cookcli 0.38.1

A command-line interface for managing and working with Cooklang recipes
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154

use std::time::{Duration, Instant};

use serde::{Deserialize, Serialize};
use tokio_util::sync::CancellationToken;

use super::endpoints;

const GRANT_TYPE: &str = "urn:ietf:params:oauth:grant-type:device_code";

#[derive(Debug, Clone, Deserialize)]
pub struct DeviceCodeResponse {
    pub device_code: String,
    pub user_code: String,
    pub verification_uri: String,
    pub verification_uri_complete: String,
    pub expires_in: u64,
    pub interval: u64,
}

#[derive(Debug, Serialize)]
struct DeviceCodeRequest<'a> {
    client_name: &'a str,
}

#[derive(Debug, Serialize)]
struct TokenRequest<'a> {
    grant_type: &'a str,
    device_code: &'a str,
}

#[derive(Debug, Deserialize)]
struct TokenSuccess {
    access_token: String,
}

#[derive(Debug, Deserialize)]
struct TokenError {
    error: String,
}

#[derive(Debug, thiserror::Error)]
pub enum DeviceFlowError {
    #[error("user denied authorization")]
    AccessDenied,
    #[error("device code expired")]
    Expired,
    #[error("flow cancelled")]
    Cancelled,
    #[error("network error: {0}")]
    Network(#[from] reqwest::Error),
    #[error("bad response from cook.md: {0}")]
    BadResponse(String),
}

pub async fn request_device_code(
    client: &reqwest::Client,
    client_name: &str,
) -> Result<DeviceCodeResponse, DeviceFlowError> {
    let url = format!("{}/oauth/device/code", endpoints::base_url());
    let resp = client
        .post(&url)
        .json(&DeviceCodeRequest { client_name })
        .send()
        .await?;

    if !resp.status().is_success() {
        let status = resp.status();
        let body = resp.text().await.unwrap_or_default();
        return Err(DeviceFlowError::BadResponse(format!(
            "device code request failed: HTTP {status}: {body}"
        )));
    }

    resp.json::<DeviceCodeResponse>().await.map_err(Into::into)
}

/// Polls /oauth/device/token until approved, denied, expired, or cancelled.
/// Respects `slow_down` (bumps interval by 5 s) and the `expires_at` deadline.
pub async fn poll_for_token(
    client: &reqwest::Client,
    device_code: &str,
    mut interval: Duration,
    expires_at: Instant,
    cancel: CancellationToken,
) -> Result<String, DeviceFlowError> {
    let url = format!("{}/oauth/device/token", endpoints::base_url());

    loop {
        if Instant::now() >= expires_at {
            return Err(DeviceFlowError::Expired);
        }

        tokio::select! {
            _ = cancel.cancelled() => return Err(DeviceFlowError::Cancelled),
            _ = tokio::time::sleep(interval) => {}
        }

        let resp = client
            .post(&url)
            .json(&TokenRequest {
                grant_type: GRANT_TYPE,
                device_code,
            })
            .send()
            .await?;

        let status = resp.status();

        if status.is_success() {
            let body: TokenSuccess = resp.json().await.map_err(DeviceFlowError::Network)?;
            return Ok(body.access_token);
        }

        // 400 → parse {"error": "..."} per RFC 8628
        let body: TokenError = resp
            .json()
            .await
            .map_err(|e| DeviceFlowError::BadResponse(format!("unparseable error body: {e}")))?;

        match body.error.as_str() {
            "authorization_pending" => continue,
            "slow_down" => {
                interval += Duration::from_secs(5);
            }
            "access_denied" => return Err(DeviceFlowError::AccessDenied),
            "expired_token" => return Err(DeviceFlowError::Expired),
            other => {
                return Err(DeviceFlowError::BadResponse(format!(
                    "unexpected error code: {other}"
                )))
            }
        }
    }
}

/// Builds the client_name string sent to cook.md. Includes OS and a
/// best-effort label ("docker" / "cli" / hostname).
pub fn client_name(suffix: &str) -> String {
    format!(
        "CookCLI {} ({}/{})",
        env!("CARGO_PKG_VERSION"),
        std::env::consts::OS,
        suffix
    )
}

/// Returns "docker" if /.dockerenv exists, else "server".
pub fn server_host_label() -> &'static str {
    if std::path::Path::new("/.dockerenv").exists() {
        "docker"
    } else {
        "server"
    }
}