// Centralized API client for WordPress bridge endpoints.
// IMPORTANT: Do not persist JWT in localStorage.

export type ApiError = {
  status: number;
  message: string;
  details?: unknown;
};

let authToken: string | null = null;

export function setAuthToken(token: string | null) {
  authToken = token;
}

export function getAuthToken() {
  return authToken;
}

export async function apiFetch<T>(path: string, options: RequestInit = {}): Promise<T> {
  const base = (import.meta as any).env?.VITE_WP_API_BASE || '/wp-json/ccp/v1';
  const url = path.startsWith('http') ? path : `${base}${path.startsWith('/') ? '' : '/'}${path}`;

  const headers: Record<string, string> = {
    'Content-Type': 'application/json',
    ...(options.headers ? (options.headers as any) : {}),
  };

  if (authToken) headers['Authorization'] = `Bearer ${authToken}`;

  const res = await fetch(url, { ...options, headers });
  const contentType = res.headers.get('content-type') || '';
  const isJson = contentType.includes('application/json');
  const payload = isJson ? await res.json().catch(() => null) : await res.text().catch(() => null);

  if (!res.ok) {
    const err: ApiError = {
      status: res.status,
      message: (payload && (payload.message || payload.error)) || res.statusText || 'Request failed',
      details: payload,
    };
    throw err;
  }

  return payload as T;
}