@reventlessdev/reventless-seed 1.0.0-alpha.2 → 1.0.0-alpha.21

package/src/Seed_Upload.res

@@ -1,27 +1,26 @@
-// Seed-time asset upload against the framework's presign-shaped upload contract.
+// Seed-time asset upload against the framework's upload contract (route B).
 //
-// One code path for both providers: the AWS `Upload_Presign_S3` Function URL and
-// the local dev upload route expose the SAME shape — POST `{fileName,contentType}`
-// → `{uploadUrl, storageRef}`, then PUT the bytes to `uploadUrl`. `uploadAsset`
-// resolves `Ok(storageRef)` — the same same-origin `/{prefix}/{key}` ref a command
-// stores and the UI renders.
+// Minting is a GraphQL mutation on the domain API — `Upload_Presign(store, fileName,
+// contentType)` — authenticated by the same bearer the seed already uses for commands
+// (no separate endpoint, no anonymous surface). `uploadAsset` issues it through the
+// shared `Seed_Client`, then PUTs the bytes to the returned `uploadUrl` and resolves
+// `Ok(storageRef)` — the same `/{prefix}/{key}` ref a command stores and the UI renders.
 //
-// The seed runs under Node, so the returned `uploadUrl` is resolved to an
-// absolute URL against the endpoint's origin: AWS returns an absolute presigned
-// S3 URL (unchanged), while the local route returns a same-origin relative
-// `/{prefix}/{key}` that Node's `fetch` cannot PUT to until it is made absolute.
+// The seed runs under Node, so a relative `uploadUrl` (the local dev server returns a
+// same-origin `/{prefix}/{key}`) is resolved to an absolute URL against the client's
+// endpoint origin before the PUT; AWS returns an absolute presigned S3 URL (used as-is).
+// The PUT itself is unauthenticated — presigned on AWS, open on the local route.
 
 type fetchInit = {method: string, headers: dict<string>, body: string}
 type response
 
 @val external fetch: (string, fetchInit) => promise<response> = "fetch"
-@send external responseJson: response => promise<JSON.t> = "json"
 @send external responseText: response => promise<string> = "text"
 @get external responseOk: response => bool = "ok"
 @get external responseStatus: response => int = "status"
 
-// Resolve a possibly-relative URL against a base (WHATWG URL semantics: an
-// absolute `input` ignores `base`, a relative one is resolved against it).
+// Resolve a possibly-relative URL against a base (WHATWG URL semantics: an absolute
+// `input` ignores `base`, a relative one is resolved against it).
 type url
 @new external makeUrl: (string, string) => url = "URL"
 @get external urlHref: url => string = "href"
@@ -38,51 +37,52 @@ let asString = (json: JSON.t): option<string> =>
   | _ => None
   }
 
-// A `fetch` that reports an unreachable endpoint as `Error` instead of throwing,
-// so the two-step upload can thread failures without exceptions.
+// Whether this run should skip uploads entirely. `SEED_SKIP_UPLOADS` seeds domain data
+// fast, or skips a broken/absent upload path without editing the data set.
+let uploadsSkipped = (): bool => Seed_Prompt.envValue("SEED_SKIP_UPLOADS")->Option.isSome
+
+// A `fetch` that reports an unreachable endpoint as `Error` instead of throwing.
 let tryFetch = async (url: string, init: fetchInit): result<response, string> =>
   try Ok(await fetch(url, init)) catch {
   | _ => Error(`cannot reach ${url}`)
   }
 
 /**
- * Uploads `bytes` under `fileName`/`contentType` through `uploadEndpoint` and
+ * Uploads `bytes` under `fileName`/`contentType` into `store` (the qualified
+ * `{plugin}.{store}` the asset's field declares, e.g. `"Catalog.productImages"`) and
  * resolves `Ok(storageRef)` (the stored `/{prefix}/{key}` ref), or `Error(msg)`
- * describing the step that failed. `authToken`, when supplied, is sent as a
- * Bearer on the presign request (the endpoint decides whether it is required;
- * the PUT itself is unauthenticated — presigned on AWS, open locally).
+ * describing the step that failed. Mints through the domain API's `Upload_Presign`
+ * mutation on `client`, then PUTs the bytes to the returned `uploadUrl`.
  */
 let uploadAsset = async (
-  ~uploadEndpoint: string,
+  ~client: Seed_Client.t,
+  ~store: string,
   ~bytes: string,
   ~fileName: string,
   ~contentType: string,
-  ~authToken: option<string>=?,
 ): result<string, string> => {
-  let presignHeaders = Dict.fromArray([("content-type", "application/json")])
-  authToken->Option.forEach(t => presignHeaders->Dict.set("authorization", `Bearer ${t}`))
-  let presignBody = JSON.stringify(
-    JSON.Encode.object(
-      Dict.fromArray([
-        ("fileName", JSON.Encode.string(fileName)),
-        ("contentType", JSON.Encode.string(contentType)),
-      ]),
-    ),
-  )
+  // GraphQL string literals: JSON-quote the argument values (JSON string escaping is a
+  // superset-safe subset of GraphQL's for these ASCII-ish inputs).
+  let q = s => JSON.stringify(JSON.Encode.string(s))
+  let query = `mutation { r: Upload_Presign(store: ${q(store)}, fileName: ${q(
+      fileName,
+    )}, contentType: ${q(contentType)}) { uploadUrl storageRef } }`
+
+  let presign = try Ok(await Seed_Client.gql(client, ~query, ~label="Upload_Presign")) catch {
+  | Seed_Types.Failed(m) => Error(m)
+  | _ => Error("Upload_Presign: unexpected error")
+  }
 
-  switch await tryFetch(uploadEndpoint, {method: "POST", headers: presignHeaders, body: presignBody}) {
-  | Error(m) => Error(`presign: ${m} — is the platform running?`)
-  | Ok(presignRes) if !(presignRes->responseOk) =>
-    let detail = await presignRes->responseText
-    Error(`presign failed with HTTP ${(presignRes->responseStatus)->Int.toString}: ${detail}`)
-  | Ok(presignRes) =>
-    let json = await presignRes->responseJson
+  switch presign {
+  | Error(m) => Error(`presign: ${m}`)
+  | Ok(data) =>
+    let r = data->field("r")->Option.getOr(JSON.Encode.null)
     switch (
-      json->field("uploadUrl")->Option.flatMap(asString),
-      json->field("storageRef")->Option.flatMap(asString),
+      r->field("uploadUrl")->Option.flatMap(asString),
+      r->field("storageRef")->Option.flatMap(asString),
     ) {
     | (Some(uploadUrl), Some(storageRef)) =>
-      let putUrl = urlHref(makeUrl(uploadUrl, uploadEndpoint))
+      let putUrl = urlHref(makeUrl(uploadUrl, Seed_Client.endpoint(client)))
       switch await tryFetch(
         putUrl,
         {method: "PUT", headers: Dict.fromArray([("content-type", contentType)]), body: bytes},
@@ -91,9 +91,9 @@ let uploadAsset = async (
       | Ok(putRes) if putRes->responseOk => Ok(storageRef)
       | Ok(putRes) =>
         let detail = await putRes->responseText
-        Error(`upload PUT failed with HTTP ${(putRes->responseStatus)->Int.toString}: ${detail}`)
+        Error(`upload PUT failed with HTTP ${putRes->responseStatus->Int.toString}: ${detail}`)
       }
-    | _ => Error("presign response missing uploadUrl/storageRef")
+    | _ => Error("Upload_Presign response missing uploadUrl/storageRef")
     }
   }
 }

package/src/Seed_Upload.res.mjs

@@ -1,6 +1,10 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+import * as Primitive_exceptions from "@rescript/runtime/lib/es6/Primitive_exceptions.js";
+import * as Seed_Types$ReventlessSeed from "./Seed_Types.res.mjs";
+import * as Seed_Client$ReventlessSeed from "./Seed_Client.res.mjs";
+import * as Seed_Prompt$ReventlessSeed from "./Seed_Prompt.res.mjs";
 
 function field(json, key) {
   if (typeof json === "object" && json !== null && !Array.isArray(json)) {
@@ -14,6 +18,10 @@ function asString(json) {
   }
 }
 
+function uploadsSkipped() {
+  return Stdlib_Option.isSome(Seed_Prompt$ReventlessSeed.envValue("SEED_SKIP_UPLOADS"));
+}
+
 async function tryFetch(url, init) {
   try {
     return {
@@ -28,91 +36,79 @@ async function tryFetch(url, init) {
   }
 }
 
-async function uploadAsset(uploadEndpoint, bytes, fileName, contentType, authToken) {
-  let presignHeaders = Object.fromEntries([[
-      "content-type",
-      "application/json"
-    ]]);
-  Stdlib_Option.forEach(authToken, t => {
-    presignHeaders["authorization"] = `Bearer ` + t;
-  });
-  let presignBody = JSON.stringify(Object.fromEntries([
-    [
-      "fileName",
-      fileName
-    ],
-    [
-      "contentType",
-      contentType
-    ]
-  ]));
-  let m = await tryFetch(uploadEndpoint, {
-    method: "POST",
-    headers: presignHeaders,
-    body: presignBody
-  });
-  if (m.TAG !== "Ok") {
+async function uploadAsset(client, store, bytes, fileName, contentType) {
+  let query = `mutation { r: Upload_Presign(store: ` + JSON.stringify(store) + `, fileName: ` + JSON.stringify(fileName) + `, contentType: ` + JSON.stringify(contentType) + `) { uploadUrl storageRef } }`;
+  let presign;
+  try {
+    presign = {
+      TAG: "Ok",
+      _0: await Seed_Client$ReventlessSeed.gql(client, query, "Upload_Presign")
+    };
+  } catch (raw_m) {
+    let m = Primitive_exceptions.internalToException(raw_m);
+    presign = m.RE_EXN_ID === Seed_Types$ReventlessSeed.Failed ? ({
+        TAG: "Error",
+        _0: m._1
+      }) : ({
+        TAG: "Error",
+        _0: "Upload_Presign: unexpected error"
+      });
+  }
+  if (presign.TAG !== "Ok") {
     return {
       TAG: "Error",
-      _0: `presign: ` + m._0 + ` — is the platform running?`
+      _0: `presign: ` + presign._0
     };
   }
-  let presignRes = m._0;
-  if (presignRes.ok) {
-    let json = await presignRes.json();
-    let match = Stdlib_Option.flatMap(field(json, "uploadUrl"), asString);
-    let match$1 = Stdlib_Option.flatMap(field(json, "storageRef"), asString);
-    if (match === undefined) {
-      return {
-        TAG: "Error",
-        _0: "presign response missing uploadUrl/storageRef"
-      };
-    }
-    if (match$1 === undefined) {
-      return {
-        TAG: "Error",
-        _0: "presign response missing uploadUrl/storageRef"
-      };
-    }
-    let putUrl = new URL(match, uploadEndpoint).href;
-    let m$1 = await tryFetch(putUrl, {
-      method: "PUT",
-      headers: Object.fromEntries([[
-          "content-type",
-          contentType
-        ]]),
-      body: bytes
-    });
-    if (m$1.TAG !== "Ok") {
-      return {
-        TAG: "Error",
-        _0: `upload PUT: ` + m$1._0
-      };
-    }
-    let putRes = m$1._0;
-    if (putRes.ok) {
-      return {
-        TAG: "Ok",
-        _0: match$1
-      };
-    }
-    let detail = await putRes.text();
+  let r = Stdlib_Option.getOr(field(presign._0, "r"), null);
+  let match = Stdlib_Option.flatMap(field(r, "uploadUrl"), asString);
+  let match$1 = Stdlib_Option.flatMap(field(r, "storageRef"), asString);
+  if (match === undefined) {
     return {
       TAG: "Error",
-      _0: `upload PUT failed with HTTP ` + putRes.status.toString() + `: ` + detail
+      _0: "Upload_Presign response missing uploadUrl/storageRef"
+    };
+  }
+  if (match$1 === undefined) {
+    return {
+      TAG: "Error",
+      _0: "Upload_Presign response missing uploadUrl/storageRef"
+    };
+  }
+  let putUrl = new URL(match, Seed_Client$ReventlessSeed.endpoint(client)).href;
+  let m$1 = await tryFetch(putUrl, {
+    method: "PUT",
+    headers: Object.fromEntries([[
+        "content-type",
+        contentType
+      ]]),
+    body: bytes
+  });
+  if (m$1.TAG !== "Ok") {
+    return {
+      TAG: "Error",
+      _0: `upload PUT: ` + m$1._0
+    };
+  }
+  let putRes = m$1._0;
+  if (putRes.ok) {
+    return {
+      TAG: "Ok",
+      _0: match$1
     };
   }
-  let detail$1 = await presignRes.text();
+  let detail = await putRes.text();
   return {
     TAG: "Error",
-    _0: `presign failed with HTTP ` + presignRes.status.toString() + `: ` + detail$1
+    _0: `upload PUT failed with HTTP ` + putRes.status.toString() + `: ` + detail
   };
 }
 
 export {
   field,
   asString,
+  uploadsSkipped,
   tryFetch,
   uploadAsset,
 }
-/* No side effect */
+/* Seed_Prompt-ReventlessSeed Not a pure module */

package/src/Seed_Users.res

@@ -0,0 +1,92 @@
+// The dev accounts a seed run can log in as, read from `.reventless/users.yaml`.
+//
+// Both platforms keep that file beside the package the seed runs from: locally
+// the in-memory auth adapter loads it at startup, and on AWS it is the record of
+// what was created in the Cognito pool. Either way it already holds the
+// credentials an operator would otherwise retype, so the credential prompt
+// offers its entries instead of asking for a password nobody remembers.
+//
+// Absence is normal and silent — the caller falls back to asking. Nothing here
+// throws: a missing, unreadable or malformed file yields no accounts.
+
+@module("yaml") external parseYaml: string => JSON.t = "parse"
+
+/**
+ * One account: what to log in as, what to send with it, and — when the file
+ * records one — the id the platform stamps on rows this account writes.
+ *
+ * `userId` is optional because absence is normal on both platforms: a local file
+ * may omit it and let the auth adapter default it to the username, and a
+ * hand-maintained AWS file records subs the pool minted, so it can lag.
+ */
+type user = {
+  username: string,
+  password: string,
+  groups: array<string>,
+  userId: option<string>,
+}
+
+let asString = (json: JSON.t): option<string> =>
+  switch json {
+  | String(s) => Some(s)
+  | _ => None
+  }
+
+let userOf = (json: JSON.t): option<user> =>
+  switch json {
+  | Object(obj) =>
+    switch (
+      obj->Dict.get("username")->Option.flatMap(asString),
+      obj->Dict.get("password")->Option.flatMap(asString),
+    ) {
+    | (Some(username), Some(password)) =>
+      let groups = switch obj->Dict.get("groups") {
+      | Some(JSON.Array(items)) => items->Array.filterMap(asString)
+      | _ => []
+      }
+      Some({username, password, groups, userId: obj->Dict.get("userId")->Option.flatMap(asString)})
+    | _ => None
+    }
+  | _ => None
+  }
+
+/**
+ * The accounts a users.yaml document defines, in the order it defines them —
+ * the order is what makes "the first one" a stable default.
+ *
+ * An entry without both a username and a password is skipped rather than
+ * rejected: the file is hand-maintained, and one incomplete entry should not
+ * cost the operator the rest of the list.
+ */
+let parseString = (yamlText: string): array<user> => {
+  let doc = try parseYaml(yamlText) catch {
+  | _ => JSON.Null
+  }
+  switch doc {
+  | Array(items) => items->Array.filterMap(userOf)
+  | _ => []
+  }
+}
+
+/** Where the file lives for the platform being seeded — the seed runs from that
+    package's directory, which is the same cwd the local auth adapter reads. */
+let defaultPath = (): string => NodePath.join([NodeProcess.cwd(), ".reventless", "users.yaml"])
+
+/**
+ * The accounts on disk, with the path they came from. `None` when there is no
+ * readable file with at least one usable account, which the caller reads as
+ * "ask for credentials instead".
+ */
+let load = (~path: option<string>=?): option<(string, array<user>)> => {
+  let file = path->Option.getOr(defaultPath())
+  let users = try {
+    NodeFs.existsSync(file) ? parseString(NodeFs.readFileSync(file)) : []
+  } catch {
+  | _ => []
+  }
+  users->Array.length == 0 ? None : Some((file, users))
+}
+
+/** Menu label: the username, plus whatever groups the file records for it. */
+let label = (u: user): string =>
+  u.groups->Array.length == 0 ? u.username : `${u.username}  [${u.groups->Array.join(", ")}]`

package/src/Seed_Users.res.mjs

@@ -0,0 +1,91 @@
+// Generated by ReScript, PLEASE EDIT WITH CARE
+
+import * as Yaml from "yaml";
+import * as Nodefs from "node:fs";
+import * as Nodepath from "node:path";
+import * as Stdlib_Array from "@rescript/runtime/lib/es6/Stdlib_Array.js";
+import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
+
+function asString(json) {
+  if (typeof json === "string") {
+    return json;
+  }
+}
+
+function userOf(json) {
+  if (typeof json !== "object" || json === null || Array.isArray(json)) {
+    return;
+  }
+  let match = Stdlib_Option.flatMap(json["username"], asString);
+  let match$1 = Stdlib_Option.flatMap(json["password"], asString);
+  if (match === undefined) {
+    return;
+  }
+  if (match$1 === undefined) {
+    return;
+  }
+  let match$2 = json["groups"];
+  let groups = match$2 !== undefined ? (
+      Array.isArray(match$2) ? Stdlib_Array.filterMap(match$2, asString) : []
+    ) : [];
+  return {
+    username: match,
+    password: match$1,
+    groups: groups,
+    userId: Stdlib_Option.flatMap(json["userId"], asString)
+  };
+}
+
+function parseString(yamlText) {
+  let doc;
+  try {
+    doc = Yaml.parse(yamlText);
+  } catch (exn) {
+    doc = null;
+  }
+  if (Array.isArray(doc)) {
+    return Stdlib_Array.filterMap(doc, userOf);
+  } else {
+    return [];
+  }
+}
+
+function defaultPath() {
+  return Nodepath.join(process.cwd(), ".reventless", "users.yaml");
+}
+
+function load(path) {
+  let file = Stdlib_Option.getOr(path, defaultPath());
+  let users;
+  try {
+    users = Nodefs.existsSync(file) ? parseString(Nodefs.readFileSync(file, "utf8")) : [];
+  } catch (exn) {
+    users = [];
+  }
+  if (users.length === 0) {
+    return;
+  } else {
+    return [
+      file,
+      users
+    ];
+  }
+}
+
+function label(u) {
+  if (u.groups.length === 0) {
+    return u.username;
+  } else {
+    return u.username + `  [` + u.groups.join(", ") + `]`;
+  }
+}
+
+export {
+  asString,
+  userOf,
+  parseString,
+  defaultPath,
+  load,
+  label,
+}
+/* yaml Not a pure module */