@contentful/experience-design-system-cli 2.26.1-dev-build-64063df.0 → 2.26.1-dev-build-f1d1f30.0

package/dist/src/apply/api-client.js

@@ -1,440 +0,0 @@
-import { designSystemImportSourcelessPreview, designSystemImportApply, designSystemImportGetOperation, } from '@contentful/experience-design-system-client';
-import { DEFAULT_API_HOST, toApiHost } from '../host-utils.js';
-import { getDebugLogger } from '../lib/debug-logger.js';
-import { buildUserAgent } from '../lib/user-agent.js';
-export const DEFAULT_HOST = DEFAULT_API_HOST;
-export const PREVIEW_ERROR_PREFIX = 'preview failed:';
-export const APPLY_ERROR_PREFIX = 'apply failed:';
-// Substring match the orchestrator uses to distinguish a parseable
-// component-level validation failure from generic 422s. Quoted because the
-// match runs against the raw JSON body (which contains `"code":"ValidationFailed"`).
-// If the server ever changes the casing or naming, isPreviewValidationError
-// silently returns false and the retry loop never fires — so this lives next
-// to the prefixes as a deliberate, named contract rather than an inline
-// magic string in the orchestrator.
-export const VALIDATION_FAILED_CODE = '"ValidationFailed"';
-const MAX_RETRY_AFTER_MS = 60_000;
-function defaultSleep(delayMs) {
-    return new Promise((resolve) => setTimeout(resolve, delayMs));
-}
-function isTransientStatus(status) {
-    return status >= 500 && status <= 599;
-}
-function retryAfterMs(response) {
-    const value = response.headers?.get('retry-after')?.trim();
-    if (!value)
-        return undefined;
-    const seconds = Number(value);
-    const delayMs = Number.isFinite(seconds) ? seconds * 1000 : Date.parse(value) - Date.now();
-    if (!Number.isFinite(delayMs) || delayMs < 0 || delayMs > MAX_RETRY_AFTER_MS)
-        return undefined;
-    return Math.round(delayMs);
-}
-function errorMessage(error) {
-    return error instanceof Error && error.message ? error.message : String(error);
-}
-// The generated client parses non-2xx bodies to JSON internally (unlike a raw
-// fetch(), which hands back the raw body string). Re-serializing here keeps
-// ApiError's `body: string` contract and parsePreviewValidationErrors'
-// `JSON.parse` unchanged for callers, at the cost of a harmless double-parse
-// on error paths only.
-function stringifyError(error) {
-    return typeof error === 'string' ? error : JSON.stringify(error ?? {});
-}
-// Cap on the body slice appended to ApiError.message. Bumped from 1000 →
-// 16384 so realistic 422 ValidationFailed reports (which list every
-// offending component, ~100 chars per error, easily exceeds 1KB once you
-// cross ~10 components) survive intact through subprocess stderr. The
-// orchestrator's parseOffendingComponentNames does JSON.parse on this slice
-// and silently fails to recover any offenders if the JSON is mid-truncated.
-// The cap stays in place to keep a runaway server response from blowing up
-// log output.
-const ERROR_BODY_LOG_CAP = 16384;
-export class ApiError extends Error {
-    status;
-    body;
-    guidance;
-    constructor(message, status, body, guidance) {
-        super(message);
-        this.status = status;
-        this.body = body;
-        this.guidance = guidance;
-        if (body) {
-            const trimmed = body.length > ERROR_BODY_LOG_CAP ? body.slice(0, ERROR_BODY_LOG_CAP) + '…' : body;
-            this.message = `${message}\n${trimmed}`;
-        }
-    }
-}
-const COMPONENT_PATH_PREFIX = 'manifest:components/';
-/**
- * Parse the JSON body of a 422 from `previewImport()` into structured
- * per-component validation errors. Returns [] for any malformed input
- * so callers can fall back to the generic error path without try/catch.
- *
- * Path shape: `manifest:components/<Name>/$slots/<key>` or
- * `manifest:components/<Name>/$properties/<key>`. Only the component
- * name is extracted today; `path` and `message` are kept verbatim so
- * future surfaces (debug logging, headless retry in SP-4) can render
- * the field-level detail.
- */
-export function parsePreviewValidationErrors(body) {
-    if (!body)
-        return [];
-    let parsed;
-    try {
-        parsed = JSON.parse(body);
-    }
-    catch {
-        return [];
-    }
-    const details = parsed?.details;
-    const errors = details?.errors;
-    if (!Array.isArray(errors))
-        return [];
-    const out = [];
-    for (const raw of errors) {
-        if (typeof raw !== 'object' || raw === null)
-            continue;
-        const entry = raw;
-        if (typeof entry.path !== 'string' || typeof entry.message !== 'string')
-            continue;
-        if (!entry.path.startsWith(COMPONENT_PATH_PREFIX))
-            continue;
-        const tail = entry.path.slice(COMPONENT_PATH_PREFIX.length);
-        const slash = tail.indexOf('/');
-        const componentName = slash === -1 ? tail : tail.slice(0, slash);
-        if (!componentName)
-            continue;
-        out.push({ componentName, path: entry.path, message: entry.message });
-    }
-    return out;
-}
-const PROPERTY_BREAKING_REASONS = new Set([
-    'removed',
-    'added_required_no_default',
-    'type_changed',
-    'validation_narrowed',
-]);
-const SLOT_BREAKING_REASONS = new Set(['slot_removed', 'slot_allowed_components_narrowed']);
-export function sanitizeBreakingChanges(raw) {
-    if (!Array.isArray(raw))
-        return [];
-    const out = [];
-    for (const bc of raw) {
-        if (typeof bc !== 'object' || bc === null)
-            continue;
-        const reason = bc.reason;
-        if (typeof reason !== 'string')
-            continue;
-        if ('propertyId' in bc && typeof bc.propertyId === 'string') {
-            if (PROPERTY_BREAKING_REASONS.has(reason))
-                out.push(bc);
-            continue;
-        }
-        if ('slotId' in bc && typeof bc.slotId === 'string') {
-            if (SLOT_BREAKING_REASONS.has(reason))
-                out.push(bc);
-            continue;
-        }
-    }
-    return out;
-}
-function sanitizePreviewResponse(res) {
-    for (const item of res.components?.changed ?? []) {
-        const cc = item.changeClassification;
-        if (cc && Array.isArray(cc.breakingChanges)) {
-            cc.breakingChanges = sanitizeBreakingChanges(cc.breakingChanges);
-        }
-    }
-    return res;
-}
-function isApsDenialBody(body) {
-    if (!body)
-        return false;
-    try {
-        const parsed = JSON.parse(body);
-        const id = parsed?.sys?.id;
-        return id === 'NotFound' || id === 'AccessDenied';
-    }
-    catch {
-        return false;
-    }
-}
-async function request(url, options) {
-    const headers = {
-        Authorization: `Bearer ${options.token}`,
-        'Content-Type': 'application/json',
-        'X-Contentful-User-Agent': buildUserAgent(),
-    };
-    const init = {
-        method: options.method ?? 'GET',
-        headers,
-    };
-    if (options.body)
-        init.body = options.body;
-    return fetch(url, init);
-}
-export class ImportApiClient {
-    host;
-    token;
-    spaceId;
-    environmentId;
-    retry;
-    lastRequestId;
-    getLastRequestId() {
-        return this.lastRequestId;
-    }
-    noteRequestId(response) {
-        const requestId = response.headers.get('x-contentful-request-id');
-        if (requestId)
-            this.lastRequestId = requestId;
-    }
-    constructor(opts) {
-        this.host = toApiHost(opts.host);
-        this.token = opts.cmaToken;
-        this.spaceId = opts.spaceId;
-        this.environmentId = opts.environmentId;
-        const initialDelayMs = Math.max(0, opts.retry?.initialDelayMs ?? 250);
-        this.retry = {
-            maxAttempts: Math.max(1, Math.floor(opts.retry?.maxAttempts ?? 3)),
-            initialDelayMs,
-            maxDelayMs: Math.max(initialDelayMs, opts.retry?.maxDelayMs ?? 2000),
-            sleep: opts.retry?.sleep ?? defaultSleep,
-        };
-    }
-    base() {
-        return `${this.host}/spaces/${this.spaceId}/environments/${this.environmentId}`;
-    }
-    headers() {
-        return {
-            Authorization: `Bearer ${this.token}`,
-            'Content-Type': 'application/json',
-            'X-Contentful-User-Agent': buildUserAgent(),
-        };
-    }
-    async requestWithRetry(phase, errorPrefix, makeCall, context = {}) {
-        const debug = getDebugLogger();
-        const startedAt = Date.now();
-        for (let attempt = 1; attempt <= this.retry.maxAttempts; attempt++) {
-            let result;
-            try {
-                result = await makeCall();
-            }
-            catch (error) {
-                if (attempt === this.retry.maxAttempts) {
-                    const body = `The request failed after ${attempt} attempts because of a network error: ${errorMessage(error)}. ` +
-                        'Check your connection and try again.';
-                    debug.event('apply', `${phase}.error`, {
-                        ...context,
-                        attempt,
-                        maxAttempts: this.retry.maxAttempts,
-                        status: 0,
-                        reason: 'transport_retry_exhausted',
-                        durationMs: Date.now() - startedAt,
-                    });
-                    throw new ApiError(`${errorPrefix} 0`, 0, body);
-                }
-                const delayMs = Math.min(this.retry.initialDelayMs * 2 ** (attempt - 1), this.retry.maxDelayMs);
-                debug.event('apply', `${phase}.retry`, {
-                    ...context,
-                    attempt,
-                    maxAttempts: this.retry.maxAttempts,
-                    status: 0,
-                    reason: 'transport_error',
-                    delayMs,
-                });
-                await this.retry.sleep(delayMs);
-                continue;
-            }
-            if (!isTransientStatus(result.response.status)) {
-                this.noteRequestId(result.response);
-                return result;
-            }
-            if (attempt === this.retry.maxAttempts) {
-                const body = stringifyError(result.error);
-                const guidance = `The ${phase} request failed after ${attempt} attempts because the service remained unavailable. ` +
-                    'Wait a moment and try again.';
-                debug.event('apply', `${phase}.error`, {
-                    ...context,
-                    attempt,
-                    maxAttempts: this.retry.maxAttempts,
-                    status: result.response.status,
-                    reason: 'retry_exhausted',
-                    durationMs: Date.now() - startedAt,
-                    bodyHead: body.slice(0, 2000),
-                });
-                throw new ApiError(`${errorPrefix} ${result.response.status}`, result.response.status, body, guidance);
-            }
-            const backoffMs = Math.min(this.retry.initialDelayMs * 2 ** (attempt - 1), this.retry.maxDelayMs);
-            const delayMs = retryAfterMs(result.response) ?? backoffMs;
-            debug.event('apply', `${phase}.retry`, {
-                ...context,
-                attempt,
-                maxAttempts: this.retry.maxAttempts,
-                status: result.response.status,
-                reason: 'http_5xx',
-                delayMs,
-            });
-            await this.retry.sleep(delayMs);
-        }
-        throw new Error('Retry attempts exhausted');
-    }
-    async validateToken() {
-        // /users/me is the canonical token-validity endpoint — avoids space-membership
-        // false positives that don't apply to the design-systems API authorization path.
-        const url = `${this.host}/users/me`;
-        const res = await request(url, { token: this.token });
-        this.noteRequestId(res);
-        if (res.status === 401) {
-            throw new ApiError('CMA token is invalid or revoked', res.status, await res.text());
-        }
-        if (!res.ok) {
-            throw new ApiError(`unexpected error validating token: ${res.status}`, res.status, await res.text());
-        }
-        await this.checkPreflight();
-    }
-    // Probe the sources-api preflight endpoint to catch APS-denied users up-front,
-    // rather than letting them run a full apply flow that only fails at the write.
-    // The endpoint gates Component + DesignToken permissions and returns:
-    //   200 → user has apply permissions, proceed
-    //   403 { sys.id: AccessDenied } → user lacks write; surface via error-parser
-    //   404 { sys.id: NotFound }     → user lacks read (APS hides existence)
-    //   404 without a NotFound envelope → older backend deployment; treat as pass
-    //   5xx / network                → backend flake; treat as pass, do not block
-    async checkPreflight() {
-        const url = `${this.host}/spaces/${this.spaceId}/environments/${this.environmentId}/design_systems/preflight`;
-        let res;
-        try {
-            res = await request(url, { token: this.token });
-        }
-        catch {
-            return; // network error — don't block; the real call will surface it
-        }
-        this.noteRequestId(res);
-        if (res.ok)
-            return;
-        if (res.status >= 500)
-            return; // backend flake — don't block
-        const body = await res.text();
-        if (res.status === 404 && !isApsDenialBody(body))
-            return; // legacy backend without the endpoint
-        throw new ApiError(`preflight failed: ${res.status}`, res.status, body);
-    }
-    async previewImport(manifest, allowDeletions = false) {
-        const debug = getDebugLogger();
-        const startedAt = Date.now();
-        debug.event('apply', 'preview.request', {
-            url: `${this.base()}/design_systems/imports/preview`,
-            componentCount: manifest.components?.length ?? 0,
-            tokenCount: manifest.designTokens?.length ?? 0,
-            allowDeletions,
-        });
-        const result = await this.requestWithRetry('preview', PREVIEW_ERROR_PREFIX, () => designSystemImportSourcelessPreview({
-            baseUrl: this.host,
-            headers: this.headers(),
-            path: { spaceId: this.spaceId, environmentId: this.environmentId },
-            body: { ...manifest, allowDeletions },
-            parseAs: 'json',
-        }));
-        if (!result.response.ok) {
-            const body = stringifyError(result.error);
-            debug.event('apply', 'preview.error', {
-                status: result.response.status,
-                durationMs: Date.now() - startedAt,
-                bodyHead: body.slice(0, 2000),
-            });
-            throw new ApiError(`${PREVIEW_ERROR_PREFIX} ${result.response.status}`, result.response.status, body);
-        }
-        const parsed = result.data;
-        debug.event('apply', 'preview.ok', { status: result.response.status, durationMs: Date.now() - startedAt });
-        return sanitizePreviewResponse(parsed);
-    }
-    async applyImport(manifest, options) {
-        const { acknowledgeBreakingChanges, allowDeletions = false } = options;
-        const debug = getDebugLogger();
-        const startedAt = Date.now();
-        debug.event('apply', 'apply.request', {
-            url: `${this.base()}/design_systems/imports/apply`,
-            acknowledgeBreakingChanges,
-            allowDeletions,
-        });
-        let result;
-        try {
-            result = await designSystemImportApply({
-                baseUrl: this.host,
-                headers: this.headers(),
-                path: { spaceId: this.spaceId, environmentId: this.environmentId },
-                body: { ...manifest, acknowledgeBreakingChanges, allowDeletions },
-                parseAs: 'json',
-            });
-        }
-        catch (error) {
-            const body = `The apply request was not retried because its outcome is unknown and retrying could start a duplicate operation. ` +
-                `Check for an existing operation before trying again. Cause: ${errorMessage(error)}`;
-            debug.event('apply', 'apply.error', {
-                status: 0,
-                durationMs: Date.now() - startedAt,
-                reason: 'transport_error_not_retried',
-            });
-            throw new ApiError(`${APPLY_ERROR_PREFIX} 0`, 0, body);
-        }
-        if (!result.response.ok) {
-            const body = stringifyError(result.error);
-            const guidance = isTransientStatus(result.response.status)
-                ? 'The apply request was not retried because the server may already have started an operation and retrying could create a duplicate. Check for an existing operation before trying again.'
-                : undefined;
-            debug.event('apply', 'apply.error', {
-                status: result.response.status,
-                durationMs: Date.now() - startedAt,
-                bodyHead: body.slice(0, 2000),
-            });
-            throw new ApiError(`${APPLY_ERROR_PREFIX} ${result.response.status}`, result.response.status, body, guidance);
-        }
-        const parsed = result.data;
-        debug.event('apply', 'apply.accepted', {
-            status: result.response.status,
-            operationId: parsed.sys?.id,
-            durationMs: Date.now() - startedAt,
-        });
-        return parsed;
-    }
-    async pollOperation(operationId, opts = {}) {
-        const intervalMs = opts.intervalMs ?? 2000;
-        const maxIntervalMs = opts.maxIntervalMs ?? Math.round(intervalMs * 2.5);
-        const maxAttempts = opts.maxAttempts ?? 150;
-        const terminalStatuses = new Set(['succeeded', 'partial', 'failed']);
-        for (let attempt = 0; attempt < maxAttempts; attempt++) {
-            const result = await this.requestWithRetry('poll', 'poll failed:', () => designSystemImportGetOperation({
-                baseUrl: this.host,
-                headers: this.headers(),
-                path: { spaceId: this.spaceId, environmentId: this.environmentId, operationId },
-                parseAs: 'json',
-            }), { operationId });
-            if (!result.response.ok) {
-                throw new ApiError(`poll failed: ${result.response.status}`, result.response.status, stringifyError(result.error));
-            }
-            const op = result.data;
-            opts.onProgress?.(op);
-            getDebugLogger().event('apply', 'poll.tick', {
-                operationId,
-                attempt,
-                status: op.sys.status,
-            });
-            if (terminalStatuses.has(op.sys.status)) {
-                getDebugLogger().event('apply', 'poll.terminal', {
-                    operationId,
-                    attempt,
-                    status: op.sys.status,
-                });
-                return op;
-            }
-            if (attempt < maxAttempts - 1) {
-                const progress = maxAttempts > 1 ? attempt / (maxAttempts - 1) : 0;
-                const baseDelay = intervalMs + (maxIntervalMs - intervalMs) * progress;
-                const jitter = Math.random() * baseDelay * 0.15;
-                await new Promise((resolve) => setTimeout(resolve, baseDelay + jitter));
-            }
-        }
-        throw new Error(`Operation ${operationId} timed out after ${maxAttempts} attempts`);
-    }
-}