@bodhiapp/bodhi-js-core 0.0.30 → 0.0.32

package/dist/direct-client-base.d.ts

@@ -1,11 +1,11 @@
 import { AccessRequestStatusResponse, CreateAccessRequest, CreateAccessRequestResponse, DeploymentMode, PingResponse } from '@bodhiapp/ts-client';
 import { ApiResponse } from '@bodhiapp/bodhi-browser-types';
-import { IDirectClient } from './interface';
+import { IDirectClient, StreamTextResult } from './interface';
 import { Logger } from './logger';
 import { Chat, Models, Embeddings, Mcps } from './openai-client-compat';
 import { OAuthEndpoints, RefreshTokenResponse } from './oauth';
 import { StorageKeys } from './storage';
-import { AuthState, BackendServerState, ClientState, DirectState, InitParams, LogLevel, SerializedDirectState, StateChangeCallback } from './types';
+import { AuthState, BackendServerState, ClientState, DirectState, IStorage, InitialTokens, InitParams, LogLevel, SerializedDirectState, StateChangeCallback } from './types';
 /**
  * DirectClientBase - Abstract base class for DirectClient implementations
  *
@@ -42,6 +42,8 @@ export interface DirectClientBaseConfig {
     logLevel: LogLevel;
     loggerPrefix: string;
     apiTimeoutMs?: number;
+    storage?: IStorage;
+    initialTokens?: InitialTokens;
 }
 /**
  * DirectClientBase - Abstract base implementing common HTTP/streaming logic
@@ -52,11 +54,13 @@ export declare abstract class DirectClientBase implements IDirectClient {
     protected authClientId: string;
     protected authServerUrl: string;
     protected authEndpoints: OAuthEndpoints;
+    protected storage: IStorage | null;
     protected storageKeys: StorageKeys;
     protected state: DirectState;
     private onStateChange;
     private refreshPromise;
     private apiTimeoutMs;
+    private initialTokens;
     private _chat;
     private _models;
     private _embeddings;
@@ -90,6 +94,7 @@ export declare abstract class DirectClientBase implements IDirectClient {
      */
     getServerState(): Promise<BackendServerState>;
     stream<TReq = unknown, TRes = unknown>(method: string, endpoint: string, body?: TReq, headers?: Record<string, string>, authenticated?: boolean): AsyncGenerator<TRes>;
+    streamText(method: string, endpoint: string, body?: unknown, headers?: Record<string, string>, authenticated?: boolean): Promise<StreamTextResult>;
     get chat(): Chat;
     get models(): Models;
     get embeddings(): Embeddings;
@@ -113,9 +118,9 @@ export declare abstract class DirectClientBase implements IDirectClient {
         timeoutMs?: number;
     }): Promise<AccessRequestStatusResponse>;
     abstract login(): Promise<AuthState>;
-    abstract logout(): Promise<AuthState>;
     protected abstract performOAuthPkce(scope: string): Promise<AuthState>;
     getAuthState(): Promise<AuthState>;
+    logout(): Promise<AuthState>;
     protected _getAccessTokenRaw(): Promise<string | null>;
     /**
      * Try to refresh access token using refresh token
@@ -133,8 +138,9 @@ export declare abstract class DirectClientBase implements IDirectClient {
     protected exchangeCodeForTokens(code: string): Promise<void>;
     protected revokeRefreshToken(): Promise<void>;
     protected clearAuthStorage(): Promise<void>;
-    protected abstract _storageGet(key: string): Promise<string | null>;
-    protected abstract _storageSet(items: Record<string, string | number>): Promise<void>;
-    protected abstract _storageRemove(keys: string[]): Promise<void>;
+    private _bootstrapInitialTokens;
+    protected _storageGet(key: string): Promise<string | null>;
+    protected _storageSet(items: Record<string, string | number>): Promise<void>;
+    protected _storageRemove(keys: string[]): Promise<void>;
     protected abstract _getRedirectUri(): string;
 }

package/dist/facade-client-base.d.ts

@@ -1,9 +1,10 @@
 import { AccessRequestStatusResponse, CreateAccessRequest, CreateAccessRequestResponse, PingResponse } from '@bodhiapp/ts-client';
 import { ApiResponse } from '@bodhiapp/bodhi-browser-types';
-import { IConnectionClient, IExtensionClient } from './interface';
+import { IConnectionClient, IExtensionClient, StreamTextResult } from './interface';
 import { Logger } from './logger';
 import { BodhiClientUserPrefsManager } from './storage';
 import { Chat, Models, Embeddings, Mcps } from './openai-client-compat';
+import { McpTransportConfig } from './mcp-fetch';
 import { AuthState, BackendServerState, ClientState, ConnectionMode, DirectState, ExtensionState, InitParams, LoginOptions, SerializedClientState, SerializedDirectState, SerializedExtensionState, StateChange, StateChangeCallback } from './types';
 /**
  * Base facade client with common delegation logic
@@ -112,10 +113,20 @@ export declare abstract class BaseFacadeClient<TConfig, TExtClient extends IExte
     pingApi(): Promise<ApiResponse<PingResponse>>;
     getServerState(): Promise<BackendServerState>;
     stream<TReq = unknown, TRes = unknown>(method: string, endpoint: string, body?: TReq, headers?: Record<string, string>, authenticated?: boolean): AsyncGenerator<TRes>;
+    streamText(method: string, endpoint: string, body?: unknown, headers?: Record<string, string>, authenticated?: boolean): Promise<StreamTextResult>;
     get chat(): Chat;
     get models(): Models;
     get embeddings(): Embeddings;
     get mcps(): Mcps;
+    /**
+     * Create transport config for MCP StreamableHTTPClientTransport.
+     * Handles connection mode transparently — direct mode uses standard fetch with
+     * Bearer token, extension mode routes through the extension's message passing.
+     *
+     * @param mcp_path - Relative proxy path from Mcp.path (e.g. '/bodhi/v1/apps/mcps/{id}/mcp')
+     * @returns McpTransportConfig with url and fetch function for StreamableHTTPClientTransport
+     */
+    createMcpTransportConfig(mcp_path: string): McpTransportConfig;
     getConnectionMode(): ConnectionMode | null;
     setConnectionMode(mode: ConnectionMode): Promise<ClientState>;
     /**

package/dist/index.d.ts

@@ -20,4 +20,5 @@ export * from './oauth';
 export * from './direct-client-base';
 export * from './facade-client-base';
 export * from './openai-client-compat';
+export { createDirectMcpFetch, createExtensionMcpFetch } from './mcp-fetch';
 export { BUILD_MODE as CORE_BUILD_MODE } from './build-info';

package/dist/interface.d.ts

@@ -2,6 +2,17 @@ import { AccessRequestStatusResponse, CreateAccessRequest, CreateAccessRequestRe
 import { ApiResponse } from '@bodhiapp/bodhi-browser-types';
 import { AuthState, BackendServerState, ClientState, ConnectionMode, DirectState, ExtensionState, InitParams, LoginOptions, StateChangeCallback } from './types';
 import { Chat, Models, Embeddings, Mcps } from './openai-client-compat';
+import { McpTransportConfig } from './mcp-fetch';
+/**
+ * Result of a raw text streaming request
+ * Unlike stream() which parses SSE/JSON, streamText() forwards raw response text
+ * without any parsing. Non-2xx responses are returned as data (not thrown).
+ */
+export interface StreamTextResult {
+    status: number;
+    headers: Record<string, string>;
+    body: AsyncGenerator<string>;
+}
 /**
  * ConnectionClient - Base interface for all client implementations
  *
@@ -68,6 +79,17 @@ export interface IConnectionClient<IParams = unknown, SerialState = unknown> {
      * @returns AsyncGenerator yielding response chunks
      */
     stream<TReq = unknown, TRes = unknown>(method: string, endpoint: string, body?: TReq, headers?: Record<string, string>, authenticated?: boolean): AsyncGenerator<TRes>;
+    /**
+     * Raw text streaming request
+     * - DirectClient: fetch + ReadableStream without SSE parsing
+     * - IExtensionClient: window.bodhiext.sendStreamText or chrome.runtime equivalent
+     *
+     * Returns status, headers, and async generator of raw text chunks.
+     * Non-2xx responses are returned as data (not thrown).
+     *
+     * @returns Promise<StreamTextResult> with status, headers, and body generator
+     */
+    streamText(method: string, endpoint: string, body?: unknown, headers?: Record<string, string>, authenticated?: boolean): Promise<StreamTextResult>;
     /**
      * Login via OAuth
      * - IExtensionClient: Delegates to extension (chrome.identity or browser redirect)
@@ -240,6 +262,12 @@ export type UIClient = IConnectionClient<InitParams> & {
      * @throws Error if connection mode is not 'extension'
      */
     sendExtRequest<TParams = void, TRes = unknown>(action: string, params?: TParams): Promise<TRes>;
+    /**
+     * Create transport config for MCP StreamableHTTPClientTransport.
+     * Handles connection mode transparently.
+     * @param mcp_path - Relative proxy path from Mcp.path (e.g. '/bodhi/v1/apps/mcps/{id}/mcp')
+     */
+    createMcpTransportConfig(mcp_path: string): McpTransportConfig;
 };
 /**
  * Web-specific UIClient interface with OAuth callback handling

package/dist/mcp-fetch.d.ts

@@ -0,0 +1,23 @@
+import { StreamTextResult } from './interface';
+/**
+ * Standard fetch signature compatible with @modelcontextprotocol/sdk's FetchLike
+ */
+export type McpFetchLike = (url: string | URL, init?: RequestInit) => Promise<Response>;
+/**
+ * Configuration returned by createMcpTransportConfig for creating MCP transports
+ */
+export interface McpTransportConfig {
+    url: URL;
+    fetch: McpFetchLike;
+}
+/**
+ * Creates a FetchLike for direct mode — standard fetch with Bearer token injection.
+ */
+export declare function createDirectMcpFetch(getToken: () => Promise<string | null>): McpFetchLike;
+/**
+ * Creates a FetchLike for extension mode — routes HTTP through the Bodhi SDK client's
+ * streamText method which forwards raw response text without any parsing.
+ */
+export declare function createExtensionMcpFetch(client: {
+    streamText(method: string, endpoint: string, body?: unknown, headers?: Record<string, string>, authenticated?: boolean): Promise<StreamTextResult>;
+}): McpFetchLike;

package/dist/mcp.cjs.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const o=require("@modelcontextprotocol/sdk/client/index.js"),s=require("@modelcontextprotocol/sdk/client/streamableHttp.js");async function l(r,a,e){const t=r.createMcpTransportConfig(a),n=new s.StreamableHTTPClientTransport(t.url,{fetch:t.fetch}),c=new o.Client({name:e?.name??"bodhi-mcp-client",version:e?.version??"1.0.0"});try{await c.connect(n)}catch(i){throw await n.close().catch(()=>{}),i}return c}exports.createMcpClient=l;

package/dist/mcp.d.ts

@@ -0,0 +1,19 @@
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { McpTransportConfig } from './mcp-fetch';
+/** Any client that provides createMcpTransportConfig (UIClient, CliClient, etc.) */
+export interface McpTransportProvider {
+    createMcpTransportConfig(mcp_path: string): McpTransportConfig;
+}
+export interface CreateMcpClientOptions {
+    name?: string;
+    version?: string;
+}
+/**
+ * Create a connected MCP Client for a given proxy path.
+ *
+ * @param client - Any Bodhi client with createMcpTransportConfig (UIClient, CliClient, etc.)
+ * @param mcp_path - MCP proxy path from Mcp.path (e.g. '/bodhi/v1/apps/mcps/{id}/mcp')
+ * @param options - Optional client name and version
+ * @returns Connected @modelcontextprotocol/sdk Client ready for listTools(), callTool(), etc.
+ */
+export declare function createMcpClient(client: McpTransportProvider, mcp_path: string, options?: CreateMcpClientOptions): Promise<Client>;

package/dist/mcp.esm.js

@@ -0,0 +1,18 @@
+import { Client as i } from "@modelcontextprotocol/sdk/client/index.js";
+import { StreamableHTTPClientTransport as m } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+async function l(r, o, t) {
+  const e = r.createMcpTransportConfig(o), n = new m(e.url, { fetch: e.fetch }), c = new i({
+    name: t?.name ?? "bodhi-mcp-client",
+    version: t?.version ?? "1.0.0"
+  });
+  try {
+    await c.connect(n);
+  } catch (a) {
+    throw await n.close().catch(() => {
+    }), a;
+  }
+  return c;
+}
+export {
+  l as createMcpClient
+};

package/dist/openai-client-compat.d.ts

@@ -1,4 +1,4 @@
-import { CreateChatCompletionRequest, CreateChatCompletionResponse, CreateChatCompletionStreamResponse, CreateEmbeddingRequest, CreateEmbeddingResponse, Model, ListMcpsResponse, McpToolsResponse } from '@bodhiapp/ts-client';
+import { CreateChatCompletionRequest, CreateChatCompletionResponse, CreateChatCompletionStreamResponse, CreateEmbeddingRequest, CreateEmbeddingResponse, Model, ListMcpsResponse } from '@bodhiapp/ts-client';
 import { ApiResponse } from '@bodhiapp/bodhi-browser-types';
 /**
  * Minimal client interface required by resource classes
@@ -68,16 +68,4 @@ export declare class Mcps extends APIResource {
      * List available MCP servers
      */
     list(): Promise<ListMcpsResponse>;
-    /**
-     * List tools for a specific MCP server
-     */
-    listTools(mcpId: string): Promise<McpToolsResponse>;
-    /**
-     * Refresh tools for a specific MCP server
-     */
-    refreshTools(mcpId: string): Promise<McpToolsResponse>;
-    /**
-     * Execute a tool on an MCP server
-     */
-    executeTool(mcpId: string, toolName: string, params: Record<string, unknown>): Promise<unknown>;
 }

package/dist/types/auth.d.ts

@@ -18,6 +18,9 @@ export interface AuthState {
     user: UserInfo | null;
     accessToken: string | null;
     error: AuthError | null;
+    refreshToken: string | null;
+    expiresAt: number | null;
+    isTokenRefresh: boolean;
 }
 /**
  * Helper to check if authenticated

package/dist/types/index.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const i=require("@bodhiapp/bodhi-browser-types"),y=(e,r,t)=>{const n=r?.error?.message||`HTTP ${e}`;return new i.BodhiApiError(e,r,n,t)},o=(e,r)=>new i.BodhiError(e,r);function p(e){throw e==="denied"?o("access_request_denied","Access request was denied"):e==="expired"?o("access_request_expired","Access request expired"):o("access_request_failed",`Access request failed: ${e}`)}const s={NOT_REACHABLE:{message:"server is not reachable on given url",type:"network_error"},SERVER_NOT_READY:{message:"server is not in ready state, configure to complete setup",type:"extension_error"}},E={status:"not-reachable",version:null,error:s.NOT_REACHABLE},u={status:"pending-extension-ready",version:null,error:null},d={status:"not-connected",version:null,error:null};function c(e){return e.status==="ready"}function I(e,r="unknown",t=s.SERVER_NOT_READY,n,A){return{status:e,version:r,error:t,deployment:n??null,client_id:A??null}}function a(e){return e.type==="extension"}function l(e){return e.type==="direct"}function O(e){return typeof e.server=="object"&&e.server.status!=="not-connected"&&c(e.server)}function _(e){return e.url!==null}const f={type:"direct",url:null,server:d};function v(e,r="unknown"){return{type:"direct",server:{status:"ready",version:r,error:null},url:e}}function D(e){return{type:"direct",server:E,url:e}}function x(e,r){return{type:"direct",server:r,url:e}}const R={type:"extension",extension:"not-initialized",extensionId:null,server:u},N={type:"extension",extension:"not-found",extensionId:null,server:u};function h(e){return e.extension==="ready"&&e.server.status!=="pending-extension-ready"&&c(e.server)}function T(e){return e.extension==="ready"}function C(){return R}function b(){return N}function g(e){return a(e)?T(e):_(e)}function B(e){return e.server}function L(e){return a(e)?e.extensionId??void 0:void 0}function w(e){return l(e)?e.url??void 0:void 0}function q(e){return e.status==="authenticated"}function k(e){return e.status==="loading"}function P(e){return e.status==="error"}const V={status:"idle",user:null,accessToken:null,error:null},m=()=>{};function H(e,r){return{kind:"event",type:e,payload:r}}function S(e,r,t){return{kind:"response",type:r,requestId:e,payload:t}}function K(e,r){return{kind:"error",requestId:e,error:r}}function U(e,r){const t=r[e.type];if(!t)return null;const n=t(e.payload);return S(e.requestId,e.type,n)}Object.defineProperty(exports,"BodhiApiError",{enumerable:!0,get:()=>i.BodhiApiError});Object.defineProperty(exports,"BodhiError",{enumerable:!0,get:()=>i.BodhiError});Object.defineProperty(exports,"unwrapResponse",{enumerable:!0,get:()=>i.unwrapResponse});exports.BACKEND_SERVER_NOT_CONNECTED=d;exports.BACKEND_SERVER_NOT_REACHABLE=E;exports.DIRECT_STATE_NOT_INITIALIZED=f;exports.EXTENSION_STATE_NOT_FOUND=N;exports.EXTENSION_STATE_NOT_INITIALIZED=R;exports.INITIAL_AUTH_STATE=V;exports.NOOP_STATE_CALLBACK=m;exports.PENDING_EXTENSION_READY=u;exports.SERVER_ERROR_CODES=s;exports.backendServerNotReady=I;exports.buildError=K;exports.buildEvent=H;exports.buildResponse=S;exports.createApiError=y;exports.createDirectStateNotReachable=D;exports.createDirectStateNotReady=x;exports.createDirectStateReady=v;exports.createExtensionStateNotFound=b;exports.createExtensionStateNotInitialized=C;exports.createOperationError=o;exports.getBackendServerState=B;exports.getExtensionId=L;exports.getServerUrl=w;exports.handleRequest=U;exports.isAuthError=P;exports.isAuthLoading=k;exports.isAuthenticated=q;exports.isClientReady=g;exports.isDirectClientReady=_;exports.isDirectServerReady=O;exports.isDirectState=l;exports.isExtensionClientReady=T;exports.isExtensionServerReady=h;exports.isExtensionState=a;exports.isServerReady=c;exports.throwAccessRequestDenialError=p;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const i=require("@bodhiapp/bodhi-browser-types"),y=(e,r,t)=>{const n=r?.error?.message||`HTTP ${e}`;return new i.BodhiApiError(e,r,n,t)},o=(e,r)=>new i.BodhiError(e,r);function p(e){throw e==="denied"?o("access_request_denied","Access request was denied"):e==="expired"?o("access_request_expired","Access request expired"):o("access_request_failed",`Access request failed: ${e}`)}const s={NOT_REACHABLE:{message:"server is not reachable on given url",type:"network_error"},SERVER_NOT_READY:{message:"server is not in ready state, configure to complete setup",type:"extension_error"}},E={status:"not-reachable",version:null,error:s.NOT_REACHABLE},u={status:"pending-extension-ready",version:null,error:null},d={status:"not-connected",version:null,error:null};function c(e){return e.status==="ready"}function f(e,r="unknown",t=s.SERVER_NOT_READY,n,A){return{status:e,version:r,error:t,deployment:n??null,client_id:A??null}}function a(e){return e.type==="extension"}function l(e){return e.type==="direct"}function I(e){return typeof e.server=="object"&&e.server.status!=="not-connected"&&c(e.server)}function R(e){return e.url!==null}const O={type:"direct",url:null,server:d};function v(e,r="unknown"){return{type:"direct",server:{status:"ready",version:r,error:null},url:e}}function D(e){return{type:"direct",server:E,url:e}}function h(e,r){return{type:"direct",server:r,url:e}}const _={type:"extension",extension:"not-initialized",extensionId:null,server:u},S={type:"extension",extension:"not-found",extensionId:null,server:u};function x(e){return e.extension==="ready"&&e.server.status!=="pending-extension-ready"&&c(e.server)}function T(e){return e.extension==="ready"}function C(){return _}function g(){return S}function b(e){return a(e)?T(e):R(e)}function B(e){return e.server}function L(e){return a(e)?e.extensionId??void 0:void 0}function w(e){return l(e)?e.url??void 0:void 0}function k(e){return e.status==="authenticated"}function q(e){return e.status==="loading"}function m(e){return e.status==="error"}const P={status:"idle",user:null,accessToken:null,error:null,refreshToken:null,expiresAt:null,isTokenRefresh:!1};class V{constructor(){this.store=new Map}async get(r){return this.store.get(r)??null}async set(r){Object.entries(r).forEach(([t,n])=>{this.store.set(t,String(n))})}async remove(r){r.forEach(t=>this.store.delete(t))}}const H=()=>{};function j(e,r){return{kind:"event",type:e,payload:r}}function N(e,r,t){return{kind:"response",type:r,requestId:e,payload:t}}function K(e,r){return{kind:"error",requestId:e,error:r}}function U(e,r){const t=r[e.type];if(!t)return null;const n=t(e.payload);return N(e.requestId,e.type,n)}Object.defineProperty(exports,"BodhiApiError",{enumerable:!0,get:()=>i.BodhiApiError});Object.defineProperty(exports,"BodhiError",{enumerable:!0,get:()=>i.BodhiError});Object.defineProperty(exports,"unwrapResponse",{enumerable:!0,get:()=>i.unwrapResponse});exports.BACKEND_SERVER_NOT_CONNECTED=d;exports.BACKEND_SERVER_NOT_REACHABLE=E;exports.DIRECT_STATE_NOT_INITIALIZED=O;exports.EXTENSION_STATE_NOT_FOUND=S;exports.EXTENSION_STATE_NOT_INITIALIZED=_;exports.INITIAL_AUTH_STATE=P;exports.InMemoryStorage=V;exports.NOOP_STATE_CALLBACK=H;exports.PENDING_EXTENSION_READY=u;exports.SERVER_ERROR_CODES=s;exports.backendServerNotReady=f;exports.buildError=K;exports.buildEvent=j;exports.buildResponse=N;exports.createApiError=y;exports.createDirectStateNotReachable=D;exports.createDirectStateNotReady=h;exports.createDirectStateReady=v;exports.createExtensionStateNotFound=g;exports.createExtensionStateNotInitialized=C;exports.createOperationError=o;exports.getBackendServerState=B;exports.getExtensionId=L;exports.getServerUrl=w;exports.handleRequest=U;exports.isAuthError=m;exports.isAuthLoading=q;exports.isAuthenticated=k;exports.isClientReady=b;exports.isDirectClientReady=R;exports.isDirectServerReady=I;exports.isDirectState=l;exports.isExtensionClientReady=T;exports.isExtensionServerReady=x;exports.isExtensionState=a;exports.isServerReady=c;exports.throwAccessRequestDenialError=p;

package/dist/types/index.d.ts

@@ -10,7 +10,7 @@ export type { BackendServerState, ClientState, ConnectionMode, DirectState, Exte
 export { INITIAL_AUTH_STATE, isAuthError, isAuthLoading, isAuthenticated } from './auth';
 export type { AuthError, AuthState, AuthStatus } from './auth';
 export type { Tokens, UserInfo } from './user-info';
-export type { UserScope } from '@bodhiapp/ts-client';
+export type { FlowType, RequestedResourcesV1, UserScope } from '@bodhiapp/ts-client';
 export type { ClientConfig, DiscoveryResult, LogLevel } from './config';
 export type LoginProgressStage = 'requesting' | 'reviewing' | 'authenticating';
 export type LoginProgressCallback = (stage: LoginProgressStage) => void;
@@ -24,6 +24,9 @@ export interface LoginOptions {
     pollTimeoutMs?: number;
 }
 export type { BrowserInfo, OSInfo } from './platform';
+export { InMemoryStorage } from './storage';
+export type { IStorage, InitialTokens } from './storage';
 export { NOOP_STATE_CALLBACK } from './callback';
 export type { AuthStateChange, ClientStateChange, StateChange, StateChangeCallback, } from './callback';
 export { buildError, buildEvent, buildResponse, handleRequest } from '../onboarding/protocol-utils';
+export type { McpFetchLike, McpTransportConfig } from '../mcp-fetch';

package/dist/types/index.esm.js

@@ -1,8 +1,8 @@
-import { BodhiApiError as a, BodhiError as l } from "@bodhiapp/bodhi-browser-types";
-import { BodhiApiError as Z, BodhiError as $, unwrapResponse as j } from "@bodhiapp/bodhi-browser-types";
+import { BodhiApiError as d, BodhiError as l } from "@bodhiapp/bodhi-browser-types";
+import { BodhiApiError as M, BodhiError as Z, unwrapResponse as $ } from "@bodhiapp/bodhi-browser-types";
 const v = (e, r, n) => {
   const t = r?.error?.message || `HTTP ${e}`;
-  return new a(e, r, t, n);
+  return new d(e, r, t, n);
 }, o = (e, r) => new l(e, r);
 function S(e) {
   throw e === "denied" ? o("access_request_denied", "Access request was denied") : e === "expired" ? o("access_request_expired", "Access request expired") : o("access_request_failed", `Access request failed: ${e}`);
@@ -24,7 +24,7 @@ const i = {
   status: "pending-extension-ready",
   version: null,
   error: null
-}, _ = {
+}, f = {
   status: "not-connected",
   version: null,
   error: null
@@ -32,39 +32,39 @@ const i = {
 function u(e) {
   return e.status === "ready";
 }
-function x(e, r = "unknown", n = i.SERVER_NOT_READY, t, d) {
+function h(e, r = "unknown", n = i.SERVER_NOT_READY, t, a) {
   return {
     status: e,
     version: r,
     error: n,
     deployment: t ?? null,
-    client_id: d ?? null
+    client_id: a ?? null
   };
 }
 function c(e) {
   return e.type === "extension";
 }
-function f(e) {
+function _(e) {
   return e.type === "direct";
 }
-function I(e) {
+function x(e) {
   return typeof e.server == "object" && e.server.status !== "not-connected" && u(e.server);
 }
 function p(e) {
   return e.url !== null;
 }
-const D = {
+const I = {
   type: "direct",
   url: null,
-  server: _
+  server: f
 };
 function O(e, r = "unknown") {
   return { type: "direct", server: { status: "ready", version: r, error: null }, url: e };
 }
-function h(e) {
+function D(e) {
   return { type: "direct", server: E, url: e };
 }
-function C(e, r) {
+function g(e, r) {
   return { type: "direct", server: r, url: e };
 }
 const R = {
@@ -72,26 +72,26 @@ const R = {
   extension: "not-initialized",
   extensionId: null,
   server: s
-}, A = {
+}, y = {
   type: "extension",
   extension: "not-found",
   extensionId: null,
   server: s
 };
-function w(e) {
+function C(e) {
   return e.extension === "ready" && e.server.status !== "pending-extension-ready" && u(e.server);
 }
-function N(e) {
+function A(e) {
   return e.extension === "ready";
 }
-function B() {
+function w() {
   return R;
 }
-function g() {
-  return A;
+function k() {
+  return y;
 }
-function k(e) {
-  return c(e) ? N(e) : p(e);
+function B(e) {
+  return c(e) ? A(e) : p(e);
 }
 function q(e) {
   return e.server;
@@ -100,7 +100,7 @@ function L(e) {
   return c(e) ? e.extensionId ?? void 0 : void 0;
 }
 function b(e) {
-  return f(e) ? e.url ?? void 0 : void 0;
+  return _(e) ? e.url ?? void 0 : void 0;
 }
 function m(e) {
   return e.status === "authenticated";
@@ -115,62 +115,83 @@ const K = {
   status: "idle",
   user: null,
   accessToken: null,
-  error: null
-}, P = () => {
+  error: null,
+  refreshToken: null,
+  expiresAt: null,
+  isTokenRefresh: !1
 };
-function U(e, r) {
+class P {
+  constructor() {
+    this.store = /* @__PURE__ */ new Map();
+  }
+  async get(r) {
+    return this.store.get(r) ?? null;
+  }
+  async set(r) {
+    Object.entries(r).forEach(([n, t]) => {
+      this.store.set(n, String(t));
+    });
+  }
+  async remove(r) {
+    r.forEach((n) => this.store.delete(n));
+  }
+}
+const U = () => {
+};
+function X(e, r) {
   return { kind: "event", type: e, payload: r };
 }
 function T(e, r, n) {
   return { kind: "response", type: r, requestId: e, payload: n };
 }
-function X(e, r) {
+function Y(e, r) {
   return { kind: "error", requestId: e, error: r };
 }
-function Y(e, r) {
+function j(e, r) {
   const n = r[e.type];
   if (!n) return null;
   const t = n(e.payload);
   return T(e.requestId, e.type, t);
 }
 export {
-  _ as BACKEND_SERVER_NOT_CONNECTED,
+  f as BACKEND_SERVER_NOT_CONNECTED,
   E as BACKEND_SERVER_NOT_REACHABLE,
-  Z as BodhiApiError,
-  $ as BodhiError,
-  D as DIRECT_STATE_NOT_INITIALIZED,
-  A as EXTENSION_STATE_NOT_FOUND,
+  M as BodhiApiError,
+  Z as BodhiError,
+  I as DIRECT_STATE_NOT_INITIALIZED,
+  y as EXTENSION_STATE_NOT_FOUND,
   R as EXTENSION_STATE_NOT_INITIALIZED,
   K as INITIAL_AUTH_STATE,
-  P as NOOP_STATE_CALLBACK,
+  P as InMemoryStorage,
+  U as NOOP_STATE_CALLBACK,
   s as PENDING_EXTENSION_READY,
   i as SERVER_ERROR_CODES,
-  x as backendServerNotReady,
-  X as buildError,
-  U as buildEvent,
+  h as backendServerNotReady,
+  Y as buildError,
+  X as buildEvent,
   T as buildResponse,
   v as createApiError,
-  h as createDirectStateNotReachable,
-  C as createDirectStateNotReady,
+  D as createDirectStateNotReachable,
+  g as createDirectStateNotReady,
   O as createDirectStateReady,
-  g as createExtensionStateNotFound,
-  B as createExtensionStateNotInitialized,
+  k as createExtensionStateNotFound,
+  w as createExtensionStateNotInitialized,
   o as createOperationError,
   q as getBackendServerState,
   L as getExtensionId,
   b as getServerUrl,
-  Y as handleRequest,
+  j as handleRequest,
   V as isAuthError,
   H as isAuthLoading,
   m as isAuthenticated,
-  k as isClientReady,
+  B as isClientReady,
   p as isDirectClientReady,
-  I as isDirectServerReady,
-  f as isDirectState,
-  N as isExtensionClientReady,
-  w as isExtensionServerReady,
+  x as isDirectServerReady,
+  _ as isDirectState,
+  A as isExtensionClientReady,
+  C as isExtensionServerReady,
   c as isExtensionState,
   u as isServerReady,
   S as throwAccessRequestDenialError,
-  j as unwrapResponse
+  $ as unwrapResponse
 };

package/dist/types/storage.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Pluggable storage interface and implementations for token persistence
+ */
+/**
+ * Storage adapter interface for token persistence.
+ * Implementations: LocalStorageAdapter (web), ChromeSessionStorageAdapter (ext), InMemoryStorage (CLI/headless)
+ */
+export interface IStorage {
+    get(key: string): Promise<string | null>;
+    set(items: Record<string, string | number>): Promise<void>;
+    remove(keys: string[]): Promise<void>;
+}
+/**
+ * In-memory storage adapter for CLI/headless use cases.
+ * Tokens live only in process memory — use onStateChange callback for external persistence.
+ */
+export declare class InMemoryStorage implements IStorage {
+    private store;
+    get(key: string): Promise<string | null>;
+    set(items: Record<string, string | number>): Promise<void>;
+    remove(keys: string[]): Promise<void>;
+}
+/**
+ * Pre-existing tokens for injection during client initialization.
+ * Used by CLI/headless hosts that obtain OAuth tokens independently.
+ */
+export interface InitialTokens {
+    accessToken: string;
+    refreshToken?: string;
+    expiresAt?: number;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bodhiapp/bodhi-js-core",
-  "version": "0.0.30",
+  "version": "0.0.32",
   "description": "Core types and interfaces for Bodhi Browser SDK",
   "type": "module",
   "main": "dist/bodhi-core.cjs.js",
@@ -24,6 +24,11 @@
       "types": "./dist/api/index.d.ts",
       "import": "./dist/api/index.esm.js",
       "require": "./dist/api/index.cjs.js"
+    },
+    "./mcp": {
+      "types": "./dist/mcp.d.ts",
+      "import": "./dist/mcp.esm.js",
+      "require": "./dist/mcp.cjs.js"
     }
   },
   "files": [
@@ -53,16 +58,26 @@
     "build:prod": "npm run copy-deps && npm run build-cli && vite build --mode production",
     "lint": "eslint . --ext .js,.jsx,.ts,.tsx && prettier --check .",
     "lint:fix": "prettier --write . && eslint . --ext .js,.jsx,.ts,.tsx --fix",
-    "typecheck": "tsc --noEmit"
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  },
+  "peerDependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@modelcontextprotocol/sdk": {
+      "optional": true
+    }
   },
   "dependencies": {
-    "@bodhiapp/bodhi-browser-types": "0.0.30",
-    "@bodhiapp/setup-modal-types": "0.0.30",
-    "@bodhiapp/ts-client": "0.1.24",
+    "@bodhiapp/bodhi-browser-types": "0.0.32",
+    "@bodhiapp/setup-modal-types": "0.0.32",
+    "@bodhiapp/ts-client": "0.1.26",
     "ua-parser-js": "^1.0.40"
   },
   "devDependencies": {
     "@eslint/js": "^9.23.0",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "@types/node": "^20.19.10",
     "@types/ua-parser-js": "^0.7.39",
     "@typescript-eslint/eslint-plugin": "8.28.0",
@@ -76,6 +91,7 @@
     "tslib": "^2.6.2",
     "typescript": "^5.8.3",
     "vite": "^7.1.12",
-    "vite-plugin-dts": "^4.5.4"
+    "vite-plugin-dts": "^4.5.4",
+    "vitest": "^4.1.2"
   }
 }