fix: retry on 401

src/stainless.ts

@@ -30,6 +30,29 @@ export function createAutoRefreshFetch(
   };
 }
 
+/**
+ * adds retries to a fetch function for 401 responses, as it seems that OIDC decode on the server can
+ * occasionally fail transiently
+ */
+export const addFetch401Retries = (
+  fetch: typeof globalThis.fetch,
+  { numRetries }: { numRetries: number },
+): typeof globalThis.fetch => {
+  return async (input, init) => {
+    let attempts = 0;
+    let response;
+    do {
+      response = await fetch(input, init);
+      if (response.status !== 401) {
+        break;
+      }
+      attempts++;
+      logger.warn("Received 401 response, retrying...");
+    } while (attempts <= numRetries);
+    return response;
+  };
+};
+
 export function getStainlessClient(
   action: string | undefined,
   opts: ClientOptions,

src/wrapAction.ts

@@ -1,7 +1,11 @@
 import Stainless from "@stainless-api/sdk";
 import { getInput } from "./compat/input";
 import { getStainlessAuth } from "./compat";
-import { createAutoRefreshFetch, getStainlessClient } from "./stainless";
+import {
+  addFetch401Retries,
+  createAutoRefreshFetch,
+  getStainlessClient,
+} from "./stainless";
 import { logger } from "./logger";
 
 const accumulatedBuildIds = new Set<string>();
@@ -33,7 +37,10 @@ export function wrapAction(
         apiKey: auth.key,
         logLevel: "warn",
         logger,
-        fetch: createAutoRefreshFetch(auth, getStainlessAuth),
+        fetch: addFetch401Retries(
+          createAutoRefreshFetch(auth, getStainlessAuth),
+          { numRetries: 2 },
+        ),
       });
       await fn(stainless);
       await maybeReportResult({