apiblaze 0.17.7 → 0.17.9

package/dist/index.js

@@ -137,9 +137,9 @@ async function createProxyAnonymous(body) {
   }
   return res.json();
 }
-async function apiFetch(path6, options = {}) {
+async function apiFetch(path7, options = {}) {
   const token = getAccessToken();
-  const url = `${DASHBOARD_BASE}${path6}`;
+  const url = `${DASHBOARD_BASE}${path7}`;
   const res = await fetch(url, {
     ...options,
     headers: {
@@ -165,12 +165,12 @@ async function apiFetch(path6, options = {}) {
   }
   return res.json();
 }
-async function agentCall(path6, method, body) {
+async function agentCall(path7, method, body) {
   const token = getAccessToken();
   const res = await fetch(`${DASHBOARD_BASE}/api/cli/agents`, {
     method: "POST",
     headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}` },
-    body: JSON.stringify({ path: path6, method, body })
+    body: JSON.stringify({ path: path7, method, body })
   });
   let data = null;
   try {
@@ -699,7 +699,7 @@ var import_commander = require("commander");
 var import_chalk37 = __toESM(require("chalk"));
 
 // package.json
-var version = "0.17.7";
+var version = "0.17.9";
 
 // src/index.ts
 init_types();
@@ -949,11 +949,11 @@ function decodeJwt(token) {
     return null;
   }
 }
-function maskPath(path6) {
-  const q = path6.indexOf("?");
-  if (q < 0) return path6;
-  const base = path6.slice(0, q);
-  const query = path6.slice(q + 1);
+function maskPath(path7) {
+  const q = path7.indexOf("?");
+  if (q < 0) return path7;
+  const base = path7.slice(0, q);
+  const query = path7.slice(q + 1);
   const masked = query.split("&").map((pair) => {
     const eq = pair.indexOf("=");
     if (eq < 0) return pair;
@@ -4715,6 +4715,7 @@ async function runKeyRevoke(keyId, opts) {
 
 // src/commands/apichat.ts
 var fs8 = __toESM(require("fs"));
+var path5 = __toESM(require("path"));
 var crypto2 = __toESM(require("crypto"));
 var import_chalk32 = __toESM(require("chalk"));
 var import_ora16 = __toESM(require("ora"));
@@ -4901,40 +4902,75 @@ function resolveTarget(spec2, opts, sourceUrl) {
     fail4(`Could not resolve servers[0].url ("${raw}").`, "Re-run with --target <upstream base URL>.");
   }
 }
-function scanTargetAuth(spec2, force) {
-  const schemes = spec2.components && spec2.components.securitySchemes || spec2.securityDefinitions || {};
-  const entries2 = Object.entries(schemes);
-  if (!entries2.length) return null;
-  for (const [id, s] of entries2) {
-    const type = String(s && s.type || "").toLowerCase();
-    if (type === "oauth2" || type === "openidconnect") {
-      if (!force) {
-        fail4(
-          `The API's security scheme "${id}" is ${s.type} \u2014 apichat cannot mint an OAuth target token non-interactively.`,
-          "Re-run with --force to provision anyway (you will configure target auth yourself later),\nor use an api_key / bearer scheme."
-        );
+function schemeToAuth(id, s) {
+  const type = String(s && s.type || "").toLowerCase();
+  if (type === "apikey") {
+    const name = String(s.name || "X-API-Key");
+    const loc = String(s.in || "header").toLowerCase();
+    if (loc === "query") return { destination: `param:${name}`, prefix: "", label: `${id} (query "${name}")` };
+    const dest = loc === "cookie" ? "header:Cookie" : `header:${name}`;
+    const prefix = loc === "cookie" ? `${name}=` : "";
+    return { destination: dest, prefix, label: `${id} (${loc} "${name}")` };
+  }
+  if (type === "http") {
+    const scheme = String(s.scheme || "").toLowerCase();
+    if (scheme === "bearer") return { destination: "header:Authorization", prefix: "Bearer ", label: `${id} (bearer token)` };
+    if (scheme === "basic") return { destination: "header:Authorization", prefix: "Basic ", label: `${id} (basic auth)`, basic: true };
+  }
+  return null;
+}
+async function resolveTargetAuth(spec2, opts) {
+  const defs = spec2.components && spec2.components.securitySchemes || spec2.securityDefinitions || {};
+  const req = Array.isArray(spec2.security) ? spec2.security : null;
+  if (!req || req.length === 0) return null;
+  const noneAllowed = req.some((alt) => alt && typeof alt === "object" && Object.keys(alt).length === 0);
+  const seen = /* @__PURE__ */ new Set();
+  const candidates = [];
+  let sawOAuth = false;
+  for (const alt of req) {
+    if (!alt || typeof alt !== "object") continue;
+    for (const name of Object.keys(alt)) {
+      if (seen.has(name)) continue;
+      seen.add(name);
+      const def = defs[name];
+      const t = String(def && def.type || "").toLowerCase();
+      if (t === "oauth2" || t === "openidconnect") {
+        sawOAuth = true;
+        continue;
       }
-      console.log(import_chalk32.default.yellow(`  --force: skipping OAuth scheme "${id}" \u2014 configure target auth later with \`apiblaze config\`.`));
-      return null;
+      const a = def ? schemeToAuth(name, def) : null;
+      if (a) candidates.push(a);
     }
   }
-  for (const [id, s] of entries2) {
-    const type = String(s && s.type || "").toLowerCase();
-    if (type === "apikey") {
-      const name = String(s.name || "X-API-Key");
-      const loc = String(s.in || "header").toLowerCase();
-      if (loc === "query") return { destination: `param:${name}`, prefix: "", label: `${id} (query "${name}")` };
-      const dest = loc === "cookie" ? "header:Cookie" : `header:${name}`;
-      const prefix = loc === "cookie" ? `${name}=` : "";
-      return { destination: dest, prefix, label: `${id} (${loc} "${name}")` };
-    }
-    if (type === "http") {
-      const scheme = String(s.scheme || "").toLowerCase();
-      if (scheme === "bearer") return { destination: "header:Authorization", prefix: "Bearer ", label: `${id} (bearer token)` };
-      if (scheme === "basic") return { destination: "header:Authorization", prefix: "Basic ", label: `${id} (basic auth)`, basic: true };
+  if (candidates.length === 0) {
+    if (noneAllowed) return null;
+    if (sawOAuth && !opts.force) {
+      fail4(
+        "The API requires OAuth (oauth2/openIdConnect) for the target, which apichat cannot mint non-interactively.",
+        "Re-run with --force to provision anyway (configure target auth later with `apiblaze config`),\nor use an api_key / bearer / basic scheme."
+      );
     }
+    if (sawOAuth) console.log(import_chalk32.default.yellow("  --force: skipping OAuth target auth \u2014 configure it later with `apiblaze config`."));
+    return null;
   }
-  return null;
+  if (candidates.length === 1 && !noneAllowed) return candidates[0];
+  const interactive = !!process.stdin.isTTY && !opts.yes;
+  if (!interactive) return noneAllowed ? null : candidates[0];
+  const { default: inquirer3 } = await import("inquirer");
+  const choices = [
+    ...candidates.map((c, i) => ({ name: c.label, value: i })),
+    ...noneAllowed ? [{ name: "None \u2014 the API is public / I'll configure target auth later", value: -1 }] : []
+  ];
+  const { pick: pick2 } = await inquirer3.prompt([
+    {
+      type: "list",
+      name: "pick",
+      message: "This API accepts more than one auth method for the target \u2014 which should the proxy use?",
+      choices,
+      default: noneAllowed ? -1 : 0
+    }
+  ]);
+  return pick2 === -1 ? null : candidates[pick2];
 }
 async function captureTargetSecret(auth, opts) {
   const interactive = !!process.stdin.isTTY;
@@ -4967,65 +5003,92 @@ async function captureTargetSecret(auth, opts) {
   if (!secret) fail4("No credential entered.");
   return secret;
 }
-async function cpPost(anon, path6, body, summary) {
+async function cpPost(anon, path7, body, summary) {
   if (anon) {
     const cred = loadAnonCred();
     if (!cred) throw new Error("Anonymous workspace credential missing.");
-    return cpFetch(cred.cp_key, path6, { method: "POST", body: JSON.stringify(body) });
+    return cpFetch(cred.cp_key, path7, { method: "POST", body: JSON.stringify(body) });
   }
-  return admin({ method: "POST", path: path6, body, summary });
+  return admin({ method: "POST", path: path7, body, summary });
 }
 async function provision(spec2, target, opts) {
   const loggedIn = !!loadCredentials();
   const anon = !loggedIn;
-  let name = opts.name ? normalizeName2(opts.name) : "";
-  if (!name) {
+  const salt = () => Math.random().toString(36).slice(2, 6);
+  let base = opts.name ? normalizeName2(opts.name) : "";
+  if (!base) {
     try {
       const host = new URL(target).hostname;
-      name = normalizeName2(host.split(".")[0]);
-      if (name.length < 3) name = normalizeName2(host);
+      base = normalizeName2(host.split(".")[0]);
+      if (base.length < 3) base = normalizeName2(host);
     } catch {
     }
   }
-  if (!name && spec2.info && typeof spec2.info.title === "string") name = normalizeName2(spec2.info.title);
-  if (!name || name.length < 3) name = "apichat" + Math.random().toString(36).slice(2, 7);
+  if (!base && spec2.info && typeof spec2.info.title === "string") base = normalizeName2(spec2.info.title);
+  if (!base || base.length < 3) base = "apichat";
+  let name = opts.name ? base : `${base}-${salt()}`;
   const spinner = (0, import_ora16.default)("Provisioning an api_key proxy...").start();
   let result;
-  try {
-    if (loggedIn) {
-      const creds = loadCredentials();
-      result = await createProxy({
-        name,
-        target_url: target,
-        auth_type: "api_key",
-        team_id: creds.teamId,
-        ...opts.apiversion ? { api_version: opts.apiversion } : {}
-      });
-    } else {
-      const cred = loadAnonCred();
-      const body = {
-        name,
-        subdomain: name,
-        target,
-        target_url: target,
-        auth_type: "api_key",
-        ...opts.apiversion ? { api_version: opts.apiversion } : {}
-      };
-      if (cred) {
-        result = await cpFetch(cred.cp_key, "/projects", { method: "POST", body: JSON.stringify(body) });
+  for (let attempt = 0; attempt < 4; attempt++) {
+    try {
+      if (loggedIn) {
+        const creds = loadCredentials();
+        result = await createProxy({
+          name,
+          target_url: target,
+          auth_type: "api_key",
+          team_id: creds.teamId,
+          ...opts.apiversion ? { api_version: opts.apiversion } : {}
+        });
       } else {
-        result = await createProxyAnonymous(body);
-        if (result.cp_key && result.team_id) saveAnonCred(result.cp_key, result.team_id, result.claim_code);
+        const cred = loadAnonCred();
+        const body = {
+          name,
+          subdomain: name,
+          target,
+          target_url: target,
+          auth_type: "api_key",
+          ...opts.apiversion ? { api_version: opts.apiversion } : {}
+        };
+        if (cred) {
+          result = await cpFetch(cred.cp_key, "/projects", { method: "POST", body: JSON.stringify(body) });
+        } else {
+          result = await createProxyAnonymous(body);
+          if (result.cp_key && result.team_id) saveAnonCred(result.cp_key, result.team_id, result.claim_code);
+        }
       }
+      spinner.succeed(`Proxy provisioned${name !== base ? ` as "${name}"` : ""}.`);
+      break;
+    } catch (err) {
+      const status = err instanceof ApiError ? err.status : void 0;
+      const collision = err instanceof ApiError && (err.status === 409 || /exist|taken|available/i.test(err.message));
+      if (collision && attempt < 3) {
+        name = `${base}-${salt()}`;
+        continue;
+      }
+      if (status === 401) {
+        if (!loggedIn && attempt < 3) {
+          clearAnonCred();
+          continue;
+        }
+        spinner.fail("Provisioning failed.");
+        if (loggedIn) {
+          fail4(
+            "Your login session was rejected \u2014 it may have expired.",
+            "Run `apiblaze login` to refresh, then re-run `apiblaze apichat`."
+          );
+        }
+        fail4(
+          "Could not start an anonymous workspace right now.",
+          "Try again in a moment, or run `apiblaze login` to chat with your account."
+        );
+      }
+      spinner.fail("Provisioning failed.");
+      if (collision) fail4(`A proxy named "${name}" already exists.`, "Re-run with --name <other>.");
+      throw err;
     }
-    spinner.succeed("Proxy provisioned.");
-  } catch (err) {
-    spinner.fail("Provisioning failed.");
-    if (err instanceof ApiError && (err.status === 409 || /exist|taken|available/i.test(err.message))) {
-      fail4(`A proxy named "${name}" already exists.`, "Re-run with --name <other> (or `apiblaze delete` it first).");
-    }
-    throw err;
   }
+  if (!result) fail4("Provisioning failed after retries.");
   const projectId = result.project_id;
   const version2 = result.api_version || "1.0.0";
   const keys = result.api_keys ?? {};
@@ -5133,7 +5196,19 @@ function renderToolEvents(events) {
 function billingLine(billing) {
   if (!billing || typeof billing.cents !== "number") return null;
   const usd = (billing.cents / 100).toFixed(Math.abs(billing.cents - Math.round(billing.cents)) < 1e-9 ? 2 : 4);
-  return import_chalk32.default.magenta(`  \u{1F4B3} $${usd}`) + import_chalk32.default.dim(billing.model ? ` \xB7 ${billing.model}` : "");
+  let line = import_chalk32.default.magenta(`  \u{1F4B3} $${usd}`) + import_chalk32.default.dim(billing.model ? ` \xB7 ${billing.model}` : "");
+  if (typeof billing.credits_remaining === "number") {
+    line += import_chalk32.default.dim(` \xB7 balance $${(billing.credits_remaining / 100).toFixed(2)}`);
+  }
+  return line;
+}
+function freeBudgetWarning(billing, anon) {
+  if (!anon || !billing || typeof billing.free_remaining_cents !== "number") return null;
+  const perTurn = Math.max(billing.cents || 0, 0.02);
+  const left = Math.floor(billing.free_remaining_cents / perTurn);
+  if (left > 8) return null;
+  if (left <= 0) return import_chalk32.default.yellow("  Free messages used up \u2014 `npx apiblaze login` (free) to keep chatting.");
+  return import_chalk32.default.yellow(`  \u26A0 About ${left} free message${left === 1 ? "" : "s"} left \u2014 \`npx apiblaze login\` (free) for more.`);
 }
 function printAssistant(delta) {
   for (let i = delta.length - 1; i >= 0; i--) {
@@ -5207,6 +5282,8 @@ async function replTurn(p, messages, userText) {
     }
     const bl = billingLine(data.billing);
     if (bl) console.log(bl);
+    const warn = freeBudgetWarning(data.billing, p.anon);
+    if (warn) console.log(warn);
     verboseTrace(p, !!llm2);
     if (!data.continue) return;
   }
@@ -5226,10 +5303,144 @@ function renderUpsell(p, upsell) {
   }
   console.log();
 }
-async function runRepl(p) {
+var apichatsPath = () => path5.join(getApiblazeDir(), "apichats.json");
+function loadApichats() {
+  try {
+    const list = JSON.parse(fs8.readFileSync(apichatsPath(), "utf-8"));
+    return Array.isArray(list) ? list : [];
+  } catch {
+    return [];
+  }
+}
+function writeApichats(list) {
+  fs8.mkdirSync(getApiblazeDir(), { recursive: true });
+  fs8.writeFileSync(apichatsPath(), JSON.stringify(list, null, 2), "utf-8");
+  try {
+    fs8.chmodSync(apichatsPath(), 384);
+  } catch {
+  }
+}
+function apichatKey(a) {
+  return `${a.projectId}::${a.version}::${a.environment}`;
+}
+function upsertApichat(entry) {
+  const list = loadApichats();
+  const i = list.findIndex((a) => apichatKey(a) === apichatKey(entry));
+  if (i >= 0) list[i] = { ...list[i], ...entry };
+  else list.unshift(entry);
+  writeApichats(list.slice(0, 30));
+}
+function saveTranscript(p, messages) {
+  const list = loadApichats();
+  const i = list.findIndex((a) => apichatKey(a) === apichatKey(p));
+  if (i < 0) return;
+  list[i].messages = messages.slice(-40);
+  list[i].updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+  writeApichats(list);
+}
+function discoverLocalSpecs() {
+  const cwd = process.cwd();
+  const known = ["openapi.yaml", "openapi.yml", "openapi.json", "swagger.yaml", "swagger.yml", "swagger.json", "api.yaml", "api.yml", "api.json"];
+  const found = [];
+  for (const n of known) {
+    try {
+      if (fs8.statSync(path5.join(cwd, n)).isFile()) found.push(n);
+    } catch {
+    }
+  }
+  try {
+    const files = fs8.readdirSync(cwd).filter((f) => /\.(ya?ml|json)$/i.test(f) && !found.includes(f));
+    for (const f of files.slice(0, 60)) {
+      try {
+        const head = fs8.readFileSync(path5.join(cwd, f), "utf-8").slice(0, 4e3);
+        if (/["']?openapi["']?\s*:/i.test(head) || /["']?swagger["']?\s*:/i.test(head) || /^\s*paths\s*:/im.test(head) || /"paths"\s*:/.test(head)) {
+          found.push(f);
+        }
+      } catch {
+      }
+    }
+  } catch {
+  }
+  return found;
+}
+async function noArgsMenu(opts) {
   const { default: inquirer3 } = await import("inquirer");
-  const messages = [];
+  const saved = loadApichats();
+  const choices = saved.map((a) => ({
+    name: `Chat with ${import_chalk32.default.bold(a.name)} ${import_chalk32.default.dim(`(${a.target})${a.messages && a.messages.length ? ` \xB7 ${a.messages.length} msgs` : ""}`)}`,
+    value: { type: "existing", a }
+  }));
+  choices.push({ name: import_chalk32.default.green("\uFF0B Create a new apichat"), value: { type: "new" } });
+  const { pick: pick2 } = await inquirer3.prompt([
+    { type: "list", name: "pick", message: "What would you like to do?", choices }
+  ]);
+  if (pick2.type === "existing") {
+    const a = pick2.a;
+    let messages = [];
+    if (a.messages && a.messages.length) {
+      const { mode } = await inquirer3.prompt([
+        {
+          type: "list",
+          name: "mode",
+          message: "Resume the previous conversation, or start fresh?",
+          choices: [
+            { name: `Resume (${a.messages.length} messages)`, value: "resume" },
+            { name: "Start fresh", value: "fresh" }
+          ]
+        }
+      ]);
+      if (mode === "resume") messages = a.messages.slice();
+    }
+    const p = {
+      projectId: a.projectId,
+      version: a.version,
+      environment: a.environment,
+      dpKey: a.dpKey,
+      mcpHost: a.mcpHost,
+      proxyUrl: void 0,
+      anon: a.anon
+    };
+    return { p, messages };
+  }
+  const { source } = await inquirer3.prompt([
+    {
+      type: "list",
+      name: "source",
+      message: "Where is the API spec?",
+      choices: [
+        { name: "A local OpenAPI file", value: "file" },
+        { name: "A spec URL", value: "url" },
+        { name: "Discover it from a running API (target URL)", value: "target" }
+      ]
+    }
+  ]);
+  if (source === "file") {
+    const cands = discoverLocalSpecs();
+    if (cands.length) {
+      const { file } = await inquirer3.prompt([
+        {
+          type: "list",
+          name: "file",
+          message: "Pick a spec file (found in this directory):",
+          choices: [...cands.map((f) => ({ name: f, value: f })), { name: "Enter a path manually\u2026", value: "__manual__" }]
+        }
+      ]);
+      opts.openapispec = file === "__manual__" ? (await inquirer3.prompt([{ type: "input", name: "p", message: "Path to the OpenAPI file:" }])).p : file;
+    } else {
+      opts.openapispec = (await inquirer3.prompt([{ type: "input", name: "p", message: "Path to the OpenAPI file:" }])).p;
+    }
+  } else if (source === "url") {
+    opts.openapispec = (await inquirer3.prompt([{ type: "input", name: "u", message: "OpenAPI spec URL:" }])).u;
+  } else {
+    opts.target = (await inquirer3.prompt([{ type: "input", name: "t", message: "Target API base URL:" }])).t;
+  }
+  return null;
+}
+async function runRepl(p, initialMessages) {
+  const { default: inquirer3 } = await import("inquirer");
+  const messages = initialMessages && initialMessages.length ? initialMessages.slice() : [];
   console.log("\n" + import_chalk32.default.cyan.bold("Chat with your API") + import_chalk32.default.dim(`  \xB7 ${p.mcpHost}`));
+  if (messages.length) console.log(import_chalk32.default.dim(`  Resumed \u2014 ${messages.length} prior messages.`));
   const llm2 = loadLlmConfig();
   console.log(
     import_chalk32.default.dim(
@@ -5272,15 +5483,26 @@ async function runRepl(p) {
       continue;
     }
     await replTurn(p, messages, text);
+    saveTranscript(p, messages);
   }
   console.log(import_chalk32.default.dim("\nBye."));
 }
 async function runApichat(opts) {
   console.log(import_chalk32.default.bold("\napichat \u2014 turn any API into a chat\n"));
+  if (!opts.openapispec && !opts.target) {
+    if (!process.stdin.isTTY) {
+      fail4("No spec source. Pass --openapispec <file|url> or --target <url>.", GENERATOR_HINT);
+    }
+    const resumed = await noArgsMenu(opts);
+    if (resumed) {
+      await runRepl(resumed.p, resumed.messages);
+      return;
+    }
+  }
   const { spec: spec2, sourceUrl } = await loadSpec(opts);
   const target = resolveTarget(spec2, opts, sourceUrl);
   console.log(`  ${import_chalk32.default.dim("Target:")} ${import_chalk32.default.bold(target)}`);
-  const auth = scanTargetAuth(spec2, !!opts.force);
+  const auth = await resolveTargetAuth(spec2, opts);
   if (auth && !process.stdin.isTTY && !opts.targetAuthEnv) {
     fail4(
       `This API needs target credentials (${auth.label}) and there is no TTY to prompt.`,
@@ -5289,6 +5511,18 @@ async function runApichat(opts) {
   }
   const p = await provision(spec2, target, opts);
   console.log(`  ${import_chalk32.default.dim("Proxy: ")} ${import_chalk32.default.bold(p.proxyUrl || `${p.projectId} v${p.version}`)}`);
+  upsertApichat({
+    name: p.projectId,
+    target,
+    projectId: p.projectId,
+    version: p.version,
+    environment: p.environment,
+    mcpHost: p.mcpHost,
+    dpKey: p.dpKey,
+    anon: p.anon,
+    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+    updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+  });
   if (auth) {
     const secret = await captureTargetSecret(auth, opts);
     if (secret) await writeTargetAuth(p, auth, secret);
@@ -5467,23 +5701,23 @@ async function runConsumerApikeys(opts) {
 var import_chalk34 = __toESM(require("chalk"));
 var import_ora18 = __toESM(require("ora"));
 var fs9 = __toESM(require("fs"));
-var path5 = __toESM(require("path"));
+var path6 = __toESM(require("path"));
 init_admin();
 init_auth();
 function detectNextProject(root) {
-  const hasConfig = ["next.config.js", "next.config.mjs", "next.config.ts"].some((f) => fs9.existsSync(path5.join(root, f)));
+  const hasConfig = ["next.config.js", "next.config.mjs", "next.config.ts"].some((f) => fs9.existsSync(path6.join(root, f)));
   let hasDep = false;
   try {
-    const pkg = JSON.parse(fs9.readFileSync(path5.join(root, "package.json"), "utf8"));
+    const pkg = JSON.parse(fs9.readFileSync(path6.join(root, "package.json"), "utf8"));
     hasDep = !!(pkg.dependencies?.next || pkg.devDependencies?.next);
   } catch {
   }
-  const appDir = fs9.existsSync(path5.join(root, "app")) || fs9.existsSync(path5.join(root, "src", "app"));
-  const pagesDir = fs9.existsSync(path5.join(root, "pages")) || fs9.existsSync(path5.join(root, "src", "pages"));
+  const appDir = fs9.existsSync(path6.join(root, "app")) || fs9.existsSync(path6.join(root, "src", "app"));
+  const pagesDir = fs9.existsSync(path6.join(root, "pages")) || fs9.existsSync(path6.join(root, "src", "pages"));
   return { found: hasConfig || hasDep || appDir || pagesDir, router: appDir ? "app" : pagesDir ? "pages" : null };
 }
 function upsertEnvLocal(root, token) {
-  const p = path5.join(root, ".env.local");
+  const p = path6.join(root, ".env.local");
   let existing = "";
   try {
     existing = fs9.readFileSync(p, "utf8");
@@ -5505,11 +5739,11 @@ function upsertEnvLocal(root, token) {
   return had ? "rotated" : "created";
 }
 function installSidecarPackage(root) {
-  if (fs9.existsSync(path5.join(root, "node_modules", "apiblaze", "package.json"))) {
+  if (fs9.existsSync(path6.join(root, "node_modules", "apiblaze", "package.json"))) {
     console.log(`  ${import_chalk34.default.green("\u2713")} apiblaze package already installed`);
     return;
   }
-  const has = (f) => fs9.existsSync(path5.join(root, f));
+  const has = (f) => fs9.existsSync(path6.join(root, f));
   const pm = has("bun.lockb") || has("bun.lock") ? { cmd: "bun", add: "add" } : has("pnpm-lock.yaml") ? { cmd: "pnpm", add: "add" } : has("yarn.lock") ? { cmd: "yarn", add: "add" } : { cmd: "npm", add: "install" };
   const spinner = (0, import_ora18.default)(`Installing the apiblaze package (${pm.cmd})\u2026`).start();
   try {
@@ -5522,7 +5756,7 @@ function installSidecarPackage(root) {
 }
 function readEnvKey(root) {
   try {
-    const s = fs9.readFileSync(path5.join(root, ".env.local"), "utf8");
+    const s = fs9.readFileSync(path6.join(root, ".env.local"), "utf8");
     const m = s.match(/^APIBLAZE_API_KEY=(.+)$/m) ?? s.match(/^APIBLAZE_TOKEN=(.+)$/m);
     return m ? m[1].trim() : null;
   } catch {
@@ -5530,7 +5764,7 @@ function readEnvKey(root) {
   }
 }
 function ensureGitignored(root) {
-  const p = path5.join(root, ".gitignore");
+  const p = path6.join(root, ".gitignore");
   let c = "";
   try {
     c = fs9.readFileSync(p, "utf8");
@@ -5539,7 +5773,7 @@ function ensureGitignored(root) {
   if (!/^\.env\.local$/m.test(c) && !/^\.env\*/m.test(c)) fs9.writeFileSync(p, (c && !c.endsWith("\n") ? c + "\n" : c) + ".env.local\n");
 }
 function wireInstrumentation(root) {
-  const existing = ["instrumentation.ts", "instrumentation.js", path5.join("src", "instrumentation.ts")].map((c) => path5.join(root, c)).find((f) => fs9.existsSync(f));
+  const existing = ["instrumentation.ts", "instrumentation.js", path6.join("src", "instrumentation.ts")].map((c) => path6.join(root, c)).find((f) => fs9.existsSync(f));
   const body = `import { register as apiblaze } from "apiblaze/sidecar";
 
 export function register() {
@@ -5547,7 +5781,7 @@ export function register() {
 }
 `;
   if (!existing) {
-    fs9.writeFileSync(path5.join(root, "instrumentation.ts"), body);
+    fs9.writeFileSync(path6.join(root, "instrumentation.ts"), body);
     return "created";
   }
   const cur = fs9.readFileSync(existing, "utf8");
@@ -5637,17 +5871,17 @@ export default async function Page() {
 function generateInspector(root, router) {
   try {
     if (router === "pages") {
-      const dir2 = fs9.existsSync(path5.join(root, "src", "pages")) ? path5.join(root, "src", "pages") : path5.join(root, "pages");
-      const f2 = path5.join(dir2, "abz-inspector.tsx");
+      const dir2 = fs9.existsSync(path6.join(root, "src", "pages")) ? path6.join(root, "src", "pages") : path6.join(root, "pages");
+      const f2 = path6.join(dir2, "abz-inspector.tsx");
       fs9.writeFileSync(f2, INSPECTOR_PAGE);
-      return path5.relative(root, f2);
+      return path6.relative(root, f2);
     }
-    const base = fs9.existsSync(path5.join(root, "src", "app")) ? path5.join(root, "src", "app") : path5.join(root, "app");
-    const dir = path5.join(base, "abz-inspector");
+    const base = fs9.existsSync(path6.join(root, "src", "app")) ? path6.join(root, "src", "app") : path6.join(root, "app");
+    const dir = path6.join(base, "abz-inspector");
     fs9.mkdirSync(dir, { recursive: true });
-    const f = path5.join(dir, "page.tsx");
+    const f = path6.join(dir, "page.tsx");
     fs9.writeFileSync(f, INSPECTOR_PAGE);
-    return path5.relative(root, f);
+    return path6.relative(root, f);
   } catch {
     return null;
   }
@@ -5687,7 +5921,7 @@ async function runAnonymousInit(root, router, opts) {
   console.log(import_chalk34.default.dim(`     From another machine: apiblaze claim ${out.claim_code}  \xB7  expires in 30 days`));
 }
 async function runSidecar(opts) {
-  const root = path5.resolve(opts.dir ?? process.cwd());
+  const root = path6.resolve(opts.dir ?? process.cwd());
   const detected = detectNextProject(root);
   if (!detected.found) {
     console.log(import_chalk34.default.yellow(`No Next.js project detected in ${root}.`));
@@ -5746,7 +5980,7 @@ async function runSidecar(opts) {
   console.log(`  2. The origins your app calls appear as ${import_chalk34.default.bold("candidates")} \u2014 list them:  ${import_chalk34.default.cyan("apiblaze sidecar")}`);
   console.log(`  3. Approve the ones to route:  ${import_chalk34.default.cyan("apiblaze sidecar approve api.stripe.com")}  (or in the dashboard)`);
   console.log(`     \u2026within ~5 min your app starts routing that origin through APIblaze.`);
-  if (inspectorPath) console.log(`  \u2022  Try it now: open ${import_chalk34.default.underline("http://localhost:3000/abz-inspector")} (dev only; rm ${path5.dirname(inspectorPath)} before shipping)`);
+  if (inspectorPath) console.log(`  \u2022  Try it now: open ${import_chalk34.default.underline("http://localhost:3000/abz-inspector")} (dev only; rm ${path6.dirname(inspectorPath)} before shipping)`);
   if (switchingTeam) console.log(import_chalk34.default.dim(`  \u2022  Approved origins are per-team \u2014 re-approve them on ${teamName ?? teamId} with \`apiblaze sidecar approve <origin>\`.`));
   console.log("");
   console.log(import_chalk34.default.dim("  Manage:  apiblaze sidecar            (list/approve/deny/remove)"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apiblaze",
-  "version": "0.17.7",
+  "version": "0.17.9",
   "description": "APIblaze CLI — Chat with your APIs, Manage your API keys, users and groups with the APIblaze serverless proxy",
   "keywords": [
     "apiblaze",