wp-native-client 0.0.1

package/dist/client.js

@@ -0,0 +1,142 @@
+/**
+ * WPNativeClient — universal WordPress client built on the Abilities API.
+ *
+ * One client. No subclasses. No per-site wrappers.
+ *
+ * The client wraps a Transport (FetchTransport, AuthFetchTransport, or
+ * WpApiFetchTransport) and exposes two surfaces:
+ *
+ *   1. Discovery — fetch the site's ability catalog at startup
+ *   2. Execution — call abilities by name with typed input/output
+ *
+ * Site-specific concerns (extrachill/* abilities, woocommerce/* abilities,
+ * etc.) are addressed via ability namespacing on the server side. The
+ * client itself never knows the difference between a core WP ability and
+ * a plugin-registered one — they're all just strings + JSON Schemas.
+ *
+ * Example:
+ *
+ *   import { WPNativeClient, AuthFetchTransport } from 'wp-native-client';
+ *
+ *   const client = new WPNativeClient(
+ *     new AuthFetchTransport({ baseUrl: 'https://example.com/wp-json', ... })
+ *   );
+ *
+ *   await client.discover();
+ *
+ *   const posts = await client.execute<Post[]>('wp/post.list', { per_page: 20 });
+ *   const me    = await client.execute<User>('wp-native/user.me');
+ */
+import { ApiError } from './transports/fetch';
+import { discoverAbilities } from './abilities/discovery';
+const RUN_PATH_PREFIX = 'wp-abilities/v1/abilities';
+export class WPNativeClient {
+    transport;
+    config;
+    _catalog = null;
+    constructor(transport, config = {}) {
+        this.transport = transport;
+        this.config = {
+            validateAbilityNames: config.validateAbilityNames ?? true,
+        };
+    }
+    /**
+     * Walk the Abilities API and populate the in-memory catalog.
+     *
+     * Call once at app startup, after auth is established. Subsequent
+     * calls replace the catalog (cheap to re-run if the server registers
+     * new abilities at runtime).
+     *
+     * Optionally filter to a subset by category — useful when bootstrapping
+     * a minimal client that only needs auth abilities.
+     */
+    async discover(options = {}) {
+        const filter = {};
+        if (options.category !== undefined) {
+            filter.category = options.category;
+        }
+        const catalog = await discoverAbilities(this.transport, filter);
+        this._catalog = catalog;
+        return catalog;
+    }
+    /**
+     * The current catalog. Throws if discover() has not been called.
+     *
+     * Use catalogOrNull() if you want to feature-detect without throwing.
+     */
+    get catalog() {
+        if (!this._catalog) {
+            throw new Error('WPNativeClient: catalog not loaded. Call discover() before accessing catalog.');
+        }
+        return this._catalog;
+    }
+    /**
+     * Non-throwing accessor for the catalog. Returns null if discover()
+     * has not been called.
+     */
+    catalogOrNull() {
+        return this._catalog;
+    }
+    /**
+     * Whether discover() has populated the catalog.
+     */
+    hasCatalog() {
+        return this._catalog !== null;
+    }
+    /**
+     * Execute an ability by name.
+     *
+     * The ability is looked up in the catalog (when validateAbilityNames is
+     * enabled), then POSTed to /wp-abilities/v1/abilities/{name}/run with
+     * the given input as the request body's `input` field.
+     *
+     * The response shape `{ result: TResult }` is unwrapped — callers receive
+     * the result value directly.
+     *
+     * Throws:
+     *   - Error    if the ability is not in the catalog (and validation enabled)
+     *   - ApiError if the server returns a non-2xx response
+     */
+    async execute(name, input) {
+        if (this.config.validateAbilityNames && this._catalog) {
+            if (!this._catalog.has(name)) {
+                throw new Error(`WPNativeClient: ability "${name}" is not registered on this site. ` +
+                    `Run discover() to refresh the catalog, or use executeUnchecked() ` +
+                    `to bypass validation.`);
+            }
+        }
+        return this.executeUnchecked(name, input);
+    }
+    /**
+     * Execute an ability without checking the catalog.
+     *
+     * Use this for the auth bootstrap path (login → discover) where the
+     * client must call abilities before the catalog exists. For all other
+     * call sites, prefer execute() so missing abilities fail loudly at
+     * the call site.
+     */
+    async executeUnchecked(name, input) {
+        const path = `${RUN_PATH_PREFIX}/${encodeURIComponent(name)}/run`;
+        const body = {
+            input: input === undefined ? null : input,
+        };
+        const response = await this.transport.request({
+            path,
+            method: 'POST',
+            body: body,
+        });
+        if (!response || typeof response !== 'object' || !('result' in response)) {
+            throw new ApiError(`WPNativeClient: malformed ability response for "${name}". ` +
+                `Expected { result: ... }.`, 'malformed_ability_response', 500);
+        }
+        return response.result;
+    }
+    /**
+     * Get a single ability descriptor from the catalog.
+     * Returns undefined if not registered or catalog not loaded.
+     */
+    describe(name) {
+        return this._catalog?.get(name);
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAM1D,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAiBpD,MAAM,OAAO,cAAc;IACR,SAAS,CAAY;IACrB,MAAM,CAAiC;IAChD,QAAQ,GAA0B,IAAI,CAAC;IAE/C,YAAY,SAAoB,EAAE,SAA+B,EAAE;QACjE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG;YACZ,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,IAAI;SAC1D,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,QAAQ,CAAC,UAAiC,EAAE;QAChD,MAAM,MAAM,GAA0B,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACrC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,IAAI,OAAO;QACT,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IAChC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,OAAO,CACX,IAAY,EACZ,KAAc;QAEd,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,oCAAoC;oBAClE,mEAAmE;oBACnE,uBAAuB,CAC1B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,gBAAgB,CAAkB,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CACpB,IAAY,EACZ,KAAc;QAEd,MAAM,IAAI,GAAG,GAAG,eAAe,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;QAClE,MAAM,IAAI,GAA6B;YACrC,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;SAC1C,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAoC;YAC/E,IAAI;YACJ,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAA+B;SACtC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,QAAQ,CAChB,mDAAmD,IAAI,KAAK;gBAC1D,2BAA2B,EAC7B,4BAA4B,EAC5B,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,IAAY;QACnB,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * wp-native-client — universal WordPress client built on the Abilities API.
+ *
+ * One client. Discovery + execution. No per-site wrappers.
+ */
+export { WPNativeClient } from './client';
+export type { WPNativeClientConfig } from './client';
+export { AbilityCatalog } from './abilities/catalog';
+export { discoverAbilities, fetchAbilitiesPage, fetchAbility, fetchAbilityCategories, } from './abilities/discovery';
+export type { AbilityDescriptor, AbilityCategory, AbilityExecutionResponse, AbilityListPage, AbilityListParams, } from './abilities/types';
+export type { Transport, TransportRequest, TransportResponse } from './transports/types';
+export { FetchTransport, ApiError } from './transports/fetch';
+export type { FetchTransportConfig } from './transports/fetch';
+export { AuthFetchTransport } from './transports/auth-fetch';
+export type { AuthFetchTransportConfig, StoredTokens } from './transports/auth-fetch';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAGrD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,iBAAiB,EACjB,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9D,YAAY,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/index.js

@@ -0,0 +1,13 @@
+/**
+ * wp-native-client — universal WordPress client built on the Abilities API.
+ *
+ * One client. Discovery + execution. No per-site wrappers.
+ */
+// Client
+export { WPNativeClient } from './client';
+// Abilities subsystem
+export { AbilityCatalog } from './abilities/catalog';
+export { discoverAbilities, fetchAbilitiesPage, fetchAbility, fetchAbilityCategories, } from './abilities/discovery';
+export { FetchTransport, ApiError } from './transports/fetch';
+export { AuthFetchTransport } from './transports/auth-fetch';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,SAAS;AACT,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAG1C,sBAAsB;AACtB,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAW/B,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/transports/auth-fetch.d.ts

@@ -0,0 +1,132 @@
+/**
+ * Authenticated fetch transport with token lifecycle.
+ *
+ * Wraps FetchTransport and adds:
+ * - Bearer token injection via getAuthHeaders
+ * - Proactive token refresh before expiry
+ * - 401 retry with refresh lock (prevents thundering herd)
+ * - Auth failure callback for logout/navigation
+ *
+ * Platform-specific storage is injected via callbacks:
+ *   - loadTokens: read persisted tokens on init
+ *   - saveTokens: persist after login/refresh
+ *   - clearTokens: wipe on logout/auth failure
+ *
+ * Usage:
+ *
+ *   const transport = new AuthFetchTransport({
+ *     baseUrl: 'https://wordpress.test/wp-json',
+ *     refreshPath: 'wp-native/v1/auth/refresh',
+ *     getDeviceId: () => getSecureItem('device_id'),
+ *     loadTokens: () => getSecureItem('tokens').then(JSON.parse),
+ *     saveTokens: (t) => setSecureItem('tokens', JSON.stringify(t)),
+ *     clearTokens: () => deleteSecureItem('tokens'),
+ *     onAuthFailure: () => router.replace('/login'),
+ *   });
+ *
+ *   // Inject your platform's secure storage via the callbacks above.
+ *   await transport.initialize(); // loads stored tokens
+ */
+import type { Transport, TransportRequest } from './types';
+/** Token data stored by consumers. */
+export interface StoredTokens {
+    accessToken: string;
+    refreshToken: string;
+    /** Unix timestamp (seconds) when the access token expires. */
+    accessExpiresAt: number;
+}
+export interface AuthFetchTransportConfig {
+    /** Base URL for the REST API, e.g. "https://example.com/wp-json" */
+    baseUrl: string;
+    /**
+     * REST path for the token refresh endpoint.
+     * @default 'wp-native/v1/auth/refresh'
+     */
+    refreshPath?: string;
+    /**
+     * How many milliseconds before expiry to proactively refresh.
+     * @default 60000 (1 minute)
+     */
+    refreshBufferMs?: number;
+    /**
+     * Return a device ID for refresh requests.
+     * Mobile apps generate a UUID and persist it; Node scripts can return a fixed string.
+     */
+    getDeviceId: () => string | Promise<string>;
+    /**
+     * Load persisted tokens on initialize().
+     * Return null if no tokens are stored.
+     */
+    loadTokens: () => StoredTokens | null | Promise<StoredTokens | null>;
+    /**
+     * Persist tokens after login, register, or refresh.
+     */
+    saveTokens: (tokens: StoredTokens) => void | Promise<void>;
+    /**
+     * Clear persisted tokens on logout or auth failure.
+     */
+    clearTokens: () => void | Promise<void>;
+    /**
+     * Called when authentication cannot be recovered (refresh failed, no tokens).
+     * Use this to navigate to a login screen or reset app state.
+     */
+    onAuthFailure?: () => void;
+    /**
+     * Extra headers to include on every request.
+     * Useful for custom client identification headers.
+     */
+    defaultHeaders?: Record<string, string>;
+}
+export declare class AuthFetchTransport implements Transport {
+    private config;
+    private accessToken;
+    private refreshToken;
+    private accessExpiresAt;
+    private refreshPromise;
+    private initialized;
+    constructor(config: AuthFetchTransportConfig);
+    /**
+     * Load stored tokens into memory. Call once at app startup.
+     */
+    initialize(): Promise<void>;
+    /**
+     * Whether initialize() has been called.
+     */
+    isInitialized(): boolean;
+    /**
+     * Whether tokens are currently loaded in memory.
+     */
+    hasTokens(): boolean;
+    /**
+     * Store new tokens in memory and persist via saveTokens callback.
+     * Call after login, register, or any auth flow that returns tokens.
+     */
+    setTokens(tokens: StoredTokens): Promise<void>;
+    /**
+     * Set or replace the auth failure callback.
+     * Useful when the callback depends on framework state or navigation
+     * and must be wired after transport construction.
+     */
+    setOnAuthFailure(callback: () => void): void;
+    /**
+     * Clear tokens from memory and storage. Call on logout.
+     */
+    clearAuth(): Promise<void>;
+    /**
+     * Execute an HTTP request with automatic auth handling.
+     *
+     * - Injects Bearer token if available
+     * - Proactively refreshes before expiry
+     * - Retries once on 401 after refreshing
+     */
+    request<T>(req: TransportRequest): Promise<T>;
+    private executeRequest;
+    private isAccessExpiringSoon;
+    /**
+     * Refresh the access token. Uses a lock to deduplicate concurrent refreshes.
+     */
+    private refreshAccessToken;
+    private executeRefresh;
+    private handleAuthFailure;
+}
+//# sourceMappingURL=auth-fetch.d.ts.map

package/dist/transports/auth-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-fetch.d.ts","sourceRoot":"","sources":["../../src/transports/auth-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAG3D,sCAAsC;AACtC,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;OAGG;IACH,WAAW,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE5C;;;OAGG;IACH,UAAU,EAAE,MAAM,YAAY,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAErE;;OAEG;IACH,UAAU,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3D;;OAEG;IACH,WAAW,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAExC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAE3B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,qBAAa,kBAAmB,YAAW,SAAS;IAClD,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,eAAe,CAAuB;IAC9C,OAAO,CAAC,cAAc,CAAiC;IACvD,OAAO,CAAC,WAAW,CAAS;gBAEhB,MAAM,EAAE,wBAAwB;IAI5C;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAUjC;;OAEG;IACH,aAAa,IAAI,OAAO;IAIxB;;OAEG;IACH,SAAS,IAAI,OAAO;IAIpB;;;OAGG;IACG,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAOpD;;;;OAIG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,IAAI;IAI5C;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAOhC;;;;;;OAMG;IACG,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAC;YA4BrC,cAAc;IA+C5B,OAAO,CAAC,oBAAoB;IAM5B;;OAEG;YACW,kBAAkB;YAclB,cAAc;YAuCd,iBAAiB;CAIhC"}

package/dist/transports/auth-fetch.js

@@ -0,0 +1,217 @@
+/**
+ * Authenticated fetch transport with token lifecycle.
+ *
+ * Wraps FetchTransport and adds:
+ * - Bearer token injection via getAuthHeaders
+ * - Proactive token refresh before expiry
+ * - 401 retry with refresh lock (prevents thundering herd)
+ * - Auth failure callback for logout/navigation
+ *
+ * Platform-specific storage is injected via callbacks:
+ *   - loadTokens: read persisted tokens on init
+ *   - saveTokens: persist after login/refresh
+ *   - clearTokens: wipe on logout/auth failure
+ *
+ * Usage:
+ *
+ *   const transport = new AuthFetchTransport({
+ *     baseUrl: 'https://wordpress.test/wp-json',
+ *     refreshPath: 'wp-native/v1/auth/refresh',
+ *     getDeviceId: () => getSecureItem('device_id'),
+ *     loadTokens: () => getSecureItem('tokens').then(JSON.parse),
+ *     saveTokens: (t) => setSecureItem('tokens', JSON.stringify(t)),
+ *     clearTokens: () => deleteSecureItem('tokens'),
+ *     onAuthFailure: () => router.replace('/login'),
+ *   });
+ *
+ *   // Inject your platform's secure storage via the callbacks above.
+ *   await transport.initialize(); // loads stored tokens
+ */
+import { ApiError } from './fetch';
+export class AuthFetchTransport {
+    config;
+    accessToken = null;
+    refreshToken = null;
+    accessExpiresAt = null;
+    refreshPromise = null;
+    initialized = false;
+    constructor(config) {
+        this.config = config;
+    }
+    /**
+     * Load stored tokens into memory. Call once at app startup.
+     */
+    async initialize() {
+        const tokens = await this.config.loadTokens();
+        if (tokens) {
+            this.accessToken = tokens.accessToken;
+            this.refreshToken = tokens.refreshToken;
+            this.accessExpiresAt = tokens.accessExpiresAt;
+        }
+        this.initialized = true;
+    }
+    /**
+     * Whether initialize() has been called.
+     */
+    isInitialized() {
+        return this.initialized;
+    }
+    /**
+     * Whether tokens are currently loaded in memory.
+     */
+    hasTokens() {
+        return this.accessToken !== null && this.refreshToken !== null;
+    }
+    /**
+     * Store new tokens in memory and persist via saveTokens callback.
+     * Call after login, register, or any auth flow that returns tokens.
+     */
+    async setTokens(tokens) {
+        this.accessToken = tokens.accessToken;
+        this.refreshToken = tokens.refreshToken;
+        this.accessExpiresAt = tokens.accessExpiresAt;
+        await this.config.saveTokens(tokens);
+    }
+    /**
+     * Set or replace the auth failure callback.
+     * Useful when the callback depends on framework state or navigation
+     * and must be wired after transport construction.
+     */
+    setOnAuthFailure(callback) {
+        this.config.onAuthFailure = callback;
+    }
+    /**
+     * Clear tokens from memory and storage. Call on logout.
+     */
+    async clearAuth() {
+        this.accessToken = null;
+        this.refreshToken = null;
+        this.accessExpiresAt = null;
+        await this.config.clearTokens();
+    }
+    /**
+     * Execute an HTTP request with automatic auth handling.
+     *
+     * - Injects Bearer token if available
+     * - Proactively refreshes before expiry
+     * - Retries once on 401 after refreshing
+     */
+    async request(req) {
+        // Proactive refresh before the request
+        if (this.hasTokens() && this.isAccessExpiringSoon()) {
+            const refreshed = await this.refreshAccessToken();
+            if (!refreshed) {
+                await this.handleAuthFailure();
+                throw new ApiError('Session expired', 'session_expired', 401);
+            }
+        }
+        try {
+            return await this.executeRequest(req);
+        }
+        catch (error) {
+            // Retry once on 401 after refresh
+            if (error instanceof ApiError && error.status === 401 && this.refreshToken) {
+                const refreshed = await this.refreshAccessToken();
+                if (!refreshed) {
+                    await this.handleAuthFailure();
+                    throw new ApiError('Session expired', 'session_expired', 401);
+                }
+                return await this.executeRequest(req);
+            }
+            throw error;
+        }
+    }
+    // ─── Private ───────────────────────────────────────────────────────────
+    async executeRequest(req) {
+        const url = `${this.config.baseUrl}/${req.path}`;
+        const isFormData = typeof FormData !== 'undefined' && req.body instanceof FormData;
+        const headers = {
+            ...(!isFormData ? { 'Content-Type': 'application/json' } : {}),
+            ...(this.config.defaultHeaders ?? {}),
+            ...(this.accessToken ? { Authorization: `Bearer ${this.accessToken}` } : {}),
+            ...req.headers,
+        };
+        const response = await fetch(url, {
+            method: req.method,
+            headers,
+            body: req.body
+                ? isFormData
+                    ? req.body
+                    : JSON.stringify(req.body)
+                : null,
+        });
+        if (response.status === 401) {
+            throw new ApiError('Unauthorized', 'unauthorized', 401);
+        }
+        if (!response.ok) {
+            let errorData = {};
+            try {
+                errorData = await response.json();
+            }
+            catch {
+                // Response wasn't JSON
+            }
+            throw new ApiError(errorData.message || `Request failed with status ${response.status}`, errorData.code || 'request_failed', response.status);
+        }
+        if (response.status === 204) {
+            return undefined;
+        }
+        return (await response.json());
+    }
+    isAccessExpiringSoon() {
+        if (!this.accessExpiresAt)
+            return true;
+        const bufferMs = this.config.refreshBufferMs ?? 60_000;
+        return Date.now() >= this.accessExpiresAt * 1000 - bufferMs;
+    }
+    /**
+     * Refresh the access token. Uses a lock to deduplicate concurrent refreshes.
+     */
+    async refreshAccessToken() {
+        if (this.refreshPromise) {
+            return this.refreshPromise;
+        }
+        this.refreshPromise = this.executeRefresh();
+        try {
+            return await this.refreshPromise;
+        }
+        finally {
+            this.refreshPromise = null;
+        }
+    }
+    async executeRefresh() {
+        if (!this.refreshToken)
+            return false;
+        try {
+            const deviceId = await this.config.getDeviceId();
+            const refreshPath = this.config.refreshPath ?? 'wp-native/v1/auth/refresh';
+            const url = `${this.config.baseUrl}/${refreshPath}`;
+            const response = await fetch(url, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({
+                    refresh_token: this.refreshToken,
+                    device_id: deviceId,
+                }),
+            });
+            if (!response.ok)
+                return false;
+            const data = (await response.json());
+            const expiresAt = Math.floor(new Date(data.access_expires_at).getTime() / 1000);
+            await this.setTokens({
+                accessToken: data.access_token,
+                refreshToken: data.refresh_token,
+                accessExpiresAt: expiresAt,
+            });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async handleAuthFailure() {
+        await this.clearAuth();
+        this.config.onAuthFailure?.();
+    }
+}
+//# sourceMappingURL=auth-fetch.js.map

package/dist/transports/auth-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-fetch.js","sourceRoot":"","sources":["../../src/transports/auth-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AA6DnC,MAAM,OAAO,kBAAkB;IACrB,MAAM,CAA2B;IACjC,WAAW,GAAkB,IAAI,CAAC;IAClC,YAAY,GAAkB,IAAI,CAAC;IACnC,eAAe,GAAkB,IAAI,CAAC;IACtC,cAAc,GAA4B,IAAI,CAAC;IAC/C,WAAW,GAAG,KAAK,CAAC;IAE5B,YAAY,MAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC9C,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YACtC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YACxC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC;IACjE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,MAAoB;QAClC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC9C,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,QAAoB;QACnC,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,QAAQ,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAI,GAAqB;QACpC,uCAAuC;QACvC,IAAI,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;YACpD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAClD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC/B,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,cAAc,CAAI,GAAG,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kCAAkC;YAClC,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC3E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAClD,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBAC/B,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;gBAChE,CAAC;gBACD,OAAO,MAAM,IAAI,CAAC,cAAc,CAAI,GAAG,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,0EAA0E;IAElE,KAAK,CAAC,cAAc,CAAI,GAAqB;QACnD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAEjD,MAAM,UAAU,GAAG,OAAO,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,IAAI,YAAY,QAAQ,CAAC;QAEnF,MAAM,OAAO,GAA2B;YACtC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;YACrC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,GAAG,CAAC,OAAO;SACf,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO;YACP,IAAI,EAAE,GAAG,CAAC,IAAI;gBACZ,CAAC,CAAC,UAAU;oBACV,CAAC,CAAE,GAAG,CAAC,IAAiB;oBACxB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC5B,CAAC,CAAC,IAAI;SACT,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,SAAS,GAAwC,EAAE,CAAC;YACxD,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;YACD,MAAM,IAAI,QAAQ,CAChB,SAAS,CAAC,OAAO,IAAI,8BAA8B,QAAQ,CAAC,MAAM,EAAE,EACpE,SAAS,CAAC,IAAI,IAAI,gBAAgB,EAClC,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,SAAc,CAAC;QACxB,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;IACtC,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC;QACvD,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,eAAe,GAAG,IAAI,GAAG,QAAQ,CAAC;IAC9D,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB;QAC9B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAE5C,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAErC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,2BAA2B,CAAC;YAC3E,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC;YAEpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,aAAa,EAAE,IAAI,CAAC,YAAY;oBAChC,SAAS,EAAE,QAAQ;iBACpB,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,KAAK,CAAC;YAE/B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;YAEF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;YAEhF,MAAM,IAAI,CAAC,SAAS,CAAC;gBACnB,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,eAAe,EAAE,SAAS;aAC3B,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC;IAChC,CAAC;CACF"}

package/dist/transports/fetch.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Native fetch transport.
+ *
+ * Works in:
+ * - React Native (built-in fetch)
+ * - Modern browsers (without @wordpress/api-fetch)
+ * - Node 18+ (built-in fetch)
+ *
+ * Auth is handled via a configurable header function.
+ * Mobile apps pass Bearer tokens, Node scripts pass Basic auth, etc.
+ */
+import type { Transport, TransportRequest } from './types';
+export interface FetchTransportConfig {
+    /** Base URL for the REST API, e.g. "https://example.com/wp-json" */
+    baseUrl: string;
+    /**
+     * Return auth headers for each request.
+     * Return empty object for public endpoints.
+     *
+     * Examples:
+     *   Bearer:  () => ({ Authorization: `Bearer ${token}` })
+     *   Basic:   () => ({ Authorization: `Basic ${btoa('user:pass')}` })
+     *   Nonce:   () => ({ 'X-WP-Nonce': nonce })
+     */
+    getAuthHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
+    /**
+     * Called when a request returns 401.
+     * Use this to trigger token refresh or logout.
+     */
+    onUnauthorized?: () => void | Promise<void>;
+}
+export declare class FetchTransport implements Transport {
+    private config;
+    constructor(config: FetchTransportConfig);
+    request<T>(req: TransportRequest): Promise<T>;
+}
+export declare class ApiError extends Error {
+    code: string;
+    status: number;
+    constructor(message: string, code: string, status: number);
+}
+//# sourceMappingURL=fetch.d.ts.map

package/dist/transports/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../src/transports/fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE3D,MAAM,WAAW,oBAAoB;IACnC,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAEhB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhF;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAED,qBAAa,cAAe,YAAW,SAAS;IAC9C,OAAO,CAAC,MAAM,CAAuB;gBAEzB,MAAM,EAAE,oBAAoB;IAIlC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAC;CAmDpD;AAED,qBAAa,QAAS,SAAQ,KAAK;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;gBAEH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAM1D"}

package/dist/transports/fetch.js

@@ -0,0 +1,68 @@
+/**
+ * Native fetch transport.
+ *
+ * Works in:
+ * - React Native (built-in fetch)
+ * - Modern browsers (without @wordpress/api-fetch)
+ * - Node 18+ (built-in fetch)
+ *
+ * Auth is handled via a configurable header function.
+ * Mobile apps pass Bearer tokens, Node scripts pass Basic auth, etc.
+ */
+export class FetchTransport {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    async request(req) {
+        const url = `${this.config.baseUrl}/${req.path}`;
+        const authHeaders = this.config.getAuthHeaders
+            ? await this.config.getAuthHeaders()
+            : {};
+        const isFormData = typeof FormData !== 'undefined' && req.body instanceof FormData;
+        const headers = {
+            ...(!isFormData ? { 'Content-Type': 'application/json' } : {}),
+            ...authHeaders,
+            ...req.headers,
+        };
+        const response = await fetch(url, {
+            method: req.method,
+            headers,
+            body: req.body
+                ? isFormData
+                    ? req.body
+                    : JSON.stringify(req.body)
+                : null,
+        });
+        if (response.status === 401) {
+            await this.config.onUnauthorized?.();
+            throw new ApiError('Unauthorized', 'unauthorized', 401);
+        }
+        if (!response.ok) {
+            let errorData = {};
+            try {
+                errorData = await response.json();
+            }
+            catch {
+                // Response wasn't JSON
+            }
+            throw new ApiError(errorData.message || `Request failed with status ${response.status}`, errorData.code || 'request_failed', response.status);
+        }
+        // Handle 204 No Content
+        if (response.status === 204) {
+            return undefined;
+        }
+        return (await response.json());
+    }
+}
+export class ApiError extends Error {
+    code;
+    status;
+    constructor(message, code, status) {
+        super(message);
+        this.name = 'ApiError';
+        this.code = code;
+        this.status = status;
+    }
+}
+//# sourceMappingURL=fetch.js.map

package/dist/transports/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../../src/transports/fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA0BH,MAAM,OAAO,cAAc;IACjB,MAAM,CAAuB;IAErC,YAAY,MAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,GAAqB;QACpC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAEjD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc;YAC5C,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE;YACpC,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,UAAU,GAAG,OAAO,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,IAAI,YAAY,QAAQ,CAAC;QAEnF,MAAM,OAAO,GAA2B;YACtC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,WAAW;YACd,GAAG,GAAG,CAAC,OAAO;SACf,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO;YACP,IAAI,EAAE,GAAG,CAAC,IAAI;gBACZ,CAAC,CAAC,UAAU;oBACV,CAAC,CAAE,GAAG,CAAC,IAAiB;oBACxB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC5B,CAAC,CAAC,IAAI;SACT,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,SAAS,GAAwC,EAAE,CAAC;YACxD,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;YACD,MAAM,IAAI,QAAQ,CAChB,SAAS,CAAC,OAAO,IAAI,8BAA8B,QAAQ,CAAC,MAAM,EAAE,EACpE,SAAS,CAAC,IAAI,IAAI,gBAAgB,EAClC,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;QAED,wBAAwB;QACxB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,SAAc,CAAC;QACxB,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,IAAI,CAAS;IACb,MAAM,CAAS;IAEf,YAAY,OAAe,EAAE,IAAY,EAAE,MAAc;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF"}