node-autotask 0.8.0 → 0.8.1

package/dist/{chunk-RFXGG37L.cjs → chunk-IV2Z3JLR.cjs}

@@ -1,14 +1,560 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class; var _class2; var _class3; var _class4;
-
-
-
-
-
-var _chunk5QVXRT3Acjs = require('./chunk-5QVXRT3A.cjs');
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class; var _class2; var _class3; var _class4;// src/logger.ts
+var NoopLogger = {};
+var REDACTED = "[REDACTED]";
+var CREDENTIAL_HEADER_NAMES = [
+  "ApiIntegrationCode",
+  "UserName",
+  "Secret",
+  "ImpersonationResourceId",
+  "authToken"
+];
+function normalizeKey(key) {
+  return key.toLowerCase().replace(/[_-]/g, "");
+}
+var CREDENTIAL_KEY_SET = new Set(CREDENTIAL_HEADER_NAMES.map(normalizeKey));
+function isCredentialHeaderName(name, extraSecretKeys) {
+  const normalized = normalizeKey(name);
+  if (CREDENTIAL_KEY_SET.has(normalized)) return true;
+  if (extraSecretKeys === void 0) return false;
+  return extraSecretKeys.some((extra) => normalizeKey(extra) === normalized);
+}
+function isPlainRecord(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
+function redactRecord(value, extraSecretKeys) {
+  if (Array.isArray(value)) {
+    return value.map((item) => redactRecord(item, extraSecretKeys));
+  }
+  if (isPlainRecord(value)) {
+    const out = {};
+    for (const [key, item] of Object.entries(value)) {
+      out[key] = isCredentialHeaderName(key, extraSecretKeys) ? REDACTED : redactRecord(item, extraSecretKeys);
+    }
+    return out;
+  }
+  return value;
+}
 
+// src/redact.ts
+var SECRET_RESPONSE_FIELDS = [
+  "password",
+  // ClientPortalUserModel
+  "secretKey",
+  // the 5 webhook models
+  "secret"
+  // IntegrationVendorInsightModel, IntegrationVendorWidgetModel
+];
+var PERSONAL_RESPONSE_FIELDS = [
+  "additionalAddressInformation",
+  "additionalBillToAddressInformation",
+  "additionalShipToAddressInformation",
+  "address1",
+  "address2",
+  "addressLine",
+  "addressLine1",
+  "alternatePhone",
+  "alternatePhone1",
+  "alternatePhone2",
+  "billingAddress1",
+  "billingAddress2",
+  "billToAdditionalAddressInformation",
+  "billToCity",
+  "billToPostalCode",
+  "billToZipCode",
+  "city",
+  "email",
+  "email2",
+  "email3",
+  "emailAddress",
+  "emailAddress2",
+  "emailAddress3",
+  "extApprovalContactResponse",
+  "fax",
+  "faxNumber",
+  "gender",
+  "homePhone",
+  "mobilePhone",
+  "notificationEmailAddress",
+  "officePhone",
+  "phone",
+  "postalCode",
+  "recipientEmailAddress",
+  "rmmIsMobileDeviceManagementEnrolled",
+  "shipToAddress1",
+  "shipToAddress2",
+  "shipToCity",
+  "shipToPostalCode",
+  "userName",
+  "zipCode"
+];
+var CONFIDENTIAL_RESPONSE_FIELDS = [
+  "domain",
+  "domainExpirationDateTime",
+  "domainLastUpdatedDateTime",
+  "domainRegistrationDateTime",
+  "primaryContact",
+  "rmmDeviceAuditExternalIPAddress",
+  "rmmDeviceAuditIPAddress",
+  "rmmDeviceAuditMacAddress",
+  "rmmDeviceAuditMobileNumber",
+  "rmmDeviceAuditSNMPContact",
+  "taxID",
+  "webAddress"
+];
+var SECRET_SET = new Set(SECRET_RESPONSE_FIELDS);
+var OPTIONAL_SET = /* @__PURE__ */ new Set([...PERSONAL_RESPONSE_FIELDS, ...CONFIDENTIAL_RESPONSE_FIELDS]);
+function isPlainRecord2(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
+function isRedactedFieldName(name, policy) {
+  return SECRET_SET.has(name) || policy.redactPersonalData && OPTIONAL_SET.has(name);
+}
+function redactResponseBody(value, policy) {
+  const personal = policy.redactPersonalData;
+  if (Array.isArray(value)) {
+    return value.map((entry) => redactResponseBody(entry, policy));
+  }
+  if (!isPlainRecord2(value)) return value;
+  const out = {};
+  for (const [key, entry] of Object.entries(value)) {
+    const pinned = SECRET_SET.has(key) || personal && OPTIONAL_SET.has(key);
+    out[key] = pinned ? REDACTED : redactResponseBody(entry, policy);
+  }
+  return out;
+}
 
+// src/errors.ts
+function isRecord(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
+var AutotaskError = class extends Error {
+  
+  
+  
+  
+  
+  
+  
+  
+  
+  
+  /** Issue #9/#14: the additive structured extras (recovery refusal payload; emptyReason / pointerNote) — never changes the error contract. */
+  
+  constructor(message, options = {}) {
+    super(message);
+    this.name = "AutotaskError";
+    this.code = _nullishCoalesce(options.code, () => ( "AUTOTASK_ERROR"));
+    this.category = _nullishCoalesce(options.category, () => ( "server"));
+    this.retryable = _nullishCoalesce(options.retryable, () => ( false));
+    this.operation = options.operation;
+    this.httpStatus = options.httpStatus;
+    this.vendorError = options.vendorError;
+    this.resourceIds = options.resourceIds;
+    this.suggestedAction = options.suggestedAction;
+    this.correlationId = options.correlationId;
+    this.url = options.url;
+    this.details = options.details;
+    _optionalChain([Error, 'access', _ => _.captureStackTrace, 'optionalCall', _2 => _2(this, this.constructor)]);
+  }
+};
+var AutotaskConfigError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "CONFIG_ERROR", category: "validation", ...options });
+    this.name = "AutotaskConfigError";
+  }
+};
+var AutotaskNetworkError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, {
+      code: "NETWORK_ERROR",
+      category: "network",
+      retryable: true,
+      suggestedAction: _nullishCoalesce(options.suggestedAction, () => ( "Check connectivity to the Autotask zone and retry.")),
+      ...options
+    });
+    this.name = "AutotaskNetworkError";
+  }
+};
+var AutotaskTimeoutError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, {
+      code: "TIMEOUT",
+      category: "timeout",
+      retryable: true,
+      suggestedAction: _nullishCoalesce(options.suggestedAction, () => ( "Retry, narrow the query, or raise timeoutMs.")),
+      ...options
+    });
+    this.name = "AutotaskTimeoutError";
+  }
+};
+var AutotaskAbortError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "ABORTED", category: "network", retryable: false, ...options });
+    this.name = "AutotaskAbortError";
+  }
+};
+var ResponseRejectedError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "RESPONSE_REJECTED", category: "policy", retryable: false, ...options });
+    this.name = "ResponseRejectedError";
+  }
+};
+var BadRequestError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "BAD_REQUEST", category: "validation", ...options });
+    this.name = "BadRequestError";
+  }
+};
+var UnauthorizedError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "UNAUTHORIZED", category: "auth", ...options });
+    this.name = "UnauthorizedError";
+  }
+};
+var ForbiddenError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "FORBIDDEN", category: "auth", ...options });
+    this.name = "ForbiddenError";
+  }
+};
+var NotFoundError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "NOT_FOUND", category: "not_found", ...options });
+    this.name = "NotFoundError";
+  }
+};
+var ConflictError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "CONFLICT", category: "conflict", ...options });
+    this.name = "ConflictError";
+  }
+};
+var UnprocessableEntityError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "VALIDATION_FAILED", category: "validation", ...options });
+    this.name = "UnprocessableEntityError";
+  }
+};
+var RateLimitError = class extends AutotaskError {
+  /** Seconds the server asked the client to wait (`Retry-After`), when present. */
+  
+  /** True when the call was refused locally (the tenant cooldown gate) and never sent. */
+  
+  constructor(message, options = {}) {
+    super(message, { code: "RATE_LIMITED", category: "rate_limit", retryable: true, ...options });
+    this.name = "RateLimitError";
+  }
+};
+var ServerError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "SERVER_ERROR", category: "server", retryable: true, ...options });
+    this.name = "ServerError";
+  }
+};
+var UnexpectedContentTypeError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "UNEXPECTED_CONTENT_TYPE", category: "server", retryable: true, ...options });
+    this.name = "UnexpectedContentTypeError";
+  }
+};
+var EmptyResponseError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "EMPTY_RESPONSE", category: "server", ...options });
+    this.name = "EmptyResponseError";
+  }
+};
+var CircuitBreakerError = class extends AutotaskError {
+  /** Seconds remaining in the open period (absent when the half-open probe budget is in flight). */
+  
+  /** True when the call was refused locally (the circuit is open) and never sent. */
+  
+  constructor(message, options = {}) {
+    super(message, { code: "CIRCUIT_BREAKER_OPEN", category: "policy", retryable: true, ...options });
+    this.name = "CircuitBreakerError";
+  }
+};
+var HostPolicyDeniedError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "HOST_POLICY_DENIED", category: "policy", retryable: false, ...options });
+    this.name = "HostPolicyDeniedError";
+  }
+};
+var ResolutionError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, {
+      code: options.code === void 0 ? "RESOLUTION_AMBIGUOUS" : options.code,
+      category: "resolution",
+      ...options
+    });
+    this.name = "ResolutionError";
+  }
+};
+var PaginationLimitError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, {
+      code: "PAGINATION_LIMIT",
+      category: "policy",
+      suggestedAction: _nullishCoalesce(options.suggestedAction, () => ( "Narrow the query with a tighter filter so the walk stays under the 1000-page limit.")),
+      ...options
+    });
+    this.name = "PaginationLimitError";
+  }
+};
+var QueryTooLongError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, {
+      code: "QUERY_TOO_LONG",
+      category: "policy",
+      suggestedAction: _nullishCoalesce(options.suggestedAction, () => ( 'Use the default POST query path (omit via: "get") for filters above the 2048-char GET cap.')),
+      ...options
+    });
+    this.name = "QueryTooLongError";
+  }
+};
+var MISSING_REQUIRED_FIELD = /^Missing Required Field:\s*([A-Za-z_][A-Za-z0-9_]*)/;
+function parseVendorErrors(body) {
+  if (!isRecord(body) || !Array.isArray(body.errors)) return void 0;
+  const out = [];
+  for (const entry of body.errors) {
+    if (typeof entry === "string") {
+      const item2 = { message: entry };
+      const m = MISSING_REQUIRED_FIELD.exec(entry);
+      if (m) item2.field = m[1];
+      out.push(item2);
+      continue;
+    }
+    if (!isRecord(entry)) continue;
+    const item = {};
+    if (typeof entry.message === "string") item.message = entry.message;
+    if (typeof entry.field === "string") item.field = entry.field;
+    if (typeof entry.code === "string") item.code = entry.code;
+    if (item.message !== void 0 || item.field !== void 0 || item.code !== void 0) {
+      out.push(item);
+    }
+  }
+  return out;
+}
+var DETERMINISTIC_VENDOR_500_PHRASES = [/exceeds maximum length/i];
+function isDeterministicVendor500(entries) {
+  if (entries === void 0) return false;
+  return entries.some(
+    (entry) => entry.message !== void 0 && DETERMINISTIC_VENDOR_500_PHRASES.some((phrase) => phrase.test(entry.message))
+  );
+}
+function formatVendorEntry(entry) {
+  const parts = [];
+  if (entry.code) parts.push(`[${entry.code}]`);
+  if (entry.field) parts.push(`Field '${entry.field}':`);
+  if (entry.message) parts.push(entry.message);
+  return parts.join(" ");
+}
+function formatVendorDetail(body) {
+  const entries = parseVendorErrors(body);
+  if (entries && entries.length > 0) {
+    const formatted = entries.map(formatVendorEntry).filter((line) => line.length > 0);
+    if (formatted.length > 0) return formatted.join(" | ");
+  }
+  if (isRecord(body) && typeof body.message === "string" && body.message.trim().length > 0) {
+    return body.message.trim();
+  }
+  return void 0;
+}
+function isMachineCode(code) {
+  return /^[A-Za-z0-9][A-Za-z0-9_-]{2,}$/.test(code) && /\d/.test(code);
+}
+function errorClassForStatus(status) {
+  switch (status) {
+    case 400:
+      return BadRequestError;
+    case 401:
+      return UnauthorizedError;
+    case 403:
+      return ForbiddenError;
+    case 404:
+      return NotFoundError;
+    case 409:
+    case 412:
+      return ConflictError;
+    case 422:
+      return UnprocessableEntityError;
+    case 429:
+      return RateLimitError;
+    default:
+      return status >= 500 && status < 600 ? ServerError : null;
+  }
+}
+function statusDefaultMessage(status) {
+  switch (status) {
+    case 401:
+      return "Authentication failed: Invalid credentials";
+    case 404:
+      return "Resource not found";
+    default:
+      return `Autotask API request failed with status ${status}`;
+  }
+}
+var VENDOR_BODY_SUFFIX_LIMIT = 200;
+function vendorBodySuffix(body) {
+  const rendered = typeof body === "string" ? body : JSON.stringify(body);
+  if (rendered === void 0 || rendered === "null" || rendered === "{}" || rendered === "[]") return void 0;
+  return rendered.length > VENDOR_BODY_SUFFIX_LIMIT ? rendered.slice(0, VENDOR_BODY_SUFFIX_LIMIT) : rendered;
+}
+var DIAGNOSTIC_SHAPE_ANOMALY = "sent value shows shell-quoting/line-break artifacts \u2014 check your env load";
+var DIAGNOSTIC_NO_ANOMALY = "sent value shows no shape anomalies \u2014 credentials or account state are the likely cause";
+var CREDENTIAL_SHAPE_POINTER = "Load the credential the way the file documents: shell-sourced (`set -a; . ./.env; set +a`) or via loadAutotaskCredentialsFromEnv() from node-autotask \u2014 a quote-preserving parser hands the value over with its quotes intact, which the vendor rejects as invalid credentials.";
+function credentialDiagnosticDetails(credential) {
+  if (credential === void 0) return void 0;
+  const diagnostic = credential.allValuesClean ? DIAGNOSTIC_NO_ANOMALY : `${DIAGNOSTIC_SHAPE_ANOMALY} (${_nullishCoalesce(credential.problem, () => ( "shape anomaly detected"))})`;
+  return { diagnostic, pointerNote: CREDENTIAL_SHAPE_POINTER };
+}
+function mergeDetails(base, extra) {
+  if (base === void 0) return extra;
+  if (extra === void 0) return base;
+  return { ...base, ...extra };
+}
+function suggestedActionForStatus(status) {
+  switch (status) {
+    case 400:
+    case 422:
+      return "Fix the request payload; see the vendor error for the offending field.";
+    case 401:
+      return "Check the API integration code, username and secret (3-header auth).";
+    case 403:
+      return "Verify permissions; if ImpersonationResourceId is set, retry without it.";
+    case 404:
+      return "Verify the id, or resolve the record by name first.";
+    case 409:
+    case 412:
+      return "Re-read the record and retry with current values.";
+    case 429:
+      return "Back off and retry; honour Retry-After.";
+    default:
+      return status >= 500 ? "Retry with backoff; the server error is transient." : void 0;
+  }
+}
+function errorFromStatus(status, body, url, operation, redactPersonalData = true, credential) {
+  const safeBody = redactResponseBody(body, { redactPersonalData });
+  let detail = formatVendorDetail(safeBody);
+  if (detail !== void 0 && detail.length > VENDOR_BODY_SUFFIX_LIMIT) {
+    detail = detail.slice(0, VENDOR_BODY_SUFFIX_LIMIT);
+  }
+  const suffix = detail === void 0 ? vendorBodySuffix(safeBody) : void 0;
+  const message = _nullishCoalesce(detail, () => ( (suffix !== void 0 ? `${statusDefaultMessage(status)}: ${suffix}` : statusDefaultMessage(status))));
+  const mapped = errorClassForStatus(status);
+  const Ctor = _nullishCoalesce(mapped, () => ( AutotaskError));
+  const code = mapped !== null ? defaultCodeForClass(mapped) : `HTTP_${status}`;
+  const entries = parseVendorErrors(safeBody);
+  const vendorCodeCandidate = _nullishCoalesce((isRecord(safeBody) && typeof safeBody.code === "string" ? safeBody.code : void 0), () => ( (_nullishCoalesce(_optionalChain([entries, 'optionalAccess', _3 => _3[0], 'optionalAccess', _4 => _4.code]), () => ( void 0)))));
+  const credentialDetails = status === 401 ? credentialDiagnosticDetails(credential) : void 0;
+  const extraDetails = mergeDetails(void 0, credentialDetails);
+  const err = new Ctor(message, {
+    code: vendorCodeCandidate !== void 0 && isMachineCode(vendorCodeCandidate) ? vendorCodeCandidate : code,
+    httpStatus: status,
+    vendorError: safeBody,
+    url,
+    operation,
+    retryable: status === 429 || status >= 500,
+    suggestedAction: suggestedActionForStatus(status),
+    ...extraDetails !== void 0 ? { details: extraDetails } : {}
+  });
+  if (Ctor === AutotaskError) err.name = "AutotaskError";
+  if (status >= 500 && isDeterministicVendor500(entries)) {
+    err.retryable = false;
+    err.details = mergeDetails(err.details, { deterministic: true });
+    const dot = operation !== void 0 ? operation.indexOf(".") : -1;
+    const resource = operation !== void 0 && dot > 0 ? operation.slice(0, dot) : void 0;
+    err.suggestedAction = "Deterministic field rejection \u2014 fix the value, do not retry. " + (resource !== void 0 ? `Consult ${resource}.getFieldInfo for the field catalog (types, required, maxLength).` : "Consult the resource's getFieldInfo for the field catalog (types, required, maxLength).");
+  }
+  return err;
+}
+var StaleObjectError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, {
+      code: "STALE_OBJECT",
+      category: "conflict",
+      suggestedAction: "Re-read the record and retry with the fresh lastModifiedDate.",
+      ...options
+    });
+    this.name = "StaleObjectError";
+  }
+};
+var ConfirmationRequiredError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "CONFIRMATION_REQUIRED", category: "policy", ...options });
+    this.name = "ConfirmationRequiredError";
+  }
+};
+var DeleteBoundaryError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "DELETE_BOUNDARY", category: "policy", ...options });
+    this.name = "DeleteBoundaryError";
+  }
+};
+var MarkerUnsafeIdError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "MARKER_UNSAFE_ID", category: "policy", ...options });
+    this.name = "MarkerUnsafeIdError";
+  }
+};
+var RecoveryTruncatedError = class extends AutotaskError {
+  constructor(message, options = {}) {
+    super(message, { code: "RECOVERY_TRUNCATED", category: "policy", ...options });
+    this.name = "RecoveryTruncatedError";
+  }
+};
+function defaultCodeForClass(Ctor) {
+  switch (Ctor) {
+    case BadRequestError:
+      return "BAD_REQUEST";
+    case UnauthorizedError:
+      return "UNAUTHORIZED";
+    case ForbiddenError:
+      return "FORBIDDEN";
+    case NotFoundError:
+      return "NOT_FOUND";
+    case ConflictError:
+      return "CONFLICT";
+    case UnprocessableEntityError:
+      return "VALIDATION_FAILED";
+    case RateLimitError:
+      return "RATE_LIMITED";
+    default:
+      return "SERVER_ERROR";
+  }
+}
+function isAutotaskError(err) {
+  return err instanceof AutotaskError;
+}
 
-var _chunkIFXFOYDUcjs = require('./chunk-IFXFOYDU.cjs');
+// src/credential-shape.ts
+var QUOTE_CHARS = /* @__PURE__ */ new Set(["'", '"']);
+function hasSurroundingQuotes(value) {
+  if (value.length < 2) return false;
+  const first = value[0];
+  return QUOTE_CHARS.has(first) && value[value.length - 1] === first;
+}
+function credentialShapeProblem(value, options = {}) {
+  if (!options.skipEdgeWhitespace) {
+    if (/^\s/.test(value)) return "leading whitespace";
+    if (/\s$/.test(value)) return "trailing whitespace";
+  }
+  if (!options.skipSurroundingQuotes && hasSurroundingQuotes(value)) {
+    return "single- or double-quote surrounding the value";
+  }
+  if (value.includes("\r")) return "carriage return";
+  return void 0;
+}
+var CREDENTIAL_ENV_LOAD_ACTION = "value appears shell-quoted or line-break contaminated \u2014 check how your env file was loaded (single-quoted values must be shell-sourced, not parsed by a quote-preserving loader)";
+var MIN_PREFIX_SUMMARY_LENGTH = 4;
+function credentialValueSummary(value) {
+  return value.length >= MIN_PREFIX_SUMMARY_LENGTH ? `len ${value.length}, starts "${value.slice(0, 2)}"` : "short value (length withheld)";
+}
 
 // src/fieldCache.ts
 var FIELD_CACHE_MAX_ENTITIES = 256;
@@ -22,10 +568,10 @@ var FieldCache = (_class = class _FieldCache {
   __init2() {this.inflightMap = /* @__PURE__ */ new Map()}
   constructor(ttlMs, maxEntities = FIELD_CACHE_MAX_ENTITIES) {;_class.prototype.__init.call(this);_class.prototype.__init2.call(this);
     if (!Number.isInteger(ttlMs) || ttlMs <= 0) {
-      throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(`fieldCache.ttlMs must be a positive integer (got ${ttlMs})`);
+      throw new AutotaskConfigError(`fieldCache.ttlMs must be a positive integer (got ${ttlMs})`);
     }
     if (!Number.isInteger(maxEntities) || maxEntities <= 0) {
-      throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(`fieldCache.maxEntities must be a positive integer (got ${maxEntities})`);
+      throw new AutotaskConfigError(`fieldCache.maxEntities must be a positive integer (got ${maxEntities})`);
     }
     this.ttlMs = ttlMs;
     this.maxEntities = maxEntities;
@@ -195,7 +741,7 @@ function defaultCircuitBreakerStore() {
   return defaultStore;
 }
 function resetDefaultCircuitBreakerStore() {
-  _optionalChain([defaultStore, 'optionalAccess', _ => _.clear, 'call', _2 => _2()]);
+  _optionalChain([defaultStore, 'optionalAccess', _5 => _5.clear, 'call', _6 => _6()]);
 }
 function buildBreakerKey(baseUrl) {
   return new URL(baseUrl).host.toLowerCase();
@@ -207,7 +753,7 @@ function isBreakerFailure(err) {
   if (status === void 0) return false;
   if (status === 429) return true;
   if (status >= 500 && status < 600) {
-    return _optionalChain([err, 'access', _3 => _3.details, 'optionalAccess', _4 => _4.deterministic]) !== true;
+    return _optionalChain([err, 'access', _7 => _7.details, 'optionalAccess', _8 => _8.deterministic]) !== true;
   }
   return err.code === "UNEXPECTED_CONTENT_TYPE";
 }
@@ -262,7 +808,7 @@ function defaultCooldownStore() {
   return defaultStore2;
 }
 function resetDefaultCooldownStore() {
-  _optionalChain([defaultStore2, 'optionalAccess', _5 => _5.clear, 'call', _6 => _6()]);
+  _optionalChain([defaultStore2, 'optionalAccess', _9 => _9.clear, 'call', _10 => _10()]);
 }
 function buildTenantKey(userName, baseUrl) {
   return `${userName.toLowerCase()}@${new URL(baseUrl).host.toLowerCase()}`;
@@ -286,20 +832,20 @@ var ReadCache = (_class4 = class {
   __init5() {this.store = /* @__PURE__ */ new Map()}
   constructor(ttlMs, perResourceTtlMs) {;_class4.prototype.__init5.call(this);
     if (!Number.isInteger(ttlMs) || ttlMs <= 0) {
-      throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(`cache.ttlMs must be a positive integer (got ${ttlMs})`);
+      throw new AutotaskConfigError(`cache.ttlMs must be a positive integer (got ${ttlMs})`);
     }
     if (perResourceTtlMs !== void 0) {
       if (perResourceTtlMs === null || typeof perResourceTtlMs !== "object" || Array.isArray(perResourceTtlMs)) {
-        throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(
+        throw new AutotaskConfigError(
           `cache.perResourceTtlMs must be an object of resource key -> ms (got ${String(perResourceTtlMs)})`
         );
       }
       for (const [key, value] of Object.entries(perResourceTtlMs)) {
         if (key === "") {
-          throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("cache.perResourceTtlMs keys must be non-empty resource keys");
+          throw new AutotaskConfigError("cache.perResourceTtlMs keys must be non-empty resource keys");
         }
         if (!Number.isInteger(value) || value <= 0) {
-          throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(
+          throw new AutotaskConfigError(
             `cache.perResourceTtlMs.${key} must be a positive integer (got ${String(value)})`
           );
         }
@@ -487,7 +1033,7 @@ function assertHostPolicy(origin, options) {
   const violation = decideHostPolicy(origin, options);
   if (violation === null) return canonicalOrigin(origin);
   const bound = violation.bound === "private" ? "the host is a literal private / loopback / link-local address" : "the host is not on the configured allowedOrigins list";
-  throw new (0, _chunk5QVXRT3Acjs.HostPolicyDeniedError)(
+  throw new HostPolicyDeniedError(
     `Host policy denied "${violation.origin}": ${bound} (hostPolicy is opt-in; remove the bound or use a permitted origin)`,
     { details: { bound: violation.bound, origin: violation.origin } }
   );
@@ -570,7 +1116,7 @@ var DEFAULT_MAX_SCAN_PAGES = 4;
 function zoneUrl(zone) {
   const url = ZONE_CATALOG[zone];
   if (url === null || url === void 0) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(`Zone "${zone}" has no catalog URL; supply a baseUrl instead`);
+    throw new AutotaskConfigError(`Zone "${zone}" has no catalog URL; supply a baseUrl instead`);
   }
   return url;
 }
@@ -579,10 +1125,10 @@ function normalizeBaseUrl(raw) {
   try {
     url = new URL(raw);
   } catch (e) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(`Invalid baseUrl: "${raw}"`);
+    throw new AutotaskConfigError(`Invalid baseUrl: "${raw}"`);
   }
   if (url.protocol !== "http:" && url.protocol !== "https:") {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(`baseUrl must use http: or https:, got "${url.protocol}"`);
+    throw new AutotaskConfigError(`baseUrl must use http: or https:, got "${url.protocol}"`);
   }
   const path = url.pathname.replace(/\/+$/, "");
   return `${url.origin}${path}`;
@@ -593,21 +1139,21 @@ function isKnownZone(zone) {
 function resolveBaseUrl(partial) {
   if (partial.baseUrl !== void 0) return normalizeBaseUrl(partial.baseUrl);
   if (partial.zone === "other") {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)('zone: "other" requires a baseUrl');
+    throw new AutotaskConfigError('zone: "other" requires a baseUrl');
   }
   return zoneUrl(_nullishCoalesce(partial.zone, () => ( DEFAULT_ZONE)));
 }
 function requireCredential(value, field) {
   if (typeof value !== "string") {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(`${field} must be a non-empty string`);
+    throw new AutotaskConfigError(`${field} must be a non-empty string`);
   }
   const trimmed = value.trim();
   if (trimmed.length === 0) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(`${field} must be a non-empty string`);
+    throw new AutotaskConfigError(`${field} must be a non-empty string`);
   }
-  const shape = _chunkIFXFOYDUcjs.credentialShapeProblem.call(void 0, trimmed, { skipEdgeWhitespace: true });
+  const shape = credentialShapeProblem(trimmed, { skipEdgeWhitespace: true });
   if (shape !== void 0) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(`${field} ${_chunkIFXFOYDUcjs.CREDENTIAL_ENV_LOAD_ACTION} (${shape})`, {
+    throw new AutotaskConfigError(`${field} ${CREDENTIAL_ENV_LOAD_ACTION} (${shape})`, {
       code: "INVALID_CREDENTIAL_SHAPE",
       suggestedAction: "Load the credential with the shell (`set -a; . ./.env; set +a`) or with loadAutotaskCredentialsFromEnv() from node-autotask; single-quoted values must be shell-sourced, not parsed by a quote-preserving loader. No request was sent."
     });
@@ -616,18 +1162,18 @@ function requireCredential(value, field) {
 }
 function resolveConfig(config) {
   if (config === null || typeof config !== "object") {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("AutotaskConfig is required");
+    throw new AutotaskConfigError("AutotaskConfig is required");
   }
   const profile = _nullishCoalesce(config.profile, () => ( "library"));
   if (profile !== "library" && profile !== "agent") {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(
+    throw new AutotaskConfigError(
       `Unknown profile "${String(config.profile)}" \u2014 expected "library" or "agent"`
     );
   }
   const agent = profile === "agent";
   const { baseUrl, zone } = config;
   if (baseUrl !== void 0 && zone !== void 0 && zone !== "other") {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(
+    throw new AutotaskConfigError(
       'Provide exactly one of "baseUrl" or "zone" (zone "other" is used with a baseUrl)'
     );
   }
@@ -638,12 +1184,12 @@ function resolveConfig(config) {
     if (zone === "other") resolvedZone = "other";
   } else if (zone !== void 0) {
     if (!isKnownZone(zone)) {
-      throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(
+      throw new AutotaskConfigError(
         `Unknown zone "${zone}" \u2014 the catalog has ${ZONES.length} zones: ${ZONES.join(", ")} (use one of them, or supply a baseUrl)`
       );
     }
     if (zone === "other") {
-      throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)('zone: "other" requires a baseUrl');
+      throw new AutotaskConfigError('zone: "other" requires a baseUrl');
     }
     resolvedBaseUrl = zoneUrl(zone);
     resolvedZone = zone;
@@ -655,25 +1201,25 @@ function resolveConfig(config) {
   if (config.hostPolicy !== void 0) {
     const raw = config.hostPolicy;
     if (raw === null || typeof raw !== "object") {
-      throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("hostPolicy must be an object");
+      throw new AutotaskConfigError("hostPolicy must be an object");
     }
     if (raw.blockPrivateHosts !== void 0 && typeof raw.blockPrivateHosts !== "boolean") {
-      throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("hostPolicy.blockPrivateHosts must be a boolean");
+      throw new AutotaskConfigError("hostPolicy.blockPrivateHosts must be a boolean");
     }
     let allowedOrigins;
     if (raw.allowedOrigins !== void 0) {
       if (!Array.isArray(raw.allowedOrigins) || raw.allowedOrigins.some((entry) => typeof entry !== "string")) {
-        throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("hostPolicy.allowedOrigins must be an array of URL strings");
+        throw new AutotaskConfigError("hostPolicy.allowedOrigins must be an array of URL strings");
       }
       try {
         allowedOrigins = normalizeAllowedOrigins(raw.allowedOrigins);
       } catch (e2) {
-        throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("hostPolicy.allowedOrigins contains an invalid URL");
+        throw new AutotaskConfigError("hostPolicy.allowedOrigins contains an invalid URL");
       }
     }
     const blockPrivate = raw.blockPrivateHosts === true;
     if (!blockPrivate && (allowedOrigins === void 0 || allowedOrigins.length === 0)) {
-      throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(
+      throw new AutotaskConfigError(
         "hostPolicy is present but has no active bound \u2014 set blockPrivateHosts: true and/or a non-empty allowedOrigins (an empty policy is refused fail-closed)"
       );
     }
@@ -692,24 +1238,24 @@ function resolveConfig(config) {
   }
   const pageSize = _nullishCoalesce(config.pageSize, () => ( (agent ? AGENT_PROFILE.pageSize : DEFAULT_PAGE_SIZE)));
   if (!Number.isInteger(pageSize) || pageSize < 1 || pageSize > MAX_PAGE_SIZE) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(`pageSize must be an integer in 1..${MAX_PAGE_SIZE} (got ${String(config.pageSize)})`);
+    throw new AutotaskConfigError(`pageSize must be an integer in 1..${MAX_PAGE_SIZE} (got ${String(config.pageSize)})`);
   }
   const pageSizeCapped = agent ? Math.min(pageSize, AGENT_PROFILE.maxPageSize) : pageSize;
   const timeoutMs = _nullishCoalesce(config.timeoutMs, () => ( (agent ? AGENT_PROFILE.timeoutMs : DEFAULT_TIMEOUT_MS)));
   if (!Number.isInteger(timeoutMs) || timeoutMs <= 0) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("timeoutMs must be a positive integer");
+    throw new AutotaskConfigError("timeoutMs must be a positive integer");
   }
   const maxRetries = _nullishCoalesce(config.maxRetries, () => ( (agent ? AGENT_PROFILE.maxRetries : DEFAULT_MAX_RETRIES)));
   if (!Number.isInteger(maxRetries) || maxRetries < 0) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("maxRetries must be a non-negative integer");
+    throw new AutotaskConfigError("maxRetries must be a non-negative integer");
   }
   const maxConcurrent = _nullishCoalesce(config.maxConcurrent, () => ( (agent ? AGENT_PROFILE.maxConcurrent : DEFAULT_MAX_CONCURRENT)));
   if (!Number.isInteger(maxConcurrent) || maxConcurrent <= 0) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("maxConcurrent must be a positive integer");
+    throw new AutotaskConfigError("maxConcurrent must be a positive integer");
   }
   const maxResponseBytes = _nullishCoalesce(config.maxResponseBytes, () => ( (agent ? AGENT_PROFILE.maxResponseBytes : DEFAULT_MAX_RESPONSE_BYTES)));
   if (!Number.isInteger(maxResponseBytes) || maxResponseBytes <= 0) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("maxResponseBytes must be a positive integer");
+    throw new AutotaskConfigError("maxResponseBytes must be a positive integer");
   }
   let rateLimit;
   if (config.rateLimit !== void 0 && config.rateLimit.perHour !== void 0) {
@@ -718,25 +1264,25 @@ function resolveConfig(config) {
     } else {
       const perHour = config.rateLimit.perHour;
       if (!Number.isInteger(perHour) || perHour <= 0) {
-        throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("rateLimit.perHour must be a positive integer or null (explicitly disabled)");
+        throw new AutotaskConfigError("rateLimit.perHour must be a positive integer or null (explicitly disabled)");
       }
       rateLimit = { perHour };
     }
   } else if (agent) {
     rateLimit = { perHour: AGENT_PROFILE.rateLimit.perHour };
   }
-  const cooldownEnabled = _nullishCoalesce(_optionalChain([config, 'access', _7 => _7.cooldown, 'optionalAccess', _8 => _8.enabled]), () => ( true));
-  const cooldownMaxMs = _nullishCoalesce(_optionalChain([config, 'access', _9 => _9.cooldown, 'optionalAccess', _10 => _10.maxMs]), () => ( DEFAULT_COOLDOWN_MAX_MS));
+  const cooldownEnabled = _nullishCoalesce(_optionalChain([config, 'access', _11 => _11.cooldown, 'optionalAccess', _12 => _12.enabled]), () => ( true));
+  const cooldownMaxMs = _nullishCoalesce(_optionalChain([config, 'access', _13 => _13.cooldown, 'optionalAccess', _14 => _14.maxMs]), () => ( DEFAULT_COOLDOWN_MAX_MS));
   if (!Number.isInteger(cooldownMaxMs) || cooldownMaxMs <= 0) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("cooldown.maxMs must be a positive integer (ms)");
+    throw new AutotaskConfigError("cooldown.maxMs must be a positive integer (ms)");
   }
-  const cooldownDefaultMs = _nullishCoalesce(_optionalChain([config, 'access', _11 => _11.cooldown, 'optionalAccess', _12 => _12.defaultMs]), () => ( DEFAULT_COOLDOWN_DEFAULT_MS));
+  const cooldownDefaultMs = _nullishCoalesce(_optionalChain([config, 'access', _15 => _15.cooldown, 'optionalAccess', _16 => _16.defaultMs]), () => ( DEFAULT_COOLDOWN_DEFAULT_MS));
   if (!Number.isInteger(cooldownDefaultMs) || cooldownDefaultMs <= 0) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("cooldown.defaultMs must be a positive integer (ms)");
+    throw new AutotaskConfigError("cooldown.defaultMs must be a positive integer (ms)");
   }
-  const cooldownStore = _optionalChain([config, 'access', _13 => _13.cooldown, 'optionalAccess', _14 => _14.store]);
+  const cooldownStore = _optionalChain([config, 'access', _17 => _17.cooldown, 'optionalAccess', _18 => _18.store]);
   if (cooldownStore !== void 0 && (typeof cooldownStore.get !== "function" || typeof cooldownStore.set !== "function" || typeof cooldownStore.delete !== "function")) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("cooldown.store must implement get/set/delete (a CooldownStore)");
+    throw new AutotaskConfigError("cooldown.store must implement get/set/delete (a CooldownStore)");
   }
   const cooldown = {
     enabled: cooldownEnabled,
@@ -744,39 +1290,39 @@ function resolveConfig(config) {
     defaultMs: cooldownDefaultMs,
     store: cooldownStore
   };
-  const breakerEnabled = _nullishCoalesce(_optionalChain([config, 'access', _15 => _15.circuitBreaker, 'optionalAccess', _16 => _16.enabled]), () => ( false));
-  const breakerWindowMs = _nullishCoalesce(_optionalChain([config, 'access', _17 => _17.circuitBreaker, 'optionalAccess', _18 => _18.failureWindowMs]), () => ( DEFAULT_CIRCUIT_BREAKER_WINDOW_MS));
+  const breakerEnabled = _nullishCoalesce(_optionalChain([config, 'access', _19 => _19.circuitBreaker, 'optionalAccess', _20 => _20.enabled]), () => ( false));
+  const breakerWindowMs = _nullishCoalesce(_optionalChain([config, 'access', _21 => _21.circuitBreaker, 'optionalAccess', _22 => _22.failureWindowMs]), () => ( DEFAULT_CIRCUIT_BREAKER_WINDOW_MS));
   if (!Number.isInteger(breakerWindowMs) || breakerWindowMs <= 0) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("circuitBreaker.failureWindowMs must be a positive integer (ms)");
+    throw new AutotaskConfigError("circuitBreaker.failureWindowMs must be a positive integer (ms)");
   }
-  const breakerThreshold = _nullishCoalesce(_optionalChain([config, 'access', _19 => _19.circuitBreaker, 'optionalAccess', _20 => _20.failureThreshold]), () => ( DEFAULT_CIRCUIT_BREAKER_FAILURE_THRESHOLD));
+  const breakerThreshold = _nullishCoalesce(_optionalChain([config, 'access', _23 => _23.circuitBreaker, 'optionalAccess', _24 => _24.failureThreshold]), () => ( DEFAULT_CIRCUIT_BREAKER_FAILURE_THRESHOLD));
   if (!Number.isInteger(breakerThreshold) || breakerThreshold <= 0) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("circuitBreaker.failureThreshold must be a positive integer");
+    throw new AutotaskConfigError("circuitBreaker.failureThreshold must be a positive integer");
   }
-  const breakerOpenTimeoutMs = _nullishCoalesce(_optionalChain([config, 'access', _21 => _21.circuitBreaker, 'optionalAccess', _22 => _22.openTimeoutMs]), () => ( DEFAULT_CIRCUIT_BREAKER_OPEN_TIMEOUT_MS));
+  const breakerOpenTimeoutMs = _nullishCoalesce(_optionalChain([config, 'access', _25 => _25.circuitBreaker, 'optionalAccess', _26 => _26.openTimeoutMs]), () => ( DEFAULT_CIRCUIT_BREAKER_OPEN_TIMEOUT_MS));
   if (!Number.isInteger(breakerOpenTimeoutMs) || breakerOpenTimeoutMs <= 0) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("circuitBreaker.openTimeoutMs must be a positive integer (ms)");
+    throw new AutotaskConfigError("circuitBreaker.openTimeoutMs must be a positive integer (ms)");
   }
-  const breakerSuccessesToClose = _nullishCoalesce(_optionalChain([config, 'access', _23 => _23.circuitBreaker, 'optionalAccess', _24 => _24.successesToClose]), () => ( DEFAULT_CIRCUIT_BREAKER_SUCCESSES_TO_CLOSE));
+  const breakerSuccessesToClose = _nullishCoalesce(_optionalChain([config, 'access', _27 => _27.circuitBreaker, 'optionalAccess', _28 => _28.successesToClose]), () => ( DEFAULT_CIRCUIT_BREAKER_SUCCESSES_TO_CLOSE));
   if (!Number.isInteger(breakerSuccessesToClose) || breakerSuccessesToClose <= 0) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("circuitBreaker.successesToClose must be a positive integer");
+    throw new AutotaskConfigError("circuitBreaker.successesToClose must be a positive integer");
   }
-  const breakerHalfOpenProbes = _nullishCoalesce(_optionalChain([config, 'access', _25 => _25.circuitBreaker, 'optionalAccess', _26 => _26.halfOpenProbes]), () => ( breakerSuccessesToClose));
+  const breakerHalfOpenProbes = _nullishCoalesce(_optionalChain([config, 'access', _29 => _29.circuitBreaker, 'optionalAccess', _30 => _30.halfOpenProbes]), () => ( breakerSuccessesToClose));
   if (!Number.isInteger(breakerHalfOpenProbes) || breakerHalfOpenProbes <= 0) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("circuitBreaker.halfOpenProbes must be a positive integer");
+    throw new AutotaskConfigError("circuitBreaker.halfOpenProbes must be a positive integer");
   }
   if (breakerHalfOpenProbes < breakerSuccessesToClose) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(
+    throw new AutotaskConfigError(
       `circuitBreaker.halfOpenProbes (${breakerHalfOpenProbes}) must be >= successesToClose (${breakerSuccessesToClose}) \u2014 the breaker could never close`
     );
   }
-  const breakerStore = _optionalChain([config, 'access', _27 => _27.circuitBreaker, 'optionalAccess', _28 => _28.store]);
+  const breakerStore = _optionalChain([config, 'access', _31 => _31.circuitBreaker, 'optionalAccess', _32 => _32.store]);
   if (breakerStore !== void 0 && (typeof breakerStore.get !== "function" || typeof breakerStore.set !== "function" || typeof breakerStore.delete !== "function")) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("circuitBreaker.store must implement get/set/delete (a CircuitBreakerStore)");
+    throw new AutotaskConfigError("circuitBreaker.store must implement get/set/delete (a CircuitBreakerStore)");
   }
-  const breakerIsFailure = _optionalChain([config, 'access', _29 => _29.circuitBreaker, 'optionalAccess', _30 => _30.isFailure]);
+  const breakerIsFailure = _optionalChain([config, 'access', _33 => _33.circuitBreaker, 'optionalAccess', _34 => _34.isFailure]);
   if (breakerIsFailure !== void 0 && typeof breakerIsFailure !== "function") {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("circuitBreaker.isFailure must be a function");
+    throw new AutotaskConfigError("circuitBreaker.isFailure must be a function");
   }
   const circuitBreaker = {
     enabled: breakerEnabled,
@@ -788,23 +1334,23 @@ function resolveConfig(config) {
     store: breakerStore,
     isFailure: breakerIsFailure
   };
-  const maxScanRecords = _nullishCoalesce(_optionalChain([config, 'access', _31 => _31.resolution, 'optionalAccess', _32 => _32.maxScanRecords]), () => ( (agent ? AGENT_PROFILE.resolution.maxScanRecords : DEFAULT_MAX_SCAN_RECORDS)));
+  const maxScanRecords = _nullishCoalesce(_optionalChain([config, 'access', _35 => _35.resolution, 'optionalAccess', _36 => _36.maxScanRecords]), () => ( (agent ? AGENT_PROFILE.resolution.maxScanRecords : DEFAULT_MAX_SCAN_RECORDS)));
   if (!Number.isInteger(maxScanRecords) || maxScanRecords < 1) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("resolution.maxScanRecords must be an integer >= 1");
+    throw new AutotaskConfigError("resolution.maxScanRecords must be an integer >= 1");
   }
-  const maxScanPages = _nullishCoalesce(_optionalChain([config, 'access', _33 => _33.resolution, 'optionalAccess', _34 => _34.maxScanPages]), () => ( (agent ? AGENT_PROFILE.resolution.maxScanPages : DEFAULT_MAX_SCAN_PAGES)));
+  const maxScanPages = _nullishCoalesce(_optionalChain([config, 'access', _37 => _37.resolution, 'optionalAccess', _38 => _38.maxScanPages]), () => ( (agent ? AGENT_PROFILE.resolution.maxScanPages : DEFAULT_MAX_SCAN_PAGES)));
   if (!Number.isInteger(maxScanPages) || maxScanPages < 1) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)("resolution.maxScanPages must be an integer >= 1");
+    throw new AutotaskConfigError("resolution.maxScanPages must be an integer >= 1");
   }
   const redactPersonalData = _nullishCoalesce(config.redactPersonalData, () => ( true));
   const readCache = config.cache === void 0 ? void 0 : new ReadCache(config.cache.ttlMs, config.cache.perResourceTtlMs);
   const fieldCache = config.fieldCache === void 0 ? void 0 : new FieldCache(config.fieldCache.ttlMs, _nullishCoalesce(config.fieldCache.maxEntities, () => ( FIELD_CACHE_MAX_ENTITIES)));
-  const update = { putFallback: _optionalChain([config, 'access', _35 => _35.update, 'optionalAccess', _36 => _36.putFallback]) === true };
+  const update = { putFallback: _optionalChain([config, 'access', _39 => _39.update, 'optionalAccess', _40 => _40.putFallback]) === true };
   const reResolveZoneOn401 = config.reResolveZoneOn401 === true;
-  const logger = _nullishCoalesce(config.logger, () => ( _chunk5QVXRT3Acjs.NoopLogger));
+  const logger = _nullishCoalesce(config.logger, () => ( NoopLogger));
   if (resolvedBaseUrl.startsWith("http:")) {
     const host = new URL(resolvedBaseUrl).host;
-    _optionalChain([logger, 'access', _37 => _37.warn, 'optionalCall', _38 => _38(
+    _optionalChain([logger, 'access', _41 => _41.warn, 'optionalCall', _42 => _42(
       `[autotask] cleartext credentials to ${host} \u2014 https recommended (baseUrl uses http:; all catalog zones are https)`
     )]);
   }
@@ -838,13 +1384,13 @@ function resolveConfig(config) {
 
 // src/utils/index.ts
 var _crypto = require('crypto');
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function assertRecord(value, label) {
-  if (!isRecord(value)) {
+  if (!isRecord2(value)) {
     const got = value === null ? "null" : Array.isArray(value) ? "array" : typeof value;
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskError)(`Expected ${label} to be an object, got ${got}`, {
+    throw new AutotaskError(`Expected ${label} to be an object, got ${got}`, {
       code: "INVALID_RESPONSE",
       category: "server",
       retryable: false
@@ -853,7 +1399,7 @@ function assertRecord(value, label) {
   return value;
 }
 function isMergeable(value) {
-  return isRecord(value);
+  return isRecord2(value);
 }
 function deepMergeParams(base, override) {
   const out = { ...base };
@@ -867,27 +1413,27 @@ function deepMergeParams(base, override) {
 function parseIdentifier(value, label = "id") {
   if (typeof value === "number") {
     if (!Number.isSafeInteger(value) || value < 0) {
-      throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(`${label} must be a non-negative safe integer (got ${value})`);
+      throw new AutotaskConfigError(`${label} must be a non-negative safe integer (got ${value})`);
     }
     return value;
   }
   const trimmed = value.trim();
   if (!/^\d+$/.test(trimmed)) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(`${label} must be a non-negative integer (got "${value}")`);
+    throw new AutotaskConfigError(`${label} must be a non-negative integer (got "${value}")`);
   }
   const parsed = Number.parseInt(trimmed, 10);
   if (!Number.isSafeInteger(parsed)) {
-    throw new (0, _chunk5QVXRT3Acjs.AutotaskConfigError)(`${label} must be a non-negative safe integer (got "${value}")`);
+    throw new AutotaskConfigError(`${label} must be a non-negative safe integer (got "${value}")`);
   }
   return parsed;
 }
 function flattenUdfs(record, options) {
-  const prefix = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _39 => _39.prefix]), () => ( "udf_"));
+  const prefix = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _43 => _43.prefix]), () => ( "udf_"));
   const out = { ...record };
   const udfs = record.userDefinedFields;
   if (!Array.isArray(udfs)) return out;
   for (const udf of udfs) {
-    if (!isRecord(udf) || typeof udf.name !== "string" || udf.name === "") continue;
+    if (!isRecord2(udf) || typeof udf.name !== "string" || udf.name === "") continue;
     const target = udf.name in out ? `${prefix}${udf.name}` : udf.name;
     if (!(target in out)) out[target] = udf.value;
   }
@@ -899,7 +1445,7 @@ function newCorrelationId() {
 var CREDENTIAL_KEY_RE = /(^|[_\-.])(secret|secrets|password|passwd|passphrase|token|tokens|apikey|api_key|apiintegrationcode|credentials?|accesskey|access_key|authcode|authorization)([_\-.]|$)|([A-Za-z0-9])(secrets?|tokens?|password|passwd|passphrase|credentials?|keys?|apiintegrationcode)(?=$)/i;
 function redactAuditBody(value) {
   if (Array.isArray(value)) return value.map((entry) => redactAuditBody(entry));
-  if (!isRecord(value)) return value;
+  if (!isRecord2(value)) return value;
   const out = {};
   for (const [key, entry] of Object.entries(value)) {
     out[key] = CREDENTIAL_KEY_RE.test(key) ? "[REDACTED]" : redactAuditBody(entry);
@@ -925,7 +1471,7 @@ async function* paginate(fetchPage, opts = {}) {
   let page = 1;
   for (; ; ) {
     if (page > MAX_PAGES) {
-      throw new (0, _chunk5QVXRT3Acjs.PaginationLimitError)(
+      throw new PaginationLimitError(
         `Pagination exceeded ${MAX_PAGES} pages; refusing to fetch page ${page} (possible runaway walk)`
       );
     }
@@ -946,7 +1492,7 @@ async function collectAll(fetchPage, opts = {}) {
   for await (const page of paginate(fetchPage, opts)) {
     all.push(...page.items);
     if (cap !== void 0 && all.length > cap) {
-      throw new (0, _chunk5QVXRT3Acjs.PaginationLimitError)(
+      throw new PaginationLimitError(
         `Collected more than maxRecords (${cap}) records; refusing to accumulate further`,
         { suggestedAction: "Narrow the query with a tighter filter, or raise maxRecords." }
       );
@@ -12911,5 +13457,53 @@ var CREATE_GUIDANCE = {
 
 
 
-exports.FIELD_CACHE_KINDS = FIELD_CACHE_KINDS; exports.DEFAULT_CIRCUIT_BREAKER_WINDOW_MS = DEFAULT_CIRCUIT_BREAKER_WINDOW_MS; exports.DEFAULT_CIRCUIT_BREAKER_FAILURE_THRESHOLD = DEFAULT_CIRCUIT_BREAKER_FAILURE_THRESHOLD; exports.DEFAULT_CIRCUIT_BREAKER_OPEN_TIMEOUT_MS = DEFAULT_CIRCUIT_BREAKER_OPEN_TIMEOUT_MS; exports.DEFAULT_CIRCUIT_BREAKER_SUCCESSES_TO_CLOSE = DEFAULT_CIRCUIT_BREAKER_SUCCESSES_TO_CLOSE; exports.DEFAULT_CIRCUIT_BREAKER_MAX_ENTRIES = DEFAULT_CIRCUIT_BREAKER_MAX_ENTRIES; exports.InMemoryCircuitBreakerStore = InMemoryCircuitBreakerStore; exports.defaultCircuitBreakerStore = defaultCircuitBreakerStore; exports.resetDefaultCircuitBreakerStore = resetDefaultCircuitBreakerStore; exports.buildBreakerKey = buildBreakerKey; exports.isBreakerFailure = isBreakerFailure; exports.DEFAULT_COOLDOWN_MAX_MS = DEFAULT_COOLDOWN_MAX_MS; exports.DEFAULT_COOLDOWN_DEFAULT_MS = DEFAULT_COOLDOWN_DEFAULT_MS; exports.DEFAULT_COOLDOWN_MAX_ENTRIES = DEFAULT_COOLDOWN_MAX_ENTRIES; exports.InMemoryCooldownStore = InMemoryCooldownStore; exports.defaultCooldownStore = defaultCooldownStore; exports.resetDefaultCooldownStore = resetDefaultCooldownStore; exports.buildTenantKey = buildTenantKey; exports.cooldownDurationMs = cooldownDurationMs; exports.decideHostPolicy = decideHostPolicy; exports.ZONE_CATALOG = ZONE_CATALOG; exports.ZONES = ZONES; exports.DEFAULT_ZONE = DEFAULT_ZONE; exports.AGENT_PROFILE = AGENT_PROFILE; exports.DEFAULT_PAGE_SIZE = DEFAULT_PAGE_SIZE; exports.MAX_PAGE_SIZE = MAX_PAGE_SIZE; exports.DEFAULT_TIMEOUT_MS = DEFAULT_TIMEOUT_MS; exports.DEFAULT_MAX_RETRIES = DEFAULT_MAX_RETRIES; exports.DEFAULT_MAX_CONCURRENT = DEFAULT_MAX_CONCURRENT; exports.DEFAULT_MAX_RESPONSE_BYTES = DEFAULT_MAX_RESPONSE_BYTES; exports.DEFAULT_MAX_SCAN_RECORDS = DEFAULT_MAX_SCAN_RECORDS; exports.DEFAULT_MAX_SCAN_PAGES = DEFAULT_MAX_SCAN_PAGES; exports.zoneUrl = zoneUrl; exports.resolveBaseUrl = resolveBaseUrl; exports.resolveConfig = resolveConfig; exports.isRecord = isRecord; exports.assertRecord = assertRecord; exports.deepMergeParams = deepMergeParams; exports.parseIdentifier = parseIdentifier; exports.flattenUdfs = flattenUdfs; exports.newCorrelationId = newCorrelationId; exports.redactAuditBody = redactAuditBody; exports.camelKey = camelKey; exports.RELATIONSHIP_ZONE = RELATIONSHIP_ZONE; exports.RELATIONSHIP_MAP = RELATIONSHIP_MAP; exports.BLIND_SURFACE_STAMPS = BLIND_SURFACE_STAMPS; exports.DELETE_BOUNDARY_NOTES = DELETE_BOUNDARY_NOTES; exports.MARKER_FIELDS = MARKER_FIELDS; exports.RESPONSE_DRIFT_MARKERS = RESPONSE_DRIFT_MARKERS; exports.EMPTY_REASON_STAMPS = EMPTY_REASON_STAMPS; exports.POINTER_NOTES = POINTER_NOTES; exports.BLIND_SURFACE_INVENTORY = BLIND_SURFACE_INVENTORY; exports.REACHABILITY_PROBE_DEFAULTS = REACHABILITY_PROBE_DEFAULTS; exports.CREATE_GUIDANCE = CREATE_GUIDANCE; exports.MAX_PAGES = MAX_PAGES; exports.clampPageSize = clampPageSize; exports.totalPagesFor = totalPagesFor; exports.paginate = paginate; exports.paginateItems = paginateItems; exports.collectAll = collectAll; exports.toArray = toArray;
-//# sourceMappingURL=chunk-RFXGG37L.cjs.map
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.NoopLogger = NoopLogger; exports.REDACTED = REDACTED; exports.CREDENTIAL_HEADER_NAMES = CREDENTIAL_HEADER_NAMES; exports.isCredentialHeaderName = isCredentialHeaderName; exports.redactRecord = redactRecord; exports.SECRET_RESPONSE_FIELDS = SECRET_RESPONSE_FIELDS; exports.PERSONAL_RESPONSE_FIELDS = PERSONAL_RESPONSE_FIELDS; exports.CONFIDENTIAL_RESPONSE_FIELDS = CONFIDENTIAL_RESPONSE_FIELDS; exports.isRedactedFieldName = isRedactedFieldName; exports.redactResponseBody = redactResponseBody; exports.AutotaskError = AutotaskError; exports.AutotaskConfigError = AutotaskConfigError; exports.AutotaskNetworkError = AutotaskNetworkError; exports.AutotaskTimeoutError = AutotaskTimeoutError; exports.AutotaskAbortError = AutotaskAbortError; exports.ResponseRejectedError = ResponseRejectedError; exports.BadRequestError = BadRequestError; exports.UnauthorizedError = UnauthorizedError; exports.ForbiddenError = ForbiddenError; exports.NotFoundError = NotFoundError; exports.ConflictError = ConflictError; exports.UnprocessableEntityError = UnprocessableEntityError; exports.RateLimitError = RateLimitError; exports.ServerError = ServerError; exports.UnexpectedContentTypeError = UnexpectedContentTypeError; exports.EmptyResponseError = EmptyResponseError; exports.CircuitBreakerError = CircuitBreakerError; exports.HostPolicyDeniedError = HostPolicyDeniedError; exports.ResolutionError = ResolutionError; exports.PaginationLimitError = PaginationLimitError; exports.QueryTooLongError = QueryTooLongError; exports.parseVendorErrors = parseVendorErrors; exports.isDeterministicVendor500 = isDeterministicVendor500; exports.formatVendorDetail = formatVendorDetail; exports.CREDENTIAL_SHAPE_POINTER = CREDENTIAL_SHAPE_POINTER; exports.mergeDetails = mergeDetails; exports.errorFromStatus = errorFromStatus; exports.StaleObjectError = StaleObjectError; exports.ConfirmationRequiredError = ConfirmationRequiredError; exports.DeleteBoundaryError = DeleteBoundaryError; exports.MarkerUnsafeIdError = MarkerUnsafeIdError; exports.RecoveryTruncatedError = RecoveryTruncatedError; exports.isAutotaskError = isAutotaskError; exports.hasSurroundingQuotes = hasSurroundingQuotes; exports.credentialShapeProblem = credentialShapeProblem; exports.CREDENTIAL_ENV_LOAD_ACTION = CREDENTIAL_ENV_LOAD_ACTION; exports.MIN_PREFIX_SUMMARY_LENGTH = MIN_PREFIX_SUMMARY_LENGTH; exports.credentialValueSummary = credentialValueSummary; exports.FIELD_CACHE_KINDS = FIELD_CACHE_KINDS; exports.DEFAULT_CIRCUIT_BREAKER_WINDOW_MS = DEFAULT_CIRCUIT_BREAKER_WINDOW_MS; exports.DEFAULT_CIRCUIT_BREAKER_FAILURE_THRESHOLD = DEFAULT_CIRCUIT_BREAKER_FAILURE_THRESHOLD; exports.DEFAULT_CIRCUIT_BREAKER_OPEN_TIMEOUT_MS = DEFAULT_CIRCUIT_BREAKER_OPEN_TIMEOUT_MS; exports.DEFAULT_CIRCUIT_BREAKER_SUCCESSES_TO_CLOSE = DEFAULT_CIRCUIT_BREAKER_SUCCESSES_TO_CLOSE; exports.DEFAULT_CIRCUIT_BREAKER_MAX_ENTRIES = DEFAULT_CIRCUIT_BREAKER_MAX_ENTRIES; exports.InMemoryCircuitBreakerStore = InMemoryCircuitBreakerStore; exports.defaultCircuitBreakerStore = defaultCircuitBreakerStore; exports.resetDefaultCircuitBreakerStore = resetDefaultCircuitBreakerStore; exports.buildBreakerKey = buildBreakerKey; exports.isBreakerFailure = isBreakerFailure; exports.DEFAULT_COOLDOWN_MAX_MS = DEFAULT_COOLDOWN_MAX_MS; exports.DEFAULT_COOLDOWN_DEFAULT_MS = DEFAULT_COOLDOWN_DEFAULT_MS; exports.DEFAULT_COOLDOWN_MAX_ENTRIES = DEFAULT_COOLDOWN_MAX_ENTRIES; exports.InMemoryCooldownStore = InMemoryCooldownStore; exports.defaultCooldownStore = defaultCooldownStore; exports.resetDefaultCooldownStore = resetDefaultCooldownStore; exports.buildTenantKey = buildTenantKey; exports.cooldownDurationMs = cooldownDurationMs; exports.decideHostPolicy = decideHostPolicy; exports.ZONE_CATALOG = ZONE_CATALOG; exports.ZONES = ZONES; exports.DEFAULT_ZONE = DEFAULT_ZONE; exports.AGENT_PROFILE = AGENT_PROFILE; exports.DEFAULT_PAGE_SIZE = DEFAULT_PAGE_SIZE; exports.MAX_PAGE_SIZE = MAX_PAGE_SIZE; exports.DEFAULT_TIMEOUT_MS = DEFAULT_TIMEOUT_MS; exports.DEFAULT_MAX_RETRIES = DEFAULT_MAX_RETRIES; exports.DEFAULT_MAX_CONCURRENT = DEFAULT_MAX_CONCURRENT; exports.DEFAULT_MAX_RESPONSE_BYTES = DEFAULT_MAX_RESPONSE_BYTES; exports.DEFAULT_MAX_SCAN_RECORDS = DEFAULT_MAX_SCAN_RECORDS; exports.DEFAULT_MAX_SCAN_PAGES = DEFAULT_MAX_SCAN_PAGES; exports.zoneUrl = zoneUrl; exports.resolveBaseUrl = resolveBaseUrl; exports.resolveConfig = resolveConfig; exports.isRecord = isRecord2; exports.assertRecord = assertRecord; exports.deepMergeParams = deepMergeParams; exports.parseIdentifier = parseIdentifier; exports.flattenUdfs = flattenUdfs; exports.newCorrelationId = newCorrelationId; exports.redactAuditBody = redactAuditBody; exports.camelKey = camelKey; exports.RELATIONSHIP_ZONE = RELATIONSHIP_ZONE; exports.RELATIONSHIP_MAP = RELATIONSHIP_MAP; exports.BLIND_SURFACE_STAMPS = BLIND_SURFACE_STAMPS; exports.DELETE_BOUNDARY_NOTES = DELETE_BOUNDARY_NOTES; exports.MARKER_FIELDS = MARKER_FIELDS; exports.RESPONSE_DRIFT_MARKERS = RESPONSE_DRIFT_MARKERS; exports.EMPTY_REASON_STAMPS = EMPTY_REASON_STAMPS; exports.POINTER_NOTES = POINTER_NOTES; exports.BLIND_SURFACE_INVENTORY = BLIND_SURFACE_INVENTORY; exports.REACHABILITY_PROBE_DEFAULTS = REACHABILITY_PROBE_DEFAULTS; exports.CREATE_GUIDANCE = CREATE_GUIDANCE; exports.MAX_PAGES = MAX_PAGES; exports.clampPageSize = clampPageSize; exports.totalPagesFor = totalPagesFor; exports.paginate = paginate; exports.paginateItems = paginateItems; exports.collectAll = collectAll; exports.toArray = toArray;
+//# sourceMappingURL=chunk-IV2Z3JLR.cjs.map