Fix env editor switching

.eslintignore

@@ -0,0 +1,6 @@
+node_modules/
+dist/
+.eslintrc.cjs
+.prettierrc.cjs
+src-web/postcss.config.cjs
+src-web/vite.config.ts

.eslintrc.cjs

@@ -0,0 +1,49 @@
+module.exports = {
+  extends: [
+    'eslint:recommended',
+    'plugin:react/recommended',
+    'plugin:react-hooks/recommended',
+    'plugin:import/recommended',
+    'plugin:jsx-a11y/recommended',
+    'plugin:@typescript-eslint/recommended',
+    'eslint-config-prettier',
+  ],
+  plugins: ['react-refresh'],
+  parser: '@typescript-eslint/parser',
+  parserOptions: {
+    project: ['./tsconfig.json'],
+  },
+  ignorePatterns: [
+    'scripts/**/*',
+    'packages/plugin-runtime/**/*',
+    'packages/plugin-runtime-types/**/*',
+    'src-tauri/**/*',
+    'src-web/tailwind.config.cjs',
+    'src-web/vite.config.ts',
+  ],
+  settings: {
+    react: {
+      version: 'detect',
+    },
+    'import/resolver': {
+      node: {
+        paths: ['src-web'],
+        extensions: ['.ts', '.tsx'],
+      },
+    },
+  },
+  rules: {
+    'react-refresh/only-export-components': 'error',
+    'jsx-a11y/no-autofocus': 'off',
+    'react/react-in-jsx-scope': 'off',
+    'import/no-unresolved': 'off',
+    '@typescript-eslint/consistent-type-imports': [
+      'error',
+      {
+        prefer: 'type-imports',
+        disallowTypeAnnotations: true,
+        fixStyle: 'separate-type-imports',
+      },
+    ],
+  },
+};

.gitattributes

@@ -1,7 +1,2 @@
 src-tauri/vendored/**/* linguist-generated=true
 src-tauri/gen/schemas/**/* linguist-generated=true
-**/bindings/* linguist-generated=true
-src-tauri/yaak-templates/pkg/* linguist-generated=true
-
-# Ensure consistent line endings for test files that check exact content
-src-tauri/yaak-http/tests/test.txt text eol=lf

.github/FUNDING.yml

@@ -1,3 +1,15 @@
 # These are supported funding model platforms
 
 github: gschier
+patreon: # Replace with a single Patreon username
+open_collective: # Replace with a single Open Collective username
+ko_fi: # Replace with a single Ko-fi username
+tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel
+community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry
+liberapay: # Replace with a single Liberapay username
+issuehunt: # Replace with a single IssueHunt username
+lfx_crowdfunding: # Replace with a single LFX Crowdfunding project-name e.g., cloud-foundry
+polar: # Replace with a single Polar username
+buy_me_a_coffee: # Replace with a single Buy Me a Coffee username
+thanks_dev: # Replace with a single thanks.dev username
+custom: https://yaak.app/pricing

.github/workflows/ci-js.yml

@@ -0,0 +1,18 @@
+on:
+  pull_request:
+    branches: [develop]
+
+name: CI (JS)
+
+jobs:
+  test:
+    name: Lint/Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - run: npm ci
+      - run: npm run lint
+      - run: npm test

.github/workflows/ci-rust.yml

@@ -0,0 +1,36 @@
+on:
+  pull_request:
+    branches: [develop]
+    paths:
+      - src-tauri/**
+      - .github/workflows/**
+
+name: CI (Rust)
+
+defaults:
+  run:
+    working-directory: src-tauri
+
+jobs:
+  test:
+    name: Check/Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: |
+          sudo apt-get update
+          sudo apt-get install -y libwebkit2gtk-4.1-dev
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: actions/cache@v3
+        continue-on-error: false
+        with:
+          path: |
+            ~/.cargo/bin/
+            ~/.cargo/registry/index/
+            ~/.cargo/registry/cache/
+            ~/.cargo/git/db/
+            target/
+          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
+          restore-keys: ${{ runner.os }}-cargo-
+      - run: cargo check --all
+      - run: cargo test --all

.github/workflows/ci.yml

@@ -1,31 +0,0 @@
-on:
-  pull_request:
-  push:
-    branches:
-      - main
-
-name: Lint and Test
-permissions:
-  contents: read
-
-jobs:
-  test:
-    name: Lint/Test
-    runs-on: macos-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-      - uses: dtolnay/rust-toolchain@stable
-      - uses: Swatinem/rust-cache@v2
-        with:
-          workspaces: 'src-tauri'
-          shared-key: ci
-          cache-on-failure: true
-
-      - run: npm ci
-      - run: npm run lint
-      - name: Run JS Tests
-        run: npm test
-      - name: Run Rust Tests
-        run: cargo test --all
-        working-directory: src-tauri

.github/workflows/claude.yml

@@ -1,50 +0,0 @@
-name: Claude Code
-
-on:
-  issue_comment:
-    types: [created]
-  pull_request_review_comment:
-    types: [created]
-  issues:
-    types: [opened, assigned]
-  pull_request_review:
-    types: [submitted]
-
-jobs:
-  claude:
-    if: |
-      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
-      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
-      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
-      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pull-requests: read
-      issues: read
-      id-token: write
-      actions: read # Required for Claude to read CI results on PRs
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 1
-
-      - name: Run Claude Code
-        id: claude
-        uses: anthropics/claude-code-action@v1
-        with:
-          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
-
-          # This is an optional setting that allows Claude to read CI results on PRs
-          additional_permissions: |
-            actions: read
-
-          # Optional: Give a custom prompt to Claude. If this is not specified, Claude will perform the instructions specified in the comment that tagged it.
-          # prompt: 'Update the pull request description to include a summary of changes.'
-
-          # Optional: Add claude_args to customize behavior and configuration
-          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
-          # or https://code.claude.com/docs/en/cli-reference for available options
-          # claude_args: '--allowed-tools Bash(gh pr:*)'
-

.github/workflows/release.yml

@@ -3,6 +3,9 @@ on:
   push:
     tags: [ v* ]
 
+env:
+  YAAK_PLUGINS_DIR: checkout/plugins
+
 jobs:
   build-artifacts:
     permissions:
@@ -16,34 +19,15 @@ jobs:
           - platform: 'macos-latest' # for Arm-based Macs (M1 and above).
             args: '--target aarch64-apple-darwin'
             yaak_arch: 'arm64'
-            os: 'macos'
-            targets: 'aarch64-apple-darwin'
           - platform: 'macos-latest' # for Intel-based Macs.
             args: '--target x86_64-apple-darwin'
             yaak_arch: 'x64'
-            os: 'macos'
-            targets: 'x86_64-apple-darwin'
           - platform: 'ubuntu-22.04'
             args: ''
             yaak_arch: 'x64'
-            os: 'ubuntu'
-            targets: ''
-          - platform: 'ubuntu-22.04-arm'
-            args: ''
-            yaak_arch: 'arm64'
-            os: 'ubuntu'
-            targets: ''
           - platform: 'windows-latest'
             args: ''
             yaak_arch: 'x64'
-            os: 'windows'
-            targets: ''
-          # Windows ARM64
-          - platform: 'windows-latest'
-            args: '--target aarch64-pc-windows-msvc'
-            yaak_arch: 'arm64'
-            os: 'windows'
-            targets: 'aarch64-pc-windows-msvc'
     runs-on: ${{ matrix.platform }}
     timeout-minutes: 40
     steps:
@@ -52,49 +36,58 @@ jobs:
 
       - name: Setup Node
         uses: actions/setup-node@v4
+        with:
+          node-version: 22
 
       - name: install Rust stable
         uses: dtolnay/rust-toolchain@stable
         with:
-          targets: ${{ matrix.targets }}
+          # Those targets are only used on macos runners so it's in an `if` to slightly speed up windows and linux builds.
+          targets: ${{ matrix.platform == 'macos-latest' && 'aarch64-apple-darwin,x86_64-apple-darwin' || '' }}
 
-      - uses: Swatinem/rust-cache@v2
+      - uses: actions/cache@v3
+        continue-on-error: false
         with:
-          workspaces: 'src-tauri'
-          shared-key: ci
-          cache-on-failure: true
+          path: |
+            ~/.cargo/bin/
+            ~/.cargo/registry/index/
+            ~/.cargo/registry/cache/
+            ~/.cargo/git/db/
+            src-tauri/target/
+          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
+          restore-keys: ${{ runner.os }}-cargo-
 
-      - name: install dependencies (Linux only)
-        if: matrix.os == 'ubuntu'
+      - name: install dependencies (ubuntu only)
+        if: matrix.platform == 'ubuntu-22.04' # This must match the platform value defined above.
         run: |
           sudo apt-get update
-          sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf xdg-utils
+          sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
+
+      - name: install dependencies (windows only)
+        if: matrix.platform == 'windows-latest'
+        run: cargo install --force trusted-signing-cli --version 0.5.0
+
+      - name: Install NPM Dependencies
+        run: |
+          npm ci
+          npm install @yaakapp/cli
 
       - name: Install Protoc for plugin-runtime
         uses: arduino/setup-protoc@v3
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Install trusted-signing-cli (Windows only)
-        if: matrix.os == 'windows'
-        shell: pwsh
-        run: |
-          $ErrorActionPreference = 'Stop'
-          $dir = "$env:USERPROFILE\trusted-signing"
-          New-Item -ItemType Directory -Force -Path $dir | Out-Null
-          $url = "https://github.com/Levminer/trusted-signing-cli/releases/download/0.8.0/trusted-signing-cli.exe"
-          $exe = Join-Path $dir "trusted-signing-cli.exe"
-          Invoke-WebRequest -Uri $url -OutFile $exe
-          echo $dir >> $env:GITHUB_PATH
-          & $exe --version
+      - name: Run JS build
+        run: npm run build
 
-      - run: npm ci
-      - run: npm run lint
-      - name: Run JS Tests
-        run: npm test
-      - name: Run Rust Tests
-        run: cargo test --all
-        working-directory: src-tauri
+      - name: Run lint
+        run: npm run lint
+
+      - name: Checkout yaakapp/plugins
+        uses: actions/checkout@v4
+        with:
+          repository: yaakapp/plugins
+          path: ${{ env.YAAK_PLUGINS_DIR }}
 
       - name: Set version
         run: npm run replace-version
@@ -103,6 +96,7 @@ jobs:
 
       - uses: tauri-apps/tauri-action@v0
         env:
+          YAAK_PLUGINS_DIR: ${{ env.YAAK_PLUGINS_DIR }}
           YAAK_TARGET_ARCH: ${{ matrix.yaak_arch }}
 
           ENABLE_CODE_SIGNING: ${{ secrets.APPLE_CERTIFICATE }}
@@ -111,21 +105,21 @@ jobs:
           TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_KEY_PASSWORD }}
 
           # Apple signing stuff
-          APPLE_CERTIFICATE: ${{ matrix.os == 'macos' && secrets.APPLE_CERTIFICATE }}
-          APPLE_CERTIFICATE_PASSWORD: ${{ matrix.os == 'macos' && secrets.APPLE_CERTIFICATE_PASSWORD }}
-          APPLE_ID: ${{ matrix.os == 'macos' && secrets.APPLE_ID }}
-          APPLE_PASSWORD: ${{ matrix.os == 'macos' && secrets.APPLE_PASSWORD }}
-          APPLE_SIGNING_IDENTITY: ${{ matrix.os == 'macos' && secrets.APPLE_SIGNING_IDENTITY }}
-          APPLE_TEAM_ID: ${{ matrix.os == 'macos' && secrets.APPLE_TEAM_ID }}
+          APPLE_CERTIFICATE: ${{ matrix.platform == 'macos-latest' && secrets.APPLE_CERTIFICATE }}
+          APPLE_CERTIFICATE_PASSWORD: ${{ matrix.platform == 'macos-latest' && secrets.APPLE_CERTIFICATE_PASSWORD }}
+          APPLE_ID: ${{ matrix.platform == 'macos-latest' && secrets.APPLE_ID }}
+          APPLE_PASSWORD: ${{ matrix.platform == 'macos-latest' && secrets.APPLE_PASSWORD }}
+          APPLE_SIGNING_IDENTITY: ${{ matrix.platform == 'macos-latest' && secrets.APPLE_SIGNING_IDENTITY }}
+          APPLE_TEAM_ID: ${{ matrix.platform == 'macos-latest' && secrets.APPLE_TEAM_ID }}
 
           # Windows signing stuff
-          AZURE_CLIENT_ID: ${{ matrix.os == 'windows' && secrets.AZURE_CLIENT_ID }}
-          AZURE_CLIENT_SECRET: ${{ matrix.os == 'windows' && secrets.AZURE_CLIENT_SECRET }}
-          AZURE_TENANT_ID: ${{ matrix.os == 'windows' && secrets.AZURE_TENANT_ID }}
+          AZURE_CLIENT_ID: ${{ matrix.platform == 'windows-latest' && secrets.AZURE_CLIENT_ID }}
+          AZURE_CLIENT_SECRET: ${{ matrix.platform == 'windows-latest' && secrets.AZURE_CLIENT_SECRET }}
+          AZURE_TENANT_ID: ${{ matrix.platform == 'windows-latest' && secrets.AZURE_TENANT_ID }}
         with:
           tagName: 'v__VERSION__'
           releaseName: 'Release __VERSION__'
           releaseBody: '[Changelog __VERSION__](https://yaak.app/blog/__VERSION__)'
           releaseDraft: true
-          prerelease: true
-          args: '${{ matrix.args }} --config ./src-tauri/tauri.release.conf.json'
+          prerelease: false
+          args: ${{ matrix.args }}

.github/workflows/sponsors.yml

@@ -1,44 +0,0 @@
-name: Generate Sponsors README
-on:
-  workflow_dispatch:
-  schedule:
-    - cron: 30 15 * * 0-6
-permissions:
-  contents: write
-jobs:
-  deploy:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout 🛎️
-        uses: actions/checkout@v2
-
-      - name: Generate Sponsors
-        uses: JamesIves/github-sponsors-readme-action@v1
-        with:
-          token: ${{ secrets.SPONSORS_PAT }}
-          file: 'README.md'
-          maximum: 1999
-          template: '<a href="https://github.com/{{{ login }}}"><img src="{{{ avatarUrl }}}" width="50px" alt="User avatar: {{{ login }}}" /></a>&nbsp;&nbsp;'
-          active-only: false
-          include-private: true
-          marker: 'sponsors-base'
-
-      - name: Generate Sponsors
-        uses: JamesIves/github-sponsors-readme-action@v1
-        with:
-          token: ${{ secrets.SPONSORS_PAT }}
-          file: 'README.md'
-          minimum: 2000
-          template: '<a href="https://github.com/{{{ login }}}"><img src="{{{ avatarUrl }}}" width="80px" alt="User avatar: {{{ login }}}" /></a>&nbsp;&nbsp;'
-          active-only: false
-          include-private: true
-          marker: 'sponsors-premium'
-
-      # ⚠️ Note: You can use any deployment step here to automatically push the README
-      # changes back to your branch.
-      - name: Commit Changes
-        uses: JamesIves/github-pages-deploy-action@v4
-        with:
-          branch: main
-          force: false
-          folder: '.'

.gitignore

@@ -15,8 +15,6 @@ dist-ssr
 # Editor directories and files
 .vscode/*
 !.vscode/extensions.json
-!.vscode/settings.json
-!.vscode/launch.json
 .idea
 .DS_Store
 *.suo
@@ -25,7 +23,6 @@ dist-ssr
 *.sln
 *.sw?
 .eslintcache
-out
 
 *.sqlite
 *.sqlite-*
@@ -34,5 +31,3 @@ out
 
 .tmp
 tmp
-.zed
-codebook.toml

.prettierignore

@@ -0,0 +1,4 @@
+node_modules/
+dist/
+out/
+.prettierrc.cjs

.prettierrc.js

@@ -0,0 +1,8 @@
+export default {
+  "trailingComma": "all",
+  "tabWidth": 2,
+  "semi": true,
+  "singleQuote": true,
+  "printWidth": 100,
+  "bracketSpacing": true
+}

.vscode/extensions.json

@@ -1,3 +0,0 @@
-{
-  "recommendations": ["biomejs.biome", "rust-lang.rust-analyzer", "bradlc.vscode-tailwindcss"]
-}

.vscode/launch.json

@@ -1,26 +0,0 @@
-{
-  "version": "0.2.0",
-  "configurations": [
-    {
-      "type": "node",
-      "request": "launch",
-      "name": "Dev App",
-      "runtimeExecutable": "npm",
-      "runtimeArgs": ["run", "start"]
-    },
-    {
-      "type": "node",
-      "request": "launch",
-      "name": "Build App",
-      "runtimeExecutable": "npm",
-      "runtimeArgs": ["run", "start"]
-    },
-    {
-      "type": "node",
-      "request": "launch",
-      "name": "Bootstrap",
-      "runtimeExecutable": "npm",
-      "runtimeArgs": ["run", "bootstrap"]
-    }
-  ]
-}

.vscode/settings.json

@@ -1,6 +0,0 @@
-{
-  "editor.defaultFormatter": "biomejs.biome",
-  "editor.formatOnSave": true,
-  "biome.enabled": true,
-  "biome.lint.format.enable": true
-}

DEVELOPMENT.md

@@ -34,6 +34,8 @@ Run the `bootstrap` command to do some initial setup:
 npm run bootstrap
 ```
 
+_NOTE: Run with `YAAK_PLUGINS_DIR=<Path to yaakapp/plugins>` to re-build bundled plugins_
+
 ## Run the App
 
 After bootstrapping, start the app in development mode:
@@ -42,47 +44,26 @@ After bootstrapping, start the app in development mode:
 npm start
 ```
 
+_NOTE: If working on bundled plugins, run with `YAAK_PLUGINS_DIR=<Path to yaakapp/plugins>`_
+
 ## SQLite Migrations
 
 New migrations can be created from the `src-tauri/` directory:
    
 ```shell
-npm run migration
+cd src-tauri
+sqlx migrate add migration-name
 ```
 
-Rerun the app to apply the migrations. 
+Run the app to apply the migrations. 
 
-_Note: For safety, development builds use a separate database location from production builds._
+If nothing happens, try `cargo clean` and run the app again.
 
-## Lezer Grammar Generation
+_Note: Development builds use a separate database location from production builds._
+
+## Lezer Grammer Generation
 
 ```sh
 # Example
 lezer-generator components/core/Editor/<LANG>/<LANG>.grammar > components/core/Editor/<LANG>/<LANG>.ts
 ```
-
-## Linting & Formatting
-
-This repo uses Biome for linting and formatting (replacing ESLint + Prettier).
-
-- Lint the entire repo:
-
-```sh
-npm run lint
-```
-
-- Auto-fix lint issues where possible:
-
-```sh
-npm run lint:fix
-```
-
-- Format code:
-
-```sh
-npm run format
-```
-
-Notes:
-- Many workspace packages also expose the same scripts (`lint`, `lint:fix`, and `format`).
-- TypeScript type-checking still runs separately via `tsc --noEmit` in relevant packages.

README.md

@@ -1,70 +1,34 @@
-<p align="center">
-  <a href="https://github.com/JamesIves/github-sponsors-readme-action">
-    <img width="200px" src="https://github.com/mountain-loop/yaak/raw/main/src-tauri/icons/icon.png">
-  </a>
-</p>
+# Yaak API Client
 
-<h1 align="center">
-  💫 Yaak ➟ Desktop API Client 💫
-</h1>
-
-<p align="center">
-    A fast, privacy-first API client for REST, GraphQL, SSE, WebSocket, and gRPC – built with Tauri, Rust, and React.
-</p>
-<p align="center">
- Development is funded by community-purchased <a href="https://yaak.app/pricing">licenses</a>. You can also <a href="https://github.com/sponsors/gschier">become a sponsor</a> to have your logo appear below. 💖
-</p>
-<br>
-
-
-
-<p align="center">
-  <!-- sponsors-premium --><a href="https://github.com/MVST-Solutions"><img src="https:&#x2F;&#x2F;github.com&#x2F;MVST-Solutions.png" width="80px" alt="User avatar: MVST-Solutions" /></a>&nbsp;&nbsp;<a href="https://github.com/dharsanb"><img src="https:&#x2F;&#x2F;github.com&#x2F;dharsanb.png" width="80px" alt="User avatar: dharsanb" /></a>&nbsp;&nbsp;<a href="https://github.com/railwayapp"><img src="https:&#x2F;&#x2F;github.com&#x2F;railwayapp.png" width="80px" alt="User avatar: railwayapp" /></a>&nbsp;&nbsp;<a href="https://github.com/caseyamcl"><img src="https:&#x2F;&#x2F;github.com&#x2F;caseyamcl.png" width="80px" alt="User avatar: caseyamcl" /></a>&nbsp;&nbsp;<a href="https://github.com/bytebase"><img src="https:&#x2F;&#x2F;github.com&#x2F;bytebase.png" width="80px" alt="User avatar: bytebase" /></a>&nbsp;&nbsp;<a href="https://github.com/"><img src="https:&#x2F;&#x2F;raw.githubusercontent.com&#x2F;JamesIves&#x2F;github-sponsors-readme-action&#x2F;dev&#x2F;.github&#x2F;assets&#x2F;placeholder.png" width="80px" alt="User avatar: " /></a>&nbsp;&nbsp;<!-- sponsors-premium -->
-</p>
-<p align="center">
-  <!-- sponsors-base --><a href="https://github.com/seanwash"><img src="https:&#x2F;&#x2F;github.com&#x2F;seanwash.png" width="50px" alt="User avatar: seanwash" /></a>&nbsp;&nbsp;<a href="https://github.com/jerath"><img src="https:&#x2F;&#x2F;github.com&#x2F;jerath.png" width="50px" alt="User avatar: jerath" /></a>&nbsp;&nbsp;<a href="https://github.com/itsa-sh"><img src="https:&#x2F;&#x2F;github.com&#x2F;itsa-sh.png" width="50px" alt="User avatar: itsa-sh" /></a>&nbsp;&nbsp;<a href="https://github.com/dmmulroy"><img src="https:&#x2F;&#x2F;github.com&#x2F;dmmulroy.png" width="50px" alt="User avatar: dmmulroy" /></a>&nbsp;&nbsp;<a href="https://github.com/timcole"><img src="https:&#x2F;&#x2F;github.com&#x2F;timcole.png" width="50px" alt="User avatar: timcole" /></a>&nbsp;&nbsp;<a href="https://github.com/VLZH"><img src="https:&#x2F;&#x2F;github.com&#x2F;VLZH.png" width="50px" alt="User avatar: VLZH" /></a>&nbsp;&nbsp;<a href="https://github.com/terasaka2k"><img src="https:&#x2F;&#x2F;github.com&#x2F;terasaka2k.png" width="50px" alt="User avatar: terasaka2k" /></a>&nbsp;&nbsp;<a href="https://github.com/andriyor"><img src="https:&#x2F;&#x2F;github.com&#x2F;andriyor.png" width="50px" alt="User avatar: andriyor" /></a>&nbsp;&nbsp;<a href="https://github.com/majudhu"><img src="https:&#x2F;&#x2F;github.com&#x2F;majudhu.png" width="50px" alt="User avatar: majudhu" /></a>&nbsp;&nbsp;<a href="https://github.com/axelrindle"><img src="https:&#x2F;&#x2F;github.com&#x2F;axelrindle.png" width="50px" alt="User avatar: axelrindle" /></a>&nbsp;&nbsp;<a href="https://github.com/jirizverina"><img src="https:&#x2F;&#x2F;github.com&#x2F;jirizverina.png" width="50px" alt="User avatar: jirizverina" /></a>&nbsp;&nbsp;<a href="https://github.com/chip-well"><img src="https:&#x2F;&#x2F;github.com&#x2F;chip-well.png" width="50px" alt="User avatar: chip-well" /></a>&nbsp;&nbsp;<a href="https://github.com/GRAYAH"><img src="https:&#x2F;&#x2F;github.com&#x2F;GRAYAH.png" width="50px" alt="User avatar: GRAYAH" /></a>&nbsp;&nbsp;<!-- sponsors-base -->
-</p>
-
-![Yaak API Client](https://yaak.app/static/screenshot.png)
-
-
-## Features
-
-Yaak is an offline-first API client designed to stay out of your way while giving you everything you need when you need it. 
-Built with [Tauri](https://tauri.app), Rust, and React, it’s fast, lightweight, and private. No telemetry, no VC funding, and no cloud lock-in.  
-
-
-### 🌐 Work with any API
-
-- Import collections from Postman, Insomnia, OpenAPI, Swagger, or Curl.
-- Send requests via REST, GraphQL, gRPC, WebSocket, or Server-Sent Events.
-- Filter and inspect responses with JSONPath or XPath.
-
-### 🔐 Stay secure
-- Use OAuth 2.0, JWT, Basic Auth, or custom plugins for authentication.
-- Secure sensitive values with encrypted secrets. 
-- Store secrets in your OS keychain.
-
-### ☁️ Organize & collaborate
-- Group requests into workspaces and nested folders.
-- Use environment variables to switch between dev, staging, and prod.
-- Mirror workspaces to your filesystem for versioning in Git or syncing with Dropbox.
-
-### 🧩 Extend & customize
-- Insert dynamic values like UUIDs or timestamps with template tags.
-- Pick from built-in themes or build your own.
-- Create plugins to extend authentication, template tags, or the UI.
+Yaak is a desktop API client for interacting with REST, GraphQL, Server Sent Events (SSE), WebSocket, and gRPC
+APIs. It's built using [Tauri](https://tauri.app), Rust, and ReactJS.
 
+![366149288-f18e963f-0b68-4ecb-b8b8-cb71aa9aec02](https://github.com/user-attachments/assets/ca83b7ad-5708-411b-8faf-e36b365841a4)
 
 ## Contribution Policy
 
-Yaak is open source but only accepting contributions for bug fixes. To get started, 
+Yaak is open source, but only accepting contributions for bug fixes. To get started, 
 visit [`DEVELOPMENT.md`](DEVELOPMENT.md) for tips on setting up your environment.
 
+## Feature Overview
+
+- 🪂 Import data from Postman, Insomnia, OpenAPI, Swagger, or Curl.<br/>
+- 📤 Send requests via REST, GraphQL, Server Sent Events (SSE), WebSockets, or gRPC.<br/>
+- 🔐 Automatically authorize requests with OAuth 2.0, JWT tokens, Basic Auth, and more.<br/>
+- 🔎 Filter response bodies using JSONPath or XPath queries.<br/>
+- ⛓️ Chain together multiple requests to dynamically reference values.<br/>
+- 📂 Organize requests into workspaces and nested folders.<br/>
+- 🧮 Use environment variables to easily switch between Prod and Dev.<br/>
+- 🛡️ Secure arbitrary text values with end-to-end encryption<br/>
+- 🏷️ Send dynamic values like UUIDs or timestamps using template tags.<br/>
+- 🎨 Choose from many of the included themes, or make your own.<br/>
+- 💽 Mirror workspace data to a directory for integration with Git or Dropbox.<br/>
+- 📜 View response history for each request.<br/>
+- 🔌 Create your own plugins for authentication, template tags, and more!<br/>
+- 🛜 Configure a proxy to access firewall-blocked APIs
+
 ## Useful Resources
 
 - [Feedback and Bug Reports](https://feedback.yaak.app)
 - [Documentation](https://feedback.yaak.app/help)
-- [Yaak vs Postman](https://yaak.app/alternatives/postman)
-- [Yaak vs Bruno](https://yaak.app/alternatives/bruno)
-- [Yaak vs Insomnia](https://yaak.app/alternatives/insomnia)
+- [Yaak vs Postman](https://yaak.app/blog/postman-alternative)

biome.json

@@ -1,51 +0,0 @@
-{
-  "$schema": "https://biomejs.dev/schemas/2.3.7/schema.json",
-  "linter": {
-    "enabled": true,
-    "rules": {
-      "recommended": true,
-      "a11y": {
-        "useKeyWithClickEvents": "off"
-      }
-    }
-  },
-  "formatter": {
-    "enabled": true,
-    "indentStyle": "space",
-    "indentWidth": 2,
-    "lineWidth": 100,
-    "bracketSpacing": true
-  },
-  "css": {
-    "parser": {
-      "tailwindDirectives": true
-    },
-    "linter": {
-      "enabled": false
-    }
-  },
-  "javascript": {
-    "formatter": {
-      "quoteStyle": "single",
-      "jsxQuoteStyle": "double",
-      "trailingCommas": "all",
-      "semicolons": "always"
-    }
-  },
-  "files": {
-    "includes": [
-      "**",
-      "!**/node_modules",
-      "!**/dist",
-      "!**/build",
-      "!scripts",
-      "!packages/plugin-runtime",
-      "!packages/plugin-runtime-types",
-      "!src-tauri",
-      "!src-web/tailwind.config.cjs",
-      "!src-web/postcss.config.cjs",
-      "!src-web/vite.config.ts",
-      "!src-web/routeTree.gen.ts"
-    ]
-  }
-}

package.json

@@ -7,46 +7,10 @@
     "url": "git+https://github.com/mountain-loop/yaak.git"
   },
   "workspaces": [
-    "packages/common-lib",
     "packages/plugin-runtime",
     "packages/plugin-runtime-types",
-    "plugins/action-copy-curl",
-    "plugins/action-copy-grpcurl",
-    "plugins/auth-apikey",
-    "plugins/auth-aws",
-    "plugins/auth-basic",
-    "plugins/auth-bearer",
-    "plugins/auth-jwt",
-    "plugins/auth-ntlm",
-    "plugins/auth-oauth2",
-    "plugins/auth-oauth1",
-    "plugins/filter-jsonpath",
-    "plugins/filter-xpath",
-    "plugins/importer-curl",
-    "plugins/importer-insomnia",
-    "plugins/importer-openapi",
-    "plugins/importer-postman",
-    "plugins/importer-postman-environment",
-    "plugins/importer-yaak",
-    "plugins/template-function-1password",
-    "plugins/template-function-cookie",
-    "plugins/template-function-ctx",
-    "plugins/template-function-encode",
-    "plugins/template-function-fs",
-    "plugins/template-function-hash",
-    "plugins/template-function-json",
-    "plugins/template-function-prompt",
-    "plugins/template-function-random",
-    "plugins/template-function-regex",
-    "plugins/template-function-timestamp",
-    "plugins/template-function-uuid",
-    "plugins/template-function-xml",
-    "plugins/template-function-request",
-    "plugins/template-function-response",
-    "plugins/themes-yaak",
-    "src-tauri",
+    "packages/common-lib",
     "src-tauri/yaak-crypto",
-    "src-tauri/yaak-fonts",
     "src-tauri/yaak-git",
     "src-tauri/yaak-license",
     "src-tauri/yaak-mac-window",
@@ -61,39 +25,34 @@
   "scripts": {
     "start": "npm run app-dev",
     "app-build": "tauri build",
-    "app-dev": "tauri dev --no-watch --config ./src-tauri/tauri.development.conf.json",
-    "migration": "node scripts/create-migration.cjs",
+    "app-dev": "tauri dev --no-watch --config ./src-tauri/tauri-dev.conf.json",
     "build": "npm run --workspaces --if-present build",
-    "build-plugins": "npm run --workspaces --if-present build",
-    "test": "npm run --workspaces --if-present test",
-    "icons": "run-p icons:*",
-    "icons:dev": "tauri icon src-tauri/icons/icon-dev.png --output src-tauri/icons/dev",
-    "icons:release": "tauri icon src-tauri/icons/icon.png --output src-tauri/icons/release",
-    "bootstrap": "run-s bootstrap:*",
-    "bootstrap:install-wasm-pack": "node scripts/install-wasm-pack.cjs",
-    "bootstrap:build": "npm run build",
-    "bootstrap:vendor": "npm run vendor",
-    "vendor": "run-p vendor:*",
-    "vendor:vendor-plugins": "node scripts/vendor-plugins.cjs",
-    "vendor:vendor-protoc": "node scripts/vendor-protoc.cjs",
-    "vendor:vendor-node": "node scripts/vendor-node.cjs",
-    "lint": "run-p lint:*",
-    "lint:biome": "biome lint",
-    "lint:extra": "npm run --workspaces --if-present lint",
-    "format": "biome format --write .",
+    "bootstrap": "run-p bootstrap:* && npm run --workspaces --if-present bootstrap",
+    "bootstrap:vendor-node": "node scripts/vendor-node.cjs",
+    "bootstrap:vendor-plugins": "node scripts/vendor-plugins.cjs",
+    "bootstrap:vendor-protoc": "node scripts/vendor-protoc.cjs",
+    "lint": "npm run --workspaces --if-present lint",
     "replace-version": "node scripts/replace-version.cjs",
     "tauri": "tauri",
-    "tauri-before-build": "npm run bootstrap",
-    "tauri-before-dev": "workspaces-run --parallel -- npm run --workspaces --if-present dev"
+    "tauri-before-build": "npm run bootstrap && npm run --workspaces --if-present build",
+    "tauri-before-dev": "npm run --workspaces --if-present dev"
+  },
+  "dependencies": {
+    "jotai": "^2.12.2"
   },
   "devDependencies": {
-    "@biomejs/biome": "^2.3.7",
-    "@tauri-apps/cli": "^2.9.6",
-    "@yaakapp/cli": "^0.3.4",
+    "@tauri-apps/cli": "^2.4.1",
+    "@typescript-eslint/eslint-plugin": "^8.27.0",
+    "@typescript-eslint/parser": "^8.27.0",
+    "eslint": "^8",
+    "eslint-config-prettier": "^8",
+    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-jsx-a11y": "^6.10.2",
+    "eslint-plugin-react": "^7.37.2",
+    "eslint-plugin-react-hooks": "^5.1.0",
     "nodejs-file-downloader": "^4.13.0",
     "npm-run-all": "^4.1.5",
-    "typescript": "^5.8.3",
-    "vitest": "^3.2.4",
-    "workspaces-run": "^1.0.2"
+    "prettier": "^3.4.2",
+    "typescript": "^5.8.2"
   }
 }

packages/common-lib/debounce.ts

@@ -1,12 +1,12 @@
-// biome-ignore lint/suspicious/noExplicitAny: none
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
 export function debounce(fn: (...args: any[]) => void, delay = 500) {
   let timer: ReturnType<typeof setTimeout>;
-  // biome-ignore lint/suspicious/noExplicitAny: none
-  const result = (...args: any[]) => {
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  const result = function (...args: any[]) {
     clearTimeout(timer);
     timer = setTimeout(() => fn(...args), delay);
   };
-  result.cancel = () => {
+  result.cancel = function () {
     clearTimeout(timer);
   };
   return result;

packages/common-lib/formatSize.ts

@@ -1,20 +1,20 @@
 export function formatSize(bytes: number): string {
-  let num: number;
-  let unit: string;
+    let num;
+    let unit;
 
-  if (bytes > 1000 * 1000 * 1000) {
-    num = bytes / 1000 / 1000 / 1000;
-    unit = 'GB';
-  } else if (bytes > 1000 * 1000) {
-    num = bytes / 1000 / 1000;
-    unit = 'MB';
-  } else if (bytes > 1000) {
-    num = bytes / 1000;
-    unit = 'KB';
-  } else {
-    num = bytes;
-    unit = 'B';
-  }
+    if (bytes > 1000 * 1000 * 1000) {
+        num = bytes / 1000 / 1000 / 1000;
+        unit = 'GB';
+    } else if (bytes > 1000 * 1000) {
+        num = bytes / 1000 / 1000;
+        unit = 'MB';
+    } else if (bytes > 1000) {
+        num = bytes / 1000;
+        unit = 'KB';
+    } else {
+        num = bytes;
+        unit = 'B';
+    }
 
-  return `${Math.round(num * 10) / 10} ${unit}`;
+    return `${Math.round(num * 10) / 10} ${unit}`;
 }

packages/common-lib/index.ts

@@ -1,3 +1 @@
 export * from './debounce';
-export * from './formatSize';
-export * from './templateFunction';

packages/common-lib/templateFunction.ts

@@ -1,49 +0,0 @@
-import type {
-  CallTemplateFunctionArgs,
-  JsonPrimitive,
-  TemplateFunctionArg,
-} from '@yaakapp-internal/plugins';
-
-export function validateTemplateFunctionArgs(
-  fnName: string,
-  args: TemplateFunctionArg[],
-  values: CallTemplateFunctionArgs['values'],
-): string | null {
-  for (const arg of args) {
-    if ('inputs' in arg && arg.inputs) {
-      // Recurse down
-      const err = validateTemplateFunctionArgs(fnName, arg.inputs, values);
-      if (err) return err;
-    }
-    if (!('name' in arg)) continue;
-    if (arg.optional) continue;
-    if (arg.defaultValue != null) continue;
-    if (arg.hidden) continue;
-    if (values[arg.name] != null) continue;
-
-    return `Missing required argument "${arg.label || arg.name}" for template function ${fnName}()`;
-  }
-
-  return null;
-}
-
-/** Recursively apply form input defaults to a set of values */
-export function applyFormInputDefaults(
-  inputs: TemplateFunctionArg[],
-  values: { [p: string]: JsonPrimitive | undefined },
-) {
-  let newValues: { [p: string]: JsonPrimitive | undefined } = { ...values };
-  for (const input of inputs) {
-    if ('defaultValue' in input && values[input.name] === undefined) {
-      newValues[input.name] = input.defaultValue;
-    }
-    if (input.type === 'checkbox' && values[input.name] === undefined) {
-      newValues[input.name] = false;
-    }
-    // Recurse down to all child inputs
-    if ('inputs' in input) {
-      newValues = applyFormInputDefaults(input.inputs ?? [], newValues);
-    }
-  }
-  return newValues;
-}

packages/plugin-runtime-types/README.md

@@ -1,28 +0,0 @@
-# Yaak Plugin API
-
-Yaak is a desktop [API client](https://yaak.app/blog/yet-another-api-client) for
-interacting with REST, GraphQL, Server Sent Events (SSE), WebSocket, and gRPC APIs. It's
-built using Tauri, Rust, and ReactJS.
-
-Plugins can be created in TypeScript, which are executed alongside Yaak in a NodeJS
-runtime. This package contains the TypeScript type definitions required to make building
-Yaak plugins a breeze.
-
-## Quick Start
-
-The easiest way to get started is by generating a plugin with the Yaak CLI:
-
-```shell
-npx @yaakapp/cli generate
-```
-
-For more details on creating plugins, check out
-the [Quick Start Guide](https://feedback.yaak.app/help/articles/6911763-plugins-quick-start)
-
-## Installation
-
-If you prefer starting from scratch, manually install the types package:
-
-```shell
-npm install -D @yaakapp/api
-```

packages/plugin-runtime-types/package.json

@@ -1,20 +1,6 @@
 {
   "name": "@yaakapp/api",
-  "version": "0.7.1",
-  "keywords": [
-    "api-client",
-    "insomnia-alternative",
-    "bruno-alternative",
-    "postman-alternative"
-  ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/mountain-loop/yaak"
-  },
-  "bugs": {
-    "url": "https://feedback.yaak.app"
-  },
-  "homepage": "https://yaak.app",
+  "version": "0.5.3",
   "main": "lib/index.js",
   "typings": "./lib/index.d.ts",
   "files": [
@@ -31,7 +17,7 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@types/node": "^24.0.13"
+    "@types/node": "^22.5.4"
   },
   "devDependencies": {
     "cpy-cli": "^5.0.0"

packages/plugin-runtime-types/src/bindings/gen_api.ts

@@ -1,8 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-import type { PluginVersion } from "./gen_search";
-
-export type PluginNameVersion = { name: string, version: string, };
-
-export type PluginSearchResponse = { plugins: Array<PluginVersion>, };
-
-export type PluginUpdatesResponse = { plugins: Array<PluginNameVersion>, };

packages/plugin-runtime-types/src/bindings/gen_models.ts

@@ -1,18 +1,20 @@
 // This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
 
-export type Environment = { model: "environment", id: string, workspaceId: string, createdAt: string, updatedAt: string, name: string, public: boolean, parentModel: string, parentId: string | null, variables: Array<EnvironmentVariable>, color: string | null, sortPriority: number, };
+export type Environment = { model: "environment", id: string, workspaceId: string, createdAt: string, updatedAt: string, name: string, public: boolean, base: boolean, variables: Array<EnvironmentVariable>, };
 
 export type EnvironmentVariable = { enabled?: boolean, name: string, value: string, id?: string, };
 
-export type Folder = { model: "folder", id: string, createdAt: string, updatedAt: string, workspaceId: string, folderId: string | null, authentication: Record<string, any>, authenticationType: string | null, description: string, headers: Array<HttpRequestHeader>, name: string, sortPriority: number, };
+export type Folder = { model: "folder", id: string, createdAt: string, updatedAt: string, workspaceId: string, folderId: string | null, name: string, description: string, sortPriority: number, };
 
-export type GrpcRequest = { model: "grpc_request", id: string, createdAt: string, updatedAt: string, workspaceId: string, folderId: string | null, authenticationType: string | null, authentication: Record<string, any>, description: string, message: string, metadata: Array<HttpRequestHeader>, method: string | null, name: string, service: string | null, sortPriority: number, url: string, };
+export type GrpcMetadataEntry = { enabled?: boolean, name: string, value: string, id?: string, };
+
+export type GrpcRequest = { model: "grpc_request", id: string, createdAt: string, updatedAt: string, workspaceId: string, folderId: string | null, authenticationType: string | null, authentication: Record<string, any>, description: string, message: string, metadata: Array<GrpcMetadataEntry>, method: string | null, name: string, service: string | null, sortPriority: number, url: string, };
 
 export type HttpRequest = { model: "http_request", id: string, createdAt: string, updatedAt: string, workspaceId: string, folderId: string | null, authentication: Record<string, any>, authenticationType: string | null, body: Record<string, any>, bodyType: string | null, description: string, headers: Array<HttpRequestHeader>, method: string, name: string, sortPriority: number, url: string, urlParameters: Array<HttpUrlParameter>, };
 
 export type HttpRequestHeader = { enabled?: boolean, name: string, value: string, id?: string, };
 
-export type HttpResponse = { model: "http_response", id: string, createdAt: string, updatedAt: string, workspaceId: string, requestId: string, bodyPath: string | null, contentLength: number | null, contentLengthCompressed: number | null, elapsed: number, elapsedHeaders: number, error: string | null, headers: Array<HttpResponseHeader>, remoteAddr: string | null, requestContentLength: number | null, requestHeaders: Array<HttpResponseHeader>, status: number, statusReason: string | null, state: HttpResponseState, url: string, version: string | null, };
+export type HttpResponse = { model: "http_response", id: string, createdAt: string, updatedAt: string, workspaceId: string, requestId: string, bodyPath: string | null, contentLength: number | null, elapsed: number, elapsedHeaders: number, error: string | null, headers: Array<HttpResponseHeader>, remoteAddr: string | null, status: number, statusReason: string | null, state: HttpResponseState, url: string, version: string | null, };
 
 export type HttpResponseHeader = { name: string, value: string, };
 
@@ -22,4 +24,4 @@ export type HttpUrlParameter = { enabled?: boolean, name: string, value: string,
 
 export type WebsocketRequest = { model: "websocket_request", id: string, createdAt: string, updatedAt: string, workspaceId: string, folderId: string | null, authentication: Record<string, any>, authenticationType: string | null, description: string, headers: Array<HttpRequestHeader>, message: string, name: string, sortPriority: number, url: string, urlParameters: Array<HttpUrlParameter>, };
 
-export type Workspace = { model: "workspace", id: string, createdAt: string, updatedAt: string, authentication: Record<string, any>, authenticationType: string | null, description: string, headers: Array<HttpRequestHeader>, name: string, encryptionKeyChallenge: string | null, settingValidateCertificates: boolean, settingFollowRedirects: boolean, settingRequestTimeout: number, };
+export type Workspace = { model: "workspace", id: string, createdAt: string, updatedAt: string, name: string, description: string, encryptionKeyChallenge: string | null, settingValidateCertificates: boolean, settingFollowRedirects: boolean, settingRequestTimeout: number, };

packages/plugin-runtime-types/src/bindings/gen_search.ts

@@ -1,5 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type PluginMetadata = { version: string, name: string, displayName: string, description: string | null, homepageUrl: string | null, repositoryUrl: string | null, };
-
-export type PluginVersion = { id: string, version: string, url: string, description: string | null, name: string, displayName: string, homepageUrl: string | null, repositoryUrl: string | null, checksum: string, readme: string | null, yanked: boolean, };

packages/plugin-runtime-types/src/plugins/AuthenticationPlugin.ts

@@ -3,37 +3,22 @@ import {
   CallHttpAuthenticationRequest,
   CallHttpAuthenticationResponse,
   FormInput,
+  GetHttpAuthenticationConfigRequest,
   GetHttpAuthenticationSummaryResponse,
   HttpAuthenticationAction,
 } from '../bindings/gen_events';
 import { MaybePromise } from '../helpers';
 import { Context } from './Context';
 
-type AddDynamicMethod<T> = {
-  dynamic?: (
+type DynamicFormInput = FormInput & {
+  dynamic(
     ctx: Context,
-    args: CallHttpAuthenticationActionArgs,
-  ) => MaybePromise<Partial<T> | null | undefined>;
+    args: GetHttpAuthenticationConfigRequest,
+  ): MaybePromise<Partial<FormInput> | undefined | null>;
 };
 
-type AddDynamic<T> = T extends any
-  ? T extends { inputs?: FormInput[] }
-    ? Omit<T, 'inputs'> & {
-        inputs: Array<AddDynamic<FormInput>>;
-        dynamic?: (
-          ctx: Context,
-          args: CallHttpAuthenticationActionArgs,
-        ) => MaybePromise<
-          Partial<Omit<T, 'inputs'> & { inputs: Array<AddDynamic<FormInput>> }> | null | undefined
-        >;
-      }
-    : T & AddDynamicMethod<T>
-  : never;
-
-export type DynamicAuthenticationArg = AddDynamic<FormInput>;
-
 export type AuthenticationPlugin = GetHttpAuthenticationSummaryResponse & {
-  args: DynamicAuthenticationArg[];
+  args: (FormInput | DynamicFormInput)[];
   onApply(
     ctx: Context,
     args: CallHttpAuthenticationRequest,

packages/plugin-runtime-types/src/plugins/Context.ts

@@ -1,28 +1,19 @@
 import type {
   FindHttpResponsesRequest,
   FindHttpResponsesResponse,
-  GetCookieValueRequest,
-  GetCookieValueResponse,
   GetHttpRequestByIdRequest,
   GetHttpRequestByIdResponse,
-  ListCookieNamesResponse,
-  ListFoldersRequest,
-  ListFoldersResponse,
-  ListHttpRequestsRequest,
-  ListHttpRequestsResponse,
   OpenWindowRequest,
   PromptTextRequest,
   PromptTextResponse,
-  RenderGrpcRequestRequest,
-  RenderGrpcRequestResponse,
   RenderHttpRequestRequest,
   RenderHttpRequestResponse,
   SendHttpRequestRequest,
   SendHttpRequestResponse,
   ShowToastRequest,
   TemplateRenderRequest,
+  TemplateRenderResponse,
 } from '../bindings/gen_events.ts';
-import type { JsonValue } from '../bindings/serde_json/JsonValue';
 
 export interface Context {
   clipboard: {
@@ -40,9 +31,6 @@ export interface Context {
     delete(key: string): Promise<boolean>;
   };
   window: {
-    requestId(): Promise<string | null>;
-    workspaceId(): Promise<string | null>;
-    environmentId(): Promise<string | null>;
     openUrl(
       args: OpenWindowRequest & {
         onNavigate?: (args: { url: string }) => void;
@@ -50,29 +38,15 @@ export interface Context {
       },
     ): Promise<{ close: () => void }>;
   };
-  cookies: {
-    listNames(): Promise<ListCookieNamesResponse['names']>;
-    getValue(args: GetCookieValueRequest): Promise<GetCookieValueResponse['value']>;
-  };
-  grpcRequest: {
-    render(args: RenderGrpcRequestRequest): Promise<RenderGrpcRequestResponse['grpcRequest']>;
-  };
   httpRequest: {
     send(args: SendHttpRequestRequest): Promise<SendHttpRequestResponse['httpResponse']>;
     getById(args: GetHttpRequestByIdRequest): Promise<GetHttpRequestByIdResponse['httpRequest']>;
     render(args: RenderHttpRequestRequest): Promise<RenderHttpRequestResponse['httpRequest']>;
-    list(args?: ListHttpRequestsRequest): Promise<ListHttpRequestsResponse['httpRequests']>;
-  };
-  folder: {
-    list(args?: ListFoldersRequest): Promise<ListFoldersResponse['folders']>;
   };
   httpResponse: {
     find(args: FindHttpResponsesRequest): Promise<FindHttpResponsesResponse['httpResponses']>;
   };
   templates: {
-    render<T extends JsonValue>(args: TemplateRenderRequest & { data: T }): Promise<T>;
-  };
-  plugin: {
-    reload(): void;
+    render(args: TemplateRenderRequest): Promise<TemplateRenderResponse['data']>;
   };
 }

packages/plugin-runtime-types/src/plugins/FilterPlugin.ts

@@ -1,11 +1,12 @@
-import { FilterResponse } from '../bindings/gen_events';
 import type { Context } from './Context';
 
+type FilterPluginResponse = { filtered: string };
+
 export type FilterPlugin = {
   name: string;
   description?: string;
   onFilter(
     ctx: Context,
     args: { payload: string; filter: string; mimeType: string },
-  ): Promise<FilterResponse> | FilterResponse;
+  ): Promise<FilterPluginResponse> | FilterPluginResponse;
 };

packages/plugin-runtime-types/src/plugins/FolderActionPlugin.ts

@@ -1,6 +0,0 @@
-import type { CallFolderActionArgs, FolderAction } from '../bindings/gen_events';
-import type { Context } from './Context';
-
-export type FolderActionPlugin = FolderAction & {
-  onSelect(ctx: Context, args: CallFolderActionArgs): Promise<void> | void;
-};

packages/plugin-runtime-types/src/plugins/GrpcRequestActionPlugin.ts

@@ -1,6 +0,0 @@
-import { CallGrpcRequestActionArgs, GrpcRequestAction } from '../bindings/gen_events';
-import type { Context } from './Context';
-
-export type GrpcRequestActionPlugin = GrpcRequestAction & {
-  onSelect(ctx: Context, args: CallGrpcRequestActionArgs): Promise<void> | void;
-};

packages/plugin-runtime-types/src/plugins/ImporterPlugin.ts

@@ -1,5 +1,5 @@
 import { ImportResources } from '../bindings/gen_events';
-import { AtLeast, MaybePromise } from '../helpers';
+import { AtLeast } from '../helpers';
 import type { Context } from './Context';
 
 type RootFields = 'name' | 'id' | 'model';
@@ -21,8 +21,5 @@ export type ImportPluginResponse = null | {
 export type ImporterPlugin = {
   name: string;
   description?: string;
-  onImport(
-    ctx: Context,
-    args: { text: string },
-  ): MaybePromise<ImportPluginResponse | null | undefined>;
+  onImport(ctx: Context, args: { text: string }): Promise<ImportPluginResponse>;
 };

packages/plugin-runtime-types/src/plugins/TemplateFunctionPlugin.ts

@@ -1,31 +1,12 @@
-import { CallTemplateFunctionArgs, FormInput, TemplateFunction } from '../bindings/gen_events';
-import { MaybePromise } from '../helpers';
-import { Context } from './Context';
+import {
+  CallTemplateFunctionArgs,
+  TemplateFunction,
+} from "../bindings/gen_events";
+import { Context } from "./Context";
 
-type AddDynamicMethod<T> = {
-  dynamic?: (
+export type TemplateFunctionPlugin = TemplateFunction & {
+  onRender(
     ctx: Context,
     args: CallTemplateFunctionArgs,
-  ) => MaybePromise<Partial<T> | null | undefined>;
-};
-
-type AddDynamic<T> = T extends any
-  ? T extends { inputs?: FormInput[] }
-    ? Omit<T, 'inputs'> & {
-        inputs: Array<AddDynamic<FormInput>>;
-        dynamic?: (
-          ctx: Context,
-          args: CallTemplateFunctionArgs,
-        ) => MaybePromise<
-          Partial<Omit<T, 'inputs'> & { inputs: Array<AddDynamic<FormInput>> }> | null | undefined
-        >;
-      }
-    : T & AddDynamicMethod<T>
-  : never;
-
-export type DynamicTemplateFunctionArg = AddDynamic<FormInput>;
-
-export type TemplateFunctionPlugin = Omit<TemplateFunction, 'args'> & {
-  args: DynamicTemplateFunctionArg[];
-  onRender(ctx: Context, args: CallTemplateFunctionArgs): Promise<string | null>;
+  ): Promise<string | null>;
 };

packages/plugin-runtime-types/src/plugins/ThemePlugin.ts

@@ -1,3 +1,8 @@
-import { Theme } from '../bindings/gen_events';
+import { Index } from "../themes";
+import { Context } from "./Context";
 
-export type ThemePlugin = Theme;
+export type ThemePlugin = {
+  name: string;
+  description?: string;
+  getTheme(ctx: Context, fileContents: string): Promise<Index>;
+};

packages/plugin-runtime-types/src/plugins/WebSocketRequestActionPlugin.ts

@@ -1,6 +0,0 @@
-import type { CallWebsocketRequestActionArgs, WebsocketRequestAction } from '../bindings/gen_events';
-import type { Context } from './Context';
-
-export type WebsocketRequestActionPlugin = WebsocketRequestAction & {
-  onSelect(ctx: Context, args: CallWebsocketRequestActionArgs): Promise<void> | void;
-};

packages/plugin-runtime-types/src/plugins/WorkspaceActionPlugin.ts

@@ -1,6 +0,0 @@
-import type { CallWorkspaceActionArgs, WorkspaceAction } from '../bindings/gen_events';
-import type { Context } from './Context';
-
-export type WorkspaceActionPlugin = WorkspaceAction & {
-  onSelect(ctx: Context, args: CallWorkspaceActionArgs): Promise<void> | void;
-};

packages/plugin-runtime-types/src/plugins/index.ts

@@ -1,37 +1,20 @@
 import { AuthenticationPlugin } from './AuthenticationPlugin';
-
-import type { Context } from './Context';
 import type { FilterPlugin } from './FilterPlugin';
-import { GrpcRequestActionPlugin } from './GrpcRequestActionPlugin';
 import type { HttpRequestActionPlugin } from './HttpRequestActionPlugin';
-import type { WebsocketRequestActionPlugin } from './WebSocketRequestActionPlugin';
-import type { WorkspaceActionPlugin } from './WorkspaceActionPlugin';
-import type { FolderActionPlugin } from './FolderActionPlugin';
 import type { ImporterPlugin } from './ImporterPlugin';
 import type { TemplateFunctionPlugin } from './TemplateFunctionPlugin';
 import type { ThemePlugin } from './ThemePlugin';
 
-export type { Context };
-export type { DynamicTemplateFunctionArg } from './TemplateFunctionPlugin';
-export type { DynamicAuthenticationArg } from './AuthenticationPlugin';
-export type { TemplateFunctionPlugin };
-export type { WorkspaceActionPlugin } from './WorkspaceActionPlugin';
-export type { FolderActionPlugin } from './FolderActionPlugin';
+export type { Context } from './Context';
 
 /**
  * The global structure of a Yaak plugin
  */
 export type PluginDefinition = {
-  init?: (ctx: Context) => void | Promise<void>;
-  dispose?: () => void | Promise<void>;
   importer?: ImporterPlugin;
-  themes?: ThemePlugin[];
+  theme?: ThemePlugin;
   filter?: FilterPlugin;
   authentication?: AuthenticationPlugin;
   httpRequestActions?: HttpRequestActionPlugin[];
-  websocketRequestActions?: WebsocketRequestActionPlugin[];
-  workspaceActions?: WorkspaceActionPlugin[];
-  folderActions?: FolderActionPlugin[];
-  grpcRequestActions?: GrpcRequestActionPlugin[];
   templateFunctions?: TemplateFunctionPlugin[];
 };

packages/plugin-runtime-types/tsconfig.json

@@ -2,17 +2,12 @@
   "compilerOptions": {
     "module": "node16",
     "target": "es6",
-    "lib": [
-      "es2021",
-      "dom"
-    ],
+    "lib": ["es2021"],
     "declaration": true,
     "declarationDir": "./lib",
     "outDir": "./lib",
     "strict": true,
-    "types": [
-      "node"
-    ]
+    "types": ["node"]
   },
   "files": [
     "src/index.ts"

packages/plugin-runtime/src/PluginHandle.ts

@@ -1,4 +1,3 @@
-import { PluginContext } from '@yaakapp-internal/plugins';
 import type { BootRequest, InternalEvent } from '@yaakapp/api';
 import type { EventChannel } from './EventChannel';
 import { PluginInstance, PluginWorkerData } from './PluginInstance';
@@ -7,12 +6,14 @@ export class PluginHandle {
   #instance: PluginInstance;
 
   constructor(
-    pluginRefId: string,
-    context: PluginContext,
-    bootRequest: BootRequest,
-    pluginToAppEvents: EventChannel,
+    readonly pluginRefId: string,
+    readonly bootRequest: BootRequest,
+    readonly pluginToAppEvents: EventChannel,
   ) {
-    const workerData: PluginWorkerData = { pluginRefId, context, bootRequest };
+    const workerData: PluginWorkerData = {
+      pluginRefId: this.pluginRefId,
+      bootRequest: this.bootRequest,
+    };
     this.#instance = new PluginInstance(workerData, pluginToAppEvents);
   }
 
@@ -20,7 +21,7 @@ export class PluginHandle {
     this.#instance.postMessage(event);
   }
 
-  async terminate() {
-    await this.#instance.terminate();
+  terminate() {
+    this.#instance.terminate();
   }
 }

packages/plugin-runtime/src/PluginInstance.ts

@@ -1,44 +1,41 @@
-import { applyFormInputDefaults, validateTemplateFunctionArgs } from '@yaakapp-internal/lib/templateFunction';
-import {
+import { PluginWindowContext, TemplateFunctionArg } from '@yaakapp-internal/plugins';
+import type {
   BootRequest,
+  Context,
   DeleteKeyValueResponse,
   FindHttpResponsesResponse,
-  GetCookieValueRequest,
-  GetCookieValueResponse,
+  FormInput,
   GetHttpRequestByIdResponse,
   GetKeyValueResponse,
-  GrpcRequestAction,
   HttpAuthenticationAction,
   HttpRequestAction,
   InternalEvent,
   InternalEventPayload,
-  ListCookieNamesResponse,
-  PluginContext,
+  JsonPrimitive,
+  PluginDefinition,
   PromptTextResponse,
-  RenderGrpcRequestResponse,
   RenderHttpRequestResponse,
   SendHttpRequestResponse,
   TemplateFunction,
   TemplateRenderResponse,
-  WindowInfoResponse,
-} from '@yaakapp-internal/plugins';
-import { Context, PluginDefinition } from '@yaakapp/api';
+} from '@yaakapp/api';
 import console from 'node:console';
-import { type Stats, statSync, watch } from 'node:fs';
+import { readFileSync, type Stats, statSync, watch } from 'node:fs';
 import path from 'node:path';
-import { applyDynamicFormInput } from './common';
+// import util from 'node:util';
 import { EventChannel } from './EventChannel';
+// import { interceptStdout } from './interceptStdout';
 import { migrateTemplateFunctionSelectOptions } from './migrations';
 
 export interface PluginWorkerData {
   bootRequest: BootRequest;
   pluginRefId: string;
-  context: PluginContext;
 }
 
 export class PluginInstance {
   #workerData: PluginWorkerData;
   #mod: PluginDefinition;
+  #pkg: { name?: string; version?: string };
   #pluginToAppEvents: EventChannel;
   #appToPluginEvents: EventChannel;
 
@@ -52,20 +49,11 @@ export class PluginInstance {
       await this.#onMessage(event);
     });
 
-    this.#mod = {} as any;
-
+    // Reload plugin if the JS or package.json changes
+    const windowContextNone: PluginWindowContext = { type: 'none' };
     const fileChangeCallback = async () => {
-      await this.#mod?.dispose?.();
       this.#importModule();
-      await this.#mod?.init?.(this.#newCtx(workerData.context));
-      return this.#sendPayload(
-        workerData.context,
-        {
-          type: 'reload_response',
-          silent: false,
-        },
-        null,
-      );
+      return this.#sendPayload(windowContextNone, { type: 'reload_response' }, null);
     };
 
     if (this.#workerData.bootRequest.watch) {
@@ -73,6 +61,12 @@ export class PluginInstance {
       watchFile(this.#pathPkg(), fileChangeCallback);
     }
 
+    this.#mod = {};
+    this.#pkg = JSON.parse(readFileSync(this.#pathPkg(), 'utf8'));
+
+    // TODO: Re-implement this now that we're not using workers
+    // prefixStdout(`[plugin][${this.#pkg.name}] %s`);
+
     this.#importModule();
   }
 
@@ -80,20 +74,23 @@ export class PluginInstance {
     this.#appToPluginEvents.emit(event);
   }
 
-  async terminate() {
-    await this.#mod?.dispose?.();
+  terminate() {
     this.#unimportModule();
   }
 
   async #onMessage(event: InternalEvent) {
-    const ctx = this.#newCtx(event.context);
-
-    const { context, payload, id: replyId } = event;
+    const ctx = this.#newCtx(event);
 
+    const { windowContext, payload, id: replyId } = event;
     try {
       if (payload.type === 'boot_request') {
-        await this.#mod?.init?.(ctx);
-        this.#sendPayload(context, { type: 'boot_response' }, replyId);
+        // console.log('Plugin initialized', pkg.name, { capabilities, enableWatch });
+        const payload: InternalEventPayload = {
+          type: 'boot_response',
+          name: this.#pkg.name ?? 'unknown',
+          version: this.#pkg.version ?? '0.0.1',
+        };
+        this.#sendPayload(windowContext, payload, replyId);
         return;
       }
 
@@ -101,8 +98,7 @@ export class PluginInstance {
         const payload: InternalEventPayload = {
           type: 'terminate_response',
         };
-        await this.terminate();
-        this.#sendPayload(context, payload, replyId);
+        this.#sendPayload(windowContext, payload, replyId);
         return;
       }
 
@@ -119,10 +115,10 @@ export class PluginInstance {
             // deno-lint-ignore no-explicit-any
             resources: reply.resources as any,
           };
-          this.#sendPayload(context, replyPayload, replyId);
+          this.#sendPayload(windowContext, replyPayload, replyId);
           return;
         } else {
-          // Send back an empty reply (below)
+          // Continue, to send back an empty reply
         }
       }
 
@@ -132,25 +128,11 @@ export class PluginInstance {
           payload: payload.content,
           mimeType: payload.type,
         });
-        this.#sendPayload(context, { type: 'filter_response', ...reply }, replyId);
-        return;
-      }
-
-      if (
-        payload.type === 'get_grpc_request_actions_request' &&
-        Array.isArray(this.#mod?.grpcRequestActions)
-      ) {
-        const reply: GrpcRequestAction[] = this.#mod.grpcRequestActions.map((a) => ({
-          ...a,
-          // Add everything except onSelect
-          onSelect: undefined,
-        }));
         const replyPayload: InternalEventPayload = {
-          type: 'get_grpc_request_actions_response',
-          pluginRefId: this.#workerData.pluginRefId,
-          actions: reply,
+          type: 'filter_response',
+          content: reply.filtered,
         };
-        this.#sendPayload(context, replyPayload, replyId);
+        this.#sendPayload(windowContext, replyPayload, replyId);
         return;
       }
 
@@ -168,134 +150,56 @@ export class PluginInstance {
           pluginRefId: this.#workerData.pluginRefId,
           actions: reply,
         };
-        this.#sendPayload(context, replyPayload, replyId);
+        this.#sendPayload(windowContext, replyPayload, replyId);
         return;
       }
 
       if (
-        payload.type === 'get_websocket_request_actions_request' &&
-        Array.isArray(this.#mod?.websocketRequestActions)
-      ) {
-        const reply = this.#mod.websocketRequestActions.map((a) => ({
-          ...a,
-          onSelect: undefined,
-        }));
-        const replyPayload: InternalEventPayload = {
-          type: 'get_websocket_request_actions_response',
-          pluginRefId: this.#workerData.pluginRefId,
-          actions: reply,
-        };
-        this.#sendPayload(context, replyPayload, replyId);
-        return;
-      }
-
-      if (
-        payload.type === 'get_workspace_actions_request' &&
-        Array.isArray(this.#mod?.workspaceActions)
-      ) {
-        const reply = this.#mod.workspaceActions.map((a) => ({
-          ...a,
-          onSelect: undefined,
-        }));
-        const replyPayload: InternalEventPayload = {
-          type: 'get_workspace_actions_response',
-          pluginRefId: this.#workerData.pluginRefId,
-          actions: reply,
-        };
-        this.#sendPayload(context, replyPayload, replyId);
-        return;
-      }
-
-      if (
-        payload.type === 'get_folder_actions_request' &&
-        Array.isArray(this.#mod?.folderActions)
-      ) {
-        const reply = this.#mod.folderActions.map((a) => ({
-          ...a,
-          onSelect: undefined,
-        }));
-        const replyPayload: InternalEventPayload = {
-          type: 'get_folder_actions_response',
-          pluginRefId: this.#workerData.pluginRefId,
-          actions: reply,
-        };
-        this.#sendPayload(context, replyPayload, replyId);
-        return;
-      }
-
-      if (payload.type === 'get_themes_request' && Array.isArray(this.#mod?.themes)) {
-        const replyPayload: InternalEventPayload = {
-          type: 'get_themes_response',
-          themes: this.#mod.themes,
-        };
-        this.#sendPayload(context, replyPayload, replyId);
-        return;
-      }
-
-      if (
-        payload.type === 'get_template_function_summary_request' &&
+        payload.type === 'get_template_functions_request' &&
         Array.isArray(this.#mod?.templateFunctions)
       ) {
-        const functions: TemplateFunction[] = this.#mod.templateFunctions.map(
-          (templateFunction) => {
-            return {
-              ...migrateTemplateFunctionSelectOptions(templateFunction),
-              // Add everything except render
-              onRender: undefined,
-            };
-          },
-        );
+        const reply: TemplateFunction[] = this.#mod.templateFunctions.map((templateFunction) => {
+          return {
+            ...migrateTemplateFunctionSelectOptions(templateFunction),
+            // Add everything except render
+            onRender: undefined,
+          };
+        });
         const replyPayload: InternalEventPayload = {
-          type: 'get_template_function_summary_response',
+          type: 'get_template_functions_response',
           pluginRefId: this.#workerData.pluginRefId,
-          functions,
+          functions: reply,
         };
-        this.#sendPayload(context, replyPayload, replyId);
-        return;
-      }
-
-      if (
-        payload.type === 'get_template_function_config_request' &&
-        Array.isArray(this.#mod?.templateFunctions)
-      ) {
-        let templateFunction = this.#mod.templateFunctions.find((f) => f.name === payload.name);
-        if (templateFunction == null) {
-          this.#sendEmpty(context, replyId);
-          return;
-        }
-
-        const fn = {
-          ...migrateTemplateFunctionSelectOptions(templateFunction),
-          onRender: undefined,
-        };
-
-        payload.values = applyFormInputDefaults(fn.args, payload.values);
-        const p = { ...payload, purpose: 'preview' } as const;
-        const resolvedArgs = await applyDynamicFormInput(ctx, fn.args, p);
-
-        const replyPayload: InternalEventPayload = {
-          type: 'get_template_function_config_response',
-          pluginRefId: this.#workerData.pluginRefId,
-          function: { ...fn, args: resolvedArgs },
-        };
-        this.#sendPayload(context, replyPayload, replyId);
+        this.#sendPayload(windowContext, replyPayload, replyId);
         return;
       }
 
       if (payload.type === 'get_http_authentication_summary_request' && this.#mod?.authentication) {
+        const { name, shortLabel, label } = this.#mod.authentication;
         const replyPayload: InternalEventPayload = {
           type: 'get_http_authentication_summary_response',
-          ...this.#mod.authentication,
+          name,
+          label,
+          shortLabel,
         };
 
-        this.#sendPayload(context, replyPayload, replyId);
+        this.#sendPayload(windowContext, replyPayload, replyId);
         return;
       }
 
       if (payload.type === 'get_http_authentication_config_request' && this.#mod?.authentication) {
         const { args, actions } = this.#mod.authentication;
-        payload.values = applyFormInputDefaults(args, payload.values);
-        const resolvedArgs = await applyDynamicFormInput(ctx, args, payload);
+        const resolvedArgs: FormInput[] = [];
+        for (let i = 0; i < args.length; i++) {
+          let v = args[i];
+          if ('dynamic' in v) {
+            const dynamicAttrs = await v.dynamic(ctx, payload);
+            const { dynamic, ...other } = v;
+            resolvedArgs.push({ ...other, ...dynamicAttrs } as FormInput);
+          } else {
+            resolvedArgs.push(v);
+          }
+        }
         const resolvedActions: HttpAuthenticationAction[] = [];
         for (const { onSelect, ...action } of actions ?? []) {
           resolvedActions.push(action);
@@ -308,20 +212,20 @@ export class PluginInstance {
           pluginRefId: this.#workerData.pluginRefId,
         };
 
-        this.#sendPayload(context, replyPayload, replyId);
+        this.#sendPayload(windowContext, replyPayload, replyId);
         return;
       }
 
       if (payload.type === 'call_http_authentication_request' && this.#mod?.authentication) {
         const auth = this.#mod.authentication;
         if (typeof auth?.onApply === 'function') {
-          auth.args = await applyDynamicFormInput(ctx, auth.args, payload);
-          payload.values = applyFormInputDefaults(auth.args, payload.values);
+          applyFormInputDefaults(auth.args, payload.values);
+          const result = await auth.onApply(ctx, payload);
           this.#sendPayload(
-            context,
+            windowContext,
             {
               type: 'call_http_authentication_response',
-              ...(await auth.onApply(ctx, payload)),
+              setHeaders: result.setHeaders,
             },
             replyId,
           );
@@ -336,7 +240,7 @@ export class PluginInstance {
         const action = this.#mod.authentication.actions?.[payload.index];
         if (typeof action?.onSelect === 'function') {
           await action.onSelect(ctx, payload.args);
-          this.#sendEmpty(context, replyId);
+          this.#sendEmpty(windowContext, replyId);
           return;
         }
       }
@@ -348,55 +252,7 @@ export class PluginInstance {
         const action = this.#mod.httpRequestActions[payload.index];
         if (typeof action?.onSelect === 'function') {
           await action.onSelect(ctx, payload.args);
-          this.#sendEmpty(context, replyId);
-          return;
-        }
-      }
-
-      if (
-        payload.type === 'call_websocket_request_action_request' &&
-        Array.isArray(this.#mod.websocketRequestActions)
-      ) {
-        const action = this.#mod.websocketRequestActions[payload.index];
-        if (typeof action?.onSelect === 'function') {
-          await action.onSelect(ctx, payload.args);
-          this.#sendEmpty(context, replyId);
-          return;
-        }
-      }
-
-      if (
-        payload.type === 'call_workspace_action_request' &&
-        Array.isArray(this.#mod.workspaceActions)
-      ) {
-        const action = this.#mod.workspaceActions[payload.index];
-        if (typeof action?.onSelect === 'function') {
-          await action.onSelect(ctx, payload.args);
-          this.#sendEmpty(context, replyId);
-          return;
-        }
-      }
-
-      if (
-        payload.type === 'call_folder_action_request' &&
-        Array.isArray(this.#mod.folderActions)
-      ) {
-        const action = this.#mod.folderActions[payload.index];
-        if (typeof action?.onSelect === 'function') {
-          await action.onSelect(ctx, payload.args);
-          this.#sendEmpty(context, replyId);
-          return;
-        }
-      }
-
-      if (
-        payload.type === 'call_grpc_request_action_request' &&
-        Array.isArray(this.#mod.grpcRequestActions)
-      ) {
-        const action = this.#mod.grpcRequestActions[payload.index];
-        if (typeof action?.onSelect === 'function') {
-          await action.onSelect(ctx, payload.args);
-          this.#sendEmpty(context, replyId);
+          this.#sendEmpty(windowContext, replyId);
           return;
         }
       }
@@ -406,63 +262,39 @@ export class PluginInstance {
         Array.isArray(this.#mod?.templateFunctions)
       ) {
         const fn = this.#mod.templateFunctions.find((a) => a.name === payload.name);
-        if (
-          payload.args.purpose === 'preview' &&
-          (fn?.previewType === 'click' || fn?.previewType === 'none')
-        ) {
-          // Send empty render response
+        if (typeof fn?.onRender === 'function') {
+          applyFormInputDefaults(fn.args, payload.args.values);
+          const result = await fn.onRender(ctx, payload.args);
           this.#sendPayload(
-            context,
+            windowContext,
             {
               type: 'call_template_function_response',
-              value: null,
-              error: 'Live preview disabled for this function',
+              value: result ?? null,
             },
             replyId,
           );
-        } else if (typeof fn?.onRender === 'function') {
-          const resolvedArgs = await applyDynamicFormInput(ctx, fn.args, payload.args);
-          const values = applyFormInputDefaults(resolvedArgs, payload.args.values);
-          const error = validateTemplateFunctionArgs(fn.name, resolvedArgs, values);
-          if (error && payload.args.purpose !== 'preview') {
-            this.#sendPayload(
-              context,
-              { type: 'call_template_function_response', value: null, error },
-              replyId,
-            );
-            return;
-          }
-
-          try {
-            const result = await fn.onRender(ctx, { ...payload.args, values });
-            this.#sendPayload(
-              context,
-              { type: 'call_template_function_response', value: result ?? null },
-              replyId,
-            );
-          } catch (err) {
-            this.#sendPayload(
-              context,
-              {
-                type: 'call_template_function_response',
-                value: null,
-                error: `${err}`.replace(/^Error:\s*/g, ''),
-              },
-              replyId,
-            );
-          }
           return;
         }
       }
+
+      if (payload.type === 'reload_request') {
+        this.#importModule();
+      }
     } catch (err) {
-      const error = `${err}`.replace(/^Error:\s*/g, '');
-      console.log('Plugin call threw exception', payload.type, '→', error);
-      this.#sendPayload(context, { type: 'error_response', error }, replyId);
+      console.log('Plugin call threw exception', payload.type, err);
+      this.#sendPayload(
+        windowContext,
+        {
+          type: 'error_response',
+          error: `${err}`,
+        },
+        replyId,
+      );
       return;
     }
 
     // No matches, so send back an empty response so the caller doesn't block forever
-    this.#sendEmpty(context, replyId);
+    this.#sendEmpty(windowContext, replyId);
   }
 
   #pathMod() {
@@ -485,7 +317,7 @@ export class PluginInstance {
   }
 
   #buildEventToSend(
-    context: PluginContext,
+    windowContext: PluginWindowContext,
     payload: InternalEventPayload,
     replyId: string | null = null,
   ): InternalEvent {
@@ -495,16 +327,16 @@ export class PluginInstance {
       id: genId(),
       replyId,
       payload,
-      context,
+      windowContext,
     };
   }
 
   #sendPayload(
-    context: PluginContext,
+    windowContext: PluginWindowContext,
     payload: InternalEventPayload,
     replyId: string | null,
   ): string {
-    const event = this.#buildEventToSend(context, payload, replyId);
+    const event = this.#buildEventToSend(windowContext, payload, replyId);
     this.#sendEvent(event);
     return event.id;
   }
@@ -516,16 +348,16 @@ export class PluginInstance {
     this.#pluginToAppEvents.emit(event);
   }
 
-  #sendEmpty(context: PluginContext, replyId: string | null = null): string {
-    return this.#sendPayload(context, { type: 'empty_response' }, replyId);
+  #sendEmpty(windowContext: PluginWindowContext, replyId: string | null = null): string {
+    return this.#sendPayload(windowContext, { type: 'empty_response' }, replyId);
   }
 
-  #sendForReply<T extends Omit<InternalEventPayload, 'type'>>(
-    context: PluginContext,
+  #sendAndWaitForReply<T extends Omit<InternalEventPayload, 'type'>>(
+    windowContext: PluginWindowContext,
     payload: InternalEventPayload,
   ): Promise<T> {
     // 1. Build event to send
-    const eventToSend = this.#buildEventToSend(context, payload, null);
+    const eventToSend = this.#buildEventToSend(windowContext, payload, null);
 
     // 2. Spawn listener in background
     const promise = new Promise<T>((resolve) => {
@@ -547,12 +379,12 @@ export class PluginInstance {
   }
 
   #sendAndListenForEvents(
-    context: PluginContext,
+    windowContext: PluginWindowContext,
     payload: InternalEventPayload,
     onEvent: (event: InternalEventPayload) => void,
   ): void {
     // 1. Build event to send
-    const eventToSend = this.#buildEventToSend(context, payload, null);
+    const eventToSend = this.#buildEventToSend(windowContext, payload, null);
 
     // 2. Listen for replies in the background
     this.#appToPluginEvents.listen((event: InternalEvent) => {
@@ -565,23 +397,11 @@ export class PluginInstance {
     this.#sendEvent(eventToSend);
   }
 
-  #newCtx(context: PluginContext): Context {
-    const _windowInfo = async () => {
-      if (context.label == null) {
-        throw new Error("Can't get window context without an active window");
-      }
-      const payload: InternalEventPayload = {
-        type: 'window_info_request',
-        label: context.label,
-      };
-
-      return this.#sendForReply<WindowInfoResponse>(context, payload);
-    };
-
+  #newCtx(event: InternalEvent): Context {
     return {
       clipboard: {
         copyText: async (text) => {
-          await this.#sendForReply(context, {
+          await this.#sendAndWaitForReply(event.windowContext, {
             type: 'copy_text_request',
             text,
           });
@@ -589,24 +409,13 @@ export class PluginInstance {
       },
       toast: {
         show: async (args) => {
-          await this.#sendForReply(context, {
+          await this.#sendAndWaitForReply(event.windowContext, {
             type: 'show_toast_request',
-            // Handle default here because null/undefined both convert to None in Rust translation
-            timeout: args.timeout === undefined ? 5000 : args.timeout,
             ...args,
           });
         },
       },
       window: {
-        requestId: async () => {
-          return (await _windowInfo()).requestId;
-        },
-        async workspaceId(): Promise<string | null> {
-          return (await _windowInfo()).workspaceId;
-        },
-        async environmentId(): Promise<string | null> {
-          return (await _windowInfo()).environmentId;
-        },
         openUrl: async ({ onNavigate, onClose, ...args }) => {
           args.label = args.label || `${Math.random()}`;
           const payload: InternalEventPayload = { type: 'open_window_request', ...args };
@@ -617,21 +426,21 @@ export class PluginInstance {
               onClose?.();
             }
           };
-          this.#sendAndListenForEvents(context, payload, onEvent);
+          this.#sendAndListenForEvents(event.windowContext, payload, onEvent);
           return {
             close: () => {
               const closePayload: InternalEventPayload = {
                 type: 'close_window_request',
                 label: args.label,
               };
-              this.#sendPayload(context, closePayload, null);
+              this.#sendPayload(event.windowContext, closePayload, null);
             },
           };
         },
       },
       prompt: {
         text: async (args) => {
-          const reply: PromptTextResponse = await this.#sendForReply(context, {
+          const reply: PromptTextResponse = await this.#sendAndWaitForReply(event.windowContext, {
             type: 'prompt_text_request',
             ...args,
           });
@@ -644,34 +453,21 @@ export class PluginInstance {
             type: 'find_http_responses_request',
             ...args,
           } as const;
-          const { httpResponses } = await this.#sendForReply<FindHttpResponsesResponse>(
-            context,
+          const { httpResponses } = await this.#sendAndWaitForReply<FindHttpResponsesResponse>(
+            event.windowContext,
             payload,
           );
           return httpResponses;
         },
       },
-      grpcRequest: {
-        render: async (args) => {
-          const payload = {
-            type: 'render_grpc_request_request',
-            ...args,
-          } as const;
-          const { grpcRequest } = await this.#sendForReply<RenderGrpcRequestResponse>(
-            context,
-            payload,
-          );
-          return grpcRequest;
-        },
-      },
       httpRequest: {
         getById: async (args) => {
           const payload = {
             type: 'get_http_request_by_id_request',
             ...args,
           } as const;
-          const { httpRequest } = await this.#sendForReply<GetHttpRequestByIdResponse>(
-            context,
+          const { httpRequest } = await this.#sendAndWaitForReply<GetHttpRequestByIdResponse>(
+            event.windowContext,
             payload,
           );
           return httpRequest;
@@ -681,8 +477,8 @@ export class PluginInstance {
             type: 'send_http_request_request',
             ...args,
           } as const;
-          const { httpResponse } = await this.#sendForReply<SendHttpRequestResponse>(
-            context,
+          const { httpResponse } = await this.#sendAndWaitForReply<SendHttpRequestResponse>(
+            event.windowContext,
             payload,
           );
           return httpResponse;
@@ -692,44 +488,12 @@ export class PluginInstance {
             type: 'render_http_request_request',
             ...args,
           } as const;
-          const { httpRequest } = await this.#sendForReply<RenderHttpRequestResponse>(
-            context,
+          const { httpRequest } = await this.#sendAndWaitForReply<RenderHttpRequestResponse>(
+            event.windowContext,
             payload,
           );
           return httpRequest;
         },
-        list: async (args?: { folderId?: string }) => {
-          const payload = {
-            type: 'list_http_requests_request',
-            folderId: args?.folderId,
-          } as any;
-          const { httpRequests } = await this.#sendForReply<any>(context, payload);
-          return httpRequests as any[];
-        },
-      },
-      folder: {
-        list: async () => {
-          const payload = {
-            type: 'list_folders_request',
-          } as any;
-          const { folders } = await this.#sendForReply<any>(context, payload);
-          return folders as any[];
-        },
-      },
-      cookies: {
-        getValue: async (args: GetCookieValueRequest) => {
-          const payload = {
-            type: 'get_cookie_value_request',
-            ...args,
-          } as const;
-          const { value } = await this.#sendForReply<GetCookieValueResponse>(context, payload);
-          return value;
-        },
-        listNames: async () => {
-          const payload = { type: 'list_cookie_names_request' } as const;
-          const { names } = await this.#sendForReply<ListCookieNamesResponse>(context, payload);
-          return names;
-        },
       },
       templates: {
         /**
@@ -738,14 +502,20 @@ export class PluginInstance {
          */
         render: async (args) => {
           const payload = { type: 'template_render_request', ...args } as const;
-          const result = await this.#sendForReply<TemplateRenderResponse>(context, payload);
-          return result.data as any;
+          const result = await this.#sendAndWaitForReply<TemplateRenderResponse>(
+            event.windowContext,
+            payload,
+          );
+          return result.data;
         },
       },
       store: {
         get: async <T>(key: string) => {
           const payload = { type: 'get_key_value_request', key } as const;
-          const result = await this.#sendForReply<GetKeyValueResponse>(context, payload);
+          const result = await this.#sendAndWaitForReply<GetKeyValueResponse>(
+            event.windowContext,
+            payload,
+          );
           return result.value ? (JSON.parse(result.value) as T) : undefined;
         },
         set: async <T>(key: string, value: T) => {
@@ -755,19 +525,17 @@ export class PluginInstance {
             key,
             value: valueStr,
           };
-          await this.#sendForReply<GetKeyValueResponse>(context, payload);
+          await this.#sendAndWaitForReply<GetKeyValueResponse>(event.windowContext, payload);
         },
         delete: async (key: string) => {
           const payload = { type: 'delete_key_value_request', key } as const;
-          const result = await this.#sendForReply<DeleteKeyValueResponse>(context, payload);
+          const result = await this.#sendAndWaitForReply<DeleteKeyValueResponse>(
+            event.windowContext,
+            payload,
+          );
           return result.deleted;
         },
       },
-      plugin: {
-        reload: () => {
-          this.#sendPayload(context, { type: 'reload_response', silent: true }, null);
-        },
-      },
     };
   }
 }
@@ -781,20 +549,34 @@ function genId(len = 5): string {
   return id;
 }
 
-const watchedFiles: Record<string, Stats | null> = {};
+/** Recursively apply form input defaults to a set of values */
+function applyFormInputDefaults(
+  inputs: TemplateFunctionArg[],
+  values: { [p: string]: JsonPrimitive | undefined },
+) {
+  for (const input of inputs) {
+    if ('inputs' in input) {
+      applyFormInputDefaults(input.inputs ?? [], values);
+    } else if ('defaultValue' in input && values[input.name] === undefined) {
+      values[input.name] = input.defaultValue;
+    }
+  }
+}
+
+const watchedFiles: Record<string, Stats> = {};
 
 /**
- * Watch a file and trigger a callback on change.
+ * Watch a file and trigger callback on change.
  *
  * We also track the stat for each file because fs.watch() will
- * trigger a "change" event when the access date changes.
+ * trigger a "change" event when the access date changes
  */
-function watchFile(filepath: string, cb: () => void) {
+function watchFile(filepath: string, cb: (filepath: string) => void) {
   watch(filepath, () => {
-    const stat = statSync(filepath, { throwIfNoEntry: false });
-    if (stat == null || stat.mtimeMs !== watchedFiles[filepath]?.mtimeMs) {
-      watchedFiles[filepath] = stat ?? null;
-      cb();
+    const stat = statSync(filepath);
+    if (stat.mtimeMs !== watchedFiles[filepath]?.mtimeMs) {
+      cb(filepath);
     }
+    watchedFiles[filepath] = stat;
   });
 }

packages/plugin-runtime/src/common.ts

@@ -1,37 +0,0 @@
-import { CallHttpAuthenticationActionArgs, CallTemplateFunctionArgs } from '@yaakapp-internal/plugins';
-import { Context, DynamicAuthenticationArg, DynamicTemplateFunctionArg } from '@yaakapp/api';
-
-export async function applyDynamicFormInput(
-  ctx: Context,
-  args: DynamicTemplateFunctionArg[],
-  callArgs: CallTemplateFunctionArgs,
-): Promise<DynamicTemplateFunctionArg[]>;
-
-export async function applyDynamicFormInput(
-  ctx: Context,
-  args: DynamicAuthenticationArg[],
-  callArgs: CallHttpAuthenticationActionArgs,
-): Promise<DynamicAuthenticationArg[]>;
-
-export async function applyDynamicFormInput(
-  ctx: Context,
-  args: (DynamicTemplateFunctionArg | DynamicAuthenticationArg)[],
-  callArgs: CallTemplateFunctionArgs | CallHttpAuthenticationActionArgs,
-): Promise<(DynamicTemplateFunctionArg | DynamicAuthenticationArg)[]> {
-  const resolvedArgs: any[] = [];
-  for (const { dynamic, ...arg } of args) {
-    const newArg: any = {
-      ...arg,
-      ...(typeof dynamic === 'function' ? await dynamic(ctx, callArgs as any) : undefined),
-    };
-    if ('inputs' in newArg && Array.isArray(newArg.inputs)) {
-      try {
-        newArg.inputs = await applyDynamicFormInput(ctx, newArg.inputs, callArgs as any);
-      } catch (e) {
-        console.error('Failed to apply dynamic form input', e);
-      }
-    }
-    resolvedArgs.push(newArg);
-  }
-  return resolvedArgs;
-}

packages/plugin-runtime/src/index.ts

@@ -8,15 +8,10 @@ if (!port) {
   throw new Error('Plugin runtime missing PORT')
 }
 
-const host = process.env.HOST;
-if (!host) {
-  throw new Error('Plugin runtime missing HOST')
-}
-
 const pluginToAppEvents = new EventChannel();
 const plugins: Record<string, PluginHandle> = {};
 
-const ws = new WebSocket(`ws://${host}:${port}`);
+const ws = new WebSocket(`ws://localhost:${port}`);
 
 ws.on('message', async (e: Buffer) => {
   try {
@@ -39,7 +34,7 @@ async function handleIncoming(msg: string) {
   const pluginEvent: InternalEvent = JSON.parse(msg);
   // Handle special event to bootstrap plugin
   if (pluginEvent.payload.type === 'boot_request') {
-    const plugin = new PluginHandle(pluginEvent.pluginRefId, pluginEvent.context, pluginEvent.payload, pluginToAppEvents);
+    const plugin = new PluginHandle(pluginEvent.pluginRefId, pluginEvent.payload, pluginToAppEvents);
     plugins[pluginEvent.pluginRefId] = plugin;
   }
 
@@ -51,14 +46,10 @@ async function handleIncoming(msg: string) {
   }
 
   if (pluginEvent.payload.type === 'terminate_request') {
-    await plugin.terminate();
+    plugin.terminate();
     console.log('Terminated plugin worker', pluginEvent.pluginRefId);
     delete plugins[pluginEvent.pluginRefId];
   }
 
   plugin.sendToWorker(pluginEvent);
 }
-
-process.on('unhandledRejection', (reason, promise) => {
-  console.error('Unhandled Rejection at:', promise, 'reason:', reason);
-});

packages/plugin-runtime/src/migrations.ts

@@ -1,8 +1,6 @@
-import type { TemplateFunctionPlugin } from '@yaakapp/api';
+import { TemplateFunction } from '@yaakapp/api';
 
-export function migrateTemplateFunctionSelectOptions(
-  f: TemplateFunctionPlugin,
-): TemplateFunctionPlugin {
+export function migrateTemplateFunctionSelectOptions(f: TemplateFunction): TemplateFunction {
   const migratedArgs = f.args.map((a) => {
     if (a.type === 'select') {
       a.options = a.options.map((o) => ({
@@ -13,5 +11,8 @@ export function migrateTemplateFunctionSelectOptions(
     return a;
   });
 
-  return { ...f, args: migratedArgs };
+  return {
+    ...f,
+    args: migratedArgs,
+  };
 }

packages/plugin-runtime/tests/common.test.ts

@@ -1,150 +0,0 @@
-import { CallTemplateFunctionArgs } from '@yaakapp-internal/plugins';
-import { Context, DynamicTemplateFunctionArg } from '@yaakapp/api';
-import { describe, expect, test } from 'vitest';
-import { applyDynamicFormInput, applyFormInputDefaults } from '../src/common';
-
-describe('applyFormInputDefaults', () => {
-  test('Works with top-level select', () => {
-    const args: DynamicTemplateFunctionArg[] = [
-      {
-        type: 'select',
-        name: 'test',
-        options: [{ label: 'Option 1', value: 'one' }],
-        defaultValue: 'one',
-      },
-    ];
-    expect(applyFormInputDefaults(args, {})).toEqual({
-      test: 'one',
-    });
-  });
-
-  test('Works with existing value', () => {
-    const args: DynamicTemplateFunctionArg[] = [
-      {
-        type: 'select',
-        name: 'test',
-        options: [{ label: 'Option 1', value: 'one' }],
-        defaultValue: 'one',
-      },
-    ];
-    expect(applyFormInputDefaults(args, { test: 'explicit' })).toEqual({
-      test: 'explicit',
-    });
-  });
-
-  test('Works with recursive select', () => {
-    const args: DynamicTemplateFunctionArg[] = [
-      { type: 'text', name: 'dummy', defaultValue: 'top' },
-      {
-        type: 'accordion',
-        label: 'Test',
-        inputs: [
-          { type: 'text', name: 'name', defaultValue: 'hello' },
-          {
-            type: 'select',
-            name: 'test',
-            options: [{ label: 'Option 1', value: 'one' }],
-            defaultValue: 'one',
-          },
-        ],
-      },
-    ];
-    expect(applyFormInputDefaults(args, {})).toEqual({
-      dummy: 'top',
-      test: 'one',
-      name: 'hello',
-    });
-  });
-
-  test('Works with dynamic options', () => {
-    const args: DynamicTemplateFunctionArg[] = [
-      {
-        type: 'select',
-        name: 'test',
-        defaultValue: 'one',
-        options: [],
-        dynamic() {
-          return { options: [{ label: 'Option 1', value: 'one' }] };
-        },
-      },
-    ];
-    expect(applyFormInputDefaults(args, {})).toEqual({
-      test: 'one',
-    });
-    expect(applyFormInputDefaults(args, {})).toEqual({
-      test: 'one',
-    });
-  });
-});
-
-describe('applyDynamicFormInput', () => {
-  test('Works with plain input', async () => {
-    const ctx = {} as Context;
-    const args: DynamicTemplateFunctionArg[] = [
-      { type: 'text', name: 'name' },
-      { type: 'checkbox', name: 'checked' },
-    ];
-    const callArgs: CallTemplateFunctionArgs = {
-      values: {},
-      purpose: 'preview',
-    };
-    expect(await applyDynamicFormInput(ctx, args, callArgs)).toEqual([
-      { type: 'text', name: 'name' },
-      { type: 'checkbox', name: 'checked' },
-    ]);
-  });
-
-  test('Works with dynamic input', async () => {
-    const ctx = {} as Context;
-    const args: DynamicTemplateFunctionArg[] = [
-      {
-        type: 'text',
-        name: 'name',
-        async dynamic(_ctx, _args) {
-          return { hidden: true };
-        },
-      },
-    ];
-    const callArgs: CallTemplateFunctionArgs = {
-      values: {},
-      purpose: 'preview',
-    };
-    expect(await applyDynamicFormInput(ctx, args, callArgs)).toEqual([
-      { type: 'text', name: 'name', hidden: true },
-    ]);
-  });
-
-  test('Works with recursive dynamic input', async () => {
-    const ctx = {} as Context;
-    const callArgs: CallTemplateFunctionArgs = {
-      values: { hello: 'world' },
-      purpose: 'preview',
-    };
-    const args: DynamicTemplateFunctionArg[] = [
-      {
-        type: 'banner',
-        inputs: [
-          {
-            type: 'text',
-            name: 'name',
-            async dynamic(_ctx, args) {
-              return { hidden: args.values.hello === 'world' };
-            },
-          },
-        ],
-      },
-    ];
-    expect(await applyDynamicFormInput(ctx, args, callArgs)).toEqual([
-      {
-        type: 'banner',
-        inputs: [
-          {
-            type: 'text',
-            name: 'name',
-            hidden: true,
-          },
-        ],
-      },
-    ]);
-  });
-});

plugins/.gitignore

@@ -1 +0,0 @@
-*/build

plugins/action-copy-curl/README.md

@@ -1,68 +0,0 @@
-# Copy as cUrl
-
-A request action plugin for Yaak that converts HTTP requests into [curl](https://curl.se)
-commands, making it easy to share, debug, and execute requests outside Yaak.
-
-![Screenshot of context menu](screenshot.png)
-
-## Overview
-
-This plugin adds a 'Copy as Curl' action to HTTP requests, converting any request into its
-equivalent curl command. This is useful for debugging, sharing requests with team members,
-and executing requests in terminal environments where `curl` is available.
-
-## How It Works
-
-The plugin analyzes the given HTTP request and generates a properly formatted curl command
-that includes:
-
-- HTTP method (GET, POST, PUT, DELETE, etc.)
-- Request URL with query parameters
-- Headers (including authentication headers)
-- Request body (for POST, PUT, PATCH requests)
-- Authentication credentials
-
-## Usage
-
-1. Configure an HTTP request as usual in Yaak
-2. Right-click on the request in the sidebar
-3. Select 'Copy as Curl'
-4. The command is copied to your clipboard
-5. Share or execute the command
-
-## Generated Curl Examples
-
-### Simple GET Request
-
-```bash
-curl -X GET 'https://api.example.com/users' \
-  --header 'Accept: application/json'
-```
-
-### POST Request with JSON Data
-
-```bash
-curl -X POST 'https://api.example.com/users' \
-  --header 'Content-Type: application/json' \
-  --header 'Accept: application/json' \
-  --data '{
-    "name": "John Doe",
-    "email": "john@example.com"
-  }'
-```
-
-### Request with Multi-part Form Data
-
-```bash
-curl -X POST 'yaak.app' \
-  --header 'Content-Type: multipart/form-data' \
-  --form 'hello=world' \
-  --form file=@/path/to/file.json
-```
-
-### Request with Authentication
-
-```bash
-curl -X GET 'https://api.example.com/protected' \
-  --user 'username:password'
-```

plugins/action-copy-curl/package.json

@@ -1,17 +0,0 @@
-{
-  "name": "@yaak/action-copy-curl",
-  "displayName": "Copy as Curl",
-  "description": "Copy request as a curl command",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/mountain-loop/yaak.git",
-    "directory": "plugins/action-copy-curl"
-  },
-  "private": true,
-  "version": "0.1.0",
-  "scripts": {
-    "build": "yaakcli build",
-    "dev": "yaakcli dev",
-    "test": "vitest --run tests"
-  }
-}

plugins/action-copy-curl/src/index.ts

@@ -1,173 +0,0 @@
-import type { HttpRequest, PluginDefinition } from '@yaakapp/api';
-
-const NEWLINE = '\\\n ';
-
-export const plugin: PluginDefinition = {
-  httpRequestActions: [
-    {
-      label: 'Copy as Curl',
-      icon: 'copy',
-      async onSelect(ctx, args) {
-        const rendered_request = await ctx.httpRequest.render({
-          httpRequest: args.httpRequest,
-          purpose: 'preview',
-        });
-        const data = await convertToCurl(rendered_request);
-        await ctx.clipboard.copyText(data);
-        await ctx.toast.show({
-          message: 'Command copied to clipboard',
-          icon: 'copy',
-          color: 'success',
-        });
-      },
-    },
-  ],
-};
-
-export async function convertToCurl(request: Partial<HttpRequest>) {
-  const xs = ['curl'];
-
-  // Add method and URL all on first line
-  if (request.method) xs.push('-X', request.method);
-
-  // Build final URL with parameters (compatible with old curl)
-  let finalUrl = request.url || '';
-  const urlParams = (request.urlParameters ?? []).filter(onlyEnabled);
-  if (urlParams.length > 0) {
-    // Build url
-    const [base, hash] = finalUrl.split('#');
-    const separator = base?.includes('?') ? '&' : '?';
-    const queryString = urlParams
-      .map((p) => `${encodeURIComponent(p.name)}=${encodeURIComponent(p.value)}`)
-      .join('&');
-    finalUrl = base + separator + queryString + (hash ? `#${hash}` : '');
-  }
-
-  // Add API key authentication
-  if (request.authenticationType === 'apikey') {
-    if (request.authentication?.location === 'query') {
-      const sep = finalUrl.includes('?') ? '&' : '?';
-      finalUrl = [
-        finalUrl,
-        sep,
-        encodeURIComponent(request.authentication?.key ?? 'token'),
-        '=',
-        encodeURIComponent(request.authentication?.value ?? ''),
-      ].join('');
-    } else {
-      request.headers = request.headers ?? [];
-      request.headers.push({
-        name: request.authentication?.key ?? 'X-Api-Key',
-        value: request.authentication?.value ?? '',
-      });
-    }
-  }
-
-  xs.push(quote(finalUrl));
-  xs.push(NEWLINE);
-
-  // Add headers
-  for (const h of (request.headers ?? []).filter(onlyEnabled)) {
-    xs.push('--header', quote(`${h.name}: ${h.value}`));
-    xs.push(NEWLINE);
-  }
-
-  // Add form params
-  const type = request.bodyType ?? 'none';
-  if (
-    (type === 'multipart/form-data' || type === 'application/x-www-form-urlencoded') &&
-    Array.isArray(request.body?.form)
-  ) {
-    const flag = request.bodyType === 'multipart/form-data' ? '--form' : '--data';
-    for (const p of (request.body?.form ?? []).filter(onlyEnabled)) {
-      if (p.file) {
-        let v = `${p.name}=@${p.file}`;
-        v += p.contentType ? `;type=${p.contentType}` : '';
-        xs.push(flag, v);
-      } else {
-        xs.push(flag, quote(`${p.name}=${p.value}`));
-      }
-      xs.push(NEWLINE);
-    }
-  } else if (type === 'graphql' && typeof request.body?.query === 'string') {
-    const body = {
-      query: request.body.query || '',
-      variables: maybeParseJSON(request.body.variables, undefined),
-    };
-    xs.push('--data', quote(JSON.stringify(body)));
-    xs.push(NEWLINE);
-  } else if (type !== 'none' && typeof request.body?.text === 'string') {
-    xs.push('--data', quote(request.body.text));
-    xs.push(NEWLINE);
-  }
-
-  // Add basic/digest authentication
-  if (request.authentication?.disabled !== true) {
-    if (request.authenticationType === 'basic' || request.authenticationType === 'digest') {
-      if (request.authenticationType === 'digest') xs.push('--digest');
-      xs.push(
-        '--user',
-        quote(
-          `${request.authentication?.username ?? ''}:${request.authentication?.password ?? ''}`,
-        ),
-      );
-      xs.push(NEWLINE);
-    }
-
-    // Add bearer authentication
-    if (request.authenticationType === 'bearer') {
-      const value =
-        `${request.authentication?.prefix ?? 'Bearer'} ${request.authentication?.token ?? ''}`.trim();
-      xs.push('--header', quote(`Authorization: ${value}`));
-      xs.push(NEWLINE);
-    }
-
-    if (request.authenticationType === 'auth-aws-sig-v4') {
-      xs.push(
-        '--aws-sigv4',
-        [
-          'aws',
-          'amz',
-          request.authentication?.region ?? '',
-          request.authentication?.service ?? '',
-        ].join(':'),
-      );
-      xs.push(NEWLINE);
-      xs.push(
-        '--user',
-        quote(
-          `${request.authentication?.accessKeyId ?? ''}:${request.authentication?.secretAccessKey ?? ''}`,
-        ),
-      );
-      if (request.authentication?.sessionToken) {
-        xs.push(NEWLINE);
-        xs.push('--header', quote(`X-Amz-Security-Token: ${request.authentication.sessionToken}`));
-      }
-      xs.push(NEWLINE);
-    }
-  }
-
-  // Remove trailing newline
-  if (xs[xs.length - 1] === NEWLINE) {
-    xs.splice(xs.length - 1, 1);
-  }
-
-  return xs.join(' ');
-}
-
-function quote(arg: string): string {
-  const escaped = arg.replace(/'/g, "\\'");
-  return `'${escaped}'`;
-}
-
-function onlyEnabled(v: { name?: string; enabled?: boolean }): boolean {
-  return v.enabled !== false && !!v.name;
-}
-
-function maybeParseJSON<T>(v: string, fallback: T) {
-  try {
-    return JSON.parse(v);
-  } catch {
-    return fallback;
-  }
-}

plugins/action-copy-curl/tests/index.test.ts

@@ -1,414 +0,0 @@
-import { describe, expect, test } from 'vitest';
-import { convertToCurl } from '../src';
-
-describe('exporter-curl', () => {
-  test('Exports GET with params', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        urlParameters: [
-          { name: 'a', value: 'aaa' },
-          { name: 'b', value: 'bbb', enabled: true },
-          { name: 'c', value: 'ccc', enabled: false },
-        ],
-      }),
-    ).toEqual([`curl 'https://yaak.app?a=aaa&b=bbb'`].join(' \\n  '));
-  });
-
-  test('Exports GET with params and hash', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app/path#section',
-        urlParameters: [
-          { name: 'a', value: 'aaa' },
-          { name: 'b', value: 'bbb', enabled: true },
-          { name: 'c', value: 'ccc', enabled: false },
-        ],
-      }),
-    ).toEqual([`curl 'https://yaak.app/path?a=aaa&b=bbb#section'`].join(' \\n  '));
-  });
-
-  test('Exports POST with url form data', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        method: 'POST',
-        bodyType: 'application/x-www-form-urlencoded',
-        body: {
-          form: [
-            { name: 'a', value: 'aaa' },
-            { name: 'b', value: 'bbb', enabled: true },
-            { name: 'c', value: 'ccc', enabled: false },
-          ],
-        },
-      }),
-    ).toEqual(
-      [`curl -X POST 'https://yaak.app'`, `--data 'a=aaa'`, `--data 'b=bbb'`].join(' \\\n  '),
-    );
-  });
-
-  test('Exports POST with GraphQL data', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        method: 'POST',
-        bodyType: 'graphql',
-        body: {
-          query: '{foo,bar}',
-          variables: '{"a": "aaa", "b": "bbb"}',
-        },
-      }),
-    ).toEqual(
-      [
-        `curl -X POST 'https://yaak.app'`,
-        `--data '{"query":"{foo,bar}","variables":{"a":"aaa","b":"bbb"}}'`,
-      ].join(' \\\n  '),
-    );
-  });
-
-  test('Exports POST with GraphQL data no variables', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        method: 'POST',
-        bodyType: 'graphql',
-        body: {
-          query: '{foo,bar}',
-        },
-      }),
-    ).toEqual(
-      [`curl -X POST 'https://yaak.app'`, `--data '{"query":"{foo,bar}"}'`].join(' \\\n  '),
-    );
-  });
-
-  test('Exports PUT with multipart form', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        method: 'PUT',
-        bodyType: 'multipart/form-data',
-        body: {
-          form: [
-            { name: 'a', value: 'aaa' },
-            { name: 'b', value: 'bbb', enabled: true },
-            { name: 'c', value: 'ccc', enabled: false },
-            { name: 'f', file: '/foo/bar.png', contentType: 'image/png' },
-          ],
-        },
-      }),
-    ).toEqual(
-      [
-        `curl -X PUT 'https://yaak.app'`,
-        `--form 'a=aaa'`,
-        `--form 'b=bbb'`,
-        '--form f=@/foo/bar.png;type=image/png',
-      ].join(' \\\n  '),
-    );
-  });
-
-  test('Exports JSON body', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        method: 'POST',
-        bodyType: 'application/json',
-        body: {
-          text: `{"foo":"bar's"}`,
-        },
-        headers: [{ name: 'Content-Type', value: 'application/json' }],
-      }),
-    ).toEqual(
-      [
-        `curl -X POST 'https://yaak.app'`,
-        `--header 'Content-Type: application/json'`,
-        `--data '{"foo":"bar\\'s"}'`,
-      ].join(' \\\n  '),
-    );
-  });
-
-  test('Exports multi-line JSON body', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        method: 'POST',
-        bodyType: 'application/json',
-        body: {
-          text: `{"foo":"bar",\n"baz":"qux"}`,
-        },
-        headers: [{ name: 'Content-Type', value: 'application/json' }],
-      }),
-    ).toEqual(
-      [
-        `curl -X POST 'https://yaak.app'`,
-        `--header 'Content-Type: application/json'`,
-        `--data '{"foo":"bar",\n"baz":"qux"}'`,
-      ].join(' \\\n  '),
-    );
-  });
-
-  test('Exports headers', async () => {
-    expect(
-      await convertToCurl({
-        headers: [
-          { name: 'a', value: 'aaa' },
-          { name: 'b', value: 'bbb', enabled: true },
-          { name: 'c', value: 'ccc', enabled: false },
-        ],
-      }),
-    ).toEqual([`curl ''`, `--header 'a: aaa'`, `--header 'b: bbb'`].join(' \\\n  '));
-  });
-
-  test('Basic auth', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        authenticationType: 'basic',
-        authentication: {
-          username: 'user',
-          password: 'pass',
-        },
-      }),
-    ).toEqual([`curl 'https://yaak.app'`, `--user 'user:pass'`].join(' \\\n  '));
-  });
-
-  test('Basic auth disabled', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        authenticationType: 'basic',
-        authentication: {
-          disabled: true,
-          username: 'user',
-          password: 'pass',
-        },
-      }),
-    ).toEqual([`curl 'https://yaak.app'`].join(' \\\n  '));
-  });
-
-  test('Broken basic auth', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        authenticationType: 'basic',
-        authentication: {},
-      }),
-    ).toEqual([`curl 'https://yaak.app'`, `--user ':'`].join(' \\\n  '));
-  });
-
-  test('Digest auth', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        authenticationType: 'digest',
-        authentication: {
-          username: 'user',
-          password: 'pass',
-        },
-      }),
-    ).toEqual([`curl 'https://yaak.app'`, `--digest --user 'user:pass'`].join(' \\\n  '));
-  });
-
-  test('Bearer auth', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        authenticationType: 'bearer',
-        authentication: {
-          token: 'tok',
-        },
-      }),
-    ).toEqual([`curl 'https://yaak.app'`, `--header 'Authorization: Bearer tok'`].join(' \\\n  '));
-  });
-
-  test('Bearer auth with custom prefix', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        authenticationType: 'bearer',
-        authentication: {
-          token: 'abc123',
-          prefix: 'Token',
-        },
-      }),
-    ).toEqual(
-      [`curl 'https://yaak.app'`, `--header 'Authorization: Token abc123'`].join(' \\\n  '),
-    );
-  });
-
-  test('Bearer auth with empty prefix', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        authenticationType: 'bearer',
-        authentication: {
-          token: 'xyz789',
-          prefix: '',
-        },
-      }),
-    ).toEqual([`curl 'https://yaak.app'`, `--header 'Authorization: xyz789'`].join(' \\\n  '));
-  });
-
-  test('Broken bearer auth', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        authenticationType: 'bearer',
-        authentication: {
-          username: 'user',
-          password: 'pass',
-        },
-      }),
-    ).toEqual([`curl 'https://yaak.app'`, `--header 'Authorization: Bearer'`].join(' \\\n  '));
-  });
-
-  test('AWS v4 auth', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        authenticationType: 'auth-aws-sig-v4',
-        authentication: {
-          accessKeyId: 'ak',
-          secretAccessKey: 'sk',
-          sessionToken: '',
-          region: 'us-east-1',
-          service: 's3',
-        },
-      }),
-    ).toEqual(
-      [`curl 'https://yaak.app'`, '--aws-sigv4 aws:amz:us-east-1:s3', `--user 'ak:sk'`].join(
-        ' \\\n  ',
-      ),
-    );
-  });
-
-  test('AWS v4 auth with session', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        authenticationType: 'auth-aws-sig-v4',
-        authentication: {
-          accessKeyId: 'ak',
-          secretAccessKey: 'sk',
-          sessionToken: 'st',
-          region: 'us-east-1',
-          service: 's3',
-        },
-      }),
-    ).toEqual(
-      [
-        `curl 'https://yaak.app'`,
-        '--aws-sigv4 aws:amz:us-east-1:s3',
-        `--user 'ak:sk'`,
-        `--header 'X-Amz-Security-Token: st'`,
-      ].join(' \\\n  '),
-    );
-  });
-
-  test('API key auth header', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        authenticationType: 'apikey',
-        authentication: {
-          location: 'header',
-          key: 'X-Header',
-          value: 'my-token',
-        },
-      }),
-    ).toEqual([`curl 'https://yaak.app'`, `--header 'X-Header: my-token'`].join(' \\\n  '));
-  });
-
-  test('API key auth header query', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app?hi=there',
-        urlParameters: [{ name: 'param', value: 'hi' }],
-        authenticationType: 'apikey',
-        authentication: {
-          location: 'query',
-          key: 'foo',
-          value: 'bar',
-        },
-      }),
-    ).toEqual([`curl 'https://yaak.app?hi=there&param=hi&foo=bar'`].join(' \\\n  '));
-  });
-
-  test('API key auth header query with params', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        urlParameters: [{ name: 'param', value: 'hi' }],
-        authenticationType: 'apikey',
-        authentication: {
-          location: 'query',
-          key: 'foo',
-          value: 'bar',
-        },
-      }),
-    ).toEqual([`curl 'https://yaak.app?param=hi&foo=bar'`].join(' \\\n  '));
-  });
-
-  test('API key auth header default', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        authenticationType: 'apikey',
-        authentication: {
-          location: 'header',
-        },
-      }),
-    ).toEqual([`curl 'https://yaak.app'`, `--header 'X-Api-Key: '`].join(' \\\n  '));
-  });
-
-  test('API key auth query', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        authenticationType: 'apikey',
-        authentication: {
-          location: 'query',
-          key: 'foo',
-          value: 'bar-baz',
-        },
-      }),
-    ).toEqual([`curl 'https://yaak.app?foo=bar-baz'`].join(' \\\n  '));
-  });
-
-  test('API key auth query with existing', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app?foo=bar&baz=qux',
-        authenticationType: 'apikey',
-        authentication: {
-          location: 'query',
-          key: 'hi',
-          value: 'there',
-        },
-      }),
-    ).toEqual([`curl 'https://yaak.app?foo=bar&baz=qux&hi=there'`].join(' \\\n  '));
-  });
-
-  test('API key auth query default', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app?foo=bar&baz=qux',
-        authenticationType: 'apikey',
-        authentication: {
-          location: 'query',
-        },
-      }),
-    ).toEqual([`curl 'https://yaak.app?foo=bar&baz=qux&token='`].join(' \\\n  '));
-  });
-
-  test('Stale body data', async () => {
-    expect(
-      await convertToCurl({
-        url: 'https://yaak.app',
-        bodyType: 'none',
-        body: {
-          text: 'ignore me',
-        },
-      }),
-    ).toEqual([`curl 'https://yaak.app'`].join(' \\\n  '));
-  });
-});

plugins/action-copy-curl/tsconfig.json

@@ -1,3 +0,0 @@
-{
-  "extends": "../../tsconfig.json"
-}

plugins/action-copy-grpcurl/README.md

@@ -1,76 +0,0 @@
-# Copy as gRPCurl
-
-An HTTP request action plugin that converts gRPC requests
-into [gRPCurl](https://github.com/fullstorydev/grpcurl) commands, enabling easy sharing,
-debugging, and execution of gRPC calls outside Yaak.
-
-![Screenshot of context menu](screenshot.png)
-
-## Overview
-
-This plugin adds a "Copy as gRPCurl" action to gRPC requests, converting any gRPC request
-into its equivalent executable command. This is useful for debugging gRPC services,
-sharing requests with team members, or executing gRPC calls in terminal environments where
-`grpcurl` is available.
-
-## How It Works
-
-The plugin analyzes your gRPC request configuration and generates a properly formatted
-`grpcurl` command that includes:
-
-- gRPC service and method names
-- Server address and port
-- Request message data (JSON format)
-- Metadata (headers)
-- Authentication credentials
-- Protocol buffer definitions
-
-## Usage
-
-1. Configure a gRPC request as usual in Yaak
-2. Right-click on the request sidebar item
-3. Select "Copy as gRPCurl" from the available actions
-4. The command is copied to your clipboard
-5. Share or execute the command
-
-## Generated gRPCurl Examples
-
-### Simple Unary Call
-
-
-```bash
-grpcurl -plaintext \
-  -d '{"name": "John Doe"}' \
-  localhost:9090 \
-  user.UserService/GetUser
-```
-
-### Call with Metadata
-
-```bash
-grpcurl -plaintext \
-  -H "authorization: Bearer my-token" \
-  -H "x-api-version: v1" \
-  -d '{"user_id": "12345"}' \
-  api.example.com:443 \
-  user.UserService/GetUserProfile
-```
-
-### Call with TLS
-
-```bash
-grpcurl \
-  -d '{"query": "search term"}' \
-  secure-api.example.com:443 \
-  search.SearchService/Search
-```
-
-### Call with Proto Files
-
-```bash
-grpcurl -import-path /path/to/protos \
-  -proto /other/path/to/user.proto \
-  -d '{"email": "user@example.com"}' \
-  localhost:9090 \
-  user.UserService/CreateUser
-```

plugins/action-copy-grpcurl/package.json

@@ -1,17 +0,0 @@
-{
-  "name": "@yaak/action-copy-grpcurl",
-  "displayName": "Copy as gRPCurl",
-  "description": "Copy gRPC request as a grpcurl command",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/mountain-loop/yaak.git",
-    "directory": "plugins/action-copy-grpcurl"
-  },
-  "private": true,
-  "version": "0.1.0",
-  "scripts": {
-    "build": "yaakcli build",
-    "dev": "yaakcli dev",
-    "test": "vitest --run tests"
-  }
-}

plugins/action-copy-grpcurl/src/index.ts

@@ -1,155 +0,0 @@
-import path from 'node:path';
-import type { GrpcRequest, PluginDefinition } from '@yaakapp/api';
-
-const NEWLINE = '\\\n ';
-
-export const plugin: PluginDefinition = {
-  grpcRequestActions: [
-    {
-      label: 'Copy as gRPCurl',
-      icon: 'copy',
-      async onSelect(ctx, args) {
-        const rendered_request = await ctx.grpcRequest.render({
-          grpcRequest: args.grpcRequest,
-          purpose: 'preview',
-        });
-        const data = await convert(rendered_request, args.protoFiles);
-        await ctx.clipboard.copyText(data);
-        await ctx.toast.show({
-          message: 'Command copied to clipboard',
-          icon: 'copy',
-          color: 'success',
-        });
-      },
-    },
-  ],
-};
-
-export async function convert(request: Partial<GrpcRequest>, allProtoFiles: string[]) {
-  const xs = ['grpcurl'];
-
-  if (request.url?.startsWith('http://')) {
-    xs.push('-plaintext');
-  }
-
-  const protoIncludes = allProtoFiles.filter((f) => !f.endsWith('.proto'));
-  const protoFiles = allProtoFiles.filter((f) => f.endsWith('.proto'));
-
-  const inferredIncludes = new Set<string>();
-  for (const f of protoFiles) {
-    const protoDir = findParentProtoDir(f);
-    if (protoDir) {
-      inferredIncludes.add(protoDir);
-    } else {
-      inferredIncludes.add(path.posix.join(f, '..'));
-      inferredIncludes.add(path.posix.join(f, '..', '..'));
-    }
-  }
-
-  for (const f of protoIncludes) {
-    xs.push('-import-path', quote(f));
-    xs.push(NEWLINE);
-  }
-
-  for (const f of inferredIncludes.values()) {
-    xs.push('-import-path', quote(f));
-    xs.push(NEWLINE);
-  }
-
-  for (const f of protoFiles) {
-    xs.push('-proto', quote(f));
-    xs.push(NEWLINE);
-  }
-
-  // Add headers
-  for (const h of (request.metadata ?? []).filter(onlyEnabled)) {
-    xs.push('-H', quote(`${h.name}: ${h.value}`));
-    xs.push(NEWLINE);
-  }
-
-  // Add basic authentication
-  if (request.authentication?.disabled !== true) {
-    if (request.authenticationType === 'basic') {
-      const user = request.authentication?.username ?? '';
-      const pass = request.authentication?.password ?? '';
-      const encoded = btoa(`${user}:${pass}`);
-      xs.push('-H', quote(`Authorization: Basic ${encoded}`));
-      xs.push(NEWLINE);
-    } else if (request.authenticationType === 'bearer') {
-      // Add bearer authentication
-      xs.push('-H', quote(`Authorization: Bearer ${request.authentication?.token ?? ''}`));
-      xs.push(NEWLINE);
-    } else if (request.authenticationType === 'apikey') {
-      if (request.authentication?.location === 'query') {
-        const sep = request.url?.includes('?') ? '&' : '?';
-        request.url = [
-          request.url,
-          sep,
-          encodeURIComponent(request.authentication?.key ?? 'token'),
-          '=',
-          encodeURIComponent(request.authentication?.value ?? ''),
-        ].join('');
-      } else {
-        xs.push(
-          '-H',
-          quote(
-            `${request.authentication?.key ?? 'X-Api-Key'}: ${request.authentication?.value ?? ''}`,
-          ),
-        );
-      }
-      xs.push(NEWLINE);
-    }
-  }
-
-  // Add form params
-  if (request.message) {
-    xs.push('-d', `${quote(JSON.stringify(JSON.parse(request.message)))}`);
-    xs.push(NEWLINE);
-  }
-
-  // Add the server address
-  if (request.url) {
-    const server = request.url.replace(/^https?:\/\//, ''); // remove protocol
-    xs.push(server);
-    xs.push(NEWLINE);
-  }
-
-  // Add service + method
-  if (request.service && request.method) {
-    xs.push(`${request.service}/${request.method}`);
-    xs.push(NEWLINE);
-  }
-
-  // Remove trailing newline
-  if (xs[xs.length - 1] === NEWLINE) {
-    xs.splice(xs.length - 1, 1);
-  }
-
-  return xs.join(' ');
-}
-
-function quote(arg: string): string {
-  const escaped = arg.replace(/'/g, "\\'");
-  return `'${escaped}'`;
-}
-
-function onlyEnabled(v: { name?: string; enabled?: boolean }): boolean {
-  return v.enabled !== false && !!v.name;
-}
-
-function findParentProtoDir(startPath: string): string | null {
-  let dir = path.resolve(startPath);
-
-  while (true) {
-    if (path.basename(dir) === 'proto') {
-      return dir;
-    }
-
-    const parent = path.dirname(dir);
-    if (parent === dir) {
-      return null; // Reached root
-    }
-
-    dir = parent;
-  }
-}

plugins/action-copy-grpcurl/tests/index.test.ts

@@ -1,159 +0,0 @@
-import { describe, expect, test } from 'vitest';
-import { convert } from '../src';
-
-describe('exporter-curl', () => {
-  test('Simple example', async () => {
-    expect(
-      await convert(
-        {
-          url: 'https://yaak.app',
-        },
-        [],
-      ),
-    ).toEqual(['grpcurl yaak.app'].join(' \\\n  '));
-  });
-  test('Basic metadata', async () => {
-    expect(
-      await convert(
-        {
-          url: 'https://yaak.app',
-          metadata: [
-            { name: 'aaa', value: 'AAA' },
-            { enabled: true, name: 'bbb', value: 'BBB' },
-            { enabled: false, name: 'disabled', value: 'ddd' },
-          ],
-        },
-        [],
-      ),
-    ).toEqual([`grpcurl -H 'aaa: AAA'`, `-H 'bbb: BBB'`, 'yaak.app'].join(' \\\n  '));
-  });
-  test('Basic auth', async () => {
-    expect(
-      await convert(
-        {
-          url: 'https://yaak.app',
-          authenticationType: 'basic',
-          authentication: {
-            username: 'user',
-            password: 'pass',
-          },
-        },
-        [],
-      ),
-    ).toEqual([`grpcurl -H 'Authorization: Basic dXNlcjpwYXNz'`, 'yaak.app'].join(' \\\n  '));
-  });
-
-  test('API key auth', async () => {
-    expect(
-      await convert(
-        {
-          url: 'https://yaak.app',
-          authenticationType: 'apikey',
-          authentication: {
-            key: 'X-Token',
-            value: 'tok',
-          },
-        },
-        [],
-      ),
-    ).toEqual([`grpcurl -H 'X-Token: tok'`, 'yaak.app'].join(' \\\n  '));
-  });
-
-  test('API key auth', async () => {
-    expect(
-      await convert(
-        {
-          url: 'https://yaak.app',
-          authenticationType: 'apikey',
-          authentication: {
-            location: 'query',
-            key: 'token',
-            value: 'tok 1',
-          },
-        },
-        [],
-      ),
-    ).toEqual(['grpcurl', 'yaak.app?token=tok%201'].join(' \\\n  '));
-  });
-
-  test('Single proto file', async () => {
-    expect(await convert({ url: 'https://yaak.app' }, ['/foo/bar/baz.proto'])).toEqual(
-      [
-        `grpcurl -import-path '/foo/bar'`,
-        `-import-path '/foo'`,
-        `-proto '/foo/bar/baz.proto'`,
-        'yaak.app',
-      ].join(' \\\n  '),
-    );
-  });
-  test('Multiple proto files, same dir', async () => {
-    expect(
-      await convert({ url: 'https://yaak.app' }, ['/foo/bar/aaa.proto', '/foo/bar/bbb.proto']),
-    ).toEqual(
-      [
-        `grpcurl -import-path '/foo/bar'`,
-        `-import-path '/foo'`,
-        `-proto '/foo/bar/aaa.proto'`,
-        `-proto '/foo/bar/bbb.proto'`,
-        'yaak.app',
-      ].join(' \\\n  '),
-    );
-  });
-  test('Multiple proto files, different dir', async () => {
-    expect(
-      await convert({ url: 'https://yaak.app' }, ['/aaa/bbb/ccc.proto', '/xxx/yyy/zzz.proto']),
-    ).toEqual(
-      [
-        `grpcurl -import-path '/aaa/bbb'`,
-        `-import-path '/aaa'`,
-        `-import-path '/xxx/yyy'`,
-        `-import-path '/xxx'`,
-        `-proto '/aaa/bbb/ccc.proto'`,
-        `-proto '/xxx/yyy/zzz.proto'`,
-        'yaak.app',
-      ].join(' \\\n  '),
-    );
-  });
-  test('Single include dir', async () => {
-    expect(await convert({ url: 'https://yaak.app' }, ['/aaa/bbb'])).toEqual(
-      [`grpcurl -import-path '/aaa/bbb'`, 'yaak.app'].join(' \\\n  '),
-    );
-  });
-  test('Multiple include dir', async () => {
-    expect(await convert({ url: 'https://yaak.app' }, ['/aaa/bbb', '/xxx/yyy'])).toEqual(
-      [`grpcurl -import-path '/aaa/bbb'`, `-import-path '/xxx/yyy'`, 'yaak.app'].join(' \\\n  '),
-    );
-  });
-  test('Mixed proto and dirs', async () => {
-    expect(
-      await convert({ url: 'https://yaak.app' }, ['/aaa/bbb', '/xxx/yyy', '/foo/bar.proto']),
-    ).toEqual(
-      [
-        `grpcurl -import-path '/aaa/bbb'`,
-        `-import-path '/xxx/yyy'`,
-        `-import-path '/foo'`,
-        `-import-path '/'`,
-        `-proto '/foo/bar.proto'`,
-        'yaak.app',
-      ].join(' \\\n  '),
-    );
-  });
-  test('Sends data', async () => {
-    expect(
-      await convert(
-        {
-          url: 'https://yaak.app',
-          message: JSON.stringify({ foo: 'bar', baz: 1.0 }, null, 2),
-        },
-        ['/foo.proto'],
-      ),
-    ).toEqual(
-      [
-        `grpcurl -import-path '/'`,
-        `-proto '/foo.proto'`,
-        `-d '{"foo":"bar","baz":1}'`,
-        'yaak.app',
-      ].join(' \\\n  '),
-    );
-  });
-});

plugins/action-copy-grpcurl/tsconfig.json

@@ -1,3 +0,0 @@
-{
-  "extends": "../../tsconfig.json"
-}

plugins/auth-apikey/package.json

@@ -1,16 +0,0 @@
-{
-  "name": "@yaak/auth-apikey",
-  "displayName": "API Key Authentication",
-  "description": "Authenticate requests using an API key",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/mountain-loop/yaak.git",
-    "directory": "plugins/auth-apikey"
-  },
-  "private": true,
-  "version": "0.1.0",
-  "scripts": {
-    "build": "yaakcli build",
-    "dev": "yaakcli dev"
-  }
-}

plugins/auth-apikey/src/index.ts

@@ -1,54 +0,0 @@
-import type { PluginDefinition } from '@yaakapp/api';
-
-export const plugin: PluginDefinition = {
-  authentication: {
-    name: 'apikey',
-    label: 'API Key',
-    shortLabel: 'API Key',
-    args: [
-      {
-        type: 'select',
-        name: 'location',
-        label: 'Behavior',
-        defaultValue: 'header',
-        options: [
-          { label: 'Insert Header', value: 'header' },
-          { label: 'Append Query Parameter', value: 'query' },
-        ],
-      },
-      {
-        type: 'text',
-        name: 'key',
-        label: 'Key',
-        dynamic: (_ctx, { values }) => {
-          return values.location === 'query'
-            ? {
-                label: 'Parameter Name',
-                description: 'The name of the query parameter to add to the request',
-              }
-            : {
-                label: 'Header Name',
-                description: 'The name of the header to add to the request',
-              };
-        },
-      },
-      {
-        type: 'text',
-        name: 'value',
-        label: 'API Key',
-        optional: true,
-        password: true,
-      },
-    ],
-    async onApply(_ctx, { values }) {
-      const key = String(values.key ?? '');
-      const value = String(values.value ?? '');
-      const location = String(values.location);
-
-      if (location === 'query') {
-        return { setQueryParameters: [{ name: key, value }] };
-      }
-      return { setHeaders: [{ name: key, value }] };
-    },
-  },
-};

plugins/auth-apikey/tsconfig.json

@@ -1,3 +0,0 @@
-{
-  "extends": "../../tsconfig.json"
-}

plugins/auth-aws/README.md

@@ -1,49 +0,0 @@
-# AWS Signature Version 4 Auth
-
-A plugin for authenticating AWS-compatible requests using the
-[AWS Signature Version 4 signing process](https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html).  
-This enables secure, signed requests to AWS services (or any S3-compatible APIs like
-Cloudflare R2).
-
-![Screenshot of AWS SigV4 UI](screenshot.png)
-
-## Overview
-
-This plugin provides AWS Signature authentication for API requests in Yaak. SigV4 is used
-by nearly all AWS APIs to verify the authenticity and integrity of requests using
-cryptographic signatures.
-
-With this plugin, you can securely sign requests to AWS services such as S3, STS, Lambda,
-API Gateway, DynamoDB, and more. You can also authenticate against S3-compatible services
-like **Cloudflare R2**, **MinIO**, or **Wasabi**.
-
-## How AWS Signature Version 4 Works
-
-SigV4 signs requests by creating a hash of key request components (method, URL, headers,
-and optionally the payload) using your AWS credentials. The resulting HMAC signature is
-added in the `Authorization` header along with credential scope metadata.
-
-Example header:
-
-```
-Authorization: AWS4-HMAC-SHA256 Credential=AKIA…/20251011/us-east-1/s3/aws4_request, SignedHeaders=host;x-amz-date, Signature=abcdef123456…
-```
-
-Each request must include a timestamp (`X-Amz-Date`) and may include a session token if
-using temporary credentials.
-
-## Configuration
-
-The plugin presents the following fields:
-
-- **Access Key ID** – Your AWS access key identifier
-- **Secret Access Key** – The secret associated with the access key
-- **Session Token** *(optional)* – Used for temporary or assumed-role credentials (treated as secret)
-- **Region** – AWS region (e.g., `us-east-1`)
-- **Service** – AWS service identifier (e.g., `sts`, `s3`, `execute-api`)
-
-## Usage
-
-1. Configure a request, folder, or workspace to use **AWS SigV4 Authentication**
-2. Enter your AWS credentials and target service/region
-3. The plugin will automatically sign outgoing requests with valid SigV4 headers

plugins/auth-aws/package.json

@@ -1,22 +0,0 @@
-{
-  "name": "@yaak/auth-aws",
-  "displayName": "AWS SigV4",
-  "description": "Authenticate requests using AWS SigV4 signing",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/mountain-loop/yaak.git",
-    "directory": "plugins/auth-aws"
-  },
-  "private": true,
-  "version": "0.1.0",
-  "scripts": {
-    "build": "yaakcli build",
-    "dev": "yaakcli dev"
-  },
-  "dependencies": {
-    "aws4": "^1.13.2"
-  },
-  "devDependencies": {
-    "@types/aws4": "^1.11.6"
-  }
-}

plugins/auth-aws/src/index.ts

@@ -1,88 +0,0 @@
-import { URL } from 'node:url';
-import type { PluginDefinition } from '@yaakapp/api';
-import type { CallHttpAuthenticationResponse } from '@yaakapp-internal/plugins';
-import type { Request } from 'aws4';
-import aws4 from 'aws4';
-
-export const plugin: PluginDefinition = {
-  authentication: {
-    name: 'awsv4',
-    label: 'AWS Signature',
-    shortLabel: 'AWS v4',
-    args: [
-      { name: 'accessKeyId', label: 'Access Key ID', type: 'text', password: true },
-      {
-        name: 'secretAccessKey',
-        label: 'Secret Access Key',
-        type: 'text',
-        password: true,
-      },
-      {
-        name: 'service',
-        label: 'Service Name',
-        type: 'text',
-        defaultValue: 'sts',
-        placeholder: 'sts',
-        description: 'The service that is receiving the request (sts, s3, sqs, ...)',
-      },
-      {
-        name: 'region',
-        label: 'Region',
-        type: 'text',
-        placeholder: 'us-east-1',
-        description: 'The region that is receiving the request (defaults to us-east-1)',
-        optional: true,
-      },
-      {
-        name: 'sessionToken',
-        label: 'Session Token',
-        type: 'text',
-        password: true,
-        optional: true,
-        description: 'Only required if you are using temporary credentials',
-      },
-    ],
-    onApply(_ctx, { values, ...args }): CallHttpAuthenticationResponse {
-      const accessKeyId = String(values.accessKeyId || '');
-      const secretAccessKey = String(values.secretAccessKey || '');
-      const sessionToken = String(values.sessionToken || '') || undefined;
-
-      const url = new URL(args.url);
-
-      const headers: NonNullable<Request['headers']> = {};
-      for (const headerName of ['content-type', 'host', 'x-amz-date', 'x-amz-security-token']) {
-        const v = args.headers.find((h) => h.name.toLowerCase() === headerName);
-        if (v != null) {
-          headers[headerName] = v.value;
-        }
-      }
-
-      const signature = aws4.sign(
-        {
-          host: url.host,
-          method: args.method,
-          path: url.pathname + (url.search || ''),
-          service: String(values.service || 'sts'),
-          region: values.region ? String(values.region) : undefined,
-          headers,
-          doNotEncodePath: true,
-        },
-        {
-          accessKeyId,
-          secretAccessKey,
-          sessionToken,
-        },
-      );
-
-      if (signature.headers == null) {
-        return {};
-      }
-
-      return {
-        setHeaders: Object.entries(signature.headers)
-          .filter(([name]) => name !== 'content-type') // Don't add this because we already have it
-          .map(([name, value]) => ({ name, value: String(value || '') })),
-      };
-    },
-  },
-};

plugins/auth-aws/tsconfig.json

@@ -1,3 +0,0 @@
-{
-  "extends": "../../tsconfig.json"
-}

plugins/auth-basic/README.md

@@ -1,44 +0,0 @@
-# Basic Authentication 
-
-A simple Basic Authentication plugin that implements HTTP Basic Auth according
-to [RFC 7617](https://datatracker.ietf.org/doc/html/rfc7617), enabling secure
-authentication with username and password credentials.
-
-![Screenshot of basic auth UI](screenshot.png)
-
-## Overview
-
-This plugin provides HTTP Basic Authentication support for API requests in Yaak. Basic
-Auth is one of the most widely supported authentication methods, making it ideal for APIs
-that require simple username/password authentication without the complexity of OAuth
-flows.
-
-## How Basic Authentication Works
-
-Basic Authentication encodes your username and password credentials using Base64 encoding
-and sends them in the `Authorization` header with each request. The format is:
-
-```
-Authorization: Basic <base64-encoded-credentials>
-```
-
-Where `<base64-encoded-credentials>` is the Base64 encoding of `username:password`.
-
-## Configuration
-
-The plugin presents two fields:
-
-- **Username**: Username or user identifier
-- **Password**: Password or authentication token
-
-## Usage
-
-1. Configure the request, folder, or workspace to use Basic Authentication
-2. Enter your username and password in the authentication configuration
-3. The plugin will automatically add the proper `Authorization` header to your requests
-
-## Troubleshooting
-
-- **401 Unauthorized**: Verify your username and password are correct
-- **403 Forbidden**: Check if your account has the necessary permissions
-- **Connection Issues**: Ensure you're using HTTPS for secure transmission

plugins/auth-basic/package.json

@@ -1,16 +0,0 @@
-{
-  "name": "@yaak/auth-basic",
-  "displayName": "Basic Authentication",
-  "description": "Authenticate requests using Basic Auth",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/mountain-loop/yaak.git",
-    "directory": "plugins/auth-basic"
-  },
-  "private": true,
-  "version": "0.1.0",
-  "scripts": {
-    "build": "yaakcli build",
-    "dev": "yaakcli dev"
-  }
-}

plugins/auth-basic/src/index.ts

@@ -1,29 +0,0 @@
-import type { PluginDefinition } from '@yaakapp/api';
-
-export const plugin: PluginDefinition = {
-  authentication: {
-    name: 'basic',
-    label: 'Basic Auth',
-    shortLabel: 'Basic',
-    args: [
-      {
-        type: 'text',
-        name: 'username',
-        label: 'Username',
-        optional: true,
-      },
-      {
-        type: 'text',
-        name: 'password',
-        label: 'Password',
-        optional: true,
-        password: true,
-      },
-    ],
-    async onApply(_ctx, { values }) {
-      const { username, password } = values;
-      const value = `Basic ${Buffer.from(`${username}:${password}`).toString('base64')}`;
-      return { setHeaders: [{ name: 'Authorization', value }] };
-    },
-  },
-};

plugins/auth-basic/tsconfig.json

@@ -1,3 +0,0 @@
-{
-  "extends": "../../tsconfig.json"
-}

plugins/auth-bearer/README.md

@@ -1,47 +0,0 @@
-# Bearer Token Authentication Plugin
-
-A Bearer Token authentication plugin for Yaak that
-implements [RFC 6750](https://datatracker.ietf.org/doc/html/rfc6750), enabling secure API
-access using tokens, API keys, and other bearer credentials.
-
-![Screenshot of bearer auth UI](screenshot.png)
-
-## Overview
-
-This plugin provides Bearer Token authentication support for your API requests in Yaak.
-Bearer Token authentication is widely used in modern APIs, especially those following REST
-principles and OAuth 2.0 standards. It's the preferred method for APIs that issue access
-tokens, API keys, or other bearer credentials.
-
-## How Bearer Token Authentication Works
-
-Bearer Token authentication sends your token in the `Authorization` header with each
-request using the Bearer scheme:
-
-```
-Authorization: Bearer <your-token>
-```
-
-The token is transmitted as-is without any additional encoding, making it simple and
-efficient for API authentication.
-
-## Configuration
-
-The plugin requires only one field:
-
-- **Token**: Your bearer token, access token, API key, or other credential
-- **Prefix**: The prefix to use for the Authorization header, which will be of the
-  format "<PREFIX> <TOKEN>"
-
-## Usage
-
-1. Configure the request, folder, or workspace to use Bearer Authentication
-2. Enter the token and optional prefix in the authentication configuration
-3. The plugin will automatically add the proper `Authorization` header to your requests
-
-## Troubleshooting
-
-- **401 Unauthorized**: Verify your token is valid and not expired
-- **403 Forbidden**: Check if your token has the necessary permissions/scopes
-- **Invalid Token Format**: Ensure you're using the complete token without truncation
-- **Token Expiration**: Refresh or regenerate expired tokens

plugins/auth-bearer/package.json

@@ -1,17 +0,0 @@
-{
-  "name": "@yaak/auth-bearer",
-  "displayName": "Bearer Authentication",
-  "description": "Authenticate requests using bearer authentication",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/mountain-loop/yaak.git",
-    "directory": "plugins/auth-bearer"
-  },
-  "private": true,
-  "version": "0.1.0",
-  "scripts": {
-    "build": "yaakcli build",
-    "dev": "yaakcli dev",
-    "test": "vitest --run tests"
-  }
-}

plugins/auth-bearer/src/index.ts

@@ -1,39 +0,0 @@
-import type { PluginDefinition } from '@yaakapp/api';
-import type { CallHttpAuthenticationRequest } from '@yaakapp-internal/plugins';
-
-export const plugin: PluginDefinition = {
-  authentication: {
-    name: 'bearer',
-    label: 'Bearer Token',
-    shortLabel: 'Bearer',
-    args: [
-      {
-        type: 'text',
-        name: 'token',
-        label: 'Token',
-        optional: true,
-        password: true,
-      },
-      {
-        type: 'text',
-        name: 'prefix',
-        label: 'Prefix',
-        optional: true,
-        placeholder: '',
-        defaultValue: 'Bearer',
-        description:
-          'The prefix to use for the Authorization header, which will be of the format "<PREFIX> <TOKEN>".',
-      },
-    ],
-    async onApply(_ctx, { values }) {
-      return { setHeaders: [generateAuthorizationHeader(values)] };
-    },
-  },
-};
-
-function generateAuthorizationHeader(values: CallHttpAuthenticationRequest['values']) {
-  const token = String(values.token || '').trim();
-  const prefix = String(values.prefix || '').trim();
-  const value = `${prefix} ${token}`.trim();
-  return { name: 'Authorization', value };
-}

plugins/auth-bearer/tests/index.test.ts

@@ -1,67 +0,0 @@
-import type { Context } from '@yaakapp/api';
-import { describe, expect, test } from 'vitest';
-import { plugin } from '../src';
-
-const ctx = {} as Context;
-
-describe('auth-bearer', () => {
-  test('No values', async () => {
-    expect(
-      await plugin.authentication?.onApply(ctx, {
-        values: {},
-        headers: [],
-        url: 'https://yaak.app',
-        method: 'POST',
-        contextId: '111',
-      }),
-    ).toEqual({ setHeaders: [{ name: 'Authorization', value: '' }] });
-  });
-
-  test('Only token', async () => {
-    expect(
-      await plugin.authentication?.onApply(ctx, {
-        values: { token: 'my-token' },
-        headers: [],
-        url: 'https://yaak.app',
-        method: 'POST',
-        contextId: '111',
-      }),
-    ).toEqual({ setHeaders: [{ name: 'Authorization', value: 'my-token' }] });
-  });
-
-  test('Only prefix', async () => {
-    expect(
-      await plugin.authentication?.onApply(ctx, {
-        values: { prefix: 'Hello' },
-        headers: [],
-        url: 'https://yaak.app',
-        method: 'POST',
-        contextId: '111',
-      }),
-    ).toEqual({ setHeaders: [{ name: 'Authorization', value: 'Hello' }] });
-  });
-
-  test('Prefix and token', async () => {
-    expect(
-      await plugin.authentication?.onApply(ctx, {
-        values: { prefix: 'Hello', token: 'my-token' },
-        headers: [],
-        url: 'https://yaak.app',
-        method: 'POST',
-        contextId: '111',
-      }),
-    ).toEqual({ setHeaders: [{ name: 'Authorization', value: 'Hello my-token' }] });
-  });
-
-  test('Extra spaces', async () => {
-    expect(
-      await plugin.authentication?.onApply(ctx, {
-        values: { prefix: '\t Hello  ', token: ' \nmy-token  ' },
-        headers: [],
-        url: 'https://yaak.app',
-        method: 'POST',
-        contextId: '111',
-      }),
-    ).toEqual({ setHeaders: [{ name: 'Authorization', value: 'Hello my-token' }] });
-  });
-});

plugins/auth-bearer/tsconfig.json

@@ -1,3 +0,0 @@
-{
-  "extends": "../../tsconfig.json"
-}

plugins/auth-jwt/README.md

@@ -1,53 +0,0 @@
-# JSON Web Token (JWT) Authentication
-
-A [JSON Web Token](https://datatracker.ietf.org/doc/html/rfc7519) (JWT) authentication
-plugin that supports token generation, signing, and automatic header management.
-
-![Screenshot of JWT auth UI](screenshot.png)
-
-## Overview
-
-This plugin provides JWT authentication support for API requests. JWT is a compact,
-URL-safe means of representing claims between two parties, commonly used for
-authentication and information exchange in modern web applications and APIs.
-
-## How JWT Authentication Works
-
-JWT authentication involves creating a signed token containing claims about the user or
-application. The token is sent in the `Authorization` header:
-
-```
-Authorization: Bearer <jwt-token>
-```
-
-A JWT consists of three parts separated by dots:
-
-- **Header**: Contains the token type and signing algorithm
-- **Payload**: Contains the claims (user data, permissions, expiration, etc.)
-- **Signature**: Ensures the token hasn't been tampered with
-
-## Usage
-
-1. Configure the request, folder, or workspace to use JWT Authentication
-2. Set up your signing algorithm and secret/key
-3. Configure the required claims for your JWT
-4. The plugin will generate, sign, and include the JWT in your requests
-
-## Common Use Cases
-
-JWT authentication is commonly used for:
-
-- **Microservices Authentication**: Service-to-service communication
-- **API Gateway Integration**: Authenticating with API gateways
-- **Single Sign-On (SSO)**: Sharing authentication across applications
-- **Stateless Authentication**: No server-side session storage required
-- **Mobile App APIs**: Secure authentication for mobile applications
-- **Third-party Integrations**: Authenticating with external services
-
-## Troubleshooting
-
-- **Invalid Signature**: Check your secret/key and algorithm configuration
-- **Token Expired**: Verify expiration time settings
-- **Invalid Claims**: Ensure required claims are properly configured
-- **Algorithm Mismatch**: Verify the algorithm matches what the API expects
-- **Key Format Issues**: Ensure RSA keys are in the correct PEM format

plugins/auth-jwt/package.json

@@ -1,22 +0,0 @@
-{
-  "name": "@yaak/auth-jwt",
-  "displayName": "JSON Web Tokens",
-  "description": "Authenticate requests using JSON web tokens (JWT)",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/mountain-loop/yaak.git",
-    "directory": "plugins/auth-jwt"
-  },
-  "private": true,
-  "version": "0.1.0",
-  "scripts": {
-    "build": "yaakcli build",
-    "dev": "yaakcli dev"
-  },
-  "dependencies": {
-    "jsonwebtoken": "^9.0.2"
-  },
-  "devDependencies": {
-    "@types/jsonwebtoken": "^9.0.7"
-  }
-}

plugins/auth-jwt/src/index.ts

@@ -1,119 +0,0 @@
-import type { PluginDefinition } from '@yaakapp/api';
-import jwt from 'jsonwebtoken';
-
-const algorithms = [
-  'HS256',
-  'HS384',
-  'HS512',
-  'RS256',
-  'RS384',
-  'RS512',
-  'PS256',
-  'PS384',
-  'PS512',
-  'ES256',
-  'ES384',
-  'ES512',
-  'none',
-] as const;
-
-const defaultAlgorithm = algorithms[0];
-
-export const plugin: PluginDefinition = {
-  authentication: {
-    name: 'jwt',
-    label: 'JWT Bearer',
-    shortLabel: 'JWT',
-    args: [
-      {
-        type: 'select',
-        name: 'algorithm',
-        label: 'Algorithm',
-        hideLabel: true,
-        defaultValue: defaultAlgorithm,
-        options: algorithms.map((value) => ({ label: value === 'none' ? 'None' : value, value })),
-      },
-      {
-        type: 'text',
-        name: 'secret',
-        label: 'Secret or Private Key',
-        password: true,
-        optional: true,
-        multiLine: true,
-      },
-      {
-        type: 'checkbox',
-        name: 'secretBase64',
-        label: 'Secret is base64 encoded',
-      },
-      {
-        type: 'select',
-        name: 'location',
-        label: 'Behavior',
-        defaultValue: 'header',
-        options: [
-          { label: 'Insert Header', value: 'header' },
-          { label: 'Append Query Parameter', value: 'query' },
-        ],
-      },
-      {
-        type: 'text',
-        name: 'name',
-        label: 'Header Name',
-        defaultValue: 'Authorization',
-        optional: true,
-        dynamic(_ctx, args) {
-          if (args.values.location === 'query') {
-            return {
-              label: 'Parameter Name',
-              description: 'The name of the query parameter to add to the request',
-            };
-          }
-          return {
-            label: 'Header Name',
-            description: 'The name of the header to add to the request',
-          };
-        },
-      },
-      {
-        type: 'text',
-        name: 'headerPrefix',
-        label: 'Header Prefix',
-        optional: true,
-        defaultValue: 'Bearer',
-        dynamic(_ctx, args) {
-          if (args.values.location === 'query') {
-            return {
-              hidden: true,
-            };
-          }
-        },
-      },
-      {
-        type: 'editor',
-        name: 'payload',
-        label: 'Payload',
-        language: 'json',
-        defaultValue: '{\n  "foo": "bar"\n}',
-        placeholder: '{ }',
-      },
-    ],
-    async onApply(_ctx, { values }) {
-      const { algorithm, secret: _secret, secretBase64, payload } = values;
-      const secret = secretBase64 ? Buffer.from(`${_secret}`, 'base64') : `${_secret}`;
-      const token = jwt.sign(`${payload}`, secret, {
-        algorithm: algorithm as (typeof algorithms)[number],
-      });
-
-      if (values.location === 'query') {
-        const paramName = String(values.name || 'token');
-        const paramValue = String(values.value || '');
-        return { setQueryParameters: [{ name: paramName, value: paramValue }] };
-      }
-      const headerPrefix = values.headerPrefix != null ? values.headerPrefix : 'Bearer';
-      const headerName = String(values.name || 'Authorization');
-      const headerValue = `${headerPrefix} ${token}`.trim();
-      return { setHeaders: [{ name: headerName, value: headerValue }] };
-    },
-  },
-};

plugins/auth-jwt/tsconfig.json

@@ -1,3 +0,0 @@
-{
-  "extends": "../../tsconfig.json"
-}

plugins/auth-ntlm/package.json

@@ -1,19 +0,0 @@
-{
-  "name": "@yaak/auth-ntlm",
-  "displayName": "NTLM Authentication",
-  "description": "Authenticate requests using NTLM authentication",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/mountain-loop/yaak.git",
-    "directory": "plugins/auth-ntlm"
-  },
-  "private": true,
-  "version": "0.1.0",
-  "scripts": {
-    "build": "yaakcli build",
-    "dev": "yaakcli dev"
-  },
-  "dependencies": {
-    "httpntlm": "^1.8.13"
-  }
-}

plugins/auth-ntlm/src/index.ts

@@ -1,87 +0,0 @@
-import type { PluginDefinition } from '@yaakapp/api';
-
-import { ntlm } from 'httpntlm';
-
-export const plugin: PluginDefinition = {
-  authentication: {
-    name: 'windows',
-    label: 'NTLM Auth',
-    shortLabel: 'NTLM',
-    args: [
-      {
-        type: 'banner',
-        color: 'info',
-        inputs: [
-          {
-            type: 'markdown',
-            content:
-              'NTLM is still in beta. Please submit any issues to [Feedback](https://yaak.app/feedback).',
-          },
-        ],
-      },
-      {
-        type: 'text',
-        name: 'username',
-        label: 'Username',
-        optional: true,
-      },
-      {
-        type: 'text',
-        name: 'password',
-        label: 'Password',
-        optional: true,
-        password: true,
-      },
-      {
-        type: 'accordion',
-        label: 'Advanced',
-        inputs: [
-          { name: 'domain', label: 'Domain', type: 'text', optional: true },
-          { name: 'workstation', label: 'Workstation', type: 'text', optional: true },
-        ],
-      },
-    ],
-    async onApply(ctx, { values, method, url }) {
-      const username = values.username ? String(values.username) : undefined;
-      const password = values.password ? String(values.password) : undefined;
-      const domain = values.domain ? String(values.domain) : undefined;
-      const workstation = values.workstation ? String(values.workstation) : undefined;
-
-      const options = {
-        url,
-        username,
-        password,
-        workstation,
-        domain,
-      };
-
-      const type1 = ntlm.createType1Message(options);
-
-      const negotiateResponse = await ctx.httpRequest.send({
-        httpRequest: {
-          method,
-          url,
-          headers: [
-            { name: 'Authorization', value: type1 },
-            { name: 'Connection', value: 'keep-alive' },
-          ],
-        },
-      });
-
-      const wwwAuthenticateHeader = negotiateResponse.headers.find(
-        (h) => h.name.toLowerCase() === 'www-authenticate',
-      );
-
-      if (!wwwAuthenticateHeader?.value) {
-        throw new Error('Unable to find www-authenticate response header for NTLM');
-      }
-
-      const type2 = ntlm.parseType2Message(wwwAuthenticateHeader.value, (err: Error | null) => {
-        if (err != null) throw err;
-      });
-      const type3 = ntlm.createType3Message(type2, options);
-
-      return { setHeaders: [{ name: 'Authorization', value: type3 }] };
-    },
-  },
-};

plugins/auth-ntlm/src/modules.d.ts

@@ -1 +0,0 @@
-declare module 'httpntlm';

plugins/auth-ntlm/tsconfig.json

@@ -1,3 +0,0 @@
-{
-  "extends": "../../tsconfig.json"
-}

plugins/auth-oauth1/package.json

@@ -1,19 +0,0 @@
-{
-  "name": "@yaak/auth-oauth1",
-  "displayName": "OAuth 1.0",
-  "description": "Authenticate requests using OAuth 1.0a",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/mountain-loop/yaak.git",
-    "directory": "plugins/auth-oauth1"
-  },
-  "private": true,
-  "version": "0.1.0",
-  "scripts": {
-    "build": "yaakcli build",
-    "dev": "yaakcli dev"
-  },
-  "dependencies": {
-    "oauth-1.0a": "^2.2.6"
-  }
-}

plugins/auth-oauth1/src/index.ts

@@ -1,210 +0,0 @@
-import crypto from 'node:crypto';
-import type { Context, GetHttpAuthenticationConfigRequest, PluginDefinition } from '@yaakapp/api';
-import OAuth from 'oauth-1.0a';
-
-const signatures = {
-  HMAC_SHA1: 'HMAC-SHA1',
-  HMAC_SHA256: 'HMAC-SHA256',
-  HMAC_SHA512: 'HMAC-SHA512',
-  RSA_SHA1: 'RSA-SHA1',
-  RSA_SHA256: 'RSA-SHA256',
-  RSA_SHA512: 'RSA-SHA512',
-  PLAINTEXT: 'PLAINTEXT',
-} as const;
-const defaultSig = signatures.HMAC_SHA1;
-
-const pkSigs = Object.values(signatures).filter((k) => k.startsWith('RSA-'));
-const nonPkSigs = Object.values(signatures).filter((k) => !pkSigs.includes(k));
-
-type SigMethod = (typeof signatures)[keyof typeof signatures];
-
-function hiddenIfNot(
-  sigMethod: SigMethod[],
-  ...other: ((values: GetHttpAuthenticationConfigRequest['values']) => boolean)[]
-) {
-  return (_ctx: Context, { values }: GetHttpAuthenticationConfigRequest) => {
-    const hasGrantType = sigMethod.find((t) => t === String(values.signatureMethod ?? defaultSig));
-    const hasOtherBools = other.every((t) => t(values));
-    const show = hasGrantType && hasOtherBools;
-    return { hidden: !show };
-  };
-}
-
-export const plugin: PluginDefinition = {
-  authentication: {
-    name: 'oauth1',
-    label: 'OAuth 1.0',
-    shortLabel: 'OAuth 1',
-    args: [
-      {
-        type: 'banner',
-        color: 'info',
-        inputs: [
-          {
-            type: 'markdown',
-            content:
-              'OAuth 1.0 is still in beta. Please submit any issues to [Feedback](https://yaak.app/feedback).',
-          },
-        ],
-      },
-      {
-        name: 'signatureMethod',
-        label: 'Signature Method',
-        type: 'select',
-        defaultValue: defaultSig,
-        options: Object.values(signatures).map((v) => ({ label: v, value: v })),
-      },
-      { name: 'consumerKey', label: 'Consumer Key', type: 'text', password: true, optional: true },
-      {
-        name: 'consumerSecret',
-        label: 'Consumer Secret',
-        type: 'text',
-        password: true,
-        optional: true,
-      },
-      {
-        name: 'tokenKey',
-        label: 'Access Token',
-        type: 'text',
-        password: true,
-        optional: true,
-      },
-      {
-        name: 'tokenSecret',
-        label: 'Token Secret',
-        type: 'text',
-        password: true,
-        optional: true,
-        dynamic: hiddenIfNot(nonPkSigs),
-      },
-      {
-        name: 'privateKey',
-        label: 'Private Key (RSA-SHA1)',
-        type: 'text',
-        multiLine: true,
-        optional: true,
-        password: true,
-        placeholder:
-          '-----BEGIN RSA PRIVATE KEY-----\nPrivate key in PEM format\n-----END RSA PRIVATE KEY-----',
-        dynamic: hiddenIfNot(pkSigs),
-      },
-      {
-        type: 'accordion',
-        label: 'Advanced',
-        inputs: [
-          { name: 'callback', label: 'Callback Url', type: 'text', optional: true },
-          { name: 'verifier', label: 'Verifier', type: 'text', optional: true, password: true },
-          { name: 'timestamp', label: 'Timestamp', type: 'text', optional: true },
-          { name: 'nonce', label: 'Nonce', type: 'text', optional: true },
-          {
-            name: 'version',
-            label: 'OAuth Version',
-            type: 'text',
-            optional: true,
-            defaultValue: '1.0',
-          },
-          { name: 'realm', label: 'Realm', type: 'text', optional: true },
-        ],
-      },
-    ],
-
-    onApply(
-      _ctx,
-      { values, method, url },
-    ): {
-      setHeaders?: { name: string; value: string }[];
-      setQueryParameters?: { name: string; value: string }[];
-    } {
-      const consumerKey = String(values.consumerKey || '');
-      const consumerSecret = String(values.consumerSecret || '');
-
-      const signatureMethod = String(values.signatureMethod || signatures.HMAC_SHA1) as SigMethod;
-      const version = String(values.version || '1.0');
-      const realm = String(values.realm || '') || undefined;
-
-      const oauth = new OAuth({
-        consumer: { key: consumerKey, secret: consumerSecret },
-        signature_method: signatureMethod,
-        version,
-        hash_function: hashFunction(signatureMethod),
-        realm,
-      });
-
-      if (pkSigs.includes(signatureMethod)) {
-        oauth.getSigningKey = (tokenSecret?: string) => tokenSecret || '';
-      }
-
-      const requestUrl = new URL(url);
-
-      // Base request options passed to oauth-1.0a
-      const requestData: Omit<OAuth.RequestOptions, 'data'> & {
-        data: Record<string, string | string[]>;
-      } = {
-        method,
-        url: requestUrl.toString(),
-        includeBodyHash: false,
-        data: {},
-      };
-
-      // (1) Include existing query params in signature base string
-      for (const key of requestUrl.searchParams.keys()) {
-        if (key.startsWith('oauth_')) continue;
-        const all = requestUrl.searchParams.getAll(key);
-        const first = all[0];
-        if (first == null) continue;
-        requestData.data[key] = all.length > 1 ? all : first;
-      }
-
-      // (2) Manual oauth_* overrides
-      if (values.callback) requestData.data.oauth_callback = String(values.callback);
-      if (values.nonce) requestData.data.oauth_nonce = String(values.nonce);
-      if (values.timestamp) requestData.data.oauth_timestamp = String(values.timestamp);
-      if (values.verifier) requestData.data.oauth_verifier = String(values.verifier);
-
-      let token: OAuth.Token | { key: string } | undefined;
-
-      if (pkSigs.includes(signatureMethod)) {
-        token = {
-          key: String(values.tokenKey || ''),
-          secret: String(values.privateKey || ''),
-        };
-      } else if (values.tokenKey && values.tokenSecret) {
-        token = { key: String(values.tokenKey), secret: String(values.tokenSecret) };
-      } else if (values.tokenKey) {
-        token = { key: String(values.tokenKey) };
-      }
-
-      const authParams = oauth.authorize(requestData, token as OAuth.Token | undefined);
-      const { Authorization } = oauth.toHeader(authParams);
-      return { setHeaders: [{ name: 'Authorization', value: Authorization }] };
-    },
-  },
-};
-
-function hashFunction(signatureMethod: SigMethod) {
-  switch (signatureMethod) {
-    case signatures.HMAC_SHA1:
-      return (base: string, key: string) =>
-        crypto.createHmac('sha1', key).update(base).digest('base64');
-    case signatures.HMAC_SHA256:
-      return (base: string, key: string) =>
-        crypto.createHmac('sha256', key).update(base).digest('base64');
-    case signatures.HMAC_SHA512:
-      return (base: string, key: string) =>
-        crypto.createHmac('sha512', key).update(base).digest('base64');
-    case signatures.RSA_SHA1:
-      return (base: string, privateKey: string) =>
-        crypto.createSign('RSA-SHA1').update(base).sign(privateKey, 'base64');
-    case signatures.RSA_SHA256:
-      return (base: string, privateKey: string) =>
-        crypto.createSign('RSA-SHA256').update(base).sign(privateKey, 'base64');
-    case signatures.RSA_SHA512:
-      return (base: string, privateKey: string) =>
-        crypto.createSign('RSA-SHA512').update(base).sign(privateKey, 'base64');
-    case signatures.PLAINTEXT:
-      return (base: string) => base;
-    default:
-      return (base: string, key: string) =>
-        crypto.createHmac('sha1', key).update(base).digest('base64');
-  }
-}

plugins/auth-oauth1/tsconfig.json

@@ -1,3 +0,0 @@
-{
-  "extends": "../../tsconfig.json"
-}

plugins/auth-oauth2/README.md

@@ -1,72 +0,0 @@
-# OAuth 2.0 Authentication
-
-An [OAuth 2.0](https://datatracker.ietf.org/doc/html/rfc6749) authentication plugin that
-supports multiple grant types and flows, enabling secure API authentication with OAuth 2.0
-providers.
-
-![Screenshot of OAuth 2.0 auth UI](screenshot.png)
-
-## Overview
-
-This plugin implements OAuth 2.0 authentication for requests, supporting the most common
-OAuth 2.0 grant types used in modern API integrations. It handles token management,
-automatic refresh, and [PKCE](https://datatracker.ietf.org/doc/html/rfc7636) (Proof Key
-for Code Exchange) for enhanced security.
-
-## Supported Grant Types
-
-### Authorization Code Flow
-
-The most secure and commonly used OAuth 2.0 flow for web applications.
-
-- Standard Authorization Code flow
-- Optional PKCE (Proof Key for Code Exchange) for enhanced security
-- Supports automatic token refresh
-
-### Client Credentials Flow
-
-Ideal for server-to-server authentication where no user interaction is required. 
-
-### Implicit Flow
-
-Legacy flow for single-page applications (deprecated but still supported):
-
-- Direct access token retrieval
-- No refresh token support
-- Suitable for legacy integrations
-
-### Resource Owner Password Credentials Flow
-
-Direct username/password authentication.
-
-- User credentials are exchanged directly for tokens
-- Should only be used with trusted applications
-- Supports automatic token refresh
-
-## Features
-
-- **Automatic Token Management**: Handles token storage, expiration, and refresh
-  automatically
-- **PKCE Support**: Enhanced security for Authorization Code flow
-- **Token Persistence**: Stores tokens between sessions
-- **Flexible Configuration**: Supports custom authorization and token endpoints
-- **Scope Management**: Configure required OAuth scopes for your API
-- **Error Handling**: Comprehensive error handling and user feedback
-
-## Usage
-
-1. Configure the request, folder, or workspace to use OAuth 2.0 Authentication
-2. Select the appropriate grant type for your use case
-3. Fill in the required OAuth 2.0 parameters from your API provider
-4. The plugin will handle the authentication flow and token management automatically
-
-## Compatibility
-
-This plugin is compatible with OAuth 2.0 providers including:
-
-- Google APIs
-- Microsoft Graph
-- GitHub API
-- Auth0
-- Okta
-- And many other OAuth 2.0 compliant services

plugins/auth-oauth2/package.json

@@ -1,17 +0,0 @@
-{
-  "name": "@yaak/auth-oauth2",
-  "displayName": "OAuth 2.0",
-  "description": "Authenticate requests using OAuth 2.0",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/mountain-loop/yaak.git",
-    "directory": "plugins/auth-oauth2"
-  },
-  "private": true,
-  "version": "0.1.0",
-  "scripts": {
-    "build": "yaakcli build",
-    "dev": "yaakcli dev",
-    "test": "vitest --run tests"
-  }
-}

plugins/auth-oauth2/src/fetchAccessToken.ts

@@ -1,77 +0,0 @@
-import { readFileSync } from 'node:fs';
-import type { Context, HttpRequest, HttpUrlParameter } from '@yaakapp/api';
-import type { AccessTokenRawResponse } from './store';
-
-export async function fetchAccessToken(
-  ctx: Context,
-  {
-    accessTokenUrl,
-    scope,
-    audience,
-    params,
-    grantType,
-    credentialsInBody,
-    clientId,
-    clientSecret,
-  }: {
-    clientId: string;
-    clientSecret: string;
-    grantType: string;
-    accessTokenUrl: string;
-    scope: string | null;
-    audience: string | null;
-    credentialsInBody: boolean;
-    params: HttpUrlParameter[];
-  },
-): Promise<AccessTokenRawResponse> {
-  console.log('[oauth2] Getting access token', accessTokenUrl);
-  const httpRequest: Partial<HttpRequest> = {
-    method: 'POST',
-    url: accessTokenUrl,
-    bodyType: 'application/x-www-form-urlencoded',
-    body: {
-      form: [{ name: 'grant_type', value: grantType }, ...params],
-    },
-    headers: [
-      { name: 'User-Agent', value: 'yaak' },
-      { name: 'Accept', value: 'application/x-www-form-urlencoded, application/json' },
-      { name: 'Content-Type', value: 'application/x-www-form-urlencoded' },
-    ],
-  };
-
-  if (scope) httpRequest.body?.form.push({ name: 'scope', value: scope });
-  if (audience) httpRequest.body?.form.push({ name: 'audience', value: audience });
-
-  if (credentialsInBody) {
-    httpRequest.body?.form.push({ name: 'client_id', value: clientId });
-    httpRequest.body?.form.push({ name: 'client_secret', value: clientSecret });
-  } else {
-    const value = `Basic ${Buffer.from(`${clientId}:${clientSecret}`).toString('base64')}`;
-    httpRequest.headers?.push({ name: 'Authorization', value });
-  }
-
-  httpRequest.authenticationType = 'none'; // Don't inherit workspace auth
-  const resp = await ctx.httpRequest.send({ httpRequest });
-
-  console.log('[oauth2] Got access token response', resp.status);
-
-  const body = resp.bodyPath ? readFileSync(resp.bodyPath, 'utf8') : '';
-
-  if (resp.status < 200 || resp.status >= 300) {
-    throw new Error(`Failed to fetch access token with status=${resp.status} and body=${body}`);
-  }
-
-  // biome-ignore lint/suspicious/noExplicitAny: none
-  let response: any;
-  try {
-    response = JSON.parse(body);
-  } catch {
-    response = Object.fromEntries(new URLSearchParams(body));
-  }
-
-  if (response.error) {
-    throw new Error(`Failed to fetch access token with ${response.error}`);
-  }
-
-  return response;
-}

plugins/auth-oauth2/src/getOrRefreshAccessToken.ts

@@ -1,111 +0,0 @@
-import { readFileSync } from 'node:fs';
-import type { Context, HttpRequest } from '@yaakapp/api';
-import type { AccessToken, AccessTokenRawResponse, TokenStoreArgs } from './store';
-import { deleteToken, getToken, storeToken } from './store';
-import { isTokenExpired } from './util';
-
-export async function getOrRefreshAccessToken(
-  ctx: Context,
-  tokenArgs: TokenStoreArgs,
-  {
-    scope,
-    accessTokenUrl,
-    credentialsInBody,
-    clientId,
-    clientSecret,
-    forceRefresh,
-  }: {
-    scope: string | null;
-    accessTokenUrl: string;
-    credentialsInBody: boolean;
-    clientId: string;
-    clientSecret: string;
-    forceRefresh?: boolean;
-  },
-): Promise<AccessToken | null> {
-  const token = await getToken(ctx, tokenArgs);
-  if (token == null) {
-    return null;
-  }
-
-  const isExpired = isTokenExpired(token);
-
-  // Return the current access token if it's still valid
-  if (!isExpired && !forceRefresh) {
-    return token;
-  }
-
-  // Token is expired, but there's no refresh token :(
-  if (!token.response.refresh_token) {
-    return null;
-  }
-
-  // Access token is expired, so get a new one
-  const httpRequest: Partial<HttpRequest> = {
-    method: 'POST',
-    url: accessTokenUrl,
-    bodyType: 'application/x-www-form-urlencoded',
-    body: {
-      form: [
-        { name: 'grant_type', value: 'refresh_token' },
-        { name: 'refresh_token', value: token.response.refresh_token },
-      ],
-    },
-    headers: [
-      { name: 'User-Agent', value: 'yaak' },
-      { name: 'Accept', value: 'application/x-www-form-urlencoded, application/json' },
-      { name: 'Content-Type', value: 'application/x-www-form-urlencoded' },
-    ],
-  };
-
-  if (scope) httpRequest.body?.form.push({ name: 'scope', value: scope });
-
-  if (credentialsInBody) {
-    httpRequest.body?.form.push({ name: 'client_id', value: clientId });
-    httpRequest.body?.form.push({ name: 'client_secret', value: clientSecret });
-  } else {
-    const value = `Basic ${Buffer.from(`${clientId}:${clientSecret}`).toString('base64')}`;
-    httpRequest.headers?.push({ name: 'Authorization', value });
-  }
-
-  httpRequest.authenticationType = 'none'; // Don't inherit workspace auth
-  const resp = await ctx.httpRequest.send({ httpRequest });
-
-  if (resp.status >= 400 && resp.status < 500) {
-    // Client errors (4xx) indicate the refresh token is invalid, expired, or revoked
-    // Delete the token and return null to trigger a fresh authorization flow
-    console.log('[oauth2] Refresh token request failed with client error, deleting token');
-    await deleteToken(ctx, tokenArgs);
-    return null;
-  }
-
-  const body = resp.bodyPath ? readFileSync(resp.bodyPath, 'utf8') : '';
-
-  console.log('[oauth2] Got refresh token response', resp.status);
-
-  if (resp.status < 200 || resp.status >= 300) {
-    throw new Error(`Failed to refresh access token with status=${resp.status} and body=${body}`);
-  }
-
-  // biome-ignore lint/suspicious/noExplicitAny: none
-  let response: any;
-  try {
-    response = JSON.parse(body);
-  } catch {
-    response = Object.fromEntries(new URLSearchParams(body));
-  }
-
-  if (response.error) {
-    throw new Error(
-      `Failed to fetch access token with ${response.error} -> ${response.error_description}`,
-    );
-  }
-
-  const newResponse: AccessTokenRawResponse = {
-    ...response,
-    // Assign a new one or keep the old one,
-    refresh_token: response.refresh_token ?? token.response.refresh_token,
-  };
-
-  return storeToken(ctx, tokenArgs, newResponse);
-}

plugins/auth-oauth2/src/grants/authorizationCode.ts

@@ -1,162 +0,0 @@
-import { createHash, randomBytes } from 'node:crypto';
-import type { Context } from '@yaakapp/api';
-import { fetchAccessToken } from '../fetchAccessToken';
-import { getOrRefreshAccessToken } from '../getOrRefreshAccessToken';
-import type { AccessToken, TokenStoreArgs } from '../store';
-import { getDataDirKey, storeToken } from '../store';
-import { extractCode } from '../util';
-
-export const PKCE_SHA256 = 'S256';
-export const PKCE_PLAIN = 'plain';
-export const DEFAULT_PKCE_METHOD = PKCE_SHA256;
-
-export async function getAuthorizationCode(
-  ctx: Context,
-  contextId: string,
-  {
-    authorizationUrl: authorizationUrlRaw,
-    accessTokenUrl,
-    clientId,
-    clientSecret,
-    redirectUri,
-    scope,
-    state,
-    audience,
-    credentialsInBody,
-    pkce,
-    tokenName,
-  }: {
-    authorizationUrl: string;
-    accessTokenUrl: string;
-    clientId: string;
-    clientSecret: string;
-    redirectUri: string | null;
-    scope: string | null;
-    state: string | null;
-    audience: string | null;
-    credentialsInBody: boolean;
-    pkce: {
-      challengeMethod: string;
-      codeVerifier: string;
-    } | null;
-    tokenName: 'access_token' | 'id_token';
-  },
-): Promise<AccessToken> {
-  const tokenArgs: TokenStoreArgs = {
-    contextId,
-    clientId,
-    accessTokenUrl,
-    authorizationUrl: authorizationUrlRaw,
-  };
-
-  const token = await getOrRefreshAccessToken(ctx, tokenArgs, {
-    accessTokenUrl,
-    scope,
-    clientId,
-    clientSecret,
-    credentialsInBody,
-  });
-  if (token != null) {
-    return token;
-  }
-
-  let authorizationUrl: URL;
-  try {
-    authorizationUrl = new URL(`${authorizationUrlRaw ?? ''}`);
-  } catch {
-    throw new Error(`Invalid authorization URL "${authorizationUrlRaw}"`);
-  }
-  authorizationUrl.searchParams.set('response_type', 'code');
-  authorizationUrl.searchParams.set('client_id', clientId);
-  if (redirectUri) authorizationUrl.searchParams.set('redirect_uri', redirectUri);
-  if (scope) authorizationUrl.searchParams.set('scope', scope);
-  if (state) authorizationUrl.searchParams.set('state', state);
-  if (audience) authorizationUrl.searchParams.set('audience', audience);
-  if (pkce) {
-    authorizationUrl.searchParams.set(
-      'code_challenge',
-      pkceCodeChallenge(pkce.codeVerifier, pkce.challengeMethod),
-    );
-    authorizationUrl.searchParams.set('code_challenge_method', pkce.challengeMethod);
-  }
-
-  const dataDirKey = await getDataDirKey(ctx, contextId);
-  const authorizationUrlStr = authorizationUrl.toString();
-  console.log('[oauth2] Authorizing', authorizationUrlStr);
-
-  // biome-ignore lint/suspicious/noAsyncPromiseExecutor: none
-  const code = await new Promise<string>(async (resolve, reject) => {
-    let foundCode = false;
-    const { close } = await ctx.window.openUrl({
-      dataDirKey,
-      url: authorizationUrlStr,
-      label: 'oauth-authorization-url',
-      async onClose() {
-        if (!foundCode) {
-          reject(new Error('Authorization window closed'));
-        }
-      },
-      async onNavigate({ url: urlStr }) {
-        let code: string | null;
-        try {
-          code = extractCode(urlStr, redirectUri);
-        } catch (err) {
-          reject(err);
-          close();
-          return;
-        }
-
-        if (!code) {
-          return;
-        }
-
-        // Close the window here, because we don't need it anymore!
-        foundCode = true;
-        close();
-        resolve(code);
-      },
-    });
-  });
-
-  console.log('[oauth2] Code found');
-  const response = await fetchAccessToken(ctx, {
-    grantType: 'authorization_code',
-    accessTokenUrl,
-    clientId,
-    clientSecret,
-    scope,
-    audience,
-    credentialsInBody,
-    params: [
-      { name: 'code', value: code },
-      ...(pkce ? [{ name: 'code_verifier', value: pkce.codeVerifier }] : []),
-      ...(redirectUri ? [{ name: 'redirect_uri', value: redirectUri }] : []),
-    ],
-  });
-
-  return storeToken(ctx, tokenArgs, response, tokenName);
-}
-
-export function genPkceCodeVerifier() {
-  return encodeForPkce(randomBytes(32));
-}
-
-function pkceCodeChallenge(verifier: string, method: string) {
-  if (method === 'plain') {
-    return verifier;
-  }
-
-  const hash = encodeForPkce(createHash('sha256').update(verifier).digest());
-  return hash
-    .replace(/=/g, '') // Remove padding '='
-    .replace(/\+/g, '-') // Replace '+' with '-'
-    .replace(/\//g, '_'); // Replace '/' with '_'
-}
-
-function encodeForPkce(bytes: Buffer) {
-  return bytes
-    .toString('base64')
-    .replace(/=/g, '') // Remove padding '='
-    .replace(/\+/g, '-') // Replace '+' with '-'
-    .replace(/\//g, '_'); // Replace '/' with '_'
-}

plugins/auth-oauth2/src/grants/clientCredentials.ts

@@ -1,49 +0,0 @@
-import type { Context } from '@yaakapp/api';
-import { fetchAccessToken } from '../fetchAccessToken';
-import type { TokenStoreArgs } from '../store';
-import { getToken, storeToken } from '../store';
-import { isTokenExpired } from '../util';
-
-export async function getClientCredentials(
-  ctx: Context,
-  contextId: string,
-  {
-    accessTokenUrl,
-    clientId,
-    clientSecret,
-    scope,
-    audience,
-    credentialsInBody,
-  }: {
-    accessTokenUrl: string;
-    clientId: string;
-    clientSecret: string;
-    scope: string | null;
-    audience: string | null;
-    credentialsInBody: boolean;
-  },
-) {
-  const tokenArgs: TokenStoreArgs = {
-    contextId,
-    clientId,
-    accessTokenUrl,
-    authorizationUrl: null,
-  };
-  const token = await getToken(ctx, tokenArgs);
-  if (token && !isTokenExpired(token)) {
-    return token;
-  }
-
-  const response = await fetchAccessToken(ctx, {
-    grantType: 'client_credentials',
-    accessTokenUrl,
-    audience,
-    clientId,
-    clientSecret,
-    scope,
-    credentialsInBody,
-    params: [],
-  });
-
-  return storeToken(ctx, tokenArgs, response);
-}