@zanfia/cli 0.4.0 → 0.6.4

package/README.md

@@ -1,52 +1,52 @@
-# @zanfia/cli (`zanfia`)
-
-Thin HTTP client over the Zanfia Public API.
-
-> **Status:** published to npm as `@zanfia/cli` (bin `zanfia`), talking to the production Workspace API by default (`ZANFIA_CLI_TARGET=prod` bakes the URLs at build time). Set `ZANFIA_API_URL` to target another environment; local `tsx` runs without baked defaults fall back to the in-memory mock.
-
-## Local usage
-
-```bash
-# from the monorepo root, after `pnpm install`
-pnpm --filter @zanfia/cli dev products list
-
-# or run a one-off
-pnpm --filter @zanfia/cli dev auth whoami
-
-# global flags (--json, --verbose, --api-key) must come BEFORE the subcommand:
-pnpm --filter @zanfia/cli dev --json products list
-```
-
-## System emails
-
-`zanfia emails` manages the customer-facing emails Zanfia sends in your name (Site → Emails):
-
-```bash
-zanfia emails list                                   # key, group, status, subject
-zanfia emails get purchase-confirmation              # subject/headline EN+PL, layout blocks, variables
-zanfia emails set purchase-confirmation --subject-pl "Dzięki za zakup {{productName}}"
-zanfia emails set access-ending-reminder --disable   # optional emails only
-zanfia emails set login-code --layout ./layout.json  # full EmailBlock[] (inline JSON or file)
-zanfia emails set login-code --reset                 # back to the stock email
-zanfia emails branding get
-zanfia emails branding set --accent-color "#2563eb" --reply-to none
-zanfia emails test purchase-confirmation --lang en   # queued to YOUR own address
-```
-
-Raw HTTP: `GET|PATCH /email-templates`, `POST /email-templates/{key}/test-sends`. Full reference for every
-command group: `.claude/skills/zanfia-cli/SKILL.md`.
-
-## Auth resolution order
-
-1. `--api-key` flag
-2. `ZANFIA_API_KEY` environment variable
-3. Stored key in `~/.config/zanfia/credentials.json`
-4. Prompt to run `zanfia auth set-key`
-
-## Environment
-
-| Variable          | Purpose                                          |
-| ----------------- | ------------------------------------------------ |
-| `ZANFIA_API_URL`  | Public API base URL. Unset → mock mode.          |
-| `ZANFIA_API_KEY`  | API key (overrides stored credentials).          |
-| `ZANFIA_CLI_MOCK` | Force mock mode even if `ZANFIA_API_URL` is set. |
+# @zanfia/cli (`zanfia`)
+
+Thin HTTP client over the Zanfia Public API.
+
+> **Status:** published to npm as `@zanfia/cli` (bin `zanfia`), talking to the production Workspace API by default (`ZANFIA_CLI_TARGET=prod` bakes the URLs at build time). Set `ZANFIA_API_URL` to target another environment; local `tsx` runs without baked defaults fall back to the in-memory mock.
+
+## Local usage
+
+```bash
+# from the monorepo root, after `pnpm install`
+pnpm --filter @zanfia/cli dev products list
+
+# or run a one-off
+pnpm --filter @zanfia/cli dev auth whoami
+
+# global flags (--json, --verbose, --api-key) must come BEFORE the subcommand:
+pnpm --filter @zanfia/cli dev --json products list
+```
+
+## System emails
+
+`zanfia emails` manages the customer-facing emails Zanfia sends in your name (Site → Emails):
+
+```bash
+zanfia emails list                                   # key, group, status, subject
+zanfia emails get purchase-confirmation              # subject/headline EN+PL, layout blocks, variables
+zanfia emails set purchase-confirmation --subject-pl "Dzięki za zakup {{productName}}"
+zanfia emails set access-ending-reminder --disable   # optional emails only
+zanfia emails set login-code --layout ./layout.json  # full EmailBlock[] (inline JSON or file)
+zanfia emails set login-code --reset                 # back to the stock email
+zanfia emails branding get
+zanfia emails branding set --accent-color "#2563eb" --reply-to none
+zanfia emails test purchase-confirmation --lang en   # queued to YOUR own address
+```
+
+Raw HTTP: `GET|PATCH /email-templates`, `POST /email-templates/{key}/test-sends`. Full reference for every
+command group: `.claude/skills/zanfia-cli/SKILL.md`.
+
+## Auth resolution order
+
+1. `--api-key` flag
+2. `ZANFIA_API_KEY` environment variable
+3. Stored key in `~/.config/zanfia/credentials.json`
+4. Prompt to run `zanfia auth set-key`
+
+## Environment
+
+| Variable          | Purpose                                          |
+| ----------------- | ------------------------------------------------ |
+| `ZANFIA_API_URL`  | Public API base URL. Unset → mock mode.          |
+| `ZANFIA_API_KEY`  | API key (overrides stored credentials).          |
+| `ZANFIA_CLI_MOCK` | Force mock mode even if `ZANFIA_API_URL` is set. |

package/dist/index.js

@@ -6907,8 +6907,15 @@ import { readFileSync as readFileSync28 } from "fs";
 import { mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
 import { homedir } from "os";
 import { dirname, join } from "path";
-var CONFIG_DIR = join(homedir(), ".config", "zanfia");
-var CREDENTIALS_FILE = join(CONFIG_DIR, "credentials.json");
+var CREDENTIALS_STORE_VERSION = 2;
+var MEMBER_PROFILE_PREFIX = "member:";
+var FALLBACK_PROFILE_KEY = "default";
+function configDir() {
+  return process.env.ZANFIA_CONFIG_DIR || join(homedir(), ".config", "zanfia");
+}
+function credentialsFilePath() {
+  return join(configDir(), "credentials.json");
+}
 var orUndefined = (value) => value.length > 0 ? value : void 0;
 var backendDefaults = {
   apiUrl: true ? orUndefined("https://api.zanfia.com") : void 0,
@@ -6929,24 +6936,110 @@ function resolvePlatformUrl() {
   const raw = process.env.ZANFIA_PLATFORM_URL || backendDefaults.platformUrl || "https://zanfia.co";
   return raw.replace(/\/+$/, "");
 }
-function readCredentials() {
-  try {
-    const raw = readFileSync(CREDENTIALS_FILE, "utf8");
-    const parsed = JSON.parse(raw);
-    if (parsed !== null && typeof parsed === "object" && "apiKey" in parsed && typeof parsed.apiKey === "string") {
-      return parsed;
+var isRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var isStoredCredentials = (value) => isRecord(value) && typeof value.apiKey === "string";
+var emptyStore = () => ({
+  version: CREDENTIALS_STORE_VERSION,
+  active: null,
+  profiles: {}
+});
+function profileKeyFor(credentials) {
+  const claims = decodeTokenClaims(credentials.apiKey);
+  const kind = credentials.kind ?? claims.kind;
+  const base = credentials.workspaceId ?? claims.workspaceId ?? FALLBACK_PROFILE_KEY;
+  return kind === "member" ? `${MEMBER_PROFILE_PREFIX}${base}` : base;
+}
+function parseCredentialsStore(raw) {
+  if (isStoredCredentials(raw)) {
+    const key = profileKeyFor(raw);
+    return { version: CREDENTIALS_STORE_VERSION, active: key, profiles: { [key]: raw } };
+  }
+  if (isRecord(raw) && isRecord(raw.profiles)) {
+    const profiles = {};
+    for (const [key, value] of Object.entries(raw.profiles)) {
+      if (isStoredCredentials(value)) profiles[key] = value;
     }
-    return null;
+    const keys = Object.keys(profiles);
+    const active = typeof raw.active === "string" && raw.active in profiles ? raw.active : keys[0] ?? null;
+    return { version: CREDENTIALS_STORE_VERSION, active, profiles };
+  }
+  return emptyStore();
+}
+function readCredentialsStore() {
+  try {
+    return parseCredentialsStore(JSON.parse(readFileSync(credentialsFilePath(), "utf8")));
   } catch {
-    return null;
+    return emptyStore();
   }
 }
+function writeCredentialsStore(store) {
+  const path2 = credentialsFilePath();
+  mkdirSync(dirname(path2), { recursive: true, mode: 448 });
+  writeFileSync(path2, JSON.stringify(store, null, 2), { mode: 384 });
+  return path2;
+}
+function readCredentials() {
+  const store = readCredentialsStore();
+  return store.active ? store.profiles[store.active] ?? null : null;
+}
 function writeCredentials(credentials) {
-  mkdirSync(dirname(CREDENTIALS_FILE), { recursive: true, mode: 448 });
-  writeFileSync(CREDENTIALS_FILE, JSON.stringify(credentials, null, 2), {
-    mode: 384
+  const store = readCredentialsStore();
+  const key = profileKeyFor(credentials);
+  store.profiles[key] = credentials;
+  store.active = key;
+  return writeCredentialsStore(store);
+}
+function listStoredProfiles() {
+  const store = readCredentialsStore();
+  return Object.entries(store.profiles).map(([key, credentials]) => ({ key, credentials, active: key === store.active })).sort((a, b) => {
+    if (a.active !== b.active) return a.active ? -1 : 1;
+    return (a.credentials.workspaceName ?? a.key).localeCompare(
+      b.credentials.workspaceName ?? b.key
+    );
   });
-  return CREDENTIALS_FILE;
+}
+function findStoredProfile(store, ref) {
+  const wanted = ref.trim().toLowerCase();
+  if (!wanted) return null;
+  const match = Object.entries(store.profiles).find(
+    ([key, credentials]) => [key, credentials.workspaceId, credentials.workspaceSlug, credentials.workspaceName].some(
+      (candidate) => typeof candidate === "string" && candidate.toLowerCase() === wanted
+    )
+  );
+  return match ? { key: match[0], credentials: match[1], active: match[0] === store.active } : null;
+}
+var StoredWorkspaceNotFoundError = class extends Error {
+  constructor(ref, available) {
+    super(
+      `No stored login for workspace "${ref}".` + (available.length > 0 ? ` Stored: ${available.join(", ")}.` : "") + ` Log in to it with: zanfia login --workspace ${ref}`
+    );
+    this.name = "StoredWorkspaceNotFoundError";
+  }
+};
+var profileLabel = (profile) => profile.credentials.workspaceSlug ?? profile.credentials.workspaceId ?? profile.key;
+function useStoredProfile(ref) {
+  const store = readCredentialsStore();
+  const profile = findStoredProfile(store, ref);
+  if (!profile) {
+    throw new StoredWorkspaceNotFoundError(
+      ref,
+      Object.entries(store.profiles).map(([key, credentials]) => profileLabel({ key, credentials }))
+    );
+  }
+  store.active = profile.key;
+  writeCredentialsStore(store);
+  return { ...profile, active: true };
+}
+function apiKeyForStoredWorkspace(ref) {
+  const store = readCredentialsStore();
+  const profile = findStoredProfile(store, ref);
+  if (!profile) {
+    throw new StoredWorkspaceNotFoundError(
+      ref,
+      Object.entries(store.profiles).map(([key, credentials]) => profileLabel({ key, credentials }))
+    );
+  }
+  return profile.credentials.apiKey;
 }
 function resolveApiKey(explicit) {
   if (explicit) return explicit;
@@ -6995,15 +7088,19 @@ function isMockMode() {
   }
   return resolveApiUrl() === null;
 }
-function clearCredentials() {
-  try {
-    rmSync(CREDENTIALS_FILE, { force: true });
-    return true;
-  } catch {
-    return false;
+function removeStoredLogin(options = {}) {
+  const store = readCredentialsStore();
+  const removed = store.active ? store.profiles[store.active] ?? null : null;
+  if (options.all || Object.keys(store.profiles).length <= 1) {
+    rmSync(credentialsFilePath(), { force: true });
+    return { removed, nowActive: null };
   }
+  if (store.active) delete store.profiles[store.active];
+  const [nextKey] = Object.entries(store.profiles).sort(([, a], [, b]) => b.savedAt.localeCompare(a.savedAt)).map(([key]) => key);
+  store.active = nextKey ?? null;
+  writeCredentialsStore(store);
+  return { removed, nowActive: nextKey ? store.profiles[nextKey] ?? null : null };
 }
-var credentialsPath = CREDENTIALS_FILE;
 
 // src/utils/errors.ts
 var ApiError = class extends Error {
@@ -7671,6 +7768,9 @@ function createMockClient() {
       if (!result) throw new ApiError(404, `Product ${id} not found`);
       return result;
     },
+    async deleteProduct() {
+      throw new ApiError(501, "product delete is not available in mock mode");
+    },
     async setProductStatus() {
       throw new ApiError(501, "product status changes are not available in mock mode");
     },
@@ -8343,6 +8443,9 @@ function createMockClient() {
     async cancelEmailCampaign() {
       throw new ApiError(501, "email campaigns are not available in mock mode");
     },
+    async rescheduleEmailCampaign() {
+      throw new ApiError(501, "email campaigns are not available in mock mode");
+    },
     async sendEmailCampaignTest() {
       throw new ApiError(501, "email campaigns are not available in mock mode");
     },
@@ -8514,6 +8617,9 @@ function createMockClient() {
     async removeDownloadFile() {
       throw new ApiError(501, "downloads content is not available in mock mode");
     },
+    async renameDownloadFile() {
+      throw new ApiError(501, "downloads content is not available in mock mode");
+    },
     async reorderDownloadFiles() {
       throw new ApiError(501, "downloads content is not available in mock mode");
     },
@@ -9045,6 +9151,7 @@ function createHttpClient(config) {
     createProduct: (input) => request("POST", "/products", input),
     updateProduct: (id, input) => request("PATCH", `/products/${encodeURIComponent(id)}`, input),
     archiveProduct: (id) => request("POST", `/products/${encodeURIComponent(id)}/archive`),
+    deleteProduct: (id) => request("DELETE", `/products/${encodeURIComponent(id)}`),
     setProductStatus: (id, status) => request("POST", `/products/${encodeURIComponent(id)}/status`, { status }),
     listProductPrices: (productId) => request("GET", `/products/${encodeURIComponent(productId)}/prices`),
     createProductPrice: (productId, input) => request("POST", `/products/${encodeURIComponent(productId)}/prices`, input),
@@ -9123,6 +9230,8 @@ function createHttpClient(config) {
       if (options?.limit !== void 0) params.set("limit", String(options.limit));
       if (options?.cursor) params.set("cursor", options.cursor);
       if (options?.products) params.set("products", options.products);
+      if (options?.createdFrom) params.set("createdFrom", options.createdFrom);
+      if (options?.createdTo) params.set("createdTo", options.createdTo);
       const qs = params.toString();
       return request("GET", `/clients${qs ? `?${qs}` : ""}`);
     },
@@ -9538,6 +9647,7 @@ function createHttpClient(config) {
       scheduledAt !== void 0 ? { scheduledAt } : {}
     ),
     cancelEmailCampaign: (id) => request("POST", `/campaigns/${encodeURIComponent(id)}/cancel`),
+    rescheduleEmailCampaign: (id, scheduledAt) => request("POST", `/campaigns/${encodeURIComponent(id)}/reschedule`, { scheduledAt }),
     sendEmailCampaignTest: (id, recipients) => request(
       "POST",
       `/campaigns/${encodeURIComponent(id)}/test-sends`,
@@ -9669,6 +9779,11 @@ function createHttpClient(config) {
       "DELETE",
       `/products/${encodeURIComponent(productId)}/downloads/files/${encodeURIComponent(uid)}`
     ),
+    renameDownloadFile: (productId, uid, name) => request(
+      "PATCH",
+      `/products/${encodeURIComponent(productId)}/downloads/files/${encodeURIComponent(uid)}`,
+      { name }
+    ),
     reorderDownloadFiles: (productId, uids) => request("POST", `/products/${encodeURIComponent(productId)}/downloads/files/reorder`, {
       uids
     }),
@@ -10026,6 +10141,22 @@ function parseWorkflowKind(value) {
   }
   return kind;
 }
+var STOREFRONT_VISIBILITIES = [
+  "public",
+  "unlisted",
+  "private"
+];
+function parseStorefrontVisibility(value) {
+  const visibility = STOREFRONT_VISIBILITIES.find(
+    (candidate) => candidate === value.trim().toLowerCase()
+  );
+  if (visibility === void 0) {
+    throw new Error(
+      `Invalid --visibility: ${value} (expected one of: ${STOREFRONT_VISIBILITIES.join(", ")})`
+    );
+  }
+  return visibility;
+}
 function parseCommaList(flag) {
   return (value) => {
     const items = [
@@ -10065,6 +10196,8 @@ function requireConfirm(confirm, what) {
 var OUTPUT_FORMAT_JSON = "json";
 var API_KEY_FLAG = "--api-key <key>";
 var API_KEY_DESCRIPTION = "override stored API key for this invocation";
+var WORKSPACE_FLAG = "--workspace <id|slug>";
+var WORKSPACE_DESCRIPTION = "use the stored login of this workspace for this invocation (see `workspace list`)";
 var VERBOSE_FLAG = "--verbose";
 var VERBOSE_DESCRIPTION = "log request/response debug info";
 var JSON_FLAG = "--json";
@@ -10084,6 +10217,7 @@ function registerOnCommand(command) {
     command.enablePositionalOptions();
   }
   addOptionIfMissing(command, new Option(API_KEY_FLAG, API_KEY_DESCRIPTION).hideHelp());
+  addOptionIfMissing(command, new Option(WORKSPACE_FLAG, WORKSPACE_DESCRIPTION).hideHelp());
   addOptionIfMissing(command, new Option(VERBOSE_FLAG, VERBOSE_DESCRIPTION).hideHelp());
   addOptionIfMissing(
     command,
@@ -10095,13 +10229,14 @@ function registerOnCommand(command) {
 function applyGlobalOptions(program2) {
   program2.enablePositionalOptions();
   program2.option(API_KEY_FLAG, API_KEY_DESCRIPTION);
+  program2.option(WORKSPACE_FLAG, WORKSPACE_DESCRIPTION);
   program2.option(JSON_FLAG, JSON_DESCRIPTION);
   program2.option(VERBOSE_FLAG, VERBOSE_DESCRIPTION);
   for (const sub of program2.commands) registerOnCommand(sub);
 }
 
 // src/utils/output.ts
-function isRecord(value) {
+function isRecord2(value) {
   return value !== null && typeof value === "object";
 }
 function getGlobalFlags(command) {
@@ -10112,11 +10247,15 @@ function getGlobalFlags(command) {
   const flags = {};
   for (const node of chain) {
     const raw = node.opts();
-    if (!isRecord(raw)) continue;
+    if (!isRecord2(raw)) continue;
     if (typeof raw.apiKey === "string") flags.apiKey = raw.apiKey;
+    if (typeof raw.workspace === "string") flags.workspace = raw.workspace;
     if (raw.verbose === true) flags.verbose = true;
     if (raw.json === true || raw.output === OUTPUT_FORMAT_JSON) flags.json = true;
   }
+  if (flags.workspace && !flags.apiKey && !process.env.ZANFIA_API_KEY) {
+    flags.apiKey = apiKeyForStoredWorkspace(flags.workspace);
+  }
   return flags;
 }
 function emit(flags, data, humanRenderer) {
@@ -10132,10 +10271,10 @@ function printJson(data) {
 `);
 }
 function tableRowsOf(result, key) {
-  if (!isRecord(result)) return [];
+  if (!isRecord2(result)) return [];
   const rows = result[key];
   if (!Array.isArray(rows)) return [];
-  return rows.filter(isRecord);
+  return rows.filter(isRecord2);
 }
 function printTable(rows, columns) {
   if (rows.length === 0) {
@@ -11158,16 +11297,93 @@ More ads available \u2014 re-run with --after ${result.after}
 }
 
 // src/commands/auth/index.ts
+function keySource(flags, rawApiKey) {
+  if (typeof rawApiKey === "string") return "--api-key";
+  if (process.env.ZANFIA_API_KEY) return "$ZANFIA_API_KEY";
+  if (flags.workspace) return `stored login of --workspace ${flags.workspace}`;
+  return "active stored login";
+}
+async function runWhoami(command) {
+  const flags = getGlobalFlags(command);
+  const rawApiKey = command.optsWithGlobals().apiKey;
+  const logins = listStoredProfiles().length;
+  const apiKey = resolveApiKey(flags.apiKey);
+  if (decodeTokenKind(apiKey) === "member") {
+    const stored = readCredentials();
+    const claims = decodeTokenClaims(apiKey);
+    const workspaceId = stored?.workspaceId ?? claims.workspaceId ?? "?";
+    const info2 = {
+      role: "member",
+      workspaceId,
+      workspaceName: stored?.workspaceName ?? null,
+      userEmail: stored?.userEmail ?? null,
+      uid: claims.subject ?? null,
+      scopes: ["communities:read", "communities:write"],
+      communityApiUrl: resolveCommunityApiUrl()
+    };
+    emit(flags, info2, () => {
+      process.stdout.write(`Role: community member
+`);
+      process.stdout.write(
+        `Workspace: ${info2.workspaceName ?? "(unknown)"} (${info2.workspaceId})
+`
+      );
+      if (info2.userEmail) process.stdout.write(`User: ${info2.userEmail}
+`);
+      else if (info2.uid) process.stdout.write(`User id: ${info2.uid}
+`);
+      process.stdout.write(`Scopes: ${info2.scopes.join(", ")}
+`);
+      process.stdout.write(`Community API: ${info2.communityApiUrl ?? "<unresolved>"}
+`);
+    });
+    return;
+  }
+  const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+  const info = await client.whoami();
+  const source = keySource(flags, rawApiKey);
+  emit(flags, { ...info, keySource: source, storedLogins: logins }, () => {
+    const modeTag = isMockMode() ? " (mock)" : "";
+    process.stdout.write(`Workspace: ${info.workspaceName}${modeTag}
+`);
+    process.stdout.write(`Workspace ID: ${info.workspaceId}
+`);
+    process.stdout.write(`User: ${info.userEmail}
+`);
+    process.stdout.write(`Scopes: ${info.scopes.join(", ")}
+`);
+    process.stdout.write(`Key: ${source}
+`);
+    if (logins > 1) {
+      process.stdout.write(
+        `Logins on this device: ${logins} (\`workspace list\`, switch with \`workspace use <id|slug>\`)
+`
+      );
+    }
+  });
+}
 function registerAuthCommands(program2) {
   const auth = program2.command("auth").description("Manage CLI authentication");
+  program2.command("whoami").description("Show the active workspace and identity (same as `auth whoami`)").action(async (_, command) => runWhoami(command));
   auth.command("status").description("Show what the CLI currently has stored (path, source, expiry, api URL).").action(() => {
     const stored = readCredentials();
     const apiKey = resolveApiKey(void 0);
     const apiUrl = resolveApiUrl();
     const envKey = process.env.ZANFIA_API_KEY ? "(from $ZANFIA_API_KEY)" : "";
     const envUrl = process.env.ZANFIA_API_URL ? "(from $ZANFIA_API_URL)" : "";
-    process.stdout.write(`Credentials file: ${credentialsPath}
+    const profiles = listStoredProfiles();
+    process.stdout.write(`Credentials file: ${credentialsFilePath()}
 `);
+    if (profiles.length > 1) {
+      process.stdout.write(`Stored logins: ${profiles.length} (active one below)
+`);
+      for (const profile of profiles) {
+        process.stdout.write(
+          `  ${profile.active ? "*" : " "} ${profile.credentials.workspaceName ?? "?"} (${profile.key})
+`
+        );
+      }
+    }
     if (!stored) {
       process.stdout.write(`  status: no credentials file found
 `);
@@ -11244,54 +11460,7 @@ Resolved by next call:
       );
     }
   });
-  auth.command("whoami").description("Show the authenticated identity (creator workspace, or community member)").action(async (_, command) => {
-    const flags = getGlobalFlags(command);
-    const apiKey = resolveApiKey(flags.apiKey);
-    if (decodeTokenKind(apiKey) === "member") {
-      const stored = readCredentials();
-      const claims = decodeTokenClaims(apiKey);
-      const workspaceId = stored?.workspaceId ?? claims.workspaceId ?? "?";
-      const info2 = {
-        role: "member",
-        workspaceId,
-        workspaceName: stored?.workspaceName ?? null,
-        userEmail: stored?.userEmail ?? null,
-        uid: claims.subject ?? null,
-        scopes: ["communities:read", "communities:write"],
-        communityApiUrl: resolveCommunityApiUrl()
-      };
-      emit(flags, info2, () => {
-        process.stdout.write(`Role: community member
-`);
-        process.stdout.write(
-          `Workspace: ${info2.workspaceName ?? "(unknown)"} (${info2.workspaceId})
-`
-        );
-        if (info2.userEmail) process.stdout.write(`User: ${info2.userEmail}
-`);
-        else if (info2.uid) process.stdout.write(`User id: ${info2.uid}
-`);
-        process.stdout.write(`Scopes: ${info2.scopes.join(", ")}
-`);
-        process.stdout.write(`Community API: ${info2.communityApiUrl ?? "<unresolved>"}
-`);
-      });
-      return;
-    }
-    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
-    const info = await client.whoami();
-    emit(flags, info, () => {
-      const modeTag = isMockMode() ? " (mock)" : "";
-      process.stdout.write(`Workspace: ${info.workspaceName}${modeTag}
-`);
-      process.stdout.write(`Workspace ID: ${info.workspaceId}
-`);
-      process.stdout.write(`User: ${info.userEmail}
-`);
-      process.stdout.write(`Scopes: ${info.scopes.join(", ")}
-`);
-    });
-  });
+  auth.command("whoami").description("Show the authenticated identity (creator workspace, or community member)").action(async (_, command) => runWhoami(command));
 }
 
 // src/commands/auth/login.ts
@@ -11490,25 +11659,54 @@ async function postJson(url, body) {
   }
   return JSON.parse(text);
 }
+function buildCreatorConsentParams(input) {
+  return {
+    redirect_uri: input.redirectUri,
+    state: input.state,
+    code_challenge: input.challenge,
+    code_challenge_method: "S256",
+    hostname: input.hostname,
+    client: "zanfia-cli",
+    ...input.workspace?.trim() ? { workspace: input.workspace.trim() } : null
+  };
+}
+function buildRegisterUrl(consentUrl, email) {
+  const consent = new URL(consentUrl);
+  const continuePath = `${consent.pathname}${consent.search}`;
+  const register = new URL("/auth/register", consent.origin);
+  register.searchParams.set("continue", continuePath);
+  register.searchParams.set("next", continuePath);
+  if (email) register.searchParams.set("email", email);
+  return register.toString();
+}
 async function runLogin(options) {
+  await runBrowserAuth(options, (consentUrl) => consentUrl);
+}
+async function runBrowserRegister(options) {
+  await runBrowserAuth(options, (consentUrl) => buildRegisterUrl(consentUrl, options.email));
+}
+async function runBrowserAuth(options, entryUrl) {
   const urls = resolveUrls(options.apiUrl);
   const state = randomBytes(32).toString("base64url");
   const { verifier, challenge } = generatePkce();
   const host = safeHostname();
   const server = await startLoopbackServer();
   const redirectUri = `http://127.0.0.1:${server.port}${CALLBACK_PATH}`;
-  const consentUrl = buildConsentUrl(urls.loginUrl, {
-    redirect_uri: redirectUri,
-    state,
-    code_challenge: challenge,
-    code_challenge_method: "S256",
-    hostname: host,
-    client: "zanfia-cli"
-  });
-  process.stdout.write(`Opening ${consentUrl}
+  const consentUrl = buildConsentUrl(
+    urls.loginUrl,
+    buildCreatorConsentParams({
+      redirectUri,
+      state,
+      challenge,
+      hostname: host,
+      workspace: options.workspace
+    })
+  );
+  const openUrl = entryUrl(consentUrl);
+  process.stdout.write(`Opening ${openUrl}
 `);
   process.stdout.write("Waiting for browser callback...\n\n");
-  const opened = await openBrowser(consentUrl);
+  const opened = await openBrowser(openUrl);
   if (!opened) {
     process.stdout.write("Could not open browser automatically \u2014 paste the URL above.\n\n");
   }
@@ -11532,14 +11730,24 @@ async function runLogin(options) {
       expiresAt: exchanged.expiresAt,
       userEmail: exchanged.userEmail,
       workspaceId: exchanged.workspaceId,
-      workspaceName: exchanged.workspaceName
+      workspaceName: exchanged.workspaceName,
+      workspaceSlug: exchanged.workspaceSlug ?? null
     });
     process.stdout.write(`Logged in as ${exchanged.userEmail}.
 `);
-    process.stdout.write(`Workspace: ${exchanged.workspaceName} (${exchanged.workspaceId})
-`);
+    process.stdout.write(
+      `Workspace: ${exchanged.workspaceName} (${exchanged.workspaceId}) - now active
+`
+    );
     process.stdout.write(`Credentials stored at ${stored}
 `);
+    const logins = listStoredProfiles().length;
+    if (logins > 1) {
+      process.stdout.write(
+        `Logins on this device: ${logins}. Switch with \`zanfia workspace use <id|slug>\` (see \`zanfia workspace list\`).
+`
+      );
+    }
     if (!urls.apiUrl) {
       process.stdout.write(
         "\nTip: ZANFIA_API_URL is not set. Pass --api-url <url> or export the env var so commands like `zanfia products list` know where to call.\n"
@@ -11652,6 +11860,9 @@ function registerLoginCommand(auth) {
   auth.command("login").description(
     "Open a browser to authorize the CLI via OAuth (pass --address to sign in as a community member)"
   ).option("--api-url <url>", "API URL to associate with the resulting token").option(
+    "--workspace <id|slug>",
+    "preselect this workspace on the consent page (you can still pick another there)"
+  ).option(
     "--address <url>",
     "sign in as a community member (Community API) against this creator platform URL"
   ).option("-v, --verbose", "show HTTP request details").addHelpText(
@@ -11660,9 +11871,13 @@ function registerLoginCommand(auth) {
 The two flows use different consent pages:
 
   Creator (workspace) login \u2014 full Workspace API:
-      login
+      login [--workspace <id|slug>]
     Opens the consent page in the Zanfia dashboard. Sign in with your
-    creator account and approve; the CLI gets a workspace token.
+    creator account, pick the workspace (Owner or Admin) and approve; the CLI
+    gets a token for that workspace. Each workspace keeps its own login on
+    this device: \`workspace list\` shows them, \`workspace use <id|slug>\`
+    switches without logging in again, and \`--workspace <id|slug>\` on any
+    command uses another stored login just for that command.
 
   Community member login \u2014 Community API only:
       login --address https://<creator-platform-url>
@@ -11686,14 +11901,27 @@ The two flows use different consent pages:
     await runLogin(options);
   });
 }
-function registerLogoutCommand(auth, clear) {
-  auth.command("logout").description("Forget the stored CLI credentials").action(() => {
-    const cleared = clear();
-    if (cleared) {
-      process.stdout.write(`Removed credentials at ${credentialsPath}.
-`);
-    } else {
+function registerLogoutCommand(auth) {
+  auth.command("logout").description(
+    "Forget the active stored login (--all forgets every workspace login on this device)"
+  ).option("--all", "remove every stored login").action((options) => {
+    const { removed, nowActive } = removeStoredLogin({ all: options.all });
+    if (!removed && !options.all) {
       process.stdout.write("No stored credentials to remove.\n");
+      return;
+    }
+    if (options.all) {
+      process.stdout.write("Removed every stored login.\n");
+      return;
+    }
+    const label = removed?.workspaceName ?? removed?.workspaceId ?? "the stored login";
+    process.stdout.write(`Logged out of ${label}.
+`);
+    if (nowActive) {
+      process.stdout.write(
+        `Active now: ${nowActive.workspaceName ?? "?"} (${nowActive.workspaceId ?? "?"})
+`
+      );
     }
   });
 }
@@ -11703,6 +11931,16 @@ import { createHash as createHash2, randomBytes as randomBytes2 } from "crypto";
 
 // src/utils/httpJson.ts
 import { hostname as hostname2 } from "os";
+var HttpJsonError = class extends Error {
+  status;
+  code;
+  constructor(message, status, code) {
+    super(message);
+    this.name = "HttpJsonError";
+    this.status = status;
+    this.code = code;
+  }
+};
 async function postJson2(label, url, body, options = {}) {
   if (options.verbose) process.stderr.write(`\u2192 POST ${url}
 `);
@@ -11718,8 +11956,10 @@ async function postJson2(label, url, body, options = {}) {
   });
   const text = await response.text();
   if (!response.ok) {
-    throw new Error(
-      `${label} failed (${response.status}): ${extractErrorMessage(text, response.statusText)}`
+    throw new HttpJsonError(
+      `${label} failed (${response.status}): ${extractErrorMessage(text, response.statusText)}`,
+      response.status,
+      extractErrorCode(text)
     );
   }
   return JSON.parse(text);
@@ -11734,6 +11974,14 @@ function extractErrorMessage(text, fallback) {
   }
   return text || fallback;
 }
+function extractErrorCode(text) {
+  try {
+    const parsed = JSON.parse(text);
+    return typeof parsed.code === "string" ? parsed.code : null;
+  } catch {
+    return null;
+  }
+}
 function safeHostname2() {
   try {
     const h = hostname2();
@@ -11790,6 +12038,7 @@ function promptHidden(question) {
 }
 
 // src/commands/auth/register.ts
+var BOT_CHECK_FAILED_CODE = "auth/bot-check-failed";
 var MAX_CODE_ATTEMPTS = 5;
 var MIN_PASSWORD_LENGTH = 8;
 var EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
@@ -11833,6 +12082,32 @@ async function runRegister(options) {
   if (!EMAIL_REGEX.test(email)) {
     throw new Error(`"${email}" does not look like a valid email address.`);
   }
+  const initiateBody = {
+    email,
+    lang,
+    accessCode: options.accessCode ?? null
+  };
+  try {
+    await postJson2(
+      "Sending verification code",
+      `${urls.usersUrl}/initiate-registration`,
+      initiateBody,
+      { verbose }
+    );
+  } catch (error) {
+    if (error instanceof HttpJsonError && error.code === BOT_CHECK_FAILED_CODE) {
+      process.stdout.write(
+        "\nNew Zanfia accounts finish signing up in the browser (a quick security check).\nOpening the signup page; the CLI logs in once you are done.\n\n"
+      );
+      await runBrowserRegister({ email, apiUrl: options.apiUrl, verbose });
+      return;
+    }
+    throw error;
+  }
+  process.stdout.write(`
+We sent a 6-digit code to ${email}. Check your inbox.
+
+`);
   const fullName = options.name ?? await promptLine("Full name: ");
   if (fullName.length < 3 || fullName.length > 100) {
     throw new Error("Full name must be 3-100 characters.");
@@ -11859,21 +12134,6 @@ async function runRegister(options) {
   } else if (password.length < MIN_PASSWORD_LENGTH) {
     throw new Error(`Password must be at least ${MIN_PASSWORD_LENGTH} characters.`);
   }
-  const initiateBody = {
-    email,
-    lang,
-    accessCode: options.accessCode ?? null
-  };
-  await postJson2(
-    "Sending verification code",
-    `${urls.usersUrl}/initiate-registration`,
-    initiateBody,
-    { verbose }
-  );
-  process.stdout.write(`
-We sent a 6-digit code to ${email}. Check your inbox.
-
-`);
   let verificationToken = null;
   for (let attempt = 1; attempt <= MAX_CODE_ATTEMPTS; attempt++) {
     const code = options.code ?? await promptLine("Verification code (or 'r' to resend): ");
@@ -11978,16 +12238,18 @@ Logged in as ${exchanged.userEmail}.
   }
 }
 function registerRegisterCommand(program2) {
-  program2.command("register").description("Create a new Zanfia creator account via an emailed code and log the CLI in").option("--email <email>", "account email (prompted when omitted)").option("--name <fullName>", "your full name (prompted when omitted)").option(
+  program2.command("register").description("Create a new Zanfia creator account and log the CLI in").option("--email <email>", "account email (prompted when omitted)").option("--name <fullName>", "your full name (prompted when omitted)").option(
     "--password <password>",
     "optional account password (min 8 chars); prefer the interactive prompt \u2014 flags leak into shell history"
   ).option("--lang <lang>", "account language (en|pl)", "en").option("--access-code <code>", "signup access code (only when signups are gated)").option("--code <code>", "email verification code (skips the interactive prompt)").option("--api-url <url>", "API URL to associate with the resulting token").option("-v, --verbose", "show HTTP request details").addHelpText(
     "after",
     `
-The same email-code registration as the Zanfia dashboard, entirely in the
-terminal: you get a 6-digit code by email, the account plus its personal
-workspace are created, and the CLI ends up logged in exactly as if you had
-run \`login\` \u2014 no browser needed.
+New accounts finish signing up in the browser: Zanfia runs a quick security
+check on the signup page, which a terminal cannot do. The CLI opens the
+signup page with your email filled in, and once the account exists it logs
+in exactly as if you had run \`login\`. Where the check does not apply, the
+whole flow stays in the terminal: a 6-digit code by email, then the account
+plus its personal workspace are created.
 
 Running it with an email that already has a creator account simply signs
 that account in.
@@ -12608,6 +12870,28 @@ function registerCampaignsCommands(program2) {
       const { stats } = result.campaign;
       process.stdout.write(
         `Cancelled campaign ${result.campaign.id} \u2014 ${stats.sent} recipient${stats.sent === 1 ? " was" : "s were"} already sent to before the cancel.
+`
+      );
+    });
+  });
+  campaigns.command("reschedule").description(
+    "Move a SCHEDULED campaign to a new send time (min 2 minutes, max 30 days out) \u2014 it stays scheduled and goes out only at the new time. Drafts: `campaigns send --at` instead."
+  ).argument("<id>", "campaign id (must be scheduled)").requiredOption(
+    "--at <isoTimestamp>",
+    "new send time (ISO with offset, e.g. 2026-10-15T09:00:00+02:00)"
+  ).action(async (id, options, command) => {
+    const flags = getGlobalFlags(command);
+    if (Number.isNaN(Date.parse(options.at))) {
+      throw new Error(
+        `Invalid --at timestamp: ${options.at} (expected ISO, e.g. 2026-10-15T09:00:00+02:00)`
+      );
+    }
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.rescheduleEmailCampaign(id, options.at);
+    emit(flags, result, () => {
+      const { campaign } = result;
+      process.stdout.write(
+        `Campaign ${campaign.id} moved to ${campaign.scheduledAt} \u2014 still scheduled; stop it before then with \`campaigns cancel\`.
 `
       );
     });
@@ -13756,7 +14040,15 @@ function printMergePreview(preview) {
 }
 function registerClientsCommands(program2) {
   const clients2 = program2.command("clients").description("Manage workspace clients (customers)");
-  clients2.command("list").description("List clients (newest first), with optional search and product filter").option("--search <query>", "match email / first name / last name").option("--limit <n>", "page size (max 100)").option("--cursor <cursor>", "keyset cursor from a previous page").option("--with-products", "only clients with active product access").option("--without-products", "only clients with no product access").action(
+  clients2.command("list").description(
+    "List clients (newest first), with optional search, product and date-added filters"
+  ).option("--search <query>", "match email / first name / last name").option("--limit <n>", "page size (max 100)").option("--cursor <cursor>", "keyset cursor from a previous page").option("--with-products", "only clients with active product access").option("--without-products", "only clients with no product access").option(
+    "--created-from <date>",
+    "only clients added on or after this date (YYYY-MM-DD or ISO 8601 date-time)"
+  ).option(
+    "--created-to <date>",
+    "only clients added on or before this date (YYYY-MM-DD keeps the whole day)"
+  ).action(
     async (options, command) => {
       const flags = getGlobalFlags(command);
       if (options.withProducts && options.withoutProducts) {
@@ -13767,7 +14059,9 @@ function registerClientsCommands(program2) {
         search: options.search,
         limit: options.limit !== void 0 ? parsePositiveInt4(options.limit, "--limit") : void 0,
         cursor: options.cursor,
-        products: options.withProducts ? "has" : options.withoutProducts ? "no" : void 0
+        products: options.withProducts ? "has" : options.withoutProducts ? "no" : void 0,
+        createdFrom: options.createdFrom,
+        createdTo: options.createdTo
       });
       emit(flags, page, () => {
         printTable(
@@ -19297,9 +19591,14 @@ join again to refresh it.
 // src/commands/liveRooms/index.ts
 var minutes = (seconds) => `${Math.round(seconds / 60)} min`;
 var percent = (part, whole) => whole > 0 ? `${Math.round(part / whole * 100)}%` : "-";
+var WEEKDAYS = ["Mon", "Tue", "Wed", "Thu", "Fri", "Sat", "Sun"];
 function describeSchedule(room) {
   if (!room.schedule) return "fixed";
   const until = room.schedule.until ? ` until ${room.schedule.until}` : "";
+  if (room.schedule.kind === "daily") {
+    const days = room.schedule.weekdays ? room.schedule.weekdays.map((day) => WEEKDAYS[day - 1] ?? String(day)).join(", ") : "daily";
+    return `${days} at ${room.schedule.times.join(", ")} (${room.timezone})${until}`;
+  }
   return `every ${room.schedule.everyMinutes} min${until}`;
 }
 function registerLiveRoomsCommands(program2) {
@@ -25298,6 +25597,10 @@ function registerProductsCommands(program2) {
 `);
       process.stdout.write(`  Status: ${product.status}
 `);
+      if (product.storefrontVisibility) {
+        process.stdout.write(`  Visibility: ${product.storefrontVisibility}
+`);
+      }
       process.stdout.write(`  Clients: ${product.clientCount}
 `);
       if (product.description) {
@@ -25384,13 +25687,21 @@ function registerProductsCommands(program2) {
       });
     }
   );
-  products2.command("update").description("Update a product's name and/or description").argument("<id>", "product id").option("--name <name>", "new product name").option("--description <description>", "new product description").action(
+  products2.command("update").description("Update a product's name, description and/or storefront visibility").argument("<id>", "product id").option("--name <name>", "new product name").option("--description <description>", "new product description").option(
+    "--visibility <public|unlisted|private>",
+    "where buyers find it once published: public (store + product page), unlisted (product page by link only), private (checkout links only)",
+    parseStorefrontVisibility
+  ).action(
     async (id, options, command) => {
+      if (options.name === void 0 && options.description === void 0 && options.visibility === void 0) {
+        throw new Error("Nothing to update: pass --name, --description and/or --visibility.");
+      }
       const flags = getGlobalFlags(command);
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
       const result = await client.updateProduct(id, {
         name: options.name,
-        description: options.description
+        description: options.description,
+        storefrontVisibility: options.visibility
       });
       emit(flags, result, () => {
         process.stdout.write(`Updated product ${result.productId}
@@ -25407,6 +25718,26 @@ function registerProductsCommands(program2) {
 `);
     });
   });
+  products2.command("delete").description(
+    "Delete a product (soft-delete, like the dashboard): offers archived, customers lose access, subscriptions cancelled without refunds, data purged after 30 days. Requires --confirm."
+  ).argument("<id>", "product id").option("--confirm", "required \u2014 acknowledge that customers lose access and subscriptions end").action(async (id, options, command) => {
+    requireConfirm(options.confirm, `delete product ${id}`);
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.deleteProduct(id);
+    emit(flags, result, () => {
+      process.stdout.write(
+        `Deleted product ${result.productId}; data is purged after ${new Date(result.purgeAfter * 1e3).toISOString().slice(0, 10)}.
+`
+      );
+      if (result.activeGrants > 0) {
+        process.stdout.write(
+          `${result.activeGrants} customer(s) lost access; ${result.cancellableSubscriptions} subscription(s) are being cancelled (run ${result.runId ?? "n/a"}).
+`
+        );
+      }
+    });
+  });
   products2.command("publish").description("Publish a product (status \u2192 published; live for customers)").argument("<id>", "product id").action(async (id, _, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -25951,6 +26282,18 @@ function registerProductsCommands(program2) {
       );
     });
   });
+  files.command("rename").description(
+    "Rename a file in place (its name is the buyer\u2019s download filename; order and uid stay)"
+  ).argument("<uid>", "file uid (see `products files get`)").requiredOption("--product <id>", "downloads product id").requiredOption("--name <name>", 'new file name, e.g. "Tom 1.epub" (max 255 characters)').action(async (uid, options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.renameDownloadFile(options.product, uid, options.name);
+    emit(flags, result, () => {
+      process.stdout.write(`Renamed ${result.file.uid} to "${result.file.name}".
+`);
+      printFilesTable(result.files);
+    });
+  });
   files.command("reorder").description("Reorder the file list \u2014 pass EVERY current uid in the new order").argument("<uid...>", "the full uid permutation, in the new order").requiredOption("--product <id>", "downloads product id").action(async (uids, options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -26749,6 +27092,8 @@ function describeCondition(condition) {
       return condition.operator === "has" ? "has a phone number" : "has no phone number";
     case "campaign":
       return `${condition.operator.replace("-", " ")} campaign ${condition.campaignId}`;
+    case "email":
+      return `email ${condition.operator === "is-any" ? "is one of" : "is none of"} ${condition.emails.join(", ")} (set in the dashboard)`;
   }
 }
 function registerSegmentsCommands(program2) {
@@ -27123,15 +27468,25 @@ function registerSiteCommands(program2) {
   );
   update.command("general").description(
     "Page title/description, language, showPageTitle, mainPage* (undefined = untouched)"
-  ).option("--title <text>", "browser/page title of the site").option("--description <text>", "meta description of the site").option("--language <pl|en|default>", "UI language of the public site").option("--show-page-title <on|off>", "render the page title in the header").option(
+  ).option("--title <text>", "browser/page title of the site").option("--description <text>", "short description (storefront header + meta fallback)").option(
+    "--seo-description <text>",
+    "meta description for search engines (empty = short description)"
+  ).option(
+    "--robots-rules <text>",
+    String.raw`extra robots.txt lines (User-agent / Allow / Disallow / Crawl-delay); separate lines with \n, or use --json`
+  ).option("--language <pl|en|default>", "UI language of the public site").option("--show-page-title <on|off>", "render the page title in the header").option(
     "--json <fileOrJson>",
-    "inline JSON object or .json path \u2014 pageTitle, pageDescription, showPageTitle, language, mainPage, mainPageId, mainPageCommunityId"
+    "inline JSON object or .json path \u2014 pageTitle, pageDescription, seoDescription, robotsTxtRules, showPageTitle, language, mainPage, mainPageId, mainPageCommunityId"
   ).action(
     async (options, command) => {
       const flags = getGlobalFlags(command);
       const body = baseBody(options.json);
       if (options.title !== void 0) body.pageTitle = options.title;
       if (options.description !== void 0) body.pageDescription = options.description;
+      if (options.seoDescription !== void 0) body.seoDescription = options.seoDescription;
+      if (options.robotsRules !== void 0) {
+        body.robotsTxtRules = options.robotsRules.split(String.raw`\n`).join("\n");
+      }
       if (options.language !== void 0) {
         body.language = parseChoice7(options.language, PLATFORM_LANGUAGES, "--language");
       }
@@ -29440,17 +29795,17 @@ var GRAPH_NODE_KINDS = /* @__PURE__ */ new Set([
 ]);
 var GRAPH_CONDITION_BRANCHES = ["true", "false"];
 var EXCERPT_LENGTH = 120;
-function isRecord2(value) {
+function isRecord3(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function optionalString(value) {
   return typeof value === "string" ? value : void 0;
 }
 function asAutomationGraph(raw) {
-  if (!isRecord2(raw) || !Array.isArray(raw.nodes) || !Array.isArray(raw.edges)) return null;
+  if (!isRecord3(raw) || !Array.isArray(raw.nodes) || !Array.isArray(raw.edges)) return null;
   const nodes = [];
   for (const candidate of raw.nodes) {
-    if (!isRecord2(candidate)) continue;
+    if (!isRecord3(candidate)) continue;
     const { id, kind, config, name, disabled } = candidate;
     if (typeof id !== "string" || typeof kind !== "string" || !GRAPH_NODE_KINDS.has(kind)) {
       continue;
@@ -29458,14 +29813,14 @@ function asAutomationGraph(raw) {
     nodes.push({
       id,
       kind,
-      config: isRecord2(config) ? config : {},
+      config: isRecord3(config) ? config : {},
       ...typeof name === "string" && name.length > 0 ? { name } : {},
       ...disabled === true ? { disabled: true } : {}
     });
   }
   const edges = [];
   for (const candidate of raw.edges) {
-    if (!isRecord2(candidate)) continue;
+    if (!isRecord3(candidate)) continue;
     const { source, target, sourceHandle } = candidate;
     if (typeof source !== "string" || typeof target !== "string") continue;
     const branch = GRAPH_CONDITION_BRANCHES.find((b) => b === sourceHandle);
@@ -29475,7 +29830,7 @@ function asAutomationGraph(raw) {
 }
 function emailConfigOf(node) {
   const raw = node.config.email;
-  if (!isRecord2(raw)) return null;
+  if (!isRecord3(raw)) return null;
   return {
     templateId: optionalString(raw.templateId) ?? null,
     templateName: optionalString(raw.templateName) ?? null,
@@ -29627,7 +29982,7 @@ function isKnownActionType(value) {
 function describeAction(node, templateNames) {
   const { taskType } = node.config;
   if (!isKnownActionType(taskType)) {
-    const inner = isRecord2(node.config.action) ? optionalString(node.config.action.type) : void 0;
+    const inner = isRecord3(node.config.action) ? optionalString(node.config.action.type) : void 0;
     return `${typeof taskType === "string" ? taskType : "action"}${inner ? ` ${inner}` : ""}`;
   }
   const label = GRAPH_ACTION_LABELS[taskType];
@@ -29635,39 +29990,39 @@ function describeAction(node, templateNames) {
     case "sendEmail":
       return `${label} \u2014 ${describeEmail(node, templateNames)}`;
     case "notifyOwner": {
-      const owner = isRecord2(node.config.ownerNotification) ? node.config.ownerNotification : {};
+      const owner = isRecord3(node.config.ownerNotification) ? node.config.ownerNotification : {};
       return `${label} \u2014 subject: ${quote(optionalString(owner.subject))} \u2014 body: ${quote(excerptHtml(optionalString(owner.html)))}`;
     }
     case "sendSms": {
-      const sms = isRecord2(node.config.sms) ? node.config.sms : {};
+      const sms = isRecord3(node.config.sms) ? node.config.sms : {};
       return `${label} \u2014 text: ${quote(excerptText(optionalString(sms.text)))}`;
     }
     case "webhook": {
-      const webhook = isRecord2(node.config.webhook) ? node.config.webhook : {};
+      const webhook = isRecord3(node.config.webhook) ? node.config.webhook : {};
       const method = optionalString(webhook.method) ?? optionalString(webhook.type);
       return `${label} \u2014 ${method ? `${method.toUpperCase()} ` : ""}${optionalString(webhook.url) ?? "(no url)"}`;
     }
     case "publishSocialPost": {
-      const social = isRecord2(node.config.social) ? node.config.social : {};
+      const social = isRecord3(node.config.social) ? node.config.social : {};
       const targets = Array.isArray(social.targets) ? social.targets.join(", ") : "";
       return `${label}${optionalString(social.mode) ? ` (${social.mode})` : ""}${targets ? ` to ${targets}` : ""} \u2014 text: ${quote(excerptText(optionalString(social.text)))}`;
     }
     case "createCommunityPost": {
-      const post = isRecord2(node.config.communityPost) ? node.config.communityPost : {};
+      const post = isRecord3(node.config.communityPost) ? node.config.communityPost : {};
       const title = optionalString(post.title);
       return `${label} in channel ${optionalString(post.channelId) ?? "?"}${title ? ` \u2014 title: ${quote(title)}` : ""} \u2014 text: ${quote(excerptText(optionalString(post.text)))}`;
     }
     case "updateClientTags": {
-      const tags = isRecord2(node.config.clientTags) ? node.config.clientTags : {};
+      const tags = isRecord3(node.config.clientTags) ? node.config.clientTags : {};
       const ids = Array.isArray(tags.tagIds) ? tags.tagIds.join(", ") : "";
       return `${label} \u2014 ${optionalString(tags.mode) ?? "update"} ${ids || "(no tags)"}`;
     }
     case "setEmailSubscription": {
-      const sub = isRecord2(node.config.emailSubscription) ? node.config.emailSubscription : {};
+      const sub = isRecord3(node.config.emailSubscription) ? node.config.emailSubscription : {};
       return `${label} \u2014 ${optionalString(sub.status) ?? "?"}`;
     }
     case "openClientDeadline": {
-      const deadline = isRecord2(node.config.clientDeadline) ? node.config.clientDeadline : {};
+      const deadline = isRecord3(node.config.clientDeadline) ? node.config.clientDeadline : {};
       const amount = typeof deadline.amount === "number" ? String(deadline.amount) : "?";
       const endTime = optionalString(deadline.endTime);
       return `${label} \u2014 ${optionalString(deadline.key) ?? "?"} for ${amount} ${optionalString(deadline.unit) ?? "?"}${endTime ? `, closes at ${endTime}` : ""}`;
@@ -29686,7 +30041,7 @@ function describeEmail(node, templateNames) {
   return `subject: ${quote(email.subject)} \u2014 body: ${quote(excerptHtml(email.html))}`;
 }
 function describeCondition2(config) {
-  const rules = Array.isArray(config.rules) ? config.rules.filter(isRecord2) : [];
+  const rules = Array.isArray(config.rules) ? config.rules.filter(isRecord3) : [];
   if (rules.length === 0) return "(no rules)";
   return rules.map(describeRule).join(" AND ");
 }
@@ -29743,6 +30098,40 @@ function excerptText(text) {
 }
 
 // src/commands/workspace/index.ts
+function toLoginRow(profile) {
+  const { credentials } = profile;
+  return {
+    key: profile.key,
+    active: profile.active,
+    workspaceId: credentials.workspaceId ?? null,
+    workspaceName: credentials.workspaceName ?? null,
+    workspaceSlug: credentials.workspaceSlug ?? null,
+    kind: credentials.kind ?? "workspace",
+    userEmail: credentials.userEmail ?? null,
+    source: credentials.source ?? "manual",
+    expiresAt: credentials.expiresAt ?? null
+  };
+}
+function printLogins(profiles) {
+  if (profiles.length === 0) {
+    process.stdout.write("No stored logins. Run `zanfia login` (add --workspace <id|slug>).\n");
+    return;
+  }
+  for (const profile of profiles) {
+    const row = toLoginRow(profile);
+    const name = row.workspaceName ?? "(unnamed)";
+    const slug = row.workspaceSlug ? ` [${row.workspaceSlug}]` : "";
+    const member = row.kind === "member" ? " (community member)" : "";
+    const expires = row.expiresAt ? `, expires ${row.expiresAt.slice(0, 10)}` : "";
+    process.stdout.write(
+      `${row.active ? "*" : " "} ${name}${slug}${member} - ${row.workspaceId ?? row.key}${row.userEmail ? `, ${row.userEmail}` : ""}${expires}
+`
+    );
+  }
+  process.stdout.write(
+    "\n* = active. Switch: `zanfia workspace use <id|slug>`; one command: `--workspace <id|slug>`.\n"
+  );
+}
 function parseOnOff5(value, flag) {
   const match = ["on", "off"].find((v) => v === value);
   if (!match) throw new Error(`Invalid ${flag}: ${value} (expected on | off)`);
@@ -29784,8 +30173,23 @@ function printSettings(settings) {
 }
 function registerWorkspaceCommands(program2) {
   const workspace2 = program2.command("workspace").description(
-    'Workspace-level settings: the name, the scheduling timezone (workflow "wait until" steps and other workspace-scoped scheduling) and the video transcription defaults'
+    "Workspace-level settings (the name, the scheduling timezone and the video transcription defaults) and the workspace logins stored on this device (list, use)"
   );
+  workspace2.command("list").description("List the workspace logins stored on this device (* = active)").action((_options, command) => {
+    const flags = getGlobalFlags(command);
+    const profiles = listStoredProfiles();
+    emit(flags, profiles.map(toLoginRow), () => printLogins(profiles));
+  });
+  workspace2.command("use").description("Make another stored workspace login the active one (no new login)").argument("<id|slug>", "workspace id, site slug or name of a stored login").action((ref, _options, command) => {
+    const flags = getGlobalFlags(command);
+    const profile = useStoredProfile(ref);
+    emit(flags, toLoginRow(profile), () => {
+      process.stdout.write(
+        `Active workspace: ${profile.credentials.workspaceName ?? "?"} (${profile.credentials.workspaceId ?? profile.key})
+`
+      );
+    });
+  });
   workspace2.command("get", { isDefault: true }).description("Show the workspace settings").action(async (_options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -29882,8 +30286,8 @@ function applyShortHelp(program2) {
 
 // src/program.ts
 function resolveCliVersion() {
-  if ("0.4.0".length > 0) {
-    return "0.4.0";
+  if ("0.6.4".length > 0) {
+    return "0.6.4";
   }
   try {
     const raw = readFileSync28(new URL("../package.json", import.meta.url), "utf8");
@@ -29924,7 +30328,7 @@ Signing in \u2014 two roles, two consent pages:
   registerLoginCommand(program2);
   registerRegisterCommand(program2);
   registerJoinCommand(program2);
-  registerLogoutCommand(program2, clearCredentials);
+  registerLogoutCommand(program2);
   registerAuthCommands(program2);
   registerProductsCommands(program2);
   registerOffersCommands(program2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zanfia/cli",
-  "version": "0.4.0",
+  "version": "0.6.4",
   "private": false,
   "description": "Zanfia CLI — thin HTTP client over the Zanfia Public API",
   "type": "module",