xapi-to 0.1.17 → 0.1.18

package/README.md

@@ -122,6 +122,15 @@ xapi-to get twitter.tweet_detail
 xapi-to call twitter.tweet_detail --input '{"tweet_id":"1234567890"}'
 ```
 
+For APIs that return binary data, use `--output` to request raw bytes and save
+them directly. The CLI refuses to overwrite an existing file.
+
+```bash
+xapi-to call openrouter.audio_speech \
+  --input '{"body":{"input":"Hello","model":"hexgrad/kokoro-82m","voice":"af_bella"}}' \
+  --output speech.mp3
+```
+
 ## Output Formats
 
 All output is JSON by default — designed for agent consumption.

package/dist/index.js

@@ -180,6 +180,10 @@ function showConfig() {
 }
 
 // src/client.ts
+import { open, rm } from "fs/promises";
+import { resolve } from "path";
+import { Readable, Transform } from "stream";
+import { pipeline } from "stream/promises";
 var DEFAULT_TIMEOUT_MS = 3e4;
 var EXECUTE_TIMEOUT_MS = 6e4;
 var IDEMPOTENT_RETRIES = 2;
@@ -237,7 +241,7 @@ function parseRetryAfterMs(res) {
   return Number.isFinite(at) ? Math.max(0, at - Date.now()) : void 0;
 }
 function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
+  return new Promise((resolve2) => setTimeout(resolve2, ms));
 }
 async function request(url, options, timeoutMs = DEFAULT_TIMEOUT_MS, retries = 0) {
   assertAllowedHost(url);
@@ -372,6 +376,84 @@ async function actionCall(actionId, input, opts, httpMethod, retries = 0, timeou
     retries
   );
 }
+async function actionDownload(actionId, input, opts, outputPath, httpMethod) {
+  const controller = new AbortController();
+  let timedOut = false;
+  const timer = setTimeout(() => {
+    timedOut = true;
+    controller.abort();
+  }, EXECUTE_TIMEOUT_MS);
+  const target = resolve(outputPath);
+  let file;
+  let complete = false;
+  try {
+    try {
+      file = await open(target, "wx");
+    } catch (error) {
+      if (error?.code === "EEXIST") {
+        throw new Error(`Output file already exists: ${target}`);
+      }
+      throw error;
+    }
+    const url = `${baseUrl(opts)}/v1/actions/execute`;
+    assertAllowedHost(url);
+    const res = await fetch(url, {
+      method: "POST",
+      headers: headers(opts.apiKey),
+      body: JSON.stringify({
+        action_id: actionId,
+        ...httpMethod ? { method: httpMethod } : {},
+        input,
+        response_mode: "raw"
+      }),
+      redirect: "manual",
+      signal: controller.signal
+    });
+    if (res.status >= 300 && res.status < 400) {
+      throw new Error(
+        `refusing to follow redirect to "${res.headers.get("location") ?? "?"}" (would forward the API key past the host allowlist)`
+      );
+    }
+    if (!res.ok) {
+      const text = await res.text();
+      throw new HttpError(
+        res.status,
+        text.slice(0, 300),
+        isRetryableStatus(res.status) ? parseRetryAfterMs(res) : void 0
+      );
+    }
+    let bytes = 0;
+    if (res.body) {
+      const source = Readable.fromWeb(res.body);
+      const counter = new Transform({
+        transform(chunk, _encoding, callback) {
+          bytes += Buffer.isBuffer(chunk) ? chunk.length : Buffer.byteLength(chunk);
+          callback(null, chunk);
+        }
+      });
+      await pipeline(source, counter, file.createWriteStream());
+    } else {
+      await file.close();
+    }
+    complete = true;
+    return {
+      output: target,
+      bytes,
+      contentType: res.headers.get("content-type") || void 0,
+      contentDisposition: res.headers.get("content-disposition") || void 0,
+      status: res.status
+    };
+  } catch (error) {
+    if (timedOut) throw new RequestTimeoutError(EXECUTE_TIMEOUT_MS);
+    throw error;
+  } finally {
+    clearTimeout(timer);
+    if (!complete && file) {
+      await file.close().catch(() => void 0);
+      await rm(target, { force: true }).catch(() => void 0);
+    }
+  }
+}
 async function actionServices(opts, params = {}) {
   const url = new URL(`${baseUrl(opts)}/v1/actions/services`);
   if (params.page) url.searchParams.set("page", String(params.page));
@@ -795,6 +877,7 @@ USAGE
 FLAGS
   --input <json>            Input payload as JSON (required for execution)
   --method GET|POST|...     Override HTTP method
+  --output <path>           Save a raw binary response to a new file
   --code <target>           Generate code snippet instead of executing
   --format json|pretty|table  Output format
 
@@ -817,6 +900,7 @@ CODE TARGETS
 
 EXAMPLES
   xapi-to call twitter.tweet_detail --input '{"tweet_id":"1234567890"}'
+  xapi-to call openrouter.audio_speech --input '{"body":{"input":"Hello"}}' --output speech.mp3
   xapi-to call twitter.tweet_detail --input '{"tweet_id":"123"}' --code py
   xapi-to call twitter.tweet_detail --input '{"tweet_id":"123"}' --code curl --format pretty
 `;
@@ -985,6 +1069,10 @@ async function actionCall2(args, flags) {
   const id = args[0];
   if (!id) err(`usage: xapi-to call <id> --input '{"key":"val"}'`);
   if (flags.code) validateCodeFlag(flags);
+  if (flags.output === "true") err("--output requires a file path");
+  if (flags.code && flags.output) {
+    err("--output cannot be combined with --code");
+  }
   const cfg = getConfig();
   let input = {};
   if (flags.input) {
@@ -1006,6 +1094,27 @@ async function actionCall2(args, flags) {
   }
   requireApiKey(cfg);
   try {
+    if (flags.output) {
+      const result = await actionDownload(
+        id,
+        cleanInput,
+        cfg,
+        flags.output,
+        method
+      );
+      output(
+        {
+          success: true,
+          output: result.output,
+          bytes: result.bytes,
+          status: result.status,
+          content_type: result.contentType,
+          content_disposition: result.contentDisposition
+        },
+        flags.format
+      );
+      return;
+    }
     const res = await actionCall(id, cleanInput, cfg, method);
     output(res, flags.format);
   } catch (e) {
@@ -1283,7 +1392,7 @@ async function selectScopesInteractive(provider) {
     out.write("\x1B[J");
     out.write(buildFrame());
   };
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     const { stdin } = process;
     const wasRaw = stdin.isRaw;
     stdin.setRawMode(true);
@@ -1294,7 +1403,7 @@ async function selectScopesInteractive(provider) {
       stdin.pause();
       out.write("\x1B[?25h");
       out.write("\n");
-      resolve(result);
+      resolve2(result);
     };
     const onData = (buf) => {
       const key = buf.toString();
@@ -1597,7 +1706,7 @@ function parsePositiveInt(raw, flagName) {
 }
 function sleep2(ms) {
   if (ms <= 0) return Promise.resolve();
-  return new Promise((resolve) => setTimeout(resolve, ms));
+  return new Promise((resolve2) => setTimeout(resolve2, ms));
 }
 function extractTaskPayload(res) {
   if (res && typeof res === "object") {
@@ -1763,6 +1872,7 @@ COMMANDS
     --code <target>                  Generate code snippet (curl, py, js, ts, go)
   call <id> --input '{"key":"val"}'  Execute an action
     --method GET|POST|...            Override HTTP method
+    --output <path>                   Save a raw binary response to a new file
     --code <target>                  Generate code snippet instead of executing
     Variants: python.requests, python.httpx, javascript.fetch, javascript.axios
 
@@ -1809,6 +1919,7 @@ EXAMPLES
   xapi-to get twitter.tweet_detail --code curl
   xapi-to get twitter.tweet_detail --code py --format pretty
   xapi-to call twitter.tweet_detail --input '{"tweet_id":"1234567890"}'
+  xapi-to call openrouter.audio_speech --input '{"body":{"input":"Hello"}}' --output speech.mp3
   xapi-to call twitter.tweet_detail --input '{"tweet_id":"1234567890"}' --code python
   xapi-to task poll 550e8400-e29b-41d4-a716-446655440000
   xapi-to task wait 550e8400-e29b-41d4-a716-446655440000 --interval 2s --timeout 10m

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xapi-to",
-  "version": "0.1.17",
+  "version": "0.1.18",
   "description": "Agent-friendly CLI for xapi - discover and call capabilities and APIs",
   "type": "module",
   "bin": {