@oomol-lab/open-connector 1.9.2 → 1.9.3

package/src/providers/onfleet/runtime.js

@@ -1,5 +1,5 @@
 import { optionalRecord, optionalString } from "../../core/cast.js";
-import { createProviderTimeout, isAbortLikeError, ProviderRequestError, providerUserAgent, } from "../provider-runtime.js";
+import { createProviderTimeout, isAbortLikeError, ProviderRequestError, providerUserAgent, providerInputError, providerResponseError, } from "../provider-runtime.js";
 export const onfleetApiBaseUrl = "https://onfleet.com/api/v2";
 export const onfleetActionHandlers = {
     async create_task(input, context) {
@@ -127,7 +127,7 @@ function createOnfleetError(response, payload, phase) {
         response.statusText ||
         `Onfleet request failed with status ${response.status}`;
     if (phase === "validate" && (response.status === 401 || response.status === 403)) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     if (response.status === 400 || response.status === 404 || response.status === 422) {
         return new ProviderRequestError(response.status, message);
@@ -165,6 +165,6 @@ function requireObject(value, label) {
 }
 function requireArray(value, message) {
     if (!Array.isArray(value))
-        throw new ProviderRequestError(502, message);
+        throw providerResponseError(message);
     return value.map((item) => requireObject(item, "Onfleet task"));
 }

package/src/providers/onlyoffice_docspace/runtime.js

@@ -1,13 +1,13 @@
 import { createHash } from "node:crypto";
 import { objectArray, optionalInteger, optionalRecord, optionalString } from "../../core/cast.js";
 import { assertPublicHttpUrl, isPrivateNetworkAccessAllowed } from "../../core/request.js";
-import { createProviderTimeout, providerUserAgent, ProviderRequestError } from "../provider-runtime.js";
+import { createProviderTimeout, providerUserAgent, ProviderRequestError, providerInputError, } from "../provider-runtime.js";
 export function normalizePortalUrl(value, allowPrivateNetwork = isPrivateNetworkAccessAllowed()) {
     if (typeof value !== "string" || !value.trim())
         throw new ProviderRequestError(400, "portalUrl is required");
     const url = assertPublicHttpUrl(value.trim(), {
         fieldName: "portalUrl",
-        createError: (message) => new ProviderRequestError(400, message),
+        createError: providerInputError,
         allowPrivateNetwork,
     });
     if (url.protocol !== "https:")
@@ -172,11 +172,11 @@ function mapError(status, payload, phase) {
         optionalString(root?.message) ??
         `ONLYOFFICE DocSpace request failed with ${status}`;
     if (phase === "validate" && (status === 401 || status === 403))
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     if (status === 401)
         return new ProviderRequestError(401, message);
     if ([400, 403, 404, 409, 422].includes(status))
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     if (status === 429)
         return new ProviderRequestError(429, message);
     return new ProviderRequestError(status >= 500 ? 502 : status, message);

package/src/providers/oomnitza/runtime.js

@@ -1,8 +1,7 @@
 import { optionalInteger, optionalRecord, optionalString, requiredString } from "../../core/cast.js";
 import { assertPublicHttpUrl } from "../../core/request.js";
-import { createProviderTimeout, isAbortLikeError, providerInputError, providerUserAgent, ProviderRequestError, } from "../provider-runtime.js";
+import { createProviderTimeout, isAbortLikeError, providerInputError, providerUserAgent, ProviderRequestError, defaultProviderRequestTimeoutMs, } from "../provider-runtime.js";
 export const oomnitzaValidationPath = "/api/v3/assets";
-const oomnitzaRequestTimeoutMs = 30_000;
 export const oomnitzaActionHandlers = {
     async identify(_input, context) {
         return {
@@ -92,7 +91,7 @@ export function resolveOomnitzaCredential(apiKey, baseUrlInput) {
     };
 }
 async function requestOomnitzaJson(input) {
-    const timeout = createProviderTimeout(input.signal, oomnitzaRequestTimeoutMs);
+    const timeout = createProviderTimeout(input.signal);
     try {
         const response = await input.fetcher(buildOomnitzaUrl(input.baseUrl, input.path, input.query), {
             method: "GET",
@@ -114,7 +113,7 @@ async function requestOomnitzaJson(input) {
             throw error;
         }
         if (timeout.didTimeout() || isAbortLikeError(error)) {
-            throw new ProviderRequestError(504, `Oomnitza request timed out after ${Math.ceil(oomnitzaRequestTimeoutMs / 1000)} seconds`);
+            throw new ProviderRequestError(504, `Oomnitza request timed out after ${Math.ceil(defaultProviderRequestTimeoutMs / 1000)} seconds`);
         }
         const message = error instanceof Error && error.message.trim() ? error.message : "request failed";
         throw new ProviderRequestError(502, `Oomnitza request failed: ${message}`);

package/src/providers/otter_ai/executors.js

@@ -1,5 +1,5 @@
 import { compactObject, optionalBoolean, optionalInteger, optionalRecord, optionalString, requiredString, } from "../../core/cast.js";
-import { defineApiKeyProviderExecutors, defineProviderProxy, providerUserAgent, ProviderRequestError, } from "../provider-runtime.js";
+import { defineApiKeyProviderExecutors, defineProviderProxy, providerUserAgent, ProviderRequestError, providerInputError, } from "../provider-runtime.js";
 const service = "otter_ai";
 const otterAiApiBaseUrl = "https://api.otter.ai";
 const otterAiValidationPath = "/v1/workspace";
@@ -171,7 +171,7 @@ function otterAiError(status, message, phase) {
         return new ProviderRequestError(429, message);
     }
     if (phase === "validate" && (status === 401 || status === 403)) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     if (status === 400 || status === 404 || status === 422) {
         return new ProviderRequestError(status, message);

package/src/providers/oura/runtime.js

@@ -180,7 +180,7 @@ function mapOuraError(input) {
         return new ProviderRequestError(input.phase === "validate" ? 400 : 401, message);
     }
     if (input.status === 400 || input.status === 422 || (input.status === 404 && input.notFoundAsInvalidInput)) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     return new ProviderRequestError(input.status, message);
 }

package/src/providers/paddle/executors.js

@@ -1,5 +1,5 @@
 import { compactObject, optionalRecord, optionalString } from "../../core/cast.js";
-import { defineApiKeyProviderExecutors, defineProviderProxy, ProviderRequestError, providerUserAgent, } from "../provider-runtime.js";
+import { defineApiKeyProviderExecutors, defineProviderProxy, ProviderRequestError, providerUserAgent, providerInputError, } from "../provider-runtime.js";
 const service = "paddle";
 const paddleApiBaseUrl = "https://api.paddle.com";
 const paddleValidationPath = "/products";
@@ -203,13 +203,13 @@ function createPaddleError(response, payload, phase) {
         return new ProviderRequestError(429, message);
     }
     if (phase === "validate" && (response.status === 401 || response.status === 403)) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     if (phase === "execute" && (response.status === 401 || response.status === 403)) {
         return new ProviderRequestError(401, message);
     }
     if (phase === "execute" && [400, 404, 422].includes(response.status)) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     return new ProviderRequestError(response.status || 500, message);
 }

package/src/providers/pagerduty/runtime.js

@@ -1,5 +1,5 @@
 import { compactObject, optionalBoolean, optionalIntegerLike, optionalString, requiredString, } from "../../core/cast.js";
-import { ProviderRequestError, providerUserAgent } from "../provider-runtime.js";
+import { ProviderRequestError, providerUserAgent, providerInputError } from "../provider-runtime.js";
 export const pagerDutyApiBaseUrl = "https://api.pagerduty.com";
 const pagerDutyAcceptHeader = "application/vnd.pagerduty+json;version=2";
 export const pagerDutyActionHandlers = {
@@ -241,7 +241,7 @@ function mapPagerDutyError(response, payload, phase, notFoundAsInvalidInput) {
         return new ProviderRequestError(response.status, message);
     }
     if (response.status === 404 && notFoundAsInvalidInput) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     if (response.status === 429) {
         return new ProviderRequestError(429, message);

package/src/providers/paradym/runtime.js

@@ -1,5 +1,5 @@
 import { compactObject, looseArray, optionalRecord, optionalString, requiredString } from "../../core/cast.js";
-import { defineApiKeyProviderExecutors, ProviderRequestError, providerUserAgent } from "../provider-runtime.js";
+import { defineApiKeyProviderExecutors, ProviderRequestError, providerUserAgent, providerInputError, providerResponseError, } from "../provider-runtime.js";
 export const paradymApiBaseUrl = "https://api.paradym.id";
 export const paradymActionHandlers = {
     list_projects(input, context) {
@@ -277,15 +277,15 @@ function unwrapParadymData(payload) {
 function mapParadymError(status, payload, mode) {
     const message = readErrorMessage(payload) ?? `Paradym API request failed with status ${status}`;
     if (status === 401 || status === 403) {
-        return mode === "validate" ? new ProviderRequestError(400, message) : new ProviderRequestError(401, message);
+        return mode === "validate" ? providerInputError(message) : new ProviderRequestError(401, message);
     }
     if (status === 400 || status === 404 || status === 422) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     if (status === 429) {
         return new ProviderRequestError(429, message);
     }
-    return new ProviderRequestError(502, message);
+    return providerResponseError(message);
 }
 function readErrorMessage(payload) {
     const body = optionalRecord(payload);

package/src/providers/parallel/runtime.js

@@ -1,5 +1,5 @@
 import { compactObject, optionalString, requiredString } from "../../core/cast.js";
-import { defineApiKeyProviderExecutors, ProviderRequestError, providerUserAgent } from "../provider-runtime.js";
+import { defineApiKeyProviderExecutors, ProviderRequestError, providerUserAgent, providerInputError, providerResponseError, } from "../provider-runtime.js";
 export const parallelApiBaseUrl = "https://api.parallel.ai";
 export const parallelActionHandlers = {
     async search(input, context) {
@@ -174,7 +174,7 @@ function mapParallelHttpError(status, payload, phase) {
         return new ProviderRequestError(429, message);
     }
     if (phase === "validate" && status >= 400 && status < 500) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     if (status === 408) {
         return new ProviderRequestError(504, message);
@@ -182,7 +182,7 @@ function mapParallelHttpError(status, payload, phase) {
     if (status === 401 || status === 403 || status === 404 || status === 422) {
         return new ProviderRequestError(status === 404 ? 404 : 400, message);
     }
-    return new ProviderRequestError(502, message);
+    return providerResponseError(message);
 }
 function readParallelErrorMessage(payload) {
     const record = asRecord(payload);

package/src/providers/partner_stack_partner/runtime.js

@@ -193,7 +193,7 @@ function createPartnerStackTransportError(error) {
     const message = error instanceof Error && error.message.trim()
         ? `PartnerStack Partner request failed: ${error.message}`
         : "PartnerStack Partner request failed";
-    return new ProviderRequestError(502, message);
+    return providerResponseError(message);
 }
 function extractErrorMessage(payload) {
     if (typeof payload === "string") {

package/src/providers/payrexx/runtime.js

@@ -1,7 +1,6 @@
 import { compactObject, optionalBoolean, optionalInteger, optionalNumber, optionalString, requiredString, } from "../../core/cast.js";
-import { createProviderTimeout, ProviderRequestError, providerUserAgent } from "../provider-runtime.js";
+import { createProviderTimeout, ProviderRequestError, providerUserAgent, providerInputError, defaultProviderRequestTimeoutMs, } from "../provider-runtime.js";
 export const payrexxApiBaseUrl = "https://api.payrexx.com/v1.16";
-const requestTimeoutMs = 30_000;
 export const payrexxActionHandlers = {
     async list_payment_providers(input, fetcher) {
         const payload = await requestPayrexxJson({
@@ -88,7 +87,7 @@ export const payrexxActionHandlers = {
     },
 };
 export async function validatePayrexxCredential(input, fetcher) {
-    const apiKey = requiredString(input.apiKey, "apiKey", (message) => new ProviderRequestError(400, message));
+    const apiKey = requiredString(input.apiKey, "apiKey", providerInputError);
     const instance = requireInputString(input.instance, "instance");
     const payload = await requestPayrexxJson({
         path: "/PaymentProvider/",
@@ -134,7 +133,7 @@ async function requestPayrexxJson(input) {
         }
         headers.set("Content-Type", "application/x-www-form-urlencoded;charset=UTF-8");
     }
-    const timeout = createProviderTimeout(undefined, requestTimeoutMs);
+    const timeout = createProviderTimeout(undefined);
     try {
         const response = await input.fetcher(url, {
             method: input.method,
@@ -152,7 +151,7 @@ async function requestPayrexxJson(input) {
         if (error instanceof ProviderRequestError)
             throw error;
         if (timeout.didTimeout() && isAbortError(error)) {
-            throw new ProviderRequestError(502, `payrexx request timed out after ${Math.ceil(requestTimeoutMs / 1000)} seconds`);
+            throw new ProviderRequestError(502, `payrexx request timed out after ${Math.ceil(defaultProviderRequestTimeoutMs / 1000)} seconds`);
         }
         throw new ProviderRequestError(502, readErrorMessage(error));
     }
@@ -180,7 +179,7 @@ function normalizePayrexxError(response, payload, phase) {
         return new ProviderRequestError(429, message);
     }
     if (phase === "validate" && response.status < 500) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     if (response.status === 401 ||
         response.status === 403 ||

package/src/providers/permit_io/runtime.js

@@ -1,5 +1,5 @@
 import { optionalInteger, optionalString, recordOrEmpty } from "../../core/cast.js";
-import { createProviderTimeout, providerUserAgent, ProviderRequestError } from "../provider-runtime.js";
+import { createProviderTimeout, providerUserAgent, ProviderRequestError, providerInputError, } from "../provider-runtime.js";
 export const permitIoApiBaseUrl = "https://api.permit.io";
 export const permitIoActionHandlers = {
     list_users(input, context) {
@@ -160,7 +160,7 @@ function permitIoError(response, payload, phase) {
         return new ProviderRequestError(phase === "validate" ? 400 : response.status, message);
     }
     if (response.status === 404 || response.status === 422) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     if (response.status === 429) {
         return new ProviderRequestError(429, message);

package/src/providers/pinboard/executors.js

@@ -1,8 +1,7 @@
 import { compactObject, optionalRawString, optionalRecord, optionalString } from "../../core/cast.js";
-import { createProviderTimeout, defineApiKeyProviderExecutors, defineProviderProxy, isAbortLikeError, providerUserAgent, ProviderRequestError, requiredInputString, } from "../provider-runtime.js";
+import { createProviderTimeout, defineApiKeyProviderExecutors, defineProviderProxy, isAbortLikeError, providerUserAgent, ProviderRequestError, requiredInputString, providerInputError, defaultProviderRequestTimeoutMs, } from "../provider-runtime.js";
 const service = "pinboard";
 const pinboardApiBaseUrl = "https://api.pinboard.in/v1";
-const requestTimeoutMs = 30_000;
 const pinboardActionHandlers = {
     async get_last_update(_input, context) {
         const payload = await requestPinboardJson({ path: "/posts/update" }, context, "execute");
@@ -101,7 +100,7 @@ async function requestPinboardJson(input, context, phase) {
             url.searchParams.set(key, value);
         }
     }
-    const timeout = createProviderTimeout(context.signal, requestTimeoutMs);
+    const timeout = createProviderTimeout(context.signal);
     try {
         const response = await context.fetcher(url, {
             method: "GET",
@@ -122,7 +121,7 @@ async function requestPinboardJson(input, context, phase) {
             throw error;
         }
         if (timeout.didTimeout() || isAbortLikeError(error)) {
-            throw new ProviderRequestError(504, `Pinboard request timed out after ${requestTimeoutMs / 1000} seconds`);
+            throw new ProviderRequestError(504, `Pinboard request timed out after ${defaultProviderRequestTimeoutMs / 1000} seconds`);
         }
         throw new ProviderRequestError(502, error instanceof Error ? `Pinboard request failed: ${error.message}` : "Pinboard request failed", error);
     }
@@ -148,7 +147,7 @@ function createPinboardError(status, statusText, payload, phase) {
         return new ProviderRequestError(phase === "validate" ? 400 : status, message);
     }
     if (status === 400 || status === 404) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     return new ProviderRequestError(status || 502, message);
 }
@@ -212,7 +211,7 @@ function readResultOutput(payload) {
         throw new ProviderRequestError(502, "Pinboard result response is missing result code");
     }
     if (resultCode !== "done") {
-        throw new ProviderRequestError(400, resultCode);
+        throw providerInputError(resultCode);
     }
     return { resultCode };
 }

package/src/providers/pinpoint/runtime.js

@@ -1,5 +1,5 @@
 import { optionalInteger, optionalRecord, optionalString } from "../../core/cast.js";
-import { createProviderTimeout, ProviderRequestError, providerUserAgent } from "../provider-runtime.js";
+import { createProviderTimeout, ProviderRequestError, providerUserAgent, providerInputError, } from "../provider-runtime.js";
 export async function validatePinpointCredential(input, fetcher) {
     const apiKey = requireString(input.apiKey, "apiKey");
     const apiBaseUrl = normalizePinpointApiBaseUrl(input.subdomain);
@@ -152,7 +152,7 @@ function createPinpointError(status, payload, phase) {
     if (status === 429)
         return new ProviderRequestError(429, message);
     if (400 <= status && status < 500)
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     return new ProviderRequestError(status || 502, message);
 }
 function extractPinpointError(payload) {

package/src/providers/placid/runtime.js

@@ -1,6 +1,6 @@
 import { optionalInteger, optionalRecord, optionalString, requiredString } from "../../core/cast.js";
 import { compactObject } from "../../core/cast.js";
-import { providerUserAgent, ProviderRequestError } from "../provider-runtime.js";
+import { providerUserAgent, ProviderRequestError, providerInputError } from "../provider-runtime.js";
 export const placidApiBaseUrl = "https://api.placid.app";
 const templatesPath = "/api/rest/templates";
 const imagesPath = "/api/rest/images";
@@ -147,13 +147,13 @@ function createPlacidError(status, payload, phase) {
         optionalString(record?.detail) ??
         `placid request failed with status ${status}`;
     if (status === 401 && phase === "validate") {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     if (status === 401 && phase === "execute") {
         return new ProviderRequestError(401, message);
     }
     if (status === 400 || status === 404 || status === 422) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     return new ProviderRequestError(status === 429 ? 429 : status >= 500 ? 502 : status, message);
 }

package/src/providers/plain/runtime.js

@@ -1,5 +1,5 @@
 import { compactObject, optionalRecord, optionalString, requiredRecord, requiredString } from "../../core/cast.js";
-import { providerUserAgent, ProviderRequestError } from "../provider-runtime.js";
+import { providerUserAgent, ProviderRequestError, providerInputError, providerResponseError, } from "../provider-runtime.js";
 export const plainApiUrl = "https://core-api.uk.plain.com/graphql/v1";
 const customerSelection = `
   id
@@ -246,9 +246,9 @@ function createPlainGraphqlError(errors, phase) {
         code === "BAD_USER_INPUT" ||
         code === "GRAPHQL_VALIDATION_FAILED" ||
         code === "GRAPHQL_PARSE_FAILED") {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
-    return new ProviderRequestError(502, message);
+    return providerResponseError(message);
 }
 function mapPlainMutationError(error) {
     const message = readString(error.message, "plain mutation error message");
@@ -258,9 +258,9 @@ function mapPlainMutationError(error) {
         return new ProviderRequestError(401, message);
     }
     if (type === "INTERNAL" || code === "internal") {
-        return new ProviderRequestError(502, message);
+        return providerResponseError(message);
     }
-    return new ProviderRequestError(400, message);
+    return providerInputError(message);
 }
 function buildUpsertCustomerInput(input) {
     const identifier = requiredRecord(input.identifier, "identifier");

package/src/providers/planetscale/runtime.js

@@ -1,5 +1,5 @@
 import { optionalRecord, optionalString, compactObject } from "../../core/cast.js";
-import { ProviderRequestError, providerUserAgent } from "../provider-runtime.js";
+import { ProviderRequestError, providerUserAgent, providerInputError } from "../provider-runtime.js";
 export const planetScaleApiBaseUrl = "https://api.planetscale.com/v1/";
 function requireApiKey(input) {
     const value = optionalString(input.apiKey);
@@ -193,7 +193,7 @@ function createPlanetScaleError(status, payload) {
         return new ProviderRequestError(status, message);
     }
     if (status == 400 || status == 404 || status == 409 || status == 422) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     return new ProviderRequestError(status >= 500 ? status : 502, message);
 }

package/src/providers/planhat/executors.js

@@ -1,5 +1,5 @@
 import { compactObject, objectArray, optionalRawString, optionalRecord, optionalString, requiredString, } from "../../core/cast.js";
-import { createProviderTimeout, defineApiKeyProviderExecutors, defineProviderProxy, providerUserAgent, ProviderRequestError, readProviderTextBody, } from "../provider-runtime.js";
+import { createProviderTimeout, defineApiKeyProviderExecutors, defineProviderProxy, providerUserAgent, ProviderRequestError, readProviderTextBody, providerInputError, providerResponseError, } from "../provider-runtime.js";
 const service = "planhat";
 const apiBaseUrl = "https://api.planhat.com";
 const maxResponseBytes = 10 * 1024 * 1024;
@@ -241,17 +241,17 @@ function pickQuery(input, keys) {
 function readObject(value, message) {
     const record = optionalRecord(value);
     if (!record) {
-        throw new ProviderRequestError(502, message);
+        throw providerResponseError(message);
     }
     return record;
 }
 function readArray(value, message) {
-    return objectArray(value, message, () => new ProviderRequestError(502, message));
+    return objectArray(value, message, () => providerResponseError(message));
 }
 function requiredProviderString(value, message) {
     const text = optionalRawString(value);
     if (!text?.trim()) {
-        throw new ProviderRequestError(502, message);
+        throw providerResponseError(message);
     }
     return text;
 }
@@ -276,13 +276,13 @@ function createPlanhatError(status, statusText, payload, phase) {
         return new ProviderRequestError(429, message);
     }
     if (phase === "validate" && (status === 401 || status === 403)) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     if (phase === "execute" && (status === 401 || status === 403)) {
         return new ProviderRequestError(401, message);
     }
     if (status === 400 || status === 404 || status === 422) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     return new ProviderRequestError(status >= 500 || status < 400 ? 502 : status, message);
 }

package/src/providers/plausible_analytics/runtime.js

@@ -1,6 +1,6 @@
 import { compactObject, optionalRecord, optionalString, requiredString } from "../../core/cast.js";
 import { assertPublicHttpUrl } from "../../core/request.js";
-import { providerUserAgent, ProviderRequestError } from "../provider-runtime.js";
+import { providerUserAgent, ProviderRequestError, providerInputError } from "../provider-runtime.js";
 export const plausibleDefaultBaseUrl = "https://plausible.io";
 const statsPath = "/api/v2/query";
 const eventsPath = "/api/event";
@@ -127,7 +127,7 @@ function createPlausibleError(status, payload, phase, notFoundAsInvalidInput = f
         return new ProviderRequestError(429, message);
     }
     if ((status === 404 && notFoundAsInvalidInput) || status === 400 || status === 422) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     return new ProviderRequestError(status >= 500 ? 502 : status, message);
 }
@@ -159,7 +159,7 @@ export function normalizePlausibleBaseUrl(value) {
     }
     const url = assertPublicHttpUrl(value, {
         fieldName: "baseUrl",
-        createError: (message) => new ProviderRequestError(400, message),
+        createError: providerInputError,
     });
     if (url.protocol !== "https:") {
         throw new ProviderRequestError(400, "Base URL must use https");

package/src/providers/posthog/runtime.js

@@ -1,6 +1,6 @@
 import { compactObject, looseArray, optionalBoolean, optionalRawString, optionalString } from "../../core/cast.js";
 import { assertPublicHttpUrl } from "../../core/request.js";
-import { ProviderRequestError, providerUserAgent } from "../provider-runtime.js";
+import { ProviderRequestError, providerUserAgent, providerInputError } from "../provider-runtime.js";
 const posthogUserAgent = providerUserAgent;
 const posthogValidationPath = "/api/users/@me/";
 export const posthogActionHandlers = {
@@ -1313,7 +1313,7 @@ function mapPosthogError(input) {
         return new ProviderRequestError(429, message);
     }
     if (input.status === 404 && input.notFoundAsInvalidInput) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     if ([400, 409, 422].includes(input.status))
         return new ProviderRequestError(400, message, undefined, "invalid_input");
@@ -1326,7 +1326,7 @@ function normalizePosthogBaseUrl(value) {
     }
     const parsed = assertPublicHttpUrl(baseUrl, {
         fieldName: "Base URL",
-        createError: (message) => new ProviderRequestError(400, message),
+        createError: providerInputError,
     });
     if (parsed.protocol !== "https:") {
         throw new ProviderRequestError(400, "Base URL must use https");

package/src/providers/predis_ai/executors.js

@@ -1,5 +1,5 @@
 import { optionalInteger, optionalRawString, optionalRecord, optionalString } from "../../core/cast.js";
-import { createProviderTimeout, defineApiKeyProviderExecutors, defineProviderProxy, providerUserAgent, ProviderRequestError, readProviderTextBody, } from "../provider-runtime.js";
+import { createProviderTimeout, defineApiKeyProviderExecutors, defineProviderProxy, providerUserAgent, ProviderRequestError, readProviderTextBody, providerInputError, providerResponseError, } from "../provider-runtime.js";
 const service = "predis_ai";
 const apiBaseUrl = "https://brain.predis.ai/predis_api/v1";
 const createContentPath = "/create_content/";
@@ -218,9 +218,9 @@ function createPredisAiError(status, payload, phase) {
         return new ProviderRequestError(429, message);
     }
     if (status >= 400 && status < 500) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
-    return new ProviderRequestError(502, message);
+    return providerResponseError(message);
 }
 function readErrorMessage(payload) {
     const record = optionalRecord(payload);

package/src/providers/printavo/runtime.js

@@ -1,5 +1,5 @@
 import { compactObject, optionalBoolean, optionalNumber, optionalRawString, optionalRecord, optionalString, } from "../../core/cast.js";
-import { createProviderTimeout, isAbortLikeError, providerUserAgent, ProviderRequestError, } from "../provider-runtime.js";
+import { createProviderTimeout, isAbortLikeError, providerUserAgent, ProviderRequestError, providerInputError, } from "../provider-runtime.js";
 export const printavoApiBaseUrl = "https://www.printavo.com/api/v2";
 const identifyQuery = `
 query PrintavoIdentify {
@@ -369,7 +369,7 @@ async function readPrintavoPayload(response) {
 function createPrintavoError(status, payload, phase) {
     const message = extractPrintavoErrorMessage(payload) ?? `Printavo request failed with status ${status}`;
     if (phase === "validate" && status >= 400 && status < 500) {
-        return new ProviderRequestError(400, message);
+        return providerInputError(message);
     }
     return new ProviderRequestError(status || 500, message);
 }

package/src/providers/prospeo/runtime.js

@@ -1,7 +1,6 @@
 import { compactObject, optionalRecord, optionalString, requiredString } from "../../core/cast.js";
-import { defineApiKeyProviderExecutors, isAbortLikeError, ProviderRequestError, providerUserAgent, } from "../provider-runtime.js";
+import { defineApiKeyProviderExecutors, isAbortLikeError, ProviderRequestError, providerUserAgent, defaultProviderRequestTimeoutMs, } from "../provider-runtime.js";
 export const prospeoApiBaseUrl = "https://api.prospeo.io";
-const defaultRequestTimeoutMs = 30_000;
 export const prospeoActionHandlers = {
     async get_account_information(_input, context) {
         const payload = await requestProspeoJson({
@@ -104,7 +103,7 @@ export async function validateProspeoCredential(input, fetcher) {
 export const executors = defineApiKeyProviderExecutors("prospeo", prospeoActionHandlers);
 async function requestProspeoJson(input, context) {
     const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), defaultRequestTimeoutMs);
+    const timeout = setTimeout(() => controller.abort(), defaultProviderRequestTimeoutMs);
     try {
         const response = await context.fetcher(buildProspeoUrl(input.path), {
             method: input.method,

package/src/providers/provider-runtime.d.ts

@@ -1,5 +1,6 @@
 import type { ProviderErrorCode } from "../core/provider-error-codes.ts";
 import type { ProviderDispatchContext, ProviderHttpDispatchOptions } from "../core/provider-http-dispatch.ts";
+import type { ProviderNetworkPolicy } from "../core/provider-network-policy.ts";
 import type { ActionExecutor, ExecutionContext, ExecutionResult, ProviderExecutors, ProviderProxyExecutor, ProxyExecutionResult, ProxyResponse, ResolvedCredential, TransitFileWriter } from "../core/types.ts";
 import type { ProviderActionNames } from "./action-contracts.generated.ts";
 /**
@@ -7,9 +8,11 @@ import type { ProviderActionNames } from "./action-contracts.generated.ts";
  */
 export type ProviderFetch = typeof fetch;
 export interface ProviderFetchOptions {
+    /** Bind runtime policy; private targets still require the transport's allowPrivateNetwork opt-in. */
+    network?: ProviderNetworkPolicy;
     /** Base transport; defaults to the global fetch. A guarded fetch is unwrapped so guards never stack. */
     fetch?: ProviderFetch;
-    /** Allow private-network targets for this provider's egress (see `assertPublicHttpUrl`); default public-only. */
+    /** Opt into runtime private-network permission with isPrivateNetworkAccessAllowed; omitted keeps targets public-only. */
     allowPrivateNetwork?: () => boolean;
     /**
      * Skip the DNS resolved-address check (URL and redirect guards still apply).
@@ -310,6 +313,8 @@ export interface ProviderProxyDefinition {
     maxResponseBytes?: number;
 }
 export declare const defaultProviderJsonMaxResponseBytes: number;
+/** Shared request budget for native AbortSignal and SDK timeout APIs. */
+export declare const defaultProviderRequestTimeoutMs = 30000;
 export declare function createProviderProxyUrl(baseUrl: string, endpointInput: unknown, queryInput?: unknown, allowedOrigins?: readonly string[]): URL;
 export declare function normalizeProviderProxyEndpoint(endpointInput: unknown, allowedOrigins?: readonly string[]): string;
 export declare function normalizeProviderProxyQuery(queryInput: unknown): Record<string, string>;
@@ -444,6 +449,13 @@ export declare function uploadProviderUrlToTransitFile(input: {
  * Read a user-uploaded transit file reference from action input.
  */
 export declare function readTransitFileInput(input: unknown, context: Pick<ApiKeyProviderContext, "transitFiles">): Promise<ProviderInputFile>;
+/**
+ * The action error code a provider request failure reports: the provider's own
+ * code when it chose one, else one inferred from the upstream status. A
+ * provider that needs to react to the classification, such as retrying a rate
+ * limit, reads it here instead of re-deriving it from the status.
+ */
+export declare function providerRequestErrorCode(error: ProviderRequestError): ProviderErrorCode;
 /**
  * Map provider runtime failures to the standard action execution result.
  */