src/internal/xrpc/transport.zig was lifted into zat.dev/zttp and has been hardened there since; zat.HttpTransport is now an alias of zttp.Client, pinned at a34cf9d. call-site changes: redirect_behavior becomes on_redirect (.refuse for identity and DoH lookups, .surface for oauth discovery), oauth reads captured headers by name, the xrpc layer sets application/json itself, and zat's clients name zat in the user-agent through initWithUserAgent. the transport's tests moved with it, so the suite drops from 583 to 568.
Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com Claude-Session: https://claude.ai/code/session_01SazQrd1zwpEFNoJJoLjwGm