apiblaze 0.18.2 → 0.18.6

package/dist/server/index.d.mts

@@ -73,6 +73,23 @@ interface ApiblazeGroupsConfig {
 }
 type GroupsAction = {
     action: 'snapshot';
+} | {
+    action: 'list-groups';
+    offset?: number;
+    q?: string;
+} | {
+    action: 'search-users';
+    q?: string;
+    limit?: number;
+    offset?: number;
+} | {
+    action: 'list-observed';
+    offset?: number;
+    q?: string;
+} | {
+    action: 'group-members';
+    groupId: string;
+    offset?: number;
 } | {
     action: 'create-group';
     name: string;
@@ -116,6 +133,18 @@ type GroupsAction = {
     email?: string;
     displayName?: string;
     groups?: string[];
+} | {
+    action: 'create-user';
+    ref: string;
+    displayName?: string;
+} | {
+    action: 'list-admins';
+} | {
+    action: 'add-admin';
+    email: string;
+} | {
+    action: 'remove-admin';
+    email: string;
 };
 declare function createApiblazeGroups(cfg: ApiblazeGroupsConfig): {
     handler: (req: Request) => Promise<Response>;

package/dist/server/index.d.ts

@@ -73,6 +73,23 @@ interface ApiblazeGroupsConfig {
 }
 type GroupsAction = {
     action: 'snapshot';
+} | {
+    action: 'list-groups';
+    offset?: number;
+    q?: string;
+} | {
+    action: 'search-users';
+    q?: string;
+    limit?: number;
+    offset?: number;
+} | {
+    action: 'list-observed';
+    offset?: number;
+    q?: string;
+} | {
+    action: 'group-members';
+    groupId: string;
+    offset?: number;
 } | {
     action: 'create-group';
     name: string;
@@ -116,6 +133,18 @@ type GroupsAction = {
     email?: string;
     displayName?: string;
     groups?: string[];
+} | {
+    action: 'create-user';
+    ref: string;
+    displayName?: string;
+} | {
+    action: 'list-admins';
+} | {
+    action: 'add-admin';
+    email: string;
+} | {
+    action: 'remove-admin';
+    email: string;
 };
 declare function createApiblazeGroups(cfg: ApiblazeGroupsConfig): {
     handler: (req: Request) => Promise<Response>;

package/dist/server/index.js

@@ -89,7 +89,14 @@ function createPlaneCore(cfg) {
 function createApiblazeGroups(cfg) {
   if (typeof cfg.getUser !== "function") throw new Error("apiblaze: getUser is required \u2014 map your session to { tenant, userId, email }.");
   const core = createPlaneCore({ cpKey: cfg.cpKey, apikeysBase: cfg.base, iamBase: cfg.iamBase });
-  const iam = (method, path, user, tenant, body) => core.planeFetch(core.iamBase, method, `/v1/admin${path}`, user, { query: { tenant }, body });
+  const iam = (method, path, user, tenant, body, query) => core.planeFetch(core.iamBase, method, `/v1/admin${path}`, user, { query: { tenant, ...query ?? {} }, body });
+  const paging = (o) => {
+    const p = {};
+    if (typeof o.limit === "number") p.limit = String(o.limit);
+    if (typeof o.offset === "number") p.offset = String(o.offset);
+    if (o.q != null && o.q !== "") p.q = o.q;
+    return p;
+  };
   async function context(user) {
     const tenant = await core.resolveTenant(user);
     await core.ensureEndUser(user, tenant);
@@ -102,22 +109,28 @@ function createApiblazeGroups(cfg) {
   async function run(user, op) {
     const { tenant } = await context(user);
     if (op.action === "snapshot") {
-      const [groupsRes, usersRes, observedRes] = await Promise.all([
-        iam("GET", "/groups", user, tenant),
-        iam("GET", "/users", user, tenant),
-        iam("GET", "/observed-identities", user, tenant)
+      const [groupsRes, observedRes] = await Promise.all([
+        iam("GET", "/groups", user, tenant, void 0, { limit: "25" }),
+        iam("GET", "/observed-identities", user, tenant, void 0, { limit: "1" })
       ]);
-      if (groupsRes.status === 403) return { status: 200, data: { access: "pending", email: user.email ?? null, groups: [], users: [], observed: [] } };
+      if (groupsRes.status === 403) return { status: 200, data: { access: "pending", email: user.email ?? null, groups: [], groupTotal: 0, observedNew: 0 } };
       if (!groupsRes.ok) return { status: groupsRes.status, data: { error: await safeErr(groupsRes) } };
       const g = await groupsRes.json();
-      const u = usersRes.ok ? await usersRes.json() : { users: [] };
       const o = observedRes.ok ? await observedRes.json() : {};
       return {
         status: 200,
-        data: { access: "ok", groups: g.groups ?? [], users: u.users ?? [], observed: o.identities ?? o.observed ?? [] }
+        data: { access: "ok", groups: g.groups ?? [], groupTotal: g.total ?? (g.groups?.length ?? 0), observedNew: o.total ?? 0 }
       };
     }
     switch (op.action) {
+      case "list-groups":
+        return pass(await iam("GET", "/groups", user, tenant, void 0, paging({ limit: 25, offset: op.offset, q: op.q })));
+      case "search-users":
+        return pass(await iam("GET", "/users", user, tenant, void 0, paging({ limit: op.limit ?? 20, offset: op.offset, q: op.q })));
+      case "list-observed":
+        return pass(await iam("GET", "/observed-identities", user, tenant, void 0, paging({ limit: 25, offset: op.offset, q: op.q })));
+      case "group-members":
+        return pass(await iam("GET", `/groups/${encodeURIComponent(op.groupId)}`, user, tenant, void 0, paging({ limit: 50, offset: op.offset })));
       case "group-detail": {
         const [detail, subs] = await Promise.all([
           iam("GET", `/groups/${encodeURIComponent(op.groupId)}`, user, tenant),
@@ -172,6 +185,23 @@ function createApiblazeGroups(cfg) {
           display_name: op.displayName,
           groups: op.groups ?? []
         }));
+      case "create-user": {
+        const ref = (op.ref ?? "").trim();
+        if (!ref) return { status: 400, data: { error: "Enter an email or a user id" } };
+        if (ref.includes("@")) {
+          return pass(await iam("POST", "/users", user, tenant, { email: ref, display_name: op.displayName }));
+        }
+        return pass(await iam("POST", "/identities/upsert", user, tenant, { consumer_user_id: ref, display_name: op.displayName }));
+      }
+      // Tenant-admin allowlist — appoint/remove CO-admins by email. This is the
+      // ONLY way admin membership changes (apiblaze_admins is sealed); the plane
+      // enforces the guardrails (producer-pinned + last-admin).
+      case "list-admins":
+        return pass(await iam("GET", "/admin-emails", user, tenant));
+      case "add-admin":
+        return pass(await iam("POST", "/admin-emails", user, tenant, { email: op.email }));
+      case "remove-admin":
+        return pass(await iam("DELETE", `/admin-emails/${encodeURIComponent(op.email)}`, user, tenant));
     }
   }
   async function handler(req) {

package/dist/server/index.mjs

@@ -61,7 +61,14 @@ function createPlaneCore(cfg) {
 function createApiblazeGroups(cfg) {
   if (typeof cfg.getUser !== "function") throw new Error("apiblaze: getUser is required \u2014 map your session to { tenant, userId, email }.");
   const core = createPlaneCore({ cpKey: cfg.cpKey, apikeysBase: cfg.base, iamBase: cfg.iamBase });
-  const iam = (method, path, user, tenant, body) => core.planeFetch(core.iamBase, method, `/v1/admin${path}`, user, { query: { tenant }, body });
+  const iam = (method, path, user, tenant, body, query) => core.planeFetch(core.iamBase, method, `/v1/admin${path}`, user, { query: { tenant, ...query ?? {} }, body });
+  const paging = (o) => {
+    const p = {};
+    if (typeof o.limit === "number") p.limit = String(o.limit);
+    if (typeof o.offset === "number") p.offset = String(o.offset);
+    if (o.q != null && o.q !== "") p.q = o.q;
+    return p;
+  };
   async function context(user) {
     const tenant = await core.resolveTenant(user);
     await core.ensureEndUser(user, tenant);
@@ -74,22 +81,28 @@ function createApiblazeGroups(cfg) {
   async function run(user, op) {
     const { tenant } = await context(user);
     if (op.action === "snapshot") {
-      const [groupsRes, usersRes, observedRes] = await Promise.all([
-        iam("GET", "/groups", user, tenant),
-        iam("GET", "/users", user, tenant),
-        iam("GET", "/observed-identities", user, tenant)
+      const [groupsRes, observedRes] = await Promise.all([
+        iam("GET", "/groups", user, tenant, void 0, { limit: "25" }),
+        iam("GET", "/observed-identities", user, tenant, void 0, { limit: "1" })
       ]);
-      if (groupsRes.status === 403) return { status: 200, data: { access: "pending", email: user.email ?? null, groups: [], users: [], observed: [] } };
+      if (groupsRes.status === 403) return { status: 200, data: { access: "pending", email: user.email ?? null, groups: [], groupTotal: 0, observedNew: 0 } };
       if (!groupsRes.ok) return { status: groupsRes.status, data: { error: await safeErr(groupsRes) } };
       const g = await groupsRes.json();
-      const u = usersRes.ok ? await usersRes.json() : { users: [] };
       const o = observedRes.ok ? await observedRes.json() : {};
       return {
         status: 200,
-        data: { access: "ok", groups: g.groups ?? [], users: u.users ?? [], observed: o.identities ?? o.observed ?? [] }
+        data: { access: "ok", groups: g.groups ?? [], groupTotal: g.total ?? (g.groups?.length ?? 0), observedNew: o.total ?? 0 }
       };
     }
     switch (op.action) {
+      case "list-groups":
+        return pass(await iam("GET", "/groups", user, tenant, void 0, paging({ limit: 25, offset: op.offset, q: op.q })));
+      case "search-users":
+        return pass(await iam("GET", "/users", user, tenant, void 0, paging({ limit: op.limit ?? 20, offset: op.offset, q: op.q })));
+      case "list-observed":
+        return pass(await iam("GET", "/observed-identities", user, tenant, void 0, paging({ limit: 25, offset: op.offset, q: op.q })));
+      case "group-members":
+        return pass(await iam("GET", `/groups/${encodeURIComponent(op.groupId)}`, user, tenant, void 0, paging({ limit: 50, offset: op.offset })));
       case "group-detail": {
         const [detail, subs] = await Promise.all([
           iam("GET", `/groups/${encodeURIComponent(op.groupId)}`, user, tenant),
@@ -144,6 +157,23 @@ function createApiblazeGroups(cfg) {
           display_name: op.displayName,
           groups: op.groups ?? []
         }));
+      case "create-user": {
+        const ref = (op.ref ?? "").trim();
+        if (!ref) return { status: 400, data: { error: "Enter an email or a user id" } };
+        if (ref.includes("@")) {
+          return pass(await iam("POST", "/users", user, tenant, { email: ref, display_name: op.displayName }));
+        }
+        return pass(await iam("POST", "/identities/upsert", user, tenant, { consumer_user_id: ref, display_name: op.displayName }));
+      }
+      // Tenant-admin allowlist — appoint/remove CO-admins by email. This is the
+      // ONLY way admin membership changes (apiblaze_admins is sealed); the plane
+      // enforces the guardrails (producer-pinned + last-admin).
+      case "list-admins":
+        return pass(await iam("GET", "/admin-emails", user, tenant));
+      case "add-admin":
+        return pass(await iam("POST", "/admin-emails", user, tenant, { email: op.email }));
+      case "remove-admin":
+        return pass(await iam("DELETE", `/admin-emails/${encodeURIComponent(op.email)}`, user, tenant));
     }
   }
   async function handler(req) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apiblaze",
-  "version": "0.18.2",
+  "version": "0.18.6",
   "description": "APIblaze CLI — Chat with your APIs, Manage your API keys, users and groups with the APIblaze serverless proxy",
   "keywords": [
     "apiblaze",