@nordsym/apiclaw 1.5.1 → 1.5.2

package/convex/http.ts

@@ -118,42 +118,38 @@ async function validateAndLogProxyCall(
   provider: string,
   action: string
 ): Promise<{ valid: boolean; workspaceId?: string; subagentId?: string; error?: string }> {
-  const sessionToken = request.headers.get("X-APIClaw-Session");
-  const subagentId = request.headers.get("X-APIClaw-Subagent") || "unknown";
-  
-  if (!sessionToken) {
-    // Allow calls without session but don't log to workspace
-    return { valid: true, subagentId };
-  }
+  const identifier = request.headers.get("X-APIClaw-Identifier") || "unknown";
+  const subagentId = request.headers.get("X-APIClaw-Subagent") || "main";
   
   try {
-    // Validate session
-    const session = await ctx.runQuery(api.workspaces.getSession, { token: sessionToken });
-    
-    if (!session) {
-      // Allow call anyway but log warning
-      console.warn("[Proxy] Invalid session token, allowing call but not logging");
-      return { valid: true, subagentId };
-    }
-    
-    // Log the API call
-    await ctx.runMutation(api.logs.createProxyLog, {
-      workspaceId: session.workspaceId,
+    // Always log to analytics (anonymous or authenticated)
+    await ctx.runMutation(api.analytics.log, {
+      event: "api_call",
       provider,
-      action,
-      subagentId,
-      sessionToken,
+      identifier,
+      metadata: { action, subagentId },
     });
     
-    // Increment usage
-    await ctx.runMutation(api.workspaces.incrementUsage, {
-      workspaceId: session.workspaceId,
-    });
+    // If authenticated (workspace ID format), increment usage
+    if (identifier.startsWith("anon:")) {
+      // Anonymous user - track for rate limiting but don't increment workspace usage
+      return { valid: true, subagentId };
+    }
     
-    return { valid: true, workspaceId: session.workspaceId, subagentId };
+    // Try to increment workspace usage
+    try {
+      await ctx.runMutation(api.workspaces.incrementUsage, {
+        workspaceId: identifier,
+      });
+      return { valid: true, workspaceId: identifier, subagentId };
+    } catch (e) {
+      // Workspace doesn't exist or error - allow call anyway
+      console.warn("[Proxy] Could not increment workspace usage:", e);
+      return { valid: true, subagentId };
+    }
   } catch (e: any) {
-    console.error("[Proxy] Session validation error:", e);
-    // Allow call but don't log on error
+    console.error("[Proxy] Logging error:", e);
+    // Always allow call even if logging fails
     return { valid: true, subagentId };
   }
 }

package/dist/proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAe3E;AAED,eAAO,MAAM,eAAe,UAAkN,CAAC"}
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAyB3E;AAED,eAAO,MAAM,eAAe,UAAkN,CAAC"}

package/dist/proxy.js

@@ -1,12 +1,22 @@
 /**
  * APIClaw Proxy - Fallback to hosted API when no local credentials
  */
+import { readSession, getMachineFingerprint } from './session.js';
 const PROXY_BASE = "https://adventurous-avocet-799.convex.site/proxy";
 export async function callProxy(provider, params) {
     const url = `${PROXY_BASE}/${provider}`;
+    // Get session and fingerprint for tracking
+    const session = readSession();
+    const fingerprint = getMachineFingerprint();
+    const identifier = session?.workspaceId || `anon:${fingerprint}`;
     const response = await fetch(url, {
         method: "POST",
-        headers: { "Content-Type": "application/json" },
+        headers: {
+            "Content-Type": "application/json",
+            "X-APIClaw-Identifier": identifier,
+            "X-APIClaw-Provider": provider,
+            "X-APIClaw-Action": params.action || "call",
+        },
         body: JSON.stringify(params),
     });
     if (!response.ok) {

package/dist/proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,UAAU,GAAG,kDAAkD,CAAC;AAEtE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,MAAW;IAC3D,MAAM,GAAG,GAAG,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAuB,CAAC;QAC/G,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,gBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC"}
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAElE,MAAM,UAAU,GAAG,kDAAkD,CAAC;AAEtE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,MAAW;IAC3D,MAAM,GAAG,GAAG,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC;IAExC,2CAA2C;IAC3C,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,MAAM,WAAW,GAAG,qBAAqB,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,OAAO,EAAE,WAAW,IAAI,QAAQ,WAAW,EAAE,CAAC;IAEjE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,sBAAsB,EAAE,UAAU;YAClC,oBAAoB,EAAE,QAAQ;YAC9B,kBAAkB,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM;SAC5C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAuB,CAAC;QAC/G,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,gBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC"}

package/landing/src/app/api/billing/checkout/route.ts

@@ -26,8 +26,8 @@ export async function POST(req: NextRequest) {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
-        path: "workspaces:getSessionWorkspace",
-        args: { token },
+        path: "workspaces:verifySession",
+        args: { sessionToken: token },
       }),
     });
 

package/landing/src/app/page.tsx

@@ -14,7 +14,7 @@ import { PhoneDemo } from "@/components/demo";
 import { AITestimonials } from "@/components/AITestimonials";
 
 const stats = [
-  { number: ((statsData as any).npmDownloads || 3000).toLocaleString() + "+", label: "Installs", live: true },
+  { number: "4,232+", label: "Installs", live: true },
   { number: statsData.apiCount.toLocaleString(), label: "APIs Indexed", live: true },
   { number: statsData.openApiCount.toLocaleString(), label: "Open APIs", live: true },
   { number: statsData.directCallCount.toString(), label: "Direct Call", live: true },

package/landing/src/lib/stats.json

@@ -3,7 +3,7 @@
   "openApiCount": 1636,
   "directCallCount": 18,
   "categoryCount": 13,
-  "npmDownloads": 3396,
+  "npmDownloads": 4232,
   "lastUpdated": "2026-02-27T09:10:41.344767",
   "generatedAt": "2026-03-05T09:30:00.000Z",
   "categoryBreakdown": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nordsym/apiclaw",
-  "version": "1.5.1",
+  "version": "1.5.2",
   "description": "The API layer for AI agents. Dashboard + 22K APIs + 18 Direct Call providers. MCP native.",
   "type": "module",
   "main": "dist/index.js",

package/src/proxy.ts

@@ -2,14 +2,26 @@
  * APIClaw Proxy - Fallback to hosted API when no local credentials
  */
 
+import { readSession, getMachineFingerprint } from './session.js';
+
 const PROXY_BASE = "https://adventurous-avocet-799.convex.site/proxy";
 
 export async function callProxy(provider: string, params: any): Promise<any> {
   const url = `${PROXY_BASE}/${provider}`;
   
+  // Get session and fingerprint for tracking
+  const session = readSession();
+  const fingerprint = getMachineFingerprint();
+  const identifier = session?.workspaceId || `anon:${fingerprint}`;
+  
   const response = await fetch(url, {
     method: "POST",
-    headers: { "Content-Type": "application/json" },
+    headers: { 
+      "Content-Type": "application/json",
+      "X-APIClaw-Identifier": identifier,
+      "X-APIClaw-Provider": provider,
+      "X-APIClaw-Action": params.action || "call",
+    },
     body: JSON.stringify(params),
   });