@acosmi/sdk-ts 2.19.6 → 2.20.1

package/dist/node/{format-CKpXSSqY.d.cts → format-BBXu82tQ.d.cts}

@@ -256,8 +256,25 @@ interface ManagedModel {
     defaultToolIds?: string[];
     /** 该模型对当前用户档位是否被限制策略锁定 (limit_policy allowedModels 不含)。true=展示但置灰+升级引导。enforced 关/解析失败=false。 */
     locked?: boolean;
-    /** 是否属于"免费会员可用"分区 (FREE 档 allowedModels 内)。与当前用户档位无关 (仅分类)。 */
+    /**
+     * 是否属于"免费会员可用"分区 (PLAN:FREE 档 allowedModels 内)。与当前用户档位无关 (仅分类)。
+     *
+     * **语义不变, 但不再是展示分区的依据**: 订阅双池之后, 「哪些模型先扣精选免费池」由
+     * {@link ManagedModel.freePoolEligible} 表达, 与 FREE 档的 allowedModels 是两套独立的集合
+     * (两者可以不一致: 某模型可以 `freePoolEligible: true` 而 `freeTier: false`, 反之亦然)。
+     * 新代码不要再用本字段分区或打"精选"角标。字段保留只为老客户端零破坏 (方案 D-14)。
+     */
     freeTier?: boolean;
+    /**
+     * [订阅双池 P5 / D-14] 该模型当前是否有资格先扣**精选免费池 F** (池类 FREE, 或仍在限免期内的 PROMO_FREE)。
+     * 网关随 `effective-model-policy` 的 `freePoolModels` 投影下发, 与 {@link QuotaSummaryFreePool.eligibleModels}
+     * 同源。用于模型选择器的「精选」角标。
+     *
+     * **缺席 = 老网关 (还没有双池), 不是 `false`**: `true` = 有资格; `false` = 明确没有 (走付费池 P);
+     * `undefined` = 网关不知道这件事。展示端只在 `=== true` 时画角标, 绝不在 `!== false` 时画。
+     * 限免到期是随时间翻转的: 同一模型今天 `true`、截止后 `false`, 不要缓存跨过 `promo_until`。
+     */
+    freePoolEligible?: boolean;
     /**
      * 上游 gateway 为此模型启用的请求格式列表
      * 取值: "anthropic" | "openai"
@@ -380,10 +397,42 @@ interface QuotaSummarySubscriptionPool {
      */
     boosterNextExpiresAt?: string;
 }
+/**
+ * 精选免费池视图 — QuotaSummary.freePool 的形状 (订阅双池 P5 / D-14, SDK 2.20.0 起)。
+ *
+ * 付费合同里随每个订阅周期一起发放的**精选免费池 F**: 只能被池类为 FREE / 限免中的 PROMO_FREE 的模型
+ * 先扣, 用完后同一请求自动溢出扣付费池 P ({@link QuotaSummarySubscriptionPool}, 语义不变)。
+ * quota / used / remaining 的单位与 subscriptionPool 一致, 为**微 Credits** (÷1000 = Credits)。
+ *
+ * **和 `freeTotalEtu` / `freeBuckets` 不是一回事**: 后者是 GENERIC (注册赠送 / 邀请奖励 / 试用)
+ * 桶合计, 与订阅合同无关; `freePool` 是付费合同自带的那一半额度。两者不可相加, 也不可互相替代。
+ */
+interface QuotaSummaryFreePool {
+    /** 池总额度 (微 Credits) */
+    quota: number;
+    /** 已用额度 (微 Credits) */
+    used: number;
+    /** 剩余额度 (微 Credits) */
+    remaining: number;
+    /** 到期时间 (ISO-8601); 网关未下发时缺失, 口径同 {@link QuotaSummarySubscriptionPool.expiresAt} */
+    expiresAt?: string;
+    /** 恒为 `'MICRO_CREDIT'` */
+    unit: 'MICRO_CREDIT';
+    /**
+     * 当前有资格扣本池的模型 id 集合 = 池类 FREE ∪ 仍在限免期的 PROMO_FREE (如 `deepseek-flash`)。
+     * **可以是空数组**: `[]` = 网关明确说「此刻没有任何模型有资格」, 与字段缺席不是一回事。
+     */
+    eligibleModels: string[];
+}
+/** 计量口径: `OFFICIAL_CNY` = 1 Credit = ¥0.000001 官方价 (新合同); `COST_CNY` = 成本口径 (老合同)。 */
+type QuotaSummaryCreditUnit = 'OFFICIAL_CNY' | 'COST_CNY';
 /**
  * GET /api/v4/entitlements/quota-summary 返回体, 调用 client.getQuotaSummary 获取.
  *
  * 设计目的: 个人中心钱包栏一次性展示"我还有多少免费 + 多少付费"+ 各自最近到期时间.
+ *
+ * 注意「免费」一词有两层含义: `freeTotalEtu` / `freeBuckets` 是 GENERIC 赠送桶 (与合同无关);
+ * 订阅合同自带的精选免费池是 {@link QuotaSummary.freePool}。
  */
 interface QuotaSummary {
     /** GENERIC (免费/赠送) alive 桶 tokenRemaining 求和 */
@@ -410,6 +459,22 @@ interface QuotaSummary {
      * (÷1000 = Credits)。缺席 = 老网关, 或当前没有 alive 付费桶 —— 两种都不可当 0 处理。
      */
     subscriptionPool?: QuotaSummarySubscriptionPool;
+    /**
+     * [订阅双池 P5 / D-14, 2.20.0] 精选免费池 F。`subscriptionPool` 的语义**不变**, 恒为付费池 P。
+     *
+     * **缺席 = 老合同 (没有 F), 或老网关 (还不认识 F) —— 两种都不可当 0 读**: 把缺席画成
+     * 「精选额度 0 / 已用满」是在向老合同用户断言一件不存在的事。展示端只在 `freePool !== undefined`
+     * 时画第二条进度条。
+     */
+    freePool?: QuotaSummaryFreePool;
+    /**
+     * [订阅双池 P5 / D-14, 2.20.0] 本响应里所有 Credit 数值的计量口径, 让客户端把 Credits 换算成 ¥ 时能标注口径。
+     * `OFFICIAL_CNY` = 新合同 (1 Credit = ¥0.000001 官方价); `COST_CNY` = 老合同 (成本口径)。
+     *
+     * **缺席 = 老网关, 不能当任一取值读**; 尤其不能默认成 `OFFICIAL_CNY` 去乘 ¥ 单价。
+     * 类型是闭集, 但网关将来新增口径时旧版 SDK 会原样透出未知字符串 —— 消费端对未知值应按「不换算」处理。
+     */
+    creditUnit?: QuotaSummaryCreditUnit;
 }
 /**
  * GET /api/v4/entitlements/window-reset/summary 返回体, 调用 client.getWindowResetSummary 获取.
@@ -705,4 +770,4 @@ interface ProviderAdapter {
     };
 }
 
-export { classifySourcesEvent as $, type StreamSettlement as A, BucketClassCommercial as B, type ChatContentBlock as C, ThinkingHigh as D, type EffortConfig as E, ThinkingHighMinMaxTokens as F, type GeoLoc as G, ThinkingLow as H, type ImageGenerationRequest as I, ThinkingMax as J, ThinkingMaxFallbackMaxTokens as K, ThinkingOff as L, type ManagedModel as M, type VideoTaskResponse as N, type OutputConfig as O, type ProviderAdapter as P, type QuotaSummary as Q, type RerankDocument as R, type ServerTool as S, type ThinkingConfig as T, type WebSearchSource as U, type VideoGenerationRequest as V, type WebSearchConfig as W, type WindowLimitStatus as X, type WindowResetSummary as Y, bucketInfoIsCommercial as Z, bucketRowIsCommercial as _, BucketClassGeneric as a, newThinkingConfig as a0, newWebSearchTool as a1, parseSettlement as a2, parseSourcesEvent as a3, type BucketInfo as b, type BucketRow as c, type ChatMessage as d, type ChatRequest as e, type ChatResponse as f, type ChatUsage as g, type EmbeddingData as h, type EmbeddingRequest as i, type EmbeddingResponse as j, type ImageGenerationResponse as k, type InputModality as l, type InputModalityTag as m, type ModelCapabilities as n, type MultimodalContent as o, ProviderFormat as p, type QuotaSummarySubscriptionPool as q, type RerankQuery as r, type RerankRequest as s, type RerankResponse as t, type RerankResult as u, ServerToolTypeWebSearch as v, type SourcesEvent as w, type SourcesEventIssueCode as x, type SourcesEventParseResult as y, type StreamEvent as z };
+export { bucketInfoIsCommercial as $, type SourcesEventParseResult as A, BucketClassCommercial as B, type ChatContentBlock as C, type StreamEvent as D, type EffortConfig as E, type StreamSettlement as F, type GeoLoc as G, ThinkingHigh as H, type ImageGenerationRequest as I, ThinkingHighMinMaxTokens as J, ThinkingLow as K, ThinkingMax as L, type ManagedModel as M, ThinkingMaxFallbackMaxTokens as N, type OutputConfig as O, type ProviderAdapter as P, type QuotaSummary as Q, type RerankDocument as R, type ServerTool as S, type ThinkingConfig as T, ThinkingOff as U, type VideoGenerationRequest as V, type VideoTaskResponse as W, type WebSearchConfig as X, type WebSearchSource as Y, type WindowLimitStatus as Z, type WindowResetSummary as _, BucketClassGeneric as a, bucketRowIsCommercial as a0, classifySourcesEvent as a1, newThinkingConfig as a2, newWebSearchTool as a3, parseSettlement as a4, parseSourcesEvent as a5, type BucketInfo as b, type BucketRow as c, type ChatMessage as d, type ChatRequest as e, type ChatResponse as f, type ChatUsage as g, type EmbeddingData as h, type EmbeddingRequest as i, type EmbeddingResponse as j, type ImageGenerationResponse as k, type InputModality as l, type InputModalityTag as m, type ModelCapabilities as n, type MultimodalContent as o, ProviderFormat as p, type QuotaSummaryCreditUnit as q, type QuotaSummaryFreePool as r, type QuotaSummarySubscriptionPool as s, type RerankQuery as t, type RerankRequest as u, type RerankResponse as v, type RerankResult as w, ServerToolTypeWebSearch as x, type SourcesEvent as y, type SourcesEventIssueCode as z };

package/dist/node/{format-CKpXSSqY.d.ts → format-BBXu82tQ.d.ts}

@@ -256,8 +256,25 @@ interface ManagedModel {
     defaultToolIds?: string[];
     /** 该模型对当前用户档位是否被限制策略锁定 (limit_policy allowedModels 不含)。true=展示但置灰+升级引导。enforced 关/解析失败=false。 */
     locked?: boolean;
-    /** 是否属于"免费会员可用"分区 (FREE 档 allowedModels 内)。与当前用户档位无关 (仅分类)。 */
+    /**
+     * 是否属于"免费会员可用"分区 (PLAN:FREE 档 allowedModels 内)。与当前用户档位无关 (仅分类)。
+     *
+     * **语义不变, 但不再是展示分区的依据**: 订阅双池之后, 「哪些模型先扣精选免费池」由
+     * {@link ManagedModel.freePoolEligible} 表达, 与 FREE 档的 allowedModels 是两套独立的集合
+     * (两者可以不一致: 某模型可以 `freePoolEligible: true` 而 `freeTier: false`, 反之亦然)。
+     * 新代码不要再用本字段分区或打"精选"角标。字段保留只为老客户端零破坏 (方案 D-14)。
+     */
     freeTier?: boolean;
+    /**
+     * [订阅双池 P5 / D-14] 该模型当前是否有资格先扣**精选免费池 F** (池类 FREE, 或仍在限免期内的 PROMO_FREE)。
+     * 网关随 `effective-model-policy` 的 `freePoolModels` 投影下发, 与 {@link QuotaSummaryFreePool.eligibleModels}
+     * 同源。用于模型选择器的「精选」角标。
+     *
+     * **缺席 = 老网关 (还没有双池), 不是 `false`**: `true` = 有资格; `false` = 明确没有 (走付费池 P);
+     * `undefined` = 网关不知道这件事。展示端只在 `=== true` 时画角标, 绝不在 `!== false` 时画。
+     * 限免到期是随时间翻转的: 同一模型今天 `true`、截止后 `false`, 不要缓存跨过 `promo_until`。
+     */
+    freePoolEligible?: boolean;
     /**
      * 上游 gateway 为此模型启用的请求格式列表
      * 取值: "anthropic" | "openai"
@@ -380,10 +397,42 @@ interface QuotaSummarySubscriptionPool {
      */
     boosterNextExpiresAt?: string;
 }
+/**
+ * 精选免费池视图 — QuotaSummary.freePool 的形状 (订阅双池 P5 / D-14, SDK 2.20.0 起)。
+ *
+ * 付费合同里随每个订阅周期一起发放的**精选免费池 F**: 只能被池类为 FREE / 限免中的 PROMO_FREE 的模型
+ * 先扣, 用完后同一请求自动溢出扣付费池 P ({@link QuotaSummarySubscriptionPool}, 语义不变)。
+ * quota / used / remaining 的单位与 subscriptionPool 一致, 为**微 Credits** (÷1000 = Credits)。
+ *
+ * **和 `freeTotalEtu` / `freeBuckets` 不是一回事**: 后者是 GENERIC (注册赠送 / 邀请奖励 / 试用)
+ * 桶合计, 与订阅合同无关; `freePool` 是付费合同自带的那一半额度。两者不可相加, 也不可互相替代。
+ */
+interface QuotaSummaryFreePool {
+    /** 池总额度 (微 Credits) */
+    quota: number;
+    /** 已用额度 (微 Credits) */
+    used: number;
+    /** 剩余额度 (微 Credits) */
+    remaining: number;
+    /** 到期时间 (ISO-8601); 网关未下发时缺失, 口径同 {@link QuotaSummarySubscriptionPool.expiresAt} */
+    expiresAt?: string;
+    /** 恒为 `'MICRO_CREDIT'` */
+    unit: 'MICRO_CREDIT';
+    /**
+     * 当前有资格扣本池的模型 id 集合 = 池类 FREE ∪ 仍在限免期的 PROMO_FREE (如 `deepseek-flash`)。
+     * **可以是空数组**: `[]` = 网关明确说「此刻没有任何模型有资格」, 与字段缺席不是一回事。
+     */
+    eligibleModels: string[];
+}
+/** 计量口径: `OFFICIAL_CNY` = 1 Credit = ¥0.000001 官方价 (新合同); `COST_CNY` = 成本口径 (老合同)。 */
+type QuotaSummaryCreditUnit = 'OFFICIAL_CNY' | 'COST_CNY';
 /**
  * GET /api/v4/entitlements/quota-summary 返回体, 调用 client.getQuotaSummary 获取.
  *
  * 设计目的: 个人中心钱包栏一次性展示"我还有多少免费 + 多少付费"+ 各自最近到期时间.
+ *
+ * 注意「免费」一词有两层含义: `freeTotalEtu` / `freeBuckets` 是 GENERIC 赠送桶 (与合同无关);
+ * 订阅合同自带的精选免费池是 {@link QuotaSummary.freePool}。
  */
 interface QuotaSummary {
     /** GENERIC (免费/赠送) alive 桶 tokenRemaining 求和 */
@@ -410,6 +459,22 @@ interface QuotaSummary {
      * (÷1000 = Credits)。缺席 = 老网关, 或当前没有 alive 付费桶 —— 两种都不可当 0 处理。
      */
     subscriptionPool?: QuotaSummarySubscriptionPool;
+    /**
+     * [订阅双池 P5 / D-14, 2.20.0] 精选免费池 F。`subscriptionPool` 的语义**不变**, 恒为付费池 P。
+     *
+     * **缺席 = 老合同 (没有 F), 或老网关 (还不认识 F) —— 两种都不可当 0 读**: 把缺席画成
+     * 「精选额度 0 / 已用满」是在向老合同用户断言一件不存在的事。展示端只在 `freePool !== undefined`
+     * 时画第二条进度条。
+     */
+    freePool?: QuotaSummaryFreePool;
+    /**
+     * [订阅双池 P5 / D-14, 2.20.0] 本响应里所有 Credit 数值的计量口径, 让客户端把 Credits 换算成 ¥ 时能标注口径。
+     * `OFFICIAL_CNY` = 新合同 (1 Credit = ¥0.000001 官方价); `COST_CNY` = 老合同 (成本口径)。
+     *
+     * **缺席 = 老网关, 不能当任一取值读**; 尤其不能默认成 `OFFICIAL_CNY` 去乘 ¥ 单价。
+     * 类型是闭集, 但网关将来新增口径时旧版 SDK 会原样透出未知字符串 —— 消费端对未知值应按「不换算」处理。
+     */
+    creditUnit?: QuotaSummaryCreditUnit;
 }
 /**
  * GET /api/v4/entitlements/window-reset/summary 返回体, 调用 client.getWindowResetSummary 获取.
@@ -705,4 +770,4 @@ interface ProviderAdapter {
     };
 }
 
-export { classifySourcesEvent as $, type StreamSettlement as A, BucketClassCommercial as B, type ChatContentBlock as C, ThinkingHigh as D, type EffortConfig as E, ThinkingHighMinMaxTokens as F, type GeoLoc as G, ThinkingLow as H, type ImageGenerationRequest as I, ThinkingMax as J, ThinkingMaxFallbackMaxTokens as K, ThinkingOff as L, type ManagedModel as M, type VideoTaskResponse as N, type OutputConfig as O, type ProviderAdapter as P, type QuotaSummary as Q, type RerankDocument as R, type ServerTool as S, type ThinkingConfig as T, type WebSearchSource as U, type VideoGenerationRequest as V, type WebSearchConfig as W, type WindowLimitStatus as X, type WindowResetSummary as Y, bucketInfoIsCommercial as Z, bucketRowIsCommercial as _, BucketClassGeneric as a, newThinkingConfig as a0, newWebSearchTool as a1, parseSettlement as a2, parseSourcesEvent as a3, type BucketInfo as b, type BucketRow as c, type ChatMessage as d, type ChatRequest as e, type ChatResponse as f, type ChatUsage as g, type EmbeddingData as h, type EmbeddingRequest as i, type EmbeddingResponse as j, type ImageGenerationResponse as k, type InputModality as l, type InputModalityTag as m, type ModelCapabilities as n, type MultimodalContent as o, ProviderFormat as p, type QuotaSummarySubscriptionPool as q, type RerankQuery as r, type RerankRequest as s, type RerankResponse as t, type RerankResult as u, ServerToolTypeWebSearch as v, type SourcesEvent as w, type SourcesEventIssueCode as x, type SourcesEventParseResult as y, type StreamEvent as z };
+export { bucketInfoIsCommercial as $, type SourcesEventParseResult as A, BucketClassCommercial as B, type ChatContentBlock as C, type StreamEvent as D, type EffortConfig as E, type StreamSettlement as F, type GeoLoc as G, ThinkingHigh as H, type ImageGenerationRequest as I, ThinkingHighMinMaxTokens as J, ThinkingLow as K, ThinkingMax as L, type ManagedModel as M, ThinkingMaxFallbackMaxTokens as N, type OutputConfig as O, type ProviderAdapter as P, type QuotaSummary as Q, type RerankDocument as R, type ServerTool as S, type ThinkingConfig as T, ThinkingOff as U, type VideoGenerationRequest as V, type VideoTaskResponse as W, type WebSearchConfig as X, type WebSearchSource as Y, type WindowLimitStatus as Z, type WindowResetSummary as _, BucketClassGeneric as a, bucketRowIsCommercial as a0, classifySourcesEvent as a1, newThinkingConfig as a2, newWebSearchTool as a3, parseSettlement as a4, parseSourcesEvent as a5, type BucketInfo as b, type BucketRow as c, type ChatMessage as d, type ChatRequest as e, type ChatResponse as f, type ChatUsage as g, type EmbeddingData as h, type EmbeddingRequest as i, type EmbeddingResponse as j, type ImageGenerationResponse as k, type InputModality as l, type InputModalityTag as m, type ModelCapabilities as n, type MultimodalContent as o, ProviderFormat as p, type QuotaSummaryCreditUnit as q, type QuotaSummaryFreePool as r, type QuotaSummarySubscriptionPool as s, type RerankQuery as t, type RerankRequest as u, type RerankResponse as v, type RerankResult as w, ServerToolTypeWebSearch as x, type SourcesEvent as y, type SourcesEventIssueCode as z };

package/dist/node/index.cjs

@@ -1097,6 +1097,18 @@ var abort = (signal) => {
   if (signal?.aborted) throw new Error("aborted");
 };
 var sameRequestOwner = (snapshot, expected) => snapshot.storeInstanceId === expected.storeInstanceId && snapshot.authSessionId === expected.authSessionId && snapshot.principal?.issuer === expected.principal?.issuer && snapshot.principal?.subject === expected.principal?.subject && snapshot.principal?.organizationId === expected.principal?.organizationId;
+var REFRESH_TEMPORARILY_UNAVAILABLE = "refresh_temporarily_unavailable";
+var REFRESH_RETRY_BASE_MS = 5e3;
+var REFRESH_RETRY_MAX_MS = 6e4;
+var REFRESH_RETRY_AFTER_CAP_MS = 3e5;
+function retryAfterMs(response) {
+  const raw = response.headers.get("retry-after");
+  if (!raw) return null;
+  const seconds = Number(raw);
+  const ms = Number.isFinite(seconds) ? seconds * 1e3 : Date.parse(raw) - Date.now();
+  if (!Number.isFinite(ms)) return null;
+  return Math.min(Math.max(ms, 0), REFRESH_RETRY_AFTER_CAP_MS);
+}
 var CredentialLifecycle = class {
   constructor(store, protocol) {
     this.store = store;
@@ -1107,6 +1119,8 @@ var CredentialLifecycle = class {
   listeners = /* @__PURE__ */ new Set();
   notificationKey = "";
   observations = /* @__PURE__ */ new Map();
+  /** Last refusal of a refresh token that was not rotated; see `REFRESH_RETRY_BASE_MS`. */
+  refreshDeferral = null;
   read(signal) {
     return this.store.readSnapshot(signal);
   }
@@ -1296,6 +1310,19 @@ var CredentialLifecycle = class {
   usable(s) {
     return !!s.tokenSet && Date.parse(s.tokenSet.expires_at) > Date.now() + 3e5;
   }
+  refreshDeferred(s) {
+    const d = this.refreshDeferral;
+    return !!d && d.refreshToken === s.tokenSet?.refresh_token && Date.now() < d.until;
+  }
+  deferRefresh(refreshToken2, retryAfter) {
+    const failures = this.refreshDeferral?.refreshToken === refreshToken2 ? this.refreshDeferral.failures + 1 : 1;
+    const backoff = Math.min(REFRESH_RETRY_MAX_MS, REFRESH_RETRY_BASE_MS * 2 ** (failures - 1));
+    this.refreshDeferral = {
+      refreshToken: refreshToken2,
+      failures,
+      until: Date.now() + Math.max(backoff, retryAfter ?? 0)
+    };
+  }
   async bindIdentity(sessionId, signal) {
     const s = await this.ensureSnapshot(signal, void 0, true);
     if (s.authSessionId !== sessionId) throw new Error("superseded");
@@ -1409,6 +1436,10 @@ var CredentialLifecycle = class {
       if (live && (refreshed || s.revision !== (rejected?.revision ?? initialRevision) && (rejected !== void 0 || s.tokenSet.access_token !== initialAccess)))
         return s;
       if (this.usable(s) && !rejected) return s;
+      if (this.refreshDeferred(s)) {
+        if (live && !rejected) return s;
+        throw new Error(REFRESH_TEMPORARILY_UNAVAILABLE);
+      }
       const metadata = await this.metadata(s, signal);
       abort(signal);
       const operationId = uuid();
@@ -1431,7 +1462,13 @@ var CredentialLifecycle = class {
       );
       if (r.status !== "committed") continue;
       const owner = this.refresh(r.snapshot, metadata);
-      await this.wait(owner, signal);
+      try {
+        await this.wait(owner, signal);
+      } catch (error) {
+        const deferred = error instanceof Error && error.message === REFRESH_TEMPORARILY_UNAVAILABLE;
+        if (rejected || !deferred) throw error;
+        continue;
+      }
       refreshed = true;
       rejected = void 0;
     }
@@ -1472,59 +1509,9 @@ var CredentialLifecycle = class {
     const s = r.snapshot;
     const ctl = new AbortController();
     const timeout = setTimeout(() => ctl.abort(), 3e4);
-    let tokens;
+    let outcome;
     try {
-      const result = await this.wait(
-        (async () => {
-          const response = await this.protocol.fetch(metadata.token_endpoint, {
-            method: "POST",
-            headers: { "Content-Type": "application/x-www-form-urlencoded" },
-            body: new URLSearchParams({
-              grant_type: "refresh_token",
-              client_id: s.tokenSet.client_id,
-              refresh_token: s.tokenSet.refresh_token
-            }),
-            signal: ctl.signal
-          });
-          const body2 = await response.json();
-          return { response, body: body2 };
-        })(),
-        ctl.signal
-      );
-      if (!result.response.ok) {
-        const code = result.body.error;
-        let reason = "refresh_outcome_unknown";
-        let state = "reauth_required";
-        if (code === "invalid_grant") reason = code;
-        else if (["invalid_client", "invalid_scope", "unsupported_grant_type"].includes(code)) {
-          reason = code;
-          state = "configuration_error";
-        } else if (result.body.rotationOutcome === "not_committed" && ["temporarily_unavailable", "server_error"].includes(code)) {
-          await this.commit(s, {
-            credentialState: s.refreshOperation.returnState,
-            refreshOperation: null
-          });
-          throw new Error("refresh_temporarily_unavailable");
-        }
-        await this.commit(s, {
-          credentialState: state,
-          tokenSet: null,
-          refreshOperation: null,
-          reason
-        });
-        throw new Error(reason);
-      }
-      const body = result.body;
-      if (!Number.isFinite(body.expires_in) || body.expires_in <= 0)
-        throw new Error("invalid_response");
-      tokens = {
-        ...s.tokenSet,
-        access_token: body.access_token,
-        refresh_token: body.refresh_token,
-        expires_at: new Date(Date.now() + body.expires_in * 1e3).toISOString(),
-        scope: body.scope ?? s.tokenSet.scope
-      };
-      this.validateTokens(tokens);
+      outcome = await this.wait(this.exchange(metadata, s.tokenSet, ctl.signal), ctl.signal);
     } catch (error) {
       await this.commit(s, {
         credentialState: "reauth_required",
@@ -1536,6 +1523,24 @@ var CredentialLifecycle = class {
     } finally {
       clearTimeout(timeout);
     }
+    if (outcome.kind === "not_committed") {
+      this.deferRefresh(s.tokenSet.refresh_token, outcome.retryAfterMs);
+      await this.commit(s, {
+        credentialState: s.refreshOperation.returnState,
+        refreshOperation: null
+      });
+      throw new Error(REFRESH_TEMPORARILY_UNAVAILABLE);
+    }
+    if (outcome.kind === "rejected") {
+      await this.commit(s, {
+        credentialState: outcome.state,
+        tokenSet: null,
+        refreshOperation: null,
+        reason: outcome.reason
+      });
+      throw new Error(outcome.reason);
+    }
+    const tokens = outcome.tokens;
     const started = performance.now(), mutationId = uuid();
     for (; ; ) {
       if (Date.now() >= Date.parse(s.refreshOperation.deadlineAt)) {
@@ -1558,6 +1563,7 @@ var CredentialLifecycle = class {
         mutationId
       );
       if (result.status === "committed") {
+        this.refreshDeferral = null;
         await this.notify(result.snapshot);
         return;
       }
@@ -1569,6 +1575,47 @@ var CredentialLifecycle = class {
       await pause();
     }
   }
+  /**
+   * One refresh-token exchange. Settles with what the authority said; rejects only when there is
+   * no answer or the answer cannot be read, which leaves the rotation outcome unknown.
+   */
+  async exchange(metadata, current, signal) {
+    const response = await this.protocol.fetch(metadata.token_endpoint, {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: new URLSearchParams({
+        grant_type: "refresh_token",
+        client_id: current.client_id,
+        refresh_token: current.refresh_token
+      }),
+      signal
+    });
+    if (response.status === 429)
+      return { kind: "not_committed", retryAfterMs: retryAfterMs(response) };
+    const body = await response.json();
+    if (!response.ok) {
+      const code = body.error;
+      if (code === "invalid_grant")
+        return { kind: "rejected", state: "reauth_required", reason: code };
+      if (["invalid_client", "invalid_scope", "unsupported_grant_type"].includes(code))
+        return { kind: "rejected", state: "configuration_error", reason: code };
+      if (body.rotationOutcome === "not_committed" && ["temporarily_unavailable", "server_error"].includes(code))
+        return { kind: "not_committed", retryAfterMs: retryAfterMs(response) };
+      return { kind: "rejected", state: "reauth_required", reason: "refresh_outcome_unknown" };
+    }
+    const tokenResponse = body;
+    if (!Number.isFinite(tokenResponse.expires_in) || tokenResponse.expires_in <= 0)
+      throw new Error("invalid_response");
+    const tokens = {
+      ...current,
+      access_token: tokenResponse.access_token,
+      refresh_token: tokenResponse.refresh_token,
+      expires_at: new Date(Date.now() + tokenResponse.expires_in * 1e3).toISOString(),
+      scope: tokenResponse.scope ?? current.scope
+    };
+    this.validateTokens(tokens);
+    return { kind: "tokens", tokens };
+  }
   async revoke(tokens, metadata, authority) {
     const ctl = new AbortController();
     const timer = setTimeout(() => ctl.abort(), 3e4);