npm - @palettelab/cli - Versions diffs - 0.3.48 → 0.3.50 - Mend

@palettelab/cli 0.3.48 → 0.3.50

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (20) hide show

package/README.md +56 -8
package/backend-sdk/palette_sdk/__init__.py +12 -0
package/backend-sdk/palette_sdk/apps.py +12 -0
package/backend-sdk/palette_sdk/events.py +35 -1
package/backend-sdk/palette_sdk/manifest.py +48 -3
package/backend-sdk/palette_sdk/services.py +147 -0
package/docs/python-backend-sdk.md +65 -35
package/lib/bundler.js +58 -5
package/lib/cli.js +10 -0
package/lib/commands/dev.js +4 -1
package/lib/commands/doctor.js +9 -5
package/lib/commands/package.js +4 -1
package/lib/commands/publish.js +97 -19
package/lib/commands/services.js +426 -0
package/lib/commands/test.js +21 -11
package/lib/css-scope.js +124 -0
package/lib/dev-simulator.js +34 -4
package/lib/manifest.js +120 -5
package/lib/secrets.js +83 -8
package/package.json +4 -2

package/lib/dev-simulator.js CHANGED Viewed

@@ -8,7 +8,7 @@ const { spawn, spawnSync } = require("child_process")
 const { loadManifest } = require("./manifest")
 const { frontendBuildConfig } = require("./bundler")
 const { generatePaletteAppEntry } = require("./app-router")
-const { loadLocalEnv } = require("./secrets")
+const { declaredSecrets, loadLocalEnv } = require("./secrets")
 function loadEsbuild() {
   try {
@@ -51,6 +51,13 @@ function needsDatabase(manifest) {
   return Boolean(manifest.database || manifest.capabilities?.database)
 }
+function databaseDriverDependencies(databaseUrl) {
+  const url = String(databaseUrl || "")
+  if (/^postgres(?:ql)?(?:\+asyncpg)?:/i.test(url)) return ["asyncpg>=0.29.0"]
+  if (/^mysql\+aiomysql:/i.test(url)) return ["aiomysql>=0.2.0"]
+  return []
+}
 function loadLocalConnections(cwd, manifest) {
   const declared = Array.isArray(manifest.connections) ? manifest.connections : []
   const out = {}
@@ -103,13 +110,22 @@ function loadLocalAppServiceMocks(cwd) {
   }
 }
+function resolveDevSecrets(cwd, manifest) {
+  const values = loadLocalEnv(cwd, { apply: false })
+  for (const name of Object.keys(declaredSecrets(manifest))) {
+    if (process.env[name] !== undefined) values[name] = process.env[name]
+  }
+  return values
+}
 function ensurePythonEnv(cwd, devDir, manifest) {
   const hostPython = process.env.PALETTE_PYTHON || "python3"
   const venvDir = path.join(devDir, "backend-venv")
   const venvPython = path.join(venvDir, "bin", "python")
   const lockPath = path.join(venvDir, ".palette-dev-deps-lock")
   const dbDeps = needsDatabase(manifest) ? ["aiosqlite>=0.20.0", "greenlet>=3.0.0"] : []
-  const deps = Array.from(new Set([...pyprojectDependencies(cwd), ...dbDeps, "uvicorn>=0.30.0"]))
+  const dbDriverDeps = needsDatabase(manifest) ? databaseDriverDependencies(process.env.PALETTE_DEV_DATABASE_URL) : []
+  const deps = Array.from(new Set([...pyprojectDependencies(cwd), ...dbDeps, ...dbDriverDeps, "uvicorn>=0.30.0"]))
   const lock = JSON.stringify(deps)
   if (!fs.existsSync(venvPython)) {
@@ -149,7 +165,7 @@ function writeBackendRunner(cwd, devDir, manifest, backendEntry, backendPort) {
   const runner = path.join(devDir, "backend_runner.py")
   const sdkPath = localBackendSdkPath()
   const databasePath = path.join(devDir, `${manifest.id}.sqlite3`)
-  const devSecrets = loadLocalEnv(cwd, { apply: false })
+  const devSecrets = resolveDevSecrets(cwd, manifest)
   const devConnections = loadLocalConnections(cwd, manifest)
   const devAppMocks = loadLocalAppServiceMocks(cwd)
   const content = `from __future__ import annotations
@@ -615,6 +631,7 @@ function indexHtml(manifest) {
       .palette-local-toasts { position: fixed; right: 16px; bottom: 16px; display: grid; gap: 8px; z-index: 50; }
       .palette-local-toast { background: #1d1b18; color: white; padding: 10px 12px; font-size: 13px; box-shadow: 0 10px 30px rgba(0,0,0,.15); }
     </style>
+    <link rel="stylesheet" href="/simulator.css" />
   </head>
   <body>
     <div id="root"></div>
@@ -642,6 +659,7 @@ async function startFrontend(cwd, devDir, manifest, frontendPort, backendPort) {
   if (!fs.existsSync(absEntry)) throw new Error(`frontend entry not found: ${entry}`)
   const generatedEntry = path.join(devDir, "simulator-entry.jsx")
   const bundlePath = path.join(devDir, "simulator.js")
+  const cssPath = path.join(devDir, "simulator.css")
   fs.writeFileSync(generatedEntry, simulatorEntrySource(cwd, absEntry, manifest, backendPort))
   const buildConfig = frontendBuildConfig(cwd, { ...(manifest.frontend || {}), entry })
@@ -658,6 +676,7 @@ async function startFrontend(cwd, devDir, manifest, frontendPort, backendPort) {
     define: buildConfig.define,
     absWorkingDir: cwd,
     sourcemap: "inline",
+    metafile: true,
     logLevel: "silent",
     plugins: [
       ...buildConfig.plugins,
@@ -688,6 +707,17 @@ async function startFrontend(cwd, devDir, manifest, frontendPort, backendPort) {
       res.end(fs.readFileSync(bundlePath))
       return
     }
+    if (url.pathname === "/simulator.css") {
+      console.log(`[pltt] frontend GET ${url.pathname} -> ${fs.existsSync(cssPath) ? 200 : 204}`)
+      if (!fs.existsSync(cssPath)) {
+        res.writeHead(204, { "Cache-Control": "no-store" })
+        res.end()
+        return
+      }
+      res.writeHead(200, { "Content-Type": "text/css; charset=utf-8", "Cache-Control": "no-store" })
+      res.end(fs.readFileSync(cssPath))
+      return
+    }
     console.log(`[pltt] frontend GET ${url.pathname} -> 200`)
     res.writeHead(200, { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store" })
     res.end(indexHtml(manifest))
@@ -736,4 +766,4 @@ async function startSimulator({ cwd, frontendPort, backendPort }) {
   await stop()
 }
-module.exports = { startSimulator }
+module.exports = { databaseDriverDependencies, resolveDevSecrets, startSimulator }

package/lib/manifest.js CHANGED Viewed

@@ -53,6 +53,7 @@ const TOP_LEVEL_KEYS = new Set([
   "platform_services",
   "provides",
   "requires",
+  "consumes",
 ])
 function loadManifest(cwd) {
@@ -237,6 +238,10 @@ function isCapabilityId(value) {
   return typeof value === "string" && /^[a-z][a-z0-9]*(?:[._-][a-z0-9]+)*$/.test(value)
 }
+function isBrokerTarget(value) {
+  return typeof value === "string" && /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+#[A-Za-z0-9_.-]+$/.test(value)
+}
 function validateServiceRoutes(value, label, errors) {
   if (value === undefined) return
   if (!Array.isArray(value)) {
@@ -262,13 +267,63 @@ function validateServiceRoutes(value, label, errors) {
   })
 }
+function validateServiceMethods(value, label, errors) {
+  if (value === undefined) return
+  if (!Array.isArray(value)) {
+    errors.push(`${label}.methods must be an array`)
+    return
+  }
+  const methods = new Set(["GET", "POST", "PUT", "PATCH", "DELETE"])
+  const seen = new Set()
+  value.forEach((method, i) => {
+    const methodLabel = `${label}.methods[${i}]`
+    if (!isObject(method)) {
+      errors.push(`${methodLabel} must be an object`)
+      return
+    }
+    unknownKeys(
+      method,
+      new Set([
+        "name",
+        "scope",
+        "label",
+        "description",
+        "input_schema",
+        "input",
+        "output_schema",
+        "output",
+        "route_method",
+        "route_path",
+      ]),
+      methodLabel,
+      errors,
+    )
+    if (typeof method.name !== "string" || !/^[A-Za-z0-9_.-]+$/.test(method.name)) {
+      errors.push(`${methodLabel}.name must be a broker method name`)
+    } else if (seen.has(method.name)) {
+      errors.push(`duplicate provided method name: ${method.name}`)
+    }
+    seen.add(method.name)
+    for (const key of ["scope", "label", "description", "input_schema", "input", "output_schema", "output", "route_path"]) {
+      requireString(method, key, methodLabel, errors)
+    }
+    if (method.route_method !== undefined && !methods.has(String(method.route_method).toUpperCase())) {
+      errors.push(`${methodLabel}.route_method must be one of ${Array.from(methods).join(", ")}`)
+    }
+    if (method.route_path !== undefined && (typeof method.route_path !== "string" || !method.route_path.startsWith("/"))) {
+      errors.push(`${methodLabel}.route_path must start with '/'`)
+    }
+  })
+}
 function validateProvides(value, errors) {
   if (value === undefined) return
   if (!isObject(value)) {
     errors.push("provides must be an object")
     return
   }
-  unknownKeys(value, new Set(["services", "events"]), "provides", errors)
+  unknownKeys(value, new Set(["namespace", "services", "events"]), "provides", errors)
+  requireString(value, "namespace", "provides", errors)
   if (value.services !== undefined) {
     if (!Array.isArray(value.services)) {
       errors.push("provides.services must be an array")
@@ -280,7 +335,7 @@ function validateProvides(value, errors) {
           errors.push(`${label} must be an object`)
           return
         }
-        unknownKeys(service, new Set(["id", "version", "label", "description", "permissions", "routes"]), label, errors)
+        unknownKeys(service, new Set(["id", "version", "label", "description", "permissions", "routes", "methods"]), label, errors)
         if (!isCapabilityId(service.id)) {
           errors.push(`${label}.id must be a dotted lowercase capability id`)
         } else if (seen.has(service.id)) {
@@ -302,6 +357,7 @@ function validateProvides(value, errors) {
           }
         }
         validateServiceRoutes(service.routes, label, errors)
+        validateServiceMethods(service.methods, label, errors)
       })
     }
   }
@@ -309,9 +365,29 @@ function validateProvides(value, errors) {
     if (!Array.isArray(value.events)) {
       errors.push("provides.events must be an array")
     } else {
-      for (const event of value.events) {
-        if (!isCapabilityId(event)) errors.push(`provides.events entries must be dotted lowercase topics: ${event}`)
-      }
+      const seen = new Set()
+      value.events.forEach((event, i) => {
+        const label = `provides.events[${i}]`
+        let topic
+        if (typeof event === "string") {
+          topic = event
+        } else if (isObject(event)) {
+          unknownKeys(event, new Set(["topic", "name", "version", "payload_schema", "schema", "description"]), label, errors)
+          topic = event.topic || event.name
+          for (const key of ["version", "payload_schema", "schema", "description"]) {
+            requireString(event, key, label, errors)
+          }
+        } else {
+          errors.push(`${label} must be a topic string or object`)
+          return
+        }
+        if (!isCapabilityId(topic)) {
+          errors.push(`${label}.topic must be a dotted lowercase topic`)
+        } else if (seen.has(topic)) {
+          errors.push(`duplicate provided event topic: ${topic}`)
+        }
+        seen.add(topic)
+      })
     }
   }
 }
@@ -375,6 +451,44 @@ function validateRequires(value, errors) {
   }
 }
+function validateConsumes(value, errors) {
+  if (value === undefined) return
+  if (!isObject(value)) {
+    errors.push("consumes must be an object")
+    return
+  }
+  unknownKeys(value, new Set(["services", "events"]), "consumes", errors)
+  for (const bucket of ["services", "events"]) {
+    if (value[bucket] === undefined) continue
+    if (!Array.isArray(value[bucket])) {
+      errors.push(`consumes.${bucket} must be an array`)
+      continue
+    }
+    const seen = new Set()
+    value[bucket].forEach((entry, i) => {
+      const label = `consumes.${bucket}[${i}]`
+      let target
+      if (typeof entry === "string") {
+        target = entry
+      } else if (isObject(entry)) {
+        unknownKeys(entry, new Set(["target", "required", "reason"]), label, errors)
+        target = entry.target
+        requireBoolean(entry, "required", label, errors)
+        requireString(entry, "reason", label, errors)
+      } else {
+        errors.push(`${label} must be a broker target string or object`)
+        return
+      }
+      if (!isBrokerTarget(target)) {
+        errors.push(`${label}.target must look like namespace/version#name`)
+        return
+      }
+      if (seen.has(target)) errors.push(`duplicate consumed ${bucket.slice(0, -1)} target: ${target}`)
+      seen.add(target)
+    })
+  }
+}
 function validateManifest(m) {
   const errors = []
   if (!isObject(m)) return ["manifest must be an object"]
@@ -445,6 +559,7 @@ function validateManifest(m) {
   validatePlatformServices(m.platform_services, errors)
   validateProvides(m.provides, errors)
   validateRequires(m.requires, errors)
+  validateConsumes(m.consumes, errors)
   if (m.sdk) {
     if (!isObject(m.sdk)) errors.push("sdk must be an object")

package/lib/secrets.js CHANGED Viewed

@@ -6,6 +6,22 @@ const path = require("path")
 const LOCAL_ENV_PATH = path.join(".palette", ".env.local")
 const EXAMPLE_ENV_PATH = path.join(".palette", ".env.example")
 const SECRET_SCOPES = new Set(["dev", "plugin", "install", "platform"])
+const RESERVED_AUTO_ENV_KEYS = new Set([
+  "CI",
+  "HOME",
+  "HOST",
+  "HOSTNAME",
+  "LOGNAME",
+  "NODE_ENV",
+  "OLDPWD",
+  "PATH",
+  "PORT",
+  "PWD",
+  "SHELL",
+  "TERM",
+  "TMPDIR",
+  "USER",
+])
 function parseDotEnv(src) {
   const values = {}
@@ -31,6 +47,50 @@ function readDotEnvFile(filePath) {
   return parseDotEnv(fs.readFileSync(filePath, "utf8"))
 }
+function unique(items) {
+  return Array.from(new Set(items.filter(Boolean)))
+}
+function envFileNames(environment) {
+  return unique([
+    ".env",
+    ".env.local",
+    environment ? `.env.${environment}` : null,
+    environment ? `.env.${environment}.local` : null,
+  ])
+}
+function loadRootEnvFiles(cwd, { environment } = {}) {
+  const values = {}
+  const files = []
+  for (const name of envFileNames(environment || process.env.PALETTE_ENV)) {
+    const filePath = path.join(cwd, name)
+    if (!fs.existsSync(filePath)) continue
+    Object.assign(values, readDotEnvFile(filePath))
+    files.push(name)
+  }
+  return { values, files }
+}
+function loadLocalEnvDetails(cwd, { apply = true, environment, includePalette = true } = {}) {
+  const root = loadRootEnvFiles(cwd, { environment })
+  const values = { ...root.values }
+  const files = [...root.files]
+  if (includePalette) {
+    const palettePath = path.join(cwd, LOCAL_ENV_PATH)
+    if (fs.existsSync(palettePath)) {
+      Object.assign(values, readDotEnvFile(palettePath))
+      files.push(LOCAL_ENV_PATH)
+    }
+  }
+  if (apply) {
+    for (const [key, value] of Object.entries(values)) {
+      if (process.env[key] === undefined) process.env[key] = value
+    }
+  }
+  return { values, files }
+}
 function formatDotEnvValue(value) {
   if (value === undefined || value === null) return ""
   const str = String(value)
@@ -132,14 +192,25 @@ function initLocalEnv(cwd, manifest, { overwrite = false } = {}) {
   return { localPath, examplePath, declared }
 }
-function loadLocalEnv(cwd, { apply = true } = {}) {
-  const values = readDotEnvFile(path.join(cwd, LOCAL_ENV_PATH))
-  if (apply) {
-    for (const [key, value] of Object.entries(values)) {
-      if (process.env[key] === undefined) process.env[key] = value
-    }
-  }
-  return values
+function loadLocalEnv(cwd, { apply = true, environment, includePalette = true } = {}) {
+  return loadLocalEnvDetails(cwd, { apply, environment, includePalette }).values
+}
+function isPublicEnvKey(key) {
+  return key.startsWith("NEXT_PUBLIC_")
+}
+function isReservedAutoEnvKey(key) {
+  return (
+    RESERVED_AUTO_ENV_KEYS.has(key) ||
+    key.startsWith("PALETTE_") ||
+    key.startsWith("npm_") ||
+    key.startsWith("NPM_")
+  )
+}
+function canAutoUploadEnvKey(key) {
+  return /^[A-Z_][A-Z0-9_]*$/.test(key) && !isPublicEnvKey(key) && !isReservedAutoEnvKey(key)
 }
 function redactValue(value) {
@@ -156,9 +227,13 @@ module.exports = {
   declaredSecrets,
   ensureGitignore,
   initLocalEnv,
+  loadLocalEnvDetails,
   loadLocalEnv,
   parseDotEnv,
   readDotEnvFile,
   redactValue,
   secretsForScope,
+  canAutoUploadEnvKey,
+  isPublicEnvKey,
+  isReservedAutoEnvKey,
 }

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@palettelab/cli",
-  "version": "0.3.48",
+  "version": "0.3.50",
   "description": "Developer CLI for building Palette platform plugins — no platform source access required.",
   "bin": {
     "pltt": "bin/pltt.js"
@@ -23,7 +23,9 @@
     "node": ">=18"
   },
   "dependencies": {
-    "esbuild": "^0.24.0"
+    "esbuild": "^0.24.0",
+    "postcss": "^8.5.15",
+    "postcss-selector-parser": "^7.1.1"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org"