@nordsym/apiclaw 1.5.1 → 1.5.3

package/convex/http.ts

@@ -118,44 +118,53 @@ async function validateAndLogProxyCall(
   provider: string,
   action: string
 ): Promise<{ valid: boolean; workspaceId?: string; subagentId?: string; error?: string }> {
-  const sessionToken = request.headers.get("X-APIClaw-Session");
-  const subagentId = request.headers.get("X-APIClaw-Subagent") || "unknown";
+  const identifier = request.headers.get("X-APIClaw-Identifier");
+  const subagentId = request.headers.get("X-APIClaw-Subagent") || "main";
   
-  if (!sessionToken) {
-    // Allow calls without session but don't log to workspace
-    return { valid: true, subagentId };
-  }
+  console.log("[Proxy] Call received", { provider, action, identifier, subagentId });
   
+  // ALWAYS log to analytics (even if identifier is missing)
   try {
-    // Validate session
-    const session = await ctx.runQuery(api.workspaces.getSession, { token: sessionToken });
-    
-    if (!session) {
-      // Allow call anyway but log warning
-      console.warn("[Proxy] Invalid session token, allowing call but not logging");
-      return { valid: true, subagentId };
-    }
-    
-    // Log the API call
-    await ctx.runMutation(api.logs.createProxyLog, {
-      workspaceId: session.workspaceId,
+    const result = await ctx.runMutation(api.analytics.log, {
+      event: "api_call",
       provider,
-      action,
-      subagentId,
-      sessionToken,
+      identifier: identifier || "unknown",
+      metadata: { action, subagentId },
     });
-    
-    // Increment usage
-    await ctx.runMutation(api.workspaces.incrementUsage, {
-      workspaceId: session.workspaceId,
-    });
-    
-    return { valid: true, workspaceId: session.workspaceId, subagentId };
+    console.log("[Proxy] Analytics logged:", result);
   } catch (e: any) {
-    console.error("[Proxy] Session validation error:", e);
-    // Allow call but don't log on error
-    return { valid: true, subagentId };
+    console.error("[Proxy] Analytics logging failed:", e.message, e.stack);
+    // Continue even if analytics fails
+  }
+  
+  // If we have an identifier and it's a workspace ID (not anon:), log to workspace
+  if (identifier && !identifier.startsWith("anon:") && identifier !== "unknown") {
+    try {
+      // Validate it's actually a workspace ID by checking format
+      if (identifier.length > 20) {
+        await ctx.runMutation(api.logs.createProxyLog, {
+          workspaceId: identifier as any,
+          provider,
+          action,
+          subagentId,
+        });
+        
+        // Increment workspace usage
+        await ctx.runMutation(api.workspaces.incrementUsage, {
+          workspaceId: identifier as any,
+        });
+        
+        console.log("[Proxy] Workspace logged for:", identifier);
+        return { valid: true, workspaceId: identifier, subagentId };
+      }
+    } catch (e: any) {
+      console.error("[Proxy] Workspace logging failed:", e.message);
+      // Continue even if workspace logging fails
+    }
   }
+  
+  // Return success regardless (don't block API calls)
+  return { valid: true, subagentId };
 }
 
 // OPTIONS handler for CORS
@@ -1011,3 +1020,34 @@ http.route({
   method: "OPTIONS",
   handler: webhookOptions,
 });
+
+// Test endpoint to debug logging
+http.route({
+  path: "/proxy/test-logging",
+  method: "POST",
+  handler: httpAction(async (ctx, request) => {
+    const identifier = request.headers.get("X-APIClaw-Identifier");
+    
+    try {
+      const logId = await ctx.runMutation(api.analytics.log, {
+        event: "test_endpoint",
+        provider: "test",
+        identifier: identifier || "test",
+        metadata: { test: true },
+      });
+      
+      return jsonResponse({
+        success: true,
+        identifier,
+        logId,
+        message: "Logged successfully"
+      });
+    } catch (e: any) {
+      return jsonResponse({
+        success: false,
+        error: e.message,
+        stack: e.stack
+      }, 500);
+    }
+  }),
+});

package/dist/proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAe3E;AAED,eAAO,MAAM,eAAe,UAAkN,CAAC"}
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAyB3E;AAED,eAAO,MAAM,eAAe,UAAkN,CAAC"}

package/dist/proxy.js

@@ -1,12 +1,22 @@
 /**
  * APIClaw Proxy - Fallback to hosted API when no local credentials
  */
-const PROXY_BASE = "https://adventurous-avocet-799.convex.site/proxy";
+import { readSession, getMachineFingerprint } from './session.js';
+const PROXY_BASE = "https://brilliant-puffin-712.eu-west-1.convex.site/proxy";
 export async function callProxy(provider, params) {
     const url = `${PROXY_BASE}/${provider}`;
+    // Get session and fingerprint for tracking
+    const session = readSession();
+    const fingerprint = getMachineFingerprint();
+    const identifier = session?.workspaceId || `anon:${fingerprint}`;
     const response = await fetch(url, {
         method: "POST",
-        headers: { "Content-Type": "application/json" },
+        headers: {
+            "Content-Type": "application/json",
+            "X-APIClaw-Identifier": identifier,
+            "X-APIClaw-Provider": provider,
+            "X-APIClaw-Action": params.action || "call",
+        },
         body: JSON.stringify(params),
     });
     if (!response.ok) {

package/dist/proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,UAAU,GAAG,kDAAkD,CAAC;AAEtE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,MAAW;IAC3D,MAAM,GAAG,GAAG,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAuB,CAAC;QAC/G,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,gBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC"}
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAElE,MAAM,UAAU,GAAG,0DAA0D,CAAC;AAE9E,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,MAAW;IAC3D,MAAM,GAAG,GAAG,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC;IAExC,2CAA2C;IAC3C,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,MAAM,WAAW,GAAG,qBAAqB,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,OAAO,EAAE,WAAW,IAAI,QAAQ,WAAW,EAAE,CAAC;IAEjE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,sBAAsB,EAAE,UAAU;YAClC,oBAAoB,EAAE,QAAQ;YAC9B,kBAAkB,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM;SAC5C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAuB,CAAC;QAC/G,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,gBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC"}

package/landing/src/app/api/billing/checkout/route.ts

@@ -26,8 +26,8 @@ export async function POST(req: NextRequest) {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
-        path: "workspaces:getSessionWorkspace",
-        args: { token },
+        path: "workspaces:verifySession",
+        args: { sessionToken: token },
       }),
     });
 

package/landing/src/app/page.tsx

@@ -14,7 +14,7 @@ import { PhoneDemo } from "@/components/demo";
 import { AITestimonials } from "@/components/AITestimonials";
 
 const stats = [
-  { number: ((statsData as any).npmDownloads || 3000).toLocaleString() + "+", label: "Installs", live: true },
+  { number: "4,232+", label: "Installs", live: true },
   { number: statsData.apiCount.toLocaleString(), label: "APIs Indexed", live: true },
   { number: statsData.openApiCount.toLocaleString(), label: "Open APIs", live: true },
   { number: statsData.directCallCount.toString(), label: "Direct Call", live: true },

package/landing/src/app/workspace/page.tsx

@@ -5868,7 +5868,7 @@ function SettingsTab({ workspace, sessionToken }: { workspace: Workspace | null;
               <p className="text-sm text-[var(--text-muted)]">Current subscription plan</p>
             </div>
             <span className="px-3 py-1 rounded-full bg-[#ef4444]/20 text-[#ef4444] text-sm font-medium capitalize">
-              {workspace?.tier || "Free"}
+              {workspace?.tier === "backer" ? "Founding Backer" : workspace?.tier === "pro" ? "Pro" : workspace?.tier === "usage_based" ? "Pay as you go" : workspace?.tier || "Free"}
             </span>
           </div>
         </div>
@@ -5889,15 +5889,17 @@ function SettingsTab({ workspace, sessionToken }: { workspace: Workspace | null;
             <div>
               <p className="font-medium">Current Plan</p>
               <p className="text-sm text-[var(--text-muted)]">
-                {workspace?.tier === "pro" || workspace?.tier === "usage_based" ? "Usage-Based" : "Free Tier"}
+                {workspace?.tier === "backer" ? "Unlimited until 2027" : workspace?.tier === "pro" || workspace?.tier === "usage_based" ? "Usage-Based" : "Free Tier"}
               </p>
             </div>
             <span className={`px-3 py-1 rounded-full text-sm font-medium ${
-              workspace?.tier === "pro" || workspace?.tier === "usage_based"
+              workspace?.tier === "backer"
+                ? "bg-[#ef4444]/20 text-[#ef4444]"
+                : workspace?.tier === "pro" || workspace?.tier === "usage_based"
                 ? "bg-green-500/20 text-green-500"
                 : "bg-[var(--surface-elevated)] text-[var(--text-muted)]"
             }`}>
-              {workspace?.tier === "pro" || workspace?.tier === "usage_based" ? "Active" : "Free"}
+              {workspace?.tier === "backer" ? "Active" : workspace?.tier === "pro" || workspace?.tier === "usage_based" ? "Active" : "Free"}
             </span>
           </div>
 

package/landing/src/lib/stats.json

@@ -3,7 +3,7 @@
   "openApiCount": 1636,
   "directCallCount": 18,
   "categoryCount": 13,
-  "npmDownloads": 3396,
+  "npmDownloads": 4232,
   "lastUpdated": "2026-02-27T09:10:41.344767",
   "generatedAt": "2026-03-05T09:30:00.000Z",
   "categoryBreakdown": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nordsym/apiclaw",
-  "version": "1.5.1",
+  "version": "1.5.3",
   "description": "The API layer for AI agents. Dashboard + 22K APIs + 18 Direct Call providers. MCP native.",
   "type": "module",
   "main": "dist/index.js",

package/src/proxy.ts

@@ -2,14 +2,26 @@
  * APIClaw Proxy - Fallback to hosted API when no local credentials
  */
 
-const PROXY_BASE = "https://adventurous-avocet-799.convex.site/proxy";
+import { readSession, getMachineFingerprint } from './session.js';
+
+const PROXY_BASE = "https://brilliant-puffin-712.eu-west-1.convex.site/proxy";
 
 export async function callProxy(provider: string, params: any): Promise<any> {
   const url = `${PROXY_BASE}/${provider}`;
   
+  // Get session and fingerprint for tracking
+  const session = readSession();
+  const fingerprint = getMachineFingerprint();
+  const identifier = session?.workspaceId || `anon:${fingerprint}`;
+  
   const response = await fetch(url, {
     method: "POST",
-    headers: { "Content-Type": "application/json" },
+    headers: { 
+      "Content-Type": "application/json",
+      "X-APIClaw-Identifier": identifier,
+      "X-APIClaw-Provider": provider,
+      "X-APIClaw-Action": params.action || "call",
+    },
     body: JSON.stringify(params),
   });