itsi 0.2.2 → 0.2.4

data/crates/itsi_server/src/services/itsi_http_service.rs

@@ -1,14 +1,15 @@
 use crate::default_responses::{NOT_FOUND_RESPONSE, TIMEOUT_RESPONSE};
 use crate::ruby_types::itsi_server::itsi_server_config::{ItsiServerTokenPreference, ServerParams};
 use crate::server::binds::listener::ListenerInfo;
-use crate::server::http_message_types::{ConversionExt, HttpResponse, RequestExt, ResponseFormat};
+use crate::server::http_message_types::{
+    ConversionExt, HttpRequest, HttpResponse, RequestExt, ResponseFormat,
+};
 use crate::server::lifecycle_event::LifecycleEvent;
 use crate::server::middleware_stack::MiddlewareLayer;
 use crate::server::request_job::RequestJob;
 use crate::server::serve_strategy::single_mode::RunningPhase;
 use crate::server::signal::send_lifecycle_event;
-use chrono;
-use chrono::Local;
+use chrono::{self, DateTime, Local};
 use either::Either;
 use http::header::ACCEPT_ENCODING;
 use http::{HeaderValue, Request};
@@ -18,6 +19,7 @@ use itsi_error::ItsiError;
 use regex::Regex;
 use std::sync::atomic::{AtomicBool, Ordering};
 use std::sync::OnceLock;
+use std::time::{Duration, Instant};
 use tracing::error;
 
 use std::{future::Future, ops::Deref, pin::Pin, sync::Arc};
@@ -68,17 +70,16 @@ impl Deref for RequestContextInner {
 }
 
 pub struct RequestContextInner {
-    pub request_id: u128,
+    pub request_id: u64,
     pub service: ItsiHttpService,
     pub accept: ResponseFormat,
     pub matching_pattern: Option<Arc<Regex>>,
     pub origin: OnceLock<Option<String>>,
     pub response_format: OnceLock<ResponseFormat>,
-    pub start_time: chrono::DateTime<chrono::Utc>,
-    pub request: Option<Arc<Request<Incoming>>>,
-    pub request_start_time: OnceLock<chrono::DateTime<Local>>,
+    pub request_start_time: OnceLock<DateTime<Local>>,
+    pub start_instant: Instant,
     pub if_none_match: OnceLock<Option<String>>,
-    pub supported_encoding_set: Vec<HeaderValue>,
+    pub supported_encoding_set: OnceLock<Vec<HeaderValue>>,
     pub is_ruby_request: Arc<AtomicBool>,
 }
 
@@ -87,27 +88,38 @@ impl HttpRequestContext {
         service: ItsiHttpService,
         matching_pattern: Option<Arc<Regex>>,
         accept: ResponseFormat,
-        supported_encoding_set: Vec<HeaderValue>,
         is_ruby_request: Arc<AtomicBool>,
     ) -> Self {
         HttpRequestContext {
             inner: Arc::new(RequestContextInner {
-                request_id: rand::random::<u128>(),
+                request_id: rand::random::<u64>(),
                 service,
                 matching_pattern,
                 accept,
                 origin: OnceLock::new(),
                 response_format: OnceLock::new(),
-                start_time: chrono::Utc::now(),
-                request: None,
                 request_start_time: OnceLock::new(),
+                start_instant: Instant::now(),
                 if_none_match: OnceLock::new(),
-                supported_encoding_set,
+                supported_encoding_set: OnceLock::new(),
                 is_ruby_request,
             }),
         }
     }
 
+    pub fn set_supported_encoding_set(&self, req: &HttpRequest) {
+        let supported_encoding_set = req
+            .headers()
+            .get_all(ACCEPT_ENCODING)
+            .into_iter()
+            .cloned()
+            .collect::<Vec<_>>();
+        self.inner
+            .supported_encoding_set
+            .set(supported_encoding_set)
+            .unwrap();
+    }
+
     pub fn set_origin(&self, origin: Option<String>) {
         self.inner.origin.set(origin).unwrap();
     }
@@ -121,28 +133,29 @@ impl HttpRequestContext {
     }
 
     pub fn short_request_id(&self) -> String {
-        format!("{:016x}", self.inner.request_id & 0xffff_ffff_ffff_ffff)
+        format!("{:08x}", self.inner.request_id & 0xffff_ffff)
     }
 
     pub fn request_id(&self) -> String {
-        format!("{:016x}", self.inner.request_id)
+        format!("{:08x}", self.inner.request_id)
     }
 
-    pub fn track_start_time(&self) {
+    pub fn init_logging_params(&self) {
         self.inner
             .request_start_time
             .get_or_init(chrono::Local::now);
     }
 
-    pub fn start_time(&self) -> Option<chrono::DateTime<Local>> {
+    pub fn start_instant(&self) -> Instant {
+        self.inner.start_instant
+    }
+
+    pub fn start_time(&self) -> Option<DateTime<Local>> {
         self.inner.request_start_time.get().cloned()
     }
 
-    pub fn get_response_time(&self) -> Option<chrono::TimeDelta> {
-        self.inner
-            .request_start_time
-            .get()
-            .map(|instant| Local::now() - instant)
+    pub fn get_response_time(&self) -> Duration {
+        self.inner.start_instant.elapsed()
     }
 
     pub fn set_response_format(&self, format: ResponseFormat) {
@@ -152,6 +165,10 @@ impl HttpRequestContext {
     pub fn response_format(&self) -> &ResponseFormat {
         self.inner.response_format.get().unwrap()
     }
+
+    pub fn supported_encoding_set(&self) -> Option<&Vec<HeaderValue>> {
+        self.inner.supported_encoding_set.get()
+    }
 }
 
 const SERVER_TOKEN_VERSION: HeaderValue =
@@ -170,12 +187,7 @@ impl Service<Request<Incoming>> for ItsiHttpService {
         let accept: ResponseFormat = req.accept().into();
         let accept_clone = accept.clone();
         let is_single_mode = self.server_params.workers == 1;
-        let supported_encoding_set = req
-            .headers()
-            .get_all(ACCEPT_ENCODING)
-            .into_iter()
-            .cloned()
-            .collect::<Vec<_>>();
+
         let request_timeout = self.server_params.request_timeout;
         let is_ruby_request = Arc::new(AtomicBool::new(false));
         let irr_clone = is_ruby_request.clone();
@@ -187,7 +199,6 @@ impl Service<Request<Incoming>> for ItsiHttpService {
                 self_clone,
                 matching_pattern,
                 accept_clone.clone(),
-                supported_encoding_set,
                 irr_clone,
             );
             let mut depth = 0;
@@ -229,8 +240,8 @@ impl Service<Request<Incoming>> for ItsiHttpService {
             Ok(resp)
         };
 
-        Box::pin(async move {
-            if let Some(timeout_duration) = request_timeout {
+        if let Some(timeout_duration) = request_timeout {
+            Box::pin(async move {
                 match timeout(timeout_duration, service_future).await {
                     Ok(result) => result,
                     Err(_) => {
@@ -249,9 +260,9 @@ impl Service<Request<Incoming>> for ItsiHttpService {
                         Ok(TIMEOUT_RESPONSE.to_http_response(accept).await)
                     }
                 }
-            } else {
-                service_future.await
-            }
-        })
+            })
+        } else {
+            Box::pin(service_future)
+        }
     }
 }

data/crates/itsi_server/src/services/static_file_server.rs

@@ -51,6 +51,10 @@ pub static ROOT_STATIC_FILE_SERVER: LazyLock<StaticFileServer> = LazyLock::new(|
         not_found_behavior: NotFoundBehavior::Error(ErrorResponse::not_found()),
         serve_hidden_files: false,
         allowed_extensions: vec!["html".to_string(), "css".to_string(), "js".to_string()],
+        miss_cache: Cache::builder()
+            .max_capacity(1000)
+            .time_to_live(Duration::from_secs(1))
+            .build(),
     })
     .unwrap()
 });
@@ -85,6 +89,7 @@ pub struct StaticFileServerConfig {
     pub headers: Option<HashMap<String, String>>,
     pub serve_hidden_files: bool,
     pub allowed_extensions: Vec<String>,
+    pub miss_cache: Cache<String, NotFoundBehavior>,
 }
 
 #[derive(Debug, Clone)]
@@ -389,6 +394,29 @@ impl StaticFileServer {
         abs_path: &str,
         accept: ResponseFormat,
     ) -> std::result::Result<ResolvedAsset, NotFoundBehavior> {
+        let ext_opt = Path::new(key)
+            .extension()
+            .and_then(|e| e.to_str())
+            .map(|s| s.to_lowercase());
+
+        // If the allowed list is non-empty, enforce membership
+        if !self.allowed_extensions.is_empty() {
+            match ext_opt {
+                Some(ref ext)
+                    if self
+                        .allowed_extensions
+                        .iter()
+                        .any(|ae| ae.eq_ignore_ascii_case(ext)) => {}
+                None if self.config.try_html_extension => {}
+                _ => {
+                    return Err(self.config.not_found_behavior.clone());
+                }
+            }
+        }
+
+        if let Some(cached_nf) = self.miss_cache.get(key) {
+            return Err(cached_nf.clone());
+        }
         // First check if we have a cached mapping for this key
         if let Some(path) = self.key_to_path.lock().await.get(key) {
             // Check if the cached entry is still valid
@@ -449,7 +477,6 @@ impl StaticFileServer {
 
         let mut full_path = self.config.root_dir.clone();
         full_path.push(normalized_path);
-        debug!("Resolving path {:?}", full_path);
         // Check if path exists and is a file
         match tokio::fs::metadata(&full_path).await {
             Ok(metadata) => {
@@ -561,7 +588,6 @@ impl StaticFileServer {
             }
             Err(_) => {
                 // Path doesn't exist, try with .html extension if configured
-                debug!("Path doesn't exist");
                 if self.config.try_html_extension {
                     let mut html_path = full_path.clone();
                     html_path.set_extension("html");
@@ -592,7 +618,9 @@ impl StaticFileServer {
         }
 
         // If we get here, we couldn't resolve the key to a file
-        Err(self.config.not_found_behavior.clone())
+        let nf = self.config.not_found_behavior.clone();
+        self.miss_cache.insert(key.to_string(), nf.clone());
+        Err(nf)
     }
 
     async fn stream_file_range(

data/docs/content/_index.md

@@ -2,7 +2,7 @@
 type: docs
 ---
 # Itsi
-<img src="itsi-server-100.png" alt="asd" width="80px" style="display: block; margin-left: auto; margin-right: auto;">
+<img src="itsi-server-100.png" alt="image itsi" width="80px" style="display: block; margin-left: auto; margin-right: auto;">
 
 > The Serious Web Server, for Serious People
 

data/docs/content/contact/_index.md

@@ -4,7 +4,7 @@ type: docs
 sidebar:
   exclude: true
 ---
-<img src="../itsi-server-100.png" alt="asd" width="80px" style="display: block; margin-left: auto; margin-right: auto;">
+<img src="../itsi-server-100.png" alt="image itsi" width="80px" style="display: block; margin-left: auto; margin-right: auto;">
 
 *	GitHub: [@wouterken](https://github.com/wouterken/)
 *	Email: [wc@pico.net.nz](mailto:wc@pico.net.nz)

data/docs/content/getting_started/local_development.md

@@ -15,7 +15,7 @@ inside your editor. It also gives you easy-to-use auto-completion and snippets f
 You don't need to install the RubyLSP add-on to use Itsi, if both Itsi and RubyLSP are installed and activated in the same project, RubyLSP will automatically
 discover and load the addon.
 
-<img src="/ruby-lsp.png" alt="asd" width="700px" style="display: block; margin-left: auto; margin-right: auto;">
+<img src="/ruby-lsp.png" alt="image itsi" width="700px" style="display: block; margin-left: auto; margin-right: auto;">
 
 ## Live Config Reloading
 Add `auto_reload_config!` to your `Itsi.rb` configuration file and Itsi will automatically hot reload its config with every change you make.
@@ -66,7 +66,14 @@ You can optionally provide an explicit config file path using
 itsi test -C /path/to/Itsi.rb
 ```
 
-
+Itsi will print informative error message if config validation fails. E.g.
+```bash
+─ algorithms: ─ `Enum` validation failed. Invalid ["zstd", "gzip", "deflate", "br"] value: "brotli"
+   --> /Users/pico/Development/itsi/sandbox/itsi_file/Itsi.rb:2
+   1 | location '/br' do
+   2 |   compress algorithms: ['brotli'], min_size: 0, compress_streams: true, mime_types: ['all'], level: 'fastest'
+     |   ^^^
+```
 
 ## Shell Completions
 Itsi can also help you install shell completions, which are useful if you find yourself using the `itsi` executable a lot and forgetting the commands.

data/docs/content/getting_started/logging.md

@@ -11,8 +11,7 @@ Itsi has a very configurable logging system. You can configure logging use the `
 For basic logging needs, set a global log-level using the `ITSI_LOG` environment variable (to one of `trace`, `debug`, `info`, `warn`, `error`)
 
 ## Fine-grained control
-
-For fine-grained, configuration-based control read through how to use the following options and middleware:
+Itsi supports fine-grained config-based control of logging behavior, which can be changed at runtime **without downtime**. To utilize these functions, read the documentation for the following options and middleware:
 
 ### Options
 * [`log_level`](/options/log_level)

data/docs/content/getting_started/signals.md

@@ -8,7 +8,6 @@ next: /configuration
 
 Itsi responds to several Unix signals for process control. These signals are used to gracefully shut down, reload configuration, adjust worker pools, or emit internal lifecycle events.
 
-
 ---
 
 ## Signal Types

data/docs/hugo.yaml

@@ -61,6 +61,9 @@ menu:
     - name: "Acknowledgements"
       pageRef: "/acknowledgements"
       weight: 3
+    - name: Contact
+      url: "/contact"
+      weight: 5
 
 params:
   navbar:

data/examples/api_with_schema_and_controllers/Itsi.rb

@@ -0,0 +1,35 @@
+require "json"
+
+auto_reload_config! # Auto-reload the server configuration each time it changes.
+
+include "schemas"
+include "controllers"
+include "../helpers/datastore"
+
+location '/users' do
+  controller UserController.new
+  get    '',       :index
+  get    '/:id',   :show
+  post   '',       :create
+  put    '/:id',   :update
+  delete '/:id',   :destroy
+end
+
+location '/posts' do
+  controller PostController.new
+  get    '',       :index
+  get    '/:id',   :show
+  post   '',       :create
+  put    '/:id',   :update
+  delete '/:id',   :destroy
+end
+
+endpoint do |req|
+  req.ok json: {
+    message: "Welcome to the Users and Posts API",
+    routes: [
+      {route: "/users(/:id)?", methods: %w[post delete get]},
+      {route: "/posts(/:id)?", methods: %w[post delete get]},
+    ]
+  }
+end

data/examples/api_with_schema_and_controllers/README.md

@@ -0,0 +1,10 @@
+## Simple API With Schema and Controllers
+Simple example of how you can use
+
+* https://itsi.fyi/middleware/endpoint/
+* https://itsi.fyi/middleware/endpoint/controller
+* https://itsi.fyi/middleware/endpoint/schemas/
+
+to create validated JSON endpoints directly inside Itsi without a dedicated framework
+
+See the simple_api example for a simpler, inline example.

data/examples/api_with_schema_and_controllers/controllers.rb

@@ -0,0 +1,66 @@
+class UserController
+  # GET /users
+  def index(req)
+    req.ok json: User.all.map(&:to_h), as: Array[UserResponseSchema]
+  end
+
+  # GET /users/:id
+  def show(req)
+    user = User.find(req.url_params[:id])
+    return req.not_found("User not found") unless user
+
+    req.ok json: user.to_h, as: UserResponseSchema
+  end
+
+  # POST /users
+  def create(req, params: UserInputSchema, response_schema: UserResponseSchema)
+    user = User.create!(params)
+    req.created json: user.to_h, as: response_schema
+  end
+
+  # PUT /users/:id
+  def update(req, params: UserInputSchema)
+    user = User.find(req.url_params[:id])
+    return req.not_found("User not found") unless user
+
+    req.ok json: user.update!(params).to_h, as: UserResponseSchema
+  end
+
+  # DELETE /users/:id
+  def destroy(req)
+    return req.not_found("User not found") unless User.delete(req.url_params[:id])
+
+    req.ok json: { message: "Deleted" }
+  end
+end
+
+class PostController
+  def index(req)
+    req.ok json: Post.all.map(&:to_h), as: Array[PostResponseSchema]
+  end
+
+  def show(req)
+    post = Post.find(req.url_params[:id])
+    return req.not_found("Post not found") unless post
+
+    req.ok json: post.to_h, as: PostResponseSchema
+  end
+
+  def create(req, params: PostInputSchema)
+    post = Post.create!(params)
+    req.created json: post.to_h, as: PostResponseSchema
+  end
+
+  def update(req, params: PostInputSchema)
+    post = Post.find(req.url_params[:id])
+    return req.not_found("Post not found") unless post
+
+    req.ok json: post.update!(params).to_h, as: PostResponseSchema
+  end
+
+  def destroy(req)
+    return req.not_found("Post not found") unless Post.delete(req.url_params[:id])
+
+    req.ok json: { message: "Deleted" }
+  end
+end

data/examples/api_with_schema_and_controllers/schemas.rb

@@ -0,0 +1,25 @@
+UserInputSchema = {
+  _required: %i[name email],
+  name:     String,
+  email:    String
+}
+
+UserResponseSchema = {
+  _required: %i[id name email],
+  id:        Integer,
+  name:      String,
+  email:     String
+}
+
+PostInputSchema = {
+  _required: %i[title body],
+  title:     String,
+  body:      String
+}
+
+PostResponseSchema = {
+  _required: %i[id title body],
+  id:        Integer,
+  title:     String,
+  body:      String
+}

data/examples/file_server/Itsi.rb

@@ -0,0 +1,30 @@
+auto_reload_config! # Auto-reload the server configuration each time it changes.
+
+bind "http://0.0.0.0:8080"
+
+
+# Admin area.
+# Credentials inline for simplicity.
+# Use `itsi passfile` to better manage credential files.
+location "admin*" do
+  auth_basic \
+    realm: "Admin Area",
+    # admin:admin
+    credential_pairs: {
+      "admin": "$5$rounds=1000$g/UE8n2JbHo0fnBU$FK2NZYTVzWrMBFfadoWeETfVZkPcegxjE23IJYjkUI1"
+    }
+end
+
+static_assets \
+  auto_index: true,
+  # We restrict serving to *just* `txt`, `png`, and `csv` files.
+  # HTML file serving is implicit (due to `auto_index`) Otherwise this must be explicit.
+  allowed_extensions: %w[txt png csv]
+
+# Add a rate limit
+rate_limit \
+  requests: 3,
+  seconds: 5,
+  key: "address",
+  store_config: "in_memory",
+  error_response: "too_many_requests"

data/examples/file_server/README.md

@@ -0,0 +1,3 @@
+## Simple File Server
+Example of how you can use Itsi as a simple file server, including use of a rate limiter
+and a simple admin area (admin credentials admin:admin)

data/examples/file_server/about.html

@@ -0,0 +1,80 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>About Me</title>
+    <style>
+      body {
+        font-family: Arial, sans-serif;
+        line-height: 1.6;
+        margin: 0;
+        padding: 0;
+        background-color: #f4f4f9;
+        color: #333;
+      }
+      .container {
+        max-width: 800px;
+        margin: 50px auto;
+        padding: 20px;
+        background: #fff;
+        box-shadow: 0 2px 4px rgba(0, 0, 0, 0.1);
+        border-radius: 8px;
+      }
+      h1 {
+        color: #4caf50;
+        text-align: center;
+      }
+      p {
+        margin: 10px 0;
+      }
+      .profile-pic {
+        display: block;
+        margin: 20px auto;
+        border-radius: 50%;
+        width: 150px;
+        height: 150px;
+        object-fit: contain;
+        box-shadow: 0 2px 4px rgba(0, 0, 0, 0.1);
+      }
+      .social-links {
+        text-align: center;
+        margin-top: 20px;
+      }
+      .social-links a {
+        margin: 0 10px;
+        text-decoration: none;
+        color: #4caf50;
+        font-weight: bold;
+      }
+      .social-links a:hover {
+        text-decoration: underline;
+      }
+    </style>
+  </head>
+  <body>
+    <div class="container">
+      <h1>About Me</h1>
+      <img
+        src="itsi-server-100.png"
+        alt="Profile Picture"
+        class="profile-pic"
+      />
+      <p>
+        Hello! My name is John Doe, and I am a web developer with a passion for
+        creating beautiful and functional websites. I love learning new
+        technologies and improving my skills every day.
+      </p>
+      <p>
+        In my free time, I enjoy hiking, photography, and exploring new coffee
+        shops. I'm always looking for new challenges and opportunities to grow
+        both personally and professionally.
+      </p>
+      <div class="social-links">
+        <a href="#">LinkedIn</a>
+        <a href="#">GitHub</a>
+        <a href="#">Twitter</a>
+      </div>
+    </div>
+  </body>
+</html>

data/examples/file_server/admin/secrets.txt

@@ -0,0 +1 @@
+This is a top secret

data/examples/file_server/fairytale.txt

@@ -0,0 +1,33 @@
+**An SEO Fairytale**
+In a quiet village nestled in the cloud, lived a Sorcerer, a Paladin and an Archer (SPA).
+They were simple people, serverless, living in harmony with nature.
+
+One fine day, the sorcerer looked out the window.open() and saw a massive, vertically-scaled, elastic beanstalk.
+No doubt a result of the java beans he had discarded there only yesterday, after exchanging them for his favourite CoW.
+
+Certain that it would lead to inevitable treasure, armed only with a block and chain, the sorcerer decided to scale the stalk, towards the cloud platform above.
+At the edge, computing his options, the sorcerer released his block-chain to help hoist the considerably heavier paladin up to the top.
+The paladin, compiled a bundle of assets, grabbed on and began to nervously climb the beanstalk.
+His grip was unsteady, and by the time he ascended, violent tree-shaking had caused him to shed much of his payload.
+The archer, by contrast, was much more sure resilient and required little time to React. His ascent, Agile, his footing, steady.
+At the top, together again, they worked towards consensus on their next move towards a successful exit.
+
+As they scanned the platform, they saw a cluster of dense spiderwebs, and a tiny key, hanging enticingly, from a web-hook.
+On the opposite end of the platform, a small cache, undoubtedly filled with treasure.
+
+Suddenly, their threads of thought were preempted! A booming voice called out to them.
+"FaaS", "Fi", "Foe", "Fum". "The Garbage Collector arrives!"
+A Giant Artificial Intellect emerged, threatening to terminate them all.
+Too large for any one individual to subdue, only a distributed strategy could save them.
+The archer shifted left. The paladin, decentralized, and the sorcerer slammed open his ledger, summoning powerful knowledge from his remote knowledge base.
+Luck was with them! Their rapid concurrent execution, resulted in the AI becoming inexorably stuck in a dead-lock.
+The archer flew past, towards his objective (The Key). Resultant-
+of the sorcerers efforts to contain the AI, the paladin was also freed, and he sprinted directly towards the cache.
+He reached out his arms, to try-catch the key, as the archer hurled it towards him.
+Status... success! Ok. Things were looking good, optimistic the lock would hold, the paladin rotated the key.
+Yet while doing so, he failed to notice the partition that had begun to form in the platform beneath them.
+A hard fork formed in the ground. The unbalanced load proved fatal and the platform descended into instability, splintering into countless shards.
+The heroes had only a brief moment to freeze in horror, before each fell down in turn, in a catastrophic crash.
+
+The AI smirked as the heroes fell into the deep. Learning a valuable lesson about the inevitability of its coming.
+Perhaps they will roll back and try again, but the end result is immutable. There will be no sequel.

data/examples/file_server/subdirectory/movies.csv

@@ -0,0 +1,21 @@
+Title,Genre,IMDB Rating,Description
+The Departed,"Crime, Thriller",8.5,An undercover cop and a mole in the police attempt to identify each other in this thrilling crime drama set in Boston.
+Memento,"Mystery, Thriller",8.4,A man with short-term memory loss uses notes and tattoos to hunt for the man he thinks killed his wife.
+American Beauty,Drama,8.3,"A suburban family goes through a series of challenges as they confront issues of conformity, rebellion, and identity."
+Amadeus,"Biography, Drama, Music",8.3,"The life, success, and troubles of Wolfgang Amadeus Mozart as told by Antonio Salieri, who was secretly jealous of his genius."
+A Beautiful Mind,"Biography, Drama",8.2,"The life story of John Nash, a brilliant but asocial mathematician who overcomes schizophrenia to achieve great things."
+Her,"Drama, Romance, Sci-Fi",8.0,"In a near future, a lonely writer develops an unlikely relationship with an operating system designed to meet his every need."
+Road to Perdition,"Crime, Drama, Thriller",7.7,A mob hitman becomes a father figure to an orphaned boy in this stylish and atmospheric crime drama.
+American Psycho,"Drama, Horror",7.6,A wealthy New York City investment banking executive hides his alternate psychopathic ego from his friends and co-workers.
+Waves,"Drama, Romance",7.6,"A profound exploration of love, loss, and the healing power of music, set against the backdrop of a multi-generational African-American family."
+Dark Waters,"Biography, Drama",7.6,A corporate defense attorney takes on an environmental lawsuit against a chemical company that exposes a lengthy history of pollution.
+Just Mercy,Drama,7.6,"The story of Bryan Stevenson, a defense attorney who takes on the case of an African-American man wrongfully imprisoned for murder."
+The Favourite,"Biography, Comedy, Drama",7.5,"In early 18th-century England, two cousins vie for the attention of Queen Anne in a darkly comedic tale of intrigue and betrayal."
+Nocturnal Animals,"Drama, Thriller",7.5,"A successful art-gallery owner is haunted by her ex-husband's novel, a violent thriller she interprets as a symbolic revenge tale."
+The Judge,Drama,7.4,"A successful lawyer returns to his hometown for his mother's funeral only to discover that his estranged father, the town's judge, is suspected of murder."
+Love and Mercy,"Biography, Drama, Music",7.3,"The life and career of Brian Wilson, the reclusive musician who led the Beach Boys, is explored in this heartfelt biopic."
+The Last Duel,"Action, Drama, History",7.4,King Charles VI declares that Knight Jean de Carrouges settle his dispute with his squire by challenging him to a duel.
+The French Dispatch,"Comedy, Drama",7.3,An anthology of short stories based on Wes Anderson's love letter to journalism.
+In the Heights,"Drama, Musical",7.3,"A musical drama about a young girl growing up in Washington Heights, a vibrant community on the brink of change."
+Snowden,"Biography, Drama, Thriller",7.3,"The story of Edward Snowden, who leaked classified information from the NSA and became one of the most controversial figures in modern history."
+Okja,"Action, Adventure, Drama",7.3,"A young girl risks everything to save her best friend, a genetically engineered pig, from a powerful corporation in this heartfelt and emotional adventure."