sf-plugin-cms 0.3.1 → 0.5.0

package/lib/services/web-fragment.js

@@ -0,0 +1,245 @@
+import { isDeepStrictEqual } from 'node:util';
+const WEB_FRAGMENT_TYPE = 'sfdc_cms__webFragment';
+const DATA_GRAPH_PROVIDER = 'sfdc_cms__dataGraphDataProvider';
+const BODY_KEYS = [
+    'lightning:backgroundImage',
+    'lightning:brandSource',
+    'lightning:dataProviders',
+    'lightning:expressions',
+    'sfdc_cms:block',
+    'sfdc_cms:title',
+    'sfdc_cms:variants',
+];
+const BACKGROUND_IMAGE = { position: 'center center', repeat: 'no-repeat', size: 'cover' };
+function record(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function exactKeys(value, expected, label) {
+    if (Object.keys(value).toSorted().join('\0') !== [...expected].toSorted().join('\0')) {
+        throw new TypeError(`${label} must contain exactly ${expected.join(', ')}`);
+    }
+}
+function nonempty(value, label) {
+    if (typeof value !== 'string' || value.trim().length === 0) {
+        throw new TypeError(`${label} must be a nonempty string`);
+    }
+}
+function identifier(value, label) {
+    nonempty(value, label);
+    if (!/^[A-Za-z][A-Za-z\d_]*$/u.test(value)) {
+        throw new TypeError(`${label} must be an exact developer/API name`);
+    }
+}
+function dataSpace(value, label) {
+    nonempty(value, label);
+    if (!/^[A-Za-z][A-Za-z\d_]*$/u.test(value)) {
+        throw new TypeError(`${label} must be an exact data-space developer name`);
+    }
+}
+function assertBlock(value) {
+    if (!record(value))
+        throw new TypeError('Web fragment sfdc_cms:block must be an object');
+    if (value.definition !== 'sfdc_cms/rootContentBlock' || value.type !== 'block') {
+        throw new TypeError('Web fragment root block definition/type is unsupported');
+    }
+    nonempty(value.id, 'Web fragment root block id');
+    if (!Array.isArray(value.children))
+        throw new TypeError('Web fragment root children must be an array');
+}
+function provider(value, label) {
+    if (!record(value))
+        throw new TypeError(`${label} must be an object`);
+    exactKeys(value, ['attributes', 'definition', 'sfdcExpressionKey'], label);
+    if (value.definition !== DATA_GRAPH_PROVIDER || value.sfdcExpressionKey !== '$dataGraph') {
+        throw new TypeError(`${label} must use the exact Data Graph provider definition`);
+    }
+    if (!record(value.attributes))
+        throw new TypeError(`${label}.attributes must be an object`);
+    exactKeys(value.attributes, ['dataGraphApiName', 'dataspace'], `${label}.attributes`);
+    identifier(value.attributes.dataGraphApiName, `${label}.attributes.dataGraphApiName`);
+    dataSpace(value.attributes.dataspace, `${label}.attributes.dataspace`);
+    return {
+        developerName: value.attributes.dataGraphApiName,
+        dataSpace: value.attributes.dataspace,
+    };
+}
+/**
+ * Validate the evidenced landing-page content-block shape.
+ * @param {WorkspaceImportItem} item - Integrity-verified web-fragment item.
+ * @returns {{developerName: string, dataSpace: string}[]} Exact named Data Graph prerequisites.
+ */
+export function assertWebFragmentItem(item) {
+    if (item.contentType !== WEB_FRAGMENT_TYPE) {
+        throw new TypeError(`Web fragment profile requires exact content type ${WEB_FRAGMENT_TYPE}`);
+    }
+    identifier(item.apiName, 'Web fragment apiName');
+    nonempty(item.title, 'Web fragment title');
+    exactKeys(item.contentBody, BODY_KEYS, 'Web fragment contentBody');
+    if (item.contentBody['sfdc_cms:title'] !== item.title) {
+        throw new TypeError('Web fragment body title must match the top-level title');
+    }
+    if (!isDeepStrictEqual(item.contentBody['lightning:brandSource'], {
+        defaultBrandOption: 'sfdcBrand',
+    })) {
+        throw new TypeError('Web fragment brand source must match the evidenced Salesforce-brand profile');
+    }
+    if (!isDeepStrictEqual(item.contentBody['lightning:backgroundImage'], BACKGROUND_IMAGE)) {
+        throw new TypeError('Web fragment background image must match the evidenced profile');
+    }
+    if (!Array.isArray(item.contentBody['lightning:expressions'])) {
+        throw new TypeError('Web fragment lightning:expressions must be an array');
+    }
+    if (!Array.isArray(item.contentBody['sfdc_cms:variants'])) {
+        throw new TypeError('Web fragment sfdc_cms:variants must be an array');
+    }
+    assertBlock(item.contentBody['sfdc_cms:block']);
+    const providers = item.contentBody['lightning:dataProviders'];
+    if (!Array.isArray(providers) || providers.length === 0) {
+        throw new TypeError('Web fragment requires at least one exact named Data Graph provider');
+    }
+    const prerequisites = providers.map((value, index) => provider(value, `Data Graph provider ${index}`));
+    const identities = new Set(prerequisites.map(({ developerName, dataSpace: space }) => `${developerName}\0${space}`));
+    if (identities.size !== prerequisites.length) {
+        throw new TypeError('Web fragment Data Graph providers must be unique');
+    }
+    return prerequisites;
+}
+function mappingRows(value) {
+    if (!Array.isArray(value) || value.length === 0 || value.some((row) => !record(row))) {
+        throw new TypeError('Web fragment mappings must be a nonempty array of objects');
+    }
+    return value;
+}
+/**
+ * Plan one or many exact type-qualified web-fragment creates.
+ * @param {LoadedWorkspaceExport} source - Integrity-verified workspace package.
+ * @param {unknown} input - Explicit source, target, and Data Graph map rows.
+ * @returns {PlannedWebFragmentCopies} Selected creates and exact prerequisite evidence.
+ */
+export function planWebFragmentCopies(source, input) {
+    if (!source.integrity.verified)
+        throw new TypeError('Source integrity must be verified first');
+    const sourceKeys = new Set(source.items.map((item) => item.contentKey));
+    const sourceNames = new Set(source.items.flatMap((item) => (item.apiName === undefined ? [] : [item.apiName])));
+    const targetKeys = new Set();
+    const targetNames = new Set();
+    const selected = new Set();
+    const items = [];
+    const dataGraphs = [];
+    for (const [index, row] of mappingRows(input).entries()) {
+        exactKeys(row, ['source', 'target', 'dataGraphs'], `Web fragment mapping ${index}`);
+        if (!record(row.source))
+            throw new TypeError(`Web fragment mapping ${index}.source must be an object`);
+        exactKeys(row.source, ['family', 'type', 'apiName'], `Web fragment mapping ${index}.source`);
+        if (row.source.family !== 'cms' || row.source.type !== 'webFragment') {
+            throw new TypeError(`Web fragment mapping ${index}.source must select cms/webFragment`);
+        }
+        identifier(row.source.apiName, `Web fragment mapping ${index}.source.apiName`);
+        const sourceApiName = row.source.apiName;
+        if (selected.has(sourceApiName))
+            throw new TypeError(`Duplicate web fragment selection: ${sourceApiName}`);
+        const matches = source.items.filter((item) => item.contentType === WEB_FRAGMENT_TYPE && item.apiName === sourceApiName);
+        if (matches.length !== 1) {
+            throw new TypeError(`Typed source API name must match exactly one web fragment: ${sourceApiName}`);
+        }
+        const item = matches[0];
+        const sourcePrerequisites = assertWebFragmentItem(item);
+        if (!record(row.target))
+            throw new TypeError(`Web fragment mapping ${index}.target must be an object`);
+        exactKeys(row.target, ['contentKey', 'apiName'], `Web fragment mapping ${index}.target`);
+        identifier(row.target.contentKey, `Web fragment mapping ${index}.target.contentKey`);
+        identifier(row.target.apiName, `Web fragment mapping ${index}.target.apiName`);
+        const contentKey = row.target.contentKey;
+        const apiName = row.target.apiName;
+        if (sourceKeys.has(contentKey) || targetKeys.has(contentKey)) {
+            throw new TypeError('Target web fragment content keys must be fresh and unique');
+        }
+        if (sourceNames.has(apiName) || targetNames.has(apiName)) {
+            throw new TypeError('Target web fragment API names must be fresh and unique');
+        }
+        if (!Array.isArray(row.dataGraphs) || row.dataGraphs.length !== sourcePrerequisites.length) {
+            throw new TypeError('Each source Data Graph prerequisite requires exactly one mapping row');
+        }
+        const mapped = new Map();
+        for (const [graphIndex, raw] of row.dataGraphs.entries()) {
+            if (!record(raw))
+                throw new TypeError(`Web fragment mapping ${index}.dataGraphs[${graphIndex}] must be an object`);
+            exactKeys(raw, ['sourceDeveloperName', 'sourceDataSpace', 'targetDeveloperName', 'targetDataSpace'], `Web fragment mapping ${index}.dataGraphs[${graphIndex}]`);
+            identifier(raw.sourceDeveloperName, 'sourceDeveloperName');
+            dataSpace(raw.sourceDataSpace, 'sourceDataSpace');
+            identifier(raw.targetDeveloperName, 'targetDeveloperName');
+            dataSpace(raw.targetDataSpace, 'targetDataSpace');
+            const key = `${raw.sourceDeveloperName}\0${raw.sourceDataSpace}`;
+            if (mapped.has(key))
+                throw new TypeError('Duplicate Data Graph source mapping');
+            mapped.set(key, {
+                sourceDeveloperName: raw.sourceDeveloperName,
+                sourceDataSpace: raw.sourceDataSpace,
+                targetDeveloperName: raw.targetDeveloperName,
+                targetDataSpace: raw.targetDataSpace,
+                resolution: raw.sourceDeveloperName === raw.targetDeveloperName &&
+                    raw.sourceDataSpace === raw.targetDataSpace
+                    ? 'preserved'
+                    : 'explicit-map',
+                validationStatus: 'pending',
+            });
+        }
+        for (const prerequisite of sourcePrerequisites) {
+            if (!mapped.has(`${prerequisite.developerName}\0${prerequisite.dataSpace}`)) {
+                throw new TypeError(`Missing exact Data Graph mapping for ${prerequisite.developerName}/${prerequisite.dataSpace}`);
+            }
+        }
+        const providers = item.contentBody['lightning:dataProviders'].map((value) => {
+            const identity = provider(value, 'Data Graph provider');
+            const target = mapped.get(`${identity.developerName}\0${identity.dataSpace}`);
+            return {
+                ...value,
+                attributes: {
+                    dataGraphApiName: target.targetDeveloperName,
+                    dataspace: target.targetDataSpace,
+                },
+            };
+        });
+        selected.add(sourceApiName);
+        targetKeys.add(contentKey);
+        targetNames.add(apiName);
+        dataGraphs.push(...mapped.values());
+        items.push({
+            ...item,
+            apiName,
+            contentKey,
+            contentBody: { ...item.contentBody, 'lightning:dataProviders': providers },
+        });
+    }
+    return {
+        items: items.toSorted((left, right) => left.apiName.localeCompare(right.apiName)),
+        targetContentKeys: [...targetKeys].toSorted(),
+        dataGraphs: dataGraphs.toSorted((left, right) => `${left.targetDeveloperName}\0${left.targetDataSpace}`.localeCompare(`${right.targetDeveloperName}\0${right.targetDataSpace}`)),
+    };
+}
+function soqlString(value) {
+    return `'${value.replaceAll('\\', '\\\\').replaceAll("'", String.raw `\'`)}'`;
+}
+/**
+ * Prove each exact target Data Graph developer-name/data-space pair exists uniquely.
+ * @param {QueryConnection} connection - Destination org query transport.
+ * @param {readonly WebFragmentDataGraphPrerequisite[]} prerequisites - Exact target prerequisites.
+ * @returns {Promise<void>} Fulfilled only when every prerequisite resolves exactly once.
+ */
+export async function validateDataGraphPrerequisites(connection, prerequisites) {
+    if (connection.query === undefined) {
+        throw new TypeError('Destination Data Graph prerequisites cannot be queried');
+    }
+    const unique = new Map(prerequisites.map((value) => [`${value.targetDeveloperName}\0${value.targetDataSpace}`, value]));
+    for (const prerequisite of unique.values()) {
+        const result = await connection.query(`SELECT DeveloperName, DataSpaceDevName FROM DataGraph WHERE DeveloperName = ${soqlString(prerequisite.targetDeveloperName)} AND DataSpaceDevName = ${soqlString(prerequisite.targetDataSpace)}`);
+        const matches = result.records.filter((record) => record.DeveloperName === prerequisite.targetDeveloperName &&
+            record.DataSpaceDevName === prerequisite.targetDataSpace);
+        if (result.totalSize !== 1 || result.records.length !== 1 || matches.length !== 1) {
+            prerequisite.validationStatus = 'failed';
+            throw new TypeError(`Data Graph prerequisite must resolve exactly once: ${prerequisite.targetDeveloperName}/${prerequisite.targetDataSpace}`);
+        }
+        prerequisite.validationStatus = 'passed';
+    }
+}
+//# sourceMappingURL=web-fragment.js.map

package/lib/services/web-fragment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-fragment.js","sourceRoot":"","sources":["../../src/services/web-fragment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAI9C,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAClD,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AAC9D,MAAM,SAAS,GAAG;IAChB,2BAA2B;IAC3B,uBAAuB;IACvB,yBAAyB;IACzB,uBAAuB;IACvB,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;CACX,CAAC;AACX,MAAM,gBAAgB,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAkB3F,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB,EAAE,QAA2B,EAAE,KAAa;IAC9E,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,yBAAyB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACvB,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACvB,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACzF,IAAI,KAAK,CAAC,UAAU,KAAK,2BAA2B,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC/E,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;IAChF,CAAC;IACD,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,4BAA4B,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACtE,SAAS,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,mBAAmB,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,UAAU,KAAK,mBAAmB,IAAI,KAAK,CAAC,iBAAiB,KAAK,YAAY,EAAE,CAAC;QACzF,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,oDAAoD,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;IAC5F,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,kBAAkB,EAAE,WAAW,CAAC,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;IACtF,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,EAAE,GAAG,KAAK,8BAA8B,CAAC,CAAC;IACtF,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,KAAK,uBAAuB,CAAC,CAAC;IACvE,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,gBAAgB;QAChD,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS;KACtC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAyB;IAEzB,IAAI,IAAI,CAAC,WAAW,KAAK,iBAAiB,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,oDAAoD,iBAAiB,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACjD,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAC3C,SAAS,CAAC,IAAI,CAAC,WAAyB,EAAE,SAAS,EAAE,0BAA0B,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;IAChF,CAAC;IACD,IACE,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,EAAE;QAC5D,kBAAkB,EAAE,WAAW;KAChC,CAAC,EACF,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAC,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,CAAC;IACD,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CAAC,oEAAoE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACnD,QAAQ,CAAC,KAAK,EAAE,uBAAuB,KAAK,EAAE,CAAC,CAChD,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,aAAa,KAAK,KAAK,EAAE,CAAC,CACzF,CAAC;IACF,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC;QAC7C,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,KAAqB,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA6B,EAC7B,KAAc;IAEd,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CACnF,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,MAAM,UAAU,GAAuC,EAAE,CAAC;IAE1D,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,wBAAwB,KAAK,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YACrB,MAAM,IAAI,SAAS,CAAC,wBAAwB,KAAK,2BAA2B,CAAC,CAAC;QAChF,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,wBAAwB,KAAK,SAAS,CAAC,CAAC;QAC7F,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACrE,MAAM,IAAI,SAAS,CAAC,wBAAwB,KAAK,qCAAqC,CAAC,CAAC;QAC1F,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,wBAAwB,KAAK,iBAAiB,CAAC,CAAC;QAC/E,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QACzC,IAAI,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC;YAC7B,MAAM,IAAI,SAAS,CAAC,qCAAqC,aAAa,EAAE,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CACjC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,iBAAiB,IAAI,IAAI,CAAC,OAAO,KAAK,aAAa,CACnF,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,SAAS,CACjB,8DAA8D,aAAa,EAAE,CAC9E,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAExD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YACrB,MAAM,IAAI,SAAS,CAAC,wBAAwB,KAAK,2BAA2B,CAAC,CAAC;QAChF,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,wBAAwB,KAAK,SAAS,CAAC,CAAC;QACzF,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,wBAAwB,KAAK,oBAAoB,CAAC,CAAC;QACrF,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,wBAAwB,KAAK,iBAAiB,CAAC,CAAC;QAC/E,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;QACzC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QACnC,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;YAC3F,MAAM,IAAI,SAAS,CAAC,sEAAsE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4C,CAAC;QACnE,KAAK,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;gBACd,MAAM,IAAI,SAAS,CACjB,wBAAwB,KAAK,eAAe,UAAU,qBAAqB,CAC5E,CAAC;YACJ,SAAS,CACP,GAAG,EACH,CAAC,qBAAqB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,iBAAiB,CAAC,EACpF,wBAAwB,KAAK,eAAe,UAAU,GAAG,CAC1D,CAAC;YACF,UAAU,CAAC,GAAG,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;YAC3D,SAAS,CAAC,GAAG,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;YAClD,UAAU,CAAC,GAAG,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;YAC3D,SAAS,CAAC,GAAG,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,mBAAmB,KAAK,GAAG,CAAC,eAAe,EAAE,CAAC;YACjE,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;YAChF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;gBACd,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;gBAC5C,eAAe,EAAE,GAAG,CAAC,eAAe;gBACpC,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;gBAC5C,eAAe,EAAE,GAAG,CAAC,eAAe;gBACpC,UAAU,EACR,GAAG,CAAC,mBAAmB,KAAK,GAAG,CAAC,mBAAmB;oBACnD,GAAG,CAAC,eAAe,KAAK,GAAG,CAAC,eAAe;oBACzC,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,cAAc;gBACpB,gBAAgB,EAAE,SAAS;aAC5B,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,YAAY,IAAI,mBAAmB,EAAE,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,aAAa,KAAK,YAAY,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;gBAC5E,MAAM,IAAI,SAAS,CACjB,wCAAwC,YAAY,CAAC,aAAa,IAAI,YAAY,CAAC,SAAS,EAAE,CAC/F,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAI,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACzF,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAE,CAAC;YAC/E,OAAO;gBACL,GAAI,KAAoB;gBACxB,UAAU,EAAE;oBACV,gBAAgB,EAAE,MAAM,CAAC,mBAAmB;oBAC5C,SAAS,EAAE,MAAM,CAAC,eAAe;iBAClC;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC5B,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3B,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzB,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC;YACT,GAAG,IAAI;YACP,OAAO;YACP,UAAU;YACV,WAAW,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,yBAAyB,EAAE,SAAS,EAAE;SAC3E,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,OAAQ,CAAC,CAAC;QACnF,iBAAiB,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,QAAQ,EAAE;QAC7C,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC9C,GAAG,IAAI,CAAC,mBAAmB,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC,aAAa,CAClE,GAAG,KAAK,CAAC,mBAAmB,KAAK,KAAK,CAAC,eAAe,EAAE,CACzD,CACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAA,IAAI,CAAC,GAAG,CAAC;AAC/E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,UAA2B,EAC3B,aAA0D;IAE1D,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,mBAAmB,KAAK,KAAK,CAAC,eAAe,EAAE,EAAE,KAAK,CAAC,CAAC,CAChG,CAAC;IACF,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CACnC,+EAA+E,UAAU,CAAC,YAAY,CAAC,mBAAmB,CAAC,2BAA2B,UAAU,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,CACjM,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CACnC,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,aAAa,KAAK,YAAY,CAAC,mBAAmB;YACzD,MAAM,CAAC,gBAAgB,KAAK,YAAY,CAAC,eAAe,CAC3D,CAAC;QACF,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClF,YAAY,CAAC,gBAAgB,GAAG,QAAQ,CAAC;YACzC,MAAM,IAAI,SAAS,CACjB,sDAAsD,YAAY,CAAC,mBAAmB,IAAI,YAAY,CAAC,eAAe,EAAE,CACzH,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,gBAAgB,GAAG,QAAQ,CAAC;IAC3C,CAAC;AACH,CAAC"}

package/lib/transport/experimental-media.d.ts

@@ -0,0 +1,30 @@
+import type { FileHandle } from 'node:fs/promises';
+export declare const EXPERIMENTAL_MEDIA_POLICY: {
+    readonly approvedRedirectSuffix: "file.force.com";
+    readonly maxRedirects: 3;
+    readonly perImageBytes: number;
+    readonly totalBytes: number;
+};
+export type ExperimentalMediaDownload = {
+    readonly bytes: number;
+    readonly contentLength?: number;
+    readonly md5: string;
+    readonly mimeType: string;
+    readonly sha256: string;
+};
+type ExperimentalMediaFileHandle = Pick<FileHandle, 'close' | 'write'>;
+export type ExperimentalMediaDownloadOptions = {
+    readonly accessToken: string;
+    readonly expectedMd5: string;
+    readonly expectedMimeType: string;
+    readonly expectedSize: number;
+    readonly fetch?: typeof fetch;
+    readonly instanceUrl: string;
+    readonly maxBytes?: number;
+    readonly openFile?: (file: string) => Promise<ExperimentalMediaFileHandle>;
+    readonly outputFile: string;
+    readonly unlinkFile?: (file: string) => Promise<void>;
+};
+export declare function isApprovedSalesforceMediaUrl(value: string | URL): boolean;
+export declare function downloadExperimentalCmsMedia(source: URL, options: ExperimentalMediaDownloadOptions): Promise<ExperimentalMediaDownload>;
+export {};

package/lib/transport/experimental-media.js

@@ -0,0 +1,224 @@
+import { createHash } from 'node:crypto';
+import { domainToASCII } from 'node:url';
+import { open, unlink } from 'node:fs/promises';
+import { Readable } from 'node:stream';
+import { redactSecrets } from './redact-secrets.js';
+const MEDIA_SUFFIX = 'file.force.com';
+const REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);
+const IMAGE_SIGNATURES = new Map([
+    ['image/gif', [0x47, 0x49, 0x46, 0x38]],
+    ['image/jpeg', [255, 216, 255]],
+    ['image/png', [137, 80, 78, 71, 13, 10, 26, 10]],
+    ['image/webp', [0x52, 0x49, 0x46, 0x46]],
+]);
+const MIME_EXTENSIONS = {
+    'image/gif': ['gif'],
+    'image/jpeg': ['jpeg', 'jpg'],
+    'image/png': ['png'],
+    'image/webp': ['webp'],
+};
+export const EXPERIMENTAL_MEDIA_POLICY = {
+    approvedRedirectSuffix: MEDIA_SUFFIX,
+    maxRedirects: 3,
+    perImageBytes: 10 * 1024 * 1024,
+    totalBytes: 50 * 1024 * 1024,
+};
+function safeSecondaryDiagnostic(error) {
+    const message = redactSecrets(error instanceof Error ? error.message : String(error));
+    return message.slice(0, 256);
+}
+async function cleanupFailedDownload(handle, outputFile, primary, unlinkFile, closeAttempted) {
+    const secondary = [];
+    if (!closeAttempted) {
+        try {
+            await handle.close();
+        }
+        catch (error) {
+            secondary.push(`close: ${safeSecondaryDiagnostic(error)}`);
+        }
+    }
+    try {
+        await unlinkFile(outputFile);
+    }
+    catch (error) {
+        secondary.push(`unlink: ${safeSecondaryDiagnostic(error)}`);
+    }
+    if (primary instanceof Error && secondary.length > 0) {
+        Object.defineProperty(primary, 'cleanupDiagnostics', {
+            configurable: true,
+            enumerable: false,
+            value: secondary,
+        });
+    }
+    throw primary;
+}
+function normalizedHost(url) {
+    const host = domainToASCII(url.hostname.toLowerCase().replace(/\.$/u, ''));
+    if (host.length === 0)
+        throw new TypeError('Experimental media URL hostname is invalid');
+    return host;
+}
+function assertSafeHttps(url) {
+    if (url.protocol !== 'https:' || url.username !== '' || url.password !== '') {
+        throw new TypeError('Experimental media transport requires HTTPS without userinfo');
+    }
+    if (url.port !== '' && url.port !== '443') {
+        throw new TypeError('Experimental media transport permits only the default HTTPS port');
+    }
+    return normalizedHost(url);
+}
+export function isApprovedSalesforceMediaUrl(value) {
+    try {
+        const url = value instanceof URL ? value : new URL(value);
+        const host = assertSafeHttps(url);
+        return host.endsWith(`.${MEDIA_SUFFIX}`) && host.length > MEDIA_SUFFIX.length + 1;
+    }
+    catch {
+        return false;
+    }
+}
+function sameOrigin(left, right) {
+    return assertSafeHttps(left) === assertSafeHttps(right) && left.port === right.port;
+}
+function extension(fileName) {
+    const last = fileName.split('.').at(-1)?.toLowerCase();
+    if (last === undefined || last === fileName.toLowerCase())
+        return '';
+    return last;
+}
+function assertImageEvidence(bytes, mimeType, fileName) {
+    const allowed = MIME_EXTENSIONS[mimeType];
+    const signature = IMAGE_SIGNATURES.get(mimeType);
+    if (allowed === undefined || signature === undefined) {
+        throw new TypeError(`Experimental media MIME type is unsupported: ${mimeType}`);
+    }
+    const fileExtension = extension(fileName);
+    if (fileExtension.length > 0 && !allowed.includes(fileExtension)) {
+        throw new TypeError('Experimental media filename extension does not match MIME type');
+    }
+    if (!signature.every((byte, index) => bytes[index] === byte)) {
+        throw new TypeError('Experimental media signature does not match MIME type');
+    }
+    if (mimeType === 'image/webp' && bytes.subarray(8, 12).toString('ascii') !== 'WEBP') {
+        throw new TypeError('Experimental media WebP signature is invalid');
+    }
+}
+export async function downloadExperimentalCmsMedia(source, options) {
+    const instance = new URL(options.instanceUrl);
+    assertSafeHttps(instance);
+    if (!sameOrigin(source, instance)) {
+        throw new TypeError('Experimental media source must use the authenticated Salesforce instance');
+    }
+    if (!source.pathname.startsWith('/cms/media/')) {
+        throw new TypeError('Experimental media source path is unsupported');
+    }
+    const fetcher = options.fetch ?? fetch;
+    let current = source;
+    let response;
+    for (let redirects = 0; redirects <= EXPERIMENTAL_MEDIA_POLICY.maxRedirects; redirects += 1) {
+        const onInstance = sameOrigin(current, instance);
+        if (!onInstance && !isApprovedSalesforceMediaUrl(current)) {
+            throw new TypeError('Experimental media redirect target is outside the approved Salesforce class');
+        }
+        response = await fetcher(current, {
+            headers: {
+                accept: 'image/*,application/octet-stream;q=0.8',
+                authorization: `Bearer ${options.accessToken}`,
+            },
+            redirect: 'manual',
+        });
+        if (!REDIRECT_STATUSES.has(response.status))
+            break;
+        if (redirects === EXPERIMENTAL_MEDIA_POLICY.maxRedirects) {
+            throw new TypeError('Experimental media redirect count exceeded');
+        }
+        const location = response.headers.get('location');
+        if (location === null)
+            throw new TypeError('Experimental media redirect has no location');
+        const target = new URL(location, current);
+        assertSafeHttps(target);
+        if (!isApprovedSalesforceMediaUrl(target) && !sameOrigin(target, instance)) {
+            throw new TypeError('Experimental media redirect target is outside the approved Salesforce class');
+        }
+        current = target;
+    }
+    if (response === undefined || !response.ok || response.body === null) {
+        throw new TypeError(`Experimental media request failed with status ${response?.status ?? 0}`);
+    }
+    const responseType = response.headers.get('content-type')?.split(';', 1)[0].trim().toLowerCase();
+    if (responseType === undefined || responseType === 'text/html' || responseType.includes('json')) {
+        throw new TypeError('Experimental media response is not binary image content');
+    }
+    if (responseType !== options.expectedMimeType) {
+        throw new TypeError('Experimental media response MIME type changed');
+    }
+    const declaredLengthText = response.headers.get('content-length');
+    const declaredLength = declaredLengthText === null ? undefined : Number(declaredLengthText);
+    const configuredLimit = options.maxBytes ?? EXPERIMENTAL_MEDIA_POLICY.perImageBytes;
+    if (!Number.isSafeInteger(configuredLimit) || configuredLimit <= 0) {
+        throw new TypeError('Experimental media byte cap must be a positive safe integer');
+    }
+    const limit = Math.min(configuredLimit, EXPERIMENTAL_MEDIA_POLICY.perImageBytes);
+    if (declaredLength !== undefined &&
+        (!Number.isSafeInteger(declaredLength) || declaredLength < 0 || declaredLength > limit)) {
+        throw new TypeError('Experimental media Content-Length is invalid or exceeds the cap');
+    }
+    const fileName = source.searchParams.get('fileName');
+    if (fileName === null ||
+        fileName.length === 0 ||
+        fileName.includes('/') ||
+        fileName.includes('\\')) {
+        throw new TypeError('Experimental media filename is invalid');
+    }
+    const md5 = createHash('md5');
+    const sha256 = createHash('sha256');
+    const prefix = [];
+    let prefixLength = 0;
+    let bytes = 0;
+    const handle = await (options.openFile ?? (async (file) => open(file, 'wx')))(options.outputFile);
+    const unlinkFile = options.unlinkFile ?? unlink;
+    let closeAttempted = false;
+    try {
+        for await (const chunkValue of Readable.fromWeb(response.body)) {
+            const chunk = Buffer.isBuffer(chunkValue)
+                ? chunkValue
+                : Buffer.from(chunkValue);
+            if (chunk.length > limit - bytes) {
+                throw new TypeError('Experimental media response exceeds the byte cap');
+            }
+            bytes += chunk.length;
+            if (prefixLength < 12) {
+                const selected = chunk.subarray(0, 12 - prefixLength);
+                prefix.push(selected);
+                prefixLength += selected.length;
+            }
+            md5.update(chunk);
+            sha256.update(chunk);
+            await handle.write(chunk);
+        }
+        if (declaredLength !== undefined && bytes !== declaredLength) {
+            throw new TypeError('Experimental media byte count differs from Content-Length');
+        }
+        if (bytes !== options.expectedSize) {
+            throw new TypeError('Experimental media byte count differs from authoring metadata');
+        }
+        const actualMd5 = md5.digest('hex');
+        if (actualMd5 !== options.expectedMd5.toLowerCase()) {
+            throw new TypeError('Experimental media MD5 differs from the authoring URL');
+        }
+        assertImageEvidence(Buffer.concat(prefix), options.expectedMimeType, fileName);
+        closeAttempted = true;
+        await handle.close();
+        return {
+            bytes,
+            ...(declaredLength === undefined ? {} : { contentLength: declaredLength }),
+            md5: actualMd5,
+            mimeType: options.expectedMimeType,
+            sha256: sha256.digest('hex'),
+        };
+    }
+    catch (error) {
+        return cleanupFailedDownload(handle, options.outputFile, error, unlinkFile, closeAttempted);
+    }
+}
+//# sourceMappingURL=experimental-media.js.map

package/lib/transport/experimental-media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"experimental-media.js","sourceRoot":"","sources":["../../src/transport/experimental-media.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,YAAY,GAAG,gBAAgB,CAAC;AACtC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAC7D,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAA4B;IAC1D,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;CACzC,CAAC,CAAC;AACH,MAAM,eAAe,GAAgD;IACnE,WAAW,EAAE,CAAC,KAAK,CAAC;IACpB,YAAY,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;IAC7B,WAAW,EAAE,CAAC,KAAK,CAAC;IACpB,YAAY,EAAE,CAAC,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,sBAAsB,EAAE,YAAY;IACpC,YAAY,EAAE,CAAC;IACf,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC/B,UAAU,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;CACpB,CAAC;AAyBX,SAAS,uBAAuB,CAAC,KAAc;IAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtF,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,MAAmC,EACnC,UAAkB,EAClB,OAAgB,EAChB,UAA2C,EAC3C,cAAuB;IAEvB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,IAAI,CAAC,UAAU,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,SAAS,CAAC,IAAI,CAAC,WAAW,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,YAAY,KAAK,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,oBAAoB,EAAE;YACnD,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,KAAK;YACjB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,GAAQ;IAC9B,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACzF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,GAAQ;IAC/B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC5E,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1C,MAAM,IAAI,SAAS,CAAC,kEAAkE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAmB;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,YAAY,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAS,EAAE,KAAU;IACvC,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,eAAe,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC;AACtF,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IACvD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,QAAgB,EAAE,QAAgB;IAC5E,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,gDAAgD,QAAQ,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,QAAQ,KAAK,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC;QACpF,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAW,EACX,OAAyC;IAEzC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,0EAA0E,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACvC,IAAI,OAAO,GAAG,MAAM,CAAC;IACrB,IAAI,QAA8B,CAAC;IACnC,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,IAAI,yBAAyB,CAAC,YAAY,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;QAC5F,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CACjB,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE;YAChC,OAAO,EAAE;gBACP,MAAM,EAAE,wCAAwC;gBAChD,aAAa,EAAE,UAAU,OAAO,CAAC,WAAW,EAAE;aAC/C;YACD,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM;QACnD,IAAI,SAAS,KAAK,yBAAyB,CAAC,YAAY,EAAE,CAAC;YACzD,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1C,eAAe,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,SAAS,CACjB,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACrE,MAAM,IAAI,SAAS,CAAC,iDAAiD,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjG,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,WAAW,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,YAAY,KAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAClE,MAAM,cAAc,GAAG,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC5F,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,IAAI,yBAAyB,CAAC,aAAa,CAAC;IACpF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,eAAe,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,SAAS,CAAC,6DAA6D,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,yBAAyB,CAAC,aAAa,CAAC,CAAC;IACjF,IACE,cAAc,KAAK,SAAS;QAC5B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,IAAI,cAAc,GAAG,KAAK,CAAC,EACvF,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,IACE,QAAQ,KAAK,IAAI;QACjB,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtB,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EACvB,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClG,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IAChD,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,UAAU,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAa,CAAC,EAAE,CAAC;YACxE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACvC,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAwB,CAAC,CAAC;YAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,GAAG,KAAK,EAAE,CAAC;gBACjC,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;YAC1E,CAAC;YACD,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;gBACtB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,CAAC;gBACtD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtB,YAAY,IAAI,QAAQ,CAAC,MAAM,CAAC;YAClC,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,cAAc,KAAK,SAAS,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YAC7D,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,KAAK,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CAAC,+DAA+D,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,SAAS,KAAK,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;QAC/E,CAAC;QACD,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAC/E,cAAc,GAAG,IAAI,CAAC;QACtB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO;YACL,KAAK;YACL,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC;YAC1E,GAAG,EAAE,SAAS;YACd,QAAQ,EAAE,OAAO,CAAC,gBAAgB;YAClC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC"}

package/lib/transport/json-request.d.ts

@@ -16,10 +16,18 @@ export type JsonSuccess<T> = {
 };
 type RequestConnection = Pick<Connection, 'request'>;
 export declare class CmsRequestError extends Error {
+    readonly errorCode?: string;
+    readonly errorEntryCount: number;
     readonly operationKey: SelectedOperation['localKey'];
+    readonly responseMessage?: string;
     readonly status?: number;
-    constructor(operationKey: SelectedOperation['localKey'], message: string, status?: number);
+    constructor(operationKey: SelectedOperation['localKey'], message: string, status?: number, evidence?: ErrorEvidence | string);
 }
+type ErrorEvidence = {
+    errorCode?: string;
+    errorEntryCount?: number;
+    responseMessage?: string;
+};
 export declare function buildOperationUrl(operation: SelectedOperation, values?: JsonRequestValues): string;
 export declare function requestJson<T>(connection: RequestConnection, operation: SelectedOperation, values?: JsonRequestValues, options?: JsonRequestOptions): Promise<JsonSuccess<T>>;
 export declare function getSelectedOperation(operationKey: SelectedOperation['localKey']): SelectedOperation;

package/lib/transport/json-request.js

@@ -2,12 +2,22 @@ import { SELECTED_OPERATIONS } from '../generated/operations.js';
 import { redactSecrets } from './redact-secrets.js';
 const DEFAULT_TIMEOUT_MS = 30_000;
 export class CmsRequestError extends Error {
+    errorCode;
+    errorEntryCount;
     operationKey;
+    responseMessage;
     status;
-    constructor(operationKey, message, status) {
-        super(message);
+    constructor(operationKey, message, status, evidence = {}) {
+        const normalizedEvidence = typeof evidence === 'string' ? { errorCode: evidence } : evidence;
+        super(redactSecrets(message));
         this.name = 'CmsRequestError';
+        this.errorCode = normalizedEvidence.errorCode;
+        this.errorEntryCount = normalizedEvidence.errorEntryCount ?? 0;
         this.operationKey = operationKey;
+        this.responseMessage =
+            normalizedEvidence.responseMessage === undefined
+                ? undefined
+                : redactSecrets(normalizedEvidence.responseMessage);
         this.status = status;
     }
 }
@@ -28,6 +38,21 @@ function errorStatus(error) {
         return 404;
     return undefined;
 }
+function errorEvidence(error) {
+    if (!isRecord(error))
+        return { errorEntryCount: 0 };
+    const data = error.data;
+    const entries = Array.isArray(data) ? data : [data];
+    if (entries.length !== 1 || !isRecord(entries[0])) {
+        return { errorEntryCount: Array.isArray(data) ? data.length : 0 };
+    }
+    const entry = entries[0];
+    return {
+        ...(typeof entry.errorCode === 'string' ? { errorCode: entry.errorCode } : {}),
+        errorEntryCount: 1,
+        ...(typeof entry.message === 'string' ? { responseMessage: redactSecrets(entry.message) } : {}),
+    };
+}
 function safeErrorMessage(error) {
     const message = error instanceof Error ? error.message : String(error);
     return redactSecrets(message || 'CMS request failed');
@@ -119,8 +144,10 @@ export async function requestJson(connection, operation, values = {}, options =
         return { data, operationKey: operation.localKey, status: successStatus(operation) };
     }
     catch (error) {
+        if (error instanceof CmsRequestError)
+            throw error;
         const message = options.signal?.aborted ? 'CMS request cancelled' : safeErrorMessage(error);
-        throw new CmsRequestError(operation.localKey, message, errorStatus(error));
+        throw new CmsRequestError(operation.localKey, message, errorStatus(error), errorEvidence(error));
     }
     finally {
         options.signal?.removeEventListener('abort', cancel);