@sectester/core 0.35.3 → 0.36.1

package/README.md

@@ -23,7 +23,8 @@ First, you need to generate a new instance of `Configuration`.
 import { Configuration } from '@sectester/core';
 
 const config = new Configuration({
-  hostname: 'app.neuralegion.com',
+  hostname: 'app.brightsec.com',
+  projectId: 'your project ID',
   credentials: {
     token: 'your API key'
   }
@@ -43,6 +44,7 @@ Configuration can be customized using the following options:
 ```ts
 export interface ConfigurationOptions {
   hostname: string;
+  projectId: string;
   credentials?: Credentials;
   logLevel?: LogLevel;
   credentialProviders?: CredentialProvider[];
@@ -68,10 +70,31 @@ Set the application name (domain name), that is used to establish connection wit
 import { Configuration } from '@sectester/core';
 
 const config = new Configuration({
-  hostname: 'app.neuralegion.com'
+  hostname: 'app.brightsec.com'
 });
 ```
 
+#### projectId
+
+- type: `string`
+
+Set ID of the project you want to work with.
+
+```ts
+import { Configuration } from '@sectester/core';
+
+const config = new Configuration({
+  // ...
+  projectId: 'your project ID'
+});
+```
+
+> [!TIP]
+> The project ID can be found in the URL of the project page. For example, in the URL `https://app.brightsec.com/projects/1234`, the project ID is `1234`. We recommend using the dedicated project ID for each application.
+
+> [!WARNING]
+> If you omit the `projectId` parameter, we will use the default project ID. This is not recommended ecpesially if you have multiple projects.
+
 #### logLevel
 
 - type: `LogLevel`
@@ -128,78 +151,42 @@ const config = new Configuration({
 });
 ```
 
-### Messages
-
-Message is used for syncing state between SDK, application and/or external services.
-This functionality is done by sending messages outside using a concrete implementation of `Dispatcher`.
+### ApiClient
 
-Depending on the type of derived class from the `Message`, it might be addressed to only one consumer or have typically multiple consumers as well.
-When a message is sent to multiple consumers, the appropriate event handler in each consumer handles the message.
-
-The `Message` is a data-holding class, but it implements a [Visitor pattern](https://en.wikipedia.org/wiki/Visitor_pattern#:~:text=In%20object%2Doriented%20programming%20and,structures%20without%20modifying%20the%20structures.)
-to allow clients to perform operations on it using a visitor class (see `Dispatcher`) without modifying the source.
-
-For instance, you can dispatch a message in a way that is more approach you or convenient from the client's perspective.
+The `ApiClient` interface and its implementation `FetchApiClient` provide a robust way to handle HTTP requests with built-in retry logic, rate limiting, and error handling.
 
 ```ts
-import { CommandDispatcher, Command } from '@sectester/core';
-import { container } from 'tsyringe';
+import { FetchApiClient } from '@sectester/core';
 
-const dispatcher = container.resolve(CommandDispatcher);
-
-interface Payload {
-  status: 'connected' | 'disconnected';
-}
-
-class Ping extends Command<Payload, undefined> {
-  constructor(payload: Payload) {
-    super(payload);
-  }
-}
-
-// using a visitor pattern
-await new Ping({ status: 'connected' }).execute(dispatcher);
-
-// or directly
-await dispatcher.execute(new Ping({ status: 'disconnected' }));
-```
-
-Each message have a correlation ID to ensure atomicity. The regular UUID is used, but you might also want to consider other options.
-
-### Request-response
-
-The request-response message (aka `Command`) style is useful when you need to exchange messages between various external services.
-Using `Command` you can easily ensure that the service has actually received the message and sent a response back.
-
-To create an instance of `Command` use the abstract class as follows:
-
-```ts
-import { Command } from '@sectester/core';
-
-interface RequestOptions {
-  url: string;
-  method: 'GET' | 'POST' | 'PUT' | 'DELETE';
-  headers?: Record<string, string>;
-  body?: string;
-}
+const client = new FetchApiClient({
+  baseUrl: 'https://app.neuralegion.com',
+  apiKey: 'your-api-key',
+  timeout: 5000 // optional, defaults to 5000ms
+});
 
-class Request<R = unknown> extends Command<RequestOptions, R> {
-  constructor(options: RequestOptions) {
-    super(options);
-  }
-}
+// Make a request
+const response = await client.request('/api/v1/scans');
 ```
 
-To adjust its behavior you can use next options:
-
-| Option         | Description                                                                                  |
-| :------------- | -------------------------------------------------------------------------------------------- |
-| `payload`      | Message that we want to transmit to the remote service.                                      |
-| `expectReply`  | Indicates whether to wait for a reply. By default `true`.                                    |
-| `ttl`          | Period of time that command should be handled before being discarded. By default `10000` ms. |
-| `type`         | The name of a command. By default, it is the name of specific class.                         |
-| `corelationId` | Used to ensure atomicity. By default, random UUID.                                           |
-| `createdAt`    | The exact date and time the command was created.                                             |
+The `FetchApiClient` includes the following features:
+
+- Automatic retry for idempotent requests (GET, HEAD, PUT, DELETE, OPTIONS, TRACE)
+- Rate limiting handling with automatic retry based on 'Retry-After' header
+- Configurable timeout
+- API key authentication
+- Automatic handling of redirects (status 409)
+- JSON content type by default
+
+The client can be configured using the following options:
+
+| Option       | Type                                         | Default                                                      | Description                             |
+| ------------ | -------------------------------------------- | ------------------------------------------------------------ | --------------------------------------- |
+| baseUrl      | string                                       | -                                                            | Base URL for all API requests           |
+| apiKey       | string                                       | -                                                            | API key for authentication              |
+| apiKeyPrefix | string                                       | 'Api-Key'                                                    | Prefix used in the Authorization header |
+| timeout      | number                                       | 5000                                                         | Request timeout in milliseconds         |
+| userAgent    | string                                       | sectester-js/<version>                                       | User agent string                       |
+| retry        | [RetryOptions](./src/api/RetryHandler.ts#L5) | See [FetchApiClient.ts](./src/api/FetchApiClient.ts#L32-L35) | Retry options for the client            |
 
 ## License
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sectester/core",
-  "version": "0.35.3",
+  "version": "0.36.1",
   "description": "The core package can be used to obtain a config including credentials from different sources, and provide a simplified abstraction to handle events and commands.",
   "repository": {
     "type": "git",
@@ -33,18 +33,15 @@
     "brightsec"
   ],
   "secTester": {
-    "name": "sectester-js",
-    "repeaterVersion": "10.0.0"
+    "name": "sectester-js"
   },
   "dependencies": {
-    "axios": "^1.7.7",
-    "axios-rate-limit": "^1.4.0",
     "chalk": "^4.1.2",
     "form-data": "^4.0.0",
     "reflect-metadata": "^0.2.2",
     "tslib": "~2.6.3",
     "tsyringe": "^4.8.0",
-    "uuid": "^10.0.0"
+    "undici-types": "5.26.5"
   },
   "types": "./src/index.d.ts",
   "main": "./src/index.js",

package/src/DefaultProjects.d.ts

@@ -0,0 +1,7 @@
+import { Project, Projects } from './Projects';
+import { ApiClient } from './api';
+export declare class DefaultProjects implements Projects {
+    private readonly client;
+    constructor(client: ApiClient);
+    getDefaultProject(): Promise<Project>;
+}

package/src/DefaultProjects.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DefaultProjects = void 0;
+const tslib_1 = require("tslib");
+const api_1 = require("./api");
+const tsyringe_1 = require("tsyringe");
+let DefaultProjects = class DefaultProjects {
+    constructor(client) {
+        this.client = client;
+    }
+    async getDefaultProject() {
+        const filters = new URLSearchParams();
+        filters.set('predefined', true.toString());
+        const response = await this.client.request(`/api/v2/projects?${filters.toString()}`);
+        const { items: [project] } = (await response.json());
+        if (!project) {
+            throw new Error('No default project found');
+        }
+        return project;
+    }
+};
+exports.DefaultProjects = DefaultProjects;
+exports.DefaultProjects = DefaultProjects = tslib_1.__decorate([
+    (0, tsyringe_1.injectable)(),
+    tslib_1.__param(0, (0, tsyringe_1.inject)(api_1.ApiClient)),
+    tslib_1.__metadata("design:paramtypes", [Object])
+], DefaultProjects);
+//# sourceMappingURL=DefaultProjects.js.map

package/src/DefaultProjects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DefaultProjects.js","sourceRoot":"","sources":["../../../../packages/core/src/DefaultProjects.ts"],"names":[],"mappings":";;;;AACA,+BAAkC;AAClC,uCAA8C;AAGvC,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,YAAgD,MAAiB;QAAjB,WAAM,GAAN,MAAM,CAAW;IAAG,CAAC;IAE9D,KAAK,CAAC,iBAAiB;QAC5B,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CACxC,oBAAoB,OAAO,CAAC,QAAQ,EAAE,EAAE,CACzC,CAAC;QACF,MAAM,EACJ,KAAK,EAAE,CAAC,OAAO,CAAC,EACjB,GAAyB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;QAE1E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAA;AAnBY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,qBAAU,GAAE;IAEE,mBAAA,IAAA,iBAAM,EAAC,eAAS,CAAC,CAAA;;GADnB,eAAe,CAmB3B"}

package/src/Projects.d.ts

@@ -0,0 +1,8 @@
+export interface Project {
+    id: string;
+    name: string;
+}
+export interface Projects {
+    getDefaultProject(): Promise<Project>;
+}
+export declare const Projects: unique symbol;

package/src/Projects.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Projects = void 0;
+exports.Projects = Symbol('Projects');
+//# sourceMappingURL=Projects.js.map

package/src/Projects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Projects.js","sourceRoot":"","sources":["../../../../packages/core/src/Projects.ts"],"names":[],"mappings":";;;AASa,QAAA,QAAQ,GAAkB,MAAM,CAAC,UAAU,CAAC,CAAC"}

package/src/api/ApiClient.d.ts

@@ -0,0 +1,4 @@
+export interface ApiClient {
+    request(path: string, options?: RequestInit): Promise<Response>;
+}
+export declare const ApiClient: unique symbol;

package/src/api/ApiClient.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiClient = void 0;
+exports.ApiClient = Symbol('ApiClient');
+//# sourceMappingURL=ApiClient.js.map

package/src/api/ApiClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiClient.js","sourceRoot":"","sources":["../../../../../packages/core/src/api/ApiClient.ts"],"names":[],"mappings":";;;AAIa,QAAA,SAAS,GAAkB,MAAM,CAAC,WAAW,CAAC,CAAC"}

package/src/api/FetchApiClient.d.ts

@@ -0,0 +1,21 @@
+import { ApiClient } from './ApiClient';
+import { RetryConfig } from './RetryHandler';
+export interface ApiConfig {
+    baseUrl: string;
+    apiKey: string;
+    apiKeyPrefix?: string;
+    timeout?: number;
+    userAgent?: string;
+    retry?: Partial<RetryConfig>;
+}
+export declare class FetchApiClient implements ApiClient {
+    private readonly config;
+    private static readonly IDEMPOTENT_METHODS;
+    private readonly retryHandler;
+    private readonly rateLimiter;
+    constructor(config: ApiConfig);
+    request(path: string, options?: RequestInit): Promise<Response>;
+    private makeRequest;
+    private handleResponse;
+    private createHeaders;
+}

package/src/api/FetchApiClient.js

@@ -0,0 +1,95 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FetchApiClient = void 0;
+const ApiError_1 = require("../exceptions/ApiError");
+const RateLimitError_1 = require("../exceptions/RateLimitError");
+const RateLimiter_1 = require("./RateLimiter");
+const RetryHandler_1 = require("./RetryHandler");
+const node_util_1 = require("node:util");
+const node_crypto_1 = require("node:crypto");
+class FetchApiClient {
+    constructor(config) {
+        this.config = config;
+        this.rateLimiter = new RateLimiter_1.RateLimiter();
+        this.retryHandler = new RetryHandler_1.RetryHandler({
+            maxRetries: 3,
+            baseDelay: 1000,
+            maxDelay: 30000,
+            jitterFactor: 0.3,
+            ...config.retry
+        });
+    }
+    request(path, options) {
+        var _a;
+        const url = new URL(path, this.config.baseUrl);
+        const requestOptions = {
+            redirect: 'follow',
+            keepalive: true,
+            ...options,
+            headers: this.createHeaders(options === null || options === void 0 ? void 0 : options.headers),
+            method: ((_a = options === null || options === void 0 ? void 0 : options.method) !== null && _a !== void 0 ? _a : 'GET').toUpperCase()
+        };
+        const idempotent = FetchApiClient.IDEMPOTENT_METHODS.has(requestOptions.method);
+        return this.retryHandler.executeWithRetry(() => this.makeRequest(url, requestOptions), {
+            idempotent,
+            signal: requestOptions.signal
+        });
+    }
+    async makeRequest(url, options) {
+        var _a, _b;
+        const signal = (_a = options === null || options === void 0 ? void 0 : options.signal) !== null && _a !== void 0 ? _a : AbortSignal.timeout((_b = this.config.timeout) !== null && _b !== void 0 ? _b : 10000);
+        const response = await fetch(url, {
+            ...options,
+            signal
+        });
+        return this.handleResponse(response);
+    }
+    // eslint-disable-next-line complexity
+    async handleResponse(response) {
+        var _a;
+        if (!response.ok) {
+            if (response.status === 409 && response.headers.has('location')) {
+                const locationPath = response.headers.get('location');
+                // eslint-disable-next-line max-depth
+                if (locationPath) {
+                    // Handle both absolute and relative URLs
+                    const locationUrl = new URL(locationPath, this.config.baseUrl);
+                    return this.request(locationUrl.toString());
+                }
+            }
+            const rateLimitInfo = this.rateLimiter.extractRateLimitInfo(response);
+            const contentType = response.headers.get('content-type');
+            const mimeType = contentType ? new node_util_1.MIMEType(contentType) : undefined;
+            const responseBody = (mimeType === null || mimeType === void 0 ? void 0 : mimeType.type) === 'text' ? await response.clone().text() : undefined;
+            if (response.status === 429) {
+                const retryAfter = parseInt((_a = response.headers.get('retry-after')) !== null && _a !== void 0 ? _a : rateLimitInfo.reset.toString(), 10);
+                throw new RateLimitError_1.RateLimitError(response, retryAfter, responseBody);
+            }
+            throw new ApiError_1.ApiError(response, responseBody);
+        }
+        return response;
+    }
+    createHeaders(headersInit = {}) {
+        var _a;
+        const headers = new Headers({
+            ...headersInit,
+            'idempotency-key': (0, node_crypto_1.randomUUID)(),
+            ...(this.config.userAgent ? { 'user-agent': this.config.userAgent } : {})
+        });
+        if (this.config.apiKey) {
+            const prefix = (_a = this.config.apiKeyPrefix) !== null && _a !== void 0 ? _a : 'Api-Key';
+            headers.set('authorization', `${prefix} ${this.config.apiKey}`);
+        }
+        return headers;
+    }
+}
+exports.FetchApiClient = FetchApiClient;
+FetchApiClient.IDEMPOTENT_METHODS = new Set([
+    'GET',
+    'HEAD',
+    'PUT',
+    'DELETE',
+    'OPTIONS',
+    'TRACE'
+]);
+//# sourceMappingURL=FetchApiClient.js.map

package/src/api/FetchApiClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FetchApiClient.js","sourceRoot":"","sources":["../../../../../packages/core/src/api/FetchApiClient.ts"],"names":[],"mappings":";;;AAAA,qDAAkD;AAClD,iEAA8D;AAE9D,+CAA4C;AAC5C,iDAA2D;AAC3D,yCAAqC;AACrC,6CAAyC;AAWzC,MAAa,cAAc;IAYzB,YAA6B,MAAiB;QAAjB,WAAM,GAAN,MAAM,CAAW;QAF7B,gBAAW,GAAG,IAAI,yBAAW,EAAE,CAAC;QAG/C,IAAI,CAAC,YAAY,GAAG,IAAI,2BAAY,CAAC;YACnC,UAAU,EAAE,CAAC;YACb,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,KAAM;YAChB,YAAY,EAAE,GAAG;YACjB,GAAG,MAAM,CAAC,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;IAEM,OAAO,CAAC,IAAY,EAAE,OAAqB;;QAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,cAAc,GAAG;YACrB,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,IAAI;YACf,GAAG,OAAO;YACV,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAC;YAC7C,MAAM,EAAE,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,mCAAI,KAAK,CAAC,CAAC,WAAW,EAAE;SAC3B,CAAC;QAExB,MAAM,UAAU,GAAG,cAAc,CAAC,kBAAkB,CAAC,GAAG,CACtD,cAAc,CAAC,MAAM,CACtB,CAAC;QAEF,OAAO,IAAI,CAAC,YAAY,CAAC,gBAAgB,CACvC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,EAC3C;YACE,UAAU;YACV,MAAM,EAAE,cAAc,CAAC,MAAM;SAC9B,CACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,GAAiB,EACjB,OAAqB;;QAErB,MAAM,MAAM,GACV,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,mCAAI,WAAW,CAAC,OAAO,CAAC,MAAA,IAAI,CAAC,MAAM,CAAC,OAAO,mCAAI,KAAM,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,GAAG,OAAO;YACV,MAAM;SACP,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,sCAAsC;IAC9B,KAAK,CAAC,cAAc,CAAC,QAAkB;;QAC7C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChE,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACtD,qCAAqC;gBACrC,IAAI,YAAY,EAAE,CAAC;oBACjB,yCAAyC;oBACzC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBAE/D,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;YAED,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YACtE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,oBAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAErE,MAAM,YAAY,GAChB,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,IAAI,MAAK,MAAM,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAExE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,UAAU,GAAG,QAAQ,CACzB,MAAA,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,mCAAI,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,EACrE,EAAE,CACH,CAAC;gBACF,MAAM,IAAI,+BAAc,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YAC/D,CAAC;YAED,MAAM,IAAI,mBAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,aAAa,CACnB,cAAkD,EAAE;;QAEpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;YAC1B,GAAG,WAAW;YACd,iBAAiB,EAAE,IAAA,wBAAU,GAAE;YAC/B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1E,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,MAAA,IAAI,CAAC,MAAM,CAAC,YAAY,mCAAI,SAAS,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;;AA7GH,wCA8GC;AA7GyB,iCAAkB,GAAwB,IAAI,GAAG,CAAC;IACxE,KAAK;IACL,MAAM;IACN,KAAK;IACL,QAAQ;IACR,SAAS;IACT,OAAO;CACR,CAAC,AAPwC,CAOvC"}

package/src/api/RateLimiter.d.ts

@@ -0,0 +1,16 @@
+export interface RateLimitPolicy {
+    limit: number;
+    window: number;
+    type: string;
+}
+export interface RateLimitInfo {
+    limit: number;
+    remaining: number;
+    reset: number;
+    policy?: RateLimitPolicy;
+}
+export declare class RateLimiter {
+    extractRateLimitInfo(response: Response): RateLimitInfo;
+    parseRateLimitHeader(header: string | null): Partial<RateLimitInfo>;
+    parsePolicyHeader(header: string | null): RateLimitPolicy | undefined;
+}

package/src/api/RateLimiter.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RateLimiter = void 0;
+class RateLimiter {
+    extractRateLimitInfo(response) {
+        var _a, _b, _c;
+        const rateLimitHeader = response.headers.get('ratelimit');
+        const policyHeader = response.headers.get('ratelimit-policy');
+        const rateLimit = this.parseRateLimitHeader(rateLimitHeader);
+        const policy = this.parsePolicyHeader(policyHeader);
+        return {
+            policy,
+            limit: (_a = rateLimit.limit) !== null && _a !== void 0 ? _a : 0,
+            remaining: (_b = rateLimit.remaining) !== null && _b !== void 0 ? _b : 0,
+            reset: (_c = rateLimit.reset) !== null && _c !== void 0 ? _c : 0
+        };
+    }
+    parseRateLimitHeader(header) {
+        if (!header)
+            return {};
+        const parts = header.split(',');
+        const result = {};
+        parts.forEach(part => {
+            const [key, value] = part.split('=');
+            switch (key) {
+                case 'limit':
+                    result.limit = parseInt(value, 10);
+                    break;
+                case 'remaining':
+                    result.remaining = parseInt(value, 10);
+                    break;
+                case 'reset':
+                    result.reset = parseInt(value, 10);
+                    break;
+            }
+        });
+        return result;
+    }
+    parsePolicyHeader(header) {
+        if (!header)
+            return undefined;
+        const parts = header.split(';');
+        if (parts.length < 3)
+            return undefined;
+        const result = {
+            limit: 0,
+            window: 0,
+            type: ''
+        };
+        const [limit, ...rest] = parts;
+        result.limit = parseInt(limit, 10);
+        rest.forEach(part => {
+            const [key, value] = part
+                .split('=', 2)
+                .map(s => s.trim());
+            switch (key) {
+                case 'window':
+                    result.window = parseInt(value, 10);
+                    break;
+                case 'type':
+                    result.type = value;
+                    break;
+            }
+        });
+        if (result.limit && result.window && result.type) {
+            return result;
+        }
+        return undefined;
+    }
+}
+exports.RateLimiter = RateLimiter;
+//# sourceMappingURL=RateLimiter.js.map

package/src/api/RateLimiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RateLimiter.js","sourceRoot":"","sources":["../../../../../packages/core/src/api/RateLimiter.ts"],"names":[],"mappings":";;;AAaA,MAAa,WAAW;IACf,oBAAoB,CAAC,QAAkB;;QAC5C,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAE9D,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAEpD,OAAO;YACL,MAAM;YACN,KAAK,EAAE,MAAA,SAAS,CAAC,KAAK,mCAAI,CAAC;YAC3B,SAAS,EAAE,MAAA,SAAS,CAAC,SAAS,mCAAI,CAAC;YACnC,KAAK,EAAE,MAAA,SAAS,CAAC,KAAK,mCAAI,CAAC;SAC5B,CAAC;IACJ,CAAC;IAEM,oBAAoB,CAAC,MAAqB;QAC/C,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAEvB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAA2B,EAAE,CAAC;QAE1C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YACnB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAa,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/C,QAAQ,GAAG,EAAE,CAAC;gBACZ,KAAK,OAAO;oBACV,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACnC,MAAM;gBACR,KAAK,WAAW;oBACd,MAAM,CAAC,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACvC,MAAM;gBACR,KAAK,OAAO;oBACV,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACnC,MAAM;YACV,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,iBAAiB,CAAC,MAAqB;QAC5C,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAE9B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAEvC,MAAM,MAAM,GAAoB;YAC9B,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,CAAC;YACT,IAAI,EAAE,EAAE;SACT,CAAC;QAEF,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAa,KAAK,CAAC;QAEzC,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEnC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YAClB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAqB,IAAI;iBACxC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;iBACb,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAqB,CAAC;YAC1C,QAAQ,GAAG,EAAE,CAAC;gBACZ,KAAK,QAAQ;oBACX,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACpC,MAAM;gBACR,KAAK,MAAM;oBACT,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC;oBACpB,MAAM;YACV,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YACjD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AA5ED,kCA4EC"}

package/src/api/RetryHandler.d.ts

@@ -0,0 +1,22 @@
+export interface RetryConfig {
+    maxRetries: number;
+    baseDelay: number;
+    maxDelay: number;
+    jitterFactor: number;
+}
+export interface RetryOptions {
+    idempotent?: boolean;
+    signal?: AbortSignal;
+}
+export declare class RetryHandler {
+    private readonly config;
+    private static readonly RETRIABLE_STATUS_CODES;
+    constructor(config: RetryConfig);
+    executeWithRetry<T>(operation: () => Promise<T>, options?: RetryOptions): Promise<T>;
+    private handleRetryableError;
+    private isEligibleForRetry;
+    private isRetryableError;
+    private isNetworkError;
+    private isTimeoutError;
+    private calculateBackoff;
+}

package/src/api/RetryHandler.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RetryHandler = void 0;
+const ApiError_1 = require("../exceptions/ApiError");
+const RateLimitError_1 = require("../exceptions/RateLimitError");
+const promises_1 = require("node:timers/promises");
+class RetryHandler {
+    constructor(config) {
+        this.config = config;
+    }
+    async executeWithRetry(operation, options = {}) {
+        const { idempotent = true, signal } = options;
+        let attempt = 0;
+        for (;;) {
+            // Check if the operation has been aborted
+            if (signal === null || signal === void 0 ? void 0 : signal.aborted) {
+                throw signal.reason;
+            }
+            try {
+                return await operation();
+            }
+            catch (error) {
+                // eslint-disable-next-line max-depth
+                if (signal === null || signal === void 0 ? void 0 : signal.aborted) {
+                    throw error;
+                }
+                await this.handleRetryableError(error, attempt, idempotent, signal);
+                attempt++;
+            }
+        }
+    }
+    async handleRetryableError(error, attempt, idempotent, signal) {
+        if (attempt >= this.config.maxRetries) {
+            throw error;
+        }
+        if (!this.isEligibleForRetry(error, idempotent)) {
+            throw error;
+        }
+        const delay = error instanceof RateLimitError_1.RateLimitError
+            ? error.retryAfter * 1000
+            : this.calculateBackoff(attempt);
+        await (0, promises_1.setTimeout)(delay, undefined, { signal });
+    }
+    isEligibleForRetry(error, idempotent) {
+        return ((this.isRetryableError(error) && idempotent) ||
+            this.isNetworkError(error) ||
+            error instanceof RateLimitError_1.RateLimitError);
+    }
+    isRetryableError(error) {
+        // Don't retry if the operation was deliberately aborted
+        if (error instanceof DOMException && error.name === 'AbortError') {
+            return false;
+        }
+        return ((error instanceof ApiError_1.ApiError &&
+            RetryHandler.RETRIABLE_STATUS_CODES.has(error.response.status)) ||
+            this.isTimeoutError(error));
+    }
+    isNetworkError(error) {
+        return (error instanceof TypeError &&
+            (error.message.includes('fetch failed') ||
+                error.message.includes('terminated')));
+    }
+    isTimeoutError(error) {
+        return error instanceof DOMException && error.name === 'TimeoutError';
+    }
+    calculateBackoff(attempt) {
+        const delay = Math.min(this.config.maxDelay, this.config.baseDelay * Math.pow(2, attempt));
+        const jitter = delay * this.config.jitterFactor * Math.random();
+        return delay + jitter;
+    }
+}
+exports.RetryHandler = RetryHandler;
+RetryHandler.RETRIABLE_STATUS_CODES = new Set([408, 409, 429, 500, 502, 503, 504]);
+//# sourceMappingURL=RetryHandler.js.map

package/src/api/RetryHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RetryHandler.js","sourceRoot":"","sources":["../../../../../packages/core/src/api/RetryHandler.ts"],"names":[],"mappings":";;;AAAA,qDAAkD;AAClD,iEAA8D;AAC9D,mDAAkD;AAclD,MAAa,YAAY;IAKvB,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAE7C,KAAK,CAAC,gBAAgB,CAC3B,SAA2B,EAC3B,UAAwB,EAAE;QAE1B,MAAM,EAAE,UAAU,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAC9C,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,SAAS,CAAC;YACR,0CAA0C;YAC1C,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,MAAM,CAAC,MAAM,CAAC;YACtB,CAAC;YAED,IAAI,CAAC;gBACH,OAAO,MAAM,SAAS,EAAE,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,qCAAqC;gBACrC,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,EAAE,CAAC;oBACpB,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;gBACpE,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,KAAc,EACd,OAAe,EACf,UAAmB,EACnB,MAAoB;QAEpB,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACtC,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GACT,KAAK,YAAY,+BAAc;YAC7B,CAAC,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI;YACzB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAErC,MAAM,IAAA,qBAAU,EAAC,KAAK,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;IAEO,kBAAkB,CAAC,KAAc,EAAE,UAAmB;QAC5D,OAAO,CACL,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC;YAC5C,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;YAC1B,KAAK,YAAY,+BAAc,CAChC,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,KAAc;QACrC,wDAAwD;QACxD,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CACL,CAAC,KAAK,YAAY,mBAAQ;YACxB,YAAY,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAC3B,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,KAAc;QACnC,OAAO,CACL,KAAK,YAAY,SAAS;YAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;gBACrC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACxC,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,KAAc;QACnC,OAAO,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;IACxE,CAAC;IAEO,gBAAgB,CAAC,OAAe;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAC7C,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAEhE,OAAO,KAAK,GAAG,MAAM,CAAC;IACxB,CAAC;;AAjGH,oCAkGC;AAjGyB,mCAAsB,GAAwB,IAAI,GAAG,CAC3E,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CACpC,CAAC"}

package/src/api/index.d.ts

@@ -0,0 +1,4 @@
+export * from './FetchApiClient';
+export * from './RateLimiter';
+export * from './RetryHandler';
+export * from './ApiClient';

package/src/api/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./FetchApiClient"), exports);
+tslib_1.__exportStar(require("./RateLimiter"), exports);
+tslib_1.__exportStar(require("./RetryHandler"), exports);
+tslib_1.__exportStar(require("./ApiClient"), exports);
+//# sourceMappingURL=index.js.map

package/src/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/core/src/api/index.ts"],"names":[],"mappings":";;;AAAA,2DAAiC;AACjC,wDAA8B;AAC9B,yDAA+B;AAC/B,sDAA4B"}