@myapihq/sdk 1.1.0-wip.4 → 1.2.0

package/src/hq.ts

@@ -1,5 +1,30 @@
 import { request } from './client';
 import { HQ_BASE as BASE_URL } from './config';
+import type { Exposes } from './exposes';
+
+export const EXPOSES: Exposes = [
+  'POST /hq/account/anonymous',
+  'POST /hq/account/send-code',
+  'POST /hq/account/verify-code',
+  'PATCH /hq/account/upgrade',
+  'GET /hq/account/me',
+  'GET /hq/account/free-tier',
+  'POST /hq/account/create/key',
+  'GET /hq/account/keys',
+  'DELETE /hq/account/delete/key/{key_id}',
+  'POST /hq/orgs',
+  'GET /hq/orgs',
+  'GET /hq/orgs/{org_id}',
+  'PATCH /hq/orgs/{org_id}',
+  'DELETE /hq/orgs/{org_id}',
+  'POST /hq/org-imports',
+  'GET /hq/org-imports/{import_id}',
+  'POST /hq/org-imports/{import_id}/confirm',
+  'GET /hq/billing/balance',
+  'GET /hq/billing/history',
+  'POST /hq/billing/setup-payment',
+  'POST /hq/billing/topup',
+];
 
 export interface Org {
   id: string;
@@ -61,6 +86,22 @@ export async function upgradeAccount(apiKey: string, email: string): Promise<Aut
   return request('PATCH', `${BASE_URL}/hq/account/upgrade`, apiKey, { email });
 }
 
+// The backend returns an array of per-service free-tier rows, or null if the
+// account has no free-tier allocations. (Previously typed as a single scalar
+// object — that was incorrect and surfaced as `undefined/undefined` in the
+// CLI's whoami output.)
+export type FreeTierEntry = {
+  service: string;
+  used: number;
+  allowance: number;
+  remaining?: number;
+  reset_at?: string;
+};
+
+export async function getFreeTier(apiKey: string): Promise<FreeTierEntry[] | null> {
+  return request('GET', `${BASE_URL}/hq/account/free-tier`, apiKey);
+}
+
 export async function getAccount(apiKey: string): Promise<AccountInfo> {
   return request('GET', `${BASE_URL}/hq/account/me`, apiKey);
 }

package/src/image.ts

@@ -1,5 +1,29 @@
 import { request } from './client';
 import { IMAGE_BASE as BASE_URL } from './config';
+import type { Exposes } from './exposes';
+
+export const EXPOSES: Exposes = [
+  'POST /image/orgs/{org_id}/generate',
+  'GET /image/orgs/{org_id}/jobs/{job_id}',
+  'GET /image/orgs/{org_id}/list',
+  'GET /image/orgs/{org_id}/models',
+  'DELETE /image/orgs/{org_id}/images/{image_id}',
+];
+
+// Catalog row from GET /image/.../models. Mirrors the shape of the LLM
+// model catalog but with per-image pricing (image gen is priced per
+// image, not per token).
+export interface ImageModel {
+  id: string;
+  kind: 'image';
+  aspect_ratios: string[]; // e.g. ['1:1', '16:9', '9:16', '4:3', '3:4']
+  default_size: string;    // e.g. '1024x1024'
+  cost_per_image_usd: number;
+}
+
+export interface ImageModelsResponse {
+  models: ImageModel[];
+}
 
 
 
@@ -15,6 +39,9 @@ export interface ImageJob {
 
 export async function generateImage(apiKey: string, orgId: string, payload: {
   prompt: string;
+  // Optional model id; must be in GET /image/.../models. Defaults
+  // server-side to gemini-2.5-flash-image.
+  model?: string;
   aspect_ratio?: '1:1' | '16:9' | '9:16' | '4:3' | '3:4';
   style?: string;
   colors?: string;
@@ -34,3 +61,7 @@ export async function listImages(apiKey: string, orgId: string): Promise<ImageJo
 export async function deleteImage(apiKey: string, orgId: string, jobId: string): Promise<void> {
   return request('DELETE', `${BASE_URL}/image/orgs/${encodeURIComponent(orgId)}/images/${encodeURIComponent(jobId)}`, apiKey);
 }
+
+export async function listModels(apiKey: string, orgId: string): Promise<ImageModelsResponse> {
+  return request('GET', `${BASE_URL}/image/orgs/${encodeURIComponent(orgId)}/models`, apiKey);
+}

package/src/index.ts

@@ -1,6 +1,11 @@
 export * from './types';
 export * from './client';
-export * from './config';
+// Note: config constants (STORAGE_BASE etc.) are NOT re-exported from the
+// barrel. TypeScript compiles `export * from './config'` to a runtime
+// `__exportStar` call that Node's cjs-module-lexer can't see through, so
+// downstream ESM consumers fail with "Named export not found" against the
+// CJS-compiled SDK. If you need a base URL in a downstream package, mirror
+// the constant locally — it's one line and the comment makes it obvious.
 export * as hq from './hq';
 export * as domain from './domain';
 export * as email from './email';
@@ -11,3 +16,9 @@ export * as storage from './storage';
 export * as webhook from './webhook';
 export * as workflow from './workflow';
 export * as url from './url';
+export * as people from './people';
+export * as company from './company';
+export * as audience from './audience';
+export * as llm from './llm';
+export * as database from './database';
+export * as crm from './crm';

package/src/llm.ts

@@ -0,0 +1,86 @@
+// Scaffolded from schema by scripts/scaffold-sdk.js — DO NOT remove the
+// EXPOSES array (the coverage tool verifies it against the live schema).
+// Types and function names ARE editable; re-running the scaffolder against
+// a service whose config has been changed will diff vs. existing file
+// (use --dry-run to inspect).
+
+import { request } from './client';
+import { LLM_BASE as BASE_URL } from './config';
+import type { Exposes } from './exposes';
+
+export const EXPOSES: Exposes = [
+  'POST /llm/orgs/{org_id}/complete',
+  'POST /llm/orgs/{org_id}/embed',
+  'GET /llm/orgs/{org_id}/models',
+];
+
+export type Role = 'system' | 'user' | 'assistant';
+
+export interface Message {
+  role: Role;
+  content: string;
+}
+
+export interface CompleteRequest {
+  model: string;
+  messages: Message[];
+  max_tokens?: number;
+  temperature?: number;
+  stop?: string[];
+}
+
+export interface CompleteResponse {
+  model: string;
+  content: string;
+  finish_reason: string; // 'stop' | 'length' | 'safety' | ...
+  usage: {
+    input_tokens: number;
+    output_tokens: number;
+    cost_usd: number;
+  };
+}
+
+export interface EmbedRequest {
+  model: string;
+  input: string | string[]; // single string or batch
+}
+
+// Always returned as an array — even for a single-string input you get a
+// one-element array. Each element is the dense vector as a flat number[].
+// Embed-only usage has no output_tokens.
+export interface EmbedResponse {
+  model: string;
+  embeddings: number[][];
+  usage: {
+    input_tokens: number;
+    cost_usd: number;
+  };
+}
+
+// Catalog row. 'chat' models have context + output_per_1m; 'embed' models
+// have dimensions instead. Pricing is per 1M tokens at upstream rates
+// (we resell at-cost while building our own inference).
+export interface Model {
+  id: string;
+  kind: 'chat' | 'embed';
+  context?: number;
+  dimensions?: number;
+  input_per_1m: number;
+  output_per_1m?: number;
+}
+
+export interface ModelsResponse {
+  models: Model[];
+}
+
+export async function complete(apiKey: string, orgId: string, req: CompleteRequest): Promise<CompleteResponse> {
+  return request('POST', `${BASE_URL}/llm/orgs/${encodeURIComponent(orgId)}/complete`, apiKey, req);
+}
+
+export async function embed(apiKey: string, orgId: string, req: EmbedRequest): Promise<EmbedResponse> {
+  return request('POST', `${BASE_URL}/llm/orgs/${encodeURIComponent(orgId)}/embed`, apiKey, req);
+}
+
+export async function listModels(apiKey: string, orgId: string): Promise<ModelsResponse> {
+  return request('GET', `${BASE_URL}/llm/orgs/${encodeURIComponent(orgId)}/models`, apiKey);
+}

package/src/people.ts

@@ -0,0 +1,84 @@
+// Scaffolded from schema by scripts/scaffold-sdk.js — DO NOT remove the
+// EXPOSES array (the coverage tool verifies it against the live schema).
+// Types and function names ARE editable; re-running the scaffolder against
+// a service whose config has been changed will diff vs. existing file
+// (use --dry-run to inspect).
+
+import { request } from './client';
+import { PEOPLE_BASE as BASE_URL } from './config';
+import type { Exposes } from './exposes';
+
+import type { SearchFilter } from './audience';
+
+export const EXPOSES: Exposes = [
+  'POST /people/orgs/{org_id}/search',
+  'GET /people/orgs/{org_id}/{person_id}',
+];
+
+export interface Location {
+  city?: string;
+  region?: string;
+  country?: string; // ISO 3166-1 alpha-2
+}
+
+// Goldfox-sourced person row. The data model is crawl-derived signals over
+// scraped contact pages; rich on quality tiers and behavioral booleans,
+// thin on legacy CRM fields (no title / function / industry as response
+// columns — many of those moved to filterable inputs only).
+export interface Person {
+  id: string;
+  full_name: string;
+  first_name?: string;
+  last_name?: string;
+  email?: string;
+  email_type?: string;  // corporate | freemail | role_based | other_corporate
+  link_confidence?: number; // 0..1 — 1.0 = email-domain match (definitive)
+  location: Location;
+  company_id: string;
+  company: PersonCompany;
+}
+
+// Person.company embeds the same shape returned by /company/search results.
+// PersonCompany is an alias for Company — the company sub-object on a person
+// row is identical to a standalone company row.
+export interface PersonCompany {
+  id: string;
+  domain?: string;
+  name: string;
+  general_phone?: string;
+  address?: string;
+  is_registered_entity: boolean;
+  confidence: 'high' | 'low' | 'very_low';
+  country?: string;
+  country_consistent: boolean;
+  tld_class?: string; // cctld | generic | vanity | low_trust | other
+  has_careers_page: boolean;
+  has_investors_page: boolean;
+  has_shop_page: boolean;
+  has_blog: boolean;
+  has_c_level: boolean;
+  has_decision_maker: boolean;
+  headcount_lower_bound: number;
+  org_breadth: number;
+  source_count: number;
+  subdomain_variety: number;
+  multilingual: boolean;
+  language_count: number;
+  location?: Location;
+}
+
+export interface PeopleSearchResult {
+  people: Person[];
+  total: number;
+  limit: number;
+  offset: number;
+  has_more: boolean;
+}
+
+export async function searchPeople(apiKey: string, orgId: string, filter: SearchFilter): Promise<PeopleSearchResult> {
+  return request('POST', `${BASE_URL}/people/orgs/${encodeURIComponent(orgId)}/search`, apiKey, filter);
+}
+
+export async function getPerson(apiKey: string, orgId: string, personId: string): Promise<Person> {
+  return request('GET', `${BASE_URL}/people/orgs/${encodeURIComponent(orgId)}/${encodeURIComponent(personId)}`, apiKey);
+}

package/src/pixel.ts

@@ -1,5 +1,14 @@
 import { request } from './client';
 import { PIXEL_BASE as BASE_URL } from './config';
+import type { Exposes } from './exposes';
+
+export const EXPOSES: Exposes = [
+  'GET /pixel/orgs/{org_id}/interactions',
+  'GET /pixel/orgs/{org_id}/visits',
+  'GET /pixel/orgs/{org_id}/events',
+  'GET /pixel/orgs/{org_id}/identity/{pixel_id}',
+  'GET /pixel/orgs/{org_id}/audience/get_geo_sample',
+];
 
 
 
@@ -60,3 +69,10 @@ export async function getEvents(apiKey: string, orgId: string, params: { campaig
 export async function getIdentity(apiKey: string, orgId: string, pixelId: string): Promise<{ uuid: string; is_resolved: boolean; nodes: Record<string, { type: string; probability: number }>; latency_ms: number }> {
   return request('GET', `${BASE_URL}/pixel/orgs/${encodeURIComponent(orgId)}/identity/${encodeURIComponent(pixelId)}`, apiKey);
 }
+
+// Sample of geographic distribution of the org's pixel audience. Backend
+// returns whatever shape it wants; we type as record-of-unknowns and let
+// callers print or destructure as needed.
+export async function getGeoSample(apiKey: string, orgId: string): Promise<Record<string, unknown>> {
+  return request('GET', `${BASE_URL}/pixel/orgs/${encodeURIComponent(orgId)}/audience/get_geo_sample`, apiKey);
+}

package/src/services.ts

@@ -0,0 +1,220 @@
+// Canonical service registry — the single source of truth for everything
+// downstream (skill plugin.json generators, mirror-repo publisher, docs site,
+// scaffolders, etc.).
+//
+// To add a service: append an entry here. To rename, change description, or
+// re-categorize: edit here. Run `npm run canonical-sync` to propagate to
+// every rendered artifact (plugin.json files today; npm/PyPI metadata,
+// GitHub repo descriptions, docs site landing pages tomorrow).
+//
+// CI enforces no drift: `services-sync.test.ts` runs `canonical-sync
+// --check` and fails on any difference.
+//
+// Skill names MUST match the directory names under skills/<name>/ and the
+// repo names we want to claim on GitHub/npm. Don't paraphrase.
+
+export type ServiceStatus = 'ga' | 'preview' | 'planned';
+
+export type ServiceCategory =
+  | 'send'      // outbound: email, funnel, url, image-render
+  | 'capture'   // inbound: webhook, pixel
+  | 'data'      // read/filter the data layer: people, company, audience, crm
+  | 'store'     // persist bytes/JSON: storage, database
+  | 'compute'   // run code or inference: llm, workflow
+  | 'identity'  // auth/billing/account: hq
+  | 'infra';    // platform glue: domain
+
+export interface ServiceMeta {
+  /** SDK namespace (also OpenAPI tag and CLI top-level command). */
+  module: string;
+  /** Skill name — used for: GitHub repo name, npm package name, plugin.json `name`, README headings. */
+  skill: string;
+  /** Brand domain we own (or want to own). Used for canonical links + npm/GitHub homepage. */
+  domain: string;
+  /** One-line description — used verbatim in npm description, GitHub repo description, plugin.json. */
+  description: string;
+  category: ServiceCategory;
+  status: ServiceStatus;
+  /** npm keywords + GitHub topics + PyPI classifiers. The first five are shared boilerplate. */
+  keywords: string[];
+}
+
+const SHARED_KEYWORDS = ['mcp', 'claude-skill', 'ai-agent', 'cli', 'myapi'] as const;
+const k = (...extra: string[]): string[] => [...SHARED_KEYWORDS, ...extra];
+
+export const SERVICES: readonly ServiceMeta[] = [
+  // ── identity / infra ────────────────────────────────────────────────
+  {
+    module: 'hq',
+    skill: 'my-api-hq',
+    domain: 'myapihq.com',
+    description: 'Core identity and billing hub. Manage auth, organizations, and billing.',
+    category: 'identity',
+    status: 'ga',
+    keywords: k('auth', 'identity', 'billing', 'organization'),
+  },
+  {
+    module: 'domain',
+    skill: 'my-domain-api',
+    domain: 'mydomainapi.com',
+    description: 'Domain registration and check with automated DNS and email infrastructure.',
+    category: 'infra',
+    status: 'ga',
+    keywords: k('domain', 'dns', 'registration'),
+  },
+
+  // ── send ────────────────────────────────────────────────────────────
+  {
+    // Customer-facing email surface (mailboxes, campaigns, templates,
+    // warmup) is gated pre-launch — 503 SERVICE_NOT_LAUNCHED. Sibling
+    // `my-email-verify-api` stays GA and remains the discoverable entry
+    // point for the email primitive today.
+    module: 'email',
+    skill: 'my-email-api',
+    domain: 'myemailapi.com',
+    description: 'Send transactional and bulk email from your own domain. Mailboxes, AI templates, drip campaigns, and warmup.',
+    category: 'send',
+    status: 'preview',
+    keywords: k('email', 'transactional', 'campaign', 'smtp'),
+  },
+  {
+    module: 'email',
+    skill: 'my-email-verify-api',
+    domain: 'myemailapi.com',
+    description: 'Sync single-address email verification — syntax + DNS + Microsoft probe. Pre-send quality gate for campaigns.',
+    category: 'send',
+    status: 'ga',
+    keywords: k('email', 'verification', 'deliverability', 'syntax', 'dns'),
+  },
+  {
+    module: 'funnel',
+    skill: 'my-funnel-api',
+    domain: 'myfunnelapi.com',
+    description: 'Build multi-page sites and funnels with headless HTML upload.',
+    category: 'send',
+    status: 'ga',
+    keywords: k('funnel', 'landing-page', 'website', 'static-site'),
+  },
+  {
+    module: 'url',
+    skill: 'my-url-to',
+    domain: 'myurlto.com',
+    description: 'Stateless link routing and URL shortening for the MyAPI ecosystem.',
+    category: 'send',
+    status: 'preview',
+    keywords: k('url', 'shortener', 'redirect', 'link'),
+  },
+  {
+    module: 'image',
+    skill: 'my-image-api',
+    domain: 'myimageapi.com',
+    description: 'Generate AI images from a text prompt. Async, polls until ready, returns a public CDN URL.',
+    category: 'compute',
+    status: 'ga',
+    keywords: k('image', 'ai-image', 'gemini', 'text-to-image'),
+  },
+
+  // ── capture ─────────────────────────────────────────────────────────
+  {
+    module: 'webhook',
+    skill: 'my-webhook-api',
+    domain: 'mywebhookapi.com',
+    description: 'Receive inbound HTTP webhooks. Per-org endpoints with full delivery history.',
+    category: 'capture',
+    status: 'ga',
+    keywords: k('webhook', 'inbound', 'event'),
+  },
+  {
+    module: 'pixel',
+    skill: 'my-pixel-api',
+    domain: 'mypixelapi.com',
+    description: 'Tracking pixel + identity resolution. Capture visits, events, and stitch known users to anonymous sessions.',
+    category: 'capture',
+    status: 'planned',
+    keywords: k('pixel', 'analytics', 'tracking', 'visit', 'identity'),
+  },
+
+  // ── data ────────────────────────────────────────────────────────────
+  {
+    // Goldfox-backed people search is gated pre-launch — 503 SERVICE_NOT_LAUNCHED.
+    // Internal Goldfox lookups still work (`crm contacts promote` resolves a
+    // goldfox_person_id server-side), but the agent-facing search/get path
+    // is hidden until backend lifts the gate.
+    module: 'people',
+    skill: 'my-people-api',
+    domain: 'mypeopleapi.com',
+    description: 'Contact database backed by the Goldfox crawl. Filter people by confidence tier, seniority, email type, country, link confidence, plus rich behavioral company signals (has_c_level, has_careers_page, has_decision_maker). The targeting layer for outbound campaigns.',
+    category: 'data',
+    status: 'preview',
+    keywords: k('people', 'contact', 'b2b', 'targeting', 'goldfox'),
+  },
+  {
+    // Goldfox-backed company search gated pre-launch (same reason as people).
+    module: 'company',
+    skill: 'my-company-api',
+    domain: 'mycompanyapi.com',
+    description: 'Company database backed by the Goldfox crawl. Filter companies by confidence tier, country/TLD consistency, behavioral page signals (has_careers_page, has_investors_page, has_shop_page, has_c_level, has_decision_maker), legal-entity status, headcount, and source-URL count.',
+    category: 'data',
+    status: 'preview',
+    keywords: k('company', 'firmographics', 'b2b', 'goldfox'),
+  },
+  {
+    // Saved audiences sit on top of people/company — gated together with them.
+    module: 'audience',
+    skill: 'my-audience-api',
+    domain: 'myaudienceapi.com',
+    description: 'Saved audiences = named filter snapshots over people/company database. Reuse across campaigns; refresh re-evaluates against current data.',
+    category: 'data',
+    status: 'preview',
+    keywords: k('audience', 'segment', 'filter'),
+  },
+  {
+    module: 'crm',
+    skill: 'my-crm-api',
+    domain: 'mycrmapi.com',
+    description: 'The canonical store of engaged people + companies. Auto-ingest from inbound webhooks (configurable dot-path). Fixed lifecycle_stage enum, soft delete, event timeline.',
+    category: 'data',
+    status: 'ga',
+    keywords: k('crm', 'contact', 'pipeline', 'engagement'),
+  },
+
+  // ── store ───────────────────────────────────────────────────────────
+  {
+    module: 'storage',
+    skill: 'my-storage-api',
+    domain: 'mystorageapi.com',
+    description: 'Edge-hosted asset storage. Upload local files or ingest from URLs, each gets a stable public CDN URL.',
+    category: 'store',
+    status: 'ga',
+    keywords: k('storage', 'cdn', 'asset', 'upload'),
+  },
+  {
+    module: 'database',
+    skill: 'my-database-api',
+    domain: 'mydatabaseapi.com',
+    description: 'Per-org KV store with namespaces + compare-and-swap. JSON values up to 256 KB. The substrate for stateful agent-built apps.',
+    category: 'store',
+    status: 'ga',
+    keywords: k('kv-store', 'database', 'state'),
+  },
+
+  // ── compute ─────────────────────────────────────────────────────────
+  {
+    module: 'workflow',
+    skill: 'my-workflow-api',
+    domain: 'myworkflowapi.com',
+    description: 'React to inbound webhooks with step chains: send email, post to Slack, call HTTP URLs.',
+    category: 'compute',
+    status: 'ga',
+    keywords: k('workflow', 'automation', 'orchestration'),
+  },
+  {
+    module: 'llm',
+    skill: 'my-llm-api',
+    domain: 'myllmapi.com',
+    description: 'Provider-agnostic LLM completions + embeddings via MyAPI. Routes to managed models (Gemini today, more soon) at upstream cost. Use in workflow steps, not for your own reasoning.',
+    category: 'compute',
+    status: 'ga',
+    keywords: k('llm', 'completion', 'embedding', 'gemini'),
+  },
+] as const;

package/src/storage.ts

@@ -1,6 +1,14 @@
 import { request, MyApiError } from './client';
 import { ApiResponse } from './types';
 import { STORAGE_BASE as BASE_URL } from './config';
+import type { Exposes } from './exposes';
+
+export const EXPOSES: Exposes = [
+  'POST /storage/orgs/{org_id}/assets/ingest',
+  'POST /storage/orgs/{org_id}/assets/upload',
+  'GET /storage/orgs/{org_id}/assets',
+  'DELETE /storage/orgs/{org_id}/assets/{asset_id}',
+];
 
 
 
@@ -10,16 +18,17 @@ export async function ingestAsset(apiKey: string, orgId: string, url: string, na
   return request('POST', `${BASE_URL}/storage/orgs/${encodeURIComponent(orgId)}/assets/ingest`, apiKey, { url, name });
 }
 
-// Image content types accepted by uploadAsset. Mirrors the backend's
-// detectAsset() allowlist (routes/org/org.go) for image/* — gif/webp/svg
-// land here once the backend already accepts them. Non-image types
-// (mp4/webm/pdf) flow through ingest today since they're rarely a local
-// upload use case from the CLI.
+// Content types accepted by uploadAsset. Mirrors the backend's
+// detectAsset() allowlist (routes/org/org.go). Images go up to a few MB;
+// videos cap at 200 MB. PDFs/SVGs and other types still need to go through
+// `ingestAsset` (URL fetch) — they're not in the upload allowlist yet.
 export type UploadContentType =
   | 'image/jpeg'
   | 'image/png'
   | 'image/gif'
-  | 'image/webp';
+  | 'image/webp'
+  | 'video/mp4'
+  | 'video/webm';
 
 export async function uploadAsset(apiKey: string, orgId: string, file: Blob | Buffer, contentType: UploadContentType, name?: string): Promise<Asset> {
   const headers: Record<string, string> = {

package/src/url.ts

@@ -1,5 +1,10 @@
 import { request } from './client';
 import { URL_BASE as BASE_URL } from './config';
+import type { Exposes } from './exposes';
+
+export const EXPOSES: Exposes = [
+  'POST /url/orgs/{org_id}/shorten',
+];
 
 
 

package/src/webhook.ts

@@ -1,5 +1,13 @@
 import { request } from './client';
 import { WEBHOOK_BASE as BASE_URL } from './config';
+import type { Exposes } from './exposes';
+
+export const EXPOSES: Exposes = [
+  'POST /webhook/orgs/{org_id}/endpoints',
+  'GET /webhook/orgs/{org_id}/endpoints',
+  'DELETE /webhook/orgs/{org_id}/endpoints/{endpoint_id}',
+  'GET /webhook/orgs/{org_id}/deliveries/{delivery_id}',
+];
 
 export interface WebhookEndpoint {
   id: string;
@@ -8,6 +16,10 @@ export interface WebhookEndpoint {
   description?: string;
   slug: string;
   url: string;
+  // Dot-path into the webhook body whose value (an email) gets ingested
+  // into CRM as a contact + webhook_received event on each delivery.
+  // Default 'email' (top-level). Empty string disables CRM ingest.
+  crm_email_path?: string;
   created_at: string;
 }
 
@@ -18,8 +30,19 @@ export interface Delivery {
   received_at: string;
 }
 
-export async function createEndpoint(apiKey: string, orgId: string, name: string, description?: string): Promise<WebhookEndpoint> {
-  return request('POST', `${BASE_URL}/webhook/orgs/${encodeURIComponent(orgId)}/endpoints`, apiKey, { name, description });
+export interface CreateEndpointOptions {
+  description?: string;
+  // CRM auto-ingest config. Empty string disables; undefined defaults to
+  // 'email' (top-level). For nested shapes pass the dot-path (e.g.
+  // 'data.object.customer_email' for Stripe, 'sender.email' for GitHub).
+  crm_email_path?: string;
+}
+
+export async function createEndpoint(apiKey: string, orgId: string, name: string, opts: CreateEndpointOptions = {}): Promise<WebhookEndpoint> {
+  const body: Record<string, unknown> = { name };
+  if (opts.description !== undefined) body.description = opts.description;
+  if (opts.crm_email_path !== undefined) body.crm_email_path = opts.crm_email_path;
+  return request('POST', `${BASE_URL}/webhook/orgs/${encodeURIComponent(orgId)}/endpoints`, apiKey, body);
 }
 
 export async function listEndpoints(apiKey: string, orgId: string): Promise<WebhookEndpoint[]> {

package/src/workflow.ts

@@ -1,5 +1,18 @@
 import { request } from './client';
 import { WORKFLOW_BASE as BASE_URL } from './config';
+import type { Exposes } from './exposes';
+
+export const EXPOSES: Exposes = [
+  'POST /workflow/orgs/{org_id}/workflows',
+  'GET /workflow/orgs/{org_id}/workflows',
+  'GET /workflow/orgs/{org_id}/workflows/{workflow_id}',
+  'PATCH /workflow/orgs/{org_id}/workflows/{workflow_id}',
+  'DELETE /workflow/orgs/{org_id}/workflows/{workflow_id}',
+  'POST /workflow/orgs/{org_id}/workflows/{workflow_id}/enable',
+  'POST /workflow/orgs/{org_id}/workflows/{workflow_id}/disable',
+  'GET /workflow/orgs/{org_id}/workflows/{workflow_id}/runs',
+  'GET /workflow/orgs/{org_id}/runs/{run_id}',
+];