fix(ui-react): generate client from combined spec for npm run generate

[gustavosbarreto]

Fixes #6386.

npm run generate for @shellhub/console defaulted its input to http://openapi:8080/openapi/openapi.json. That URL is served by the openapi container, which picks community-openapi.yaml, enterprise-openapi.yaml, or cloud-openapi.yaml based on SHELLHUB_CLOUD / SHELLHUB_ENTERPRISE. Running the script on a community instance produced a client missing the enterprise and cloud schemas, so any code referencing them broke lint and type-check.

The dev entrypoint avoided this by bundling openapi/spec/openapi.yaml (combined, all editions) directly, but a manual npm run generate after startup overwrote that client with the edition-filtered one. Easy footgun.

What changes

• New ui-react/scripts/generate-client.sh: bundles openapi/spec/openapi.yaml via redocly into /tmp/openapi.json and runs openapi-ts. If OPENAPI_SPEC_PATH is already set (the production Dockerfile builder stage does this), it skips the bundle step and uses that spec.
• apps/console/package.json: generate now calls the script.
• openapi-ts.config.ts: throws if OPENAPI_SPEC_PATH is unset, with a message pointing at npm run generate. The old HTTP fallback was the bug source.
• scripts/entrypoint-dev.sh: replaces the inline bundle + generate with npm run generate, then starts a chokidar-cli watcher on openapi/spec/**/*.yaml in the background that re-runs the same script on changes. Vite HMR picks up the regenerated types.gen.ts without recreating the container.

The production Dockerfile is unchanged: its builder stage still bundles into apps/console/openapi.json and runs OPENAPI_SPEC_PATH=./openapi.json npm run generate -w @shellhub/console, which the new script honors.

[github-actions]

Claude finished @gustavosbarreto's task in 55s —— View job

---

Code Review Complete

Reviewed 4 files across code quality, security, testing, language patterns, and architecture — no issues found. The code looks good as-is.

Highlights:

• The openapi-ts.config.ts guard correctly prevents the footgun of generating from the edition-filtered URL.
• generate-client.sh cleanly centralizes the bundle+generate logic with proper set -e and OPENAPI_SPEC_PATH pass-through for the Dockerfile builder stage.
• The Dockerfile production build path was verified unchanged — the spec-bundler stage pre-bundles and the builder stage sets OPENAPI_SPEC_PATH, which the new script honors by skipping the bundle step.
• The chokidar watcher in entrypoint-dev.sh is a nice DX improvement for hot-reloading spec changes without container restarts.
• No cross-repo impact on the cloud/enterprise repos.

To request another review round, comment /review.

---