Add remote recipe fetching with \getapi update\ command

- New \`getapi update\` subcommand fetches recipes from raw.githubusercontent.com
- Recipes are cached locally (platform cache dir / getapi / recipes)
- Cached recipes are merged on top of bundled ones at startup (cache wins on conflict)
- Bundled recipes remain the offline fallback — no network calls unless user runs update
- New providers/index.json manifest lists all recipes with id, file, and version
- scripts/generate-index.sh regenerates the index from providers/*.json
- CI validates that index.json is up to date on every push

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: m2de

.github/workflows/ci.yml

@@ -42,3 +42,8 @@ jobs:
             fi
           done
           exit $exit_code
+
+      - name: Validate recipe index
+        run: |
+          bash scripts/generate-index.sh
+          git diff --exit-code providers/index.json

CLAUDE.md

@@ -18,6 +18,16 @@ cargo test
 - `docs/` — Documentation site source (GitHub Pages)
 - `homebrew/` — Local copy of Homebrew formula (canonical copy lives in `m2de/homebrew-tap`)
 
+## Modifying recipes
+
+When adding, removing, or changing the `version` field of any file in `providers/`, regenerate the index:
+
+```sh
+bash scripts/generate-index.sh
+```
+
+The CI `validate-recipes` job checks that `providers/index.json` is up to date.
+
 ## Release process
 
 1. Update `version` in `Cargo.toml` and all 6 `npm/*/package.json` files

providers/index.json

@@ -0,0 +1,106 @@
+{
+  "schema_version": "1",
+  "updated_at": "2026-02-20T09:55:01Z",
+  "recipes": [
+    {
+      "id": "anthropic",
+      "file": "anthropic.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "auth0",
+      "file": "auth0.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "clerk",
+      "file": "clerk.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "cloudflare",
+      "file": "cloudflare.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "discord",
+      "file": "discord.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "firebase",
+      "file": "firebase.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "github",
+      "file": "github.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "google-maps",
+      "file": "google-maps.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "notion",
+      "file": "notion.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "openai",
+      "file": "openai.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "resend",
+      "file": "resend.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "sendgrid",
+      "file": "sendgrid.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "shopify",
+      "file": "shopify.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "slack",
+      "file": "slack.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "spotify",
+      "file": "spotify.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "stripe",
+      "file": "stripe.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "supabase",
+      "file": "supabase.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "twilio",
+      "file": "twilio.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "twitter",
+      "file": "twitter.json",
+      "version": "1.0.0"
+    },
+    {
+      "id": "vercel",
+      "file": "vercel.json",
+      "version": "1.0.0"
+    }
+  ]
+}

scripts/generate-index.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+# Regenerates providers/index.json from the current providers/*.json files.
+# Run this whenever you add, remove, or bump the version of a recipe.
+# The updated_at timestamp is only changed when the recipe list or versions change.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROVIDERS_DIR="$SCRIPT_DIR/../providers"
+OUTPUT="$PROVIDERS_DIR/index.json"
+
+python3 - "$PROVIDERS_DIR" "$OUTPUT" <<'PYEOF'
+import json, os, sys, glob
+from datetime import timezone, datetime
+
+providers_dir = sys.argv[1]
+output_path = sys.argv[2]
+
+files = sorted(glob.glob(os.path.join(providers_dir, '*.json')))
+
+recipes = []
+for f in files:
+    basename = os.path.basename(f)
+    if basename == 'index.json':
+        continue
+    with open(f) as fh:
+        data = json.load(fh)
+    recipes.append({
+        'id': data['id'],
+        'file': basename,
+        'version': data.get('version', '1.0.0'),
+    })
+
+# Read existing index to preserve updated_at when nothing changed
+existing_recipes = []
+existing_updated_at = None
+if os.path.exists(output_path):
+    with open(output_path) as fh:
+        existing = json.load(fh)
+    existing_recipes = existing.get('recipes', [])
+    existing_updated_at = existing.get('updated_at')
+
+if recipes == existing_recipes and existing_updated_at:
+    updated_at = existing_updated_at
+else:
+    updated_at = datetime.now(timezone.utc).strftime('%Y-%m-%dT%H:%M:%SZ')
+
+index = {
+    'schema_version': '1',
+    'updated_at': updated_at,
+    'recipes': recipes,
+}
+
+with open(output_path, 'w') as fh:
+    json.dump(index, fh, indent=2)
+    fh.write('\n')
+
+print(f"Generated {output_path} with {len(recipes)} recipes.")
+PYEOF

src/cli/args.rs

@@ -7,7 +7,7 @@ use clap::{Parser, Subcommand, ValueEnum};
              getapi walks you through creating API keys for popular platforms like Twitter, \
              OpenAI, Stripe, and more. It opens the right pages, tells you what to click, \
              collects your credentials, validates they work, and writes them to .env.\n\n\
-             Provider recipes are bundled — no network needed to run a setup flow.",
+             Provider recipes are bundled. Run `getapi update` to fetch the latest recipes.",
     long_about = None,
     after_help = "\
 EXAMPLES:\n  \
@@ -90,6 +90,9 @@ pub enum Command {
         /// Provider to reset (omit to reset all)
         provider: Option<String>,
     },
+
+    /// Update provider recipes from the remote repository
+    Update,
 }
 
 #[derive(ValueEnum, Clone, Debug, PartialEq)]

src/error.rs

@@ -37,6 +37,9 @@ pub enum GetapiError {
 
     #[error("HTTP error: {0}")]
     Http(#[from] reqwest::Error),
+
+    #[error("Failed to fetch remote recipes: {0}")]
+    RemoteFetch(String),
 }
 
 pub type Result<T> = std::result::Result<T, GetapiError>;

src/main.rs

@@ -40,6 +40,7 @@ fn run(cli: Cli) -> Result<()> {
     }
 
     match &cli.command {
+        Some(Command::Update) => cmd_update(),
         Some(Command::List { search, category }) => {
             cmd_list(&registry, search.clone(), category.clone())
         }
@@ -453,6 +454,23 @@ fn cmd_manifest(registry: &RecipeRegistry, _cli: &Cli) -> Result<()> {
     }
 }
 
+fn cmd_update() -> Result<()> {
+    ui::print_info("Fetching latest recipes from the remote repository...");
+    match recipe::remote::fetch_and_cache_all() {
+        Ok(recipes) => {
+            ui::print_success(&format!(
+                "Updated {} recipes. Run `getapi list` to see available providers.",
+                recipes.len()
+            ));
+            Ok(())
+        }
+        Err(e) => {
+            eprintln!("\n  {} {}", console::style("Warning:").yellow().bold(), e);
+            std::process::exit(1);
+        }
+    }
+}
+
 fn cmd_reset(provider: Option<String>) -> Result<()> {
     match provider {
         Some(p) => {

src/recipe/mod.rs

@@ -1,4 +1,5 @@
 pub mod loader;
 pub mod registry;
+pub mod remote;
 pub mod template;
 pub mod types;

src/recipe/registry.rs

@@ -1,4 +1,7 @@
+use std::collections::HashMap;
+
 use crate::recipe::loader;
+use crate::recipe::remote;
 use crate::recipe::types::Recipe;
 
 pub struct RecipeRegistry {
@@ -7,7 +10,9 @@ pub struct RecipeRegistry {
 
 impl RecipeRegistry {
     pub fn new() -> Self {
-        let recipes = loader::load_all_bundled();
+        let bundled = loader::load_all_bundled();
+        let cached = remote::load_cached_recipes();
+        let recipes = merge_recipes(bundled, cached);
         Self { recipes }
     }
 
@@ -47,3 +52,17 @@ impl RecipeRegistry {
             .collect()
     }
 }
+
+/// Merge two recipe lists. `overlay` takes precedence when the same `id` appears in both.
+fn merge_recipes(base: Vec<Recipe>, overlay: Vec<Recipe>) -> Vec<Recipe> {
+    let mut map: HashMap<String, Recipe> = HashMap::new();
+    for recipe in base {
+        map.insert(recipe.id.clone(), recipe);
+    }
+    for recipe in overlay {
+        map.insert(recipe.id.clone(), recipe);
+    }
+    let mut merged: Vec<Recipe> = map.into_values().collect();
+    merged.sort_by(|a, b| a.id.cmp(&b.id));
+    merged
+}