@giveitsmaller/sdk 0.8.0 → 0.10.0

package/README.md

@@ -40,6 +40,14 @@ const dls = await client.getWorkflowDownloads(workflow.workflowId);
 console.log('Compressed:', dls.downloads[0].files[0].downloadUrl);
 ```
 
+> **Reusing an upload id across clients?** An upload created by an
+> authenticated caller is owned by that caller. If you persist a `fileId` and
+> later reference it (via `fileInput.uploadId(id)`) from a client configured
+> with a *different* `apiKey`/session, workflow-create returns
+> `404 upload_not_found` — the server enforces ownership. Reference an upload id
+> only under the same auth that created it; the upload-then-create flow above is
+> consistent by construction. Anonymous-intake uploads are unaffected.
+
 ## Full documentation
 
 Docs are published in the [giveitsmaller-sdks](https://github.com/AntonioCS/giveitsmaller-sdks) repository — they are **not** shipped in the npm tarball (only `dist/` is published).

package/dist/_audit.js

@@ -115,7 +115,6 @@ export function _runAudit() {
     accept();
     accept();
     accept();
-    accept();
     // T4b / 27rE1fZn — preset resolver public types.
     accept();
     accept();
@@ -129,7 +128,12 @@ export function _runAudit() {
     accept();
     accept();
     accept();
+    // FF3a / u0hBt6fl — homogeneous fan-out builder surface.
+    accept();
+    accept();
+    accept();
     accept();
+    // FF5a / Ao8RPVxD — file-first Handle reattach surface.
     accept();
     accept();
 }

package/dist/builder.d.ts

@@ -26,6 +26,7 @@
  */
 import type { GislClient } from './client.js';
 import type { OperationDownload, WorkflowStatusResponse, SseOperationProgressDataStatusEnum } from '@giveitsmaller/contracts/openapi';
+import { Handle } from './handle.js';
 import type { PresetDefaults, PresetMedia } from './ergonomic/presets/index.js';
 /**
  * Best-effort detection of the compress-operation media from the
@@ -183,14 +184,6 @@ export interface Result {
      */
     readonly resolvedOptions: ResolvedOptions;
 }
-/**
- * Lighter return value from `.submit({webhook})` — no SSE/poll wait,
- * caller reconciles completion via the webhook.
- */
-export interface Handle {
-    readonly workflowId: string;
-    readonly webhookSecret?: string;
-}
 /**
  * Upload-phase progress event. The byte counter comes from
  * `UploadOptions.onProgress` — there is no `phase` field on the wire.

package/dist/builder.js

@@ -26,7 +26,11 @@
  */
 import { SseEventType, SseOperationProgressDataFromJSON, } from '@giveitsmaller/contracts/openapi';
 import { uploadSource } from './types.js';
-import { GislTimeoutError } from './errors.js';
+import { GislTimeoutError, GislNetworkError, SseEndedWithoutTerminal } from './errors.js';
+// Deferred-usage-only import: `Handle` is constructed inside submit() at call
+// time, not at module load, so the builder.ts <-> handle.ts cycle is safe
+// under ESM (handle.ts imports the await-primitives from this module).
+import { Handle } from './handle.js';
 import { resolveCompressOptions, } from './ergonomic/preset_resolver.js';
 /**
  * Best-effort detection of the compress-operation media from the
@@ -241,6 +245,12 @@ export class OperationBuilder {
             throw new GislTimeoutError(`Workflow ${created.workflowId} reached terminal status but maxWait elapsed before downloads could be fetched`);
         }
         const downloads = await this.client.getWorkflowDownloads(created.workflowId);
+        // TDqmkWpX: the maxWait deadline also covers the downloads fetch itself — a
+        // slow getWorkflowDownloads must not return a success after the advertised
+        // whole-run deadline. Re-check AFTER the call (the check above is BEFORE).
+        if (Date.now() >= deadline) {
+            throw new GislTimeoutError(`Workflow ${created.workflowId} downloads fetch completed after maxWait elapsed`);
+        }
         return _projectResult(finalStatus, downloads.downloads, resolved.wireOptions, resolved.resolvedOptions);
     }
     /**
@@ -264,11 +274,9 @@ export class OperationBuilder {
             callback_url: options.webhook,
         };
         const created = await this.client.createWorkflow(payload);
-        const handle = {
-            workflowId: created.workflowId,
-            ...(created.webhookSecret != null ? { webhookSecret: created.webhookSecret } : {}),
-        };
-        return handle;
+        // No client passed → the returned Handle's status()/wait()/result()
+        // throw `no_client`; the operation-first submit reconciles via webhook.
+        return new Handle(created.workflowId, created.webhookSecret != null ? created.webhookSecret : undefined);
     }
     /**
      * Fan-out chain: run this builder to completion, then for each artifact
@@ -309,14 +317,15 @@ export class OperationBuilder {
                 return await _consumeSseToTerminal(this.client, args);
             }
             catch (err) {
-                // Caller-aborted or deadline-elapsed errors MUST propagate — they
-                // are NOT transient SSE failures. Only fall through to poll on a
-                // genuine SSE connect/mid-stream error (codex-reviewer P0).
-                if (err instanceof GislTimeoutError)
+                // TDqmkWpX: poll-fallback ONLY on a clean SSE stream-end
+                // (SseEndedWithoutTerminal) or a typed transport error (GislNetworkError).
+                // Everything else — timeout, abort, API error, an onProgress callback
+                // throw, anything unexpected — MUST propagate; re-issuing the same doomed
+                // request via poll would mask the real failure.
+                if (!(err instanceof SseEndedWithoutTerminal || err instanceof GislNetworkError)) {
                     throw err;
-                if (err instanceof DOMException && err.name === 'AbortError')
-                    throw err;
-                // Genuine SSE connect / stream error — fall through to poll fallback.
+                }
+                // Genuine SSE stream-end / transport error — fall through to poll fallback.
             }
         }
         return await _pollToTerminal(this.client, args);
@@ -423,6 +432,20 @@ const TERMINAL_STATUS = new Set([
     'expired',
     'paused_insufficient_credits',
 ]);
+/**
+ * Internal marker (TDqmkWpX): tags an error thrown by the caller's `onProgress`
+ * callback so the mid-stream transport-error wrap in {@link _consumeSseToTerminal}
+ * cannot mistake it for a transport failure (a callback that throws a `TypeError`
+ * would otherwise be wrapped as `GislNetworkError` → masked by poll-fallback).
+ * The inner catch unwraps it and rethrows the ORIGINAL `cause`, so the caller
+ * sees their own error and the run never silently succeeds.
+ */
+class _OnProgressThrew {
+    cause;
+    constructor(cause) {
+        this.cause = cause;
+    }
+}
 /** @internal — exported for reuse by `merge.ts` (T3) and future builders. */
 export async function _consumeSseToTerminal(client, args) {
     const remainingMs = args.deadline - Date.now();
@@ -458,6 +481,13 @@ export async function _consumeSseToTerminal(client, args) {
             if (deadlineExpired && err instanceof DOMException && err.name === 'AbortError') {
                 throw new GislTimeoutError(`Workflow ${args.workflowId} did not complete before maxWait deadline`);
             }
+            // TDqmkWpX: a genuine connect-phase TRANSPORT failure surfaces as a raw
+            // `TypeError` from `fetch` (DNS/TCP/TLS) — wrap it as a typed
+            // GislNetworkError so the await-terminal callers poll-fallback on it
+            // (and ONLY on it / a clean stream-end), never on an onProgress throw.
+            if (err instanceof TypeError) {
+                throw new GislNetworkError(`SSE connect to workflow ${args.workflowId} events failed: ${err.message}`);
+            }
             throw err;
         }
         // for-await also throws if the iterator's .next() rejects (e.g. the
@@ -488,7 +518,15 @@ export async function _consumeSseToTerminal(client, args) {
                             ? { phaseTotalInputs: data.phaseTotalInputs }
                             : {}),
                     };
-                    args.onProgress(proj);
+                    // TDqmkWpX: an onProgress callback throw (ANY type, incl. TypeError)
+                    // must propagate, never be mistaken for a transport failure. Tag it so
+                    // the mid-stream TypeError wrap in the catch below skips it.
+                    try {
+                        args.onProgress(proj);
+                    }
+                    catch (cbErr) {
+                        throw new _OnProgressThrew(cbErr);
+                    }
                 }
                 if (event.event === SseEventType.workflow_completed ||
                     event.event === SseEventType.workflow_failed ||
@@ -509,17 +547,33 @@ export async function _consumeSseToTerminal(client, args) {
             if (deadlineExpired) {
                 throw new GislTimeoutError(`Workflow ${args.workflowId} did not complete before maxWait deadline`);
             }
-            // Otherwise it was a clean server-side close — fall back to poll.
-            throw new Error('SSE stream ended without terminal event');
+            // Otherwise it was a clean server-side close — fall back to poll. TDqmkWpX:
+            // a sealed marker (not a bare Error) so callers poll ONLY on this + a typed
+            // transport error, never on an onProgress callback throw.
+            throw new SseEndedWithoutTerminal();
         }
         catch (innerErr) {
-            // Same conversion as the outer catch: if deadline expired and the
-            // iterator rejected with AbortError, surface as GislTimeoutError.
+            // TDqmkWpX: an onProgress callback throw was tagged so it is NEVER treated
+            // as a transport failure — unwrap and rethrow the ORIGINAL cause so it
+            // propagates to the caller (never masked by a poll retry), even when the
+            // callback threw a TypeError.
+            if (innerErr instanceof _OnProgressThrew) {
+                throw innerErr.cause;
+            }
+            // If deadline expired and the iterator rejected with AbortError, surface
+            // as GislTimeoutError.
             if (deadlineExpired &&
                 innerErr instanceof DOMException &&
                 innerErr.name === 'AbortError') {
                 throw new GislTimeoutError(`Workflow ${args.workflowId} did not complete before maxWait deadline`);
             }
+            // A genuine mid-stream TRANSPORT failure (reader disconnect) surfaces as a
+            // raw `TypeError` from the iterator — wrap as GislNetworkError so callers
+            // poll-fallback. (An onProgress throw was already handled above, so a
+            // TypeError here is unambiguously transport.)
+            if (innerErr instanceof TypeError) {
+                throw new GislNetworkError(`SSE stream for workflow ${args.workflowId} failed mid-stream: ${innerErr.message}`);
+            }
             throw innerErr;
         }
     }

package/dist/client.d.ts

@@ -1,5 +1,5 @@
-import type { AudioWatermarkDecodeRequest, AudioWatermarkDecodeResponse, ExternalImportCreatedResponse, ExternalImportRequest, LoginUserRequest, LoginUser200ResponseData, ContactRequest, CreditsBalanceResponse, CreditsUsageResponse, UploadResponse, UploadProbeResponse, WorkflowCancelResponse, WorkflowCreateResponse, WorkflowResumeResponse, WorkflowStatusResponse, WorkflowDownloadResponse, MetadataResponse, RetryResponse } from '@giveitsmaller/contracts/openapi';
-import type { CreditsUsageOptions, GetSchemaOptions, GetSchemaResult, GislClientConfig, GislSseEvent, PreflightClipsResult, UploadOptions, WaitOptions, WorkflowCreatePayload, _Sdk3HandCodedKeepaliveResult, _Sdk3HandCodedMultipartStatusResult, _Sdk3HandCodedPresignPartsResult } from './types.js';
+import type { AudioWatermarkDecodeRequest, AudioWatermarkDecodeResponse, ExternalImportCreatedResponse, ExternalImportRequest, LoginUserRequest, LoginUser200ResponseData, ContactRequest, CreditsBalanceResponse, CreditsUsageResponse, UploadResponse, UploadProbeResponse, WorkflowCancelResponse, WorkflowCreateResponse, WorkflowResumeResponse, WorkflowStatusResponse, WorkflowListResponse, WorkflowSummary, WorkflowDownloadResponse, MetadataResponse, RetryResponse } from '@giveitsmaller/contracts/openapi';
+import type { CreditsUsageOptions, ListWorkflowsOptions, GetSchemaOptions, GetSchemaResult, GislClientConfig, GislSseEvent, PreflightClipsResult, UploadOptions, WaitOptions, WorkflowCreatePayload, _Sdk3HandCodedKeepaliveResult, _Sdk3HandCodedMultipartStatusResult, _Sdk3HandCodedPresignPartsResult } from './types.js';
 export declare const MULTIPART_CONCURRENCY_DEFAULT: 4;
 export declare const DEFAULT_MULTIPART_FIRST_CHUNK_SIZE: number;
 export interface ValidationDetail {
@@ -277,6 +277,12 @@ export declare class GislClient {
      * until the external-import infrastructure ships. The method
      * exists today so consumers can write the integration ahead of
      * time.
+     *
+     * Auth-ownership: the import id this returns is owned by the
+     * authenticated caller that created it. Referencing it from a client
+     * with a different auth context 404s `upload_not_found` at
+     * workflow-create — same ownership rule as `fileInput.uploadId` (api
+     * PqpD9ySv).
      */
     createExternalImport(payload: ExternalImportRequest): Promise<ExternalImportCreatedResponse>;
     /**
@@ -324,4 +330,34 @@ export declare class GislClient {
      * Server defaults: `limit=20`, `offset=0`. Most-recent-first.
      */
     getCreditsUsage(options?: CreditsUsageOptions): Promise<CreditsUsageResponse>;
+    /**
+     * List the caller's workflows — a cursor-paginated, user-scoped summary
+     * list, most-recent-first. Each row is a lightweight {@link WorkflowSummary}
+     * (id / status / created_at + per-job type+status + a deliverable-output
+     * count); it does NOT inline per-op `result_metadata` or output details —
+     * drill in via {@link getWorkflowStatus} / {@link getWorkflowDownloads}.
+     *
+     * Auth is REQUIRED (the list is user-scoped; an anonymous caller gets a 401
+     * → `GislAuthError`). Walk pages by passing each response's `nextCursor` as
+     * the next call's `cursor` until `isTruncated` is false, or use
+     * {@link workflows} to auto-paginate. Mirrors the PHP
+     * `GislClient::listWorkflows`.
+     */
+    listWorkflows(options?: ListWorkflowsOptions): Promise<WorkflowListResponse>;
+    /**
+     * Auto-paginating async iterator over ALL of the caller's workflows,
+     * yielding each {@link WorkflowSummary} most-recent-first across page
+     * boundaries — the ergonomic companion to {@link listWorkflows}. Walks
+     * `nextCursor` until the server reports `isTruncated: false`. Mirrors the
+     * PHP `workflows()` generator.
+     *
+     * ```ts
+     * for await (const wf of client.workflows()) {
+     *   console.log(wf.workflowId, wf.status);
+     * }
+     * ```
+     */
+    workflows(options?: {
+        limit?: number;
+    }): AsyncGenerator<WorkflowSummary, void, undefined>;
 }

package/dist/client.js

@@ -1,7 +1,11 @@
-import { open, stat } from 'node:fs/promises';
-import { basename } from 'node:path';
-import { AudioWatermarkDecodeRequestToJSON, AudioWatermarkDecodeResponseFromJSON, ExternalImportCreatedResponseFromJSON, ExternalImportRequestToJSON, LoginUser200ResponseDataFromJSON, CreditsBalanceResponseFromJSON, CreditsUsageResponseFromJSON, UploadResponseFromJSON, UploadProbeResponseFromJSON, MultipartInitiateResponseFromJSON, MultipartInitiateRequestMetadataHintToJSON, MultipartCompleteResponseFromJSON, MultipartCompleteRequestToJSON, WorkflowCancelResponseFromJSON, WorkflowCreateResponseFromJSON, WorkflowResumeResponseFromJSON, WorkflowStatusResponseFromJSON, WorkflowDownloadResponseFromJSON, MetadataResponseFromJSON, OperationsSchemaResponseFromJSON, RetryResponseFromJSON, WorkflowStatus, AuthErrorResponseFromJSON, AuthErrorType, BalanceExhaustedResponseFromJSON, BalanceExhaustedResponseRequiredActionEnum, FeatureNotAvailableResponseFromJSON, FeatureTierRestrictedResponseFromJSON, TierRestrictionKind, TierRestrictionResponseFromJSON, UserTier, WorkflowExpiredResponseFromJSON, ProbePendingResponseFromJSON, UploadSizeExceedsTierResponseFromJSON, UploadDurationExceedsTierResponseFromJSON, UploadConstraintsAppliedProcessingClassPreAssignmentEnum, UploadThresholdsSingleShotMaxBytesEnum, UploadThresholdsMultipartChunkSizeEnum, UploadThresholdsMultipartConcurrencyDefaultEnum, } from '@giveitsmaller/contracts/openapi';
-import { GislAbortError, GislApiError, GislAuthError, GislBalanceExhaustedError, GislError, GislFeatureNotAvailableError, GislFeatureTierRestrictedError, GislMultipartPartCountError, GislMultipartPartError, GislMultipartSessionNotFoundError, GislMultipartSessionOwnershipError, GislMultipartSessionAuthRequiredError, GislTierRestrictedError, GislTimeoutError, GislProbePendingError, GislUploadCapExceededError, GislValidationError, GislWorkflowExpiredError, } from './errors.js';
+// node:fs/promises + node:path are reached only through `./node-fs.js`, which
+// the package.json `browser` field swaps for a stub in browser bundles — so the
+// SDK entry graph stays browser-safe (a browser caller uploads a Blob via
+// blobByteSource, which never touches these). Kept as a STATIC import (not a
+// dynamic one) so `vi.mock('node:fs/promises')` still intercepts it in tests.
+import { open, stat, basename } from './node-fs.js';
+import { AudioWatermarkDecodeRequestToJSON, AudioWatermarkDecodeResponseFromJSON, ExternalImportCreatedResponseFromJSON, ExternalImportRequestToJSON, LoginUser200ResponseDataFromJSON, CreditsBalanceResponseFromJSON, CreditsUsageResponseFromJSON, UploadResponseFromJSON, UploadProbeResponseFromJSON, MultipartInitiateResponseFromJSON, MultipartInitiateRequestMetadataHintToJSON, MultipartCompleteResponseFromJSON, MultipartCompleteRequestToJSON, WorkflowCancelResponseFromJSON, WorkflowCreateResponseFromJSON, WorkflowResumeResponseFromJSON, WorkflowStatusResponseFromJSON, WorkflowListResponseFromJSON, WorkflowDownloadResponseFromJSON, MetadataResponseFromJSON, OperationsSchemaResponseFromJSON, RetryResponseFromJSON, WorkflowStatus, AuthErrorResponseFromJSON, AuthErrorType, AuthRejectionEnvelopeFromJSON, AuthRejectionEnvelopeErrorTypeEnum, BalanceExhaustedResponseFromJSON, BalanceExhaustedResponseRequiredActionEnum, FeatureNotAvailableResponseFromJSON, FeatureTierRestrictedResponseFromJSON, TierRestrictionKind, TierRestrictionResponseFromJSON, UserTier, WorkflowExpiredResponseFromJSON, ProbePendingResponseFromJSON, UploadSizeExceedsTierResponseFromJSON, UploadDurationExceedsTierResponseFromJSON, UploadConstraintsAppliedProcessingClassPreAssignmentEnum, UploadThresholdsSingleShotMaxBytesEnum, UploadThresholdsMultipartChunkSizeEnum, UploadThresholdsMultipartConcurrencyDefaultEnum, } from '@giveitsmaller/contracts/openapi';
+import { GislAbortError, GislApiError, GislAuthError, GislAuthRejectionError, GislBalanceExhaustedError, GislError, GislFeatureNotAvailableError, GislFeatureTierRestrictedError, GislMultipartPartCountError, GislMultipartPartError, GislMultipartSessionNotFoundError, GislMultipartSessionOwnershipError, GislMultipartSessionAuthRequiredError, GislTierRestrictedError, GislTimeoutError, GislProbePendingError, GislUploadCapExceededError, GislValidationError, GislWorkflowExpiredError, } from './errors.js';
 import { parseSseStream } from './sse.js';
 const DEFAULT_TIMEOUT_MS = 30_000;
 // SDK-internal aliases derived from the contract-pinned UploadThresholds enums
@@ -66,6 +70,19 @@ const TERMINAL_STATUSES = new Set([
     WorkflowStatus.expired,
     WorkflowStatus.paused_insufficient_credits,
 ]);
+// Flatten a `Headers` object into a plain `Record<string,string>` for
+// attaching to a thrown `GislApiError`. `Headers.forEach` yields LOWERCASED
+// keys (HTTP header names are case-insensitive per RFC 9110) and collapses
+// any multi-value header (e.g. `set-cookie`) into a single comma-joined
+// value — the record is for content-language / vary / x-request-id reads,
+// not cookies.
+function headersToRecord(headers) {
+    const r = {};
+    headers.forEach((v, k) => {
+        r[k] = v;
+    });
+    return r;
+}
 function isValidationDetails(value) {
     return (Array.isArray(value) &&
         value.length > 0 &&
@@ -294,6 +311,18 @@ export class GislClient {
         if (config.apiKey) {
             this.headers['Authorization'] = `Bearer ${config.apiKey}`;
         }
+        // The dedicated `locale` option wins over any `Accept-Language` the caller
+        // passed via `headers` (mirrors apiKey -> Authorization). Drop any caller
+        // variant case-insensitively first so the request never carries two keys
+        // (e.g. `accept-language` + `Accept-Language`) with undefined precedence.
+        if (config.locale) {
+            for (const key of Object.keys(this.headers)) {
+                if (key.toLowerCase() === 'accept-language') {
+                    delete this.headers[key];
+                }
+            }
+            this.headers['Accept-Language'] = config.locale;
+        }
     }
     // -----------------------------------------------------------------------
     // Internal HTTP
@@ -369,11 +398,18 @@ export class GislClient {
         return this.handleResponse(response, path, opts.deserialize);
     }
     async handleResponse(response, path, deserialize) {
+        // Surface the response headers (lowercased Record) and the resolved
+        // `Content-Language` on every GislApiError thrown from this handler.
+        const responseHeaders = headersToRecord(response.headers);
+        const contentLanguage = response.headers.get('content-language') ?? undefined;
         const contentType = (response.headers.get('content-type') ?? '').toLowerCase();
         const isJsonContent = contentType.includes('application/json') || contentType.includes('+json');
         if (!isJsonContent) {
             if (!response.ok) {
-                throw new GislApiError(response.status, 'Non-JSON response', path);
+                throw new GislApiError(response.status, 'Non-JSON response', path, undefined, {
+                    responseHeaders,
+                    contentLanguage,
+                });
             }
             return undefined;
         }
@@ -386,7 +422,10 @@ export class GislClient {
             json = await response.json();
         }
         catch {
-            throw new GislApiError(response.status, 'Invalid JSON response', path);
+            throw new GislApiError(response.status, 'Invalid JSON response', path, undefined, {
+                responseHeaders,
+                contentLanguage,
+            });
         }
         // Standard envelope: { success, data } or { success, error, details }
         if (!response.ok || json.success === false) {
@@ -398,6 +437,8 @@ export class GislClient {
                 messageKey: json.message_key,
                 locale: json.locale,
                 messageParams: json.message_params,
+                responseHeaders,
+                contentLanguage,
             };
             // Human-readable text comes from `message` (the I26 localised field).
             // `error` is the stable, never-localised SCREAMING_SNAKE machine code —
@@ -543,6 +584,18 @@ export class GislClient {
             if (status === 422 && errorType === 'FILE_TOO_LARGE_FOR_MULTIPART') {
                 throw new GislUploadCapExceededError(status, errorMessage, 'cap_v2_multipart', undefined, path, i18n);
             }
+            // 422 auth-side-effect domain rejection (per contracts ADR-0019).
+            // Flat AuthRejectionEnvelope — NO `details[]` — on register /
+            // verify-email / api-keys (`error_type: unprocessable_entity`) and
+            // profile PATCH email-unchanged (`error_type: email_same`). The
+            // `validation_error` branch of the same auth-422 `oneOf` carries
+            // `details[]` and is already routed to GislValidationError by the
+            // shape-based branch above. Mirrors
+            // `packages/php/src/GislClient.php` GislAuthRejectionError branch.
+            if (status === 422 &&
+                isInEnum(errorType, AuthRejectionEnvelopeErrorTypeEnum)) {
+                tryThrowStructured(AuthRejectionEnvelopeFromJSON, GislAuthRejectionError, (p) => isInEnum(p.errorType, AuthRejectionEnvelopeErrorTypeEnum));
+            }
             throw new GislApiError(status, errorMessage, path, json.details, { ...i18n, payload: json });
         }
         const data = json.data ?? json;
@@ -1756,7 +1809,12 @@ export class GislClient {
             catch {
                 // Non-JSON body — keep generic message.
             }
-            throw new GislApiError(response.status, errorMessage, path);
+            // This throw is OUTSIDE handleResponse (rawResponse:true / 304 path), so
+            // build the response-header surface from the in-scope `response` here.
+            throw new GislApiError(response.status, errorMessage, path, undefined, {
+                responseHeaders: headersToRecord(response.headers),
+                contentLanguage: response.headers.get('content-language') ?? undefined,
+            });
         }
         const raw = await response.json();
         const data = OperationsSchemaResponseFromJSON(raw);
@@ -1874,6 +1932,12 @@ export class GislClient {
      * until the external-import infrastructure ships. The method
      * exists today so consumers can write the integration ahead of
      * time.
+     *
+     * Auth-ownership: the import id this returns is owned by the
+     * authenticated caller that created it. Referencing it from a client
+     * with a different auth context 404s `upload_not_found` at
+     * workflow-create — same ownership rule as `fileInput.uploadId` (api
+     * PqpD9ySv).
      */
     async createExternalImport(payload) {
         return this.request('POST', '/api/external-imports', {
@@ -1979,4 +2043,64 @@ export class GislClient {
             deserialize: CreditsUsageResponseFromJSON,
         });
     }
+    /**
+     * List the caller's workflows — a cursor-paginated, user-scoped summary
+     * list, most-recent-first. Each row is a lightweight {@link WorkflowSummary}
+     * (id / status / created_at + per-job type+status + a deliverable-output
+     * count); it does NOT inline per-op `result_metadata` or output details —
+     * drill in via {@link getWorkflowStatus} / {@link getWorkflowDownloads}.
+     *
+     * Auth is REQUIRED (the list is user-scoped; an anonymous caller gets a 401
+     * → `GislAuthError`). Walk pages by passing each response's `nextCursor` as
+     * the next call's `cursor` until `isTruncated` is false, or use
+     * {@link workflows} to auto-paginate. Mirrors the PHP
+     * `GislClient::listWorkflows`.
+     */
+    async listWorkflows(options = {}) {
+        const params = new URLSearchParams();
+        // Guard `null` too — runtime (untyped) callers may pass `cursor: null`,
+        // which must be omitted, not serialised as the literal string "null".
+        if (options.cursor !== undefined && options.cursor !== null && options.cursor !== '') {
+            params.set('cursor', options.cursor);
+        }
+        if (options.limit !== undefined)
+            params.set('limit', String(options.limit));
+        const query = params.toString();
+        // String concatenation (not template) so the contract-drift path scanner
+        // picks up the literal path. See getCreditsUsage for the same pattern.
+        const path = query.length > 0 ? '/api/workflows' + '?' + query : '/api/workflows';
+        return this.request('GET', path, {
+            deserialize: WorkflowListResponseFromJSON,
+        });
+    }
+    /**
+     * Auto-paginating async iterator over ALL of the caller's workflows,
+     * yielding each {@link WorkflowSummary} most-recent-first across page
+     * boundaries — the ergonomic companion to {@link listWorkflows}. Walks
+     * `nextCursor` until the server reports `isTruncated: false`. Mirrors the
+     * PHP `workflows()` generator.
+     *
+     * ```ts
+     * for await (const wf of client.workflows()) {
+     *   console.log(wf.workflowId, wf.status);
+     * }
+     * ```
+     */
+    async *workflows(options = {}) {
+        let cursor;
+        for (;;) {
+            const page = await this.listWorkflows({ cursor, limit: options.limit });
+            for (const summary of page.workflows) {
+                yield summary;
+            }
+            const next = page.nextCursor;
+            // Stop on a final page, an empty cursor, OR a non-advancing cursor — a
+            // server that repeats the same cursor on a truncated page would
+            // otherwise loop forever, refetching + re-yielding the same rows.
+            if (!page.isTruncated || next === undefined || next === null || next === '' || next === cursor) {
+                return;
+            }
+            cursor = next;
+        }
+    }
 }

package/dist/credentials.js

@@ -137,8 +137,10 @@ function defaultProfilePath() {
 async function readProfile(path, profileName) {
     let raw;
     try {
-        // Lazy import keeps `node:fs` out of browser bundles.
-        const fs = await import('node:fs/promises');
+        // Lazy import keeps `node:fs` out of browser bundles. webpackIgnore stops
+        // webpack bundling it for browser targets; Vite externalises node: builtins
+        // itself (no @vite-ignore — that would also bypass test mocks of node:fs).
+        const fs = await import(/* webpackIgnore: true */ 'node:fs/promises');
         raw = await fs.readFile(path, 'utf8');
     }
     catch (err) {

package/dist/ergonomic/preset_resolver.js

@@ -34,7 +34,7 @@
 //     plan's canonical example and the contract minimum.
 // On a parse, the resolver also writes `encoding_mode='target_size'`
 // to the wire; conversely if `crf` is explicit, `encoding_mode='crf'`.
-import { createHash } from 'node:crypto';
+import { sha256Hex } from '../sha256.js';
 import { GislConfigError } from '../errors.js';
 import { ImageCompressPresetOptions, AudioCompressPresetOptions, VideoCompressPresetOptions, DocumentPdfCompressPresetOptions, DocumentOfficeCompressPresetOptions, DocumentOdfCompressPresetOptions, DocumentEpubCompressPresetOptions, } from './presets/index.js';
 /** Bumped on any change to a `*PresetOptions.shippedDefaultsFor(...)` cell value. */
@@ -52,7 +52,6 @@ export const PRESET_VERSION = '1.0';
 // safe path.
 const WIRE_ALIASES = Object.freeze({
     iccProfile: 'icc_profile',
-    autoOrient: 'auto_orient',
     outputFormat: 'output_format',
     sampleRate: 'sample_rate',
     audioCodec: 'audio_codec',
@@ -236,7 +235,7 @@ function presetDefaultsCellRecord(defaults, media, op, optimize) {
 // for clearly-typed plain objects whose key set only intersects with a
 // non-matching media.
 const MEDIA_FIELDS = Object.freeze({
-    image: new Set(['mode', 'quality', 'width', 'height', 'fit', 'metadata', 'iccProfile', 'autoOrient', 'progressive', 'outputFormat']),
+    image: new Set(['mode', 'quality', 'metadata', 'iccProfile', 'progressive', 'outputFormat']),
     audio: new Set(['bitrate', 'channels', 'sampleRate', 'normalize']),
     video: new Set(['codec', 'targetSize', 'crf', 'preset', 'width', 'height', 'fit', 'fps', 'faststart', 'audioCodec', 'audioBitrate']),
     document_pdf: new Set(['profile', 'colorspace', 'flattenForms']),
@@ -302,7 +301,7 @@ function mergeLayer(acc, layer, source) {
 // Validations on the merged wire payload
 // ---------------------------------------------------------------------------
 const KNOWN_WIRE_FIELDS = Object.freeze({
-    image: new Set(['mode', 'quality', 'width', 'height', 'fit', 'metadata', 'icc_profile', 'auto_orient', 'progressive', 'output_format']),
+    image: new Set(['mode', 'quality', 'metadata', 'icc_profile', 'progressive', 'output_format']),
     audio: new Set(['bitrate', 'channels', 'sample_rate', 'normalize', 'trim_start', 'trim_end']),
     video: new Set(['codec', 'encoding_mode', 'crf', 'target_size_bytes', 'preset', 'width', 'height', 'fit', 'fps', 'faststart', 'audio_codec', 'audio_bitrate', 'trim_start', 'trim_end']),
     document_pdf: new Set(['profile', 'colorspace', 'pages', 'flatten_forms']),
@@ -417,7 +416,7 @@ function computePresetConfigHash(clientDefault, scopedDefault, callPresetOverrid
         scopedDefault: scopedDefault ?? null,
         callPresetOverride: callPresetOverride ?? null,
     });
-    return `sha256:${createHash('sha256').update(canonical).digest('hex')}`;
+    return `sha256:${sha256Hex(canonical)}`;
 }
 // ---------------------------------------------------------------------------
 // Main entry point

package/dist/ergonomic/presets/image_compress.d.ts

@@ -1,25 +1,17 @@
-import { ImageMode, ImageFit, ImageMetadataPolicy, IccProfilePolicy, ImageFormat, OptimizeFor } from '../../generated/sdk_spec/enums.js';
+import { ImageMode, ImageMetadataPolicy, IccProfilePolicy, ImageFormat, OptimizeFor } from '../../generated/sdk_spec/enums.js';
 export interface ImageCompressPresetOptionsInput {
     readonly mode?: ImageMode;
     readonly quality?: number;
-    readonly width?: number;
-    readonly height?: number;
-    readonly fit?: ImageFit;
     readonly metadata?: ImageMetadataPolicy;
     readonly iccProfile?: IccProfilePolicy;
-    readonly autoOrient?: boolean;
     readonly progressive?: boolean;
     readonly outputFormat?: ImageFormat;
 }
 export declare class ImageCompressPresetOptions {
     readonly mode?: ImageMode;
     readonly quality?: number;
-    readonly width?: number;
-    readonly height?: number;
-    readonly fit?: ImageFit;
     readonly metadata?: ImageMetadataPolicy;
     readonly iccProfile?: IccProfilePolicy;
-    readonly autoOrient?: boolean;
     readonly progressive?: boolean;
     readonly outputFormat?: ImageFormat;
     private constructor();

package/dist/ergonomic/presets/image_compress.js

@@ -7,22 +7,19 @@
 // values ARE the wire backing values — so the leaf DTO is wire-compatible
 // once the resolver (T4b) snake_cases the property names.
 //
-// Field set per ticket VhIj4S7T (codex r3 lock): image = 10 fields
-//   (mode, quality, width, height, fit, metadata, iccProfile, autoOrient,
-//    progressive, outputFormat).
-// Trim / per-call knobs are deliberately excluded — they belong on the
-// per-call argument shape, not the preset cell.
+// Field set (6) per EsD1hs5u / contracts v2.60.0: image =
+//   (mode, quality, metadata, iccProfile, progressive, outputFormat).
+// `width`/`height`/`fit`/`autoOrient` were REMOVED — the image-compress
+// worker never resized (resize-fit lives on thumbnail/convert; video keeps
+// its own fit). Trim / per-call knobs are deliberately excluded — they
+// belong on the per-call argument shape, not the preset cell.
 import { shippedDefaultsFor as f3ShippedDefaultsFor } from '../../generated/sdk_spec/presets.js';
 import { translateEnum } from './_translate.js';
 export class ImageCompressPresetOptions {
     mode;
     quality;
-    width;
-    height;
-    fit;
     metadata;
     iccProfile;
-    autoOrient;
     progressive;
     outputFormat;
     constructor(input) {
@@ -30,18 +27,10 @@ export class ImageCompressPresetOptions {
             this.mode = input.mode;
         if (input.quality !== undefined)
             this.quality = input.quality;
-        if (input.width !== undefined)
-            this.width = input.width;
-        if (input.height !== undefined)
-            this.height = input.height;
-        if (input.fit !== undefined)
-            this.fit = input.fit;
         if (input.metadata !== undefined)
             this.metadata = input.metadata;
         if (input.iccProfile !== undefined)
             this.iccProfile = input.iccProfile;
-        if (input.autoOrient !== undefined)
-            this.autoOrient = input.autoOrient;
         if (input.progressive !== undefined)
             this.progressive = input.progressive;
         if (input.outputFormat !== undefined)
@@ -74,18 +63,10 @@ export class ImageCompressPresetOptions {
             mut.mode = translateEnum('ImageMode', cell.mode);
         if ('quality' in cell)
             mut.quality = cell.quality;
-        if ('width' in cell)
-            mut.width = cell.width;
-        if ('height' in cell)
-            mut.height = cell.height;
-        if ('fit' in cell)
-            mut.fit = translateEnum('ImageFit', cell.fit);
         if ('metadata' in cell)
             mut.metadata = translateEnum('ImageMetadataPolicy', cell.metadata);
         if ('iccProfile' in cell)
             mut.iccProfile = translateEnum('IccProfilePolicy', cell.iccProfile);
-        if ('autoOrient' in cell)
-            mut.autoOrient = cell.autoOrient;
         if ('progressive' in cell)
             mut.progressive = cell.progressive;
         if ('outputFormat' in cell)

package/dist/ergonomic/presets/index.d.ts

@@ -13,7 +13,7 @@ export { DocumentPdfCompressPresetOptions, type DocumentPdfCompressPresetOptions
 export { DocumentOfficeCompressPresetOptions, type DocumentOfficeCompressPresetOptionsInput, } from './document_office_compress.js';
 export { DocumentOdfCompressPresetOptions, type DocumentOdfCompressPresetOptionsInput, } from './document_odf_compress.js';
 export { DocumentEpubCompressPresetOptions, type DocumentEpubCompressPresetOptionsInput, } from './document_epub_compress.js';
-export { OptimizeFor, ImageMode, ImageFit, ImageMetadataPolicy, IccProfilePolicy, ImageFormat, VideoCodec, VideoPreset, VideoFit, AudioBitrate, AudioCodec, AudioSampleRate, PdfProfile, PdfColorspace, } from '../../generated/sdk_spec/enums.js';
+export { OptimizeFor, ImageMode, ImageMetadataPolicy, IccProfilePolicy, ImageFormat, VideoCodec, VideoPreset, VideoFit, AudioBitrate, AudioCodec, AudioSampleRate, PdfProfile, PdfColorspace, } from '../../generated/sdk_spec/enums.js';
 /** Supported media×op pairs for preset cells in T4a. Compress-only. */
 export type PresetMedia = 'image' | 'audio' | 'video' | 'document_pdf' | 'document_office' | 'document_odf' | 'document_epub';
 export type PresetOp = 'compress';