everything-dev 0.3.3 → 1.3.3

package/src/api-contract.ts

@@ -0,0 +1,309 @@
+import { createHash } from "node:crypto";
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join, relative } from "node:path";
+import type { RuntimeConfig, RuntimePluginConfig } from "./types";
+
+export interface ApiPluginManifest {
+  schemaVersion: 1;
+  kind: "every-plugin/manifest";
+  plugin: {
+    name: string;
+    version: string;
+  };
+  runtime: {
+    remoteEntry: string;
+  };
+  contract?: {
+    kind: "orpc";
+    types: {
+      path: string;
+      exportName: string;
+      typeName: string;
+      sha256?: string;
+    };
+  };
+}
+
+interface ContractSource {
+  key: string;
+  importName: string;
+  sourceFilePath: string;
+  generatedPath?: string;
+}
+
+function sha256(input: string): string {
+  return createHash("sha256").update(input).digest("hex");
+}
+
+function trimTrailingSlash(input: string): string {
+  return input.replace(/\/$/, "");
+}
+
+function sanitizeIdentifier(input: string): string {
+  return input.replace(/[^A-Za-z0-9_]/g, "_").replace(/^[^A-Za-z_]+/, "_");
+}
+
+function toImportPath(fromFile: string, targetFile: string): string {
+  const rel = relative(dirname(fromFile), targetFile).replace(/\\/g, "/");
+  return rel.startsWith(".") ? rel : `./${rel}`;
+}
+
+function writeFileIfChanged(filePath: string, content: string) {
+  try {
+    if (readFileSync(filePath, "utf8") === content) return false;
+  } catch {
+    // file does not exist yet
+  }
+
+  writeFileSync(filePath, content);
+  return true;
+}
+
+function getApiPluginManifestUrl(apiBaseUrl: string): string {
+  return `${trimTrailingSlash(apiBaseUrl)}/plugin.manifest.json`;
+}
+
+async function fetchApiPluginManifest(apiBaseUrl: string): Promise<ApiPluginManifest> {
+  const response = await fetch(getApiPluginManifestUrl(apiBaseUrl));
+  if (!response.ok) {
+    throw new Error(
+      `Failed to fetch API plugin manifest: ${response.status} ${response.statusText}`,
+    );
+  }
+
+  const manifest = (await response.json()) as ApiPluginManifest;
+  if (manifest.schemaVersion !== 1 || manifest.kind !== "every-plugin/manifest") {
+    throw new Error("Unsupported API plugin manifest format");
+  }
+
+  return manifest;
+}
+
+function localApiContractSource(configDir: string): ContractSource {
+  const sourcePath = join(configDir, "api", "src", "contract.ts");
+  return {
+    key: "api",
+    importName: "BaseApiContract",
+    sourceFilePath: sourcePath,
+  };
+}
+
+async function remoteContractSource(opts: {
+  configDir: string;
+  runtimeDir: string;
+  name: string;
+  baseUrl: string;
+  generatedSubdir: string;
+}): Promise<ContractSource> {
+  const manifest = await fetchApiPluginManifest(opts.baseUrl);
+  if (!manifest.contract) {
+    throw new Error(
+      `Plugin manifest for ${manifest.plugin.name} does not advertise contract types`,
+    );
+  }
+
+  const contractUrl = `${trimTrailingSlash(opts.baseUrl)}/${manifest.contract.types.path.replace(/^\.\//, "")}`;
+  const contractResponse = await fetch(contractUrl);
+  if (!contractResponse.ok) {
+    throw new Error(
+      `Failed to fetch contract types: ${contractResponse.status} ${contractResponse.statusText}`,
+    );
+  }
+
+  const contractTypes = await contractResponse.text();
+  if (manifest.contract.types.sha256 && manifest.contract.types.sha256 !== sha256(contractTypes)) {
+    throw new Error("Fetched contract types failed checksum verification");
+  }
+
+  const generatedPath = join(opts.runtimeDir, opts.generatedSubdir, "contract.d.ts");
+  mkdirSync(dirname(generatedPath), { recursive: true });
+  writeFileIfChanged(generatedPath, contractTypes);
+
+  return {
+    key: opts.name,
+    importName: `${sanitizeIdentifier(opts.name)}Contract`,
+    sourceFilePath: generatedPath,
+    generatedPath,
+  };
+}
+
+async function resolveContractSource(opts: {
+  configDir: string;
+  runtimeDir: string;
+  key: string;
+  source: RuntimePluginConfig | { url: string; localPath?: string; name: string } | null;
+  baseUrl: string;
+  generatedSubdir: string;
+}): Promise<ContractSource> {
+  if (
+    opts.key === "api" &&
+    (!opts.source || !("localPath" in opts.source) || opts.source.localPath)
+  ) {
+    const localPath = opts.source && "localPath" in opts.source ? opts.source.localPath : undefined;
+    if (localPath) {
+      return {
+        key: opts.key,
+        importName: "BaseApiContract",
+        sourceFilePath: join(localPath, "src", "contract.ts"),
+      };
+    }
+
+    if (!opts.baseUrl) {
+      return localApiContractSource(opts.configDir);
+    }
+  }
+
+  if (opts.source && "localPath" in opts.source && opts.source.localPath) {
+    return {
+      key: opts.key,
+      importName: `${sanitizeIdentifier(opts.key)}Contract`,
+      sourceFilePath: join(opts.source.localPath, "src", "contract.ts"),
+    };
+  }
+
+  return remoteContractSource({
+    configDir: opts.configDir,
+    runtimeDir: opts.runtimeDir,
+    name: opts.key,
+    baseUrl: opts.baseUrl,
+    generatedSubdir: opts.generatedSubdir,
+  });
+}
+
+function writeAggregateContractFile(opts: {
+  configDir: string;
+  sources: ContractSource[];
+  pluginKeys: string[];
+}) {
+  const baseSource = opts.sources.find((source) => source.key === "api");
+  const pluginSources = opts.pluginKeys
+    .map((key) => opts.sources.find((entry) => entry.key === key))
+    .filter((source): source is ContractSource => Boolean(source));
+
+  if (!baseSource) {
+    throw new Error("API contract source is required to generate the aggregate contract");
+  }
+
+  // --- Generate ui/src/api-contract.gen.ts ---
+  const uiContractPath = join(opts.configDir, "ui", "src", "api-contract.gen.ts");
+  const uiLines: string[] = [];
+
+  for (const source of opts.sources) {
+    const importPath = toImportPath(uiContractPath, source.sourceFilePath);
+    uiLines.push(`import type { ContractType as ${source.importName} } from "${importPath}";`);
+  }
+
+  uiLines.push("");
+  if (pluginSources.length === 0) {
+    uiLines.push(`export type ApiContract = ${baseSource.importName};`);
+  } else {
+    uiLines.push(`export type ApiContract = ${baseSource.importName} & {`);
+    for (const source of pluginSources) {
+      const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key)
+        ? source.key
+        : JSON.stringify(source.key);
+      uiLines.push(`  ${key}: ${source.importName};`);
+    }
+    uiLines.push("};");
+  }
+  mkdirSync(dirname(uiContractPath), { recursive: true });
+  writeFileIfChanged(uiContractPath, `${uiLines.join("\n")}\n`);
+
+  // --- Generate api/src/plugins-client.gen.ts ---
+  const pluginsClientPath = join(opts.configDir, "api", "src", "plugins-client.gen.ts");
+  const pluginsClientLines: string[] = [];
+
+  for (const source of pluginSources) {
+    const importPath = toImportPath(pluginsClientPath, source.sourceFilePath);
+    pluginsClientLines.push(
+      `import type { ContractType as ${source.importName} } from "${importPath}";`,
+    );
+  }
+
+  pluginsClientLines.push(
+    'import type { ContractRouterClient, AnyContractRouter } from "@orpc/contract";',
+  );
+  pluginsClientLines.push(
+    "type ClientFactory<C extends AnyContractRouter> = (context?: Record<string, unknown>) => ContractRouterClient<C>;",
+  );
+  pluginsClientLines.push("");
+
+  if (pluginSources.length === 0) {
+    pluginsClientLines.push("export type PluginsClient = Record<string, never>;");
+  } else {
+    pluginsClientLines.push("export type PluginsClient = {");
+    for (const source of pluginSources) {
+      const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key)
+        ? source.key
+        : JSON.stringify(source.key);
+      pluginsClientLines.push(`  ${key}: ClientFactory<${source.importName}>;`);
+    }
+    pluginsClientLines.push("};");
+  }
+
+  mkdirSync(dirname(pluginsClientPath), { recursive: true });
+  writeFileIfChanged(pluginsClientPath, `${pluginsClientLines.join("\n")}\n`);
+
+  return uiContractPath;
+}
+
+export async function syncApiContractBridge(opts: {
+  configDir: string;
+  runtimeConfig: RuntimeConfig;
+  apiBaseUrl: string;
+}): Promise<{
+  bridgePath: string;
+  generatedPath: string | null;
+  manifest: ApiPluginManifest | null;
+  source: "local" | "remote";
+}> {
+  const runtimeDir = join(opts.configDir, ".bos", "generated");
+  const pluginEntries = Object.entries(opts.runtimeConfig.plugins ?? {}).sort(([a], [b]) =>
+    a.localeCompare(b),
+  );
+  const sources: ContractSource[] = [];
+  let manifest: ApiPluginManifest | null = null;
+  let generatedPath: string | null = null;
+
+  const baseSource = await resolveContractSource({
+    configDir: opts.configDir,
+    runtimeDir,
+    key: "api",
+    source: opts.runtimeConfig.api,
+    baseUrl: opts.apiBaseUrl,
+    generatedSubdir: "api",
+  });
+  sources.push(baseSource);
+
+  for (const [key, plugin] of pluginEntries) {
+    const source = await resolveContractSource({
+      configDir: opts.configDir,
+      runtimeDir,
+      key,
+      source: plugin,
+      baseUrl: plugin.url,
+      generatedSubdir: `plugins/${key}`,
+    });
+    sources.push(source);
+    if (source.generatedPath) {
+      generatedPath = source.generatedPath;
+    }
+  }
+
+  writeAggregateContractFile({
+    configDir: opts.configDir,
+    sources,
+    pluginKeys: pluginEntries.map(([key]) => key),
+  });
+
+  if (opts.runtimeConfig.api.source !== "local") {
+    manifest = await fetchApiPluginManifest(opts.apiBaseUrl);
+  }
+
+  return {
+    bridgePath: join(opts.configDir, "ui", "src", "api-contract.gen.ts"),
+    generatedPath,
+    manifest,
+    source: opts.runtimeConfig.api.source,
+  };
+}

package/src/api.ts

@@ -0,0 +1,181 @@
+import { verifySriForUrl } from "./integrity";
+import { ensureNodeRuntimePlugin, registerRemote } from "./mf";
+import { createPluginRuntime } from "./sdk";
+import type { RuntimeConfig, RuntimePluginConfig } from "./types";
+
+export interface LoadedPluginResult {
+  key: string;
+  name: string;
+  router: any;
+  createClient: (context?: unknown) => any;
+  metadata: {
+    remoteUrl: string;
+    version?: string;
+  };
+}
+
+export interface LoadedPluginsResult {
+  base: LoadedPluginResult | null;
+  plugins: LoadedPluginResult[];
+  errors: Array<{ key: string; error: string }>;
+}
+
+export async function loadApiPlugin(opts: {
+  key: string;
+  runtimeId: string;
+  name: string;
+  entry: string;
+  variables?: Record<string, string>;
+  secrets?: Record<string, string>;
+  integrity?: string;
+  plugins?: Record<string, unknown>;
+}): Promise<LoadedPluginResult> {
+  const remoteEntryUrl = (() => {
+    if (opts.entry.endsWith("/remoteEntry.js")) return opts.entry;
+    if (opts.entry.endsWith("/mf-manifest.json")) {
+      return `${opts.entry.replace(/\/mf-manifest\.json$/, "")}/remoteEntry.js`;
+    }
+    if (opts.entry.endsWith(".js")) return opts.entry;
+    return `${opts.entry.replace(/\/$/, "")}/remoteEntry.js`;
+  })();
+
+  if (opts.integrity) {
+    await verifySriForUrl(remoteEntryUrl, opts.integrity);
+  }
+
+  await ensureNodeRuntimePlugin();
+  await registerRemote({ name: opts.runtimeId, entry: remoteEntryUrl });
+
+  const runtime: any = createPluginRuntime({
+    registry: {
+      [opts.runtimeId]: { remote: remoteEntryUrl },
+    },
+    secrets: opts.secrets ?? {},
+  });
+
+  // biome-ignore lint/correctness/useHookAtTopLevel: usePlugin is not a React hook
+  const plugin = await runtime.usePlugin(
+    opts.runtimeId,
+    {
+      variables: opts.variables ?? {},
+      secrets: opts.secrets ?? {},
+    },
+    opts.plugins,
+  );
+
+  return {
+    key: opts.key,
+    name: opts.name,
+    router: plugin.router,
+    createClient: plugin.createClient as (context?: unknown) => any,
+    metadata: {
+      remoteUrl: remoteEntryUrl,
+      version: plugin.metadata.version,
+    },
+  };
+}
+
+function collectSecrets(config: RuntimePluginConfig, envSecrets?: Record<string, string>) {
+  const secrets: Record<string, string> = {};
+  for (const key of config.secrets ?? []) {
+    const value = envSecrets?.[key] ?? process.env[key];
+    if (value) {
+      secrets[key] = value;
+    }
+  }
+  return secrets;
+}
+
+export async function loadApiPluginsFromRuntimeConfig(
+  runtimeConfig: RuntimeConfig,
+  envSecrets?: Record<string, string>,
+): Promise<LoadedPluginsResult> {
+  const entries: Array<[string, RuntimePluginConfig]> = [];
+
+  if (runtimeConfig.api?.url) {
+    entries.push(["api", runtimeConfig.api]);
+  }
+
+  for (const [key, plugin] of Object.entries(runtimeConfig.plugins ?? {})) {
+    if (plugin.url) {
+      entries.push([key, plugin]);
+    }
+  }
+
+  if (entries.length === 0) {
+    console.log("[API] No plugins configured");
+    return { base: null, plugins: [], errors: [] };
+  }
+
+  // Phase 1: Load non-API plugins first
+  const pluginEntries = entries.filter(([key]) => key !== "api");
+  const apiEntry = entries.find(([key]) => key === "api");
+
+  const pluginResults = await Promise.allSettled(
+    pluginEntries.map(async ([key, pluginConfig]) => {
+      console.log(`[API] Loading plugin: ${pluginConfig.name} from ${pluginConfig.entry}`);
+      return loadApiPlugin({
+        key,
+        runtimeId: pluginConfig.name,
+        name: pluginConfig.name,
+        entry: pluginConfig.entry,
+        variables: pluginConfig.variables,
+        secrets: collectSecrets(pluginConfig, envSecrets),
+        integrity: pluginConfig.integrity,
+      });
+    }),
+  );
+
+  const plugins: LoadedPluginResult[] = [];
+  const errors: Array<{ key: string; error: string }> = [];
+
+  const pluginsClient: Record<string, unknown> = {};
+
+  pluginResults.forEach((result, index) => {
+    const [key] = pluginEntries[index] ?? ["unknown"];
+    if (result.status === "fulfilled") {
+      plugins.push(result.value);
+      pluginsClient[key] = result.value.createClient;
+    } else {
+      errors.push({
+        key,
+        error: result.reason instanceof Error ? result.reason.message : String(result.reason),
+      });
+    }
+  });
+
+  // Phase 2: Load API plugin with injected plugins client
+  let base: LoadedPluginResult | null = null;
+
+  if (apiEntry) {
+    const [key, apiConfig] = apiEntry;
+    try {
+      console.log(`[API] Loading API plugin: ${apiConfig.name} from ${apiConfig.entry}`);
+      base = await loadApiPlugin({
+        key,
+        runtimeId: apiConfig.name,
+        name: apiConfig.name,
+        entry: apiConfig.entry,
+        variables: apiConfig.variables,
+        secrets: collectSecrets(apiConfig, envSecrets),
+        integrity: apiConfig.integrity,
+        plugins: pluginsClient,
+      });
+    } catch (error) {
+      errors.push({
+        key,
+        error: error instanceof Error ? error.message : String(error),
+      });
+    }
+  }
+
+  return { base, plugins, errors };
+}
+
+export function createStitchedRouter(baseRouter: any, plugins: LoadedPluginResult[] | null): any {
+  if (!plugins || plugins.length === 0) {
+    return baseRouter;
+  }
+
+  return plugins.reduce((router, plugin) => Object.assign(router, plugin.router), baseRouter);
+}