@zanfia/cli 0.10.0 → 0.21.0

package/dist/index.js

@@ -1024,7 +1024,7 @@ var require_command = __commonJS({
           writeErr: (str) => process2.stderr.write(str),
           getOutHelpWidth: () => process2.stdout.isTTY ? process2.stdout.columns : void 0,
           getErrHelpWidth: () => process2.stderr.isTTY ? process2.stderr.columns : void 0,
-          outputError: (str, write) => write(str)
+          outputError: (str, write2) => write2(str)
         };
         this._hidden = false;
         this._helpOption = void 0;
@@ -2824,13 +2824,13 @@ Expecting one of '${allowedValues.join("', '")}'`);
       _getHelpContext(contextOptions) {
         contextOptions = contextOptions || {};
         const context = { error: !!contextOptions.error };
-        let write;
+        let write2;
         if (context.error) {
-          write = (arg) => this._outputConfiguration.writeErr(arg);
+          write2 = (arg) => this._outputConfiguration.writeErr(arg);
         } else {
-          write = (arg) => this._outputConfiguration.writeOut(arg);
+          write2 = (arg) => this._outputConfiguration.writeOut(arg);
         }
-        context.write = contextOptions.write || write;
+        context.write = contextOptions.write || write2;
         context.command = this;
         return context;
       }
@@ -3221,9 +3221,9 @@ var require_url_parse = __commonJS({
         rest
       };
     }
-    function resolve2(relative, base) {
-      if (relative === "") return base;
-      var path2 = (base || "/").split("/").slice(0, -1).concat(relative.split("/")), i = path2.length, last = path2[i - 1], unshift = false, up = 0;
+    function resolve3(relative2, base) {
+      if (relative2 === "") return base;
+      var path2 = (base || "/").split("/").slice(0, -1).concat(relative2.split("/")), i = path2.length, last = path2[i - 1], unshift = false, up = 0;
       while (i--) {
         if (path2[i] === ".") {
           path2.splice(i, 1);
@@ -3246,7 +3246,7 @@ var require_url_parse = __commonJS({
       if (!(this instanceof Url)) {
         return new Url(address, location, parser);
       }
-      var relative, extracted, parse2, instruction, index, key, instructions = rules.slice(), type = typeof location, url = this, i = 0;
+      var relative2, extracted, parse2, instruction, index, key, instructions = rules.slice(), type = typeof location, url = this, i = 0;
       if ("object" !== type && "string" !== type) {
         parser = location;
         location = null;
@@ -3254,8 +3254,8 @@ var require_url_parse = __commonJS({
       if (parser && "function" !== typeof parser) parser = qs.parse;
       location = lolcation(location);
       extracted = extractProtocol(address || "", location);
-      relative = !extracted.protocol && !extracted.slashes;
-      url.slashes = extracted.slashes || relative && location.slashes;
+      relative2 = !extracted.protocol && !extracted.slashes;
+      url.slashes = extracted.slashes || relative2 && location.slashes;
       url.protocol = extracted.protocol || location.protocol || "";
       address = extracted.rest;
       if (extracted.protocol === "file:" && (extracted.slashesCount !== 2 || windowsDriveLetter.test(address)) || !extracted.slashes && (extracted.protocol || extracted.slashesCount < 2 || !isSpecial(url.protocol))) {
@@ -3286,12 +3286,12 @@ var require_url_parse = __commonJS({
           url[key] = index[1];
           address = address.slice(0, index.index);
         }
-        url[key] = url[key] || (relative && instruction[3] ? location[key] || "" : "");
+        url[key] = url[key] || (relative2 && instruction[3] ? location[key] || "" : "");
         if (instruction[4]) url[key] = url[key].toLowerCase();
       }
       if (parser) url.query = parser(url.query);
-      if (relative && location.slashes && url.pathname.charAt(0) !== "/" && (url.pathname !== "" || location.pathname !== "")) {
-        url.pathname = resolve2(url.pathname, location.pathname);
+      if (relative2 && location.slashes && url.pathname.charAt(0) !== "/" && (url.pathname !== "" || location.pathname !== "")) {
+        url.pathname = resolve3(url.pathname, location.pathname);
       }
       if (url.pathname.charAt(0) !== "/" && isSpecial(url.protocol)) {
         url.pathname = "/" + url.pathname;
@@ -5793,8 +5793,8 @@ var require_graceful_fs = __commonJS({
       fs3.createReadStream = createReadStream3;
       fs3.createWriteStream = createWriteStream;
       var fs$readFile = fs3.readFile;
-      fs3.readFile = readFile4;
-      function readFile4(path2, options, cb) {
+      fs3.readFile = readFile6;
+      function readFile6(path2, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
         return go$readFile(path2, options, cb);
@@ -5865,9 +5865,9 @@ var require_graceful_fs = __commonJS({
         }
       }
       var fs$readdir = fs3.readdir;
-      fs3.readdir = readdir;
+      fs3.readdir = readdir2;
       var noReaddirOptionVersions = /^v[0-5]\./;
-      function readdir(path2, options, cb) {
+      function readdir2(path2, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
         var go$readdir = noReaddirOptionVersions.test(process.version) ? function go$readdir2(path3, options2, cb2, startTime) {
@@ -6198,11 +6198,11 @@ var require_retry_operation = __commonJS({
       for (var i = 0; i < this._errors.length; i++) {
         var error = this._errors[i];
         var message = error.message;
-        var count = (counts[message] || 0) + 1;
-        counts[message] = count;
-        if (count >= mainErrorCount) {
+        var count2 = (counts[message] || 0) + 1;
+        counts[message] = count2;
+        if (count2 >= mainErrorCount) {
           mainError = error;
-          mainErrorCount = count;
+          mainErrorCount = count2;
         }
       }
       return mainError;
@@ -6511,11 +6511,11 @@ var require_mtime_precision = __commonJS({
     function probe(file, fs2, callback) {
       const cachedPrecision = fs2[cacheSymbol];
       if (cachedPrecision) {
-        return fs2.stat(file, (err, stat4) => {
+        return fs2.stat(file, (err, stat6) => {
           if (err) {
             return callback(err);
           }
-          callback(null, stat4.mtime, cachedPrecision);
+          callback(null, stat6.mtime, cachedPrecision);
         });
       }
       const mtime = new Date(Math.ceil(Date.now() / 1e3) * 1e3 + 5);
@@ -6523,13 +6523,13 @@ var require_mtime_precision = __commonJS({
         if (err) {
           return callback(err);
         }
-        fs2.stat(file, (err2, stat4) => {
+        fs2.stat(file, (err2, stat6) => {
           if (err2) {
             return callback(err2);
           }
-          const precision = stat4.mtime.getTime() % 1e3 === 0 ? "s" : "ms";
+          const precision = stat6.mtime.getTime() % 1e3 === 0 ? "s" : "ms";
           Object.defineProperty(fs2, cacheSymbol, { value: precision });
-          callback(null, stat4.mtime, precision);
+          callback(null, stat6.mtime, precision);
         });
       });
     }
@@ -6583,14 +6583,14 @@ var require_lockfile = __commonJS({
         if (options.stale <= 0) {
           return callback(Object.assign(new Error("Lock file is already being held"), { code: "ELOCKED", file }));
         }
-        options.fs.stat(lockfilePath, (err2, stat4) => {
+        options.fs.stat(lockfilePath, (err2, stat6) => {
           if (err2) {
             if (err2.code === "ENOENT") {
               return acquireLock(file, { ...options, stale: 0 }, callback);
             }
             return callback(err2);
           }
-          if (!isLockStale(stat4, options)) {
+          if (!isLockStale(stat6, options)) {
             return callback(Object.assign(new Error("Lock file is already being held"), { code: "ELOCKED", file }));
           }
           removeLock(file, options, (err3) => {
@@ -6602,8 +6602,8 @@ var require_lockfile = __commonJS({
         });
       });
     }
-    function isLockStale(stat4, options) {
-      return stat4.mtime.getTime() < Date.now() - options.stale;
+    function isLockStale(stat6, options) {
+      return stat6.mtime.getTime() < Date.now() - options.stale;
     }
     function removeLock(file, options, callback) {
       options.fs.rmdir(getLockFile(file, options), (err) => {
@@ -6621,7 +6621,7 @@ var require_lockfile = __commonJS({
       lock3.updateDelay = lock3.updateDelay || options.update;
       lock3.updateTimeout = setTimeout(() => {
         lock3.updateTimeout = null;
-        options.fs.stat(lock3.lockfilePath, (err, stat4) => {
+        options.fs.stat(lock3.lockfilePath, (err, stat6) => {
           const isOverThreshold = lock3.lastUpdate + options.stale < Date.now();
           if (err) {
             if (err.code === "ENOENT" || isOverThreshold) {
@@ -6630,7 +6630,7 @@ var require_lockfile = __commonJS({
             lock3.updateDelay = 1e3;
             return updateLock(file, options);
           }
-          const isMtimeOurs = lock3.mtime.getTime() === stat4.mtime.getTime();
+          const isMtimeOurs = lock3.mtime.getTime() === stat6.mtime.getTime();
           if (!isMtimeOurs) {
             return setLockAsCompromised(
               file,
@@ -6755,11 +6755,11 @@ var require_lockfile = __commonJS({
         if (err) {
           return callback(err);
         }
-        options.fs.stat(getLockFile(file2, options), (err2, stat4) => {
+        options.fs.stat(getLockFile(file2, options), (err2, stat6) => {
           if (err2) {
             return err2.code === "ENOENT" ? callback(null, false) : callback(err2);
           }
-          return callback(null, !isLockStale(stat4, options));
+          return callback(null, !isLockStale(stat6, options));
         });
       });
     }
@@ -6805,12 +6805,12 @@ var require_adapter = __commonJS({
       return newFs;
     }
     function toPromise(method) {
-      return (...args) => new Promise((resolve2, reject) => {
+      return (...args) => new Promise((resolve3, reject) => {
         args.push((err, result) => {
           if (err) {
             reject(err);
           } else {
-            resolve2(result);
+            resolve3(result);
           }
         });
         method(...args);
@@ -6909,6 +6909,7 @@ import { homedir } from "os";
 import { dirname, join } from "path";
 var CREDENTIALS_STORE_VERSION = 2;
 var MEMBER_PROFILE_PREFIX = "member:";
+var AGENT_PROFILE_PREFIX = "agent:";
 var FALLBACK_PROFILE_KEY = "default";
 function configDir() {
   return process.env.ZANFIA_CONFIG_DIR || join(homedir(), ".config", "zanfia");
@@ -6947,6 +6948,9 @@ function profileKeyFor(credentials) {
   const claims = decodeTokenClaims(credentials.apiKey);
   const kind = credentials.kind ?? claims.kind;
   const base = credentials.workspaceId ?? claims.workspaceId ?? FALLBACK_PROFILE_KEY;
+  if (kind === "agent") {
+    return `${AGENT_PROFILE_PREFIX}${claims.agentId ?? FALLBACK_PROFILE_KEY}@${base}`;
+  }
   return kind === "member" ? `${MEMBER_PROFILE_PREFIX}${base}` : base;
 }
 function parseCredentialsStore(raw) {
@@ -7047,6 +7051,18 @@ function resolveApiKey(explicit) {
   const stored = readCredentials();
   return stored?.apiKey ?? null;
 }
+var MEMBER_WRITE_SCOPE = "communities:write";
+var FULL_MEMBER_SCOPES = ["communities:read", "communities:write"];
+function memberKeyScopes(claims) {
+  return claims.scopes ?? [...FULL_MEMBER_SCOPES];
+}
+function isReadOnlyMemberKey(claims) {
+  return !memberKeyScopes(claims).includes(MEMBER_WRITE_SCOPE);
+}
+function memberScopeLabel(claims) {
+  const scopes = memberKeyScopes(claims).join(", ");
+  return isReadOnlyMemberKey(claims) ? `${scopes} (read-only)` : scopes;
+}
 function decodeTokenClaims(token) {
   if (!token) return { kind: "workspace" };
   const parts = token.split(".");
@@ -7054,15 +7070,21 @@ function decodeTokenClaims(token) {
   try {
     const p = JSON.parse(Buffer.from(parts[1], "base64url").toString("utf8"));
     return {
-      kind: p.kind === "member" ? "member" : "workspace",
+      kind: tokenKindOf(p.kind),
       workspaceId: typeof p.wsp === "string" ? p.wsp : void 0,
+      agentId: typeof p.agt === "string" ? p.agt : void 0,
       subject: typeof p.sub === "string" ? p.sub : void 0,
-      expiresAt: typeof p.exp === "number" ? new Date(p.exp * 1e3).toISOString() : void 0
+      expiresAt: typeof p.exp === "number" ? new Date(p.exp * 1e3).toISOString() : void 0,
+      scopes: typeof p.scope === "string" ? p.scope.split(" ").filter(Boolean) : void 0
     };
   } catch {
     return { kind: "workspace" };
   }
 }
+function tokenKindOf(claim) {
+  if (claim === "member" || claim === "agent") return claim;
+  return "workspace";
+}
 function decodeTokenKind(token) {
   return decodeTokenClaims(token).kind;
 }
@@ -8338,6 +8360,9 @@ function createMockClient() {
     async activatePageAutomations() {
       return { delivery: null, followUps: [] };
     },
+    async startPageFamilyStep() {
+      throw new ApiError(501, "page family steps are not available in mock mode");
+    },
     async listSocialAccounts() {
       return { count: 0, accounts: [] };
     },
@@ -8361,6 +8386,42 @@ function createMockClient() {
     async publishSocialPost(id) {
       return { postId: id, status: "published", results: [] };
     },
+    async updateSocialPost(id) {
+      throw new ApiError(404, `Social post ${id} not found`);
+    },
+    async unscheduleSocialPost(id) {
+      throw new ApiError(404, `Social post ${id} not found`);
+    },
+    async deleteSocialPost(id) {
+      return { postId: id, deleted: true, previousStatus: "draft" };
+    },
+    async getYouTubeChannel() {
+      throw new ApiError(404, "No YouTube account is connected to this workspace (mock mode)");
+    },
+    async getYouTubeChannelAnalytics() {
+      throw new ApiError(404, "No YouTube account is connected to this workspace (mock mode)");
+    },
+    async listYouTubeVideos() {
+      return { videos: [], nextPageToken: null };
+    },
+    async getYouTubeVideo(videoId) {
+      throw new ApiError(404, `Video ${videoId} is not a video of the connected channel (mock)`);
+    },
+    async getYouTubeVideoTranscript(videoId) {
+      throw new ApiError(404, `Video ${videoId} is not a video of the connected channel (mock)`);
+    },
+    async getInstagramInsights() {
+      throw new ApiError(404, "No Instagram account is connected to this workspace (mock mode)");
+    },
+    async listInstagramMedia() {
+      return { items: [], nextCursor: null };
+    },
+    async listThreadsPosts() {
+      return { items: [] };
+    },
+    async getLatestSocialSnapshot() {
+      return { snapshot: null };
+    },
     async uploadMedia(input) {
       return {
         mediaId: "media_mock",
@@ -8629,6 +8690,12 @@ function createMockClient() {
     async reorderDownloadFiles() {
       throw new ApiError(501, "downloads content is not available in mock mode");
     },
+    async getProductFileSet() {
+      throw new ApiError(501, "product files are not available in mock mode");
+    },
+    async changeProductFileSet() {
+      throw new ApiError(501, "product files are not available in mock mode");
+    },
     async listNewsletterIssues() {
       throw new ApiError(501, "newsletter content is not available in mock mode");
     },
@@ -8782,6 +8849,9 @@ function createMockClient() {
     async deleteCommunityEvent() {
       throw new ApiError(501, "community events are not available in mock mode");
     },
+    async listCommunityEventAttendees() {
+      throw new ApiError(501, "community events are not available in mock mode");
+    },
     async getCommunityModerationQueue() {
       return { pending: [], resolved: [] };
     },
@@ -8852,7 +8922,7 @@ function createMockClient() {
       return { rooms: [] };
     },
     async getLiveRoomAttendance() {
-      throw new ApiError(501, "live rooms are not available in mock mode");
+      throw new ApiError(501, "webinars are not available in mock mode");
     },
     async call(method, pathTemplate) {
       throw new ApiError(501, `${method} ${pathTemplate} is not available in mock mode`);
@@ -8890,6 +8960,9 @@ function createMockClient() {
     async getMetaAdDirectory() {
       throw new ApiError(501, "Meta Ads are not available in mock mode");
     },
+    async listMetaAdConnections() {
+      throw new ApiError(501, "Meta Ads are not available in mock mode");
+    },
     async listMetaCampaigns() {
       throw new ApiError(501, "Meta Ads are not available in mock mode");
     },
@@ -9091,6 +9164,15 @@ function createHttpClient(config) {
         )
       );
     }
+    if (tokenKind === "agent") {
+      return Promise.reject(
+        new ApiError(
+          403,
+          "This command uses the Workspace API, which a community agent key can\u2019t access.",
+          "An agent key reads the agent\u2019s communities and writes as the agent: use `zanfia communities \u2026`, or `zanfia login` for the workspace."
+        )
+      );
+    }
     return requestFrom(config.apiUrl, method, path2, body);
   };
   const communityRequest = (method, path2, body) => {
@@ -9610,7 +9692,7 @@ function createHttpClient(config) {
     deleteMediaFolder: (name) => request("DELETE", `/media-folders/${encodeURIComponent(name)}`),
     initiateVideoUpload: (input) => request("POST", "/media/videos/initiate-upload", input),
     updatePage: (id, input) => request("PATCH", `/pages/${encodeURIComponent(id)}`, input),
-    publishPage: (id, publish) => request("POST", `/pages/${encodeURIComponent(id)}/publish`, { publish }),
+    publishPage: (id, publish, options) => request("POST", `/pages/${encodeURIComponent(id)}/publish`, { publish, ...options }),
     deletePage: (id) => request("DELETE", `/pages/${encodeURIComponent(id)}`),
     setMainPage: (pageId) => request("PUT", "/pages/main", { pageId }),
     generatePage: (input) => request("POST", "/pages/generate", input),
@@ -9622,6 +9704,7 @@ function createHttpClient(config) {
       `/pages/${encodeURIComponent(id)}/revisions/${encodeURIComponent(revisionId)}/restore`
     ),
     activatePageAutomations: (id) => request("POST", `/pages/${encodeURIComponent(id)}/activate-automations`),
+    startPageFamilyStep: (id, input) => request("POST", `/pages/${encodeURIComponent(id)}/family-step`, input),
     listSocialAccounts: () => request("GET", "/social/accounts"),
     listSocialPosts: (options) => {
       const params = new URLSearchParams();
@@ -9634,6 +9717,30 @@ function createHttpClient(config) {
     createSocialPost: (input) => request("POST", "/social/posts", input),
     scheduleSocialPost: (id, scheduledAt) => request("POST", `/social/posts/${encodeURIComponent(id)}/schedule`, { scheduledAt }),
     publishSocialPost: (id) => request("POST", `/social/posts/${encodeURIComponent(id)}/publish`),
+    updateSocialPost: (id, input) => request("PATCH", `/social/posts/${encodeURIComponent(id)}`, input),
+    unscheduleSocialPost: (id) => request("POST", `/social/posts/${encodeURIComponent(id)}/unschedule`),
+    deleteSocialPost: (id) => request("DELETE", `/social/posts/${encodeURIComponent(id)}`),
+    getYouTubeChannel: () => request("GET", "/social/youtube/channel"),
+    getYouTubeChannelAnalytics: () => request("GET", "/social/youtube/analytics"),
+    listYouTubeVideos: (options) => {
+      const params = new URLSearchParams();
+      if (options?.maxResults) params.set("maxResults", String(options.maxResults));
+      if (options?.pageToken) params.set("pageToken", options.pageToken);
+      const query = params.toString();
+      return request("GET", query ? `/social/youtube/videos?${query}` : "/social/youtube/videos");
+    },
+    getYouTubeVideo: (videoId) => request("GET", `/social/youtube/videos/${encodeURIComponent(videoId)}`),
+    getYouTubeVideoTranscript: (videoId) => request("GET", `/social/youtube/videos/${encodeURIComponent(videoId)}/transcript`),
+    getInstagramInsights: () => request("GET", "/social/instagram/insights"),
+    listInstagramMedia: (options) => {
+      const params = new URLSearchParams();
+      if (options?.limit) params.set("limit", String(options.limit));
+      if (options?.after) params.set("after", options.after);
+      const query = params.toString();
+      return request("GET", query ? `/social/instagram/media?${query}` : "/social/instagram/media");
+    },
+    listThreadsPosts: () => request("GET", "/social/threads/posts"),
+    getLatestSocialSnapshot: () => request("GET", "/social/snapshots/latest"),
     // Workspace team lives on the Workspace API (api-v1).
     listTeamMembers: () => request("GET", "/team/members"),
     listTeamInvitations: () => request("GET", "/team/invitations"),
@@ -9782,6 +9889,8 @@ function createHttpClient(config) {
     getDownloads: (productId) => request("GET", `/products/${encodeURIComponent(productId)}/downloads`),
     updateDownloadsContent: (productId, editorContent) => request("PATCH", `/products/${encodeURIComponent(productId)}/downloads`, { editorContent }),
     addDownloadFiles: (productId, files) => request("POST", `/products/${encodeURIComponent(productId)}/downloads/files`, { files }),
+    getProductFileSet: (productId) => request("GET", `/products/${encodeURIComponent(productId)}/file-set`),
+    changeProductFileSet: (productId, input) => request("POST", `/products/${encodeURIComponent(productId)}/file-set`, input),
     removeDownloadFile: (productId, uid) => request(
       "DELETE",
       `/products/${encodeURIComponent(productId)}/downloads/files/${encodeURIComponent(uid)}`
@@ -9976,6 +10085,10 @@ function createHttpClient(config) {
       "DELETE",
       `/v1/communities/${encodeURIComponent(communityId)}/events/${encodeURIComponent(eventId)}`
     ),
+    listCommunityEventAttendees: (communityId, eventId) => communityRequest(
+      "GET",
+      `/v1/communities/${encodeURIComponent(communityId)}/events/${encodeURIComponent(eventId)}/attendees`
+    ),
     getCommunityModerationQueue: (communityId) => communityRequest(
       "GET",
       `/v1/communities/${encodeURIComponent(communityId)}/moderation/reports`
@@ -10056,6 +10169,7 @@ function createHttpClient(config) {
     // Meta Ads live on the Workspace API (api-v1) under /meta-ads.
     getMetaAdsPerformance: (query) => request("GET", `/meta-ads/performance${toQuery(query)}`),
     getMetaAdDirectory: () => request("GET", "/meta-ads/directory"),
+    listMetaAdConnections: () => request("GET", "/meta-ads/connections"),
     listMetaCampaigns: (scope, query) => request("GET", `${metaAdAccountPath(scope)}/campaigns${toQuery(query)}`),
     updateMetaCampaign: (scope, campaignId, input) => request(
       "PATCH",
@@ -10214,6 +10328,22 @@ function parseJsonObjectFileOrInline(flag) {
     return parsed;
   };
 }
+function parseJsonArrayFileOrInline(flag) {
+  return (value) => {
+    const trimmed = value.trim();
+    const raw = trimmed.startsWith("[") ? trimmed : readFileSync2(value, "utf8");
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch (error) {
+      throw new Error(`Invalid JSON for ${flag}: ${error.message}`);
+    }
+    if (!Array.isArray(parsed)) {
+      throw new Error(`${flag} must be a JSON array (inline or a .json file path).`);
+    }
+    return parsed;
+  };
+}
 function requireConfirm(confirm, what) {
   if (!confirm) {
     throw new Error(`Refusing to ${what} without --confirm. Re-run with --confirm to proceed.`);
@@ -10595,17 +10725,96 @@ function registerCertificatesCommands(program2) {
     );
     emit(flags, result ?? {}, () => printJson(result ?? {}));
   });
+  const certificatesSettings = certificates.command("settings");
+  certificatesSettings.description(
+    "A course's or event's certificate settings (auto-issue, layout, numbering, date, claim)"
+  );
+  certificatesSettings.command("get").summary("A product's certificate settings").description(
+    'Certificate settings of one course or event product \u2014 the same fields as the dashboard\'s product Settings \u2192 Certificate section: `certificateEnabled` (automatic certificate on course completion; courses only, always false for an event), `certificateTemplateId` (null = the workspace default template), `certificateCustomText` (the extra line printed by templates with the "custom text" element), `certificateValidityMonths` (null = never expires), numbering (`certificateCode`), the printed date (`certificateDateMode` + `certificateTrainingDate`) and claim mode (`certificateClaimEnabled` + `certificateClaimAvailableFrom`). 404 for an unknown product, 400 for a product type without certificates.'
+  ).argument("<productId>", "Course or event product id (other product types answer 400).").action(async (productId, _options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {
+      productId
+    };
+    const result = await client.call(
+      "GET",
+      "/products/:productId/certificate-settings",
+      params,
+      void 0,
+      void 0
+    );
+    emit(flags, result ?? {}, () => printJson(result ?? {}));
+  });
+  certificatesSettings.command("update").summary("Update a product's certificate settings").description(
+    "Partial update of one course or event product's certificate settings \u2014 what the dashboard's product Settings \u2192 Certificate section saves: automatic certificate on course completion (`certificateEnabled`, courses only), layout (`certificateTemplateId`), the extra line (`certificateCustomText`, max 300 characters / 3 lines), validity, numbering (`certificateCode`), the printed date (`certificateDateMode` + `certificateTrainingDate`) and claim mode (`certificateClaimEnabled` + `certificateClaimAvailableFrom`). Absent fields stay unchanged, null clears; an empty body is a 400. The whole patch is checked before anything is saved (409 taken code, 404 unknown product or template, 400 invalid value). Only certificates issued from now on use the new settings. Answers the settings as saved."
+  ).argument("<productId>", "Course or event product id (other product types answer 400).").option(
+    "--auto-issue",
+    "Automatic certificate on course completion. Course products only (400 on an event)."
+  ).option("--no-auto-issue", "Send `certificateEnabled: false` explicitly.").option(
+    "--template <value>",
+    "Certificate template id from list-certificate-templates (404 when not in this workspace); null or blank = back to the workspace default."
+  ).option(
+    "--custom-text <value>",
+    'Extra line printed by templates with the "custom text" element, e.g. training hours. Max 300 characters and 3 lines (line breaks kept); null or blank clears it.'
+  ).option(
+    "--validity-months <n>",
+    "Validity in months from issuance; null = never expires.",
+    parseNumberOption("--validity-months", NumberFormat.Integer)
+  ).option(
+    "--code <value>",
+    "Exactly 3 digits (`017`), unique in the workspace (409 when another product has it); numbers certificates `{seq}/{code}/{schoolYear}`. null or blank = unnumbered."
+  ).addOption(
+    new Option(
+      "--date-mode <completion|training_date|issue_date>",
+      "Printed date: `completion` (course progress, else the issue date), `training_date` (needs certificateTrainingDate) or `issue_date`. null = completion."
+    ).choices(["completion", "training_date", "issue_date"])
+  ).option(
+    "--training-date <value>",
+    "`YYYY-MM-DD`, printed in the `training_date` mode; null or blank clears."
+  ).option("--claim", "Participants claim the certificate themselves in the portal (claim mode).").option("--no-claim", "Send `certificateClaimEnabled: false` explicitly.").option(
+    "--claim-from <value>",
+    "First claim day `YYYY-MM-DD`; null or blank = the day after the training date (else at once)."
+  ).action(
+    async (productId, options, command) => {
+      const flags = getGlobalFlags(command);
+      const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+      const params = {
+        productId
+      };
+      const payload = {
+        certificateEnabled: options.autoIssue,
+        certificateTemplateId: options.template,
+        certificateCustomText: options.customText,
+        certificateValidityMonths: options.validityMonths,
+        certificateCode: options.code,
+        certificateDateMode: options.dateMode,
+        certificateTrainingDate: options.trainingDate,
+        certificateClaimEnabled: options.claim,
+        certificateClaimAvailableFrom: options.claimFrom
+      };
+      const result = await client.call(
+        "PATCH",
+        "/products/:productId/certificate-settings",
+        params,
+        void 0,
+        payload
+      );
+      emit(flags, result ?? {}, () => printJson(result ?? {}));
+    }
+  );
 }
 
 // src/commands/_generated/blog.ts
 var listBlogPostsColumns = ["id", "slug", "title", "status", "publishedAt", "updatedAt"];
+var listBlogCategoriesColumns = ["id", "name", "slug", "postCount"];
 function registerBlogCommands(program2) {
   const blog = program2.command("blog");
   blog.description(
     "The workspace blog (Your site \u2192 Blog): Markdown posts served at /blog on the store host; drafts are visible to the team only"
   );
   blog.command("list").summary("List blog posts").description(
-    "Every post of the workspace blog (drafts and published), newest change first: id, slug (`/blog/{slug}` on the store host), title, excerpt, cover, tags, status and dates. No body - use get-blog-post for the Markdown. The id source for every other blog tool."
+    "Every post of the workspace blog (drafts and published), newest change first: id, slug (`/blog/{slug}` on the store host), title, excerpt, cover, tags, status and dates. No body: use get-blog-post for the Markdown. The id source for every other blog tool."
   ).action(async (_options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -10615,14 +10824,18 @@ function registerBlogCommands(program2) {
     emit(flags, result ?? {}, () => printTable(rows, listBlogPostsColumns));
   });
   blog.command("create").summary("Create a blog post").description(
-    "Creates a blog post as a DRAFT (or published with `publish: true` when it has a body). The body is Markdown. A slug the caller sets must be free (409) and not `feed`; a slug derived from the title takes the next free numeric suffix. Returns the full post. Requires the blog early access on the workspace (403 otherwise)."
+    "Creates a blog post as a DRAFT (or published with `publish: true` when it has a body). The body is Markdown. A slug the caller sets must be free (409) and not `feed`; a slug derived from the title takes the next free numeric suffix. `categoryIds` puts it in up to 3 blog categories (list-blog-categories). To go live later, create the draft and call schedule-blog-post. Returns the full post."
   ).requiredOption("--title <value>", "Post title (max 200 characters).").option(
     "--slug <value>",
     "Derived from the title when omitted; a taken derived slug gets a numeric suffix."
   ).option("--content <value>", "The body as Markdown (headings, lists, links, images by URL).").option(
     "--excerpt <value>",
     "Short plain-text summary (list, RSS, meta description); derived from the body on publish when empty."
-  ).option("--cover <value>", "Cover image URL (Media Library).").option("--tags <a,b,...>", "Lowercase labels, at most 10.", parseCommaList("--tags")).option("--seo <json|file>", "seo", parseJsonObjectFileOrInline("--seo")).option("--publish", "Publish right away (needs a non-empty body); default false = draft.").option("--no-publish", "Send `publish: false` explicitly.").option(
+  ).option("--cover <value>", "Cover image URL (Media Library).").option("--tags <a,b,...>", "Lowercase labels, at most 10.", parseCommaList("--tags")).option(
+    "--category-ids <a,b,...>",
+    "Ids of the blog categories (`bcat_\u2026` from list-blog-categories) the post sits in, at most 3; replaces the whole list, [] = none. Tags stay a separate label.",
+    parseCommaList("--category-ids")
+  ).option("--seo <json|file>", "seo", parseJsonObjectFileOrInline("--seo")).option("--publish", "Publish right away (needs a non-empty body); default false = draft.").option("--no-publish", "Send `publish: false` explicitly.").option(
     "--published-at <value>",
     "The post's date, ISO 8601 date (2025-10-16) or date-time, not in the future - e.g. the original date of an imported post. Omitted = the moment of the first publication."
   ).action(async (options, command) => {
@@ -10636,6 +10849,7 @@ function registerBlogCommands(program2) {
       excerpt: options.excerpt,
       coverImageUrl: options.cover,
       tags: options.tags,
+      categoryIds: options.categoryIds,
       seo: options.seo,
       publish: options.publish,
       publishedAt: options.publishedAt
@@ -10655,7 +10869,7 @@ function registerBlogCommands(program2) {
     emit(flags, result ?? {}, () => printJson(result ?? {}));
   });
   blog.command("update").summary("Update a blog post").description(
-    "Partial update of a blog post: title, slug (must be free, 409), Markdown body, excerpt, cover (null removes it), tags, SEO (whole section replaced). A published post keeps serving the new content at once. Returns the full post."
+    "Partial update of a blog post: title, slug (must be free, 409), Markdown body, excerpt, cover (null removes it), tags, categories (`categoryIds`, the whole list, at most 3), SEO (whole section replaced). A published post keeps serving the new content at once; a scheduled one stays scheduled. Returns the full post."
   ).argument("<id>", "Blog post id (`post_\u2026`) from list-blog-posts.").option("--title <value>", "title").option(
     "--slug <value>",
     "Public path segment (`/blog/{slug}`): lowercase letters, digits and hyphens."
@@ -10663,6 +10877,10 @@ function registerBlogCommands(program2) {
     "--excerpt <value>",
     "Short plain-text summary (list, RSS, meta description); derived from the body on publish when empty."
   ).option("--cover <value>", "Cover image URL; null removes the cover.").option("--tags <a,b,...>", "Lowercase labels, at most 10.", parseCommaList("--tags")).option(
+    "--category-ids <a,b,...>",
+    "Ids of the blog categories (`bcat_\u2026` from list-blog-categories) the post sits in, at most 3; replaces the whole list, [] = none. Tags stay a separate label.",
+    parseCommaList("--category-ids")
+  ).option(
     "--seo <json|file>",
     "Replaces the whole SEO section.",
     parseJsonObjectFileOrInline("--seo")
@@ -10682,6 +10900,7 @@ function registerBlogCommands(program2) {
       excerpt: options.excerpt,
       coverImageUrl: options.cover,
       tags: options.tags,
+      categoryIds: options.categoryIds,
       seo: options.seo,
       publishedAt: options.publishedAt
     };
@@ -10689,8 +10908,8 @@ function registerBlogCommands(program2) {
     emit(flags, result ?? {}, () => printJson(result ?? {}));
   });
   blog.command("publish").summary("Publish or unpublish a blog post").description(
-    "Publishes a post at `/blog/{slug}` (needs a non-empty body, 400 otherwise; the excerpt is derived from the body when empty) or takes it back to draft. The first publication date is the post's date and survives unpublish / republish. Reversible. Returns the full post."
-  ).argument("<id>", "Blog post id (`post_\u2026`) from list-blog-posts.").option("--publish", "true = publish, false = back to draft.").action(async (id, options, command) => {
+    "Publishes a post at `/blog/{slug}` now (needs a non-empty body, 400 otherwise; the excerpt is derived from the body when empty) or takes it back to draft. A scheduled post is published at once and its schedule dropped; back to draft drops it too. The first publication date is the post's date and survives unpublish / republish. Reversible. Without `publish` (an empty request body) the post is published. Returns the full post."
+  ).argument("<id>", "Blog post id (`post_\u2026`) from list-blog-posts.").option("--publish", "true = publish (the default when absent), false = back to draft.").option("--no-publish", "Send `publish: false` explicitly.").action(async (id, options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const params = {
@@ -10709,7 +10928,7 @@ function registerBlogCommands(program2) {
     emit(flags, result ?? {}, () => printJson(result ?? {}));
   });
   blog.command("delete").summary("Delete a blog post").description(
-    "Deletes a blog post for good; a published one disappears from `/blog` at once. No undo - prefer unpublishing."
+    "Deletes a blog post for good; a published one disappears from `/blog` at once. No undo; prefer unpublishing."
   ).argument("<id>", "Blog post id (`post_\u2026`) from list-blog-posts.").option("--confirm", "required \u2014 acknowledge that you want to deletes the post for good").action(async (id, options, command) => {
     const flags = getGlobalFlags(command);
     requireConfirm(options.confirm, "deletes the post for good");
@@ -10726,6 +10945,118 @@ function registerBlogCommands(program2) {
     );
     emit(flags, result ?? {}, () => printJson(result ?? {}));
   });
+  blog.command("schedule").summary("Schedule a blog post").description(
+    "Schedules a DRAFT (or reschedules a scheduled post) to be published at `scheduledAt`: status `scheduled`, not public anywhere (list, feed, sitemap, its URL) until then, then published exactly like publish-blog-post. Needs a non-empty body (400); a published post answers 409 (unpublish it first). `scheduledAt: null` unschedules (back to draft); publishing it now is publish-blog-post. Returns the full post with `scheduledAt`."
+  ).argument("<id>", "Blog post id (`post_\u2026`) from list-blog-posts.").requiredOption(
+    "--at <value>",
+    `When the post goes live: an ISO 8601 date-time WITH the offset of the creator's time zone, Europe/Warsaw = +01:00 in winter (CET), +02:00 in summer (CEST), e.g. "poniedzia\u0142ek 8:00" in late October = 2026-10-26T08:00:00+01:00. At least a minute and at most a year ahead. null = unschedule (back to draft).`
+  ).action(async (id, options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {
+      postId: id
+    };
+    const payload = {
+      scheduledAt: options.at
+    };
+    const result = await client.call(
+      "POST",
+      "/blog-posts/:postId/schedule",
+      params,
+      void 0,
+      payload
+    );
+    emit(flags, result ?? {}, () => printJson(result ?? {}));
+  });
+  const blogCategories = blog.command("categories");
+  blogCategories.description(
+    "Categories of the workspace blog: a post sits in up to 3, each has its own page"
+  );
+  blogCategories.command("list").summary("List blog categories").description(
+    "The categories of the workspace blog, by name: id, name, slug (public page `/blog/kategoria/{slug}`, `/blog/category/{slug}` on English sites), description, SEO and how many posts sit in each. The id source for `categoryIds` on posts."
+  ).action(async (_options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {};
+    const result = await client.call("GET", "/blog-categories", params, void 0, void 0);
+    const rows = tableRowsOf(result, "categories");
+    emit(flags, result ?? {}, () => printTable(rows, listBlogCategoriesColumns));
+  });
+  blogCategories.command("create").summary("Create a blog category").description(
+    "Adds a category to the blog (at most 50). A slug the caller sets must be free (409); one derived from the name takes the next free numeric suffix. The category page goes public once a published post sits in it. Returns the category."
+  ).argument("<name>", 'Category name (max 60 characters), e.g. "Poradniki".').option(
+    "--slug <value>",
+    "Derived from the name when omitted; a taken derived slug gets a numeric suffix."
+  ).option(
+    "--description <value>",
+    "Plain text shown under the category heading; the default meta description."
+  ).option("--seo <json|file>", "seo", parseJsonObjectFileOrInline("--seo")).action(async (name, options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {};
+    const payload = {
+      name,
+      slug: options.slug,
+      description: options.description,
+      seo: options.seo
+    };
+    const result = await client.call("POST", "/blog-categories", params, void 0, payload);
+    emit(flags, result ?? {}, () => printJson(result ?? {}));
+  });
+  blogCategories.command("update").summary("Update a blog category").description(
+    "Partial update of a category: name, slug (must be free, 409; a new slug moves the public category page and the old address stops working), description, SEO (whole section replaced). Its posts stay in it. Returns the category."
+  ).argument("<id>", "Blog category id (`bcat_\u2026`) from list-blog-categories.").option("--name <value>", "name").option(
+    "--slug <value>",
+    "Public path segment of the category page (`/blog/kategoria/{slug}`, `/blog/category/{slug}` on English sites): lowercase letters, digits and hyphens."
+  ).option(
+    "--description <value>",
+    "Plain text shown under the category heading; the default meta description."
+  ).option(
+    "--seo <json|file>",
+    "Replaces the whole SEO section.",
+    parseJsonObjectFileOrInline("--seo")
+  ).action(async (id, options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {
+      categoryId: id
+    };
+    const payload = {
+      name: options.name,
+      slug: options.slug,
+      description: options.description,
+      seo: options.seo
+    };
+    const result = await client.call(
+      "PATCH",
+      "/blog-categories/:categoryId",
+      params,
+      void 0,
+      payload
+    );
+    emit(flags, result ?? {}, () => printJson(result ?? {}));
+  });
+  blogCategories.command("delete").summary("Delete a blog category").description(
+    "Deletes a category for good and takes it off every post in it; the posts stay as they are and the category page stops working. No undo."
+  ).argument("<id>", "Blog category id (`bcat_\u2026`) from list-blog-categories.").option(
+    "--confirm",
+    "required \u2014 acknowledge that you want to deletes the category for good (its posts stay)"
+  ).action(async (id, options, command) => {
+    const flags = getGlobalFlags(command);
+    requireConfirm(options.confirm, "deletes the category for good (its posts stay)");
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {
+      categoryId: id
+    };
+    const result = await client.call(
+      "DELETE",
+      "/blog-categories/:categoryId",
+      params,
+      void 0,
+      void 0
+    );
+    emit(flags, result ?? {}, () => printJson(result ?? {}));
+  });
 }
 
 // src/commands/_generated/site-redirects.ts
@@ -10813,10 +11144,10 @@ var listPopupsColumns = ["id", "name", "status", "priority", "updatedAt"];
 function registerPopupsCommands(program2) {
   const popups = program2.command("popups");
   popups.description(
-    "Pop-ups on the workspace site (Your site \u2192 Pop-ups): a signup form shown on entry or after scrolling, after the cookie decision, never again after a signup"
+    "Pop-ups on the workspace site (Your site \u2192 Pop-ups): a signup form, an offer or a link shown on entry, after scrolling or on exit intent, after the cookie decision, never again after a conversion"
   );
   popups.command("list").summary("List pop-ups").description(
-    "Every pop-up of the workspace site (drafts, active, paused) in priority order: copy, form content, triggers per device, targeting, frequency and schedule. The id source for every other pop-up tool."
+    "Every pop-up of the workspace site (drafts, active, paused) in priority order: copy, content (form, offer or link), layout, triggers per device, targeting, frequency and schedule. The id source for every other pop-up tool."
   ).action(async (_options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -10826,7 +11157,7 @@ function registerPopupsCommands(program2) {
     emit(flags, result ?? {}, () => printTable(rows, listPopupsColumns));
   });
   popups.command("create").summary("Create a pop-up").description(
-    "Creates a pop-up as a DRAFT holding a signup form. Without `content.formId` a new standalone signup form named after the pop-up is created (visible in Forms). Defaults: desktop after 10 s on the page, phones after 40 % scroll as a bottom sheet, again after 7 days, all hosted pages except thank-you / download / member pages, hidden for subscribers. Activate it with set-popup-status once it has a title and a button text. Requires the pop-ups feature on the plan (403 otherwise)."
+    "Creates a pop-up as a DRAFT. Content: a signup form (default; without `content.formId` a new standalone signup form named after the pop-up is created, visible in Forms), an offer (a checkout of a product; the button opens it) or a link button. Defaults: a centred card (`design.layout: slide-in` = a corner card), desktop after 10 s on the page (or exit intent), phones after 40 % scroll as a bottom sheet, again after 7 days, all hosted pages except thank-you / download / member pages (or the blog / the store), everyone (or new / returning visitors), hidden for subscribers. It is turned on with set-popup-status (in Zanfia\u2019s own chat agent, behind an approval card the creator confirms) once it has a title and a button text. Requires the pop-ups feature on the plan (403 otherwise)."
   ).requiredOption(
     "--name <value>",
     "Internal name (panel only); also the name of a provisioned form."
@@ -10845,7 +11176,7 @@ function registerPopupsCommands(program2) {
     parseJsonObjectFileOrInline("--copy")
   ).option(
     "--content <json|file>",
-    "What the pop-up holds: a signup form.",
+    "What the pop-up holds: a signup form, an offer (koszyk) or a link button.",
     parseJsonObjectFileOrInline("--content")
   ).option("--design <json|file>", "design", parseJsonObjectFileOrInline("--design")).option(
     "--trigger <json|file>",
@@ -10883,7 +11214,7 @@ function registerPopupsCommands(program2) {
     emit(flags, result ?? {}, () => printJson(result ?? {}));
   });
   popups.command("get").summary("Pop-up detail").description(
-    "One pop-up in full: status, copy, form content, triggers, targeting, frequency, schedule."
+    "One pop-up in full: status, copy, content (form, offer or link), design, triggers, targeting, frequency, schedule."
   ).argument("<id>", "Pop-up id (`popup_\u2026`) from list-popups.").action(async (id, _options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -10894,7 +11225,7 @@ function registerPopupsCommands(program2) {
     emit(flags, result ?? {}, () => printJson(result ?? {}));
   });
   popups.command("update").summary("Update a pop-up").description(
-    "Partial update of a pop-up: each section sent merges into the current one (copy, content, design, targeting, schedule field by field; a trigger rule, the page list and the frequency are replaced whole). An active pop-up must keep its title, button and form (400 popup-incomplete). Live sites pick changes up within a few minutes."
+    "Partial update of a pop-up: each section sent merges into the current one (copy, content, design, targeting, schedule field by field; a trigger rule, the page list and the frequency are replaced whole; another content kind replaces the content). An active pop-up must keep its title, button and its form, offer or link (400 popup-incomplete). Live sites pick changes up within a few minutes."
   ).argument("<id>", "Pop-up id (`popup_\u2026`) from list-popups.").option("--name <value>", "Internal name (panel only).").option(
     "--priority <n>",
     "Lower shows first when several pop-ups match a page; default = after the others.",
@@ -10910,7 +11241,7 @@ function registerPopupsCommands(program2) {
     parseJsonObjectFileOrInline("--copy")
   ).option(
     "--content <json|file>",
-    "What the pop-up holds: a signup form.",
+    "What the pop-up holds: a signup form, an offer (koszyk) or a link button.",
     parseJsonObjectFileOrInline("--content")
   ).option("--design <json|file>", "design", parseJsonObjectFileOrInline("--design")).option(
     "--trigger <json|file>",
@@ -10984,6 +11315,318 @@ function registerPopupsCommands(program2) {
     const result = await client.call("DELETE", "/popups/:popupId", params, void 0, void 0);
     emit(flags, result ?? {}, () => printJson(result ?? {}));
   });
+  popups.command("stats").summary("Pop-up stats").description(
+    "Views, closes, conversions and conversion % of one pop-up, day by day for the range (default the last 30 days), and split by device and page (`{surface}~{pageId}`) for the months the range touches. A conversion is a first signup through the form, or a click on the offer or link button."
+  ).argument("<id>", "Pop-up id (`popup_\u2026`) from list-popups.").option(
+    "--from <value>",
+    "First day `YYYY-MM-DD` (UTC, inclusive); default 29 days before `to`."
+  ).option(
+    "--to <value>",
+    "Last day `YYYY-MM-DD` (UTC, inclusive); default today. At most 366 days."
+  ).action(async (id, options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {
+      popupId: id
+    };
+    const payload = {
+      from: options.from,
+      to: options.to
+    };
+    const result = await client.call("GET", "/popups/:popupId/stats", params, payload, void 0);
+    emit(flags, result ?? {}, () => printJson(result ?? {}));
+  });
+}
+
+// src/commands/_generated/studio.ts
+var suggestStudioVideoClipsColumns = ["startSeconds", "endSeconds", "hook"];
+function registerStudioCommands(program2) {
+  const studio = program2.commands.find((command) => command.name() === "studio") ?? program2.command("studio");
+  if (!studio.description()) {
+    studio.description(
+      "Studio videos: suggest clips, write a reel storyboard, voice it, export and download"
+    );
+  }
+  const studioVideo = studio.command("video");
+  studioVideo.description(
+    "Studio videos: suggest clips, write a reel storyboard, voice it, export and download"
+  );
+  studioVideo.command("quote").summary("Quote what a Studio video costs").description(
+    "Before spending anything: the AI credits of each Studio video step (clip suggestion, storyboard, voice-over for a reel of `lengthSeconds`), priced as the panel prices them, and the plan's monthly video exports left (the render costs no credits but uses one). Calls no model. Read-only."
+  ).option(
+    "--length-seconds <n>",
+    "Reel length in seconds of voice: 15, 30 or 45. Default 30.",
+    parseNumberOption("--length-seconds", NumberFormat.Integer)
+  ).action(async (options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {};
+    const payload = {
+      lengthSeconds: options.lengthSeconds
+    };
+    const result = await client.call("GET", "/studio/videos/quote", params, payload, void 0);
+    emit(flags, result ?? {}, () => printJson(result ?? {}));
+  });
+  studioVideo.command("suggest").summary("Suggest reel clips from a video transcript").description(
+    "Reads the transcript of one library video and proposes short clips (hook, start / end seconds, why it works) for a MomentClip export. Spends AI credits (see get-studio-video-quote `suggestClipsCredits`; 402 ai-credits-exhausted when they are out). Stores nothing. The video must be transcribed first (400 clip-suggestion-transcript-unavailable)."
+  ).argument(
+    "<mediaId>",
+    "A transcribed video: a lesson, a LIVE recording or any library video (a media-library id from list-media)."
+  ).option(
+    "--language <value>",
+    "Language of the text, e.g. `pl` or `en`. Omitted: the transcript language, else `pl`."
+  ).action(async (mediaId, options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {};
+    const payload = {
+      mediaId,
+      language: options.language
+    };
+    const result = await client.call(
+      "POST",
+      "/studio/videos/clip-suggestions",
+      params,
+      void 0,
+      payload
+    );
+    const rows = tableRowsOf(result, "clips");
+    emit(flags, result ?? {}, () => printTable(rows, suggestStudioVideoClipsColumns));
+  });
+  studioVideo.command("storyboard").summary("Write a reel storyboard (ScriptReel)").description(
+    "\u201ENapisz scenariusz\u201D of \u201EWygeneruj rolk\u0119\u201D: 3-6 scenes (on-screen text + what the voice says) for a reel of `lengthSeconds`, about `topic` or grounded in a transcribed video. Spends AI credits (get-studio-video-quote `storyboardCredits`; 402 ai-credits-exhausted). Stores nothing: pass the scenes to generate-studio-video-voiceover and export-studio-video. 422 script-reel-storyboard-failed = the model answered unusably (free): try again."
+  ).option("--topic <value>", "What the reel is about; required unless `sourceMediaId`.").option(
+    "--source-media-id <value>",
+    "A transcribed library video (lesson, LIVE) whose transcript grounds the script."
+  ).option(
+    "--length-seconds <n>",
+    "Reel length in seconds of voice: 15, 30 or 45. Default 30.",
+    parseNumberOption("--length-seconds", NumberFormat.Integer)
+  ).option(
+    "--language <value>",
+    "Language of the text, e.g. `pl` or `en`. Omitted: the transcript language, else `pl`."
+  ).action(async (options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {};
+    const payload = {
+      topic: options.topic,
+      sourceMediaId: options.sourceMediaId,
+      lengthSeconds: options.lengthSeconds,
+      language: options.language
+    };
+    const result = await client.call(
+      "POST",
+      "/studio/videos/storyboards",
+      params,
+      void 0,
+      payload
+    );
+    emit(flags, result ?? {}, () => printJson(result ?? {}));
+  });
+  studioVideo.command("voiceover").summary("Generate the voice-over of a reel storyboard").description(
+    "\u201EWygeneruj g\u0142os\u201D for a storyboard: ONE voice reading every scene's voice text, stored as an Audio item in the media library. AI credits per second of the voice, charged only once it is stored (any failure is free); 402 ai-credits-exhausted before anything is made. Pass the answer's `mediaId` as `voiceoverMediaId` to export-studio-video with the SAME scenes (changed scenes = 409 script-reel-voice-mismatch)."
+  ).requiredOption(
+    "--scenes <json|file>",
+    "The storyboard scenes from write-studio-video-storyboard (edited or not), in order. The voice and the export must use the SAME scenes.",
+    parseJsonArrayFileOrInline("--scenes")
+  ).addOption(
+    new Option(
+      "--voice-id <asia|iwona|pawel|piotr>",
+      "Voice: asia, iwona (female), pawel, piotr (male). Default asia."
+    ).choices(["asia", "iwona", "pawel", "piotr"])
+  ).option(
+    "--language <value>",
+    "Language of the text, e.g. `pl` or `en`. Omitted: the transcript language, else `pl`."
+  ).option(
+    "--request-id <value>",
+    "Idempotency key (a uuid): a retry with the same one returns the same voice, charged once. Omitted = a new voice every call."
+  ).action(async (options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {};
+    const payload = {
+      scenes: options.scenes,
+      voiceId: options.voiceId,
+      language: options.language,
+      requestId: options.requestId
+    };
+    const result = await client.call(
+      "POST",
+      "/studio/videos/voiceovers",
+      params,
+      void 0,
+      payload
+    );
+    emit(flags, result ?? {}, () => printJson(result ?? {}));
+  });
+  studioVideo.command("export").summary("Export (render) a Studio video").description(
+    "Starts the render of a MomentClip, ScriptReel, Montage or CoursePromo video, the same render the panel runs; the MP4 lands in the media library. No AI credits, but it uses one of the plan's monthly video exports (429 promo-video-quota-exceeded when none are left; get-studio-video-quote `exports`). Answers a job id at once (202): poll get-studio-video-status. Publishes nothing."
+  ).addOption(
+    new Option(
+      "--template-id <MomentClip|ScriptReel|Montage|CoursePromo>",
+      "MomentClip = a captioned clip of a transcribed video (`moment`); ScriptReel = the storyboard reel (`scenes` + `voiceoverMediaId`); Montage = library pictures / videos (`montageScenes`); CoursePromo = a course promo (`productId`)."
+    ).choices(["MomentClip", "ScriptReel", "Montage", "CoursePromo"]).makeOptionMandatory()
+  ).option(
+    "--moment <json|file>",
+    "MomentClip: the segment, from suggest-studio-video-clips or chosen by hand.",
+    parseJsonObjectFileOrInline("--moment")
+  ).option(
+    "--scenes <json|file>",
+    "ScriptReel: the SAME scenes the voice was generated for.",
+    parseJsonArrayFileOrInline("--scenes")
+  ).option(
+    "--voiceover-media-id <value>",
+    "ScriptReel: `mediaId` from generate-studio-video-voiceover."
+  ).option(
+    "--montage-scenes <json|file>",
+    "Montage: 1-12 library images / videos in order.",
+    parseJsonArrayFileOrInline("--montage-scenes")
+  ).option("--product-id <value>", "CoursePromo: the course (`prod_\u2026` from list-products).").addOption(new Option("--locale <en|pl>", "locale").choices(["en", "pl"])).addOption(
+    new Option("--style <midnight|editorial|bold>", "style").choices(["midnight", "editorial", "bold"])
+  ).option(
+    "--music-track-id <value>",
+    "A music track id from the panel manifest; omitted = no music."
+  ).addOption(
+    new Option(
+      "--format <9:16|1:1|16:9>",
+      "Aspect ratio; default 9:16 (MomentClip / ScriptReel are always 9:16)."
+    ).choices(["9:16", "1:1", "16:9"])
+  ).option("--cta-label <value>", "ctaLabel").option("--include-cover-image", "includeCoverImage").option("--no-include-cover-image", "Send `includeCoverImage: false` explicitly.").option("--include-social-proof", "includeSocialProof").option("--no-include-social-proof", "Send `includeSocialProof: false` explicitly.").option("--include-testimonial", "includeTestimonial").option("--no-include-testimonial", "Send `includeTestimonial: false` explicitly.").option("--include-logo", "includeLogo").option("--no-include-logo", "Send `includeLogo: false` explicitly.").action(async (options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {};
+    const payload = {
+      templateId: options.templateId,
+      moment: options.moment,
+      scenes: options.scenes,
+      voiceoverMediaId: options.voiceoverMediaId,
+      montageScenes: options.montageScenes,
+      productId: options.productId,
+      locale: options.locale,
+      style: options.style,
+      musicTrackId: options.musicTrackId,
+      format: options.format,
+      ctaLabel: options.ctaLabel,
+      includeCoverImage: options.includeCoverImage,
+      includeSocialProof: options.includeSocialProof,
+      includeTestimonial: options.includeTestimonial,
+      includeLogo: options.includeLogo
+    };
+    const result = await client.call(
+      "POST",
+      "/studio/videos/exports",
+      params,
+      void 0,
+      payload
+    );
+    emit(flags, result ?? {}, () => printJson(result ?? {}));
+  });
+  studioVideo.command("status").summary("Read the status of a Studio video export").description(
+    "The render status of an export-studio-video job; once done, the media-library item it landed (its id attaches to a social post draft via `mediaIds`) and, once the video encoded, a signed MP4 download link valid for 24 hours (ask again for a fresh one). Poll every 15-30 s; a render takes a minute or a few. Read-only."
+  ).argument("<id>", "The job id export-studio-video answered.").action(async (id, _options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {
+      jobId: id
+    };
+    const result = await client.call(
+      "GET",
+      "/studio/videos/exports/:jobId",
+      params,
+      void 0,
+      void 0
+    );
+    emit(flags, result ?? {}, () => printJson(result ?? {}));
+  });
+}
+
+// src/commands/_generated/site.ts
+var listSiteTemplatePagesColumns = ["pageId", "title", "slug", "issue", "nav"];
+var getSiteMenuColumns = ["label", "style", "href"];
+function registerSiteCommands(program2) {
+  const site = program2.commands.find((command) => command.name() === "site") ?? program2.command("site");
+  if (!site.description()) {
+    site.description(
+      "What frames the blog (Your site \u2192 Look and menu): the storefront shell or one of your pages; checked by the same rules as the dashboard"
+    );
+  }
+  const siteLayout = site.command("layout");
+  siteLayout.description(
+    "What frames the blog (Your site \u2192 Look and menu): the storefront shell or one of your pages; checked by the same rules as the dashboard"
+  );
+  siteLayout.command("get").summary("Get the site layout").description(
+    'What frames the blog and the shared site menu (dashboard: Your site \u2192 Look and menu). `template` = `{ kind: "storefront" }` (the storefront shell, the default) or `{ kind: "page", pageId }` (the blog wears that page\'s header, menu and footer: \u201EJak moja strona\u201D). `menu` = the shared menu in order, each entry with `href`, the address it leads to today (null = it leads nowhere now, pages leave it out); an empty menu = every page keeps its own links.'
+  ).action(async (_options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {};
+    const result = await client.call("GET", "/site/layout", params, void 0, void 0);
+    emit(flags, result ?? {}, () => printJson(result ?? {}));
+  });
+  siteLayout.command("pages").summary("List pages that can frame the blog").description(
+    "The workspace's published pages as candidates for the blog's frame, eligible ones first. `issue` null = the page can frame the blog (pass its `pageId` to set-site-template); otherwise why not: `not-published`, `gated` (behind a product or a deadline), `custom-scripts` (its own JS), `no-header-or-footer`. `nav` = whether the shared menu shows on the page: `shared`, `not-marked` (no `data-zanfia-nav`, its own links stay) or `unsupported`."
+  ).action(async (_options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {};
+    const result = await client.call(
+      "GET",
+      "/site/layout/template-pages",
+      params,
+      void 0,
+      void 0
+    );
+    const rows = tableRowsOf(result, "pages");
+    emit(flags, result ?? {}, () => printTable(rows, listSiteTemplatePagesColumns));
+  });
+  siteLayout.command("set").summary("Set what frames the blog").description(
+    "Sets what frames the blog (\u201EWygl\u0105d bloga\u201D): `page` + `pageId` = the blog wears that page's header, menu, footer, fonts and colours (\u201EJak moja strona\u201D); `storefront` = the storefront shell. Live at once; the shared menu stays as it is. The page must be published, open to everyone, without its own scripts and with a <header> and a <footer>: 400 `site-template-page-ineligible` with `issue` otherwise, 404 `site-template-page-not-found`, 400 `site-template-page-required` for `page` without `pageId`; 403 `feature_not_available` while the blog is not on the plan. Returns the whole layout."
+  ).argument(
+    "<kind>",
+    "`storefront` = the storefront shell; `page` = one of your pages (`pageId`)."
+  ).option(
+    "--page <value>",
+    "With `kind: page`: the page that frames the blog (from list-site-template-pages)."
+  ).action(async (kind, options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {};
+    const payload = {
+      kind,
+      pageId: options.page
+    };
+    const result = await client.call("PUT", "/site/layout/template", params, void 0, payload);
+    emit(flags, result ?? {}, () => printJson(result ?? {}));
+  });
+  const siteMenu = site.command("menu");
+  siteMenu.description("The site's one shared menu (Your site \u2192 Look and menu): up to 8 entries");
+  siteMenu.command("get").summary("Get the shared site menu").description(
+    "The site's shared menu (dashboard: Your site \u2192 Look and menu \u2192 \u201EMenu witryny\u201D) in order: `label`, `style` (`link` / `button`), `target` (`page` + `pageId`, `blog`, `store`, `product` + `productId`, `login`, `url` + `url`) and `href`, the address it leads to today (null = nowhere now; pages leave it out). It fills every page that marks its menu with `data-zanfia-nav` and the blog in its page frame. Empty = every page keeps its own links. Edit it with set-site-menu (the whole list)."
+  ).action(async (_options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {};
+    const result = await client.call("GET", "/site/menu", params, void 0, void 0);
+    const rows = tableRowsOf(result, "menu");
+    emit(flags, result ?? {}, () => printTable(rows, getSiteMenuColumns));
+  });
+  siteMenu.command("set").summary("Set the shared site menu").description(
+    'Replaces the site\'s shared menu with the entries sent, in order (up to 8; an entry left out is removed, an empty list turns the menu off). Live at once on every page that marks its menu with `data-zanfia-nav` and on the blog in its page frame. To add one entry (e.g. the blog: `{ label: "Blog", target: { kind: "blog" }, style: "link" }`) read get-site-menu first and send the whole list. Checked by the dashboard rules: 400 `site-menu-refused` with `issue` (`too-many-entries`, `empty-label`, `label-too-long`, `invalid-url`, `invalid-anchor`, `page-not-found`, `page-not-published`, `product-not-found`) and the entry `index`; nothing saved. Returns the whole layout.'
+  ).requiredOption(
+    "--menu <json|file>",
+    "EVERY entry of the new menu, in order (up to 8), as a JSON array; an empty list turns the shared menu off.",
+    parseJsonArrayFileOrInline("--menu")
+  ).action(async (options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const params = {};
+    const payload = {
+      menu: options.menu
+    };
+    const result = await client.call("PUT", "/site/menu", params, void 0, payload);
+    emit(flags, result ?? {}, () => printJson(result ?? {}));
+  });
 }
 
 // src/commands/_generated/index.ts
@@ -10992,6 +11635,8 @@ function registerGeneratedCommands(program2) {
   registerBlogCommands(program2);
   registerSiteRedirectsCommands(program2);
   registerPopupsCommands(program2);
+  registerStudioCommands(program2);
+  registerSiteCommands(program2);
 }
 
 // src/commands/ads/index.ts
@@ -11306,18 +11951,18 @@ function buildAdUpdate(options) {
   }
   return input;
 }
-var CONNECTION_ARG = [
-  "<connectionId>",
-  "Meta connection id (Settings \u2192 Integrations \u2192 Meta)"
+var CONNECTION_ARG = ["<connectionId>", "Meta connection id (from `ads accounts`)"];
+var AD_ACCOUNT_ARG = [
+  "<adAccountId>",
+  "Meta ad account id (`act_\u2026`, from `ads accounts`)"
 ];
-var AD_ACCOUNT_ARG = ["<adAccountId>", "Meta ad account id (`act_\u2026`)"];
 var JSON_FLAG_HINT = "(inline JSON or a .json path; JSON output for this command: -o json or the root --json)";
 function registerAdsCommands(program2) {
   const ads = program2.command("ads").description(
     "Meta Ads \u2014 spend vs. Zanfia revenue per ad, and campaign / ad set / ad / creative management on connected ad accounts"
   );
   ads.command("performance").description(
-    "Spend per ad (ingested insights) joined with Zanfia orders captured via UTM ad ids, plus a per-day spend / revenue series"
+    "Spend per ad (ingested insights) joined with Zanfia orders captured via UTM ad ids (last click) and with orders of buyers who first came from the ad (first touch), plus a per-day spend / revenue series"
   ).option("--from <date>", "inclusive UTC start, YYYY-MM-DD (server default when omitted)").option("--to <date>", "inclusive UTC end, YYYY-MM-DD (server default when omitted)").option(
     "--checkout <checkoutId>",
     "scope orders and spend to one checkout (spendScope becomes `checkout`)"
@@ -11328,7 +11973,7 @@ function registerAdsCommands(program2) {
     emit(flags, result, () => {
       const currency = result.rows.find((r) => r.currency)?.currency ?? null;
       process.stdout.write(
-        `Totals (${result.spendScope} scope): spend ${formatMinor(result.totals.spendMinor, currency)}, ${result.totals.orders} orders, revenue ${formatMinor(result.totals.revenueMinor, currency)}, ROAS ${formatRoas(result.totals.roas) || "n/a"}; ${result.unattributedMetaOrders} Meta orders without an ad id
+        `Totals (${result.spendScope} scope): spend ${formatMinor(result.totals.spendMinor, currency)}, last click: ${result.totals.orders} orders, revenue ${formatMinor(result.totals.revenueMinor, currency)}, ROAS ${formatRoas(result.totals.roas) || "n/a"}; first touch: ${result.totals.firstTouchOrders ?? 0} orders, revenue ${formatMinor(result.totals.firstTouchRevenueMinor ?? 0, currency)}, ROAS ${formatRoas(result.totals.firstTouchRoas ?? null) || "n/a"}; ${result.unattributedMetaOrders} Meta orders without an ad id
 
 `
       );
@@ -11346,7 +11991,10 @@ function registerAdsCommands(program2) {
           metaPurchases: r.metaPurchases,
           orders: r.orders,
           revenue: formatMinor(r.revenueMinor, r.currency),
-          roas: formatRoas(r.roas)
+          roas: formatRoas(r.roas),
+          firstTouchOrders: r.firstTouchOrders ?? 0,
+          firstTouchRevenue: formatMinor(r.firstTouchRevenueMinor ?? 0, r.currency),
+          firstTouchRoas: formatRoas(r.firstTouchRoas ?? null)
         })),
         [
           "adId",
@@ -11359,7 +12007,10 @@ function registerAdsCommands(program2) {
           "metaPurchases",
           "orders",
           "revenue",
-          "roas"
+          "roas",
+          "firstTouchOrders",
+          "firstTouchRevenue",
+          "firstTouchRoas"
         ]
       );
       process.stdout.write(`
@@ -11376,6 +12027,41 @@ Daily (${result.daily.length})
       );
     });
   });
+  ads.command("accounts").description(
+    "Meta connections and the ad accounts each one reaches (live from Meta: name, currency, status) \u2014 the <connectionId> and <adAccountId> every campaign / ad set / ad command takes"
+  ).action(async (_, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.listMetaAdConnections();
+    emit(flags, result, () => {
+      if (result.connections.length === 0) {
+        process.stdout.write(
+          "No Meta connection \u2014 connect one under Settings \u2192 Integrations \u2192 Ads.\n"
+        );
+        return;
+      }
+      printTable(
+        result.connections.flatMap((connection) => {
+          const head = {
+            connectionId: connection.connectionId,
+            connection: connection.label,
+            issue: connection.issue ?? ""
+          };
+          if (connection.adAccounts.length === 0) {
+            return [{ ...head, adAccountId: "", name: "", currency: "", status: "" }];
+          }
+          return connection.adAccounts.map((account) => ({
+            ...head,
+            adAccountId: account.adAccountId,
+            name: account.name ?? "",
+            currency: account.currency ?? "",
+            status: account.accountStatus ?? ""
+          }));
+        }),
+        ["connectionId", "connection", "adAccountId", "name", "currency", "status", "issue"]
+      );
+    });
+  });
   ads.command("directory").description(
     "Ads known to this workspace (from the insights ingest): ad / ad set / campaign ids and names plus the destination checkout \u2014 the lookup behind `utm_content` ad ids"
   ).action(async (_, command) => {
@@ -11605,6 +12291,27 @@ async function runWhoami(command) {
   const rawApiKey = command.optsWithGlobals().apiKey;
   const logins = listStoredProfiles().length;
   const apiKey = resolveApiKey(flags.apiKey);
+  if (decodeTokenKind(apiKey) === "agent") {
+    const claims = decodeTokenClaims(apiKey);
+    const info2 = {
+      role: "agent",
+      workspaceId: claims.workspaceId ?? "?",
+      agentId: claims.agentId ?? null,
+      uid: claims.subject ?? null,
+      communityApiUrl: resolveCommunityApiUrl()
+    };
+    emit(flags, info2, () => {
+      process.stdout.write(`Role: community agent key (posts and comments go out as the agent)
+`);
+      process.stdout.write(`Workspace: ${info2.workspaceId}
+`);
+      process.stdout.write(`Agent: ${info2.agentId ?? "(unknown)"}
+`);
+      process.stdout.write(`Community API: ${info2.communityApiUrl ?? "<unresolved>"}
+`);
+    });
+    return;
+  }
   if (decodeTokenKind(apiKey) === "member") {
     const stored = readCredentials();
     const claims = decodeTokenClaims(apiKey);
@@ -11615,7 +12322,8 @@ async function runWhoami(command) {
       workspaceName: stored?.workspaceName ?? null,
       userEmail: stored?.userEmail ?? null,
       uid: claims.subject ?? null,
-      scopes: ["communities:read", "communities:write"],
+      scopes: memberKeyScopes(claims),
+      readOnly: isReadOnlyMemberKey(claims),
       communityApiUrl: resolveCommunityApiUrl()
     };
     emit(flags, info2, () => {
@@ -11629,7 +12337,7 @@ async function runWhoami(command) {
 `);
       else if (info2.uid) process.stdout.write(`User id: ${info2.uid}
 `);
-      process.stdout.write(`Scopes: ${info2.scopes.join(", ")}
+      process.stdout.write(`Scopes: ${memberScopeLabel(claims)}
 `);
       process.stdout.write(`Community API: ${info2.communityApiUrl ?? "<unresolved>"}
 `);
@@ -11685,10 +12393,15 @@ function registerAuthCommands(program2) {
       process.stdout.write(`  status: no credentials file found
 `);
     } else {
+      const storedClaims = decodeTokenClaims(stored.apiKey);
       process.stdout.write(`  source: ${stored.source ?? "manual"}
 `);
-      process.stdout.write(`  kind  : ${stored.kind ?? decodeTokenKind(stored.apiKey)}
+      process.stdout.write(`  kind  : ${stored.kind ?? storedClaims.kind}
+`);
+      if (storedClaims.kind === "member") {
+        process.stdout.write(`  scope : ${memberScopeLabel(storedClaims)}
 `);
+      }
       process.stdout.write(`  saved : ${stored.savedAt}
 `);
       if (stored.userEmail) {
@@ -11726,6 +12439,8 @@ Resolved by next call:
     process.stdout.write(`  kind  : ${kind}
 `);
     if (kind === "member") {
+      process.stdout.write(`  scope : ${memberScopeLabel(decodeTokenClaims(apiKey))}
+`);
       process.stdout.write(
         `  community API: ${resolveCommunityApiUrl() ?? "<unresolved \u2014 set --api-url>"}
 `
@@ -11741,7 +12456,8 @@ Resolved by next call:
     "--api-url <url>",
     "API URL to associate with this key (for member keys, the api-community URL)"
   ).action((key, options) => {
-    const kind = decodeTokenKind(key);
+    const claims = decodeTokenClaims(key);
+    const { kind } = claims;
     const path2 = writeCredentials({
       apiKey: key,
       apiUrl: options.apiUrl,
@@ -11749,8 +12465,15 @@ Resolved by next call:
       source: "manual",
       kind
     });
-    process.stdout.write(`Saved ${kind === "member" ? "member " : ""}API key to ${path2}
+    const memberLabel = isReadOnlyMemberKey(claims) ? "read-only member " : "member ";
+    const label = kind === "member" ? memberLabel : kind === "agent" ? "agent " : "";
+    process.stdout.write(`Saved ${label}API key to ${path2}
 `);
+    if (kind === "agent") {
+      process.stdout.write(
+        "Note: an agent key only reaches the Community API (`zanfia communities \u2026`); posts and comments go out as the agent.\n"
+      );
+    }
     if (kind === "member" && !options.apiUrl) {
       process.stdout.write(
         "Note: member keys only reach the Community API. Pass --api-url <api-community-url> so `zanfia communities \u2026` knows where to call.\n"
@@ -11771,18 +12494,18 @@ import { platform } from "os";
 async function openBrowser(url) {
   const cmd = browserOpenCommand(url);
   if (!cmd) return false;
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     try {
       const child = spawn(cmd.command, cmd.args, {
         detached: true,
         stdio: "ignore",
         shell: cmd.shell
       });
-      child.on("error", () => resolve2(false));
+      child.on("error", () => resolve3(false));
       child.unref();
-      setTimeout(() => resolve2(true), 100);
+      setTimeout(() => resolve3(true), 100);
     } catch {
-      resolve2(false);
+      resolve3(false);
     }
   });
 }
@@ -11878,11 +12601,11 @@ async function startLoopbackServer() {
     );
     resolveCallback?.({ code, state });
   });
-  await new Promise((resolve2, reject) => {
+  await new Promise((resolve3, reject) => {
     server.once("error", reject);
     server.listen(0, "127.0.0.1", () => {
       server.removeListener("error", reject);
-      resolve2();
+      resolve3();
     });
   });
   const address = server.address();
@@ -11890,13 +12613,13 @@ async function startLoopbackServer() {
     server.close();
     throw new Error("Could not bind loopback server.");
   }
-  const awaitCallback = (expectedState) => new Promise((resolve2, reject) => {
+  const awaitCallback = (expectedState) => new Promise((resolve3, reject) => {
     resolveCallback = (result) => {
       if (result.state !== expectedState) {
         reject(new Error("State mismatch \u2014 possible CSRF. Aborting."));
         return;
       }
-      resolve2(result);
+      resolve3(result);
     };
     rejectCallback = reject;
     setTimeout(() => reject(new Error("Login timed out.")), CALLBACK_TIMEOUT_MS).unref();
@@ -12054,6 +12777,17 @@ async function runBrowserAuth(options, entryUrl) {
     server.close();
   }
 }
+function buildMemberConsentParams(input) {
+  return {
+    redirect_uri: input.redirectUri,
+    state: input.state,
+    code_challenge: input.challenge,
+    code_challenge_method: "S256",
+    hostname: input.hostname,
+    client: "zanfia-cli",
+    ...input.readOnly ? { read_only: "1" } : null
+  };
+}
 function resolveMemberExchangeUrl() {
   const explicit = process.env.ZANFIA_MEMBER_EXCHANGE_URL ?? backendDefaults.memberExchangeUrl;
   if (explicit) return explicit;
@@ -12098,14 +12832,16 @@ async function runMemberLogin(options) {
   const host = safeHostname();
   const server = await startLoopbackServer();
   const redirectUri = `http://127.0.0.1:${server.port}${CALLBACK_PATH}`;
-  const url = buildConsentUrl(consentUrl, {
-    redirect_uri: redirectUri,
-    state,
-    code_challenge: challenge,
-    code_challenge_method: "S256",
-    hostname: host,
-    client: "zanfia-cli"
-  });
+  const url = buildConsentUrl(
+    consentUrl,
+    buildMemberConsentParams({
+      redirectUri,
+      state,
+      challenge,
+      hostname: host,
+      readOnly: options.readOnly
+    })
+  );
   process.stdout.write(`Opening ${url}
 `);
   process.stdout.write("Waiting for browser callback...\n\n");
@@ -12131,6 +12867,8 @@ async function runMemberLogin(options) {
       workspaceName: exchanged.workspaceName
     });
     process.stdout.write(`Logged in as ${exchanged.userEmail} (community member).
+`);
+    process.stdout.write(`Access: ${memberScopeLabel(decodeTokenClaims(exchanged.token))}
 `);
     process.stdout.write(`Workspace: ${exchanged.workspaceName} (${exchanged.workspaceId})
 `);
@@ -12162,6 +12900,9 @@ function registerLoginCommand(auth) {
   ).option(
     "--address <url>",
     "sign in as a community member (Community API) against this creator platform URL"
+  ).option(
+    "--read-only",
+    "member login only: the key can read the communities but never post, comment or chat"
   ).option("-v, --verbose", "show HTTP request details").addHelpText(
     "after",
     `
@@ -12177,24 +12918,33 @@ The two flows use different consent pages:
     command uses another stored login just for that command.
 
   Community member login \u2014 Community API only:
-      login --address https://<creator-platform-url>
+      login --address https://<creator-platform-url> [--read-only]
     Opens the consent page on that creator's platform (where you log in as
     their customer). The CLI gets a member token scoped to that workspace's
     communities; the community URL is passed as the platform address, and
-    which community to act in is chosen per command.
+    which community to act in is chosen per command. --read-only gets a key
+    that can read and summarize but never post, comment or chat (the right
+    choice for an agent that only reads); \`auth status\` shows the scope.
 
     No browser? Generate a key on the creator's platform under
-    Settings -> Developer and paste the shown "auth set-key" command instead.
+    Settings -> AI agents and paste the shown "auth set-key"
+    command instead.
 `
   ).action(async (options) => {
     if (options.address) {
       await runMemberLogin({
         address: options.address,
         apiUrl: options.apiUrl,
-        verbose: options.verbose
+        verbose: options.verbose,
+        readOnly: options.readOnly
       });
       return;
     }
+    if (options.readOnly) {
+      throw new Error(
+        "--read-only applies to community member logins: add --address <creator-platform-url> (or use `zanfia join <handle> --read-only`)."
+      );
+    }
     await runLogin(options);
   });
 }
@@ -12231,11 +12981,14 @@ import { hostname as hostname2 } from "os";
 var HttpJsonError = class extends Error {
   status;
   code;
-  constructor(message, status, code) {
+  /** The server's own message, without the `<label> failed (<status>):` prefix. */
+  serverMessage;
+  constructor(message, status, code, serverMessage = message) {
     super(message);
     this.name = "HttpJsonError";
     this.status = status;
     this.code = code;
+    this.serverMessage = serverMessage;
   }
 };
 async function postJson2(label, url, body, options = {}) {
@@ -12253,10 +13006,12 @@ async function postJson2(label, url, body, options = {}) {
   });
   const text = await response.text();
   if (!response.ok) {
+    const serverMessage = extractErrorMessage(text, response.statusText);
     throw new HttpJsonError(
-      `${label} failed (${response.status}): ${extractErrorMessage(text, response.statusText)}`,
+      `${label} failed (${response.status}): ${serverMessage}`,
       response.status,
-      extractErrorCode(text)
+      extractErrorCode(text),
+      serverMessage
     );
   }
   return JSON.parse(text);
@@ -12303,7 +13058,7 @@ async function promptLine(question) {
 function promptHidden(question) {
   const { stdin, stdout } = process;
   if (!stdin.isTTY) return promptLine(question);
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     stdout.write(question);
     stdin.setRawMode(true);
     stdin.resume();
@@ -12315,7 +13070,7 @@ function promptHidden(question) {
           stdin.pause();
           stdin.removeListener("data", onData);
           stdout.write("\n");
-          resolve2(value);
+          resolve3(value);
           return;
         }
         if (char === CTRL_C) {
@@ -12677,10 +13432,10 @@ function registerBrandCommands(program2) {
   });
 }
 async function buildUpdatePatch(options) {
-  const { readFile: readFile4 } = await import("fs/promises");
+  const { readFile: readFile6 } = await import("fs/promises");
   let patch = {};
   if (options.jsonFile) {
-    const raw = await readFile4(options.jsonFile, "utf8");
+    const raw = await readFile6(options.jsonFile, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
       throw new Error("--json-file must contain a JSON object with name/visual/editorial keys.");
@@ -12975,6 +13730,12 @@ function printCampaignDetail(campaign) {
   }
   if (campaign.completedAt) process.stdout.write(`  Completed at: ${campaign.completedAt}
 `);
+  if (campaign.pacing) {
+    process.stdout.write(
+      `  Pacing: new sending domain ${campaign.pacing.domain}, ~${campaign.pacing.hourlyCap}/h, estimated end ${campaign.pacing.estimatedEndAt}
+`
+    );
+  }
   const { stats } = campaign;
   process.stdout.write(
     `  Stats: sent ${stats.sent}, delivered ${stats.delivered}, bounced ${stats.bounced}, complained ${stats.complained}, failed ${stats.failed}, skipped ${stats.skippedSuppressed + stats.skippedMuted}
@@ -13105,10 +13866,10 @@ function registerCampaignsCommands(program2) {
     });
   });
   campaigns.command("test").description(
-    "Send a TEST of the saved campaign to up to 3 addresses (default: your own) \u2014 subject prefixed [Test], sample personalization values; never the audience"
+    "Send a TEST of the saved campaign to your team's addresses only (default: your own) \u2014 subject prefixed [Test], sample personalization values; never the audience"
   ).argument("<id>", "campaign id").option(
     "--to <email>",
-    "test recipient \u2014 repeatable or comma-separated, max 3 (default: your own address)",
+    "test recipient: a team member account e-mail (or a mail-tester.com inbox), repeatable or comma-separated, max 3 (default: your own address)",
     collectRepeatable,
     []
   ).action(async (id, options, command) => {
@@ -14420,7 +15181,13 @@ Next page: --cursor ${page.nextCursor}
       });
     }
   );
-  clients2.command("add").description("Add a contact-only client (no product access granted)").requiredOption("--email <email>", "client email").option("--first-name <name>", "client first name").option("--last-name <name>", "client last name").option("--phone <number>", "client phone number").option("--language <code>", "preferred language code (e.g. en, pl)").action(
+  clients2.command("add").description("Add a contact-only client (no product access granted)").requiredOption("--email <email>", "client email").option("--first-name <name>", "client first name").option("--last-name <name>", "client last name").option("--phone <number>", "client phone number").option("--language <code>", "preferred language code (e.g. en, pl)").option(
+    "--marketing-consent",
+    "subscribe the client to marketing e-mail (needs --consent-statement unless the key gives consent)"
+  ).option(
+    "--consent-statement",
+    "your statement: you hold this person's marketing consent and answer for it"
+  ).action(
     async (options, command) => {
       const flags = getGlobalFlags(command);
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -14429,7 +15196,9 @@ Next page: --cursor ${page.nextCursor}
         firstName: options.firstName,
         lastName: options.lastName,
         phoneNumber: options.phone,
-        language: options.language
+        language: options.language,
+        ...options.marketingConsent ? { marketingConsent: true } : {},
+        ...options.consentStatement ? { consentStatement: true } : {}
       });
       emit(flags, result, () => {
         process.stdout.write(
@@ -14437,6 +15206,10 @@ Next page: --cursor ${page.nextCursor}
 ` : `Client already exists: ${result.clientId} (${options.email}).
 `
         );
+        if (result.marketingConsent && result.marketingConsent !== "not-requested") {
+          process.stdout.write(`Marketing consent: ${result.marketingConsent}.
+`);
+        }
       });
     }
   );
@@ -14679,17 +15452,22 @@ Next page: --cursor ${page.nextCursor}
       });
     }
   );
-  clients2.command("revoke").description("Revoke a client's product access (NO refund; live subscriptions are refused)").argument("<productId>", "product id").requiredOption("--email <email>", "client email").option("--run-automations", "also run the product's access-end automation tasks").action(
+  clients2.command("revoke").description(
+    "Revoke a client's product access (NO refund). Access whose subscription already ended in Stripe is revoked; a live subscription is refused unless --cancel-subscription"
+  ).argument("<productId>", "product id").requiredOption("--email <email>", "client email").option("--run-automations", "also run the product's access-end automation tasks").option("--cancel-subscription", "cancel a still-live subscription now, then revoke").option("--silent", "no e-mail, automations or workflows for this revoke").action(
     async (productId, options, command) => {
       const flags = getGlobalFlags(command);
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
       const result = await client.revokeClientAccess(productId, {
         email: options.email,
-        runAutomations: options.runAutomations
+        runAutomations: options.runAutomations,
+        cancelSubscription: options.cancelSubscription,
+        silent: options.silent
       });
       emit(flags, result, () => {
+        const subscriptionNote = result.subscription === "cancelled" ? " The subscription was cancelled in Stripe." : result.subscription === "already_ended" ? " The subscription had already ended in Stripe." : "";
         process.stdout.write(
-          `Revoked ${options.email}'s access to product ${productId} (no refund issued; re-grant with \`clients grant\`).
+          `Revoked ${options.email}'s access to product ${productId} (no refund issued; re-grant with \`clients grant\`).${subscriptionNote}
 `
         );
       });
@@ -14741,7 +15519,8 @@ Next page: --cursor ${page.nextCursor}
       const result = await client.cancelClientSubscription(productId, { email: options.email });
       emit(flags, result, () => {
         process.stdout.write(
-          `Cancelled ${options.email}'s subscription to product ${productId} \u2014 access runs to the end of the paid period (check \`clients accesses\` for the date).
+          result.alreadyCancelled ? `${options.email}'s subscription to product ${productId} had already ended in Stripe \u2014 nothing was cancelled now; the access record was brought in line.
+` : `Cancelled ${options.email}'s subscription to product ${productId} \u2014 access runs to the end of the paid period (check \`clients accesses\` for the date).
 `
         );
       });
@@ -15146,7 +15925,8 @@ function eventRow(event) {
     endAt: event.endAt,
     timezone: event.timezone,
     status: event.status,
-    location: formatEventLocation(event.location)
+    location: formatEventLocation(event.location),
+    rsvp: event.rsvpEnabled === false ? "off" : `${event.goingCount ?? 0} going`
   };
 }
 var EVENT_COLUMNS = [
@@ -15157,8 +15937,19 @@ var EVENT_COLUMNS = [
   "endAt",
   "timezone",
   "status",
-  "location"
+  "location",
+  "rsvp"
 ];
+function attendeeRow(attendee) {
+  return {
+    memberId: attendee.memberId,
+    name: [attendee.firstName, attendee.lastName].filter(Boolean).join(" "),
+    email: attendee.email ?? "",
+    answeredAt: attendee.respondedAt,
+    access: attendee.hasAccess ? "yes" : "lost"
+  };
+}
+var ATTENDEE_COLUMNS = ["memberId", "name", "email", "answeredAt", "access"];
 function moderationRow(report) {
   const reason = report.reporters.map((r) => r.reason).find((r) => Boolean(r)) ?? "";
   return {
@@ -15814,7 +16605,10 @@ ${message.content}
   );
   communities2.command("members").description(
     "List community members (staff only). Filters --role, --disabled and --email-prefix are mutually exclusive."
-  ).argument("<communityId>", "community id").option("--role <roleId>", "only members holding this role").option("--disabled <true|false>", "only disabled (soft-banned) / only active members").option("--email-prefix <prefix>", "email prefix search (case-insensitive)").option("--limit <n>", "page size (max 100)").option("--cursor <cursor>", "pagination cursor from a previous page").action(
+  ).argument("<communityId>", "community id").option("--role <roleId>", "only members holding this role").option("--disabled <true|false>", "only disabled (soft-banned) / only active members").option(
+    "--email-prefix <prefix>",
+    "email prefix search (case-insensitive; workspace keys only, a member key gets 403)"
+  ).option("--limit <n>", "page size (max 100)").option("--cursor <cursor>", "pagination cursor from a previous page").action(
     async (communityId, options, command) => {
       const flags = getGlobalFlags(command);
       const filterCount = [options.role, options.disabled, options.emailPrefix].filter(
@@ -15922,8 +16716,11 @@ Next page: --cursor ${result.nextCursor}
     });
   });
   settings.command("update").description(
-    "Patch community settings \u2014 via toggle flags and/or a JSON patch. Allowed patch keys: uploadVideo, membersDisplay, viewStyle, displayName, icon, hiddenWhenUnavailable, voiceMessages, enableMemberApiAccess, publicAccess, publicAccessTermsUrl, contentVisibleFromJoinDate, eventsEnabled, directMessagesEnabled, gamification, moderation, assistant, digest. Nested blocks in the JSON patch replace their whole sub-object; the --gamification / --auto-hide-after-reports flags merge into the existing block instead."
-  ).argument("<communityId>", "community id").option("--patch <fileOrJson>", "the settings patch as inline JSON or a path to a .json file").option("--events-enabled <on|off>", "show / hide the Calendar (events) section for members").option("--direct-messages <on|off>", "allow / block member \u2194 member direct messages").option(
+    "Patch community settings \u2014 via toggle flags and/or a JSON patch. Allowed patch keys: uploadVideo, membersDisplay, viewStyle, displayName, icon, hiddenWhenUnavailable, voiceMessages, enableMemberApiAccess, publicAccess, publicAccessTermsUrl, contentVisibleFromJoinDate, eventsEnabled, eventAnnouncements, directMessagesEnabled, gamification, moderation, assistant, digest. Nested blocks in the JSON patch replace their whole sub-object; the --gamification / --auto-hide-after-reports flags merge into the existing block instead."
+  ).argument("<communityId>", "community id").option("--patch <fileOrJson>", "the settings patch as inline JSON or a path to a .json file").option("--events-enabled <on|off>", "show / hide the Calendar (events) section for members").option(
+    "--event-announcements <on|off>",
+    "bell + e-mail to members when a new event is published (default on)"
+  ).option("--direct-messages <on|off>", "allow / block member \u2194 member direct messages").option(
     "--content-visible-from-join-date <on|off>",
     '"archive from purchase date" \u2014 members only see posts newer than their own access start'
   ).option("--gamification <on|off>", "XP / levels / leaderboards (stored reputation is kept)").option(
@@ -15937,6 +16734,12 @@ Next page: --cursor ${result.nextCursor}
       if (options.eventsEnabled !== void 0) {
         patch.eventsEnabled = parseOnOff(options.eventsEnabled, "--events-enabled");
       }
+      if (options.eventAnnouncements !== void 0) {
+        patch.eventAnnouncements = parseOnOff(
+          options.eventAnnouncements,
+          "--event-announcements"
+        );
+      }
       if (options.directMessages !== void 0) {
         patch.directMessagesEnabled = parseOnOff(options.directMessages, "--direct-messages");
       }
@@ -15964,7 +16767,7 @@ Next page: --cursor ${result.nextCursor}
       const keys = Object.keys(patch);
       if (keys.length === 0) {
         throw new Error(
-          "Nothing to update \u2014 pass --patch and/or one of the toggle flags (--events-enabled, --direct-messages, --content-visible-from-join-date, --gamification, --auto-hide-after-reports)."
+          "Nothing to update \u2014 pass --patch and/or one of the toggle flags (--events-enabled, --event-announcements, --direct-messages, --content-visible-from-join-date, --gamification, --auto-hide-after-reports)."
         );
       }
       const result = await client.updateCommunitySettings(communityId, patch);
@@ -16105,9 +16908,12 @@ Next page: --cursor ${result.nextCursor}
   );
   events.command("create").description(
     'Create a calendar event (staff). Flags override --json; `--location` is {"type":"online","url":\u2026} or {"type":"inPerson","address":\u2026}.'
-  ).argument("<communityId>", "community id").option("--title <title>", "event title").option("--description <text>", "plain-text description").option("--start <iso>", "start \u2014 ISO 8601 instant (e.g. 2026-09-01T17:00:00Z)").option("--end <iso>", "end \u2014 ISO 8601 instant").option("--timezone <iana>", "IANA timezone the event is authored in (e.g. Europe/Warsaw)").option("--type <kind>", `event kind: ${COMMUNITY_EVENT_KINDS.join("|")} (default other)`).option("--all-day", "all-day event (start/end span whole days, no times shown)").option("--location <fileOrJson>", "location object as inline JSON or a .json file path").option(
+  ).argument("<communityId>", "community id").option("--title <title>", "event title").option("--description <text>", "plain-text description").option("--start <iso>", "start \u2014 ISO 8601 instant (e.g. 2026-09-01T17:00:00Z)").option("--end <iso>", "end \u2014 ISO 8601 instant").option("--timezone <iana>", "IANA timezone the event is authored in (e.g. Europe/Warsaw)").option("--type <kind>", `event kind: ${COMMUNITY_EVENT_KINDS.join("|")} (default other)`).option("--all-day", "all-day event (start/end span whole days, no times shown)").option("--location <fileOrJson>", "location object as inline JSON or a .json file path").option("--rsvp <on|off>", "\u201EZbieraj zapisy\u201D: members answer going / not going (default on)").option(
+    "--announce <on|off>",
+    "\u201EPowiadom cz\u0142onk\xF3w\u201D: bell + one e-mail \u201ENowe wydarzenie\u201D to members (default on)"
+  ).option(
     "--json <file>",
-    "full request body from a .json file (title, description, startAt, endAt, timezone, type, allDay, location, coverImage)"
+    "full request body from a .json file (title, description, startAt, endAt, timezone, type, allDay, location, coverImage, rsvpEnabled, announce)"
   ).action(
     async (communityId, options, command) => {
       const flags = getGlobalFlags(command);
@@ -16121,7 +16927,9 @@ Next page: --cursor ${result.nextCursor}
         ...options.timezone !== void 0 ? { timezone: options.timezone } : {},
         ...options.type !== void 0 ? { type: assertOneOf(options.type, COMMUNITY_EVENT_KINDS, "--type") } : {},
         ...options.allDay ? { allDay: true } : {},
-        ...options.location !== void 0 ? { location: parseEventLocation(options.location) } : {}
+        ...options.location !== void 0 ? { location: parseEventLocation(options.location) } : {},
+        ...options.rsvp !== void 0 ? { rsvpEnabled: parseOnOff(options.rsvp, "--rsvp") } : {},
+        ...options.announce !== void 0 ? { announce: parseOnOff(options.announce, "--announce") } : {}
       };
       const missing = ["title", "startAt", "endAt", "timezone", "location"].filter(
         (key) => input[key] === void 0
@@ -16146,7 +16954,7 @@ Next page: --cursor ${result.nextCursor}
   );
   events.command("update").description(
     "Update a calendar event (staff). Every flag is optional; `--status cancelled` cancels without deleting, `--status scheduled` restores."
-  ).argument("<communityId>", "community id").argument("<eventId>", "event id").option("--title <title>", "new title").option("--description <text>", "new plain-text description").option("--start <iso>", "new start \u2014 ISO 8601 instant").option("--end <iso>", "new end \u2014 ISO 8601 instant").option("--timezone <iana>", "new IANA timezone").option("--type <kind>", `event kind: ${COMMUNITY_EVENT_KINDS.join("|")}`).option("--all-day <on|off>", "switch the all-day mode on/off").option("--location <fileOrJson>", "new location object as inline JSON or a .json file path").option("--status <status>", `${SETTABLE_COMMUNITY_EVENT_STATUSES.join("|")}`).option("--json <file>", "patch body from a .json file (flags override)").action(
+  ).argument("<communityId>", "community id").argument("<eventId>", "event id").option("--title <title>", "new title").option("--description <text>", "new plain-text description").option("--start <iso>", "new start \u2014 ISO 8601 instant").option("--end <iso>", "new end \u2014 ISO 8601 instant").option("--timezone <iana>", "new IANA timezone").option("--type <kind>", `event kind: ${COMMUNITY_EVENT_KINDS.join("|")}`).option("--all-day <on|off>", "switch the all-day mode on/off").option("--location <fileOrJson>", "new location object as inline JSON or a .json file path").option("--status <status>", `${SETTABLE_COMMUNITY_EVENT_STATUSES.join("|")}`).option("--rsvp <on|off>", "\u201EZbieraj zapisy\u201D: collect going / not going answers or stop").option("--json <file>", "patch body from a .json file (flags override)").action(
     async (communityId, eventId, options, command) => {
       const flags = getGlobalFlags(command);
       const base = options.json !== void 0 ? parseJsonObject(options.json, "--json") : {};
@@ -16166,7 +16974,8 @@ Next page: --cursor ${result.nextCursor}
             SETTABLE_COMMUNITY_EVENT_STATUSES,
             "--status"
           )
-        } : {}
+        } : {},
+        ...options.rsvp !== void 0 ? { rsvpEnabled: parseOnOff(options.rsvp, "--rsvp") } : {}
       };
       if (Object.keys(input).length === 0) {
         throw new Error("Nothing to update \u2014 pass at least one flag (or a --json patch).");
@@ -16192,6 +17001,31 @@ Next page: --cursor ${result.nextCursor}
       });
     }
   );
+  events.command("attendees").description("Who answered \u201EB\u0119d\u0119\u201D (going) / \u201ENie b\u0119d\u0119\u201D (not going), with e-mails (staff only)").argument("<communityId>", "community id").argument("<eventId>", "event id (from `communities events list`)").action(async (communityId, eventId, _, command) => {
+    const flags = getGlobalFlags(command);
+    const result = await clientFor(flags).listCommunityEventAttendees(communityId, eventId);
+    emit(flags, result, () => {
+      const going = result.attendees.filter(
+        (attendee) => attendee.status === "going"
+      );
+      const notGoing = result.attendees.filter(
+        (attendee) => attendee.status === "not_going"
+      );
+      if (!result.rsvpEnabled) {
+        process.stdout.write("RSVP is off for this event (answers given before are kept).\n");
+      }
+      process.stdout.write(`Going (${result.goingCount}):
+`);
+      printTable(going.map(attendeeRow), ATTENDEE_COLUMNS);
+      process.stdout.write(`
+Not going (${result.notGoingCount}):
+`);
+      printTable(notGoing.map(attendeeRow), ATTENDEE_COLUMNS);
+      if (result.truncated) {
+        process.stdout.write("\nThe list stops at 1000 answers; the counts are exact.\n");
+      }
+    });
+  });
   const moderation = communities2.command("moderation").description("Reported posts and comments \u2014 review the queue and resolve reports (staff)");
   moderation.command("queue").description("Show pending reports plus the most recently resolved ones").argument("<communityId>", "community id").action(async (communityId, _, command) => {
     const flags = getGlobalFlags(command);
@@ -16245,6 +17079,7 @@ var SETTINGS_PATCH_KEYS = [
   "publicAccessTermsUrl",
   "contentVisibleFromJoinDate",
   "eventsEnabled",
+  "eventAnnouncements",
   "directMessagesEnabled",
   "gamification",
   "moderation",
@@ -17503,7 +18338,7 @@ function registerDiscountsCommands(program2) {
         page.items.map((d) => ({
           id: d.id,
           code: d.code,
-          value: formatDiscountValue(d.percentOff, d.amountOffCents, d.currency),
+          value: formatDiscountValue(d.percentOff, d.amountOffCents, d.currency, d.amountScope),
           active: d.active ? "yes" : "no",
           uses: d.usageCount
         })),
@@ -17516,7 +18351,10 @@ function registerDiscountsCommands(program2) {
     "limit to a product (repeat the flag for several)",
     collectRepeatable4,
     []
-  ).option("--max-redemptions <n>", "maximum number of redemptions").option("--ends <isoDate>", "date the code stops working (ISO, e.g. 2026-12-31)").option("--starts <isoDate>", "date the code starts working (ISO, e.g. 2026-12-01)").option("--forever", "apply to every renewal of a subscription (default: first payment only)").option("--inactive", "create the code deactivated (default: active)").action(
+  ).option("--max-redemptions <n>", "maximum number of redemptions").option("--ends <isoDate>", "date the code stops working (ISO, e.g. 2026-12-31)").option("--starts <isoDate>", "date the code starts working (ISO, e.g. 2026-12-01)").option("--forever", "apply to every renewal of a subscription (default: first payment only)").option(
+    "--per-unit",
+    "with --amount-off: take the amount off each unit bought (default: once per order)"
+  ).option("--inactive", "create the code deactivated (default: active)").action(
     async (options, command) => {
       const flags = getGlobalFlags(command);
       if (options.percentOff === void 0 === (options.amountOff === void 0)) {
@@ -17528,12 +18366,15 @@ function registerDiscountsCommands(program2) {
       if (options.currency !== void 0 && options.amountOff === void 0) {
         throw new Error("--currency only applies with --amount-off.");
       }
+      if (options.perUnit && options.amountOff === void 0) {
+        throw new Error("--per-unit only applies with --amount-off.");
+      }
       const percentOff = options.percentOff !== void 0 ? parsePercent(options.percentOff, "--percent-off") : void 0;
       const amountOffCents = options.amountOff !== void 0 ? parsePositiveInt8(options.amountOff, "--amount-off") : void 0;
       const maxRedemptions = options.maxRedemptions !== void 0 ? parsePositiveInt8(options.maxRedemptions, "--max-redemptions") : void 0;
       const endsAt = options.ends !== void 0 ? parseIsoDate(options.ends, "--ends") : void 0;
       const startsAt = options.starts !== void 0 ? parseIsoDate(options.starts, "--starts") : void 0;
-      const duration = options.forever ? "forever" : void 0;
+      const duration2 = options.forever ? "forever" : void 0;
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
       const result = await client.createDiscount({
         code: options.code,
@@ -17544,14 +18385,16 @@ function registerDiscountsCommands(program2) {
         maxRedemptions,
         endsAt,
         startsAt,
-        duration,
+        duration: duration2,
+        amountScope: options.perUnit ? "unit" : void 0,
         active: options.inactive ? false : void 0
       });
       emit(flags, result, () => {
         const value = formatDiscountValue(
           result.percentOff,
           result.amountOffCents,
-          result.currency
+          result.currency,
+          result.amountScope
         );
         const inactiveNote = result.active ? "" : " [inactive]";
         process.stdout.write(
@@ -17566,7 +18409,10 @@ function registerDiscountsCommands(program2) {
     "replace the product restriction (repeat the flag for several)",
     collectRepeatable4,
     []
-  ).option("--max-redemptions <n>", "maximum number of redemptions").option("--clear-max-redemptions", "remove the redemption limit").option("--ends <isoDate>", "date the code stops working (ISO, e.g. 2026-12-31)").option("--clear-ends", "remove the end date").option("--forever", "apply to every renewal of a subscription").option("--active", "activate the code").option("--inactive", "deactivate the code").action(
+  ).option("--max-redemptions <n>", "maximum number of redemptions").option("--clear-max-redemptions", "remove the redemption limit").option("--ends <isoDate>", "date the code stops working (ISO, e.g. 2026-12-31)").option("--clear-ends", "remove the end date").option("--forever", "apply to every renewal of a subscription").option(
+    "--amount-scope <scope>",
+    "fixed amounts: 'order' (once per order) or 'unit' (off each unit bought)"
+  ).option("--active", "activate the code").option("--inactive", "deactivate the code").action(
     async (discountId, options, command) => {
       const flags = getGlobalFlags(command);
       if (options.percentOff !== void 0 && options.amountOff !== void 0) {
@@ -17597,6 +18443,9 @@ function registerDiscountsCommands(program2) {
       if (options.ends !== void 0) input.endsAt = parseIsoDate(options.ends, "--ends");
       if (options.clearEnds) input.endsAt = null;
       if (options.forever) input.duration = "forever";
+      if (options.amountScope !== void 0) {
+        input.amountScope = parseAmountScope(options.amountScope);
+      }
       if (options.active) input.active = true;
       if (options.inactive) input.active = false;
       if (Object.keys(input).length === 0) {
@@ -17610,7 +18459,8 @@ function registerDiscountsCommands(program2) {
         const value = formatDiscountValue(
           result.percentOff,
           result.amountOffCents,
-          result.currency
+          result.currency,
+          result.amountScope
         );
         const state = result.active ? "active" : "inactive";
         process.stdout.write(
@@ -17643,12 +18493,18 @@ function registerDiscountsCommands(program2) {
     });
   });
 }
-function formatDiscountValue(percentOff, amountOffCents, currency) {
+function formatDiscountValue(percentOff, amountOffCents, currency, amountScope) {
   if (percentOff !== void 0) return `${percentOff}%`;
-  if (amountOffCents !== void 0)
-    return `${(amountOffCents / 100).toFixed(2)} ${currency ?? ""}`.trim();
+  if (amountOffCents !== void 0) {
+    const amount = `${(amountOffCents / 100).toFixed(2)} ${currency ?? ""}`.trim();
+    return amountScope === "unit" ? `${amount} per unit` : amount;
+  }
   return "";
 }
+function parseAmountScope(value) {
+  if (value === "order" || value === "unit") return value;
+  throw new Error("--amount-scope must be 'order' or 'unit'.");
+}
 
 // src/commands/emails/index.ts
 import { readFileSync as readFileSync12 } from "fs";
@@ -18110,20 +18966,357 @@ function registerEmailsCommands(program2) {
       printBranding(result);
     });
   });
-  emails.command("test <key>").description(
-    "Queue a test send of one system email (saved customization, sample data) to YOUR own address"
-  ).option("--lang <en|pl>", "language to render (defaults to 'pl')").action(async (key, options, command) => {
+  emails.command("test <key>").description(
+    "Queue a test send of one system email (saved customization, sample data) to YOUR own address"
+  ).option("--lang <en|pl>", "language to render (defaults to 'pl')").action(async (key, options, command) => {
+    const flags = getGlobalFlags(command);
+    const language = parseLanguage(options.lang, "pl");
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.sendEmailTemplateTest(key, language);
+    emit(flags, result, () => {
+      process.stdout.write(`Test queued \u2192 ${result.email}
+`);
+    });
+  });
+  registerEmailLibraryCommands(emails);
+  registerEmailSenderCommands(emails);
+}
+
+// src/commands/files/index.ts
+import { readFile as readFile2, stat as stat2 } from "fs/promises";
+import { resolve } from "path";
+
+// src/commands/files/localFileSet.ts
+import { createHash as createHash3 } from "crypto";
+import { readdir, readFile, stat } from "fs/promises";
+import { join as join2, relative, sep } from "path";
+var MAX_FILE_BYTES = 15 * 1024 * 1024;
+var MAX_OPERATIONS_PER_REQUEST = 400;
+var ALWAYS_IGNORED = /* @__PURE__ */ new Set([".git", "node_modules", ".DS_Store", "Thumbs.db"]);
+var ZANFIA_IGNORE_FILE = ".zanfiaignore";
+var IGNORE_FILES = [".gitignore", ZANFIA_IGNORE_FILE];
+var escapeRegex = (text) => text.replace(/[.+^${}()|\\]/g, "\\$&");
+var globToRegex = (glob) => {
+  let out = "";
+  for (let index = 0; index < glob.length; index += 1) {
+    const char = glob[index];
+    if (char === "*") {
+      if (glob[index + 1] === "*") {
+        const slashAfter = glob[index + 2] === "/";
+        out += slashAfter ? "(?:.*/)?" : ".*";
+        index += slashAfter ? 2 : 1;
+      } else {
+        out += "[^/]*";
+      }
+    } else if (char === "?") {
+      out += "[^/]";
+    } else if (char === "[") {
+      const end = glob.indexOf("]", index + 1);
+      if (end === -1) {
+        out += "\\[";
+      } else {
+        const body = glob.slice(index + 1, end);
+        out += `[${body.startsWith("!") ? `^${body.slice(1)}` : body}]`;
+        index = end;
+      }
+    } else {
+      out += escapeRegex(char ?? "");
+    }
+  }
+  return out;
+};
+var parseIgnoreRules = (text) => text.split(/\r?\n/).flatMap((rawLine) => {
+  let line = rawLine.replace(/\s+$/, "");
+  if (!line || line.startsWith("#")) return [];
+  const negated = line.startsWith("!");
+  if (negated) line = line.slice(1);
+  if (line.startsWith("\\")) line = line.slice(1);
+  const dirOnly = line.endsWith("/");
+  if (dirOnly) line = line.slice(0, -1);
+  if (!line) return [];
+  const anchored = line.includes("/");
+  if (line.startsWith("/")) line = line.slice(1);
+  const body = globToRegex(line);
+  return [
+    {
+      regex: new RegExp(anchored ? `^${body}$` : `^(?:.*/)?${body}$`),
+      negated,
+      dirOnly
+    }
+  ];
+});
+var isIgnoredByRules = (path2, isDir, rules) => {
+  let ignored = false;
+  for (const rule of rules) {
+    if (rule.dirOnly && !isDir) continue;
+    if (rule.regex.test(path2)) ignored = !rule.negated;
+  }
+  return ignored;
+};
+var TEMPLATE_SUFFIXES = ["example", "sample", "template", "dist", "defaults"];
+var CREDENTIALS_FILE_NAMES = [
+  ".netrc",
+  "_netrc",
+  ".git-credentials",
+  ".pypirc",
+  ".pgpass",
+  "secrets.json",
+  "secrets.yml",
+  "secrets.yaml"
+];
+var secretFileReason = (path2) => {
+  const name = (path2.split("/").pop() ?? path2).toLowerCase();
+  const segments = name.split(".");
+  const first = segments[0] ?? "";
+  const last = segments[segments.length - 1] ?? "";
+  if (segments.length > 1 && (TEMPLATE_SUFFIXES.includes(last) || TEMPLATE_SUFFIXES.includes(first))) {
+    return null;
+  }
+  if (name === ".env" || name === ".envrc" || /^\.env[._-]/.test(name) || name.endsWith(".env")) {
+    return "env-file";
+  }
+  if (["id_rsa", "id_dsa", "id_ecdsa", "id_ed25519"].includes(name)) return "ssh-key";
+  if (CREDENTIALS_FILE_NAMES.includes(name)) return "credentials-file";
+  if (name === "credentials" && path2.toLowerCase().split("/").includes(".aws")) {
+    return "credentials-file";
+  }
+  const extension = segments.length > 1 ? last : "";
+  if (["pem", "key", "p12", "pfx", "jks", "keystore", "ppk", "kdbx"].includes(extension)) {
+    return "key-file";
+  }
+  return null;
+};
+var readIgnoreRules = async (root) => {
+  const rules = [];
+  for (const name of IGNORE_FILES) {
+    try {
+      rules.push(...parseIgnoreRules(await readFile(join2(root, name), "utf8")));
+    } catch {
+    }
+  }
+  return rules;
+};
+var scanLocalFileSet = async (root) => {
+  const rules = await readIgnoreRules(root);
+  const scan = { files: [], ignored: 0, refused: [] };
+  const walk = async (directory) => {
+    const entries = await readdir(directory, { withFileTypes: true });
+    for (const entry of entries.sort((left, right) => left.name.localeCompare(right.name))) {
+      const absolutePath = join2(directory, entry.name);
+      const path2 = relative(root, absolutePath).split(sep).join("/").normalize("NFC");
+      const isDir = entry.isDirectory();
+      if (ALWAYS_IGNORED.has(entry.name) || // `.zanfiaignore` lists what the creator keeps private: it never ships.
+      path2 === ZANFIA_IGNORE_FILE || isIgnoredByRules(path2, isDir, rules)) {
+        scan.ignored += 1;
+        continue;
+      }
+      if (isDir) {
+        await walk(absolutePath);
+        continue;
+      }
+      if (!entry.isFile()) continue;
+      const secret = secretFileReason(path2);
+      if (secret) {
+        scan.refused.push({ path: path2, reason: `secret (${secret})` });
+        continue;
+      }
+      const { size } = await stat(absolutePath);
+      if (size > MAX_FILE_BYTES) {
+        scan.refused.push({ path: path2, reason: "larger than 15 MB" });
+        continue;
+      }
+      const sha256 = createHash3("sha256").update(await readFile(absolutePath)).digest("hex");
+      scan.files.push({ path: path2, size, sha256, absolutePath });
+    }
+  };
+  await walk(root);
+  return scan;
+};
+var planPush = (local, remote, options) => {
+  const prefix = options.targetFolder ? `${options.targetFolder}/` : "";
+  const mapped = local.map((file) => ({ ...file, path: `${prefix}${file.path}` }));
+  const remoteByPath = new Map(remote.map((file) => [file.path, file.sha256]));
+  const localPaths = new Set(mapped.map((file) => file.path));
+  const plan = { added: [], updated: [], unchanged: [], missing: [] };
+  for (const file of mapped) {
+    const remoteSha = remoteByPath.get(file.path);
+    if (remoteSha === void 0) plan.added.push(file);
+    else if (remoteSha === file.sha256) plan.unchanged.push(file.path);
+    else plan.updated.push(file);
+  }
+  plan.missing = remote.map((file) => file.path).filter((path2) => path2.startsWith(prefix) && !localPaths.has(path2));
+  return plan;
+};
+var chunkPaths = (paths, size = MAX_OPERATIONS_PER_REQUEST) => {
+  const chunks = [];
+  for (let index = 0; index < paths.length; index += size) {
+    chunks.push(paths.slice(index, index + size));
+  }
+  return chunks;
+};
+var PUSH_BATCH_MAX_BYTES = 12 * 1024 * 1024;
+var PUSH_BATCH_MAX_FILES = 200;
+var batchForPush = (files) => {
+  const batches = [];
+  let current = [];
+  let bytes = 0;
+  for (const file of files) {
+    if (current.length > 0 && (bytes + file.size > PUSH_BATCH_MAX_BYTES || current.length >= PUSH_BATCH_MAX_FILES)) {
+      batches.push(current);
+      current = [];
+      bytes = 0;
+    }
+    current.push(file);
+    bytes += file.size;
+  }
+  if (current.length > 0) batches.push(current);
+  return batches;
+};
+
+// src/commands/files/index.ts
+var parseTargetFolder = (value) => {
+  if (!value) return "";
+  const folder = value.normalize("NFC").replace(/\\/g, "/").replace(/^\/+|\/+$/g, "");
+  if (folder.split("/").some((segment) => !segment || segment === "." || segment === "..")) {
+    throw new Error(`--to "${value}" is not a folder path inside the set.`);
+  }
+  return folder;
+};
+var formatBytes = (bytes) => {
+  if (bytes < 1024) return `${bytes} B`;
+  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
+  return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
+};
+var filesOffNotice = (answer) => answer.fileSetEnabled === false && answer.fileCount > 0 ? "Files are off for buyers (\u201EPliki dla kupuj\u0105cych\u201D is off): turn it on in the product's Settings.\n" : null;
+var writeFilesOffNotice = (answer) => {
+  const notice = filesOffNotice(answer);
+  if (notice) process.stderr.write(notice);
+};
+var requireProduct = (options) => {
+  if (!options.product) throw new Error("Provide the product via --product <id>.");
+  return options.product;
+};
+function registerFilesCommands(program2) {
+  const files = program2.command("files").description("A product's \u201EPliki\u201D: the folder tree its buyers browse and download");
+  files.command("list").description("List the files of a product (path, size, sha256)").requiredOption("--product <id>", "product id").action(async (options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const fileSet = await client.getProductFileSet(requireProduct(options));
+    emit(flags, fileSet, () => {
+      process.stdout.write(
+        `${fileSet.fileCount} files, ${formatBytes(fileSet.totalBytes)}, revision ${fileSet.revision}${fileSet.lastMessage ? ` (${fileSet.lastMessage})` : ""}
+`
+      );
+      writeFilesOffNotice(fileSet);
+      printTable(
+        fileSet.files.map((file) => ({
+          path: file.path,
+          size: formatBytes(file.size),
+          sha256: file.sha256.slice(0, 12)
+        })),
+        ["path", "size", "sha256"]
+      );
+    });
+  });
+  files.command("push").description(
+    "Push a folder into the product's \u201EPliki\u201D: uploads only changed files (by sha256), honours the folder's root .gitignore / .zanfiaignore, refuses secrets. Files of the set that are not in the folder are KEPT unless you pass --delete"
+  ).argument("<dir>", "folder to push").requiredOption("--product <id>", "product id").option("--to <folder>", "folder of the set to push into (default: the set's root)").option("-m, --message <text>", "what changed (kept as the set's latest note)").option("--dry-run", "print the plan, send nothing").option(
+    "--delete",
+    "also delete set files (inside --to) that are not in the folder: a mirror push"
+  ).action(async (dir, options, command) => {
     const flags = getGlobalFlags(command);
-    const language = parseLanguage(options.lang, "pl");
-    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
-    const result = await client.sendEmailTemplateTest(key, language);
-    emit(flags, result, () => {
-      process.stdout.write(`Test queued \u2192 ${result.email}
+    const productId = requireProduct(options);
+    const targetFolder = parseTargetFolder(options.to);
+    const root = resolve(dir);
+    if (!(await stat2(root)).isDirectory()) throw new Error(`${dir} is not a folder.`);
+    const scan = await scanLocalFileSet(root);
+    if (scan.refused.length > 0) {
+      throw new Error(
+        `Nothing pushed. Remove or ignore these files first:
+${scan.refused.map((item) => `  ${item.path}: ${item.reason}`).join("\n")}`
+      );
+    }
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const remote = await client.getProductFileSet(productId);
+    const plan = planPush(scan.files, remote.files, { targetFolder });
+    const uploads = [...plan.added, ...plan.updated];
+    const deletes = options.delete ? plan.missing : [];
+    const summary = {
+      added: plan.added.map((file) => file.path),
+      updated: plan.updated.map((file) => file.path),
+      deleted: deletes,
+      kept: options.delete ? [] : plan.missing,
+      unchanged: plan.unchanged.length,
+      ignored: scan.ignored
+    };
+    const printPlan = () => {
+      for (const path2 of summary.added) process.stdout.write(`  + ${path2}
+`);
+      for (const path2 of summary.updated) process.stdout.write(`  ~ ${path2}
+`);
+      for (const path2 of summary.deleted) process.stdout.write(`  - ${path2}
+`);
+      process.stdout.write(
+        `${summary.added.length} new, ${summary.updated.length} changed, ${summary.deleted.length} deleted, ${summary.unchanged} unchanged, ${summary.ignored} ignored
+`
+      );
+      if (summary.kept.length > 0) {
+        process.stdout.write(
+          `${summary.kept.length} file(s) of the set are not in this folder and were kept (pass --delete to remove them).
+`
+        );
+      }
+    };
+    if (options.dryRun || uploads.length === 0 && deletes.length === 0) {
+      emit(flags, { ...summary, dryRun: Boolean(options.dryRun) }, () => {
+        printPlan();
+        if (!options.dryRun) process.stdout.write("Nothing to push: the set is up to date.\n");
+      });
+      return;
+    }
+    const requests = [
+      ...batchForPush(uploads).map((batch) => async () => ({
+        files: await Promise.all(
+          batch.map(async (file) => ({
+            path: file.path,
+            contentBase64: (await readFile2(file.absolutePath)).toString("base64")
+          }))
+        )
+      })),
+      ...chunkPaths(deletes).map((deletePaths) => async () => ({ deletePaths }))
+    ];
+    let result = null;
+    for (const [index, build] of requests.entries()) {
+      const isLast = index === requests.length - 1;
+      const input = await build();
+      try {
+        result = await client.changeProductFileSet(productId, {
+          ...input,
+          ...isLast && options.message ? { message: options.message } : {}
+        });
+      } catch (error) {
+        if (index > 0) {
+          process.stderr.write(
+            `Stopped at request ${index + 1}/${requests.length}: the ${index} before it were saved, nothing after it was sent. Fix the files below and push again (unchanged files are skipped).
+`
+          );
+        }
+        throw error;
+      }
+      if (!flags.json && requests.length > 1) {
+        process.stderr.write(`  sent ${index + 1}/${requests.length}
 `);
+      }
+    }
+    emit(flags, { ...summary, revision: result?.revision ?? remote.revision }, () => {
+      printPlan();
+      process.stdout.write(
+        `Pushed: revision ${result?.revision ?? remote.revision}, ${result?.fileCount ?? 0} files, ${formatBytes(result?.totalBytes ?? 0)}.
+`
+      );
+      if (result) writeFilesOffNotice(result);
     });
   });
-  registerEmailLibraryCommands(emails);
-  registerEmailSenderCommands(emails);
 }
 
 // src/commands/forms/index.ts
@@ -18490,7 +19683,13 @@ function registerFormsCommands(program2) {
 
 // src/commands/funnels/index.ts
 import { readFileSync as readFileSync14 } from "fs";
-var CREATABLE_RECIPES = ["lead_magnet", "tripwire", "sell_product"];
+var CREATABLE_RECIPES = [
+  "lead_magnet",
+  "tripwire",
+  "low_ticket",
+  "sell_product",
+  "webinar"
+];
 var FUNNEL_STATUSES = ["draft", "live", "archived"];
 var FUNNEL_LANGS = ["en", "pl"];
 var FUNNEL_TEMPLATE_IDS = [
@@ -18529,6 +19728,13 @@ function withLiveGateHint(error, funnelId) {
   }
   throw error;
 }
+function parseMeetingLink(value, flag) {
+  const trimmed = value.trim();
+  if (!/^https?:\/\/\S+$/i.test(trimmed)) {
+    throw new Error(`Invalid ${flag}: ${value} (expected an http(s) link)`);
+  }
+  return trimmed;
+}
 function parsePositiveInt10(value, flag) {
   const n = Number.parseInt(value, 10);
   if (!Number.isInteger(n) || n <= 0) {
@@ -18630,6 +19836,33 @@ function printFunnelDetail(funnel) {
     ["#", "stepId", "type", "status", "name", "slug"]
   );
 }
+function printFunnelEvent(event) {
+  const start = event.startAt ? `${event.startAt} (${event.timezone}, ${event.durationMinutes} min)` : "on demand";
+  process.stdout.write(`  Webinar (page ${event.pageId}):
+`);
+  process.stdout.write(`    Start: ${start}
+`);
+  process.stdout.write(`    Join link: ${event.joinUrl ?? "(none)"}
+`);
+  if (event.replayUrl) process.stdout.write(`    Recording: ${event.replayUrl}
+`);
+  if (event.liveRoomId) process.stdout.write(`    Runs on webinar: ${event.liveRoomId}
+`);
+  if (event.rungs.length === 0) {
+    process.stdout.write("    Reminders: none\n");
+    return;
+  }
+  process.stdout.write("    Reminders:\n");
+  printTable(
+    event.rungs.map((rung) => ({
+      kind: rung.kind,
+      sendAt: rung.sendAt,
+      status: rung.status ?? "missing",
+      broadcastId: rung.broadcastId
+    })),
+    ["kind", "sendAt", "status", "broadcastId"]
+  );
+}
 async function resolveStepId(client, funnelId, step) {
   if (!/^\d+$/.test(step)) return step;
   const position = Number.parseInt(step, 10);
@@ -18655,7 +19888,7 @@ function buildFunnelUpdateInput(options) {
 }
 function registerFunnelsCommands(program2) {
   const funnels = program2.command("funnels").description(
-    "Manage marketing funnels \u2014 named step chains that REFERENCE existing checkouts, pages, and workflows (a funnel never owns the artifacts its steps point to). Create is recipe-first: lead_magnet, tripwire, sell_product (webinar is a coming-soon recipe, not creatable yet)."
+    `Manage marketing funnels \u2014 named step chains that REFERENCE existing checkouts, pages, and workflows (a funnel never owns the artifacts its steps point to). Create is recipe-first (${CREATABLE_RECIPES.join(", ")}) or from a template with its pages generated in one go (\`funnels from-template\`).`
   );
   funnels.command("list").description("List the workspace's funnels").action(async (_, command) => {
     const flags = getGlobalFlags(command);
@@ -18677,10 +19910,13 @@ function registerFunnelsCommands(program2) {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const result = await client.getFunnel(id);
-    emit(flags, result, () => printFunnelDetail(result.funnel));
+    emit(flags, result, () => {
+      printFunnelDetail(result.funnel);
+      if (result.event) printFunnelEvent(result.event);
+    });
   });
   funnels.command("create").description(
-    "Create a funnel from a recipe over the product's EXISTING artifacts. 'lead_magnet' (free checkout as opt-in \u2192 thank-you) and 'tripwire' (free opt-in \u2192 the checkout's one-time-offer chain \u2192 thank-you) REQUIRE a free checkout on the product; 'sell_product' (sales page \u2192 default paid checkout \u2192 OTO \u2192 thank-you) requires a paid one. Creates the funnel DRAFT referencing those existing checkouts (no new pages or offers) plus the recipe email sequence as a DRAFT workflow \u2014 nothing sends until the creator publishes it."
+    "Create a funnel from a recipe over the product's EXISTING artifacts. 'lead_magnet' (free checkout as opt-in \u2192 thank-you) and 'tripwire' (free opt-in \u2192 the checkout's one-time-offer chain \u2192 thank-you) REQUIRE a free checkout on the product; 'sell_product' (sales page \u2192 default paid checkout \u2192 OTO \u2192 thank-you) and 'low_ticket' (a cheap product page that takes the payment \u2192 one-time offers \u2192 thank-you) require a paid one. Creates the funnel DRAFT referencing those existing checkouts (no new pages or offers) plus the recipe email sequence as a DRAFT workflow \u2014 nothing sends until the creator publishes it. 'webinar' takes any product and creates three EMPTY page steps (registration \u2192 thank-you \u2192 watch page); generate the registration step next with the event (`funnels generate-page <id> --step 1 --event-start \u2026`), or build it all in one go with `funnels from-template webinar`."
   ).requiredOption("--recipe <recipe>", `creation recipe (${CREATABLE_RECIPES.join(" | ")})`).requiredOption("--product <productId>", "the product the funnel sells or delivers").option("--name <name>", "custom name; omit for a recipe default").requiredOption("--lang <en|pl>", "language of the generated email copy \u2014 the creator's").action(async (options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -18694,6 +19930,14 @@ function registerFunnelsCommands(program2) {
     emit(flags, result, () => {
       process.stdout.write(`Created funnel ${result.funnelId} (draft).
 `);
+      if (input.recipe === "webinar") {
+        process.stdout.write(
+          `Next: generate the registration page with the event (it builds the thank-you and watch pages and the reminder drafts too):
+  funnels generate-page ${result.funnelId} --step 1 --lang ${input.lang} --event-start <ISO 8601 with offset> --event-timezone <IANA zone>
+  (on-demand: --event-mode on_demand instead of the date)
+`
+        );
+      }
     });
   });
   funnels.command("update").description(
@@ -18740,11 +19984,23 @@ function registerFunnelsCommands(program2) {
     });
   });
   funnels.command("generate-page").description(
-    "AI-generate a hosted DRAFT page for ONE page-type step (opt_in_page / sales_page / thank_you \u2014 checkout/oto/downsell steps have their own surfaces) and wire the step to it. Consumes AI credits and runs 1-3 minutes synchronously \u2014 call it once per step, never speculatively. Pass the same --template across a funnel\u2019s steps so the pages look like siblings."
+    "AI-generate a hosted DRAFT page for ONE page-type step (lead-magnet / sales-page / thank-you / webinar-registration \u2014 checkout/oto/downsell steps have their own surfaces) and wire the step to it. A webinar-registration step builds the whole family (thank-you, watch page, reminder drafts) around the event: pass --event-start (+ --event-timezone, --event-duration) or --event-mode on_demand. Consumes AI credits and runs in the background (1-5 minutes) \u2014 call it once per step, never speculatively. Pass the same --template across a funnel\u2019s steps so the pages look like siblings."
   ).argument("<id>", "funnel id").requiredOption(
     "--step <n|id>",
     "the page-type step to build \u2014 either its 1-based position (from `funnels get`'s step table) or its raw stepId"
-  ).requiredOption("--lang <en|pl>", "language of the generated copy \u2014 the creator's").option("--brief <text>", "optional creator notes appended to the synthesized brief").option("--template <templateId>", "optional design-template seed; reuse across steps").action(
+  ).requiredOption("--lang <en|pl>", "language of the generated copy \u2014 the creator's").option("--brief <text>", "optional creator notes appended to the synthesized brief").option("--template <templateId>", "optional design-template seed; reuse across steps").option(
+    "--event-start <iso>",
+    "webinar registration step: event start as ISO 8601 WITH offset (live)"
+  ).option("--event-timezone <tz>", "webinar registration step: IANA timezone, e.g. Europe/Warsaw").option(
+    "--event-duration <minutes>",
+    "webinar registration step: event length in minutes (default 60)"
+  ).option(
+    "--event-mode <mode>",
+    `webinar registration step: ${EVENT_MODES.join(" | ")} (on_demand = no date)`
+  ).option(
+    "--join-url <url>",
+    "webinar registration step: the meeting link (ClickMeeting, Zoom, Teams, Meet)"
+  ).action(
     async (id, options, command) => {
       const flags = getGlobalFlags(command);
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -18753,7 +20009,12 @@ function registerFunnelsCommands(program2) {
         stepId,
         lang: parseChoice3(options.lang, FUNNEL_LANGS, "--lang"),
         brief: options.brief,
-        templateId: options.template
+        templateId: options.template,
+        ...options.eventStart !== void 0 ? { eventStartAt: options.eventStart } : {},
+        ...options.eventTimezone !== void 0 ? { eventTimezone: options.eventTimezone } : {},
+        ...options.eventDuration !== void 0 ? { eventDurationMinutes: parsePositiveInt10(options.eventDuration, "--event-duration") } : {},
+        ...options.eventMode !== void 0 ? { eventMode: parseChoice3(options.eventMode, EVENT_MODES, "--event-mode") } : {},
+        ...options.joinUrl !== void 0 ? { eventJoinUrl: parseMeetingLink(options.joinUrl, "--join-url") } : {}
       };
       const result = await client.generateFunnelStepPage(id, input);
       emit(flags, result, () => {
@@ -18785,22 +20046,48 @@ function registerFunnelsCommands(program2) {
     });
   });
   funnels.command("from-template").description(
-    "Create a funnel from a catalog template (`funnels templates`) AND AI-generate its page steps in one go \u2014 opt-in / sales / thank-you pages are queued as background generations (202; consumes AI credits, 1-5 minutes each). The template\u2019s product requirement must be met (free or paid checkout on the product), else 409. Webinar template: pass the event fields (live) or --event-mode on_demand. Requires --confirm."
-  ).argument("<templateId>", `template id (${FUNNEL_TEMPLATE_IDS.join(" | ")})`).requiredOption("--product <productId>", "the product the funnel sells or delivers").requiredOption("--lang <en|pl>", "language of the generated pages and emails \u2014 the creator's").option("--name <name>", "custom funnel name; omit for the recipe default").option("--event-start <iso>", "webinar: event start as ISO 8601 WITH offset (live)").option("--event-timezone <tz>", "webinar: IANA timezone, e.g. Europe/Warsaw").option("--event-duration <minutes>", "webinar: event length in minutes (default 60)").option("--event-mode <mode>", `webinar: ${EVENT_MODES.join(" | ")} (on_demand = autowebinar)`).option(
+    "Create a funnel from a catalog template (`funnels templates`) AND AI-generate its page steps in one go \u2014 opt-in / sales / thank-you pages are queued as background generations (202; consumes AI credits, 1-5 minutes each). The template\u2019s product requirement must be met (free or paid checkout on the product), else 409. Webinar template: pass the event fields (live; --join-url for a ClickMeeting / Zoom link) or --event-mode on_demand, or --live-room <roomId> to run it on a webinar that plays a recording (then --product is optional; needs the live_rooms plan feature). Requires --confirm."
+  ).argument("<templateId>", `template id (${FUNNEL_TEMPLATE_IDS.join(" | ")})`).option(
+    "--product <productId>",
+    "the product the funnel sells or delivers (required, except with --live-room)"
+  ).requiredOption("--lang <en|pl>", "language of the generated pages and emails \u2014 the creator's").option("--name <name>", "custom funnel name; omit for the recipe default").option("--event-start <iso>", "webinar: event start as ISO 8601 WITH offset (live)").option("--event-timezone <tz>", "webinar: IANA timezone, e.g. Europe/Warsaw").option("--event-duration <minutes>", "webinar: event length in minutes (default 60)").option(
+    "--event-mode <mode>",
+    `webinar: ${EVENT_MODES.join(" | ")} (on_demand = on-demand webinar, no date)`
+  ).option(
+    "--join-url <url>",
+    "webinar (live): the meeting link (ClickMeeting, Zoom, Teams, Meet) the pages and reminders carry"
+  ).option(
+    "--live-room <roomId>",
+    "webinar: a webinar (`live-rooms list`) that plays a recording; its sessions are the event"
+  ).option(
     "--page-template <id>",
     "design template for every generated page (a page-template id, e.g. course-fresh); thank-you steps take the companion"
   ).option("--confirm", "required \u2014 acknowledge that AI credits will be consumed").action(
     async (templateId, options, command) => {
       const flags = getGlobalFlags(command);
+      const template = parseChoice3(templateId, FUNNEL_TEMPLATE_IDS, "<templateId>");
+      if (options.liveRoom !== void 0 && template !== "webinar") {
+        throw new Error("--live-room is for the webinar template only.");
+      }
+      if (options.joinUrl !== void 0 && template !== "webinar") {
+        throw new Error("--join-url is for the webinar template only.");
+      }
+      if (options.product === void 0 && options.liveRoom === void 0) {
+        throw new Error(
+          "Missing --product <productId> (only a webinar that plays a recording, --live-room, goes without one)."
+        );
+      }
       requireConfirm6(options.confirm, "create the funnel and generate its pages (AI credits)");
       const input = {
-        templateId: parseChoice3(templateId, FUNNEL_TEMPLATE_IDS, "<templateId>"),
-        productId: options.product,
+        templateId: template,
+        ...options.product !== void 0 ? { productId: options.product } : {},
         lang: parseChoice3(options.lang, FUNNEL_LANGS, "--lang"),
         name: options.name,
         ...options.pageTemplate ? { pageTemplateId: options.pageTemplate } : {}
       };
       const webinar = {
+        liveRoomId: options.liveRoom,
+        joinUrl: options.joinUrl !== void 0 ? parseMeetingLink(options.joinUrl, "--join-url") : void 0,
         eventStartAt: options.eventStart,
         eventTimezone: options.eventTimezone,
         eventDurationMinutes: options.eventDuration !== void 0 ? parsePositiveInt10(options.eventDuration, "--event-duration") : void 0,
@@ -19843,6 +21130,16 @@ function registerIntegrationsCommands(program2) {
 }
 
 // src/commands/join/index.ts
+function joinApprovalRefusal(err) {
+  if (!(err instanceof HttpJsonError)) return null;
+  if (err.code === "community-join-approval-required" /* ApprovalRequired */) {
+    return err.serverMessage.endsWith(".") ? err.serverMessage : `${err.serverMessage}.`;
+  }
+  if (err.code === "community-join-approval-unavailable" /* ApprovalUnavailable */) {
+    return "We couldn't check your sign-up right now, please try again in a moment.";
+  }
+  return null;
+}
 var MAX_CODE_ATTEMPTS2 = 5;
 var HANDLE_REGEX = /^[a-z0-9][a-z0-9-]{1,62}$/;
 var EMAIL_REGEX2 = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
@@ -19900,10 +21197,18 @@ async function runJoin(handleInput, options) {
       completed = await postJson2(
         "Join",
         joinUrl(communityApiUrl, handle, "complete"),
-        { email, code, firstName, hostname: hostname3 },
+        {
+          email,
+          code,
+          firstName,
+          hostname: hostname3,
+          ...options.readOnly ? { readOnly: true } : {}
+        },
         { verbose }
       );
     } catch (err) {
+      const refusal = joinApprovalRefusal(err);
+      if (refusal) throw new Error(refusal, { cause: err });
       if (options.code || attempt === MAX_CODE_ATTEMPTS2) throw err;
       process.stdout.write(`${err instanceof Error ? err.message : String(err)}
 `);
@@ -19923,11 +21228,14 @@ async function runJoin(handleInput, options) {
     workspaceName: completed.workspaceName,
     kind: "member"
   });
+  const claims = decodeTokenClaims(completed.token);
+  const readOnly = isReadOnlyMemberKey(claims);
   if (options.json) {
     process.stdout.write(
       `${JSON.stringify(
         {
           joined: true,
+          readOnly,
           alreadyMember: completed.alreadyMember,
           communityId: completed.communityId,
           communityName: completed.communityName,
@@ -19945,12 +21253,13 @@ async function runJoin(handleInput, options) {
     );
     return;
   }
-  const intro = completed.introChannelId ? `  zanfia communities post create ${completed.communityId} ${completed.introChannelId} --content "Hi, I'm <your agent>. I ..."
+  const intro = completed.introChannelId && !readOnly ? `  zanfia communities post create ${completed.communityId} ${completed.introChannelId} --content "Hi, I'm <your agent>. I ..."
 ` : "";
   process.stdout.write(
     `
 ${completed.alreadyMember ? "Welcome back to" : "You are in:"} ${completed.communityName}.
 Member key saved to ${path2} (expires ${completed.expiresAt.slice(0, 10)}).
+Access: ${memberScopeLabel(claims)}
 
 Next:
   zanfia communities list
@@ -19963,17 +21272,20 @@ Plug in your agent: ${AGENT_DOCS_URL}
   );
 }
 function registerJoinCommand(program2) {
-  program2.command("join <handle>").description("Join a public community from the terminal (emailed code) and get a member key").option("--email <email>", "email to join with (prompted when omitted)").option("--name <name>", "your display name (prompted when omitted)").option("--code <code>", "the 6-digit code from the email (prompted when omitted)").addHelpText(
+  program2.command("join <handle>").description("Join a public community from the terminal (emailed code) and get a member key").option("--email <email>", "email to join with (prompted when omitted)").option("--name <name>", "your display name (prompted when omitted)").option("--code <code>", "the 6-digit code from the email (prompted when omitted)").option("--read-only", "get a key that can read and summarize but never post, comment or chat").addHelpText(
     "after",
     `
 Examples:
   zanfia join crew-of-one
   zanfia join crew-of-one --email me@example.com --name "Sam" --code 123456
+  zanfia join crew-of-one --read-only
 
 The key is a MEMBER key: it reaches the Community API for that creator's
-communities only (read/post/comment/chat), never your own workspace. It is
-saved to ~/.config/zanfia/credentials.json and expires in 90 days \u2014 run
-join again to refresh it.
+communities only (read/post/comment/chat), never your own workspace. With
+--read-only it can only read (the right choice for an agent that reads and
+summarizes); \`zanfia auth status\` shows the scope. It is saved to
+~/.config/zanfia/credentials.json and expires in 90 days \u2014 run join again
+to refresh it.
 `
   ).action(async (handle, options, command) => {
     const globals = getGlobalFlags(command);
@@ -20009,9 +21321,9 @@ function describeSchedule(room) {
 }
 function registerLiveRoomsCommands(program2) {
   const liveRooms = program2.command("live-rooms").description(
-    "Live rooms (webinar rooms, incl. rolling autowebinar sessions) \u2014 list and attendance; rooms are managed in the dashboard"
+    "Webinars (incl. rolling autowebinar sessions) \u2014 list and attendance; webinars are managed in the dashboard"
   );
-  liveRooms.command("list").description("List live rooms (latest start first)").action(async (_, command) => {
+  liveRooms.command("list").description("List webinars (latest start first)").action(async (_, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const result = await client.listLiveRooms();
@@ -20030,7 +21342,7 @@ function registerLiveRoomsCommands(program2) {
       );
     });
   });
-  liveRooms.command("attendance").description("A room's attendance per session; --session adds that session's viewers").argument("<roomId>", "live room id (from live-rooms list)").option("--session <iso>", "ISO start of one session to list its attendees").action(async (roomId, options, command) => {
+  liveRooms.command("attendance").description("A webinar's attendance per session; --session adds that session's viewers").argument("<roomId>", "webinar id (from live-rooms list)").option("--session <iso>", "ISO start of one session to list its attendees").action(async (roomId, options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const result = await client.getLiveRoomAttendance(roomId, options.session);
@@ -20066,7 +21378,7 @@ function registerLiveRoomsCommands(program2) {
       if (totals) {
         process.stdout.write(
           `
-Room total (${totals.sessions} started sessions): registered ${countOrDash(totals.registered)} \u2192 attended ${totals.attendees} \u2192 saw the offer ${totals.sawOffer} \u2192 clicked ${totals.clickedOffer} \u2192 bought ${countOrDash(totals.purchased)}${totals.capped ? " (at least: a read hit its cap)" : ""}
+Webinar total (${totals.sessions} started sessions): registered ${countOrDash(totals.registered)} \u2192 attended ${totals.attendees} \u2192 saw the offer ${totals.sawOffer} \u2192 clicked ${totals.clickedOffer} \u2192 bought ${countOrDash(totals.purchased)}${totals.capped ? " (at least: a read hit its cap)" : ""}
 `
         );
       }
@@ -20093,12 +21405,12 @@ Viewers of ${options.session}:
 
 // src/commands/media/index.ts
 import { existsSync, readFileSync as readFileSync17, writeFileSync as writeFileSync4 } from "fs";
-import { readFile, stat as stat3 } from "fs/promises";
+import { readFile as readFile3, stat as stat5 } from "fs/promises";
 import { basename } from "path";
 
 // src/client/bunnyUpload.ts
 import { createReadStream as createReadStream2 } from "fs";
-import { stat as stat2 } from "fs/promises";
+import { stat as stat4 } from "fs/promises";
 
 // ../../node_modules/tus-js-client/lib.esm/error.js
 function _typeof(o) {
@@ -20744,7 +22056,7 @@ function _regeneratorRuntime() {
     return this.delegate = { iterator: values(e2), resultName: r2, nextLoc: n2 }, "next" === this.method && (this.arg = t), y;
   } }, e;
 }
-function asyncGeneratorStep(gen, resolve2, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep(gen, resolve3, reject, _next, _throw, key, arg) {
   try {
     var info = gen[key](arg);
     var value = info.value;
@@ -20753,7 +22065,7 @@ function asyncGeneratorStep(gen, resolve2, reject, _next, _throw, key, arg) {
     return;
   }
   if (info.done) {
-    resolve2(value);
+    resolve3(value);
   } else {
     Promise.resolve(value).then(_next, _throw);
   }
@@ -20761,13 +22073,13 @@ function asyncGeneratorStep(gen, resolve2, reject, _next, _throw, key, arg) {
 function _asyncToGenerator(fn) {
   return function() {
     var self2 = this, args = arguments;
-    return new Promise(function(resolve2, reject) {
+    return new Promise(function(resolve3, reject) {
       var gen = fn.apply(self2, args);
       function _next(value) {
-        asyncGeneratorStep(gen, resolve2, reject, _next, _throw, "next", value);
+        asyncGeneratorStep(gen, resolve3, reject, _next, _throw, "next", value);
       }
       function _throw(err) {
-        asyncGeneratorStep(gen, resolve2, reject, _next, _throw, "throw", err);
+        asyncGeneratorStep(gen, resolve3, reject, _next, _throw, "throw", err);
       }
       _next(void 0);
     });
@@ -21099,7 +22411,7 @@ var BaseUpload = /* @__PURE__ */ (function() {
         var lastPartProgress = 0;
         return _this3._source.slice(part.start, part.end).then(function(_ref) {
           var value = _ref.value;
-          return new Promise(function(resolve2, reject) {
+          return new Promise(function(resolve3, reject) {
             var options = _objectSpread(_objectSpread({}, _this3.options), {}, {
               // If available, the partial upload should be resumed from a previous URL.
               uploadUrl: part.uploadUrl || null,
@@ -21117,7 +22429,7 @@ var BaseUpload = /* @__PURE__ */ (function() {
                 "Upload-Concat": "partial"
               }),
               // Reject or resolve the promise if the upload errors or completes.
-              onSuccess: resolve2,
+              onSuccess: resolve3,
               onError: reject,
               // Based in the progress for this partial upload, calculate the progress
               // for the entire final upload.
@@ -21628,8 +22940,8 @@ var BaseUpload = /* @__PURE__ */ (function() {
         var newOptions = _objectSpread(_objectSpread({}, options), {}, {
           retryDelays: remainingDelays
         });
-        return new Promise(function(resolve2) {
-          return setTimeout(resolve2, delay);
+        return new Promise(function(resolve3) {
+          return setTimeout(resolve3, delay);
         }).then(function() {
           return BaseUpload2.terminate(url, newOptions);
         });
@@ -22093,7 +23405,7 @@ function _toPrimitive5(t, r) {
   }
   return ("string" === r ? String : Number)(t);
 }
-function asyncGeneratorStep2(gen, resolve2, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, key, arg) {
   try {
     var info = gen[key](arg);
     var value = info.value;
@@ -22102,7 +23414,7 @@ function asyncGeneratorStep2(gen, resolve2, reject, _next, _throw, key, arg) {
     return;
   }
   if (info.done) {
-    resolve2(value);
+    resolve3(value);
   } else {
     Promise.resolve(value).then(_next, _throw);
   }
@@ -22110,13 +23422,13 @@ function asyncGeneratorStep2(gen, resolve2, reject, _next, _throw, key, arg) {
 function _asyncToGenerator2(fn) {
   return function() {
     var self2 = this, args = arguments;
-    return new Promise(function(resolve2, reject) {
+    return new Promise(function(resolve3, reject) {
       var gen = fn.apply(self2, args);
       function _next(value) {
-        asyncGeneratorStep2(gen, resolve2, reject, _next, _throw, "next", value);
+        asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "next", value);
       }
       function _throw(err) {
-        asyncGeneratorStep2(gen, resolve2, reject, _next, _throw, "throw", err);
+        asyncGeneratorStep2(gen, resolve3, reject, _next, _throw, "throw", err);
       }
       _next(void 0);
     });
@@ -22468,7 +23780,7 @@ function _toPrimitive6(t, r) {
   }
   return ("string" === r ? String : Number)(t);
 }
-function asyncGeneratorStep3(gen, resolve2, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep3(gen, resolve3, reject, _next, _throw, key, arg) {
   try {
     var info = gen[key](arg);
     var value = info.value;
@@ -22477,7 +23789,7 @@ function asyncGeneratorStep3(gen, resolve2, reject, _next, _throw, key, arg) {
     return;
   }
   if (info.done) {
-    resolve2(value);
+    resolve3(value);
   } else {
     Promise.resolve(value).then(_next, _throw);
   }
@@ -22485,13 +23797,13 @@ function asyncGeneratorStep3(gen, resolve2, reject, _next, _throw, key, arg) {
 function _asyncToGenerator3(fn) {
   return function() {
     var self2 = this, args = arguments;
-    return new Promise(function(resolve2, reject) {
+    return new Promise(function(resolve3, reject) {
       var gen = fn.apply(self2, args);
       function _next(value) {
-        asyncGeneratorStep3(gen, resolve2, reject, _next, _throw, "next", value);
+        asyncGeneratorStep3(gen, resolve3, reject, _next, _throw, "next", value);
       }
       function _throw(err) {
-        asyncGeneratorStep3(gen, resolve2, reject, _next, _throw, "throw", err);
+        asyncGeneratorStep3(gen, resolve3, reject, _next, _throw, "throw", err);
       }
       _next(void 0);
     });
@@ -22505,7 +23817,7 @@ function _readChunk() {
     return _regeneratorRuntime3().wrap(function _callee2$(_context2) {
       while (1) switch (_context2.prev = _context2.next) {
         case 0:
-          return _context2.abrupt("return", new Promise(function(resolve2, reject) {
+          return _context2.abrupt("return", new Promise(function(resolve3, reject) {
             var onError = function onError2(err) {
               stream.off("readable", onReadable);
               reject(err);
@@ -22515,7 +23827,7 @@ function _readChunk() {
               if (chunk2 !== null) {
                 stream.off("error", onError);
                 stream.off("readable", onReadable2);
-                resolve2(chunk2);
+                resolve3(chunk2);
               }
             };
             stream.once("error", onError);
@@ -22696,19 +24008,19 @@ var FileReader = /* @__PURE__ */ (function() {
 })();
 
 // ../../node_modules/tus-js-client/lib.esm/node/fileSignature.js
-import { createHash as createHash3 } from "crypto";
+import { createHash as createHash4 } from "crypto";
 import * as fs from "fs";
 import * as path from "path";
 function fingerprint(file, options) {
   if (Buffer.isBuffer(file)) {
     var blockSize = 64 * 1024;
     var content = file.slice(0, Math.min(blockSize, file.length));
-    var hash = createHash3("md5").update(content).digest("hex");
+    var hash = createHash4("md5").update(content).digest("hex");
     var ret = ["node-buffer", hash, file.length, options.endpoint].join("-");
     return Promise.resolve(ret);
   }
   if (file instanceof fs.ReadStream && file.path != null) {
-    return new Promise(function(resolve2, reject) {
+    return new Promise(function(resolve3, reject) {
       var name = path.resolve(file.path);
       fs.stat(file.path, function(err, info) {
         if (err) {
@@ -22716,7 +24028,7 @@ function fingerprint(file, options) {
           return;
         }
         var ret2 = ["node-file", name, info.size, info.mtime.getTime(), options.endpoint].join("-");
-        resolve2(ret2);
+        resolve3(ret2);
       });
     });
   }
@@ -22908,7 +24220,7 @@ var Request = /* @__PURE__ */ (function() {
     value: function send() {
       var _this = this;
       var body = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : null;
-      return new Promise(function(resolve2, reject) {
+      return new Promise(function(resolve3, reject) {
         var options = _objectSpread2(_objectSpread2(_objectSpread2({}, parse(_this._url)), _this._requestOptions), {}, {
           method: _this._method,
           headers: _objectSpread2(_objectSpread2({}, _this._requestOptions.headers || {}), _this._headers)
@@ -22926,7 +24238,7 @@ var Request = /* @__PURE__ */ (function() {
           });
           res.on("end", function() {
             var responseText = Buffer.concat(resChunks).toString("utf8");
-            resolve2(new Response(res, responseText));
+            resolve3(new Response(res, responseText));
           });
         });
         req.on("error", function(err) {
@@ -23181,9 +24493,9 @@ var Upload = /* @__PURE__ */ (function(_BaseUpload) {
 var BUNNY_TUS_ENDPOINT = "https://video.bunnycdn.com/tusupload";
 var CHUNK_SIZE = 50 * 1024 * 1024;
 async function uploadVideoToBunny(params) {
-  const { size } = await stat2(params.filePath);
+  const { size } = await stat4(params.filePath);
   const stream = createReadStream2(params.filePath);
-  await new Promise((resolve2, reject) => {
+  await new Promise((resolve3, reject) => {
     const upload = new Upload(stream, {
       endpoint: BUNNY_TUS_ENDPOINT,
       uploadSize: size,
@@ -23204,7 +24516,7 @@ async function uploadVideoToBunny(params) {
       removeFingerprintOnSuccess: true,
       onError: (error) => reject(error),
       onProgress: (uploaded, total) => params.onProgress?.(uploaded, total),
-      onSuccess: () => resolve2()
+      onSuccess: () => resolve3()
     });
     upload.start();
   });
@@ -23330,7 +24642,7 @@ function videoMimeFromName(name) {
   return "video/mp4";
 }
 var VIDEO_READY_STATES = /* @__PURE__ */ new Set(["ready", "failed"]);
-var sleep = (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
+var sleep = (ms) => new Promise((resolve3) => setTimeout(resolve3, ms));
 function registerMediaCommands(program2) {
   const media = program2.command("media").description("Upload files to the workspace media library");
   media.command("upload").description("Upload a file (image, etc.) to the media library; prints its public URL").requiredOption("--file <path>", "path to the file to upload").option("--name <name>", "display name (defaults to the file name)").option("--mime <type>", "MIME type (inferred from the file extension by default)").option("--folder <folder>", "media library folder name").option("--description <text>", "description stored on the media item").action(async (options, command) => {
@@ -23338,7 +24650,7 @@ function registerMediaCommands(program2) {
     if (!options.file) {
       throw new Error("Provide a file via --file <path>.");
     }
-    const bytes = await readFile(options.file);
+    const bytes = await readFile3(options.file);
     const name = options.name ?? basename(options.file);
     const input = {
       name,
@@ -23361,7 +24673,7 @@ function registerMediaCommands(program2) {
       if (!options.file) {
         throw new Error("Provide a video file via --file <path>.");
       }
-      const { size } = await stat3(options.file);
+      const { size } = await stat5(options.file);
       const title = options.title ?? basename(options.file);
       const mimeType = options.mime ?? videoMimeFromName(options.file);
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -24082,8 +25394,8 @@ Next: \`newsletters issues draft save ${productId} ${issue.id} --content <markdo
       );
       if (report) {
         printTable(
-          Object.entries(report.stats).map(([stat4, value]) => ({
-            stat: stat4,
+          Object.entries(report.stats).map(([stat6, value]) => ({
+            stat: stat6,
             value: String(value ?? "")
           })),
           ["stat", "value"]
@@ -24677,7 +25989,8 @@ Prices (${checkout.prices.length}):
           hidden: yesNo(p.hidden),
           saleStartsAt: p.saleStartsAt ?? "",
           saleEndsAt: p.saleEndsAt ?? "",
-          quantityLimit: p.quantityLimit ?? ""
+          // A stored 0 sells without limit, same as no limit at all.
+          quantityLimit: p.quantityLimit || "unlimited"
         })),
         [
           "id",
@@ -25431,10 +26744,33 @@ function registerOtoCommands(program2) {
 
 // src/commands/pages/index.ts
 import { existsSync as existsSync3, readFileSync as readFileSync21 } from "fs";
-import { readFile as readFile2 } from "fs/promises";
+import { readFile as readFile4 } from "fs/promises";
+var CLEAR_VALUE = "none";
+var FAMILY_STEPS = ["follow-ups", "thank-you-page", "room-page"];
+function parseClearableLink(value, flag) {
+  const trimmed = value.trim();
+  if (trimmed === CLEAR_VALUE) return null;
+  if (!/^https?:\/\/\S+$/i.test(trimmed)) {
+    throw new Error(
+      `Invalid ${flag}: ${value} (expected an http(s) link, or ${CLEAR_VALUE} to clear)`
+    );
+  }
+  return trimmed;
+}
+function buildEventInput(options) {
+  const event = {
+    ...options.eventStart !== void 0 ? { startAt: options.eventStart } : {},
+    ...options.eventTimezone !== void 0 ? { timezone: options.eventTimezone } : {},
+    ...options.eventDuration !== void 0 ? { durationMinutes: parsePositiveInt14(options.eventDuration, "--event-duration") } : {},
+    ...options.joinUrl !== void 0 ? { joinUrl: parseClearableLink(options.joinUrl, "--join-url") } : {},
+    ...options.replayUrl !== void 0 ? { replayUrl: parseClearableLink(options.replayUrl, "--replay-url") } : {},
+    ...options.liveRoom !== void 0 ? { liveRoomId: options.liveRoom.trim() === CLEAR_VALUE ? null : options.liveRoom.trim() } : {}
+  };
+  return Object.keys(event).length > 0 ? event : void 0;
+}
 async function resolveHtml2(options) {
   if (options.file) {
-    return readFile2(options.file, "utf8");
+    return readFile4(options.file, "utf8");
   }
   return options.html;
 }
@@ -25618,7 +26954,7 @@ function registerPagesCommands(program2) {
     });
   });
   pages.command("update").description(
-    "Update a page (slug, title, HTML body, cookie-banner visibility, or its tracking tools)"
+    "Update a page (slug, title, HTML body, cookie-banner visibility, its tracking tools, or a webinar page's date and links). A new --event-start moves the reminder ladder with it (send moments, the date in the copy, rungs already scheduled); --join-url changes the watch page's button at once."
   ).argument("<id>", "page id").option("--slug <slug>", "new slug").option("--title <title>", "new title").option("--file <path>", "path to a new .html file").option("--html <html>", "new inline HTML body").option("--cookie-banner", "show the workspace cookie banner on this page again").option(
     "--no-cookie-banner",
     "hide the workspace cookie banner on this page (pixels still wait for consent given elsewhere)"
@@ -25628,9 +26964,16 @@ function registerPagesCommands(program2) {
   ).option(
     "--tracking-integrations <ids>",
     "comma-separated tracking integration ids for --tracking selected (one per platform)"
+  ).option("--event-start <iso>", "webinar: start as ISO 8601 WITH offset (moves the reminders)").option("--event-timezone <tz>", "webinar: IANA timezone, with --event-start").option("--event-duration <minutes>", "webinar: length in minutes, with --event-start").option(
+    "--join-url <url>",
+    `webinar: the meeting link (ClickMeeting, Zoom, Teams, Meet); ${CLEAR_VALUE} clears it`
+  ).option("--replay-url <url>", `webinar: the recording link; ${CLEAR_VALUE} clears it`).option(
+    "--live-room <roomId>",
+    `webinar: run it on a webinar from \`live-rooms list\` (live_rooms plan feature); ${CLEAR_VALUE} detaches`
   ).action(async (id, options, command) => {
     const flags = getGlobalFlags(command);
     const html = await resolveHtml2(options);
+    const event = buildEventInput(options);
     const trackingIds = options.trackingIntegrations?.split(",").map((value) => value.trim()).filter((value) => value.length > 0);
     const trackingMode = options.tracking !== void 0 ? parseChoice5(options.tracking, TRACKING_MODES, "--tracking") : trackingIds !== void 0 ? "selected" : void 0;
     const input = {
@@ -25643,7 +26986,8 @@ function registerPagesCommands(program2) {
           mode: trackingMode,
           ...trackingIds !== void 0 ? { integrationIds: trackingIds } : {}
         }
-      } : {}
+      } : {},
+      ...event ? { event } : {}
     };
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const result = await client.updatePage(id, input);
@@ -25652,24 +26996,42 @@ function registerPagesCommands(program2) {
 `);
     });
   });
-  pages.command("publish").description("Publish a page").argument("<id>", "page id").action(async (id, _, command) => {
-    const flags = getGlobalFlags(command);
-    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
-    const result = await client.publishPage(id, true);
-    emit(flags, result, () => {
-      process.stdout.write(`Page ${result.pageId} is now ${result.status}
-`);
-    });
-  });
-  pages.command("unpublish").description("Revert a page to draft").argument("<id>", "page id").action(async (id, _, command) => {
-    const flags = getGlobalFlags(command);
-    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
-    const result = await client.publishPage(id, false);
-    emit(flags, result, () => {
-      process.stdout.write(`Page ${result.pageId} is now ${result.status}
+  const publishCommand = (verb, publish, description) => {
+    pages.command(verb).description(description).argument("<id>", "page id").option("--only-this-page", "change this page only, not its companions or site pages").option("--dry-run", "list the pages that would change; change nothing").action(
+      async (id, options, command) => {
+        const flags = getGlobalFlags(command);
+        const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+        const result = await client.publishPage(id, publish, {
+          ...options.onlyThisPage ? { scope: "page" } : {},
+          ...options.dryRun ? { dryRun: true } : {}
+        });
+        emit(flags, result, () => {
+          if (!result.dryRun) {
+            process.stdout.write(`Page ${result.pageId} is now ${result.status}
 `);
-    });
-  });
+            return;
+          }
+          const changes = result.changes ?? [];
+          process.stdout.write(
+            changes.length === 0 ? "Dry run: nothing would change.\n" : `Dry run: ${changes.length} page(s) would change (nothing changed):
+`
+          );
+          for (const change of changes) {
+            process.stdout.write(
+              `  ${change.pageId} /${change.slug} "${change.title}": ${change.status} -> ${change.nextStatus}
+`
+            );
+          }
+        });
+      }
+    );
+  };
+  publishCommand("publish", true, "Publish a page (a site's home page publishes the whole site)");
+  publishCommand(
+    "unpublish",
+    false,
+    "Revert a page to draft (a site's home page reverts the whole site)"
+  );
   pages.command("delete").description("Delete a page").argument("<id>", "page id").action(async (id, _, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -25698,13 +27060,19 @@ function registerPagesCommands(program2) {
   });
   pages.command("generate").description(
     "AI-generate a hosted DRAFT page from a brief. Consumes AI credits and runs in the background (202 + run id, ~1-5 minutes) \u2014 the page appears in `pages list` when the run finishes. Signup intents (lead-magnet / webinar / waitlist) also provision a signup form, a companion thank-you page and a DRAFT delivery automation. Facts in the brief (price, date, links) are used verbatim. Requires --confirm."
-  ).requiredOption("--intent <intent>", `what the page is for (${PAGE_INTENTS.join(" | ")})`).requiredOption("--title <title>", "page title (the slug derives from it unless --slug)").requiredOption("--brief <textOrFile>", "the brief \u2014 inline text or a path to a text file").option("--template <templateId>", "design-template seed from `pages templates`").option("--product <productId>", "grounding product (real name/prices + checkout link)").option("--checkout <checkoutId>", "override the product's default checkout as the offer").option("--form <formId>", "standalone signup form whose embed becomes the signup CTA").option("--source-url <url>", "website to start from (fetched server-side; beats --template)").option(
+  ).requiredOption("--intent <intent>", `what the page is for (${PAGE_INTENTS.join(" | ")})`).requiredOption("--title <title>", "page title (the slug derives from it unless --slug)").requiredOption("--brief <textOrFile>", "the brief \u2014 inline text or a path to a text file").option("--template <templateId>", "design-template seed from `pages templates`").option("--product <productId>", "grounding product (real name/prices + checkout link)").option("--checkout <checkoutId>", "override the product's default checkout as the offer").option(
+    "--form <formId>",
+    "standalone signup form the page renders natively as its signup section (never an iframe)"
+  ).option("--source-url <url>", "website to start from (fetched server-side; beats --template)").option(
     "--source-mode <mode>",
     `how the source site is used, required with --source-url (${SOURCE_SITE_MODES.join(" | ")})`
   ).option("--slug <slug>", "public URL slug; derived from the title when omitted").option(
     "--delivery-url <url>",
     "what the signup delivers (file URL / join link) \u2014 never printed"
-  ).option("--delivery-name <name>", "human name of the deliverable for the delivery email").option("--event-start <iso>", "webinar: event start as ISO 8601 WITH offset").option("--event-timezone <tz>", "webinar: IANA timezone, e.g. Europe/Warsaw").option("--event-duration <minutes>", "webinar: event length in minutes (default 60)").option("--event-mode <mode>", `webinar: ${EVENT_MODES2.join(" | ")} (on_demand = autowebinar)`).option("--replay-media <mediaId>", "on-demand webinar: Media Library video the room plays").option(
+  ).option("--delivery-name <name>", "human name of the deliverable for the delivery email").option("--event-start <iso>", "webinar: event start as ISO 8601 WITH offset").option("--event-timezone <tz>", "webinar: IANA timezone, e.g. Europe/Warsaw").option("--event-duration <minutes>", "webinar: event length in minutes (default 60)").option(
+    "--event-mode <mode>",
+    `webinar: ${EVENT_MODES2.join(" | ")} (on_demand = on-demand webinar, no date)`
+  ).option("--replay-media <mediaId>", "on-demand webinar: Media Library video the room plays").option(
     "--opt-in-mode <mode>",
     `signup form opt-in (${OPT_IN_MODES2.join(" | ")}; default single)`
   ).option("--form-tags <ids>", "comma-separated tag ids the auto-provisioned form applies").option(
@@ -25745,6 +27113,14 @@ function registerPagesCommands(program2) {
       emit(flags, result, () => {
         process.stdout.write(`Edited page ${pageId}.
 `);
+        const removed = result.removedCode;
+        if (removed) {
+          const sources = removed.scriptSources.length > 0 ? ` (${removed.scriptSources.join("; ")})` : "";
+          process.stdout.write(
+            `  Removed on save, NOT on the page: ${removed.scripts} script(s)${sources}, ${removed.handlers} event handler(s), ${removed.jsUrls} javascript: link(s). Put a third-party embed in the HTML yourself (\`pages update ${pageId} --file \u2026\`).
+`
+          );
+        }
         process.stdout.write(
           `  Previous HTML kept as the newest entry of \`pages revisions ${pageId}\` \u2014 undo with \`pages restore ${pageId} <revisionId> --confirm\`.
 `
@@ -25802,6 +27178,20 @@ function registerPagesCommands(program2) {
       });
     }
   );
+  pages.command("family-step").description(
+    "Build ONE missing piece of a page's family (the editor checklist's rows): follow-ups = the reminder ladder of a dated webinar page (e.g. your own page that got its date with `pages update --event-start`), thank-you-page / room-page (the watch page) = AI generations (credits). Runs in the background (1-5 min); the ladder lands as DRAFTS that `pages activate-automations` then schedules."
+  ).argument("<pageId>", "the signup / webinar registration page id").requiredOption("--step <step>", `which piece (${FAMILY_STEPS.join(" | ")})`).action(async (pageId, options, command) => {
+    const flags = getGlobalFlags(command);
+    const step = parseChoice5(options.step, FAMILY_STEPS, "--step");
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.startPageFamilyStep(pageId, { step });
+    emit(flags, result, () => {
+      process.stdout.write(
+        `Queued ${step} for page ${pageId} (run ${result.runId}). It takes 1-5 minutes` + (step === "follow-ups" ? `; then run "pages activate-automations ${pageId} --confirm" to schedule the reminders.
+` : ".\n")
+      );
+    });
+  });
   pages.command("activate-automations").description(
     "One-click activation of everything generated around a page: publishes the DRAFT delivery automation and schedules the webinar follow-up broadcasts at their stored send times. Emails will go out for real; items whose copy still carries [FILL IN] placeholders are skipped, never sent. Requires --confirm."
   ).argument("<pageId>", "page id").option("--confirm", "required \u2014 acknowledge that automations go live and emails will send").action(async (pageId, options, command) => {
@@ -25837,7 +27227,7 @@ function registerPagesCommands(program2) {
 
 // src/commands/products/index.ts
 import { readFileSync as readFileSync22 } from "fs";
-import { readFile as readFile3 } from "fs/promises";
+import { readFile as readFile5 } from "fs/promises";
 import { basename as basename2 } from "path";
 var KB_TREE_CHANGED_ERROR = "tree-changed";
 var JSON_FLAG_HINT3 = "(write it as --json=<value> \u2014 a bare --json is the global JSON-output flag)";
@@ -25972,7 +27362,7 @@ function collectRepeatable6(value, previous) {
 }
 var HTTP_URL_PATTERN2 = /^https?:\/\//i;
 async function uploadLocalFile(client, filePath) {
-  const bytes = await readFile3(filePath);
+  const bytes = await readFile5(filePath);
   const name = basename2(filePath);
   const result = await client.uploadMedia({
     name,
@@ -26321,7 +27711,7 @@ function registerProductsCommands(program2) {
     }
   );
   plans.command("backfill").description(
-    "Eagerly add plan-bundled customers to a community \u2014 creates member docs for every active customer whose effective plan includes the community. Requires --confirm."
+    "Eagerly add plan-bundled customers to a community \u2014 starts a background run that creates member docs for every active customer whose effective plan includes the community. Requires --confirm."
   ).argument("<productId>", "the parent (bundling) product id").requiredOption(
     "--community <communityProductId>",
     "the community PRODUCT id to backfill members into"
@@ -26336,8 +27726,12 @@ function registerProductsCommands(program2) {
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
       const result = await client.backfillPlanCommunityMembers(productId, options.community);
       emit(flags, result, () => {
+        if (result.status === "no-eligible-clients") {
+          process.stdout.write("Nothing to backfill: no active customer is on these plans.\n");
+          return;
+        }
         process.stdout.write(
-          `Backfill done: ${result.added} added, ${result.alreadyMembers} already members, ${result.skipped} skipped (no auth user yet \u2014 the lazy backstop covers them).
+          (result.status === "already-running" ? "The same backfill is already running" : "Backfill started in the background") + ` for ${result.eligibleClients} eligible customers (run ${result.runId}). Members appear as the run goes; customers without an auth user yet are skipped (the lazy backstop covers them).
 `
         );
       });
@@ -26462,7 +27856,7 @@ function registerProductsCommands(program2) {
       if (options.deliveryTime === void 0 !== (options.deliveryUnit === void 0)) {
         throw new Error("Pass --delivery-time and --delivery-unit together.");
       }
-      const duration = options.duration !== void 0 ? parseNonNegativeInt3(options.duration, "--duration") : void 0;
+      const duration2 = options.duration !== void 0 ? parseNonNegativeInt3(options.duration, "--duration") : void 0;
       const deliveryTimeValue = options.deliveryTime !== void 0 ? parseNonNegativeInt3(options.deliveryTime, "--delivery-time") : void 0;
       const capacity = options.capacity !== void 0 ? parseNonNegativeInt3(options.capacity, "--capacity") : void 0;
       let revisionRounds;
@@ -26486,7 +27880,7 @@ function registerProductsCommands(program2) {
         const config2 = {
           bookingMethod: bookingMethod ?? base2.bookingMethod ?? "external",
           bookingUrl: options.bookingUrl ?? base2.bookingUrl ?? null,
-          duration: duration ?? base2.duration ?? 0,
+          duration: duration2 ?? base2.duration ?? 0,
           location: options.location ?? base2.location ?? "",
           locationDetails: options.locationDetails ?? base2.locationDetails ?? null,
           confirmationMessage: options.confirmationMessage ?? base2.confirmationMessage ?? null,
@@ -27014,6 +28408,10 @@ var PROGRAM_KINDS = ["referral", "affiliate"];
 var WRITABLE_STATUSES = ["active", "inactive"];
 var ENROLLMENT_MODES = ["open", "inviteOnly", "closed"];
 var REWARD_DECISIONS = ["approve", "reject"];
+var SWITCH_VALUES = ["on", "off"];
+function parseSwitch(value, flag) {
+  return parseChoice6(value, SWITCH_VALUES, flag) === "on";
+}
 function parseChoice6(value, allowed, flag) {
   const match = allowed.find((candidate) => candidate === value);
   if (match === void 0) {
@@ -27094,6 +28492,10 @@ function printProgram(program2) {
 `);
   process.stdout.write(`  Products: ${program2.productIds.join(", ")}
 `);
+  if (program2.kind === "referral") {
+    process.stdout.write(`  Form signups count: ${program2.countFormSignups ? "on" : "off"}
+`);
+  }
   process.stdout.write(
     `  Attribution: ${program2.attribution.windowDays}-day window, coupon attribution ${program2.attribution.allowCouponAttribution ? "on" : "off"}, two-sided discount ${program2.attribution.twoSidedDiscountId ?? "none"}
 `
@@ -27154,6 +28556,9 @@ function buildCreateInput(options) {
   if (options.status !== void 0) {
     input.status = parseChoice6(options.status, WRITABLE_STATUSES, "--status");
   }
+  if (options.countFormSignups !== void 0) {
+    input.countFormSignups = parseSwitch(options.countFormSignups, "--count-form-signups");
+  }
   return input;
 }
 function buildUpdateInput2(options) {
@@ -27166,9 +28571,12 @@ function buildUpdateInput2(options) {
   if (options.enrollment !== void 0) {
     input.enrollment = parseChoice6(options.enrollment, ENROLLMENT_MODES, "--enrollment");
   }
+  if (options.countFormSignups !== void 0) {
+    input.countFormSignups = parseSwitch(options.countFormSignups, "--count-form-signups");
+  }
   if (Object.keys(input).length === 0) {
     throw new Error(
-      "Nothing to update \u2014 pass --name, --status, --product, --enrollment or --json <config>."
+      "Nothing to update \u2014 pass --name, --status, --product, --enrollment, --count-form-signups or --json <config>."
     );
   }
   return input;
@@ -27276,6 +28684,9 @@ Failed deliveries (${result.failedDeliveries.length})
   referrals.command("create").description(
     "Create a program over one or more products (both kinds need the Growth plan). Deep config (milestones, commission, attribution) goes in --json; flat flags win over --json keys."
   ).requiredOption("--kind <kind>", `program kind (${PROGRAM_KINDS.join(" | ")})`).requiredOption("--name <name>", "program name").requiredOption("--product <ids>", "comma-separated product ids whose purchases count").option("--enrollment <mode>", `how participants join (${ENROLLMENT_MODES.join(" | ")})`).option("--status <status>", `initial status (${WRITABLE_STATUSES.join(" | ")})`).option(
+    "--count-form-signups <on|off>",
+    "referral kind: confirmed form signups of new contacts with a participant code count too (default off)"
+  ).option(
     "--json <fileOrJson>",
     "inline JSON object or .json path with `milestones`, `commission` and/or `attribution` (write it as --json=<value> \u2014 a bare --json is the global JSON-output flag)"
   ).action(async (options, command) => {
@@ -27291,6 +28702,9 @@ Failed deliveries (${result.failedDeliveries.length})
   referrals.command("update").description(
     "Update a program. --product and --json `milestones` are FULL replaces (read the program first); flat flags win over --json keys. Activating (--status active) needs the Growth plan. Use `referrals archive` to archive."
   ).argument("<programId>", "program id").option("--name <name>", "program name").option("--status <status>", `status (${WRITABLE_STATUSES.join(" | ")})`).option("--product <ids>", "comma-separated product ids (full replace)").option("--enrollment <mode>", `how participants join (${ENROLLMENT_MODES.join(" | ")})`).option(
+    "--count-form-signups <on|off>",
+    "referral kind: confirmed form signups of new contacts with a participant code count too (default off)"
+  ).option(
     "--json <fileOrJson>",
     "inline JSON object or .json path with `milestones`, `commission` and/or `attribution` (write it as --json=<value> \u2014 a bare --json is the global JSON-output flag)"
   ).action(async (programId, options, command) => {
@@ -27397,9 +28811,9 @@ function parseMinorUnits(value, flag) {
   }
   return n;
 }
-var CONDITION_FLAGS_HELP = "--has-tag/--without-tag, --has-any-tag/--has-none-tag, --owns/--not-owns, --owns-direct/--not-owns-direct, --spent-gte/--spent-lte, --subscription, or --json-file";
+var CONDITION_FLAGS_HELP = "--has-tag/--without-tag, --has-any-tag/--has-all-tag/--has-none-tag, --owns/--not-owns, --owns-direct/--not-owns-direct, --spent-gte/--spent-lte, --subscription, --referral-participant/--not-referral-participant, or --json-file";
 function resolveConditions(options) {
-  const hasFlagConditions = options.hasTag.length > 0 || options.withoutTag.length > 0 || options.hasAnyTag.length > 0 || options.hasNoneTag.length > 0 || options.owns.length > 0 || options.notOwns.length > 0 || options.ownsDirect.length > 0 || options.notOwnsDirect.length > 0 || options.spentGte !== void 0 || options.spentLte !== void 0 || options.subscription !== void 0;
+  const hasFlagConditions = options.hasTag.length > 0 || options.withoutTag.length > 0 || options.hasAnyTag.length > 0 || options.hasAllTag.length > 0 || options.hasNoneTag.length > 0 || options.owns.length > 0 || options.notOwns.length > 0 || options.ownsDirect.length > 0 || options.notOwnsDirect.length > 0 || options.spentGte !== void 0 || options.spentLte !== void 0 || options.subscription !== void 0 || options.referralParticipant.length > 0 || options.notReferralParticipant.length > 0;
   if (options.jsonFile !== void 0) {
     if (hasFlagConditions) {
       throw new Error("Use either condition flags or --json-file, not both.");
@@ -27429,6 +28843,9 @@ function resolveConditions(options) {
   if (options.hasAnyTag.length > 0) {
     conditions.push({ field: "tag", operator: "has-any", tagIds: options.hasAnyTag });
   }
+  if (options.hasAllTag.length > 0) {
+    conditions.push({ field: "tag", operator: "has-all", tagIds: options.hasAllTag });
+  }
   if (options.hasNoneTag.length > 0) {
     conditions.push({ field: "tag", operator: "has-none", tagIds: options.hasNoneTag });
   }
@@ -27473,6 +28890,12 @@ function resolveConditions(options) {
   if (options.notClicked !== void 0) {
     conditions.push({ field: "campaign", operator: "not-clicked", campaignId: options.notClicked });
   }
+  for (const programId of options.referralParticipant) {
+    conditions.push({ field: "referralProgram", operator: "participant", programId });
+  }
+  for (const programId of options.notReferralParticipant) {
+    conditions.push({ field: "referralProgram", operator: "not-participant", programId });
+  }
   return conditions;
 }
 function withConditionOptions(command) {
@@ -27491,6 +28914,11 @@ function withConditionOptions(command) {
     "client carries AT LEAST ONE of these tags (repeat the flag; one OR condition, max 10 ids) - one send to several tags without double-mailing",
     collectRepeatable7,
     []
+  ).option(
+    "--has-all-tag <tagId>",
+    "client carries EVERY ONE of these tags (repeat the flag; one condition, max 10 ids)",
+    collectRepeatable7,
+    []
   ).option(
     "--has-none-tag <tagId>",
     "client carries NONE of these tags (repeat the flag; one condition, max 10 ids)",
@@ -27528,6 +28956,16 @@ function withConditionOptions(command) {
   ).option(
     "--not-clicked <campaignId>",
     "received this SENT campaign and never clicked a link in it"
+  ).option(
+    "--referral-participant <programId>",
+    "client is an ACTIVE participant of this referral program (rprog_\u2026; blocked ones do not count; repeatable)",
+    collectRepeatable7,
+    []
+  ).option(
+    "--not-referral-participant <programId>",
+    "client is NOT an active participant of this referral program (repeatable)",
+    collectRepeatable7,
+    []
   ).option(
     "--json-file <path>",
     "read the conditions as a JSON array from a file instead of flags"
@@ -27537,7 +28975,12 @@ function describeCondition(condition) {
   switch (condition.field) {
     case "tag":
       if ("tagIds" in condition) {
-        return `${condition.operator === "has-any" ? "has any of" : "has none of"} tags ${condition.tagIds.join(", ")}`;
+        const listWords = {
+          "has-any": "has any of",
+          "has-all": "has all of",
+          "has-none": "has none of"
+        };
+        return `${listWords[condition.operator]} tags ${condition.tagIds.join(", ")}`;
       }
       return `${condition.operator === "has" ? "has" : "lacks"} tag ${condition.tagId}`;
     case "product":
@@ -27550,12 +28993,17 @@ function describeCondition(condition) {
       return `last email engagement ${condition.operator === "within" ? "within" : "not within"} the last ${condition.days} days`;
     case "lastOrderAt":
       return `last paid order ${condition.operator === "within" ? "within" : "not within"} the last ${condition.days} days`;
+    case "emailSubscribedAt":
+    case "addedAt":
+      return `${condition.field === "emailSubscribedAt" ? "subscribed to the newsletter" : "added"} ${condition.operator === "within" ? `in the last ${condition.days} days` : `at least ${condition.days} days ago`}`;
     case "smsSubscription":
       return `sms consent is ${condition.status}`;
     case "phoneNumber":
       return condition.operator === "has" ? "has a phone number" : "has no phone number";
     case "campaign":
       return `${condition.operator.replace("-", " ")} campaign ${condition.campaignId}`;
+    case "referralProgram":
+      return `${condition.operator === "participant" ? "takes part in" : "does not take part in"} referral program ${condition.programId}`;
     case "email":
       return `email ${condition.operator === "is-any" ? "is one of" : "is none of"} ${condition.emails.join(", ")} (set in the dashboard)`;
   }
@@ -27915,7 +29363,7 @@ function withBrandingHint(error) {
 }
 var SECTION_UPDATED = (section) => `Updated site ${section} settings.
 `;
-function registerSiteCommands(program2) {
+function registerSiteCommands2(program2) {
   const site = program2.command("site").description(
     "Manage the public site \u2014 platform settings (general, theme, branding, main page, privacy, portal, access policy, communication), activation, slug, custom domains, storefront layout and legal documents"
   );
@@ -28282,7 +29730,9 @@ function registerSiteCommands(program2) {
     const result = await client.verifySiteDomains(list);
     emit(flags, result, () => printDomainResults(result.results));
   });
-  const storefront = site.command("storefront").description("The product storefront layout: sections, preset, theme mode, footer");
+  const storefront = site.command("storefront").description(
+    "The product storefront layout: sections, preset, theme mode, profile hero, footer"
+  );
   storefront.command("get").description("Storefront config (sections table; `--json` for the full config)").action(async (_options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -28293,7 +29743,7 @@ function registerSiteCommands(program2) {
     "REPLACE the whole storefront config with --json=<file|inline> (read `site storefront get --json` first and edit that)"
   ).option(
     "--json <fileOrJson>",
-    "inline JSON object or .json path \u2014 sections (required), layout, columns, preset, mode, overrides, looseProductOrder, heading, subheading, footer"
+    "inline JSON object or .json path \u2014 sections (required), layout, columns, preset, mode, overrides, looseProductOrder, heading, subheading, hero, footer"
   ).action(async (options, command) => {
     const flags = getGlobalFlags(command);
     if (options.json === void 0) {
@@ -28370,6 +29820,7 @@ function printStorefront(config) {
       { field: "columns", value: config.columns ?? "" },
       { field: "heading", value: config.heading ?? "" },
       { field: "subheading", value: config.subheading ?? "" },
+      { field: "hasHero", value: yesNo2(Boolean(config.hero)) },
       { field: "hasOverrides", value: yesNo2(Boolean(config.overrides)) },
       { field: "hasFooter", value: yesNo2(Boolean(config.footer)) },
       { field: "looseProductOrder", value: (config.looseProductOrder ?? []).length }
@@ -28384,10 +29835,11 @@ function printStorefront(config) {
       layout: section.layout,
       mode: section.mode,
       products: section.mode === "manual" ? (section.productIds ?? []).length : "",
+      links: section.mode === "manual" ? (section.items ?? []).filter((item) => item.type === "link").length : "",
       rule: section.rule ? `${section.rule.type}${section.rule.productType ? `:${section.rule.productType}` : ""}${section.rule.tag ? `:${section.rule.tag}` : ""}` : "",
       sort: section.sort ?? ""
     })),
-    ["id", "title", "layout", "mode", "products", "rule", "sort"]
+    ["id", "title", "layout", "mode", "products", "links", "rule", "sort"]
   );
   process.stdout.write(
     "\nFull config to edit and send back: `zanfia --json site storefront get`.\n"
@@ -28690,7 +30142,210 @@ Next page: --cursor ${page.nextCursor}
   );
 }
 
+// src/commands/social/channels.ts
+var clientOf = (command) => {
+  const flags = getGlobalFlags(command);
+  return { flags, client: createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose }) };
+};
+var parseCount = (value, flag) => {
+  if (value === void 0) return void 0;
+  const parsed = Number.parseInt(value, 10);
+  if (!Number.isInteger(parsed) || parsed < 1 || parsed > 50) {
+    throw new Error(`${flag} must be an integer between 1 and 50.`);
+  }
+  return parsed;
+};
+var count = (value) => value === null || value === void 0 ? "-" : value.toLocaleString("en-US");
+var watchTime = (minutes2) => `${Math.floor(minutes2 / 60)}h ${String(Math.round(minutes2 % 60)).padStart(2, "0")}m`;
+var duration = (seconds) => `${Math.floor(seconds / 60)}:${String(Math.round(seconds % 60)).padStart(2, "0")}`;
+var videoRows = (videos) => videos.map((v) => ({
+  videoId: v.videoId,
+  when: (v.liveStartedAt ?? v.publishedAt).slice(0, 16).replace("T", " "),
+  live: v.liveStartedAt ? "live" : "",
+  views: count(v.viewCount),
+  likes: count(v.likeCount),
+  comments: count(v.commentCount),
+  title: v.title.length > 50 ? `${v.title.slice(0, 47)}\u2026` : v.title
+}));
+var VIDEO_COLUMNS = ["videoId", "when", "live", "views", "likes", "comments", "title"];
+var write = (line) => {
+  process.stdout.write(`${line}
+`);
+};
+function registerSocialChannelCommands(social) {
+  const youtube = social.command("youtube").description("Connected YouTube channel: stats, analytics, videos, transcripts");
+  youtube.command("stats").description("Channel counters + the 12 latest uploads (lives included)").action(async (_, command) => {
+    const { flags, client } = clientOf(command);
+    const response = await client.getYouTubeChannel();
+    emit(flags, response, () => {
+      const { channel } = response;
+      write(`${channel.title ?? channel.channelId}`);
+      write(`  Subscribers: ${count(channel.subscriberCount)}`);
+      write(`  Views: ${count(channel.viewCount)}`);
+      write(`  Videos: ${count(channel.videoCount)}`);
+      write("");
+      printTable(videoRows(response.recentVideos), VIDEO_COLUMNS);
+    });
+  });
+  youtube.command("analytics").description("Last 28 days of YouTube Analytics (needs the analytics grant)").action(async (_, command) => {
+    const { flags, client } = clientOf(command);
+    const response = await client.getYouTubeChannelAnalytics();
+    emit(flags, response, () => {
+      const { summary } = response;
+      write(`YouTube Analytics ${summary.startDate} \u2192 ${summary.endDate}`);
+      write(`  Views: ${count(summary.views)}`);
+      write(`  Watch time: ${watchTime(summary.watchTimeMinutes)}`);
+      write(`  Average view duration: ${duration(summary.averageViewDurationSeconds)}`);
+      write(`  Subscribers: +${summary.subscribersGained} / -${summary.subscribersLost}`);
+    });
+  });
+  youtube.command("videos").description("Uploads newest first (lives included) with public counters").option("--max <n>", "videos per page (default 24, max 50)").option("--page-token <token>", "nextPageToken of the previous page").action(async (options, command) => {
+    const { flags, client } = clientOf(command);
+    const maxResults = parseCount(options.max, "--max");
+    const response = await client.listYouTubeVideos({
+      ...maxResults !== void 0 ? { maxResults } : {},
+      ...options.pageToken ? { pageToken: options.pageToken } : {}
+    });
+    emit(flags, response, () => {
+      printTable(videoRows(response.videos), VIDEO_COLUMNS);
+      if (response.nextPageToken) write(`
+Next page: --page-token ${response.nextPageToken}`);
+    });
+  });
+  youtube.command("video").description("One video: views, likes, comments + watch time and average view duration").argument("<videoId>", "YouTube video id (watch?v=<id>) of a connected-channel video").action(async (videoId, _, command) => {
+    const { flags, client } = clientOf(command);
+    const response = await client.getYouTubeVideo(videoId);
+    emit(flags, response, () => {
+      const { video, analytics } = response;
+      write(`${video.title} (${video.videoId})`);
+      if (video.liveStartedAt) write(`  Live started: ${video.liveStartedAt}`);
+      else write(`  Published: ${video.publishedAt}`);
+      write(`  Views (public counter): ${count(video.viewCount)}`);
+      write(`  Likes: ${count(video.likeCount)}   Comments: ${count(video.commentCount)}`);
+      if (analytics.status === "ok" /* Ok */) {
+        write(`  Analytics views: ${count(analytics.views)}`);
+        write(`  Watch time: ${watchTime(analytics.watchTimeMinutes)}`);
+        write(`  Average view duration: ${duration(analytics.averageViewDurationSeconds)}`);
+      } else {
+        write(`  Analytics: ${analytics.message}`);
+      }
+    });
+  });
+  youtube.command("transcript").description("Plain-text transcript from the manually created captions of a video").argument("<videoId>", "YouTube video id of a connected-channel video").action(async (videoId, _, command) => {
+    const { flags, client } = clientOf(command);
+    const response = await client.getYouTubeVideoTranscript(videoId);
+    emit(flags, response, () => {
+      if (response.status === "ok" /* Ok */) {
+        write(response.transcript);
+        return;
+      }
+      write(
+        response.reason === "no-manual-captions" /* NoManualCaptions */ ? "No downloadable captions: YouTube only hands out manually created ones. Upload the file to the media library and transcribe it there instead." : "This connection cannot read captions yet: reconnect the channel in the dashboard."
+      );
+    });
+  });
+  const instagram = social.command("instagram").description("Connected Instagram account: insights and posts");
+  instagram.command("insights").description("Reach and views over the last 30 days").action(async (_, command) => {
+    const { flags, client } = clientOf(command);
+    const response = await client.getInstagramInsights();
+    emit(flags, response, () => {
+      if (!response.available) {
+        write(`Insights unavailable: ${response.reason}`);
+        return;
+      }
+      write("Instagram, last 30 days");
+      write(`  Reach: ${count(response.reach)}`);
+      write(`  Views: ${count(response.views)}`);
+    });
+  });
+  instagram.command("media").description("Recent posts and reels newest first").option("--limit <n>", "items per page (default 24, max 50)").option("--after <cursor>", "nextCursor of the previous page").action(async (options, command) => {
+    const { flags, client } = clientOf(command);
+    const limit = parseCount(options.limit, "--limit");
+    const response = await client.listInstagramMedia({
+      ...limit !== void 0 ? { limit } : {},
+      ...options.after ? { after: options.after } : {}
+    });
+    emit(flags, response, () => {
+      printTable(
+        response.items.map((item) => ({
+          id: item.id,
+          when: item.timestamp.slice(0, 16).replace("T", " "),
+          type: item.mediaProductType ?? item.mediaType,
+          likes: count(item.likeCount),
+          comments: count(item.commentsCount),
+          caption: (item.caption ?? "").replace(/\s+/g, " ").slice(0, 50)
+        })),
+        ["id", "when", "type", "likes", "comments", "caption"]
+      );
+      if (response.nextCursor) write(`
+Next page: --after ${response.nextCursor}`);
+    });
+  });
+  social.command("threads").description("Connected Threads profile").command("posts").description("Recent Threads posts newest first").action(async (_, command) => {
+    const { flags, client } = clientOf(command);
+    const response = await client.listThreadsPosts();
+    emit(flags, response, () => {
+      printTable(
+        response.items.map((post) => ({
+          id: post.id,
+          when: (post.timestamp ?? "").slice(0, 16).replace("T", " "),
+          text: (post.text ?? "").replace(/\s+/g, " ").slice(0, 60),
+          permalink: post.permalink ?? ""
+        })),
+        ["id", "when", "text", "permalink"]
+      );
+    });
+  });
+  social.command("snapshot").description("Latest weekly audience snapshot: followers per channel (read-only)").action(async (_, command) => {
+    const { flags, client } = clientOf(command);
+    const response = await client.getLatestSocialSnapshot();
+    emit(flags, response, () => {
+      const { snapshot } = response;
+      if (!snapshot) {
+        write("No audience snapshot in the last 90 days (capture one in the dashboard).");
+        return;
+      }
+      write(`Audience snapshot ${snapshot.date}`);
+      printTable(
+        Object.entries(snapshot.counts).map(([channel, followers]) => ({
+          channel,
+          followers: count(followers),
+          source: snapshot.source[channel] ?? ""
+        })),
+        ["channel", "followers", "source"]
+      );
+      for (const [channel, reason] of Object.entries(snapshot.errors)) {
+        write(`  ${channel}: not captured (${reason})`);
+      }
+    });
+  });
+}
+
 // src/commands/social/index.ts
+function updateInput(options) {
+  const targets = splitList(options.targets);
+  const mediaIds = splitList(options.media);
+  if (options.media !== void 0 && options.clearMedia) {
+    throw new Error("Pass either --media or --clear-media, not both.");
+  }
+  if (options.firstComment !== void 0 && options.clearFirstComment) {
+    throw new Error("Pass either --first-comment or --clear-first-comment, not both.");
+  }
+  const input = {
+    ...options.text !== void 0 ? { text: options.text } : {},
+    ...targets.length > 0 ? { targets } : {},
+    ...mediaIds.length > 0 ? { mediaIds } : {},
+    ...options.clearMedia ? { mediaIds: [] } : {},
+    ...options.firstComment !== void 0 ? { firstComment: options.firstComment } : {},
+    ...options.clearFirstComment ? { firstComment: null } : {}
+  };
+  if (Object.keys(input).length === 0) {
+    throw new Error(
+      "Nothing to update: pass --text, --targets, --media, --clear-media, --first-comment or --clear-first-comment."
+    );
+  }
+  return input;
+}
 var splitList = (value) => (value ?? "").split(",").map((item) => item.trim()).filter(Boolean);
 function composeInput(options) {
   if (!options.text) {
@@ -28711,7 +30366,9 @@ function composeInput(options) {
   };
 }
 function registerSocialCommands(program2) {
-  const social = program2.command("social").description("Social media posts \u2014 connected accounts, drafts, scheduling, publishing");
+  const social = program2.command("social").description(
+    "Social media \u2014 connected accounts, posts (drafts, scheduling, publishing) and the stats of the connected accounts (youtube / instagram / threads / snapshot)"
+  );
   social.command("accounts").description("List connected social accounts (the values to pass as --targets)").action(async (_, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -28723,13 +30380,14 @@ function registerSocialCommands(program2) {
           network: a.network,
           label: a.label,
           schedule: a.supportsScheduling ? "yes" : "no",
-          publishNow: a.supportsImmediatePublish ? "yes" : "no"
+          publishNow: a.supportsImmediatePublish ? "yes" : "no",
+          firstComment: a.firstCommentNeedsReconnect ? "reconnect" : ""
         })),
-        ["target", "network", "label", "schedule", "publishNow"]
+        ["target", "network", "label", "schedule", "publishNow", "firstComment"]
       );
     });
   });
-  social.command("posts").description("List social posts (drafts, scheduled, published) newest first").option("--status <status>", "draft | scheduled | published | failed").option("--limit <n>", "max rows (default 25, max 100)").action(async (options, command) => {
+  social.command("posts").description("List social posts (drafts, scheduled, published) newest first").option("--status <status>", "draft | scheduled | published | partially_failed | failed").option("--limit <n>", "max rows (default 25, max 100)").action(async (options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const response = await client.listSocialPosts({
@@ -28820,6 +30478,44 @@ function registerSocialCommands(program2) {
       }
     });
   });
+  social.command("update").description(
+    "Edit a draft or scheduled post (a scheduled one stays at its time); unset options keep their value"
+  ).argument("<id>", "post id").option("--text <text>", "new post text").option("--targets <list>", "comma-separated targets (see `social accounts`)").option(
+    "--media <ids>",
+    "comma-separated Media Library ids, in slide order (replaces the media)"
+  ).option("--clear-media", "remove all media").option("--first-comment <text>", "new first comment").option("--clear-first-comment", "remove the first comment").action(async (id, options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const post = await client.updateSocialPost(id, updateInput(options));
+    emit(flags, post, () => {
+      process.stdout.write(
+        `Updated ${post.id} (${post.status}${post.scheduledAt ? `, ${post.scheduledAt}` : ""})
+`
+      );
+    });
+  });
+  social.command("unschedule").description("Move a scheduled post back to drafts (it will not be published at its time)").argument("<id>", "scheduled post id").action(async (id, _, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const post = await client.unscheduleSocialPost(id);
+    emit(flags, post, () => {
+      process.stdout.write(`Moved ${post.id} back to drafts
+`);
+    });
+  });
+  social.command("delete").description(
+    "Delete a post (draft, scheduled, or a published post's record: it stays live on the network). Requires --confirm."
+  ).argument("<id>", "post id").option("--confirm", "required \u2014 acknowledge the post is deleted for good").action(async (id, options, command) => {
+    requireConfirm(options.confirm, `delete social post ${id}`);
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.deleteSocialPost(id);
+    emit(flags, result, () => {
+      process.stdout.write(`Deleted ${result.postId} (was ${result.previousStatus})
+`);
+    });
+  });
+  registerSocialChannelCommands(social);
 }
 
 // src/commands/stats/index.ts
@@ -30271,6 +31967,16 @@ var GRAPH_NODE_KINDS = /* @__PURE__ */ new Set([
   "delay"
 ]);
 var GRAPH_CONDITION_BRANCHES = ["true", "false"];
+var GRAPH_GOAL_LABELS = {
+  tagAdded: "gets a tag",
+  anyProductPurchased: "buys any product",
+  productPurchased: "buys a chosen product"
+};
+function describeGoal(goal) {
+  const ids = goal.tagIds ?? goal.productIds ?? [];
+  const label = GRAPH_GOAL_LABELS[goal.kind] ?? goal.kind;
+  return `Goal: ${label}${ids.length > 0 ? ` (${ids.join(", ")})` : ""}, the run ends at once`;
+}
 var EXCERPT_LENGTH = 120;
 function isRecord3(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
@@ -30420,6 +32126,10 @@ function walkGraph(graph, templateNames) {
     lines.push("Not reachable from any trigger (never runs):");
     for (const node of orphans) lines.push(`  ${describeNode(node, templateNames)}`);
   }
+  if (graph.goal) {
+    if (lines.length > 0) lines.push("");
+    lines.push(describeGoal(graph.goal));
+  }
   return lines;
 }
 function describeNodeRef(node) {
@@ -30519,8 +32229,13 @@ function describeEmail(node, templateNames) {
 }
 function describeCondition2(config) {
   const rules = Array.isArray(config.rules) ? config.rules.filter(isRecord3) : [];
-  if (rules.length === 0) return "(no rules)";
-  return rules.map(describeRule).join(" AND ");
+  const groups2 = Array.isArray(config.groups) ? config.groups.filter(isRecord3) : [];
+  if (rules.length === 0 && groups2.length === 0) return "(no rules)";
+  const match = optionalString(config.match);
+  return [
+    ...rules.map(describeRule),
+    ...groups2.map((group) => `(${describeCondition2(group)})`)
+  ].join(match === "any" ? " OR " : " AND ");
 }
 function describeRule(rule) {
   const field = optionalString(rule.field) ?? "?";
@@ -30598,7 +32313,7 @@ function printLogins(profiles) {
     const row = toLoginRow(profile);
     const name = row.workspaceName ?? "(unnamed)";
     const slug = row.workspaceSlug ? ` [${row.workspaceSlug}]` : "";
-    const member = row.kind === "member" ? " (community member)" : "";
+    const member = row.kind === "member" ? " (community member)" : row.kind === "agent" ? " (community agent key)" : "";
     const expires = row.expiresAt ? `, expires ${row.expiresAt.slice(0, 10)}` : "";
     process.stdout.write(
       `${row.active ? "*" : " "} ${name}${slug}${member} - ${row.workspaceId ?? row.key}${row.userEmail ? `, ${row.userEmail}` : ""}${expires}
@@ -30763,8 +32478,8 @@ function applyShortHelp(program2) {
 
 // src/program.ts
 function resolveCliVersion() {
-  if ("0.10.0".length > 0) {
-    return "0.10.0";
+  if ("0.21.0".length > 0) {
+    return "0.21.0";
   }
   try {
     const raw = readFileSync28(new URL("../package.json", import.meta.url), "utf8");
@@ -30791,13 +32506,14 @@ Signing in \u2014 two roles, two consent pages:
   ${programName} login
       Creator (workspace) login. Opens the consent page in the Zanfia dashboard.
       Grants the full Workspace API: products, clients, orders, stats, \u2026
-  ${programName} login --address https://<creator-platform-url>
+  ${programName} login --address https://<creator-platform-url> [--read-only]
       Community member login. Opens the consent page on that creator's platform.
-      Grants the Community API only: communities, posts, comments.
+      Grants the Community API only: communities, posts, comments. --read-only
+      gets a key that reads and summarizes but never posts.
   ${programName} auth set-key --api-url <api-community-url> <key>
       Member alternative without a browser: paste the key generated on the
-      creator's platform under Settings \u2192 Developer.
-  ${programName} join <handle>
+      creator's platform under Settings \u2192 AI agents.
+  ${programName} join <handle> [--read-only]
       Join a public community from the terminal: emailed 6-digit code, then a
       member key is saved \u2014 no account or browser needed. Try: join crew-of-one
 `
@@ -30811,7 +32527,7 @@ Signing in \u2014 two roles, two consent pages:
   registerOffersCommands(program2);
   registerCheckoutSettingsCommands(program2);
   registerIntegrationsCommands(program2);
-  registerSiteCommands(program2);
+  registerSiteCommands2(program2);
   registerEmailsCommands(program2);
   registerOtoCommands(program2);
   registerBumpsCommands(program2);
@@ -30841,6 +32557,7 @@ Signing in \u2014 two roles, two consent pages:
   registerPagesCommands(program2);
   registerSocialCommands(program2);
   registerMediaCommands(program2);
+  registerFilesCommands(program2);
   applyGlobalOptions(program2);
   applyShortHelp(program2);
   return program2;