@myapihq/sdk 1.3.12 → 2.0.1

package/dist/auth.d.ts

@@ -0,0 +1,58 @@
+import type { Exposes } from './exposes';
+export declare const EXPOSES: Exposes;
+export type AuthConnection = 'google' | 'password' | 'magic';
+export interface Tenant {
+    tenant_id: string;
+    issuer: string;
+    login_url: string;
+    connections?: AuthConnection[];
+}
+export interface CreateTenantInput {
+    connections?: AuthConnection[];
+    theme?: unknown;
+}
+export interface AuthClient {
+    client_id: string;
+    name?: string;
+    type: 'spa' | 'web';
+    redirect_uris: string[];
+    issuer?: string;
+    client_secret?: string;
+    created_at?: string;
+}
+export interface ListClientsResponse {
+    clients: AuthClient[];
+}
+export interface CreateClientInput {
+    name: string;
+    type: 'spa' | 'web';
+    redirect_uris: string[];
+}
+export interface AuthUsage {
+    period: string;
+    active_users: number;
+    price_cents_each: number;
+}
+export interface AuthDomain {
+    domain: string;
+    status: 'pending' | 'active';
+    dns: {
+        type: string;
+        name: string;
+        value: string;
+    };
+    next?: string;
+    issuer?: string;
+    login_url?: string;
+}
+export declare function createTenant(apiKey: string, orgId: string, input?: CreateTenantInput): Promise<Tenant>;
+export declare function getTenant(apiKey: string, orgId: string): Promise<Tenant>;
+export declare function createClient(apiKey: string, orgId: string, input: CreateClientInput): Promise<AuthClient>;
+export declare function listClients(apiKey: string, orgId: string): Promise<ListClientsResponse>;
+export declare function getUsage(apiKey: string, orgId: string): Promise<AuthUsage>;
+export declare function registerDomain(apiKey: string, orgId: string, domain: string): Promise<AuthDomain>;
+export declare function getDomain(apiKey: string, orgId: string): Promise<AuthDomain>;
+export declare function deleteDomain(apiKey: string, orgId: string, domain: string): Promise<{
+    domain: string;
+    status: string;
+}>;

package/dist/auth.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EXPOSES = void 0;
+exports.createTenant = createTenant;
+exports.getTenant = getTenant;
+exports.createClient = createClient;
+exports.listClients = listClients;
+exports.getUsage = getUsage;
+exports.registerDomain = registerDomain;
+exports.getDomain = getDomain;
+exports.deleteDomain = deleteDomain;
+const client_1 = require("./client");
+const config_1 = require("./config");
+// The end-user auth product (my-auth-api): a managed multi-tenant OIDC
+// Identity Provider for the END USERS of apps built on MyAPI. Distinct from
+// operator/account auth (hq/account/*). Each org gets one auth tenant; OIDC
+// clients (apps) register against it. End users sign in with managed Google,
+// email/password, or magic links (per the tenant's `connections`). Tokens are
+// RS256, verified via the tenant's JWKS.
+//
+// The browser/app-facing OIDC + sign-in flows — discovery, jwks, authorize,
+// token, userinfo, password/magic/google login, verify-email, password reset,
+// the hosted login page — are machine/end-user surfaces consumed by apps, the
+// JS SDK, and browsers, NOT management calls; they are not CLI/SDK verbs. This
+// module covers only the org-scoped MANAGEMENT surface: tenant, clients, MAU
+// usage, and the custom auth domain.
+exports.EXPOSES = [
+    'POST /auth/orgs/{org_id}/tenant',
+    'GET /auth/orgs/{org_id}/tenant',
+    'POST /auth/orgs/{org_id}/clients',
+    'GET /auth/orgs/{org_id}/clients',
+    'GET /auth/orgs/{org_id}/usage',
+    'POST /auth/orgs/{org_id}/domain',
+    'GET /auth/orgs/{org_id}/domain',
+    'DELETE /auth/orgs/{org_id}/domain',
+];
+// Create (or update) the org's auth tenant. Idempotent. `connections` selects
+// the sign-in methods (subset of google/password/magic; defaults to google);
+// `theme` is opaque JSON for the hosted login page.
+async function createTenant(apiKey, orgId, input = {}) {
+    const body = {};
+    if (input.connections !== undefined)
+        body.connections = input.connections;
+    if (input.theme !== undefined)
+        body.theme = input.theme;
+    return (0, client_1.request)('POST', `${config_1.AUTH_BASE}/auth/orgs/${encodeURIComponent(orgId)}/tenant`, apiKey, body);
+}
+// Fetch the org's auth tenant. Rejects with TENANT_NOT_FOUND if not created.
+async function getTenant(apiKey, orgId) {
+    return (0, client_1.request)('GET', `${config_1.AUTH_BASE}/auth/orgs/${encodeURIComponent(orgId)}/tenant`, apiKey);
+}
+// Register an OIDC client (an app) under the org's tenant. Auto-provisions the
+// tenant if absent. For type 'web' the response carries `client_secret` once.
+async function createClient(apiKey, orgId, input) {
+    return (0, client_1.request)('POST', `${config_1.AUTH_BASE}/auth/orgs/${encodeURIComponent(orgId)}/clients`, apiKey, input);
+}
+async function listClients(apiKey, orgId) {
+    return (0, client_1.request)('GET', `${config_1.AUTH_BASE}/auth/orgs/${encodeURIComponent(orgId)}/clients`, apiKey);
+}
+// Monthly-active-user usage for the current period (auth is billed per MAU).
+async function getUsage(apiKey, orgId) {
+    return (0, client_1.request)('GET', `${config_1.AUTH_BASE}/auth/orgs/${encodeURIComponent(orgId)}/usage`, apiKey);
+}
+// Set a custom auth domain (e.g. auth.acme.com). Returns the DNS record to
+// create; TLS provisions automatically and the domain becomes the issuer once
+// active. One custom domain per org.
+async function registerDomain(apiKey, orgId, domain) {
+    return (0, client_1.request)('POST', `${config_1.AUTH_BASE}/auth/orgs/${encodeURIComponent(orgId)}/domain`, apiKey, { domain });
+}
+// Fetch the org's custom auth domain. Rejects with NO_DOMAIN if none set.
+async function getDomain(apiKey, orgId) {
+    return (0, client_1.request)('GET', `${config_1.AUTH_BASE}/auth/orgs/${encodeURIComponent(orgId)}/domain`, apiKey);
+}
+async function deleteDomain(apiKey, orgId, domain) {
+    return (0, client_1.request)('DELETE', `${config_1.AUTH_BASE}/auth/orgs/${encodeURIComponent(orgId)}/domain`, apiKey, { domain });
+}

package/dist/client.d.ts

@@ -6,3 +6,9 @@ export declare class MyApiError extends Error {
     constructor(code: string, status: number, detail?: string | undefined, body?: Record<string, unknown> | undefined);
 }
 export declare function request<T>(method: string, url: string, apiKey?: string, body?: unknown, extraHeaders?: Record<string, string>): Promise<T>;
+export interface Page<T> {
+    data: T[];
+    next_cursor?: string;
+    has_more?: boolean;
+}
+export declare function requestPage<T>(method: string, url: string, apiKey?: string, body?: unknown, extraHeaders?: Record<string, string>): Promise<Page<T>>;

package/dist/client.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MyApiError = void 0;
 exports.request = request;
+exports.requestPage = requestPage;
 class MyApiError extends Error {
     code;
     status;
@@ -22,7 +23,7 @@ class MyApiError extends Error {
     }
 }
 exports.MyApiError = MyApiError;
-async function request(method, url, apiKey, body, extraHeaders) {
+async function requestFull(method, url, apiKey, body, extraHeaders) {
     const headers = {};
     if (apiKey) {
         headers['Authorization'] = `Bearer ${apiKey}`;
@@ -46,7 +47,7 @@ async function request(method, url, apiKey, body, extraHeaders) {
     }
     const response = await fetch(url, options);
     if (response.status === 204) {
-        return undefined;
+        return { success: true, data: null, error: null, meta: {} };
     }
     // Read the body as text first so we can include a snippet in errors when
     // it isn't valid JSON (HTML error pages from edge proxies, plaintext
@@ -75,5 +76,17 @@ async function request(method, url, apiKey, body, extraHeaders) {
         const errBody = typeof err === 'object' ? err : undefined;
         throw new MyApiError(code, response.status, detail, errBody);
     }
-    return apiResponse.data;
+    return apiResponse;
+}
+// Returns the unwrapped `data` payload — the common case.
+async function request(method, url, apiKey, body, extraHeaders) {
+    return (await requestFull(method, url, apiKey, body, extraHeaders)).data;
+}
+// For keyset-paginated endpoints (backend `envelope.WrapPage`): `data` is a
+// bare array and the cursor/has_more live under `meta`. `request` would drop
+// the cursor, so list endpoints with pagination must use this.
+async function requestPage(method, url, apiKey, body, extraHeaders) {
+    const r = await requestFull(method, url, apiKey, body, extraHeaders);
+    const meta = (r.meta ?? {});
+    return { data: (r.data ?? []), next_cursor: meta.next_cursor, has_more: meta.has_more };
 }

package/dist/config.d.ts

@@ -20,3 +20,4 @@ export declare const AUDIENCE_BASE: string;
 export declare const LLM_BASE: string;
 export declare const DATABASE_BASE: string;
 export declare const CRM_BASE: string;
+export declare const AUTH_BASE: string;

package/dist/config.js

@@ -8,7 +8,7 @@
 // local dev — `source scripts/local-env.sh` still points everything at
 // localhost:8080 regardless of the prod default.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CRM_BASE = exports.DATABASE_BASE = exports.LLM_BASE = exports.AUDIENCE_BASE = exports.COMPANY_BASE = exports.PEOPLE_BASE = exports.PIXEL_BASE = exports.URL_BASE = exports.STORAGE_BASE = exports.EMAIL_BASE = exports.WORKFLOW_BASE = exports.WEBHOOK_BASE = exports.IMAGE_BASE = exports.TASK_BASE = exports.QUEUE_BASE = exports.GIT_BASE = exports.CONTAINER_BASE = exports.PAYMENTS_BASE = exports.FUNCTION_BASE = exports.FUNNEL_BASE = exports.DOMAIN_BASE = exports.HQ_BASE = void 0;
+exports.AUTH_BASE = exports.CRM_BASE = exports.DATABASE_BASE = exports.LLM_BASE = exports.AUDIENCE_BASE = exports.COMPANY_BASE = exports.PEOPLE_BASE = exports.PIXEL_BASE = exports.URL_BASE = exports.STORAGE_BASE = exports.EMAIL_BASE = exports.WORKFLOW_BASE = exports.WEBHOOK_BASE = exports.IMAGE_BASE = exports.TASK_BASE = exports.QUEUE_BASE = exports.GIT_BASE = exports.CONTAINER_BASE = exports.PAYMENTS_BASE = exports.FUNCTION_BASE = exports.FUNNEL_BASE = exports.DOMAIN_BASE = exports.HQ_BASE = void 0;
 const GATEWAY = 'https://api.myapihq.com';
 exports.HQ_BASE = process.env.MYAPI_HQ_URL ?? process.env.MYAPI_API_BASE ?? GATEWAY;
 exports.DOMAIN_BASE = process.env.MYAPI_DOMAIN_URL ?? 'https://api.mydomainapi.com';
@@ -37,3 +37,4 @@ exports.AUDIENCE_BASE = process.env.MYAPI_AUDIENCE_URL ?? GATEWAY;
 exports.LLM_BASE = process.env.MYAPI_LLM_URL ?? GATEWAY;
 exports.DATABASE_BASE = process.env.MYAPI_DATABASE_URL ?? GATEWAY;
 exports.CRM_BASE = process.env.MYAPI_CRM_URL ?? GATEWAY;
+exports.AUTH_BASE = process.env.MYAPI_AUTH_URL ?? GATEWAY;

package/dist/container.d.ts

@@ -16,6 +16,7 @@ export interface Container {
     url?: string;
     custom_domain?: string;
     status: string;
+    egress: string;
     created_at: string;
     updated_at: string;
 }
@@ -47,6 +48,13 @@ export declare function listContainers(apiKey: string, orgId: string): Promise<C
 export declare function getContainer(apiKey: string, orgId: string, containerId: string): Promise<Container>;
 export declare function deleteContainer(apiKey: string, orgId: string, containerId: string): Promise<void>;
 export declare function deployContainer(apiKey: string, orgId: string, containerId: string, image: string): Promise<DeployResponse>;
+export interface BuildDeployResponse {
+    container_id: string;
+    revision_id: string;
+    status: string;
+    message?: string;
+}
+export declare function deployContainerSource(apiKey: string, orgId: string, containerId: string, tarball: Blob | Buffer, filename?: string): Promise<BuildDeployResponse>;
 export interface LogEntry {
     timestamp: string;
     severity: string;

package/dist/container.js

@@ -6,6 +6,7 @@ exports.listContainers = listContainers;
 exports.getContainer = getContainer;
 exports.deleteContainer = deleteContainer;
 exports.deployContainer = deployContainer;
+exports.deployContainerSource = deployContainerSource;
 exports.getContainerLogs = getContainerLogs;
 exports.bindDomain = bindDomain;
 exports.unbindDomain = unbindDomain;
@@ -36,11 +37,34 @@ async function getContainer(apiKey, orgId, containerId) {
 async function deleteContainer(apiKey, orgId, containerId) {
     return (0, client_1.request)('DELETE', `${config_1.CONTAINER_BASE}/container/orgs/${encodeURIComponent(orgId)}/containers/${encodeURIComponent(containerId)}`, apiKey);
 }
-// deployContainer ships a revision from a pre-built image ref to Cloud Run
-// (source builds land in a later backend slice). Rotates the scoped key.
+// deployContainer ships a revision from a pre-built image ref to Cloud Run.
+// Synchronous — returns status='active' with a rotated scoped key.
 async function deployContainer(apiKey, orgId, containerId, image) {
     return (0, client_1.request)('POST', `${config_1.CONTAINER_BASE}/container/orgs/${encodeURIComponent(orgId)}/containers/${encodeURIComponent(containerId)}/deploy`, apiKey, { image });
 }
+// deployContainerSource uploads a build-context tarball via multipart `source`
+// (backend deploy.go builds it via Cloud Build → Artifact Registry, then
+// deploys). Asynchronous: returns status='building' to poll. The tarball is
+// capped at 100MB server-side. Mirrors the multipart upload in storage.ts.
+async function deployContainerSource(apiKey, orgId, containerId, tarball, filename = 'source.tar.gz') {
+    const formData = new FormData();
+    formData.append('source', new Blob([tarball], { type: 'application/gzip' }), filename);
+    const response = await fetch(`${config_1.CONTAINER_BASE}/container/orgs/${encodeURIComponent(orgId)}/containers/${encodeURIComponent(containerId)}/deploy`, { method: 'POST', headers: { Authorization: `Bearer ${apiKey}` }, body: formData });
+    let result;
+    try {
+        result = await response.json();
+    }
+    catch {
+        throw new client_1.MyApiError('invalid_json_response', response.status);
+    }
+    if (!response.ok || !result?.success) {
+        const err = result?.error;
+        const code = typeof err === 'object' ? (err?.code || 'unknown_error') : (err || 'unknown_error');
+        const detail = typeof err === 'object' ? err?.message : undefined;
+        throw new client_1.MyApiError(code, response.status, detail, typeof err === 'object' ? err : undefined);
+    }
+    return result.data;
+}
 // getContainerLogs returns recent runtime log entries, newest first.
 // `tail` caps the count (default 100, max 1000 server-side). An
 // undeployed container returns an empty array.

package/dist/crm.d.ts

@@ -2,7 +2,7 @@ import type { Exposes } from './exposes';
 export declare const EXPOSES: Exposes;
 export type LifecycleStage = 'cold' | 'warm' | 'qualified' | 'customer' | 'churned';
 export type ContactSource = 'goldfox' | 'email' | 'pixel' | 'webhook' | 'manual';
-export type EventKind = 'created' | 'promoted' | 'stage_changed' | 'email_sent' | 'email_opened' | 'email_clicked' | 'email_replied' | 'pixel_visit' | 'webhook_received';
+export type EventKind = 'created' | 'promoted' | 'stage_changed' | 'email_sent' | 'email_opened' | 'email_clicked' | 'email_replied' | 'pixel_visit' | 'webhook_received' | 'payment';
 export interface Contact {
     id: string;
     org_id: string;

package/dist/crm.js

@@ -60,7 +60,10 @@ async function getContactEvents(apiKey, orgId, id, opts = {}) {
         qs.append('kind', opts.kind);
     const q = qs.toString();
     const url = `${config_1.CRM_BASE}/crm/orgs/${encodeURIComponent(orgId)}/contacts/${encodeURIComponent(id)}/events${q ? `?${q}` : ''}`;
-    return (0, client_1.request)('GET', url, apiKey);
+    // Paginated (WrapPage): events are the bare `data` array with the cursor
+    // under `meta` — use requestPage so `next_cursor` survives.
+    const page = await (0, client_1.requestPage)('GET', url, apiKey);
+    return { events: page.data, next_cursor: page.next_cursor };
 }
 // ── Companies ─────────────────────────────────────────────────────────────
 async function createCompany(apiKey, orgId, input) {

package/dist/database.js

@@ -48,7 +48,10 @@ async function listKeys(apiKey, orgId, ns, opts = {}) {
         qs.append('values', 'true');
     const q = qs.toString();
     const url = `${config_1.DATABASE_BASE}/database/orgs/${encodeURIComponent(orgId)}/namespaces/${encodeURIComponent(ns)}/keys${q ? `?${q}` : ''}`;
-    return (0, client_1.request)('GET', url, apiKey);
+    // Paginated (WrapPage): keys come back as the bare `data` array with the
+    // cursor under `meta` — must use requestPage or the cursor is lost.
+    const page = await (0, client_1.requestPage)('GET', url, apiKey);
+    return { keys: page.data, next_cursor: page.next_cursor };
 }
 async function getKey(apiKey, orgId, ns, key) {
     return (0, client_1.request)('GET', `${config_1.DATABASE_BASE}/database/orgs/${encodeURIComponent(orgId)}/namespaces/${encodeURIComponent(ns)}/keys/${encodeURIComponent(key)}`, apiKey);

package/dist/domain.d.ts

@@ -107,7 +107,7 @@ export declare function deleteDnsRecord(apiKey: string, orgId: string, domain: s
 export interface EmailInfraResponse {
     domain: string;
     email_infra: 'pending' | 'ready' | 'error';
-    email_subdomain: string;
+    subdomain: string;
     next_step?: string;
 }
 export declare function setupEmailInfra(apiKey: string, orgId: string, domain: string, subdomain?: string): Promise<EmailInfraResponse>;

package/dist/email.d.ts

@@ -15,45 +15,6 @@ export interface EmailTemplate {
     created_at: string;
     updated_at: string;
 }
-export interface WarmupConfig {
-    enabled: boolean;
-    start: number;
-    increment: number;
-    max: number;
-}
-export interface Campaign {
-    id: string;
-    name: string;
-    status: string;
-    template_id: string;
-    from_address: string;
-    per_day_limit: number;
-    warmup_config?: WarmupConfig;
-    created_at: string;
-}
-export interface CampaignStats {
-    campaign: Campaign;
-    validation: {
-        total: number;
-        valid: number;
-        invalid: number;
-        pending: number;
-        list_status: string;
-    };
-    dispatch: {
-        sent: number;
-        remaining: number;
-        sent_this_hour: number;
-        hour_limit: number;
-        last_dispatch_at: string;
-    };
-    engagement: {
-        sent: number;
-        opens: number;
-        clicks: number;
-        page_visits: number;
-    };
-}
 export type VerifyVerdict = 'deliverable' | 'undeliverable' | 'unknown';
 export interface VerifyChecks {
     syntax: {
@@ -191,38 +152,3 @@ export declare function sendTestEmail(apiKey: string, orgId: string, templateId:
 }>;
 export declare function listTemplates(apiKey: string, orgId: string): Promise<EmailTemplate[]>;
 export declare function deleteTemplate(apiKey: string, orgId: string, templateId: string): Promise<void>;
-export declare function createCampaign(apiKey: string, orgId: string, payload: {
-    name: string;
-    template_id: string;
-    from_address: string;
-    per_day_limit?: number;
-    warmup_config?: WarmupConfig | null;
-}): Promise<Campaign>;
-export declare function uploadContactList(apiKey: string, orgId: string, campaignId: string, emails: string[]): Promise<{
-    list_id: string;
-    total: number;
-    status: string;
-}>;
-export declare function uploadContactsFile(apiKey: string, orgId: string, campaignId: string, file: Blob | ArrayBuffer | Uint8Array, filename?: string): Promise<{
-    list_id: string;
-    total: number;
-    status: string;
-}>;
-export declare function getContactUploadStatus(apiKey: string, orgId: string, campaignId: string): Promise<{
-    upload_status: 'ready' | 'validating' | 'failed';
-    total: number;
-    valid_count: number;
-    invalid_count: number;
-}>;
-export declare function startCampaign(apiKey: string, orgId: string, campaignId: string): Promise<{
-    status: string;
-}>;
-export declare function pauseCampaign(apiKey: string, orgId: string, campaignId: string): Promise<void>;
-export declare function resumeCampaign(apiKey: string, orgId: string, campaignId: string): Promise<void>;
-export declare function getCampaignStats(apiKey: string, orgId: string, campaignId: string): Promise<CampaignStats>;
-export declare function listCampaigns(apiKey: string, orgId: string): Promise<Campaign[]>;
-export declare function getCampaign(apiKey: string, orgId: string, campaignId: string): Promise<Campaign>;
-export declare function updateCampaign(apiKey: string, orgId: string, campaignId: string, payload: {
-    name?: string;
-    per_day_limit?: number;
-}): Promise<Campaign>;

package/dist/email.js

@@ -30,17 +30,6 @@ exports.editTemplate = editTemplate;
 exports.sendTestEmail = sendTestEmail;
 exports.listTemplates = listTemplates;
 exports.deleteTemplate = deleteTemplate;
-exports.createCampaign = createCampaign;
-exports.uploadContactList = uploadContactList;
-exports.uploadContactsFile = uploadContactsFile;
-exports.getContactUploadStatus = getContactUploadStatus;
-exports.startCampaign = startCampaign;
-exports.pauseCampaign = pauseCampaign;
-exports.resumeCampaign = resumeCampaign;
-exports.getCampaignStats = getCampaignStats;
-exports.listCampaigns = listCampaigns;
-exports.getCampaign = getCampaign;
-exports.updateCampaign = updateCampaign;
 const client_1 = require("./client");
 const config_1 = require("./config");
 exports.EXPOSES = [
@@ -72,18 +61,6 @@ exports.EXPOSES = [
     'POST /email/orgs/{org_id}/templates/{template_id}/send-test',
     'DELETE /email/orgs/{org_id}/templates/{template_id}',
     'GET /email/templates/{template_id}/preview',
-    // Campaigns
-    'POST /email/orgs/{org_id}/campaigns',
-    'GET /email/orgs/{org_id}/campaigns',
-    'GET /email/orgs/{org_id}/campaigns/{campaign_id}',
-    'PATCH /email/orgs/{org_id}/campaigns/{campaign_id}',
-    'POST /email/orgs/{org_id}/campaigns/{campaign_id}/contacts/upload-list',
-    'POST /email/orgs/{org_id}/campaigns/{campaign_id}/contacts/upload-file',
-    'GET /email/orgs/{org_id}/campaigns/{campaign_id}/contacts/status',
-    'POST /email/orgs/{org_id}/campaigns/{campaign_id}/start',
-    'POST /email/orgs/{org_id}/campaigns/{campaign_id}/pause',
-    'POST /email/orgs/{org_id}/campaigns/{campaign_id}/resume',
-    'GET /email/orgs/{org_id}/campaigns/{campaign_id}/stats',
     // Verify
     'POST /email/orgs/{org_id}/verify',
     'POST /email/orgs/{org_id}/verify-bulk',
@@ -110,8 +87,7 @@ async function createMailbox(apiKey, domain, username, displayName) {
     return (0, client_1.request)('POST', `${config_1.EMAIL_BASE}/email/mailboxes/create`, apiKey, { domain, username, display_name: displayName });
 }
 // Backend (2026-06-06): idempotent — 204 whether the mailbox existed or not.
-// Returns 409 MAILBOX_IN_USE when an active/paused campaign still sends from
-// this address; pause/delete the campaign first.
+// May return 409 MAILBOX_IN_USE if the address is still referenced server-side.
 async function deleteMailbox(apiKey, address) {
     return (0, client_1.request)('DELETE', `${config_1.EMAIL_BASE}/email/mailboxes/${encodeURIComponent(address)}`, apiKey);
 }
@@ -207,48 +183,3 @@ async function listTemplates(apiKey, orgId) {
 async function deleteTemplate(apiKey, orgId, templateId) {
     return (0, client_1.request)('DELETE', `${config_1.EMAIL_BASE}/email/orgs/${encodeURIComponent(orgId)}/templates/${encodeURIComponent(templateId)}`, apiKey);
 }
-// ── Campaigns (org-scoped) ───────────────────────────────────────────────────
-async function createCampaign(apiKey, orgId, payload) {
-    return (0, client_1.request)('POST', `${config_1.EMAIL_BASE}/email/orgs/${encodeURIComponent(orgId)}/campaigns`, apiKey, payload);
-}
-async function uploadContactList(apiKey, orgId, campaignId, emails) {
-    return (0, client_1.request)('POST', `${config_1.EMAIL_BASE}/email/orgs/${encodeURIComponent(orgId)}/campaigns/${encodeURIComponent(campaignId)}/contacts/upload-list`, apiKey, { emails });
-}
-async function uploadContactsFile(apiKey, orgId, campaignId, file, filename = 'contacts.csv') {
-    const form = new FormData();
-    const blob = file instanceof Blob ? file : new Blob([file]);
-    form.append('file', blob, filename);
-    const res = await fetch(`${config_1.EMAIL_BASE}/email/orgs/${encodeURIComponent(orgId)}/campaigns/${encodeURIComponent(campaignId)}/contacts/upload-file`, {
-        method: 'POST',
-        headers: { Authorization: `Bearer ${apiKey}` },
-        body: form,
-    });
-    const json = await res.json();
-    if (!res.ok || !json.success)
-        throw new Error(json.error?.code || json.error || 'upload_failed');
-    return json.data;
-}
-async function getContactUploadStatus(apiKey, orgId, campaignId) {
-    return (0, client_1.request)('GET', `${config_1.EMAIL_BASE}/email/orgs/${encodeURIComponent(orgId)}/campaigns/${encodeURIComponent(campaignId)}/contacts/status`, apiKey);
-}
-async function startCampaign(apiKey, orgId, campaignId) {
-    return (0, client_1.request)('POST', `${config_1.EMAIL_BASE}/email/orgs/${encodeURIComponent(orgId)}/campaigns/${encodeURIComponent(campaignId)}/start`, apiKey);
-}
-async function pauseCampaign(apiKey, orgId, campaignId) {
-    return (0, client_1.request)('POST', `${config_1.EMAIL_BASE}/email/orgs/${encodeURIComponent(orgId)}/campaigns/${encodeURIComponent(campaignId)}/pause`, apiKey);
-}
-async function resumeCampaign(apiKey, orgId, campaignId) {
-    return (0, client_1.request)('POST', `${config_1.EMAIL_BASE}/email/orgs/${encodeURIComponent(orgId)}/campaigns/${encodeURIComponent(campaignId)}/resume`, apiKey);
-}
-async function getCampaignStats(apiKey, orgId, campaignId) {
-    return (0, client_1.request)('GET', `${config_1.EMAIL_BASE}/email/orgs/${encodeURIComponent(orgId)}/campaigns/${encodeURIComponent(campaignId)}/stats`, apiKey);
-}
-async function listCampaigns(apiKey, orgId) {
-    return (0, client_1.request)('GET', `${config_1.EMAIL_BASE}/email/orgs/${encodeURIComponent(orgId)}/campaigns`, apiKey);
-}
-async function getCampaign(apiKey, orgId, campaignId) {
-    return (0, client_1.request)('GET', `${config_1.EMAIL_BASE}/email/orgs/${encodeURIComponent(orgId)}/campaigns/${encodeURIComponent(campaignId)}`, apiKey);
-}
-async function updateCampaign(apiKey, orgId, campaignId, payload) {
-    return (0, client_1.request)('PATCH', `${config_1.EMAIL_BASE}/email/orgs/${encodeURIComponent(orgId)}/campaigns/${encodeURIComponent(campaignId)}`, apiKey, payload);
-}

package/dist/function.d.ts

@@ -15,6 +15,7 @@ export interface CreatePayload {
     name: string;
     trigger_type?: TriggerType;
     cron_schedule?: string;
+    scopes?: string[];
 }
 export interface CreateResponse {
     function: Fn;
@@ -40,4 +41,7 @@ export declare function getFunction(apiKey: string, orgId: string, fnId: string)
 export declare function deleteFunction(apiKey: string, orgId: string, fnId: string): Promise<void>;
 export declare function uploadBundle(apiKey: string, orgId: string, fnId: string, bundle: Blob | Buffer | string, filename?: string): Promise<DeployResponse>;
 export declare function setFunctionEnv(apiKey: string, orgId: string, fnId: string, name: string, value: string): Promise<void>;
+export declare function setFunctionEnvBulk(apiKey: string, orgId: string, fnId: string, env: Record<string, string>): Promise<{
+    set: number;
+}>;
 export declare function listFunctionRuns(apiKey: string, orgId: string, fnId: string): Promise<FunctionRun[]>;

package/dist/function.js

@@ -7,6 +7,7 @@ exports.getFunction = getFunction;
 exports.deleteFunction = deleteFunction;
 exports.uploadBundle = uploadBundle;
 exports.setFunctionEnv = setFunctionEnv;
+exports.setFunctionEnvBulk = setFunctionEnvBulk;
 exports.listFunctionRuns = listFunctionRuns;
 const client_1 = require("./client");
 const config_1 = require("./config");
@@ -62,6 +63,13 @@ async function uploadBundle(apiKey, orgId, fnId, bundle, filename = 'bundle.js')
 async function setFunctionEnv(apiKey, orgId, fnId, name, value) {
     return (0, client_1.request)('POST', `${config_1.FUNCTION_BASE}/function/orgs/${encodeURIComponent(orgId)}/functions/${encodeURIComponent(fnId)}/env`, apiKey, { name, value });
 }
+// setFunctionEnvBulk writes multiple Worker Secrets in one call. The backend
+// (env.go) loops, calling Cloudflare once per secret, and returns `{set:N}`.
+// The single-secret `setFunctionEnv` above stays the canonical one-off path;
+// this is the bulk variant. The function must already be deployed.
+async function setFunctionEnvBulk(apiKey, orgId, fnId, env) {
+    return (0, client_1.request)('POST', `${config_1.FUNCTION_BASE}/function/orgs/${encodeURIComponent(orgId)}/functions/${encodeURIComponent(fnId)}/env`, apiKey, { env });
+}
 // listFunctionRuns returns recent invocation records, most recent first
 // (Story 4). Capped at 100 server-side.
 async function listFunctionRuns(apiKey, orgId, fnId) {

package/dist/funnel.d.ts

@@ -42,7 +42,7 @@ export interface VerifyResult {
     tests?: VerifyTest[];
 }
 export interface VerifyTest {
-    type: 'link' | 'webhook';
+    type: 'link' | 'image' | 'webhook';
     url: string;
     passed: boolean;
     details: string;

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 export * from './types';
 export * from './client';
 export * as hq from './hq';
+export * as auth from './auth';
 export * as domain from './domain';
 export * as email from './email';
 export * as funnel from './funnel';

package/dist/index.js

@@ -36,7 +36,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.task = exports.queue = exports.git = exports.container = exports.payments = exports.fn = exports.crm = exports.database = exports.llm = exports.audience = exports.company = exports.people = exports.url = exports.workflow = exports.webhook = exports.storage = exports.pixel = exports.image = exports.funnel = exports.email = exports.domain = exports.hq = void 0;
+exports.task = exports.queue = exports.git = exports.container = exports.payments = exports.fn = exports.crm = exports.database = exports.llm = exports.audience = exports.company = exports.people = exports.url = exports.workflow = exports.webhook = exports.storage = exports.pixel = exports.image = exports.funnel = exports.email = exports.domain = exports.auth = exports.hq = void 0;
 __exportStar(require("./types"), exports);
 __exportStar(require("./client"), exports);
 // Note: config constants (STORAGE_BASE etc.) are NOT re-exported from the
@@ -46,6 +46,7 @@ __exportStar(require("./client"), exports);
 // CJS-compiled SDK. If you need a base URL in a downstream package, mirror
 // the constant locally — it's one line and the comment makes it obvious.
 exports.hq = __importStar(require("./hq"));
+exports.auth = __importStar(require("./auth"));
 exports.domain = __importStar(require("./domain"));
 exports.email = __importStar(require("./email"));
 exports.funnel = __importStar(require("./funnel"));

package/dist/payments.d.ts

@@ -1,6 +1,7 @@
 import type { Exposes } from './exposes';
 export declare const EXPOSES: Exposes;
 export interface ConnectStatus {
+    connected?: boolean;
     tier: string;
     stripe_account_id: string;
     onboarding_status: string;

package/dist/payments.js

@@ -32,7 +32,7 @@ async function connect(apiKey, orgId, stripeSecretKey, tier = 't0') {
         stripe_secret_key: stripeSecretKey,
     });
 }
-// getConnect reads the org's connection status. Throws NOT_CONNECTED (404)
+// getConnect reads the org's connection status. Returns { connected: false } when no Stripe is linked (no longer a 404).
 // when the org has not connected Stripe.
 async function getConnect(apiKey, orgId) {
     return (0, client_1.request)('GET', `${config_1.PAYMENTS_BASE}/payments/orgs/${encodeURIComponent(orgId)}/connect`, apiKey);

package/dist/queue.d.ts

@@ -41,6 +41,7 @@ export interface EnqueueOptions {
 export declare function createQueue(apiKey: string, orgId: string, opts: CreateQueueOptions): Promise<Queue>;
 export declare function listQueues(apiKey: string, orgId: string): Promise<Queue[]>;
 export declare function getQueue(apiKey: string, orgId: string, name: string): Promise<Queue>;
+export declare function deleteQueue(apiKey: string, orgId: string, name: string): Promise<void>;
 export declare function enqueueJob(apiKey: string, orgId: string, name: string, opts?: EnqueueOptions): Promise<Job>;
 export declare function listJobs(apiKey: string, orgId: string, name: string, opts?: {
     status?: string;

package/dist/queue.js

@@ -4,6 +4,7 @@ exports.EXPOSES = void 0;
 exports.createQueue = createQueue;
 exports.listQueues = listQueues;
 exports.getQueue = getQueue;
+exports.deleteQueue = deleteQueue;
 exports.enqueueJob = enqueueJob;
 exports.listJobs = listJobs;
 exports.getJob = getJob;
@@ -17,6 +18,7 @@ exports.EXPOSES = [
     'POST /queue/orgs/{org_id}/queues',
     'GET /queue/orgs/{org_id}/queues',
     'GET /queue/orgs/{org_id}/queues/{name}',
+    'DELETE /queue/orgs/{org_id}/queues/{name}',
     'POST /queue/orgs/{org_id}/queues/{name}/jobs',
     'GET /queue/orgs/{org_id}/queues/{name}/jobs',
     'GET /queue/orgs/{org_id}/jobs/{id}',
@@ -41,6 +43,9 @@ async function listQueues(apiKey, orgId) {
 async function getQueue(apiKey, orgId, name) {
     return (0, client_1.request)('GET', `${queuesBase(orgId)}/${encodeURIComponent(name)}`, apiKey);
 }
+async function deleteQueue(apiKey, orgId, name) {
+    return (0, client_1.request)('DELETE', `${queuesBase(orgId)}/${encodeURIComponent(name)}`, apiKey);
+}
 // enqueueJob is idempotent on (queue, dedup_key). A job with unsucceeded
 // depends_on starts blocked.
 async function enqueueJob(apiKey, orgId, name, opts = {}) {