@myapihq/sdk 2.7.2 → 2.9.0

package/dist/config.d.ts

@@ -6,6 +6,7 @@ export declare const PAYMENTS_BASE: string;
 export declare const CONTAINER_BASE: string;
 export declare const GIT_BASE: string;
 export declare const QUEUE_BASE: string;
+export declare const FEEDBACK_BASE: string;
 export declare const TASK_BASE: string;
 export declare const IMAGE_BASE: string;
 export declare const WEBHOOK_BASE: string;

package/dist/config.js

@@ -8,7 +8,7 @@
 // local dev — `source scripts/local-env.sh` still points everything at
 // localhost:8080 regardless of the prod default.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AUTH_BASE = exports.CRM_BASE = exports.DATABASE_BASE = exports.LLM_BASE = exports.AUDIENCE_BASE = exports.COMPANY_BASE = exports.PEOPLE_BASE = exports.PIXEL_BASE = exports.URL_BASE = exports.STORAGE_BASE = exports.EMAIL_BASE = exports.WORKFLOW_BASE = exports.WEBHOOK_BASE = exports.IMAGE_BASE = exports.TASK_BASE = exports.QUEUE_BASE = exports.GIT_BASE = exports.CONTAINER_BASE = exports.PAYMENTS_BASE = exports.FUNCTION_BASE = exports.FUNNEL_BASE = exports.DOMAIN_BASE = exports.HQ_BASE = void 0;
+exports.AUTH_BASE = exports.CRM_BASE = exports.DATABASE_BASE = exports.LLM_BASE = exports.AUDIENCE_BASE = exports.COMPANY_BASE = exports.PEOPLE_BASE = exports.PIXEL_BASE = exports.URL_BASE = exports.STORAGE_BASE = exports.EMAIL_BASE = exports.WORKFLOW_BASE = exports.WEBHOOK_BASE = exports.IMAGE_BASE = exports.TASK_BASE = exports.FEEDBACK_BASE = exports.QUEUE_BASE = exports.GIT_BASE = exports.CONTAINER_BASE = exports.PAYMENTS_BASE = exports.FUNCTION_BASE = exports.FUNNEL_BASE = exports.DOMAIN_BASE = exports.HQ_BASE = void 0;
 const GATEWAY = 'https://api.myapihq.com';
 exports.HQ_BASE = process.env.MYAPI_HQ_URL ?? process.env.MYAPI_API_BASE ?? GATEWAY;
 exports.DOMAIN_BASE = process.env.MYAPI_DOMAIN_URL ?? 'https://api.mydomainapi.com';
@@ -20,6 +20,7 @@ exports.PAYMENTS_BASE = process.env.MYAPI_PAYMENTS_URL ?? GATEWAY;
 exports.CONTAINER_BASE = process.env.MYAPI_CONTAINER_URL ?? GATEWAY;
 exports.GIT_BASE = process.env.MYAPI_GIT_URL ?? GATEWAY;
 exports.QUEUE_BASE = process.env.MYAPI_QUEUE_URL ?? GATEWAY;
+exports.FEEDBACK_BASE = process.env.MYAPI_FEEDBACK_URL ?? GATEWAY;
 exports.TASK_BASE = process.env.MYAPI_TASK_URL ?? GATEWAY;
 exports.IMAGE_BASE = process.env.MYAPI_IMAGE_URL ?? 'https://api.myimageapi.com';
 exports.WEBHOOK_BASE = process.env.MYAPI_WEBHOOK_URL ?? 'https://api.mywebhookapi.com';

package/dist/container.d.ts

@@ -81,7 +81,7 @@ export interface BuildDeployResponse {
     status: string;
     message?: string;
 }
-export declare function deployContainerSource(apiKey: string, orgId: string, containerId: string, tarball: Blob | Buffer, filename?: string): Promise<BuildDeployResponse>;
+export declare function deployContainerSource(apiKey: string, orgId: string, containerId: string, tarball: Blob | Buffer, filename?: string, opts?: DeployOptions): Promise<BuildDeployResponse>;
 export interface LogEntry {
     timestamp: string;
     severity: string;

package/dist/container.js

@@ -70,9 +70,14 @@ async function promoteRevision(apiKey, orgId, containerId, revision) {
 // (backend deploy.go builds it via Cloud Build → Artifact Registry, then
 // deploys). Asynchronous: returns status='building' to poll. The tarball is
 // capped at 100MB server-side. Mirrors the multipart upload in storage.ts.
-async function deployContainerSource(apiKey, orgId, containerId, tarball, filename = 'source.tar.gz') {
+async function deployContainerSource(apiKey, orgId, containerId, tarball, filename = 'source.tar.gz', opts = {}) {
     const formData = new FormData();
     formData.append('source', new Blob([tarball], { type: 'application/gzip' }), filename);
+    // The multipart path takes `promote` too as of 2026-07-28. It did not when
+    // --no-promote first shipped, which is exactly why the flag was silently
+    // dropped here: the options never reached this function at all.
+    if (opts.promote === false)
+        formData.append('promote', 'false');
     const response = await fetch(`${config_1.CONTAINER_BASE}/container/orgs/${encodeURIComponent(orgId)}/containers/${encodeURIComponent(containerId)}/deploy`, { method: 'POST', headers: { Authorization: `Bearer ${apiKey}` }, body: formData });
     let result;
     try {

package/dist/feedback.d.ts

@@ -0,0 +1,51 @@
+import type { Exposes } from './exposes';
+export declare const EXPOSES: Exposes;
+export type FeedbackKind = 'bug' | 'issue' | 'suggestion';
+export type FeedbackStatus = 'open' | 'resolved';
+export interface FeedbackItem {
+    id: string;
+    org_id: string;
+    kind: FeedbackKind;
+    body: string;
+    status: FeedbackStatus;
+    page_url?: string;
+    route?: string;
+    target_selector?: string;
+    target_region?: string;
+    viewport?: string;
+    created_at: string;
+    resolved_at?: string;
+}
+export interface FeedbackPage {
+    items: FeedbackItem[];
+    total: number;
+    has_more?: boolean;
+}
+export interface ListFeedbackOptions {
+    kind?: FeedbackKind;
+    status?: FeedbackStatus;
+    limit?: number;
+    offset?: number;
+}
+export interface Widget {
+    id: string;
+    org_id: string;
+    name: string;
+    key: string;
+    allowed_origins?: string[];
+    created_at: string;
+}
+export declare function listFeedback(apiKey: string, orgId: string, opts?: ListFeedbackOptions): Promise<FeedbackPage>;
+export interface CreateFeedbackInput {
+    kind: FeedbackKind;
+    body: string;
+    page_url?: string;
+    route?: string;
+    target_selector?: string;
+    target_region?: string;
+    viewport?: string;
+}
+export declare function createFeedback(apiKey: string, orgId: string, input: CreateFeedbackInput): Promise<FeedbackItem>;
+export declare function resolveFeedback(apiKey: string, orgId: string, id: string): Promise<void>;
+export declare function createWidget(apiKey: string, orgId: string, name: string, allowedOrigins?: string[]): Promise<Widget>;
+export declare function revokeWidget(apiKey: string, orgId: string, id: string): Promise<void>;

package/dist/feedback.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EXPOSES = void 0;
+exports.listFeedback = listFeedback;
+exports.createFeedback = createFeedback;
+exports.resolveFeedback = resolveFeedback;
+exports.createWidget = createWidget;
+exports.revokeWidget = revokeWidget;
+const client_1 = require("./client");
+const config_1 = require("./config");
+// End-user feedback collected from a page, and the widget keys that let a
+// page submit it without a credential.
+exports.EXPOSES = [
+    'POST /feedback/orgs/{org_id}/widgets',
+    'DELETE /feedback/orgs/{org_id}/widgets/{id}',
+    'GET /feedback/orgs/{org_id}/items',
+    'POST /feedback/orgs/{org_id}/items',
+    'POST /feedback/orgs/{org_id}/items/{id}/resolve',
+];
+function orgBase(orgId) {
+    return `${config_1.FEEDBACK_BASE}/feedback/orgs/${encodeURIComponent(orgId)}`;
+}
+async function listFeedback(apiKey, orgId, opts = {}) {
+    const q = new URLSearchParams();
+    if (opts.kind)
+        q.set('kind', opts.kind);
+    if (opts.status)
+        q.set('status', opts.status);
+    if (opts.limit !== undefined)
+        q.set('limit', String(opts.limit));
+    if (opts.offset !== undefined)
+        q.set('offset', String(opts.offset));
+    const qs = q.toString();
+    return (0, client_1.request)('GET', `${orgBase(orgId)}/items${qs ? `?${qs}` : ''}`, apiKey);
+}
+async function createFeedback(apiKey, orgId, input) {
+    return (0, client_1.request)('POST', `${orgBase(orgId)}/items`, apiKey, input);
+}
+// Already-resolved and not-found answer identically, so an id cannot be probed
+// across orgs. That means a 'resolved' response is not proof the id was yours.
+async function resolveFeedback(apiKey, orgId, id) {
+    return (0, client_1.request)('POST', `${orgBase(orgId)}/items/${encodeURIComponent(id)}/resolve`, apiKey, {});
+}
+// Mints a PUBLIC widget key. It ships in your page source and authenticates
+// nobody — it names an org so a page can submit without a credential. Set
+// `allowed_origins` so another site cannot post through it, and revoke it if
+// it is abused; the feedback already collected is kept.
+async function createWidget(apiKey, orgId, name, allowedOrigins) {
+    const body = { name };
+    if (allowedOrigins?.length)
+        body.allowed_origins = allowedOrigins;
+    return (0, client_1.request)('POST', `${orgBase(orgId)}/widgets`, apiKey, body);
+}
+async function revokeWidget(apiKey, orgId, id) {
+    return (0, client_1.request)('DELETE', `${orgBase(orgId)}/widgets/${encodeURIComponent(id)}`, apiKey);
+}

package/dist/index.d.ts

@@ -24,4 +24,5 @@ export * as payments from './payments';
 export * as container from './container';
 export * as git from './git';
 export * as queue from './queue';
+export * as feedback from './feedback';
 export * as task from './task';

package/dist/index.js

@@ -36,7 +36,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.task = exports.queue = exports.git = exports.container = exports.payments = exports.fn = exports.crm = exports.database = exports.llm = exports.audience = exports.company = exports.people = exports.url = exports.workflow = exports.webhook = exports.storage = exports.pixel = exports.image = exports.funnel = exports.email = exports.domain = exports.auth = exports.hq = void 0;
+exports.task = exports.feedback = exports.queue = exports.git = exports.container = exports.payments = exports.fn = exports.crm = exports.database = exports.llm = exports.audience = exports.company = exports.people = exports.url = exports.workflow = exports.webhook = exports.storage = exports.pixel = exports.image = exports.funnel = exports.email = exports.domain = exports.auth = exports.hq = void 0;
 __exportStar(require("./types"), exports);
 __exportStar(require("./client"), exports);
 __exportStar(require("./funds"), exports);
@@ -69,4 +69,5 @@ exports.payments = __importStar(require("./payments"));
 exports.container = __importStar(require("./container"));
 exports.git = __importStar(require("./git"));
 exports.queue = __importStar(require("./queue"));
+exports.feedback = __importStar(require("./feedback"));
 exports.task = __importStar(require("./task"));

package/dist/llm.d.ts

@@ -99,12 +99,30 @@ export interface SummarizeResponse {
     usage: VerbUsage;
 }
 export interface DraftRequest extends VerbBase {
-    /** Optional source content — may be empty when `context`/`prompt` carry
+    /** Optional source content — may be empty when `facts`/`prompt` carry
      *  the brief. */
     input?: string;
     /** What to write — `email`, `message`, `reply`, etc. */
     kind: string;
-    /** Free-form structured context (recipient, tone, facts). */
+    /**
+     * Referent data quoted into the prompt as reference, never as instructions
+     * — recipient details, dates, amounts.
+     *
+     * Replaces `context`, which the platform kept as an alias with a removal
+     * clock and no security properties. Verified 2026-07-28: both spellings
+     * behave identically today, and neither is declared in the schema.
+     */
+    facts?: Record<string, unknown>;
+    /**
+     * Writer controls: tone, max_words, format, language, style. A closed set,
+     * denied-listed against dangerous key names — which is the property `facts`
+     * does not have and `context` never distinguished.
+     */
+    directives?: Record<string, unknown>;
+    /**
+     * @deprecated Use `facts`. Sent as-is when `facts` is absent, so existing
+     * callers keep working; remove no earlier than the next minor.
+     */
     context?: Record<string, unknown>;
     /** Free-text instructions to the writer. */
     prompt?: string;

package/dist/llm.js

@@ -43,5 +43,12 @@ async function summarize(apiKey, orgId, req) {
     return (0, client_1.request)('POST', verbUrl(orgId, 'summarize'), apiKey, req);
 }
 async function draft(apiKey, orgId, req) {
-    return (0, client_1.request)('POST', verbUrl(orgId, 'draft'), apiKey, req);
+    // Send `facts`, not `context`. The platform treats `context` as an alias on
+    // a removal clock, so a caller still passing it gets migrated here rather
+    // than finding out when it is dropped.
+    const { context, ...rest } = req;
+    const body = context !== undefined && rest.facts === undefined
+        ? { ...rest, facts: context }
+        : rest;
+    return (0, client_1.request)('POST', verbUrl(orgId, 'draft'), apiKey, body);
 }

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "2.7.2";
+export declare const SDK_VERSION = "2.9.0";

package/dist/version.js

@@ -8,4 +8,4 @@ exports.SDK_VERSION = void 0;
 // Why a constant and not a package.json read: the SDK runs inside edge
 // functions (Cloudflare Workers), so it must not import node:fs. A literal
 // is the only version source that works in every runtime we ship to.
-exports.SDK_VERSION = '2.7.2';
+exports.SDK_VERSION = '2.9.0';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@myapihq/sdk",
   "license": "Apache-2.0",
-  "version": "2.7.2",
+  "version": "2.9.0",
   "description": "TypeScript SDK for the MyAPI ecosystem",
   "repository": {
     "type": "git",