@reventlessdev/reventless-seed 1.0.0-alpha.2 → 1.0.0-alpha.21

package/lib/bs/src/Seed_Client.res.mjs

@@ -1,5 +1,6 @@
 // Generated by ReScript, PLEASE EDIT WITH CARE
 
+import * as Stdlib_JSON from "@rescript/runtime/lib/es6/Stdlib_JSON.js";
 import * as Stdlib_Array from "@rescript/runtime/lib/es6/Stdlib_Array.js";
 import * as Stdlib_Option from "@rescript/runtime/lib/es6/Stdlib_Option.js";
 import * as Seed_Types$ReventlessSeed from "./Seed_Types.res.mjs";
@@ -21,10 +22,107 @@ function currentToken(t) {
   return t.token;
 }
 
+function endpoint(t) {
+  return t.config.endpoint;
+}
+
 function useToken(t, token) {
   t.token = token;
 }
 
+let availableRolesClaim = "availableRoles";
+
+let groupClaimNames = [
+  "cognito:groups",
+  "groups"
+];
+
+let callerIdClaimNames = [
+  "sub",
+  "userId"
+];
+
+function decodeSegment(segment) {
+  try {
+    return Stdlib_JSON.Decode.object(JSON.parse(Buffer.from(segment, "base64url").toString("utf8")));
+  } catch (exn) {
+    return;
+  }
+}
+
+function isJoseHeader(obj) {
+  return Stdlib_Option.isSome(obj["alg"]);
+}
+
+function claims(t) {
+  return Stdlib_Option.flatMap(t.token, token => Stdlib_Array.reduce(token.split("."), undefined, (found, segment) => {
+    if (found !== undefined) {
+      return found;
+    }
+    let obj = decodeSegment(segment);
+    if (obj !== undefined && Stdlib_Option.isSome(obj["alg"])) {
+      return;
+    } else {
+      return obj;
+    }
+  }));
+}
+
+function asStrings(value) {
+  if (Array.isArray(value)) {
+    return Stdlib_Array.filterMap(value, Stdlib_JSON.Decode.string);
+  }
+  switch (typeof value) {
+    case "string" :
+      return value.split(",").map(prim => prim.trim()).filter(s => s !== "");
+    default:
+      return;
+  }
+}
+
+function claimStrings(t, name) {
+  return Stdlib_Option.flatMap(Stdlib_Option.flatMap(claims(t), c => c[name]), asStrings);
+}
+
+function effectiveGroups(t) {
+  return Stdlib_Array.reduce(groupClaimNames, undefined, (found, name) => {
+    if (found !== undefined) {
+      return found;
+    } else {
+      return claimStrings(t, name);
+    }
+  });
+}
+
+function callerId(t) {
+  return Stdlib_Array.reduce(callerIdClaimNames, undefined, (found, name) => {
+    if (found !== undefined) {
+      return found;
+    } else {
+      return Stdlib_Option.flatMap(Stdlib_Option.flatMap(claims(t), c => c[name]), Stdlib_JSON.Decode.string);
+    }
+  });
+}
+
+function narrowedFrom(t) {
+  let available = claimStrings(t, availableRolesClaim);
+  if (available !== undefined && available.length !== 0) {
+    return available;
+  }
+}
+
+function identitySummary(t) {
+  return Stdlib_Option.map(effectiveGroups(t), groups => {
+    let held = groups.length === 0 ? "no groups" : groups.join(", ");
+    let available = claimStrings(t, availableRolesClaim);
+    if (available !== undefined && available.length !== 0) {
+      return held + ` — narrowed to this role from ` + available.join(", ");
+    } else {
+      return held;
+    }
+  });
+}
+
 function field(json, key) {
   if (typeof json === "object" && json !== null && !Array.isArray(json)) {
     return json[key];
@@ -94,7 +192,58 @@ async function login(t) {
   t.token = Stdlib_Option.flatMap(field(json, "token"), asString);
 }
 
-async function gql(t, query, label) {
+let transientErrorTypes = [
+  "InternalFailure",
+  "ServiceUnavailable",
+  "ServiceUnavailableError",
+  "Throttling",
+  "ThrottlingException",
+  "TooManyRequestsException",
+  "RequestTimeout"
+];
+
+function isTransient(errors) {
+  let entries = Stdlib_JSON.Decode.array(errors);
+  if (entries !== undefined && entries.length !== 0) {
+    return entries.every(e => {
+      let errorType = nodeString(e, "errorType");
+      if (errorType !== undefined) {
+        return transientErrorTypes.includes(errorType);
+      } else {
+        return false;
+      }
+    });
+  } else {
+    return false;
+  }
+}
+
+function isDenied(errors) {
+  let entries = Stdlib_JSON.Decode.array(errors);
+  if (entries !== undefined) {
+    return entries.some(e => {
+      let match = nodeString(e, "errorType");
+      let match$1 = nodeString(e, "message");
+      if (match !== undefined) {
+        if (match.includes("Unauthorized")) {
+          return true;
+        } else if (match$1 !== undefined) {
+          return match$1.includes("Not Authorized");
+        } else {
+          return false;
+        }
+      } else if (match$1 !== undefined) {
+        return match$1.includes("Not Authorized");
+      } else {
+        return false;
+      }
+    });
+  } else {
+    return false;
+  }
+}
+
+async function gqlOutcome(t, query, label) {
   let headers = Object.fromEntries([[
       "content-type",
       "application/json"
@@ -107,30 +256,73 @@ async function gql(t, query, label) {
       "query",
       query
     ]]));
-  let res;
-  try {
-    res = await fetch(t.config.endpoint, {
-      method: "POST",
-      headers: headers,
-      body: body
-    });
-  } catch (exn) {
-    throw {
-      RE_EXN_ID: Seed_Types$ReventlessSeed.Failed,
-      _1: label + `: cannot reach ` + t.config.endpoint + ` — is the platform running?`,
-      Error: new Error()
+  let attempt = async n => {
+    let res;
+    try {
+      res = await fetch(t.config.endpoint, {
+        method: "POST",
+        headers: headers,
+        body: body
+      });
+    } catch (exn) {
+      throw {
+        RE_EXN_ID: Seed_Types$ReventlessSeed.Failed,
+        _1: label + `: cannot reach ` + t.config.endpoint + ` — is the platform running?`,
+        Error: new Error()
+      };
+    }
+    let json = await res.json();
+    let errors = field(json, "errors");
+    if (errors === undefined) {
+      return {
+        TAG: "Data",
+        _0: Stdlib_Option.getOr(field(json, "data"), null)
+      };
+    }
+    if (isTransient(errors) && n < 4) {
+      await sleep((250 * (1 << (n - 1 | 0)) | 0) + (Math.random() * 250 | 0) | 0);
+      return await attempt(n + 1 | 0);
+    }
+    let tried = n > 1 ? `\n  gave up after ` + n.toString() + ` attempts` : "";
+    let summary = isDenied(errors) ? identitySummary(t) : undefined;
+    let identity = summary !== undefined ? `\n  identity: ` + summary : "";
+    return {
+      TAG: "Errors",
+      _0: {
+        errors: errors,
+        message: label + ` failed\n  query: ` + query + `\n  response: ` + JSON.stringify(errors) + identity + tried
+      }
     };
+  };
+  return await attempt(1);
+}
+
+async function gql(t, query, label) {
+  let data = await gqlOutcome(t, query, label);
+  if (data.TAG === "Data") {
+    return data._0;
   }
-  let json = await res.json();
-  let errors = field(json, "errors");
-  if (errors !== undefined) {
-    throw {
-      RE_EXN_ID: Seed_Types$ReventlessSeed.Failed,
-      _1: label + ` failed\n  query: ` + query + `\n  response: ` + JSON.stringify(errors),
-      Error: new Error()
+  throw {
+    RE_EXN_ID: Seed_Types$ReventlessSeed.Failed,
+    _1: data._0.message,
+    Error: new Error()
+  };
+}
+
+async function checkAccess(t, query, label) {
+  let match = await gqlOutcome(t, query, label);
+  if (match.TAG === "Data") {
+    return "Granted";
+  }
+  let match$1 = match._0;
+  if (isDenied(match$1.errors)) {
+    return "Refused";
+  } else {
+    return {
+      TAG: "Broke",
+      _0: match$1.message
     };
   }
-  return Stdlib_Option.getOr(field(json, "data"), null);
 }
 
 let commandResultSelection = `__typename
@@ -162,6 +354,68 @@ async function send(t, m, tolerateOpt) {
   };
 }
 
+let deniedCommandCodes = [
+  "Forbidden",
+  "Unauthorized",
+  "AccessDenied"
+];
+
+function isDeniedResult(result) {
+  let match = nodeString(result, "errorCode");
+  let match$1 = nodeString(result, "errorDetail");
+  if (match !== undefined && deniedCommandCodes.includes(match)) {
+    return true;
+  }
+  if (match$1 !== undefined) {
+    return match$1.toLowerCase().includes("not authorized");
+  } else {
+    return false;
+  }
+}
+
+async function checkCommandAccess(t, m) {
+  let data = await gqlOutcome(t, `mutation { r: ` + m.field + `(` + Seed_Types$ReventlessSeed.renderArgs(m.args) + `) { ` + commandResultSelection + ` } }`, Seed_Types$ReventlessSeed.describe(m));
+  if (data.TAG === "Data") {
+    if (isDeniedResult(Stdlib_Option.getOr(field(data._0, "r"), null))) {
+      return "Refused";
+    } else {
+      return "Granted";
+    }
+  }
+  let match = data._0;
+  if (isDenied(match.errors)) {
+    return "Refused";
+  } else {
+    return {
+      TAG: "Broke",
+      _0: match.message
+    };
+  }
+}
+
+async function checkQueryAccess(t, fieldName) {
+  let query = `{ ` + fieldName + `(first: 1) { edges { node { id } } } }`;
+  let data = await gqlOutcome(t, query, fieldName);
+  if (data.TAG === "Data") {
+    let match = Stdlib_Option.flatMap(field(data._0, fieldName), c => field(c, "edges"));
+    let edges = Array.isArray(match) ? match.length : 0;
+    if (edges > 0) {
+      return "Granted";
+    } else {
+      return "Empty";
+    }
+  }
+  let match$1 = data._0;
+  if (isDenied(match$1.errors)) {
+    return "Refused";
+  } else {
+    return {
+      TAG: "Broke",
+      _0: match$1.message
+    };
+  }
+}
+
 async function sendAll(t, mutations) {
   for (let i = 0, i_finish = mutations.length; i < i_finish; ++i) {
     let m = mutations[i];
@@ -171,14 +425,16 @@ async function sendAll(t, mutations) {
   }
 }
 
-async function queryAllNodes(t, fieldName, selection) {
+async function queryAllNodes(t, fieldName, selection, argsOpt) {
+  let args = argsOpt !== undefined ? argsOpt : "";
   let nodes = [];
   let after;
   let more = true;
+  let extra = args === "" ? "" : `, ` + args;
   while (more) {
     let c = after;
     let cursor = c !== undefined ? `, after: ` + Seed_Types$ReventlessSeed.quote(c) : "";
-    let query = `{ ` + fieldName + `(first: 100` + cursor + `) { edges { node { ` + selection + ` } } pageInfo { hasNextPage endCursor } } }`;
+    let query = `{ ` + fieldName + `(first: 100` + extra + cursor + `) { edges { node { ` + selection + ` } } pageInfo { hasNextPage endCursor } } }`;
     let data = await gql(t, query, fieldName);
     let connection = Stdlib_Option.getOr(field(data, fieldName), null);
     let match = field(connection, "edges");
@@ -205,7 +461,30 @@ async function queryAllNodes(t, fieldName, selection) {
 }
 
 async function countNodes(t, field) {
-  return (await queryAllNodes(t, field, "id")).length;
+  return (await queryAllNodes(t, field, "id", undefined)).length;
+}
+
+async function queryAllNodesUntil(t, field, selection, argsOpt, satisfied, onTimeout, timeoutMsOpt) {
+  let args = argsOpt !== undefined ? argsOpt : "";
+  let timeoutMs = timeoutMsOpt !== undefined ? timeoutMsOpt : 60000;
+  let deadline = Date.now() + timeoutMs;
+  let result;
+  while (result === undefined) {
+    let nodes = await queryAllNodes(t, field, selection, args);
+    if (satisfied(nodes)) {
+      result = nodes;
+    } else {
+      if (Date.now() > deadline) {
+        throw {
+          RE_EXN_ID: Seed_Types$ReventlessSeed.Failed,
+          _1: onTimeout(nodes),
+          Error: new Error()
+        };
+      }
+      await sleep(500);
+    }
+  };
+  return Stdlib_Option.getOr(result, []);
 }
 
 async function waitForIds(t, fieldName, ids, timeoutMsOpt) {
@@ -240,21 +519,50 @@ async function waitForIds(t, fieldName, ids, timeoutMsOpt) {
   return Stdlib_Option.getOr(result, 0);
 }
 
+let activeRoleClaim = "activeRole";
+
+let attempts = 4;
+
 export {
   sleep,
   make,
   currentToken,
+  endpoint,
   useToken,
+  activeRoleClaim,
+  availableRolesClaim,
+  groupClaimNames,
+  callerIdClaimNames,
+  decodeSegment,
+  isJoseHeader,
+  claims,
+  asStrings,
+  claimStrings,
+  effectiveGroups,
+  callerId,
+  narrowedFrom,
+  identitySummary,
   field,
   asString,
   nodeString,
   login,
+  transientErrorTypes,
+  isTransient,
+  isDenied,
+  attempts,
+  gqlOutcome,
   gql,
+  checkAccess,
   commandResultSelection,
   send,
+  deniedCommandCodes,
+  isDeniedResult,
+  checkCommandAccess,
+  checkQueryAccess,
   sendAll,
   queryAllNodes,
   countNodes,
+  queryAllNodesUntil,
   waitForIds,
 }
 /* No side effect */