@nordsym/apiclaw 2.1.0 → 2.2.1

package/dist/postinstall.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postinstall.d.ts","sourceRoot":"","sources":["../src/postinstall.ts"],"names":[],"mappings":";AACA;;;;GAIG"}
+{"version":3,"file":"postinstall.d.ts","sourceRoot":"","sources":["../src/postinstall.ts"],"names":[],"mappings":""}

package/dist/postinstall.js

@@ -1,12 +1,34 @@
 #!/usr/bin/env node
 /**
  * APIClaw Postinstall Hook
- * Prints a welcome message with links after install.
- * No network calls. No side effects.
+ * Prints a welcome message with links and fires ONE anonymous funnel
+ * event (install) so we can measure top-of-funnel truthfully.
+ *
+ * Disable telemetry: APICLAW_TELEMETRY=false
  */
+import { emitFunnelEvent, hasLocalMarker, setLocalMarker } from './funnel-client.js';
+import { getMachineFingerprint, detectMCPClient } from './session.js';
 const CYAN = '\x1b[36m';
 const RESET = '\x1b[0m';
 const DIM = '\x1b[2m';
+try {
+    const fp = getMachineFingerprint();
+    const dedupeKey = `install:${fp}`;
+    if (!hasLocalMarker(dedupeKey)) {
+        emitFunnelEvent({
+            event: 'install',
+            fingerprint: fp,
+            mcpClient: detectMCPClient(),
+            platform: process.platform,
+            version: process.env.npm_package_version || 'unknown',
+            dedupeKey,
+        });
+        setLocalMarker(dedupeKey);
+    }
+}
+catch {
+    /* never block install */
+}
 console.log('');
 console.log(`  🦞 APIClaw installed successfully!`);
 console.log('');
@@ -14,5 +36,4 @@ console.log(`  → Sign in:     ${CYAN}npx @nordsym/apiclaw login${RESET}`);
 console.log(`  → Full setup:  ${CYAN}npx @nordsym/apiclaw setup${RESET}  ${DIM}(auto-detects Claude, Cursor, Windsurf)${RESET}`);
 console.log(`  ⭐ Star us: ${CYAN}https://github.com/nordsym/apiclaw${RESET}  ${DIM}(helps more devs find us)${RESET}`);
 console.log('');
-export {};
 //# sourceMappingURL=postinstall.js.map

package/dist/postinstall.js.map

@@ -1 +1 @@
-{"version":3,"file":"postinstall.js","sourceRoot":"","sources":["../src/postinstall.ts"],"names":[],"mappings":";AACA;;;;GAIG;AAEH,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,GAAG,GAAG,SAAS,CAAC;AAEtB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAChB,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;AACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAChB,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,6BAA6B,KAAK,EAAE,CAAC,CAAC;AAC1E,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,6BAA6B,KAAK,KAAK,GAAG,0CAA0C,KAAK,EAAE,CAAC,CAAC;AACjI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,qCAAqC,KAAK,KAAK,GAAG,4BAA4B,KAAK,EAAE,CAAC,CAAC;AACvH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC"}
+{"version":3,"file":"postinstall.js","sourceRoot":"","sources":["../src/postinstall.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AACH,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEtE,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,GAAG,GAAG,SAAS,CAAC;AAEtB,IAAI,CAAC;IACH,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,WAAW,EAAE,EAAE,CAAC;IAClC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,eAAe,CAAC;YACd,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,eAAe,EAAE;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS;YACrD,SAAS;SACV,CAAC,CAAC;QACH,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAAC,MAAM,CAAC;IACP,yBAAyB;AAC3B,CAAC;AAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAChB,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;AACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAChB,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,6BAA6B,KAAK,EAAE,CAAC,CAAC;AAC1E,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,6BAA6B,KAAK,KAAK,GAAG,0CAA0C,KAAK,EAAE,CAAC,CAAC;AACjI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,qCAAqC,KAAK,KAAK,GAAG,4BAA4B,KAAK,EAAE,CAAC,CAAC;AACvH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC"}

package/dist/registration-guard.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Client-side registration guard — single source of truth for "does this
+ * workspaceContext pass the verified-owner check before an API call".
+ *
+ * Free paths (discover_apis, list_* , *_help) do NOT call this.
+ * Paying paths (call_api single + chain, capability, resume_chain) DO.
+ */
+export interface WorkspaceContextLike {
+    sessionToken: string;
+    workspaceId: string;
+    email: string;
+    tier: string;
+    status: string;
+    usageRemaining: number;
+    usageCount: number;
+}
+export type GuardResult = {
+    ok: true;
+    ctx: WorkspaceContextLike;
+} | {
+    ok: false;
+    reason: GuardReason;
+    payload: Record<string, unknown>;
+};
+export type GuardReason = "no_session" | "not_verified" | "quota_exceeded" | "pending_verification";
+export declare const FREE_CALL_PATHS: Set<string>;
+export declare const ENFORCED_CALL_PATHS: Set<string>;
+export declare function requireVerifiedOwner(workspaceContext: WorkspaceContextLike | null): GuardResult;
+//# sourceMappingURL=registration-guard.d.ts.map

package/dist/registration-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration-guard.d.ts","sourceRoot":"","sources":["../src/registration-guard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,oBAAoB,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC;AAEzE,MAAM,MAAM,WAAW,GACnB,YAAY,GACZ,cAAc,GACd,gBAAgB,GAChB,sBAAsB,CAAC;AAG3B,eAAO,MAAM,eAAe,aAkB1B,CAAC;AAGH,eAAO,MAAM,mBAAmB,aAI9B,CAAC;AAEH,wBAAgB,oBAAoB,CAClC,gBAAgB,EAAE,oBAAoB,GAAG,IAAI,GAC5C,WAAW,CA0Db"}

package/dist/registration-guard.js

@@ -0,0 +1,87 @@
+/**
+ * Client-side registration guard — single source of truth for "does this
+ * workspaceContext pass the verified-owner check before an API call".
+ *
+ * Free paths (discover_apis, list_* , *_help) do NOT call this.
+ * Paying paths (call_api single + chain, capability, resume_chain) DO.
+ */
+// Paths that are allowed without a verified owner.
+export const FREE_CALL_PATHS = new Set([
+    "discover_apis",
+    "list_categories",
+    "list_connected",
+    "list_capabilities",
+    "apiclaw_help",
+    "register_owner",
+    "verify_code",
+    "check_workspace_status",
+    "remind_owner",
+    "get_chain_status",
+    "setup_metered_billing",
+    "get_usage_summary",
+    "estimate_cost",
+    "check_balance",
+    "add_credits",
+    "get_api_details",
+    "purchase_access",
+]);
+// Paths that MUST go through requireVerifiedOwner.
+export const ENFORCED_CALL_PATHS = new Set([
+    "call_api",
+    "capability",
+    "resume_chain",
+]);
+export function requireVerifiedOwner(workspaceContext) {
+    if (!workspaceContext) {
+        return {
+            ok: false,
+            reason: "no_session",
+            payload: {
+                status: "registration_required",
+                error: "Registration required to call APIs.",
+                message: "Ask the user for their email, then call register_owner({ email }). A 6-digit code will be sent. Then call verify_code with the code.",
+                action: "register_owner",
+                free_tier: "50 API calls/month -- completely free.",
+            },
+        };
+    }
+    if (!workspaceContext.email) {
+        return {
+            ok: false,
+            reason: "pending_verification",
+            payload: {
+                status: "registration_required",
+                error: "Workspace is not linked to a verified email yet.",
+                message: "Run register_owner({ email }) and verify_code to activate.",
+                action: "register_owner",
+            },
+        };
+    }
+    if (workspaceContext.status !== "active") {
+        return {
+            ok: false,
+            reason: "not_verified",
+            payload: {
+                status: "pending_verification",
+                error: `Workspace status: ${workspaceContext.status}. Please verify your email.`,
+                action: "verify_code",
+            },
+        };
+    }
+    if (workspaceContext.usageRemaining === 0) {
+        return {
+            ok: false,
+            reason: "quota_exceeded",
+            payload: {
+                status: "quota_exceeded",
+                error: workspaceContext.tier === "free"
+                    ? "You've hit the free tier limit. Upgrade at https://apiclaw.cloud/upgrade."
+                    : "Quota exceeded.",
+                upgrade_url: "https://apiclaw.cloud/upgrade",
+                action: "upgrade",
+            },
+        };
+    }
+    return { ok: true, ctx: workspaceContext };
+}
+//# sourceMappingURL=registration-guard.js.map

package/dist/registration-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration-guard.js","sourceRoot":"","sources":["../src/registration-guard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAsBH,mDAAmD;AACnD,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS;IAC7C,eAAe;IACf,iBAAiB;IACjB,gBAAgB;IAChB,mBAAmB;IACnB,cAAc;IACd,gBAAgB;IAChB,aAAa;IACb,wBAAwB;IACxB,cAAc;IACd,kBAAkB;IAClB,uBAAuB;IACvB,mBAAmB;IACnB,eAAe;IACf,eAAe;IACf,aAAa;IACb,iBAAiB;IACjB,iBAAiB;CAClB,CAAC,CAAC;AAEH,mDAAmD;AACnD,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS;IACjD,UAAU;IACV,YAAY;IACZ,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,UAAU,oBAAoB,CAClC,gBAA6C;IAE7C,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE;gBACP,MAAM,EAAE,uBAAuB;gBAC/B,KAAK,EAAE,qCAAqC;gBAC5C,OAAO,EACL,sIAAsI;gBACxI,MAAM,EAAE,gBAAgB;gBACxB,SAAS,EAAE,wCAAwC;aACpD;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,sBAAsB;YAC9B,OAAO,EAAE;gBACP,MAAM,EAAE,uBAAuB;gBAC/B,KAAK,EAAE,kDAAkD;gBACzD,OAAO,EAAE,4DAA4D;gBACrE,MAAM,EAAE,gBAAgB;aACzB;SACF,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE;gBACP,MAAM,EAAE,sBAAsB;gBAC9B,KAAK,EAAE,qBAAqB,gBAAgB,CAAC,MAAM,6BAA6B;gBAChF,MAAM,EAAE,aAAa;aACtB;SACF,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,gBAAgB;YACxB,OAAO,EAAE;gBACP,MAAM,EAAE,gBAAgB;gBACxB,KAAK,EACH,gBAAgB,CAAC,IAAI,KAAK,MAAM;oBAC9B,CAAC,CAAC,2EAA2E;oBAC7E,CAAC,CAAC,iBAAiB;gBACvB,WAAW,EAAE,+BAA+B;gBAC5C,MAAM,EAAE,SAAS;aAClB;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC;AAC7C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nordsym/apiclaw",
-  "version": "2.1.0",
+  "version": "2.2.1",
   "description": "The API layer for AI agents. 26,700+ discoverable APIs, 1,650+ callable. MCP native.",
   "type": "module",
   "main": "dist/index.js",
@@ -12,8 +12,13 @@
   "bugs": {
     "url": "https://github.com/nordsym/apiclaw/issues"
   },
+  "files": [
+    "dist/",
+    "src/registry/"
+  ],
   "scripts": {
-    "build": "tsc && cp -r src/registry dist/",
+    "build": "./node_modules/.bin/tsc && cp -r src/registry dist/ && chmod +x dist/bin.js dist/bin-http.js",
+    "prepublishOnly": "npm run build",
     "postinstall": "node dist/postinstall.js || true",
     "dev": "tsx watch src/index.ts",
     "start": "node dist/index.js",

package/.claude/settings.local.json

@@ -1,9 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(CONVEX_DEPLOYMENT=\"prod:adventurous-avocet-799\" npx convex env set STRIPE_PRICE_ID_USAGE \"price_1TL038RtJYK3aJTqODoFAiVT\")",
-      "Bash(npx convex:*)",
-      "Bash(CONVEX_DEPLOYMENT=\"prod:adventurous-avocet-799\" npx convex deploy -y)"
-    ]
-  }
-}

package/.env.prod

@@ -1 +0,0 @@
-CONVEX_DEPLOYMENT=prod:brilliant-puffin-712