@backblaze-labs/b2-sdk 0.2.0 → 0.3.0

package/dist/http/retry.js.map

@@ -1 +1 @@
-{"version":3,"file":"retry.js","names":[],"sources":["../../src/http/retry.ts"],"sourcesContent":["/** Configuration for retry behavior on transient failures. */\nexport interface RetryOptions {\n  /** Maximum number of retry attempts before giving up. */\n  readonly maxRetries: number\n  /** Upper bound on retry delay in milliseconds, regardless of backoff calculation. */\n  readonly maxRetryDelayMs: number\n  /** Base delay in milliseconds for the first retry. Doubles on each subsequent attempt. */\n  readonly initialRetryDelayMs: number\n  /**\n   * Optional timeout for each HTTP request attempt. Defaults to 15 minutes\n   * when omitted. The timer covers request dispatch, upload bodies, and\n   * non-streaming response body reads. For `response.body` streams it is an\n   * idle timeout that resets after each received chunk. Set to 0 to disable\n   * the SDK timeout and rely only on the caller's AbortSignal.\n   */\n  readonly requestTimeoutMs?: number\n}\n\n/** Default retry settings: 5 retries, 1s initial delay, 64s max delay, 15 minute timeout. */\nexport const DEFAULT_RETRY_OPTIONS = {\n  maxRetries: 5,\n  maxRetryDelayMs: 64_000,\n  initialRetryDelayMs: 1_000,\n  requestTimeoutMs: 15 * 60_000,\n} satisfies Required<RetryOptions>\n\n/**\n * Computes the delay before the next retry using exponential backoff with jitter.\n * If a `Retry-After` value is provided by the server, it takes precedence over\n * the calculated backoff (still capped at {@link RetryOptions.maxRetryDelayMs}).\n *\n * @param attempt - Zero-based retry attempt index.\n * @param options - Retry configuration with delay bounds.\n * @param retryAfter - Server-provided retry delay in seconds, if any.\n *\n * @returns The delay in milliseconds before the next retry attempt.\n */\nexport function computeBackoff(\n  attempt: number,\n  options: RetryOptions,\n  retryAfter?: number,\n): number {\n  if (retryAfter !== undefined && retryAfter > 0) {\n    return Math.min(retryAfter * 1000, options.maxRetryDelayMs)\n  }\n  const base = options.initialRetryDelayMs * 2 ** attempt\n  const jitter = Math.random() * base * 0.5\n  return Math.min(base + jitter, options.maxRetryDelayMs)\n}\n\n/**\n * Returns a promise that resolves after the given delay. Supports cancellation\n * via an optional AbortSignal.\n *\n * @param ms - Delay in milliseconds.\n * @param signal - Optional abort signal to cancel the sleep early.\n *\n * @returns A promise that resolves when the delay elapses or rejects if aborted.\n */\nexport function sleep(ms: number, signal?: AbortSignal): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (signal?.aborted) {\n      reject(signal.reason ?? new DOMException('Aborted', 'AbortError'))\n      return\n    }\n    const timer = setTimeout(resolve, ms)\n    signal?.addEventListener(\n      'abort',\n      () => {\n        clearTimeout(timer)\n        reject(signal.reason ?? new DOMException('Aborted', 'AbortError'))\n      },\n      { once: true },\n    )\n  })\n}\n"],"mappings":";;AAmBA,IAAa,wBAAwB;CACnC,YAAY;CACZ,iBAAiB;CACjB,qBAAqB;CACrB,kBAAkB,KAAK;AACzB;;;;;;;;;;;;AAaA,SAAgB,eACd,SACA,SACA,YACQ;CACR,IAAI,eAAe,KAAA,KAAa,aAAa,GAC3C,OAAO,KAAK,IAAI,aAAa,KAAM,QAAQ,eAAe;CAE5D,MAAM,OAAO,QAAQ,sBAAsB,KAAK;CAChD,MAAM,SAAS,KAAK,OAAO,IAAI,OAAO;CACtC,OAAO,KAAK,IAAI,OAAO,QAAQ,QAAQ,eAAe;AACxD;;;;;;;;;;AAWA,SAAgB,MAAM,IAAY,QAAqC;CACrE,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,IAAI,QAAQ,SAAS;GACnB,OAAO,OAAO,UAAU,IAAI,aAAa,WAAW,YAAY,CAAC;GACjE;EACF;EACA,MAAM,QAAQ,WAAW,SAAS,EAAE;EACpC,QAAQ,iBACN,eACM;GACJ,aAAa,KAAK;GAClB,OAAO,OAAO,UAAU,IAAI,aAAa,WAAW,YAAY,CAAC;EACnE,GACA,EAAE,MAAM,KAAK,CACf;CACF,CAAC;AACH"}
+{"version":3,"file":"retry.js","names":[],"sources":["../../src/http/retry.ts"],"sourcesContent":["/** Configuration for retry behavior on transient failures. */\nexport interface RetryOptions {\n  /** Maximum number of retry attempts before giving up. */\n  readonly maxRetries: number\n  /** Upper bound on retry delay in milliseconds, regardless of backoff calculation. */\n  readonly maxRetryDelayMs: number\n  /** Base delay in milliseconds for the first retry. Doubles on each subsequent attempt. */\n  readonly initialRetryDelayMs: number\n  /**\n   * Optional timeout for each HTTP request attempt. Defaults to 15 minutes\n   * when omitted. The timer covers request dispatch, upload bodies, and\n   * non-streaming response body reads. For `response.body` streams it is an\n   * idle timeout that resets after each received chunk. Set to 0 to disable\n   * the SDK timeout and rely only on the caller's AbortSignal.\n   */\n  readonly requestTimeoutMs?: number\n}\n\n/** Default retry settings: 5 retries, 1s initial delay, 64s max delay, 15 minute timeout. */\nexport const DEFAULT_RETRY_OPTIONS = {\n  maxRetries: 5,\n  maxRetryDelayMs: 64_000,\n  initialRetryDelayMs: 1_000,\n  requestTimeoutMs: 15 * 60_000,\n} satisfies Required<RetryOptions>\n\n/**\n * Computes the delay before the next retry using exponential backoff with jitter.\n * If a `Retry-After` value is provided by the server, it takes precedence over\n * the calculated backoff (still capped at {@link RetryOptions.maxRetryDelayMs}).\n *\n * @param attempt - Zero-based retry attempt index.\n * @param options - Retry configuration with delay bounds.\n * @param retryAfter - Server-provided retry delay in seconds, if any.\n *\n * @returns The delay in milliseconds before the next retry attempt.\n */\nexport function computeBackoff(\n  attempt: number,\n  options: RetryOptions,\n  retryAfter?: number,\n): number {\n  if (retryAfter !== undefined && retryAfter > 0) {\n    return Math.min(retryAfter * 1000, options.maxRetryDelayMs)\n  }\n  const base = options.initialRetryDelayMs * 2 ** attempt\n  const jitter = Math.random() * base * 0.5\n  return Math.min(base + jitter, options.maxRetryDelayMs)\n}\n\n/**\n * Returns a promise that resolves after the given delay. Supports cancellation\n * via an optional AbortSignal.\n *\n * @param ms - Delay in milliseconds.\n * @param signal - Optional abort signal to cancel the sleep early.\n *\n * @returns A promise that resolves when the delay elapses or rejects if aborted.\n */\nexport function sleep(ms: number, signal?: AbortSignal): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (signal?.aborted) {\n      reject(signal.reason ?? new DOMException('Aborted', 'AbortError'))\n      return\n    }\n    const timer = setTimeout(resolve, ms)\n    signal?.addEventListener(\n      'abort',\n      () => {\n        clearTimeout(timer)\n        reject(signal.reason ?? new DOMException('Aborted', 'AbortError'))\n      },\n      { once: true },\n    )\n  })\n}\n"],"mappings":";;AAmBA,IAAa,wBAAwB;CACnC,YAAY;CACZ,iBAAiB;CACjB,qBAAqB;CACrB,kBAAkB;AACpB;;;;;;;;;;;;AAaA,SAAgB,eACd,SACA,SACA,YACQ;CACR,IAAI,eAAe,KAAA,KAAa,aAAa,GAC3C,OAAO,KAAK,IAAI,aAAa,KAAM,QAAQ,eAAe;CAE5D,MAAM,OAAO,QAAQ,sBAAsB,KAAK;CAChD,MAAM,SAAS,KAAK,OAAO,IAAI,OAAO;CACtC,OAAO,KAAK,IAAI,OAAO,QAAQ,QAAQ,eAAe;AACxD;;;;;;;;;;AAWA,SAAgB,MAAM,IAAY,QAAqC;CACrE,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,IAAI,QAAQ,SAAS;GACnB,OAAO,OAAO,UAAU,IAAI,aAAa,WAAW,YAAY,CAAC;GACjE;EACF;EACA,MAAM,QAAQ,WAAW,SAAS,EAAE;EACpC,QAAQ,iBACN,eACM;GACJ,aAAa,KAAK;GAClB,OAAO,OAAO,UAAU,IAAI,aAAa,WAAW,YAAY,CAAC;EACnE,GACA,EAAE,MAAM,KAAK,CACf;CACF,CAAC;AACH"}

package/dist/http/transport.cjs

@@ -1,4 +1,5 @@
 const require_errors_index = require("../errors/index.cjs");
+const require_abort = require("../util/abort.cjs");
 const require_retry = require("./retry.cjs");
 const require_url_guard = require("./url-guard.cjs");
 const require_user_agent = require("./user-agent.cjs");
@@ -12,6 +13,18 @@ var REDIRECT_STATUSES = /* @__PURE__ */ new Set([
 ]);
 var MAX_SAME_ORIGIN_REDIRECTS = 5;
 /**
+* Returns the URL guard exposed by `transport`, if it implements
+* {@link UrlGuardedTransport}.
+*
+* @param transport - Transport to inspect.
+*
+* @returns The exposed URL guard, or undefined for unguarded transports.
+*/
+function getTransportUrlGuard(transport) {
+	const candidate = transport;
+	return candidate.urlGuard instanceof require_url_guard.UrlGuard ? candidate.urlGuard : void 0;
+}
+/**
 * Default transport implementation using the global `fetch` API.
 * Automatically sets the User-Agent header on each request and applies the
 * SSRF {@link UrlGuard} (if configured) before opening the connection.
@@ -218,17 +231,16 @@ function createTimedResponseBody(body, timeoutScope) {
 async function raceBodyReadWithAbort(timeoutScope, read, abortCleanup) {
 	const signal = timeoutScope.signal;
 	if (signal === void 0) return read;
-	const abortReason = () => signal.reason ?? new DOMException("Aborted", "AbortError");
 	if (signal.aborted) {
 		read.catch(() => {});
-		const reason = abortReason();
+		const reason = require_abort.abortReason(signal);
 		await runAbortCleanup(abortCleanup, reason);
 		throw reason;
 	}
 	let removeAbortListener;
 	const abort = new Promise((_, reject) => {
 		const onAbort = () => {
-			const reason = abortReason();
+			const reason = require_abort.abortReason(signal);
 			read.catch(() => {});
 			reject(reason);
 			runAbortCleanup(abortCleanup, reason);
@@ -277,16 +289,38 @@ function isUploadEndpoint(url) {
 function isFinishLargeFileEndpoint(url) {
 	return b2ApiEndpointName(url) === "b2_finish_large_file";
 }
+function isAuthorizeEndpoint(url) {
+	return b2ApiEndpointName(url) === "b2_authorize_account";
+}
 function isStartLargeFileEndpoint(url) {
 	return b2ApiEndpointName(url) === "b2_start_large_file";
 }
+function isPartnerMutationEndpoint(url) {
+	const endpoint = b2ApiEndpointName(url);
+	return endpoint === "b2_create_group_member" || endpoint === "b2_eject_group_member" || endpoint === "b2_reserve_trial_create_account";
+}
+function isBackupMutationEndpoint(url) {
+	return backupApiEndpointName(url) === "bz_delete_computer";
+}
+function isNonIdempotentMutationRequest(request) {
+	return request.method === "POST" && (isPartnerMutationEndpoint(request.url) || isBackupMutationEndpoint(request.url));
+}
 function b2ApiEndpointName(url) {
-	const [, root, , endpoint] = new URL(url).pathname.split("/");
-	if (root !== "b2api") return void 0;
-	return endpoint;
+	const segments = new URL(url).pathname.split("/").filter((segment) => segment.length > 0);
+	const apiRootIndex = segments.lastIndexOf("b2api");
+	if (apiRootIndex === -1) return void 0;
+	return segments[apiRootIndex + 2];
 }
-function isReplayUnsafePostEndpoint(url) {
-	return isUploadEndpoint(url) || isStartLargeFileEndpoint(url) || isFinishLargeFileEndpoint(url);
+function backupApiEndpointName(url) {
+	const segments = new URL(url).pathname.split("/").filter((segment) => segment.length > 0);
+	const apiRootIndex = segments.lastIndexOf("api");
+	if (apiRootIndex === -1 || segments[apiRootIndex + 1] !== "backup") return void 0;
+	if (!/^v\d+$/.test(segments[apiRootIndex + 2] ?? "")) return void 0;
+	return segments[apiRootIndex + 3];
+}
+function isReplayUnsafePostRequest(request) {
+	if (request.method !== "POST") return false;
+	return isUploadEndpoint(request.url) || isStartLargeFileEndpoint(request.url) || isFinishLargeFileEndpoint(request.url) || isNonIdempotentMutationRequest(request);
 }
 /**
 * Decide whether a classified error should be retried in place for `url`.
@@ -295,15 +329,17 @@ function isReplayUnsafePostEndpoint(url) {
 * upload URL only amplifies the rate limit.
 *
 * @param error - The classified, retryability-tagged error.
-* @param url - The request URL (used to detect upload endpoints).
+* @param request - The request being considered for in-place retry.
 *
 * @returns Whether to retry the request in place.
 */
-function shouldRetryInPlace(error, url) {
+function shouldRetryInPlace(error, request) {
 	if (!error.retryable) return false;
-	if (isStartLargeFileEndpoint(url) || isFinishLargeFileEndpoint(url)) return false;
-	if (isUploadEndpoint(url) && error.status === 429) return true;
-	if (isUploadEndpoint(url)) return false;
+	if (isAuthorizeEndpoint(request.url) && error instanceof require_errors_index.ExpiredAuthTokenError) return false;
+	if (isNonIdempotentMutationRequest(request)) return false;
+	if (isStartLargeFileEndpoint(request.url) || isFinishLargeFileEndpoint(request.url)) return false;
+	if (isUploadEndpoint(request.url) && error.status === 429) return true;
+	if (isUploadEndpoint(request.url)) return false;
 	return true;
 }
 function isRequestTimeoutError(err) {
@@ -324,6 +360,8 @@ function isTerminalTransportError(err) {
 * retry so account-level throttling does not trigger extra upload URL fetches.
 */
 var RetryTransport = class {
+	/** URL guard from the wrapped transport, when the transport exposes one. */
+	urlGuard;
 	/** The wrapped transport that performs actual HTTP requests. */
 	inner;
 	/** Resolved retry options (defaults merged with user overrides). */
@@ -338,6 +376,7 @@ var RetryTransport = class {
 	*/
 	constructor(opts) {
 		this.inner = opts.transport;
+		this.urlGuard = getTransportUrlGuard(opts.transport);
 		this.options = {
 			...require_retry.DEFAULT_RETRY_OPTIONS,
 			...opts.retry
@@ -364,7 +403,7 @@ var RetryTransport = class {
 		let didReauth = false;
 		let attempt = 0;
 		while (attempt <= retryOptions.maxRetries) {
-			throwIfSignalAborted(request.signal);
+			require_abort.throwIfSignalAborted(request.signal);
 			if (attempt > 0 && lastError) {
 				const retryAfter = lastError instanceof require_errors_index.NetworkError ? void 0 : lastError.retryAfter;
 				const delay = require_retry.computeBackoff(attempt - 1, retryOptions, retryAfter);
@@ -395,8 +434,9 @@ var RetryTransport = class {
 					...retryAfterSec !== void 0 ? { retryAfter: retryAfterSec } : {},
 					...requestId !== void 0 ? { requestId } : {}
 				});
-				if (error instanceof require_errors_index.ExpiredAuthTokenError && this.onReauth && !isUploadEndpoint(request.url) && !didReauth) {
-					const freshToken = await this.onReauth();
+				if (error instanceof require_errors_index.ExpiredAuthTokenError && this.onReauth && !isAuthorizeEndpoint(request.url) && !isUploadEndpoint(request.url) && !isNonIdempotentMutationRequest(request) && !didReauth) {
+					const freshToken = await require_abort.raceWithAbort(this.onReauth(request.signal), request.signal);
+					require_abort.throwIfSignalAborted(request.signal);
 					request = {
 						...request,
 						headers: {
@@ -408,14 +448,14 @@ var RetryTransport = class {
 					lastError = void 0;
 					continue;
 				}
-				if (!shouldRetryInPlace(error, request.url) || attempt === retryOptions.maxRetries) throw error;
+				if (!shouldRetryInPlace(error, request) || attempt === retryOptions.maxRetries) throw error;
 				lastError = error;
 				attempt += 1;
 			} catch (err) {
-				throwIfSignalAborted(request.signal);
+				require_abort.throwIfSignalAborted(request.signal);
 				if (isTerminalTransportError(err)) throw err;
 				const networkErr = new require_errors_index.NetworkError(err instanceof Error ? err.message : "Network error", err);
-				if (isReplayUnsafePostEndpoint(request.url) || attempt === retryOptions.maxRetries) throw networkErr;
+				if (isReplayUnsafePostRequest(request) || attempt === retryOptions.maxRetries) throw networkErr;
 				lastError = networkErr;
 				attempt += 1;
 			}
@@ -423,12 +463,9 @@ var RetryTransport = class {
 		throw lastError ?? new require_errors_index.NetworkError("Max retries exceeded");
 	}
 };
-function throwIfSignalAborted(signal) {
-	if (signal?.aborted === true) throw signal.reason ?? new DOMException("Aborted", "AbortError");
-}
 async function throwIfSignalAbortedAfterResponse(signal, response) {
 	if (signal?.aborted !== true) return;
-	const reason = signal.reason ?? new DOMException("Aborted", "AbortError");
+	const reason = require_abort.abortReason(signal);
 	try {
 		await response.body?.cancel(reason);
 	} catch {}
@@ -437,5 +474,6 @@ async function throwIfSignalAbortedAfterResponse(signal, response) {
 //#endregion
 exports.FetchTransport = FetchTransport;
 exports.RetryTransport = RetryTransport;
+exports.getTransportUrlGuard = getTransportUrlGuard;
 
 //# sourceMappingURL=transport.cjs.map

package/dist/http/transport.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"transport.cjs","names":[],"sources":["../../src/http/transport.ts"],"sourcesContent":["import {\n  B2Error,\n  B2RedirectError,\n  B2SsrfError,\n  classifyError,\n  ExpiredAuthTokenError,\n  NetworkError,\n} from '../errors/index.ts'\nimport type { B2ErrorResponse } from '../types/errors.ts'\nimport { computeBackoff, DEFAULT_RETRY_OPTIONS, type RetryOptions, sleep } from './retry.ts'\nimport { UrlGuard } from './url-guard.ts'\nimport { getUserAgent } from './user-agent.ts'\n\nconst REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308])\nconst MAX_SAME_ORIGIN_REDIRECTS = 5\n\n/** Describes an outgoing HTTP request to the B2 API. */\nexport interface HttpRequest {\n  /** Fully qualified URL to send the request to. */\n  readonly url: string\n  /** HTTP method. B2 uses GET for downloads (HEAD to fetch only headers) and POST for all other operations. */\n  readonly method: 'GET' | 'HEAD' | 'POST'\n  /** Request headers. Authorization and content-type are typically included. */\n  readonly headers?: Record<string, string>\n  /** Request body. Used for POST requests (JSON payloads or file uploads). */\n  readonly body?: BodyInit | null\n  /** Optional abort signal for request cancellation. */\n  readonly signal?: AbortSignal\n  /** Optional per-request retry override. */\n  readonly retry?: Partial<RetryOptions>\n}\n\n/** Represents a parsed HTTP response from the B2 API. */\nexport interface HttpResponse {\n  /** HTTP status code. */\n  readonly status: number\n  /** Response headers. */\n  readonly headers: Headers\n  /** Response body as a readable stream, or null for empty responses. */\n  readonly body: ReadableStream<Uint8Array> | null\n  /** Parses the response body as JSON. */\n  json<T>(): Promise<T>\n  /** Reads the response body as a UTF-8 string. */\n  text(): Promise<string>\n  /** Reads the response body as an ArrayBuffer. */\n  arrayBuffer(): Promise<ArrayBuffer>\n}\n\n/**\n * Transport layer abstraction for sending HTTP requests.\n * Implementations handle the actual network I/O and can be composed\n * (e.g. wrapping a {@link FetchTransport} with a {@link RetryTransport}).\n */\nexport interface HttpTransport {\n  /** Sends an HTTP request and returns the response. */\n  send(request: HttpRequest): Promise<HttpResponse>\n}\n\n/**\n * Default transport implementation using the global `fetch` API.\n * Automatically sets the User-Agent header on each request and applies the\n * SSRF {@link UrlGuard} (if configured) before opening the connection.\n * Redirect following is disabled so redirected URLs cannot bypass the guard or\n * receive credential-bearing headers without an explicit checked request.\n */\nexport class FetchTransport implements HttpTransport {\n  /** User-Agent string sent with every request. */\n  private readonly userAgent: string\n  /** Whether same-origin GET/HEAD redirects should be followed after guard checks. */\n  private readonly followSameOriginRedirects: boolean\n  /** SSRF allow-list applied to every outgoing URL. Mutable so `B2Client.authorize()` can lock it down post-auth. */\n  readonly urlGuard: UrlGuard\n\n  /**\n   * Creates a new FetchTransport.\n   * @param options - Optional configuration: custom User-Agent prefix and SSRF guard.\n   */\n  constructor(options?: {\n    userAgent?: string\n    urlGuard?: UrlGuard\n    /**\n     * Follow same-origin GET/HEAD redirects after checking the target with the\n     * URL guard. POST redirects are still blocked to avoid replaying\n     * credential-bearing payloads to an unexpected endpoint. Defaults to true.\n     */\n    followSameOriginRedirects?: boolean\n  }) {\n    this.userAgent = getUserAgent(options?.userAgent)\n    this.followSameOriginRedirects = options?.followSameOriginRedirects ?? true\n    this.urlGuard = options?.urlGuard ?? new UrlGuard()\n  }\n\n  /**\n   * Sends the request using the global `fetch` function.\n   * @param request - The HTTP request to execute.\n   *\n   * @returns The HTTP response.\n   *\n   * @throws B2SsrfError when the URL fails the configured SSRF guard.\n   * @throws B2RedirectError when a response attempts to redirect.\n   */\n  async send(request: HttpRequest): Promise<HttpResponse> {\n    let currentRequest = request\n    let redirectCount = 0\n\n    while (true) {\n      this.urlGuard.check(currentRequest.url)\n\n      const headers = new Headers(currentRequest.headers)\n      if (!headers.has('User-Agent')) {\n        headers.set('User-Agent', this.userAgent)\n      }\n\n      const timeoutScope = createRequestTimeoutScope(currentRequest)\n      let response: Response\n      try {\n        response = await fetch(currentRequest.url, {\n          method: currentRequest.method,\n          headers,\n          body: currentRequest.body ?? null,\n          redirect: 'manual',\n          ...(timeoutScope.signal !== undefined ? { signal: timeoutScope.signal } : {}),\n        })\n      } catch (err) {\n        timeoutScope.dispose()\n        if (timeoutScope.timedOut) {\n          throw createRequestTimeoutError(timeoutScope)\n        }\n        throw err\n      }\n\n      if (isBlockedRedirect(response)) {\n        const location = response.headers.get('Location')\n        if (\n          this.followSameOriginRedirects &&\n          location !== null &&\n          redirectCount < MAX_SAME_ORIGIN_REDIRECTS &&\n          canFollowSameOriginRedirect(currentRequest, location)\n        ) {\n          const nextUrl = new URL(location, currentRequest.url).toString()\n          await cancelResponseBody(response)\n          timeoutScope.dispose()\n          this.urlGuard.check(nextUrl)\n          currentRequest = { ...currentRequest, url: nextUrl }\n          redirectCount += 1\n          continue\n        }\n\n        await cancelResponseBody(response)\n        timeoutScope.dispose()\n        throw new B2RedirectError(currentRequest.url, response.status, location)\n      }\n\n      return createTimedHttpResponse(response, timeoutScope)\n    }\n  }\n}\n\ninterface RequestTimeoutScope {\n  readonly signal?: AbortSignal\n  readonly timeoutMs: number\n  readonly timedOut: boolean\n  reset(): void\n  dispose(): void\n}\n\nfunction createRequestTimeoutScope(request: HttpRequest): RequestTimeoutScope {\n  const timeoutMs = request.retry?.requestTimeoutMs ?? DEFAULT_RETRY_OPTIONS.requestTimeoutMs\n  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {\n    const scope: RequestTimeoutScope = {\n      timeoutMs: 0,\n      timedOut: false,\n      reset() {},\n      dispose() {},\n    }\n    if (request.signal !== undefined) return { ...scope, signal: request.signal }\n    return scope\n  }\n\n  const controller = new AbortController()\n  let timedOut = false\n  let timer: ReturnType<typeof setTimeout>\n  const abortFromUpstream = (): void => {\n    clearTimeout(timer)\n    controller.abort(request.signal?.reason ?? new DOMException('Aborted', 'AbortError'))\n  }\n  const armTimer = (): ReturnType<typeof setTimeout> => {\n    const nextTimer = setTimeout(() => {\n      timedOut = true\n      controller.abort(new DOMException('HTTP request timed out', 'TimeoutError'))\n    }, timeoutMs)\n    unrefTimer(nextTimer)\n    return nextTimer\n  }\n  timer = armTimer()\n\n  const reset = (): void => {\n    if (timedOut || controller.signal.aborted) return\n    clearTimeout(timer)\n    timer = armTimer()\n  }\n\n  if (request.signal?.aborted === true) {\n    clearTimeout(timer)\n    abortFromUpstream()\n  } else {\n    request.signal?.addEventListener('abort', abortFromUpstream, { once: true })\n  }\n\n  return {\n    signal: controller.signal,\n    timeoutMs,\n    get timedOut() {\n      return timedOut\n    },\n    reset,\n    dispose() {\n      clearTimeout(timer)\n      request.signal?.removeEventListener('abort', abortFromUpstream)\n    },\n  }\n}\n\nfunction unrefTimer(timer: ReturnType<typeof setTimeout>): void {\n  const maybeUnref = (timer as { unref?: () => void }).unref\n  if (typeof maybeUnref === 'function') maybeUnref.call(timer)\n}\n\nfunction createRequestTimeoutError(scope: RequestTimeoutScope): DOMException {\n  return new DOMException(`HTTP request timed out after ${scope.timeoutMs} ms`, 'TimeoutError')\n}\n\nfunction createTimedHttpResponse(\n  response: Response,\n  timeoutScope: RequestTimeoutScope,\n): HttpResponse {\n  const body = response.body\n  if (body === null) timeoutScope.dispose()\n  let timedBody: ReadableStream<Uint8Array> | undefined\n\n  return {\n    status: response.status,\n    headers: response.headers,\n    get body() {\n      if (body === null) return null\n      timedBody ??= createTimedResponseBody(body, timeoutScope)\n      return timedBody\n    },\n    json: <T>() =>\n      readTimedResponseBody(timeoutScope, response, () => response.json() as Promise<T>),\n    text: () => readTimedResponseBody(timeoutScope, response, () => response.text()),\n    arrayBuffer: () => readTimedResponseBody(timeoutScope, response, () => response.arrayBuffer()),\n  }\n}\n\nasync function readTimedResponseBody<T>(\n  timeoutScope: RequestTimeoutScope,\n  response: Response,\n  read: () => Promise<T>,\n): Promise<T> {\n  try {\n    return await raceBodyReadWithAbort(timeoutScope, read(), (reason) =>\n      cancelResponseBody(response, reason),\n    )\n  } catch (err) {\n    if (timeoutScope.timedOut) {\n      throw createRequestTimeoutError(timeoutScope)\n    }\n    throw err\n  } finally {\n    timeoutScope.dispose()\n  }\n}\n\nfunction createTimedResponseBody(\n  body: ReadableStream<Uint8Array>,\n  timeoutScope: RequestTimeoutScope,\n): ReadableStream<Uint8Array> {\n  let reader: ReadableStreamDefaultReader<Uint8Array> | undefined\n  let disposed = false\n  const dispose = (): void => {\n    if (disposed) return\n    disposed = true\n    timeoutScope.dispose()\n  }\n\n  return new ReadableStream<Uint8Array>({\n    async pull(controller) {\n      reader ??= body.getReader()\n      try {\n        const result = await raceBodyReadWithAbort(timeoutScope, reader.read(), (reason) =>\n          reader?.cancel(reason),\n        )\n        if (result.done) {\n          dispose()\n          controller.close()\n          return\n        }\n        timeoutScope.reset()\n        controller.enqueue(result.value)\n      } catch (err) {\n        dispose()\n        if (timeoutScope.timedOut) {\n          controller.error(createRequestTimeoutError(timeoutScope))\n          return\n        }\n        controller.error(err)\n      }\n    },\n    async cancel(reason) {\n      dispose()\n      try {\n        if (reader !== undefined) {\n          await reader.cancel(reason)\n          return\n        }\n        await body.cancel(reason)\n      } catch {\n        // Best-effort cleanup when the caller cancels the wrapper body.\n      }\n    },\n  })\n}\n\nasync function raceBodyReadWithAbort<T>(\n  timeoutScope: RequestTimeoutScope,\n  read: Promise<T>,\n  abortCleanup?: ((reason: unknown) => Promise<void> | void) | undefined,\n): Promise<T> {\n  const signal = timeoutScope.signal\n  if (signal === undefined) return read\n  const abortReason = (): unknown => signal.reason ?? new DOMException('Aborted', 'AbortError')\n  if (signal.aborted) {\n    void read.catch(() => {})\n    const reason = abortReason()\n    await runAbortCleanup(abortCleanup, reason)\n    throw reason\n  }\n\n  let removeAbortListener: (() => void) | undefined\n  const abort = new Promise<never>((_, reject) => {\n    const onAbort = (): void => {\n      const reason = abortReason()\n      void read.catch(() => {})\n      reject(reason)\n      void runAbortCleanup(abortCleanup, reason)\n    }\n    signal.addEventListener('abort', onAbort, { once: true })\n    removeAbortListener = () => signal.removeEventListener('abort', onAbort)\n  })\n\n  try {\n    return await Promise.race([read, abort])\n  } finally {\n    removeAbortListener?.()\n  }\n}\n\nasync function runAbortCleanup(\n  abortCleanup: ((reason: unknown) => Promise<void> | void) | undefined,\n  reason: unknown,\n): Promise<void> {\n  try {\n    await abortCleanup?.(reason)\n  } catch {\n    // Abort cleanup is best-effort and must not mask the abort reason.\n  }\n}\n\nfunction isBlockedRedirect(response: Response): boolean {\n  return response.type === 'opaqueredirect' || REDIRECT_STATUSES.has(response.status)\n}\n\nfunction canFollowSameOriginRedirect(request: HttpRequest, location: string): boolean {\n  if (request.method !== 'GET' && request.method !== 'HEAD') return false\n  try {\n    return new URL(request.url).origin === new URL(location, request.url).origin\n  } catch {\n    return false\n  }\n}\n\nasync function cancelResponseBody(response: Response, reason?: unknown): Promise<void> {\n  try {\n    await response.body?.cancel(reason)\n  } catch {\n    // Best-effort cleanup before throwing the primary error.\n  }\n}\n\n/** Configuration for {@link RetryTransport}. */\nexport interface RetryTransportOptions {\n  /** The underlying transport to delegate requests to. */\n  readonly transport: HttpTransport\n  /** Override default retry settings (max retries, delays). */\n  readonly retry?: Partial<RetryOptions>\n  /**\n   * Callback invoked on expired auth token errors. Must refresh\n   * credentials AND return the fresh auth token. The transport\n   * substitutes the new token into `request.headers.Authorization`\n   * before retrying — without this, the retried request would still\n   * carry the expired token captured by the original caller and the\n   * loop would never make progress.\n   */\n  readonly onReauth?: () => Promise<string>\n  /**\n   * Sleep implementation used between retry attempts. Defaults to the real\n   * `sleep` from `./retry.js`. Test code can inject a no-op to avoid real\n   * delays without relying on module mocking (which differs across runners).\n   *\n   * @internal\n   */\n  readonly sleepImpl?: (ms: number, signal?: AbortSignal) => Promise<void>\n}\n\n/**\n * Decide whether `url` points at a URL-pinned upload POST endpoint.\n *\n * @param url - Request URL to inspect.\n *\n * @returns Whether the request is a direct upload endpoint.\n */\nfunction isUploadEndpoint(url: string): boolean {\n  const endpoint = b2ApiEndpointName(url)\n  return endpoint === 'b2_upload_file' || endpoint === 'b2_upload_part'\n}\n\nfunction isFinishLargeFileEndpoint(url: string): boolean {\n  return b2ApiEndpointName(url) === 'b2_finish_large_file'\n}\n\nfunction isStartLargeFileEndpoint(url: string): boolean {\n  return b2ApiEndpointName(url) === 'b2_start_large_file'\n}\n\nfunction b2ApiEndpointName(url: string): string | undefined {\n  const [, root, , endpoint] = new URL(url).pathname.split('/')\n  if (root !== 'b2api') return undefined\n  return endpoint\n}\n\nfunction isReplayUnsafePostEndpoint(url: string): boolean {\n  return isUploadEndpoint(url) || isStartLargeFileEndpoint(url) || isFinishLargeFileEndpoint(url)\n}\n\n/**\n * Decide whether a classified error should be retried in place for `url`.\n * Transient errors normally retry; upload endpoints bubble to the upload layer\n * for fresh-URL retry except account-level 429 throttling, where fetching a new\n * upload URL only amplifies the rate limit.\n *\n * @param error - The classified, retryability-tagged error.\n * @param url - The request URL (used to detect upload endpoints).\n *\n * @returns Whether to retry the request in place.\n */\nfunction shouldRetryInPlace(error: B2Error, url: string): boolean {\n  if (!error.retryable) return false\n  if (isStartLargeFileEndpoint(url) || isFinishLargeFileEndpoint(url)) return false\n  if (isUploadEndpoint(url) && error.status === 429) return true\n  if (isUploadEndpoint(url)) return false\n  return true\n}\n\nfunction isRequestTimeoutError(err: unknown): boolean {\n  return err instanceof DOMException && err.name === 'TimeoutError'\n}\n\nfunction isTerminalTransportError(err: unknown): boolean {\n  return (\n    err instanceof B2Error ||\n    err instanceof B2RedirectError ||\n    err instanceof NetworkError ||\n    err instanceof B2SsrfError ||\n    (err instanceof DOMException && err.name === 'AbortError')\n  )\n}\n\n/**\n * Transport wrapper that adds automatic retry with exponential backoff.\n * Handles transient errors (408, 429, and the transient 5xx set 500/502/503/504),\n * expired auth tokens, and network failures. Delegates to an inner\n * {@link HttpTransport}.\n *\n * Upload endpoints (`b2_upload_file` / `b2_upload_part`) are URL-pinned. Their\n * retryable pod failures bubble to the upload layer, which evicts the failed\n * URL, fetches a fresh one, and retries there. HTTP 429 remains an in-place\n * retry so account-level throttling does not trigger extra upload URL fetches.\n */\nexport class RetryTransport implements HttpTransport {\n  /** The wrapped transport that performs actual HTTP requests. */\n  private readonly inner: HttpTransport\n  /** Resolved retry options (defaults merged with user overrides). */\n  private readonly options: RetryOptions\n  /** Optional callback to refresh auth credentials on 401 — returns the fresh token. */\n  private readonly onReauth?: () => Promise<string>\n  /** Sleep implementation used between retries; injectable for tests. */\n  private readonly sleepImpl: (ms: number, signal?: AbortSignal) => Promise<void>\n\n  /**\n   * Creates a new RetryTransport.\n   * @param opts - Retry transport configuration.\n   */\n  constructor(opts: RetryTransportOptions) {\n    this.inner = opts.transport\n    this.options = { ...DEFAULT_RETRY_OPTIONS, ...opts.retry }\n    if (opts.onReauth !== undefined) this.onReauth = opts.onReauth\n    this.sleepImpl = opts.sleepImpl ?? sleep\n  }\n\n  /**\n   * Sends the request with automatic retry on transient failures.\n   * On expired auth tokens, calls {@link RetryTransportOptions.onReauth} and retries.\n   * @param originalRequest - The HTTP request to execute. The caller's\n   *   reference is not mutated; on reauth, a copy with a refreshed\n   *   Authorization header is sent.\n   *\n   * @returns The HTTP response.\n   */\n  async send(originalRequest: HttpRequest): Promise<HttpResponse> {\n    // `request` is reassigned (not mutated) when reauth produces a\n    // fresh Authorization header, so the caller's `originalRequest`\n    // stays untouched.\n    let request: HttpRequest = originalRequest\n    const retryOptions = { ...this.options, ...originalRequest.retry }\n    let lastError: B2Error | NetworkError | undefined\n    let didReauth = false\n    let attempt = 0\n\n    while (attempt <= retryOptions.maxRetries) {\n      throwIfSignalAborted(request.signal)\n\n      if (attempt > 0 && lastError) {\n        const retryAfter = lastError instanceof NetworkError ? undefined : lastError.retryAfter\n        const delay = computeBackoff(attempt - 1, retryOptions, retryAfter)\n        await this.sleepImpl(delay, request.signal)\n      }\n\n      try {\n        const response = await this.inner.send({ ...request, retry: retryOptions })\n        await throwIfSignalAbortedAfterResponse(request.signal, response)\n\n        if (response.status >= 200 && response.status < 300) {\n          return response\n        }\n\n        let errorBody: B2ErrorResponse\n        try {\n          errorBody = await response.json<B2ErrorResponse>()\n        } catch (err) {\n          if (isRequestTimeoutError(err)) throw err\n          errorBody = {\n            status: response.status,\n            code: 'internal_error',\n            message: `HTTP ${response.status}`,\n          }\n        }\n\n        const retryAfterHeader = response.headers.get('Retry-After')\n        const retryAfterSec = retryAfterHeader ? Number.parseInt(retryAfterHeader, 10) : undefined\n        const requestId = response.headers.get('X-Bz-Request-Id') ?? undefined\n\n        const error = classifyError(errorBody, {\n          ...(retryAfterSec !== undefined ? { retryAfter: retryAfterSec } : {}),\n          ...(requestId !== undefined ? { requestId } : {}),\n        })\n\n        if (\n          error instanceof ExpiredAuthTokenError &&\n          this.onReauth &&\n          !isUploadEndpoint(request.url) &&\n          !didReauth\n        ) {\n          // Reauth returns the FRESH token; build a new request with a\n          // shallow-copied headers object so the Authorization swap\n          // doesn't mutate the caller's original request (which they\n          // may hold for retry / introspection). Without this swap the\n          // retry would carry the expired token captured at\n          // request-build time and bounce off the server again,\n          // exhausting the retry budget.\n          const freshToken = await this.onReauth()\n          request = {\n            ...request,\n            headers: { ...(request.headers ?? {}), Authorization: freshToken },\n          }\n          didReauth = true\n          lastError = undefined\n          continue\n        }\n\n        if (!shouldRetryInPlace(error, request.url) || attempt === retryOptions.maxRetries) {\n          throw error\n        }\n\n        lastError = error\n        attempt += 1\n      } catch (err) {\n        throwIfSignalAborted(request.signal)\n        if (isTerminalTransportError(err)) {\n          throw err\n        }\n\n        const networkErr = new NetworkError(\n          err instanceof Error ? err.message : 'Network error',\n          err,\n        )\n\n        if (isReplayUnsafePostEndpoint(request.url) || attempt === retryOptions.maxRetries) {\n          throw networkErr\n        }\n\n        lastError = networkErr\n        attempt += 1\n      }\n    }\n\n    throw lastError ?? new NetworkError('Max retries exceeded')\n  }\n}\n\nfunction throwIfSignalAborted(signal: AbortSignal | undefined): void {\n  if (signal?.aborted === true) {\n    throw signal.reason ?? new DOMException('Aborted', 'AbortError')\n  }\n}\n\nasync function throwIfSignalAbortedAfterResponse(\n  signal: AbortSignal | undefined,\n  response: HttpResponse,\n): Promise<void> {\n  if (signal?.aborted !== true) return\n  const reason = signal.reason ?? new DOMException('Aborted', 'AbortError')\n  try {\n    await response.body?.cancel(reason)\n  } catch {\n    // Best-effort cleanup before preserving the caller's abort reason.\n  }\n  throw reason\n}\n"],"mappings":";;;;;AAaA,IAAM,oCAAoB,IAAI,IAAI;CAAC;CAAK;CAAK;CAAK;CAAK;AAAG,CAAC;AAC3D,IAAM,4BAA4B;;;;;;;;AAmDlC,IAAa,iBAAb,MAAqD;;CAEnD;;CAEA;;CAEA;;;;;CAMA,YAAY,SAST;EACD,KAAK,YAAY,mBAAA,aAAa,SAAS,SAAS;EAChD,KAAK,4BAA4B,SAAS,6BAA6B;EACvE,KAAK,WAAW,SAAS,YAAY,IAAI,kBAAA,SAAS;CACpD;;;;;;;;;;CAWA,MAAM,KAAK,SAA6C;EACtD,IAAI,iBAAiB;EACrB,IAAI,gBAAgB;EAEpB,OAAO,MAAM;GACX,KAAK,SAAS,MAAM,eAAe,GAAG;GAEtC,MAAM,UAAU,IAAI,QAAQ,eAAe,OAAO;GAClD,IAAI,CAAC,QAAQ,IAAI,YAAY,GAC3B,QAAQ,IAAI,cAAc,KAAK,SAAS;GAG1C,MAAM,eAAe,0BAA0B,cAAc;GAC7D,IAAI;GACJ,IAAI;IACF,WAAW,MAAM,MAAM,eAAe,KAAK;KACzC,QAAQ,eAAe;KACvB;KACA,MAAM,eAAe,QAAQ;KAC7B,UAAU;KACV,GAAI,aAAa,WAAW,KAAA,IAAY,EAAE,QAAQ,aAAa,OAAO,IAAI,CAAC;IAC7E,CAAC;GACH,SAAS,KAAK;IACZ,aAAa,QAAQ;IACrB,IAAI,aAAa,UACf,MAAM,0BAA0B,YAAY;IAE9C,MAAM;GACR;GAEA,IAAI,kBAAkB,QAAQ,GAAG;IAC/B,MAAM,WAAW,SAAS,QAAQ,IAAI,UAAU;IAChD,IACE,KAAK,6BACL,aAAa,QACb,gBAAgB,6BAChB,4BAA4B,gBAAgB,QAAQ,GACpD;KACA,MAAM,UAAU,IAAI,IAAI,UAAU,eAAe,GAAG,CAAC,CAAC,SAAS;KAC/D,MAAM,mBAAmB,QAAQ;KACjC,aAAa,QAAQ;KACrB,KAAK,SAAS,MAAM,OAAO;KAC3B,iBAAiB;MAAE,GAAG;MAAgB,KAAK;KAAQ;KACnD,iBAAiB;KACjB;IACF;IAEA,MAAM,mBAAmB,QAAQ;IACjC,aAAa,QAAQ;IACrB,MAAM,IAAI,qBAAA,gBAAgB,eAAe,KAAK,SAAS,QAAQ,QAAQ;GACzE;GAEA,OAAO,wBAAwB,UAAU,YAAY;EACvD;CACF;AACF;AAUA,SAAS,0BAA0B,SAA2C;CAC5E,MAAM,YAAY,QAAQ,OAAO,oBAAoB,cAAA,sBAAsB;CAC3E,IAAI,CAAC,OAAO,SAAS,SAAS,KAAK,aAAa,GAAG;EACjD,MAAM,QAA6B;GACjC,WAAW;GACX,UAAU;GACV,QAAQ,CAAC;GACT,UAAU,CAAC;EACb;EACA,IAAI,QAAQ,WAAW,KAAA,GAAW,OAAO;GAAE,GAAG;GAAO,QAAQ,QAAQ;EAAO;EAC5E,OAAO;CACT;CAEA,MAAM,aAAa,IAAI,gBAAgB;CACvC,IAAI,WAAW;CACf,IAAI;CACJ,MAAM,0BAAgC;EACpC,aAAa,KAAK;EAClB,WAAW,MAAM,QAAQ,QAAQ,UAAU,IAAI,aAAa,WAAW,YAAY,CAAC;CACtF;CACA,MAAM,iBAAgD;EACpD,MAAM,YAAY,iBAAiB;GACjC,WAAW;GACX,WAAW,MAAM,IAAI,aAAa,0BAA0B,cAAc,CAAC;EAC7E,GAAG,SAAS;EACZ,WAAW,SAAS;EACpB,OAAO;CACT;CACA,QAAQ,SAAS;CAEjB,MAAM,cAAoB;EACxB,IAAI,YAAY,WAAW,OAAO,SAAS;EAC3C,aAAa,KAAK;EAClB,QAAQ,SAAS;CACnB;CAEA,IAAI,QAAQ,QAAQ,YAAY,MAAM;EACpC,aAAa,KAAK;EAClB,kBAAkB;CACpB,OACE,QAAQ,QAAQ,iBAAiB,SAAS,mBAAmB,EAAE,MAAM,KAAK,CAAC;CAG7E,OAAO;EACL,QAAQ,WAAW;EACnB;EACA,IAAI,WAAW;GACb,OAAO;EACT;EACA;EACA,UAAU;GACR,aAAa,KAAK;GAClB,QAAQ,QAAQ,oBAAoB,SAAS,iBAAiB;EAChE;CACF;AACF;AAEA,SAAS,WAAW,OAA4C;CAC9D,MAAM,aAAc,MAAiC;CACrD,IAAI,OAAO,eAAe,YAAY,WAAW,KAAK,KAAK;AAC7D;AAEA,SAAS,0BAA0B,OAA0C;CAC3E,OAAO,IAAI,aAAa,gCAAgC,MAAM,UAAU,MAAM,cAAc;AAC9F;AAEA,SAAS,wBACP,UACA,cACc;CACd,MAAM,OAAO,SAAS;CACtB,IAAI,SAAS,MAAM,aAAa,QAAQ;CACxC,IAAI;CAEJ,OAAO;EACL,QAAQ,SAAS;EACjB,SAAS,SAAS;EAClB,IAAI,OAAO;GACT,IAAI,SAAS,MAAM,OAAO;GAC1B,cAAc,wBAAwB,MAAM,YAAY;GACxD,OAAO;EACT;EACA,YACE,sBAAsB,cAAc,gBAAgB,SAAS,KAAK,CAAe;EACnF,YAAY,sBAAsB,cAAc,gBAAgB,SAAS,KAAK,CAAC;EAC/E,mBAAmB,sBAAsB,cAAc,gBAAgB,SAAS,YAAY,CAAC;CAC/F;AACF;AAEA,eAAe,sBACb,cACA,UACA,MACY;CACZ,IAAI;EACF,OAAO,MAAM,sBAAsB,cAAc,KAAK,IAAI,WACxD,mBAAmB,UAAU,MAAM,CACrC;CACF,SAAS,KAAK;EACZ,IAAI,aAAa,UACf,MAAM,0BAA0B,YAAY;EAE9C,MAAM;CACR,UAAU;EACR,aAAa,QAAQ;CACvB;AACF;AAEA,SAAS,wBACP,MACA,cAC4B;CAC5B,IAAI;CACJ,IAAI,WAAW;CACf,MAAM,gBAAsB;EAC1B,IAAI,UAAU;EACd,WAAW;EACX,aAAa,QAAQ;CACvB;CAEA,OAAO,IAAI,eAA2B;EACpC,MAAM,KAAK,YAAY;GACrB,WAAW,KAAK,UAAU;GAC1B,IAAI;IACF,MAAM,SAAS,MAAM,sBAAsB,cAAc,OAAO,KAAK,IAAI,WACvE,QAAQ,OAAO,MAAM,CACvB;IACA,IAAI,OAAO,MAAM;KACf,QAAQ;KACR,WAAW,MAAM;KACjB;IACF;IACA,aAAa,MAAM;IACnB,WAAW,QAAQ,OAAO,KAAK;GACjC,SAAS,KAAK;IACZ,QAAQ;IACR,IAAI,aAAa,UAAU;KACzB,WAAW,MAAM,0BAA0B,YAAY,CAAC;KACxD;IACF;IACA,WAAW,MAAM,GAAG;GACtB;EACF;EACA,MAAM,OAAO,QAAQ;GACnB,QAAQ;GACR,IAAI;IACF,IAAI,WAAW,KAAA,GAAW;KACxB,MAAM,OAAO,OAAO,MAAM;KAC1B;IACF;IACA,MAAM,KAAK,OAAO,MAAM;GAC1B,QAAQ,CAER;EACF;CACF,CAAC;AACH;AAEA,eAAe,sBACb,cACA,MACA,cACY;CACZ,MAAM,SAAS,aAAa;CAC5B,IAAI,WAAW,KAAA,GAAW,OAAO;CACjC,MAAM,oBAA6B,OAAO,UAAU,IAAI,aAAa,WAAW,YAAY;CAC5F,IAAI,OAAO,SAAS;EAClB,KAAU,YAAY,CAAC,CAAC;EACxB,MAAM,SAAS,YAAY;EAC3B,MAAM,gBAAgB,cAAc,MAAM;EAC1C,MAAM;CACR;CAEA,IAAI;CACJ,MAAM,QAAQ,IAAI,SAAgB,GAAG,WAAW;EAC9C,MAAM,gBAAsB;GAC1B,MAAM,SAAS,YAAY;GAC3B,KAAU,YAAY,CAAC,CAAC;GACxB,OAAO,MAAM;GACb,gBAAqB,cAAc,MAAM;EAC3C;EACA,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;EACxD,4BAA4B,OAAO,oBAAoB,SAAS,OAAO;CACzE,CAAC;CAED,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,MAAM,KAAK,CAAC;CACzC,UAAU;EACR,sBAAsB;CACxB;AACF;AAEA,eAAe,gBACb,cACA,QACe;CACf,IAAI;EACF,MAAM,eAAe,MAAM;CAC7B,QAAQ,CAER;AACF;AAEA,SAAS,kBAAkB,UAA6B;CACtD,OAAO,SAAS,SAAS,oBAAoB,kBAAkB,IAAI,SAAS,MAAM;AACpF;AAEA,SAAS,4BAA4B,SAAsB,UAA2B;CACpF,IAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,QAAQ,OAAO;CAClE,IAAI;EACF,OAAO,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,WAAW,IAAI,IAAI,UAAU,QAAQ,GAAG,CAAC,CAAC;CACxE,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,mBAAmB,UAAoB,QAAiC;CACrF,IAAI;EACF,MAAM,SAAS,MAAM,OAAO,MAAM;CACpC,QAAQ,CAER;AACF;;;;;;;;AAkCA,SAAS,iBAAiB,KAAsB;CAC9C,MAAM,WAAW,kBAAkB,GAAG;CACtC,OAAO,aAAa,oBAAoB,aAAa;AACvD;AAEA,SAAS,0BAA0B,KAAsB;CACvD,OAAO,kBAAkB,GAAG,MAAM;AACpC;AAEA,SAAS,yBAAyB,KAAsB;CACtD,OAAO,kBAAkB,GAAG,MAAM;AACpC;AAEA,SAAS,kBAAkB,KAAiC;CAC1D,MAAM,GAAG,QAAQ,YAAY,IAAI,IAAI,GAAG,CAAC,CAAC,SAAS,MAAM,GAAG;CAC5D,IAAI,SAAS,SAAS,OAAO,KAAA;CAC7B,OAAO;AACT;AAEA,SAAS,2BAA2B,KAAsB;CACxD,OAAO,iBAAiB,GAAG,KAAK,yBAAyB,GAAG,KAAK,0BAA0B,GAAG;AAChG;;;;;;;;;;;;AAaA,SAAS,mBAAmB,OAAgB,KAAsB;CAChE,IAAI,CAAC,MAAM,WAAW,OAAO;CAC7B,IAAI,yBAAyB,GAAG,KAAK,0BAA0B,GAAG,GAAG,OAAO;CAC5E,IAAI,iBAAiB,GAAG,KAAK,MAAM,WAAW,KAAK,OAAO;CAC1D,IAAI,iBAAiB,GAAG,GAAG,OAAO;CAClC,OAAO;AACT;AAEA,SAAS,sBAAsB,KAAuB;CACpD,OAAO,eAAe,gBAAgB,IAAI,SAAS;AACrD;AAEA,SAAS,yBAAyB,KAAuB;CACvD,OACE,eAAe,qBAAA,WACf,eAAe,qBAAA,mBACf,eAAe,qBAAA,gBACf,eAAe,qBAAA,eACd,eAAe,gBAAgB,IAAI,SAAS;AAEjD;;;;;;;;;;;;AAaA,IAAa,iBAAb,MAAqD;;CAEnD;;CAEA;;CAEA;;CAEA;;;;;CAMA,YAAY,MAA6B;EACvC,KAAK,QAAQ,KAAK;EAClB,KAAK,UAAU;GAAE,GAAG,cAAA;GAAuB,GAAG,KAAK;EAAM;EACzD,IAAI,KAAK,aAAa,KAAA,GAAW,KAAK,WAAW,KAAK;EACtD,KAAK,YAAY,KAAK,aAAa,cAAA;CACrC;;;;;;;;;;CAWA,MAAM,KAAK,iBAAqD;EAI9D,IAAI,UAAuB;EAC3B,MAAM,eAAe;GAAE,GAAG,KAAK;GAAS,GAAG,gBAAgB;EAAM;EACjE,IAAI;EACJ,IAAI,YAAY;EAChB,IAAI,UAAU;EAEd,OAAO,WAAW,aAAa,YAAY;GACzC,qBAAqB,QAAQ,MAAM;GAEnC,IAAI,UAAU,KAAK,WAAW;IAC5B,MAAM,aAAa,qBAAqB,qBAAA,eAAe,KAAA,IAAY,UAAU;IAC7E,MAAM,QAAQ,cAAA,eAAe,UAAU,GAAG,cAAc,UAAU;IAClE,MAAM,KAAK,UAAU,OAAO,QAAQ,MAAM;GAC5C;GAEA,IAAI;IACF,MAAM,WAAW,MAAM,KAAK,MAAM,KAAK;KAAE,GAAG;KAAS,OAAO;IAAa,CAAC;IAC1E,MAAM,kCAAkC,QAAQ,QAAQ,QAAQ;IAEhE,IAAI,SAAS,UAAU,OAAO,SAAS,SAAS,KAC9C,OAAO;IAGT,IAAI;IACJ,IAAI;KACF,YAAY,MAAM,SAAS,KAAsB;IACnD,SAAS,KAAK;KACZ,IAAI,sBAAsB,GAAG,GAAG,MAAM;KACtC,YAAY;MACV,QAAQ,SAAS;MACjB,MAAM;MACN,SAAS,QAAQ,SAAS;KAC5B;IACF;IAEA,MAAM,mBAAmB,SAAS,QAAQ,IAAI,aAAa;IAC3D,MAAM,gBAAgB,mBAAmB,OAAO,SAAS,kBAAkB,EAAE,IAAI,KAAA;IACjF,MAAM,YAAY,SAAS,QAAQ,IAAI,iBAAiB,KAAK,KAAA;IAE7D,MAAM,QAAQ,qBAAA,cAAc,WAAW;KACrC,GAAI,kBAAkB,KAAA,IAAY,EAAE,YAAY,cAAc,IAAI,CAAC;KACnE,GAAI,cAAc,KAAA,IAAY,EAAE,UAAU,IAAI,CAAC;IACjD,CAAC;IAED,IACE,iBAAiB,qBAAA,yBACjB,KAAK,YACL,CAAC,iBAAiB,QAAQ,GAAG,KAC7B,CAAC,WACD;KAQA,MAAM,aAAa,MAAM,KAAK,SAAS;KACvC,UAAU;MACR,GAAG;MACH,SAAS;OAAE,GAAI,QAAQ,WAAW,CAAC;OAAI,eAAe;MAAW;KACnE;KACA,YAAY;KACZ,YAAY,KAAA;KACZ;IACF;IAEA,IAAI,CAAC,mBAAmB,OAAO,QAAQ,GAAG,KAAK,YAAY,aAAa,YACtE,MAAM;IAGR,YAAY;IACZ,WAAW;GACb,SAAS,KAAK;IACZ,qBAAqB,QAAQ,MAAM;IACnC,IAAI,yBAAyB,GAAG,GAC9B,MAAM;IAGR,MAAM,aAAa,IAAI,qBAAA,aACrB,eAAe,QAAQ,IAAI,UAAU,iBACrC,GACF;IAEA,IAAI,2BAA2B,QAAQ,GAAG,KAAK,YAAY,aAAa,YACtE,MAAM;IAGR,YAAY;IACZ,WAAW;GACb;EACF;EAEA,MAAM,aAAa,IAAI,qBAAA,aAAa,sBAAsB;CAC5D;AACF;AAEA,SAAS,qBAAqB,QAAuC;CACnE,IAAI,QAAQ,YAAY,MACtB,MAAM,OAAO,UAAU,IAAI,aAAa,WAAW,YAAY;AAEnE;AAEA,eAAe,kCACb,QACA,UACe;CACf,IAAI,QAAQ,YAAY,MAAM;CAC9B,MAAM,SAAS,OAAO,UAAU,IAAI,aAAa,WAAW,YAAY;CACxE,IAAI;EACF,MAAM,SAAS,MAAM,OAAO,MAAM;CACpC,QAAQ,CAER;CACA,MAAM;AACR"}
+{"version":3,"file":"transport.cjs","names":[],"sources":["../../src/http/transport.ts"],"sourcesContent":["import {\n  B2Error,\n  B2RedirectError,\n  B2SsrfError,\n  classifyError,\n  ExpiredAuthTokenError,\n  NetworkError,\n} from '../errors/index.ts'\nimport type { B2ErrorResponse } from '../types/errors.ts'\nimport { abortReason, raceWithAbort, throwIfSignalAborted } from '../util/abort.ts'\nimport { computeBackoff, DEFAULT_RETRY_OPTIONS, type RetryOptions, sleep } from './retry.ts'\nimport { UrlGuard } from './url-guard.ts'\nimport { getUserAgent } from './user-agent.ts'\n\nconst REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308])\nconst MAX_SAME_ORIGIN_REDIRECTS = 5\n\n/** Describes an outgoing HTTP request to the B2 API. */\nexport interface HttpRequest {\n  /** Fully qualified URL to send the request to. */\n  readonly url: string\n  /** HTTP method. B2 uses GET for downloads (HEAD to fetch only headers) and POST for all other operations. */\n  readonly method: 'GET' | 'HEAD' | 'POST'\n  /** Request headers. Authorization and content-type are typically included. */\n  readonly headers?: Record<string, string>\n  /** Request body. Used for POST requests (JSON payloads or file uploads). */\n  readonly body?: BodyInit | null\n  /** Optional abort signal for request cancellation. */\n  readonly signal?: AbortSignal\n  /** Optional per-request retry override. */\n  readonly retry?: Partial<RetryOptions>\n}\n\n/** Represents a parsed HTTP response from the B2 API. */\nexport interface HttpResponse {\n  /** HTTP status code. */\n  readonly status: number\n  /** Response headers. */\n  readonly headers: Headers\n  /** Response body as a readable stream, or null for empty responses. */\n  readonly body: ReadableStream<Uint8Array> | null\n  /** Parses the response body as JSON. */\n  json<T>(): Promise<T>\n  /** Reads the response body as a UTF-8 string. */\n  text(): Promise<string>\n  /** Reads the response body as an ArrayBuffer. */\n  arrayBuffer(): Promise<ArrayBuffer>\n}\n\n/**\n * Transport layer abstraction for sending HTTP requests.\n * Implementations handle the actual network I/O and can be composed\n * (e.g. wrapping a {@link FetchTransport} with a {@link RetryTransport}).\n */\nexport interface HttpTransport {\n  /** Sends an HTTP request and returns the response. */\n  send(request: HttpRequest): Promise<HttpResponse>\n}\n\n/**\n * Transport capability for implementations that expose the SSRF URL guard\n * protecting credential-bearing requests. Wrappers that preserve this\n * capability should forward the same `urlGuard` property.\n */\nexport interface UrlGuardedTransport extends HttpTransport {\n  /** SSRF allow-list applied to outgoing URLs. */\n  readonly urlGuard: UrlGuard\n}\n\n/**\n * Returns the URL guard exposed by `transport`, if it implements\n * {@link UrlGuardedTransport}.\n *\n * @param transport - Transport to inspect.\n *\n * @returns The exposed URL guard, or undefined for unguarded transports.\n */\nexport function getTransportUrlGuard(transport: HttpTransport): UrlGuard | undefined {\n  const candidate = transport as Partial<UrlGuardedTransport>\n  return candidate.urlGuard instanceof UrlGuard ? candidate.urlGuard : undefined\n}\n\n/**\n * Default transport implementation using the global `fetch` API.\n * Automatically sets the User-Agent header on each request and applies the\n * SSRF {@link UrlGuard} (if configured) before opening the connection.\n * Redirect following is disabled so redirected URLs cannot bypass the guard or\n * receive credential-bearing headers without an explicit checked request.\n */\nexport class FetchTransport implements UrlGuardedTransport {\n  /** User-Agent string sent with every request. */\n  private readonly userAgent: string\n  /** Whether same-origin GET/HEAD redirects should be followed after guard checks. */\n  private readonly followSameOriginRedirects: boolean\n  /** SSRF allow-list applied to every outgoing URL. Mutable so `B2Client.authorize()` can lock it down post-auth. */\n  readonly urlGuard: UrlGuard\n\n  /**\n   * Creates a new FetchTransport.\n   * @param options - Optional configuration: custom User-Agent prefix and SSRF guard.\n   */\n  constructor(options?: {\n    userAgent?: string\n    urlGuard?: UrlGuard\n    /**\n     * Follow same-origin GET/HEAD redirects after checking the target with the\n     * URL guard. POST redirects are still blocked to avoid replaying\n     * credential-bearing payloads to an unexpected endpoint. Defaults to true.\n     */\n    followSameOriginRedirects?: boolean\n  }) {\n    this.userAgent = getUserAgent(options?.userAgent)\n    this.followSameOriginRedirects = options?.followSameOriginRedirects ?? true\n    this.urlGuard = options?.urlGuard ?? new UrlGuard()\n  }\n\n  /**\n   * Sends the request using the global `fetch` function.\n   * @param request - The HTTP request to execute.\n   *\n   * @returns The HTTP response.\n   *\n   * @throws B2SsrfError when the URL fails the configured SSRF guard.\n   * @throws B2RedirectError when a response attempts to redirect.\n   */\n  async send(request: HttpRequest): Promise<HttpResponse> {\n    let currentRequest = request\n    let redirectCount = 0\n\n    while (true) {\n      this.urlGuard.check(currentRequest.url)\n\n      const headers = new Headers(currentRequest.headers)\n      if (!headers.has('User-Agent')) {\n        headers.set('User-Agent', this.userAgent)\n      }\n\n      const timeoutScope = createRequestTimeoutScope(currentRequest)\n      let response: Response\n      try {\n        response = await fetch(currentRequest.url, {\n          method: currentRequest.method,\n          headers,\n          body: currentRequest.body ?? null,\n          redirect: 'manual',\n          ...(timeoutScope.signal !== undefined ? { signal: timeoutScope.signal } : {}),\n        })\n      } catch (err) {\n        timeoutScope.dispose()\n        if (timeoutScope.timedOut) {\n          throw createRequestTimeoutError(timeoutScope)\n        }\n        throw err\n      }\n\n      if (isBlockedRedirect(response)) {\n        const location = response.headers.get('Location')\n        if (\n          this.followSameOriginRedirects &&\n          location !== null &&\n          redirectCount < MAX_SAME_ORIGIN_REDIRECTS &&\n          canFollowSameOriginRedirect(currentRequest, location)\n        ) {\n          const nextUrl = new URL(location, currentRequest.url).toString()\n          await cancelResponseBody(response)\n          timeoutScope.dispose()\n          this.urlGuard.check(nextUrl)\n          currentRequest = { ...currentRequest, url: nextUrl }\n          redirectCount += 1\n          continue\n        }\n\n        await cancelResponseBody(response)\n        timeoutScope.dispose()\n        throw new B2RedirectError(currentRequest.url, response.status, location)\n      }\n\n      return createTimedHttpResponse(response, timeoutScope)\n    }\n  }\n}\n\ninterface RequestTimeoutScope {\n  readonly signal?: AbortSignal\n  readonly timeoutMs: number\n  readonly timedOut: boolean\n  reset(): void\n  dispose(): void\n}\n\nfunction createRequestTimeoutScope(request: HttpRequest): RequestTimeoutScope {\n  const timeoutMs = request.retry?.requestTimeoutMs ?? DEFAULT_RETRY_OPTIONS.requestTimeoutMs\n  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {\n    const scope: RequestTimeoutScope = {\n      timeoutMs: 0,\n      timedOut: false,\n      reset() {},\n      dispose() {},\n    }\n    if (request.signal !== undefined) return { ...scope, signal: request.signal }\n    return scope\n  }\n\n  const controller = new AbortController()\n  let timedOut = false\n  let timer: ReturnType<typeof setTimeout>\n  const abortFromUpstream = (): void => {\n    clearTimeout(timer)\n    controller.abort(request.signal?.reason ?? new DOMException('Aborted', 'AbortError'))\n  }\n  const armTimer = (): ReturnType<typeof setTimeout> => {\n    const nextTimer = setTimeout(() => {\n      timedOut = true\n      controller.abort(new DOMException('HTTP request timed out', 'TimeoutError'))\n    }, timeoutMs)\n    unrefTimer(nextTimer)\n    return nextTimer\n  }\n  timer = armTimer()\n\n  const reset = (): void => {\n    if (timedOut || controller.signal.aborted) return\n    clearTimeout(timer)\n    timer = armTimer()\n  }\n\n  if (request.signal?.aborted === true) {\n    clearTimeout(timer)\n    abortFromUpstream()\n  } else {\n    request.signal?.addEventListener('abort', abortFromUpstream, { once: true })\n  }\n\n  return {\n    signal: controller.signal,\n    timeoutMs,\n    get timedOut() {\n      return timedOut\n    },\n    reset,\n    dispose() {\n      clearTimeout(timer)\n      request.signal?.removeEventListener('abort', abortFromUpstream)\n    },\n  }\n}\n\nfunction unrefTimer(timer: ReturnType<typeof setTimeout>): void {\n  const maybeUnref = (timer as { unref?: () => void }).unref\n  if (typeof maybeUnref === 'function') maybeUnref.call(timer)\n}\n\nfunction createRequestTimeoutError(scope: RequestTimeoutScope): DOMException {\n  return new DOMException(`HTTP request timed out after ${scope.timeoutMs} ms`, 'TimeoutError')\n}\n\nfunction createTimedHttpResponse(\n  response: Response,\n  timeoutScope: RequestTimeoutScope,\n): HttpResponse {\n  const body = response.body\n  if (body === null) timeoutScope.dispose()\n  let timedBody: ReadableStream<Uint8Array> | undefined\n\n  return {\n    status: response.status,\n    headers: response.headers,\n    get body() {\n      if (body === null) return null\n      timedBody ??= createTimedResponseBody(body, timeoutScope)\n      return timedBody\n    },\n    json: <T>() =>\n      readTimedResponseBody(timeoutScope, response, () => response.json() as Promise<T>),\n    text: () => readTimedResponseBody(timeoutScope, response, () => response.text()),\n    arrayBuffer: () => readTimedResponseBody(timeoutScope, response, () => response.arrayBuffer()),\n  }\n}\n\nasync function readTimedResponseBody<T>(\n  timeoutScope: RequestTimeoutScope,\n  response: Response,\n  read: () => Promise<T>,\n): Promise<T> {\n  try {\n    return await raceBodyReadWithAbort(timeoutScope, read(), (reason) =>\n      cancelResponseBody(response, reason),\n    )\n  } catch (err) {\n    if (timeoutScope.timedOut) {\n      throw createRequestTimeoutError(timeoutScope)\n    }\n    throw err\n  } finally {\n    timeoutScope.dispose()\n  }\n}\n\nfunction createTimedResponseBody(\n  body: ReadableStream<Uint8Array>,\n  timeoutScope: RequestTimeoutScope,\n): ReadableStream<Uint8Array> {\n  let reader: ReadableStreamDefaultReader<Uint8Array> | undefined\n  let disposed = false\n  const dispose = (): void => {\n    if (disposed) return\n    disposed = true\n    timeoutScope.dispose()\n  }\n\n  return new ReadableStream<Uint8Array>({\n    async pull(controller) {\n      reader ??= body.getReader()\n      try {\n        const result = await raceBodyReadWithAbort(timeoutScope, reader.read(), (reason) =>\n          reader?.cancel(reason),\n        )\n        if (result.done) {\n          dispose()\n          controller.close()\n          return\n        }\n        timeoutScope.reset()\n        controller.enqueue(result.value)\n      } catch (err) {\n        dispose()\n        if (timeoutScope.timedOut) {\n          controller.error(createRequestTimeoutError(timeoutScope))\n          return\n        }\n        controller.error(err)\n      }\n    },\n    async cancel(reason) {\n      dispose()\n      try {\n        if (reader !== undefined) {\n          await reader.cancel(reason)\n          return\n        }\n        await body.cancel(reason)\n      } catch {\n        // Best-effort cleanup when the caller cancels the wrapper body.\n      }\n    },\n  })\n}\n\nasync function raceBodyReadWithAbort<T>(\n  timeoutScope: RequestTimeoutScope,\n  read: Promise<T>,\n  abortCleanup?: ((reason: unknown) => Promise<void> | void) | undefined,\n): Promise<T> {\n  const signal = timeoutScope.signal\n  if (signal === undefined) return read\n  if (signal.aborted) {\n    void read.catch(() => {})\n    const reason = abortReason(signal)\n    await runAbortCleanup(abortCleanup, reason)\n    throw reason\n  }\n\n  let removeAbortListener: (() => void) | undefined\n  const abort = new Promise<never>((_, reject) => {\n    const onAbort = (): void => {\n      const reason = abortReason(signal)\n      void read.catch(() => {})\n      reject(reason)\n      void runAbortCleanup(abortCleanup, reason)\n    }\n    signal.addEventListener('abort', onAbort, { once: true })\n    removeAbortListener = () => signal.removeEventListener('abort', onAbort)\n  })\n\n  try {\n    return await Promise.race([read, abort])\n  } finally {\n    removeAbortListener?.()\n  }\n}\n\nasync function runAbortCleanup(\n  abortCleanup: ((reason: unknown) => Promise<void> | void) | undefined,\n  reason: unknown,\n): Promise<void> {\n  try {\n    await abortCleanup?.(reason)\n  } catch {\n    // Abort cleanup is best-effort and must not mask the abort reason.\n  }\n}\n\nfunction isBlockedRedirect(response: Response): boolean {\n  return response.type === 'opaqueredirect' || REDIRECT_STATUSES.has(response.status)\n}\n\nfunction canFollowSameOriginRedirect(request: HttpRequest, location: string): boolean {\n  if (request.method !== 'GET' && request.method !== 'HEAD') return false\n  try {\n    return new URL(request.url).origin === new URL(location, request.url).origin\n  } catch {\n    return false\n  }\n}\n\nasync function cancelResponseBody(response: Response, reason?: unknown): Promise<void> {\n  try {\n    await response.body?.cancel(reason)\n  } catch {\n    // Best-effort cleanup before throwing the primary error.\n  }\n}\n\n/** Configuration for {@link RetryTransport}. */\nexport interface RetryTransportOptions {\n  /** The underlying transport to delegate requests to. */\n  readonly transport: HttpTransport\n  /** Override default retry settings (max retries, delays). */\n  readonly retry?: Partial<RetryOptions>\n  /**\n   * Callback invoked on expired auth token errors. Must refresh\n   * credentials AND return the fresh auth token. The original request's\n   * abort signal is forwarded so reauthorization can be cancelled with the\n   * operation that triggered it. The transport\n   * substitutes the new token into `request.headers.Authorization`\n   * before retrying — without this, the retried request would still\n   * carry the expired token captured by the original caller and the\n   * loop would never make progress.\n   */\n  readonly onReauth?: (signal?: AbortSignal) => Promise<string>\n  /**\n   * Sleep implementation used between retry attempts. Defaults to the real\n   * `sleep` from `./retry.js`. Test code can inject a no-op to avoid real\n   * delays without relying on module mocking (which differs across runners).\n   *\n   * @internal\n   */\n  readonly sleepImpl?: (ms: number, signal?: AbortSignal) => Promise<void>\n}\n\n/**\n * Decide whether `url` points at a URL-pinned upload POST endpoint.\n *\n * @param url - Request URL to inspect.\n *\n * @returns Whether the request is a direct upload endpoint.\n */\nfunction isUploadEndpoint(url: string): boolean {\n  const endpoint = b2ApiEndpointName(url)\n  return endpoint === 'b2_upload_file' || endpoint === 'b2_upload_part'\n}\n\nfunction isFinishLargeFileEndpoint(url: string): boolean {\n  return b2ApiEndpointName(url) === 'b2_finish_large_file'\n}\n\nfunction isAuthorizeEndpoint(url: string): boolean {\n  return b2ApiEndpointName(url) === 'b2_authorize_account'\n}\n\nfunction isStartLargeFileEndpoint(url: string): boolean {\n  return b2ApiEndpointName(url) === 'b2_start_large_file'\n}\n\nfunction isPartnerMutationEndpoint(url: string): boolean {\n  const endpoint = b2ApiEndpointName(url)\n  return (\n    endpoint === 'b2_create_group_member' ||\n    endpoint === 'b2_eject_group_member' ||\n    endpoint === 'b2_reserve_trial_create_account'\n  )\n}\n\nfunction isBackupMutationEndpoint(url: string): boolean {\n  return backupApiEndpointName(url) === 'bz_delete_computer'\n}\n\nfunction isNonIdempotentMutationRequest(request: HttpRequest): boolean {\n  return (\n    request.method === 'POST' &&\n    (isPartnerMutationEndpoint(request.url) || isBackupMutationEndpoint(request.url))\n  )\n}\n\nfunction b2ApiEndpointName(url: string): string | undefined {\n  const segments = new URL(url).pathname.split('/').filter((segment) => segment.length > 0)\n  // Partner endpoint base URLs can themselves contain a b2api-looking segment\n  // before the SDK appends the real API route. Classify the terminal route.\n  const apiRootIndex = segments.lastIndexOf('b2api')\n  if (apiRootIndex === -1) return undefined\n  return segments[apiRootIndex + 2]\n}\n\nfunction backupApiEndpointName(url: string): string | undefined {\n  const segments = new URL(url).pathname.split('/').filter((segment) => segment.length > 0)\n  const apiRootIndex = segments.lastIndexOf('api')\n  if (apiRootIndex === -1 || segments[apiRootIndex + 1] !== 'backup') return undefined\n  if (!/^v\\d+$/.test(segments[apiRootIndex + 2] ?? '')) return undefined\n  return segments[apiRootIndex + 3]\n}\n\nfunction isReplayUnsafePostRequest(request: HttpRequest): boolean {\n  if (request.method !== 'POST') return false\n  return (\n    isUploadEndpoint(request.url) ||\n    isStartLargeFileEndpoint(request.url) ||\n    isFinishLargeFileEndpoint(request.url) ||\n    isNonIdempotentMutationRequest(request)\n  )\n}\n\n/**\n * Decide whether a classified error should be retried in place for `url`.\n * Transient errors normally retry; upload endpoints bubble to the upload layer\n * for fresh-URL retry except account-level 429 throttling, where fetching a new\n * upload URL only amplifies the rate limit.\n *\n * @param error - The classified, retryability-tagged error.\n * @param request - The request being considered for in-place retry.\n *\n * @returns Whether to retry the request in place.\n */\nfunction shouldRetryInPlace(error: B2Error, request: HttpRequest): boolean {\n  if (!error.retryable) return false\n  if (isAuthorizeEndpoint(request.url) && error instanceof ExpiredAuthTokenError) return false\n  if (isNonIdempotentMutationRequest(request)) return false\n  if (isStartLargeFileEndpoint(request.url) || isFinishLargeFileEndpoint(request.url)) return false\n  if (isUploadEndpoint(request.url) && error.status === 429) return true\n  if (isUploadEndpoint(request.url)) return false\n  return true\n}\n\nfunction isRequestTimeoutError(err: unknown): boolean {\n  return err instanceof DOMException && err.name === 'TimeoutError'\n}\n\nfunction isTerminalTransportError(err: unknown): boolean {\n  return (\n    err instanceof B2Error ||\n    err instanceof B2RedirectError ||\n    err instanceof NetworkError ||\n    err instanceof B2SsrfError ||\n    (err instanceof DOMException && err.name === 'AbortError')\n  )\n}\n\n/**\n * Transport wrapper that adds automatic retry with exponential backoff.\n * Handles transient errors (408, 429, and the transient 5xx set 500/502/503/504),\n * expired auth tokens, and network failures. Delegates to an inner\n * {@link HttpTransport}.\n *\n * Upload endpoints (`b2_upload_file` / `b2_upload_part`) are URL-pinned. Their\n * retryable pod failures bubble to the upload layer, which evicts the failed\n * URL, fetches a fresh one, and retries there. HTTP 429 remains an in-place\n * retry so account-level throttling does not trigger extra upload URL fetches.\n */\nexport class RetryTransport implements HttpTransport {\n  /** URL guard from the wrapped transport, when the transport exposes one. */\n  readonly urlGuard: UrlGuard | undefined\n  /** The wrapped transport that performs actual HTTP requests. */\n  private readonly inner: HttpTransport\n  /** Resolved retry options (defaults merged with user overrides). */\n  private readonly options: RetryOptions\n  /** Optional callback to refresh auth credentials on 401 — returns the fresh token. */\n  private readonly onReauth?: (signal?: AbortSignal) => Promise<string>\n  /** Sleep implementation used between retries; injectable for tests. */\n  private readonly sleepImpl: (ms: number, signal?: AbortSignal) => Promise<void>\n\n  /**\n   * Creates a new RetryTransport.\n   * @param opts - Retry transport configuration.\n   */\n  constructor(opts: RetryTransportOptions) {\n    this.inner = opts.transport\n    this.urlGuard = getTransportUrlGuard(opts.transport)\n    this.options = { ...DEFAULT_RETRY_OPTIONS, ...opts.retry }\n    if (opts.onReauth !== undefined) this.onReauth = opts.onReauth\n    this.sleepImpl = opts.sleepImpl ?? sleep\n  }\n\n  /**\n   * Sends the request with automatic retry on transient failures.\n   * On expired auth tokens, calls {@link RetryTransportOptions.onReauth} and retries.\n   * @param originalRequest - The HTTP request to execute. The caller's\n   *   reference is not mutated; on reauth, a copy with a refreshed\n   *   Authorization header is sent.\n   *\n   * @returns The HTTP response.\n   */\n  async send(originalRequest: HttpRequest): Promise<HttpResponse> {\n    // `request` is reassigned (not mutated) when reauth produces a\n    // fresh Authorization header, so the caller's `originalRequest`\n    // stays untouched.\n    let request: HttpRequest = originalRequest\n    const retryOptions = { ...this.options, ...originalRequest.retry }\n    let lastError: B2Error | NetworkError | undefined\n    let didReauth = false\n    let attempt = 0\n\n    while (attempt <= retryOptions.maxRetries) {\n      throwIfSignalAborted(request.signal)\n\n      if (attempt > 0 && lastError) {\n        const retryAfter = lastError instanceof NetworkError ? undefined : lastError.retryAfter\n        const delay = computeBackoff(attempt - 1, retryOptions, retryAfter)\n        await this.sleepImpl(delay, request.signal)\n      }\n\n      try {\n        const response = await this.inner.send({ ...request, retry: retryOptions })\n        await throwIfSignalAbortedAfterResponse(request.signal, response)\n\n        if (response.status >= 200 && response.status < 300) {\n          return response\n        }\n\n        let errorBody: B2ErrorResponse\n        try {\n          errorBody = await response.json<B2ErrorResponse>()\n        } catch (err) {\n          if (isRequestTimeoutError(err)) throw err\n          errorBody = {\n            status: response.status,\n            code: 'internal_error',\n            message: `HTTP ${response.status}`,\n          }\n        }\n\n        const retryAfterHeader = response.headers.get('Retry-After')\n        const retryAfterSec = retryAfterHeader ? Number.parseInt(retryAfterHeader, 10) : undefined\n        const requestId = response.headers.get('X-Bz-Request-Id') ?? undefined\n\n        const error = classifyError(errorBody, {\n          ...(retryAfterSec !== undefined ? { retryAfter: retryAfterSec } : {}),\n          ...(requestId !== undefined ? { requestId } : {}),\n        })\n\n        if (\n          error instanceof ExpiredAuthTokenError &&\n          this.onReauth &&\n          !isAuthorizeEndpoint(request.url) &&\n          !isUploadEndpoint(request.url) &&\n          !isNonIdempotentMutationRequest(request) &&\n          !didReauth\n        ) {\n          // Reauth returns the FRESH token; build a new request with a\n          // shallow-copied headers object so the Authorization swap\n          // doesn't mutate the caller's original request (which they\n          // may hold for retry / introspection). Without this swap the\n          // retry would carry the expired token captured at\n          // request-build time and bounce off the server again,\n          // exhausting the retry budget.\n          const freshToken = await raceWithAbort(this.onReauth(request.signal), request.signal)\n          throwIfSignalAborted(request.signal)\n          request = {\n            ...request,\n            headers: { ...(request.headers ?? {}), Authorization: freshToken },\n          }\n          didReauth = true\n          lastError = undefined\n          continue\n        }\n\n        if (!shouldRetryInPlace(error, request) || attempt === retryOptions.maxRetries) {\n          throw error\n        }\n\n        lastError = error\n        attempt += 1\n      } catch (err) {\n        throwIfSignalAborted(request.signal)\n        if (isTerminalTransportError(err)) {\n          throw err\n        }\n\n        const networkErr = new NetworkError(\n          err instanceof Error ? err.message : 'Network error',\n          err,\n        )\n\n        if (isReplayUnsafePostRequest(request) || attempt === retryOptions.maxRetries) {\n          throw networkErr\n        }\n\n        lastError = networkErr\n        attempt += 1\n      }\n    }\n\n    throw lastError ?? new NetworkError('Max retries exceeded')\n  }\n}\n\nasync function throwIfSignalAbortedAfterResponse(\n  signal: AbortSignal | undefined,\n  response: HttpResponse,\n): Promise<void> {\n  if (signal?.aborted !== true) return\n  const reason = abortReason(signal)\n  try {\n    await response.body?.cancel(reason)\n  } catch {\n    // Best-effort cleanup before preserving the caller's abort reason.\n  }\n  throw reason\n}\n"],"mappings":";;;;;;AAcA,IAAM,oCAAoB,IAAI,IAAI;CAAC;CAAK;CAAK;CAAK;CAAK;AAAG,CAAC;AAC3D,IAAM,4BAA4B;;;;;;;;;AA8DlC,SAAgB,qBAAqB,WAAgD;CACnF,MAAM,YAAY;CAClB,OAAO,UAAU,oBAAoB,kBAAA,WAAW,UAAU,WAAW,KAAA;AACvE;;;;;;;;AASA,IAAa,iBAAb,MAA2D;;CAEzD;;CAEA;;CAEA;;;;;CAMA,YAAY,SAST;EACD,KAAK,YAAY,mBAAA,aAAa,SAAS,SAAS;EAChD,KAAK,4BAA4B,SAAS,6BAA6B;EACvE,KAAK,WAAW,SAAS,YAAY,IAAI,kBAAA,SAAS;CACpD;;;;;;;;;;CAWA,MAAM,KAAK,SAA6C;EACtD,IAAI,iBAAiB;EACrB,IAAI,gBAAgB;EAEpB,OAAO,MAAM;GACX,KAAK,SAAS,MAAM,eAAe,GAAG;GAEtC,MAAM,UAAU,IAAI,QAAQ,eAAe,OAAO;GAClD,IAAI,CAAC,QAAQ,IAAI,YAAY,GAC3B,QAAQ,IAAI,cAAc,KAAK,SAAS;GAG1C,MAAM,eAAe,0BAA0B,cAAc;GAC7D,IAAI;GACJ,IAAI;IACF,WAAW,MAAM,MAAM,eAAe,KAAK;KACzC,QAAQ,eAAe;KACvB;KACA,MAAM,eAAe,QAAQ;KAC7B,UAAU;KACV,GAAI,aAAa,WAAW,KAAA,IAAY,EAAE,QAAQ,aAAa,OAAO,IAAI,CAAC;IAC7E,CAAC;GACH,SAAS,KAAK;IACZ,aAAa,QAAQ;IACrB,IAAI,aAAa,UACf,MAAM,0BAA0B,YAAY;IAE9C,MAAM;GACR;GAEA,IAAI,kBAAkB,QAAQ,GAAG;IAC/B,MAAM,WAAW,SAAS,QAAQ,IAAI,UAAU;IAChD,IACE,KAAK,6BACL,aAAa,QACb,gBAAgB,6BAChB,4BAA4B,gBAAgB,QAAQ,GACpD;KACA,MAAM,UAAU,IAAI,IAAI,UAAU,eAAe,GAAG,CAAC,CAAC,SAAS;KAC/D,MAAM,mBAAmB,QAAQ;KACjC,aAAa,QAAQ;KACrB,KAAK,SAAS,MAAM,OAAO;KAC3B,iBAAiB;MAAE,GAAG;MAAgB,KAAK;KAAQ;KACnD,iBAAiB;KACjB;IACF;IAEA,MAAM,mBAAmB,QAAQ;IACjC,aAAa,QAAQ;IACrB,MAAM,IAAI,qBAAA,gBAAgB,eAAe,KAAK,SAAS,QAAQ,QAAQ;GACzE;GAEA,OAAO,wBAAwB,UAAU,YAAY;EACvD;CACF;AACF;AAUA,SAAS,0BAA0B,SAA2C;CAC5E,MAAM,YAAY,QAAQ,OAAO,oBAAoB,cAAA,sBAAsB;CAC3E,IAAI,CAAC,OAAO,SAAS,SAAS,KAAK,aAAa,GAAG;EACjD,MAAM,QAA6B;GACjC,WAAW;GACX,UAAU;GACV,QAAQ,CAAC;GACT,UAAU,CAAC;EACb;EACA,IAAI,QAAQ,WAAW,KAAA,GAAW,OAAO;GAAE,GAAG;GAAO,QAAQ,QAAQ;EAAO;EAC5E,OAAO;CACT;CAEA,MAAM,aAAa,IAAI,gBAAgB;CACvC,IAAI,WAAW;CACf,IAAI;CACJ,MAAM,0BAAgC;EACpC,aAAa,KAAK;EAClB,WAAW,MAAM,QAAQ,QAAQ,UAAU,IAAI,aAAa,WAAW,YAAY,CAAC;CACtF;CACA,MAAM,iBAAgD;EACpD,MAAM,YAAY,iBAAiB;GACjC,WAAW;GACX,WAAW,MAAM,IAAI,aAAa,0BAA0B,cAAc,CAAC;EAC7E,GAAG,SAAS;EACZ,WAAW,SAAS;EACpB,OAAO;CACT;CACA,QAAQ,SAAS;CAEjB,MAAM,cAAoB;EACxB,IAAI,YAAY,WAAW,OAAO,SAAS;EAC3C,aAAa,KAAK;EAClB,QAAQ,SAAS;CACnB;CAEA,IAAI,QAAQ,QAAQ,YAAY,MAAM;EACpC,aAAa,KAAK;EAClB,kBAAkB;CACpB,OACE,QAAQ,QAAQ,iBAAiB,SAAS,mBAAmB,EAAE,MAAM,KAAK,CAAC;CAG7E,OAAO;EACL,QAAQ,WAAW;EACnB;EACA,IAAI,WAAW;GACb,OAAO;EACT;EACA;EACA,UAAU;GACR,aAAa,KAAK;GAClB,QAAQ,QAAQ,oBAAoB,SAAS,iBAAiB;EAChE;CACF;AACF;AAEA,SAAS,WAAW,OAA4C;CAC9D,MAAM,aAAc,MAAiC;CACrD,IAAI,OAAO,eAAe,YAAY,WAAW,KAAK,KAAK;AAC7D;AAEA,SAAS,0BAA0B,OAA0C;CAC3E,OAAO,IAAI,aAAa,gCAAgC,MAAM,UAAU,MAAM,cAAc;AAC9F;AAEA,SAAS,wBACP,UACA,cACc;CACd,MAAM,OAAO,SAAS;CACtB,IAAI,SAAS,MAAM,aAAa,QAAQ;CACxC,IAAI;CAEJ,OAAO;EACL,QAAQ,SAAS;EACjB,SAAS,SAAS;EAClB,IAAI,OAAO;GACT,IAAI,SAAS,MAAM,OAAO;GAC1B,cAAc,wBAAwB,MAAM,YAAY;GACxD,OAAO;EACT;EACA,YACE,sBAAsB,cAAc,gBAAgB,SAAS,KAAK,CAAe;EACnF,YAAY,sBAAsB,cAAc,gBAAgB,SAAS,KAAK,CAAC;EAC/E,mBAAmB,sBAAsB,cAAc,gBAAgB,SAAS,YAAY,CAAC;CAC/F;AACF;AAEA,eAAe,sBACb,cACA,UACA,MACY;CACZ,IAAI;EACF,OAAO,MAAM,sBAAsB,cAAc,KAAK,IAAI,WACxD,mBAAmB,UAAU,MAAM,CACrC;CACF,SAAS,KAAK;EACZ,IAAI,aAAa,UACf,MAAM,0BAA0B,YAAY;EAE9C,MAAM;CACR,UAAU;EACR,aAAa,QAAQ;CACvB;AACF;AAEA,SAAS,wBACP,MACA,cAC4B;CAC5B,IAAI;CACJ,IAAI,WAAW;CACf,MAAM,gBAAsB;EAC1B,IAAI,UAAU;EACd,WAAW;EACX,aAAa,QAAQ;CACvB;CAEA,OAAO,IAAI,eAA2B;EACpC,MAAM,KAAK,YAAY;GACrB,WAAW,KAAK,UAAU;GAC1B,IAAI;IACF,MAAM,SAAS,MAAM,sBAAsB,cAAc,OAAO,KAAK,IAAI,WACvE,QAAQ,OAAO,MAAM,CACvB;IACA,IAAI,OAAO,MAAM;KACf,QAAQ;KACR,WAAW,MAAM;KACjB;IACF;IACA,aAAa,MAAM;IACnB,WAAW,QAAQ,OAAO,KAAK;GACjC,SAAS,KAAK;IACZ,QAAQ;IACR,IAAI,aAAa,UAAU;KACzB,WAAW,MAAM,0BAA0B,YAAY,CAAC;KACxD;IACF;IACA,WAAW,MAAM,GAAG;GACtB;EACF;EACA,MAAM,OAAO,QAAQ;GACnB,QAAQ;GACR,IAAI;IACF,IAAI,WAAW,KAAA,GAAW;KACxB,MAAM,OAAO,OAAO,MAAM;KAC1B;IACF;IACA,MAAM,KAAK,OAAO,MAAM;GAC1B,QAAQ,CAER;EACF;CACF,CAAC;AACH;AAEA,eAAe,sBACb,cACA,MACA,cACY;CACZ,MAAM,SAAS,aAAa;CAC5B,IAAI,WAAW,KAAA,GAAW,OAAO;CACjC,IAAI,OAAO,SAAS;EAClB,KAAU,YAAY,CAAC,CAAC;EACxB,MAAM,SAAS,cAAA,YAAY,MAAM;EACjC,MAAM,gBAAgB,cAAc,MAAM;EAC1C,MAAM;CACR;CAEA,IAAI;CACJ,MAAM,QAAQ,IAAI,SAAgB,GAAG,WAAW;EAC9C,MAAM,gBAAsB;GAC1B,MAAM,SAAS,cAAA,YAAY,MAAM;GACjC,KAAU,YAAY,CAAC,CAAC;GACxB,OAAO,MAAM;GACb,gBAAqB,cAAc,MAAM;EAC3C;EACA,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;EACxD,4BAA4B,OAAO,oBAAoB,SAAS,OAAO;CACzE,CAAC;CAED,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,MAAM,KAAK,CAAC;CACzC,UAAU;EACR,sBAAsB;CACxB;AACF;AAEA,eAAe,gBACb,cACA,QACe;CACf,IAAI;EACF,MAAM,eAAe,MAAM;CAC7B,QAAQ,CAER;AACF;AAEA,SAAS,kBAAkB,UAA6B;CACtD,OAAO,SAAS,SAAS,oBAAoB,kBAAkB,IAAI,SAAS,MAAM;AACpF;AAEA,SAAS,4BAA4B,SAAsB,UAA2B;CACpF,IAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,QAAQ,OAAO;CAClE,IAAI;EACF,OAAO,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,WAAW,IAAI,IAAI,UAAU,QAAQ,GAAG,CAAC,CAAC;CACxE,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,mBAAmB,UAAoB,QAAiC;CACrF,IAAI;EACF,MAAM,SAAS,MAAM,OAAO,MAAM;CACpC,QAAQ,CAER;AACF;;;;;;;;AAoCA,SAAS,iBAAiB,KAAsB;CAC9C,MAAM,WAAW,kBAAkB,GAAG;CACtC,OAAO,aAAa,oBAAoB,aAAa;AACvD;AAEA,SAAS,0BAA0B,KAAsB;CACvD,OAAO,kBAAkB,GAAG,MAAM;AACpC;AAEA,SAAS,oBAAoB,KAAsB;CACjD,OAAO,kBAAkB,GAAG,MAAM;AACpC;AAEA,SAAS,yBAAyB,KAAsB;CACtD,OAAO,kBAAkB,GAAG,MAAM;AACpC;AAEA,SAAS,0BAA0B,KAAsB;CACvD,MAAM,WAAW,kBAAkB,GAAG;CACtC,OACE,aAAa,4BACb,aAAa,2BACb,aAAa;AAEjB;AAEA,SAAS,yBAAyB,KAAsB;CACtD,OAAO,sBAAsB,GAAG,MAAM;AACxC;AAEA,SAAS,+BAA+B,SAA+B;CACrE,OACE,QAAQ,WAAW,WAClB,0BAA0B,QAAQ,GAAG,KAAK,yBAAyB,QAAQ,GAAG;AAEnF;AAEA,SAAS,kBAAkB,KAAiC;CAC1D,MAAM,WAAW,IAAI,IAAI,GAAG,CAAC,CAAC,SAAS,MAAM,GAAG,CAAC,CAAC,QAAQ,YAAY,QAAQ,SAAS,CAAC;CAGxF,MAAM,eAAe,SAAS,YAAY,OAAO;CACjD,IAAI,iBAAiB,IAAI,OAAO,KAAA;CAChC,OAAO,SAAS,eAAe;AACjC;AAEA,SAAS,sBAAsB,KAAiC;CAC9D,MAAM,WAAW,IAAI,IAAI,GAAG,CAAC,CAAC,SAAS,MAAM,GAAG,CAAC,CAAC,QAAQ,YAAY,QAAQ,SAAS,CAAC;CACxF,MAAM,eAAe,SAAS,YAAY,KAAK;CAC/C,IAAI,iBAAiB,MAAM,SAAS,eAAe,OAAO,UAAU,OAAO,KAAA;CAC3E,IAAI,CAAC,SAAS,KAAK,SAAS,eAAe,MAAM,EAAE,GAAG,OAAO,KAAA;CAC7D,OAAO,SAAS,eAAe;AACjC;AAEA,SAAS,0BAA0B,SAA+B;CAChE,IAAI,QAAQ,WAAW,QAAQ,OAAO;CACtC,OACE,iBAAiB,QAAQ,GAAG,KAC5B,yBAAyB,QAAQ,GAAG,KACpC,0BAA0B,QAAQ,GAAG,KACrC,+BAA+B,OAAO;AAE1C;;;;;;;;;;;;AAaA,SAAS,mBAAmB,OAAgB,SAA+B;CACzE,IAAI,CAAC,MAAM,WAAW,OAAO;CAC7B,IAAI,oBAAoB,QAAQ,GAAG,KAAK,iBAAiB,qBAAA,uBAAuB,OAAO;CACvF,IAAI,+BAA+B,OAAO,GAAG,OAAO;CACpD,IAAI,yBAAyB,QAAQ,GAAG,KAAK,0BAA0B,QAAQ,GAAG,GAAG,OAAO;CAC5F,IAAI,iBAAiB,QAAQ,GAAG,KAAK,MAAM,WAAW,KAAK,OAAO;CAClE,IAAI,iBAAiB,QAAQ,GAAG,GAAG,OAAO;CAC1C,OAAO;AACT;AAEA,SAAS,sBAAsB,KAAuB;CACpD,OAAO,eAAe,gBAAgB,IAAI,SAAS;AACrD;AAEA,SAAS,yBAAyB,KAAuB;CACvD,OACE,eAAe,qBAAA,WACf,eAAe,qBAAA,mBACf,eAAe,qBAAA,gBACf,eAAe,qBAAA,eACd,eAAe,gBAAgB,IAAI,SAAS;AAEjD;;;;;;;;;;;;AAaA,IAAa,iBAAb,MAAqD;;CAEnD;;CAEA;;CAEA;;CAEA;;CAEA;;;;;CAMA,YAAY,MAA6B;EACvC,KAAK,QAAQ,KAAK;EAClB,KAAK,WAAW,qBAAqB,KAAK,SAAS;EACnD,KAAK,UAAU;GAAE,GAAG,cAAA;GAAuB,GAAG,KAAK;EAAM;EACzD,IAAI,KAAK,aAAa,KAAA,GAAW,KAAK,WAAW,KAAK;EACtD,KAAK,YAAY,KAAK,aAAa,cAAA;CACrC;;;;;;;;;;CAWA,MAAM,KAAK,iBAAqD;EAI9D,IAAI,UAAuB;EAC3B,MAAM,eAAe;GAAE,GAAG,KAAK;GAAS,GAAG,gBAAgB;EAAM;EACjE,IAAI;EACJ,IAAI,YAAY;EAChB,IAAI,UAAU;EAEd,OAAO,WAAW,aAAa,YAAY;GACzC,cAAA,qBAAqB,QAAQ,MAAM;GAEnC,IAAI,UAAU,KAAK,WAAW;IAC5B,MAAM,aAAa,qBAAqB,qBAAA,eAAe,KAAA,IAAY,UAAU;IAC7E,MAAM,QAAQ,cAAA,eAAe,UAAU,GAAG,cAAc,UAAU;IAClE,MAAM,KAAK,UAAU,OAAO,QAAQ,MAAM;GAC5C;GAEA,IAAI;IACF,MAAM,WAAW,MAAM,KAAK,MAAM,KAAK;KAAE,GAAG;KAAS,OAAO;IAAa,CAAC;IAC1E,MAAM,kCAAkC,QAAQ,QAAQ,QAAQ;IAEhE,IAAI,SAAS,UAAU,OAAO,SAAS,SAAS,KAC9C,OAAO;IAGT,IAAI;IACJ,IAAI;KACF,YAAY,MAAM,SAAS,KAAsB;IACnD,SAAS,KAAK;KACZ,IAAI,sBAAsB,GAAG,GAAG,MAAM;KACtC,YAAY;MACV,QAAQ,SAAS;MACjB,MAAM;MACN,SAAS,QAAQ,SAAS;KAC5B;IACF;IAEA,MAAM,mBAAmB,SAAS,QAAQ,IAAI,aAAa;IAC3D,MAAM,gBAAgB,mBAAmB,OAAO,SAAS,kBAAkB,EAAE,IAAI,KAAA;IACjF,MAAM,YAAY,SAAS,QAAQ,IAAI,iBAAiB,KAAK,KAAA;IAE7D,MAAM,QAAQ,qBAAA,cAAc,WAAW;KACrC,GAAI,kBAAkB,KAAA,IAAY,EAAE,YAAY,cAAc,IAAI,CAAC;KACnE,GAAI,cAAc,KAAA,IAAY,EAAE,UAAU,IAAI,CAAC;IACjD,CAAC;IAED,IACE,iBAAiB,qBAAA,yBACjB,KAAK,YACL,CAAC,oBAAoB,QAAQ,GAAG,KAChC,CAAC,iBAAiB,QAAQ,GAAG,KAC7B,CAAC,+BAA+B,OAAO,KACvC,CAAC,WACD;KAQA,MAAM,aAAa,MAAM,cAAA,cAAc,KAAK,SAAS,QAAQ,MAAM,GAAG,QAAQ,MAAM;KACpF,cAAA,qBAAqB,QAAQ,MAAM;KACnC,UAAU;MACR,GAAG;MACH,SAAS;OAAE,GAAI,QAAQ,WAAW,CAAC;OAAI,eAAe;MAAW;KACnE;KACA,YAAY;KACZ,YAAY,KAAA;KACZ;IACF;IAEA,IAAI,CAAC,mBAAmB,OAAO,OAAO,KAAK,YAAY,aAAa,YAClE,MAAM;IAGR,YAAY;IACZ,WAAW;GACb,SAAS,KAAK;IACZ,cAAA,qBAAqB,QAAQ,MAAM;IACnC,IAAI,yBAAyB,GAAG,GAC9B,MAAM;IAGR,MAAM,aAAa,IAAI,qBAAA,aACrB,eAAe,QAAQ,IAAI,UAAU,iBACrC,GACF;IAEA,IAAI,0BAA0B,OAAO,KAAK,YAAY,aAAa,YACjE,MAAM;IAGR,YAAY;IACZ,WAAW;GACb;EACF;EAEA,MAAM,aAAa,IAAI,qBAAA,aAAa,sBAAsB;CAC5D;AACF;AAEA,eAAe,kCACb,QACA,UACe;CACf,IAAI,QAAQ,YAAY,MAAM;CAC9B,MAAM,SAAS,cAAA,YAAY,MAAM;CACjC,IAAI;EACF,MAAM,SAAS,MAAM,OAAO,MAAM;CACpC,QAAQ,CAER;CACA,MAAM;AACR"}

package/dist/http/transport.d.cts

@@ -39,6 +39,24 @@ export interface HttpTransport {
     /** Sends an HTTP request and returns the response. */
     send(request: HttpRequest): Promise<HttpResponse>;
 }
+/**
+ * Transport capability for implementations that expose the SSRF URL guard
+ * protecting credential-bearing requests. Wrappers that preserve this
+ * capability should forward the same `urlGuard` property.
+ */
+export interface UrlGuardedTransport extends HttpTransport {
+    /** SSRF allow-list applied to outgoing URLs. */
+    readonly urlGuard: UrlGuard;
+}
+/**
+ * Returns the URL guard exposed by `transport`, if it implements
+ * {@link UrlGuardedTransport}.
+ *
+ * @param transport - Transport to inspect.
+ *
+ * @returns The exposed URL guard, or undefined for unguarded transports.
+ */
+export declare function getTransportUrlGuard(transport: HttpTransport): UrlGuard | undefined;
 /**
  * Default transport implementation using the global `fetch` API.
  * Automatically sets the User-Agent header on each request and applies the
@@ -46,7 +64,7 @@ export interface HttpTransport {
  * Redirect following is disabled so redirected URLs cannot bypass the guard or
  * receive credential-bearing headers without an explicit checked request.
  */
-export declare class FetchTransport implements HttpTransport {
+export declare class FetchTransport implements UrlGuardedTransport {
     /** User-Agent string sent with every request. */
     private readonly userAgent;
     /** Whether same-origin GET/HEAD redirects should be followed after guard checks. */
@@ -86,13 +104,15 @@ export interface RetryTransportOptions {
     readonly retry?: Partial<RetryOptions>;
     /**
      * Callback invoked on expired auth token errors. Must refresh
-     * credentials AND return the fresh auth token. The transport
+     * credentials AND return the fresh auth token. The original request's
+     * abort signal is forwarded so reauthorization can be cancelled with the
+     * operation that triggered it. The transport
      * substitutes the new token into `request.headers.Authorization`
      * before retrying — without this, the retried request would still
      * carry the expired token captured by the original caller and the
      * loop would never make progress.
      */
-    readonly onReauth?: () => Promise<string>;
+    readonly onReauth?: (signal?: AbortSignal) => Promise<string>;
     /**
      * Sleep implementation used between retry attempts. Defaults to the real
      * `sleep` from `./retry.js`. Test code can inject a no-op to avoid real
@@ -114,6 +134,8 @@ export interface RetryTransportOptions {
  * retry so account-level throttling does not trigger extra upload URL fetches.
  */
 export declare class RetryTransport implements HttpTransport {
+    /** URL guard from the wrapped transport, when the transport exposes one. */
+    readonly urlGuard: UrlGuard | undefined;
     /** The wrapped transport that performs actual HTTP requests. */
     private readonly inner;
     /** Resolved retry options (defaults merged with user overrides). */

package/dist/http/transport.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/http/transport.js"],"names":[],"mappings":"AASA,OAAO,EAAyC,KAAK,YAAY,EAAS,MAAM,YAAY,CAAA;AAC5F,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAMzC,wDAAwD;AACxD,MAAM,WAAW,WAAW;IAC1B,kDAAkD;IAClD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,6GAA6G;IAC7G,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAA;IACxC,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACzC,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;IAC/B,sDAAsD;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,2CAA2C;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;CACvC;AAED,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,wBAAwB;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,wBAAwB;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAA;IAChD,wCAAwC;IACxC,IAAI,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;IACrB,iDAAiD;IACjD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACvB,iDAAiD;IACjD,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAA;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,sDAAsD;IACtD,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;CAClD;AAED;;;;;;GAMG;AACH,qBAAa,cAAe,YAAW,aAAa;IAClD,iDAAiD;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,oFAAoF;IACpF,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAS;IACnD,mHAAmH;IACnH,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAE3B;;;OAGG;gBACS,OAAO,CAAC,EAAE;QACpB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,QAAQ,CAAC,EAAE,QAAQ,CAAA;QACnB;;;;WAIG;QACH,yBAAyB,CAAC,EAAE,OAAO,CAAA;KACpC;IAMD;;;;;;;;OAQG;IACG,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;CAuDxD;AA0OD,gDAAgD;AAChD,MAAM,WAAW,qBAAqB;IACpC,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAA;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;IACzC;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACzE;AAiED;;;;;;;;;;GAUG;AACH,qBAAa,cAAe,YAAW,aAAa;IAClD,gEAAgE;IAChE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,oEAAoE;IACpE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,sFAAsF;IACtF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAuB;IACjD,uEAAuE;IACvE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqD;IAE/E;;;OAGG;gBACS,IAAI,EAAE,qBAAqB;IAOvC;;;;;;;;OAQG;IACG,IAAI,CAAC,eAAe,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;CAmGhE"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/http/transport.js"],"names":[],"mappings":"AAUA,OAAO,EAAyC,KAAK,YAAY,EAAS,MAAM,YAAY,CAAA;AAC5F,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAMzC,wDAAwD;AACxD,MAAM,WAAW,WAAW;IAC1B,kDAAkD;IAClD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,6GAA6G;IAC7G,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAA;IACxC,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACzC,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;IAC/B,sDAAsD;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,2CAA2C;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;CACvC;AAED,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,wBAAwB;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,wBAAwB;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAA;IAChD,wCAAwC;IACxC,IAAI,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;IACrB,iDAAiD;IACjD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACvB,iDAAiD;IACjD,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAA;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,sDAAsD;IACtD,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;CAClD;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAoB,SAAQ,aAAa;IACxD,gDAAgD;IAChD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAGnF;AAED;;;;;;GAMG;AACH,qBAAa,cAAe,YAAW,mBAAmB;IACxD,iDAAiD;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,oFAAoF;IACpF,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAS;IACnD,mHAAmH;IACnH,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAE3B;;;OAGG;gBACS,OAAO,CAAC,EAAE;QACpB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,QAAQ,CAAC,EAAE,QAAQ,CAAA;QACnB;;;;WAIG;QACH,yBAAyB,CAAC,EAAE,OAAO,CAAA;KACpC;IAMD;;;;;;;;OAQG;IACG,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;CAuDxD;AAyOD,gDAAgD;AAChD,MAAM,WAAW,qBAAqB;IACpC,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAA;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IACtC;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAC7D;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACzE;AA4GD;;;;;;;;;;GAUG;AACH,qBAAa,cAAe,YAAW,aAAa;IAClD,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAA;IACvC,gEAAgE;IAChE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,oEAAoE;IACpE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,sFAAsF;IACtF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAA2C;IACrE,uEAAuE;IACvE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqD;IAE/E;;;OAGG;gBACS,IAAI,EAAE,qBAAqB;IAQvC;;;;;;;;OAQG;IACG,IAAI,CAAC,eAAe,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;CAsGhE"}

package/dist/http/transport.d.ts

@@ -39,6 +39,24 @@ export interface HttpTransport {
     /** Sends an HTTP request and returns the response. */
     send(request: HttpRequest): Promise<HttpResponse>;
 }
+/**
+ * Transport capability for implementations that expose the SSRF URL guard
+ * protecting credential-bearing requests. Wrappers that preserve this
+ * capability should forward the same `urlGuard` property.
+ */
+export interface UrlGuardedTransport extends HttpTransport {
+    /** SSRF allow-list applied to outgoing URLs. */
+    readonly urlGuard: UrlGuard;
+}
+/**
+ * Returns the URL guard exposed by `transport`, if it implements
+ * {@link UrlGuardedTransport}.
+ *
+ * @param transport - Transport to inspect.
+ *
+ * @returns The exposed URL guard, or undefined for unguarded transports.
+ */
+export declare function getTransportUrlGuard(transport: HttpTransport): UrlGuard | undefined;
 /**
  * Default transport implementation using the global `fetch` API.
  * Automatically sets the User-Agent header on each request and applies the
@@ -46,7 +64,7 @@ export interface HttpTransport {
  * Redirect following is disabled so redirected URLs cannot bypass the guard or
  * receive credential-bearing headers without an explicit checked request.
  */
-export declare class FetchTransport implements HttpTransport {
+export declare class FetchTransport implements UrlGuardedTransport {
     /** User-Agent string sent with every request. */
     private readonly userAgent;
     /** Whether same-origin GET/HEAD redirects should be followed after guard checks. */
@@ -86,13 +104,15 @@ export interface RetryTransportOptions {
     readonly retry?: Partial<RetryOptions>;
     /**
      * Callback invoked on expired auth token errors. Must refresh
-     * credentials AND return the fresh auth token. The transport
+     * credentials AND return the fresh auth token. The original request's
+     * abort signal is forwarded so reauthorization can be cancelled with the
+     * operation that triggered it. The transport
      * substitutes the new token into `request.headers.Authorization`
      * before retrying — without this, the retried request would still
      * carry the expired token captured by the original caller and the
      * loop would never make progress.
      */
-    readonly onReauth?: () => Promise<string>;
+    readonly onReauth?: (signal?: AbortSignal) => Promise<string>;
     /**
      * Sleep implementation used between retry attempts. Defaults to the real
      * `sleep` from `./retry.js`. Test code can inject a no-op to avoid real
@@ -114,6 +134,8 @@ export interface RetryTransportOptions {
  * retry so account-level throttling does not trigger extra upload URL fetches.
  */
 export declare class RetryTransport implements HttpTransport {
+    /** URL guard from the wrapped transport, when the transport exposes one. */
+    readonly urlGuard: UrlGuard | undefined;
     /** The wrapped transport that performs actual HTTP requests. */
     private readonly inner;
     /** Resolved retry options (defaults merged with user overrides). */

package/dist/http/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/http/transport.js"],"names":[],"mappings":"AASA,OAAO,EAAyC,KAAK,YAAY,EAAS,MAAM,YAAY,CAAA;AAC5F,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAMzC,wDAAwD;AACxD,MAAM,WAAW,WAAW;IAC1B,kDAAkD;IAClD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,6GAA6G;IAC7G,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAA;IACxC,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACzC,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;IAC/B,sDAAsD;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,2CAA2C;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;CACvC;AAED,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,wBAAwB;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,wBAAwB;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAA;IAChD,wCAAwC;IACxC,IAAI,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;IACrB,iDAAiD;IACjD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACvB,iDAAiD;IACjD,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAA;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,sDAAsD;IACtD,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;CAClD;AAED;;;;;;GAMG;AACH,qBAAa,cAAe,YAAW,aAAa;IAClD,iDAAiD;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,oFAAoF;IACpF,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAS;IACnD,mHAAmH;IACnH,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAE3B;;;OAGG;gBACS,OAAO,CAAC,EAAE;QACpB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,QAAQ,CAAC,EAAE,QAAQ,CAAA;QACnB;;;;WAIG;QACH,yBAAyB,CAAC,EAAE,OAAO,CAAA;KACpC;IAMD;;;;;;;;OAQG;IACG,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;CAuDxD;AA0OD,gDAAgD;AAChD,MAAM,WAAW,qBAAqB;IACpC,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAA;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;IACzC;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACzE;AAiED;;;;;;;;;;GAUG;AACH,qBAAa,cAAe,YAAW,aAAa;IAClD,gEAAgE;IAChE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,oEAAoE;IACpE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,sFAAsF;IACtF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAuB;IACjD,uEAAuE;IACvE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqD;IAE/E;;;OAGG;gBACS,IAAI,EAAE,qBAAqB;IAOvC;;;;;;;;OAQG;IACG,IAAI,CAAC,eAAe,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;CAmGhE"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/http/transport.js"],"names":[],"mappings":"AAUA,OAAO,EAAyC,KAAK,YAAY,EAAS,MAAM,YAAY,CAAA;AAC5F,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAMzC,wDAAwD;AACxD,MAAM,WAAW,WAAW;IAC1B,kDAAkD;IAClD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,6GAA6G;IAC7G,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAA;IACxC,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACzC,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;IAC/B,sDAAsD;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,2CAA2C;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;CACvC;AAED,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,wBAAwB;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,wBAAwB;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAA;IAChD,wCAAwC;IACxC,IAAI,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;IACrB,iDAAiD;IACjD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACvB,iDAAiD;IACjD,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAA;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,sDAAsD;IACtD,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;CAClD;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAoB,SAAQ,aAAa;IACxD,gDAAgD;IAChD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAGnF;AAED;;;;;;GAMG;AACH,qBAAa,cAAe,YAAW,mBAAmB;IACxD,iDAAiD;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,oFAAoF;IACpF,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAS;IACnD,mHAAmH;IACnH,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAE3B;;;OAGG;gBACS,OAAO,CAAC,EAAE;QACpB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,QAAQ,CAAC,EAAE,QAAQ,CAAA;QACnB;;;;WAIG;QACH,yBAAyB,CAAC,EAAE,OAAO,CAAA;KACpC;IAMD;;;;;;;;OAQG;IACG,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;CAuDxD;AAyOD,gDAAgD;AAChD,MAAM,WAAW,qBAAqB;IACpC,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAA;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IACtC;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAC7D;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACzE;AA4GD;;;;;;;;;;GAUG;AACH,qBAAa,cAAe,YAAW,aAAa;IAClD,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAA;IACvC,gEAAgE;IAChE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,oEAAoE;IACpE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,sFAAsF;IACtF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAA2C;IACrE,uEAAuE;IACvE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqD;IAE/E;;;OAGG;gBACS,IAAI,EAAE,qBAAqB;IAQvC;;;;;;;;OAQG;IACG,IAAI,CAAC,eAAe,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;CAsGhE"}