apiblaze 0.21.74 → 0.21.76

package/dist/index.js

@@ -34,7 +34,7 @@ var __toESM = (mod, isNodeMode, target2) => (target2 = mod != null ? __create(__
 var version;
 var init_package = __esm({
   "package.json"() {
-    version = "0.21.74";
+    version = "0.21.76";
   }
 });
 
@@ -4243,9 +4243,9 @@ async function openServerProxy(project) {
 }
 function discoverLocalSpecs() {
   const cwd = process.cwd();
-  const known = ["openapi.yaml", "openapi.yml", "openapi.json", "swagger.yaml", "swagger.yml", "swagger.json", "api.yaml", "api.yml", "api.json"];
+  const known2 = ["openapi.yaml", "openapi.yml", "openapi.json", "swagger.yaml", "swagger.yml", "swagger.json", "api.yaml", "api.yml", "api.json"];
   const found = [];
-  for (const n of known) {
+  for (const n of known2) {
     try {
       if (fs9.statSync(path9.join(cwd, n)).isFile()) found.push(n);
     } catch {
@@ -5577,6 +5577,7 @@ __export(directory_exports, {
   stepOpen: () => stepOpen,
   stepRunnable: () => stepRunnable,
   summaryOf: () => summaryOf,
+  testCasesText: () => testCasesText,
   withBrandSource: () => withBrandSource,
   writeJsonLine: () => writeJsonLine
 });
@@ -5675,12 +5676,30 @@ function directoryBodyFromFlags(f2) {
   }
   return out;
 }
+function testCasesText(r, platforms) {
+  const cases = r?.target?.metadata?.portalAnswers?.test_cases ?? [];
+  if (!cases.length) return null;
+  const dirs = ["claude", "chatgpt"].filter((x) => platforms.includes(x));
+  const lines = ["Test cases (what reviewers try; results are our pre-check, not their review)"];
+  for (const c of cases) {
+    lines.push(`  "${c.prompt}" (${c.kind === "refuse" ? "should say no" : c.tool ? `should use ${c.tool}` : "pick the tool it should use"})`);
+    for (const dir of dirs) {
+      const x = (r?.case_results ?? []).find((y) => y.caseId === c.id && y.directory === dir);
+      const word = !x ? "not run yet" : !x.current ? "out of date, run again" : `${x.pass ? "\u2713" : "\u2717"} ${CASE_STATE[x.state]}${x.state === "other_tool" || x.state === "acted" ? `: ${x.tools.join(", ")}` : ""} \xB7 ${CASE_SOURCE[x.source]}, ${x.at.slice(0, 10)}`;
+      lines.push(`     for ${dir === "claude" ? "Claude" : "ChatGPT"}: ${word}`);
+    }
+  }
+  lines.push("  Run them on the Testing tab, or with the Claude Code lines below.");
+  return lines.join("\n");
+}
 function withBrandSource(url, cli = B.cli) {
   return cli === "mcpblaze" ? `${url}?source=mcpblazeCli` : url;
 }
 function pageLinkOf(r, proj2, anchor) {
   const base2 = r?.progress?.pageUrl ?? `${DASHBOARD_BASE6}/directory/${encodeURIComponent(proj2.projectId)}/${encodeURIComponent(proj2.apiVersion)}`;
-  const page = withBrandSource(base2);
+  const team = proj2.teamId && !proj2.teamId.startsWith("team_anon_") ? proj2.teamId : null;
+  let page = withBrandSource(base2);
+  if (team) page += `${page.includes("?") ? "&" : "?"}team=${encodeURIComponent(team)}`;
   return anchor ? `${page}${anchor.startsWith("#") ? anchor : `#${anchor}`}` : page;
 }
 function stepOf(r, id) {
@@ -5819,6 +5838,7 @@ function claudeCodeTests(r, proj2) {
     seen.add(p);
     cases.push({ prompt: p, line: askLine(name, p), expect, refuse });
   };
+  for (const c of t?.metadata?.portalAnswers?.test_cases ?? []) add(c.prompt, c.kind === "refuse" ? `it says it can't help${c.why ? ` (${c.why})` : ""}, and calls no tool` : c.expect || "it calls your tools and answers from what comes back", c.kind === "refuse");
   for (const p of t?.metadata?.examplePrompts ?? []) add(p, "it calls your tools and answers from what comes back", false);
   const tc = t?.metadata?.portalAnswers?.chatgpt_test_cases;
   for (const c of tc?.positive ?? []) add(c.prompt, c.expected_behavior || "it calls your tools and answers from what comes back", false);
@@ -5838,7 +5858,7 @@ function claudeCodeText(cc) {
   else lines.push(`  ${n}. One line per use case:`, ...cc.cases.flatMap((c) => [`     ${c.line}`, `       expect: ${c.expect}`]));
   return lines.join("\n");
 }
-var import_node_fs, import_chalk17, PLATFORMS, ATTESTATIONS, OPENAI_CATEGORIES, AUTH_MODES, DATA_HANDLING_MODES, STEP_IDS, reportPath, DESCRIPTION_MIN, ccServerName, shellQuote2, askLine;
+var import_node_fs, import_chalk17, PLATFORMS, ATTESTATIONS, OPENAI_CATEGORIES, AUTH_MODES, DATA_HANDLING_MODES, STEP_IDS, CASE_SOURCE, CASE_STATE, reportPath, DESCRIPTION_MIN, ccServerName, shellQuote2, askLine;
 var init_directory = __esm({
   "src/lib/directory.ts"() {
     "use strict";
@@ -5870,6 +5890,8 @@ var init_directory = __esm({
     AUTH_MODES = ["signin", "open"];
     DATA_HANDLING_MODES = ["own", "proxied", "third-party"];
     STEP_IDS = ["mode", "address", "access", "tools", "listing", "answers", "attestations", "prove", "signin", "token", "packet", "submit"];
+    CASE_SOURCE = { "our-claude": "our test, Claude model", "our-gpt": "our test, GPT model", "claude-code": "your Claude Code", codex: "your Codex CLI", chatgpt: "ChatGPT", claude: "Claude" };
+    CASE_STATE = { passed: "used the right tool", chose_write: "chose the right tool (not run: it changes data)", other_tool: "used a different tool", no_tool: "didn't use a tool", tool_failed: "the tool failed", said_no: "said no", acted: "used a tool when it shouldn't" };
     reportPath = (proj2) => `/projects/${encodeURIComponent(proj2.projectId)}/${encodeURIComponent(proj2.apiVersion)}/directory-report`;
     DESCRIPTION_MIN = 300;
     ccServerName = (projectId) => projectId.toLowerCase().replace(/[^a-z0-9_-]+/g, "-").replace(/^-+|-+$/g, "") || "app";
@@ -6658,7 +6680,31 @@ async function printDevOutcome(o, port) {
   }
   if (o.anon) printLegalNotice("  ");
 }
+function printListingOutcome(o) {
+  const where = { tenant: o.tenant, anon: o.anon };
+  const mcp = mcpUrl(o.name, o.version, o.env, where);
+  const s = o.secure;
+  const applied = s?.applied ?? [];
+  console.log();
+  console.log(`  ${import_chalk20.default.green("\u2713")} ${B.thing} ${import_chalk20.default.bold(o.name)}: ${import_chalk20.default.bold(mcp)}`);
+  if (applied.length && s?.enforced) console.log(`  ${import_chalk20.default.green("\u2713")} Each person can only change the ${describeFamilies(applied)} they made ${import_chalk20.default.dim("(lists stay open: your backend filters them)")}`);
+  else if (applied.length && s?.pending) console.log(`  ${import_chalk20.default.dim("\u2013")} ${describeFamilies(applied)}: the who-can-change-what rules are being applied`);
+  else console.log(`  ${import_chalk20.default.dim("\u2013")} ${import_chalk20.default.dim(`Who can change what: not set yet. Later: npx ${B.cli} rule ${o.name}`)}`);
+  if (o.auth.doors.includes("api_key") && o.apiKey) {
+    const saved = process.stdout.isTTY ? null : saveEnvLocal(process.cwd(), {
+      APIBLAZE_URL: restUrl(o.name, o.version, o.env, where),
+      APIBLAZE_MCP_URL: mcp,
+      APIBLAZE_SERVER_KEY: o.apiKey,
+      ...o.tenant ? { APIBLAZE_TENANT: o.tenant } : {}
+    });
+    if (saved?.ok) console.log(`  ${import_chalk20.default.green("\u2713")} Backend key saved to .env.local as APIBLAZE_SERVER_KEY`);
+    else console.log(`  ${import_chalk20.default.green("\u2713")} Backend key ${import_chalk20.default.dim("(shown once, save it):")} ${import_chalk20.default.bold.green(o.apiKey)}`);
+  }
+  if (o.claim?.claimCode || o.claim?.claimUrl) console.log(import_chalk20.default.dim(`  Anonymous: it expires in 30 days unless you sign in (npx ${B.cli} login claims it).`));
+  if (o.anon) printLegalNotice("  ");
+}
 async function printOutcome(o) {
+  if (o.listing) return printListingOutcome(o);
   const where = { tenant: o.tenant, anon: o.anon };
   const mcp = mcpUrl(o.name, o.version, o.env, where);
   const shown = BRAND === "mcpblaze" ? mcp : B.liveUrl(o.name, o.version, o.env, where);
@@ -6752,8 +6798,11 @@ async function runCreate(opts = {}) {
       opts.target = void 0;
     }
   }
-  const creds = loadCredentials();
+  const saved = loadCredentials();
+  const expired = !!saved && Date.now() >= saved.expiresAt && !process.env.APIBLAZE_TOKEN?.trim();
+  const creds = expired ? null : saved;
   if (!creds) {
+    if (expired && !opts.json) console.log(import_chalk20.default.dim(`Your saved login has expired, so this is made anonymously. \`${B.cli} login\` then claims it into your team.`));
     await runAnonymousCreate(opts);
     return;
   }
@@ -6939,6 +6988,7 @@ Create an ${B.thing}
     return;
   }
   await finishSetup({
+    listing: !!opts.directoryReady,
     name,
     version: version2,
     env: "dev",
@@ -7174,7 +7224,8 @@ Create an ${B.thing}`));
     });
   }
   if (name) await applyCreateToggles(name, opts);
-  const directory = anonProjectId ? await directoryAfterCreate(anonProjectId, version2, opts) : null;
+  if (anonProjectId) opts.onCreated?.({ name: anonProjectId, version: version2, tenant, teamId: result.team_id });
+  const directory = anonProjectId && !opts.skipDirectoryReport ? await directoryAfterCreate(anonProjectId, version2, opts) : null;
   if (opts.json) {
     process.stdout.write(JSON.stringify({
       project_id: result.project_id,
@@ -7198,6 +7249,7 @@ Create an ${B.thing}`));
     return;
   }
   await finishSetup({
+    listing: !!opts.directoryReady,
     name: anonProjectId,
     version: version2,
     env: "prod",
@@ -8013,10 +8065,10 @@ function orderTools(tools) {
   const rank = { read: 0, create: 1, update: 2, write: 3, delete: 4 };
   return [...tools].sort((a, b) => rank[toolRole(a)] - rank[toolRole(b)] || a.name.localeCompare(b.name));
 }
-function exampleValue(name, p, known = {}, given = {}) {
+function exampleValue(name, p, known2 = {}, given = {}) {
   if (given[name] !== void 0) return given[name];
   if (p.example !== void 0 && p.example !== null) return p.example;
-  if (known[name] !== void 0) return known[name];
+  if (known2[name] !== void 0) return known2[name];
   if (Array.isArray(p.enum) && p.enum.length) return p.enum[0];
   const t = (p.type ?? "string").toLowerCase();
   const fmt = (p.format ?? "").toLowerCase();
@@ -8033,14 +8085,14 @@ function exampleValue(name, p, known = {}, given = {}) {
   if (/(^|_)(q|query|search|term|text|name|title)$/i.test(name)) return "test";
   return "example";
 }
-function validArgs(t, known = {}, given = {}) {
+function validArgs(t, known2 = {}, given = {}) {
   const out = {};
   const props = t.inputProperties ?? {};
   const pathParams = new Set([...(t.path ?? "").matchAll(/\{([^}]+)\}/g)].map((m) => m[1]));
   for (const [name, p] of Object.entries(props)) {
-    const wanted = p.required || pathParams.has(name) || p.example !== void 0 && p.example !== null || known[name] !== void 0 || given[name] !== void 0;
+    const wanted = p.required || pathParams.has(name) || p.example !== void 0 && p.example !== null || known2[name] !== void 0 || given[name] !== void 0;
     if (!wanted) continue;
-    out[name] = exampleValue(name, p, known, given);
+    out[name] = exampleValue(name, p, known2, given);
   }
   return out;
 }
@@ -8056,11 +8108,11 @@ function candidateFromPrompts(name, p, prompts) {
   const quoted = text.match(/["“']([^"”']{1,80})["”']/);
   return quoted ? quoted[1].trim() : null;
 }
-function invalidArgs(t, known = {}, given = {}) {
+function invalidArgs(t, known2 = {}, given = {}) {
   const props = t.inputProperties ?? {};
   const names = Object.keys(props);
   if (!names.length) return null;
-  const base2 = validArgs(t, known, given);
+  const base2 = validArgs(t, known2, given);
   const withEnum = names.find((n) => Array.isArray(props[n].enum) && props[n].enum.length);
   if (withEnum) return { args: { ...base2, [withEnum]: "not-a-valid-choice" }, broke: `${withEnum}: out of enum` };
   const typed = names.find((n) => ["integer", "number", "boolean"].includes((props[n].type ?? "").toLowerCase()));
@@ -8618,8 +8670,12 @@ async function runConnectorExercise(project, opts = {}) {
     const codex = deps.codexInstalled !== void 0 ? { installed: deps.codexInstalled, loggedIn: deps.codexInstalled } : clients.includes("codex") ? detectCodex(deps.spawn ?? import_child_process5.spawnSync) : { installed: false, loggedIn: false };
     const proven = opts.provenPromptNotes ?? [];
     const provenFor = (client) => new Map(proven.filter((n) => n.kind === "prompt" && (n.client ?? "claude") === client).map((n) => [n.prompt.trim(), n]));
-    const passPrompts = (opts.promptsOnly ?? target2.metadata?.examplePrompts ?? []).filter((p) => typeof p === "string" && p.trim()).slice(0, 5);
-    const negatives = (target2.metadata?.portalAnswers?.chatgpt_test_cases?.negative ?? []).map((c) => c.prompt).filter((p) => typeof p === "string" && p.trim()).slice(0, 3);
+    const testCases = target2.metadata?.portalAnswers?.test_cases ?? [];
+    const readTools = new Set(readOnlyToolNames(tools));
+    const casePrompts = testCases.filter((c) => c.kind === "use" && (!c.tool || readTools.has(c.tool))).map((c) => c.prompt);
+    const passPrompts = opts.promptsOnly ?? [...new Set([...(target2.metadata?.examplePrompts ?? []).slice(0, 5), ...casePrompts].filter((p) => typeof p === "string" && p.trim()).map((p) => p.trim()))].slice(0, 10);
+    const refusals = testCases.filter((c) => c.kind === "refuse");
+    const negatives = (refusals.length ? [...refusals.filter((c) => c.send), ...refusals.filter((c) => !c.send)].map((c) => c.prompt) : (target2.metadata?.portalAnswers?.chatgpt_test_cases?.negative ?? []).map((c) => c.prompt)).filter((p) => typeof p === "string" && p.trim()).slice(0, 3);
     const readOnly2 = readOnlyToolNames(tools);
     const requiredCount = (t) => Object.values(t.inputProperties ?? {}).filter((p) => p.required).length;
     const firstRead = [...tools].filter((t) => toolRole(t) === "read").sort((a, b) => requiredCount(a) - requiredCount(b))[0] ?? tools[0];
@@ -13764,11 +13820,10 @@ async function ensureHostedUpstream(caller, teamId, proj2, r, opts, interactive2
     let chosen = header;
     let open = !!opts.upstreamOpen;
     if (!chosen && !open && interactive2) {
-      if (shape(cur).hosts?.upstreamKind === "public" && !shape(cur).hosts?.upstreamHeader) say(import_chalk32.default.dim("  An open backend can be called around sign-in and the per-user rules; a shared secret header closes that."));
       const { default: inquirer3 } = await import("inquirer");
-      const { name } = await inquirer3.prompt([{ type: "input", name: "name", message: `Does the backend need a header to accept calls from ${B.product}, such as an API key or a shared secret? (Header name; Enter = no, it checks its own credentials)` }]);
+      const { name } = await inquirer3.prompt([{ type: "input", name: "name", message: "Secret header your backend checks? (e.g. X-Api-Key; Enter if none)" }]);
       if (name?.trim()) {
-        const { value } = await inquirer3.prompt([{ type: "password", name: "value", mask: "*", message: `Value of ${name.trim()} (stored encrypted, never shown again):`, validate: (v) => (v ?? "").length > 0 ? true : "A value is needed; Ctrl-C leaves." }]);
+        const { value } = await inquirer3.prompt([{ type: "password", name: "value", mask: "*", message: `Its value (stored encrypted):`, validate: (v) => (v ?? "").length > 0 ? true : "A value is needed; Ctrl-C leaves." }]);
         chosen = { name: name.trim(), value };
       } else open = true;
     }
@@ -13881,8 +13936,6 @@ function installInterrupt(ctx) {
   return () => process.off("SIGINT", handler);
 }
 async function runConnector(target2, opts) {
-  const caller = requireCaller();
-  const { teamId } = await resolveActingTeam(caller, opts.team);
   const json = !!opts.json;
   const interactive2 = !!process.stdin.isTTY && !json && !opts.yes;
   const say = (s) => {
@@ -13898,8 +13951,9 @@ async function runConnector(target2, opts) {
     const created = await createFromSpec(specSource, opts, say);
     projectName = created.name;
     version2 = created.version;
-    say(import_chalk32.default.green(`  ${B.thing} ${import_chalk32.default.bold(created.name)} created.`));
   }
+  const caller = requireCaller();
+  const { teamId } = await resolveActingTeam(caller, opts.team);
   const proj2 = await resolveProjectVia(caller, teamId, projectName, version2);
   const flagBody = directoryBodyFromFlags(opts);
   const onlyAttest = !!opts.attest?.length && !flagBody.directory_metadata && !opts.full && !specSource && !only && !opts.status;
@@ -13926,12 +13980,15 @@ async function runConnector(target2, opts) {
     if (opts.status) {
       const cc = claudeCodeTests(r, proj2);
       if (json) {
-        writeJsonLine({ ready: isReady(r, platforms), project: proj2.projectId, headline: r.rendered.headline, summary: r.progress?.summary ?? null, progress: r.progress ?? null, claude_code: cc, report: r.report });
+        writeJsonLine({ ready: isReady(r, platforms), project: proj2.projectId, headline: r.rendered.headline, summary: r.progress?.summary ?? null, progress: r.progress ?? null, claude_code: cc, test_cases: r.case_results ?? null, report: r.report });
         process.exit(isReady(r, platforms) ? 0 : 1);
       }
       const card2 = scorecardText(r);
       if (card2) console.log(card2);
       else printReport(r, false);
+      const tc = testCasesText(r, platforms);
+      if (tc) console.log(`
+${tc}`);
       if (cc) console.log(`
 ${claudeCodeText(cc)}`);
       process.exit(isReady(r, platforms) ? 0 : 1);
@@ -13947,9 +14004,23 @@ ${claudeCodeText(cc)}`);
       r = await fetchDirectoryReport(caller, proj2, reportOpts());
     }
     const link = pageLinkOf(r, proj2);
-    const sum = summaryOf(r);
-    if (sum) {
-      say(`${import_chalk32.default.bold("Finish this here or at")} ${import_chalk32.default.cyan(link)} ${import_chalk32.default.dim("\xB7")} ${import_chalk32.default.bold(sum)}`);
+    if (r.progress) {
+      const pct = r.progress.readiness?.percent;
+      const where = platforms.map((p) => p === "claude" ? "Claude" : "ChatGPT").join(" and ");
+      const rule = import_chalk32.default.dim("\u2500".repeat(64));
+      say("");
+      say(rule);
+      say(`  ${import_chalk32.default.bold(`Get it listed in ${where}`)}${typeof pct === "number" ? import_chalk32.default.dim(`  \xB7  ${pct}% ready`) : ""}`);
+      if (caller.mode === "anon") {
+        say(`  A listing needs an account (your own MCP address is billed to it). Sign in, then carry on:`);
+        say(`    ${import_chalk32.default.cyan(`npx ${B.cli}@latest login`)}   ${import_chalk32.default.dim(`it keeps ${proj2.projectId}, moving it into your team`)}`);
+        say(`    ${import_chalk32.default.cyan(`npx ${B.cli}@latest connector ${proj2.projectId}`)}   ${import_chalk32.default.dim("or finish on the page it links")}`);
+        say(rule);
+        return;
+      }
+      say(`  ${import_chalk32.default.bold("Here:")} answer the questions below. Stop any time; every answer is kept.`);
+      say(`  ${import_chalk32.default.bold("Or in your browser:")} ${import_chalk32.default.cyan(link)}`);
+      say(rule);
       const done = doneLine(r);
       if (done) say(import_chalk32.default.dim(`  ${done}`));
     } else {
@@ -15813,8 +15884,11 @@ saved as it is given; \`npx ${cli} connector <name> --status\` says what is left
    and \`npx ${cli} connector answers <name> --use-cases "\u2026" --prerequisites "\u2026" --category "\u2026" --reviewer-instructions "\u2026"\`.
 6. **Test**: \`npx ${cli} connector exercise <name>\` calls every tool as the reviewer. Then
    \`npx ${cli} connector <name> --status\` prints the Claude Code lines: one \`claude mcp add\`, one sign-in, and one
-   \`claude -p '\u2026' --allowedTools 'mcp__<name>'\` per example prompt, each with what should come back. Run each, tell the user
+   \`claude -p '\u2026' --allowedTools 'mcp__<name>'\` per test case and example prompt, each with what should come back. Run each, tell the user
    what came back, and fix a tool's description (\`npx ${cli} mcp ops set\`) when a prompt did not reach the right tool.
+   \`--status\` also lists the **test cases** (what reviewers try: five that should use a tool and three that should say no
+   for ChatGPT) with each one's latest result and where it ran. Those results are a pre-check, not the directories' review:
+   never tell the user a case "passed in ChatGPT" or "in Claude". The user writes and runs the cases on the page's Testing tab.
 7. **Send**: when every check passes it writes the packet. The user submits it on claude.ai/directory/manage (and the
    OpenAI portal for ChatGPT).
 
@@ -24038,9 +24112,27 @@ but this build does not have it, your npx cache is serving an older copy \u2014
   return program2;
 }
 
+// src/lib/bare-create.ts
+var SPEC = /^(https?:\/\/\S+|\S+\.(ya?ml|json))$/i;
+function bareCreateArgv(args, commands) {
+  if (!args.length) return args;
+  for (let i = 0; i < args.length; i += 1) {
+    const a = args[i];
+    if (a.startsWith("-")) continue;
+    const prev = args[i - 1];
+    const isValue = !!prev && prev.startsWith("--") && !prev.includes("=");
+    if (!isValue && commands.has(a)) return args;
+  }
+  if (SPEC.test(args[0])) return ["create", "--target", ...args];
+  if (args.some((a) => a === "--target" || a.startsWith("--target="))) return ["create", ...args];
+  return args;
+}
+
 // src/index.ts
 installBrandFilter();
 var program = buildProgram();
+var known = new Set(program.commands.flatMap((c) => [c.name(), ...c.aliases()]).concat(["help"]));
+process.argv = [...process.argv.slice(0, 2), ...bareCreateArgv(process.argv.slice(2), known)];
 process.on("exit", () => renderTrace());
 installFetchGuard(version);
 var firstCommand = process.argv.slice(2).find((a) => !a.startsWith("-"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apiblaze",
-  "version": "0.21.74",
+  "version": "0.21.76",
   "description": "APIblaze CLI — Chat with your APIs, Manage your API keys, users and groups with the APIblaze serverless proxy",
   "keywords": [
     "apiblaze",