capo-devops-agent 0.1.0__py3-none-any.whl

capo_devops_agent/_operations/dev_ops_agent/update_private_connection_certificate.py

@@ -0,0 +1,190 @@
+"""Generated from Smithy shape ``com.amazonaws.devopsagent#UpdatePrivateConnectionCertificate``."""
+
+from __future__ import annotations
+
+import json
+from typing import Any
+from urllib.parse import quote
+
+import zapros
+from typing_extensions import Never
+
+import capo_devops_agent._auth._signers
+import capo_devops_agent._auth._sigv4
+import capo_devops_agent._protocol.eventstream
+import capo_devops_agent.errors.access_denied_exception
+import capo_devops_agent.errors.conflict_exception
+import capo_devops_agent.errors.content_size_exceeded_exception
+import capo_devops_agent.errors.internal_server_exception
+import capo_devops_agent.errors.invalid_parameter_exception
+import capo_devops_agent.errors.resource_not_found_exception
+import capo_devops_agent.errors.service_quota_exceeded_exception
+import capo_devops_agent.errors.throttling_exception
+import capo_devops_agent.errors.validation_exception
+import capo_devops_agent.types.private_connection_status
+import capo_devops_agent.types.private_connection_type
+import capo_devops_agent.types.resource_config_dns_resolution
+import capo_devops_agent.types.update_private_connection_certificate_input
+import capo_devops_agent.types.update_private_connection_certificate_output
+from capo_devops_agent._protocol.errors import parse_error_metadata_json
+from capo_devops_agent._rule_engine._endpoint_rule_set import EndpointParams, resolve
+from capo_devops_agent._services._pipeline import (
+    AsyncOperationOptions,
+    OperationOptions,
+)
+from capo_devops_agent.errors import UnknownServiceError
+
+
+def handle_error(response: zapros.Response) -> Never:
+    data = json.loads(response.read())
+    code, message = parse_error_metadata_json(response, data)
+    match code:
+        case "AccessDeniedException":
+            raise capo_devops_agent.errors.access_denied_exception.AccessDeniedException.from_json(
+                data, message
+            )
+        case "ConflictException":
+            raise capo_devops_agent.errors.conflict_exception.ConflictException.from_json(
+                data, message
+            )
+        case "ContentSizeExceededException":
+            raise capo_devops_agent.errors.content_size_exceeded_exception.ContentSizeExceededException.from_json(
+                data, message
+            )
+        case "InternalServerException":
+            raise capo_devops_agent.errors.internal_server_exception.InternalServerException.from_json(
+                data, message
+            )
+        case "InvalidParameterException":
+            raise capo_devops_agent.errors.invalid_parameter_exception.InvalidParameterException.from_json(
+                data, message
+            )
+        case "ResourceNotFoundException":
+            raise capo_devops_agent.errors.resource_not_found_exception.ResourceNotFoundException.from_json(
+                data, message
+            )
+        case "ServiceQuotaExceededException":
+            raise capo_devops_agent.errors.service_quota_exceeded_exception.ServiceQuotaExceededException.from_json(
+                data, message
+            )
+        case "ThrottlingException":
+            raise capo_devops_agent.errors.throttling_exception.ThrottlingException.from_json(
+                data, message
+            )
+        case "ValidationException":
+            raise capo_devops_agent.errors.validation_exception.ValidationException.from_json(
+                data, message
+            )
+        case _:
+            raise UnknownServiceError(code=code, message=message, response=response)
+
+
+def handle_response(
+    response: zapros.Response,
+) -> capo_devops_agent.types.update_private_connection_certificate_output.UpdatePrivateConnectionCertificateOutput:
+    out: capo_devops_agent.types.update_private_connection_certificate_output.UpdatePrivateConnectionCertificateOutput = capo_devops_agent.types.update_private_connection_certificate_output.deserialize_json(
+        json.loads(response.read())
+    )
+    return out
+
+
+async def async_handle_response(
+    response: zapros.Response,
+) -> capo_devops_agent.types.update_private_connection_certificate_output.UpdatePrivateConnectionCertificateOutput:
+    out: capo_devops_agent.types.update_private_connection_certificate_output.UpdatePrivateConnectionCertificateOutput = capo_devops_agent.types.update_private_connection_certificate_output.deserialize_json(
+        json.loads(await response.aread())
+    )
+    return out
+
+
+def get_signer(
+    options: AsyncOperationOptions | OperationOptions,
+    auth_schemes: list[dict[str, Any]] | None = None,
+) -> capo_devops_agent._auth._signers.Signer | None:
+    name_to_schema = {s["name"]: s for s in (auth_schemes or [])}  # noqa: F841
+    if (
+        options.credentials_provider is not None
+        and name_to_schema
+        and not name_to_schema.keys() & {"sigv4", "sigv4-s3express"}
+    ):
+        raise RuntimeError(
+            "Endpoint requires an unsupported auth scheme: " + ", ".join(name_to_schema)
+        )
+    if options.credentials_provider is not None:
+        endpoint_scheme = name_to_schema.get("sigv4") or name_to_schema.get(
+            "sigv4-s3express"
+        )
+        if endpoint_scheme is not None or not name_to_schema:
+            sigv4_config = capo_devops_agent._auth._sigv4.build_sigv4_auth_scheme(
+                "aidevops", options.region, endpoint_scheme
+            )
+            if sigv4_config is not None:
+                return capo_devops_agent._auth._signers.SigV4Signer(
+                    options.credentials_provider, auth_scheme=sigv4_config
+                )
+    raise RuntimeError("Auth was not resolved")
+
+
+def build_request(
+    options: OperationOptions | AsyncOperationOptions,
+    input_: capo_devops_agent.types.update_private_connection_certificate_input.UpdatePrivateConnectionCertificateInput,
+) -> zapros.Request:
+    endpoint = resolve(
+        EndpointParams(
+            UseFIPS=options.use_fips, Endpoint=options.endpoint, Region=options.region
+        )
+    )  # noqa: F841
+    url = endpoint.url.rstrip("/") + "/v1/private-connections/{name}/certificate"
+    url = url.replace("{name}", quote(input_["name"], safe=""))
+    params: list[tuple[str, str]] = []
+    headers: dict[str, str] = {k: ", ".join(v) for k, v in endpoint.headers.items()}
+    body: bytes | None = json.dumps(
+        capo_devops_agent.types.update_private_connection_certificate_input.serialize_json(
+            input_
+        ),
+        allow_nan=False,
+    ).encode()
+    headers["content-type"] = "application/json"
+    signer = get_signer(options, auth_schemes=endpoint.properties.get("authSchemes"))
+    normalized_url = zapros.URL(url)
+    for k, v in params:
+        normalized_url.search_params.append(k, v)
+    return zapros.Request(
+        normalized_url, "POST", headers=headers, body=body, context={"signer": signer}
+    )
+
+
+def update_private_connection_certificate(
+    options: OperationOptions,
+    input_: capo_devops_agent.types.update_private_connection_certificate_input.UpdatePrivateConnectionCertificateInput,
+) -> tuple[
+    capo_devops_agent.types.update_private_connection_certificate_output.UpdatePrivateConnectionCertificateOutput,
+    zapros.Response,
+]:
+    response = options.client.handler.handle(build_request(options, input_))
+    try:
+        if response.status >= 300:
+            response.read()
+            handle_error(response)
+        return handle_response(response), response
+    except BaseException:
+        response.close()
+        raise
+
+
+async def async_update_private_connection_certificate(
+    options: AsyncOperationOptions,
+    input_: capo_devops_agent.types.update_private_connection_certificate_input.UpdatePrivateConnectionCertificateInput,
+) -> tuple[
+    capo_devops_agent.types.update_private_connection_certificate_output.UpdatePrivateConnectionCertificateOutput,
+    zapros.Response,
+]:
+    response = await options.client.handler.ahandle(build_request(options, input_))
+    try:
+        if response.status >= 300:
+            await response.aread()
+            handle_error(response)
+        return await async_handle_response(response), response
+    except BaseException:
+        await response.aclose()
+        raise

capo_devops_agent/_operations/dev_ops_agent/update_recommendation.py

@@ -0,0 +1,195 @@
+"""Generated from Smithy shape ``com.amazonaws.devopsagent#UpdateRecommendation``."""
+
+from __future__ import annotations
+
+import json
+from typing import Any
+from urllib.parse import quote
+
+import zapros
+from typing_extensions import Never
+
+import capo_devops_agent._auth._signers
+import capo_devops_agent._auth._sigv4
+import capo_devops_agent._protocol.eventstream
+import capo_devops_agent.errors.access_denied_exception
+import capo_devops_agent.errors.conflict_exception
+import capo_devops_agent.errors.content_size_exceeded_exception
+import capo_devops_agent.errors.internal_server_exception
+import capo_devops_agent.errors.invalid_parameter_exception
+import capo_devops_agent.errors.resource_not_found_exception
+import capo_devops_agent.errors.service_quota_exceeded_exception
+import capo_devops_agent.errors.throttling_exception
+import capo_devops_agent.errors.validation_exception
+import capo_devops_agent.types.recommendation
+import capo_devops_agent.types.recommendation_status
+import capo_devops_agent.types.update_recommendation_request
+import capo_devops_agent.types.update_recommendation_response
+from capo_devops_agent._protocol.errors import parse_error_metadata_json
+from capo_devops_agent._rule_engine._endpoint_rule_set import EndpointParams, resolve
+from capo_devops_agent._services._pipeline import (
+    AsyncOperationOptions,
+    OperationOptions,
+)
+from capo_devops_agent.errors import UnknownServiceError
+
+
+def handle_error(response: zapros.Response) -> Never:
+    data = json.loads(response.read())
+    code, message = parse_error_metadata_json(response, data)
+    match code:
+        case "AccessDeniedException":
+            raise capo_devops_agent.errors.access_denied_exception.AccessDeniedException.from_json(
+                data, message
+            )
+        case "ConflictException":
+            raise capo_devops_agent.errors.conflict_exception.ConflictException.from_json(
+                data, message
+            )
+        case "ContentSizeExceededException":
+            raise capo_devops_agent.errors.content_size_exceeded_exception.ContentSizeExceededException.from_json(
+                data, message
+            )
+        case "InternalServerException":
+            raise capo_devops_agent.errors.internal_server_exception.InternalServerException.from_json(
+                data, message
+            )
+        case "InvalidParameterException":
+            raise capo_devops_agent.errors.invalid_parameter_exception.InvalidParameterException.from_json(
+                data, message
+            )
+        case "ResourceNotFoundException":
+            raise capo_devops_agent.errors.resource_not_found_exception.ResourceNotFoundException.from_json(
+                data, message
+            )
+        case "ServiceQuotaExceededException":
+            raise capo_devops_agent.errors.service_quota_exceeded_exception.ServiceQuotaExceededException.from_json(
+                data, message
+            )
+        case "ThrottlingException":
+            raise capo_devops_agent.errors.throttling_exception.ThrottlingException.from_json(
+                data, message
+            )
+        case "ValidationException":
+            raise capo_devops_agent.errors.validation_exception.ValidationException.from_json(
+                data, message
+            )
+        case _:
+            raise UnknownServiceError(code=code, message=message, response=response)
+
+
+def handle_response(
+    response: zapros.Response,
+) -> (
+    capo_devops_agent.types.update_recommendation_response.UpdateRecommendationResponse
+):
+    out: capo_devops_agent.types.update_recommendation_response.UpdateRecommendationResponse = capo_devops_agent.types.update_recommendation_response.deserialize_json(
+        json.loads(response.read())
+    )
+    return out
+
+
+async def async_handle_response(
+    response: zapros.Response,
+) -> (
+    capo_devops_agent.types.update_recommendation_response.UpdateRecommendationResponse
+):
+    out: capo_devops_agent.types.update_recommendation_response.UpdateRecommendationResponse = capo_devops_agent.types.update_recommendation_response.deserialize_json(
+        json.loads(await response.aread())
+    )
+    return out
+
+
+def get_signer(
+    options: AsyncOperationOptions | OperationOptions,
+    auth_schemes: list[dict[str, Any]] | None = None,
+) -> capo_devops_agent._auth._signers.Signer | None:
+    name_to_schema = {s["name"]: s for s in (auth_schemes or [])}  # noqa: F841
+    if (
+        options.credentials_provider is not None
+        and name_to_schema
+        and not name_to_schema.keys() & {"sigv4", "sigv4-s3express"}
+    ):
+        raise RuntimeError(
+            "Endpoint requires an unsupported auth scheme: " + ", ".join(name_to_schema)
+        )
+    if options.credentials_provider is not None:
+        endpoint_scheme = name_to_schema.get("sigv4") or name_to_schema.get(
+            "sigv4-s3express"
+        )
+        if endpoint_scheme is not None or not name_to_schema:
+            sigv4_config = capo_devops_agent._auth._sigv4.build_sigv4_auth_scheme(
+                "aidevops", options.region, endpoint_scheme
+            )
+            if sigv4_config is not None:
+                return capo_devops_agent._auth._signers.SigV4Signer(
+                    options.credentials_provider, auth_scheme=sigv4_config
+                )
+    raise RuntimeError("Auth was not resolved")
+
+
+def build_request(
+    options: OperationOptions | AsyncOperationOptions,
+    input_: capo_devops_agent.types.update_recommendation_request.UpdateRecommendationRequest,
+) -> zapros.Request:
+    endpoint = resolve(
+        EndpointParams(
+            UseFIPS=options.use_fips, Endpoint=options.endpoint, Region=options.region
+        )
+    )  # noqa: F841
+    url = (
+        endpoint.url.rstrip("/")
+        + "/backlog/agent-space/{agentSpaceId}/recommendations/{recommendationId}"
+    )
+    url = url.replace("{agentSpaceId}", quote(input_["agent_space_id"], safe=""))
+    url = url.replace("{recommendationId}", quote(input_["recommendation_id"], safe=""))
+    params: list[tuple[str, str]] = []
+    headers: dict[str, str] = {k: ", ".join(v) for k, v in endpoint.headers.items()}
+    body: bytes | None = json.dumps(
+        capo_devops_agent.types.update_recommendation_request.serialize_json(input_),
+        allow_nan=False,
+    ).encode()
+    headers["content-type"] = "application/json"
+    signer = get_signer(options, auth_schemes=endpoint.properties.get("authSchemes"))
+    normalized_url = zapros.URL(url)
+    for k, v in params:
+        normalized_url.search_params.append(k, v)
+    return zapros.Request(
+        normalized_url, "PATCH", headers=headers, body=body, context={"signer": signer}
+    )
+
+
+def update_recommendation(
+    options: OperationOptions,
+    input_: capo_devops_agent.types.update_recommendation_request.UpdateRecommendationRequest,
+) -> tuple[
+    capo_devops_agent.types.update_recommendation_response.UpdateRecommendationResponse,
+    zapros.Response,
+]:
+    response = options.client.handler.handle(build_request(options, input_))
+    try:
+        if response.status >= 300:
+            response.read()
+            handle_error(response)
+        return handle_response(response), response
+    except BaseException:
+        response.close()
+        raise
+
+
+async def async_update_recommendation(
+    options: AsyncOperationOptions,
+    input_: capo_devops_agent.types.update_recommendation_request.UpdateRecommendationRequest,
+) -> tuple[
+    capo_devops_agent.types.update_recommendation_response.UpdateRecommendationResponse,
+    zapros.Response,
+]:
+    response = await options.client.handler.ahandle(build_request(options, input_))
+    try:
+        if response.status >= 300:
+            await response.aread()
+            handle_error(response)
+        return await async_handle_response(response), response
+    except BaseException:
+        await response.aclose()
+        raise

capo_devops_agent/_operations/dev_ops_agent/validate_aws_associations.py

@@ -0,0 +1,180 @@
+"""Generated from Smithy shape ``com.amazonaws.devopsagent#ValidateAwsAssociations``."""
+
+from __future__ import annotations
+
+import json
+from typing import Any
+from urllib.parse import quote
+
+import zapros
+from typing_extensions import Never
+
+import capo_devops_agent._auth._signers
+import capo_devops_agent._auth._sigv4
+import capo_devops_agent._protocol.eventstream
+import capo_devops_agent.errors.access_denied_exception
+import capo_devops_agent.errors.conflict_exception
+import capo_devops_agent.errors.content_size_exceeded_exception
+import capo_devops_agent.errors.internal_server_exception
+import capo_devops_agent.errors.invalid_parameter_exception
+import capo_devops_agent.errors.resource_not_found_exception
+import capo_devops_agent.errors.service_quota_exceeded_exception
+import capo_devops_agent.errors.throttling_exception
+import capo_devops_agent.errors.validation_exception
+import capo_devops_agent.types.validate_aws_associations_input
+import capo_devops_agent.types.validate_aws_associations_output
+from capo_devops_agent._protocol.errors import parse_error_metadata_json
+from capo_devops_agent._rule_engine._endpoint_rule_set import EndpointParams, resolve
+from capo_devops_agent._services._pipeline import (
+    AsyncOperationOptions,
+    OperationOptions,
+)
+from capo_devops_agent.errors import UnknownServiceError
+
+
+def handle_error(response: zapros.Response) -> Never:
+    data = json.loads(response.read())
+    code, message = parse_error_metadata_json(response, data)
+    match code:
+        case "AccessDeniedException":
+            raise capo_devops_agent.errors.access_denied_exception.AccessDeniedException.from_json(
+                data, message
+            )
+        case "ConflictException":
+            raise capo_devops_agent.errors.conflict_exception.ConflictException.from_json(
+                data, message
+            )
+        case "ContentSizeExceededException":
+            raise capo_devops_agent.errors.content_size_exceeded_exception.ContentSizeExceededException.from_json(
+                data, message
+            )
+        case "InternalServerException":
+            raise capo_devops_agent.errors.internal_server_exception.InternalServerException.from_json(
+                data, message
+            )
+        case "InvalidParameterException":
+            raise capo_devops_agent.errors.invalid_parameter_exception.InvalidParameterException.from_json(
+                data, message
+            )
+        case "ResourceNotFoundException":
+            raise capo_devops_agent.errors.resource_not_found_exception.ResourceNotFoundException.from_json(
+                data, message
+            )
+        case "ServiceQuotaExceededException":
+            raise capo_devops_agent.errors.service_quota_exceeded_exception.ServiceQuotaExceededException.from_json(
+                data, message
+            )
+        case "ThrottlingException":
+            raise capo_devops_agent.errors.throttling_exception.ThrottlingException.from_json(
+                data, message
+            )
+        case "ValidationException":
+            raise capo_devops_agent.errors.validation_exception.ValidationException.from_json(
+                data, message
+            )
+        case _:
+            raise UnknownServiceError(code=code, message=message, response=response)
+
+
+def handle_response(
+    response: zapros.Response,
+) -> capo_devops_agent.types.validate_aws_associations_output.ValidateAwsAssociationsOutput:
+    out: capo_devops_agent.types.validate_aws_associations_output.ValidateAwsAssociationsOutput = {}  # type: ignore[typeddict-item]
+    return out
+
+
+async def async_handle_response(
+    response: zapros.Response,
+) -> capo_devops_agent.types.validate_aws_associations_output.ValidateAwsAssociationsOutput:
+    out: capo_devops_agent.types.validate_aws_associations_output.ValidateAwsAssociationsOutput = {}  # type: ignore[typeddict-item]
+    return out
+
+
+def get_signer(
+    options: AsyncOperationOptions | OperationOptions,
+    auth_schemes: list[dict[str, Any]] | None = None,
+) -> capo_devops_agent._auth._signers.Signer | None:
+    name_to_schema = {s["name"]: s for s in (auth_schemes or [])}  # noqa: F841
+    if (
+        options.credentials_provider is not None
+        and name_to_schema
+        and not name_to_schema.keys() & {"sigv4", "sigv4-s3express"}
+    ):
+        raise RuntimeError(
+            "Endpoint requires an unsupported auth scheme: " + ", ".join(name_to_schema)
+        )
+    if options.credentials_provider is not None:
+        endpoint_scheme = name_to_schema.get("sigv4") or name_to_schema.get(
+            "sigv4-s3express"
+        )
+        if endpoint_scheme is not None or not name_to_schema:
+            sigv4_config = capo_devops_agent._auth._sigv4.build_sigv4_auth_scheme(
+                "aidevops", options.region, endpoint_scheme
+            )
+            if sigv4_config is not None:
+                return capo_devops_agent._auth._signers.SigV4Signer(
+                    options.credentials_provider, auth_scheme=sigv4_config
+                )
+    raise RuntimeError("Auth was not resolved")
+
+
+def build_request(
+    options: OperationOptions | AsyncOperationOptions,
+    input_: capo_devops_agent.types.validate_aws_associations_input.ValidateAwsAssociationsInput,
+) -> zapros.Request:
+    endpoint = resolve(
+        EndpointParams(
+            UseFIPS=options.use_fips, Endpoint=options.endpoint, Region=options.region
+        )
+    )  # noqa: F841
+    url = (
+        endpoint.url.rstrip("/")
+        + "/v1/agentspaces/{agentSpaceId}/associations/validate"
+    )
+    url = url.replace("{agentSpaceId}", quote(input_["agent_space_id"], safe=""))
+    params: list[tuple[str, str]] = []
+    headers: dict[str, str] = {k: ", ".join(v) for k, v in endpoint.headers.items()}
+    body: bytes | None = b""
+    signer = get_signer(options, auth_schemes=endpoint.properties.get("authSchemes"))
+    normalized_url = zapros.URL(url)
+    for k, v in params:
+        normalized_url.search_params.append(k, v)
+    return zapros.Request(
+        normalized_url, "POST", headers=headers, body=body, context={"signer": signer}
+    )
+
+
+def validate_aws_associations(
+    options: OperationOptions,
+    input_: capo_devops_agent.types.validate_aws_associations_input.ValidateAwsAssociationsInput,
+) -> tuple[
+    capo_devops_agent.types.validate_aws_associations_output.ValidateAwsAssociationsOutput,
+    zapros.Response,
+]:
+    response = options.client.handler.handle(build_request(options, input_))
+    try:
+        if response.status >= 300:
+            response.read()
+            handle_error(response)
+        return handle_response(response), response
+    except BaseException:
+        response.close()
+        raise
+
+
+async def async_validate_aws_associations(
+    options: AsyncOperationOptions,
+    input_: capo_devops_agent.types.validate_aws_associations_input.ValidateAwsAssociationsInput,
+) -> tuple[
+    capo_devops_agent.types.validate_aws_associations_output.ValidateAwsAssociationsOutput,
+    zapros.Response,
+]:
+    response = await options.client.handler.ahandle(build_request(options, input_))
+    try:
+        if response.status >= 300:
+            await response.aread()
+            handle_error(response)
+        return await async_handle_response(response), response
+    except BaseException:
+        await response.aclose()
+        raise

capo_devops_agent/_pagination.py

@@ -0,0 +1,21 @@
+"""Runtime helpers for generated paginated ``iter_*`` operation methods."""
+
+from __future__ import annotations
+
+from typing import Any
+
+
+def resolve_path(obj: Any, path: tuple[str, ...]) -> Any:
+    """Walk ``path`` segments on a nested ``dict`` (TypedDict at runtime).
+
+    Returns ``None`` as soon as any intermediate value is missing or non-dict —
+    the generated iter loop uses a falsy token as the terminate signal, so this
+    short-circuit gives the same semantics for dotted paths as for top-level ones.
+    """
+    for key in path:
+        if not isinstance(obj, dict):
+            return None
+        obj = obj.get(key)
+        if obj is None:
+            return None
+    return obj

capo_devops_agent/_protocol/__init__.py

@@ -0,0 +1 @@
+"""Protocol runtime modules. Hand-written; not generated."""

capo_devops_agent/_protocol/errors.py

@@ -0,0 +1,93 @@
+"""Shared service-error runtime.
+
+Hand-written, not regenerated. Helpers for extracting error metadata
+from HTTP error responses.
+"""
+
+from __future__ import annotations
+
+from typing import TYPE_CHECKING
+
+from zapros import Response
+
+from .xml import fromstring
+
+if TYPE_CHECKING:
+    from xml.etree.ElementTree import Element
+
+
+def find_error_element(root: Element) -> Element:
+    """Return the element holding the error structure's members.
+
+    Handles the three XML error envelopes: a bare ``<Error>`` root
+    (restXml with ``noErrorWrapping``), an ``<ErrorResponse><Error>``
+    wrapper (restXml/awsQuery), and the ec2Query
+    ``<Response><Errors><Error>`` envelope. Falls back to ``root``
+    when no ``<Error>`` element is found.
+    """
+    if root.tag.endswith("Error"):
+        return root
+    for path in ("Error", "Errors/Error"):
+        err = root.find(path)
+        if err is not None:
+            return err
+    return root
+
+
+def parse_error_metadata(root: Element) -> tuple[str | None, str | None]:
+    """Return ``(code, message)`` from an XML error envelope.
+
+    Accepts any envelope understood by :func:`find_error_element`.
+    Missing children yield ``None``.
+    """
+    err = find_error_element(root)
+    code_el = err.find("Code")
+    msg_el = err.find("Message")
+    code = code_el.text if code_el is not None else None
+    message = msg_el.text if msg_el is not None else None
+    return code, message
+
+
+def parse_error_metadata_json(
+    response: Response, data: dict
+) -> tuple[str | None, str | None]:
+    """Return ``(code, message)`` from a restJson1 error response.
+
+    Code precedence: the ``X-Amzn-Errortype`` response header, then the
+    ``__type`` body field, then ``code``. The raw value is normalized by
+    dropping a trailing ``:uri`` suffix first, then a ``prefix#``
+    namespace — in that order, so a ``#`` inside the uri suffix cannot
+    hijack the code. Message comes from ``message`` or ``Message``.
+    Missing values yield ``None``.
+    """
+    code = (
+        response.headers.get("X-Amzn-Errortype")
+        or data.get("__type")
+        or data.get("code")
+    )
+    if code is not None:
+        code = code.split(":", 1)[0].rsplit("#", 1)[-1]
+    message = data.get("message") or data.get("Message")
+    return code, message
+
+
+def is_xml_error_body(body: bytes) -> bool:
+    """Whether a 2xx response body is really an XML error document.
+
+    S3 answers CopyObject, UploadPartCopy and CompleteMultipartUpload
+    with ``200 OK`` before the operation finishes; a failure after that
+    point is reported as an ``<Error>`` body (or an empty body) on the
+    200 response. Official SDKs check the body for exactly these
+    operations.
+    """
+    if not body:
+        return True
+    return fromstring(body).tag == "Error"
+
+
+__all__ = [
+    "find_error_element",
+    "is_xml_error_body",
+    "parse_error_metadata",
+    "parse_error_metadata_json",
+]