opteryx-catalog 0.4.8__py3-none-any.whl

opteryx_catalog/iops/gcs.py

@@ -0,0 +1,255 @@
+"""
+Optimized GCS FileIO for opteryx_catalog.iops
+"""
+
+import io
+import logging
+import os
+import urllib.parse
+from collections import OrderedDict
+from typing import Callable
+from typing import Union
+
+import requests
+from google.auth.transport.requests import Request
+from requests.adapters import HTTPAdapter
+
+from .base import FileIO
+from .base import InputFile
+from .base import OutputFile
+
+# we keep a local cache of recently read files
+MAX_CACHE_SIZE: int = 32
+
+logger = logging.getLogger(__name__)
+
+
+def _get_storage_credentials():
+    from google.cloud import storage
+
+    if os.environ.get("STORAGE_EMULATOR_HOST"):
+        from google.auth.credentials import AnonymousCredentials
+
+        storage_client = storage.Client(credentials=AnonymousCredentials())
+    else:
+        storage_client = storage.Client()
+    return storage_client._credentials
+
+
+class _GcsInputStream(io.BytesIO):
+    def __init__(
+        self, path: str, session: requests.Session, access_token_getter: Callable[[], str]
+    ):
+        # Strip gs://
+        if path.startswith("gs://"):
+            path = path[5:]
+        bucket = path.split("/", 1)[0]
+        object_full_path = urllib.parse.quote(path[(len(bucket) + 1) :], safe="")
+        url = f"https://storage.googleapis.com/{bucket}/{object_full_path}"
+
+        access_token = access_token_getter()
+        headers = {"Accept-Encoding": "identity"}
+        if access_token:
+            headers["Authorization"] = f"Bearer {access_token}"
+
+        response = session.get(
+            url,
+            headers=headers,
+            timeout=30,
+        )
+
+        if response.status_code != 200:
+            raise FileNotFoundError(
+                f"Unable to read '{path}' - status {response.status_code}: {response.text}"
+            )
+
+        super().__init__(response.content)
+
+
+class _GcsOutputStream(io.BytesIO):
+    def __init__(
+        self, path: str, session: requests.Session, access_token_getter: Callable[[], str]
+    ):
+        super().__init__()
+        self._path = path
+        self._session = session
+        self._access_token_getter = access_token_getter
+        self._closed = False
+
+    def close(self):
+        if self._closed:
+            return
+
+        path = self._path
+        if path.startswith("gs://"):
+            path = path[5:]
+
+        bucket = path.split("/", 1)[0]
+        url = f"https://storage.googleapis.com/upload/storage/v1/b/{bucket}/o"
+
+        data = self.getvalue()
+        object_name = path[(len(bucket) + 1) :]
+
+        token = self._access_token_getter()
+        headers = {
+            "Content-Type": "application/octet-stream",
+            "Content-Length": str(len(data)),
+        }
+        if token:
+            headers["Authorization"] = f"Bearer {token}"
+
+        response = self._session.post(
+            url,
+            params={"uploadType": "media", "name": object_name},
+            headers=headers,
+            data=data,
+            timeout=60,
+        )
+
+        if response.status_code not in (200, 201):
+            raise IOError(
+                f"Failed to write '{self._path}' - status {response.status_code}: {response.text}"
+            )
+
+        self._closed = True
+        super().close()
+
+
+class _GcsInputFile(InputFile):
+    def __init__(
+        self,
+        location: str,
+        session: requests.Session,
+        access_token_getter: Callable[[], str],
+        cache: OrderedDict = None,
+    ):
+        # Check cache first
+        if cache is not None and location in cache:
+            # Move to end (most recently used)
+            cache.move_to_end(location)
+            data = cache[location]
+            super().__init__(location, data)
+            return
+
+        # read entire bytes via optimized session
+        try:
+            stream = _GcsInputStream(location, session, access_token_getter)
+            data = stream.read()
+
+            # Add to cache
+            if cache is not None:
+                cache[location] = data
+                # Evict oldest if cache exceeds MAX_CACHE_SIZE entries
+                if len(cache) > MAX_CACHE_SIZE:
+                    cache.popitem(last=False)
+
+            super().__init__(location, data)
+        except FileNotFoundError:
+            super().__init__(location, None)
+
+
+class _GcsOutputFile(OutputFile):
+    def __init__(
+        self, location: str, session: requests.Session, access_token_getter: Callable[[], str]
+    ):
+        super().__init__(location)
+        self._location = location
+        self._session = session
+        self._access_token_getter = access_token_getter
+
+    def create(self):
+        return _GcsOutputStream(self._location, self._session, self._access_token_getter)
+
+
+class GcsFileIO(FileIO):
+    """Optimized HTTP-backed GCS FileIO.
+
+    Implements a blackhole/capture pattern for manifest files and exposes
+    `new_input`, `new_output`, `delete`, `exists`.
+    """
+
+    def __init__(self):
+        # Track manifest paths and captured manifests
+        self.manifest_paths: list[str] = []
+        self.captured_manifests: list[tuple[str, bytes]] = []
+
+        # LRU cache for read operations (MAX_CACHE_SIZE files max)
+        self._read_cache: OrderedDict = OrderedDict()
+
+        # Prepare requests session and set up credential refresh helper (token may expire)
+        self._credentials = _get_storage_credentials()
+        self._access_token = None
+
+        def _refresh_credentials():
+            try:
+                if not self._credentials.valid:
+                    req = Request()
+                    self._credentials.refresh(req)
+                self._access_token = self._credentials.token
+            except Exception as e:
+                logger.warning("Failed to refresh GCS credentials: %s", e)
+                self._access_token = None
+
+        self._refresh_credentials = _refresh_credentials
+
+        def get_access_token():
+            # Refresh credentials on demand to avoid using expired tokens
+            self._refresh_credentials()
+            return self._access_token
+
+        self.get_access_token = get_access_token
+
+        self._session = requests.session()
+        adapter = HTTPAdapter(pool_connections=100, pool_maxsize=100)
+        self._session.mount("https://", adapter)
+
+    def new_input(self, location: str) -> InputFile:
+        return _GcsInputFile(location, self._session, self.get_access_token, self._read_cache)
+
+    def new_output(self, location: str) -> OutputFile:
+        logger.info(f"new_output -> {location}")
+
+        # Invalidate cache entry if present
+        self._read_cache.pop(location, None)
+
+        return _GcsOutputFile(location, self._session, self.get_access_token)
+
+    def delete(self, location: Union[str, InputFile, OutputFile]) -> None:
+        if isinstance(location, (InputFile, OutputFile)):
+            location = location.location
+
+        # Invalidate cache entry if present
+        self._read_cache.pop(location, None)
+
+        path = location
+        if path.startswith("gs://"):
+            path = path[5:]
+
+        bucket = path.split("/", 1)[0]
+        object_full_path = urllib.parse.quote(path[(len(bucket) + 1) :], safe="")
+        url = f"https://storage.googleapis.com/storage/v1/b/{bucket}/o/{object_full_path}"
+
+        token = self.get_access_token()
+        headers = {}
+        if token:
+            headers["Authorization"] = f"Bearer {token}"
+        response = self._session.delete(url, headers=headers, timeout=10)
+
+        if response.status_code not in (204, 404):
+            raise IOError(f"Failed to delete '{location}' - status {response.status_code}")
+
+    def exists(self, location: str) -> bool:
+        path = location
+        if path.startswith("gs://"):
+            path = path[5:]
+
+        bucket = path.split("/", 1)[0]
+        object_full_path = urllib.parse.quote(path[(len(bucket) + 1) :], safe="")
+        url = f"https://storage.googleapis.com/{bucket}/{object_full_path}"
+
+        token = self.get_access_token()
+        headers = {}
+        if token:
+            headers["Authorization"] = f"Bearer {token}"
+        response = self._session.head(url, headers=headers, timeout=10)
+        return response.status_code == 200