@executor-js/sdk 0.0.2 → 0.1.0

package/dist/{chunk-6LMMN2GP.js → chunk-2WV7VSNL.js}

@@ -1033,74 +1033,118 @@ var discoverAuthorizationServerMetadata = (issuer, options = {}) => Effect7.gen(
   }
   return null;
 });
-var asForDcr = (registrationEndpoint) => {
-  const url = new URL(registrationEndpoint);
-  return {
-    issuer: `${url.protocol}//${url.host}`,
-    registration_endpoint: registrationEndpoint
-  };
+var DcrErrorBody = class extends Data4.TaggedError("DcrErrorBody") {
 };
-var registerDynamicClient = (input, options = {}) => Effect7.tryPromise({
-  try: async () => {
-    const as = asForDcr(input.registrationEndpoint);
-    const m = input.metadata;
-    const clientMetadata = {
-      redirect_uris: [...m.redirect_uris]
-    };
-    if (m.client_name !== void 0) clientMetadata.client_name = m.client_name;
-    if (m.grant_types !== void 0) clientMetadata.grant_types = [...m.grant_types];
-    if (m.response_types !== void 0) clientMetadata.response_types = [...m.response_types];
-    if (m.token_endpoint_auth_method !== void 0) {
-      clientMetadata.token_endpoint_auth_method = m.token_endpoint_auth_method;
-    }
-    if (m.scope !== void 0) clientMetadata.scope = m.scope;
-    if (m.application_type !== void 0) clientMetadata.application_type = m.application_type;
-    if (m.client_uri !== void 0) clientMetadata.client_uri = m.client_uri;
-    if (m.logo_uri !== void 0) clientMetadata.logo_uri = m.logo_uri;
-    if (m.contacts !== void 0) clientMetadata.contacts = [...m.contacts];
-    if (m.software_id !== void 0) clientMetadata.software_id = m.software_id;
-    if (m.software_version !== void 0) clientMetadata.software_version = m.software_version;
-    if (m.extra) for (const [k, v] of Object.entries(m.extra)) clientMetadata[k] = v;
-    const reqOptions = oauth4webapiOptions(options);
-    if (isLoopbackHttpUrl2(input.registrationEndpoint)) {
-      reqOptions[oauth2.allowInsecureRequests] = true;
-    }
-    if (input.initialAccessToken) {
-      reqOptions.initialAccessToken = input.initialAccessToken;
-    }
-    const response = await oauth2.dynamicClientRegistrationRequest(
-      as,
-      clientMetadata,
-      reqOptions
-    );
-    const client = await oauth2.processDynamicClientRegistrationResponse(
-      response
-    );
-    return client;
-  },
-  catch: (cause) => {
-    if (cause instanceof oauth2.ResponseBodyError) {
-      return discoveryError(
-        `Dynamic Client Registration failed: ${cause.error}${cause.error_description ? ` \u2014 ${cause.error_description}` : ""}`,
-        { status: cause.status, cause }
-      );
+var DcrTransport = class extends Data4.TaggedError("DcrTransport") {
+};
+var buildDcrBody = (m) => {
+  const body = { redirect_uris: [...m.redirect_uris] };
+  if (m.client_name !== void 0) body.client_name = m.client_name;
+  if (m.grant_types !== void 0) body.grant_types = [...m.grant_types];
+  if (m.response_types !== void 0) body.response_types = [...m.response_types];
+  if (m.token_endpoint_auth_method !== void 0) {
+    body.token_endpoint_auth_method = m.token_endpoint_auth_method;
+  }
+  if (m.scope !== void 0) body.scope = m.scope;
+  if (m.application_type !== void 0) body.application_type = m.application_type;
+  if (m.client_uri !== void 0) body.client_uri = m.client_uri;
+  if (m.logo_uri !== void 0) body.logo_uri = m.logo_uri;
+  if (m.contacts !== void 0) body.contacts = [...m.contacts];
+  if (m.software_id !== void 0) body.software_id = m.software_id;
+  if (m.software_version !== void 0) body.software_version = m.software_version;
+  if (m.extra) for (const [k, v] of Object.entries(m.extra)) body[k] = v;
+  return body;
+};
+var interpretDcrFailure = (status, text) => {
+  if (status >= 400 && status < 500) {
+    const parsed = Result.try({
+      try: () => text ? JSON.parse(text) : null,
+      catch: () => null
+    });
+    const body = Result.isSuccess(parsed) ? parsed.success : null;
+    if (body && typeof body === "object" && "error" in body && typeof body.error === "string" && body.error.length > 0) {
+      const desc = "error_description" in body && typeof body.error_description === "string" ? body.error_description : void 0;
+      return new DcrErrorBody({ status, error: body.error, error_description: desc });
     }
-    return discoveryError(
-      `Dynamic Client Registration failed: ${cause instanceof Error ? cause.message : String(cause)}`,
-      { cause }
+  }
+  return new DcrTransport({
+    message: `Dynamic Client Registration endpoint returned status ${status}${text ? ` \u2014 ${text.slice(0, 200)}` : ""}`,
+    status
+  });
+};
+var registerDynamicClient = (input, options = {}) => Effect7.gen(function* () {
+  const url = new URL(input.registrationEndpoint);
+  if (url.protocol !== "https:" && !isLoopbackHttpUrl2(input.registrationEndpoint)) {
+    return yield* new DcrTransport({
+      message: `registration_endpoint must be HTTPS or a loopback HTTP URL (got ${url.protocol}//${url.host})`
+    });
+  }
+  const headers = {
+    "content-type": "application/json",
+    accept: "application/json"
+  };
+  if (input.initialAccessToken) {
+    headers.authorization = `Bearer ${input.initialAccessToken}`;
+  }
+  const fetchImpl = options.fetch ?? globalThis.fetch;
+  const timeoutMs = options.timeoutMs ?? OAUTH2_DEFAULT_TIMEOUT_MS;
+  const response = yield* Effect7.tryPromise({
+    try: () => fetchImpl(input.registrationEndpoint, {
+      method: "POST",
+      headers,
+      body: JSON.stringify(buildDcrBody(input.metadata)),
+      signal: AbortSignal.timeout(timeoutMs)
+    }),
+    catch: (cause) => new DcrTransport({
+      message: `Dynamic Client Registration request failed: ${cause instanceof Error ? cause.message : String(cause)}`,
+      cause
+    })
+  });
+  if (response.status !== 200 && response.status !== 201) {
+    const text2 = yield* Effect7.promise(
+      () => response.text().catch(() => "")
     );
+    return yield* interpretDcrFailure(response.status, text2);
   }
+  const text = yield* Effect7.tryPromise({
+    try: () => response.text(),
+    catch: (cause) => new DcrTransport({
+      message: "Dynamic Client Registration response could not be read",
+      status: response.status,
+      cause
+    })
+  });
+  const json = yield* Effect7.try({
+    try: () => JSON.parse(text),
+    catch: (cause) => new DcrTransport({
+      message: "Dynamic Client Registration response was not valid JSON",
+      status: response.status,
+      cause
+    })
+  });
+  return yield* decodeClientInformation(json).pipe(
+    Effect7.mapError(
+      (err) => new OAuthDiscoveryError({
+        message: `Dynamic Client Registration response is malformed: ${Schema7.isSchemaError(err) ? err.message : String(err)}`,
+        cause: err
+      })
+    )
+  );
 }).pipe(
-  Effect7.flatMap(
-    (raw) => decodeClientInformation(raw).pipe(
-      Effect7.mapError(
-        (err) => new OAuthDiscoveryError({
-          message: `Dynamic Client Registration response is malformed: ${Schema7.isSchemaError(err) ? err.message : String(err)}`,
-          cause: err
-        })
+  Effect7.catchTags({
+    DcrErrorBody: (err) => Effect7.fail(
+      discoveryError(
+        `Dynamic Client Registration failed: ${err.error}${err.error_description ? ` \u2014 ${err.error_description}` : ""}`,
+        { status: err.status, cause: err }
       )
+    ),
+    DcrTransport: (err) => Effect7.fail(
+      discoveryError(`Dynamic Client Registration failed: ${err.message}`, {
+        status: err.status,
+        cause: err.cause ?? err
+      })
     )
-  )
+  })
 );
 var beginDynamicAuthorization = (input, options = {}) => Effect7.gen(function* () {
   const prior = input.previousState ?? {};
@@ -4393,4 +4437,4 @@ export {
   resolveSecretBackedMap,
   defineExecutorConfig
 };
-//# sourceMappingURL=chunk-6LMMN2GP.js.map
+//# sourceMappingURL=chunk-2WV7VSNL.js.map