@myapihq/sdk 2.17.0 → 2.19.0

package/dist/auth.d.ts

@@ -11,6 +11,10 @@ export interface CreateTenantInput {
     connections?: AuthConnection[];
     theme?: unknown;
 }
+export interface UpdateClientInput {
+    name?: string;
+    redirect_uris?: string[];
+}
 export interface AuthClient {
     client_id: string;
     name?: string;
@@ -55,6 +59,7 @@ export declare function createTenant(apiKey: string, orgId: string, input?: Crea
 export declare function getTenant(apiKey: string, orgId: string): Promise<Tenant>;
 export declare function createClient(apiKey: string, orgId: string, input: CreateClientInput): Promise<AuthClient>;
 export declare function listClients(apiKey: string, orgId: string): Promise<ListClientsResponse>;
+export declare function updateClient(apiKey: string, orgId: string, clientId: string, input: UpdateClientInput): Promise<AuthClient>;
 export declare function deleteClient(apiKey: string, orgId: string, clientId: string): Promise<{
     client_id: string;
     deleted: boolean;

package/dist/auth.js

@@ -5,6 +5,7 @@ exports.createTenant = createTenant;
 exports.getTenant = getTenant;
 exports.createClient = createClient;
 exports.listClients = listClients;
+exports.updateClient = updateClient;
 exports.deleteClient = deleteClient;
 exports.rotateClient = rotateClient;
 exports.getUsage = getUsage;
@@ -32,6 +33,7 @@ exports.EXPOSES = [
     'GET /auth/orgs/{org_id}/tenant',
     'POST /auth/orgs/{org_id}/clients',
     'GET /auth/orgs/{org_id}/clients',
+    'PATCH /auth/orgs/{org_id}/clients/{client_id}',
     'DELETE /auth/orgs/{org_id}/clients/{client_id}',
     'POST /auth/orgs/{org_id}/clients/{client_id}/rotate',
     'GET /auth/orgs/{org_id}/usage',
@@ -63,6 +65,20 @@ async function createClient(apiKey, orgId, input) {
 async function listClients(apiKey, orgId) {
     return (0, client_1.request)('GET', `${config_1.AUTH_BASE}/auth/orgs/${encodeURIComponent(orgId)}/clients`, apiKey);
 }
+// Change a client's redirect URIs or name, keeping the SAME client_id and
+// secret.
+//
+// redirect_uris REPLACES the list rather than adding to it: send every URI you
+// want the client to have, including the ones already there. Fetch it with
+// listClients first if you do not have them.
+//
+// Without this the only way to add a callback URL was delete-and-recreate,
+// which mints a new client_id — so every deployed copy of the app has to be
+// reconfigured, and the cutover needs two audiences accepted at once. The route
+// has existed since 19.08.2026; this is the SDK catching up to it.
+async function updateClient(apiKey, orgId, clientId, input) {
+    return (0, client_1.request)('PATCH', `${config_1.AUTH_BASE}/auth/orgs/${encodeURIComponent(orgId)}/clients/${encodeURIComponent(clientId)}`, apiKey, input);
+}
 // Delete (revoke) an OIDC client. Irreversible — the client_id stops
 // authenticating immediately.
 async function deleteClient(apiKey, orgId, clientId) {

package/dist/feedback.d.ts

@@ -85,6 +85,20 @@ export interface ListFeedbackOptions {
     limit?: number;
     offset?: number;
 }
+/** What a widget is allowed to collect from the reporter's page.
+ *
+ *  Both default to true server-side. An ABSENT field means "leave it alone",
+ *  never "off" — every widget embedded before capture existed keeps behaving
+ *  exactly as it did, and a partial update must not flip the field the operator
+ *  did not mention.
+ *
+ *  `text: false` keeps the SHAPE of the element the reporter pointed at — tag,
+ *  role, id, data-feedback-id — and drops the words inside it. On a table row
+ *  that is the difference between "row, id row-8" and the tenant's name. */
+export interface WidgetCapture {
+    screenshot?: boolean;
+    text?: boolean;
+}
 export interface Widget {
     id: string;
     org_id: string;
@@ -97,6 +111,7 @@ export interface Widget {
         position?: string;
         label?: string;
     };
+    capture?: WidgetCapture;
     script_tag?: string;
     created_at: string;
 }
@@ -121,7 +136,7 @@ export interface CreateFeedbackInput {
 export declare function createFeedback(apiKey: string, orgId: string, input: CreateFeedbackInput): Promise<FeedbackItem>;
 export declare function resolveFeedback(apiKey: string, orgId: string, id: string): Promise<void>;
 export declare function deleteFeedback(apiKey: string, orgId: string, id: string): Promise<void>;
-export declare function createWidget(apiKey: string, orgId: string, name: string, allowedOrigins?: string[]): Promise<Widget>;
+export declare function createWidget(apiKey: string, orgId: string, name: string, allowedOrigins?: string[], capture?: WidgetCapture): Promise<Widget>;
 /** Where the button appears and how it looks. Routes are compiled into the
  *  hosted widget.js, which is why changing them here reaches browsers within
  *  ~5 minutes without the customer redeploying their site. */
@@ -134,6 +149,7 @@ export interface WidgetUpdate {
         position?: string;
         label?: string;
     };
+    capture?: WidgetCapture;
 }
 export declare function updateWidget(apiKey: string, orgId: string, id: string, patch: WidgetUpdate): Promise<Widget>;
 export declare function listWidgets(apiKey: string, orgId: string): Promise<Widget[]>;

package/dist/feedback.js

@@ -61,10 +61,12 @@ async function deleteFeedback(apiKey, orgId, id) {
 // nobody — it names an org so a page can submit without a credential. Set
 // `allowed_origins` so another site cannot post through it, and revoke it if
 // it is abused; the feedback already collected is kept.
-async function createWidget(apiKey, orgId, name, allowedOrigins) {
+async function createWidget(apiKey, orgId, name, allowedOrigins, capture) {
     const body = { name };
     if (allowedOrigins?.length)
         body.allowed_origins = allowedOrigins;
+    if (capture && Object.keys(capture).length)
+        body.capture = capture;
     return (0, client_1.request)('POST', `${orgBase(orgId)}/widgets`, apiKey, body);
 }
 // Every field optional, and an omitted field keeps its value — so this is a

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "2.17.0";
+export declare const SDK_VERSION = "2.19.0";

package/dist/version.js

@@ -8,4 +8,4 @@ exports.SDK_VERSION = void 0;
 // Why a constant and not a package.json read: the SDK runs inside edge
 // functions (Cloudflare Workers), so it must not import node:fs. A literal
 // is the only version source that works in every runtime we ship to.
-exports.SDK_VERSION = '2.17.0';
+exports.SDK_VERSION = '2.19.0';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@myapihq/sdk",
   "license": "Apache-2.0",
-  "version": "2.17.0",
+  "version": "2.19.0",
   "description": "TypeScript SDK for the MyAPI ecosystem",
   "repository": {
     "type": "git",
@@ -14,7 +14,7 @@
     "dist"
   ],
   "scripts": {
-    "build": "tsc",
+    "build": "rm -rf dist && tsc",
     "dev": "tsc --watch",
     "test": "cd ../cli && npx vitest run src"
   },