@myapihq/cli 2.11.0 → 2.11.2

package/dist/commands/email/mailbox.js

@@ -53,6 +53,17 @@ async function activateSending(flags) {
     if (!address)
         error('Missing required arguments.\nUsage: myapi email mailbox activate-sending --address <email>');
     const res = await sdkEmail.activateSending(config.api_key, address);
+    // A repaired account was broken a moment ago: it held a mailbox that reported
+    // sending_enabled while the ACCOUNT had no credential behind it, so every send
+    // failed with nothing in the mailbox or domain to explain why. Reporting that
+    // as an ordinary activation hides the one fact the caller needs — that the
+    // thing which was failing is now fixed, and that they should retry.
+    if (res.repaired) {
+        success(`Sending repaired: ${address} — the account had no sending credential; it does now.`);
+        info('No charge was made — the mailbox was paid for at its first activation.');
+        info('Sending should work immediately. Retry the send that was failing.');
+        return;
+    }
     success(`Sending activated: ${address} (${res.emails_quota_remaining} emails/day quota)`);
 }
 async function setForwarding(address, forwardTo, _flags) {

package/dist/skills/my-feedback-api/SKILL.md

@@ -1,10 +1,10 @@
 ---
 name: my-feedback-api
-version: 1.0.0
+version: 1.1.0
 description: >
   Collect feedback from the people using what you built. A public widget key lets a page submit without a credential; you list, filter and resolve the results. Kind is chosen by the person reporting, not inferred from their wording.
 triggers: [feedback, bug report, user feedback, feature request, widget, support, complaints, praise]
-checksum: sha256-41627c4bdf19a5af131adc0e7bab76816e7be47acdc15601bdcef7cdb47b2e26
+checksum: sha256-544fcdb87744431fe7c3adbda341bf858c6d4177695b811a3d29aa4a311c927b
 ---
 
 # MyFeedbackAPI
@@ -33,12 +33,30 @@ myapi feedback widget create site --origins app.example.com,example.com
 Revoke with `myapi feedback widget revoke <id>`. Submissions stop immediately;
 feedback already collected is kept.
 
-**The browser-side submit contract is not documented yet.** The CLI and SDK
-cover minting, revoking, listing and resolving; how a page posts with only the
-widget key is not published anywhere you can read it, so don't guess the
-endpoint. Until it lands, collect through a route you control — a funnel form
-(`my-funnel-api`) or a webhook (`my-webhook-api`) — and file items with
-`myapi feedback create`.
+### How a page submits with it
+
+`POST https://api.myapihq.com/feedback/in/<widget_key>` — no auth, no SDK, no
+CLI. This is the browser-side half, and it is the whole point of the widget key.
+
+```js
+await fetch(`https://api.myapihq.com/feedback/in/${WIDGET_KEY}`, {
+  method: 'POST',
+  headers: { 'Content-Type': 'application/json' },
+  body: JSON.stringify({
+    kind: 'bug',                    // required — bug | issue | suggestion
+    body: text,                     // required — ≤8000 chars, refused not truncated
+    page_url: location.href,        // optional context, all of it
+    route: router.currentRoute,
+    target_selector: '#checkout button',
+    target_region: { x, y, w, h },  // viewport pixels, e.g. a dragged box
+    viewport: { w: innerWidth, h: innerHeight },
+  }),
+});
+```
+
+Errors are `WIDGET_NOT_FOUND` (revoked reads the same as invented, so keys
+cannot be probed), `ORIGIN_NOT_ALLOWED`, `RATE_LIMITED`, `INVALID_KIND`,
+`BODY_REQUIRED`, `BODY_TOO_LONG`. The key can only write — it reads nothing.
 
 ### Kind is a claim, not a guess
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@myapihq/cli",
   "license": "Apache-2.0",
-  "version": "2.11.0",
+  "version": "2.11.2",
   "description": "MyAPI command-line interface",
   "repository": {
     "type": "git",
@@ -46,7 +46,7 @@
     "lint:skills:strict": "node scripts/copy-skills.js && node scripts/lint-skills.js --strict"
   },
   "dependencies": {
-    "@myapihq/sdk": "^2.11.0"
+    "@myapihq/sdk": "^2.11.2"
   },
   "devDependencies": {
     "@types/node": "^25.6.0",