@corti/sdk 0.10.1 → 1.0.0-alpha

package/dist/esm/auth/OAuthAuthProvider.mjs

@@ -0,0 +1,239 @@
+// This file was auto-generated by Fern from our API Definition.
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import * as core from "../core/index.mjs";
+import { CortiAuth } from "../custom/CortiAuth.mjs";
+import { OAuthAuthCodeAuthProvider } from "../custom/OAuthAuthCodeAuthProvider.mjs";
+import { OAuthPkceAuthProvider } from "../custom/OAuthPkceAuthProvider.mjs";
+import { OAuthRopcAuthProvider } from "../custom/OAuthRopcAuthProvider.mjs";
+import { BUFFER_IN_MINUTES, CLIENT_ID_PARAM, CLIENT_ID_REQUIRED_ERROR_MESSAGE, CLIENT_SECRET_PARAM, CLIENT_SECRET_REQUIRED_ERROR_MESSAGE, CODE_PARAM, CODE_VERIFIER_PARAM, getExpiresAt, PASSWORD_PARAM, REDIRECT_URI_PARAM, USERNAME_PARAM, } from "../custom/utils/oauthAuthHelpers.mjs";
+import * as errors from "../errors/index.mjs";
+/** Patch: Re-export for consumers; implementation shared with OAuthRopcAuthProvider, OAuthAuthCodeAuthProvider and OAuthPkceAuthProvider. */
+export { BUFFER_IN_MINUTES, CLIENT_ID_PARAM, CLIENT_ID_REQUIRED_ERROR_MESSAGE, CLIENT_SECRET_PARAM, CLIENT_SECRET_REQUIRED_ERROR_MESSAGE, CODE_PARAM, CODE_VERIFIER_PARAM, getExpiresAt, PASSWORD_PARAM, PASSWORD_REQUIRED_ERROR_MESSAGE, REDIRECT_URI_PARAM, USERNAME_PARAM, USERNAME_REQUIRED_ERROR_MESSAGE, } from "../custom/utils/oauthAuthHelpers.mjs";
+const TOKEN_PARAM = "token";
+const TOKEN_PARAM_REQUIRED_ERROR_MESSAGE = `${TOKEN_PARAM} is required. Please provide it in options.`;
+export class OAuthAuthProvider {
+    constructor(options) {
+        this.options = options;
+        /**
+         * Patch: Use CortiAuth (real token endpoint) instead of AuthClient (fake-token).
+         */
+        this.authClient = new CortiAuth(options);
+        this.expiresAt = new Date();
+    }
+    static canCreate(options) {
+        return (options === null || options === void 0 ? void 0 : options[CLIENT_ID_PARAM]) != null && (options === null || options === void 0 ? void 0 : options[CLIENT_SECRET_PARAM]) != null;
+    }
+    clientIdSupplier() {
+        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
+            const supplier = this.options[CLIENT_ID_PARAM];
+            if (supplier == null) {
+                throw new errors.CortiError({
+                    message: CLIENT_ID_REQUIRED_ERROR_MESSAGE,
+                });
+            }
+            return core.EndpointSupplier.get(supplier, { endpointMetadata });
+        });
+    }
+    clientSecretSupplier() {
+        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
+            const supplier = this.options[CLIENT_SECRET_PARAM];
+            if (supplier == null) {
+                throw new errors.CortiError({
+                    message: CLIENT_SECRET_REQUIRED_ERROR_MESSAGE,
+                });
+            }
+            return core.EndpointSupplier.get(supplier, { endpointMetadata });
+        });
+    }
+    getAuthRequest() {
+        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
+            const token = yield this.getToken({ endpointMetadata });
+            return {
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                },
+            };
+        });
+    }
+    getToken() {
+        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata } = {}) {
+            if (this.accessToken && this.expiresAt > new Date()) {
+                return this.accessToken;
+            }
+            // If a refresh is already in progress, return the existing promise
+            if (this.refreshPromise != null) {
+                return this.refreshPromise;
+            }
+            return this.refresh({ endpointMetadata });
+        });
+    }
+    refresh() {
+        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata } = {}) {
+            this.refreshPromise = (() => __awaiter(this, void 0, void 0, function* () {
+                try {
+                    const clientId = yield this.clientIdSupplier({ endpointMetadata });
+                    const clientSecret = yield this.clientSecretSupplier({ endpointMetadata });
+                    const tokenResponse = clientId && this.storedRefreshToken && this.refreshExpiresAt && this.refreshExpiresAt > new Date()
+                        ? yield this.authClient.refreshToken({
+                            clientId,
+                            refreshToken: this.storedRefreshToken,
+                        })
+                        : yield this.authClient.getToken({ clientId, clientSecret });
+                    this.accessToken = tokenResponse.accessToken;
+                    this.expiresAt = getExpiresAt(tokenResponse.expiresIn, BUFFER_IN_MINUTES);
+                    if (tokenResponse.refreshToken) {
+                        this.storedRefreshToken = tokenResponse.refreshToken;
+                        this.refreshExpiresAt = tokenResponse.refreshExpiresIn
+                            ? getExpiresAt(tokenResponse.refreshExpiresIn, BUFFER_IN_MINUTES)
+                            : undefined;
+                    }
+                    return this.accessToken;
+                }
+                finally {
+                    this.refreshPromise = undefined;
+                }
+            }))();
+            return this.refreshPromise;
+        });
+    }
+}
+export class OAuthTokenOverrideAuthProvider {
+    constructor(options) {
+        this._tokenSupplier = options[TOKEN_PARAM];
+        this._clientIdSupplier = options.clientId;
+        // Patch: store custom refresh callback
+        this._refreshAccessToken = options.refreshAccessToken;
+        this.expiresAt = options.expiresIn ? getExpiresAt(options.expiresIn, BUFFER_IN_MINUTES) : undefined;
+        this.storedRefreshToken = options.refreshToken;
+        this.refreshExpiresAt = options.refreshExpiresIn
+            ? getExpiresAt(options.refreshExpiresIn, BUFFER_IN_MINUTES)
+            : undefined;
+        if (options.clientId && options.refreshToken) {
+            this.authClient = new CortiAuth(options);
+        }
+        // Patch: pre-seed token from discovery promise so getAuthRequest doesn't call refreshAccessToken again
+        if (options.initialTokenResponse) {
+            this._seedPromise = options.initialTokenResponse
+                .then((resp) => {
+                this.accessToken = resp.accessToken;
+                this.expiresAt = resp.expiresIn ? getExpiresAt(resp.expiresIn, BUFFER_IN_MINUTES) : undefined;
+                if (resp.refreshToken) {
+                    this.storedRefreshToken = resp.refreshToken;
+                    this.refreshExpiresAt = resp.refreshExpiresIn
+                        ? getExpiresAt(resp.refreshExpiresIn, BUFFER_IN_MINUTES)
+                        : undefined;
+                }
+            })
+                .finally(() => {
+                this._seedPromise = undefined;
+            });
+        }
+    }
+    static canCreate(options) {
+        // Patch: either token or refreshAccessToken is sufficient
+        return (options === null || options === void 0 ? void 0 : options[TOKEN_PARAM]) != null || (options === null || options === void 0 ? void 0 : options.refreshAccessToken) != null;
+    }
+    getAuthRequest() {
+        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
+            // Patch: await seed promise so the initial token from resolveClientOptions is set before checking expiry
+            if (this._seedPromise) {
+                yield this._seedPromise;
+            }
+            const isExpiredOrAbsent = !this.accessToken || (this.expiresAt != null && this.expiresAt <= new Date());
+            // Patch: custom refreshAccessToken takes priority — call it when token is absent or expired
+            if (this._refreshAccessToken && isExpiredOrAbsent) {
+                const result = yield this._refreshAccessToken(this.storedRefreshToken);
+                this.accessToken = result.accessToken;
+                this.expiresAt = result.expiresIn ? getExpiresAt(result.expiresIn, BUFFER_IN_MINUTES) : undefined;
+                if (result.refreshToken) {
+                    this.storedRefreshToken = result.refreshToken;
+                    this.refreshExpiresAt = result.refreshExpiresIn
+                        ? getExpiresAt(result.refreshExpiresIn, BUFFER_IN_MINUTES)
+                        : undefined;
+                }
+                return { headers: { Authorization: `Bearer ${this.accessToken}` } };
+            }
+            // Built-in: if access token is expired and we have a valid SDK refresh token, use it
+            if (this.expiresAt != null &&
+                this.expiresAt <= new Date() &&
+                this._clientIdSupplier &&
+                this.storedRefreshToken &&
+                this.refreshExpiresAt &&
+                this.refreshExpiresAt > new Date() &&
+                this.authClient) {
+                const clientId = yield core.EndpointSupplier.get(this._clientIdSupplier, { endpointMetadata });
+                const tokenResponse = yield this.authClient.refreshToken({
+                    clientId,
+                    refreshToken: this.storedRefreshToken,
+                });
+                this.accessToken = tokenResponse.accessToken;
+                this.expiresAt = getExpiresAt(tokenResponse.expiresIn, BUFFER_IN_MINUTES);
+                if (tokenResponse.refreshToken) {
+                    this.storedRefreshToken = tokenResponse.refreshToken;
+                    this.refreshExpiresAt = tokenResponse.refreshExpiresIn
+                        ? getExpiresAt(tokenResponse.refreshExpiresIn, BUFFER_IN_MINUTES)
+                        : undefined;
+                }
+                return { headers: { Authorization: `Bearer ${this.accessToken}` } };
+            }
+            // Token not yet acquired — resolve from supplier (static token / initial value)
+            if (!this.accessToken) {
+                if (this._tokenSupplier == null) {
+                    throw new errors.CortiError({ message: TOKEN_PARAM_REQUIRED_ERROR_MESSAGE });
+                }
+                this.accessToken = yield core.EndpointSupplier.get(this._tokenSupplier, { endpointMetadata });
+            }
+            if (!this.accessToken) {
+                throw new errors.CortiError({ message: TOKEN_PARAM_REQUIRED_ERROR_MESSAGE });
+            }
+            return { headers: { Authorization: `Bearer ${this.accessToken}` } };
+        });
+    }
+}
+(function (OAuthAuthProvider) {
+    OAuthAuthProvider.AUTH_SCHEME = "OAuth";
+    /** Patch: Message extended to mention ROPC (clientId, username, password). */
+    OAuthAuthProvider.AUTH_CONFIG_ERROR_MESSAGE = `Insufficient options to create OAuthAuthProvider. Please provide '${CLIENT_ID_PARAM}' and '${CLIENT_SECRET_PARAM}', or ${TOKEN_PARAM}, or ROPC (${CLIENT_ID_PARAM}, username, password).`;
+    function createInstance(options) {
+        if (OAuthTokenOverrideAuthProvider.canCreate(options)) {
+            return new OAuthTokenOverrideAuthProvider(options);
+        }
+        /** Patch: ROPC provider before client credentials so ROPC auth is used when username+password provided. */
+        if (OAuthRopcAuthProvider.canCreate(options)) {
+            return new OAuthRopcAuthProvider(options);
+        }
+        /** Patch: PKCE provider before auth code — both have clientId+code+redirectUri, but PKCE has no clientSecret. */
+        if (OAuthPkceAuthProvider.canCreate(options)) {
+            return new OAuthPkceAuthProvider(options);
+        }
+        /** Patch: Auth code provider before client credentials — both have clientId+clientSecret, code+redirectUri distinguishes auth code. */
+        if (OAuthAuthCodeAuthProvider.canCreate(options)) {
+            return new OAuthAuthCodeAuthProvider(options);
+        }
+        if (OAuthAuthProvider.canCreate(options)) {
+            return new OAuthAuthProvider(options);
+        }
+        /** Patch: No credentials provided — proxy/passthrough mode; requests are sent without an Authorization header. */
+        const partialOptions = options;
+        const hasNoCredentials = partialOptions[CLIENT_ID_PARAM] == null &&
+            partialOptions[CLIENT_SECRET_PARAM] == null &&
+            partialOptions[TOKEN_PARAM] == null &&
+            partialOptions.refreshAccessToken == null &&
+            partialOptions[USERNAME_PARAM] == null;
+        if (hasNoCredentials) {
+            return new core.NoOpAuthProvider();
+        }
+        throw new errors.CortiError({
+            message: OAuthAuthProvider.AUTH_CONFIG_ERROR_MESSAGE,
+        });
+    }
+    OAuthAuthProvider.createInstance = createInstance;
+})(OAuthAuthProvider || (OAuthAuthProvider = {}));

package/dist/esm/auth/OAuthRopcAuthProvider.d.mts

@@ -0,0 +1,33 @@
+import type { BaseClientOptions } from "../BaseClient.mjs";
+import * as core from "../core/index.mjs";
+declare const CLIENT_ID_PARAM: "clientId";
+declare const USERNAME_PARAM: "username";
+declare const PASSWORD_PARAM: "password";
+/**
+ * Patch: Auth provider for ROPC (resource owner password credentials); uses CortiAuth.getRopcFlowToken for token refresh.
+ */
+export declare class OAuthRopcAuthProvider implements core.AuthProvider {
+    private readonly options;
+    private readonly authClient;
+    private accessToken;
+    private expiresAt;
+    private refreshPromise;
+    constructor(options: OAuthRopcAuthProvider.Options);
+    static canCreate(options?: Partial<OAuthRopcAuthProvider.RopcCredentials & BaseClientOptions>): boolean;
+    getAuthRequest({ endpointMetadata, }?: {
+        endpointMetadata?: core.EndpointMetadata;
+    }): Promise<core.AuthRequest>;
+    private getToken;
+    private refresh;
+    private getExpiresAt;
+}
+export declare namespace OAuthRopcAuthProvider {
+    type RopcCredentials = {
+        [CLIENT_ID_PARAM]: core.Supplier<string>;
+        [USERNAME_PARAM]: core.Supplier<string>;
+        [PASSWORD_PARAM]: core.Supplier<string>;
+        scopes?: string[];
+    };
+    type Options = BaseClientOptions & RopcCredentials;
+}
+export {};

package/dist/esm/auth/OAuthRopcAuthProvider.mjs

@@ -0,0 +1,93 @@
+// This file was auto-generated by Fern from our API Definition.
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import * as core from "../core/index.mjs";
+import { CortiAuth } from "../custom/CortiAuth.mjs";
+import * as errors from "../errors/index.mjs";
+const CLIENT_ID_PARAM = "clientId";
+const USERNAME_PARAM = "username";
+const PASSWORD_PARAM = "password";
+const CLIENT_ID_REQUIRED_ERROR_MESSAGE = `${CLIENT_ID_PARAM} is required`;
+const USERNAME_REQUIRED_ERROR_MESSAGE = `${USERNAME_PARAM} is required`;
+const PASSWORD_REQUIRED_ERROR_MESSAGE = `${PASSWORD_PARAM} is required`;
+const BUFFER_IN_MINUTES = 2;
+/**
+ * Patch: Auth provider for ROPC (resource owner password credentials); uses CortiAuth.getRopcFlowToken for token refresh.
+ */
+export class OAuthRopcAuthProvider {
+    constructor(options) {
+        this.options = options;
+        this.authClient = new CortiAuth(options);
+        this.expiresAt = new Date();
+    }
+    static canCreate(options) {
+        return ((options === null || options === void 0 ? void 0 : options[CLIENT_ID_PARAM]) != null &&
+            (options === null || options === void 0 ? void 0 : options[USERNAME_PARAM]) != null &&
+            (options === null || options === void 0 ? void 0 : options[PASSWORD_PARAM]) != null);
+    }
+    getAuthRequest() {
+        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata, } = {}) {
+            const token = yield this.getToken({ endpointMetadata });
+            return {
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                },
+            };
+        });
+    }
+    getToken() {
+        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata } = {}) {
+            if (this.accessToken && this.expiresAt > new Date()) {
+                return this.accessToken;
+            }
+            if (this.refreshPromise != null) {
+                return this.refreshPromise;
+            }
+            return this.refresh({ endpointMetadata });
+        });
+    }
+    refresh() {
+        return __awaiter(this, arguments, void 0, function* ({ endpointMetadata } = {}) {
+            this.refreshPromise = (() => __awaiter(this, void 0, void 0, function* () {
+                try {
+                    const clientId = yield core.Supplier.get(this.options[CLIENT_ID_PARAM]);
+                    const username = yield core.Supplier.get(this.options[USERNAME_PARAM]);
+                    const password = yield core.Supplier.get(this.options[PASSWORD_PARAM]);
+                    if (clientId == null) {
+                        throw new errors.CortiError({ message: CLIENT_ID_REQUIRED_ERROR_MESSAGE });
+                    }
+                    if (username == null) {
+                        throw new errors.CortiError({ message: USERNAME_REQUIRED_ERROR_MESSAGE });
+                    }
+                    if (password == null) {
+                        throw new errors.CortiError({ message: PASSWORD_REQUIRED_ERROR_MESSAGE });
+                    }
+                    const tokenResponse = yield this.authClient.getRopcFlowToken({
+                        clientId,
+                        username,
+                        password,
+                        scopes: this.options.scopes,
+                    });
+                    this.accessToken = tokenResponse.accessToken;
+                    this.expiresAt = this.getExpiresAt(tokenResponse.expiresIn, BUFFER_IN_MINUTES);
+                    return this.accessToken;
+                }
+                finally {
+                    this.refreshPromise = undefined;
+                }
+            }))();
+            return this.refreshPromise;
+        });
+    }
+    getExpiresAt(expiresInSeconds, bufferInMinutes) {
+        const now = new Date();
+        return new Date(now.getTime() + expiresInSeconds * 1000 - bufferInMinutes * 60 * 1000);
+    }
+}

package/dist/esm/auth/index.d.mts

@@ -0,0 +1 @@
+export { OAuthAuthProvider } from "./OAuthAuthProvider.mjs";

package/dist/esm/auth/index.mjs

@@ -0,0 +1 @@
+export { OAuthAuthProvider } from "./OAuthAuthProvider.mjs";

package/dist/esm/core/auth/AuthProvider.d.mts

@@ -0,0 +1,7 @@
+import type { EndpointMetadata } from "../fetcher/EndpointMetadata.mjs";
+import type { AuthRequest } from "./AuthRequest.mjs";
+export interface AuthProvider {
+    getAuthRequest(arg?: {
+        endpointMetadata?: EndpointMetadata;
+    }): Promise<AuthRequest>;
+}

package/dist/esm/core/auth/AuthProvider.mjs

@@ -0,0 +1 @@
+export {};

package/dist/esm/core/auth/AuthRequest.d.mts

@@ -0,0 +1,9 @@
+/**
+ * Request parameters for authentication requests.
+ */
+export interface AuthRequest {
+    /**
+     * The headers to be included in the request.
+     */
+    headers: Record<string, string>;
+}

package/dist/esm/core/auth/AuthRequest.mjs

@@ -0,0 +1 @@
+export {};

package/dist/esm/core/auth/BasicAuth.mjs

@@ -11,7 +11,8 @@ export const BasicAuth = {
     fromAuthorizationHeader: (header) => {
         const credentials = header.replace(BASIC_AUTH_HEADER_PREFIX, "");
         const decoded = base64Decode(credentials);
-        const [username, password] = decoded.split(":", 2);
+        const [username, ...passwordParts] = decoded.split(":");
+        const password = passwordParts.length > 0 ? passwordParts.join(":") : undefined;
         if (username == null || password == null) {
             throw new Error("Invalid basic auth");
         }

package/dist/esm/core/auth/BearerToken.d.mts

@@ -1,5 +1,7 @@
 export type BearerToken = string;
+declare function toAuthorizationHeader(token: string | undefined): string | undefined;
 export declare const BearerToken: {
-    toAuthorizationHeader: (token: BearerToken | undefined) => string | undefined;
+    toAuthorizationHeader: typeof toAuthorizationHeader;
     fromAuthorizationHeader: (header: string) => BearerToken;
 };
+export {};

package/dist/esm/core/auth/BearerToken.mjs

@@ -1,11 +1,12 @@
 const BEARER_AUTH_HEADER_PREFIX = /^Bearer /i;
+function toAuthorizationHeader(token) {
+    if (token == null) {
+        return undefined;
+    }
+    return `Bearer ${token}`;
+}
 export const BearerToken = {
-    toAuthorizationHeader: (token) => {
-        if (token == null) {
-            return undefined;
-        }
-        return `Bearer ${token}`;
-    },
+    toAuthorizationHeader: toAuthorizationHeader,
     fromAuthorizationHeader: (header) => {
         return header.replace(BEARER_AUTH_HEADER_PREFIX, "").trim();
     },

package/dist/esm/core/auth/NoOpAuthProvider.d.mts

@@ -0,0 +1,5 @@
+import type { AuthProvider } from "./AuthProvider.mjs";
+import type { AuthRequest } from "./AuthRequest.mjs";
+export declare class NoOpAuthProvider implements AuthProvider {
+    getAuthRequest(): Promise<AuthRequest>;
+}

package/dist/esm/core/auth/NoOpAuthProvider.mjs

@@ -0,0 +1,5 @@
+export class NoOpAuthProvider {
+    getAuthRequest() {
+        return Promise.resolve({ headers: {} });
+    }
+}

package/dist/esm/core/auth/index.d.mts

@@ -1,3 +1,5 @@
+export type { AuthProvider } from "./AuthProvider.mjs";
+export type { AuthRequest } from "./AuthRequest.mjs";
 export { BasicAuth } from "./BasicAuth.mjs";
 export { BearerToken } from "./BearerToken.mjs";
-export { OAuthTokenProvider } from "./OAuthTokenProvider.mjs";
+export { NoOpAuthProvider } from "./NoOpAuthProvider.mjs";

package/dist/esm/core/auth/index.mjs

@@ -1,3 +1,3 @@
 export { BasicAuth } from "./BasicAuth.mjs";
 export { BearerToken } from "./BearerToken.mjs";
-export { OAuthTokenProvider } from "./OAuthTokenProvider.mjs";
+export { NoOpAuthProvider } from "./NoOpAuthProvider.mjs";

package/dist/esm/core/exports.d.mts

@@ -1 +1,4 @@
 export * from "./file/exports.mjs";
+export * from "./logging/exports.mjs";
+export * from "./pagination/exports.mjs";
+export * from "./websocket/exports.mjs";

package/dist/esm/core/exports.mjs

@@ -1 +1,4 @@
 export * from "./file/exports.mjs";
+export * from "./logging/exports.mjs";
+export * from "./pagination/exports.mjs";
+export * from "./websocket/exports.mjs";

package/dist/esm/core/fetcher/APIResponse.d.mts

@@ -1,4 +1,4 @@
-import { RawResponse } from "./RawResponse.mjs";
+import type { RawResponse } from "./RawResponse.mjs";
 /**
  * The response of an API call.
  * It is a successful response or a failed response.

package/dist/esm/core/fetcher/BinaryResponse.d.mts

@@ -1,20 +1,19 @@
-import { ResponseWithBody } from "./ResponseWithBody.mjs";
 export type BinaryResponse = {
     /** [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/bodyUsed) */
-    bodyUsed: boolean;
+    bodyUsed: Response["bodyUsed"];
     /**
      * Returns a ReadableStream of the response body.
      * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/body)
      */
-    stream: () => ReadableStream<Uint8Array>;
+    stream: () => Response["body"];
     /** [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/arrayBuffer) */
-    arrayBuffer: () => Promise<ArrayBuffer>;
+    arrayBuffer: () => ReturnType<Response["arrayBuffer"]>;
     /** [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/blob) */
-    blob: () => Promise<Blob>;
+    blob: () => ReturnType<Response["blob"]>;
     /**
      * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/bytes)
      * Some versions of the Fetch API may not support this method.
      */
     bytes?(): Promise<Uint8Array>;
 };
-export declare function getBinaryResponse(response: ResponseWithBody): BinaryResponse;
+export declare function getBinaryResponse(response: Response): BinaryResponse;

package/dist/esm/core/fetcher/EndpointMetadata.d.mts

@@ -0,0 +1,13 @@
+export type SecuritySchemeKey = string;
+/**
+ * A collection of security schemes, where the key is the name of the security scheme and the value is the list of scopes required for that scheme.
+ * All schemes in the collection must be satisfied for authentication to be successful.
+ */
+export type SecuritySchemeCollection = Record<SecuritySchemeKey, AuthScope[]>;
+export type AuthScope = string;
+export type EndpointMetadata = {
+    /**
+     * An array of security scheme collections. Each collection represents an alternative way to authenticate.
+     */
+    security?: SecuritySchemeCollection[];
+};

package/dist/esm/core/fetcher/EndpointMetadata.mjs

@@ -0,0 +1 @@
+export {};

package/dist/esm/core/fetcher/EndpointSupplier.d.mts

@@ -0,0 +1,12 @@
+import type { EndpointMetadata } from "./EndpointMetadata.mjs";
+import type { Supplier } from "./Supplier.mjs";
+type EndpointSupplierFn<T> = (arg: {
+    endpointMetadata?: EndpointMetadata;
+}) => T | Promise<T>;
+export type EndpointSupplier<T> = Supplier<T> | EndpointSupplierFn<T>;
+export declare const EndpointSupplier: {
+    get: <T>(supplier: EndpointSupplier<T>, arg: {
+        endpointMetadata?: EndpointMetadata;
+    }) => Promise<T>;
+};
+export {};

package/dist/esm/core/fetcher/EndpointSupplier.mjs

@@ -0,0 +1,19 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+export const EndpointSupplier = {
+    get: (supplier, arg) => __awaiter(void 0, void 0, void 0, function* () {
+        if (typeof supplier === "function") {
+            return supplier(arg);
+        }
+        else {
+            return supplier;
+        }
+    }),
+};

package/dist/esm/core/fetcher/Fetcher.d.mts

@@ -1,23 +1,27 @@
-import { APIResponse } from "./APIResponse.mjs";
-import { Supplier } from "./Supplier.mjs";
+import { type LogConfig, type Logger } from "../logging/logger.mjs";
+import type { APIResponse } from "./APIResponse.mjs";
+import type { EndpointMetadata } from "./EndpointMetadata.mjs";
 export type FetchFunction = <R = unknown>(args: Fetcher.Args) => Promise<APIResponse<R, Fetcher.Error>>;
 export declare namespace Fetcher {
     interface Args {
         url: string;
         method: string;
         contentType?: string;
-        headers?: Record<string, string | Supplier<string | undefined> | undefined>;
-        queryParameters?: Record<string, string | string[] | object | object[] | null>;
+        headers?: Record<string, unknown>;
+        queryParameters?: Record<string, unknown>;
         body?: unknown;
         timeoutMs?: number;
         maxRetries?: number;
         withCredentials?: boolean;
         abortSignal?: AbortSignal;
-        requestType?: "json" | "file" | "bytes";
+        requestType?: "json" | "file" | "bytes" | "form" | "other";
         responseType?: "json" | "blob" | "sse" | "streaming" | "text" | "arrayBuffer" | "binary-response";
         duplex?: "half";
+        endpointMetadata?: EndpointMetadata;
+        fetchFn?: typeof fetch;
+        logging?: LogConfig | Logger;
     }
-    type Error = FailedStatusCodeError | NonJsonError | TimeoutError | UnknownError;
+    type Error = FailedStatusCodeError | NonJsonError | BodyIsNullError | TimeoutError | UnknownError;
     interface FailedStatusCodeError {
         reason: "status-code";
         statusCode: number;
@@ -28,6 +32,10 @@ export declare namespace Fetcher {
         statusCode: number;
         rawBody: string;
     }
+    interface BodyIsNullError {
+        reason: "body-is-null";
+        statusCode: number;
+    }
     interface TimeoutError {
         reason: "timeout";
     }