spiral-sdk 0.1.11

// Generated by tools/service-contracts/rust.py. Do not edit.
#![doc = "Generated reqwest client with typed errors and streaming bodies."]

use async_trait::async_trait;
use reqwest::Url;
use reqwest_middleware::ClientWithMiddleware;
use spiral_contract::auth::AuthHeader;
use spiral_contract::call::{CallError, ServiceFailure};
use spiral_contract::error::ErrorEnvelope;
use uuid::Uuid;

use crate::api::connections::ConnectionsApi;
use crate::api::connections::objects::*;
use crate::http::default_http_client;
/// HTTP client for the connections service.
#[derive(Clone)]
pub struct ConnectionsClient {
    http: ClientWithMiddleware,
    base: Url,
}

impl std::fmt::Debug for ConnectionsClient {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        f.debug_struct("ConnectionsClient")
            .field("base", &self.base)
            .finish_non_exhaustive()
    }
}

impl ConnectionsClient {
    /// Create a redirect-disabled client; base may contain a deployment prefix.
    pub fn new(base: &str) -> Result<Self, CallError<ConnectionsError>> {
        let http = default_http_client().map_err(CallError::transport)?;
        Self::from_http(base, http)
    }
    /// Use an existing connection pool with redirects disabled.
    pub fn from_http(
        base: &str,
        http: impl Into<ClientWithMiddleware>,
    ) -> Result<Self, CallError<ConnectionsError>> {
        Self::from_transport(base, http.into())
    }
    /// Use a host-owned connection pool and instrumentation. Redirects must be disabled.
    pub fn from_transport(
        base: &str,
        http: ClientWithMiddleware,
    ) -> Result<Self, CallError<ConnectionsError>> {
        let base = Url::parse(base)
            .map_err(|_| CallError::<ConnectionsError>::protocol("invalid base URL"))?;
        if !matches!(base.scheme(), "http" | "https")
            || base.host_str().is_none()
            || !base.username().is_empty()
            || base.password().is_some()
            || base.query().is_some()
            || base.fragment().is_some()
        {
            return Err(CallError::<ConnectionsError>::protocol("invalid base URL"));
        }
        Ok(Self { http, base })
    }
    /// Replace the host-owned connection pool and instrumentation. Redirects must be disabled.
    pub fn with_transport(mut self, http: ClientWithMiddleware) -> Self {
        self.http = http;
        self
    }
    /// Supply transport instrumentation or custom connection policy.
    ///
    /// The caller must disable redirects to protect bearer credentials.
    pub fn with_http(mut self, http: impl Into<ClientWithMiddleware>) -> Self {
        self.http = http.into();
        self
    }
    /// Create a Connection scoped to one Project.
    pub async fn create_connection_http(
        &self,
        auth_header: AuthHeader,
        request: CreateConnectionRequest,
    ) -> Result<CreateConnectionResponse, CallError<ConnectionsError>> {
        let mut url = self.base.clone();
        {
            let mut path = url.path_segments_mut().map_err(|_| {
                CallError::<ConnectionsError>::protocol("base URL cannot contain path segments")
            })?;
            path.pop_if_empty();
            path.push("api");
            path.push("connections");
        }
        let builder = self.http.post(url).header("accept", "application/json");
        let builder = builder.header("authorization", auth_header.as_str());
        let builder = builder
            .header("content-type", "application/json")
            .json(&request);
        let response = self.send(builder, "application/json").await?;
        let status = response.status().as_u16();
        let bytes = bounded_body(response, 8 * 1024 * 1024).await?;
        serde_json::from_slice(&bytes)
            .map_err(|_| CallError::protocol_response(status, "invalid JSON response"))
    }
    /// Drop a Connection and remove its stored secret.
    pub async fn drop_connection_http(
        &self,
        auth_header: AuthHeader,
        connection_id: Uuid,
    ) -> Result<DropResponse, CallError<ConnectionsError>> {
        let mut url = self.base.clone();
        {
            let mut path = url.path_segments_mut().map_err(|_| {
                CallError::<ConnectionsError>::protocol("base URL cannot contain path segments")
            })?;
            path.pop_if_empty();
            path.push("api");
            path.push("connections");
            let segment = connection_id.to_string();
            if matches!(segment.as_str(), "." | "..") {
                return Err(CallError::<ConnectionsError>::protocol("dot path segment"));
            }
            path.push(&segment);
        }
        let builder = self.http.delete(url).header("accept", "application/json");
        let builder = builder.header("authorization", auth_header.as_str());
        let response = self.send(builder, "application/json").await?;
        let status = response.status().as_u16();
        let bytes = bounded_body(response, 8 * 1024 * 1024).await?;
        serde_json::from_slice(&bytes)
            .map_err(|_| CallError::protocol_response(status, "invalid JSON response"))
    }
    /// Read a Connection without exposing its stored secret.
    pub async fn read_connection_http(
        &self,
        auth_header: AuthHeader,
        connection_id: Uuid,
    ) -> Result<ConnectionResponse, CallError<ConnectionsError>> {
        let mut url = self.base.clone();
        {
            let mut path = url.path_segments_mut().map_err(|_| {
                CallError::<ConnectionsError>::protocol("base URL cannot contain path segments")
            })?;
            path.pop_if_empty();
            path.push("api");
            path.push("connections");
            let segment = connection_id.to_string();
            if matches!(segment.as_str(), "." | "..") {
                return Err(CallError::<ConnectionsError>::protocol("dot path segment"));
            }
            path.push(&segment);
        }
        let builder = self.http.get(url).header("accept", "application/json");
        let builder = builder.header("authorization", auth_header.as_str());
        let response = self.send(builder, "application/json").await?;
        let status = response.status().as_u16();
        let bytes = bounded_body(response, 8 * 1024 * 1024).await?;
        serde_json::from_slice(&bytes)
            .map_err(|_| CallError::protocol_response(status, "invalid JSON response"))
    }
    /// Test credential vending and provider access. Provider refusals are reported in the response.
    pub async fn test_connection_http(
        &self,
        auth_header: AuthHeader,
        connection_id: Uuid,
    ) -> Result<TestResponse, CallError<ConnectionsError>> {
        let mut url = self.base.clone();
        {
            let mut path = url.path_segments_mut().map_err(|_| {
                CallError::<ConnectionsError>::protocol("base URL cannot contain path segments")
            })?;
            path.pop_if_empty();
            path.push("api");
            path.push("connections");
            let segment = connection_id.to_string();
            if matches!(segment.as_str(), "." | "..") {
                return Err(CallError::<ConnectionsError>::protocol("dot path segment"));
            }
            path.push(&segment);
            path.push("test");
        }
        let builder = self.http.post(url).header("accept", "application/json");
        let builder = builder.header("authorization", auth_header.as_str());
        let response = self.send(builder, "application/json").await?;
        let status = response.status().as_u16();
        let bytes = bounded_body(response, 8 * 1024 * 1024).await?;
        serde_json::from_slice(&bytes)
            .map_err(|_| CallError::protocol_response(status, "invalid JSON response"))
    }
    /// Change the maximum access granted by this Connection. Increasing access first verifies it
    /// with the provider.
    pub async fn update_allowed_access_http(
        &self,
        auth_header: AuthHeader,
        connection_id: Uuid,
        request: UpdateAllowedAccessRequest,
    ) -> Result<ConnectionResponse, CallError<ConnectionsError>> {
        let mut url = self.base.clone();
        {
            let mut path = url.path_segments_mut().map_err(|_| {
                CallError::<ConnectionsError>::protocol("base URL cannot contain path segments")
            })?;
            path.pop_if_empty();
            path.push("api");
            path.push("connections");
            let segment = connection_id.to_string();
            if matches!(segment.as_str(), "." | "..") {
                return Err(CallError::<ConnectionsError>::protocol("dot path segment"));
            }
            path.push(&segment);
            path.push("allowed-access");
        }
        let builder = self.http.put(url).header("accept", "application/json");
        let builder = builder.header("authorization", auth_header.as_str());
        let builder = builder
            .header("content-type", "application/json")
            .json(&request);
        let response = self.send(builder, "application/json").await?;
        let status = response.status().as_u16();
        let bytes = bounded_body(response, 8 * 1024 * 1024).await?;
        serde_json::from_slice(&bytes)
            .map_err(|_| CallError::protocol_response(status, "invalid JSON response"))
    }
    /// Replace the entire credential with one for the same provider. Include every required secret.
    pub async fn update_credential_http(
        &self,
        auth_header: AuthHeader,
        connection_id: Uuid,
        request: UpdateCredentialRequest,
    ) -> Result<ConnectionResponse, CallError<ConnectionsError>> {
        let mut url = self.base.clone();
        {
            let mut path = url.path_segments_mut().map_err(|_| {
                CallError::<ConnectionsError>::protocol("base URL cannot contain path segments")
            })?;
            path.pop_if_empty();
            path.push("api");
            path.push("connections");
            let segment = connection_id.to_string();
            if matches!(segment.as_str(), "." | "..") {
                return Err(CallError::<ConnectionsError>::protocol("dot path segment"));
            }
            path.push(&segment);
            path.push("credential");
        }
        let builder = self.http.put(url).header("accept", "application/json");
        let builder = builder.header("authorization", auth_header.as_str());
        let builder = builder
            .header("content-type", "application/json")
            .json(&request);
        let response = self.send(builder, "application/json").await?;
        let status = response.status().as_u16();
        let bytes = bounded_body(response, 8 * 1024 * 1024).await?;
        serde_json::from_slice(&bytes)
            .map_err(|_| CallError::protocol_response(status, "invalid JSON response"))
    }
    /// Replace the description. Omit it to clear the description.
    pub async fn update_description_http(
        &self,
        auth_header: AuthHeader,
        connection_id: Uuid,
        request: UpdateDescriptionRequest,
    ) -> Result<ConnectionResponse, CallError<ConnectionsError>> {
        let mut url = self.base.clone();
        {
            let mut path = url.path_segments_mut().map_err(|_| {
                CallError::<ConnectionsError>::protocol("base URL cannot contain path segments")
            })?;
            path.pop_if_empty();
            path.push("api");
            path.push("connections");
            let segment = connection_id.to_string();
            if matches!(segment.as_str(), "." | "..") {
                return Err(CallError::<ConnectionsError>::protocol("dot path segment"));
            }
            path.push(&segment);
        }
        let builder = self.http.patch(url).header("accept", "application/json");
        let builder = builder.header("authorization", auth_header.as_str());
        let builder = builder
            .header("content-type", "application/json")
            .json(&request);
        let response = self.send(builder, "application/json").await?;
        let status = response.status().as_u16();
        let bytes = bounded_body(response, 8 * 1024 * 1024).await?;
        serde_json::from_slice(&bytes)
            .map_err(|_| CallError::protocol_response(status, "invalid JSON response"))
    }
    /// Obtain a short-lived read credential for a URI within the Connection.
    pub async fn vend_credential_http(
        &self,
        auth_header: AuthHeader,
        connection_id: Uuid,
        request: VendRequest,
    ) -> Result<VendResponse, CallError<ConnectionsError>> {
        let mut url = self.base.clone();
        {
            let mut path = url.path_segments_mut().map_err(|_| {
                CallError::<ConnectionsError>::protocol("base URL cannot contain path segments")
            })?;
            path.pop_if_empty();
            path.push("api");
            path.push("connections");
            let segment = connection_id.to_string();
            if matches!(segment.as_str(), "." | "..") {
                return Err(CallError::<ConnectionsError>::protocol("dot path segment"));
            }
            path.push(&segment);
            path.push("credentials");
        }
        let builder = self.http.post(url).header("accept", "application/json");
        let builder = builder.header("authorization", auth_header.as_str());
        let builder = builder
            .header("content-type", "application/json")
            .json(&request);
        let response = self.send(builder, "application/json").await?;
        let status = response.status().as_u16();
        let bytes = bounded_body(response, 8 * 1024 * 1024).await?;
        serde_json::from_slice(&bytes)
            .map_err(|_| CallError::protocol_response(status, "invalid JSON response"))
    }
    async fn send(
        &self,
        builder: reqwest_middleware::RequestBuilder,
        expected_media: &str,
    ) -> Result<reqwest::Response, CallError<ConnectionsError>> {
        let response = builder
            .timeout(std::time::Duration::from_secs(60))
            .send()
            .await
            .map_err(CallError::transport)?;
        let status = response.status();
        if !status.is_success() {
            let status = status.as_u16();
            let content_type = response
                .headers()
                .get("content-type")
                .and_then(|value| value.to_str().ok())
                .map(str::to_owned);
            let (bytes, truncated) = bounded_error_body::<ConnectionsError>(
                response,
                64 * 1024,
                status,
                content_type.clone(),
            )
            .await?;
            if truncated {
                return Err(CallError::unknown_remote(status, content_type, bytes, true));
            }
            return match serde_json::from_slice::<ErrorEnvelope>(&bytes) {
                Ok(envelope) => Err(CallError::Service(ServiceFailure::remote(status, envelope))),
                Err(_) => Err(CallError::unknown_remote(
                    status,
                    content_type,
                    bytes,
                    false,
                )),
            };
        }
        if !media_matches(&response, expected_media) {
            return Err(CallError::protocol_response(
                status.as_u16(),
                "unexpected response media type",
            ));
        }
        Ok(response)
    }
}

fn media_matches(response: &reqwest::Response, expected: &str) -> bool {
    response
        .headers()
        .get("content-type")
        .and_then(|value| value.to_str().ok())
        .and_then(|value| value.split(';').next())
        .is_some_and(|value| value.trim().eq_ignore_ascii_case(expected))
}

async fn bounded_body(
    mut response: reqwest::Response,
    limit: usize,
) -> Result<Vec<u8>, CallError<ConnectionsError>> {
    let status = response.status().as_u16();
    let mut result = Vec::new();
    while let Some(chunk) = response
        .chunk()
        .await
        .map_err(|error| CallError::transport_response(status, error))?
    {
        if chunk.len() > limit.saturating_sub(result.len()) {
            return Err(CallError::protocol_response(
                status,
                "response exceeds JSON size limit",
            ));
        }
        result.extend_from_slice(&chunk);
    }
    Ok(result)
}

async fn bounded_error_body<E>(
    mut response: reqwest::Response,
    limit: usize,
    status: u16,
    content_type: Option<String>,
) -> Result<(Vec<u8>, bool), CallError<E>> {
    let mut result = Vec::new();
    loop {
        let chunk = response.chunk().await.map_err(|error| {
            CallError::unreadable_remote(status, content_type.clone(), result.clone(), error)
        })?;
        let Some(chunk) = chunk else {
            return Ok((result, false));
        };
        let remaining = limit.saturating_sub(result.len());
        if chunk.len() > remaining {
            result.extend_from_slice(&chunk[..remaining]);
            return Ok((result, true));
        }
        result.extend_from_slice(&chunk);
    }
}
#[async_trait]
impl ConnectionsApi for ConnectionsClient {
    async fn create_connection(
        &self,
        auth_header: AuthHeader,
        request: CreateConnectionRequest,
    ) -> Result<CreateConnectionResponse, CallError<ConnectionsError>> {
        let response = Self::create_connection_http(self, auth_header, request).await?;
        Ok(response)
    }
    async fn drop_connection(
        &self,
        auth_header: AuthHeader,
        connection_id: Uuid,
    ) -> Result<DropResponse, CallError<ConnectionsError>> {
        let response = Self::drop_connection_http(self, auth_header, connection_id).await?;
        Ok(response)
    }
    async fn read_connection(
        &self,
        auth_header: AuthHeader,
        connection_id: Uuid,
    ) -> Result<ConnectionResponse, CallError<ConnectionsError>> {
        let response = Self::read_connection_http(self, auth_header, connection_id).await?;
        Ok(response)
    }
    async fn test_connection(
        &self,
        auth_header: AuthHeader,
        connection_id: Uuid,
    ) -> Result<TestResponse, CallError<ConnectionsError>> {
        let response = Self::test_connection_http(self, auth_header, connection_id).await?;
        Ok(response)
    }
    async fn update_allowed_access(
        &self,
        auth_header: AuthHeader,
        connection_id: Uuid,
        request: UpdateAllowedAccessRequest,
    ) -> Result<ConnectionResponse, CallError<ConnectionsError>> {
        let response =
            Self::update_allowed_access_http(self, auth_header, connection_id, request).await?;
        Ok(response)
    }
    async fn update_credential(
        &self,
        auth_header: AuthHeader,
        connection_id: Uuid,
        request: UpdateCredentialRequest,
    ) -> Result<ConnectionResponse, CallError<ConnectionsError>> {
        let response =
            Self::update_credential_http(self, auth_header, connection_id, request).await?;
        Ok(response)
    }
    async fn update_description(
        &self,
        auth_header: AuthHeader,
        connection_id: Uuid,
        request: UpdateDescriptionRequest,
    ) -> Result<ConnectionResponse, CallError<ConnectionsError>> {
        let response =
            Self::update_description_http(self, auth_header, connection_id, request).await?;
        Ok(response)
    }
    async fn vend_credential(
        &self,
        auth_header: AuthHeader,
        connection_id: Uuid,
        request: VendRequest,
    ) -> Result<VendResponse, CallError<ConnectionsError>> {
        let response =
            Self::vend_credential_http(self, auth_header, connection_id, request).await?;
        Ok(response)
    }
}