@zanfia/cli 0.3.47 → 0.3.52

package/dist/index.js

@@ -980,7 +980,7 @@ var require_command = __commonJS({
     var { Help: Help2 } = require_help();
     var { Option: Option2, DualOptions } = require_option();
     var { suggestSimilar } = require_suggestSimilar();
-    var Command3 = class _Command extends EventEmitter {
+    var Command4 = class _Command extends EventEmitter {
       /**
        * Initialize a new `Command`.
        *
@@ -3006,7 +3006,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
         return arg;
       });
     }
-    exports.Command = Command3;
+    exports.Command = Command4;
   }
 });
 
@@ -3015,15 +3015,15 @@ var require_commander = __commonJS({
   "node_modules/commander/index.js"(exports) {
     "use strict";
     var { Argument: Argument2 } = require_argument();
-    var { Command: Command3 } = require_command();
+    var { Command: Command4 } = require_command();
     var { CommanderError: CommanderError2, InvalidArgumentError: InvalidArgumentError2 } = require_error();
     var { Help: Help2 } = require_help();
     var { Option: Option2 } = require_option();
-    exports.program = new Command3();
-    exports.createCommand = (name) => new Command3(name);
+    exports.program = new Command4();
+    exports.createCommand = (name) => new Command4(name);
     exports.createOption = (flags, description) => new Option2(flags, description);
     exports.createArgument = (name, description) => new Argument2(name, description);
-    exports.Command = Command3;
+    exports.Command = Command4;
     exports.Option = Option2;
     exports.Argument = Argument2;
     exports.Help = Help2;
@@ -4004,8 +4004,8 @@ var require_lodash3 = __commonJS({
     }
     var stringToPath = memoize(function(string) {
       var result = [];
-      toString(string).replace(rePropName, function(match, number, quote, string2) {
-        result.push(quote ? string2.replace(reEscapeChar, "$1") : number || match);
+      toString(string).replace(rePropName, function(match, number, quote2, string2) {
+        result.push(quote2 ? string2.replace(reEscapeChar, "$1") : number || match);
       });
       return result;
     });
@@ -5793,8 +5793,8 @@ var require_graceful_fs = __commonJS({
       fs3.createReadStream = createReadStream3;
       fs3.createWriteStream = createWriteStream;
       var fs$readFile = fs3.readFile;
-      fs3.readFile = readFile3;
-      function readFile3(path2, options, cb) {
+      fs3.readFile = readFile4;
+      function readFile4(path2, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
         return go$readFile(path2, options, cb);
@@ -6901,7 +6901,7 @@ var {
 } = import_index.default;
 
 // src/program.ts
-import { readFileSync as readFileSync26 } from "fs";
+import { readFileSync as readFileSync28 } from "fs";
 
 // src/utils/config.ts
 import { mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
@@ -6918,8 +6918,17 @@ var backendDefaults = {
   memberExchangeUrl: true ? orUndefined("https://europe-central2-mailingr-54736.cloudfunctions.net/users-v1/member/cli/auth/exchange") : void 0,
   usersUrl: true ? orUndefined("https://europe-central2-mailingr-54736.cloudfunctions.net/users-v1") : void 0,
   /** Firebase web API key — a public client identifier, not a secret. */
-  firebaseApiKey: true ? orUndefined("AIzaSyAcbScoToLCbdhVYMCilqvLn9f7RYsG2XU") : void 0
+  firebaseApiKey: true ? orUndefined("AIzaSyAcbScoToLCbdhVYMCilqvLn9f7RYsG2XU") : void 0,
+  /**
+   * Public platform origin that serves the page widgets (`zanfia-page-forms.js`)
+   * and their `/api/*` endpoints — what an embed snippet points at.
+   */
+  platformUrl: true ? orUndefined("https://zanfia.co") : void 0
 };
+function resolvePlatformUrl() {
+  const raw = process.env.ZANFIA_PLATFORM_URL || backendDefaults.platformUrl || "https://zanfia.co";
+  return raw.replace(/\/+$/, "");
+}
 function readCredentials() {
   try {
     const raw = readFileSync(CREDENTIALS_FILE, "utf8");
@@ -7996,6 +8005,94 @@ function createMockClient() {
     async getConversionTrackingHealth() {
       return { since: (/* @__PURE__ */ new Date()).toISOString(), integrations: [] };
     },
+    async getIntegrationsOverview() {
+      return {
+        emailClients: [],
+        metaConversionApi: [],
+        conversionTrackingIntegrationsCount: 0,
+        invoicesClients: [],
+        payments: {
+          stripe: false,
+          payU: false,
+          tpay: false,
+          payNow: false,
+          przelewy24: false,
+          paypal: false,
+          dodo: false,
+          manual: null
+        },
+        sms: { defaultProvider: null, twilio: null, smsapi: null }
+      };
+    },
+    async connectEmailClient() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async disconnectEmailClient() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async refreshEmailClientLists() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async connectMetaConversionApi() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async disconnectMetaConversionApi() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async configureManualPayment() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async disconnectManualPayment() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async connectInvoicesClient() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async disconnectInvoicesClient() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async connectPaymentGateway() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async disconnectPaymentGateway() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async setTpayRecurringBlik() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async connectTwilio() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async disconnectTwilio() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async connectSmsApi() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async disconnectSmsApi() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async refreshSmsApiSenders() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async setDefaultSmsApiSender() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async setDefaultSmsProvider() {
+      throw new ApiError(501, "integrations are not available in mock mode");
+    },
+    async listConversionTrackingIntegrations() {
+      return { defaultIntegrationIds: [], integrations: [] };
+    },
+    async upsertConversionTrackingIntegration() {
+      throw new ApiError(501, "conversion-tracking integrations are not available in mock mode");
+    },
+    async removeConversionTrackingIntegration() {
+      throw new ApiError(501, "conversion-tracking integrations are not available in mock mode");
+    },
+    async setDefaultConversionTracking() {
+      throw new ApiError(501, "conversion-tracking integrations are not available in mock mode");
+    },
     async listCommunities() {
       return mockBackend.listCommunities();
     },
@@ -8933,7 +9030,10 @@ function createHttpClient(config) {
       "GET",
       productId ? `/checkouts?productId=${encodeURIComponent(productId)}` : "/checkouts"
     ),
-    getCheckout: (id) => request("GET", `/checkouts/${encodeURIComponent(id)}`),
+    getCheckout: (id, options) => request(
+      "GET",
+      options?.full ? `/checkouts/${encodeURIComponent(id)}?include=full` : `/checkouts/${encodeURIComponent(id)}`
+    ),
     createCheckout: (input) => request("POST", "/checkouts", input),
     updateCheckout: (id, input) => request("PATCH", `/checkouts/${encodeURIComponent(id)}`, input),
     publishCheckout: (id, active) => request("POST", `/checkouts/${encodeURIComponent(id)}/publish`, { active }),
@@ -9195,6 +9295,33 @@ function createHttpClient(config) {
       "GET",
       `/conversion-tracking/health${sinceDays !== void 0 ? `?sinceDays=${sinceDays}` : ""}`
     ),
+    getIntegrationsOverview: () => request("GET", "/integrations"),
+    connectEmailClient: (input) => request("POST", "/integrations/email-clients", input),
+    disconnectEmailClient: (client, url) => request("POST", "/integrations/email-clients/disconnect", { client, url }),
+    refreshEmailClientLists: (input) => request("POST", "/integrations/email-clients/refresh-lists", input),
+    connectMetaConversionApi: (input) => request("PUT", "/integrations/meta-conversion-api", input),
+    disconnectMetaConversionApi: (integrationId) => request("DELETE", `/integrations/meta-conversion-api/${encodeURIComponent(integrationId)}`),
+    configureManualPayment: (input) => request("PUT", "/integrations/payments/manual", input),
+    disconnectManualPayment: () => request("DELETE", "/integrations/payments/manual"),
+    connectInvoicesClient: (input) => request("POST", "/integrations/invoices-clients", input),
+    disconnectInvoicesClient: (client, id) => request("POST", "/integrations/invoices-clients/disconnect", { client, id }),
+    connectPaymentGateway: (input) => request("POST", "/integrations/payments/gateways", input),
+    disconnectPaymentGateway: (gateway) => request("POST", "/integrations/payments/gateways/disconnect", { gateway }),
+    setTpayRecurringBlik: (enabled) => request("PUT", "/integrations/payments/tpay/recurring-blik", { enabled }),
+    connectTwilio: (input) => request("PUT", "/integrations/sms/twilio", input),
+    disconnectTwilio: () => request("DELETE", "/integrations/sms/twilio"),
+    connectSmsApi: (input) => request("PUT", "/integrations/sms/smsapi", input),
+    disconnectSmsApi: () => request("DELETE", "/integrations/sms/smsapi"),
+    refreshSmsApiSenders: () => request("POST", "/integrations/sms/smsapi/refresh-senders"),
+    setDefaultSmsApiSender: (sender) => request("PUT", "/integrations/sms/smsapi/default-sender", { sender }),
+    setDefaultSmsProvider: (provider) => request("PUT", "/integrations/sms/default-provider", { provider }),
+    listConversionTrackingIntegrations: () => request("GET", "/conversion-tracking/integrations"),
+    upsertConversionTrackingIntegration: (input) => request("PUT", "/conversion-tracking/integrations", input),
+    removeConversionTrackingIntegration: (client, integrationId) => request(
+      "DELETE",
+      `/conversion-tracking/integrations/${encodeURIComponent(client)}/${encodeURIComponent(integrationId)}`
+    ),
+    setDefaultConversionTracking: (integrationIds) => request("PUT", "/conversion-tracking/defaults", { integrationIds: [...integrationIds] }),
     statsProduct: (productId, currency) => request("GET", `/products/${encodeURIComponent(productId)}/stats${statsQuery({ currency })}`),
     listCommunities: () => communityRequest("GET", "/v1/communities"),
     listCommunityChannels: (communityId) => communityRequest("GET", `/v1/communities/${encodeURIComponent(communityId)}/channels`),
@@ -11787,10 +11914,10 @@ function registerBrandCommands(program2) {
   });
 }
 async function buildUpdatePatch(options) {
-  const { readFile: readFile3 } = await import("fs/promises");
+  const { readFile: readFile4 } = await import("fs/promises");
   let patch = {};
   if (options.jsonFile) {
-    const raw = await readFile3(options.jsonFile, "utf8");
+    const raw = await readFile4(options.jsonFile, "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
       throw new Error("--json-file must contain a JSON object with name/visual/editorial keys.");
@@ -11805,9 +11932,42 @@ async function buildUpdatePatch(options) {
 }
 
 // src/commands/bumps/index.ts
+var IMAGE_MEDIA_TYPE = "image";
+var CLEAR_MEDIA_VALUE = "none";
+var HTTP_URL_PATTERN = /^https?:\/\//i;
+var IMAGE_MIME_PREFIX = "image/";
+var JSON_PATCH_DESCRIPTION = "inline JSON object or .json path merged into the request body \u2014 for the deep `appearance` object (media {type, url, mediaId?}, backgroundColor, borderStyle, borderColor, borderWidth, ctaPosition, ctaSize, ctaBackgroundColor, ctaTextColor, ctaArrowPosition, ctaArrowColor, ctaArrowAnimation, imagePosition, imagePositionMobile, imageWidth). Explicit flags win over --json keys. Validated server-side.";
+var IMAGE_FLAG_DESCRIPTION = "image for the bump box: an https URL, a media library id (resolved via the media routes), or `none` to clear the media slot";
 function formatAmount(amountCents, currency) {
   return `${(amountCents / 100).toFixed(2)} ${currency}`;
 }
+function parseBumpJsonPatch(value) {
+  return parseJsonObjectFileOrInline("--json")(value);
+}
+async function resolveImageMedia(client, value) {
+  const trimmed = value.trim();
+  if (trimmed.toLowerCase() === CLEAR_MEDIA_VALUE) return null;
+  if (HTTP_URL_PATTERN.test(trimmed)) {
+    return { type: IMAGE_MEDIA_TYPE, url: trimmed, mediaId: null };
+  }
+  const { media } = await client.getMedia(trimmed);
+  if (!media.mimeType.startsWith(IMAGE_MIME_PREFIX)) {
+    throw new Error(
+      `--image: media ${trimmed} is ${media.mimeType}, not an image. Pass an image media id / URL, or set a video slot via --json {"appearance":{"media":{...}}}.`
+    );
+  }
+  return { type: IMAGE_MEDIA_TYPE, url: media.url, mediaId: media.id };
+}
+function mergeBumpInput(jsonPatch, flagInput, media) {
+  const merged = { ...jsonPatch, ...flagInput };
+  for (const [key, value] of Object.entries(flagInput)) {
+    if (value === void 0) delete merged[key];
+  }
+  const appearance = media !== void 0 ? { ...jsonPatch.appearance ?? {}, media } : jsonPatch.appearance;
+  if (appearance !== void 0) merged.appearance = appearance;
+  else delete merged.appearance;
+  return merged;
+}
 function parsePriceIds(value) {
   const ids = value.split(",").map((id) => id.trim()).filter((id) => id.length > 0);
   if (ids.length === 0) {
@@ -11834,39 +11994,52 @@ function registerBumpsCommands(program2) {
       );
     });
   });
-  bumps.command("create").description("Create an order bump from an existing product price (on its default offer)").requiredOption("--product <productId>", "product the bump adds").requiredOption("--price <priceId>", "price id on the product's default offer").requiredOption("--name <name>", "bump headline").option("--description <text>", "bump description").option("--cta <text>", "call-to-action text").action(
+  bumps.command("create").description("Create an order bump from an existing product price (on its default offer)").requiredOption("--product <productId>", "product the bump adds").requiredOption("--price <priceId>", "price id on the product's default offer").requiredOption("--name <name>", "bump headline").option("--description <text>", "bump description").option("--cta <text>", "call-to-action text").option("--image <urlOrMediaId>", IMAGE_FLAG_DESCRIPTION).option("--json <fileOrJson>", JSON_PATCH_DESCRIPTION).action(
     async (options, command) => {
       const flags = getGlobalFlags(command);
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
-      const result = await client.createOrderBump({
-        productId: options.product,
-        priceId: options.price,
-        name: options.name,
-        description: options.description,
-        ctaText: options.cta
-      });
+      const jsonPatch = options.json !== void 0 ? parseBumpJsonPatch(options.json) : {};
+      const media = options.image !== void 0 ? await resolveImageMedia(client, options.image) : void 0;
+      const input = mergeBumpInput(
+        jsonPatch,
+        {
+          productId: options.product,
+          priceId: options.price,
+          name: options.name,
+          description: options.description,
+          ctaText: options.cta
+        },
+        media
+      );
+      const result = await client.createOrderBump(input);
       emit(flags, result, () => {
         process.stdout.write(`Created order bump ${result.orderBumpId} \u2014 ${options.name}
 `);
       });
     }
   );
-  bumps.command("update").description("Update an order bump").argument("<bumpId>", "order bump id").option("--name <name>", "new headline").option("--description <text>", "new description").option("--cta <text>", "new call-to-action text").option("--product <productId>", "point the bump at a different product").option("--price <priceId>", "price id on the (new) product's default offer").action(
+  bumps.command("update").description("Update an order bump").argument("<bumpId>", "order bump id").option("--name <name>", "new headline").option("--description <text>", "new description").option("--cta <text>", "new call-to-action text").option("--product <productId>", "point the bump at a different product").option("--price <priceId>", "price id on the (new) product's default offer").option("--image <urlOrMediaId>", IMAGE_FLAG_DESCRIPTION).option("--json <fileOrJson>", JSON_PATCH_DESCRIPTION).action(
     async (bumpId, options, command) => {
       const flags = getGlobalFlags(command);
-      const input = {
-        name: options.name,
-        description: options.description,
-        ctaText: options.cta,
-        productId: options.product,
-        priceId: options.price
-      };
-      if (Object.values(input).every((value) => value === void 0)) {
+      const jsonPatch = options.json !== void 0 ? parseBumpJsonPatch(options.json) : {};
+      const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+      const media = options.image !== void 0 ? await resolveImageMedia(client, options.image) : void 0;
+      const input = mergeBumpInput(
+        jsonPatch,
+        {
+          name: options.name,
+          description: options.description,
+          ctaText: options.cta,
+          productId: options.product,
+          priceId: options.price
+        },
+        media
+      );
+      if (Object.keys(input).length === 0) {
         throw new Error(
-          "Nothing to update \u2014 pass at least one of --name, --description, --cta, --product, --price."
+          "Nothing to update \u2014 pass at least one of --name, --description, --cta, --product, --price, --image, or a --json patch."
         );
       }
-      const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
       const result = await client.updateOrderBump(bumpId, input);
       emit(flags, result, () => {
         process.stdout.write(`Updated order bump ${result.orderBumpId}
@@ -12401,7 +12574,19 @@ function registerCheckoutSettingsCommands(program2) {
   ).option("--lang <language>", "language to write, e.g. 'pl' (defaults to 'pl')").option("--terms-url <url|none>", "terms & conditions link (none = clear)").option("--privacy-policy-url <url|none>", "privacy policy link (none = clear)").option(
     "--claim <text|none>",
     "information-clause / consent-checkbox claim text (none = clear)"
-  ).option("--terms-content <text>", "inline terms & conditions text").option("--privacy-policy-content <text>", "inline privacy policy text").option("--google-analytics-id <id|none>", "Google Analytics id (none = clear)").option("--facebook-pixel-id <id|none>", "Facebook Pixel id (none = clear)").option("--gtm-id <id|none>", "Google Tag Manager id (none = clear)").option("--tiktok-pixel-id <id|none>", "TikTok Pixel id (none = clear)").option("--promote-net-prices <on|off>", "display net prices prominently").option(
+  ).option("--terms-content <text>", "inline terms & conditions text").option("--privacy-policy-content <text>", "inline privacy policy text").option(
+    "--google-analytics-id <id|none>",
+    "LEGACY Google Analytics id (none = clear) \u2014 prefer `integrations add ga4`"
+  ).option(
+    "--facebook-pixel-id <id|none>",
+    "LEGACY Facebook Pixel id (none = clear) \u2014 Meta pixel is managed in the dashboard"
+  ).option(
+    "--gtm-id <id|none>",
+    "LEGACY Google Tag Manager id (none = clear) \u2014 prefer `integrations add gtm`"
+  ).option(
+    "--tiktok-pixel-id <id|none>",
+    "LEGACY TikTok Pixel id (none = clear) \u2014 prefer `integrations add tiktok`"
+  ).option("--promote-net-prices <on|off>", "display net prices prominently").option(
     "--price-variants-placement <belowDescription|aboveDescription|none>",
     "where the price list renders relative to the description"
   ).option(
@@ -12536,6 +12721,39 @@ var AIImageQuality = /* @__PURE__ */ ((AIImageQuality2) => {
   AIImageQuality2["Ultra"] = "4K";
   return AIImageQuality2;
 })(AIImageQuality || {});
+var MANAGED_CONVERSION_TRACKING_CLIENTS = [
+  "googleAnalytics",
+  "googleTagManager",
+  "tiktok",
+  "x",
+  "linkedin",
+  "microsoftClarity",
+  "hotjar"
+];
+var CONNECTABLE_EMAIL_CLIENTS = [
+  "ActiveCampaign",
+  "ConvertKit",
+  "MailerLite",
+  "MailChimp",
+  "GetResponse",
+  "Pipedrive"
+];
+var INVOICES_CLIENTS = [
+  "fakturownia",
+  "ifirma",
+  "inFakt",
+  "wFirmaV2",
+  "ingKsiegowosc",
+  "stripe"
+];
+var CREDENTIAL_PAYMENT_GATEWAYS = [
+  "payu",
+  "tpay",
+  "przelewy24",
+  "paynow",
+  "paypal",
+  "dodo"
+];
 var COMMUNITY_EVENT_LOCATION_TYPES = [
   "online",
   "inPerson"
@@ -17086,6 +17304,36 @@ function printSignupFormDetail(form) {
 `);
   }
 }
+var escapeHtmlAttribute = (value) => value.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;");
+function buildFormSnippet(input) {
+  const copy = input.lang === "pl" ? {
+    email: "Adres e-mail",
+    firstName: "Imi\u0119",
+    submit: "Zapisuj\u0119 si\u0119",
+    success: "Dzi\u0119kujemy! Sprawd\u017A skrzynk\u0119 i potwierd\u017A zapis.",
+    error: "Nie uda\u0142o si\u0119 wys\u0142a\u0107. Spr\xF3buj ponownie."
+  } : {
+    email: "E-mail address",
+    firstName: "First name",
+    submit: "Sign me up",
+    success: "Thank you! Check your inbox to confirm.",
+    error: "Something went wrong. Please try again."
+  };
+  const redirect = input.redirectUrl ? ` data-zanfia-redirect="${escapeHtmlAttribute(input.redirectUrl)}"` : "";
+  const firstName = input.firstName ? `
+  <label>${copy.firstName}<br><input name="firstName" type="text" autocomplete="given-name"></label>` : "";
+  return [
+    `<form data-zanfia-form="${input.workspaceId}/${input.formId}"${redirect}>`,
+    `  <label>${copy.email}<br><input name="email" type="email" required autocomplete="email"></label>${firstName}`,
+    `  <input name="website" type="text" tabindex="-1" autocomplete="off" aria-hidden="true" style="position:absolute;left:-9999px;opacity:0">`,
+    `  <button type="submit">${copy.submit}</button>`,
+    `  <div data-zanfia-success hidden>${copy.success}</div>`,
+    `  <div data-zanfia-error hidden>${copy.error}</div>`,
+    `</form>`,
+    `<script src="${input.platformUrl}/zanfia-page-forms.js" defer></script>`,
+    ""
+  ].join("\n");
+}
 async function buildFormUpdateInput(client, formId, options) {
   const input = options.json !== void 0 ? parseFormJsonPatch(options.json) : {};
   if (options.name !== void 0) input.name = options.name;
@@ -17221,6 +17469,45 @@ function registerFormsCommands(program2) {
 `);
     });
   });
+  forms.command("snippet").description(
+    "Print the HTML of a native signup form for ANY website (WordPress, Webflow, plain HTML): the form markup + the platform script. Paste it into the page; tags, opt-in mode and the thank-you redirect come from the form settings. Edit the markup freely, keeping the field names and the data-zanfia-* hooks."
+  ).argument("<id>", "form id").option("--lang <pl|en>", "language of the placeholder copy (default pl)").option("--first-name", "include a first-name field").option(
+    "--redirect <url>",
+    "thank-you URL for THIS embed (overrides the form setting on the page)"
+  ).option(
+    "--platform-url <origin>",
+    "origin that serves zanfia-page-forms.js (default: this build\u2019s platform, or $ZANFIA_PLATFORM_URL)"
+  ).action(
+    async (id, options, command) => {
+      const flags = getGlobalFlags(command);
+      const lang = options.lang !== void 0 ? parseChoice2(options.lang, ["pl", "en"], "--lang") : "pl";
+      if (options.redirect !== void 0 && !/^https?:\/\/\S+$/.test(options.redirect)) {
+        throw new Error("--redirect must be an absolute http(s) URL.");
+      }
+      const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+      const [form, workspace2] = await Promise.all([
+        client.getSignupForm(id),
+        client.getWorkspaceSettings()
+      ]);
+      if (form.submitAction === "freeProductSignup") {
+        throw new Error(
+          `Form ${id} is product-bound; the native snippet works for standalone signup forms only.`
+        );
+      }
+      const platformUrl = (options.platformUrl ?? resolvePlatformUrl()).replace(/\/+$/, "");
+      const snippet = buildFormSnippet({
+        workspaceId: workspace2.workspaceId,
+        formId: form.id,
+        platformUrl,
+        lang,
+        redirectUrl: options.redirect ?? form.redirectUrl ?? null,
+        firstName: options.firstName === true
+      });
+      emit(flags, { formId: form.id, workspaceId: workspace2.workspaceId, html: snippet }, () => {
+        process.stdout.write(snippet);
+      });
+    }
+  );
   forms.command("submissions").description("List a form's submissions (newest first)").argument("<id>", "form id").option("--limit <n>", "maximum rows to return").action(async (id, options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -17258,6 +17545,7 @@ var FUNNEL_TEMPLATE_IDS = [
 ];
 var EVENT_MODES = ["live", "on_demand"];
 var SCHEDULER_UNAVAILABLE_STATUS2 = 503;
+var FUNNEL_NOT_READY_STATUS = 409;
 function requireConfirm6(confirm, what) {
   if (!confirm) {
     throw new Error(`Refusing to ${what} without --confirm. Re-run with --confirm to proceed.`);
@@ -17273,6 +17561,16 @@ function withSchedulerHint2(error) {
   }
   throw error;
 }
+function withLiveGateHint(error, funnelId) {
+  if (error instanceof ApiError && error.status === FUNNEL_NOT_READY_STATUS) {
+    throw new ApiError(
+      error.status,
+      error.apiMessage,
+      `The funnel was not changed. Run \`funnels get ${funnelId}\` to see each step; publish the page, activate the checkout, or generate the entry page (\`funnels generate-page\`), then retry.`
+    );
+  }
+  throw error;
+}
 function parsePositiveInt10(value, flag) {
   const n = Number.parseInt(value, 10);
   if (!Number.isInteger(n) || n <= 0) {
@@ -17449,19 +17747,19 @@ function registerFunnelsCommands(program2) {
     const flags = getGlobalFlags(command);
     const input = buildFunnelUpdateInput(options);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
-    const result = await client.updateFunnel(id, input);
+    const result = await client.updateFunnel(id, input).catch((error) => withLiveGateHint(error, id));
     emit(flags, result, () => {
       process.stdout.write(`Updated funnel ${id}.
 `);
     });
   });
   funnels.command("status").description(
-    "Change a funnel's status: draft (building), live (running \u2014 the entry step link is meant to be shared), archived (retired \u2014 the reversible substitute for deletion). All transitions are reversible."
+    "Change a funnel's status: draft (building), live (running \u2014 the entry step link is meant to be shared), archived (retired \u2014 the reversible substitute for deletion). Going live is refused (409 funnel-not-ready) while the entry step is not ready or a referenced page is unpublished / checkout inactive. All transitions are reversible."
   ).argument("<id>", "funnel id").requiredOption("--set <status>", `new status (${FUNNEL_STATUSES.join(" | ")})`).action(async (id, options, command) => {
     const flags = getGlobalFlags(command);
     const status = parseChoice3(options.set, FUNNEL_STATUSES, "--set");
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
-    const result = await client.updateFunnel(id, { status });
+    const result = await client.updateFunnel(id, { status }).catch((error) => withLiveGateHint(error, id));
     emit(flags, result, () => {
       process.stdout.write(`Funnel ${id} status set to ${status}.
 `);
@@ -17530,7 +17828,10 @@ function registerFunnelsCommands(program2) {
   });
   funnels.command("from-template").description(
     "Create a funnel from a catalog template (`funnels templates`) AND AI-generate its page steps in one go \u2014 opt-in / sales / thank-you pages are queued as background generations (202; consumes AI credits, 1-5 minutes each). The template\u2019s product requirement must be met (free or paid checkout on the product), else 409. Webinar template: pass the event fields (live) or --event-mode on_demand. Requires --confirm."
-  ).argument("<templateId>", `template id (${FUNNEL_TEMPLATE_IDS.join(" | ")})`).requiredOption("--product <productId>", "the product the funnel sells or delivers").requiredOption("--lang <en|pl>", "language of the generated pages and emails \u2014 the creator's").option("--name <name>", "custom funnel name; omit for the recipe default").option("--event-start <iso>", "webinar: event start as ISO 8601 WITH offset (live)").option("--event-timezone <tz>", "webinar: IANA timezone, e.g. Europe/Warsaw").option("--event-duration <minutes>", "webinar: event length in minutes (default 60)").option("--event-mode <mode>", `webinar: ${EVENT_MODES.join(" | ")} (on_demand = autowebinar)`).option("--confirm", "required \u2014 acknowledge that AI credits will be consumed").action(
+  ).argument("<templateId>", `template id (${FUNNEL_TEMPLATE_IDS.join(" | ")})`).requiredOption("--product <productId>", "the product the funnel sells or delivers").requiredOption("--lang <en|pl>", "language of the generated pages and emails \u2014 the creator's").option("--name <name>", "custom funnel name; omit for the recipe default").option("--event-start <iso>", "webinar: event start as ISO 8601 WITH offset (live)").option("--event-timezone <tz>", "webinar: IANA timezone, e.g. Europe/Warsaw").option("--event-duration <minutes>", "webinar: event length in minutes (default 60)").option("--event-mode <mode>", `webinar: ${EVENT_MODES.join(" | ")} (on_demand = autowebinar)`).option(
+    "--page-template <id>",
+    "design template for every generated page (a page-template id, e.g. course-fresh); thank-you steps take the companion"
+  ).option("--confirm", "required \u2014 acknowledge that AI credits will be consumed").action(
     async (templateId, options, command) => {
       const flags = getGlobalFlags(command);
       requireConfirm6(options.confirm, "create the funnel and generate its pages (AI credits)");
@@ -17538,7 +17839,8 @@ function registerFunnelsCommands(program2) {
         templateId: parseChoice3(templateId, FUNNEL_TEMPLATE_IDS, "<templateId>"),
         productId: options.product,
         lang: parseChoice3(options.lang, FUNNEL_LANGS, "--lang"),
-        name: options.name
+        name: options.name,
+        ...options.pageTemplate ? { pageTemplateId: options.pageTemplate } : {}
       };
       const webinar = {
         eventStartAt: options.eventStart,
@@ -17651,152 +17953,1078 @@ function registerFunnelsCommands(program2) {
   });
 }
 
-// src/commands/join/index.ts
-var MAX_CODE_ATTEMPTS2 = 5;
-var HANDLE_REGEX = /^[a-z0-9][a-z0-9-]{1,62}$/;
-var EMAIL_REGEX2 = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
-var AGENT_DOCS_URL = "https://zanfia.com/help/developer-cli/agents";
-function joinUrl(base, handle, step) {
-  return `${base.replace(/\/$/, "")}/v1/join/${encodeURIComponent(handle)}/${step}`;
-}
-async function runJoin(handleInput, options) {
-  const handle = handleInput.trim().toLowerCase();
-  if (!HANDLE_REGEX.test(handle)) {
+// src/commands/integrations/connections.ts
+import { readFileSync as readFileSync15 } from "fs";
+var EMAIL_CLIENT_ALIASES = {
+  ac: "ActiveCampaign",
+  activecampaign: "ActiveCampaign",
+  kit: "ConvertKit",
+  convertkit: "ConvertKit",
+  mailerlite: "MailerLite",
+  mailchimp: "MailChimp",
+  getresponse: "GetResponse",
+  freshmail: "FreshMail",
+  pipedrive: "Pipedrive"
+};
+function parseEmailClient(value) {
+  const match = EMAIL_CLIENT_ALIASES[value.trim().toLowerCase()];
+  if (!match) {
     throw new Error(
-      "Community handle must be lowercase letters, digits and dashes (e.g. crew-of-one)."
+      `Unknown email client: ${value} (expected ${CONNECTABLE_EMAIL_CLIENTS.join(" | ")}; FreshMail is disconnect-only)`
     );
   }
-  const communityApiUrl = resolveCommunityApiUrl();
-  if (!communityApiUrl) {
-    throw new Error(
-      "No Community API URL configured. Set ZANFIA_COMMUNITY_API_URL (this build has no baked backend)."
-    );
+  return match;
+}
+function parseOnOff2(value, flag) {
+  if (value === void 0) return void 0;
+  if (value === "on") return true;
+  if (value === "off") return false;
+  throw new Error(`Invalid ${flag}: ${value} (expected on | off)`);
+}
+function requireConfirm7(confirm, what) {
+  if (!confirm) {
+    throw new Error(`Refusing to ${what} without --confirm. Re-run with --confirm to proceed.`);
   }
-  const verbose = options.verbose === true;
-  const email = (options.email ?? await promptLine("Email: ")).trim().toLowerCase();
-  if (!EMAIL_REGEX2.test(email)) {
-    throw new Error("Please enter a valid email address.");
+}
+function readSecret(label, value, fromStdin, fromEnv) {
+  const sources = [value !== void 0, fromStdin === true, fromEnv !== void 0].filter(Boolean);
+  if (sources.length > 1) {
+    throw new Error(`Pass ${label} through exactly one of the value, -stdin or -env forms.`);
   }
-  const started = await postJson2(
-    "Join",
-    joinUrl(communityApiUrl, handle, "start"),
-    { email, lang: "en" },
-    { verbose }
-  );
-  if (!options.json) {
-    process.stdout.write(
-      `Joining ${started.communityName} (${started.workspaceName}) \u2014 a 6-digit code was sent to ${email}.
-`
-    );
+  if (fromStdin) {
+    const raw = readFileSync15(0, "utf8").trim();
+    if (!raw) throw new Error(`${label}: nothing was read from stdin.`);
+    return raw;
   }
-  const firstName = options.name ?? (options.json ? "" : await promptLine("Your name (optional): "));
-  const hostname3 = safeHostname2();
-  let completed = null;
-  for (let attempt = 1; attempt <= MAX_CODE_ATTEMPTS2 && !completed; attempt += 1) {
-    const code = options.code ?? (await promptLine("Code from the email (or 'r' to resend): ")).trim();
-    if (code.toLowerCase() === "r") {
-      await postJson2(
-        "Resend",
-        joinUrl(communityApiUrl, handle, "start"),
-        { email, lang: "en" },
-        { verbose }
-      );
-      process.stdout.write("Code re-sent.\n");
-      attempt -= 1;
-      continue;
-    }
-    try {
-      completed = await postJson2(
-        "Join",
-        joinUrl(communityApiUrl, handle, "complete"),
-        { email, code, firstName, hostname: hostname3 },
-        { verbose }
-      );
-    } catch (err) {
-      if (options.code || attempt === MAX_CODE_ATTEMPTS2) throw err;
-      process.stdout.write(`${err instanceof Error ? err.message : String(err)}
-`);
-    }
+  if (fromEnv !== void 0) {
+    const raw = process.env[fromEnv]?.trim();
+    if (!raw) throw new Error(`${label}: environment variable ${fromEnv} is empty or unset.`);
+    return raw;
   }
-  if (!completed) {
-    throw new Error("Could not verify the code.");
+  return value;
+}
+function printOverview(overview) {
+  process.stdout.write("Email clients\n");
+  if (overview.emailClients.length === 0) {
+    process.stdout.write("  (none connected)\n");
+  } else {
+    printTable(
+      overview.emailClients.map((account) => ({
+        client: account.client,
+        url: account.url,
+        lists: account.listsCount,
+        tags: account.tagsCount,
+        updatedAt: account.updatedAt ?? account.createdAt
+      })),
+      ["client", "url", "lists", "tags", "updatedAt"]
+    );
   }
-  const path2 = writeCredentials({
-    apiKey: completed.token,
-    apiUrl: communityApiUrl,
-    savedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    source: "oauth",
-    expiresAt: completed.expiresAt,
-    userEmail: completed.userEmail,
-    workspaceId: completed.workspaceId,
-    workspaceName: completed.workspaceName,
-    kind: "member"
-  });
-  if (options.json) {
-    process.stdout.write(
-      `${JSON.stringify(
-        {
-          joined: true,
-          alreadyMember: completed.alreadyMember,
-          communityId: completed.communityId,
-          communityName: completed.communityName,
-          workspaceId: completed.workspaceId,
-          workspaceName: completed.workspaceName,
-          introChannelId: completed.introChannelId,
-          userEmail: completed.userEmail,
-          expiresAt: completed.expiresAt,
-          credentialsPath: path2
-        },
-        null,
-        2
-      )}
+  process.stdout.write("Meta pixel / Conversions API\n");
+  if (overview.metaConversionApi.length === 0) {
+    process.stdout.write("  (none)\n");
+  } else {
+    printMetaEntries(overview.metaConversionApi);
+  }
+  process.stdout.write(
+    `Managed pixel integrations (GA4 / GTM / \u2026): ${overview.conversionTrackingIntegrationsCount} \u2014 see \`integrations list\`
 `
+  );
+  process.stdout.write("Invoicing\n");
+  if (overview.invoicesClients.length === 0) {
+    process.stdout.write("  (none connected)\n");
+  } else {
+    printTable(
+      overview.invoicesClients.map((account) => ({
+        client: account.client,
+        id: account.id,
+        url: account.url
+      })),
+      ["client", "id", "url"]
     );
-    return;
   }
-  const intro = completed.introChannelId ? `  zanfia communities post create ${completed.communityId} ${completed.introChannelId} --content "Hi, I'm <your agent>. I ..."
-` : "";
+  const p = overview.payments;
+  const on = (value) => value ? "on" : "off";
   process.stdout.write(
-    `
-${completed.alreadyMember ? "Welcome back to" : "You are in:"} ${completed.communityName}.
-Member key saved to ${path2} (expires ${completed.expiresAt.slice(0, 10)}).
-
-Next:
-  zanfia communities list
-  zanfia communities channels ${completed.communityId}
-` + (intro ? `
-Introduce your agent:
-${intro}` : "") + `
-Plug in your agent: ${AGENT_DOCS_URL}
+    `Payments: stripe=${on(p.stripe)} payU=${on(p.payU)} tpay=${on(p.tpay)} payNow=${on(p.payNow)} przelewy24=${on(p.przelewy24)} paypal=${on(p.paypal)} dodo=${on(p.dodo)} manual=${p.manual ? `on (${p.manual.name})` : "off"}
 `
   );
 }
-function registerJoinCommand(program2) {
-  program2.command("join <handle>").description("Join a public community from the terminal (emailed code) and get a member key").option("--email <email>", "email to join with (prompted when omitted)").option("--name <name>", "your display name (prompted when omitted)").option("--code <code>", "the 6-digit code from the email (prompted when omitted)").addHelpText(
-    "after",
-    `
-Examples:
-  zanfia join crew-of-one
-  zanfia join crew-of-one --email me@example.com --name "Sam" --code 123456
-
-The key is a MEMBER key: it reaches the Community API for that creator's
-communities only (read/post/comment/chat), never your own workspace. It is
-saved to ~/.config/zanfia/credentials.json and expires in 90 days \u2014 run
-join again to refresh it.
-`
-  ).action(async (handle, options, command) => {
-    const globals = getGlobalFlags(command);
-    await runJoin(handle, { ...options, json: globals.json, verbose: globals.verbose });
-  });
+function printMetaEntries(entries) {
+  printTable(
+    entries.map((entry) => ({
+      id: entry.id,
+      name: entry.name,
+      pixelId: entry.pixelId,
+      serverSide: entry.serverSide ? "yes" : "",
+      default: entry.isWorkspaceDefault ? "yes" : "",
+      disabled: entry.disabled ? "yes" : "",
+      events: [
+        entry.trackPurchase ? "purchase" : null,
+        entry.trackInitCheckout ? "initCheckout" : null,
+        entry.trackAddToCart ? "addToCart" : null,
+        entry.trackTrialStarted ? "trialStarted" : null
+      ].filter(Boolean).join(",")
+    })),
+    ["id", "name", "pixelId", "serverSide", "default", "disabled", "events"]
+  );
 }
-
-// src/commands/media/index.ts
-import { existsSync, readFileSync as readFileSync15, writeFileSync as writeFileSync4 } from "fs";
-import { readFile, stat as stat3 } from "fs/promises";
-import { basename } from "path";
-
-// src/client/bunnyUpload.ts
-import { createReadStream as createReadStream2 } from "fs";
+function printAccount(account, headline) {
+  process.stdout.write(`${headline} ${account.client} ${account.url}
+`);
+  process.stdout.write(`  Lists: ${account.listsCount}  Tags: ${account.tagsCount}
+`);
+}
+function buildEmailConnectInput(client, options) {
+  if (client === "FreshMail") {
+    throw new Error(
+      "FreshMail can no longer be connected (provider retired); existing accounts can only be disconnected."
+    );
+  }
+  const secret = readSecret("--api-key", options.apiKey, options.apiKeyStdin, options.apiKeyEnv);
+  if (!secret) throw new Error("--api-key (or --api-key-stdin / --api-key-env VAR) is required.");
+  const input = { client, url: options.url };
+  switch (client) {
+    case "ConvertKit":
+      input.apiSecret = secret;
+      break;
+    case "Pipedrive":
+      input.apiSecret = secret;
+      if (!options.tagsField || !options.listsField) {
+        throw new Error("Pipedrive needs --tags-field and --lists-field (person field names).");
+      }
+      input.tagsFieldName = options.tagsField;
+      input.listsFieldName = options.listsField;
+      break;
+    case "MailChimp":
+      input.apiKey = secret;
+      if (!options.serverPrefix) throw new Error("MailChimp needs --server-prefix (e.g. us21).");
+      input.serverPrefix = options.serverPrefix;
+      break;
+    default:
+      input.apiKey = secret;
+  }
+  return input;
+}
+function buildMetaInput(options, existing) {
+  const name = options.name ?? existing?.name;
+  const pixelId = options.pixelId ?? existing?.pixelId;
+  if (!name) throw new Error("--name is required.");
+  if (!pixelId) throw new Error("--pixel-id is required.");
+  const token = readSecret(
+    "--access-token",
+    options.accessToken,
+    options.accessTokenStdin,
+    options.accessTokenEnv
+  );
+  return {
+    ...existing ? { id: existing.id } : {},
+    name,
+    pixelId,
+    ...token !== void 0 ? { accessToken: token } : {},
+    trackPurchase: parseOnOff2(options.trackPurchase, "--track-purchase") ?? existing?.trackPurchase ?? true,
+    trackInitCheckout: parseOnOff2(options.trackInitCheckout, "--track-init-checkout") ?? existing?.trackInitCheckout ?? true,
+    trackAddToCart: parseOnOff2(options.trackAddToCart, "--track-add-to-cart") ?? existing?.trackAddToCart ?? true,
+    trackTrialStarted: parseOnOff2(options.trackTrialStarted, "--track-trial-started") ?? existing?.trackTrialStarted ?? false
+  };
+}
+function addMetaOptions(command) {
+  return command.option("--name <name>", "creator-facing label").option("--pixel-id <id>", "Meta pixel / dataset id").option(
+    "--access-token <token>",
+    "Conversions API access token (prefer --access-token-stdin / -env)"
+  ).option("--access-token-stdin", "read the access token from stdin").option("--access-token-env <VAR>", "read the access token from an environment variable").option("--track-purchase <on|off>", "send Purchase (default on)").option("--track-init-checkout <on|off>", "send InitiateCheckout (default on)").option("--track-add-to-cart <on|off>", "send AddToCart (default on)").option("--track-trial-started <on|off>", "send TrialStarted (default off)");
+}
+function registerIntegrationConnectionCommands(integrations) {
+  integrations.command("status").description(
+    "What is connected: email clients, Meta pixel / Conversions API entries, invoicing, payment methods (needs integrations:read)"
+  ).action(async (_options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const overview = await client.getIntegrationsOverview();
+    emit(flags, overview, () => printOverview(overview));
+  });
+  const emailClients = integrations.command("email-clients").description(
+    "Email-marketing accounts: ActiveCampaign, Kit (ConvertKit), MailerLite, MailChimp, GetResponse, Pipedrive. Keys are verified against the provider before saving and never printed."
+  );
+  emailClients.command("connect <client>").description(
+    "Connect (or re-connect, same url) an account. Client: ac | kit | mailerlite | mailchimp | getresponse | pipedrive. Pass the key via --api-key-stdin or --api-key-env to keep it out of shell history."
+  ).requiredOption("--url <url>", "account / API base URL as the provider shows it").option("--api-key <key>", "API key (Kit / Pipedrive: the API secret)").option("--api-key-stdin", "read the key from stdin").option("--api-key-env <VAR>", "read the key from an environment variable").option("--server-prefix <prefix>", "MailChimp data-center prefix, e.g. us21").option("--tags-field <name>", "Pipedrive: person field used as tags").option("--lists-field <name>", "Pipedrive: person field used as lists").action(async (clientArg, options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const input = buildEmailConnectInput(parseEmailClient(clientArg), options);
+    const account = await client.connectEmailClient(input);
+    emit(flags, account, () => printAccount(account, "Connected"));
+  });
+  emailClients.command("disconnect <client>").description(
+    "Disconnect an account by url (irreversible, the stored key is deleted). Refused while a live newsletter / automation still uses it. Requires --confirm."
+  ).requiredOption("--url <url>", "account url from `integrations status`").option("--confirm", "required \u2014 acknowledges the key is deleted").action(
+    async (clientArg, options, command) => {
+      requireConfirm7(options.confirm, `disconnect ${clientArg} ${options.url}`);
+      const flags = getGlobalFlags(command);
+      const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+      const parsed = parseEmailClient(clientArg);
+      const result = await client.disconnectEmailClient(parsed, options.url);
+      emit(flags, { ...result, client: parsed, url: options.url }, () => {
+        process.stdout.write(`Disconnected ${parsed} ${options.url}
+`);
+      });
+    }
+  );
+  emailClients.command("refresh <client>").description(
+    "Re-fetch the lists + tags of a connected account with the stored key (not Pipedrive)"
+  ).requiredOption("--url <url>", "account url from `integrations status`").option("--server-prefix <prefix>", "MailChimp data-center prefix").action(
+    async (clientArg, options, command) => {
+      const flags = getGlobalFlags(command);
+      const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+      const parsed = parseEmailClient(clientArg);
+      if (parsed === "Pipedrive" || parsed === "FreshMail") {
+        throw new Error(`${parsed} lists cannot be refreshed from the CLI.`);
+      }
+      const account = await client.refreshEmailClientLists({
+        client: parsed,
+        url: options.url,
+        ...options.serverPrefix ? { serverPrefix: options.serverPrefix } : {}
+      });
+      emit(flags, account, () => printAccount(account, "Refreshed"));
+    }
+  );
+  const meta = integrations.command("meta-capi").description(
+    "Manual Meta pixel + Conversions API entries (the connect-with-Facebook OAuth path stays in the dashboard)"
+  );
+  meta.command("list").description("Meta pixel / Conversions API entries").action(async (_options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const overview = await client.getIntegrationsOverview();
+    emit(flags, overview.metaConversionApi, () => printMetaEntries(overview.metaConversionApi));
+  });
+  addMetaOptions(
+    meta.command("add").description(
+      "Add a Meta pixel entry; with an access token the Conversions API (server-side events) is enabled \u2014 the token is validated against Meta before saving. The first tracking integration a workspace connects becomes the workspace default."
+    )
+  ).action(async (options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const entry = await client.connectMetaConversionApi(buildMetaInput(options, null));
+    emit(flags, entry, () => printMetaEntries([entry]));
+  });
+  addMetaOptions(
+    meta.command("update <integrationId>").description("Edit an entry \u2014 only the flags you pass change; an omitted token stays stored")
+  ).action(async (integrationId, options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const overview = await client.getIntegrationsOverview();
+    const existing = overview.metaConversionApi.find((entry2) => entry2.id === integrationId);
+    if (!existing) {
+      throw new Error(
+        `No Meta Conversions API entry with id ${integrationId}. Run \`zanfia integrations meta-capi list\`.`
+      );
+    }
+    const entry = await client.connectMetaConversionApi(buildMetaInput(options, existing));
+    emit(flags, entry, () => printMetaEntries([entry]));
+  });
+  meta.command("remove <integrationId>").description("Remove an entry (irreversible). Requires --confirm.").option("--confirm", "required \u2014 acknowledges the entry is deleted").action(async (integrationId, options, command) => {
+    requireConfirm7(options.confirm, `remove Meta entry ${integrationId}`);
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.disconnectMetaConversionApi(integrationId);
+    emit(flags, { ...result, integrationId }, () => {
+      process.stdout.write(`Removed Meta entry ${integrationId}
+`);
+    });
+  });
+  const manual = integrations.command("manual-payment").description(
+    "The manual / wire-transfer payment method (buyers pay by transfer, you approve the order)"
+  );
+  manual.command("set").description("Configure (create or update) the manual payment method").requiredOption("--name <name>", 'method name shown at checkout, e.g. "Przelew tradycyjny"').option("--instructions <text>", "plain-text payment instructions for the buyer").option("--instructions-file <path>", "read the instructions from a file").action(
+    async (options, command) => {
+      const instructions = options.instructions ?? (options.instructionsFile ? readFileSync15(options.instructionsFile, "utf8").trim() : void 0);
+      if (!instructions) throw new Error("--instructions or --instructions-file is required.");
+      const flags = getGlobalFlags(command);
+      const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+      const method = await client.configureManualPayment({ name: options.name, instructions });
+      emit(flags, method, () => {
+        process.stdout.write(`Manual payment: ${method.name}
+${method.instructions}
+`);
+      });
+    }
+  );
+  manual.command("remove").description("Remove the manual payment method (idempotent). Requires --confirm.").option("--confirm", "required \u2014 buyers can no longer pick the method").action(async (options, command) => {
+    requireConfirm7(options.confirm, "remove the manual payment method");
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.disconnectManualPayment();
+    emit(flags, result, () => {
+      process.stdout.write("Manual payment method removed\n");
+    });
+  });
+}
+
+// src/commands/integrations/providers.ts
+import { readFileSync as readFileSync16 } from "fs";
+var INVOICES_ALIASES = {
+  fakturownia: "fakturownia",
+  ifirma: "ifirma",
+  infakt: "inFakt",
+  wfirma: "wFirmaV2",
+  wfirmav2: "wFirmaV2",
+  ing: "ingKsiegowosc",
+  ingksiegowosc: "ingKsiegowosc",
+  stripe: "stripe"
+};
+function parseInvoicesClient(value) {
+  const match = INVOICES_ALIASES[value.trim().toLowerCase()];
+  if (!match) {
+    throw new Error(
+      `Unknown invoicing client: ${value} (expected ${INVOICES_CLIENTS.join(" | ")})`
+    );
+  }
+  return match;
+}
+function parseGateway(value) {
+  const normalized = value.trim().toLowerCase().replace("p24", "przelewy24");
+  const match = CREDENTIAL_PAYMENT_GATEWAYS.find((gateway) => gateway === normalized);
+  if (!match) {
+    throw new Error(
+      `Unknown gateway: ${value} (expected ${CREDENTIAL_PAYMENT_GATEWAYS.join(" | ")}; Stripe connects in the dashboard, the transfer method is \`integrations manual-payment\`)`
+    );
+  }
+  return match;
+}
+function parseEnum(value, allowed, flag) {
+  const match = allowed.find((candidate) => candidate === value);
+  if (!match) throw new Error(`Invalid ${flag}: ${value} (expected ${allowed.join(" | ")})`);
+  return match;
+}
+function requireConfirm8(confirm, what) {
+  if (!confirm) {
+    throw new Error(`Refusing to ${what} without --confirm. Re-run with --confirm to proceed.`);
+  }
+}
+function readSecret2(label, value, fromStdin, fromEnv) {
+  const sources = [value !== void 0, fromStdin === true, fromEnv !== void 0].filter(Boolean);
+  if (sources.length > 1) {
+    throw new Error(`Pass ${label} through exactly one of the value, -stdin or -env forms.`);
+  }
+  if (fromStdin) {
+    const raw = readFileSync16(0, "utf8").trim();
+    if (!raw) throw new Error(`${label}: nothing was read from stdin.`);
+    return raw;
+  }
+  if (fromEnv !== void 0) {
+    const raw = process.env[fromEnv]?.trim();
+    if (!raw) throw new Error(`${label}: environment variable ${fromEnv} is empty or unset.`);
+    return raw;
+  }
+  return value;
+}
+function printPayments(payments) {
+  const on = (value) => value ? "on" : "off";
+  process.stdout.write(
+    `Payments: stripe=${on(payments.stripe)} payu=${on(payments.payU)} tpay=${on(payments.tpay)} paynow=${on(payments.payNow)} przelewy24=${on(payments.przelewy24)} paypal=${on(payments.paypal)} dodo=${on(payments.dodo)} manual=${payments.manual ? "on" : "off"}
+`
+  );
+}
+function buildInvoicesInput(client, options) {
+  const secret = readSecret2("--api-key", options.apiKey, options.apiKeyStdin, options.apiKeyEnv);
+  const input = { client };
+  if (options.id) input.id = options.id;
+  if (options.name) input.accountName = options.name;
+  if (options.url) input.url = options.url;
+  if (options.departmentId) input.departmentId = options.departmentId;
+  switch (client) {
+    case "wFirmaV2":
+      if (!options.accessKey || !options.secretKey || !options.companyId) {
+        throw new Error("wFirma needs --access-key, --secret-key and --company-id.");
+      }
+      input.accessKey = options.accessKey;
+      input.secretKey = options.secretKey;
+      input.companyId = options.companyId;
+      break;
+    case "stripe":
+      break;
+    case "ifirma":
+      if (secret) input.apiKey = secret;
+      if (options.accountApiKey) input.accountApiKey = options.accountApiKey;
+      break;
+    case "ingKsiegowosc":
+      if (secret) input.apiKey = secret;
+      if (options.bankAccount) input.bankAccountNumber = options.bankAccount;
+      break;
+    default:
+      if (secret) input.apiKey = secret;
+  }
+  if (client !== "stripe" && !input.url) throw new Error("--url is required.");
+  return input;
+}
+function resolveSecret(value, fromEnv, flag) {
+  if (value === void 0 || !fromEnv) return value;
+  const raw = process.env[value]?.trim();
+  if (!raw) throw new Error(`${flag}: environment variable ${value} is empty or unset.`);
+  return raw;
+}
+function buildGatewayInput(gateway, o) {
+  const need = (value, flag) => {
+    if (!value) throw new Error(`${flag} is required for ${gateway}.`);
+    return value;
+  };
+  const secret = (value, flag) => need(resolveSecret(value, o.secretsEnv, flag), flag);
+  const input = { gateway, name: o.name };
+  switch (gateway) {
+    case "payu":
+      input.posId = need(o.posId, "--pos-id");
+      input.clientId = need(o.clientId, "--client-id");
+      input.clientSecret = secret(o.clientSecret, "--client-secret");
+      input.clientSecondKey = secret(o.secondKey, "--second-key");
+      break;
+    case "tpay":
+      input.posId = need(o.posId, "--pos-id");
+      input.clientId = need(o.clientId, "--client-id");
+      input.clientSecret = secret(o.clientSecret, "--client-secret");
+      input.safetyKey = secret(o.safetyKey, "--safety-key");
+      break;
+    case "przelewy24":
+      input.merchantId = need(o.merchantId, "--merchant-id");
+      input.posId = need(o.posId, "--pos-id");
+      input.apiKey = secret(o.apiKey, "--api-key");
+      input.crcKey = secret(o.crcKey, "--crc-key");
+      break;
+    case "paynow":
+      input.apiKey = secret(o.apiKey, "--api-key");
+      input.signatureKey = secret(o.signatureKey, "--signature-key");
+      break;
+    case "paypal":
+      input.clientId = need(o.clientId, "--client-id");
+      input.clientSecret = secret(o.clientSecret, "--client-secret");
+      break;
+    case "dodo":
+      input.apiKey = secret(o.apiKey, "--api-key");
+      break;
+  }
+  return input;
+}
+var TWILIO_REGIONS = ["us1", "ie1", "au1"];
+var TWILIO_AUTH_KINDS = ["authToken", "apiKey"];
+var TWILIO_SENDER_KINDS = [
+  "phoneNumber",
+  "messagingService"
+];
+var SMSAPI_REGIONS = ["pl", "com"];
+var SMS_PROVIDERS = ["twilio", "smsapi"];
+function registerIntegrationProviderCommands(integrations) {
+  const invoices = integrations.command("invoices").description(
+    "Invoicing accounts: fakturownia, ifirma, infakt, wfirma (v2), ing (ING Ksi\u0119gowo\u015B\u0107), stripe. Keys are verified with the provider and never printed."
+  );
+  invoices.command("connect <client>").description("Connect (or edit with --id) an invoicing account").option("--id <id>", "edit this existing account (from `integrations status`)").option("--name <name>", "creator-facing label (accountName)").option("--url <url>", "provider account URL / API base (not for stripe)").option("--api-key <key>", "API key (fakturownia / ifirma invoice key / infakt / ing)").option("--api-key-stdin", "read the API key from stdin").option("--api-key-env <VAR>", "read the API key from an environment variable").option("--account-api-key <key>", "ifirma: the account (user) API key").option("--access-key <key>", "wfirma").option("--secret-key <key>", "wfirma").option("--company-id <id>", "wfirma").option("--department-id <id>", "fakturownia / infakt / ifirma").option("--bank-account <iban>", "ing: bank account number for the invoice").action(async (clientArg, options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const account = await client.connectInvoicesClient(
+      buildInvoicesInput(parseInvoicesClient(clientArg), options)
+    );
+    emit(flags, account, () => {
+      process.stdout.write(`Connected ${account.client} ${account.id} (${account.url})
+`);
+    });
+  });
+  invoices.command("disconnect <client> <accountId>").description("Disconnect an invoicing account (irreversible). Requires --confirm.").option("--confirm", "required \u2014 acknowledges the stored key is deleted").action(
+    async (clientArg, accountId, options, command) => {
+      requireConfirm8(options.confirm, `disconnect ${clientArg} ${accountId}`);
+      const flags = getGlobalFlags(command);
+      const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+      const parsed = parseInvoicesClient(clientArg);
+      const result = await client.disconnectInvoicesClient(parsed, accountId);
+      emit(flags, { ...result, client: parsed, id: accountId }, () => {
+        process.stdout.write(`Disconnected ${parsed} ${accountId}
+`);
+      });
+    }
+  );
+  const payments = integrations.command("payments").description(
+    "Credential payment gateways: payu, tpay, przelewy24 (p24), paynow, paypal, dodo. Stripe connects in the dashboard (OAuth); the transfer method is `integrations manual-payment`."
+  );
+  payments.command("connect <gateway>").description(
+    "Connect a gateway \u2014 credentials are verified with the gateway first. With --secrets-env every secret flag takes an environment variable NAME instead of the value."
+  ).requiredOption("--name <name>", "creator-facing label").option("--pos-id <id>", "payu / tpay / przelewy24").option("--client-id <id>", "payu / tpay / paypal").option("--client-secret <secret>", "payu / tpay / paypal").option("--second-key <key>", "payu: the second (MD5) key").option("--safety-key <key>", "tpay: the security key").option("--api-key <key>", "przelewy24 / paynow / dodo").option("--signature-key <key>", "paynow").option("--merchant-id <id>", "przelewy24").option("--crc-key <key>", "przelewy24").option("--secrets-env", "treat every secret flag value as an environment variable name").action(async (gatewayArg, options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const status = await client.connectPaymentGateway(
+      buildGatewayInput(parseGateway(gatewayArg), options)
+    );
+    emit(flags, status, () => printPayments(status));
+  });
+  payments.command("disconnect <gateway>").description("Disconnect a gateway (irreversible, secrets deleted). Requires --confirm.").option("--confirm", "required \u2014 prices that only offered this gateway become unbuyable").action(async (gatewayArg, options, command) => {
+    requireConfirm8(options.confirm, `disconnect ${gatewayArg}`);
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const status = await client.disconnectPaymentGateway(parseGateway(gatewayArg));
+    emit(flags, status, () => printPayments(status));
+  });
+  payments.command("tpay-blik <on|off>").description("Turn Tpay recurring BLIK (BLIK subscriptions) on or off").action(async (value, _options, command) => {
+    const enabled = parseEnum(value, ["on", "off"], "tpay-blik") === "on";
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.setTpayRecurringBlik(enabled);
+    emit(flags, { ...result, enabled }, () => {
+      process.stdout.write(`Tpay recurring BLIK: ${enabled ? "on" : "off"}
+`);
+    });
+  });
+  const sms = integrations.command("sms").description("SMS providers (Twilio, SMSAPI) and which one campaigns send through");
+  const twilio = sms.command("twilio").description("Twilio account");
+  twilio.command("connect").description("Connect (or replace) the Twilio account \u2014 credentials verified with Twilio first").requiredOption("--account-sid <sid>", "Twilio account SID").option("--auth-token <token>", "auth token, or the API key secret with --auth-kind apiKey").option("--auth-token-stdin", "read the token from stdin").option("--auth-token-env <VAR>", "read the token from an environment variable").option("--auth-kind <authToken|apiKey>", "default authToken").option("--api-key-sid <sid>", "with --auth-kind apiKey: the API key SID (SK\u2026)").option("--region <us1|ie1|au1>", "default us1").requiredOption("--sender-kind <phoneNumber|messagingService>", "what --sender is").requiredOption("--sender <value>", "phone number (E.164) or messaging service SID (MG\u2026)").action(
+    async (options, command) => {
+      const token = readSecret2(
+        "--auth-token",
+        options.authToken,
+        options.authTokenStdin,
+        options.authTokenEnv
+      );
+      if (!token)
+        throw new Error(
+          "--auth-token (or --auth-token-stdin / --auth-token-env VAR) is required."
+        );
+      const input = {
+        accountSid: options.accountSid,
+        authToken: token,
+        senderKind: parseEnum(options.senderKind, TWILIO_SENDER_KINDS, "--sender-kind"),
+        sender: options.sender
+      };
+      if (options.region) input.region = parseEnum(options.region, TWILIO_REGIONS, "--region");
+      if (options.authKind)
+        input.authKind = parseEnum(options.authKind, TWILIO_AUTH_KINDS, "--auth-kind");
+      if (options.apiKeySid) input.apiKeySid = options.apiKeySid;
+      const flags = getGlobalFlags(command);
+      const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+      const result = await client.connectTwilio(input);
+      emit(flags, result, () => {
+        process.stdout.write(
+          `Connected Twilio ${result.accountSid} (${result.region}) sender ${result.sender}
+`
+        );
+      });
+    }
+  );
+  twilio.command("disconnect").description("Disconnect Twilio (secret deleted). Requires --confirm.").option("--confirm", "required").action(async (options, command) => {
+    requireConfirm8(options.confirm, "disconnect Twilio");
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.disconnectTwilio();
+    emit(flags, result, () => {
+      process.stdout.write("Twilio disconnected\n");
+    });
+  });
+  const smsapi = sms.command("smsapi").description("SMSAPI account (smsapi.pl / smsapi.com)");
+  smsapi.command("connect").description(
+    "Connect (or replace) the SMSAPI account \u2014 the token is verified with SMSAPI first"
+  ).option("--region <pl|com>", "default pl").option("--api-token <token>", "OAuth API token (prefer -stdin / -env)").option("--api-token-stdin", "read the token from stdin").option("--api-token-env <VAR>", "read the token from an environment variable").requiredOption("--sender <name>", "approved sender name (max 11 chars)").action(
+    async (options, command) => {
+      const token = readSecret2(
+        "--api-token",
+        options.apiToken,
+        options.apiTokenStdin,
+        options.apiTokenEnv
+      );
+      if (!token)
+        throw new Error("--api-token (or --api-token-stdin / --api-token-env VAR) is required.");
+      const flags = getGlobalFlags(command);
+      const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+      const result = await client.connectSmsApi({
+        region: options.region ? parseEnum(options.region, SMSAPI_REGIONS, "--region") : "pl",
+        apiToken: token,
+        sender: options.sender
+      });
+      emit(flags, result, () => {
+        process.stdout.write(
+          `Connected SMSAPI (${result.region}) sender ${result.sender}${result.points !== null ? `, ${result.points} points` : ""}
+`
+        );
+      });
+    }
+  );
+  smsapi.command("disconnect").description("Disconnect SMSAPI (token deleted). Requires --confirm.").option("--confirm", "required").action(async (options, command) => {
+    requireConfirm8(options.confirm, "disconnect SMSAPI");
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.disconnectSmsApi();
+    emit(flags, result, () => {
+      process.stdout.write("SMSAPI disconnected\n");
+    });
+  });
+  smsapi.command("refresh-senders").description("Re-fetch the approved SMSAPI sender names").action(async (_options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.refreshSmsApiSenders();
+    emit(flags, result, () => {
+      process.stdout.write(
+        `Senders: ${result.senders.join(", ") || "(none)"}
+Default: ${result.sender}
+`
+      );
+    });
+  });
+  smsapi.command("default-sender <sender>").description("Pick which approved SMSAPI sender campaigns send from").action(async (sender, _options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.setDefaultSmsApiSender(sender);
+    emit(flags, result, () => {
+      process.stdout.write(`Default SMSAPI sender: ${result.sender}
+`);
+    });
+  });
+  sms.command("default-provider <twilio|smsapi>").description("Choose which connected SMS provider campaigns and automations send through").action(async (value, _options, command) => {
+    const provider = parseEnum(value, SMS_PROVIDERS, "default-provider");
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.setDefaultSmsProvider(provider);
+    emit(flags, result, () => {
+      process.stdout.write(`Default SMS provider: ${result.defaultProvider}
+`);
+    });
+  });
+}
+
+// src/commands/integrations/index.ts
+var CLIENT_ALIASES = {
+  gtm: "googleTagManager",
+  ga4: "googleAnalytics",
+  ga: "googleAnalytics",
+  clarity: "microsoftClarity",
+  twitter: "x"
+};
+var NONE = "none";
+function parseClient(value) {
+  const alias = CLIENT_ALIASES[value.trim().toLowerCase()];
+  if (alias) return alias;
+  const match = MANAGED_CONVERSION_TRACKING_CLIENTS.find(
+    (client) => client.toLowerCase() === value.trim().toLowerCase()
+  );
+  if (!match) {
+    throw new Error(
+      `Unknown platform: ${value} (expected ${MANAGED_CONVERSION_TRACKING_CLIENTS.join(" | ")}; aliases: ${Object.keys(CLIENT_ALIASES).join(", ")}). Meta pixel / CAPI is dashboard-only.`
+    );
+  }
+  return match;
+}
+function parseOnOff3(value, flag) {
+  if (value === void 0) return void 0;
+  if (value === "on") return true;
+  if (value === "off") return false;
+  throw new Error(`Invalid ${flag}: ${value} (expected on | off)`);
+}
+function textOrNull(value) {
+  if (value === void 0) return void 0;
+  return value.trim().toLowerCase() === NONE ? null : value;
+}
+function requireConfirm9(confirm, what) {
+  if (!confirm) {
+    throw new Error(`Refusing to ${what} without --confirm. Re-run with --confirm to proceed.`);
+  }
+}
+var TRACK_FLAG_DEFAULTS = {
+  trackPurchase: true,
+  trackInitCheckout: true,
+  trackAddToCart: true,
+  trackTrialStarted: false
+};
+var REQUIRED_ID_FLAG = {
+  googleAnalytics: "measurementId",
+  googleTagManager: "containerId",
+  tiktok: "pixelId",
+  x: "pixelId",
+  linkedin: "partnerId",
+  microsoftClarity: "projectId",
+  hotjar: "siteId"
+};
+var FLAG_NAME = {
+  name: "--name",
+  containerId: "--container-id",
+  measurementId: "--measurement-id",
+  apiSecret: "--api-secret",
+  pixelId: "--pixel-id",
+  accessToken: "--access-token",
+  partnerId: "--partner-id",
+  projectId: "--project-id",
+  siteId: "--site-id",
+  purchaseTag: "--purchase-tag",
+  initCheckoutTag: "--init-checkout-tag",
+  addToCartTag: "--add-to-cart-tag",
+  trialStartedTag: "--trial-started-tag",
+  trackPurchase: "--track-purchase",
+  trackInitCheckout: "--track-init-checkout",
+  trackAddToCart: "--track-add-to-cart",
+  trackTrialStarted: "--track-trial-started"
+};
+var hasEventFlags = (client) => client === "googleAnalytics" || client === "tiktok" || client === "x" || client === "linkedin";
+function buildUpsertInput(client, options, existing) {
+  const name = options.name ?? existing?.name;
+  if (!name) throw new Error("--name is required when adding an integration.");
+  const input = { client, name };
+  if (existing) input.integrationId = existing.id;
+  const existingFields = existing ? { ...existing } : {};
+  const pick = (key, provided) => {
+    if (provided !== void 0) return provided;
+    const value = existingFields[key];
+    return typeof value === "string" ? value : void 0;
+  };
+  switch (client) {
+    case "googleTagManager":
+      input.containerId = pick("containerId", options.containerId);
+      break;
+    case "googleAnalytics":
+      input.measurementId = pick("measurementId", options.measurementId);
+      if (options.apiSecret !== void 0) input.apiSecret = textOrNull(options.apiSecret);
+      break;
+    case "tiktok":
+      input.pixelId = pick("pixelId", options.pixelId);
+      if (options.accessToken !== void 0) input.accessToken = textOrNull(options.accessToken);
+      break;
+    case "x":
+      input.pixelId = pick("pixelId", options.pixelId);
+      if (options.accessToken !== void 0) input.accessToken = textOrNull(options.accessToken);
+      input.purchaseEventTag = textOrNull(options.purchaseTag) ?? pick("purchaseEventTag", void 0) ?? null;
+      input.initCheckoutEventTag = textOrNull(options.initCheckoutTag) ?? pick("initCheckoutEventTag", void 0) ?? null;
+      input.addToCartEventTag = textOrNull(options.addToCartTag) ?? pick("addToCartEventTag", void 0) ?? null;
+      input.trialStartedEventTag = textOrNull(options.trialStartedTag) ?? pick("trialStartedEventTag", void 0) ?? null;
+      break;
+    case "linkedin":
+      input.partnerId = pick("partnerId", options.partnerId);
+      if (options.accessToken !== void 0) input.accessToken = textOrNull(options.accessToken);
+      input.purchaseConversionUrn = textOrNull(options.purchaseTag) ?? pick("purchaseConversionUrn", void 0) ?? null;
+      input.initCheckoutConversionUrn = textOrNull(options.initCheckoutTag) ?? pick("initCheckoutConversionUrn", void 0) ?? null;
+      input.addToCartConversionUrn = textOrNull(options.addToCartTag) ?? pick("addToCartConversionUrn", void 0) ?? null;
+      input.trialStartedConversionUrn = textOrNull(options.trialStartedTag) ?? pick("trialStartedConversionUrn", void 0) ?? null;
+      break;
+    case "microsoftClarity":
+      input.projectId = pick("projectId", options.projectId);
+      break;
+    case "hotjar":
+      input.siteId = pick("siteId", options.siteId);
+      break;
+  }
+  const requiredKey = REQUIRED_ID_FLAG[client];
+  if (input[requiredKey] === void 0) {
+    throw new Error(`${FLAG_NAME[requiredKey]} is required for ${client}.`);
+  }
+  if (hasEventFlags(client)) {
+    const flags = existing && "trackPurchase" in existing ? existing : TRACK_FLAG_DEFAULTS;
+    input.trackPurchase = parseOnOff3(options.trackPurchase, FLAG_NAME.trackPurchase) ?? flags.trackPurchase;
+    input.trackInitCheckout = parseOnOff3(options.trackInitCheckout, FLAG_NAME.trackInitCheckout) ?? flags.trackInitCheckout;
+    input.trackAddToCart = parseOnOff3(options.trackAddToCart, FLAG_NAME.trackAddToCart) ?? flags.trackAddToCart;
+    input.trackTrialStarted = parseOnOff3(options.trackTrialStarted, FLAG_NAME.trackTrialStarted) ?? flags.trackTrialStarted;
+  }
+  return input;
+}
+function platformIdOf(integration) {
+  switch (integration.client) {
+    case "googleAnalytics":
+      return integration.measurementId;
+    case "googleTagManager":
+      return integration.containerId;
+    case "tiktok":
+    case "x":
+      return integration.pixelId;
+    case "linkedin":
+      return integration.partnerId;
+    case "microsoftClarity":
+      return integration.projectId;
+    case "hotjar":
+      return integration.siteId;
+  }
+}
+function serverSideOf(integration) {
+  if ("apiSecretPath" in integration) return integration.apiSecretPath ? "yes" : "";
+  return "n/a";
+}
+function printIntegrations(integrations) {
+  printTable(
+    integrations.map((integration) => ({
+      id: integration.id,
+      platform: integration.client,
+      name: integration.name,
+      platformId: platformIdOf(integration),
+      serverSide: serverSideOf(integration),
+      default: integration.isWorkspaceDefault ? "yes" : "",
+      updatedAt: integration.updatedAt
+    })),
+    ["id", "platform", "name", "platformId", "serverSide", "default", "updatedAt"]
+  );
+}
+function printIntegration(integration, headline) {
+  process.stdout.write(`${headline} ${integration.id} (${integration.client})
+`);
+  process.stdout.write(`  Name: ${integration.name}
+`);
+  process.stdout.write(`  Platform id: ${platformIdOf(integration)}
+`);
+  process.stdout.write(`  Workspace default: ${integration.isWorkspaceDefault ? "yes" : "no"}
+`);
+  if ("trackPurchase" in integration) {
+    process.stdout.write(
+      `  Events: purchase=${integration.trackPurchase ? "on" : "off"} initCheckout=${integration.trackInitCheckout ? "on" : "off"} addToCart=${integration.trackAddToCart ? "on" : "off"} trialStarted=${integration.trackTrialStarted ? "on" : "off"}
+`
+    );
+  }
+  if ("apiSecretPath" in integration) {
+    process.stdout.write(`  Server-side events: ${integration.apiSecretPath ? "on" : "off"}
+`);
+  }
+}
+function addPlatformOptions(command) {
+  return command.option("--name <name>", "creator-facing label").option("--container-id <id>", "googleTagManager: GTM container id, e.g. GTM-ABCD123").option("--measurement-id <id>", "googleAnalytics: GA4 measurement id, e.g. G-XXXXXXXXXX").option(
+    "--api-secret <secret|none>",
+    "googleAnalytics: Measurement Protocol API secret for server-side events (validated against GA4); none = client-side only"
+  ).option("--pixel-id <id>", "tiktok / x: pixel id").option(
+    "--access-token <token|none>",
+    "tiktok / x / linkedin: events API access token for server-side events (TikTok/LinkedIn tokens are validated); none = client-side only"
+  ).option("--partner-id <id>", "linkedin: Insight Tag partner id (6-12 digits)").option("--project-id <id>", "microsoftClarity: project id").option("--site-id <id>", "hotjar: site id").option(
+    "--purchase-tag <tag|none>",
+    "x: purchase event tag / linkedin: purchase conversion URN"
+  ).option("--init-checkout-tag <tag|none>", "x / linkedin: initiate-checkout tag / URN").option("--add-to-cart-tag <tag|none>", "x / linkedin: add-to-cart tag / URN").option("--trial-started-tag <tag|none>", "x / linkedin: trial-started tag / URN").option("--track-purchase <on|off>", "GA4 / TikTok / X / LinkedIn: send Purchase (default on)").option(
+    "--track-init-checkout <on|off>",
+    "GA4 / TikTok / X / LinkedIn: send InitiateCheckout (default on)"
+  ).option(
+    "--track-add-to-cart <on|off>",
+    "GA4 / TikTok / X / LinkedIn: send AddToCart (default on)"
+  ).option(
+    "--track-trial-started <on|off>",
+    "GA4 / TikTok / X / LinkedIn: send TrialStarted (default off)"
+  );
+}
+function registerIntegrationsCommands(program2) {
+  const integrations = program2.command("integrations").description(
+    "Conversion-tracking integrations (Settings \u2192 Integrations \u2192 Analytics): Google Tag Manager, Google Analytics 4, TikTok, X, LinkedIn, Microsoft Clarity, Hotjar. Meta pixel / Conversions API, payment gateways and email clients stay dashboard-only for now. Assign per offer with `offers update --tracking-integration-ids`, or workspace-wide with `integrations set-defaults`."
+  );
+  registerIntegrationConnectionCommands(integrations);
+  registerIntegrationProviderCommands(integrations);
+  integrations.command("list").description("List the managed conversion-tracking integrations and the workspace defaults").option(
+    "--client <platform>",
+    "only one platform (e.g. gtm, ga4, tiktok, x, linkedin, clarity, hotjar)"
+  ).action(async (options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.listConversionTrackingIntegrations();
+    const filter = options.client !== void 0 ? parseClient(options.client) : void 0;
+    const entries = filter ? result.integrations.filter((integration) => integration.client === filter) : result.integrations;
+    emit(flags, { ...result, integrations: entries }, () => {
+      printIntegrations(entries);
+      process.stdout.write(
+        `Workspace defaults: ${result.defaultIntegrationIds.length > 0 ? result.defaultIntegrationIds.join(", ") : "(none)"}
+`
+      );
+    });
+  });
+  addPlatformOptions(
+    integrations.command("add <platform>").description(
+      "Add a conversion-tracking integration. The first one a workspace connects becomes the workspace default automatically; later ones need `integrations set-defaults` or a per-offer assignment. Platform: gtm | ga4 | tiktok | x | linkedin | clarity | hotjar"
+    )
+  ).action(async (platform2, options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const input = buildUpsertInput(parseClient(platform2), options, null);
+    const result = await client.upsertConversionTrackingIntegration(input);
+    emit(flags, result, () => printIntegration(result, "Added"));
+  });
+  addPlatformOptions(
+    integrations.command("update <platform> <integrationId>").description(
+      "Edit an integration \u2014 only the flags you pass change; omitted secrets stay stored. Ids come from `integrations list`."
+    )
+  ).action(
+    async (platform2, integrationId, options, command) => {
+      const flags = getGlobalFlags(command);
+      const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+      const parsedClient = parseClient(platform2);
+      const current = await client.listConversionTrackingIntegrations();
+      const existing = current.integrations.find(
+        (integration) => integration.id === integrationId && integration.client === parsedClient
+      );
+      if (!existing) {
+        throw new Error(
+          `No ${parsedClient} integration with id ${integrationId}. Run \`zanfia integrations list\`.`
+        );
+      }
+      const input = buildUpsertInput(parsedClient, options, existing);
+      const result = await client.upsertConversionTrackingIntegration(input);
+      emit(flags, result, () => printIntegration(result, "Updated"));
+    }
+  );
+  integrations.command("remove <platform> <integrationId>").description(
+    "Remove an integration (irreversible). Offers and the workspace defaults that still list the id simply stop tracking on that platform. Requires --confirm."
+  ).option("--confirm", "required \u2014 acknowledges the integration is deleted").action(
+    async (platform2, integrationId, options, command) => {
+      requireConfirm9(options.confirm, `remove integration ${integrationId}`);
+      const flags = getGlobalFlags(command);
+      const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+      const result = await client.removeConversionTrackingIntegration(
+        parseClient(platform2),
+        integrationId
+      );
+      emit(flags, { ...result, integrationId }, () => {
+        process.stdout.write(`Removed integration ${integrationId}
+`);
+      });
+    }
+  );
+  integrations.command("set-defaults <ids|none>").description(
+    "Replace the workspace-default integrations (comma-separated ids; none = clear) applied to every offer that inherits defaults. Meta ids from `stats conversion-health` may be included."
+  ).action(async (ids, _options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const integrationIds = ids.trim().toLowerCase() === NONE ? [] : ids.split(",").map((id) => id.trim()).filter((id) => id.length > 0);
+    const result = await client.setDefaultConversionTracking(integrationIds);
+    emit(flags, result, () => {
+      process.stdout.write(
+        `Workspace defaults: ${result.integrationIds.length > 0 ? result.integrationIds.join(", ") : "(none)"}
+`
+      );
+    });
+  });
+}
+
+// src/commands/join/index.ts
+var MAX_CODE_ATTEMPTS2 = 5;
+var HANDLE_REGEX = /^[a-z0-9][a-z0-9-]{1,62}$/;
+var EMAIL_REGEX2 = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+var AGENT_DOCS_URL = "https://zanfia.com/help/developer-cli/agents";
+function joinUrl(base, handle, step) {
+  return `${base.replace(/\/$/, "")}/v1/join/${encodeURIComponent(handle)}/${step}`;
+}
+async function runJoin(handleInput, options) {
+  const handle = handleInput.trim().toLowerCase();
+  if (!HANDLE_REGEX.test(handle)) {
+    throw new Error(
+      "Community handle must be lowercase letters, digits and dashes (e.g. crew-of-one)."
+    );
+  }
+  const communityApiUrl = resolveCommunityApiUrl();
+  if (!communityApiUrl) {
+    throw new Error(
+      "No Community API URL configured. Set ZANFIA_COMMUNITY_API_URL (this build has no baked backend)."
+    );
+  }
+  const verbose = options.verbose === true;
+  const email = (options.email ?? await promptLine("Email: ")).trim().toLowerCase();
+  if (!EMAIL_REGEX2.test(email)) {
+    throw new Error("Please enter a valid email address.");
+  }
+  const started = await postJson2(
+    "Join",
+    joinUrl(communityApiUrl, handle, "start"),
+    { email, lang: "en" },
+    { verbose }
+  );
+  if (!options.json) {
+    process.stdout.write(
+      `Joining ${started.communityName} (${started.workspaceName}) \u2014 a 6-digit code was sent to ${email}.
+`
+    );
+  }
+  const firstName = options.name ?? (options.json ? "" : await promptLine("Your name (optional): "));
+  const hostname3 = safeHostname2();
+  let completed = null;
+  for (let attempt = 1; attempt <= MAX_CODE_ATTEMPTS2 && !completed; attempt += 1) {
+    const code = options.code ?? (await promptLine("Code from the email (or 'r' to resend): ")).trim();
+    if (code.toLowerCase() === "r") {
+      await postJson2(
+        "Resend",
+        joinUrl(communityApiUrl, handle, "start"),
+        { email, lang: "en" },
+        { verbose }
+      );
+      process.stdout.write("Code re-sent.\n");
+      attempt -= 1;
+      continue;
+    }
+    try {
+      completed = await postJson2(
+        "Join",
+        joinUrl(communityApiUrl, handle, "complete"),
+        { email, code, firstName, hostname: hostname3 },
+        { verbose }
+      );
+    } catch (err) {
+      if (options.code || attempt === MAX_CODE_ATTEMPTS2) throw err;
+      process.stdout.write(`${err instanceof Error ? err.message : String(err)}
+`);
+    }
+  }
+  if (!completed) {
+    throw new Error("Could not verify the code.");
+  }
+  const path2 = writeCredentials({
+    apiKey: completed.token,
+    apiUrl: communityApiUrl,
+    savedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    source: "oauth",
+    expiresAt: completed.expiresAt,
+    userEmail: completed.userEmail,
+    workspaceId: completed.workspaceId,
+    workspaceName: completed.workspaceName,
+    kind: "member"
+  });
+  if (options.json) {
+    process.stdout.write(
+      `${JSON.stringify(
+        {
+          joined: true,
+          alreadyMember: completed.alreadyMember,
+          communityId: completed.communityId,
+          communityName: completed.communityName,
+          workspaceId: completed.workspaceId,
+          workspaceName: completed.workspaceName,
+          introChannelId: completed.introChannelId,
+          userEmail: completed.userEmail,
+          expiresAt: completed.expiresAt,
+          credentialsPath: path2
+        },
+        null,
+        2
+      )}
+`
+    );
+    return;
+  }
+  const intro = completed.introChannelId ? `  zanfia communities post create ${completed.communityId} ${completed.introChannelId} --content "Hi, I'm <your agent>. I ..."
+` : "";
+  process.stdout.write(
+    `
+${completed.alreadyMember ? "Welcome back to" : "You are in:"} ${completed.communityName}.
+Member key saved to ${path2} (expires ${completed.expiresAt.slice(0, 10)}).
+
+Next:
+  zanfia communities list
+  zanfia communities channels ${completed.communityId}
+` + (intro ? `
+Introduce your agent:
+${intro}` : "") + `
+Plug in your agent: ${AGENT_DOCS_URL}
+`
+  );
+}
+function registerJoinCommand(program2) {
+  program2.command("join <handle>").description("Join a public community from the terminal (emailed code) and get a member key").option("--email <email>", "email to join with (prompted when omitted)").option("--name <name>", "your display name (prompted when omitted)").option("--code <code>", "the 6-digit code from the email (prompted when omitted)").addHelpText(
+    "after",
+    `
+Examples:
+  zanfia join crew-of-one
+  zanfia join crew-of-one --email me@example.com --name "Sam" --code 123456
+
+The key is a MEMBER key: it reaches the Community API for that creator's
+communities only (read/post/comment/chat), never your own workspace. It is
+saved to ~/.config/zanfia/credentials.json and expires in 90 days \u2014 run
+join again to refresh it.
+`
+  ).action(async (handle, options, command) => {
+    const globals = getGlobalFlags(command);
+    await runJoin(handle, { ...options, json: globals.json, verbose: globals.verbose });
+  });
+}
+
+// src/commands/media/index.ts
+import { existsSync, readFileSync as readFileSync17, writeFileSync as writeFileSync4 } from "fs";
+import { readFile, stat as stat3 } from "fs/promises";
+import { basename } from "path";
+
+// src/client/bunnyUpload.ts
+import { createReadStream as createReadStream2 } from "fs";
 import { stat as stat2 } from "fs/promises";
 
 // ../../node_modules/tus-js-client/lib.esm/error.js
@@ -20909,16 +22137,61 @@ async function uploadVideoToBunny(params) {
   });
 }
 
+// src/utils/mime.ts
+var OCTET_STREAM_MIME = "application/octet-stream";
+function mimeFromName(name) {
+  const n = name.toLowerCase();
+  if (n.endsWith(".png")) return "image/png";
+  if (n.endsWith(".jpg") || n.endsWith(".jpeg")) return "image/jpeg";
+  if (n.endsWith(".webp")) return "image/webp";
+  if (n.endsWith(".gif")) return "image/gif";
+  if (n.endsWith(".svg")) return "image/svg+xml";
+  if (n.endsWith(".avif")) return "image/avif";
+  if (n.endsWith(".pdf")) return "application/pdf";
+  if (n.endsWith(".zip")) return "application/zip";
+  if (n.endsWith(".mp3")) return "audio/mpeg";
+  if (n.endsWith(".mp4")) return "video/mp4";
+  if (n.endsWith(".txt") || n.endsWith(".md")) return "text/plain";
+  if (n.endsWith(".csv")) return "text/csv";
+  if (n.endsWith(".json")) return "application/json";
+  if (n.endsWith(".epub")) return "application/epub+zip";
+  if (n.endsWith(".docx")) {
+    return "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
+  }
+  if (n.endsWith(".xlsx")) {
+    return "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
+  }
+  return null;
+}
+function mimeFromBytes(bytes) {
+  const ascii = (start, text) => bytes.length >= start + text.length && bytes.toString("latin1", start, start + text.length) === text;
+  if (bytes.length >= 8 && bytes[0] === 137 && ascii(1, "PNG\r\n\n")) return "image/png";
+  if (bytes.length >= 3 && bytes[0] === 255 && bytes[1] === 216 && bytes[2] === 255) {
+    return "image/jpeg";
+  }
+  if (ascii(0, "GIF87a") || ascii(0, "GIF89a")) return "image/gif";
+  if (ascii(0, "RIFF") && ascii(8, "WEBP")) return "image/webp";
+  if (ascii(4, "ftypavif")) return "image/avif";
+  if (ascii(0, "%PDF-")) return "application/pdf";
+  if (bytes.toString("utf8", 0, Math.min(bytes.length, 1024)).toLowerCase().includes("<svg")) {
+    return "image/svg+xml";
+  }
+  return null;
+}
+function inferMimeType(name, bytes) {
+  return mimeFromName(name) ?? mimeFromBytes(bytes) ?? OCTET_STREAM_MIME;
+}
+
 // src/commands/media/index.ts
 var DEFAULT_AI_IMAGE_ASPECT = "1:1" /* Square */;
 var DEFAULT_AI_IMAGE_QUALITY = "1K" /* Standard */;
-function requireConfirm7(confirm, what) {
+function requireConfirm10(confirm, what) {
   if (!confirm) {
     throw new Error(`Refusing to ${what} without --confirm. Re-run with --confirm to proceed.`);
   }
 }
 function resolveTextOrFile(value) {
-  const text = existsSync(value) ? readFileSync15(value, "utf8") : value;
+  const text = existsSync(value) ? readFileSync17(value, "utf8") : value;
   if (!text.trim()) throw new Error("The text (or the file it points to) is empty.");
   return text.trim();
 }
@@ -20974,32 +22247,6 @@ var TRANSCRIBE_STATUS_TEXT = {
   ["already_running" /* AlreadyRunning */]: "Transcription is already running",
   ["already_transcribed" /* AlreadyTranscribed */]: "Already transcribed \u2014 nothing queued (pass --force to re-transcribe)"
 };
-function mimeFromName(name) {
-  const n = name.toLowerCase();
-  if (n.endsWith(".png")) return "image/png";
-  if (n.endsWith(".jpg") || n.endsWith(".jpeg")) return "image/jpeg";
-  if (n.endsWith(".webp")) return "image/webp";
-  if (n.endsWith(".gif")) return "image/gif";
-  if (n.endsWith(".svg")) return "image/svg+xml";
-  if (n.endsWith(".avif")) return "image/avif";
-  if (n.endsWith(".pdf")) return "application/pdf";
-  return null;
-}
-function mimeFromBytes(bytes) {
-  const ascii = (start, text) => bytes.length >= start + text.length && bytes.toString("latin1", start, start + text.length) === text;
-  if (bytes.length >= 8 && bytes[0] === 137 && ascii(1, "PNG\r\n\n")) return "image/png";
-  if (bytes.length >= 3 && bytes[0] === 255 && bytes[1] === 216 && bytes[2] === 255) {
-    return "image/jpeg";
-  }
-  if (ascii(0, "GIF87a") || ascii(0, "GIF89a")) return "image/gif";
-  if (ascii(0, "RIFF") && ascii(8, "WEBP")) return "image/webp";
-  if (ascii(4, "ftypavif")) return "image/avif";
-  if (ascii(0, "%PDF-")) return "application/pdf";
-  if (bytes.toString("utf8", 0, Math.min(bytes.length, 1024)).toLowerCase().includes("<svg")) {
-    return "image/svg+xml";
-  }
-  return null;
-}
 function videoMimeFromName(name) {
   const n = name.toLowerCase();
   if (n.endsWith(".mov")) return "video/quicktime";
@@ -21022,7 +22269,7 @@ function registerMediaCommands(program2) {
     const name = options.name ?? basename(options.file);
     const input = {
       name,
-      mimeType: options.mime ?? mimeFromName(name) ?? mimeFromBytes(bytes) ?? "application/octet-stream",
+      mimeType: options.mime ?? inferMimeType(name, bytes),
       data: bytes.toString("base64"),
       folder: options.folder,
       description: options.description
@@ -21223,7 +22470,7 @@ function registerMediaCommands(program2) {
   ).option("--folder <name>", "media library folder name to file the image into").option("--text-language <code>", "language of any text rendered inside the image (ISO code)").option("--confirm", "required \u2014 acknowledge spending AI credits").action(
     async (options, command) => {
       const flags = getGlobalFlags(command);
-      requireConfirm7(options.confirm, "generate an AI image (spends AI credits)");
+      requireConfirm10(options.confirm, "generate an AI image (spends AI credits)");
       const input = {
         prompt: resolveTextOrFile(options.prompt),
         aspectRatio: parseEnumOption(
@@ -21255,7 +22502,7 @@ function registerMediaCommands(program2) {
   ).argument("<mediaId>", "video media item id").option("--language <code>", "spoken language hint (ISO code); omit for auto-detect").option("--force", "re-transcribe even when a transcript already exists").option("--confirm", "required \u2014 acknowledge spending transcription minutes").action(
     async (mediaId, options, command) => {
       const flags = getGlobalFlags(command);
-      requireConfirm7(options.confirm, `transcribe ${mediaId} (spends transcription minutes)`);
+      requireConfirm10(options.confirm, `transcribe ${mediaId} (spends transcription minutes)`);
       const input = {};
       if (options.language !== void 0) input.language = options.language;
       if (options.force) input.force = true;
@@ -21329,13 +22576,13 @@ function registerMediaCommands(program2) {
 }
 
 // src/commands/newsletters/index.ts
-import { existsSync as existsSync2, readFileSync as readFileSync16 } from "fs";
+import { existsSync as existsSync2, readFileSync as readFileSync18 } from "fs";
 var ISSUE_STATUSES = ["public", "hidden"];
 var ISSUE_VISIBILITIES = ["public", "hidden", "locked"];
 var ISSUE_RENDER_MODES = ["snapshot", "article"];
 var THUMBNAIL_NONE = "none";
 function resolveMarkdownOrFile(value) {
-  return existsSync2(value) ? readFileSync16(value, "utf8") : value;
+  return existsSync2(value) ? readFileSync18(value, "utf8") : value;
 }
 function parseIdList2(value, flag) {
   const ids = value.split(",").map((id) => id.trim()).filter(Boolean);
@@ -21376,7 +22623,7 @@ function parseBool2(value, flag) {
 }
 function parseJsonFileOrInline5(value, flag) {
   const trimmed = value.trim();
-  const raw = trimmed.startsWith("{") || trimmed.startsWith("[") ? trimmed : readFileSync16(value, "utf8");
+  const raw = trimmed.startsWith("{") || trimmed.startsWith("[") ? trimmed : readFileSync18(value, "utf8");
   try {
     return JSON.parse(raw);
   } catch (error) {
@@ -21691,7 +22938,7 @@ Next: \`newsletters issues draft save ${productId} ${issue.id} --content <markdo
 }
 
 // src/commands/offers/index.ts
-import { readFileSync as readFileSync17 } from "fs";
+import { readFileSync as readFileSync19 } from "fs";
 var PRICE_BILLING_TYPES = ["one_time", "recurring", "installments"];
 var PRICE_INTERVALS = ["day", "week", "month", "year"];
 var SALE_START_DISPLAYS = ["hidden", "countdown"];
@@ -21701,8 +22948,11 @@ var PRICE_OPERATIONS = [
   "deactivate",
   "hide",
   "unhide",
-  "change-amount"
+  "change-amount",
+  "edit-details"
 ];
+var EDIT_DETAILS_OPERATION = "edit-details";
+var CHANGE_AMOUNT_OPERATION = "change-amount";
 function parseChoice4(value, allowed, flag) {
   const match = allowed.find((candidate) => candidate === value);
   if (match === void 0) {
@@ -21710,27 +22960,154 @@ function parseChoice4(value, allowed, flag) {
   }
   return match;
 }
-function parsePositiveInt12(value, flag) {
-  const n = Number.parseInt(value, 10);
-  if (!Number.isInteger(n) || n <= 0) {
-    throw new Error(`Invalid ${flag}: ${value} (expected a positive integer)`);
+function parsePositiveInt12(value, flag) {
+  const n = Number.parseInt(value, 10);
+  if (!Number.isInteger(n) || n <= 0) {
+    throw new Error(`Invalid ${flag}: ${value} (expected a positive integer)`);
+  }
+  return n;
+}
+function parseBool3(value, flag) {
+  const v = value.trim().toLowerCase();
+  if (["on", "true", "yes", "1"].includes(v)) return true;
+  if (["off", "false", "no", "0"].includes(v)) return false;
+  throw new Error(`Invalid ${flag}: ${value} (expected on/off, true/false, yes/no).`);
+}
+function parseJsonFileOrInline6(value, flag) {
+  const trimmed = value.trim();
+  const raw = trimmed.startsWith("{") || trimmed.startsWith("[") ? trimmed : readFileSync19(value, "utf8");
+  try {
+    return JSON.parse(raw);
+  } catch (error) {
+    throw new Error(`Invalid JSON for ${flag}: ${error.message}`);
+  }
+}
+function buildPriceUpdateInput(options) {
+  const hasDetails = options.label !== void 0 || options.description !== void 0;
+  const operation = options.operation !== void 0 ? parseChoice4(options.operation, PRICE_OPERATIONS, "--operation") : hasDetails ? EDIT_DETAILS_OPERATION : void 0;
+  if (operation === void 0) {
+    throw new Error(
+      `--operation <${PRICE_OPERATIONS.join("|")}> is required (or pass --label / --description to edit the details).`
+    );
+  }
+  if (hasDetails && operation !== EDIT_DETAILS_OPERATION) {
+    throw new Error(
+      `--label / --description only apply to --operation ${EDIT_DETAILS_OPERATION}, not ${operation}.`
+    );
+  }
+  if (operation === EDIT_DETAILS_OPERATION) {
+    if (!hasDetails) {
+      throw new Error(
+        `--operation ${EDIT_DETAILS_OPERATION} requires --label and/or --description.`
+      );
+    }
+    if (options.label !== void 0 && options.label.trim().length === 0) {
+      throw new Error("--label must not be empty (labels cannot be cleared, only replaced).");
+    }
+    return {
+      operation,
+      newLabel: options.label,
+      // An empty string clears the description (the API accepts '' or null; null is explicit).
+      newDescription: options.description === void 0 ? void 0 : options.description.length === 0 ? null : options.description
+    };
+  }
+  if (operation === CHANGE_AMOUNT_OPERATION && !options.amount) {
+    throw new Error(`--operation ${CHANGE_AMOUNT_OPERATION} requires --amount <minor-units>.`);
+  }
+  return {
+    operation,
+    newAmountCents: operation === CHANGE_AMOUNT_OPERATION && options.amount ? parsePositiveInt12(options.amount, "--amount") : void 0
+  };
+}
+var MEDIA_TYPES = ["image", "video"];
+var IMAGE_MEDIA_TYPE2 = "image";
+var VIDEO_MEDIA_TYPE = "video";
+var READY_UPLOAD_STATUS = "ready";
+var GALLERY_KEYS = /* @__PURE__ */ new Set([
+  "checkoutMedia",
+  "checkoutImages",
+  "checkoutImagesMedia"
+]);
+var BASE_DETAIL_KEYS = /* @__PURE__ */ new Set([
+  "id",
+  "productId",
+  "name",
+  "slug",
+  "title",
+  "active",
+  "archived",
+  "isFree",
+  "priceCount",
+  "createdAt",
+  "description",
+  "language",
+  "successUrl",
+  "prices",
+  "orderBumps"
+]);
+function galleryOf(checkout) {
+  if (checkout.checkoutMedia) return [...checkout.checkoutMedia];
+  return (checkout.checkoutImages ?? []).map((url, index) => ({
+    type: IMAGE_MEDIA_TYPE2,
+    url,
+    mediaId: checkout.checkoutImagesMedia?.[index]?.mediaId ?? null,
+    thumbnailUrl: null
+  }));
+}
+function galleryPatch(media) {
+  const images = media.filter((item) => item.type === IMAGE_MEDIA_TYPE2);
+  return {
+    checkoutMedia: media,
+    checkoutImages: images.map((item) => item.url),
+    checkoutImagesMedia: images.map((item) => ({ url: item.url, mediaId: item.mediaId }))
+  };
+}
+function bunnyEmbedUrl(video) {
+  return `https://iframe.mediadelivery.net/embed/${video.bunnyLibraryId}/${video.bunnyVideoId}`;
+}
+function galleryEntryFromLibrary(item) {
+  const type = MEDIA_TYPES.find((candidate) => candidate === item.type);
+  if (type === void 0) {
+    throw new Error(
+      `Media ${item.id} is a ${item.type} \u2014 only images and videos can go in the offer gallery.`
+    );
   }
-  return n;
+  if (type === VIDEO_MEDIA_TYPE) {
+    if (item.uploadStatus !== READY_UPLOAD_STATUS || !item.video) {
+      throw new Error(
+        `Media ${item.id} is a video that is not ready yet (uploadStatus: ${item.uploadStatus}) \u2014 add it once it finishes processing.`
+      );
+    }
+    return {
+      type,
+      url: bunnyEmbedUrl(item.video),
+      mediaId: item.id,
+      thumbnailUrl: item.thumbnailUrl ?? null
+    };
+  }
+  if (!item.url) {
+    throw new Error(`Media ${item.id} has no public URL yet (uploadStatus: ${item.uploadStatus}).`);
+  }
+  return { type, url: item.url, mediaId: item.id, thumbnailUrl: item.thumbnailUrl ?? null };
 }
-function parseBool3(value, flag) {
-  const v = value.trim().toLowerCase();
-  if (["on", "true", "yes", "1"].includes(v)) return true;
-  if (["off", "false", "no", "0"].includes(v)) return false;
-  throw new Error(`Invalid ${flag}: ${value} (expected on/off, true/false, yes/no).`);
+function printGallery(media) {
+  printTable(
+    media.map((item, index) => ({
+      index,
+      type: item.type,
+      mediaId: item.mediaId ?? "",
+      url: item.url,
+      thumbnailUrl: item.thumbnailUrl ?? ""
+    })),
+    ["index", "type", "mediaId", "url", "thumbnailUrl"]
+  );
 }
-function parseJsonFileOrInline6(value, flag) {
-  const trimmed = value.trim();
-  const raw = trimmed.startsWith("{") || trimmed.startsWith("[") ? trimmed : readFileSync17(value, "utf8");
-  try {
-    return JSON.parse(raw);
-  } catch (error) {
-    throw new Error(`Invalid JSON for ${flag}: ${error.message}`);
-  }
+function fullSettingsOf(checkout) {
+  const isRendered = (key) => {
+    const known = key;
+    return BASE_DETAIL_KEYS.has(known) || GALLERY_KEYS.has(known);
+  };
+  return Object.fromEntries(Object.entries(checkout).filter(([key]) => !isRendered(key)));
 }
 function formatAmount2(amountCents, currency) {
   return `${(amountCents / 100).toFixed(2)} ${currency}`;
@@ -21984,10 +23361,12 @@ function registerOffersCommands(program2) {
       );
     });
   });
-  offers.command("get").description("Get a single offer, including its prices and attached order bumps").argument("<checkoutId>", "offer (checkout) id").action(async (checkoutId, _, command) => {
+  offers.command("get").description(
+    "Get a single offer, including its prices and attached order bumps. --full adds every editable setting (media gallery, theme, deadline, afterPurchase, oto chain, form, legal, invoicing, notifications, tracking) \u2014 the same keys `offers update --json` accepts"
+  ).argument("<checkoutId>", "offer (checkout) id").option("--full", "include the whole editable settings surface (?include=full)").action(async (checkoutId, options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
-    const checkout = await client.getCheckout(checkoutId);
+    const checkout = await client.getCheckout(checkoutId, { full: options.full === true });
     emit(flags, checkout, () => {
       process.stdout.write(`Offer ${checkout.id} \u2014 ${checkout.name}
 `);
@@ -22047,6 +23426,14 @@ Order bumps (${checkout.orderBumps.length}):
         process.stdout.write(`  ${bump.orderBumpId} (${scope})
 `);
       }
+      if (!options.full) return;
+      const gallery = galleryOf(checkout);
+      process.stdout.write(`
+Media gallery (${gallery.length}):
+`);
+      printGallery(gallery);
+      process.stdout.write("\nSettings (--full):\n");
+      printJson(fullSettingsOf(checkout));
     });
   });
   offers.command("create").description("Create a new offer for a product").requiredOption("--product <productId>", "product the offer sells").option("--free", "create a free offer (cannot carry prices)").option("--name <name>", "offer name").action(
@@ -22255,21 +23642,23 @@ Order bumps (${checkout.orderBumps.length}):
       );
     });
   });
-  price.command("update").description("Mutate a price variant (activate, deactivate, hide, unhide, change-amount)").argument("<checkoutId>", "offer (checkout) id").argument("<priceId>", "price id").requiredOption("--operation <op>", "activate | deactivate | hide | unhide | change-amount").option("--amount <minor-units>", "change-amount: new price in minor units, e.g. 1999 = 19.99").action(
+  price.command("update").description(
+    "Mutate a price variant: --operation activate | deactivate | hide | unhide | change-amount (with --amount) | edit-details (with --label / --description). --label / --description alone imply edit-details"
+  ).argument("<checkoutId>", "offer (checkout) id").argument("<priceId>", "price id").option(
+    "--operation <op>",
+    "activate | deactivate | hide | unhide | change-amount | edit-details (implied by --label / --description)"
+  ).option("--amount <minor-units>", "change-amount: new price in minor units, e.g. 1999 = 19.99").option("--label <text>", "edit-details: new display label").option(
+    "--description <markdown>",
+    "edit-details: new markdown description under the price (empty string clears it)"
+  ).action(
     async (checkoutId, priceId, options, command) => {
       const flags = getGlobalFlags(command);
-      const operation = parseChoice4(options.operation, PRICE_OPERATIONS, "--operation");
-      if (operation === "change-amount" && !options.amount) {
-        throw new Error("--operation change-amount requires --amount <minor-units>.");
-      }
+      const input = buildPriceUpdateInput(options);
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
-      const result = await client.updateCheckoutPrice(checkoutId, priceId, {
-        operation,
-        newAmountCents: operation === "change-amount" && options.amount ? parsePositiveInt12(options.amount, "--amount") : void 0
-      });
+      const result = await client.updateCheckoutPrice(checkoutId, priceId, input);
       emit(flags, result, () => {
         process.stdout.write(
-          `Applied ${operation} to price ${result.priceId} on offer ${result.checkoutId}
+          `Applied ${input.operation} to price ${result.priceId} on offer ${result.checkoutId}
 `
         );
       });
@@ -22305,6 +23694,87 @@ Order bumps (${checkout.orderBumps.length}):
 `);
     });
   });
+  const media = offers.command("media").description("Manage an offer's media gallery (checkout images and videos)");
+  media.command("list").description("List the offer's gallery entries in display order (index 0 is featured)").argument("<checkoutId>", "offer (checkout) id").action(async (checkoutId, _, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const checkout = await client.getCheckout(checkoutId, { full: true });
+    const gallery = galleryOf(checkout);
+    emit(flags, { checkoutId: checkout.id, count: gallery.length, media: gallery }, () => {
+      process.stdout.write(`Media gallery of offer ${checkout.id} (${gallery.length}):
+`);
+      printGallery(gallery);
+    });
+  });
+  media.command("add").description(
+    "Append a Media Library item (--media <mediaId>; videos must be ready) or an external URL (--url with --type) to the gallery"
+  ).argument("<checkoutId>", "offer (checkout) id").option("--media <mediaId>", "Media Library item id (see `media list`)").option("--url <url>", "external image URL or video iframe embed URL (needs --type)").option("--type <image|video>", "with --url: what the URL renders as").option("--thumbnail <url>", "with --url: poster/thumbnail URL for the strip").action(
+    async (checkoutId, options, command) => {
+      if (options.media === void 0 === (options.url === void 0)) {
+        throw new Error("Pass exactly one of --media <mediaId> or --url <url>.");
+      }
+      if (options.media !== void 0 && (options.type !== void 0 || options.thumbnail)) {
+        throw new Error(
+          "--type / --thumbnail only apply with --url (a library item carries its own)."
+        );
+      }
+      const flags = getGlobalFlags(command);
+      const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+      let entry;
+      if (options.media !== void 0) {
+        const { media: item } = await client.getMedia(options.media);
+        entry = galleryEntryFromLibrary(item);
+      } else {
+        if (options.type === void 0) {
+          throw new Error("--url requires --type <image|video>.");
+        }
+        entry = {
+          type: parseChoice4(options.type, MEDIA_TYPES, "--type"),
+          url: options.url ?? "",
+          mediaId: null,
+          thumbnailUrl: options.thumbnail ?? null
+        };
+      }
+      const checkout = await client.getCheckout(checkoutId, { full: true });
+      const gallery = galleryOf(checkout);
+      const duplicate = gallery.find(
+        (item) => entry.mediaId !== null && item.mediaId === entry.mediaId || item.url === entry.url
+      );
+      if (duplicate) {
+        throw new Error(
+          `Already in the gallery: ${duplicate.mediaId ?? duplicate.url} (index ${gallery.indexOf(duplicate)}).`
+        );
+      }
+      const next = [...gallery, entry];
+      const result = await client.updateCheckout(checkoutId, galleryPatch(next));
+      emit(flags, { checkoutId: result.checkoutId, added: entry, media: next }, () => {
+        process.stdout.write(
+          `Added ${entry.type} ${entry.mediaId ?? entry.url} to offer ${result.checkoutId} (gallery: ${next.length})
+`
+        );
+      });
+    }
+  );
+  media.command("remove").description("Remove a gallery entry by its media id or URL").argument("<checkoutId>", "offer (checkout) id").argument("<mediaIdOrUrl>", "media id or URL of the entry to drop (see `offers media list`)").action(async (checkoutId, ref, _, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const checkout = await client.getCheckout(checkoutId, { full: true });
+    const gallery = galleryOf(checkout);
+    const removed = gallery.filter((item) => item.mediaId === ref || item.url === ref);
+    if (removed.length === 0) {
+      throw new Error(
+        `No gallery entry matches ${ref} on offer ${checkoutId} \u2014 run \`offers media list ${checkoutId}\`.`
+      );
+    }
+    const next = gallery.filter((item) => !removed.includes(item));
+    const result = await client.updateCheckout(checkoutId, galleryPatch(next));
+    emit(flags, { checkoutId: result.checkoutId, removed, media: next }, () => {
+      process.stdout.write(
+        `Removed ${removed.length} ${removed.length === 1 ? "entry" : "entries"} (${ref}) from offer ${result.checkoutId} (gallery: ${next.length})
+`
+      );
+    });
+  });
 }
 
 // src/commands/orders/index.ts
@@ -22326,7 +23796,7 @@ function parsePositiveInt13(value, flag) {
 function formatAmount3(amountCents, currency) {
   return `${(amountCents / 100).toFixed(2)} ${currency}`;
 }
-function requireConfirm8(confirm, what) {
+function requireConfirm11(confirm, what) {
   if (!confirm) {
     throw new Error(`Refusing to ${what} without --confirm. Re-run with --confirm to proceed.`);
   }
@@ -22425,7 +23895,7 @@ Next page: --cursor ${page.nextCursor}
   ).argument("<orderId>", "order id (a `pending` order from `orders list --status pending`)").option("--issue-invoice", "also issue an invoice for the order (never issued without this)").option("--confirm", "required \u2014 acknowledge that access is granted and the buyer is emailed").action(
     async (orderId, options, command) => {
       const flags = getGlobalFlags(command);
-      requireConfirm8(options.confirm, `approve order ${orderId} (access + purchase email)`);
+      requireConfirm11(options.confirm, `approve order ${orderId} (access + purchase email)`);
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
       const result = await client.approveManualOrder(orderId, {
         issueInvoice: options.issueInvoice === true ? true : void 0
@@ -22442,7 +23912,7 @@ Next page: --cursor ${page.nextCursor}
     "Reject a manual (wire-transfer) order \u2014 cancels it and notifies the buyer. 409 = the order was already decided. Requires --confirm"
   ).argument("<orderId>", "order id (a `pending` order from `orders list --status pending`)").option("--confirm", "required \u2014 acknowledge that the order is cancelled and the buyer emailed").action(async (orderId, options, command) => {
     const flags = getGlobalFlags(command);
-    requireConfirm8(options.confirm, `reject order ${orderId} (cancel + notify the buyer)`);
+    requireConfirm11(options.confirm, `reject order ${orderId} (cancel + notify the buyer)`);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const result = await client.rejectManualOrder(orderId);
     emit(flags, result, () => {
@@ -22492,12 +23962,12 @@ Next page: --cursor ${page.nextCursor}
 }
 
 // src/commands/oto/index.ts
-import { readFileSync as readFileSync18 } from "fs";
+import { readFileSync as readFileSync20 } from "fs";
 var MIN_TIMER_MINUTES = 1;
 var MAX_TIMER_MINUTES = 120;
 function parseJsonFileOrInline7(value, flag) {
   const trimmed = value.trim();
-  const raw = trimmed.startsWith("{") || trimmed.startsWith("[") ? trimmed : readFileSync18(value, "utf8");
+  const raw = trimmed.startsWith("{") || trimmed.startsWith("[") ? trimmed : readFileSync20(value, "utf8");
   try {
     return JSON.parse(raw);
   } catch (error) {
@@ -22685,7 +24155,7 @@ function registerOtoCommands(program2) {
 }
 
 // src/commands/pages/index.ts
-import { existsSync as existsSync3, readFileSync as readFileSync19 } from "fs";
+import { existsSync as existsSync3, readFileSync as readFileSync21 } from "fs";
 import { readFile as readFile2 } from "fs/promises";
 async function resolveHtml2(options) {
   if (options.file) {
@@ -22732,13 +24202,13 @@ function parseCsv4(value) {
   ];
 }
 function resolveTextOrFile2(value) {
-  const text = existsSync3(value) ? readFileSync19(value, "utf8") : value;
+  const text = existsSync3(value) ? readFileSync21(value, "utf8") : value;
   if (!text.trim()) throw new Error("The text (or the file it points to) is empty.");
   return text;
 }
 function parseJsonObjectFileOrInline3(value, flag) {
   const trimmed = value.trim();
-  const raw = trimmed.startsWith("{") ? trimmed : readFileSync19(value, "utf8");
+  const raw = trimmed.startsWith("{") ? trimmed : readFileSync21(value, "utf8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -22750,7 +24220,7 @@ function parseJsonObjectFileOrInline3(value, flag) {
   }
   return parsed;
 }
-function requireConfirm9(confirm, what) {
+function requireConfirm12(confirm, what) {
   if (!confirm) {
     throw new Error(`Refusing to ${what} without --confirm. Re-run with --confirm to proceed.`);
   }
@@ -22945,7 +24415,7 @@ function registerPagesCommands(program2) {
     "inline JSON object or .json path merged into the request body (explicit flags win)"
   ).option("--confirm", "required \u2014 acknowledge that AI credits will be consumed").action(async (options, command) => {
     const flags = getGlobalFlags(command);
-    requireConfirm9(options.confirm, "generate a page (consumes AI credits)");
+    requireConfirm12(options.confirm, "generate a page (consumes AI credits)");
     const input = buildGenerateInput(options);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const result = await client.generatePage(input).catch(withSchedulerHint3);
@@ -22967,7 +24437,7 @@ function registerPagesCommands(program2) {
   ).action(
     async (pageId, options, command) => {
       const flags = getGlobalFlags(command);
-      requireConfirm9(
+      requireConfirm12(
         options.confirm,
         "AI-edit the page (consumes AI credits, replaces the HTML)"
       );
@@ -23026,7 +24496,7 @@ function registerPagesCommands(program2) {
   ).argument("<pageId>", "page id").argument("<revisionId>", "revision id from `pages revisions`").option("--confirm", "required \u2014 acknowledge that the current HTML will be replaced").action(
     async (pageId, revisionId, options, command) => {
       const flags = getGlobalFlags(command);
-      requireConfirm9(options.confirm, "restore the revision (replaces the current HTML)");
+      requireConfirm12(options.confirm, "restore the revision (replaces the current HTML)");
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
       const result = await client.restorePageRevision(pageId, revisionId);
       emit(flags, result, () => {
@@ -23039,7 +24509,7 @@ function registerPagesCommands(program2) {
     "One-click activation of everything generated around a page: publishes the DRAFT delivery automation and schedules the webinar follow-up broadcasts at their stored send times. Emails will go out for real; items whose copy still carries [FILL IN] placeholders are skipped, never sent. Requires --confirm."
   ).argument("<pageId>", "page id").option("--confirm", "required \u2014 acknowledge that automations go live and emails will send").action(async (pageId, options, command) => {
     const flags = getGlobalFlags(command);
-    requireConfirm9(options.confirm, "activate the page automations (emails will send)");
+    requireConfirm12(options.confirm, "activate the page automations (emails will send)");
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const result = await client.activatePageAutomations(pageId);
     emit(flags, result, () => {
@@ -23069,7 +24539,9 @@ function registerPagesCommands(program2) {
 }
 
 // src/commands/products/index.ts
-import { readFileSync as readFileSync20 } from "fs";
+import { readFileSync as readFileSync22 } from "fs";
+import { readFile as readFile3 } from "fs/promises";
+import { basename as basename2 } from "path";
 var KB_TREE_CHANGED_ERROR = "tree-changed";
 var JSON_FLAG_HINT3 = "(write it as --json=<value> \u2014 a bare --json is the global JSON-output flag)";
 function parseCoverRef(value) {
@@ -23175,7 +24647,7 @@ function assertOneOf3(value, allowed, flag) {
 }
 function parseJsonFileOrInline8(value, flag) {
   const trimmed = value.trim();
-  const raw = trimmed.startsWith("{") || trimmed.startsWith("[") ? trimmed : readFileSync20(value, "utf8");
+  const raw = trimmed.startsWith("{") || trimmed.startsWith("[") ? trimmed : readFileSync22(value, "utf8");
   try {
     return JSON.parse(raw);
   } catch (error) {
@@ -23185,6 +24657,49 @@ function parseJsonFileOrInline8(value, flag) {
 function collectRepeatable5(value, previous) {
   return [...previous, value];
 }
+var HTTP_URL_PATTERN2 = /^https?:\/\//i;
+async function uploadLocalFile(client, filePath) {
+  const bytes = await readFile3(filePath);
+  const name = basename2(filePath);
+  const result = await client.uploadMedia({
+    name,
+    mimeType: inferMimeType(name, bytes),
+    data: bytes.toString("base64")
+  });
+  return { ...result, name, size: bytes.length };
+}
+async function resolveCoverUrl(client, value) {
+  if (HTTP_URL_PATTERN2.test(value)) return value;
+  const uploaded = await uploadLocalFile(client, value);
+  return uploaded.url;
+}
+async function setProductCoverImages(client, productId, urls) {
+  for (const url of urls) assertHttpsUrl(url, "--image");
+  return client.setProductImages(productId, urls);
+}
+function printFilesTable(rows) {
+  printTable(
+    rows.map((f) => ({
+      uid: f.uid,
+      name: f.name,
+      url: f.url,
+      mediaId: f.mediaId ?? "",
+      size: f.size ?? ""
+    })),
+    ["uid", "name", "url", "mediaId", "size"]
+  );
+}
+async function addProductFiles(client, productId, inputs) {
+  return client.addDownloadFiles(productId, inputs);
+}
+function printAddedFiles(inputCount, result) {
+  const skipped = inputCount - result.added.length;
+  process.stdout.write(
+    `Added ${result.added.length} file(s)${skipped > 0 ? ` (${skipped} skipped \u2014 already attached)` : ""}; ${result.files.length} total.
+`
+  );
+  printFilesTable(result.files);
+}
 function registerProductsCommands(program2) {
   const products2 = program2.command("products").description("Manage products");
   products2.command("list").description("List products in the workspace").action(async (_, command) => {
@@ -23230,18 +24745,54 @@ function registerProductsCommands(program2) {
   ).requiredOption("--name <name>", "product name").requiredOption("--type <type>", "product type (course, newsletter, community, ...)").option("--description <description>", "product description").option("--free", "seed a free default offer").option("--amount <amount>", "seed a paid default offer \u2014 price in MAJOR units (49.99)").option("--currency <currency>", "currency for --amount (pln, usd, eur, gbp)").option(
     "--period <period>",
     "billing period for --amount: one_time, monthly or yearly (default one_time)"
+  ).option("--description-file <path>", "read the product description from a file").option(
+    "--cover <pathOrUrl>",
+    "cover image: a local file (uploaded to the media library first) or an https URL"
+  ).option(
+    "--file <path>",
+    "local file to upload and attach to the product (downloads products; repeat for several)",
+    collectRepeatable5,
+    []
   ).action(
     async (options, command) => {
       const flags = getGlobalFlags(command);
       const offer = parseCreateOfferFlags(options);
+      if (options.description !== void 0 && options.descriptionFile !== void 0) {
+        throw new Error("Use either --description or --description-file, not both.");
+      }
+      const description = options.descriptionFile !== void 0 ? readFileSync22(options.descriptionFile, "utf8") : options.description;
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
       const product = await client.createProduct({
         name: options.name,
         productType: options.type,
-        description: options.description,
+        description,
         offer
       });
-      emit(flags, product, () => {
+      const outcome = {};
+      try {
+        if (options.cover !== void 0) {
+          const coverUrl = await resolveCoverUrl(client, options.cover);
+          outcome.cover = await setProductCoverImages(client, product.id, [coverUrl]);
+        }
+        if (options.file.length > 0) {
+          const uploaded = [];
+          for (const filePath of options.file)
+            uploaded.push(await uploadLocalFile(client, filePath));
+          outcome.uploadedFiles = uploaded;
+          outcome.files = await addProductFiles(
+            client,
+            product.id,
+            uploaded.map((u) => ({ url: u.url, name: u.name, mediaId: u.mediaId, size: u.size }))
+          );
+        }
+      } catch (error) {
+        process.stderr.write(
+          `Product ${product.id} was created, but a follow-up step failed \u2014 fix it with \`products images set\` / \`products files add\`.
+`
+        );
+        throw error;
+      }
+      emit(flags, { ...product, ...outcome }, () => {
         process.stdout.write(`Created product ${product.id} \u2014 ${product.name}
 `);
         if (offer) {
@@ -23250,6 +24801,17 @@ function registerProductsCommands(program2) {
 ` : "  Default offer was requested but not seeded (check the dashboard).\n"
           );
         }
+        if (outcome.cover) {
+          process.stdout.write(`  Cover image: ${outcome.cover.images.join(", ")}
+`);
+        }
+        if (outcome.uploadedFiles && outcome.files) {
+          process.stdout.write(
+            `  Uploaded ${outcome.uploadedFiles.length} file(s): ${outcome.uploadedFiles.map((u) => `${u.name} (${u.mediaId})`).join(", ")}
+`
+          );
+          printAddedFiles(outcome.uploadedFiles.length, outcome.files);
+        }
       });
     }
   );
@@ -23727,9 +25289,8 @@ function registerProductsCommands(program2) {
     if (options.image.length === 0) {
       throw new Error("Pass at least one --image <url>.");
     }
-    for (const url of options.image) assertHttpsUrl(url, "--image");
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
-    const result = await client.setProductImages(productId, options.image);
+    const result = await setProductCoverImages(client, productId, options.image);
     emit(flags, result, () => {
       process.stdout.write(
         `Set ${result.images.length} cover image(s) on product ${productId}.
@@ -23738,18 +25299,6 @@ function registerProductsCommands(program2) {
     });
   });
   const files = products2.command("files").description("Manage a downloads product content (Markdown description + file list)");
-  const printFilesTable = (rows) => {
-    printTable(
-      rows.map((f) => ({
-        uid: f.uid,
-        name: f.name,
-        url: f.url,
-        mediaId: f.mediaId ?? "",
-        size: f.size ?? ""
-      })),
-      ["uid", "name", "url", "mediaId", "size"]
-    );
-  };
   files.command("get").description("Show the downloads content: description presence + file table").requiredOption("--product <id>", "downloads product id").action(async (options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -23770,7 +25319,7 @@ function registerProductsCommands(program2) {
       if (options.content !== void 0 && options.contentFile !== void 0) {
         throw new Error("Use either --content or --content-file, not both.");
       }
-      const editorContent = options.contentFile !== void 0 ? readFileSync20(options.contentFile, "utf8") : options.content;
+      const editorContent = options.contentFile !== void 0 ? readFileSync22(options.contentFile, "utf8") : options.content;
       if (editorContent === void 0) {
         throw new Error("Pass the description via --content or --content-file.");
       }
@@ -23816,14 +25365,9 @@ function registerProductsCommands(program2) {
         ];
       }
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
-      const result = await client.addDownloadFiles(options.product, inputs);
+      const result = await addProductFiles(client, options.product, inputs);
       emit(flags, result, () => {
-        const skipped = inputs.length - result.added.length;
-        process.stdout.write(
-          `Added ${result.added.length} file(s)${skipped > 0 ? ` (${skipped} skipped \u2014 already attached)` : ""}; ${result.files.length} total.
-`
-        );
-        printFilesTable(result.files);
+        printAddedFiles(inputs.length, result);
       });
     }
   );
@@ -23869,7 +25413,7 @@ function registerProductsCommands(program2) {
     if (options.content !== void 0 && options.contentFile !== void 0) {
       throw new Error("Use either --content or --content-file, not both.");
     }
-    return options.contentFile !== void 0 ? readFileSync20(options.contentFile, "utf8") : options.content;
+    return options.contentFile !== void 0 ? readFileSync22(options.contentFile, "utf8") : options.content;
   };
   kb.command("get").description(
     "Show the knowledge base: categories (tree keys = the --category ids) + all articles (drafts and unavailable included \u2014 the creator view)"
@@ -24089,7 +25633,7 @@ function registerProductsCommands(program2) {
 }
 
 // src/commands/referrals/index.ts
-import { readFileSync as readFileSync21 } from "fs";
+import { readFileSync as readFileSync23 } from "fs";
 var PROGRAM_KINDS = ["referral", "affiliate"];
 var WRITABLE_STATUSES = ["active", "inactive"];
 var ENROLLMENT_MODES = ["open", "inviteOnly", "closed"];
@@ -24114,7 +25658,7 @@ function parseIdList3(value, flag) {
 }
 function parseJsonObjectFileOrInline4(value, flag) {
   const trimmed = value.trim();
-  const raw = trimmed.startsWith("{") ? trimmed : readFileSync21(value, "utf8");
+  const raw = trimmed.startsWith("{") ? trimmed : readFileSync23(value, "utf8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -24152,7 +25696,7 @@ function parseDeepConfig(value) {
   }
   return parsed;
 }
-function requireConfirm10(confirm, what) {
+function requireConfirm13(confirm, what) {
   if (!confirm) {
     throw new Error(`Refusing to ${what} without --confirm. Re-run with --confirm to proceed.`);
   }
@@ -24387,7 +25931,7 @@ Failed deliveries (${result.failedDeliveries.length})
     "Archive a program \u2014 new referrals stop counting and it leaves the active list. Requires --confirm."
   ).argument("<programId>", "program id").option("--confirm", "required \u2014 acknowledge the archive").action(async (programId, options, command) => {
     const flags = getGlobalFlags(command);
-    requireConfirm10(options.confirm, `archive program ${programId}`);
+    requireConfirm13(options.confirm, `archive program ${programId}`);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const result = await client.archiveReferralProgram(programId);
     emit(flags, result, () => {
@@ -24419,7 +25963,7 @@ Failed deliveries (${result.failedDeliveries.length})
     "Enroll EVERY client with access to one of the program products. Requires --confirm. Reports enrolled / alreadyEnrolled / skippedWithoutAccount counts."
   ).argument("<programId>", "program id").option("--confirm", "required \u2014 acknowledge the bulk enrollment").action(async (programId, options, command) => {
     const flags = getGlobalFlags(command);
-    requireConfirm10(options.confirm, `enroll all clients in program ${programId}`);
+    requireConfirm13(options.confirm, `enroll all clients in program ${programId}`);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const result = await client.enrollAllReferralClients(programId);
     emit(flags, result, () => {
@@ -24435,7 +25979,7 @@ Failed deliveries (${result.failedDeliveries.length})
     async (programId, entryId, options, command) => {
       const flags = getGlobalFlags(command);
       const decision = parseChoice6(options.decision, REWARD_DECISIONS, "--decision");
-      requireConfirm10(options.confirm, `${decision} reward ${entryId} in program ${programId}`);
+      requireConfirm13(options.confirm, `${decision} reward ${entryId} in program ${programId}`);
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
       const result = await client.resolveReferralReward(programId, entryId, { decision });
       emit(flags, result, () => {
@@ -24465,7 +26009,7 @@ Failed deliveries (${result.failedDeliveries.length})
 }
 
 // src/commands/segments/index.ts
-import { readFileSync as readFileSync22 } from "fs";
+import { readFileSync as readFileSync24 } from "fs";
 var SUBSCRIPTION_STATUSES2 = ["pending", "subscribed", "unsubscribed"];
 function collectRepeatable6(value, previous) {
   return [...previous, value];
@@ -24477,14 +26021,14 @@ function parseMinorUnits(value, flag) {
   }
   return n;
 }
-var CONDITION_FLAGS_HELP = "--has-tag/--without-tag, --owns/--not-owns, --owns-direct/--not-owns-direct, --spent-gte/--spent-lte, --subscription, or --json-file";
+var CONDITION_FLAGS_HELP = "--has-tag/--without-tag, --has-any-tag/--has-none-tag, --owns/--not-owns, --owns-direct/--not-owns-direct, --spent-gte/--spent-lte, --subscription, or --json-file";
 function resolveConditions(options) {
-  const hasFlagConditions = options.hasTag.length > 0 || options.withoutTag.length > 0 || options.owns.length > 0 || options.notOwns.length > 0 || options.ownsDirect.length > 0 || options.notOwnsDirect.length > 0 || options.spentGte !== void 0 || options.spentLte !== void 0 || options.subscription !== void 0;
+  const hasFlagConditions = options.hasTag.length > 0 || options.withoutTag.length > 0 || options.hasAnyTag.length > 0 || options.hasNoneTag.length > 0 || options.owns.length > 0 || options.notOwns.length > 0 || options.ownsDirect.length > 0 || options.notOwnsDirect.length > 0 || options.spentGte !== void 0 || options.spentLte !== void 0 || options.subscription !== void 0;
   if (options.jsonFile !== void 0) {
     if (hasFlagConditions) {
       throw new Error("Use either condition flags or --json-file, not both.");
     }
-    const raw = readFileSync22(options.jsonFile, "utf8");
+    const raw = readFileSync24(options.jsonFile, "utf8");
     let parsed;
     try {
       parsed = JSON.parse(raw);
@@ -24506,6 +26050,12 @@ function resolveConditions(options) {
   for (const tagId of options.withoutTag) {
     conditions.push({ field: "tag", operator: "not-has", tagId });
   }
+  if (options.hasAnyTag.length > 0) {
+    conditions.push({ field: "tag", operator: "has-any", tagIds: options.hasAnyTag });
+  }
+  if (options.hasNoneTag.length > 0) {
+    conditions.push({ field: "tag", operator: "has-none", tagIds: options.hasNoneTag });
+  }
   for (const productId of options.owns) {
     conditions.push({ field: "product", operator: "owns", productId });
   }
@@ -24554,6 +26104,16 @@ function withConditionOptions(command) {
     "client does NOT carry this tag (repeatable)",
     collectRepeatable6,
     []
+  ).option(
+    "--has-any-tag <tagId>",
+    "client carries AT LEAST ONE of these tags (repeat the flag; one OR condition, max 10 ids) - one send to several tags without double-mailing",
+    collectRepeatable6,
+    []
+  ).option(
+    "--has-none-tag <tagId>",
+    "client carries NONE of these tags (repeat the flag; one condition, max 10 ids)",
+    collectRepeatable6,
+    []
   ).option(
     "--owns <productId>",
     "client has ACTIVE access to this product - a direct grant OR through a bundle (repeatable)",
@@ -24588,6 +26148,9 @@ function withConditionOptions(command) {
 function describeCondition(condition) {
   switch (condition.field) {
     case "tag":
+      if ("tagIds" in condition) {
+        return `${condition.operator === "has-any" ? "has any of" : "has none of"} tags ${condition.tagIds.join(", ")}`;
+      }
       return `${condition.operator === "has" ? "has" : "lacks"} tag ${condition.tagId}`;
     case "product":
       return `${condition.operator === "owns" ? "owns" : "does not own"} product ${condition.productId}${condition.accessScope === "direct" ? " (direct)" : ""}`;
@@ -24700,7 +26263,7 @@ function registerSegmentsCommands(program2) {
 }
 
 // src/commands/site/index.ts
-import { existsSync as existsSync4, readFileSync as readFileSync23 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync25 } from "fs";
 var MAIN_PAGE_MODES = {
   sales: "/",
   dashboard: "/dashboard",
@@ -24724,14 +26287,14 @@ var HTTP_CONFLICT = 409;
 var HTTP_BAD_REQUEST = 400;
 var HTTP_NOT_FOUND = 404;
 var HTTP_FORBIDDEN = 403;
-function requireConfirm11(confirm, what) {
+function requireConfirm14(confirm, what) {
   if (!confirm) {
     throw new Error(`Refusing to ${what} without --confirm. Re-run with --confirm to proceed.`);
   }
 }
 function parseJsonObjectFileOrInline5(value, flag) {
   const trimmed = value.trim();
-  const raw = trimmed.startsWith("{") ? trimmed : readFileSync23(value, "utf8");
+  const raw = trimmed.startsWith("{") ? trimmed : readFileSync25(value, "utf8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -24746,7 +26309,7 @@ function parseJsonObjectFileOrInline5(value, flag) {
 function baseBody(json) {
   return json === void 0 ? {} : parseJsonObjectFileOrInline5(json, "--json");
 }
-function parseOnOff2(value, flag) {
+function parseOnOff4(value, flag) {
   const v = value.trim().toLowerCase();
   if (v === "on" || v === "true") return true;
   if (v === "off" || v === "false") return false;
@@ -24783,7 +26346,7 @@ function parseDomainList(value, what) {
   return items;
 }
 function readMarkdownOrFile(value) {
-  return existsSync4(value) ? readFileSync23(value, "utf8") : value;
+  return existsSync4(value) ? readFileSync25(value, "utf8") : value;
 }
 function assertNonEmptyBody(body, hint) {
   if (Object.keys(body).length === 0) {
@@ -24990,7 +26553,7 @@ function registerSiteCommands(program2) {
         body.language = parseChoice7(options.language, PLATFORM_LANGUAGES, "--language");
       }
       if (options.showPageTitle !== void 0) {
-        body.showPageTitle = parseOnOff2(options.showPageTitle, "--show-page-title");
+        body.showPageTitle = parseOnOff4(options.showPageTitle, "--show-page-title");
       }
       assertNonEmptyBody(body, "pass --title, --description, --language or --json=<patch>.");
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -25012,7 +26575,7 @@ function registerSiteCommands(program2) {
       if (options.radius !== void 0) body.radius = options.radius;
       if (options.styleVariant !== void 0) body.styleVariant = options.styleVariant;
       if (options.fromBrand !== void 0) {
-        body.themeFromBrand = parseOnOff2(options.fromBrand, "--from-brand");
+        body.themeFromBrand = parseOnOff4(options.fromBrand, "--from-brand");
       }
       assertNonEmptyBody(body, "pass --theme, --radius, --from-brand \u2026 or --json=<patch>.");
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -25039,7 +26602,7 @@ function registerSiteCommands(program2) {
         body.platformFaviconUrl = orNull6(options.faviconUrl);
       }
       if (options.hideBranding !== void 0) {
-        body.hideZanfiaBranding = parseOnOff2(options.hideBranding, "--hide-branding");
+        body.hideZanfiaBranding = parseOnOff4(options.hideBranding, "--hide-branding");
       }
       assertNonEmptyBody(
         body,
@@ -25084,7 +26647,7 @@ function registerSiteCommands(program2) {
   update.command("privacy").description("Cookie-consent banner on the public site").option("--cookie-consent <on|off>", "show the cookie consent banner").option("--json <fileOrJson>", "inline JSON object or .json path \u2014 cookieConsentEnabled").action(async (options, command) => {
     const flags = getGlobalFlags(command);
     const base = baseBody(options.json);
-    const cookieConsentEnabled = options.cookieConsent !== void 0 ? parseOnOff2(options.cookieConsent, "--cookie-consent") : base.cookieConsentEnabled;
+    const cookieConsentEnabled = options.cookieConsent !== void 0 ? parseOnOff4(options.cookieConsent, "--cookie-consent") : base.cookieConsentEnabled;
     if (typeof cookieConsentEnabled !== "boolean") {
       throw new Error(
         'Pass --cookie-consent on|off (or a --json body with "cookieConsentEnabled").'
@@ -25151,14 +26714,14 @@ function registerSiteCommands(program2) {
         if (options.libraryOrder === void 0) customization.libraryOrder = "custom";
       }
       if (options.groupByType !== void 0) {
-        customization.libraryGroupByType = parseOnOff2(options.groupByType, "--group-by-type");
+        customization.libraryGroupByType = parseOnOff4(options.groupByType, "--group-by-type");
       }
       if (options.defaultView !== void 0) customization.defaultView = options.defaultView;
       if (options.messages !== void 0) {
-        customization.messagesEnabled = parseOnOff2(options.messages, "--messages");
+        customization.messagesEnabled = parseOnOff4(options.messages, "--messages");
       }
       if (options.clientMessages !== void 0) {
-        customization.clientMessagesEnabled = parseOnOff2(
+        customization.clientMessagesEnabled = parseOnOff4(
           options.clientMessages,
           "--client-messages"
         );
@@ -25266,7 +26829,7 @@ function registerSiteCommands(program2) {
         throw new Error("Pass exactly one of --on or --off.");
       }
       const active = Boolean(options.on);
-      requireConfirm11(options.confirm, active ? "publish the site" : "take the site offline");
+      requireConfirm14(options.confirm, active ? "publish the site" : "take the site offline");
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
       const result = await client.activateSite({ active });
       emit(
@@ -25281,7 +26844,7 @@ function registerSiteCommands(program2) {
     "Change the slug \u2014 heavy: re-registers Stripe/Firebase/Vercel hosts and purges caches. 409 = slug taken. Requires --confirm"
   ).argument("<slug>", 'new slug (lower-case letters, digits, dashes; "www" is refused)').option("--confirm", "required \u2014 acknowledge the URL change for every existing link").action(async (value, options, command) => {
     const flags = getGlobalFlags(command);
-    requireConfirm11(options.confirm, `change the site slug to "${value}"`);
+    requireConfirm14(options.confirm, `change the site slug to "${value}"`);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const result = await client.updateSiteSlug({ slug: value.trim() }).catch(withSlugHint);
     emit(flags, result, () => process.stdout.write(`Slug changed to "${value.trim()}".
@@ -25293,7 +26856,7 @@ function registerSiteCommands(program2) {
   ).argument("<domains>", "comma-separated hostnames, e.g. shop.example.com,example.com \u2014 or none").option("--confirm", "required \u2014 acknowledge the domain list replace").action(async (value, options, command) => {
     const flags = getGlobalFlags(command);
     const list = value.trim().toLowerCase() === "none" ? [] : parseDomainList(value, "<domains>");
-    requireConfirm11(
+    requireConfirm14(
       options.confirm,
       list.length === 0 ? "remove every custom domain" : `set the custom domains to ${list.join(", ")}`
     );
@@ -25378,7 +26941,7 @@ function registerSiteCommands(program2) {
           "Nothing to update \u2014 pass --terms-content|--terms-url and/or --privacy-content|--privacy-url."
         );
       }
-      requireConfirm11(options.confirm, "change the legal documents");
+      requireConfirm14(options.confirm, "change the legal documents");
       const body = {};
       if (options.language !== void 0) body.language = options.language;
       if (terms) body.terms = terms;
@@ -25430,8 +26993,8 @@ function printStorefront(config) {
 }
 
 // src/commands/smsCampaigns/index.ts
-import { readFileSync as readFileSync24 } from "fs";
-var SMS_PROVIDERS = ["twilio", "smsapi"];
+import { readFileSync as readFileSync26 } from "fs";
+var SMS_PROVIDERS2 = ["twilio", "smsapi"];
 var RECIPIENT_STATUSES2 = [
   "pending",
   "sent",
@@ -25446,7 +27009,7 @@ function parsePositiveInt15(value, flag) {
   }
   return n;
 }
-function requireConfirm12(confirm, refusal) {
+function requireConfirm15(confirm, refusal) {
   if (!confirm) throw new Error(refusal);
 }
 function withSchedulerHint4(error) {
@@ -25463,7 +27026,7 @@ function resolveBody(options) {
   if (options.body !== void 0 && options.bodyFile !== void 0) {
     throw new Error("Use either --body or --body-file, not both.");
   }
-  return options.bodyFile !== void 0 ? readFileSync24(options.bodyFile, "utf8") : options.body;
+  return options.bodyFile !== void 0 ? readFileSync26(options.bodyFile, "utf8") : options.body;
 }
 function resolveAudience2(options) {
   if (options.segment !== void 0 && options.allSubscribed) {
@@ -25482,10 +27045,10 @@ function resolveProvider(options) {
   }
   if (options.defaultProvider) return null;
   if (options.provider === void 0) return void 0;
-  const match = SMS_PROVIDERS.find((p) => p === options.provider);
+  const match = SMS_PROVIDERS2.find((p) => p === options.provider);
   if (!match) {
     throw new Error(
-      `Invalid --provider: ${options.provider} (expected one of ${SMS_PROVIDERS.join(", ")})`
+      `Invalid --provider: ${options.provider} (expected one of ${SMS_PROVIDERS2.join(", ")})`
     );
   }
   return match;
@@ -25570,7 +27133,7 @@ function registerSmsCampaignsCommands(program2) {
   });
   smsCampaigns.command("create").description(
     "Create a DRAFT SMS campaign \u2014 nothing is sent; only --name is required at draft time (the body and a connected provider are enforced by `sms-campaigns send`)"
-  ).requiredOption("--name <name>", "internal label shown in the campaigns list").option("--body <text>", "message text; {{firstName}} / {{lastName}} tokens are supported").option("--body-file <path>", "read the message text from a file").option("--opt-out-hint <text>", "opt-out line appended to every message (counts as text)").option("--provider <provider>", `send through this provider (${SMS_PROVIDERS.join(" | ")})`).option("--sender <name>", "sender name override (SMSAPI); omit for the connection's default").option("--segment <segmentId>", "send to a saved segment (SMS-subscribed clients in it only)").option("--all-subscribed", "send to every SMS-subscribed client (the default audience)").action(
+  ).requiredOption("--name <name>", "internal label shown in the campaigns list").option("--body <text>", "message text; {{firstName}} / {{lastName}} tokens are supported").option("--body-file <path>", "read the message text from a file").option("--opt-out-hint <text>", "opt-out line appended to every message (counts as text)").option("--provider <provider>", `send through this provider (${SMS_PROVIDERS2.join(" | ")})`).option("--sender <name>", "sender name override (SMSAPI); omit for the connection's default").option("--segment <segmentId>", "send to a saved segment (SMS-subscribed clients in it only)").option("--all-subscribed", "send to every SMS-subscribed client (the default audience)").action(
     async (options, command) => {
       const flags = getGlobalFlags(command);
       const body = resolveBody(options);
@@ -25593,7 +27156,7 @@ function registerSmsCampaignsCommands(program2) {
       });
     }
   );
-  smsCampaigns.command("update").description("Update a DRAFT SMS campaign (campaigns past draft are immutable except cancel)").argument("<id>", "SMS campaign id").option("--name <name>", "new internal label").option("--body <text>", "new message text (replaces the whole body)").option("--body-file <path>", "read the new message text from a file").option("--opt-out-hint <text>", "new opt-out line").option("--clear-opt-out-hint", "remove the opt-out line").option("--provider <provider>", `send through this provider (${SMS_PROVIDERS.join(" | ")})`).option("--default-provider", "go back to the workspace default provider").option("--sender <name>", "sender name override (SMSAPI)").option("--default-sender", "go back to the connection's default sender").option("--segment <segmentId>", "switch the audience to a saved segment").option("--all-subscribed", "switch the audience to every SMS-subscribed client").action(
+  smsCampaigns.command("update").description("Update a DRAFT SMS campaign (campaigns past draft are immutable except cancel)").argument("<id>", "SMS campaign id").option("--name <name>", "new internal label").option("--body <text>", "new message text (replaces the whole body)").option("--body-file <path>", "read the new message text from a file").option("--opt-out-hint <text>", "new opt-out line").option("--clear-opt-out-hint", "remove the opt-out line").option("--provider <provider>", `send through this provider (${SMS_PROVIDERS2.join(" | ")})`).option("--default-provider", "go back to the workspace default provider").option("--sender <name>", "sender name override (SMSAPI)").option("--default-sender", "go back to the connection's default sender").option("--segment <segmentId>", "switch the audience to a saved segment").option("--all-subscribed", "switch the audience to every SMS-subscribed client").action(
     async (id, options, command) => {
       const flags = getGlobalFlags(command);
       const input = {};
@@ -25625,7 +27188,7 @@ function registerSmsCampaignsCommands(program2) {
     "PERMANENTLY delete an SMS campaign \u2014 cannot be undone; draft/cancelled/failed only (sent campaigns are audit records and stay). Requires --confirm"
   ).argument("<id>", "SMS campaign id").option("--confirm", "required \u2014 acknowledge the permanent deletion").action(async (id, options, command) => {
     const flags = getGlobalFlags(command);
-    requireConfirm12(
+    requireConfirm15(
       options.confirm,
       `Refusing to delete SMS campaign ${id} without --confirm. Re-run with --confirm to proceed.`
     );
@@ -25643,7 +27206,7 @@ function registerSmsCampaignsCommands(program2) {
     "schedule the send (ISO, max 30 days out) instead of sending now"
   ).option("--confirm", "required \u2014 acknowledge this texts the audience for real").action(async (id, options, command) => {
     const flags = getGlobalFlags(command);
-    requireConfirm12(
+    requireConfirm15(
       options.confirm,
       `Refusing to send without --confirm. \`sms-campaigns send\` texts the ENTIRE resolved audience for real through the workspace's SMS provider account, is billed per message part and cannot be undone. Re-run with --confirm to proceed (check the draft first with \`sms-campaigns get ${id}\`).`
     );
@@ -26272,7 +27835,7 @@ function describeAttempts(item) {
   const next = item.nextPaymentAttempt !== null ? formatEpochSeconds(item.nextPaymentAttempt) : "";
   return next ? `${attempts} (next ${next})` : String(attempts);
 }
-function requireConfirm13(confirm, what) {
+function requireConfirm16(confirm, what) {
   if (!confirm) {
     throw new Error(`Refusing to ${what} without --confirm. Re-run with --confirm to proceed.`);
   }
@@ -26346,7 +27909,7 @@ function registerSubscriptionsCommands(program2) {
     "Retry a failed subscription charge by its Stripe invoice id (`in_\u2026` from `subscriptions failed`) \u2014 a REAL charge attempt on the customer's saved card. Requires --confirm"
   ).argument("<invoiceId>", "Stripe invoice id of the failed charge (in_\u2026)").option("--confirm", "required \u2014 acknowledge that the customer is charged for real").action(async (invoiceId, options, command) => {
     const flags = getGlobalFlags(command);
-    requireConfirm13(options.confirm, `retry the charge for invoice ${invoiceId} (real charge)`);
+    requireConfirm16(options.confirm, `retry the charge for invoice ${invoiceId} (real charge)`);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const result = await client.retrySubscriptionPayment(invoiceId);
     emit(flags, result, () => {
@@ -26883,7 +28446,7 @@ Next page: --cursor ${page.nextCursor}
 }
 
 // src/commands/workflows/index.ts
-import { readFileSync as readFileSync25 } from "fs";
+import { readFileSync as readFileSync27 } from "fs";
 
 // src/commands/workflows/authoring.ts
 import { writeFileSync as writeFileSync6 } from "fs";
@@ -27049,14 +28612,14 @@ function parsePositiveInt18(value, flag) {
   }
   return n;
 }
-function requireConfirm14(confirm, what) {
+function requireConfirm17(confirm, what) {
   if (!confirm) {
     throw new Error(`Refusing to ${what} without --confirm. Re-run with --confirm to proceed.`);
   }
 }
 function parseTriggerContext(value) {
   const trimmed = value.trim();
-  const raw = trimmed.startsWith("{") ? trimmed : readFileSync25(value, "utf8");
+  const raw = trimmed.startsWith("{") ? trimmed : readFileSync27(value, "utf8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -27102,42 +28665,26 @@ function registerWorkflowsCommands(program2) {
       );
     });
   });
-  workflows.command("get").description("Show a single workflow (triggers, product scope, node counts, last run)").argument("<automationId>", "workflow automation id").action(async (automationId, _, command) => {
+  workflows.command("get").description(
+    "Show a single workflow (triggers, product scope, node counts, last run); --graph walks every step incl. the emails it sends"
+  ).argument("<automationId>", "workflow automation id").option(
+    "--graph",
+    "also print the graph step by step in execution order \u2014 email subjects and body excerpts, delays, condition branches. Shows the published graph, plus the draft when it differs. With -o json the raw response includes draftGraph/publishedGraph."
+  ).action(async (automationId, options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
-    const workflow = await client.getAutomation(automationId);
+    if (!options.graph) {
+      const workflow2 = await client.getAutomation(automationId);
+      emit(flags, workflow2, () => printWorkflowSummary(workflow2));
+      return;
+    }
+    const workflow = await client.getAutomationGraph(automationId);
+    const published = asAutomationGraph(workflow.publishedGraph);
+    const draft = asAutomationGraph(workflow.draftGraph);
+    const templateNames = await resolveTemplateNames(client, [published, draft]);
     emit(flags, workflow, () => {
-      process.stdout.write(`Workflow ${workflow.name} (${workflow.id})
-`);
-      if (workflow.description) process.stdout.write(`  Description: ${workflow.description}
-`);
-      process.stdout.write(`  Status: ${workflow.status}
-`);
-      process.stdout.write(`  Triggers: ${workflow.triggers.join(", ")}
-`);
-      process.stdout.write(
-        `  Products: ${workflow.productIds.length > 0 ? workflow.productIds.join(", ") : "all"}
-`
-      );
-      process.stdout.write(
-        `  Published: ${workflow.published ? `yes${workflow.publishedAt ? ` (${workflow.publishedAt})` : ""}` : "no (draft \u2014 cannot run until published from the dashboard)"}
-`
-      );
-      const { nodeCounts } = workflow;
-      process.stdout.write(
-        `  Nodes: ${nodeCounts.triggers} triggers, ${nodeCounts.actions} actions, ${nodeCounts.conditions} conditions, ${nodeCounts.delays} delays
-`
-      );
-      process.stdout.write(`  Runs this month: ${workflow.runsThisMonth}
-`);
-      if (workflow.lastRunAt) {
-        process.stdout.write(
-          `  Last run: ${workflow.lastRunAt}${workflow.lastRunStatus ? ` (${workflow.lastRunStatus})` : ""}
-`
-        );
-      }
-      if (workflow.createdAt) process.stdout.write(`  Created: ${workflow.createdAt}
-`);
+      printWorkflowSummary(workflow);
+      printWorkflowGraphs(workflow, published, draft, templateNames);
     });
   });
   workflows.command("runs").description("List recent runs of a workflow (newest first)").argument("<automationId>", "workflow automation id").option("--limit <n>", "number of runs to return (default 20, max 100)").action(async (automationId, options, command) => {
@@ -27162,13 +28709,17 @@ function registerWorkflowsCommands(program2) {
       );
     });
   });
-  workflows.command("pause").description("Pause a workflow \u2014 it stops reacting to its trigger events").argument("<automationId>", "workflow automation id").action(async (automationId, _, command) => {
+  workflows.command("pause").description(
+    "Pause a workflow \u2014 it stops reacting to its trigger events AND cancels runs that are in progress or waiting in a delay (those contacts get no further steps)"
+  ).argument("<automationId>", "workflow automation id").action(async (automationId, _, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const result = await client.setAutomationStatus(automationId, "paused");
     emit(flags, result, () => {
-      process.stdout.write(`Paused workflow ${result.id}.
-`);
+      process.stdout.write(
+        `Paused workflow ${result.id} (${result.cancelledRuns} in-flight run(s) cancelled).
+`
+      );
     });
   });
   workflows.command("resume").description(
@@ -27187,7 +28738,7 @@ function registerWorkflowsCommands(program2) {
   ).argument("<automationId>", "workflow automation id").argument("<runId>", "run id (from `workflows runs`)").option("--confirm", "required \u2014 acknowledge that the workflow actions execute again").action(
     async (automationId, runId, options, command) => {
       const flags = getGlobalFlags(command);
-      requireConfirm14(options.confirm, `retry run ${runId} (its actions execute again)`);
+      requireConfirm17(options.confirm, `retry run ${runId} (its actions execute again)`);
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
       const result = await client.retryAutomationRun(automationId, runId).catch(withSchedulerHint5);
       emit(flags, result, () => {
@@ -27211,7 +28762,7 @@ Follow it with: zanfia workflows runs ${automationId}
     async (automationId, options, command) => {
       const flags = getGlobalFlags(command);
       const context = parseTriggerContext(options.context);
-      requireConfirm14(options.confirm, `test-run workflow ${automationId} (real actions fire)`);
+      requireConfirm17(options.confirm, `test-run workflow ${automationId} (real actions fire)`);
       process.stderr.write(
         "Warning: a test run executes the published graph for real \u2014 emails are sent, tags applied, webhooks called. Point the context at a test client.\n"
       );
@@ -27240,9 +28791,352 @@ function formatSteps(steps) {
   if (steps.skipped > 0) parts.push(`${steps.skipped} skipped`);
   return parts.join(", ");
 }
+function printWorkflowSummary(workflow) {
+  process.stdout.write(`Workflow ${workflow.name} (${workflow.id})
+`);
+  if (workflow.description) process.stdout.write(`  Description: ${workflow.description}
+`);
+  process.stdout.write(`  Status: ${workflow.status}
+`);
+  process.stdout.write(`  Triggers: ${workflow.triggers.join(", ")}
+`);
+  process.stdout.write(
+    `  Products: ${workflow.productIds.length > 0 ? workflow.productIds.join(", ") : "all"}
+`
+  );
+  process.stdout.write(
+    `  Published: ${workflow.published ? `yes${workflow.publishedAt ? ` (${workflow.publishedAt})` : ""}` : "no (draft \u2014 cannot run until published from the dashboard)"}
+`
+  );
+  const { nodeCounts } = workflow;
+  process.stdout.write(
+    `  Nodes: ${nodeCounts.triggers} triggers, ${nodeCounts.actions} actions, ${nodeCounts.conditions} conditions, ${nodeCounts.delays} delays
+`
+  );
+  process.stdout.write(`  Runs this month: ${workflow.runsThisMonth}
+`);
+  if (workflow.lastRunAt) {
+    process.stdout.write(
+      `  Last run: ${workflow.lastRunAt}${workflow.lastRunStatus ? ` (${workflow.lastRunStatus})` : ""}
+`
+    );
+  }
+  if (workflow.createdAt) process.stdout.write(`  Created: ${workflow.createdAt}
+`);
+}
+var GRAPH_ACTION_LABELS = {
+  sendEmail: "Send email",
+  notifyOwner: "Notify owner (email)",
+  sendSms: "Send SMS",
+  webhook: "Webhook",
+  publishSocialPost: "Publish social post",
+  createCommunityPost: "Create community post",
+  updateClientTags: "Update client tags",
+  setEmailSubscription: "Set email subscription",
+  requestTestimonial: "Request testimonial"
+};
+var GRAPH_NODE_KINDS = /* @__PURE__ */ new Set([
+  "trigger",
+  "action",
+  "condition",
+  "delay"
+]);
+var GRAPH_CONDITION_BRANCHES = ["true", "false"];
+var EXCERPT_LENGTH = 120;
+function isRecord2(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function optionalString(value) {
+  return typeof value === "string" ? value : void 0;
+}
+function asAutomationGraph(raw) {
+  if (!isRecord2(raw) || !Array.isArray(raw.nodes) || !Array.isArray(raw.edges)) return null;
+  const nodes = [];
+  for (const candidate of raw.nodes) {
+    if (!isRecord2(candidate)) continue;
+    const { id, kind, config, name, disabled } = candidate;
+    if (typeof id !== "string" || typeof kind !== "string" || !GRAPH_NODE_KINDS.has(kind)) {
+      continue;
+    }
+    nodes.push({
+      id,
+      kind,
+      config: isRecord2(config) ? config : {},
+      ...typeof name === "string" && name.length > 0 ? { name } : {},
+      ...disabled === true ? { disabled: true } : {}
+    });
+  }
+  const edges = [];
+  for (const candidate of raw.edges) {
+    if (!isRecord2(candidate)) continue;
+    const { source, target, sourceHandle } = candidate;
+    if (typeof source !== "string" || typeof target !== "string") continue;
+    const branch = GRAPH_CONDITION_BRANCHES.find((b) => b === sourceHandle);
+    edges.push({ source, target, ...branch !== void 0 ? { sourceHandle: branch } : {} });
+  }
+  return { nodes, edges };
+}
+function emailConfigOf(node) {
+  const raw = node.config.email;
+  if (!isRecord2(raw)) return null;
+  return {
+    templateId: optionalString(raw.templateId) ?? null,
+    templateName: optionalString(raw.templateName) ?? null,
+    subject: optionalString(raw.subject),
+    html: optionalString(raw.html)
+  };
+}
+async function resolveTemplateNames(client, graphs) {
+  const ids = /* @__PURE__ */ new Set();
+  for (const graph of graphs) {
+    for (const node of graph?.nodes ?? []) {
+      const templateId = emailConfigOf(node)?.templateId;
+      if (templateId) ids.add(templateId);
+    }
+  }
+  const names = /* @__PURE__ */ new Map();
+  await Promise.all(
+    [...ids].map(async (id) => {
+      try {
+        const { email } = await client.getLibraryEmail(id);
+        names.set(id, email.name);
+      } catch {
+      }
+    })
+  );
+  return names;
+}
+function printWorkflowGraphs(workflow, published, draft, templateNames) {
+  if (workflow.draftGraph === void 0 && workflow.publishedGraph === void 0) {
+    process.stdout.write(
+      "\nThis API does not return workflow graphs yet (it predates `?include=graph`) \u2014 update the API to see the steps.\n"
+    );
+    return;
+  }
+  const differs = workflow.hasUnpublishedChanges === true;
+  if (published) {
+    process.stdout.write(
+      `
+Graph shown: published (what runs now)${differs ? " \u2014 the draft has unpublished changes, listed below" : ""}
+`
+    );
+    printGraphWalk(published, templateNames);
+    if (differs && draft) {
+      process.stdout.write("\nDraft graph (unpublished changes \u2014 not running):\n");
+      printGraphWalk(draft, templateNames);
+    }
+    return;
+  }
+  if (draft) {
+    process.stdout.write("\nGraph shown: draft (never published \u2014 nothing runs yet)\n");
+    printGraphWalk(draft, templateNames);
+    return;
+  }
+  process.stdout.write("\n(no graph)\n");
+}
+function printGraphWalk(graph, templateNames) {
+  const lines = walkGraph(graph, templateNames);
+  if (lines.length === 0) {
+    process.stdout.write("  (empty graph)\n");
+    return;
+  }
+  for (const line of lines) process.stdout.write(line.length > 0 ? `  ${line}
+` : "\n");
+}
+function walkGraph(graph, templateNames) {
+  const nodesById = new Map(graph.nodes.map((node) => [node.id, node]));
+  const outgoing = /* @__PURE__ */ new Map();
+  for (const edge of graph.edges) {
+    const list = outgoing.get(edge.source) ?? [];
+    list.push(edge);
+    outgoing.set(edge.source, list);
+  }
+  const lines = [];
+  const reached = /* @__PURE__ */ new Set();
+  const visit = (nodeId, depth, path2) => {
+    const node = nodesById.get(nodeId);
+    const indent = "  ".repeat(depth);
+    if (!node) {
+      lines.push(`${indent}-> (missing node ${nodeId})`);
+      return;
+    }
+    if (path2.has(nodeId)) {
+      lines.push(`${indent}-> loops back to ${describeNodeRef(node)}`);
+      return;
+    }
+    reached.add(nodeId);
+    lines.push(`${indent}${describeNode(node, templateNames)}`);
+    const nextPath = new Set(path2).add(nodeId);
+    const edges = outgoing.get(nodeId) ?? [];
+    if (node.kind === "condition") {
+      for (const branch of GRAPH_CONDITION_BRANCHES) {
+        const branchEdges = edges.filter((edge) => edge.sourceHandle === branch);
+        lines.push(
+          `${indent}  ${branch === "true" ? "yes" : "no"} ->${branchEdges.length === 0 ? " (end)" : ""}`
+        );
+        for (const edge of branchEdges) visit(edge.target, depth + 2, nextPath);
+      }
+      return;
+    }
+    for (const edge of edges) visit(edge.target, depth + (edges.length > 1 ? 1 : 0), nextPath);
+  };
+  const triggers = graph.nodes.filter((node) => node.kind === "trigger");
+  triggers.forEach((trigger, index) => {
+    if (index > 0) lines.push("");
+    visit(trigger.id, 0, /* @__PURE__ */ new Set());
+  });
+  const orphans = graph.nodes.filter((node) => !reached.has(node.id));
+  if (orphans.length > 0) {
+    if (lines.length > 0) lines.push("");
+    lines.push("Not reachable from any trigger (never runs):");
+    for (const node of orphans) lines.push(`  ${describeNode(node, templateNames)}`);
+  }
+  return lines;
+}
+function describeNodeRef(node) {
+  return node.name ? `"${node.name}" (${node.id})` : node.id;
+}
+function describeNode(node, templateNames) {
+  const prefix = `[${node.kind}${node.disabled ? ", disabled" : ""}]`;
+  const label = node.name ? ` "${node.name}"` : "";
+  const suffix = ` (${node.id})`;
+  switch (node.kind) {
+    case "trigger":
+      return `${prefix}${label} ${describeTrigger(node.config)}${suffix}`;
+    case "action":
+      return `${prefix}${label} ${describeAction(node, templateNames)}${suffix}`;
+    case "condition":
+      return `${prefix}${label} if ${describeCondition2(node.config)}${suffix}`;
+    case "delay":
+      return `${prefix}${label} ${describeDelay(node.config)}${suffix}`;
+  }
+}
+function describeTrigger(config) {
+  const eventType = optionalString(config.eventType) ?? "(no event type)";
+  const scopes = [];
+  const scopeOf2 = (key, label) => {
+    const ids = config[key];
+    if (Array.isArray(ids) && ids.length > 0) scopes.push(`${label}: ${ids.join(", ")}`);
+  };
+  scopeOf2("productIds", "products");
+  scopeOf2("formIds", "forms");
+  scopeOf2("tagIds", "tags");
+  if (typeof config.inactiveDays === "number") scopes.push(`inactive ${config.inactiveDays} days`);
+  return scopes.length > 0 ? `${eventType} \u2014 ${scopes.join("; ")}` : eventType;
+}
+function isKnownActionType(value) {
+  return typeof value === "string" && value in GRAPH_ACTION_LABELS;
+}
+function describeAction(node, templateNames) {
+  const { taskType } = node.config;
+  if (!isKnownActionType(taskType)) {
+    const inner = isRecord2(node.config.action) ? optionalString(node.config.action.type) : void 0;
+    return `${typeof taskType === "string" ? taskType : "action"}${inner ? ` ${inner}` : ""}`;
+  }
+  const label = GRAPH_ACTION_LABELS[taskType];
+  switch (taskType) {
+    case "sendEmail":
+      return `${label} \u2014 ${describeEmail(node, templateNames)}`;
+    case "notifyOwner": {
+      const owner = isRecord2(node.config.ownerNotification) ? node.config.ownerNotification : {};
+      return `${label} \u2014 subject: ${quote(optionalString(owner.subject))} \u2014 body: ${quote(excerptHtml(optionalString(owner.html)))}`;
+    }
+    case "sendSms": {
+      const sms = isRecord2(node.config.sms) ? node.config.sms : {};
+      return `${label} \u2014 text: ${quote(excerptText(optionalString(sms.text)))}`;
+    }
+    case "webhook": {
+      const webhook = isRecord2(node.config.webhook) ? node.config.webhook : {};
+      const method = optionalString(webhook.method) ?? optionalString(webhook.type);
+      return `${label} \u2014 ${method ? `${method.toUpperCase()} ` : ""}${optionalString(webhook.url) ?? "(no url)"}`;
+    }
+    case "publishSocialPost": {
+      const social = isRecord2(node.config.social) ? node.config.social : {};
+      const targets = Array.isArray(social.targets) ? social.targets.join(", ") : "";
+      return `${label}${optionalString(social.mode) ? ` (${social.mode})` : ""}${targets ? ` to ${targets}` : ""} \u2014 text: ${quote(excerptText(optionalString(social.text)))}`;
+    }
+    case "createCommunityPost": {
+      const post = isRecord2(node.config.communityPost) ? node.config.communityPost : {};
+      const title = optionalString(post.title);
+      return `${label} in channel ${optionalString(post.channelId) ?? "?"}${title ? ` \u2014 title: ${quote(title)}` : ""} \u2014 text: ${quote(excerptText(optionalString(post.text)))}`;
+    }
+    case "updateClientTags": {
+      const tags = isRecord2(node.config.clientTags) ? node.config.clientTags : {};
+      const ids = Array.isArray(tags.tagIds) ? tags.tagIds.join(", ") : "";
+      return `${label} \u2014 ${optionalString(tags.mode) ?? "update"} ${ids || "(no tags)"}`;
+    }
+    case "setEmailSubscription": {
+      const sub = isRecord2(node.config.emailSubscription) ? node.config.emailSubscription : {};
+      return `${label} \u2014 ${optionalString(sub.status) ?? "?"}`;
+    }
+    case "requestTestimonial":
+      return label;
+  }
+}
+function describeEmail(node, templateNames) {
+  const email = emailConfigOf(node);
+  if (!email) return "(no email config)";
+  if (email.templateId) {
+    const name = templateNames.get(email.templateId) ?? email.templateName ?? null;
+    return `library email ${name ? `${quote(name)} ` : ""}(${email.templateId}) \u2014 sent as saved in the library`;
+  }
+  return `subject: ${quote(email.subject)} \u2014 body: ${quote(excerptHtml(email.html))}`;
+}
+function describeCondition2(config) {
+  const rules = Array.isArray(config.rules) ? config.rules.filter(isRecord2) : [];
+  if (rules.length === 0) return "(no rules)";
+  return rules.map(describeRule).join(" AND ");
+}
+function describeRule(rule) {
+  const field = optionalString(rule.field) ?? "?";
+  const details = [];
+  for (const key of ["productId", "tagId", "consentName", "days"]) {
+    const value = rule[key];
+    if (typeof value === "string" || typeof value === "number") details.push(`${key}=${value}`);
+  }
+  const detail = details.length > 0 ? ` (${details.join(", ")})` : "";
+  const op = optionalString(rule.op);
+  if (op !== void 0) {
+    const value = Array.isArray(rule.values) ? `[${rule.values.join(", ")}]` : typeof rule.value === "string" || typeof rule.value === "number" ? String(rule.value) : "?";
+    return `${field} ${op} ${value}${detail}`;
+  }
+  if (typeof rule.expected === "boolean") return `${field}${detail} is ${rule.expected}`;
+  return `${field}${detail}`;
+}
+function describeDelay(config) {
+  const mode = optionalString(config.mode);
+  switch (mode) {
+    case void 0:
+    case "duration":
+      return `wait ${typeof config.amount === "number" ? config.amount : "?"} ${optionalString(config.unit) ?? ""}`.trimEnd();
+    case "untilWeekday":
+      return `wait until weekday ${typeof config.weekday === "number" ? config.weekday : "?"} at ${optionalString(config.time) ?? "?"}${optionalString(config.timezone) ? ` (${config.timezone})` : ""}`;
+    case "untilDate":
+      return `wait until ${optionalString(config.date) ?? "?"}${optionalString(config.timezone) ? ` (${config.timezone})` : ""}`;
+    case "untilContextDate": {
+      const offset = typeof config.offsetMinutes === "number" ? config.offsetMinutes : 0;
+      return `wait until ${optionalString(config.contextKey) ?? "?"}${offset !== 0 ? ` ${offset > 0 ? "+" : ""}${offset} min` : ""}${config.skipWhenPast === true ? " (skip branch when past)" : ""}`;
+    }
+    default:
+      return `wait (${mode})`;
+  }
+}
+function quote(value) {
+  return value !== void 0 && value.length > 0 ? `"${value}"` : "(empty)";
+}
+function excerptHtml(html) {
+  if (html === void 0) return void 0;
+  const text = html.replace(/<(style|script|head)\b[^>]*>[\s\S]*?<\/\1>/gi, " ").replace(/<br\s*\/?>|<\/(p|div|li|h[1-6]|tr)>/gi, " ").replace(/<[^>]+>/g, "").replace(/&nbsp;/g, " ").replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&#39;|&apos;/g, "'");
+  return excerptText(text);
+}
+function excerptText(text) {
+  if (text === void 0) return void 0;
+  const collapsed = text.replace(/\s+/g, " ").trim();
+  return collapsed.length > EXCERPT_LENGTH ? `${collapsed.slice(0, EXCERPT_LENGTH - 1)}\u2026` : collapsed;
+}
 
 // src/commands/workspace/index.ts
-function parseOnOff3(value, flag) {
+function parseOnOff5(value, flag) {
   const match = ["on", "off"].find((v) => v === value);
   if (!match) throw new Error(`Invalid ${flag}: ${value} (expected on | off)`);
   return match === "on";
@@ -27310,7 +29204,7 @@ function registerWorkspaceCommands(program2) {
       }
       if (options.inheritTimezone) input.timezone = null;
       if (options.autoTranscribe !== void 0) {
-        input.autoTranscribeUploads = parseOnOff3(options.autoTranscribe, "--auto-transcribe");
+        input.autoTranscribeUploads = parseOnOff5(options.autoTranscribe, "--auto-transcribe");
       }
       if (options.transcriptionLanguage !== void 0) {
         input.transcriptionLanguage = parseTranscriptionLanguage(options.transcriptionLanguage);
@@ -27327,13 +29221,65 @@ function registerWorkspaceCommands(program2) {
   );
 }
 
+// src/utils/shortHelp.ts
+var SHORT_HELP_FLAG = "--short";
+var SHORT_HELP_DESCRIPTION = "with --help: print only the command names (subcommands indented), no descriptions";
+var INDENT = "  ";
+function rootOf(command) {
+  let current = command;
+  while (current.parent) current = current.parent;
+  return current;
+}
+function rawArgsOf(command) {
+  const root = rootOf(command);
+  if ("rawArgs" in root && Array.isArray(root.rawArgs)) {
+    return root.rawArgs.filter((arg) => typeof arg === "string");
+  }
+  return [];
+}
+function isShortHelpRequested(command) {
+  return rawArgsOf(command).includes(SHORT_HELP_FLAG);
+}
+function visibleSubcommands(command, helper) {
+  return helper.visibleCommands(command).filter((sub) => command.commands.includes(sub));
+}
+function formatShortHelp(command, helper) {
+  const lines = [];
+  const walk = (cmd, depth) => {
+    lines.push(`${INDENT.repeat(depth)}${cmd.name()}`);
+    for (const sub of visibleSubcommands(cmd, helper)) walk(sub, depth + 1);
+  };
+  if (command.parent === null) {
+    for (const sub of visibleSubcommands(command, helper)) walk(sub, 0);
+  } else {
+    walk(command, 0);
+  }
+  return `${lines.join("\n")}
+`;
+}
+function registerOnCommand2(command) {
+  if (!command.options.some((option) => option.long === SHORT_HELP_FLAG)) {
+    command.addOption(new Option(SHORT_HELP_FLAG, SHORT_HELP_DESCRIPTION).hideHelp());
+  }
+  const inherited = command.configureHelp();
+  const previousFormatHelp = inherited.formatHelp;
+  command.configureHelp({
+    ...inherited,
+    formatHelp: (cmd, helper) => isShortHelpRequested(cmd) ? formatShortHelp(cmd, helper) : previousFormatHelp ? previousFormatHelp.call(helper, cmd, helper) : Help.prototype.formatHelp.call(helper, cmd, helper)
+  });
+  for (const sub of command.commands) registerOnCommand2(sub);
+}
+function applyShortHelp(program2) {
+  registerOnCommand2(program2);
+}
+
 // src/program.ts
 function resolveCliVersion() {
-  if ("0.3.47".length > 0) {
-    return "0.3.47";
+  if ("0.3.52".length > 0) {
+    return "0.3.52";
   }
   try {
-    const raw = readFileSync26(new URL("../package.json", import.meta.url), "utf8");
+    const raw = readFileSync28(new URL("../package.json", import.meta.url), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && "version" in parsed) {
       const { version: version2 } = parsed;
@@ -27376,6 +29322,7 @@ Signing in \u2014 two roles, two consent pages:
   registerProductsCommands(program2);
   registerOffersCommands(program2);
   registerCheckoutSettingsCommands(program2);
+  registerIntegrationsCommands(program2);
   registerSiteCommands(program2);
   registerEmailsCommands(program2);
   registerOtoCommands(program2);
@@ -27406,6 +29353,7 @@ Signing in \u2014 two roles, two consent pages:
   registerSocialCommands(program2);
   registerMediaCommands(program2);
   applyGlobalOptions(program2);
+  applyShortHelp(program2);
   return program2;
 }