@myapihq/sdk 2.19.2 → 2.20.1

package/dist/auth.js

@@ -63,7 +63,11 @@ async function createClient(apiKey, orgId, input) {
     return (0, client_1.request)('POST', `${config_1.AUTH_BASE}/auth/orgs/${encodeURIComponent(orgId)}/clients`, apiKey, input);
 }
 async function listClients(apiKey, orgId) {
-    return (0, client_1.request)('GET', `${config_1.AUTH_BASE}/auth/orgs/${encodeURIComponent(orgId)}/clients`, apiKey);
+    // Follows the cursor to the end — the endpoint pages now. The {clients: […]}
+    // wrapper was kept when it started paging so no caller had to change, which
+    // is why the rows need picking out one level down.
+    const clients = await (0, client_1.requestAll)(`${config_1.AUTH_BASE}/auth/orgs/${encodeURIComponent(orgId)}/clients`, apiKey, { select: d => (d?.clients ?? []) });
+    return { clients };
 }
 // Change a client's redirect URIs or name, keeping the SAME client_id and
 // secret.

package/dist/client.d.ts

@@ -41,4 +41,29 @@ export interface Page<T> {
     next_cursor?: string;
     has_more?: boolean;
 }
+/**
+ * Follow a keyset-paginated list to the end and return every row.
+ *
+ * The backend began paging these lists on 2026-08-20 (myapi-hq #17). Callers
+ * that were using `request` kept working and quietly started receiving only the
+ * first page — 50 rows where they used to get the whole collection, with
+ * nothing in the response to say so. A list that silently stops at 50 is worse
+ * than a slow one: the caller acts on a partial answer believing it is complete.
+ *
+ * So the default is unchanged behaviour — everything — and a caller who wants
+ * one page asks for it with requestPage.
+ *
+ * `maxPages` is a stop, not a limit: a server that returns has_more forever
+ * (or a cursor that does not advance) would otherwise spin here. Hitting it
+ * throws rather than returning a short list, because a truncated answer that
+ * looks complete is the failure this function exists to prevent.
+ */
+export declare function requestAll<T>(url: string, apiKey?: string, opts?: RequestOptions & {
+    pageSize?: number;
+    maxPages?: number;
+    /** Pulls the array out of a wrapped payload — `{queues: […]}`, `{clients:
+     *  […]}`. Those wrappers were kept when the endpoints started paging so no
+     *  existing caller had to change, which means the rows are one level down. */
+    select?: (data: unknown) => T[];
+}): Promise<T[]>;
 export declare function requestPage<T>(method: string, url: string, apiKey?: string, body?: unknown, extraHeaders?: Record<string, string>, opts?: RequestOptions): Promise<Page<T>>;

package/dist/client.js

@@ -4,6 +4,7 @@ exports.MyApiError = void 0;
 exports.setUserAgent = setUserAgent;
 exports.toError = toError;
 exports.request = request;
+exports.requestAll = requestAll;
 exports.requestPage = requestPage;
 const version_1 = require("./version");
 class MyApiError extends Error {
@@ -301,6 +302,43 @@ async function request(method, url, apiKey, body, extraHeaders, opts) {
 // For keyset-paginated endpoints (backend `envelope.WrapPage`): `data` is a
 // bare array and the cursor/has_more live under `meta`. `request` would drop
 // the cursor, so list endpoints with pagination must use this.
+/**
+ * Follow a keyset-paginated list to the end and return every row.
+ *
+ * The backend began paging these lists on 2026-08-20 (myapi-hq #17). Callers
+ * that were using `request` kept working and quietly started receiving only the
+ * first page — 50 rows where they used to get the whole collection, with
+ * nothing in the response to say so. A list that silently stops at 50 is worse
+ * than a slow one: the caller acts on a partial answer believing it is complete.
+ *
+ * So the default is unchanged behaviour — everything — and a caller who wants
+ * one page asks for it with requestPage.
+ *
+ * `maxPages` is a stop, not a limit: a server that returns has_more forever
+ * (or a cursor that does not advance) would otherwise spin here. Hitting it
+ * throws rather than returning a short list, because a truncated answer that
+ * looks complete is the failure this function exists to prevent.
+ */
+async function requestAll(url, apiKey, opts) {
+    const pageSize = opts?.pageSize ?? 200;
+    const maxPages = opts?.maxPages ?? 100;
+    const out = [];
+    let cursor;
+    for (let i = 0; i < maxPages; i++) {
+        const sep = url.includes('?') ? '&' : '?';
+        const qs = `limit=${pageSize}${cursor ? `&cursor=${encodeURIComponent(cursor)}` : ''}`;
+        const page = await requestPage('GET', `${url}${sep}${qs}`, apiKey, undefined, undefined, opts);
+        out.push(...(opts?.select ? opts.select(page.data) : page.data));
+        if (!page.has_more || !page.next_cursor)
+            return out;
+        if (page.next_cursor === cursor) {
+            throw new MyApiError('pagination_stalled', 0, `${url} returned the same cursor twice — refusing to loop. Got ${out.length} rows.`);
+        }
+        cursor = page.next_cursor;
+    }
+    throw new MyApiError('pagination_runaway', 0, `${url} still reported more rows after ${maxPages} pages (${out.length} fetched). ` +
+        `Refusing to return a partial list as if it were complete.`);
+}
 async function requestPage(method, url, apiKey, body, extraHeaders, opts) {
     const r = await requestFull(method, url, apiKey, body, extraHeaders, opts);
     const meta = (r.meta ?? {});

package/dist/container.js

@@ -37,7 +37,10 @@ async function createContainer(apiKey, orgId, payload) {
     return (0, client_1.request)('POST', `${config_1.CONTAINER_BASE}/container/orgs/${encodeURIComponent(orgId)}/containers`, apiKey, payload);
 }
 async function listContainers(apiKey, orgId) {
-    return (0, client_1.request)('GET', `${config_1.CONTAINER_BASE}/container/orgs/${encodeURIComponent(orgId)}/containers`, apiKey);
+    // Follows the cursor to the end: the backend began paging this list on
+    // 2026-08-20, and returning only the first page here would silently turn a
+    // complete answer into a partial one.
+    return (0, client_1.requestAll)(`${config_1.CONTAINER_BASE}/container/orgs/${encodeURIComponent(orgId)}/containers`, apiKey);
 }
 async function getContainer(apiKey, orgId, containerId) {
     return (0, client_1.request)('GET', `${config_1.CONTAINER_BASE}/container/orgs/${encodeURIComponent(orgId)}/containers/${encodeURIComponent(containerId)}`, apiKey);

package/dist/feedback.d.ts

@@ -154,3 +154,16 @@ export interface WidgetUpdate {
 export declare function updateWidget(apiKey: string, orgId: string, id: string, patch: WidgetUpdate): Promise<Widget>;
 export declare function listWidgets(apiKey: string, orgId: string): Promise<Widget[]>;
 export declare function revokeWidget(apiKey: string, orgId: string, id: string): Promise<void>;
+/**
+ * Render a feedback item as a Playwright spec.
+ *
+ * Returns the spec SOURCE, not JSON: the endpoint answers `text/plain`, so this
+ * cannot go through `request()`, which parses every body as JSON and would
+ * throw `invalid_json_response` on a perfectly good test file.
+ *
+ * `base` overrides where the test runs. The report's own `page_url` is used by
+ * default; an item filed without one answers 422 `BASE_URL_REQUIRED`, because
+ * the generator has nowhere to point the browser and guessing would produce a
+ * spec that silently tests nothing.
+ */
+export declare function getItemTest(apiKey: string, orgId: string, id: string, base?: string): Promise<string>;

package/dist/feedback.js

@@ -9,6 +9,7 @@ exports.createWidget = createWidget;
 exports.updateWidget = updateWidget;
 exports.listWidgets = listWidgets;
 exports.revokeWidget = revokeWidget;
+exports.getItemTest = getItemTest;
 const client_1 = require("./client");
 const config_1 = require("./config");
 // End-user feedback collected from a page, and the widget keys that let a
@@ -22,6 +23,8 @@ exports.EXPOSES = [
     'POST /feedback/orgs/{org_id}/items',
     'POST /feedback/orgs/{org_id}/items/{id}/resolve',
     'DELETE /feedback/orgs/{org_id}/items/{id}',
+    // Answers text/plain — a Playwright spec, not the JSON envelope.
+    'GET /feedback/orgs/{org_id}/items/{id}/test',
 ];
 function orgBase(orgId) {
     return `${config_1.FEEDBACK_BASE}/feedback/orgs/${encodeURIComponent(orgId)}`;
@@ -84,11 +87,43 @@ async function listWidgets(apiKey, orgId) {
     // CLI reported "No widgets yet" for orgs that had widgets, four times, while
     // the HTTP API was answering correctly the whole time. Reported by ImmoPilot
     // on 2026-08-19; verified against widgetView in the backend.
-    const res = await (0, client_1.request)('GET', `${orgBase(orgId)}/widgets`, apiKey);
-    if (Array.isArray(res))
-        return res; // tolerate a future bare array
-    return res?.widgets ?? [];
+    // Follows the cursor to the end: the endpoint pages now, and one page
+    // returned as the whole list is the same silent-partial-answer bug in a new
+    // costume.
+    return (0, client_1.requestAll)(`${orgBase(orgId)}/widgets`, apiKey, {
+        select: d => (Array.isArray(d) ? d : (d?.widgets ?? [])),
+    });
 }
 async function revokeWidget(apiKey, orgId, id) {
     return (0, client_1.request)('DELETE', `${orgBase(orgId)}/widgets/${encodeURIComponent(id)}`, apiKey);
 }
+/**
+ * Render a feedback item as a Playwright spec.
+ *
+ * Returns the spec SOURCE, not JSON: the endpoint answers `text/plain`, so this
+ * cannot go through `request()`, which parses every body as JSON and would
+ * throw `invalid_json_response` on a perfectly good test file.
+ *
+ * `base` overrides where the test runs. The report's own `page_url` is used by
+ * default; an item filed without one answers 422 `BASE_URL_REQUIRED`, because
+ * the generator has nowhere to point the browser and guessing would produce a
+ * spec that silently tests nothing.
+ */
+async function getItemTest(apiKey, orgId, id, base) {
+    const qs = base ? `?base=${encodeURIComponent(base)}` : '';
+    const url = `${orgBase(orgId)}/items/${encodeURIComponent(id)}/test${qs}`;
+    const response = await fetch(url, { headers: { Authorization: `Bearer ${apiKey}` } });
+    const raw = await response.text();
+    if (!response.ok) {
+        // Errors still come back as the JSON envelope, so parse only on failure.
+        let err;
+        try {
+            err = JSON.parse(raw)?.error;
+        }
+        catch { /* fall through to the code below */ }
+        const code = typeof err === 'object' ? (err?.code ?? 'unknown_error') : (err ?? 'unknown_error');
+        const detail = typeof err === 'object' ? err?.message : undefined;
+        throw new client_1.MyApiError(code, response.status, detail, typeof err === 'object' ? err : undefined);
+    }
+    return raw;
+}

package/dist/function.js

@@ -29,7 +29,10 @@ async function createFunction(apiKey, orgId, payload) {
     return (0, client_1.request)('POST', `${config_1.FUNCTION_BASE}/function/orgs/${encodeURIComponent(orgId)}/functions`, apiKey, payload);
 }
 async function listFunctions(apiKey, orgId) {
-    return (0, client_1.request)('GET', `${config_1.FUNCTION_BASE}/function/orgs/${encodeURIComponent(orgId)}/functions`, apiKey);
+    // Follows the cursor to the end: the backend began paging this list on
+    // 2026-08-20, and returning only the first page here would silently turn a
+    // complete answer into a partial one.
+    return (0, client_1.requestAll)(`${config_1.FUNCTION_BASE}/function/orgs/${encodeURIComponent(orgId)}/functions`, apiKey);
 }
 async function getFunction(apiKey, orgId, fnId) {
     return (0, client_1.request)('GET', `${config_1.FUNCTION_BASE}/function/orgs/${encodeURIComponent(orgId)}/functions/${encodeURIComponent(fnId)}`, apiKey);

package/dist/hq.d.ts

@@ -118,6 +118,7 @@ export declare function getBalance(apiKey: string): Promise<{
     has_payment_method: boolean;
 }>;
 export declare function getBillingHistory(apiKey: string): Promise<{
+    id: string;
     type: string;
     amount_display: string;
     status: string;

package/dist/hq.js

@@ -164,7 +164,9 @@ async function getBalance(apiKey) {
     return (0, client_1.request)('GET', `${config_1.HQ_BASE}/hq/billing/balance`, apiKey);
 }
 async function getBillingHistory(apiKey) {
-    return (0, client_1.request)('GET', `${config_1.HQ_BASE}/hq/billing/history`, apiKey);
+    // Follows the cursor to the end — the backend pages this list now, and one
+    // page returned as if it were the whole list is a silent partial answer.
+    return (0, client_1.requestAll)(`${config_1.HQ_BASE}/hq/billing/history`, apiKey);
 }
 // getBillingUsage rolls up spend by service for a window: the current
 // calendar month (default) or the trailing 30 days ('30d').

package/dist/queue.js

@@ -37,8 +37,12 @@ async function createQueue(apiKey, orgId, opts) {
     return (0, client_1.request)('POST', queuesBase(orgId), apiKey, body);
 }
 async function listQueues(apiKey, orgId) {
-    const res = await (0, client_1.request)('GET', queuesBase(orgId), apiKey);
-    return res?.queues ?? [];
+    // Follows the cursor to the end: the backend began paging this list on
+    // 2026-08-20, and returning only the first page here would silently turn a
+    // complete answer into a partial one.
+    return (0, client_1.requestAll)(queuesBase(orgId), apiKey, {
+        select: d => (d?.queues ?? []),
+    });
 }
 async function getQueue(apiKey, orgId, name) {
     return (0, client_1.request)('GET', `${queuesBase(orgId)}/${encodeURIComponent(name)}`, apiKey);

package/dist/storage.js

@@ -91,7 +91,10 @@ function signedUrlOf(res) {
     return res.signed_url ?? res.url;
 }
 async function listAssets(apiKey, orgId) {
-    return (0, client_1.request)('GET', `${config_1.STORAGE_BASE}/storage/orgs/${encodeURIComponent(orgId)}/assets`, apiKey);
+    // Follows the cursor to the end: the backend began paging this list on
+    // 2026-08-20, and returning only the first page here would silently turn a
+    // complete answer into a partial one.
+    return (0, client_1.requestAll)(`${config_1.STORAGE_BASE}/storage/orgs/${encodeURIComponent(orgId)}/assets`, apiKey);
 }
 async function deleteAsset(apiKey, orgId, assetId) {
     return (0, client_1.request)('DELETE', `${config_1.STORAGE_BASE}/storage/orgs/${encodeURIComponent(orgId)}/assets/${encodeURIComponent(assetId)}`, apiKey);

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "2.19.2";
+export declare const SDK_VERSION = "2.20.1";

package/dist/version.js

@@ -8,4 +8,4 @@ exports.SDK_VERSION = void 0;
 // Why a constant and not a package.json read: the SDK runs inside edge
 // functions (Cloudflare Workers), so it must not import node:fs. A literal
 // is the only version source that works in every runtime we ship to.
-exports.SDK_VERSION = '2.19.2';
+exports.SDK_VERSION = '2.20.1';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@myapihq/sdk",
   "license": "Apache-2.0",
-  "version": "2.19.2",
+  "version": "2.20.1",
   "description": "TypeScript SDK for the MyAPI ecosystem",
   "repository": {
     "type": "git",