@distilled.cloud/fly-io 0.0.0 → 0.2.5-alpha2

package/package.json

@@ -1,16 +1,88 @@
 {
   "name": "@distilled.cloud/fly-io",
-  "version": "0.0.0",
-  "description": "Fly-io SDK for Effect (placeholder)",
-  "type": "module",
-  "main": "index.js",
-  "files": [
-    "index.js"
-  ],
+  "version": "0.2.5-alpha2",
   "repository": {
     "type": "git",
     "url": "https://github.com/alchemy-run/distilled",
     "directory": "packages/fly-io"
   },
-  "license": "MIT"
-}
+  "type": "module",
+  "sideEffects": false,
+  "module": "src/index.ts",
+  "files": [
+    "lib",
+    "src"
+  ],
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "bun": "./src/index.ts",
+      "default": "./lib/index.js"
+    },
+    "./Category": {
+      "types": "./lib/category.d.ts",
+      "bun": "./src/category.ts",
+      "default": "./lib/category.js"
+    },
+    "./Client": {
+      "types": "./lib/client.d.ts",
+      "bun": "./src/client.ts",
+      "default": "./lib/client.js"
+    },
+    "./Credentials": {
+      "types": "./lib/credentials.d.ts",
+      "bun": "./src/credentials.ts",
+      "default": "./lib/credentials.js"
+    },
+    "./Errors": {
+      "types": "./lib/errors.d.ts",
+      "bun": "./src/errors.ts",
+      "default": "./lib/errors.js"
+    },
+    "./Operations": {
+      "types": "./lib/operations/index.d.ts",
+      "bun": "./src/operations/index.ts",
+      "default": "./lib/operations/index.js"
+    },
+    "./Retry": {
+      "types": "./lib/retry.d.ts",
+      "bun": "./src/retry.ts",
+      "default": "./lib/retry.js"
+    },
+    "./Sensitive": {
+      "types": "./lib/sensitive.d.ts",
+      "bun": "./src/sensitive.ts",
+      "default": "./lib/sensitive.js"
+    },
+    "./Traits": {
+      "types": "./lib/traits.d.ts",
+      "bun": "./src/traits.ts",
+      "default": "./lib/traits.js"
+    }
+  },
+  "scripts": {
+    "typecheck": "tsgo",
+    "build": "tsgo -b",
+    "fmt": "oxfmt --write src",
+    "lint": "oxlint --fix src",
+    "check": "tsgo && oxlint src && oxfmt --check src",
+    "test": "bunx vitest run test",
+    "publish:npm": "bun run build && bun publish --access public",
+    "generate": "bun run scripts/generate.ts && oxfmt --write src && oxlint --fix src",
+    "specs:fetch": "git submodule update --force --init --recursive specs/distilled-spec-fly-io && git -C specs/distilled-spec-fly-io checkout -- .",
+    "specs:update": "git -C specs/distilled-spec-fly-io fetch && git -C specs/distilled-spec-fly-io checkout main && git -C specs/distilled-spec-fly-io pull"
+  },
+  "dependencies": {
+    "@distilled.cloud/core": "0.2.5-alpha2",
+    "effect": "4.0.0-beta.30"
+  },
+  "devDependencies": {
+    "@types/bun": "^1.3.0",
+    "@types/node": "^25.3.5",
+    "dotenv": "^16.5.0",
+    "vitest": "^3.2.3"
+  },
+  "peerDependencies": {
+    "effect": "4.0.0-beta.30"
+  }
+}

package/src/category.ts

@@ -0,0 +1,4 @@
+/**
+ * Re-export the shared category system from sdk-core.
+ */
+export * from "@distilled.cloud/core/category";

package/src/client.ts

@@ -0,0 +1,62 @@
+/**
+ * Fly-io API Client.
+ *
+ * Wraps the shared REST client from sdk-core with Fly-io-specific
+ * error matching and credential handling.
+ */
+import * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
+import { makeAPI } from "@distilled.cloud/core/client";
+import {
+  HTTP_STATUS_MAP,
+  UnknownFlyIoError,
+  FlyIoParseError,
+} from "./errors.ts";
+
+// Re-export for backwards compatibility
+export { UnknownFlyIoError } from "./errors.ts";
+import { Credentials } from "./credentials.ts";
+
+// API Error Response Schema
+const ApiErrorResponse = Schema.Struct({
+  code: Schema.optional(Schema.String),
+  message: Schema.String,
+});
+
+/**
+ * Match a Fly-io API error response to the appropriate error class based on HTTP status.
+ */
+const matchError = (
+  status: number,
+  errorBody: unknown,
+): Effect.Effect<never, unknown> => {
+  try {
+    const parsed = Schema.decodeUnknownSync(ApiErrorResponse)(errorBody);
+    const ErrorClass = (HTTP_STATUS_MAP as any)[status];
+    if (ErrorClass) {
+      return Effect.fail(new ErrorClass({ message: parsed.message ?? "" }));
+    }
+    return Effect.fail(
+      new UnknownFlyIoError({
+        code: parsed.code,
+        message: parsed.message,
+        body: errorBody,
+      }),
+    );
+  } catch {
+    return Effect.fail(new UnknownFlyIoError({ body: errorBody }));
+  }
+};
+
+/**
+ * Fly-io API client.
+ */
+export const API = makeAPI({
+  credentials: Credentials as any,
+  getBaseUrl: (creds: any) => creds.apiBaseUrl,
+  getAuthHeaders: (creds: any) => ({
+    Authorization: `Bearer ${creds.apiKey}`,
+  }),
+  matchError,
+  ParseError: FlyIoParseError as any,
+});

package/src/credentials.ts

@@ -0,0 +1,30 @@
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as ServiceMap from "effect/ServiceMap";
+import { ConfigError } from "@distilled.cloud/core/errors";
+
+export const DEFAULT_API_BASE_URL = "https://api.fly-io.com";
+
+export interface Config {
+  readonly apiKey: string;
+  readonly apiBaseUrl: string;
+}
+
+export class Credentials extends ServiceMap.Service<Credentials, Config>()(
+  "Fly-ioCredentials",
+) {}
+
+export const CredentialsFromEnv = Layer.effect(
+  Credentials,
+  Effect.gen(function* () {
+    const apiKey = process.env.FLY_IO_API_KEY;
+
+    if (!apiKey) {
+      return yield* new ConfigError({
+        message: "FLY_IO_API_KEY environment variable is required",
+      });
+    }
+
+    return { apiKey, apiBaseUrl: DEFAULT_API_BASE_URL };
+  }),
+);

package/src/errors.ts

@@ -0,0 +1,47 @@
+/**
+ * Fly-io-specific error types.
+ *
+ * Re-exports common HTTP errors from sdk-core and adds Fly-io-specific
+ * error matching and API error types.
+ */
+export {
+  BadGateway,
+  BadRequest,
+  Conflict,
+  ConfigError,
+  Forbidden,
+  GatewayTimeout,
+  InternalServerError,
+  Locked,
+  NotFound,
+  ServiceUnavailable,
+  TooManyRequests,
+  Unauthorized,
+  UnprocessableEntity,
+  HTTP_STATUS_MAP,
+  DEFAULT_ERRORS,
+  API_ERRORS,
+} from "@distilled.cloud/core/errors";
+export type { DefaultErrors } from "@distilled.cloud/core/errors";
+
+import * as Schema from "effect/Schema";
+import * as Category from "@distilled.cloud/core/category";
+
+// Unknown Fly-io error - returned when an error code is not recognized
+export class UnknownFlyIoError extends Schema.TaggedErrorClass<UnknownFlyIoError>()(
+  "UnknownFlyIoError",
+  {
+    code: Schema.optional(Schema.String),
+    message: Schema.optional(Schema.String),
+    body: Schema.Unknown,
+  },
+).pipe(Category.withServerError) {}
+
+// Schema parse error wrapper
+export class FlyIoParseError extends Schema.TaggedErrorClass<FlyIoParseError>()(
+  "FlyIoParseError",
+  {
+    body: Schema.Unknown,
+    cause: Schema.Unknown,
+  },
+).pipe(Category.withParseError) {}

package/src/index.ts

@@ -0,0 +1,15 @@
+/**
+ * Fly-io SDK for Effect
+ *
+ * @example
+ * ```ts
+ * import * as Fly-io from "@distilled.cloud/fly-io";
+ * ```
+ */
+export * from "./credentials.ts";
+export * as Category from "./category.ts";
+export * as T from "./traits.ts";
+export * as Retry from "./retry.ts";
+export { API } from "./client.ts";
+export * from "./errors.ts";
+export { SensitiveString, SensitiveNullableString } from "./sensitive.ts";

package/src/operations/AppCreateDeployToken.ts

@@ -0,0 +1,31 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client";
+import * as T from "../traits";
+
+// Input Schema
+export const AppCreateDeployTokenInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    app_name: Schema.String.pipe(T.PathParam()),
+    expiry: Schema.optional(Schema.String),
+  }).pipe(T.Http({ method: "POST", path: "/apps/{app_name}/deploy_token" }));
+export type AppCreateDeployTokenInput = typeof AppCreateDeployTokenInput.Type;
+
+// Output Schema
+export const AppCreateDeployTokenOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    token: Schema.optional(Schema.String),
+  });
+export type AppCreateDeployTokenOutput = typeof AppCreateDeployTokenOutput.Type;
+
+// The operation
+/**
+ * Create App deploy token
+ *
+ * @param app_name - Fly App Name
+ */
+export const AppCreateDeployToken = /*@__PURE__*/ /*#__PURE__*/ API.make(
+  () => ({
+    inputSchema: AppCreateDeployTokenInput,
+    outputSchema: AppCreateDeployTokenOutput,
+  }),
+);

package/src/operations/App_CertificatesAcmeCreate.ts

@@ -0,0 +1,101 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client";
+import * as T from "../traits";
+
+// Input Schema
+export const App_CertificatesAcmeCreateInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    hostname: Schema.optional(Schema.String),
+  }).pipe(
+    T.Http({ method: "POST", path: "/apps/{app_name}/certificates/acme" }),
+  );
+export type App_CertificatesAcmeCreateInput =
+  typeof App_CertificatesAcmeCreateInput.Type;
+
+// Output Schema
+export const App_CertificatesAcmeCreateOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    acme_requested: Schema.optional(Schema.Boolean),
+    certificates: Schema.optional(
+      Schema.Array(
+        Schema.Struct({
+          created_at: Schema.optional(Schema.String),
+          expires_at: Schema.optional(Schema.String),
+          issued: Schema.optional(
+            Schema.Array(
+              Schema.Struct({
+                certificate_authority: Schema.optional(Schema.String),
+                expires_at: Schema.optional(Schema.String),
+                type: Schema.optional(Schema.Literals(["rsa", "ecdsa"])),
+              }),
+            ),
+          ),
+          issuer: Schema.optional(Schema.String),
+          source: Schema.optional(Schema.Literals(["custom", "fly"])),
+          status: Schema.optional(
+            Schema.Literals([
+              "active",
+              "pending_ownership",
+              "pending_validation",
+            ]),
+          ),
+        }),
+      ),
+    ),
+    configured: Schema.optional(Schema.Boolean),
+    dns_provider: Schema.optional(Schema.String),
+    dns_requirements: Schema.optional(
+      Schema.Struct({
+        a: Schema.optional(Schema.Array(Schema.String)),
+        aaaa: Schema.optional(Schema.Array(Schema.String)),
+        acme_challenge: Schema.optional(
+          Schema.Struct({
+            name: Schema.optional(Schema.String),
+            target: Schema.optional(Schema.String),
+          }),
+        ),
+        cname: Schema.optional(Schema.String),
+        ownership: Schema.optional(
+          Schema.Struct({
+            app_value: Schema.optional(Schema.String),
+            name: Schema.optional(Schema.String),
+            org_value: Schema.optional(Schema.String),
+          }),
+        ),
+      }),
+    ),
+    hostname: Schema.optional(Schema.String),
+    rate_limited_until: Schema.optional(Schema.String),
+    status: Schema.optional(Schema.String),
+    validation: Schema.optional(
+      Schema.Struct({
+        alpn_configured: Schema.optional(Schema.Boolean),
+        dns_configured: Schema.optional(Schema.Boolean),
+        http_configured: Schema.optional(Schema.Boolean),
+        ownership_txt_configured: Schema.optional(Schema.Boolean),
+      }),
+    ),
+    validation_errors: Schema.optional(
+      Schema.Array(
+        Schema.Struct({
+          code: Schema.optional(Schema.String),
+          message: Schema.optional(Schema.String),
+          remediation: Schema.optional(Schema.String),
+          timestamp: Schema.optional(Schema.String),
+        }),
+      ),
+    ),
+  });
+export type App_CertificatesAcmeCreateOutput =
+  typeof App_CertificatesAcmeCreateOutput.Type;
+
+// The operation
+/**
+ * Request ACME certificate
+ */
+export const App_CertificatesAcmeCreate = /*@__PURE__*/ /*#__PURE__*/ API.make(
+  () => ({
+    inputSchema: App_CertificatesAcmeCreateInput,
+    outputSchema: App_CertificatesAcmeCreateOutput,
+  }),
+);

package/src/operations/App_CertificatesAcmeDelete.ts

@@ -0,0 +1,102 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client";
+import * as T from "../traits";
+
+// Input Schema
+export const App_CertificatesAcmeDeleteInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({}).pipe(
+    T.Http({
+      method: "DELETE",
+      path: "/apps/{app_name}/certificates/{hostname}/acme",
+    }),
+  );
+export type App_CertificatesAcmeDeleteInput =
+  typeof App_CertificatesAcmeDeleteInput.Type;
+
+// Output Schema
+export const App_CertificatesAcmeDeleteOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    acme_requested: Schema.optional(Schema.Boolean),
+    certificates: Schema.optional(
+      Schema.Array(
+        Schema.Struct({
+          created_at: Schema.optional(Schema.String),
+          expires_at: Schema.optional(Schema.String),
+          issued: Schema.optional(
+            Schema.Array(
+              Schema.Struct({
+                certificate_authority: Schema.optional(Schema.String),
+                expires_at: Schema.optional(Schema.String),
+                type: Schema.optional(Schema.Literals(["rsa", "ecdsa"])),
+              }),
+            ),
+          ),
+          issuer: Schema.optional(Schema.String),
+          source: Schema.optional(Schema.Literals(["custom", "fly"])),
+          status: Schema.optional(
+            Schema.Literals([
+              "active",
+              "pending_ownership",
+              "pending_validation",
+            ]),
+          ),
+        }),
+      ),
+    ),
+    configured: Schema.optional(Schema.Boolean),
+    dns_provider: Schema.optional(Schema.String),
+    dns_requirements: Schema.optional(
+      Schema.Struct({
+        a: Schema.optional(Schema.Array(Schema.String)),
+        aaaa: Schema.optional(Schema.Array(Schema.String)),
+        acme_challenge: Schema.optional(
+          Schema.Struct({
+            name: Schema.optional(Schema.String),
+            target: Schema.optional(Schema.String),
+          }),
+        ),
+        cname: Schema.optional(Schema.String),
+        ownership: Schema.optional(
+          Schema.Struct({
+            app_value: Schema.optional(Schema.String),
+            name: Schema.optional(Schema.String),
+            org_value: Schema.optional(Schema.String),
+          }),
+        ),
+      }),
+    ),
+    hostname: Schema.optional(Schema.String),
+    rate_limited_until: Schema.optional(Schema.String),
+    status: Schema.optional(Schema.String),
+    validation: Schema.optional(
+      Schema.Struct({
+        alpn_configured: Schema.optional(Schema.Boolean),
+        dns_configured: Schema.optional(Schema.Boolean),
+        http_configured: Schema.optional(Schema.Boolean),
+        ownership_txt_configured: Schema.optional(Schema.Boolean),
+      }),
+    ),
+    validation_errors: Schema.optional(
+      Schema.Array(
+        Schema.Struct({
+          code: Schema.optional(Schema.String),
+          message: Schema.optional(Schema.String),
+          remediation: Schema.optional(Schema.String),
+          timestamp: Schema.optional(Schema.String),
+        }),
+      ),
+    ),
+  });
+export type App_CertificatesAcmeDeleteOutput =
+  typeof App_CertificatesAcmeDeleteOutput.Type;
+
+// The operation
+/**
+ * Remove ACME certificates
+ */
+export const App_CertificatesAcmeDelete = /*@__PURE__*/ /*#__PURE__*/ API.make(
+  () => ({
+    inputSchema: App_CertificatesAcmeDeleteInput,
+    outputSchema: App_CertificatesAcmeDeleteOutput,
+  }),
+);

package/src/operations/App_CertificatesCheck.ts

@@ -0,0 +1,112 @@
+import * as Schema from "effect/Schema";
+import { API } from "../client";
+import * as T from "../traits";
+
+// Input Schema
+export const App_CertificatesCheckInput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({}).pipe(
+    T.Http({
+      method: "POST",
+      path: "/apps/{app_name}/certificates/{hostname}/check",
+    }),
+  );
+export type App_CertificatesCheckInput = typeof App_CertificatesCheckInput.Type;
+
+// Output Schema
+export const App_CertificatesCheckOutput =
+  /*@__PURE__*/ /*#__PURE__*/ Schema.Struct({
+    acme_requested: Schema.optional(Schema.Boolean),
+    certificates: Schema.optional(
+      Schema.Array(
+        Schema.Struct({
+          created_at: Schema.optional(Schema.String),
+          expires_at: Schema.optional(Schema.String),
+          issued: Schema.optional(
+            Schema.Array(
+              Schema.Struct({
+                certificate_authority: Schema.optional(Schema.String),
+                expires_at: Schema.optional(Schema.String),
+                type: Schema.optional(Schema.Literals(["rsa", "ecdsa"])),
+              }),
+            ),
+          ),
+          issuer: Schema.optional(Schema.String),
+          source: Schema.optional(Schema.Literals(["custom", "fly"])),
+          status: Schema.optional(
+            Schema.Literals([
+              "active",
+              "pending_ownership",
+              "pending_validation",
+            ]),
+          ),
+        }),
+      ),
+    ),
+    configured: Schema.optional(Schema.Boolean),
+    dns_provider: Schema.optional(Schema.String),
+    dns_records: Schema.optional(
+      Schema.Struct({
+        a: Schema.optional(Schema.Array(Schema.String)),
+        aaaa: Schema.optional(Schema.Array(Schema.String)),
+        acme_challenge_cname: Schema.optional(Schema.String),
+        cname: Schema.optional(Schema.Array(Schema.String)),
+        ownership_txt: Schema.optional(Schema.String),
+        resolved_addresses: Schema.optional(Schema.Array(Schema.String)),
+        soa: Schema.optional(Schema.String),
+      }),
+    ),
+    dns_requirements: Schema.optional(
+      Schema.Struct({
+        a: Schema.optional(Schema.Array(Schema.String)),
+        aaaa: Schema.optional(Schema.Array(Schema.String)),
+        acme_challenge: Schema.optional(
+          Schema.Struct({
+            name: Schema.optional(Schema.String),
+            target: Schema.optional(Schema.String),
+          }),
+        ),
+        cname: Schema.optional(Schema.String),
+        ownership: Schema.optional(
+          Schema.Struct({
+            app_value: Schema.optional(Schema.String),
+            name: Schema.optional(Schema.String),
+            org_value: Schema.optional(Schema.String),
+          }),
+        ),
+      }),
+    ),
+    hostname: Schema.optional(Schema.String),
+    rate_limited_until: Schema.optional(Schema.String),
+    status: Schema.optional(Schema.String),
+    validation: Schema.optional(
+      Schema.Struct({
+        alpn_configured: Schema.optional(Schema.Boolean),
+        dns_configured: Schema.optional(Schema.Boolean),
+        http_configured: Schema.optional(Schema.Boolean),
+        ownership_txt_configured: Schema.optional(Schema.Boolean),
+      }),
+    ),
+    validation_errors: Schema.optional(
+      Schema.Array(
+        Schema.Struct({
+          code: Schema.optional(Schema.String),
+          message: Schema.optional(Schema.String),
+          remediation: Schema.optional(Schema.String),
+          timestamp: Schema.optional(Schema.String),
+        }),
+      ),
+    ),
+  });
+export type App_CertificatesCheckOutput =
+  typeof App_CertificatesCheckOutput.Type;
+
+// The operation
+/**
+ * Check DNS and re-validate certificate
+ */
+export const App_CertificatesCheck = /*@__PURE__*/ /*#__PURE__*/ API.make(
+  () => ({
+    inputSchema: App_CertificatesCheckInput,
+    outputSchema: App_CertificatesCheckOutput,
+  }),
+);