apiblaze 0.21.46 → 0.21.47

package/README.md

@@ -271,12 +271,13 @@ shows both, and `logout` asks which to drop.
 
 | Command | What it does |
 |---|---|
-| `apiblaze consumer login` | Pick a tenant and log in to its portal (device flow in your browser) |
+| `apiblaze consumer login --tenant <slug>` | Log in to that tenant's portal (device flow in your browser); no producer account needed |
+| `apiblaze consumer login` | Producer shortcut: pick one of your team's tenants |
 | `apiblaze consumer tokens` | Show your consumer access / refresh / id tokens |
 | `apiblaze consumer apikeys` | List your API keys (reveals expiring ones in clear), then offer to create one |
 
-> A standalone consumer (no producer account) can log in with
-> `apiblaze consumer login --tenant <slug> --client <appClientId>`.
+> `--tenant` uses the tenant's default login app; add `--client <appClientId>` to
+> pick a specific one.
 >
 > Advanced: `apiblaze apikeys` manages producer control-plane keys for scripting.
 

package/dist/index.js

@@ -34,7 +34,7 @@ var __toESM = (mod, isNodeMode, target2) => (target2 = mod != null ? __create(__
 var version;
 var init_package = __esm({
   "package.json"() {
-    version = "0.21.46";
+    version = "0.21.47";
   }
 });
 
@@ -374,6 +374,7 @@ __export(api_exports, {
   GITHUB_LOGIN: () => GITHUB_LOGIN,
   INTEGRATION_STACKS: () => INTEGRATION_STACKS,
   LOCAL_SPEC_PATHS: () => LOCAL_SPEC_PATHS,
+  PUBLIC_API_BASE: () => PUBLIC_API_BASE,
   agentCall: () => agentCall,
   bothDoorsBody: () => bothDoorsBody,
   checkProxyName: () => checkProxyName,
@@ -3801,7 +3802,7 @@ async function replTurn(p, messages, userText) {
         }
       }
       console.log(import_chalk15.default.red("  This proxy signs consumers in with OAuth (a login), not an API key."));
-      console.log(import_chalk15.default.dim("  Sign in with: `apiblaze consumer login --tenant <tenant> --client <app-client-id>`, then re-run apichat."));
+      console.log(import_chalk15.default.dim("  Sign in with: `apiblaze consumer login --tenant <tenant>`, then re-run apichat."));
       return;
     }
     if (keyWanted) {
@@ -16349,7 +16350,13 @@ async function runTenantPasswordDisable(tenantArg2, opts) {
   if (opts.json) console.log(JSON.stringify({ enabled: false }));
 }
 function printAccount(a) {
-  const flags = [a.disabled ? import_chalk59.default.red("blocked") : import_chalk59.default.green("active"), a.locked_until ? import_chalk59.default.yellow(`locked until ${a.locked_until}`) : "", a.purpose === "reviewer" ? import_chalk59.default.cyan("reviewer") : ""].filter(Boolean).join(" \xB7 ");
+  const flags = [
+    a.disabled ? import_chalk59.default.red("blocked") : import_chalk59.default.green("active"),
+    a.locked_until ? import_chalk59.default.yellow(`locked until ${a.locked_until}`) : "",
+    a.purpose === "reviewer" ? import_chalk59.default.cyan("reviewer") : "",
+    a.self_signup ? import_chalk59.default.dim("signed up") : "",
+    a.email && !a.email_verified_at ? import_chalk59.default.yellow("email unconfirmed") : ""
+  ].filter(Boolean).join(" \xB7 ");
   console.log(`  ${import_chalk59.default.bold(a.username)}  ${flags}${a.email ? import_chalk59.default.dim(`  ${a.email}`) : ""}${a.last_login_at ? import_chalk59.default.dim(`  last login ${a.last_login_at}`) : ""}`);
 }
 async function runTenantPasswordList(tenantArg2, opts) {
@@ -16763,6 +16770,8 @@ var import_ora31 = __toESM(require("ora"));
 init_admin();
 init_resolve();
 init_caller();
+init_api();
+init_version_guard();
 init_paging();
 init_consumer_auth();
 var DEFAULT_SCOPE = "openid email profile offline_access";
@@ -16787,6 +16796,17 @@ function requireConsumer2() {
   }
   return c;
 }
+async function publicDefaultAppClient(tenant2, base2 = PUBLIC_API_BASE) {
+  try {
+    const res = await fetch(`${base2}/appClients?tenant=${encodeURIComponent(tenant2)}`, { headers: cliHeaders(), signal: AbortSignal.timeout(1e4) });
+    if (res.status === 404) return { clientId: null, found: false };
+    if (!res.ok) return { clientId: null, found: true };
+    const body = await res.json();
+    return { clientId: typeof body.defaultAppClientId === "string" && body.defaultAppClientId ? body.defaultAppClientId : null, found: true };
+  } catch {
+    return { clientId: null, found: true };
+  }
+}
 async function runConsumerLogin(opts) {
   const { default: inquirer3 } = await import("inquirer");
   let tenant2 = opts.tenant;
@@ -16796,6 +16816,19 @@ async function runConsumerLogin(opts) {
       console.error(import_chalk62.default.red("When using --client, also pass --tenant <slug> (it sets which portal/keys host to use)."));
       process.exit(1);
     }
+  } else if (tenant2) {
+    const s = (0, import_ora31.default)("Finding the login app...").start();
+    const r = await publicDefaultAppClient(tenant2);
+    s.stop();
+    if (!r.found) {
+      console.error(import_chalk62.default.red(`No tenant named "${tenant2}".`));
+      process.exit(1);
+    }
+    if (!r.clientId) {
+      console.error(import_chalk62.default.red(`Tenant "${tenant2}" has no login app configured. Its owner sets one up in the dashboard (or \`apiblaze create\` with auth); or pass --client <appClientId>.`));
+      process.exit(1);
+    }
+    clientId = r.clientId;
   } else {
     requireAuth();
     const { teamId, teamName } = await resolveTeam(opts.team);
@@ -18968,7 +19001,7 @@ program.command("dev").description(`Put the app running on THIS machine on the i
   }
 });
 var consumer = program.command("consumer").description("Act as a consumer of your API \u2014 log in, get tokens, manage API keys");
-consumer.command("login").description("Log in to a tenant's portal as a consumer (device flow)").option("--team <id|name>", "Team whose tenants to choose from (producer mode)").option("--tenant <slug>", "Tenant to log in to (skips the picker)").option("--client <clientId>", "App client id \u2014 for standalone login without a producer session").action(action((opts) => runConsumerLogin(opts)));
+consumer.command("login").description("Log in to a tenant's portal as a consumer (device flow)").option("--tenant <slug>", "Tenant to log in to \u2014 uses its default login app; no producer login needed").option("--client <clientId>", "A specific app client id instead of the tenant's default (with --tenant)").option("--team <id|name>", "Without --tenant: the team whose tenants to pick from (producer session)").action(action((opts) => runConsumerLogin(opts)));
 consumer.command("tokens").description("Show the logged-in consumer access / refresh / id tokens").option("--json", "Output machine-readable JSON").action(action((opts) => runConsumerTokens(opts)));
 consumer.command("apikeys").description("List your consumer API keys (reveals expiring ones), then offer to create one").option("--json", "Output machine-readable JSON").action(action((opts) => runConsumerApikeys(opts)));
 var consumerLogs = consumer.command("logs").description("API Consumer view \u2014 stream YOUR OWN requests on this tenant live (see `consumer logs list` for past days)").option("--project <name>", "Only this project (when the tenant serves several)").option("--errors-only", "Only show 4xx/5xx responses").option("--json", "Emit raw NDJSON rows (pipe into jq)").action(action((opts) => runConsumerLogsTail(opts)));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apiblaze",
-  "version": "0.21.46",
+  "version": "0.21.47",
   "description": "APIblaze CLI — Chat with your APIs, Manage your API keys, users and groups with the APIblaze serverless proxy",
   "keywords": [
     "apiblaze",