@typeship-ax/mcp 0.8.0 → 0.9.1

package/dist/api-identity.d.ts

@@ -0,0 +1,40 @@
+/** Identity comes from the authenticated API response, including opaque-token APIs. */
+export type IdentityKind = "subject" | "account" | "organization";
+export type IdentityPolicy = Partial<Record<IdentityKind, string>>;
+export type ApiIdentity = Partial<Record<IdentityKind, string | null>>;
+export interface VerifiedIdentity {
+    values: ApiIdentity;
+    checkedAt: string;
+}
+export interface IdentityConfiguration {
+    operation: string;
+    fields: IdentityPolicy;
+}
+export declare function validateIdentityPointer(pointer: unknown): asserts pointer is string;
+export declare function identityPolicyOf(auth?: {
+    identitySubject?: string | null;
+    identityAccount?: string | null;
+    identityOrganization?: string | null;
+}): IdentityPolicy;
+export declare function readApiIdentity(data: unknown, policy: IdentityPolicy): ApiIdentity;
+export declare function assertApiIdentity(expected: ApiIdentity, actual: ApiIdentity): void;
+/** No redirects, bounded decoded response, and one deadline including body reads. */
+export declare function identityFetch(apiBaseUrl: string): typeof fetch;
+type IdentityResult = {
+    ok: boolean;
+    data?: unknown;
+    error?: {
+        status?: number;
+    };
+};
+export declare function identityResult(client: unknown, operation: {
+    resource: string;
+    method: string;
+}): Promise<IdentityResult>;
+export declare function verifyClientIdentity(createClient: (options: Record<string, unknown>) => unknown, options: Record<string, unknown>, operation: {
+    resource: string;
+    method: string;
+}, policy: IdentityPolicy, expected?: ApiIdentity): Promise<VerifiedIdentity>;
+export declare function verifyApiIdentity(read: (anonymous: boolean) => Promise<IdentityResult>, policy: IdentityPolicy, expected?: ApiIdentity): Promise<VerifiedIdentity>;
+export {};
+//# sourceMappingURL=api-identity.d.ts.map

package/dist/api-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-identity.d.ts","sourceRoot":"","sources":["../src/api-identity.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,cAAc,CAAC;AAClE,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;AACnE,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;AACvE,MAAM,WAAW,gBAAgB;IAAG,MAAM,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAC5E,MAAM,WAAW,qBAAqB;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE;AAEpF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAInF;AAED,wBAAgB,gBAAgB,CAAC,IAAI,GAAE;IAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GAAG,cAAc,CAKtK;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,GAAG,WAAW,CAelF;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,GAAG,IAAI,CAIlF;AAED,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,KAAK,CA8B9D;AAED,KAAK,cAAc,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AACnF,wBAAsB,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAI9H;AAED,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAI9P;AACD,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,KAAK,OAAO,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CASxK"}

package/dist/api-identity.js

@@ -0,0 +1,128 @@
+export function validateIdentityPointer(pointer) {
+    if (typeof pointer !== "string" || !pointer.startsWith("/") || pointer.length > 512 || /[\x00-\x1f\x7f]/.test(pointer) || /~(?:[^01]|$)/.test(pointer)) {
+        throw new Error("Identity fields must be JSON Pointers starting with /, at most 512 characters, with ~0 and ~1 escapes.");
+    }
+}
+export function identityPolicyOf(auth = {}) {
+    const entries = [["subject", auth.identitySubject], ["account", auth.identityAccount], ["organization", auth.identityOrganization]];
+    const policy = {};
+    for (const [kind, pointer] of entries)
+        if (pointer !== undefined && pointer !== null) {
+            validateIdentityPointer(pointer);
+            policy[kind] = pointer;
+        }
+    return policy;
+}
+export function readApiIdentity(data, policy) {
+    const result = {};
+    if (!Object.keys(policy).length)
+        throw new Error("Configure at least one identity field before verifying a session.");
+    for (const [kind, pointer] of Object.entries(policy)) {
+        validateIdentityPointer(pointer);
+        let value = data;
+        for (const part of pointer.slice(1).split("/").map((part) => part.replaceAll("~1", "/").replaceAll("~0", "~"))) {
+            if (!value || typeof value !== "object" || !Object.hasOwn(value, part))
+                throw new Error("The API identity response is missing a configured field. Check the identity field mapping.");
+            value = value[part];
+        }
+        if (value === null && kind === "organization")
+            result[kind] = null;
+        else if ((typeof value === "string" && value.length > 0 && value.length <= 512 && !/[\x00-\x1f\x7f]/.test(value)) || (typeof value === "number" && Number.isSafeInteger(value)))
+            result[kind] = String(value);
+        else
+            throw new Error("The API identity field must return a nonempty ID string or safe integer. Only an organization may be null.");
+    }
+    return result;
+}
+export function assertApiIdentity(expected, actual) {
+    if (!Object.keys(expected).length || Object.entries(expected).some(([key, value]) => !Object.hasOwn(actual, key) || actual[key] !== value)) {
+        throw new Error("The authenticated account, subject or organization does not match this login. Sign in again with the intended account and organization.");
+    }
+}
+/** No redirects, bounded decoded response, and one deadline including body reads. */
+export function identityFetch(apiBaseUrl) {
+    const base = new URL(apiBaseUrl);
+    if ((base.protocol !== "https:" && !(base.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(base.hostname))) || base.username || base.password || base.search || base.hash)
+        throw new Error("Identity verification requires an HTTPS API URL; loopback HTTP is allowed for development.");
+    const basePath = base.pathname.replace(/\/+$/, "");
+    return async (input, init) => {
+        const url = new URL(input instanceof Request ? input.url : String(input));
+        if (url.origin !== base.origin || (url.pathname !== basePath && !url.pathname.startsWith(basePath + "/")) || url.username || url.password || url.hash)
+            throw new Error("The identity read must stay on the configured API.");
+        const abort = new AbortController();
+        const timeout = setTimeout(() => abort.abort(), 10_000);
+        try {
+            const signal = init?.signal ? AbortSignal.any([init.signal, abort.signal]) : abort.signal;
+            const response = await fetch(input, { ...init, redirect: "error", signal });
+            const reader = response.body?.getReader();
+            const chunks = [];
+            let size = 0;
+            if (reader) {
+                try {
+                    while (true) {
+                        const chunk = await reader.read();
+                        if (chunk.done)
+                            break;
+                        size += chunk.value.byteLength;
+                        if (size > 1_048_576) {
+                            abort.abort();
+                            throw new Error();
+                        }
+                        chunks.push(chunk.value);
+                    }
+                }
+                finally {
+                    reader.releaseLock();
+                }
+            }
+            const bytes = new Uint8Array(size);
+            let offset = 0;
+            for (const chunk of chunks) {
+                bytes.set(chunk, offset);
+                offset += chunk.byteLength;
+            }
+            return new Response([204, 205, 304].includes(response.status) ? null : bytes, { status: response.status, statusText: response.statusText, headers: response.headers });
+        }
+        catch {
+            throw new Error("The API identity read failed. Check the API URL, connectivity and response size before signing in again.");
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    };
+}
+export async function identityResult(client, operation) {
+    const target = client[operation.resource];
+    if (!target?.[operation.method])
+        throw new Error("The configured identity operation is not available in this package.");
+    return target[operation.method]();
+}
+export function verifyClientIdentity(createClient, options, operation, policy, expected) {
+    if (typeof options.baseUrl !== "string")
+        throw new Error("Configure the API base URL before verifying identity.");
+    const shared = { baseUrl: options.baseUrl, environment: options.environment, fetch: identityFetch(options.baseUrl), maxRetries: 0, timeoutMs: 10_000 };
+    return verifyApiIdentity((anonymous) => identityResult(createClient(anonymous ? shared : { ...options, ...shared }), operation), policy, expected);
+}
+export async function verifyApiIdentity(read, policy, expected) {
+    let anonymous, authenticated;
+    try {
+        anonymous = await read(true);
+    }
+    catch {
+        throw new Error("Could not verify that the identity read rejects anonymous access.");
+    }
+    if (anonymous.ok || ![401, 403].includes(anonymous.error?.status ?? 0))
+        throw new Error("The identity read must reject anonymous access with 401 or 403 before login can be verified.");
+    try {
+        authenticated = await read(false);
+    }
+    catch {
+        throw new Error("The API identity read failed with the new credential. Check the API configuration and granted permissions.");
+    }
+    if (!authenticated.ok)
+        throw new Error("The API did not accept the new login credential for its identity read. Check the audience, scopes and account access.");
+    const values = readApiIdentity(authenticated.data, policy);
+    if (expected)
+        assertApiIdentity(expected, values);
+    return { values, checkedAt: new Date().toISOString() };
+}

package/dist/auth-profiles.d.ts

@@ -0,0 +1,30 @@
+export interface ProfileConfig {
+    baseUrl?: string;
+    environment?: string;
+    docsUrl?: string;
+}
+export interface ProfileContext {
+    name: string;
+    directory: string;
+    source: "flag" | "environment" | "selected" | "default";
+}
+export declare function profileName(value: string): string;
+export declare function profileDirectory(root: string, name: string): string;
+export declare function resolveProfile(root: string, options?: {
+    flag?: string;
+    environment?: string;
+    allowMissing?: boolean;
+}): ProfileContext;
+export declare function selectProfile(root: string, name: string): void;
+export declare function readProfileConfig(directory: string): ProfileConfig;
+export declare function updateProfileConfig(directory: string, change: (current: ProfileConfig) => ProfileConfig): Promise<void>;
+export declare function listProfiles(root: string): {
+    name: string;
+    config: ProfileConfig;
+    hasSavedCredentials: boolean;
+}[];
+/** Removing a profile requires logout first. Hold the settings and both storage
+ * locks so a concurrent login cannot be deleted underneath its transaction. */
+export declare function removeProfile(root: string, name: string): Promise<void>;
+export declare function profileFlag(args: string[]): string | undefined;
+//# sourceMappingURL=auth-profiles.d.ts.map

package/dist/auth-profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-profiles.d.ts","sourceRoot":"","sources":["../src/auth-profiles.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,aAAa;IAAG,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;AAC3F,MAAM,WAAW,cAAc;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,UAAU,GAAG,SAAS,CAAA;CAAE;AAE5H,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGjD;AAqBD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAOnE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,cAAc,CAa1I;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAI9D;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,CAIlE;AAED,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7H;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC;IAAC,mBAAmB,EAAE,OAAO,CAAA;CAAE,EAAE,CAYlH;AAED;+EAC+E;AAC/E,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAc7E;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAS9D"}

package/dist/auth-profiles.js

@@ -0,0 +1,138 @@
+import { randomBytes } from "node:crypto";
+import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { FileCredentialStore } from "./oauth-session.js";
+export function profileName(value) {
+    if (!/^[a-z0-9][a-z0-9_-]{0,63}$/.test(value) || /^(con|prn|aux|nul|com[0-9]|lpt[0-9])$/.test(value))
+        throw new Error("Profile names use 1–64 lowercase letters, numbers, hyphens or underscores and cannot be reserved OS names.");
+    return value;
+}
+function json(path) {
+    try {
+        const value = JSON.parse(readFileSync(path, "utf8"));
+        if (!value || typeof value !== "object" || Array.isArray(value))
+            throw new Error();
+        return value;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw new Error("Cannot read profile settings. Repair the settings file before retrying.");
+    }
+}
+function write(directory, file, value) {
+    mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const temporary = join(directory, ".profile-" + randomBytes(16).toString("hex") + ".tmp");
+    try {
+        writeFileSync(temporary, JSON.stringify(value, null, 2) + "\n", { flag: "wx", mode: 0o600, flush: true });
+        renameSync(temporary, join(directory, file));
+    }
+    finally {
+        rmSync(temporary, { force: true });
+    }
+}
+export function profileDirectory(root, name) {
+    const directory = join(root, "profiles", profileName(name));
+    try {
+        const entry = lstatSync(directory);
+        if (entry.isSymbolicLink() || !entry.isDirectory())
+            throw new Error("A profile must be a directory, not a link or another file.");
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    return directory;
+}
+export function resolveProfile(root, options = {}) {
+    let name, source;
+    if (options.flag !== undefined) {
+        name = profileName(options.flag);
+        source = "flag";
+    }
+    else if (options.environment !== undefined) {
+        name = profileName(options.environment);
+        source = "environment";
+    }
+    else {
+        const settings = json(join(root, "profiles.json"));
+        if (settings && typeof settings.selected !== "string")
+            throw new Error("The selected profile setting is invalid. Pass --profile default to recover.");
+        name = settings ? profileName(settings.selected) : "default";
+        source = settings ? "selected" : "default";
+    }
+    const directory = profileDirectory(root, name);
+    if (name !== "default" && !options.allowMissing && !existsSync(directory))
+        throw new Error("Profile '" + name + "' does not exist. Run login --profile " + name + " or configure that profile first.");
+    return { name, directory, source };
+}
+export function selectProfile(root, name) {
+    const directory = profileDirectory(root, name);
+    if (name !== "default" && !existsSync(directory))
+        throw new Error("Profile '" + name + "' does not exist. Log in or configure it before selecting it.");
+    write(root, "profiles.json", { selected: name });
+}
+export function readProfileConfig(directory) {
+    const value = json(join(directory, "config.json")) ?? {};
+    for (const [key, field] of Object.entries(value))
+        if (!["baseUrl", "environment", "docsUrl"].includes(key) || typeof field !== "string")
+            throw new Error("Profile settings contain an unknown field or a non-string value.");
+    return value;
+}
+export async function updateProfileConfig(directory, change) {
+    await new FileCredentialStore(join(directory, "config.json")).withLock(async () => { write(directory, "config.json", change(readProfileConfig(directory))); });
+}
+export function listProfiles(root) {
+    const names = new Set(["default"]);
+    try {
+        for (const entry of readdirSync(join(root, "profiles"), { withFileTypes: true })) {
+            if (!entry.isDirectory() || entry.isSymbolicLink())
+                continue;
+            try {
+                names.add(profileName(entry.name));
+            }
+            catch { /* unrelated directories are not profiles */ }
+        }
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    return [...names].sort().map((name) => {
+        const directory = profileDirectory(root, name);
+        return { name, config: readProfileConfig(directory), hasSavedCredentials: ["credentials.enc", "credentials.json"].some((file) => existsSync(join(directory, file))) };
+    });
+}
+/** Removing a profile requires logout first. Hold the settings and both storage
+ * locks so a concurrent login cannot be deleted underneath its transaction. */
+export async function removeProfile(root, name) {
+    const directory = profileDirectory(root, name);
+    if (!existsSync(directory))
+        throw new Error("Profile '" + name + "' does not exist.");
+    const paths = ["config.json", "credentials.enc", "credentials.json"].map((file) => join(directory, file));
+    await new FileCredentialStore(paths[0]).withLock(async () => {
+        await new FileCredentialStore(paths[1]).withLock(async () => {
+            await new FileCredentialStore(paths[2]).withLock(async () => {
+                if (paths.slice(1).some((path) => existsSync(path)))
+                    throw new Error("Log out of both credential stores for profile '" + name + "' before removing it. Use logout --profile " + name + ".");
+                const selected = json(join(root, "profiles.json"));
+                if (selected?.selected === name)
+                    selectProfile(root, "default");
+                rmSync(directory, { recursive: true });
+            });
+        });
+    });
+}
+export function profileFlag(args) {
+    let value;
+    for (let i = 0; i < args.length; i++) {
+        if (args[i] === "--profile") {
+            value = args[++i];
+            if (value === undefined || value.startsWith("--"))
+                throw new Error("--profile requires a profile name.");
+        }
+        else if (args[i].startsWith("--profile="))
+            value = args[i].slice("--profile=".length);
+    }
+    return value === undefined ? undefined : profileName(value);
+}

package/dist/core/http.d.ts

@@ -64,6 +64,14 @@ export declare class ApiError<S extends number = number, B = unknown> extends Er
 export declare class UnexpectedApiError extends ApiError<number, unknown> {
     constructor(status: number, body: unknown, response: ResponseMeta);
 }
+/** A successful response declared JSON but carried a body that could not be parsed. */
+export declare class ResponseParseError extends Error {
+    readonly status: number;
+    readonly body: string;
+    readonly response: ResponseMeta;
+    readonly cause?: unknown;
+    constructor(body: string, response: ResponseMeta, cause?: unknown);
+}
 export interface Violation {
     path: string;
     message: string;
@@ -82,13 +90,14 @@ export declare class ValidationError extends Error {
  * are ignored: validation can miss drift but never false-alarms.
  */
 export declare function validateAgainstSchema(value: unknown, schema: unknown, path: string, out: Violation[], defs?: Record<string, unknown>): void;
-/** The request never produced an HTTP response (network failure, timeout, abort). */
+/** The request failed before a complete HTTP response arrived (network failure, timeout, abort, or truncated body). */
 export declare class TransportError extends Error {
     readonly cause?: unknown;
     constructor(message: string, cause?: unknown);
 }
 type ErrorCtor = new (body: any, response: ResponseMeta) => ApiError<number, unknown>;
 export interface CoreRequest {
+    security?: Record<string, string[]>[];
     method: string;
     path: string;
     query?: Record<string, unknown>;
@@ -119,7 +128,13 @@ export interface RetryPolicy {
     /** Also retry non-idempotent methods (POST/PATCH). */
     retryNonIdempotent?: boolean;
 }
+export interface SecurityCredential {
+    headers?: Record<string, AuthValue>;
+    query?: Record<string, AuthValue>;
+}
 export interface CoreConfig {
+    /** Named credentials are selected using each operation's requirements. */
+    credentials?: Record<string, SecurityCredential>;
     baseUrl: string;
     headers: Record<string, AuthValue>;
     /** Auth carried as query parameters (apiKey-in-query schemes). */
@@ -177,7 +192,7 @@ export interface DebugEvent {
     /** 1-based; >1 means this was a retry */
     attempt: number;
     requestId?: string;
-    /** transport failure message, when there was no response */
+    /** transport failure message, when the request failed before a complete response */
     error?: string;
 }
 export declare class HttpCore {

package/dist/core/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/core/http.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,mCAAmC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB;;iCAE6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;qCACiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAElE;8CAC8C;AAC9C,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;CACjB;AAGD;;;;GAIG;AACH,MAAM,MAAM,SAAS,CAAC,CAAC,EAAE,CAAC,IACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,CAAC,CAAC;IAAC,QAAQ,EAAE,YAAY,CAAA;CAAE,GAC7C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,YAAY,CAAA;CAAE,CAAC;AAErD,0EAA0E;AAC1E,wBAAgB,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAIvD;AAED,gDAAgD;AAChD,qBAAa,QAAQ,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,OAAO,CAAE,SAAQ,KAAK;IACzE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;gBAEpB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY;CAOxE;AAED,kDAAkD;AAClD,qBAAa,kBAAmB,SAAQ,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;gBACnD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY;CAGlE;AAOD,MAAM,WAAW,SAAS;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAE5D;;0CAE0C;AAC1C,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,UAAU,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC;gBACrB,SAAS,EAAE,SAAS,GAAG,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE;CAQvE;AAeD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CA+E3I;AAqBD,qFAAqF;AACrF,qBAAa,cAAe,SAAQ,KAAK;IACvC,SAAkB,KAAK,CAAC,EAAE,OAAO,CAAC;gBAEtB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAK7C;AAED,KAAK,SAAS,GAAG,KAAK,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,KAAK,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEtF,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC7D,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnC,qDAAqD;IACrD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;iDAC6C;IAC7C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;sEACkE;IAClE,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnC,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACjC,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;qDACiD;IACjD,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnF;;6BAEyB;IACzB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9F;sDACkD;IAClD,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACpC;;yCAEqC;IACrC,QAAQ,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAA;KAAE,CAAC;IAC7E,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,CAAC,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC3D,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,yEAAyE;IACzE,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC;;;yBAGqB;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,gEAAgE;AAChE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA0BD,qBAAa,QAAQ;IACnB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,6DAA6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAW;IAC5C;iDAC6C;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;gBAG9B,MAAM,EAAE,UAAU;IAa9B,kEAAkE;IAClE,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI5B,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAqJjD,IAAI;IAmDlB;;;;;;;;;;;;OAYG;YACW,eAAe;YA+Cf,QAAQ;CAiBvB;AAOD,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CAOxE;AAED,+EAA+E;AAC/E,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAKtD;AA+GD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI9C"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/core/http.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,mCAAmC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB;;iCAE6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;qCACiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAElE;8CAC8C;AAC9C,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;CACjB;AAGD;;;;GAIG;AACH,MAAM,MAAM,SAAS,CAAC,CAAC,EAAE,CAAC,IACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,CAAC,CAAC;IAAC,QAAQ,EAAE,YAAY,CAAA;CAAE,GAC7C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,YAAY,CAAA;CAAE,CAAC;AAErD,0EAA0E;AAC1E,wBAAgB,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAIvD;AAED,gDAAgD;AAChD,qBAAa,QAAQ,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,OAAO,CAAE,SAAQ,KAAK;IACzE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;gBAEpB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY;CAOxE;AAED,kDAAkD;AAClD,qBAAa,kBAAmB,SAAQ,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;gBACnD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY;CAGlE;AAED,uFAAuF;AACvF,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,SAAkB,KAAK,CAAC,EAAE,OAAO,CAAC;gBAEtB,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,OAAO;CAQlE;AAOD,MAAM,WAAW,SAAS;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAE5D;;0CAE0C;AAC1C,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,UAAU,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC;gBACrB,SAAS,EAAE,SAAS,GAAG,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE;CAQvE;AAeD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CA+E3I;AAqBD,uHAAuH;AACvH,qBAAa,cAAe,SAAQ,KAAK;IACvC,SAAkB,KAAK,CAAC,EAAE,OAAO,CAAC;gBAEtB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAK7C;AAED,KAAK,SAAS,GAAG,KAAK,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,KAAK,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEtF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC7D,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnC,qDAAqD;IACrD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;iDAC6C;IAC7C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;sEACkE;IAClE,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACnC;AA2BD,MAAM,WAAW,UAAU;IACzB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnC,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACjC,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;qDACiD;IACjD,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnF;;6BAEyB;IACzB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9F;sDACkD;IAClD,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACpC;;yCAEqC;IACrC,QAAQ,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAA;KAAE,CAAC;IAC7E,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,CAAC,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC3D,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,yEAAyE;IACzE,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC;;;yBAGqB;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,gEAAgE;AAChE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA0BD,qBAAa,QAAQ;IACnB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,6DAA6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAW;IAC5C;iDAC6C;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;gBAG9B,MAAM,EAAE,UAAU;IAa9B,kEAAkE;IAClE,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI5B,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YA4JjD,IAAI;IAoDlB;;;;;;;;;;;;OAYG;YACW,eAAe;YA+Cf,QAAQ;CAiBvB;AAOD,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CAOxE;AAED,+EAA+E;AAC/E,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAKtD;AA0HD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI9C"}

package/dist/core/http.js

@@ -29,6 +29,21 @@ export class UnexpectedApiError extends ApiError {
         super("Unexpected HTTP status " + status, status, body, response);
     }
 }
+/** A successful response declared JSON but carried a body that could not be parsed. */
+export class ResponseParseError extends Error {
+    status;
+    body;
+    response;
+    cause;
+    constructor(body, response, cause) {
+        super("HTTP " + response.status + " response body was not valid JSON");
+        this.name = "ResponseParseError";
+        this.status = response.status;
+        this.body = body;
+        this.response = response;
+        this.cause = cause;
+    }
+}
 /** Request or response data did not match the spec's schema (opt-in via the
  * client's validate option). Never thrown: returned as the error side of
  * ApiResult, like every other failure. */
@@ -174,7 +189,7 @@ function transportFailureMessage(method, url, cause) {
     }
     return method + " " + url + " failed: " + detail;
 }
-/** The request never produced an HTTP response (network failure, timeout, abort). */
+/** The request failed before a complete HTTP response arrived (network failure, timeout, abort, or truncated body). */
 export class TransportError extends Error {
     cause;
     constructor(message, cause) {
@@ -183,6 +198,33 @@ export class TransportError extends Error {
         this.cause = cause;
     }
 }
+/** Resolve one complete alternative in spec order. Missing or incompatible
+ * combinations contribute no partial credentials. Anonymous operations send
+ * no generated credentials; explicit headers/hooks remain application owned. */
+function selectSecurity(requirements, credentials) {
+    for (const requirement of requirements) {
+        const names = Object.keys(requirement);
+        if (!names.length || names.some((name) => !Object.hasOwn(credentials, name)))
+            continue;
+        const selected = { headers: Object.create(null), query: Object.create(null) };
+        const destinations = new Set();
+        let conflict = false;
+        for (const name of names) {
+            for (const location of ["headers", "query"]) {
+                for (const [wire, value] of Object.entries(credentials[name][location] ?? {})) {
+                    const destination = location + ":" + (location === "headers" ? wire.toLowerCase() : wire);
+                    if (destinations.has(destination))
+                        conflict = true;
+                    destinations.add(destination);
+                    selected[location][wire] = value;
+                }
+            }
+        }
+        if (!conflict)
+            return selected;
+    }
+    return {};
+}
 const RETRYABLE_STATUSES = new Set([408, 429, 500, 502, 503, 504]);
 /** Credential-bearing headers fetch itself drops when a redirect crosses to
  * another origin. A spec's own API-key headers join them below. */
@@ -232,8 +274,13 @@ export class HttpCore {
         const policy = { ...this.config.retry, ...req.retry };
         const maxRetries = req.options?.maxRetries ?? policy.maxRetries ?? this.config.maxRetries;
         const timeoutMs = req.options?.timeoutMs ?? this.config.timeoutMs;
-        const retryAllowed = req.idempotent === true || req.method === "GET" || policy.retryNonIdempotent === true;
-        const retryableStatuses = policy.statuses ? new Set(policy.statuses) : RETRYABLE_STATUSES;
+        const retryAllowed = req.idempotent === true ||
+            req.method === "GET" ||
+            req.idempotencyKey !== undefined ||
+            policy.retryNonIdempotent === true;
+        const retryableStatuses = policy.statuses
+            ? new Set(policy.statuses)
+            : RETRYABLE_STATUSES;
         // One key per logical call, reused on every retry — that's the point
         // of idempotency keys.
         const autoIdempotencyKey = req.idempotencyKey !== undefined &&
@@ -299,10 +346,11 @@ export class HttpCore {
                     data = (await parseBody(response, req.method));
                 }
                 catch (cause) {
-                    emitResponseDebug(response);
-                    const error = new TransportError("The response body read was aborted before completing", cause);
+                    const parseError = cause instanceof ResponseParseError ? cause : undefined;
+                    emitResponseDebug(response, parseError?.body);
+                    const error = (parseError ?? new TransportError("The response body read failed before completing", cause));
                     await this.config.onError?.(error, { method: req.method, path: req.path });
-                    return { ok: false, error, response: meta(response) };
+                    return { ok: false, error, response: parseError?.response ?? meta(response) };
                 }
                 emitResponseDebug(response, data);
                 const responseMeta = meta(response, data);
@@ -366,8 +414,9 @@ export class HttpCore {
         return { ok: false, error };
     }
     async send(req, timeoutMs, attempt, autoIdempotencyKey) {
+        const selected = req.security && this.config.credentials ? selectSecurity(req.security, this.config.credentials) : {};
         const headers = {};
-        for (const [k, v] of Object.entries(this.config.headers)) {
+        for (const [k, v] of Object.entries({ ...this.config.headers, ...selected.headers })) {
             headers[k] = await resolveAuthValue(v);
         }
         if (req.idempotencyKey && autoIdempotencyKey) {
@@ -384,7 +433,7 @@ export class HttpCore {
         }
         const context = {
             method: req.method,
-            url: await this.buildUrl(req),
+            url: await this.buildUrl(req, selected.query),
             headers,
             attempt,
         };
@@ -469,7 +518,7 @@ export class HttpCore {
             origin = target.origin;
         }
     }
-    async buildUrl(req) {
+    async buildUrl(req, authQuery) {
         const base = this.config.baseUrl.replace(/\/+$/, "");
         const url = new URL(base + req.path);
         for (const [k, v] of Object.entries(req.query ?? {})) {
@@ -484,7 +533,7 @@ export class HttpCore {
                 appendDeep(url.searchParams, k, v);
             }
         }
-        for (const [k, v] of Object.entries(this.config.query)) {
+        for (const [k, v] of Object.entries({ ...this.config.query, ...authQuery })) {
             url.searchParams.append(k, await resolveAuthValue(v));
         }
         return url.toString();
@@ -541,10 +590,22 @@ function serializeBody(req) {
 async function parseBody(response, method) {
     if (method === "HEAD" || response.status === 204 || response.status === 205)
         return undefined;
-    const contentType = response.headers.get("content-type") ?? "";
+    const contentType = (response.headers.get("content-type") ?? "").toLowerCase();
+    const mediaType = contentType.split(";", 1)[0].trim();
+    const slash = mediaType.indexOf("/");
+    const subtype = slash === -1 ? "" : mediaType.slice(slash + 1);
     try {
-        if (contentType.includes("json"))
-            return await response.json();
+        if (subtype === "json" || subtype.endsWith("+json")) {
+            const body = await response.text();
+            if (body.length === 0)
+                return undefined;
+            try {
+                return JSON.parse(body);
+            }
+            catch (cause) {
+                throw new ResponseParseError(body, meta(response, body), cause);
+            }
+        }
         if (contentType.startsWith("text/"))
             return await response.text();
         if (response.body === null)
@@ -552,11 +613,11 @@ async function parseBody(response, method) {
         return await response.blob();
     }
     catch (cause) {
-        // A timed-out or aborted body read is a transport failure, not an
-        // empty body — surface it instead of faking success.
-        if (cause instanceof Error && (cause.name === "AbortError" || cause.name === "TimeoutError"))
+        if (cause instanceof ResponseParseError)
             throw cause;
-        return undefined;
+        // A timed-out, aborted, or prematurely terminated body is a transport
+        // failure, not an empty body — surface it instead of faking success.
+        throw cause;
     }
 }
 function requestIdFromBody(body) {

package/dist/credential-storage.d.ts

@@ -0,0 +1,24 @@
+import { FileCredentialStore, type CredentialCodec } from "./oauth-session.js";
+export interface NativeCommandResult {
+    status: number | null;
+    stdout: string;
+    stderr: string;
+    error?: unknown;
+}
+export type NativeCommand = (executable: string, args: string[], input?: string) => NativeCommandResult;
+export interface CredentialKeyStore {
+    readonly name: string;
+    read(): Buffer | null;
+    write(key: Buffer): void;
+    /** Used only when explicitly removing this wrapping key, not ordinary logout. */
+    remove(): void;
+}
+/** A small wrapping key avoids OS item-size limits; session files are encrypted
+ * separately so refresh rotation can retain the atomic file/lock transaction. */
+export declare function nativeCredentialKeyStore(path: string, platform?: NodeJS.Platform, run?: NativeCommand, environmentName?: string): CredentialKeyStore;
+export declare function encryptedCredentialCodec(path: string, keyStore: CredentialKeyStore): CredentialCodec;
+/** OS protection is the default. Plaintext storage is an explicit, separate
+ * store for environments where the owner accepts that tradeoff. Never migrate
+ * or fall back silently when an OS service is unavailable. */
+export declare function createCredentialStore(directory: string, mode?: string, environmentName?: string): FileCredentialStore;
+//# sourceMappingURL=credential-storage.d.ts.map

package/dist/credential-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-storage.d.ts","sourceRoot":"","sources":["../src/credential-storage.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAA0B,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEvG,MAAM,WAAW,mBAAmB;IAAG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE;AAC/G,MAAM,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,mBAAmB,CAAC;AACxG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,IAAI,IAAI,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iFAAiF;IACjF,MAAM,IAAI,IAAI,CAAC;CAChB;AAkBD;iFACiF;AACjF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAAE,GAAG,GAAE,aAA6B,EAAE,eAAe,SAAqB,GAAG,kBAAkB,CAsGjM;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,eAAe,CAkCpG;AAED;;8DAE8D;AAC9D,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,GAAE,MAAa,EAAE,eAAe,SAAqB,GAAG,mBAAmB,CAKvI"}