@myapihq/cli 2.2.0 → 2.4.0

package/dist/skills/my-storage-api/SKILL.md

@@ -15,7 +15,7 @@ Per-org asset storage with edge CDN delivery. Two ways in: direct upload (local
 <!-- llm:start -->
 Storage is the asset layer. Anything you upload or ingest is served from the edge under a permanent public URL — embed it in funnel pages, email templates, anywhere.
 
-`upload` accepts `.png`, `.jpg`, `.jpeg`, `.gif`, `.webp` from the local filesystem. For other formats (PDF, mp4, webm, svg) host the file somewhere public and use `ingest` instead — the server fetches it for you.
+`upload` accepts `.png`, `.jpg`, `.jpeg`, `.gif`, `.webp`, `.svg`, `.pdf`, `.mp4`, `.webm` from the local filesystem. For any other extension, host the file somewhere public and use `ingest` instead — the server fetches it for you.
 
 Generated images from **myimageapi** automatically land here; they appear in `storage list` under their job id.
 
@@ -27,7 +27,7 @@ Use `get` for a round-trip metadata fetch. Use `get-url` when you just need the
 | Command | What it does |
 |---|---|
 | `myapi storage list` | List all stored assets |
-| `myapi storage upload <file>` | Direct multipart upload of a local image |
+| `myapi storage upload <file>` | Direct multipart upload of a local file (image/svg/pdf/mp4/webm) |
 | `myapi storage ingest <url>` | Server fetches a public URL into storage |
 | `myapi storage get <asset_id>` | Round-trip the API for full metadata (`--json` or human block) |
 | `myapi storage get-url <asset_id>` | Pure local URL constructor — no API call, no auth |
@@ -59,8 +59,8 @@ myapi storage delete <asset_id>
 
 ## Upload vs Ingest
 
-- **`upload`** — file is on your machine. Multipart POST. Image types only: `.png`, `.jpg`, `.jpeg`, `.gif`, `.webp`.
-- **`ingest`** — file is at a public HTTP(S) URL. Server downloads and stores. Useful for migrating assets, pulling in third-party images you have rights to, or for non-image types (`image/svg+xml`, `application/pdf`, `video/mp4`, `video/webm`).
+- **`upload`** — file is on your machine. Multipart POST. Supported extensions: `.png`, `.jpg`, `.jpeg`, `.gif`, `.webp`, `.svg`, `.pdf`, `.mp4`, `.webm`.
+- **`ingest`** — file is at a public HTTP(S) URL. Server downloads and stores. Useful for migrating assets, pulling in third-party files you have rights to, or for extensions `upload` doesn't accept.
 
 Both produce identical asset records — `list` doesn't distinguish.
 
@@ -72,7 +72,7 @@ Both produce identical asset records — `list` doesn't distinguish.
 ## Notes
 
 - Assets are public by default — don't store sensitive files.
-- Delete is immediate and unrecoverable.
+- Delete is immediate and unrecoverable — run `myapi storage list` first to confirm the asset, pass `--org` explicitly, and pass `--yes` in non-interactive runs.
 - The URL is permanent until you `myapi storage delete <id>` — embed it freely.
 
 Run `myapi storage --help` for full flag reference.

package/dist/skills/my-webhook-api/SKILL.md

@@ -89,7 +89,7 @@ The form sends `{name, email, message}` → webhook stores it → workflow runs
 ## Notes
 
 - The inbound URL is public — anyone with it can POST. Treat the slug as a secret.
-- Deliveries are kept indefinitely. Delete the endpoint to purge them.
+- Deliveries are kept indefinitely. Delete the endpoint to purge them. Look before you delete: `myapi webhook list` first, pass `--org` explicitly; delete verbs require `--yes` in non-interactive runs.
 - Failed workflow runs don't affect the delivery record — the inbound POST is always saved.
 - Inbound responses: `200` on success, `4xx` if the endpoint is missing or body isn't valid JSON.
 

package/dist/skills/my-workflow-api/SKILL.md

@@ -95,7 +95,7 @@ myapi workflow enable <id>
 - Workflows fire on every webhook delivery. Failed runs don't block subsequent runs.
 - Each run records attempt number, started_at/finished_at, and any error.
 - Disable to stop firing without losing the configuration.
-- Deleting a workflow purges its run history; the webhook endpoint remains.
+- Deleting a workflow purges its run history; the webhook endpoint remains. Look before you delete: `myapi workflow list` first, pass `--org` explicitly; delete asks for confirmation — `--yes` required in non-interactive runs.
 
 ## See also
 

package/dist/utils.d.ts

@@ -1,4 +1,5 @@
 export declare function sleep(ms: number): Promise<unknown>;
+export declare function retryFunds<T>(call: () => Promise<T>): Promise<T>;
 /**
  * Formats an ISO/Go timestamp string to "YYYY-MM-DD HH:mm" (UTC).
  * Strips Go's " +0000 UTC" suffix before parsing.

package/dist/utils.js

@@ -1,7 +1,19 @@
-import { spinnerFrame, spinnerWrite, clearLine, error } from './output.js';
+import { withFundsRetry } from '@myapihq/sdk';
+import { spinnerFrame, spinnerWrite, clearLine, error, banner } from './output.js';
 export function sleep(ms) {
     return new Promise(resolve => setTimeout(resolve, ms));
 }
+// Wrap a billable SDK call: when the wallet is empty but an auto-recharge is
+// already in flight (the 402 split), wait the server-hinted interval and
+// retry instead of failing — so an unattended agent isn't killed by a refill
+// that's seconds away. Every other 402 state (capped / no_pm / failed /
+// disabled, spend-cap) still fails fast into the tailored guidance in
+// index.ts. Progress goes to stderr so --json stdout stays clean.
+export function retryFunds(call) {
+    return withFundsRetry(call, {
+        onRetry: (attempt, waitSec) => banner(`› Wallet empty — auto-recharge in flight; waiting ${waitSec}s and retrying (attempt ${attempt}/3)…`),
+    });
+}
 /**
  * Formats an ISO/Go timestamp string to "YYYY-MM-DD HH:mm" (UTC).
  * Strips Go's " +0000 UTC" suffix before parsing.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@myapihq/cli",
   "license": "Apache-2.0",
-  "version": "2.2.0",
+  "version": "2.4.0",
   "description": "MyAPI command-line interface",
   "type": "module",
   "files": [
@@ -24,6 +24,7 @@
     "test:all": "npm run build && MYAPI_RUN_RESET=1 vitest run src test/smoke test/scripts test/online",
     "check-coverage": "npm run build && node scripts/check-coverage.js",
     "check-coverage:live": "npm run build && node scripts/check-coverage.js --live",
+    "typecheck:tests": "tsc -p tsconfig.tests.json",
     "update-schema": "node scripts/update-schema.js",
     "lint:changelog": "node ../../scripts/lint-changelog.js",
     "lint:help-order": "node scripts/lint-help-order.js",
@@ -31,7 +32,7 @@
     "lint:skills:strict": "node scripts/copy-skills.js && node scripts/lint-skills.js --strict"
   },
   "dependencies": {
-    "@myapihq/sdk": "^2.2.0"
+    "@myapihq/sdk": "^2.4.0"
   },
   "devDependencies": {
     "@types/node": "^25.6.0",