@lingya-ai/agents-sdk 0.5.0 → 0.7.1

package/dist/runtime.js

@@ -1,17 +1,4 @@
 "use strict";
-/* tslint:disable */
-/* eslint-disable */
-/**
- * Lingya Agents OpenAPI
- * Public, tenant-scoped Agent channel API authenticated with OPENAPI-HMAC-SHA256-V1. Studio administration endpoints are not part of this contract.
- *
- * The version of the OpenAPI document: 0.1.2
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -31,6 +18,20 @@ exports.parseDateTime = parseDateTime;
 exports.serializeDate = serializeDate;
 exports.mapValues = mapValues;
 exports.canConsumeForm = canConsumeForm;
+const lifecycle_1 = require("./lifecycle");
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Lingya Agents OpenAPI
+ * Public, tenant-scoped Agent channel API authenticated with OPENAPI-HMAC-SHA256-V1. Studio administration endpoints are not part of this contract.
+ *
+ * The version of the OpenAPI document: 0.1.2
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
 exports.BASE_PATH = "https://tenant.example.com".replace(/\/+$/, "");
 class Configuration {
     constructor(configuration = {}) {
@@ -163,12 +164,18 @@ class BaseAPI {
     }
     request(context, initOverrides) {
         return __awaiter(this, void 0, void 0, function* () {
+            var _a;
             const { url, init } = yield this.createFetchParams(context, initOverrides);
             const response = yield this.fetchApi(url, init);
             if (response && (response.status >= 200 && response.status < 300)) {
                 return response;
             }
-            throw new ResponseError(response, 'Response returned an error code');
+            const error = new ResponseError(response, 'Response returned an error code');
+            const decoded = new lifecycle_1.ApiError(context.method, context.path, response.status, (yield response.clone().text()).slice(0, 65536), { requestId: (_a = response.headers.get('X-Request-ID')) !== null && _a !== void 0 ? _a : undefined });
+            Object.assign(error, decoded);
+            error.name = 'ResponseError';
+            error.message = decoded.message;
+            throw error;
         });
     }
     createFetchParams(context, initOverrides) {
@@ -231,9 +238,10 @@ function isBlob(value) {
 function isFormData(value) {
     return typeof FormData !== "undefined" && value instanceof FormData;
 }
-class ResponseError extends Error {
+class ResponseError extends lifecycle_1.ApiError {
     constructor(response, msg) {
-        super(msg);
+        var _a;
+        super('', '', response.status, '', { kind: 'http', requestId: (_a = response.headers.get('X-Request-ID')) !== null && _a !== void 0 ? _a : undefined });
         this.response = response;
         this.name = "ResponseError";
         // restore prototype chain
@@ -244,11 +252,13 @@ class ResponseError extends Error {
     }
 }
 exports.ResponseError = ResponseError;
-class FetchError extends Error {
+class FetchError extends lifecycle_1.ApiError {
     constructor(cause, msg) {
-        super(msg);
+        super('', '', undefined, '', { kind: cause instanceof lifecycle_1.ApiError ? cause.kind : 'network', cause });
         this.cause = cause;
         this.name = "FetchError";
+        if (cause instanceof lifecycle_1.ApiError)
+            this.message = cause.message;
         // restore prototype chain
         const actualProto = new.target.prototype;
         if (Object.setPrototypeOf) {

package/dist/sse.d.ts

@@ -1,8 +1,2 @@
-/**
- * 按 SSE 规范解码分片、多行 data 与心跳。 / Decodes chunked, multiline SSE data while ignoring heartbeats.
- *
- * @param response - Content-Type 为 `text/event-stream` 且 body 未被读取的成功响应。
- * @returns 每个完整事件合并后的 data 字符串；关闭迭代器会取消后续读取。
- * @throws Error 当响应没有可读 body。
- */
-export declare function decodeSse(response: Response): AsyncGenerator<string>;
+/** Incremental SSE decoding compatible with Chromium 102. */
+export declare function decodeSse(response: Response, signal?: AbortSignal, onComment?: (comment: string) => void): AsyncGenerator<string>;

package/dist/sse.js

@@ -14,47 +14,58 @@ var __asyncGenerator = (this && this.__asyncGenerator) || function (thisArg, _ar
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.decodeSse = decodeSse;
-/**
- * 按 SSE 规范解码分片、多行 data 与心跳。 / Decodes chunked, multiline SSE data while ignoring heartbeats.
- *
- * @param response - Content-Type 为 `text/event-stream` 且 body 未被读取的成功响应。
- * @returns 每个完整事件合并后的 data 字符串；关闭迭代器会取消后续读取。
- * @throws Error 当响应没有可读 body。
- */
-function decodeSse(response) {
+const lifecycle_1 = require("./lifecycle");
+/** Incremental SSE decoding compatible with Chromium 102. */
+function decodeSse(response, signal, onComment) {
     return __asyncGenerator(this, arguments, function* decodeSse_1() {
         var _a, _b;
-        if (response.body === null)
-            throw new Error('SSE response has no body');
-        const reader = response.body.pipeThrough(new TextDecoderStream()).getReader();
-        let buffer = '';
-        let data = [];
+        if (!/^text\/event-stream(?:\s*;|\s*$)/i.test((_a = response.headers.get('Content-Type')) !== null && _a !== void 0 ? _a : '') || !response.body) {
+            yield __await(((_b = response.body) === null || _b === void 0 ? void 0 : _b.cancel()));
+            throw new lifecycle_1.ApiError('', '', response.status, '', { kind: 'protocol' });
+        }
+        const reader = response.body.getReader();
+        const decoder = new TextDecoder('utf-8', { fatal: true });
+        let buffer = '', data = [];
+        const cancel = () => { void reader.cancel().catch(() => undefined); };
+        signal === null || signal === void 0 ? void 0 : signal.addEventListener('abort', cancel, { once: true });
         try {
             for (;;) {
-                const chunk = yield __await(reader.read());
-                buffer += (_a = chunk.value) !== null && _a !== void 0 ? _a : '';
-                const lines = buffer.split(/\r?\n/);
-                buffer = (_b = lines.pop()) !== null && _b !== void 0 ? _b : '';
-                for (const line of lines) {
+                (0, lifecycle_1.checkSignal)(signal);
+                const chunk = yield __await((0, lifecycle_1.abortable)(reader.read(), signal));
+                buffer += chunk.done ? decoder.decode() : decoder.decode(chunk.value, { stream: true });
+                let match;
+                while ((match = /\r\n|\r|\n/.exec(buffer)) !== null) {
+                    if (!chunk.done && match[0] === '\r' && match.index === buffer.length - 1)
+                        break;
+                    const line = buffer.slice(0, match.index);
+                    buffer = buffer.slice(match.index + match[0].length);
                     if (line === '') {
-                        if (data.length > 0)
+                        if (data.length)
                             yield yield __await(data.join('\n'));
                         data = [];
                     }
-                    else if (line.startsWith('data:')) {
+                    else if (line.startsWith(':'))
+                        onComment === null || onComment === void 0 ? void 0 : onComment(line.slice(1).trim());
+                    else if (line === 'data' || line.startsWith('data:'))
                         data.push(line.slice(5).replace(/^ /, ''));
-                    }
                 }
                 if (chunk.done)
                     break;
             }
-            if (buffer.startsWith('data:'))
-                data.push(buffer.slice(5).replace(/^ /, ''));
-            if (data.length > 0)
-                yield yield __await(data.join('\n'));
+        }
+        catch (error) {
+            if (error instanceof TypeError && !(signal === null || signal === void 0 ? void 0 : signal.aborted))
+                throw new lifecycle_1.ApiError('', '', undefined, '', { kind: 'protocol' });
+            throw error;
         }
         finally {
-            reader.releaseLock();
+            signal === null || signal === void 0 ? void 0 : signal.removeEventListener('abort', cancel);
+            try {
+                yield __await(reader.cancel());
+            }
+            finally {
+                reader.releaseLock();
+            }
         }
     });
 }

package/dist/subscription.d.ts

@@ -0,0 +1,72 @@
+import { ApiError, RequestOptions } from './lifecycle';
+import { type AiChatBriefEvent } from './events';
+export interface ConnectionEvent {
+    connectionId?: string;
+    type: 'opened' | 'ready' | 'heartbeat' | 'closed';
+    transport: 'sse' | 'websocket';
+    requestId?: string;
+    reason?: string;
+    closeCode?: number;
+}
+export interface StreamOptions extends RequestOptions {
+    xRequestID?: string;
+    transport?: 'sse' | 'websocket';
+    idleTimeoutMs?: number;
+    onConnectionEvent?: (event: ConnectionEvent) => void;
+}
+export interface StreamCloseInfo {
+    reason: 'end' | 'complete' | 'normal' | 'closed' | 'cancelled' | 'timeout' | 'error';
+    error?: ApiError;
+    closeCode?: number;
+}
+export interface WebSocketLike {
+    serverRequestId?: string;
+    handshakeError?: ApiError;
+    onopen: ((event: any) => void) | null;
+    onmessage: ((event: {
+        data: any;
+    }) => void) | null;
+    onerror: ((event: any) => void) | null;
+    onclose: ((event: {
+        code: number;
+        reason: string;
+    }) => void) | null;
+    close(code?: number, reason?: string): void;
+}
+export type WebSocketFactory = (url: string, options: {
+    protocols: string[];
+    headers?: Record<string, string>;
+}) => WebSocketLike;
+export type WebSocketConnector = (url: string, signal: AbortSignal, requestId?: string) => Promise<WebSocketLike>;
+export type StreamRequest = (signal: AbortSignal) => Promise<Response>;
+/** One connection, no replay, retry, UI merging or recovery policy. */
+export declare class ChatSubscription implements AsyncIterable<AiChatBriefEvent> {
+    private readonly request;
+    private readonly url;
+    private readonly messageId;
+    private readonly options;
+    private readonly connect?;
+    readonly events: AsyncIterable<AiChatBriefEvent>;
+    readonly closed: Promise<StreamCloseInfo>;
+    private readonly scope;
+    private readonly queue;
+    private wake?;
+    private done;
+    private failure?;
+    private finish;
+    private idleTimer?;
+    private reason;
+    private serverRequestId?;
+    private closeCode?;
+    private readonly connectionId;
+    constructor(request: StreamRequest, url: string, messageId: string, options?: StreamOptions, connect?: WebSocketConnector);
+    close(): void;
+    private diagnostic;
+    private activity;
+    private push;
+    private run;
+    private websocket;
+    [Symbol.asyncIterator](): AsyncGenerator<AiChatBriefEvent>;
+}
+/** Finite SSE endpoints permit EOF, while sharing cancellation and idle semantics. */
+export declare function finiteSse(request: StreamRequest, options?: StreamOptions): AsyncGenerator<string>;

package/dist/subscription.js

@@ -0,0 +1,287 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __asyncValues = (this && this.__asyncValues) || function (o) {
+    if (!Symbol.asyncIterator) throw new TypeError("Symbol.asyncIterator is not defined.");
+    var m = o[Symbol.asyncIterator], i;
+    return m ? m.call(o) : (o = typeof __values === "function" ? __values(o) : o[Symbol.iterator](), i = {}, verb("next"), verb("throw"), verb("return"), i[Symbol.asyncIterator] = function () { return this; }, i);
+    function verb(n) { i[n] = o[n] && function (v) { return new Promise(function (resolve, reject) { v = o[n](v), settle(resolve, reject, v.done, v.value); }); }; }
+    function settle(resolve, reject, d, v) { Promise.resolve(v).then(function(v) { resolve({ value: v, done: d }); }, reject); }
+};
+var __await = (this && this.__await) || function (v) { return this instanceof __await ? (this.v = v, this) : new __await(v); }
+var __asyncGenerator = (this && this.__asyncGenerator) || function (thisArg, _arguments, generator) {
+    if (!Symbol.asyncIterator) throw new TypeError("Symbol.asyncIterator is not defined.");
+    var g = generator.apply(thisArg, _arguments || []), i, q = [];
+    return i = Object.create((typeof AsyncIterator === "function" ? AsyncIterator : Object).prototype), verb("next"), verb("throw"), verb("return", awaitReturn), i[Symbol.asyncIterator] = function () { return this; }, i;
+    function awaitReturn(f) { return function (v) { return Promise.resolve(v).then(f, reject); }; }
+    function verb(n, f) { if (g[n]) { i[n] = function (v) { return new Promise(function (a, b) { q.push([n, v, a, b]) > 1 || resume(n, v); }); }; if (f) i[n] = f(i[n]); } }
+    function resume(n, v) { try { step(g[n](v)); } catch (e) { settle(q[0][3], e); } }
+    function step(r) { r.value instanceof __await ? Promise.resolve(r.value.v).then(fulfill, reject) : settle(q[0][2], r); }
+    function fulfill(value) { resume("next", value); }
+    function reject(value) { resume("throw", value); }
+    function settle(f, v) { if (f(v), q.shift(), q.length) resume(q[0][0], q[0][1]); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChatSubscription = void 0;
+exports.finiteSse = finiteSse;
+const lifecycle_1 = require("./lifecycle");
+const events_1 = require("./events");
+const sse_1 = require("./sse");
+let nextConnectionId = 0;
+/** One connection, no replay, retry, UI merging or recovery policy. */
+class ChatSubscription {
+    constructor(request, url, messageId, options = {}, connect) {
+        this.request = request;
+        this.url = url;
+        this.messageId = messageId;
+        this.options = options;
+        this.connect = connect;
+        this.events = this;
+        this.queue = [];
+        this.done = false;
+        this.reason = 'closed';
+        this.connectionId = `connection-${++nextConnectionId}`;
+        if (options.idleTimeoutMs !== undefined && (!Number.isFinite(options.idleTimeoutMs) || options.idleTimeoutMs <= 0))
+            throw new RangeError('idleTimeoutMs must be positive');
+        this.scope = new lifecycle_1.RequestScope(options);
+        this.closed = new Promise(resolve => { this.finish = resolve; });
+        void this.run();
+    }
+    close() { this.reason = 'closed'; this.scope.controller.abort(); }
+    diagnostic(type, requestId = this.serverRequestId) {
+        var _a, _b, _c;
+        try {
+            (_b = (_a = this.options).onConnectionEvent) === null || _b === void 0 ? void 0 : _b.call(_a, { type, connectionId: this.connectionId, transport: (_c = this.options.transport) !== null && _c !== void 0 ? _c : 'sse', requestId, reason: type === 'closed' ? this.reason : undefined, closeCode: this.closeCode });
+        }
+        catch ( /* Observers do not own connection state. */_d) { /* Observers do not own connection state. */ }
+    }
+    activity() {
+        clearTimeout(this.idleTimer);
+        if (this.options.idleTimeoutMs !== undefined)
+            this.idleTimer = setTimeout(() => this.scope.controller.abort(new lifecycle_1.ApiError('', '', undefined, '', { kind: 'timeout' })), this.options.idleTimeoutMs);
+    }
+    push(data) {
+        var _a;
+        const event = (0, events_1.decodeAiChatBriefEvent)(data);
+        if (this.queue.length >= 1024)
+            throw new lifecycle_1.ApiError('', '', undefined, '', { kind: 'protocol' });
+        this.queue.push(event);
+        (_a = this.wake) === null || _a === void 0 ? void 0 : _a.call(this);
+        if (event.type === 'end') {
+            this.reason = 'end';
+            return true;
+        }
+        return false;
+    }
+    run() {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, e_1, _b, _c;
+            var _d, _e, _f;
+            let requestId;
+            try {
+                if (this.options.transport === 'websocket')
+                    yield this.websocket();
+                else {
+                    const response = yield (0, lifecycle_1.abortable)(this.request(this.scope.signal), this.scope.signal);
+                    requestId = (_d = response.headers.get('X-Request-ID')) !== null && _d !== void 0 ? _d : undefined;
+                    this.diagnostic('opened', requestId);
+                    this.activity();
+                    try {
+                        for (var _g = true, _h = __asyncValues((0, sse_1.decodeSse)(response, this.scope.signal, comment => {
+                            this.activity();
+                            this.diagnostic(comment === 'ready' ? 'ready' : 'heartbeat', requestId);
+                        })), _j; _j = yield _h.next(), _a = _j.done, !_a; _g = true) {
+                            _c = _j.value;
+                            _g = false;
+                            const data = _c;
+                            this.activity();
+                            if (this.push(data))
+                                break;
+                        }
+                    }
+                    catch (e_1_1) { e_1 = { error: e_1_1 }; }
+                    finally {
+                        try {
+                            if (!_g && !_a && (_b = _h.return)) yield _b.call(_h);
+                        }
+                        finally { if (e_1) throw e_1.error; }
+                    }
+                    if (this.reason !== 'end')
+                        throw new lifecycle_1.ApiError('', '', undefined, '', { kind: 'unexpected_eof', requestId });
+                }
+            }
+            catch (error) {
+                if (!this.scope.signal.aborted || ((_e = this.options.signal) === null || _e === void 0 ? void 0 : _e.aborted) || this.scope.signal.reason instanceof lifecycle_1.ApiError) {
+                    this.failure = yield (0, lifecycle_1.normalizeError)(error, this.scope.signal);
+                    this.reason = this.failure.kind === 'timeout' ? 'timeout' : this.failure.kind === 'cancelled' ? 'cancelled' : 'error';
+                }
+            }
+            finally {
+                this.scope.controller.abort();
+                this.scope.dispose();
+                clearTimeout(this.idleTimer);
+                this.done = true;
+                (_f = this.wake) === null || _f === void 0 ? void 0 : _f.call(this);
+                this.diagnostic('closed', requestId);
+                this.finish({ reason: this.reason, error: this.failure, closeCode: this.closeCode });
+            }
+        });
+    }
+    websocket() {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!this.connect)
+                throw new lifecycle_1.ApiError('', '', undefined, '', { kind: 'protocol' });
+            const socket = yield (0, lifecycle_1.abortable)(this.connect(this.url, this.scope.signal, this.options.xRequestID), this.scope.signal);
+            yield new Promise((resolve, reject) => {
+                let settled = false, ready = false;
+                const settle = (error) => {
+                    if (settled)
+                        return;
+                    settled = true;
+                    this.scope.signal.removeEventListener('abort', abort);
+                    socket.onopen = socket.onmessage = socket.onerror = socket.onclose = null;
+                    try {
+                        socket.close(1000, 'client-close');
+                    }
+                    catch ( /* Already closed. */_a) { /* Already closed. */ }
+                    error ? reject(error) : resolve();
+                };
+                const abort = () => settle(new lifecycle_1.ApiError('', '', undefined, '', { kind: 'cancelled' }));
+                this.scope.signal.addEventListener('abort', abort, { once: true });
+                if (this.scope.signal.aborted) {
+                    abort();
+                    return;
+                }
+                socket.onopen = () => { this.serverRequestId = socket.serverRequestId; this.diagnostic('opened'); this.activity(); };
+                socket.onmessage = frame => {
+                    try {
+                        this.activity();
+                        if (typeof frame.data !== 'string')
+                            throw new Error('Expected text frame');
+                        const value = JSON.parse(frame.data);
+                        if (value.id !== this.messageId || typeof value.event !== 'string')
+                            throw new Error('Invalid envelope');
+                        if (value.event === 'ready') {
+                            ready = true;
+                            this.diagnostic('ready');
+                        }
+                        else if (value.event === 'complete') {
+                            this.reason = 'complete';
+                            settle();
+                        }
+                        else if (value.event === 'transport-error')
+                            throw new lifecycle_1.ApiError('', '', undefined, JSON.stringify(value.data), { kind: 'protocol' });
+                        else {
+                            if (!ready || !value.data || typeof value.data.type !== 'string')
+                                throw new Error('Invalid business frame');
+                            if (this.push(JSON.stringify(value.data)))
+                                settle();
+                        }
+                    }
+                    catch (error) {
+                        settle(error instanceof lifecycle_1.ApiError ? error : new lifecycle_1.ApiError('', '', undefined, '', { kind: 'protocol' }));
+                    }
+                };
+                socket.onerror = () => { var _a; return settle((_a = socket.handshakeError) !== null && _a !== void 0 ? _a : new lifecycle_1.ApiError('', '', undefined, '', { kind: 'network' })); };
+                socket.onclose = event => { this.closeCode = event.code; if (event.code === 1000) {
+                    this.reason = 'normal';
+                    settle();
+                }
+                else
+                    settle(new lifecycle_1.ApiError('', '', undefined, '', { kind: 'unexpected_eof' })); };
+            });
+        });
+    }
+    [Symbol.asyncIterator]() {
+        return __asyncGenerator(this, arguments, function* _a() {
+            try {
+                for (;;) {
+                    if (this.queue.length) {
+                        yield yield __await(this.queue.shift());
+                        continue;
+                    }
+                    if (this.done) {
+                        if (this.failure)
+                            throw this.failure;
+                        return yield __await(void 0);
+                    }
+                    yield __await(new Promise(resolve => { this.wake = resolve; }));
+                }
+            }
+            finally {
+                this.close();
+                yield __await(this.closed);
+            }
+        });
+    }
+}
+exports.ChatSubscription = ChatSubscription;
+/** Finite SSE endpoints permit EOF, while sharing cancellation and idle semantics. */
+function finiteSse(request_1) {
+    return __asyncGenerator(this, arguments, function* finiteSse_1(request, options = {}) {
+        var _a, e_2, _b, _c;
+        var _d;
+        if (options.idleTimeoutMs !== undefined && (!Number.isFinite(options.idleTimeoutMs) || options.idleTimeoutMs <= 0))
+            throw new RangeError('idleTimeoutMs must be positive');
+        const scope = new lifecycle_1.RequestScope(options);
+        let timer;
+        let reason = 'closed', requestId;
+        const connectionId = `connection-${++nextConnectionId}`;
+        const diagnostic = (type) => {
+            var _a;
+            try {
+                (_a = options.onConnectionEvent) === null || _a === void 0 ? void 0 : _a.call(options, { type, transport: 'sse', connectionId, requestId, reason: type === 'closed' ? reason : undefined });
+            }
+            catch ( /* Observer only. */_b) { /* Observer only. */ }
+        };
+        const activity = () => {
+            clearTimeout(timer);
+            if (options.idleTimeoutMs !== undefined)
+                timer = setTimeout(() => scope.controller.abort(new lifecycle_1.ApiError('', '', undefined, '', { kind: 'timeout' })), options.idleTimeoutMs);
+        };
+        try {
+            if (options.transport === 'websocket')
+                throw new lifecycle_1.ApiError('', '', undefined, '', { kind: 'protocol' });
+            const response = yield __await((0, lifecycle_1.abortable)(request(scope.signal), scope.signal));
+            requestId = (_d = response.headers.get('X-Request-ID')) !== null && _d !== void 0 ? _d : undefined;
+            diagnostic('opened');
+            activity();
+            try {
+                for (var _e = true, _f = __asyncValues((0, sse_1.decodeSse)(response, scope.signal, comment => { activity(); diagnostic(comment === 'ready' ? 'ready' : 'heartbeat'); })), _g; _g = yield __await(_f.next()), _a = _g.done, !_a; _e = true) {
+                    _c = _g.value;
+                    _e = false;
+                    const data = _c;
+                    activity();
+                    yield yield __await(data);
+                }
+            }
+            catch (e_2_1) { e_2 = { error: e_2_1 }; }
+            finally {
+                try {
+                    if (!_e && !_a && (_b = _f.return)) yield __await(_b.call(_f));
+                }
+                finally { if (e_2) throw e_2.error; }
+            }
+            reason = 'normal';
+        }
+        catch (error) {
+            const normalized = yield __await((0, lifecycle_1.normalizeError)(error, scope.signal));
+            requestId !== null && requestId !== void 0 ? requestId : (requestId = normalized.requestId);
+            reason = normalized.kind === 'timeout' ? 'timeout' : normalized.kind === 'cancelled' ? 'cancelled' : 'error';
+            throw normalized;
+        }
+        finally {
+            scope.controller.abort();
+            scope.dispose();
+            clearTimeout(timer);
+            diagnostic('closed');
+        }
+    });
+}

package/dist/token.d.ts

@@ -0,0 +1,20 @@
+import type { WebSocketFactory } from './subscription';
+/** A fresh token must be issued for every invocation, including concurrent calls. */
+export type TokenProvider = (context: {
+    channelId: string;
+    signal?: AbortSignal;
+    fetch: typeof fetch;
+}) => string | Promise<string>;
+export interface TokenAuth {
+    type: 'token';
+    tokenProvider: TokenProvider;
+}
+export interface ClientOptions<Auth> {
+    baseUrl: string;
+    channelId: string;
+    auth: Auth;
+    fetch?: typeof fetch;
+    webSocketFactory?: WebSocketFactory;
+}
+/** Browser-safe transport: no cache, HMAC headers, redirects, or automatic retries. */
+export declare function createTokenFetch(provider: TokenProvider, channelId: string, network?: typeof fetch): typeof fetch;

package/dist/token.js

@@ -0,0 +1,41 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTokenFetch = createTokenFetch;
+const lifecycle_1 = require("./lifecycle");
+/** Browser-safe transport: no cache, HMAC headers, redirects, or automatic retries. */
+function createTokenFetch(provider, channelId, network = globalThis.fetch) {
+    if (typeof provider !== 'function')
+        throw new Error('tokenProvider must be a function');
+    return (input, init) => __awaiter(this, void 0, void 0, function* () {
+        const request = new Request(input, init);
+        (0, lifecycle_1.checkSignal)(request.signal);
+        if (new URL(request.url).pathname.endsWith('/presign'))
+            throw new lifecycle_1.ApiError('POST', '/presign', undefined, '{"message":"presign requires HMAC authentication"}', { kind: 'authentication' });
+        if (Array.from(request.headers.keys()).some(name => name.toLowerCase().startsWith('x-openapi-'))) {
+            throw new Error('Authentication headers are managed by the SDK');
+        }
+        let token;
+        try {
+            token = yield (0, lifecycle_1.abortable)(Promise.resolve().then(() => provider({ channelId, signal: request.signal, fetch: network })), request.signal);
+        }
+        catch (_a) {
+            (0, lifecycle_1.checkSignal)(request.signal);
+            throw Object.assign(new lifecycle_1.ApiError('', '', undefined, '', { kind: 'authentication' }), { message: 'OpenAPI token provider failed' });
+        }
+        (0, lifecycle_1.checkSignal)(request.signal);
+        if (typeof token !== 'string' || !/^[\x21-\x7e]+$/.test(token))
+            throw Object.assign(new lifecycle_1.ApiError('', '', undefined, '', { kind: 'authentication' }), { message: 'Invalid OpenAPI token' });
+        const headers = new Headers(request.headers);
+        headers.set('X-OpenAPI-Token', token);
+        return (0, lifecycle_1.fetchResponse)(network, new Request(request, { headers, redirect: 'error' }));
+    });
+}