apiblaze 0.21.0 → 0.21.2

package/dist/index.js

@@ -1291,7 +1291,7 @@ var import_commander = require("commander");
 var import_chalk57 = __toESM(require("chalk"));
 
 // package.json
-var version = "0.21.0";
+var version = "0.21.2";
 
 // src/index.ts
 init_types();
@@ -4864,13 +4864,20 @@ function printTryIt(block, highlights) {
   }
 }
 var VALID_AUTH = ["api_key", "none", "oauth"];
+function planSentence(args) {
+  const { name, auth, families, adminEmail } = args;
+  const doors = auth.doors.length === 2 ? `use an API key for your own server and an ${B.product} login (with GitHub) for people and agents` : auth.doors[0] === "api_key" ? "use an API key" : auth.doors[0] === "oauth" ? auth.ownIssuer ? "use your own login" : `use an ${B.product} login (with GitHub)` : "be open to anyone";
+  const locked = families?.length ? `, lock ${describeFamilies(families.map((f) => f.key)).replace(/ \+ /, " and ")} to whoever created them` : ", stay open to every caller who gets in (no rules yet)";
+  const admin2 = adminEmail ? `, and let ${adminEmail} change anything` : "";
+  return `${name} will ${doors}${locked}${admin2}.`;
+}
 var BOTH_DOORS = (() => {
   const { auth_type, ...bodyPatch } = bothDoorsBody();
   return {
     auth: auth_type,
     doors: ["api_key", "oauth"],
     bodyPatch,
-    summary: "your backend and widget use the API key; agents sign in with GitHub",
+    summary: `your backend and widget use the API key; people and agents use an ${B.product} login (with GitHub)`,
     provider: "GitHub"
   };
 })();
@@ -4878,7 +4885,7 @@ var MANAGED_GITHUB = {
   auth: "oauth",
   doors: ["oauth"],
   bodyPatch: { login: { providers: [{ type: "github", managed: true }] } },
-  summary: "callers sign in with GitHub (hosted sign-in) \u2014 no API key",
+  summary: `callers use an ${B.product} login (with GitHub) \u2014 no API key`,
   provider: "GitHub"
 };
 var API_KEY = { auth: "api_key", doors: ["api_key"], bodyPatch: {}, summary: "callers send the API key (X-API-Key) \u2014 no sign-in" };
@@ -4959,12 +4966,12 @@ function afterDash(sentence) {
 }
 async function pickFamilies(families, opts = {}) {
   const { default: inquirer3 } = await import("inquirer");
-  console.log(import_chalk16.default.dim("  space toggles \xB7 a all \xB7 enter accept \xB7 uncheck everything to skip"));
+  console.log(import_chalk16.default.dim("  Uncheck everything to skip."));
   const short = opts.compact && families.filter((f) => !f.skipped_reason).length <= 3;
   const { picked } = await inquirer3.prompt([{
     type: "checkbox",
     name: "picked",
-    message: "Lock these to the person who created them (or an admin):",
+    message: "Should only creators of a resource in the API be able to amend that resource?",
     pageSize: 15,
     choices: families.map((f) => {
       const key = short ? lastSegment(f.key) : f.key.replace(/^\//, "");
@@ -4974,7 +4981,7 @@ async function pickFamilies(families, opts = {}) {
   return picked ?? [];
 }
 async function chooseSecure(args) {
-  const { openapi, auth, name, interactive, quiet, compact } = args;
+  const { openapi, name, interactive, quiet, compact } = args;
   const say = (s) => {
     if (!quiet) console.log(s);
   };
@@ -4982,20 +4989,6 @@ async function chooseSecure(args) {
     say(import_chalk16.default.dim(`  No OpenAPI spec \u2014 nothing to protect yet. Run \`${B.cli} rule ${name}\` after you add one.`));
     return null;
   }
-  if (interactive) {
-    const { default: inquirer3 } = await import("inquirer");
-    const { lock } = await inquirer3.prompt([{
-      type: "confirm",
-      name: "lock",
-      message: "Do you want to prevent unauthorized users from taking unauthorized actions?",
-      default: true
-    }]);
-    if (lock && auth.doors.includes("api_key")) {
-      console.log(import_chalk16.default.dim("  Behind the API key, the rules check who is calling: your server says so with X-End-User-Id,"));
-      console.log(import_chalk16.default.dim(`  or the key itself is issued to a person (${B.cli} apikeys mint --for).`));
-    }
-    if (!lock) return null;
-  }
   const spinner = quiet ? null : (0, import_ora6.default)("Reading your OpenAPI spec\u2026").start();
   const { status, data } = await proposeFromSpec(openapi).catch((err) => ({ status: 0, data: { error: err.message } }));
   if (status !== 200 || !data || !Array.isArray(data.families)) {
@@ -5455,7 +5448,9 @@ Create an ${B.thing}
   const { families, adminEmail } = await planSetup({ openapi: openapiContent, auth, name, interactive, quiet: !!opts.json });
   if (interactive && !opts.yes && !opts.auto) {
     const { default: inquirer3 } = await import("inquirer");
-    console.log(`${import_chalk16.default.cyan("\u2192")} ${auth.summary}${families ? ` \xB7 ${describeFamilies(families.map((f) => f.key))} locked to their creator` : ""}${adminEmail ? ` \xB7 admin ${adminEmail}` : ""}`);
+    console.log();
+    console.log(`  ${planSentence({ name, auth, families, adminEmail })}`);
+    console.log();
     const { ok } = await inquirer3.prompt([{
       type: "confirm",
       name: "ok",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apiblaze",
-  "version": "0.21.0",
+  "version": "0.21.2",
   "description": "APIblaze CLI — Chat with your APIs, Manage your API keys, users and groups with the APIblaze serverless proxy",
   "keywords": [
     "apiblaze",