unfazed 0.6.1 → 0.8.0

package/REFERENCE.md

@@ -0,0 +1,284 @@
+# unfazed SDK reference
+
+Every method of `Unfazed`, with its signature, in one page. In a script:
+`import { Unfazed, help } from "unfazed"; const unfazed = new Unfazed();`
+(run_script injects the credential; elsewhere `UNFZ_API_TOKEN` or
+`npx unfazed login`). `help()` returns this page; `help("writeFiles")` one
+entry. Methods are async and throw an `UnfazedError` subclass on failure.
+Every method takes an optional last `options` with `signal` (and, for single
+requests, `timeoutMs`). The names follow the MCP tools: `listCommits` is
+`list_commits`, `waitForEvents` is `wait_for_events`.
+
+```ts
+import { Unfazed } from "unfazed";
+
+export default async () => {
+  const unfazed = new Unfazed();
+  const ws = await unfazed.ensureWorkspace("hello");
+  const wrote = await unfazed.writeFiles(ws.id, {
+    "server.ts": `export default { fetch: () => new Response("hi") }`,
+    "package.json": JSON.stringify({ name: "hello" }),
+  }, { commitMessage: "First version" });                // ONE request, ONE commit
+  const app = await unfazed.deployService({ workspaceId: ws.id, alias: "hello", wait: true });
+  return { url: app.url, commit: wrote.commit?.sha, timings: app.timings };
+};
+```
+
+## Saved, committed, deployed
+
+A file write has three states. **Saved**: the call returned; the app's
+files have it and the next deploy uses it. **Committed**: on an app with
+platform git, `commit.committed && !commit.waiting`; it is in `listCommits`.
+**Deployed**: a deploy of those files went READY (`deployService({ wait:
+true })`). A write never deploys by itself, except when `commit.deploys` is
+true (the branch head is imported like a push).
+
+`commit.waiting: true` means saved, with the commit queued for the git
+server: it lands in order, `sha` is null until then, nothing to retry.
+`waitForCommit` (or `writeFiles(…, { waitForCommit: true })`) resolves once
+it landed.
+
+## Workspaces
+
+### `createWorkspace(name: string): Promise<Workspace>`
+A new workspace: files, env, deployments. Names are unique per owner,
+case-insensitively; prefer `ensureWorkspace` in re-runnable scripts.
+
+### `ensureWorkspace(name: string): Promise<Workspace>`
+The workspace named `name`, created only when missing. Safe to re-run.
+
+### `listWorkspaces(): Promise<Workspace[]>`
+
+### `liveApps(workspaceId: string): Promise<LiveApp[]>`
+The apps the workspace serves now: `{ alias, deploymentID, domains }`.
+
+### `deleteWorkspace(workspaceId: string, options?: { withDeployments?: true, confirmAliases: string[], ignoreNotFound?: boolean }): Promise<boolean>`
+Deletes it; with `withDeployments`, every app it serves, which
+`confirmAliases` must name exactly (`liveApps`). Kept 30 days for support.
+
+### `deleteApp(app: { workspaceId, alias }, options?: { ignoreNotFound?: boolean }): Promise<DeleteAppResult>`
+Deletes one app (every deployment of the alias, its App State, env and
+bindings); the workspace and its other apps stay.
+
+### `whoami(): Promise<Whoami>`
+Who the token is, its scopes, usage and limits.
+
+## Files
+
+### `writeFiles(workspaceId: string, files: Record<string, string | { text } | { base64 } | { bytes }>, options?: { commitMessage?: string, waitForCommit?: boolean | WaitOptions, allowPartial?: boolean }): Promise<WriteFilesResult>`
+Writes every file in ONE request, which is ONE commit on an app with
+platform git (MCP `write_workspace_files`). Result: `{ files: [{ path, ok,
+error, file }], written, failed, totalBytes, commit, commits, landed? }`;
+`commit` is `{ sha, branch, message, committed, waiting, waitingCount,
+deploys, conflicts, writeSHA, paused }` or null without platform git. Not
+transactional: when a file fails it throws `UnfazedWriteError` (`.result`,
+`.failed`) unless `allowPartial`. Up to 100 files and 32 MiB per request; a
+bigger map is several requests, each a commit.
+
+```ts
+const out = await unfazed.writeFiles(ws.id, { "a.ts": a, "logo.png": { bytes } }, { commitMessage: "Logo" });
+if (out.commit?.conflicts.length) console.log("a push changed", out.commit.conflicts, "mine:", out.commit.writeSHA);
+```
+
+### `writeFile(workspaceId: string, path: string, text: string, options?: { commitMessage?, waitForCommit? }): Promise<WorkspaceFile & { commit }>`
+One text file: `writeFiles` with one entry.
+
+### `writeBinaryFile(workspaceId: string, path: string, content: Uint8Array | ArrayBuffer | { base64: string }, options?): Promise<WorkspaceFile & { commit }>`
+
+### `waitForCommit(workspaceId: string, waitOptions?: WaitOptions): Promise<{ branch, head, waitedMs }>`
+Resolves once no write of the app waits for its commit; `head` then has
+every earlier write. Immediate (`head: null`) without platform git. Default
+timeout 2 minutes (`UnfazedTimeoutError`; the writes stay saved).
+
+### `readFile(workspaceId: string, path: string, input?: { offset?, limit? }): Promise<{ text, totalBytes, truncated, nextOffset, file } | null>`
+
+### `listFiles(workspaceId: string, input?: { limit?, offset?, order? }): Promise<WorkspaceFilePage>`
+
+### `deleteFile(workspaceId: string, path: string): Promise<boolean>`
+`false` when there was nothing to delete.
+
+## Deploys
+
+### `deployService(options: { workspaceId, alias?, wait?, waitOptions?, timings?, runtime?, serviceMode?, healthPath?, cronSchedule?, cronPath? }): Promise<DeployResult>`
+Builds and deploys the workspace as an HTTP service (`server.ts` default
+export, or `unfazed.json`). Returns BUILDING at once; with `wait: true`,
+resolves READY or throws `UnfazedDeployError` (`reason` FAILED with the
+build error, or TIMEOUT; default 10 minutes). Every call is a new release;
+the same `alias` redeploys that app.
+
+With `wait: true` the result has `timings`:
+`{ client: { createMs, waitMs, totalMs, waitRequests, waitMode },
+platform: { totalMs, buildMs, promoteMs, phases, buildMode,
+artifactTransport, buildMemoryMiB } }`, both in milliseconds. `platform` is
+what the platform measured (created to READY); `client` is what you waited.
+The wait is server-side, so the two differ by about one round trip.
+
+```ts
+const app = await unfazed.deployService({ workspaceId: ws.id, alias: "api", wait: true });
+app.timings?.platform?.phases;   // { vm_install: 900, vm_build: 2600, admission: 40, … }
+```
+
+### `deployStatic(options: { workspaceId, alias?, wait?, spaMode? }): Promise<DeployResult>`
+
+### `deployBox(options: { workspaceId, alias, wait?, resources?: { memMiB?, vcpus?, diskGiB? } }): Promise<DeployResult>`
+A persistent Linux VM over SSH (`sshCommand`). Always pass `alias`.
+
+### `deploy(input: CreateDeploymentInput, options?: { wait?, waitOptions?, timings? }): Promise<DeployResult>`
+Any `createDeployment` input.
+
+### `waitForDeployment(deploymentId: string, waitOptions?: WaitOptions): Promise<Deployment>`
+Waits server-side (MCP `wait_for_deployment`: one request per 45 s at most,
+answered when the status changes) until READY; throws `UnfazedDeployError`
+on FAILED or timeout. A new app's landing on its server is waited for too.
+`waitOptions: { timeoutMs?, signal?, mode?: "server" | "poll" }`. The
+platform holds at most 16 waits of one account at once; past that a wait
+polls instead.
+
+### `getDeployment(deploymentId: string): Promise<Deployment | null>`
+
+### `getDeploymentByAlias(alias: string): Promise<Deployment | null>`
+
+### `listDeployments(input?: { workspaceID?, alias?, kind?, limit?, offset? }): Promise<DeploymentPage>`
+Newest first.
+
+### `listReleases(alias: string): Promise<Deployment[]>`
+The alias's history; `aliasHeld` marks the live one.
+
+### `rollback(options: { alias, to?, expectedCurrentId?, retries? }): Promise<Deployment>`
+Points the alias back at a prior READY release (default: the one before
+the live one). A bare `rollback({ alias })` toggles; pin `to` in anything
+re-runnable.
+
+### `deleteDeployment(deploymentId: string, options?: { ignoreNotFound? }): Promise<boolean>`
+
+## Runtime, logs, events, timings
+
+### `getStatus(deploymentId: string): Promise<ServiceStatus>`
+`{ running, health, inFlight, restartCount, memSizeMiB, lastError, … }`.
+
+### `getLogs(deploymentId: string, input?: { tailBytes? }): Promise<{ stdout, stderr, truncated, … }>`
+Filter in the script: `logs.stderr.split("\n").filter((l) => l.includes("ERROR"))`.
+
+### `getEvents(deploymentId: string, limit?: number): Promise<DeploymentEvent[]>`
+The latest `limit` (default 20) lifecycle events, oldest first: `{ type,
+typeEnum, severity, message, vmID, metadata, createdAt }`. `type` is the
+event's own name, as MCP reports it: `"deployment.build_finished"`,
+`"deployment.phases"`, `"service.vm_started"`. `typeEnum` is the GraphQL
+enum (`UNKNOWN` for names it lacks); match on `type`.
+
+### `getDeploymentTimings(deploymentId: string): Promise<PlatformTimings | null>`
+A deploy's measured phases (ms) from its timing events: `{ totalMs,
+buildMs, promoteMs, phases, buildMode, artifactTransport, buildMemoryMiB }`.
+`parseDeploymentTimings(events)` does the same for events you already read.
+
+### `restartService(deploymentId: string)` / `stopService(deploymentId: string)`
+
+## Env and secrets
+
+Snapshotted into a release at deploy time: redeploy the alias to apply.
+
+### `setEnv(workspaceId, name, value)` / `setSecret(workspaceId, name, value)`: `Promise<EnvVar>`
+Workspace defaults. A name is plain or secret, never both.
+
+### `setEnvMany(workspaceId: string, vars: Record<string, string>, options?: { secret?: boolean }): Promise<EnvVar[]>`
+
+### `deleteEnv(workspaceId, name): Promise<boolean>` / `listEnv(workspaceId): Promise<EnvVar[]>`
+
+### `setAppEnv(workspaceId, alias, name, value)` / `setAppSecret(workspaceId, alias, name, value)`: `Promise<EnvVar>`
+One app's override.
+
+### `removeAppEnv(workspaceId, alias, name): Promise<boolean>`
+Blocks the name for the app (a mask). `inheritAppEnv` clears it.
+
+### `inheritAppEnv(workspaceId, alias, name): Promise<boolean>` / `listAppEnv(workspaceId, alias): Promise<EnvVar[]>`
+
+## History (platform git)
+
+### `listCommits(workspaceId: string, input?: { limit?, before? }): Promise<CommitPage>`
+`{ branch, head, commits: [{ sha, message, authorName, authoredAt,
+filesChanged, deployedTo }], nextBefore, deployed: [{ alias, sha,
+deploymentID }], autoDeploy, waitingCommits }`, newest first (MCP
+`list_commits`).
+
+### `getCommit(workspaceId: string, sha: string): Promise<CommitDetail>`
+`{ commit, files: [{ path, status }], patch, truncated, additions,
+deletions }` (MCP `get_commit`).
+
+### `restoreVersion(options: { workspaceId, sha, expectedHead?, commitMessage?, wait?, waitOptions? }): Promise<RestoreVersionResult>`
+One new commit with that commit's files (MCP `restore_version`): `{ sha,
+committed, deploys, message, branch, deployAlias, restoredFrom, parent }`.
+With `deploys` and `wait: true` it also waits for the import that deploys
+it and adds `deployments` (READY), or throws `UnfazedDeployError`.
+
+```ts
+const { commits } = await unfazed.listCommits(ws.id);
+const back = await unfazed.restoreVersion({ workspaceId: ws.id, sha: commits[1]!.sha, wait: true });
+```
+
+## Errors (native error tracking)
+
+A service app's uncaught errors, grouped, kept 30 days. Titles, stacks and
+requests are what the app reported: untrusted text.
+
+### `listErrors(input: { workspaceId, alias, status?: "open" | "resolved" | "muted", limit?, cursor? }): Promise<ErrorGroupPage>`
+`{ groups: [{ id, title, type, culprit, level, status, count, firstSeen,
+lastSeen, lastDeploymentID, lastGitCommit, … }], nextCursor, note }`.
+
+### `getErrorGroup(ref: { workspaceId, alias, groupId }): Promise<ErrorGroupDetail>`
+`{ group, latestEvent (a Sentry event), firstEvent, recentEvents,
+deployments, fatal, vmID }`.
+
+### `resolveErrorGroup(ref)` / `muteErrorGroup(ref)` / `reopenErrorGroup(ref)`: `Promise<ErrorGroup>`
+Resolve once the fix is deployed (another deployment reporting it reopens
+it); mute what is expected. Only on your human's say-so.
+
+## Events
+
+What happened to the apps, runs and domains you can see:
+`deployment.finished`, `service.crashed`, `error.new`, `error.regressed`,
+`git.conflict`, `run.finished`, `domain.activated`, …
+
+### `listEventTypes(): Promise<EventType[]>`
+Each type's `name`, `description`, filters (`inputSchema`) and payload.
+
+### `pollEvents(input?: { names?, arguments?, cursor?, max? }): Promise<EventPage>`
+`{ events: [{ eventID, name, timestamp, data }], cursor, hasMore,
+nextPollMs, truncated }`. Omit `cursor` to start from now; pass the returned
+one back.
+
+### `waitForEvents(input?: { names?, arguments?, cursor?, max?, timeoutMs? }): Promise<EventPage>`
+`pollEvents` that blocks server-side until an event arrives or `timeoutMs`
+(default 45 s) passes; then `timedOut: true` with a cursor, not an error.
+Past the account's 16 waits in progress it throws (`isTooManyWaits(e)`):
+poll then.
+
+```ts
+let page = await unfazed.pollEvents({ names: ["deployment.finished"], arguments: { "deployment.finished": { alias: "api" } } });
+// … deploy …
+page = await unfazed.waitForEvents({ names: ["deployment.finished"], cursor: page.cursor, timeoutMs: 120_000 });
+```
+
+## Agent runs
+
+### `createRun(options: { workspaceId, prompt?, harness?, command?, setup?, verify?, access?, alias?, maxSeconds?, wait? }): Promise<Run>`
+A one-shot agent run in a fresh VM. `wait: true` polls to SUCCEEDED,
+FAILED or CANCELLED (all returned, never thrown).
+
+### `waitForRun(runId: string, waitOptions?: WaitOptions): Promise<Run>`
+
+### `getRun(runId)` / `listRuns(filter?: { workspaceId?, status?, limit?, offset? })` / `cancelRun(runId)`
+
+### `followUpRun(runId: string, options: { prompt, mode?, wait? }): Promise<Run>`
+
+### `answerRun(runId: string, answer: string): Promise<Run>`
+Answers a BLOCKED run's question.
+
+### `runEvents(runId)` / `runConsole(runId, { tailBytes? })` / `runTranscript(runId, { tailBytes? })`
+
+### `listRunHarnesses(): Promise<RunHarness[]>`
+
+## Anything else
+
+`unfazed.client` is the typed GraphQL transport over the same credential:
+`await unfazed.client.query(document, variables)`. `operations` exports
+every document the SDK uses.

package/dist/cli/login.d.ts

@@ -1,6 +1,6 @@
 import { type StoredCredentials } from "../credentials.js";
 import { UnfazedError } from "../errors.js";
-export declare const USER_AGENT = "unfazed-cli/0.6.1 (+https://unfazed.dev/auth.md)";
+export declare const USER_AGENT = "unfazed-cli/0.8.0 (+https://unfazed.dev/auth.md)";
 /** What a login asks for: reading and deploying, like an MCP client. */
 export declare const DEFAULT_SCOPE = "unfz:read unfz:deploy";
 export declare const CLIENT_NAME = "unfazed CLI";

package/dist/client.d.ts

@@ -1,5 +1,5 @@
 /** SDK version, sent as the User-Agent. Keep in sync with package.json. */
-export declare const VERSION = "0.6.1";
+export declare const VERSION = "0.8.0";
 /**
  * Default GraphQL endpoint.
  *

package/dist/client.js

@@ -1,7 +1,7 @@
 import { LOGIN_COMMAND, openStoredLogin } from "./credentials.js";
 import { UnfazedAuthError, UnfazedConfigError, UnfazedGraphQLError, UnfazedHTTPError, UnfazedTimeoutError, } from "./errors.js";
 /** SDK version, sent as the User-Agent. Keep in sync with package.json. */
-export const VERSION = "0.6.1";
+export const VERSION = "0.8.0";
 /**
  * Default GraphQL endpoint.
  *

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAoB,MAAM,kBAAkB,CAAC;AACpF,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,GAEpB,MAAM,aAAa,CAAC;AAErB,2EAA2E;AAC3E,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAE5D,iFAAiF;AACjF,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAEtD,oDAAoD;AACpD,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAE9C,kEAAkE;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAC;AA+F/C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,aAAa;IACxB,qCAAqC;IAC5B,QAAQ,CAAS;IAE1B,4EAA4E;IACnE,KAAK,CAA6C;IAClD,QAAQ,CAAyB;IACjC,UAAU,CAAS;IACnB,MAAM,CAAY;IAE3B,YAAY,UAAyB,EAAE;QACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC;QAExC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,MAAM,WAAW,GAAI,UAAkC,CAAC,KAAK,CAAC;YAC9D,IAAI,OAAO,WAAW,KAAK,UAAU,EAAE,CAAC;gBACtC,MAAM,IAAI,kBAAkB,CAC1B,iFAAiF,CAClF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAc,CAAC;QAC1D,CAAC;QAED,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,IAAI,eAAe,OAAO,EAAE,CAAC;QAEzD,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YAClB,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,GAAG,UAAU,IAAI,gBAAgB,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GACV,OAAO,CAAC,KAAK,KAAK,KAAK;gBACrB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,eAAe,CAAC;oBACd,GAAG;oBACH,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/C,KAAK,EAAE,IAAI,CAAC,MAAM;oBAClB,+DAA+D;oBAC/D,SAAS,EAAE,EAAE,IAAI,eAAe,OAAO,EAAE;iBAC1C,CAAC,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YACjF,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC9C,IAAI,EAAE;YAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,IAAI,UAAU;QACZ,OAAO,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACnD,CAAC;IAED,yEAAyE;IACzE,KAAK,CACH,QAA8C,EAC9C,SAAsB,EACtB,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,MAAM,CACJ,QAA8C,EAC9C,SAAsB,EACtB,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CACX,QAAyC,EACzC,SAAmB,EACnB,UAA0B,EAAE;QAE5B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC;QAEvD,4EAA4E;QAC5E,yEAAyE;QACzE,gEAAgE;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;YACvB,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;YACjD,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E,CAAC,CAAC;QAEH,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAClF,mEAAmE;QACnE,sEAAsE;QACtE,sCAAsC;QACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACrD,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9C,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,MAA2D,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnE,CAAC;QAED,0EAA0E;QAC1E,yEAAyE;QACzE,uEAAuE;QACvE,iCAAiC;QACjC,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACtD,MAAM,IAAI,mBAAmB,CAC3B,CAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,EAC3D,SAAS,CACV,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,MAAM;QACJ,OAAO,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,KAAK,CACT,IAAY,EACZ,KAAa,EACb,SAAiB,EACjB,QAAiC;QAEjC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACxE,2EAA2E;QAC3E,oEAAoE;QACpE,2EAA2E;QAC3E,2EAA2E;QAC3E,uEAAuE;QACvE,WAAW;QACX,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE;gBACzB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,GAAG,IAAI,CAAC,QAAQ;oBAChB,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,UAAU,KAAK,EAAE;iBACjC;gBACD,IAAI;gBACJ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC,EACF,MAAM,CACP,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;YACzD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,mBAAmB,CAAC,oCAAoC,SAAS,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnB,MAAM,IAAI,mBAAmB,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED,qFAAqF;AACrF,SAAS,kBAAkB,CAAC,OAAsB,EAAE,GAAuC;IACzF,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC;IAC9C,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC;IACtE,MAAM,OAAO,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACtC,0EAA0E;IAC1E,uEAAuE;IACvE,gCAAgC;IAChC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,YAAY,CAAC;IAChF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,QAA4B,EAAE,UAA8B;IAClF,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;QAC3B,OAAO,CACL,6BAA6B,QAAQ,6BAA6B,UAAU,IAAI;YAChF,SAAS,gBAAgB,IAAI,QAAQ,IAAI,aAAa,+BAA+B,aAAa,GAAG,CACtG,CAAC;IACJ,CAAC;IACD,OAAO,CACL,iCAAiC,aAAa,mCAAmC;QACjF,2BAA2B,aAAa,qBAAqB,gBAAgB,YAAY,CAC1F,CAAC;AACJ,CAAC;AAED,SAAS,UAAU;IACjB,4EAA4E;IAC5E,oBAAoB;IACpB,OAAQ,UAAyE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;AACvG,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,OAAO,CAAC,CAAU;IACzB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAK,CAAuB,CAAC,IAAI,KAAK,YAAY,CAAC;AAC/F,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAClD,CAAC,CAAC,IAAI,GAAG,YAAY,CAAC;IACtB,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,YAAY,CAAI,OAAmB,EAAE,MAA+B;IAC3E,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACxD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;YACR,IAAI,EAAE,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,IAAI,EAAE,CAAC;YACP,MAAM,CAAC,KAAc,CAAC,CAAC;QACzB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CACjB,SAAiB,EACjB,QAAsB;IAEtB,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;IACnF,IAAI,OAAO,eAAe,KAAK,UAAU,EAAE,CAAC;QAC1C,OAAO;YACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;YACjB,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK;SACxB,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,KAAgD,CAAC;IAErD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,QAAQ,GAAG,IAAI,CAAC;YAChB,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC;IAED,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACjD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,OAAO;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;;YACpC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO,EAAE,GAAG,EAAE;YACZ,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7C,QAAQ,EAAE,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC1D,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ;KAC3B,CAAC;AACJ,CAAC","sourcesContent":["import { LOGIN_COMMAND, openStoredLogin, type StoredLogin } from \"./credentials.js\";\nimport {\n  UnfazedAuthError,\n  UnfazedConfigError,\n  UnfazedGraphQLError,\n  UnfazedHTTPError,\n  UnfazedTimeoutError,\n  type GraphQLResponseError,\n} from \"./errors.js\";\n\n/** SDK version, sent as the User-Agent. Keep in sync with package.json. */\nexport const VERSION = \"0.6.1\";\n\n/**\n * Default GraphQL endpoint.\n *\n * Note this is the FULL endpoint, not an origin: the platform's own documented\n * convention (`UNFZ_API_URL=\"https://unfazed.dev/query\"`, and cmd/showcase-deploy\n * in the unfazed repo) treats the /query URL as the configurable unit, so the\n * SDK matches it rather than inventing a base-URL convention.\n */\nexport const DEFAULT_ENDPOINT = \"https://unfazed.dev/query\";\n\n/** Platform origin, used to derive the endpoint when only `baseUrl` is given. */\nexport const DEFAULT_BASE_URL = \"https://unfazed.dev\";\n\n/** Path of the GraphQL endpoint under an origin. */\nexport const GRAPHQL_PATH = \"/query\";\n\n/**\n * Environment variable holding the bearer token.\n *\n * This is the platform's documented name (docs/agent-deployments.md,\n * internal/agentdocs/reference.md). It accepts either an operator API token or\n * an agent access token from POST /agents/register — /query takes both as\n * plain bearers.\n */\nexport const TOKEN_ENV_VAR = \"UNFZ_API_TOKEN\";\n\n/** Environment variable holding the full GraphQL endpoint URL. */\nexport const ENDPOINT_ENV_VAR = \"UNFZ_API_URL\";\n\n/** Minimal structural type of the `fetch` the transport needs. */\nexport type FetchLike = (\n  input: string,\n  init: {\n    method: string;\n    headers: Record<string, string>;\n    body: string;\n    signal?: AbortSignal;\n  },\n) => Promise<{\n  ok: boolean;\n  status: number;\n  text(): Promise<string>;\n}>;\n\nexport interface ClientOptions {\n  /**\n   * Bearer token. Falls back to `UNFZ_API_TOKEN`, then to the login\n   * `npx unfazed login` stored (see {@link ClientOptions.login}). An agent gets\n   * one from https://unfazed.dev/auth.md — the same token the MCP server uses.\n   */\n  token?: string;\n  /**\n   * Use the stored login of `npx unfazed login`\n   * (`${XDG_CONFIG_HOME:-~/.config}/unfazed/credentials.json`) when no token\n   * is passed and `UNFZ_API_TOKEN` is unset. Its access token is refreshed\n   * before it expires and when the platform refuses it. Default `true`; it is\n   * only used for the endpoint it was issued by, and is the endpoint when none\n   * is configured.\n   */\n  login?: boolean;\n  /**\n   * Where `UNFZ_API_TOKEN`, `UNFZ_API_URL` and the stored login's location\n   * (`XDG_CONFIG_HOME`, `HOME`) are read from. Default: `process.env`.\n   */\n  env?: Record<string, string | undefined>;\n  /**\n   * Full GraphQL endpoint URL. Wins over `baseUrl`. Falls back to\n   * `UNFZ_API_URL`, then the stored login's endpoint, then\n   * {@link DEFAULT_ENDPOINT}.\n   */\n  endpoint?: string;\n  /**\n   * Platform origin; `/query` is appended. Convenience for self-hosted or\n   * staging control planes where only the host differs.\n   */\n  baseUrl?: string;\n  /** Extra headers merged into every request. Authorization always wins. */\n  headers?: Record<string, string>;\n  /**\n   * Per-request timeout in ms. Default 60_000. Pass 0 to disable.\n   *\n   * Bounds the WHOLE request — connect, headers and reading the response body —\n   * so a proxy that answers with headers and then stalls still fails on time.\n   */\n  timeoutMs?: number;\n  /** Injection point for tests and instrumented/proxied transports. */\n  fetch?: FetchLike;\n  /** Overrides the default `unfazed-sdk/<version>` User-Agent. */\n  userAgent?: string;\n}\n\n/**\n * A GraphQL document.\n *\n * Structural rather than `string & {...}` on purpose: graphql-codegen emits\n * `TypedDocumentString`, a String SUBCLASS, which is not assignable to the\n * primitive `string`. Requiring only `toString()` plus the optional phantom\n * `__apiType` lets three things through with full inference:\n *\n *  - generated `TypedDocumentString` documents (types inferred),\n *  - documents assembled at runtime, like the batched writeFiles mutation,\n *  - plain template-literal strings a caller wrote by hand.\n */\nexport interface GraphQLDocument<TResult, TVariables> {\n  /** Phantom type carrier. Never called; present only to bind the generics. */\n  __apiType?: (variables: TVariables) => TResult;\n  toString(): string;\n}\n\n/** Result type carried by a typed document. */\nexport type ResultOf<T> = T extends GraphQLDocument<infer R, infer _V> ? R : unknown;\n\n/** Variables type carried by a typed document. */\nexport type VariablesOf<T> = T extends GraphQLDocument<infer _R, infer V> ? V : never;\n\n/** Per-request knobs. */\nexport interface RequestOptions {\n  signal?: AbortSignal;\n  timeoutMs?: number;\n  operationName?: string;\n}\n\n/**\n * Layer 1 — a typed, dependency-free GraphQL transport over `fetch`.\n *\n * This is the SDK's entire networking surface. It understands auth, timeouts\n * and the GraphQL error envelope, and nothing about deployments. The workflow\n * layer ({@link import(\"./unfazed.js\").Unfazed}) is built strictly on top of\n * it, so you can always drop down here for any operation the workflow layer\n * does not wrap — the schema has ~660 fields and the workflow layer\n * deliberately covers only the agent-facing ones.\n *\n * ```ts\n * const client = new UnfazedClient();     // UNFZ_API_TOKEN, else `npx unfazed login`\n * const data = await client.query<{ whoami: { name: string } }, never>(\n *   `query { whoami { name } }`,\n * );\n * ```\n */\nexport class UnfazedClient {\n  /** Resolved GraphQL endpoint URL. */\n  readonly endpoint: string;\n\n  /** A fixed bearer token, or the stored login handing out refreshed ones. */\n  readonly #auth: { token: string } | { login: StoredLogin };\n  readonly #headers: Record<string, string>;\n  readonly #timeoutMs: number;\n  readonly #fetch: FetchLike;\n\n  constructor(options: ClientOptions = {}) {\n    const env = options.env ?? processEnv();\n\n    const injected = options.fetch;\n    if (injected) {\n      this.#fetch = injected;\n    } else {\n      const globalFetch = (globalThis as { fetch?: unknown }).fetch;\n      if (typeof globalFetch !== \"function\") {\n        throw new UnfazedConfigError(\n          \"unfazed: no global fetch. Use Bun, Node >= 20, or pass { fetch } to the client.\",\n        );\n      }\n      this.#fetch = globalFetch.bind(globalThis) as FetchLike;\n    }\n\n    const ua = options.userAgent ?? `unfazed-sdk/${VERSION}`;\n\n    const configured = configuredEndpoint(options, env);\n    const token = options.token ?? env[TOKEN_ENV_VAR];\n    if (token?.trim()) {\n      this.#auth = { token: token.trim() };\n      this.endpoint = configured ?? DEFAULT_ENDPOINT;\n    } else {\n      const stored =\n        options.login === false\n          ? {}\n          : openStoredLogin({\n              env,\n              ...(configured ? { endpoint: configured } : {}),\n              fetch: this.#fetch,\n              // The edge refuses some generic agents; always name ourselves.\n              userAgent: ua || `unfazed-sdk/${VERSION}`,\n            });\n      if (!stored.login) {\n        throw new UnfazedAuthError(noTokenMessage(configured, stored.other?.endpoint));\n      }\n      this.#auth = { login: stored.login };\n      this.endpoint = stored.login.endpoint;\n    }\n\n    this.#headers = { ...(options.headers ?? {}) };\n    this.#timeoutMs = options.timeoutMs ?? 60_000;\n    if (ua) this.#headers[\"User-Agent\"] = ua;\n  }\n\n  /**\n   * Where the bearer token comes from: `\"token\"` (passed or\n   * `UNFZ_API_TOKEN`) or `\"login\"` (the stored login of `npx unfazed login`).\n   */\n  get authSource(): \"token\" | \"login\" {\n    return \"login\" in this.#auth ? \"login\" : \"token\";\n  }\n\n  /** Runs a query document. Identical wire behaviour to {@link mutate}. */\n  query<TResult, TVariables>(\n    document: GraphQLDocument<TResult, TVariables>,\n    variables?: TVariables,\n    options?: RequestOptions,\n  ): Promise<TResult> {\n    return this.request(document, variables, options);\n  }\n\n  /**\n   * Runs a mutation document. Distinct from {@link query} for call-site\n   * readability only — GraphQL over HTTP POST makes no distinction.\n   */\n  mutate<TResult, TVariables>(\n    document: GraphQLDocument<TResult, TVariables>,\n    variables?: TVariables,\n    options?: RequestOptions,\n  ): Promise<TResult> {\n    return this.request(document, variables, options);\n  }\n\n  /**\n   * The single code path behind {@link query} and {@link mutate}.\n   *\n   * Throws {@link UnfazedHTTPError} on non-2xx, {@link UnfazedGraphQLError}\n   * when the body carries `errors`, {@link UnfazedTimeoutError} on timeout or\n   * abort. Resolves to the `data` object on success.\n   */\n  async request<TResult = unknown>(\n    document: string | { toString(): string },\n    variables?: unknown,\n    options: RequestOptions = {},\n  ): Promise<TResult> {\n    const timeoutMs = options.timeoutMs ?? this.#timeoutMs;\n\n    // `document` may be a TypedDocumentString (a String object). JSON.stringify\n    // would serialise that fine, but String(...) keeps the wire body a plain\n    // primitive regardless of how the caller obtained the document.\n    const body = JSON.stringify({\n      query: String(document),\n      ...(variables === undefined ? {} : { variables }),\n      ...(options.operationName ? { operationName: options.operationName } : {}),\n    });\n\n    let token = await this.#token();\n    let { response, text } = await this.#send(body, token, timeoutMs, options.signal);\n    // A stored login's access token can be refused before its recorded\n    // expiry (the clock, a sign-out elsewhere): refresh once and retry. A\n    // fixed token has nothing to refresh.\n    if (response.status === 401 && \"login\" in this.#auth) {\n      token = await this.#auth.login.refresh(token);\n      ({ response, text } = await this.#send(body, token, timeoutMs, options.signal));\n    }\n\n    if (!response.ok) {\n      throw new UnfazedHTTPError(response.status, text, this.endpoint);\n    }\n\n    let parsed: { data?: TResult; errors?: GraphQLResponseError[] };\n    try {\n      parsed = JSON.parse(text) as typeof parsed;\n    } catch {\n      throw new UnfazedHTTPError(response.status, text, this.endpoint);\n    }\n\n    // A GraphQL 200 can still be a failure, and can be a PARTIAL failure: the\n    // batched writeFiles document resolves each aliased field independently.\n    // Attaching `data` to the error is what lets a caller see which writes\n    // landed before the failing one.\n    if (parsed.errors?.length) {\n      throw new UnfazedGraphQLError(parsed.errors, parsed.data);\n    }\n    if (parsed.data === undefined || parsed.data === null) {\n      throw new UnfazedGraphQLError(\n        [{ message: \"response contained neither data nor errors\" }],\n        undefined,\n      );\n    }\n    return parsed.data;\n  }\n\n  #token(): Promise<string> {\n    return \"login\" in this.#auth ? this.#auth.login.token() : Promise.resolve(this.#auth.token);\n  }\n\n  async #send(\n    body: string,\n    token: string,\n    timeoutMs: number,\n    external: AbortSignal | undefined,\n  ): Promise<{ response: Awaited<ReturnType<FetchLike>>; text: string }> {\n    const { signal, cleanup, didTimeout } = makeSignal(timeoutMs, external);\n    // The deadline covers BOTH phases — headers AND body. A proxy that answers\n    // with headers and then stalls the body is a real failure mode, and\n    // stopping the clock at the end of `fetch()` would leave `response.text()`\n    // hanging forever. `untilAborted` additionally races the signal itself, so\n    // an injected transport that ignores `signal` still cannot outlive the\n    // timeout.\n    try {\n      const response = await untilAborted(\n        this.#fetch(this.endpoint, {\n          method: \"POST\",\n          headers: {\n            ...this.#headers,\n            \"Content-Type\": \"application/json\",\n            Accept: \"application/json\",\n            Authorization: `Bearer ${token}`,\n          },\n          body,\n          ...(signal ? { signal } : {}),\n        }),\n        signal,\n      );\n      const text = await untilAborted(response.text(), signal);\n      return { response, text };\n    } catch (cause) {\n      if (didTimeout()) {\n        throw new UnfazedTimeoutError(`unfazed: request timed out after ${timeoutMs}ms`, { cause });\n      }\n      if (isAbort(cause)) {\n        throw new UnfazedTimeoutError(\"unfazed: request aborted\", { cause });\n      }\n      throw cause;\n    } finally {\n      cleanup();\n    }\n  }\n}\n\n/** The endpoint the options or `UNFZ_API_URL` name, or undefined for the default. */\nfunction configuredEndpoint(options: ClientOptions, env: Record<string, string | undefined>): string | undefined {\n  if (options.endpoint) return options.endpoint;\n  if (options.baseUrl) return trimSlash(options.baseUrl) + GRAPHQL_PATH;\n  const fromEnv = env[ENDPOINT_ENV_VAR];\n  // UNFZ_API_URL is documented as the full /query URL and is used verbatim.\n  // Tolerate a bare origin anyway, since that is the obvious mistake and\n  // guessing right costs nothing.\n  if (fromEnv) {\n    const trimmed = trimSlash(fromEnv);\n    return /\\/query$|\\/graphql$/.test(trimmed) ? trimmed : trimmed + GRAPHQL_PATH;\n  }\n  return undefined;\n}\n\nfunction noTokenMessage(endpoint: string | undefined, otherLogin: string | undefined): string {\n  if (endpoint && otherLogin) {\n    return (\n      `unfazed: no API token for ${endpoint}: the stored login is for ${otherLogin}. ` +\n      `Run \\`${ENDPOINT_ENV_VAR}=${endpoint} ${LOGIN_COMMAND}\\`, or pass { token } / set ${TOKEN_ENV_VAR}.`\n    );\n  }\n  return (\n    `unfazed: not signed in. Run \\`${LOGIN_COMMAND}\\` to sign in with your account, ` +\n    `or pass { token } / set ${TOKEN_ENV_VAR} (an agent token: ${DEFAULT_BASE_URL}/auth.md).`\n  );\n}\n\nfunction processEnv(): Record<string, string | undefined> {\n  // Guarded: the SDK must also work in a browser or worker, where there is no\n  // `process` at all.\n  return (globalThis as { process?: { env?: Record<string, string | undefined> } }).process?.env ?? {};\n}\n\nfunction trimSlash(u: string): string {\n  return u.replace(/\\/+$/, \"\");\n}\n\nfunction isAbort(e: unknown): boolean {\n  return typeof e === \"object\" && e !== null && (e as { name?: string }).name === \"AbortError\";\n}\n\nfunction abortError(): Error {\n  const e = new Error(\"The operation was aborted.\");\n  e.name = \"AbortError\";\n  return e;\n}\n\n/**\n * Settles with `promise`, or rejects the moment `signal` aborts.\n *\n * A global `fetch` honours the signal for headers and body alike, but an\n * injected {@link FetchLike} — a proxy, an instrumented transport, a test\n * double — need not. Racing the signal makes the timeout an upper bound on the\n * whole request regardless of what the transport does with it. The loser's\n * rejection is swallowed by the already-settled promise rather than surfacing\n * as an unhandled rejection.\n */\nfunction untilAborted<T>(promise: Promise<T>, signal: AbortSignal | undefined): Promise<T> {\n  if (!signal) return promise;\n  if (signal.aborted) return Promise.reject(abortError());\n  return new Promise<T>((resolve, reject) => {\n    const onAbort = () => reject(abortError());\n    signal.addEventListener(\"abort\", onAbort, { once: true });\n    const done = () => signal.removeEventListener(\"abort\", onAbort);\n    promise.then(\n      (value) => {\n        done();\n        resolve(value);\n      },\n      (error: unknown) => {\n        done();\n        reject(error as Error);\n      },\n    );\n  });\n}\n\n/**\n * Combines the request timeout with any caller-supplied signal.\n *\n * `didTimeout` is tracked separately from the abort so a caller's own\n * cancellation is not mislabelled as a timeout in the thrown message.\n */\nfunction makeSignal(\n  timeoutMs: number,\n  external?: AbortSignal,\n): { signal?: AbortSignal; cleanup: () => void; didTimeout: () => boolean } {\n  if (!timeoutMs && !external) return { cleanup: () => {}, didTimeout: () => false };\n  if (typeof AbortController !== \"function\") {\n    return {\n      ...(external ? { signal: external } : {}),\n      cleanup: () => {},\n      didTimeout: () => false,\n    };\n  }\n\n  const controller = new AbortController();\n  let timedOut = false;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n\n  if (timeoutMs > 0) {\n    timer = setTimeout(() => {\n      timedOut = true;\n      controller.abort();\n    }, timeoutMs);\n  }\n\n  const onExternalAbort = () => controller.abort();\n  if (external) {\n    if (external.aborted) controller.abort();\n    else external.addEventListener(\"abort\", onExternalAbort, { once: true });\n  }\n\n  return {\n    signal: controller.signal,\n    cleanup: () => {\n      if (timer !== undefined) clearTimeout(timer);\n      external?.removeEventListener(\"abort\", onExternalAbort);\n    },\n    didTimeout: () => timedOut,\n  };\n}\n"]}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAoB,MAAM,kBAAkB,CAAC;AACpF,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,GAEpB,MAAM,aAAa,CAAC;AAErB,2EAA2E;AAC3E,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAE5D,iFAAiF;AACjF,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAEtD,oDAAoD;AACpD,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAE9C,kEAAkE;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAC;AA+F/C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,aAAa;IACxB,qCAAqC;IAC5B,QAAQ,CAAS;IAE1B,4EAA4E;IACnE,KAAK,CAA6C;IAClD,QAAQ,CAAyB;IACjC,UAAU,CAAS;IACnB,MAAM,CAAY;IAE3B,YAAY,UAAyB,EAAE;QACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC;QAExC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,MAAM,WAAW,GAAI,UAAkC,CAAC,KAAK,CAAC;YAC9D,IAAI,OAAO,WAAW,KAAK,UAAU,EAAE,CAAC;gBACtC,MAAM,IAAI,kBAAkB,CAC1B,iFAAiF,CAClF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAc,CAAC;QAC1D,CAAC;QAED,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,IAAI,eAAe,OAAO,EAAE,CAAC;QAEzD,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YAClB,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,GAAG,UAAU,IAAI,gBAAgB,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GACV,OAAO,CAAC,KAAK,KAAK,KAAK;gBACrB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,eAAe,CAAC;oBACd,GAAG;oBACH,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/C,KAAK,EAAE,IAAI,CAAC,MAAM;oBAClB,+DAA+D;oBAC/D,SAAS,EAAE,EAAE,IAAI,eAAe,OAAO,EAAE;iBAC1C,CAAC,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YACjF,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC9C,IAAI,EAAE;YAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,IAAI,UAAU;QACZ,OAAO,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACnD,CAAC;IAED,yEAAyE;IACzE,KAAK,CACH,QAA8C,EAC9C,SAAsB,EACtB,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,MAAM,CACJ,QAA8C,EAC9C,SAAsB,EACtB,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CACX,QAAyC,EACzC,SAAmB,EACnB,UAA0B,EAAE;QAE5B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC;QAEvD,4EAA4E;QAC5E,yEAAyE;QACzE,gEAAgE;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;YACvB,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;YACjD,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E,CAAC,CAAC;QAEH,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAClF,mEAAmE;QACnE,sEAAsE;QACtE,sCAAsC;QACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACrD,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9C,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,MAA2D,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnE,CAAC;QAED,0EAA0E;QAC1E,yEAAyE;QACzE,uEAAuE;QACvE,iCAAiC;QACjC,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACtD,MAAM,IAAI,mBAAmB,CAC3B,CAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,EAC3D,SAAS,CACV,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,MAAM;QACJ,OAAO,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,KAAK,CACT,IAAY,EACZ,KAAa,EACb,SAAiB,EACjB,QAAiC;QAEjC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACxE,2EAA2E;QAC3E,oEAAoE;QACpE,2EAA2E;QAC3E,2EAA2E;QAC3E,uEAAuE;QACvE,WAAW;QACX,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE;gBACzB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,GAAG,IAAI,CAAC,QAAQ;oBAChB,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,UAAU,KAAK,EAAE;iBACjC;gBACD,IAAI;gBACJ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC,EACF,MAAM,CACP,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;YACzD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,mBAAmB,CAAC,oCAAoC,SAAS,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnB,MAAM,IAAI,mBAAmB,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED,qFAAqF;AACrF,SAAS,kBAAkB,CAAC,OAAsB,EAAE,GAAuC;IACzF,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC;IAC9C,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC;IACtE,MAAM,OAAO,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACtC,0EAA0E;IAC1E,uEAAuE;IACvE,gCAAgC;IAChC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,YAAY,CAAC;IAChF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,QAA4B,EAAE,UAA8B;IAClF,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;QAC3B,OAAO,CACL,6BAA6B,QAAQ,6BAA6B,UAAU,IAAI;YAChF,SAAS,gBAAgB,IAAI,QAAQ,IAAI,aAAa,+BAA+B,aAAa,GAAG,CACtG,CAAC;IACJ,CAAC;IACD,OAAO,CACL,iCAAiC,aAAa,mCAAmC;QACjF,2BAA2B,aAAa,qBAAqB,gBAAgB,YAAY,CAC1F,CAAC;AACJ,CAAC;AAED,SAAS,UAAU;IACjB,4EAA4E;IAC5E,oBAAoB;IACpB,OAAQ,UAAyE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;AACvG,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,OAAO,CAAC,CAAU;IACzB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAK,CAAuB,CAAC,IAAI,KAAK,YAAY,CAAC;AAC/F,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAClD,CAAC,CAAC,IAAI,GAAG,YAAY,CAAC;IACtB,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,YAAY,CAAI,OAAmB,EAAE,MAA+B;IAC3E,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACxD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;YACR,IAAI,EAAE,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,IAAI,EAAE,CAAC;YACP,MAAM,CAAC,KAAc,CAAC,CAAC;QACzB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CACjB,SAAiB,EACjB,QAAsB;IAEtB,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;IACnF,IAAI,OAAO,eAAe,KAAK,UAAU,EAAE,CAAC;QAC1C,OAAO;YACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;YACjB,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK;SACxB,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,KAAgD,CAAC;IAErD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,QAAQ,GAAG,IAAI,CAAC;YAChB,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC;IAED,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACjD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,OAAO;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;;YACpC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO,EAAE,GAAG,EAAE;YACZ,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7C,QAAQ,EAAE,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC1D,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ;KAC3B,CAAC;AACJ,CAAC","sourcesContent":["import { LOGIN_COMMAND, openStoredLogin, type StoredLogin } from \"./credentials.js\";\nimport {\n  UnfazedAuthError,\n  UnfazedConfigError,\n  UnfazedGraphQLError,\n  UnfazedHTTPError,\n  UnfazedTimeoutError,\n  type GraphQLResponseError,\n} from \"./errors.js\";\n\n/** SDK version, sent as the User-Agent. Keep in sync with package.json. */\nexport const VERSION = \"0.8.0\";\n\n/**\n * Default GraphQL endpoint.\n *\n * Note this is the FULL endpoint, not an origin: the platform's own documented\n * convention (`UNFZ_API_URL=\"https://unfazed.dev/query\"`, and cmd/showcase-deploy\n * in the unfazed repo) treats the /query URL as the configurable unit, so the\n * SDK matches it rather than inventing a base-URL convention.\n */\nexport const DEFAULT_ENDPOINT = \"https://unfazed.dev/query\";\n\n/** Platform origin, used to derive the endpoint when only `baseUrl` is given. */\nexport const DEFAULT_BASE_URL = \"https://unfazed.dev\";\n\n/** Path of the GraphQL endpoint under an origin. */\nexport const GRAPHQL_PATH = \"/query\";\n\n/**\n * Environment variable holding the bearer token.\n *\n * This is the platform's documented name (docs/agent-deployments.md,\n * internal/agentdocs/reference.md). It accepts either an operator API token or\n * an agent access token from POST /agents/register — /query takes both as\n * plain bearers.\n */\nexport const TOKEN_ENV_VAR = \"UNFZ_API_TOKEN\";\n\n/** Environment variable holding the full GraphQL endpoint URL. */\nexport const ENDPOINT_ENV_VAR = \"UNFZ_API_URL\";\n\n/** Minimal structural type of the `fetch` the transport needs. */\nexport type FetchLike = (\n  input: string,\n  init: {\n    method: string;\n    headers: Record<string, string>;\n    body: string;\n    signal?: AbortSignal;\n  },\n) => Promise<{\n  ok: boolean;\n  status: number;\n  text(): Promise<string>;\n}>;\n\nexport interface ClientOptions {\n  /**\n   * Bearer token. Falls back to `UNFZ_API_TOKEN`, then to the login\n   * `npx unfazed login` stored (see {@link ClientOptions.login}). An agent gets\n   * one from https://unfazed.dev/auth.md — the same token the MCP server uses.\n   */\n  token?: string;\n  /**\n   * Use the stored login of `npx unfazed login`\n   * (`${XDG_CONFIG_HOME:-~/.config}/unfazed/credentials.json`) when no token\n   * is passed and `UNFZ_API_TOKEN` is unset. Its access token is refreshed\n   * before it expires and when the platform refuses it. Default `true`; it is\n   * only used for the endpoint it was issued by, and is the endpoint when none\n   * is configured.\n   */\n  login?: boolean;\n  /**\n   * Where `UNFZ_API_TOKEN`, `UNFZ_API_URL` and the stored login's location\n   * (`XDG_CONFIG_HOME`, `HOME`) are read from. Default: `process.env`.\n   */\n  env?: Record<string, string | undefined>;\n  /**\n   * Full GraphQL endpoint URL. Wins over `baseUrl`. Falls back to\n   * `UNFZ_API_URL`, then the stored login's endpoint, then\n   * {@link DEFAULT_ENDPOINT}.\n   */\n  endpoint?: string;\n  /**\n   * Platform origin; `/query` is appended. Convenience for self-hosted or\n   * staging control planes where only the host differs.\n   */\n  baseUrl?: string;\n  /** Extra headers merged into every request. Authorization always wins. */\n  headers?: Record<string, string>;\n  /**\n   * Per-request timeout in ms. Default 60_000. Pass 0 to disable.\n   *\n   * Bounds the WHOLE request — connect, headers and reading the response body —\n   * so a proxy that answers with headers and then stalls still fails on time.\n   */\n  timeoutMs?: number;\n  /** Injection point for tests and instrumented/proxied transports. */\n  fetch?: FetchLike;\n  /** Overrides the default `unfazed-sdk/<version>` User-Agent. */\n  userAgent?: string;\n}\n\n/**\n * A GraphQL document.\n *\n * Structural rather than `string & {...}` on purpose: graphql-codegen emits\n * `TypedDocumentString`, a String SUBCLASS, which is not assignable to the\n * primitive `string`. Requiring only `toString()` plus the optional phantom\n * `__apiType` lets three things through with full inference:\n *\n *  - generated `TypedDocumentString` documents (types inferred),\n *  - documents assembled at runtime, like the batched writeFiles mutation,\n *  - plain template-literal strings a caller wrote by hand.\n */\nexport interface GraphQLDocument<TResult, TVariables> {\n  /** Phantom type carrier. Never called; present only to bind the generics. */\n  __apiType?: (variables: TVariables) => TResult;\n  toString(): string;\n}\n\n/** Result type carried by a typed document. */\nexport type ResultOf<T> = T extends GraphQLDocument<infer R, infer _V> ? R : unknown;\n\n/** Variables type carried by a typed document. */\nexport type VariablesOf<T> = T extends GraphQLDocument<infer _R, infer V> ? V : never;\n\n/** Per-request knobs. */\nexport interface RequestOptions {\n  signal?: AbortSignal;\n  timeoutMs?: number;\n  operationName?: string;\n}\n\n/**\n * Layer 1 — a typed, dependency-free GraphQL transport over `fetch`.\n *\n * This is the SDK's entire networking surface. It understands auth, timeouts\n * and the GraphQL error envelope, and nothing about deployments. The workflow\n * layer ({@link import(\"./unfazed.js\").Unfazed}) is built strictly on top of\n * it, so you can always drop down here for any operation the workflow layer\n * does not wrap — the schema has ~660 fields and the workflow layer\n * deliberately covers only the agent-facing ones.\n *\n * ```ts\n * const client = new UnfazedClient();     // UNFZ_API_TOKEN, else `npx unfazed login`\n * const data = await client.query<{ whoami: { name: string } }, never>(\n *   `query { whoami { name } }`,\n * );\n * ```\n */\nexport class UnfazedClient {\n  /** Resolved GraphQL endpoint URL. */\n  readonly endpoint: string;\n\n  /** A fixed bearer token, or the stored login handing out refreshed ones. */\n  readonly #auth: { token: string } | { login: StoredLogin };\n  readonly #headers: Record<string, string>;\n  readonly #timeoutMs: number;\n  readonly #fetch: FetchLike;\n\n  constructor(options: ClientOptions = {}) {\n    const env = options.env ?? processEnv();\n\n    const injected = options.fetch;\n    if (injected) {\n      this.#fetch = injected;\n    } else {\n      const globalFetch = (globalThis as { fetch?: unknown }).fetch;\n      if (typeof globalFetch !== \"function\") {\n        throw new UnfazedConfigError(\n          \"unfazed: no global fetch. Use Bun, Node >= 20, or pass { fetch } to the client.\",\n        );\n      }\n      this.#fetch = globalFetch.bind(globalThis) as FetchLike;\n    }\n\n    const ua = options.userAgent ?? `unfazed-sdk/${VERSION}`;\n\n    const configured = configuredEndpoint(options, env);\n    const token = options.token ?? env[TOKEN_ENV_VAR];\n    if (token?.trim()) {\n      this.#auth = { token: token.trim() };\n      this.endpoint = configured ?? DEFAULT_ENDPOINT;\n    } else {\n      const stored =\n        options.login === false\n          ? {}\n          : openStoredLogin({\n              env,\n              ...(configured ? { endpoint: configured } : {}),\n              fetch: this.#fetch,\n              // The edge refuses some generic agents; always name ourselves.\n              userAgent: ua || `unfazed-sdk/${VERSION}`,\n            });\n      if (!stored.login) {\n        throw new UnfazedAuthError(noTokenMessage(configured, stored.other?.endpoint));\n      }\n      this.#auth = { login: stored.login };\n      this.endpoint = stored.login.endpoint;\n    }\n\n    this.#headers = { ...(options.headers ?? {}) };\n    this.#timeoutMs = options.timeoutMs ?? 60_000;\n    if (ua) this.#headers[\"User-Agent\"] = ua;\n  }\n\n  /**\n   * Where the bearer token comes from: `\"token\"` (passed or\n   * `UNFZ_API_TOKEN`) or `\"login\"` (the stored login of `npx unfazed login`).\n   */\n  get authSource(): \"token\" | \"login\" {\n    return \"login\" in this.#auth ? \"login\" : \"token\";\n  }\n\n  /** Runs a query document. Identical wire behaviour to {@link mutate}. */\n  query<TResult, TVariables>(\n    document: GraphQLDocument<TResult, TVariables>,\n    variables?: TVariables,\n    options?: RequestOptions,\n  ): Promise<TResult> {\n    return this.request(document, variables, options);\n  }\n\n  /**\n   * Runs a mutation document. Distinct from {@link query} for call-site\n   * readability only — GraphQL over HTTP POST makes no distinction.\n   */\n  mutate<TResult, TVariables>(\n    document: GraphQLDocument<TResult, TVariables>,\n    variables?: TVariables,\n    options?: RequestOptions,\n  ): Promise<TResult> {\n    return this.request(document, variables, options);\n  }\n\n  /**\n   * The single code path behind {@link query} and {@link mutate}.\n   *\n   * Throws {@link UnfazedHTTPError} on non-2xx, {@link UnfazedGraphQLError}\n   * when the body carries `errors`, {@link UnfazedTimeoutError} on timeout or\n   * abort. Resolves to the `data` object on success.\n   */\n  async request<TResult = unknown>(\n    document: string | { toString(): string },\n    variables?: unknown,\n    options: RequestOptions = {},\n  ): Promise<TResult> {\n    const timeoutMs = options.timeoutMs ?? this.#timeoutMs;\n\n    // `document` may be a TypedDocumentString (a String object). JSON.stringify\n    // would serialise that fine, but String(...) keeps the wire body a plain\n    // primitive regardless of how the caller obtained the document.\n    const body = JSON.stringify({\n      query: String(document),\n      ...(variables === undefined ? {} : { variables }),\n      ...(options.operationName ? { operationName: options.operationName } : {}),\n    });\n\n    let token = await this.#token();\n    let { response, text } = await this.#send(body, token, timeoutMs, options.signal);\n    // A stored login's access token can be refused before its recorded\n    // expiry (the clock, a sign-out elsewhere): refresh once and retry. A\n    // fixed token has nothing to refresh.\n    if (response.status === 401 && \"login\" in this.#auth) {\n      token = await this.#auth.login.refresh(token);\n      ({ response, text } = await this.#send(body, token, timeoutMs, options.signal));\n    }\n\n    if (!response.ok) {\n      throw new UnfazedHTTPError(response.status, text, this.endpoint);\n    }\n\n    let parsed: { data?: TResult; errors?: GraphQLResponseError[] };\n    try {\n      parsed = JSON.parse(text) as typeof parsed;\n    } catch {\n      throw new UnfazedHTTPError(response.status, text, this.endpoint);\n    }\n\n    // A GraphQL 200 can still be a failure, and can be a PARTIAL failure: the\n    // batched writeFiles document resolves each aliased field independently.\n    // Attaching `data` to the error is what lets a caller see which writes\n    // landed before the failing one.\n    if (parsed.errors?.length) {\n      throw new UnfazedGraphQLError(parsed.errors, parsed.data);\n    }\n    if (parsed.data === undefined || parsed.data === null) {\n      throw new UnfazedGraphQLError(\n        [{ message: \"response contained neither data nor errors\" }],\n        undefined,\n      );\n    }\n    return parsed.data;\n  }\n\n  #token(): Promise<string> {\n    return \"login\" in this.#auth ? this.#auth.login.token() : Promise.resolve(this.#auth.token);\n  }\n\n  async #send(\n    body: string,\n    token: string,\n    timeoutMs: number,\n    external: AbortSignal | undefined,\n  ): Promise<{ response: Awaited<ReturnType<FetchLike>>; text: string }> {\n    const { signal, cleanup, didTimeout } = makeSignal(timeoutMs, external);\n    // The deadline covers BOTH phases — headers AND body. A proxy that answers\n    // with headers and then stalls the body is a real failure mode, and\n    // stopping the clock at the end of `fetch()` would leave `response.text()`\n    // hanging forever. `untilAborted` additionally races the signal itself, so\n    // an injected transport that ignores `signal` still cannot outlive the\n    // timeout.\n    try {\n      const response = await untilAborted(\n        this.#fetch(this.endpoint, {\n          method: \"POST\",\n          headers: {\n            ...this.#headers,\n            \"Content-Type\": \"application/json\",\n            Accept: \"application/json\",\n            Authorization: `Bearer ${token}`,\n          },\n          body,\n          ...(signal ? { signal } : {}),\n        }),\n        signal,\n      );\n      const text = await untilAborted(response.text(), signal);\n      return { response, text };\n    } catch (cause) {\n      if (didTimeout()) {\n        throw new UnfazedTimeoutError(`unfazed: request timed out after ${timeoutMs}ms`, { cause });\n      }\n      if (isAbort(cause)) {\n        throw new UnfazedTimeoutError(\"unfazed: request aborted\", { cause });\n      }\n      throw cause;\n    } finally {\n      cleanup();\n    }\n  }\n}\n\n/** The endpoint the options or `UNFZ_API_URL` name, or undefined for the default. */\nfunction configuredEndpoint(options: ClientOptions, env: Record<string, string | undefined>): string | undefined {\n  if (options.endpoint) return options.endpoint;\n  if (options.baseUrl) return trimSlash(options.baseUrl) + GRAPHQL_PATH;\n  const fromEnv = env[ENDPOINT_ENV_VAR];\n  // UNFZ_API_URL is documented as the full /query URL and is used verbatim.\n  // Tolerate a bare origin anyway, since that is the obvious mistake and\n  // guessing right costs nothing.\n  if (fromEnv) {\n    const trimmed = trimSlash(fromEnv);\n    return /\\/query$|\\/graphql$/.test(trimmed) ? trimmed : trimmed + GRAPHQL_PATH;\n  }\n  return undefined;\n}\n\nfunction noTokenMessage(endpoint: string | undefined, otherLogin: string | undefined): string {\n  if (endpoint && otherLogin) {\n    return (\n      `unfazed: no API token for ${endpoint}: the stored login is for ${otherLogin}. ` +\n      `Run \\`${ENDPOINT_ENV_VAR}=${endpoint} ${LOGIN_COMMAND}\\`, or pass { token } / set ${TOKEN_ENV_VAR}.`\n    );\n  }\n  return (\n    `unfazed: not signed in. Run \\`${LOGIN_COMMAND}\\` to sign in with your account, ` +\n    `or pass { token } / set ${TOKEN_ENV_VAR} (an agent token: ${DEFAULT_BASE_URL}/auth.md).`\n  );\n}\n\nfunction processEnv(): Record<string, string | undefined> {\n  // Guarded: the SDK must also work in a browser or worker, where there is no\n  // `process` at all.\n  return (globalThis as { process?: { env?: Record<string, string | undefined> } }).process?.env ?? {};\n}\n\nfunction trimSlash(u: string): string {\n  return u.replace(/\\/+$/, \"\");\n}\n\nfunction isAbort(e: unknown): boolean {\n  return typeof e === \"object\" && e !== null && (e as { name?: string }).name === \"AbortError\";\n}\n\nfunction abortError(): Error {\n  const e = new Error(\"The operation was aborted.\");\n  e.name = \"AbortError\";\n  return e;\n}\n\n/**\n * Settles with `promise`, or rejects the moment `signal` aborts.\n *\n * A global `fetch` honours the signal for headers and body alike, but an\n * injected {@link FetchLike} — a proxy, an instrumented transport, a test\n * double — need not. Racing the signal makes the timeout an upper bound on the\n * whole request regardless of what the transport does with it. The loser's\n * rejection is swallowed by the already-settled promise rather than surfacing\n * as an unhandled rejection.\n */\nfunction untilAborted<T>(promise: Promise<T>, signal: AbortSignal | undefined): Promise<T> {\n  if (!signal) return promise;\n  if (signal.aborted) return Promise.reject(abortError());\n  return new Promise<T>((resolve, reject) => {\n    const onAbort = () => reject(abortError());\n    signal.addEventListener(\"abort\", onAbort, { once: true });\n    const done = () => signal.removeEventListener(\"abort\", onAbort);\n    promise.then(\n      (value) => {\n        done();\n        resolve(value);\n      },\n      (error: unknown) => {\n        done();\n        reject(error as Error);\n      },\n    );\n  });\n}\n\n/**\n * Combines the request timeout with any caller-supplied signal.\n *\n * `didTimeout` is tracked separately from the abort so a caller's own\n * cancellation is not mislabelled as a timeout in the thrown message.\n */\nfunction makeSignal(\n  timeoutMs: number,\n  external?: AbortSignal,\n): { signal?: AbortSignal; cleanup: () => void; didTimeout: () => boolean } {\n  if (!timeoutMs && !external) return { cleanup: () => {}, didTimeout: () => false };\n  if (typeof AbortController !== \"function\") {\n    return {\n      ...(external ? { signal: external } : {}),\n      cleanup: () => {},\n      didTimeout: () => false,\n    };\n  }\n\n  const controller = new AbortController();\n  let timedOut = false;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n\n  if (timeoutMs > 0) {\n    timer = setTimeout(() => {\n      timedOut = true;\n      controller.abort();\n    }, timeoutMs);\n  }\n\n  const onExternalAbort = () => controller.abort();\n  if (external) {\n    if (external.aborted) controller.abort();\n    else external.addEventListener(\"abort\", onExternalAbort, { once: true });\n  }\n\n  return {\n    signal: controller.signal,\n    cleanup: () => {\n      if (timer !== undefined) clearTimeout(timer);\n      external?.removeEventListener(\"abort\", onExternalAbort);\n    },\n    didTimeout: () => timedOut,\n  };\n}\n"]}

package/dist/errors.d.ts

@@ -45,9 +45,66 @@ export declare class UnfazedGraphQLError extends UnfazedError {
     readonly data: unknown;
     constructor(errors: GraphQLResponseError[], data: unknown);
 }
+/**
+ * The server refused a delete that would take apps offline without the call
+ * naming exactly those apps, and deleted nothing.
+ *
+ * `deleteWorkspace` with `withDeployments` takes down every app the workspace
+ * serves, so its `confirmAliases` must equal the workspace's live apps — no
+ * more, no fewer. A missing or extra alias, or an app that went live after the
+ * check, is refused. The message is the server's, verbatim: it lists each live
+ * app with its custom domains and says how to name them. Look the apps up
+ * deliberately with `unfazed.liveApps(workspaceId)`, decide, and delete again,
+ * or delete one app with `unfazed.deleteApp`.
+ *
+ * Still an {@link UnfazedGraphQLError}, so existing `catch` sites keep matching.
+ */
+export declare class UnfazedUnconfirmedAppsError extends UnfazedGraphQLError {
+    /** The workspace whose delete was refused. */
+    readonly workspaceId: string;
+    /** The aliases the refused call named. */
+    readonly confirmAliases: readonly string[];
+    constructor(workspaceId: string, confirmAliases: readonly string[], errors: GraphQLResponseError[], data: unknown);
+}
+/** Did the server refuse a delete because the named apps are not exactly the live ones? */
+export declare function isUnconfirmedAppsRefusal(error: unknown): error is UnfazedGraphQLError;
 /** A request exceeded `timeoutMs`, or the caller's AbortSignal fired. */
 export declare class UnfazedTimeoutError extends UnfazedError {
 }
+/**
+ * `writeFiles` wrote some files and not others.
+ *
+ * Writes are not transactional, exactly as MCP `write_workspace_files`: the
+ * files listed in `result.files` with `ok: true` ARE written (and, on an app
+ * with platform git, committed), the others are not. `result` is the whole
+ * answer, `failed` names the paths that did not land and why. Retry only
+ * those paths. Pass `allowPartial: true` to get the result instead of this
+ * error.
+ */
+export declare class UnfazedWriteError extends UnfazedError {
+    /** What the call wrote: every file's outcome and the commit. */
+    readonly result: unknown;
+    /** The paths that were not written, with the server's reason. */
+    readonly failed: {
+        path: string;
+        error: string;
+    }[];
+    constructor(result: unknown, failed: {
+        path: string;
+        error: string;
+    }[]);
+}
+/**
+ * Did the platform refuse a long wait because the caller (or the server) has
+ * too many in progress? Nothing was waited on; polling is the way on.
+ */
+export declare function isTooManyWaits(error: unknown): boolean;
+/**
+ * Did the server refuse the document because it does not know `field` (a
+ * platform older than this SDK)? The SDK uses it to fall back to the older
+ * way of doing the same thing, never to hide a real error.
+ */
+export declare function isUnsupportedField(error: unknown, field: string): boolean;
 /**
  * Waiting on a deploy ended badly.
  *
@@ -143,6 +200,13 @@ export declare const DEPLOYMENT_NOT_FOUND = "deployment was not found";
  * anything else is a genuine error and must keep throwing.
  */
 export declare function isNotFoundSentinel(error: unknown, sentinel: string): boolean;
+/**
+ * Does this error say that exactly `alias` is not an app of the workspace?
+ *
+ * The workspace name in the message varies, so this matches the shape, then
+ * the alias itself: a refusal about a different alias still throws.
+ */
+export declare function isAppNotFound(error: unknown, alias: string): boolean;
 /** Did `createWorkspace` fail because the name is already taken by this owner? */
 export declare function isDuplicateWorkspaceName(error: unknown): boolean;
 /**

package/dist/errors.js

@@ -49,9 +49,88 @@ export class UnfazedGraphQLError extends UnfazedError {
         this.data = data;
     }
 }
+/**
+ * The server refused a delete that would take apps offline without the call
+ * naming exactly those apps, and deleted nothing.
+ *
+ * `deleteWorkspace` with `withDeployments` takes down every app the workspace
+ * serves, so its `confirmAliases` must equal the workspace's live apps — no
+ * more, no fewer. A missing or extra alias, or an app that went live after the
+ * check, is refused. The message is the server's, verbatim: it lists each live
+ * app with its custom domains and says how to name them. Look the apps up
+ * deliberately with `unfazed.liveApps(workspaceId)`, decide, and delete again,
+ * or delete one app with `unfazed.deleteApp`.
+ *
+ * Still an {@link UnfazedGraphQLError}, so existing `catch` sites keep matching.
+ */
+export class UnfazedUnconfirmedAppsError extends UnfazedGraphQLError {
+    /** The workspace whose delete was refused. */
+    workspaceId;
+    /** The aliases the refused call named. */
+    confirmAliases;
+    constructor(workspaceId, confirmAliases, errors, data) {
+        super(errors, data);
+        this.workspaceId = workspaceId;
+        this.confirmAliases = confirmAliases;
+    }
+}
+/**
+ * How the server opens every refusal of a delete whose named apps do not match
+ * the live ones (usecases.UnconfirmedAppsError, and the race where an app went
+ * live after the check). Anchored at the start, so a message that merely
+ * mentions the phrase is not mistaken for one.
+ */
+const NOTHING_WAS_DELETED = /^nothing was deleted:/i;
+/** Did the server refuse a delete because the named apps are not exactly the live ones? */
+export function isUnconfirmedAppsRefusal(error) {
+    return (error instanceof UnfazedGraphQLError &&
+        error.errors.some((e) => NOTHING_WAS_DELETED.test(e.message.trim())));
+}
 /** A request exceeded `timeoutMs`, or the caller's AbortSignal fired. */
 export class UnfazedTimeoutError extends UnfazedError {
 }
+/**
+ * `writeFiles` wrote some files and not others.
+ *
+ * Writes are not transactional, exactly as MCP `write_workspace_files`: the
+ * files listed in `result.files` with `ok: true` ARE written (and, on an app
+ * with platform git, committed), the others are not. `result` is the whole
+ * answer, `failed` names the paths that did not land and why. Retry only
+ * those paths. Pass `allowPartial: true` to get the result instead of this
+ * error.
+ */
+export class UnfazedWriteError extends UnfazedError {
+    /** What the call wrote: every file's outcome and the commit. */
+    result;
+    /** The paths that were not written, with the server's reason. */
+    failed;
+    constructor(result, failed) {
+        super(`unfazed: ${failed.length} file(s) were not written (the others were): ` +
+            failed.map((f) => `${f.path}: ${f.error}`).join("; "));
+        this.result = result;
+        this.failed = failed;
+    }
+}
+/**
+ * Did the platform refuse a long wait because the caller (or the server) has
+ * too many in progress? Nothing was waited on; polling is the way on.
+ */
+export function isTooManyWaits(error) {
+    return (error instanceof UnfazedGraphQLError &&
+        error.errors.some((e) => /waits in progress|long wait per operation/i.test(e.message)));
+}
+/**
+ * Did the server refuse the document because it does not know `field` (a
+ * platform older than this SDK)? The SDK uses it to fall back to the older
+ * way of doing the same thing, never to hide a real error.
+ */
+export function isUnsupportedField(error, field) {
+    if (!(error instanceof UnfazedGraphQLError))
+        return false;
+    const quoted = `"${field}"`;
+    return error.errors.some((e) => e.message.includes(quoted) &&
+        /Cannot query field|is not defined by type|Unknown argument|Unknown type|not defined on/i.test(e.message));
+}
 /**
  * Waiting on a deploy ended badly.
  *
@@ -163,6 +242,22 @@ export function isNotFoundSentinel(error, sentinel) {
     return (error instanceof UnfazedGraphQLError &&
         error.errors.some((e) => e.message.trim() === sentinel));
 }
+/**
+ * The server's "no such app here" refusal of `deleteApp`:
+ * `app "<alias>" was not found in workspace "<workspace name>"`. Anchored at
+ * both ends, like the exact sentinels above.
+ */
+const APP_NOT_FOUND = /^app "(.+)" was not found in workspace ".*"$/;
+/**
+ * Does this error say that exactly `alias` is not an app of the workspace?
+ *
+ * The workspace name in the message varies, so this matches the shape, then
+ * the alias itself: a refusal about a different alias still throws.
+ */
+export function isAppNotFound(error, alias) {
+    return (error instanceof UnfazedGraphQLError &&
+        error.errors.some((e) => APP_NOT_FOUND.exec(e.message.trim())?.[1] === alias.trim()));
+}
 /**
  * Message shape of the server's per-owner duplicate workspace name error:
  * `a workspace named "x" already exists; reuse it (id <uuid>) or pick a