mythik 0.0.1 → 0.1.0

package/dist/factory.d.ts

@@ -0,0 +1,56 @@
+import { type StateStore } from './state/store.js';
+import { type Resolver } from './expressions/resolver.js';
+import { type RenderEngine } from './renderer/engine.js';
+import { type PluginLoader } from './plugins/loader.js';
+import { type ElementRegistry, type ElementDefinition } from './elements/composer.js';
+import { type ValidationError } from './security/spec-validator.js';
+import { type UrlGuard } from './security/url-whitelist.js';
+import { type StateGuard } from './security/state-protection.js';
+import { type ProtectionRegistry } from './security/protection-registry.js';
+import { type RateLimiter } from './security/rate-limiter.js';
+import type { Spec } from './types.js';
+export interface SecurityConfig {
+    /** Allowed domains for fetch actions. Empty = allow all. */
+    allowedDomains?: string[];
+    /** State paths that specs cannot write to. */
+    protectedPaths?: string[];
+    /** Max actions per second before rate limiting kicks in. Default: 100. */
+    maxActionsPerSecond?: number;
+    /** Validate spec structure before rendering. Default: true. */
+    validateSpecs?: boolean;
+    /** Expose detailed error info in UI. Default: true (dev). Set false for production. */
+    exposeErrors?: boolean;
+}
+export interface MythikConfig {
+    initialState?: Record<string, unknown>;
+    computedFunctions?: Record<string, (args: Record<string, unknown>) => unknown>;
+    tokens?: Record<string, unknown>;
+    locale?: string;
+    translations?: Record<string, Record<string, string>>;
+    elements?: ElementDefinition[];
+    security?: SecurityConfig;
+}
+export interface MythikInstance {
+    store: StateStore;
+    resolver: Resolver;
+    engine: RenderEngine;
+    plugins: PluginLoader;
+    elements: ElementRegistry;
+    security: {
+        urlGuard: UrlGuard;
+        stateGuard: StateGuard;
+        rateLimiter: RateLimiter;
+        validateSpec: (spec: Spec) => {
+            valid: boolean;
+            errors: ValidationError[];
+        };
+        exposeErrors: boolean;
+    };
+    /** Internal — used by mountSpecRuntime to contribute derive-protected paths via RAII. */
+    protectionRegistry: ProtectionRegistry;
+    applyPlugins: () => void;
+    /** Hot-swap tokens at runtime. Resolves DNA + defaults + overrides, rebuilds resolver & engine, bumps state counter to trigger re-render. */
+    updateTokens: (tokens: Record<string, unknown>) => void;
+}
+export declare function createMythik(config?: MythikConfig): MythikInstance;
+//# sourceMappingURL=factory.d.ts.map

package/dist/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAE1E,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAyB,KAAK,eAAe,EAAE,KAAK,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC7G,OAAO,EAAgB,KAAK,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACnF,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACtG,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAOvC,MAAM,WAAW,cAAc;IAC7B,4DAA4D;IAC5D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,8CAA8C;IAC9C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,0EAA0E;IAC1E,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,+DAA+D;IAC/D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uFAAuF;IACvF,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,YAAY,CAAC;IACtB,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE;QACR,QAAQ,EAAE,QAAQ,CAAC;QACnB,UAAU,EAAE,UAAU,CAAC;QACvB,WAAW,EAAE,WAAW,CAAC;QACzB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK;YAAE,KAAK,EAAE,OAAO,CAAC;YAAC,MAAM,EAAE,eAAe,EAAE,CAAA;SAAE,CAAC;QAC5E,YAAY,EAAE,OAAO,CAAC;KACvB,CAAC;IACF,yFAAyF;IACzF,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,6IAA6I;IAC7I,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACzD;AAED,wBAAgB,YAAY,CAAC,MAAM,GAAE,YAAiB,GAAG,cAAc,CA2QtE"}

package/dist/factory.js

@@ -0,0 +1,265 @@
+import { createStateStore } from './state/store.js';
+import { createResolver } from './expressions/resolver.js';
+import { createPrimitiveRegistry } from './renderer/registry.js';
+import { createRenderEngine } from './renderer/engine.js';
+import { createPluginLoader } from './plugins/loader.js';
+import { createElementRegistry } from './elements/composer.js';
+import { validateSpec } from './security/spec-validator.js';
+import { createUrlGuard } from './security/url-whitelist.js';
+import { createStateGuard } from './security/state-protection.js';
+import { createProtectionRegistry } from './security/protection-registry.js';
+import { createRateLimiter } from './security/rate-limiter.js';
+import { resolveDeepTokens, deepMergeTokens } from './design/deep-tokens.js';
+import { resolveSchemeColors, resolveColorWeight } from './design/identity/index.js';
+import { COLORED_SURFACE_DEFAULTS } from './design/identity/index.js';
+export function createMythik(config = {}) {
+    const store = createStateStore(config.initialState ?? {});
+    // Seed `/tokens/raw` from initial config.tokens so consumers reading this
+    // path (e.g. MythikRenderer's v2 LayerBackground root mount) see the
+    // starting tokens before any updateTokens call. Later updateTokens calls
+    // deep-merge on top of this seed.
+    if (config.tokens) {
+        store.set('/tokens/raw', config.tokens);
+    }
+    const plugins = createPluginLoader();
+    const primitiveRegistry = createPrimitiveRegistry();
+    const elements = createElementRegistry();
+    // Security
+    const secConfig = config.security ?? {};
+    const urlGuard = createUrlGuard(secConfig.allowedDomains);
+    const protectionRegistry = createProtectionRegistry({
+        defaultPaths: ['/tx/*', '/ui/forms/*', '/auth/*'],
+    });
+    // User-provided protected paths are a permanent contribution (release token discarded).
+    if (secConfig.protectedPaths && secConfig.protectedPaths.length > 0) {
+        protectionRegistry.contribute(secConfig.protectedPaths);
+    }
+    const stateGuard = createStateGuard(() => protectionRegistry.allPaths());
+    const rateLimiter = createRateLimiter({ maxActionsPerSecond: secConfig.maxActionsPerSecond ?? 100 });
+    const shouldValidate = secConfig.validateSpecs !== false; // Default true
+    const exposeErrors = secConfig.exposeErrors !== false; // Default true (dev mode)
+    // Register initial element definitions
+    if (config.elements) {
+        for (const def of config.elements) {
+            elements.register(def);
+        }
+    }
+    let resolver;
+    let engine;
+    // Resolve deep tokens (DNA + defaults + overrides) at initialization
+    let resolvedTokens = resolveDeepTokens(config.tokens);
+    // Persist resolved tokens to the store so consumers (e.g. MythikRenderer's
+    // v2 LayerBackground root mount) can read the fully-resolved tree
+    // including DNA-derived colors. Updated on every updateTokens call below.
+    store.set('/tokens/resolved', resolvedTokens);
+    let currentRawTokens = config.tokens ?? {};
+    /** Compute Phase 3 color values and inject into resolvedTokens for $token access */
+    function injectColorTokens(tokens) {
+        const colors = tokens.colors;
+        const identity = tokens.identity;
+        if (!colors)
+            return;
+        const scheme = identity?.colorScheme ?? 'light-surface';
+        const weight = identity?.colorWeight ?? 'monochrome';
+        const fullColors = {
+            primary: colors.primary, primaryLight: colors.primaryLight, primaryDark: colors.primaryDark,
+            accent: colors.accent, accentLight: colors.accentLight,
+            surface: colors.surface, background: colors.background,
+            text: colors.text, textMuted: colors.textMuted, border: colors.border,
+            error: colors.error, success: colors.success, warning: colors.warning,
+        };
+        const darkColors = tokens.modes?.dark?.colors;
+        const layers = scheme === 'colored-surface'
+            ? {
+                background: identity?.coloredSurfaceLayers?.background ?? COLORED_SURFACE_DEFAULTS.background,
+                surface: identity?.coloredSurfaceLayers?.surface ?? COLORED_SURFACE_DEFAULTS.surface,
+                primitive: identity?.coloredSurfaceLayers?.primitive ?? COLORED_SURFACE_DEFAULTS.primitive,
+            }
+            : undefined;
+        const schemeColors = resolveSchemeColors(scheme, fullColors, darkColors, layers);
+        const cwColors = { primary: schemeColors.primary, accent: schemeColors.accent, surface: schemeColors.surface, background: schemeColors.background, text: schemeColors.text, border: schemeColors.border };
+        const cwDark = darkColors ? { primary: darkColors.primary, accent: darkColors.accent, surface: darkColors.surface, background: darkColors.background, text: darkColors.text, border: darkColors.border } : undefined;
+        const colorWeightResult = resolveColorWeight(weight, cwColors, cwDark);
+        tokens.colorWeight = colorWeightResult;
+        tokens.schemeColors = schemeColors;
+        // Plan 3 Task 21 — `tokens.backgroundCSS` injection removed along with
+        // the legacy resolveBackgroundCSS. Background rendering is consumer-owned
+        // now: MythikRenderer mounts <BackgroundStack> from identity.background
+        // (a LayerBackground). Nothing in the framework reads `tokens.backgroundCSS`
+        // anymore (verified via grep at Task 21 migration time).
+    }
+    injectColorTokens(resolvedTokens);
+    // Inject icon renderer if registered via plugins.setIconRenderer()
+    function injectIconRenderer(tokens) {
+        const renderer = plugins.getIconRenderer();
+        if (renderer)
+            tokens._iconRenderer = renderer;
+    }
+    injectIconRenderer(resolvedTokens);
+    function buildResolver() {
+        return createResolver({
+            store,
+            computedFunctions: config.computedFunctions,
+            tokens: resolvedTokens,
+            locale: config.locale,
+            translations: config.translations,
+            extraExpressionHandlers: plugins.getExpressionHandlers(),
+        });
+    }
+    function buildEngine() {
+        return createRenderEngine({
+            resolver,
+            primitiveRegistry,
+            tokens: resolvedTokens,
+            elementRegistry: elements,
+        });
+    }
+    resolver = buildResolver();
+    engine = buildEngine();
+    // Wrap engine.render with spec validation (warnings only — engine isolates errors per element)
+    const originalEngine = engine;
+    let lastValidatedSpec = null;
+    const secureEngine = {
+        render(spec, changedPaths) {
+            if (shouldValidate && spec !== lastValidatedSpec) {
+                lastValidatedSpec = spec;
+                const result = validateSpec(spec, { primitiveRegistry, elementRegistry: elements });
+                if (!result.valid) {
+                    console.warn(`Spec validation warnings: ${result.errors.map((e) => e.message).join('; ')}`);
+                }
+            }
+            return originalEngine.render(spec, changedPaths);
+        },
+    };
+    engine = secureEngine;
+    function updateTokens(rawTokens) {
+        // _replace: true bypasses deep merge — used by reset to fully replace token state
+        if (rawTokens._replace) {
+            const { _replace, ...tokens } = rawTokens;
+            currentRawTokens = tokens;
+        }
+        else {
+            // Deep merge with previously-applied raw tokens — enables partial updates
+            currentRawTokens = deepMergeTokens(currentRawTokens, rawTokens);
+        }
+        // Normalize DNA seeds: if numeric values > 1, assume 0-100 scale and convert to 0-1
+        const normalized = { ...currentRawTokens };
+        if (normalized.dna && typeof normalized.dna === 'object') {
+            const dna = { ...normalized.dna };
+            const numericSeeds = ['roundness', 'density', 'depth', 'formality'];
+            for (const key of numericSeeds) {
+                if (typeof dna[key] === 'number' && dna[key] > 1) {
+                    dna[key] = dna[key] / 100;
+                }
+            }
+            normalized.dna = dna;
+        }
+        resolvedTokens = resolveDeepTokens(normalized);
+        injectColorTokens(resolvedTokens);
+        injectIconRenderer(resolvedTokens);
+        resolver = buildResolver();
+        const rawEngine = buildEngine();
+        lastValidatedSpec = null;
+        engine = {
+            render(spec, changedPaths) {
+                if (shouldValidate && spec !== lastValidatedSpec) {
+                    lastValidatedSpec = spec;
+                    const result = validateSpec(spec, { primitiveRegistry, elementRegistry: elements });
+                    if (!result.valid) {
+                        console.warn(`Spec validation warnings: ${result.errors.map((e) => e.message).join("; ")}`);
+                    }
+                }
+                return rawEngine.render(spec, changedPaths);
+            },
+        };
+        // Persist raw config for export/inspection
+        store.set('/tokens/raw', currentRawTokens);
+        // Persist resolved tree so consumers have DNA-derived colors + full
+        // merged identity at a single read path.
+        store.set('/tokens/resolved', resolvedTokens);
+        // Bump state counter to trigger React re-render
+        const currentVersion = store.get('/internal/tokenVersion') ?? 0;
+        store.set('/internal/tokenVersion', currentVersion + 1);
+    }
+    // Register updateTokens as a framework action so specs can call it
+    plugins.registerAction({
+        name: 'updateTokens',
+        handler: (params) => { updateTokens(params); },
+    });
+    function applyPlugins() {
+        for (const [type, renderer] of plugins.getPrimitives()) {
+            if (!primitiveRegistry.has(type)) {
+                primitiveRegistry.register(type, renderer);
+            }
+        }
+        // Layer 3 — register element definitions staged via plugins.registerElement.
+        // Skip any already in the registry (e.g. from config.elements) to keep applyPlugins idempotent.
+        for (const def of plugins.getElements()) {
+            if (!elements.has(def.type)) {
+                elements.register(def);
+            }
+        }
+        injectIconRenderer(resolvedTokens);
+        store.set('/tokens/resolved', resolvedTokens);
+        resolver = buildResolver();
+        const rawEngine = buildEngine();
+        lastValidatedSpec = null;
+        engine = {
+            render(spec, changedPaths) {
+                if (shouldValidate && spec !== lastValidatedSpec) {
+                    lastValidatedSpec = spec;
+                    const result = validateSpec(spec, { primitiveRegistry, elementRegistry: elements });
+                    if (!result.valid) {
+                        console.warn(`Spec validation warnings: ${result.errors.map((e) => e.message).join("; ")}`);
+                    }
+                }
+                return rawEngine.render(spec, changedPaths);
+            },
+        };
+    }
+    // Wrap registerPresets to bind store + updateTokens (not exposed in PluginLoader interface)
+    const originalRegisterPresets = plugins.registerPresets.bind(plugins);
+    plugins.registerPresets = (newPresets) => {
+        originalRegisterPresets(newPresets);
+        // Write dropdown options to state for $state consumption
+        const options = [
+            { value: 'custom', label: 'Custom' },
+            ...plugins.getPresets().map(p => ({ value: p.id, label: p.name })),
+        ];
+        store.set('/presets/available', options);
+        // Auto-register applyPreset action if not yet registered
+        if (!plugins.getActions().has('applyPreset')) {
+            plugins.registerAction({
+                name: 'applyPreset',
+                handler: (params) => {
+                    if (typeof params.preset !== 'string')
+                        throw new Error('applyPreset requires a "preset" string parameter');
+                    if (params.preset === 'custom')
+                        return; // "Custom" is not a real preset — no-op
+                    const preset = plugins.getPreset(params.preset);
+                    if (!preset)
+                        throw new Error(`Unknown preset: "${params.preset}"`);
+                    updateTokens({ _replace: true, dna: preset.tokens.dna, identity: preset.tokens.identity });
+                },
+            });
+        }
+    };
+    return {
+        store,
+        get resolver() { return resolver; },
+        get engine() { return engine; },
+        plugins,
+        elements,
+        security: {
+            urlGuard,
+            stateGuard,
+            rateLimiter,
+            exposeErrors,
+            validateSpec: (spec) => validateSpec(spec, { primitiveRegistry, elementRegistry: elements }),
+        },
+        protectionRegistry,
+        applyPlugins,
+        updateTokens,
+    };
+}
+//# sourceMappingURL=factory.js.map

package/dist/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAmB,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAiB,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAqB,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAqB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAgD,MAAM,wBAAwB,CAAC;AAC7G,OAAO,EAAE,YAAY,EAAwB,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,cAAc,EAAiB,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAmB,MAAM,gCAAgC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAA2B,MAAM,mCAAmC,CAAC;AACtG,OAAO,EAAE,iBAAiB,EAAoB,MAAM,4BAA4B,CAAC;AAGjF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErF,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AA6CtE,MAAM,UAAU,YAAY,CAAC,SAAuB,EAAE;IACpD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC1D,0EAA0E;IAC1E,qEAAqE;IACrE,yEAAyE;IACzE,kCAAkC;IAClC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,MAAM,iBAAiB,GAAG,uBAAuB,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,qBAAqB,EAAE,CAAC;IAEzC,WAAW;IACX,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC1D,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;QAClD,YAAY,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC;KAClD,CAAC,CAAC;IACH,wFAAwF;IACxF,IAAI,SAAS,CAAC,cAAc,IAAI,SAAS,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,kBAAkB,CAAC,UAAU,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,mBAAmB,IAAI,GAAG,EAAE,CAAC,CAAC;IACrG,MAAM,cAAc,GAAG,SAAS,CAAC,aAAa,KAAK,KAAK,CAAC,CAAC,eAAe;IACzE,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC,0BAA0B;IAEjF,uCAAuC;IACvC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,MAAoB,CAAC;IAEzB,qEAAqE;IACrE,IAAI,cAAc,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD,2EAA2E;IAC3E,kEAAkE;IAClE,0EAA0E;IAC1E,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IAC9C,IAAI,gBAAgB,GAA4B,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IAEpE,oFAAoF;IACpF,SAAS,iBAAiB,CAAC,MAA+B;QACxD,MAAM,MAAM,GAAG,MAAM,CAAC,MAA4C,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAA+C,CAAC;QACxE,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,MAAM,GAAI,QAAQ,EAAE,WAA2B,IAAI,eAAe,CAAC;QACzE,MAAM,MAAM,GAAI,QAAQ,EAAE,WAA2B,IAAI,YAAY,CAAC;QAEtE,MAAM,UAAU,GAAiB;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW;YAC3F,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW;YACtD,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU;YACtD,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM;YACrE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO;SACtE,CAAC;QACF,MAAM,UAAU,GAAI,MAAM,CAAC,KAA6D,EAAE,IAAI,EAAE,MAAkC,CAAC;QAEnI,MAAM,MAAM,GAAqC,MAAM,KAAK,iBAAiB;YAC3E,CAAC,CAAC;gBACE,UAAU,EAAG,QAAQ,EAAE,oBAA6C,EAAE,UAAU,IAAI,wBAAwB,CAAC,UAAU;gBACvH,OAAO,EAAG,QAAQ,EAAE,oBAA6C,EAAE,OAAO,IAAI,wBAAwB,CAAC,OAAO;gBAC9G,SAAS,EAAG,QAAQ,EAAE,oBAA6C,EAAE,SAAS,IAAI,wBAAwB,CAAC,SAAS;aACrH;YACH,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;QAC1M,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACrN,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEvE,MAAM,CAAC,WAAW,GAAG,iBAAiB,CAAC;QACvC,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;QAEnC,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,6EAA6E;QAC7E,yDAAyD;IAC3D,CAAC;IAED,iBAAiB,CAAC,cAAc,CAAC,CAAC;IAElC,mEAAmE;IACnE,SAAS,kBAAkB,CAAC,MAA+B;QACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;QAC3C,IAAI,QAAQ;YAAE,MAAM,CAAC,aAAa,GAAG,QAAQ,CAAC;IAChD,CAAC;IACD,kBAAkB,CAAC,cAAc,CAAC,CAAC;IAEnC,SAAS,aAAa;QACpB,OAAO,cAAc,CAAC;YACpB,KAAK;YACL,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,uBAAuB,EAAE,OAAO,CAAC,qBAAqB,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAED,SAAS,WAAW;QAClB,OAAO,kBAAkB,CAAC;YACxB,QAAQ;YACR,iBAAiB;YACjB,MAAM,EAAE,cAAc;YACtB,eAAe,EAAE,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,GAAG,aAAa,EAAE,CAAC;IAC3B,MAAM,GAAG,WAAW,EAAE,CAAC;IAEvB,+FAA+F;IAC/F,MAAM,cAAc,GAAG,MAAM,CAAC;IAC9B,IAAI,iBAAiB,GAAY,IAAI,CAAC;IACtC,MAAM,YAAY,GAAiB;QACjC,MAAM,CAAC,IAAU,EAAE,YAA0B;YAC3C,IAAI,cAAc,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACjD,iBAAiB,GAAG,IAAI,CAAC;gBACzB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACpF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAClB,OAAO,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC9F,CAAC;YACH,CAAC;YACD,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACnD,CAAC;KACF,CAAC;IACF,MAAM,GAAG,YAAY,CAAC;IAEtB,SAAS,YAAY,CAAC,SAAkC;QACtD,kFAAkF;QAClF,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;YAC1C,gBAAgB,GAAG,MAAM,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,0EAA0E;YAC1E,gBAAgB,GAAG,eAAe,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;QAClE,CAAC;QAED,oFAAoF;QACpF,MAAM,UAAU,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;QAC3C,IAAI,UAAU,CAAC,GAAG,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACzD,MAAM,GAAG,GAAG,EAAE,GAAI,UAAU,CAAC,GAA+B,EAAE,CAAC;YAC/D,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YACpE,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC/B,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAK,GAAG,CAAC,GAAG,CAAY,GAAG,CAAC,EAAE,CAAC;oBAC7D,GAAG,CAAC,GAAG,CAAC,GAAI,GAAG,CAAC,GAAG,CAAY,GAAG,GAAG,CAAC;gBACxC,CAAC;YACH,CAAC;YACD,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC;QACvB,CAAC;QACD,cAAc,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC/C,iBAAiB,CAAC,cAAc,CAAC,CAAC;QAClC,kBAAkB,CAAC,cAAc,CAAC,CAAC;QACnC,QAAQ,GAAG,aAAa,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,WAAW,EAAE,CAAC;QAChC,iBAAiB,GAAG,IAAI,CAAC;QACzB,MAAM,GAAG;YACP,MAAM,CAAC,IAAU,EAAE,YAA0B;gBAC3C,IAAI,cAAc,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBACjD,iBAAiB,GAAG,IAAI,CAAC;oBACzB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACpF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;wBAClB,OAAO,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC9F,CAAC;gBACH,CAAC;gBACD,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC9C,CAAC;SACF,CAAC;QACF,2CAA2C;QAC3C,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QAC3C,oEAAoE;QACpE,yCAAyC;QACzC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;QAC9C,gDAAgD;QAChD,MAAM,cAAc,GAAI,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAY,IAAI,CAAC,CAAC;QAC5E,KAAK,CAAC,GAAG,CAAC,wBAAwB,EAAE,cAAc,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,mEAAmE;IACnE,OAAO,CAAC,cAAc,CAAC;QACrB,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,YAAY,CAAC,MAAiC,CAAC,CAAC,CAAC,CAAC;KAC1E,CAAC,CAAC;IAEH,SAAS,YAAY;QACnB,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,gGAAgG;QAChG,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,kBAAkB,CAAC,cAAc,CAAC,CAAC;QACnC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;QAC9C,QAAQ,GAAG,aAAa,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,WAAW,EAAE,CAAC;QAChC,iBAAiB,GAAG,IAAI,CAAC;QACzB,MAAM,GAAG;YACP,MAAM,CAAC,IAAU,EAAE,YAA0B;gBAC3C,IAAI,cAAc,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBACjD,iBAAiB,GAAG,IAAI,CAAC;oBACzB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACpF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;wBAClB,OAAO,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC9F,CAAC;gBACH,CAAC;gBACD,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC9C,CAAC;SACF,CAAC;IACJ,CAAC;IAED,4FAA4F;IAC5F,MAAM,uBAAuB,GAAG,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtE,OAAO,CAAC,eAAe,GAAG,CAAC,UAA8B,EAAQ,EAAE;QACjE,uBAAuB,CAAC,UAAU,CAAC,CAAC;QACpC,yDAAyD;QACzD,MAAM,OAAO,GAAG;YACd,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;YACpC,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;SACnE,CAAC;QACF,KAAK,CAAC,GAAG,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QACzC,yDAAyD;QACzD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,cAAc,CAAC;gBACrB,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;oBAClB,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;oBAC3G,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;wBAAE,OAAO,CAAC,wCAAwC;oBAChF,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBAChD,IAAI,CAAC,MAAM;wBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;oBACnE,YAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC7F,CAAC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK;QACL,IAAI,QAAQ,KAAK,OAAO,QAAQ,CAAC,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,OAAO,MAAM,CAAC,CAAC,CAAC;QAC/B,OAAO;QACP,QAAQ;QACR,QAAQ,EAAE;YACR,QAAQ;YACR,UAAU;YACV,WAAW;YACX,YAAY;YACZ,YAAY,EAAE,CAAC,IAAU,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;SACnG;QACD,kBAAkB;QAClB,YAAY;QACZ,YAAY;KACb,CAAC;AACJ,CAAC"}

package/dist/fetch/framework-fetch.d.ts

@@ -0,0 +1,12 @@
+import type { FrameworkFetchConfig, FrameworkFetch } from './types.js';
+/**
+ * Creates a scoped fetch wrapper with an interceptor chain.
+ *
+ * This is Mythik's internal fetch — used by the dispatcher (fetch/submitForm actions)
+ * and dataSources. It does NOT monkey-patch globalThis.fetch.
+ *
+ * Interceptors run in order:
+ *   request interceptors (modify options) → baseFetch → response interceptors (transform response)
+ */
+export declare function createFrameworkFetch(config?: FrameworkFetchConfig): FrameworkFetch;
+//# sourceMappingURL=framework-fetch.d.ts.map

package/dist/fetch/framework-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-fetch.d.ts","sourceRoot":"","sources":["../../src/fetch/framework-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAoB,oBAAoB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEzF;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,GAAE,oBAAyB,GAAG,cAAc,CAgCtF"}

package/dist/fetch/framework-fetch.js

@@ -0,0 +1,36 @@
+/**
+ * Creates a scoped fetch wrapper with an interceptor chain.
+ *
+ * This is Mythik's internal fetch — used by the dispatcher (fetch/submitForm actions)
+ * and dataSources. It does NOT monkey-patch globalThis.fetch.
+ *
+ * Interceptors run in order:
+ *   request interceptors (modify options) → baseFetch → response interceptors (transform response)
+ */
+export function createFrameworkFetch(config = {}) {
+    const baseFetch = config.baseFetch ?? globalThis.fetch?.bind(globalThis);
+    const interceptors = [...(config.interceptors ?? [])];
+    async function fetch(url, options) {
+        let opts = options ?? {};
+        // Run request interceptors in order
+        for (const interceptor of interceptors) {
+            if (interceptor.request) {
+                opts = await interceptor.request(url, opts);
+            }
+        }
+        // Execute the actual fetch
+        let response = await baseFetch(url, opts);
+        // Run response interceptors in order
+        for (const interceptor of interceptors) {
+            if (interceptor.response) {
+                response = await interceptor.response(response, { url, options: opts });
+            }
+        }
+        return response;
+    }
+    function addInterceptor(interceptor) {
+        interceptors.push(interceptor);
+    }
+    return { fetch, addInterceptor };
+}
+//# sourceMappingURL=framework-fetch.js.map

package/dist/fetch/framework-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-fetch.js","sourceRoot":"","sources":["../../src/fetch/framework-fetch.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAA+B,EAAE;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,YAAY,GAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;IAE1E,KAAK,UAAU,KAAK,CAAC,GAAW,EAAE,OAAqB;QACrD,IAAI,IAAI,GAAgB,OAAO,IAAI,EAAE,CAAC;QAEtC,oCAAoC;QACpC,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;gBACxB,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,IAAI,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAE1C,qCAAqC;QACrC,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;gBACzB,QAAQ,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,SAAS,cAAc,CAAC,WAA6B;QACnD,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;AACnC,CAAC"}

package/dist/fetch/interceptors/auth.d.ts

@@ -0,0 +1,19 @@
+import type { FetchInterceptor } from '../types.js';
+export interface AuthInterceptorConfig {
+    /** Returns current access token or null. Called on every request. */
+    getToken: () => string | null;
+    /** Domains where Bearer token is auto-injected. Uses exact + subdomain matching. */
+    authDomains: string[];
+    /** Optional: called on 401 response to trigger refresh + retry. */
+    onUnauthorized?: (url: string, options: RequestInit) => Promise<Response | null>;
+}
+/**
+ * Auth fetch interceptor — injects Bearer token for authorized domains.
+ *
+ * SECURITY:
+ * - Only injects headers for URLs matching authDomains
+ * - Fetch to non-authorized domain → goes without auth headers
+ * - Token obtained from closure getter, never from state
+ */
+export declare function createAuthInterceptor(config: AuthInterceptorConfig): FetchInterceptor;
+//# sourceMappingURL=auth.d.ts.map

package/dist/fetch/interceptors/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/fetch/interceptors/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,WAAW,qBAAqB;IACpC,qEAAqE;IACrE,QAAQ,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC9B,oFAAoF;IACpF,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,mEAAmE;IACnE,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;CAClF;AAmCD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,gBAAgB,CA0BrF"}

package/dist/fetch/interceptors/auth.js

@@ -0,0 +1,66 @@
+/**
+ * Checks if a URL matches any of the authorized domains.
+ * Matches exact hostname or subdomain (e.g., "supabase.co" matches "myproject.supabase.co").
+ * Does NOT match partial names (e.g., "api.com" does NOT match "notapi.com").
+ */
+function matchesDomain(url, authDomains) {
+    if (!url.startsWith('http://') && !url.startsWith('https://'))
+        return false;
+    try {
+        const parsed = new URL(url);
+        return authDomains.some((domain) => {
+            return parsed.hostname === domain || parsed.hostname.endsWith('.' + domain);
+        });
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Normalize HeadersInit (Headers instance, array, or plain object) to a plain Record.
+ * Headers instances are not enumerable via spread — must iterate explicitly.
+ */
+function normalizeHeaders(h) {
+    if (!h)
+        return {};
+    if (h instanceof Headers) {
+        const obj = {};
+        h.forEach((v, k) => { obj[k] = v; });
+        return obj;
+    }
+    if (Array.isArray(h))
+        return Object.fromEntries(h);
+    return { ...h };
+}
+/**
+ * Auth fetch interceptor — injects Bearer token for authorized domains.
+ *
+ * SECURITY:
+ * - Only injects headers for URLs matching authDomains
+ * - Fetch to non-authorized domain → goes without auth headers
+ * - Token obtained from closure getter, never from state
+ */
+export function createAuthInterceptor(config) {
+    const { getToken, authDomains, onUnauthorized } = config;
+    return {
+        name: 'auth',
+        request(url, options) {
+            const token = getToken();
+            if (!token || !matchesDomain(url, authDomains)) {
+                return options;
+            }
+            const headers = normalizeHeaders(options.headers);
+            headers['Authorization'] = `Bearer ${token}`;
+            return { ...options, headers };
+        },
+        async response(response, request) {
+            if (response.status === 401 && onUnauthorized && matchesDomain(request.url, authDomains)) {
+                const retryResponse = await onUnauthorized(request.url, request.options);
+                if (retryResponse)
+                    return retryResponse;
+            }
+            return response;
+        },
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/fetch/interceptors/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/fetch/interceptors/auth.ts"],"names":[],"mappings":"AAWA;;;;GAIG;AACH,SAAS,aAAa,CAAC,GAAW,EAAE,WAAqB;IACvD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAE5E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACjC,OAAO,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,CAA0B;IAClD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,IAAI,CAAC,YAAY,OAAO,EAAE,CAAC;QACzB,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,EAAE,GAAI,CAA4B,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IACjE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC;IAEzD,OAAO;QACL,IAAI,EAAE,MAAM;QAEZ,OAAO,CAAC,GAAW,EAAE,OAAoB;YACvC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;gBAC/C,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClD,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;YAE7C,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,QAAkB,EAAE,OAA8C;YAC/E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,cAAc,IAAI,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;gBACzF,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBACzE,IAAI,aAAa;oBAAE,OAAO,aAAa,CAAC;YAC1C,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/fetch/interceptors/logging.d.ts

@@ -0,0 +1,8 @@
+import type { FetchInterceptor } from '../types.js';
+/**
+ * Logging interceptor — logs request/response details to console.
+ * Redacts sensitive query parameters (token, password, secret, key).
+ * Enabled declaratively: { "interceptors": { "logging": true } }
+ */
+export declare function createLoggingInterceptor(): FetchInterceptor;
+//# sourceMappingURL=logging.d.ts.map

package/dist/fetch/interceptors/logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../../../src/fetch/interceptors/logging.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAqBpD;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,gBAAgB,CAiB3D"}

package/dist/fetch/interceptors/logging.js

@@ -0,0 +1,40 @@
+const SENSITIVE_PARAMS = new Set(['token', 'access_token', 'refresh_token', 'password', 'secret', 'key', 'apikey', 'api_key']);
+/** Redact sensitive query parameters from URL for safe logging. */
+function redactUrl(url) {
+    try {
+        const parsed = new URL(url);
+        let redacted = false;
+        for (const key of parsed.searchParams.keys()) {
+            if (SENSITIVE_PARAMS.has(key.toLowerCase())) {
+                parsed.searchParams.set(key, '[REDACTED]');
+                redacted = true;
+            }
+        }
+        return redacted ? parsed.toString() : url;
+    }
+    catch {
+        return url;
+    }
+}
+/**
+ * Logging interceptor — logs request/response details to console.
+ * Redacts sensitive query parameters (token, password, secret, key).
+ * Enabled declaratively: { "interceptors": { "logging": true } }
+ */
+export function createLoggingInterceptor() {
+    return {
+        name: 'logging',
+        request(url, options) {
+            const method = options.method ?? 'GET';
+            console.log(`[Mythik Fetch] ${method} ${redactUrl(url)}`);
+            return options;
+        },
+        response(response, request) {
+            const method = request.options.method ?? 'GET';
+            const status = response.status;
+            console.log(`[Mythik Fetch] ${method} ${redactUrl(request.url)} → ${status}`);
+            return response;
+        },
+    };
+}
+//# sourceMappingURL=logging.js.map

package/dist/fetch/interceptors/logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../../../src/fetch/interceptors/logging.ts"],"names":[],"mappings":"AAEA,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAE/H,mEAAmE;AACnE,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC5C,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAC3C,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL,IAAI,EAAE,SAAS;QAEf,OAAO,CAAC,GAAW,EAAE,OAAoB;YACvC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1D,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,QAAQ,CAAC,QAAkB,EAAE,OAA8C;YACzE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;YAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC;YAC9E,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/fetch/interceptors/retry.d.ts

@@ -0,0 +1,20 @@
+import type { FetchInterceptor } from '../types.js';
+export interface RetryInterceptorConfig {
+    /** Max retry attempts. Default: 2. */
+    maxRetries?: number;
+    /** HTTP statuses that trigger retry. Default: [502, 503, 504]. */
+    statuses?: number[];
+    /** Base delay in ms between retries (doubles each attempt). Default: 1000. */
+    baseDelay?: number;
+}
+/**
+ * Retry interceptor — retries on transient server errors with exponential backoff.
+ * Enabled declaratively: { "interceptors": { "retryOnError": { "maxRetries": 2, "statuses": [502, 503] } } }
+ *
+ * Each response interceptor invocation manages its own retry count — no shared state
+ * between concurrent requests (fixes key collision issue).
+ */
+export declare function createRetryInterceptor(config?: RetryInterceptorConfig, 
+/** The fetch function to use for retries. Must be provided externally. */
+doFetch?: (url: string, options: RequestInit) => Promise<Response>): FetchInterceptor;
+//# sourceMappingURL=retry.d.ts.map

package/dist/fetch/interceptors/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../../src/fetch/interceptors/retry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,WAAW,sBAAsB;IACrC,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,GAAE,sBAA2B;AACnC,0EAA0E;AAC1E,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,GACjE,gBAAgB,CA4BlB"}

package/dist/fetch/interceptors/retry.js

@@ -0,0 +1,34 @@
+/**
+ * Retry interceptor — retries on transient server errors with exponential backoff.
+ * Enabled declaratively: { "interceptors": { "retryOnError": { "maxRetries": 2, "statuses": [502, 503] } } }
+ *
+ * Each response interceptor invocation manages its own retry count — no shared state
+ * between concurrent requests (fixes key collision issue).
+ */
+export function createRetryInterceptor(config = {}, 
+/** The fetch function to use for retries. Must be provided externally. */
+doFetch) {
+    const maxRetries = config.maxRetries ?? 2;
+    const retryStatuses = new Set(config.statuses ?? [502, 503, 504]);
+    const baseDelay = config.baseDelay ?? 1000;
+    return {
+        name: 'retry',
+        async response(response, request) {
+            if (!retryStatuses.has(response.status) || !doFetch) {
+                return response;
+            }
+            // Retry loop — scoped to this single request invocation
+            let lastResponse = response;
+            for (let attempt = 0; attempt < maxRetries; attempt++) {
+                const delay = baseDelay * Math.pow(2, attempt);
+                await new Promise(r => setTimeout(r, delay));
+                lastResponse = await doFetch(request.url, request.options);
+                if (!retryStatuses.has(lastResponse.status)) {
+                    return lastResponse; // Success or non-retryable error
+                }
+            }
+            return lastResponse;
+        },
+    };
+}
+//# sourceMappingURL=retry.js.map

package/dist/fetch/interceptors/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../../src/fetch/interceptors/retry.ts"],"names":[],"mappings":"AAWA;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAiC,EAAE;AACnC,0EAA0E;AAC1E,OAAkE;IAElE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;IAE3C,OAAO;QACL,IAAI,EAAE,OAAO;QAEb,KAAK,CAAC,QAAQ,CAAC,QAAkB,EAAE,OAA8C;YAC/E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpD,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,wDAAwD;YACxD,IAAI,YAAY,GAAG,QAAQ,CAAC;YAC5B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;gBACtD,MAAM,KAAK,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC/C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;gBAE7C,YAAY,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC3D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5C,OAAO,YAAY,CAAC,CAAC,iCAAiC;gBACxD,CAAC;YACH,CAAC;YAED,OAAO,YAAY,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/fetch/interceptors/timeout.d.ts

@@ -0,0 +1,7 @@
+import type { FetchInterceptor } from '../types.js';
+/**
+ * Timeout interceptor — aborts requests after configured ms.
+ * Enabled declaratively: { "interceptors": { "timeout": { "ms": 15000 } } }
+ */
+export declare function createTimeoutInterceptor(ms: number): FetchInterceptor;
+//# sourceMappingURL=timeout.d.ts.map

package/dist/fetch/interceptors/timeout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout.d.ts","sourceRoot":"","sources":["../../../src/fetch/interceptors/timeout.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB,CAiBrE"}