@kubb/studio 5.12.1 → 5.12.3

package/dist/index.cjs

@@ -23,20 +23,20 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 //#endregion
 const require_protocol = require("./protocol.cjs");
 let node_crypto = require("node:crypto");
+let node_fs = require("node:fs");
+let node_fs_promises = require("node:fs/promises");
+let node_module = require("node:module");
 let node_os = require("node:os");
 let node_path = require("node:path");
 node_path = __toESM(node_path, 1);
 let node_process = require("node:process");
 node_process = __toESM(node_process, 1);
 let node_timers_promises = require("node:timers/promises");
-let node_url = require("node:url");
-let node_stream = require("node:stream");
-let node_fs = require("node:fs");
-let node_fs_promises = require("node:fs/promises");
+let tinyexec = require("tinyexec");
 let _kubb_core = require("@kubb/core");
 let capnweb = require("capnweb");
 let magicast = require("magicast");
-let node_module = require("node:module");
+let node_url = require("node:url");
 let diff = require("diff");
 let node_util = require("node:util");
 let _kubb_ast = require("@kubb/ast");
@@ -48,6 +48,7 @@ let node_https = require("node:https");
 node_https = __toESM(node_https, 1);
 let node_net = require("node:net");
 node_net = __toESM(node_net, 1);
+let node_stream = require("node:stream");
 let ofetch = require("ofetch");
 let node_zlib = require("node:zlib");
 //#region ../../internals/utils/src/casing.ts
@@ -229,7 +230,7 @@ function getElapsedMs(hrStart) {
 }
 //#endregion
 //#region package.json
-var version = "5.12.1";
+var version = "5.12.3";
 //#endregion
 //#region src/resolveConfig.ts
 /**
@@ -627,13 +628,7 @@ const IDENTIFIER = /^[A-Za-z_$][\w$]*$/;
 * line count, so `enable-plugin` restores exactly those lines and not whatever comments follow.
 */
 const DISABLED_MARKER = /^\/\/ kubb:disabled (.+)\s+(\d+)$/;
-const OPERATIONS = /* @__PURE__ */ new Set([
-	"set",
-	"remove",
-	"add-plugin",
-	"disable-plugin",
-	"enable-plugin"
-]);
+const OPERATIONS = new Set(Object.values(require_protocol.ConfigEditOperation));
 const KINDS = /* @__PURE__ */ new Set([
 	"plugin",
 	"adapter",
@@ -644,13 +639,14 @@ const KINDS = /* @__PURE__ */ new Set([
 * The edit crossed the wire, so its declared type is a promise the sender may not have kept.
 */
 function invalidEdit(edit) {
-	const { operation, plugin, config, path, kind } = typeof edit === "object" && edit !== null ? edit : {};
+	const { operation, plugin, config, path, kind, input } = typeof edit === "object" && edit !== null ? edit : {};
 	if (typeof operation !== "string" || !OPERATIONS.has(operation)) return `unknown operation ${JSON.stringify(operation)}`;
+	if (config !== void 0 && typeof config !== "string" && !Number.isSafeInteger(config)) return "config must name an entry or give its index";
+	if (operation === require_protocol.ConfigEditOperation.SET_INPUT) return typeof input === "string" && input.trim() ? void 0 : "the edit names no input";
 	if (typeof plugin !== "string" || !plugin) return "the edit names no plugin";
 	if (kind !== void 0 && (typeof kind !== "string" || !KINDS.has(kind))) return `unknown kind ${JSON.stringify(kind)}`;
-	if (kind !== void 0 && operation !== "set" && operation !== "remove") return `${operation} edits the plugins array, so it takes no kind`;
-	if (config !== void 0 && typeof config !== "string" && !Number.isSafeInteger(config)) return "config must name an entry or give its index";
-	if (operation === "set" || operation === "remove") {
+	if (kind !== void 0 && operation !== require_protocol.ConfigEditOperation.SET && operation !== require_protocol.ConfigEditOperation.REMOVE) return `${operation} edits the plugins array, so it takes no kind`;
+	if (operation === require_protocol.ConfigEditOperation.SET || operation === require_protocol.ConfigEditOperation.REMOVE) {
 		if (!Array.isArray(path) || !path.every((key) => typeof key === "string" && key)) return "path must be a list of option names";
 		if (!path.length) return "no option path given";
 		const unsafe = path.find((key) => !isSafeKey(key));
@@ -1091,6 +1087,15 @@ function applySet(source, call, path, value, quote) {
 	}
 	return { source: splice(source, rangeOf(target.value).start, rangeOf(target.value).end, printValue(value, quote)) };
 }
+/** Writes the config's top-level `input` as a string literal, replacing what it held. */
+function applySetInput(source, config, input, quote) {
+	const value = printValue(input, quote);
+	const found = findMember(config, "input");
+	if (!found) return { source: insertItem(source, config, `input: ${value}`) };
+	if (found.member.type !== "ObjectProperty") return { reason: "input is not a plain property" };
+	if (isShadowed(config, found.index)) return { reason: "a spread after input could override it" };
+	return { source: splice(source, rangeOf(found.member.value).start, rangeOf(found.member.value).end, value) };
+}
 /**
 * Deletes the option at `path`, falling the plugin back to its default for it. An option the file
 * does not set already has its default, so removing it changes nothing.
@@ -1187,7 +1192,8 @@ function applyEdit({ source, edit, quote, extensions }) {
 	const findConfig = (entries) => typeof ref === "string" ? entries.configs.find((entry) => configName(entry) === ref) : entries.configs[ref ?? 0];
 	const config = findConfig(parsed);
 	if (!config) return { reason: `no config entry found for ${JSON.stringify(ref)}` };
-	if (edit.operation === "disable-plugin") {
+	if (edit.operation === require_protocol.ConfigEditOperation.SET_INPUT) return applySetInput(source, config, edit.input, quote);
+	if (edit.operation === require_protocol.ConfigEditOperation.DISABLE_PLUGIN) {
 		const result = disablePlugin(source, parsed.mod, config, edit.plugin);
 		if (!("reason" in result) || !result.reason.includes("shares a line")) return result;
 		const expanded = expandPluginsArray(source, config);
@@ -1195,8 +1201,8 @@ function applyEdit({ source, edit, quote, extensions }) {
 		const reparsedConfig = reparsed && !("reason" in reparsed) ? findConfig(reparsed) : void 0;
 		return expanded !== void 0 && reparsed && !("reason" in reparsed) && reparsedConfig ? disablePlugin(expanded, reparsed.mod, reparsedConfig, edit.plugin) : result;
 	}
-	if (edit.operation === "enable-plugin") return enablePlugin(source, config, edit.plugin);
-	if (edit.operation === "add-plugin") return applyAddPlugin({
+	if (edit.operation === require_protocol.ConfigEditOperation.ENABLE_PLUGIN) return enablePlugin(source, config, edit.plugin);
+	if (edit.operation === require_protocol.ConfigEditOperation.ADD_PLUGIN) return applyAddPlugin({
 		source,
 		parsed,
 		config,
@@ -1212,7 +1218,7 @@ function applyEdit({ source, edit, quote, extensions }) {
 		if (kind === "adapter") return { reason: `${edit.plugin} is not the config's adapter` };
 		return { reason: kind === "plugin" && disabledBlocks(source, config).some((block) => block.packageName === edit.plugin) ? `${edit.plugin} is disabled, enable it first` : `${edit.plugin} is not in the ${kind}s array` };
 	}
-	return edit.operation === "set" ? applySet(source, call, edit.path, edit.value, quote) : applyRemove(source, call, edit.path);
+	return edit.operation === require_protocol.ConfigEditOperation.SET ? applySet(source, call, edit.path, edit.value, quote) : applyRemove(source, call, edit.path);
 }
 /**
 * Applies edits to a `kubb.config.ts` in place. Each edit rewrites only the text it targets, so
@@ -2041,6 +2047,43 @@ var IncompatibleAgentError = class extends Error {
 		this.name = "IncompatibleAgentError";
 	}
 };
+const INSTALL_TIMEOUT_MS = 3e5;
+/** `owner/slug` or `slug`, as `kubb add` takes it. Checked before it becomes an argument. */
+const REGISTRY_ID = /^[a-z0-9]+(?:-[a-z0-9]+)*(?:\/[a-z0-9]+(?:-[a-z0-9]+)*)?$/;
+/** The CLI the project depends on, so `kubb add` installs next to what the config imports. */
+function findKubbBin(root) {
+	const require$1 = (0, node_module.createRequire)(node_path.default.resolve(root, "package.json"));
+	const names = ["kubb", "@kubb/cli"];
+	return (require$1.resolve.paths("kubb") ?? []).flatMap((dir) => names.map((name) => node_path.default.join(dir, name, "bin", "kubb.js"))).find((bin) => (0, node_fs.existsSync)(bin));
+}
+/** Runs a `kubb` command without a shell, and keeps the end of its output for the failure reason. */
+async function runKubb({ bin, args, cwd, signal }) {
+	try {
+		const { stdout, stderr, exitCode } = await (0, tinyexec.x)(node_process.default.execPath, [bin, ...args], {
+			signal,
+			timeout: INSTALL_TIMEOUT_MS,
+			throwOnError: false,
+			nodeOptions: {
+				cwd,
+				env: {
+					...node_process.default.env,
+					NO_COLOR: "1",
+					FORCE_COLOR: "0"
+				}
+			}
+		});
+		const output = `${stdout}\n${stderr}`.trim().split("\n").slice(-20).join("\n");
+		return {
+			failed: exitCode !== 0,
+			output: output || `kubb ${args[0]} exited with ${exitCode ?? "a signal"}`
+		};
+	} catch (error) {
+		return {
+			failed: true,
+			output: `kubb ${args[0]} did not run: ${getErrorMessage(error)}`
+		};
+	}
+}
 function emit(hooks, name, ...args) {
 	return Promise.resolve(hooks.callHook(name, ...args)).catch(() => {});
 }
@@ -2111,6 +2154,9 @@ var Agent = class extends capnweb.RpcTarget {
 			...permissions,
 			allowWrite: false,
 			allowConfigEdit: false,
+			allowInstall: false,
+			allowUpdate: false,
+			allowSaveInput: false,
 			allowRead: true,
 			allowReadAst: true
 		} : permissions;
@@ -2136,13 +2182,13 @@ var Agent = class extends capnweb.RpcTarget {
 			permission
 		});
 	}
-	async #refuse({ message, permission }) {
+	async #refuse({ message, permission, code = _kubb_core.Diagnostics.code.unknown }) {
 		await this.#warn({
 			message,
 			permission
 		});
 		throw new _kubb_core.Diagnostics.Error({
-			code: _kubb_core.Diagnostics.code.unknown,
+			code,
 			severity: "error",
 			message
 		});
@@ -2262,6 +2308,8 @@ var Agent = class extends capnweb.RpcTarget {
 			message: "Connection is closed"
 		});
 		if (this.#session.active) return this.#refuse({ message: require_protocol.AgentMessage.GENERATION_IN_PROGRESS });
+		if (this.#session.install) return this.#refuse({ message: require_protocol.AgentMessage.INSTALL_IN_PROGRESS });
+		if (this.#session.saving) return this.#refuse({ message: require_protocol.AgentMessage.SAVE_IN_PROGRESS });
 		const settled = Promise.withResolvers();
 		this.#session.active = {
 			jobId: input.jobId,
@@ -2332,7 +2380,13 @@ var Agent = class extends capnweb.RpcTarget {
 		});
 		const activePlugins = plugins ?? config.plugins;
 		if (patch?.input && !this.#sandbox && !this.#managed) await emit(this.#options.hooks, "kubb:warn", { message: "Ignored the spec from Studio: generating from a Studio spec is only available to a sandbox or managed agent" });
-		const checkout = this.#managed && studioInput !== void 0 && (0, _kubb_core.getInputKind)(studioInput) === "git" ? await (0, _kubb_core.checkoutGitInput)(studioInput, signal, { publicOnly: true }).catch((error) => this.#refuse({ message: getErrorMessage(error) })) : void 0;
+		const checkout = this.#managed && studioInput !== void 0 && (0, _kubb_core.getInputKind)(studioInput) === "git" ? await (0, _kubb_core.checkoutGitInput)(studioInput, signal, {
+			publicOnly: true,
+			authorization: input.gitAuth?.authorization
+		}).catch((error) => this.#refuse({
+			message: getErrorMessage(error),
+			code: _kubb_core.Diagnostics.code.gitInputFailed
+		})) : void 0;
 		const run = () => generate({
 			config: {
 				...config,
@@ -2402,13 +2456,33 @@ var Agent = class extends capnweb.RpcTarget {
 			await this.#warn({ message: "Ignored save: editing kubb.config.ts was not granted" });
 			return refuse("the agent was not granted permission to edit kubb.config.ts");
 		}
-		if (this.#session.active) return refuse("a generation is in progress");
+		const busy = this.#busy();
+		if (busy) return refuse(busy);
+		this.#session.saving = true;
 		try {
-			const { outcomes, changed } = await writeConfigEdits({
+			const kept = [];
+			for (const edit of edits) kept.push(await this.#keepInput(edit));
+			const written = await writeConfigEdits({
 				filePath: configFile,
-				edits,
+				edits: kept.flatMap((edit) => "reason" in edit ? [] : [edit]),
 				extensions: await this.#installedExtensions()
 			});
+			let next = 0;
+			const outcomes = kept.map((edit, index) => "reason" in edit ? {
+				edit: edits[index],
+				applied: false,
+				reason: edit.reason
+			} : {
+				...written.outcomes[next++],
+				edit: edits[index]
+			});
+			let wroteDocument = false;
+			for (const [index, edit] of kept.entries()) {
+				if (!("document" in edit) || !edit.document || !outcomes[index].applied) continue;
+				await (0, node_fs_promises.writeFile)(node_path.default.join(this.#options.root, edit.document.fileName), edit.document.text, "utf-8");
+				wroteDocument = true;
+			}
+			const changed = written.changed || wroteDocument;
 			const applied = outcomes.filter((outcome) => outcome.applied).length;
 			await this.#logCommand("saveConfig", `applied ${applied}/${outcomes.length} edits to ${configPath}`, input.requestedBy);
 			return {
@@ -2418,6 +2492,137 @@ var Agent = class extends capnweb.RpcTarget {
 		} catch (error) {
 			await emit(this.#options.hooks, "studio:error", { error: toError(error) });
 			return refuse(getErrorMessage(error));
+		} finally {
+			this.#session.saving = false;
+		}
+	}
+	/**
+	* Readies a `set-input` edit for the config file: a document is pointed at `openapi.yaml` (`openapi.json`
+	* for JSON) in the project, one file per config entry, for `saveConfig` to write once the edit applies.
+	* A managed agent refuses a file path, as in a generation.
+	*/
+	async #keepInput(edit) {
+		if (edit?.operation !== require_protocol.ConfigEditOperation.SET_INPUT || typeof edit.input !== "string" || !edit.input.trim()) return edit;
+		if (!this.#permissions.allowSaveInput) {
+			await this.#warn({
+				message: "Ignored the spec to save: saving the input was not granted",
+				permission: require_protocol.AgentPermission.SAVE_INPUT
+			});
+			return { reason: "the agent was not granted permission to save the input" };
+		}
+		const kind = (0, _kubb_core.getInputKind)(edit.input);
+		if (this.#managed && !MANAGED_INPUT_KINDS.has(kind)) return { reason: require_protocol.AgentMessage.MANAGED_INPUT_KIND };
+		if (kind !== "inline") return edit;
+		const fileName = `openapi${edit.config === void 0 || edit.config === 0 ? "" : `-${String(edit.config).replace(/[^\w.-]/g, "-")}`}.${isJson(edit.input) ? "json" : "yaml"}`;
+		return {
+			...edit,
+			input: `./${fileName}`,
+			document: {
+				fileName,
+				text: edit.input
+			}
+		};
+	}
+	/**
+	* Installs a registry extension into the project with `kubb add <id> --yes`, which also adds a
+	* plugin to `kubb.config.ts`. Studio calls `connect()` again afterwards to see the result.
+	*/
+	async installExtension(input) {
+		this.#assertConnected();
+		const { root, configFile, kubbBin = findKubbBin(root) } = this.#options;
+		const refuse = async (reason, permission) => {
+			await this.#warn({
+				message: `Ignored install: ${reason}`,
+				permission
+			});
+			return {
+				installed: false,
+				reason
+			};
+		};
+		if (typeof input?.id !== "string" || !REGISTRY_ID.test(input.id)) return refuse("the message carried no registry id");
+		if (!this.#permissions.allowInstall) return refuse("installing extensions was not granted", require_protocol.AgentPermission.INSTALL);
+		if (!this.#permissions.allowConfigEdit) return refuse("editing kubb.config.ts was not granted", require_protocol.AgentPermission.CONFIG_EDIT);
+		const busy = this.#busy();
+		if (busy) return refuse(busy);
+		if (!kubbBin) return refuse("kubb is not installed in the project");
+		const { failed, output } = await this.#runKubb({
+			bin: kubbBin,
+			args: [
+				"add",
+				input.id,
+				"--yes",
+				"--config",
+				configFile
+			]
+		});
+		await this.#logCommand("installExtension", `${failed ? "failed to install" : "installed"} ${input.id}`, input.requestedBy, failed);
+		return failed ? {
+			installed: false,
+			reason: output
+		} : { installed: true };
+	}
+	/**
+	* Moves installed extensions to the registry's version with `kubb update [ids] --yes`, which
+	* installs packages and leaves `kubb.config.ts` alone. Studio calls `connect()` again afterwards.
+	*/
+	async updateExtensions(input) {
+		this.#assertConnected();
+		const { root, kubbBin = findKubbBin(root) } = this.#options;
+		const refuse = async (reason, permission) => {
+			await this.#warn({
+				message: `Ignored update: ${reason}`,
+				permission
+			});
+			return {
+				updated: false,
+				reason
+			};
+		};
+		const ids = input?.ids ?? [];
+		if (!Array.isArray(ids) || !ids.every((id) => typeof id === "string" && REGISTRY_ID.test(id))) return refuse("the message carried an invalid registry id");
+		if (!this.#permissions.allowUpdate) return refuse("updating extensions was not granted", require_protocol.AgentPermission.UPDATE);
+		const busy = this.#busy();
+		if (busy) return refuse(busy);
+		if (!kubbBin) return refuse("kubb is not installed in the project");
+		const { failed, output } = await this.#runKubb({
+			bin: kubbBin,
+			args: [
+				"update",
+				...ids,
+				"--yes"
+			]
+		});
+		await this.#logCommand("updateExtensions", `${failed ? "failed to update" : "updated"} ${ids.join(", ") || "all extensions"}`, input?.requestedBy, failed);
+		return failed ? {
+			updated: false,
+			reason: output
+		} : { updated: true };
+	}
+	/** Why a command that touches the project cannot start right now. */
+	#busy() {
+		if (this.#session.active) return "a generation is in progress";
+		if (this.#session.install) return "an install or update is in progress";
+		if (this.#session.saving) return "a save is in progress";
+	}
+	/** Runs `kubb` in the project while holding off saves and generations, and ends it when the socket closes. */
+	async #runKubb({ bin, args }) {
+		const controller = new AbortController();
+		const settled = Promise.withResolvers();
+		this.#session.install = {
+			abort: () => controller.abort(),
+			settled: settled.promise
+		};
+		try {
+			return await runKubb({
+				bin,
+				args,
+				cwd: this.#options.root,
+				signal: controller.signal
+			});
+		} finally {
+			this.#session.install = void 0;
+			settled.resolve();
 		}
 	}
 	/**
@@ -2602,6 +2807,8 @@ async function runSession({ options, openRpc, url, instanceId }) {
 		await emit(hooks, "studio:warn", { message: "Canceled the running generation: the connection to Kubb Studio closed" });
 	}
 	await active?.settled;
+	session.install?.abort();
+	await session.install?.settled;
 	await agent.clear();
 	return {
 		...close,
@@ -2617,6 +2824,15 @@ function pickConfig(configs, ref) {
 	if (ref !== void 0 && !Number.isSafeInteger(ref)) return void 0;
 	return configs[ref ?? 0];
 }
+/** Whether `text` parses as JSON, so a pasted document is saved under the matching extension. */
+function isJson(text) {
+	try {
+		JSON.parse(text);
+		return true;
+	} catch {
+		return false;
+	}
+}
 /** The input path or URL Studio may show: no inline document, and no credentials from a URL. */
 function reportedInput(input) {
 	if (typeof input !== "string") return void 0;
@@ -2670,6 +2886,9 @@ async function runAgent({ options, openRpc }) {
 		permissions: {
 			allowWrite: false,
 			allowConfigEdit: false,
+			allowInstall: false,
+			allowUpdate: false,
+			allowSaveInput: false,
 			allowExec: false,
 			allowRead: false,
 			allowReadAst: false,