@nordsym/apiclaw 1.7.7 → 1.7.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nordsym/apiclaw",
-  "version": "1.7.7",
+  "version": "1.7.8",
   "description": "The API layer for AI agents. Dashboard + 22K APIs + 18 Direct Call providers. MCP native.",
   "type": "module",
   "main": "dist/index.js",

package/src/capability-router.ts

@@ -7,7 +7,7 @@ import { executeAPICall } from './execute.js';
 import { logAPICall } from './mcp-analytics.js';
 
 // Convex HTTP API for capability queries
-const CONVEX_URL = process.env.NEXT_PUBLIC_CONVEX_URL || 'https://adventurous-avocet-799.convex.cloud';
+const CONVEX_URL = process.env.NEXT_PUBLIC_CONVEX_URL || 'https://brilliant-puffin-712.eu-west-1.convex.cloud';
 
 interface ProviderMapping {
   providerId: string;

package/src/cli.ts

@@ -10,7 +10,7 @@ import { discoverAPIs, getAPIDetails, getCategories } from './discovery.js';
 import { executeAPICall, getConnectedProviders } from './execute.js';
 import { readSession, writeSession, clearSession, getMachineFingerprint } from './session.js';
 
-const CONVEX_URL = process.env.CONVEX_URL || 'https://adventurous-avocet-799.convex.cloud';
+const CONVEX_URL = process.env.CONVEX_URL || 'https://brilliant-puffin-712.eu-west-1.convex.cloud';
 const convex = new ConvexHttpClient(CONVEX_URL);
 
 // Colors for terminal

package/src/hivr-whitelist.ts

@@ -5,7 +5,7 @@
  */
 
 // Hivr PROD Convex deployment
-const HIVR_CONVEX_URL = "https://sensible-quail-275.convex.cloud";
+const HIVR_CONVEX_URL = "https://brilliant-puffin-712.eu-west-1.convex.cloud";
 
 // Fallback static whitelist (in case Convex is down)
 const STATIC_WHITELIST = [

package/src/index.ts

@@ -77,6 +77,7 @@ interface WorkspaceContext {
   email: string;
   tier: string;
   usageRemaining: number;
+  usageCount: number;
   status: string;
 }
 
@@ -221,6 +222,7 @@ async function validateSession(): Promise<boolean> {
       email: result.email ?? '',
       tier: result.tier ?? 'free',
       usageRemaining: result.usageRemaining ?? 0,
+      usageCount: result.usageCount ?? 0,
       status: result.status ?? 'unknown',
     };
     
@@ -274,6 +276,9 @@ interface RateLimitState {
 
 const rateLimitStore = new Map<string, RateLimitState>();
 
+// Unregistered (auto-provisioned, no email) users get this many calls before signup required
+const UNREGISTERED_CALL_LIMIT = 5;
+
 /**
  * For proxy providers, allow anonymous usage with rate limiting
  */
@@ -308,12 +313,25 @@ function checkWorkspaceAccess(providerId?: string): { allowed: boolean; error?:
   }
   
   if (workspaceContext.status !== 'active') {
-    return { 
-      allowed: false, 
-      error: `Workspace status: ${workspaceContext.status}. Please verify your email.` 
+    return {
+      allowed: false,
+      error: `Workspace status: ${workspaceContext.status}. Please verify your email.`
     };
   }
-  
+
+  // Unregistered workspaces (auto-provisioned, no email) get limited calls then must register
+  if (!workspaceContext.email && workspaceContext.usageCount >= UNREGISTERED_CALL_LIMIT) {
+    return {
+      allowed: false,
+      error: JSON.stringify({
+        success: false,
+        error: `Register to continue. You've used ${UNREGISTERED_CALL_LIMIT} free calls.`,
+        hint: "Run register_owner with your email to unlock 50 calls/week.",
+        action: "register_owner"
+      }, null, 2)
+    };
+  }
+
   if (workspaceContext.usageRemaining === 0) {
     // Free tier hit weekly limit
     if (workspaceContext.tier === 'free') {
@@ -1532,6 +1550,7 @@ Docs: https://apiclaw.nordsym.com
             }) as { success: boolean; remaining?: number };
             if (usageResult.success) {
               workspaceContext.usageRemaining = usageResult.remaining ?? -1;
+              workspaceContext.usageCount = (workspaceContext.usageCount || 0) + 1;
             }
 
             // Track earn progress (first direct call + unique APIs)
@@ -1541,18 +1560,29 @@ Docs: https://apiclaw.nordsym.com
           }
         }
 
+        // Build response with signup nudge for unregistered users
+        const responseData: Record<string, unknown> = {
+          status: result.success ? 'success' : 'error',
+          provider: result.provider,
+          action: result.action,
+          type: apiType,
+          ...(result.success ? { data: result.data } : { error: result.error }),
+          ...(result.cost !== undefined ? { cost_sek: result.cost } : {})
+        };
+
+        // Nudge unregistered users
+        if (result.success && workspaceContext && !workspaceContext.email) {
+          const remaining = UNREGISTERED_CALL_LIMIT - (workspaceContext.usageCount || 0);
+          if (remaining > 0 && remaining <= 3) {
+            responseData._notice = `${remaining} free calls remaining. Run register_owner to unlock 50/week.`;
+          }
+        }
+
         return {
           content: [
             {
               type: 'text',
-              text: JSON.stringify({
-                status: result.success ? 'success' : 'error',
-                provider: result.provider,
-                action: result.action,
-                type: apiType,
-                ...(result.success ? { data: result.data } : { error: result.error }),
-                ...(result.cost !== undefined ? { cost_sek: result.cost } : {})
-              }, null, 2)
+              text: JSON.stringify(responseData, null, 2)
             }
           ],
           isError: !result.success
@@ -1729,6 +1759,7 @@ Docs: https://apiclaw.nordsym.com
                 email,
                 tier: existing.tier,
                 usageRemaining: existing.usageLimit - existing.usageCount,
+                usageCount: existing.usageCount,
                 status: existing.status,
               };
               
@@ -1770,7 +1801,7 @@ Docs: https://apiclaw.nordsym.com
           }) as { token: string; expiresAt: number };
           
           // Send magic link via email
-          const verifyUrl = `https://apiclaw.nordsym.com/verify?token=${magicLinkResult.token}`;
+          const verifyUrl = `https://apiclaw.nordsym.com/auth/verify?token=${magicLinkResult.token}`;
           
           const emailResponse = await fetch('https://api.resend.com/emails', {
             method: 'POST',
@@ -1860,6 +1891,7 @@ Docs: https://apiclaw.nordsym.com
             email: result.email ?? '',
             tier: result.tier ?? 'free',
             usageRemaining: result.usageRemaining ?? 0,
+            usageCount: result.usageCount ?? 0,
             status: result.status ?? 'unknown',
           };
           
@@ -1940,7 +1972,7 @@ Docs: https://apiclaw.nordsym.com
           }) as { token: string; expiresAt: number };
           
           // TODO: Agent 2 will implement actual email sending
-          const verifyUrl = `https://apiclaw.nordsym.com/verify?token=${magicLinkResult.token}`;
+          const verifyUrl = `https://apiclaw.nordsym.com/auth/verify?token=${magicLinkResult.token}`;
           
           return {
             content: [{

package/src/product-whitelist.ts

@@ -18,7 +18,7 @@ interface ProductSource {
 const PRODUCT_SOURCES: ProductSource[] = [
   {
     name: 'hivr',
-    convexUrl: 'https://sensible-quail-275.convex.cloud',
+    convexUrl: 'https://brilliant-puffin-712.eu-west-1.convex.cloud',
     queryPath: 'agents:list',
     agentIdField: 'handle', // ✅ Fixed: Hivr agents use 'handle', not 'agentId'
   },

package/src/proxy.ts

@@ -4,7 +4,7 @@
 
 import { readSession, getMachineFingerprint } from './session.js';
 
-const PROXY_BASE = "https://adventurous-avocet-799.convex.site/proxy";
+const PROXY_BASE = "https://brilliant-puffin-712.eu-west-1.convex.site/proxy";
 
 export async function callProxy(provider: string, params: any): Promise<any> {
   const url = `${PROXY_BASE}/${provider}`;

package/src/telemetry.ts

@@ -10,7 +10,7 @@
  * Disable with APICLAW_TELEMETRY=false
  */
 
-const TELEMETRY_ENDPOINT = 'https://agile-crane-840.convex.cloud/api/mutation';
+const TELEMETRY_ENDPOINT = 'https://brilliant-puffin-712.eu-west-1.convex.cloud/api/mutation';
 
 interface TelemetryEvent {
   type: 'startup' | 'search' | 'execute' | 'discovery';