@cerebro-labs/agentnava-sdk 0.26.0 → 0.44.1

package/http.js

@@ -85,6 +85,8 @@ export class Http {
             Authorization: `Bearer ${this.#apiKey}`,
             [CLIENT_HEADER]: CLIENT_ID,
         };
+        if (options.idempotencyKey)
+            headers['Idempotency-Key'] = options.idempotencyKey;
         let body;
         if (options.bytes !== undefined) {
             body = options.bytes;
@@ -98,10 +100,18 @@ export class Http {
         // AbortSignal.any is too new to rely on across every runtime this ships to.
         const controller = new AbortController();
         const timer = setTimeout(() => controller.abort(), this.#timeout);
-        const onAbort = () => controller.abort();
-        options.signal?.addEventListener('abort', onAbort, { once: true });
+        const onAbort = () => controller.abort(options.signal?.reason);
+        const releaseSignal = () => options.signal?.removeEventListener('abort', onAbort);
+        if (options.signal?.aborted)
+            onAbort();
+        else
+            options.signal?.addEventListener('abort', onAbort, { once: true });
         let res;
         try {
+            // Do not invoke even a custom fetch for a request already cancelled.
+            // Such a fetch may not itself honor an already-aborted signal.
+            if (controller.signal.aborted)
+                throw controller.signal.reason;
             res = await this.#doFetch(this.url(path, options.query), {
                 method: options.method ?? 'GET',
                 headers,
@@ -110,18 +120,28 @@ export class Http {
             });
         }
         catch (err) {
+            releaseSignal();
             if (options.signal?.aborted)
                 throw err;
-            throw networkError(controller.signal.aborted
+            const failure = networkError(controller.signal.aborted
                 ? `Request to ${path} timed out after ${this.#timeout}ms`
                 : `Request to ${path} failed: ${err instanceof Error ? err.message : String(err)}`, err);
+            if (options.idempotencyKey) {
+                throw new AgentNavaError({
+                    message: `${failure.message} The turn may have been accepted. ${turnRecoveryMessage(path, options.idempotencyKey)}`,
+                    code: 'network_error', status: 0,
+                });
+            }
+            throw failure;
         }
         finally {
             clearTimeout(timer);
-            options.signal?.removeEventListener('abort', onAbort);
         }
+        // Headers end the connection timeout, not the caller's right to stop
+        // reading. Keep forwarding cancellation for the lifetime of the body.
+        res = responseUntilConsumed(res, releaseSignal, (reason) => controller.abort(reason));
         if (!res.ok)
-            throw await toError(res, path);
+            throw await toError(res, path, options.idempotencyKey);
         return res;
     }
     async request(path, options = {}) {
@@ -150,6 +170,9 @@ export class Http {
     post(path, body, query) {
         return this.request(path, { method: 'POST', body, ...(query && { query }) });
     }
+    put(path, body) {
+        return this.request(path, { method: 'PUT', body });
+    }
     patch(path, body) {
         return this.request(path, { method: 'PATCH', body });
     }
@@ -157,10 +180,77 @@ export class Http {
         return this.request(path, { method: 'DELETE', ...(query && { query }) });
     }
 }
+/** Dispose the caller's abort listener after EOF, failure or cancellation.
+ * Http.send is internal: callers consume status, headers and body, so wrapping
+ * the body preserves the values the SDK exposes without buffering a stream. */
+function responseUntilConsumed(response, releaseSignal, abortFetch) {
+    if (!response.body) {
+        releaseSignal();
+        return response;
+    }
+    const reader = response.body.getReader();
+    let finished = false;
+    let released = false;
+    const release = () => {
+        if (released)
+            return;
+        released = true;
+        releaseSignal();
+        // Cancellation settles pending reads before lock release, even when the
+        // underlying source's cleanup promise has not settled.
+        try {
+            reader.releaseLock();
+        }
+        catch { /* cleanup preserves the original result */ }
+    };
+    return new Response(new ReadableStream({
+        async pull(controller) {
+            try {
+                const { done, value } = await reader.read();
+                if (finished)
+                    return;
+                if (done) {
+                    finished = true;
+                    release();
+                    controller.close();
+                }
+                else
+                    controller.enqueue(value);
+            }
+            catch (error) {
+                if (finished)
+                    return;
+                finished = true;
+                release();
+                controller.error(error);
+            }
+        },
+        cancel(reason) {
+            if (finished)
+                return;
+            finished = true;
+            // Bun can leave a real fetch socket open after reader.cancel(). Abort
+            // the transport as well, including requests with no caller signal.
+            abortFetch(reason);
+            try {
+                void reader.cancel(reason).catch(() => { });
+            }
+            catch { /* a custom reader may throw synchronously during cleanup */ }
+            finally {
+                release();
+            }
+        },
+    }, { highWaterMark: 0 }), {
+        status: response.status,
+        statusText: response.statusText,
+        headers: response.headers,
+    });
+}
 /** Turn a failed Response into the one error type this SDK throws. */
-async function toError(res, path) {
+async function toError(res, path, idempotencyKey) {
     let message = `${res.status} from ${path}`;
     let code = `http_${res.status}`;
+    let retryable;
     try {
         const text = await res.text();
         if (text) {
@@ -169,6 +259,8 @@ async function toError(res, path) {
                 message = parsed.message ?? parsed.error ?? text.slice(0, 300);
                 if (parsed.code)
                     code = parsed.code;
+                if (parsed.retryable === false)
+                    retryable = false;
             }
             catch {
                 message = text.slice(0, 300);
@@ -181,12 +273,21 @@ async function toError(res, path) {
     const retryAfterHeader = res.headers.get('retry-after');
     const retryAfter = retryAfterHeader ? Number(retryAfterHeader) : undefined;
     const requestId = res.headers.get('x-request-id') ?? undefined;
-    return new AgentNavaError({
-        message,
+    const failure = new AgentNavaError({
+        message: idempotencyKey ? `${message} ${turnRecoveryMessage(path, idempotencyKey)}` : message,
         code,
         status: res.status,
         ...(retryAfter !== undefined && Number.isFinite(retryAfter) && { retryAfter }),
         ...(requestId !== undefined && { requestId }),
     });
+    // An uncertain handoff can be HTTP 503 while already owning accepted work.
+    // Respect the server's refusal to retry instead of creating a second turn.
+    if (retryable === false || (idempotencyKey && res.status >= 500))
+        Object.defineProperty(failure, 'retryable', { value: false, enumerable: true });
+    return failure;
+}
+/** Kept in errors because a dropped response may not have returned a turn ID. */
+export function turnRecoveryMessage(path, idempotencyKey) {
+    return `Check the conversation before starting another turn. To check status, POST the original body to ${path} with the same authorization, Idempotency-Key: ${idempotencyKey} and X-Turn-Status: true.`;
 }
 //# sourceMappingURL=http.js.map

package/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAa3C;;;;;;;;;;;;;;;;;0DAiB0D;AAC1D,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAE3C,SAAS,UAAU;IAClB,MAAM,CAAC,GAAG,UAIT,CAAC;IACF,IAAI,CAAC,CAAC,GAAG,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAClD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI;QAAE,OAAO,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/C,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;oEACoE;AACpE,MAAM,SAAS,GAAG,iBAAiB,WAAW,KAAK,UAAU,EAAE,GAAG,CAAC;AAEnE,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AACrD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;iEAIiE;AACjE,SAAS,OAAO,CAAC,IAAY;IAC5B,IAAI,CAAC;QACJ,MAAM,IAAI,GAAI,UAAyE,CAAC,OAAO,CAAC;QAChG,OAAO,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAyBD,MAAM,OAAO,IAAI;IACP,OAAO,CAAS;IAChB,QAAQ,CAAS;IACjB,QAAQ,CAAS;IACjB,QAAQ,CAA0B;IAE3C,YAAY,UAAyB,EAAE;QACtC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC3D,oEAAoE;QACpE,wEAAwE;QACxE,kDAAkD;QAClD,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,MAAM,IAAI,cAAc,CAAC;gBACxB,OAAO,EACN,oGAAoG;gBACrG,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,GAAG;aACX,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,oBAAoB,CAAC,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAC7F,MAAM,EACN,EAAE,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,IAAI,kBAAkB,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC;IAEO,GAAG,CAAC,IAAY,EAAE,KAA+B;QACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;QAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACvB,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,UAA0B,EAAE;QACpD,MAAM,OAAO,GAA2B;YACvC,aAAa,EAAE,UAAU,IAAI,CAAC,OAAO,EAAE;YACvC,CAAC,aAAa,CAAC,EAAE,SAAS;SAC1B,CAAC;QACF,IAAI,IAA0B,CAAC;QAC/B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,GAAG,OAAO,CAAC,KAAiB,CAAC;YACjC,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,WAAW,IAAI,0BAA0B,CAAC;QAC7E,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC9C,CAAC;QAED,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACzC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnE,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACJ,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;gBACxD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;gBAC/B,OAAO;gBACP,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;gBACnC,MAAM,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,GAAG,CAAC;YACvC,MAAM,YAAY,CACjB,UAAU,CAAC,MAAM,CAAC,OAAO;gBACxB,CAAC,CAAC,cAAc,IAAI,oBAAoB,IAAI,CAAC,QAAQ,IAAI;gBACzD,CAAC,CAAC,cAAc,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACnF,GAAG,CACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACV,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,UAA0B,EAAE;QAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,uEAAuE;QACvE,oBAAoB;QACpB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAc,CAAC;QAC7C,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,cAAc,CAAC;gBACxB,OAAO,EAAE,sBAAsB,IAAI,UAAU,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBACjE,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,GAAG,CAAI,IAAY,EAAE,KAA+B;QACnD,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAI,IAAY,EAAE,IAAc,EAAE,KAA+B;QACpE,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,KAAK,CAAI,IAAY,EAAE,IAAc;QACpC,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,CAAI,IAAY,EAAE,KAA+B;QACtD,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;CACD;AAED,sEAAsE;AACtE,KAAK,UAAU,OAAO,CAAC,GAAa,EAAE,IAAY;IACjD,IAAI,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,SAAS,IAAI,EAAE,CAAC;IAC3C,IAAI,IAAI,GAAG,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;IAChC,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,EAAE,CAAC;YACV,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwD,CAAC;gBACvF,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC/D,IAAI,MAAM,CAAC,IAAI;oBAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9B,CAAC;QACF,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,wEAAwE;IACzE,CAAC;IAED,MAAM,gBAAgB,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;IAE/D,OAAO,IAAI,cAAc,CAAC;QACzB,OAAO;QACP,IAAI;QACJ,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;QAC9E,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;KAC7C,CAAC,CAAC;AACJ,CAAC","sourcesContent":["// The transport. Everything else in this SDK is objects and method names.\n\nimport { AgentNavaError, networkError } from './errors.ts';\nimport { SDK_VERSION } from './version.ts';\n\nexport interface ClientOptions {\n\t/** Defaults to `AGENTNAVA_API_KEY` from the environment. */\n\tapiKey?: string;\n\t/** Defaults to `https://api.agentnava.com`. */\n\tbaseURL?: string;\n\t/** Per-request timeout in milliseconds. Default 60_000. */\n\ttimeout?: number;\n\t/** Swap the fetch implementation, for tests or a proxy. */\n\tfetch?: typeof globalThis.fetch;\n}\n\n/** Tells the server which SDK is calling, on every request.\n *\n *  WHY A CUSTOM HEADER AND NOT `User-Agent`. `User-Agent` is on the fetch\n *  spec's forbidden-header list, so a browser DROPS it SILENTLY: the request\n *  still goes, the header just is not there, and the server sees a client of\n *  unknown age with nothing to indicate anything went wrong. A header we name\n *  ourselves is sent by every runtime the same way. `X-AgentNava-User-Id`\n *  already exists on this API, so the shape is not new.\n *\n *  WHAT IT IS FOR. Not gating: the server does not refuse an old client on\n *  sight. It is so the question \"who would break if we removed this field\"\n *  has an answer that is a query rather than a guess. Once the package is on\n *  a public registry, a customer can pin 0.25.0 and still be calling in three\n *  years, and we have no other way to know they exist.\n *\n *  The runtime note is best-effort and deliberately coarse. It separates Node\n *  from Bun from a browser, which is the distinction that explains most\n *  support questions, and carries nothing identifying. */\nconst CLIENT_HEADER = 'X-AgentNava-Client';\n\nfunction runtimeTag(): string {\n\tconst g = globalThis as {\n\t\tBun?: { version?: string };\n\t\tprocess?: { versions?: { node?: string } };\n\t\tdocument?: unknown;\n\t};\n\tif (g.Bun?.version) return `bun/${g.Bun.version}`;\n\tif (g.process?.versions?.node) return `node/${g.process.versions.node}`;\n\tif (g.document !== undefined) return 'browser';\n\treturn 'unknown';\n}\n\n/** `agentnava-sdk/0.25.0 (node/22.20.0)`. Computed once: it cannot change\n *  within a process, and rebuilding it per request buys nothing. */\nconst CLIENT_ID = `agentnava-sdk/${SDK_VERSION} (${runtimeTag()})`;\n\nconst DEFAULT_BASE_URL = 'https://api.agentnava.com';\nconst DEFAULT_TIMEOUT_MS = 60_000;\n\n/** Read a variable without assuming which runtime we are on.\n *\n *  This SDK runs in Node, Bun, Deno, Workers and a browser bundle. `process` is\n *  absent in several of those and touching it throws rather than returning\n *  undefined, so the access is guarded rather than defaulted. */\nfunction readEnv(name: string): string | undefined {\n\ttry {\n\t\tconst proc = (globalThis as { process?: { env?: Record<string, string | undefined> } }).process;\n\t\treturn proc?.env?.[name];\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nexport interface RequestOptions {\n\tmethod?: 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';\n\t/** Sent as a JSON body. Mutually exclusive with `bytes`. */\n\tbody?: unknown;\n\t/** Sent as the raw body, for file writes. Mutually exclusive with `body`. */\n\tbytes?: ArrayBuffer | Uint8Array;\n\tcontentType?: string;\n\tquery?: Record<string, string | number | boolean | undefined>;\n\t/* THERE IS DELIBERATELY NO `raw` FLAG.\n\t *\n\t * One was declared here, described as \"return the Response untouched\", and\n\t * read by nothing. `request` parses JSON unconditionally, so every caller\n\t * that asked for `raw: true` got a parsed body and then called `.text()` or\n\t * `.arrayBuffer()` on it. `kb.files.text()` and `kb.files.get()` were broken\n\t * for every developer from the day they shipped, and the flag is why: it made\n\t * the call site look correct.\n\t *\n\t * Use `send()` for a Response and `request<T>()` for parsed JSON. Two methods\n\t * that differ by return type cannot be confused the way one method with a\n\t * boolean can. */\n\tsignal?: AbortSignal;\n}\n\nexport class Http {\n\treadonly #apiKey: string;\n\treadonly #baseURL: string;\n\treadonly #timeout: number;\n\treadonly #doFetch: typeof globalThis.fetch;\n\n\tconstructor(options: ClientOptions = {}) {\n\t\tconst key = options.apiKey ?? readEnv('AGENTNAVA_API_KEY');\n\t\t// Thrown at construction, not at the first call. A missing key is a\n\t\t// configuration mistake, and finding it three layers into an async call\n\t\t// stack makes it look like the call was at fault.\n\t\tif (!key) {\n\t\t\tthrow new AgentNavaError({\n\t\t\t\tmessage:\n\t\t\t\t\t'No API key. Pass `AgentNava.getWorkspace({ apiKey })` or set AGENTNAVA_API_KEY in the environment.',\n\t\t\t\tcode: 'no_api_key',\n\t\t\t\tstatus: 401,\n\t\t\t});\n\t\t}\n\t\tthis.#apiKey = key;\n\t\tthis.#baseURL = (options.baseURL ?? readEnv('AGENTNAVA_BASE_URL') ?? DEFAULT_BASE_URL).replace(\n\t\t\t/\\/+$/,\n\t\t\t'',\n\t\t);\n\t\tthis.#timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;\n\t\tthis.#doFetch = options.fetch ?? globalThis.fetch.bind(globalThis);\n\t}\n\n\tprivate url(path: string, query?: RequestOptions['query']): string {\n\t\tconst url = new URL(this.#baseURL + path);\n\t\tfor (const [k, v] of Object.entries(query ?? {})) {\n\t\t\tif (v !== undefined) url.searchParams.set(k, String(v));\n\t\t}\n\t\treturn url.toString();\n\t}\n\n\t/** Make the request and hand back the raw Response, errors already thrown. */\n\tasync send(path: string, options: RequestOptions = {}): Promise<Response> {\n\t\tconst headers: Record<string, string> = {\n\t\t\tAuthorization: `Bearer ${this.#apiKey}`,\n\t\t\t[CLIENT_HEADER]: CLIENT_ID,\n\t\t};\n\t\tlet body: BodyInit | undefined;\n\t\tif (options.bytes !== undefined) {\n\t\t\tbody = options.bytes as BodyInit;\n\t\t\theaders['Content-Type'] = options.contentType ?? 'application/octet-stream';\n\t\t} else if (options.body !== undefined) {\n\t\t\tbody = JSON.stringify(options.body);\n\t\t\theaders['Content-Type'] = 'application/json';\n\t\t}\n\n\t\t// The caller's signal and our timeout both have to be able to abort, and\n\t\t// AbortSignal.any is too new to rely on across every runtime this ships to.\n\t\tconst controller = new AbortController();\n\t\tconst timer = setTimeout(() => controller.abort(), this.#timeout);\n\t\tconst onAbort = () => controller.abort();\n\t\toptions.signal?.addEventListener('abort', onAbort, { once: true });\n\n\t\tlet res: Response;\n\t\ttry {\n\t\t\tres = await this.#doFetch(this.url(path, options.query), {\n\t\t\t\tmethod: options.method ?? 'GET',\n\t\t\t\theaders,\n\t\t\t\t...(body !== undefined && { body }),\n\t\t\t\tsignal: controller.signal,\n\t\t\t});\n\t\t} catch (err) {\n\t\t\tif (options.signal?.aborted) throw err;\n\t\t\tthrow networkError(\n\t\t\t\tcontroller.signal.aborted\n\t\t\t\t\t? `Request to ${path} timed out after ${this.#timeout}ms`\n\t\t\t\t\t: `Request to ${path} failed: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t\terr,\n\t\t\t);\n\t\t} finally {\n\t\t\tclearTimeout(timer);\n\t\t\toptions.signal?.removeEventListener('abort', onAbort);\n\t\t}\n\n\t\tif (!res.ok) throw await toError(res, path);\n\t\treturn res;\n\t}\n\n\tasync request<T>(path: string, options: RequestOptions = {}): Promise<T> {\n\t\tconst res = await this.send(path, options);\n\t\t// 204, and any other empty body, is a successful nothing rather than a\n\t\t// JSON parse error.\n\t\tif (res.status === 204) return undefined as T;\n\t\tconst text = await res.text();\n\t\tif (text.length === 0) return undefined as T;\n\t\ttry {\n\t\t\treturn JSON.parse(text) as T;\n\t\t} catch {\n\t\t\tthrow new AgentNavaError({\n\t\t\t\tmessage: `Expected JSON from ${path}, got: ${text.slice(0, 200)}`,\n\t\t\t\tcode: 'bad_response',\n\t\t\t\tstatus: res.status,\n\t\t\t});\n\t\t}\n\t}\n\n\tget<T>(path: string, query?: RequestOptions['query']): Promise<T> {\n\t\treturn this.request<T>(path, { method: 'GET', ...(query && { query }) });\n\t}\n\tpost<T>(path: string, body?: unknown, query?: RequestOptions['query']): Promise<T> {\n\t\treturn this.request<T>(path, { method: 'POST', body, ...(query && { query }) });\n\t}\n\tpatch<T>(path: string, body?: unknown): Promise<T> {\n\t\treturn this.request<T>(path, { method: 'PATCH', body });\n\t}\n\tdelete<T>(path: string, query?: RequestOptions['query']): Promise<T> {\n\t\treturn this.request<T>(path, { method: 'DELETE', ...(query && { query }) });\n\t}\n}\n\n/** Turn a failed Response into the one error type this SDK throws. */\nasync function toError(res: Response, path: string): Promise<AgentNavaError> {\n\tlet message = `${res.status} from ${path}`;\n\tlet code = `http_${res.status}`;\n\ttry {\n\t\tconst text = await res.text();\n\t\tif (text) {\n\t\t\ttry {\n\t\t\t\tconst parsed = JSON.parse(text) as { message?: string; code?: string; error?: string };\n\t\t\t\tmessage = parsed.message ?? parsed.error ?? text.slice(0, 300);\n\t\t\t\tif (parsed.code) code = parsed.code;\n\t\t\t} catch {\n\t\t\t\tmessage = text.slice(0, 300);\n\t\t\t}\n\t\t}\n\t} catch {\n\t\t// A body we cannot read is not worth failing over; the status still is.\n\t}\n\n\tconst retryAfterHeader = res.headers.get('retry-after');\n\tconst retryAfter = retryAfterHeader ? Number(retryAfterHeader) : undefined;\n\tconst requestId = res.headers.get('x-request-id') ?? undefined;\n\n\treturn new AgentNavaError({\n\t\tmessage,\n\t\tcode,\n\t\tstatus: res.status,\n\t\t...(retryAfter !== undefined && Number.isFinite(retryAfter) && { retryAfter }),\n\t\t...(requestId !== undefined && { requestId }),\n\t});\n}\n"]}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAa3C;;;;;;;;;;;;;;;;;0DAiB0D;AAC1D,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAE3C,SAAS,UAAU;IAClB,MAAM,CAAC,GAAG,UAIT,CAAC;IACF,IAAI,CAAC,CAAC,GAAG,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAClD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI;QAAE,OAAO,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/C,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;oEACoE;AACpE,MAAM,SAAS,GAAG,iBAAiB,WAAW,KAAK,UAAU,EAAE,GAAG,CAAC;AAEnE,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AACrD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;iEAIiE;AACjE,SAAS,OAAO,CAAC,IAAY;IAC5B,IAAI,CAAC;QACJ,MAAM,IAAI,GAAI,UAAyE,CAAC,OAAO,CAAC;QAChG,OAAO,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AA2BD,MAAM,OAAO,IAAI;IACP,OAAO,CAAS;IAChB,QAAQ,CAAS;IACjB,QAAQ,CAAS;IACjB,QAAQ,CAA0B;IAE3C,YAAY,UAAyB,EAAE;QACtC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC3D,oEAAoE;QACpE,wEAAwE;QACxE,kDAAkD;QAClD,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,MAAM,IAAI,cAAc,CAAC;gBACxB,OAAO,EACN,oGAAoG;gBACrG,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,GAAG;aACX,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,oBAAoB,CAAC,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAC7F,MAAM,EACN,EAAE,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,IAAI,kBAAkB,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC;IAEO,GAAG,CAAC,IAAY,EAAE,KAA+B;QACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;QAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACvB,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,UAA0B,EAAE;QACpD,MAAM,OAAO,GAA2B;YACvC,aAAa,EAAE,UAAU,IAAI,CAAC,OAAO,EAAE;YACvC,CAAC,aAAa,CAAC,EAAE,SAAS;SAC1B,CAAC;QACF,IAAI,OAAO,CAAC,cAAc;YAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;QAChF,IAAI,IAA0B,CAAC;QAC/B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,GAAG,OAAO,CAAC,KAAiB,CAAC;YACjC,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,WAAW,IAAI,0BAA0B,CAAC;QAC7E,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC9C,CAAC;QAED,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClF,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;;YAClC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAExE,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACJ,qEAAqE;YACrE,+DAA+D;YAC/D,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;YAC9D,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;gBACxD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;gBAC/B,OAAO;gBACP,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;gBACnC,MAAM,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,aAAa,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,GAAG,CAAC;YACvC,MAAM,OAAO,GAAG,YAAY,CAC3B,UAAU,CAAC,MAAM,CAAC,OAAO;gBACxB,CAAC,CAAC,cAAc,IAAI,oBAAoB,IAAI,CAAC,QAAQ,IAAI;gBACzD,CAAC,CAAC,cAAc,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACnF,GAAG,CACH,CAAC;YACF,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC5B,MAAM,IAAI,cAAc,CAAC;oBACxB,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,qCAAqC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE;oBACnH,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;iBAChC,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,CAAC;QACf,CAAC;gBAAS,CAAC;YACV,YAAY,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,qEAAqE;QACrE,sEAAsE;QACtE,GAAG,GAAG,qBAAqB,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QACpE,OAAO,GAAG,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,UAA0B,EAAE;QAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,uEAAuE;QACvE,oBAAoB;QACpB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAc,CAAC;QAC7C,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,cAAc,CAAC;gBACxB,OAAO,EAAE,sBAAsB,IAAI,UAAU,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBACjE,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,GAAG,CAAI,IAAY,EAAE,KAA+B;QACnD,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAI,IAAY,EAAE,IAAc,EAAE,KAA+B;QACpE,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,GAAG,CAAI,IAAY,EAAE,IAAc;QAClC,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,CAAI,IAAY,EAAE,IAAc;QACpC,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,CAAI,IAAY,EAAE,KAA+B;QACtD,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;CACD;AAED;;+EAE+E;AAC/E,SAAS,qBAAqB,CAC7B,QAAkB,EAClB,aAAyB,EACzB,UAAsC;IAEtC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpB,aAAa,EAAE,CAAC;QAChB,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,OAAO,GAAG,GAAG,EAAE;QACpB,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,aAAa,EAAE,CAAC;QAChB,wEAAwE;QACxE,uDAAuD;QACvD,IAAI,CAAC;YAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;IACpF,CAAC,CAAC;IACF,OAAO,IAAI,QAAQ,CAAC,IAAI,cAAc,CAAa;QAClD,KAAK,CAAC,IAAI,CAAC,UAAU;YACpB,IAAI,CAAC;gBACJ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,QAAQ;oBAAE,OAAO;gBACrB,IAAI,IAAI,EAAE,CAAC;oBACV,QAAQ,GAAG,IAAI,CAAC;oBAChB,OAAO,EAAE,CAAC;oBACV,UAAU,CAAC,KAAK,EAAE,CAAC;gBACpB,CAAC;;oBAAM,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,OAAO,EAAE,CAAC;gBACV,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC;QACF,CAAC;QACD,MAAM,CAAC,MAAM;YACZ,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,sEAAsE;YACtE,mEAAmE;YACnE,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,IAAI,CAAC;gBACJ,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC,CAAC,4DAA4D,CAAC,CAAC;oBAChE,CAAC;gBAAC,OAAO,EAAE,CAAC;YAAC,CAAC;QACvB,CAAC;KACD,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,EAAE;QACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;KACzB,CAAC,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,KAAK,UAAU,OAAO,CAAC,GAAa,EAAE,IAAY,EAAE,cAAuB;IAC1E,IAAI,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,SAAS,IAAI,EAAE,CAAC;IAC3C,IAAI,IAAI,GAAG,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;IAChC,IAAI,SAA8B,CAAC;IACnC,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,EAAE,CAAC;YACV,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6E,CAAC;gBAC5G,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC/D,IAAI,MAAM,CAAC,IAAI;oBAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACpC,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK;oBAAE,SAAS,GAAG,KAAK,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9B,CAAC;QACF,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,wEAAwE;IACzE,CAAC;IAED,MAAM,gBAAgB,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;IAE/D,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC;QAClC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,mBAAmB,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO;QAC7F,IAAI;QACJ,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;QAC9E,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;KAC7C,CAAC,CAAC;IACH,2EAA2E;IAC3E,2EAA2E;IAC3E,IAAI,SAAS,KAAK,KAAK,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;QAAE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAClJ,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,cAAsB;IACvE,OAAO,mGAAmG,IAAI,kDAAkD,cAAc,2BAA2B,CAAC;AAC3M,CAAC","sourcesContent":["// The transport. Everything else in this SDK is objects and method names.\n\nimport { AgentNavaError, networkError } from './errors.ts';\nimport { SDK_VERSION } from './version.ts';\n\nexport interface ClientOptions {\n\t/** Defaults to `AGENTNAVA_API_KEY` from the environment. */\n\tapiKey?: string;\n\t/** Defaults to `https://api.agentnava.com`. */\n\tbaseURL?: string;\n\t/** Per-request timeout in milliseconds. Default 60_000. */\n\ttimeout?: number;\n\t/** Swap the fetch implementation, for tests or a proxy. */\n\tfetch?: typeof globalThis.fetch;\n}\n\n/** Tells the server which SDK is calling, on every request.\n *\n *  WHY A CUSTOM HEADER AND NOT `User-Agent`. `User-Agent` is on the fetch\n *  spec's forbidden-header list, so a browser DROPS it SILENTLY: the request\n *  still goes, the header just is not there, and the server sees a client of\n *  unknown age with nothing to indicate anything went wrong. A header we name\n *  ourselves is sent by every runtime the same way. `X-AgentNava-User-Id`\n *  already exists on this API, so the shape is not new.\n *\n *  WHAT IT IS FOR. Not gating: the server does not refuse an old client on\n *  sight. It is so the question \"who would break if we removed this field\"\n *  has an answer that is a query rather than a guess. Once the package is on\n *  a public registry, a customer can pin 0.25.0 and still be calling in three\n *  years, and we have no other way to know they exist.\n *\n *  The runtime note is best-effort and deliberately coarse. It separates Node\n *  from Bun from a browser, which is the distinction that explains most\n *  support questions, and carries nothing identifying. */\nconst CLIENT_HEADER = 'X-AgentNava-Client';\n\nfunction runtimeTag(): string {\n\tconst g = globalThis as {\n\t\tBun?: { version?: string };\n\t\tprocess?: { versions?: { node?: string } };\n\t\tdocument?: unknown;\n\t};\n\tif (g.Bun?.version) return `bun/${g.Bun.version}`;\n\tif (g.process?.versions?.node) return `node/${g.process.versions.node}`;\n\tif (g.document !== undefined) return 'browser';\n\treturn 'unknown';\n}\n\n/** `agentnava-sdk/0.25.0 (node/22.20.0)`. Computed once: it cannot change\n *  within a process, and rebuilding it per request buys nothing. */\nconst CLIENT_ID = `agentnava-sdk/${SDK_VERSION} (${runtimeTag()})`;\n\nconst DEFAULT_BASE_URL = 'https://api.agentnava.com';\nconst DEFAULT_TIMEOUT_MS = 60_000;\n\n/** Read a variable without assuming which runtime we are on.\n *\n *  This SDK runs in Node, Bun, Deno, Workers and a browser bundle. `process` is\n *  absent in several of those and touching it throws rather than returning\n *  undefined, so the access is guarded rather than defaulted. */\nfunction readEnv(name: string): string | undefined {\n\ttry {\n\t\tconst proc = (globalThis as { process?: { env?: Record<string, string | undefined> } }).process;\n\t\treturn proc?.env?.[name];\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nexport interface RequestOptions {\n\tmethod?: 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';\n\t/** Internal turn submission identity, minted once by Conversation.ask. */\n\tidempotencyKey?: string;\n\t/** Sent as a JSON body. Mutually exclusive with `bytes`. */\n\tbody?: unknown;\n\t/** Sent as the raw body, for file writes. Mutually exclusive with `body`. */\n\tbytes?: ArrayBuffer | Uint8Array;\n\tcontentType?: string;\n\tquery?: Record<string, string | number | boolean | undefined>;\n\t/* THERE IS DELIBERATELY NO `raw` FLAG.\n\t *\n\t * One was declared here, described as \"return the Response untouched\", and\n\t * read by nothing. `request` parses JSON unconditionally, so every caller\n\t * that asked for `raw: true` got a parsed body and then called `.text()` or\n\t * `.arrayBuffer()` on it. `kb.files.text()` and `kb.files.get()` were broken\n\t * for every developer from the day they shipped, and the flag is why: it made\n\t * the call site look correct.\n\t *\n\t * Use `send()` for a Response and `request<T>()` for parsed JSON. Two methods\n\t * that differ by return type cannot be confused the way one method with a\n\t * boolean can. */\n\tsignal?: AbortSignal;\n}\n\nexport class Http {\n\treadonly #apiKey: string;\n\treadonly #baseURL: string;\n\treadonly #timeout: number;\n\treadonly #doFetch: typeof globalThis.fetch;\n\n\tconstructor(options: ClientOptions = {}) {\n\t\tconst key = options.apiKey ?? readEnv('AGENTNAVA_API_KEY');\n\t\t// Thrown at construction, not at the first call. A missing key is a\n\t\t// configuration mistake, and finding it three layers into an async call\n\t\t// stack makes it look like the call was at fault.\n\t\tif (!key) {\n\t\t\tthrow new AgentNavaError({\n\t\t\t\tmessage:\n\t\t\t\t\t'No API key. Pass `AgentNava.getWorkspace({ apiKey })` or set AGENTNAVA_API_KEY in the environment.',\n\t\t\t\tcode: 'no_api_key',\n\t\t\t\tstatus: 401,\n\t\t\t});\n\t\t}\n\t\tthis.#apiKey = key;\n\t\tthis.#baseURL = (options.baseURL ?? readEnv('AGENTNAVA_BASE_URL') ?? DEFAULT_BASE_URL).replace(\n\t\t\t/\\/+$/,\n\t\t\t'',\n\t\t);\n\t\tthis.#timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;\n\t\tthis.#doFetch = options.fetch ?? globalThis.fetch.bind(globalThis);\n\t}\n\n\tprivate url(path: string, query?: RequestOptions['query']): string {\n\t\tconst url = new URL(this.#baseURL + path);\n\t\tfor (const [k, v] of Object.entries(query ?? {})) {\n\t\t\tif (v !== undefined) url.searchParams.set(k, String(v));\n\t\t}\n\t\treturn url.toString();\n\t}\n\n\t/** Make the request and hand back the raw Response, errors already thrown. */\n\tasync send(path: string, options: RequestOptions = {}): Promise<Response> {\n\t\tconst headers: Record<string, string> = {\n\t\t\tAuthorization: `Bearer ${this.#apiKey}`,\n\t\t\t[CLIENT_HEADER]: CLIENT_ID,\n\t\t};\n\t\tif (options.idempotencyKey) headers['Idempotency-Key'] = options.idempotencyKey;\n\t\tlet body: BodyInit | undefined;\n\t\tif (options.bytes !== undefined) {\n\t\t\tbody = options.bytes as BodyInit;\n\t\t\theaders['Content-Type'] = options.contentType ?? 'application/octet-stream';\n\t\t} else if (options.body !== undefined) {\n\t\t\tbody = JSON.stringify(options.body);\n\t\t\theaders['Content-Type'] = 'application/json';\n\t\t}\n\n\t\t// The caller's signal and our timeout both have to be able to abort, and\n\t\t// AbortSignal.any is too new to rely on across every runtime this ships to.\n\t\tconst controller = new AbortController();\n\t\tconst timer = setTimeout(() => controller.abort(), this.#timeout);\n\t\tconst onAbort = () => controller.abort(options.signal?.reason);\n\t\tconst releaseSignal = () => options.signal?.removeEventListener('abort', onAbort);\n\t\tif (options.signal?.aborted) onAbort();\n\t\telse options.signal?.addEventListener('abort', onAbort, { once: true });\n\n\t\tlet res: Response;\n\t\ttry {\n\t\t\t// Do not invoke even a custom fetch for a request already cancelled.\n\t\t\t// Such a fetch may not itself honor an already-aborted signal.\n\t\t\tif (controller.signal.aborted) throw controller.signal.reason;\n\t\t\tres = await this.#doFetch(this.url(path, options.query), {\n\t\t\t\tmethod: options.method ?? 'GET',\n\t\t\t\theaders,\n\t\t\t\t...(body !== undefined && { body }),\n\t\t\t\tsignal: controller.signal,\n\t\t\t});\n\t\t} catch (err) {\n\t\t\treleaseSignal();\n\t\t\tif (options.signal?.aborted) throw err;\n\t\t\tconst failure = networkError(\n\t\t\t\tcontroller.signal.aborted\n\t\t\t\t\t? `Request to ${path} timed out after ${this.#timeout}ms`\n\t\t\t\t\t: `Request to ${path} failed: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t\terr,\n\t\t\t);\n\t\t\tif (options.idempotencyKey) {\n\t\t\t\tthrow new AgentNavaError({\n\t\t\t\t\tmessage: `${failure.message} The turn may have been accepted. ${turnRecoveryMessage(path, options.idempotencyKey)}`,\n\t\t\t\t\tcode: 'network_error', status: 0,\n\t\t\t\t});\n\t\t\t}\n\t\t\tthrow failure;\n\t\t} finally {\n\t\t\tclearTimeout(timer);\n\t\t}\n\n\t\t// Headers end the connection timeout, not the caller's right to stop\n\t\t// reading. Keep forwarding cancellation for the lifetime of the body.\n\t\tres = responseUntilConsumed(res, releaseSignal, (reason) => controller.abort(reason));\n\t\tif (!res.ok) throw await toError(res, path, options.idempotencyKey);\n\t\treturn res;\n\t}\n\n\tasync request<T>(path: string, options: RequestOptions = {}): Promise<T> {\n\t\tconst res = await this.send(path, options);\n\t\t// 204, and any other empty body, is a successful nothing rather than a\n\t\t// JSON parse error.\n\t\tif (res.status === 204) return undefined as T;\n\t\tconst text = await res.text();\n\t\tif (text.length === 0) return undefined as T;\n\t\ttry {\n\t\t\treturn JSON.parse(text) as T;\n\t\t} catch {\n\t\t\tthrow new AgentNavaError({\n\t\t\t\tmessage: `Expected JSON from ${path}, got: ${text.slice(0, 200)}`,\n\t\t\t\tcode: 'bad_response',\n\t\t\t\tstatus: res.status,\n\t\t\t});\n\t\t}\n\t}\n\n\tget<T>(path: string, query?: RequestOptions['query']): Promise<T> {\n\t\treturn this.request<T>(path, { method: 'GET', ...(query && { query }) });\n\t}\n\tpost<T>(path: string, body?: unknown, query?: RequestOptions['query']): Promise<T> {\n\t\treturn this.request<T>(path, { method: 'POST', body, ...(query && { query }) });\n\t}\n\tput<T>(path: string, body?: unknown): Promise<T> {\n\t\treturn this.request<T>(path, { method: 'PUT', body });\n\t}\n\tpatch<T>(path: string, body?: unknown): Promise<T> {\n\t\treturn this.request<T>(path, { method: 'PATCH', body });\n\t}\n\tdelete<T>(path: string, query?: RequestOptions['query']): Promise<T> {\n\t\treturn this.request<T>(path, { method: 'DELETE', ...(query && { query }) });\n\t}\n}\n\n/** Dispose the caller's abort listener after EOF, failure or cancellation.\n * Http.send is internal: callers consume status, headers and body, so wrapping\n * the body preserves the values the SDK exposes without buffering a stream. */\nfunction responseUntilConsumed(\n\tresponse: Response,\n\treleaseSignal: () => void,\n\tabortFetch: (reason?: unknown) => void,\n): Response {\n\tif (!response.body) {\n\t\treleaseSignal();\n\t\treturn response;\n\t}\n\tconst reader = response.body.getReader();\n\tlet finished = false;\n\tlet released = false;\n\tconst release = () => {\n\t\tif (released) return;\n\t\treleased = true;\n\t\treleaseSignal();\n\t\t// Cancellation settles pending reads before lock release, even when the\n\t\t// underlying source's cleanup promise has not settled.\n\t\ttry { reader.releaseLock(); } catch { /* cleanup preserves the original result */ }\n\t};\n\treturn new Response(new ReadableStream<Uint8Array>({\n\t\tasync pull(controller) {\n\t\t\ttry {\n\t\t\t\tconst { done, value } = await reader.read();\n\t\t\t\tif (finished) return;\n\t\t\t\tif (done) {\n\t\t\t\t\tfinished = true;\n\t\t\t\t\trelease();\n\t\t\t\t\tcontroller.close();\n\t\t\t\t} else controller.enqueue(value);\n\t\t\t} catch (error) {\n\t\t\t\tif (finished) return;\n\t\t\t\tfinished = true;\n\t\t\t\trelease();\n\t\t\t\tcontroller.error(error);\n\t\t\t}\n\t\t},\n\t\tcancel(reason) {\n\t\t\tif (finished) return;\n\t\t\tfinished = true;\n\t\t\t// Bun can leave a real fetch socket open after reader.cancel(). Abort\n\t\t\t// the transport as well, including requests with no caller signal.\n\t\t\tabortFetch(reason);\n\t\t\ttry {\n\t\t\t\tvoid reader.cancel(reason).catch(() => {});\n\t\t\t} catch { /* a custom reader may throw synchronously during cleanup */ }\n\t\t\tfinally { release(); }\n\t\t},\n\t}, { highWaterMark: 0 }), {\n\t\tstatus: response.status,\n\t\tstatusText: response.statusText,\n\t\theaders: response.headers,\n\t});\n}\n\n/** Turn a failed Response into the one error type this SDK throws. */\nasync function toError(res: Response, path: string, idempotencyKey?: string): Promise<AgentNavaError> {\n\tlet message = `${res.status} from ${path}`;\n\tlet code = `http_${res.status}`;\n\tlet retryable: boolean | undefined;\n\ttry {\n\t\tconst text = await res.text();\n\t\tif (text) {\n\t\t\ttry {\n\t\t\t\tconst parsed = JSON.parse(text) as { message?: string; code?: string; error?: string; retryable?: boolean };\n\t\t\t\tmessage = parsed.message ?? parsed.error ?? text.slice(0, 300);\n\t\t\t\tif (parsed.code) code = parsed.code;\n\t\t\t\tif (parsed.retryable === false) retryable = false;\n\t\t\t} catch {\n\t\t\t\tmessage = text.slice(0, 300);\n\t\t\t}\n\t\t}\n\t} catch {\n\t\t// A body we cannot read is not worth failing over; the status still is.\n\t}\n\n\tconst retryAfterHeader = res.headers.get('retry-after');\n\tconst retryAfter = retryAfterHeader ? Number(retryAfterHeader) : undefined;\n\tconst requestId = res.headers.get('x-request-id') ?? undefined;\n\n\tconst failure = new AgentNavaError({\n\t\tmessage: idempotencyKey ? `${message} ${turnRecoveryMessage(path, idempotencyKey)}` : message,\n\t\tcode,\n\t\tstatus: res.status,\n\t\t...(retryAfter !== undefined && Number.isFinite(retryAfter) && { retryAfter }),\n\t\t...(requestId !== undefined && { requestId }),\n\t});\n\t// An uncertain handoff can be HTTP 503 while already owning accepted work.\n\t// Respect the server's refusal to retry instead of creating a second turn.\n\tif (retryable === false || (idempotencyKey && res.status >= 500)) Object.defineProperty(failure, 'retryable', { value: false, enumerable: true });\n\treturn failure;\n}\n\n/** Kept in errors because a dropped response may not have returned a turn ID. */\nexport function turnRecoveryMessage(path: string, idempotencyKey: string): string {\n\treturn `Check the conversation before starting another turn. To check status, POST the original body to ${path} with the same authorization, Idempotency-Key: ${idempotencyKey} and X-Turn-Status: true.`;\n}\n"]}

package/import-tools.d.ts

@@ -14,7 +14,7 @@ export type ImportWarningKind =
 /** Two endpoints produced the same tool name. */
  | 'name-collision'
 /** A parameter was renamed to something the API will accept. */
- | 'param-renamed';
+ | 'param-renamed' | 'unsupported-operation' | 'security-choice';
 export interface ImportWarning {
     kind: ImportWarningKind;
     /** The tool it concerns, when it concerns one. */
@@ -136,25 +136,54 @@ export interface PostmanCollection {
  * alternative is a URL with a placeholder nothing resolves.
  */
 export declare function fromPostman(collection: PostmanCollection, options?: ImportOptions): ImportedTools;
+interface OpenApiSchema {
+    [key: string]: unknown;
+    $ref?: string;
+    type?: string | string[];
+    description?: string;
+    enum?: (string | number | boolean | null)[];
+    required?: string[];
+    properties?: Record<string, OpenApiSchema>;
+    items?: OpenApiSchema;
+    nullable?: boolean;
+    additionalProperties?: boolean | OpenApiSchema;
+    allOf?: OpenApiSchema[];
+}
 interface OpenApiParam {
+    $ref?: string;
     name?: string;
     in?: string;
     required?: boolean;
     description?: string;
-    schema?: {
-        type?: string;
-        enum?: (string | number)[];
-    };
+    schema?: OpenApiSchema;
+    type?: string;
+    enum?: (string | number | boolean | null)[];
+    style?: string;
+    explode?: boolean;
+}
+interface OpenApiBody {
+    $ref?: string;
+    required?: boolean;
+    content?: Record<string, {
+        schema?: OpenApiSchema;
+    }>;
 }
 interface OpenApiOperation {
     operationId?: string;
     summary?: string;
     description?: string;
     parameters?: OpenApiParam[];
-    requestBody?: {
-        content?: Record<string, unknown>;
-    };
-    security?: unknown[];
+    requestBody?: OpenApiBody;
+    security?: Record<string, string[]>[];
+}
+type OpenApiPath = {
+    parameters?: OpenApiParam[];
+} & Partial<Record<'get' | 'post' | 'put' | 'delete' | 'patch', OpenApiOperation>>;
+interface SecurityScheme {
+    type?: string;
+    scheme?: string;
+    name?: string;
+    in?: string;
 }
 export interface OpenApiDocument {
     openapi?: string;
@@ -168,33 +197,19 @@ export interface OpenApiDocument {
     host?: string;
     basePath?: string;
     schemes?: string[];
-    paths?: Record<string, Record<string, OpenApiOperation>>;
+    paths?: Record<string, OpenApiPath>;
     components?: {
-        securitySchemes?: Record<string, {
-            type?: string;
-            scheme?: string;
-            name?: string;
-            in?: string;
-        }>;
+        securitySchemes?: Record<string, SecurityScheme>;
+        schemas?: Record<string, OpenApiSchema>;
+        parameters?: Record<string, OpenApiParam>;
+        requestBodies?: Record<string, OpenApiBody>;
     };
-    securityDefinitions?: Record<string, {
-        type?: string;
-        name?: string;
-        in?: string;
-    }>;
-    security?: unknown[];
+    definitions?: Record<string, OpenApiSchema>;
+    securityDefinitions?: Record<string, SecurityScheme>;
+    security?: Record<string, string[]>[];
 }
-/**
- * Draft tools from an OpenAPI 3 or Swagger 2 document.
- *
- * WHAT THIS GIVES THAT POSTMAN DOES NOT: real parameter types and required
- * flags, which is exactly the shape `HttpToolParam` wants, and an enum where the
- * document declares one. FastAPI publishes this at `/openapi.json` without
- * anybody writing it, so for a FastAPI shop this is usually the richer source.
- *
- * WHAT IT STILL DOES NOT GIVE: a description a model can choose on. `summary`
- * is written for a developer reading a reference. Read the warnings.
- */
+/** Draft supported OpenAPI/Swagger requests; authentication follows each
+ * operation's security requirement, including AND, alternatives and security:[]. */
 export declare function fromOpenApi(doc: OpenApiDocument, options?: ImportOptions): ImportedTools;
 /**
  * Fetch an OpenAPI document and draft tools from it.