@loxtep/sdk 0.1.0

package/dist/errors/resource.js

@@ -0,0 +1,32 @@
+import { LoxtepError } from './base.js';
+/** 404 - Resource doesn't exist. */
+export class NotFoundError extends LoxtepError {
+    resource_type;
+    resource_id;
+    constructor(message, resource_type, resource_id, options) {
+        super(message, {
+            code: 'NOT_FOUND',
+            status_code: 404,
+            details: options?.details,
+            request_id: options?.request_id,
+        });
+        this.name = 'NotFoundError';
+        this.resource_type = resource_type;
+        this.resource_id = resource_id;
+        Object.setPrototypeOf(this, NotFoundError.prototype);
+    }
+}
+/** 409 - Resource already exists or version conflict. */
+export class ConflictError extends LoxtepError {
+    constructor(message, options) {
+        super(message, {
+            code: 'CONFLICT',
+            status_code: 409,
+            details: options?.details,
+            request_id: options?.request_id,
+        });
+        this.name = 'ConflictError';
+        Object.setPrototypeOf(this, ConflictError.prototype);
+    }
+}
+//# sourceMappingURL=resource.js.map

package/dist/errors/resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.js","sourceRoot":"","sources":["../../src/errors/resource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,oCAAoC;AACpC,MAAM,OAAO,aAAc,SAAQ,WAAW;IACnC,aAAa,CAAS;IACtB,WAAW,CAAS;IAE7B,YACE,OAAe,EACf,aAAqB,EACrB,WAAmB,EACnB,OAAoE;QAEpE,KAAK,CAAC,OAAO,EAAE;YACb,IAAI,EAAE,WAAW;YACjB,WAAW,EAAE,GAAG;YAChB,OAAO,EAAE,OAAO,EAAE,OAAO;YACzB,UAAU,EAAE,OAAO,EAAE,UAAU;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;CACF;AAED,yDAAyD;AACzD,MAAM,OAAO,aAAc,SAAQ,WAAW;IAC5C,YACE,OAAe,EACf,OAAoE;QAEpE,KAAK,CAAC,OAAO,EAAE;YACb,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,GAAG;YAChB,OAAO,EAAE,OAAO,EAAE,OAAO;YACzB,UAAU,EAAE,OAAO,EAAE,UAAU;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;CACF"}

package/dist/errors/streaming.d.ts

@@ -0,0 +1,19 @@
+import { LoxtepError } from './base.js';
+/** Connection lost, checkpoint failed, etc. */
+export declare class StreamingError extends LoxtepError {
+    readonly checkpoint?: string;
+    constructor(message: string, options?: {
+        checkpoint?: string;
+        details?: Record<string, unknown>;
+        request_id?: string;
+    });
+}
+/** Failed to save/load checkpoint. */
+export declare class CheckpointError extends LoxtepError {
+    readonly checkpoint_id: string;
+    constructor(message: string, checkpoint_id: string, options?: {
+        details?: Record<string, unknown>;
+        request_id?: string;
+    });
+}
+//# sourceMappingURL=streaming.d.ts.map

package/dist/errors/streaming.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming.d.ts","sourceRoot":"","sources":["../../src/errors/streaming.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,+CAA+C;AAC/C,qBAAa,cAAe,SAAQ,WAAW;IAC7C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;gBAG3B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QACR,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB;CAYJ;AAED,sCAAsC;AACtC,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBAG7B,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;CAYvE"}

package/dist/errors/streaming.js

@@ -0,0 +1,32 @@
+import { LoxtepError } from './base.js';
+/** Connection lost, checkpoint failed, etc. */
+export class StreamingError extends LoxtepError {
+    checkpoint;
+    constructor(message, options) {
+        super(message, {
+            code: 'STREAMING_ERROR',
+            status_code: 500,
+            details: options?.details,
+            request_id: options?.request_id,
+        });
+        this.name = 'StreamingError';
+        this.checkpoint = options?.checkpoint;
+        Object.setPrototypeOf(this, StreamingError.prototype);
+    }
+}
+/** Failed to save/load checkpoint. */
+export class CheckpointError extends LoxtepError {
+    checkpoint_id;
+    constructor(message, checkpoint_id, options) {
+        super(message, {
+            code: 'CHECKPOINT_ERROR',
+            status_code: 500,
+            details: options?.details,
+            request_id: options?.request_id,
+        });
+        this.name = 'CheckpointError';
+        this.checkpoint_id = checkpoint_id;
+        Object.setPrototypeOf(this, CheckpointError.prototype);
+    }
+}
+//# sourceMappingURL=streaming.js.map

package/dist/errors/streaming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming.js","sourceRoot":"","sources":["../../src/errors/streaming.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,+CAA+C;AAC/C,MAAM,OAAO,cAAe,SAAQ,WAAW;IACpC,UAAU,CAAU;IAE7B,YACE,OAAe,EACf,OAIC;QAED,KAAK,CAAC,OAAO,EAAE;YACb,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,GAAG;YAChB,OAAO,EAAE,OAAO,EAAE,OAAO;YACzB,UAAU,EAAE,OAAO,EAAE,UAAU;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,CAAC;QACtC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;CACF;AAED,sCAAsC;AACtC,MAAM,OAAO,eAAgB,SAAQ,WAAW;IACrC,aAAa,CAAS;IAE/B,YACE,OAAe,EACf,aAAqB,EACrB,OAAoE;QAEpE,KAAK,CAAC,OAAO,EAAE;YACb,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,GAAG;YAChB,OAAO,EAAE,OAAO,EAAE,OAAO;YACzB,UAAU,EAAE,OAAO,EAAE,UAAU;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/errors/types.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Options for LoxtepError base class.
+ * All API-facing fields use snake_case per backend conventions.
+ */
+export interface LoxtepErrorOptions {
+    code: string;
+    status_code?: number;
+    details?: Record<string, unknown>;
+    request_id?: string;
+}
+/**
+ * Field error for ValidationError.
+ */
+export interface FieldError {
+    field: string;
+    message: string;
+}
+/**
+ * Validation error entry for DefinitionValidationError.
+ */
+export interface DefinitionValidationErrorEntry {
+    path: string;
+    message: string;
+}
+/**
+ * Parsed body from 429 response for RateLimitError.
+ */
+export interface RateLimitErrorBody {
+    retry_after_seconds?: number;
+    limit?: number;
+    remaining?: number;
+    reset_at?: string;
+    message?: string;
+}
+/**
+ * Generic API error response body (4xx/5xx).
+ */
+export interface ApiErrorBody {
+    message?: string;
+    code?: string;
+    details?: Record<string, unknown>;
+    request_id?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/errors/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/errors/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}

package/dist/errors/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/errors/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/errors/types.ts"],"names":[],"mappings":""}

package/dist/errors/validation.d.ts

@@ -0,0 +1,23 @@
+import { LoxtepError } from './base.js';
+import type { FieldError, DefinitionValidationErrorEntry } from './types.js';
+/** 400 - Invalid input. */
+export declare class ValidationError extends LoxtepError {
+    readonly field_errors: FieldError[];
+    constructor(message: string, field_errors?: FieldError[], options?: {
+        details?: Record<string, unknown>;
+        request_id?: string;
+    });
+}
+/**
+ * Payload doesn't match data product definition (backend: schema).
+ * Alias: DefinitionValidationError per frontend terminology (schema → definition).
+ */
+export declare class DefinitionValidationError extends LoxtepError {
+    readonly definition_version: string;
+    readonly validation_errors: DefinitionValidationErrorEntry[];
+    constructor(message: string, definition_version: string, validation_errors: DefinitionValidationErrorEntry[], options?: {
+        details?: Record<string, unknown>;
+        request_id?: string;
+    });
+}
+//# sourceMappingURL=validation.d.ts.map

package/dist/errors/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/errors/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,KAAK,EAAE,UAAU,EAAE,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAE7E,2BAA2B;AAC3B,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,QAAQ,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC;gBAGlC,OAAO,EAAE,MAAM,EACf,YAAY,GAAE,UAAU,EAAO,EAC/B,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;CAYvE;AAED;;;GAGG;AACH,qBAAa,yBAA0B,SAAQ,WAAW;IACxD,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,iBAAiB,EAAE,8BAA8B,EAAE,CAAC;gBAG3D,OAAO,EAAE,MAAM,EACf,kBAAkB,EAAE,MAAM,EAC1B,iBAAiB,EAAE,8BAA8B,EAAE,EACnD,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;CAavE"}

package/dist/errors/validation.js

@@ -0,0 +1,37 @@
+import { LoxtepError } from './base.js';
+/** 400 - Invalid input. */
+export class ValidationError extends LoxtepError {
+    field_errors;
+    constructor(message, field_errors = [], options) {
+        super(message, {
+            code: 'VALIDATION_ERROR',
+            status_code: 400,
+            details: options?.details,
+            request_id: options?.request_id,
+        });
+        this.name = 'ValidationError';
+        this.field_errors = field_errors;
+        Object.setPrototypeOf(this, ValidationError.prototype);
+    }
+}
+/**
+ * Payload doesn't match data product definition (backend: schema).
+ * Alias: DefinitionValidationError per frontend terminology (schema → definition).
+ */
+export class DefinitionValidationError extends LoxtepError {
+    definition_version;
+    validation_errors;
+    constructor(message, definition_version, validation_errors, options) {
+        super(message, {
+            code: 'DEFINITION_VALIDATION_ERROR',
+            status_code: 400,
+            details: options?.details,
+            request_id: options?.request_id,
+        });
+        this.name = 'DefinitionValidationError';
+        this.definition_version = definition_version;
+        this.validation_errors = validation_errors;
+        Object.setPrototypeOf(this, DefinitionValidationError.prototype);
+    }
+}
+//# sourceMappingURL=validation.js.map

package/dist/errors/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/errors/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAGxC,2BAA2B;AAC3B,MAAM,OAAO,eAAgB,SAAQ,WAAW;IACrC,YAAY,CAAe;IAEpC,YACE,OAAe,EACf,eAA6B,EAAE,EAC/B,OAAoE;QAEpE,KAAK,CAAC,OAAO,EAAE;YACb,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,GAAG;YAChB,OAAO,EAAE,OAAO,EAAE,OAAO;YACzB,UAAU,EAAE,OAAO,EAAE,UAAU;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,yBAA0B,SAAQ,WAAW;IAC/C,kBAAkB,CAAS;IAC3B,iBAAiB,CAAmC;IAE7D,YACE,OAAe,EACf,kBAA0B,EAC1B,iBAAmD,EACnD,OAAoE;QAEpE,KAAK,CAAC,OAAO,EAAE;YACb,IAAI,EAAE,6BAA6B;YACnC,WAAW,EAAE,GAAG;YAChB,OAAO,EAAE,OAAO,EAAE,OAAO;YACzB,UAAU,EAAE,OAAO,EAAE,UAAU;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,yBAAyB,CAAC,SAAS,CAAC,CAAC;IACnE,CAAC;CACF"}

package/dist/http/client.d.ts

@@ -0,0 +1,51 @@
+import type { AwsCredentialIdentity } from '@aws-sdk/types';
+/** Rate limit info parsed from response headers (X-RateLimit-*). */
+export interface RateLimitInfo {
+    limit: number;
+    remaining: number;
+    reset_at: string;
+    retry_after_seconds?: number;
+}
+export interface LoxtepHttpClientOptions {
+    base_url: string;
+    /**
+     * When `true`, `base_url` must be the API origin only (e.g. `https://apidev.example.com`); each path is
+     * resolved with {@link buildPlatformRequestUrl} (microservice as first public segment on shared hosts).
+     * When `false` (default), the URL is `base_url + path` (legacy: single `api_path_prefix` baked into `base_url`).
+     */
+    use_platform_path_resolution?: boolean;
+    get_token?: () => Promise<string | null>;
+    region?: string;
+    credentials?: AwsCredentialIdentity;
+    fetch_fn?: typeof fetch;
+    /** After 401, run once; return true to retry the same request with updated JWT from get_token. */
+    refresh_auth?: () => Promise<boolean>;
+}
+/**
+ * HTTP client that signs requests with AWS SigV4 and attaches JWT.
+ * GET/POST/PUT/DELETE helpers; retry on 5xx/network; throws Loxtep errors on 4xx/5xx.
+ */
+export declare class LoxtepHttpClient {
+    private readonly base_url;
+    private readonly use_platform_path_resolution;
+    private readonly get_token?;
+    private readonly region;
+    private readonly credentialsProvider;
+    private credentials;
+    private readonly fetch_fn;
+    private lastRateLimit;
+    private readonly refresh_auth?;
+    constructor(options: LoxtepHttpClientOptions);
+    /** Replace static SigV4 credentials (e.g. after /auth/refresh returns STS). */
+    setAwsCredentials(credentials: AwsCredentialIdentity | null): void;
+    private getCredentials;
+    private request;
+    private captureRateLimitFromResponse;
+    /** Last rate limit info from response headers (if any). */
+    getLastRateLimit(): RateLimitInfo | null;
+    get<T = unknown>(path: string): Promise<T>;
+    post<T = unknown>(path: string, body?: unknown): Promise<T>;
+    put<T = unknown>(path: string, body?: unknown): Promise<T>;
+    delete<T = unknown>(path: string): Promise<T>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/http/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/http/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAS5D,oEAAoE;AACpE,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,QAAQ,CAAC,EAAE,OAAO,KAAK,CAAC;IACxB,kGAAkG;IAClG,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CACvC;AAgBD;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAU;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA2B;IAC/D,OAAO,CAAC,WAAW,CAAsC;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;IACxC,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAyB;gBAE3C,OAAO,EAAE,uBAAuB;IAY5C,+EAA+E;IAC/E,iBAAiB,CAAC,WAAW,EAAE,qBAAqB,GAAG,IAAI,GAAG,IAAI;YAIpD,cAAc;YAYd,OAAO;IA4ErB,OAAO,CAAC,4BAA4B;IA2BpC,2DAA2D;IAC3D,gBAAgB,IAAI,aAAa,GAAG,IAAI;IAIlC,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAI1C,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAI3D,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAI1D,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAGpD"}

package/dist/http/client.js

@@ -0,0 +1,164 @@
+import { fromNodeProviderChain } from '@aws-sdk/credential-providers';
+import { buildPlatformRequestUrl } from '../config/platform-request-url.js';
+import { signRequest } from './signer.js';
+import { parseHttpError } from '../errors/parse-http.js';
+const DEFAULT_REGION = 'us-east-1';
+const MAX_RETRIES = 2;
+const INITIAL_BACKOFF_MS = 1000;
+function isRetryable(statusCode) {
+    return statusCode >= 500 || statusCode === 429;
+}
+function isNetworkError(err) {
+    if (err instanceof TypeError && err.message?.includes('fetch'))
+        return true;
+    if (err instanceof Error &&
+        (err.message === 'Failed to fetch' || err.message === 'Network request failed'))
+        return true;
+    return false;
+}
+/**
+ * HTTP client that signs requests with AWS SigV4 and attaches JWT.
+ * GET/POST/PUT/DELETE helpers; retry on 5xx/network; throws Loxtep errors on 4xx/5xx.
+ */
+export class LoxtepHttpClient {
+    base_url;
+    use_platform_path_resolution;
+    get_token;
+    region;
+    credentialsProvider = fromNodeProviderChain();
+    credentials = null;
+    fetch_fn;
+    lastRateLimit = null;
+    refresh_auth;
+    constructor(options) {
+        this.base_url = options.base_url.replace(/\/$/, '');
+        this.use_platform_path_resolution = options.use_platform_path_resolution === true;
+        this.get_token = options.get_token;
+        this.region = options.region ?? DEFAULT_REGION;
+        this.fetch_fn = options.fetch_fn ?? fetch;
+        this.refresh_auth = options.refresh_auth;
+        if (options.credentials) {
+            this.credentials = options.credentials;
+        }
+    }
+    /** Replace static SigV4 credentials (e.g. after /auth/refresh returns STS). */
+    setAwsCredentials(credentials) {
+        this.credentials = credentials;
+    }
+    async getCredentials() {
+        if (this.credentials)
+            return this.credentials;
+        const creds = await this.credentialsProvider();
+        if (!creds?.accessKeyId || !creds?.secretAccessKey) {
+            throw new Error('AWS credentials not available. Set AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY, or use an IAM role.');
+        }
+        this.credentials = creds;
+        return creds;
+    }
+    async request(method, path, body, retryCount = 0, authRetry = 0) {
+        const pathPart = path.startsWith('http')
+            ? path
+            : this.use_platform_path_resolution
+                ? buildPlatformRequestUrl(this.base_url, path)
+                : `${this.base_url}${path.startsWith('/') ? path : `/${path}`}`;
+        const url = new URL(pathPart);
+        const bodyString = body !== undefined ? JSON.stringify(body) : undefined;
+        const headers = {};
+        if (this.get_token) {
+            const token = await this.get_token();
+            if (token)
+                headers['x-jwt-token'] = token;
+        }
+        const credentials = await this.getCredentials();
+        const signedHeaders = await signRequest({
+            method,
+            url,
+            headers,
+            body: bodyString,
+            credentials,
+            region: this.region,
+        });
+        let response;
+        try {
+            response = await this.fetch_fn(url.toString(), {
+                method,
+                headers: signedHeaders,
+                body: bodyString,
+            });
+        }
+        catch (err) {
+            if (isNetworkError(err) && retryCount < MAX_RETRIES) {
+                const delay = INITIAL_BACKOFF_MS * Math.pow(2, retryCount);
+                await new Promise(r => setTimeout(r, delay));
+                return this.request(method, path, body, retryCount + 1, authRetry);
+            }
+            throw err;
+        }
+        const requestId = response.headers.get('x-request-id') ?? undefined;
+        const text = await response.text();
+        let parsed;
+        try {
+            parsed = text ? JSON.parse(text) : {};
+        }
+        catch {
+            parsed = { message: response.statusText };
+        }
+        if (response.status === 401 && authRetry === 0 && this.refresh_auth) {
+            const ok = await this.refresh_auth();
+            if (ok) {
+                return this.request(method, path, body, retryCount, authRetry + 1);
+            }
+        }
+        if (response.status >= 400) {
+            if (isRetryable(response.status) && retryCount < MAX_RETRIES) {
+                const delay = INITIAL_BACKOFF_MS * Math.pow(2, retryCount);
+                await new Promise(r => setTimeout(r, delay));
+                return this.request(method, path, body, retryCount + 1, authRetry);
+            }
+            throw parseHttpError(response.status, parsed, requestId);
+        }
+        this.captureRateLimitFromResponse(response);
+        return parsed;
+    }
+    captureRateLimitFromResponse(response) {
+        const limitHeader = response.headers.get('x-ratelimit-limit');
+        const remainingHeader = response.headers.get('x-ratelimit-remaining');
+        const resetHeader = response.headers.get('x-ratelimit-reset');
+        const retryAfter = response.headers.get('retry-after');
+        if (limitHeader != null || remainingHeader != null || resetHeader != null) {
+            const limit = limitHeader != null ? parseInt(limitHeader, 10) : 0;
+            const remaining = remainingHeader != null ? parseInt(remainingHeader, 10) : 0;
+            const reset_at = resetHeader != null
+                ? resetHeader
+                : retryAfter != null
+                    ? new Date(Date.now() + parseInt(retryAfter, 10) * 1000).toISOString()
+                    : new Date().toISOString();
+            const retry_after_seconds = retryAfter != null ? parseInt(retryAfter, 10) : undefined;
+            this.lastRateLimit = {
+                limit: Number.isNaN(limit) ? 0 : limit,
+                remaining: Number.isNaN(remaining) ? 0 : remaining,
+                reset_at,
+                retry_after_seconds: retry_after_seconds != null && !Number.isNaN(retry_after_seconds)
+                    ? retry_after_seconds
+                    : undefined,
+            };
+        }
+    }
+    /** Last rate limit info from response headers (if any). */
+    getLastRateLimit() {
+        return this.lastRateLimit;
+    }
+    async get(path) {
+        return this.request('GET', path);
+    }
+    async post(path, body) {
+        return this.request('POST', path, body);
+    }
+    async put(path, body) {
+        return this.request('PUT', path, body);
+    }
+    async delete(path) {
+        return this.request('DELETE', path);
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/http/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/http/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,MAAM,cAAc,GAAG,WAAW,CAAC;AACnC,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,kBAAkB,GAAG,IAAI,CAAC;AA0BhC,SAAS,WAAW,CAAC,UAAkB;IACrC,OAAO,UAAU,IAAI,GAAG,IAAI,UAAU,KAAK,GAAG,CAAC;AACjD,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,GAAG,YAAY,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5E,IACE,GAAG,YAAY,KAAK;QACpB,CAAC,GAAG,CAAC,OAAO,KAAK,iBAAiB,IAAI,GAAG,CAAC,OAAO,KAAK,wBAAwB,CAAC;QAE/E,OAAO,IAAI,CAAC;IACd,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACV,QAAQ,CAAS;IACjB,4BAA4B,CAAU;IACtC,SAAS,CAAgC;IACzC,MAAM,CAAS;IACf,mBAAmB,GAAG,qBAAqB,EAAE,CAAC;IACvD,WAAW,GAAiC,IAAI,CAAC;IACxC,QAAQ,CAAe;IAChC,aAAa,GAAyB,IAAI,CAAC;IAClC,YAAY,CAA0B;IAEvD,YAAY,OAAgC;QAC1C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,4BAA4B,GAAG,OAAO,CAAC,4BAA4B,KAAK,IAAI,CAAC;QAClF,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC;QAC/C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACzC,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,iBAAiB,CAAC,WAAyC;QACzD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,IAAc,EACd,UAAU,GAAG,CAAC,EACd,SAAS,GAAG,CAAC;QAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YACtC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,CAAC,4BAA4B;gBACjC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC;gBAC9C,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACpE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEzE,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACrC,IAAI,KAAK;gBAAE,OAAO,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC;QAC5C,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC;YACtC,MAAM;YACN,GAAG;YACH,OAAO;YACP,IAAI,EAAE,UAAU;YAChB,WAAW;YACX,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;gBAC7C,MAAM;gBACN,OAAO,EAAE,aAAa;gBACtB,IAAI,EAAE,UAAU;aACjB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,UAAU,GAAG,WAAW,EAAE,CAAC;gBACpD,MAAM,KAAK,GAAG,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;gBAC3D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC7C,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,SAAS,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACpE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACrC,IAAI,EAAE,EAAE,CAAC;gBACP,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC3B,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,UAAU,GAAG,WAAW,EAAE,CAAC;gBAC7D,MAAM,KAAK,GAAG,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;gBAC3D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC7C,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,cAAc,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC;QAC5C,OAAO,MAAW,CAAC;IACrB,CAAC;IAEO,4BAA4B,CAAC,QAAkB;QACrD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC9D,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACtE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACvD,IAAI,WAAW,IAAI,IAAI,IAAI,eAAe,IAAI,IAAI,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;YAC1E,MAAM,KAAK,GAAG,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,QAAQ,GACZ,WAAW,IAAI,IAAI;gBACjB,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,UAAU,IAAI,IAAI;oBAClB,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;oBACtE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjC,MAAM,mBAAmB,GAAG,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,IAAI,CAAC,aAAa,GAAG;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;gBACtC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;gBAClD,QAAQ;gBACR,mBAAmB,EACjB,mBAAmB,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC;oBAC/D,CAAC,CAAC,mBAAmB;oBACrB,CAAC,CAAC,SAAS;aAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,IAAY;QACjC,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,IAAI,CAAc,IAAY,EAAE,IAAc;QAClD,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,IAAY,EAAE,IAAc;QACjD,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAc,IAAY;QACpC,OAAO,IAAI,CAAC,OAAO,CAAI,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/http/index.d.ts

@@ -0,0 +1,5 @@
+export { signRequest } from './signer.js';
+export type { SignRequestParams } from './signer.js';
+export { LoxtepHttpClient } from './client.js';
+export type { LoxtepHttpClientOptions } from './client.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/http/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,YAAY,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}

package/dist/http/index.js

@@ -0,0 +1,3 @@
+export { signRequest } from './signer.js';
+export { LoxtepHttpClient } from './client.js';
+//# sourceMappingURL=index.js.map

package/dist/http/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/http/signer.d.ts

@@ -0,0 +1,15 @@
+import type { AwsCredentialIdentity } from '@aws-sdk/types';
+export interface SignRequestParams {
+    method: string;
+    url: URL;
+    headers: Record<string, string>;
+    body?: string;
+    credentials: AwsCredentialIdentity;
+    region: string;
+}
+/**
+ * Sign an HTTP request with AWS SigV4 for API Gateway (execute-api).
+ * Returns headers to use for fetch (including Authorization and x-amz-*).
+ */
+export declare function signRequest(params: SignRequestParams): Promise<Record<string, string>>;
+//# sourceMappingURL=signer.d.ts.map

package/dist/http/signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../src/http/signer.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAI5D,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,GAAG,CAAC;IACT,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,qBAAqB,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAkD5F"}

package/dist/http/signer.js

@@ -0,0 +1,55 @@
+import { SignatureV4 } from '@smithy/signature-v4';
+import { Sha256 } from '@aws-crypto/sha256-js';
+import { HttpRequest } from '@smithy/protocol-http';
+const SERVICE = 'execute-api';
+/**
+ * Sign an HTTP request with AWS SigV4 for API Gateway (execute-api).
+ * Returns headers to use for fetch (including Authorization and x-amz-*).
+ */
+export async function signRequest(params) {
+    const { method, url, headers, body, credentials, region } = params;
+    const query = {};
+    url.searchParams.forEach((value, key) => {
+        if (query[key]) {
+            const existing = query[key];
+            query[key] = Array.isArray(existing) ? [...existing, value] : [existing, value];
+        }
+        else {
+            query[key] = value;
+        }
+    });
+    const requestHeaders = {
+        host: url.hostname,
+        accept: 'application/json',
+        ...headers,
+    };
+    if (body !== undefined) {
+        requestHeaders['content-type'] = 'application/json';
+    }
+    const httpRequest = new HttpRequest({
+        method,
+        protocol: url.protocol,
+        hostname: url.hostname,
+        port: url.port ? Number(url.port) : undefined,
+        path: url.pathname,
+        query: Object.keys(query).length ? query : undefined,
+        headers: requestHeaders,
+        body,
+    });
+    const signer = new SignatureV4({
+        credentials,
+        region,
+        service: SERVICE,
+        sha256: Sha256,
+        applyChecksum: false,
+    });
+    const signed = await signer.sign(httpRequest);
+    const out = {};
+    for (const [key, value] of Object.entries(signed.headers)) {
+        if (value != null) {
+            out[key] = Array.isArray(value) ? value.join(', ') : String(value);
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=signer.js.map

package/dist/http/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../src/http/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD,MAAM,OAAO,GAAG,aAAa,CAAC;AAW9B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAyB;IACzD,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAEnE,MAAM,KAAK,GAAsC,EAAE,CAAC;IACpD,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClF,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAA2B;QAC7C,IAAI,EAAE,GAAG,CAAC,QAAQ;QAClB,MAAM,EAAE,kBAAkB;QAC1B,GAAG,OAAO;KACX,CAAC;IACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,cAAc,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IACtD,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC;QAClC,MAAM;QACN,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7C,IAAI,EAAE,GAAG,CAAC,QAAQ;QAClB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACpD,OAAO,EAAE,cAAc;QACvB,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC;QAC7B,WAAW;QACX,MAAM;QACN,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,MAAM;QACd,aAAa,EAAE,KAAK;KACrB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAE9C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @loxtep/sdk - Loxtep Node.js SDK
+ * Phase 1: errors + LoxtepClient (stubs); HTTP and auth in LOX-951, LOX-949.
+ */
+export * from './errors/index.js';
+export * from './client/index.js';
+export * from './config/index.js';
+export * from './auth/index.js';
+export * from './http/index.js';
+export * from './checkpoint/index.js';
+export * from './streaming/index.js';
+export * from './types/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,13 @@
+/**
+ * @loxtep/sdk - Loxtep Node.js SDK
+ * Phase 1: errors + LoxtepClient (stubs); HTTP and auth in LOX-951, LOX-949.
+ */
+export * from './errors/index.js';
+export * from './client/index.js';
+export * from './config/index.js';
+export * from './auth/index.js';
+export * from './http/index.js';
+export * from './checkpoint/index.js';
+export * from './streaming/index.js';
+export * from './types/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC"}

package/dist/rstreams/configuration.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Resolve Loxtep stream bus configuration from explicit options and process.env
+ * (resource names from your instance / stack).
+ */
+import type { ConfigurationResources } from './leo-runtime.js';
+/**
+ * Merge partial config with environment defaults (instance stream env + `AWS_REGION`).
+ * Returns undefined if required fields are missing (caller treats as "no bus configured").
+ */
+export declare function resolveStreamsConfiguration(partial?: Partial<ConfigurationResources>): ConfigurationResources | undefined;
+//# sourceMappingURL=configuration.d.ts.map

package/dist/rstreams/configuration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration.d.ts","sourceRoot":"","sources":["../../src/rstreams/configuration.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAO/D;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,GACxC,sBAAsB,GAAG,SAAS,CAgCpC"}