apiblaze 0.19.17 → 0.19.19

package/README.md

@@ -33,6 +33,10 @@ npx apiblaze apichat --openapi https://apiblaze.com/pokeapi_openapi.yaml
 # Make an API in one line — no account needed (prints a claim URL)
 npx apiblaze create --target https://api.example.com
 
+# Or build it straight from an OpenAPI spec — a URL or a local file.
+# The routes, the API version and one environment per `servers` entry all come from the spec.
+npx apiblaze create --openapi https://petstore3.swagger.io/api/v3/openapi.json
+
 # Configure how your backend is accessed through the proxy
 npx apiblaze config
 
@@ -114,6 +118,7 @@ Every chat turn shows its cost.
 | Command | What it does |
 |---|---|
 | `apiblaze create --target <url>` | Make an API from a backend (no account needed) |
+| `apiblaze create --openapi <file\|url>` | Make an API from an OpenAPI spec — a local file or a spec URL (`--openapispec` is the same flag) |
 | `apiblaze sidecar` | Route a Next.js app's external `fetch()` calls through APIblaze (one command) |
 | `apiblaze dev [port]` | Put your localhost behind a public URL |
 | `apiblaze login` / `logout` | Sign in / out (logout asks producer or consumer) |

package/dist/index.js

@@ -932,7 +932,7 @@ var import_commander = require("commander");
 var import_chalk44 = __toESM(require("chalk"));
 
 // package.json
-var version = "0.19.17";
+var version = "0.19.19";
 
 // src/index.ts
 init_types();
@@ -1689,6 +1689,9 @@ async function probeLocalServer(port) {
   }
 }
 async function runDev(options) {
+  if (options.newSession && !(loadCredentials() && Date.now() < loadCredentials().expiresAt)) {
+    clearAnonCred();
+  }
   let auth = resolveDevAuth();
   let keyAuth = auth.mode === "key" ? { apiKey: auth.apiKey } : void 0;
   let teamId = "";
@@ -1933,6 +1936,7 @@ ${projects.length} project${projects.length === 1 ? "" : "s"}`));
 
 // src/commands/create.ts
 var import_fs2 = __toESM(require("fs"));
+var import_yaml = require("yaml");
 var import_chalk10 = __toESM(require("chalk"));
 var import_ora5 = __toESM(require("ora"));
 init_auth();
@@ -1948,6 +1952,41 @@ function isHttpUrl(s) {
     return false;
   }
 }
+async function loadOpenapiSource(ref) {
+  let text;
+  if (isHttpUrl(ref)) {
+    const res = await fetch(ref.trim(), {
+      headers: { accept: "application/json, application/yaml, text/yaml, */*" }
+    }).catch((err) => fail(`Could not fetch the OpenAPI spec at ${ref} \u2014 ${err.message}`));
+    if (!res.ok) fail(`Could not fetch the OpenAPI spec at ${ref} (HTTP ${res.status}).`);
+    text = await res.text();
+  } else {
+    try {
+      text = import_fs2.default.readFileSync(ref, "utf8");
+    } catch {
+      fail(`Cannot read the OpenAPI spec "${ref}" \u2014 it is not a readable file, and not an http(s) URL.`);
+    }
+  }
+  if (!text.trim()) fail(`The OpenAPI spec is empty: ${ref}`);
+  let parsed;
+  try {
+    parsed = text.trimStart().startsWith("{") ? JSON.parse(text) : (0, import_yaml.parse)(text);
+  } catch (err) {
+    fail(`Could not parse the OpenAPI spec at ${ref} as JSON or YAML \u2014 ${err.message}`);
+  }
+  const doc = parsed;
+  if (!doc || typeof doc !== "object") {
+    fail(`${ref} is not an OpenAPI/Swagger document.
+       If that link opens a web page, use the raw file URL instead.`);
+  }
+  if (typeof doc.openapi !== "string" && typeof doc.swagger !== "string") {
+    fail(
+      `${ref} has no "openapi" or "swagger" version field, so it is not a usable API description.
+       If the file looks right otherwise, check its first line \u2014 the copy at that URL may be damaged.`
+    );
+  }
+  return text;
+}
 function stripTenantFromPortal(devPortal) {
   try {
     const u = new URL(devPortal);
@@ -2056,12 +2095,7 @@ async function runCreate(opts = {}) {
   let openapiContent = null;
   if (opts.openapi !== void 0) {
     if (opts.target !== void 0) fail("Provide only one of --target or --openapi.");
-    try {
-      openapiContent = import_fs2.default.readFileSync(opts.openapi, "utf8");
-    } catch {
-      fail(`Cannot read --openapi file: ${opts.openapi}`);
-    }
-    if (!openapiContent || !openapiContent.trim()) fail(`--openapi file is empty: ${opts.openapi}`);
+    openapiContent = await loadOpenapiSource(opts.openapi);
   }
   let targetUrl = "";
   if (openapiContent) {
@@ -2186,11 +2220,7 @@ async function runAnonymousCreate(opts) {
     fail("Proxy name must be at least 3 characters (letters and digits only).");
   }
   if (opts.openapi !== void 0) {
-    try {
-      body.openapi = import_fs2.default.readFileSync(opts.openapi, "utf8");
-    } catch {
-      fail(`Cannot read --openapi file: ${opts.openapi}`);
-    }
+    body.openapi = await loadOpenapiSource(opts.openapi);
   }
   if (opts.target && !isHttpUrl(opts.target)) fail("--target must be a valid http(s) URL.");
   let target = opts.target?.trim() || (typeof body.target === "string" ? body.target : "") || (typeof body.target_url === "string" ? body.target_url : "");
@@ -5740,7 +5770,7 @@ var path6 = __toESM(require("path"));
 var crypto2 = __toESM(require("crypto"));
 var import_chalk39 = __toESM(require("chalk"));
 var import_ora21 = __toESM(require("ora"));
-var import_yaml = require("yaml");
+var import_yaml2 = require("yaml");
 init_auth();
 init_anon_cred();
 init_api();
@@ -5843,7 +5873,7 @@ function parseSpec(text) {
     parsed = JSON.parse(text);
   } catch {
     try {
-      parsed = (0, import_yaml.parse)(text);
+      parsed = (0, import_yaml2.parse)(text);
     } catch {
       fail4("Could not parse the spec as JSON or YAML.");
     }
@@ -7467,9 +7497,9 @@ program.command("login").description("Authenticate with APIblaze").option("--tea
     process.exit(1);
   }
 });
-program.command("create").description("Create a new API proxy (no login needed \u2014 without auth it creates an anonymous proxy and prints a claim URL)").option("--name <name>", "Proxy name (becomes <name>.abz.run)").option("--target <url>", "Target URL to forward requests to").option("--openapi <file>", "Create FROM an OpenAPI file instead of --target: routes, API version and environments (one per `servers` entry) all come from the spec").option("--team <id|name>", "Team to create under (defaults to your active team)").option("--auth <type>", "Auth type: api_key | none | oauth", "api_key").option("--identified", "Require every call to identify its end user (X-End-User-Id or a login token); unattributed calls are rejected").option("--iam", "Turn IAM on for the proxy's tenant so users & groups apply to identified calls").option("--apiversion <version>", "API version to create (e.g. 2.0.0). Creating a new version of a proxy you own adds a version to the existing project.").option("--tenant <slug>", "Tenant to attach the proxy to (created if new). Omitted \u2192 your team's most-recently-used tenant.").option("--product <slug>", "Product tag to group this project under in the portal (team-scoped; anonymous create). Defaults to your team's existing/placeholder tag.").option("--display-name <name>", "Human-friendly display name").option("--subdomain <slug>", "Explicit subdomain (defaults to --name)").option("--config <file>", "JSON file with the full request body (anonymous create): requests_auth, login providers + client/server token types, scopes, callback URLs, etc. See apiblaze_anonymous.yaml. Flags override its fields.").option("-y, --yes", "Skip the confirmation prompt").option("--new-session", "Start a fresh anonymous session (do not group with prior anonymous creates)").option("--json", "Output machine-readable JSON (non-interactive)").action(async (opts) => {
+program.command("create").description("Create a new API proxy (no login needed \u2014 without auth it creates an anonymous proxy and prints a claim URL)").option("--name <name>", "Proxy name (becomes <name>.abz.run)").option("--target <url>", "Target URL to forward requests to").option("--openapi <file|url>", "Create FROM an OpenAPI spec instead of --target \u2014 a local file or a URL (e.g. https://pokeapi.co/openapi.yaml). Routes, API version and environments (one per `servers` entry) all come from the spec").option("--openapispec <file|url>", "Alias for --openapi").option("--team <id|name>", "Team to create under (defaults to your active team)").option("--auth <type>", "Auth type: api_key | none | oauth", "api_key").option("--identified", "Require every call to identify its end user (X-End-User-Id or a login token); unattributed calls are rejected").option("--iam", "Turn IAM on for the proxy's tenant so users & groups apply to identified calls").option("--apiversion <version>", "API version to create (e.g. 2.0.0). Creating a new version of a proxy you own adds a version to the existing project.").option("--tenant <slug>", "Tenant to attach the proxy to (created if new). Omitted \u2192 your team's most-recently-used tenant.").option("--product <slug>", "Product tag to group this project under in the portal (team-scoped; anonymous create). Defaults to your team's existing/placeholder tag.").option("--display-name <name>", "Human-friendly display name").option("--subdomain <slug>", "Explicit subdomain (defaults to --name)").option("--config <file>", "JSON file with the full request body (anonymous create): requests_auth, login providers + client/server token types, scopes, callback URLs, etc. See apiblaze_anonymous.yaml. Flags override its fields.").option("-y, --yes", "Skip the confirmation prompt").option("--new-session", "Start a fresh anonymous session (do not group with prior anonymous creates)").option("--json", "Output machine-readable JSON (non-interactive)").action(async (opts) => {
   try {
-    await runCreate(opts);
+    await runCreate({ ...opts, openapi: opts.openapi ?? opts.openapispec });
   } catch (err) {
     await printError(err);
     process.exit(1);
@@ -7493,14 +7523,14 @@ withSetupOptions(sidecar.command("setup").description("Wire a Next.js app to rou
 sidecar.command("approve").description("Route an origin through APIblaze (creates its proxy)").argument("<origin>", "Origin, e.g. api.stripe.com").option("--team <id|name>", "Team (defaults to active team)").option("--json", "Machine-readable output").action(action((origin, opts) => runOriginsApprove(origin, opts)));
 sidecar.command("deny").description("Dismiss a candidate origin so it stops being suggested").argument("<origin>", "Origin, e.g. sentry.io").option("--team <id|name>", "Team (defaults to active team)").action(action((origin, opts) => runOriginsDeny(origin, opts)));
 sidecar.command("remove").description("Un-route an approved origin (deletes its proxy; the app goes direct again)").argument("<origin>", "Origin, e.g. api.stripe.com").option("--team <id|name>", "Team (defaults to active team)").action(action((origin, opts) => runOriginsRemove(origin, opts)));
-program.command("dev").description("Put your localhost behind a public URL (dev tunnel)").argument("[port]", "Local port to tunnel (positional; overrides --port)").option("-p, --port <number>", "Local port to tunnel", "3000").option("--project <nameOrId>", "Tunnel this specific project (skips the picker \u2014 for scripts)").option("-y, --yes", "Skip confirmation prompts (non-interactive)").option("-o, --capture-file <path>", "Stream full request/response traffic to a file (JSON lines)").action(async (port, opts) => {
+program.command("dev").description("Put your localhost behind a public URL (dev tunnel)").argument("[port]", "Local port to tunnel (positional; overrides --port)").option("-p, --port <number>", "Local port to tunnel", "3000").option("--project <nameOrId>", "Tunnel this specific project (skips the picker \u2014 for scripts)").option("-y, --yes", "Skip confirmation prompts (non-interactive)").option("-o, --capture-file <path>", "Stream full request/response traffic to a file (JSON lines)").option("--new-session", "Logged-out only: start a fresh anonymous workspace instead of reusing this machine's (each run = a throwaway proxy)").action(async (port, opts) => {
   try {
     const resolved = parseInt(port ?? opts.port, 10);
     if (Number.isNaN(resolved)) {
       console.error(import_chalk44.default.red(`Invalid port: ${port ?? opts.port}`));
       process.exit(1);
     }
-    await runDev({ port: resolved, project: opts.project, yes: opts.yes, captureFile: opts.captureFile });
+    await runDev({ port: resolved, project: opts.project, yes: opts.yes, captureFile: opts.captureFile, newSession: opts.newSession });
   } catch (err) {
     await printError(err);
     process.exit(1);
@@ -7639,6 +7669,7 @@ Examples:
   $ npx apiblaze apichat --openapi https://pokeapi.co/openapi.yaml  # chat with any API
   $ npx apiblaze agent                                   # just chat
   $ npx apiblaze create --target https://api.example.com # one-line API
+  $ npx apiblaze create --openapi https://pokeapi.co/openapi.yaml  # build it from a spec URL
   $ npx apiblaze dev 3000                                # localhost \u2192 public URL
   $ npx apiblaze throttle myapi --rate 50 --verbose      # configure + show the API call
   $ npx apiblaze consumer login                          # act as a consumer of your API

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apiblaze",
-  "version": "0.19.17",
+  "version": "0.19.19",
   "description": "APIblaze CLI — Chat with your APIs, Manage your API keys, users and groups with the APIblaze serverless proxy",
   "keywords": [
     "apiblaze",