mailbox
   create             Create a mailbox (positional <user@domain> or --username/--domain)
   list               List mailboxes on a domain (--domain) or orphaned ones (--filter unassigned)
-  activate-sending   Activate outbound sending for a mailbox
-  set-forwarding     Forward a copy of incoming mail to an external address
-  clear-forwarding   Stop forwarding for a mailbox`);
+  set-forwarding     Forward a copy of incoming mail to an external address`);
         return;
     }
     if (flags.help) {

package/dist/commands/email/message.js

@@ -118,12 +118,12 @@ export async function run(sub, args, flags) {
         info(`Usage: myapi email message <subcommand>
 
 Subcommands:
-  send                Send an email (transactional or templated)
-  status <id>         Get delivery status of a sent message
-  sent                List sent emails
+  get <id>            Get a single message (--address <email>)
   inbox <addr>        Read inbox for a mailbox address
   outbox <addr>       Read outbox for a mailbox address
-  get <id>            Get a single message (--address <email>)`);
+  send                Send an email (transactional or templated)
+  sent                List sent emails
+  status <id>         Get delivery status of a sent message`);
         return;
     }
     if (flags.help) {

package/dist/commands/email/template.js

@@ -135,13 +135,13 @@ export async function run(sub, args, flags) {
         info(`Usage: myapi email template <subcommand>
 
 Subcommands:
+  delete <id>        Delete a template
+  edit <id>          Edit a template via prompt
   generate <name>    Generate AI template (--prompt)
-  list               List templates
   get <id>           Get a template's metadata (subject, preview URL, ...)
+  list               List templates
   preview <id>       Get a template's rendered preview (no auth required)
-  edit <id>          Edit a template via prompt
   send-test <id>     Send a test email for a template (--to)
-  delete <id>        Delete a template
 
 All commands accept --org <id> (or set default: myapi config set-org <id>).`);
         return;

package/dist/commands/fn.js

@@ -240,12 +240,12 @@ Create, deploy, and manage functions on the MyAPI edge runtime.
 
 Subcommands:
   create               Register a function and get its scoped API key (returned once)
+  delete <id>          Soft-delete and revoke its scoped API key
   deploy <id> <file>   Upload a JS bundle and go live
   env <id> <k> <v>     Set a Worker Secret on a deployed function
-  runs <id>            List recent invocation records
-  list                 List functions in your org
   get <id>             Inspect a function
-  delete <id>          Soft-delete and revoke its scoped API key
+  list                 List functions in your org
+  runs <id>            List recent invocation records
 
 All commands accept --org <id> (or set default: myapi config set-org <id>).`);
         return;

package/dist/commands/funnel.d.ts

@@ -9,6 +9,7 @@ export declare function get(id: string, flags: Flags): Promise<void>;
 export declare function del(id: string, flags: Flags): Promise<void>;
 export declare function pages(funnelArg: string, flags: Flags): Promise<void>;
 export declare function push(slug: string, flags: Flags): Promise<void>;
+export declare function formCmd(funnelArg: string | undefined, flags: Flags): Promise<void>;
 export declare function verify(slug: string, flags: Flags): Promise<void>;
 export declare function publish(dir: string, flags: Flags): Promise<void>;
 export declare function run(subcommand: string | undefined, args: string[], flags: Flags): Promise<void>;

package/dist/commands/funnel.js

@@ -14,6 +14,13 @@ export const EXPOSES = [
     'POST /funnel/orgs/{org_id}/funnels/{funnel_id}/verify',
     'POST /funnel/orgs/{org_id}/funnels/{funnel_id}/files',
     'GET /funnel/orgs/{org_id}/funnels/{funnel_id}/pages',
+    // form bindings — created/listed/removed via `funnel form --capture-to`
+    // and the underlying SDK helpers. List/Delete don't have dedicated CLI
+    // subcommands yet; the SDK functions are wired and customers using the
+    // SDK directly need them in EXPOSES for coverage to be honest.
+    'POST /funnel/orgs/{org_id}/funnels/{funnel_id}/forms',
+    'GET /funnel/orgs/{org_id}/funnels/{funnel_id}/forms',
+    'DELETE /funnel/orgs/{org_id}/funnels/{funnel_id}/forms/{slug}',
     'GET /hq/orgs/{org_id}',
 ];
 export const SCHEMA = {
@@ -21,6 +28,12 @@ export const SCHEMA = {
     slug: 'string',
     env: 'string',
     'api-fn': 'string',
+    // form
+    fields: 'string',
+    cta: 'string',
+    success: 'string',
+    'capture-to': 'string',
+    honeypot: 'string',
 };
 // Backend (2026-05-15): POST /funnels accepts an optional `name` (defaults
 // to the org's preview_subdomain for back-compat). Mirror the backend's
@@ -178,6 +191,129 @@ export async function push(slug, flags) {
         }
     }
 }
+function parseField(token) {
+    // <name>[:<modifier>]... — modifiers are types or `required`, order-free.
+    const parts = token.split(':').map(p => p.trim()).filter(Boolean);
+    const name = parts[0];
+    if (!name || !/^[a-z][a-z0-9_]*$/i.test(name)) {
+        error(`Invalid field name "${name}". Lowercase letters/digits/underscores; starts with a letter.`);
+    }
+    let type;
+    let required = false;
+    for (const mod of parts.slice(1)) {
+        const m = mod.toLowerCase();
+        if (m === 'required')
+            required = true;
+        else if (m === 'text' || m === 'email' || m === 'number' || m === 'tel')
+            type = m;
+        else
+            error(`Unknown field modifier "${mod}" on "${name}". Use one of: text, email, number, tel, required.`);
+    }
+    if (!type) {
+        const n = name.toLowerCase();
+        type = n === 'email' ? 'email'
+            : n === 'phone' || n === 'tel' ? 'tel'
+                : 'text';
+    }
+    return { name, type, required };
+}
+function parseCaptureTo(raw) {
+    const m = raw.match(/^(webhook|workflow):([a-f0-9-]{36})$/i);
+    if (!m)
+        error(`Invalid --capture-to "${raw}". Expected webhook:<uuid> or workflow:<uuid>.`);
+    return { kind: m[1].toLowerCase(), id: m[2] };
+}
+export async function formCmd(funnelArg, flags) {
+    const config = requireConfig();
+    const orgId = requireOrg(flags, config, 'myapi funnel form [funnel-id] [--slug <s>] [--fields <spec>] [--capture-to <dest>] [--honeypot <name>] [--cta "<text>"] [--success "<text>"] [--org <id>] [--json]');
+    // Resolve funnel id the same way push/verify do.
+    let funnelId = funnelArg || flags.funnel || config.default_funnel;
+    if (!funnelId) {
+        const existing = await sdkFunnel.listFunnels(config.api_key, orgId);
+        if (existing.length === 0)
+            error('No funnel found for this org. Create one with: myapi funnel create');
+        if (existing.length > 1) {
+            error(`Multiple funnels exist and no default is set.\nPass the funnel id, or set a default:\n  myapi config set-funnel <id>\n\nFunnels:\n${existing.map(f => `  ${f.id}`).join('\n')}`);
+        }
+        funnelId = existing[0].id;
+    }
+    const rawSlug = flags.slug || 'join';
+    const slug = rawSlug.startsWith('/') ? rawSlug.slice(1) : rawSlug;
+    if (!/^[a-z0-9][a-z0-9-]{0,40}$/i.test(slug)) {
+        error(`Invalid --slug "${slug}". Lowercase letters/digits/hyphens, 1-41 chars, starts with a letter or digit.`);
+    }
+    // `--fields email:required,name,phone:tel,plan:text:required`
+    const fieldsArg = (flags.fields || 'email:email:required').trim();
+    const fieldSpecs = fieldsArg.split(',').map(s => s.trim()).filter(Boolean).map(parseField);
+    if (fieldSpecs.length === 0)
+        error('--fields must list at least one field. Example: --fields email:required,name');
+    // Honeypot field — match the backend default unless --honeypot overrides.
+    const honeypot = flags.honeypot || 'middle_name';
+    if (!/^[a-z][a-z0-9_]*$/i.test(honeypot))
+        error(`Invalid --honeypot "${honeypot}".`);
+    for (const f of fieldSpecs)
+        if (f.name === honeypot)
+            error(`Honeypot "${honeypot}" collides with a real field. Pick a different --honeypot name.`);
+    const cta = flags.cta || 'Sign up';
+    const successMsg = flags.success || "Thanks — we'll be in touch.";
+    // Optional binding via --capture-to.
+    let registeredBinding;
+    if (typeof flags['capture-to'] === 'string' && flags['capture-to']) {
+        const dest = parseCaptureTo(flags['capture-to']);
+        const binding = {
+            slug,
+            destination: `${dest.kind}:${dest.id}`,
+            fields: fieldSpecs.map(f => ({ name: f.name, required: f.required })),
+            honeypot_field: honeypot,
+        };
+        registeredBinding = await sdkFunnel.createFormBinding(config.api_key, orgId, funnelId, binding);
+    }
+    const url = `https://api.myapihq.com/funnel/funnels/${funnelId}/submit/${encodeURIComponent(slug)}`;
+    const escAttr = (s) => s.replace(/&/g, '&amp;').replace(/"/g, '&quot;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+    const escText = (s) => s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+    // Per-field labels — Email uses the canonical placeholder; others
+    // Title-Case the name.
+    const inputs = fieldSpecs.map(f => {
+        const label = f.name.charAt(0).toUpperCase() + f.name.slice(1).replace(/_/g, ' ');
+        const req = f.required ? ' required' : '';
+        return `  <label>${escText(label)} <input type="${f.type}" name="${escAttr(f.name)}"${req}></label>`;
+    }).join('\n');
+    // Honeypot — hidden via inline style, off the tab order, autocomplete
+    // disabled. Bots fill it; humans don't.
+    const honeypotInput = `  <input type="text" name="${escAttr(honeypot)}" style="display:none" tabindex="-1" autocomplete="off">`;
+    const html = `<form action="${escAttr(url)}" method="POST" data-myapi-form>
+${inputs}
+${honeypotInput}
+  <button type="submit">${escText(cta)}</button>
+</form>
+<script>
+document.querySelectorAll('[data-myapi-form]').forEach(f => {
+  f.addEventListener('submit', async e => {
+    e.preventDefault();
+    const r = await fetch(f.action, { method:'POST', headers:{'Content-Type':'application/json'},
+      body: JSON.stringify(Object.fromEntries(new FormData(f))) });
+    if (r.ok) f.outerHTML = ${JSON.stringify(`<p>${escText(successMsg)}</p>`)};
+  });
+});
+</script>`;
+    if (flags.json) {
+        printJson({
+            action_url: url,
+            slug,
+            fields: fieldSpecs,
+            honeypot_field: honeypot,
+            binding_registered: !!registeredBinding,
+            binding: registeredBinding,
+            html,
+        });
+        return;
+    }
+    if (registeredBinding) {
+        // Print confirmation on stderr so stdout stays the clean snippet.
+        process.stderr.write(`✓ Registered form binding: slug=${slug} → ${registeredBinding.destination}\n`);
+    }
+    process.stdout.write(html + '\n');
+}
 // Verify uses the same shape as push: slug positional (default '/'), funnel
 // resolved from --funnel / default / the org's only funnel.
 export async function verify(slug, flags) {
@@ -260,10 +396,51 @@ export async function publish(dir, flags) {
 }
 // ── Dispatcher ───────────────────────────────────────────────────────────────
 const SUBCOMMAND_USAGE = {
-    'list': 'myapi funnel list [--org <id>] [--json]',
     'create': 'myapi funnel create [--name <name>] [--org <id>]',
-    'get': 'myapi funnel get <id> [--org <id>] [--json]',
     'delete': 'myapi funnel delete <id> [--org <id>]',
+    'form': `myapi funnel form [funnel-id] [--slug <slug>] [--fields <spec>]
+       [--capture-to <dest>] [--honeypot <name>]
+       [--cta "<button text>"] [--success "<message>"] [--org <id>] [--json]
+
+Emits a ready-to-paste HTML snippet for a form that posts to the canonical
+funnel submit proxy. Submissions to any slug fall through to the funnel's
+auto-provisioned webhook by default (CRM ingest + bound workflows fire
+without further wiring). The proxy URL is platform-stable; slug names the
+form so workflows can route on it; an auto-honeypot field stops casual
+bots.
+
+  --slug <s>          Form identifier — appears in the proxy URL.
+                      Defaults to "join". Lowercase letters/digits/hyphens.
+  --fields <spec>     Comma-separated field specs.
+                      Each spec: <name>[:<type>][:required] (modifiers
+                      order-free). Types: text (default), email, number,
+                      tel. Name auto-promotes to email if name="email",
+                      to tel if name="phone" or "tel".
+                      Defaults to "email:email:required".
+  --capture-to <dest> Optional. Register a per-slug binding to the
+                      destination via POST /funnel/.../forms. Format:
+                      webhook:<uuid> or workflow:<uuid>. Without it,
+                      submissions fall through to the funnel's default
+                      webhook (most agents want this).
+  --honeypot <name>   Hidden bot-trap input name. Default "middle_name".
+  --cta "<text>"      Submit button text. Defaults to "Sign up".
+  --success "<text>"  Message shown on successful submit.
+
+Examples:
+  myapi funnel form                                        # email-required on default funnel
+  myapi funnel form --slug waitlist --fields email:required,name
+  myapi funnel form <funnel> --slug checkout \\
+    --fields email:required,plan,phone:tel \\
+    --capture-to webhook:<checkout_webhook_id>
+  myapi funnel form --json                                 # machine-readable
+  myapi funnel form --slug join > form.html                # snippet to a file
+
+Do NOT hardcode webhook inbound URLs into funnel HTML. Use this verb
+instead — the proxy preserves slug routing, hides the URL, and gets
+future platform features (rate-limit, captcha, field validation) for
+free.`,
+    'get': 'myapi funnel get <id> [--org <id>] [--json]',
+    'list': 'myapi funnel list [--org <id>] [--json]',
     'pages': 'myapi funnel pages [funnel_id] [--funnel <id>] [--org <id>] [--json]',
     'publish': `myapi funnel publish <dir> [--funnel <id>] [--env dev|prod] [--api-fn <id>] [--org <id>]
 
@@ -312,13 +489,14 @@ export async function run(subcommand, args, flags) {
         info(`Usage: myapi funnel <subcommand>
 
 Subcommands:
-  list       List funnels
   create     Create a funnel (optional --name; backend defaults to org's preview_subdomain)
-  get <id>   Get funnel details
   delete     Delete a funnel
+  form       Emit HTML for a form that posts to the canonical submit proxy
+  get <id>   Get funnel details
+  list       List funnels
+  pages      List the pages currently published to a funnel
   publish    Publish a whole local directory as the site (dev or prod)
   push       Push a raw HTML page from stdin to a slug
-  pages      List the pages currently published to a funnel
   verify     Verify a published page is reachable
 
 All commands accept --org <id> (or set default: myapi config set-org <id>).`);
@@ -333,14 +511,15 @@ All commands accept --org <id> (or set default: myapi config set-org <id>).`);
         return;
     }
     switch (subcommand) {
-        case 'list': return list(flags);
         case 'create': return create(flags);
-        case 'get': return get(args[0], flags);
         case 'delete': return del(args[0], flags);
+        case 'form': return formCmd(args[0], flags);
+        case 'get': return get(args[0], flags);
+        case 'list': return list(flags);
+        case 'pages': return pages(args[0], flags);
         case 'publish': return publish(args[0], flags);
         case 'push': return push(args[0], flags);
         case 'verify': return verify(args[0], flags);
-        case 'pages': return pages(args[0], flags);
         default: error(`Unknown subcommand: ${subcommand}. Run "myapi funnel --help" for a list of valid subcommands.`);
     }
 }