specli 0.0.29 → 0.0.31

package/dist/cli/main.js

@@ -45,6 +45,7 @@ export async function main(argv, options = {}) {
         .option("--api-key <key>", "API key value")
         .option("--json", "Machine-readable output")
         .showHelpAfterError();
+    program.addHelpText("after", `\nAgent workflow:\n  1) ${options.cliName ?? "specli"} __schema --json --min\n  2) ${options.cliName ?? "specli"} <resource> --help\n  3) ${options.cliName ?? "specli"} <resource> <action> --help\n`);
     // If user asks for help and we have no embedded spec and no --spec, show minimal help.
     const spec = getArgValue(argv, "--spec");
     const wantsHelp = hasAnyArg(argv, ["-h", "--help"]);
@@ -177,6 +178,10 @@ export async function main(argv, options = {}) {
                 process.stdout.write(`- ${program.name()} ${op.resource} ${op.action}${args}\n`);
             }
         }
+        process.stdout.write("\nTip: explore required flags with --help at each level:\n" +
+            `- ${program.name()} --help\n` +
+            `- ${program.name()} <resource> --help\n` +
+            `- ${program.name()} <resource> <action> --help\n`);
     });
     addGeneratedCommands(program, {
         servers: ctx.servers,
@@ -189,5 +194,59 @@ export async function main(argv, options = {}) {
             auth: options.auth,
         },
     });
+    if (argv.length <= 2) {
+        program.outputHelp();
+        return;
+    }
+    const args = argv.slice(2);
+    const flagWithValue = new Set([
+        "--spec",
+        "--server",
+        "--server-var",
+        "--auth",
+        "--bearer-token",
+        "--oauth-token",
+        "--username",
+        "--password",
+        "--api-key",
+    ]);
+    const boolFlags = new Set(["--json"]);
+    const passthroughFlags = new Set(["-h", "--help", "-v", "--version"]);
+    let hasSubcommand = false;
+    let onlyKnownGlobals = true;
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (!a)
+            continue;
+        if (passthroughFlags.has(a))
+            break;
+        if (boolFlags.has(a))
+            continue;
+        if (flagWithValue.has(a)) {
+            i++;
+            continue;
+        }
+        if (a.startsWith("--") && a.includes("=")) {
+            const key = a.slice(0, a.indexOf("="));
+            if (!flagWithValue.has(key) &&
+                !boolFlags.has(key) &&
+                !passthroughFlags.has(key)) {
+                onlyKnownGlobals = false;
+            }
+            continue;
+        }
+        if (a.startsWith("--") || a.startsWith("-")) {
+            onlyKnownGlobals = false;
+            continue;
+        }
+        hasSubcommand = true;
+        break;
+    }
+    if (!hasSubcommand &&
+        onlyKnownGlobals &&
+        !hasAnyArg(argv, ["-h", "--help", "-v", "--version"])) {
+        program.outputHelp();
+        return;
+    }
     await program.parseAsync(argv);
 }

package/dist/cli/runtime/request.js

@@ -264,7 +264,8 @@ export async function buildRequest(input) {
 function buildCurl(req, body) {
     const parts = ["curl", "-sS", "-X", req.method];
     for (const [k, v] of req.headers.entries()) {
-        parts.push("-H", shellQuote(`${k}: ${v}`));
+        const value = k.toLowerCase() === "authorization" ? maskAuthHeader(v) : v;
+        parts.push("-H", shellQuote(`${k}: ${value}`));
     }
     if (typeof body === "string") {
         parts.push("--data", shellQuote(body));
@@ -272,6 +273,25 @@ function buildCurl(req, body) {
     parts.push(shellQuote(req.url));
     return parts.join(" ");
 }
+function maskAuthHeader(value) {
+    // Mask token in authorization header, preserving scheme (e.g., "Bearer")
+    // "Bearer abc123xyz" -> "Bearer abc...xyz"
+    const parts = value.split(" ");
+    if (parts.length === 2) {
+        const [scheme, token] = parts;
+        return `${scheme} ${maskToken(token)}`;
+    }
+    // No scheme, just mask the whole value
+    return maskToken(value);
+}
+function maskToken(token) {
+    if (token.length <= 6) {
+        return "***";
+    }
+    const prefix = token.slice(0, 3);
+    const suffix = token.slice(-3);
+    return `${prefix}...${suffix}`;
+}
 function shellQuote(value) {
     return `'${value.replace(/'/g, `'\\''`)}'`;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "specli",
-	"version": "0.0.29",
+	"version": "0.0.31",
 	"description": "Run any OpenAPI spec as a CLI. Built for Agents.",
 	"repository": {
 		"type": "git",