rebreak-monorepo/apps/rebreak-native/lib/api.ts

import Constants from 'expo-constants';
import { supabase } from './supabase';
import { getDeviceId, getPlatformName } from './deviceId';

const apiUrl = Constants.expoConfig?.extra?.apiUrl as string;

type FetchOptions = Omit<RequestInit, 'body'> & {
  body?: any;
  /** Set true on bootstrap calls (device register) to skip x-device-id injection */
  skipDeviceHeader?: boolean;
};

/**
 * Wrapper für Backend-API-Calls mit automatischem Auth-Token.
 * Pendant zum Nuxt-`useSafeFetch` aus apps/rebreak/.
 *
 * Backend antwortet mit { success, data, status } — wir entpacken `data`.
 */
export async function apiFetch<T = any>(
  path: string,
  options: FetchOptions = {}
): Promise<T> {
  const session = (await supabase.auth.getSession()).data.session;

  const { skipDeviceHeader, ...fetchOptions } = options;

  const headers: Record<string, string> = {
    'Content-Type': 'application/json',
    ...(fetchOptions.headers as Record<string, string>),
  };

  if (session?.access_token) {
    headers.Authorization = `Bearer ${session.access_token}`;
  }

  if (!skipDeviceHeader) {
    const deviceId = await getDeviceId().catch(() => null);
    if (deviceId) {
      headers['x-device-id'] = deviceId;
      headers['x-platform'] = getPlatformName();
    }
  }

  const res = await fetch(`${apiUrl}${path}`, {
    ...fetchOptions,
    headers,
    body: fetchOptions.body ? JSON.stringify(fetchOptions.body) : undefined,
  });

  if (!res.ok) {
    const text = await res.text();
    throw new Error(`API ${res.status}: ${text}`);
  }

  const json = await res.json();

  // Unwrap { success, data, status } — siehe useSafeFetch-Pattern in der Vue-App
  if (json && typeof json === 'object' && 'success' in json && 'data' in json) {
    return json.data as T;
  }
  return json as T;
}