@kawaiininja/fetch 1.0.11 → 1.0.13

package/dist/context/ApiContext.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-import { createContext, useMemo } from "react";
+import { createContext, useCallback, useMemo } from "react";
 /**
  * Internal service header for API requests
  */
@@ -14,24 +14,28 @@ export const ApiContext = createContext(null);
  * Constructs full API URLs from relative paths using the baseUrl.
  */
 export function ApiProvider({ config, children }) {
-    const value = useMemo(() => {
-        // Ensure valid config structure
-        const baseUrl = config?.baseUrl || "";
-        const version = config?.version || "v1";
-        return {
-            baseUrl,
-            version,
-            disableCsrf: !!config?.disableCsrf,
-            onError: config?.onError,
-            // Helper to construct URLs
-            apiUrl: (path) => {
-                const cleanBase = baseUrl.endsWith("/")
-                    ? baseUrl.slice(0, -1)
-                    : baseUrl;
-                const cleanPath = path.startsWith("/") ? path : `/${path}`;
-                return `${cleanBase}${cleanPath}`;
-            },
-        };
-    }, [config]);
+    // Ensure valid config structure
+    const baseUrl = config?.baseUrl || "";
+    const version = config?.version || "v1";
+    const disableCsrf = !!config?.disableCsrf;
+    const onError = config?.onError;
+    /**
+     * 🛡️ HYPER-STABLE URL CONSTRUCTOR
+     * Memoized independently of the context value to prevent downstream loop invalidation.
+     */
+    const apiUrl = useCallback((path) => {
+        if (path.startsWith("http"))
+            return path;
+        const cleanBase = baseUrl.endsWith("/") ? baseUrl.slice(0, -1) : baseUrl;
+        const cleanPath = path.startsWith("/") ? path : `/${path}`;
+        return `${cleanBase}${cleanPath}`;
+    }, [baseUrl]);
+    const value = useMemo(() => ({
+        baseUrl,
+        version,
+        disableCsrf,
+        onError,
+        apiUrl,
+    }), [baseUrl, version, disableCsrf, onError, apiUrl]);
     return _jsx(ApiContext.Provider, { value: value, children: children });
 }

package/dist/hooks/useCsrf.js

@@ -1,5 +1,5 @@
 import { SecureStoragePlugin } from "capacitor-secure-storage-plugin";
-import { useCallback, useRef } from "react";
+import { useCallback, useMemo, useRef } from "react";
 import { INTERNAL_HEADER } from "../context/ApiContext";
 import { isNative } from "./platform";
 import { useApiConfig } from "./useApiConfig";
@@ -85,5 +85,5 @@ export function useCsrf() {
         }
         return token;
     }, [apiUrl]);
-    return { fetchCSRF, clearCsrf };
+    return useMemo(() => ({ fetchCSRF, clearCsrf }), [fetchCSRF, clearCsrf]);
 }

package/dist/hooks/useFetch.js

@@ -44,7 +44,6 @@ export const useFetch = (endpoint, baseOptions = {}) => {
     const abortRef = useRef(new AbortController());
     const mounted = useRef(true);
     const optionsRef = useRef(baseOptions);
-    const requestInProgress = useRef(false);
     const [state, setState] = useState({
         data: null,
         loading: false,
@@ -76,7 +75,7 @@ export const useFetch = (endpoint, baseOptions = {}) => {
         if (_isNative && isInternal) {
             // Mobile relies on manual headers ("Active Courier")
             // 🛡️ S-RANK UPGRADE: Use Session Memory Vault (In-Memory Singleton)
-            console.log(`[useFetch] [Native] Strategy: Active Courier for ${url}`);
+            // console.log(`[useFetch] [Native] Strategy: Active Courier for ${url}`);
             if (!nativeAuthVault.loaded) {
                 // If an initialization is already in progress, await it
                 if (!nativeAuthVault.initPromise) {
@@ -125,20 +124,15 @@ export const useFetch = (endpoint, baseOptions = {}) => {
         // 🔒 SECURITY STRATEGY: WEB (BROWSER)
         if (!_isNative && isInternal) {
             // Web relies on Cookies ("Passive Courier") for Auth
-            // BUT we MUST attach the CSRF Token to prevent attacks
             if (token) {
                 headersConfig["X-CSRF-Token"] = token;
-                // console.log("[useFetch] [Web] CSRF token attached.");
             }
-            // On Web, we DO NOT attach 'Authorization' or 'Session-ID' from localStorage
-            // This minimizes XSS risk. The HttpOnly cookie handles it.
         }
         return fetch(url, {
             ...optionsRef.current,
             ...rest,
             method,
             signal: abortRef.current.signal,
-            // 🍪 Web: "include" sends cookies. Mobile: ignored/useless but harmless.
             credentials: "include",
             headers: headersConfig,
             body,
@@ -158,35 +152,28 @@ export const useFetch = (endpoint, baseOptions = {}) => {
         }
         return res.text();
     };
+    // 🚀 STABLE REQUEST METHOD
     const request = useCallback(async (params = {}) => {
-        const { url = resolvedUrl, method = "GET", body, headers, parseAs = "auto", ...rest } = params;
+        const { url = endpoint, method = "GET", body, headers, parseAs = "auto", ...rest } = params;
         let finalUrl = url.startsWith("http") ? url : apiUrl(url);
         if (!finalUrl)
             return;
-        // 🛡️ RECURSION GUARD: Prevent overlapping requests from the same hook instance
-        if (requestInProgress.current) {
-            console.warn(`[useFetch] Request already in progress for ${finalUrl}`);
-            return;
-        }
-        requestInProgress.current = true;
         safeSet(() => ({ loading: true, error: null }));
         let lastStatus = null;
         try {
-            const _isNative = isNative();
             let csrfToken = "";
-            // 🔒 CSRF is only required for Web (Browser) strategy
-            if (!disableCsrf && !_isNative) {
+            if (!disableCsrf) {
                 csrfToken = await fetchCSRF();
             }
             let res = await performFetch(finalUrl, method, csrfToken, body, headers, rest);
             lastStatus = res.status;
-            // 🔄 Auto-retry on CSRF error
-            if (!disableCsrf && !isNative() && res.status === 403) {
+            // 🔄 Auto-retry on CSRF error (One-time only)
+            if (!disableCsrf && res.status === 403) {
                 try {
                     const errorBody = await res.clone().json();
                     if (errorBody?.code === "CSRF_ERROR" ||
                         errorBody?.message === "Invalid or missing CSRF token") {
-                        clearCsrf();
+                        await clearCsrf();
                         csrfToken = await fetchCSRF();
                         res = await performFetch(finalUrl, method, csrfToken, body, headers, rest);
                         lastStatus = res.status;
@@ -206,25 +193,23 @@ export const useFetch = (endpoint, baseOptions = {}) => {
         catch (err) {
             if (err.name !== "AbortError") {
                 safeSet(() => ({ error: err.message, status: lastStatus }));
-                // 📣 Global Error Broadcast (Disabled on Native)
-                if (onError && !isNative()) {
+                if (onError)
                     onError(err.message, lastStatus);
-                }
                 throw err;
             }
         }
         finally {
-            requestInProgress.current = false;
             safeSet(() => ({ loading: false }));
         }
-    }, [resolvedUrl, fetchCSRF, clearCsrf, apiUrl, safeSet]);
+    }, [endpoint, fetchCSRF, clearCsrf, apiUrl, safeSet, disableCsrf, onError]);
+    // 🧹 LIFECYCLE
     useEffect(() => {
-        abortRef.current = new AbortController();
         mounted.current = true;
         return () => {
             mounted.current = false;
             abortRef.current?.abort();
         };
     }, []);
+    // 🏹 STABLE API SURFACE
     return useMemo(() => createApiSurface({ state, request, baseUrl: resolvedUrl, safeSet }), [state, request, resolvedUrl, safeSet]);
 };

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@kawaiininja/fetch",
-    "version": "1.0.11",
+    "version": "1.0.13",
     "description": "Core fetch utility for Onyx Framework",
     "main": "dist/index.js",
     "types": "dist/index.d.ts",