Files
OpenBB/cli/openbb_cli/codegen/post_gen.py
Lucas Zimmermann 6e138eee4c fix(cli): inherit path-item-level OpenAPI parameters (#7606)
* fix(cli): inherit path-item-level OpenAPI parameters

OpenAPI 3.x lets a Path Item Object declare `parameters` shared by every
operation under that path, with operation-level entries overriding them by
(name, in). The codegen read only `op.get("parameters")`, so inherited
parameters were dropped silently — the generated command kept the URL
template but had nothing registered to fill it.

Real-world impact: the Xero Accounting API declares its required
`xero-tenant-id` header once per path item across all 138 paths. Before this
change `build_command_spec` produced 78 commands and none carried the
header, so every generated command 403s. Nothing warned.

Adds `operation_parameters()`, which merges the two levels and dereferences
both, and routes the pre-computed spec path (`build_command_spec`) and the
interactive path (`build_command_index` -> `build_parser_from_operation`)
through it. Unresolvable refs, non-dict entries, and nameless parameters are
skipped as before. Specs without path-item parameters are unaffected.

* fix(cli): narrow path-item inheritance to path and query parameters

Per review: headers do not translate into a Python interface function, and
outbound headers are transport configuration
(SystemSettings.PythonSettings.http.headers, the CLI's -H) or a security-scheme
concern — not a per-command argument.

Path-item `in: header` and `in: cookie` entries are now dropped rather than
inherited. Operation-level parameters are untouched, so an operation that
declares its own header keeps today's behavior.

Scope is now only what cannot be supplied any other way: `in: path` and
`in: query` parameters declared on the Path Item Object.

* fix(cli): merge allOf compositions in response schemas

Response-schema $refs were already expanded by deref_schema, but a schema
whose top level is an allOf composition was left unflattened. The properties
live inside the members, so a consumer reading them off the composition finds
none. fetcher_gen._data_schema looks for `properties.results`, gets nothing,
and falls through to _unwrap_schema_envelopes, which handles oneOf and anyOf
but not allOf. The generated Data model ends up with no fields.

Codat's listBills response is `allOf: [{properties: {results}}, {properties:
{_links, pageNumber, pageSize, totalResults}}]`, which produced an empty model.

merge_allof collapses a composition of object subschemas into one object
schema: properties unioned with the first declaration winning on conflict,
required unioned, and sibling keywords on the allOf node outranking members.
A composition that is not a plain intersection of object subschemas (a member
carrying its own oneOf/anyOf, or a non-object type) is returned unchanged
rather than flattened into something the spec does not describe. Nested
compositions are merged too, so a $ref inside a merged member still resolves.

Applied to extract_response_schema and extract_response_schemas.

Measured across five specs that use the pattern, counting operations whose
response schema exposes readable properties: 244 of 588 before, 394 after
(Codat Accounting 36 to 88, Codat Banking 0 to 8, Codat Commerce 1 to 11,
Rebilly 62 to 104, Box 145 to 183).

* fix(cli): merge allOf compositions in request body schemas

Same gap as the response side. request_body_parameters needs `type: object`
or `properties` to flatten a body into parameters, and an allOf composition
carries neither, so a POST or PUT generated from one gets no body parameters
at all.

extract_request_body_schema now runs merge_allof after deref_schema, matching
extract_response_schema.

Across the same five specs, counting request bodies that produce parameters:
138 of 206 before, 177 after (Codat Accounting 1 to 26 of its 30 bodies,
Rebilly 50 to 63, Box 87 to 88).

* fix(cli): stop annotation keywords blocking an allOf merge

_mergeable_allof_members required every member's keys to come from a small
whitelist, so any unrecognized keyword disqualified the whole composition.
Codat's PagingInfo carries `definitions` next to its properties, which meant
the live Codat-Accounting.yaml never merged and its response models stayed
empty. The APIs.guru copy of the same API omits that key, which is why the
earlier measurements looked clean.

The check is now a blocklist. A member blocks the merge when it carries its
own combinator (oneOf/anyOf/allOf/not), an unresolved $ref left by a cycle,
a scalar or array constraint (enum/const/items), or a type other than object.
Annotation keywords that do not affect the intersection (title, description,
examples, definitions, additionalProperties, vendor x- keys) no longer block
it, and are dropped from the merged result along with the members.

On the live Codat spec, operations whose response schema exposes readable
properties go from 36 of 127 to 114. Across the five specs measured earlier:
244 of 588 before, 488 after (was 394 under the whitelist).

Corpus check over 2,816 response and request-body extractions in 6 specs:
567 changed, every one attributable to an allOf in the pre-merge output,
0 unexplained. Twilio declares no allOf compositions and is unchanged.

* fix(cli): emit a name once when it is both a parameter and a body property

_signature_params appended request-body properties and then operation
parameters without deduplicating, so a name declared in both places produced
two function parameters with the same name and the generated module raised
SyntaxError.

Codat's push endpoints hit this: /push/bankAccounts/{accountId}/bankTransactions
declares accountId as a path parameter and repeats it in the request body, so
connections.push.bankAccounts.bankTransactions generated `accountId: str` and
`accountId: str = None` in one signature.

The operation parameter wins, since it carries the path placeholder and its own
required flag. The request payload is unchanged: _render_body_block derives body
fields from request_body_schema rather than from this list, so accountId is
still sent in the body.

This predates the path-item and allOf work in this PR. On origin/v5 the same
spec produces the same duplicate; on this branch the Codat spec generates 91
commands with 0 duplicated signatures, down from 1.

* fix(cli): use the safe identifier for keyword-named body properties

_render_body_block already writes `{'from': from_}`, keying the payload by the
wire name and reading a safe identifier, but _signature_params declared the raw
name. A body property named after a Python keyword therefore emitted
`from: str = None` and the generated module raised SyntaxError.

This did not fire before the allOf work in this PR, because a composed request
body produced no body parameters at all. Codat's Transfer body is such a
composition and has a `from` property, so connections.push.transfers started
generating invalid syntax once the body flattened.

_signature_params now emits safe_field_name(name)[0], the same helper
fetcher_gen and pydantic_gen already use. The body/query split in
_render_body_block compares against the safe names too: it previously matched
signature names against wire names, so `from_` was not recognized as a body
field and leaked into the query string as a `from_` parameter.

End to end on Codat-Accounting.yaml, generating the full extension and byte
compiling every emitted module: 136 files, 0 failures. origin/v5 emits 1 file
that does not compile (duplicate argument 'accountId').

Known gap left alone: an operation parameter named after a keyword would still
break, since the query and path lines use the raw name as a local variable.
None of the five specs checked declares one.

* fix(cli): do not treat instance data as schema, and sanitize POST identifiers

Two defects found by generating extensions from real specs and byte compiling
every emitted module.

merge_allof and deref_schema walked every value in a schema dict, including
keywords that hold instance data rather than subschemas. A `default` of
`{"allOf": [{"a": 1}, {"b": 2}]}` was rewritten to `{"type": "object"}`, and a
`$ref` key inside an example was resolved as if it were a reference. Both now
copy `default`, `example`, `examples`, `enum`, `const` and vendor `x-` values
through untouched.

_signature_params emitted operation parameter names verbatim, so a wire name
that is not a Python identifier produced invalid syntax. Rebilly declares an
`Organization-Id` header and a `REB-APIKEY` security header, which emitted
`REB-APIKEY: str = None`. It now uses safe_field_name, matching fetcher_gen,
and _render_body_block keys the query dict by the wire name while reading the
safe identifier so the request is unchanged.

This surfaced through the allOf work rather than being caused by it: a composed
request body used to yield no properties, so `has_body` was false in
package_gen and the command was generated as a GET fetcher, where identifiers
were already sanitized. With bodies flattening, 14 of Codat's 24 POST endpoints
correctly move to the POST path, which had never been exercised by these specs.

Generating the full extension and compiling every module:

  Codat-Accounting.yaml   v5: 1 failure    branch: 0   (136 files)
  Rebilly 2.1             v5: 14 failures  branch: 1   (97 files)

The one remaining Rebilly failure is `async def 3dsecure(` in the router, which
fails identically on v5. Sanitizing that is a naming decision about the command
surface, so it is left alone here.

Known gap: a non-credential header parameter is still placed in the query
string on the POST path. Pre-existing, and unchanged by this PR.

* fix(cli): resolve signature collisions on the emitted identifier

The previous dedupe compared wire names, but the failure it prevents depends on
the sanitized identifier. Two wire names can collapse onto one (`from` and
`from_`, `Organization-Id` and `Organization_Id`), and operation_parameters
keeps a name declared twice under different `in` locations by design, so both
cases could still emit a duplicate argument.

_signature_params now tracks the identifiers it has emitted and skips anything
that would repeat one. Emission order is unchanged, so existing signatures are
byte-identical; only genuinely colliding names are dropped, and operation
parameters still win over body properties.

Neither collision occurs in Codat-Accounting.yaml or Rebilly 2.1. This closes
the class rather than the instance, since the instances are what this PR has
been finding.

Generation unchanged: Codat 136 files 0 failures, Rebilly 97 files 1 failure
(`async def 3dsecure(`, identical on v5).

* test(cli): cover the instance-data guard, and drop a redundant branch

Mutation checking the new tests (revert each fix, confirm its test fails)
found two problems with the previous commits.

The guard that stops merge_allof and deref_schema from walking into `default`,
`example`, `enum`, `const` and vendor values shipped with no test at all. It is
now covered from both directions: a default holding an `allOf` key keeps its
value, and a `$ref` inside a default stays a literal while a real reference
beside it still resolves.

The body-property loop also carried a redundant check. It tested the raw wire
name against the operation parameter names before testing the sanitized one,
but `operation_param_names` holds both forms and `safe_field_name` is idempotent
on identifiers, so the first test could never fire alone. Reverting it left
every test passing, which is what surfaced it. Removed, and the sanitized name
is now computed once.

All nine mutations are caught by the suite: both data guards, the allOf
blocklist in each direction, the response merge wiring, body/parameter
precedence, the keyword identifier, the body/query split and the
emitted-identifier dedupe.

cli/tests at 1,954 passed against the same 80 environment failures as the base.
Generation unchanged: Codat 136 files 0 failures, Rebilly 97 files 1 failure.

* fix(cli): route required path-item headers/cookies through credential handling

* fix(cli): narrow Popen.stdin/stdout for ty in run_in_obb fixture

---------

Co-authored-by: deeleeramone <>
2026-09-25 14:04:07 -07:00

783 lines
26 KiB
Python

"""Generate free-form router modules for POST endpoints with request bodies."""
from __future__ import annotations
import re
from dataclasses import dataclass, field
from typing import Any, cast
from openbb_cli.codegen.credentials import (
credentials_from_command,
filter_user_params,
)
from openbb_cli.codegen.pydantic_gen import (
GeneratedClass,
class_name_from,
consolidate_imports,
generate_class,
safe_field_name,
)
@dataclass
class PostCommandSpec:
"""Per-command inputs for a POST router emitter.
Parameters
----------
name : str
Dotted command path from the spec.
cmd_spec : dict
The command's spec entry.
base_url : str
Upstream API root, no trailing slash.
api_prefix : str
Path prefix shared across every command in the spec.
provider_name : str
Snake-case provider identifier.
"""
name: str
cmd_spec: dict[str, Any]
base_url: str
api_prefix: str
provider_name: str
@dataclass
class GeneratedPostCommand:
"""Output of ``generate_post_command_module``.
Parameters
----------
module_name : str
Snake-case module filename (without ``.py``).
function_name : str
The router function name.
body_class : str, optional
Name of the emitted body element class, if a body is present.
data_class : str
Name of the emitted response-row class.
source : str
Full module source ready to write to disk.
credentials_used : dict
Same shape as ``GeneratedFetcher.credentials_used``.
"""
module_name: str
function_name: str
data_class: str
source: str
body_class: str | None = None
credentials_used: dict[str, dict[str, str]] = field(default_factory=dict)
_PATH_TEMPLATE_RE = re.compile(r"\{([^}]+)\}")
def _module_name_from_command(name: str) -> str:
"""Convert a dotted command path to a snake_case module identifier."""
safe = re.sub(r"[^0-9a-zA-Z]+", "_", name).strip("_")
if not safe:
safe = "command"
if safe[0].isdigit():
safe = f"_{safe}"
return safe.lower()
def _path_template_keys(url_path: str) -> list[str]:
"""Extract ``{placeholder}`` names from a URL template, in declaration order."""
return [m.group(1) for m in _PATH_TEMPLATE_RE.finditer(url_path)]
def _resolve_url_path(api_prefix: str, url_path: str) -> str:
"""Combine api_prefix with url_path; the prefix is dropped if already present."""
prefix = ("/" + api_prefix.strip("/")) if api_prefix.strip("/") else ""
path = url_path if url_path.startswith("/") else "/" + url_path
if prefix and path.startswith(prefix + "/"):
return path
if prefix:
return prefix + path if not path.startswith(prefix) else path
return path
def _python_type_from_param(param: dict[str, Any]) -> str:
"""Render a Python type annotation for a normalized parameter entry.
Parameters
----------
param : dict
Spec parameter entry.
Returns
-------
str
Annotation text suitable for the generated function signature.
"""
base_type = {
"string": "str",
"integer": "int",
"number": "float",
"boolean": "bool",
}.get(param.get("type", "string"), "str")
if param.get("choices"):
rendered = ", ".join(repr(c) for c in param["choices"])
base_type = f"Literal[{rendered}]"
if param.get("is_list"):
return f"list[{base_type}]"
return base_type
def _array_item_class(
body_schema: dict[str, Any],
*,
parent_class_name: str,
) -> tuple[str | None, GeneratedClass | None, str | None]:
"""Detect a body's array-of-objects field and emit its item class.
Parameters
----------
body_schema : dict
The request_body_schema.
parent_class_name : str
Camel-case base for the generated item class name.
Returns
-------
tuple
``(field_name, item_class, type_annotation)``.
"""
if body_schema.get("type") == "array":
items = body_schema.get("items")
if isinstance(items, dict):
item_class_name = class_name_from(parent_class_name, "BodyItem")
item_class = generate_class(
items,
class_name=item_class_name,
base_class="Data",
docstring=f"Body item for {parent_class_name}.",
)
return ("data", item_class, f"list[{item_class_name}]")
return (None, None, None)
properties = body_schema.get("properties") or {}
for name, schema in properties.items():
if not isinstance(schema, dict):
continue
if schema.get("type") != "array":
continue
items = schema.get("items")
if not isinstance(items, dict):
continue
if items.get("type") != "object" and "properties" not in items:
continue
item_class_name = class_name_from(parent_class_name, "BodyItem")
item_class = generate_class(
items,
class_name=item_class_name,
base_class="Data",
docstring=f"Body item for {parent_class_name}.",
)
return (name, item_class, f"list[{item_class_name}]")
return (None, None, None)
def _data_schema(cmd_spec: dict[str, Any]) -> dict[str, Any]:
"""Pull the per-row data schema out of a response_schema (same logic as fetcher_gen)."""
response = cmd_spec.get("response_schema") or {}
if not isinstance(response, dict):
return {}
properties = response.get("properties") or {}
results = properties.get("results")
if isinstance(results, dict):
non_null = [
v
for v in results.get("anyOf") or [results]
if isinstance(v, dict) and v.get("type") != "null"
]
if non_null:
inner = non_null[0]
if inner.get("type") == "array" and isinstance(inner.get("items"), dict):
inner = inner["items"]
if isinstance(inner.get("oneOf"), list):
concrete = [c for c in inner["oneOf"] if isinstance(c, dict)]
if concrete:
inner = concrete[0]
return inner
return _unwrap_schema_envelopes(response)
def _unwrap_schema_envelopes(schema: Any) -> dict[str, Any]:
"""Strip schema envelopes that ``unpack_response`` strips at runtime."""
if not isinstance(schema, dict):
return {}
typed: dict[str, Any] = schema
if typed.get("type") == "array":
return _unwrap_schema_envelopes(typed.get("items"))
combinator_target = _first_non_null_combinator_variant(typed)
if combinator_target is not None:
return _unwrap_schema_envelopes(combinator_target)
if _is_scalar_schema(typed):
return _wrap_scalar_as_value(typed)
props = typed.get("properties")
if not isinstance(props, dict) or not props:
return typed
inner = _envelope_inner_schema(typed, props)
if inner is not None:
return _unwrap_schema_envelopes(inner)
return typed
def _first_non_null_combinator_variant(schema: dict[str, Any]) -> dict[str, Any] | None:
"""Return the first non-null variant of a top-level ``oneOf`` / ``anyOf``."""
for combinator in ("oneOf", "anyOf"):
variants = schema.get(combinator)
if not isinstance(variants, list):
continue
for variant in variants:
if isinstance(variant, dict) and variant.get("type") != "null":
return cast(dict[str, Any], variant)
return None
def _envelope_inner_schema(
typed: dict[str, Any], # noqa: ARG001
props: dict[str, Any],
) -> dict[str, Any] | None:
"""Resolve the inner row schema when ``typed`` is a recognized envelope."""
if len(props) == 1:
only_value = next(iter(props.values()))
if isinstance(only_value, dict):
only_dict = cast(dict[str, Any], only_value)
if only_dict.get("type") == "array":
items = only_dict.get("items")
return cast(dict[str, Any], items) if isinstance(items, dict) else None
if (
only_dict.get("properties")
or only_dict.get("oneOf")
or only_dict.get("anyOf")
):
return only_dict
array_keys = [
k for k, v in props.items() if isinstance(v, dict) and v.get("type") == "array"
]
# Only resolve as an envelope if there is exactly one list of all dicts,
# or if the list is the only element present.
if len(array_keys) == 1:
items = props[array_keys[0]].get("items")
if isinstance(items, dict) and not _is_scalar_schema(items):
return cast(dict[str, Any], items)
return None
def _is_scalar_schema(schema: dict[str, Any]) -> bool:
"""Return True when the schema represents a primitive (string/number/etc.)."""
return schema.get("type") in {
"string",
"integer",
"number",
"boolean",
} and not schema.get("properties")
def _wrap_scalar_as_value(schema: dict[str, Any]) -> dict[str, Any]:
"""Promote a scalar schema to ``{type: object, properties: {value: scalar}}``."""
return {
"type": "object",
"properties": {"value": schema},
"required": ["value"],
}
def _credential_lookup_lines(
creds: dict[str, dict[str, str]], provider_name: str
) -> list[str]:
"""Render the credential extraction block for the POST router body.
Parameters
----------
creds : dict
Mapping from canonical credential names to ``{name, in}`` info.
provider_name : str
Snake-case provider name.
Returns
-------
list of str
Indented lines that pull each credential into ``_cred_<canonical>`` locals.
"""
if not creds:
return []
lines: list[str] = [" _user_creds = cc.user_settings.credentials"]
for canonical in sorted(creds):
var = f"_cred_{canonical}"
attr = f"{provider_name}_{canonical}"
lines.append(f' {var} = (getattr(_user_creds, "{attr}", "") or "")')
return lines
def _signature_params(
cmd_spec: dict[str, Any],
array_field: str | None,
array_annotation: str | None,
has_credentials: bool,
) -> list[tuple[str, str, str | None, bool, Any]]:
"""Build the function parameter list (name, annotation, description, required, default).
Parameters
----------
cmd_spec : dict
Spec command entry.
array_field : str, optional
Name of the body's array-of-objects field.
array_annotation : str, optional
The Python annotation for that field.
has_credentials : bool
Whether the command needs credentials.
Returns
-------
list of tuple
Per-parameter tuples in declaration order.
"""
out: list[tuple[str, str, str | None, bool, Any]] = []
if has_credentials:
out.append(
(
"cc",
"CommandContext",
"Provides access to user-configured credentials.",
True,
None,
)
)
if array_field and array_annotation:
out.append((array_field, array_annotation, "Body data rows.", True, None))
body_props = (cmd_spec.get("request_body_schema") or {}).get("properties") or {}
body_required = set(
(cmd_spec.get("request_body_schema") or {}).get("required") or []
)
# A name can be declared both as an operation parameter and as a request-body
# property — Codat's push endpoints put ``accountId`` in the URL template and
# in the body. Emitting both produces two parameters with the same name, which
# is a SyntaxError. The operation parameter wins: it carries the path
# placeholder and its own ``required``. The payload is unaffected, because
# ``_render_body_block`` reads the body fields from ``request_body_schema``
# rather than from this list.
#
# Two wire names can also collapse onto one identifier once sanitized
# (``from`` and ``from_``, ``Organization-Id`` and ``Organization_Id``), and
# ``operation_parameters`` keeps a name declared twice under different ``in``
# locations. Collisions are therefore resolved on the emitted identifier, not
# on the wire name, so a duplicate argument cannot be generated at all.
operation_params = [
p for p in filter_user_params(cmd_spec.get("parameters") or []) if p.get("name")
]
operation_param_names = {p["name"] for p in operation_params}
operation_param_names |= {safe_field_name(p["name"])[0] for p in operation_params}
emitted: set[str] = {entry[0] for entry in out}
for name, schema in body_props.items():
if name == array_field:
continue
if not isinstance(schema, dict):
continue
safe = safe_field_name(name)[0]
if safe in operation_param_names or safe in emitted:
continue
emitted.add(safe)
ann = _python_type_from_param(
{
"type": schema.get("type"),
"is_list": schema.get("type") == "array",
"choices": schema.get("enum"),
}
)
out.append(
(
# ``_render_body_block`` already writes ``{'from': from_}``, keying the
# payload by the wire name and reading the safe identifier, so the
# signature has to declare the safe one. Codat's Transfer body has a
# property named ``from``, which is a keyword.
safe,
ann,
schema.get("description") or schema.get("title"),
name in body_required,
schema.get("default"),
)
)
for raw in operation_params:
name = raw["name"]
safe = safe_field_name(name)[0]
if safe in emitted:
continue
emitted.add(safe)
ann = _python_type_from_param(raw)
out.append(
(
# Wire names are not always identifiers. Rebilly declares
# ``Organization-Id`` and a ``REB-APIKEY`` security header, which
# emitted ``REB-APIKEY: str = None``. The fetcher path already
# sanitizes these; this one has to match it.
safe,
ann,
raw.get("help"),
bool(raw.get("required")),
raw.get("default"),
)
)
out.sort(key=lambda entry: (0 if entry[0] == "cc" else 1, 0 if entry[3] else 1))
return out
def _render_signature(
func_name: str,
params: list[tuple[str, str, str | None, bool, Any]],
return_annotation: str,
) -> str:
"""Render ``async def func_name(...) -> return_annotation:`` lines.
Parameters
----------
func_name : str
Generated function identifier.
params : list of tuple
Output of ``_signature_params``.
return_annotation : str
The return type annotation text.
Returns
-------
str
Multi-line signature ready for the function body to follow.
"""
if not params:
return f"async def {func_name}() -> {return_annotation}:"
lines = [f"async def {func_name}("]
for name, annotation, _, required, default in params:
if required:
lines.append(f" {name}: {annotation},")
else:
default_repr = render_default(default)
lines.append(f" {name}: {annotation} = {default_repr},")
lines.append(f") -> {return_annotation}:")
return "\n".join(lines)
def render_default(default: Any) -> str:
"""Render a Python literal for a default value.
Parameters
----------
default : Any
The literal default.
Returns
-------
str
The literal text usable on the right-hand side of ``= default``.
"""
if default is None:
return "None"
if isinstance(default, bool):
return "True" if default else "False"
return repr(default)
def generate_post_command_module(spec: PostCommandSpec) -> GeneratedPostCommand:
"""Render a POST command module for one spec command.
Parameters
----------
spec : PostCommandSpec
Per-command inputs (see ``PostCommandSpec``).
Returns
-------
GeneratedPostCommand
The emitted module source plus metadata the package builder
needs to register the command in the router.
"""
module_name = _module_name_from_command(spec.name)
base_class_name = class_name_from(spec.name)
function_name = module_name
data_class = f"{base_class_name}Data"
body_field, body_item_class, body_annotation = _array_item_class(
spec.cmd_spec.get("request_body_schema") or {},
parent_class_name=base_class_name,
)
data_schema = _data_schema(spec.cmd_spec) or {"type": "object"}
data_generated = generate_class(
data_schema,
class_name=data_class,
base_class="BaseModel",
docstring=f"Response row for {spec.name}.",
)
creds = credentials_from_command(spec.cmd_spec)
cred_lines = _credential_lookup_lines(creds, spec.provider_name)
params = _signature_params(
spec.cmd_spec, body_field, body_annotation, has_credentials=bool(creds)
)
return_annotation = f"OBBject[list[{data_class}]]"
signature = _render_signature(function_name, params, return_annotation)
path_params = _path_template_keys(spec.cmd_spec.get("url_path") or "")
full_url_path = _resolve_url_path(
spec.api_prefix, spec.cmd_spec.get("url_path") or ""
)
body_block = _render_body_block(
cmd_spec=spec.cmd_spec,
body_field=body_field,
creds=creds,
path_params=path_params,
url_path_template=full_url_path,
base_url=spec.base_url.rstrip("/"),
cred_lines=cred_lines,
data_class=data_class,
params=params,
)
imports = {
"import json as _json",
"from typing import Any",
"from openbb_core.app.model.abstract.error import OpenBBError",
"from openbb_core.app.model.obbject import OBBject",
"from openbb_core.provider.abstract.data import Data",
"from openbb_core.provider.utils.helpers import "
"get_async_requests_session, get_querystring",
"from pydantic import BaseModel, Field",
"from ....utils import unpack_response",
}
if creds:
imports.add("from openbb_core.app.model.command_context import CommandContext")
imports.update(data_generated.collect_imports())
if body_item_class:
imports.update(body_item_class.collect_imports())
if any(p[1].startswith("Literal[") for p in params):
imports.add("from typing import Literal")
sorted_imports = consolidate_imports(imports)
description = (spec.cmd_spec.get("description") or f"POST {spec.name}.").strip()
summary = description.split("\n", 1)[0]
parts: list[str] = [
f'"""POST router function for {spec.name} — generated from spec.\n\n'
f"Hits ``{spec.base_url.rstrip('/')}{full_url_path}`` via HTTP POST.\n"
f'"""',
"",
]
stdlib = [
i
for i in sorted_imports
if i.startswith(
("from typing", "from datetime", "import typing", "import datetime")
)
]
third_party = [i for i in sorted_imports if i not in stdlib]
if stdlib:
parts.extend(stdlib)
parts.append("")
if third_party:
parts.extend(third_party)
parts.append("")
parts.append("")
if body_item_class:
for cls in body_item_class.flatten():
parts.append(cls.source)
for cls in data_generated.flatten():
parts.append(cls.source)
cleaned_summary = (description or summary).strip()
if not cleaned_summary:
cleaned_summary = summary
if not cleaned_summary.endswith((".", "!", "?")):
cleaned_summary += "."
if "\n" in cleaned_summary:
first, _, rest = cleaned_summary.partition("\n")
rest_indented = "\n".join(
f" {line}" if line.strip() else "" for line in rest.split("\n")
)
func_doc = f' """{first}\n\n{rest_indented}\n """'
else:
func_doc = f' """{cleaned_summary}"""'
parts.append(f"{signature}\n{func_doc}\n{body_block}\n")
return GeneratedPostCommand(
module_name=module_name,
function_name=function_name,
body_class=body_item_class.name if body_item_class else None,
data_class=data_class,
source="\n".join(parts).rstrip() + "\n",
credentials_used=creds,
)
def _render_body_block(
*,
cmd_spec: dict[str, Any],
body_field: str | None,
creds: dict[str, dict[str, str]],
path_params: list[str],
url_path_template: str,
base_url: str,
cred_lines: list[str],
data_class: str,
params: list[tuple[str, str, str | None, bool, Any]],
) -> str:
"""Render the function body for a POST command.
Parameters
----------
cmd_spec : dict
The spec command entry.
body_field : str, optional
Name of the array-of-objects body field, if any.
creds : dict
Credential entries from ``credentials_from_command``.
path_params : list of str
URL-template placeholders to substitute.
url_path_template : str
URL path with placeholders intact.
base_url : str
Upstream API root, no trailing slash.
cred_lines : list of str
Credential-extraction source lines.
data_class : str
Name of the response Data class.
params : list of tuple
Function parameters.
Returns
-------
str
Full function body.
"""
body_props = (cmd_spec.get("request_body_schema") or {}).get("properties") or {}
body_field_names = list(body_props)
# The signature declares the safe identifier for a body property, so the
# body/query split has to compare against those, not the wire names.
# Otherwise a keyword-named property such as ``from`` is not recognized as a
# body field and leaks into the query string as ``from_``.
body_safe_names = {safe_field_name(n)[0] for n in body_field_names}
query_field_names = [
n for n, _, _, _, _ in params if n != "cc" and n not in body_safe_names
]
# The signature carries safe identifiers, but the request has to go out under
# the wire names, so keep a map back for the query keys and the path check.
wire_by_safe = {
safe_field_name(p["name"])[0]: p["name"]
for p in filter_user_params(cmd_spec.get("parameters") or [])
if p.get("name")
}
lines: list[str] = []
lines.extend(cred_lines)
if path_params:
sub_args = ", ".join(f"{p}={p}" for p in path_params)
lines.append(f" _path = {url_path_template!r}.format({sub_args})")
else:
lines.append(f" _path = {url_path_template!r}")
lines.append(" _query_dict: dict[str, Any] = {}")
for name in query_field_names:
wire = wire_by_safe.get(name, name)
if wire in path_params or name in path_params:
continue
lines.append(f" if {name} is not None:")
lines.append(f" _query_dict[{wire!r}] = {name}")
for canonical, info in creds.items():
if info["in"] != "query":
continue
wire_name = info["name"]
var = f"_cred_{canonical}"
lines.append(f" if {var}:")
lines.append(f" _query_dict[{wire_name!r}] = {var}")
lines.append(" _query_string = get_querystring(_query_dict, [])")
lines.append(
f' _url = f"{base_url}{{_path}}" + ("?" + _query_string if _query_string else "")'
)
lines.append(" _headers: dict[str, str] = {}")
for canonical, info in creds.items():
if info["in"] != "header":
continue
wire_name = info["name"]
var = f"_cred_{canonical}"
lines.append(f" if {var}:")
lines.append(f" _headers[{wire_name!r}] = {var}")
lines.append(" _cookies: dict[str, str] = {}")
for canonical, info in creds.items():
if info["in"] != "cookie":
continue
wire_name = info["name"]
var = f"_cred_{canonical}"
lines.append(f" if {var}:")
lines.append(f" _cookies[{wire_name!r}] = {var}")
body_top_is_array = (cmd_spec.get("request_body_schema") or {}).get(
"type"
) == "array"
if body_top_is_array and body_field:
safe = safe_field_name(body_field)[0]
lines.append(
" _body: list[dict[str, Any]] = "
f'[_item.model_dump(mode="json") for _item in {safe}]'
)
else:
body_entries: list[str] = []
for name in body_field_names:
safe = safe_field_name(name)[0]
if name == body_field:
body_entries.append(
f' {name!r}: [_item.model_dump(mode="json") for _item in {safe}],'
)
else:
body_entries.append(f" {name!r}: {safe},")
if body_entries:
body_lines = "\n".join(body_entries)
lines.append(f" _body: dict[str, Any] = {{\n{body_lines}\n }}")
else:
lines.append(" _body: dict[str, Any] = {}")
lines.append(" _rows: list[dict[str, Any]] = []")
lines.append(" _metadata: dict[str, Any] = {}")
lines.append(" async with await get_async_requests_session() as _session:")
lines.append(
" async with await _session.request("
'"POST", _url, headers=_headers, cookies=_cookies, json=_body) as _resp:'
)
lines.append(" _ct = (_resp.headers.get('Content-Type') or '').lower()")
lines.append(" _text = await _resp.text()")
lines.append(" if _resp.status >= 400:")
lines.append(
" raise OpenBBError("
"f'HTTP {_resp.status} from {_url}: {_text[:500]}')"
)
lines.append(
" if 'json' in _ct or _text.lstrip().startswith(('{', '[')):"
)
lines.append(" try:")
lines.append(" _payload = _json.loads(_text)")
lines.append(" except ValueError as _exc:")
lines.append(
" raise OpenBBError("
"f'Upstream {_url} returned malformed JSON: {_exc}') from _exc"
)
lines.append(" _rows, _metadata = unpack_response(_payload)")
lines.append(" else:")
lines.append(" _rows = [{'content': _text, 'content_type': _ct}]")
lines.append(f" _typed = [{data_class}(**row) for row in _rows]")
lines.append(" if _metadata:")
lines.append(
' return OBBject(results=_typed, extra={"results_metadata": _metadata})'
)
lines.append(" return OBBject(results=_typed)")
return "\n".join(lines)