@vibesdotdev/client 0.1.1 → 1.0.0-rc.3

package/dist/lib/client/configured.js

@@ -0,0 +1,261 @@
+import { loadClientSettings } from "../../config/settings.js";
+import { createTimeoutSignal } from "./internal/timeout-signal.js";
+import { readClientValue, readClientFields, HttpOriginSchema } from "./internal/client-values.js";
+import { redactCredentials } from '@vibesdotdev/shared/utils';
+/**
+ * The configured API client for a Node/Bun host: the selected environment's
+ * API origin (catalog, or an environment overlay the caller hands over), the
+ * caller's credentials, and the host's TLS declaration, composed into one
+ * `VibesClient`. Moved here from `@vibesdotdev/cli` (`cli/src/api/client/
+ * factory.ts`): the client package owns client construction (cli SPEC,
+ * "Does not own"), and the CLI no longer depends on this package.
+ *
+ * Every value the caller hands over is read field by field through a schema:
+ * a malformed field is absent, never a throw, and never gates another field.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError, CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+import { ConfigManifest } from '@vibesdotdev/config/manifest/config-manifest';
+import { resolveDefaultCurrentEnvironment, resolveCurrentEnvironmentConfig } from '@vibesdotdev/config/environment/current';
+import { LoggedErrorSchema } from '@vibesdotdev/logging';
+import { createCLIClient } from "./runtime-fetch.js";
+/** The environment selection manifest (`@vibesdotdev/config/environment/current`). */
+const ENVIRONMENT_MANIFEST_ID = 'environment';
+const EnvironmentTierSchema = z.enum(['local', 'dev', 'staging', 'production']);
+const HeadersSchema = z.record(z.string(), z.string());
+/** An environment overlay: each field read on its own, a malformed one absent. */
+const EnvironmentOverlaySchema = z.object({
+    name: z.string().optional().catch(undefined),
+    url: HttpOriginSchema.optional().catch(undefined),
+    headers: HeadersSchema.optional().catch(undefined),
+    data: z
+        .object({
+        apiUrl: HttpOriginSchema.optional().catch(undefined),
+        tier: EnvironmentTierSchema.optional().catch(undefined),
+        headers: HeadersSchema.optional().catch(undefined)
+    })
+        .optional()
+        .catch(undefined)
+});
+/** Credentials the caller holds: each field read on its own. */
+const AuthCredentialsSchema = z.object({
+    apiKey: z.string().optional().catch(undefined),
+    sessionToken: z.string().optional().catch(undefined),
+    refreshToken: z.string().optional().catch(undefined),
+    expiresAt: z.string().optional().catch(undefined)
+});
+/** A session refresh answer: a new token, and optionally the next refresh token. */
+const SessionRefreshSchema = z.object({
+    token: z.string().min(1).optional().catch(undefined),
+    refreshToken: z.string().min(1).optional().catch(undefined)
+});
+/** The inspection view of a configured client: auth presence only, never a credential value. */
+export const ApiClientInspectionSchema = z.object({
+    baseUrl: z.url(),
+    environment: z.string(),
+    tier: EnvironmentTierSchema,
+    auth: z.discriminatedUnion('type', [
+        z.object({ type: z.literal('none') }),
+        z.object({ type: z.literal('apiKey') }),
+        z.object({ type: z.literal('session'), hasRefreshToken: z.boolean().optional() })
+    ]),
+    headers: HeadersSchema.optional(),
+    timeout: z.number().default(30000),
+    retries: z.number().default(3),
+    debug: z.boolean().default(false)
+});
+function readContext(context) {
+    try {
+        return { environment: context?.environment, credentials: context?.authCredentials, config: context?.config };
+    }
+    catch (error) {
+        throw new CapabilityError('The client context could not be read.', 'INVALID_INPUT', { reason: 'client-context-unreadable', cause: CaughtFailureSchema.parse(error) });
+    }
+}
+function overlayOf(context) {
+    const value = readContext(context).environment;
+    return value === undefined ? undefined : readClientValue(EnvironmentOverlaySchema, value, 'client-context-unreadable');
+}
+function credentialsOf(context) {
+    const value = readContext(context).credentials;
+    return value === undefined ? undefined : readClientValue(AuthCredentialsSchema, value, 'client-context-unreadable');
+}
+/** The selected environment; a runtime that composes no environment manifest uses the built-in default. */
+async function resolveCatalogEnvironment(runtime) {
+    if (!ConfigManifest.isRegistered(runtime, ENVIRONMENT_MANIFEST_ID))
+        return resolveDefaultCurrentEnvironment(runtime);
+    return resolveCurrentEnvironmentConfig(runtime);
+}
+/** The catalog environment with the caller's overlay applied (overlay wins per field). */
+async function resolveClientEnvironment(runtime, context) {
+    const overlay = overlayOf(context);
+    const catalog = await resolveCatalogEnvironment(runtime);
+    const scopeTier = EnvironmentTierSchema.safeParse(runtime.declaredScope?.qualifiers?.environmentTier).data;
+    return {
+        apiUrl: overlay?.data?.apiUrl ?? overlay?.url ?? catalog.apiUrl,
+        name: overlay?.name ?? catalog.name,
+        tier: overlay?.data?.tier ?? scopeTier ?? catalog.tier,
+        headers: overlay?.data?.headers ?? overlay?.headers
+    };
+}
+const DebugFlagSchema = z.boolean().catch(false);
+/**
+ * The caller's `debug` flag (scope `global`); a non-boolean value reads as off.
+ * A reader that fails refuses `UNAVAILABLE` `client-debug-flag-unreadable`
+ * with the failure as its cause.
+ */
+async function resolveDebugFlag(context) {
+    const reader = readContext(context).config;
+    if (reader === undefined)
+        return false;
+    try {
+        return DebugFlagSchema.parse(await reader.get('debug', 'global'));
+    }
+    catch (error) {
+        throw new CapabilityError('The client debug flag could not be read from config.', 'UNAVAILABLE', {
+            reason: 'client-debug-flag-unreadable',
+            retryable: true,
+            cause: CaughtFailureSchema.parse(error)
+        });
+    }
+}
+/** Bearer auth over a rotating session pair: each refresh stores the NEXT refresh token. */
+function sessionAuth(runtime, sessionToken, refreshToken, baseUrl) {
+    const session = { token: sessionToken, refreshToken };
+    return {
+        type: 'bearer',
+        tokenProvider: async () => session.token,
+        refreshHandler: async () => {
+            if (!session.refreshToken)
+                return null;
+            const deadline = createTimeoutSignal(runtime, 10000);
+            try {
+                const response = await fetch(`${baseUrl}/api/auth/session`, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({ refreshToken: session.refreshToken }), signal: deadline.signal
+                });
+                if (!response.ok) {
+                    throw new CapabilityError('Session refresh was refused.', 'AUTH_REQUIRED', { reason: 'session-refresh-refused', details: { status: response.status } });
+                }
+                const refreshed = readClientValue(SessionRefreshSchema, await response.json(), 'session-refresh-invalid');
+                if (refreshed?.token === undefined) {
+                    throw new CapabilityError('Session refresh carried no token.', 'AUTH_REQUIRED', { reason: 'session-refresh-token-missing' });
+                }
+                session.token = refreshed.token;
+                if (refreshed.refreshToken !== undefined)
+                    session.refreshToken = refreshed.refreshToken;
+                return { type: 'bearer', credentials: session.token, tokenProvider: async () => session.token };
+            }
+            catch (error) {
+                const failure = CaughtFailureSchema.parse(error);
+                if (failure instanceof CapabilityError)
+                    throw failure;
+                throw new CapabilityError('The session refresh request failed; re-authenticate with auth login.', 'UNAVAILABLE', {
+                    reason: 'session-refresh-failed',
+                    retryable: true,
+                    cause: CaughtFailureSchema.parse(error)
+                });
+            }
+            finally {
+                deadline.dispose();
+            }
+        }
+    };
+}
+function buildAuthConfig(runtime, credentials, baseUrl) {
+    if (credentials?.apiKey)
+        return { type: 'apiKey', credentials: credentials.apiKey };
+    if (credentials?.sessionToken)
+        return sessionAuth(runtime, credentials.sessionToken, credentials.refreshToken, baseUrl);
+    return { type: 'none' };
+}
+/** `config` with every environment header set on each request; unchanged when there are none. */
+function applyEnvironmentHeaders(config, headers) {
+    if (headers === undefined || Object.keys(headers).length === 0)
+        return config;
+    const beforeRequest = async (request) => {
+        const updated = new Headers(request.headers);
+        for (const [key, value] of Object.entries(headers))
+            updated.set(key, value);
+        return new Request(request, { headers: updated });
+    };
+    return { ...config, hooks: { ...config.hooks, beforeRequest } };
+}
+/**
+ * A `VibesClient` for the selected environment, with the caller's credentials.
+ * Certificate verification stays on unless the host declares
+ * `config.client.allowInsecureLocalTls=true` (local development only).
+ */
+export async function createConfiguredClient(runtime, context) {
+    const environment = await resolveClientEnvironment(runtime, context);
+    const baseUrl = environment.apiUrl;
+    const debug = await resolveDebugFlag(context);
+    const settings = await loadClientSettings(runtime);
+    const allowInsecureLocalTls = settings.allowInsecureLocalTls;
+    const initialConfig = {
+        baseUrl,
+        auth: buildAuthConfig(runtime, credentialsOf(context), baseUrl),
+        debug
+    };
+    return createCLIClient(runtime, { ...applyEnvironmentHeaders(initialConfig, environment.headers), allowInsecureLocalTls });
+}
+/** The inspection view of the client `createConfiguredClient` would build (auth presence only). */
+export async function createAPIClientConfig(runtime, context) {
+    const environment = await resolveClientEnvironment(runtime, context);
+    const credentials = credentialsOf(context);
+    const auth = credentials?.apiKey
+        ? { type: 'apiKey' }
+        : credentials?.sessionToken
+            ? credentials.refreshToken
+                ? { type: 'session', hasRefreshToken: true }
+                : { type: 'session' }
+            : { type: 'none' };
+    return ApiClientInspectionSchema.parse({
+        baseUrl: environment.apiUrl,
+        environment: environment.name,
+        tier: environment.tier,
+        auth,
+        headers: environment.headers ? Object.fromEntries(Object.entries(environment.headers).map(([name, value]) => [name, redactCredentials(`${name}=credential-value`) !== `${name}=credential-value` ? '[redacted]' : redactCredentials(value)])) : undefined,
+        timeout: (await loadClientSettings(runtime)).timeoutMs,
+        retries: 3,
+        debug: await resolveDebugFlag(context)
+    });
+}
+/**
+ * Probe `endpoint` on the selected API origin with a plain fetch (the client
+ * abstracts status codes away; a connection test reports the real one). A
+ * transport failure is a failed probe carrying the failure's message.
+ */
+export async function testAPIConnection(runtime, endpoint = '/api/health', context, options = {}) {
+    const environment = await resolveClientEnvironment(runtime, context);
+    const start = runtime.lifecycle.now();
+    options = readClientFields(() => ({ ...options }), 'client-probe-unreadable');
+    const url = new URL(endpoint, environment.apiUrl);
+    if (url.origin !== new URL(environment.apiUrl).origin)
+        throw new CapabilityError('The API probe must stay on its selected origin.', 'INVALID_INPUT', { reason: 'client-probe-origin-mismatch' });
+    const deadline = createTimeoutSignal(runtime, readClientValue(z.number().int().positive(), options.timeout ?? 10000, 'client-probe-timeout-invalid'));
+    const method = readClientValue(z.enum(['GET', 'POST', 'PUT', 'DELETE']), options.method ?? 'GET', 'client-probe-method-invalid');
+    try {
+        const response = await fetch(url, {
+            method,
+            headers: environment.headers,
+            signal: deadline.signal
+        });
+        return { success: response.ok, status: response.status, latency: runtime.lifecycle.now() - start };
+    }
+    catch (error) {
+        const failure = CaughtFailureSchema.parse(error);
+        return {
+            success: false,
+            status: 0,
+            latency: runtime.lifecycle.now() - start,
+            error: LoggedErrorSchema.parse(failure).message,
+            failure: valueFreeFailure(failure)
+        };
+    }
+    finally {
+        deadline.dispose();
+    }
+}
+//# sourceMappingURL=configured.js.map

package/dist/lib/client/configured.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configured.js","sourceRoot":"","sources":["../../../src/lib/client/configured.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D;;;;;;;;;;GAUG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAA4C,MAAM,qBAAqB,CAAC;AACvI,OAAO,EAAE,cAAc,EAAE,MAAM,8CAA8C,CAAC;AAC9E,OAAO,EACN,gCAAgC,EAChC,+BAA+B,EAE/B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,sFAAsF;AACtF,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAE9C,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAGhF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAEvD,kFAAkF;AAClF,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAC5C,GAAG,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACjD,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAClD,IAAI,EAAE,CAAC;SACL,MAAM,CAAC;QACP,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;QACpD,IAAI,EAAE,qBAAqB,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;QACvD,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;KAClD,CAAC;SACD,QAAQ,EAAE;SACV,KAAK,CAAC,SAAS,CAAC;CAClB,CAAC,CAAC;AAGH,gEAAgE;AAChE,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAC9C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACpD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACpD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CACjD,CAAC,CAAC;AAGH,oFAAoF;AACpF,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACpD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CAC3D,CAAC,CAAC;AAiBH,gGAAgG;AAChG,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,IAAI,EAAE,qBAAqB;IAC3B,IAAI,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;QAClC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;KACjF,CAAC;IACF,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACjC,CAAC,CAAC;AAoBH,SAAS,WAAW,CAAC,OAA4C;IAChE,IAAI,CAAC;QACJ,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC9G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,eAAe,CAAC,uCAAuC,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC3L,CAAC;AACD,SAAS,SAAS,CAAC,OAA4C;IAC9D,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC;IAC/C,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,wBAAwB,EAAE,KAAK,EAAE,2BAA2B,CAAC,CAAC;AACxH,CAAC;AACD,SAAS,aAAa,CAAC,OAA4C;IAClE,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC;IAC/C,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,qBAAqB,EAAE,KAAK,EAAE,2BAA2B,CAAC,CAAC;AACrH,CAAC;AAED,2GAA2G;AAC3G,KAAK,UAAU,yBAAyB,CAAC,OAAqB;IAC7D,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,EAAE,uBAAuB,CAAC;QAAE,OAAO,gCAAgC,CAAC,OAAO,CAAC,CAAC;IACrH,OAAO,+BAA+B,CAAC,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,wBAAwB,CACtC,OAAqB,EACrB,OAA4C;IAE5C,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC;IAC3G,OAAO;QACN,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,MAAM;QAC/D,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI;QACnC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,SAAS,IAAI,OAAO,CAAC,IAAI;QACtD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,OAAO,EAAE,OAAO;KACnD,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAEjD;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,OAA4C;IAC3E,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,CAAC;QACJ,OAAO,eAAe,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,sDAAsD,EAAE,aAAa,EAAE;YAChG,MAAM,EAAE,8BAA8B;YACtC,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC;SACvC,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,4FAA4F;AAC5F,SAAS,WAAW,CAAC,OAAqB,EAAE,YAAoB,EAAE,YAAgC,EAAE,OAAe;IAClH,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;IACtD,OAAO;QACN,IAAI,EAAE,QAAQ;QACd,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK;QACxC,cAAc,EAAE,KAAK,IAAI,EAAE;YAC1B,IAAI,CAAC,OAAO,CAAC,YAAY;gBAAE,OAAO,IAAI,CAAC;YACvC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACrD,IAAI,CAAC;gBACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,mBAAmB,EAAE;oBAC3D,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM;iBACrF,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAClB,MAAM,IAAI,eAAe,CAAC,8BAA8B,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACzJ,CAAC;gBACD,MAAM,SAAS,GAAG,eAAe,CAAC,oBAAoB,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,yBAAyB,CAAC,CAAC;gBAC1G,IAAI,SAAS,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;oBACpC,MAAM,IAAI,eAAe,CAAC,mCAAmC,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC,CAAC;gBAC9H,CAAC;gBACD,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;gBAChC,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS;oBAAE,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;gBACxF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACjG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjD,IAAI,OAAO,YAAY,eAAe;oBAAE,MAAM,OAAO,CAAC;gBACtD,MAAM,IAAI,eAAe,CAAC,sEAAsE,EAAE,aAAa,EAAE;oBAChH,MAAM,EAAE,wBAAwB;oBAChC,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC;iBACvC,CAAC,CAAC;YACJ,CAAC;oBAAS,CAAC;gBAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;QAClC,CAAC;KACD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAqB,EAAE,WAAwC,EAAE,OAAe;IACxG,IAAI,WAAW,EAAE,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC;IACpF,IAAI,WAAW,EAAE,YAAY;QAAE,OAAO,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACxH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC;AAED,iGAAiG;AACjG,SAAS,uBAAuB,CAAC,MAAoB,EAAE,OAA2C;IACjG,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9E,MAAM,aAAa,GAAG,KAAK,EAAE,OAAgB,EAAoB,EAAE;QAClE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5E,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAqB,EAAE,OAAiC;IACpG,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,qBAAqB,GAAG,QAAQ,CAAC,qBAAqB,CAAC;IAC7D,MAAM,aAAa,GAAiB;QACnC,OAAO;QACP,IAAI,EAAE,eAAe,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAC/D,KAAK;KACL,CAAC;IACF,OAAO,eAAe,CAAC,OAAO,EAAE,EAAE,GAAG,uBAAuB,CAAC,aAAa,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC;AAC5H,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAqB,EAAE,OAAiC;IACnG,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAgC,WAAW,EAAE,MAAM;QAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;QACpB,CAAC,CAAC,WAAW,EAAE,YAAY;YAC1B,CAAC,CAAC,WAAW,CAAC,YAAY;gBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE;gBAC5C,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;YACtB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,yBAAyB,CAAC,KAAK,CAAC;QACtC,OAAO,EAAE,WAAW,CAAC,MAAM;QAC3B,WAAW,EAAE,WAAW,CAAC,IAAI;QAC7B,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,IAAI;QACJ,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,iBAAiB,CAAC,GAAG,IAAI,mBAAmB,CAAC,KAAK,GAAG,IAAI,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACzP,OAAO,EAAE,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACtD,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,MAAM,gBAAgB,CAAC,OAAO,CAAC;KACtC,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,OAAqB,EACrB,QAAQ,GAAG,aAAa,EACxB,OAAiC,EACjC,UAAiD,EAAE;IAEnD,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;IACtC,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM;QAAE,MAAM,IAAI,eAAe,CAAC,iDAAiD,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC;IACjM,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK,EAAE,8BAA8B,CAAC,CAAC,CAAC;IACtJ,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,6BAA6B,CAAC,CAAC;IACjI,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACjC,MAAM;YACN,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IACpG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO;YACN,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,KAAK;YACxC,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO;YAC/C,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC;SAClC,CAAC;IACH,CAAC;YAAS,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAClC,CAAC"}

package/dist/lib/client/internal/auth-headers.d.ts

@@ -0,0 +1,11 @@
+import type { AuthConfig } from '../types.ts';
+/**
+ * Canonical auth headers for an `AuthConfig`.
+ *
+ * The request and stream transports share this mapping so `apiKey`,
+ * `session`, `bearer`, and `tokenProvider` credentials behave identically on
+ * `request()` and `stream()`: key and bearer credentials travel as an
+ * `Authorization: Bearer` header, session credentials as a `session` cookie.
+ */
+export declare function buildAuthHeaders(auth: AuthConfig): Promise<Record<string, string>>;
+//# sourceMappingURL=auth-headers.d.ts.map

package/dist/lib/client/internal/auth-headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-headers.d.ts","sourceRoot":"","sources":["../../../../src/lib/client/internal/auth-headers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAqBxF"}

package/dist/lib/client/internal/auth-headers.js

@@ -0,0 +1,35 @@
+import * as z from 'zod/v4';
+import { readClientFields, readClientValue } from "./client-values.js";
+/**
+ * Canonical auth headers for an `AuthConfig`.
+ *
+ * The request and stream transports share this mapping so `apiKey`,
+ * `session`, `bearer`, and `tokenProvider` credentials behave identically on
+ * `request()` and `stream()`: key and bearer credentials travel as an
+ * `Authorization: Bearer` header, session credentials as a `session` cookie.
+ */
+export async function buildAuthHeaders(auth) {
+    auth = readClientFields(() => ({ type: auth.type, credentials: auth.credentials, tokenProvider: auth.tokenProvider, refreshHandler: auth.refreshHandler }), 'client-auth-unreadable');
+    readClientValue(z.enum(['apiKey', 'bearer', 'session', 'none']), auth.type, 'client-auth-invalid');
+    readClientValue(z.string().optional(), auth.credentials, 'client-auth-invalid');
+    const entries = [];
+    switch (auth.type) {
+        case 'apiKey':
+        case 'bearer': {
+            const token = auth.credentials || readClientValue(z.string().nullable().optional(), await auth.tokenProvider?.(), 'client-auth-invalid');
+            if (token)
+                entries.push(['Authorization', `Bearer ${token}`]);
+            break;
+        }
+        case 'session': {
+            const token = auth.credentials || readClientValue(z.string().nullable().optional(), await auth.tokenProvider?.(), 'client-auth-invalid');
+            if (token)
+                entries.push(['Cookie', `session=${token}`]);
+            break;
+        }
+        case 'none':
+            break;
+    }
+    return Object.fromEntries(entries);
+}
+//# sourceMappingURL=auth-headers.js.map

package/dist/lib/client/internal/auth-headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-headers.js","sourceRoot":"","sources":["../../../../src/lib/client/internal/auth-headers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGvE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAgB;IACtD,IAAI,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACtL,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IACnG,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAChF,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC,CAAC,CAAC;YACf,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAC;YACzI,IAAI,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC;YAC9D,MAAM;QACP,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAC;YACzI,IAAI,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC;YACxD,MAAM;QACP,CAAC;QACD,KAAK,MAAM;YACV,MAAM;IACR,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC"}

package/dist/lib/client/internal/base-client.d.ts

@@ -1,8 +1,11 @@
+import { type RuntimeRef } from '@vibesdotdev/kernel';
 import { type BaseAPIConfig, type EndpointOptions } from './base-types.ts';
 import { Endpoint } from './endpoint.ts';
+import { type RequestBody } from './client-values.ts';
 export declare abstract class BaseAPIClient {
-    protected config: Required<Omit<BaseAPIConfig, 'auth'>> & {
+    protected config: Required<Omit<BaseAPIConfig, 'auth' | 'runtime'>> & {
         auth: BaseAPIConfig['auth'];
+        runtime?: RuntimeRef;
     };
     private abortControllers;
     constructor(config: BaseAPIConfig);
@@ -10,7 +13,7 @@ export declare abstract class BaseAPIClient {
     request<T = unknown>(request: {
         method: string;
         path: string;
-        body?: unknown;
+        body?: RequestBody;
     } & EndpointOptions<T>): Promise<T>;
     cancelAll(): void;
     setAuth(auth: BaseAPIConfig['auth']): void;

package/dist/lib/client/internal/base-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-client.d.ts","sourceRoot":"","sources":["../../../../src/lib/client/internal/base-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAY,MAAM,iBAAiB,CAAC;AAErF,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,8BAAsB,aAAa;IAClC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,GAAG;QACzD,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;KAC5B,CAAC;IACF,OAAO,CAAC,gBAAgB,CAA8B;gBAE1C,MAAM,EAAE,aAAa;IAiBjC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ;IAKpC,OAAO,CAAC,CAAC,GAAG,OAAO,EACxB,OAAO,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,OAAO,CAAC;KACf,GAAG,eAAe,CAAC,CAAC,CAAC,GACpB,OAAO,CAAC,CAAC,CAAC;IAwDb,SAAS,IAAI,IAAI;IAKjB,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,IAAI;IAI1C,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI;CAGlD"}
+{"version":3,"file":"base-client.d.ts","sourceRoot":"","sources":["../../../../src/lib/client/internal/base-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAwC,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAY,MAAM,iBAAiB,CAAC;AAGrF,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAA+J,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEnN,8BAAsB,aAAa;IAClC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG;QACrE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,UAAU,CAAC;KACrB,CAAC;IACF,OAAO,CAAC,gBAAgB,CAA8B;gBAE1C,MAAM,EAAE,aAAa;IAsBjC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ;IAKpC,OAAO,CAAC,CAAC,GAAG,OAAO,EACxB,OAAO,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,WAAW,CAAC;KACnB,GAAG,eAAe,CAAC,CAAC,CAAC,GACpB,OAAO,CAAC,CAAC,CAAC;IAwDb,SAAS,IAAI,IAAI;IAKjB,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,IAAI;IAI1C,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI;CAOlD"}

package/dist/lib/client/internal/base-client.js

@@ -1,21 +1,29 @@
+import * as z from 'zod/v4';
+import { CapabilityError, CaughtFailureSchema } from '@vibesdotdev/kernel';
 import { APIError } from "./base-types.js";
 import { buildHeaders, buildUrl, createApiError } from "./base-helpers.js";
+import { createTimeoutSignal } from "./timeout-signal.js";
 import { Endpoint } from "./endpoint.js";
+import { readClientValue, readClientFields, RequestInputSchema, HeadersSchema, encodeClientBody, NativeBodySchema, JsonValueSchema, HttpOriginSchema } from "./client-values.js";
 export class BaseAPIClient {
     config;
     abortControllers = new Set();
     constructor(config) {
+        config = readClientFields(() => ({ ...config }), 'client-config-unreadable');
+        readClientValue(HttpOriginSchema, config.baseUrl, 'client-origin-invalid');
+        readClientValue(z.number().int().positive().optional(), config.timeout, 'client-config-invalid');
         const merged = {
             baseUrl: config.baseUrl,
-            fetch: (config.fetch || globalThis.fetch?.bind(globalThis)),
-            headers: config.headers || {},
-            timeout: config.timeout || 30000,
+            fetch: config.fetch || globalThis.fetch?.bind(globalThis),
+            headers: readClientValue(HeadersSchema, config.headers ?? {}, 'client-headers-invalid'),
+            timeout: config.timeout ?? 30000,
             debug: config.debug || false,
             hooks: config.hooks || {},
-            auth: config.auth ?? null
+            auth: config.auth ?? null,
+            runtime: config.runtime
         };
         if (!merged.fetch)
-            throw new Error('Fetch is not available. Please provide a fetch implementation.');
+            throw new CapabilityError('Fetch is unavailable.', 'UNAVAILABLE', { reason: 'client-fetch-unavailable' });
         this.config = merged;
     }
     endpoint(path) {
@@ -23,29 +31,33 @@ export class BaseAPIClient {
         return new Endpoint(this, cleanPath);
     }
     async request(request) {
+        request = readClientFields(() => ({ ...request }), 'client-request-unreadable');
+        request = { ...request, ...readClientValue(RequestInputSchema, request, 'client-request-invalid') };
         const url = buildUrl(this.config.baseUrl, request.path, request.query);
         const controller = new AbortController();
         this.abortControllers.add(controller);
+        let deadlineDispose;
         try {
             const authForHeaders = this.config.auth ?? { type: 'none' };
             const headers = await buildHeaders({
                 auth: authForHeaders,
                 headers: { ...this.config.headers, ...request.headers },
-                includeJsonDefaults: request.body !== undefined
+                includeJsonDefaults: request.body !== undefined && !NativeBodySchema.safeParse(request.body).success
             });
             const init = {
                 method: request.method,
                 headers,
                 signal: controller.signal
             };
-            const timeout = setTimeout(() => controller.abort(), request.timeout ?? this.config.timeout);
+            const deadline = createTimeoutSignal(this.config.runtime, request.timeout ?? this.config.timeout);
+            deadlineDispose = deadline.dispose;
+            deadline.signal.addEventListener('abort', () => controller.abort(), { once: true });
             if (request.body !== undefined)
-                init.body = JSON.stringify(request.body);
+                init.body = encodeClientBody(request.body, headers.get('Content-Type'));
             let req = new Request(url.toString(), init);
             if (this.config.hooks?.beforeRequest)
                 req = await this.config.hooks.beforeRequest(req);
-            const response = await this.config.fetch(req, init);
-            clearTimeout(timeout);
+            const response = await this.config.fetch(req);
             const finalResponse = this.config.hooks?.afterResponse
                 ? await this.config.hooks.afterResponse(response)
                 : response;
@@ -59,21 +71,25 @@ export class BaseAPIClient {
             if (finalResponse.status === 204 || finalResponse.headers.get('Content-Length') === '0')
                 data = undefined;
             else if (finalResponse.headers.get('Content-Type')?.includes('application/json'))
-                data = await finalResponse.json();
+                data = readClientValue(JsonValueSchema, await finalResponse.json(), 'client-response-invalid');
             else
                 data = await finalResponse.text();
-            if (request.transform)
-                data = request.transform(data);
-            if (request.schema) {
-                const result = request.schema.safeParse(data);
-                if (!result.success) {
-                    throw new APIError(`Response validation failed: ${result.error.message}`, 422, finalResponse, req, data);
-                }
-                return result.data;
-            }
-            return data;
+            const transformed = request.transform ? request.transform(data) : data;
+            if (request.schema)
+                return readClientValue(request.schema, transformed, 'client-response-schema-invalid');
+            // SAFETY: Without a response schema, the caller owns the endpoint's JSON/text result type.
+            return transformed;
+        }
+        catch (error) {
+            const failure = CaughtFailureSchema.parse(error);
+            if (failure instanceof CapabilityError)
+                throw failure;
+            const projected = new APIError('The client request failed.', controller.signal.aborted ? 408 : 0, undefined, undefined, undefined, { cause: failure });
+            await this.config.hooks.onError?.(projected);
+            throw projected;
         }
         finally {
+            deadlineDispose?.();
             this.abortControllers.delete(controller);
         }
     }
@@ -86,7 +102,11 @@ export class BaseAPIClient {
         this.config.auth = auth ?? null;
     }
     updateConfig(config) {
-        Object.assign(this.config, config);
+        const next = readClientFields(() => ({ ...this.config, ...config }), 'client-config-unreadable');
+        readClientValue(HttpOriginSchema, next.baseUrl, 'client-origin-invalid');
+        readClientValue(z.number().int().positive(), next.timeout, 'client-config-invalid');
+        next.headers = readClientValue(HeadersSchema, next.headers, 'client-headers-invalid');
+        this.config = next;
     }
 }
 //# sourceMappingURL=base-client.js.map

package/dist/lib/client/internal/base-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"base-client.js","sourceRoot":"","sources":["../../../../src/lib/client/internal/base-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4C,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,MAAM,OAAgB,aAAa;IACxB,MAAM,CAEd;IACM,gBAAgB,GAAG,IAAI,GAAG,EAAmB,CAAC;IAEtD,YAAY,MAAqB;QAChC,MAAM,MAAM,GAER;YACH,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAiB;YAC3E,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK;YAChC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;YAC5B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI;SACzB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACnF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;IAES,QAAQ,CAAC,IAAY;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAC3D,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,OAIsB;QAEtB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC;YACJ,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC;YACtE,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC;gBACjC,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;gBACvD,mBAAmB,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS;aAC/C,CAAC,CAAC;YACH,MAAM,IAAI,GAAgB;gBACzB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO;gBACP,MAAM,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC;YACF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7F,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACzE,IAAI,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;YAC5C,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa;gBAAE,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YACvF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACpD,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa;gBACrD,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC;gBACjD,CAAC,CAAC,QAAQ,CAAC;YACZ,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;gBACvD,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO;oBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACvE,MAAM,KAAK,CAAC;YACb,CAAC;YACD,IAAI,IAAa,CAAC;YAClB,IAAI,aAAa,CAAC,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG;gBACtF,IAAI,GAAG,SAAS,CAAC;iBACb,IAAI,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,kBAAkB,CAAC;gBAC/E,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;;gBAC9B,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,SAAS;gBAAE,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACrB,MAAM,IAAI,QAAQ,CACjB,+BAA+B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EACrD,GAAG,EACH,aAAa,EACb,GAAG,EACH,IAAI,CACJ,CAAC;gBACH,CAAC;gBACD,OAAO,MAAM,CAAC,IAAI,CAAC;YACpB,CAAC;YACD,OAAO,IAAS,CAAC;QAClB,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC;IACF,CAAC;IAED,SAAS;QACR,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,gBAAgB;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACnE,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO,CAAC,IAA2B;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC;IACjC,CAAC;IAED,YAAY,CAAC,MAA8B;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;CACD"}
+{"version":3,"file":"base-client.js","sourceRoot":"","sources":["../../../../src/lib/client/internal/base-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAmB,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EAA4C,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAoC,MAAM,oBAAoB,CAAC;AAEnN,MAAM,OAAgB,aAAa;IACxB,MAAM,CAGd;IACM,gBAAgB,GAAG,IAAI,GAAG,EAAmB,CAAC;IAEtD,YAAY,MAAqB;QAChC,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,EAAE,0BAA0B,CAAC,CAAC;QAC7E,eAAe,CAAC,gBAAgB,EAAE,MAAM,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QAC3E,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QACjG,MAAM,MAAM,GAGR;YACH,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC;YACzD,OAAO,EAAE,eAAe,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,wBAAwB,CAAC;YACvF,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK;YAChC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;YAC5B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;SACvB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,IAAI,eAAe,CAAC,uBAAuB,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC3G,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;IAES,QAAQ,CAAC,IAAY;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAC3D,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,OAIsB;QAEtB,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAChF,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,eAAe,CAAC,kBAAkB,EAAE,OAAO,EAAE,wBAAwB,CAAC,EAAE,CAAC;QACpG,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,eAAyC,CAAC;QAC9C,IAAI,CAAC;YACJ,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC;YACtE,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC;gBACjC,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;gBACvD,mBAAmB,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO;aACpG,CAAC,CAAC;YACH,MAAM,IAAI,GAAgB;gBACzB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO;gBACP,MAAM,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC;YACF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClG,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC;YACnC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;YACxG,IAAI,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;YAC5C,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa;gBAAE,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YACvF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa;gBACrD,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC;gBACjD,CAAC,CAAC,QAAQ,CAAC;YACZ,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;gBACvD,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO;oBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACvE,MAAM,KAAK,CAAC;YACb,CAAC;YACD,IAAI,IAA2B,CAAC;YAChC,IAAI,aAAa,CAAC,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG;gBACtF,IAAI,GAAG,SAAS,CAAC;iBACb,IAAI,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,kBAAkB,CAAC;gBAC/E,IAAI,GAAG,eAAe,CAAC,eAAe,EAAE,MAAM,aAAa,CAAC,IAAI,EAAE,EAAE,yBAAyB,CAAC,CAAC;;gBAC3F,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;YACvC,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACvE,IAAI,OAAO,CAAC,MAAM;gBAAE,OAAO,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,gCAAgC,CAAC,CAAC;YAC1G,2FAA2F;YAC3F,OAAO,WAAgB,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,OAAO,YAAY,eAAe;gBAAE,MAAM,OAAO,CAAC;YACtD,MAAM,SAAS,GAAG,IAAI,QAAQ,CAAC,4BAA4B,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACvJ,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,SAAS,CAAC;QACjB,CAAC;gBAAS,CAAC;YACV,eAAe,EAAE,EAAE,CAAC;YACpB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC;IACF,CAAC;IAED,SAAS;QACR,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,gBAAgB;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACnE,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO,CAAC,IAA2B;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC;IACjC,CAAC;IAED,YAAY,CAAC,MAA8B;QAC1C,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,EAAE,0BAA0B,CAAC,CAAC;QACjG,eAAe,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QACzE,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QACpF,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACpB,CAAC;CACD"}

package/dist/lib/client/internal/base-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-helpers.d.ts","sourceRoot":"","sources":["../../../../src/lib/client/internal/base-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAErF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,GAAG,CAU7F;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACxC,IAAI,EAAE,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,mBAAmB,EAAE,OAAO,CAAC;CAC7B,GAAG,OAAO,CAAC,OAAO,CAAC,CAgCnB;AAED,wBAAsB,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqB5F"}
+{"version":3,"file":"base-helpers.d.ts","sourceRoot":"","sources":["../../../../src/lib/client/internal/base-helpers.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAIrF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,GAAG,CAY7F;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACxC,IAAI,EAAE,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,mBAAmB,EAAE,OAAO,CAAC;CAC7B,GAAG,OAAO,CAAC,OAAO,CAAC,CAgCnB;AAED,wBAAsB,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAc5F"}

package/dist/lib/client/internal/base-helpers.js

@@ -1,5 +1,13 @@
+import { CaughtFailureSchema } from '@vibesdotdev/kernel';
+import { redactedExcerpt, urlRedactions } from '@vibesdotdev/shared/utils';
+import { readClientValue, JsonValueSchema, QuerySchema, HttpOriginSchema } from "./client-values.js";
+import * as z from 'zod/v4';
 import { APIError } from "./base-types.js";
+const ErrorBodySchema = z.object({ message: z.string().optional(), error: JsonValueSchema.optional() });
 export function buildUrl(baseUrl, path, query) {
+    readClientValue(HttpOriginSchema, baseUrl, 'client-origin-invalid');
+    if (query)
+        query = readClientValue(QuerySchema, query, 'client-query-invalid');
     const url = new URL(path, baseUrl);
     if (query) {
         for (const [key, value] of Object.entries(query)) {
@@ -49,31 +57,23 @@ export async function buildHeaders(args) {
 export async function createApiError(response, request) {
     let message = `${response.status} ${response.statusText}`;
     let body;
+    const secrets = [...urlRedactions(request.url), ...request.headers.values()];
     try {
-        const contentType = response.headers.get('Content-Type');
-        if (contentType?.includes('application/json')) {
-            body = await response.json();
-            if (typeof body === 'object' && body !== null) {
-                const errorBody = body;
-                if (typeof errorBody.message === 'string')
-                    message = errorBody.message;
-                else if (typeof errorBody.error === 'string')
-                    message = errorBody.error;
-                else if (errorBody.error !== undefined)
-                    message = JSON.stringify(errorBody.error);
-            }
+        if (response.headers.get('Content-Type')?.includes('application/json')) {
+            body = readClientValue(JsonValueSchema, await response.json(), 'client-response-invalid');
+            const parsed = ErrorBodySchema.safeParse(body);
+            if (parsed.success)
+                message = parsed.data.message ?? (z.string().safeParse(parsed.data.error).data ?? message);
         }
         else {
-            const text = await response.text();
-            if (text) {
-                message = text;
-                body = text;
-            }
+            body = await response.text();
+            if (body)
+                message = body;
         }
     }
-    catch {
-        // ignore parsing errors
+    catch (error) {
+        return new APIError(redactedExcerpt(message, { maxChars: 2000, secrets }), response.status, response, request, body, { cause: CaughtFailureSchema.parse(error) });
     }
-    return new APIError(message, response.status, response, request, body);
+    return new APIError(redactedExcerpt(message, { maxChars: 2000, secrets }), response.status, response, request, body);
 }
 //# sourceMappingURL=base-helpers.js.map

package/dist/lib/client/internal/base-helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"base-helpers.js","sourceRoot":"","sources":["../../../../src/lib/client/internal/base-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4C,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAErF,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,IAAY,EAAE,KAAgC;IACvF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;;gBACnF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAIlC;IACA,MAAM,cAAc,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,mBAAmB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACrE,cAAc,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAEpF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,IAAI,EAAE,CAAC;QACV,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,KAAK,EAAE,CAAC;YACX,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,QAAQ;oBACZ,cAAc,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;oBACvD,MAAM;gBACP,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACf,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,WAAW,CAAC;oBAClD,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;oBACtC,MAAM;gBACP,CAAC;gBACD,KAAK,OAAO;oBACX,cAAc,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,KAAK,EAAE,CAAC,CAAC;oBACtD,MAAM;gBACP,KAAK,QAAQ;oBACZ,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;wBACpC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;oBAChE,CAAC;oBACD,MAAM;YACR,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,cAAc,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAkB,EAAE,OAAgB;IACxE,IAAI,OAAO,GAAG,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;IAC1D,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACJ,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACzD,IAAI,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC/C,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC/C,MAAM,SAAS,GAAG,IAA8C,CAAC;gBACjE,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;oBAAE,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;qBAClE,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;oBAAE,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC;qBACnE,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS;oBAAE,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnF,CAAC;QACF,CAAC;aAAM,CAAC;YACP,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,IAAI,EAAE,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,IAAI,GAAG,IAAI,CAAC;YAAC,CAAC;QAC3C,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,wBAAwB;IACzB,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACxE,CAAC"}
+{"version":3,"file":"base-helpers.js","sourceRoot":"","sources":["../../../../src/lib/client/internal/base-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,EAAkB,MAAM,oBAAoB,CAAC;AACrH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAA4C,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAErF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAExG,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,IAAY,EAAE,KAAgC;IACvF,eAAe,CAAC,gBAAgB,EAAE,OAAO,EAAE,uBAAuB,CAAC,CAAC;IACpE,IAAI,KAAK;QAAE,KAAK,GAAG,eAAe,CAAC,WAAW,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;;gBACnF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAIlC;IACA,MAAM,cAAc,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,mBAAmB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACrE,cAAc,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAEpF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,IAAI,EAAE,CAAC;QACV,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,KAAK,EAAE,CAAC;YACX,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,QAAQ;oBACZ,cAAc,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;oBACvD,MAAM;gBACP,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACf,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,WAAW,CAAC;oBAClD,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;oBACtC,MAAM;gBACP,CAAC;gBACD,KAAK,OAAO;oBACX,cAAc,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,KAAK,EAAE,CAAC,CAAC;oBACtD,MAAM;gBACP,KAAK,QAAQ;oBACZ,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;wBACpC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;oBAChE,CAAC;oBACD,MAAM;YACR,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,cAAc,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAkB,EAAE,OAAgB;IACxE,IAAI,OAAO,GAAG,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;IAC1D,IAAI,IAA2B,CAAC;IAChC,MAAM,OAAO,GAAG,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACJ,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACxE,IAAI,GAAG,eAAe,CAAC,eAAe,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,yBAAyB,CAAC,CAAC;YAC1F,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC;QAChH,CAAC;aAAM,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;QAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,IAAI,QAAQ,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnK,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACtH,CAAC"}