@north-light/crouter 0.3.318 → 0.3.320

package/dist/core/command-plugins/transport/http-invoke.js

@@ -1,546 +1,3 @@
-// HTTP-transport plugin invoker — the execution seam for a validated composed
-// HTTP leaf. On explicit leaf invocation only (never on help or discovery), it
-// turns a leaf's `rest` mapping and parsed input into one native HTTP request
-// and maps the response onto crtr's output, error, and exit machinery. Its
-// trust surface is the manifest definition plus HTTP, so it spawns nothing.
-//
-// Ownership boundary: this module owns request construction, local-file
-// materialization, bearer attachment, the native HTTP lifecycle with three
-// independent clocks, unary response validation, verbatim streaming relay,
-// nested non-2xx error extraction, and HTTP-status-to-exit mapping. The token
-// and request headers stay private here — they never enter config, cache,
-// diagnostics, logs, or the canvas. Registration / caching / manifest parsing /
-// composition are companion parts; this module consumes their validated output.
-import { readFileSync, statSync } from 'node:fs';
-import { resolve as resolvePath } from 'node:path';
-import { request as httpRequest } from 'node:http';
-import { request as httpsRequest } from 'node:https';
-import { validateDeclaredResult } from './exec-invoke.js';
-import { CrtrError } from '../../errors.js';
-import { envelopeClaimsStale, staleErrorDetails } from '../../manifest-stale.js';
-import { diag, recordPreviewError, recordPreviewJsonLine, writeStdout } from '../../io.js';
-import { ExitCode } from '../../../types.js';
-import { isRecord } from '../../../shared/predicates.js';
-// Constants
-const DEFAULT_CONNECT_MS = 10_000;
-const DEFAULT_REQUEST_MS = 30_000;
-const DEFAULT_STREAM_IDLE_MS = 60_000;
-// Strict snake_case: no leading/trailing underscore, no consecutive underscores.
-const SNAKE = /^[a-z][a-z0-9]*(_[a-z0-9]+)*$/;
-// Codes crtr owns; a backend must not reuse them in a non-2xx error envelope.
-const RESERVED_CODES = new Set(['internal', 'unknown_path', 'command_collision', 'cli_protocol_error']);
-/** Marker for the idle-timeout abort so the relay loop can distinguish it. */
-class StreamIdleError extends Error {
-}
-// Public entry
-/**
- * Execute one HTTP-transport plugin leaf. Unary leaves return the validated response
- * object (crtr's ordinary dispatcher renders it, or mirrors it under --json).
- * Streaming leaves relay NDJSON frames to stdout incrementally and return void.
- *
- * Pre-network failures (missing auth, unreadable local file, illegal header
- * value) and pre-first-frame transport / protocol failures throw a structured
- * CrtrError for handle() to render. A streaming transport failure AFTER any
- * frame has been emitted writes only a stderr diagnostic and sets
- * process.exitCode = NETWORK — it never throws into handle() and never writes a
- * second result/error object to stdout.
- */
-export async function invokeHttpLeaf(spec, input, context) {
-    const plan = buildRequestPlan(spec, input, context);
-    if (spec.rest.streaming === true) {
-        await requestStreaming(spec, plan);
-        return;
-    }
-    const { status, body } = await requestUnary(spec, plan);
-    if (status >= 200 && status < 300)
-        return mapUnary2xx(spec, body);
-    throwNon2xx(spec, status, body); // always throws
-}
-// Request construction (§6.1) — pure, no network I/O
-function buildRequestPlan(spec, input, context) {
-    const paramsByName = new Map();
-    for (const p of spec.params)
-        paramsByName.set(p.name, p);
-    const entries = Object.entries(spec.rest.params);
-    // 1 + 2a: base + path placeholder substitution (URL-encoded).
-    const base = spec.baseUrl ?? new URL(spec.registration.endpoint).origin;
-    let pathname = spec.rest.path;
-    for (const [name, mapping] of entries) {
-        if (mapping.in !== 'path')
-            continue;
-        const value = input[paramKey(name)];
-        pathname = pathname.split(`{${name}}`).join(encodePathSegmentValue(value));
-    }
-    const url = new URL(pathname, base);
-    // 2b: query params under `as ?? name`, canonically stringified, absent optionals omitted.
-    for (const [name, mapping] of entries) {
-        if (mapping.in !== 'query')
-            continue;
-        const key = paramKey(name);
-        if (!isPresent(paramsByName.get(name), key, input, context))
-            continue;
-        url.searchParams.append(mapping.as ?? name, String(input[key]));
-    }
-    // 3 + 4: assemble body (with file materialization + coalesced-source precedence).
-    const body = assembleBody(spec, entries, paramsByName, input, context);
-    const bodyString = Object.keys(body).length > 0 ? JSON.stringify(body) : undefined;
-    // 5: auth — read the env var immediately before request creation. Missing or
-    // empty fails pre-network; the value never appears in errors or evidence.
-    let authorization;
-    const authEnv = spec.registration.authEnv;
-    if (authEnv !== undefined && authEnv !== '') {
-        const token = process.env[authEnv];
-        if (token === undefined || token === '') {
-            throw new CrtrError('auth_env_missing', `${label(spec)}: environment variable ${authEnv} is not set or empty`, ExitCode.USAGE, {
-                field: authEnv,
-                received: authEnv,
-                next: `Export ${authEnv} with the bearer token, then retry.`,
-            });
-        }
-        authorization = `Bearer ${token}`;
-    }
-    // 6: headers in canonical §6.1 order.
-    const headers = [['Accept', 'application/json']];
-    if (authorization !== undefined)
-        headers.push(['Authorization', authorization]);
-    for (const [name, mapping] of entries) {
-        if (mapping.in !== 'header')
-            continue;
-        const key = paramKey(name);
-        if (!isPresent(paramsByName.get(name), key, input, context))
-            continue;
-        const headerName = mapping.as; // schema guarantees `as` on header placement
-        const value = String(input[key]);
-        if (/[\r\n]/.test(value)) {
-            throw new CrtrError('invalid_type', `${label(spec)}: header "${headerName}" value must not contain a newline`, ExitCode.USAGE, { field: name, received: '(newline in header value)', next: 'Remove newline characters from the value.' });
-        }
-        headers.push([headerName, value]);
-    }
-    if (bodyString !== undefined)
-        headers.push(['Content-Type', 'application/json']);
-    return { url, method: spec.rest.method, headers, ...(bodyString !== undefined ? { body: bodyString } : {}) };
-}
-/** Assemble the JSON body object from `rest.body` constants, `rest.bodyRoot`
- *  nesting, and `in:"body"` params under `as ?? name`, resolving each coalesced
- *  group (one stdin + one non-stdin sharing an `as`) by non-stdin-then-stdin
- *  precedence, and materializing local-file params. */
-function assembleBody(spec, entries, paramsByName, input, context) {
-    // Group body params by their effective destination key (`as ?? name`).
-    const groups = new Map();
-    for (const [name, mapping] of entries) {
-        if (mapping.in !== 'body')
-            continue;
-        const asName = mapping.as ?? name;
-        const group = groups.get(asName);
-        if (group !== undefined)
-            group.push(name);
-        else
-            groups.set(asName, [name]);
-    }
-    const paramValues = {};
-    for (const [asName, memberNames] of groups) {
-        const members = memberNames.map((name) => ({ name, param: paramsByName.get(name) }));
-        // A group is either a single source or the validator-approved coalesced pair
-        // (exactly one stdin + one non-stdin). Non-stdin wins when present; else the
-        // stdin value when present (including an intentionally-empty non-TTY stream);
-        // else the key is omitted. This same logic covers the single-source case.
-        const nonStdin = members.find((m) => m.param.kind !== 'stdin');
-        const stdin = members.find((m) => m.param.kind === 'stdin');
-        let chosen;
-        if (nonStdin !== undefined && isPresent(nonStdin.param, paramKey(nonStdin.name), input, context)) {
-            chosen = { param: nonStdin.param, value: input[paramKey(nonStdin.name)] };
-        }
-        else if (stdin !== undefined && isPresent(stdin.param, paramKey(stdin.name), input, context)) {
-            chosen = { param: stdin.param, value: input[paramKey(stdin.name)] };
-        }
-        if (chosen !== undefined)
-            paramValues[asName] = materializeBodyValue(spec, chosen.param, chosen.value);
-    }
-    // rest.body constants (e.g. an `op` discriminator) always stay top-level.
-    // Param-sourced values nest under rest.bodyRoot when set (always present as an
-    // object there, even when empty, so a backend dispatching on a constant sees a
-    // consistent shape); absent bodyRoot keeps the pre-existing top-level placement.
-    const body = { ...spec.rest.body };
-    if (spec.rest.bodyRoot !== undefined) {
-        body[spec.rest.bodyRoot] = paramValues;
-    }
-    else {
-        Object.assign(body, paramValues);
-    }
-    return body;
-}
-/** Turn a present body value into what actually ships: a `context-file` value is
- *  already JSON-parsed by parseArgv and placed unchanged; a `type:"path"` param
- *  (positional or flag) is a filesystem path resolved against cwd whose FILE is
- *  read and encoded per the param's `encoding` — UTF-8 text by default, base64 of
- *  the raw bytes when `encoding: "base64"` (the local path string is never sent,
- *  so the wire contract is identical to piping the encoded bytes); every other
- *  value keeps its parsed primitive/value type.
- *
- *  Strict: a path that does not exist or is not a regular file fails here, before
- *  any socket opens. There is no fallback to sending the path string — that is
- *  exactly the confusion this affordance exists to remove. */
-function materializeBodyValue(spec, param, value) {
-    if (param.kind === 'context-file')
-        return value;
-    if ((param.kind === 'positional' || param.kind === 'flag') && param.type === 'path') {
-        if (Array.isArray(value))
-            return value.map((item) => materializeBodyValue(spec, param, item));
-        const filePath = String(value);
-        const resolved = resolvePath(process.cwd(), filePath);
-        let stat;
-        try {
-            stat = statSync(resolved);
-        }
-        catch {
-            throw fileError(spec, param.name, filePath, 'no file exists at that path', 'an existing local file path');
-        }
-        if (!stat.isFile()) {
-            throw fileError(spec, param.name, filePath, 'the path is not a regular file', 'a regular local file (not a directory, socket, or device)');
-        }
-        try {
-            return param.encoding === 'base64'
-                ? readFileSync(resolved).toString('base64')
-                : readFileSync(resolved, 'utf8');
-        }
-        catch {
-            throw fileError(spec, param.name, filePath, 'the file could not be read', 'a readable local file path');
-        }
-    }
-    return value;
-}
-function fileError(spec, paramName, filePath, detail, expected) {
-    return new CrtrError('invalid_type', `${label(spec)}: cannot read file for "${paramName}" — ${detail}: ${filePath}`, ExitCode.USAGE, { field: paramName, received: filePath, next: `Pass ${expected}, relative to the current directory or absolute.` });
-}
-/** Presence of an optional input (§6.1: a param the caller did not supply
- *  contributes nothing, even when it carries a default). The parser's
- *  provided-set is authoritative for every param kind — it already excludes
- *  bool-flag/default-seeded values and (for stdin specifically) distinguishes
- *  an intentionally-empty non-TTY stream from a truly absent TTY. Falls back to
- *  ordinary own-property/value semantics only when no context was supplied. */
-function isPresent(param, camelKey, input, context) {
-    if (context !== undefined)
-        return context.providedParams.has(camelKey);
-    return Object.prototype.hasOwnProperty.call(input, camelKey) && input[camelKey] !== undefined;
-}
-/** URL-encode a single path-placeholder value. `encodeURIComponent` never
- *  escapes a literal `.`, so a value of exactly "." or ".." would otherwise
- *  survive substitution as a dot-segment that `new URL()` normalizes away,
- *  letting a caller-controlled value climb out of the intended path segment.
- *  Encode dots only for that exact-match case; every other value is untouched. */
-function encodePathSegmentValue(value) {
-    const raw = String(value);
-    if (raw === '.' || raw === '..')
-        return raw.replace(/\./g, '%2E');
-    return encodeURIComponent(raw);
-}
-/** Convert an authored kebab param name to the camelCase key parseArgv emits.
- *  Must stay identical to command.ts's flagNameToKey so lookups + the presence
- *  set line up. */
-function paramKey(name) {
-    return name.replace(/-([a-z])/g, (_, c) => c.toUpperCase());
-}
-// Unary lifecycle (§6.4) — connect + total clocks, buffered body
-function requestUnary(spec, plan) {
-    const connectMs = spec.timeouts?.connectMs ?? DEFAULT_CONNECT_MS;
-    const requestMs = spec.timeouts?.requestMs ?? DEFAULT_REQUEST_MS;
-    const doRequest = plan.url.protocol === 'https:' ? httpsRequest : httpRequest;
-    return new Promise((resolve, reject) => {
-        let settled = false;
-        let connectTimer = null;
-        let totalTimer = null;
-        const clearTimers = () => {
-            if (connectTimer !== null)
-                clearTimeout(connectTimer);
-            if (totalTimer !== null)
-                clearTimeout(totalTimer);
-            connectTimer = null;
-            totalTimer = null;
-        };
-        const fail = (err) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimers();
-            req.destroy();
-            reject(err);
-        };
-        const succeed = (v) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimers();
-            resolve(v);
-        };
-        const req = doRequest(plan.url, { method: plan.method }, (res) => {
-            if (connectTimer !== null) {
-                clearTimeout(connectTimer);
-                connectTimer = null;
-            }
-            const chunks = [];
-            res.on('data', (c) => chunks.push(c));
-            res.on('end', () => succeed({ status: res.statusCode ?? 0, body: Buffer.concat(chunks).toString('utf8') }));
-            res.on('error', (e) => fail(unreachable(spec, plan, `connection error (${errCode(e)})`)));
-        });
-        for (const [n, v] of plan.headers)
-            req.setHeader(n, v);
-        connectTimer = setTimeout(() => fail(unreachable(spec, plan, `connection timed out after ${connectMs}ms`)), connectMs);
-        totalTimer = setTimeout(() => fail(unreachable(spec, plan, `request exceeded the ${requestMs}ms timeout`)), requestMs);
-        req.on('socket', (socket) => {
-            if (socket.connecting)
-                socket.once('connect', () => clearConnectTimer());
-            else
-                clearConnectTimer();
-        });
-        const clearConnectTimer = () => {
-            if (connectTimer !== null) {
-                clearTimeout(connectTimer);
-                connectTimer = null;
-            }
-        };
-        req.on('error', (e) => fail(unreachable(spec, plan, `could not reach the backend (${errCode(e)})`)));
-        if (plan.body !== undefined)
-            req.write(plan.body);
-        req.end();
-    });
-}
-/** Map a unary 2xx body to the validated result object, or throw
- *  cli_protocol_error (GENERAL) for bad JSON / a non-object / an output mismatch. */
-function mapUnary2xx(spec, body) {
-    let parsed;
-    try {
-        parsed = JSON.parse(body);
-    }
-    catch {
-        throw protocolError(spec, 'response body was not valid JSON', 'a JSON object matching the declared output');
-    }
-    if (!isRecord(parsed)) {
-        throw protocolError(spec, `response body was not a JSON object (got ${typeName(parsed)})`, 'a JSON object matching the declared output');
-    }
-    const issue = validateDeclaredResult(spec.output, parsed);
-    if (issue !== null) {
-        const field = spec.output.find((f) => f.name === issue.field);
-        const expectedType = field?.type ?? 'unknown';
-        if (issue.receivedType !== undefined) {
-            throw protocolError(spec, `output field "${issue.field}" has the wrong type`, `${issue.field}: ${expectedType}`);
-        }
-        throw protocolError(spec, `response is missing required output field "${issue.field}"`, `a "${issue.field}" field of type ${expectedType}`);
-    }
-    return parsed;
-}
-// Streaming lifecycle (§6.3) — connect + idle clocks, verbatim frame relay
-async function requestStreaming(spec, plan) {
-    const connectMs = spec.timeouts?.connectMs ?? DEFAULT_CONNECT_MS;
-    const idleMs = spec.timeouts?.streamIdleMs ?? DEFAULT_STREAM_IDLE_MS;
-    const doRequest = plan.url.protocol === 'https:' ? httpsRequest : httpRequest;
-    // Connect: resolve with the response, or reject cli_unreachable (pre-frame) on
-    // a connect timeout / transport failure. No total request timeout for a stream.
-    const res = await new Promise((resolve, reject) => {
-        let done = false;
-        let connectTimer = null;
-        const clearConnect = () => {
-            if (connectTimer !== null) {
-                clearTimeout(connectTimer);
-                connectTimer = null;
-            }
-        };
-        const req = doRequest(plan.url, { method: plan.method }, (r) => {
-            if (done)
-                return;
-            done = true;
-            clearConnect();
-            resolve(r);
-        });
-        for (const [n, v] of plan.headers)
-            req.setHeader(n, v);
-        connectTimer = setTimeout(() => {
-            if (done)
-                return;
-            done = true;
-            req.destroy();
-            reject(unreachable(spec, plan, `connection timed out after ${connectMs}ms`));
-        }, connectMs);
-        req.on('socket', (socket) => {
-            if (socket.connecting)
-                socket.once('connect', clearConnect);
-            else
-                clearConnect();
-        });
-        req.on('error', (e) => {
-            if (done)
-                return;
-            done = true;
-            clearConnect();
-            reject(unreachable(spec, plan, `could not reach the backend (${errCode(e)})`));
-        });
-        if (plan.body !== undefined)
-            req.write(plan.body);
-        req.end();
-    });
-    const status = res.statusCode ?? 0;
-    if (!(status >= 200 && status < 300)) {
-        // Non-2xx before any frame: buffer the body and route through the same
-        // structured error path as a unary call (throwing is safe — no stdout yet).
-        const body = await readAll(res);
-        throwNon2xx(spec, status, body); // always throws
-    }
-    // 2xx: relay newline-delimited frames verbatim and incrementally. `for await`
-    // gives natural backpressure — the socket is not pulled while a write awaits.
-    let framesEmitted = false;
-    let partial = '';
-    let idleTimer = null;
-    const armIdle = () => {
-        if (idleTimer !== null)
-            clearTimeout(idleTimer);
-        idleTimer = setTimeout(() => res.destroy(new StreamIdleError()), idleMs);
-    };
-    const clearIdle = () => {
-        if (idleTimer !== null) {
-            clearTimeout(idleTimer);
-            idleTimer = null;
-        }
-    };
-    try {
-        armIdle();
-        for await (const chunk of res) {
-            armIdle(); // reset the idle clock on every received body chunk
-            partial += chunk.toString('utf8');
-            let nl;
-            while ((nl = partial.indexOf('\n')) !== -1) {
-                const line = partial.slice(0, nl);
-                partial = partial.slice(nl + 1);
-                if (line.trim() === '')
-                    continue; // drop blank records
-                framesEmitted = true;
-                recordPreviewJsonLine(line);
-                const ok = await writeStdout(line + '\n');
-                if (!ok) {
-                    // Consumer closed the pipe (EPIPE) — stop cleanly, nothing to report.
-                    clearIdle();
-                    res.destroy();
-                    return;
-                }
-            }
-        }
-        clearIdle();
-        // Preserve a final nonblank unterminated record at clean EOF, verbatim (the
-        // backend sent no trailing delimiter, so none is added).
-        if (partial.trim() !== '') {
-            framesEmitted = true;
-            recordPreviewJsonLine(partial);
-            await writeStdout(partial);
-        }
-        return; // clean EOF → SUCCESS
-    }
-    catch (e) {
-        clearIdle();
-        const detail = e instanceof StreamIdleError ? `stream idle for ${idleMs}ms` : `connection error (${errCode(e)})`;
-        if (framesEmitted) {
-            // After a frame has been emitted: one concise stderr diagnostic + NETWORK
-            // exit, and DO NOT throw (that would append an <error> to stdout).
-            const message = `${label(spec)}: stream interrupted (${detail})`;
-            diag(`crtr: ${message}`);
-            recordPreviewError({
-                error: 'stream_interrupted',
-                message,
-                next: 'Retry the command to begin a fresh stream.',
-            });
-            process.exitCode = ExitCode.NETWORK;
-            return;
-        }
-        // Before the first frame: surface the normal structured cli_unreachable error.
-        throw unreachable(spec, plan, detail);
-    }
-}
-// Error mapping (§6.5)
-/** Extract a non-2xx error. A conforming nested `{ error: { code, message,
- *  field?, next? } }` with an acceptable snake_case, non-reserved code becomes a
- *  CrtrError carrying that code; a reserved/ill-formed code demotes to
- *  cli_protocol_error; a missing/malformed/nonconforming envelope becomes
- *  cli_http_error. The HTTP status supplies the exit code in every case, and
- *  rides its own `http_status` slot — never `received`, which names the CALLER's
- *  offending value and would otherwise make the backend look like it was
- *  complaining about the number 400. A backend that supplies its own `received`
- *  keeps it. This is error-envelope extraction, not success-envelope
- *  unwrapping. Always throws. */
-function throwNon2xx(spec, status, body) {
-    const exit = deriveExit(status);
-    let parsed;
-    try {
-        parsed = JSON.parse(body);
-    }
-    catch {
-        parsed = undefined;
-    }
-    if (isRecord(parsed)) {
-        const err = parsed['error'];
-        if (isRecord(err) && typeof err['code'] === 'string' && typeof err['message'] === 'string') {
-            const code = err['code'];
-            const message = err['message'];
-            const field = typeof err['field'] === 'string' ? err['field'] : undefined;
-            const next = typeof err['next'] === 'string' ? err['next'] : `Inspect the backend response, then retry if appropriate.`;
-            const accepted = SNAKE.test(code) && !RESERVED_CODES.has(code);
-            // A generic recovery hint, not a backend-specific code: the server is
-            // saying the command description this call was parsed from is out of
-            // date. The dispatcher acts on it by refetching the plugin's package and
-            // re-running the original argv against the refreshed tree.
-            const manifestStale = envelopeClaimsStale(err);
-            throw new CrtrError(accepted ? code : 'cli_protocol_error', message, exit, {
-                ...(err['received'] !== undefined ? { received: err['received'] } : {}),
-                ...(field !== undefined ? { field } : {}),
-                ...(manifestStale ? staleErrorDetails(spec.registration.name) : {}),
-                http_status: status,
-                next,
-            });
-        }
-    }
-    throw new CrtrError('cli_http_error', `${label(spec)}: request failed with HTTP ${status}`, exit, {
-        http_status: status,
-        next: `Inspect the backend response, then retry if appropriate.`,
-    });
-}
-/** HTTP status → exit code (§6.5), independent of the error `code`. */
-function deriveExit(status) {
-    if (status === 400 || status === 401 || status === 403 || status === 422)
-        return ExitCode.USAGE;
-    if (status === 404)
-        return ExitCode.NOT_FOUND;
-    if (status === 409)
-        return ExitCode.AMBIGUOUS;
-    return ExitCode.GENERAL; // all other 4xx/5xx and 3xx
-}
-function protocolError(spec, received, expected) {
-    return new CrtrError('cli_protocol_error', `${label(spec)}: ${received}. Expected ${expected}.`, ExitCode.GENERAL, {
-        received,
-        next: `Run \`crtr pkg plugin update ${spec.registration.name}\` or inspect the backend response.`,
-    });
-}
-function unreachable(spec, plan, detail) {
-    return new CrtrError('cli_unreachable', `${label(spec)}: ${detail}`, ExitCode.NETWORK, {
-        received: plan.url.origin,
-        next: `Check connectivity to ${plan.url.host} and retry; run \`crtr pkg plugin update ${spec.registration.name}\` if the command surface changed.`,
-    });
-}
-// Small helpers
-function label(spec) {
-    return `HTTP-transport plugin "${spec.registration.name}" command \`${spec.commandPath.join(' ')}\``;
-}
-function errCode(e) {
-    const err = e;
-    return err?.code ?? (err?.message ?? String(e));
-}
-function readAll(res) {
-    return new Promise((resolve) => {
-        const chunks = [];
-        res.on('data', (c) => chunks.push(c));
-        res.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));
-        res.on('error', () => resolve(Buffer.concat(chunks).toString('utf8'))); // best-effort
-    });
-}
-function typeName(v) {
-    if (v === null)
-        return 'null';
-    if (Array.isArray(v))
-        return 'array';
-    return typeof v;
-}
+var I=Object.defineProperty;var u=(e,t)=>I(e,"name",{value:t,configurable:!0});import{readFileSync as O,statSync as B}from"node:fs";import{resolve as J}from"node:path";import{request as A}from"node:http";import{request as U}from"node:https";import{validateDeclaredResult as z}from"./exec-invoke.js";import{CrtrError as S}from"../../errors.js";import{envelopeClaimsStale as G,staleErrorDetails as F}from"../../manifest-stale.js";import{diag as H,recordPreviewError as V,recordPreviewJsonLine as q,writeStdout as C}from"../../io.js";import{ExitCode as b}from"../../../types.js";import{isRecord as R}from"../../../shared/predicates.js";const P=1e4,K=3e4,W=6e4,Q=/^[a-z][a-z0-9]*(_[a-z0-9]+)*$/,X=new Set(["internal","unknown_path","command_collision","cli_protocol_error"]);class M extends Error{static{u(this,"StreamIdleError")}}async function we(e,t,n){const r=Y(e,t,n);if(e.rest.streaming===!0){await re(e,r);return}const{status:d,body:i}=await te(e,r);if(d>=200&&d<300)return ne(e,i);L(e,d,i)}u(we,"invokeHttpLeaf");function Y(e,t,n){const r=new Map;for(const o of e.params)r.set(o.name,o);const d=Object.entries(e.rest.params),i=e.baseUrl??new URL(e.registration.endpoint).origin;let m=e.rest.path;for(const[o,s]of d){if(s.in!=="path")continue;const c=t[E(o)];m=m.split(`{${o}}`).join(ee(c))}const p=new URL(m,i);for(const[o,s]of d){if(s.in!=="query")continue;const c=E(o);_(r.get(o),c,t,n)&&p.searchParams.append(s.as??o,String(t[c]))}const a=Z(e,d,r,t,n),l=Object.keys(a).length>0?JSON.stringify(a):void 0;let y;const f=e.registration.authEnv;if(f!==void 0&&f!==""){const o=process.env[f];if(o===void 0||o==="")throw new S("auth_env_missing",`${T(e)}: environment variable ${f} is not set or empty`,b.USAGE,{field:f,received:f,next:`Export ${f} with the bearer token, then retry.`});y=`Bearer ${o}`}const h=[["Accept","application/json"]];y!==void 0&&h.push(["Authorization",y]);for(const[o,s]of d){if(s.in!=="header")continue;const c=E(o);if(!_(r.get(o),c,t,n))continue;const w=s.as,g=String(t[c]);if(/[\r\n]/.test(g))throw new S("invalid_type",`${T(e)}: header "${w}" value must not contain a newline`,b.USAGE,{field:o,received:"(newline in header value)",next:"Remove newline characters from the value."});h.push([w,g])}return l!==void 0&&h.push(["Content-Type","application/json"]),{url:p,method:e.rest.method,headers:h,...l!==void 0?{body:l}:{}}}u(Y,"buildRequestPlan");function Z(e,t,n,r,d){const i=new Map;for(const[a,l]of t){if(l.in!=="body")continue;const y=l.as??a,f=i.get(y);f!==void 0?f.push(a):i.set(y,[a])}const m={};for(const[a,l]of i){const y=l.map(s=>({name:s,param:n.get(s)})),f=y.find(s=>s.param.kind!=="stdin"),h=y.find(s=>s.param.kind==="stdin");let o;f!==void 0&&_(f.param,E(f.name),r,d)?o={param:f.param,value:r[E(f.name)]}:h!==void 0&&_(h.param,E(h.name),r,d)&&(o={param:h.param,value:r[E(h.name)]}),o!==void 0&&(m[a]=j(e,o.param,o.value))}const p={...e.rest.body};return e.rest.bodyRoot!==void 0?p[e.rest.bodyRoot]=m:Object.assign(p,m),p}u(Z,"assembleBody");function j(e,t,n){if(t.kind==="context-file")return n;if((t.kind==="positional"||t.kind==="flag")&&t.type==="path"){if(Array.isArray(n))return n.map(m=>j(e,t,m));const r=String(n),d=J(process.cwd(),r);let i;try{i=B(d)}catch{throw N(e,t.name,r,"no file exists at that path","an existing local file path")}if(!i.isFile())throw N(e,t.name,r,"the path is not a regular file","a regular local file (not a directory, socket, or device)");try{return t.encoding==="base64"?O(d).toString("base64"):O(d,"utf8")}catch{throw N(e,t.name,r,"the file could not be read","a readable local file path")}}return n}u(j,"materializeBodyValue");function N(e,t,n,r,d){return new S("invalid_type",`${T(e)}: cannot read file for "${t}" \u2014 ${r}: ${n}`,b.USAGE,{field:t,received:n,next:`Pass ${d}, relative to the current directory or absolute.`})}u(N,"fileError");function _(e,t,n,r){return r!==void 0?r.providedParams.has(t):Object.prototype.hasOwnProperty.call(n,t)&&n[t]!==void 0}u(_,"isPresent");function ee(e){const t=String(e);return t==="."||t===".."?t.replace(/\./g,"%2E"):encodeURIComponent(t)}u(ee,"encodePathSegmentValue");function E(e){return e.replace(/-([a-z])/g,(t,n)=>n.toUpperCase())}u(E,"paramKey");function te(e,t){const n=e.timeouts?.connectMs??P,r=e.timeouts?.requestMs??K,d=t.url.protocol==="https:"?U:A;return new Promise((i,m)=>{let p=!1,a=null,l=null;const y=u(()=>{a!==null&&clearTimeout(a),l!==null&&clearTimeout(l),a=null,l=null},"clearTimers"),f=u(c=>{p||(p=!0,y(),o.destroy(),m(c))},"fail"),h=u(c=>{p||(p=!0,y(),i(c))},"succeed"),o=d(t.url,{method:t.method},c=>{a!==null&&(clearTimeout(a),a=null);const w=[];c.on("data",g=>w.push(g)),c.on("end",()=>h({status:c.statusCode??0,body:Buffer.concat(w).toString("utf8")})),c.on("error",g=>f(v(e,t,`connection error (${x(g)})`)))});for(const[c,w]of t.headers)o.setHeader(c,w);a=setTimeout(()=>f(v(e,t,`connection timed out after ${n}ms`)),n),l=setTimeout(()=>f(v(e,t,`request exceeded the ${r}ms timeout`)),r),o.on("socket",c=>{c.connecting?c.once("connect",()=>s()):s()});const s=u(()=>{a!==null&&(clearTimeout(a),a=null)},"clearConnectTimer");o.on("error",c=>f(v(e,t,`could not reach the backend (${x(c)})`))),t.body!==void 0&&o.write(t.body),o.end()})}u(te,"requestUnary");function ne(e,t){let n;try{n=JSON.parse(t)}catch{throw k(e,"response body was not valid JSON","a JSON object matching the declared output")}if(!R(n))throw k(e,`response body was not a JSON object (got ${ae(n)})`,"a JSON object matching the declared output");const r=z(e.output,n);if(r!==null){const i=e.output.find(m=>m.name===r.field)?.type??"unknown";throw r.receivedType!==void 0?k(e,`output field "${r.field}" has the wrong type`,`${r.field}: ${i}`):k(e,`response is missing required output field "${r.field}"`,`a "${r.field}" field of type ${i}`)}return n}u(ne,"mapUnary2xx");async function re(e,t){const n=e.timeouts?.connectMs??P,r=e.timeouts?.streamIdleMs??W,d=t.url.protocol==="https:"?U:A,i=await new Promise((h,o)=>{let s=!1,c=null;const w=u(()=>{c!==null&&(clearTimeout(c),c=null)},"clearConnect"),g=d(t.url,{method:t.method},$=>{s||(s=!0,w(),h($))});for(const[$,D]of t.headers)g.setHeader($,D);c=setTimeout(()=>{s||(s=!0,g.destroy(),o(v(e,t,`connection timed out after ${n}ms`)))},n),g.on("socket",$=>{$.connecting?$.once("connect",w):w()}),g.on("error",$=>{s||(s=!0,w(),o(v(e,t,`could not reach the backend (${x($)})`)))}),t.body!==void 0&&g.write(t.body),g.end()}),m=i.statusCode??0;if(!(m>=200&&m<300)){const h=await ie(i);L(e,m,h)}let p=!1,a="",l=null;const y=u(()=>{l!==null&&clearTimeout(l),l=setTimeout(()=>i.destroy(new M),r)},"armIdle"),f=u(()=>{l!==null&&(clearTimeout(l),l=null)},"clearIdle");try{y();for await(const h of i){y(),a+=h.toString("utf8");let o;for(;(o=a.indexOf(`
+`))!==-1;){const s=a.slice(0,o);if(a=a.slice(o+1),s.trim()==="")continue;if(p=!0,q(s),!await C(s+`
+`)){f(),i.destroy();return}}}f(),a.trim()!==""&&(p=!0,q(a),await C(a));return}catch(h){f();const o=h instanceof M?`stream idle for ${r}ms`:`connection error (${x(h)})`;if(p){const s=`${T(e)}: stream interrupted (${o})`;H(`crtr: ${s}`),V({error:"stream_interrupted",message:s,next:"Retry the command to begin a fresh stream."}),process.exitCode=b.NETWORK;return}throw v(e,t,o)}}u(re,"requestStreaming");function L(e,t,n){const r=oe(t);let d;try{d=JSON.parse(n)}catch{d=void 0}if(R(d)){const i=d.error;if(R(i)&&typeof i.code=="string"&&typeof i.message=="string"){const m=i.code,p=i.message,a=typeof i.field=="string"?i.field:void 0,l=typeof i.next=="string"?i.next:"Inspect the backend response, then retry if appropriate.",y=Q.test(m)&&!X.has(m),f=G(i);throw new S(y?m:"cli_protocol_error",p,r,{...i.received!==void 0?{received:i.received}:{},...a!==void 0?{field:a}:{},...f?F(e.registration.name):{},http_status:t,next:l})}}throw new S("cli_http_error",`${T(e)}: request failed with HTTP ${t}`,r,{http_status:t,next:"Inspect the backend response, then retry if appropriate."})}u(L,"throwNon2xx");function oe(e){return e===400||e===401||e===403||e===422?b.USAGE:e===404?b.NOT_FOUND:e===409?b.AMBIGUOUS:b.GENERAL}u(oe,"deriveExit");function k(e,t,n){return new S("cli_protocol_error",`${T(e)}: ${t}. Expected ${n}.`,b.GENERAL,{received:t,next:`Run \`crtr pkg plugin update ${e.registration.name}\` or inspect the backend response.`})}u(k,"protocolError");function v(e,t,n){return new S("cli_unreachable",`${T(e)}: ${n}`,b.NETWORK,{received:t.url.origin,next:`Check connectivity to ${t.url.host} and retry; run \`crtr pkg plugin update ${e.registration.name}\` if the command surface changed.`})}u(v,"unreachable");function T(e){return`HTTP-transport plugin "${e.registration.name}" command \`${e.commandPath.join(" ")}\``}u(T,"label");function x(e){const t=e;return t?.code??t?.message??String(e)}u(x,"errCode");function ie(e){return new Promise(t=>{const n=[];e.on("data",r=>n.push(r)),e.on("end",()=>t(Buffer.concat(n).toString("utf8"))),e.on("error",()=>t(Buffer.concat(n).toString("utf8")))})}u(ie,"readAll");function ae(e){return e===null?"null":Array.isArray(e)?"array":typeof e}u(ae,"typeName");export{we as invokeHttpLeaf};