Release:--: v0.0.13_2026-04-29_12:26:13_UTC

Author: 0xYeah

api/api.go

@@ -47,7 +47,7 @@ func StartAPIServices(opts *Options) {
 
 	mux := buildMux(opts)
 	addr := fmt.Sprintf("0.0.0.0:%d", opts.ListenPort)
-	gtbox_log.LogInfof("[api_show] listening on http://%s (IPv4 only, data=%s)", addr, opts.DataDir)
+	gtbox_log.LogInfof("[api_show] listening on http://127.0.0.1:%d (IPv4 only, data=%s)", opts.ListenPort, opts.DataDir)
 
 	srv := &http.Server{
 		Addr:              addr,

as_config/as_config.go

@@ -16,7 +16,7 @@ import (
 
 const (
 	ProjectName     = "api_show"
-	ProjectVersion  = "v0.0.12"
+	ProjectVersion  = "v0.0.13"
 	ProjectBundleID = "com.0xYeah.api_show"
 
 	ListenPort     = 12110
@@ -134,11 +134,19 @@ func LoadConfig(path string) error {
 }
 
 // SyncConfigFile is the standard config bootstrap helper: if the file
-// is missing, write the default TOML there first; then load. This makes the
-// first-ever run on any host self-bootstrap a placeholder config file the
-// operator can edit in place.
+// is missing OR empty (0 bytes), write the default TOML there first;
+// then load. This makes the first-ever run on any host self-bootstrap a
+// placeholder config file the operator can edit in place.
 func SyncConfigFile(path string) error {
-	if _, err := os.Stat(path); errors.Is(err, os.ErrNotExist) {
+	info, err := os.Stat(path)
+	switch {
+	case errors.Is(err, os.ErrNotExist):
+		if err := SaveConfig(path, generateDefault()); err != nil {
+			return err
+		}
+	case err != nil:
+		return fmt.Errorf("as_config: stat %s: %w", path, err)
+	case info.Size() == 0:
 		if err := SaveConfig(path, generateDefault()); err != nil {
 			return err
 		}

changelog/v0.0.11.md changelog/v0.0.13.mdchangelog/v0.0.11.md renamed to changelog/v0.0.13.md

@@ -1,7 +1,7 @@
-## v0.0.11 ChangeLog
+## v0.0.13 ChangeLog
 
-- Release:--: v0.0.11_2026-04-28_15:03:36_UTC
-- Range: 02664b13cfb2ae43701118a9dfbd696c186ec24e..HEAD
+- Release:--: v0.0.13_2026-04-29_12:26:13_UTC
+- Range: 3330441eeb1f2159e8afca60c539d26a0eff237d..HEAD
 - Commits: 0
 
 ###  commit infos

example_files/config_local.toml

@@ -0,0 +1,14 @@
+# HMAC cookie key + TOTP key derivation salt. >=16 bytes.
+secret = 'REPLACE_ME_at_least_16_chars'
+# Bearer token /upload accepts.
+upload_token = 'REPLACE_ME_bearer_token'
+# Root dir for uploaded openapi specs + totp_blobs/. Relative to WorkingDirectory.
+data_dir = './data'
+# HTTP listen port.
+port = 12110
+# true = /upload rejects non-private/non-loopback IPs at the app layer.
+only_local = true
+# pwd | pwd_totp (default) | totp.
+auth_mode = 'pwd_totp'
+# Account roster. Edit + restart to add users / change permissions.
+users = []