@backblaze-labs/b2-sdk 0.2.0 → 0.4.0

package/dist/http/transport.js

@@ -1,5 +1,7 @@
 import { B2Error, B2RedirectError, B2SsrfError, ExpiredAuthTokenError, NetworkError, classifyError } from "../errors/index.js";
+import { abortReason, raceWithAbort, throwIfSignalAborted } from "../util/abort.js";
 import { DEFAULT_RETRY_OPTIONS, computeBackoff, sleep } from "./retry.js";
+import { isBackupNonIdempotentMutationEndpoint, isPartnerNonIdempotentMutationEndpoint } from "./non-idempotent-mutations.js";
 import { UrlGuard } from "./url-guard.js";
 import { getUserAgent } from "./user-agent.js";
 //#region src/http/transport.ts
@@ -12,6 +14,18 @@ var REDIRECT_STATUSES = /* @__PURE__ */ new Set([
 ]);
 var MAX_SAME_ORIGIN_REDIRECTS = 5;
 /**
+* Returns the URL guard exposed by `transport`, if it implements
+* {@link UrlGuardedTransport}.
+*
+* @param transport - Transport to inspect.
+*
+* @returns The exposed URL guard, or undefined for unguarded transports.
+*/
+function getTransportUrlGuard(transport) {
+	const candidate = transport;
+	return candidate.urlGuard instanceof UrlGuard ? candidate.urlGuard : void 0;
+}
+/**
 * Default transport implementation using the global `fetch` API.
 * Automatically sets the User-Agent header on each request and applies the
 * SSRF {@link UrlGuard} (if configured) before opening the connection.
@@ -218,17 +232,16 @@ function createTimedResponseBody(body, timeoutScope) {
 async function raceBodyReadWithAbort(timeoutScope, read, abortCleanup) {
 	const signal = timeoutScope.signal;
 	if (signal === void 0) return read;
-	const abortReason = () => signal.reason ?? new DOMException("Aborted", "AbortError");
 	if (signal.aborted) {
 		read.catch(() => {});
-		const reason = abortReason();
+		const reason = abortReason(signal);
 		await runAbortCleanup(abortCleanup, reason);
 		throw reason;
 	}
 	let removeAbortListener;
 	const abort = new Promise((_, reject) => {
 		const onAbort = () => {
-			const reason = abortReason();
+			const reason = abortReason(signal);
 			read.catch(() => {});
 			reject(reason);
 			runAbortCleanup(abortCleanup, reason);
@@ -277,16 +290,38 @@ function isUploadEndpoint(url) {
 function isFinishLargeFileEndpoint(url) {
 	return b2ApiEndpointName(url) === "b2_finish_large_file";
 }
+function isAuthorizeEndpoint(url) {
+	return b2ApiEndpointName(url) === "b2_authorize_account";
+}
 function isStartLargeFileEndpoint(url) {
 	return b2ApiEndpointName(url) === "b2_start_large_file";
 }
+function isKnownPartnerNonIdempotentMutationEndpoint(url) {
+	return isPartnerNonIdempotentMutationEndpoint(b2ApiEndpointName(url));
+}
+function isKnownBackupNonIdempotentMutationEndpoint(url) {
+	return isBackupNonIdempotentMutationEndpoint(backupApiEndpointName(url));
+}
+function isNonIdempotentMutationRequest(request) {
+	return request.idempotent === false || request.method === "POST" && (isKnownPartnerNonIdempotentMutationEndpoint(request.url) || isKnownBackupNonIdempotentMutationEndpoint(request.url));
+}
 function b2ApiEndpointName(url) {
-	const [, root, , endpoint] = new URL(url).pathname.split("/");
-	if (root !== "b2api") return void 0;
-	return endpoint;
+	const segments = new URL(url).pathname.split("/").filter((segment) => segment.length > 0);
+	const apiRootIndex = segments.lastIndexOf("b2api");
+	if (apiRootIndex === -1) return void 0;
+	return segments[apiRootIndex + 2];
 }
-function isReplayUnsafePostEndpoint(url) {
-	return isUploadEndpoint(url) || isStartLargeFileEndpoint(url) || isFinishLargeFileEndpoint(url);
+function backupApiEndpointName(url) {
+	const segments = new URL(url).pathname.split("/").filter((segment) => segment.length > 0);
+	const apiRootIndex = segments.lastIndexOf("api");
+	if (apiRootIndex === -1 || segments[apiRootIndex + 1] !== "backup") return void 0;
+	if (!/^v\d+$/.test(segments[apiRootIndex + 2] ?? "")) return void 0;
+	return segments[apiRootIndex + 3];
+}
+function isReplayUnsafeRequest(request) {
+	if (request.idempotent === false) return true;
+	if (request.method !== "POST") return false;
+	return isUploadEndpoint(request.url) || isStartLargeFileEndpoint(request.url) || isFinishLargeFileEndpoint(request.url) || isNonIdempotentMutationRequest(request);
 }
 /**
 * Decide whether a classified error should be retried in place for `url`.
@@ -295,15 +330,17 @@ function isReplayUnsafePostEndpoint(url) {
 * upload URL only amplifies the rate limit.
 *
 * @param error - The classified, retryability-tagged error.
-* @param url - The request URL (used to detect upload endpoints).
+* @param request - The request being considered for in-place retry.
 *
 * @returns Whether to retry the request in place.
 */
-function shouldRetryInPlace(error, url) {
+function shouldRetryInPlace(error, request) {
 	if (!error.retryable) return false;
-	if (isStartLargeFileEndpoint(url) || isFinishLargeFileEndpoint(url)) return false;
-	if (isUploadEndpoint(url) && error.status === 429) return true;
-	if (isUploadEndpoint(url)) return false;
+	if (isAuthorizeEndpoint(request.url) && error instanceof ExpiredAuthTokenError) return false;
+	if (isNonIdempotentMutationRequest(request)) return false;
+	if (isStartLargeFileEndpoint(request.url) || isFinishLargeFileEndpoint(request.url)) return false;
+	if (isUploadEndpoint(request.url) && error.status === 429) return true;
+	if (isUploadEndpoint(request.url)) return false;
 	return true;
 }
 function isRequestTimeoutError(err) {
@@ -324,6 +361,8 @@ function isTerminalTransportError(err) {
 * retry so account-level throttling does not trigger extra upload URL fetches.
 */
 var RetryTransport = class {
+	/** URL guard from the wrapped transport, when the transport exposes one. */
+	urlGuard;
 	/** The wrapped transport that performs actual HTTP requests. */
 	inner;
 	/** Resolved retry options (defaults merged with user overrides). */
@@ -338,6 +377,7 @@ var RetryTransport = class {
 	*/
 	constructor(opts) {
 		this.inner = opts.transport;
+		this.urlGuard = getTransportUrlGuard(opts.transport);
 		this.options = {
 			...DEFAULT_RETRY_OPTIONS,
 			...opts.retry
@@ -395,8 +435,9 @@ var RetryTransport = class {
 					...retryAfterSec !== void 0 ? { retryAfter: retryAfterSec } : {},
 					...requestId !== void 0 ? { requestId } : {}
 				});
-				if (error instanceof ExpiredAuthTokenError && this.onReauth && !isUploadEndpoint(request.url) && !didReauth) {
-					const freshToken = await this.onReauth();
+				if (error instanceof ExpiredAuthTokenError && this.onReauth && !isAuthorizeEndpoint(request.url) && !isUploadEndpoint(request.url) && !isNonIdempotentMutationRequest(request) && !didReauth) {
+					const freshToken = await raceWithAbort(this.onReauth(request.signal), request.signal);
+					throwIfSignalAborted(request.signal);
 					request = {
 						...request,
 						headers: {
@@ -408,14 +449,14 @@ var RetryTransport = class {
 					lastError = void 0;
 					continue;
 				}
-				if (!shouldRetryInPlace(error, request.url) || attempt === retryOptions.maxRetries) throw error;
+				if (!shouldRetryInPlace(error, request) || attempt === retryOptions.maxRetries) throw error;
 				lastError = error;
 				attempt += 1;
 			} catch (err) {
 				throwIfSignalAborted(request.signal);
 				if (isTerminalTransportError(err)) throw err;
 				const networkErr = new NetworkError(err instanceof Error ? err.message : "Network error", err);
-				if (isReplayUnsafePostEndpoint(request.url) || attempt === retryOptions.maxRetries) throw networkErr;
+				if (isReplayUnsafeRequest(request) || attempt === retryOptions.maxRetries) throw networkErr;
 				lastError = networkErr;
 				attempt += 1;
 			}
@@ -423,18 +464,15 @@ var RetryTransport = class {
 		throw lastError ?? new NetworkError("Max retries exceeded");
 	}
 };
-function throwIfSignalAborted(signal) {
-	if (signal?.aborted === true) throw signal.reason ?? new DOMException("Aborted", "AbortError");
-}
 async function throwIfSignalAbortedAfterResponse(signal, response) {
 	if (signal?.aborted !== true) return;
-	const reason = signal.reason ?? new DOMException("Aborted", "AbortError");
+	const reason = abortReason(signal);
 	try {
 		await response.body?.cancel(reason);
 	} catch {}
 	throw reason;
 }
 //#endregion
-export { FetchTransport, RetryTransport };
+export { FetchTransport, RetryTransport, getTransportUrlGuard };
 
 //# sourceMappingURL=transport.js.map

package/dist/http/transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"transport.js","names":[],"sources":["../../src/http/transport.ts"],"sourcesContent":["import {\n  B2Error,\n  B2RedirectError,\n  B2SsrfError,\n  classifyError,\n  ExpiredAuthTokenError,\n  NetworkError,\n} from '../errors/index.ts'\nimport type { B2ErrorResponse } from '../types/errors.ts'\nimport { computeBackoff, DEFAULT_RETRY_OPTIONS, type RetryOptions, sleep } from './retry.ts'\nimport { UrlGuard } from './url-guard.ts'\nimport { getUserAgent } from './user-agent.ts'\n\nconst REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308])\nconst MAX_SAME_ORIGIN_REDIRECTS = 5\n\n/** Describes an outgoing HTTP request to the B2 API. */\nexport interface HttpRequest {\n  /** Fully qualified URL to send the request to. */\n  readonly url: string\n  /** HTTP method. B2 uses GET for downloads (HEAD to fetch only headers) and POST for all other operations. */\n  readonly method: 'GET' | 'HEAD' | 'POST'\n  /** Request headers. Authorization and content-type are typically included. */\n  readonly headers?: Record<string, string>\n  /** Request body. Used for POST requests (JSON payloads or file uploads). */\n  readonly body?: BodyInit | null\n  /** Optional abort signal for request cancellation. */\n  readonly signal?: AbortSignal\n  /** Optional per-request retry override. */\n  readonly retry?: Partial<RetryOptions>\n}\n\n/** Represents a parsed HTTP response from the B2 API. */\nexport interface HttpResponse {\n  /** HTTP status code. */\n  readonly status: number\n  /** Response headers. */\n  readonly headers: Headers\n  /** Response body as a readable stream, or null for empty responses. */\n  readonly body: ReadableStream<Uint8Array> | null\n  /** Parses the response body as JSON. */\n  json<T>(): Promise<T>\n  /** Reads the response body as a UTF-8 string. */\n  text(): Promise<string>\n  /** Reads the response body as an ArrayBuffer. */\n  arrayBuffer(): Promise<ArrayBuffer>\n}\n\n/**\n * Transport layer abstraction for sending HTTP requests.\n * Implementations handle the actual network I/O and can be composed\n * (e.g. wrapping a {@link FetchTransport} with a {@link RetryTransport}).\n */\nexport interface HttpTransport {\n  /** Sends an HTTP request and returns the response. */\n  send(request: HttpRequest): Promise<HttpResponse>\n}\n\n/**\n * Default transport implementation using the global `fetch` API.\n * Automatically sets the User-Agent header on each request and applies the\n * SSRF {@link UrlGuard} (if configured) before opening the connection.\n * Redirect following is disabled so redirected URLs cannot bypass the guard or\n * receive credential-bearing headers without an explicit checked request.\n */\nexport class FetchTransport implements HttpTransport {\n  /** User-Agent string sent with every request. */\n  private readonly userAgent: string\n  /** Whether same-origin GET/HEAD redirects should be followed after guard checks. */\n  private readonly followSameOriginRedirects: boolean\n  /** SSRF allow-list applied to every outgoing URL. Mutable so `B2Client.authorize()` can lock it down post-auth. */\n  readonly urlGuard: UrlGuard\n\n  /**\n   * Creates a new FetchTransport.\n   * @param options - Optional configuration: custom User-Agent prefix and SSRF guard.\n   */\n  constructor(options?: {\n    userAgent?: string\n    urlGuard?: UrlGuard\n    /**\n     * Follow same-origin GET/HEAD redirects after checking the target with the\n     * URL guard. POST redirects are still blocked to avoid replaying\n     * credential-bearing payloads to an unexpected endpoint. Defaults to true.\n     */\n    followSameOriginRedirects?: boolean\n  }) {\n    this.userAgent = getUserAgent(options?.userAgent)\n    this.followSameOriginRedirects = options?.followSameOriginRedirects ?? true\n    this.urlGuard = options?.urlGuard ?? new UrlGuard()\n  }\n\n  /**\n   * Sends the request using the global `fetch` function.\n   * @param request - The HTTP request to execute.\n   *\n   * @returns The HTTP response.\n   *\n   * @throws B2SsrfError when the URL fails the configured SSRF guard.\n   * @throws B2RedirectError when a response attempts to redirect.\n   */\n  async send(request: HttpRequest): Promise<HttpResponse> {\n    let currentRequest = request\n    let redirectCount = 0\n\n    while (true) {\n      this.urlGuard.check(currentRequest.url)\n\n      const headers = new Headers(currentRequest.headers)\n      if (!headers.has('User-Agent')) {\n        headers.set('User-Agent', this.userAgent)\n      }\n\n      const timeoutScope = createRequestTimeoutScope(currentRequest)\n      let response: Response\n      try {\n        response = await fetch(currentRequest.url, {\n          method: currentRequest.method,\n          headers,\n          body: currentRequest.body ?? null,\n          redirect: 'manual',\n          ...(timeoutScope.signal !== undefined ? { signal: timeoutScope.signal } : {}),\n        })\n      } catch (err) {\n        timeoutScope.dispose()\n        if (timeoutScope.timedOut) {\n          throw createRequestTimeoutError(timeoutScope)\n        }\n        throw err\n      }\n\n      if (isBlockedRedirect(response)) {\n        const location = response.headers.get('Location')\n        if (\n          this.followSameOriginRedirects &&\n          location !== null &&\n          redirectCount < MAX_SAME_ORIGIN_REDIRECTS &&\n          canFollowSameOriginRedirect(currentRequest, location)\n        ) {\n          const nextUrl = new URL(location, currentRequest.url).toString()\n          await cancelResponseBody(response)\n          timeoutScope.dispose()\n          this.urlGuard.check(nextUrl)\n          currentRequest = { ...currentRequest, url: nextUrl }\n          redirectCount += 1\n          continue\n        }\n\n        await cancelResponseBody(response)\n        timeoutScope.dispose()\n        throw new B2RedirectError(currentRequest.url, response.status, location)\n      }\n\n      return createTimedHttpResponse(response, timeoutScope)\n    }\n  }\n}\n\ninterface RequestTimeoutScope {\n  readonly signal?: AbortSignal\n  readonly timeoutMs: number\n  readonly timedOut: boolean\n  reset(): void\n  dispose(): void\n}\n\nfunction createRequestTimeoutScope(request: HttpRequest): RequestTimeoutScope {\n  const timeoutMs = request.retry?.requestTimeoutMs ?? DEFAULT_RETRY_OPTIONS.requestTimeoutMs\n  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {\n    const scope: RequestTimeoutScope = {\n      timeoutMs: 0,\n      timedOut: false,\n      reset() {},\n      dispose() {},\n    }\n    if (request.signal !== undefined) return { ...scope, signal: request.signal }\n    return scope\n  }\n\n  const controller = new AbortController()\n  let timedOut = false\n  let timer: ReturnType<typeof setTimeout>\n  const abortFromUpstream = (): void => {\n    clearTimeout(timer)\n    controller.abort(request.signal?.reason ?? new DOMException('Aborted', 'AbortError'))\n  }\n  const armTimer = (): ReturnType<typeof setTimeout> => {\n    const nextTimer = setTimeout(() => {\n      timedOut = true\n      controller.abort(new DOMException('HTTP request timed out', 'TimeoutError'))\n    }, timeoutMs)\n    unrefTimer(nextTimer)\n    return nextTimer\n  }\n  timer = armTimer()\n\n  const reset = (): void => {\n    if (timedOut || controller.signal.aborted) return\n    clearTimeout(timer)\n    timer = armTimer()\n  }\n\n  if (request.signal?.aborted === true) {\n    clearTimeout(timer)\n    abortFromUpstream()\n  } else {\n    request.signal?.addEventListener('abort', abortFromUpstream, { once: true })\n  }\n\n  return {\n    signal: controller.signal,\n    timeoutMs,\n    get timedOut() {\n      return timedOut\n    },\n    reset,\n    dispose() {\n      clearTimeout(timer)\n      request.signal?.removeEventListener('abort', abortFromUpstream)\n    },\n  }\n}\n\nfunction unrefTimer(timer: ReturnType<typeof setTimeout>): void {\n  const maybeUnref = (timer as { unref?: () => void }).unref\n  if (typeof maybeUnref === 'function') maybeUnref.call(timer)\n}\n\nfunction createRequestTimeoutError(scope: RequestTimeoutScope): DOMException {\n  return new DOMException(`HTTP request timed out after ${scope.timeoutMs} ms`, 'TimeoutError')\n}\n\nfunction createTimedHttpResponse(\n  response: Response,\n  timeoutScope: RequestTimeoutScope,\n): HttpResponse {\n  const body = response.body\n  if (body === null) timeoutScope.dispose()\n  let timedBody: ReadableStream<Uint8Array> | undefined\n\n  return {\n    status: response.status,\n    headers: response.headers,\n    get body() {\n      if (body === null) return null\n      timedBody ??= createTimedResponseBody(body, timeoutScope)\n      return timedBody\n    },\n    json: <T>() =>\n      readTimedResponseBody(timeoutScope, response, () => response.json() as Promise<T>),\n    text: () => readTimedResponseBody(timeoutScope, response, () => response.text()),\n    arrayBuffer: () => readTimedResponseBody(timeoutScope, response, () => response.arrayBuffer()),\n  }\n}\n\nasync function readTimedResponseBody<T>(\n  timeoutScope: RequestTimeoutScope,\n  response: Response,\n  read: () => Promise<T>,\n): Promise<T> {\n  try {\n    return await raceBodyReadWithAbort(timeoutScope, read(), (reason) =>\n      cancelResponseBody(response, reason),\n    )\n  } catch (err) {\n    if (timeoutScope.timedOut) {\n      throw createRequestTimeoutError(timeoutScope)\n    }\n    throw err\n  } finally {\n    timeoutScope.dispose()\n  }\n}\n\nfunction createTimedResponseBody(\n  body: ReadableStream<Uint8Array>,\n  timeoutScope: RequestTimeoutScope,\n): ReadableStream<Uint8Array> {\n  let reader: ReadableStreamDefaultReader<Uint8Array> | undefined\n  let disposed = false\n  const dispose = (): void => {\n    if (disposed) return\n    disposed = true\n    timeoutScope.dispose()\n  }\n\n  return new ReadableStream<Uint8Array>({\n    async pull(controller) {\n      reader ??= body.getReader()\n      try {\n        const result = await raceBodyReadWithAbort(timeoutScope, reader.read(), (reason) =>\n          reader?.cancel(reason),\n        )\n        if (result.done) {\n          dispose()\n          controller.close()\n          return\n        }\n        timeoutScope.reset()\n        controller.enqueue(result.value)\n      } catch (err) {\n        dispose()\n        if (timeoutScope.timedOut) {\n          controller.error(createRequestTimeoutError(timeoutScope))\n          return\n        }\n        controller.error(err)\n      }\n    },\n    async cancel(reason) {\n      dispose()\n      try {\n        if (reader !== undefined) {\n          await reader.cancel(reason)\n          return\n        }\n        await body.cancel(reason)\n      } catch {\n        // Best-effort cleanup when the caller cancels the wrapper body.\n      }\n    },\n  })\n}\n\nasync function raceBodyReadWithAbort<T>(\n  timeoutScope: RequestTimeoutScope,\n  read: Promise<T>,\n  abortCleanup?: ((reason: unknown) => Promise<void> | void) | undefined,\n): Promise<T> {\n  const signal = timeoutScope.signal\n  if (signal === undefined) return read\n  const abortReason = (): unknown => signal.reason ?? new DOMException('Aborted', 'AbortError')\n  if (signal.aborted) {\n    void read.catch(() => {})\n    const reason = abortReason()\n    await runAbortCleanup(abortCleanup, reason)\n    throw reason\n  }\n\n  let removeAbortListener: (() => void) | undefined\n  const abort = new Promise<never>((_, reject) => {\n    const onAbort = (): void => {\n      const reason = abortReason()\n      void read.catch(() => {})\n      reject(reason)\n      void runAbortCleanup(abortCleanup, reason)\n    }\n    signal.addEventListener('abort', onAbort, { once: true })\n    removeAbortListener = () => signal.removeEventListener('abort', onAbort)\n  })\n\n  try {\n    return await Promise.race([read, abort])\n  } finally {\n    removeAbortListener?.()\n  }\n}\n\nasync function runAbortCleanup(\n  abortCleanup: ((reason: unknown) => Promise<void> | void) | undefined,\n  reason: unknown,\n): Promise<void> {\n  try {\n    await abortCleanup?.(reason)\n  } catch {\n    // Abort cleanup is best-effort and must not mask the abort reason.\n  }\n}\n\nfunction isBlockedRedirect(response: Response): boolean {\n  return response.type === 'opaqueredirect' || REDIRECT_STATUSES.has(response.status)\n}\n\nfunction canFollowSameOriginRedirect(request: HttpRequest, location: string): boolean {\n  if (request.method !== 'GET' && request.method !== 'HEAD') return false\n  try {\n    return new URL(request.url).origin === new URL(location, request.url).origin\n  } catch {\n    return false\n  }\n}\n\nasync function cancelResponseBody(response: Response, reason?: unknown): Promise<void> {\n  try {\n    await response.body?.cancel(reason)\n  } catch {\n    // Best-effort cleanup before throwing the primary error.\n  }\n}\n\n/** Configuration for {@link RetryTransport}. */\nexport interface RetryTransportOptions {\n  /** The underlying transport to delegate requests to. */\n  readonly transport: HttpTransport\n  /** Override default retry settings (max retries, delays). */\n  readonly retry?: Partial<RetryOptions>\n  /**\n   * Callback invoked on expired auth token errors. Must refresh\n   * credentials AND return the fresh auth token. The transport\n   * substitutes the new token into `request.headers.Authorization`\n   * before retrying — without this, the retried request would still\n   * carry the expired token captured by the original caller and the\n   * loop would never make progress.\n   */\n  readonly onReauth?: () => Promise<string>\n  /**\n   * Sleep implementation used between retry attempts. Defaults to the real\n   * `sleep` from `./retry.js`. Test code can inject a no-op to avoid real\n   * delays without relying on module mocking (which differs across runners).\n   *\n   * @internal\n   */\n  readonly sleepImpl?: (ms: number, signal?: AbortSignal) => Promise<void>\n}\n\n/**\n * Decide whether `url` points at a URL-pinned upload POST endpoint.\n *\n * @param url - Request URL to inspect.\n *\n * @returns Whether the request is a direct upload endpoint.\n */\nfunction isUploadEndpoint(url: string): boolean {\n  const endpoint = b2ApiEndpointName(url)\n  return endpoint === 'b2_upload_file' || endpoint === 'b2_upload_part'\n}\n\nfunction isFinishLargeFileEndpoint(url: string): boolean {\n  return b2ApiEndpointName(url) === 'b2_finish_large_file'\n}\n\nfunction isStartLargeFileEndpoint(url: string): boolean {\n  return b2ApiEndpointName(url) === 'b2_start_large_file'\n}\n\nfunction b2ApiEndpointName(url: string): string | undefined {\n  const [, root, , endpoint] = new URL(url).pathname.split('/')\n  if (root !== 'b2api') return undefined\n  return endpoint\n}\n\nfunction isReplayUnsafePostEndpoint(url: string): boolean {\n  return isUploadEndpoint(url) || isStartLargeFileEndpoint(url) || isFinishLargeFileEndpoint(url)\n}\n\n/**\n * Decide whether a classified error should be retried in place for `url`.\n * Transient errors normally retry; upload endpoints bubble to the upload layer\n * for fresh-URL retry except account-level 429 throttling, where fetching a new\n * upload URL only amplifies the rate limit.\n *\n * @param error - The classified, retryability-tagged error.\n * @param url - The request URL (used to detect upload endpoints).\n *\n * @returns Whether to retry the request in place.\n */\nfunction shouldRetryInPlace(error: B2Error, url: string): boolean {\n  if (!error.retryable) return false\n  if (isStartLargeFileEndpoint(url) || isFinishLargeFileEndpoint(url)) return false\n  if (isUploadEndpoint(url) && error.status === 429) return true\n  if (isUploadEndpoint(url)) return false\n  return true\n}\n\nfunction isRequestTimeoutError(err: unknown): boolean {\n  return err instanceof DOMException && err.name === 'TimeoutError'\n}\n\nfunction isTerminalTransportError(err: unknown): boolean {\n  return (\n    err instanceof B2Error ||\n    err instanceof B2RedirectError ||\n    err instanceof NetworkError ||\n    err instanceof B2SsrfError ||\n    (err instanceof DOMException && err.name === 'AbortError')\n  )\n}\n\n/**\n * Transport wrapper that adds automatic retry with exponential backoff.\n * Handles transient errors (408, 429, and the transient 5xx set 500/502/503/504),\n * expired auth tokens, and network failures. Delegates to an inner\n * {@link HttpTransport}.\n *\n * Upload endpoints (`b2_upload_file` / `b2_upload_part`) are URL-pinned. Their\n * retryable pod failures bubble to the upload layer, which evicts the failed\n * URL, fetches a fresh one, and retries there. HTTP 429 remains an in-place\n * retry so account-level throttling does not trigger extra upload URL fetches.\n */\nexport class RetryTransport implements HttpTransport {\n  /** The wrapped transport that performs actual HTTP requests. */\n  private readonly inner: HttpTransport\n  /** Resolved retry options (defaults merged with user overrides). */\n  private readonly options: RetryOptions\n  /** Optional callback to refresh auth credentials on 401 — returns the fresh token. */\n  private readonly onReauth?: () => Promise<string>\n  /** Sleep implementation used between retries; injectable for tests. */\n  private readonly sleepImpl: (ms: number, signal?: AbortSignal) => Promise<void>\n\n  /**\n   * Creates a new RetryTransport.\n   * @param opts - Retry transport configuration.\n   */\n  constructor(opts: RetryTransportOptions) {\n    this.inner = opts.transport\n    this.options = { ...DEFAULT_RETRY_OPTIONS, ...opts.retry }\n    if (opts.onReauth !== undefined) this.onReauth = opts.onReauth\n    this.sleepImpl = opts.sleepImpl ?? sleep\n  }\n\n  /**\n   * Sends the request with automatic retry on transient failures.\n   * On expired auth tokens, calls {@link RetryTransportOptions.onReauth} and retries.\n   * @param originalRequest - The HTTP request to execute. The caller's\n   *   reference is not mutated; on reauth, a copy with a refreshed\n   *   Authorization header is sent.\n   *\n   * @returns The HTTP response.\n   */\n  async send(originalRequest: HttpRequest): Promise<HttpResponse> {\n    // `request` is reassigned (not mutated) when reauth produces a\n    // fresh Authorization header, so the caller's `originalRequest`\n    // stays untouched.\n    let request: HttpRequest = originalRequest\n    const retryOptions = { ...this.options, ...originalRequest.retry }\n    let lastError: B2Error | NetworkError | undefined\n    let didReauth = false\n    let attempt = 0\n\n    while (attempt <= retryOptions.maxRetries) {\n      throwIfSignalAborted(request.signal)\n\n      if (attempt > 0 && lastError) {\n        const retryAfter = lastError instanceof NetworkError ? undefined : lastError.retryAfter\n        const delay = computeBackoff(attempt - 1, retryOptions, retryAfter)\n        await this.sleepImpl(delay, request.signal)\n      }\n\n      try {\n        const response = await this.inner.send({ ...request, retry: retryOptions })\n        await throwIfSignalAbortedAfterResponse(request.signal, response)\n\n        if (response.status >= 200 && response.status < 300) {\n          return response\n        }\n\n        let errorBody: B2ErrorResponse\n        try {\n          errorBody = await response.json<B2ErrorResponse>()\n        } catch (err) {\n          if (isRequestTimeoutError(err)) throw err\n          errorBody = {\n            status: response.status,\n            code: 'internal_error',\n            message: `HTTP ${response.status}`,\n          }\n        }\n\n        const retryAfterHeader = response.headers.get('Retry-After')\n        const retryAfterSec = retryAfterHeader ? Number.parseInt(retryAfterHeader, 10) : undefined\n        const requestId = response.headers.get('X-Bz-Request-Id') ?? undefined\n\n        const error = classifyError(errorBody, {\n          ...(retryAfterSec !== undefined ? { retryAfter: retryAfterSec } : {}),\n          ...(requestId !== undefined ? { requestId } : {}),\n        })\n\n        if (\n          error instanceof ExpiredAuthTokenError &&\n          this.onReauth &&\n          !isUploadEndpoint(request.url) &&\n          !didReauth\n        ) {\n          // Reauth returns the FRESH token; build a new request with a\n          // shallow-copied headers object so the Authorization swap\n          // doesn't mutate the caller's original request (which they\n          // may hold for retry / introspection). Without this swap the\n          // retry would carry the expired token captured at\n          // request-build time and bounce off the server again,\n          // exhausting the retry budget.\n          const freshToken = await this.onReauth()\n          request = {\n            ...request,\n            headers: { ...(request.headers ?? {}), Authorization: freshToken },\n          }\n          didReauth = true\n          lastError = undefined\n          continue\n        }\n\n        if (!shouldRetryInPlace(error, request.url) || attempt === retryOptions.maxRetries) {\n          throw error\n        }\n\n        lastError = error\n        attempt += 1\n      } catch (err) {\n        throwIfSignalAborted(request.signal)\n        if (isTerminalTransportError(err)) {\n          throw err\n        }\n\n        const networkErr = new NetworkError(\n          err instanceof Error ? err.message : 'Network error',\n          err,\n        )\n\n        if (isReplayUnsafePostEndpoint(request.url) || attempt === retryOptions.maxRetries) {\n          throw networkErr\n        }\n\n        lastError = networkErr\n        attempt += 1\n      }\n    }\n\n    throw lastError ?? new NetworkError('Max retries exceeded')\n  }\n}\n\nfunction throwIfSignalAborted(signal: AbortSignal | undefined): void {\n  if (signal?.aborted === true) {\n    throw signal.reason ?? new DOMException('Aborted', 'AbortError')\n  }\n}\n\nasync function throwIfSignalAbortedAfterResponse(\n  signal: AbortSignal | undefined,\n  response: HttpResponse,\n): Promise<void> {\n  if (signal?.aborted !== true) return\n  const reason = signal.reason ?? new DOMException('Aborted', 'AbortError')\n  try {\n    await response.body?.cancel(reason)\n  } catch {\n    // Best-effort cleanup before preserving the caller's abort reason.\n  }\n  throw reason\n}\n"],"mappings":";;;;;AAaA,IAAM,oCAAoB,IAAI,IAAI;CAAC;CAAK;CAAK;CAAK;CAAK;AAAG,CAAC;AAC3D,IAAM,4BAA4B;;;;;;;;AAmDlC,IAAa,iBAAb,MAAqD;;CAEnD;;CAEA;;CAEA;;;;;CAMA,YAAY,SAST;EACD,KAAK,YAAY,aAAa,SAAS,SAAS;EAChD,KAAK,4BAA4B,SAAS,6BAA6B;EACvE,KAAK,WAAW,SAAS,YAAY,IAAI,SAAS;CACpD;;;;;;;;;;CAWA,MAAM,KAAK,SAA6C;EACtD,IAAI,iBAAiB;EACrB,IAAI,gBAAgB;EAEpB,OAAO,MAAM;GACX,KAAK,SAAS,MAAM,eAAe,GAAG;GAEtC,MAAM,UAAU,IAAI,QAAQ,eAAe,OAAO;GAClD,IAAI,CAAC,QAAQ,IAAI,YAAY,GAC3B,QAAQ,IAAI,cAAc,KAAK,SAAS;GAG1C,MAAM,eAAe,0BAA0B,cAAc;GAC7D,IAAI;GACJ,IAAI;IACF,WAAW,MAAM,MAAM,eAAe,KAAK;KACzC,QAAQ,eAAe;KACvB;KACA,MAAM,eAAe,QAAQ;KAC7B,UAAU;KACV,GAAI,aAAa,WAAW,KAAA,IAAY,EAAE,QAAQ,aAAa,OAAO,IAAI,CAAC;IAC7E,CAAC;GACH,SAAS,KAAK;IACZ,aAAa,QAAQ;IACrB,IAAI,aAAa,UACf,MAAM,0BAA0B,YAAY;IAE9C,MAAM;GACR;GAEA,IAAI,kBAAkB,QAAQ,GAAG;IAC/B,MAAM,WAAW,SAAS,QAAQ,IAAI,UAAU;IAChD,IACE,KAAK,6BACL,aAAa,QACb,gBAAgB,6BAChB,4BAA4B,gBAAgB,QAAQ,GACpD;KACA,MAAM,UAAU,IAAI,IAAI,UAAU,eAAe,GAAG,CAAC,CAAC,SAAS;KAC/D,MAAM,mBAAmB,QAAQ;KACjC,aAAa,QAAQ;KACrB,KAAK,SAAS,MAAM,OAAO;KAC3B,iBAAiB;MAAE,GAAG;MAAgB,KAAK;KAAQ;KACnD,iBAAiB;KACjB;IACF;IAEA,MAAM,mBAAmB,QAAQ;IACjC,aAAa,QAAQ;IACrB,MAAM,IAAI,gBAAgB,eAAe,KAAK,SAAS,QAAQ,QAAQ;GACzE;GAEA,OAAO,wBAAwB,UAAU,YAAY;EACvD;CACF;AACF;AAUA,SAAS,0BAA0B,SAA2C;CAC5E,MAAM,YAAY,QAAQ,OAAO,oBAAoB,sBAAsB;CAC3E,IAAI,CAAC,OAAO,SAAS,SAAS,KAAK,aAAa,GAAG;EACjD,MAAM,QAA6B;GACjC,WAAW;GACX,UAAU;GACV,QAAQ,CAAC;GACT,UAAU,CAAC;EACb;EACA,IAAI,QAAQ,WAAW,KAAA,GAAW,OAAO;GAAE,GAAG;GAAO,QAAQ,QAAQ;EAAO;EAC5E,OAAO;CACT;CAEA,MAAM,aAAa,IAAI,gBAAgB;CACvC,IAAI,WAAW;CACf,IAAI;CACJ,MAAM,0BAAgC;EACpC,aAAa,KAAK;EAClB,WAAW,MAAM,QAAQ,QAAQ,UAAU,IAAI,aAAa,WAAW,YAAY,CAAC;CACtF;CACA,MAAM,iBAAgD;EACpD,MAAM,YAAY,iBAAiB;GACjC,WAAW;GACX,WAAW,MAAM,IAAI,aAAa,0BAA0B,cAAc,CAAC;EAC7E,GAAG,SAAS;EACZ,WAAW,SAAS;EACpB,OAAO;CACT;CACA,QAAQ,SAAS;CAEjB,MAAM,cAAoB;EACxB,IAAI,YAAY,WAAW,OAAO,SAAS;EAC3C,aAAa,KAAK;EAClB,QAAQ,SAAS;CACnB;CAEA,IAAI,QAAQ,QAAQ,YAAY,MAAM;EACpC,aAAa,KAAK;EAClB,kBAAkB;CACpB,OACE,QAAQ,QAAQ,iBAAiB,SAAS,mBAAmB,EAAE,MAAM,KAAK,CAAC;CAG7E,OAAO;EACL,QAAQ,WAAW;EACnB;EACA,IAAI,WAAW;GACb,OAAO;EACT;EACA;EACA,UAAU;GACR,aAAa,KAAK;GAClB,QAAQ,QAAQ,oBAAoB,SAAS,iBAAiB;EAChE;CACF;AACF;AAEA,SAAS,WAAW,OAA4C;CAC9D,MAAM,aAAc,MAAiC;CACrD,IAAI,OAAO,eAAe,YAAY,WAAW,KAAK,KAAK;AAC7D;AAEA,SAAS,0BAA0B,OAA0C;CAC3E,OAAO,IAAI,aAAa,gCAAgC,MAAM,UAAU,MAAM,cAAc;AAC9F;AAEA,SAAS,wBACP,UACA,cACc;CACd,MAAM,OAAO,SAAS;CACtB,IAAI,SAAS,MAAM,aAAa,QAAQ;CACxC,IAAI;CAEJ,OAAO;EACL,QAAQ,SAAS;EACjB,SAAS,SAAS;EAClB,IAAI,OAAO;GACT,IAAI,SAAS,MAAM,OAAO;GAC1B,cAAc,wBAAwB,MAAM,YAAY;GACxD,OAAO;EACT;EACA,YACE,sBAAsB,cAAc,gBAAgB,SAAS,KAAK,CAAe;EACnF,YAAY,sBAAsB,cAAc,gBAAgB,SAAS,KAAK,CAAC;EAC/E,mBAAmB,sBAAsB,cAAc,gBAAgB,SAAS,YAAY,CAAC;CAC/F;AACF;AAEA,eAAe,sBACb,cACA,UACA,MACY;CACZ,IAAI;EACF,OAAO,MAAM,sBAAsB,cAAc,KAAK,IAAI,WACxD,mBAAmB,UAAU,MAAM,CACrC;CACF,SAAS,KAAK;EACZ,IAAI,aAAa,UACf,MAAM,0BAA0B,YAAY;EAE9C,MAAM;CACR,UAAU;EACR,aAAa,QAAQ;CACvB;AACF;AAEA,SAAS,wBACP,MACA,cAC4B;CAC5B,IAAI;CACJ,IAAI,WAAW;CACf,MAAM,gBAAsB;EAC1B,IAAI,UAAU;EACd,WAAW;EACX,aAAa,QAAQ;CACvB;CAEA,OAAO,IAAI,eAA2B;EACpC,MAAM,KAAK,YAAY;GACrB,WAAW,KAAK,UAAU;GAC1B,IAAI;IACF,MAAM,SAAS,MAAM,sBAAsB,cAAc,OAAO,KAAK,IAAI,WACvE,QAAQ,OAAO,MAAM,CACvB;IACA,IAAI,OAAO,MAAM;KACf,QAAQ;KACR,WAAW,MAAM;KACjB;IACF;IACA,aAAa,MAAM;IACnB,WAAW,QAAQ,OAAO,KAAK;GACjC,SAAS,KAAK;IACZ,QAAQ;IACR,IAAI,aAAa,UAAU;KACzB,WAAW,MAAM,0BAA0B,YAAY,CAAC;KACxD;IACF;IACA,WAAW,MAAM,GAAG;GACtB;EACF;EACA,MAAM,OAAO,QAAQ;GACnB,QAAQ;GACR,IAAI;IACF,IAAI,WAAW,KAAA,GAAW;KACxB,MAAM,OAAO,OAAO,MAAM;KAC1B;IACF;IACA,MAAM,KAAK,OAAO,MAAM;GAC1B,QAAQ,CAER;EACF;CACF,CAAC;AACH;AAEA,eAAe,sBACb,cACA,MACA,cACY;CACZ,MAAM,SAAS,aAAa;CAC5B,IAAI,WAAW,KAAA,GAAW,OAAO;CACjC,MAAM,oBAA6B,OAAO,UAAU,IAAI,aAAa,WAAW,YAAY;CAC5F,IAAI,OAAO,SAAS;EAClB,KAAU,YAAY,CAAC,CAAC;EACxB,MAAM,SAAS,YAAY;EAC3B,MAAM,gBAAgB,cAAc,MAAM;EAC1C,MAAM;CACR;CAEA,IAAI;CACJ,MAAM,QAAQ,IAAI,SAAgB,GAAG,WAAW;EAC9C,MAAM,gBAAsB;GAC1B,MAAM,SAAS,YAAY;GAC3B,KAAU,YAAY,CAAC,CAAC;GACxB,OAAO,MAAM;GACb,gBAAqB,cAAc,MAAM;EAC3C;EACA,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;EACxD,4BAA4B,OAAO,oBAAoB,SAAS,OAAO;CACzE,CAAC;CAED,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,MAAM,KAAK,CAAC;CACzC,UAAU;EACR,sBAAsB;CACxB;AACF;AAEA,eAAe,gBACb,cACA,QACe;CACf,IAAI;EACF,MAAM,eAAe,MAAM;CAC7B,QAAQ,CAER;AACF;AAEA,SAAS,kBAAkB,UAA6B;CACtD,OAAO,SAAS,SAAS,oBAAoB,kBAAkB,IAAI,SAAS,MAAM;AACpF;AAEA,SAAS,4BAA4B,SAAsB,UAA2B;CACpF,IAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,QAAQ,OAAO;CAClE,IAAI;EACF,OAAO,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,WAAW,IAAI,IAAI,UAAU,QAAQ,GAAG,CAAC,CAAC;CACxE,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,mBAAmB,UAAoB,QAAiC;CACrF,IAAI;EACF,MAAM,SAAS,MAAM,OAAO,MAAM;CACpC,QAAQ,CAER;AACF;;;;;;;;AAkCA,SAAS,iBAAiB,KAAsB;CAC9C,MAAM,WAAW,kBAAkB,GAAG;CACtC,OAAO,aAAa,oBAAoB,aAAa;AACvD;AAEA,SAAS,0BAA0B,KAAsB;CACvD,OAAO,kBAAkB,GAAG,MAAM;AACpC;AAEA,SAAS,yBAAyB,KAAsB;CACtD,OAAO,kBAAkB,GAAG,MAAM;AACpC;AAEA,SAAS,kBAAkB,KAAiC;CAC1D,MAAM,GAAG,QAAQ,YAAY,IAAI,IAAI,GAAG,CAAC,CAAC,SAAS,MAAM,GAAG;CAC5D,IAAI,SAAS,SAAS,OAAO,KAAA;CAC7B,OAAO;AACT;AAEA,SAAS,2BAA2B,KAAsB;CACxD,OAAO,iBAAiB,GAAG,KAAK,yBAAyB,GAAG,KAAK,0BAA0B,GAAG;AAChG;;;;;;;;;;;;AAaA,SAAS,mBAAmB,OAAgB,KAAsB;CAChE,IAAI,CAAC,MAAM,WAAW,OAAO;CAC7B,IAAI,yBAAyB,GAAG,KAAK,0BAA0B,GAAG,GAAG,OAAO;CAC5E,IAAI,iBAAiB,GAAG,KAAK,MAAM,WAAW,KAAK,OAAO;CAC1D,IAAI,iBAAiB,GAAG,GAAG,OAAO;CAClC,OAAO;AACT;AAEA,SAAS,sBAAsB,KAAuB;CACpD,OAAO,eAAe,gBAAgB,IAAI,SAAS;AACrD;AAEA,SAAS,yBAAyB,KAAuB;CACvD,OACE,eAAe,WACf,eAAe,mBACf,eAAe,gBACf,eAAe,eACd,eAAe,gBAAgB,IAAI,SAAS;AAEjD;;;;;;;;;;;;AAaA,IAAa,iBAAb,MAAqD;;CAEnD;;CAEA;;CAEA;;CAEA;;;;;CAMA,YAAY,MAA6B;EACvC,KAAK,QAAQ,KAAK;EAClB,KAAK,UAAU;GAAE,GAAG;GAAuB,GAAG,KAAK;EAAM;EACzD,IAAI,KAAK,aAAa,KAAA,GAAW,KAAK,WAAW,KAAK;EACtD,KAAK,YAAY,KAAK,aAAa;CACrC;;;;;;;;;;CAWA,MAAM,KAAK,iBAAqD;EAI9D,IAAI,UAAuB;EAC3B,MAAM,eAAe;GAAE,GAAG,KAAK;GAAS,GAAG,gBAAgB;EAAM;EACjE,IAAI;EACJ,IAAI,YAAY;EAChB,IAAI,UAAU;EAEd,OAAO,WAAW,aAAa,YAAY;GACzC,qBAAqB,QAAQ,MAAM;GAEnC,IAAI,UAAU,KAAK,WAAW;IAC5B,MAAM,aAAa,qBAAqB,eAAe,KAAA,IAAY,UAAU;IAC7E,MAAM,QAAQ,eAAe,UAAU,GAAG,cAAc,UAAU;IAClE,MAAM,KAAK,UAAU,OAAO,QAAQ,MAAM;GAC5C;GAEA,IAAI;IACF,MAAM,WAAW,MAAM,KAAK,MAAM,KAAK;KAAE,GAAG;KAAS,OAAO;IAAa,CAAC;IAC1E,MAAM,kCAAkC,QAAQ,QAAQ,QAAQ;IAEhE,IAAI,SAAS,UAAU,OAAO,SAAS,SAAS,KAC9C,OAAO;IAGT,IAAI;IACJ,IAAI;KACF,YAAY,MAAM,SAAS,KAAsB;IACnD,SAAS,KAAK;KACZ,IAAI,sBAAsB,GAAG,GAAG,MAAM;KACtC,YAAY;MACV,QAAQ,SAAS;MACjB,MAAM;MACN,SAAS,QAAQ,SAAS;KAC5B;IACF;IAEA,MAAM,mBAAmB,SAAS,QAAQ,IAAI,aAAa;IAC3D,MAAM,gBAAgB,mBAAmB,OAAO,SAAS,kBAAkB,EAAE,IAAI,KAAA;IACjF,MAAM,YAAY,SAAS,QAAQ,IAAI,iBAAiB,KAAK,KAAA;IAE7D,MAAM,QAAQ,cAAc,WAAW;KACrC,GAAI,kBAAkB,KAAA,IAAY,EAAE,YAAY,cAAc,IAAI,CAAC;KACnE,GAAI,cAAc,KAAA,IAAY,EAAE,UAAU,IAAI,CAAC;IACjD,CAAC;IAED,IACE,iBAAiB,yBACjB,KAAK,YACL,CAAC,iBAAiB,QAAQ,GAAG,KAC7B,CAAC,WACD;KAQA,MAAM,aAAa,MAAM,KAAK,SAAS;KACvC,UAAU;MACR,GAAG;MACH,SAAS;OAAE,GAAI,QAAQ,WAAW,CAAC;OAAI,eAAe;MAAW;KACnE;KACA,YAAY;KACZ,YAAY,KAAA;KACZ;IACF;IAEA,IAAI,CAAC,mBAAmB,OAAO,QAAQ,GAAG,KAAK,YAAY,aAAa,YACtE,MAAM;IAGR,YAAY;IACZ,WAAW;GACb,SAAS,KAAK;IACZ,qBAAqB,QAAQ,MAAM;IACnC,IAAI,yBAAyB,GAAG,GAC9B,MAAM;IAGR,MAAM,aAAa,IAAI,aACrB,eAAe,QAAQ,IAAI,UAAU,iBACrC,GACF;IAEA,IAAI,2BAA2B,QAAQ,GAAG,KAAK,YAAY,aAAa,YACtE,MAAM;IAGR,YAAY;IACZ,WAAW;GACb;EACF;EAEA,MAAM,aAAa,IAAI,aAAa,sBAAsB;CAC5D;AACF;AAEA,SAAS,qBAAqB,QAAuC;CACnE,IAAI,QAAQ,YAAY,MACtB,MAAM,OAAO,UAAU,IAAI,aAAa,WAAW,YAAY;AAEnE;AAEA,eAAe,kCACb,QACA,UACe;CACf,IAAI,QAAQ,YAAY,MAAM;CAC9B,MAAM,SAAS,OAAO,UAAU,IAAI,aAAa,WAAW,YAAY;CACxE,IAAI;EACF,MAAM,SAAS,MAAM,OAAO,MAAM;CACpC,QAAQ,CAER;CACA,MAAM;AACR"}
+{"version":3,"file":"transport.js","names":[],"sources":["../../src/http/transport.ts"],"sourcesContent":["import {\n  B2Error,\n  B2RedirectError,\n  B2SsrfError,\n  classifyError,\n  ExpiredAuthTokenError,\n  NetworkError,\n} from '../errors/index.ts'\nimport type { B2ErrorResponse } from '../types/errors.ts'\nimport { abortReason, raceWithAbort, throwIfSignalAborted } from '../util/abort.ts'\nimport {\n  isBackupNonIdempotentMutationEndpoint,\n  isPartnerNonIdempotentMutationEndpoint,\n} from './non-idempotent-mutations.ts'\nimport { computeBackoff, DEFAULT_RETRY_OPTIONS, type RetryOptions, sleep } from './retry.ts'\nimport { UrlGuard } from './url-guard.ts'\nimport { getUserAgent } from './user-agent.ts'\n\nconst REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308])\nconst MAX_SAME_ORIGIN_REDIRECTS = 5\n\n/** Describes an outgoing HTTP request to the B2 API. */\nexport interface HttpRequest {\n  /** Fully qualified URL to send the request to. */\n  readonly url: string\n  /** HTTP method. B2 uses GET for downloads (HEAD to fetch only headers) and POST for all other operations. */\n  readonly method: 'GET' | 'HEAD' | 'POST'\n  /** Request headers. Authorization and content-type are typically included. */\n  readonly headers?: Record<string, string>\n  /** Request body. Used for POST requests (JSON payloads or file uploads). */\n  readonly body?: BodyInit | null\n  /** Optional abort signal for request cancellation. */\n  readonly signal?: AbortSignal\n  /** Optional per-request retry override. */\n  readonly retry?: Partial<RetryOptions>\n  /**\n   * Set false to disable automatic retry and expired-token reauth replay.\n   * This is not a general idempotency override.\n   */\n  readonly idempotent?: false\n}\n\n/** Represents a parsed HTTP response from the B2 API. */\nexport interface HttpResponse {\n  /** HTTP status code. */\n  readonly status: number\n  /** Response headers. */\n  readonly headers: Headers\n  /** Response body as a readable stream, or null for empty responses. */\n  readonly body: ReadableStream<Uint8Array> | null\n  /** Parses the response body as JSON. */\n  json<T>(): Promise<T>\n  /** Reads the response body as a UTF-8 string. */\n  text(): Promise<string>\n  /** Reads the response body as an ArrayBuffer. */\n  arrayBuffer(): Promise<ArrayBuffer>\n}\n\n/**\n * Transport layer abstraction for sending HTTP requests.\n * Implementations handle the actual network I/O and can be composed\n * (e.g. wrapping a {@link FetchTransport} with a {@link RetryTransport}).\n */\nexport interface HttpTransport {\n  /** Sends an HTTP request and returns the response. */\n  send(request: HttpRequest): Promise<HttpResponse>\n}\n\n/**\n * Transport capability for implementations that expose the SSRF URL guard\n * protecting credential-bearing requests. Wrappers that preserve this\n * capability should forward the same `urlGuard` property.\n */\nexport interface UrlGuardedTransport extends HttpTransport {\n  /** SSRF allow-list applied to outgoing URLs. */\n  readonly urlGuard: UrlGuard\n}\n\n/**\n * Returns the URL guard exposed by `transport`, if it implements\n * {@link UrlGuardedTransport}.\n *\n * @param transport - Transport to inspect.\n *\n * @returns The exposed URL guard, or undefined for unguarded transports.\n */\nexport function getTransportUrlGuard(transport: HttpTransport): UrlGuard | undefined {\n  const candidate = transport as Partial<UrlGuardedTransport>\n  return candidate.urlGuard instanceof UrlGuard ? candidate.urlGuard : undefined\n}\n\n/**\n * Default transport implementation using the global `fetch` API.\n * Automatically sets the User-Agent header on each request and applies the\n * SSRF {@link UrlGuard} (if configured) before opening the connection.\n * Redirect following is disabled so redirected URLs cannot bypass the guard or\n * receive credential-bearing headers without an explicit checked request.\n */\nexport class FetchTransport implements UrlGuardedTransport {\n  /** User-Agent string sent with every request. */\n  private readonly userAgent: string\n  /** Whether same-origin GET/HEAD redirects should be followed after guard checks. */\n  private readonly followSameOriginRedirects: boolean\n  /** SSRF allow-list applied to every outgoing URL. Mutable so `B2Client.authorize()` can lock it down post-auth. */\n  readonly urlGuard: UrlGuard\n\n  /**\n   * Creates a new FetchTransport.\n   * @param options - Optional configuration: custom User-Agent prefix and SSRF guard.\n   */\n  constructor(options?: {\n    userAgent?: string\n    urlGuard?: UrlGuard\n    /**\n     * Follow same-origin GET/HEAD redirects after checking the target with the\n     * URL guard. POST redirects are still blocked to avoid replaying\n     * credential-bearing payloads to an unexpected endpoint. Defaults to true.\n     */\n    followSameOriginRedirects?: boolean\n  }) {\n    this.userAgent = getUserAgent(options?.userAgent)\n    this.followSameOriginRedirects = options?.followSameOriginRedirects ?? true\n    this.urlGuard = options?.urlGuard ?? new UrlGuard()\n  }\n\n  /**\n   * Sends the request using the global `fetch` function.\n   * @param request - The HTTP request to execute.\n   *\n   * @returns The HTTP response.\n   *\n   * @throws B2SsrfError when the URL fails the configured SSRF guard.\n   * @throws B2RedirectError when a response attempts to redirect.\n   */\n  async send(request: HttpRequest): Promise<HttpResponse> {\n    let currentRequest = request\n    let redirectCount = 0\n\n    while (true) {\n      this.urlGuard.check(currentRequest.url)\n\n      const headers = new Headers(currentRequest.headers)\n      if (!headers.has('User-Agent')) {\n        headers.set('User-Agent', this.userAgent)\n      }\n\n      const timeoutScope = createRequestTimeoutScope(currentRequest)\n      let response: Response\n      try {\n        response = await fetch(currentRequest.url, {\n          method: currentRequest.method,\n          headers,\n          body: currentRequest.body ?? null,\n          redirect: 'manual',\n          ...(timeoutScope.signal !== undefined ? { signal: timeoutScope.signal } : {}),\n        })\n      } catch (err) {\n        timeoutScope.dispose()\n        if (timeoutScope.timedOut) {\n          throw createRequestTimeoutError(timeoutScope)\n        }\n        throw err\n      }\n\n      if (isBlockedRedirect(response)) {\n        const location = response.headers.get('Location')\n        if (\n          this.followSameOriginRedirects &&\n          location !== null &&\n          redirectCount < MAX_SAME_ORIGIN_REDIRECTS &&\n          canFollowSameOriginRedirect(currentRequest, location)\n        ) {\n          const nextUrl = new URL(location, currentRequest.url).toString()\n          await cancelResponseBody(response)\n          timeoutScope.dispose()\n          this.urlGuard.check(nextUrl)\n          currentRequest = { ...currentRequest, url: nextUrl }\n          redirectCount += 1\n          continue\n        }\n\n        await cancelResponseBody(response)\n        timeoutScope.dispose()\n        throw new B2RedirectError(currentRequest.url, response.status, location)\n      }\n\n      return createTimedHttpResponse(response, timeoutScope)\n    }\n  }\n}\n\ninterface RequestTimeoutScope {\n  readonly signal?: AbortSignal\n  readonly timeoutMs: number\n  readonly timedOut: boolean\n  reset(): void\n  dispose(): void\n}\n\nfunction createRequestTimeoutScope(request: HttpRequest): RequestTimeoutScope {\n  const timeoutMs = request.retry?.requestTimeoutMs ?? DEFAULT_RETRY_OPTIONS.requestTimeoutMs\n  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {\n    const scope: RequestTimeoutScope = {\n      timeoutMs: 0,\n      timedOut: false,\n      reset() {},\n      dispose() {},\n    }\n    if (request.signal !== undefined) return { ...scope, signal: request.signal }\n    return scope\n  }\n\n  const controller = new AbortController()\n  let timedOut = false\n  let timer: ReturnType<typeof setTimeout>\n  const abortFromUpstream = (): void => {\n    clearTimeout(timer)\n    controller.abort(request.signal?.reason ?? new DOMException('Aborted', 'AbortError'))\n  }\n  const armTimer = (): ReturnType<typeof setTimeout> => {\n    const nextTimer = setTimeout(() => {\n      timedOut = true\n      controller.abort(new DOMException('HTTP request timed out', 'TimeoutError'))\n    }, timeoutMs)\n    unrefTimer(nextTimer)\n    return nextTimer\n  }\n  timer = armTimer()\n\n  const reset = (): void => {\n    if (timedOut || controller.signal.aborted) return\n    clearTimeout(timer)\n    timer = armTimer()\n  }\n\n  if (request.signal?.aborted === true) {\n    clearTimeout(timer)\n    abortFromUpstream()\n  } else {\n    request.signal?.addEventListener('abort', abortFromUpstream, { once: true })\n  }\n\n  return {\n    signal: controller.signal,\n    timeoutMs,\n    get timedOut() {\n      return timedOut\n    },\n    reset,\n    dispose() {\n      clearTimeout(timer)\n      request.signal?.removeEventListener('abort', abortFromUpstream)\n    },\n  }\n}\n\nfunction unrefTimer(timer: ReturnType<typeof setTimeout>): void {\n  const maybeUnref = (timer as { unref?: () => void }).unref\n  if (typeof maybeUnref === 'function') maybeUnref.call(timer)\n}\n\nfunction createRequestTimeoutError(scope: RequestTimeoutScope): DOMException {\n  return new DOMException(`HTTP request timed out after ${scope.timeoutMs} ms`, 'TimeoutError')\n}\n\nfunction createTimedHttpResponse(\n  response: Response,\n  timeoutScope: RequestTimeoutScope,\n): HttpResponse {\n  const body = response.body\n  if (body === null) timeoutScope.dispose()\n  let timedBody: ReadableStream<Uint8Array> | undefined\n\n  return {\n    status: response.status,\n    headers: response.headers,\n    get body() {\n      if (body === null) return null\n      timedBody ??= createTimedResponseBody(body, timeoutScope)\n      return timedBody\n    },\n    json: <T>() =>\n      readTimedResponseBody(timeoutScope, response, () => response.json() as Promise<T>),\n    text: () => readTimedResponseBody(timeoutScope, response, () => response.text()),\n    arrayBuffer: () => readTimedResponseBody(timeoutScope, response, () => response.arrayBuffer()),\n  }\n}\n\nasync function readTimedResponseBody<T>(\n  timeoutScope: RequestTimeoutScope,\n  response: Response,\n  read: () => Promise<T>,\n): Promise<T> {\n  try {\n    return await raceBodyReadWithAbort(timeoutScope, read(), (reason) =>\n      cancelResponseBody(response, reason),\n    )\n  } catch (err) {\n    if (timeoutScope.timedOut) {\n      throw createRequestTimeoutError(timeoutScope)\n    }\n    throw err\n  } finally {\n    timeoutScope.dispose()\n  }\n}\n\nfunction createTimedResponseBody(\n  body: ReadableStream<Uint8Array>,\n  timeoutScope: RequestTimeoutScope,\n): ReadableStream<Uint8Array> {\n  let reader: ReadableStreamDefaultReader<Uint8Array> | undefined\n  let disposed = false\n  const dispose = (): void => {\n    if (disposed) return\n    disposed = true\n    timeoutScope.dispose()\n  }\n\n  return new ReadableStream<Uint8Array>({\n    async pull(controller) {\n      reader ??= body.getReader()\n      try {\n        const result = await raceBodyReadWithAbort(timeoutScope, reader.read(), (reason) =>\n          reader?.cancel(reason),\n        )\n        if (result.done) {\n          dispose()\n          controller.close()\n          return\n        }\n        timeoutScope.reset()\n        controller.enqueue(result.value)\n      } catch (err) {\n        dispose()\n        if (timeoutScope.timedOut) {\n          controller.error(createRequestTimeoutError(timeoutScope))\n          return\n        }\n        controller.error(err)\n      }\n    },\n    async cancel(reason) {\n      dispose()\n      try {\n        if (reader !== undefined) {\n          await reader.cancel(reason)\n          return\n        }\n        await body.cancel(reason)\n      } catch {\n        // Best-effort cleanup when the caller cancels the wrapper body.\n      }\n    },\n  })\n}\n\nasync function raceBodyReadWithAbort<T>(\n  timeoutScope: RequestTimeoutScope,\n  read: Promise<T>,\n  abortCleanup?: ((reason: unknown) => Promise<void> | void) | undefined,\n): Promise<T> {\n  const signal = timeoutScope.signal\n  if (signal === undefined) return read\n  if (signal.aborted) {\n    void read.catch(() => {})\n    const reason = abortReason(signal)\n    await runAbortCleanup(abortCleanup, reason)\n    throw reason\n  }\n\n  let removeAbortListener: (() => void) | undefined\n  const abort = new Promise<never>((_, reject) => {\n    const onAbort = (): void => {\n      const reason = abortReason(signal)\n      void read.catch(() => {})\n      reject(reason)\n      void runAbortCleanup(abortCleanup, reason)\n    }\n    signal.addEventListener('abort', onAbort, { once: true })\n    removeAbortListener = () => signal.removeEventListener('abort', onAbort)\n  })\n\n  try {\n    return await Promise.race([read, abort])\n  } finally {\n    removeAbortListener?.()\n  }\n}\n\nasync function runAbortCleanup(\n  abortCleanup: ((reason: unknown) => Promise<void> | void) | undefined,\n  reason: unknown,\n): Promise<void> {\n  try {\n    await abortCleanup?.(reason)\n  } catch {\n    // Abort cleanup is best-effort and must not mask the abort reason.\n  }\n}\n\nfunction isBlockedRedirect(response: Response): boolean {\n  return response.type === 'opaqueredirect' || REDIRECT_STATUSES.has(response.status)\n}\n\nfunction canFollowSameOriginRedirect(request: HttpRequest, location: string): boolean {\n  if (request.method !== 'GET' && request.method !== 'HEAD') return false\n  try {\n    return new URL(request.url).origin === new URL(location, request.url).origin\n  } catch {\n    return false\n  }\n}\n\nasync function cancelResponseBody(response: Response, reason?: unknown): Promise<void> {\n  try {\n    await response.body?.cancel(reason)\n  } catch {\n    // Best-effort cleanup before throwing the primary error.\n  }\n}\n\n/** Configuration for {@link RetryTransport}. */\nexport interface RetryTransportOptions {\n  /** The underlying transport to delegate requests to. */\n  readonly transport: HttpTransport\n  /** Override default retry settings (max retries, delays). */\n  readonly retry?: Partial<RetryOptions>\n  /**\n   * Callback invoked on expired auth token errors. Must refresh\n   * credentials AND return the fresh auth token. The original request's\n   * abort signal is forwarded so reauthorization can be cancelled with the\n   * operation that triggered it. The transport\n   * substitutes the new token into `request.headers.Authorization`\n   * before retrying — without this, the retried request would still\n   * carry the expired token captured by the original caller and the\n   * loop would never make progress.\n   */\n  readonly onReauth?: (signal?: AbortSignal) => Promise<string>\n  /**\n   * Sleep implementation used between retry attempts. Defaults to the real\n   * `sleep` from `./retry.js`. Test code can inject a no-op to avoid real\n   * delays without relying on module mocking (which differs across runners).\n   *\n   * @internal\n   */\n  readonly sleepImpl?: (ms: number, signal?: AbortSignal) => Promise<void>\n}\n\n/**\n * Decide whether `url` points at a URL-pinned upload POST endpoint.\n *\n * @param url - Request URL to inspect.\n *\n * @returns Whether the request is a direct upload endpoint.\n */\nfunction isUploadEndpoint(url: string): boolean {\n  const endpoint = b2ApiEndpointName(url)\n  return endpoint === 'b2_upload_file' || endpoint === 'b2_upload_part'\n}\n\nfunction isFinishLargeFileEndpoint(url: string): boolean {\n  return b2ApiEndpointName(url) === 'b2_finish_large_file'\n}\n\nfunction isAuthorizeEndpoint(url: string): boolean {\n  return b2ApiEndpointName(url) === 'b2_authorize_account'\n}\n\nfunction isStartLargeFileEndpoint(url: string): boolean {\n  return b2ApiEndpointName(url) === 'b2_start_large_file'\n}\n\nfunction isKnownPartnerNonIdempotentMutationEndpoint(url: string): boolean {\n  return isPartnerNonIdempotentMutationEndpoint(b2ApiEndpointName(url))\n}\n\nfunction isKnownBackupNonIdempotentMutationEndpoint(url: string): boolean {\n  return isBackupNonIdempotentMutationEndpoint(backupApiEndpointName(url))\n}\n\nfunction isNonIdempotentMutationRequest(request: HttpRequest): boolean {\n  // Defense in depth: known mutations must not replay if a wrapper drops\n  // the raw client's explicit `idempotent: false` marker.\n  return (\n    request.idempotent === false ||\n    (request.method === 'POST' &&\n      (isKnownPartnerNonIdempotentMutationEndpoint(request.url) ||\n        isKnownBackupNonIdempotentMutationEndpoint(request.url)))\n  )\n}\n\nfunction b2ApiEndpointName(url: string): string | undefined {\n  const segments = new URL(url).pathname.split('/').filter((segment) => segment.length > 0)\n  // Partner endpoint base URLs can themselves contain a b2api-looking segment\n  // before the SDK appends the real API route. Classify the terminal route.\n  const apiRootIndex = segments.lastIndexOf('b2api')\n  if (apiRootIndex === -1) return undefined\n  return segments[apiRootIndex + 2]\n}\n\nfunction backupApiEndpointName(url: string): string | undefined {\n  const segments = new URL(url).pathname.split('/').filter((segment) => segment.length > 0)\n  const apiRootIndex = segments.lastIndexOf('api')\n  if (apiRootIndex === -1 || segments[apiRootIndex + 1] !== 'backup') return undefined\n  if (!/^v\\d+$/.test(segments[apiRootIndex + 2] ?? '')) return undefined\n  return segments[apiRootIndex + 3]\n}\n\nfunction isReplayUnsafeRequest(request: HttpRequest): boolean {\n  if (request.idempotent === false) return true\n  if (request.method !== 'POST') return false\n  return (\n    isUploadEndpoint(request.url) ||\n    isStartLargeFileEndpoint(request.url) ||\n    isFinishLargeFileEndpoint(request.url) ||\n    isNonIdempotentMutationRequest(request)\n  )\n}\n\n/**\n * Decide whether a classified error should be retried in place for `url`.\n * Transient errors normally retry; upload endpoints bubble to the upload layer\n * for fresh-URL retry except account-level 429 throttling, where fetching a new\n * upload URL only amplifies the rate limit.\n *\n * @param error - The classified, retryability-tagged error.\n * @param request - The request being considered for in-place retry.\n *\n * @returns Whether to retry the request in place.\n */\nfunction shouldRetryInPlace(error: B2Error, request: HttpRequest): boolean {\n  if (!error.retryable) return false\n  if (isAuthorizeEndpoint(request.url) && error instanceof ExpiredAuthTokenError) return false\n  if (isNonIdempotentMutationRequest(request)) return false\n  if (isStartLargeFileEndpoint(request.url) || isFinishLargeFileEndpoint(request.url)) return false\n  if (isUploadEndpoint(request.url) && error.status === 429) return true\n  if (isUploadEndpoint(request.url)) return false\n  return true\n}\n\nfunction isRequestTimeoutError(err: unknown): boolean {\n  return err instanceof DOMException && err.name === 'TimeoutError'\n}\n\nfunction isTerminalTransportError(err: unknown): boolean {\n  return (\n    err instanceof B2Error ||\n    err instanceof B2RedirectError ||\n    err instanceof NetworkError ||\n    err instanceof B2SsrfError ||\n    (err instanceof DOMException && err.name === 'AbortError')\n  )\n}\n\n/**\n * Transport wrapper that adds automatic retry with exponential backoff.\n * Handles transient errors (408, 429, and the transient 5xx set 500/502/503/504),\n * expired auth tokens, and network failures. Delegates to an inner\n * {@link HttpTransport}.\n *\n * Upload endpoints (`b2_upload_file` / `b2_upload_part`) are URL-pinned. Their\n * retryable pod failures bubble to the upload layer, which evicts the failed\n * URL, fetches a fresh one, and retries there. HTTP 429 remains an in-place\n * retry so account-level throttling does not trigger extra upload URL fetches.\n */\nexport class RetryTransport implements HttpTransport {\n  /** URL guard from the wrapped transport, when the transport exposes one. */\n  readonly urlGuard: UrlGuard | undefined\n  /** The wrapped transport that performs actual HTTP requests. */\n  private readonly inner: HttpTransport\n  /** Resolved retry options (defaults merged with user overrides). */\n  private readonly options: RetryOptions\n  /** Optional callback to refresh auth credentials on 401 — returns the fresh token. */\n  private readonly onReauth?: (signal?: AbortSignal) => Promise<string>\n  /** Sleep implementation used between retries; injectable for tests. */\n  private readonly sleepImpl: (ms: number, signal?: AbortSignal) => Promise<void>\n\n  /**\n   * Creates a new RetryTransport.\n   * @param opts - Retry transport configuration.\n   */\n  constructor(opts: RetryTransportOptions) {\n    this.inner = opts.transport\n    this.urlGuard = getTransportUrlGuard(opts.transport)\n    this.options = { ...DEFAULT_RETRY_OPTIONS, ...opts.retry }\n    if (opts.onReauth !== undefined) this.onReauth = opts.onReauth\n    this.sleepImpl = opts.sleepImpl ?? sleep\n  }\n\n  /**\n   * Sends the request with automatic retry on transient failures.\n   * On expired auth tokens, calls {@link RetryTransportOptions.onReauth} and retries.\n   * @param originalRequest - The HTTP request to execute. The caller's\n   *   reference is not mutated; on reauth, a copy with a refreshed\n   *   Authorization header is sent.\n   *\n   * @returns The HTTP response.\n   */\n  async send(originalRequest: HttpRequest): Promise<HttpResponse> {\n    // `request` is reassigned (not mutated) when reauth produces a\n    // fresh Authorization header, so the caller's `originalRequest`\n    // stays untouched.\n    let request: HttpRequest = originalRequest\n    const retryOptions = { ...this.options, ...originalRequest.retry }\n    let lastError: B2Error | NetworkError | undefined\n    let didReauth = false\n    let attempt = 0\n\n    while (attempt <= retryOptions.maxRetries) {\n      throwIfSignalAborted(request.signal)\n\n      if (attempt > 0 && lastError) {\n        const retryAfter = lastError instanceof NetworkError ? undefined : lastError.retryAfter\n        const delay = computeBackoff(attempt - 1, retryOptions, retryAfter)\n        await this.sleepImpl(delay, request.signal)\n      }\n\n      try {\n        const response = await this.inner.send({ ...request, retry: retryOptions })\n        await throwIfSignalAbortedAfterResponse(request.signal, response)\n\n        if (response.status >= 200 && response.status < 300) {\n          return response\n        }\n\n        let errorBody: B2ErrorResponse\n        try {\n          errorBody = await response.json<B2ErrorResponse>()\n        } catch (err) {\n          if (isRequestTimeoutError(err)) throw err\n          errorBody = {\n            status: response.status,\n            code: 'internal_error',\n            message: `HTTP ${response.status}`,\n          }\n        }\n\n        const retryAfterHeader = response.headers.get('Retry-After')\n        const retryAfterSec = retryAfterHeader ? Number.parseInt(retryAfterHeader, 10) : undefined\n        const requestId = response.headers.get('X-Bz-Request-Id') ?? undefined\n\n        const error = classifyError(errorBody, {\n          ...(retryAfterSec !== undefined ? { retryAfter: retryAfterSec } : {}),\n          ...(requestId !== undefined ? { requestId } : {}),\n        })\n\n        if (\n          error instanceof ExpiredAuthTokenError &&\n          this.onReauth &&\n          !isAuthorizeEndpoint(request.url) &&\n          !isUploadEndpoint(request.url) &&\n          !isNonIdempotentMutationRequest(request) &&\n          !didReauth\n        ) {\n          // Reauth returns the FRESH token; build a new request with a\n          // shallow-copied headers object so the Authorization swap\n          // doesn't mutate the caller's original request (which they\n          // may hold for retry / introspection). Without this swap the\n          // retry would carry the expired token captured at\n          // request-build time and bounce off the server again,\n          // exhausting the retry budget.\n          const freshToken = await raceWithAbort(this.onReauth(request.signal), request.signal)\n          throwIfSignalAborted(request.signal)\n          request = {\n            ...request,\n            headers: { ...(request.headers ?? {}), Authorization: freshToken },\n          }\n          didReauth = true\n          lastError = undefined\n          continue\n        }\n\n        if (!shouldRetryInPlace(error, request) || attempt === retryOptions.maxRetries) {\n          throw error\n        }\n\n        lastError = error\n        attempt += 1\n      } catch (err) {\n        throwIfSignalAborted(request.signal)\n        if (isTerminalTransportError(err)) {\n          throw err\n        }\n\n        const networkErr = new NetworkError(\n          err instanceof Error ? err.message : 'Network error',\n          err,\n        )\n\n        if (isReplayUnsafeRequest(request) || attempt === retryOptions.maxRetries) {\n          throw networkErr\n        }\n\n        lastError = networkErr\n        attempt += 1\n      }\n    }\n\n    throw lastError ?? new NetworkError('Max retries exceeded')\n  }\n}\n\nasync function throwIfSignalAbortedAfterResponse(\n  signal: AbortSignal | undefined,\n  response: HttpResponse,\n): Promise<void> {\n  if (signal?.aborted !== true) return\n  const reason = abortReason(signal)\n  try {\n    await response.body?.cancel(reason)\n  } catch {\n    // Best-effort cleanup before preserving the caller's abort reason.\n  }\n  throw reason\n}\n"],"mappings":";;;;;;;AAkBA,IAAM,oCAAoB,IAAI,IAAI;CAAC;CAAK;CAAK;CAAK;CAAK;AAAG,CAAC;AAC3D,IAAM,4BAA4B;;;;;;;;;AAmElC,SAAgB,qBAAqB,WAAgD;CACnF,MAAM,YAAY;CAClB,OAAO,UAAU,oBAAoB,WAAW,UAAU,WAAW,KAAA;AACvE;;;;;;;;AASA,IAAa,iBAAb,MAA2D;;CAEzD;;CAEA;;CAEA;;;;;CAMA,YAAY,SAST;EACD,KAAK,YAAY,aAAa,SAAS,SAAS;EAChD,KAAK,4BAA4B,SAAS,6BAA6B;EACvE,KAAK,WAAW,SAAS,YAAY,IAAI,SAAS;CACpD;;;;;;;;;;CAWA,MAAM,KAAK,SAA6C;EACtD,IAAI,iBAAiB;EACrB,IAAI,gBAAgB;EAEpB,OAAO,MAAM;GACX,KAAK,SAAS,MAAM,eAAe,GAAG;GAEtC,MAAM,UAAU,IAAI,QAAQ,eAAe,OAAO;GAClD,IAAI,CAAC,QAAQ,IAAI,YAAY,GAC3B,QAAQ,IAAI,cAAc,KAAK,SAAS;GAG1C,MAAM,eAAe,0BAA0B,cAAc;GAC7D,IAAI;GACJ,IAAI;IACF,WAAW,MAAM,MAAM,eAAe,KAAK;KACzC,QAAQ,eAAe;KACvB;KACA,MAAM,eAAe,QAAQ;KAC7B,UAAU;KACV,GAAI,aAAa,WAAW,KAAA,IAAY,EAAE,QAAQ,aAAa,OAAO,IAAI,CAAC;IAC7E,CAAC;GACH,SAAS,KAAK;IACZ,aAAa,QAAQ;IACrB,IAAI,aAAa,UACf,MAAM,0BAA0B,YAAY;IAE9C,MAAM;GACR;GAEA,IAAI,kBAAkB,QAAQ,GAAG;IAC/B,MAAM,WAAW,SAAS,QAAQ,IAAI,UAAU;IAChD,IACE,KAAK,6BACL,aAAa,QACb,gBAAgB,6BAChB,4BAA4B,gBAAgB,QAAQ,GACpD;KACA,MAAM,UAAU,IAAI,IAAI,UAAU,eAAe,GAAG,CAAC,CAAC,SAAS;KAC/D,MAAM,mBAAmB,QAAQ;KACjC,aAAa,QAAQ;KACrB,KAAK,SAAS,MAAM,OAAO;KAC3B,iBAAiB;MAAE,GAAG;MAAgB,KAAK;KAAQ;KACnD,iBAAiB;KACjB;IACF;IAEA,MAAM,mBAAmB,QAAQ;IACjC,aAAa,QAAQ;IACrB,MAAM,IAAI,gBAAgB,eAAe,KAAK,SAAS,QAAQ,QAAQ;GACzE;GAEA,OAAO,wBAAwB,UAAU,YAAY;EACvD;CACF;AACF;AAUA,SAAS,0BAA0B,SAA2C;CAC5E,MAAM,YAAY,QAAQ,OAAO,oBAAoB,sBAAsB;CAC3E,IAAI,CAAC,OAAO,SAAS,SAAS,KAAK,aAAa,GAAG;EACjD,MAAM,QAA6B;GACjC,WAAW;GACX,UAAU;GACV,QAAQ,CAAC;GACT,UAAU,CAAC;EACb;EACA,IAAI,QAAQ,WAAW,KAAA,GAAW,OAAO;GAAE,GAAG;GAAO,QAAQ,QAAQ;EAAO;EAC5E,OAAO;CACT;CAEA,MAAM,aAAa,IAAI,gBAAgB;CACvC,IAAI,WAAW;CACf,IAAI;CACJ,MAAM,0BAAgC;EACpC,aAAa,KAAK;EAClB,WAAW,MAAM,QAAQ,QAAQ,UAAU,IAAI,aAAa,WAAW,YAAY,CAAC;CACtF;CACA,MAAM,iBAAgD;EACpD,MAAM,YAAY,iBAAiB;GACjC,WAAW;GACX,WAAW,MAAM,IAAI,aAAa,0BAA0B,cAAc,CAAC;EAC7E,GAAG,SAAS;EACZ,WAAW,SAAS;EACpB,OAAO;CACT;CACA,QAAQ,SAAS;CAEjB,MAAM,cAAoB;EACxB,IAAI,YAAY,WAAW,OAAO,SAAS;EAC3C,aAAa,KAAK;EAClB,QAAQ,SAAS;CACnB;CAEA,IAAI,QAAQ,QAAQ,YAAY,MAAM;EACpC,aAAa,KAAK;EAClB,kBAAkB;CACpB,OACE,QAAQ,QAAQ,iBAAiB,SAAS,mBAAmB,EAAE,MAAM,KAAK,CAAC;CAG7E,OAAO;EACL,QAAQ,WAAW;EACnB;EACA,IAAI,WAAW;GACb,OAAO;EACT;EACA;EACA,UAAU;GACR,aAAa,KAAK;GAClB,QAAQ,QAAQ,oBAAoB,SAAS,iBAAiB;EAChE;CACF;AACF;AAEA,SAAS,WAAW,OAA4C;CAC9D,MAAM,aAAc,MAAiC;CACrD,IAAI,OAAO,eAAe,YAAY,WAAW,KAAK,KAAK;AAC7D;AAEA,SAAS,0BAA0B,OAA0C;CAC3E,OAAO,IAAI,aAAa,gCAAgC,MAAM,UAAU,MAAM,cAAc;AAC9F;AAEA,SAAS,wBACP,UACA,cACc;CACd,MAAM,OAAO,SAAS;CACtB,IAAI,SAAS,MAAM,aAAa,QAAQ;CACxC,IAAI;CAEJ,OAAO;EACL,QAAQ,SAAS;EACjB,SAAS,SAAS;EAClB,IAAI,OAAO;GACT,IAAI,SAAS,MAAM,OAAO;GAC1B,cAAc,wBAAwB,MAAM,YAAY;GACxD,OAAO;EACT;EACA,YACE,sBAAsB,cAAc,gBAAgB,SAAS,KAAK,CAAe;EACnF,YAAY,sBAAsB,cAAc,gBAAgB,SAAS,KAAK,CAAC;EAC/E,mBAAmB,sBAAsB,cAAc,gBAAgB,SAAS,YAAY,CAAC;CAC/F;AACF;AAEA,eAAe,sBACb,cACA,UACA,MACY;CACZ,IAAI;EACF,OAAO,MAAM,sBAAsB,cAAc,KAAK,IAAI,WACxD,mBAAmB,UAAU,MAAM,CACrC;CACF,SAAS,KAAK;EACZ,IAAI,aAAa,UACf,MAAM,0BAA0B,YAAY;EAE9C,MAAM;CACR,UAAU;EACR,aAAa,QAAQ;CACvB;AACF;AAEA,SAAS,wBACP,MACA,cAC4B;CAC5B,IAAI;CACJ,IAAI,WAAW;CACf,MAAM,gBAAsB;EAC1B,IAAI,UAAU;EACd,WAAW;EACX,aAAa,QAAQ;CACvB;CAEA,OAAO,IAAI,eAA2B;EACpC,MAAM,KAAK,YAAY;GACrB,WAAW,KAAK,UAAU;GAC1B,IAAI;IACF,MAAM,SAAS,MAAM,sBAAsB,cAAc,OAAO,KAAK,IAAI,WACvE,QAAQ,OAAO,MAAM,CACvB;IACA,IAAI,OAAO,MAAM;KACf,QAAQ;KACR,WAAW,MAAM;KACjB;IACF;IACA,aAAa,MAAM;IACnB,WAAW,QAAQ,OAAO,KAAK;GACjC,SAAS,KAAK;IACZ,QAAQ;IACR,IAAI,aAAa,UAAU;KACzB,WAAW,MAAM,0BAA0B,YAAY,CAAC;KACxD;IACF;IACA,WAAW,MAAM,GAAG;GACtB;EACF;EACA,MAAM,OAAO,QAAQ;GACnB,QAAQ;GACR,IAAI;IACF,IAAI,WAAW,KAAA,GAAW;KACxB,MAAM,OAAO,OAAO,MAAM;KAC1B;IACF;IACA,MAAM,KAAK,OAAO,MAAM;GAC1B,QAAQ,CAER;EACF;CACF,CAAC;AACH;AAEA,eAAe,sBACb,cACA,MACA,cACY;CACZ,MAAM,SAAS,aAAa;CAC5B,IAAI,WAAW,KAAA,GAAW,OAAO;CACjC,IAAI,OAAO,SAAS;EAClB,KAAU,YAAY,CAAC,CAAC;EACxB,MAAM,SAAS,YAAY,MAAM;EACjC,MAAM,gBAAgB,cAAc,MAAM;EAC1C,MAAM;CACR;CAEA,IAAI;CACJ,MAAM,QAAQ,IAAI,SAAgB,GAAG,WAAW;EAC9C,MAAM,gBAAsB;GAC1B,MAAM,SAAS,YAAY,MAAM;GACjC,KAAU,YAAY,CAAC,CAAC;GACxB,OAAO,MAAM;GACb,gBAAqB,cAAc,MAAM;EAC3C;EACA,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;EACxD,4BAA4B,OAAO,oBAAoB,SAAS,OAAO;CACzE,CAAC;CAED,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,MAAM,KAAK,CAAC;CACzC,UAAU;EACR,sBAAsB;CACxB;AACF;AAEA,eAAe,gBACb,cACA,QACe;CACf,IAAI;EACF,MAAM,eAAe,MAAM;CAC7B,QAAQ,CAER;AACF;AAEA,SAAS,kBAAkB,UAA6B;CACtD,OAAO,SAAS,SAAS,oBAAoB,kBAAkB,IAAI,SAAS,MAAM;AACpF;AAEA,SAAS,4BAA4B,SAAsB,UAA2B;CACpF,IAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,QAAQ,OAAO;CAClE,IAAI;EACF,OAAO,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,WAAW,IAAI,IAAI,UAAU,QAAQ,GAAG,CAAC,CAAC;CACxE,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,mBAAmB,UAAoB,QAAiC;CACrF,IAAI;EACF,MAAM,SAAS,MAAM,OAAO,MAAM;CACpC,QAAQ,CAER;AACF;;;;;;;;AAoCA,SAAS,iBAAiB,KAAsB;CAC9C,MAAM,WAAW,kBAAkB,GAAG;CACtC,OAAO,aAAa,oBAAoB,aAAa;AACvD;AAEA,SAAS,0BAA0B,KAAsB;CACvD,OAAO,kBAAkB,GAAG,MAAM;AACpC;AAEA,SAAS,oBAAoB,KAAsB;CACjD,OAAO,kBAAkB,GAAG,MAAM;AACpC;AAEA,SAAS,yBAAyB,KAAsB;CACtD,OAAO,kBAAkB,GAAG,MAAM;AACpC;AAEA,SAAS,4CAA4C,KAAsB;CACzE,OAAO,uCAAuC,kBAAkB,GAAG,CAAC;AACtE;AAEA,SAAS,2CAA2C,KAAsB;CACxE,OAAO,sCAAsC,sBAAsB,GAAG,CAAC;AACzE;AAEA,SAAS,+BAA+B,SAA+B;CAGrE,OACE,QAAQ,eAAe,SACtB,QAAQ,WAAW,WACjB,4CAA4C,QAAQ,GAAG,KACtD,2CAA2C,QAAQ,GAAG;AAE9D;AAEA,SAAS,kBAAkB,KAAiC;CAC1D,MAAM,WAAW,IAAI,IAAI,GAAG,CAAC,CAAC,SAAS,MAAM,GAAG,CAAC,CAAC,QAAQ,YAAY,QAAQ,SAAS,CAAC;CAGxF,MAAM,eAAe,SAAS,YAAY,OAAO;CACjD,IAAI,iBAAiB,IAAI,OAAO,KAAA;CAChC,OAAO,SAAS,eAAe;AACjC;AAEA,SAAS,sBAAsB,KAAiC;CAC9D,MAAM,WAAW,IAAI,IAAI,GAAG,CAAC,CAAC,SAAS,MAAM,GAAG,CAAC,CAAC,QAAQ,YAAY,QAAQ,SAAS,CAAC;CACxF,MAAM,eAAe,SAAS,YAAY,KAAK;CAC/C,IAAI,iBAAiB,MAAM,SAAS,eAAe,OAAO,UAAU,OAAO,KAAA;CAC3E,IAAI,CAAC,SAAS,KAAK,SAAS,eAAe,MAAM,EAAE,GAAG,OAAO,KAAA;CAC7D,OAAO,SAAS,eAAe;AACjC;AAEA,SAAS,sBAAsB,SAA+B;CAC5D,IAAI,QAAQ,eAAe,OAAO,OAAO;CACzC,IAAI,QAAQ,WAAW,QAAQ,OAAO;CACtC,OACE,iBAAiB,QAAQ,GAAG,KAC5B,yBAAyB,QAAQ,GAAG,KACpC,0BAA0B,QAAQ,GAAG,KACrC,+BAA+B,OAAO;AAE1C;;;;;;;;;;;;AAaA,SAAS,mBAAmB,OAAgB,SAA+B;CACzE,IAAI,CAAC,MAAM,WAAW,OAAO;CAC7B,IAAI,oBAAoB,QAAQ,GAAG,KAAK,iBAAiB,uBAAuB,OAAO;CACvF,IAAI,+BAA+B,OAAO,GAAG,OAAO;CACpD,IAAI,yBAAyB,QAAQ,GAAG,KAAK,0BAA0B,QAAQ,GAAG,GAAG,OAAO;CAC5F,IAAI,iBAAiB,QAAQ,GAAG,KAAK,MAAM,WAAW,KAAK,OAAO;CAClE,IAAI,iBAAiB,QAAQ,GAAG,GAAG,OAAO;CAC1C,OAAO;AACT;AAEA,SAAS,sBAAsB,KAAuB;CACpD,OAAO,eAAe,gBAAgB,IAAI,SAAS;AACrD;AAEA,SAAS,yBAAyB,KAAuB;CACvD,OACE,eAAe,WACf,eAAe,mBACf,eAAe,gBACf,eAAe,eACd,eAAe,gBAAgB,IAAI,SAAS;AAEjD;;;;;;;;;;;;AAaA,IAAa,iBAAb,MAAqD;;CAEnD;;CAEA;;CAEA;;CAEA;;CAEA;;;;;CAMA,YAAY,MAA6B;EACvC,KAAK,QAAQ,KAAK;EAClB,KAAK,WAAW,qBAAqB,KAAK,SAAS;EACnD,KAAK,UAAU;GAAE,GAAG;GAAuB,GAAG,KAAK;EAAM;EACzD,IAAI,KAAK,aAAa,KAAA,GAAW,KAAK,WAAW,KAAK;EACtD,KAAK,YAAY,KAAK,aAAa;CACrC;;;;;;;;;;CAWA,MAAM,KAAK,iBAAqD;EAI9D,IAAI,UAAuB;EAC3B,MAAM,eAAe;GAAE,GAAG,KAAK;GAAS,GAAG,gBAAgB;EAAM;EACjE,IAAI;EACJ,IAAI,YAAY;EAChB,IAAI,UAAU;EAEd,OAAO,WAAW,aAAa,YAAY;GACzC,qBAAqB,QAAQ,MAAM;GAEnC,IAAI,UAAU,KAAK,WAAW;IAC5B,MAAM,aAAa,qBAAqB,eAAe,KAAA,IAAY,UAAU;IAC7E,MAAM,QAAQ,eAAe,UAAU,GAAG,cAAc,UAAU;IAClE,MAAM,KAAK,UAAU,OAAO,QAAQ,MAAM;GAC5C;GAEA,IAAI;IACF,MAAM,WAAW,MAAM,KAAK,MAAM,KAAK;KAAE,GAAG;KAAS,OAAO;IAAa,CAAC;IAC1E,MAAM,kCAAkC,QAAQ,QAAQ,QAAQ;IAEhE,IAAI,SAAS,UAAU,OAAO,SAAS,SAAS,KAC9C,OAAO;IAGT,IAAI;IACJ,IAAI;KACF,YAAY,MAAM,SAAS,KAAsB;IACnD,SAAS,KAAK;KACZ,IAAI,sBAAsB,GAAG,GAAG,MAAM;KACtC,YAAY;MACV,QAAQ,SAAS;MACjB,MAAM;MACN,SAAS,QAAQ,SAAS;KAC5B;IACF;IAEA,MAAM,mBAAmB,SAAS,QAAQ,IAAI,aAAa;IAC3D,MAAM,gBAAgB,mBAAmB,OAAO,SAAS,kBAAkB,EAAE,IAAI,KAAA;IACjF,MAAM,YAAY,SAAS,QAAQ,IAAI,iBAAiB,KAAK,KAAA;IAE7D,MAAM,QAAQ,cAAc,WAAW;KACrC,GAAI,kBAAkB,KAAA,IAAY,EAAE,YAAY,cAAc,IAAI,CAAC;KACnE,GAAI,cAAc,KAAA,IAAY,EAAE,UAAU,IAAI,CAAC;IACjD,CAAC;IAED,IACE,iBAAiB,yBACjB,KAAK,YACL,CAAC,oBAAoB,QAAQ,GAAG,KAChC,CAAC,iBAAiB,QAAQ,GAAG,KAC7B,CAAC,+BAA+B,OAAO,KACvC,CAAC,WACD;KAQA,MAAM,aAAa,MAAM,cAAc,KAAK,SAAS,QAAQ,MAAM,GAAG,QAAQ,MAAM;KACpF,qBAAqB,QAAQ,MAAM;KACnC,UAAU;MACR,GAAG;MACH,SAAS;OAAE,GAAI,QAAQ,WAAW,CAAC;OAAI,eAAe;MAAW;KACnE;KACA,YAAY;KACZ,YAAY,KAAA;KACZ;IACF;IAEA,IAAI,CAAC,mBAAmB,OAAO,OAAO,KAAK,YAAY,aAAa,YAClE,MAAM;IAGR,YAAY;IACZ,WAAW;GACb,SAAS,KAAK;IACZ,qBAAqB,QAAQ,MAAM;IACnC,IAAI,yBAAyB,GAAG,GAC9B,MAAM;IAGR,MAAM,aAAa,IAAI,aACrB,eAAe,QAAQ,IAAI,UAAU,iBACrC,GACF;IAEA,IAAI,sBAAsB,OAAO,KAAK,YAAY,aAAa,YAC7D,MAAM;IAGR,YAAY;IACZ,WAAW;GACb;EACF;EAEA,MAAM,aAAa,IAAI,aAAa,sBAAsB;CAC5D;AACF;AAEA,eAAe,kCACb,QACA,UACe;CACf,IAAI,QAAQ,YAAY,MAAM;CAC9B,MAAM,SAAS,YAAY,MAAM;CACjC,IAAI;EACF,MAAM,SAAS,MAAM,OAAO,MAAM;CACpC,QAAQ,CAER;CACA,MAAM;AACR"}

package/dist/http/user-agent.cjs

@@ -12,6 +12,16 @@ var SDK_PRODUCT = "b2-sdk-typescript";
 */
 var SDK_PACKAGE = "@backblaze-labs/b2-sdk";
 /**
+* Build the stable SDK product token for the User-Agent header.
+*
+* @param version - Version segment resolved by {@link productVersion}.
+*
+* @returns The `b2-sdk-typescript/<version-or-dev>` product token.
+*/
+function sdkProductToken(version = require_version.productVersion()) {
+	return `${SDK_PRODUCT}/${version}`;
+}
+/**
 * Best-effort detection of the JS runtime and host OS. Used to populate the
 * User-Agent comment so server-side logs can spot Bun/Deno adoption and
 * triage OS-specific issues without asking for a repro environment.
@@ -80,12 +90,13 @@ function getUserAgent(custom) {
 	];
 	if (os !== void 0) parts.push(os);
 	if (arch !== void 0) parts.push(arch);
-	const base = `${SDK_PRODUCT}/${require_version.VERSION} (${parts.join("; ")})`;
+	const base = `${sdkProductToken()} (${parts.join("; ")})`;
 	return custom ? `${custom} ${base}` : base;
 }
 //#endregion
 exports.SDK_PACKAGE = SDK_PACKAGE;
 exports.SDK_PRODUCT = SDK_PRODUCT;
 exports.getUserAgent = getUserAgent;
+exports.sdkProductToken = sdkProductToken;
 
 //# sourceMappingURL=user-agent.cjs.map

package/dist/http/user-agent.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"user-agent.cjs","names":[],"sources":["../../src/http/user-agent.ts"],"sourcesContent":["import { VERSION } from '../version.ts'\n\n/**\n * Stable identifier Backblaze can grep server logs for to find every request\n * issued by this SDK regardless of how the User-Agent comment evolves.\n * Treat as part of the public contract: do NOT rename without coordinating.\n */\nexport const SDK_PRODUCT = 'b2-sdk-typescript'\n\n/**\n * The npm package name. Embedded in the User-Agent comment alongside\n * {@link SDK_PRODUCT} so log queries that grep on either token work.\n */\nexport const SDK_PACKAGE = '@backblaze-labs/b2-sdk'\n\n/** Detected runtime + OS information for the User-Agent comment. */\ninterface Platform {\n  /** Runtime identifier: `node/<x.y.z>`, `bun/<x.y.z>`, `deno/<x.y.z>`, `browser`, or `unknown`. */\n  readonly runtime: string\n  /** OS identifier (`linux`, `darwin`, `win32`, etc.) when available, or `undefined`. */\n  readonly os: string | undefined\n  /** CPU architecture (`x64`, `arm64`, etc.) when available, or `undefined`. */\n  readonly arch: string | undefined\n}\n\n/**\n * Best-effort detection of the JS runtime and host OS. Used to populate the\n * User-Agent comment so server-side logs can spot Bun/Deno adoption and\n * triage OS-specific issues without asking for a repro environment.\n *\n * @returns The detected runtime, OS, and architecture tokens.\n */\nfunction detectPlatform(): Platform {\n  const g = globalThis as Record<string, unknown>\n\n  // Deno: Deno.version.deno, Deno.build.{os,arch}.\n  if (typeof g['Deno'] !== 'undefined') {\n    const deno = g['Deno'] as {\n      version?: { deno?: string }\n      build?: { os?: string; arch?: string }\n    }\n    return {\n      runtime: deno.version?.deno ? `deno/${deno.version.deno}` : 'deno',\n      os: deno.build?.os,\n      arch: deno.build?.arch,\n    }\n  }\n\n  // Bun: globalThis.Bun.version, process.platform/arch (Bun is Node-compat).\n  if (typeof g['Bun'] !== 'undefined') {\n    const bun = g['Bun'] as { version?: string }\n    const proc = g['process'] as { platform?: string; arch?: string } | undefined\n    return {\n      runtime: bun.version ? `bun/${bun.version}` : 'bun',\n      os: proc?.platform,\n      arch: proc?.arch,\n    }\n  }\n\n  // Node: process.versions.node, process.platform, process.arch.\n  if (typeof g['process'] !== 'undefined') {\n    const proc = g['process'] as {\n      versions?: { node?: string }\n      platform?: string\n      arch?: string\n    }\n    if (proc.versions?.node) {\n      return {\n        runtime: `node/${proc.versions.node}`,\n        os: proc.platform,\n        arch: proc.arch,\n      }\n    }\n  }\n\n  // Browsers (and other navigator-only runtimes like Cloudflare Workers,\n  // Vercel Edge, etc.). We deliberately do NOT parse the existing navigator\n  // UA — that's noisy, often spoofed, and the request layer already adds the\n  // browser's own UA on top.\n  if (typeof g['navigator'] !== 'undefined') {\n    return { runtime: 'browser', os: undefined, arch: undefined }\n  }\n\n  return { runtime: 'unknown', os: undefined, arch: undefined }\n}\n\n/**\n * Build the User-Agent header value the SDK sends on every B2 request.\n *\n * The product token, npm package name, language label, runtime, OS, and\n * architecture are emitted in that order, separated by semicolons inside a\n * single parenthesised comment block. OS and architecture are omitted on\n * runtimes that don't expose them (notably browsers). A custom prefix passed\n * via `B2ClientOptions.userAgent` is prepended verbatim so app-level\n * identifiers come first. See the README \"Identifying your traffic\" section\n * for examples.\n *\n * @param custom - Optional prefix prepended to the default User-Agent.\n *\n * @returns The formatted User-Agent header string.\n */\nexport function getUserAgent(custom?: string): string {\n  const { runtime, os, arch } = detectPlatform()\n  const parts = ['typescript', SDK_PACKAGE, runtime]\n  if (os !== undefined) parts.push(os)\n  if (arch !== undefined) parts.push(arch)\n  const base = `${SDK_PRODUCT}/${VERSION} (${parts.join('; ')})`\n  return custom ? `${custom} ${base}` : base\n}\n"],"mappings":";;;;;;;AAOA,IAAa,cAAc;;;;;AAM3B,IAAa,cAAc;;;;;;;;AAmB3B,SAAS,iBAA2B;CAClC,MAAM,IAAI;CAGV,IAAI,OAAO,EAAE,YAAY,aAAa;EACpC,MAAM,OAAO,EAAE;EAIf,OAAO;GACL,SAAS,KAAK,SAAS,OAAO,QAAQ,KAAK,QAAQ,SAAS;GAC5D,IAAI,KAAK,OAAO;GAChB,MAAM,KAAK,OAAO;EACpB;CACF;CAGA,IAAI,OAAO,EAAE,WAAW,aAAa;EACnC,MAAM,MAAM,EAAE;EACd,MAAM,OAAO,EAAE;EACf,OAAO;GACL,SAAS,IAAI,UAAU,OAAO,IAAI,YAAY;GAC9C,IAAI,MAAM;GACV,MAAM,MAAM;EACd;CACF;CAGA,IAAI,OAAO,EAAE,eAAe,aAAa;EACvC,MAAM,OAAO,EAAE;EAKf,IAAI,KAAK,UAAU,MACjB,OAAO;GACL,SAAS,QAAQ,KAAK,SAAS;GAC/B,IAAI,KAAK;GACT,MAAM,KAAK;EACb;CAEJ;CAMA,IAAI,OAAO,EAAE,iBAAiB,aAC5B,OAAO;EAAE,SAAS;EAAW,IAAI,KAAA;EAAW,MAAM,KAAA;CAAU;CAG9D,OAAO;EAAE,SAAS;EAAW,IAAI,KAAA;EAAW,MAAM,KAAA;CAAU;AAC9D;;;;;;;;;;;;;;;;AAiBA,SAAgB,aAAa,QAAyB;CACpD,MAAM,EAAE,SAAS,IAAI,SAAS,eAAe;CAC7C,MAAM,QAAQ;EAAC;EAAc;EAAa;CAAO;CACjD,IAAI,OAAO,KAAA,GAAW,MAAM,KAAK,EAAE;CACnC,IAAI,SAAS,KAAA,GAAW,MAAM,KAAK,IAAI;CACvC,MAAM,OAAO,GAAG,YAAY,GAAG,gBAAA,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE;CAC5D,OAAO,SAAS,GAAG,OAAO,GAAG,SAAS;AACxC"}
+{"version":3,"file":"user-agent.cjs","names":[],"sources":["../../src/http/user-agent.ts"],"sourcesContent":["import { productVersion } from '../version.ts'\n\n/**\n * Stable identifier Backblaze can grep server logs for to find every request\n * issued by this SDK regardless of how the User-Agent comment evolves.\n * Treat as part of the public contract: do NOT rename without coordinating.\n */\nexport const SDK_PRODUCT = 'b2-sdk-typescript'\n\n/**\n * The npm package name. Embedded in the User-Agent comment alongside\n * {@link SDK_PRODUCT} so log queries that grep on either token work.\n */\nexport const SDK_PACKAGE = '@backblaze-labs/b2-sdk'\n\n/**\n * Build the stable SDK product token for the User-Agent header.\n *\n * @param version - Version segment resolved by {@link productVersion}.\n *\n * @returns The `b2-sdk-typescript/<version-or-dev>` product token.\n */\nexport function sdkProductToken(version: string = productVersion()): string {\n  return `${SDK_PRODUCT}/${version}`\n}\n\n/** Detected runtime + OS information for the User-Agent comment. */\ninterface Platform {\n  /** Runtime identifier: `node/<x.y.z>`, `bun/<x.y.z>`, `deno/<x.y.z>`, `browser`, or `unknown`. */\n  readonly runtime: string\n  /** OS identifier (`linux`, `darwin`, `win32`, etc.) when available, or `undefined`. */\n  readonly os: string | undefined\n  /** CPU architecture (`x64`, `arm64`, etc.) when available, or `undefined`. */\n  readonly arch: string | undefined\n}\n\n/**\n * Best-effort detection of the JS runtime and host OS. Used to populate the\n * User-Agent comment so server-side logs can spot Bun/Deno adoption and\n * triage OS-specific issues without asking for a repro environment.\n *\n * @returns The detected runtime, OS, and architecture tokens.\n */\nfunction detectPlatform(): Platform {\n  const g = globalThis as Record<string, unknown>\n\n  // Deno: Deno.version.deno, Deno.build.{os,arch}.\n  if (typeof g['Deno'] !== 'undefined') {\n    const deno = g['Deno'] as {\n      version?: { deno?: string }\n      build?: { os?: string; arch?: string }\n    }\n    return {\n      runtime: deno.version?.deno ? `deno/${deno.version.deno}` : 'deno',\n      os: deno.build?.os,\n      arch: deno.build?.arch,\n    }\n  }\n\n  // Bun: globalThis.Bun.version, process.platform/arch (Bun is Node-compat).\n  if (typeof g['Bun'] !== 'undefined') {\n    const bun = g['Bun'] as { version?: string }\n    const proc = g['process'] as { platform?: string; arch?: string } | undefined\n    return {\n      runtime: bun.version ? `bun/${bun.version}` : 'bun',\n      os: proc?.platform,\n      arch: proc?.arch,\n    }\n  }\n\n  // Node: process.versions.node, process.platform, process.arch.\n  if (typeof g['process'] !== 'undefined') {\n    const proc = g['process'] as {\n      versions?: { node?: string }\n      platform?: string\n      arch?: string\n    }\n    if (proc.versions?.node) {\n      return {\n        runtime: `node/${proc.versions.node}`,\n        os: proc.platform,\n        arch: proc.arch,\n      }\n    }\n  }\n\n  // Browsers (and other navigator-only runtimes like Cloudflare Workers,\n  // Vercel Edge, etc.). We deliberately do NOT parse the existing navigator\n  // UA — that's noisy, often spoofed, and the request layer already adds the\n  // browser's own UA on top.\n  if (typeof g['navigator'] !== 'undefined') {\n    return { runtime: 'browser', os: undefined, arch: undefined }\n  }\n\n  return { runtime: 'unknown', os: undefined, arch: undefined }\n}\n\n/**\n * Build the User-Agent header value the SDK sends on every B2 request.\n *\n * The product token, npm package name, language label, runtime, OS, and\n * architecture are emitted in that order, separated by semicolons inside a\n * single parenthesised comment block. OS and architecture are omitted on\n * runtimes that don't expose them (notably browsers). A custom prefix passed\n * via `B2ClientOptions.userAgent` is prepended verbatim so app-level\n * identifiers come first. See the README \"Identifying your traffic\" section\n * for examples.\n *\n * @param custom - Optional prefix prepended to the default User-Agent.\n *\n * @returns The formatted User-Agent header string.\n */\nexport function getUserAgent(custom?: string): string {\n  const { runtime, os, arch } = detectPlatform()\n  const parts = ['typescript', SDK_PACKAGE, runtime]\n  if (os !== undefined) parts.push(os)\n  if (arch !== undefined) parts.push(arch)\n  const base = `${sdkProductToken()} (${parts.join('; ')})`\n  return custom ? `${custom} ${base}` : base\n}\n"],"mappings":";;;;;;;AAOA,IAAa,cAAc;;;;;AAM3B,IAAa,cAAc;;;;;;;;AAS3B,SAAgB,gBAAgB,UAAkB,gBAAA,eAAe,GAAW;CAC1E,OAAO,GAAG,YAAY,GAAG;AAC3B;;;;;;;;AAmBA,SAAS,iBAA2B;CAClC,MAAM,IAAI;CAGV,IAAI,OAAO,EAAE,YAAY,aAAa;EACpC,MAAM,OAAO,EAAE;EAIf,OAAO;GACL,SAAS,KAAK,SAAS,OAAO,QAAQ,KAAK,QAAQ,SAAS;GAC5D,IAAI,KAAK,OAAO;GAChB,MAAM,KAAK,OAAO;EACpB;CACF;CAGA,IAAI,OAAO,EAAE,WAAW,aAAa;EACnC,MAAM,MAAM,EAAE;EACd,MAAM,OAAO,EAAE;EACf,OAAO;GACL,SAAS,IAAI,UAAU,OAAO,IAAI,YAAY;GAC9C,IAAI,MAAM;GACV,MAAM,MAAM;EACd;CACF;CAGA,IAAI,OAAO,EAAE,eAAe,aAAa;EACvC,MAAM,OAAO,EAAE;EAKf,IAAI,KAAK,UAAU,MACjB,OAAO;GACL,SAAS,QAAQ,KAAK,SAAS;GAC/B,IAAI,KAAK;GACT,MAAM,KAAK;EACb;CAEJ;CAMA,IAAI,OAAO,EAAE,iBAAiB,aAC5B,OAAO;EAAE,SAAS;EAAW,IAAI,KAAA;EAAW,MAAM,KAAA;CAAU;CAG9D,OAAO;EAAE,SAAS;EAAW,IAAI,KAAA;EAAW,MAAM,KAAA;CAAU;AAC9D;;;;;;;;;;;;;;;;AAiBA,SAAgB,aAAa,QAAyB;CACpD,MAAM,EAAE,SAAS,IAAI,SAAS,eAAe;CAC7C,MAAM,QAAQ;EAAC;EAAc;EAAa;CAAO;CACjD,IAAI,OAAO,KAAA,GAAW,MAAM,KAAK,EAAE;CACnC,IAAI,SAAS,KAAA,GAAW,MAAM,KAAK,IAAI;CACvC,MAAM,OAAO,GAAG,gBAAgB,EAAE,IAAI,MAAM,KAAK,IAAI,EAAE;CACvD,OAAO,SAAS,GAAG,OAAO,GAAG,SAAS;AACxC"}

package/dist/http/user-agent.d.cts

@@ -9,6 +9,14 @@ export declare const SDK_PRODUCT = "b2-sdk-typescript";
  * {@link SDK_PRODUCT} so log queries that grep on either token work.
  */
 export declare const SDK_PACKAGE = "@backblaze-labs/b2-sdk";
+/**
+ * Build the stable SDK product token for the User-Agent header.
+ *
+ * @param version - Version segment resolved by {@link productVersion}.
+ *
+ * @returns The `b2-sdk-typescript/<version-or-dev>` product token.
+ */
+export declare function sdkProductToken(version?: string): string;
 /**
  * Build the User-Agent header value the SDK sends on every B2 request.
  *

package/dist/http/user-agent.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"user-agent.d.ts","sourceRoot":"","sources":["../../src/http/user-agent.js"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,WAAW,sBAAsB,CAAA;AAE9C;;;GAGG;AACH,eAAO,MAAM,WAAW,2BAA2B,CAAA;AAyEnD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAOpD"}
+{"version":3,"file":"user-agent.d.ts","sourceRoot":"","sources":["../../src/http/user-agent.js"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,WAAW,sBAAsB,CAAA;AAE9C;;;GAGG;AACH,eAAO,MAAM,WAAW,2BAA2B,CAAA;AAEnD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,GAAE,MAAyB,GAAG,MAAM,CAE1E;AAyED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAOpD"}

package/dist/http/user-agent.d.ts

@@ -9,6 +9,14 @@ export declare const SDK_PRODUCT = "b2-sdk-typescript";
  * {@link SDK_PRODUCT} so log queries that grep on either token work.
  */
 export declare const SDK_PACKAGE = "@backblaze-labs/b2-sdk";
+/**
+ * Build the stable SDK product token for the User-Agent header.
+ *
+ * @param version - Version segment resolved by {@link productVersion}.
+ *
+ * @returns The `b2-sdk-typescript/<version-or-dev>` product token.
+ */
+export declare function sdkProductToken(version?: string): string;
 /**
  * Build the User-Agent header value the SDK sends on every B2 request.
  *

package/dist/http/user-agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-agent.d.ts","sourceRoot":"","sources":["../../src/http/user-agent.js"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,WAAW,sBAAsB,CAAA;AAE9C;;;GAGG;AACH,eAAO,MAAM,WAAW,2BAA2B,CAAA;AAyEnD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAOpD"}
+{"version":3,"file":"user-agent.d.ts","sourceRoot":"","sources":["../../src/http/user-agent.js"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,WAAW,sBAAsB,CAAA;AAE9C;;;GAGG;AACH,eAAO,MAAM,WAAW,2BAA2B,CAAA;AAEnD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,GAAE,MAAyB,GAAG,MAAM,CAE1E;AAyED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAOpD"}

package/dist/http/user-agent.js

@@ -1,4 +1,4 @@
-import { VERSION } from "../version.js";
+import { productVersion } from "../version.js";
 //#region src/http/user-agent.ts
 /**
 * Stable identifier Backblaze can grep server logs for to find every request
@@ -12,6 +12,16 @@ var SDK_PRODUCT = "b2-sdk-typescript";
 */
 var SDK_PACKAGE = "@backblaze-labs/b2-sdk";
 /**
+* Build the stable SDK product token for the User-Agent header.
+*
+* @param version - Version segment resolved by {@link productVersion}.
+*
+* @returns The `b2-sdk-typescript/<version-or-dev>` product token.
+*/
+function sdkProductToken(version = productVersion()) {
+	return `${SDK_PRODUCT}/${version}`;
+}
+/**
 * Best-effort detection of the JS runtime and host OS. Used to populate the
 * User-Agent comment so server-side logs can spot Bun/Deno adoption and
 * triage OS-specific issues without asking for a repro environment.
@@ -80,10 +90,10 @@ function getUserAgent(custom) {
 	];
 	if (os !== void 0) parts.push(os);
 	if (arch !== void 0) parts.push(arch);
-	const base = `${SDK_PRODUCT}/${VERSION} (${parts.join("; ")})`;
+	const base = `${sdkProductToken()} (${parts.join("; ")})`;
 	return custom ? `${custom} ${base}` : base;
 }
 //#endregion
-export { SDK_PACKAGE, SDK_PRODUCT, getUserAgent };
+export { SDK_PACKAGE, SDK_PRODUCT, getUserAgent, sdkProductToken };
 
 //# sourceMappingURL=user-agent.js.map

package/dist/http/user-agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-agent.js","names":[],"sources":["../../src/http/user-agent.ts"],"sourcesContent":["import { VERSION } from '../version.ts'\n\n/**\n * Stable identifier Backblaze can grep server logs for to find every request\n * issued by this SDK regardless of how the User-Agent comment evolves.\n * Treat as part of the public contract: do NOT rename without coordinating.\n */\nexport const SDK_PRODUCT = 'b2-sdk-typescript'\n\n/**\n * The npm package name. Embedded in the User-Agent comment alongside\n * {@link SDK_PRODUCT} so log queries that grep on either token work.\n */\nexport const SDK_PACKAGE = '@backblaze-labs/b2-sdk'\n\n/** Detected runtime + OS information for the User-Agent comment. */\ninterface Platform {\n  /** Runtime identifier: `node/<x.y.z>`, `bun/<x.y.z>`, `deno/<x.y.z>`, `browser`, or `unknown`. */\n  readonly runtime: string\n  /** OS identifier (`linux`, `darwin`, `win32`, etc.) when available, or `undefined`. */\n  readonly os: string | undefined\n  /** CPU architecture (`x64`, `arm64`, etc.) when available, or `undefined`. */\n  readonly arch: string | undefined\n}\n\n/**\n * Best-effort detection of the JS runtime and host OS. Used to populate the\n * User-Agent comment so server-side logs can spot Bun/Deno adoption and\n * triage OS-specific issues without asking for a repro environment.\n *\n * @returns The detected runtime, OS, and architecture tokens.\n */\nfunction detectPlatform(): Platform {\n  const g = globalThis as Record<string, unknown>\n\n  // Deno: Deno.version.deno, Deno.build.{os,arch}.\n  if (typeof g['Deno'] !== 'undefined') {\n    const deno = g['Deno'] as {\n      version?: { deno?: string }\n      build?: { os?: string; arch?: string }\n    }\n    return {\n      runtime: deno.version?.deno ? `deno/${deno.version.deno}` : 'deno',\n      os: deno.build?.os,\n      arch: deno.build?.arch,\n    }\n  }\n\n  // Bun: globalThis.Bun.version, process.platform/arch (Bun is Node-compat).\n  if (typeof g['Bun'] !== 'undefined') {\n    const bun = g['Bun'] as { version?: string }\n    const proc = g['process'] as { platform?: string; arch?: string } | undefined\n    return {\n      runtime: bun.version ? `bun/${bun.version}` : 'bun',\n      os: proc?.platform,\n      arch: proc?.arch,\n    }\n  }\n\n  // Node: process.versions.node, process.platform, process.arch.\n  if (typeof g['process'] !== 'undefined') {\n    const proc = g['process'] as {\n      versions?: { node?: string }\n      platform?: string\n      arch?: string\n    }\n    if (proc.versions?.node) {\n      return {\n        runtime: `node/${proc.versions.node}`,\n        os: proc.platform,\n        arch: proc.arch,\n      }\n    }\n  }\n\n  // Browsers (and other navigator-only runtimes like Cloudflare Workers,\n  // Vercel Edge, etc.). We deliberately do NOT parse the existing navigator\n  // UA — that's noisy, often spoofed, and the request layer already adds the\n  // browser's own UA on top.\n  if (typeof g['navigator'] !== 'undefined') {\n    return { runtime: 'browser', os: undefined, arch: undefined }\n  }\n\n  return { runtime: 'unknown', os: undefined, arch: undefined }\n}\n\n/**\n * Build the User-Agent header value the SDK sends on every B2 request.\n *\n * The product token, npm package name, language label, runtime, OS, and\n * architecture are emitted in that order, separated by semicolons inside a\n * single parenthesised comment block. OS and architecture are omitted on\n * runtimes that don't expose them (notably browsers). A custom prefix passed\n * via `B2ClientOptions.userAgent` is prepended verbatim so app-level\n * identifiers come first. See the README \"Identifying your traffic\" section\n * for examples.\n *\n * @param custom - Optional prefix prepended to the default User-Agent.\n *\n * @returns The formatted User-Agent header string.\n */\nexport function getUserAgent(custom?: string): string {\n  const { runtime, os, arch } = detectPlatform()\n  const parts = ['typescript', SDK_PACKAGE, runtime]\n  if (os !== undefined) parts.push(os)\n  if (arch !== undefined) parts.push(arch)\n  const base = `${SDK_PRODUCT}/${VERSION} (${parts.join('; ')})`\n  return custom ? `${custom} ${base}` : base\n}\n"],"mappings":";;;;;;;AAOA,IAAa,cAAc;;;;;AAM3B,IAAa,cAAc;;;;;;;;AAmB3B,SAAS,iBAA2B;CAClC,MAAM,IAAI;CAGV,IAAI,OAAO,EAAE,YAAY,aAAa;EACpC,MAAM,OAAO,EAAE;EAIf,OAAO;GACL,SAAS,KAAK,SAAS,OAAO,QAAQ,KAAK,QAAQ,SAAS;GAC5D,IAAI,KAAK,OAAO;GAChB,MAAM,KAAK,OAAO;EACpB;CACF;CAGA,IAAI,OAAO,EAAE,WAAW,aAAa;EACnC,MAAM,MAAM,EAAE;EACd,MAAM,OAAO,EAAE;EACf,OAAO;GACL,SAAS,IAAI,UAAU,OAAO,IAAI,YAAY;GAC9C,IAAI,MAAM;GACV,MAAM,MAAM;EACd;CACF;CAGA,IAAI,OAAO,EAAE,eAAe,aAAa;EACvC,MAAM,OAAO,EAAE;EAKf,IAAI,KAAK,UAAU,MACjB,OAAO;GACL,SAAS,QAAQ,KAAK,SAAS;GAC/B,IAAI,KAAK;GACT,MAAM,KAAK;EACb;CAEJ;CAMA,IAAI,OAAO,EAAE,iBAAiB,aAC5B,OAAO;EAAE,SAAS;EAAW,IAAI,KAAA;EAAW,MAAM,KAAA;CAAU;CAG9D,OAAO;EAAE,SAAS;EAAW,IAAI,KAAA;EAAW,MAAM,KAAA;CAAU;AAC9D;;;;;;;;;;;;;;;;AAiBA,SAAgB,aAAa,QAAyB;CACpD,MAAM,EAAE,SAAS,IAAI,SAAS,eAAe;CAC7C,MAAM,QAAQ;EAAC;EAAc;EAAa;CAAO;CACjD,IAAI,OAAO,KAAA,GAAW,MAAM,KAAK,EAAE;CACnC,IAAI,SAAS,KAAA,GAAW,MAAM,KAAK,IAAI;CACvC,MAAM,OAAO,GAAG,YAAY,GAAG,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE;CAC5D,OAAO,SAAS,GAAG,OAAO,GAAG,SAAS;AACxC"}
+{"version":3,"file":"user-agent.js","names":[],"sources":["../../src/http/user-agent.ts"],"sourcesContent":["import { productVersion } from '../version.ts'\n\n/**\n * Stable identifier Backblaze can grep server logs for to find every request\n * issued by this SDK regardless of how the User-Agent comment evolves.\n * Treat as part of the public contract: do NOT rename without coordinating.\n */\nexport const SDK_PRODUCT = 'b2-sdk-typescript'\n\n/**\n * The npm package name. Embedded in the User-Agent comment alongside\n * {@link SDK_PRODUCT} so log queries that grep on either token work.\n */\nexport const SDK_PACKAGE = '@backblaze-labs/b2-sdk'\n\n/**\n * Build the stable SDK product token for the User-Agent header.\n *\n * @param version - Version segment resolved by {@link productVersion}.\n *\n * @returns The `b2-sdk-typescript/<version-or-dev>` product token.\n */\nexport function sdkProductToken(version: string = productVersion()): string {\n  return `${SDK_PRODUCT}/${version}`\n}\n\n/** Detected runtime + OS information for the User-Agent comment. */\ninterface Platform {\n  /** Runtime identifier: `node/<x.y.z>`, `bun/<x.y.z>`, `deno/<x.y.z>`, `browser`, or `unknown`. */\n  readonly runtime: string\n  /** OS identifier (`linux`, `darwin`, `win32`, etc.) when available, or `undefined`. */\n  readonly os: string | undefined\n  /** CPU architecture (`x64`, `arm64`, etc.) when available, or `undefined`. */\n  readonly arch: string | undefined\n}\n\n/**\n * Best-effort detection of the JS runtime and host OS. Used to populate the\n * User-Agent comment so server-side logs can spot Bun/Deno adoption and\n * triage OS-specific issues without asking for a repro environment.\n *\n * @returns The detected runtime, OS, and architecture tokens.\n */\nfunction detectPlatform(): Platform {\n  const g = globalThis as Record<string, unknown>\n\n  // Deno: Deno.version.deno, Deno.build.{os,arch}.\n  if (typeof g['Deno'] !== 'undefined') {\n    const deno = g['Deno'] as {\n      version?: { deno?: string }\n      build?: { os?: string; arch?: string }\n    }\n    return {\n      runtime: deno.version?.deno ? `deno/${deno.version.deno}` : 'deno',\n      os: deno.build?.os,\n      arch: deno.build?.arch,\n    }\n  }\n\n  // Bun: globalThis.Bun.version, process.platform/arch (Bun is Node-compat).\n  if (typeof g['Bun'] !== 'undefined') {\n    const bun = g['Bun'] as { version?: string }\n    const proc = g['process'] as { platform?: string; arch?: string } | undefined\n    return {\n      runtime: bun.version ? `bun/${bun.version}` : 'bun',\n      os: proc?.platform,\n      arch: proc?.arch,\n    }\n  }\n\n  // Node: process.versions.node, process.platform, process.arch.\n  if (typeof g['process'] !== 'undefined') {\n    const proc = g['process'] as {\n      versions?: { node?: string }\n      platform?: string\n      arch?: string\n    }\n    if (proc.versions?.node) {\n      return {\n        runtime: `node/${proc.versions.node}`,\n        os: proc.platform,\n        arch: proc.arch,\n      }\n    }\n  }\n\n  // Browsers (and other navigator-only runtimes like Cloudflare Workers,\n  // Vercel Edge, etc.). We deliberately do NOT parse the existing navigator\n  // UA — that's noisy, often spoofed, and the request layer already adds the\n  // browser's own UA on top.\n  if (typeof g['navigator'] !== 'undefined') {\n    return { runtime: 'browser', os: undefined, arch: undefined }\n  }\n\n  return { runtime: 'unknown', os: undefined, arch: undefined }\n}\n\n/**\n * Build the User-Agent header value the SDK sends on every B2 request.\n *\n * The product token, npm package name, language label, runtime, OS, and\n * architecture are emitted in that order, separated by semicolons inside a\n * single parenthesised comment block. OS and architecture are omitted on\n * runtimes that don't expose them (notably browsers). A custom prefix passed\n * via `B2ClientOptions.userAgent` is prepended verbatim so app-level\n * identifiers come first. See the README \"Identifying your traffic\" section\n * for examples.\n *\n * @param custom - Optional prefix prepended to the default User-Agent.\n *\n * @returns The formatted User-Agent header string.\n */\nexport function getUserAgent(custom?: string): string {\n  const { runtime, os, arch } = detectPlatform()\n  const parts = ['typescript', SDK_PACKAGE, runtime]\n  if (os !== undefined) parts.push(os)\n  if (arch !== undefined) parts.push(arch)\n  const base = `${sdkProductToken()} (${parts.join('; ')})`\n  return custom ? `${custom} ${base}` : base\n}\n"],"mappings":";;;;;;;AAOA,IAAa,cAAc;;;;;AAM3B,IAAa,cAAc;;;;;;;;AAS3B,SAAgB,gBAAgB,UAAkB,eAAe,GAAW;CAC1E,OAAO,GAAG,YAAY,GAAG;AAC3B;;;;;;;;AAmBA,SAAS,iBAA2B;CAClC,MAAM,IAAI;CAGV,IAAI,OAAO,EAAE,YAAY,aAAa;EACpC,MAAM,OAAO,EAAE;EAIf,OAAO;GACL,SAAS,KAAK,SAAS,OAAO,QAAQ,KAAK,QAAQ,SAAS;GAC5D,IAAI,KAAK,OAAO;GAChB,MAAM,KAAK,OAAO;EACpB;CACF;CAGA,IAAI,OAAO,EAAE,WAAW,aAAa;EACnC,MAAM,MAAM,EAAE;EACd,MAAM,OAAO,EAAE;EACf,OAAO;GACL,SAAS,IAAI,UAAU,OAAO,IAAI,YAAY;GAC9C,IAAI,MAAM;GACV,MAAM,MAAM;EACd;CACF;CAGA,IAAI,OAAO,EAAE,eAAe,aAAa;EACvC,MAAM,OAAO,EAAE;EAKf,IAAI,KAAK,UAAU,MACjB,OAAO;GACL,SAAS,QAAQ,KAAK,SAAS;GAC/B,IAAI,KAAK;GACT,MAAM,KAAK;EACb;CAEJ;CAMA,IAAI,OAAO,EAAE,iBAAiB,aAC5B,OAAO;EAAE,SAAS;EAAW,IAAI,KAAA;EAAW,MAAM,KAAA;CAAU;CAG9D,OAAO;EAAE,SAAS;EAAW,IAAI,KAAA;EAAW,MAAM,KAAA;CAAU;AAC9D;;;;;;;;;;;;;;;;AAiBA,SAAgB,aAAa,QAAyB;CACpD,MAAM,EAAE,SAAS,IAAI,SAAS,eAAe;CAC7C,MAAM,QAAQ;EAAC;EAAc;EAAa;CAAO;CACjD,IAAI,OAAO,KAAA,GAAW,MAAM,KAAK,EAAE;CACnC,IAAI,SAAS,KAAA,GAAW,MAAM,KAAK,IAAI;CACvC,MAAM,OAAO,GAAG,gBAAgB,EAAE,IAAI,MAAM,KAAK,IAAI,EAAE;CACvD,OAAO,SAAS,GAAG,OAAO,GAAG,SAAS;AACxC"}