apiblaze 0.19.16 → 0.19.18

package/README.md

@@ -33,6 +33,10 @@ npx apiblaze apichat --openapi https://apiblaze.com/pokeapi_openapi.yaml
 # Make an API in one line — no account needed (prints a claim URL)
 npx apiblaze create --target https://api.example.com
 
+# Or build it straight from an OpenAPI spec — a URL or a local file.
+# The routes, the API version and one environment per `servers` entry all come from the spec.
+npx apiblaze create --openapi https://petstore3.swagger.io/api/v3/openapi.json
+
 # Configure how your backend is accessed through the proxy
 npx apiblaze config
 
@@ -114,6 +118,7 @@ Every chat turn shows its cost.
 | Command | What it does |
 |---|---|
 | `apiblaze create --target <url>` | Make an API from a backend (no account needed) |
+| `apiblaze create --openapi <file\|url>` | Make an API from an OpenAPI spec — a local file or a spec URL (`--openapispec` is the same flag) |
 | `apiblaze sidecar` | Route a Next.js app's external `fetch()` calls through APIblaze (one command) |
 | `apiblaze dev [port]` | Put your localhost behind a public URL |
 | `apiblaze login` / `logout` | Sign in / out (logout asks producer or consumer) |

package/dist/index.js

@@ -137,14 +137,13 @@ async function createProxyAnonymous(body) {
   }
   return res.json();
 }
-async function apiFetch(path8, options = {}) {
-  const token = getAccessToken();
+async function apiFetch(path8, options = {}, auth) {
   const url = `${DASHBOARD_BASE}${path8}`;
   const res = await fetch(url, {
     ...options,
     headers: {
       "Content-Type": "application/json",
-      Authorization: `Bearer ${token}`,
+      ...auth?.apiKey ? { "X-API-Key": auth.apiKey } : { Authorization: `Bearer ${getAccessToken()}` },
       ...options.headers ?? {}
     }
   });
@@ -187,8 +186,8 @@ async function getTeams() {
     return { teamId: teamId ?? "", name: t.name ?? teamId ?? "" };
   }).filter((t) => t.teamId);
 }
-async function getLocalhostTargets(teamId) {
-  return apiFetch(`/api/cli/localhost-targets?team_id=${encodeURIComponent(teamId)}`);
+async function getLocalhostTargets(teamId, auth) {
+  return apiFetch(`/api/cli/localhost-targets?team_id=${encodeURIComponent(teamId)}`, {}, auth);
 }
 async function getProjects(teamId) {
   return apiFetch(`/api/cli/projects?team_id=${encodeURIComponent(teamId)}`);
@@ -220,17 +219,17 @@ async function sidecarInitAnonymous() {
   if (!res.ok) throw new ApiError(res.status, data?.error ?? "init_failed", data);
   return data;
 }
-async function putDevTunnel(payload) {
+async function putDevTunnel(payload, auth) {
   return apiFetch("/api/cli/dev-tunnel", {
     method: "PUT",
     body: JSON.stringify(payload)
-  });
+  }, auth);
 }
-async function deleteDevTunnel(restore) {
+async function deleteDevTunnel(restore, auth) {
   return apiFetch("/api/cli/dev-tunnel", {
     method: "DELETE",
     body: JSON.stringify({ restore })
-  });
+  }, auth);
 }
 var DASHBOARD_BASE, PUBLIC_API_BASE;
 var init_api = __esm({
@@ -933,7 +932,7 @@ var import_commander = require("commander");
 var import_chalk44 = __toESM(require("chalk"));
 
 // package.json
-var version = "0.19.16";
+var version = "0.19.18";
 
 // src/index.ts
 init_types();
@@ -1539,31 +1538,61 @@ function startTunnelClient(opts) {
 }
 
 // src/commands/dev.ts
-async function ensureLoggedIn(interactive) {
-  const existing = loadCredentials();
-  if (existing && Date.now() < existing.expiresAt) return existing;
-  console.log(import_chalk4.default.yellow(existing ? "\nYour APIblaze session has expired." : "\nYou're not logged in to APIblaze."));
-  if (!interactive) {
-    console.error(import_chalk4.default.red("Run `apiblaze login` first."));
-    process.exit(1);
+init_anon_cred();
+function resolveDevAuth() {
+  const creds = loadCredentials();
+  if (creds && Date.now() < creds.expiresAt) return { mode: "session", creds };
+  const anon = loadAnonCred();
+  if (anon?.cp_key) return { mode: "key", apiKey: anon.cp_key, teamId: anon.team_id };
+  return { mode: "none" };
+}
+async function offerAutoCreateAnon(existingKey, port) {
+  if (!process.stdin.isTTY) {
+    console.log(import_chalk4.default.yellow("No projects found with an internal target."));
+    console.log("Run `apiblaze create --target http://localhost:" + port + "` first, or run `apiblaze dev` in an interactive terminal to create one automatically.");
+    return null;
   }
-  const { doLogin } = await import_inquirer.default.prompt([{
+  const { create } = await import_inquirer.default.prompt([{
     type: "confirm",
-    name: "doLogin",
-    message: "Log in now?",
+    name: "create",
+    message: `No project points at this machine. Create a quick dev proxy \u2192 ${import_chalk4.default.bold(`http://localhost:${port}`)} and tunnel it?`,
     default: true
   }]);
-  if (!doLogin) {
-    console.log(import_chalk4.default.dim("Run `apiblaze login` when you're ready."));
-    process.exit(0);
+  if (!create) return null;
+  const spinner = (0, import_ora2.default)("Creating dev proxy (anonymous workspace)...").start();
+  let result = null;
+  let lastErr = null;
+  for (let i = 0; i < 4 && !result?.project_id; i++) {
+    const body = { name: randomProxyName(), target_url: `http://localhost:${port}`, auth_type: "none" };
+    try {
+      result = existingKey ? await cpFetch(existingKey, "/projects", { method: "POST", body: JSON.stringify(body) }) : await createProxyAnonymous(body);
+    } catch (err) {
+      lastErr = err;
+    }
   }
-  await runLogin();
-  const creds = loadCredentials();
-  if (!creds) {
-    console.error(import_chalk4.default.red("Login did not complete. Run `apiblaze login` and try again."));
-    process.exit(1);
+  if (!result?.project_id) {
+    spinner.fail("Failed to create the dev proxy.");
+    throw lastErr instanceof Error ? lastErr : new Error("create failed");
   }
-  return creds;
+  spinner.succeed(import_chalk4.default.green(`Created dev proxy "${result.project_id}".`));
+  let apiKey = existingKey ?? "";
+  if (!existingKey && result.cp_key && result.team_id) {
+    saveAnonCred(result.cp_key, result.team_id, result.claim_code);
+    apiKey = result.cp_key;
+    console.log(import_chalk4.default.dim("  Anonymous workspace created \u2014 claim it into a free account anytime: npx apiblaze claim"));
+  }
+  if (!apiKey) {
+    console.log(import_chalk4.default.red("  The anonymous create returned no workspace key \u2014 run `apiblaze create` once, then retry."));
+    return null;
+  }
+  const anonTeamId = result.team_id ?? loadAnonCred()?.team_id ?? "";
+  const targets = await getLocalhostTargets(anonTeamId, { apiKey }).catch(() => []);
+  const created = targets.find((t) => t.projectId === result.project_id);
+  if (!created) {
+    console.log(import_chalk4.default.yellow("  Proxy created, but it did not appear as a localhost target \u2014 try `apiblaze dev` again."));
+    return null;
+  }
+  return { target: created, apiKey, teamId: anonTeamId };
 }
 async function offerAutoCreate(teamId, port) {
   if (!process.stdin.isTTY) {
@@ -1627,9 +1656,10 @@ function isInternalTarget(url) {
     return false;
   }
 }
-function printTunnelEndpoints(restore, targets) {
+function printTunnelEndpoints(restore, targets, anon) {
   if (restore.length === 0) return;
   console.log(import_chalk4.default.bold("\nYour proxy is live at:"));
+  const domain2 = anon ? "tryabz.run" : "abz.run";
   for (const r of restore) {
     const label3 = targets.find((t) => t.projectId === r.projectId)?.projectName ?? r.projectId;
     console.log(`
@@ -1637,7 +1667,7 @@ function printTunnelEndpoints(restore, targets) {
     const internalEnvs = Object.keys(r.environments ?? {}).filter((e) => isInternalTarget(r.environments[e]?.target));
     const envs = internalEnvs.includes("dev") ? ["dev"] : internalEnvs.length ? internalEnvs : ["dev"];
     for (const env of envs) {
-      console.log(`    ${import_chalk4.default.dim("API: ")} ${import_chalk4.default.cyan(`https://${r.projectId}.abz.run/${r.apiVersion}/${env}/`)}`);
+      console.log(`    ${import_chalk4.default.dim("API: ")} ${import_chalk4.default.cyan(`https://${r.projectId}.${domain2}/${r.apiVersion}/${env}/`)}`);
     }
     if (r.tenant) {
       console.log(`    ${import_chalk4.default.dim("Portal:")} ${import_chalk4.default.cyan(`https://${r.tenant}.portal.apiblaze.com/${r.apiVersion}`)}`);
@@ -1659,24 +1689,34 @@ async function probeLocalServer(port) {
   }
 }
 async function runDev(options) {
-  const creds = await ensureLoggedIn(!!process.stdin.isTTY);
-  const linked = await resolveLinkedTeam({ preferredId: creds.teamId, interactive: !!process.stdin.isTTY });
-  if (!linked) {
-    console.error(import_chalk4.default.red("No team available. Run `apiblaze login` to set up your team."));
-    process.exit(1);
-  }
-  const teamId = linked.teamId;
-  if (linked.teamId !== creds.teamId || linked.teamName !== creds.teamName) {
-    saveCredentials({ ...creds, teamId: linked.teamId, teamName: linked.teamName });
-  }
-  if (linked.teamName) {
-    console.log(`${import_chalk4.default.cyan("\u2192")} Team: ${import_chalk4.default.bold(linked.teamName)}`);
+  let auth = resolveDevAuth();
+  let keyAuth = auth.mode === "key" ? { apiKey: auth.apiKey } : void 0;
+  let teamId = "";
+  if (auth.mode === "session") {
+    const { creds } = auth;
+    const linked = await resolveLinkedTeam({ preferredId: creds.teamId, interactive: !!process.stdin.isTTY });
+    if (!linked) {
+      console.error(import_chalk4.default.red("No team available. Run `apiblaze login` to set up your team."));
+      process.exit(1);
+    }
+    teamId = linked.teamId;
+    if (linked.teamId !== creds.teamId || linked.teamName !== creds.teamName) {
+      saveCredentials({ ...creds, teamId: linked.teamId, teamName: linked.teamName });
+    }
+    if (linked.teamName) {
+      console.log(`${import_chalk4.default.cyan("\u2192")} Team: ${import_chalk4.default.bold(linked.teamName)}`);
+    }
+  } else if (auth.mode === "key") {
+    teamId = auth.teamId;
+    console.log(`${import_chalk4.default.cyan("\u2192")} Anonymous workspace ${import_chalk4.default.dim(`(${teamId})`)} \u2014 claim it anytime: ${import_chalk4.default.bold("npx apiblaze claim")}`);
+  } else {
+    console.log(import_chalk4.default.dim("\u2192 No account needed \u2014 this run uses an anonymous workspace (log in anytime with `apiblaze login`)."));
   }
-  let targets;
-  {
+  let targets = [];
+  if (auth.mode !== "none") {
     const spinner = (0, import_ora2.default)("Fetching your localhost projects...").start();
     try {
-      targets = await getLocalhostTargets(teamId);
+      targets = await getLocalhostTargets(teamId, keyAuth);
       spinner.stop();
     } catch (err) {
       spinner.fail("Failed to fetch projects.");
@@ -1700,7 +1740,18 @@ async function runDev(options) {
     }
     selectedTargets = [match];
   } else if (targets.length === 0) {
-    const created = await offerAutoCreate(teamId, options.port);
+    let created = null;
+    if (auth.mode === "session") {
+      created = await offerAutoCreate(teamId, options.port);
+    } else {
+      const made = await offerAutoCreateAnon(auth.mode === "key" ? auth.apiKey : null, options.port);
+      if (made) {
+        created = made.target;
+        keyAuth = { apiKey: made.apiKey };
+        teamId = made.teamId;
+        auth = { mode: "key", apiKey: made.apiKey, teamId: made.teamId };
+      }
+    }
     if (!created) {
       console.log("Set a project's upstream target to localhost or a private IP, then try again.");
       process.exit(0);
@@ -1763,7 +1814,7 @@ Tunneling ${selectedTargets.length} project(s) to localhost:${options.port}
     try {
       const result = await putDevTunnel({
         targets: selectedTargets.map((t) => ({ projectId: t.projectId, tenantId: t.tenantId }))
-      });
+      }, keyAuth);
       restore = result.restore ?? [];
       connect = result.connect;
       spinner.succeed("Tunnel registered.");
@@ -1772,7 +1823,7 @@ Tunneling ${selectedTargets.length} project(s) to localhost:${options.port}
       throw err;
     }
   }
-  printTunnelEndpoints(restore, selectedTargets);
+  printTunnelEndpoints(restore, selectedTargets, auth.mode === "key");
   const clients = connect.projects.map(
     (projectId) => startTunnelClient({
       connectUrl: connect.url,
@@ -1809,7 +1860,7 @@ Tunneling ${selectedTargets.length} project(s) to localhost:${options.port}
     console.log(import_chalk4.default.gray("\n\nShutting down..."));
     for (const client of clients) client.close();
     captureStream?.end();
-    await deleteDevTunnel(restore).catch(() => {
+    await deleteDevTunnel(restore, keyAuth).catch(() => {
     });
     console.log(import_chalk4.default.green("Tunnel stopped."));
     process.exit(0);
@@ -1897,6 +1948,27 @@ function isHttpUrl(s) {
     return false;
   }
 }
+async function loadOpenapiSource(ref) {
+  let text;
+  if (isHttpUrl(ref)) {
+    const res = await fetch(ref.trim(), {
+      headers: { accept: "application/json, application/yaml, text/yaml, */*" }
+    }).catch((err) => fail(`Could not fetch the OpenAPI spec at ${ref} \u2014 ${err.message}`));
+    if (!res.ok) fail(`Could not fetch the OpenAPI spec at ${ref} (HTTP ${res.status}).`);
+    text = await res.text();
+  } else {
+    try {
+      text = import_fs2.default.readFileSync(ref, "utf8");
+    } catch {
+      fail(`Cannot read the OpenAPI spec "${ref}" \u2014 it is not a readable file, and not an http(s) URL.`);
+    }
+  }
+  if (!text.trim()) fail(`The OpenAPI spec is empty: ${ref}`);
+  if (!/["']?(openapi|swagger|paths)["']?\s*:/i.test(text)) {
+    fail(`That does not look like an OpenAPI/Swagger document (no openapi/swagger/paths): ${ref}`);
+  }
+  return text;
+}
 function stripTenantFromPortal(devPortal) {
   try {
     const u = new URL(devPortal);
@@ -2005,12 +2077,7 @@ async function runCreate(opts = {}) {
   let openapiContent = null;
   if (opts.openapi !== void 0) {
     if (opts.target !== void 0) fail("Provide only one of --target or --openapi.");
-    try {
-      openapiContent = import_fs2.default.readFileSync(opts.openapi, "utf8");
-    } catch {
-      fail(`Cannot read --openapi file: ${opts.openapi}`);
-    }
-    if (!openapiContent || !openapiContent.trim()) fail(`--openapi file is empty: ${opts.openapi}`);
+    openapiContent = await loadOpenapiSource(opts.openapi);
   }
   let targetUrl = "";
   if (openapiContent) {
@@ -2135,11 +2202,7 @@ async function runAnonymousCreate(opts) {
     fail("Proxy name must be at least 3 characters (letters and digits only).");
   }
   if (opts.openapi !== void 0) {
-    try {
-      body.openapi = import_fs2.default.readFileSync(opts.openapi, "utf8");
-    } catch {
-      fail(`Cannot read --openapi file: ${opts.openapi}`);
-    }
+    body.openapi = await loadOpenapiSource(opts.openapi);
   }
   if (opts.target && !isHttpUrl(opts.target)) fail("--target must be a valid http(s) URL.");
   let target = opts.target?.trim() || (typeof body.target === "string" ? body.target : "") || (typeof body.target_url === "string" ? body.target_url : "");
@@ -7416,9 +7479,9 @@ program.command("login").description("Authenticate with APIblaze").option("--tea
     process.exit(1);
   }
 });
-program.command("create").description("Create a new API proxy (no login needed \u2014 without auth it creates an anonymous proxy and prints a claim URL)").option("--name <name>", "Proxy name (becomes <name>.abz.run)").option("--target <url>", "Target URL to forward requests to").option("--openapi <file>", "Create FROM an OpenAPI file instead of --target: routes, API version and environments (one per `servers` entry) all come from the spec").option("--team <id|name>", "Team to create under (defaults to your active team)").option("--auth <type>", "Auth type: api_key | none | oauth", "api_key").option("--identified", "Require every call to identify its end user (X-End-User-Id or a login token); unattributed calls are rejected").option("--iam", "Turn IAM on for the proxy's tenant so users & groups apply to identified calls").option("--apiversion <version>", "API version to create (e.g. 2.0.0). Creating a new version of a proxy you own adds a version to the existing project.").option("--tenant <slug>", "Tenant to attach the proxy to (created if new). Omitted \u2192 your team's most-recently-used tenant.").option("--product <slug>", "Product tag to group this project under in the portal (team-scoped; anonymous create). Defaults to your team's existing/placeholder tag.").option("--display-name <name>", "Human-friendly display name").option("--subdomain <slug>", "Explicit subdomain (defaults to --name)").option("--config <file>", "JSON file with the full request body (anonymous create): requests_auth, login providers + client/server token types, scopes, callback URLs, etc. See apiblaze_anonymous.yaml. Flags override its fields.").option("-y, --yes", "Skip the confirmation prompt").option("--new-session", "Start a fresh anonymous session (do not group with prior anonymous creates)").option("--json", "Output machine-readable JSON (non-interactive)").action(async (opts) => {
+program.command("create").description("Create a new API proxy (no login needed \u2014 without auth it creates an anonymous proxy and prints a claim URL)").option("--name <name>", "Proxy name (becomes <name>.abz.run)").option("--target <url>", "Target URL to forward requests to").option("--openapi <file|url>", "Create FROM an OpenAPI spec instead of --target \u2014 a local file or a URL (e.g. https://pokeapi.co/openapi.yaml). Routes, API version and environments (one per `servers` entry) all come from the spec").option("--openapispec <file|url>", "Alias for --openapi").option("--team <id|name>", "Team to create under (defaults to your active team)").option("--auth <type>", "Auth type: api_key | none | oauth", "api_key").option("--identified", "Require every call to identify its end user (X-End-User-Id or a login token); unattributed calls are rejected").option("--iam", "Turn IAM on for the proxy's tenant so users & groups apply to identified calls").option("--apiversion <version>", "API version to create (e.g. 2.0.0). Creating a new version of a proxy you own adds a version to the existing project.").option("--tenant <slug>", "Tenant to attach the proxy to (created if new). Omitted \u2192 your team's most-recently-used tenant.").option("--product <slug>", "Product tag to group this project under in the portal (team-scoped; anonymous create). Defaults to your team's existing/placeholder tag.").option("--display-name <name>", "Human-friendly display name").option("--subdomain <slug>", "Explicit subdomain (defaults to --name)").option("--config <file>", "JSON file with the full request body (anonymous create): requests_auth, login providers + client/server token types, scopes, callback URLs, etc. See apiblaze_anonymous.yaml. Flags override its fields.").option("-y, --yes", "Skip the confirmation prompt").option("--new-session", "Start a fresh anonymous session (do not group with prior anonymous creates)").option("--json", "Output machine-readable JSON (non-interactive)").action(async (opts) => {
   try {
-    await runCreate(opts);
+    await runCreate({ ...opts, openapi: opts.openapi ?? opts.openapispec });
   } catch (err) {
     await printError(err);
     process.exit(1);
@@ -7588,6 +7651,7 @@ Examples:
   $ npx apiblaze apichat --openapi https://pokeapi.co/openapi.yaml  # chat with any API
   $ npx apiblaze agent                                   # just chat
   $ npx apiblaze create --target https://api.example.com # one-line API
+  $ npx apiblaze create --openapi https://pokeapi.co/openapi.yaml  # build it from a spec URL
   $ npx apiblaze dev 3000                                # localhost \u2192 public URL
   $ npx apiblaze throttle myapi --rate 50 --verbose      # configure + show the API call
   $ npx apiblaze consumer login                          # act as a consumer of your API

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apiblaze",
-  "version": "0.19.16",
+  "version": "0.19.18",
   "description": "APIblaze CLI — Chat with your APIs, Manage your API keys, users and groups with the APIblaze serverless proxy",
   "keywords": [
     "apiblaze",