capo-codedeploy 0.1.0__py3-none-any.whl

capo_codedeploy/_operations/code_deploy_20141006/update_deployment_group.py

@@ -0,0 +1,310 @@
+"""Generated from Smithy shape ``com.amazonaws.codedeploy#UpdateDeploymentGroup``."""
+
+from __future__ import annotations
+
+import json
+from typing import Any
+
+import zapros
+from typing_extensions import Never
+
+import capo_codedeploy._auth._signers
+import capo_codedeploy._auth._sigv4
+import capo_codedeploy._protocol.eventstream
+import capo_codedeploy.errors.alarms_limit_exceeded_exception
+import capo_codedeploy.errors.application_does_not_exist_exception
+import capo_codedeploy.errors.application_name_required_exception
+import capo_codedeploy.errors.deployment_config_does_not_exist_exception
+import capo_codedeploy.errors.deployment_group_already_exists_exception
+import capo_codedeploy.errors.deployment_group_does_not_exist_exception
+import capo_codedeploy.errors.deployment_group_name_required_exception
+import capo_codedeploy.errors.ecs_service_mapping_limit_exceeded_exception
+import capo_codedeploy.errors.invalid_alarm_config_exception
+import capo_codedeploy.errors.invalid_application_name_exception
+import capo_codedeploy.errors.invalid_auto_rollback_config_exception
+import capo_codedeploy.errors.invalid_auto_scaling_group_exception
+import capo_codedeploy.errors.invalid_blue_green_deployment_configuration_exception
+import capo_codedeploy.errors.invalid_deployment_config_name_exception
+import capo_codedeploy.errors.invalid_deployment_group_name_exception
+import capo_codedeploy.errors.invalid_deployment_style_exception
+import capo_codedeploy.errors.invalid_ec2_tag_combination_exception
+import capo_codedeploy.errors.invalid_ec2_tag_exception
+import capo_codedeploy.errors.invalid_ecs_service_exception
+import capo_codedeploy.errors.invalid_input_exception
+import capo_codedeploy.errors.invalid_load_balancer_info_exception
+import capo_codedeploy.errors.invalid_on_premises_tag_combination_exception
+import capo_codedeploy.errors.invalid_role_exception
+import capo_codedeploy.errors.invalid_tag_exception
+import capo_codedeploy.errors.invalid_target_group_pair_exception
+import capo_codedeploy.errors.invalid_traffic_routing_configuration_exception
+import capo_codedeploy.errors.invalid_trigger_config_exception
+import capo_codedeploy.errors.lifecycle_hook_limit_exceeded_exception
+import capo_codedeploy.errors.tag_set_list_limit_exceeded_exception
+import capo_codedeploy.errors.throttling_exception
+import capo_codedeploy.errors.trigger_targets_limit_exceeded_exception
+import capo_codedeploy.types.alarm_configuration
+import capo_codedeploy.types.auto_rollback_configuration
+import capo_codedeploy.types.auto_scaling_group_list
+import capo_codedeploy.types.auto_scaling_group_name_list
+import capo_codedeploy.types.blue_green_deployment_configuration
+import capo_codedeploy.types.deployment_style
+import capo_codedeploy.types.ec2_tag_filter_list
+import capo_codedeploy.types.ec2_tag_set
+import capo_codedeploy.types.ecs_service_list
+import capo_codedeploy.types.load_balancer_info
+import capo_codedeploy.types.on_premises_tag_set
+import capo_codedeploy.types.outdated_instances_strategy
+import capo_codedeploy.types.tag_filter_list
+import capo_codedeploy.types.trigger_config_list
+import capo_codedeploy.types.update_deployment_group_input
+import capo_codedeploy.types.update_deployment_group_output
+from capo_codedeploy._protocol.errors import parse_error_metadata_json
+from capo_codedeploy._rule_engine._endpoint_rule_set import EndpointParams, resolve
+from capo_codedeploy._services._pipeline import AsyncOperationOptions, OperationOptions
+from capo_codedeploy.errors import UnknownServiceError
+
+
+def handle_error(response: zapros.Response) -> Never:
+    data = json.loads(response.read())
+    code, message = parse_error_metadata_json(response, data)
+    match code:
+        case "AlarmsLimitExceededException":
+            raise capo_codedeploy.errors.alarms_limit_exceeded_exception.AlarmsLimitExceededException.from_aws_json_1_1(
+                data, message
+            )
+        case "ApplicationDoesNotExistException":
+            raise capo_codedeploy.errors.application_does_not_exist_exception.ApplicationDoesNotExistException.from_aws_json_1_1(
+                data, message
+            )
+        case "ApplicationNameRequiredException":
+            raise capo_codedeploy.errors.application_name_required_exception.ApplicationNameRequiredException.from_aws_json_1_1(
+                data, message
+            )
+        case "DeploymentConfigDoesNotExistException":
+            raise capo_codedeploy.errors.deployment_config_does_not_exist_exception.DeploymentConfigDoesNotExistException.from_aws_json_1_1(
+                data, message
+            )
+        case "DeploymentGroupAlreadyExistsException":
+            raise capo_codedeploy.errors.deployment_group_already_exists_exception.DeploymentGroupAlreadyExistsException.from_aws_json_1_1(
+                data, message
+            )
+        case "DeploymentGroupDoesNotExistException":
+            raise capo_codedeploy.errors.deployment_group_does_not_exist_exception.DeploymentGroupDoesNotExistException.from_aws_json_1_1(
+                data, message
+            )
+        case "DeploymentGroupNameRequiredException":
+            raise capo_codedeploy.errors.deployment_group_name_required_exception.DeploymentGroupNameRequiredException.from_aws_json_1_1(
+                data, message
+            )
+        case "ECSServiceMappingLimitExceededException":
+            raise capo_codedeploy.errors.ecs_service_mapping_limit_exceeded_exception.ECSServiceMappingLimitExceededException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidAlarmConfigException":
+            raise capo_codedeploy.errors.invalid_alarm_config_exception.InvalidAlarmConfigException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidApplicationNameException":
+            raise capo_codedeploy.errors.invalid_application_name_exception.InvalidApplicationNameException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidAutoRollbackConfigException":
+            raise capo_codedeploy.errors.invalid_auto_rollback_config_exception.InvalidAutoRollbackConfigException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidAutoScalingGroupException":
+            raise capo_codedeploy.errors.invalid_auto_scaling_group_exception.InvalidAutoScalingGroupException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidBlueGreenDeploymentConfigurationException":
+            raise capo_codedeploy.errors.invalid_blue_green_deployment_configuration_exception.InvalidBlueGreenDeploymentConfigurationException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidDeploymentConfigNameException":
+            raise capo_codedeploy.errors.invalid_deployment_config_name_exception.InvalidDeploymentConfigNameException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidDeploymentGroupNameException":
+            raise capo_codedeploy.errors.invalid_deployment_group_name_exception.InvalidDeploymentGroupNameException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidDeploymentStyleException":
+            raise capo_codedeploy.errors.invalid_deployment_style_exception.InvalidDeploymentStyleException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidEC2TagCombinationException":
+            raise capo_codedeploy.errors.invalid_ec2_tag_combination_exception.InvalidEC2TagCombinationException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidEC2TagException":
+            raise capo_codedeploy.errors.invalid_ec2_tag_exception.InvalidEC2TagException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidECSServiceException":
+            raise capo_codedeploy.errors.invalid_ecs_service_exception.InvalidECSServiceException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidInputException":
+            raise capo_codedeploy.errors.invalid_input_exception.InvalidInputException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidLoadBalancerInfoException":
+            raise capo_codedeploy.errors.invalid_load_balancer_info_exception.InvalidLoadBalancerInfoException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidOnPremisesTagCombinationException":
+            raise capo_codedeploy.errors.invalid_on_premises_tag_combination_exception.InvalidOnPremisesTagCombinationException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidRoleException":
+            raise capo_codedeploy.errors.invalid_role_exception.InvalidRoleException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidTagException":
+            raise capo_codedeploy.errors.invalid_tag_exception.InvalidTagException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidTargetGroupPairException":
+            raise capo_codedeploy.errors.invalid_target_group_pair_exception.InvalidTargetGroupPairException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidTrafficRoutingConfigurationException":
+            raise capo_codedeploy.errors.invalid_traffic_routing_configuration_exception.InvalidTrafficRoutingConfigurationException.from_aws_json_1_1(
+                data, message
+            )
+        case "InvalidTriggerConfigException":
+            raise capo_codedeploy.errors.invalid_trigger_config_exception.InvalidTriggerConfigException.from_aws_json_1_1(
+                data, message
+            )
+        case "LifecycleHookLimitExceededException":
+            raise capo_codedeploy.errors.lifecycle_hook_limit_exceeded_exception.LifecycleHookLimitExceededException.from_aws_json_1_1(
+                data, message
+            )
+        case "TagSetListLimitExceededException":
+            raise capo_codedeploy.errors.tag_set_list_limit_exceeded_exception.TagSetListLimitExceededException.from_aws_json_1_1(
+                data, message
+            )
+        case "ThrottlingException":
+            raise capo_codedeploy.errors.throttling_exception.ThrottlingException.from_aws_json_1_1(
+                data, message
+            )
+        case "TriggerTargetsLimitExceededException":
+            raise capo_codedeploy.errors.trigger_targets_limit_exceeded_exception.TriggerTargetsLimitExceededException.from_aws_json_1_1(
+                data, message
+            )
+        case _:
+            raise UnknownServiceError(code=code, message=message, response=response)
+
+
+def handle_response(
+    response: zapros.Response,
+) -> capo_codedeploy.types.update_deployment_group_output.UpdateDeploymentGroupOutput:
+    out: capo_codedeploy.types.update_deployment_group_output.UpdateDeploymentGroupOutput = capo_codedeploy.types.update_deployment_group_output.deserialize_aws_json_1_1(
+        json.loads(response.read())
+    )
+    return out
+
+
+async def async_handle_response(
+    response: zapros.Response,
+) -> capo_codedeploy.types.update_deployment_group_output.UpdateDeploymentGroupOutput:
+    out: capo_codedeploy.types.update_deployment_group_output.UpdateDeploymentGroupOutput = capo_codedeploy.types.update_deployment_group_output.deserialize_aws_json_1_1(
+        json.loads(await response.aread())
+    )
+    return out
+
+
+def get_signer(
+    options: AsyncOperationOptions | OperationOptions,
+    auth_schemes: list[dict[str, Any]] | None = None,
+) -> capo_codedeploy._auth._signers.Signer | None:
+    name_to_schema = {s["name"]: s for s in (auth_schemes or [])}  # noqa: F841
+    if (
+        options.credentials_provider is not None
+        and name_to_schema
+        and not name_to_schema.keys() & {"sigv4", "sigv4-s3express"}
+    ):
+        raise RuntimeError(
+            "Endpoint requires an unsupported auth scheme: " + ", ".join(name_to_schema)
+        )
+    if options.credentials_provider is not None:
+        endpoint_scheme = name_to_schema.get("sigv4") or name_to_schema.get(
+            "sigv4-s3express"
+        )
+        if endpoint_scheme is not None or not name_to_schema:
+            sigv4_config = capo_codedeploy._auth._sigv4.build_sigv4_auth_scheme(
+                "codedeploy", options.region, endpoint_scheme
+            )
+            if sigv4_config is not None:
+                return capo_codedeploy._auth._signers.SigV4Signer(
+                    options.credentials_provider, auth_scheme=sigv4_config
+                )
+    raise RuntimeError("Auth was not resolved")
+
+
+def build_request(
+    options: OperationOptions | AsyncOperationOptions,
+    input_: capo_codedeploy.types.update_deployment_group_input.UpdateDeploymentGroupInput,
+) -> zapros.Request:
+    endpoint = resolve(
+        EndpointParams(
+            Region=options.region,
+            UseDualStack=options.use_dual_stack,
+            UseFIPS=options.use_fips,
+            Endpoint=options.endpoint,
+        )
+    )  # noqa: F841
+    url = endpoint.url.rstrip("/") + ""
+    params: list[tuple[str, str]] = []
+    headers: dict[str, str] = {k: ", ".join(v) for k, v in endpoint.headers.items()}
+    headers["X-Amz-Target"] = "CodeDeploy_20141006.UpdateDeploymentGroup"
+    body: bytes | None = json.dumps(
+        capo_codedeploy.types.update_deployment_group_input.serialize_aws_json_1_1(
+            input_
+        ),
+        allow_nan=False,
+    ).encode()
+    headers["content-type"] = "application/x-amz-json-1.1"
+    signer = get_signer(options, auth_schemes=endpoint.properties.get("authSchemes"))
+    normalized_url = zapros.URL(url)
+    for k, v in params:
+        normalized_url.search_params.append(k, v)
+    return zapros.Request(
+        normalized_url, "POST", headers=headers, body=body, context={"signer": signer}
+    )
+
+
+def update_deployment_group(
+    options: OperationOptions,
+    input_: capo_codedeploy.types.update_deployment_group_input.UpdateDeploymentGroupInput,
+) -> tuple[
+    capo_codedeploy.types.update_deployment_group_output.UpdateDeploymentGroupOutput,
+    zapros.Response,
+]:
+    response = options.client.handler.handle(build_request(options, input_))
+    try:
+        if response.status >= 300:
+            response.read()
+            handle_error(response)
+        return handle_response(response), response
+    except BaseException:
+        response.close()
+        raise
+
+
+async def async_update_deployment_group(
+    options: AsyncOperationOptions,
+    input_: capo_codedeploy.types.update_deployment_group_input.UpdateDeploymentGroupInput,
+) -> tuple[
+    capo_codedeploy.types.update_deployment_group_output.UpdateDeploymentGroupOutput,
+    zapros.Response,
+]:
+    response = await options.client.handler.ahandle(build_request(options, input_))
+    try:
+        if response.status >= 300:
+            await response.aread()
+            handle_error(response)
+        return await async_handle_response(response), response
+    except BaseException:
+        await response.aclose()
+        raise

capo_codedeploy/_pagination.py

@@ -0,0 +1,21 @@
+"""Runtime helpers for generated paginated ``iter_*`` operation methods."""
+
+from __future__ import annotations
+
+from typing import Any
+
+
+def resolve_path(obj: Any, path: tuple[str, ...]) -> Any:
+    """Walk ``path`` segments on a nested ``dict`` (TypedDict at runtime).
+
+    Returns ``None`` as soon as any intermediate value is missing or non-dict —
+    the generated iter loop uses a falsy token as the terminate signal, so this
+    short-circuit gives the same semantics for dotted paths as for top-level ones.
+    """
+    for key in path:
+        if not isinstance(obj, dict):
+            return None
+        obj = obj.get(key)
+        if obj is None:
+            return None
+    return obj

capo_codedeploy/_protocol/__init__.py

@@ -0,0 +1 @@
+"""Protocol runtime modules. Hand-written; not generated."""

capo_codedeploy/_protocol/errors.py

@@ -0,0 +1,93 @@
+"""Shared service-error runtime.
+
+Hand-written, not regenerated. Helpers for extracting error metadata
+from HTTP error responses.
+"""
+
+from __future__ import annotations
+
+from typing import TYPE_CHECKING
+
+from zapros import Response
+
+from .xml import fromstring
+
+if TYPE_CHECKING:
+    from xml.etree.ElementTree import Element
+
+
+def find_error_element(root: Element) -> Element:
+    """Return the element holding the error structure's members.
+
+    Handles the three XML error envelopes: a bare ``<Error>`` root
+    (restXml with ``noErrorWrapping``), an ``<ErrorResponse><Error>``
+    wrapper (restXml/awsQuery), and the ec2Query
+    ``<Response><Errors><Error>`` envelope. Falls back to ``root``
+    when no ``<Error>`` element is found.
+    """
+    if root.tag.endswith("Error"):
+        return root
+    for path in ("Error", "Errors/Error"):
+        err = root.find(path)
+        if err is not None:
+            return err
+    return root
+
+
+def parse_error_metadata(root: Element) -> tuple[str | None, str | None]:
+    """Return ``(code, message)`` from an XML error envelope.
+
+    Accepts any envelope understood by :func:`find_error_element`.
+    Missing children yield ``None``.
+    """
+    err = find_error_element(root)
+    code_el = err.find("Code")
+    msg_el = err.find("Message")
+    code = code_el.text if code_el is not None else None
+    message = msg_el.text if msg_el is not None else None
+    return code, message
+
+
+def parse_error_metadata_json(
+    response: Response, data: dict
+) -> tuple[str | None, str | None]:
+    """Return ``(code, message)`` from a restJson1 error response.
+
+    Code precedence: the ``X-Amzn-Errortype`` response header, then the
+    ``__type`` body field, then ``code``. The raw value is normalized by
+    dropping a trailing ``:uri`` suffix first, then a ``prefix#``
+    namespace — in that order, so a ``#`` inside the uri suffix cannot
+    hijack the code. Message comes from ``message`` or ``Message``.
+    Missing values yield ``None``.
+    """
+    code = (
+        response.headers.get("X-Amzn-Errortype")
+        or data.get("__type")
+        or data.get("code")
+    )
+    if code is not None:
+        code = code.split(":", 1)[0].rsplit("#", 1)[-1]
+    message = data.get("message") or data.get("Message")
+    return code, message
+
+
+def is_xml_error_body(body: bytes) -> bool:
+    """Whether a 2xx response body is really an XML error document.
+
+    S3 answers CopyObject, UploadPartCopy and CompleteMultipartUpload
+    with ``200 OK`` before the operation finishes; a failure after that
+    point is reported as an ``<Error>`` body (or an empty body) on the
+    200 response. Official SDKs check the body for exactly these
+    operations.
+    """
+    if not body:
+        return True
+    return fromstring(body).tag == "Error"
+
+
+__all__ = [
+    "find_error_element",
+    "is_xml_error_body",
+    "parse_error_metadata",
+    "parse_error_metadata_json",
+]

capo_codedeploy/_protocol/eventstream.py

@@ -0,0 +1,238 @@
+"""Shared Amazon eventstream binary-format runtime.
+
+Hand-written, not regenerated. Provides framing, header encoding, and
+checksum validation for Smithy event-stream messages.
+"""
+
+from __future__ import annotations
+
+import datetime
+import uuid
+import zlib
+from collections.abc import AsyncIterator, Callable, Iterator
+from dataclasses import dataclass, field
+from typing import TypeVar, Union
+
+HeaderValue = Union[bool, int, bytes, str, datetime.datetime, uuid.UUID]
+T = TypeVar("T")
+
+
+# Header type constants from the Amazon eventstream specification.
+_TRUE_HEADER = 0x00
+_FALSE_HEADER = 0x01
+_BYTE_HEADER = 0x02
+_SHORT_HEADER = 0x03
+_INTEGER_HEADER = 0x04
+_LONG_HEADER = 0x05
+_BYTE_ARRAY_HEADER = 0x06
+_STRING_HEADER = 0x07
+_TIMESTAMP_HEADER = 0x08
+_UUID_HEADER = 0x09
+
+
+def _encode_header_value(value: HeaderValue) -> bytes:
+    if isinstance(value, bool):
+        return bytes([_TRUE_HEADER if value else _FALSE_HEADER])
+    if isinstance(value, int):
+        if -128 <= value <= 127:
+            return bytes([_BYTE_HEADER]) + value.to_bytes(1, "big", signed=True)
+        if -32768 <= value <= 32767:
+            return bytes([_SHORT_HEADER]) + value.to_bytes(2, "big", signed=True)
+        if -2147483648 <= value <= 2147483647:
+            return bytes([_INTEGER_HEADER]) + value.to_bytes(4, "big", signed=True)
+        # Fall through to signed 64-bit.
+        return bytes([_LONG_HEADER]) + value.to_bytes(8, "big", signed=True)
+    if isinstance(value, bytes):
+        return bytes([_BYTE_ARRAY_HEADER]) + len(value).to_bytes(2, "big") + value
+    if isinstance(value, str):
+        encoded = value.encode("utf-8")
+        return bytes([_STRING_HEADER]) + len(encoded).to_bytes(2, "big") + encoded
+    if isinstance(value, datetime.datetime):
+        millis = int(value.timestamp() * 1000)
+        return bytes([_TIMESTAMP_HEADER]) + millis.to_bytes(8, "big", signed=True)
+    if isinstance(value, uuid.UUID):
+        return bytes([_UUID_HEADER]) + value.bytes
+    raise TypeError(f"unsupported eventstream header value: {value!r}")
+
+
+def _decode_header_value(
+    type_byte: int, data: bytes | bytearray, pos: int
+) -> tuple[HeaderValue, int]:
+    if type_byte == _TRUE_HEADER:
+        return True, pos
+    if type_byte == _FALSE_HEADER:
+        return False, pos
+    if type_byte == _BYTE_HEADER:
+        return int.from_bytes(data[pos : pos + 1], "big", signed=True), pos + 1
+    if type_byte == _SHORT_HEADER:
+        return int.from_bytes(data[pos : pos + 2], "big", signed=True), pos + 2
+    if type_byte == _INTEGER_HEADER:
+        return int.from_bytes(data[pos : pos + 4], "big", signed=True), pos + 4
+    if type_byte == _LONG_HEADER:
+        return int.from_bytes(data[pos : pos + 8], "big", signed=True), pos + 8
+    if type_byte == _BYTE_ARRAY_HEADER:
+        length = int.from_bytes(data[pos : pos + 2], "big")
+        pos += 2
+        return bytes(data[pos : pos + length]), pos + length
+    if type_byte == _STRING_HEADER:
+        length = int.from_bytes(data[pos : pos + 2], "big")
+        pos += 2
+        return data[pos : pos + length].decode("utf-8"), pos + length
+    if type_byte == _TIMESTAMP_HEADER:
+        millis = int.from_bytes(data[pos : pos + 8], "big", signed=True)
+        return (
+            datetime.datetime.fromtimestamp(millis / 1000, tz=datetime.timezone.utc),
+            pos + 8,
+        )
+    if type_byte == _UUID_HEADER:
+        return uuid.UUID(bytes=bytes(data[pos : pos + 16])), pos + 16
+    raise ValueError(f"unsupported eventstream header type: {type_byte:#x}")
+
+
+def _encode_headers(headers: dict[str, HeaderValue]) -> bytes:
+    parts: list[bytes] = []
+    for name, value in headers.items():
+        name_bytes = name.encode("utf-8")
+        if len(name_bytes) > 255:
+            raise ValueError(f"eventstream header name too long: {name!r}")
+        parts.append(bytes([len(name_bytes)]) + name_bytes)
+        parts.append(_encode_header_value(value))
+    return b"".join(parts)
+
+
+def _decode_headers(data: bytes | bytearray) -> dict[str, HeaderValue]:
+    pos = 0
+    headers: dict[str, HeaderValue] = {}
+    while pos < len(data):
+        name_len = data[pos]
+        pos += 1
+        name = data[pos : pos + name_len].decode("utf-8")
+        pos += name_len
+        type_byte = data[pos]
+        pos += 1
+        value, pos = _decode_header_value(type_byte, data, pos)
+        headers[name] = value
+    return headers
+
+
+@dataclass
+class Message:
+    """A single Amazon eventstream message."""
+
+    headers: dict[str, HeaderValue] = field(default_factory=dict)
+    payload: bytes = b""
+
+    def encode(self) -> bytes:
+        """Serialize this message into eventstream framing bytes."""
+        headers_bytes = _encode_headers(self.headers)
+        headers_length = len(headers_bytes)
+        payload = self.payload
+        total_length = 12 + headers_length + len(payload)
+
+        prelude = total_length.to_bytes(4, "big") + headers_length.to_bytes(4, "big")
+        prelude_crc = zlib.crc32(prelude).to_bytes(4, "big")
+        message_body = prelude + prelude_crc + headers_bytes + payload
+        message_crc = zlib.crc32(message_body).to_bytes(4, "big")
+        return message_body + message_crc
+
+
+@dataclass
+class MessageDecoder:
+    """Stateful decoder that turns byte chunks into :class:`Message` objects.
+
+    ``feed`` may emit zero, one, or many messages for each chunk. Partial
+    frames are buffered until the next chunk completes them.
+    """
+
+    _buffer: bytearray = field(default_factory=bytearray, init=False)
+
+    def feed(self, data: bytes) -> Iterator[Message]:
+        """Append ``data`` to the internal buffer and yield any full messages."""
+        self._buffer.extend(data)
+        while True:
+            if len(self._buffer) < 12:
+                return
+
+            total_length = int.from_bytes(self._buffer[:4], "big")
+            headers_length = int.from_bytes(self._buffer[4:8], "big")
+            prelude = bytes(self._buffer[:8])
+            prelude_crc = int.from_bytes(self._buffer[8:12], "big")
+
+            if total_length < 12 + headers_length:
+                raise ValueError(
+                    f"invalid eventstream message: total_length={total_length} "
+                    f"is smaller than minimum {12 + headers_length}"
+                )
+
+            message_end = total_length + 4
+            if len(self._buffer) < message_end:
+                return
+
+            computed_prelude_crc = zlib.crc32(prelude) & 0xFFFFFFFF
+            if computed_prelude_crc != prelude_crc:
+                raise ValueError("eventstream prelude checksum mismatch")
+
+            message_bytes = bytes(self._buffer[:total_length])
+            message_crc = int.from_bytes(
+                self._buffer[total_length : total_length + 4], "big"
+            )
+            computed_message_crc = zlib.crc32(message_bytes) & 0xFFFFFFFF
+            if computed_message_crc != message_crc:
+                raise ValueError("eventstream message checksum mismatch")
+
+            headers = _decode_headers(self._buffer[12 : 12 + headers_length])
+            payload = bytes(self._buffer[12 + headers_length : total_length])
+            del self._buffer[:message_end]
+            yield Message(headers=headers, payload=payload)
+
+
+def raw_stream_to_events(
+    raw_stream: Iterator[bytes], decoder: MessageDecoder, deser: Callable[[Message], T]
+) -> Iterator[T]:
+    """Map a raw byte iterator into deserialized event objects."""
+    for chunk in raw_stream:
+        for message in decoder.feed(chunk):
+            yield deser(message)
+
+
+async def async_raw_stream_to_events(
+    raw_stream: AsyncIterator[bytes],
+    decoder: MessageDecoder,
+    deser: Callable[[Message], T],
+) -> AsyncIterator[T]:
+    """Map an async raw byte iterator into deserialized event objects."""
+    async for chunk in raw_stream:
+        for message in decoder.feed(chunk):
+            yield deser(message)
+
+
+def read_messages(
+    raw_stream: Iterator[bytes], decoder: MessageDecoder
+) -> Iterator[Message]:
+    """Yield :class:`Message` objects framed out of a raw byte iterator.
+
+    Used by RPC event streams (e.g. awsJson) where the first message may be an
+    initial-response that must be pulled off before consuming the events.
+    """
+    for chunk in raw_stream:
+        yield from decoder.feed(chunk)
+
+
+async def async_read_messages(
+    raw_stream: AsyncIterator[bytes], decoder: MessageDecoder
+) -> AsyncIterator[Message]:
+    """Async variant of :func:`read_messages`."""
+    async for chunk in raw_stream:
+        for message in decoder.feed(chunk):
+            yield message
+
+
+__all__ = [
+    "HeaderValue",
+    "Message",
+    "MessageDecoder",
+    "async_raw_stream_to_events",
+    "async_read_messages",
+    "raw_stream_to_events",
+    "read_messages",
+]