chore: initial project import

web/shared/api/client.ts

@@ -0,0 +1,65 @@
+import { authHeaders, isRemote, resolveUrl } from './source'
+
+/** 后端 API 客户端：默认同源请求（开发时由 Vite 代理到后端），Cookie 会话，修改类请求带 CSRF 令牌；指到别的后端时用 Bearer 令牌（见 source.ts）。 */
+
+export class ApiError extends Error {
+  readonly status: number
+  readonly code: string
+  readonly detail: string
+  /** 字段级的校验错误：字段名 → 信息。 */
+  readonly errors: Record<string, string[]>
+
+  constructor(status: number, code: string, detail: string, errors: Record<string, string[]> = {}) {
+    super(detail || code)
+    this.status = status
+    this.code = code
+    this.detail = detail
+    this.errors = errors
+  }
+}
+
+let csrfToken: string | null = null
+
+export function setCsrf(token: string | null) {
+  csrfToken = token
+}
+
+export type Query = Record<string, string | number | boolean | null | undefined>
+
+export function withQuery(path: string, query?: Query): string {
+  if (!query) return path
+  const params = new URLSearchParams()
+  for (const [k, v] of Object.entries(query)) {
+    if (v !== undefined && v !== null && v !== '') params.set(k, String(v))
+  }
+  const text = params.toString()
+  return text ? `${path}?${text}` : path
+}
+
+async function request<T>(method: string, path: string, body?: unknown, init?: RequestInit): Promise<T> {
+  const headers: Record<string, string> = { Accept: 'application/json', ...authHeaders() }
+  if (body !== undefined) headers['Content-Type'] = method === 'PATCH' ? 'application/merge-patch+json' : 'application/json'
+  if (method !== 'GET' && csrfToken) headers['X-CSRF-Token'] = csrfToken
+  const response = await fetch(resolveUrl(path), {
+    method,
+    headers,
+    credentials: isRemote() ? 'omit' : 'include',
+    body: body === undefined ? undefined : JSON.stringify(body),
+    ...init,
+  })
+  if (response.status === 204) return undefined as T
+  const text = await response.text()
+  const data = text ? (JSON.parse(text) as unknown) : undefined
+  if (!response.ok) {
+    const problem = (data ?? {}) as { code?: string; detail?: string; title?: string; errors?: Record<string, string[]> | null }
+    throw new ApiError(response.status, problem.code ?? 'error', problem.detail ?? problem.title ?? response.statusText, problem.errors ?? {})
+  }
+  return data as T
+}
+
+export const api = {
+  get: <T>(path: string, query?: Query, init?: RequestInit) => request<T>('GET', withQuery(path, query), undefined, init),
+  post: <T>(path: string, body?: unknown) => request<T>('POST', path, body ?? {}),
+  patch: <T>(path: string, body: unknown) => request<T>('PATCH', path, body),
+  del: <T>(path: string) => request<T>('DELETE', path),
+}