@bleedingdev/modern-js-create-request 3.8.3-ultramodern.6 → 3.9.0-ultramodern.10

package/dist/esm-node/requestFactory.mjs

@@ -1,151 +1,54 @@
 import "node:module";
 import { compile } from "path-to-regexp";
 import { stringify } from "qs";
-import { IdentityBindingViolationError, ProducerDomainNotConfiguredError, TRACEPARENT_HEADER, attachOperationContextHeaders, buildEnvelopeHeaderValue, deleteHeader, extractPathParamNames, firstHeaderValue, isEmptyDomain, isSecuredRequestId, parseTraceparentValue, readHeader, resolveConfiguredRequest, toOrigin, writeHeader } from "./policyCore.mjs";
-import { executeWithResilience } from "./transport.mjs";
-import { BFF_DEFAULT_PROTECTED_IDENTITY_HEADERS, BFF_ENVELOPE_HEADER, BFF_OPERATION_CONTEXT_DETAIL_HEADER, BFF_OPERATION_CONTEXT_HEADER } from "./types.mjs";
+import { readHeader, writeHeader } from "./headers.mjs";
 import { getUploadPayload } from "./utiles.mjs";
-const OPERATION_CONTEXT_DETAIL_HEADER = BFF_OPERATION_CONTEXT_DETAIL_HEADER;
+const extractPathParamNames = (path)=>Array.from(path.matchAll(/:([A-Za-z0-9_]+)/g)).flatMap(([, key])=>key ? [
+            key
+        ] : []);
 const createRequestFactory = (environment)=>{
     const isServerTarget = 'server' === environment.target;
     const realRequest = new Map();
     const realAllowedHeaders = new Map();
-    const realResolveHeaders = new Map();
-    const realRequireEnvelope = new Map();
-    const realAllowCrossOriginEnvelope = new Map();
-    const realTransportResilience = new Map();
-    const realIdentityBinding = new Map();
-    const realOperationContract = new Map();
     const domainMap = new Map();
-    const attachEnvelopeHeaderIfRequired = (headers, requestId, url, incomingHeaders)=>{
-        const shouldRequireEnvelope = realRequireEnvelope.get(requestId) ?? isSecuredRequestId(requestId);
-        if (!shouldRequireEnvelope) return;
-        headers[BFF_ENVELOPE_HEADER] = buildEnvelopeHeaderValue({
+    const startRequest = (requestId, hooks)=>{
+        const context = {
             requestId,
             target: environment.target,
-            sourceOrigin: environment.resolveSourceOrigin(incomingHeaders),
-            targetOrigin: toOrigin(url),
-            traceContext: parseTraceparentValue(readHeader(headers, TRACEPARENT_HEADER)),
-            allowCrossOriginEnvelope: realAllowCrossOriginEnvelope.get(requestId)
-        });
-    };
-    const attachSecuredOperationHeaders = (headers, requestId, method, path, operationContext)=>{
-        if (!isSecuredRequestId(requestId)) return;
-        attachOperationContextHeaders({
-            headers,
-            requestId,
-            target: environment.target,
-            method,
-            path,
-            operationContext,
-            operationContract: realOperationContract.get(requestId),
-            operationContextHeader: BFF_OPERATION_CONTEXT_HEADER,
-            operationContextDetailHeader: OPERATION_CONTEXT_DETAIL_HEADER
-        });
+            incomingHeaders: environment.readIncomingHeaders(),
+            configured: realRequest.has(requestId),
+            configuredDomain: domainMap.get(requestId)
+        };
+        hooks?.onStart?.(context);
+        return context;
     };
-    const applyIdentityAndForwardedHeaders = (headers, requestId, incomingHeaders)=>{
-        const identityBinding = realIdentityBinding.get(requestId);
-        const identityBindingEnabled = identityBinding?.enabled ?? isSecuredRequestId(requestId);
-        const identityBindingStrict = identityBinding?.strict ?? isSecuredRequestId(requestId);
-        const protectedIdentityHeaders = (identityBinding?.protectedHeaders || BFF_DEFAULT_PROTECTED_IDENTITY_HEADERS).map((header)=>header.toLowerCase());
-        const targetAllowedHeaders = realAllowedHeaders.get(requestId) || [];
+    const prepareHeaders = (headers, context, hooks)=>{
+        const allowedHeaders = realAllowedHeaders.get(context.requestId) || [];
         const forwardedHeaders = {};
-        if (isServerTarget) for (const key of targetAllowedHeaders){
-            const incomingValue = readHeader(incomingHeaders, key);
-            if (void 0 !== incomingValue) writeHeader(forwardedHeaders, key, incomingValue);
-        }
-        if (identityBindingEnabled) {
-            const derivedIdentityHeaders = {};
-            if (isServerTarget) for (const header of protectedIdentityHeaders){
-                const incomingHeaderValue = readHeader(incomingHeaders, header);
-                if (void 0 !== incomingHeaderValue) writeHeader(derivedIdentityHeaders, header, incomingHeaderValue);
-            }
-            const customDerivedHeaders = identityBinding?.deriveHeaders?.({
-                requestId,
-                target: environment.target,
-                incomingHeaders: isServerTarget ? {
-                    ...incomingHeaders
-                } : {},
-                protectedHeaders: [
-                    ...protectedIdentityHeaders
-                ]
-            });
-            if (customDerivedHeaders && 'object' == typeof customDerivedHeaders) for (const header of protectedIdentityHeaders){
-                const customValue = readHeader(customDerivedHeaders, header);
-                if (void 0 !== customValue) writeHeader(derivedIdentityHeaders, header, customValue);
-            }
-            for (const header of protectedIdentityHeaders){
-                const attemptedValue = readHeader(headers, header);
-                if (void 0 === attemptedValue) continue;
-                const violation = {
-                    requestId,
-                    target: environment.target,
-                    header,
-                    attemptedValue,
-                    derivedValue: readHeader(derivedIdentityHeaders, header),
-                    reason: 'client_override_blocked'
-                };
-                identityBinding?.onViolation?.(violation);
-                if (identityBindingStrict) throw new IdentityBindingViolationError(violation);
-                deleteHeader(headers, header);
-            }
-            Object.keys(derivedIdentityHeaders).forEach((header)=>{
-                isServerTarget ? writeHeader(forwardedHeaders, header, derivedIdentityHeaders[header]) : writeHeader(headers, header, derivedIdentityHeaders[header]);
-            });
-        }
-        if (isServerTarget) {
-            const resolveHeaders = realResolveHeaders.get(requestId);
-            if (resolveHeaders) {
-                const resolvedHeaders = resolveHeaders({
-                    requestId,
-                    allowedHeaders: targetAllowedHeaders,
-                    incomingHeaders: {
-                        ...forwardedHeaders
-                    }
-                });
-                if (resolvedHeaders && 'object' == typeof resolvedHeaders) for (const key of targetAllowedHeaders){
-                    const resolvedValue = readHeader(resolvedHeaders, key);
-                    if (void 0 !== resolvedValue) {
-                        if (identityBindingEnabled && protectedIdentityHeaders.includes(key.toLowerCase())) {
-                            writeHeader(forwardedHeaders, key.toLowerCase(), resolvedValue);
-                            continue;
-                        }
-                        writeHeader(forwardedHeaders, key, resolvedValue);
-                    }
-                }
-            }
+        if (isServerTarget) for (const key of allowedHeaders){
+            const value = readHeader(context.incomingHeaders, key);
+            if (void 0 !== value) writeHeader(forwardedHeaders, key, value);
         }
+        hooks?.prepareHeaders?.({
+            ...context,
+            headers,
+            forwardedHeaders,
+            allowedHeaders
+        });
         if (isServerTarget) for (const [header, value] of Object.entries(forwardedHeaders))writeHeader(headers, header, value);
         return headers;
     };
+    const dispatch = (context, hooks)=>hooks?.dispatch ? hooks.dispatch(context) : context.fetcher(context.url, context.init);
     const configure = (options)=>{
-        const { request, interceptor, allowedHeaders, resolveHeaders, transport, requireEnvelope, allowCrossOriginEnvelope, identityBinding, operationContract, setDomain, requestId = 'default' } = options;
-        const hasExistingDomain = domainMap.has(requestId);
-        if ('default' !== requestId && !setDomain && !hasExistingDomain) throw new ProducerDomainNotConfiguredError(requestId);
+        const { request, interceptor, allowedHeaders, setDomain, requestId = 'default' } = options;
         let configuredRequest = request || environment.originFetch;
         if (interceptor && !request) configuredRequest = interceptor(environment.getFetch());
-        let resolvedDomain;
-        if (setDomain) {
-            resolvedDomain = setDomain({
-                target: environment.target,
-                requestId
-            });
-            if ('default' !== requestId && isEmptyDomain(resolvedDomain)) throw new ProducerDomainNotConfiguredError(requestId);
-        }
+        const resolvedDomain = setDomain?.({
+            target: environment.target,
+            requestId
+        });
         realAllowedHeaders.delete(requestId);
-        realResolveHeaders.delete(requestId);
-        realTransportResilience.delete(requestId);
-        realIdentityBinding.delete(requestId);
-        realOperationContract.delete(requestId);
-        realRequireEnvelope.delete(requestId);
-        realAllowCrossOriginEnvelope.delete(requestId);
         if (Array.isArray(allowedHeaders)) realAllowedHeaders.set(requestId, allowedHeaders);
-        if (isServerTarget && 'function' == typeof resolveHeaders) realResolveHeaders.set(requestId, resolveHeaders);
-        if (transport && 'object' == typeof transport) realTransportResilience.set(requestId, transport);
-        if (identityBinding && 'object' == typeof identityBinding) realIdentityBinding.set(requestId, identityBinding);
-        if (operationContract && 'object' == typeof operationContract) realOperationContract.set(requestId, operationContract);
-        if ('boolean' == typeof requireEnvelope) realRequireEnvelope.set(requestId, requireEnvelope);
-        if ('boolean' == typeof allowCrossOriginEnvelope || 'function' == typeof allowCrossOriginEnvelope) realAllowCrossOriginEnvelope.set(requestId, allowCrossOriginEnvelope);
         if ('string' == typeof resolvedDomain) domainMap.set(requestId, resolvedDomain);
         realRequest.set(requestId, configuredRequest);
     };
@@ -157,22 +60,21 @@ const createRequestFactory = (environment)=>{
             httpMethodDecider: args[3],
             fetch: args[4],
             requestId: args[5],
-            operationContext: args[6]
+            hooks: args[6]
         };
-        const { path, method, port, httpMethodDecider = 'functionName', fetch = environment.originFetch, domain, requestId = 'default', operationContext } = options;
+        const { path, method, port, httpMethodDecider = 'functionName', fetch = environment.originFetch, domain, requestId = 'default', hooks } = options;
         const getFinalPath = compile(path, {
             encode: encodeURIComponent
         });
         const keyNames = extractPathParamNames(path);
         const send = (...senderArgs)=>{
-            const fetcher = resolveConfiguredRequest(realRequest, requestId, fetch);
-            const incomingHeaders = environment.readIncomingHeaders();
+            const context = startRequest(requestId, hooks);
+            const fetcher = realRequest.get(requestId) || fetch;
             let body;
             let headers;
             let url;
             if ('inputParams' === httpMethodDecider) {
                 const configDomain = domainMap.get(requestId);
-                if ('default' !== requestId && isEmptyDomain(configDomain)) throw new ProducerDomainNotConfiguredError(requestId);
                 url = environment.resolveRequestUrl({
                     configDomain,
                     domain,
@@ -183,7 +85,7 @@ const createRequestFactory = (environment)=>{
                 headers = {
                     'Content-Type': 'application/json'
                 };
-                headers = applyIdentityAndForwardedHeaders(headers, requestId, incomingHeaders);
+                headers = prepareHeaders(headers, context, hooks);
             } else {
                 const payload = 'object' == typeof senderArgs[senderArgs.length - 1] ? senderArgs[senderArgs.length - 1] : {};
                 payload.params = payload.params || {};
@@ -201,7 +103,7 @@ const createRequestFactory = (environment)=>{
                 headers = payload.headers ? {
                     ...payload.headers
                 } : {};
-                headers = applyIdentityAndForwardedHeaders(headers, requestId, incomingHeaders);
+                headers = prepareHeaders(headers, context, hooks);
                 if (payload.data) {
                     headers['Content-Type'] = 'application/json';
                     body = 'object' == typeof payload.data ? JSON.stringify(payload.data) : payload.body;
@@ -214,7 +116,6 @@ const createRequestFactory = (environment)=>{
                     body = !isServerTarget && "u" > typeof URLSearchParams && payload.formUrlencoded instanceof URLSearchParams ? payload.formUrlencoded : 'object' == typeof payload.formUrlencoded ? stringify(payload.formUrlencoded) : payload.formUrlencoded;
                 }
                 const configDomain = domainMap.get(requestId);
-                if ('default' !== requestId && isEmptyDomain(configDomain)) throw new ProducerDomainNotConfiguredError(requestId);
                 url = environment.resolveRequestUrl({
                     configDomain,
                     domain,
@@ -223,20 +124,12 @@ const createRequestFactory = (environment)=>{
                 });
             }
             if (!isServerTarget) writeHeader(headers, 'accept', "application/json,*/*;q=0.8");
-            if (isServerTarget) {
-                if (void 0 === readHeader(headers, TRACEPARENT_HEADER)) {
-                    const incomingTraceparent = firstHeaderValue(readHeader(incomingHeaders, TRACEPARENT_HEADER));
-                    if ('string' == typeof incomingTraceparent) writeHeader(headers, TRACEPARENT_HEADER, incomingTraceparent);
-                }
-                if (void 0 === readHeader(headers, TRACEPARENT_HEADER) && operationContext?.traceparent) writeHeader(headers, TRACEPARENT_HEADER, operationContext.traceparent);
-            }
-            attachEnvelopeHeaderIfRequired(headers, requestId, url, incomingHeaders);
-            attachSecuredOperationHeaders(headers, requestId, method, path, operationContext);
             if ('get' === method.toLowerCase()) body = void 0;
             if (isServerTarget) writeHeader(headers, 'accept', "application/json,*/*;q=0.8");
-            return executeWithResilience({
+            return dispatch({
+                ...context,
+                path,
                 requestId,
-                target: environment.target,
                 method,
                 url,
                 init: {
@@ -244,19 +137,19 @@ const createRequestFactory = (environment)=>{
                     body,
                     headers
                 },
-                fetcher: fetcher,
-                transport: realTransportResilience.get(requestId)
-            });
+                fetcher: fetcher
+            }, hooks);
         };
         const sender = isServerTarget ? send : async (...senderArgs)=>send(...senderArgs);
         return sender;
     };
-    const createUploader = ({ path, domain, requestId = 'default', operationContext })=>{
+    const createUploader = ({ path, domain, requestId = 'default', hooks })=>{
         const getUploadPath = isServerTarget ? void 0 : compile(path, {
             encode: encodeURIComponent
         });
         const sender = (...args)=>{
-            const fetcher = resolveConfiguredRequest(realRequest, requestId, environment.originFetch);
+            const context = startRequest(requestId, hooks);
+            const fetcher = realRequest.get(requestId) || environment.originFetch;
             const { body, headers: uploadHeaders, params } = getUploadPayload(args);
             let headers = {
                 ...uploadHeaders
@@ -268,13 +161,11 @@ const createRequestFactory = (environment)=>{
                 domain,
                 path: finalPath
             });
-            const incomingHeaders = environment.readIncomingHeaders();
-            headers = applyIdentityAndForwardedHeaders(headers, requestId, incomingHeaders);
-            attachEnvelopeHeaderIfRequired(headers, requestId, finalURL, incomingHeaders);
-            attachSecuredOperationHeaders(headers, requestId, 'POST', path, operationContext);
-            return executeWithResilience({
+            headers = prepareHeaders(headers, context, hooks);
+            return dispatch({
+                ...context,
+                path,
                 requestId,
-                target: environment.target,
                 method: 'POST',
                 url: finalURL,
                 init: {
@@ -282,9 +173,8 @@ const createRequestFactory = (environment)=>{
                     body,
                     headers
                 },
-                fetcher: fetcher,
-                transport: realTransportResilience.get(requestId)
-            });
+                fetcher: fetcher
+            }, hooks);
         };
         return sender;
     };
@@ -294,4 +184,4 @@ const createRequestFactory = (environment)=>{
         createUploader
     };
 };
-export { createRequestFactory };
+export { createRequestFactory, extractPathParamNames };

package/dist/esm-node/types.mjs

@@ -1,11 +1 @@
 import "node:module";
-const BFF_ENVELOPE_HEADER = 'x-modernjs-bff-envelope';
-const BFF_OPERATION_CONTEXT_HEADER = 'x-operation-id';
-const BFF_OPERATION_CONTEXT_DETAIL_HEADER = 'x-modernjs-bff-operation-context';
-const BFF_DEFAULT_PROTECTED_IDENTITY_HEADERS = [
-    'x-tenant-id',
-    'x-subject-id',
-    'x-user-id',
-    BFF_OPERATION_CONTEXT_HEADER
-];
-export { BFF_DEFAULT_PROTECTED_IDENTITY_HEADERS, BFF_ENVELOPE_HEADER, BFF_OPERATION_CONTEXT_DETAIL_HEADER, BFF_OPERATION_CONTEXT_HEADER };

package/dist/types/browser.d.ts

@@ -1,5 +1,3 @@
-export { CrossOriginEnvelopePolicyError, IdentityBindingViolationError, OperationContractViolationError, ProducerClientNotInitializedError, ProducerDomainNotConfiguredError, } from './policyCore';
-export declare const configure: (options: import("./types").IOptions<typeof fetch>) => void, createRequest: import("./types").RequestCreator<typeof fetch>, createUploader: import("./types").UploadCreator;
-export * from './requestContext';
-export * from './traceparent';
-export * from './types';
+export declare const createClient: () => import("./types.js").RequestClient<typeof fetch>;
+export declare const configure: (options: import("./types.js").IOptions<typeof fetch>) => void, createRequest: import("./types.js").RequestCreator<typeof fetch>, createUploader: import("./types.js").UploadCreator;
+export * from './types.js';

package/dist/types/headers.d.ts

@@ -0,0 +1,3 @@
+export declare const findHeaderKey: (headers: Record<string, any>, header: string) => string | undefined;
+export declare const readHeader: (headers: Record<string, any>, header: string) => any;
+export declare const writeHeader: (headers: Record<string, any>, header: string, value: unknown) => void;

package/dist/types/node.d.ts

@@ -1,5 +1,3 @@
-export { CrossOriginEnvelopePolicyError, IdentityBindingViolationError, OperationContractViolationError, ProducerClientNotInitializedError, ProducerDomainNotConfiguredError, } from './policyCore';
-export declare const configure: (options: import("./types").IOptions<typeof fetch>) => void, createRequest: import("./types").RequestCreator<typeof fetch>, createUploader: import("./types").UploadCreator;
-export * from './requestContext';
-export * from './traceparent';
-export * from './types';
+export declare const createClient: () => import("./types.js").RequestClient<typeof fetch>;
+export declare const configure: (options: import("./types.js").IOptions<typeof fetch>) => void, createRequest: import("./types.js").RequestCreator<typeof fetch>, createUploader: import("./types.js").UploadCreator;
+export * from './types.js';

package/dist/types/requestFactory.d.ts

@@ -1,5 +1,5 @@
-import type { IOptions, RequestCreator, TransportTarget, UploadCreator } from './types';
-type HeaderMap = Record<string, any>;
+import type { RequestClient, RequestHeaders, RequestTarget } from './types.js';
+type HeaderMap = RequestHeaders;
 type RequestUrlOptions = {
     configDomain: string | undefined;
     domain: string | undefined;
@@ -12,18 +12,14 @@ type UploadUrlOptions = {
     path: string;
 };
 type RequestFactoryEnvironment<F> = {
-    target: TransportTarget;
+    target: RequestTarget;
     getFetch: () => F;
     originFetch: F;
     readIncomingHeaders: () => HeaderMap;
-    resolveSourceOrigin: (incomingHeaders: HeaderMap) => string | undefined;
     createInputParamsBody: (args: any[]) => any;
     resolveRequestUrl: (options: RequestUrlOptions) => string;
     resolveUploadUrl: (options: UploadUrlOptions) => string;
 };
-export declare const createRequestFactory: <F>(environment: RequestFactoryEnvironment<F>) => {
-    configure: (options: IOptions<F>) => void;
-    createRequest: RequestCreator<F>;
-    createUploader: UploadCreator;
-};
+export declare const extractPathParamNames: (path: string) => string[];
+export declare const createRequestFactory: <F>(environment: RequestFactoryEnvironment<F>) => RequestClient<F>;
 export {};

package/dist/types/types.d.ts

@@ -1,7 +1,3 @@
-export declare const BFF_ENVELOPE_HEADER = "x-modernjs-bff-envelope";
-export declare const BFF_OPERATION_CONTEXT_HEADER = "x-operation-id";
-export declare const BFF_OPERATION_CONTEXT_DETAIL_HEADER = "x-modernjs-bff-operation-context";
-export declare const BFF_DEFAULT_PROTECTED_IDENTITY_HEADERS: readonly ['x-tenant-id', 'x-subject-id', 'x-user-id', "x-operation-id"];
 export type BFFRequestPayload = {
     params?: Record<string, any>;
     query?: Record<string, any>;
@@ -17,124 +13,40 @@ export type Sender<F = typeof fetch> = ((...args: any[]) => Promise<any>) & {
     fetch?: F;
 };
 export type HttpMethodDecider = 'functionName' | 'inputParams';
-export type ResolveHeadersOptions = {
+/** Target selected by the native browser/server entry. */
+export type RequestTarget = 'server' | 'browser';
+export type RequestHeaders = Record<string, any>;
+export type RequestFetcher = (url: string, init: Record<string, any>) => Promise<any>;
+/** A snapshot of the native configuration at the start of one send. */
+export type RequestStartContext = {
     requestId: string;
+    target: RequestTarget;
+    incomingHeaders: RequestHeaders;
+    configured: boolean;
+    configuredDomain: string | undefined;
+};
+/** Header maps before native allowlisted forwarding is merged into the request. */
+export type RequestHeadersContext = RequestStartContext & {
+    headers: RequestHeaders;
+    forwardedHeaders: RequestHeaders;
     allowedHeaders: string[];
-    incomingHeaders: Record<string, any>;
 };
-export type ResolveHeaders = (options: ResolveHeadersOptions) => Record<string, any> | void;
-export type AllowCrossOriginEnvelopeOptions = {
-    requestId: string;
-    sourceOrigin?: string;
-    targetOrigin?: string;
-    target: 'server' | 'browser';
-};
-export type AllowCrossOriginEnvelope = boolean | ((options: AllowCrossOriginEnvelopeOptions) => boolean);
-export type TransportTarget = 'server' | 'browser';
-export type RetryDecisionContext = {
-    requestId: string;
-    target: TransportTarget;
-    method: string;
-    url: string;
-    attempt: number;
-    maxAttempts: number;
-    error: unknown;
-    statusCode?: number;
-};
-export type RetryBackoffOptions = {
-    retries?: number;
-    baseDelayMs?: number;
-    maxDelayMs?: number;
-    jitterRatio?: number;
-    retryableStatusCodes?: number[];
-    shouldRetry?: (context: RetryDecisionContext) => boolean;
-};
-export type DegradedModeReason = 'timeout' | 'retry' | 'retry_exhausted';
-export type DegradedModeEvent = {
-    requestId: string;
-    target: TransportTarget;
+export type RequestDispatchContext = RequestStartContext & {
+    path: string;
     method: string;
     url: string;
-    reason: DegradedModeReason;
-    attempt: number;
-    maxAttempts: number;
-    timeoutMs?: number;
-    backoffMs?: number;
-    statusCode?: number;
-    error?: unknown;
-};
-export type TransportResilienceOptions = {
-    timeoutMs?: number;
-    retry?: RetryBackoffOptions;
-    onDegraded?: (event: DegradedModeEvent) => void;
-};
-export type IdentityBindingViolationReason = 'client_override_blocked' | 'client_override_rejected';
-export type IdentityBindingViolation = {
-    requestId: string;
-    target: TransportTarget;
-    header: string;
-    reason: IdentityBindingViolationReason;
-    attemptedValue?: unknown;
-    derivedValue?: unknown;
-};
-export type DeriveIdentityHeadersOptions = {
-    requestId: string;
-    target: TransportTarget;
-    incomingHeaders: Record<string, any>;
-    protectedHeaders: string[];
-};
-export type IdentityBindingOptions = {
-    enabled?: boolean;
-    strict?: boolean;
-    protectedHeaders?: string[];
-    deriveHeaders?: (options: DeriveIdentityHeadersOptions) => Record<string, any> | void;
-    onViolation?: (violation: IdentityBindingViolation) => void;
-};
-export type OperationContractViolationReason = 'missing_schema_hash' | 'missing_operation_version';
-export type OperationContractViolation = {
-    requestId: string;
-    target: TransportTarget;
-    operationId: string;
-    reason: OperationContractViolationReason;
-    routePath?: string;
-    method?: string;
-    schemaHash?: string;
-    operationVersion?: number;
-};
-export type CrossProjectOperationContract = {
-    schemaHash?: string;
-    operationVersion?: number;
-};
-export type CrossProjectPolicyViolationReason = 'missing_envelope' | 'invalid_envelope' | 'missing_request_id' | 'namespace_not_allowed' | 'missing_operation_context' | 'operation_context_mismatch' | 'missing_operation_context_details' | 'invalid_operation_context_details' | 'operation_context_details_request_id_mismatch' | 'missing_operation_schema_hash' | 'missing_operation_version' | 'unknown_operation_contract' | 'operation_schema_hash_mismatch' | 'operation_version_mismatch' | 'producer_identity_mismatch';
-export type CrossProjectPolicyViolation = {
-    code: 'BFF_CROSS_PROJECT_POLICY_DENIED';
-    reason: CrossProjectPolicyViolationReason;
-    message: string;
-    status: number;
-};
-export type OperationContractOptions = {
-    enabled?: boolean;
-    strict?: boolean;
-    requireSchemaHash?: boolean;
-    requireOperationVersion?: boolean;
-    onViolation?: (violation: OperationContractViolation) => void;
-};
-export type OperationContextSource = 'client' | 'server' | 'generated-client' | 'effect-adapter' | 'data-platform' | 'unknown';
-export type OperationContext = {
-    requestId?: string;
-    operationId?: string;
-    routePath?: string;
-    method?: string;
-    schemaHash?: string;
-    operationVersion?: number;
-    locale?: string;
-    traceparent?: string;
-    traceId?: string;
-    spanId?: string;
-    source?: OperationContextSource;
-    scope?: Record<string, unknown>;
-    sessionClaims?: Record<string, unknown>;
-    attributes?: Record<string, unknown>;
+    init: {
+        method: string;
+        body: any;
+        headers: RequestHeaders;
+    };
+    fetcher: RequestFetcher;
+};
+/** Optional, instance-local callbacks around native request construction. */
+export type RequestHooks = {
+    onStart?: (context: RequestStartContext) => void;
+    prepareHeaders?: (context: RequestHeadersContext) => void;
+    dispatch?: (context: RequestDispatchContext) => Promise<any>;
 };
 export type RequestCreatorOptions<F = typeof fetch> = {
     path: string;
@@ -144,32 +56,31 @@ export type RequestCreatorOptions<F = typeof fetch> = {
     fetch?: F;
     domain?: string;
     requestId?: string;
-    operationContext?: OperationContext;
+    hooks?: RequestHooks;
 };
 export type RequestCreator<F = typeof fetch> = {
     (options: RequestCreatorOptions<F>): Sender;
-    (path: string, method: string, port: number, httpMethodDecider?: HttpMethodDecider, fetch?: F, requestId?: string, operationContext?: OperationContext): Sender;
+    (path: string, method: string, port: number, httpMethodDecider?: HttpMethodDecider, fetch?: F, requestId?: string, hooks?: RequestHooks): Sender;
 };
 export type UploadCreatorOptions = {
     path: string;
     domain?: string;
     requestId?: string;
-    operationContext?: OperationContext;
+    hooks?: RequestHooks;
 };
 export type UploadCreator = (options: UploadCreatorOptions) => Sender;
 export type IOptions<F = typeof fetch> = {
     request?: F;
     interceptor?: (request: F) => F;
     allowedHeaders?: string[];
-    resolveHeaders?: ResolveHeaders;
-    transport?: TransportResilienceOptions;
-    requireEnvelope?: boolean;
-    allowCrossOriginEnvelope?: AllowCrossOriginEnvelope;
-    identityBinding?: IdentityBindingOptions;
-    operationContract?: OperationContractOptions;
     setDomain?: (ops?: {
-        target: 'server' | 'browser';
+        target: RequestTarget;
         requestId?: string;
     }) => string;
     requestId?: string;
 };
+export type RequestClient<F = typeof fetch> = {
+    configure: (options: IOptions<F>) => void;
+    createRequest: RequestCreator<F>;
+    createUploader: UploadCreator;
+};

package/package.json

@@ -17,7 +17,7 @@
     "modern",
     "modern.js"
   ],
-  "version": "3.8.3-ultramodern.6",
+  "version": "3.9.0-ultramodern.10",
   "modern:source": "./src/node.ts",
   "types": "./dist/types/browser.d.ts",
   "main": "./dist/cjs/node.js",
@@ -65,18 +65,18 @@
     }
   },
   "dependencies": {
-    "@modern-js/runtime-utils": "npm:@bleedingdev/modern-js-runtime-utils@3.8.3-ultramodern.6",
-    "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.8.3-ultramodern.6",
+    "@modern-js/runtime-utils": "npm:@bleedingdev/modern-js-runtime-utils@3.9.0-ultramodern.10",
+    "@modern-js/utils": "npm:@bleedingdev/modern-js-utils@3.9.0-ultramodern.10",
     "@swc/helpers": "^0.5.23",
     "encoding": "^0.1.13",
     "path-to-regexp": "^8.4.2",
-    "qs": "^6.15.3"
+    "qs": "^6.16.0"
   },
   "devDependencies": {
-    "@modern-js/types": "npm:@bleedingdev/modern-js-types@3.8.3-ultramodern.6",
-    "@rslib/core": "0.23.2",
+    "@modern-js/types": "npm:@bleedingdev/modern-js-types@3.9.0-ultramodern.10",
+    "@rslib/core": "1.0.0",
     "@scripts/rstest-config": "2.66.0",
-    "@types/node": "^26.2.0",
+    "@types/node": "^26.4.1",
     "@types/qs": "^6.15.1",
     "@typescript/native-preview": "7.0.0-dev.20260707.2",
     "nock": "^14.0.17",