@predictorsdk/client 0.11.0 → 0.12.0

package/README.md

@@ -1,6 +1,6 @@
 # @predictorsdk/client
 
-The official TypeScript/JavaScript client for the [PredictorSDK](https://predictorsdk.com) matching markets API.
+The official TypeScript/JavaScript client for the [PredictorSDK](https://predictorsdk.com) prediction-market data API.
 
 ## Installation
 
@@ -15,9 +15,11 @@ import { PredictorSDKClient } from "@predictorsdk/client";
 
 const client = new PredictorSDKClient({ token: "your-api-key" });
 
-const { markets } = await client.getSportsMatchingMarkets({
-  kalshiEventTicker: "KXMLB-25-NYM-COL-2025-04-03",
-});
+const plans = await client.getPlans();
+const categories = await client.getCategories();
+const markets = await client.getMarkets({ limit: 10, category: "sports" });
+
+console.log(plans.data, categories.data, markets.data);
 ```
 
 ## Documentation

package/dist/BaseClient.d.ts

@@ -16,6 +16,11 @@ export type BaseClientOptions = {
     fetch?: typeof fetch;
     /** Configure logging for the client. */
     logging?: core.logging.LogConfig | core.logging.Logger;
+    /** Default options for SSE stream reconnection behavior. Has no effect on non-resumable endpoints. */
+    stream?: {
+        reconnectionEnabled?: boolean;
+        maxReconnectionAttempts?: number;
+    };
     /** Override auth. Pass false to disable, a function returning auth headers, an AuthProvider, or auth options. */
     auth?: AuthOption;
 } & BearerAuthProvider.AuthOptions;
@@ -28,8 +33,15 @@ export interface BaseRequestOptions {
     abortSignal?: AbortSignal;
     /** Additional query string parameters to include in the request. */
     queryParams?: Record<string, unknown>;
+    /** A dictionary containing additional parameters to spread into the request's body. */
+    additionalBodyParameters?: Record<string, unknown>;
     /** Additional headers to include in the request. */
     headers?: Record<string, string | core.Supplier<string | null | undefined> | null | undefined>;
+    /** Options for SSE stream reconnection behavior. Has no effect on non-resumable endpoints. */
+    stream?: {
+        reconnectionEnabled?: boolean;
+        maxReconnectionAttempts?: number;
+    };
 }
 export type NormalizedClientOptions<T extends BaseClientOptions = BaseClientOptions> = T & {
     logging: core.logging.Logger;

package/dist/Client.d.ts

@@ -16,6 +16,8 @@ export declare class PredictorSDKClient {
      * @param {PredictorSDKClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getPlans()
@@ -33,7 +35,10 @@ export declare class PredictorSDKClient {
      * @throws {@link PredictorSDK.PaymentRequiredError}
      * @throws {@link PredictorSDK.ForbiddenError}
      * @throws {@link PredictorSDK.TooManyRequestsError}
+     * @throws {@link PredictorSDK.BadGatewayError}
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getSportsMatchingMarkets()
@@ -51,7 +56,10 @@ export declare class PredictorSDKClient {
      * @throws {@link PredictorSDK.PaymentRequiredError}
      * @throws {@link PredictorSDK.ForbiddenError}
      * @throws {@link PredictorSDK.TooManyRequestsError}
+     * @throws {@link PredictorSDK.BadGatewayError}
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getMarkets()
@@ -67,6 +75,10 @@ export declare class PredictorSDKClient {
      * @throws {@link PredictorSDK.PaymentRequiredError}
      * @throws {@link PredictorSDK.ForbiddenError}
      * @throws {@link PredictorSDK.TooManyRequestsError}
+     * @throws {@link PredictorSDK.BadGatewayError}
+     * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getCategories()
@@ -91,6 +103,8 @@ export declare class PredictorSDKClient {
      * @throws {@link PredictorSDK.TooManyRequestsError}
      * @throws {@link PredictorSDK.BadGatewayError}
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getMarket({
@@ -112,6 +126,8 @@ export declare class PredictorSDKClient {
      * @throws {@link PredictorSDK.TooManyRequestsError}
      * @throws {@link PredictorSDK.BadGatewayError}
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getBinanceCryptoPrices({
@@ -138,6 +154,8 @@ export declare class PredictorSDKClient {
      * @throws {@link PredictorSDK.TooManyRequestsError}
      * @throws {@link PredictorSDK.BadGatewayError}
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getPolymarketWallet({
@@ -166,6 +184,8 @@ export declare class PredictorSDKClient {
      * @throws {@link PredictorSDK.TooManyRequestsError}
      * @throws {@link PredictorSDK.BadGatewayError}
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.listPolymarketWalletPositions({
@@ -194,6 +214,8 @@ export declare class PredictorSDKClient {
      * @throws {@link PredictorSDK.TooManyRequestsError}
      * @throws {@link PredictorSDK.BadGatewayError}
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getEvent({

package/dist/Client.js

@@ -18,6 +18,8 @@ export class PredictorSDKClient {
      * @param {PredictorSDKClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getPlans()
@@ -83,7 +85,10 @@ export class PredictorSDKClient {
      * @throws {@link PredictorSDK.PaymentRequiredError}
      * @throws {@link PredictorSDK.ForbiddenError}
      * @throws {@link PredictorSDK.TooManyRequestsError}
+     * @throws {@link PredictorSDK.BadGatewayError}
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getSportsMatchingMarkets()
@@ -177,6 +182,14 @@ export class PredictorSDKClient {
                         skipValidation: true,
                         breadcrumbsPrefix: ["response"],
                     }), _response.rawResponse);
+                case 502:
+                    throw new PredictorSDK.BadGatewayError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                        unrecognizedObjectKeys: "passthrough",
+                        allowUnrecognizedUnionMembers: true,
+                        allowUnrecognizedEnumValues: true,
+                        skipValidation: true,
+                        breadcrumbsPrefix: ["response"],
+                    }), _response.rawResponse);
                 case 503:
                     throw new PredictorSDK.ServiceUnavailableError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
                         unrecognizedObjectKeys: "passthrough",
@@ -206,7 +219,10 @@ export class PredictorSDKClient {
      * @throws {@link PredictorSDK.PaymentRequiredError}
      * @throws {@link PredictorSDK.ForbiddenError}
      * @throws {@link PredictorSDK.TooManyRequestsError}
+     * @throws {@link PredictorSDK.BadGatewayError}
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getMarkets()
@@ -299,6 +315,14 @@ export class PredictorSDKClient {
                         skipValidation: true,
                         breadcrumbsPrefix: ["response"],
                     }), _response.rawResponse);
+                case 502:
+                    throw new PredictorSDK.BadGatewayError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                        unrecognizedObjectKeys: "passthrough",
+                        allowUnrecognizedUnionMembers: true,
+                        allowUnrecognizedEnumValues: true,
+                        skipValidation: true,
+                        breadcrumbsPrefix: ["response"],
+                    }), _response.rawResponse);
                 case 503:
                     throw new PredictorSDK.ServiceUnavailableError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
                         unrecognizedObjectKeys: "passthrough",
@@ -326,6 +350,10 @@ export class PredictorSDKClient {
      * @throws {@link PredictorSDK.PaymentRequiredError}
      * @throws {@link PredictorSDK.ForbiddenError}
      * @throws {@link PredictorSDK.TooManyRequestsError}
+     * @throws {@link PredictorSDK.BadGatewayError}
+     * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getCategories()
@@ -395,6 +423,22 @@ export class PredictorSDKClient {
                         skipValidation: true,
                         breadcrumbsPrefix: ["response"],
                     }), _response.rawResponse);
+                case 502:
+                    throw new PredictorSDK.BadGatewayError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                        unrecognizedObjectKeys: "passthrough",
+                        allowUnrecognizedUnionMembers: true,
+                        allowUnrecognizedEnumValues: true,
+                        skipValidation: true,
+                        breadcrumbsPrefix: ["response"],
+                    }), _response.rawResponse);
+                case 503:
+                    throw new PredictorSDK.ServiceUnavailableError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                        unrecognizedObjectKeys: "passthrough",
+                        allowUnrecognizedUnionMembers: true,
+                        allowUnrecognizedEnumValues: true,
+                        skipValidation: true,
+                        breadcrumbsPrefix: ["response"],
+                    }), _response.rawResponse);
                 default:
                     throw new errors.PredictorSDKError({
                         statusCode: _response.error.statusCode,
@@ -423,6 +467,8 @@ export class PredictorSDKClient {
      * @throws {@link PredictorSDK.TooManyRequestsError}
      * @throws {@link PredictorSDK.BadGatewayError}
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getMarket({
@@ -562,6 +608,8 @@ export class PredictorSDKClient {
      * @throws {@link PredictorSDK.TooManyRequestsError}
      * @throws {@link PredictorSDK.BadGatewayError}
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getBinanceCryptoPrices({
@@ -697,6 +745,8 @@ export class PredictorSDKClient {
      * @throws {@link PredictorSDK.TooManyRequestsError}
      * @throws {@link PredictorSDK.BadGatewayError}
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getPolymarketWallet({
@@ -839,6 +889,8 @@ export class PredictorSDKClient {
      * @throws {@link PredictorSDK.TooManyRequestsError}
      * @throws {@link PredictorSDK.BadGatewayError}
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.listPolymarketWalletPositions({
@@ -983,6 +1035,8 @@ export class PredictorSDKClient {
      * @throws {@link PredictorSDK.TooManyRequestsError}
      * @throws {@link PredictorSDK.BadGatewayError}
      * @throws {@link PredictorSDK.ServiceUnavailableError}
+     * @throws {@link errors.PredictorSDKError}
+     * @throws {@link errors.PredictorSDKTimeoutError}
      *
      * @example
      *     await client.getEvent({

package/dist/api/client/requests/GetMarketsRequest.d.ts

@@ -6,7 +6,7 @@ import type * as PredictorSDK from "../../index.js";
 export interface GetMarketsRequest {
     /** Maximum number of markets to return per page. Range 1–100, default 25. */
     limit?: number;
-    /** Opaque cursor from a previous response's `pagination.nextCursor` in the SDKs (raw JSON: `pagination.next_cursor`). */
+    /** Opaque cursor from a previous response's `pagination.nextCursor` in the SDKs (raw JSON: `pagination.next_cursor`). Market cursors stay bound to the immutable catalog snapshot that issued them. Replaced snapshots normally remain available for up to 24 hours, but storage pressure can evict a retained snapshot sooner; retry from the first page after a stale-cursor `400`. */
     cursor?: string;
     /** Canonical top-level category filter. This is PredictorSDK's normalized category, not a provider-native tag. Cursors are bound to the category filter used to create them. */
     category?: PredictorSDK.MarketCategory;

package/dist/api/errors/BadGatewayError.js

@@ -12,6 +12,6 @@ export class BadGatewayError extends errors.PredictorSDKError {
         if (Error.captureStackTrace) {
             Error.captureStackTrace(this, this.constructor);
         }
-        this.name = this.constructor.name;
+        this.name = "BadGatewayError";
     }
 }

package/dist/api/errors/BadRequestError.js

@@ -12,6 +12,6 @@ export class BadRequestError extends errors.PredictorSDKError {
         if (Error.captureStackTrace) {
             Error.captureStackTrace(this, this.constructor);
         }
-        this.name = this.constructor.name;
+        this.name = "BadRequestError";
     }
 }

package/dist/api/errors/ForbiddenError.js

@@ -12,6 +12,6 @@ export class ForbiddenError extends errors.PredictorSDKError {
         if (Error.captureStackTrace) {
             Error.captureStackTrace(this, this.constructor);
         }
-        this.name = this.constructor.name;
+        this.name = "ForbiddenError";
     }
 }

package/dist/api/errors/NotFoundError.js

@@ -12,6 +12,6 @@ export class NotFoundError extends errors.PredictorSDKError {
         if (Error.captureStackTrace) {
             Error.captureStackTrace(this, this.constructor);
         }
-        this.name = this.constructor.name;
+        this.name = "NotFoundError";
     }
 }

package/dist/api/errors/PaymentRequiredError.js

@@ -12,6 +12,6 @@ export class PaymentRequiredError extends errors.PredictorSDKError {
         if (Error.captureStackTrace) {
             Error.captureStackTrace(this, this.constructor);
         }
-        this.name = this.constructor.name;
+        this.name = "PaymentRequiredError";
     }
 }

package/dist/api/errors/ServiceUnavailableError.js

@@ -12,6 +12,6 @@ export class ServiceUnavailableError extends errors.PredictorSDKError {
         if (Error.captureStackTrace) {
             Error.captureStackTrace(this, this.constructor);
         }
-        this.name = this.constructor.name;
+        this.name = "ServiceUnavailableError";
     }
 }

package/dist/api/errors/TooManyRequestsError.js

@@ -12,6 +12,6 @@ export class TooManyRequestsError extends errors.PredictorSDKError {
         if (Error.captureStackTrace) {
             Error.captureStackTrace(this, this.constructor);
         }
-        this.name = this.constructor.name;
+        this.name = "TooManyRequestsError";
     }
 }

package/dist/api/errors/UnauthorizedError.js

@@ -12,6 +12,6 @@ export class UnauthorizedError extends errors.PredictorSDKError {
         if (Error.captureStackTrace) {
             Error.captureStackTrace(this, this.constructor);
         }
-        this.name = this.constructor.name;
+        this.name = "UnauthorizedError";
     }
 }

package/dist/api/types/PaymentRequiredErrorAction.d.ts

@@ -1,4 +1,4 @@
-/** Recommended client action for this 402. */
+/** Recommended client action for an HTTP 402 response. */
 export declare const PaymentRequiredErrorAction: {
     readonly UpgradePlan: "upgrade_plan";
     readonly ResolvePayment: "resolve_payment";

package/dist/api/types/PaymentRequiredErrorAction.js

@@ -1,5 +1,5 @@
 // This file was auto-generated by Fern from our API Definition.
-/** Recommended client action for this 402. */
+/** Recommended client action for an HTTP 402 response. */
 export const PaymentRequiredErrorAction = {
     UpgradePlan: "upgrade_plan",
     ResolvePayment: "resolve_payment",

package/dist/api/types/PaymentRequiredErrorBody.d.ts

@@ -7,7 +7,6 @@ export interface PaymentRequiredErrorBody {
     /** Additional detail about the error. */
     message?: string;
     statusCode: number;
-    /** Recommended client action for this 402. */
     action: PredictorSDK.PaymentRequiredErrorAction;
     /** Billing tier that would satisfy the gate (e.g. `starter`, `pro`, `business`, `enterprise`). */
     requiredTier: string;

package/dist/core/fetcher/Fetcher.js

@@ -9,6 +9,7 @@ import { getResponseBody } from "./getResponseBody.js";
 import { Headers } from "./Headers.js";
 import { makeRequest } from "./makeRequest.js";
 import { abortRawResponse, toRawResponse, unknownRawResponse } from "./RawResponse.js";
+import { redactUrl, SENSITIVE_QUERY_PARAMS } from "./redactUrl.js";
 import { requestWithRetries } from "./requestWithRetries.js";
 const SENSITIVE_HEADERS = new Set([
     "authorization",
@@ -40,26 +41,6 @@ function redactHeaders(headers) {
     }
     return filtered;
 }
-const SENSITIVE_QUERY_PARAMS = new Set([
-    "api_key",
-    "api-key",
-    "apikey",
-    "token",
-    "access_token",
-    "access-token",
-    "auth_token",
-    "auth-token",
-    "password",
-    "passwd",
-    "secret",
-    "api_secret",
-    "api-secret",
-    "apisecret",
-    "key",
-    "session",
-    "session_id",
-    "session-id",
-]);
 function redactQueryParameters(queryParameters) {
     if (queryParameters == null) {
         return undefined;
@@ -70,70 +51,6 @@ function redactQueryParameters(queryParameters) {
     }
     return redacted;
 }
-function redactUrl(url) {
-    const protocolIndex = url.indexOf("://");
-    if (protocolIndex === -1)
-        return url;
-    const afterProtocol = protocolIndex + 3;
-    // Find the first delimiter that marks the end of the authority section
-    const pathStart = url.indexOf("/", afterProtocol);
-    let queryStart = url.indexOf("?", afterProtocol);
-    let fragmentStart = url.indexOf("#", afterProtocol);
-    const firstDelimiter = Math.min(pathStart === -1 ? url.length : pathStart, queryStart === -1 ? url.length : queryStart, fragmentStart === -1 ? url.length : fragmentStart);
-    // Find the LAST @ before the delimiter (handles multiple @ in credentials)
-    let atIndex = -1;
-    for (let i = afterProtocol; i < firstDelimiter; i++) {
-        if (url[i] === "@") {
-            atIndex = i;
-        }
-    }
-    if (atIndex !== -1) {
-        url = `${url.slice(0, afterProtocol)}[REDACTED]@${url.slice(atIndex + 1)}`;
-    }
-    // Recalculate queryStart since url might have changed
-    queryStart = url.indexOf("?");
-    if (queryStart === -1)
-        return url;
-    fragmentStart = url.indexOf("#", queryStart);
-    const queryEnd = fragmentStart !== -1 ? fragmentStart : url.length;
-    const queryString = url.slice(queryStart + 1, queryEnd);
-    if (queryString.length === 0)
-        return url;
-    // FAST PATH: Quick check if any sensitive keywords present
-    // Using indexOf is faster than regex for simple substring matching
-    const lower = queryString.toLowerCase();
-    const hasSensitive = lower.includes("token") ||
-        lower.includes("key") ||
-        lower.includes("password") ||
-        lower.includes("passwd") ||
-        lower.includes("secret") ||
-        lower.includes("session") ||
-        lower.includes("auth");
-    if (!hasSensitive) {
-        return url;
-    }
-    // SLOW PATH: Parse and redact
-    const redactedParams = [];
-    const params = queryString.split("&");
-    for (const param of params) {
-        const equalIndex = param.indexOf("=");
-        if (equalIndex === -1) {
-            redactedParams.push(param);
-            continue;
-        }
-        const key = param.slice(0, equalIndex);
-        let shouldRedact = SENSITIVE_QUERY_PARAMS.has(key.toLowerCase());
-        if (!shouldRedact && key.includes("%")) {
-            try {
-                const decodedKey = decodeURIComponent(key);
-                shouldRedact = SENSITIVE_QUERY_PARAMS.has(decodedKey.toLowerCase());
-            }
-            catch { }
-        }
-        redactedParams.push(shouldRedact ? `${key}=[REDACTED]` : param);
-    }
-    return url.slice(0, queryStart + 1) + redactedParams.join("&") + url.slice(queryEnd);
-}
 async function getHeaders(args) {
     const newHeaders = new Headers();
     newHeaders.set("Accept", args.responseType === "json"

package/dist/core/fetcher/getResponseBody.js

@@ -1,5 +1,14 @@
 import { fromJson } from "../json.js";
 import { getBinaryResponse } from "./BinaryResponse.js";
+// Pins the upstream Response so undici's FinalizationRegistry can't GC it and cancel the body stream.
+function retainResponse(target, response) {
+    Object.defineProperty(target, "__fern_response_ref", {
+        value: response,
+        enumerable: false,
+        configurable: true,
+        writable: false,
+    });
+}
 export async function getResponseBody(response, responseType) {
     switch (responseType) {
         case "binary-response":
@@ -18,6 +27,7 @@ export async function getResponseBody(response, responseType) {
                     },
                 };
             }
+            retainResponse(response.body, response);
             return response.body;
         case "streaming":
             if (response.body == null) {
@@ -29,6 +39,7 @@ export async function getResponseBody(response, responseType) {
                     },
                 };
             }
+            retainResponse(response.body, response);
             return response.body;
         case "text":
             return await response.text();

package/dist/core/fetcher/makePassthroughRequest.js

@@ -3,6 +3,7 @@ import { join } from "../url/join.js";
 import { EndpointSupplier } from "./EndpointSupplier.js";
 import { getFetchFn } from "./getFetchFn.js";
 import { makeRequest } from "./makeRequest.js";
+import { redactUrl } from "./redactUrl.js";
 import { requestWithRetries } from "./requestWithRetries.js";
 import { Supplier } from "./Supplier.js";
 /**
@@ -66,8 +67,10 @@ export async function makePassthroughRequest(input, init, clientOptions, request
             }
         }
     }
-    // Apply auth headers
-    if (clientOptions.getAuthHeaders != null) {
+    // Apply auth headers, but only when the resolved URL targets the configured base URL.
+    // This prevents the SDK's credentials from leaking to an unrelated host when a caller
+    // passes an absolute cross-origin URL into the passthrough fetch escape hatch.
+    if (clientOptions.getAuthHeaders != null && targetsBaseUrl(fullUrl, baseUrl)) {
         const authHeaders = await clientOptions.getAuthHeaders();
         for (const [key, value] of Object.entries(authHeaders)) {
             mergedHeaders[key.toLowerCase()] = value;
@@ -102,7 +105,7 @@ export async function makePassthroughRequest(input, init, clientOptions, request
     if (logger.isDebug()) {
         logger.debug("Making passthrough HTTP request", {
             method,
-            url: fullUrl,
+            url: redactUrl(fullUrl),
             hasBody: body != null,
         });
     }
@@ -111,9 +114,28 @@ export async function makePassthroughRequest(input, init, clientOptions, request
     if (logger.isDebug()) {
         logger.debug("Passthrough HTTP request completed", {
             method,
-            url: fullUrl,
+            url: redactUrl(fullUrl),
             statusCode: response.status,
         });
     }
     return response;
 }
+/**
+ * Returns true when the resolved request URL points at the same origin as the
+ * configured base URL. Relative paths are always joined onto the base URL, so
+ * they resolve to the base origin and return true. Absolute URLs only match when
+ * their origin equals the base origin. When there is no base URL to compare
+ * against, or either value is not a parseable absolute URL, this returns false so
+ * auth headers are not attached.
+ */
+function targetsBaseUrl(fullUrl, baseUrl) {
+    if (baseUrl == null) {
+        return false;
+    }
+    try {
+        return new URL(fullUrl).origin === new URL(baseUrl).origin;
+    }
+    catch {
+        return false;
+    }
+}

package/dist/core/fetcher/redactUrl.d.ts

@@ -0,0 +1,2 @@
+export declare const SENSITIVE_QUERY_PARAMS: Set<string>;
+export declare function redactUrl(url: string): string;

package/dist/core/fetcher/redactUrl.js

@@ -0,0 +1,84 @@
+export const SENSITIVE_QUERY_PARAMS = new Set([
+    "api_key",
+    "api-key",
+    "apikey",
+    "token",
+    "access_token",
+    "access-token",
+    "auth_token",
+    "auth-token",
+    "password",
+    "passwd",
+    "secret",
+    "api_secret",
+    "api-secret",
+    "apisecret",
+    "key",
+    "session",
+    "session_id",
+    "session-id",
+]);
+export function redactUrl(url) {
+    const protocolIndex = url.indexOf("://");
+    if (protocolIndex === -1)
+        return url;
+    const afterProtocol = protocolIndex + 3;
+    // Find the first delimiter that marks the end of the authority section
+    const pathStart = url.indexOf("/", afterProtocol);
+    let queryStart = url.indexOf("?", afterProtocol);
+    let fragmentStart = url.indexOf("#", afterProtocol);
+    const firstDelimiter = Math.min(pathStart === -1 ? url.length : pathStart, queryStart === -1 ? url.length : queryStart, fragmentStart === -1 ? url.length : fragmentStart);
+    // Find the LAST @ before the delimiter (handles multiple @ in credentials)
+    let atIndex = -1;
+    for (let i = afterProtocol; i < firstDelimiter; i++) {
+        if (url[i] === "@") {
+            atIndex = i;
+        }
+    }
+    if (atIndex !== -1) {
+        url = `${url.slice(0, afterProtocol)}[REDACTED]@${url.slice(atIndex + 1)}`;
+    }
+    // Recalculate queryStart since url might have changed
+    queryStart = url.indexOf("?");
+    if (queryStart === -1)
+        return url;
+    fragmentStart = url.indexOf("#", queryStart);
+    const queryEnd = fragmentStart !== -1 ? fragmentStart : url.length;
+    const queryString = url.slice(queryStart + 1, queryEnd);
+    if (queryString.length === 0)
+        return url;
+    // FAST PATH: Quick check if any sensitive keywords present
+    // Using indexOf is faster than regex for simple substring matching
+    const lower = queryString.toLowerCase();
+    const hasSensitive = lower.includes("token") ||
+        lower.includes("key") ||
+        lower.includes("password") ||
+        lower.includes("passwd") ||
+        lower.includes("secret") ||
+        lower.includes("session") ||
+        lower.includes("auth");
+    if (!hasSensitive) {
+        return url;
+    }
+    // SLOW PATH: Parse and redact
+    const redactedParams = [];
+    const params = queryString.split("&");
+    for (const param of params) {
+        const equalIndex = param.indexOf("=");
+        if (equalIndex === -1) {
+            redactedParams.push(param);
+            continue;
+        }
+        const key = param.slice(0, equalIndex);
+        let shouldRedact = SENSITIVE_QUERY_PARAMS.has(key.toLowerCase());
+        if (!shouldRedact && key.includes("%")) {
+            try {
+                const decodedKey = decodeURIComponent(key);
+                shouldRedact = SENSITIVE_QUERY_PARAMS.has(decodedKey.toLowerCase());
+            }
+            catch { }
+        }
+        redactedParams.push(shouldRedact ? `${key}=[REDACTED]` : param);
+    }
+    return url.slice(0, queryStart + 1) + redactedParams.join("&") + url.slice(queryEnd);
+}

package/dist/core/fetcher/requestWithRetries.js

@@ -35,11 +35,11 @@ export function getRetryDelayFromHeaders(response, retryAttempt) {
             const resetTimeMilliseconds = resetTime >= 1_000_000_000_000 ? resetTime : resetTime * 1000;
             const delay = resetTimeMilliseconds - Date.now();
             if (delay > 0) {
-                return addPositiveJitter(Math.min(delay, MAX_RETRY_DELAY));
+                return Math.min(addPositiveJitter(Math.min(delay, MAX_RETRY_DELAY)), MAX_RETRY_DELAY);
             }
         }
     }
-    return addSymmetricJitter(Math.min(INITIAL_RETRY_DELAY * 2 ** retryAttempt, MAX_RETRY_DELAY));
+    return Math.min(addSymmetricJitter(Math.min(INITIAL_RETRY_DELAY * 2 ** retryAttempt, MAX_RETRY_DELAY)), MAX_RETRY_DELAY);
 }
 export async function requestWithRetries(requestFn, maxRetries = DEFAULT_MAX_RETRIES) {
     let response = await requestFn();

package/dist/core/fetcher/signals.js

@@ -10,11 +10,19 @@ export function anySignal(...args) {
     for (const signal of signals) {
         if (signal.aborted) {
             controller.abort(signal?.reason);
-            break;
+            return controller.signal;
         }
         signal.addEventListener("abort", () => controller.abort(signal?.reason), {
             signal: controller.signal,
         });
+        // Re-check after adding listener: the signal may have aborted
+        // between the initial `signal.aborted` check and the `addEventListener`
+        // call above. If it did, the abort event was already dispatched and
+        // the listener will never fire — we must manually abort.
+        if (signal.aborted) {
+            controller.abort(signal?.reason);
+            return controller.signal;
+        }
     }
     return controller.signal;
 }

package/dist/core/requestBody.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Spreads caller-supplied `additionalBodyParameters` (from `requestOptions.additionalBodyParameters`)
+ * on top of the request body. Caller-supplied properties win over the endpoint body. When no
+ * additional body parameters are provided, the original body is returned unchanged so serialization
+ * is unaffected.
+ *
+ * The merge only applies to plain-object (JSON object) bodies. When the body is `null`/`undefined`
+ * the additional parameters become the body; when the body is an array or a primitive JSON value it
+ * is returned unchanged, since object properties cannot be spread into it. This mirrors the Python
+ * SDK, which only merges additional body parameters into mapping bodies.
+ */
+export declare function mergeAdditionalBodyParameters(body: unknown, additionalBodyParameters: Record<string, unknown> | undefined): unknown;

package/dist/core/requestBody.js

@@ -0,0 +1,23 @@
+/**
+ * Spreads caller-supplied `additionalBodyParameters` (from `requestOptions.additionalBodyParameters`)
+ * on top of the request body. Caller-supplied properties win over the endpoint body. When no
+ * additional body parameters are provided, the original body is returned unchanged so serialization
+ * is unaffected.
+ *
+ * The merge only applies to plain-object (JSON object) bodies. When the body is `null`/`undefined`
+ * the additional parameters become the body; when the body is an array or a primitive JSON value it
+ * is returned unchanged, since object properties cannot be spread into it. This mirrors the Python
+ * SDK, which only merges additional body parameters into mapping bodies.
+ */
+export function mergeAdditionalBodyParameters(body, additionalBodyParameters) {
+    if (additionalBodyParameters == null) {
+        return body;
+    }
+    if (body == null) {
+        return { ...additionalBodyParameters };
+    }
+    if (typeof body === "object" && !Array.isArray(body)) {
+        return { ...body, ...additionalBodyParameters };
+    }
+    return body;
+}

package/dist/core/runtime/index.d.ts

@@ -1 +1 @@
-export { RUNTIME } from "./runtime.js";
+export { getUserAgent, RUNTIME } from "./runtime.js";

package/dist/core/runtime/index.js

@@ -1 +1 @@
-export { RUNTIME } from "./runtime.js";
+export { getUserAgent, RUNTIME } from "./runtime.js";

package/dist/core/runtime/runtime.d.ts

@@ -6,4 +6,23 @@ export interface Runtime {
     type: "browser" | "web-worker" | "deno" | "bun" | "node" | "react-native" | "unknown" | "workerd" | "edge-runtime";
     version?: string;
     parsedVersion?: number;
+    /**
+     * The operating system the SDK is running on, when it can be determined
+     * (e.g. "linux", "darwin", "win32" on server runtimes). Undefined in
+     * environments where the OS is not observable (e.g. browsers).
+     */
+    os?: string;
+    /**
+     * The CPU architecture the SDK is running on, when it can be determined
+     * (e.g. "x64", "arm64" on server runtimes). Undefined in environments where
+     * the architecture is not observable (e.g. browsers).
+     */
+    arch?: string;
 }
+/**
+ * Builds a structured User-Agent string of the form
+ *   `{sdkName}/{sdkVersion} ({os}; {arch}) {runtime}/{runtimeVersion}`
+ * where the platform group and runtime segment are omitted gracefully when the
+ * underlying values cannot be determined (e.g. in a browser).
+ */
+export declare function getUserAgent(sdkName: string, sdkVersion: string): string;

package/dist/core/runtime/runtime.js

@@ -55,6 +55,8 @@ function evaluateRuntime() {
         return {
             type: "deno",
             version: Deno.version.deno,
+            os: Deno.build?.os,
+            arch: Deno.build?.arch,
         };
     }
     /**
@@ -65,6 +67,8 @@ function evaluateRuntime() {
         return {
             type: "bun",
             version: Bun.version,
+            os: typeof process !== "undefined" ? process.platform : undefined,
+            arch: typeof process !== "undefined" ? process.arch : undefined,
         };
     }
     /**
@@ -92,9 +96,76 @@ function evaluateRuntime() {
             type: "node",
             version: _process.versions.node,
             parsedVersion: Number(_process.versions.node.split(".")[0]),
+            os: _process.platform,
+            arch: _process.arch,
         };
     }
     return {
         type: "unknown",
     };
 }
+/**
+ * Display names for the language runtimes whose version is meaningful to encode
+ * in a User-Agent. Environments where a version string is not useful (e.g.
+ * browsers, where `version` is the full navigator UA) are intentionally mapped
+ * to `undefined` so they are omitted from the User-Agent.
+ */
+const RUNTIME_DISPLAY_NAMES = {
+    node: "Node",
+    deno: "Deno",
+    bun: "Bun",
+    browser: undefined,
+    "web-worker": undefined,
+    "react-native": undefined,
+    workerd: undefined,
+    "edge-runtime": undefined,
+    unknown: undefined,
+};
+/**
+ * CPU architecture aliases that all refer to 64-bit x86. They are normalized to
+ * the single canonical token `x86_64` so the User-Agent architecture label is
+ * consistent regardless of which runtime reports it (Node reports `x64`, others
+ * report `amd64` or `x86_64`).
+ */
+const X86_64_ARCH_ALIASES = new Set(["x64", "amd64", "x86_64"]);
+/**
+ * Normalizes a CPU architecture token, collapsing the 64-bit x86 aliases
+ * (`x64`, `amd64`, `x86_64`) to `x86_64`. Other architectures are returned
+ * unchanged.
+ */
+function normalizeArch(arch) {
+    if (arch == null) {
+        return arch;
+    }
+    return X86_64_ARCH_ALIASES.has(arch.toLowerCase()) ? "x86_64" : arch;
+}
+/**
+ * Percent-encodes the `@` and `/` characters in an npm package name so the
+ * User-Agent product token stays within the RFC 7230 token grammar. The
+ * original scoped package name can be recovered by URL-decoding (e.g.
+ * `@dummy/sdk` becomes `%40dummy%2Fsdk`).
+ */
+function encodeProductName(sdkName) {
+    return sdkName.replace(/@/g, "%40").replace(/\//g, "%2F");
+}
+/**
+ * Builds a structured User-Agent string of the form
+ *   `{sdkName}/{sdkVersion} ({os}; {arch}) {runtime}/{runtimeVersion}`
+ * where the platform group and runtime segment are omitted gracefully when the
+ * underlying values cannot be determined (e.g. in a browser).
+ */
+export function getUserAgent(sdkName, sdkVersion) {
+    let userAgent = `${encodeProductName(sdkName)}/${sdkVersion}`;
+    const platform = [RUNTIME.os, normalizeArch(RUNTIME.arch)].filter((part) => part != null && part.length > 0);
+    if (platform.length > 0) {
+        userAgent += ` (${platform.join("; ")})`;
+    }
+    const runtimeName = RUNTIME_DISPLAY_NAMES[RUNTIME.type];
+    if (runtimeName != null) {
+        userAgent += ` ${runtimeName}`;
+        if (RUNTIME.version != null && RUNTIME.version.length > 0) {
+            userAgent += `/${RUNTIME.version}`;
+        }
+    }
+    return userAgent;
+}

package/dist/core/schemas/builders/schema-utils/JsonError.js

@@ -4,7 +4,7 @@ export class JsonError extends Error {
     constructor(errors) {
         super(errors.map(stringifyValidationError).join("; "));
         this.errors = errors;
-        Object.setPrototypeOf(this, new.target.prototype);
-        this.name = this.constructor.name;
+        Object.setPrototypeOf(this, JsonError.prototype);
+        this.name = "JsonError";
     }
 }

package/dist/core/schemas/builders/schema-utils/ParseError.js

@@ -4,7 +4,7 @@ export class ParseError extends Error {
     constructor(errors) {
         super(errors.map(stringifyValidationError).join("; "));
         this.errors = errors;
-        Object.setPrototypeOf(this, new.target.prototype);
-        this.name = this.constructor.name;
+        Object.setPrototypeOf(this, ParseError.prototype);
+        this.name = "ParseError";
     }
 }

package/dist/core/url/qs.js

@@ -16,7 +16,7 @@ function stringifyObject(obj, prefix = "", options) {
     const parts = [];
     for (const [key, value] of Object.entries(obj)) {
         const fullKey = prefix ? `${prefix}[${key}]` : key;
-        if (value === undefined) {
+        if (value == null) {
             continue;
         }
         if (Array.isArray(value)) {
@@ -36,7 +36,7 @@ function stringifyObject(obj, prefix = "", options) {
             else {
                 for (let i = 0; i < value.length; i++) {
                     const item = value[i];
-                    if (item === undefined) {
+                    if (item == null) {
                         continue;
                     }
                     if (typeof item === "object" && !Array.isArray(item) && item !== null) {

package/dist/errors/PredictorSDKError.d.ts

@@ -11,4 +11,5 @@ export declare class PredictorSDKError extends Error {
         rawResponse?: core.RawResponse;
         cause?: unknown;
     });
+    get requestId(): string | undefined;
 }

package/dist/errors/PredictorSDKError.js

@@ -11,7 +11,7 @@ export class PredictorSDKError extends Error {
         if (Error.captureStackTrace) {
             Error.captureStackTrace(this, this.constructor);
         }
-        this.name = this.constructor.name;
+        this.name = "PredictorSDKError";
         this.statusCode = statusCode;
         this.body = body;
         this.rawResponse = rawResponse;
@@ -19,6 +19,9 @@ export class PredictorSDKError extends Error {
             this.cause = cause;
         }
     }
+    get requestId() {
+        return this.rawResponse?.headers?.get("x-request-id") ?? undefined;
+    }
 }
 function buildMessage({ message, statusCode, body, }) {
     const lines = [];

package/dist/errors/PredictorSDKTimeoutError.d.ts

@@ -1,5 +1,5 @@
-export declare class PredictorSDKTimeoutError extends Error {
-    readonly cause?: unknown;
+import * as errors from "./index.js";
+export declare class PredictorSDKTimeoutError extends errors.PredictorSDKError {
     constructor(message: string, opts?: {
         cause?: unknown;
     });

package/dist/errors/PredictorSDKTimeoutError.js

@@ -1,15 +1,15 @@
 // This file was auto-generated by Fern from our API Definition.
-export class PredictorSDKTimeoutError extends Error {
-    cause;
+import * as errors from "./index.js";
+export class PredictorSDKTimeoutError extends errors.PredictorSDKError {
     constructor(message, opts) {
-        super(message);
+        super({
+            message: message,
+            cause: opts?.cause,
+        });
         Object.setPrototypeOf(this, new.target.prototype);
         if (Error.captureStackTrace) {
             Error.captureStackTrace(this, this.constructor);
         }
-        this.name = this.constructor.name;
-        if (opts?.cause != null) {
-            this.cause = opts.cause;
-        }
+        this.name = "PredictorSDKTimeoutError";
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@predictorsdk/client",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "The official TypeScript/JavaScript client for the PredictorSDK matching markets API",
   "license": "MIT",
   "keywords": [