@layervai/qurl 0.3.1 → 0.5.0

package/dist/cjs/client.js

@@ -1,11 +1,38 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ProtectedResource = exports.QURLClient = void 0;
+exports.ProtectedResource = exports.QURLClient = exports.SIGNED_FRAGMENT_RE = void 0;
 const errors_js_1 = require("./errors.js");
+const internal_js_1 = require("./internal.js");
 const version_js_1 = require("./version.js");
 const DEFAULT_BASE_URL = "https://api.layerv.ai";
 const DEFAULT_MAX_RETRIES = 3;
 const DEFAULT_TIMEOUT = 30_000;
+// Match qurl-go c4f2f98's exact API response cap. Current qurl-service list
+// routes cap pages at 100 items. A caller can still exceed this cap with a
+// large, heavily escaped webhook-delivery page, so list callers must request a
+// smaller page if the service reports the body-limit error. This cap is fixed:
+// do not add an override or widen one SDK independently from the other.
+// The limit is enforced from Content-Length when usable and again while
+// consuming the response stream.
+const MAX_RESPONSE_BODY_BYTES = 1 << 20;
+const MAX_ERROR_SNIPPET_BYTES = 512;
+// UTF-8 uses at least one byte per UTF-16 code unit. Reading more source units
+// cannot add a byte that fits in a 512-byte retained diagnostic.
+const MAX_ERROR_SNIPPET_SOURCE_CODE_UNITS = MAX_ERROR_SNIPPET_BYTES;
+const MAX_INVALID_FIELD_ENTRIES = 100;
+const MAX_DEBUG_BODY_KEYS = 100;
+// Bound each retained diagnostic collection as well as each string. Without
+// this aggregate cap, 100 valid 512-byte keys and values could turn a small
+// server error into a large caller-visible object. This is a diagnostic budget,
+// not part of the API wire contract.
+const MAX_DIAGNOSTIC_COLLECTION_BYTES = 8 << 10;
+const TEXT_ENCODER = new TextEncoder();
+const ERROR_SNIPPET_ELLIPSIS = "...";
+const ERROR_SNIPPET_ELLIPSIS_BYTES = 3;
+// RFC 8259 JSON exchanged between systems must be valid UTF-8. A non-fatal
+// decoder would replace malformed bytes with U+FFFD before JSON.parse and hide
+// the producer's exact contract violation.
+const TEXT_DECODER = new TextDecoder("utf-8", { fatal: true });
 const RETRY_BASE_DELAY_MS = 500;
 // Bounds local exponential backoff (NOT server-asserted Retry-After —
 // see `RETRY_AFTER_HARD_CAP_MS` for that).
@@ -18,13 +45,33 @@ const RETRY_AFTER_PARSE_LIMIT_S = RETRY_AFTER_HARD_CAP_MS / 1000;
 const RETRYABLE_STATUS = new Set([429, 502, 503, 504]);
 // Keep mutating status retries 429-only until the service-side idempotency
 // cache contract is proven across 5xx, TTL, and replay-window edge cases.
-// Network-error retries still reuse Idempotency-Key below.
+// Fetch-level POST/PATCH retries still reuse Idempotency-Key below.
 const RETRYABLE_STATUS_MUTATING = new Set([429]);
+const REDIRECT_RESPONSE_STATUSES = new Set([300, 301, 302, 303, 305, 307, 308]);
+const NO_RETRYABLE_STATUSES = new Set();
 const IDEMPOTENCY_KEY_METHODS = new Set(["POST", "PATCH"]);
 const MUTATING_RETRY_METHODS = new Set(["POST", "PATCH"]);
 const MAX_IDEMPOTENCY_KEY = 256;
 const IDEMPOTENCY_KEY_VALUE_RE = /^[\x21-\x7e](?:[\x20-\x7e]*[\x21-\x7e])?$/;
 const UUID_HEX = Array.from({ length: 256 }, (_, i) => i.toString(16).padStart(2, "0"));
+class ResponseBodyTooLargeError extends Error {
+    constructor() {
+        super(`Response body exceeds ${MAX_RESPONSE_BODY_BYTES}-byte limit`);
+        this.name = "ResponseBodyTooLargeError";
+    }
+}
+class InvalidResponseEncodingError extends Error {
+    constructor() {
+        super("Response body is not valid UTF-8");
+        this.name = "InvalidResponseEncodingError";
+    }
+}
+class ResponseBodyMaterializationError extends Error {
+    constructor(message = "Response-like fetch returned a value that cannot be serialized as JSON") {
+        super(message);
+        this.name = "ResponseBodyMaterializationError";
+    }
+}
 const NO_PASSTHROUGH_STATUSES = [];
 const BATCH_PASSTHROUGH_STATUSES = [400];
 /** Allowlist of known query-param keys for the `list()` endpoint. */
@@ -149,6 +196,7 @@ const CREATE_PORTAL_OPTION_KEYS = [
     "oneTimeUse",
     "maxSessions",
     "sessionDuration",
+    "targetPath",
 ];
 assertExhaustive(true);
 const UPDATE_RESOURCE_QURL_FIELD_KEYS = [
@@ -160,13 +208,6 @@ const UPDATE_RESOURCE_QURL_FIELD_KEYS = [
     "session_duration",
 ];
 assertExhaustive(true);
-const AGENT_BOOTSTRAP_FIELD_KEYS = [
-    "public_key",
-    "agent_id",
-    "hostname",
-    "version",
-];
-assertExhaustive(true);
 const UPDATE_CUSTOMER_FIELD_KEYS = [
     "spending_cap_cents",
 ];
@@ -342,23 +383,330 @@ function fillRandomBytes(bytes) {
  * Distinct from {@link clientValidationError} so callers can `.code`-branch
  * between "I passed bad input locally" (`"client_validation"`) and "the
  * server returned a body I can't interpret" (`"unexpected_response"`).
- * Uses `status: 0` because the offending HTTP status (400/207/etc.) isn't
- * the thing being reported — the shape mismatch is.
+ * Uses `status: 0` by default because a logical shape mismatch is not tied to
+ * the HTTP classification. Callers that enforce an observed HTTP contract
+ * pass that status explicitly.
  *
  * Threads `request_id` through to {@link QURLError.requestId} when the
  * server-side correlation ID is available — operators debugging
  * "unexpected response" tickets need it on the *error* path too, not
  * just on success/passthrough returns.
  */
-function unexpectedResponseError(detail, request_id) {
+function unexpectedResponseError(detail, options = {}) {
+    // Every detail passed here is an SDK-authored contract message whose dynamic
+    // inputs were validated by the caller-side shape guards. Do not pass raw
+    // server strings to this helper. Server diagnostics use boundedErrorSnippet.
+    const safeRequestId = boundedErrorIdentifier(options.requestId);
     return new errors_js_1.ValidationError({
-        status: 0,
+        status: options.status ?? 0,
         code: errors_js_1.ERROR_CODE_UNEXPECTED_RESPONSE,
         title: "Unexpected Response",
         detail,
-        request_id,
+        request_id: safeRequestId,
     });
 }
+function withErrorCause(error, cause) {
+    // Match the native Error `cause` descriptor. In particular, do not leak a
+    // transport object through Object.keys(), object spread, or JSON logging.
+    Object.defineProperty(error, "cause", {
+        value: cause,
+        writable: true,
+        configurable: true,
+    });
+    return error;
+}
+function isIndependentAbort(error, requestSignal) {
+    return (error instanceof Error &&
+        (error.name === "AbortError" || error.name === "TimeoutError") &&
+        !requestSignal.aborted);
+}
+function isSdkTimeout(error, requestSignal) {
+    return (error instanceof Error &&
+        requestSignal.aborted &&
+        (error.name === "TimeoutError" || error.name === "AbortError"));
+}
+/**
+ * Normalize a server-provided problem title/detail into a single-line,
+ * UTF-8-safe snippet. Error messages must stay bounded even when a proxy or
+ * compromised upstream returns very large structured problem fields.
+ */
+function normalizedErrorSnippet(value) {
+    if (typeof value !== "string")
+        return undefined;
+    // Bound source work before the Unicode regular expressions allocate
+    // normalized copies. The response body cap is much larger than one retained
+    // diagnostic, so processing the full server string would waste memory.
+    const normalized = value
+        .slice(0, MAX_ERROR_SNIPPET_SOURCE_CODE_UNITS)
+        // Strip control characters plus bidi override/isolate controls that can
+        // visually reorder diagnostics. Preserve other formatting characters
+        // such as ZWJ/ZWNJ, which are required by legitimate scripts and emoji.
+        .replace(/[\p{Cc}\u061C\u200E\u200F\u202A-\u202E\u2066-\u2069]/gu, " ")
+        .trim()
+        .replace(/\s+/g, " ");
+    return normalized === "" ? undefined : normalized;
+}
+function boundedErrorSnippet(value) {
+    const sourceTruncated = typeof value === "string" && value.length > MAX_ERROR_SNIPPET_SOURCE_CODE_UNITS;
+    const normalized = normalizedErrorSnippet(value);
+    if (normalized === undefined)
+        return undefined;
+    const contentLimit = sourceTruncated
+        ? MAX_ERROR_SNIPPET_BYTES - ERROR_SNIPPET_ELLIPSIS_BYTES
+        : MAX_ERROR_SNIPPET_BYTES;
+    // UTF-8 uses at most three bytes per UTF-16 code unit. Most diagnostics are
+    // short ASCII, so avoid an allocation only to prove they fit.
+    if (normalized.length * 3 <= contentLimit) {
+        return sourceTruncated ? `${normalized}${ERROR_SNIPPET_ELLIPSIS}` : normalized;
+    }
+    const encoded = TEXT_ENCODER.encode(normalized);
+    if (encoded.byteLength <= contentLimit) {
+        return sourceTruncated ? `${normalized}${ERROR_SNIPPET_ELLIPSIS}` : normalized;
+    }
+    let end = MAX_ERROR_SNIPPET_BYTES - ERROR_SNIPPET_ELLIPSIS_BYTES;
+    // Do not split a multi-byte UTF-8 sequence at the cap.
+    while (end > 0 && (encoded[end] & 0xc0) === 0x80)
+        end--;
+    return `${TEXT_DECODER.decode(encoded.subarray(0, end))}${ERROR_SNIPPET_ELLIPSIS}`;
+}
+/** Keep server identifiers useful as exact machine-readable discriminants. */
+function boundedErrorIdentifier(value) {
+    if (typeof value !== "string" || value.length > MAX_ERROR_SNIPPET_SOURCE_CODE_UNITS) {
+        return undefined;
+    }
+    const normalized = normalizedErrorSnippet(value);
+    if (normalized === undefined ||
+        normalized !== value ||
+        TEXT_ENCODER.encode(value).byteLength > MAX_ERROR_SNIPPET_BYTES) {
+        return undefined;
+    }
+    return value;
+}
+/** Collect at most the first N enumerable own string keys without a full key-array copy. */
+function firstEnumerableOwnKeys(value, limit) {
+    const keys = [];
+    for (const key in value) {
+        if (!Object.prototype.hasOwnProperty.call(value, key))
+            continue;
+        keys.push(key);
+        if (keys.length === limit)
+            break;
+    }
+    return keys;
+}
+/** Bound the structured per-field diagnostics exposed on ValidationError. */
+function boundedInvalidFields(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return undefined;
+    const entries = [];
+    const retainedKeys = new Set();
+    let retainedBytes = 0;
+    // Bound inspected entries as well as retained entries. A hostile envelope
+    // whose values all have the wrong type must not make diagnostics scan every
+    // key in the response body.
+    for (const rawKey of firstEnumerableOwnKeys(value, MAX_INVALID_FIELD_ENTRIES)) {
+        const rawValue = value[rawKey];
+        const key = boundedErrorSnippet(rawKey);
+        const fieldDetail = boundedErrorSnippet(rawValue);
+        if (key !== undefined && fieldDetail !== undefined && !retainedKeys.has(key)) {
+            const entryBytes = TEXT_ENCODER.encode(key).byteLength + TEXT_ENCODER.encode(fieldDetail).byteLength;
+            // A later, smaller entry can still fit even when this one cannot.
+            if (retainedBytes + entryBytes > MAX_DIAGNOSTIC_COLLECTION_BYTES)
+                continue;
+            retainedKeys.add(key);
+            entries.push([key, fieldDetail]);
+            retainedBytes += entryBytes;
+        }
+    }
+    return entries.length > 0 ? Object.fromEntries(entries) : undefined;
+}
+/** Bound server-controlled object keys before forwarding them to a debug sink. */
+function boundedObjectKeys(value) {
+    // Stop before normalization so a hostile envelope cannot force work over
+    // every enumerable own key. Some early keys may normalize away; bounded
+    // diagnostics are more important here than filling every available slot.
+    const retained = [];
+    let retainedBytes = 0;
+    for (const rawKey of firstEnumerableOwnKeys(value, MAX_DEBUG_BODY_KEYS)) {
+        const key = boundedErrorSnippet(rawKey);
+        if (key === undefined)
+            continue;
+        const keyBytes = TEXT_ENCODER.encode(key).byteLength;
+        // A later, smaller key can still fit even when this one cannot.
+        if (retainedBytes + keyBytes > MAX_DIAGNOSTIC_COLLECTION_BYTES)
+            continue;
+        retained.push(key);
+        retainedBytes += keyBytes;
+    }
+    return retained;
+}
+async function cancelResponseBody(body) {
+    if (!body)
+        return;
+    try {
+        await body.cancel();
+    }
+    catch {
+        // Best-effort resource cleanup must not replace the deterministic SDK error.
+    }
+}
+function materializedResponseBodyExceedsLimit(value) {
+    if (value.length > MAX_RESPONSE_BODY_BYTES)
+        return true;
+    // Encoding creates another buffer. UTF-8 uses at most three bytes per
+    // UTF-16 code unit, so shorter strings are provably safe without that copy.
+    return (value.length * 3 > MAX_RESPONSE_BODY_BYTES &&
+        TEXT_ENCODER.encode(value).byteLength > MAX_RESPONSE_BODY_BYTES);
+}
+function contentLengthExceedsLimit(response) {
+    // 204/205 never carry content, and a 304 Content-Length describes the
+    // selected representation rather than a response body. Do not reject those
+    // statuses for metadata about bytes that fetch will not deliver.
+    if (response.status === 204 || response.status === 205 || response.status === 304)
+        return false;
+    const value = response.headers.get("content-length");
+    if (value === null || !/^\d+$/.test(value.trim()))
+        return false;
+    return Number(value) > MAX_RESPONSE_BODY_BYTES;
+}
+/** Detect a followed redirect from fetch implementations that expose only the final URL. */
+function responseUrlState(responseUrl, requestUrl) {
+    if (typeof responseUrl !== "string" || responseUrl === "")
+        return "same";
+    if (responseUrl === requestUrl)
+        return "same";
+    try {
+        // URL serialization normalizes equivalent spellings such as host case and
+        // an explicit default port, so they do not create false redirect reports.
+        return new URL(responseUrl).href === new URL(requestUrl).href ? "same" : "changed";
+    }
+    catch {
+        // A non-empty invalid response URL cannot prove that credentials stayed on
+        // the requested endpoint. Fail closed without reflecting it in diagnostics.
+        return "invalid";
+    }
+}
+/**
+ * Read a response body while retaining accepted chunks up to the documented
+ * cap. A fetch implementation can still hand us one arbitrarily large,
+ * already-materialized chunk before we can reject it. For a compliant body,
+ * final assembly transiently holds the chunks plus the combined output buffer
+ * (roughly twice the cap) before decoding. Content-Length is an early-rejection
+ * optimization only; streaming byte accounting remains authoritative because
+ * that header may be absent or false.
+ */
+async function readBoundedResponseBody(response) {
+    // `headers.get` is part of the documented injected-fetch contract. Detect a
+    // malformed local shim before it can be mistaken for a retryable body-stream
+    // failure and replay an otherwise deterministic GET programming error.
+    if (typeof response.headers?.get !== "function") {
+        throw new ResponseBodyMaterializationError("Response-like fetch must provide headers.get(name)");
+    }
+    if (contentLengthExceedsLimit(response)) {
+        await cancelResponseBody(response.body);
+        throw new ResponseBodyTooLargeError();
+    }
+    const body = response.body;
+    if (body === null)
+        return "";
+    // Standards-compliant fetch implementations always expose a ReadableStream
+    // for a non-empty body. Retain compatibility with Response-like test/custom
+    // fetch implementations while still checking their materialized text before
+    // this SDK parses it as JSON.
+    if (body === undefined || typeof body.getReader !== "function") {
+        let materializedText = "";
+        if (typeof response.text === "function") {
+            try {
+                materializedText = await response.text();
+            }
+            catch {
+                // Native fetch exposes a body stream above. A failing text() here is a
+                // deterministic custom Response contract error, not a retryable reset.
+                throw new ResponseBodyMaterializationError("Response-like fetch text() failed");
+            }
+        }
+        const text = typeof materializedText === "string" ? materializedText : "";
+        if (materializedResponseBodyExceedsLimit(text)) {
+            throw new ResponseBodyTooLargeError();
+        }
+        if (text !== "" ||
+            response.status === 204 ||
+            response.status === 205 ||
+            response.status === 304) {
+            return text;
+        }
+        // Older injected Response-like objects may implement json() but return an
+        // empty placeholder from text(). This path is never used by native fetch.
+        let parsed;
+        try {
+            parsed = await response.json();
+        }
+        catch {
+            // A Response-like shim may expose json() but reject on an empty 204
+            // body. Native fetch represents that body as null and returns above.
+            return "";
+        }
+        let serialized;
+        try {
+            serialized = JSON.stringify(parsed);
+        }
+        catch {
+            throw new ResponseBodyMaterializationError();
+        }
+        if (serialized === undefined)
+            return "";
+        if (materializedResponseBodyExceedsLimit(serialized)) {
+            throw new ResponseBodyTooLargeError();
+        }
+        return serialized;
+    }
+    const reader = body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (!(value instanceof Uint8Array)) {
+                throw new ResponseBodyMaterializationError("Response-like fetch body stream must yield Uint8Array chunks");
+            }
+            const nextTotal = total + value.byteLength;
+            if (nextTotal > MAX_RESPONSE_BODY_BYTES) {
+                try {
+                    await reader.cancel();
+                }
+                catch {
+                    // Preserve the body-limit failure even if stream cancellation fails.
+                }
+                throw new ResponseBodyTooLargeError();
+            }
+            chunks.push(value);
+            total = nextTotal;
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    let bytes;
+    if (chunks.length === 1) {
+        bytes = chunks[0];
+    }
+    else {
+        bytes = new Uint8Array(total);
+        let offset = 0;
+        for (const chunk of chunks) {
+            bytes.set(chunk, offset);
+            offset += chunk.byteLength;
+        }
+    }
+    try {
+        return TEXT_DECODER.decode(bytes);
+    }
+    catch {
+        throw new InvalidResponseEncodingError();
+    }
+}
 // ---- Spec-derived validation helpers ------------------------------------
 // These mirror constraints documented on each request schema in
 // `openapi.yaml` so obvious mistakes fail fast instead of round-tripping
@@ -394,6 +742,17 @@ function requireMaxLength(value, field, max) {
         throw clientValidationError(`${field}: must be ${max} characters or fewer (got ${value.length})`);
     }
 }
+function requireMaxUtf8Bytes(value, field, max) {
+    if (value === undefined)
+        return;
+    if (typeof value !== "string") {
+        throw clientValidationError(`${field}: must be a string (got ${value === null ? "null" : typeof value})`);
+    }
+    const bytes = TEXT_ENCODER.encode(value).byteLength;
+    if (bytes > max) {
+        throw clientValidationError(`${field}: must be ${max} UTF-8 bytes or fewer (got ${bytes})`);
+    }
+}
 function requireNonEmptyIfPresent(value, field) {
     // Reject `""` so uninitialized form state doesn't reach the wire.
     if (value === "") {
@@ -691,7 +1050,7 @@ function validateQurlTokenOptions(input) {
     // gate server-authoritative (`invalid_target_path`); a client-side regex
     // would create a drift surface. Keep max-before-empty consistent with label;
     // empty strings pass the length check and are rejected by the next guard.
-    requireMaxLength(input.target_path, "target_path", MAX_TARGET_PATH);
+    requireMaxUtf8Bytes(input.target_path, "target_path", MAX_TARGET_PATH);
     requireNonEmptyIfPresent(input.target_path, "target_path");
     requireBooleanIfPresent(input.one_time_use, "one_time_use");
     requireMaxSessionsInRange(input.max_sessions);
@@ -928,10 +1287,14 @@ const MIN_PORTAL_VALID_FOR_SECONDS = 60;
  * treated as the server default).
  */
 const MIN_SESSION_DURATION_SECONDS = 1;
-// Shape of qurl-go's offline signed-fragment links: three or more
-// dot-separated base64url parts (<version>.<claims>.<secret>.<sig>).
-// Detected only to give those links a precise error in extractAccessToken.
-const SIGNED_FRAGMENT_RE = /^[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+){2,}$/;
+/**
+ * Shape of qurl-go's offline signed-fragment links: three or more
+ * dot-separated base64url parts (<version>.<claims>.<secret>.<sig>).
+ * Detected only to give those links a precise error in extractAccessToken.
+ *
+ * @internal Exported for in-package tests; not re-exported from index.ts.
+ */
+exports.SIGNED_FRAGMENT_RE = /^[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+){2,}$/;
 // Access-token grammar accepted by enterPortal (base64url charset).
 const ACCESS_TOKEN_RE = /^[A-Za-z0-9_-]+$/;
 /**
@@ -1016,7 +1379,7 @@ function extractAccessToken(qurlLink) {
     }
     const hashIndex = qurlLink.indexOf("#");
     const token = hashIndex >= 0 ? qurlLink.slice(hashIndex + 1) : qurlLink;
-    if (SIGNED_FRAGMENT_RE.test(token)) {
+    if (exports.SIGNED_FRAGMENT_RE.test(token)) {
         throw clientValidationError("qurlLink: this is a signed qURL link (offline fragment format), which cannot be " +
             "opened through the API resolver — enterPortal only accepts platform links " +
             "(https://qurl.link/#at_...) or bare access tokens");
@@ -1073,7 +1436,7 @@ function buildCreatePortalBody(opts, method) {
     requireObjectInput(opts, method);
     requireNoUnknownFields(opts, CREATE_PORTAL_OPTION_KEYS, method);
     // null → omitted, via the SDK-wide normalizePatchFields convention.
-    const { validFor, label, oneTimeUse, maxSessions, sessionDuration } = normalizePatchFields(opts, CREATE_PORTAL_OPTION_KEYS);
+    const { validFor, label, oneTimeUse, maxSessions, sessionDuration, targetPath } = normalizePatchFields(opts, CREATE_PORTAL_OPTION_KEYS);
     if (label !== undefined) {
         requireMaxLength(label, "label", MAX_LABEL);
         // qurl-go's WithLabel rejects blank labels; the REST-shaped mintLink
@@ -1084,6 +1447,11 @@ function buildCreatePortalBody(opts, method) {
     }
     requireBooleanIfPresent(oneTimeUse, "oneTimeUse");
     requireMaxSessionsInRange(maxSessions, "maxSessions");
+    requireMaxUtf8Bytes(targetPath, "targetPath", MAX_TARGET_PATH);
+    requireNonEmptyIfPresent(targetPath, "targetPath");
+    if (targetPath !== undefined && method === "createPortalForUrl") {
+        throw clientValidationError("targetPath: requires an existing resource");
+    }
     const body = {};
     const expiresIn = serializeApiDuration(validFor, "validFor", MIN_PORTAL_VALID_FOR_SECONDS);
     if (expiresIn !== undefined)
@@ -1098,6 +1466,8 @@ function buildCreatePortalBody(opts, method) {
     const wireSessionDuration = serializeApiDuration(sessionDuration, "sessionDuration", MIN_SESSION_DURATION_SECONDS);
     if (wireSessionDuration !== undefined)
         body.session_duration = wireSessionDuration;
+    if (targetPath !== undefined)
+        body.target_path = targetPath;
     return Object.keys(body).length > 0 ? body : undefined;
 }
 /** qURL API client. */
@@ -1120,7 +1490,7 @@ class QURLClient {
             throw clientValidationError("apiKey: must not contain CR/LF characters");
         }
         this.apiKey = options.apiKey;
-        const rawBaseUrl = (options.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
+        const rawBaseUrl = (0, internal_js_1.stripTrailingSlashes)(options.baseUrl ?? DEFAULT_BASE_URL);
         // Parse the URL so the loopback exemption matches on the hostname,
         // not a string prefix. `startsWith("http://localhost")` would
         // accept `http://localhost.attacker.com` and silently send the
@@ -1275,7 +1645,7 @@ class QURLClient {
         // .requestId property AND the message string so a stack trace
         // pasted into a support ticket carries the correlation handle
         // without a follow-up round-trip.
-        const requestId = envelope.meta?.request_id;
+        const requestId = boundedErrorIdentifier(envelope.meta?.request_id);
         const requestIdSuffix = requestId !== undefined ? ` [request_id=${requestId}]` : "";
         // `Number.isInteger` rejects NaN, Infinity, and floats. Combined
         // with `>= 0`, this rules out pathological proxy bodies (e.g.
@@ -1288,12 +1658,12 @@ class QURLClient {
             !Number.isInteger(result.failed) ||
             result.failed < 0 ||
             !Array.isArray(result.results)) {
-            throw unexpectedResponseError(`Unexpected response shape from POST /v1/qurls/batch${statusSuffix}${requestIdSuffix}`, requestId);
+            throw unexpectedResponseError(`Unexpected response shape from POST /v1/qurls/batch${statusSuffix}${requestIdSuffix}`, { requestId });
         }
         if (result.succeeded + result.failed !== result.results.length) {
             throw unexpectedResponseError(`Unexpected response shape from POST /v1/qurls/batch${statusSuffix}: ` +
                 `counts/results length mismatch (succeeded=${result.succeeded}, ` +
-                `failed=${result.failed}, results.length=${result.results.length})${requestIdSuffix}`, requestId);
+                `failed=${result.failed}, results.length=${result.results.length})${requestIdSuffix}`, { requestId });
         }
         // OpenAPI contract: one result per input item. Without this check, a
         // server that drops items (e.g. sends 2 results for 3 inputs with
@@ -1304,7 +1674,7 @@ class QURLClient {
         // exactly [0, requestItemCount).
         if (result.results.length !== requestItemCount) {
             throw unexpectedResponseError(`Unexpected response shape from POST /v1/qurls/batch${statusSuffix}: ` +
-                `results.length (${result.results.length}) does not match request item count (${requestItemCount})${requestIdSuffix}`, requestId);
+                `results.length (${result.results.length}) does not match request item count (${requestItemCount})${requestIdSuffix}`, { requestId });
         }
         // Per-entry discriminated-union contract. Reason strings report
         // field NAMES only, never values — safe for observability pipelines.
@@ -1316,14 +1686,14 @@ class QURLClient {
         for (let i = 0; i < result.results.length; i++) {
             const reason = batchItemResultValidationReason(result.results[i]);
             if (reason !== null) {
-                throw unexpectedResponseError(`Unexpected response shape from POST /v1/qurls/batch${statusSuffix}: results[${i}] ${reason}${requestIdSuffix}`, requestId);
+                throw unexpectedResponseError(`Unexpected response shape from POST /v1/qurls/batch${statusSuffix}: results[${i}] ${reason}${requestIdSuffix}`, { requestId });
             }
             const entry = result.results[i];
             if (entry.index >= requestItemCount) {
-                throw unexpectedResponseError(`Unexpected response shape from POST /v1/qurls/batch${statusSuffix}: results[${i}] index out of range (sent ${requestItemCount} items)${requestIdSuffix}`, requestId);
+                throw unexpectedResponseError(`Unexpected response shape from POST /v1/qurls/batch${statusSuffix}: results[${i}] index out of range (sent ${requestItemCount} items)${requestIdSuffix}`, { requestId });
             }
             if (seenIndices.has(entry.index)) {
-                throw unexpectedResponseError(`Unexpected response shape from POST /v1/qurls/batch${statusSuffix}: results[${i}] duplicate index${requestIdSuffix}`, requestId);
+                throw unexpectedResponseError(`Unexpected response shape from POST /v1/qurls/batch${statusSuffix}: results[${i}] duplicate index${requestIdSuffix}`, { requestId });
             }
             seenIndices.add(entry.index);
         }
@@ -1349,11 +1719,11 @@ class QURLClient {
                 break;
             }
             if (seenCursors.has(cursor)) {
-                throw unexpectedResponseError(`${methodName}: server returned repeated cursor after ${pageCount} auto-pagination pages`, page.request_id);
+                throw unexpectedResponseError(`${methodName}: server returned repeated cursor after ${pageCount} auto-pagination pages`, { requestId: page.request_id });
             }
             seenCursors.add(cursor);
             if (pageCount >= MAX_AUTO_PAGINATION_PAGES) {
-                throw unexpectedResponseError(`${methodName}: exceeded ${MAX_AUTO_PAGINATION_PAGES} auto-pagination pages without termination`, page.request_id);
+                throw unexpectedResponseError(`${methodName}: exceeded ${MAX_AUTO_PAGINATION_PAGES} auto-pagination pages without termination`, { requestId: page.request_id });
             }
         } while (cursor);
     }
@@ -1479,7 +1849,8 @@ class QURLClient {
      * number of milliseconds with qurl-go's client-side guardrails: whole
      * seconds only, at least one minute for `validFor` and one second for
      * `sessionDuration`. `maxSessions: 0` is sent explicitly and means
-     * unlimited; blank labels are rejected.
+     * unlimited; blank labels are rejected. `targetPath` is valid only for an
+     * existing resource. The API owns its full grammar and tunnel-only gate.
      */
     async createPortal(resource, opts = {}, requestOptions) {
         let resourceId;
@@ -1509,7 +1880,9 @@ class QURLClient {
      * {@link protectUrl} when you need the full server-populated resource
      * metadata. Portal options match {@link createPortal}; `targetUrl` gets
      * the same malformed-URL and embedded-credentials rejection as
-     * {@link protectUrl}. REST-shaped equivalent: {@link create}.
+     * {@link protectUrl}. `targetPath` is rejected because this call creates a
+     * URL resource instead of addressing an existing resource. REST-shaped
+     * equivalent: {@link create}.
      */
     async createPortalForUrl(targetUrl, opts = {}, requestOptions) {
         requirePortalTargetUrl(targetUrl);
@@ -1800,7 +2173,7 @@ class QURLClient {
                 `got an ID starting with "${observedPrefix}". ` +
                 "To revoke a single access token, use the resource-scoped token endpoint.");
         }
-        await this.rawRequest("DELETE", `/v1/qurls/${encodeURIComponent(id)}`);
+        await this.requestNoContent(`/v1/qurls/${encodeURIComponent(id)}`);
     }
     /**
      * Extend a qURL's expiration.
@@ -1952,15 +2325,6 @@ class QURLClient {
     async getQuota() {
         return this.request("GET", "/v1/quota");
     }
-    /** Bootstrap a LayerV qURL Connector agent. */
-    async bootstrapAgent(input, options) {
-        requireObjectInput(input, "bootstrapAgent");
-        requireNoUnknownFields(input, AGENT_BOOTSTRAP_FIELD_KEYS, "bootstrapAgent");
-        const normalizedRecord = normalizePatchFields(input, AGENT_BOOTSTRAP_FIELD_KEYS);
-        const normalized = normalizedRecord;
-        requireNonEmptyStringField(normalizedRecord, "public_key", "bootstrapAgent");
-        return this.request("POST", "/v1/agent/bootstrap", normalized, options);
-    }
     /** List resources from the `/v1/resources` API. */
     async listResources(input = {}) {
         const { data, meta } = await this.rawRequest("GET", appendQuery("/v1/resources", input, RESOURCE_LIST_PARAM_KEYS, "listResources"));
@@ -2014,7 +2378,7 @@ class QURLClient {
     /** Revoke a resource and all of its qURLs. */
     async deleteResource(id) {
         requireNonEmptyId(id, "deleteResource");
-        await this.rawRequest("DELETE", `/v1/resources/${encodeURIComponent(id)}`);
+        await this.requestNoContent(`/v1/resources/${encodeURIComponent(id)}`);
     }
     /**
      * Mint a qURL against an existing resource.
@@ -2037,7 +2401,7 @@ class QURLClient {
     async revokeResourceQurl(id, qurlId) {
         requireNonEmptyId(id, "revokeResourceQurl");
         requireNonEmptyId(qurlId, "revokeResourceQurl");
-        await this.rawRequest("DELETE", `/v1/resources/${encodeURIComponent(id)}/qurls/${encodeURIComponent(qurlId)}`);
+        await this.requestNoContent(`/v1/resources/${encodeURIComponent(id)}/qurls/${encodeURIComponent(qurlId)}`);
     }
     /** Update a specific qURL token on a resource. */
     async updateResourceQurl(id, qurlId, input, options) {
@@ -2073,13 +2437,7 @@ class QURLClient {
             page_size: meta?.page_size,
         };
     }
-    /**
-     * Terminate all active sessions for a resource.
-     *
-     * The returned count is best-effort under retries: if the first DELETE
-     * succeeds server-side but the response is lost, a retried request may
-     * return `0` because there are no sessions left to terminate.
-     */
+    /** Terminate all active sessions for a resource and return the server count. */
     async terminateAllResourceSessions(id) {
         requireNonEmptyId(id, "terminateAllResourceSessions");
         const path = `/v1/resources/${encodeURIComponent(id)}/sessions`;
@@ -2098,7 +2456,7 @@ class QURLClient {
     async terminateResourceSession(id, sessionId) {
         requireNonEmptyId(id, "terminateResourceSession");
         requireNonEmptyId(sessionId, "terminateResourceSession");
-        await this.rawRequest("DELETE", `/v1/resources/${encodeURIComponent(id)}/sessions/${encodeURIComponent(sessionId)}`);
+        await this.requestNoContent(`/v1/resources/${encodeURIComponent(id)}/sessions/${encodeURIComponent(sessionId)}`);
     }
     /** List connector installations. */
     async listConnectorInstallations(input = {}) {
@@ -2206,7 +2564,7 @@ class QURLClient {
     /** Remove a custom domain. */
     async deleteDomain(domain) {
         requireNonEmptyId(domain, "deleteDomain", "domain");
-        await this.rawRequest("DELETE", `/v1/domains/${encodeURIComponent(domain)}`);
+        await this.requestNoContent(`/v1/domains/${encodeURIComponent(domain)}`);
     }
     /** Trigger DNS verification for a custom domain. */
     async verifyDomain(domain, options) {
@@ -2267,7 +2625,7 @@ class QURLClient {
     /** Delete a webhook. */
     async deleteWebhook(id) {
         requireNonEmptyId(id, "deleteWebhook");
-        await this.rawRequest("DELETE", `/v1/webhooks/${encodeURIComponent(id)}`);
+        await this.requestNoContent(`/v1/webhooks/${encodeURIComponent(id)}`);
     }
     /** Regenerate a webhook signing secret. */
     async regenerateWebhookSecret(id, options) {
@@ -2331,7 +2689,7 @@ class QURLClient {
     /** Revoke an API key. */
     async revokeApiKey(keyId) {
         requireNonEmptyId(keyId, "revokeApiKey");
-        await this.rawRequest("DELETE", `/v1/api-keys/${encodeURIComponent(keyId)}`);
+        await this.requestNoContent(`/v1/api-keys/${encodeURIComponent(keyId)}`);
     }
     /** Redeem an access code. */
     async redeemAccessCode(input, options) {
@@ -2376,7 +2734,7 @@ class QURLClient {
     /** Revoke an access code. */
     async revokeAccessCode(id) {
         requireNonEmptyId(id, "revokeAccessCode");
-        await this.rawRequest("DELETE", `/v1/access-codes/${encodeURIComponent(id)}`);
+        await this.requestNoContent(`/v1/access-codes/${encodeURIComponent(id)}`);
     }
     // --- Internal HTTP plumbing ---
     async request(method, path, body, requestOptions) {
@@ -2390,6 +2748,22 @@ class QURLClient {
         }
         return data;
     }
+    /**
+     * Require the service's exact 204 response with no response bytes exposed by
+     * Fetch. A standards-compliant Fetch implementation discards any forbidden
+     * wire body on 204, so the SDK cannot detect bytes that Fetch did not expose.
+     */
+    async requestNoContent(path) {
+        const response = await this.rawRequest("DELETE", path, undefined, {
+            allowEmptySuccessBody: true,
+        });
+        if (response.__http_status !== 204 || response.__http_body_empty !== true) {
+            const status = response.__http_status ?? 0;
+            const bodyShape = response.__http_body_empty ? "with an empty body" : "with response bytes";
+            throw unexpectedResponseError(`Unexpected response from DELETE; expected empty HTTP 204, received HTTP ${status} ${bodyShape}. ` +
+                "The delete may already have been applied; reconcile resource state before retrying.", { status });
+        }
+    }
     /**
      * Issue an HTTP request and parse the JSON response.
      *
@@ -2401,7 +2775,7 @@ class QURLClient {
      */
     async rawRequest(method, path, body, rawOptions = {}) {
         const url = `${this.baseUrl}${path}`;
-        const { passthroughStatuses = NO_PASSTHROUGH_STATUSES, requestOptions } = rawOptions;
+        const { passthroughStatuses = NO_PASSTHROUGH_STATUSES, requestOptions, allowEmptySuccessBody = false, } = rawOptions;
         const idempotencyKey = idempotencyKeyForRequest(method, requestOptions);
         const headers = {
             Authorization: `Bearer ${this.apiKey}`,
@@ -2414,12 +2788,20 @@ class QURLClient {
         if (idempotencyKey !== undefined) {
             headers["Idempotency-Key"] = idempotencyKey;
         }
-        // POST/PATCH keep status-code retries limited to rate limits. They
-        // still retry fetch-level failures below with the same Idempotency-Key,
-        // which fixes the duplicate-creation path from lost responses
-        // without broadening mutating 5xx replay behavior.
-        const mutatingForRetry = MUTATING_RETRY_METHODS.has(method);
-        const retryable = mutatingForRetry ? RETRYABLE_STATUS_MUTATING : RETRYABLE_STATUS;
+        // Reads may retry transient statuses and transport failures. POST/PATCH
+        // keep status-code retries limited to rate limits and reuse the same
+        // Idempotency-Key for fetch-level failures. DELETE is deliberately never
+        // replayed, including after 429: this matches qurl-go's no-hidden-HTTP-
+        // retry rule and avoids SDK pacing on an application request path. The
+        // caller receives retryAfter when supplied and must reconcile resource
+        // state before it chooses to issue another delete.
+        const idempotencyKeyBackedRetry = MUTATING_RETRY_METHODS.has(method);
+        const retryFetchFailure = method === "GET" || idempotencyKeyBackedRetry;
+        const retryable = method === "GET"
+            ? RETRYABLE_STATUS
+            : idempotencyKeyBackedRetry
+                ? RETRYABLE_STATUS_MUTATING
+                : NO_RETRYABLE_STATUSES;
         const serializedBody = body !== undefined ? JSON.stringify(body) : undefined;
         let lastError;
         for (let attempt = 0; attempt <= this.maxRetries; attempt++) {
@@ -2430,6 +2812,7 @@ class QURLClient {
             }
             this.log(`${method} ${url}`);
             let response;
+            const requestSignal = AbortSignal.timeout(this.timeout);
             try {
                 // `timeout` is intentionally a per-attempt budget, not a total-
                 // request budget. With maxRetries=3 and timeout=30s, a slow
@@ -2443,20 +2826,151 @@ class QURLClient {
                     method,
                     headers,
                     body: serializedBody,
-                    signal: AbortSignal.timeout(this.timeout),
+                    redirect: "manual",
+                    signal: requestSignal,
                 });
             }
             catch (err) {
-                lastError = this.classifyFetchError(err);
+                lastError = this.classifyFetchError(err, requestSignal);
                 this.log(`${method} ${url} ${lastError instanceof errors_js_1.TimeoutError ? "timed out" : "network error"}`, {
-                    error: lastError.message,
+                    error: boundedErrorSnippet(lastError.message),
                 });
-                if (attempt < this.maxRetries) {
+                // An injected fetch can abort or impose a deadline for its own reason.
+                // That is not this SDK's timeout. Replaying it can defeat caller-side
+                // cancellation or deadline policy.
+                if (retryFetchFailure &&
+                    !isIndependentAbort(err, requestSignal) &&
+                    attempt < this.maxRetries) {
                     continue;
                 }
                 throw lastError;
             }
             this.log(`${method} ${url} → ${response.status}`);
+            // Redirects are deterministic protocol violations for SDK API calls.
+            // Refuse them before reading Location or entering retry handling so
+            // Authorization and Idempotency-Key can never reach a follow-up target.
+            const responseUrlStateValue = responseUrlState(response.url, url);
+            if (response.redirected === true ||
+                responseUrlStateValue !== "same" ||
+                REDIRECT_RESPONSE_STATUSES.has(response.status) ||
+                response.type === "opaqueredirect") {
+                await cancelResponseBody(response.body);
+                const redirectKind = response.redirected === true
+                    ? "followed"
+                    : responseUrlStateValue === "invalid"
+                        ? "invalid custom Response.url"
+                        : responseUrlStateValue === "changed"
+                            ? "changed Response.url"
+                            : REDIRECT_RESPONSE_STATUSES.has(response.status)
+                                ? `HTTP ${response.status}`
+                                : "opaque";
+                throw unexpectedResponseError(`Refused ${redirectKind} redirect response for ${method}`, {
+                    status: response.status,
+                });
+            }
+            let responseBody;
+            try {
+                responseBody = await readBoundedResponseBody(response);
+            }
+            catch (err) {
+                if (err instanceof ResponseBodyTooLargeError) {
+                    this.log(`rejected oversized response body from ${response.status}`, {
+                        status: response.status,
+                    });
+                    const detail = `Response body exceeds ${MAX_RESPONSE_BODY_BYTES}-byte limit on HTTP ${response.status}; ` +
+                        "request a smaller page when listing collections";
+                    if (response.ok) {
+                        throw unexpectedResponseError(detail, { status: response.status });
+                    }
+                    const bodyError = (0, errors_js_1.createError)({
+                        status: response.status,
+                        // The unread body cannot supply a trustworthy server code. Keep
+                        // the real HTTP status class (429/5xx) just like other unreadable
+                        // error bodies instead of reclassifying it as client validation.
+                        code: errors_js_1.ERROR_CODE_UNKNOWN,
+                        title: boundedErrorSnippet(response.statusText) || `HTTP ${response.status}`,
+                        detail,
+                        retry_after: this.parseRetryAfter(response),
+                    });
+                    // The unread body does not change operation semantics: retry a GET,
+                    // or an idempotency-key-backed mutation on an explicitly retryable
+                    // status. Successful oversized responses remain deterministic
+                    // contract failures, and DELETE has no retryable statuses.
+                    if (retryable.has(response.status) && attempt < this.maxRetries) {
+                        lastError = bodyError;
+                        continue;
+                    }
+                    throw bodyError;
+                }
+                if (err instanceof InvalidResponseEncodingError) {
+                    this.log(`rejected malformed UTF-8 response body from ${response.status}`, {
+                        status: response.status,
+                    });
+                    const detail = `Response body is not valid UTF-8 on HTTP ${response.status}`;
+                    if (response.ok) {
+                        // A successful status with an invalid wire body is a deterministic
+                        // response-contract failure. Do not replay a GET or a mutation.
+                        throw unexpectedResponseError(detail, { status: response.status });
+                    }
+                    const encodingError = (0, errors_js_1.createError)({
+                        status: response.status,
+                        code: errors_js_1.ERROR_CODE_UNKNOWN,
+                        title: boundedErrorSnippet(response.statusText) || `HTTP ${response.status}`,
+                        detail,
+                        retry_after: this.parseRetryAfter(response),
+                    });
+                    // For an explicit error status, the HTTP classification remains
+                    // authoritative even when its body encoding is invalid.
+                    if (retryable.has(response.status) && attempt < this.maxRetries) {
+                        lastError = encodingError;
+                        continue;
+                    }
+                    throw encodingError;
+                }
+                await cancelResponseBody(response.body);
+                const transportReadError = this.classifyResponseReadError(err, response, requestSignal);
+                if (transportReadError !== undefined) {
+                    this.log(`transport failure while reading response body from ${response.status}`, {
+                        status: response.status,
+                        error: transportReadError.code,
+                    });
+                    // A successful GET can be replayed when its success body is lost. A
+                    // non-success GET retries only the status set that the normal error
+                    // path retries. Mutations are never replayed after a body transport
+                    // failure because the operation may have applied.
+                    if (method === "GET" &&
+                        !isIndependentAbort(err, requestSignal) &&
+                        (response.ok || retryable.has(response.status)) &&
+                        attempt < this.maxRetries) {
+                        lastError = transportReadError;
+                        continue;
+                    }
+                    throw transportReadError;
+                }
+                this.log(`failed to read response body from ${response.status}`, {
+                    status: response.status,
+                });
+                // ResponseBodyMaterializationError messages are fixed SDK-authored
+                // contract text. The underlying shim rejection is never interpolated.
+                const detail = err instanceof ResponseBodyMaterializationError
+                    ? err.message
+                    : `Failed to read response body on HTTP ${response.status}`;
+                const readError = response.ok
+                    ? unexpectedResponseError(detail, { status: response.status })
+                    : (0, errors_js_1.createError)({
+                        status: response.status,
+                        code: errors_js_1.ERROR_CODE_UNKNOWN,
+                        title: boundedErrorSnippet(response.statusText) || `HTTP ${response.status}`,
+                        detail,
+                        retry_after: this.parseRetryAfter(response),
+                    });
+                // This arm contains deterministic Response-like shim failures (for
+                // example a BigInt returned by json()) and non-Error throws. Do not
+                // replay them: another attempt will see the same local contract bug.
+                throw err instanceof ResponseBodyMaterializationError
+                    ? withErrorCause(readError, err)
+                    : readError;
+            }
             // `response.ok` is true for the entire 200-299 range, so partial-
             // success responses like 207 flow through this path naturally —
             // `passthroughStatuses` only needs to enumerate non-2xx statuses
@@ -2479,33 +2993,56 @@ class QURLClient {
                             url,
                         });
                     }
-                    return { data: undefined, __http_status: response.status };
+                    return {
+                        data: undefined,
+                        __http_status: response.status,
+                        __http_body_empty: responseBody.length === 0,
+                    };
+                }
+                // Exact no-content helpers must inspect both axes of the success
+                // contract. Let only those callers observe an empty non-204 response;
+                // body-returning methods still reject it as non-JSON below.
+                if (response.ok && allowEmptySuccessBody && responseBody.length === 0) {
+                    return {
+                        data: undefined,
+                        __http_status: response.status,
+                        __http_body_empty: true,
+                    };
                 }
                 try {
-                    const json = (await response.json());
-                    return { ...json, __http_status: response.status };
+                    const json = JSON.parse(responseBody);
+                    return {
+                        ...json,
+                        __http_status: response.status,
+                        // JSON.parse("") throws, so parsed JSON is necessarily non-empty.
+                        __http_body_empty: false,
+                    };
                 }
                 catch {
                     // Non-JSON body on a 2xx response (server contract violation)
                     // or on a passthrough status (e.g. proxy HTML on 400). The
-                    // body stream is already consumed by the failed `.json()`,
-                    // so we can't delegate to parseError — synthesize a typed
-                    // QURLError directly so consumers catching by-class don't
-                    // miss it.
+                    // body was read through the cap before JSON decoding.
+                    // Synthesize a typed QURLError directly so consumers catching
+                    // by-class don't miss the contract failure.
                     this.log(`non-JSON body on ${isPassthrough ? "passthrough" : "success"} response ${response.status}`, {
                         status: response.status,
-                        content_type: response.headers.get("content-type") ?? undefined,
+                        content_type: boundedErrorSnippet(response.headers.get("content-type")),
                     });
                     throw (0, errors_js_1.createError)({
                         status: response.status,
                         code: errors_js_1.ERROR_CODE_UNEXPECTED_RESPONSE,
-                        title: response.statusText || `HTTP ${response.status}`,
+                        title: boundedErrorSnippet(response.statusText) || `HTTP ${response.status}`,
                         detail: `Expected JSON response body on HTTP ${response.status} but received non-JSON content`,
                     });
                 }
             }
-            const errorData = await this.parseError(response);
+            const errorData = this.parseError(response, responseBody);
             const err = (0, errors_js_1.createError)(errorData);
+            // Retryability is determined by status even when an intermediary
+            // returned HTML, an empty body, or another non-envelope error. Those
+            // shapes are common for transient 429/502/503/504 responses and do not
+            // prove that a retry cannot succeed. Redirects and oversized bodies
+            // already throw before reaching this check.
             if (retryable.has(response.status) && attempt < this.maxRetries) {
                 lastError = err;
                 continue;
@@ -2514,9 +3051,9 @@ class QURLClient {
         }
         throw lastError ?? new Error("Request failed after retries");
     }
-    async parseError(response) {
+    parseError(response, responseBody) {
         try {
-            const json = (await response.json());
+            const json = JSON.parse(responseBody);
             if (json.error) {
                 const err = json.error;
                 // Detail fallback chain:
@@ -2525,18 +3062,27 @@ class QURLClient {
                 //   3. err.title    (RFC 7807 required field)
                 //   4. HTTP status  (final safety net)
                 // This prevents `"Title (403): undefined"` when the API omits detail.
-                const detail = err.detail ?? err.message ?? err.title ?? `HTTP ${response.status}`;
+                const detail = boundedErrorSnippet(err.detail) ??
+                    boundedErrorSnippet(err.message) ??
+                    boundedErrorSnippet(err.title) ??
+                    `HTTP ${response.status}`;
                 // HTTP/2 omits reason-phrases — `statusText` may be "".
-                const title = err.title ?? (response.statusText || `HTTP ${response.status}`);
+                const title = boundedErrorSnippet(err.title) ??
+                    boundedErrorSnippet(response.statusText) ??
+                    `HTTP ${response.status}`;
+                // The transport status is authoritative for error classification. A
+                // conflicting or malformed RFC 7807 body must not turn a real 5xx into
+                // a NotFoundError (or vice versa) in caller reconciliation logic.
+                const status = response.status;
                 return {
-                    status: err.status ?? response.status,
-                    code: err.code ?? errors_js_1.ERROR_CODE_UNKNOWN,
+                    status,
+                    code: boundedErrorIdentifier(err.code) ?? errors_js_1.ERROR_CODE_UNKNOWN,
                     title,
                     detail,
-                    type: err.type,
-                    instance: err.instance,
-                    invalid_fields: err.invalid_fields,
-                    request_id: json.meta?.request_id,
+                    type: boundedErrorIdentifier(err.type),
+                    instance: boundedErrorIdentifier(err.instance),
+                    invalid_fields: boundedInvalidFields(err.invalid_fields),
+                    request_id: boundedErrorIdentifier(json.meta?.request_id),
                     retry_after: this.parseRetryAfter(response),
                 };
             }
@@ -2546,31 +3092,37 @@ class QURLClient {
             // status-only safety net below.
             this.log(`unexpected error response shape from ${response.status}`, {
                 status: response.status,
-                body_keys: Object.keys(json),
+                body_keys: typeof json === "object" && json !== null ? boundedObjectKeys(json) : undefined,
             });
         }
         catch {
-            // Body wasn't valid JSON (or the network stream errored during
-            // read). Log so operators can distinguish this from a malformed
-            // envelope, and fall through to the status-only safety net.
+            // Body wasn't valid JSON. Log so operators can distinguish this from a
+            // malformed envelope, and fall through to the status-only safety net.
             this.log(`non-JSON error response from ${response.status}`, {
                 status: response.status,
-                content_type: response.headers.get("content-type") ?? undefined,
+                content_type: boundedErrorSnippet(response.headers.get("content-type")),
             });
         }
+        const statusText = boundedErrorSnippet(response.statusText) || `HTTP ${response.status}`;
         return {
             status: response.status,
             code: errors_js_1.ERROR_CODE_UNKNOWN,
-            title: response.statusText || `HTTP ${response.status}`,
-            detail: response.statusText || `HTTP ${response.status}`,
+            title: statusText,
+            detail: statusText,
+            retry_after: this.parseRetryAfter(response),
         };
     }
     parseRetryAfter(response) {
-        // RFC 7231 §7.1.3: Retry-After honored on 429 + 503. (RFC 7231
-        // also allows Retry-After on 3xx redirects; the SDK doesn't follow
-        // redirects, so 429/503 cover the relevant cases.)
+        // RFC 7231 §7.1.3: Retry-After honored on 429 + 503. Although the RFC
+        // also permits it on 3xx responses, rawRequest now refuses redirects
+        // as deterministic errors before retry parsing, so only 429/503 apply.
         if (response.status !== 429 && response.status !== 503)
             return undefined;
+        // This fallback can run after the body reader rejects a malformed injected
+        // Response-like shim. Preserve the typed, non-retryable SDK error instead
+        // of dereferencing the same missing method and leaking a raw TypeError.
+        if (typeof response.headers?.get !== "function")
+            return undefined;
         const header = response.headers.get("Retry-After");
         if (!header)
             return undefined;
@@ -2632,13 +3184,36 @@ class QURLClient {
         const jitter = Math.random() * base * 0.5;
         return Math.min(base + jitter, RETRY_MAX_DELAY_MS);
     }
-    classifyFetchError(err) {
-        if (err instanceof DOMException && err.name === "TimeoutError") {
+    classifyFetchError(err, requestSignal) {
+        // AbortSignal.timeout is the only timeout source owned by this SDK. Keep
+        // this check tied to that signal instead of trusting an injected fetch's
+        // AbortError or TimeoutError name.
+        if (isSdkTimeout(err, requestSignal)) {
             return new errors_js_1.TimeoutError("Request timed out", { cause: err });
         }
         const cause = err instanceof Error ? err : undefined;
         return new errors_js_1.NetworkError(cause?.message ?? String(err), { cause });
     }
+    classifyResponseReadError(err, response, requestSignal) {
+        if (err instanceof ResponseBodyMaterializationError)
+            return undefined;
+        if (!(err instanceof Error))
+            return undefined;
+        if (!response.ok) {
+            const statusText = boundedErrorSnippet(response.statusText) || `HTTP ${response.status}`;
+            return withErrorCause((0, errors_js_1.createError)({
+                status: response.status,
+                code: errors_js_1.ERROR_CODE_UNKNOWN,
+                title: statusText,
+                detail: `Failed to read response body after HTTP ${response.status}`,
+                retry_after: this.parseRetryAfter(response),
+            }), err);
+        }
+        if (isSdkTimeout(err, requestSignal)) {
+            return new errors_js_1.TimeoutError(`Request timed out while reading response body after HTTP ${response.status}`, { cause: err });
+        }
+        return new errors_js_1.NetworkError(`Network failure while reading response body after HTTP ${response.status}`, { cause: err });
+    }
 }
 exports.QURLClient = QURLClient;
 /**