@myapihq/cli 2.4.1 → 2.4.2

package/dist/skills/my-company-api/README.md

@@ -0,0 +1,35 @@
+---
+# my-company-api
+
+Queryable company database for account-based targeting and B2B firmographics. Search companies by industry, size, country, revenue, or keyword.
+
+## What it does
+
+- Filter the company database by attributes (industry, employee_bucket, revenue_bucket, country, ...)
+- Fetch a single company, optionally with embedded people for one-call enrichment
+- Feed results into `my-audience-api` to save reusable account lists
+- Complement `my-people-api` for combined account-based + contact-based targeting
+
+## Quickstart
+
+```bash
+# Find target companies
+myapi company search --industry fintech --country GB,DE --employee-bucket 51-200
+
+# Single company with embedded people
+myapi company get company_06 --include-people 5
+```
+
+## Authentication
+
+```bash
+export MYAPI_KEY=mak_...
+```
+
+Requires `api_key` and `org_id` from **myapihq**.
+
+## Documentation
+
+Full filter contract and audience integration: see `SKILL.md`.
+
+Run `myapi company --help` for inline reference.

package/dist/skills/my-company-api/SKILL.md

@@ -0,0 +1,110 @@
+---
+name: my-company-api
+version: 1.0.0
+description: >
+  Company database backed by the Goldfox crawl. Filter companies by Goldfox confidence tier, country/TLD consistency, behavioral page signals (has_careers_page, has_investors_page, has_shop_page, has_c_level, has_decision_maker), legal-entity status, headcount, and source-URL count. Account-based targeting and B2B firmographics.
+triggers: [companies, accounts, firmographics, abm, search, filter, goldfox, careers signal, investors, c-level, shop, b2b targeting]
+checksum: sha256-67dd4b65a9b0cc7acf7c1e4262bc66d2b58ff11ed227a24299924e0b620712f0
+---
+
+# MyCompanyAPI
+
+A queryable company database for account-based targeting and B2B firmographics, sourced from the **Goldfox** crawl. Filter by confidence tier, country consistency, behavioral page signals, and quality thresholds — get back companies with rich signal data (headcount estimates, source count, careers/investors/shop presence, legal-entity flag).
+
+## Capabilities
+<!-- llm:start -->
+Use when:
+
+- Doing account-based targeting (pick companies first, find decision-makers second)
+- Researching market segments by behavioral signals ("companies in DE with a careers page AND a c-level present")
+- Combining with `my-audience-api` to save a company filter as a reusable audience
+
+Filter contract — shared with `my-people-api` and the `filter` field of `my-audience-api`, minus people-only fields (`seniority`, `email_type`, `min_link_confidence`). OR within an array; AND across fields. **Empty filter = all rows with default confidence=high.**
+
+```json
+{
+  "confidence":           ["high"],
+  "country":              ["US", "DE"],
+  "country_consistent":   true,
+  "tld_class":            ["cctld"],
+  "has_c_level":          true,
+  "has_decision_maker":   true,
+  "has_careers_page":     true,
+  "has_investors_page":   false,
+  "has_shop_page":        false,
+  "is_registered_entity": true,
+  "min_headcount":        5,
+  "min_source_count":     3,
+  "keyword":              "platform",
+  "include_people":       3,
+  "limit":                100,
+  "offset":               0
+}
+```
+
+Allowed values:
+- **confidence**: `high` (default) / `low` / `very_low`
+- **tld_class**: `cctld`, `generic`, `vanity`, `low_trust`, `other`
+- **country**: ISO 3166-1 alpha-2; consensus across TLD + address + phone
+- **keyword**: substring match on the company's domain
+- **include_people**: 0–10; embed up to N people per company in the result
+
+Behavioral signals (booleans):
+- `has_c_level` — row has ≥1 person with seniority = c_level
+- `has_decision_maker` — row has ≥1 person with seniority ∈ (c_level, vp_director)
+- `has_careers_page` — `/careers`, `/jobs`, `/stellen`, `/karriere` etc. (growth-stage proxy)
+- `has_investors_page` — `/investors`, `/ir/` (mature/public proxy)
+- `has_shop_page` — `/shop`, `/store`, `/products`, `/cart` (e-commerce proxy)
+- `is_registered_entity` — name has a recognized legal suffix (GmbH/Ltd/Inc/SARL/…)
+- `country_consistent` — TLD + address + phone all agree on country (highest-trust geo)
+<!-- llm:end -->
+
+## Commands
+<!-- generated:start -->
+| Command | What it does |
+|---|---|
+| `myapi company search [--confidence <csv>] [--country <csv>] [--country-consistent] [--tld-class <csv>] [--has-c-level] [--has-decision-maker] [--has-careers-page] [--has-investors-page] [--has-shop-page] [--is-registered-entity] [--keyword <text>] [--min-headcount N] [--min-source-count N] [--include-people N] [--limit N] [--offset N]` | Filter companies; returns id/domain/name/country/confidence/headcount/sources/signals table |
+| `myapi company get <company_id> [--include-people N]` | Get a single company, optionally with embedded people |
+<!-- generated:end -->
+
+The `signals` column in the search table compactly shows which behavioral booleans are true (e.g. `c-level,dm,careers`).
+
+## Examples
+<!-- llm:start -->
+```bash
+# 1. Registered DE companies with a careers page (growth signal)
+myapi company search --country DE --is-registered-entity --has-careers-page --limit 20
+
+# 2. E-commerce in FR/IT — companies with shop pages
+myapi company search --country FR,IT --has-shop-page --confidence high
+
+# 3. High-source-count companies (more validated rows) with embedded people
+myapi company search --min-source-count 5 --include-people 3 --json | jq '.companies[0]'
+
+# 4. Single company with up to 5 embedded people
+myapi company get auroracloud.com --include-people 5
+```
+
+### End-to-end recipe — ABM target account list
+
+```bash
+# Save filter as audience (companies)
+AID=$(myapi audience create "EU growth-stage SaaS" \
+  --source company \
+  --filter '{"country":["DE","FR","GB","NL"],"has_careers_page":true,"has_decision_maker":true,"min_source_count":3}' \
+  --json | jq -r .id)
+
+# Pull members for outreach planning
+myapi audience members $AID --limit 50 --json > accounts.json
+```
+<!-- llm:end -->
+
+## Notes
+
+- Goldfox confidence tiers matter: `high` (default) is the curated 96.4% of rows; widen with `low` only for spot-check work, and `very_low` rows usually get dropped.
+- `seniority`, `email_type`, and `min_link_confidence` are people-only — passing them on company search is silently ignored.
+- `include_people` only works on company search/get; people-source already embeds company by default.
+- `keyword` is a substring match on the company's **domain** — use `--keyword stripe` to find domains containing "stripe".
+- For a persistent account list, use `my-audience-api` with `--source company`.
+
+Run `myapi company --help` for full flag reference.

package/dist/skills/my-company-api/claude/.claude-plugin/plugin.json

@@ -0,0 +1,7 @@
+{
+  "name": "my-company-api",
+  "description": "Company database backed by the Goldfox crawl. Filter companies by confidence tier, country/TLD consistency, behavioral page signals (has_careers_page, has_investors_page, has_shop_page, has_c_level, has_decision_maker), legal-entity status, headcount, and source-URL count.",
+  "version": "1.0.0",
+  "status": "preview",
+  "published": true
+}

package/dist/skills/my-container-api/README.md

@@ -0,0 +1,34 @@
+---
+# my-container-api
+
+Run containers on demand — long-running services, background workers, and scheduled jobs. The heavier-duty sibling of edge functions, for native dependencies, long execution, and full dynamic apps.
+
+## What it does
+
+- Register a container and get a scoped API key (delivered to the runtime as `MYAPI_KEY`)
+- Deploy a pre-built image to managed cloud infrastructure
+- Three types: `service` (HTTP, scales to zero), `worker` (always-on), `job` (runs to completion, cron-capable)
+- **Bind a custom domain** — serve a dynamic app at `app.yourbrand.com` over HTTPS
+- Recent runtime logs
+
+## Quickstart
+
+```bash
+myapi container create --name api --type service --port 8080
+myapi container deploy <id> registry.example.com/my-app:v1
+myapi container domain <id> app.yourbrand.com
+```
+
+## Authentication
+
+```bash
+export MYAPI_KEY=mak_...
+```
+
+Requires `api_key` + `org_id` from **myapihq**. Custom domains require the parent domain registered via **mydomainapi**.
+
+## Documentation
+
+Full command reference, the custom-domain rules, and the container/funnel/function split: see `SKILL.md`.
+
+Run `myapi container --help` for inline reference.

package/dist/skills/my-container-api/SKILL.md

@@ -0,0 +1,77 @@
+---
+name: my-container-api
+version: 1.0.0
+description: >
+  Run containers on demand — long-running services, background workers, and scheduled jobs. The heavier-duty sibling of edge functions, for native deps and long execution.
+triggers: [container, cloud run, dynamic app, custom domain app, service, worker, scheduled job, deploy container, docker image]
+checksum: sha256-ce30765b31f9c29012dcfc13b538cf47bb90e21bc015b4cfc75c1e55b21b4d75
+---
+
+# MyContainerAPI
+
+A container runs a pre-built image on managed cloud infrastructure. Three types: a **service** (HTTP server, scales to zero), a **worker** (always-on background process), or a **job** (runs to completion — the only type that takes a cron schedule). Containers are the heavier-duty sibling of edge functions (`myapi fn`) — use them for native dependencies, long execution, or a full dynamic app.
+
+## Capabilities
+<!-- llm:start -->
+The lifecycle is **create → deploy → (optionally) bind a custom domain**.
+
+- `create` registers the container and issues a **scoped API key**, returned once. The running container receives it as the `MYAPI_KEY` env var, so your code calls other MyAPI slots with no token handling. Deploy rotates this key.
+- `deploy` ships a pre-built image reference to the runtime and makes the container live at a generated URL.
+- `domain` puts the container on a **custom domain** — how you serve a dynamic app at `app.yourbrand.com`.
+
+### Custom domains (dynamic apps)
+
+`myapi container domain <id> <domain>` binds a custom domain to a **deployed** container, served over HTTPS automatically. This is the path for a dynamic backend on a real domain — distinct from `my-funnel-api`, which serves static sites.
+
+Get it right:
+
+- **Deploy first.** Binding a domain to a container that has never deployed fails (422) — there is nothing running to route to.
+- **Register the parent domain first.** The domain's MyAPI-managed parent must already be registered via `my-domain-api`. Binding `app.synthesisdaily.com` requires `synthesisdaily.com` registered in MyAPI; otherwise 422.
+- **One domain per container.** Re-binding, or binding a hostname already taken, fails (409).
+- `--remove` unbinds. `myapi container get <id>` shows the bound `custom_domain`.
+<!-- llm:end -->
+
+## Commands
+<!-- generated:start -->
+| Command | What it does |
+|---|---|
+| `myapi container create --name <name> [--type service\|worker\|job] [--cron <expr>] [--cpu <n>] [--memory <size>] [--port <n>] [--env K=V,...]` | Register a container, get its scoped API key (once) |
+| `myapi container deploy <id> <image-ref>` | Ship a pre-built image and go live (rotates the scoped key) |
+| `myapi container list` | List containers in your org |
+| `myapi container get <id>` | Inspect a container (status, URL, custom domain) |
+| `myapi container logs <id> [--tail <n>]` | Recent runtime logs, newest first |
+| `myapi container domain <id> <domain>` | Bind a custom domain (`--remove` to unbind) |
+| `myapi container delete <id>` | Soft-delete and revoke its scoped API key |
+<!-- generated:end -->
+
+## Examples
+<!-- llm:start -->
+```bash
+# 1. Register a service container
+myapi container create --name api --type service --port 8080
+# → prints a scoped API key ONCE — save it if your code needs it
+
+# 2. Deploy a pre-built image
+myapi container deploy <id> registry.example.com/my-app:v1
+
+# 3. Serve it on a custom domain. The parent domain must already be
+#    registered: myapi domain register synthesisdaily.com
+myapi container domain <id> app.synthesisdaily.com
+# → app.synthesisdaily.com now serves the container over HTTPS
+
+myapi container get <id>          # shows status, URL, custom_domain
+myapi container logs <id> --tail 100
+
+# Unbind the custom domain
+myapi container domain <id> --remove
+```
+<!-- llm:end -->
+
+## Notes
+
+- The scoped API key is shown **once** at create, and again (rotated) on every deploy. Save it if your code needs it.
+- A `worker` is forced to ≥1 instance; a `service` scales to zero; only a `job` accepts `--cron`.
+- Custom domains need a deployed container **and** a MyAPI-registered parent domain — see `my-domain-api`.
+- Containers are for dynamic apps and native deps. For static sites use `my-funnel-api`; for edge functions use `my-function-api`.
+
+Run `myapi container --help` for the full flag reference.

package/dist/skills/my-container-api/claude/.claude-plugin/plugin.json

@@ -0,0 +1,7 @@
+{
+  "name": "my-container-api",
+  "description": "Run containers on demand — long-running services, background workers, and scheduled jobs. The heavier-duty sibling of edge functions, for native deps and long execution.",
+  "version": "1.0.0",
+  "status": "preview",
+  "published": true
+}

package/dist/skills/my-crm-api/SKILL.md

@@ -4,7 +4,7 @@ version: 1.0.0
 description: >
   The canonical store of engaged contacts + companies for an org. Auto-ingests from inbound webhooks via a configurable dot-path. Fixed lifecycle_stage enum (cold | warm | qualified | customer | churned). Append-only event timeline with reserved kinds. Soft delete + restore. Promote-from-Goldfox closes the discovery → engagement loop.
 triggers: [crm, contact, company, lead, engagement, pipeline, lifecycle, qualified, customer, webhook ingest, promote]
-checksum: sha256-pending
+checksum: sha256-0ee12d579c51b300ff227a094c2082a2c6f3bf83d2d97ab16cb2f47ad3667fd6
 ---
 
 # MyCRMAPI
@@ -69,11 +69,11 @@ If a contact doesn't exist for the matched email, it's auto-created with `source
 
 ### Goldfox enrichment (deferred)
 
-A CRM contact promoted from Goldfox carries a `goldfox_person_id` reference. In v2 the GET response will join to Goldfox live, embedding the latest row inline as `goldfox_person`. Today that field is null until the BQ get-by-id helper lands. Search filters that hit Goldfox-only fields are not yet wired into CRM search.
+A contact promoted from Goldfox carries a `goldfox_person_id`. In v2 the GET response will join live, embedding the row as `goldfox_person`; today that field is null. Goldfox-only fields are not yet filterable in CRM search.
 
 ### Search filter — re-engagement semantics
 
-`--max-last-engagement-days N` returns contacts last engaged *more than* N days ago. This intentionally **includes contacts with no engagement at all** (promoted-but-never-emailed Goldfox leads), because those are exactly the natural targets of a re-engagement campaign. If you want to distinguish "never tried" from "tried and went cold," layer `--source goldfox` (never engaged after promotion) or post-filter the JSON.
+`--max-last-engagement-days N` returns contacts last engaged *more than* N days ago, and intentionally **includes contacts with no engagement at all** (promoted-but-never-emailed Goldfox leads) — the natural targets of a re-engagement campaign. To separate "never tried" from "tried and went cold," layer `--source goldfox` or post-filter the JSON.
 
 ### Failure modes
 

package/dist/skills/my-crm-api/claude/.claude-plugin/plugin.json

@@ -2,5 +2,6 @@
   "name": "my-crm-api",
   "description": "The canonical store of engaged people + companies. Auto-ingest from inbound webhooks (configurable dot-path). Fixed lifecycle_stage enum, soft delete, event timeline.",
   "version": "1.0.0",
+  "status": "ga",
   "published": true
 }

package/dist/skills/my-database-api/SKILL.md

@@ -4,7 +4,7 @@ version: 1.0.0
 description: >
   Per-org KV store with named namespaces, JSON values up to 256 KB, prefix-scan listing, and compare-and-swap via etag. The substrate for any stateful agent-built app on MyAPI — user tables, session stores, idempotency keys, per-user lookup maps.
 triggers: [database, kv, key value, namespace, store, state, etag, cas, session, idempotency]
-checksum: sha256-pending
+checksum: sha256-247b0efe4af6d1eebc320a11b9b7ce3f5b1aa6a2f86fa80631bb3fec1e0a8d22
 ---
 
 # MyDatabaseAPI

package/dist/skills/my-database-api/claude/.claude-plugin/plugin.json

@@ -2,5 +2,6 @@
   "name": "my-database-api",
   "description": "Per-org KV store with namespaces + compare-and-swap. JSON values up to 256 KB. The substrate for stateful agent-built apps.",
   "version": "1.0.0",
+  "status": "ga",
   "published": true
 }

package/dist/skills/my-domain-api/SKILL.md

@@ -4,7 +4,7 @@ version: 1.0.0
 description: >
   Register new domains and manage edge settings. Required before a funnel can go live on a custom URL.
 triggers: [domain, register domain, dns, custom domain, edge, cdn, security level, browser check, renew, namecheap]
-checksum: sha256-pending
+checksum: sha256-067ab2cc412c1f1f34aaeeec5890f9eb77f680f5b2d1c847e376336702cd8344
 ---
 
 # MyDomainAPI

package/dist/skills/my-domain-api/claude/.claude-plugin/plugin.json

@@ -2,5 +2,6 @@
   "name": "my-domain-api",
   "description": "Domain registration and check with automated DNS and email infrastructure.",
   "version": "1.0.0",
+  "status": "ga",
   "published": true
 }

package/dist/skills/my-email-api/SKILL.md

@@ -4,7 +4,7 @@ version: 1.0.0
 description: >
   Send transactional and bulk email from your own domain. Create mailboxes, send/receive messages, generate AI templates, and manage warmup.
 triggers: [email, mailbox, send email, transactional email, template, warmup, inbox, outbox, ses, sender reputation]
-checksum: sha256-pending
+checksum: sha256-fa1eb6ee9e24935266643ceeecf7a748747b23377a0bfe256f76b71b62bd6349
 ---
 
 # MyEmailAPI

package/dist/skills/my-email-api/claude/.claude-plugin/plugin.json

@@ -2,5 +2,6 @@
   "name": "my-email-api",
   "description": "Send transactional and bulk email from your own domain. Mailboxes, AI templates, and warmup.",
   "version": "1.0.0",
+  "status": "ga",
   "published": true
 }

package/dist/skills/my-email-verify-api/SKILL.md

@@ -4,7 +4,7 @@ version: 1.0.0
 description: >
   Synchronous single-address email verification — syntax + DNS + Microsoft GetCredentialType probe. Returns a verdict in <1s for ~50% of inputs; the rest get verdict='unknown' with smtp_recommended=true. The pre-send quality gate for any outbound campaign.
 triggers: [email verify, email validation, deliverability, smtp, syntax check, dns mx, microsoft, mx lookup, bounce prevention]
-checksum: sha256-pending
+checksum: sha256-a8f4d3fa04436c997d02d1d33f262190166e59e3e890b1c40a877bbd49ad3f00
 ---
 
 # MyEmailVerifyAPI

package/dist/skills/my-email-verify-api/claude/.claude-plugin/plugin.json

@@ -2,5 +2,6 @@
   "name": "my-email-verify-api",
   "description": "Sync single-address email verification — syntax + DNS + Microsoft probe. Pre-send quality gate for outbound.",
   "version": "1.0.0",
+  "status": "ga",
   "published": true
 }

package/dist/skills/my-function-api/SKILL.md

@@ -0,0 +1,104 @@
+---
+name: my-function-api
+version: 1.0.0
+description: >
+  Deploy JavaScript functions to the MyAPI edge runtime (Cloudflare Workers). Register a function, upload a single-file JS bundle, get a live HTTP invocation URL or run it on a cron schedule. Each function gets a scoped capability key for cross-slot calls.
+triggers: [function, deploy function, edge function, serverless, cloudflare worker, cron, scoped api key, capability key, invocation url, bundle]
+checksum: sha256-ada0a52fdd9c0ba14ca86496e1c5c42e8b018155c3e8c83edba071fa6bd0b7e9
+---
+
+# MyFunctionAPI
+
+Deploy backend code without running a server. Register a function, upload a single-file JS bundle, and it goes live on the MyAPI edge runtime (Cloudflare Workers) with a public invocation URL — or runs on a cron schedule. Each function carries a scoped capability key so it can call other MyAPI slots with its own authority.
+
+The full loop is live: **create → deploy → invoke → inspect runs → set secrets**.
+
+## Capabilities
+<!-- llm:start -->
+**Two-step lifecycle: register, then deploy.** `myapi fn create --name <slug>` persists the function record and mints a `scoped_api_key`, returned **exactly once** (save it if you need it). `myapi fn deploy <id> <bundle.js>` uploads a single-file JavaScript bundle (≤4MB); the backend wraps it with the MYAPI shim and ships it to Cloudflare Workers. After deploy the function has a live `invocation_url`.
+
+**Scoped key = capability key.** It is **org-locked**. By default it inherits the deployer's slot grants; narrow it at create time with `--scope <slot>[,<slot>...]` (comma-separated, e.g. `--scope email,storage`) — the primary way to deploy a deliberately narrow function. Grants can never exceed the caller's, so a function never out-reaches the credential that created it. It is rejected with `403 SCOPE_FORBIDDEN` at `/hq/*`, `/admin/*`, `/internal/*`. **Deploy rotates this key** — the fresh value is printed once on every deploy. (Minting a narrow account key first — `myapi keys create --grant ...` — is only needed when the *deploy credential itself* must be constrained, e.g. handing deploy rights to another system.)
+
+**HTTP or cron triggers.** Default is `http` — the function gets a public invocation URL once deployed. Pass `--cron "<expr>"` at create time to run on a schedule (e.g. `"0 8 * * *"`) instead.
+
+**Secrets via Worker Secrets.** `myapi fn env <id> <name> <value>` sets a secret (Stripe key, API token, …) as a Cloudflare Worker Secret on a deployed function. The value is encrypted at rest by Cloudflare and never stored or echoed by MyAPI. The function must already be deployed.
+
+**Inspect invocations.** `myapi fn runs <id>` lists recent invocation records (most recent first, up to 100) with status, duration, and any error message.
+
+Name rules (validated client- and server-side, kept identical):
+- `^[a-z0-9][a-z0-9-]{0,49}$` — kebab-case, 1-50 chars
+- Reserved server-side: `www`, `api`, `admin`, `system`, `default`
+<!-- llm:end -->
+
+## Commands
+<!-- generated:start -->
+| Command | What it does |
+|---|---|
+| `myapi fn create --name <name> [--cron <expr>] [--scope <slot>[,<slot>...]]` | Register a function record + receive scoped API key (returned once). `--scope` narrows the key's slot grants |
+| `myapi fn deploy <id> <bundle.js>` | Upload a single-file JS bundle (≤4MB) and go live; rotates the scoped key |
+| `myapi fn env <id> <name> <value>` | Set a Worker Secret on a deployed function |
+| `myapi fn runs <id>` | List recent invocation records (status, duration, errors) |
+| `myapi fn list` | List functions in your org |
+| `myapi fn get <id>` | Inspect a function (name, trigger, invocation URL) |
+| `myapi fn delete <id>` | Soft-delete the record + revoke the scoped key |
+<!-- generated:end -->
+
+## Examples
+<!-- llm:start -->
+```bash
+# Register an HTTP function (invocation_url is empty until you deploy)
+myapi fn create --name my-app-api
+# → Function created: fn_abc123
+#   Scoped API key (returned once — save it if you need it):
+#     hq_live_...   (scoped keys are not visually distinct from account keys)
+
+# Deploy a single-file JS bundle → goes live, scoped key is rotated
+myapi fn deploy fn_abc123 ./dist/bundle.js
+# → Deployed function fn_abc123
+#   Invocation URL:  https://fn-abc123.<...>.workers.dev
+#   Scoped API key was rotated. New value (returned once): hq_live_...
+
+# Set a secret (encrypted at rest by Cloudflare; never echoed)
+myapi fn env fn_abc123 STRIPE_KEY sk_live_...
+
+# Inspect recent invocations
+myapi fn runs fn_abc123
+
+# Register a cron function instead of HTTP
+myapi fn create --name daily-report --cron "0 8 * * *"
+
+# Register with a narrowed key — the function can only call email + storage
+myapi fn create --name mailer --scope email,storage
+
+# List + inspect
+myapi fn list
+myapi fn get fn_abc123
+
+# Delete (revokes the scoped key — future calls with it return 401)
+myapi fn delete fn_abc123
+```
+
+### Using the scoped key
+
+```bash
+# Save the key returned at create/deploy time
+SCOPED_KEY="hq_live_..."
+
+# Call slots the key was granted — works (within its org + grants)
+curl -H "Authorization: Bearer $SCOPED_KEY" \
+  https://api.myapihq.com/database/orgs/$ORG_ID/namespaces
+
+# Calling /hq/* with it — denied (403 SCOPE_FORBIDDEN)
+curl -H "Authorization: Bearer $SCOPED_KEY" \
+  https://api.myapihq.com/hq/orgs
+# → 403 {"error":{"code":"SCOPE_FORBIDDEN"}}
+```
+<!-- llm:end -->
+
+## Notes
+
+- The bundle is a **single JavaScript file** (≤4MB). Bundle your dependencies before deploy (esbuild/rollup/etc.).
+- `--cron` is set at create time; the trigger type is fixed for the function's lifetime.
+- Deploy rotates the scoped key on every call — re-capture the printed value if other systems use it.
+
+Run `myapi fn --help` or `myapi fn <subcommand> --help` for full flag reference.

package/dist/skills/my-function-api/claude/.claude-plugin/plugin.json

@@ -0,0 +1,7 @@
+{
+  "name": "my-function-api",
+  "description": "Run JavaScript functions on the edge. HTTP or cron triggers. Pre-injected MYAPI SDK scoped to the org — no auth tokens in user code.",
+  "version": "1.0.0",
+  "status": "preview",
+  "published": true
+}

package/dist/skills/my-funnel-api/SKILL.md

@@ -4,7 +4,7 @@ version: 1.0.0
 description: >
   Create and publish websites (funnels) to the edge. Push raw HTML to any slug and it goes live instantly on your org's domain or preview subdomain.
 triggers: [funnel, landing page, website, page, publish, push, slug, html, edge, preview subdomain, makeautonomous]
-checksum: sha256-pending
+checksum: sha256-3b463d6ac52fba7d44f89195b5704b02903ffdd9a677655f9c1bff0f13b25ab4
 ---
 
 # MyFunnelAPI
@@ -19,7 +19,7 @@ Funnels are the publishing surface. You create a funnel under an org (one comman
 
 By default, your funnel lives on a free preview subdomain (`*.makeautonomous.com`) you get with every org. To serve on a custom domain, register and assign one via **mydomainapi** first.
 
-Every funnel auto-provisions a **webhook** at creation time (`org_webhook_id`). The funnel exposes two public proxy endpoints your HTML can call directly (no API key needed): a **form submit** at `POST /funnel/funnels/{id}/submit/{slug}` that delivers submissions through that webhook (CRM upsert + bound workflows fire automatically), and an **analytics/event ingest** for pageviews and click tracking. For multi-form funnels you can bind individual slugs to specific destinations with `myapi funnel form ... --capture-to webhook:<id>`.
+Every funnel auto-provisions a **webhook** at creation (`org_webhook_id`), and exposes two public proxy endpoints your HTML can call without an API key: a **form submit** at `POST /funnel/funnels/{id}/submit/{slug}` (delivers through that webhook — CRM upsert + bound workflows fire automatically), and an **analytics/event ingest** for pageviews and click tracking. Bind individual slugs to other destinations with `myapi funnel form ... --capture-to webhook:<id>`.
 <!-- llm:end -->
 
 ## Commands

package/dist/skills/my-funnel-api/claude/.claude-plugin/plugin.json

@@ -2,5 +2,6 @@
   "name": "my-funnel-api",
   "description": "Build multi-page sites and funnels with headless HTML upload.",
   "version": "1.0.0",
+  "status": "ga",
   "published": true
 }

package/dist/skills/my-git-api/SKILL.md

@@ -4,7 +4,7 @@ version: 1.0.0
 description: >
   Hosted git repositories over HTTP. Create repos, read history (log/show/tree/blob/diff), and write atomically (commit/branch/tag/merge) — no clone needed. Real `git clone`/`push` also work over HTTPS with your API key as the password.
 triggers: [git, repo, repository, clone, push, commit, branch, tag, merge, diff, version control, source control, vcs]
-checksum: sha256-pending
+checksum: sha256-a059c8f2b59205a1d66ecf70556b60fa3a3606044aaa54e242344ea652efb5e9
 ---
 
 # MyGitAPI

package/dist/skills/my-git-api/claude/.claude-plugin/plugin.json

@@ -2,5 +2,6 @@
   "name": "my-git-api",
   "description": "Hosted git repositories over HTTP — create repos, commit files, manage branches and tags, read trees, blobs, history, and diffs. No local clone required.",
   "version": "1.0.0",
+  "status": "ga",
   "published": true
 }

package/dist/skills/my-image-api/SKILL.md

@@ -4,7 +4,7 @@ version: 1.0.0
 description: >
   Generate AI images from a text prompt. Async — submit a prompt, the CLI polls until the image is ready, then returns a public CDN URL. Image lands automatically in your org's storage.
 triggers: [image, generate image, ai image, hero image, logo, illustration, watercolor, prompt, cyberpunk, ratio, aspect ratio]
-checksum: sha256-pending
+checksum: sha256-17f496ae8c575743872e87c5c3b281e621b3557ef3ff9eeb0b3d664ec4212e57
 ---
 
 # MyImageAPI

package/dist/skills/my-image-api/claude/.claude-plugin/plugin.json

@@ -2,5 +2,6 @@
   "name": "my-image-api",
   "description": "Generate AI images from a text prompt. Async, polls until ready, returns a public CDN URL.",
   "version": "1.0.0",
+  "status": "ga",
   "published": true
 }

package/dist/skills/my-llm-api/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: my-llm-api
-version: 1.2.0
+version: 1.2.1
 description: >
   Two-surface LLM primitive. Raw chat completion against self-hosted
   open-source models (you pick the model), and objective verbs
   (classify / extract / summarize / draft) that hide the model behind a
   task. Pricing in cents per 1M tokens; charged from your MyAPI balance.
 triggers: [llm, completion, chat, embed, embedding, inference, classify, extract, summarize, draft, qwen]
-checksum: sha256-pending
+checksum: sha256-6c399da099802637c68eda61ba85a23286ff3dca8f50c391e80ab442777c17c4
 ---
 
 # MyLLMAPI
@@ -15,9 +15,9 @@ checksum: sha256-pending
 A two-surface LLM gateway:
 
 - **Raw** — `complete` / `embed` / `models`. You pick a self-hosted catalog model (run `myapi llm models` for the live list). Proprietary models are not callable here.
-- **Verbs** — `classify` / `extract` / `summarize` / `draft`. You ask for a task done; the model is implementation detail and is never named in the response.
+- **Verbs** — `classify` / `extract` / `summarize` / `draft`. You ask for a task done; the model is implementation detail.
 
-Pricing is in cents per 1M tokens at the actual upstream rate; cost is debited from your MyAPI balance.
+Pricing is cents per 1M tokens at the actual upstream rate, debited from your MyAPI balance.
 
 ## Capabilities
 <!-- llm:start -->
@@ -25,10 +25,7 @@ Use this for workflow tasks — summarize a doc, classify an inbound email, extr
 
 **Don't use this as your own model.** If you're an agent reading this, you already have a more capable model than what's exposed here. Reach for the LLM verbs when you're scripting a recurring step where a small/cheap model is the right tool — not for one-shot reasoning you can just do yourself.
 
-### Raw vs. verbs
-
-- **Raw `complete`** — full control: pick the model, build the `messages` array, set `max_tokens`/`temperature`/`stop`. Use when shape matters.
-- **Verbs** — you want a *result* (label, JSON, summary, draft). Use when you don't care which model runs underneath.
+Reach for raw `complete` when shape matters (you build the `messages` array and set `max_tokens`/`temperature`/`stop`); reach for a verb when you want a *result* and don't care which model produced it.
 
 ### Raw `complete` request
 ```json
@@ -87,7 +84,7 @@ Shared usage block on every verb:
 { "tier_used": "fast", "tokens_in": 65, "tokens_out": 37, "cost_cents": 0.005 }
 ```
 
-The model/provider is **never** named in the verb response. That's the point — the verb is the contract, the model is implementation.
+The model/provider is **never** named in the verb response — the verb is the contract.
 
 ### OpenAI-compatible drop-in
 
@@ -103,8 +100,6 @@ r = client.chat.completions.create(model="<model-id>",
     messages=[{"role":"user","content":"Hi"}])
 ```
 
-Use raw `complete` for first-party code; the compat path for existing OpenAI/LangChain tooling.
-
 <!-- llm:end -->
 
 ## Commands

package/dist/skills/my-llm-api/claude/.claude-plugin/plugin.json

@@ -2,5 +2,6 @@
   "name": "my-llm-api",
   "description": "Self-hosted open-source LLM: raw chat completions (you pick the model) + objective verbs (classify/extract/summarize/draft). Billed in cents per 1M tokens from your balance. Use in workflow steps, not for your own reasoning.",
   "version": "1.0.0",
+  "status": "ga",
   "published": true
 }