@rocicorp/zero 0.26.1 → 0.26.2-canary.1

package/out/zero-cache/src/custom/fetch.js

@@ -1,249 +1,202 @@
-import "urlpattern-polyfill";
 import { assert, unreachable } from "../../../shared/src/asserts.js";
-import { getErrorMessage } from "../../../shared/src/error.js";
 import { sleep } from "../../../shared/src/sleep.js";
 import "../../../shared/src/valita.js";
+import { getErrorMessage } from "../../../shared/src/error.js";
 import { PushFailed, TransformFailed } from "../../../zero-protocol/src/error-kind-enum.js";
 import { ZeroCache } from "../../../zero-protocol/src/error-origin-enum.js";
-import { Internal, HTTP, Parse } from "../../../zero-protocol/src/error-reason-enum.js";
+import { HTTP, Internal, Parse } from "../../../zero-protocol/src/error-reason-enum.js";
 import { isProtocolError } from "../../../zero-protocol/src/error.js";
-import { ProtocolErrorWithLevel } from "../types/error-with-level.js";
 import { upstreamSchema } from "../types/shards.js";
 import { randInt } from "../../../shared/src/rand.js";
-const reservedParams = ["schema", "appID"];
+import { ProtocolErrorWithLevel } from "../types/error-with-level.js";
+import "urlpattern-polyfill";
+//#region ../zero-cache/src/custom/fetch.ts
+var reservedParams = ["schema", "appID"];
+/**
+* Compiles and validates a URLPattern from configuration.
+*
+* Patterns must be full URLs (e.g., "https://api.example.com/endpoint").
+* URLPattern automatically sets search and hash to wildcard ('*'),
+* which means query parameters and fragments are ignored during matching.
+*
+* @throws Error if the pattern is an invalid URLPattern
+*/
 function compileUrlPattern(pattern) {
-  try {
-    return new URLPattern(pattern);
-  } catch (e) {
-    throw new Error(
-      `Invalid URLPattern in URL configuration: "${pattern}". Error: ${e instanceof Error ? e.message : String(e)}`
-    );
-  }
+	try {
+		return new URLPattern(pattern);
+	} catch (e) {
+		throw new Error(`Invalid URLPattern in URL configuration: "${pattern}". Error: ${e instanceof Error ? e.message : String(e)}`);
+	}
 }
+/**
+* Filters custom headers based on the allowed headers list.
+* If no allowedHeaders list is specified, no custom headers are forwarded (secure by default).
+* Header names are compared case-insensitively.
+*/
 function filterCustomHeaders(headers, allowedHeaders) {
-  if (!headers) {
-    return {};
-  }
-  if (!allowedHeaders || allowedHeaders.length === 0) {
-    return {};
-  }
-  const allowed = new Set(allowedHeaders.map((h) => h.toLowerCase()));
-  const filtered = {};
-  for (const [key, value] of Object.entries(headers)) {
-    if (allowed.has(key.toLowerCase())) {
-      filtered[key] = value;
-    }
-  }
-  return filtered;
+	if (!headers) return {};
+	if (!allowedHeaders || allowedHeaders.length === 0) return {};
+	const allowed = new Set(allowedHeaders.map((h) => h.toLowerCase()));
+	const filtered = {};
+	for (const [key, value] of Object.entries(headers)) if (allowed.has(key.toLowerCase())) filtered[key] = value;
+	return filtered;
 }
-const getBodyPreview = async (res, lc) => {
-  try {
-    const body = await res.clone().text();
-    if (body.length > 512) {
-      return body.slice(0, 512) + "...";
-    }
-    return body;
-  } catch (e) {
-    lc.warn?.(
-      "failed to get body preview",
-      {
-        url: res.url
-      },
-      e
-    );
-  }
-  return void 0;
+var getBodyPreview = async (res, lc) => {
+	try {
+		const body = await res.clone().text();
+		if (body.length > 512) return body.slice(0, 512) + "...";
+		return body;
+	} catch (e) {
+		lc.warn?.("failed to get body preview", { url: res.url }, e);
+	}
 };
-const MAX_ATTEMPTS = 4;
+var MAX_ATTEMPTS = 4;
 async function fetchFromAPIServer(validator, source, lc, url, allowedUrlPatterns, shard, headerOptions, body) {
-  const fetchFromAPIServerID = randInt(1, Number.MAX_SAFE_INTEGER).toString(36);
-  lc = lc.withContext("fetchFromAPIServerID", fetchFromAPIServerID);
-  lc.debug?.("fetchFromAPIServer called", {
-    url
-  });
-  if (!urlMatch(url, allowedUrlPatterns)) {
-    throw new ProtocolErrorWithLevel(
-      source === "push" ? {
-        kind: PushFailed,
-        origin: ZeroCache,
-        reason: Internal,
-        message: `URL "${url}" is not allowed by the ZERO_MUTATE_URL configuration`,
-        mutationIDs: []
-      } : {
-        kind: TransformFailed,
-        origin: ZeroCache,
-        reason: Internal,
-        message: `URL "${url}" is not allowed by the ZERO_QUERY_URL configuration`,
-        queryIDs: []
-      },
-      "warn"
-    );
-  }
-  const headers = {
-    "Content-Type": "application/json"
-  };
-  if (headerOptions.apiKey) {
-    headers["X-Api-Key"] = headerOptions.apiKey;
-  }
-  Object.assign(
-    headers,
-    filterCustomHeaders(
-      headerOptions.customHeaders,
-      headerOptions.allowedClientHeaders
-    )
-  );
-  if (headerOptions.token) {
-    headers["Authorization"] = `Bearer ${headerOptions.token}`;
-  }
-  if (headerOptions.cookie) {
-    headers["Cookie"] = headerOptions.cookie;
-  }
-  if (headerOptions.origin) {
-    headers["Origin"] = headerOptions.origin;
-  }
-  const urlObj = new URL(url);
-  const params = new URLSearchParams(urlObj.search);
-  for (const reserved of reservedParams) {
-    assert(
-      !params.has(reserved),
-      `The push URL cannot contain the reserved query param "${reserved}"`
-    );
-  }
-  params.append("schema", upstreamSchema(shard));
-  params.append("appID", shard.appID);
-  urlObj.search = params.toString();
-  const finalUrl = urlObj.toString();
-  for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {
-    lc = lc.withContext("fetchFromAPIServerAttempt", attempt);
-    lc.debug?.("fetch from API server attempt");
-    const shouldRetry = async () => {
-      if (attempt < MAX_ATTEMPTS) {
-        const delayMs = getBackoffDelayMs(attempt);
-        lc.debug?.(`fetch from API server retrying in ${delayMs} ms`);
-        await sleep(delayMs);
-        return true;
-      }
-      lc.debug?.("fetch from API server reached max attempts, not retrying");
-      return false;
-    };
-    try {
-      const response = await fetch(finalUrl, {
-        method: "POST",
-        headers,
-        body: JSON.stringify(body)
-      });
-      if (!response.ok) {
-        const bodyPreview = await getBodyPreview(response, lc);
-        lc.warn?.("fetch from API server returned non-OK status", {
-          url: finalUrl,
-          status: response.status,
-          bodyPreview
-        });
-        if ((response.status === 502 || response.status === 504) && await shouldRetry()) {
-          continue;
-        }
-        throw new ProtocolErrorWithLevel(
-          source === "push" ? {
-            kind: PushFailed,
-            origin: ZeroCache,
-            reason: HTTP,
-            status: response.status,
-            bodyPreview,
-            message: `Fetch from API server returned non-OK status ${response.status}`,
-            mutationIDs: []
-          } : {
-            kind: TransformFailed,
-            origin: ZeroCache,
-            reason: HTTP,
-            status: response.status,
-            bodyPreview,
-            message: `Fetch from API server returned non-OK status ${response.status}`,
-            queryIDs: []
-          },
-          "warn"
-        );
-      }
-      try {
-        const json = await response.json();
-        const result = validator.parse(json);
-        lc.debug?.("fetch from API server succeeded");
-        return result;
-      } catch (error) {
-        lc.warn?.(
-          "failed to parse response",
-          {
-            url: finalUrl
-          },
-          error
-        );
-        throw new ProtocolErrorWithLevel(
-          source === "push" ? {
-            kind: PushFailed,
-            origin: ZeroCache,
-            reason: Parse,
-            message: `Failed to parse response from API server: ${getErrorMessage(error)}`,
-            mutationIDs: []
-          } : {
-            kind: TransformFailed,
-            origin: ZeroCache,
-            reason: Parse,
-            message: `Failed to parse response from API server: ${getErrorMessage(error)}`,
-            queryIDs: []
-          },
-          "warn",
-          { cause: error }
-        );
-      }
-    } catch (error) {
-      if (isProtocolError(error)) {
-        throw error;
-      }
-      const isFetchFailed = error instanceof TypeError && error.message === "fetch failed";
-      let logLevel = isFetchFailed ? "warn" : "error";
-      lc[logLevel]?.(
-        "fetch from API server threw error",
-        { url: finalUrl },
-        error
-      );
-      if (isFetchFailed && await shouldRetry()) {
-        continue;
-      }
-      throw new ProtocolErrorWithLevel(
-        source === "push" ? {
-          kind: PushFailed,
-          origin: ZeroCache,
-          reason: Internal,
-          message: `Fetch from API server threw error: ${getErrorMessage(error)}`,
-          mutationIDs: []
-        } : {
-          kind: TransformFailed,
-          origin: ZeroCache,
-          reason: Internal,
-          message: `Fetch from API server threw error: ${getErrorMessage(error)}`,
-          queryIDs: []
-        },
-        logLevel,
-        { cause: error }
-      );
-    }
-  }
-  unreachable();
+	const fetchFromAPIServerID = randInt(1, Number.MAX_SAFE_INTEGER).toString(36);
+	lc = lc.withContext("fetchFromAPIServerID", fetchFromAPIServerID);
+	lc.debug?.("fetchFromAPIServer called", { url });
+	if (!urlMatch(url, allowedUrlPatterns)) throw new ProtocolErrorWithLevel(source === "push" ? {
+		kind: PushFailed,
+		origin: ZeroCache,
+		reason: Internal,
+		message: `URL "${url}" is not allowed by the ZERO_MUTATE_URL configuration`,
+		mutationIDs: []
+	} : {
+		kind: TransformFailed,
+		origin: ZeroCache,
+		reason: Internal,
+		message: `URL "${url}" is not allowed by the ZERO_QUERY_URL configuration`,
+		queryIDs: []
+	}, "warn");
+	const headers = { "Content-Type": "application/json" };
+	if (headerOptions.apiKey) headers["X-Api-Key"] = headerOptions.apiKey;
+	Object.assign(headers, filterCustomHeaders(headerOptions.customHeaders, headerOptions.allowedClientHeaders));
+	if (headerOptions.token) headers["Authorization"] = `Bearer ${headerOptions.token}`;
+	if (headerOptions.cookie) headers["Cookie"] = headerOptions.cookie;
+	if (headerOptions.origin) headers["Origin"] = headerOptions.origin;
+	const urlObj = new URL(url);
+	const params = new URLSearchParams(urlObj.search);
+	for (const reserved of reservedParams) assert(!params.has(reserved), `The push URL cannot contain the reserved query param "${reserved}"`);
+	params.append("schema", upstreamSchema(shard));
+	params.append("appID", shard.appID);
+	urlObj.search = params.toString();
+	const finalUrl = urlObj.toString();
+	for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {
+		lc = lc.withContext("fetchFromAPIServerAttempt", attempt);
+		lc.debug?.("fetch from API server attempt");
+		const shouldRetry = async () => {
+			if (attempt < MAX_ATTEMPTS) {
+				const delayMs = getBackoffDelayMs(attempt);
+				lc.debug?.(`fetch from API server retrying in ${delayMs} ms`);
+				await sleep(delayMs);
+				return true;
+			}
+			lc.debug?.("fetch from API server reached max attempts, not retrying");
+			return false;
+		};
+		try {
+			const response = await fetch(finalUrl, {
+				method: "POST",
+				headers,
+				body: JSON.stringify(body)
+			});
+			if (!response.ok) {
+				const bodyPreview = await getBodyPreview(response, lc);
+				lc.warn?.("fetch from API server returned non-OK status", {
+					url: finalUrl,
+					status: response.status,
+					bodyPreview
+				});
+				if ((response.status === 502 || response.status === 504) && await shouldRetry()) continue;
+				throw new ProtocolErrorWithLevel(source === "push" ? {
+					kind: PushFailed,
+					origin: ZeroCache,
+					reason: HTTP,
+					status: response.status,
+					bodyPreview,
+					message: `Fetch from API server returned non-OK status ${response.status}`,
+					mutationIDs: []
+				} : {
+					kind: TransformFailed,
+					origin: ZeroCache,
+					reason: HTTP,
+					status: response.status,
+					bodyPreview,
+					message: `Fetch from API server returned non-OK status ${response.status}`,
+					queryIDs: []
+				}, "warn");
+			}
+			try {
+				const json = await response.json();
+				const result = validator.parse(json);
+				lc.debug?.("fetch from API server succeeded");
+				return result;
+			} catch (error) {
+				lc.warn?.("failed to parse response", { url: finalUrl }, error);
+				throw new ProtocolErrorWithLevel(source === "push" ? {
+					kind: PushFailed,
+					origin: ZeroCache,
+					reason: Parse,
+					message: `Failed to parse response from API server: ${getErrorMessage(error)}`,
+					mutationIDs: []
+				} : {
+					kind: TransformFailed,
+					origin: ZeroCache,
+					reason: Parse,
+					message: `Failed to parse response from API server: ${getErrorMessage(error)}`,
+					queryIDs: []
+				}, "warn", { cause: error });
+			}
+		} catch (error) {
+			if (isProtocolError(error)) throw error;
+			const isFetchFailed = error instanceof TypeError && error.message === "fetch failed";
+			let logLevel = isFetchFailed ? "warn" : "error";
+			lc[logLevel]?.("fetch from API server threw error", { url: finalUrl }, error);
+			if (isFetchFailed && await shouldRetry()) continue;
+			throw new ProtocolErrorWithLevel(source === "push" ? {
+				kind: PushFailed,
+				origin: ZeroCache,
+				reason: Internal,
+				message: `Fetch from API server threw error: ${getErrorMessage(error)}`,
+				mutationIDs: []
+			} : {
+				kind: TransformFailed,
+				origin: ZeroCache,
+				reason: Internal,
+				message: `Fetch from API server threw error: ${getErrorMessage(error)}`,
+				queryIDs: []
+			}, logLevel, { cause: error });
+		}
+	}
+	unreachable();
 }
+/**
+* Returns true if the url matches one of the allowedUrlPatterns.
+*
+* URLPattern automatically ignores query parameters and hash fragments during matching
+* because it sets search and hash to wildcard ('*') by default.
+*
+* Example URLPattern patterns:
+* - "https://api.example.com/endpoint" - Exact match for a specific URL
+* - "https://*.example.com/endpoint" - Matches any single subdomain (e.g., "https://api.example.com/endpoint")
+* - "https://*.*.example.com/endpoint" - Matches two subdomains (e.g., "https://api.v1.example.com/endpoint")
+* - "https://api.example.com/*" - Matches any path under /
+* - "https://api.example.com/:version/endpoint" - Matches with named parameter (e.g., "https://api.example.com/v1/endpoint")
+*/
 function urlMatch(url, allowedUrlPatterns) {
-  for (const pattern of allowedUrlPatterns) {
-    if (pattern.test(url)) {
-      return true;
-    }
-  }
-  return false;
+	for (const pattern of allowedUrlPatterns) if (pattern.test(url)) return true;
+	return false;
 }
+/**
+* Returns the delay in milliseconds for the next retry attempt using exponential backoff with jitter.
+*
+* The delay assumes the first retry is attempt 1.
+* The formula is: `min(1000, 100 * 2^(attempt - 1) + jitter)` where jitter is between 0 and 100ms.
+*/
 function getBackoffDelayMs(attempt) {
-  return Math.min(1e3, 100 * Math.pow(2, attempt - 1) + Math.random() * 100);
+	return Math.min(1e3, 100 * Math.pow(2, attempt - 1) + Math.random() * 100);
 }
-export {
-  compileUrlPattern,
-  fetchFromAPIServer,
-  getBodyPreview,
-  urlMatch
-};
-//# sourceMappingURL=fetch.js.map
+//#endregion
+export { compileUrlPattern, fetchFromAPIServer };
+
+//# sourceMappingURL=fetch.js.map

package/out/zero-cache/src/custom/fetch.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetch.js","sources":["../../../../../zero-cache/src/custom/fetch.ts"],"sourcesContent":["import type {LogContext, LogLevel} from '@rocicorp/logger';\nimport 'urlpattern-polyfill';\nimport {assert, unreachable} from '../../../shared/src/asserts.ts';\nimport {getErrorMessage} from '../../../shared/src/error.ts';\nimport type {ReadonlyJSONValue} from '../../../shared/src/json.ts';\nimport {sleep} from '../../../shared/src/sleep.ts';\nimport {type Type} from '../../../shared/src/valita.ts';\nimport {ErrorKind} from '../../../zero-protocol/src/error-kind.ts';\nimport {ErrorOrigin} from '../../../zero-protocol/src/error-origin.ts';\nimport {ErrorReason} from '../../../zero-protocol/src/error-reason.ts';\nimport {isProtocolError} from '../../../zero-protocol/src/error.ts';\nimport {ProtocolErrorWithLevel} from '../types/error-with-level.ts';\nimport {upstreamSchema, type ShardID} from '../types/shards.ts';\nimport {randInt} from '../../../shared/src/rand.ts';\n\nconst reservedParams = ['schema', 'appID'];\n\n/**\n * Compiles and validates a URLPattern from configuration.\n *\n * Patterns must be full URLs (e.g., \"https://api.example.com/endpoint\").\n * URLPattern automatically sets search and hash to wildcard ('*'),\n * which means query parameters and fragments are ignored during matching.\n *\n * @throws Error if the pattern is an invalid URLPattern\n */\nexport function compileUrlPattern(pattern: string): URLPattern {\n  try {\n    return new URLPattern(pattern);\n  } catch (e) {\n    throw new Error(\n      `Invalid URLPattern in URL configuration: \"${pattern}\". Error: ${e instanceof Error ? e.message : String(e)}`,\n    );\n  }\n}\n\nexport type HeaderOptions = {\n  apiKey?: string | undefined;\n  customHeaders?: Record<string, string> | undefined;\n  allowedClientHeaders?: readonly string[] | undefined;\n  token?: string | undefined;\n  cookie?: string | undefined;\n  origin?: string | undefined;\n};\n\n/**\n * Filters custom headers based on the allowed headers list.\n * If no allowedHeaders list is specified, no custom headers are forwarded (secure by default).\n * Header names are compared case-insensitively.\n */\nfunction filterCustomHeaders(\n  headers: Record<string, string> | undefined,\n  allowedHeaders: readonly string[] | undefined,\n): Record<string, string> {\n  if (!headers) {\n    return {};\n  }\n  if (!allowedHeaders || allowedHeaders.length === 0) {\n    return {};\n  }\n\n  const allowed = new Set(allowedHeaders.map(h => h.toLowerCase()));\n  const filtered: Record<string, string> = {};\n  for (const [key, value] of Object.entries(headers)) {\n    if (allowed.has(key.toLowerCase())) {\n      filtered[key] = value;\n    }\n  }\n  return filtered;\n}\n\nexport const getBodyPreview = async (\n  res: Response,\n  lc: LogContext,\n): Promise<string | undefined> => {\n  try {\n    const body = await res.clone().text();\n    if (body.length > 512) {\n      return body.slice(0, 512) + '...';\n    }\n    return body;\n  } catch (e) {\n    lc.warn?.(\n      'failed to get body preview',\n      {\n        url: res.url,\n      },\n      e,\n    );\n  }\n\n  return undefined;\n};\n\nconst MAX_ATTEMPTS = 4;\n\nexport async function fetchFromAPIServer<TValidator extends Type>(\n  validator: TValidator,\n  source: 'push' | 'transform',\n  lc: LogContext,\n  url: string,\n  allowedUrlPatterns: URLPattern[],\n  shard: ShardID,\n  headerOptions: HeaderOptions,\n  body: ReadonlyJSONValue,\n) {\n  const fetchFromAPIServerID = randInt(1, Number.MAX_SAFE_INTEGER).toString(36);\n  lc = lc.withContext('fetchFromAPIServerID', fetchFromAPIServerID);\n\n  lc.debug?.('fetchFromAPIServer called', {\n    url,\n  });\n\n  if (!urlMatch(url, allowedUrlPatterns)) {\n    throw new ProtocolErrorWithLevel(\n      source === 'push'\n        ? {\n            kind: ErrorKind.PushFailed,\n            origin: ErrorOrigin.ZeroCache,\n            reason: ErrorReason.Internal,\n            message: `URL \"${url}\" is not allowed by the ZERO_MUTATE_URL configuration`,\n            mutationIDs: [],\n          }\n        : {\n            kind: ErrorKind.TransformFailed,\n            origin: ErrorOrigin.ZeroCache,\n            reason: ErrorReason.Internal,\n            message: `URL \"${url}\" is not allowed by the ZERO_QUERY_URL configuration`,\n            queryIDs: [],\n          },\n      'warn',\n    );\n  }\n  const headers: Record<string, string> = {\n    'Content-Type': 'application/json',\n  };\n\n  if (headerOptions.apiKey) {\n    headers['X-Api-Key'] = headerOptions.apiKey;\n  }\n  Object.assign(\n    headers,\n    filterCustomHeaders(\n      headerOptions.customHeaders,\n      headerOptions.allowedClientHeaders,\n    ),\n  );\n  if (headerOptions.token) {\n    headers['Authorization'] = `Bearer ${headerOptions.token}`;\n  }\n  if (headerOptions.cookie) {\n    headers['Cookie'] = headerOptions.cookie;\n  }\n  if (headerOptions.origin) {\n    headers['Origin'] = headerOptions.origin;\n  }\n\n  const urlObj = new URL(url);\n  const params = new URLSearchParams(urlObj.search);\n\n  for (const reserved of reservedParams) {\n    assert(\n      !params.has(reserved),\n      `The push URL cannot contain the reserved query param \"${reserved}\"`,\n    );\n  }\n\n  params.append('schema', upstreamSchema(shard));\n  params.append('appID', shard.appID);\n\n  urlObj.search = params.toString();\n\n  const finalUrl = urlObj.toString();\n\n  for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {\n    lc = lc.withContext('fetchFromAPIServerAttempt', attempt);\n    lc.debug?.('fetch from API server attempt');\n    const shouldRetry = async () => {\n      if (attempt < MAX_ATTEMPTS) {\n        const delayMs = getBackoffDelayMs(attempt);\n        lc.debug?.(`fetch from API server retrying in ${delayMs} ms`);\n        await sleep(delayMs);\n        return true;\n      }\n      lc.debug?.('fetch from API server reached max attempts, not retrying');\n      return false;\n    };\n    try {\n      const response = await fetch(finalUrl, {\n        method: 'POST',\n        headers,\n        body: JSON.stringify(body),\n      });\n\n      if (!response.ok) {\n        const bodyPreview = await getBodyPreview(response, lc);\n        lc.warn?.('fetch from API server returned non-OK status', {\n          url: finalUrl,\n          status: response.status,\n          bodyPreview,\n        });\n        // Bad Gateway or Gateway Timeout indicate the server was not reached\n        // We retry these if we have retries remaining.\n        if (\n          (response.status === 502 || response.status === 504) &&\n          (await shouldRetry())\n        ) {\n          continue;\n        }\n\n        throw new ProtocolErrorWithLevel(\n          source === 'push'\n            ? {\n                kind: ErrorKind.PushFailed,\n                origin: ErrorOrigin.ZeroCache,\n                reason: ErrorReason.HTTP,\n                status: response.status,\n                bodyPreview,\n                message: `Fetch from API server returned non-OK status ${response.status}`,\n                mutationIDs: [],\n              }\n            : {\n                kind: ErrorKind.TransformFailed,\n                origin: ErrorOrigin.ZeroCache,\n                reason: ErrorReason.HTTP,\n                status: response.status,\n                bodyPreview,\n                message: `Fetch from API server returned non-OK status ${response.status}`,\n                queryIDs: [],\n              },\n          'warn',\n        );\n      }\n\n      try {\n        const json = await response.json();\n        const result = validator.parse(json);\n        lc.debug?.('fetch from API server succeeded');\n        return result;\n      } catch (error) {\n        lc.warn?.(\n          'failed to parse response',\n          {\n            url: finalUrl,\n          },\n          error,\n        );\n\n        throw new ProtocolErrorWithLevel(\n          source === 'push'\n            ? {\n                kind: ErrorKind.PushFailed,\n                origin: ErrorOrigin.ZeroCache,\n                reason: ErrorReason.Parse,\n                message: `Failed to parse response from API server: ${getErrorMessage(error)}`,\n                mutationIDs: [],\n              }\n            : {\n                kind: ErrorKind.TransformFailed,\n                origin: ErrorOrigin.ZeroCache,\n                reason: ErrorReason.Parse,\n                message: `Failed to parse response from API server: ${getErrorMessage(error)}`,\n                queryIDs: [],\n              },\n          'warn',\n          {cause: error},\n        );\n      }\n    } catch (error) {\n      if (isProtocolError(error)) {\n        throw error;\n      }\n\n      const isFetchFailed =\n        error instanceof TypeError && error.message === 'fetch failed';\n      // unexpected/unknown errors should be logged at 'error' level so they\n      // are investigated\n      let logLevel: LogLevel = isFetchFailed ? 'warn' : 'error';\n      lc[logLevel]?.(\n        'fetch from API server threw error',\n        {url: finalUrl},\n        error,\n      );\n\n      if (isFetchFailed && (await shouldRetry())) {\n        continue;\n      }\n\n      throw new ProtocolErrorWithLevel(\n        source === 'push'\n          ? {\n              kind: ErrorKind.PushFailed,\n              origin: ErrorOrigin.ZeroCache,\n              reason: ErrorReason.Internal,\n              message: `Fetch from API server threw error: ${getErrorMessage(error)}`,\n              mutationIDs: [],\n            }\n          : {\n              kind: ErrorKind.TransformFailed,\n              origin: ErrorOrigin.ZeroCache,\n              reason: ErrorReason.Internal,\n              message: `Fetch from API server threw error: ${getErrorMessage(error)}`,\n              queryIDs: [],\n            },\n        logLevel,\n        {cause: error},\n      );\n    }\n  }\n  unreachable();\n}\n\n/**\n * Returns true if the url matches one of the allowedUrlPatterns.\n *\n * URLPattern automatically ignores query parameters and hash fragments during matching\n * because it sets search and hash to wildcard ('*') by default.\n *\n * Example URLPattern patterns:\n * - \"https://api.example.com/endpoint\" - Exact match for a specific URL\n * - \"https://*.example.com/endpoint\" - Matches any single subdomain (e.g., \"https://api.example.com/endpoint\")\n * - \"https://*.*.example.com/endpoint\" - Matches two subdomains (e.g., \"https://api.v1.example.com/endpoint\")\n * - \"https://api.example.com/*\" - Matches any path under /\n * - \"https://api.example.com/:version/endpoint\" - Matches with named parameter (e.g., \"https://api.example.com/v1/endpoint\")\n */\nexport function urlMatch(\n  url: string,\n  allowedUrlPatterns: URLPattern[],\n): boolean {\n  for (const pattern of allowedUrlPatterns) {\n    if (pattern.test(url)) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Returns the delay in milliseconds for the next retry attempt using exponential backoff with jitter.\n *\n * The delay assumes the first retry is attempt 1.\n * The formula is: `min(1000, 100 * 2^(attempt - 1) + jitter)` where jitter is between 0 and 100ms.\n */\nfunction getBackoffDelayMs(attempt: number): number {\n  return Math.min(1000, 100 * Math.pow(2, attempt - 1) + Math.random() * 100);\n}\n"],"names":["ErrorKind.PushFailed","ErrorOrigin.ZeroCache","ErrorReason.Internal","ErrorKind.TransformFailed","ErrorReason.HTTP","ErrorReason.Parse"],"mappings":";;;;;;;;;;;;AAeA,MAAM,iBAAiB,CAAC,UAAU,OAAO;AAWlC,SAAS,kBAAkB,SAA6B;AAC7D,MAAI;AACF,WAAO,IAAI,WAAW,OAAO;AAAA,EAC/B,SAAS,GAAG;AACV,UAAM,IAAI;AAAA,MACR,6CAA6C,OAAO,aAAa,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC,CAAC;AAAA,IAAA;AAAA,EAE/G;AACF;AAgBA,SAAS,oBACP,SACA,gBACwB;AACxB,MAAI,CAAC,SAAS;AACZ,WAAO,CAAA;AAAA,EACT;AACA,MAAI,CAAC,kBAAkB,eAAe,WAAW,GAAG;AAClD,WAAO,CAAA;AAAA,EACT;AAEA,QAAM,UAAU,IAAI,IAAI,eAAe,IAAI,CAAA,MAAK,EAAE,YAAA,CAAa,CAAC;AAChE,QAAM,WAAmC,CAAA;AACzC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,QAAQ,IAAI,IAAI,YAAA,CAAa,GAAG;AAClC,eAAS,GAAG,IAAI;AAAA,IAClB;AAAA,EACF;AACA,SAAO;AACT;AAEO,MAAM,iBAAiB,OAC5B,KACA,OACgC;AAChC,MAAI;AACF,UAAM,OAAO,MAAM,IAAI,MAAA,EAAQ,KAAA;AAC/B,QAAI,KAAK,SAAS,KAAK;AACrB,aAAO,KAAK,MAAM,GAAG,GAAG,IAAI;AAAA,IAC9B;AACA,WAAO;AAAA,EACT,SAAS,GAAG;AACV,OAAG;AAAA,MACD;AAAA,MACA;AAAA,QACE,KAAK,IAAI;AAAA,MAAA;AAAA,MAEX;AAAA,IAAA;AAAA,EAEJ;AAEA,SAAO;AACT;AAEA,MAAM,eAAe;AAErB,eAAsB,mBACpB,WACA,QACA,IACA,KACA,oBACA,OACA,eACA,MACA;AACA,QAAM,uBAAuB,QAAQ,GAAG,OAAO,gBAAgB,EAAE,SAAS,EAAE;AAC5E,OAAK,GAAG,YAAY,wBAAwB,oBAAoB;AAEhE,KAAG,QAAQ,6BAA6B;AAAA,IACtC;AAAA,EAAA,CACD;AAED,MAAI,CAAC,SAAS,KAAK,kBAAkB,GAAG;AACtC,UAAM,IAAI;AAAA,MACR,WAAW,SACP;AAAA,QACE,MAAMA;AAAAA,QACN,QAAQC;AAAAA,QACR,QAAQC;AAAAA,QACR,SAAS,QAAQ,GAAG;AAAA,QACpB,aAAa,CAAA;AAAA,MAAC,IAEhB;AAAA,QACE,MAAMC;AAAAA,QACN,QAAQF;AAAAA,QACR,QAAQC;AAAAA,QACR,SAAS,QAAQ,GAAG;AAAA,QACpB,UAAU,CAAA;AAAA,MAAC;AAAA,MAEjB;AAAA,IAAA;AAAA,EAEJ;AACA,QAAM,UAAkC;AAAA,IACtC,gBAAgB;AAAA,EAAA;AAGlB,MAAI,cAAc,QAAQ;AACxB,YAAQ,WAAW,IAAI,cAAc;AAAA,EACvC;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,cAAc;AAAA,IAAA;AAAA,EAChB;AAEF,MAAI,cAAc,OAAO;AACvB,YAAQ,eAAe,IAAI,UAAU,cAAc,KAAK;AAAA,EAC1D;AACA,MAAI,cAAc,QAAQ;AACxB,YAAQ,QAAQ,IAAI,cAAc;AAAA,EACpC;AACA,MAAI,cAAc,QAAQ;AACxB,YAAQ,QAAQ,IAAI,cAAc;AAAA,EACpC;AAEA,QAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,QAAM,SAAS,IAAI,gBAAgB,OAAO,MAAM;AAEhD,aAAW,YAAY,gBAAgB;AACrC;AAAA,MACE,CAAC,OAAO,IAAI,QAAQ;AAAA,MACpB,yDAAyD,QAAQ;AAAA,IAAA;AAAA,EAErE;AAEA,SAAO,OAAO,UAAU,eAAe,KAAK,CAAC;AAC7C,SAAO,OAAO,SAAS,MAAM,KAAK;AAElC,SAAO,SAAS,OAAO,SAAA;AAEvB,QAAM,WAAW,OAAO,SAAA;AAExB,WAAS,UAAU,GAAG,WAAW,cAAc,WAAW;AACxD,SAAK,GAAG,YAAY,6BAA6B,OAAO;AACxD,OAAG,QAAQ,+BAA+B;AAC1C,UAAM,cAAc,YAAY;AAC9B,UAAI,UAAU,cAAc;AAC1B,cAAM,UAAU,kBAAkB,OAAO;AACzC,WAAG,QAAQ,qCAAqC,OAAO,KAAK;AAC5D,cAAM,MAAM,OAAO;AACnB,eAAO;AAAA,MACT;AACA,SAAG,QAAQ,0DAA0D;AACrE,aAAO;AAAA,IACT;AACA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,UAAU;AAAA,QACrC,QAAQ;AAAA,QACR;AAAA,QACA,MAAM,KAAK,UAAU,IAAI;AAAA,MAAA,CAC1B;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,cAAc,MAAM,eAAe,UAAU,EAAE;AACrD,WAAG,OAAO,gDAAgD;AAAA,UACxD,KAAK;AAAA,UACL,QAAQ,SAAS;AAAA,UACjB;AAAA,QAAA,CACD;AAGD,aACG,SAAS,WAAW,OAAO,SAAS,WAAW,QAC/C,MAAM,eACP;AACA;AAAA,QACF;AAEA,cAAM,IAAI;AAAA,UACR,WAAW,SACP;AAAA,YACE,MAAMF;AAAAA,YACN,QAAQC;AAAAA,YACR,QAAQG;AAAAA,YACR,QAAQ,SAAS;AAAA,YACjB;AAAA,YACA,SAAS,gDAAgD,SAAS,MAAM;AAAA,YACxE,aAAa,CAAA;AAAA,UAAC,IAEhB;AAAA,YACE,MAAMD;AAAAA,YACN,QAAQF;AAAAA,YACR,QAAQG;AAAAA,YACR,QAAQ,SAAS;AAAA,YACjB;AAAA,YACA,SAAS,gDAAgD,SAAS,MAAM;AAAA,YACxE,UAAU,CAAA;AAAA,UAAC;AAAA,UAEjB;AAAA,QAAA;AAAA,MAEJ;AAEA,UAAI;AACF,cAAM,OAAO,MAAM,SAAS,KAAA;AAC5B,cAAM,SAAS,UAAU,MAAM,IAAI;AACnC,WAAG,QAAQ,iCAAiC;AAC5C,eAAO;AAAA,MACT,SAAS,OAAO;AACd,WAAG;AAAA,UACD;AAAA,UACA;AAAA,YACE,KAAK;AAAA,UAAA;AAAA,UAEP;AAAA,QAAA;AAGF,cAAM,IAAI;AAAA,UACR,WAAW,SACP;AAAA,YACE,MAAMJ;AAAAA,YACN,QAAQC;AAAAA,YACR,QAAQI;AAAAA,YACR,SAAS,6CAA6C,gBAAgB,KAAK,CAAC;AAAA,YAC5E,aAAa,CAAA;AAAA,UAAC,IAEhB;AAAA,YACE,MAAMF;AAAAA,YACN,QAAQF;AAAAA,YACR,QAAQI;AAAAA,YACR,SAAS,6CAA6C,gBAAgB,KAAK,CAAC;AAAA,YAC5E,UAAU,CAAA;AAAA,UAAC;AAAA,UAEjB;AAAA,UACA,EAAC,OAAO,MAAA;AAAA,QAAK;AAAA,MAEjB;AAAA,IACF,SAAS,OAAO;AACd,UAAI,gBAAgB,KAAK,GAAG;AAC1B,cAAM;AAAA,MACR;AAEA,YAAM,gBACJ,iBAAiB,aAAa,MAAM,YAAY;AAGlD,UAAI,WAAqB,gBAAgB,SAAS;AAClD,SAAG,QAAQ;AAAA,QACT;AAAA,QACA,EAAC,KAAK,SAAA;AAAA,QACN;AAAA,MAAA;AAGF,UAAI,iBAAkB,MAAM,eAAgB;AAC1C;AAAA,MACF;AAEA,YAAM,IAAI;AAAA,QACR,WAAW,SACP;AAAA,UACE,MAAML;AAAAA,UACN,QAAQC;AAAAA,UACR,QAAQC;AAAAA,UACR,SAAS,sCAAsC,gBAAgB,KAAK,CAAC;AAAA,UACrE,aAAa,CAAA;AAAA,QAAC,IAEhB;AAAA,UACE,MAAMC;AAAAA,UACN,QAAQF;AAAAA,UACR,QAAQC;AAAAA,UACR,SAAS,sCAAsC,gBAAgB,KAAK,CAAC;AAAA,UACrE,UAAU,CAAA;AAAA,QAAC;AAAA,QAEjB;AAAA,QACA,EAAC,OAAO,MAAA;AAAA,MAAK;AAAA,IAEjB;AAAA,EACF;AACA,cAAA;AACF;AAeO,SAAS,SACd,KACA,oBACS;AACT,aAAW,WAAW,oBAAoB;AACxC,QAAI,QAAQ,KAAK,GAAG,GAAG;AACrB,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAQA,SAAS,kBAAkB,SAAyB;AAClD,SAAO,KAAK,IAAI,KAAM,MAAM,KAAK,IAAI,GAAG,UAAU,CAAC,IAAI,KAAK,OAAA,IAAW,GAAG;AAC5E;"}
+{"version":3,"file":"fetch.js","names":[],"sources":["../../../../../zero-cache/src/custom/fetch.ts"],"sourcesContent":["import type {LogContext, LogLevel} from '@rocicorp/logger';\nimport 'urlpattern-polyfill';\nimport {assert, unreachable} from '../../../shared/src/asserts.ts';\nimport {getErrorMessage} from '../../../shared/src/error.ts';\nimport type {ReadonlyJSONValue} from '../../../shared/src/json.ts';\nimport {sleep} from '../../../shared/src/sleep.ts';\nimport {type Type} from '../../../shared/src/valita.ts';\nimport {ErrorKind} from '../../../zero-protocol/src/error-kind.ts';\nimport {ErrorOrigin} from '../../../zero-protocol/src/error-origin.ts';\nimport {ErrorReason} from '../../../zero-protocol/src/error-reason.ts';\nimport {isProtocolError} from '../../../zero-protocol/src/error.ts';\nimport {ProtocolErrorWithLevel} from '../types/error-with-level.ts';\nimport {upstreamSchema, type ShardID} from '../types/shards.ts';\nimport {randInt} from '../../../shared/src/rand.ts';\n\nconst reservedParams = ['schema', 'appID'];\n\n/**\n * Compiles and validates a URLPattern from configuration.\n *\n * Patterns must be full URLs (e.g., \"https://api.example.com/endpoint\").\n * URLPattern automatically sets search and hash to wildcard ('*'),\n * which means query parameters and fragments are ignored during matching.\n *\n * @throws Error if the pattern is an invalid URLPattern\n */\nexport function compileUrlPattern(pattern: string): URLPattern {\n  try {\n    return new URLPattern(pattern);\n  } catch (e) {\n    throw new Error(\n      `Invalid URLPattern in URL configuration: \"${pattern}\". Error: ${e instanceof Error ? e.message : String(e)}`,\n    );\n  }\n}\n\nexport type HeaderOptions = {\n  apiKey?: string | undefined;\n  customHeaders?: Record<string, string> | undefined;\n  allowedClientHeaders?: readonly string[] | undefined;\n  token?: string | undefined;\n  cookie?: string | undefined;\n  origin?: string | undefined;\n};\n\n/**\n * Filters custom headers based on the allowed headers list.\n * If no allowedHeaders list is specified, no custom headers are forwarded (secure by default).\n * Header names are compared case-insensitively.\n */\nfunction filterCustomHeaders(\n  headers: Record<string, string> | undefined,\n  allowedHeaders: readonly string[] | undefined,\n): Record<string, string> {\n  if (!headers) {\n    return {};\n  }\n  if (!allowedHeaders || allowedHeaders.length === 0) {\n    return {};\n  }\n\n  const allowed = new Set(allowedHeaders.map(h => h.toLowerCase()));\n  const filtered: Record<string, string> = {};\n  for (const [key, value] of Object.entries(headers)) {\n    if (allowed.has(key.toLowerCase())) {\n      filtered[key] = value;\n    }\n  }\n  return filtered;\n}\n\nexport const getBodyPreview = async (\n  res: Response,\n  lc: LogContext,\n): Promise<string | undefined> => {\n  try {\n    const body = await res.clone().text();\n    if (body.length > 512) {\n      return body.slice(0, 512) + '...';\n    }\n    return body;\n  } catch (e) {\n    lc.warn?.(\n      'failed to get body preview',\n      {\n        url: res.url,\n      },\n      e,\n    );\n  }\n\n  return undefined;\n};\n\nconst MAX_ATTEMPTS = 4;\n\nexport async function fetchFromAPIServer<TValidator extends Type>(\n  validator: TValidator,\n  source: 'push' | 'transform',\n  lc: LogContext,\n  url: string,\n  allowedUrlPatterns: URLPattern[],\n  shard: ShardID,\n  headerOptions: HeaderOptions,\n  body: ReadonlyJSONValue,\n) {\n  const fetchFromAPIServerID = randInt(1, Number.MAX_SAFE_INTEGER).toString(36);\n  lc = lc.withContext('fetchFromAPIServerID', fetchFromAPIServerID);\n\n  lc.debug?.('fetchFromAPIServer called', {\n    url,\n  });\n\n  if (!urlMatch(url, allowedUrlPatterns)) {\n    throw new ProtocolErrorWithLevel(\n      source === 'push'\n        ? {\n            kind: ErrorKind.PushFailed,\n            origin: ErrorOrigin.ZeroCache,\n            reason: ErrorReason.Internal,\n            message: `URL \"${url}\" is not allowed by the ZERO_MUTATE_URL configuration`,\n            mutationIDs: [],\n          }\n        : {\n            kind: ErrorKind.TransformFailed,\n            origin: ErrorOrigin.ZeroCache,\n            reason: ErrorReason.Internal,\n            message: `URL \"${url}\" is not allowed by the ZERO_QUERY_URL configuration`,\n            queryIDs: [],\n          },\n      'warn',\n    );\n  }\n  const headers: Record<string, string> = {\n    'Content-Type': 'application/json',\n  };\n\n  if (headerOptions.apiKey) {\n    headers['X-Api-Key'] = headerOptions.apiKey;\n  }\n  Object.assign(\n    headers,\n    filterCustomHeaders(\n      headerOptions.customHeaders,\n      headerOptions.allowedClientHeaders,\n    ),\n  );\n  if (headerOptions.token) {\n    headers['Authorization'] = `Bearer ${headerOptions.token}`;\n  }\n  if (headerOptions.cookie) {\n    headers['Cookie'] = headerOptions.cookie;\n  }\n  if (headerOptions.origin) {\n    headers['Origin'] = headerOptions.origin;\n  }\n\n  const urlObj = new URL(url);\n  const params = new URLSearchParams(urlObj.search);\n\n  for (const reserved of reservedParams) {\n    assert(\n      !params.has(reserved),\n      `The push URL cannot contain the reserved query param \"${reserved}\"`,\n    );\n  }\n\n  params.append('schema', upstreamSchema(shard));\n  params.append('appID', shard.appID);\n\n  urlObj.search = params.toString();\n\n  const finalUrl = urlObj.toString();\n\n  for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {\n    lc = lc.withContext('fetchFromAPIServerAttempt', attempt);\n    lc.debug?.('fetch from API server attempt');\n    const shouldRetry = async () => {\n      if (attempt < MAX_ATTEMPTS) {\n        const delayMs = getBackoffDelayMs(attempt);\n        lc.debug?.(`fetch from API server retrying in ${delayMs} ms`);\n        await sleep(delayMs);\n        return true;\n      }\n      lc.debug?.('fetch from API server reached max attempts, not retrying');\n      return false;\n    };\n    try {\n      const response = await fetch(finalUrl, {\n        method: 'POST',\n        headers,\n        body: JSON.stringify(body),\n      });\n\n      if (!response.ok) {\n        const bodyPreview = await getBodyPreview(response, lc);\n        lc.warn?.('fetch from API server returned non-OK status', {\n          url: finalUrl,\n          status: response.status,\n          bodyPreview,\n        });\n        // Bad Gateway or Gateway Timeout indicate the server was not reached\n        // We retry these if we have retries remaining.\n        if (\n          (response.status === 502 || response.status === 504) &&\n          (await shouldRetry())\n        ) {\n          continue;\n        }\n\n        throw new ProtocolErrorWithLevel(\n          source === 'push'\n            ? {\n                kind: ErrorKind.PushFailed,\n                origin: ErrorOrigin.ZeroCache,\n                reason: ErrorReason.HTTP,\n                status: response.status,\n                bodyPreview,\n                message: `Fetch from API server returned non-OK status ${response.status}`,\n                mutationIDs: [],\n              }\n            : {\n                kind: ErrorKind.TransformFailed,\n                origin: ErrorOrigin.ZeroCache,\n                reason: ErrorReason.HTTP,\n                status: response.status,\n                bodyPreview,\n                message: `Fetch from API server returned non-OK status ${response.status}`,\n                queryIDs: [],\n              },\n          'warn',\n        );\n      }\n\n      try {\n        const json = await response.json();\n        const result = validator.parse(json);\n        lc.debug?.('fetch from API server succeeded');\n        return result;\n      } catch (error) {\n        lc.warn?.(\n          'failed to parse response',\n          {\n            url: finalUrl,\n          },\n          error,\n        );\n\n        throw new ProtocolErrorWithLevel(\n          source === 'push'\n            ? {\n                kind: ErrorKind.PushFailed,\n                origin: ErrorOrigin.ZeroCache,\n                reason: ErrorReason.Parse,\n                message: `Failed to parse response from API server: ${getErrorMessage(error)}`,\n                mutationIDs: [],\n              }\n            : {\n                kind: ErrorKind.TransformFailed,\n                origin: ErrorOrigin.ZeroCache,\n                reason: ErrorReason.Parse,\n                message: `Failed to parse response from API server: ${getErrorMessage(error)}`,\n                queryIDs: [],\n              },\n          'warn',\n          {cause: error},\n        );\n      }\n    } catch (error) {\n      if (isProtocolError(error)) {\n        throw error;\n      }\n\n      const isFetchFailed =\n        error instanceof TypeError && error.message === 'fetch failed';\n      // unexpected/unknown errors should be logged at 'error' level so they\n      // are investigated\n      let logLevel: LogLevel = isFetchFailed ? 'warn' : 'error';\n      lc[logLevel]?.(\n        'fetch from API server threw error',\n        {url: finalUrl},\n        error,\n      );\n\n      if (isFetchFailed && (await shouldRetry())) {\n        continue;\n      }\n\n      throw new ProtocolErrorWithLevel(\n        source === 'push'\n          ? {\n              kind: ErrorKind.PushFailed,\n              origin: ErrorOrigin.ZeroCache,\n              reason: ErrorReason.Internal,\n              message: `Fetch from API server threw error: ${getErrorMessage(error)}`,\n              mutationIDs: [],\n            }\n          : {\n              kind: ErrorKind.TransformFailed,\n              origin: ErrorOrigin.ZeroCache,\n              reason: ErrorReason.Internal,\n              message: `Fetch from API server threw error: ${getErrorMessage(error)}`,\n              queryIDs: [],\n            },\n        logLevel,\n        {cause: error},\n      );\n    }\n  }\n  unreachable();\n}\n\n/**\n * Returns true if the url matches one of the allowedUrlPatterns.\n *\n * URLPattern automatically ignores query parameters and hash fragments during matching\n * because it sets search and hash to wildcard ('*') by default.\n *\n * Example URLPattern patterns:\n * - \"https://api.example.com/endpoint\" - Exact match for a specific URL\n * - \"https://*.example.com/endpoint\" - Matches any single subdomain (e.g., \"https://api.example.com/endpoint\")\n * - \"https://*.*.example.com/endpoint\" - Matches two subdomains (e.g., \"https://api.v1.example.com/endpoint\")\n * - \"https://api.example.com/*\" - Matches any path under /\n * - \"https://api.example.com/:version/endpoint\" - Matches with named parameter (e.g., \"https://api.example.com/v1/endpoint\")\n */\nexport function urlMatch(\n  url: string,\n  allowedUrlPatterns: URLPattern[],\n): boolean {\n  for (const pattern of allowedUrlPatterns) {\n    if (pattern.test(url)) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Returns the delay in milliseconds for the next retry attempt using exponential backoff with jitter.\n *\n * The delay assumes the first retry is attempt 1.\n * The formula is: `min(1000, 100 * 2^(attempt - 1) + jitter)` where jitter is between 0 and 100ms.\n */\nfunction getBackoffDelayMs(attempt: number): number {\n  return Math.min(1000, 100 * Math.pow(2, attempt - 1) + Math.random() * 100);\n}\n"],"mappings":";;;;;;;;;;;;;AAeA,IAAM,iBAAiB,CAAC,UAAU,QAAQ;;;;;;;;;;AAW1C,SAAgB,kBAAkB,SAA6B;AAC7D,KAAI;AACF,SAAO,IAAI,WAAW,QAAQ;UACvB,GAAG;AACV,QAAM,IAAI,MACR,6CAA6C,QAAQ,YAAY,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,GAC5G;;;;;;;;AAkBL,SAAS,oBACP,SACA,gBACwB;AACxB,KAAI,CAAC,QACH,QAAO,EAAE;AAEX,KAAI,CAAC,kBAAkB,eAAe,WAAW,EAC/C,QAAO,EAAE;CAGX,MAAM,UAAU,IAAI,IAAI,eAAe,KAAI,MAAK,EAAE,aAAa,CAAC,CAAC;CACjE,MAAM,WAAmC,EAAE;AAC3C,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,CAChD,KAAI,QAAQ,IAAI,IAAI,aAAa,CAAC,CAChC,UAAS,OAAO;AAGpB,QAAO;;AAGT,IAAa,iBAAiB,OAC5B,KACA,OACgC;AAChC,KAAI;EACF,MAAM,OAAO,MAAM,IAAI,OAAO,CAAC,MAAM;AACrC,MAAI,KAAK,SAAS,IAChB,QAAO,KAAK,MAAM,GAAG,IAAI,GAAG;AAE9B,SAAO;UACA,GAAG;AACV,KAAG,OACD,8BACA,EACE,KAAK,IAAI,KACV,EACD,EACD;;;AAML,IAAM,eAAe;AAErB,eAAsB,mBACpB,WACA,QACA,IACA,KACA,oBACA,OACA,eACA,MACA;CACA,MAAM,uBAAuB,QAAQ,GAAG,OAAO,iBAAiB,CAAC,SAAS,GAAG;AAC7E,MAAK,GAAG,YAAY,wBAAwB,qBAAqB;AAEjE,IAAG,QAAQ,6BAA6B,EACtC,KACD,CAAC;AAEF,KAAI,CAAC,SAAS,KAAK,mBAAmB,CACpC,OAAM,IAAI,uBACR,WAAW,SACP;EACE,MAAM;EACN,QAAQ;EACR,QAAQ;EACR,SAAS,QAAQ,IAAI;EACrB,aAAa,EAAE;EAChB,GACD;EACE,MAAM;EACN,QAAQ;EACR,QAAQ;EACR,SAAS,QAAQ,IAAI;EACrB,UAAU,EAAE;EACb,EACL,OACD;CAEH,MAAM,UAAkC,EACtC,gBAAgB,oBACjB;AAED,KAAI,cAAc,OAChB,SAAQ,eAAe,cAAc;AAEvC,QAAO,OACL,SACA,oBACE,cAAc,eACd,cAAc,qBACf,CACF;AACD,KAAI,cAAc,MAChB,SAAQ,mBAAmB,UAAU,cAAc;AAErD,KAAI,cAAc,OAChB,SAAQ,YAAY,cAAc;AAEpC,KAAI,cAAc,OAChB,SAAQ,YAAY,cAAc;CAGpC,MAAM,SAAS,IAAI,IAAI,IAAI;CAC3B,MAAM,SAAS,IAAI,gBAAgB,OAAO,OAAO;AAEjD,MAAK,MAAM,YAAY,eACrB,QACE,CAAC,OAAO,IAAI,SAAS,EACrB,yDAAyD,SAAS,GACnE;AAGH,QAAO,OAAO,UAAU,eAAe,MAAM,CAAC;AAC9C,QAAO,OAAO,SAAS,MAAM,MAAM;AAEnC,QAAO,SAAS,OAAO,UAAU;CAEjC,MAAM,WAAW,OAAO,UAAU;AAElC,MAAK,IAAI,UAAU,GAAG,WAAW,cAAc,WAAW;AACxD,OAAK,GAAG,YAAY,6BAA6B,QAAQ;AACzD,KAAG,QAAQ,gCAAgC;EAC3C,MAAM,cAAc,YAAY;AAC9B,OAAI,UAAU,cAAc;IAC1B,MAAM,UAAU,kBAAkB,QAAQ;AAC1C,OAAG,QAAQ,qCAAqC,QAAQ,KAAK;AAC7D,UAAM,MAAM,QAAQ;AACpB,WAAO;;AAET,MAAG,QAAQ,2DAA2D;AACtE,UAAO;;AAET,MAAI;GACF,MAAM,WAAW,MAAM,MAAM,UAAU;IACrC,QAAQ;IACR;IACA,MAAM,KAAK,UAAU,KAAK;IAC3B,CAAC;AAEF,OAAI,CAAC,SAAS,IAAI;IAChB,MAAM,cAAc,MAAM,eAAe,UAAU,GAAG;AACtD,OAAG,OAAO,gDAAgD;KACxD,KAAK;KACL,QAAQ,SAAS;KACjB;KACD,CAAC;AAGF,SACG,SAAS,WAAW,OAAO,SAAS,WAAW,QAC/C,MAAM,aAAa,CAEpB;AAGF,UAAM,IAAI,uBACR,WAAW,SACP;KACE,MAAM;KACN,QAAQ;KACR,QAAQ;KACR,QAAQ,SAAS;KACjB;KACA,SAAS,gDAAgD,SAAS;KAClE,aAAa,EAAE;KAChB,GACD;KACE,MAAM;KACN,QAAQ;KACR,QAAQ;KACR,QAAQ,SAAS;KACjB;KACA,SAAS,gDAAgD,SAAS;KAClE,UAAU,EAAE;KACb,EACL,OACD;;AAGH,OAAI;IACF,MAAM,OAAO,MAAM,SAAS,MAAM;IAClC,MAAM,SAAS,UAAU,MAAM,KAAK;AACpC,OAAG,QAAQ,kCAAkC;AAC7C,WAAO;YACA,OAAO;AACd,OAAG,OACD,4BACA,EACE,KAAK,UACN,EACD,MACD;AAED,UAAM,IAAI,uBACR,WAAW,SACP;KACE,MAAM;KACN,QAAQ;KACR,QAAQ;KACR,SAAS,6CAA6C,gBAAgB,MAAM;KAC5E,aAAa,EAAE;KAChB,GACD;KACE,MAAM;KACN,QAAQ;KACR,QAAQ;KACR,SAAS,6CAA6C,gBAAgB,MAAM;KAC5E,UAAU,EAAE;KACb,EACL,QACA,EAAC,OAAO,OAAM,CACf;;WAEI,OAAO;AACd,OAAI,gBAAgB,MAAM,CACxB,OAAM;GAGR,MAAM,gBACJ,iBAAiB,aAAa,MAAM,YAAY;GAGlD,IAAI,WAAqB,gBAAgB,SAAS;AAClD,MAAG,YACD,qCACA,EAAC,KAAK,UAAS,EACf,MACD;AAED,OAAI,iBAAkB,MAAM,aAAa,CACvC;AAGF,SAAM,IAAI,uBACR,WAAW,SACP;IACE,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS,sCAAsC,gBAAgB,MAAM;IACrE,aAAa,EAAE;IAChB,GACD;IACE,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS,sCAAsC,gBAAgB,MAAM;IACrE,UAAU,EAAE;IACb,EACL,UACA,EAAC,OAAO,OAAM,CACf;;;AAGL,cAAa;;;;;;;;;;;;;;;AAgBf,SAAgB,SACd,KACA,oBACS;AACT,MAAK,MAAM,WAAW,mBACpB,KAAI,QAAQ,KAAK,IAAI,CACnB,QAAO;AAGX,QAAO;;;;;;;;AAST,SAAS,kBAAkB,SAAyB;AAClD,QAAO,KAAK,IAAI,KAAM,MAAM,KAAK,IAAI,GAAG,UAAU,EAAE,GAAG,KAAK,QAAQ,GAAG,IAAI"}