specshield 1.0.2 → 1.0.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "specshield",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "CLI to compare OpenAPI/Swagger specs and detect breaking changes for CI/CD pipelines and local developer workflows.",
   "main": "src/cli.js",
   "bin": {

package/src/cli.js

@@ -3,6 +3,8 @@
 const { Command } = require('commander');
 const { version } = require('../package.json');
 const compareCommand = require('./commands/compare');
+const loginCommand = require('./commands/login');
+const logoutCommand = require('./commands/logout');
 
 const program = new Command();
 
@@ -12,6 +14,8 @@ program
   .version(version);
 
 program.addCommand(compareCommand);
+program.addCommand(loginCommand);
+program.addCommand(logoutCommand);
 
 program.parseAsync(process.argv).catch((err) => {
   const logger = require('./utils/logger');

package/src/commands/compare.js

@@ -14,6 +14,9 @@ const { loadConfig } = require('../core/configLoader');
 const { resolveExitCode } = require('../core/exitCode');
 const logger = require('../utils/logger');
 const fsExtra = require('fs-extra');
+const { getStoredApiKey } = require('../config/localConfig');
+
+const HOSTED_API_URL = 'https://api.specshield.io';
 
 const compare = new Command('compare');
 
@@ -28,7 +31,9 @@ compare
   .option('--config <path>', 'Path to .specshield.yml config file')
   .option('--ignore <change>', 'Ignore a specific change string (repeatable)', collect, [])
   .option('--severity <level>', 'Minimum severity level: info | warning | error', 'error')
-  .option('--remote-url <url>', 'Remote API endpoint for comparison')
+  .option('--remote', 'Use the SpecShield hosted compare API')
+  .option('--api-key <key>', 'API key for hosted mode (overrides env and stored config)')
+  .option('--remote-url <url>', 'Override the hosted API base URL')
   .option('--timeout <ms>', 'Request timeout for remote mode (ms)', '10000')
   .action(async (base, target, opts) => {
     try {
@@ -38,11 +43,25 @@ compare
       // Merge config with CLI options (CLI wins)
       const options = mergeOptions(config, opts);
 
+      // Resolve API key for remote mode (precedence: --api-key > env > stored config > .specshield.yml)
+      if (options.remote || options.remoteUrl || (config.remote && config.remote.enabled)) {
+        options.resolvedApiKey = opts.apiKey
+          || process.env.SPECSHIELD_API_KEY
+          || await getStoredApiKey()
+          || (config.remote && config.remote.apiKey)
+          || null;
+
+        if (!options.resolvedApiKey) {
+          logger.error('No API key found. Run: specshield login --api-key <KEY>');
+          process.exit(2);
+        }
+      }
+
       const spinner = options.json ? null : ora('Loading specs...').start();
 
       let result;
 
-      if (options.remoteUrl || (config.remote && config.remote.enabled)) {
+      if (options.remote || options.remoteUrl || (config.remote && config.remote.enabled)) {
         result = await runRemoteComparison(base, target, options, spinner);
       } else {
         result = await runLocalComparison(base, target, options, spinner);
@@ -107,22 +126,29 @@ async function runLocalComparison(base, target, options, spinner) {
 
 async function runRemoteComparison(base, target, options, spinner) {
   const axios = require('axios');
-  const { loadSpec } = require('../core/loadSpec');
+  const { version } = require('../../package.json');
 
   if (spinner) spinner.text = 'Loading specs for remote comparison...';
   const baseRaw = await loadSpec(base);
   const targetRaw = await loadSpec(target);
 
-  const url = options.remoteUrl || (options.remote && options.remote.url);
+  const url = options.remoteUrl || HOSTED_API_URL + '/compare';
   const timeout = parseInt(options.timeout, 10) || 10000;
 
-  if (spinner) spinner.text = `Sending to remote: ${url}`;
+  if (spinner) spinner.text = `Sending to hosted API...`;
+
+  const headers = {
+    'Content-Type': 'application/json',
+    'X-Api-Key': options.resolvedApiKey,
+    'X-SpecShield-Client': 'cli',
+    'X-SpecShield-Version': version,
+  };
 
   try {
     const response = await axios.post(
       url,
       { baseSpec: baseRaw, targetSpec: targetRaw },
-      { timeout, headers: { 'Content-Type': 'application/json' } }
+      { timeout, headers }
     );
     return response.data;
   } catch (err) {
@@ -167,7 +193,8 @@ function mergeOptions(config, cliOpts) {
       ...(config.ignore || []),
     ],
     severity: cliOpts.severity || config.severity || 'error',
-    remoteUrl: cliOpts.remoteUrl || (config.remote && config.remote.enabled ? config.remote.url : null),
+    remote: cliOpts.remote || (config.remote && config.remote.enabled) || false,
+    remoteUrl: cliOpts.remoteUrl || null,
     timeout: cliOpts.timeout || (config.remote && config.remote.timeout) || 10000,
   };
 }

package/src/commands/login.js

@@ -0,0 +1,54 @@
+'use strict';
+
+const { Command } = require('commander');
+const chalk = require('chalk');
+const ora = require('ora');
+const axios = require('axios');
+const { setStoredApiKey, CONFIG_PATH } = require('../config/localConfig');
+
+const HOSTED_API_URL = 'https://api.specshield.io';
+
+const login = new Command('login');
+
+login
+  .description('Authenticate with the SpecShield hosted API using your API key')
+  .requiredOption('--api-key <key>', 'Your SpecShield API key (starts with ss_)')
+  .option('--api-url <url>', 'Override the hosted API base URL', HOSTED_API_URL)
+  .action(async (opts) => {
+    const spinner = ora('Validating API key...').start();
+
+    try {
+      const response = await axios.post(
+        `${opts.apiUrl}/auth/validate-api-key`,
+        {},
+        {
+          headers: { 'X-Api-Key': opts.apiKey },
+          timeout: 10000,
+        }
+      );
+
+      if (!response.data.valid) {
+        spinner.fail(chalk.red('API key is invalid.'));
+        process.exit(1);
+      }
+
+      await setStoredApiKey(opts.apiKey);
+
+      spinner.succeed(chalk.green('Logged in successfully.'));
+      console.log('');
+      console.log(`  ${chalk.bold('Customer:')}  ${response.data.name}`);
+      console.log(`  ${chalk.bold('Plan:')}      ${response.data.plan}`);
+      console.log(`  ${chalk.gray('Config:')}    ${CONFIG_PATH}`);
+      console.log('');
+      console.log(chalk.gray('  Run: specshield compare base.yaml target.yaml --remote'));
+
+    } catch (err) {
+      const msg = err.response
+        ? `Validation failed (${err.response.status}): ${JSON.stringify(err.response.data)}`
+        : `Connection error: ${err.message}`;
+      spinner.fail(chalk.red(msg));
+      process.exit(1);
+    }
+  });
+
+module.exports = login;

package/src/commands/logout.js

@@ -0,0 +1,16 @@
+'use strict';
+
+const { Command } = require('commander');
+const chalk = require('chalk');
+const { clearStoredApiKey } = require('../config/localConfig');
+
+const logout = new Command('logout');
+
+logout
+  .description('Remove your stored SpecShield API key')
+  .action(async () => {
+    await clearStoredApiKey();
+    console.log(chalk.green('Logged out. API key removed from local config.'));
+  });
+
+module.exports = logout;

package/src/config/localConfig.js

@@ -0,0 +1,38 @@
+'use strict';
+
+const path = require('path');
+const os = require('os');
+const fsExtra = require('fs-extra');
+
+const CONFIG_PATH = path.join(os.homedir(), '.specshield', 'config.json');
+
+async function loadLocalConfig() {
+  try {
+    return await fsExtra.readJson(CONFIG_PATH);
+  } catch {
+    return {};
+  }
+}
+
+async function saveLocalConfig(data) {
+  await fsExtra.outputJson(CONFIG_PATH, data, { spaces: 2 });
+}
+
+async function getStoredApiKey() {
+  const config = await loadLocalConfig();
+  return config.apiKey || null;
+}
+
+async function setStoredApiKey(apiKey) {
+  const config = await loadLocalConfig();
+  config.apiKey = apiKey;
+  await saveLocalConfig(config);
+}
+
+async function clearStoredApiKey() {
+  const config = await loadLocalConfig();
+  delete config.apiKey;
+  await saveLocalConfig(config);
+}
+
+module.exports = { loadLocalConfig, saveLocalConfig, getStoredApiKey, setStoredApiKey, clearStoredApiKey, CONFIG_PATH };