tina4js 1.0.15 → 1.1.1

package/dist/api/fetch.d.ts

@@ -0,0 +1,151 @@
+/**
+ * Tina4 API — Fetch wrapper with auth token management.
+ *
+ * Compatible with tina4-php and tina4-python backends:
+ * - Sends Authorization: Bearer <token>
+ * - Reads FreshToken response header for token rotation
+ * - Sends formToken in POST/PUT/PATCH/DELETE bodies
+ */
+export interface ApiConfig {
+    baseUrl: string;
+    auth: boolean;
+    tokenKey: string;
+    headers: Record<string, string>;
+}
+export interface ApiResponse<T = unknown> {
+    status: number;
+    data: T;
+    ok: boolean;
+    headers: Headers;
+    /** @internal Used by debug tracker for request/response correlation. */
+    _requestId?: number;
+}
+export type RequestInterceptor = (config: RequestInit & {
+    headers: Record<string, string>;
+}) => (RequestInit & {
+    headers: Record<string, string>;
+}) | void;
+export type ResponseInterceptor = (response: ApiResponse) => ApiResponse | void;
+export interface RequestOptions {
+    headers?: Record<string, string>;
+    params?: Record<string, string | number | boolean>;
+}
+/**
+ * HTTP client pre-configured for tina4-php / tina4-python backends.
+ *
+ * Features:
+ * - Automatic `Authorization: Bearer <token>` header when `auth: true`
+ * - Token rotation via `FreshToken` response header
+ * - `formToken` injected into POST/PUT/PATCH/DELETE bodies for CSRF protection
+ * - Per-request `headers` and `params` via `RequestOptions`
+ * - Request/response interceptors
+ *
+ * @example
+ * api.configure({ baseUrl: 'https://api.example.com', auth: true });
+ *
+ * const users = await api.get('/users');
+ * const user  = await api.get('/users', { params: { id: 42 } });
+ * await api.post('/users', { name: 'Alice' });
+ * await api.delete('/users/1');
+ */
+export declare const api: {
+    /**
+     * Configure the API client. Call once at app startup.
+     *
+     * @example
+     * api.configure({
+     *   baseUrl: 'https://api.example.com',
+     *   auth: true,
+     *   tokenKey: 'my_token',   // localStorage key (default: 'tina4_token')
+     *   headers: { 'X-App': '1' }, // default headers on every request
+     * });
+     */
+    configure(c: Partial<ApiConfig>): void;
+    /**
+     * HTTP GET request.
+     * @param path    - API path relative to `baseUrl`.
+     * @param options - `{ params, headers }` — query string params and per-request headers.
+     * @example
+     * const data = await api.get('/products', { params: { page: 2, limit: 20 } });
+     */
+    get<T = unknown>(path: string, options?: RequestOptions): Promise<T>;
+    /**
+     * HTTP POST request.
+     * @param path    - API path.
+     * @param body    - Request body (serialised as JSON).
+     * @param options - `{ params, headers }`.
+     * @example
+     * await api.post('/users', { name: 'Alice', role: 'admin' });
+     */
+    post<T = unknown>(path: string, body?: unknown, options?: RequestOptions): Promise<T>;
+    /** HTTP PUT — full replace. */
+    put<T = unknown>(path: string, body?: unknown, options?: RequestOptions): Promise<T>;
+    /** HTTP PATCH — partial update. */
+    patch<T = unknown>(path: string, body?: unknown, options?: RequestOptions): Promise<T>;
+    /** HTTP DELETE. */
+    delete<T = unknown>(path: string, options?: RequestOptions): Promise<T>;
+    /**
+     * Execute a GraphQL query or mutation.
+     *
+     * Sends a POST request with `{ query, variables }` body to the given path.
+     * Returns `{ data, errors }` — throws if the HTTP request itself fails.
+     *
+     * @param path      - GraphQL endpoint path (e.g. `/api/graphql`).
+     * @param query     - GraphQL query or mutation string.
+     * @param variables - Optional variables object.
+     * @param options   - `{ params, headers }`.
+     *
+     * @example
+     * const { data, errors } = await api.graphql('/api/graphql',
+     *   '{ products(limit: 10) { id name price } }'
+     * );
+     *
+     * @example
+     * const { data } = await api.graphql('/api/graphql',
+     *   'query ($term: String!) { search_products(term: $term) { id name } }',
+     *   { term: "widget" }
+     * );
+     */
+    graphql<T = unknown>(path: string, query: string, variables?: Record<string, unknown>, options?: RequestOptions): Promise<{
+        data: T | null;
+        errors?: Array<{
+            message: string;
+        }>;
+    }>;
+    /**
+     * Upload files via FormData (multipart/form-data).
+     *
+     * Unlike `post()`, this does NOT JSON-stringify the body or set
+     * Content-Type — the browser sets the multipart boundary automatically.
+     * Auth uses the Bearer token header (formToken cannot be injected into FormData).
+     *
+     * @param path     - API path relative to `baseUrl`.
+     * @param formData - A FormData instance containing files and fields.
+     * @param options  - `{ params, headers }` — query string params and per-request headers.
+     *
+     * @example
+     * const form = new FormData();
+     * form.append('avatar', fileInput.files[0]);
+     * form.append('name', 'Alice');
+     * const result = await api.upload('/users/avatar', form);
+     */
+    upload<T = unknown>(path: string, formData: FormData, options?: RequestOptions): Promise<T>;
+    /**
+     * Register a request or response interceptor.
+     *
+     * @example
+     * // Add a custom header to every request
+     * api.intercept('request', (config) => {
+     *   config.headers['X-Client'] = 'my-app';
+     * });
+     *
+     * // Redirect to login on 401
+     * api.intercept('response', (res) => {
+     *   if (res.status === 401) navigate('/login');
+     * });
+     */
+    intercept(type: "request" | "response", fn: RequestInterceptor | ResponseInterceptor): void;
+    /** @internal Reset state (for tests). */
+    _reset(): void;
+};
+//# sourceMappingURL=fetch.d.ts.map

package/dist/api/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../src/api/fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,CAAC,CAAC;IACR,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,WAAW,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,KAAK,CAAC,WAAW,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC,GAAG,IAAI,CAAC;AAC3J,MAAM,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,WAAW,KAAK,WAAW,GAAG,IAAI,CAAC;AA+BhF,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACpD;AA+FD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,GAAG;IACd;;;;;;;;;;OAUG;iBACU,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI;IAItC;;;;;;OAMG;QACC,CAAC,kBAAkB,MAAM,YAAY,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC;IAIpE;;;;;;;OAOG;SACE,CAAC,kBAAkB,MAAM,SAAS,OAAO,YAAY,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC;IAIrF,+BAA+B;QAC3B,CAAC,kBAAkB,MAAM,SAAS,OAAO,YAAY,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC;IAIpF,mCAAmC;UAC7B,CAAC,kBAAkB,MAAM,SAAS,OAAO,YAAY,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC;IAItF,mBAAmB;WACZ,CAAC,kBAAkB,MAAM,YAAY,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC;IAIvE;;;;;;;;;;;;;;;;;;;;;OAqBG;YACW,CAAC,kBAAkB,MAAM,SAAS,MAAM,cAAc,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,cAAc,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IAIxL;;;;;;;;;;;;;;;;OAgBG;WACU,CAAC,kBAAkB,MAAM,YAAY,QAAQ,YAAY,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC;IAiFjG;;;;;;;;;;;;;OAaG;oBACa,SAAS,GAAG,UAAU,MAAM,kBAAkB,GAAG,mBAAmB,GAAG,IAAI;IAQ3F,yCAAyC;cAC/B,IAAI;CAQf,CAAC"}

package/dist/api/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * tina4js/api — Fetch wrapper with auth token management.
+ */
+export { api } from './fetch';
+export type { ApiConfig, ApiResponse, RequestOptions, RequestInterceptor, ResponseInterceptor } from './fetch';
+//# sourceMappingURL=index.d.ts.map

package/dist/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAC9B,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC"}

package/dist/api.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const a={baseUrl:"",auth:!1,tokenKey:"tina4_token",headers:{}},k=[],T=[];let j=0;function y(){try{return localStorage.getItem(a.tokenKey)}catch{return null}}function I(e){try{localStorage.setItem(a.tokenKey,e)}catch{}}async function h(e,s,r,n){let c={method:e,headers:{"Content-Type":"application/json",...a.headers}};if(a.auth){const t=y();t&&(c.headers.Authorization=`Bearer ${t}`)}if(r!==void 0&&e!=="GET"){let t=typeof r=="object"&&r!==null?{...r}:r;if(a.auth&&typeof t=="object"&&t!==null){const u=y();u&&(t.formToken=u)}c.body=JSON.stringify(t)}if(n!=null&&n.headers&&Object.assign(c.headers,n.headers),n!=null&&n.params){const t=Object.entries(n.params).map(([u,m])=>`${encodeURIComponent(u)}=${encodeURIComponent(String(m))}`).join("&");s+=(s.includes("?")?"&":"?")+t}const d=a.baseUrl+s;c._url=d,c._requestId=++j;for(const t of k){const u=t(c);u&&(c=u)}const f=await fetch(d,c),g=f.headers.get("FreshToken");g&&I(g);const i=f.headers.get("Content-Type")??"";let l;i.includes("json")?l=await f.json():l=await f.text();let o={status:f.status,data:l,ok:f.ok,headers:f.headers,_requestId:c._requestId};for(const t of T){const u=t(o);u&&(o=u)}if(!f.ok)throw o;return o.data}const q={configure(e){Object.assign(a,e)},get(e,s){return h("GET",e,void 0,s)},post(e,s,r){return h("POST",e,s,r)},put(e,s,r){return h("PUT",e,s,r)},patch(e,s,r){return h("PATCH",e,s,r)},delete(e,s){return h("DELETE",e,void 0,s)},async upload(e,s,r){let n={method:"POST",headers:{...a.headers},body:s};if(delete n.headers["Content-Type"],delete n.headers["content-type"],a.auth){const o=y();o&&(n.headers.Authorization=`Bearer ${o}`)}if(r!=null&&r.headers&&Object.assign(n.headers,r.headers),r!=null&&r.params){const o=Object.entries(r.params).map(([t,u])=>`${encodeURIComponent(t)}=${encodeURIComponent(String(u))}`).join("&");e+=(e.includes("?")?"&":"?")+o}const c=a.baseUrl+e;n._url=c,n._requestId=++j;for(const o of k){const t=o(n);t&&(n=t)}const d=await fetch(c,n),f=d.headers.get("FreshToken");f&&I(f);const g=d.headers.get("Content-Type")??"";let i;g.includes("json")?i=await d.json():i=await d.text();let l={status:d.status,data:i,ok:d.ok,headers:d.headers,_requestId:n._requestId};for(const o of T){const t=o(l);t&&(l=t)}if(!d.ok)throw l;return l.data},intercept(e,s){e==="request"?k.push(s):T.push(s)},_reset(){a.baseUrl="",a.auth=!1,a.tokenKey="tina4_token",a.headers={},k.length=0,T.length=0}};exports.api=q;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const a={baseUrl:"",auth:!1,tokenKey:"tina4_token",headers:{}},k=[],T=[];let j=0;function y(){try{return localStorage.getItem(a.tokenKey)}catch{return null}}function q(e){try{localStorage.setItem(a.tokenKey,e)}catch{}}async function i(e,s,t,r){let c={method:e,headers:{"Content-Type":"application/json",...a.headers}};if(a.auth){const n=y();n&&(c.headers.Authorization=`Bearer ${n}`)}if(t!==void 0&&e!=="GET"){let n=typeof t=="object"&&t!==null?{...t}:t;if(a.auth&&typeof n=="object"&&n!==null){const u=y();u&&(n.formToken=u)}c.body=JSON.stringify(n)}if(r!=null&&r.headers&&Object.assign(c.headers,r.headers),r!=null&&r.params){const n=Object.entries(r.params).map(([u,I])=>`${encodeURIComponent(u)}=${encodeURIComponent(String(I))}`).join("&");s+=(s.includes("?")?"&":"?")+n}const d=a.baseUrl+s;c._url=d,c._requestId=++j;for(const n of k){const u=n(c);u&&(c=u)}const l=await fetch(d,c),g=l.headers.get("FreshToken");g&&q(g);const h=l.headers.get("Content-Type")??"";let f;h.includes("json")?f=await l.json():f=await l.text();let o={status:l.status,data:f,ok:l.ok,headers:l.headers,_requestId:c._requestId};for(const n of T){const u=n(o);u&&(o=u)}if(!l.ok)throw o;return o.data}const m={configure(e){Object.assign(a,e)},get(e,s){return i("GET",e,void 0,s)},post(e,s,t){return i("POST",e,s,t)},put(e,s,t){return i("PUT",e,s,t)},patch(e,s,t){return i("PATCH",e,s,t)},delete(e,s){return i("DELETE",e,void 0,s)},async graphql(e,s,t,r){return i("POST",e,{query:s,variables:t||{}},r)},async upload(e,s,t){let r={method:"POST",headers:{...a.headers},body:s};if(delete r.headers["Content-Type"],delete r.headers["content-type"],a.auth){const o=y();o&&(r.headers.Authorization=`Bearer ${o}`)}if(t!=null&&t.headers&&Object.assign(r.headers,t.headers),t!=null&&t.params){const o=Object.entries(t.params).map(([n,u])=>`${encodeURIComponent(n)}=${encodeURIComponent(String(u))}`).join("&");e+=(e.includes("?")?"&":"?")+o}const c=a.baseUrl+e;r._url=c,r._requestId=++j;for(const o of k){const n=o(r);n&&(r=n)}const d=await fetch(c,r),l=d.headers.get("FreshToken");l&&q(l);const g=d.headers.get("Content-Type")??"";let h;g.includes("json")?h=await d.json():h=await d.text();let f={status:d.status,data:h,ok:d.ok,headers:d.headers,_requestId:r._requestId};for(const o of T){const n=o(f);n&&(f=n)}if(!d.ok)throw f;return f.data},intercept(e,s){e==="request"?k.push(s):T.push(s)},_reset(){a.baseUrl="",a.auth=!1,a.tokenKey="tina4_token",a.headers={},k.length=0,T.length=0}};exports.api=m;

package/dist/api.es.js

@@ -3,8 +3,8 @@ const a = {
   auth: !1,
   tokenKey: "tina4_token",
   headers: {}
-}, g = [], T = [];
-let I = 0;
+}, k = [], T = [];
+let q = 0;
 function y() {
   try {
     return localStorage.getItem(a.tokenKey);
@@ -12,13 +12,13 @@ function y() {
     return null;
   }
 }
-function j(e) {
+function I(e) {
   try {
     localStorage.setItem(a.tokenKey, e);
   } catch {
   }
 }
-async function h(e, s, r, n) {
+async function i(e, s, t, r) {
   let c = {
     method: e,
     headers: {
@@ -27,32 +27,32 @@ async function h(e, s, r, n) {
     }
   };
   if (a.auth) {
-    const t = y();
-    t && (c.headers.Authorization = `Bearer ${t}`);
+    const n = y();
+    n && (c.headers.Authorization = `Bearer ${n}`);
   }
-  if (r !== void 0 && e !== "GET") {
-    let t = typeof r == "object" && r !== null ? { ...r } : r;
-    if (a.auth && typeof t == "object" && t !== null) {
+  if (t !== void 0 && e !== "GET") {
+    let n = typeof t == "object" && t !== null ? { ...t } : t;
+    if (a.auth && typeof n == "object" && n !== null) {
       const u = y();
-      u && (t.formToken = u);
+      u && (n.formToken = u);
     }
-    c.body = JSON.stringify(t);
+    c.body = JSON.stringify(n);
   }
-  if (n != null && n.headers && Object.assign(c.headers, n.headers), n != null && n.params) {
-    const t = Object.entries(n.params).map(([u, q]) => `${encodeURIComponent(u)}=${encodeURIComponent(String(q))}`).join("&");
-    s += (s.includes("?") ? "&" : "?") + t;
+  if (r != null && r.headers && Object.assign(c.headers, r.headers), r != null && r.params) {
+    const n = Object.entries(r.params).map(([u, j]) => `${encodeURIComponent(u)}=${encodeURIComponent(String(j))}`).join("&");
+    s += (s.includes("?") ? "&" : "?") + n;
   }
   const d = a.baseUrl + s;
-  c._url = d, c._requestId = ++I;
-  for (const t of g) {
-    const u = t(c);
+  c._url = d, c._requestId = ++q;
+  for (const n of k) {
+    const u = n(c);
     u && (c = u);
   }
-  const f = await fetch(d, c), k = f.headers.get("FreshToken");
-  k && j(k);
-  const i = f.headers.get("Content-Type") ?? "";
+  const f = await fetch(d, c), g = f.headers.get("FreshToken");
+  g && I(g);
+  const h = f.headers.get("Content-Type") ?? "";
   let l;
-  i.includes("json") ? l = await f.json() : l = await f.text();
+  h.includes("json") ? l = await f.json() : l = await f.text();
   let o = {
     status: f.status,
     data: l,
@@ -60,8 +60,8 @@ async function h(e, s, r, n) {
     headers: f.headers,
     _requestId: c._requestId
   };
-  for (const t of T) {
-    const u = t(o);
+  for (const n of T) {
+    const u = n(o);
     u && (o = u);
   }
   if (!f.ok)
@@ -91,7 +91,7 @@ const m = {
    * const data = await api.get('/products', { params: { page: 2, limit: 20 } });
    */
   get(e, s) {
-    return h("GET", e, void 0, s);
+    return i("GET", e, void 0, s);
   },
   /**
    * HTTP POST request.
@@ -101,20 +101,45 @@ const m = {
    * @example
    * await api.post('/users', { name: 'Alice', role: 'admin' });
    */
-  post(e, s, r) {
-    return h("POST", e, s, r);
+  post(e, s, t) {
+    return i("POST", e, s, t);
   },
   /** HTTP PUT — full replace. */
-  put(e, s, r) {
-    return h("PUT", e, s, r);
+  put(e, s, t) {
+    return i("PUT", e, s, t);
   },
   /** HTTP PATCH — partial update. */
-  patch(e, s, r) {
-    return h("PATCH", e, s, r);
+  patch(e, s, t) {
+    return i("PATCH", e, s, t);
   },
   /** HTTP DELETE. */
   delete(e, s) {
-    return h("DELETE", e, void 0, s);
+    return i("DELETE", e, void 0, s);
+  },
+  /**
+   * Execute a GraphQL query or mutation.
+   *
+   * Sends a POST request with `{ query, variables }` body to the given path.
+   * Returns `{ data, errors }` — throws if the HTTP request itself fails.
+   *
+   * @param path      - GraphQL endpoint path (e.g. `/api/graphql`).
+   * @param query     - GraphQL query or mutation string.
+   * @param variables - Optional variables object.
+   * @param options   - `{ params, headers }`.
+   *
+   * @example
+   * const { data, errors } = await api.graphql('/api/graphql',
+   *   '{ products(limit: 10) { id name price } }'
+   * );
+   *
+   * @example
+   * const { data } = await api.graphql('/api/graphql',
+   *   'query ($term: String!) { search_products(term: $term) { id name } }',
+   *   { term: "widget" }
+   * );
+   */
+  async graphql(e, s, t, r) {
+    return i("POST", e, { query: s, variables: t || {} }, r);
   },
   /**
    * Upload files via FormData (multipart/form-data).
@@ -133,8 +158,8 @@ const m = {
    * form.append('name', 'Alice');
    * const result = await api.upload('/users/avatar', form);
    */
-  async upload(e, s, r) {
-    let n = {
+  async upload(e, s, t) {
+    let r = {
       method: "POST",
       headers: {
         ...a.headers
@@ -142,35 +167,35 @@ const m = {
       },
       body: s
     };
-    if (delete n.headers["Content-Type"], delete n.headers["content-type"], a.auth) {
+    if (delete r.headers["Content-Type"], delete r.headers["content-type"], a.auth) {
       const o = y();
-      o && (n.headers.Authorization = `Bearer ${o}`);
+      o && (r.headers.Authorization = `Bearer ${o}`);
     }
-    if (r != null && r.headers && Object.assign(n.headers, r.headers), r != null && r.params) {
-      const o = Object.entries(r.params).map(([t, u]) => `${encodeURIComponent(t)}=${encodeURIComponent(String(u))}`).join("&");
+    if (t != null && t.headers && Object.assign(r.headers, t.headers), t != null && t.params) {
+      const o = Object.entries(t.params).map(([n, u]) => `${encodeURIComponent(n)}=${encodeURIComponent(String(u))}`).join("&");
       e += (e.includes("?") ? "&" : "?") + o;
     }
     const c = a.baseUrl + e;
-    n._url = c, n._requestId = ++I;
-    for (const o of g) {
-      const t = o(n);
-      t && (n = t);
+    r._url = c, r._requestId = ++q;
+    for (const o of k) {
+      const n = o(r);
+      n && (r = n);
     }
-    const d = await fetch(c, n), f = d.headers.get("FreshToken");
-    f && j(f);
-    const k = d.headers.get("Content-Type") ?? "";
-    let i;
-    k.includes("json") ? i = await d.json() : i = await d.text();
+    const d = await fetch(c, r), f = d.headers.get("FreshToken");
+    f && I(f);
+    const g = d.headers.get("Content-Type") ?? "";
+    let h;
+    g.includes("json") ? h = await d.json() : h = await d.text();
     let l = {
       status: d.status,
-      data: i,
+      data: h,
       ok: d.ok,
       headers: d.headers,
-      _requestId: n._requestId
+      _requestId: r._requestId
     };
     for (const o of T) {
-      const t = o(l);
-      t && (l = t);
+      const n = o(l);
+      n && (l = n);
     }
     if (!d.ok)
       throw l;
@@ -191,11 +216,11 @@ const m = {
    * });
    */
   intercept(e, s) {
-    e === "request" ? g.push(s) : T.push(s);
+    e === "request" ? k.push(s) : T.push(s);
   },
   /** @internal Reset state (for tests). */
   _reset() {
-    a.baseUrl = "", a.auth = !1, a.tokenKey = "tina4_token", a.headers = {}, g.length = 0, T.length = 0;
+    a.baseUrl = "", a.auth = !1, a.tokenKey = "tina4_token", a.headers = {}, k.length = 0, T.length = 0;
   }
 };
 export {

package/dist/core/component.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Tina4 Component — Base class for web components.
+ *
+ * Extends HTMLElement with reactive props, lifecycle hooks,
+ * optional Shadow DOM, and scoped styles.
+ */
+import { type Signal } from './signal';
+/** @internal Called when a Tina4Element is connected to the DOM. */
+export declare let __debugComponentMount: ((el: Tina4Element) => void) | null;
+/** @internal Called when a Tina4Element is disconnected from the DOM. */
+export declare let __debugComponentUnmount: ((el: Tina4Element) => void) | null;
+/** @internal Set the debug hooks. */
+export declare function __setDebugComponentHooks(onMount: typeof __debugComponentMount, onUnmount: typeof __debugComponentUnmount): void;
+export type PropType = typeof String | typeof Number | typeof Boolean;
+export declare abstract class Tina4Element extends HTMLElement {
+    /** Declare reactive props and their types. Override in subclass. */
+    static props: Record<string, PropType>;
+    /** Scoped CSS styles. Override in subclass. */
+    static styles: string;
+    /** Use Shadow DOM (true) or light DOM (false). Override in subclass. */
+    static shadow: boolean;
+    /** Internal reactive prop signals. */
+    private _props;
+    /** The render root (shadow or this). */
+    private _root;
+    /** Track if we've rendered. */
+    private _rendered;
+    static get observedAttributes(): string[];
+    constructor();
+    connectedCallback(): void;
+    disconnectedCallback(): void;
+    attributeChangedCallback(name: string, _old: string | null, value: string | null): void;
+    /**
+     * Get a reactive signal for a declared prop.
+     *
+     * ```ts
+     * render() {
+     *   return html`<span>${this.prop('name')}</span>`;
+     * }
+     * ```
+     */
+    prop<T = unknown>(name: string): Signal<T>;
+    /**
+     * Dispatch a custom event from this component.
+     *
+     * ```ts
+     * this.emit('activate', { detail: 42 });
+     * ```
+     */
+    emit(name: string, init?: CustomEventInit): void;
+    /** Called after first render. */
+    onMount(): void;
+    /** Called when removed from DOM. */
+    onUnmount(): void;
+    /** Return DOM content. Override in subclass. */
+    abstract render(): DocumentFragment | Node | null;
+    private _coerce;
+}
+//# sourceMappingURL=component.d.ts.map

package/dist/core/component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../src/core/component.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAU,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AAI/C,oEAAoE;AACpE,eAAO,IAAI,qBAAqB,EAAE,CAAC,CAAC,EAAE,EAAE,YAAY,KAAK,IAAI,CAAC,GAAG,IAAW,CAAC;AAC7E,yEAAyE;AACzE,eAAO,IAAI,uBAAuB,EAAE,CAAC,CAAC,EAAE,EAAE,YAAY,KAAK,IAAI,CAAC,GAAG,IAAW,CAAC;AAC/E,qCAAqC;AACrC,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,OAAO,qBAAqB,EACrC,SAAS,EAAE,OAAO,uBAAuB,QAI1C;AAED,MAAM,MAAM,QAAQ,GAAG,OAAO,MAAM,GAAG,OAAO,MAAM,GAAG,OAAO,OAAO,CAAC;AAEtE,8BAAsB,YAAa,SAAQ,WAAW;IACpD,oEAAoE;IACpE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAM;IAE5C,+CAA+C;IAC/C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM;IAE3B,wEAAwE;IACxE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAQ;IAE9B,sCAAsC;IACtC,OAAO,CAAC,MAAM,CAAuC;IAErD,wCAAwC;IACxC,OAAO,CAAC,KAAK,CAA2B;IAExC,+BAA+B;IAC/B,OAAO,CAAC,SAAS,CAAS;IAE1B,MAAM,KAAK,kBAAkB,IAAI,MAAM,EAAE,CAExC;;IAaD,iBAAiB,IAAI,IAAI;IAuBzB,oBAAoB,IAAI,IAAI;IAK5B,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAQvF;;;;;;;;OAQG;IACH,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IAO1C;;;;;;OAMG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,IAAI;IAUhD,iCAAiC;IACjC,OAAO,IAAI,IAAI;IAEf,oCAAoC;IACpC,SAAS,IAAI,IAAI;IAEjB,gDAAgD;IAChD,QAAQ,CAAC,MAAM,IAAI,gBAAgB,GAAG,IAAI,GAAG,IAAI;IAIjD,OAAO,CAAC,OAAO;CAKhB"}

package/dist/core/html.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Tina4 HTML — Tagged template literal renderer.
+ *
+ * html`<div>${value}</div>` returns real DOM nodes (DocumentFragment).
+ * When a signal is interpolated, the DOM updates surgically — no diffing.
+ */
+/**
+ * Tagged template literal renderer — builds real DOM nodes with surgical reactive updates.
+ *
+ * Interpolated values are bound as follows:
+ * - `${signal}`      → reactive text node, updates in place when the signal changes
+ * - `${() => expr}`  → reactive block, re-renders when any signal read inside changes
+ * - `${fragment}`    → inserts a DocumentFragment (nested `html\`\``)
+ * - `${array}`       → renders each item as nodes
+ * - `${value}`       → static text node (escaped — XSS-safe)
+ *
+ * Attribute binding syntax (in tag attributes):
+ * - `.innerHTML=${val}`  → sets DOM property (use for raw HTML / inline SVG)
+ * - `.value=${signal}`   → reactive DOM property binding
+ * - `?disabled=${sig}`   → boolean attribute — added/removed reactively
+ * - `@click=${fn}`       → event listener
+ *
+ * **Important:** `${svgString}` in content position renders as escaped text.
+ * To inject raw HTML or SVG, use: `<div .innerHTML=${svgString}></div>`
+ *
+ * @param strings - Template string parts (static, cached by identity).
+ * @param values  - Interpolated values.
+ * @returns A DocumentFragment ready to append to the DOM.
+ *
+ * @example
+ * const name = signal('World');
+ * const frag = html`<h1>Hello, ${name}!</h1>`;
+ * document.body.appendChild(frag);
+ * name.value = 'Tina4'; // DOM updates automatically
+ */
+export declare function html(strings: TemplateStringsArray, ...values: unknown[]): DocumentFragment;
+//# sourceMappingURL=html.d.ts.map

package/dist/core/html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"html.d.ts","sourceRoot":"","sources":["../../src/core/html.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,IAAI,CAAC,OAAO,EAAE,oBAAoB,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAiC1F"}

package/dist/core/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * tina4js/core — Reactive primitives, HTML renderer, and web component base.
+ */
+export { signal, computed, effect, batch, isSignal } from './signal';
+export type { Signal, ReadonlySignal } from './signal';
+export { html } from './html';
+export { Tina4Element } from './component';
+export type { PropType } from './component';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACrE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC"}

package/dist/core/signal.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Tina4 Signals — Reactive state primitives.
+ *
+ * signal(value)       — create a reactive value
+ * computed(fn)        — derive a value that auto-tracks dependencies
+ * effect(fn)          — run a side-effect that auto-tracks dependencies
+ * batch(fn)           — batch multiple signal updates into one notification
+ */
+/** @internal Start collecting effect disposers (used by router). */
+export declare function _setEffectCollector(collector: (() => void)[] | null): void;
+/** @internal Read the current effect collector (used by html renderer). */
+export declare function _getEffectCollector(): (() => void)[] | null;
+/** @internal Called when a signal is created. */
+export declare let __debugSignalCreate: ((s: Signal<unknown>, label?: string) => void) | null;
+/** @internal Called when a signal value changes. */
+export declare let __debugSignalUpdate: ((s: Signal<unknown>, oldVal: unknown, newVal: unknown) => void) | null;
+/** @internal Set the debug hooks. */
+export declare function __setDebugSignalHooks(onCreate: typeof __debugSignalCreate, onUpdate: typeof __debugSignalUpdate): void;
+export interface Signal<T> {
+    value: T;
+    /** @internal */
+    readonly _t4: true;
+    /** @internal subscribe directly (used by html renderer) */
+    _subscribe(fn: () => void): () => void;
+    /** @internal read without tracking */
+    peek(): T;
+}
+export interface ReadonlySignal<T> {
+    readonly value: T;
+    /** @internal */
+    readonly _t4: true;
+    /** @internal */
+    _subscribe(fn: () => void): () => void;
+    peek(): T;
+}
+/**
+ * Create a reactive signal — a value that notifies subscribers when it changes.
+ *
+ * @param initial - The initial value.
+ * @param label   - Optional debug label shown in the debug overlay.
+ * @returns A signal whose `.value` getter/setter is reactive.
+ *
+ * @example
+ * const count = signal(0);
+ * count.value;      // read: 0
+ * count.value = 5;  // write: triggers all subscribers
+ *
+ * const name = signal('Alice', 'userName'); // labelled for debug overlay
+ */
+export declare function signal<T>(initial: T, label?: string): Signal<T>;
+/**
+ * Create a derived signal that auto-tracks its dependencies.
+ * Re-computes whenever any signal read inside `fn` changes.
+ * The result is read-only — writing throws.
+ *
+ * @param fn - Pure function that reads signals and returns a derived value.
+ * @returns A read-only signal.
+ *
+ * @example
+ * const price = signal(10);
+ * const qty   = signal(3);
+ * const total = computed(() => price.value * qty.value);
+ * total.value; // 30 — updates automatically when price or qty change
+ */
+export declare function computed<T>(fn: () => T): ReadonlySignal<T>;
+/**
+ * Run a side-effect that auto-tracks signal dependencies.
+ * Runs immediately, then re-runs whenever a dependency changes.
+ * If the effect throws, sibling effects still run; the first error is re-thrown
+ * after all subscribers have been notified.
+ *
+ * @param fn - The side-effect function. Reads signals to establish tracking.
+ * @returns A `dispose` function — call it to stop the effect.
+ *
+ * @example
+ * const count = signal(0);
+ * const stop = effect(() => {
+ *   console.log('count is', count.value);
+ * });
+ * // logs immediately, then on every count change
+ * stop(); // unsubscribe
+ */
+export declare function effect(fn: () => void): () => void;
+/**
+ * Batch multiple signal updates into a single notification pass.
+ * Subscribers are notified once after `fn` completes, not after each write.
+ *
+ * @param fn - Function containing one or more signal writes.
+ *
+ * @example
+ * const a = signal(1);
+ * const b = signal(2);
+ * batch(() => {
+ *   a.value = 10;
+ *   b.value = 20;
+ * }); // effects run once, not twice
+ */
+export declare function batch(fn: () => void): void;
+/** Check if a value is a tina4 signal. */
+export declare function isSignal(value: unknown): value is Signal<unknown>;
+//# sourceMappingURL=signal.d.ts.map

package/dist/core/signal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signal.d.ts","sourceRoot":"","sources":["../../src/core/signal.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH,oEAAoE;AACpE,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,CAAC,MAAM,IAAI,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAE1E;AAED,2EAA2E;AAC3E,wBAAgB,mBAAmB,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,GAAG,IAAI,CAE3D;AAID,iDAAiD;AACjD,eAAO,IAAI,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,IAAW,CAAC;AAC7F,oDAAoD;AACpD,eAAO,IAAI,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAW,CAAC;AAC/G,qCAAqC;AACrC,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,OAAO,mBAAmB,EACpC,QAAQ,EAAE,OAAO,mBAAmB,QAIrC;AAUD,MAAM,WAAW,MAAM,CAAC,CAAC;IACvB,KAAK,EAAE,CAAC,CAAC;IACT,gBAAgB;IAChB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;IACnB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;IACvC,sCAAsC;IACtC,IAAI,IAAI,CAAC,CAAC;CACX;AAED,MAAM,WAAW,cAAc,CAAC,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,gBAAgB;IAChB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;IACnB,gBAAgB;IAChB,UAAU,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;IACvC,IAAI,IAAI,CAAC,CAAC;CACX;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAoD/D;AAID;;;;;;;;;;;;;GAaG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CA2B1D;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAgCjD;AAID;;;;;;;;;;;;;GAaG;AACH,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,CAgB1C;AAID,0CAA0C;AAC1C,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,CAEjE"}

package/dist/debug/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * tina4js/debug — Developer debug overlay.
+ *
+ * Import this module to enable the debug overlay:
+ *   import 'tina4js/debug';
+ *
+ * Or conditionally:
+ *   if (import.meta.env.DEV) import('tina4js/debug');
+ *
+ * Toggle: Ctrl+Shift+D
+ */
+/**
+ * Enable the debug overlay. Called automatically on import,
+ * or can be called explicitly.
+ */
+export declare function enableDebug(): void;
+//# sourceMappingURL=index.d.ts.map