@zanfia/cli 0.4.0 → 0.9.0

package/dist/index.js

@@ -5249,9 +5249,9 @@ var require_lodash7 = __commonJS({
   }
 });
 
-// ../../node_modules/combine-errors/node_modules/lodash.uniqby/index.js
+// ../../node_modules/lodash.uniqby/index.js
 var require_lodash8 = __commonJS({
-  "../../node_modules/combine-errors/node_modules/lodash.uniqby/index.js"(exports, module) {
+  "../../node_modules/lodash.uniqby/index.js"(exports, module) {
     "use strict";
     var baseIteratee = require_lodash4();
     var baseUniq = require_lodash7();
@@ -6907,8 +6907,15 @@ import { readFileSync as readFileSync28 } from "fs";
 import { mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
 import { homedir } from "os";
 import { dirname, join } from "path";
-var CONFIG_DIR = join(homedir(), ".config", "zanfia");
-var CREDENTIALS_FILE = join(CONFIG_DIR, "credentials.json");
+var CREDENTIALS_STORE_VERSION = 2;
+var MEMBER_PROFILE_PREFIX = "member:";
+var FALLBACK_PROFILE_KEY = "default";
+function configDir() {
+  return process.env.ZANFIA_CONFIG_DIR || join(homedir(), ".config", "zanfia");
+}
+function credentialsFilePath() {
+  return join(configDir(), "credentials.json");
+}
 var orUndefined = (value) => value.length > 0 ? value : void 0;
 var backendDefaults = {
   apiUrl: true ? orUndefined("https://api.zanfia.com") : void 0,
@@ -6929,24 +6936,110 @@ function resolvePlatformUrl() {
   const raw = process.env.ZANFIA_PLATFORM_URL || backendDefaults.platformUrl || "https://zanfia.co";
   return raw.replace(/\/+$/, "");
 }
-function readCredentials() {
-  try {
-    const raw = readFileSync(CREDENTIALS_FILE, "utf8");
-    const parsed = JSON.parse(raw);
-    if (parsed !== null && typeof parsed === "object" && "apiKey" in parsed && typeof parsed.apiKey === "string") {
-      return parsed;
+var isRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var isStoredCredentials = (value) => isRecord(value) && typeof value.apiKey === "string";
+var emptyStore = () => ({
+  version: CREDENTIALS_STORE_VERSION,
+  active: null,
+  profiles: {}
+});
+function profileKeyFor(credentials) {
+  const claims = decodeTokenClaims(credentials.apiKey);
+  const kind = credentials.kind ?? claims.kind;
+  const base = credentials.workspaceId ?? claims.workspaceId ?? FALLBACK_PROFILE_KEY;
+  return kind === "member" ? `${MEMBER_PROFILE_PREFIX}${base}` : base;
+}
+function parseCredentialsStore(raw) {
+  if (isStoredCredentials(raw)) {
+    const key = profileKeyFor(raw);
+    return { version: CREDENTIALS_STORE_VERSION, active: key, profiles: { [key]: raw } };
+  }
+  if (isRecord(raw) && isRecord(raw.profiles)) {
+    const profiles = {};
+    for (const [key, value] of Object.entries(raw.profiles)) {
+      if (isStoredCredentials(value)) profiles[key] = value;
     }
-    return null;
+    const keys = Object.keys(profiles);
+    const active = typeof raw.active === "string" && raw.active in profiles ? raw.active : keys[0] ?? null;
+    return { version: CREDENTIALS_STORE_VERSION, active, profiles };
+  }
+  return emptyStore();
+}
+function readCredentialsStore() {
+  try {
+    return parseCredentialsStore(JSON.parse(readFileSync(credentialsFilePath(), "utf8")));
   } catch {
-    return null;
+    return emptyStore();
   }
 }
+function writeCredentialsStore(store) {
+  const path2 = credentialsFilePath();
+  mkdirSync(dirname(path2), { recursive: true, mode: 448 });
+  writeFileSync(path2, JSON.stringify(store, null, 2), { mode: 384 });
+  return path2;
+}
+function readCredentials() {
+  const store = readCredentialsStore();
+  return store.active ? store.profiles[store.active] ?? null : null;
+}
 function writeCredentials(credentials) {
-  mkdirSync(dirname(CREDENTIALS_FILE), { recursive: true, mode: 448 });
-  writeFileSync(CREDENTIALS_FILE, JSON.stringify(credentials, null, 2), {
-    mode: 384
+  const store = readCredentialsStore();
+  const key = profileKeyFor(credentials);
+  store.profiles[key] = credentials;
+  store.active = key;
+  return writeCredentialsStore(store);
+}
+function listStoredProfiles() {
+  const store = readCredentialsStore();
+  return Object.entries(store.profiles).map(([key, credentials]) => ({ key, credentials, active: key === store.active })).sort((a, b) => {
+    if (a.active !== b.active) return a.active ? -1 : 1;
+    return (a.credentials.workspaceName ?? a.key).localeCompare(
+      b.credentials.workspaceName ?? b.key
+    );
   });
-  return CREDENTIALS_FILE;
+}
+function findStoredProfile(store, ref) {
+  const wanted = ref.trim().toLowerCase();
+  if (!wanted) return null;
+  const match = Object.entries(store.profiles).find(
+    ([key, credentials]) => [key, credentials.workspaceId, credentials.workspaceSlug, credentials.workspaceName].some(
+      (candidate) => typeof candidate === "string" && candidate.toLowerCase() === wanted
+    )
+  );
+  return match ? { key: match[0], credentials: match[1], active: match[0] === store.active } : null;
+}
+var StoredWorkspaceNotFoundError = class extends Error {
+  constructor(ref, available) {
+    super(
+      `No stored login for workspace "${ref}".` + (available.length > 0 ? ` Stored: ${available.join(", ")}.` : "") + ` Log in to it with: zanfia login --workspace ${ref}`
+    );
+    this.name = "StoredWorkspaceNotFoundError";
+  }
+};
+var profileLabel = (profile) => profile.credentials.workspaceSlug ?? profile.credentials.workspaceId ?? profile.key;
+function useStoredProfile(ref) {
+  const store = readCredentialsStore();
+  const profile = findStoredProfile(store, ref);
+  if (!profile) {
+    throw new StoredWorkspaceNotFoundError(
+      ref,
+      Object.entries(store.profiles).map(([key, credentials]) => profileLabel({ key, credentials }))
+    );
+  }
+  store.active = profile.key;
+  writeCredentialsStore(store);
+  return { ...profile, active: true };
+}
+function apiKeyForStoredWorkspace(ref) {
+  const store = readCredentialsStore();
+  const profile = findStoredProfile(store, ref);
+  if (!profile) {
+    throw new StoredWorkspaceNotFoundError(
+      ref,
+      Object.entries(store.profiles).map(([key, credentials]) => profileLabel({ key, credentials }))
+    );
+  }
+  return profile.credentials.apiKey;
 }
 function resolveApiKey(explicit) {
   if (explicit) return explicit;
@@ -6995,15 +7088,19 @@ function isMockMode() {
   }
   return resolveApiUrl() === null;
 }
-function clearCredentials() {
-  try {
-    rmSync(CREDENTIALS_FILE, { force: true });
-    return true;
-  } catch {
-    return false;
+function removeStoredLogin(options = {}) {
+  const store = readCredentialsStore();
+  const removed = store.active ? store.profiles[store.active] ?? null : null;
+  if (options.all || Object.keys(store.profiles).length <= 1) {
+    rmSync(credentialsFilePath(), { force: true });
+    return { removed, nowActive: null };
   }
+  if (store.active) delete store.profiles[store.active];
+  const [nextKey] = Object.entries(store.profiles).sort(([, a], [, b]) => b.savedAt.localeCompare(a.savedAt)).map(([key]) => key);
+  store.active = nextKey ?? null;
+  writeCredentialsStore(store);
+  return { removed, nowActive: nextKey ? store.profiles[nextKey] ?? null : null };
 }
-var credentialsPath = CREDENTIALS_FILE;
 
 // src/utils/errors.ts
 var ApiError = class extends Error {
@@ -7671,6 +7768,9 @@ function createMockClient() {
       if (!result) throw new ApiError(404, `Product ${id} not found`);
       return result;
     },
+    async deleteProduct() {
+      throw new ApiError(501, "product delete is not available in mock mode");
+    },
     async setProductStatus() {
       throw new ApiError(501, "product status changes are not available in mock mode");
     },
@@ -8343,6 +8443,9 @@ function createMockClient() {
     async cancelEmailCampaign() {
       throw new ApiError(501, "email campaigns are not available in mock mode");
     },
+    async rescheduleEmailCampaign() {
+      throw new ApiError(501, "email campaigns are not available in mock mode");
+    },
     async sendEmailCampaignTest() {
       throw new ApiError(501, "email campaigns are not available in mock mode");
     },
@@ -8514,6 +8617,9 @@ function createMockClient() {
     async removeDownloadFile() {
       throw new ApiError(501, "downloads content is not available in mock mode");
     },
+    async renameDownloadFile() {
+      throw new ApiError(501, "downloads content is not available in mock mode");
+    },
     async reorderDownloadFiles() {
       throw new ApiError(501, "downloads content is not available in mock mode");
     },
@@ -9045,6 +9151,7 @@ function createHttpClient(config) {
     createProduct: (input) => request("POST", "/products", input),
     updateProduct: (id, input) => request("PATCH", `/products/${encodeURIComponent(id)}`, input),
     archiveProduct: (id) => request("POST", `/products/${encodeURIComponent(id)}/archive`),
+    deleteProduct: (id) => request("DELETE", `/products/${encodeURIComponent(id)}`),
     setProductStatus: (id, status) => request("POST", `/products/${encodeURIComponent(id)}/status`, { status }),
     listProductPrices: (productId) => request("GET", `/products/${encodeURIComponent(productId)}/prices`),
     createProductPrice: (productId, input) => request("POST", `/products/${encodeURIComponent(productId)}/prices`, input),
@@ -9123,6 +9230,8 @@ function createHttpClient(config) {
       if (options?.limit !== void 0) params.set("limit", String(options.limit));
       if (options?.cursor) params.set("cursor", options.cursor);
       if (options?.products) params.set("products", options.products);
+      if (options?.createdFrom) params.set("createdFrom", options.createdFrom);
+      if (options?.createdTo) params.set("createdTo", options.createdTo);
       const qs = params.toString();
       return request("GET", `/clients${qs ? `?${qs}` : ""}`);
     },
@@ -9538,6 +9647,7 @@ function createHttpClient(config) {
       scheduledAt !== void 0 ? { scheduledAt } : {}
     ),
     cancelEmailCampaign: (id) => request("POST", `/campaigns/${encodeURIComponent(id)}/cancel`),
+    rescheduleEmailCampaign: (id, scheduledAt) => request("POST", `/campaigns/${encodeURIComponent(id)}/reschedule`, { scheduledAt }),
     sendEmailCampaignTest: (id, recipients) => request(
       "POST",
       `/campaigns/${encodeURIComponent(id)}/test-sends`,
@@ -9669,6 +9779,11 @@ function createHttpClient(config) {
       "DELETE",
       `/products/${encodeURIComponent(productId)}/downloads/files/${encodeURIComponent(uid)}`
     ),
+    renameDownloadFile: (productId, uid, name) => request(
+      "PATCH",
+      `/products/${encodeURIComponent(productId)}/downloads/files/${encodeURIComponent(uid)}`,
+      { name }
+    ),
     reorderDownloadFiles: (productId, uids) => request("POST", `/products/${encodeURIComponent(productId)}/downloads/files/reorder`, {
       uids
     }),
@@ -10026,6 +10141,22 @@ function parseWorkflowKind(value) {
   }
   return kind;
 }
+var STOREFRONT_VISIBILITIES = [
+  "public",
+  "unlisted",
+  "private"
+];
+function parseStorefrontVisibility(value) {
+  const visibility = STOREFRONT_VISIBILITIES.find(
+    (candidate) => candidate === value.trim().toLowerCase()
+  );
+  if (visibility === void 0) {
+    throw new Error(
+      `Invalid --visibility: ${value} (expected one of: ${STOREFRONT_VISIBILITIES.join(", ")})`
+    );
+  }
+  return visibility;
+}
 function parseCommaList(flag) {
   return (value) => {
     const items = [
@@ -10065,6 +10196,8 @@ function requireConfirm(confirm, what) {
 var OUTPUT_FORMAT_JSON = "json";
 var API_KEY_FLAG = "--api-key <key>";
 var API_KEY_DESCRIPTION = "override stored API key for this invocation";
+var WORKSPACE_FLAG = "--workspace <id|slug>";
+var WORKSPACE_DESCRIPTION = "use the stored login of this workspace for this invocation (see `workspace list`)";
 var VERBOSE_FLAG = "--verbose";
 var VERBOSE_DESCRIPTION = "log request/response debug info";
 var JSON_FLAG = "--json";
@@ -10084,6 +10217,7 @@ function registerOnCommand(command) {
     command.enablePositionalOptions();
   }
   addOptionIfMissing(command, new Option(API_KEY_FLAG, API_KEY_DESCRIPTION).hideHelp());
+  addOptionIfMissing(command, new Option(WORKSPACE_FLAG, WORKSPACE_DESCRIPTION).hideHelp());
   addOptionIfMissing(command, new Option(VERBOSE_FLAG, VERBOSE_DESCRIPTION).hideHelp());
   addOptionIfMissing(
     command,
@@ -10095,13 +10229,14 @@ function registerOnCommand(command) {
 function applyGlobalOptions(program2) {
   program2.enablePositionalOptions();
   program2.option(API_KEY_FLAG, API_KEY_DESCRIPTION);
+  program2.option(WORKSPACE_FLAG, WORKSPACE_DESCRIPTION);
   program2.option(JSON_FLAG, JSON_DESCRIPTION);
   program2.option(VERBOSE_FLAG, VERBOSE_DESCRIPTION);
   for (const sub of program2.commands) registerOnCommand(sub);
 }
 
 // src/utils/output.ts
-function isRecord(value) {
+function isRecord2(value) {
   return value !== null && typeof value === "object";
 }
 function getGlobalFlags(command) {
@@ -10112,11 +10247,15 @@ function getGlobalFlags(command) {
   const flags = {};
   for (const node of chain) {
     const raw = node.opts();
-    if (!isRecord(raw)) continue;
+    if (!isRecord2(raw)) continue;
     if (typeof raw.apiKey === "string") flags.apiKey = raw.apiKey;
+    if (typeof raw.workspace === "string") flags.workspace = raw.workspace;
     if (raw.verbose === true) flags.verbose = true;
     if (raw.json === true || raw.output === OUTPUT_FORMAT_JSON) flags.json = true;
   }
+  if (flags.workspace && !flags.apiKey && !process.env.ZANFIA_API_KEY) {
+    flags.apiKey = apiKeyForStoredWorkspace(flags.workspace);
+  }
   return flags;
 }
 function emit(flags, data, humanRenderer) {
@@ -10132,10 +10271,10 @@ function printJson(data) {
 `);
 }
 function tableRowsOf(result, key) {
-  if (!isRecord(result)) return [];
+  if (!isRecord2(result)) return [];
   const rows = result[key];
   if (!Array.isArray(rows)) return [];
-  return rows.filter(isRecord);
+  return rows.filter(isRecord2);
 }
 function printTable(rows, columns) {
   if (rows.length === 0) {
@@ -10185,11 +10324,11 @@ var listCertificateTemplatesColumns = ["id", "name", "version", "isDefault", "up
 function registerCertificatesCommands(program2) {
   const certificates = program2.command("certificates");
   certificates.description(
-    "Course-completion certificates \u2014 issue for course clients, revoke/reinstate, resend the email, and manage designer templates (`certificates templates \u2026`)"
+    "Course-completion and event-participation certificates \u2014 issue for course or event clients, revoke/reinstate, resend the email, and manage designer templates (`certificates templates \u2026`)"
   );
   certificates.command("list").summary("List certificates").description(
-    "Issued course-completion certificates of the workspace, newest first, optionally filtered to one course product (`productId`); `limit` caps the rows (service default applies). Each row is the credential: public `certificateId` (`cert_\u2026`, the id every certificate write takes), recipient name/email, course and issuer names, completion/issued dates, `issuedBy` (manual vs automatic), template id/version, PDF and verification URLs, `status` (active/revoked), `expiresAt` and delivery/engagement signals (email status, views, downloads, LinkedIn add). Also the polling endpoint after issue-certificates \u2014 a newly enqueued client shows up here once its PDF has been rendered."
-  ).option("--product <value>", "Course product id \u2014 omit for all courses.").option(
+    "Issued certificates of the workspace (course completion and event participation), newest first, optionally filtered to one product (`productId`); `limit` caps the rows (service default applies). Each row is the credential: public `certificateId` (`cert_\u2026`, the id every certificate write takes), `productType` (`course` / `event`), recipient name/email, product (`courseName`) and issuer names, completion/issued dates, `issuedBy` (manual vs automatic), template id/version, PDF and verification URLs, `status` (active/revoked), `expiresAt` and delivery/engagement signals (email status, views, downloads, LinkedIn add). Also the polling endpoint after issue-certificates \u2014 a newly enqueued client shows up here once its PDF has been rendered."
+  ).option("--product <value>", "Course or event product id \u2014 omit for all products.").option(
     "--limit <n>",
     "Max rows, newest first (max 500; the service default applies when omitted).",
     parseNumberOption("--limit", NumberFormat.Integer)
@@ -10206,17 +10345,17 @@ function registerCertificatesCommands(program2) {
     emit(flags, result ?? {}, () => printTable(rows, listCertificatesColumns));
   });
   certificates.command("issue").summary("Issue certificates (async)").description(
-    'Issues course-completion certificates to the listed clients of ONE course product. The call validates the batch (404 unknown product or `templateId`, 400 when the product is not a course), skips clients who already hold a certificate for it (one certificate per client per course, ever) and enqueues one issuance task per remaining client \u2014 PDF rendering and the "certificate issued" email happen asynchronously, so the response is 202 with `enqueued` / `skippedExistingCertificate` counts, not the certificates. Poll list-certificates (`productId` filter) a little later for the issued rows. A single issuance is this call with one `clientId`. With `onlyCompleted: true` a client only gets a certificate if their course progress is completed (checked per client at issuance time). `clientIds` is capped at 1000 and de-duplicated. Every issuance EMAILS the student \u2014 the emails cannot be recalled.'
-  ).argument("<productId>", "Course product id (must be a course).").requiredOption(
+    'Issues certificates to the listed clients of ONE product: a course (completion certificate) or an event \u2014 webinar, workshop, also one held outside Zanfia (participation certificate, "for taking part in", no attendance check). The call validates the batch (404 unknown product or `templateId`, 400 when the product is neither a course nor an event), skips clients who already hold a certificate for it (one certificate per client per product, ever) and enqueues one issuance task per remaining client \u2014 PDF rendering and the "certificate issued" email happen asynchronously, so the response is 202 with `enqueued` / `skippedExistingCertificate` counts, not the certificates. Poll list-certificates (`productId` filter) a little later for the issued rows. A single issuance is this call with one `clientId`. With `onlyCompleted: true` a client only gets a certificate if their course progress is completed (checked per client at issuance time; courses only, 400 for an event). `clientIds` is capped at 1000 and de-duplicated. Every issuance EMAILS the student \u2014 the emails cannot be recalled.'
+  ).argument("<productId>", "Course or event product id (other product types answer 400).").requiredOption(
     "--client <a,b,...>",
     "Workspace client ids; one id = single issuance. Max 1000, de-duplicated.",
     parseCommaList("--client")
   ).option(
     "--only-completed",
-    "Skip clients who have not completed the course (checked per client at issuance time). Default false = issue to everyone listed."
+    "Course products only (400 for an event): skip clients who have not completed the course (checked per client at issuance time). Default false = issue to everyone listed."
   ).option("--no-only-completed", "Send `onlyCompleted: false` explicitly.").option(
     "--template <value>",
-    "Explicit template id; omitted = the course template, else the workspace default."
+    "Explicit template id; omitted = the product template, else the workspace default."
   ).option(
     "--reissue-revoked",
     "Re-issue clients whose current certificate is REVOKED (new document in the current template, new number and verification link, the revoked one stays revoked). ACTIVE certificates are still skipped. Default false = any existing certificate skips the client."
@@ -10454,7 +10593,10 @@ function registerBlogCommands(program2) {
   ).option("--content <value>", "The body as Markdown (headings, lists, links, images by URL).").option(
     "--excerpt <value>",
     "Short plain-text summary (list, RSS, meta description); derived from the body on publish when empty."
-  ).option("--cover <value>", "Cover image URL (Media Library).").option("--tags <a,b,...>", "Lowercase labels, at most 10.", parseCommaList("--tags")).option("--seo <json|file>", "seo", parseJsonObjectFileOrInline("--seo")).option("--publish", "Publish right away (needs a non-empty body); default false = draft.").option("--no-publish", "Send `publish: false` explicitly.").action(async (options, command) => {
+  ).option("--cover <value>", "Cover image URL (Media Library).").option("--tags <a,b,...>", "Lowercase labels, at most 10.", parseCommaList("--tags")).option("--seo <json|file>", "seo", parseJsonObjectFileOrInline("--seo")).option("--publish", "Publish right away (needs a non-empty body); default false = draft.").option("--no-publish", "Send `publish: false` explicitly.").option(
+    "--published-at <value>",
+    "The post's date, ISO 8601 date (2025-10-16) or date-time, not in the future - e.g. the original date of an imported post. Omitted = the moment of the first publication."
+  ).action(async (options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const params = {};
@@ -10466,7 +10608,8 @@ function registerBlogCommands(program2) {
       coverImageUrl: options.cover,
       tags: options.tags,
       seo: options.seo,
-      publish: options.publish
+      publish: options.publish,
+      publishedAt: options.publishedAt
     };
     const result = await client.call("POST", "/blog-posts", params, void 0, payload);
     emit(flags, result ?? {}, () => printJson(result ?? {}));
@@ -10494,6 +10637,9 @@ function registerBlogCommands(program2) {
     "--seo <json|file>",
     "Replaces the whole SEO section.",
     parseJsonObjectFileOrInline("--seo")
+  ).option(
+    "--published-at <value>",
+    "The post's date (ISO 8601, not in the future); null clears it on a draft - a published post keeps one."
   ).action(async (id, options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -10507,7 +10653,8 @@ function registerBlogCommands(program2) {
       excerpt: options.excerpt,
       coverImageUrl: options.cover,
       tags: options.tags,
-      seo: options.seo
+      seo: options.seo,
+      publishedAt: options.publishedAt
     };
     const result = await client.call("PATCH", "/blog-posts/:postId", params, void 0, payload);
     emit(flags, result ?? {}, () => printJson(result ?? {}));
@@ -11158,16 +11305,93 @@ More ads available \u2014 re-run with --after ${result.after}
 }
 
 // src/commands/auth/index.ts
+function keySource(flags, rawApiKey) {
+  if (typeof rawApiKey === "string") return "--api-key";
+  if (process.env.ZANFIA_API_KEY) return "$ZANFIA_API_KEY";
+  if (flags.workspace) return `stored login of --workspace ${flags.workspace}`;
+  return "active stored login";
+}
+async function runWhoami(command) {
+  const flags = getGlobalFlags(command);
+  const rawApiKey = command.optsWithGlobals().apiKey;
+  const logins = listStoredProfiles().length;
+  const apiKey = resolveApiKey(flags.apiKey);
+  if (decodeTokenKind(apiKey) === "member") {
+    const stored = readCredentials();
+    const claims = decodeTokenClaims(apiKey);
+    const workspaceId = stored?.workspaceId ?? claims.workspaceId ?? "?";
+    const info2 = {
+      role: "member",
+      workspaceId,
+      workspaceName: stored?.workspaceName ?? null,
+      userEmail: stored?.userEmail ?? null,
+      uid: claims.subject ?? null,
+      scopes: ["communities:read", "communities:write"],
+      communityApiUrl: resolveCommunityApiUrl()
+    };
+    emit(flags, info2, () => {
+      process.stdout.write(`Role: community member
+`);
+      process.stdout.write(
+        `Workspace: ${info2.workspaceName ?? "(unknown)"} (${info2.workspaceId})
+`
+      );
+      if (info2.userEmail) process.stdout.write(`User: ${info2.userEmail}
+`);
+      else if (info2.uid) process.stdout.write(`User id: ${info2.uid}
+`);
+      process.stdout.write(`Scopes: ${info2.scopes.join(", ")}
+`);
+      process.stdout.write(`Community API: ${info2.communityApiUrl ?? "<unresolved>"}
+`);
+    });
+    return;
+  }
+  const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+  const info = await client.whoami();
+  const source = keySource(flags, rawApiKey);
+  emit(flags, { ...info, keySource: source, storedLogins: logins }, () => {
+    const modeTag = isMockMode() ? " (mock)" : "";
+    process.stdout.write(`Workspace: ${info.workspaceName}${modeTag}
+`);
+    process.stdout.write(`Workspace ID: ${info.workspaceId}
+`);
+    process.stdout.write(`User: ${info.userEmail}
+`);
+    process.stdout.write(`Scopes: ${info.scopes.join(", ")}
+`);
+    process.stdout.write(`Key: ${source}
+`);
+    if (logins > 1) {
+      process.stdout.write(
+        `Logins on this device: ${logins} (\`workspace list\`, switch with \`workspace use <id|slug>\`)
+`
+      );
+    }
+  });
+}
 function registerAuthCommands(program2) {
   const auth = program2.command("auth").description("Manage CLI authentication");
+  program2.command("whoami").description("Show the active workspace and identity (same as `auth whoami`)").action(async (_, command) => runWhoami(command));
   auth.command("status").description("Show what the CLI currently has stored (path, source, expiry, api URL).").action(() => {
     const stored = readCredentials();
     const apiKey = resolveApiKey(void 0);
     const apiUrl = resolveApiUrl();
     const envKey = process.env.ZANFIA_API_KEY ? "(from $ZANFIA_API_KEY)" : "";
     const envUrl = process.env.ZANFIA_API_URL ? "(from $ZANFIA_API_URL)" : "";
-    process.stdout.write(`Credentials file: ${credentialsPath}
+    const profiles = listStoredProfiles();
+    process.stdout.write(`Credentials file: ${credentialsFilePath()}
+`);
+    if (profiles.length > 1) {
+      process.stdout.write(`Stored logins: ${profiles.length} (active one below)
 `);
+      for (const profile of profiles) {
+        process.stdout.write(
+          `  ${profile.active ? "*" : " "} ${profile.credentials.workspaceName ?? "?"} (${profile.key})
+`
+        );
+      }
+    }
     if (!stored) {
       process.stdout.write(`  status: no credentials file found
 `);
@@ -11244,54 +11468,7 @@ Resolved by next call:
       );
     }
   });
-  auth.command("whoami").description("Show the authenticated identity (creator workspace, or community member)").action(async (_, command) => {
-    const flags = getGlobalFlags(command);
-    const apiKey = resolveApiKey(flags.apiKey);
-    if (decodeTokenKind(apiKey) === "member") {
-      const stored = readCredentials();
-      const claims = decodeTokenClaims(apiKey);
-      const workspaceId = stored?.workspaceId ?? claims.workspaceId ?? "?";
-      const info2 = {
-        role: "member",
-        workspaceId,
-        workspaceName: stored?.workspaceName ?? null,
-        userEmail: stored?.userEmail ?? null,
-        uid: claims.subject ?? null,
-        scopes: ["communities:read", "communities:write"],
-        communityApiUrl: resolveCommunityApiUrl()
-      };
-      emit(flags, info2, () => {
-        process.stdout.write(`Role: community member
-`);
-        process.stdout.write(
-          `Workspace: ${info2.workspaceName ?? "(unknown)"} (${info2.workspaceId})
-`
-        );
-        if (info2.userEmail) process.stdout.write(`User: ${info2.userEmail}
-`);
-        else if (info2.uid) process.stdout.write(`User id: ${info2.uid}
-`);
-        process.stdout.write(`Scopes: ${info2.scopes.join(", ")}
-`);
-        process.stdout.write(`Community API: ${info2.communityApiUrl ?? "<unresolved>"}
-`);
-      });
-      return;
-    }
-    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
-    const info = await client.whoami();
-    emit(flags, info, () => {
-      const modeTag = isMockMode() ? " (mock)" : "";
-      process.stdout.write(`Workspace: ${info.workspaceName}${modeTag}
-`);
-      process.stdout.write(`Workspace ID: ${info.workspaceId}
-`);
-      process.stdout.write(`User: ${info.userEmail}
-`);
-      process.stdout.write(`Scopes: ${info.scopes.join(", ")}
-`);
-    });
-  });
+  auth.command("whoami").description("Show the authenticated identity (creator workspace, or community member)").action(async (_, command) => runWhoami(command));
 }
 
 // src/commands/auth/login.ts
@@ -11490,25 +11667,54 @@ async function postJson(url, body) {
   }
   return JSON.parse(text);
 }
+function buildCreatorConsentParams(input) {
+  return {
+    redirect_uri: input.redirectUri,
+    state: input.state,
+    code_challenge: input.challenge,
+    code_challenge_method: "S256",
+    hostname: input.hostname,
+    client: "zanfia-cli",
+    ...input.workspace?.trim() ? { workspace: input.workspace.trim() } : null
+  };
+}
+function buildRegisterUrl(consentUrl, email) {
+  const consent = new URL(consentUrl);
+  const continuePath = `${consent.pathname}${consent.search}`;
+  const register = new URL("/auth/register", consent.origin);
+  register.searchParams.set("continue", continuePath);
+  register.searchParams.set("next", continuePath);
+  if (email) register.searchParams.set("email", email);
+  return register.toString();
+}
 async function runLogin(options) {
+  await runBrowserAuth(options, (consentUrl) => consentUrl);
+}
+async function runBrowserRegister(options) {
+  await runBrowserAuth(options, (consentUrl) => buildRegisterUrl(consentUrl, options.email));
+}
+async function runBrowserAuth(options, entryUrl) {
   const urls = resolveUrls(options.apiUrl);
   const state = randomBytes(32).toString("base64url");
   const { verifier, challenge } = generatePkce();
   const host = safeHostname();
   const server = await startLoopbackServer();
   const redirectUri = `http://127.0.0.1:${server.port}${CALLBACK_PATH}`;
-  const consentUrl = buildConsentUrl(urls.loginUrl, {
-    redirect_uri: redirectUri,
-    state,
-    code_challenge: challenge,
-    code_challenge_method: "S256",
-    hostname: host,
-    client: "zanfia-cli"
-  });
-  process.stdout.write(`Opening ${consentUrl}
+  const consentUrl = buildConsentUrl(
+    urls.loginUrl,
+    buildCreatorConsentParams({
+      redirectUri,
+      state,
+      challenge,
+      hostname: host,
+      workspace: options.workspace
+    })
+  );
+  const openUrl = entryUrl(consentUrl);
+  process.stdout.write(`Opening ${openUrl}
 `);
   process.stdout.write("Waiting for browser callback...\n\n");
-  const opened = await openBrowser(consentUrl);
+  const opened = await openBrowser(openUrl);
   if (!opened) {
     process.stdout.write("Could not open browser automatically \u2014 paste the URL above.\n\n");
   }
@@ -11532,14 +11738,24 @@ async function runLogin(options) {
       expiresAt: exchanged.expiresAt,
       userEmail: exchanged.userEmail,
       workspaceId: exchanged.workspaceId,
-      workspaceName: exchanged.workspaceName
+      workspaceName: exchanged.workspaceName,
+      workspaceSlug: exchanged.workspaceSlug ?? null
     });
     process.stdout.write(`Logged in as ${exchanged.userEmail}.
 `);
-    process.stdout.write(`Workspace: ${exchanged.workspaceName} (${exchanged.workspaceId})
-`);
+    process.stdout.write(
+      `Workspace: ${exchanged.workspaceName} (${exchanged.workspaceId}) - now active
+`
+    );
     process.stdout.write(`Credentials stored at ${stored}
 `);
+    const logins = listStoredProfiles().length;
+    if (logins > 1) {
+      process.stdout.write(
+        `Logins on this device: ${logins}. Switch with \`zanfia workspace use <id|slug>\` (see \`zanfia workspace list\`).
+`
+      );
+    }
     if (!urls.apiUrl) {
       process.stdout.write(
         "\nTip: ZANFIA_API_URL is not set. Pass --api-url <url> or export the env var so commands like `zanfia products list` know where to call.\n"
@@ -11652,6 +11868,9 @@ function registerLoginCommand(auth) {
   auth.command("login").description(
     "Open a browser to authorize the CLI via OAuth (pass --address to sign in as a community member)"
   ).option("--api-url <url>", "API URL to associate with the resulting token").option(
+    "--workspace <id|slug>",
+    "preselect this workspace on the consent page (you can still pick another there)"
+  ).option(
     "--address <url>",
     "sign in as a community member (Community API) against this creator platform URL"
   ).option("-v, --verbose", "show HTTP request details").addHelpText(
@@ -11660,9 +11879,13 @@ function registerLoginCommand(auth) {
 The two flows use different consent pages:
 
   Creator (workspace) login \u2014 full Workspace API:
-      login
+      login [--workspace <id|slug>]
     Opens the consent page in the Zanfia dashboard. Sign in with your
-    creator account and approve; the CLI gets a workspace token.
+    creator account, pick the workspace (Owner or Admin) and approve; the CLI
+    gets a token for that workspace. Each workspace keeps its own login on
+    this device: \`workspace list\` shows them, \`workspace use <id|slug>\`
+    switches without logging in again, and \`--workspace <id|slug>\` on any
+    command uses another stored login just for that command.
 
   Community member login \u2014 Community API only:
       login --address https://<creator-platform-url>
@@ -11686,14 +11909,27 @@ The two flows use different consent pages:
     await runLogin(options);
   });
 }
-function registerLogoutCommand(auth, clear) {
-  auth.command("logout").description("Forget the stored CLI credentials").action(() => {
-    const cleared = clear();
-    if (cleared) {
-      process.stdout.write(`Removed credentials at ${credentialsPath}.
-`);
-    } else {
+function registerLogoutCommand(auth) {
+  auth.command("logout").description(
+    "Forget the active stored login (--all forgets every workspace login on this device)"
+  ).option("--all", "remove every stored login").action((options) => {
+    const { removed, nowActive } = removeStoredLogin({ all: options.all });
+    if (!removed && !options.all) {
       process.stdout.write("No stored credentials to remove.\n");
+      return;
+    }
+    if (options.all) {
+      process.stdout.write("Removed every stored login.\n");
+      return;
+    }
+    const label = removed?.workspaceName ?? removed?.workspaceId ?? "the stored login";
+    process.stdout.write(`Logged out of ${label}.
+`);
+    if (nowActive) {
+      process.stdout.write(
+        `Active now: ${nowActive.workspaceName ?? "?"} (${nowActive.workspaceId ?? "?"})
+`
+      );
     }
   });
 }
@@ -11703,6 +11939,16 @@ import { createHash as createHash2, randomBytes as randomBytes2 } from "crypto";
 
 // src/utils/httpJson.ts
 import { hostname as hostname2 } from "os";
+var HttpJsonError = class extends Error {
+  status;
+  code;
+  constructor(message, status, code) {
+    super(message);
+    this.name = "HttpJsonError";
+    this.status = status;
+    this.code = code;
+  }
+};
 async function postJson2(label, url, body, options = {}) {
   if (options.verbose) process.stderr.write(`\u2192 POST ${url}
 `);
@@ -11718,8 +11964,10 @@ async function postJson2(label, url, body, options = {}) {
   });
   const text = await response.text();
   if (!response.ok) {
-    throw new Error(
-      `${label} failed (${response.status}): ${extractErrorMessage(text, response.statusText)}`
+    throw new HttpJsonError(
+      `${label} failed (${response.status}): ${extractErrorMessage(text, response.statusText)}`,
+      response.status,
+      extractErrorCode(text)
     );
   }
   return JSON.parse(text);
@@ -11734,6 +11982,14 @@ function extractErrorMessage(text, fallback) {
   }
   return text || fallback;
 }
+function extractErrorCode(text) {
+  try {
+    const parsed = JSON.parse(text);
+    return typeof parsed.code === "string" ? parsed.code : null;
+  } catch {
+    return null;
+  }
+}
 function safeHostname2() {
   try {
     const h = hostname2();
@@ -11790,6 +12046,7 @@ function promptHidden(question) {
 }
 
 // src/commands/auth/register.ts
+var BOT_CHECK_FAILED_CODE = "auth/bot-check-failed";
 var MAX_CODE_ATTEMPTS = 5;
 var MIN_PASSWORD_LENGTH = 8;
 var EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
@@ -11833,6 +12090,32 @@ async function runRegister(options) {
   if (!EMAIL_REGEX.test(email)) {
     throw new Error(`"${email}" does not look like a valid email address.`);
   }
+  const initiateBody = {
+    email,
+    lang,
+    accessCode: options.accessCode ?? null
+  };
+  try {
+    await postJson2(
+      "Sending verification code",
+      `${urls.usersUrl}/initiate-registration`,
+      initiateBody,
+      { verbose }
+    );
+  } catch (error) {
+    if (error instanceof HttpJsonError && error.code === BOT_CHECK_FAILED_CODE) {
+      process.stdout.write(
+        "\nNew Zanfia accounts finish signing up in the browser (a quick security check).\nOpening the signup page; the CLI logs in once you are done.\n\n"
+      );
+      await runBrowserRegister({ email, apiUrl: options.apiUrl, verbose });
+      return;
+    }
+    throw error;
+  }
+  process.stdout.write(`
+We sent a 6-digit code to ${email}. Check your inbox.
+
+`);
   const fullName = options.name ?? await promptLine("Full name: ");
   if (fullName.length < 3 || fullName.length > 100) {
     throw new Error("Full name must be 3-100 characters.");
@@ -11859,21 +12142,6 @@ async function runRegister(options) {
   } else if (password.length < MIN_PASSWORD_LENGTH) {
     throw new Error(`Password must be at least ${MIN_PASSWORD_LENGTH} characters.`);
   }
-  const initiateBody = {
-    email,
-    lang,
-    accessCode: options.accessCode ?? null
-  };
-  await postJson2(
-    "Sending verification code",
-    `${urls.usersUrl}/initiate-registration`,
-    initiateBody,
-    { verbose }
-  );
-  process.stdout.write(`
-We sent a 6-digit code to ${email}. Check your inbox.
-
-`);
   let verificationToken = null;
   for (let attempt = 1; attempt <= MAX_CODE_ATTEMPTS; attempt++) {
     const code = options.code ?? await promptLine("Verification code (or 'r' to resend): ");
@@ -11978,16 +12246,18 @@ Logged in as ${exchanged.userEmail}.
   }
 }
 function registerRegisterCommand(program2) {
-  program2.command("register").description("Create a new Zanfia creator account via an emailed code and log the CLI in").option("--email <email>", "account email (prompted when omitted)").option("--name <fullName>", "your full name (prompted when omitted)").option(
+  program2.command("register").description("Create a new Zanfia creator account and log the CLI in").option("--email <email>", "account email (prompted when omitted)").option("--name <fullName>", "your full name (prompted when omitted)").option(
     "--password <password>",
     "optional account password (min 8 chars); prefer the interactive prompt \u2014 flags leak into shell history"
   ).option("--lang <lang>", "account language (en|pl)", "en").option("--access-code <code>", "signup access code (only when signups are gated)").option("--code <code>", "email verification code (skips the interactive prompt)").option("--api-url <url>", "API URL to associate with the resulting token").option("-v, --verbose", "show HTTP request details").addHelpText(
     "after",
     `
-The same email-code registration as the Zanfia dashboard, entirely in the
-terminal: you get a 6-digit code by email, the account plus its personal
-workspace are created, and the CLI ends up logged in exactly as if you had
-run \`login\` \u2014 no browser needed.
+New accounts finish signing up in the browser: Zanfia runs a quick security
+check on the signup page, which a terminal cannot do. The CLI opens the
+signup page with your email filled in, and once the account exists it logs
+in exactly as if you had run \`login\`. Where the check does not apply, the
+whole flow stays in the terminal: a 6-digit code by email, then the account
+plus its personal workspace are created.
 
 Running it with an email that already has a creator account simply signs
 that account in.
@@ -12608,6 +12878,28 @@ function registerCampaignsCommands(program2) {
       const { stats } = result.campaign;
       process.stdout.write(
         `Cancelled campaign ${result.campaign.id} \u2014 ${stats.sent} recipient${stats.sent === 1 ? " was" : "s were"} already sent to before the cancel.
+`
+      );
+    });
+  });
+  campaigns.command("reschedule").description(
+    "Move a SCHEDULED campaign to a new send time (min 2 minutes, max 30 days out) \u2014 it stays scheduled and goes out only at the new time. Drafts: `campaigns send --at` instead."
+  ).argument("<id>", "campaign id (must be scheduled)").requiredOption(
+    "--at <isoTimestamp>",
+    "new send time (ISO with offset, e.g. 2026-10-15T09:00:00+02:00)"
+  ).action(async (id, options, command) => {
+    const flags = getGlobalFlags(command);
+    if (Number.isNaN(Date.parse(options.at))) {
+      throw new Error(
+        `Invalid --at timestamp: ${options.at} (expected ISO, e.g. 2026-10-15T09:00:00+02:00)`
+      );
+    }
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.rescheduleEmailCampaign(id, options.at);
+    emit(flags, result, () => {
+      const { campaign } = result;
+      process.stdout.write(
+        `Campaign ${campaign.id} moved to ${campaign.scheduledAt} \u2014 still scheduled; stop it before then with \`campaigns cancel\`.
 `
       );
     });
@@ -12964,6 +13256,11 @@ function buildConsentInput(options) {
 import { readFileSync as readFileSync7, writeFileSync as writeFileSync2 } from "fs";
 
 // src/client/types.ts
+var GRANT_PAYMENT_METHODS = [
+  "bankTransfer",
+  "cash",
+  "other"
+];
 var AIImageAspectRatio = /* @__PURE__ */ ((AIImageAspectRatio2) => {
   AIImageAspectRatio2["Square"] = "1:1";
   AIImageAspectRatio2["Portrait"] = "4:5";
@@ -13492,6 +13789,40 @@ function registerClientTagsCommands(clients2) {
 var IMPORT_CHUNK_SIZE = 100;
 var SCHEDULER_UNAVAILABLE_STATUS = 503;
 var MAX_BULK_FILTERED_PRODUCTS = 10;
+function parseGrantPayment(options) {
+  const { paid, currency, paidAt, paymentMethod, paymentNote } = options;
+  if (paid === void 0) {
+    if (currency || paidAt || paymentMethod || paymentNote) {
+      throw new Error("--currency, --paid-at, --payment-method and --payment-note need --paid.");
+    }
+    return void 0;
+  }
+  if (!/^\d+([.,]\d{1,2})?$/.test(paid)) {
+    throw new Error(`Invalid --paid amount: ${paid} (expected e.g. 99 or 99.50)`);
+  }
+  const amountCents = Math.round(Number(paid.replace(",", ".")) * 100);
+  if (amountCents <= 0) {
+    throw new Error("--paid must be above 0.");
+  }
+  if (!currency) {
+    throw new Error("--paid needs --currency (pln, eur, usd or gbp).");
+  }
+  if (paidAt !== void 0 && Number.isNaN(Date.parse(paidAt))) {
+    throw new Error(`Invalid --paid-at date: ${paidAt} (expected ISO, e.g. 2026-10-14)`);
+  }
+  if (paymentMethod !== void 0 && !GRANT_PAYMENT_METHODS.includes(paymentMethod)) {
+    throw new Error(
+      `Invalid --payment-method: ${paymentMethod} (one of ${GRANT_PAYMENT_METHODS.join(", ")})`
+    );
+  }
+  return {
+    amountCents,
+    currency: currency.toLowerCase(),
+    ...paidAt !== void 0 ? { paidAt: new Date(paidAt).toISOString() } : {},
+    ...paymentMethod !== void 0 ? { method: paymentMethod } : {},
+    ...paymentNote !== void 0 ? { note: paymentNote } : {}
+  };
+}
 function requireConfirm4(confirm, what) {
   if (!confirm) {
     throw new Error(`Refusing to ${what} without --confirm. Re-run with --confirm to proceed.`);
@@ -13756,7 +14087,15 @@ function printMergePreview(preview) {
 }
 function registerClientsCommands(program2) {
   const clients2 = program2.command("clients").description("Manage workspace clients (customers)");
-  clients2.command("list").description("List clients (newest first), with optional search and product filter").option("--search <query>", "match email / first name / last name").option("--limit <n>", "page size (max 100)").option("--cursor <cursor>", "keyset cursor from a previous page").option("--with-products", "only clients with active product access").option("--without-products", "only clients with no product access").action(
+  clients2.command("list").description(
+    "List clients (newest first), with optional search, product and date-added filters"
+  ).option("--search <query>", "match email / first name / last name").option("--limit <n>", "page size (max 100)").option("--cursor <cursor>", "keyset cursor from a previous page").option("--with-products", "only clients with active product access").option("--without-products", "only clients with no product access").option(
+    "--created-from <date>",
+    "only clients added on or after this date (YYYY-MM-DD or ISO 8601 date-time)"
+  ).option(
+    "--created-to <date>",
+    "only clients added on or before this date (YYYY-MM-DD keeps the whole day)"
+  ).action(
     async (options, command) => {
       const flags = getGlobalFlags(command);
       if (options.withProducts && options.withoutProducts) {
@@ -13767,7 +14106,9 @@ function registerClientsCommands(program2) {
         search: options.search,
         limit: options.limit !== void 0 ? parsePositiveInt4(options.limit, "--limit") : void 0,
         cursor: options.cursor,
-        products: options.withProducts ? "has" : options.withoutProducts ? "no" : void 0
+        products: options.withProducts ? "has" : options.withoutProducts ? "no" : void 0,
+        createdFrom: options.createdFrom,
+        createdTo: options.createdTo
       });
       emit(flags, page, () => {
         printTable(
@@ -13969,7 +14310,13 @@ Next page: --cursor ${page.nextCursor}
       });
     }
   );
-  clients2.command("grant").description("Grant a client access to a product without a purchase").argument("<productId>", "product id").requiredOption("--email <email>", "client email").option("--first-name <name>", "client first name").option("--last-name <name>", "client last name").option("--price <priceId>", "enroll under an existing price without billing").option("--plan <planId>", "plan to enroll in (multi-plan products)").option("--until <date>", "ISO date the access ends (free grants only); omit for lifetime").option("--welcome-email", "send the welcome/sign-in email (default: grant silently)").action(
+  clients2.command("grant").description("Grant a client access to a product without a purchase").argument("<productId>", "product id").requiredOption("--email <email>", "client email").option("--first-name <name>", "client first name").option("--last-name <name>", "client last name").option("--price <priceId>", "enroll under an existing price without billing").option("--plan <planId>", "plan to enroll in (multi-plan products)").option("--until <date>", "ISO date the access ends (free grants only); omit for lifetime").option("--welcome-email", "send the welcome/sign-in email (default: grant silently)").option(
+    "--run-purchase-automations",
+    "also run the product's purchase automations, marked as a grant (default: off)"
+  ).option(
+    "--paid <amount>",
+    "the client already paid outside Zanfia (e.g. 99.50): records one paid order"
+  ).option("--currency <code>", "currency of --paid: pln, eur, usd or gbp").option("--paid-at <date>", "ISO date the client paid (default: now; not in the future)").option("--payment-method <method>", `how they paid: ${GRANT_PAYMENT_METHODS.join(" | ")}`).option("--payment-note <text>", "note on the payment, e.g. the proforma number (max 300)").action(
     async (productId, options, command) => {
       const flags = getGlobalFlags(command);
       if (options.until !== void 0 && Number.isNaN(Date.parse(options.until))) {
@@ -13978,6 +14325,7 @@ Next page: --cursor ${page.nextCursor}
       if (options.until !== void 0 && options.price !== void 0) {
         throw new Error("--until applies to free grants only \u2014 omit --price.");
       }
+      const payment = parseGrantPayment(options);
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
       const result = await client.grantClientAccess(productId, {
         email: options.email,
@@ -13986,13 +14334,14 @@ Next page: --cursor ${page.nextCursor}
         priceId: options.price,
         planId: options.plan,
         accessUntil: options.until,
-        sendWelcomeEmail: options.welcomeEmail
+        sendWelcomeEmail: options.welcomeEmail,
+        runPurchaseAutomations: options.runPurchaseAutomations,
+        ...payment ? { payment } : {}
       });
       emit(flags, result, () => {
         const kind = result.isFree ? "free" : "paid";
         process.stdout.write(
-          `Granted ${options.email} ${kind} access to product ${productId}.
-`
+          `Granted ${options.email} ${kind} access to product ${productId}` + (payment ? " and recorded the payment as a paid order" : "") + ".\n"
         );
       });
     }
@@ -19297,9 +19646,14 @@ join again to refresh it.
 // src/commands/liveRooms/index.ts
 var minutes = (seconds) => `${Math.round(seconds / 60)} min`;
 var percent = (part, whole) => whole > 0 ? `${Math.round(part / whole * 100)}%` : "-";
+var WEEKDAYS = ["Mon", "Tue", "Wed", "Thu", "Fri", "Sat", "Sun"];
 function describeSchedule(room) {
   if (!room.schedule) return "fixed";
   const until = room.schedule.until ? ` until ${room.schedule.until}` : "";
+  if (room.schedule.kind === "daily") {
+    const days = room.schedule.weekdays ? room.schedule.weekdays.map((day) => WEEKDAYS[day - 1] ?? String(day)).join(", ") : "daily";
+    return `${days} at ${room.schedule.times.join(", ")} (${room.timezone})${until}`;
+  }
   return `every ${room.schedule.everyMinutes} min${until}`;
 }
 function registerLiveRoomsCommands(program2) {
@@ -19606,7 +19960,7 @@ var NoopUrlStorage = /* @__PURE__ */ (function() {
   }]);
 })();
 
-// ../../node_modules/tus-js-client/node_modules/js-base64/base64.mjs
+// ../../node_modules/js-base64/base64.mjs
 var version = "3.7.8";
 var VERSION = version;
 var _hasBuffer = typeof Buffer === "function";
@@ -24729,6 +25083,7 @@ var PAGE_INTENTS = [
 var SOURCE_SITE_MODES = ["rebuild", "inspired"];
 var EVENT_MODES2 = ["live", "on_demand"];
 var OPT_IN_MODES2 = ["single", "double"];
+var TRACKING_MODES = ["inherit", "selected", "none"];
 var SCHEDULER_UNAVAILABLE_STATUS3 = 503;
 function parseChoice5(value, allowed, flag) {
   const match = allowed.find((candidate) => candidate === value);
@@ -24865,6 +25220,11 @@ function registerPagesCommands(program2) {
 `);
       process.stdout.write(`  Cookie banner: ${page.hideCookieBanner ? "hidden" : "shown"}
 `);
+      const trackingIds = page.tracking?.integrationIds ?? [];
+      process.stdout.write(
+        `  Tracking: ${page.tracking?.mode ?? "inherit"}${trackingIds.length > 0 ? ` (${trackingIds.join(", ")})` : ""}
+`
+      );
     });
   });
   pages.command("create").description("Create a hosted page from an HTML file or inline HTML").requiredOption("--slug <slug>", "public URL slug (served at /page/<slug>)").requiredOption("--title <title>", "page title").option("--file <path>", "path to an .html file to host").option("--html <html>", "inline HTML body (alternative to --file)").option("--publish", "publish immediately instead of saving as draft").action(async (options, command) => {
@@ -24886,17 +25246,33 @@ function registerPagesCommands(program2) {
 `);
     });
   });
-  pages.command("update").description("Update a page (slug, title, HTML body, or cookie-banner visibility)").argument("<id>", "page id").option("--slug <slug>", "new slug").option("--title <title>", "new title").option("--file <path>", "path to a new .html file").option("--html <html>", "new inline HTML body").option("--cookie-banner", "show the workspace cookie banner on this page again").option(
+  pages.command("update").description(
+    "Update a page (slug, title, HTML body, cookie-banner visibility, or its tracking tools)"
+  ).argument("<id>", "page id").option("--slug <slug>", "new slug").option("--title <title>", "new title").option("--file <path>", "path to a new .html file").option("--html <html>", "new inline HTML body").option("--cookie-banner", "show the workspace cookie banner on this page again").option(
     "--no-cookie-banner",
     "hide the workspace cookie banner on this page (pixels still wait for consent given elsewhere)"
+  ).option(
+    "--tracking <mode>",
+    "tracking tools on this page: inherit (workspace defaults), selected (--tracking-integrations) or none"
+  ).option(
+    "--tracking-integrations <ids>",
+    "comma-separated tracking integration ids for --tracking selected (one per platform)"
   ).action(async (id, options, command) => {
     const flags = getGlobalFlags(command);
     const html = await resolveHtml2(options);
+    const trackingIds = options.trackingIntegrations?.split(",").map((value) => value.trim()).filter((value) => value.length > 0);
+    const trackingMode = options.tracking !== void 0 ? parseChoice5(options.tracking, TRACKING_MODES, "--tracking") : trackingIds !== void 0 ? "selected" : void 0;
     const input = {
       slug: options.slug,
       title: options.title,
       html,
-      ...options.cookieBanner !== void 0 ? { hideCookieBanner: !options.cookieBanner } : {}
+      ...options.cookieBanner !== void 0 ? { hideCookieBanner: !options.cookieBanner } : {},
+      ...trackingMode !== void 0 ? {
+        tracking: {
+          mode: trackingMode,
+          ...trackingIds !== void 0 ? { integrationIds: trackingIds } : {}
+        }
+      } : {}
     };
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const result = await client.updatePage(id, input);
@@ -25298,6 +25674,10 @@ function registerProductsCommands(program2) {
 `);
       process.stdout.write(`  Status: ${product.status}
 `);
+      if (product.storefrontVisibility) {
+        process.stdout.write(`  Visibility: ${product.storefrontVisibility}
+`);
+      }
       process.stdout.write(`  Clients: ${product.clientCount}
 `);
       if (product.description) {
@@ -25384,13 +25764,21 @@ function registerProductsCommands(program2) {
       });
     }
   );
-  products2.command("update").description("Update a product's name and/or description").argument("<id>", "product id").option("--name <name>", "new product name").option("--description <description>", "new product description").action(
+  products2.command("update").description("Update a product's name, description and/or storefront visibility").argument("<id>", "product id").option("--name <name>", "new product name").option("--description <description>", "new product description").option(
+    "--visibility <public|unlisted|private>",
+    "where buyers find it once published: public (store + product page), unlisted (product page by link only), private (checkout links only)",
+    parseStorefrontVisibility
+  ).action(
     async (id, options, command) => {
+      if (options.name === void 0 && options.description === void 0 && options.visibility === void 0) {
+        throw new Error("Nothing to update: pass --name, --description and/or --visibility.");
+      }
       const flags = getGlobalFlags(command);
       const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
       const result = await client.updateProduct(id, {
         name: options.name,
-        description: options.description
+        description: options.description,
+        storefrontVisibility: options.visibility
       });
       emit(flags, result, () => {
         process.stdout.write(`Updated product ${result.productId}
@@ -25407,6 +25795,26 @@ function registerProductsCommands(program2) {
 `);
     });
   });
+  products2.command("delete").description(
+    "Delete a product (soft-delete, like the dashboard): offers archived, customers lose access, subscriptions cancelled without refunds, data purged after 30 days. Requires --confirm."
+  ).argument("<id>", "product id").option("--confirm", "required \u2014 acknowledge that customers lose access and subscriptions end").action(async (id, options, command) => {
+    requireConfirm(options.confirm, `delete product ${id}`);
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.deleteProduct(id);
+    emit(flags, result, () => {
+      process.stdout.write(
+        `Deleted product ${result.productId}; data is purged after ${new Date(result.purgeAfter * 1e3).toISOString().slice(0, 10)}.
+`
+      );
+      if (result.activeGrants > 0) {
+        process.stdout.write(
+          `${result.activeGrants} customer(s) lost access; ${result.cancellableSubscriptions} subscription(s) are being cancelled (run ${result.runId ?? "n/a"}).
+`
+        );
+      }
+    });
+  });
   products2.command("publish").description("Publish a product (status \u2192 published; live for customers)").argument("<id>", "product id").action(async (id, _, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -25951,6 +26359,18 @@ function registerProductsCommands(program2) {
       );
     });
   });
+  files.command("rename").description(
+    "Rename a file in place (its name is the buyer\u2019s download filename; order and uid stay)"
+  ).argument("<uid>", "file uid (see `products files get`)").requiredOption("--product <id>", "downloads product id").requiredOption("--name <name>", 'new file name, e.g. "Tom 1.epub" (max 255 characters)').action(async (uid, options, command) => {
+    const flags = getGlobalFlags(command);
+    const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
+    const result = await client.renameDownloadFile(options.product, uid, options.name);
+    emit(flags, result, () => {
+      process.stdout.write(`Renamed ${result.file.uid} to "${result.file.name}".
+`);
+      printFilesTable(result.files);
+    });
+  });
   files.command("reorder").description("Reorder the file list \u2014 pass EVERY current uid in the new order").argument("<uid...>", "the full uid permutation, in the new order").requiredOption("--product <id>", "downloads product id").action(async (uids, options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -26749,6 +27169,8 @@ function describeCondition(condition) {
       return condition.operator === "has" ? "has a phone number" : "has no phone number";
     case "campaign":
       return `${condition.operator.replace("-", " ")} campaign ${condition.campaignId}`;
+    case "email":
+      return `email ${condition.operator === "is-any" ? "is one of" : "is none of"} ${condition.emails.join(", ")} (set in the dashboard)`;
   }
 }
 function registerSegmentsCommands(program2) {
@@ -27123,15 +27545,25 @@ function registerSiteCommands(program2) {
   );
   update.command("general").description(
     "Page title/description, language, showPageTitle, mainPage* (undefined = untouched)"
-  ).option("--title <text>", "browser/page title of the site").option("--description <text>", "meta description of the site").option("--language <pl|en|default>", "UI language of the public site").option("--show-page-title <on|off>", "render the page title in the header").option(
+  ).option("--title <text>", "browser/page title of the site").option("--description <text>", "short description (storefront header + meta fallback)").option(
+    "--seo-description <text>",
+    "meta description for search engines (empty = short description)"
+  ).option(
+    "--robots-rules <text>",
+    String.raw`extra robots.txt lines (User-agent / Allow / Disallow / Crawl-delay); separate lines with \n, or use --json`
+  ).option("--language <pl|en|default>", "UI language of the public site").option("--show-page-title <on|off>", "render the page title in the header").option(
     "--json <fileOrJson>",
-    "inline JSON object or .json path \u2014 pageTitle, pageDescription, showPageTitle, language, mainPage, mainPageId, mainPageCommunityId"
+    "inline JSON object or .json path \u2014 pageTitle, pageDescription, seoDescription, robotsTxtRules, showPageTitle, language, mainPage, mainPageId, mainPageCommunityId"
   ).action(
     async (options, command) => {
       const flags = getGlobalFlags(command);
       const body = baseBody(options.json);
       if (options.title !== void 0) body.pageTitle = options.title;
       if (options.description !== void 0) body.pageDescription = options.description;
+      if (options.seoDescription !== void 0) body.seoDescription = options.seoDescription;
+      if (options.robotsRules !== void 0) {
+        body.robotsTxtRules = options.robotsRules.split(String.raw`\n`).join("\n");
+      }
       if (options.language !== void 0) {
         body.language = parseChoice7(options.language, PLATFORM_LANGUAGES, "--language");
       }
@@ -28010,7 +28442,8 @@ var CONVERSION_EVENT_STATUSES = [
   "sent",
   "delivered",
   "failed",
-  "consent_blocked"
+  "consent_blocked",
+  "test_skipped"
 ];
 var CONVERSION_TRACKING_CLIENTS = [
   "metaConversionApi",
@@ -28113,12 +28546,12 @@ function registerStatsCommands(program2) {
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const report = await client.statsSales(range);
     emit(flags, report, () => {
-      const c = report.primaryCurrency;
+      const c = report.currency;
       process.stdout.write(
         `Sales (${report.period.from} \u2192 ${report.period.to}), currency ${c}
-  Net revenue: ${money(report.primaryNetRevenueCents)} ${c}
+  Net revenue: ${money(report.totalRevenueCents)} ${c}
   Transactions: ${report.transactions}  Refunds: ${report.refunds}
-  AOV: ${money(report.aovCents)} ${c}  New subscribers: ${report.totalNewSubscribers}
+  AOV: ${money(report.averageOrderValueCents)} ${c}  New subscribers: ${report.newSubscribers}
 
 `
       );
@@ -28128,7 +28561,7 @@ function registerStatsCommands(program2) {
           report.perProduct.map((r) => ({
             id: r.id,
             name: r.name,
-            revenue: money(r.primaryRevenueCents),
+            revenue: money(r.revenueCents),
             transactions: r.transactions,
             refunds: r.refunds
           })),
@@ -28142,11 +28575,11 @@ function registerStatsCommands(program2) {
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const report = await client.statsRecurring(options.currency);
     emit(flags, report, () => {
-      const c = report.primaryCurrency;
+      const c = report.currency;
       process.stdout.write(
         `Recurring revenue (currency ${c})
-  MRR: ${money(report.primaryMrrCents)} ${c}  ARR: ${money(report.primaryArrCents)} ${c}
-  Active subscriptions: ${report.activeRecurringSubscriptions}  Ending soon: ${report.endingSoonCount}
+  MRR: ${money(report.mrrCents)} ${c}  ARR: ${money(report.arrCents)} ${c}
+  Active subscriptions: ${report.activeSubscriptions}  Ending soon: ${report.endingSoonCount}
 
 `
       );
@@ -28155,8 +28588,8 @@ function registerStatsCommands(program2) {
           report.perProduct.map((r) => ({
             id: r.productId,
             name: r.productName,
-            mrr: money(r.primaryMrrCents),
-            subs: r.activeRecurringSubscriptions
+            mrr: money(r.mrrCents),
+            subs: r.activeSubscriptions
           })),
           ["id", "name", "mrr", "subs"]
         );
@@ -28171,13 +28604,13 @@ function registerStatsCommands(program2) {
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const report = await client.statsMrrHistory(range);
     emit(flags, report, () => {
-      process.stdout.write(`MRR history (currency ${report.primaryCurrency})
+      process.stdout.write(`MRR history (currency ${report.currency})
 `);
       printTable(
         report.points.map((p) => ({
           date: p.date,
           mrr: money(p.mrrCents),
-          subs: p.activeRecurringSubscriptions,
+          subs: p.activeSubscriptions,
           new: money(p.newMrrCents),
           churned: money(p.churnedMrrCents),
           churnRate: `${(p.churnRate * 100).toFixed(1)}%`
@@ -28257,11 +28690,23 @@ function registerStatsCommands(program2) {
           checkout: s.checkoutId,
           stage: s.furthestStage,
           status: s.status,
-          visitor: s.visitorLabel,
-          source: s.source ?? "",
+          converted: s.converted ? "yes" : "",
+          source: s.source.utmSource ?? s.source.referrer ?? "",
+          country: s.country ?? "",
+          declined: s.paymentFailure?.reason ?? "",
           startedAt: s.startedAt
         })),
-        ["id", "checkout", "stage", "status", "visitor", "source", "startedAt"]
+        [
+          "id",
+          "checkout",
+          "stage",
+          "status",
+          "converted",
+          "source",
+          "country",
+          "declined",
+          "startedAt"
+        ]
       );
     });
   });
@@ -28270,7 +28715,7 @@ function registerStatsCommands(program2) {
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
     const report = await client.statsProduct(productId, options.currency);
     emit(flags, report, () => {
-      const c = report.primaryCurrency;
+      const c = report.currency;
       process.stdout.write(
         `Product ${report.productId} (${report.window.startDate} \u2192 ${report.window.endDate}), currency ${c}
   Revenue: ${money(report.revenue.totalCents)} ${c} (prev ${money(report.revenue.previousTotalCents)} ${c})
@@ -29440,17 +29885,17 @@ var GRAPH_NODE_KINDS = /* @__PURE__ */ new Set([
 ]);
 var GRAPH_CONDITION_BRANCHES = ["true", "false"];
 var EXCERPT_LENGTH = 120;
-function isRecord2(value) {
+function isRecord3(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function optionalString(value) {
   return typeof value === "string" ? value : void 0;
 }
 function asAutomationGraph(raw) {
-  if (!isRecord2(raw) || !Array.isArray(raw.nodes) || !Array.isArray(raw.edges)) return null;
+  if (!isRecord3(raw) || !Array.isArray(raw.nodes) || !Array.isArray(raw.edges)) return null;
   const nodes = [];
   for (const candidate of raw.nodes) {
-    if (!isRecord2(candidate)) continue;
+    if (!isRecord3(candidate)) continue;
     const { id, kind, config, name, disabled } = candidate;
     if (typeof id !== "string" || typeof kind !== "string" || !GRAPH_NODE_KINDS.has(kind)) {
       continue;
@@ -29458,14 +29903,14 @@ function asAutomationGraph(raw) {
     nodes.push({
       id,
       kind,
-      config: isRecord2(config) ? config : {},
+      config: isRecord3(config) ? config : {},
       ...typeof name === "string" && name.length > 0 ? { name } : {},
       ...disabled === true ? { disabled: true } : {}
     });
   }
   const edges = [];
   for (const candidate of raw.edges) {
-    if (!isRecord2(candidate)) continue;
+    if (!isRecord3(candidate)) continue;
     const { source, target, sourceHandle } = candidate;
     if (typeof source !== "string" || typeof target !== "string") continue;
     const branch = GRAPH_CONDITION_BRANCHES.find((b) => b === sourceHandle);
@@ -29475,7 +29920,7 @@ function asAutomationGraph(raw) {
 }
 function emailConfigOf(node) {
   const raw = node.config.email;
-  if (!isRecord2(raw)) return null;
+  if (!isRecord3(raw)) return null;
   return {
     templateId: optionalString(raw.templateId) ?? null,
     templateName: optionalString(raw.templateName) ?? null,
@@ -29627,7 +30072,7 @@ function isKnownActionType(value) {
 function describeAction(node, templateNames) {
   const { taskType } = node.config;
   if (!isKnownActionType(taskType)) {
-    const inner = isRecord2(node.config.action) ? optionalString(node.config.action.type) : void 0;
+    const inner = isRecord3(node.config.action) ? optionalString(node.config.action.type) : void 0;
     return `${typeof taskType === "string" ? taskType : "action"}${inner ? ` ${inner}` : ""}`;
   }
   const label = GRAPH_ACTION_LABELS[taskType];
@@ -29635,39 +30080,39 @@ function describeAction(node, templateNames) {
     case "sendEmail":
       return `${label} \u2014 ${describeEmail(node, templateNames)}`;
     case "notifyOwner": {
-      const owner = isRecord2(node.config.ownerNotification) ? node.config.ownerNotification : {};
+      const owner = isRecord3(node.config.ownerNotification) ? node.config.ownerNotification : {};
       return `${label} \u2014 subject: ${quote(optionalString(owner.subject))} \u2014 body: ${quote(excerptHtml(optionalString(owner.html)))}`;
     }
     case "sendSms": {
-      const sms = isRecord2(node.config.sms) ? node.config.sms : {};
+      const sms = isRecord3(node.config.sms) ? node.config.sms : {};
       return `${label} \u2014 text: ${quote(excerptText(optionalString(sms.text)))}`;
     }
     case "webhook": {
-      const webhook = isRecord2(node.config.webhook) ? node.config.webhook : {};
+      const webhook = isRecord3(node.config.webhook) ? node.config.webhook : {};
       const method = optionalString(webhook.method) ?? optionalString(webhook.type);
       return `${label} \u2014 ${method ? `${method.toUpperCase()} ` : ""}${optionalString(webhook.url) ?? "(no url)"}`;
     }
     case "publishSocialPost": {
-      const social = isRecord2(node.config.social) ? node.config.social : {};
+      const social = isRecord3(node.config.social) ? node.config.social : {};
       const targets = Array.isArray(social.targets) ? social.targets.join(", ") : "";
       return `${label}${optionalString(social.mode) ? ` (${social.mode})` : ""}${targets ? ` to ${targets}` : ""} \u2014 text: ${quote(excerptText(optionalString(social.text)))}`;
     }
     case "createCommunityPost": {
-      const post = isRecord2(node.config.communityPost) ? node.config.communityPost : {};
+      const post = isRecord3(node.config.communityPost) ? node.config.communityPost : {};
       const title = optionalString(post.title);
       return `${label} in channel ${optionalString(post.channelId) ?? "?"}${title ? ` \u2014 title: ${quote(title)}` : ""} \u2014 text: ${quote(excerptText(optionalString(post.text)))}`;
     }
     case "updateClientTags": {
-      const tags = isRecord2(node.config.clientTags) ? node.config.clientTags : {};
+      const tags = isRecord3(node.config.clientTags) ? node.config.clientTags : {};
       const ids = Array.isArray(tags.tagIds) ? tags.tagIds.join(", ") : "";
       return `${label} \u2014 ${optionalString(tags.mode) ?? "update"} ${ids || "(no tags)"}`;
     }
     case "setEmailSubscription": {
-      const sub = isRecord2(node.config.emailSubscription) ? node.config.emailSubscription : {};
+      const sub = isRecord3(node.config.emailSubscription) ? node.config.emailSubscription : {};
       return `${label} \u2014 ${optionalString(sub.status) ?? "?"}`;
     }
     case "openClientDeadline": {
-      const deadline = isRecord2(node.config.clientDeadline) ? node.config.clientDeadline : {};
+      const deadline = isRecord3(node.config.clientDeadline) ? node.config.clientDeadline : {};
       const amount = typeof deadline.amount === "number" ? String(deadline.amount) : "?";
       const endTime = optionalString(deadline.endTime);
       return `${label} \u2014 ${optionalString(deadline.key) ?? "?"} for ${amount} ${optionalString(deadline.unit) ?? "?"}${endTime ? `, closes at ${endTime}` : ""}`;
@@ -29686,7 +30131,7 @@ function describeEmail(node, templateNames) {
   return `subject: ${quote(email.subject)} \u2014 body: ${quote(excerptHtml(email.html))}`;
 }
 function describeCondition2(config) {
-  const rules = Array.isArray(config.rules) ? config.rules.filter(isRecord2) : [];
+  const rules = Array.isArray(config.rules) ? config.rules.filter(isRecord3) : [];
   if (rules.length === 0) return "(no rules)";
   return rules.map(describeRule).join(" AND ");
 }
@@ -29743,6 +30188,40 @@ function excerptText(text) {
 }
 
 // src/commands/workspace/index.ts
+function toLoginRow(profile) {
+  const { credentials } = profile;
+  return {
+    key: profile.key,
+    active: profile.active,
+    workspaceId: credentials.workspaceId ?? null,
+    workspaceName: credentials.workspaceName ?? null,
+    workspaceSlug: credentials.workspaceSlug ?? null,
+    kind: credentials.kind ?? "workspace",
+    userEmail: credentials.userEmail ?? null,
+    source: credentials.source ?? "manual",
+    expiresAt: credentials.expiresAt ?? null
+  };
+}
+function printLogins(profiles) {
+  if (profiles.length === 0) {
+    process.stdout.write("No stored logins. Run `zanfia login` (add --workspace <id|slug>).\n");
+    return;
+  }
+  for (const profile of profiles) {
+    const row = toLoginRow(profile);
+    const name = row.workspaceName ?? "(unnamed)";
+    const slug = row.workspaceSlug ? ` [${row.workspaceSlug}]` : "";
+    const member = row.kind === "member" ? " (community member)" : "";
+    const expires = row.expiresAt ? `, expires ${row.expiresAt.slice(0, 10)}` : "";
+    process.stdout.write(
+      `${row.active ? "*" : " "} ${name}${slug}${member} - ${row.workspaceId ?? row.key}${row.userEmail ? `, ${row.userEmail}` : ""}${expires}
+`
+    );
+  }
+  process.stdout.write(
+    "\n* = active. Switch: `zanfia workspace use <id|slug>`; one command: `--workspace <id|slug>`.\n"
+  );
+}
 function parseOnOff5(value, flag) {
   const match = ["on", "off"].find((v) => v === value);
   if (!match) throw new Error(`Invalid ${flag}: ${value} (expected on | off)`);
@@ -29784,8 +30263,23 @@ function printSettings(settings) {
 }
 function registerWorkspaceCommands(program2) {
   const workspace2 = program2.command("workspace").description(
-    'Workspace-level settings: the name, the scheduling timezone (workflow "wait until" steps and other workspace-scoped scheduling) and the video transcription defaults'
+    "Workspace-level settings (the name, the scheduling timezone and the video transcription defaults) and the workspace logins stored on this device (list, use)"
   );
+  workspace2.command("list").description("List the workspace logins stored on this device (* = active)").action((_options, command) => {
+    const flags = getGlobalFlags(command);
+    const profiles = listStoredProfiles();
+    emit(flags, profiles.map(toLoginRow), () => printLogins(profiles));
+  });
+  workspace2.command("use").description("Make another stored workspace login the active one (no new login)").argument("<id|slug>", "workspace id, site slug or name of a stored login").action((ref, _options, command) => {
+    const flags = getGlobalFlags(command);
+    const profile = useStoredProfile(ref);
+    emit(flags, toLoginRow(profile), () => {
+      process.stdout.write(
+        `Active workspace: ${profile.credentials.workspaceName ?? "?"} (${profile.credentials.workspaceId ?? profile.key})
+`
+      );
+    });
+  });
   workspace2.command("get", { isDefault: true }).description("Show the workspace settings").action(async (_options, command) => {
     const flags = getGlobalFlags(command);
     const client = createApiClient({ apiKey: flags.apiKey, verbose: flags.verbose });
@@ -29882,8 +30376,8 @@ function applyShortHelp(program2) {
 
 // src/program.ts
 function resolveCliVersion() {
-  if ("0.4.0".length > 0) {
-    return "0.4.0";
+  if ("0.9.0".length > 0) {
+    return "0.9.0";
   }
   try {
     const raw = readFileSync28(new URL("../package.json", import.meta.url), "utf8");
@@ -29924,7 +30418,7 @@ Signing in \u2014 two roles, two consent pages:
   registerLoginCommand(program2);
   registerRegisterCommand(program2);
   registerJoinCommand(program2);
-  registerLogoutCommand(program2, clearCredentials);
+  registerLogoutCommand(program2);
   registerAuthCommands(program2);
   registerProductsCommands(program2);
   registerOffersCommands(program2);