stitchkit 0.100.3 → 0.101.1

package/dist/entrypoints/testing.js

@@ -1,5 +1,5 @@
 import"../index-hby4qhax.js";
-import"../index-qjeggp8w.js";
+import"../index-h43cepag.js";
 import {
   joinRoutePath
 } from "../index-m38ej7e5.js";
@@ -7,7 +7,7 @@ import"../index-r5c4fedv.js";
 import {
   createClient2,
   createClients2
-} from "../index-aaj97r4y.js";
+} from "../index-65jwqhcf.js";
 import"../index-n53mswt3.js";
 import"../index-q0th8q0z.js";
 import {

package/dist/entrypoints/tools.js

@@ -57,9 +57,10 @@ import {
   defineContract2
 } from "../index-ck71tbcf.js";
 import"../index-1bx1xv1k.js";
+import"../index-sznqf8fx.js";
 import {
   redact2
-} from "../index-kzz6rq0w.js";
+} from "../index-e6c2spsd.js";
 import {
   AsyncOperationCancelResultSchema2,
   createAsyncOperationSnapshotSchema2,

package/dist/entrypoints/tracking.js

@@ -1,7 +1,7 @@
 import"../index-hby4qhax.js";
 import {
   ApiError2
-} from "../index-qjeggp8w.js";
+} from "../index-h43cepag.js";
 import"../index-m38ej7e5.js";
 import {
   defineContract2

package/dist/files/chunk-spool.d.ts

@@ -0,0 +1,66 @@
+/**
+ * The server half of a chunked upload (`uploadInChunks` is the client half):
+ * parts land on disk under the upload's owner, each with a receipt, and come
+ * back in order once every part is in.
+ *
+ * - An upload is keyed by `owner` (whoever the application says sends it —
+ *   a user, a user and a device) and the client-minted `uploadId`; the same id
+ *   from another owner is another upload.
+ * - `open` is idempotent: the same declaration again is `'reopened'`, a
+ *   different one is `UPLOAD_CONFLICT`.
+ * - A part's receipt is its size and sha256. The same bytes again are
+ *   `'repeated'`; other bytes at the same index are `UPLOAD_CONFLICT`. The
+ *   first writer wins across processes: a part's data file is named by its hash
+ *   and its receipt is published by an exclusive link, so a loser can neither
+ *   replace the receipt nor the bytes it names.
+ * - Every part but the last is exactly `chunkBytes` long.
+ * - `sweep` removes an upload nothing has touched for `staleAfterMs`.
+ *
+ * Refusals are `AppError`s with a 4xx status, so a handler that does not catch
+ * them answers the client with a typed envelope the driver does not repeat.
+ */
+import type { ZodType } from 'zod';
+export type ChunkSpoolErrorCode = 'UPLOAD_INVALID' | 'UPLOAD_TOO_LARGE' | 'UPLOAD_NOT_FOUND' | 'UPLOAD_CONFLICT' | 'UPLOAD_CHUNK_OUT_OF_RANGE' | 'UPLOAD_CHUNK_SIZE' | 'UPLOAD_INCOMPLETE';
+export interface ChunkSpoolConfig<TMeta> {
+    /** Where uploads in progress live; one directory per upload. */
+    readonly directory: string;
+    /** Bytes per part, the same number the client driver uses. */
+    readonly chunkBytes: number;
+    readonly maxFileBytes: number;
+    /** What `open` stores beside the upload — file name, type, the app's fields. */
+    readonly meta: ZodType<TMeta>;
+    /** Default 24 hours. */
+    readonly staleAfterMs?: number;
+}
+export interface ChunkSpoolKey {
+    readonly owner: string;
+    readonly uploadId: string;
+}
+export interface ChunkSpoolOpen<TMeta> extends ChunkSpoolKey {
+    readonly totalBytes: number;
+    readonly chunkCount: number;
+    readonly meta: TMeta;
+}
+export interface ChunkSpoolPart extends ChunkSpoolKey {
+    readonly index: number;
+    readonly bytes: Blob;
+}
+export interface ChunkSpoolAssembly<TMeta> {
+    readonly meta: TMeta;
+    readonly totalBytes: number;
+    /** The parts on disk, in order; valid until `discard`. */
+    readonly chunkPaths: readonly string[];
+    /** The whole file, part after part. */
+    stream(): ReadableStream<Uint8Array>;
+}
+export interface ChunkSpool<TMeta> {
+    open(upload: ChunkSpoolOpen<TMeta>): Promise<'opened' | 'reopened'>;
+    put(part: ChunkSpoolPart): Promise<'stored' | 'repeated'>;
+    /** Every part, checked against its receipt; `UPLOAD_INCOMPLETE` names the first missing. */
+    assemble(key: ChunkSpoolKey): Promise<ChunkSpoolAssembly<TMeta>>;
+    discard(key: ChunkSpoolKey): Promise<void>;
+    /** Remove uploads untouched for `staleAfterMs`; resolves with how many. */
+    sweep(): Promise<number>;
+}
+export declare function createChunkSpool<TMeta>(config: ChunkSpoolConfig<TMeta>): ChunkSpool<TMeta>;
+//# sourceMappingURL=chunk-spool.d.ts.map

package/dist/files/chunk-spool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-spool.d.ts","sourceRoot":"","sources":["../../src/files/chunk-spool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAgBH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAInC,MAAM,MAAM,mBAAmB,GAC3B,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,iBAAiB,GACjB,2BAA2B,GAC3B,mBAAmB,GACnB,mBAAmB,CAAC;AAoBxB,MAAM,WAAW,gBAAgB,CAAC,KAAK;IACrC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,wBAAwB;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc,CAAC,KAAK,CAAE,SAAQ,aAAa;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,cAAe,SAAQ,aAAa;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB,CAAC,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,uCAAuC;IACvC,MAAM,IAAI,cAAc,CAAC,UAAU,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,UAAU,CAAC,KAAK;IAC/B,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,CAAC;IACpE,GAAG,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,CAAC;IAC1D,4FAA4F;IAC5F,QAAQ,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,2EAA2E;IAC3E,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1B;AAkED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CA4J1F"}

package/dist/{index-aaj97r4y.js → index-65jwqhcf.js}

@@ -2,10 +2,12 @@ import {
   RequestCancellationError,
   createRequestCancellation,
   responseTraceId,
+  uploadProgressRoute,
+  withUploadProgress,
   ApiError2,
   refuseLocally,
   parseApiErrorBody
-} from "./index-qjeggp8w.js";
+} from "./index-h43cepag.js";
 import {
   parseTrailingWildcard
 } from "./index-m38ej7e5.js";
@@ -541,7 +543,8 @@ function createFetchExecutor(endpoint, prefix, config, contractConfig) {
     try {
       return await cancellation.run(async (signal) => {
         const body = endpoint.multipart ? buildMultipartForm(endpoint.multipart, plan.remainingArgs) : hasBody ? JSON.stringify(plan.remainingArgs) : undefined;
-        const res = await executeFetch(url, {
+        const deliver = options?.onUploadProgress ? withUploadProgress(executeFetch, options.onUploadProgress, uploadProgressRoute(config.fetch !== undefined)) : executeFetch;
+        const res = await deliver(url, {
           method: endpoint.method,
           headers,
           credentials: config.credentials,
@@ -660,7 +663,7 @@ function createEndpointMethod(endpoint, execute, contractConfig) {
     return Object.assign(method, {
       withOptions: (...args) => {
         refuseExtraWithOptionsArguments(endpoint, args.length, 2);
-        return settle(execute, readClientRequestArgs(args[0]), readClientRequestOptions(args[1]));
+        return settle(execute, readClientRequestArgs(args[0]), readClientRequestOptions(endpoint, args[1]));
       }
     });
   }
@@ -668,7 +671,7 @@ function createEndpointMethod(endpoint, execute, contractConfig) {
   return Object.assign(method, {
     withOptions: (...args) => {
       refuseExtraWithOptionsArguments(endpoint, args.length, 1);
-      return settle(execute, {}, readClientRequestOptions(args[0]));
+      return settle(execute, {}, readClientRequestOptions(endpoint, args[0]));
     }
   });
 }
@@ -694,16 +697,30 @@ function readClientRequestArgs(requestArgs) {
   }
   return requestArgs ?? {};
 }
-function readClientRequestOptions(value) {
+function readClientRequestOptions(endpoint, value) {
   if (!isRecord(value))
     throw new TypeError("Client request options must be an object");
-  const signal = value.signal;
-  if (signal === undefined)
-    return {};
-  if (!isAbortSignal(signal)) {
+  const { signal, onUploadProgress } = value;
+  if (signal !== undefined && !isAbortSignal(signal)) {
     throw new TypeError("Client request signal must be an AbortSignal");
   }
-  return { signal };
+  if (onUploadProgress === undefined)
+    return signal === undefined ? {} : { signal };
+  if (typeof onUploadProgress !== "function") {
+    throw new TypeError("Client request onUploadProgress must be a function");
+  }
+  if (!endpointSendsBody(endpoint)) {
+    throw new TypeError(`${endpoint.method} ${endpoint.path}: onUploadProgress needs a request body — ` + "a GET, HEAD or DELETE sends none, and a streaming endpoint keeps its response live, " + "which the XMLHttpRequest route would buffer.");
+  }
+  return {
+    ...signal !== undefined && { signal },
+    onUploadProgress: (progress) => {
+      onUploadProgress(progress);
+    }
+  };
+}
+function endpointSendsBody(endpoint) {
+  return endpoint.method !== "GET" && endpoint.method !== "HEAD" && endpoint.method !== "DELETE" && !(("stream" in endpoint) && endpoint.stream);
 }
 function isAbortSignal(value) {
   return typeof value === "object" && value !== null && "aborted" in value && typeof value.aborted === "boolean" && "addEventListener" in value && typeof value.addEventListener === "function" && "removeEventListener" in value && typeof value.removeEventListener === "function";

package/dist/{index-6k1svmjh.js → index-e05cjgtf.js}

@@ -14,16 +14,20 @@ var BY_DESCRIPTION = [
     "message-invalid"
   ]
 ];
-var RETRYABLE = new Set([
-  "rate-limited",
-  "server-error"
-]);
-var UNREACHABLE = new Set([
-  "blocked-by-user",
-  "user-deactivated",
-  "chat-not-found",
-  "not-started"
-]);
+var TRAITS = {
+  "blocked-by-user": { retryable: false, recipientUnreachable: true },
+  "user-deactivated": { retryable: false, recipientUnreachable: true },
+  "chat-not-found": { retryable: false, recipientUnreachable: true },
+  "not-started": { retryable: false, recipientUnreachable: true },
+  "rate-limited": { retryable: true, recipientUnreachable: false },
+  "message-invalid": { retryable: false, recipientUnreachable: false },
+  "server-error": { retryable: true, recipientUnreachable: false },
+  unknown: { retryable: false, recipientUnreachable: false }
+};
+function isSendFailureReason(value) {
+  return Object.hasOwn(TRAITS, value);
+}
+var TELEGRAM_SEND_FAILURE_REASONS2 = Object.keys(TRAITS).filter(isSendFailureReason);
 function numberAt(value, keys) {
   if (!isRecord(value))
     return;
@@ -85,8 +89,7 @@ function classifyTelegramSendFailure2(error) {
       return {
         reason,
         ...status !== undefined && { status },
-        retryable: RETRYABLE.has(reason),
-        recipientUnreachable: UNREACHABLE.has(reason),
+        ...TRAITS[reason],
         evidence: "description"
       };
     }
@@ -138,4 +141,4 @@ function classifyTelegramEditRefusal(error) {
   return "other";
 }
 
-export { classifyTelegramSendFailure2, classifyTelegramEditRefusal };
+export { TELEGRAM_SEND_FAILURE_REASONS2, classifyTelegramSendFailure2, classifyTelegramEditRefusal };

package/dist/{index-kzz6rq0w.js → index-e6c2spsd.js}

@@ -1,3 +1,6 @@
+import {
+  maskSecretShapes
+} from "./index-sznqf8fx.js";
 import {
   isUnsafeKey
 } from "./index-zsarb5xp.js";
@@ -53,7 +56,7 @@ var DEFAULT_MAX_BYTES = 16000;
 var DEFAULT_MAX_DEPTH = 20;
 var DEFAULT_MAX_NODES = 20000;
 var MASK = "[redacted]";
-function secretMasker(options) {
+function secretMasker(options, isSecretName) {
   const values = [...options.sensitiveValues ?? []].filter((value) => value !== "").sort((left, right) => right.length - left.length);
   const patterns = options.sensitiveUrlPatterns ?? [];
   return (input) => {
@@ -66,20 +69,27 @@ function secretMasker(options) {
         output = output.replace(global, MASK);
       } catch {}
     }
-    return output;
+    return maskSecretShapes(output, MASK, isSecretName);
   };
 }
-function redact2(value, options = {}) {
-  const custom = options.sensitiveKeys;
-  const isSensitive = custom === undefined ? isSensitiveKeyDefault : (key) => {
-    custom.lastIndex = 0;
-    return custom.test(key) || options.includeDefaultSensitiveKeys === true && isSensitiveKeyDefault(key);
-  };
-  const maxDepth = options.maxDepth ?? DEFAULT_MAX_DEPTH;
-  const maxStringLength = options.maxStringLength ?? Number.POSITIVE_INFINITY;
-  const maxCollectionLength = options.maxCollectionLength ?? Number.POSITIVE_INFINITY;
-  const pathMatchers = (options.sensitivePaths ?? []).map((pattern) => pattern.split("."));
-  const matchesPath = (matcher, path, patternIndex = 0, pathIndex = 0) => {
+var ERROR_CORE = new Set(["_type", "name", "message", "stack", "cause"]);
+function isErrorFact(value) {
+  if (value === null || typeof value !== "object")
+    return typeof value !== "function";
+  if (Array.isArray(value) || value instanceof Error || value instanceof Date)
+    return true;
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
+}
+function kindOf(value) {
+  if (typeof value === "function")
+    return "function";
+  const maker = isRecord(value) ? value.constructor : undefined;
+  return typeof maker === "function" && maker.name !== "" ? maker.name : "object";
+}
+function pathMatcher(patterns) {
+  const matchers = patterns.map((pattern) => pattern.split("."));
+  const matches = (matcher, path, patternIndex = 0, pathIndex = 0) => {
     if (patternIndex === matcher.length)
       return pathIndex === path.length;
     const segment = matcher[patternIndex];
@@ -87,21 +97,32 @@ function redact2(value, options = {}) {
       if (patternIndex + 1 === matcher.length)
         return true;
       for (let next = pathIndex;next <= path.length; next += 1) {
-        if (matchesPath(matcher, path, patternIndex + 1, next))
+        if (matches(matcher, path, patternIndex + 1, next))
           return true;
       }
       return false;
     }
     if (pathIndex === path.length || segment !== "*" && segment !== path[pathIndex])
       return false;
-    return matchesPath(matcher, path, patternIndex + 1, pathIndex + 1);
+    return matches(matcher, path, patternIndex + 1, pathIndex + 1);
   };
-  const isSensitivePath = (path) => pathMatchers.some((matcher) => matchesPath(matcher, path));
+  return (path) => matchers.some((matcher) => matches(matcher, path));
+}
+function redact2(value, options = {}) {
+  const custom = options.sensitiveKeys;
+  const isSensitive = custom === undefined ? isSensitiveKeyDefault : (key) => {
+    custom.lastIndex = 0;
+    return custom.test(key) || options.includeDefaultSensitiveKeys === true && isSensitiveKeyDefault(key);
+  };
+  const maxDepth = options.maxDepth ?? DEFAULT_MAX_DEPTH;
+  const maxStringLength = options.maxStringLength ?? Number.POSITIVE_INFINITY;
+  const maxCollectionLength = options.maxCollectionLength ?? Number.POSITIVE_INFINITY;
+  const isSensitivePath = pathMatcher(options.sensitivePaths ?? []);
   const stringBoundFor = (key) => {
     const byKey = key === undefined ? undefined : options.maxStringLengthByKey?.[key];
     return byKey ?? maxStringLength;
   };
-  const mask = secretMasker(options);
+  const mask = secretMasker(options, isSensitive);
   const safeString = (input, key) => {
     const bound = stringBoundFor(key);
     const output = mask(input);
@@ -176,14 +197,31 @@ function redact2(value, options = {}) {
           return "[unreadable]";
         }
       };
+      if (ancestors.has(input))
+        return "[circular]";
+      ancestors.add(input);
       const stack = property("stack");
       const cause = property("cause");
+      const own = {};
+      for (const key of Object.keys(input)) {
+        if (isUnsafeKey(key) || ERROR_CORE.has(key))
+          continue;
+        const childPath = [...path, key];
+        try {
+          const field = Reflect.get(input, key);
+          own[key] = isSensitive(key) || isSensitivePath(childPath) ? MASK : isErrorFact(field) ? walk(field, depth + 1, childPath) : `[${kindOf(field)}]`;
+        } catch {
+          own[key] = "[unreadable]";
+        }
+      }
+      ancestors.delete(input);
       return {
         _type: "error",
         name: safeString(String(property("name")), "name"),
         message: safeString(String(property("message")), "message"),
         ...stack !== undefined && { stack: safeString(String(stack), "stack") },
-        ...cause !== undefined && { cause: walk(cause, depth + 1, [...path, "cause"]) }
+        ...cause !== undefined && { cause: walk(cause, depth + 1, [...path, "cause"]) },
+        ...own
       };
     }
     if (Array.isArray(input)) {

package/dist/{index-qjeggp8w.js → index-h43cepag.js}

@@ -144,6 +144,122 @@ function responseTraceId(response) {
   return response?.headers.get(REQUEST_ID_HEADER) ?? undefined;
 }
 
+// src/browser/upload-progress.ts
+var PIECE_BYTES = 64 * 1024;
+function uploadProgressRoute(injectedTransport) {
+  return !injectedTransport && typeof globalThis.XMLHttpRequest === "function" ? "xhr" : "stream";
+}
+function withUploadProgress(transport, listener, route) {
+  let attempts = 0;
+  return async (input, init) => {
+    attempts += 1;
+    const attempt = attempts;
+    const request = new Request(input, init);
+    const headers = new Headers(request.headers);
+    const bytes = new Uint8Array(await request.arrayBuffer());
+    let reported = -1;
+    const report = (sentBytes) => {
+      if (sentBytes <= reported)
+        return;
+      reported = sentBytes;
+      try {
+        listener({ sentBytes, totalBytes: bytes.byteLength, attempt });
+      } catch {}
+    };
+    const signal = init?.signal ?? (input instanceof Request ? input.signal : undefined);
+    const credentials = init?.credentials ?? (input instanceof Request ? input.credentials : undefined);
+    report(0);
+    if (route === "xhr") {
+      return sendThroughXhr(request, headers, bytes, { signal, credentials, report });
+    }
+    headers.set("content-length", String(bytes.byteLength));
+    const counted = bytes.byteLength > 0 ? { body: countedBody(bytes, report), duplex: "half" } : {};
+    const outgoing = {
+      ...init,
+      method: request.method,
+      headers,
+      body: undefined,
+      ...counted,
+      ...signal && { signal },
+      ...credentials && { credentials }
+    };
+    return transport(request.url, outgoing);
+  };
+}
+function countedBody(bytes, report) {
+  let offset = 0;
+  return new ReadableStream({
+    pull(controller) {
+      if (offset >= bytes.byteLength) {
+        controller.close();
+        return;
+      }
+      const end = Math.min(offset + PIECE_BYTES, bytes.byteLength);
+      controller.enqueue(bytes.slice(offset, end));
+      offset = end;
+      report(offset);
+    }
+  }, { highWaterMark: 0 });
+}
+var BROWSER_OWNED_HEADERS = new Set(["content-length", "host", "connection"]);
+function sendThroughXhr(request, headers, bytes, { signal, credentials, report }) {
+  return new Promise((resolve, reject) => {
+    if (credentials === "omit") {
+      reject(new TypeError("onUploadProgress sends through XMLHttpRequest, which cannot omit same-origin cookies — use credentials 'same-origin' or 'include'"));
+      return;
+    }
+    if (signal?.aborted) {
+      reject(abortReason(signal));
+      return;
+    }
+    const xhr = new XMLHttpRequest;
+    xhr.open(request.method, request.url, true);
+    headers.forEach((value, name) => {
+      if (!BROWSER_OWNED_HEADERS.has(name))
+        xhr.setRequestHeader(name, value);
+    });
+    xhr.withCredentials = credentials === "include";
+    xhr.responseType = "arraybuffer";
+    const abort = () => xhr.abort();
+    signal?.addEventListener("abort", abort, { once: true });
+    const settle = () => signal?.removeEventListener("abort", abort);
+    xhr.upload.onprogress = (event) => report(Math.min(event.loaded, bytes.byteLength));
+    xhr.upload.onload = () => report(bytes.byteLength);
+    xhr.onload = () => {
+      settle();
+      if (xhr.status < 200 || xhr.status > 599) {
+        reject(new TypeError("Network request failed"));
+        return;
+      }
+      report(bytes.byteLength);
+      resolve(responseOf(xhr));
+    };
+    xhr.onerror = () => {
+      settle();
+      reject(new TypeError("Network request failed"));
+    };
+    xhr.onabort = () => {
+      settle();
+      reject(signal ? abortReason(signal) : new DOMException("Aborted", "AbortError"));
+    };
+    xhr.send(bytes.byteLength > 0 ? bytes : null);
+  });
+}
+function abortReason(signal) {
+  return signal.reason ?? new DOMException("Aborted", "AbortError");
+}
+var NULL_BODY_STATUSES = new Set([101, 103, 204, 205, 304]);
+function responseOf(xhr) {
+  const headers = new Headers;
+  for (const line of xhr.getAllResponseHeaders().trim().split(/[\r\n]+/)) {
+    const colon = line.indexOf(":");
+    if (colon > 0)
+      headers.append(line.slice(0, colon).trim(), line.slice(colon + 1).trim());
+  }
+  const body = xhr.response;
+  return new Response(NULL_BODY_STATUSES.has(xhr.status) || !(body instanceof ArrayBuffer) ? null : body, { status: xhr.status, statusText: xhr.statusText, headers });
+}
+
 // src/browser/http.ts
 var API_ERROR_BRAND = Symbol.for("stitchkit.ApiError");
 function messageForCode(code, message) {
@@ -225,6 +341,15 @@ function requestFailure(error, emit) {
   const msg = error instanceof Error ? error.message : undefined;
   return new ApiError2("UNKNOWN_ERROR", status, msg ? { message: msg } : undefined, msg, undefined, responseTraceId(response), { cause: error });
 }
+function errorBodyOf(data) {
+  if (typeof data !== "string")
+    return data ?? null;
+  try {
+    return JSON.parse(data);
+  } catch {
+    return null;
+  }
+}
 function createHttpClient2(config) {
   assertTransportChoice(config);
   let ssrCookies = null;
@@ -280,23 +405,26 @@ function createHttpClient2(config) {
               emit({ type: "unauthorized" });
             }
           }
-          if (!response.ok) {
-            const body = await response.clone().json().catch(() => null);
-            if (body) {
-              const parsed = parseError(body);
-              if (parsed) {
-                throw new ApiError2(parsed.code, response.status, parsed.details, parsed.message, parsed.hint, responseTraceId(response));
-              }
-            }
-          }
+        }
+      ],
+      beforeError: [
+        ({ error }) => {
+          if (!isHTTPError(error))
+            return error;
+          const body = errorBodyOf(error.data);
+          const parsed = body === null ? null : parseError(body);
+          if (!parsed)
+            return error;
+          return new ApiError2(parsed.code, error.response.status, parsed.details, parsed.message, parsed.hint, responseTraceId(error.response));
         }
       ]
     }
   });
   async function request(method, url, data, options = {}) {
     const cancellation = createRequestCancellation(options.signal, options.timeout ?? config.timeout ?? 30000);
+    const transport = config.fetch ?? globalThis.fetch.bind(globalThis);
     const kyOptions = {
-      fetch: createRetryAwareFetch(config.fetch ?? globalThis.fetch.bind(globalThis), config.unix),
+      fetch: createRetryAwareFetch(options.onUploadProgress ? withUploadProgress(transport, options.onUploadProgress, uploadProgressRoute(config.fetch !== undefined || config.unix !== undefined)) : transport, config.unix),
       timeout: false,
       signal: cancellation.signal
     };
@@ -339,4 +467,4 @@ function createHttpClient2(config) {
   };
 }
 
-export { RequestCancellationError, createRequestCancellation, responseTraceId, ApiError2, refuseLocally, isAbortLikeError, parseApiErrorBody, createHttpClient2 };
+export { RequestCancellationError, createRequestCancellation, responseTraceId, uploadProgressRoute, withUploadProgress, ApiError2, refuseLocally, isAbortLikeError, parseApiErrorBody, createHttpClient2 };

package/dist/index-sznqf8fx.js

@@ -0,0 +1,20 @@
+// src/internal/secret-shapes.ts
+var BOT_TOKEN_SECRET = /(?<=\d{5,}:)[A-Za-z0-9_-]{30,}/;
+var URL_PASSWORD = /(\b[a-z][a-z0-9+.-]*:\/\/[^\s/?#@:"'<>]*:)([^\s/?#@"'<>]+)(?=@)/gi;
+var QUERY_PARAMETER = /([?&;])([^=&#\s"'<>]+)=([^&#\s"'<>]*)/g;
+var QUERY_SECRET_NAMES = new Set(["key", "sig", "signature"]);
+function decoded(name) {
+  try {
+    return decodeURIComponent(name);
+  } catch {
+    return name;
+  }
+}
+function maskSecretShapes(input, mask, isSecretName) {
+  return input.replace(new RegExp(BOT_TOKEN_SECRET.source, "g"), mask).replace(URL_PASSWORD, `$1${mask}`).replace(QUERY_PARAMETER, (whole, separator, name) => {
+    const plain = decoded(name);
+    return isSecretName(plain) || QUERY_SECRET_NAMES.has(plain.toLowerCase()) ? `${separator}${name}=${mask}` : whole;
+  });
+}
+
+export { BOT_TOKEN_SECRET, maskSecretShapes };

package/dist/internal/secret-shapes.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Secrets recognised by their shape, with no list of values to match.
+ *
+ * A journal line carries secrets nobody named: a request URL with a bot token
+ * in its path, a database address with its password, a callback with
+ * `?token=` — often another process's, so not in this one's environment. Each
+ * shape masks only the secret part, so the line still says which bot, which
+ * host, which parameter.
+ */
+/**
+ * The secret half of a Telegram bot token, after the bot's numeric id and the
+ * colon. The id is not a secret — it is the bot's public user id — and it is
+ * what tells two bots' failures apart in a journal.
+ */
+export declare const BOT_TOKEN_SECRET: RegExp;
+/**
+ * Mask every shaped secret in `input` with `mask`. `isSecretName` decides a
+ * query parameter by its name, the same test a field name gets.
+ */
+export declare function maskSecretShapes(input: string, mask: string, isSecretName: (name: string) => boolean): string;
+//# sourceMappingURL=secret-shapes.d.ts.map

package/dist/internal/secret-shapes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-shapes.d.ts","sourceRoot":"","sources":["../../src/internal/secret-shapes.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,QAAmC,CAAC;AAuBjE;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GACtC,MAAM,CAUR"}

package/dist/observability/sanitize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/observability/sanitize.ts"],"names":[],"mappings":"AAOA,8EAA8E;AAC9E,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,EAAE,GACX;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEjC,+CAA+C;AAC/C,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,8EAA8E;IAC9E,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,uFAAuF;IACvF,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC;;;;OAIG;IACH,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;OAaG;IACH,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,mEAAmE;IACnE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,mCAAmC;AACnC,MAAM,WAAW,WAAW;IAC1B,wEAAwE;IACxE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,8BAA8B;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,cAAc,CAAC,EAAE,IAAI,CAAC;CACvB;AAmGD;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,eAAoB,GAAG,SAAS,CA6L/E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,SAAoB,GAAG,SAAS,CAgBzF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,eAAoB,GAC5B,SAAS,GAAG,IAAI,CAOlB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAqBvD"}
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/observability/sanitize.ts"],"names":[],"mappings":"AAQA,8EAA8E;AAC9E,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,EAAE,GACX;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEjC,+CAA+C;AAC/C,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,8EAA8E;IAC9E,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,uFAAuF;IACvF,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC;;;;OAIG;IACH,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;OAaG;IACH,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,mEAAmE;IACnE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,mCAAmC;AACnC,MAAM,WAAW,WAAW;IAC1B,wEAAwE;IACxE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,8BAA8B;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,cAAc,CAAC,EAAE,IAAI,CAAC;CACvB;AAwJD;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,eAAoB,GAAG,SAAS,CA4L/E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,SAAoB,GAAG,SAAS,CAgBzF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,eAAoB,GAC5B,SAAS,GAAG,IAAI,CAOlB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAqBvD"}

package/dist/telegram/bot-api.d.ts

@@ -8,13 +8,16 @@
  * reads `error_code` and `parameters.retry_after` before it ever reads prose.
  */
 /**
- * The shape of a bot token: the bot's numeric id, a colon, the secret.
+ * The secret half of a bot token — what follows the bot's numeric id and the
+ * colon. The id stays readable: it is the bot's public user id, and the only
+ * thing in a masked line that tells which bot failed.
  *
- * For masking, not for validation — hand it to a logger's
- * `sensitiveUrlPatterns` and a token inside a URL or an error message is not
- * written to the journal.
+ * For masking, not for validation. `redact` and every logger built on it mask
+ * it already; `redactTelegramBotToken` masks it in a string of your own.
  */
 export declare const TELEGRAM_BOT_TOKEN_PATTERN: RegExp;
+/** Every bot token in `text` with its secret half masked: `123456:[redacted]`. */
+export declare function redactTelegramBotToken(text: string): string;
 /** Telegram refused the call. Carries its answer as fields, never the token. */
 export declare class TelegramBotApiError extends Error {
     readonly method: string;

package/dist/telegram/bot-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bot-api.d.ts","sourceRoot":"","sources":["../../src/telegram/bot-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,QAA8B,CAAC;AAItE,gFAAgF;AAChF,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAE7F,YACE,MAAM,EAAE,MAAM,EACd,MAAM,EAAE;QACN,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;KAChD,EAQF;CACF;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CAC/B;AAQD;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAuCnF"}
+{"version":3,"file":"bot-api.d.ts","sourceRoot":"","sources":["../../src/telegram/bot-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,EAAE,MAAyB,CAAC;AAEnE,kFAAkF;AAClF,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE3D;AAID,gFAAgF;AAChF,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAE7F,YACE,MAAM,EAAE,MAAM,EACd,MAAM,EAAE;QACN,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;KAChD,EAQF;CACF;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CAC/B;AAQD;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAuCnF"}