@apifuse/provider-sdk 2.2.0-beta.5 → 2.2.0-beta.50

package/src/runtime/request-options.ts

@@ -1,4 +1,61 @@
-import type { RequestParamPrimitive, RequestParams, RequestParamValue } from "../types.js";
+import type {
+	HttpClient,
+	RequestOptions,
+	RequestParamPrimitive,
+	RequestParams,
+	RequestParamValue,
+} from "../types.js";
+import { isProviderError } from "../errors.js";
+
+export const REDACTED_QUERY_VALUE = "[REDACTED]";
+
+/** Internal heuristic shared by diagnostic and fixture structural redaction. */
+export function isSensitiveKey(key: string): boolean {
+	return /authorization|token|api[-_]?key|(^|[-_])(code|key|secret|signature|session|state)($|[-_])/i.test(
+		key,
+	);
+}
+
+const HTTP_REQUEST_METHOD_CONFIG = {
+	request: { optionsIndex: 1 },
+	get: { optionsIndex: 1 },
+	post: { optionsIndex: 2 },
+	put: { optionsIndex: 2 },
+	delete: { optionsIndex: 1 },
+	stream: { optionsIndex: 1 },
+	sse: { optionsIndex: 1 },
+} as const satisfies Record<keyof HttpClient, { optionsIndex: number }>;
+
+export type HttpRequestMethod = keyof typeof HTTP_REQUEST_METHOD_CONFIG;
+
+export type HttpRequestInvocation = {
+	[M in HttpRequestMethod]: {
+		method: M;
+		args: Parameters<HttpClient[M]>;
+	};
+}[HttpRequestMethod];
+
+export const HTTP_REQUEST_METHOD_NAMES = Object.keys(
+	HTTP_REQUEST_METHOD_CONFIG,
+) as HttpRequestMethod[];
+
+const HTTP_REQUEST_METHOD_SET = new Set<string>(HTTP_REQUEST_METHOD_NAMES);
+
+export function isHttpRequestMethod(method: PropertyKey): method is HttpRequestMethod {
+	return typeof method === "string" && HTTP_REQUEST_METHOD_SET.has(method);
+}
+
+export type SerializedRequestUrl = {
+	requestUrl: string;
+	redactedUrl: string;
+	sensitiveValues: readonly string[];
+};
+
+export function normalizeSensitiveParams(
+	sensitiveParams?: Record<string, string>,
+): Record<string, string> | undefined {
+	return sensitiveParams && Object.keys(sensitiveParams).length > 0 ? sensitiveParams : undefined;
+}
 
 function isParamArray(value: RequestParamValue): value is readonly RequestParamPrimitive[] {
 	return Array.isArray(value);
@@ -32,6 +89,628 @@ export function appendQueryParams(url: string, params?: RequestParams): string {
 	return parsed.toString();
 }
 
+function decodeQueryComponent(value: string): string {
+	try {
+		return decodeURIComponent(value.replaceAll("+", " "));
+	} catch {
+		return value;
+	}
+}
+
+/** Redacts matching query keys without reserializing any other URL bytes. */
+export function redactUrlQueryParams(
+	url: string,
+	sensitiveParamNames: readonly string[],
+): { redactedUrl: string; sensitiveValues: readonly string[] } {
+	if (sensitiveParamNames.length === 0) return { redactedUrl: url, sensitiveValues: [] };
+	const names = new Set(sensitiveParamNames);
+	const queryStart = url.indexOf("?");
+	if (queryStart === -1) return { redactedUrl: url, sensitiveValues: [] };
+	const fragmentStart = url.indexOf("#", queryStart);
+	const queryEnd = fragmentStart === -1 ? url.length : fragmentStart;
+	const query = url.slice(queryStart + 1, queryEnd);
+	const sensitiveValues: string[] = [];
+	const redactedQuery = query
+		.split("&")
+		.map((part) => {
+			const assignment = part.indexOf("=");
+			const encodedKey = assignment === -1 ? part : part.slice(0, assignment);
+			if (!names.has(decodeQueryComponent(encodedKey))) return part;
+			const encodedValue = assignment === -1 ? "" : part.slice(assignment + 1);
+			sensitiveValues.push(decodeQueryComponent(encodedValue));
+			return `${encodedKey}=${REDACTED_QUERY_VALUE}`;
+		})
+		.join("&");
+	return {
+		redactedUrl: `${url.slice(0, queryStart + 1)}${redactedQuery}${url.slice(queryEnd)}`,
+		sensitiveValues,
+	};
+}
+
+/**
+ * Serializes public and secret query parameters together while constructing a
+ * separate, structurally redacted URL for diagnostics and observability.
+ */
+export function serializeRequestUrl(
+	url: string,
+	params?: RequestParams,
+	sensitiveParams?: Record<string, string>,
+): SerializedRequestUrl {
+	const urlWithParams = appendQueryParams(url, params);
+	const normalizedSensitiveParams = normalizeSensitiveParams(sensitiveParams);
+	if (!normalizedSensitiveParams) {
+		return { requestUrl: urlWithParams, redactedUrl: urlWithParams, sensitiveValues: [] };
+	}
+
+	const sensitiveParamNames = Object.keys(normalizedSensitiveParams);
+	const existing = redactUrlQueryParams(urlWithParams, sensitiveParamNames);
+	const sensitiveValues = new Set(existing.sensitiveValues);
+	let requestUrl = urlWithParams;
+
+	for (const [key, value] of Object.entries(normalizedSensitiveParams)) {
+		const serializedValue = String(value);
+		requestUrl = appendQueryParams(requestUrl, { [key]: serializedValue });
+		sensitiveValues.add(serializedValue);
+	}
+	const redacted = redactUrlQueryParams(requestUrl, sensitiveParamNames);
+
+	return {
+		requestUrl,
+		redactedUrl: redacted.redactedUrl,
+		sensitiveValues: [...sensitiveValues],
+	};
+}
+
+const MIN_UNSCOPED_SENSITIVE_VALUE_LENGTH = 4;
+
+function normalizePercentEscapes(value: string): string {
+	return value.replace(/%[\da-f]{2}/gi, (percentEscape) => percentEscape.toUpperCase());
+}
+
+function sensitiveValueVariants(value: string): string[] {
+	if (!value || value === REDACTED_QUERY_VALUE) return [];
+
+	const formEncoded = new URLSearchParams({ value }).toString().slice("value=".length);
+	let componentEncoded: string;
+	try {
+		componentEncoded = encodeURIComponent(value);
+	} catch {
+		// encodeURIComponent rejects lone UTF-16 surrogates. The raw value is
+		// still safe to scrub, and URLSearchParams supplies its well-formed form.
+		componentEncoded = value;
+	}
+	return [...new Set([value, componentEncoded, formEncoded].map(normalizePercentEscapes))];
+}
+
+type SensitiveValueVariant = { value: string; requiresTokenBoundary: boolean };
+
+function allSensitiveValueVariants(sensitiveValues: readonly string[]): SensitiveValueVariant[] {
+	const variants = new Map<string, SensitiveValueVariant>();
+	for (const sensitiveValue of sensitiveValues) {
+		const requiresTokenBoundary = sensitiveValue.length < MIN_UNSCOPED_SENSITIVE_VALUE_LENGTH;
+		for (const value of sensitiveValueVariants(sensitiveValue)) {
+			const existing = variants.get(value);
+			variants.set(value, {
+				value,
+				requiresTokenBoundary: existing
+					? existing.requiresTokenBoundary && requiresTokenBoundary
+					: requiresTokenBoundary,
+			});
+		}
+	}
+	return [...variants.values()].sort(
+		(left, right) =>
+			right.value.length - left.value.length || left.value.localeCompare(right.value),
+	);
+}
+
+function isTokenCharacter(value: string | undefined): boolean {
+	return value !== undefined && /[\p{L}\p{N}]/u.test(value);
+}
+
+function replaceSensitiveVariant(text: string, variant: SensitiveValueVariant): string {
+	const pattern = variant.value.replace(/%([\da-f]{2})|[.*+?^${}()|[\]\\]/gi, (match, hex) => {
+		if (hex) {
+			return `%${[...String(hex)]
+				.map((character) =>
+					/[a-f]/i.test(character)
+						? `[${character.toLowerCase()}${character.toUpperCase()}]`
+						: character,
+				)
+				.join("")}`;
+		}
+		return `\\${match}`;
+	});
+	return text.replace(new RegExp(pattern, "gu"), (match, offset: number, source: string) => {
+		const end = offset + match.length;
+		if (
+			variant.requiresTokenBoundary &&
+			(isTokenCharacter(source[offset - 1]) || isTokenCharacter(source[end]))
+		) {
+			return match;
+		}
+		return REDACTED_QUERY_VALUE;
+	});
+}
+
+/** Scrubs raw and URL-encoded secret values from diagnostic text. */
+export function redactSensitiveText(
+	text: string,
+	sensitiveValues: readonly string[],
+	requestUrl?: string,
+	redactedUrl?: string,
+): string {
+	let redacted = requestUrl && redactedUrl ? text.replaceAll(requestUrl, redactedUrl) : text;
+	for (const variant of allSensitiveValueVariants(sensitiveValues)) {
+		// Low-entropy values are still redacted, but only as complete tokens. This
+		// covers query values and diagnostic phrases such as "credential api rejected"
+		// without corrupting timestamps or words such as "rapid".
+		redacted = replaceSensitiveVariant(redacted, variant);
+	}
+	return redacted;
+}
+
+type RedactionContext = {
+	sensitiveValues: readonly string[];
+	requestUrl?: string;
+	redactedUrl?: string;
+	seen: Map<object, unknown>;
+	classificationObjects: Set<object>;
+};
+
+function isSdkErrorBrand(key: PropertyKey): boolean {
+	return (
+		typeof key === "symbol" &&
+		Symbol.keyFor(key)?.startsWith("@apifuse/provider-sdk/error-") === true
+	);
+}
+
+function redactDiagnosticString(value: string, context: RedactionContext): string {
+	return redactSensitiveText(
+		value,
+		context.sensitiveValues,
+		context.requestUrl,
+		context.redactedUrl,
+	);
+}
+
+function redactClassificationString(value: string, context: RedactionContext): string {
+	let redacted =
+		context.requestUrl && context.redactedUrl
+			? value.replaceAll(context.requestUrl, context.redactedUrl)
+			: value;
+	for (const variant of allSensitiveValueVariants(context.sensitiveValues)) {
+		redacted = replaceSensitiveVariant(redacted, {
+			...variant,
+			requiresTokenBoundary: false,
+		});
+	}
+	return redacted;
+}
+
+function cloneForRedaction(source: object): object {
+	let clone: object;
+	try {
+		clone = Array.isArray(source)
+			? []
+			: source instanceof DOMException
+				? new DOMException(source.message, source.name)
+				: Object.create(Object.getPrototypeOf(source));
+		if (Array.isArray(source) && Object.getPrototypeOf(source) !== Array.prototype) {
+			Object.setPrototypeOf(clone, Object.getPrototypeOf(source));
+		}
+	} catch {
+		clone = source instanceof Error ? new Error() : {};
+	}
+
+	for (const key of Reflect.ownKeys(source)) {
+		const descriptor = Object.getOwnPropertyDescriptor(source, key);
+		if (!descriptor) continue;
+		if (Array.isArray(source) && key === "length") continue;
+		try {
+			const preserveSdkBrand = isSdkErrorBrand(key);
+			Object.defineProperty(
+				clone,
+				key,
+				preserveSdkBrand
+					? descriptor
+					: {
+							...descriptor,
+							configurable: true,
+							...(Object.hasOwn(descriptor, "value") ? { writable: true } : {}),
+						},
+			);
+		} catch {
+			// A hostile or exotic diagnostic property must not make redaction fail.
+		}
+	}
+	if (source instanceof Error) {
+		// DOMException exposes name/message through internal-slot getters. An
+		// Object.create clone does not carry those slots, so materialize the
+		// classification fields as safe own properties on the replacement.
+		for (const key of ["name", "message", "stack"] as const) {
+			if (Object.hasOwn(clone, key)) continue;
+			const property = readDiagnosticProperty(source, key);
+			if (!property.ok) continue;
+			const propertyValue =
+				key === "stack" && typeof property.value !== "string" ? new Error().stack : property.value;
+			try {
+				Object.defineProperty(clone, key, {
+					value: propertyValue,
+					configurable: true,
+					enumerable: false,
+					writable: true,
+				});
+			} catch {
+				// The generic Error fallback remains classifiable even if an exotic
+				// prototype rejects an own diagnostic property.
+			}
+		}
+	}
+	return clone;
+}
+
+function setDiagnosticProperty(target: object, key: PropertyKey, value: unknown): boolean {
+	try {
+		return Reflect.set(target, key, value, target);
+	} catch {
+		return false;
+	}
+}
+
+function diagnosticPropertyKeys(value: object): PropertyKey[] {
+	const keys = new Set<PropertyKey>(Reflect.ownKeys(value));
+	if (value instanceof Error) {
+		// Built-in error text and AggregateError.errors are commonly
+		// non-enumerable, while SDK options carry serializable details.
+		for (const key of ["name", "message", "stack", "cause", "errors", "options"] as const) {
+			if (key in value) keys.add(key);
+		}
+	}
+	if (!(value instanceof Error) && "toJSON" in value) keys.add("toJSON");
+	return [...keys];
+}
+
+function requiresCloneBeforeRedaction(value: object, keys: readonly PropertyKey[]): boolean {
+	for (const key of keys) {
+		if (isSdkErrorBrand(key)) continue;
+		let owner: object | null = value;
+		while (owner) {
+			const descriptor = Object.getOwnPropertyDescriptor(owner, key);
+			if (descriptor) {
+				if (Object.hasOwn(descriptor, "value")) {
+					if (owner === value && descriptor.writable === false) return true;
+				} else if (descriptor.set === undefined) {
+					return true;
+				}
+				break;
+			}
+			owner = Object.getPrototypeOf(owner);
+		}
+	}
+	return false;
+}
+
+function readDiagnosticProperty(
+	value: object,
+	key: PropertyKey,
+): { ok: true; value: unknown } | { ok: false } {
+	try {
+		return { ok: true, value: Reflect.get(value, key, value) };
+	} catch {
+		return { ok: false };
+	}
+}
+
+// These fields control error identity/classification downstream. Their values
+// are exempt from whole-value replacement, but strings are still scrubbed when
+// they contain an actual declared credential or request URL.
+const DIAGNOSTIC_CLASSIFICATION_FIELDS = new Set([
+	"name",
+	"code",
+	"status",
+	"upstreamStatus",
+	"category",
+	"retryable",
+]);
+
+// Underscore-delimited error codes are semantic identities, not diagnostic
+// payload. Preserve the shared SDK/provider code convention without maintaining
+// a second, inevitably partial list of codes declared by individual transports.
+function isSemanticErrorCode(value: string): boolean {
+	return /^(?:[A-Za-z][A-Za-z0-9]*_)+[A-Za-z0-9]+$/.test(value);
+}
+
+function isClassificationField(
+	context: RedactionContext,
+	propertyName: string | undefined,
+	parent: object | undefined,
+): boolean {
+	return Boolean(
+		propertyName &&
+			parent &&
+			context.classificationObjects.has(parent) &&
+			DIAGNOSTIC_CLASSIFICATION_FIELDS.has(propertyName),
+	);
+}
+
+function redactedDiagnosticKey(key: string, context: RedactionContext): string {
+	return redactClassificationString(key, context);
+}
+
+function hasRedactedOwnKey(value: object, context: RedactionContext): boolean {
+	return Object.getOwnPropertyNames(value).some(
+		(key) => redactedDiagnosticKey(key, context) !== key,
+	);
+}
+
+function collisionSafeDiagnosticKey(target: object, preferredKey: string): string {
+	if (!Object.hasOwn(target, preferredKey)) return preferredKey;
+	let suffix = 2;
+	while (Object.hasOwn(target, `${preferredKey}#${suffix}`)) suffix += 1;
+	return `${preferredKey}#${suffix}`;
+}
+
+function redactDiagnosticValue(
+	value: unknown,
+	context: RedactionContext,
+	propertyName?: string,
+	parent?: object,
+): unknown {
+	const classificationField = isClassificationField(context, propertyName, parent);
+	if (classificationField && typeof value !== "string") return value;
+	if (typeof value === "string") {
+		if (!classificationField) return redactDiagnosticString(value, context);
+		const redacted = redactClassificationString(value, context);
+		if (propertyName === "code" && redacted === value && isSemanticErrorCode(value)) return value;
+		return redacted;
+	}
+	if (typeof value === "number" || typeof value === "bigint" || typeof value === "boolean") {
+		return context.sensitiveValues.includes(String(value)) ? REDACTED_QUERY_VALUE : value;
+	}
+	if ((typeof value !== "object" && typeof value !== "function") || value === null) return value;
+	if (value instanceof URL) {
+		const redactedUrl = redactDiagnosticString(value.toString(), context);
+		if (redactedUrl === value.toString()) return value;
+		try {
+			return new URL(redactedUrl);
+		} catch {
+			return redactedUrl;
+		}
+	}
+	if (value instanceof Headers) {
+		const redactedHeaders = new Headers();
+		for (const [key, headerValue] of value.entries()) {
+			redactedHeaders.append(key, redactDiagnosticString(headerValue, context));
+		}
+		return redactedHeaders;
+	}
+	if (value instanceof Request) {
+		const redactedUrl = redactDiagnosticString(value.url, context);
+		const redactedHeaders = redactDiagnosticValue(value.headers, context) as Headers;
+		if (
+			redactedUrl === value.url &&
+			[...value.headers].every(([key, headerValue]) => {
+				return redactedHeaders.get(key) === headerValue;
+			})
+		) {
+			return value;
+		}
+		try {
+			const redactedRequest = new Request(redactedUrl, value);
+			for (const key of [...redactedRequest.headers.keys()]) redactedRequest.headers.delete(key);
+			for (const [key, headerValue] of redactedHeaders) {
+				redactedRequest.headers.append(key, headerValue);
+			}
+			return redactedRequest;
+		} catch {
+			const redactedRequest = Object.create(Object.getPrototypeOf(value)) as object;
+			Object.defineProperties(redactedRequest, {
+				headers: { value: redactedHeaders, enumerable: true },
+				url: { value: redactedUrl, enumerable: true },
+			});
+			return redactedRequest;
+		}
+	}
+	if (value instanceof Response) {
+		const redactedUrl = redactDiagnosticString(value.url, context);
+		const redactedHeaders = redactDiagnosticValue(value.headers, context) as Headers;
+		if (
+			redactedUrl === value.url &&
+			[...value.headers].every(([key, headerValue]) => {
+				return redactedHeaders.get(key) === headerValue;
+			})
+		) {
+			return value;
+		}
+		const redactedResponse = Object.create(Object.getPrototypeOf(value)) as object;
+		Object.defineProperties(redactedResponse, {
+			headers: { value: redactedHeaders, enumerable: true },
+			ok: { value: value.ok, enumerable: true },
+			redirected: { value: value.redirected, enumerable: true },
+			status: { value: value.status, enumerable: true },
+			statusText: {
+				value: redactDiagnosticString(value.statusText, context),
+				enumerable: true,
+			},
+			type: { value: value.type, enumerable: true },
+			url: { value: redactedUrl, enumerable: true },
+		});
+		return redactedResponse;
+	}
+
+	const previouslySeen = context.seen.get(value);
+	if (previouslySeen !== undefined) return previouslySeen;
+	if (value instanceof Map) {
+		const redactedMap = new Map<unknown, unknown>();
+		context.seen.set(value, redactedMap);
+		for (const [key, entryValue] of value) {
+			redactedMap.set(
+				redactDiagnosticValue(key, context),
+				redactDiagnosticValue(entryValue, context),
+			);
+		}
+		return redactedMap;
+	}
+
+	// Clone non-extensible graphs before descending so cycles encountered before
+	// a secret-bearing readonly field already point at the eventual replacement.
+	// Without this, a frozen `error.cause = error` graph could retain the original
+	// secret through the cloned node's earlier self-reference.
+	const keys = diagnosticPropertyKeys(value);
+	let target: object =
+		Object.isExtensible(value) &&
+		!requiresCloneBeforeRedaction(value, keys) &&
+		!hasRedactedOwnKey(value, context)
+			? value
+			: cloneForRedaction(value);
+	context.seen.set(value, target);
+
+	for (const key of keys) {
+		const current = readDiagnosticProperty(value, key);
+		if (!current.ok) continue;
+		const propertyName = typeof key === "string" ? key : undefined;
+		const redacted =
+			key === "toJSON" && typeof current.value === "function"
+				? (...args: unknown[]) =>
+						redactDiagnosticValue(
+							Reflect.apply(current.value as (...args: unknown[]) => unknown, value, args),
+							context,
+						)
+				: redactDiagnosticValue(current.value, context, propertyName, value);
+		const ownKey = Object.hasOwn(value, key);
+		const preferredKey =
+			ownKey && typeof key === "string" ? redactedDiagnosticKey(key, context) : key;
+		let targetKey = key;
+		if (preferredKey !== key) {
+			try {
+				Reflect.deleteProperty(target, key);
+			} catch {
+				// A clone is selected before traversal whenever an own key changes,
+				// so this is only a defensive fallback for exotic proxies.
+			}
+			targetKey = collisionSafeDiagnosticKey(target, preferredKey as string);
+		}
+		if (targetKey === key && Object.is(redacted, current.value)) continue;
+
+		if (!setDiagnosticProperty(target, targetKey, redacted)) {
+			if (target === value) {
+				target = cloneForRedaction(value);
+				context.seen.set(value, target);
+			}
+			if (!setDiagnosticProperty(target, targetKey, redacted)) {
+				// cloneForRedaction deliberately makes string-keyed own properties
+				// configurable. This is a last-resort path for inherited readonly
+				// accessors such as DOMException.message.
+				try {
+					Object.defineProperty(target, targetKey, {
+						value: redacted,
+						configurable: true,
+						enumerable: targetKey !== "message" && targetKey !== "stack" && targetKey !== "cause",
+						writable: true,
+					});
+				} catch {
+					// Redaction is best-effort for inaccessible exotic properties, but
+					// it must never mask the original transport failure.
+				}
+			}
+		}
+	}
+
+	return target;
+}
+
+/**
+ * Redacts error text and recursively serializable diagnostic metadata.
+ * Mutable errors retain identity; readonly/frozen errors may be replaced, so
+ * callers must use the returned value.
+ */
+export function redactSensitiveError<T>(
+	error: T,
+	sensitiveValues: readonly string[],
+	requestUrl?: string,
+	redactedUrl?: string,
+): T {
+	if (sensitiveValues.length === 0 && (!requestUrl || !redactedUrl || requestUrl === redactedUrl)) {
+		return error;
+	}
+	const classificationObjects = new Set<object>();
+	if ((typeof error === "object" || typeof error === "function") && error !== null) {
+		classificationObjects.add(error);
+		if (isProviderError(error)) {
+			const options = readDiagnosticProperty(error, "options");
+			if (options.ok && typeof options.value === "object" && options.value !== null) {
+				classificationObjects.add(options.value);
+			}
+		}
+	}
+	return redactDiagnosticValue(error, {
+		classificationObjects,
+		sensitiveValues,
+		requestUrl,
+		redactedUrl,
+		seen: new Map(),
+	}) as T;
+}
+
+/** Redacts failures that occur before a request URL can be fully serialized. */
+export function redactSensitiveRequestError<T>(
+	error: T,
+	url: string,
+	sensitiveParams?: Record<string, string>,
+): T {
+	const normalizedSensitiveParams = normalizeSensitiveParams(sensitiveParams);
+	const structural = redactUrlQueryParams(url, Object.keys(normalizedSensitiveParams ?? {}));
+	return redactSensitiveError(
+		error,
+		[
+			...new Set([
+				...Object.values(normalizedSensitiveParams ?? {}).map(String),
+				...structural.sensitiveValues,
+			]),
+		],
+		url,
+		structural.redactedUrl,
+	);
+}
+
+function isRequestOptions(value: unknown): value is RequestOptions {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+
+/** Validates an untyped proxy invocation before narrowing it to the HttpClient contract. */
+export function parseHttpRequestInvocation(
+	method: PropertyKey,
+	args: unknown[],
+): HttpRequestInvocation | undefined {
+	if (!isHttpRequestMethod(method) || typeof args[0] !== "string") return undefined;
+	const optionsIndex = HTTP_REQUEST_METHOD_CONFIG[method].optionsIndex;
+	const options = args[optionsIndex];
+	if (options !== undefined && !isRequestOptions(options)) return undefined;
+
+	if (method === "post" || method === "put") {
+		if (args.length < 2 || args.length > 3) return undefined;
+		return { method, args: args as Parameters<HttpClient[typeof method]> };
+	}
+	if (args.length > 2) return undefined;
+	return { method, args: args as Parameters<HttpClient[typeof method]> };
+}
+
+/** Internal typed registry for the request-options position of HttpClient calls. */
+export function requestOptionsFromHttpInvocation(
+	invocation: HttpRequestInvocation,
+): RequestOptions | undefined {
+	const candidate = invocation.args[HTTP_REQUEST_METHOD_CONFIG[invocation.method].optionsIndex];
+	return isRequestOptions(candidate) ? candidate : undefined;
+}
+
+export function replaceRequestOptionsInHttpInvocation(
+	invocation: HttpRequestInvocation,
+	options: RequestOptions,
+): void {
+	invocation.args[HTTP_REQUEST_METHOD_CONFIG[invocation.method].optionsIndex] = options;
+}
+
 export function normalizeHttpRequestBody(body: unknown): string | Buffer | undefined {
 	if (body === undefined) {
 		return undefined;

package/src/runtime/resolver-config.ts

@@ -0,0 +1,6 @@
+export const APIFUSE__RESOLVER__2CAPTCHA__API_KEY = "APIFUSE__RESOLVER__2CAPTCHA__API_KEY";
+export const APIFUSE__RESOLVER__CAPSOLVER__API_KEY = "APIFUSE__RESOLVER__CAPSOLVER__API_KEY";
+export const APIFUSE__RESOLVER__CAPMONSTER__API_KEY = "APIFUSE__RESOLVER__CAPMONSTER__API_KEY";
+export const APIFUSE__RESOLVER__TIMEOUT_MS = "APIFUSE__RESOLVER__TIMEOUT_MS";
+export const APIFUSE__CDP_POOL__URL = "APIFUSE__CDP_POOL__URL";
+export const DEFAULT_RESOLVER_TIMEOUT_MS = 180_000;