@sitecoreai-labs/sitecoreai-cli 0.1.2 → 0.2.1

package/dist/sync/typescript-recipe.js

@@ -0,0 +1,112 @@
+"use strict";
+/**
+ * Shared `.recipe.ts` loader.
+ *
+ * Authored recipes (CMS, brand-kit, agents, campaigns, briefs, etc.) all
+ * load through this path so end users can write `.recipe.ts` files with
+ * Zod-derived types and `satisfies` checks. The transpile + sandboxed
+ * execute machinery is owned by `@/recipe/sandbox` — this module is the
+ * thin wrapper that picks between the confined child and the legacy
+ * in-process tsx loader, and is consumed by both:
+ *
+ *   - `src/sync/io.ts:loadRecipe` (schema-aware loader used by brand,
+ *     agents, campaigns, briefs, …)
+ *   - `src/recipe/io.ts:loadRecipe` (CMS recipe discriminated-union loader)
+ *
+ * Output is unvalidated — callers Zod-parse the returned value. See
+ * docs/recipe-sandbox.md.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadTypeScriptRecipe = exports.isTypeScriptRecipePath = void 0;
+const node_path_1 = __importDefault(require("node:path"));
+const errors_1 = require("../shared/errors");
+const load_1 = require("../recipe/sandbox/load");
+/** Extensions this loader recognizes as TypeScript-source recipes. */
+const TS_EXTENSIONS = new Set([".ts", ".tsx", ".mts", ".cts"]);
+/** Whether the given file path should be loaded via the TypeScript path. */
+const isTypeScriptRecipePath = (filePath) => TS_EXTENSIONS.has(node_path_1.default.extname(filePath).toLowerCase());
+exports.isTypeScriptRecipePath = isTypeScriptRecipePath;
+/**
+ * Load a `.recipe.ts` (or `.tsx`/`.mts`/`.cts`) file and return its
+ * exported recipe value. By default the file is loaded in a confined
+ * child process (see docs/recipe-sandbox.md) so a hostile recipe cannot
+ * run with scai's full privileges. `SITECOREAI_RECIPE_SANDBOX=0` forces
+ * the legacy in-process loader (useful for debugging — the warning lands
+ * on stderr so JSON-mode CLI streams are not corrupted).
+ *
+ * The result is unvalidated: callers Zod-parse it.
+ */
+const loadTypeScriptRecipe = async (filePath) => {
+    if ((0, load_1.isRecipeSandboxEnabled)()) {
+        return (0, load_1.loadRecipeInSandbox)(filePath);
+    }
+    warnSandboxDisabled();
+    return loadRecipeInProcess(filePath);
+};
+exports.loadTypeScriptRecipe = loadTypeScriptRecipe;
+/**
+ * Lazily install tsx's CommonJS require hook *once* per process. Earlier
+ * versions of this loader called `register()` and the matching
+ * `unregister` cleanup on every load — fine for one-shot CLI runs but
+ * wasteful in long-running surfaces (e.g. `scai cli shell`) where N
+ * recipe loads = N register/unregister cycles. Once installed, the hook
+ * stays for the rest of the process lifetime; recipe changes mid-session
+ * therefore require an exit. The per-recipe `require.cache` clear below
+ * handles re-imports of the *same* file path within the same process.
+ */
+let tsxRegistered = false;
+const ensureTsxRegistered = () => {
+    if (tsxRegistered) {
+        return;
+    }
+    /* eslint-disable @typescript-eslint/no-require-imports */
+    const tsxApi = require("tsx/cjs/api");
+    /* eslint-enable @typescript-eslint/no-require-imports */
+    tsxApi.register();
+    tsxRegistered = true;
+};
+let sandboxOptOutWarned = false;
+const warnSandboxDisabled = () => {
+    if (sandboxOptOutWarned) {
+        return;
+    }
+    sandboxOptOutWarned = true;
+    // Stderr (not stdout) — MCP and `--json` callers parse stdout as a
+    // structured stream and must not see this warning interleaved.
+    process.stderr.write("scai: SITECOREAI_RECIPE_SANDBOX=0 — loading .recipe.ts in-process; " +
+        "a hostile recipe runs with scai's full privileges.\n");
+};
+const loadRecipeInProcess = async (filePath) => {
+    const absolute = node_path_1.default.resolve(filePath);
+    try {
+        ensureTsxRegistered();
+        if (require.cache[absolute]) {
+            delete require.cache[absolute];
+        }
+        /* eslint-disable @typescript-eslint/no-require-imports */
+        const mod = require(absolute);
+        /* eslint-enable @typescript-eslint/no-require-imports */
+        if (mod.default !== undefined) {
+            return mod.default;
+        }
+        // Fall back to the first non-default exported value.
+        for (const key of Object.keys(mod)) {
+            if (key !== "default" && mod[key] !== undefined) {
+                return mod[key];
+            }
+        }
+        throw (0, errors_1.createScaiError)(`Recipe at ${filePath} has no exports.`, "INPUT_INVALID", {
+            hint: "Add `export default <recipe>` (or any named export) to the file.",
+        });
+    }
+    catch (error) {
+        // Don't double-wrap our own ScaiErrors (e.g. "Recipe at <path> has no exports.").
+        if (error instanceof errors_1.ScaiError) {
+            throw error;
+        }
+        throw (0, errors_1.createScaiError)(`Failed to load recipe TypeScript file ${filePath}: ${error instanceof Error ? error.message : String(error)}`, "INPUT_INVALID", { hint: "Confirm the file compiles standalone (try `pnpm exec tsx <file>`)." });
+    }
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sitecoreai-labs/sitecoreai-cli",
-  "version": "0.1.2",
+  "version": "0.2.1",
   "description": "SitecoreAI developer toolkit — a native TypeScript CLI, SDK, and MCP server for deploy, serialization, recipes, publishing, and content operations.",
   "license": "MIT",
   "type": "commonjs",