apiblaze 0.18.0 → 0.18.2

package/dist/index.js

@@ -703,7 +703,7 @@ var import_commander = require("commander");
 var import_chalk39 = __toESM(require("chalk"));
 
 // package.json
-var version = "0.18.0";
+var version = "0.18.2";
 
 // src/index.ts
 init_types();

package/dist/react/index.js

@@ -78,6 +78,7 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
   const t = { ...DEFAULTS, ...theme ?? {} };
   const headerBg = t.headerBackground || t.surface;
   const [access, setAccess] = React.useState("ok");
+  const [myEmail, setMyEmail] = React.useState(null);
   const [groups, setGroups] = React.useState(null);
   const [users, setUsers] = React.useState([]);
   const [observed, setObserved] = React.useState([]);
@@ -106,6 +107,7 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
     try {
       const d = await call();
       setAccess(d.access === "pending" ? "pending" : "ok");
+      setMyEmail(d.email ?? null);
       setGroups((d.groups ?? []).slice().sort((a, b) => a.name.localeCompare(b.name)));
       setUsers(d.users ?? []);
       setObserved(d.observed ?? []);
@@ -211,10 +213,34 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
         /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { style: { fontSize: 15 }, children: title }),
         access === "ok" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { style: btn("primary", true), disabled: busy, onClick: () => setShowCreate((v) => !v), "aria-label": "Create a new group", children: "+ New group" })
       ] }),
-      access === "pending" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { padding: "28px 20px", textAlign: "center", color: t.muted }, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { fontWeight: 600, color: t.text, marginBottom: 6 }, children: "Admin access pending" }),
-        "You don\u2019t have group-management access for this workspace yet. If you were just added as an admin, it activates on your first sign-in \u2014 try refreshing. Otherwise ask your API provider to add your email as a workspace admin.",
-        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { marginTop: 12 }, children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { style: btn("ghost", true), onClick: load, children: "Refresh" }) })
+      access === "pending" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { padding: "28px 20px", textAlign: "center", color: t.muted, lineHeight: 1.5 }, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { style: { fontWeight: 700, color: t.text, marginBottom: 6, fontSize: 15 }, children: "Admin access required" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { marginBottom: 12 }, children: [
+          "Managing users & groups is limited to ",
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: "workspace admins" }),
+          ". You\u2019re signed in",
+          myEmail ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+            " as ",
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("code", { style: { fontFamily: t.monoFontFamily }, children: myEmail })
+          ] }) : "",
+          ", but this account isn\u2019t an admin yet."
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("ul", { style: { textAlign: "left", maxWidth: 420, margin: "0 auto 12px", paddingLeft: 18 }, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("li", { children: [
+            "If your API provider just made you an admin, it activates the first time you open this \u2014 ",
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("strong", { children: "Refresh" }),
+            "."
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("li", { children: [
+            "Otherwise, ask your API provider to add",
+            myEmail ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [
+              " ",
+              /* @__PURE__ */ (0, import_jsx_runtime.jsx)("code", { style: { fontFamily: t.monoFontFamily }, children: myEmail })
+            ] }) : " your email",
+            " to the workspace\u2019s admin list."
+          ] })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", { style: btn("ghost", true), onClick: load, children: "Refresh" })
       ] }),
       access === "ok" && showCreate && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { style: { display: "flex", gap: 8, padding: "12px 16px", borderBottom: `1px solid ${t.border}` }, children: [
         /* @__PURE__ */ (0, import_jsx_runtime.jsx)(

package/dist/react/index.mjs

@@ -43,6 +43,7 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
   const t = { ...DEFAULTS, ...theme ?? {} };
   const headerBg = t.headerBackground || t.surface;
   const [access, setAccess] = React.useState("ok");
+  const [myEmail, setMyEmail] = React.useState(null);
   const [groups, setGroups] = React.useState(null);
   const [users, setUsers] = React.useState([]);
   const [observed, setObserved] = React.useState([]);
@@ -71,6 +72,7 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
     try {
       const d = await call();
       setAccess(d.access === "pending" ? "pending" : "ok");
+      setMyEmail(d.email ?? null);
       setGroups((d.groups ?? []).slice().sort((a, b) => a.name.localeCompare(b.name)));
       setUsers(d.users ?? []);
       setObserved(d.observed ?? []);
@@ -176,10 +178,34 @@ var UsersGroupsWidget = React.forwardRef(function UsersGroupsWidget2({ endpoint
         /* @__PURE__ */ jsx("strong", { style: { fontSize: 15 }, children: title }),
         access === "ok" && /* @__PURE__ */ jsx("button", { style: btn("primary", true), disabled: busy, onClick: () => setShowCreate((v) => !v), "aria-label": "Create a new group", children: "+ New group" })
       ] }),
-      access === "pending" && /* @__PURE__ */ jsxs("div", { style: { padding: "28px 20px", textAlign: "center", color: t.muted }, children: [
-        /* @__PURE__ */ jsx("div", { style: { fontWeight: 600, color: t.text, marginBottom: 6 }, children: "Admin access pending" }),
-        "You don\u2019t have group-management access for this workspace yet. If you were just added as an admin, it activates on your first sign-in \u2014 try refreshing. Otherwise ask your API provider to add your email as a workspace admin.",
-        /* @__PURE__ */ jsx("div", { style: { marginTop: 12 }, children: /* @__PURE__ */ jsx("button", { style: btn("ghost", true), onClick: load, children: "Refresh" }) })
+      access === "pending" && /* @__PURE__ */ jsxs("div", { style: { padding: "28px 20px", textAlign: "center", color: t.muted, lineHeight: 1.5 }, children: [
+        /* @__PURE__ */ jsx("div", { style: { fontWeight: 700, color: t.text, marginBottom: 6, fontSize: 15 }, children: "Admin access required" }),
+        /* @__PURE__ */ jsxs("div", { style: { marginBottom: 12 }, children: [
+          "Managing users & groups is limited to ",
+          /* @__PURE__ */ jsx("strong", { children: "workspace admins" }),
+          ". You\u2019re signed in",
+          myEmail ? /* @__PURE__ */ jsxs(Fragment, { children: [
+            " as ",
+            /* @__PURE__ */ jsx("code", { style: { fontFamily: t.monoFontFamily }, children: myEmail })
+          ] }) : "",
+          ", but this account isn\u2019t an admin yet."
+        ] }),
+        /* @__PURE__ */ jsxs("ul", { style: { textAlign: "left", maxWidth: 420, margin: "0 auto 12px", paddingLeft: 18 }, children: [
+          /* @__PURE__ */ jsxs("li", { children: [
+            "If your API provider just made you an admin, it activates the first time you open this \u2014 ",
+            /* @__PURE__ */ jsx("strong", { children: "Refresh" }),
+            "."
+          ] }),
+          /* @__PURE__ */ jsxs("li", { children: [
+            "Otherwise, ask your API provider to add",
+            myEmail ? /* @__PURE__ */ jsxs(Fragment, { children: [
+              " ",
+              /* @__PURE__ */ jsx("code", { style: { fontFamily: t.monoFontFamily }, children: myEmail })
+            ] }) : " your email",
+            " to the workspace\u2019s admin list."
+          ] })
+        ] }),
+        /* @__PURE__ */ jsx("button", { style: btn("ghost", true), onClick: load, children: "Refresh" })
       ] }),
       access === "ok" && showCreate && /* @__PURE__ */ jsxs("div", { style: { display: "flex", gap: 8, padding: "12px 16px", borderBottom: `1px solid ${t.border}` }, children: [
         /* @__PURE__ */ jsx(

package/dist/server/index.js

@@ -54,7 +54,6 @@ function createPlaneCore(cfg) {
   function planeFetch(base, method, path, user, opts = {}) {
     const params = new URLSearchParams({ product: "apiblaze", ...opts.query ?? {} });
     const headers = { "X-API-Key": cfg.cpKey, "X-End-User-Id": user.userId };
-    if (user.email) headers["X-End-User-Email"] = String(user.email);
     let body;
     if (opts.body !== void 0) {
       headers["Content-Type"] = "application/json";
@@ -108,7 +107,7 @@ function createApiblazeGroups(cfg) {
         iam("GET", "/users", user, tenant),
         iam("GET", "/observed-identities", user, tenant)
       ]);
-      if (groupsRes.status === 403) return { status: 200, data: { access: "pending", groups: [], users: [], observed: [] } };
+      if (groupsRes.status === 403) return { status: 200, data: { access: "pending", email: user.email ?? null, groups: [], users: [], observed: [] } };
       if (!groupsRes.ok) return { status: groupsRes.status, data: { error: await safeErr(groupsRes) } };
       const g = await groupsRes.json();
       const u = usersRes.ok ? await usersRes.json() : { users: [] };
@@ -206,6 +205,7 @@ function createApiblazeKeys(cfg) {
   const expiresIn = cfg.keyExpiresInSeconds;
   const planeFetch = (method, path, user, opts = {}) => core.planeFetch(base, method, path, user, opts);
   const resolveTenant = (user) => core.resolveTenant(user);
+  const ensureEndUser = (user, tenant) => core.ensureEndUser(user, tenant);
   async function allowedTypesFor(user) {
     const raw = cfg.resolveKeyTypes ? await cfg.resolveKeyTypes(user) : user.keyTypes;
     if (raw === false) return false;
@@ -242,6 +242,7 @@ function createApiblazeKeys(cfg) {
         return { status: 403, data: { error: "You are not allowed to create that key type." } };
       }
       const chosen = op.keyType ?? (eligible.includes("call-only") ? "call-only" : eligible[0]);
+      await ensureEndUser(user, tenant2);
       const body = { tenant: tenant2, key_type_ids: [chosen], environment: "prod" };
       if (typeof expiresIn === "number" && expiresIn > 0) body.expires_in_seconds = expiresIn;
       const r = await planeFetch("POST", "/apikeys", user, { body });

package/dist/server/index.mjs

@@ -26,7 +26,6 @@ function createPlaneCore(cfg) {
   function planeFetch(base, method, path, user, opts = {}) {
     const params = new URLSearchParams({ product: "apiblaze", ...opts.query ?? {} });
     const headers = { "X-API-Key": cfg.cpKey, "X-End-User-Id": user.userId };
-    if (user.email) headers["X-End-User-Email"] = String(user.email);
     let body;
     if (opts.body !== void 0) {
       headers["Content-Type"] = "application/json";
@@ -80,7 +79,7 @@ function createApiblazeGroups(cfg) {
         iam("GET", "/users", user, tenant),
         iam("GET", "/observed-identities", user, tenant)
       ]);
-      if (groupsRes.status === 403) return { status: 200, data: { access: "pending", groups: [], users: [], observed: [] } };
+      if (groupsRes.status === 403) return { status: 200, data: { access: "pending", email: user.email ?? null, groups: [], users: [], observed: [] } };
       if (!groupsRes.ok) return { status: groupsRes.status, data: { error: await safeErr(groupsRes) } };
       const g = await groupsRes.json();
       const u = usersRes.ok ? await usersRes.json() : { users: [] };
@@ -178,6 +177,7 @@ function createApiblazeKeys(cfg) {
   const expiresIn = cfg.keyExpiresInSeconds;
   const planeFetch = (method, path, user, opts = {}) => core.planeFetch(base, method, path, user, opts);
   const resolveTenant = (user) => core.resolveTenant(user);
+  const ensureEndUser = (user, tenant) => core.ensureEndUser(user, tenant);
   async function allowedTypesFor(user) {
     const raw = cfg.resolveKeyTypes ? await cfg.resolveKeyTypes(user) : user.keyTypes;
     if (raw === false) return false;
@@ -214,6 +214,7 @@ function createApiblazeKeys(cfg) {
         return { status: 403, data: { error: "You are not allowed to create that key type." } };
       }
       const chosen = op.keyType ?? (eligible.includes("call-only") ? "call-only" : eligible[0]);
+      await ensureEndUser(user, tenant2);
       const body = { tenant: tenant2, key_type_ids: [chosen], environment: "prod" };
       if (typeof expiresIn === "number" && expiresIn > 0) body.expires_in_seconds = expiresIn;
       const r = await planeFetch("POST", "/apikeys", user, { body });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apiblaze",
-  "version": "0.18.0",
+  "version": "0.18.2",
   "description": "APIblaze CLI — Chat with your APIs, Manage your API keys, users and groups with the APIblaze serverless proxy",
   "keywords": [
     "apiblaze",