import * as Data from "effect/Data";import * as Effect from "effect/Effect";import * as Schema from "effect/Schema";import { HttpClient } from "effect/unstable/http";import { EnvironmentCloudEndpointUnavailableError, EnvironmentAuthInvalidError, EnvironmentHttpBadRequestError, EnvironmentHttpConflictError, EnvironmentHttpForbiddenError, EnvironmentHttpInternalServerError, EnvironmentHttpUnauthorizedError,} from "@t3tools/contracts";import { stripPairingTokenFromUrl } from "@t3tools/shared/remote";import { type RelayEnvironmentConnectResponse as RelayEnvironmentConnectResponseType, type RelayEnvironmentLinkResponse as RelayEnvironmentLinkResponseType, RelayEnvironmentConnectScope, RelayEnvironmentStatusScope, type RelayDpopAccessTokenScope, type RelayClientEnvironmentRecord, type RelayEnvironmentStatusResponse as RelayEnvironmentStatusResponseType, type RelayManagedEndpointProviderKind,} from "@t3tools/contracts/relay";import { exchangeRemoteDpopAccessToken } from "@t3tools/client-runtime/authorization";import { fetchRemoteEnvironmentDescriptor } from "@t3tools/client-runtime/environment";import { findErrorTraceId } from "@t3tools/client-runtime/errors";import { dpopFailureMessage, ManagedRelay, relayProtectedErrorMessage,} from "@t3tools/client-runtime/relay";import { makeEnvironmentHttpApiClient } from "@t3tools/client-runtime/rpc"; import { authClientMetadata } from "../../lib/authClientMetadata";import type { SavedRemoteConnection } from "../../lib/connection";import * as MobilePreferences from "../../persistence/mobile-preferences";import * as MobileStorage from "../../persistence/mobile-storage";import { resolveCloudPublicConfig } from "./publicConfig"; const RELAY_STATUS_AND_CONNECT_SCOPES = [ RelayEnvironmentStatusScope, RelayEnvironmentConnectScope,] satisfies ReadonlyArray<RelayDpopAccessTokenScope>; export function normalizeRelayBaseUrl(value: string | null | undefined): string | null { const trimmed = value?.trim(); if (!trimmed) { return null; } return trimmed.replace(/\/+$/g, "");} function readRelayUrl(): string | null { return resolveCloudPublicConfig().relay.url;} export class CloudEnvironmentLinkError extends Data.TaggedError("CloudEnvironmentLinkError")<{ readonly message: string; readonly cause?: unknown; readonly traceId?: string;}> {} export interface CloudEnvironmentRecordWithStatus { readonly environment: RelayClientEnvironmentRecord; readonly status: RelayEnvironmentStatusResponseType | null; readonly statusError: string | null;} const isEnvironmentCloudApiError = Schema.is( Schema.Union([ EnvironmentHttpBadRequestError, EnvironmentHttpUnauthorizedError, EnvironmentHttpForbiddenError, EnvironmentHttpConflictError, EnvironmentHttpInternalServerError, EnvironmentCloudEndpointUnavailableError, ]),);const isEnvironmentAuthInvalidError = Schema.is(EnvironmentAuthInvalidError); const MANAGED_ENDPOINT_PROVIDER_KIND = "cloudflare_tunnel" satisfies RelayManagedEndpointProviderKind; function cloudEnvironmentLinkError(message: string, options?: { readonly dpop?: boolean }) { return (cause: unknown) => { const environmentError = findEnvironmentCloudApiError(cause); const traceId = findErrorTraceId(cause); const dpopAuthError = options?.dpop ? findEnvironmentAuthInvalidError(cause) : null; const detail = environmentError ? `${message.replace(/[.:]$/, "")}: ${environmentError.message}` : withDevCause(message, cause); return new CloudEnvironmentLinkError({ message: dpopAuthError?.reason === "invalid_credential" ? dpopFailureMessage(detail, dpopAuthError.dpopFailureReason) : detail, cause, ...(traceId === null ? {} : { traceId }), }); };} function isDevRuntime(): boolean { return typeof __DEV__ !== "undefined" && __DEV__;} function causeMessage(cause: unknown): string | null { if (cause instanceof Error && cause.message) { return cause.message; } if (typeof cause === "object" && cause !== null) { const record = cause as { readonly message?: unknown; readonly cause?: unknown }; if (typeof record.message === "string" && record.message.length > 0) { const nested = causeMessage(record.cause); return nested ? `${record.message}: ${nested}` : record.message; } } return null;} function withDevCause(message: string, cause: unknown): string { if (!isDevRuntime()) { return message; } const detail = causeMessage(cause); return detail ? `${message} (${detail})` : message;} function decodedRelayClientError(message: string) { return (cause: ManagedRelay.ManagedRelayClientError) => { const relayError = cause._tag === "ManagedRelayRequestFailedError" ? cause.relayError : undefined; const traceId = cause._tag === "ManagedRelayRequestFailedError" ? cause.traceId : undefined; const detail = relayError ? relayProtectedErrorMessage(relayError) : null; return new CloudEnvironmentLinkError({ message: detail ? `${message}: ${detail}` : message, cause, ...(traceId ? { traceId } : {}), }); };} function findEnvironmentCloudApiError(cause: unknown): { readonly message: string } | null { if (isEnvironmentCloudApiError(cause)) { return cause; } if (typeof cause !== "object" || cause === null) { return null; } return "cause" in cause ? findEnvironmentCloudApiError(cause.cause) : null;} function findEnvironmentAuthInvalidError(cause: unknown): EnvironmentAuthInvalidError | null { if (isEnvironmentAuthInvalidError(cause)) { return cause; } if (typeof cause !== "object" || cause === null) { return null; } return "cause" in cause ? findEnvironmentAuthInvalidError(cause.cause) : null;} function requireRelayUrl(): Effect.Effect<string, CloudEnvironmentLinkError> { const relayUrl = readRelayUrl(); return relayUrl ? Effect.succeed(relayUrl) : Effect.fail(new CloudEnvironmentLinkError({ message: "Relay URL is not configured." }));} function endpointOrigin(httpBaseUrl: string) { const url = new URL(httpBaseUrl); return { localHttpHost: "127.0.0.1", localHttpPort: Number(url.port || (url.protocol === "https:" ? 443 : 80)), };} function ensureLinkedEnvironmentMatches(input: { readonly expectedEnvironmentId: string; readonly expectedProviderKind: RelayManagedEndpointProviderKind; readonly link: RelayEnvironmentLinkResponseType;}): Effect.Effect<void, CloudEnvironmentLinkError> { if (input.link.environmentId !== input.expectedEnvironmentId) { return new CloudEnvironmentLinkError({ message: "Relay returned credentials for a different environment.", }); } if (input.link.endpoint.providerKind !== input.expectedProviderKind) { return new CloudEnvironmentLinkError({ message: "Relay returned credentials for a different endpoint provider.", }); } return Effect.void;} function endpointMatches( left: RelayClientEnvironmentRecord["endpoint"], right: RelayClientEnvironmentRecord["endpoint"],): boolean { return ( left.httpBaseUrl === right.httpBaseUrl && left.wsBaseUrl === right.wsBaseUrl && left.providerKind === right.providerKind );} function ensureStatusMatchesEnvironment(input: { readonly environment: RelayClientEnvironmentRecord; readonly status: RelayEnvironmentStatusResponseType;}): Effect.Effect<void, CloudEnvironmentLinkError> { if (input.status.environmentId !== input.environment.environmentId) { return new CloudEnvironmentLinkError({ message: "Relay returned status for a different environment.", }); } if (!endpointMatches(input.status.endpoint, input.environment.endpoint)) { return new CloudEnvironmentLinkError({ message: "Relay returned status for a different endpoint.", }); } if ( input.status.descriptor && input.status.descriptor.environmentId !== input.environment.environmentId ) { return new CloudEnvironmentLinkError({ message: "Relay returned status descriptor for a different environment.", }); } return Effect.void;} function ensureConnectEndpointMatchesEnvironment(input: { readonly environment: RelayClientEnvironmentRecord; readonly connect: RelayEnvironmentConnectResponseType;}): Effect.Effect<void, CloudEnvironmentLinkError> { if (!endpointMatches(input.connect.endpoint, input.environment.endpoint)) { return new CloudEnvironmentLinkError({ message: "Relay returned credentials for a different endpoint.", }); } return Effect.void;} interface LinkEnvironmentToCloudInput { readonly connection: SavedRemoteConnection; readonly clerkToken: string;} type LinkEnvironmentToCloudRequirements = | HttpClient.HttpClient | ManagedRelay.ManagedRelayClient | MobileStorage.MobileStorage; export function linkEnvironmentToCloudWithPreference( input: LinkEnvironmentToCloudInput & { readonly liveActivitiesEnabled: boolean },): Effect.Effect<void, CloudEnvironmentLinkError, LinkEnvironmentToCloudRequirements> { return Effect.gen(function* () { if (!input.connection.bearerToken) { return yield* new CloudEnvironmentLinkError({ message: "Only a locally paired bearer connection can be linked to the cloud.", }); } const localBearerToken = input.connection.bearerToken; const relayUrl = yield* requireRelayUrl(); const relayClient = yield* ManagedRelay.ManagedRelayClient; const storage = yield* MobileStorage.MobileStorage; const deviceId = yield* storage.loadOrCreateAgentAwarenessDeviceId.pipe( Effect.mapError(cloudEnvironmentLinkError("Could not load the mobile device id.")), ); const liveActivitiesEnabled = input.liveActivitiesEnabled; const challenge = yield* relayClient .createEnvironmentLinkChallenge({ clerkToken: input.clerkToken, payload: { notificationsEnabled: true, liveActivitiesEnabled, managedTunnelsEnabled: true, }, }) .pipe( Effect.mapError( decodedRelayClientError(`${relayUrl}/v1/client/environment-link-challenges failed`), ), ); const environmentClient = yield* makeEnvironmentHttpApiClient(input.connection.httpBaseUrl); const proof = yield* environmentClient.connect .linkProof({ headers: { authorization: `Bearer ${localBearerToken}` }, payload: { challenge: challenge.challenge, relayIssuer: relayUrl, endpoint: { httpBaseUrl: input.connection.httpBaseUrl, wsBaseUrl: input.connection.wsBaseUrl, providerKind: MANAGED_ENDPOINT_PROVIDER_KIND, }, origin: endpointOrigin(input.connection.httpBaseUrl), }, }) .pipe(Effect.mapError(cloudEnvironmentLinkError("Could not obtain environment link proof."))); const link = yield* relayClient .linkEnvironment({ clerkToken: input.clerkToken, payload: { deviceId, proof, notificationsEnabled: true, liveActivitiesEnabled, managedTunnelsEnabled: true, }, }) .pipe( Effect.mapError(decodedRelayClientError(`${relayUrl}/v1/client/environment-links failed`)), ); yield* ensureLinkedEnvironmentMatches({ expectedEnvironmentId: input.connection.environmentId, expectedProviderKind: MANAGED_ENDPOINT_PROVIDER_KIND, link, }); yield* environmentClient.connect .relayConfig({ headers: { authorization: `Bearer ${localBearerToken}` }, payload: { relayUrl, relayIssuer: link.relayIssuer, cloudUserId: link.cloudUserId, environmentCredential: link.environmentCredential, cloudMintPublicKey: link.cloudMintPublicKey, endpointRuntime: link.endpointRuntime, }, }) .pipe( Effect.mapError(cloudEnvironmentLinkError("Could not configure environment relay access.")), ); });} export function linkEnvironmentToCloud( input: LinkEnvironmentToCloudInput,): Effect.Effect< void, CloudEnvironmentLinkError, LinkEnvironmentToCloudRequirements | MobilePreferences.MobilePreferencesStore> { return MobilePreferences.MobilePreferencesStore.pipe( Effect.flatMap((preferencesStore) => preferencesStore.load), Effect.mapError(cloudEnvironmentLinkError("Could not load mobile notification preferences.")), Effect.flatMap((preferences) => linkEnvironmentToCloudWithPreference({ ...input, liveActivitiesEnabled: preferences.liveActivitiesEnabled !== false, }), ), );} export function listCloudEnvironments(input: { readonly clerkToken: string;}): Effect.Effect< ReadonlyArray<RelayClientEnvironmentRecord>, CloudEnvironmentLinkError, ManagedRelay.ManagedRelayClient> { return Effect.gen(function* () { const relayUrl = yield* requireRelayUrl(); const relayClient = yield* ManagedRelay.ManagedRelayClient; return yield* relayClient .listEnvironments({ clerkToken: input.clerkToken, }) .pipe(Effect.mapError(decodedRelayClientError(`${relayUrl}/v1/environments failed`))); });} export function getCloudEnvironmentStatus(input: { readonly clerkToken: string; readonly environment: RelayClientEnvironmentRecord; readonly relayScopes?: ReadonlyArray<RelayDpopAccessTokenScope>;}): Effect.Effect< RelayEnvironmentStatusResponseType, CloudEnvironmentLinkError, ManagedRelay.ManagedRelayClient> { return Effect.gen(function* () { const relayUrl = yield* requireRelayUrl(); const relayClient = yield* ManagedRelay.ManagedRelayClient; const status = yield* relayClient .getEnvironmentStatus({ clerkToken: input.clerkToken, scopes: input.relayScopes ?? [RelayEnvironmentStatusScope], environmentId: input.environment.environmentId, }) .pipe( Effect.mapError( decodedRelayClientError( `${relayUrl}/v1/environments/${encodeURIComponent(input.environment.environmentId)}/status failed`, ), ), ); yield* ensureStatusMatchesEnvironment({ environment: input.environment, status }); return status; });} export function cloudEnvironmentsPendingStatus( environments: ReadonlyArray<RelayClientEnvironmentRecord>,): ReadonlyArray<CloudEnvironmentRecordWithStatus> { return environments.map((environment) => ({ environment, status: null, statusError: "Checking status...", }));} export function loadCloudEnvironmentStatuses(input: { readonly clerkToken: string; readonly environments: ReadonlyArray<RelayClientEnvironmentRecord>;}): Effect.Effect< ReadonlyArray<CloudEnvironmentRecordWithStatus>, CloudEnvironmentLinkError, ManagedRelay.ManagedRelayClient> { return Effect.forEach( input.environments, (environment) => getCloudEnvironmentStatus({ clerkToken: input.clerkToken, environment, relayScopes: RELAY_STATUS_AND_CONNECT_SCOPES, }).pipe( Effect.match({ onFailure: (error) => ({ environment, status: null, statusError: error.message, }), onSuccess: (status) => ({ environment, status, statusError: null, }), }), ), { concurrency: "unbounded" }, );} export function listCloudEnvironmentsWithStatus(input: { readonly clerkToken: string;}): Effect.Effect< ReadonlyArray<CloudEnvironmentRecordWithStatus>, CloudEnvironmentLinkError, ManagedRelay.ManagedRelayClient> { return Effect.gen(function* () { const environments = yield* listCloudEnvironments(input); return yield* loadCloudEnvironmentStatuses({ clerkToken: input.clerkToken, environments, }); });} const loadAgentAwarenessDeviceId = Effect.fn("mobile.cloud.loadAgentAwarenessDeviceId")( function* () { const storage = yield* MobileStorage.MobileStorage; return yield* storage.loadOrCreateAgentAwarenessDeviceId.pipe( Effect.mapError(cloudEnvironmentLinkError("Could not load the mobile device id.")), ); },); const connectRelayManagedEnvironment = Effect.fn("mobile.cloud.connectRelayManagedEnvironment")( function* (input: { readonly clerkToken: string; readonly environmentId: RelayClientEnvironmentRecord["environmentId"]; readonly expectedEnvironment?: RelayClientEnvironmentRecord; }) { yield* Effect.annotateCurrentSpan({ "environment.id": input.environmentId }); const relayUrl = yield* requireRelayUrl(); const relayClient = yield* ManagedRelay.ManagedRelayClient; const deviceId = yield* loadAgentAwarenessDeviceId(); const connect = yield* relayClient .connectEnvironment({ clerkToken: input.clerkToken, scopes: [RelayEnvironmentConnectScope], environmentId: input.environmentId, deviceId, }) .pipe( Effect.mapError( decodedRelayClientError( `${relayUrl}/v1/environments/${encodeURIComponent(input.environmentId)}/connect failed`, ), ), );Lines 1–500 of 595. Load more
import * as Data from "effect/Data"; import * as Effect from "effect/Effect"; import * as Schema from "effect/Schema"; import { HttpClient } from "effect/unstable/http"; import { EnvironmentCloudEndpointUnavailableError, EnvironmentAuthInvalidError, EnvironmentHttpBadRequestError, EnvironmentHttpConflictError, EnvironmentHttpForbiddenError, EnvironmentHttpInternalServerError, EnvironmentHttpUnauthorizedError, } from "@t3tools/contracts"; import { stripPairingTokenFromUrl } from "@t3tools/shared/remote"; import { type RelayEnvironmentConnectResponse as RelayEnvironmentConnectResponseType, type RelayEnvironmentLinkResponse as RelayEnvironmentLinkResponseType, RelayEnvironmentConnectScope, RelayEnvironmentStatusScope, type RelayDpopAccessTokenScope, type RelayClientEnvironmentRecord, type RelayEnvironmentStatusResponse as RelayEnvironmentStatusResponseType, type RelayManagedEndpointProviderKind, } from "@t3tools/contracts/relay"; import { exchangeRemoteDpopAccessToken } from "@t3tools/client-runtime/authorization"; import { fetchRemoteEnvironmentDescriptor } from "@t3tools/client-runtime/environment"; import { findErrorTraceId } from "@t3tools/client-runtime/errors"; import { dpopFailureMessage, ManagedRelay, relayProtectedErrorMessage, } from "@t3tools/client-runtime/relay"; import { makeEnvironmentHttpApiClient } from "@t3tools/client-runtime/rpc"; import { authClientMetadata } from "../../lib/authClientMetadata"; import type { SavedRemoteConnection } from "../../lib/connection"; import * as MobilePreferences from "../../persistence/mobile-preferences"; import * as MobileStorage from "../../persistence/mobile-storage"; import { resolveCloudPublicConfig } from "./publicConfig"; const RELAY_STATUS_AND_CONNECT_SCOPES = [ RelayEnvironmentStatusScope, RelayEnvironmentConnectScope, ] satisfies ReadonlyArray<RelayDpopAccessTokenScope>; export function normalizeRelayBaseUrl(value: string | null | undefined): string | null { const trimmed = value?.trim(); if (!trimmed) { return null; } return trimmed.replace(/\/+$/g, ""); } function readRelayUrl(): string | null { return resolveCloudPublicConfig().relay.url; } export class CloudEnvironmentLinkError extends Data.TaggedError("CloudEnvironmentLinkError")<{ readonly message: string; readonly cause?: unknown; readonly traceId?: string; }> {} export interface CloudEnvironmentRecordWithStatus { readonly environment: RelayClientEnvironmentRecord; readonly status: RelayEnvironmentStatusResponseType | null; readonly statusError: string | null; } const isEnvironmentCloudApiError = Schema.is( Schema.Union([ EnvironmentHttpBadRequestError, EnvironmentHttpUnauthorizedError, EnvironmentHttpForbiddenError, EnvironmentHttpConflictError, EnvironmentHttpInternalServerError, EnvironmentCloudEndpointUnavailableError, ]), ); const isEnvironmentAuthInvalidError = Schema.is(EnvironmentAuthInvalidError); const MANAGED_ENDPOINT_PROVIDER_KIND = "cloudflare_tunnel" satisfies RelayManagedEndpointProviderKind; function cloudEnvironmentLinkError(message: string, options?: { readonly dpop?: boolean }) { return (cause: unknown) => { const environmentError = findEnvironmentCloudApiError(cause); const traceId = findErrorTraceId(cause); const dpopAuthError = options?.dpop ? findEnvironmentAuthInvalidError(cause) : null; const detail = environmentError ? `${message.replace(/[.:]$/, "")}: ${environmentError.message}` : withDevCause(message, cause); return new CloudEnvironmentLinkError({ message: dpopAuthError?.reason === "invalid_credential" ? dpopFailureMessage(detail, dpopAuthError.dpopFailureReason) : detail, cause, ...(traceId === null ? {} : { traceId }), }); }; } function isDevRuntime(): boolean { return typeof __DEV__ !== "undefined" && __DEV__; } function causeMessage(cause: unknown): string | null { if (cause instanceof Error && cause.message) { return cause.message; } if (typeof cause === "object" && cause !== null) { const record = cause as { readonly message?: unknown; readonly cause?: unknown }; if (typeof record.message === "string" && record.message.length > 0) { const nested = causeMessage(record.cause); return nested ? `${record.message}: ${nested}` : record.message; } } return null; } function withDevCause(message: string, cause: unknown): string { if (!isDevRuntime()) { return message; } const detail = causeMessage(cause); return detail ? `${message} (${detail})` : message; } function decodedRelayClientError(message: string) { return (cause: ManagedRelay.ManagedRelayClientError) => { const relayError = cause._tag === "ManagedRelayRequestFailedError" ? cause.relayError : undefined; const traceId = cause._tag === "ManagedRelayRequestFailedError" ? cause.traceId : undefined; const detail = relayError ? relayProtectedErrorMessage(relayError) : null; return new CloudEnvironmentLinkError({ message: detail ? `${message}: ${detail}` : message, cause, ...(traceId ? { traceId } : {}), }); }; } function findEnvironmentCloudApiError(cause: unknown): { readonly message: string } | null { if (isEnvironmentCloudApiError(cause)) { return cause; } if (typeof cause !== "object" || cause === null) { return null; } return "cause" in cause ? findEnvironmentCloudApiError(cause.cause) : null; } function findEnvironmentAuthInvalidError(cause: unknown): EnvironmentAuthInvalidError | null { if (isEnvironmentAuthInvalidError(cause)) { return cause; } if (typeof cause !== "object" || cause === null) { return null; } return "cause" in cause ? findEnvironmentAuthInvalidError(cause.cause) : null; } function requireRelayUrl(): Effect.Effect<string, CloudEnvironmentLinkError> { const relayUrl = readRelayUrl(); return relayUrl ? Effect.succeed(relayUrl) : Effect.fail(new CloudEnvironmentLinkError({ message: "Relay URL is not configured." })); } function endpointOrigin(httpBaseUrl: string) { const url = new URL(httpBaseUrl); return { localHttpHost: "127.0.0.1", localHttpPort: Number(url.port || (url.protocol === "https:" ? 443 : 80)), }; } function ensureLinkedEnvironmentMatches(input: { readonly expectedEnvironmentId: string; readonly expectedProviderKind: RelayManagedEndpointProviderKind; readonly link: RelayEnvironmentLinkResponseType; }): Effect.Effect<void, CloudEnvironmentLinkError> { if (input.link.environmentId !== input.expectedEnvironmentId) { return new CloudEnvironmentLinkError({ message: "Relay returned credentials for a different environment.", }); } if (input.link.endpoint.providerKind !== input.expectedProviderKind) { return new CloudEnvironmentLinkError({ message: "Relay returned credentials for a different endpoint provider.", }); } return Effect.void; } function endpointMatches( left: RelayClientEnvironmentRecord["endpoint"], right: RelayClientEnvironmentRecord["endpoint"], ): boolean { return ( left.httpBaseUrl === right.httpBaseUrl && left.wsBaseUrl === right.wsBaseUrl && left.providerKind === right.providerKind ); } function ensureStatusMatchesEnvironment(input: { readonly environment: RelayClientEnvironmentRecord; readonly status: RelayEnvironmentStatusResponseType; }): Effect.Effect<void, CloudEnvironmentLinkError> { if (input.status.environmentId !== input.environment.environmentId) { return new CloudEnvironmentLinkError({ message: "Relay returned status for a different environment.", }); } if (!endpointMatches(input.status.endpoint, input.environment.endpoint)) { return new CloudEnvironmentLinkError({ message: "Relay returned status for a different endpoint.", }); } if ( input.status.descriptor && input.status.descriptor.environmentId !== input.environment.environmentId ) { return new CloudEnvironmentLinkError({ message: "Relay returned status descriptor for a different environment.", }); } return Effect.void; } function ensureConnectEndpointMatchesEnvironment(input: { readonly environment: RelayClientEnvironmentRecord; readonly connect: RelayEnvironmentConnectResponseType; }): Effect.Effect<void, CloudEnvironmentLinkError> { if (!endpointMatches(input.connect.endpoint, input.environment.endpoint)) { return new CloudEnvironmentLinkError({ message: "Relay returned credentials for a different endpoint.", }); } return Effect.void; } interface LinkEnvironmentToCloudInput { readonly connection: SavedRemoteConnection; readonly clerkToken: string; } type LinkEnvironmentToCloudRequirements = | HttpClient.HttpClient | ManagedRelay.ManagedRelayClient | MobileStorage.MobileStorage; export function linkEnvironmentToCloudWithPreference( input: LinkEnvironmentToCloudInput & { readonly liveActivitiesEnabled: boolean }, ): Effect.Effect<void, CloudEnvironmentLinkError, LinkEnvironmentToCloudRequirements> { return Effect.gen(function* () { if (!input.connection.bearerToken) { return yield* new CloudEnvironmentLinkError({ message: "Only a locally paired bearer connection can be linked to the cloud.", }); } const localBearerToken = input.connection.bearerToken; const relayUrl = yield* requireRelayUrl(); const relayClient = yield* ManagedRelay.ManagedRelayClient; const storage = yield* MobileStorage.MobileStorage; const deviceId = yield* storage.loadOrCreateAgentAwarenessDeviceId.pipe( Effect.mapError(cloudEnvironmentLinkError("Could not load the mobile device id.")), ); const liveActivitiesEnabled = input.liveActivitiesEnabled; const challenge = yield* relayClient .createEnvironmentLinkChallenge({ clerkToken: input.clerkToken, payload: { notificationsEnabled: true, liveActivitiesEnabled, managedTunnelsEnabled: true, }, }) .pipe( Effect.mapError( decodedRelayClientError(`${relayUrl}/v1/client/environment-link-challenges failed`), ), ); const environmentClient = yield* makeEnvironmentHttpApiClient(input.connection.httpBaseUrl); const proof = yield* environmentClient.connect .linkProof({ headers: { authorization: `Bearer ${localBearerToken}` }, payload: { challenge: challenge.challenge, relayIssuer: relayUrl, endpoint: { httpBaseUrl: input.connection.httpBaseUrl, wsBaseUrl: input.connection.wsBaseUrl, providerKind: MANAGED_ENDPOINT_PROVIDER_KIND, }, origin: endpointOrigin(input.connection.httpBaseUrl), }, }) .pipe(Effect.mapError(cloudEnvironmentLinkError("Could not obtain environment link proof."))); const link = yield* relayClient .linkEnvironment({ clerkToken: input.clerkToken, payload: { deviceId, proof, notificationsEnabled: true, liveActivitiesEnabled, managedTunnelsEnabled: true, }, }) .pipe( Effect.mapError(decodedRelayClientError(`${relayUrl}/v1/client/environment-links failed`)), ); yield* ensureLinkedEnvironmentMatches({ expectedEnvironmentId: input.connection.environmentId, expectedProviderKind: MANAGED_ENDPOINT_PROVIDER_KIND, link, }); yield* environmentClient.connect .relayConfig({ headers: { authorization: `Bearer ${localBearerToken}` }, payload: { relayUrl, relayIssuer: link.relayIssuer, cloudUserId: link.cloudUserId, environmentCredential: link.environmentCredential, cloudMintPublicKey: link.cloudMintPublicKey, endpointRuntime: link.endpointRuntime, }, }) .pipe( Effect.mapError(cloudEnvironmentLinkError("Could not configure environment relay access.")), ); }); } export function linkEnvironmentToCloud( input: LinkEnvironmentToCloudInput, ): Effect.Effect< void, CloudEnvironmentLinkError, LinkEnvironmentToCloudRequirements | MobilePreferences.MobilePreferencesStore > { return MobilePreferences.MobilePreferencesStore.pipe( Effect.flatMap((preferencesStore) => preferencesStore.load), Effect.mapError(cloudEnvironmentLinkError("Could not load mobile notification preferences.")), Effect.flatMap((preferences) => linkEnvironmentToCloudWithPreference({ ...input, liveActivitiesEnabled: preferences.liveActivitiesEnabled !== false, }), ), ); } export function listCloudEnvironments(input: { readonly clerkToken: string; }): Effect.Effect< ReadonlyArray<RelayClientEnvironmentRecord>, CloudEnvironmentLinkError, ManagedRelay.ManagedRelayClient > { return Effect.gen(function* () { const relayUrl = yield* requireRelayUrl(); const relayClient = yield* ManagedRelay.ManagedRelayClient; return yield* relayClient .listEnvironments({ clerkToken: input.clerkToken, }) .pipe(Effect.mapError(decodedRelayClientError(`${relayUrl}/v1/environments failed`))); }); } export function getCloudEnvironmentStatus(input: { readonly clerkToken: string; readonly environment: RelayClientEnvironmentRecord; readonly relayScopes?: ReadonlyArray<RelayDpopAccessTokenScope>; }): Effect.Effect< RelayEnvironmentStatusResponseType, CloudEnvironmentLinkError, ManagedRelay.ManagedRelayClient > { return Effect.gen(function* () { const relayUrl = yield* requireRelayUrl(); const relayClient = yield* ManagedRelay.ManagedRelayClient; const status = yield* relayClient .getEnvironmentStatus({ clerkToken: input.clerkToken, scopes: input.relayScopes ?? [RelayEnvironmentStatusScope], environmentId: input.environment.environmentId, }) .pipe( Effect.mapError( decodedRelayClientError( `${relayUrl}/v1/environments/${encodeURIComponent(input.environment.environmentId)}/status failed`, ), ), ); yield* ensureStatusMatchesEnvironment({ environment: input.environment, status }); return status; }); } export function cloudEnvironmentsPendingStatus( environments: ReadonlyArray<RelayClientEnvironmentRecord>, ): ReadonlyArray<CloudEnvironmentRecordWithStatus> { return environments.map((environment) => ({ environment, status: null, statusError: "Checking status...", })); } export function loadCloudEnvironmentStatuses(input: { readonly clerkToken: string; readonly environments: ReadonlyArray<RelayClientEnvironmentRecord>; }): Effect.Effect< ReadonlyArray<CloudEnvironmentRecordWithStatus>, CloudEnvironmentLinkError, ManagedRelay.ManagedRelayClient > { return Effect.forEach( input.environments, (environment) => getCloudEnvironmentStatus({ clerkToken: input.clerkToken, environment, relayScopes: RELAY_STATUS_AND_CONNECT_SCOPES, }).pipe( Effect.match({ onFailure: (error) => ({ environment, status: null, statusError: error.message, }), onSuccess: (status) => ({ environment, status, statusError: null, }), }), ), { concurrency: "unbounded" }, ); } export function listCloudEnvironmentsWithStatus(input: { readonly clerkToken: string; }): Effect.Effect< ReadonlyArray<CloudEnvironmentRecordWithStatus>, CloudEnvironmentLinkError, ManagedRelay.ManagedRelayClient > { return Effect.gen(function* () { const environments = yield* listCloudEnvironments(input); return yield* loadCloudEnvironmentStatuses({ clerkToken: input.clerkToken, environments, }); }); } const loadAgentAwarenessDeviceId = Effect.fn("mobile.cloud.loadAgentAwarenessDeviceId")( function* () { const storage = yield* MobileStorage.MobileStorage; return yield* storage.loadOrCreateAgentAwarenessDeviceId.pipe( Effect.mapError(cloudEnvironmentLinkError("Could not load the mobile device id.")), ); }, ); const connectRelayManagedEnvironment = Effect.fn("mobile.cloud.connectRelayManagedEnvironment")( function* (input: { readonly clerkToken: string; readonly environmentId: RelayClientEnvironmentRecord["environmentId"]; readonly expectedEnvironment?: RelayClientEnvironmentRecord; }) { yield* Effect.annotateCurrentSpan({ "environment.id": input.environmentId }); const relayUrl = yield* requireRelayUrl(); const relayClient = yield* ManagedRelay.ManagedRelayClient; const deviceId = yield* loadAgentAwarenessDeviceId(); const connect = yield* relayClient .connectEnvironment({ clerkToken: input.clerkToken, scopes: [RelayEnvironmentConnectScope], environmentId: input.environmentId, deviceId, }) .pipe( Effect.mapError( decodedRelayClientError( `${relayUrl}/v1/environments/${encodeURIComponent(input.environmentId)}/connect failed`, ), ), );