@fgrzl/fetch 1.1.0-alpha.2 → 1.1.0-alpha.7

package/dist/{errors.d.ts → cjs/errors/index.d.ts}

@@ -1,5 +1,21 @@
 /**
- * @fileoverview Custom error classes for the fetch client.
+ * @fileoverview Custom error classes - "Pit of Success" pattern.
+ *
+ * 🎯 LEVEL 1: HttpError, NetworkError - Most common error types you'll catch
+ * 🎯 LEVEL 2: FetchError - Base error class for advanced error handling
+ *
+ * @example
+ * ```typescript
+ * try {
+ *   await client.get('/api/data');
+ * } catch (error) {
+ *   if (error instanceof HttpError) {
+ *     console.log(`HTTP ${error.status}: ${error.statusText}`);
+ *   } else if (error instanceof NetworkError) {
+ *     console.log('Network connection failed');
+ *   }
+ * }
+ * ```
  */
 /**
  * Base error class for all fetch client errors.
@@ -23,7 +39,7 @@ export declare class HttpError extends FetchError {
     /** The HTTP status text */
     readonly statusText: string;
     /** The response body (if available) */
-    readonly body: any;
+    readonly body: unknown;
     /**
      * Creates a new HttpError.
      * @param status - HTTP status code
@@ -31,7 +47,7 @@ export declare class HttpError extends FetchError {
      * @param body - Response body
      * @param url - The request URL
      */
-    constructor(status: number, statusText: string, body: any, url: string);
+    constructor(status: number, statusText: string, body: unknown, url: string);
 }
 /**
  * Error thrown when a network request fails completely.
@@ -45,3 +61,4 @@ export declare class NetworkError extends FetchError {
      */
     constructor(message: string, url: string, cause?: Error);
 }
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/errors/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH;;GAEG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,gCAAgC;IAChC,SAAgB,KAAK,CAAC,EAAE,KAAK,CAAC;IAE9B;;;;OAIG;gBACS,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAO3C;AAID;;GAEG;AACH,qBAAa,SAAU,SAAQ,UAAU;IACvC,2BAA2B;IAC3B,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,2BAA2B;IAC3B,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,uCAAuC;IACvC,SAAgB,IAAI,EAAE,OAAO,CAAC;IAE9B;;;;;;OAMG;gBACS,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM;CAO3E;AAED;;GAEG;AACH,qBAAa,YAAa,SAAQ,UAAU;IAC1C;;;;;OAKG;gBACS,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAIxD"}

package/dist/{errors.js → cjs/errors/index.js}

@@ -1,9 +1,26 @@
 "use strict";
 /**
- * @fileoverview Custom error classes for the fetch client.
+ * @fileoverview Custom error classes - "Pit of Success" pattern.
+ *
+ * 🎯 LEVEL 1: HttpError, NetworkError - Most common error types you'll catch
+ * 🎯 LEVEL 2: FetchError - Base error class for advanced error handling
+ *
+ * @example
+ * ```typescript
+ * try {
+ *   await client.get('/api/data');
+ * } catch (error) {
+ *   if (error instanceof HttpError) {
+ *     console.log(`HTTP ${error.status}: ${error.statusText}`);
+ *   } else if (error instanceof NetworkError) {
+ *     console.log('Network connection failed');
+ *   }
+ * }
+ * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.NetworkError = exports.HttpError = exports.FetchError = void 0;
+// 🎯 LEVEL 2: Base error class (for advanced use cases)
 /**
  * Base error class for all fetch client errors.
  */
@@ -16,10 +33,13 @@ class FetchError extends Error {
     constructor(message, cause) {
         super(message);
         this.name = 'FetchError';
-        this.cause = cause;
+        if (cause !== undefined) {
+            this.cause = cause;
+        }
     }
 }
 exports.FetchError = FetchError;
+// 🎯 LEVEL 1: Most commonly used error types
 /**
  * Error thrown when an HTTP request fails with a non-2xx status code.
  */
@@ -56,4 +76,4 @@ class NetworkError extends FetchError {
     }
 }
 exports.NetworkError = NetworkError;
-//# sourceMappingURL=errors.js.map
+//# sourceMappingURL=index.js.map

package/dist/cjs/errors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/errors/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAEH,wDAAwD;AAExD;;GAEG;AACH,MAAa,UAAW,SAAQ,KAAK;IAInC;;;;OAIG;IACH,YAAY,OAAe,EAAE,KAAa;QACxC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;CACF;AAhBD,gCAgBC;AAED,6CAA6C;AAE7C;;GAEG;AACH,MAAa,SAAU,SAAQ,UAAU;IAQvC;;;;;;OAMG;IACH,YAAY,MAAc,EAAE,UAAkB,EAAE,IAAa,EAAE,GAAW;QACxE,KAAK,CAAC,QAAQ,MAAM,IAAI,UAAU,OAAO,GAAG,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAtBD,8BAsBC;AAED;;GAEG;AACH,MAAa,YAAa,SAAQ,UAAU;IAC1C;;;;;OAKG;IACH,YAAY,OAAe,EAAE,GAAW,EAAE,KAAa;QACrD,KAAK,CAAC,qBAAqB,GAAG,KAAK,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAXD,oCAWC"}

package/dist/cjs/index.d.ts

@@ -0,0 +1,65 @@
+/**
+ * @fileoverview Main library entry point with "pit of success" architecture.
+ *
+ * This module exports everything users need in order of discoverability:
+ * 1. Pre-configured client with smart defaults (80% of users start here)
+ * 2. FetchClient for custom configurations
+ * 3. Individual middleware functions for specific needs
+ * 4. Pre-built middleware stacks for common scenarios
+ * 5. Types for TypeScript users
+ */
+import { FetchClient } from './client/fetch-client';
+/**
+ * 🎯 PIT OF SUCCESS: Pre-configured fetch client (Level 1 - 80% of users)
+ *
+ * This client is ready to use out of the box with production-ready middleware:
+ * - Authentication support (configure your token provider)
+ * - Automatic retries with exponential backoff
+ * - Response caching for GET requests
+ * - Request/response logging
+ * - Rate limiting protection
+ * - Same-origin credentials for session-based auth (cookies)
+ *
+ * @example Just import and use:
+ * ```typescript
+ * import api from '@fgrzl/fetch';
+ *
+ * // Works immediately - no setup required!
+ * const users = await api.get('/api/users');
+ * const newUser = await api.post('/api/users', { name: 'John' });
+ *
+ * // With query parameters
+ * const activeUsers = await api.get('/api/users', { status: 'active', limit: 10 });
+ * ```
+ *
+ * @example Configure authentication:
+ * ```typescript
+ * import api from '@fgrzl/fetch';
+ * import { useAuthentication } from '@fgrzl/fetch/middleware';
+ *
+ * const authClient = useAuthentication(api, {
+ *   tokenProvider: () => localStorage.getItem('auth-token') || ''
+ * });
+ * ```
+ *
+ * @example For token-only auth (no cookies):
+ * ```typescript
+ * import { FetchClient, useAuthentication } from '@fgrzl/fetch';
+ *
+ * const tokenClient = useAuthentication(new FetchClient({
+ *   credentials: 'omit' // Don't send cookies
+ * }), {
+ *   tokenProvider: () => getJWTToken()
+ * });
+ * ```
+ */
+declare const api: FetchClient;
+export default api;
+export { FetchClient } from './client/fetch-client';
+export { FetchError, HttpError, NetworkError } from './errors';
+export { useAuthentication, createAuthenticationMiddleware, useAuthorization, createAuthorizationMiddleware, useCache, createCacheMiddleware, useCSRF, useLogging, createLoggingMiddleware, useRateLimit, createRateLimitMiddleware, useRetry, createRetryMiddleware, } from './middleware';
+export { useProductionStack, useDevelopmentStack, useBasicStack, } from './middleware';
+export type { FetchMiddleware as InterceptMiddleware } from './client/fetch-client';
+export type { FetchResponse, FetchClientOptions } from './client/types';
+export type { AuthenticationOptions, AuthTokenProvider, AuthorizationOptions, UnauthorizedHandler, CacheOptions, CacheStorage, CacheEntry, CacheKeyGenerator, LoggingOptions, Logger, LogLevel, RateLimitOptions, RateLimitAlgorithm, RetryOptions, } from './middleware';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,QAAA,MAAM,GAAG,aAwBR,CAAC;AAGF,eAAe,GAAG,CAAC;AAGnB,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG/D,OAAO,EAEL,iBAAiB,EACjB,8BAA8B,EAE9B,gBAAgB,EAChB,6BAA6B,EAE7B,QAAQ,EACR,qBAAqB,EAErB,OAAO,EAEP,UAAU,EACV,uBAAuB,EAEvB,YAAY,EACZ,yBAAyB,EAEzB,QAAQ,EACR,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,GACd,MAAM,cAAc,CAAC;AAGtB,YAAY,EAAE,eAAe,IAAI,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACpF,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGxE,YAAY,EAEV,qBAAqB,EACrB,iBAAiB,EAEjB,oBAAoB,EACpB,mBAAmB,EAEnB,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,iBAAiB,EAEjB,cAAc,EACd,MAAM,EACN,QAAQ,EAER,gBAAgB,EAChB,kBAAkB,EAElB,YAAY,GACb,MAAM,cAAc,CAAC"}

package/dist/cjs/index.js

@@ -0,0 +1,118 @@
+"use strict";
+/**
+ * @fileoverview Main library entry point with "pit of success" architecture.
+ *
+ * This module exports everything users need in order of discoverability:
+ * 1. Pre-configured client with smart defaults (80% of users start here)
+ * 2. FetchClient for custom configurations
+ * 3. Individual middleware functions for specific needs
+ * 4. Pre-built middleware stacks for common scenarios
+ * 5. Types for TypeScript users
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useBasicStack = exports.useDevelopmentStack = exports.useProductionStack = exports.createRetryMiddleware = exports.useRetry = exports.createRateLimitMiddleware = exports.useRateLimit = exports.createLoggingMiddleware = exports.useLogging = exports.useCSRF = exports.createCacheMiddleware = exports.useCache = exports.createAuthorizationMiddleware = exports.useAuthorization = exports.createAuthenticationMiddleware = exports.useAuthentication = exports.NetworkError = exports.HttpError = exports.FetchError = exports.FetchClient = void 0;
+const fetch_client_1 = require("./client/fetch-client");
+const middleware_1 = require("./middleware");
+/**
+ * 🎯 PIT OF SUCCESS: Pre-configured fetch client (Level 1 - 80% of users)
+ *
+ * This client is ready to use out of the box with production-ready middleware:
+ * - Authentication support (configure your token provider)
+ * - Automatic retries with exponential backoff
+ * - Response caching for GET requests
+ * - Request/response logging
+ * - Rate limiting protection
+ * - Same-origin credentials for session-based auth (cookies)
+ *
+ * @example Just import and use:
+ * ```typescript
+ * import api from '@fgrzl/fetch';
+ *
+ * // Works immediately - no setup required!
+ * const users = await api.get('/api/users');
+ * const newUser = await api.post('/api/users', { name: 'John' });
+ *
+ * // With query parameters
+ * const activeUsers = await api.get('/api/users', { status: 'active', limit: 10 });
+ * ```
+ *
+ * @example Configure authentication:
+ * ```typescript
+ * import api from '@fgrzl/fetch';
+ * import { useAuthentication } from '@fgrzl/fetch/middleware';
+ *
+ * const authClient = useAuthentication(api, {
+ *   tokenProvider: () => localStorage.getItem('auth-token') || ''
+ * });
+ * ```
+ *
+ * @example For token-only auth (no cookies):
+ * ```typescript
+ * import { FetchClient, useAuthentication } from '@fgrzl/fetch';
+ *
+ * const tokenClient = useAuthentication(new FetchClient({
+ *   credentials: 'omit' // Don't send cookies
+ * }), {
+ *   tokenProvider: () => getJWTToken()
+ * });
+ * ```
+ */
+const api = (0, middleware_1.useProductionStack)(new fetch_client_1.FetchClient({
+    // Smart default: include cookies for session-based auth
+    // Can be overridden by creating a custom FetchClient
+    credentials: 'same-origin',
+}), {
+    // Smart defaults - users can override as needed
+    retry: {
+        maxRetries: 2,
+        delay: 1000,
+    },
+    cache: {
+        ttl: 5 * 60 * 1000, // 5 minutes
+        methods: ['GET'],
+    },
+    logging: {
+        level: 'info',
+    },
+    rateLimit: {
+        maxRequests: 100,
+        windowMs: 60 * 1000, // 100 requests per minute
+    },
+});
+// 🎯 LEVEL 1: Export the production-ready client as default
+exports.default = api;
+// 🎯 LEVEL 2: FetchClient for custom configurations
+var fetch_client_2 = require("./client/fetch-client");
+Object.defineProperty(exports, "FetchClient", { enumerable: true, get: function () { return fetch_client_2.FetchClient; } });
+var errors_1 = require("./errors");
+Object.defineProperty(exports, "FetchError", { enumerable: true, get: function () { return errors_1.FetchError; } });
+Object.defineProperty(exports, "HttpError", { enumerable: true, get: function () { return errors_1.HttpError; } });
+Object.defineProperty(exports, "NetworkError", { enumerable: true, get: function () { return errors_1.NetworkError; } });
+// 🎯 LEVEL 3: Individual middleware functions (import from our comprehensive middleware index)
+var middleware_2 = require("./middleware");
+// Authentication
+Object.defineProperty(exports, "useAuthentication", { enumerable: true, get: function () { return middleware_2.useAuthentication; } });
+Object.defineProperty(exports, "createAuthenticationMiddleware", { enumerable: true, get: function () { return middleware_2.createAuthenticationMiddleware; } });
+// Authorization
+Object.defineProperty(exports, "useAuthorization", { enumerable: true, get: function () { return middleware_2.useAuthorization; } });
+Object.defineProperty(exports, "createAuthorizationMiddleware", { enumerable: true, get: function () { return middleware_2.createAuthorizationMiddleware; } });
+// Cache
+Object.defineProperty(exports, "useCache", { enumerable: true, get: function () { return middleware_2.useCache; } });
+Object.defineProperty(exports, "createCacheMiddleware", { enumerable: true, get: function () { return middleware_2.createCacheMiddleware; } });
+// CSRF
+Object.defineProperty(exports, "useCSRF", { enumerable: true, get: function () { return middleware_2.useCSRF; } });
+// Logging
+Object.defineProperty(exports, "useLogging", { enumerable: true, get: function () { return middleware_2.useLogging; } });
+Object.defineProperty(exports, "createLoggingMiddleware", { enumerable: true, get: function () { return middleware_2.createLoggingMiddleware; } });
+// Rate Limiting
+Object.defineProperty(exports, "useRateLimit", { enumerable: true, get: function () { return middleware_2.useRateLimit; } });
+Object.defineProperty(exports, "createRateLimitMiddleware", { enumerable: true, get: function () { return middleware_2.createRateLimitMiddleware; } });
+// Retry
+Object.defineProperty(exports, "useRetry", { enumerable: true, get: function () { return middleware_2.useRetry; } });
+Object.defineProperty(exports, "createRetryMiddleware", { enumerable: true, get: function () { return middleware_2.createRetryMiddleware; } });
+// 🎯 LEVEL 4: Pre-built middleware stacks for common scenarios
+var middleware_3 = require("./middleware");
+Object.defineProperty(exports, "useProductionStack", { enumerable: true, get: function () { return middleware_3.useProductionStack; } });
+Object.defineProperty(exports, "useDevelopmentStack", { enumerable: true, get: function () { return middleware_3.useDevelopmentStack; } });
+Object.defineProperty(exports, "useBasicStack", { enumerable: true, get: function () { return middleware_3.useBasicStack; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAEH,wDAAoD;AACpD,6CAAkD;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,GAAG,GAAG,IAAA,+BAAkB,EAC5B,IAAI,0BAAW,CAAC;IACd,wDAAwD;IACxD,qDAAqD;IACrD,WAAW,EAAE,aAAa;CAC3B,CAAC,EACF;IACE,gDAAgD;IAChD,KAAK,EAAE;QACL,UAAU,EAAE,CAAC;QACb,KAAK,EAAE,IAAI;KACZ;IACD,KAAK,EAAE;QACL,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,YAAY;QAChC,OAAO,EAAE,CAAC,KAAK,CAAC;KACjB;IACD,OAAO,EAAE;QACP,KAAK,EAAE,MAAM;KACd;IACD,SAAS,EAAE;QACT,WAAW,EAAE,GAAG;QAChB,QAAQ,EAAE,EAAE,GAAG,IAAI,EAAE,0BAA0B;KAChD;CACF,CACF,CAAC;AAEF,4DAA4D;AAC5D,kBAAe,GAAG,CAAC;AAEnB,oDAAoD;AACpD,sDAAoD;AAA3C,2GAAA,WAAW,OAAA;AACpB,mCAA+D;AAAtD,oGAAA,UAAU,OAAA;AAAE,mGAAA,SAAS,OAAA;AAAE,sGAAA,YAAY,OAAA;AAE5C,+FAA+F;AAC/F,2CAqBsB;AApBpB,iBAAiB;AACjB,+GAAA,iBAAiB,OAAA;AACjB,4HAAA,8BAA8B,OAAA;AAC9B,gBAAgB;AAChB,8GAAA,gBAAgB,OAAA;AAChB,2HAAA,6BAA6B,OAAA;AAC7B,QAAQ;AACR,sGAAA,QAAQ,OAAA;AACR,mHAAA,qBAAqB,OAAA;AACrB,OAAO;AACP,qGAAA,OAAO,OAAA;AACP,UAAU;AACV,wGAAA,UAAU,OAAA;AACV,qHAAA,uBAAuB,OAAA;AACvB,gBAAgB;AAChB,0GAAA,YAAY,OAAA;AACZ,uHAAA,yBAAyB,OAAA;AACzB,QAAQ;AACR,sGAAA,QAAQ,OAAA;AACR,mHAAA,qBAAqB,OAAA;AAGvB,+DAA+D;AAC/D,2CAIsB;AAHpB,gHAAA,kBAAkB,OAAA;AAClB,iHAAA,mBAAmB,OAAA;AACnB,2GAAA,aAAa,OAAA"}

package/dist/cjs/middleware/authentication/authentication.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @fileoverview Authentication middleware implementation.
+ */
+import type { FetchMiddleware } from '../../client/fetch-client';
+import type { AuthenticationOptions } from './types';
+/**
+ * Creates authentication middleware with smart defaults.
+ * Automatically adds Bearer tokens to requests.
+ *
+ * @param options - Authentication configuration options
+ * @returns Authentication middleware for use with FetchClient
+ *
+ * @example Basic usage:
+ * ```typescript
+ * const authClient = useAuthentication(client, {
+ *   tokenProvider: () => localStorage.getItem('token') || ''
+ * });
+ * ```
+ *
+ * @example Async token provider:
+ * ```typescript
+ * const authClient = useAuthentication(client, {
+ *   tokenProvider: async () => {
+ *     const token = await getAuthToken();
+ *     return token || '';
+ *   }
+ * });
+ * ```
+ */
+export declare function createAuthenticationMiddleware(options: AuthenticationOptions): FetchMiddleware;
+//# sourceMappingURL=authentication.d.ts.map

package/dist/cjs/middleware/authentication/authentication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.d.ts","sourceRoot":"","sources":["../../../../src/middleware/authentication/authentication.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAoCrD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,qBAAqB,GAC7B,eAAe,CAkDjB"}

package/dist/cjs/middleware/authentication/authentication.js

@@ -0,0 +1,93 @@
+"use strict";
+/**
+ * @fileoverview Authentication middleware implementation.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAuthenticationMiddleware = createAuthenticationMiddleware;
+/**
+ * Checks if a URL should skip authentication based on configured patterns.
+ */
+function shouldSkipAuth(url, skipPatterns = []) {
+    return skipPatterns.some((pattern) => {
+        if (typeof pattern === 'string') {
+            return url.includes(pattern);
+        }
+        return pattern.test(url);
+    });
+}
+/**
+ * Checks if a URL should include authentication based on configured patterns.
+ */
+function shouldIncludeAuth(url, includePatterns) {
+    if (!includePatterns || includePatterns.length === 0) {
+        return true; // Include by default if no patterns specified
+    }
+    return includePatterns.some((pattern) => {
+        if (typeof pattern === 'string') {
+            return url.includes(pattern);
+        }
+        return pattern.test(url);
+    });
+}
+/**
+ * Creates authentication middleware with smart defaults.
+ * Automatically adds Bearer tokens to requests.
+ *
+ * @param options - Authentication configuration options
+ * @returns Authentication middleware for use with FetchClient
+ *
+ * @example Basic usage:
+ * ```typescript
+ * const authClient = useAuthentication(client, {
+ *   tokenProvider: () => localStorage.getItem('token') || ''
+ * });
+ * ```
+ *
+ * @example Async token provider:
+ * ```typescript
+ * const authClient = useAuthentication(client, {
+ *   tokenProvider: async () => {
+ *     const token = await getAuthToken();
+ *     return token || '';
+ *   }
+ * });
+ * ```
+ */
+function createAuthenticationMiddleware(options) {
+    const { tokenProvider, headerName = 'Authorization', tokenType = 'Bearer', skipPatterns = [], includePatterns, } = options;
+    return async (request, next) => {
+        const url = request.url || '';
+        const parsedUrl = new URL(url);
+        const pathname = parsedUrl.pathname;
+        // Skip authentication if:
+        // 1. URL matches a skip pattern
+        // 2. URL doesn't match include patterns (if specified)
+        if (shouldSkipAuth(pathname, skipPatterns) ||
+            !shouldIncludeAuth(pathname, includePatterns)) {
+            return next(request);
+        }
+        try {
+            // Get auth token (may be async)
+            const token = await tokenProvider();
+            // Skip if no token available
+            if (!token) {
+                return next(request);
+            }
+            // Add auth header to request
+            const headers = new Headers(request.headers);
+            headers.set(headerName, `${tokenType} ${token}`);
+            // Create modified request with auth header
+            const modifiedRequest = {
+                ...request,
+                headers,
+            };
+            return next(modifiedRequest);
+        }
+        catch {
+            // If token provider fails, proceed without auth
+            // This ensures network requests don't fail due to auth issues
+            return next(request);
+        }
+    };
+}
+//# sourceMappingURL=authentication.js.map

package/dist/cjs/middleware/authentication/authentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.js","sourceRoot":"","sources":["../../../../src/middleware/authentication/authentication.ts"],"names":[],"mappings":";AAAA;;GAEG;;AA+DH,wEAoDC;AA9GD;;GAEG;AACH,SAAS,cAAc,CACrB,GAAW,EACX,eAAoC,EAAE;IAEtC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CACxB,GAAW,EACX,eAAqC;IAErC,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,CAAC,8CAA8C;IAC7D,CAAC;IAED,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACtC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAgB,8BAA8B,CAC5C,OAA8B;IAE9B,MAAM,EACJ,aAAa,EACb,UAAU,GAAG,eAAe,EAC5B,SAAS,GAAG,QAAQ,EACpB,YAAY,GAAG,EAAE,EACjB,eAAe,GAChB,GAAG,OAAO,CAAC;IAEZ,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QAEpC,0BAA0B;QAC1B,gCAAgC;QAChC,uDAAuD;QACvD,IACE,cAAc,CAAC,QAAQ,EAAE,YAAY,CAAC;YACtC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,eAAe,CAAC,EAC7C,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QAED,IAAI,CAAC;YACH,gCAAgC;YAChC,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAC;YAEpC,6BAA6B;YAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;YAED,6BAA6B;YAC7B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,SAAS,IAAI,KAAK,EAAE,CAAC,CAAC;YAEjD,2CAA2C;YAC3C,MAAM,eAAe,GAAG;gBACtB,GAAG,OAAO;gBACV,OAAO;aACR,CAAC;YAEF,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;YAChD,8DAA8D;YAC9D,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/cjs/middleware/authentication/index.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @fileoverview Authentication middleware - "pit of success" API.
+ */
+import type { FetchClient } from '../../client/fetch-client';
+import type { AuthenticationOptions } from './types';
+export type { AuthenticationOptions, AuthTokenProvider } from './types';
+export { createAuthenticationMiddleware } from './authentication';
+/**
+ * "Pit of success" API for adding authentication to a FetchClient.
+ * Automatically adds Bearer tokens to requests.
+ *
+ * @param client - The FetchClient to add authentication to
+ * @param options - Authentication configuration
+ * @returns A new FetchClient with authentication middleware
+ *
+ * @example Basic token from localStorage:
+ * ```typescript
+ * const authClient = useAuthentication(client, {
+ *   tokenProvider: () => localStorage.getItem('auth-token') || ''
+ * });
+ * ```
+ *
+ * @example Async token with refresh:
+ * ```typescript
+ * const authClient = useAuthentication(client, {
+ *   tokenProvider: async () => {
+ *     let token = localStorage.getItem('auth-token');
+ *     if (!token || isExpired(token)) {
+ *       token = await refreshToken();
+ *     }
+ *     return token || '';
+ *   }
+ * });
+ * ```
+ */
+export declare function useAuthentication(client: FetchClient, options: AuthenticationOptions): FetchClient;
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/middleware/authentication/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/middleware/authentication/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAIrD,YAAY,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAElE;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,qBAAqB,GAC7B,WAAW,CAEb"}

package/dist/cjs/middleware/authentication/index.js

@@ -0,0 +1,42 @@
+"use strict";
+/**
+ * @fileoverview Authentication middleware - "pit of success" API.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAuthenticationMiddleware = void 0;
+exports.useAuthentication = useAuthentication;
+const authentication_1 = require("./authentication");
+var authentication_2 = require("./authentication");
+Object.defineProperty(exports, "createAuthenticationMiddleware", { enumerable: true, get: function () { return authentication_2.createAuthenticationMiddleware; } });
+/**
+ * "Pit of success" API for adding authentication to a FetchClient.
+ * Automatically adds Bearer tokens to requests.
+ *
+ * @param client - The FetchClient to add authentication to
+ * @param options - Authentication configuration
+ * @returns A new FetchClient with authentication middleware
+ *
+ * @example Basic token from localStorage:
+ * ```typescript
+ * const authClient = useAuthentication(client, {
+ *   tokenProvider: () => localStorage.getItem('auth-token') || ''
+ * });
+ * ```
+ *
+ * @example Async token with refresh:
+ * ```typescript
+ * const authClient = useAuthentication(client, {
+ *   tokenProvider: async () => {
+ *     let token = localStorage.getItem('auth-token');
+ *     if (!token || isExpired(token)) {
+ *       token = await refreshToken();
+ *     }
+ *     return token || '';
+ *   }
+ * });
+ * ```
+ */
+function useAuthentication(client, options) {
+    return client.use((0, authentication_1.createAuthenticationMiddleware)(options));
+}
+//# sourceMappingURL=index.js.map

package/dist/cjs/middleware/authentication/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/middleware/authentication/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAsCH,8CAKC;AAvCD,qDAAkE;AAIlE,mDAAkE;AAAzD,gIAAA,8BAA8B,OAAA;AAEvC;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAgB,iBAAiB,CAC/B,MAAmB,EACnB,OAA8B;IAE9B,OAAO,MAAM,CAAC,GAAG,CAAC,IAAA,+CAA8B,EAAC,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC"}

package/dist/cjs/middleware/authentication/types.d.ts

@@ -0,0 +1,73 @@
+/**
+ * @fileoverview Authentication middleware types and configuration.
+ */
+/**
+ * Authentication token provider function.
+ * Should return the current auth token or empty string if not available.
+ */
+export type AuthTokenProvider = () => string | Promise<string>;
+/**
+ * Authentication configuration options - optimized for "pit of success".
+ *
+ * Smart defaults:
+ * - Uses standard Authorization header with Bearer token
+ * - Applies to all requests by default
+ * - Graceful handling when token is unavailable
+ */
+export interface AuthenticationOptions {
+    /**
+     * Function to get the current authentication token.
+     * Can be synchronous or asynchronous.
+     *
+     * @returns The auth token or empty string if not available
+     *
+     * @example Token from localStorage:
+     * ```typescript
+     * const getToken = () => localStorage.getItem('auth-token') || '';
+     * ```
+     *
+     * @example Async token refresh:
+     * ```typescript
+     * const getToken = async () => {
+     *   const token = localStorage.getItem('auth-token');
+     *   if (!token || isExpired(token)) {
+     *     return await refreshToken();
+     *   }
+     *   return token;
+     * };
+     * ```
+     */
+    tokenProvider: AuthTokenProvider;
+    /**
+     * Header name for the authentication token (default: 'Authorization')
+     * The token will be prefixed with the tokenType
+     */
+    headerName?: string;
+    /**
+     * Token type prefix (default: 'Bearer')
+     * Common alternatives: 'Token', 'JWT', 'ApiKey'
+     */
+    tokenType?: string;
+    /**
+     * Skip authentication for requests matching these URL patterns
+     * Useful for public endpoints that don't need auth
+     *
+     * @example
+     * ```typescript
+     * skipPatterns: [/^\/public\//, '/health', '/login']
+     * ```
+     */
+    skipPatterns?: (RegExp | string)[];
+    /**
+     * Only apply authentication to requests matching these patterns
+     * If specified, only these patterns will get auth headers
+     *
+     * @example
+     * ```typescript
+     * includePatterns: [/^\/api\//, '/graphql']
+     * ```
+     */
+    includePatterns?: (RegExp | string)[];
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/cjs/middleware/authentication/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/middleware/authentication/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAE/D;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,aAAa,EAAE,iBAAiB,CAAC;IAEjC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAEnC;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;CACvC;AAGD,OAAO,EAAE,CAAC"}

package/dist/cjs/middleware/authentication/types.js

@@ -0,0 +1,6 @@
+"use strict";
+/**
+ * @fileoverview Authentication middleware types and configuration.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/cjs/middleware/authentication/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/middleware/authentication/types.ts"],"names":[],"mappings":";AAAA;;GAEG"}

package/dist/cjs/middleware/authorization/authorization.d.ts

@@ -0,0 +1,30 @@
+/**
+ * @fileoverview Authorization middleware implementation.
+ */
+import type { FetchMiddleware } from '../../client/fetch-client';
+import type { AuthorizationOptions } from './types';
+/**
+ * Creates authorization middleware with smart defaults.
+ * Handles 401/403 responses by calling configured handlers.
+ *
+ * @param options - Authorization configuration options
+ * @returns Authorization middleware for use with FetchClient
+ *
+ * @example Basic redirect on 401:
+ * ```typescript
+ * const authzClient = useAuthorization(client, {
+ *   onUnauthorized: () => window.location.href = '/login'
+ * });
+ * ```
+ *
+ * @example Handle both 401 and 403:
+ * ```typescript
+ * const authzClient = useAuthorization(client, {
+ *   onUnauthorized: () => redirectToLogin(),
+ *   onForbidden: () => showAccessDeniedMessage(),
+ *   statusCodes: [401, 403]
+ * });
+ * ```
+ */
+export declare function createAuthorizationMiddleware(options: AuthorizationOptions): FetchMiddleware;
+//# sourceMappingURL=authorization.d.ts.map

package/dist/cjs/middleware/authorization/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../../../src/middleware/authorization/authorization.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAyBpD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,oBAAoB,GAC5B,eAAe,CAuCjB"}