@nordsym/apiclaw 1.5.0 → 1.5.2

package/convex/http.ts

@@ -118,42 +118,38 @@ async function validateAndLogProxyCall(
   provider: string,
   action: string
 ): Promise<{ valid: boolean; workspaceId?: string; subagentId?: string; error?: string }> {
-  const sessionToken = request.headers.get("X-APIClaw-Session");
-  const subagentId = request.headers.get("X-APIClaw-Subagent") || "unknown";
-  
-  if (!sessionToken) {
-    // Allow calls without session but don't log to workspace
-    return { valid: true, subagentId };
-  }
+  const identifier = request.headers.get("X-APIClaw-Identifier") || "unknown";
+  const subagentId = request.headers.get("X-APIClaw-Subagent") || "main";
   
   try {
-    // Validate session
-    const session = await ctx.runQuery(api.workspaces.getSession, { token: sessionToken });
-    
-    if (!session) {
-      // Allow call anyway but log warning
-      console.warn("[Proxy] Invalid session token, allowing call but not logging");
-      return { valid: true, subagentId };
-    }
-    
-    // Log the API call
-    await ctx.runMutation(api.logs.createProxyLog, {
-      workspaceId: session.workspaceId,
+    // Always log to analytics (anonymous or authenticated)
+    await ctx.runMutation(api.analytics.log, {
+      event: "api_call",
       provider,
-      action,
-      subagentId,
-      sessionToken,
+      identifier,
+      metadata: { action, subagentId },
     });
     
-    // Increment usage
-    await ctx.runMutation(api.workspaces.incrementUsage, {
-      workspaceId: session.workspaceId,
-    });
+    // If authenticated (workspace ID format), increment usage
+    if (identifier.startsWith("anon:")) {
+      // Anonymous user - track for rate limiting but don't increment workspace usage
+      return { valid: true, subagentId };
+    }
     
-    return { valid: true, workspaceId: session.workspaceId, subagentId };
+    // Try to increment workspace usage
+    try {
+      await ctx.runMutation(api.workspaces.incrementUsage, {
+        workspaceId: identifier,
+      });
+      return { valid: true, workspaceId: identifier, subagentId };
+    } catch (e) {
+      // Workspace doesn't exist or error - allow call anyway
+      console.warn("[Proxy] Could not increment workspace usage:", e);
+      return { valid: true, subagentId };
+    }
   } catch (e: any) {
-    console.error("[Proxy] Session validation error:", e);
-    // Allow call but don't log on error
+    console.error("[Proxy] Logging error:", e);
+    // Always allow call even if logging fails
     return { valid: true, subagentId };
   }
 }
@@ -701,6 +697,85 @@ http.route({
   handler: httpAction(async () => new Response(null, { headers: corsHeaders })),
 });
 
+// GitHub API proxy
+http.route({
+  path: "/proxy/github",
+  method: "POST",
+  handler: httpAction(async (ctx, request) => {
+    // Validate session and log usage
+    const body = await request.json();
+    const action = body.action || "search_repos";
+    await validateAndLogProxyCall(ctx, request, "github", action);
+    
+    const GITHUB_TOKEN = process.env.GITHUB_TOKEN;
+    if (!GITHUB_TOKEN) {
+      return jsonResponse({ error: "GitHub not configured" }, 500);
+    }
+
+    try {
+      const { action, ...params } = body;
+      let url: string;
+      let method = "GET";
+      let fetchBody: string | undefined;
+
+      // Route based on action
+      switch (action) {
+        case "search_repos":
+          const { query, sort = "stars", limit = 10 } = params;
+          url = `https://api.github.com/search/repositories?q=${encodeURIComponent(query)}&sort=${sort}&per_page=${limit}`;
+          break;
+        
+        case "get_repo":
+          const { owner, repo } = params;
+          url = `https://api.github.com/repos/${owner}/${repo}`;
+          break;
+        
+        case "list_issues":
+          const { owner: issueOwner, repo: issueRepo, state = "open", limit: issueLimit = 10 } = params;
+          url = `https://api.github.com/repos/${issueOwner}/${issueRepo}/issues?state=${state}&per_page=${issueLimit}`;
+          break;
+        
+        case "create_issue":
+          const { owner: createOwner, repo: createRepo, title, body: issueBody = "" } = params;
+          url = `https://api.github.com/repos/${createOwner}/${createRepo}/issues`;
+          method = "POST";
+          fetchBody = JSON.stringify({ title, body: issueBody });
+          break;
+        
+        case "get_file":
+          const { owner: fileOwner, repo: fileRepo, path } = params;
+          url = `https://api.github.com/repos/${fileOwner}/${fileRepo}/contents/${path}`;
+          break;
+        
+        default:
+          return jsonResponse({ error: `Unknown action: ${action}` }, 400);
+      }
+
+      const response = await fetch(url, {
+        method,
+        headers: {
+          "Authorization": `Bearer ${GITHUB_TOKEN}`,
+          "Accept": "application/vnd.github+json",
+          "User-Agent": "APIClaw",
+          ...(fetchBody ? { "Content-Type": "application/json" } : {}),
+        },
+        ...(fetchBody ? { body: fetchBody } : {}),
+      });
+
+      const data = await response.json();
+      return jsonResponse(data, response.status);
+    } catch (e: any) {
+      return jsonResponse({ error: e.message }, 500);
+    }
+  }),
+});
+
+http.route({
+  path: "/proxy/github",
+  method: "OPTIONS",
+  handler: httpAction(async () => new Response(null, { headers: corsHeaders })),
+});
+
 // ==============================================
 // WORKSPACE / MAGIC LINK ENDPOINTS
 // ==============================================

package/dist/proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAe3E;AAED,eAAO,MAAM,eAAe,UAAwM,CAAC"}
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAyB3E;AAED,eAAO,MAAM,eAAe,UAAkN,CAAC"}

package/dist/proxy.js

@@ -1,12 +1,22 @@
 /**
  * APIClaw Proxy - Fallback to hosted API when no local credentials
  */
+import { readSession, getMachineFingerprint } from './session.js';
 const PROXY_BASE = "https://adventurous-avocet-799.convex.site/proxy";
 export async function callProxy(provider, params) {
     const url = `${PROXY_BASE}/${provider}`;
+    // Get session and fingerprint for tracking
+    const session = readSession();
+    const fingerprint = getMachineFingerprint();
+    const identifier = session?.workspaceId || `anon:${fingerprint}`;
     const response = await fetch(url, {
         method: "POST",
-        headers: { "Content-Type": "application/json" },
+        headers: {
+            "Content-Type": "application/json",
+            "X-APIClaw-Identifier": identifier,
+            "X-APIClaw-Provider": provider,
+            "X-APIClaw-Action": params.action || "call",
+        },
         body: JSON.stringify(params),
     });
     if (!response.ok) {
@@ -15,5 +25,5 @@ export async function callProxy(provider, params) {
     }
     return response.json();
 }
-export const PROXY_PROVIDERS = ["openrouter", "brave_search", "resend", "elevenlabs", "46elks", "twilio", "replicate", "firecrawl", "e2b", "groq", "deepgram", "serper", "mistral", "cohere", "together", "stability", "assemblyai"];
+export const PROXY_PROVIDERS = ["openrouter", "brave_search", "resend", "elevenlabs", "46elks", "twilio", "replicate", "firecrawl", "e2b", "groq", "deepgram", "serper", "mistral", "cohere", "together", "stability", "assemblyai", "github"];
 //# sourceMappingURL=proxy.js.map

package/dist/proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,UAAU,GAAG,kDAAkD,CAAC;AAEtE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,MAAW;IAC3D,MAAM,GAAG,GAAG,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAuB,CAAC;QAC/G,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,gBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC"}
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAElE,MAAM,UAAU,GAAG,kDAAkD,CAAC;AAEtE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,MAAW;IAC3D,MAAM,GAAG,GAAG,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC;IAExC,2CAA2C;IAC3C,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,MAAM,WAAW,GAAG,qBAAqB,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,OAAO,EAAE,WAAW,IAAI,QAAQ,WAAW,EAAE,CAAC;IAEjE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,sBAAsB,EAAE,UAAU;YAClC,oBAAoB,EAAE,QAAQ;YAC9B,kBAAkB,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM;SAC5C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAuB,CAAC;QAC/G,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,gBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC"}

package/landing/src/app/api/billing/checkout/route.ts

@@ -26,8 +26,8 @@ export async function POST(req: NextRequest) {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
-        path: "workspaces:getSessionWorkspace",
-        args: { token },
+        path: "workspaces:verifySession",
+        args: { sessionToken: token },
       }),
     });
 

package/landing/src/app/page.tsx

@@ -14,7 +14,7 @@ import { PhoneDemo } from "@/components/demo";
 import { AITestimonials } from "@/components/AITestimonials";
 
 const stats = [
-  { number: ((statsData as any).npmDownloads || 3000).toLocaleString() + "+", label: "Installs", live: true },
+  { number: "4,232+", label: "Installs", live: true },
   { number: statsData.apiCount.toLocaleString(), label: "APIs Indexed", live: true },
   { number: statsData.openApiCount.toLocaleString(), label: "Open APIs", live: true },
   { number: statsData.directCallCount.toString(), label: "Direct Call", live: true },

package/landing/src/lib/stats.json

@@ -3,7 +3,7 @@
   "openApiCount": 1636,
   "directCallCount": 18,
   "categoryCount": 13,
-  "npmDownloads": 3396,
+  "npmDownloads": 4232,
   "lastUpdated": "2026-02-27T09:10:41.344767",
   "generatedAt": "2026-03-05T09:30:00.000Z",
   "categoryBreakdown": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nordsym/apiclaw",
-  "version": "1.5.0",
+  "version": "1.5.2",
   "description": "The API layer for AI agents. Dashboard + 22K APIs + 18 Direct Call providers. MCP native.",
   "type": "module",
   "main": "dist/index.js",

package/src/proxy.ts

@@ -2,14 +2,26 @@
  * APIClaw Proxy - Fallback to hosted API when no local credentials
  */
 
+import { readSession, getMachineFingerprint } from './session.js';
+
 const PROXY_BASE = "https://adventurous-avocet-799.convex.site/proxy";
 
 export async function callProxy(provider: string, params: any): Promise<any> {
   const url = `${PROXY_BASE}/${provider}`;
   
+  // Get session and fingerprint for tracking
+  const session = readSession();
+  const fingerprint = getMachineFingerprint();
+  const identifier = session?.workspaceId || `anon:${fingerprint}`;
+  
   const response = await fetch(url, {
     method: "POST",
-    headers: { "Content-Type": "application/json" },
+    headers: { 
+      "Content-Type": "application/json",
+      "X-APIClaw-Identifier": identifier,
+      "X-APIClaw-Provider": provider,
+      "X-APIClaw-Action": params.action || "call",
+    },
     body: JSON.stringify(params),
   });
 
@@ -21,4 +33,4 @@ export async function callProxy(provider: string, params: any): Promise<any> {
   return response.json();
 }
 
-export const PROXY_PROVIDERS = ["openrouter", "brave_search", "resend", "elevenlabs", "46elks", "twilio", "replicate", "firecrawl", "e2b", "groq", "deepgram", "serper", "mistral", "cohere", "together", "stability", "assemblyai"];
+export const PROXY_PROVIDERS = ["openrouter", "brave_search", "resend", "elevenlabs", "46elks", "twilio", "replicate", "firecrawl", "e2b", "groq", "deepgram", "serper", "mistral", "cohere", "together", "stability", "assemblyai", "github"];