@workos-inc/node 8.0.0-rc.1 → 8.0.0-rc.3

package/lib/esm/common/net/fetch-client.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/common/net/fetch-client.ts"],"sourcesContent":["import {\n  HttpClientInterface,\n  HttpClientResponseInterface,\n  RequestHeaders,\n  RequestOptions,\n  ResponseHeaders,\n} from '../interfaces/http-client.interface';\nimport { HttpClient, HttpClientError, HttpClientResponse } from './http-client';\nimport { ParseError } from '../exceptions/parse-error';\n\ninterface FetchHttpClientOptions extends RequestInit {\n  timeout?: number;\n}\n\nconst DEFAULT_FETCH_TIMEOUT = 60_000; // 60 seconds\nexport class FetchHttpClient extends HttpClient implements HttpClientInterface {\n  private readonly _fetchFn;\n\n  constructor(\n    readonly baseURL: string,\n    readonly options?: FetchHttpClientOptions,\n    fetchFn?: typeof fetch,\n  ) {\n    super(baseURL, options);\n\n    // Default to global fetch if available\n    if (!fetchFn) {\n      if (!globalThis.fetch) {\n        throw new Error(\n          'Fetch function not defined in the global scope and no replacement was provided.',\n        );\n      }\n      fetchFn = globalThis.fetch;\n    }\n\n    this._fetchFn = fetchFn.bind(globalThis);\n  }\n\n  /** @override */\n  getClientName(): string {\n    return 'fetch';\n  }\n\n  async get(\n    path: string,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface> {\n    const resourceURL = HttpClient.getResourceURL(\n      this.baseURL,\n      path,\n      options.params,\n    );\n\n    if (path.startsWith('/fga/')) {\n      return await this.fetchRequestWithRetry(\n        resourceURL,\n        'GET',\n        null,\n        options.headers,\n      );\n    } else {\n      return await this.fetchRequest(resourceURL, 'GET', null, options.headers);\n    }\n  }\n\n  async post<Entity = any>(\n    path: string,\n    entity: Entity,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface> {\n    const resourceURL = HttpClient.getResourceURL(\n      this.baseURL,\n      path,\n      options.params,\n    );\n\n    if (path.startsWith('/fga/')) {\n      return await this.fetchRequestWithRetry(\n        resourceURL,\n        'POST',\n        HttpClient.getBody(entity),\n        {\n          ...HttpClient.getContentTypeHeader(entity),\n          ...options.headers,\n        },\n      );\n    } else {\n      return await this.fetchRequest(\n        resourceURL,\n        'POST',\n        HttpClient.getBody(entity),\n        {\n          ...HttpClient.getContentTypeHeader(entity),\n          ...options.headers,\n        },\n      );\n    }\n  }\n\n  async put<Entity = any>(\n    path: string,\n    entity: Entity,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface> {\n    const resourceURL = HttpClient.getResourceURL(\n      this.baseURL,\n      path,\n      options.params,\n    );\n\n    if (path.startsWith('/fga/')) {\n      return await this.fetchRequestWithRetry(\n        resourceURL,\n        'PUT',\n        HttpClient.getBody(entity),\n        {\n          ...HttpClient.getContentTypeHeader(entity),\n          ...options.headers,\n        },\n      );\n    } else {\n      return await this.fetchRequest(\n        resourceURL,\n        'PUT',\n        HttpClient.getBody(entity),\n        {\n          ...HttpClient.getContentTypeHeader(entity),\n          ...options.headers,\n        },\n      );\n    }\n  }\n\n  async delete(\n    path: string,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface> {\n    const resourceURL = HttpClient.getResourceURL(\n      this.baseURL,\n      path,\n      options.params,\n    );\n\n    if (path.startsWith('/fga/')) {\n      return await this.fetchRequestWithRetry(\n        resourceURL,\n        'DELETE',\n        null,\n        options.headers,\n      );\n    } else {\n      return await this.fetchRequest(\n        resourceURL,\n        'DELETE',\n        null,\n        options.headers,\n      );\n    }\n  }\n\n  private async fetchRequest(\n    url: string,\n    method: string,\n    body?: any,\n    headers?: RequestHeaders,\n  ): Promise<HttpClientResponseInterface> {\n    // For methods which expect payloads, we should always pass a body value\n    // even when it is empty. Without this, some JS runtimes (eg. Deno) will\n    // inject a second Content-Length header.\n    const methodHasPayload =\n      method === 'POST' || method === 'PUT' || method === 'PATCH';\n\n    const requestBody = body || (methodHasPayload ? '' : undefined);\n\n    const { 'User-Agent': userAgent } = (this.options?.headers ||\n      {}) as RequestHeaders;\n\n    // Access timeout from the options with default of 60 seconds\n    const timeout = this.options?.timeout ?? DEFAULT_FETCH_TIMEOUT; // Default 60 seconds\n    const abortController = new AbortController();\n    const timeoutId = setTimeout(() => {\n      abortController?.abort();\n    }, timeout);\n\n    try {\n      const res = await this._fetchFn(url, {\n        method,\n        headers: {\n          Accept: 'application/json, text/plain, */*',\n          'Content-Type': 'application/json',\n          ...this.options?.headers,\n          ...headers,\n          'User-Agent': this.addClientToUserAgent(\n            (userAgent || 'workos-node').toString(),\n          ),\n        },\n        body: requestBody,\n        signal: abortController?.signal,\n      });\n\n      // Clear timeout if request completed successfully\n      if (timeoutId) {\n        clearTimeout(timeoutId);\n      }\n\n      if (!res.ok) {\n        const requestID = res.headers.get('X-Request-ID') ?? '';\n        const rawBody = await res.text();\n\n        let responseJson: any;\n\n        try {\n          responseJson = JSON.parse(rawBody);\n        } catch (error) {\n          if (error instanceof SyntaxError) {\n            throw new ParseError({\n              message: error.message,\n              rawBody,\n              requestID,\n              rawStatus: res.status,\n            });\n          }\n          throw error;\n        }\n\n        throw new HttpClientError({\n          message: res.statusText,\n          response: {\n            status: res.status,\n            headers: res.headers,\n            data: responseJson,\n          },\n        });\n      }\n      return new FetchHttpClientResponse(res);\n    } catch (error) {\n      // Clear timeout if request failed\n      if (timeoutId) {\n        clearTimeout(timeoutId);\n      }\n\n      // Handle timeout errors\n      if (error instanceof Error && error.name === 'AbortError') {\n        throw new HttpClientError({\n          message: `Request timeout after ${timeout}ms`,\n          response: {\n            status: 408,\n            headers: {},\n            data: { error: 'Request timeout' },\n          },\n        });\n      }\n\n      throw error;\n    }\n  }\n\n  private async fetchRequestWithRetry(\n    url: string,\n    method: string,\n    body?: any,\n    headers?: RequestHeaders,\n  ): Promise<HttpClientResponseInterface> {\n    let response: HttpClientResponseInterface;\n    let retryAttempts = 1;\n\n    const makeRequest = async (): Promise<HttpClientResponseInterface> => {\n      let requestError: any = null;\n\n      try {\n        response = await this.fetchRequest(url, method, body, headers);\n      } catch (e) {\n        requestError = e;\n      }\n\n      if (this.shouldRetryRequest(requestError, retryAttempts)) {\n        retryAttempts++;\n        await this.sleep(retryAttempts);\n        return makeRequest();\n      }\n\n      if (requestError != null) {\n        throw requestError;\n      }\n\n      return response;\n    };\n\n    return makeRequest();\n  }\n\n  private shouldRetryRequest(requestError: any, retryAttempt: number): boolean {\n    if (retryAttempt > this.MAX_RETRY_ATTEMPTS) {\n      return false;\n    }\n\n    if (requestError != null) {\n      if (requestError instanceof TypeError) {\n        return true;\n      }\n\n      if (\n        requestError instanceof HttpClientError &&\n        this.RETRY_STATUS_CODES.includes(requestError.response.status)\n      ) {\n        return true;\n      }\n    }\n\n    return false;\n  }\n}\n\n// tslint:disable-next-line\nexport class FetchHttpClientResponse\n  extends HttpClientResponse\n  implements HttpClientResponseInterface\n{\n  _res: Response;\n\n  constructor(res: Response) {\n    super(\n      res.status,\n      FetchHttpClientResponse._transformHeadersToObject(res.headers),\n    );\n    this._res = res;\n  }\n\n  getRawResponse(): Response {\n    return this._res;\n  }\n\n  toJSON(): Promise<any> | null {\n    const contentType = this._res.headers.get('content-type');\n    const isJsonResponse = contentType?.includes('application/json');\n\n    return isJsonResponse ? this._res.json() : null;\n  }\n\n  static _transformHeadersToObject(headers: Headers): ResponseHeaders {\n    // Fetch uses a Headers instance so this must be converted to a barebones\n    // JS object to meet the HttpClient interface.\n    const headersObj: ResponseHeaders = {};\n    for (const entry of Object.entries(headers)) {\n      if (!Array.isArray(entry) || entry.length !== 2) {\n        throw new Error(\n          'Response objects produced by the fetch function given to FetchHttpClient do not have an iterable headers map. Response#headers should be an iterable object.',\n        );\n      }\n\n      headersObj[entry[0]] = entry[1];\n    }\n\n    return headersObj;\n  }\n}\n"],"mappings":";;AAOA,SAAS,YAAY,iBAAiB,0BAA0B;AAChE,SAAS,kBAAkB;AAM3B,MAAM,wBAAwB;AACvB,MAAM,wBAAwB,WAA0C;AAAA,EAG7E,YACW,SACA,SACT,SACA;AACA,UAAM,SAAS,OAAO;AAJb;AACA;AAMT,QAAI,CAAC,SAAS;AACZ,UAAI,CAAC,WAAW,OAAO;AACrB,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AACA,gBAAU,WAAW;AAAA,IACvB;AAEA,SAAK,WAAW,QAAQ,KAAK,UAAU;AAAA,EACzC;AAAA,EApCF,OAe+E;AAAA;AAAA;AAAA,EAC5D;AAAA;AAAA,EAuBjB,gBAAwB;AACtB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,IACJ,MACA,SACsC;AACtC,UAAM,cAAc,WAAW;AAAA,MAC7B,KAAK;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,IACV;AAEA,QAAI,KAAK,WAAW,OAAO,GAAG;AAC5B,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,IACF,OAAO;AACL,aAAO,MAAM,KAAK,aAAa,aAAa,OAAO,MAAM,QAAQ,OAAO;AAAA,IAC1E;AAAA,EACF;AAAA,EAEA,MAAM,KACJ,MACA,QACA,SACsC;AACtC,UAAM,cAAc,WAAW;AAAA,MAC7B,KAAK;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,IACV;AAEA,QAAI,KAAK,WAAW,OAAO,GAAG;AAC5B,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA,WAAW,QAAQ,MAAM;AAAA,QACzB;AAAA,UACE,GAAG,WAAW,qBAAqB,MAAM;AAAA,UACzC,GAAG,QAAQ;AAAA,QACb;AAAA,MACF;AAAA,IACF,OAAO;AACL,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA,WAAW,QAAQ,MAAM;AAAA,QACzB;AAAA,UACE,GAAG,WAAW,qBAAqB,MAAM;AAAA,UACzC,GAAG,QAAQ;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,IACJ,MACA,QACA,SACsC;AACtC,UAAM,cAAc,WAAW;AAAA,MAC7B,KAAK;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,IACV;AAEA,QAAI,KAAK,WAAW,OAAO,GAAG;AAC5B,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA,WAAW,QAAQ,MAAM;AAAA,QACzB;AAAA,UACE,GAAG,WAAW,qBAAqB,MAAM;AAAA,UACzC,GAAG,QAAQ;AAAA,QACb;AAAA,MACF;AAAA,IACF,OAAO;AACL,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA,WAAW,QAAQ,MAAM;AAAA,QACzB;AAAA,UACE,GAAG,WAAW,qBAAqB,MAAM;AAAA,UACzC,GAAG,QAAQ;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,OACJ,MACA,SACsC;AACtC,UAAM,cAAc,WAAW;AAAA,MAC7B,KAAK;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,IACV;AAEA,QAAI,KAAK,WAAW,OAAO,GAAG;AAC5B,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,IACF,OAAO;AACL,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,aACZ,KACA,QACA,MACA,SACsC;AAItC,UAAM,mBACJ,WAAW,UAAU,WAAW,SAAS,WAAW;AAEtD,UAAM,cAAc,SAAS,mBAAmB,KAAK;AAErD,UAAM,EAAE,cAAc,UAAU,IAAK,KAAK,SAAS,WACjD,CAAC;AAGH,UAAM,UAAU,KAAK,SAAS,WAAW;AACzC,UAAM,kBAAkB,IAAI,gBAAgB;AAC5C,UAAM,YAAY,WAAW,MAAM;AACjC,uBAAiB,MAAM;AAAA,IACzB,GAAG,OAAO;AAEV,QAAI;AACF,YAAM,MAAM,MAAM,KAAK,SAAS,KAAK;AAAA,QACnC;AAAA,QACA,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,gBAAgB;AAAA,UAChB,GAAG,KAAK,SAAS;AAAA,UACjB,GAAG;AAAA,UACH,cAAc,KAAK;AAAA,aAChB,aAAa,eAAe,SAAS;AAAA,UACxC;AAAA,QACF;AAAA,QACA,MAAM;AAAA,QACN,QAAQ,iBAAiB;AAAA,MAC3B,CAAC;AAGD,UAAI,WAAW;AACb,qBAAa,SAAS;AAAA,MACxB;AAEA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,YAAY,IAAI,QAAQ,IAAI,cAAc,KAAK;AACrD,cAAM,UAAU,MAAM,IAAI,KAAK;AAE/B,YAAI;AAEJ,YAAI;AACF,yBAAe,KAAK,MAAM,OAAO;AAAA,QACnC,SAAS,OAAO;AACd,cAAI,iBAAiB,aAAa;AAChC,kBAAM,IAAI,WAAW;AAAA,cACnB,SAAS,MAAM;AAAA,cACf;AAAA,cACA;AAAA,cACA,WAAW,IAAI;AAAA,YACjB,CAAC;AAAA,UACH;AACA,gBAAM;AAAA,QACR;AAEA,cAAM,IAAI,gBAAgB;AAAA,UACxB,SAAS,IAAI;AAAA,UACb,UAAU;AAAA,YACR,QAAQ,IAAI;AAAA,YACZ,SAAS,IAAI;AAAA,YACb,MAAM;AAAA,UACR;AAAA,QACF,CAAC;AAAA,MACH;AACA,aAAO,IAAI,wBAAwB,GAAG;AAAA,IACxC,SAAS,OAAO;AAEd,UAAI,WAAW;AACb,qBAAa,SAAS;AAAA,MACxB;AAGA,UAAI,iBAAiB,SAAS,MAAM,SAAS,cAAc;AACzD,cAAM,IAAI,gBAAgB;AAAA,UACxB,SAAS,yBAAyB,OAAO;AAAA,UACzC,UAAU;AAAA,YACR,QAAQ;AAAA,YACR,SAAS,CAAC;AAAA,YACV,MAAM,EAAE,OAAO,kBAAkB;AAAA,UACnC;AAAA,QACF,CAAC;AAAA,MACH;AAEA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAc,sBACZ,KACA,QACA,MACA,SACsC;AACtC,QAAI;AACJ,QAAI,gBAAgB;AAEpB,UAAM,cAAc,mCAAkD;AACpE,UAAI,eAAoB;AAExB,UAAI;AACF,mBAAW,MAAM,KAAK,aAAa,KAAK,QAAQ,MAAM,OAAO;AAAA,MAC/D,SAAS,GAAG;AACV,uBAAe;AAAA,MACjB;AAEA,UAAI,KAAK,mBAAmB,cAAc,aAAa,GAAG;AACxD;AACA,cAAM,KAAK,MAAM,aAAa;AAC9B,eAAO,YAAY;AAAA,MACrB;AAEA,UAAI,gBAAgB,MAAM;AACxB,cAAM;AAAA,MACR;AAEA,aAAO;AAAA,IACT,GApBoB;AAsBpB,WAAO,YAAY;AAAA,EACrB;AAAA,EAEQ,mBAAmB,cAAmB,cAA+B;AAC3E,QAAI,eAAe,KAAK,oBAAoB;AAC1C,aAAO;AAAA,IACT;AAEA,QAAI,gBAAgB,MAAM;AACxB,UAAI,wBAAwB,WAAW;AACrC,eAAO;AAAA,MACT;AAEA,UACE,wBAAwB,mBACxB,KAAK,mBAAmB,SAAS,aAAa,SAAS,MAAM,GAC7D;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AACF;AAGO,MAAM,gCACH,mBAEV;AAAA,EA7TA,OA6TA;AAAA;AAAA;AAAA,EACE;AAAA,EAEA,YAAY,KAAe;AACzB;AAAA,MACE,IAAI;AAAA,MACJ,wBAAwB,0BAA0B,IAAI,OAAO;AAAA,IAC/D;AACA,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,iBAA2B;AACzB,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,SAA8B;AAC5B,UAAM,cAAc,KAAK,KAAK,QAAQ,IAAI,cAAc;AACxD,UAAM,iBAAiB,aAAa,SAAS,kBAAkB;AAE/D,WAAO,iBAAiB,KAAK,KAAK,KAAK,IAAI;AAAA,EAC7C;AAAA,EAEA,OAAO,0BAA0B,SAAmC;AAGlE,UAAM,aAA8B,CAAC;AACrC,eAAW,SAAS,OAAO,QAAQ,OAAO,GAAG;AAC3C,UAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,GAAG;AAC/C,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAEA,iBAAW,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC;AAAA,IAChC;AAEA,WAAO;AAAA,EACT;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/common/net/fetch-client.ts"],"sourcesContent":["import {\n  HttpClientInterface,\n  HttpClientResponseInterface,\n  RequestHeaders,\n  RequestOptions,\n  ResponseHeaders,\n} from '../interfaces/http-client.interface';\nimport { HttpClient, HttpClientError, HttpClientResponse } from './http-client';\nimport { ParseError } from '../exceptions/parse-error';\n\ninterface FetchHttpClientOptions extends RequestInit {\n  timeout?: number;\n}\n\nconst DEFAULT_FETCH_TIMEOUT = 60_000; // 60 seconds\nexport class FetchHttpClient extends HttpClient implements HttpClientInterface {\n  private readonly _fetchFn;\n\n  constructor(\n    readonly baseURL: string,\n    readonly options?: FetchHttpClientOptions,\n    fetchFn?: typeof fetch,\n  ) {\n    super(baseURL, options);\n\n    // Default to global fetch if available\n    if (!fetchFn) {\n      if (!globalThis.fetch) {\n        throw new Error(\n          'Fetch function not defined in the global scope and no replacement was provided.',\n        );\n      }\n      fetchFn = globalThis.fetch;\n    }\n\n    this._fetchFn = fetchFn.bind(globalThis);\n  }\n\n  /** @override */\n  getClientName(): string {\n    return 'fetch';\n  }\n\n  async get(\n    path: string,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface> {\n    const resourceURL = HttpClient.getResourceURL(\n      this.baseURL,\n      path,\n      options.params,\n    );\n\n    if (HttpClient.isPathRetryable(path)) {\n      return await this.fetchRequestWithRetry(\n        resourceURL,\n        'GET',\n        null,\n        options.headers,\n      );\n    } else {\n      return await this.fetchRequest(resourceURL, 'GET', null, options.headers);\n    }\n  }\n\n  async post<Entity = any>(\n    path: string,\n    entity: Entity,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface> {\n    const resourceURL = HttpClient.getResourceURL(\n      this.baseURL,\n      path,\n      options.params,\n    );\n\n    if (HttpClient.isPathRetryable(path)) {\n      return await this.fetchRequestWithRetry(\n        resourceURL,\n        'POST',\n        HttpClient.getBody(entity),\n        {\n          ...HttpClient.getContentTypeHeader(entity),\n          ...options.headers,\n        },\n      );\n    } else {\n      return await this.fetchRequest(\n        resourceURL,\n        'POST',\n        HttpClient.getBody(entity),\n        {\n          ...HttpClient.getContentTypeHeader(entity),\n          ...options.headers,\n        },\n      );\n    }\n  }\n\n  async put<Entity = any>(\n    path: string,\n    entity: Entity,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface> {\n    const resourceURL = HttpClient.getResourceURL(\n      this.baseURL,\n      path,\n      options.params,\n    );\n\n    if (HttpClient.isPathRetryable(path)) {\n      return await this.fetchRequestWithRetry(\n        resourceURL,\n        'PUT',\n        HttpClient.getBody(entity),\n        {\n          ...HttpClient.getContentTypeHeader(entity),\n          ...options.headers,\n        },\n      );\n    } else {\n      return await this.fetchRequest(\n        resourceURL,\n        'PUT',\n        HttpClient.getBody(entity),\n        {\n          ...HttpClient.getContentTypeHeader(entity),\n          ...options.headers,\n        },\n      );\n    }\n  }\n\n  async delete(\n    path: string,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface> {\n    const resourceURL = HttpClient.getResourceURL(\n      this.baseURL,\n      path,\n      options.params,\n    );\n\n    if (HttpClient.isPathRetryable(path)) {\n      return await this.fetchRequestWithRetry(\n        resourceURL,\n        'DELETE',\n        null,\n        options.headers,\n      );\n    } else {\n      return await this.fetchRequest(\n        resourceURL,\n        'DELETE',\n        null,\n        options.headers,\n      );\n    }\n  }\n\n  private async fetchRequest(\n    url: string,\n    method: string,\n    body?: any,\n    headers?: RequestHeaders,\n  ): Promise<HttpClientResponseInterface> {\n    // For methods which expect payloads, we should always pass a body value\n    // even when it is empty. Without this, some JS runtimes (eg. Deno) will\n    // inject a second Content-Length header.\n    const methodHasPayload =\n      method === 'POST' || method === 'PUT' || method === 'PATCH';\n\n    const requestBody = body || (methodHasPayload ? '' : undefined);\n\n    const { 'User-Agent': userAgent } = (this.options?.headers ||\n      {}) as RequestHeaders;\n\n    // Access timeout from the options with default of 60 seconds\n    const timeout = this.options?.timeout ?? DEFAULT_FETCH_TIMEOUT; // Default 60 seconds\n    const abortController = new AbortController();\n    const timeoutId = setTimeout(() => {\n      abortController?.abort();\n    }, timeout);\n\n    try {\n      const res = await this._fetchFn(url, {\n        method,\n        headers: {\n          Accept: 'application/json, text/plain, */*',\n          'Content-Type': 'application/json',\n          ...this.options?.headers,\n          ...headers,\n          'User-Agent': this.addClientToUserAgent(\n            (userAgent || 'workos-node').toString(),\n          ),\n        },\n        body: requestBody,\n        signal: abortController?.signal,\n      });\n\n      // Clear timeout if request completed successfully\n      if (timeoutId) {\n        clearTimeout(timeoutId);\n      }\n\n      if (!res.ok) {\n        const requestID = res.headers.get('X-Request-ID') ?? '';\n        const rawBody = await res.text();\n\n        let responseJson: any;\n\n        try {\n          responseJson = JSON.parse(rawBody);\n        } catch (error) {\n          if (error instanceof SyntaxError) {\n            throw new ParseError({\n              message: error.message,\n              rawBody,\n              requestID,\n              rawStatus: res.status,\n            });\n          }\n          throw error;\n        }\n\n        throw new HttpClientError({\n          message: res.statusText,\n          response: {\n            status: res.status,\n            headers: res.headers,\n            data: responseJson,\n          },\n        });\n      }\n      return new FetchHttpClientResponse(res);\n    } catch (error) {\n      // Clear timeout if request failed\n      if (timeoutId) {\n        clearTimeout(timeoutId);\n      }\n\n      // Handle timeout errors\n      if (error instanceof Error && error.name === 'AbortError') {\n        throw new HttpClientError({\n          message: `Request timeout after ${timeout}ms`,\n          response: {\n            status: 408,\n            headers: {},\n            data: { error: 'Request timeout' },\n          },\n        });\n      }\n\n      throw error;\n    }\n  }\n\n  private async fetchRequestWithRetry(\n    url: string,\n    method: string,\n    body?: any,\n    headers?: RequestHeaders,\n  ): Promise<HttpClientResponseInterface> {\n    let response: HttpClientResponseInterface;\n    let retryAttempts = 1;\n\n    const makeRequest = async (): Promise<HttpClientResponseInterface> => {\n      let requestError: any = null;\n\n      try {\n        response = await this.fetchRequest(url, method, body, headers);\n      } catch (e) {\n        requestError = e;\n      }\n\n      if (this.shouldRetryRequest(requestError, retryAttempts)) {\n        retryAttempts++;\n        await this.sleep(retryAttempts);\n        return makeRequest();\n      }\n\n      if (requestError != null) {\n        throw requestError;\n      }\n\n      return response;\n    };\n\n    return makeRequest();\n  }\n\n  private shouldRetryRequest(requestError: any, retryAttempt: number): boolean {\n    if (retryAttempt > this.MAX_RETRY_ATTEMPTS) {\n      return false;\n    }\n\n    if (requestError != null) {\n      if (requestError instanceof TypeError) {\n        return true;\n      }\n\n      if (\n        requestError instanceof HttpClientError &&\n        this.RETRY_STATUS_CODES.includes(requestError.response.status)\n      ) {\n        return true;\n      }\n    }\n\n    return false;\n  }\n}\n\n// tslint:disable-next-line\nexport class FetchHttpClientResponse\n  extends HttpClientResponse\n  implements HttpClientResponseInterface\n{\n  _res: Response;\n\n  constructor(res: Response) {\n    super(\n      res.status,\n      FetchHttpClientResponse._transformHeadersToObject(res.headers),\n    );\n    this._res = res;\n  }\n\n  getRawResponse(): Response {\n    return this._res;\n  }\n\n  toJSON(): Promise<any> | null {\n    const contentType = this._res.headers.get('content-type');\n    const isJsonResponse = contentType?.includes('application/json');\n\n    return isJsonResponse ? this._res.json() : null;\n  }\n\n  static _transformHeadersToObject(headers: Headers): ResponseHeaders {\n    // Fetch uses a Headers instance so this must be converted to a barebones\n    // JS object to meet the HttpClient interface.\n    const headersObj: ResponseHeaders = {};\n    for (const entry of Object.entries(headers)) {\n      if (!Array.isArray(entry) || entry.length !== 2) {\n        throw new Error(\n          'Response objects produced by the fetch function given to FetchHttpClient do not have an iterable headers map. Response#headers should be an iterable object.',\n        );\n      }\n\n      headersObj[entry[0]] = entry[1];\n    }\n\n    return headersObj;\n  }\n}\n"],"mappings":";;AAOA,SAAS,YAAY,iBAAiB,0BAA0B;AAChE,SAAS,kBAAkB;AAM3B,MAAM,wBAAwB;AACvB,MAAM,wBAAwB,WAA0C;AAAA,EAG7E,YACW,SACA,SACT,SACA;AACA,UAAM,SAAS,OAAO;AAJb;AACA;AAMT,QAAI,CAAC,SAAS;AACZ,UAAI,CAAC,WAAW,OAAO;AACrB,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AACA,gBAAU,WAAW;AAAA,IACvB;AAEA,SAAK,WAAW,QAAQ,KAAK,UAAU;AAAA,EACzC;AAAA,EApCF,OAe+E;AAAA;AAAA;AAAA,EAC5D;AAAA;AAAA,EAuBjB,gBAAwB;AACtB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,IACJ,MACA,SACsC;AACtC,UAAM,cAAc,WAAW;AAAA,MAC7B,KAAK;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,IACV;AAEA,QAAI,WAAW,gBAAgB,IAAI,GAAG;AACpC,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,IACF,OAAO;AACL,aAAO,MAAM,KAAK,aAAa,aAAa,OAAO,MAAM,QAAQ,OAAO;AAAA,IAC1E;AAAA,EACF;AAAA,EAEA,MAAM,KACJ,MACA,QACA,SACsC;AACtC,UAAM,cAAc,WAAW;AAAA,MAC7B,KAAK;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,IACV;AAEA,QAAI,WAAW,gBAAgB,IAAI,GAAG;AACpC,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA,WAAW,QAAQ,MAAM;AAAA,QACzB;AAAA,UACE,GAAG,WAAW,qBAAqB,MAAM;AAAA,UACzC,GAAG,QAAQ;AAAA,QACb;AAAA,MACF;AAAA,IACF,OAAO;AACL,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA,WAAW,QAAQ,MAAM;AAAA,QACzB;AAAA,UACE,GAAG,WAAW,qBAAqB,MAAM;AAAA,UACzC,GAAG,QAAQ;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,IACJ,MACA,QACA,SACsC;AACtC,UAAM,cAAc,WAAW;AAAA,MAC7B,KAAK;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,IACV;AAEA,QAAI,WAAW,gBAAgB,IAAI,GAAG;AACpC,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA,WAAW,QAAQ,MAAM;AAAA,QACzB;AAAA,UACE,GAAG,WAAW,qBAAqB,MAAM;AAAA,UACzC,GAAG,QAAQ;AAAA,QACb;AAAA,MACF;AAAA,IACF,OAAO;AACL,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA,WAAW,QAAQ,MAAM;AAAA,QACzB;AAAA,UACE,GAAG,WAAW,qBAAqB,MAAM;AAAA,UACzC,GAAG,QAAQ;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,OACJ,MACA,SACsC;AACtC,UAAM,cAAc,WAAW;AAAA,MAC7B,KAAK;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,IACV;AAEA,QAAI,WAAW,gBAAgB,IAAI,GAAG;AACpC,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,IACF,OAAO;AACL,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,aACZ,KACA,QACA,MACA,SACsC;AAItC,UAAM,mBACJ,WAAW,UAAU,WAAW,SAAS,WAAW;AAEtD,UAAM,cAAc,SAAS,mBAAmB,KAAK;AAErD,UAAM,EAAE,cAAc,UAAU,IAAK,KAAK,SAAS,WACjD,CAAC;AAGH,UAAM,UAAU,KAAK,SAAS,WAAW;AACzC,UAAM,kBAAkB,IAAI,gBAAgB;AAC5C,UAAM,YAAY,WAAW,MAAM;AACjC,uBAAiB,MAAM;AAAA,IACzB,GAAG,OAAO;AAEV,QAAI;AACF,YAAM,MAAM,MAAM,KAAK,SAAS,KAAK;AAAA,QACnC;AAAA,QACA,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,gBAAgB;AAAA,UAChB,GAAG,KAAK,SAAS;AAAA,UACjB,GAAG;AAAA,UACH,cAAc,KAAK;AAAA,aAChB,aAAa,eAAe,SAAS;AAAA,UACxC;AAAA,QACF;AAAA,QACA,MAAM;AAAA,QACN,QAAQ,iBAAiB;AAAA,MAC3B,CAAC;AAGD,UAAI,WAAW;AACb,qBAAa,SAAS;AAAA,MACxB;AAEA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,YAAY,IAAI,QAAQ,IAAI,cAAc,KAAK;AACrD,cAAM,UAAU,MAAM,IAAI,KAAK;AAE/B,YAAI;AAEJ,YAAI;AACF,yBAAe,KAAK,MAAM,OAAO;AAAA,QACnC,SAAS,OAAO;AACd,cAAI,iBAAiB,aAAa;AAChC,kBAAM,IAAI,WAAW;AAAA,cACnB,SAAS,MAAM;AAAA,cACf;AAAA,cACA;AAAA,cACA,WAAW,IAAI;AAAA,YACjB,CAAC;AAAA,UACH;AACA,gBAAM;AAAA,QACR;AAEA,cAAM,IAAI,gBAAgB;AAAA,UACxB,SAAS,IAAI;AAAA,UACb,UAAU;AAAA,YACR,QAAQ,IAAI;AAAA,YACZ,SAAS,IAAI;AAAA,YACb,MAAM;AAAA,UACR;AAAA,QACF,CAAC;AAAA,MACH;AACA,aAAO,IAAI,wBAAwB,GAAG;AAAA,IACxC,SAAS,OAAO;AAEd,UAAI,WAAW;AACb,qBAAa,SAAS;AAAA,MACxB;AAGA,UAAI,iBAAiB,SAAS,MAAM,SAAS,cAAc;AACzD,cAAM,IAAI,gBAAgB;AAAA,UACxB,SAAS,yBAAyB,OAAO;AAAA,UACzC,UAAU;AAAA,YACR,QAAQ;AAAA,YACR,SAAS,CAAC;AAAA,YACV,MAAM,EAAE,OAAO,kBAAkB;AAAA,UACnC;AAAA,QACF,CAAC;AAAA,MACH;AAEA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAc,sBACZ,KACA,QACA,MACA,SACsC;AACtC,QAAI;AACJ,QAAI,gBAAgB;AAEpB,UAAM,cAAc,mCAAkD;AACpE,UAAI,eAAoB;AAExB,UAAI;AACF,mBAAW,MAAM,KAAK,aAAa,KAAK,QAAQ,MAAM,OAAO;AAAA,MAC/D,SAAS,GAAG;AACV,uBAAe;AAAA,MACjB;AAEA,UAAI,KAAK,mBAAmB,cAAc,aAAa,GAAG;AACxD;AACA,cAAM,KAAK,MAAM,aAAa;AAC9B,eAAO,YAAY;AAAA,MACrB;AAEA,UAAI,gBAAgB,MAAM;AACxB,cAAM;AAAA,MACR;AAEA,aAAO;AAAA,IACT,GApBoB;AAsBpB,WAAO,YAAY;AAAA,EACrB;AAAA,EAEQ,mBAAmB,cAAmB,cAA+B;AAC3E,QAAI,eAAe,KAAK,oBAAoB;AAC1C,aAAO;AAAA,IACT;AAEA,QAAI,gBAAgB,MAAM;AACxB,UAAI,wBAAwB,WAAW;AACrC,eAAO;AAAA,MACT;AAEA,UACE,wBAAwB,mBACxB,KAAK,mBAAmB,SAAS,aAAa,SAAS,MAAM,GAC7D;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AACF;AAGO,MAAM,gCACH,mBAEV;AAAA,EA7TA,OA6TA;AAAA;AAAA;AAAA,EACE;AAAA,EAEA,YAAY,KAAe;AACzB;AAAA,MACE,IAAI;AAAA,MACJ,wBAAwB,0BAA0B,IAAI,OAAO;AAAA,IAC/D;AACA,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,iBAA2B;AACzB,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,SAA8B;AAC5B,UAAM,cAAc,KAAK,KAAK,QAAQ,IAAI,cAAc;AACxD,UAAM,iBAAiB,aAAa,SAAS,kBAAkB;AAE/D,WAAO,iBAAiB,KAAK,KAAK,KAAK,IAAI;AAAA,EAC7C;AAAA,EAEA,OAAO,0BAA0B,SAAmC;AAGlE,UAAM,aAA8B,CAAC;AACrC,eAAW,SAAS,OAAO,QAAQ,OAAO,GAAG;AAC3C,UAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,GAAG;AAC/C,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAEA,iBAAW,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC;AAAA,IAChC;AAEA,WAAO;AAAA,EACT;AACF;","names":[]}

package/lib/esm/common/net/http-client.d.ts

@@ -19,6 +19,7 @@ declare abstract class HttpClient implements HttpClientInterface {
     static getQueryString(queryObj?: Record<string, any>): string | undefined;
     static getContentTypeHeader(entity: any): RequestHeaders | undefined;
     static getBody(entity: any): BodyInit | null | undefined;
+    static isPathRetryable(path: string): boolean;
     private getSleepTimeInMilliseconds;
     sleep: (retryAttempt: number) => Promise<unknown>;
 }

package/lib/esm/common/net/http-client.js

@@ -11,7 +11,7 @@ class HttpClient {
   MAX_RETRY_ATTEMPTS = 3;
   BACKOFF_MULTIPLIER = 1.5;
   MINIMUM_SLEEP_TIME_IN_MILLISECONDS = 500;
-  RETRY_STATUS_CODES = [500, 502, 504];
+  RETRY_STATUS_CODES = [408, 500, 502, 504];
   /** The HTTP client name used for diagnostics */
   getClientName() {
     throw new Error("getClientName not implemented");
@@ -50,6 +50,9 @@ class HttpClient {
     }
     return JSON.stringify(entity);
   }
+  static isPathRetryable(path) {
+    return path.startsWith("/fga/") || path.startsWith("/vault/");
+  }
   getSleepTimeInMilliseconds(retryAttempt) {
     const sleepTime = this.MINIMUM_SLEEP_TIME_IN_MILLISECONDS * Math.pow(this.BACKOFF_MULTIPLIER, retryAttempt);
     const jitter = Math.random() + 0.5;

package/lib/esm/common/net/http-client.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/common/net/http-client.ts"],"sourcesContent":["import {\n  HttpClientInterface,\n  HttpClientResponseInterface,\n  RequestHeaders,\n  RequestOptions,\n  ResponseHeaders,\n} from '../interfaces/http-client.interface';\n\nexport abstract class HttpClient implements HttpClientInterface {\n  readonly MAX_RETRY_ATTEMPTS = 3;\n  readonly BACKOFF_MULTIPLIER = 1.5;\n  readonly MINIMUM_SLEEP_TIME_IN_MILLISECONDS = 500;\n  readonly RETRY_STATUS_CODES = [500, 502, 504];\n\n  constructor(\n    readonly baseURL: string,\n    readonly options?: RequestInit,\n  ) {}\n\n  /** The HTTP client name used for diagnostics */\n  getClientName(): string {\n    throw new Error('getClientName not implemented');\n  }\n\n  abstract get(\n    path: string,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface>;\n\n  abstract post<Entity = any>(\n    path: string,\n    entity: Entity,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface>;\n\n  abstract put<Entity = any>(\n    path: string,\n    entity: Entity,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface>;\n\n  abstract delete(\n    path: string,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface>;\n\n  addClientToUserAgent(userAgent: string): string {\n    if (userAgent.indexOf(' ') > -1) {\n      return userAgent.replace(/\\b\\s/, `/${this.getClientName()} `);\n    } else {\n      return (userAgent += `/${this.getClientName()}`);\n    }\n  }\n\n  static getResourceURL(\n    baseURL: string,\n    path: string,\n    params?: Record<string, any>,\n  ) {\n    const queryString = HttpClient.getQueryString(params);\n    const url = new URL([path, queryString].filter(Boolean).join('?'), baseURL);\n    return url.toString();\n  }\n\n  static getQueryString(queryObj?: Record<string, any>) {\n    if (!queryObj) return undefined;\n\n    const sanitizedQueryObj: Record<string, any> = {};\n\n    Object.entries(queryObj).forEach(([param, value]) => {\n      if (value !== '' && value !== undefined) sanitizedQueryObj[param] = value;\n    });\n\n    return new URLSearchParams(sanitizedQueryObj).toString();\n  }\n\n  static getContentTypeHeader(entity: any): RequestHeaders | undefined {\n    if (entity instanceof URLSearchParams) {\n      return {\n        'Content-Type': 'application/x-www-form-urlencoded;charset=utf-8',\n      };\n    }\n    return undefined;\n  }\n\n  static getBody(entity: any): BodyInit | null | undefined {\n    if (entity === null || entity instanceof URLSearchParams) {\n      return entity;\n    }\n\n    return JSON.stringify(entity);\n  }\n\n  private getSleepTimeInMilliseconds(retryAttempt: number): number {\n    const sleepTime =\n      this.MINIMUM_SLEEP_TIME_IN_MILLISECONDS *\n      Math.pow(this.BACKOFF_MULTIPLIER, retryAttempt);\n    const jitter = Math.random() + 0.5;\n    return sleepTime * jitter;\n  }\n\n  sleep = (retryAttempt: number) =>\n    new Promise((resolve) =>\n      setTimeout(resolve, this.getSleepTimeInMilliseconds(retryAttempt)),\n    );\n}\n\n// tslint:disable-next-line\nexport abstract class HttpClientResponse\n  implements HttpClientResponseInterface\n{\n  _statusCode: number;\n  _headers: ResponseHeaders;\n\n  constructor(statusCode: number, headers: ResponseHeaders) {\n    this._statusCode = statusCode;\n    this._headers = headers;\n  }\n\n  getStatusCode(): number {\n    return this._statusCode;\n  }\n\n  getHeaders(): ResponseHeaders {\n    return this._headers;\n  }\n\n  abstract getRawResponse(): unknown;\n\n  abstract toJSON(): any | null;\n}\n\n// tslint:disable-next-line\nexport class HttpClientError<T> extends Error {\n  readonly name: string = 'HttpClientError';\n  readonly message: string = 'The request could not be completed.';\n  readonly response: { status: number; headers: any; data: T };\n\n  constructor({\n    message,\n    response,\n  }: {\n    message: string;\n    readonly response: HttpClientError<T>['response'];\n  }) {\n    super(message);\n    this.message = message;\n    this.response = response;\n  }\n}\n"],"mappings":";;AAQO,MAAe,WAA0C;AAAA,EAM9D,YACW,SACA,SACT;AAFS;AACA;AAAA,EACR;AAAA,EAjBL,OAQgE;AAAA;AAAA;AAAA,EACrD,qBAAqB;AAAA,EACrB,qBAAqB;AAAA,EACrB,qCAAqC;AAAA,EACrC,qBAAqB,CAAC,KAAK,KAAK,GAAG;AAAA;AAAA,EAQ5C,gBAAwB;AACtB,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AAAA,EAwBA,qBAAqB,WAA2B;AAC9C,QAAI,UAAU,QAAQ,GAAG,IAAI,IAAI;AAC/B,aAAO,UAAU,QAAQ,QAAQ,IAAI,KAAK,cAAc,CAAC,GAAG;AAAA,IAC9D,OAAO;AACL,aAAQ,aAAa,IAAI,KAAK,cAAc,CAAC;AAAA,IAC/C;AAAA,EACF;AAAA,EAEA,OAAO,eACL,SACA,MACA,QACA;AACA,UAAM,cAAc,WAAW,eAAe,MAAM;AACpD,UAAM,MAAM,IAAI,IAAI,CAAC,MAAM,WAAW,EAAE,OAAO,OAAO,EAAE,KAAK,GAAG,GAAG,OAAO;AAC1E,WAAO,IAAI,SAAS;AAAA,EACtB;AAAA,EAEA,OAAO,eAAe,UAAgC;AACpD,QAAI,CAAC,SAAU,QAAO;AAEtB,UAAM,oBAAyC,CAAC;AAEhD,WAAO,QAAQ,QAAQ,EAAE,QAAQ,CAAC,CAAC,OAAO,KAAK,MAAM;AACnD,UAAI,UAAU,MAAM,UAAU,OAAW,mBAAkB,KAAK,IAAI;AAAA,IACtE,CAAC;AAED,WAAO,IAAI,gBAAgB,iBAAiB,EAAE,SAAS;AAAA,EACzD;AAAA,EAEA,OAAO,qBAAqB,QAAyC;AACnE,QAAI,kBAAkB,iBAAiB;AACrC,aAAO;AAAA,QACL,gBAAgB;AAAA,MAClB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,QAAQ,QAA0C;AACvD,QAAI,WAAW,QAAQ,kBAAkB,iBAAiB;AACxD,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,UAAU,MAAM;AAAA,EAC9B;AAAA,EAEQ,2BAA2B,cAA8B;AAC/D,UAAM,YACJ,KAAK,qCACL,KAAK,IAAI,KAAK,oBAAoB,YAAY;AAChD,UAAM,SAAS,KAAK,OAAO,IAAI;AAC/B,WAAO,YAAY;AAAA,EACrB;AAAA,EAEA,QAAQ,wBAAC,iBACP,IAAI;AAAA,IAAQ,CAAC,YACX,WAAW,SAAS,KAAK,2BAA2B,YAAY,CAAC;AAAA,EACnE,GAHM;AAIV;AAGO,MAAe,mBAEtB;AAAA,EA9GA,OA8GA;AAAA;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EAEA,YAAY,YAAoB,SAA0B;AACxD,SAAK,cAAc;AACnB,SAAK,WAAW;AAAA,EAClB;AAAA,EAEA,gBAAwB;AACtB,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,aAA8B;AAC5B,WAAO,KAAK;AAAA,EACd;AAKF;AAGO,MAAM,wBAA2B,MAAM;AAAA,EArI9C,OAqI8C;AAAA;AAAA;AAAA,EACnC,OAAe;AAAA,EACf,UAAkB;AAAA,EAClB;AAAA,EAET,YAAY;AAAA,IACV;AAAA,IACA;AAAA,EACF,GAGG;AACD,UAAM,OAAO;AACb,SAAK,UAAU;AACf,SAAK,WAAW;AAAA,EAClB;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/common/net/http-client.ts"],"sourcesContent":["import {\n  HttpClientInterface,\n  HttpClientResponseInterface,\n  RequestHeaders,\n  RequestOptions,\n  ResponseHeaders,\n} from '../interfaces/http-client.interface';\n\nexport abstract class HttpClient implements HttpClientInterface {\n  readonly MAX_RETRY_ATTEMPTS = 3;\n  readonly BACKOFF_MULTIPLIER = 1.5;\n  readonly MINIMUM_SLEEP_TIME_IN_MILLISECONDS = 500;\n  readonly RETRY_STATUS_CODES = [408, 500, 502, 504];\n\n  constructor(\n    readonly baseURL: string,\n    readonly options?: RequestInit,\n  ) {}\n\n  /** The HTTP client name used for diagnostics */\n  getClientName(): string {\n    throw new Error('getClientName not implemented');\n  }\n\n  abstract get(\n    path: string,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface>;\n\n  abstract post<Entity = any>(\n    path: string,\n    entity: Entity,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface>;\n\n  abstract put<Entity = any>(\n    path: string,\n    entity: Entity,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface>;\n\n  abstract delete(\n    path: string,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface>;\n\n  addClientToUserAgent(userAgent: string): string {\n    if (userAgent.indexOf(' ') > -1) {\n      return userAgent.replace(/\\b\\s/, `/${this.getClientName()} `);\n    } else {\n      return (userAgent += `/${this.getClientName()}`);\n    }\n  }\n\n  static getResourceURL(\n    baseURL: string,\n    path: string,\n    params?: Record<string, any>,\n  ) {\n    const queryString = HttpClient.getQueryString(params);\n    const url = new URL([path, queryString].filter(Boolean).join('?'), baseURL);\n    return url.toString();\n  }\n\n  static getQueryString(queryObj?: Record<string, any>) {\n    if (!queryObj) return undefined;\n\n    const sanitizedQueryObj: Record<string, any> = {};\n\n    Object.entries(queryObj).forEach(([param, value]) => {\n      if (value !== '' && value !== undefined) sanitizedQueryObj[param] = value;\n    });\n\n    return new URLSearchParams(sanitizedQueryObj).toString();\n  }\n\n  static getContentTypeHeader(entity: any): RequestHeaders | undefined {\n    if (entity instanceof URLSearchParams) {\n      return {\n        'Content-Type': 'application/x-www-form-urlencoded;charset=utf-8',\n      };\n    }\n    return undefined;\n  }\n\n  static getBody(entity: any): BodyInit | null | undefined {\n    if (entity === null || entity instanceof URLSearchParams) {\n      return entity;\n    }\n\n    return JSON.stringify(entity);\n  }\n\n  static isPathRetryable(path: string): boolean {\n    return path.startsWith('/fga/') || path.startsWith('/vault/');\n  }\n\n  private getSleepTimeInMilliseconds(retryAttempt: number): number {\n    const sleepTime =\n      this.MINIMUM_SLEEP_TIME_IN_MILLISECONDS *\n      Math.pow(this.BACKOFF_MULTIPLIER, retryAttempt);\n    const jitter = Math.random() + 0.5;\n    return sleepTime * jitter;\n  }\n\n  sleep = (retryAttempt: number) =>\n    new Promise((resolve) =>\n      setTimeout(resolve, this.getSleepTimeInMilliseconds(retryAttempt)),\n    );\n}\n\n// tslint:disable-next-line\nexport abstract class HttpClientResponse\n  implements HttpClientResponseInterface\n{\n  _statusCode: number;\n  _headers: ResponseHeaders;\n\n  constructor(statusCode: number, headers: ResponseHeaders) {\n    this._statusCode = statusCode;\n    this._headers = headers;\n  }\n\n  getStatusCode(): number {\n    return this._statusCode;\n  }\n\n  getHeaders(): ResponseHeaders {\n    return this._headers;\n  }\n\n  abstract getRawResponse(): unknown;\n\n  abstract toJSON(): any | null;\n}\n\n// tslint:disable-next-line\nexport class HttpClientError<T> extends Error {\n  readonly name: string = 'HttpClientError';\n  readonly message: string = 'The request could not be completed.';\n  readonly response: { status: number; headers: any; data: T };\n\n  constructor({\n    message,\n    response,\n  }: {\n    message: string;\n    readonly response: HttpClientError<T>['response'];\n  }) {\n    super(message);\n    this.message = message;\n    this.response = response;\n  }\n}\n"],"mappings":";;AAQO,MAAe,WAA0C;AAAA,EAM9D,YACW,SACA,SACT;AAFS;AACA;AAAA,EACR;AAAA,EAjBL,OAQgE;AAAA;AAAA;AAAA,EACrD,qBAAqB;AAAA,EACrB,qBAAqB;AAAA,EACrB,qCAAqC;AAAA,EACrC,qBAAqB,CAAC,KAAK,KAAK,KAAK,GAAG;AAAA;AAAA,EAQjD,gBAAwB;AACtB,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AAAA,EAwBA,qBAAqB,WAA2B;AAC9C,QAAI,UAAU,QAAQ,GAAG,IAAI,IAAI;AAC/B,aAAO,UAAU,QAAQ,QAAQ,IAAI,KAAK,cAAc,CAAC,GAAG;AAAA,IAC9D,OAAO;AACL,aAAQ,aAAa,IAAI,KAAK,cAAc,CAAC;AAAA,IAC/C;AAAA,EACF;AAAA,EAEA,OAAO,eACL,SACA,MACA,QACA;AACA,UAAM,cAAc,WAAW,eAAe,MAAM;AACpD,UAAM,MAAM,IAAI,IAAI,CAAC,MAAM,WAAW,EAAE,OAAO,OAAO,EAAE,KAAK,GAAG,GAAG,OAAO;AAC1E,WAAO,IAAI,SAAS;AAAA,EACtB;AAAA,EAEA,OAAO,eAAe,UAAgC;AACpD,QAAI,CAAC,SAAU,QAAO;AAEtB,UAAM,oBAAyC,CAAC;AAEhD,WAAO,QAAQ,QAAQ,EAAE,QAAQ,CAAC,CAAC,OAAO,KAAK,MAAM;AACnD,UAAI,UAAU,MAAM,UAAU,OAAW,mBAAkB,KAAK,IAAI;AAAA,IACtE,CAAC;AAED,WAAO,IAAI,gBAAgB,iBAAiB,EAAE,SAAS;AAAA,EACzD;AAAA,EAEA,OAAO,qBAAqB,QAAyC;AACnE,QAAI,kBAAkB,iBAAiB;AACrC,aAAO;AAAA,QACL,gBAAgB;AAAA,MAClB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,QAAQ,QAA0C;AACvD,QAAI,WAAW,QAAQ,kBAAkB,iBAAiB;AACxD,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,UAAU,MAAM;AAAA,EAC9B;AAAA,EAEA,OAAO,gBAAgB,MAAuB;AAC5C,WAAO,KAAK,WAAW,OAAO,KAAK,KAAK,WAAW,SAAS;AAAA,EAC9D;AAAA,EAEQ,2BAA2B,cAA8B;AAC/D,UAAM,YACJ,KAAK,qCACL,KAAK,IAAI,KAAK,oBAAoB,YAAY;AAChD,UAAM,SAAS,KAAK,OAAO,IAAI;AAC/B,WAAO,YAAY;AAAA,EACrB;AAAA,EAEA,QAAQ,wBAAC,iBACP,IAAI;AAAA,IAAQ,CAAC,YACX,WAAW,SAAS,KAAK,2BAA2B,YAAY,CAAC;AAAA,EACnE,GAHM;AAIV;AAGO,MAAe,mBAEtB;AAAA,EAlHA,OAkHA;AAAA;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EAEA,YAAY,YAAoB,SAA0B;AACxD,SAAK,cAAc;AACnB,SAAK,WAAW;AAAA,EAClB;AAAA,EAEA,gBAAwB;AACtB,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,aAA8B;AAC5B,WAAO,KAAK;AAAA,EACd;AAKF;AAGO,MAAM,wBAA2B,MAAM;AAAA,EAzI9C,OAyI8C;AAAA;AAAA;AAAA,EACnC,OAAe;AAAA,EACf,UAAkB;AAAA,EAClB;AAAA,EAET,YAAY;AAAA,IACV;AAAA,IACA;AAAA,EACF,GAGG;AACD,UAAM,OAAO;AACb,SAAK,UAAU;AACf,SAAK,WAAW;AAAA,EAClB;AACF;","names":[]}

package/lib/esm/common/utils/fetch-and-deserialize.d.ts

@@ -1,4 +1,4 @@
-import { W as WorkOS } from '../../workos-e5MfmByv.js';
+import { W as WorkOS } from '../../workos-DLj13cxf.js';
 import { PaginationOptions } from '../interfaces/pagination-options.interface.js';
 import { GetOptions } from '../interfaces/get-options.interface.js';
 import { List } from '../interfaces/list.interface.js';
@@ -6,12 +6,16 @@ import '../interfaces/post-options.interface.js';
 import '../interfaces/put-options.interface.js';
 import '../interfaces/workos-options.interface.js';
 import '../interfaces/app-info.interface.js';
-import '../../events/interfaces/list-events-options.interface.js';
-import '../interfaces/event.interface.js';
+import './pagination.js';
 import '../../directory-sync/interfaces/directory.interface.js';
 import '../../directory-sync/interfaces/directory-group.interface.js';
+import '../../directory-sync/interfaces/list-directories-options.interface.js';
+import '../../directory-sync/interfaces/list-groups-options.interface.js';
+import '../../directory-sync/interfaces/list-directory-users-options.interface.js';
 import '../../directory-sync/interfaces/directory-user.interface.js';
 import '../../roles/interfaces/role.interface.js';
+import '../../events/interfaces/list-events-options.interface.js';
+import '../interfaces/event.interface.js';
 import '../../organizations/interfaces/organization.interface.js';
 import '../../organization-domains/interfaces/organization-domain.interface.js';
 import '../../sso/interfaces/connection.interface.js';
@@ -26,7 +30,6 @@ import '../../user-management/interfaces/magic-auth.interface.js';
 import '../../user-management/interfaces/password-reset.interface.js';
 import '../../user-management/interfaces/session.interface.js';
 import '../../user-management/interfaces/impersonator.interface.js';
-import './pagination.js';
 import '../../organizations/interfaces/create-organization-options.interface.js';
 import '../../organizations/interfaces/domain-data.interface.js';
 import '../../organizations/interfaces/list-organization-feature-flags-options.interface.js';
@@ -123,9 +126,8 @@ import '../../vault/interfaces/object/delete-object.interface.js';
 import '../../vault/interfaces/object/read-object.interface.js';
 import '../../vault/interfaces/object.interface.js';
 import '../../vault/interfaces/object/update-object.interface.js';
-import '../../directory-sync/interfaces/list-directories-options.interface.js';
-import '../../directory-sync/interfaces/list-groups-options.interface.js';
-import '../../directory-sync/interfaces/list-directory-users-options.interface.js';
+import '../../api-keys/interfaces/validate-api-key.interface.js';
+import '../../api-keys/interfaces/api-key.interface.js';
 
 declare const fetchAndDeserialize: <T, U>(workos: WorkOS, endpoint: string, deserializeFn: (data: T) => U, options?: PaginationOptions, requestOptions?: GetOptions) => Promise<List<U>>;
 

package/lib/esm/common/utils/leb128.d.ts

@@ -0,0 +1,24 @@
+/**
+ * LEB128 (Little Endian Base 128) encoding for unsigned 32-bit integers.
+ * Variable-length encoding: each byte stores 7 bits of data, bit 7 is continuation flag.
+ */
+/**
+ * Encodes an unsigned 32-bit integer into LEB128 format.
+ *
+ * @param value - Unsigned 32-bit integer (0 to 4,294,967,295)
+ * @returns Encoded bytes (1-5 bytes depending on value)
+ */
+declare function encodeUInt32(value: number): Uint8Array;
+/**
+ * Decodes an unsigned 32-bit integer from LEB128 format.
+ *
+ * @param data - Buffer containing LEB128 encoded data
+ * @param offset - Starting position in buffer (default: 0)
+ * @returns Decoded value and index after last byte read
+ */
+declare function decodeUInt32(data: Uint8Array, offset?: number): {
+    value: number;
+    nextIndex: number;
+};
+
+export { decodeUInt32, encodeUInt32 };

package/lib/esm/common/utils/leb128.js

@@ -0,0 +1,77 @@
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+const MAX_UINT32 = 4294967295;
+const CONTINUATION_BIT = 128;
+const DATA_BITS_MASK = 127;
+const DATA_BITS_PER_BYTE = 7;
+const MAX_BYTES_FOR_UINT32 = 5;
+function encodeUInt32(value) {
+  validateUInt32(value);
+  if (value === 0) {
+    return new Uint8Array([0]);
+  }
+  const bytes = [];
+  do {
+    let byte = value & DATA_BITS_MASK;
+    value >>>= DATA_BITS_PER_BYTE;
+    if (value !== 0) {
+      byte |= CONTINUATION_BIT;
+    }
+    bytes.push(byte);
+  } while (value !== 0);
+  return new Uint8Array(bytes);
+}
+__name(encodeUInt32, "encodeUInt32");
+function decodeUInt32(data, offset = 0) {
+  validateOffset(data, offset);
+  let result = 0;
+  let shift = 0;
+  let index = offset;
+  let bytesRead = 0;
+  while (index < data.length) {
+    const byte = data[index++];
+    bytesRead++;
+    if (bytesRead > MAX_BYTES_FOR_UINT32) {
+      throw new Error("LEB128 sequence exceeds maximum length for uint32");
+    }
+    result |= (byte & DATA_BITS_MASK) << shift;
+    if (!hasContinuationBit(byte)) {
+      return { value: result >>> 0, nextIndex: index };
+    }
+    shift += DATA_BITS_PER_BYTE;
+  }
+  throw new Error("Truncated LEB128 encoding");
+}
+__name(decodeUInt32, "decodeUInt32");
+function validateUInt32(value) {
+  if (!Number.isFinite(value)) {
+    throw new Error("Value must be a finite number");
+  }
+  if (!Number.isInteger(value)) {
+    throw new Error("Value must be an integer");
+  }
+  if (value < 0) {
+    throw new Error("Value must be non-negative");
+  }
+  if (value > MAX_UINT32) {
+    throw new Error(`Value must not exceed ${MAX_UINT32} (MAX_UINT32)`);
+  }
+}
+__name(validateUInt32, "validateUInt32");
+function validateOffset(data, offset) {
+  if (offset < 0 || offset >= data.length) {
+    throw new Error(
+      `Offset ${offset} is out of bounds (buffer length: ${data.length})`
+    );
+  }
+}
+__name(validateOffset, "validateOffset");
+function hasContinuationBit(byte) {
+  return (byte & CONTINUATION_BIT) !== 0;
+}
+__name(hasContinuationBit, "hasContinuationBit");
+export {
+  decodeUInt32,
+  encodeUInt32
+};
+//# sourceMappingURL=leb128.js.map

package/lib/esm/common/utils/leb128.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/common/utils/leb128.ts"],"sourcesContent":["/**\n * LEB128 (Little Endian Base 128) encoding for unsigned 32-bit integers.\n * Variable-length encoding: each byte stores 7 bits of data, bit 7 is continuation flag.\n */\n\nconst MAX_UINT32 = 0xffffffff;\nconst CONTINUATION_BIT = 0x80;\nconst DATA_BITS_MASK = 0x7f;\nconst DATA_BITS_PER_BYTE = 7;\nconst MAX_BYTES_FOR_UINT32 = 5;\n\n/**\n * Encodes an unsigned 32-bit integer into LEB128 format.\n *\n * @param value - Unsigned 32-bit integer (0 to 4,294,967,295)\n * @returns Encoded bytes (1-5 bytes depending on value)\n */\nexport function encodeUInt32(value: number): Uint8Array {\n  validateUInt32(value);\n\n  if (value === 0) {\n    return new Uint8Array([0]);\n  }\n\n  const bytes: number[] = [];\n\n  do {\n    let byte = value & DATA_BITS_MASK;\n    value >>>= DATA_BITS_PER_BYTE;\n\n    if (value !== 0) {\n      byte |= CONTINUATION_BIT;\n    }\n\n    bytes.push(byte);\n  } while (value !== 0);\n\n  return new Uint8Array(bytes);\n}\n\n/**\n * Decodes an unsigned 32-bit integer from LEB128 format.\n *\n * @param data - Buffer containing LEB128 encoded data\n * @param offset - Starting position in buffer (default: 0)\n * @returns Decoded value and index after last byte read\n */\nexport function decodeUInt32(\n  data: Uint8Array,\n  offset = 0,\n): { value: number; nextIndex: number } {\n  validateOffset(data, offset);\n\n  let result = 0;\n  let shift = 0;\n  let index = offset;\n  let bytesRead = 0;\n\n  while (index < data.length) {\n    const byte = data[index++];\n    bytesRead++;\n\n    if (bytesRead > MAX_BYTES_FOR_UINT32) {\n      throw new Error('LEB128 sequence exceeds maximum length for uint32');\n    }\n\n    result |= (byte & DATA_BITS_MASK) << shift;\n\n    if (!hasContinuationBit(byte)) {\n      return { value: result >>> 0, nextIndex: index };\n    }\n\n    shift += DATA_BITS_PER_BYTE;\n  }\n\n  throw new Error('Truncated LEB128 encoding');\n}\n\nfunction validateUInt32(value: number): void {\n  if (!Number.isFinite(value)) {\n    throw new Error('Value must be a finite number');\n  }\n  if (!Number.isInteger(value)) {\n    throw new Error('Value must be an integer');\n  }\n  if (value < 0) {\n    throw new Error('Value must be non-negative');\n  }\n  if (value > MAX_UINT32) {\n    throw new Error(`Value must not exceed ${MAX_UINT32} (MAX_UINT32)`);\n  }\n}\n\nfunction validateOffset(data: Uint8Array, offset: number): void {\n  if (offset < 0 || offset >= data.length) {\n    throw new Error(\n      `Offset ${offset} is out of bounds (buffer length: ${data.length})`,\n    );\n  }\n}\n\nfunction hasContinuationBit(byte: number): boolean {\n  return (byte & CONTINUATION_BIT) !== 0;\n}\n"],"mappings":";;AAKA,MAAM,aAAa;AACnB,MAAM,mBAAmB;AACzB,MAAM,iBAAiB;AACvB,MAAM,qBAAqB;AAC3B,MAAM,uBAAuB;AAQtB,SAAS,aAAa,OAA2B;AACtD,iBAAe,KAAK;AAEpB,MAAI,UAAU,GAAG;AACf,WAAO,IAAI,WAAW,CAAC,CAAC,CAAC;AAAA,EAC3B;AAEA,QAAM,QAAkB,CAAC;AAEzB,KAAG;AACD,QAAI,OAAO,QAAQ;AACnB,eAAW;AAEX,QAAI,UAAU,GAAG;AACf,cAAQ;AAAA,IACV;AAEA,UAAM,KAAK,IAAI;AAAA,EACjB,SAAS,UAAU;AAEnB,SAAO,IAAI,WAAW,KAAK;AAC7B;AArBgB;AA8BT,SAAS,aACd,MACA,SAAS,GAC6B;AACtC,iBAAe,MAAM,MAAM;AAE3B,MAAI,SAAS;AACb,MAAI,QAAQ;AACZ,MAAI,QAAQ;AACZ,MAAI,YAAY;AAEhB,SAAO,QAAQ,KAAK,QAAQ;AAC1B,UAAM,OAAO,KAAK,OAAO;AACzB;AAEA,QAAI,YAAY,sBAAsB;AACpC,YAAM,IAAI,MAAM,mDAAmD;AAAA,IACrE;AAEA,eAAW,OAAO,mBAAmB;AAErC,QAAI,CAAC,mBAAmB,IAAI,GAAG;AAC7B,aAAO,EAAE,OAAO,WAAW,GAAG,WAAW,MAAM;AAAA,IACjD;AAEA,aAAS;AAAA,EACX;AAEA,QAAM,IAAI,MAAM,2BAA2B;AAC7C;AA7BgB;AA+BhB,SAAS,eAAe,OAAqB;AAC3C,MAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AACA,MAAI,CAAC,OAAO,UAAU,KAAK,GAAG;AAC5B,UAAM,IAAI,MAAM,0BAA0B;AAAA,EAC5C;AACA,MAAI,QAAQ,GAAG;AACb,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AACA,MAAI,QAAQ,YAAY;AACtB,UAAM,IAAI,MAAM,yBAAyB,UAAU,eAAe;AAAA,EACpE;AACF;AAbS;AAeT,SAAS,eAAe,MAAkB,QAAsB;AAC9D,MAAI,SAAS,KAAK,UAAU,KAAK,QAAQ;AACvC,UAAM,IAAI;AAAA,MACR,UAAU,MAAM,qCAAqC,KAAK,MAAM;AAAA,IAClE;AAAA,EACF;AACF;AANS;AAQT,SAAS,mBAAmB,MAAuB;AACjD,UAAQ,OAAO,sBAAsB;AACvC;AAFS;","names":[]}

package/lib/esm/common/utils/query-string.d.ts

@@ -0,0 +1,11 @@
+type QueryValue = string | string[] | Record<string, string | boolean | number> | undefined;
+/**
+ * Converts options to a query string.
+ * - Arrays: scope=read&scope=write (repeat format)
+ * - Objects: params[key]=value (bracket notation)
+ * - Encoding: RFC1738 (space as +)
+ * - Keys sorted alphabetically
+ */
+declare function toQueryString(options: Record<string, QueryValue>): string;
+
+export { toQueryString };

package/lib/esm/common/utils/query-string.js

@@ -0,0 +1,43 @@
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+function toQueryString(options) {
+  const params = [];
+  const sortedKeys = Object.keys(options).sort((a, b) => a.localeCompare(b));
+  for (const key of sortedKeys) {
+    const value = options[key];
+    if (value === void 0) {
+      continue;
+    }
+    if (Array.isArray(value)) {
+      for (const item of value) {
+        params.push([key, String(item)]);
+      }
+    } else if (typeof value === "object" && value !== null) {
+      const sortedSubKeys = Object.keys(value).sort(
+        (a, b) => a.localeCompare(b)
+      );
+      for (const subKey of sortedSubKeys) {
+        const subValue = value[subKey];
+        if (subValue !== void 0) {
+          params.push([`${key}[${subKey}]`, String(subValue)]);
+        }
+      }
+    } else {
+      params.push([key, String(value)]);
+    }
+  }
+  return params.map(([key, value]) => {
+    const encodedKey = encodeRFC1738(key);
+    const encodedValue = encodeRFC1738(value);
+    return `${encodedKey}=${encodedValue}`;
+  }).join("&");
+}
+__name(toQueryString, "toQueryString");
+function encodeRFC1738(str) {
+  return encodeURIComponent(str).replace(/%20/g, "+").replace(/[!'*]/g, (c) => "%" + c.charCodeAt(0).toString(16).toUpperCase());
+}
+__name(encodeRFC1738, "encodeRFC1738");
+export {
+  toQueryString
+};
+//# sourceMappingURL=query-string.js.map

package/lib/esm/common/utils/query-string.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/common/utils/query-string.ts"],"sourcesContent":["type QueryValue =\n  | string\n  | string[]\n  | Record<string, string | boolean | number>\n  | undefined;\n\n/**\n * Converts options to a query string.\n * - Arrays: scope=read&scope=write (repeat format)\n * - Objects: params[key]=value (bracket notation)\n * - Encoding: RFC1738 (space as +)\n * - Keys sorted alphabetically\n */\nexport function toQueryString(options: Record<string, QueryValue>): string {\n  const params: Array<[string, string]> = [];\n  const sortedKeys = Object.keys(options).sort((a, b) => a.localeCompare(b));\n\n  for (const key of sortedKeys) {\n    const value = options[key];\n\n    if (value === undefined) {\n      continue;\n    }\n\n    if (Array.isArray(value)) {\n      for (const item of value) {\n        params.push([key, String(item)]);\n      }\n    } else if (typeof value === 'object' && value !== null) {\n      const sortedSubKeys = Object.keys(value).sort((a, b) =>\n        a.localeCompare(b),\n      );\n      for (const subKey of sortedSubKeys) {\n        const subValue = value[subKey];\n        if (subValue !== undefined) {\n          params.push([`${key}[${subKey}]`, String(subValue)]);\n        }\n      }\n    } else {\n      params.push([key, String(value)]);\n    }\n  }\n\n  return params\n    .map(([key, value]) => {\n      const encodedKey = encodeRFC1738(key);\n      const encodedValue = encodeRFC1738(value);\n      return `${encodedKey}=${encodedValue}`;\n    })\n    .join('&');\n}\n\nfunction encodeRFC1738(str: string): string {\n  return encodeURIComponent(str)\n    .replace(/%20/g, '+')\n    .replace(/[!'*]/g, (c) => '%' + c.charCodeAt(0).toString(16).toUpperCase());\n}\n"],"mappings":";;AAaO,SAAS,cAAc,SAA6C;AACzE,QAAM,SAAkC,CAAC;AACzC,QAAM,aAAa,OAAO,KAAK,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;AAEzE,aAAW,OAAO,YAAY;AAC5B,UAAM,QAAQ,QAAQ,GAAG;AAEzB,QAAI,UAAU,QAAW;AACvB;AAAA,IACF;AAEA,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,iBAAW,QAAQ,OAAO;AACxB,eAAO,KAAK,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC;AAAA,MACjC;AAAA,IACF,WAAW,OAAO,UAAU,YAAY,UAAU,MAAM;AACtD,YAAM,gBAAgB,OAAO,KAAK,KAAK,EAAE;AAAA,QAAK,CAAC,GAAG,MAChD,EAAE,cAAc,CAAC;AAAA,MACnB;AACA,iBAAW,UAAU,eAAe;AAClC,cAAM,WAAW,MAAM,MAAM;AAC7B,YAAI,aAAa,QAAW;AAC1B,iBAAO,KAAK,CAAC,GAAG,GAAG,IAAI,MAAM,KAAK,OAAO,QAAQ,CAAC,CAAC;AAAA,QACrD;AAAA,MACF;AAAA,IACF,OAAO;AACL,aAAO,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,CAAC;AAAA,IAClC;AAAA,EACF;AAEA,SAAO,OACJ,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;AACrB,UAAM,aAAa,cAAc,GAAG;AACpC,UAAM,eAAe,cAAc,KAAK;AACxC,WAAO,GAAG,UAAU,IAAI,YAAY;AAAA,EACtC,CAAC,EACA,KAAK,GAAG;AACb;AArCgB;AAuChB,SAAS,cAAc,KAAqB;AAC1C,SAAO,mBAAmB,GAAG,EAC1B,QAAQ,QAAQ,GAAG,EACnB,QAAQ,UAAU,CAAC,MAAM,MAAM,EAAE,WAAW,CAAC,EAAE,SAAS,EAAE,EAAE,YAAY,CAAC;AAC9E;AAJS;","names":[]}

package/lib/esm/directory-sync/directory-sync.d.ts

@@ -1,4 +1,4 @@
-export { D as DirectorySync } from '../workos-e5MfmByv.js';
+export { D as DirectorySync } from '../workos-DLj13cxf.js';
 import '../common/utils/pagination.js';
 import './interfaces/directory.interface.js';
 import './interfaces/directory-group.interface.js';
@@ -126,3 +126,5 @@ import '../vault/interfaces/object/delete-object.interface.js';
 import '../vault/interfaces/object/read-object.interface.js';
 import '../vault/interfaces/object.interface.js';
 import '../vault/interfaces/object/update-object.interface.js';
+import '../api-keys/interfaces/validate-api-key.interface.js';
+import '../api-keys/interfaces/api-key.interface.js';

package/lib/esm/events/events.d.ts

@@ -1,4 +1,4 @@
-export { E as Events } from '../workos-e5MfmByv.js';
+export { E as Events } from '../workos-DLj13cxf.js';
 import './interfaces/list-events-options.interface.js';
 import '../common/interfaces/event.interface.js';
 import '../common/interfaces/list.interface.js';
@@ -9,6 +9,13 @@ import '../common/interfaces/workos-options.interface.js';
 import '../common/interfaces/app-info.interface.js';
 import '../common/utils/pagination.js';
 import '../common/interfaces/pagination-options.interface.js';
+import '../directory-sync/interfaces/directory.interface.js';
+import '../directory-sync/interfaces/directory-group.interface.js';
+import '../directory-sync/interfaces/list-directories-options.interface.js';
+import '../directory-sync/interfaces/list-groups-options.interface.js';
+import '../directory-sync/interfaces/list-directory-users-options.interface.js';
+import '../directory-sync/interfaces/directory-user.interface.js';
+import '../roles/interfaces/role.interface.js';
 import '../organizations/interfaces/create-organization-options.interface.js';
 import '../organizations/interfaces/domain-data.interface.js';
 import '../organizations/interfaces/list-organization-feature-flags-options.interface.js';
@@ -17,7 +24,6 @@ import '../organizations/interfaces/organization.interface.js';
 import '../organization-domains/interfaces/organization-domain.interface.js';
 import '../organizations/interfaces/update-organization-options.interface.js';
 import '../feature-flags/interfaces/feature-flag.interface.js';
-import '../roles/interfaces/role.interface.js';
 import '../organizations/interfaces/list-organization-roles-options.interface.js';
 import '../organization-domains/interfaces/create-organization-domain-options.interface.js';
 import '../passwordless/interfaces/passwordless-session.interface.js';
@@ -36,9 +42,6 @@ import '../user-management/interfaces/oauth-tokens.interface.js';
 import '../sso/interfaces/profile.interface.js';
 import '../webhooks/webhooks.js';
 import '../common/crypto/crypto-provider.js';
-import '../directory-sync/interfaces/directory.interface.js';
-import '../directory-sync/interfaces/directory-group.interface.js';
-import '../directory-sync/interfaces/directory-user.interface.js';
 import '../user-management/interfaces/user.interface.js';
 import '../user-management/interfaces/authentication-event.interface.js';
 import '../user-management/interfaces/authentication-radar-risk-detected-event.interface.js';
@@ -123,6 +126,5 @@ import '../vault/interfaces/object/delete-object.interface.js';
 import '../vault/interfaces/object/read-object.interface.js';
 import '../vault/interfaces/object.interface.js';
 import '../vault/interfaces/object/update-object.interface.js';
-import '../directory-sync/interfaces/list-directories-options.interface.js';
-import '../directory-sync/interfaces/list-groups-options.interface.js';
-import '../directory-sync/interfaces/list-directory-users-options.interface.js';
+import '../api-keys/interfaces/validate-api-key.interface.js';
+import '../api-keys/interfaces/api-key.interface.js';

package/lib/esm/fga/fga.d.ts

@@ -1,4 +1,4 @@
-export { F as FGA } from '../workos-e5MfmByv.js';
+export { F as FGA } from '../workos-DLj13cxf.js';
 import './interfaces/check.interface.js';
 import './interfaces/query.interface.js';
 import './interfaces/resource.interface.js';
@@ -11,12 +11,16 @@ import '../common/interfaces/post-options.interface.js';
 import '../common/interfaces/put-options.interface.js';
 import '../common/interfaces/workos-options.interface.js';
 import '../common/interfaces/app-info.interface.js';
-import '../events/interfaces/list-events-options.interface.js';
-import '../common/interfaces/event.interface.js';
 import '../directory-sync/interfaces/directory.interface.js';
 import '../directory-sync/interfaces/directory-group.interface.js';
+import '../directory-sync/interfaces/list-directories-options.interface.js';
+import '../common/interfaces/pagination-options.interface.js';
+import '../directory-sync/interfaces/list-groups-options.interface.js';
+import '../directory-sync/interfaces/list-directory-users-options.interface.js';
 import '../directory-sync/interfaces/directory-user.interface.js';
 import '../roles/interfaces/role.interface.js';
+import '../events/interfaces/list-events-options.interface.js';
+import '../common/interfaces/event.interface.js';
 import '../organizations/interfaces/organization.interface.js';
 import '../organization-domains/interfaces/organization-domain.interface.js';
 import '../sso/interfaces/connection.interface.js';
@@ -35,7 +39,6 @@ import '../common/interfaces/list.interface.js';
 import '../organizations/interfaces/create-organization-options.interface.js';
 import '../organizations/interfaces/domain-data.interface.js';
 import '../organizations/interfaces/list-organization-feature-flags-options.interface.js';
-import '../common/interfaces/pagination-options.interface.js';
 import '../organizations/interfaces/list-organizations-options.interface.js';
 import '../organizations/interfaces/update-organization-options.interface.js';
 import '../feature-flags/interfaces/feature-flag.interface.js';
@@ -118,9 +121,8 @@ import '../vault/interfaces/object/delete-object.interface.js';
 import '../vault/interfaces/object/read-object.interface.js';
 import '../vault/interfaces/object.interface.js';
 import '../vault/interfaces/object/update-object.interface.js';
-import '../directory-sync/interfaces/list-directories-options.interface.js';
-import '../directory-sync/interfaces/list-groups-options.interface.js';
-import '../directory-sync/interfaces/list-directory-users-options.interface.js';
+import '../api-keys/interfaces/validate-api-key.interface.js';
+import '../api-keys/interfaces/api-key.interface.js';
 import './interfaces/check-op.enum.js';
 import './interfaces/warning.interface.js';
 import './interfaces/resource-op.enum.js';

package/lib/esm/fga/utils/fetch-and-deserialize-list.d.ts

@@ -1,4 +1,4 @@
-import { W as WorkOS } from '../../workos-e5MfmByv.js';
+import { W as WorkOS } from '../../workos-DLj13cxf.js';
 import { FGAList } from '../interfaces/list.interface.js';
 import { PaginationOptions } from '../../common/interfaces/pagination-options.interface.js';
 import { QueryRequestOptions } from '../interfaces/query.interface.js';
@@ -7,12 +7,17 @@ import '../../common/interfaces/post-options.interface.js';
 import '../../common/interfaces/put-options.interface.js';
 import '../../common/interfaces/workos-options.interface.js';
 import '../../common/interfaces/app-info.interface.js';
-import '../../events/interfaces/list-events-options.interface.js';
-import '../../common/interfaces/event.interface.js';
+import '../../common/utils/pagination.js';
+import '../../common/interfaces/list.interface.js';
 import '../../directory-sync/interfaces/directory.interface.js';
 import '../../directory-sync/interfaces/directory-group.interface.js';
+import '../../directory-sync/interfaces/list-directories-options.interface.js';
+import '../../directory-sync/interfaces/list-groups-options.interface.js';
+import '../../directory-sync/interfaces/list-directory-users-options.interface.js';
 import '../../directory-sync/interfaces/directory-user.interface.js';
 import '../../roles/interfaces/role.interface.js';
+import '../../events/interfaces/list-events-options.interface.js';
+import '../../common/interfaces/event.interface.js';
 import '../../organizations/interfaces/organization.interface.js';
 import '../../organization-domains/interfaces/organization-domain.interface.js';
 import '../../sso/interfaces/connection.interface.js';
@@ -27,8 +32,6 @@ import '../../user-management/interfaces/magic-auth.interface.js';
 import '../../user-management/interfaces/password-reset.interface.js';
 import '../../user-management/interfaces/session.interface.js';
 import '../../user-management/interfaces/impersonator.interface.js';
-import '../../common/interfaces/list.interface.js';
-import '../../common/utils/pagination.js';
 import '../../organizations/interfaces/create-organization-options.interface.js';
 import '../../organizations/interfaces/domain-data.interface.js';
 import '../../organizations/interfaces/list-organization-feature-flags-options.interface.js';
@@ -123,9 +126,8 @@ import '../../vault/interfaces/object/delete-object.interface.js';
 import '../../vault/interfaces/object/read-object.interface.js';
 import '../../vault/interfaces/object.interface.js';
 import '../../vault/interfaces/object/update-object.interface.js';
-import '../../directory-sync/interfaces/list-directories-options.interface.js';
-import '../../directory-sync/interfaces/list-groups-options.interface.js';
-import '../../directory-sync/interfaces/list-directory-users-options.interface.js';
+import '../../api-keys/interfaces/validate-api-key.interface.js';
+import '../../api-keys/interfaces/api-key.interface.js';
 
 declare const fetchAndDeserializeFGAList: <T, U>(workos: WorkOS, endpoint: string, deserializeFn: (data: T) => U, options?: PaginationOptions, requestOptions?: QueryRequestOptions) => Promise<FGAList<U>>;
 

package/lib/esm/index.d.ts

@@ -2,7 +2,7 @@ import { CryptoProvider } from './common/crypto/crypto-provider.js';
 import { HttpClient } from './common/net/http-client.js';
 import { Actions } from './actions/actions.js';
 import { Webhooks } from './webhooks/webhooks.js';
-import { W as WorkOS } from './workos-e5MfmByv.js';
+import { W as WorkOS } from './workos-DLj13cxf.js';
 export { AuthenticationEmailVerificationSucceededEvent, AuthenticationEmailVerificationSucceededEventResponse, AuthenticationMagicAuthFailedEvent, AuthenticationMagicAuthFailedEventResponse, AuthenticationMagicAuthSucceededEvent, AuthenticationMagicAuthSucceededEventResponse, AuthenticationMfaSucceededEvent, AuthenticationMfaSucceededEventResponse, AuthenticationOAuthFailedEvent, AuthenticationOAuthFailedEventResponse, AuthenticationOAuthSucceededEvent, AuthenticationOAuthSucceededEventResponse, AuthenticationPasswordFailedEvent, AuthenticationPasswordFailedEventResponse, AuthenticationPasswordSucceededEvent, AuthenticationPasswordSucceededEventResponse, AuthenticationRadarRiskDetectedEvent, AuthenticationRadarRiskDetectedEventResponse, AuthenticationSSOFailedEvent, AuthenticationSSOFailedEventResponse, AuthenticationSSOSucceededEvent, AuthenticationSSOSucceededEventResponse, ConnectionActivatedEvent, ConnectionActivatedEventResponse, ConnectionDeactivatedEvent, ConnectionDeactivatedEventResponse, ConnectionDeletedEvent, ConnectionDeletedEventResponse, DsyncActivatedEvent, DsyncActivatedEventResponse, DsyncDeletedEvent, DsyncDeletedEventResponse, DsyncGroupCreatedEvent, DsyncGroupCreatedEventResponse, DsyncGroupDeletedEvent, DsyncGroupDeletedEventResponse, DsyncGroupUpdatedEvent, DsyncGroupUpdatedEventResponse, DsyncGroupUserAddedEvent, DsyncGroupUserAddedEventResponse, DsyncGroupUserRemovedEvent, DsyncGroupUserRemovedEventResponse, DsyncUserCreatedEvent, DsyncUserCreatedEventResponse, DsyncUserDeletedEvent, DsyncUserDeletedEventResponse, DsyncUserUpdatedEvent, DsyncUserUpdatedEventResponse, EmailVerificationCreatedEvent, EmailVerificationCreatedEventResponse, Event, EventBase, EventName, EventResponse, InvitationAcceptedEvent, InvitationAcceptedEventResponse, InvitationCreatedEvent, InvitationCreatedEventResponse, InvitationRevokedEvent, InvitationRevokedEventResponse, MagicAuthCreatedEvent, MagicAuthCreatedEventResponse, OrganizationCreatedEvent, OrganizationCreatedResponse, OrganizationDeletedEvent, OrganizationDeletedResponse, OrganizationDomainCreatedEvent, OrganizationDomainCreatedEventResponse, OrganizationDomainDeletedEvent, OrganizationDomainDeletedEventResponse, OrganizationDomainUpdatedEvent, OrganizationDomainUpdatedEventResponse, OrganizationDomainVerificationFailedEvent, OrganizationDomainVerificationFailedEventResponse, OrganizationDomainVerifiedEvent, OrganizationDomainVerifiedEventResponse, OrganizationMembershipCreated, OrganizationMembershipCreatedResponse, OrganizationMembershipDeleted, OrganizationMembershipDeletedResponse, OrganizationMembershipUpdated, OrganizationMembershipUpdatedResponse, OrganizationUpdatedEvent, OrganizationUpdatedResponse, PasswordResetCreatedEvent, PasswordResetCreatedEventResponse, PasswordResetSucceededEvent, PasswordResetSucceededEventResponse, RoleCreatedEvent, RoleCreatedEventResponse, RoleDeletedEvent, RoleDeletedEventResponse, RoleUpdatedEvent, RoleUpdatedEventResponse, SessionCreatedEvent, SessionCreatedEventResponse, SessionRevokedEvent, SessionRevokedEventResponse, UserCreatedEvent, UserCreatedEventResponse, UserDeletedEvent, UserDeletedEventResponse, UserUpdatedEvent, UserUpdatedEventResponse } from './common/interfaces/event.interface.js';
 export { GetOptions } from './common/interfaces/get-options.interface.js';
 export { List, ListResponse } from './common/interfaces/list.interface.js';
@@ -136,6 +136,8 @@ import './vault/interfaces/object/delete-object.interface.js';
 import './vault/interfaces/object/read-object.interface.js';
 import './vault/interfaces/object.interface.js';
 import './vault/interfaces/object/update-object.interface.js';
+import './api-keys/interfaces/validate-api-key.interface.js';
+import './api-keys/interfaces/api-key.interface.js';
 import './common/interfaces/app-info.interface.js';
 import './common/interfaces/request-exception.interface.js';
 import './user-management/interfaces/password-hash-type.interface.js';

package/lib/esm/index.worker.d.ts

@@ -2,7 +2,7 @@ import { Actions } from './actions/actions.js';
 import { CryptoProvider } from './common/crypto/crypto-provider.js';
 import { HttpClient } from './common/net/http-client.js';
 import { Webhooks } from './webhooks/webhooks.js';
-import { W as WorkOS } from './workos-e5MfmByv.js';
+import { W as WorkOS } from './workos-DLj13cxf.js';
 export { ActionContext, ActionPayload, UserData, UserDataPayload, UserRegistrationActionPayload } from './actions/interfaces/action.interface.js';
 export { AuthenticationActionResponseData, ResponsePayload, UserRegistrationActionResponseData } from './actions/interfaces/response-payload.interface.js';
 export { AuditLogExportOptions, SerializedAuditLogExportOptions } from './audit-logs/interfaces/audit-log-export-options.interface.js';
@@ -136,6 +136,8 @@ import './vault/interfaces/object/delete-object.interface.js';
 import './vault/interfaces/object/read-object.interface.js';
 import './vault/interfaces/object.interface.js';
 import './vault/interfaces/object/update-object.interface.js';
+import './api-keys/interfaces/validate-api-key.interface.js';
+import './api-keys/interfaces/api-key.interface.js';
 import './common/interfaces/request-exception.interface.js';
 import './common/interfaces/app-info.interface.js';
 import './user-management/interfaces/password-hash-type.interface.js';

package/lib/esm/mfa/mfa.d.ts

@@ -1,4 +1,4 @@
-export { M as Mfa } from '../workos-e5MfmByv.js';
+export { M as Mfa } from '../workos-DLj13cxf.js';
 import './interfaces/challenge-factor-options.js';
 import './interfaces/challenge.interface.js';
 import './interfaces/enroll-factor-options.js';
@@ -10,12 +10,18 @@ import '../common/interfaces/post-options.interface.js';
 import '../common/interfaces/put-options.interface.js';
 import '../common/interfaces/workos-options.interface.js';
 import '../common/interfaces/app-info.interface.js';
-import '../events/interfaces/list-events-options.interface.js';
-import '../common/interfaces/event.interface.js';
+import '../common/utils/pagination.js';
+import '../common/interfaces/pagination-options.interface.js';
+import '../common/interfaces/list.interface.js';
 import '../directory-sync/interfaces/directory.interface.js';
 import '../directory-sync/interfaces/directory-group.interface.js';
+import '../directory-sync/interfaces/list-directories-options.interface.js';
+import '../directory-sync/interfaces/list-groups-options.interface.js';
+import '../directory-sync/interfaces/list-directory-users-options.interface.js';
 import '../directory-sync/interfaces/directory-user.interface.js';
 import '../roles/interfaces/role.interface.js';
+import '../events/interfaces/list-events-options.interface.js';
+import '../common/interfaces/event.interface.js';
 import '../organizations/interfaces/organization.interface.js';
 import '../organization-domains/interfaces/organization-domain.interface.js';
 import '../sso/interfaces/connection.interface.js';
@@ -30,9 +36,6 @@ import '../user-management/interfaces/magic-auth.interface.js';
 import '../user-management/interfaces/password-reset.interface.js';
 import '../user-management/interfaces/session.interface.js';
 import '../user-management/interfaces/impersonator.interface.js';
-import '../common/interfaces/list.interface.js';
-import '../common/utils/pagination.js';
-import '../common/interfaces/pagination-options.interface.js';
 import '../organizations/interfaces/create-organization-options.interface.js';
 import '../organizations/interfaces/domain-data.interface.js';
 import '../organizations/interfaces/list-organization-feature-flags-options.interface.js';
@@ -122,7 +125,6 @@ import '../vault/interfaces/object/delete-object.interface.js';
 import '../vault/interfaces/object/read-object.interface.js';
 import '../vault/interfaces/object.interface.js';
 import '../vault/interfaces/object/update-object.interface.js';
-import '../directory-sync/interfaces/list-directories-options.interface.js';
-import '../directory-sync/interfaces/list-groups-options.interface.js';
-import '../directory-sync/interfaces/list-directory-users-options.interface.js';
+import '../api-keys/interfaces/validate-api-key.interface.js';
+import '../api-keys/interfaces/api-key.interface.js';
 import './interfaces/sms.interface.js';