@bunny.net/api-client-effect-v4-runtime 0.0.0-stage → 1.1.0

package/dist/src/operation.js

@@ -0,0 +1,302 @@
+import { Effect, Redacted, Schema } from "effect";
+import { Headers as HttpHeaders, HttpBody, HttpClientError, HttpClientRequest, HttpClientResponse, UrlParams, } from "effect/http";
+import { BunnyDecodeError, BunnyInputError, BunnyResponseError, BunnyUnexpectedStatusError, } from "./errors.js";
+const trimSlash = (value) => value.replace(/\/+$/, "");
+const resolvePath = (template, params) => template.replace(/\{([^}]+)\}/g, (_match, key) => {
+    const raw = params?.[key];
+    if (raw === undefined || raw === null) {
+        throw new Error(`Missing path param: ${key}`);
+    }
+    return encodeURIComponent(String(raw));
+});
+const toParamPairs = (record) => {
+    const pairs = [];
+    for (const [key, value] of Object.entries(record ?? {})) {
+        if (value === undefined)
+            continue;
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (item !== undefined)
+                    pairs.push([key, String(item)]);
+            }
+            continue;
+        }
+        pairs.push([key, String(value)]);
+    }
+    return pairs;
+};
+const appendFormValue = (form, key, value) => {
+    if (value === undefined)
+        return;
+    if (value === null) {
+        form.append(key, "");
+    }
+    else if (typeof Blob !== "undefined" && value instanceof Blob) {
+        form.append(key, value);
+    }
+    else if (typeof value === "object") {
+        form.append(key, JSON.stringify(value));
+    }
+    else {
+        form.append(key, String(value));
+    }
+};
+const encodeFormData = (body) => {
+    if (body instanceof FormData)
+        return body;
+    if (!body || typeof body !== "object" || Array.isArray(body)) {
+        throw new Error("multipart/form-data body must be an object");
+    }
+    const form = new FormData();
+    for (const [key, value] of Object.entries(body)) {
+        if (Array.isArray(value)) {
+            for (const item of value)
+                appendFormValue(form, key, item);
+        }
+        else {
+            appendFormValue(form, key, value);
+        }
+    }
+    return form;
+};
+const encodeBody = (body, contentType) => {
+    const normalized = (contentType ?? "application/json").toLowerCase();
+    if (normalized.includes("multipart/form-data")) {
+        return HttpBody.formData(encodeFormData(body));
+    }
+    if (normalized.startsWith("text/")) {
+        return HttpBody.text(String(body), contentType);
+    }
+    if (normalized.includes("application/octet-stream")) {
+        if (body instanceof Uint8Array || body instanceof ArrayBuffer) {
+            return HttpBody.uint8Array(body instanceof ArrayBuffer ? new Uint8Array(body) : body, contentType);
+        }
+        // A string body is the file's text; JSON-encoding it would send quotes.
+        if (typeof body === "string")
+            return HttpBody.text(body, contentType);
+    }
+    // JSON and JSON-flavoured media types (application/merge-patch+json, …).
+    return HttpBody.text(JSON.stringify(body), contentType ?? "application/json");
+};
+/**
+ * The ONE place the credential is revealed: setting the auth header /
+ * query param on the outgoing request.
+ */
+const applySecurity = (request, scheme, credentials) => {
+    if (!scheme)
+        return request;
+    const secret = Redacted.value(credentials.accessKey);
+    switch (scheme.type) {
+        case "apiKey":
+            switch (scheme.in) {
+                case "query":
+                    // Passed as the `Redacted` itself: Effect 4 sends it unwrapped and
+                    // keeps it redacted in inspection, errors and the client's span.
+                    return HttpClientRequest.appendUrlParam(request, scheme.name, credentials.accessKey);
+                case "cookie":
+                    return HttpClientRequest.setHeader(request, "cookie", `${scheme.name}=${encodeURIComponent(secret)}`);
+                default:
+                    return HttpClientRequest.setHeader(request, scheme.name, secret);
+            }
+        case "http":
+            // `basic` takes the credential as `user:password`.
+            return scheme.scheme === "basic"
+                ? HttpClientRequest.setHeader(request, "authorization", `Basic ${base64(secret)}`)
+                : HttpClientRequest.bearerToken(request, secret);
+        default:
+            // oauth2 / openIdConnect: the credential is an already-issued token.
+            return HttpClientRequest.bearerToken(request, secret);
+    }
+};
+const REDACTED = "<redacted>";
+/** UTF-8 then base64, with web APIs only (`btoa` alone is Latin-1). */
+const base64 = (text) => btoa(Array.from(new TextEncoder().encode(text), (b) => String.fromCharCode(b))
+    .join(""));
+/** The same request with the credential replaced, for errors that carry the request. */
+const redactRequest = (request, scheme) => {
+    if (!scheme)
+        return request;
+    if (scheme.type === "apiKey") {
+        switch (scheme.in) {
+            case "query":
+                return HttpClientRequest.setUrlParam(request, scheme.name, REDACTED);
+            case "cookie":
+                return HttpClientRequest.setHeader(request, "cookie", REDACTED);
+            default:
+                return HttpClientRequest.setHeader(request, scheme.name, REDACTED);
+        }
+    }
+    return HttpClientRequest.setHeader(request, "authorization", REDACTED);
+};
+/** The failed response with its body gone: only the status and headers survive, on a fresh `Response` shell. */
+const shellResponse = (request, response) => {
+    const headers = new Headers();
+    for (const [key, value] of Object.entries(response.headers)) {
+        headers.set(key, value);
+    }
+    const status = response.status >= 200 && response.status <= 599
+        ? response.status
+        : 500;
+    return HttpClientResponse.fromWeb(request, new Response(null, { status, headers }));
+};
+/**
+ * `effect/http` errors embed the outgoing request on their `reason`. Effect's
+ * own redaction is render-context dependent (`UrlParams.CurrentRedactedNames`
+ * and the header redaction only apply inside Effect's own logger context, and
+ * cover a fixed list rather than Bunny's `AccessKey`), so a plain
+ * `JSON.stringify` in user code would still print the key. Rebuilding the
+ * error around a reason that carries the scrubbed request is the one layer
+ * that makes "no rendering can reveal it" true. `request` and `response` on
+ * the `HttpClientError` wrapper are getters over the reason, so rebuilding the
+ * reason is enough. The body of a failed response has already been consumed
+ * by the time a response reason is produced here, so the shell response keeps
+ * only its status and headers.
+ */
+const redactHttpClientError = (scheme) => (error) => {
+    const e = error;
+    if (!HttpClientError.isHttpClientError(e))
+        return error;
+    const reason = e.reason;
+    const request = redactRequest(reason.request, scheme);
+    const common = {
+        request,
+        cause: reason.cause,
+        ...(reason.description === undefined
+            ? {}
+            : { description: reason.description }),
+    };
+    const rebuilt = (() => {
+        switch (reason._tag) {
+            case "TransportError":
+                return new HttpClientError.TransportError(common);
+            case "EncodeError":
+                return new HttpClientError.EncodeError(common);
+            case "InvalidUrlError":
+                return new HttpClientError.InvalidUrlError(common);
+            case "StatusCodeError":
+                return new HttpClientError.StatusCodeError({
+                    ...common,
+                    response: shellResponse(request, reason.response),
+                });
+            case "DecodeError":
+                return new HttpClientError.DecodeError({
+                    ...common,
+                    response: shellResponse(request, reason.response),
+                });
+            case "EmptyBodyError":
+                return new HttpClientError.EmptyBodyError({
+                    ...common,
+                    response: shellResponse(request, reason.response),
+                });
+        }
+    })();
+    return new HttpClientError.HttpClientError({ reason: rebuilt });
+};
+/**
+ * The names the credential travels under, added to Effect's own redaction
+ * lists for the duration of the call: the HTTP client's span records request
+ * headers only when a consumer opts in (`TracerHeaderFilter`) and URL
+ * parameters always, and its default lists know `authorization` and `cookie`
+ * but not Bunny's `AccessKey`. Defence in depth beside the `Redacted` value
+ * itself; the `bunny.<op>` span never carries the input.
+ */
+const withCredentialRedacted = (scheme, effect) => {
+    if (scheme?.type !== "apiKey")
+        return effect;
+    const name = scheme.in === "cookie" ? "cookie" : scheme.name;
+    const ref = scheme.in === "query"
+        ? UrlParams.CurrentRedactedNames
+        : HttpHeaders.CurrentRedactedNames;
+    return Effect.flatMap(ref, (names) => Effect.provideService(ref, [...names, name])(effect));
+};
+const buildRequest = (ctx, op, decoded) => {
+    const baseUrl = ctx.options.baseUrl ?? op.baseUrl;
+    if (!baseUrl) {
+        throw new Error(`${op.name}: no baseUrl — the spec has no server URL, pass one in ClientOptions`);
+    }
+    const path = resolvePath(op.path, decoded.path);
+    let request = HttpClientRequest.make(op.method)(`${trimSlash(baseUrl)}${path.startsWith("/") ? "" : "/"}${path}`);
+    request = HttpClientRequest.appendUrlParams(request, toParamPairs(decoded.query));
+    for (const [key, value] of toParamPairs(decoded.headers)) {
+        request = HttpClientRequest.setHeader(request, key, value);
+    }
+    if (decoded.body !== undefined) {
+        request = HttpClientRequest.setBody(request, encodeBody(decoded.body, op.contentType));
+    }
+    return applySecurity(request, op.security, ctx.credentials);
+};
+// ---------------------------------------------------------------------------
+// Response reading
+// ---------------------------------------------------------------------------
+const readRaw = (response, kind) => {
+    switch (kind) {
+        case "json":
+            return response.json;
+        case "text":
+            return response.text;
+        case "binary":
+        case "stream":
+            return response.arrayBuffer;
+        case "empty":
+            return Effect.void;
+    }
+};
+const tryParseJson = (text) => {
+    if (text === undefined || text === "")
+        return undefined;
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+};
+const lookup = (spec, status) => spec === undefined ? undefined : (spec[String(status)] ?? spec["default"]);
+// ---------------------------------------------------------------------------
+// The executor
+// ---------------------------------------------------------------------------
+/**
+ * Run one operation: decode the input, build the request, send it through
+ * the caller's `HttpClient`, and decode the response by status. Resolves
+ * with `{ status, value }` for documented success statuses, fails with a
+ * typed `BunnyResponseError` for documented error statuses.
+ */
+export const executeOperation = (ctx, op, input) => Effect.gen(function* () {
+    // ENCODE, not decode: callers pass the schema's Type (Date, branded ids, …)
+    // and the wire needs the Encoded form (ISO strings, …). Encoding also
+    // validates the input against the Type side.
+    const decoded = op.input === undefined
+        ? {}
+        : yield* Schema.encodeUnknownEffect(op.input)(input).pipe(Effect.mapError((cause) => new BunnyInputError({ operation: op.name, cause })));
+    const request = buildRequest(ctx, op, decoded);
+    const response = yield* withCredentialRedacted(op.security, ctx.http.execute(request));
+    const status = response.status;
+    const successEntry = lookup(op.success, status);
+    const errorEntry = lookup(op.error, status);
+    const entry = successEntry ?? errorEntry;
+    if (entry === undefined) {
+        const text = yield* response.text.pipe(Effect.orElseSucceed(() => undefined));
+        return yield* new BunnyUnexpectedStatusError({
+            operation: op.name,
+            status,
+            body: tryParseJson(text),
+        });
+    }
+    const raw = yield* readRaw(response, entry.kind);
+    const value = entry.kind === "binary" || entry.kind === "stream"
+        ? raw
+        : yield* Schema.decodeUnknownEffect(entry.schema)(raw).pipe(Effect.mapError((cause) => new BunnyDecodeError({ operation: op.name, status, cause })));
+    const result = { status, value };
+    if (successEntry !== undefined)
+        return result;
+    return yield* new BunnyResponseError({
+        operation: op.name,
+        response: result,
+    });
+}).pipe(Effect.mapError(redactHttpClientError(op.security)), 
+// Kept for symmetry with the Effect 3 runtime: in Effect 4 `execute` adds
+// no `Scope` to `R`, so this is a no-op on the requirements.
+Effect.scoped, Effect.withSpan(`bunny.${op.name}`, {
+    attributes: { "http.request.method": op.method, "url.template": op.path },
+}));
+//# sourceMappingURL=operation.js.map

package/dist/src/operation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation.js","sourceRoot":"","sources":["../../src/operation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EACL,OAAO,IAAI,WAAW,EACtB,QAAQ,EAER,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,OAAO,EAEL,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AA+HrB,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEvE,MAAM,WAAW,GAAG,CAClB,QAAgB,EAChB,MAA2C,EACnC,EAAE,CACV,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE;IACvD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEL,MAAM,YAAY,GAAG,CACnB,MAA2C,EAClB,EAAE;IAC3B,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,KAAK,SAAS;oBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;YACD,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,IAAc,EAAE,GAAW,EAAE,KAAc,EAAQ,EAAE;IAC5E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACvB,CAAC;SAAM,IAAI,OAAO,IAAI,KAAK,WAAW,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,IAAa,EAAY,EAAE;IACjD,IAAI,IAAI,YAAY,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;QAC3E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CACjB,IAAa,EACb,WAA+B,EACZ,EAAE;IACrB,MAAM,UAAU,GAAG,CAAC,WAAW,IAAI,kBAAkB,CAAC,CAAC,WAAW,EAAE,CAAC;IACrE,IAAI,UAAU,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC/C,OAAO,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;QACpD,IAAI,IAAI,YAAY,UAAU,IAAI,IAAI,YAAY,WAAW,EAAE,CAAC;YAC9D,OAAO,QAAQ,CAAC,UAAU,CACxB,IAAI,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EACzD,WAAW,CACZ,CAAC;QACJ,CAAC;QACD,wEAAwE;QACxE,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACxE,CAAC;IACD,yEAAyE;IACzE,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,WAAW,IAAI,kBAAkB,CAAC,CAAC;AAChF,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,aAAa,GAAG,CACpB,OAA4C,EAC5C,MAAkC,EAClC,WAAkC,EACG,EAAE;IACvC,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACrD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,QAAQ,MAAM,CAAC,EAAE,EAAE,CAAC;gBAClB,KAAK,OAAO;oBACV,mEAAmE;oBACnE,iEAAiE;oBACjE,OAAO,iBAAiB,CAAC,cAAc,CACrC,OAAO,EACP,MAAM,CAAC,IAAI,EACX,WAAW,CAAC,SAAS,CACtB,CAAC;gBACJ,KAAK,QAAQ;oBACX,OAAO,iBAAiB,CAAC,SAAS,CAChC,OAAO,EACP,QAAQ,EACR,GAAG,MAAM,CAAC,IAAI,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAC/C,CAAC;gBACJ;oBACE,OAAO,iBAAiB,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACrE,CAAC;QACH,KAAK,MAAM;YACT,mDAAmD;YACnD,OAAO,MAAM,CAAC,MAAM,KAAK,OAAO;gBAC9B,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAC3B,OAAO,EACP,eAAe,EACf,SAAS,MAAM,CAAC,MAAM,CAAC,EAAE,CAC1B;gBACD,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrD;YACE,qEAAqE;YACrE,OAAO,iBAAiB,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,uEAAuE;AACvE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CACtC,IAAI,CACF,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;KACtE,IAAI,CAAC,EAAE,CAAC,CACZ,CAAC;AAEJ,wFAAwF;AACxF,MAAM,aAAa,GAAG,CACpB,OAA4C,EAC5C,MAAkC,EACG,EAAE;IACvC,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,QAAQ,MAAM,CAAC,EAAE,EAAE,CAAC;YAClB,KAAK,OAAO;gBACV,OAAO,iBAAiB,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACvE,KAAK,QAAQ;gBACX,OAAO,iBAAiB,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAClE;gBACE,OAAO,iBAAiB,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IACD,OAAO,iBAAiB,CAAC,SAAS,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;AACzE,CAAC,CAAC;AAEF,gHAAgH;AAChH,MAAM,aAAa,GAAG,CACpB,OAA4C,EAC5C,QAA+C,EACR,EAAE;IACzC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;QAC7D,CAAC,CAAC,QAAQ,CAAC,MAAM;QACjB,CAAC,CAAC,GAAG,CAAC;IACR,OAAO,kBAAkB,CAAC,OAAO,CAC/B,OAAO,EACP,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CACxC,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,qBAAqB,GACzB,CAAC,MAAkC,EAAE,EAAE,CAAC,CAAI,KAAQ,EAAK,EAAE;IACzD,MAAM,CAAC,GAAY,KAAK,CAAC;IACzB,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG;QACb,OAAO;QACP,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;KACzC,CAAC;IACF,MAAM,OAAO,GAA0C,CAAC,GAAG,EAAE;QAC3D,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,gBAAgB;gBACnB,OAAO,IAAI,eAAe,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACpD,KAAK,aAAa;gBAChB,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACjD,KAAK,iBAAiB;gBACpB,OAAO,IAAI,eAAe,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACrD,KAAK,iBAAiB;gBACpB,OAAO,IAAI,eAAe,CAAC,eAAe,CAAC;oBACzC,GAAG,MAAM;oBACT,QAAQ,EAAE,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC;iBAClD,CAAC,CAAC;YACL,KAAK,aAAa;gBAChB,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC;oBACrC,GAAG,MAAM;oBACT,QAAQ,EAAE,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC;iBAClD,CAAC,CAAC;YACL,KAAK,gBAAgB;gBACnB,OAAO,IAAI,eAAe,CAAC,cAAc,CAAC;oBACxC,GAAG,MAAM;oBACT,QAAQ,EAAE,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC;iBAClD,CAAC,CAAC;QACP,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,IAAI,eAAe,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAM,CAAC;AACvE,CAAC,CAAC;AAEJ;;;;;;;GAOG;AACH,MAAM,sBAAsB,GAAG,CAC7B,MAAkC,EAClC,MAA8B,EACN,EAAE;IAC1B,IAAI,MAAM,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IAC7D,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,KAAK,OAAO;QAC/B,CAAC,CAAC,SAAS,CAAC,oBAAoB;QAChC,CAAC,CAAC,WAAW,CAAC,oBAAoB,CAAC;IACrC,OAAO,MAAM,CAAC,OAAO,CACnB,GAAG,EACH,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAChE,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAInB,GAAkB,EAClB,EAA6B,EAC7B,OAAqB,EACgB,EAAE;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,CAAC;IAClD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,GAAG,EAAE,CAAC,IAAI,sEAAsE,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAC7C,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,EAAE,CACjE,CAAC;IACF,OAAO,GAAG,iBAAiB,CAAC,eAAe,CACzC,OAAO,EACP,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAC5B,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,GAAG,iBAAiB,CAAC,OAAO,CACjC,OAAO,EACP,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,CACzC,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;AAC9D,CAAC,CAAC;AAEF,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,OAAO,GAAG,CACd,QAA+C,EAC/C,IAAkB,EAClB,EAAE;IACF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM;YACT,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC,WAAW,CAAC;QAC9B,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,IAAI,CAAC;IACvB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,IAAwB,EAAW,EAAE;IACzD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACxD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CACb,IAA8B,EAC9B,MAAc,EACa,EAAE,CAC7B,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AAE7E,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAI9B,GAAkB,EAClB,EAA6B,EAC7B,KAAc,EAKd,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,4EAA4E;IAC5E,sEAAsE;IACtE,6CAA6C;IAC7C,MAAM,OAAO,GAAiB,EAAE,CAAC,KAAK,KAAK,SAAS;QAClD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CACvD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,IAAI,eAAe,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CACnD,CACF,CAAC;IACJ,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAC5C,EAAE,CAAC,QAAQ,EACX,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAC1B,CAAC;IACF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,YAAY,IAAI,UAAU,CAAC;IACzC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CACpC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CACtC,CAAC;QACF,OAAO,KAAK,CAAC,CAAC,IAAI,0BAA0B,CAAC;YAC3C,SAAS,EAAE,EAAE,CAAC,IAAI;YAClB,MAAM;YACN,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC;SACzB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9D,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CACzD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,IAAI,gBAAgB,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAC5D,CACF,CAAC;IACJ,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACjC,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,MAA0B,CAAC;IAClE,OAAO,KAAK,CAAC,CAAC,IAAI,kBAAkB,CAAC;QACnC,SAAS,EAAE,EAAE,CAAC,IAAI;QAClB,QAAQ,EAAE,MAAM;KACjB,CAAwB,CAAC;AAC5B,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;AACnD,0EAA0E;AAC1E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;IAClC,UAAU,EAAE,EAAE,qBAAqB,EAAE,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,CAAC,IAAI,EAAE;CAC1E,CAAC,CACH,CAAC","sourcesContent":["import { Effect, Redacted, Schema } from \"effect\";\nimport {\n  Headers as HttpHeaders,\n  HttpBody,\n  type HttpClient,\n  HttpClientError,\n  HttpClientRequest,\n  HttpClientResponse,\n  UrlParams,\n} from \"effect/http\";\nimport type { BunnyCredentialsShape } from \"./credentials.ts\";\nimport {\n  type BunnyClientError,\n  BunnyDecodeError,\n  BunnyInputError,\n  BunnyResponseError,\n  BunnyUnexpectedStatusError,\n} from \"./errors.ts\";\n\n// ---------------------------------------------------------------------------\n// Response typing — shared by every generated client.\n// ---------------------------------------------------------------------------\n\n/** How a response body is read before (or instead of) schema decoding. `stream` is read fully, like `binary`. */\nexport type ResponseKind = \"json\" | \"text\" | \"empty\" | \"binary\" | \"stream\";\n\n/**\n * Any schema with no decoding and no encoding services: `Codec` is covariant\n * in its type parameters, so every concrete schema is assignable here, and\n * the `never` services pin every operation to `R = never`, whatever schema the\n * generator emits (`Schema.Top` would widen the services to `unknown`).\n */\nexport type ServiceFreeCodec = Schema.Codec<unknown, unknown, never, never>;\n\nexport interface ResponseEntry {\n  readonly schema: ServiceFreeCodec;\n  readonly kind: ResponseKind;\n}\n\n/** Status code (or `\"default\"`) → how to read + decode that response. */\nexport type ResponseSpec = Record<string, ResponseEntry>;\n\nexport type ResponseValue<T extends ResponseEntry> = T[\"kind\"] extends\n  \"stream\" | \"binary\" ? ArrayBuffer\n  : T[\"schema\"][\"Type\"];\n\n/** The `{ status, value }` union an operation resolves (or fails) with, one member per documented status. */\nexport type ResponseUnion<T extends ResponseSpec> = {\n  [K in keyof T]: K extends \"default\"\n    ? { readonly status: number; readonly value: ResponseValue<T[K]> }\n    : K extends `${infer N extends number}`\n      ? { readonly status: N; readonly value: ResponseValue<T[K]> }\n    : K extends number\n      ? { readonly status: K; readonly value: ResponseValue<T[K]> }\n    : { readonly status: number; readonly value: ResponseValue<T[K]> };\n}[keyof T];\n\n/** The typed failure for an operation's documented error statuses (`never` when the spec documents none). */\nexport type OperationFailure<E extends ResponseSpec | undefined> = E extends\n  ResponseSpec ? BunnyResponseError<ResponseUnion<E>>\n  : never;\n\n// ---------------------------------------------------------------------------\n// Operation descriptors — what the generator emits per operation.\n// ---------------------------------------------------------------------------\n\nexport type SecurityScheme =\n  | {\n    readonly type: \"http\";\n    readonly scheme: \"bearer\" | \"basic\";\n    readonly description?: string;\n  }\n  | {\n    readonly type: \"apiKey\";\n    readonly in: \"header\" | \"query\" | \"cookie\";\n    readonly name: string;\n    readonly description?: string;\n  }\n  | {\n    readonly type: \"oauth2\";\n    readonly flows: unknown;\n    readonly description?: string;\n  }\n  | {\n    readonly type: \"openIdConnect\";\n    readonly openIdConnectUrl: string;\n    readonly description?: string;\n  };\n\nexport type HttpMethod =\n  | \"GET\"\n  | \"POST\"\n  | \"PUT\"\n  | \"PATCH\"\n  | \"DELETE\"\n  | \"HEAD\"\n  | \"OPTIONS\";\n\nexport interface OperationDescriptor<\n  S extends ResponseSpec,\n  E extends ResponseSpec | undefined = undefined,\n> {\n  /** Operation id, used in error messages and the tracing span name. */\n  readonly name: string;\n  readonly method: HttpMethod;\n  /** Path template with `{param}` placeholders. */\n  readonly path: string;\n  /** The spec's server URL for this operation; `ClientOptions.baseUrl` overrides it. */\n  readonly baseUrl?: string;\n  /** How the credential is sent. Omit for unauthenticated operations. */\n  readonly security?: SecurityScheme;\n  /** `{ path?, query?, headers?, body? }` schema; omit when the operation takes no input. Its encoded side is checked against `DecodedInput`. */\n  readonly input?: Schema.Codec<unknown, DecodedInput, never, never>;\n  /** Request body content type; defaults to JSON. */\n  readonly contentType?: string;\n  readonly success: S;\n  readonly error?: E;\n}\n\n/** Per-client options every generated `layer(options)` accepts. */\nexport interface ClientOptions {\n  /** Overrides the spec's server URL — e.g. to point a client at a staging host. */\n  readonly baseUrl?: string;\n}\n\n/** What a generated service captures once at layer construction. */\nexport interface ClientContext {\n  readonly http: HttpClient.HttpClient;\n  readonly credentials: BunnyCredentialsShape;\n  readonly options: ClientOptions;\n}\n\n// ---------------------------------------------------------------------------\n// Request building\n// ---------------------------------------------------------------------------\n\n/** The encoded form of an operation's input: what the generated input schema must encode to. */\nexport type DecodedInput = {\n  readonly path?: Record<string, unknown>;\n  readonly query?: Record<string, unknown>;\n  readonly headers?: Record<string, unknown>;\n  readonly body?: unknown;\n};\n\nconst trimSlash = (value: string): string => value.replace(/\\/+$/, \"\");\n\nconst resolvePath = (\n  template: string,\n  params: Record<string, unknown> | undefined,\n): string =>\n  template.replace(/\\{([^}]+)\\}/g, (_match, key: string) => {\n    const raw = params?.[key];\n    if (raw === undefined || raw === null) {\n      throw new Error(`Missing path param: ${key}`);\n    }\n    return encodeURIComponent(String(raw));\n  });\n\nconst toParamPairs = (\n  record: Record<string, unknown> | undefined,\n): Array<[string, string]> => {\n  const pairs: Array<[string, string]> = [];\n  for (const [key, value] of Object.entries(record ?? {})) {\n    if (value === undefined) continue;\n    if (Array.isArray(value)) {\n      for (const item of value) {\n        if (item !== undefined) pairs.push([key, String(item)]);\n      }\n      continue;\n    }\n    pairs.push([key, String(value)]);\n  }\n  return pairs;\n};\n\nconst appendFormValue = (form: FormData, key: string, value: unknown): void => {\n  if (value === undefined) return;\n  if (value === null) {\n    form.append(key, \"\");\n  } else if (typeof Blob !== \"undefined\" && value instanceof Blob) {\n    form.append(key, value);\n  } else if (typeof value === \"object\") {\n    form.append(key, JSON.stringify(value));\n  } else {\n    form.append(key, String(value));\n  }\n};\n\nconst encodeFormData = (body: unknown): FormData => {\n  if (body instanceof FormData) return body;\n  if (!body || typeof body !== \"object\" || Array.isArray(body)) {\n    throw new Error(\"multipart/form-data body must be an object\");\n  }\n  const form = new FormData();\n  for (const [key, value] of Object.entries(body as Record<string, unknown>)) {\n    if (Array.isArray(value)) {\n      for (const item of value) appendFormValue(form, key, item);\n    } else {\n      appendFormValue(form, key, value);\n    }\n  }\n  return form;\n};\n\nconst encodeBody = (\n  body: unknown,\n  contentType: string | undefined,\n): HttpBody.HttpBody => {\n  const normalized = (contentType ?? \"application/json\").toLowerCase();\n  if (normalized.includes(\"multipart/form-data\")) {\n    return HttpBody.formData(encodeFormData(body));\n  }\n  if (normalized.startsWith(\"text/\")) {\n    return HttpBody.text(String(body), contentType);\n  }\n  if (normalized.includes(\"application/octet-stream\")) {\n    if (body instanceof Uint8Array || body instanceof ArrayBuffer) {\n      return HttpBody.uint8Array(\n        body instanceof ArrayBuffer ? new Uint8Array(body) : body,\n        contentType,\n      );\n    }\n    // A string body is the file's text; JSON-encoding it would send quotes.\n    if (typeof body === \"string\") return HttpBody.text(body, contentType);\n  }\n  // JSON and JSON-flavoured media types (application/merge-patch+json, …).\n  return HttpBody.text(JSON.stringify(body), contentType ?? \"application/json\");\n};\n\n/**\n * The ONE place the credential is revealed: setting the auth header /\n * query param on the outgoing request.\n */\nconst applySecurity = (\n  request: HttpClientRequest.HttpClientRequest,\n  scheme: SecurityScheme | undefined,\n  credentials: BunnyCredentialsShape,\n): HttpClientRequest.HttpClientRequest => {\n  if (!scheme) return request;\n  const secret = Redacted.value(credentials.accessKey);\n  switch (scheme.type) {\n    case \"apiKey\":\n      switch (scheme.in) {\n        case \"query\":\n          // Passed as the `Redacted` itself: Effect 4 sends it unwrapped and\n          // keeps it redacted in inspection, errors and the client's span.\n          return HttpClientRequest.appendUrlParam(\n            request,\n            scheme.name,\n            credentials.accessKey,\n          );\n        case \"cookie\":\n          return HttpClientRequest.setHeader(\n            request,\n            \"cookie\",\n            `${scheme.name}=${encodeURIComponent(secret)}`,\n          );\n        default:\n          return HttpClientRequest.setHeader(request, scheme.name, secret);\n      }\n    case \"http\":\n      // `basic` takes the credential as `user:password`.\n      return scheme.scheme === \"basic\"\n        ? HttpClientRequest.setHeader(\n          request,\n          \"authorization\",\n          `Basic ${base64(secret)}`,\n        )\n        : HttpClientRequest.bearerToken(request, secret);\n    default:\n      // oauth2 / openIdConnect: the credential is an already-issued token.\n      return HttpClientRequest.bearerToken(request, secret);\n  }\n};\n\nconst REDACTED = \"<redacted>\";\n\n/** UTF-8 then base64, with web APIs only (`btoa` alone is Latin-1). */\nconst base64 = (text: string): string =>\n  btoa(\n    Array.from(new TextEncoder().encode(text), (b) => String.fromCharCode(b))\n      .join(\"\"),\n  );\n\n/** The same request with the credential replaced, for errors that carry the request. */\nconst redactRequest = (\n  request: HttpClientRequest.HttpClientRequest,\n  scheme: SecurityScheme | undefined,\n): HttpClientRequest.HttpClientRequest => {\n  if (!scheme) return request;\n  if (scheme.type === \"apiKey\") {\n    switch (scheme.in) {\n      case \"query\":\n        return HttpClientRequest.setUrlParam(request, scheme.name, REDACTED);\n      case \"cookie\":\n        return HttpClientRequest.setHeader(request, \"cookie\", REDACTED);\n      default:\n        return HttpClientRequest.setHeader(request, scheme.name, REDACTED);\n    }\n  }\n  return HttpClientRequest.setHeader(request, \"authorization\", REDACTED);\n};\n\n/** The failed response with its body gone: only the status and headers survive, on a fresh `Response` shell. */\nconst shellResponse = (\n  request: HttpClientRequest.HttpClientRequest,\n  response: HttpClientResponse.HttpClientResponse,\n): HttpClientResponse.HttpClientResponse => {\n  const headers = new Headers();\n  for (const [key, value] of Object.entries(response.headers)) {\n    headers.set(key, value);\n  }\n  const status = response.status >= 200 && response.status <= 599\n    ? response.status\n    : 500;\n  return HttpClientResponse.fromWeb(\n    request,\n    new Response(null, { status, headers }),\n  );\n};\n\n/**\n * `effect/http` errors embed the outgoing request on their `reason`. Effect's\n * own redaction is render-context dependent (`UrlParams.CurrentRedactedNames`\n * and the header redaction only apply inside Effect's own logger context, and\n * cover a fixed list rather than Bunny's `AccessKey`), so a plain\n * `JSON.stringify` in user code would still print the key. Rebuilding the\n * error around a reason that carries the scrubbed request is the one layer\n * that makes \"no rendering can reveal it\" true. `request` and `response` on\n * the `HttpClientError` wrapper are getters over the reason, so rebuilding the\n * reason is enough. The body of a failed response has already been consumed\n * by the time a response reason is produced here, so the shell response keeps\n * only its status and headers.\n */\nconst redactHttpClientError =\n  (scheme: SecurityScheme | undefined) => <X>(error: X): X => {\n    const e: unknown = error;\n    if (!HttpClientError.isHttpClientError(e)) return error;\n    const reason = e.reason;\n    const request = redactRequest(reason.request, scheme);\n    const common = {\n      request,\n      cause: reason.cause,\n      ...(reason.description === undefined\n        ? {}\n        : { description: reason.description }),\n    };\n    const rebuilt: HttpClientError.HttpClientErrorReason = (() => {\n      switch (reason._tag) {\n        case \"TransportError\":\n          return new HttpClientError.TransportError(common);\n        case \"EncodeError\":\n          return new HttpClientError.EncodeError(common);\n        case \"InvalidUrlError\":\n          return new HttpClientError.InvalidUrlError(common);\n        case \"StatusCodeError\":\n          return new HttpClientError.StatusCodeError({\n            ...common,\n            response: shellResponse(request, reason.response),\n          });\n        case \"DecodeError\":\n          return new HttpClientError.DecodeError({\n            ...common,\n            response: shellResponse(request, reason.response),\n          });\n        case \"EmptyBodyError\":\n          return new HttpClientError.EmptyBodyError({\n            ...common,\n            response: shellResponse(request, reason.response),\n          });\n      }\n    })();\n    return new HttpClientError.HttpClientError({ reason: rebuilt }) as X;\n  };\n\n/**\n * The names the credential travels under, added to Effect's own redaction\n * lists for the duration of the call: the HTTP client's span records request\n * headers only when a consumer opts in (`TracerHeaderFilter`) and URL\n * parameters always, and its default lists know `authorization` and `cookie`\n * but not Bunny's `AccessKey`. Defence in depth beside the `Redacted` value\n * itself; the `bunny.<op>` span never carries the input.\n */\nconst withCredentialRedacted = <A, E, R>(\n  scheme: SecurityScheme | undefined,\n  effect: Effect.Effect<A, E, R>,\n): Effect.Effect<A, E, R> => {\n  if (scheme?.type !== \"apiKey\") return effect;\n  const name = scheme.in === \"cookie\" ? \"cookie\" : scheme.name;\n  const ref = scheme.in === \"query\"\n    ? UrlParams.CurrentRedactedNames\n    : HttpHeaders.CurrentRedactedNames;\n  return Effect.flatMap(\n    ref,\n    (names) => Effect.provideService(ref, [...names, name])(effect),\n  );\n};\n\nconst buildRequest = <\n  S extends ResponseSpec,\n  E extends ResponseSpec | undefined,\n>(\n  ctx: ClientContext,\n  op: OperationDescriptor<S, E>,\n  decoded: DecodedInput,\n): HttpClientRequest.HttpClientRequest => {\n  const baseUrl = ctx.options.baseUrl ?? op.baseUrl;\n  if (!baseUrl) {\n    throw new Error(\n      `${op.name}: no baseUrl — the spec has no server URL, pass one in ClientOptions`,\n    );\n  }\n  const path = resolvePath(op.path, decoded.path);\n  let request = HttpClientRequest.make(op.method)(\n    `${trimSlash(baseUrl)}${path.startsWith(\"/\") ? \"\" : \"/\"}${path}`,\n  );\n  request = HttpClientRequest.appendUrlParams(\n    request,\n    toParamPairs(decoded.query),\n  );\n  for (const [key, value] of toParamPairs(decoded.headers)) {\n    request = HttpClientRequest.setHeader(request, key, value);\n  }\n  if (decoded.body !== undefined) {\n    request = HttpClientRequest.setBody(\n      request,\n      encodeBody(decoded.body, op.contentType),\n    );\n  }\n  return applySecurity(request, op.security, ctx.credentials);\n};\n\n// ---------------------------------------------------------------------------\n// Response reading\n// ---------------------------------------------------------------------------\n\nconst readRaw = (\n  response: HttpClientResponse.HttpClientResponse,\n  kind: ResponseKind,\n) => {\n  switch (kind) {\n    case \"json\":\n      return response.json;\n    case \"text\":\n      return response.text;\n    case \"binary\":\n    case \"stream\":\n      return response.arrayBuffer;\n    case \"empty\":\n      return Effect.void;\n  }\n};\n\nconst tryParseJson = (text: string | undefined): unknown => {\n  if (text === undefined || text === \"\") return undefined;\n  try {\n    return JSON.parse(text);\n  } catch {\n    return text;\n  }\n};\n\nconst lookup = (\n  spec: ResponseSpec | undefined,\n  status: number,\n): ResponseEntry | undefined =>\n  spec === undefined ? undefined : (spec[String(status)] ?? spec[\"default\"]);\n\n// ---------------------------------------------------------------------------\n// The executor\n// ---------------------------------------------------------------------------\n\n/**\n * Run one operation: decode the input, build the request, send it through\n * the caller's `HttpClient`, and decode the response by status. Resolves\n * with `{ status, value }` for documented success statuses, fails with a\n * typed `BunnyResponseError` for documented error statuses.\n */\nexport const executeOperation = <\n  S extends ResponseSpec,\n  E extends ResponseSpec | undefined,\n>(\n  ctx: ClientContext,\n  op: OperationDescriptor<S, E>,\n  input: unknown,\n): Effect.Effect<\n  ResponseUnion<S>,\n  BunnyClientError | OperationFailure<E>,\n  never\n> =>\n  Effect.gen(function* () {\n    // ENCODE, not decode: callers pass the schema's Type (Date, branded ids, …)\n    // and the wire needs the Encoded form (ISO strings, …). Encoding also\n    // validates the input against the Type side.\n    const decoded: DecodedInput = op.input === undefined\n      ? {}\n      : yield* Schema.encodeUnknownEffect(op.input)(input).pipe(\n        Effect.mapError((cause) =>\n          new BunnyInputError({ operation: op.name, cause })\n        ),\n      );\n    const request = buildRequest(ctx, op, decoded);\n    const response = yield* withCredentialRedacted(\n      op.security,\n      ctx.http.execute(request),\n    );\n    const status = response.status;\n    const successEntry = lookup(op.success, status);\n    const errorEntry = lookup(op.error, status);\n    const entry = successEntry ?? errorEntry;\n    if (entry === undefined) {\n      const text = yield* response.text.pipe(\n        Effect.orElseSucceed(() => undefined),\n      );\n      return yield* new BunnyUnexpectedStatusError({\n        operation: op.name,\n        status,\n        body: tryParseJson(text),\n      });\n    }\n    const raw = yield* readRaw(response, entry.kind);\n    const value = entry.kind === \"binary\" || entry.kind === \"stream\"\n      ? raw\n      : yield* Schema.decodeUnknownEffect(entry.schema)(raw).pipe(\n        Effect.mapError((cause) =>\n          new BunnyDecodeError({ operation: op.name, status, cause })\n        ),\n      );\n    const result = { status, value };\n    if (successEntry !== undefined) return result as ResponseUnion<S>;\n    return yield* new BunnyResponseError({\n      operation: op.name,\n      response: result,\n    }) as OperationFailure<E>;\n  }).pipe(\n    Effect.mapError(redactHttpClientError(op.security)),\n    // Kept for symmetry with the Effect 3 runtime: in Effect 4 `execute` adds\n    // no `Scope` to `R`, so this is a no-op on the requirements.\n    Effect.scoped,\n    Effect.withSpan(`bunny.${op.name}`, {\n      attributes: { \"http.request.method\": op.method, \"url.template\": op.path },\n    }),\n  );\n"]}

package/dist/src/testing.d.ts

@@ -0,0 +1,78 @@
+import { Effect, Layer } from "effect";
+import { HttpClient } from "effect/http";
+import { BunnyCredentials } from "./credentials.js";
+import type { ClientOptions } from "./operation.js";
+export interface RecordedRequest {
+    readonly method: string;
+    /** Absolute URL including the query string. */
+    readonly url: string;
+    /** Header names lower-cased. */
+    readonly headers: Record<string, string>;
+}
+export interface Reply {
+    readonly status: number;
+    /** JSON-encoded when an object; sent verbatim when a string; nothing when undefined. */
+    readonly body?: unknown;
+    readonly headers?: Record<string, string>;
+}
+export interface TestTransport {
+    readonly layer: Layer.Layer<HttpClient.HttpClient>;
+    readonly requests: RecordedRequest[];
+    /** Queue the reply (or a function of the request) for every following request. Defaults to 200 with no body. */
+    reply(next: Reply | ((request: RecordedRequest) => Reply)): void;
+    /** Make every further request fail at the transport level (connection refused / socket error). */
+    failTransport(): void;
+    /** Base URL to point the service at; undefined for the stub (which accepts any host). */
+    readonly baseUrl?: string;
+    close(): Promise<void>;
+}
+/** An `HttpClient` that never touches the network. */
+export declare const stubHttpClient: () => TestTransport;
+/** A loopback `node:http` server driven through `effect/http`'s `FetchHttpClient`. */
+export declare const fetchHttpClient: () => Promise<TestTransport>;
+export type Transport = "stub" | "fetch";
+export declare const makeTransport: (transport: Transport) => Promise<TestTransport>;
+/** The static side every generated `<Name>` service class has. */
+export interface ServiceClass<Id> {
+    readonly Default: Layer.Layer<Id, never, HttpClient.HttpClient | BunnyCredentials>;
+    readonly layer: (options: ClientOptions) => Layer.Layer<Id, never, HttpClient.HttpClient | BunnyCredentials>;
+}
+export interface ServiceContract<Id> {
+    readonly service: ServiceClass<Id>;
+    /** One representative read operation, with the request the spec documents for it. */
+    readonly operation: {
+        /** The call, e.g. `Effect.flatMap(BunnyCore, (core) => core.pullZonePublicIndex({ path: { id: 7 } }))`. */
+        readonly call: Effect.Effect<{
+            readonly status: number;
+            readonly value: unknown;
+        }, unknown, Id>;
+        readonly method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
+        /** The documented absolute URL, query string included. */
+        readonly url: string;
+        /** The spec's server URL when it carries a path (e.g. `https://host/api/mc`); defaults to the URL's origin. */
+        readonly server?: string;
+        /** The spec's API-key header name; Bunny's APIs all use `AccessKey`. */
+        readonly authHeader?: string;
+        readonly success: {
+            readonly status: number;
+            readonly body?: unknown;
+            readonly value?: unknown;
+        };
+        /** A documented error status, when the operation has one. */
+        readonly error?: {
+            readonly status: number;
+            readonly body?: unknown;
+        };
+    };
+}
+export interface ContractCase {
+    readonly name: string;
+    readonly run: () => Promise<void>;
+}
+/**
+ * Build the contract cases for one service: over both transports when
+ * `transport` is omitted (case names are prefixed `[stub]` / `[fetch]`), or
+ * over one. Every case sets up its own transport, so cases are independent
+ * and can run in any order.
+ */
+export declare const serviceContract: <Id>(contract: ServiceContract<Id>, transport?: Transport) => ContractCase[];