@joymerrevent/porters-connect 0.16.0 → 0.17.0

package/CHANGELOG.md

@@ -5,6 +5,92 @@
 
 ## [Unreleased]
 
+## [0.17.0] - 2026-09-16
+
+**添付ファイルの運び方を決め、出典に無いパラメータを型から外した版**です。**破壊的変更を 2 つ**
+含みます（添付の本体は `get` でだけ取れる／Phase の Read から `keywords` / `itemstate` が消える）。
+
+### Added
+
+- **`t.attachment.searchAll()`** — 200 件を超える添付を、`start` を自分で回さずに順に見られます
+  （[ADR-0075][adr75]）。ほかの 15 エンドポイントと同じ語彙になりました。
+
+  ```ts
+  for await (const a of t.attachment.searchAll({
+    condition: { "Resource:eq": "17" },
+  })) {
+    console.log(a.fileName, a.contentType);
+  }
+  ```
+
+  流れるのは**メタデータだけ**なので、全部を歩いてもファイル本体はダウンロードされません。
+
+- **`createFetchTransport`** — 既定の transport を公開しました（[ADR-0077][adr77]）。
+  1 リクエストのタイムアウト（既定 **30 秒**）を変えられます。
+
+  ```ts
+  import {
+    PortersClient,
+    createFetchTransport,
+  } from "@joymerrevent/porters-connect";
+
+  const porters = new PortersClient({
+    host,
+    appId,
+    appSecret,
+    transport: createFetchTransport({ timeoutMs: 120_000 }), // 2 分
+  });
+  ```
+
+  この 30 秒は**接続から本文の受信完了まで**で、**1 リクエストごと**に数えます（自動リトライを
+  含めると最悪 `maxRetries + 1` 倍）。レートの待ち時間は含みません。`timeoutMs` は**正の整数**だけを
+  受け、`0`（＝即中断で「無制限」ではない）は構築時に `PortersConfigError` で弾きます。
+  これまで変えるには `Transport` の自前実装が必要で、`PortersNetworkError` への分類まで
+  書き直すことになっていました。
+
+- 公開した型: `AttachmentMetaField` / `AttachmentWalkQuery` / `FetchTransportOptions`。
+
+### Changed
+
+- **（破壊的）添付の本体（`content`）は `get` でだけ取れます**（[ADR-0075][adr75]）。
+  `search` / `searchAll` の `field` に `"Content"` は書けません。
+
+  ```ts
+  await t.attachment.search({ field: ["Id", "Content"] });
+  //                                       ^^^^^^^^^ 型エラーになります
+  const file = await t.attachment.get(900); // 本体はこちら
+  ```
+
+  1 ページは最大 200 件で、PORTERS は 1 ファイル 10MB まで許します。本体を混ぜた一覧は
+  **読める大きさを越えることがあります** — 1 ファイル 2MB 超 × 200 件で V8 の文字列上限
+  （536,870,888 文字）に当たり、`RangeError` になって再送しても直りません。しかも Attachment は
+  **ファイルサイズを返さない**ので、「何件までなら安全か」を呼び出し側が判断することもできません。
+  そこで件数ではなく**メソッド**で分けました。型を外して渡した場合も、送信前に
+  `PortersConfigError` で止まります。
+
+- **（破壊的）Phase の Read クエリから `keywords` / `itemstate` が消えました**（[ADR-0076][adr76]）。
+  PORTERS の `Phase - Read` はこの 2 つを Input Variables に挙げていません。Read 記事 17 本を
+  数えると、共通語彙のデータ系 11 本は両方を載せ、**Phase / Attachment / マスタ 4 種は 1 本も
+  載せていません**（11/11 対 0/6）ので、記事側の省略ではなく**エンドポイントごとに取るものが
+  違う**と読めます。出典に無いパラメータは、無視されるのではなく **Read 全体を失敗させうる**
+  （Result Code 100 / 102）ため、型の側で閉じました。
+
+  ```ts
+  await t.phase.of("client").search({ keywords: ["山田"] });
+  //                                  ^^^^^^^^ 型エラーになります
+  ```
+
+  **実行時は変えていません**。cast すれば今までどおり送られます（契約環境で「実は受け付ける」と
+  分かったときに確かめられるように残しました）。
+
+- **エンドポイント × 機能のマトリクスを起こしました**。PORTERS が取るものとライブラリが送るものを
+  表に並べ、**reference ↔ 表 ↔ 実装を両方向で突き合わせる検査**（94 件）を足しています。
+  ずれているセルには必ず根拠（ADR / ライブ検証）が要る形で、今回の 2 つの破壊的変更も
+  この表から出てきました。パッケージの中身は変わりません。
+
+- **既定 30 秒のタイムアウトをドキュメントに明文化しました**（[上限][limits]・[失敗の扱い][failures]）。
+  これまでどこにも書かれていませんでした。パッケージの中身は変わりません。
+
 ## [0.16.0] - 2026-09-15
 
 **カスタム項目を「宣言してから使う」に揃えた版**です。**破壊的変更**（`field` が未宣言の
@@ -798,11 +884,17 @@
 [adr69]: docs/adr/0069-tenant-field-catalog-tooling.md
 [adr73]: docs/adr/0073-throttle-sharing.md
 [adr74]: docs/adr/0074-custom-field-declaration-required.md
+[adr75]: docs/adr/0075-attachment-search-all.md
+[adr76]: docs/adr/0076-phase-read-query-surface.md
+[adr77]: docs/adr/0077-fetch-transport-timeout.md
+[limits]: docs/usage/concepts/limits.md
+[failures]: docs/usage/howto/handle-failures.md
 [lv]: docs/live-verification.md
 [ref]: docs/usage/reference/README.md
 [kac]: https://keepachangelog.com/en/1.1.0/
 [semver]: https://semver.org/
 [unreleased]: https://github.com/Joymerrevent/porters-connect/compare/v0.16.0...HEAD
+[0.17.0]: https://github.com/Joymerrevent/porters-connect/compare/v0.16.0...v0.17.0
 [0.16.0]: https://github.com/Joymerrevent/porters-connect/compare/v0.15.1...v0.16.0
 [0.15.1]: https://github.com/Joymerrevent/porters-connect/compare/v0.15.0...v0.15.1
 [0.15.0]: https://github.com/Joymerrevent/porters-connect/compare/v0.14.0...v0.15.0

package/dist/index.d.ts

@@ -52,6 +52,26 @@ type PartitionId = number;
  */
 type Scheme = "https" | "http";
 
+type FetchTransportOptions = {
+    /**
+     * How long one request may take, in milliseconds. Default 30,000.
+     *
+     * **It covers the whole exchange** — connect, send, and reading the response body to the end —
+     * because the abort signal is handed to `fetch` itself. A large download therefore hits it even
+     * when the headers came back instantly. It is **per request**, so a retried call can take
+     * `maxRetries + 1` times this (plus backoff), and it does not include waiting for a throttle
+     * slot (throttling sits above the transport).
+     *
+     * Raise it to read large attachments over a slow link; lower it to fail fast in an interactive
+     * tool. Must be a positive integer — `0` would abort every request immediately, which reads
+     * like "no timeout" and is not (ADR-0077).
+     */
+    timeoutMs?: number;
+    /** Injectable fetch (tests / custom dispatcher). Default global fetch. */
+    fetchImpl?: typeof fetch;
+};
+declare const createFetchTransport: (opts?: FetchTransportOptions) => Transport;
+
 /** A mock reply: an XML body string (HTTP 200), or an explicit status + body. */
 type MockReply = string | {
     status?: number;
@@ -638,13 +658,38 @@ type UpdateInput<F extends FieldCatalog> = {
  * {@link EmptyReferences}. With no keys, `ImageReadRecord` collapses back to the record it wrapped.
  */
 type EmptyImages = Record<never, never>;
-type Resource<F extends FieldCatalog, Req extends keyof F, R extends ReferenceMap = EmptyReferences> = {
-    search<const E extends Expand<R> = EmptyReferences, const I extends ImageOption<F> = EmptyImages>(query?: SearchQuery<F, R> & {
+/**
+ * A query with `K` taken out — and **kept out**. `Omit` alone only stops a fresh object literal
+ * (excess-property checking); a variable that happens to carry the key still assigns. Re-declaring
+ * each removed key as `?: never` closes that hole, so `search(query)` fails whichever way the
+ * object was built. The runtime is unaffected: the key can still arrive through a cast (ADR-0074).
+ *
+ * Only the **endpoint-level** exclusions (`Unsupported`) get this treatment. `searchAll` keeps a
+ * plain `Omit` for `count` / `start`: those are not "PORTERS does not take this", they are
+ * "the walk decides them", and tightening that is a different decision from ADR-0076.
+ */
+type WithoutQueryKeys<Q, K extends keyof Q> = Omit<Q, K> & {
+    [P in K]?: never;
+};
+type Resource<F extends FieldCatalog, Req extends keyof F, R extends ReferenceMap = EmptyReferences, 
+/**
+ * Query keys **this endpoint does not take** (ADR-0076). The common Read vocabulary is not
+ * universal: PORTERS lists `keywords` / `itemstate` for the 11 common data resources and for
+ * none of the others, so a resource on this factory can say which of them its own endpoint
+ * leaves out. `never` — the default — means "takes the whole vocabulary".
+ *
+ * Sending a parameter the endpoint does not list can fail the *whole* Read (Result Code 100 /
+ * 102), so the safe side is not to offer it. The runtime stays permissive (ADR-0074): a key
+ * forced in through a cast is still sent, which is how a live contract can test whether
+ * PORTERS accepts it at all.
+ */
+Unsupported extends keyof SearchQuery<F, R> = never> = {
+    search<const E extends Expand<R> = EmptyReferences, const I extends ImageOption<F> = EmptyImages>(query?: WithoutQueryKeys<SearchQuery<F, R>, Unsupported> & {
         expand?: E;
         image?: I;
     }): Promise<ResourcePageOf<ImageReadRecord<ExpandedReadRecord<F, R, E>, I>>>;
     /** Auto-paginating search: yields every matching record (200 per page). */
-    searchAll<const E extends Expand<R> = EmptyReferences, const I extends ImageOption<F> = EmptyImages>(query?: Omit<SearchQuery<F, R>, "count" | "start"> & {
+    searchAll<const E extends Expand<R> = EmptyReferences, const I extends ImageOption<F> = EmptyImages>(query?: Omit<WithoutQueryKeys<SearchQuery<F, R>, Unsupported>, "count" | "start"> & {
         expand?: E;
         image?: I;
     }): AsyncIterable<ImageReadRecord<ExpandedReadRecord<F, R, E>, I>>;
@@ -1734,13 +1779,23 @@ declare const REQUIRED_ON_CREATE$2: readonly ["ResourceId"];
 /** A decoded Phase entry: known aliases, each requested field `value | null`. */
 type Phase = ReadRecord<typeof FIELDS$6>;
 type PhasePage = ResourcePage<typeof FIELDS$6>;
-type PhaseSearchQuery = SearchQuery<typeof FIELDS$6>;
+type PhaseUnsupportedQuery = "keywords" | "itemstate";
+/**
+ * Phase's Read query: the common vocabulary **minus `keywords` / `itemstate`**, which
+ * `Phase - Read` does not list (ADR-0076).
+ */
+type PhaseSearchQuery = Omit<SearchQuery<typeof FIELDS$6>, PhaseUnsupportedQuery> & {
+    [K in PhaseUnsupportedQuery]?: never;
+};
 /** Fields for `create`: `ResourceId` required (`Id` and `Resource` are supplied for you). */
 type PhaseCreateInput = CreateInput<typeof FIELDS$6, (typeof REQUIRED_ON_CREATE$2)[number]>;
 /** Fields for `update`: all optional (`null` omits, `""` clears a text field). */
 type PhaseUpdateInput = UpdateInput<typeof FIELDS$6>;
-/** The Phase accessor for one bound resource — same shape as every other resource. */
-type PhaseResource = Resource<typeof FIELDS$6, (typeof REQUIRED_ON_CREATE$2)[number]>;
+/**
+ * The Phase accessor for one bound resource — the same shape as every other resource, except that
+ * `search` / `searchAll` do not take `keywords` / `itemstate` (ADR-0076).
+ */
+type PhaseResource = Resource<typeof FIELDS$6, (typeof REQUIRED_ON_CREATE$2)[number], EmptyReferences, PhaseUnsupportedQuery>;
 /**
  * Phase is reached through the resource whose history you want (ADR-0061 案2a):
  *
@@ -2188,6 +2243,11 @@ type ResumeUpdateInput = UpdateInput<typeof FIELDS$4>;
 /** The Resume accessor; `C` is the declared custom-field catalog merged on (ADR-0023). */
 type ResumeResource<C extends FieldCatalog = EmptyCatalog> = Resource<typeof FIELDS$4 & C, (typeof REQUIRED_ON_CREATE)[number], typeof REFERENCES>;
 
+/**
+ * Every Attachment field **except** the body: what a listing may ask for (ADR-0075).
+ * These are the aliases `search` / `searchAll` accept.
+ */
+type AttachmentMetaField = "Id" | "Resource" | "ResourceId" | "ContentType" | "FileName";
 /** A decoded Attachment. A field is `null` unless it was returned (see `field`). */
 type Attachment = {
     id: number | null;
@@ -2208,16 +2268,19 @@ type AttachmentPage = {
 };
 type AttachmentSearchQuery = {
     /**
-     * Output fields. **Omit** to fetch metadata by default (Id / Resource / ResourceId /
-     * ContentType / FileName) — the large Base64 `Content` is excluded so listing doesn't download
-     * every file body (ADR-0020); request `["Content", …]` or use `get()` for the body. Pass `[]`
-     * for the API-native primary-key-only response. A non-empty list is sent verbatim.
+     * Output fields — **metadata only**. Omit for all five (Id / Resource / ResourceId /
+     * ContentType / FileName), or pass `[]` for the API-native primary-key-only response.
+     *
+     * The file body is **not** on this list: a listing never carries it, whatever the count
+     * (ADR-0075). Read a body with {@link AttachmentResource.get}, one record at a time.
      */
-    field?: string[];
+    field?: AttachmentMetaField[];
     condition?: Record<string, string>;
     count?: number;
     start?: number;
 };
+/** A walking Read: `count` / `start` are the walk's to decide. */
+type AttachmentWalkQuery = Omit<AttachmentSearchQuery, "count" | "start">;
 /** Fields for creating an Attachment. `content` is the Base64 file body. */
 type AttachmentCreate = {
     resource: number;
@@ -2234,6 +2297,16 @@ type AttachmentUpdate = {
 };
 type AttachmentResource = {
     search(query?: AttachmentSearchQuery): Promise<AttachmentPage>;
+    /**
+     * Auto-paginating search: yields every matching attachment (200 per page). Metadata only —
+     * the body stays behind {@link AttachmentResource.get} (ADR-0075), so walking every attachment
+     * in a partition never drags the files along with it.
+     */
+    searchAll(query?: AttachmentWalkQuery): AsyncIterable<Attachment>;
+    /**
+     * Read one attachment **with its body** (`content`). This is the only method that carries it:
+     * one record at a time is a size PORTERS' own 10MB-per-file limit keeps readable (ADR-0075).
+     */
     get(id: number): Promise<Attachment | undefined>;
     /** Create an Attachment; resolves to the newly assigned id. */
     create(input: AttachmentCreate): Promise<number>;
@@ -2827,4 +2900,4 @@ declare const bytesToBase64: (bytes: Uint8Array) => string;
 /** Decode a Base64 string back to raw bytes. */
 declare const base64ToBytes: (b64: string) => Uint8Array;
 
-export { type Activity, type ActivityCreateInput, type ActivityPage, type ActivityResource, type ActivitySearchQuery, type ActivityUpdateInput, type Attachment, type AttachmentCreate, type AttachmentPage, type AttachmentResource, type AttachmentSearchQuery, type AttachmentUpdate, type AuthApi, type AuthorizationUrlOptions, type BulkWriteResult, type BulkWriteResultItem, type Candidate, type CandidateCreateInput, type CandidatePage, type CandidateResource, type CandidateSearchQuery, type CandidateUpdateInput, type Client, type ClientCreateInput, type ClientPage, type ClientResource, type ClientSearchQuery, type ClientUpdateInput, type Condition, type Contact, type ContactCreateInput, type ContactPage, type ContactResource, type ContactSearchQuery, type ContactUpdateInput, type Contract, type ContractCreateInput, type ContractPage, type ContractResource, type ContractSearchQuery, type ContractUpdateInput, type CustomDataType, type CustomFieldResource, type CustomFor, type DeclaredCatalogs, type DefinedFields, type DepartmentRef, type ErrorCategory, type Expand, type ExpandedReadRecord, type Field, type FieldBuilder, type FieldCatalogSource, type FieldDecls, type FieldDef, type FieldPage, type FieldResource, type FieldSearchQuery, type FieldTypeMismatch, type FieldValue, type FieldVerification, type GenerateFieldDeclsOptions, type GetAccessTokenOptions, type ImageContentType, type ImageOption, type ImageReadRecord, type ImageSelectedValue, type ImageSubField, type ImageValue, type ImageWriteValue, type ItemState, type Job, type JobCreateInput, type JobPage, type JobResource, type JobSearchQuery, type JobUpdateInput, type LinkValue, type MissingField, type MockHandler, type MockReply, type MockTransportOptions, type Opportunity, type OpportunityCreateInput, type OpportunityPage, type OpportunityResource, type OpportunitySearchQuery, type OpportunityUpdateInput, type Option, type OptionResource, type OptionSearchQuery, type Order, type Partition, type PartitionId, type PartitionPage, type PartitionResource, type PartitionSearchQuery, type Phase, type PhaseAccessor, type PhaseCreateInput, type PhasePage, type PhaseResource, type PhaseSearchQuery, type PhaseUpdateInput, PortersAuthError, PortersClient, type PortersClientOptions, PortersConfigError, PortersError, type PortersErrorContext, type PortersErrorOptions, PortersNetworkError, PortersResourceError, type Process, type ProcessCreateInput, type ProcessPage, type ProcessResource, type ProcessSearchQuery, type ProcessUpdateInput, type ReadCustomCatalogOptions, type ReadFieldAlias, type Recruiter, type RecruiterCreateInput, type RecruiterPage, type RecruiterResource, type RecruiterSearchQuery, type RecruiterUpdateInput, type ReferenceMap, type ReferenceRecord, type ResourceName, type ResourcePageOf, type ResourceType, type Resume, type ResumeCreateInput, type ResumePage, type ResumeResource, type ResumeSearchQuery, type ResumeUpdateInput, type RevokeUrlOptions, type Sales, type SalesCreateInput, type SalesPage, type SalesResource, type SalesSearchQuery, type SalesUpdateInput, type Scheme, type Scope, type SearchQuery, type StoredTokens, type TenantCustomCatalog, type TenantScope, type Throttle, type ThrottleOptions, type TokenProvider, type TokenStore, type Transport, type TransportRequest, type TransportResponse, type UndeclarableField, type UndeclarableReason, type UndeclarableTenantField, type UndeclaredField, type UnverifiableResource, type User, type UserPage, type UserRef, type UserResource, type UserSearchQuery, type VerifyFieldsOptions, assertFieldsMatch, base64ToBytes, bytesToBase64, createMockTransport, createThrottle, defineFields, generateFieldDecls, rawValue, readCustomCatalog, verifyFields };
+export { type Activity, type ActivityCreateInput, type ActivityPage, type ActivityResource, type ActivitySearchQuery, type ActivityUpdateInput, type Attachment, type AttachmentCreate, type AttachmentMetaField, type AttachmentPage, type AttachmentResource, type AttachmentSearchQuery, type AttachmentUpdate, type AttachmentWalkQuery, type AuthApi, type AuthorizationUrlOptions, type BulkWriteResult, type BulkWriteResultItem, type Candidate, type CandidateCreateInput, type CandidatePage, type CandidateResource, type CandidateSearchQuery, type CandidateUpdateInput, type Client, type ClientCreateInput, type ClientPage, type ClientResource, type ClientSearchQuery, type ClientUpdateInput, type Condition, type Contact, type ContactCreateInput, type ContactPage, type ContactResource, type ContactSearchQuery, type ContactUpdateInput, type Contract, type ContractCreateInput, type ContractPage, type ContractResource, type ContractSearchQuery, type ContractUpdateInput, type CustomDataType, type CustomFieldResource, type CustomFor, type DeclaredCatalogs, type DefinedFields, type DepartmentRef, type ErrorCategory, type Expand, type ExpandedReadRecord, type FetchTransportOptions, type Field, type FieldBuilder, type FieldCatalogSource, type FieldDecls, type FieldDef, type FieldPage, type FieldResource, type FieldSearchQuery, type FieldTypeMismatch, type FieldValue, type FieldVerification, type GenerateFieldDeclsOptions, type GetAccessTokenOptions, type ImageContentType, type ImageOption, type ImageReadRecord, type ImageSelectedValue, type ImageSubField, type ImageValue, type ImageWriteValue, type ItemState, type Job, type JobCreateInput, type JobPage, type JobResource, type JobSearchQuery, type JobUpdateInput, type LinkValue, type MissingField, type MockHandler, type MockReply, type MockTransportOptions, type Opportunity, type OpportunityCreateInput, type OpportunityPage, type OpportunityResource, type OpportunitySearchQuery, type OpportunityUpdateInput, type Option, type OptionResource, type OptionSearchQuery, type Order, type Partition, type PartitionId, type PartitionPage, type PartitionResource, type PartitionSearchQuery, type Phase, type PhaseAccessor, type PhaseCreateInput, type PhasePage, type PhaseResource, type PhaseSearchQuery, type PhaseUpdateInput, PortersAuthError, PortersClient, type PortersClientOptions, PortersConfigError, PortersError, type PortersErrorContext, type PortersErrorOptions, PortersNetworkError, PortersResourceError, type Process, type ProcessCreateInput, type ProcessPage, type ProcessResource, type ProcessSearchQuery, type ProcessUpdateInput, type ReadCustomCatalogOptions, type ReadFieldAlias, type Recruiter, type RecruiterCreateInput, type RecruiterPage, type RecruiterResource, type RecruiterSearchQuery, type RecruiterUpdateInput, type ReferenceMap, type ReferenceRecord, type ResourceName, type ResourcePageOf, type ResourceType, type Resume, type ResumeCreateInput, type ResumePage, type ResumeResource, type ResumeSearchQuery, type ResumeUpdateInput, type RevokeUrlOptions, type Sales, type SalesCreateInput, type SalesPage, type SalesResource, type SalesSearchQuery, type SalesUpdateInput, type Scheme, type Scope, type SearchQuery, type StoredTokens, type TenantCustomCatalog, type TenantScope, type Throttle, type ThrottleOptions, type TokenProvider, type TokenStore, type Transport, type TransportRequest, type TransportResponse, type UndeclarableField, type UndeclarableReason, type UndeclarableTenantField, type UndeclaredField, type UnverifiableResource, type User, type UserPage, type UserRef, type UserResource, type UserSearchQuery, type VerifyFieldsOptions, assertFieldsMatch, base64ToBytes, bytesToBase64, createFetchTransport, createMockTransport, createThrottle, defineFields, generateFieldDecls, rawValue, readCustomCatalog, verifyFields };

package/dist/index.js

@@ -185,9 +185,19 @@ var processWarner = createInsecureSchemeWarner();
 var warnIfInsecureScheme = (scheme, host) => processWarner.warn(scheme, host);
 
 // src/http/fetch-transport.ts
+var DEFAULT_TIMEOUT_MS = 3e4;
 var createFetchTransport = (opts = {}) => {
   const doFetch = opts.fetchImpl ?? fetch;
-  const timeoutMs = opts.timeoutMs ?? 3e4;
+  const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  if (!Number.isInteger(timeoutMs) || timeoutMs <= 0) {
+    throw new PortersConfigError(
+      `timeoutMs must be a positive integer, got ${JSON.stringify(opts.timeoutMs)}`,
+      {
+        category: "config",
+        hint: `Pass milliseconds (default ${DEFAULT_TIMEOUT_MS}). Raise it for large attachments; there is no "no timeout" value.`
+      }
+    );
+  }
   return {
     send: async (req) => {
       try {
@@ -2161,21 +2171,16 @@ var createPhaseAccessor = (deps) => ({
 // src/resources/attachment.ts
 var MAX_CONTENT_CHARS = 14e6;
 var ATTACHMENT_RESOURCE = "Attachment";
-var ATTACHMENT_FIELD_NAMES = [
-  "Id",
-  "Resource",
-  "ResourceId",
-  "ContentType",
-  "FileName",
-  "Content"
-];
-var DEFAULT_FIELDS = [
+var CONTENT = "Content";
+var META_FIELDS = [
   "Id",
   "Resource",
   "ResourceId",
   "ContentType",
   "FileName"
 ];
+var ATTACHMENT_FIELD_NAMES = [...META_FIELDS, CONTENT];
+var DEFAULT_FIELDS = META_FIELDS;
 var buildAttachmentReadUrl = (accessPoint, partition, q) => {
   const p = new URLSearchParams();
   p.set("partition", String(partition));
@@ -2200,6 +2205,16 @@ var decodeAttachment = (item) => ({
   content: asString(item.Content) ?? null
 });
 var tag = (name, value) => `<${name}>${encodeField("SinglelineText", String(value), name)}</${name}>`;
+var guardNoContentInListing = (field, method) => {
+  if (field?.includes(CONTENT) !== true) return;
+  throw new PortersConfigError(
+    `${method} cannot request "${CONTENT}": a listing never carries the file body`,
+    {
+      category: "config",
+      hint: "Read the body one record at a time with get(id); search/searchAll return metadata (fileName, contentType, \u2026)."
+    }
+  );
+};
 var guardContent = (content) => {
   if (content !== void 0 && content.length > MAX_CONTENT_CHARS) {
     throw new PortersConfigError(
@@ -2209,13 +2224,10 @@ var guardContent = (content) => {
   }
 };
 var createAttachmentResource = (deps) => {
-  const search = async (query = {}) => deps.requester.request(
+  const read = (params) => deps.requester.request(
     {
       method: "GET",
-      url: buildAttachmentReadUrl(deps.accessPoint, deps.partition, {
-        ...query,
-        field: query.field ?? DEFAULT_FIELDS
-      }),
+      url: buildAttachmentReadUrl(deps.accessPoint, deps.partition, params),
       headers: {}
     },
     (body) => {
@@ -2228,8 +2240,18 @@ var createAttachmentResource = (deps) => {
       };
     }
   );
+  const search = async (query = {}) => {
+    guardNoContentInListing(query.field, "search");
+    return read({ ...query, field: query.field ?? DEFAULT_FIELDS });
+  };
+  const searchAll = (query = {}) => paginateOnce(() => {
+    guardNoContentInListing(query.field, "searchAll");
+    const field = query.field ?? DEFAULT_FIELDS;
+    const condition = query.condition;
+    return (count, start) => read({ field, condition, count, start });
+  });
   const get = async (id) => {
-    const page = await search({
+    const page = await read({
       field: ATTACHMENT_FIELD_NAMES,
       condition: { "Id:eq": String(id) },
       count: 1
@@ -2261,7 +2283,7 @@ var createAttachmentResource = (deps) => {
     if (input.content !== void 0) inner += tag("Content", input.content);
     return write(inner, true);
   };
-  return { search, get, create, update };
+  return { search, searchAll, get, create, update };
 };
 
 // src/resources/partition.ts
@@ -2918,6 +2940,7 @@ export {
   assertFieldsMatch,
   base64ToBytes,
   bytesToBase64,
+  createFetchTransport,
   createMockTransport,
   createThrottle,
   defineFields,