apiblaze 0.20.3 → 0.20.5

package/dist/index.js

@@ -932,7 +932,7 @@ var import_commander = require("commander");
 var import_chalk51 = __toESM(require("chalk"));
 
 // package.json
-var version = "0.20.3";
+var version = "0.20.5";
 
 // src/index.ts
 init_types();
@@ -3601,11 +3601,11 @@ async function runRecipeShow(nameArg, opts) {
   console.log(import_chalk25.default.dim("  Sections: --settings  --auth  --transforms  --openapi"));
   console.log();
 }
-function describeCreates(keyTypes, routes, mcp) {
-  const parts = ["1 proxy", "1 tenant"];
+function describeCreates(keyTypes, routes, mcp, includeProxy = true) {
+  const parts = includeProxy ? ["1 proxy", "1 tenant"] : [];
   if (keyTypes) parts.push(`${keyTypes} key type${keyTypes === 1 ? "" : "s"}`);
   if (routes) parts.push(mcp ? `${routes} MCP tools` : `${routes} route${routes === 1 ? "" : "s"}`);
-  return parts.join(", ");
+  return parts.length ? parts.join(", ") : "nothing else";
 }
 function printSection(title, value) {
   console.log(import_chalk25.default.bold(`  ${title}`));
@@ -3701,6 +3701,7 @@ async function runRecipeInstall(nameArg, opts) {
       return;
     }
   }
+  if (recipe.settings) delete recipe.settings.publish_openapi;
   const ctx = { project, tenant: tenant2 };
   if (reuseTenant) {
     recipe = { ...recipe, auth: { app_client: null, provider: null, key_types: [] }, questions: [] };
@@ -4095,7 +4096,7 @@ async function chooseProxyName(slug, asOpt, teamId, interactive) {
       continue;
     }
     if (free === null) console.log(import_chalk26.default.dim("  (could not verify availability; continuing)"));
-    console.log(`  ${import_chalk26.default.cyan("\u2192")} ${import_chalk26.default.bold(`https://${name}.abz.run`)}  ${import_chalk26.default.dim(`users live in the tenant ${name}users`)}`);
+    console.log(`  ${import_chalk26.default.cyan("\u2192")} ${import_chalk26.default.bold(`https://${name}.abz.run`)}`);
     return name;
   }
 }
@@ -4111,19 +4112,23 @@ function printSummary(recipe, project, tenant2, reuseTenant = false) {
   const hosts = upstreamHosts(recipe);
   const routes = countRoutes(recipe.openapi);
   const keyTypes = recipe.auth?.key_types?.length ?? 0;
-  const questions = recipe.questions?.length ?? 0;
+  const questions = reuseTenant ? 0 : recipe.questions?.length ?? 0;
+  const row = (label3, value, note) => {
+    console.log(`  ${import_chalk26.default.dim(label3.padEnd(21))}${value}${note ? import_chalk26.default.dim(`  ${note}`) : ""}`);
+  };
+  console.log();
+  console.log(import_chalk26.default.bold("  This will:"));
   console.log();
-  if (hosts.length) console.log(`  ${import_chalk26.default.dim("sends requests to")}  ${hosts.join(", ")}`);
-  console.log(`  ${import_chalk26.default.dim("creates          ")}  ${describeCreates(keyTypes, routes, recipe.settings.mcp_enabled === true)}`);
-  console.log(`  ${import_chalk26.default.dim("asks you for     ")}  ${reuseTenant ? "nothing" : `${questions} value${questions === 1 ? "" : "s"}`}`);
+  row("create a proxy", import_chalk26.default.bold(project), `at https://${project}.abz.run`);
+  row("for its users", import_chalk26.default.bold(tenant2), reuseTenant ? "(one you already have)" : "(a new tenant)");
+  if (hosts.length) row("sending requests to", hosts.join(", "));
+  row("and set up", describeCreates(keyTypes, routes, recipe.settings.mcp_enabled === true, false));
+  row("asking you for", questions ? `${questions} value${questions === 1 ? "" : "s"}` : "nothing");
   if (reuseTenant) {
-    console.log(`  ${import_chalk26.default.dim("users live in    ")}  ${tenant2} ${import_chalk26.default.dim("(existing \u2014 its login is used as it is)")}`);
-    console.log(import_chalk26.default.dim(`  ${" ".repeat(17)}  the recipe's own login setup is not applied`));
-  }
-  if (recipe.settings.publish_openapi === true) {
-    console.log(`  ${import_chalk26.default.dim("makes public     ")}  this API's spec, at ${project}.abz.run/${recipe.api_version}/openapi.json`);
+    console.log();
+    console.log(import_chalk26.default.dim(`  ${tenant2} is used exactly as it is \u2014 its existing login stays, and this`));
+    console.log(import_chalk26.default.dim("  recipe's own login setup is not applied."));
   }
-  console.log(import_chalk26.default.dim(`  ${"users live in".padEnd(17)}  ${tenant2}`));
   console.log();
 }
 function declineAll(items) {
@@ -9825,6 +9830,36 @@ async function opCall(call) {
   }
   return data;
 }
+var OP_COMMANDS = [
+  { cmd: "op latency", blurb: "which FEATURE is slow, and what inside it", extra: "--hours N --team T --project P" },
+  { cmd: "op latency slow", blurb: "slowest requests, each with a request id you can look up", extra: "--min-ms N" },
+  { cmd: "op latency llm", blurb: "chat timing by provider/model, tokens, credit-reserve cost" },
+  { cmd: "op mark", blurb: 'record "I changed something significant just now"', extra: 'apiblaze op mark "cached tenant count"' },
+  { cmd: "op latency compare", blurb: "latency before vs after the last mark, equal windows", extra: "--hours N" },
+  { cmd: "op credits", blurb: "list credit wallets across all teams" },
+  { cmd: "op residue", blurb: "external-store residue report (Upstash + Neon/OpenFGA) \u2014 dry run, deletes nothing" },
+  { cmd: "op sweep", blurb: "delete the orphans the residue report found", extra: "asks first; -y to skip" }
+];
+function renderOpCommands() {
+  const width = Math.max(...OP_COMMANDS.map((c) => c.cmd.length)) + 10;
+  const lines = OP_COMMANDS.map((c) => {
+    const left = `  ${import_chalk50.default.cyan(`apiblaze ${c.cmd}`)}`;
+    const pad = " ".repeat(Math.max(1, width - c.cmd.length));
+    return `${left}${pad}${c.blurb}${c.extra ? " " + import_chalk50.default.dim(`(${c.extra})`) : ""}`;
+  });
+  return [
+    import_chalk50.default.bold("Operator commands"),
+    ...lines,
+    "",
+    import_chalk50.default.dim("  Operators only. The gate is server-side (dashboard /api/cli/op checks the"),
+    import_chalk50.default.dim("  signed-in email, admin-api re-checks with operatorGate) \u2014 a patched CLI just"),
+    import_chalk50.default.dim("  gets 403s. Every op call is read-only except `op sweep`."),
+    "",
+    import_chalk50.default.dim("  Not a CLI command: to prune all non-CP data run scripts/nuke-but-cp.sh --apply --sweep"),
+    import_chalk50.default.dim("  in the repo. Operator dashboards (dlq, thresholds, throttling, pricing, billing,"),
+    import_chalk50.default.dim("  agent-spend, teams, tests, leak-detection, lifecycle) live at /operator/* in the app.")
+  ].join("\n");
+}
 function printResidue(report, applied) {
   const up = report?.upstash ?? {};
   const fga = report?.fga ?? {};
@@ -9888,7 +9923,7 @@ function printResidue(report, applied) {
   for (const e of ghosts?.errors ?? []) console.log(import_chalk50.default.red(`    error: ${e}`));
   console.log();
 }
-async function runOp(sub, opts = {}) {
+async function runOp(sub, opts = {}, view) {
   if (!loadCredentials()) {
     console.log(import_chalk50.default.dim("Not logged in. Run `apiblaze login`."));
     return;
@@ -9900,12 +9935,9 @@ async function runOp(sub, opts = {}) {
   switch (sub) {
     case void 0:
     case "menu": {
-      console.log(import_chalk50.default.bold("\nOperator menu"));
-      console.log(`  ${import_chalk50.default.cyan("apiblaze op residue")}        external-store residue report (Upstash + Neon/OpenFGA, dry-run)`);
-      console.log(`  ${import_chalk50.default.cyan("apiblaze op sweep")}          delete the orphans the report shows (asks first; ${import_chalk50.default.dim("-y to skip")})`);
-      console.log(`  ${import_chalk50.default.cyan("apiblaze op credits")}        list credit wallets`);
-      console.log(import_chalk50.default.dim(`  (to prune all non-CP data: run scripts/nuke-but-cp.sh --apply --sweep in the repo)
-`));
+      console.log("");
+      console.log(renderOpCommands());
+      console.log("");
       return;
     }
     case "residue": {
@@ -9940,6 +9972,20 @@ async function runOp(sub, opts = {}) {
       printResidue(result, true);
       return;
     }
+    case "mark": {
+      const label3 = (view ?? "").trim();
+      if (!label3) {
+        console.log(import_chalk50.default.red("Give the change a name:") + import_chalk50.default.cyan(' apiblaze op mark "cached tenant count"'));
+        return;
+      }
+      const res = await opCall({ method: "POST", path: "/operator/latency/mark", body: { label: label3 }, summary: "record change marker" });
+      const ts = new Date(res?.marker?.ts ?? Date.now()).toISOString();
+      console.log(import_chalk50.default.green(`
+  Marked: `) + import_chalk50.default.bold(label3));
+      console.log(import_chalk50.default.dim(`  ${ts}`));
+      console.log(import_chalk50.default.dim(`  Once traffic has run on both sides, compare with: `) + import_chalk50.default.cyan("apiblaze op latency compare") + "\n");
+      return;
+    }
     case "credits": {
       const data = await opCall({ method: "GET", path: "/operator/credits", summary: "list credit wallets" });
       if (opts.json) return void console.log(JSON.stringify(data, null, 2));
@@ -9951,6 +9997,120 @@ async function runOp(sub, opts = {}) {
       }
       return;
     }
+    // ── LATENCY (specs/latency/ §7.4) ─────────────────────────────────────
+    // The blame table first: level 1 (which feature) and level 2 (what inside
+    // it) in one row. `upstream` is excluded from the blame column on purpose —
+    // it is the biggest feature on almost every request, so blaming it would
+    // report "upstream, 94%" forever and tell an operator nothing. The
+    // summary's "us or them" split is where upstream shows up.
+    case "latency": {
+      const qs = new URLSearchParams();
+      const FILTERS = [
+        ["hours", "hours"],
+        ["team", "team"],
+        ["project", "project"],
+        ["apiVersion", "api_version"],
+        ["tenant", "tenant"],
+        ["route", "route"],
+        ["environment", "environment"],
+        ["statusClass", "status_class"],
+        ["minMs", "min_ms"]
+      ];
+      for (const [optKey, queryKey] of FILTERS) {
+        const v = opts[optKey];
+        if (v !== void 0 && v !== null && v !== "") qs.set(queryKey, String(v));
+      }
+      const q = qs.toString() ? `?${qs}` : "";
+      const which = view;
+      if (which === "compare") {
+        const data = await opCall({ method: "GET", path: `/operator/latency/compare${q}`, summary: "latency before/after" });
+        if (opts.json) return void console.log(JSON.stringify(data, null, 2));
+        const b = data.before, a = data.after, d = data.delta;
+        console.log(import_chalk50.default.bold(`
+Before vs after: `) + import_chalk50.default.cyan(data.marker.label));
+        console.log(import_chalk50.default.dim(`  marked ${new Date(data.marker.ts).toISOString()} \xB7 ${data.window_hours}h either side
+`));
+        const row = (name, before, after, delta) => {
+          const arrow = delta === 0 ? "=" : delta < 0 ? "\u2193" : "\u2191";
+          const txt = `${String(before).padStart(6)}ms  \u2192${String(after).padStart(7)}ms   ${arrow}${Math.abs(delta)}ms`;
+          console.log(`  ${name.padEnd(22)}${data.trustworthy ? delta <= 0 ? import_chalk50.default.green(txt) : import_chalk50.default.red(txt) : import_chalk50.default.dim(txt)}`);
+        };
+        console.log(import_chalk50.default.dim("  metric                 before        after      change"));
+        row("total p50", b.total_p50, a.total_p50, d.total_p50);
+        row("total p95", b.total_p95, a.total_p95, d.total_p95);
+        row("apiblaze overhead p50", b.gw_p50, a.gw_p50, d.gw_p50);
+        row("apiblaze overhead p95", b.gw_p95, a.gw_p95, d.gw_p95);
+        console.log(import_chalk50.default.dim(`
+  requests: ${b.requests} before \xB7 ${a.requests} after`));
+        for (const w of data.warnings ?? []) {
+          console.log((data.trustworthy ? import_chalk50.default.dim : import_chalk50.default.yellow)(`  ${data.trustworthy ? "\xB7" : "\u26A0"} ${w}`));
+        }
+        console.log("");
+        return;
+      }
+      if (which === "slow") {
+        const data = await opCall({ method: "GET", path: `/operator/latency/slow${q}`, summary: "slowest requests" });
+        if (opts.json) return void console.log(JSON.stringify(data, null, 2));
+        const rows2 = data?.rows ?? [];
+        if (!rows2.length) return void console.log(import_chalk50.default.dim("No requests over the threshold in that window."));
+        console.log(import_chalk50.default.bold(`
+Slowest requests \u2014 last ${data.window_hours}h, over ${data.min_ms}ms
+`));
+        console.log(import_chalk50.default.dim("  total   ours   theirs  blame                 request id"));
+        for (const r of rows2.slice(0, 30)) {
+          console.log(
+            `  ${String(Math.round(r.duration_ms)).padStart(6)}  ${String(Math.round(r.gateway_ms)).padStart(5)}  ${String(Math.round(r.upstream_ttfb_ms)).padStart(6)}  ${import_chalk50.default.yellow(`${r.slow_gw_feature || "-"}\u2192${r.slow_dep || "-"}`.padEnd(20))}  ${import_chalk50.default.dim(r.request_id || "")}`
+          );
+        }
+        console.log(import_chalk50.default.dim(`
+  The last column is the request id (Cloudflare calls it a "cf-ray"). Look one up with`));
+        console.log(import_chalk50.default.dim(`  \`apiblaze logs\` for that request's exact per-feature breakdown \u2014 unsampled, unlike the table above.
+`));
+        return;
+      }
+      if (which === "llm") {
+        const data = await opCall({ method: "GET", path: `/operator/latency/llm${q}`, summary: "llm latency" });
+        if (opts.json) return void console.log(JSON.stringify(data, null, 2));
+        const rows2 = data?.rows ?? [];
+        if (!rows2.length) return void console.log(import_chalk50.default.dim("No LLM traffic in that window."));
+        console.log(import_chalk50.default.bold(`
+LLM timing \u2014 last ${data.window_hours}h
+`));
+        console.log(import_chalk50.default.dim("  requests   gen p95   reserve p95   in/out tokens p95   model"));
+        for (const r of rows2) {
+          console.log(
+            `  ${String(Math.round(r.requests)).padStart(8)}   ${String(Math.round(r.gen_p95_ms)).padStart(6)}ms   ${String(Math.round(r.reserve_p95_ms)).padStart(9)}ms   ${String(Math.round(r.input_tokens_p95)).padStart(6)}/${String(Math.round(r.output_tokens_p95)).padEnd(6)}   ${r.model || "-"}`
+          );
+        }
+        console.log(import_chalk50.default.dim(`
+  ${data.note}
+`));
+        return;
+      }
+      const [blame, summary] = await Promise.all([
+        opCall({ method: "GET", path: `/operator/latency${q}`, summary: "latency blame table" }),
+        opCall({ method: "GET", path: `/operator/latency/summary${q}`, summary: "latency summary" })
+      ]);
+      if (opts.json) return void console.log(JSON.stringify({ blame, summary }, null, 2));
+      const ov = summary?.apiblaze_overhead_ms ?? {};
+      console.log(import_chalk50.default.bold(`
+Latency \u2014 last ${summary?.window_hours ?? "?"}h, ${Number(summary?.requests ?? 0).toLocaleString()} requests
+`));
+      console.log(`  ${import_chalk50.default.bold("apiblaze overhead")}  p50 ${String(ov.p50 ?? 0).padStart(5)}ms   p95 ${String(ov.p95 ?? 0).padStart(6)}ms   p99 ${String(ov.p99 ?? 0).padStart(6)}ms   ${import_chalk50.default.dim("\u2190 ours")}`);
+      console.log(`  ${import_chalk50.default.bold("upstream ttfb    ")}  ${" ".repeat(24)}p95 ${String(summary?.upstream_ttfb_p95_ms ?? 0).padStart(6)}ms   ${import_chalk50.default.dim("\u2190 theirs")}`);
+      console.log(import_chalk50.default.dim(`  (per-request percentiles \u2014 never subtract one from the other)
+`));
+      const rows = blame?.blame ?? [];
+      if (!rows.length) return void console.log(import_chalk50.default.dim("No latency rows in that window."));
+      console.log(import_chalk50.default.bold("  Which feature ate the time, and what inside it\n"));
+      console.log(import_chalk50.default.dim("   share   p95      feature \u2192 dependency"));
+      for (const r of rows.slice(0, 15)) {
+        const share = `${(r.share * 100).toFixed(1)}%`;
+        console.log(`   ${share.padStart(6)}  ${String(r.p95_ms).padStart(6)}ms  ${import_chalk50.default.yellow(r.feature)} ${import_chalk50.default.dim("\u2192")} ${import_chalk50.default.cyan(r.dep)}`);
+      }
+      console.log("");
+      return;
+    }
     default:
       console.log(import_chalk50.default.red(`Unknown op subcommand '${sub}'. Run \`apiblaze op\` for the menu.`));
   }
@@ -10114,7 +10274,9 @@ apikeys.command("list").description("List control-plane API keys in your team").
 apikeys.command("mint").description("Create a control-plane API key (secret shown once)").option("--desc <text>", "Description").option("--expires-days <n>", "Expiry in days (default 90 server-side)").option("--team <id|name>", "Team (defaults to active team)").option("--json", "Output machine-readable JSON").action(action((opts, cmd) => runKeyMint({ ...cmd.parent?.opts(), ...opts })));
 apikeys.command("revoke").description("Revoke a control-plane API key").argument("<keyId>", "Key id (see `apikeys list`)").option("--team <id|name>", "Team (defaults to active team)").action(action((keyId, opts, cmd) => runKeyRevoke(keyId, { ...cmd.parent?.opts(), ...opts })));
 program.addCommand(apikeys, { hidden: true });
-var op = new import_commander.Command("op").description("Operator menu (platform operators only)").argument("[action]", "residue | sweep | credits (omit for the menu)").option("-y, --yes", "Skip the sweep confirmation prompt").option("--json", "Output machine-readable JSON").action(action((sub, opts) => runOp(sub, opts)));
+var op = new import_commander.Command("op").description("Operator menu (platform operators only)").argument("[action]", "latency | mark | credits | residue | sweep (omit for the menu)").argument("[view]", "for `latency`: slow | llm | compare \xB7 for `mark`: the change name, quoted").option("-y, --yes", "Skip the sweep confirmation prompt").option("--json", "Output machine-readable JSON").option("--hours <n>", "Look-back window in hours (default 1)").option("--team <id>", "Filter to one team").option("--project <name>", "Filter to one proxy").option("--api-version <v>", "Filter to one API version").option("--tenant <name>", "Filter to one tenant").option("--route <path>", "Filter to one route").option("--environment <env>", "Filter to one environment").option("--status-class <c>", "Filter to a status class (2xx/4xx/5xx)").option("--min-ms <n>", "For `latency slow`: minimum duration (default 1000)").action(action((sub, view, opts) => runOp(sub, opts, view))).addHelpText("after", () => `
+${renderOpCommands()}
+`);
 program.addCommand(op, { hidden: true });
 var spec = program.command("spec").description("View or update a proxy's OpenAPI spec (or build one by chatting: apiblaze agent openapi)");
 spec.command("get").description("Print the current OpenAPI document").argument("<project>", "Project name or id").option("--team <id|name>", "Team the project is in").option("--apiversion <version>", "API version").option("--json", "Compact JSON output").action(action((project, opts) => runSpecGet(project, opts)));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apiblaze",
-  "version": "0.20.3",
+  "version": "0.20.5",
   "description": "APIblaze CLI — Chat with your APIs, Manage your API keys, users and groups with the APIblaze serverless proxy",
   "keywords": [
     "apiblaze",