apiblaze 0.17.17 → 0.17.19

package/dist/index.js

@@ -328,7 +328,11 @@ function saveAnonCred(cp_key, team_id, claim_code) {
       claim_code: claim_code ?? prev?.claim_code,
       created_at: prev?.created_at ?? (/* @__PURE__ */ new Date()).toISOString()
     };
-    fs2.writeFileSync(FILE, JSON.stringify(merged, null, 2));
+    fs2.writeFileSync(FILE, JSON.stringify(merged, null, 2), { mode: 384 });
+    try {
+      fs2.chmodSync(FILE, 384);
+    } catch {
+    }
   } catch {
   }
 }
@@ -699,7 +703,7 @@ var import_commander = require("commander");
 var import_chalk38 = __toESM(require("chalk"));
 
 // package.json
-var version = "0.17.17";
+var version = "0.17.19";
 
 // src/index.ts
 init_types();
@@ -5226,15 +5230,22 @@ var CLIENT_ROUND_CAP = 12;
 function chatUrl(p) {
   return `https://${p.mcpHost}/${p.version}/${p.environment}/runtime-chat`;
 }
+function maskKey(k) {
+  return k.length <= 8 ? "****" : `${k.slice(0, 4)}\u2026${k.slice(-4)}`;
+}
+var revealAuth = false;
 function renderToolEvents(events, dpKey) {
   for (const e of events ?? []) {
     const ok = typeof e.status === "number" ? e.status < 400 : String(e.status).toLowerCase() === "ok";
     const mark = ok ? import_chalk33.default.green("\u2713") : import_chalk33.default.red("\u2717");
     console.log(`  ${mark} ${import_chalk33.default.cyan(e.name)} ${import_chalk33.default.dim(`(${e.status}, ${e.ms}ms)`)}`);
     if (isVerbose() && e.method && e.url) {
-      const auth = dpKey ? ` \\
-        -H 'X-API-Key: ${maskSecret(dpKey)}'` : "";
-      console.log(import_chalk33.default.dim(`      curl -sS -X ${e.method} '${e.url}'${auth}`));
+      console.log(import_chalk33.default.dim(`      curl -sS -X ${e.method} '${e.url}'${dpKey ? " \\" : ""}`));
+      if (dpKey) {
+        const keyLine = `        -H 'X-API-Key: ${revealAuth ? dpKey : maskKey(dpKey)}'`;
+        const hint = revealAuth ? "" : import_chalk33.default.yellow("  \u2190 /showauth will reveal this");
+        console.log(import_chalk33.default.dim(keyLine) + hint);
+      }
     }
   }
 }
@@ -5387,8 +5398,8 @@ async function mintDurableProxyKey(teamId, tenant2) {
   const out = await admin({
     method: "POST",
     path: `/teams/${encodeURIComponent(teamId)}/tenants/${encodeURIComponent(tenant2)}/admin/keys`,
-    body: { key_type: "apiblaze-consumer-admin", environment: "prod" },
-    // no expiry → durable
+    body: { permissions: ["call", "wallet"], environment: "prod" },
+    // key_model §2: call the API + spend the team wallet; non-expiring service key
     summary: "Mint a durable data-plane key for apichat"
   });
   if (!out?.key) throw new Error("key mint returned no key");
@@ -5405,7 +5416,7 @@ async function openServerProxy(project) {
   if (!dpKey) {
     console.log(import_chalk33.default.dim(`  Minting an API key for tenant ${import_chalk33.default.bold(tenant2)} to query project ${import_chalk33.default.bold(project.projectName)}\u2026`));
     dpKey = await mintDurableProxyKey(project.teamId, tenant2);
-    console.log(`  ${import_chalk33.default.green("\u2714")} API key: ${import_chalk33.default.dim(maskSecret(dpKey))}`);
+    console.log(`  ${import_chalk33.default.green("\u2714")} API key: ${import_chalk33.default.dim(maskKey(dpKey))}`);
   }
   const p = {
     projectId: project.projectId,
@@ -5610,8 +5621,13 @@ async function runRepl(p, initialMessages) {
       }
       continue;
     }
+    if (text === "/showauth") {
+      revealAuth = !revealAuth;
+      console.log(import_chalk33.default.dim(revealAuth ? "  The real API key will be shown in the next call's curl. /showauth again to re-mask." : "  API key re-masked."));
+      continue;
+    }
     if (text.startsWith("/")) {
-      console.log(import_chalk33.default.dim("  Commands: /login /claim /exit"));
+      console.log(import_chalk33.default.dim("  Commands: /login /claim /showauth /exit"));
       continue;
     }
     await replTurn(p, messages, text);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apiblaze",
-  "version": "0.17.17",
+  "version": "0.17.19",
   "description": "APIblaze CLI — Chat with your APIs, Manage your API keys, users and groups with the APIblaze serverless proxy",
   "keywords": [
     "apiblaze",