@lovrozagar/honey 0.6.8 → 0.7.0

package/dist/client-rust/runtime.rs

@@ -0,0 +1,980 @@
+/* Code generated by honey. DO NOT EDIT. */
+
+#![allow(dead_code)]
+
+use crate::errors::{raise_for_status, Error};
+use std::collections::HashMap;
+use std::future::Future;
+use std::pin::Pin;
+use std::sync::Arc;
+use std::time::Duration;
+use tokio::sync::Mutex;
+use tokio_util::sync::CancellationToken;
+use uuid::Uuid;
+
+/// OnRequestHook is called before each request is sent.
+/// Receives a mutable RequestContext; can mutate headers, url, or body.
+/// Returning Err short-circuits the request.
+pub type OnRequestHook = Arc<
+    dyn Fn(
+            &mut RequestContext,
+        ) -> Pin<Box<dyn Future<Output = Result<(), Error>> + Send + '_>>
+        + Send
+        + Sync,
+>;
+
+/// OnResponseHook is called after each response is received (before error mapping).
+pub type OnResponseHook = Arc<
+    dyn Fn(
+            &mut ResponseContext,
+        ) -> Pin<Box<dyn Future<Output = Result<(), Error>> + Send + '_>>
+        + Send
+        + Sync,
+>;
+
+/// RequestContext carries mutable request metadata through OnRequestHook invocations.
+/// `selector` / `is_stale` / `invalidated_by` mirror the TS hook ctx and are
+/// populated from the RequestMeta snapshot taken before the request fires;
+/// zero values when the tracker is disabled. Header names are unique
+/// case-insensitively; use [`set_header`] to replace one.
+pub struct RequestContext {
+    pub method: reqwest::Method,
+    pub url: String,
+    pub path: String,
+    pub headers: HashMap<String, String>,
+    pub state: Arc<Mutex<HashMap<String, serde_json::Value>>>,
+    pub is_retry: bool,
+    pub selector: String,
+    pub is_stale: bool,
+    pub invalidated_by: Vec<String>,
+}
+
+/// ResponseContext carries response metadata through OnResponseHook invocations.
+/// `selector` / `is_stale` / `invalidated_by` mirror the RequestContext fields.
+pub struct ResponseContext {
+    pub status: u16,
+    pub response: Vec<u8>,
+    pub headers: reqwest::header::HeaderMap,
+    pub state: Arc<Mutex<HashMap<String, serde_json::Value>>>,
+    pub is_retry: bool,
+    pub selector: String,
+    pub is_stale: bool,
+    pub invalidated_by: Vec<String>,
+}
+
+/// RequestBody represents the different body types a request can carry.
+/// `Multipart` and `Stream` own single-shot bodies and are not retried on 401;
+/// the others are sent again after an auth refresh.
+pub enum RequestBody<'a> {
+    None,
+    Json(&'a serde_json::Value),
+    /// Ordered key/value pairs, sent as application/x-www-form-urlencoded.
+    FormUrl(Vec<(String, String)>),
+    /// Bytes with an explicit content type (text/plain, …).
+    Raw(&'static str, bytes::Bytes),
+    Multipart(reqwest::multipart::Form),
+    Stream(reqwest::Body),
+}
+
+/// OnAuthExpiredHook is the async auth-refresh callback type for ClientConfig.
+/// Returning an empty token means "give up": the 401 is returned as an error.
+pub type OnAuthExpiredHook =
+    Arc<dyn Fn() -> Pin<Box<dyn Future<Output = Result<String, Error>> + Send>> + Send + Sync>;
+
+/// LogEntry is the payload passed to on_log callbacks. Consumers plug in their
+/// own logger; the SDK never formats, levels, or persists. Status is Option so
+/// None encodes "omitted" (request_start) without colliding with a real 0 status.
+/// error is repr-style String on the "error" event; None otherwise. Field layout
+/// matches the TS/Python/Go LogEntry shape for cross-language consumer parity.
+#[derive(Clone, Debug)]
+pub struct LogEntry {
+    pub level: String,
+    pub event: String,
+    pub operation: String,
+    pub duration_ms: i64,
+    pub status: Option<i32>,
+    pub error: Option<String>,
+}
+
+/// OnLogHook is the callback type for lifecycle log events. Shared between
+/// ClientConfig (async) and SyncClientConfig (blocking) — both take the same
+/// synchronous Fn signature (emission is fire-and-forget from either runtime).
+pub type OnLogHook = Arc<dyn Fn(LogEntry) + Send + Sync>;
+
+/// ClientConfig holds all configuration for the SDK client.
+///
+/// `timeout` bounds a whole regular request including the body read
+/// (`Duration::ZERO` disables it); streams are not bounded by it.
+/// `max_response_bytes` caps a buffered response body (0 disables the cap).
+/// When `http_client` is None the SDK builds one that does not follow
+/// redirects to another host, so auth and custom headers never leave the origin.
+#[derive(Clone)]
+pub struct ClientConfig {
+    pub base_url: String,
+    pub bearer_token: Option<String>,
+    pub headers: HashMap<String, String>,
+    pub timeout: Duration,
+    /// Ignored at runtime: whether methods return `SdkResult` is fixed when the SDK is generated.
+    #[deprecated(note = "has no effect; generate with `throwOnError: false` for SdkResult methods")]
+    pub throw_on_error: bool,
+    /// Fallback for `InvalidationConfig::stale_max_entries` when that is 0.
+    pub stale_max_entries: usize,
+    pub invalidation: Option<InvalidationConfig>,
+    pub on_auth_expired: Option<OnAuthExpiredHook>,
+    pub http_client: Option<reqwest::Client>,
+    pub auth_header_name: Option<String>,
+    pub auth_header_prefix: Option<String>,
+    pub on_request: Vec<OnRequestHook>,
+    pub on_response: Vec<OnResponseHook>,
+    pub on_log: Option<OnLogHook>,
+    pub state: Option<Arc<Mutex<HashMap<String, serde_json::Value>>>>,
+    pub max_response_bytes: usize,
+}
+
+#[allow(deprecated)]
+impl Default for ClientConfig {
+    fn default() -> Self {
+        ClientConfig {
+            base_url: String::new(),
+            bearer_token: None,
+            headers: HashMap::new(),
+            timeout: Duration::from_secs(30),
+            throw_on_error: true,
+            stale_max_entries: 500,
+            invalidation: None,
+            on_auth_expired: None,
+            http_client: None,
+            auth_header_name: None,
+            auth_header_prefix: None,
+            on_request: Vec::new(),
+            on_response: Vec::new(),
+            on_log: None,
+            state: None,
+            max_response_bytes: DEFAULT_MAX_RESPONSE_BYTES,
+        }
+    }
+}
+
+pub const DEFAULT_MAX_RESPONSE_BYTES: usize = 100 * 1024 * 1024;
+
+/// AuthState keeps the current token so a refreshed token is reused by later
+/// calls, and serializes refreshes so concurrent 401s refresh once.
+pub struct AuthState {
+    token: Mutex<Option<String>>,
+}
+
+impl AuthState {
+    pub fn new(token: Option<String>) -> Self {
+        AuthState { token: Mutex::new(token) }
+    }
+
+    pub async fn current(&self) -> Option<String> {
+        self.token.lock().await.clone()
+    }
+
+    /// refresh calls the hook unless another call already replaced `rejected`.
+    pub async fn refresh(
+        &self,
+        hook: &OnAuthExpiredHook,
+        rejected: Option<&str>,
+    ) -> Result<Option<String>, Error> {
+        let mut guard = self.token.lock().await;
+        if guard.as_deref() != rejected {
+            return Ok(guard.clone());
+        }
+        let token = hook().await.map_err(|e| Error::AuthExpired(e.to_string()))?;
+        if token.is_empty() {
+            return Ok(None);
+        }
+        *guard = Some(token.clone());
+        Ok(Some(token))
+    }
+}
+
+/// default_http_client builds a client that follows redirects on the same
+/// scheme and host only.
+pub fn default_http_client() -> reqwest::Client {
+    reqwest::Client::builder()
+        .redirect(same_host_redirects())
+        .build()
+        .unwrap_or_default()
+}
+
+/// same_host_redirects follows at most 10 redirects, never to another origin.
+pub fn same_host_redirects() -> reqwest::redirect::Policy {
+    reqwest::redirect::Policy::custom(|attempt| {
+        if attempt.previous().len() >= 10 {
+            return attempt.stop();
+        }
+        let same = attempt
+            .previous()
+            .first()
+            .map(|first| {
+                first.scheme() == attempt.url().scheme()
+                    && first.host_str() == attempt.url().host_str()
+                    && first.port_or_known_default() == attempt.url().port_or_known_default()
+            })
+            .unwrap_or(false);
+        if same {
+            attempt.follow()
+        } else {
+            attempt.stop()
+        }
+    })
+}
+
+/* emit_log invokes the on_log callback if configured, swallowing any panic so a
+   faulty logger cannot break the request path. Mirrors Python try/except and Go
+   defer recover. */
+fn emit_log(cfg: &ClientConfig, entry: LogEntry) {
+    if let Some(ref hook) = cfg.on_log {
+        let h = Arc::clone(hook);
+        let _ = std::panic::catch_unwind(std::panic::AssertUnwindSafe(move || h(entry)));
+    }
+}
+
+/* err_status extracts an HTTP status from a typed Error::Api, returning None for
+   non-Api errors (Transport/Json/UrlParse/Canceled/Timeout/AuthExpired/Other). */
+fn err_status(err: &Error) -> Option<i32> {
+    if let Error::Api(api) = err {
+        Some(api.status() as i32)
+    } else {
+        None
+    }
+}
+
+/// InvalidationConfig controls cache invalidation behaviour. `stale_time` is in
+/// milliseconds; ≤0 disables the tracker. `stale_max_entries` caps the LRU map
+/// (default 1000 when 0). `max_sources_per_target` caps the `by` list per stale
+/// entry (default 16 when 0).
+#[derive(Clone, Default)]
+pub struct InvalidationConfig {
+    pub stale_time: i64,
+    pub stale_max_entries: usize,
+    pub max_sources_per_target: usize,
+}
+
+/// ResponseMeta is the owned response snapshot embedded in SdkResult.response.
+/// Populated from a completed RequestResult; all fields are Clone-able.
+pub struct ResponseMeta {
+    pub status: u16,
+    pub headers: reqwest::header::HeaderMap,
+    pub url: String,
+    pub body: Vec<u8>,
+}
+
+impl ResponseMeta {
+    pub(crate) fn empty(status: u16) -> Self {
+        ResponseMeta {
+            status,
+            headers: reqwest::header::HeaderMap::new(),
+            url: String::new(),
+            body: Vec::new(),
+        }
+    }
+}
+
+/// RequestResult carries the raw bytes, status, headers, and final URL from a completed request.
+#[allow(dead_code)]
+pub(crate) struct RequestResult {
+    pub body: Vec<u8>,
+    pub status: u16,
+    pub headers: reqwest::header::HeaderMap,
+    pub url: String,
+}
+
+/* ── URLs, path params, query encoding — shared with runtime_sync ── */
+
+fn percent_encode(s: &str, keep: &[u8], space_as_plus: bool) -> String {
+    const HEX: &[u8; 16] = b"0123456789ABCDEF";
+    let mut out = String::with_capacity(s.len());
+    for &b in s.as_bytes() {
+        if b.is_ascii_alphanumeric() || keep.contains(&b) {
+            out.push(b as char);
+        } else if b == b' ' && space_as_plus {
+            out.push('+');
+        } else {
+            out.push('%');
+            out.push(HEX[(b >> 4) as usize] as char);
+            out.push(HEX[(b & 0x0f) as usize] as char);
+        }
+    }
+    out
+}
+
+/// escape_segment encodes like JavaScript's encodeURIComponent, so every SDK
+/// language (and the TypeScript client) sends the same path bytes.
+pub fn escape_segment(s: &str) -> String {
+    percent_encode(s, b"-_.!~*'()", false)
+}
+
+/// escape_query encodes like URLSearchParams (space becomes '+').
+pub fn escape_query(s: &str) -> String {
+    percent_encode(s, b"*-._", true)
+}
+
+fn missing(name: &str) -> Error {
+    Error::Other(format!("Missing path param: {}", name))
+}
+
+fn encode_segment_value(name: &str, value: &str) -> Result<String, Error> {
+    if value.is_empty() || value == "." || value == ".." {
+        return Err(Error::Other(format!(
+            "Invalid path param {:?}: {:?} is not a path segment",
+            name, value
+        )));
+    }
+    Ok(escape_segment(value))
+}
+
+/// expand_path fills a path template with the TypeScript client's grammar:
+/// `:name` / `:name?` take a whole segment, a final `*name` takes the rest,
+/// `{name}` may sit inside a segment. Values are encoded; "", "." and ".."
+/// are rejected.
+pub fn expand_path(template: &str, params: &[(&str, &str)]) -> Result<String, Error> {
+    let get = |name: &str| params.iter().find(|(k, _)| *k == name).map(|(_, v)| *v);
+    let segments: Vec<&str> = template.split('/').collect();
+    let mut out: Vec<String> = Vec::with_capacity(segments.len());
+    for (i, seg) in segments.iter().enumerate() {
+        if seg.len() > 1 && seg.starts_with(':') {
+            let optional = seg.ends_with('?');
+            let name = if optional { &seg[1..seg.len() - 1] } else { &seg[1..] };
+            match get(name) {
+                Some(v) => out.push(encode_segment_value(name, v)?),
+                None if optional => continue,
+                None => return Err(missing(name)),
+            }
+        } else if seg.starts_with('*') && i == segments.len() - 1 {
+            let name = if seg.len() > 1 { &seg[1..] } else { "*" };
+            match get(name) {
+                Some("") => out.push(String::new()),
+                Some(v) => {
+                    let parts: Result<Vec<String>, Error> =
+                        v.split('/').map(|p| encode_segment_value(name, p)).collect();
+                    out.push(parts?.join("/"));
+                }
+                None if seg.len() == 1 => out.push(String::new()),
+                None => return Err(missing(name)),
+            }
+        } else {
+            let mut piece = String::with_capacity(seg.len());
+            let mut rest: &str = seg;
+            loop {
+                let open = rest.find('{');
+                let close = open.and_then(|o| rest[o..].find('}').map(|c| o + c));
+                match (open, close) {
+                    (Some(o), Some(c)) if !rest[o + 1..c].contains('{') => {
+                        let name = &rest[o + 1..c];
+                        let v = get(name).ok_or_else(|| missing(name))?;
+                        piece.push_str(&rest[..o]);
+                        piece.push_str(&encode_segment_value(name, v)?);
+                        rest = &rest[c + 1..];
+                    }
+                    _ => {
+                        piece.push_str(rest);
+                        break;
+                    }
+                }
+            }
+            out.push(piece);
+        }
+    }
+    Ok(out.join("/"))
+}
+
+/// format_f64 renders a float like JavaScript's Number#toString, so every SDK
+/// language sends the same query bytes: shortest round-trip digits, fixed
+/// notation for 1e-6 <= |v| < 1e21, otherwise `<mantissa>e±<exp>`.
+pub fn format_f64(v: f64) -> String {
+    if v.is_nan() {
+        return "NaN".to_string();
+    }
+    if v.is_infinite() {
+        return if v > 0.0 { "Infinity" } else { "-Infinity" }.to_string();
+    }
+    if v == 0.0 {
+        return "0".to_string();
+    }
+    /* `{:e}` gives the shortest round-trip digits: "-1.2345678901234568e20" */
+    let sci = format!("{:e}", v);
+    let (mantissa, exp) = sci.split_once('e').unwrap_or((sci.as_str(), "0"));
+    let exp: i32 = exp.parse().unwrap_or(0);
+    let (sign, mantissa) = match mantissa.strip_prefix('-') {
+        Some(m) => ("-", m),
+        None => ("", mantissa),
+    };
+    let digits: String = mantissa.chars().filter(|c| *c != '.').collect();
+    let abs = v.abs();
+    if !(1e-6..1e21).contains(&abs) {
+        return format!("{}{}e{}{}", sign, mantissa, if exp > 0 { "+" } else { "-" }, exp.abs());
+    }
+    let n = digits.len() as i32;
+    let body = if exp >= n - 1 {
+        format!("{}{}", digits, "0".repeat((exp - (n - 1)) as usize))
+    } else if exp >= 0 {
+        let split = (exp + 1) as usize;
+        format!("{}.{}", &digits[..split], &digits[split..])
+    } else {
+        format!("0.{}{}", "0".repeat((-exp - 1) as usize), digits)
+    };
+    format!("{}{}", sign, body)
+}
+
+/// QueryValue renders a value as one or more query strings: scalars once,
+/// sequences once per element, None not at all.
+pub trait QueryValue {
+    fn push_query(&self, key: &str, out: &mut Vec<(String, String)>);
+}
+
+macro_rules! display_query_value {
+    ($($t:ty),*) => {$(
+        impl QueryValue for $t {
+            fn push_query(&self, key: &str, out: &mut Vec<(String, String)>) {
+                out.push((key.to_string(), self.to_string()));
+            }
+        }
+    )*};
+}
+display_query_value!(String, str, bool, i8, i16, i32, i64, u8, u16, u32, u64, usize, isize);
+
+impl QueryValue for f64 {
+    fn push_query(&self, key: &str, out: &mut Vec<(String, String)>) {
+        out.push((key.to_string(), format_f64(*self)));
+    }
+}
+
+impl QueryValue for f32 {
+    fn push_query(&self, key: &str, out: &mut Vec<(String, String)>) {
+        out.push((key.to_string(), format_f64(*self as f64)));
+    }
+}
+
+impl<T: QueryValue + ?Sized> QueryValue for &T {
+    fn push_query(&self, key: &str, out: &mut Vec<(String, String)>) {
+        (**self).push_query(key, out)
+    }
+}
+
+impl<T: QueryValue> QueryValue for Option<T> {
+    fn push_query(&self, key: &str, out: &mut Vec<(String, String)>) {
+        if let Some(v) = self {
+            v.push_query(key, out)
+        }
+    }
+}
+
+impl<T: QueryValue> QueryValue for Vec<T> {
+    fn push_query(&self, key: &str, out: &mut Vec<(String, String)>) {
+        for v in self {
+            v.push_query(key, out)
+        }
+    }
+}
+
+impl QueryValue for serde_json::Value {
+    fn push_query(&self, key: &str, out: &mut Vec<(String, String)>) {
+        match self {
+            serde_json::Value::Null => {}
+            serde_json::Value::String(s) => out.push((key.to_string(), s.clone())),
+            serde_json::Value::Bool(b) => out.push((key.to_string(), b.to_string())),
+            serde_json::Value::Number(n) => {
+                let s = if n.is_f64() { format_f64(n.as_f64().unwrap_or_default()) } else { n.to_string() };
+                out.push((key.to_string(), s))
+            }
+            serde_json::Value::Array(items) => {
+                for item in items {
+                    item.push_query(key, out)
+                }
+            }
+            other => out.push((key.to_string(), other.to_string())),
+        }
+    }
+}
+
+/// query_value_of serializes an enum or other Serialize value and pushes it as
+/// a query value (a JSON string becomes its bare text).
+pub fn push_serialized<T: serde::Serialize>(key: &str, value: &T, out: &mut Vec<(String, String)>) {
+    if let Ok(v) = serde_json::to_value(value) {
+        v.push_query(key, out)
+    }
+}
+
+/// form_pairs flattens a serialized body object into form fields (arrays repeat the key).
+pub fn form_pairs<T: serde::Serialize>(body: &T) -> Vec<(String, String)> {
+    let mut out = Vec::new();
+    if let Ok(serde_json::Value::Object(map)) = serde_json::to_value(body) {
+        let mut keys: Vec<&String> = map.keys().collect();
+        keys.sort();
+        for k in keys {
+            map[k].push_query(k, &mut out);
+        }
+    }
+    out
+}
+
+/// encode_query joins pairs with every byte outside the unreserved set escaped.
+pub fn encode_query(pairs: &[(String, String)]) -> String {
+    pairs
+        .iter()
+        .map(|(k, v)| format!("{}={}", escape_query(k), escape_query(v)))
+        .collect::<Vec<_>>()
+        .join("&")
+}
+
+/// build_url joins base and an already-escaped path, keeping the base path and
+/// base query, then appends the query pairs.
+pub fn build_url(base_url: &str, path: &str, query: &[(String, String)]) -> Result<url::Url, Error> {
+    let mut url = url::Url::parse(base_url)?;
+    if url.cannot_be_a_base() || url.host_str().is_none() {
+        return Err(Error::Other(format!("base URL {:?} needs a scheme and host", base_url)));
+    }
+    let path = if path.starts_with('/') { path.to_string() } else { format!("/{}", path) };
+    let joined = format!("{}{}", url.path().trim_end_matches('/'), path);
+    url.set_path(&joined);
+    url.set_fragment(None);
+    let extra = encode_query(query);
+    let q = match (url.query(), extra.is_empty()) {
+        (Some(existing), false) if !existing.is_empty() => Some(format!("{}&{}", existing, extra)),
+        (_, false) => Some(extra),
+        (existing, true) => existing.map(|s| s.to_string()),
+    };
+    url.set_query(q.as_deref());
+    Ok(url)
+}
+
+/// set_header inserts `name` replacing any other casing of it.
+pub fn set_header(headers: &mut HashMap<String, String>, name: &str, value: String) {
+    headers.retain(|k, _| !k.eq_ignore_ascii_case(name));
+    headers.insert(name.to_string(), value);
+}
+
+/// merged_headers merges config headers, then per-call headers, then auth, then
+/// an X-Request-Id when absent — case-insensitively, later wins.
+pub(crate) fn merged_headers(
+    cfg_headers: &HashMap<String, String>,
+    call_headers: Option<&HashMap<String, String>>,
+    auth_header_name: Option<&str>,
+    auth_header_prefix: Option<&str>,
+    bearer_token: Option<&str>,
+) -> HashMap<String, String> {
+    let mut out = HashMap::new();
+    let mut cfg: Vec<(&String, &String)> = cfg_headers.iter().collect();
+    cfg.sort();
+    for (k, v) in cfg {
+        set_header(&mut out, k, v.clone());
+    }
+    if let Some(ch) = call_headers {
+        let mut call: Vec<(&String, &String)> = ch.iter().collect();
+        call.sort();
+        for (k, v) in call {
+            set_header(&mut out, k, v.clone());
+        }
+    }
+    if let Some(token) = bearer_token {
+        if !token.is_empty() {
+            let name = auth_header_name.unwrap_or("Authorization");
+            let prefix = auth_header_prefix.unwrap_or("Bearer ");
+            set_header(&mut out, name, format!("{}{}", prefix, token));
+        }
+    }
+    if !out.keys().any(|k| k.eq_ignore_ascii_case("x-request-id")) {
+        out.insert("x-request-id".to_string(), Uuid::new_v4().to_string());
+    }
+    out
+}
+
+/// map_send_error keeps the cause: a refused connection, DNS or TLS failure is
+/// a Transport error, never "canceled".
+pub(crate) fn map_send_error(e: reqwest::Error) -> Error {
+    if e.is_timeout() {
+        Error::Timeout
+    } else {
+        Error::Transport(e)
+    }
+}
+
+async fn read_capped(mut resp: reqwest::Response, limit: usize) -> Result<Vec<u8>, Error> {
+    let mut out = Vec::new();
+    while let Some(chunk) = resp.chunk().await.map_err(map_send_error)? {
+        if limit > 0 && out.len() + chunk.len() > limit {
+            return Err(Error::Other(format!("response body exceeds {} bytes", limit)));
+        }
+        out.extend_from_slice(&chunk);
+    }
+    Ok(out)
+}
+
+/// do_request executes an HTTP request, injects auth, merges headers, handles
+/// on_auth_expired retry on 401, fires on_request/on_response hooks, and wraps
+/// errors into typed Error variants. Emits on_log lifecycle entries (request_start
+/// once at entry, response_received once for the final response, error on terminal
+/// failure) — matching TS/Python/Go behavior where retry rounds do not double-emit.
+#[allow(clippy::too_many_arguments)]
+pub(crate) async fn do_request(
+    client: &reqwest::Client,
+    cfg: &ClientConfig,
+    auth: &AuthState,
+    method: reqwest::Method,
+    raw_url: &str,
+    query: &[(String, String)],
+    body: RequestBody<'_>,
+    call_headers: Option<&HashMap<String, String>>,
+    timeout: Option<std::time::Duration>,
+    cancel_token: Option<CancellationToken>,
+    operation: &str,
+    request_meta: Option<&crate::invalidation::RequestMeta>,
+) -> Result<RequestResult, Error> {
+    let start = std::time::Instant::now();
+    let log_error = |e: &Error| {
+        emit_log(
+            cfg,
+            LogEntry {
+                level: "error".to_string(),
+                event: "error".to_string(),
+                operation: operation.to_string(),
+                duration_ms: start.elapsed().as_millis() as i64,
+                status: err_status(e),
+                error: Some(format!("{:?}", e)),
+            },
+        )
+    };
+
+    /* Pre-flight cancellation check — short-circuit before any work. */
+    if let Some(ref tok) = cancel_token {
+        if tok.is_cancelled() {
+            log_error(&Error::Canceled);
+            return Err(Error::Canceled);
+        }
+    }
+
+    emit_log(
+        cfg,
+        LogEntry {
+            level: "debug".to_string(),
+            event: "request_start".to_string(),
+            operation: operation.to_string(),
+            duration_ms: 0,
+            status: None,
+            error: None,
+        },
+    );
+
+    /* Json/FormUrl/Raw can be sent again; Multipart + Stream own non-Clone values */
+    let retry_body: Option<RequestBody<'_>> = match &body {
+        RequestBody::None => Some(RequestBody::None),
+        RequestBody::Json(v) => Some(RequestBody::Json(v)),
+        RequestBody::FormUrl(m) => Some(RequestBody::FormUrl(m.clone())),
+        RequestBody::Raw(ct, b) => Some(RequestBody::Raw(ct, b.clone())),
+        RequestBody::Multipart(_) => None,
+        RequestBody::Stream(_) => None,
+    };
+
+    let token = auth.current().await;
+    let mut result = match execute_request(
+        client,
+        cfg,
+        method.clone(),
+        raw_url,
+        query,
+        body,
+        call_headers,
+        token.as_deref(),
+        false,
+        timeout,
+        cancel_token.clone(),
+        request_meta,
+    )
+    .await
+    {
+        Ok(r) => r,
+        Err(e) => {
+            log_error(&e);
+            return Err(e);
+        }
+    };
+
+    if result.status == 401 {
+        if let (Some(hook), Some(retry)) = (cfg.on_auth_expired.as_ref(), retry_body) {
+            let new_token = match auth.refresh(hook, token.as_deref()).await {
+                Ok(t) => t,
+                Err(e) => {
+                    log_error(&e);
+                    return Err(e);
+                }
+            };
+            if let Some(new_token) = new_token {
+                result = match execute_request(
+                    client,
+                    cfg,
+                    method,
+                    raw_url,
+                    query,
+                    retry,
+                    call_headers,
+                    Some(&new_token),
+                    true,
+                    timeout,
+                    cancel_token,
+                    request_meta,
+                )
+                .await
+                {
+                    Ok(r) => r,
+                    Err(e) => {
+                        log_error(&e);
+                        return Err(e);
+                    }
+                };
+            }
+        }
+    }
+
+    let status_i32 = result.status as i32;
+    let level = if result.status >= 400 { "warn" } else { "info" };
+    emit_log(
+        cfg,
+        LogEntry {
+            level: level.to_string(),
+            event: "response_received".to_string(),
+            operation: operation.to_string(),
+            duration_ms: start.elapsed().as_millis() as i64,
+            status: Some(status_i32),
+            error: None,
+        },
+    );
+
+    if !(200..300).contains(&result.status) {
+        if let Some(err) = raise_for_status(result.status, std::mem::take(&mut result.body)) {
+            log_error(&err);
+            return Err(err);
+        }
+    }
+
+    Ok(result)
+}
+
+#[allow(clippy::too_many_arguments)]
+async fn build_request(
+    client: &reqwest::Client,
+    cfg: &ClientConfig,
+    method: reqwest::Method,
+    raw_url: &str,
+    query: &[(String, String)],
+    body: RequestBody<'_>,
+    call_headers: Option<&HashMap<String, String>>,
+    bearer_token: Option<&str>,
+    is_retry: bool,
+    request_meta: Option<&crate::invalidation::RequestMeta>,
+) -> Result<(reqwest::RequestBuilder, Arc<Mutex<HashMap<String, serde_json::Value>>>), Error> {
+    let url = build_url(&cfg.base_url, raw_url, query)?;
+
+    let mut hook_headers = merged_headers(
+        &cfg.headers,
+        call_headers,
+        cfg.auth_header_name.as_deref(),
+        cfg.auth_header_prefix.as_deref(),
+        bearer_token,
+    );
+    match &body {
+        RequestBody::Json(_) => set_header(&mut hook_headers, "Content-Type", "application/json".into()),
+        RequestBody::FormUrl(_) => set_header(
+            &mut hook_headers,
+            "Content-Type",
+            "application/x-www-form-urlencoded".into(),
+        ),
+        RequestBody::Raw(ct, _) => set_header(&mut hook_headers, "Content-Type", ct.to_string()),
+        RequestBody::Stream(_) => {
+            if !hook_headers.keys().any(|k| k.eq_ignore_ascii_case("content-type")) {
+                set_header(&mut hook_headers, "Content-Type", "application/octet-stream".into());
+            }
+        }
+        RequestBody::Multipart(_) | RequestBody::None => {}
+    }
+
+    let state = cfg
+        .state
+        .clone()
+        .unwrap_or_else(|| Arc::new(Mutex::new(HashMap::new())));
+
+    let (meta_selector, meta_is_stale, meta_by) = match request_meta {
+        Some(m) => (m.selector.clone(), m.is_stale, m.invalidated_by.clone()),
+        None => (String::new(), false, Vec::new()),
+    };
+
+    let mut req_ctx = RequestContext {
+        method: method.clone(),
+        url: url.to_string(),
+        path: raw_url.to_string(),
+        headers: hook_headers,
+        state: Arc::clone(&state),
+        is_retry,
+        selector: meta_selector,
+        is_stale: meta_is_stale,
+        invalidated_by: meta_by,
+    };
+
+    for hook in cfg.on_request.iter() {
+        hook(&mut req_ctx).await?;
+    }
+
+    let mut req = client.request(req_ctx.method.clone(), &req_ctx.url);
+    for (k, v) in &req_ctx.headers {
+        req = req.header(k.as_str(), v.as_str());
+    }
+    req = match body {
+        RequestBody::Json(v) => req.body(serde_json::to_vec(v)?),
+        RequestBody::FormUrl(pairs) => req.body(encode_query(&pairs)),
+        RequestBody::Raw(_, b) => req.body(b),
+        RequestBody::Multipart(f) => req.multipart(f),
+        RequestBody::Stream(b) => req.body(b),
+        RequestBody::None => req,
+    };
+    Ok((req, state))
+}
+
+#[allow(clippy::too_many_arguments)]
+async fn execute_request(
+    client: &reqwest::Client,
+    cfg: &ClientConfig,
+    method: reqwest::Method,
+    raw_url: &str,
+    query: &[(String, String)],
+    body: RequestBody<'_>,
+    call_headers: Option<&HashMap<String, String>>,
+    bearer_token: Option<&str>,
+    is_retry: bool,
+    per_call_timeout: Option<std::time::Duration>,
+    cancel_token: Option<CancellationToken>,
+    request_meta: Option<&crate::invalidation::RequestMeta>,
+) -> Result<RequestResult, Error> {
+    let (mut req, state) = build_request(
+        client,
+        cfg,
+        method,
+        raw_url,
+        query,
+        body,
+        call_headers,
+        bearer_token,
+        is_retry,
+        request_meta,
+    )
+    .await?;
+
+    /* per-call timeout overrides cfg.timeout; ZERO means no timeout */
+    let effective_timeout = per_call_timeout.unwrap_or(cfg.timeout);
+    if !effective_timeout.is_zero() {
+        req = req.timeout(effective_timeout);
+    }
+
+    /* Race send + body read against cancel_token so external cancellation wins. */
+    let work = async {
+        let resp = req.send().await.map_err(map_send_error)?;
+        let status = resp.status().as_u16();
+        let resp_headers = resp.headers().clone();
+        let resp_url = resp.url().to_string();
+        let body = read_capped(resp, cfg.max_response_bytes).await?;
+        Ok::<_, Error>((status, resp_headers, resp_url, body))
+    };
+    let (status, resp_headers, resp_url, body_bytes) = match cancel_token {
+        Some(tok) => {
+            tokio::select! {
+                biased;
+                _ = tok.cancelled() => return Err(Error::Canceled),
+                r = work => r?,
+            }
+        }
+        None => work.await?,
+    };
+
+    let (meta_selector, meta_is_stale, meta_by) = match request_meta {
+        Some(m) => (m.selector.clone(), m.is_stale, m.invalidated_by.clone()),
+        None => (String::new(), false, Vec::new()),
+    };
+    let mut resp_ctx = ResponseContext {
+        status,
+        response: body_bytes,
+        headers: resp_headers,
+        state,
+        is_retry,
+        selector: meta_selector,
+        is_stale: meta_is_stale,
+        invalidated_by: meta_by,
+    };
+
+    for hook in cfg.on_response.iter() {
+        hook(&mut resp_ctx).await?;
+    }
+
+    Ok(RequestResult {
+        body: resp_ctx.response,
+        status,
+        headers: resp_ctx.headers,
+        url: resp_url,
+    })
+}
+
+/// open_stream sends a streaming request (SSE) through the same URL, header,
+/// auth and hook pipeline as a regular request, without a body-read timeout.
+/// A non-2xx status becomes a typed error.
+#[allow(clippy::too_many_arguments)]
+pub(crate) async fn open_stream(
+    client: &reqwest::Client,
+    cfg: &ClientConfig,
+    auth: &AuthState,
+    method: reqwest::Method,
+    raw_url: &str,
+    query: &[(String, String)],
+    body: RequestBody<'_>,
+    call_headers: Option<&HashMap<String, String>>,
+) -> Result<reqwest::Response, Error> {
+    let token = auth.current().await;
+    let (req, _state) = build_request(
+        client,
+        cfg,
+        method,
+        raw_url,
+        query,
+        body,
+        call_headers,
+        token.as_deref(),
+        false,
+        None,
+    )
+    .await?;
+    let resp = req.send().await.map_err(map_send_error)?;
+    let status = resp.status().as_u16();
+    if !(200..300).contains(&status) {
+        let body = read_capped(resp, 64 * 1024).await.unwrap_or_default();
+        return Err(raise_for_status(status, body).unwrap_or(Error::Other(format!("status {}", status))));
+    }
+    Ok(resp)
+}
+
+/// auth_headers returns config headers, extra headers and the auth header, for
+/// transports that cannot run the request pipeline (WebSocket dials).
+pub(crate) async fn auth_headers(
+    cfg: &ClientConfig,
+    auth: &AuthState,
+    extra: Option<&HashMap<String, String>>,
+) -> HashMap<String, String> {
+    let token = auth.current().await;
+    merged_headers(
+        &cfg.headers,
+        extra,
+        cfg.auth_header_name.as_deref(),
+        cfg.auth_header_prefix.as_deref(),
+        token.as_deref(),
+    )
+}
+
+/// to_ws_url swaps the scheme only; a URL inside the query string is untouched.
+pub fn to_ws_url(url: &str) -> String {
+    if let Some(rest) = url.strip_prefix("https://") {
+        format!("wss://{}", rest)
+    } else if let Some(rest) = url.strip_prefix("http://") {
+        format!("ws://{}", rest)
+    } else {
+        url.to_string()
+    }
+}