@specbook/cli 0.1.0 → 0.2.0

package/README.md

@@ -4,4 +4,4 @@ Specbook command line: init, add, generate, dev, build, run, check, secrets and
 
 Part of [Specbook](https://github.com/specbook-dev/specbook), Storybook for APIs. See the repository for documentation.
 
-Source-available under the [Functional Source License (FSL-1.1-MIT)](LICENSE): free for internal and personal use, not for a competing commercial product, and each version becomes MIT two years after its release.
+Source-available under the [Functional Source License (FSL-1.1-MIT)](LICENSE). Free to use, including at work and in commercial projects; the only restriction is offering it, or something substantially similar built from it, to others as a competing commercial product or service. Each version becomes MIT two years after its release.

package/dist/bin.js

@@ -3192,8 +3192,32 @@ function createFetchTransport(opts) {
 
 // ../core/src/spec-config.ts
 var isUrl = (s) => /^https?:\/\//i.test(s);
+function discovery(s, base) {
+  if (typeof s.openIdConnectUrl !== "string" || s.openIdConnectUrl === "") return void 0;
+  try {
+    return { openIdConnectUrl: new URL(s.openIdConnectUrl, base).toString() };
+  } catch {
+    return void 0;
+  }
+}
+function codeFlow(s, base) {
+  const flow = s.flows?.authorizationCode ?? (s.flow === "accessCode" ? s : void 0);
+  if (!flow?.authorizationUrl || !flow?.tokenUrl) return void 0;
+  const abs = (u) => {
+    try {
+      return new URL(u, base).toString();
+    } catch {
+      return u;
+    }
+  };
+  return {
+    authorizationUrl: abs(flow.authorizationUrl),
+    tokenUrl: abs(flow.tokenUrl),
+    ...flow.scopes && Object.keys(flow.scopes).length ? { scopes: flow.scopes } : {}
+  };
+}
 var secretName = (scheme) => scheme.replace(/[^A-Za-z0-9]+/g, "_").replace(/^_+|_+$/g, "").toUpperCase() || "API_KEY";
-function authFromSpec(api) {
+function authFromSpec(api, source) {
   const schemes = api.components?.securitySchemes ?? api.securityDefinitions ?? {};
   const out = { auth: {}, secrets: {} };
   for (const [name, s] of Object.entries(schemes)) {
@@ -3201,6 +3225,7 @@ function authFromSpec(api) {
     const ref = `{{secrets.${secret}}}`;
     let apply;
     let title = name;
+    let oauth;
     if (s.type === "apiKey") {
       const key = s.name;
       if (s.in === "header") apply = { headers: { [key]: ref } };
@@ -3218,10 +3243,12 @@ function authFromSpec(api) {
       title = `${name} (basic auth, paste base64 of user:password)`;
     } else if (s.type === "oauth2" || s.type === "openIdConnect") {
       apply = { headers: { authorization: `Bearer ${ref}` } };
-      title = `${name} (OAuth, paste an access token)`;
+      const base = source && isUrl(source) ? source : void 0;
+      oauth = s.type === "oauth2" ? codeFlow(s, base) : discovery(s, base);
+      title = `${name} (OAuth, ${oauth ? "sign in or " : ""}paste an access token)`;
     }
     if (!apply) continue;
-    out.auth[name] = { title, apply };
+    out.auth[name] = { title, apply, ...oauth ? { oauth } : {} };
     out.secrets[secret] = {};
   }
   const top = api.security?.flatMap(
@@ -3230,18 +3257,70 @@ function authFromSpec(api) {
   out.defaultProfile = top?.find((n) => out.auth[n]) ?? Object.keys(out.auth)[0];
   return out;
 }
-function liveBaseUrl(api, source) {
-  const server = api.servers?.[0]?.url;
-  if (server) {
-    if (isUrl(server)) return server.replace(/\/$/, "");
-    if (isUrl(source)) return new URL(server, source).toString().replace(/\/$/, "");
-    return void 0;
+var MAX_SERVERS = 20;
+var slug2 = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 24).replace(/-+$/, "");
+function resolveServer(entry, source) {
+  if (typeof entry?.url !== "string") return void 0;
+  const url = entry.url.replace(/\{([^}]+)\}/g, (whole, key) => {
+    const d = entry.variables?.[key]?.default;
+    return d === void 0 || d === null ? whole : String(d);
+  }).trim();
+  if (/\{[^}]*\}/.test(url)) return void 0;
+  if (isUrl(url)) return url.replace(/\/+$/, "");
+  if (source) {
+    try {
+      return new URL(url, source).toString().replace(/\/+$/, "");
+    } catch {
+    }
   }
-  if (api.host)
-    return `${api.schemes?.[0] ?? "https"}://${api.host}${api.basePath ?? ""}`.replace(/\/$/, "");
-  if (isUrl(source)) return new URL(source).origin;
   return void 0;
 }
+function openApiServers(api, source) {
+  const src = isUrl(source) ? source : void 0;
+  const listed = Array.isArray(api.servers) ? api.servers : [];
+  const servers = [];
+  const describe = (e) => typeof e?.description === "string" && e.description.trim() !== "" ? { description: e.description.trim() } : {};
+  if (listed.length === 0) {
+    if (api.host)
+      servers.push({
+        name: "live",
+        url: `${api.schemes?.[0] ?? "https"}://${api.host}${api.basePath ?? ""}`.replace(
+          /\/+$/,
+          ""
+        )
+      });
+    else if (src) servers.push({ name: "live", url: new URL(src).origin });
+    return { servers, needsBaseUrl: false, omitted: 0 };
+  }
+  const first = resolveServer(listed[0], src);
+  if (first) servers.push({ name: "live", url: first, ...describe(listed[0]) });
+  const needsBaseUrl = !first && typeof listed[0]?.url === "string" && !/^https?:\/\//i.test(listed[0].url);
+  const taken = /* @__PURE__ */ new Set(["mock", "live"]);
+  const seen = new Set(servers.map((x2) => x2.url));
+  let omitted = 0;
+  for (const entry of listed.slice(1)) {
+    const url = resolveServer(entry, src);
+    if (!url || seen.has(url)) continue;
+    if (servers.length >= MAX_SERVERS) {
+      omitted++;
+      continue;
+    }
+    seen.add(url);
+    const host = (() => {
+      try {
+        return new URL(url).host;
+      } catch {
+        return "";
+      }
+    })();
+    const base = slug2(describe(entry).description ?? "") || slug2(host) || "server";
+    let name = base;
+    for (let n = 2; taken.has(name); n++) name = `${base}-${n}`;
+    taken.add(name);
+    servers.push({ name, url, ...describe(entry) });
+  }
+  return { servers, needsBaseUrl, omitted };
+}
 
 // ../vite/dist/index.js
 import { existsSync as existsSync3, readdirSync } from "fs";
@@ -4602,66 +4681,22 @@ import { join as join22, relative as relative32, resolve as resolve3, sep as sep
 import fg3 from "fast-glob";
 import { readFile as readFile4 } from "fs/promises";
 import { join as join32 } from "path";
-function frontmatter(src) {
-  const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/.exec(src);
-  if (!m) return { meta: {}, body: src };
-  const meta = {};
-  for (const line2 of m[1].split(/\r?\n/)) {
-    const i = line2.indexOf(":");
-    if (i > 0)
-      meta[line2.slice(0, i).trim()] = line2.slice(i + 1).trim().replace(/^["']|["']$/g, "");
+var OAuthError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "OAuthError";
   }
-  return { meta, body: src.slice(m[0].length) };
-}
-var OP_FOLDER = /(?:^|\/)(?:requests|apis)\/([^/]+)\/([^/]+)\/(?:readme|index)\.md$/i;
-var OP_FLAT = /(?:^|\/)(?:requests|apis)\/([^/]+)\/docs\/([^/]+)\.md$/i;
-var NOT_AN_OPERATION = /^(readme|index)$/i;
-function colocated(file) {
-  if (/\.seq\.md$/.test(file)) return { sequenceFile: file.replace(/\.md$/, ".ts") };
-  if (/\.req\.md$/.test(file)) return { requestFile: file.replace(/\.md$/, ".ts") };
-  const folder = OP_FOLDER.exec(file);
-  if (folder && folder[2] !== "docs") return { operation: `${folder[1]}/${folder[2]}` };
-  const flat = OP_FLAT.exec(file);
-  if (flat && !NOT_AN_OPERATION.test(flat[2]))
-    return { operation: `${flat[1]}/${flat[2]}` };
-  return void 0;
-}
-async function scanDocs(root) {
-  const files = await fg("**/*.md", {
-    cwd: root,
-    absolute: true,
-    ignore: ["**/node_modules/**", "**/.generated/**", "**/dist/**", "**/.git/**"]
-  });
-  const pages = [];
-  const claimed = /* @__PURE__ */ new Map();
-  for (const abs of files.sort()) {
-    const { meta, body } = frontmatter(await readFile3(abs, "utf8"));
-    const file = relative3(root, abs).split(sep2).join("/");
-    const near = colocated(file);
-    if (!near && !meta.operation && !meta.sequence && !meta.page) continue;
-    const operation = meta.operation ?? near?.operation;
-    if (operation) {
-      const first = claimed.get(operation);
-      if (first) {
-        console.warn(
-          `[specbook] ${file} documents ${operation}, which ${first} already does; ignored`
-        );
-        continue;
-      }
-      claimed.set(operation, file);
-    }
-    pages.push({
-      file,
-      operation,
-      sequence: meta.sequence,
-      sequenceFile: near?.sequenceFile,
-      requestFile: near?.requestFile,
-      replace: meta.replace === "true" || void 0,
-      title: meta.title ?? meta.page,
-      html: f.parse(body, { async: false })
-    });
-  }
-  return pages;
+};
+function parseDiscovery(json3) {
+  const d = json3 && typeof json3 === "object" ? json3 : {};
+  const url = (v2) => typeof v2 === "string" && /^https?:\/\//i.test(v2) ? v2 : void 0;
+  const authorizationUrl = url(d.authorization_endpoint);
+  const tokenUrl = url(d.token_endpoint);
+  if (!authorizationUrl || !tokenUrl)
+    throw new OAuthError("The provider\u2019s discovery document has no authorization or token endpoint");
+  const supported = Array.isArray(d.scopes_supported) ? d.scopes_supported.filter((x2) => typeof x2 === "string") : [];
+  const names = ["openid", ...supported.filter((x2) => x2 !== "openid")];
+  return { authorizationUrl, tokenUrl, scopes: Object.fromEntries(names.map((n) => [n, ""])) };
 }
 var DEFAULT_METHODS = ["GET", "HEAD", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"];
 var DEFAULT_MAX_BODY = 25 * 1024 * 1024;
@@ -4949,6 +4984,107 @@ function parseDotenv2(text) {
   }
   return out;
 }
+var FETCH_TIMEOUT_MS = 5e3;
+function createDiscovery(opts = {}) {
+  const f2 = opts.fetch ?? fetch;
+  const now = opts.now ?? Date.now;
+  const retryAfter = opts.retryAfterMs ?? 3e4;
+  const found = /* @__PURE__ */ new Map();
+  const failedAt = /* @__PURE__ */ new Map();
+  const inFlight = /* @__PURE__ */ new Map();
+  async function look(url) {
+    try {
+      const res = await f2(url, {
+        headers: { accept: "application/json" },
+        signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+      });
+      if (!res.ok) throw new Error(`answered ${res.status}`);
+      const origin = new URL(parseDiscovery(await res.json()).tokenUrl).origin;
+      found.set(url, origin);
+      failedAt.delete(url);
+      return origin;
+    } catch (e) {
+      failedAt.set(url, now());
+      opts.warn?.(
+        `Could not read the OpenID Connect discovery document at ${url} (${e instanceof Error ? e.message : String(e)}). Sign in is unavailable until it can; pasting a token still works.`
+      );
+      return void 0;
+    }
+  }
+  return function tokenOrigin(url) {
+    const known = found.get(url);
+    if (known) return Promise.resolve(known);
+    const failed = failedAt.get(url);
+    if (failed !== void 0 && now() - failed < retryAfter) return Promise.resolve(void 0);
+    let pending = inFlight.get(url);
+    if (!pending) {
+      pending = look(url).finally(() => inFlight.delete(url));
+      inFlight.set(url, pending);
+    }
+    return pending;
+  };
+}
+function frontmatter(src) {
+  const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/.exec(src);
+  if (!m) return { meta: {}, body: src };
+  const meta = {};
+  for (const line2 of m[1].split(/\r?\n/)) {
+    const i = line2.indexOf(":");
+    if (i > 0)
+      meta[line2.slice(0, i).trim()] = line2.slice(i + 1).trim().replace(/^["']|["']$/g, "");
+  }
+  return { meta, body: src.slice(m[0].length) };
+}
+var OP_FOLDER = /(?:^|\/)(?:requests|apis)\/([^/]+)\/([^/]+)\/(?:readme|index)\.md$/i;
+var OP_FLAT = /(?:^|\/)(?:requests|apis)\/([^/]+)\/docs\/([^/]+)\.md$/i;
+var NOT_AN_OPERATION = /^(readme|index)$/i;
+function colocated(file) {
+  if (/\.seq\.md$/.test(file)) return { sequenceFile: file.replace(/\.md$/, ".ts") };
+  if (/\.req\.md$/.test(file)) return { requestFile: file.replace(/\.md$/, ".ts") };
+  const folder = OP_FOLDER.exec(file);
+  if (folder && folder[2] !== "docs") return { operation: `${folder[1]}/${folder[2]}` };
+  const flat = OP_FLAT.exec(file);
+  if (flat && !NOT_AN_OPERATION.test(flat[2]))
+    return { operation: `${flat[1]}/${flat[2]}` };
+  return void 0;
+}
+async function scanDocs(root) {
+  const files = await fg("**/*.md", {
+    cwd: root,
+    absolute: true,
+    ignore: ["**/node_modules/**", "**/.generated/**", "**/dist/**", "**/.git/**"]
+  });
+  const pages = [];
+  const claimed = /* @__PURE__ */ new Map();
+  for (const abs of files.sort()) {
+    const { meta, body } = frontmatter(await readFile3(abs, "utf8"));
+    const file = relative3(root, abs).split(sep2).join("/");
+    const near = colocated(file);
+    if (!near && !meta.operation && !meta.sequence && !meta.page) continue;
+    const operation = meta.operation ?? near?.operation;
+    if (operation) {
+      const first = claimed.get(operation);
+      if (first) {
+        console.warn(
+          `[specbook] ${file} documents ${operation}, which ${first} already does; ignored`
+        );
+        continue;
+      }
+      claimed.set(operation, file);
+    }
+    pages.push({
+      file,
+      operation,
+      sequence: meta.sequence,
+      sequenceFile: near?.sequenceFile,
+      requestFile: near?.requestFile,
+      replace: meta.replace === "true" || void 0,
+      title: meta.title ?? meta.page,
+      html: f.parse(body, { async: false })
+    });
+  }
+  return pages;
+}
 var ENV_NAME = /^[A-Za-z0-9_-]+$/;
 var VAR_NAME = /^[A-Za-z_][\w.-]*$/;
 var environmentsDir = (root) => join3(root, ".specbook", "environments");
@@ -5106,6 +5242,15 @@ function safeProjectPath(root, relPath) {
 function requestsDirFor(root) {
   return existsSync2(join22(root, "apis")) && !existsSync2(join22(root, "requests")) ? "apis" : "requests";
 }
+var AUTH_SERVICE_PREFIX = "auth:";
+var DISCOVERY_SERVICE_PREFIX = "discovery:";
+var decode = (s) => {
+  try {
+    return decodeURIComponent(s);
+  } catch {
+    return s;
+  }
+};
 var MOUNT = "/__specbook/proxy";
 function readBody(req) {
   return new Promise((res, rej) => {
@@ -5133,7 +5278,13 @@ async function handleProxy2(req, res, deps) {
   const response = await handleProxy(request, {
     mount: MOUNT,
     policy: {
-      upstream: (env, service) => config.services[service]?.baseUrl[env],
+      upstream: (env, service) => {
+        if (service.startsWith(AUTH_SERVICE_PREFIX))
+          return config.tokenOrigins?.[decode(service.slice(AUTH_SERVICE_PREFIX.length))];
+        if (service.startsWith(DISCOVERY_SERVICE_PREFIX))
+          return config.discoveryOrigins?.[decode(service.slice(DISCOVERY_SERVICE_PREFIX.length))];
+        return config.services[service]?.baseUrl[env];
+      },
       // a developer's own machine: their local services are the point
       allowPrivateHosts: true
     },
@@ -5364,6 +5515,7 @@ function specbook(options) {
   let notifyRegistryChanged = () => {
   };
   const memorySecrets = {};
+  const tokenOriginOf = createDiscovery({ warn: (m) => server?.config.logger.warn(m) });
   async function registryCode() {
     const files = await scanProject(root);
     const manifests = {};
@@ -5647,11 +5799,27 @@ export const loadConfig = ${cfg ? imp(cfg) : '() => Promise.resolve({ default: {
     if (!server || !cfgFile) return { services: {}, secretNames: {} };
     const mod = await server.ssrLoadModule(cfgFile);
     const cfg = mod.default ?? {};
+    const tokenOrigins = {};
+    const discoveryOrigins = {};
+    for (const [name, profile] of Object.entries(cfg.auth ?? {})) {
+      try {
+        const { tokenUrl, openIdConnectUrl } = profile.oauth ?? {};
+        if (tokenUrl) tokenOrigins[name] = new URL(tokenUrl).origin;
+        else if (openIdConnectUrl) {
+          discoveryOrigins[name] = new URL(openIdConnectUrl).origin;
+          const token = await tokenOriginOf(openIdConnectUrl);
+          if (token) tokenOrigins[name] = token;
+        }
+      } catch {
+      }
+    }
     return {
       services: Object.fromEntries(
         Object.entries(cfg.services ?? {}).map(([k, v2]) => [k, { baseUrl: v2.baseUrl ?? {} }])
       ),
-      secretNames: cfg.secrets ?? {}
+      secretNames: cfg.secrets ?? {},
+      tokenOrigins,
+      discoveryOrigins
     };
   }
   return {
@@ -5896,7 +6064,7 @@ import { existsSync as existsSync4, statSync } from "fs";
 import { join as join6, resolve as resolve4 } from "path";
 
 // src/commands/metadata.ts
-import { readFile as readFile6, writeFile as writeFile4 } from "fs/promises";
+import { readFile as readFile6 } from "fs/promises";
 import { join as join5 } from "path";
 import fg5 from "fast-glob";
 var isSequence = (v2) => v2?.kind === "sequence";
@@ -5933,7 +6101,7 @@ async function writeMetadata(root, outDir, loader) {
     } catch {
     }
   }
-  await writeFile4(
+  await writeAtomically(
     join5(outDir, "specbook.json"),
     `${JSON.stringify({ services, sequences }, null, 2)}
 `
@@ -6104,14 +6272,14 @@ async function generateCommand(project, loader, only) {
 
 // src/commands/init.ts
 import { existsSync as existsSync6 } from "fs";
-import { mkdir as mkdir4, readFile as readFile8, writeFile as writeFile5 } from "fs/promises";
+import { mkdir as mkdir4, readFile as readFile8, writeFile as writeFile4 } from "fs/promises";
 import { join as join8 } from "path";
 async function initCommand(cwd) {
   const dir = join8(cwd, ".specbook");
   await mkdir4(dir, { recursive: true });
   const cfg = join8(dir, "specbook.config.ts");
   if (!existsSync6(cfg)) {
-    await writeFile5(
+    await writeFile4(
       cfg,
       `import { defineConfig } from '@specbook/core'
 
@@ -6129,11 +6297,11 @@ export default defineConfig({
   const envDir = await ensureEnvironmentsDir(cwd);
   const example = join8(envDir, "staging.secrets.env.example");
   if (!existsSync6(example)) {
-    await writeFile5(
+    await writeFile4(
       example,
       "# Copy to staging.secrets.env (gitignored) and fill in. One KEY=value per line.\n# YOUR_API_KEY=\n"
     );
-    await writeFile5(
+    await writeFile4(
       join8(envDir, "staging.env"),
       '# Non-secret variables for the "staging" environment (committed).\n# region=eu-west-1\n'
     );
@@ -6144,7 +6312,7 @@ export default defineConfig({
   pkg.imports = { ...pkg.imports ?? {}, "#api/*": "./.generated/*/index.ts" };
   pkg.scripts = { ...pkg.scripts ?? {} };
   if (!pkg.scripts.prepare) pkg.scripts.prepare = "specbook generate";
-  await writeFile5(pkgPath, `${JSON.stringify(pkg, null, 2)}
+  await writeFile4(pkgPath, `${JSON.stringify(pkg, null, 2)}
 `);
   console.log('\u2713 added the "#api/*" subpath import and a "prepare" script to package.json');
   const gi = join8(cwd, ".gitignore");
@@ -6153,7 +6321,7 @@ export default defineConfig({
     (entry) => !current.split("\n").some((l) => l.trim() === entry)
   );
   if (missing.length) {
-    await writeFile5(
+    await writeFile4(
       gi,
       `${current}${current.endsWith("\n") || !current ? "" : "\n"}${missing.join("\n")}
 `
@@ -6165,7 +6333,7 @@ export default defineConfig({
 // src/commands/preview.ts
 import { spawn } from "child_process";
 import { existsSync as existsSync7, readFileSync } from "fs";
-import { mkdir as mkdir5, mkdtemp, rm as rm2, symlink, writeFile as writeFile6 } from "fs/promises";
+import { mkdir as mkdir5, mkdtemp, rm as rm2, symlink, writeFile as writeFile5 } from "fs/promises";
 import { createRequire as createRequire3 } from "module";
 import { tmpdir } from "os";
 import { dirname as dirname4, extname, join as join10, resolve as resolve7 } from "path";
@@ -6203,6 +6371,14 @@ async function devCommand(project, port = 5173) {
   });
   await server.listen();
   server.printUrls();
+  const signIn = Object.entries(project.config.auth ?? {}).filter(([, p]) => p.oauth);
+  const url = server.resolvedUrls?.local[0];
+  if (signIn.length && url) {
+    console.log(
+      `  OAuth redirect URI to register for ${signIn.map(([n]) => n).join(", ")}: ${url}
+  (it follows the port; pass --port to keep it the same between runs)`
+    );
+  }
   return server;
 }
 async function buildCommand(project, outDir) {
@@ -6247,7 +6423,7 @@ async function copyViewer(project, outDir, viewerDir = resolve6(uiRoot(), "dist-
 
 // src/commands/preview.ts
 var isUrl2 = (s) => /^https?:\/\//i.test(s);
-var slug2 = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "api";
+var slug3 = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "api";
 async function link(root, name) {
   try {
     let dir = dirname4(createRequire3(import.meta.url).resolve(name));
@@ -6270,8 +6446,11 @@ async function previewCommand(source, o = {}) {
   console.log(`Reading ${source} \u2026`);
   const api = await SwaggerParser2.parse(spec);
   const title = api.info?.title ?? "API";
-  const service = slug2(title);
-  const baseUrl = liveBaseUrl(api, source);
+  const service = slug3(title);
+  const { servers } = openApiServers(api, source);
+  const baseUrl = Object.fromEntries(servers.map((s) => [s.name, s.url]));
+  const where = servers.length === 0 ? "" : servers.length === 1 && servers[0]?.name === "live" ? `, live calls go to ${servers[0].url}` : `
+  Environments: ${servers.map((s) => `${s.name} \u2192 ${s.url}`).join(", ")}`;
   const root = await mkdtemp(join10(tmpdir(), "specbook-preview-"));
   const cleanup = () => rm2(root, { recursive: true, force: true }).catch(() => {
   });
@@ -6284,9 +6463,9 @@ async function previewCommand(source, o = {}) {
     const ext = /ya?ml/.test(extname(new URL(source).pathname)) ? ".yaml" : ".json";
     specFile = join10(root, `openapi/api${ext}`);
     await mkdir5(dirname4(specFile), { recursive: true });
-    await writeFile6(specFile, await res.text());
+    await writeFile5(specFile, await res.text());
   }
-  const { auth, secrets, defaultProfile } = authFromSpec(api);
+  const { auth, secrets, defaultProfile } = authFromSpec(api, source);
   const config = {
     project: service,
     secrets,
@@ -6294,22 +6473,20 @@ async function previewCommand(source, o = {}) {
     services: {
       [service]: {
         spec: specFile,
-        baseUrl: baseUrl ? { live: baseUrl } : {},
+        baseUrl,
         ...defaultProfile ? { auth: defaultProfile } : {}
       }
     }
   };
   const configFile = join10(root, ".specbook/specbook.config.ts");
   await mkdir5(dirname4(configFile), { recursive: true });
-  await writeFile6(configFile, `export default ${JSON.stringify(config, null, 2)}
+  await writeFile5(configFile, `export default ${JSON.stringify(config, null, 2)}
 `);
   await link(root, "@specbook/core");
   await link(root, "@faker-js/faker");
   console.log(`Generating "${title}" \u2026`);
   const out = await generateToDisk({ spec: specFile, service, outDir: join10(root, ".generated") });
-  console.log(
-    `\u2713 ${out.operations.length} operations${baseUrl ? `, live calls go to ${baseUrl}` : ""}`
-  );
+  console.log(`\u2713 ${out.operations.length} operations${where}`);
   const project = { root, configFile, config };
   const server = await devCommand(project, o.port ?? 5173);
   const url = server.resolvedUrls?.local[0];
@@ -6326,7 +6503,7 @@ async function previewCommand(source, o = {}) {
 }
 
 // src/commands/run.ts
-import { readFile as readFile11, writeFile as writeFile7 } from "fs/promises";
+import { readFile as readFile11, writeFile as writeFile6 } from "fs/promises";
 import { createRequire as createRequire4 } from "module";
 import { join as join13, resolve as resolve10 } from "path";
 import { pathToFileURL } from "url";
@@ -6538,7 +6715,7 @@ Set them as environment variables, or in .specbook/environments/${o.env}.secrets
     const [kind, path] = spec.split(/:(.*)/s);
     if (kind === "ndjson") continue;
     const text = kind === "json" ? toJson(results) : kind === "junit" ? toJUnit(results) : kind === "github" ? formatGithub(results) : formatPretty(results);
-    if (path) await writeFile7(resolve10(path), `${text}
+    if (path) await writeFile6(resolve10(path), `${text}
 `);
     else console.log(text);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@specbook/cli",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Specbook command line: init, add, generate, dev, build, run, check, secrets and preview.",
   "keywords": [
     "specbook",
@@ -37,10 +37,10 @@
   "dependencies": {
     "@apidevtools/swagger-parser": "10.1.1",
     "@faker-js/faker": "9.3.0",
-    "@specbook/codegen": "0.1.0",
-    "@specbook/core": "0.1.0",
-    "@specbook/ui": "0.1.0",
-    "@specbook/vite": "0.1.0",
+    "@specbook/codegen": "0.2.0",
+    "@specbook/core": "0.2.0",
+    "@specbook/ui": "0.2.0",
+    "@specbook/vite": "0.2.0",
     "fast-glob": "3.3.2",
     "swagger2openapi": "7.0.8",
     "vite": "8.3.4",