react-native-nitro-fetch 0.2.1 → 0.3.0-beta.0

package/lib/module/tokenRefresh.js

@@ -0,0 +1,105 @@
+"use strict";
+
+import { NativeStorage as NativeStorageSingleton } from "./NitroInstances.js";
+
+// Storage keys
+const KEY_WS = 'nitro_token_refresh_websocket';
+const KEY_FETCH = 'nitro_token_refresh_fetch';
+const KEY_WS_CACHE = 'nitro_token_refresh_ws_cache';
+const KEY_FETCH_CACHE = 'nitro_token_refresh_fetch_cache';
+// — Helpers —
+
+/**
+ * Resolve a dot-notation path inside a parsed JSON object.
+ */
+export function getNestedField(obj, dotPath) {
+  const parts = dotPath.split('.');
+  let current = obj;
+  for (const part of parts) {
+    if (current == null || typeof current !== 'object') return undefined;
+    current = current[part];
+  }
+  return current != null ? String(current) : undefined;
+}
+export function applyTemplate(template, value) {
+  return template.replace(/\{\{value\}\}/g, value);
+}
+function applyCompositeTemplate(template, values) {
+  return template.replace(/\{\{(\w+)\}\}/g, (_, key) => values[key] ?? '');
+}
+export async function callRefreshEndpoint(config) {
+  const method = config.method ?? 'POST';
+  const response = await fetch(config.url, {
+    method,
+    headers: config.headers,
+    body: config.body
+  });
+  if (!response.ok) {
+    throw new Error(`Token refresh failed: ${response.status} ${response.statusText}`);
+  }
+  const headers = {};
+  if (config.responseType === 'text') {
+    const text = await response.text();
+    if (config.textHeader) {
+      headers[config.textHeader] = config.textTemplate ? applyTemplate(config.textTemplate, text) : text;
+    }
+    return headers;
+  }
+
+  // Default: json
+  const json = await response.json();
+  if (config.mappings) {
+    for (const mapping of config.mappings) {
+      const value = getNestedField(json, mapping.jsonPath);
+      if (value != null) {
+        headers[mapping.header] = mapping.valueTemplate ? applyTemplate(mapping.valueTemplate, value) : value;
+      }
+    }
+  }
+  if (config.compositeHeaders) {
+    for (const comp of config.compositeHeaders) {
+      const values = {};
+      for (const [placeholder, jsonPath] of Object.entries(comp.paths)) {
+        const val = getNestedField(json, jsonPath);
+        if (val != null) values[placeholder] = val;
+      }
+      headers[comp.header] = applyCompositeTemplate(comp.template, values);
+    }
+  }
+  return headers;
+}
+export function registerTokenRefresh(options) {
+  const {
+    target,
+    ...config
+  } = options;
+  const raw = JSON.stringify(config);
+  if (target === 'websocket' || target === 'all') {
+    NativeStorageSingleton.setSecureString(KEY_WS, raw);
+  }
+  if (target === 'fetch' || target === 'all') {
+    NativeStorageSingleton.setSecureString(KEY_FETCH, raw);
+  }
+}
+export function clearTokenRefresh(target) {
+  const t = target ?? 'all';
+  if (t === 'websocket' || t === 'all') {
+    NativeStorageSingleton.removeSecureString(KEY_WS);
+    NativeStorageSingleton.removeSecureString(KEY_WS_CACHE);
+  }
+  if (t === 'fetch' || t === 'all') {
+    NativeStorageSingleton.removeSecureString(KEY_FETCH);
+    NativeStorageSingleton.removeSecureString(KEY_FETCH_CACHE);
+  }
+}
+export function getStoredTokenRefreshConfig(target) {
+  const key = target === 'websocket' ? KEY_WS : KEY_FETCH;
+  try {
+    const raw = NativeStorageSingleton.getSecureString(key);
+    if (!raw) return null;
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+//# sourceMappingURL=tokenRefresh.js.map

package/lib/module/tokenRefresh.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["NativeStorage","NativeStorageSingleton","KEY_WS","KEY_FETCH","KEY_WS_CACHE","KEY_FETCH_CACHE","getNestedField","obj","dotPath","parts","split","current","part","undefined","String","applyTemplate","template","value","replace","applyCompositeTemplate","values","_","key","callRefreshEndpoint","config","method","response","fetch","url","headers","body","ok","Error","status","statusText","responseType","text","textHeader","textTemplate","json","mappings","mapping","jsonPath","header","valueTemplate","compositeHeaders","comp","placeholder","Object","entries","paths","val","registerTokenRefresh","options","target","raw","JSON","stringify","setSecureString","clearTokenRefresh","t","removeSecureString","getStoredTokenRefreshConfig","getSecureString","parse"],"sourceRoot":"../../src","sources":["tokenRefresh.ts"],"mappings":";;AAAA,SAASA,aAAa,IAAIC,sBAAsB,QAAQ,qBAAkB;;AAE1E;AACA,MAAMC,MAAM,GAAG,+BAA+B;AAC9C,MAAMC,SAAS,GAAG,2BAA2B;AAC7C,MAAMC,YAAY,GAAG,8BAA8B;AACnD,MAAMC,eAAe,GAAG,iCAAiC;AA6BzD;;AAEA;AACA;AACA;AACA,OAAO,SAASC,cAAcA,CAC5BC,GAAY,EACZC,OAAe,EACK;EACpB,MAAMC,KAAK,GAAGD,OAAO,CAACE,KAAK,CAAC,GAAG,CAAC;EAChC,IAAIC,OAAgB,GAAGJ,GAAG;EAC1B,KAAK,MAAMK,IAAI,IAAIH,KAAK,EAAE;IACxB,IAAIE,OAAO,IAAI,IAAI,IAAI,OAAOA,OAAO,KAAK,QAAQ,EAAE,OAAOE,SAAS;IACpEF,OAAO,GAAIA,OAAO,CAA6BC,IAAI,CAAC;EACtD;EACA,OAAOD,OAAO,IAAI,IAAI,GAAGG,MAAM,CAACH,OAAO,CAAC,GAAGE,SAAS;AACtD;AAEA,OAAO,SAASE,aAAaA,CAACC,QAAgB,EAAEC,KAAa,EAAU;EACrE,OAAOD,QAAQ,CAACE,OAAO,CAAC,gBAAgB,EAAED,KAAK,CAAC;AAClD;AAEA,SAASE,sBAAsBA,CAC7BH,QAAgB,EAChBI,MAA8B,EACtB;EACR,OAAOJ,QAAQ,CAACE,OAAO,CACrB,gBAAgB,EAChB,CAACG,CAAS,EAAEC,GAAW,KAAKF,MAAM,CAACE,GAAG,CAAC,IAAI,EAC7C,CAAC;AACH;AAEA,OAAO,eAAeC,mBAAmBA,CACvCC,MAA0B,EACO;EACjC,MAAMC,MAAM,GAAGD,MAAM,CAACC,MAAM,IAAI,MAAM;EACtC,MAAMC,QAAQ,GAAG,MAAMC,KAAK,CAACH,MAAM,CAACI,GAAG,EAAE;IACvCH,MAAM;IACNI,OAAO,EAAEL,MAAM,CAACK,OAAO;IACvBC,IAAI,EAAEN,MAAM,CAACM;EACf,CAAC,CAAC;EAEF,IAAI,CAACJ,QAAQ,CAACK,EAAE,EAAE;IAChB,MAAM,IAAIC,KAAK,CACb,yBAAyBN,QAAQ,CAACO,MAAM,IAAIP,QAAQ,CAACQ,UAAU,EACjE,CAAC;EACH;EAEA,MAAML,OAA+B,GAAG,CAAC,CAAC;EAE1C,IAAIL,MAAM,CAACW,YAAY,KAAK,MAAM,EAAE;IAClC,MAAMC,IAAI,GAAG,MAAMV,QAAQ,CAACU,IAAI,CAAC,CAAC;IAClC,IAAIZ,MAAM,CAACa,UAAU,EAAE;MACrBR,OAAO,CAACL,MAAM,CAACa,UAAU,CAAC,GAAGb,MAAM,CAACc,YAAY,GAC5CvB,aAAa,CAACS,MAAM,CAACc,YAAY,EAAEF,IAAI,CAAC,GACxCA,IAAI;IACV;IACA,OAAOP,OAAO;EAChB;;EAEA;EACA,MAAMU,IAAI,GAAG,MAAMb,QAAQ,CAACa,IAAI,CAAC,CAAC;EAElC,IAAIf,MAAM,CAACgB,QAAQ,EAAE;IACnB,KAAK,MAAMC,OAAO,IAAIjB,MAAM,CAACgB,QAAQ,EAAE;MACrC,MAAMvB,KAAK,GAAGX,cAAc,CAACiC,IAAI,EAAEE,OAAO,CAACC,QAAQ,CAAC;MACpD,IAAIzB,KAAK,IAAI,IAAI,EAAE;QACjBY,OAAO,CAACY,OAAO,CAACE,MAAM,CAAC,GAAGF,OAAO,CAACG,aAAa,GAC3C7B,aAAa,CAAC0B,OAAO,CAACG,aAAa,EAAE3B,KAAK,CAAC,GAC3CA,KAAK;MACX;IACF;EACF;EAEA,IAAIO,MAAM,CAACqB,gBAAgB,EAAE;IAC3B,KAAK,MAAMC,IAAI,IAAItB,MAAM,CAACqB,gBAAgB,EAAE;MAC1C,MAAMzB,MAA8B,GAAG,CAAC,CAAC;MACzC,KAAK,MAAM,CAAC2B,WAAW,EAAEL,QAAQ,CAAC,IAAIM,MAAM,CAACC,OAAO,CAACH,IAAI,CAACI,KAAK,CAAC,EAAE;QAChE,MAAMC,GAAG,GAAG7C,cAAc,CAACiC,IAAI,EAAEG,QAAQ,CAAC;QAC1C,IAAIS,GAAG,IAAI,IAAI,EAAE/B,MAAM,CAAC2B,WAAW,CAAC,GAAGI,GAAG;MAC5C;MACAtB,OAAO,CAACiB,IAAI,CAACH,MAAM,CAAC,GAAGxB,sBAAsB,CAAC2B,IAAI,CAAC9B,QAAQ,EAAEI,MAAM,CAAC;IACtE;EACF;EAEA,OAAOS,OAAO;AAChB;AAEA,OAAO,SAASuB,oBAAoBA,CAClCC,OAA4D,EACtD;EACN,MAAM;IAAEC,MAAM;IAAE,GAAG9B;EAAO,CAAC,GAAG6B,OAAO;EACrC,MAAME,GAAG,GAAGC,IAAI,CAACC,SAAS,CAACjC,MAAM,CAAC;EAClC,IAAI8B,MAAM,KAAK,WAAW,IAAIA,MAAM,KAAK,KAAK,EAAE;IAC9CrD,sBAAsB,CAACyD,eAAe,CAACxD,MAAM,EAAEqD,GAAG,CAAC;EACrD;EACA,IAAID,MAAM,KAAK,OAAO,IAAIA,MAAM,KAAK,KAAK,EAAE;IAC1CrD,sBAAsB,CAACyD,eAAe,CAACvD,SAAS,EAAEoD,GAAG,CAAC;EACxD;AACF;AAEA,OAAO,SAASI,iBAAiBA,CAACL,MAA2B,EAAQ;EACnE,MAAMM,CAAC,GAAGN,MAAM,IAAI,KAAK;EACzB,IAAIM,CAAC,KAAK,WAAW,IAAIA,CAAC,KAAK,KAAK,EAAE;IACpC3D,sBAAsB,CAAC4D,kBAAkB,CAAC3D,MAAM,CAAC;IACjDD,sBAAsB,CAAC4D,kBAAkB,CAACzD,YAAY,CAAC;EACzD;EACA,IAAIwD,CAAC,KAAK,OAAO,IAAIA,CAAC,KAAK,KAAK,EAAE;IAChC3D,sBAAsB,CAAC4D,kBAAkB,CAAC1D,SAAS,CAAC;IACpDF,sBAAsB,CAAC4D,kBAAkB,CAACxD,eAAe,CAAC;EAC5D;AACF;AAEA,OAAO,SAASyD,2BAA2BA,CACzCR,MAA6B,EACF;EAC3B,MAAMhC,GAAG,GAAGgC,MAAM,KAAK,WAAW,GAAGpD,MAAM,GAAGC,SAAS;EACvD,IAAI;IACF,MAAMoD,GAAG,GAAGtD,sBAAsB,CAAC8D,eAAe,CAACzC,GAAG,CAAC;IACvD,IAAI,CAACiC,GAAG,EAAE,OAAO,IAAI;IACrB,OAAOC,IAAI,CAACQ,KAAK,CAACT,GAAG,CAAC;EACxB,CAAC,CAAC,MAAM;IACN,OAAO,IAAI;EACb;AACF","ignoreList":[]}

package/lib/typescript/src/NitroFetch.nitro.d.ts

@@ -54,5 +54,9 @@ export interface NativeStorage extends HybridObject<{
     getString(key: string): string;
     setString(key: string, value: string): void;
     removeString(key: string): void;
+    /** AES-GCM at rest in the same prefs/suite as getString; key material in Keystore / Keychain. */
+    getSecureString(key: string): string;
+    setSecureString(key: string, value: string): void;
+    removeSecureString(key: string): void;
 }
 //# sourceMappingURL=NitroFetch.nitro.d.ts.map

package/lib/typescript/src/NitroFetch.nitro.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NitroFetch.nitro.d.ts","sourceRoot":"","sources":["../../../src/NitroFetch.nitro.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAG/D,MAAM,MAAM,kBAAkB,GAC1B,KAAK,GACL,MAAM,GACN,MAAM,GACN,KAAK,GACL,OAAO,GACP,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAE5B,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IAExB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,YAAY,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAEnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,WAAW,EAAE,CAAC;IAEvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAiB,SAAQ,YAAY,CAAC;IACrD,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC;IAEA,OAAO,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAEnD,QAAQ,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAG3C,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,aAAa,CAAC;IAG9C,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,UAAW,SAAQ,YAAY,CAAC;IAC/C,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC;IAEA,YAAY,IAAI,gBAAgB,CAAC;CAIlC;AAED,MAAM,WAAW,aAAc,SAAQ,YAAY,CAAC;IAClD,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC;IACA,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC"}
+{"version":3,"file":"NitroFetch.nitro.d.ts","sourceRoot":"","sources":["../../../src/NitroFetch.nitro.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAG/D,MAAM,MAAM,kBAAkB,GAC1B,KAAK,GACL,MAAM,GACN,MAAM,GACN,KAAK,GACL,OAAO,GACP,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAE5B,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IAExB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,YAAY,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAEnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,WAAW,EAAE,CAAC;IAEvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAiB,SAAQ,YAAY,CAAC;IACrD,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC;IAEA,OAAO,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAEnD,QAAQ,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAG3C,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,aAAa,CAAC;IAG9C,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,UAAW,SAAQ,YAAY,CAAC;IAC/C,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC;IAEA,YAAY,IAAI,gBAAgB,CAAC;CAIlC;AAED,MAAM,WAAW,aAAc,SAAQ,YAAY,CAAC;IAClD,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC;IACA,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,iGAAiG;IACjG,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IACrC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAClD,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC"}

package/lib/typescript/src/fetch.d.ts

@@ -24,7 +24,5 @@ export declare function nitroFetchOnWorklet<T>(input: RequestInfo | URL, init: R
     preferBytes?: boolean;
     runtimeName?: string;
 }): Promise<T>;
-export declare const x: any;
-export declare const y: any;
 export type { NitroFormDataPart, NitroRequest, NitroResponse, } from './NitroFetch.nitro';
 //# sourceMappingURL=fetch.d.ts.map

package/lib/typescript/src/fetch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../../src/fetch.ts"],"names":[],"mappings":"AAAA,OAAO,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAGV,WAAW,EACX,YAAY,EAEb,MAAM,oBAAoB,CAAC;AAiS5B,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,GACjB,YAAY,CAwCd;AAkND,wBAAsB,UAAU,CAC9B,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,GAAG;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GACxC,OAAO,CAAC,QAAQ,CAAC,CA0BnB;AAGD,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAGD,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,GAAG;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,IAAI,CAAC,CAkDf;AAGD,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAsBf;AAGD,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAG/D;AAGD,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,KAAK,CAAC,CAAC;AA4BR,wBAAsB,mBAAmB,CAAC,CAAC,EACzC,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,EAAE,WAAW,GAAG,SAAS,EAC7B,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,EACjC,OAAO,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GACxD,OAAO,CAAC,CAAC,CAAC,CA8CZ;AAED,eAAO,MAAM,CAAC,KAAyB,CAAC;AACxC,eAAO,MAAM,CAAC,KAAgB,CAAC;AAE/B,YAAY,EACV,iBAAiB,EACjB,YAAY,EACZ,aAAa,GACd,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../../src/fetch.ts"],"names":[],"mappings":"AAAA,OAAO,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAGV,WAAW,EACX,YAAY,EAEb,MAAM,oBAAoB,CAAC;AAiS5B,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,GACjB,YAAY,CAwCd;AAkND,wBAAsB,UAAU,CAC9B,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,GAAG;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GACxC,OAAO,CAAC,QAAQ,CAAC,CA0BnB;AAGD,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAGD,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,GAAG;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,IAAI,CAAC,CAkDf;AAGD,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAsBf;AAGD,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAG/D;AAGD,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,KAAK,CAAC,CAAC;AAcR,wBAAsB,mBAAmB,CAAC,CAAC,EACzC,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,EAAE,WAAW,GAAG,SAAS,EAC7B,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,EACjC,OAAO,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GACxD,OAAO,CAAC,CAAC,CAAC,CA8CZ;AAED,YAAY,EACV,iBAAiB,EACjB,YAAY,EACZ,aAAa,GACd,MAAM,oBAAoB,CAAC"}

package/lib/typescript/src/index.d.ts

@@ -1,6 +1,8 @@
 export { nitroFetch as fetch, nitroFetchOnWorklet, prefetch, prefetchOnAppStart, removeFromAutoPrefetch, removeAllFromAutoprefetch, } from './fetch';
 export type { NitroFormDataPart, NitroRequest, NitroResponse } from './fetch';
 export { NitroFetch } from './NitroInstances';
+export { registerTokenRefresh, clearTokenRefresh, callRefreshEndpoint, getStoredTokenRefreshConfig, getNestedField, applyTemplate, } from './tokenRefresh';
+export type { TokenRefreshConfig } from './tokenRefresh';
 import './fetch';
 export declare function multiply(a: number, b: number): number;
 //# sourceMappingURL=index.d.ts.map

package/lib/typescript/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.tsx"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,IAAI,KAAK,EACnB,mBAAmB,EACnB,QAAQ,EACR,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,SAAS,CAAC;AACjB,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,SAAS,CAAC;AAIjB,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAErD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.tsx"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,IAAI,KAAK,EACnB,mBAAmB,EACnB,QAAQ,EACR,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,SAAS,CAAC;AACjB,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,2BAA2B,EAC3B,cAAc,EACd,aAAa,GACd,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,SAAS,CAAC;AAIjB,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAErD"}

package/lib/typescript/src/tokenRefresh.d.ts

@@ -0,0 +1,36 @@
+type TokenRefreshTarget = 'websocket' | 'fetch' | 'all';
+type TokenRefreshJsonMapping = {
+    jsonPath: string;
+    header: string;
+    valueTemplate?: string;
+};
+type TokenRefreshCompositeHeader = {
+    header: string;
+    template: string;
+    paths: Record<string, string>;
+};
+export type TokenRefreshConfig = {
+    url: string;
+    method?: 'GET' | 'POST' | 'PUT' | 'PATCH';
+    headers?: Record<string, string>;
+    body?: string;
+    responseType?: 'json' | 'text';
+    mappings?: TokenRefreshJsonMapping[];
+    compositeHeaders?: TokenRefreshCompositeHeader[];
+    textHeader?: string;
+    textTemplate?: string;
+    onFailure?: 'skip' | 'useStoredHeaders';
+};
+/**
+ * Resolve a dot-notation path inside a parsed JSON object.
+ */
+export declare function getNestedField(obj: unknown, dotPath: string): string | undefined;
+export declare function applyTemplate(template: string, value: string): string;
+export declare function callRefreshEndpoint(config: TokenRefreshConfig): Promise<Record<string, string>>;
+export declare function registerTokenRefresh(options: {
+    target: TokenRefreshTarget;
+} & TokenRefreshConfig): void;
+export declare function clearTokenRefresh(target?: TokenRefreshTarget): void;
+export declare function getStoredTokenRefreshConfig(target: 'websocket' | 'fetch'): TokenRefreshConfig | null;
+export {};
+//# sourceMappingURL=tokenRefresh.d.ts.map

package/lib/typescript/src/tokenRefresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenRefresh.d.ts","sourceRoot":"","sources":["../../../src/tokenRefresh.ts"],"names":[],"mappings":"AAQA,KAAK,kBAAkB,GAAG,WAAW,GAAG,OAAO,GAAG,KAAK,CAAC;AAExD,KAAK,uBAAuB,GAAG;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,KAAK,2BAA2B,GAAG;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACrC,gBAAgB,CAAC,EAAE,2BAA2B,EAAE,CAAC;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAAC;CACzC,CAAC;AAIF;;GAEG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,GACd,MAAM,GAAG,SAAS,CAQpB;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAErE;AAYD,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAoDjC;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE;IAAE,MAAM,EAAE,kBAAkB,CAAA;CAAE,GAAG,kBAAkB,GAC3D,IAAI,CASN;AAED,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAUnE;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,WAAW,GAAG,OAAO,GAC5B,kBAAkB,GAAG,IAAI,CAS3B"}

package/nitrogen/generated/android/c++/JHybridNativeStorageSpec.cpp

@@ -57,5 +57,18 @@ namespace margelo::nitro::nitrofetch {
     static const auto method = _javaPart->javaClassStatic()->getMethod<void(jni::alias_ref<jni::JString> /* key */)>("removeString");
     method(_javaPart, jni::make_jstring(key));
   }
+  std::string JHybridNativeStorageSpec::getSecureString(const std::string& key) {
+    static const auto method = _javaPart->javaClassStatic()->getMethod<jni::local_ref<jni::JString>(jni::alias_ref<jni::JString> /* key */)>("getSecureString");
+    auto __result = method(_javaPart, jni::make_jstring(key));
+    return __result->toStdString();
+  }
+  void JHybridNativeStorageSpec::setSecureString(const std::string& key, const std::string& value) {
+    static const auto method = _javaPart->javaClassStatic()->getMethod<void(jni::alias_ref<jni::JString> /* key */, jni::alias_ref<jni::JString> /* value */)>("setSecureString");
+    method(_javaPart, jni::make_jstring(key), jni::make_jstring(value));
+  }
+  void JHybridNativeStorageSpec::removeSecureString(const std::string& key) {
+    static const auto method = _javaPart->javaClassStatic()->getMethod<void(jni::alias_ref<jni::JString> /* key */)>("removeSecureString");
+    method(_javaPart, jni::make_jstring(key));
+  }
 
 } // namespace margelo::nitro::nitrofetch

package/nitrogen/generated/android/c++/JHybridNativeStorageSpec.hpp

@@ -57,6 +57,9 @@ namespace margelo::nitro::nitrofetch {
     std::string getString(const std::string& key) override;
     void setString(const std::string& key, const std::string& value) override;
     void removeString(const std::string& key) override;
+    std::string getSecureString(const std::string& key) override;
+    void setSecureString(const std::string& key, const std::string& value) override;
+    void removeSecureString(const std::string& key) override;
 
   private:
     jni::global_ref<JHybridNativeStorageSpec::JavaPart> _javaPart;

package/nitrogen/generated/android/kotlin/com/margelo/nitro/nitrofetch/HybridNativeStorageSpec.kt

@@ -39,6 +39,18 @@ abstract class HybridNativeStorageSpec: HybridObject() {
   @DoNotStrip
   @Keep
   abstract fun removeString(key: String): Unit
+  
+  @DoNotStrip
+  @Keep
+  abstract fun getSecureString(key: String): String
+  
+  @DoNotStrip
+  @Keep
+  abstract fun setSecureString(key: String, value: String): Unit
+  
+  @DoNotStrip
+  @Keep
+  abstract fun removeSecureString(key: String): Unit
 
   // Default implementation of `HybridObject.toString()`
   override fun toString(): String {

package/nitrogen/generated/ios/c++/HybridNativeStorageSpecSwift.hpp

@@ -86,6 +86,26 @@ namespace margelo::nitro::nitrofetch {
         std::rethrow_exception(__result.error());
       }
     }
+    inline std::string getSecureString(const std::string& key) override {
+      auto __result = _swiftPart.getSecureString(key);
+      if (__result.hasError()) [[unlikely]] {
+        std::rethrow_exception(__result.error());
+      }
+      auto __value = std::move(__result.value());
+      return __value;
+    }
+    inline void setSecureString(const std::string& key, const std::string& value) override {
+      auto __result = _swiftPart.setSecureString(key, value);
+      if (__result.hasError()) [[unlikely]] {
+        std::rethrow_exception(__result.error());
+      }
+    }
+    inline void removeSecureString(const std::string& key) override {
+      auto __result = _swiftPart.removeSecureString(key);
+      if (__result.hasError()) [[unlikely]] {
+        std::rethrow_exception(__result.error());
+      }
+    }
 
   private:
     NitroFetch::HybridNativeStorageSpec_cxx _swiftPart;

package/nitrogen/generated/ios/swift/HybridNativeStorageSpec.swift

@@ -16,6 +16,9 @@ public protocol HybridNativeStorageSpec_protocol: HybridObject {
   func getString(key: String) throws -> String
   func setString(key: String, value: String) throws -> Void
   func removeString(key: String) throws -> Void
+  func getSecureString(key: String) throws -> String
+  func setSecureString(key: String, value: String) throws -> Void
+  func removeSecureString(key: String) throws -> Void
 }
 
 public extension HybridNativeStorageSpec_protocol {

package/nitrogen/generated/ios/swift/HybridNativeStorageSpec_cxx.swift

@@ -157,4 +157,38 @@ open class HybridNativeStorageSpec_cxx {
       return bridge.create_Result_void_(__exceptionPtr)
     }
   }
+  
+  @inline(__always)
+  public final func getSecureString(key: std.string) -> bridge.Result_std__string_ {
+    do {
+      let __result = try self.__implementation.getSecureString(key: String(key))
+      let __resultCpp = std.string(__result)
+      return bridge.create_Result_std__string_(__resultCpp)
+    } catch (let __error) {
+      let __exceptionPtr = __error.toCpp()
+      return bridge.create_Result_std__string_(__exceptionPtr)
+    }
+  }
+  
+  @inline(__always)
+  public final func setSecureString(key: std.string, value: std.string) -> bridge.Result_void_ {
+    do {
+      try self.__implementation.setSecureString(key: String(key), value: String(value))
+      return bridge.create_Result_void_()
+    } catch (let __error) {
+      let __exceptionPtr = __error.toCpp()
+      return bridge.create_Result_void_(__exceptionPtr)
+    }
+  }
+  
+  @inline(__always)
+  public final func removeSecureString(key: std.string) -> bridge.Result_void_ {
+    do {
+      try self.__implementation.removeSecureString(key: String(key))
+      return bridge.create_Result_void_()
+    } catch (let __error) {
+      let __exceptionPtr = __error.toCpp()
+      return bridge.create_Result_void_(__exceptionPtr)
+    }
+  }
 }

package/nitrogen/generated/shared/c++/HybridNativeStorageSpec.cpp

@@ -17,6 +17,9 @@ namespace margelo::nitro::nitrofetch {
       prototype.registerHybridMethod("getString", &HybridNativeStorageSpec::getString);
       prototype.registerHybridMethod("setString", &HybridNativeStorageSpec::setString);
       prototype.registerHybridMethod("removeString", &HybridNativeStorageSpec::removeString);
+      prototype.registerHybridMethod("getSecureString", &HybridNativeStorageSpec::getSecureString);
+      prototype.registerHybridMethod("setSecureString", &HybridNativeStorageSpec::setSecureString);
+      prototype.registerHybridMethod("removeSecureString", &HybridNativeStorageSpec::removeSecureString);
     });
   }
 

package/nitrogen/generated/shared/c++/HybridNativeStorageSpec.hpp

@@ -51,6 +51,9 @@ namespace margelo::nitro::nitrofetch {
       virtual std::string getString(const std::string& key) = 0;
       virtual void setString(const std::string& key, const std::string& value) = 0;
       virtual void removeString(const std::string& key) = 0;
+      virtual std::string getSecureString(const std::string& key) = 0;
+      virtual void setSecureString(const std::string& key, const std::string& value) = 0;
+      virtual void removeSecureString(const std::string& key) = 0;
 
     protected:
       // Hybrid Setup

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-nitro-fetch",
-  "version": "0.2.1",
+  "version": "0.3.0-beta.0",
   "description": "Awesome Fetch :)",
   "main": "./lib/module/index.js",
   "module": "./lib/module/index.js",
@@ -94,7 +94,7 @@
     "react": "*",
     "react-native": "*",
     "react-native-nitro-modules": "^0.35.2",
-    "react-native-worklets-core": "^1.6.0"
+    "react-native-worklets": "^0.8.0"
   },
   "peerDependenciesMeta": {
     "react-native-worklets-core": {

package/src/NitroFetch.nitro.ts

@@ -86,4 +86,8 @@ export interface NativeStorage extends HybridObject<{
   getString(key: string): string;
   setString(key: string, value: string): void;
   removeString(key: string): void;
+  /** AES-GCM at rest in the same prefs/suite as getString; key material in Keystore / Keychain. */
+  getSecureString(key: string): string;
+  setSecureString(key: string, value: string): void;
+  removeSecureString(key: string): void;
 }

package/src/fetch.ts

@@ -714,11 +714,10 @@ export type NitroWorkletMapper<T> = (payload: {
 }) => T;
 
 let nitroRuntime: any | undefined;
-let WorkletsRef: any | undefined;
 function ensureWorkletRuntime(name = 'nitro-fetch'): any | undefined {
   try {
-    const { Worklets } = require('react-native-worklets-core');
-    nitroRuntime = nitroRuntime ?? Worklets.createContext(name);
+    const { createWorkletRuntime } = require('react-native-worklets');
+    nitroRuntime = nitroRuntime ?? createWorkletRuntime(name);
     return nitroRuntime;
   } catch {
     console.warn('react-native-worklets-core not available');
@@ -726,19 +725,6 @@ function ensureWorkletRuntime(name = 'nitro-fetch'): any | undefined {
   }
 }
 
-function getWorklets(): any | undefined {
-  try {
-    if (WorkletsRef) return WorkletsRef;
-
-    const { Worklets } = require('react-native-worklets-core');
-    WorkletsRef = Worklets;
-    return WorkletsRef;
-  } catch {
-    console.warn('react-native-worklets-core not available');
-    return undefined;
-  }
-}
-
 export async function nitroFetchOnWorklet<T>(
   input: RequestInfo | URL,
   init: RequestInit | undefined,
@@ -746,17 +732,17 @@ export async function nitroFetchOnWorklet<T>(
   options?: { preferBytes?: boolean; runtimeName?: string }
 ): Promise<T> {
   const preferBytes = options?.preferBytes === true; // default true
-  let rt: any | undefined;
-  let Worklets: any | undefined;
+  let runOnRuntimeAsync: any;
+  let rt: any;
   try {
     rt = ensureWorkletRuntime(options?.runtimeName);
-    Worklets = getWorklets();
-  } catch (e) {
-    console.error('nitroFetchOnWorklet: setup failed', e);
+    const worklets = require('react-native-worklets');
+    runOnRuntimeAsync = worklets.runOnRuntimeAsync;
+  } catch {
+    // Module not available
   }
-
   // Fallback: if runtime is not available, do the work on JS
-  if (!rt || !Worklets || typeof rt.runAsync !== 'function') {
+  if (!runOnRuntimeAsync || !rt) {
     console.warn('nitroFetchOnWorklet: no runtime, mapping on JS thread');
     const res = await nitroFetchRaw(input, init);
     const payload = {
@@ -771,7 +757,7 @@ export async function nitroFetchOnWorklet<T>(
     } as const;
     return mapWorklet(payload as any);
   }
-  return await rt.runAsync(() => {
+  return await runOnRuntimeAsync(rt, () => {
     'worklet';
     const unboxedNitroFetch = boxedNitroFetch.unbox();
     const unboxedClient = unboxedNitroFetch.createClient();
@@ -792,9 +778,6 @@ export async function nitroFetchOnWorklet<T>(
   });
 }
 
-export const x = ensureWorkletRuntime();
-export const y = getWorklets();
-
 export type {
   NitroFormDataPart,
   NitroRequest,

package/src/index.tsx

@@ -8,6 +8,15 @@ export {
 } from './fetch';
 export type { NitroFormDataPart, NitroRequest, NitroResponse } from './fetch';
 export { NitroFetch } from './NitroInstances';
+export {
+  registerTokenRefresh,
+  clearTokenRefresh,
+  callRefreshEndpoint,
+  getStoredTokenRefreshConfig,
+  getNestedField,
+  applyTemplate,
+} from './tokenRefresh';
+export type { TokenRefreshConfig } from './tokenRefresh';
 import './fetch';
 
 // Keep legacy export to avoid breaking any local tests/usages during scaffolding.

package/src/tokenRefresh.ts

@@ -0,0 +1,160 @@
+import { NativeStorage as NativeStorageSingleton } from './NitroInstances';
+
+// Storage keys
+const KEY_WS = 'nitro_token_refresh_websocket';
+const KEY_FETCH = 'nitro_token_refresh_fetch';
+const KEY_WS_CACHE = 'nitro_token_refresh_ws_cache';
+const KEY_FETCH_CACHE = 'nitro_token_refresh_fetch_cache';
+
+type TokenRefreshTarget = 'websocket' | 'fetch' | 'all';
+
+type TokenRefreshJsonMapping = {
+  jsonPath: string;
+  header: string;
+  valueTemplate?: string;
+};
+
+type TokenRefreshCompositeHeader = {
+  header: string;
+  template: string;
+  paths: Record<string, string>;
+};
+
+export type TokenRefreshConfig = {
+  url: string;
+  method?: 'GET' | 'POST' | 'PUT' | 'PATCH';
+  headers?: Record<string, string>;
+  body?: string;
+  responseType?: 'json' | 'text';
+  mappings?: TokenRefreshJsonMapping[];
+  compositeHeaders?: TokenRefreshCompositeHeader[];
+  textHeader?: string;
+  textTemplate?: string;
+  onFailure?: 'skip' | 'useStoredHeaders';
+};
+
+// — Helpers —
+
+/**
+ * Resolve a dot-notation path inside a parsed JSON object.
+ */
+export function getNestedField(
+  obj: unknown,
+  dotPath: string
+): string | undefined {
+  const parts = dotPath.split('.');
+  let current: unknown = obj;
+  for (const part of parts) {
+    if (current == null || typeof current !== 'object') return undefined;
+    current = (current as Record<string, unknown>)[part];
+  }
+  return current != null ? String(current) : undefined;
+}
+
+export function applyTemplate(template: string, value: string): string {
+  return template.replace(/\{\{value\}\}/g, value);
+}
+
+function applyCompositeTemplate(
+  template: string,
+  values: Record<string, string>
+): string {
+  return template.replace(
+    /\{\{(\w+)\}\}/g,
+    (_: string, key: string) => values[key] ?? ''
+  );
+}
+
+export async function callRefreshEndpoint(
+  config: TokenRefreshConfig
+): Promise<Record<string, string>> {
+  const method = config.method ?? 'POST';
+  const response = await fetch(config.url, {
+    method,
+    headers: config.headers,
+    body: config.body,
+  });
+
+  if (!response.ok) {
+    throw new Error(
+      `Token refresh failed: ${response.status} ${response.statusText}`
+    );
+  }
+
+  const headers: Record<string, string> = {};
+
+  if (config.responseType === 'text') {
+    const text = await response.text();
+    if (config.textHeader) {
+      headers[config.textHeader] = config.textTemplate
+        ? applyTemplate(config.textTemplate, text)
+        : text;
+    }
+    return headers;
+  }
+
+  // Default: json
+  const json = await response.json();
+
+  if (config.mappings) {
+    for (const mapping of config.mappings) {
+      const value = getNestedField(json, mapping.jsonPath);
+      if (value != null) {
+        headers[mapping.header] = mapping.valueTemplate
+          ? applyTemplate(mapping.valueTemplate, value)
+          : value;
+      }
+    }
+  }
+
+  if (config.compositeHeaders) {
+    for (const comp of config.compositeHeaders) {
+      const values: Record<string, string> = {};
+      for (const [placeholder, jsonPath] of Object.entries(comp.paths)) {
+        const val = getNestedField(json, jsonPath);
+        if (val != null) values[placeholder] = val;
+      }
+      headers[comp.header] = applyCompositeTemplate(comp.template, values);
+    }
+  }
+
+  return headers;
+}
+
+export function registerTokenRefresh(
+  options: { target: TokenRefreshTarget } & TokenRefreshConfig
+): void {
+  const { target, ...config } = options;
+  const raw = JSON.stringify(config);
+  if (target === 'websocket' || target === 'all') {
+    NativeStorageSingleton.setSecureString(KEY_WS, raw);
+  }
+  if (target === 'fetch' || target === 'all') {
+    NativeStorageSingleton.setSecureString(KEY_FETCH, raw);
+  }
+}
+
+export function clearTokenRefresh(target?: TokenRefreshTarget): void {
+  const t = target ?? 'all';
+  if (t === 'websocket' || t === 'all') {
+    NativeStorageSingleton.removeSecureString(KEY_WS);
+    NativeStorageSingleton.removeSecureString(KEY_WS_CACHE);
+  }
+  if (t === 'fetch' || t === 'all') {
+    NativeStorageSingleton.removeSecureString(KEY_FETCH);
+    NativeStorageSingleton.removeSecureString(KEY_FETCH_CACHE);
+  }
+}
+
+export function getStoredTokenRefreshConfig(
+  target: 'websocket' | 'fetch'
+): TokenRefreshConfig | null {
+  const key = target === 'websocket' ? KEY_WS : KEY_FETCH;
+  try {
+    const raw = NativeStorageSingleton.getSecureString(key);
+    if (!raw) return null;
+    return JSON.parse(raw) as TokenRefreshConfig;
+  } catch {
+    return null;
+  }
+}