@37signals/basecamp 0.11.0 → 0.12.0

package/dist/client.d.ts

@@ -33,6 +33,10 @@ import { ClientApprovalsService } from "./generated/services/client-approvals.js
 import { ClientCorrespondencesService } from "./generated/services/client-correspondences.js";
 import { ClientRepliesService } from "./generated/services/client-replies.js";
 import { WebhooksService } from "./generated/services/webhooks.js";
+import { BookmarksService } from "./generated/services/bookmarks.js";
+import { DraftsService } from "./generated/services/drafts.js";
+import { CalendarsService } from "./generated/services/calendars.js";
+import { MyNotesService } from "./generated/services/my-notes.js";
 import { SubscriptionsService } from "./generated/services/subscriptions.js";
 import { AttachmentsService } from "./generated/services/attachments.js";
 import { VaultsService } from "./generated/services/vaults.js";
@@ -119,6 +123,14 @@ export interface BasecampClient extends RawClient {
     readonly clientReplies: ClientRepliesService;
     /** Webhooks service - create, update, delete webhooks */
     readonly webhooks: WebhooksService;
+    /** Bookmarks service - the current user's personal bookmarks */
+    readonly bookmarks: BookmarksService;
+    /** Drafts service - the current user's unpublished drafts */
+    readonly drafts: DraftsService;
+    /** Calendars service - per-account calendars (show + update) */
+    readonly calendars: CalendarsService;
+    /** MyNotes service - the current user's scratchpad note */
+    readonly myNotes: MyNotesService;
     /** Subscriptions service - manage notification subscriptions */
     readonly subscriptions: SubscriptionsService;
     /** Attachments service - upload files for embedding in rich text */
@@ -200,8 +212,8 @@ export interface BasecampClientOptions {
     /** Maximum pages to follow during auto-pagination (defaults to 10,000) */
     maxPages?: number;
 }
-export declare const VERSION = "0.11.0";
-export declare const API_VERSION = "2026-07-30";
+export declare const VERSION = "0.12.0";
+export declare const API_VERSION = "2026-07-31";
 /**
  * Creates a type-safe Basecamp API client with built-in middleware for:
  * - Authentication (Bearer token)

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,YAAiC,MAAM,eAAe,CAAC;AAC9D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAGnD,OAAO,KAAK,EAAE,aAAa,EAA8B,MAAM,YAAY,CAAC;AAG5E,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,KAAK,YAAY,EAAc,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAKvE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAKlF,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAGnE,YAAY,EAAE,KAAK,EAAE,CAAC;AAStB;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAE/D;;;GAGG;AACH,MAAM,WAAW,cAAe,SAAQ,SAAS;IAC/C,yDAAyD;IACzD,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;IAM/B,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,oEAAoE;IACpE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,kDAAkD;IAClD,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;IACjD,2EAA2E;IAC3E,QAAQ,CAAC,qBAAqB,EAAE,4BAA4B,CAAC;IAC7D,2DAA2D;IAC3D,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,gEAAgE;IAChE,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,qDAAqD;IACrD,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,oDAAoD;IACpD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,oDAAoD;IACpD,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,mDAAmD;IACnD,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,+DAA+D;IAC/D,QAAQ,CAAC,cAAc,EAAE,qBAAqB,CAAC;IAC/C,gDAAgD;IAChD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,8CAA8C;IAC9C,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,2DAA2D;IAC3D,QAAQ,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;IACnD,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,8DAA8D;IAC9D,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,8DAA8D;IAC9D,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;IACjD,+DAA+D;IAC/D,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACtD;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAE7D;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B,mFAAmF;IACnF,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,0DAA0D;IAC1D,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,OAAO,WAAW,CAAC;AAChC,eAAO,MAAM,WAAW,eAAe,CAAC;AAGxC;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,cAAc,CA4MnF;AA4XD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAiHpD;AAuMD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,aAAa,CAAC,CAAC,EACnC,eAAe,EAAE,QAAQ,EACzB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,EAC3C,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,CAAC,EAAE,CAAC,CA4Bd;AAED;;;;;;;;;;GAUG;AACH,wBAAuB,WAAW,CAAC,CAAC,EAClC,eAAe,EAAE,QAAQ,EACzB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,EAC3C,UAAU,CAAC,EAAE,MAAM,GAClB,cAAc,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAyBpC;AAGD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,YAAiC,MAAM,eAAe,CAAC;AAC9D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAGnD,OAAO,KAAK,EAAE,aAAa,EAAiB,MAAM,YAAY,CAAC;AAG/D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,KAAK,YAAY,EAAc,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAKvE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAC9F,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAKlF,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAGnE,YAAY,EAAE,KAAK,EAAE,CAAC;AAStB;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAE/D;;;GAGG;AACH,MAAM,WAAW,cAAe,SAAQ,SAAS;IAC/C,yDAAyD;IACzD,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;IAM/B,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,oEAAoE;IACpE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,kDAAkD;IAClD,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;IACjD,2EAA2E;IAC3E,QAAQ,CAAC,qBAAqB,EAAE,4BAA4B,CAAC;IAC7D,2DAA2D;IAC3D,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IAErC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAE/B,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IAErC,2DAA2D;IAC3D,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAEjC,gEAAgE;IAChE,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,qDAAqD;IACrD,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,oDAAoD;IACpD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,oDAAoD;IACpD,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,mDAAmD;IACnD,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,+DAA+D;IAC/D,QAAQ,CAAC,cAAc,EAAE,qBAAqB,CAAC;IAC/C,gDAAgD;IAChD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,8CAA8C;IAC9C,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,2DAA2D;IAC3D,QAAQ,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;IACnD,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,8DAA8D;IAC9D,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,8DAA8D;IAC9D,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;IACjD,+DAA+D;IAC/D,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACtD;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAE7D;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B,mFAAmF;IACnF,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,0DAA0D;IAC1D,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,OAAO,WAAW,CAAC;AAChC,eAAO,MAAM,WAAW,eAAe,CAAC;AAGxC;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,cAAc,CAkNnF;AAyWD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAiHpD;AAoPD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,aAAa,CAAC,CAAC,EACnC,eAAe,EAAE,QAAQ,EACzB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,EAC3C,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,CAAC,EAAE,CAAC,CA4Bd;AAED;;;;;;;;;;GAUG;AACH,wBAAuB,WAAW,CAAC,CAAC,EAClC,eAAe,EAAE,QAAQ,EACzB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,EAC3C,UAAU,CAAC,EAAE,MAAM,GAClB,cAAc,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAyBpC;AAGD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC"}

package/dist/client.js

@@ -38,6 +38,10 @@ import { ClientApprovalsService } from "./generated/services/client-approvals.js
 import { ClientCorrespondencesService } from "./generated/services/client-correspondences.js";
 import { ClientRepliesService } from "./generated/services/client-replies.js";
 import { WebhooksService } from "./generated/services/webhooks.js";
+import { BookmarksService } from "./generated/services/bookmarks.js";
+import { DraftsService } from "./generated/services/drafts.js";
+import { CalendarsService } from "./generated/services/calendars.js";
+import { MyNotesService } from "./generated/services/my-notes.js";
 import { SubscriptionsService } from "./generated/services/subscriptions.js";
 import { AttachmentsService } from "./generated/services/attachments.js";
 import { VaultsService } from "./generated/services/vaults.js";
@@ -72,8 +76,8 @@ import { AuthorizationService } from "./services/authorization.js";
  * a TimeoutOverflowWarning rather than honored.
  */
 const MAX_TIMEOUT_MS = 2_147_483_647;
-export const VERSION = "0.11.0";
-export const API_VERSION = "2026-07-30";
+export const VERSION = "0.12.0";
+export const API_VERSION = "2026-07-31";
 const DEFAULT_USER_AGENT = `basecamp-sdk-ts/${VERSION} (api:${API_VERSION})`;
 /**
  * Creates a type-safe Basecamp API client with built-in middleware for:
@@ -130,28 +134,31 @@ export function createBasecampClient(options) {
             throw new BasecampError("usage", `Invalid base URL: ${baseUrl}`);
         }
     }
-    const client = createClient({ baseUrl });
-    // Apply middleware in order: auth, lifecycle, cache, retry.
+    // One lifecycle, shared between the retrying fetch and the lifecycle
+    // middleware: the fetch owns every attempt's start and each abandoned
+    // attempt's end; the middleware finalizes the terminal outcome.
+    const lifecycle = new RequestLifecycle(hooks);
+    // The retry loop lives BENEATH the middleware chain, as the client's custom
+    // fetch: openapi-fetch calls it exactly once per logical request, after every
+    // onRequest middleware and before every onError/onResponse. Installed
+    // unconditionally — with retry disabled it degenerates to a single attempt —
+    // so hook emission is single-sourced regardless of config.
+    const client = createClient({
+        baseUrl,
+        fetch: createRetryingFetch(lifecycle, authStrategy, enableRetry),
+    });
+    // Apply middleware in order: auth, lifecycle, cache.
     // onRequest runs in this order; onResponse and onError run in reverse, so the
-    // retry middleware sees a response first and the lifecycle middleware last.
+    // lifecycle middleware finalizes the terminal attempt only after the cache
+    // middleware has had its chance to transform the response.
     client.use(createAuthMiddleware(authStrategy, userAgent, requestTimeoutMs, baseUrl));
-    // One lifecycle, shared with the retry middleware: the retry loop lives inside a
-    // single middleware callback, so per-attempt hooks have to be emitted from there
-    // rather than by a middleware that is only visited once per request.
-    const lifecycle = new RequestLifecycle(hooks);
     // Registered even when no hooks are configured. It emits nothing in that case
-    // (every call is optional-chained), but it still owns releasing per-request
-    // state — and the retry middleware records an attempt whether or not anyone is
-    // listening, so skipping this would strand one map entry per retried request.
+    // (every call is optional-chained), but registering it unconditionally keeps
+    // the finalize path identical whether or not anyone is listening.
     client.use(createLifecycleMiddleware(lifecycle));
     if (enableCache) {
         client.use(createCacheMiddleware());
     }
-    // Registered last so that on the reverse-order response pass it runs first,
-    // before the cache and lifecycle middleware see the response.
-    if (enableRetry) {
-        client.use(createRetryMiddleware(lifecycle, authStrategy));
-    }
     // Create enhanced client with additional properties
     const enhancedClient = client;
     Object.defineProperty(enhancedClient, "raw", {
@@ -237,6 +244,10 @@ export function createBasecampClient(options) {
     defineService("clientCorrespondences", () => new ClientCorrespondencesService(client, hooks, fetchPage, maxPages));
     defineService("clientReplies", () => new ClientRepliesService(client, hooks, fetchPage, maxPages));
     defineService("webhooks", () => new WebhooksService(client, hooks, fetchPage, maxPages));
+    defineService("bookmarks", () => new BookmarksService(client, hooks, fetchPage, maxPages));
+    defineService("drafts", () => new DraftsService(client, hooks, fetchPage, maxPages));
+    defineService("calendars", () => new CalendarsService(client, hooks, fetchPage, maxPages));
+    defineService("myNotes", () => new MyNotesService(client, hooks, fetchPage, maxPages));
     defineService("subscriptions", () => new SubscriptionsService(client, hooks, fetchPage, maxPages));
     defineService("attachments", () => new AttachmentsService(client, hooks, fetchPage, maxPages));
     defineService("vaults", () => new VaultsService(client, hooks, fetchPage, maxPages));
@@ -301,45 +312,41 @@ function createAuthMiddleware(authStrategy, userAgent, requestTimeoutMs, baseUrl
     };
 }
 /**
- * Owns the onRequestStart / onRequestEnd / onRetry lifecycle for every attempt of
- * every in-flight request, keyed by openapi-fetch's per-request `id`.
+ * Owns the onRequestStart / onRequestEnd / onRetry lifecycle for every attempt
+ * of every in-flight request, keyed by the final Request object openapi-fetch
+ * hands to its custom fetch.
  *
- * The id is minted once per logical request (one client.GET/POST/... call) and is
- * passed unchanged to onRequest, onResponse and onError, so it survives a
- * middleware replacing the Request object. It deliberately does NOT distinguish
- * attempts — per-attempt data lives nested under it here — and it never goes on
- * the wire, which is why this replaces the old `X-SDK-Request-Id` and
- * `X-Request-Id` correlation headers. (`X-Request-Id` in particular is a
- * spec-reserved BC3 *response* header; sending an SDK-internal value under that
- * name was a collision.)
+ * openapi-fetch passes that same object to onResponse and onError, so identity
+ * holds from the retrying fetch (which begins every attempt) through to the
+ * lifecycle middleware (which finalizes the terminal one). Nothing ever goes on
+ * the wire — this keying replaced the old `X-SDK-Request-Id` and `X-Request-Id`
+ * correlation headers. (`X-Request-Id` in particular is a spec-reserved BC3
+ * *response* header; sending an SDK-internal value under that name was a
+ * collision.)
  *
- * Shared with the retry middleware because the retry loop lives inside
- * one middleware callback: openapi-fetch visits each middleware once per request,
- * so per-attempt hooks cannot be emitted by a separate middleware.
+ * A WeakMap makes the release bookkeeping structural: once a request settles
+ * and its Request is unreachable, the state is collectable — there is no
+ * release() to forget.
  */
 class RequestLifecycle {
     hooks;
-    states = new Map();
+    states = new WeakMap();
     constructor(hooks) {
         this.hooks = hooks;
     }
     /** Begin an attempt and fire onRequestStart for it. */
-    begin(id, method, url, attempt) {
-        this.states.set(id, { startTime: performance.now(), attempt, finalized: false });
+    begin(request, method, url, attempt) {
+        this.states.set(request, { startTime: performance.now(), attempt, finalized: false });
         this.emit(() => this.hooks?.onRequestStart?.({ method, url, attempt }));
     }
-    /** The attempt currently in flight, or 1 if we have no record. */
-    attemptOf(id) {
-        return this.states.get(id)?.attempt ?? 1;
-    }
     /**
      * Fire onRequestEnd for the in-flight attempt, exactly once.
      *
      * A network failure or timeout carries statusCode 0 and the originating error,
      * matching the multipart transport in services/base.ts and SPEC section 7.
      */
-    finalize(id, method, url, outcome) {
-        const state = this.states.get(id);
+    finalize(request, method, url, outcome) {
+        const state = this.states.get(request);
         if (!state || state.finalized)
             return;
         state.finalized = true;
@@ -359,13 +366,9 @@ class RequestLifecycle {
      * just FAILED, while the standalone argument is the UPCOMING attempt. Go,
      * Python, Ruby and Kotlin all pass (failed, failed + 1).
      */
-    retrying(id, method, url, failedAttempt, error, delayMs) {
+    retrying(method, url, failedAttempt, error, delayMs) {
         this.emit(() => this.hooks?.onRetry?.({ method, url, attempt: failedAttempt }, failedAttempt + 1, error, delayMs));
     }
-    /** Drop all state for a logical request. Safe to call more than once. */
-    release(id) {
-        this.states.delete(id);
-    }
     emit(fn) {
         try {
             fn();
@@ -377,37 +380,32 @@ class RequestLifecycle {
 }
 function createLifecycleMiddleware(lifecycle) {
     return {
-        async onRequest({ request, id }) {
-            lifecycle.begin(id, request.method, request.url, 1);
-            return request;
-        },
-        async onResponse({ request, response, id }) {
-            // The authoritative end for whichever attempt is in flight: attempt 1 for a
-            // single-attempt request, or attempt 2 after a retry — the retry middleware
-            // deliberately does not finalize a successful attempt, so that the cache
-            // middleware (which runs between the two) can transform the response first.
-            // finalize stays idempotent as a backstop.
+        async onResponse({ request, response }) {
+            // The authoritative end for the terminal attempt: the retrying fetch
+            // begins every attempt but deliberately does not finalize the response it
+            // returns, so that this pass can record the outcome the cache middleware
+            // has since transformed (a 304 rewritten into a cached 200). finalize
+            // stays idempotent as a backstop.
             //
             // fromCache means "served out of the ETag cache", and only the header the
             // cache middleware sets proves that. A bare 304 does NOT: it reaches here
             // when the cache is disabled, or is enabled but holds no entry for this key,
             // and in both cases the caller's own conditional request went to the server.
             const fromCache = response.headers.get("X-From-Cache") === "1";
-            lifecycle.finalize(id, request.method, request.url, {
+            lifecycle.finalize(request, request.method, request.url, {
                 statusCode: response.status,
                 fromCache,
             });
-            lifecycle.release(id);
             return response;
         },
-        async onError({ request, error, id }) {
-            // openapi-fetch skips onResponse entirely when the initial fetch rejects,
-            // so this is the only place a network error or timeout can be observed.
-            lifecycle.finalize(id, request.method, request.url, {
+        async onError({ request, error }) {
+            // A terminal throw from the retrying fetch — a network error, a timeout,
+            // or a retry's auth refresh — skips onResponse entirely, so this is the
+            // only place it can be observed.
+            lifecycle.finalize(request, request.method, request.url, {
                 statusCode: 0,
                 error: error instanceof Error ? error : new Error(String(error)),
             });
-            lifecycle.release(id);
             // Returning nothing preserves the original error's identity and rethrows it.
             return undefined;
         },
@@ -679,44 +677,105 @@ function getRetryConfigForRequest(method, url) {
     }
     return DEFAULT_RETRY_CONFIG;
 }
-function createRetryMiddleware(lifecycle, authStrategy) {
-    // Serialized request bodies, keyed by openapi-fetch's per-request id, because
-    // Request.body can only be read once and the retry needs to replay it. Keyed on
-    // the id rather than method+url+timestamp: two concurrent mutations to the same
-    // URL used to collide on one slot and replay each other's bytes.
-    const bodyCache = new Map();
-    return {
-        async onRequest({ request, id }) {
-            // For methods that may have a body, clone it before the initial fetch
-            // so we can use it for retries. Request.body can only be consumed once.
-            const method = request.method.toUpperCase();
-            if (method === "POST" || method === "PUT" || method === "PATCH") {
-                if (request.body) {
-                    // Clone the body before it gets consumed
-                    const cloned = request.clone();
-                    bodyCache.set(id, await cloned.arrayBuffer());
-                }
-                else {
-                    bodyCache.set(id, null);
-                }
+/**
+ * The retry loop, installed beneath the middleware chain as the client's custom
+ * fetch (createClient's `fetch` option). openapi-fetch calls it exactly once
+ * per logical request, after every onRequest middleware and before every
+ * onError/onResponse — so the loop runs to the operation's full declared
+ * maxAttempts, and no attempt ever leaves the chain, because the chain sits
+ * above the loop.
+ *
+ * Division of labor with the lifecycle middleware: the loop begins EVERY
+ * attempt and finalizes the attempts it abandons (before the backoff sleep);
+ * the terminal outcome — the response it returns, or the error it throws — is
+ * deliberately NOT finalized here. It flows up through the cache middleware,
+ * which may rewrite a 304 into a cached 200 + X-From-Cache, to the lifecycle
+ * middleware, which records the post-transform result. Finalizing in the loop
+ * would freeze the pre-transformation status, and the idempotent finalize
+ * would keep the hooks pass from correcting it.
+ *
+ * With retry disabled the loop degenerates to a single attempt but still owns
+ * hook emission, so start/end events are single-sourced regardless of config.
+ */
+function createRetryingFetch(lifecycle, authStrategy, enableRetry) {
+    return async (request) => {
+        const { method, url } = request;
+        const retryConfig = getRetryConfigForRequest(method, url);
+        const maxAttempts = enableRetry ? retryConfig.maxAttempts : 1;
+        // Serialize the body once, before the first send, because Request.body is
+        // a stream that can only be consumed once and a retry needs to replay it.
+        // clone() tees the stream, so attempt 1 sends the original untouched and
+        // replays read from this buffer. Requests that can never retry — including
+        // every non-idempotent POST, via NO_RETRY_CONFIG — skip the buffering.
+        const upperMethod = method.toUpperCase();
+        let bodyBuffer = null;
+        if (maxAttempts > 1 &&
+            (upperMethod === "POST" || upperMethod === "PUT" || upperMethod === "PATCH") &&
+            request.body) {
+            bodyBuffer = await request.clone().arrayBuffer();
+        }
+        let attempt = 1;
+        let attemptRequest = request;
+        lifecycle.begin(request, method, url, attempt);
+        for (;;) {
+            if (attempt > 1) {
+                // Rebuild from the original request: the headers carry everything the
+                // onRequest middleware attached (auth, User-Agent, If-None-Match), and
+                // the signal keeps the caller's cancellation and the per-request
+                // timeout — one budget shared by all attempts and backoffs.
+                attemptRequest = new Request(url, {
+                    method,
+                    headers: new Headers(request.headers),
+                    body: bodyBuffer,
+                    signal: request.signal,
+                });
+                // Refresh auth (the token may have rotated since the last attempt).
+                // The attempt is already begun, so a throwing refresh lands on a live
+                // attempt and propagates to the lifecycle middleware's onError.
+                await authStrategy.authenticate(attemptRequest.headers);
             }
-            return request;
-        },
-        async onResponse({ request, response, id }) {
-            const { method, url } = request;
-            // Get operation-specific retry config from metadata
-            const retryConfig = getRetryConfigForRequest(method, url);
-            // Not retrying: let the lifecycle middleware end the attempt, and drop the body.
-            if (!retryConfig.retryOn.includes(response.status)) {
-                bodyCache.delete(id);
-                return response;
+            let response;
+            try {
+                // globalThis.fetch resolved per attempt rather than captured at client
+                // creation, so test interceptors that patch it (MSW) are honored.
+                response = await globalThis.fetch(attemptRequest);
             }
-            const failedAttempt = lifecycle.attemptOf(id);
-            // maxAttempts is a total attempt count, so attempt N is terminal when it
-            // equals the cap. TypeScript additionally chains at most one retry, since
-            // the retry below leaves the middleware chain (SPEC waiver 2B.1).
-            if (failedAttempt >= retryConfig.maxAttempts) {
-                bodyCache.delete(id);
+            catch (error) {
+                // An abort is terminal no matter what the budget says: a caller
+                // cancellation must not re-send, and the per-request timeout is one
+                // budget shared by every attempt and backoff — once it fires, a retry
+                // would instantly re-reject. Terminal errors are rethrown as-is so
+                // their identity survives to the lifecycle middleware's onError (and
+                // to the caller).
+                //
+                // The signal is the authoritative abort test: a caller can abort with
+                // a CUSTOM reason — AbortController.abort(reason) — and fetch then
+                // rejects with that reason, not a DOMException named AbortError. The
+                // DOMException check remains for abort-shaped rejections that arrive
+                // without an aborted request signal.
+                const isAbort = request.signal?.aborted === true ||
+                    (error instanceof DOMException &&
+                        (error.name === "AbortError" || error.name === "TimeoutError"));
+                if (isAbort || attempt >= maxAttempts) {
+                    throw error;
+                }
+                // Network-error retry rides the same per-operation gate as status
+                // retry: a non-idempotent POST resolves NO_RETRY_CONFIG (maxAttempts
+                // 1), so it is rethrown above after its single attempt.
+                const cause = error instanceof Error ? error : new Error(String(error));
+                const delay = calculateBackoffDelay(retryConfig, attempt - 1);
+                lifecycle.finalize(request, method, url, { statusCode: 0, error: cause });
+                lifecycle.retrying(method, url, attempt, cause, delay);
+                await sleep(delay, request.signal);
+                // Same placement rationale as the status path below.
+                attempt += 1;
+                lifecycle.begin(request, method, url, attempt);
+                continue;
+            }
+            // Terminal: a status outside the operation's declared retryOn set, or a
+            // spent budget — maxAttempts is a total attempt count, so attempt N is
+            // terminal when it equals the cap.
+            if (!retryConfig.retryOn.includes(response.status) || attempt >= maxAttempts) {
                 return response;
             }
             // For 429, respect Retry-After; otherwise back off.
@@ -727,71 +786,29 @@ function createRetryMiddleware(lifecycle, authStrategy) {
                 delay = retryAfterSeconds * 1000;
             }
             else {
-                delay = calculateBackoffDelay(retryConfig, failedAttempt - 1);
+                delay = calculateBackoffDelay(retryConfig, attempt - 1);
             }
             const statusError = new Error(`HTTP ${response.status}: ${response.statusText || "Request failed"}`);
-            try {
-                // End the failed attempt before sleeping, so a slow backoff cannot leave
-                // an attempt open, then announce the upcoming one.
-                lifecycle.finalize(id, method, url, { statusCode: response.status });
-                lifecycle.retrying(id, method, url, failedAttempt, statusError, delay);
-                // This response is being discarded, so release its stream before we sleep
-                // rather than leaving it open across the backoff — otherwise a throttled
-                // client holds a connection per in-flight retry and cannot reuse any of
-                // them. The multipart transport in services/base.ts already does this.
-                // Errors are ignored: the body may already be consumed or closed.
-                void response.body?.cancel().catch(() => { });
-                await sleep(delay);
-                // The raw fetch below bypasses the middleware chain, so no downstream
-                // middleware sees this attempt begin — start it here.
-                //
-                // Started after the backoff but before any work that can throw. After, so
-                // the attempt's duration measures the request rather than the sleep;
-                // before, so that if the auth refresh or the fetch throws, the catch has a
-                // live attempt to finalize. Starting it later would let onRetry announce
-                // attempt 2 and then never account for it.
-                lifecycle.begin(id, method, url, failedAttempt + 1);
-                const body = bodyCache.get(id) ?? null;
-                const retryRequest = new Request(url, {
-                    method,
-                    headers: new Headers(request.headers),
-                    body,
-                    signal: request.signal,
-                });
-                // Refresh auth header for retry (token may have been refreshed since initial request)
-                if (authStrategy) {
-                    await authStrategy.authenticate(retryRequest.headers);
-                }
-                // Deliberately NOT finalized here. The returned response still flows
-                // through the cache middleware, which may rewrite a 304 into a cached 200;
-                // finalizing now would freeze the pre-transformation status and
-                // fromCache: false, and an idempotent finalize means the hooks pass could
-                // not correct it. The lifecycle middleware ends this attempt instead, reading
-                // attempt 2 from the state begun above.
-                return await fetch(retryRequest);
-            }
-            catch (error) {
-                // openapi-fetch routes only the INITIAL fetch through onError, so anything
-                // thrown in here — the retry fetch, the auth refresh, the sleep — would
-                // otherwise escape with the attempt still open and its state stranded.
-                lifecycle.finalize(id, method, url, {
-                    statusCode: 0,
-                    error: error instanceof Error ? error : new Error(String(error)),
-                });
-                lifecycle.release(id);
-                // Rethrow the original value so its identity survives.
-                throw error;
-            }
-            finally {
-                bodyCache.delete(id);
-            }
-        },
-        async onError({ id }) {
-            // The initial fetch rejected, so onResponse never ran and the cached body
-            // would leak. The lifecycle middleware owns ending the attempt.
-            bodyCache.delete(id);
-            return undefined;
-        },
+            // End the failed attempt before sleeping, so a slow backoff cannot leave
+            // an attempt open, then announce the upcoming one.
+            lifecycle.finalize(request, method, url, { statusCode: response.status });
+            lifecycle.retrying(method, url, attempt, statusError, delay);
+            // This response is being discarded, so release its stream before we sleep
+            // rather than leaving it open across the backoff — otherwise a throttled
+            // client holds a connection per in-flight retry and cannot reuse any of
+            // them. The multipart transport in services/base.ts already does this.
+            // Errors are ignored: the body may already be consumed or closed.
+            void response.body?.cancel().catch(() => { });
+            await sleep(delay, request.signal);
+            // Begun after the backoff but before any work that can throw. After, so
+            // the attempt's duration measures the request rather than the sleep;
+            // before, so that if the auth refresh or the fetch throws, the lifecycle
+            // middleware's onError still finds a live attempt to finalize. Starting
+            // it later would let onRetry announce an attempt and then never account
+            // for it.
+            attempt += 1;
+            lifecycle.begin(request, method, url, attempt);
+        }
     };
 }
 function calculateBackoffDelay(config, attempt) {
@@ -812,8 +829,29 @@ function calculateBackoffDelay(config, attempt) {
     const jitter = Math.random() * MAX_JITTER_MS;
     return delay + jitter;
 }
-function sleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
+/**
+ * Signal-aware sleep for backoff waits: resolves after `ms`, or rejects with
+ * the signal's abort reason the moment it fires. Without this, a caller abort
+ * or the request-timeout budget expiring during a backoff would leave the
+ * request pending for the full delay and then start another attempt — begin,
+ * auth refresh, fetch — against an already-aborted signal.
+ */
+function sleep(ms, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal?.aborted) {
+            reject(signal.reason);
+            return;
+        }
+        const onAbort = () => {
+            clearTimeout(timer);
+            reject(signal.reason);
+        };
+        const timer = setTimeout(() => {
+            signal?.removeEventListener("abort", onAbort);
+            resolve();
+        }, ms);
+        signal?.addEventListener("abort", onAbort, { once: true });
+    });
 }
 // =============================================================================
 // Pagination Helper