@myapihq/cli 2.28.1 → 2.29.0

package/dist/commands/container.js

@@ -39,6 +39,8 @@ export const SCHEMA = {
     'no-promote': 'boolean',
     'health-check': 'string',
     clear: 'boolean',
+    // `container get --reveal` — print env VALUES, not just their names.
+    reveal: 'boolean',
     smoke: 'string',
     remove: 'boolean',
     source: 'string',
@@ -212,7 +214,10 @@ export async function get(id, flags) {
     const orgId = requireOrg(flags, config, 'myapi container get <id> [--org <id>]');
     if (!id)
         error('Missing id.\nUsage: myapi container get <id>');
-    const c = await sdkContainer.getContainer(config.api_key, orgId, id);
+    // --reveal is opt-in for the same reason the API makes it opt-in: the values
+    // are secrets, and a plain read should not put them on a terminal (or in a
+    // screenshot, or a pasted bug report) unless that was the point.
+    const c = await sdkContainer.getContainer(config.api_key, orgId, id, flags.reveal ? { reveal: true } : undefined);
     if (flags.json) {
         printJson(c);
         return;
@@ -226,6 +231,12 @@ export async function get(id, flags) {
         info(`Port:            ${c.port}`);
     info(`URL:             ${c.url || '(not deployed)'}`);
     info(`Startup probe:   ${c.health_check || '(none)'}`);
+    const envNames = Object.keys(c.env ?? {});
+    if (envNames.length) {
+        info(`Env:             ${envNames.length} variable(s): ${envNames.sort().join(', ')}`);
+        if (!flags.reveal)
+            info('                 values hidden — add --reveal to print them');
+    }
     if (c.egress)
         info(`Egress:          ${c.egress}`);
     if (c.custom_domain)
@@ -750,7 +761,11 @@ revision — so it completes in seconds.
 
 List candidates with: myapi container revisions <id>`,
     'list': 'myapi container list [--org <id>] [--json]',
-    'get': 'myapi container get <id> [--org <id>] [--json]',
+    'get': `myapi container get <id> [--reveal] [--org <id>] [--json]
+
+Environment VALUES are hidden by default and shown with --reveal; the names are
+always listed. They are secrets, and a plain read should not put them on a
+terminal unless that was the point.`,
     'logs': `myapi container logs <id> [--tail <n>] [--scope all] [--org <id>] [--json]
 
 Recent runtime logs, newest first. --tail caps the count (default 100,

package/dist/commands/storage.js

@@ -23,6 +23,7 @@ export const SCHEMA = {
     name: 'string',
     'content-type': 'string',
     private: 'boolean',
+    description: 'string',
     ttl: 'string',
 };
 // Extension → content type, for inference only. The API accepts any MIME type
@@ -118,7 +119,8 @@ async function upload(filePath, flags) {
     }
     const name = flags.name || basename(filePath);
     const visibility = flags.private ? 'private' : undefined;
-    const res = await sdkStorage.uploadAsset(config.api_key, orgId, data, contentType, name, visibility);
+    const description = typeof flags.description === 'string' ? flags.description : undefined;
+    const res = await sdkStorage.uploadAsset(config.api_key, orgId, data, contentType, name, visibility, description);
     // Every other storage verb honours --json; upload did not, so an agent that
     // asked for machine output got prose and had to scrape "ID: obj_…" out of a
     // sentence to learn what it had just created. Agents are the primary caller

package/dist/skills/my-container-api/SKILL.md

@@ -1,25 +1,24 @@
 ---
 name: my-container-api
-version: 1.1.2
+version: 1.1.3
 description: >
   Run containers on demand — long-running services, background workers, and scheduled jobs. The heavier-duty sibling of edge functions, for native deps and long execution.
 triggers: [container, cloud run, dynamic app, custom domain app, service, worker, scheduled job, deploy container, docker image]
-checksum: sha256-0e1702e51e8d501edf48bdc4da92728d52e79c4273f534ba5ed41511b4803271
+checksum: sha256-14cb4bc8d0d968425e121f728e86f8e7057efb56572c2fbb4d18d65d75a146b5
 ---
 
 # MyContainerAPI
 
-A container runs a pre-built image on managed cloud infrastructure. Three types: a **service** (HTTP server, scales to zero), a **worker** (always-on process), or a **job** (runs to completion — the only type that takes a cron schedule).
+A container runs a pre-built image on managed cloud infra. Three types: a **service** (HTTP server, scales to zero), a **worker** (always-on), or a **job** (runs to completion — the only type taking a cron schedule).
 
 ## Capabilities
 <!-- llm:start -->
 The lifecycle is **create → deploy → (optionally) bind a custom domain**.
 
-- `create` registers the container and issues a **scoped API key**, returned once. The container gets it as `MYAPI_KEY`, so your code calls other MyAPI slots with no token handling. Deploy rotates this key.
+- `create` registers the container and issues a **scoped API key**, returned once (rotated on deploy). The container gets it as `MYAPI_KEY`, so your code calls other slots with no token handling.
 - `deploy` takes **either** a pre-built image reference **or** a source
-  directory. `--source ./dir` tars the directory, builds it server-side
-  (typically ~4 minutes) and deploys the result — **no Docker on your machine,
-  no registry account, no image to push**.
+  directory. `--source ./dir` tars it, builds server-side (~4 min) and deploys —
+  **no Docker locally, no registry account, no image to push**.
 - `domain` puts the container on a **custom domain** — a dynamic app at `app.yourbrand.com`.
 
 ### Deploying safely
@@ -49,11 +48,13 @@ revision in seconds, no rebuild.
 `--health-check /livez` makes the startup probe an HTTP request, not a bare TCP
 connect — at create, or later with `myapi container health-check <id> /livez`
 (`--clear` removes it), which rolls a new revision on the same image.
-`/healthz` is refused: the runtime answers it before your container does.
+`/healthz` is refused: the runtime answers it before your container does, and a
+path yours does not SERVE leaves the revision unready. `container get` lists env names;
+`--reveal` prints values.
 
 ### Custom domains (dynamic apps)
 
-`myapi container domain <id> <domain>` binds a custom domain to a **deployed** container, over HTTPS automatically. The path for a dynamic backend on a real domain — unlike `my-funnel-api`, which serves static sites.
+`myapi container domain <id> <domain>` binds a custom domain to a **deployed** container over HTTPS — a dynamic backend on a real domain, unlike `my-funnel-api`'s static sites.
 
 - **Deploy first.** Binding a domain to a container that has never deployed fails (422) — there is nothing running to route to.
 - **Register the parent domain first** via `my-domain-api`. Binding `app.synthesisdaily.com` requires `synthesisdaily.com` registered in MyAPI; otherwise 422.

package/dist/skills/my-storage-api/SKILL.md

@@ -1,10 +1,10 @@
 ---
 name: my-storage-api
-version: 1.1.0
+version: 1.1.1
 description: >
   Edge-hosted asset storage. Upload a local file of any content type directly, or have the server fetch from a public URL. Each asset gets a stable public CDN URL.
 triggers: [storage, upload, ingest, asset, cdn, image hosting, file upload, get-url, download, public url]
-checksum: sha256-ef0154ed196082be84192c7ddfb4cab47641549ed9703087c9eb4643daea678a
+checksum: sha256-a98e06eacd41973d0b847005bd949cf71ca13b0f99d5206a3dd762301db6e040
 ---
 
 # MyStorageAPI
@@ -45,7 +45,7 @@ Use `get` for a round-trip metadata fetch. Use `get-url` when you just need the
 | Command | What it does |
 |---|---|
 | `myapi storage list` | List all stored assets |
-| `myapi storage upload <file>` | Direct multipart upload of a local file (any content type) |
+| `myapi storage upload <file>` | Direct multipart upload of a local file (any content type; `--description` labels it) |
 | `myapi storage ingest <url>` | Server fetches a public URL into storage |
 | `myapi storage get <asset_id>` | Round-trip the API for full metadata (`--json` or human block) |
 | `myapi storage get-url <asset_id>` | Pure local URL constructor — no API call, no auth |

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@myapihq/cli",
   "license": "Apache-2.0",
-  "version": "2.28.1",
+  "version": "2.29.0",
   "description": "MyAPI command-line interface",
   "repository": {
     "type": "git",
@@ -34,6 +34,7 @@
     "lint:changelog": "node ../../scripts/lint-changelog.js",
     "lint:help-order": "node scripts/lint-help-order.js",
     "lint:exposes": "node scripts/lint-exposes.js",
+    "lint:query-params": "node scripts/lint-query-params.js",
     "lint:request-fields": "node scripts/lint-request-fields.js",
     "audit:doctor": "npm run build && node scripts/audit-doctor.js",
     "lint:docs": "node scripts/lint-docs.js",
@@ -46,7 +47,7 @@
     "lint:skills:strict": "node scripts/copy-skills.js && node scripts/lint-skills.js --strict"
   },
   "dependencies": {
-    "@myapihq/sdk": "^2.28.1"
+    "@myapihq/sdk": "^2.29.0"
   },
   "devDependencies": {
     "@types/node": "^25.6.0",