@myapihq/sdk 2.12.0 → 2.13.0

package/dist/feedback.d.ts

@@ -33,6 +33,13 @@ export interface Widget {
     name: string;
     key: string;
     allowed_origins?: string[];
+    routes?: string[];
+    theme?: {
+        accent?: string;
+        position?: string;
+        label?: string;
+    };
+    script_tag?: string;
     created_at: string;
 }
 export declare function listFeedback(apiKey: string, orgId: string, opts?: ListFeedbackOptions): Promise<FeedbackPage>;
@@ -49,4 +56,19 @@ export declare function createFeedback(apiKey: string, orgId: string, input: Cre
 export declare function resolveFeedback(apiKey: string, orgId: string, id: string): Promise<void>;
 export declare function deleteFeedback(apiKey: string, orgId: string, id: string): Promise<void>;
 export declare function createWidget(apiKey: string, orgId: string, name: string, allowedOrigins?: string[]): Promise<Widget>;
+/** Where the button appears and how it looks. Routes are compiled into the
+ *  hosted widget.js, which is why changing them here reaches browsers within
+ *  ~5 minutes without the customer redeploying their site. */
+export interface WidgetUpdate {
+    name?: string;
+    allowed_origins?: string[];
+    routes?: string[];
+    theme?: {
+        accent?: string;
+        position?: string;
+        label?: string;
+    };
+}
+export declare function updateWidget(apiKey: string, orgId: string, id: string, patch: WidgetUpdate): Promise<Widget>;
+export declare function listWidgets(apiKey: string, orgId: string): Promise<Widget[]>;
 export declare function revokeWidget(apiKey: string, orgId: string, id: string): Promise<void>;

package/dist/feedback.js

@@ -6,6 +6,8 @@ exports.createFeedback = createFeedback;
 exports.resolveFeedback = resolveFeedback;
 exports.deleteFeedback = deleteFeedback;
 exports.createWidget = createWidget;
+exports.updateWidget = updateWidget;
+exports.listWidgets = listWidgets;
 exports.revokeWidget = revokeWidget;
 const client_1 = require("./client");
 const config_1 = require("./config");
@@ -14,6 +16,8 @@ const config_1 = require("./config");
 exports.EXPOSES = [
     'POST /feedback/orgs/{org_id}/widgets',
     'DELETE /feedback/orgs/{org_id}/widgets/{id}',
+    'GET /feedback/orgs/{org_id}/widgets',
+    'PATCH /feedback/orgs/{org_id}/widgets/{id}',
     'GET /feedback/orgs/{org_id}/items',
     'POST /feedback/orgs/{org_id}/items',
     'POST /feedback/orgs/{org_id}/items/{id}/resolve',
@@ -63,6 +67,18 @@ async function createWidget(apiKey, orgId, name, allowedOrigins) {
         body.allowed_origins = allowedOrigins;
     return (0, client_1.request)('POST', `${orgBase(orgId)}/widgets`, apiKey, body);
 }
+// Every field optional, and an omitted field keeps its value — so this is a
+// partial update, not a replace. That is the opposite of setFunctionScopes,
+// which replaces; the difference is the backend's and worth not guessing at.
+async function updateWidget(apiKey, orgId, id, patch) {
+    return (0, client_1.request)('PATCH', `${orgBase(orgId)}/widgets/${encodeURIComponent(id)}`, apiKey, patch);
+}
+// Keys come back in full. That is not a leak: a widget key is public by
+// construction and ships in page source, so hiding it here would only make the
+// thing harder to paste.
+async function listWidgets(apiKey, orgId) {
+    return (0, client_1.request)('GET', `${orgBase(orgId)}/widgets`, apiKey);
+}
 async function revokeWidget(apiKey, orgId, id) {
     return (0, client_1.request)('DELETE', `${orgBase(orgId)}/widgets/${encodeURIComponent(id)}`, apiKey);
 }

package/dist/function.d.ts

@@ -40,6 +40,10 @@ export declare function listFunctions(apiKey: string, orgId: string): Promise<Fn
 export declare function getFunction(apiKey: string, orgId: string, fnId: string): Promise<Fn>;
 export declare function deleteFunction(apiKey: string, orgId: string, fnId: string): Promise<void>;
 export declare function uploadBundle(apiKey: string, orgId: string, fnId: string, bundle: Blob | Buffer | string, filename?: string): Promise<DeployResponse>;
+export declare function setFunctionScopes(apiKey: string, orgId: string, fnId: string, scopes: string[]): Promise<Fn & {
+    scopes?: string[];
+    scoped_api_key?: string;
+}>;
 export declare function setFunctionEnv(apiKey: string, orgId: string, fnId: string, name: string, value: string): Promise<void>;
 export declare function setFunctionEnvBulk(apiKey: string, orgId: string, fnId: string, env: Record<string, string>): Promise<{
     set: number;

package/dist/function.js

@@ -6,6 +6,7 @@ exports.listFunctions = listFunctions;
 exports.getFunction = getFunction;
 exports.deleteFunction = deleteFunction;
 exports.uploadBundle = uploadBundle;
+exports.setFunctionScopes = setFunctionScopes;
 exports.setFunctionEnv = setFunctionEnv;
 exports.setFunctionEnvBulk = setFunctionEnvBulk;
 exports.listFunctionRuns = listFunctionRuns;
@@ -22,6 +23,7 @@ exports.EXPOSES = [
     'POST /function/orgs/{org_id}/functions/{id}/bundle',
     'POST /function/orgs/{org_id}/functions/{id}/env',
     'GET /function/orgs/{org_id}/functions/{id}/runs',
+    'PATCH /function/orgs/{org_id}/functions/{id}/scopes',
 ];
 async function createFunction(apiKey, orgId, payload) {
     return (0, client_1.request)('POST', `${config_1.FUNCTION_BASE}/function/orgs/${encodeURIComponent(orgId)}/functions`, apiKey, payload);
@@ -56,6 +58,20 @@ async function uploadBundle(apiKey, orgId, fnId, bundle, filename = 'bundle.js')
     }
     return result.data;
 }
+// Widens or narrows what slots a deployed function may call, WITHOUT
+// recreating it. The id and invocation URL are unchanged, which is the whole
+// point: the previous route to a new slot was delete + recreate, and that
+// minted a new URL, breaking every reference already handed out.
+//
+// Two properties worth carrying to the caller:
+//   - `scopes` REPLACES the list. It is a set, not an add, so send the slots
+//     you want to end up with.
+//   - the scoped key is replaced and pushed to the running function, exactly
+//     as a deploy does. A narrowing that left the old key alive would narrow
+//     nothing, so this is deliberate rather than incidental.
+async function setFunctionScopes(apiKey, orgId, fnId, scopes) {
+    return (0, client_1.request)('PATCH', `${config_1.FUNCTION_BASE}/function/orgs/${encodeURIComponent(orgId)}/functions/${encodeURIComponent(fnId)}/scopes`, apiKey, { scopes });
+}
 // setFunctionEnv writes a secret (Stripe key, etc.) as a Cloudflare Worker
 // Secret on the deployed script (Story 5). The function must already be
 // deployed. The value is never stored in MyAPI Postgres or returned.

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "2.12.0";
+export declare const SDK_VERSION = "2.13.0";

package/dist/version.js

@@ -8,4 +8,4 @@ exports.SDK_VERSION = void 0;
 // Why a constant and not a package.json read: the SDK runs inside edge
 // functions (Cloudflare Workers), so it must not import node:fs. A literal
 // is the only version source that works in every runtime we ship to.
-exports.SDK_VERSION = '2.12.0';
+exports.SDK_VERSION = '2.13.0';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@myapihq/sdk",
   "license": "Apache-2.0",
-  "version": "2.12.0",
+  "version": "2.13.0",
   "description": "TypeScript SDK for the MyAPI ecosystem",
   "repository": {
     "type": "git",