@objectstack/cli 4.0.4 → 4.0.5

package/src/commands/plugin/add.ts

@@ -1,112 +0,0 @@
-// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
-
-import { Args, Command, Flags } from '@oclif/core';
-import chalk from 'chalk';
-import fs from 'fs';
-import path from 'path';
-import { resolveConfigPath } from '../../utils/config.js';
-import { printHeader, printSuccess, printError } from '../../utils/format.js';
-
-/**
- * Add a plugin import and entry to objectstack.config.ts.
- *
- * This performs a simple text-based transformation:
- * 1. Adds an import statement for the package at the top of the file.
- * 2. Inserts the imported identifier into the `plugins` array, creating one if absent.
- */
-function addPluginToConfig(configPath: string, packageName: string): void {
-  let content = fs.readFileSync(configPath, 'utf-8');
-
-  // Derive a variable name from the package name
-  // e.g. "@objectstack/plugin-auth" → "authPlugin"
-  const shortName = packageName
-    .replace(/^@[^/]+\//, '')        // strip scope
-    .replace(/^plugin-/, '')          // strip "plugin-" prefix
-    .replace(/-+/g, '-')             // collapse consecutive hyphens
-    .replace(/^-|-$/g, '');          // trim leading/trailing hyphens
-  const varName = shortName.replace(/-([a-z])/g, (_, c: string) => c.toUpperCase()) + 'Plugin';
-
-  // 1. Add import
-  const importLine = `import ${varName} from '${packageName}';\n`;
-
-  if (content.includes(packageName)) {
-    throw new Error(`Plugin '${packageName}' is already referenced in the config`);
-  }
-
-  // Insert import after the last existing import
-  const importRegex = /^import .+$/gm;
-  let lastImportEnd = 0;
-  let match: RegExpExecArray | null;
-  while ((match = importRegex.exec(content)) !== null) {
-    lastImportEnd = match.index + match[0].length;
-  }
-
-  if (lastImportEnd > 0) {
-    content = content.slice(0, lastImportEnd) + '\n' + importLine + content.slice(lastImportEnd);
-  } else {
-    content = importLine + '\n' + content;
-  }
-
-  // 2. Add to plugins array (target only the first plugins: [ within defineStack)
-  if (/plugins\s*:\s*\[/.test(content)) {
-    // plugins array exists — append to it (first occurrence only)
-    let replaced = false;
-    content = content.replace(
-      /(plugins\s*:\s*\[)/,
-      (match) => {
-        if (replaced) return match;
-        replaced = true;
-        return `${match}\n    ${varName},`;
-      }
-    );
-  } else {
-    // No plugins array — add one before the closing of defineStack({...})
-    // Look for the last property before the closing `})` or `})`
-    content = content.replace(
-      /(defineStack\(\{[\s\S]*?)(}\s*\))/,
-      `$1  plugins: [\n    ${varName},\n  ],\n$2`
-    );
-  }
-
-  fs.writeFileSync(configPath, content);
-}
-
-export { addPluginToConfig };
-
-export default class PluginAdd extends Command {
-  static override description = 'Add a plugin to objectstack.config.ts';
-
-  static override args = {
-    package: Args.string({ description: 'Plugin package name (e.g. @objectstack/plugin-auth)', required: true }),
-  };
-
-  static override flags = {
-    dev: Flags.boolean({ char: 'd', description: 'Add as a dev-only plugin' }),
-    config: Flags.string({ char: 'c', description: 'Configuration file path' }),
-  };
-
-  async run(): Promise<void> {
-    const { args, flags } = await this.parse(PluginAdd);
-
-    try {
-      const configPath = resolveConfigPath(flags.config);
-
-      printHeader('Add Plugin');
-      console.log(`  ${chalk.dim('Package:')} ${chalk.white(args.package)}`);
-      console.log(`  ${chalk.dim('Config:')}  ${chalk.white(path.relative(process.cwd(), configPath))}`);
-      console.log('');
-
-      addPluginToConfig(configPath, args.package);
-      printSuccess(`Added ${chalk.cyan(args.package)} to config`);
-
-      console.log('');
-      console.log(chalk.dim('  Next steps:'));
-      console.log(chalk.dim(`  1. Install the package: pnpm add ${args.package}`));
-      console.log(chalk.dim('  2. Run: os validate'));
-      console.log('');
-    } catch (error: any) {
-      printError(error.message || String(error));
-      this.exit(1);
-    }
-  }
-}

package/src/commands/plugin/build.ts

@@ -1,193 +0,0 @@
-// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
-
-import { Args, Command, Flags } from '@oclif/core';
-import chalk from 'chalk';
-import path from 'path';
-import fs from 'fs';
-import crypto from 'crypto';
-import { createTimer, printHeader, printKV, printStep, printSuccess, printError, printWarning, collectMetadataStats } from '../../utils/format.js';
-import { loadConfig, resolveConfigPath } from '../../utils/config.js';
-
-/**
- * Build a .tgz artifact from the current ObjectStack plugin project.
- *
- * Reads the project manifest (objectstack.config.ts), collects metadata
- * definitions (objects, views, flows, etc.), computes SHA-256 checksums,
- * and writes a compressed archive.
- *
- * Architecture alignment: `npm pack`, `helm package`, `vsce package`.
- */
-export default class PluginBuild extends Command {
-  static override description = 'Build a .tgz plugin artifact from the current project';
-
-  static override aliases = ['plugin pack'];
-
-  static override args = {
-    config: Args.string({ description: 'Configuration file path', required: false }),
-  };
-
-  static override flags = {
-    outDir: Flags.string({ char: 'o', description: 'Output directory', default: 'dist' }),
-    format: Flags.string({ char: 'f', description: 'Archive format (tgz | zip)', default: 'tgz', options: ['tgz', 'zip'] }),
-    sign: Flags.boolean({ description: 'Digitally sign the artifact', default: false }),
-    privateKeyPath: Flags.string({ description: 'Path to RSA/ECDSA private key for signing' }),
-    checksumAlgorithm: Flags.string({ description: 'Hash algorithm for checksums', default: 'sha256', options: ['sha256', 'sha384', 'sha512'] }),
-    includeData: Flags.boolean({ description: 'Include seed data in artifact', default: true, allowNo: true }),
-    includeLocales: Flags.boolean({ description: 'Include locale files', default: true, allowNo: true }),
-    json: Flags.boolean({ description: 'Output result as JSON' }),
-  };
-
-  async run(): Promise<void> {
-    const { args, flags } = await this.parse(PluginBuild);
-    const timer = createTimer();
-
-    if (!flags.json) {
-      printHeader('Plugin Build');
-    }
-
-    try {
-      // 1. Load config
-      if (!flags.json) printStep('Loading configuration...');
-      const { config, absolutePath } = await loadConfig(args.config);
-
-      if (!flags.json) {
-        printKV('Config', path.relative(process.cwd(), absolutePath));
-      }
-
-      // 2. Resolve manifest info
-      const manifest = (config as Record<string, unknown>).manifest as Record<string, unknown> | undefined;
-      const name = (manifest?.name as string) || (config as any).name || 'plugin';
-      const version = (manifest?.version as string) || (config as any).version || '0.0.0';
-      const packageFileName = `${name.replace(/[^a-z0-9._-]/gi, '-')}-${version}.${flags.format}`;
-
-      if (!flags.json) {
-        printKV('Package', `${name}@${version}`);
-        printStep('Collecting metadata...');
-      }
-
-      // 3. Collect metadata statistics
-      const stats = collectMetadataStats(config);
-      const fileEntries: Array<{ path: string; size: number; category: string }> = [];
-      const warnings: string[] = [];
-
-      // 4. Serialize the config to JSON for artifact content
-      const configJson = JSON.stringify(config, null, 2);
-      const configBuffer = Buffer.from(configJson, 'utf-8');
-      fileEntries.push({ path: 'manifest.json', size: configBuffer.length, category: 'manifest' });
-
-      // 5. Compute checksums
-      if (!flags.json) printStep('Computing checksums...');
-      const manifestChecksum = crypto.createHash(flags.checksumAlgorithm).update(configBuffer).digest('hex');
-
-      // 6. Write output
-      const outDir = path.resolve(process.cwd(), flags.outDir);
-      if (!fs.existsSync(outDir)) {
-        fs.mkdirSync(outDir, { recursive: true });
-      }
-      const artifactPath = path.join(outDir, packageFileName);
-
-      if (!flags.json) printStep('Writing artifact...');
-
-      // Write the artifact (serialized config bundle)
-      fs.writeFileSync(artifactPath, configBuffer);
-
-      const artifactSize = configBuffer.length;
-
-      // 7. Compute artifact-level checksum
-      const artifactHash = crypto.createHash('sha256').update(configBuffer).digest('hex');
-
-      // 8. Write checksum file alongside artifact
-      const checksumPath = artifactPath + '.sha256';
-      fs.writeFileSync(checksumPath, `${artifactHash}  ${packageFileName}\n`);
-
-      // 9. Handle signing
-      let signatureInfo: { algorithm: string; keyId: string } | undefined;
-      if (flags.sign) {
-        if (!flags.privateKeyPath) {
-          warnings.push('Signing requested but no --privateKeyPath provided; skipping signature');
-        } else if (!fs.existsSync(flags.privateKeyPath)) {
-          warnings.push(`Private key file not found: ${flags.privateKeyPath}; skipping signature`);
-        } else {
-          const privateKey = fs.readFileSync(flags.privateKeyPath, 'utf-8');
-          const signer = crypto.createSign('RSA-SHA256');
-          signer.update(configBuffer);
-          const signature = signer.sign(privateKey, 'base64');
-          const sigPath = artifactPath + '.sig';
-          fs.writeFileSync(sigPath, signature);
-          signatureInfo = { algorithm: 'RSA-SHA256', keyId: path.basename(flags.privateKeyPath) };
-        }
-      }
-
-      const durationMs = timer.elapsed();
-
-      // 10. Output result
-      const result = {
-        success: true,
-        artifactPath,
-        fileCount: fileEntries.length,
-        size: artifactSize,
-        durationMs,
-        warnings: warnings.length > 0 ? warnings : undefined,
-        artifact: {
-          name,
-          version,
-          format: flags.format,
-          checksums: {
-            algorithm: flags.checksumAlgorithm,
-            manifest: manifestChecksum,
-            files: { 'manifest.json': manifestChecksum },
-          },
-          signature: signatureInfo,
-          files: fileEntries,
-        },
-      };
-
-      if (flags.json) {
-        console.log(JSON.stringify(result, null, 2));
-        return;
-      }
-
-      // Print summary
-      console.log('');
-      printSuccess(`Build complete ${chalk.dim(`(${durationMs}ms)`)}`);
-      console.log('');
-      printKV('Artifact', path.relative(process.cwd(), artifactPath));
-      printKV('Size', `${(artifactSize / 1024).toFixed(1)} KB`);
-      printKV('Checksum', `sha256:${artifactHash.slice(0, 16)}...`);
-
-      if (signatureInfo) {
-        printKV('Signature', `${signatureInfo.algorithm} (${signatureInfo.keyId})`);
-      }
-
-      // Print metadata counts
-      const counts = [
-        stats.objects > 0 && `${stats.objects} objects`,
-        stats.views > 0 && `${stats.views} views`,
-        stats.flows > 0 && `${stats.flows} flows`,
-        stats.pages > 0 && `${stats.pages} pages`,
-        stats.agents > 0 && `${stats.agents} agents`,
-      ].filter(Boolean);
-
-      if (counts.length > 0) {
-        printKV('Contents', counts.join(', '));
-      }
-
-      for (const w of warnings) {
-        printWarning(w);
-      }
-
-      console.log('');
-      console.log(chalk.dim('  Next steps:'));
-      console.log(chalk.dim('  1. Validate: os plugin validate dist/' + packageFileName));
-      console.log(chalk.dim('  2. Publish:  os plugin publish dist/' + packageFileName));
-      console.log('');
-    } catch (error: any) {
-      if (flags.json) {
-        console.log(JSON.stringify({ success: false, errorMessage: error.message }));
-        this.exit(1);
-      }
-      printError(error.message || String(error));
-      this.exit(1);
-    }
-  }
-}

package/src/commands/plugin/info.ts

@@ -1,79 +0,0 @@
-// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
-
-import { Args, Command } from '@oclif/core';
-import chalk from 'chalk';
-import { loadConfig } from '../../utils/config.js';
-import { printHeader, printError, printInfo, printKV } from '../../utils/format.js';
-import { resolvePluginName, resolvePluginVersion, resolvePluginType } from '../../utils/plugin-helpers.js';
-
-export default class PluginInfo extends Command {
-  static override description = 'Show detailed information about a plugin';
-
-  static override args = {
-    name: Args.string({ description: 'Plugin name or package name', required: true }),
-    config: Args.string({ description: 'Configuration file path', required: false }),
-  };
-
-  async run(): Promise<void> {
-    const { args } = await this.parse(PluginInfo);
-
-    try {
-      const { config } = await loadConfig(args.config);
-      const allPlugins: unknown[] = [
-        ...(config.plugins || []),
-        ...(config.devPlugins || []),
-      ];
-
-      const found = allPlugins.find((p) => {
-        const pName = resolvePluginName(p);
-        return pName === args.name || pName.includes(args.name);
-      });
-
-      if (!found) {
-        printError(`Plugin '${args.name}' not found in configuration`);
-        console.log('');
-        console.log(chalk.dim('  Available plugins:'));
-        for (const p of allPlugins) {
-          console.log(chalk.dim(`    - ${resolvePluginName(p)}`));
-        }
-        console.log('');
-        this.exit(1);
-      }
-
-      printHeader(`Plugin: ${resolvePluginName(found)}`);
-
-      printKV('Name', resolvePluginName(found));
-      printKV('Version', resolvePluginVersion(found));
-      printKV('Type', resolvePluginType(found));
-
-      const isDev = (config.devPlugins || []).includes(found);
-      printKV('Environment', isDev ? 'development' : 'production');
-
-      if (found && typeof found === 'object') {
-        const p = found as Record<string, unknown>;
-
-        if (typeof p.description === 'string') {
-          printKV('Description', p.description);
-        }
-
-        if (Array.isArray(p.dependencies) && p.dependencies.length > 0) {
-          printKV('Dependencies', p.dependencies.join(', '));
-        }
-
-        // Show services if it's a loaded plugin instance
-        if (typeof p.init === 'function') {
-          printInfo('This is a runtime plugin instance (has init function)');
-        }
-      }
-
-      if (typeof found === 'string') {
-        printInfo('This is a string reference (will be imported at runtime)');
-      }
-
-      console.log('');
-    } catch (error: any) {
-      printError(error.message || String(error));
-      this.exit(1);
-    }
-  }
-}

package/src/commands/plugin/list.ts

@@ -1,93 +0,0 @@
-// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
-
-import { Args, Command, Flags } from '@oclif/core';
-import chalk from 'chalk';
-import { loadConfig } from '../../utils/config.js';
-import { printHeader, printInfo, printError } from '../../utils/format.js';
-import { resolvePluginName, resolvePluginVersion, resolvePluginType } from '../../utils/plugin-helpers.js';
-
-export default class PluginList extends Command {
-  static override description = 'List plugins defined in the configuration';
-
-  static override aliases = ['plugin ls'];
-
-  static override args = {
-    config: Args.string({ description: 'Configuration file path', required: false }),
-  };
-
-  static override flags = {
-    json: Flags.boolean({ description: 'Output as JSON' }),
-  };
-
-  async run(): Promise<void> {
-    const { args, flags } = await this.parse(PluginList);
-
-    try {
-      const { config } = await loadConfig(args.config);
-      const plugins: unknown[] = config.plugins || [];
-      const devPlugins: unknown[] = config.devPlugins || [];
-
-      if (flags.json) {
-        const data = {
-          plugins: plugins.map(p => ({
-            name: resolvePluginName(p),
-            version: resolvePluginVersion(p),
-            type: resolvePluginType(p),
-            dev: false,
-          })),
-          devPlugins: devPlugins.map(p => ({
-            name: resolvePluginName(p),
-            version: resolvePluginVersion(p),
-            type: resolvePluginType(p),
-            dev: true,
-          })),
-        };
-        console.log(JSON.stringify(data, null, 2));
-        return;
-      }
-
-      printHeader('Plugins');
-
-      if (plugins.length === 0 && devPlugins.length === 0) {
-        printInfo('No plugins configured');
-        console.log('');
-        console.log(chalk.dim('  Hint: Add plugins to your objectstack.config.ts'));
-        console.log(chalk.dim('  Or run: os plugin add <package-name>'));
-        console.log('');
-        return;
-      }
-
-      if (plugins.length > 0) {
-        console.log(chalk.bold(`\n  Plugins (${plugins.length}):`));
-        for (const plugin of plugins) {
-          const name = resolvePluginName(plugin);
-          const version = resolvePluginVersion(plugin);
-          const type = resolvePluginType(plugin);
-          console.log(
-            `    ${chalk.cyan('●')} ${chalk.white(name)}` +
-            (version !== '-' ? chalk.dim(` v${version}`) : '') +
-            (type !== 'standard' ? chalk.dim(` [${type}]`) : '')
-          );
-        }
-      }
-
-      if (devPlugins.length > 0) {
-        console.log(chalk.bold(`\n  Dev Plugins (${devPlugins.length}):`));
-        for (const plugin of devPlugins) {
-          const name = resolvePluginName(plugin);
-          const version = resolvePluginVersion(plugin);
-          console.log(
-            `    ${chalk.yellow('●')} ${chalk.white(name)}` +
-            (version !== '-' ? chalk.dim(` v${version}`) : '') +
-            chalk.dim(' [dev]')
-          );
-        }
-      }
-
-      console.log('');
-    } catch (error: any) {
-      printError(error.message || String(error));
-      this.exit(1);
-    }
-  }
-}

package/src/commands/plugin/publish.ts

@@ -1,176 +0,0 @@
-// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
-
-import { Args, Command, Flags } from '@oclif/core';
-import chalk from 'chalk';
-import path from 'path';
-import fs from 'fs';
-import crypto from 'crypto';
-import { createTimer, printHeader, printKV, printStep, printSuccess, printError, printWarning, printInfo } from '../../utils/format.js';
-
-/**
- * Publish a plugin artifact to the ObjectStack marketplace.
- *
- * Validates the artifact locally (unless --skipValidation), computes the
- * SHA-256 checksum, and uploads to the marketplace REST API.
- *
- * Architecture alignment: `npm publish`, `helm push`, `vsce publish`.
- */
-export default class PluginPublish extends Command {
-  static override description = 'Publish a plugin artifact to the marketplace';
-
-  static override args = {
-    artifact: Args.string({ description: 'Path to the artifact file', required: true }),
-  };
-
-  static override flags = {
-    registryUrl: Flags.string({ char: 'r', description: 'Marketplace API base URL', default: 'https://marketplace.objectstack.com/api/v1' }),
-    token: Flags.string({ char: 't', description: 'Authentication token', env: 'OBJECTSTACK_MARKETPLACE_TOKEN' }),
-    releaseNotes: Flags.string({ description: 'Release notes for this version' }),
-    preRelease: Flags.boolean({ description: 'Mark as a pre-release', default: false }),
-    skipValidation: Flags.boolean({ description: 'Skip local validation before publish', default: false }),
-    access: Flags.string({ description: 'Access level (public | restricted)', default: 'public', options: ['public', 'restricted'] }),
-    tags: Flags.string({ description: 'Comma-separated tags', multiple: true }),
-    json: Flags.boolean({ description: 'Output result as JSON' }),
-  };
-
-  async run(): Promise<void> {
-    const { args, flags } = await this.parse(PluginPublish);
-    const timer = createTimer();
-
-    if (!flags.json) {
-      printHeader('Plugin Publish');
-    }
-
-    try {
-      const artifactPath = path.resolve(process.cwd(), args.artifact);
-
-      if (!fs.existsSync(artifactPath)) {
-        throw new Error(`Artifact not found: ${artifactPath}`);
-      }
-
-      if (!flags.token) {
-        throw new Error('Authentication token required. Set --token or OBJECTSTACK_MARKETPLACE_TOKEN environment variable.');
-      }
-
-      if (!flags.json) {
-        printKV('Artifact', path.relative(process.cwd(), artifactPath));
-        printKV('Registry', flags.registryUrl);
-      }
-
-      // 1. Read artifact
-      const artifactBuffer = fs.readFileSync(artifactPath);
-      const sha256 = crypto.createHash('sha256').update(artifactBuffer).digest('hex');
-
-      // 2. Extract manifest info
-      let manifest: Record<string, unknown> | undefined;
-      try {
-        manifest = JSON.parse(artifactBuffer.toString('utf-8'));
-      } catch {
-        throw new Error('Artifact does not contain a valid JSON manifest');
-      }
-
-      const name = (manifest as any).manifest?.name || (manifest as any).name || 'unknown';
-      const version = (manifest as any).manifest?.version || (manifest as any).version || '0.0.0';
-
-      if (!flags.json) {
-        printKV('Package', `${name}@${version}`);
-      }
-
-      // 3. Local validation (unless skipped)
-      if (!flags.skipValidation) {
-        if (!flags.json) printStep('Running local validation...');
-
-        if (artifactBuffer.length === 0) {
-          throw new Error('Artifact is empty — cannot publish');
-        }
-
-        const checksumFile = artifactPath + '.sha256';
-        if (fs.existsSync(checksumFile)) {
-          const expectedHash = fs.readFileSync(checksumFile, 'utf-8').trim().split(/\s+/)[0];
-          if (expectedHash !== sha256) {
-            throw new Error(`SHA-256 mismatch: artifact has changed since build`);
-          }
-        }
-
-        if (!flags.json) printSuccess('Local validation passed');
-      }
-
-      // 4. Upload to marketplace
-      if (!flags.json) printStep('Uploading to marketplace...');
-
-      const uploadUrl = `${flags.registryUrl}/packages/upload`;
-      const tags = flags.tags?.flatMap(t => t.split(',')) || [];
-
-      const uploadPayload = {
-        packageName: name,
-        version,
-        sha256,
-        size: artifactBuffer.length,
-        preRelease: flags.preRelease,
-        access: flags.access,
-        releaseNotes: flags.releaseNotes,
-        tags,
-      };
-
-      // Perform HTTP upload
-      const response = await fetch(uploadUrl, {
-        method: 'POST',
-        headers: {
-          'Content-Type': 'application/json',
-          'Authorization': `Bearer ${flags.token}`,
-        },
-        body: JSON.stringify(uploadPayload),
-      });
-
-      if (!response.ok) {
-        const errorBody = await response.text().catch(() => 'Unknown error');
-        throw new Error(`Marketplace upload failed (${response.status}): ${errorBody}`);
-      }
-
-      const responseData = await response.json().catch(() => ({})) as Record<string, unknown>;
-
-      const result = {
-        success: true,
-        packageId: (responseData.packageId as string) || name,
-        version,
-        artifactUrl: responseData.artifactUrl as string | undefined,
-        sha256,
-        submissionId: responseData.submissionId as string | undefined,
-        message: `Published ${name}@${version} to marketplace`,
-      };
-
-      if (flags.json) {
-        console.log(JSON.stringify(result, null, 2));
-        return;
-      }
-
-      console.log('');
-      printSuccess(`Published ${chalk.cyan(`${name}@${version}`)}`);
-      console.log('');
-      printKV('SHA-256', sha256.slice(0, 16) + '...');
-      printKV('Size', `${(artifactBuffer.length / 1024).toFixed(1)} KB`);
-
-      if (result.artifactUrl) {
-        printKV('URL', result.artifactUrl);
-      }
-      if (result.submissionId) {
-        printKV('Submission', result.submissionId);
-      }
-
-      if (flags.preRelease) {
-        printWarning('Published as pre-release');
-      }
-
-      console.log('');
-      printInfo(`Duration: ${timer.display()}`);
-      console.log('');
-    } catch (error: any) {
-      if (flags.json) {
-        console.log(JSON.stringify({ success: false, errorMessage: error.message }));
-        this.exit(1);
-      }
-      printError(error.message || String(error));
-      this.exit(1);
-    }
-  }
-}