@testsmith/api-spector 0.0.1 → 0.0.3

package/out/main/chunks/{script-runner-Ci5t2-bo.js → script-runner-DIevRMmJ.js}

@@ -73,6 +73,30 @@ function patchGlobals(patch) {
   globals = { ...globals, ...patch };
 }
 const MASTER_KEY_ENV = "API_SPECTOR_MASTER_KEY";
+let secretStore = {};
+let secretStorePath = null;
+async function initSecretStore(userDataPath) {
+  secretStorePath = path.join(userDataPath, "secrets.json");
+  try {
+    const raw = await promises.readFile(secretStorePath, "utf8");
+    secretStore = JSON.parse(raw);
+  } catch {
+    secretStore = {};
+  }
+}
+async function persistSecretStore() {
+  if (!secretStorePath) return;
+  await promises.writeFile(secretStorePath, JSON.stringify(secretStore, null, 2), "utf8");
+}
+function getSafeStorage() {
+  try {
+    const { safeStorage } = require("electron");
+    if (typeof safeStorage?.isEncryptionAvailable === "function") return safeStorage;
+    return null;
+  } catch {
+    return null;
+  }
+}
 function registerSecretHandlers(ipc) {
   ipc.handle("secret:checkMasterKey", () => {
     return { set: Boolean(process.env[MASTER_KEY_ENV]) };
@@ -80,6 +104,14 @@ function registerSecretHandlers(ipc) {
   ipc.handle("secret:setMasterKey", (_e, value) => {
     process.env[MASTER_KEY_ENV] = value;
   });
+  ipc.handle("secret:set", async (_e, ref, value) => {
+    const ss = getSafeStorage();
+    if (!ss || !ss.isEncryptionAvailable()) {
+      throw new Error("OS encryption is not available — set the secret via environment variable instead");
+    }
+    secretStore[ref] = ss.encryptString(value).toString("base64");
+    await persistSecretStore();
+  });
 }
 function decryptSecret(encrypted, salt, iv, password) {
   const saltBuf = Buffer.from(salt, "base64");
@@ -93,6 +125,16 @@ function decryptSecret(encrypted, salt, iv, password) {
   return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
 }
 async function getSecret(ref) {
+  const stored = secretStore[ref];
+  if (stored) {
+    const ss = getSafeStorage();
+    if (ss && ss.isEncryptionAvailable()) {
+      try {
+        return ss.decryptString(Buffer.from(stored, "base64"));
+      } catch {
+      }
+    }
+  }
   return process.env[ref] ?? null;
 }
 function interpolate(str, vars) {
@@ -389,6 +431,7 @@ exports.buildEnvVars = buildEnvVars;
 exports.buildUrl = buildUrl;
 exports.getGlobals = getGlobals;
 exports.getSecret = getSecret;
+exports.initSecretStore = initSecretStore;
 exports.interpolate = interpolate;
 exports.loadGlobals = loadGlobals;
 exports.mergeVars = mergeVars;

package/out/main/index.js

@@ -25,7 +25,7 @@ const electron = require("electron");
 const path = require("path");
 const fs = require("fs");
 const promises = require("fs/promises");
-const scriptRunner = require("./chunks/script-runner-Ci5t2-bo.js");
+const scriptRunner = require("./chunks/script-runner-DIevRMmJ.js");
 const undici = require("undici");
 const crypto = require("crypto");
 const uuid = require("uuid");
@@ -3976,7 +3976,8 @@ function createWindow() {
     if (devToolsShortcut) win.webContents.toggleDevTools();
   });
 }
-electron.app.whenReady().then(() => {
+electron.app.whenReady().then(async () => {
+  await scriptRunner.initSecretStore(electron.app.getPath("userData"));
   registerFileHandlers(electron.ipcMain);
   registerRequestHandler(electron.ipcMain);
   scriptRunner.registerSecretHandlers(electron.ipcMain);

package/out/main/mock.js

@@ -108,7 +108,7 @@ async function main() {
       started++;
     } catch (e) {
       console.error(
-        color("  ✗", C.red, C.bold) + `  ${mock.name}  ` + color(e.message, C.red)
+        color("  ✗", C.red, C.bold) + `  ${mock.name}  ` + color(e instanceof Error ? e.message : String(e), C.red)
       );
     }
   }

package/out/main/runner.js

@@ -3,7 +3,7 @@
 const promises = require("fs/promises");
 const path = require("path");
 const undici = require("undici");
-const scriptRunner = require("./chunks/script-runner-Ci5t2-bo.js");
+const scriptRunner = require("./chunks/script-runner-DIevRMmJ.js");
 require("crypto");
 require("vm");
 require("dayjs");

package/out/preload/index.js

@@ -16,6 +16,8 @@ const api = {
   // ─── Secrets (encrypted, master-key-based) ───────────────────────────────
   checkMasterKey: () => electron.ipcRenderer.invoke("secret:checkMasterKey"),
   setMasterKey: (value) => electron.ipcRenderer.invoke("secret:setMasterKey", value),
+  /** Save a named secret to the OS keychain (safeStorage). */
+  setSecret: (ref, value) => electron.ipcRenderer.invoke("secret:set", ref, value),
   // ─── Globals ──────────────────────────────────────────────────────────────
   getGlobals: () => electron.ipcRenderer.invoke("globals:get"),
   setGlobals: (globals) => electron.ipcRenderer.invoke("globals:set", globals),

package/out/renderer/assets/{index-D2g8SYEA.js → index-CHCrooIl.js}

@@ -8506,7 +8506,7 @@ function useAutoSave() {
     return () => {
       if (colTimerRef.current) clearTimeout(colTimerRef.current);
     };
-  }, [collections]);
+  }, [collections, markCollectionClean]);
   reactExports.useEffect(() => {
     if (!workspace) return;
     if (wsTimerRef.current) clearTimeout(wsTimerRef.current);
@@ -8527,7 +8527,7 @@ function useWorkspaceLoader() {
   const loadEnvironment = useStore((s) => s.loadEnvironment);
   const loadMock = useStore((s) => s.loadMock);
   const setActiveCollection = useStore((s) => s.setActiveCollection);
-  async function applyWorkspace(ws2, path) {
+  const applyWorkspace = reactExports.useCallback(async (ws2, path) => {
     useStore.setState({
       workspace: ws2,
       workspacePath: path,
@@ -8566,7 +8566,7 @@ function useWorkspaceLoader() {
       } catch {
       }
     }
-  }
+  }, [loadCollection, loadEnvironment, loadMock, setActiveCollection]);
   return { applyWorkspace };
 }
 const METHOD_COLORS$1 = {
@@ -9217,7 +9217,7 @@ function CollectionTree() {
   const updateRequestTags = useStore((s) => s.updateRequestTags);
   const openRunner = useStore((s) => s.openRunner);
   const colList = Object.values(collections);
-  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col h-full select-none", children: [
+  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col flex-1 min-h-0 select-none", children: [
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "px-3 py-2 text-xs font-semibold text-surface-400 uppercase tracking-wider flex items-center justify-between flex-shrink-0", children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx("span", { children: "Collections" }),
       /* @__PURE__ */ jsxRuntimeExports.jsx(
@@ -35105,8 +35105,8 @@ function GraphQLEditor({ request, onChange }) {
     onChange({ body: { ...request.body, graphql: { ...gql, ...patch } } });
   }
   const handleInsert = reactExports.useCallback((snippet2) => {
-    updateGql({ query: insertSnippet(gql.query, snippet2) });
-  }, [gql.query]);
+    onChange({ body: { ...request.body, graphql: { ...gql, query: insertSnippet(gql.query, snippet2) } } });
+  }, [gql, onChange, request.body]);
   async function loadSchema() {
     const url = request.url.trim();
     if (!url) return;
@@ -35122,7 +35122,7 @@ function GraphQLEditor({ request, onChange }) {
       setSchemaState("idle");
       setShowExplorer(true);
     } catch (e) {
-      setSchemaError(e.message ?? String(e));
+      setSchemaError(e instanceof Error ? e.message : String(e));
       setSchemaState("error");
     }
   }
@@ -43416,7 +43416,7 @@ function WebSocketPanel({ request }) {
     return () => {
       electron$g.offWsEvents();
     };
-  }, []);
+  }, [addWsMessage, setWsStatus]);
   reactExports.useEffect(() => {
     logEndRef.current?.scrollIntoView({ behavior: "smooth" });
   }, [conn.messages.length]);
@@ -44615,7 +44615,7 @@ function GeneratorPanel() {
       setFiles(generated);
       setSelectedFile(generated[0]?.path ?? null);
     } catch (e) {
-      setError(e?.message ?? String(e));
+      setError(e instanceof Error ? e.message : String(e));
     } finally {
       setGenerating(false);
     }
@@ -44770,7 +44770,7 @@ function HistoryPanel() {
       setTabResponse(activeTabId, entry.response, entry.scriptResult ?? null);
     }
   }
-  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col h-full", children: [
+  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col flex-1 min-h-0", children: [
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "px-2 py-2 border-b border-surface-800 flex gap-1.5 flex-shrink-0", children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx(
         "input",
@@ -46676,27 +46676,32 @@ function RunnerModal() {
   const iterCount = dataSet.rows.length;
   const availableTags = collectionId ? allTagsIn(collectionId, folderId) : [];
   const progressIdxRef = reactExports.useRef(0);
+  const initFilterTagsRef = reactExports.useRef(runnerModal.filterTags);
+  initFilterTagsRef.current = runnerModal.filterTags;
+  const initEnvIdRef = reactExports.useRef(activeEnvId);
+  initEnvIdRef.current = activeEnvId;
   reactExports.useEffect(() => {
-    setFilterTags(runnerModal.filterTags);
-    setSelectedEnvId(activeEnvId ?? "");
+    setFilterTags(initFilterTagsRef.current);
+    setSelectedEnvId(initEnvIdRef.current ?? "");
     setSummary(null);
     progressIdxRef.current = 0;
   }, [runnerModal.open]);
   const toggleTag = (tag) => setFilterTags((prev) => prev.includes(tag) ? prev.filter((t2) => t2 !== tag) : [...prev, tag]);
   const run = reactExports.useCallback(async () => {
+    const ds = colEntry?.data.dataSet ?? { columns: [], rows: [] };
     const baseItems = collectionId ? collectRequests(collectionId, folderId, filterTags) : [];
     if (baseItems.length === 0) return;
     let items2;
-    if (dataSet.rows.length > 0) {
-      items2 = dataSet.rows.flatMap((row, ri2) => {
+    if (ds.rows.length > 0) {
+      items2 = ds.rows.flatMap((row, ri2) => {
         const dataRow = {};
-        dataSet.columns.forEach((col, ci2) => {
+        ds.columns.forEach((col, ci2) => {
           dataRow[col] = row[ci2] ?? "";
         });
         return baseItems.map((item) => ({
           ...item,
           dataRow,
-          iterationLabel: `${ri2 + 1}/${dataSet.rows.length}`
+          iterationLabel: `${ri2 + 1}/${ds.rows.length}`
         }));
       });
     } else {
@@ -46734,7 +46739,7 @@ function RunnerModal() {
       electron$4.offRunProgress();
       setRunnerRunning(false);
     }
-  }, [collectionId, folderId, filterTags, selectedEnvId, environments, globals, colEntry, requestDelay]);
+  }, [collectionId, folderId, filterTags, selectedEnvId, environments, globals, colEntry, requestDelay, workspaceSettings, setRunnerResults, patchRunnerResult, setRunnerRunning]);
   if (!runnerModal.open) return null;
   const envName = selectedEnvId ? environments[selectedEnvId]?.data.name ?? null : null;
   function copyCI(key, content2) {
@@ -47199,7 +47204,7 @@ function MockPanel() {
     } catch {
     }
   }
-  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col h-full", children: [
+  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col flex-1 min-h-0", children: [
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "px-3 py-2 flex items-center justify-between border-b border-surface-800 flex-shrink-0", children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] font-semibold uppercase tracking-widest text-surface-600", children: "Mock Servers" }),
       /* @__PURE__ */ jsxRuntimeExports.jsx(
@@ -47539,7 +47544,7 @@ function MockDetailPanel({ mockId }) {
         setRunning(mock.id, true);
       }
     } catch (e) {
-      setError(e.message ?? String(e));
+      setError(e instanceof Error ? e.message : String(e));
     }
   }
   function addRoute() {
@@ -47749,7 +47754,7 @@ function ContractPanel() {
       setRunning(false);
     }
   }
-  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col h-full overflow-hidden", children: [
+  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col flex-1 min-h-0 overflow-hidden", children: [
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col gap-3 px-3 py-3 border-b border-surface-800 flex-shrink-0", children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex gap-1 bg-surface-800 rounded-lg p-0.5", children: ["consumer", "provider", "bidirectional"].map((m2) => /* @__PURE__ */ jsxRuntimeExports.jsx(
         "button",
@@ -48137,11 +48142,11 @@ function App() {
     electron.getLastWorkspace().then((result) => {
       if (result) applyWorkspace(result.workspace, result.workspacePath);
     });
-  }, []);
+  }, [applyWorkspace]);
   reactExports.useEffect(() => {
     electron.onMockHit(addMockHit);
     return () => electron.offMockHit();
-  }, []);
+  }, [addMockHit]);
   reactExports.useEffect(() => {
     electron.onWsMessage(({ requestId, message }) => {
       addWsMessage(requestId, message);
@@ -48150,7 +48155,7 @@ function App() {
       setWsStatus(requestId, status, error2);
     });
     return () => electron.offWsEvents();
-  }, []);
+  }, [addWsMessage, setWsStatus]);
   reactExports.useEffect(() => {
     function handleKeyDown(e) {
       if (e.key === "k" && (e.metaKey || e.ctrlKey)) {

package/out/renderer/index.html

@@ -4,7 +4,7 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>api Spector</title>
-    <script type="module" crossorigin src="./assets/index-D2g8SYEA.js"></script>
+    <script type="module" crossorigin src="./assets/index-CHCrooIl.js"></script>
     <link rel="stylesheet" crossorigin href="./assets/index-B_l1FCkO.css">
   </head>
   <body>

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@testsmith/api-spector",
   "productName": "api Spector",
-  "version": "0.0.1",
-  "description": "Local-first API testing tool — inspect, test and mock APIs",
+  "version": "0.0.3",
+  "description": "Local-first API testing tool to inspect, test and mock APIs",
   "repository": {
     "type": "git",
     "url": "https://github.com/testsmith-io/api-spector"
@@ -73,7 +73,6 @@
     "immer": "^10.1.1",
     "js-yaml": "^4.1.1",
     "jszip": "^3.10.1",
-    "keytar": "^7.9.0",
     "node-soap": "^1.0.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",

package/readme.md

@@ -1,6 +1,6 @@
 # api Spector
 
-Local-first API testing tool. Inspect, test and mock APIs — secrets stay on your machine.
+Local-first API testing tool. Inspect, test and mock APIs. Secrets stay on your machine.
 
 - GUI built with Electron + React
 - CLI for running tests and mock servers in CI/CD pipelines
@@ -57,7 +57,7 @@ Keeps running until `Ctrl+C`.
 
 ## Workspaces
 
-A workspace is a `.spector` file that references your collections, environments and mock servers. Safe to commit to Git — secrets are encrypted, not stored in plain text.
+A workspace is a `.spector` file that references your collections, environments and mock servers. Safe to commit to Git. Secrets are encrypted, not stored in plain text.
 
 ```
 my-project/
@@ -78,12 +78,12 @@ Secret variables are encrypted with AES-256-GCM using a master password. Set `AP
 export API_SPECTOR_MASTER_KEY="your-password"
 ```
 
-**Windows — PowerShell profile:**
+**Windows (PowerShell profile):**
 ```powershell
 $env:API_SPECTOR_MASTER_KEY = "your-password"
 ```
 
-**Windows — Command Prompt (permanent):**
+**Windows (Command Prompt, permanent):**
 ```cmd
 setx API_SPECTOR_MASTER_KEY "your-password"
 ```