datagrok-tools 6.6.0 → 6.7.1

package/bin/utils/node-dapi.js

@@ -11,6 +11,7 @@ exports.mapPositionalParams = mapPositionalParams;
 exports.parseDomainAddress = parseDomainAddress;
 exports.throwIfApiError = throwIfApiError;
 var _crypto = require("crypto");
+var _keypair = require("./keypair");
 /// Docs: [Grok Dapi](/docs/plans/grok-dapi/)
 
 function ensureBodyId(body) {
@@ -62,12 +63,25 @@ async function fetchOrRetry(url, opts, retriable, timeoutMs = setting('TIMEOUT',
 class NodeApiClient {
   /** Set by `createClient` when the run asked for an admin session, so a re-login restores it. */
   adminMode = false;
-  constructor(baseUrl, token, devKey) {
+  constructor(baseUrl, token, devKey, privateKey) {
     this.baseUrl = baseUrl;
     this.token = token;
     this.devKey = devKey;
+    this.privateKey = privateKey;
   }
-  static async login(baseUrl, devKey) {
+
+  /** [privateKey] from a caller that resolved it by alias; otherwise it is looked up by URL. */
+  static async login(baseUrl, devKey, privateKey) {
+    privateKey ??= (0, _keypair.keypairFor)(baseUrl, devKey);
+    if (privateKey) {
+      try {
+        return new NodeApiClient(baseUrl, await (0, _keypair.keyLogin)(baseUrl, privateKey), devKey, privateKey);
+      } catch (e) {
+        // A server without the keypair endpoints is a reason to use the developer key that is
+        // still configured, not to stop: the same config often names stands of both vintages.
+        if (e?.name !== 'ServerTooOldError' || !devKey) throw e;
+      }
+    }
     // Servers before 1.28 only knew the key-in-URL form, where it leaked into every
     // access log on the way; they answer 404 or 401 to the key-less route.
     let res = await fetch(`${baseUrl}/users/login/dev`, {
@@ -87,12 +101,12 @@ class NodeApiClient {
 
   /**
    * A stand serving several isolates can reject a session one of them does not know, and an
-   * hour-long walk has no way to ask the operator to log in again. The developer key is good
-   * for a new session, so one is taken rather than losing the run.
+   * hour-long walk has no way to ask the operator to log in again. The keypair (or the
+   * developer key) is good for a new session, so one is taken rather than losing the run.
    */
   async reauthenticate() {
-    if (!this.devKey) return false;
-    const fresh = await NodeApiClient.login(this.baseUrl, this.devKey).catch(() => null);
+    if (!this.devKey && !this.privateKey) return false;
+    const fresh = await NodeApiClient.login(this.baseUrl, this.devKey, this.privateKey).catch(() => null);
     if (!fresh) return false;
     this.token = fresh.token;
     if (this.adminMode) this.token = (await fresh.post('/users/sessions/current/admin'))?.token ?? this.token;

package/bin/utils/playwright-runner.js

@@ -12,6 +12,7 @@ var _path = _interopRequireDefault(require("path"));
 var _papaparse = _interopRequireDefault(require("papaparse"));
 var color = _interopRequireWildcard(require("./color-utils"));
 var testUtils = _interopRequireWildcard(require("./test-utils"));
+var keypair = _interopRequireWildcard(require("./keypair"));
 function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }
 function hasPlaywrightTests(pkgDir) {
   const pkgJsonPath = _path.default.join(pkgDir, 'package.json');
@@ -159,12 +160,17 @@ async function runPlaywrightTests(pkgDir, testDir, args, hostKey) {
   } catch {
     webUrl = url.replace(/\/api\/?$/, '');
   }
+
+  // The second user the multi-user specs need. Its keypair wins over its developer key,
+  // the same way the first user's does; both are explicit, so neither picks up the
+  // configured identity by accident.
   let token2 = '';
-  if (process.env.DATAGROK_DEV_KEY_2 && process.env.DATAGROK_DEV_KEY_2.length > 0) {
+  const privateKey2 = keypair.keyFromEnv('DATAGROK_PRIVATE_KEY_2');
+  if (privateKey2 || process.env.DATAGROK_DEV_KEY_2) {
     try {
-      token2 = await testUtils.getToken(url, process.env.DATAGROK_DEV_KEY_2);
+      token2 = privateKey2 ? await keypair.keyLogin(url, privateKey2) : await testUtils.getToken(url, process.env.DATAGROK_DEV_KEY_2);
     } catch (e) {
-      color.warn(`Playwright: DATAGROK_DEV_KEY_2 set but failed to exchange for token: ${e.message || e}`);
+      color.warn(`Playwright: second-user credentials set but failed to exchange for token: ${e.message || e}`);
     }
   }
   const configPath = _path.default.join(testDir, 'playwright.config.ts');

package/bin/utils/server-client.js

@@ -5,7 +5,7 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.createClient = createClient;
 var _nodeDapi = require("./node-dapi");
-var _testUtils = require("./test-utils");
+var _keypair = require("./keypair");
 /**
  * `--admin` asks the server for an admin session, which lifts the permission filter for this run:
  * without it a stand-wide pull sees only what the key's own account can, and content in other
@@ -14,14 +14,13 @@ var _testUtils = require("./test-utils");
  * the command or reach another session.
  */
 async function createClient(hostArg, admin = false) {
-  const {
-    url,
-    key
-  } = (0, _testUtils.getDevKey)(hostArg ?? '');
-  const client = await _nodeDapi.NodeApiClient.login(url, key);
+  // Resolved from the alias the caller named, not from its URL: two aliases can point at the
+  // same server, and only this side knows which one was asked for.
+  const cred = (0, _keypair.getServerCredentials)(hostArg ?? '');
+  const client = await _nodeDapi.NodeApiClient.login(cred.url, cred.key ?? '', cred.privateKey);
   if (!admin) return client;
   const token = (await client.post('/users/sessions/current/admin'))?.token;
-  if (!token) throw new Error(`${url} refused an admin session — the account behind this key cannot start one`);
+  if (!token) throw new Error(`${cred.url} refused an admin session — the account behind this key cannot start one`);
   client.token = token;
   client.adminMode = true;
   return client;

package/bin/utils/test-utils.js

@@ -36,6 +36,7 @@ var _puppeteer = _interopRequireDefault(require("puppeteer"));
 var color = _interopRequireWildcard(require("../utils/color-utils"));
 var _papaparse = _interopRequireDefault(require("papaparse"));
 var _devKey = require("./dev-key");
+var keypair = _interopRequireWildcard(require("./keypair"));
 function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }
 const fetch = require('node-fetch');
 const grokDir = _path.default.join(_os.default.homedir(), '.grok');
@@ -55,9 +56,24 @@ async function getToken(url, key) {
   // auth failure (valid JSON with isSuccess=false) is returned immediately, no retry.
   const maxAttempts = 15;
   const delayMs = 3000;
+  // Keypair login is the supported path; the developer key remains as a fallback
+  // for stands and CI secrets that have not been migrated yet — including when a key is
+  // configured but that stand does not know it, which must not take the run down while a
+  // working dev key is right there.
+  let privateKey = keypair.keypairFor(url, key);
   let lastError;
   for (let attempt = 1; attempt <= maxAttempts; attempt++) {
     try {
+      if (privateKey) {
+        try {
+          return await keypair.keyLogin(url, privateKey);
+        } catch (error) {
+          const refused = error?.name === 'ServerTooOldError' || error?.message?.startsWith('Key login failed');
+          if (!key || !refused) throw error;
+          color.warn(`${url}: ${error.message} Falling back to the developer key.`);
+          privateKey = undefined;
+        }
+      }
       const response = await (0, _devKey.devKeyFetch)(`${url}/users/login/dev`, `${url}/users/login/dev/${key}`, key, {
         method: 'POST'
       });
@@ -80,12 +96,14 @@ async function getToken(url, key) {
       throw new Error('Unable to login to server. Check your dev key');
     } catch (error) {
       if (error?.message === 'Unable to login to server. Check your dev key') throw error;
+      // A rejected signature is a credential problem, not a readiness one.
+      if (error?.message?.startsWith('Key login failed')) throw error;
       lastError = error;
       if (utils.isConnectivityError(error)) color.warn(`Playwright: server not reachable yet (attempt ${attempt}/${maxAttempts}): ${url}`);
       if (attempt < maxAttempts) await new Promise(r => setTimeout(r, delayMs));
     }
   }
-  throw lastError ?? new Error(`Unable to exchange dev key for token at ${url}`);
+  throw lastError ?? new Error(`Unable to obtain a token from ${url}`);
 }
 async function isPackageOnServer(hostKey, packageName) {
   try {

package/bin/utils/toolchain.js

@@ -0,0 +1,121 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.copyLibraryAssets = copyLibraryAssets;
+exports.ensureLibraryExports = ensureLibraryExports;
+exports.toolchain = toolchain;
+var _fs = _interopRequireDefault(require("fs"));
+var _path = _interopRequireDefault(require("path"));
+/**
+ * The shared toolchain (`@datagrok/build-config`: rspack factory, TypeScript) as seen from `dir`:
+ * the workspace root's copy inside public/, the package's own devDependency in a standalone package.
+ */
+function toolchain(dir) {
+  let pkgJson;
+  try {
+    pkgJson = require.resolve('@datagrok/build-config/package.json', {
+      paths: [dir]
+    });
+  } catch {
+    throw new Error('@datagrok/build-config is not installed: run `pnpm install` at the root of public/, ' + 'or add it as a devDependency of a standalone package');
+  }
+  const buildConfigDir = _path.default.dirname(pkgJson);
+  const tsPkg = require.resolve('typescript/package.json', {
+    paths: [buildConfigDir]
+  });
+  return {
+    buildConfig: require(buildConfigDir),
+    buildConfigDir,
+    tsc: _path.default.join(_path.default.dirname(tsPkg), 'bin', 'tsc')
+  };
+}
+const ASSET = /\.(css|scss|wasm|js|mjs|cjs|json|png|jpe?g|gif|svg|txt|csv|md|html|sdf|mol)$/i;
+
+/**
+ * A library's dist/ must be self-contained: the css, wasm, json and plain-js files its sources
+ * import relative to themselves are mirrored next to the compiled output. A .js next to a .ts of
+ * the same name is a stale in-place compile, not an asset.
+ */
+function copyLibraryAssets(dir) {
+  if (!_fs.default.existsSync(_path.default.join(dir, 'dist'))) return 0;
+  let n = 0;
+  const walk = rel => {
+    for (const e of _fs.default.readdirSync(_path.default.join(dir, rel), {
+      withFileTypes: true
+    })) {
+      if (e.name === 'node_modules' || e.name === 'dist' || e.name.startsWith('.')) continue;
+      const r = rel ? `${rel}/${e.name}` : e.name;
+      if (e.isDirectory()) walk(r);else if (rel && ASSET.test(e.name) && e.name !== 'package.json' && !isCompiledSibling(dir, r)) {
+        const to = _path.default.join(dir, 'dist', r);
+        _fs.default.mkdirSync(_path.default.dirname(to), {
+          recursive: true
+        });
+        const from = _path.default.join(dir, r);
+        if (!_fs.default.existsSync(to) || _fs.default.statSync(to).mtimeMs < _fs.default.statSync(from).mtimeMs) {
+          _fs.default.copyFileSync(from, to);
+          n++;
+        }
+      }
+    }
+  };
+  walk('');
+  if (n) console.log(`copied ${n} asset file(s) into dist/`);
+  return n;
+}
+
+/**
+ * Keeps a library's package.json `exports` in step with its source tree. A library that ships dist/
+ * has an `exports` map ending in the `./*` wildcard; the wildcard cannot resolve a directory import
+ * (`@datagrok-libraries/bio/src/trees`), so every directory with an index.ts needs an explicit entry.
+ * Adds the missing ones and leaves everything else (hand-written entries, the wildcards, entries for
+ * directories that no longer exist) untouched. Packages without the wildcard are not managed.
+ */
+function ensureLibraryExports(dir) {
+  const pj = _path.default.join(dir, 'package.json');
+  const p = JSON.parse(_fs.default.readFileSync(pj, 'utf8'));
+  const ex = p.exports;
+  if (!ex || typeof ex !== 'object' || !ex['./*']) return false;
+  const indexDirs = new Set();
+  const walk = (d, rel) => {
+    for (const e of _fs.default.readdirSync(d, {
+      withFileTypes: true
+    })) {
+      if (e.name === 'node_modules' || e.name === 'dist' || e.name.startsWith('.')) continue;
+      const r = rel ? `${rel}/${e.name}` : e.name;
+      if (e.isDirectory()) walk(_path.default.join(d, e.name), r);else if (e.name === 'index.ts' && rel) indexDirs.add(rel);
+    }
+  };
+  walk(dir, '');
+  // Add-only: hand-written entries (aliases such as js-api's "./u2core") are never touched.
+  const next = {
+    ...ex
+  };
+  let changed = false;
+  for (const rel of [...indexDirs].sort()) {
+    const key = `./${rel}`;
+    if (!(key in next)) {
+      next[key] = {
+        types: `./dist/${rel}/index.d.ts`,
+        default: `./dist/${rel}/index.js`
+      };
+      changed = true;
+    }
+  }
+  if (!changed) return false;
+  // wildcards last: exports are matched by specificity, but keeping them last reads better
+  const wild = ['./*.js', './*'].filter(k => k in next);
+  const ordered = {};
+  for (const [k, v] of Object.entries(next)) if (!wild.includes(k)) ordered[k] = v;
+  for (const k of wild) ordered[k] = next[k];
+  p.exports = ordered;
+  _fs.default.writeFileSync(pj, JSON.stringify(p, null, 2) + '\n');
+  console.log(`package.json exports updated for ${_path.default.basename(dir)}`);
+  return true;
+}
+function isCompiledSibling(dir, rel) {
+  const m = rel.match(/^(.*)\.(js|mjs|cjs)$/);
+  return !!m && ['.ts', '.tsx'].some(e => _fs.default.existsSync(_path.default.join(dir, m[1] + e)));
+}

package/bin/utils/utils.js

@@ -23,6 +23,7 @@ exports.headerTags = void 0;
 exports.isConnectivityError = isConnectivityError;
 exports.isEmpty = isEmpty;
 exports.isPackageDir = isPackageDir;
+exports.isPnpmWorkspace = isPnpmWorkspace;
 exports.isValidCron = isValidCron;
 exports.jsExtention = void 0;
 exports.kebabToCamelCase = kebabToCamelCase;
@@ -301,6 +302,14 @@ function isConnectivityError(error) {
   const msg = (error?.message ?? '').toLowerCase() + ' ' + (error?.code ?? '').toLowerCase();
   return ['econnrefused', 'enotfound', 'etimedout', 'eai_again', 'econnreset', 'fetch failed', 'network error'].some(token => msg.includes(token));
 }
+
+/** True when `dir` is inside a pnpm workspace (a pnpm-workspace.yaml in it or above it). */
+function isPnpmWorkspace(dir) {
+  for (let d = _path.default.resolve(dir);; d = _path.default.dirname(d)) {
+    if (_fs.default.existsSync(_path.default.join(d, 'pnpm-workspace.yaml'))) return true;
+    if (_path.default.dirname(d) === d) return false;
+  }
+}
 async function runScript(script, path, verbose = false) {
   try {
     const {

package/package-template/.vscode/tasks.json

@@ -3,7 +3,7 @@
   "tasks": [
     {
       "type": "shell",
-      "command": "cmd.exe /c 'call webpack && call grok publish #{GROK_HOST_ALIAS}'",
+      "command": "cmd.exe /c 'call pnpm run build && call grok publish #{GROK_HOST_ALIAS}'",
       "label": "rebuild"
     }
   ]

package/package-template/package.json

@@ -4,21 +4,16 @@
   "version": "0.0.1",
   "description": "#{PACKAGE_NAME} package",
   "dependencies": {
-    "datagrok-api": "^1.26.0",
-    "cash-dom": "^8.1.5",
-    "dayjs": "^1.11.13",
-    "@datagrok-libraries/test": "^1.1.0"
-  },
-  "devDependencies": {
-    "datagrok-tools": "^5.1.5",
-    "webpack": "^5.95.0",
-    "webpack-cli": "^5.1.4"
+    "datagrok-api": "workspace:^",
+    "cash-dom": "catalog:",
+    "dayjs": "catalog:",
+    "rxjs": "catalog:",
+    "@datagrok-libraries/test": "workspace:^"
   },
   "scripts": {
-    "debug-#{PACKAGE_NAME_LOWERCASE}": "webpack && grok publish",
-    "release-#{PACKAGE_NAME_LOWERCASE}": "webpack && grok publish --release",
-    "build-#{PACKAGE_NAME_LOWERCASE}": "webpack",
-    "build": "grok api && grok check --soft && webpack",
+    "build": "grok build",
+    "typecheck": "grok tsc --noEmit -p tsconfig.json",
+    "lint": "eslint --ext .ts,.tsx src",
     "test": "grok test"
   },
   "canEdit": [
@@ -27,4 +22,4 @@
   "canView": [
     "All users"
   ]
-}
+}

package/package-template/tsconfig.json

@@ -1,71 +1,4 @@
 {
-  "compilerOptions": {
-    /* Visit https://aka.ms/tsconfig.json to read more about this file */
-
-    /* Basic Options */
-    // "incremental": true,                         /* Enable incremental compilation */
-    "target": "es6",                                /* Specify ECMAScript target version: 'ES3' (default), 'ES5', 'ES2015', 'ES2016', 'ES2017', 'ES2018', 'ES2019', 'ES2020', or 'ESNEXT'. */
-    "module": "es2020",                             /* Specify module code generation: 'none', 'commonjs', 'amd', 'system', 'umd', 'es2015', 'es2020', or 'ESNext'. */
-    "lib": ["ES2022", "dom"],                       /* Specify library files to be included in the compilation. */
-    // "allowJs": true,                             /* Allow javascript files to be compiled. */
-    // "checkJs": true,                             /* Report errors in .js files. */
-    // "jsx": "preserve",                           /* Specify JSX code generation: 'preserve', 'react-native', 'react', 'react-jsx' or 'react-jsxdev'. */
-    // "declaration": true,                         /* Generates corresponding '.d.ts' file. */
-    // "declarationMap": true,                      /* Generates a sourcemap for each corresponding '.d.ts' file. */
-    "sourceMap": true,                              /* Generates corresponding '.map' file. */
-    // "outFile": "./",                             /* Concatenate and emit output to single file. */
-    // "outDir": "./",                              /* Redirect output structure to the directory. */
-    // "rootDir": "./",                             /* Specify the root directory of input files. Use to control the output directory structure with --outDir. */
-    // "composite": true,                           /* Enable project compilation */
-    // "tsBuildInfoFile": "./",                     /* Specify file to store incremental compilation information */
-    // "removeComments": true,                      /* Do not emit comments to output. */
-    // "noEmit": true,                              /* Do not emit outputs. */
-    // "importHelpers": true,                       /* Import emit helpers from 'tslib'. */
-    // "downlevelIteration": true,                  /* Provide full support for iterables in 'for-of', spread, and destructuring when targeting 'ES5' or 'ES3'. */
-    // "isolatedModules": true,                     /* Transpile each file as a separate module (similar to 'ts.transpileModule'). */
-
-    /* Strict Type-Checking Options */
-    "strict": true,                                 /* Enable all strict type-checking options. */
-    // "noImplicitAny": true,                       /* Raise error on expressions and declarations with an implied 'any' type. */
-    // "strictNullChecks": true,                    /* Enable strict null checks. */
-    // "strictFunctionTypes": true,                 /* Enable strict checking of function types. */
-    // "strictBindCallApply": true,                 /* Enable strict 'bind', 'call', and 'apply' methods on functions. */
-    // "strictPropertyInitialization": true,        /* Enable strict checking of property initialization in classes. */
-    // "noImplicitThis": true,                      /* Raise error on 'this' expressions with an implied 'any' type. */
-    // "alwaysStrict": true,                        /* Parse in strict mode and emit "use strict" for each source file. */
-
-    /* Additional Checks */
-    // "noUnusedLocals": true,                      /* Report errors on unused locals. */
-    // "noUnusedParameters": true,                  /* Report errors on unused parameters. */
-    // "noImplicitReturns": true,                   /* Report error when not all code paths in function return a value. */
-    // "noFallthroughCasesInSwitch": true,          /* Report errors for fallthrough cases in switch statement. */
-    // "noUncheckedIndexedAccess": true,            /* Include 'undefined' in index signature results */
-    // "noPropertyAccessFromIndexSignature": true,  /* Require undeclared properties from index signatures to use element accesses. */
-
-    /* Module Resolution Options */
-    "moduleResolution": "bundler",                  /* Specify how TypeScript looks up a file from a given module specifier. Use 'bundler' for webpack/rollup/etc. */
-    // "baseUrl": "./",                             /* Base directory to resolve non-absolute module names. */
-    // "paths": {},                                 /* A series of entries which re-map imports to lookup locations relative to the 'baseUrl'. */
-    // "rootDirs": [],                              /* List of root folders whose combined content represents the structure of the project at runtime. */
-    // "typeRoots": [],                             /* List of folders to include type definitions from. */
-    // "types": [],                                 /* Type declaration files to be included in compilation. */
-    // "allowSyntheticDefaultImports": true,        /* Allow default imports from modules with no default export. This does not affect code emit, just typechecking. */
-    "esModuleInterop": true,                        /* Enables emit interoperability between CommonJS and ES Modules via creation of namespace objects for all imports. Implies 'allowSyntheticDefaultImports'. */
-    // "preserveSymlinks": true,                    /* Do not resolve the real path of symlinks. */
-    // "allowUmdGlobalAccess": true,                /* Allow accessing UMD globals from modules. */
-
-    /* Source Map Options */
-    // "sourceRoot": "",                            /* Specify the location where debugger should locate TypeScript files instead of source locations. */
-    // "mapRoot": "",                               /* Specify the location where debugger should locate map files instead of generated locations. */
-    // "inlineSourceMap": true,                     /* Emit a single file with source maps instead of having a separate file. */
-    // "inlineSources": true,                       /* Emit the source alongside the sourcemaps within a single file; requires '--inlineSourceMap' or '--sourceMap' to be set. */
-
-    /* Experimental Options */
-    "experimentalDecorators": true,                 /* Enables experimental support for ES7 decorators. */
-    "emitDecoratorMetadata": true,                  /* Enables experimental support for emitting type metadata for decorators. */
-
-    /* Advanced Options */
-    "skipLibCheck": true,                          /* Skip type checking of declaration files. */
-    "forceConsistentCasingInFileNames": true,        /* Disallow inconsistently-cased references to the same file. */
-  }
+  "extends": "@datagrok/build-config/tsconfig.base.json",
+  "include": ["src"]
 }

package/package.json

@@ -4,7 +4,7 @@
     "type": "git",
     "url": "https://github.com/datagrok-ai/public.git"
   },
-  "version": "6.6.0",
+  "version": "6.7.1",
   "description": "Utility to upload and publish packages to Datagrok",
   "homepage": "https://github.com/datagrok-ai/public/tree/master/tools#readme",
   "dependencies": {
@@ -16,7 +16,6 @@
     "adm-zip": "^0.6.0",
     "ajv": "^8.20.0",
     "archiver": "^7.0.1",
-    "datagrok-api": "^1.27.6",
     "estraverse": "^5.3.0",
     "glob": "^13.0.6",
     "ignore-walk": "^6.0.5",
@@ -26,20 +25,9 @@
     "node-fetch": "^2.7.0",
     "papaparse": "^5.5.3",
     "puppeteer": "^24.15.0",
-    "ts-morph": "^28.0.0"
-  },
-  "scripts": {
-    "link": "npm link",
-    "prepublishOnly": "node build.js",
-    "babel": "node build.js",
-    "build": "node build.js",
-    "update:ivp-parser": "esbuild plugins/ivp-parser.entry.mjs --bundle --format=cjs --platform=node --alias:diff-grok=../libraries/compute-utils/node_modules/diff-grok --outfile=plugins/ivp-parser.bundle.cjs",
-    "debug-source-map": "node build.js --source-maps",
-    "test": "vitest run --project unit",
-    "test:server": "vitest run --project unit bin/__tests__/node-dapi bin/__tests__/server bin/__tests__/migrate",
-    "test:watch": "vitest --project unit",
-    "test:integration": "vitest run --project integration",
-    "test:all": "vitest run"
+    "ts-morph": "^28.0.0",
+    "@babel/generator": "^7.29.0",
+    "datagrok-api": "^1.27.11"
   },
   "bin": {
     "datagrok-upload": "./bin/_deprecated/upload.js",
@@ -94,5 +82,17 @@
     "archiver-utils": {
       "glob": "$glob"
     }
+  },
+  "scripts": {
+    "link": "npm link",
+    "babel": "node build.js",
+    "build": "node build.js",
+    "update:ivp-parser": "esbuild plugins/ivp-parser.entry.mjs --bundle --format=cjs --platform=node --alias:diff-grok=../libraries/compute-utils/node_modules/diff-grok --outfile=plugins/ivp-parser.bundle.cjs",
+    "debug-source-map": "node build.js --source-maps",
+    "test": "vitest run --project unit",
+    "test:server": "vitest run --project unit bin/__tests__/node-dapi bin/__tests__/server bin/__tests__/migrate bin/__tests__/keypair",
+    "test:watch": "vitest --project unit",
+    "test:integration": "vitest run --project integration",
+    "test:all": "vitest run"
   }
-}
+}

package/plugins/func-gen-plugin.js

@@ -1,8 +1,11 @@
 const fs = require('fs');
 const path = require('path');
 
-const tsParser = require('@typescript-eslint/typescript-estree');
-const generate = require('@babel/generator').default;
+// Loaded on first use: the parser and generator cost ~0.3 s, and the plugin is instantiated by every
+// bundle whether or not a file changed.
+let _tsParser; let _generate;
+const tsParser = {parse: (...a) => (_tsParser ??= require('@typescript-eslint/typescript-estree')).parse(...a)};
+const generate = (...a) => (_generate ??= require('@babel/generator').default)(...a);
 
 const {
   reservedDecorators,
@@ -15,9 +18,11 @@ const {
   inputOptionsNames,
 } = require('../bin/utils/func-generation');
 
-const {toCamelCase} = require('../bin/commands/migrate');
+// Not imported from commands/migrate: that module loads ts-morph (~1.5 s) at require time.
+const toCamelCase = (s) => s.split('-').map((w) => w.charAt(0).toUpperCase() + w.slice(1)).join('');
 
-const {api} = require('../bin/commands/api');
+let _api;
+const api = (...a) => (_api ??= require('../bin/commands/api').api)(...a);
 
 // Prebuilt CJS bundle of diff-grok's IVP parser (`getIVP` + a couple constants), tree-shaken
 // to exclude the script-code generator. Regenerate with `npm run update:ivp-parser`.

package/turbo.json

@@ -0,0 +1,9 @@
+{
+  "$schema": "https://turbo.build/schema.json",
+  "extends": ["//"],
+  "tasks": {
+    "build": {
+      "dependsOn": []
+    }
+  }
+}

package/package-template/.eslintrc.json

@@ -1,38 +0,0 @@
-{
-  "env": {
-    "browser": true,
-    "es2022": true
-  },
-  "extends": [
-    "google"
-  ],
-  "parserOptions": {
-    "ecmaVersion": 12,
-    "sourceType": "module"
-  },
-  "rules": {
-    "indent": [
-      "error",
-      2
-    ],
-    "max-len": [
-      "error",
-      120
-    ],
-    "require-jsdoc": "off",
-    "spaced-comment": "off",
-    "linebreak-style": "off",
-    "curly": [
-      "error",
-      "multi-or-nest"
-    ],
-    "brace-style": [
-      "error",
-      "1tbs",
-      {
-        "allowSingleLine": true
-      }
-    ],
-    "block-spacing": 2
-  }
-}

package/package-template/ts.webpack.config.js

@@ -1,46 +0,0 @@
-const path = require('path');
-const FuncGeneratorPlugin = require('datagrok-tools/plugins/func-gen-plugin');
-const packageName = path.parse(require('./package.json').name).name.toLowerCase().replace(/-/g, '');
-
-module.exports = {
-  cache: {
-    type: 'filesystem',
-  },
-  mode: 'development',
-  entry: {
-    test: {filename: 'package-test.js', library: {type: 'var', name: `${packageName}_test`}, import: './src/package-test.ts'},
-    package: './src/package.ts',
-  },
-  resolve: {
-    symlinks: false,
-    extensions: ['.wasm', '.mjs', '.ts', '.json', '.js', '.tsx'],
-  },
-  module: {
-    rules: [
-      {test: /\.tsx?$/, loader: 'ts-loader', options: {allowTsInNodeModules: true}},
-    ],
-  },
-  plugins: [
-    new FuncGeneratorPlugin({outputPath: './src/package.g.ts'}),
-  ],
-  devtool: 'source-map',
-  externals: {
-    'datagrok-api/dg': 'DG',
-    'datagrok-api/grok': 'grok',
-    'datagrok-api/ui': 'ui',
-    'openchemlib/full.js': 'OCL',
-    'rxjs': 'rxjs',
-    'rxjs/operators': 'rxjs.operators',
-    'cash-dom': '$',
-    'dayjs': 'dayjs',
-    'wu': 'wu',
-    'exceljs': 'ExcelJS',
-    'html2canvas': 'html2canvas',
-  },
-  output: {
-    filename: '[name].js',
-    library: packageName,
-    libraryTarget: 'var',
-    path: path.resolve(__dirname, 'dist'),
-  },
-};

package/package-template/webpack.config.js

@@ -1,35 +0,0 @@
-const path = require('path');
-const packageName = path.parse(require('./package.json').name).name.toLowerCase().replace(/-/g, '');
-const FuncGeneratorPlugin = require('datagrok-tools/plugins/func-gen-plugin');
-module.exports = {
-  cache: {
-    type: 'filesystem',
-  },
-  mode: 'production',
-  entry: {
-    package: './src/package.js',
-  },
-  devtool: 'source-map',
-  externals: {
-    'datagrok-api/dg': 'DG',
-    'datagrok-api/grok': 'grok',
-    'datagrok-api/ui': 'ui',
-    'openchemlib/full.js': 'OCL',
-    'rxjs': 'rxjs',
-    'rxjs/operators': 'rxjs.operators',
-    'cash-dom': '$',
-    'dayjs': 'dayjs',
-    'wu': 'wu',
-    'exceljs': 'ExcelJS',
-    'html2canvas': 'html2canvas',
-  },
-  output: {
-    filename: '[name].js',
-    library: packageName,
-    libraryTarget: 'var',
-    path: path.resolve(__dirname, 'dist'),
-  },
-  plugins: [
-    new FuncGeneratorPlugin({outputPath: './src/package.g.ts'}),
-  ],
-};