@apitap/core 1.0.0

package/dist/capture/verifier.js

@@ -0,0 +1,147 @@
+/**
+ * Heuristic tier classification for non-GET endpoints (or when verification is skipped).
+ * Based on header analysis only.
+ */
+export function classifyHeuristic(endpoint) {
+    const signals = [];
+    const hasAuth = Object.values(endpoint.headers).some(v => v === '[stored]');
+    if (hasAuth)
+        signals.push('auth-required');
+    const hasCsrf = Object.keys(endpoint.headers).some(k => {
+        const lower = k.toLowerCase();
+        return lower.includes('csrf') || lower.includes('xsrf');
+    });
+    if (hasCsrf)
+        signals.push('csrf-token');
+    let tier;
+    if (hasCsrf) {
+        tier = 'orange';
+    }
+    else if (hasAuth) {
+        tier = 'yellow';
+    }
+    else {
+        tier = 'green';
+    }
+    return { tier, verified: false, signals };
+}
+/**
+ * Verify a single GET endpoint by replaying it with raw fetch().
+ * Compares status and response shape.
+ */
+async function verifySingle(endpoint) {
+    const url = endpoint.examples.request.url;
+    if (!url)
+        return classifyHeuristic(endpoint);
+    // Build headers: use endpoint headers but exclude [stored] auth placeholders
+    const headers = {};
+    for (const [k, v] of Object.entries(endpoint.headers)) {
+        if (v !== '[stored]') {
+            headers[k] = v;
+        }
+    }
+    try {
+        const response = await fetch(url, {
+            headers,
+            signal: AbortSignal.timeout(5000),
+        });
+        if (response.ok) {
+            const signals = ['status-match'];
+            // Check if response shape matches
+            const ct = response.headers.get('content-type') ?? '';
+            if (ct.includes('json')) {
+                try {
+                    const data = await response.json();
+                    const responseType = Array.isArray(data) ? 'array' : typeof data === 'object' && data !== null ? 'object' : typeof data;
+                    if (responseType === endpoint.responseShape.type) {
+                        signals.push('shape-match');
+                    }
+                }
+                catch {
+                    // JSON parse failure — still count status match
+                }
+            }
+            return { tier: 'green', verified: true, signals };
+        }
+        if (response.status === 401 || response.status === 403) {
+            return { tier: 'yellow', verified: true, signals: ['auth-required'] };
+        }
+        return { tier: 'orange', verified: true, signals: [`status-${response.status}`] };
+    }
+    catch {
+        return { tier: 'red', verified: true, signals: ['connection-failed'] };
+    }
+}
+/**
+ * Verify a single POST/PUT/PATCH endpoint by replaying it with the captured body.
+ * Same classification logic as verifySingle but includes the request body.
+ */
+async function verifySinglePost(endpoint) {
+    const url = endpoint.examples.request.url;
+    if (!url || !endpoint.requestBody)
+        return classifyHeuristic(endpoint);
+    const headers = {};
+    for (const [k, v] of Object.entries(endpoint.headers)) {
+        if (v !== '[stored]') {
+            headers[k] = v;
+        }
+    }
+    const body = typeof endpoint.requestBody.template === 'object'
+        ? JSON.stringify(endpoint.requestBody.template)
+        : endpoint.requestBody.template;
+    try {
+        const response = await fetch(url, {
+            method: endpoint.method,
+            headers,
+            body,
+            signal: AbortSignal.timeout(5000),
+        });
+        if (response.ok) {
+            const signals = ['status-match'];
+            const ct = response.headers.get('content-type') ?? '';
+            if (ct.includes('json')) {
+                try {
+                    const data = await response.json();
+                    const responseType = Array.isArray(data) ? 'array' : typeof data === 'object' && data !== null ? 'object' : typeof data;
+                    if (responseType === endpoint.responseShape.type) {
+                        signals.push('shape-match');
+                    }
+                }
+                catch {
+                    // JSON parse failure — still count status match
+                }
+            }
+            return { tier: 'green', verified: true, signals };
+        }
+        if (response.status === 401 || response.status === 403) {
+            return { tier: 'yellow', verified: true, signals: ['auth-required'] };
+        }
+        return { tier: 'orange', verified: true, signals: [`status-${response.status}`] };
+    }
+    catch {
+        return { tier: 'red', verified: true, signals: ['connection-failed'] };
+    }
+}
+/**
+ * Verify all GET endpoints in a skill file by replaying them.
+ * Non-GET endpoints get heuristic classification by default.
+ * With verifyPosts: true, POST/PUT/PATCH endpoints are also replayed.
+ * Returns a new skill file with replayability tags on all endpoints.
+ */
+export async function verifyEndpoints(skill, opts) {
+    const verifiedEndpoints = await Promise.all(skill.endpoints.map(async (ep) => {
+        let replayability;
+        if (ep.method === 'GET') {
+            replayability = await verifySingle(ep);
+        }
+        else if (opts?.verifyPosts) {
+            replayability = await verifySinglePost(ep);
+        }
+        else {
+            replayability = classifyHeuristic(ep);
+        }
+        return { ...ep, replayability };
+    }));
+    return { ...skill, endpoints: verifiedEndpoints };
+}
+//# sourceMappingURL=verifier.js.map

package/dist/capture/verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../src/capture/verifier.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAuB;IACvD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC;IAC5E,IAAI,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QACrD,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,IAAI,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAExC,IAAI,IAA2B,CAAC;IAChC,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;SAAM,IAAI,OAAO,EAAE,CAAC;QACnB,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,YAAY,CACzB,QAAuB;IAEvB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAE7C,6EAA6E;IAC7E,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO;YACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,OAAO,GAAa,CAAC,cAAc,CAAC,CAAC;YAE3C,kCAAkC;YAClC,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACtD,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACnC,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC;oBACxH,IAAI,YAAY,KAAK,QAAQ,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;wBACjD,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,gDAAgD;gBAClD,CAAC;YACH,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACpD,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;QACxE,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,UAAU,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC;IACzE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAC7B,QAAuB;IAEvB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;IAC1C,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW;QAAE,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAEtE,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,QAAQ,CAAC,WAAW,CAAC,QAAQ,KAAK,QAAQ;QAC5D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC;QAC/C,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC;IAElC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO;YACP,IAAI;YACJ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,OAAO,GAAa,CAAC,cAAc,CAAC,CAAC;YAE3C,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACtD,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACnC,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC;oBACxH,IAAI,YAAY,KAAK,QAAQ,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;wBACjD,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,gDAAgD;gBAClD,CAAC;YACH,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACpD,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;QACxE,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,UAAU,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC;IACzE,CAAC;AACH,CAAC;AAOD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAgB,EAAE,IAAoB;IAC1E,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,GAAG,CACzC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QAC/B,IAAI,aAA4B,CAAC;QACjC,IAAI,EAAE,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACxB,aAAa,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;YAC7B,aAAa,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,EAAE,aAAa,EAAE,CAAC;IAClC,CAAC,CAAC,CACH,CAAC;IAEF,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;AACpD,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};