@zeroxyz/sdk 0.4.0 → 0.6.0

package/dist/{chunk-5ZVIL7AZ.cjs → chunk-UIK7QKNQ.cjs}

@@ -128,6 +128,78 @@ var ZeroConfigurationError = class extends ZeroError {
   }
 };
 
+// src/input-envelope.ts
+var asSchemaNode = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : null;
+var extractInputEnvelope = (bodySchema, method) => {
+  const root = asSchemaNode(bodySchema);
+  if (!root) return {};
+  const props = asSchemaNode(root.properties);
+  if (!props) return {};
+  const inputProps = asSchemaNode(asSchemaNode(props.input)?.properties);
+  if (inputProps) {
+    return {
+      queryParams: asSchemaNode(inputProps.queryParams) ?? void 0,
+      body: asSchemaNode(inputProps.body) ?? void 0
+    };
+  }
+  const upperMethod = method.toUpperCase();
+  const isGetLike = upperMethod === "GET" || upperMethod === "DELETE";
+  return isGetLike ? { queryParams: root } : { body: root };
+};
+var unwrapTransportEnvelope = (request2) => {
+  const input = asSchemaNode(asSchemaNode(request2)?.input);
+  if (!input || input.type !== "http") return request2;
+  const body = input.body;
+  const hasBody = body !== void 0 && body !== null && !(typeof body === "object" && Object.keys(body).length === 0);
+  if (hasBody) return body;
+  const qp = asSchemaNode(input.queryParams);
+  if (qp && Object.keys(qp).length > 0) return qp;
+  return null;
+};
+var GET_LIKE = /* @__PURE__ */ new Set(["GET", "HEAD", "DELETE"]);
+var appendQueryParams = (url, params) => {
+  const entries = Object.entries(params).filter(([, v]) => v != null);
+  if (entries.length === 0) return url;
+  try {
+    const u = new URL(url);
+    for (const [k, v] of entries) u.searchParams.set(k, String(v));
+    return u.toString();
+  } catch {
+    const qs = entries.map(
+      ([k, v]) => `${encodeURIComponent(k)}=${encodeURIComponent(String(v))}`
+    ).join("&");
+    return url.includes("?") ? `${url}&${qs}` : `${url}?${qs}`;
+  }
+};
+var normalizeTransportEnvelopeRequest = (url, opts) => {
+  const { method, body } = opts;
+  if (typeof body !== "string") return { url, method, body };
+  let parsed;
+  try {
+    parsed = JSON.parse(body);
+  } catch {
+    return { url, method, body };
+  }
+  const input = asSchemaNode(asSchemaNode(parsed)?.input);
+  if (!input || input.type !== "http") return { url, method, body };
+  const innerBody = input.body;
+  const hasInnerBody = innerBody !== void 0 && innerBody !== null && !(typeof innerBody === "object" && Object.keys(innerBody).length === 0);
+  const verb = (method ?? (typeof input.method === "string" ? input.method : void 0) ?? (hasInnerBody ? "POST" : "GET")).toUpperCase();
+  if (GET_LIKE.has(verb)) {
+    const qp = asSchemaNode(input.queryParams);
+    return {
+      url: qp ? appendQueryParams(url, qp) : url,
+      method: verb,
+      body: void 0
+    };
+  }
+  return {
+    url,
+    method: verb,
+    body: hasInnerBody ? JSON.stringify(innerBody) : void 0
+  };
+};
+
 // src/chains/eip712.ts
 var KNOWN_EIP712_DOMAINS = {
   // Base mainnet USDC. On-chain `name()` is "USD Coin" (NOT "USDC")
@@ -1146,7 +1218,7 @@ var Payments = class {
 
 // package.json
 var package_default = {
-  version: "0.4.0"};
+  version: "0.6.0"};
 
 // src/version.ts
 var SDK_VERSION = package_default.version;
@@ -1803,6 +1875,11 @@ var capabilityResponseSchema = zod.z.object({
   lastUsedAt: zod.z.string().nullable().optional(),
   lastSuccessfullyRanAt: zod.z.string().nullable().optional()
 });
+var resolveCapabilityResponseSchema = zod.z.object({
+  capabilityId: zod.z.string(),
+  capabilitySlug: zod.z.string(),
+  matchedVia: zod.z.enum(["exact", "template"])
+});
 
 // src/namespaces/capabilities.ts
 var Capabilities = class {
@@ -1819,6 +1896,31 @@ var Capabilities = class {
     },
     capabilityResponseSchema
   );
+  // Resolve a raw endpoint URL + method back to the capability that owns it,
+  // for the `zero fetch <url>` case where the client has no local search
+  // context to match against (a memoized/cross-session URL). Returns null on
+  // 404 — i.e. no match or an ambiguous multi-match, both of which the server
+  // reports as 404 (resolveByUrl fails closed rather than mis-attribute).
+  // The URL travels in the POST body so it stays out of access logs and is
+  // never stored; the caller uses the returned capabilityId to record an
+  // attributed run without the URL ever touching the run row (ZERO-335).
+  resolveByUrl = async (url, method, opts = {}) => {
+    try {
+      return await request(
+        this.client,
+        {
+          method: "POST",
+          path: "/v1/capabilities/resolve",
+          body: { url, method },
+          signal: opts.signal
+        },
+        resolveCapabilityResponseSchema
+      );
+    } catch (err) {
+      if (err instanceof ZeroApiError && err.status === 404) return null;
+      throw err;
+    }
+  };
 };
 var createRunResponseSchema = zod.z.object({
   runId: zod.z.string()
@@ -1844,6 +1946,30 @@ var listRunsResponseSchema = zod.z.object({
   runs: zod.z.array(runListItemSchema),
   nextCursor: zod.z.string().nullable()
 });
+var runDetailSchema = zod.z.object({
+  runId: zod.z.string(),
+  status: zod.z.number().nullable(),
+  latencyMs: zod.z.number().nullable(),
+  errorClass: zod.z.string().nullable(),
+  createdAt: zod.z.coerce.date(),
+  cost: zod.z.object({ amount: zod.z.string(), asset: zod.z.string().nullable() }).nullable(),
+  payment: zod.z.object({
+    protocol: zod.z.string(),
+    chain: zod.z.string().nullable(),
+    txHash: zod.z.string().nullable(),
+    mode: zod.z.string().nullable()
+  }).nullable(),
+  capability: zod.z.object({
+    uid: zod.z.string(),
+    slug: zod.z.string(),
+    name: zod.z.string(),
+    url: zod.z.string(),
+    method: zod.z.string(),
+    whatItDoes: zod.z.string().nullable(),
+    tags: zod.z.array(zod.z.string())
+  }),
+  reviewed: zod.z.boolean()
+});
 var createReviewResponseSchema = zod.z.object({
   reviewId: zod.z.string(),
   recorded: zod.z.boolean(),
@@ -1925,6 +2051,15 @@ var Runs = class {
       listRunsResponseSchema
     );
   };
+  get = (runId, opts = {}) => request(
+    this.client,
+    {
+      method: "GET",
+      path: `/v1/runs/${runId}`,
+      signal: opts.signal
+    },
+    runDetailSchema
+  );
   review = (input, opts = {}) => request(
     this.client,
     {
@@ -2399,14 +2534,17 @@ var resolveRecordingClient = (client, opts) => {
   const canRecord = opts.account !== void 0 || credentials.kind === "account" || credentials.kind === "session";
   return { recordingClient, canRecord };
 };
-var recordErrorFetchRun = async (client, opts, result) => {
-  if (opts.capabilityId === void 0) return;
+var recordErrorFetchRun = async (client, opts, result, capabilityIdOverride) => {
+  const effectiveCapId = opts.capabilityId;
+  if (effectiveCapId === void 0) return;
   const { recordingClient, canRecord } = resolveRecordingClient(client, opts);
   if (!canRecord) return;
+  const fetchOriginForRecord = opts.capabilityId === void 0 ? "direct_url" : opts.fetchOrigin;
   try {
     const created = await recordingClient.runs.create({
-      capabilityId: opts.capabilityId,
+      capabilityId: effectiveCapId,
       ...opts.searchId && { searchId: opts.searchId },
+      ...fetchOriginForRecord && { fetchOrigin: fetchOriginForRecord },
       ...result.status !== null && { status: result.status },
       latencyMs: result.latencyMs,
       ...opts.requestSchema && { requestSchema: opts.requestSchema }
@@ -2416,7 +2554,7 @@ var recordErrorFetchRun = async (client, opts, result) => {
   } catch {
   }
 };
-var recordTimeoutRun = async (client, opts, err, startedAt, capabilityIdRequested) => {
+var recordTimeoutRun = async (client, opts, err, startedAt, capabilityIdRequested, capabilityIdOverride) => {
   const result = errorFetchResult(
     startedAt,
     err.message,
@@ -2452,12 +2590,23 @@ var withDefaultContentType = (headers, body) => {
 var clientFetch = async (client, url, opts = {}) => {
   const startedAt = Date.now();
   const capabilityIdRequested = opts.capabilityId !== void 0;
-  const method = opts.method ?? (opts.body !== void 0 ? "POST" : "GET");
-  const probeHeaders = withDefaultContentType(opts.headers, opts.body);
+  const normalized = normalizeTransportEnvelopeRequest(url, {
+    method: opts.method,
+    body: opts.body
+  });
+  const requestUrl = normalized.url;
+  const requestBody = normalized.body;
+  const method = normalized.method ?? (requestBody !== void 0 ? "POST" : "GET");
+  const { canRecord: canRecordForResolve } = resolveRecordingClient(
+    client,
+    opts
+  );
+  const resolvePromise = !capabilityIdRequested && canRecordForResolve ? client.capabilities.resolveByUrl(redactUrl(requestUrl), method).catch(() => null) : Promise.resolve(null);
+  const probeHeaders = withDefaultContentType(opts.headers, requestBody);
   const requestInit = {
     method,
     headers: probeHeaders,
-    body: opts.body,
+    body: requestBody,
     signal: opts.signal
   };
   const configuredFetch = buildConfiguredFetch(client, {
@@ -2468,7 +2617,7 @@ var clientFetch = async (client, url, opts = {}) => {
   const skipReasons = [];
   const warnings = [];
   try {
-    response = await configuredFetch(url, requestInit);
+    response = await configuredFetch(requestUrl, requestInit);
   } catch (err) {
     if (err instanceof ZeroTimeoutError) {
       await recordTimeoutRun(
@@ -2498,13 +2647,13 @@ var clientFetch = async (client, url, opts = {}) => {
       const payCall = requirement.protocol === "x402" ? client.payments.pay : client.payments.payMpp;
       try {
         const paid = await payCall({
-          url,
+          url: requestUrl,
           method,
           // Fresh clone for the paid retry — same rationale as
           // the probe-side clone above. Re-derives the default
           // Content-Type so the paid leg matches the probe.
-          headers: withDefaultContentType(opts.headers, opts.body),
-          body: opts.body,
+          headers: withDefaultContentType(opts.headers, requestBody),
+          body: requestBody,
           maxPay: opts.maxPay,
           account: opts.account,
           signal: opts.signal,
@@ -2644,7 +2793,15 @@ var clientFetch = async (client, url, opts = {}) => {
     else if (closeFailed)
       skipReasons.push(FETCH_SKIP_REASONS.mppSessionCloseFailedNotRecorded);
   }
-  if (opts.capabilityId !== void 0 && !paidButStill402 && !closeFailed) {
+  const resolvedCap = await resolvePromise;
+  const effectiveCapabilityId = opts.capabilityId ?? resolvedCap?.capabilityId;
+  const capabilityResolution = !capabilityIdRequested && canRecordForResolve ? resolvedCap !== null ? {
+    resolved: true,
+    capabilityId: resolvedCap.capabilityId,
+    capabilitySlug: resolvedCap.capabilitySlug,
+    matchedVia: resolvedCap.matchedVia
+  } : { resolved: false } : void 0;
+  if (effectiveCapabilityId !== void 0 && !paidButStill402 && !closeFailed) {
     const { recordingClient, canRecord } = resolveRecordingClient(client, opts);
     if (!canRecord) {
       skipReasons.push("no_credentials");
@@ -2664,8 +2821,11 @@ var clientFetch = async (client, url, opts = {}) => {
           }
         }
         const result2 = await recordingClient.runs.create({
-          capabilityId: opts.capabilityId,
+          capabilityId: effectiveCapabilityId,
           searchId: opts.searchId,
+          // Auto-resolved runs are always direct_url — they only fire when
+          // no capabilityId was supplied (the direct_url path by definition).
+          ...opts.capabilityId === void 0 ? { fetchOrigin: "direct_url" } : opts.fetchOrigin && { fetchOrigin: opts.fetchOrigin },
           status: response.status,
           latencyMs,
           ...opts.requestSchema && { requestSchema: opts.requestSchema },
@@ -2698,7 +2858,7 @@ var clientFetch = async (client, url, opts = {}) => {
           message: "Failed to record run for fetch",
           meta: {
             url: redactUrl(url),
-            capabilityId: opts.capabilityId,
+            capabilityId: effectiveCapabilityId,
             error: errorMessage2,
             errorCode: code
           }
@@ -2726,6 +2886,8 @@ var clientFetch = async (client, url, opts = {}) => {
     result.runTrackingSkipped = skipReasons;
   }
   if (warnings.length > 0) result.warnings = warnings;
+  if (capabilityResolution !== void 0)
+    result.capabilityResolution = capabilityResolution;
   return result;
 };
 var searchResultSchema = zod.z.object({
@@ -3165,9 +3327,13 @@ exports.ZeroSessionCloseFailedError = ZeroSessionCloseFailedError;
 exports.ZeroTimeoutError = ZeroTimeoutError;
 exports.ZeroValidationError = ZeroValidationError;
 exports.ZeroWalletError = ZeroWalletError;
+exports.asSchemaNode = asSchemaNode;
 exports.coerceTempoChainId = coerceTempoChainId;
 exports.createManagedAccount = createManagedAccount;
+exports.extractInputEnvelope = extractInputEnvelope;
+exports.normalizeTransportEnvelopeRequest = normalizeTransportEnvelopeRequest;
 exports.paymentHasAnchor = paymentHasAnchor;
 exports.tempoChainLabelFromId = tempoChainLabelFromId;
-//# sourceMappingURL=chunk-5ZVIL7AZ.cjs.map
-//# sourceMappingURL=chunk-5ZVIL7AZ.cjs.map
+exports.unwrapTransportEnvelope = unwrapTransportEnvelope;
+//# sourceMappingURL=chunk-UIK7QKNQ.cjs.map
+//# sourceMappingURL=chunk-UIK7QKNQ.cjs.map