@distilled.cloud/fly-io 1.0.0-rc.16 → 1.0.0-rc.17

package/lib/protocol.js

@@ -1,564 +1 @@
-import * as API from "@distilled.cloud/core/api";
-import { HTTP_STATUS_MAP, InternalServerError, } from "@distilled.cloud/core/errors";
-import { buildRequest, getAnn, mapKeys, matchTypedError, } from "@distilled.cloud/core/protocol-http";
-import { hasSensitiveMember, makeRestProtocol, unwrapRedactedDeep, wrapSensitive, } from "@distilled.cloud/core/protocol-rest";
-import { failUnlessLenient, validateResponse, withholdActual, } from "@distilled.cloud/core/response-validation";
-import { parseRetryAfterForStatus } from "@distilled.cloud/core/retry-after";
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-import * as Context from "effect/Context";
-import * as Deferred from "effect/Deferred";
-import * as Effect from "effect/Effect";
-import * as Exit from "effect/Exit";
-import * as HttpClient from "effect/http/HttpClient";
-import * as HttpClientRequest from "effect/http/HttpClientRequest";
-import * as Layer from "effect/Layer";
-import * as MutableHashMap from "effect/MutableHashMap";
-import * as Option from "effect/Option";
-import * as Redacted from "effect/Redacted";
-import * as Schema from "effect/Schema";
-import { Credentials, DEFAULT_FLY_API_BASE_URL, DEFAULT_SPRITES_API_BASE_URL, } from "./credentials.js";
-import { ConfigError as FlyConfigError, FlyIoParseError, CreateExtensionTosAgreementNotAuthorized, SpritesNotEnabled, UnknownFlyIoError, } from "./errors.js";
-import { graphqlOpSymbol, httpSymbol, responsePathSymbol, } from "./traits.js";
-const flyErrorEnvelope = (body) => {
-    if (body === null || typeof body !== "object")
-        return undefined;
-    const b = body;
-    const errors = b.errors;
-    const detail = errors && typeof errors.detail === "string" ? errors.detail : undefined;
-    return {
-        message: typeof b.error === "string" ? b.error : typeof b.message === "string" ? b.message : detail,
-    };
-};
-
-const spritesErrorEnvelope = (body) => {
-    if (body === null || typeof body !== "object")
-        return undefined;
-    const b = body;
-    const message = typeof b.message === "string" ? b.message : typeof b.error === "string" ? b.error : undefined;
-    const code = typeof b.error === "string" && typeof b.message === "string" ? b.error : undefined;
-    return { message, code };
-};
-const resolveFlyCreds = /*@__PURE__*/ Effect.gen(function* () {
-    const resolve = yield* Credentials;
-    return yield* resolve;
-});
-
-
-
-
-
-
-export class MachineIdentity extends /*@__PURE__*/ /*@__PURE__*/ Context.Service()("FlyIoMachineIdentity") {
-}
-const FlyIoProtocolRest = /*@__PURE__*/ makeRestProtocol({
-    credentials: resolveFlyCreds,
-    baseUrl: (creds) => creds.apiBaseUrl,
-    headers: (creds) => ({
-        Authorization: `Bearer ${Redacted.value(creds.apiKey)}`,
-    }),
-    errorEnvelope: flyErrorEnvelope,
-    unknownError: ({ message, body }) => new UnknownFlyIoError({ message, body }),
-    parseError: ({ body, cause }) => new FlyIoParseError({ body, cause }),
-});
-export const FlyIoProtocol = /*@__PURE__*/ Layer.effect(API.Protocol, 
-/*@__PURE__*/ Effect.gen(function* () {
-    const rest = yield* API.Protocol;
-    return API.Protocol.of({
-        encode: (args) => Effect.gen(function* () {
-            const request = yield* rest.encode(args);
-            const machine = yield* Effect.serviceOption(MachineIdentity);
-            if (Option.isNone(machine))
-                return request;
-            return request.pipe(HttpClientRequest.removeHeader("authorization"), HttpClientRequest.setHeader("connection", "close"));
-        }),
-        decode: rest.decode,
-    });
-})).pipe(/*@__PURE__*/ Layer.provide(FlyIoProtocolRest));
-
-export const FlyApiProtocol = /*@__PURE__*/ makeRestProtocol({
-    credentials: resolveFlyCreds,
-    baseUrl: () => DEFAULT_FLY_API_BASE_URL,
-    headers: (creds) => ({
-        Authorization: `Bearer ${Redacted.value(creds.apiKey)}`,
-    }),
-    errorEnvelope: flyErrorEnvelope,
-    unknownError: ({ message, body }) => new UnknownFlyIoError({ message, body }),
-    parseError: ({ body, cause }) => new FlyIoParseError({ body, cause }),
-});
-const parseMaybeNdjson = (body) => {
-    if (typeof body !== "string")
-        return body;
-    const lines = body
-        .split(/\r?\n/)
-        .map((l) => l.trim())
-        .filter((l) => l.length > 0);
-    if (lines.length === 0)
-        return body;
-    try {
-        return lines.map((l) => JSON.parse(l));
-    }
-    catch {
-        return body;
-    }
-};
-
-
-
-
-
-
-const parseSpritesExecFrames = (bytes) => {
-    if (bytes.length === 0)
-        return undefined;
-    const first = bytes[0];
-    if (first > 3)
-        return undefined;
-    let end = bytes.length;
-    let exit_code = 0;
-    if (end >= 2 && bytes[end - 2] === 3) {
-        exit_code = bytes[end - 1];
-        end -= 2;
-    }
-    let stdout = "";
-    let stderr = "";
-    if (end > 0) {
-        const decoder = new TextDecoder();
-        const id = bytes[0];
-        const payload = decoder.decode(bytes.subarray(1, end));
-        if (id === 2)
-            stderr = payload;
-        else
-            stdout = payload;
-    }
-    return { stdout, stderr, exit_code };
-};
-const fail = (e) => Effect.fail(e);
-
-const stripFlyAuthScheme = (token) => {
-    const trimmed = token.trim();
-    const space = trimmed.indexOf(" ");
-    if (space === -1)
-        return trimmed;
-    const scheme = trimmed.slice(0, space).toLowerCase();
-    if (scheme === "flyv1" || scheme === "bearer") {
-        return trimmed.slice(space + 1).trim();
-    }
-    return trimmed;
-};
-const isMintOp = (http) => http !== undefined &&
-    http.method === "POST" &&
-    /\/organizations\/\{[^}]+}\/tokens$/.test(http.uri);
-const SPRITES_NOT_ENABLED = /sprites not enabled/i;
-const readResponseText = (response) => response.text.pipe(Effect.orDie, Effect.map((text) => text ?? ""));
-const parseJson = (text) => {
-    if (text.trim().length === 0)
-        return undefined;
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return undefined;
-    }
-};
-const haystackOf = (body, text) => {
-    const parts = [text];
-    if (body !== null && typeof body === "object") {
-        const b = body;
-        if (typeof b.message === "string")
-            parts.push(b.message);
-        if (typeof b.error === "string")
-            parts.push(b.error);
-    }
-    return parts.join(" ");
-};
-const errorEnv = (body) => spritesErrorEnvelope(body) ?? flyErrorEnvelope(body) ?? {};
-const failHttp = (status, body, text, headers) => {
-    const env = errorEnv(body);
-    const message = env.message ?? (text.trim().length > 0 ? text.trim() : `HTTP ${status}`);
-    if (status === 401 && SPRITES_NOT_ENABLED.test(haystackOf(body, message))) {
-        return fail(new SpritesNotEnabled({ message }));
-    }
-    const StatusClass = HTTP_STATUS_MAP[status];
-    if (StatusClass && status >= 400) {
-        return fail(new StatusClass({
-            message,
-            retryAfter: parseRetryAfterForStatus(status, headers),
-        }));
-    }
-    return fail(new UnknownFlyIoError({ message, body: body ?? text }));
-};
-const orgFromTokensCurrent = (body) => {
-    if (body === null || typeof body !== "object")
-        return undefined;
-    const tokens = body.tokens;
-    if (!Array.isArray(tokens) || tokens.length === 0)
-        return undefined;
-    const first = tokens[0];
-    if (typeof first.org_slug === "string" && first.org_slug.length > 0) {
-        return first.org_slug;
-    }
-    if (typeof first.organization === "string" && first.organization.length > 0) {
-        return first.organization;
-    }
-    return undefined;
-};
-const orgFromGraphql = (body) => {
-    if (body === null || typeof body !== "object")
-        return undefined;
-    const data = body.data;
-    if (data === null || typeof data !== "object")
-        return undefined;
-    const viewer = data.viewer;
-    const root = viewer !== null && typeof viewer === "object" ? viewer : data;
-    const personal = root.personalOrganization;
-    if (typeof personal?.slug === "string" && personal.slug.length > 0) {
-        return personal.slug;
-    }
-    const nodes = root.organizations?.nodes;
-    if (Array.isArray(nodes)) {
-        for (const node of nodes) {
-            if (node !== null &&
-                typeof node === "object" &&
-                typeof node.slug === "string" &&
-                node.slug.length > 0) {
-                return node.slug;
-            }
-        }
-    }
-    return undefined;
-};
-const discoverOrgSlug = (fly) => Effect.gen(function* () {
-    const http = yield* HttpClient.HttpClient;
-    const machinesRoot = fly.apiBaseUrl.replace(/\/+$/, "");
-    const currentReq = HttpClientRequest.make("GET")(`${machinesRoot}/v1/tokens/current`).pipe(HttpClientRequest.setHeaders({
-        Authorization: `Bearer ${Redacted.value(fly.apiKey)}`,
-        Accept: "application/json",
-    }));
-    const currentRes = yield* http.execute(currentReq);
-    const currentText = yield* readResponseText(currentRes);
-    const currentJson = parseJson(currentText);
-    if (currentRes.status < 400) {
-        const slug = orgFromTokensCurrent(currentJson);
-        if (slug !== undefined)
-            return slug;
-    }
-    const gqlReq = HttpClientRequest.make("POST")(`${DEFAULT_FLY_API_BASE_URL}/graphql`).pipe(HttpClientRequest.setHeaders({
-        Authorization: `Bearer ${Redacted.value(fly.apiKey)}`,
-        Accept: "application/json",
-    }), HttpClientRequest.bodyJsonUnsafe({
-        query: "{ viewer { personalOrganization { slug } organizations { nodes { slug } } } }",
-    }));
-    const gqlRes = yield* http.execute(gqlReq);
-    const gqlText = yield* readResponseText(gqlRes);
-    const gqlJson = parseJson(gqlText);
-    if (gqlRes.status < 400) {
-        const slug = orgFromGraphql(gqlJson);
-        if (slug !== undefined)
-            return slug;
-    }
-    return yield* new FlyConfigError({
-        message: "Could not discover a Fly organization slug from /tokens/current or GraphQL",
-    });
-});
-const mintOnce = (fly) => Effect.gen(function* () {
-    const http = yield* HttpClient.HttpClient;
-    const orgSlug = yield* discoverOrgSlug(fly);
-    const macaroon = stripFlyAuthScheme(Redacted.value(fly.apiKey));
-    const request = HttpClientRequest.make("POST")(`${DEFAULT_SPRITES_API_BASE_URL}/organizations/${encodeURIComponent(orgSlug)}/tokens`).pipe(HttpClientRequest.setHeaders({
-        Authorization: `FlyV1 ${macaroon}`,
-        Accept: "application/json",
-        "Content-Type": "application/json",
-    }), HttpClientRequest.bodyJsonUnsafe({
-        description: "Alchemy Sprites token",
-    }));
-    const response = yield* http.execute(request);
-    const text = yield* readResponseText(response);
-    const json = parseJson(text);
-    const headers = response.headers;
-    if (response.status >= 400) {
-        return yield* failHttp(response.status, json, text, headers);
-    }
-    const token = json !== null && typeof json === "object" ? json.token : undefined;
-    if (typeof token !== "string" || token.length === 0) {
-        return yield* fail(new FlyIoParseError({
-            body: "[REDACTED]",
-            cause: "mint response missing token",
-        }));
-    }
-    return Redacted.make(token);
-});
-// Keyed by the Fly token itself: `Redacted` hashes and compares by value.
-const mintedTokens = /*@__PURE__*/ MutableHashMap.empty();
-const mintInFlight = /*@__PURE__*/ MutableHashMap.empty();
-
-const mintSpritesToken = (fly) => Effect.uninterruptibleMask((restore) => Effect.suspend(() => {
-    const key = fly.apiKey;
-    const hit = MutableHashMap.get(mintedTokens, key);
-    if (Option.isSome(hit))
-        return Effect.succeed(hit.value);
-    const pending = MutableHashMap.get(mintInFlight, key);
-    if (Option.isSome(pending)) {
-        return restore(Deferred.await(pending.value));
-    }
-    const result = Deferred.makeUnsafe();
-    MutableHashMap.set(mintInFlight, key, result);
-    return restore(mintOnce(fly)).pipe(Effect.onExit((exit) => Effect.gen(function* () {
-        if (Exit.isSuccess(exit)) {
-            MutableHashMap.set(mintedTokens, key, exit.value);
-        }
-        // Release all waiters, including on defects and owner interruption.
-        MutableHashMap.remove(mintInFlight, key);
-        yield* Deferred.done(result, exit);
-    })));
-}));
-const encodeSpritesRequest = ({ input, inputAst, }) => Effect.gen(function* () {
-    const fly = yield* resolveFlyCreds;
-    const http = getAnn(inputAst, httpSymbol);
-    const mint = isMintOp(http);
-    let authorization;
-    if (mint) {
-        authorization = `FlyV1 ${stripFlyAuthScheme(Redacted.value(fly.apiKey))}`;
-    }
-    else {
-        const token = yield* mintSpritesToken(fly);
-        authorization = `Bearer ${Redacted.value(token)}`;
-    }
-    return buildRequest({
-        input: unwrapRedactedDeep(input),
-        inputAst,
-        baseUrl: DEFAULT_SPRITES_API_BASE_URL,
-        headers: {
-            Authorization: authorization,
-            Accept: "application/json",
-        },
-    });
-});
-const decodeSpritesResponse = ({ response, outputAst, errors: errorClasses, }) => Effect.gen(function* () {
-    const buffer = yield* response.arrayBuffer.pipe(Effect.map((bytes) => new Uint8Array(bytes)));
-    const text = new TextDecoder().decode(buffer);
-    const execFrames = parseSpritesExecFrames(buffer);
-    let json;
-    let nonJson = false;
-    if (execFrames === undefined && text.trim().length > 0) {
-        try {
-            json = JSON.parse(text);
-        }
-        catch {
-            nonJson = true;
-        }
-    }
-    const status = response.status;
-    const headers = response.headers;
-    if (status >= 400) {
-        const env = nonJson ? {} : errorEnv(json);
-        const message = env.message ?? (nonJson && text.trim() ? text.trim() : `HTTP ${status}`);
-        if (SPRITES_NOT_ENABLED.test(haystackOf(nonJson ? text : json, message))) {
-            return yield* fail(new SpritesNotEnabled({ message }));
-        }
-        const typed = matchTypedError(errorClasses, status, [
-            {
-                code: typeof env.code === "number" ? env.code : undefined,
-                message,
-            },
-        ], { body: nonJson ? text : json, headers });
-        if (typed !== undefined)
-            return yield* fail(typed);
-        const StatusErrorClass = HTTP_STATUS_MAP[status];
-        if (StatusErrorClass) {
-            return yield* fail(new StatusErrorClass({
-                message,
-                retryAfter: parseRetryAfterForStatus(status, headers),
-            }));
-        }
-        if (status >= 500) {
-            return yield* fail(new InternalServerError({
-                message,
-                retryAfter: parseRetryAfterForStatus(status, headers),
-            }));
-        }
-        return yield* fail(new UnknownFlyIoError({
-            message,
-            body: nonJson ? text : json,
-        }));
-    }
-    // Strict mode checks the mapped body (or parsed exec frames) against the
-    // output schema. For an output with sensitive members, a non-JSON body
-    // fails in every mode and parse errors withhold the body.
-    const sensitive = hasSensitiveMember(outputAst);
-    const reported = sensitive ? "[REDACTED]" : (execFrames ?? (nonJson ? text : json));
-    if (nonJson && sensitive) {
-        return yield* fail(new FlyIoParseError({
-            body: "[REDACTED]",
-            cause: "Invalid JSON response",
-        }));
-    }
-    const body = execFrames ?? parseMaybeNdjson(nonJson ? text : (json ?? {}));
-    const mapped = yield* validateResponse(outputAst, mapKeys(outputAst, body, "decode"), (cause) => new FlyIoParseError({ body: reported, cause: sensitive ? withholdActual(cause) : cause })).pipe(Effect.catch(fail));
-    return wrapSensitive(outputAst, mapped);
-});
-
-export const SpritesProtocol = /*@__PURE__*/ Layer.succeed(API.Protocol, 
-/*@__PURE__*/ API.Protocol.of({
-    encode: (args) => encodeSpritesRequest(args),
-    decode: (args) => decodeSpritesResponse(args),
-}));
-// =============================================================================
-// GraphQL add-ons (Tigris, Redis) -- POST https://api.fly.io/graphql
-// =============================================================================
-const GraphQLError = /*@__PURE__*/ Schema.Struct({
-    message: Schema.String,
-    path: /*@__PURE__*/ Schema.optional(/*@__PURE__*/ Schema.Array(Schema.Unknown)),
-    extensions: /*@__PURE__*/ Schema.optional(
-    /*@__PURE__*/ Schema.Struct({
-        code: /*@__PURE__*/ Schema.optional(Schema.String),
-    })),
-});
-const GraphQLEnvelope = /*@__PURE__*/ Schema.Struct({
-    data: /*@__PURE__*/ Schema.optional(/*@__PURE__*/ Schema.NullOr(Schema.Unknown)),
-    errors: /*@__PURE__*/ Schema.optional(/*@__PURE__*/ Schema.Array(GraphQLError)),
-});
-const decodeEnvelope = /*@__PURE__*/ Schema.decodeUnknownOption(GraphQLEnvelope);
-const matchGraphqlError = (status, errorBody, headers, errorClasses) => {
-    const envelope = decodeEnvelope(errorBody);
-    if (envelope._tag === "Some" && envelope.value.errors?.length) {
-        const first = envelope.value.errors[0];
-        const message = first.message;
-        const typed = matchTypedError(errorClasses, status, [{ message }], {
-            body: errorBody,
-            headers,
-        });
-        if (typed !== undefined)
-            return fail(typed);
-        if (/not authorized to access this createextensiontosagreement/i.test(message)) {
-            return fail(new CreateExtensionTosAgreementNotAuthorized({ message }));
-        }
-        const StatusClass = HTTP_STATUS_MAP[status];
-        if (StatusClass && status >= 400) {
-            return fail(new StatusClass({
-                message,
-                retryAfter: parseRetryAfterForStatus(status, headers),
-            }));
-        }
-        return fail(new UnknownFlyIoError({
-            code: first.extensions?.code,
-            message,
-            body: errorBody,
-        }));
-    }
-    const StatusClass = HTTP_STATUS_MAP[status];
-    if (StatusClass && status >= 400) {
-        return fail(new StatusClass({
-            message: `HTTP ${status}`,
-            retryAfter: parseRetryAfterForStatus(status, headers),
-        }));
-    }
-    return fail(new UnknownFlyIoError({ body: errorBody }));
-};
-const graphqlEncode = ({ input, inputAst, }) => Effect.gen(function* () {
-    const resolveCredentials = yield* Credentials;
-    const creds = yield* resolveCredentials;
-    const op = getAnn(inputAst, graphqlOpSymbol);
-    if (!op) {
-        throw new Error("operation input is missing the GraphQLOp() trait");
-    }
-    const http = getAnn(inputAst, httpSymbol);
-    const variables = {};
-    for (const [k, v] of Object.entries((input ?? {}))) {
-        if (v !== undefined)
-            variables[k] = v;
-    }
-    const url = `${DEFAULT_FLY_API_BASE_URL}${http?.uri ?? "/graphql"}`;
-    return HttpClientRequest.make("POST")(url).pipe(HttpClientRequest.setHeaders({
-        Authorization: `Bearer ${Redacted.value(creds.apiKey)}`,
-        Accept: "application/json",
-    }), HttpClientRequest.bodyJsonUnsafe({
-        query: op.query,
-        operationName: op.operationName,
-        variables,
-    }));
-});
-const graphqlDecode = ({ response, outputAst, errors, }) => Effect.gen(function* () {
-    const text = (yield* response.text.pipe(Effect.orDie)) ?? "";
-    const status = response.status;
-    const headers = response.headers;
-    let json;
-    let parsed = false;
-    if (text.trim().length > 0) {
-        try {
-            json = JSON.parse(text);
-            parsed = true;
-        }
-        catch {
-            parsed = false;
-        }
-    }
-    // For an output with sensitive members, a non-JSON body fails in every
-    // mode and parse errors withhold the body.
-    const sensitive = hasSensitiveMember(outputAst);
-    if (!parsed) {
-        if (status >= 400) {
-            return yield* matchGraphqlError(status, text, headers, errors);
-        }
-        if (sensitive) {
-            return yield* fail(new FlyIoParseError({
-                body: "[REDACTED]",
-                cause: "response body is not valid JSON",
-            }));
-        }
-        // Lenient mode returns the body as read.
-        return yield* failUnlessLenient(new FlyIoParseError({
-            body: text,
-            cause: "response body is not valid JSON",
-        }), text).pipe(Effect.catch(fail));
-    }
-    const envelope = json;
-    const hasGraphQLErrors = envelope !== null &&
-        typeof envelope === "object" &&
-        Array.isArray(envelope.errors) &&
-        envelope.errors.length > 0;
-    if (hasGraphQLErrors || status >= 400) {
-        return yield* matchGraphqlError(status, json, headers, errors);
-    }
-    const path = getAnn(outputAst, responsePathSymbol);
-    let payload = envelope !== null && typeof envelope === "object" ? envelope.data : undefined;
-    if (path !== undefined) {
-        for (const seg of path.split(".")) {
-            payload =
-                payload !== null && typeof payload === "object"
-                    ? payload[seg]
-                    : undefined;
-        }
-    }
-    // Strict mode checks the payload at the response path against the
-    // output schema.
-    const validated = yield* validateResponse(outputAst, payload === undefined ? null : payload, (cause) => new FlyIoParseError({
-        body: sensitive ? "[REDACTED]" : json,
-        cause: sensitive ? withholdActual(cause) : cause,
-    })).pipe(Effect.catch(fail));
-    return wrapSensitive(outputAst, validated);
-});
-export const FlyGraphqlProtocol = /*@__PURE__*/ Layer.succeed(API.Protocol, 
-/*@__PURE__*/ API.Protocol.of({
-    encode: (args) => graphqlEncode(args),
-    decode: graphqlDecode,
-}));
-//# sourceMappingURL=protocol.js.map
+export { protocol$FlyApiProtocol as FlyApiProtocol, protocol$FlyGraphqlProtocol as FlyGraphqlProtocol, protocol$FlyIoProtocol as FlyIoProtocol, protocol$MachineIdentity as MachineIdentity, protocol$SpritesProtocol as SpritesProtocol } from "./_bundle/sdk.js";

package/lib/retry.js

@@ -1,34 +1 @@
-import { throttlingFactory, transientFactory } from "@distilled.cloud/core/retry";
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-import * as Context from "effect/Context";
-import * as Effect from "effect/Effect";
-import * as Layer from "effect/Layer";
-export { makeDefault, jittered, capped, throttlingOptions, transientOptions, throttlingFactory, transientFactory, } from "@distilled.cloud/core/retry";
-
-export class Retry extends /*@__PURE__*/ /*@__PURE__*/ Context.Service()("FlyIoRetry") {
-}
-
-export const policy = (optionsOrFactory) => Effect.provide(Layer.succeed(Retry, optionsOrFactory));
-
-export const none = /*@__PURE__*/ Effect.provide(
-/*@__PURE__*/ Layer.succeed(Retry, { while: () => false }));
-
-export const throttling = /*@__PURE__*/ policy(throttlingFactory);
-
-export const transient = /*@__PURE__*/ policy(transientFactory);
-//# sourceMappingURL=retry.js.map
+export { retry$Retry as Retry, retry$capped as capped, retry$jittered as jittered, retry$makeDefault as makeDefault, retry$none as none, retry$policy as policy, retry$throttling as throttling, retry$throttlingFactory as throttlingFactory, retry$throttlingOptions as throttlingOptions, retry$transient as transient, retry$transientFactory as transientFactory, retry$transientOptions as transientOptions } from "./_bundle/sdk.js";