@nordsym/apiclaw 1.7.1 → 1.7.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nordsym/apiclaw",
-  "version": "1.7.1",
+  "version": "1.7.2",
   "description": "The API layer for AI agents. Dashboard + 22K APIs + 18 Direct Call providers. MCP native.",
   "type": "module",
   "main": "dist/index.js",

package/src/capability-router.ts

@@ -4,7 +4,7 @@
  */
 
 import { executeAPICall } from './execute.js';
-import { logAPICall } from './analytics.js';
+import { logAPICall } from './mcp-analytics.js';
 
 // Convex HTTP API for capability queries
 const CONVEX_URL = process.env.NEXT_PUBLIC_CONVEX_URL || 'https://adventurous-avocet-799.convex.cloud';

package/src/execute.ts

@@ -2256,11 +2256,26 @@ export async function getProviderActionsAsync(providerId: string): Promise<strin
 }
 
 // Get all connected providers with their actions (static handlers only)
-export function getConnectedProviders(): { provider: string; actions: string[] }[] {
-  return Object.entries(handlers).map(([provider, actions]) => ({
-    provider,
-    actions: Object.keys(actions),
-  }));
+// APILayer actions blocked by subscription tier
+const BLOCKED_ACTIONS = ['verify_number', 'world_news', 'image_crop', 'form_submit'];
+const RATE_LIMITED_ACTIONS = ['pdf_generate'];
+
+export function getConnectedProviders(): { provider: string; actions: string[]; blocked?: string[]; rate_limited?: string[] }[] {
+  return Object.entries(handlers).map(([provider, actions]) => {
+    const allActions = Object.keys(actions);
+    if (provider === 'apilayer') {
+      const live = allActions.filter(a => !BLOCKED_ACTIONS.includes(a) && !RATE_LIMITED_ACTIONS.includes(a));
+      const blocked = allActions.filter(a => BLOCKED_ACTIONS.includes(a));
+      const rateLimited = allActions.filter(a => RATE_LIMITED_ACTIONS.includes(a));
+      return {
+        provider,
+        actions: live,
+        ...(blocked.length > 0 ? { blocked } : {}),
+        ...(rateLimited.length > 0 ? { rate_limited: rateLimited } : {}),
+      };
+    }
+    return { provider, actions: allActions };
+  });
 }
 
 // Execute an API call

package/src/http-api.ts

@@ -15,7 +15,7 @@ import { URL } from 'url';
 import { discoverAPIs } from './discovery.js';
 import { isOpenAPI, executeOpenAPI } from './open-apis.js';
 import { executeMetered } from './metered.js';
-import { logAPICall } from './analytics.js';
+import { logAPICall } from './mcp-analytics.js';
 import { getMachineFingerprint } from './session.js';
 import { isAuthorized, getProduct } from './product-whitelist.js';
 

package/src/index.ts

@@ -31,7 +31,7 @@ import {
 import { hasRealCredentials } from './credentials.js';
 import { getConnectedProviders } from './execute.js';
 import { executeMetered } from './metered.js';
-import { logAPICall } from './analytics.js';
+import { logAPICall } from './mcp-analytics.js';
 import { isOpenAPI, executeOpenAPI, listOpenAPIs, getOpenAPIActions } from './open-apis.js';
 import { PROXY_PROVIDERS } from './proxy.js';
 import { 

package/dist/analytics.d.ts

@@ -1,32 +0,0 @@
-/**
- * APIClaw Analytics - Track all API usage
- * Both Direct Call and Open API calls are logged here
- */
-export interface APICallLog {
-    timestamp: string;
-    provider: string;
-    action: string;
-    type: 'direct' | 'open';
-    userId?: string;
-    success: boolean;
-    latencyMs?: number;
-    error?: string;
-    metadata?: {
-        product?: string;
-        [key: string]: any;
-    };
-}
-/**
- * Log an API call to local file AND Convex
- */
-export declare function logAPICall(log: APICallLog): void;
-/**
- * Webhook for real-time analytics (optional)
- * Set APICLAW_ANALYTICS_WEBHOOK env var to enable
- */
-export declare function sendToWebhook(log: APICallLog): Promise<void>;
-/**
- * Track API call with timing
- */
-export declare function trackAPICall<T>(provider: string, action: string, type: 'direct' | 'open', userId: string | undefined, fn: () => Promise<T>): Promise<T>;
-//# sourceMappingURL=analytics.d.ts.map

package/dist/analytics.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../src/analytics.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACpB,CAAC;CACH;AA+BD;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAYhD;AA+BD;;;GAGG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAalE;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,GAAG,MAAM,EACvB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CA0BZ"}

package/dist/analytics.js

@@ -1,130 +0,0 @@
-/**
- * APIClaw Analytics - Track all API usage
- * Both Direct Call and Open API calls are logged here
- */
-import { appendFileSync, existsSync, mkdirSync } from 'fs';
-import { homedir } from 'os';
-import { join } from 'path';
-import { ConvexHttpClient } from 'convex/browser';
-import { api } from '../convex/_generated/api.js';
-// Log directory
-const LOG_DIR = join(homedir(), '.apiclaw', 'logs');
-const LOG_FILE = join(LOG_DIR, 'api-calls.jsonl');
-// Convex client (lazy init)
-let convexClient = null;
-function getConvexClient() {
-    if (convexClient)
-        return convexClient;
-    const convexUrl = process.env.APICLAW_CONVEX_URL || process.env.NEXT_PUBLIC_CONVEX_URL;
-    if (!convexUrl)
-        return null;
-    try {
-        convexClient = new ConvexHttpClient(convexUrl);
-        return convexClient;
-    }
-    catch (e) {
-        console.error('[APIClaw Analytics] Failed to init Convex client:', e);
-        return null;
-    }
-}
-// Ensure log directory exists
-function ensureLogDir() {
-    if (!existsSync(LOG_DIR)) {
-        mkdirSync(LOG_DIR, { recursive: true });
-    }
-}
-/**
- * Log an API call to local file AND Convex
- */
-export function logAPICall(log) {
-    // 1. Local file (existing behavior)
-    try {
-        ensureLogDir();
-        const line = JSON.stringify(log) + '\n';
-        appendFileSync(LOG_FILE, line);
-    }
-    catch (e) {
-        console.error('[APIClaw Analytics] Failed to log to file:', e);
-    }
-    // 2. Send to Convex (new - includes anonymous usage)
-    sendToConvex(log).catch(() => { }); // Fire and forget
-}
-/**
- * Send analytics event to Convex
- * Works for both authenticated and anonymous users
- */
-async function sendToConvex(log) {
-    const client = getConvexClient();
-    if (!client)
-        return;
-    try {
-        await client.mutation(api.analytics.log, {
-            event: 'api_call',
-            provider: log.provider,
-            query: log.action, // Store action as query field
-            identifier: log.userId || 'anonymous',
-            metadata: {
-                type: log.type,
-                success: log.success,
-                latencyMs: log.latencyMs,
-                error: log.error,
-                timestamp: log.timestamp,
-                ...log.metadata, // Include product and any other metadata
-            },
-        });
-    }
-    catch (e) {
-        // Silent fail - don't break API calls for logging errors
-        console.error('[APIClaw Analytics] Failed to send to Convex:', e);
-    }
-}
-/**
- * Webhook for real-time analytics (optional)
- * Set APICLAW_ANALYTICS_WEBHOOK env var to enable
- */
-export async function sendToWebhook(log) {
-    const webhookUrl = process.env.APICLAW_ANALYTICS_WEBHOOK;
-    if (!webhookUrl)
-        return;
-    try {
-        await fetch(webhookUrl, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify(log),
-        });
-    }
-    catch (e) {
-        // Silent fail
-    }
-}
-/**
- * Track API call with timing
- */
-export async function trackAPICall(provider, action, type, userId, fn) {
-    const start = Date.now();
-    let success = true;
-    let error;
-    try {
-        return await fn();
-    }
-    catch (e) {
-        success = false;
-        error = e.message;
-        throw e;
-    }
-    finally {
-        const log = {
-            timestamp: new Date().toISOString(),
-            provider,
-            action,
-            type,
-            userId,
-            success,
-            latencyMs: Date.now() - start,
-            error,
-        };
-        logAPICall(log);
-        sendToWebhook(log).catch(() => { }); // Fire and forget
-    }
-}
-//# sourceMappingURL=analytics.js.map

package/dist/analytics.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../src/analytics.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,GAAG,EAAE,MAAM,6BAA6B,CAAC;AAiBlD,gBAAgB;AAChB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAElD,4BAA4B;AAC5B,IAAI,YAAY,GAA4B,IAAI,CAAC;AAEjD,SAAS,eAAe;IACtB,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IAEtC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACvF,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,IAAI,CAAC;QACH,YAAY,GAAG,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,YAAY,CAAC;IACtB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8BAA8B;AAC9B,SAAS,YAAY;IACnB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAe;IACxC,oCAAoC;IACpC,IAAI,CAAC;QACH,YAAY,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QACxC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,qDAAqD;IACrD,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB;AACvD,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,YAAY,CAAC,GAAe;IACzC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACvC,KAAK,EAAE,UAAU;YACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,8BAA8B;YACjD,UAAU,EAAE,GAAG,CAAC,MAAM,IAAI,WAAW;YACrC,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,GAAG,GAAG,CAAC,QAAQ,EAAE,yCAAyC;aAC3D;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,yDAAyD;QACzD,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAe;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACzD,IAAI,CAAC,UAAU;QAAE,OAAO;IAExB,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,UAAU,EAAE;YACtB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,cAAc;IAChB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,MAAc,EACd,IAAuB,EACvB,MAA0B,EAC1B,EAAoB;IAEpB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,KAAyB,CAAC;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC;QAClB,MAAM,CAAC,CAAC;IACV,CAAC;YAAS,CAAC;QACT,MAAM,GAAG,GAAe;YACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ;YACR,MAAM;YACN,IAAI;YACJ,MAAM;YACN,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC7B,KAAK;SACN,CAAC;QAEF,UAAU,CAAC,GAAG,CAAC,CAAC;QAChB,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB;IACxD,CAAC;AACH,CAAC"}

package/dist/src/analytics.js

@@ -1,129 +0,0 @@
-/**
- * APIClaw Analytics - Track all API usage
- * Both Direct Call and Open API calls are logged here
- */
-import { appendFileSync, existsSync, mkdirSync } from 'fs';
-import { homedir } from 'os';
-import { join } from 'path';
-import { ConvexHttpClient } from 'convex/browser';
-import { api } from '../convex/_generated/api.js';
-// Log directory
-const LOG_DIR = join(homedir(), '.apiclaw', 'logs');
-const LOG_FILE = join(LOG_DIR, 'api-calls.jsonl');
-// Convex client (lazy init)
-let convexClient = null;
-function getConvexClient() {
-    if (convexClient)
-        return convexClient;
-    const convexUrl = process.env.APICLAW_CONVEX_URL || process.env.NEXT_PUBLIC_CONVEX_URL;
-    if (!convexUrl)
-        return null;
-    try {
-        convexClient = new ConvexHttpClient(convexUrl);
-        return convexClient;
-    }
-    catch (e) {
-        console.error('[APIClaw Analytics] Failed to init Convex client:', e);
-        return null;
-    }
-}
-// Ensure log directory exists
-function ensureLogDir() {
-    if (!existsSync(LOG_DIR)) {
-        mkdirSync(LOG_DIR, { recursive: true });
-    }
-}
-/**
- * Log an API call to local file AND Convex
- */
-export function logAPICall(log) {
-    // 1. Local file (existing behavior)
-    try {
-        ensureLogDir();
-        const line = JSON.stringify(log) + '\n';
-        appendFileSync(LOG_FILE, line);
-    }
-    catch (e) {
-        console.error('[APIClaw Analytics] Failed to log to file:', e);
-    }
-    // 2. Send to Convex (new - includes anonymous usage)
-    sendToConvex(log).catch(() => { }); // Fire and forget
-}
-/**
- * Send analytics event to Convex
- * Works for both authenticated and anonymous users
- */
-async function sendToConvex(log) {
-    const client = getConvexClient();
-    if (!client)
-        return;
-    try {
-        await client.mutation(api.analytics.log, {
-            event: 'api_call',
-            provider: log.provider,
-            query: log.action, // Store action as query field
-            identifier: log.userId || 'anonymous',
-            metadata: {
-                type: log.type,
-                success: log.success,
-                latencyMs: log.latencyMs,
-                error: log.error,
-                timestamp: log.timestamp,
-                ...log.metadata, // Include product and any other metadata
-            },
-        });
-    }
-    catch (e) {
-        // Silent fail - don't break API calls for logging errors
-        console.error('[APIClaw Analytics] Failed to send to Convex:', e);
-    }
-}
-/**
- * Webhook for real-time analytics (optional)
- * Set APICLAW_ANALYTICS_WEBHOOK env var to enable
- */
-export async function sendToWebhook(log) {
-    const webhookUrl = process.env.APICLAW_ANALYTICS_WEBHOOK;
-    if (!webhookUrl)
-        return;
-    try {
-        await fetch(webhookUrl, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify(log),
-        });
-    }
-    catch (e) {
-        // Silent fail
-    }
-}
-/**
- * Track API call with timing
- */
-export async function trackAPICall(provider, action, type, userId, fn) {
-    const start = Date.now();
-    let success = true;
-    let error;
-    try {
-        return await fn();
-    }
-    catch (e) {
-        success = false;
-        error = e.message;
-        throw e;
-    }
-    finally {
-        const log = {
-            timestamp: new Date().toISOString(),
-            provider,
-            action,
-            type,
-            userId,
-            success,
-            latencyMs: Date.now() - start,
-            error,
-        };
-        logAPICall(log);
-        sendToWebhook(log).catch(() => { }); // Fire and forget
-    }
-}