@bodhiapp/bodhi-js 0.0.2 → 0.0.3

package/dist/bodhi-web.cjs.js

@@ -1,749 +1 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const bodhiJsCore = require("@bodhiapp/bodhi-js-core");
-class DirectWebClient extends bodhiJsCore.DirectClientBase {
-  constructor(config, onStateChange) {
-    super({ ...config, storagePrefix: bodhiJsCore.STORAGE_PREFIXES.DIRECT }, "DirectWebClient", onStateChange);
-    this.redirectUri = config.redirectUri;
-  }
-  // ============================================================================
-  // Authentication (Browser Redirect OAuth)
-  // ============================================================================
-  async login() {
-    const existingAuth = await this.getAuthState();
-    if (existingAuth.isLoggedIn) {
-      return existingAuth;
-    }
-    const resourceScope = await this.requestResourceAccess();
-    const fullScope = `openid profile email roles ${this.userScope} ${resourceScope}`;
-    const codeVerifier = bodhiJsCore.generateCodeVerifier();
-    const codeChallenge = await bodhiJsCore.generateCodeChallenge(codeVerifier);
-    const state = bodhiJsCore.generateCodeVerifier();
-    localStorage.setItem(this.storageKeys.CODE_VERIFIER, codeVerifier);
-    localStorage.setItem(this.storageKeys.STATE, state);
-    const authUrl = new URL(this.authEndpoints.authorize);
-    authUrl.searchParams.set("client_id", this.authClientId);
-    authUrl.searchParams.set("response_type", "code");
-    authUrl.searchParams.set("redirect_uri", this.redirectUri);
-    authUrl.searchParams.set("scope", fullScope);
-    authUrl.searchParams.set("code_challenge", codeChallenge);
-    authUrl.searchParams.set("code_challenge_method", "S256");
-    authUrl.searchParams.set("state", state);
-    window.location.href = authUrl.toString();
-    throw new Error("Redirect initiated");
-  }
-  async handleOAuthCallback(code, state) {
-    const storedState = localStorage.getItem(this.storageKeys.STATE);
-    if (!storedState || storedState !== state) {
-      throw new Error("Invalid state parameter - possible CSRF attack");
-    }
-    await this.exchangeCodeForTokens(code);
-    localStorage.removeItem(this.storageKeys.CODE_VERIFIER);
-    localStorage.removeItem(this.storageKeys.STATE);
-    const authState = await this.getAuthState();
-    if (!authState.isLoggedIn) {
-      throw new Error("Login failed");
-    }
-    const result = authState;
-    this.setAuthState(result);
-    return result;
-  }
-  async logout() {
-    const refreshToken = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
-    if (refreshToken) {
-      try {
-        const params = new URLSearchParams({
-          token: refreshToken,
-          client_id: this.authClientId,
-          token_type_hint: "refresh_token"
-        });
-        await fetch(this.authEndpoints.revoke, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/x-www-form-urlencoded"
-          },
-          body: params
-        });
-      } catch (error) {
-        this.logger.warn("Token revocation failed:", error);
-      }
-    }
-    localStorage.removeItem(this.storageKeys.ACCESS_TOKEN);
-    localStorage.removeItem(this.storageKeys.REFRESH_TOKEN);
-    localStorage.removeItem(this.storageKeys.EXPIRES_AT);
-    localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);
-    const result = {
-      isLoggedIn: false
-    };
-    this.setAuthState(result);
-    return result;
-  }
-  // ============================================================================
-  // OAuth Helper Methods
-  // ============================================================================
-  async requestResourceAccess() {
-    const response = await this.sendApiRequest(
-      "POST",
-      "/bodhi/v1/apps/request-access",
-      { app_client_id: this.authClientId },
-      {},
-      false
-    );
-    if (bodhiJsCore.isApiResultOperationError(response)) {
-      throw new Error("Failed to get resource access scope from server");
-    }
-    if (!bodhiJsCore.isApiResultSuccess(response)) {
-      throw new Error("Failed to get resource access scope from server: API error");
-    }
-    const scope = response.body.scope;
-    localStorage.setItem(this.storageKeys.RESOURCE_SCOPE, scope);
-    return scope;
-  }
-  async exchangeCodeForTokens(code) {
-    const codeVerifier = localStorage.getItem(this.storageKeys.CODE_VERIFIER);
-    if (!codeVerifier) {
-      throw new Error("Code verifier not found");
-    }
-    const response = await fetch(this.authEndpoints.token, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/x-www-form-urlencoded"
-      },
-      body: new URLSearchParams({
-        grant_type: "authorization_code",
-        code,
-        redirect_uri: this.redirectUri,
-        client_id: this.authClientId,
-        code_verifier: codeVerifier
-      })
-    });
-    if (!response.ok) {
-      const errorText = await response.text();
-      throw new Error(`Token exchange failed: ${response.status} ${errorText}`);
-    }
-    const tokens = await response.json();
-    localStorage.setItem(this.storageKeys.ACCESS_TOKEN, tokens.access_token);
-    if (tokens.refresh_token) {
-      localStorage.setItem(this.storageKeys.REFRESH_TOKEN, tokens.refresh_token);
-    }
-    if (tokens.expires_in) {
-      const expiresAt = Date.now() + tokens.expires_in * 1e3;
-      localStorage.setItem(this.storageKeys.EXPIRES_AT, expiresAt.toString());
-    }
-  }
-  // ============================================================================
-  // Storage Implementation (localStorage)
-  // ============================================================================
-  async _storageGet(key) {
-    return localStorage.getItem(key);
-  }
-  async _storageSet(items) {
-    Object.entries(items).forEach(([key, value]) => {
-      localStorage.setItem(key, String(value));
-    });
-  }
-  async _storageRemove(keys) {
-    keys.forEach((key) => localStorage.removeItem(key));
-  }
-  _getRedirectUri() {
-    return this.redirectUri;
-  }
-}
-const POLL_INTERVAL = 500;
-const POLL_TIMEOUT = 5e3;
-const STORAGE_KEYS = bodhiJsCore.createStorageKeys(bodhiJsCore.STORAGE_PREFIXES.WEB);
-class WindowBodhiextClient {
-  constructor(authClientId, config, onStateChange) {
-    this.state = bodhiJsCore.EXTENSION_STATE_NOT_INITIALIZED;
-    this.bodhiext = null;
-    this.refreshPromise = null;
-    this.logger = new bodhiJsCore.Logger("WindowBodhiextClient", config.logLevel);
-    this.authClientId = authClientId;
-    this.config = config;
-    this.authEndpoints = bodhiJsCore.createOAuthEndpoints(this.config.authServerUrl);
-    this.onStateChange = onStateChange ?? bodhiJsCore.NOOP_STATE_CALLBACK;
-  }
-  /**
-   * Set client state and notify callback
-   */
-  setState(newState) {
-    this.state = newState;
-    this.logger.info(`{state: ${JSON.stringify(newState)}} - Setting client state`);
-    this.onStateChange({ type: "client-state", state: newState });
-  }
-  /**
-   * Set auth state and notify callback
-   */
-  setAuthState(authState) {
-    this.onStateChange({ type: "auth-state", state: authState });
-  }
-  /**
-   * Set or update the state change callback
-   */
-  setStateCallback(callback) {
-    this.onStateChange = callback;
-  }
-  // ============================================================================
-  // Extension Communication
-  // ============================================================================
-  /**
-   * Ensure bodhiext is available, attempting to acquire it if not already set
-   * @throws Error if client not initialized
-   */
-  ensureBodhiext() {
-    if (!this.bodhiext && window.bodhiext) {
-      this.logger.info("Acquiring window.bodhiext reference");
-      this.bodhiext = window.bodhiext;
-    }
-    if (!this.bodhiext) {
-      throw new Error("Client not initialized");
-    }
-  }
-  /**
-   * Send extension request via window.bodhiext.sendExtRequest
-   */
-  async sendExtRequest(action, params) {
-    this.ensureBodhiext();
-    return this.bodhiext.sendExtRequest(action, params);
-  }
-  /**
-   * Send API message via window.bodhiext.sendApiRequest
-   * Converts ApiResponse to ApiResponseResult
-   */
-  async sendApiRequest(method, endpoint, body, headers, authenticated) {
-    try {
-      this.ensureBodhiext();
-    } catch (err) {
-      return {
-        error: {
-          message: err instanceof Error ? err.message : String(err),
-          type: "extension_error"
-        }
-      };
-    }
-    try {
-      let requestHeaders = headers || {};
-      if (authenticated) {
-        const accessToken = await this._getAccessTokenRaw();
-        if (!accessToken) {
-          return {
-            error: {
-              message: "Not authenticated. Please log in first.",
-              type: "extension_error"
-            }
-          };
-        }
-        requestHeaders = {
-          ...requestHeaders,
-          Authorization: `Bearer ${accessToken}`
-        };
-      }
-      const response = await this.bodhiext.sendApiRequest(
-        method,
-        endpoint,
-        body,
-        requestHeaders
-      );
-      return response;
-    } catch (e) {
-      const errorObj = e == null ? void 0 : e.error;
-      const message = (errorObj == null ? void 0 : errorObj.message) ?? (e instanceof Error ? e.message : String(e));
-      const errorType = (errorObj == null ? void 0 : errorObj.type) || "extension_error";
-      return {
-        error: {
-          message,
-          type: errorType
-        }
-      };
-    }
-  }
-  /**
-   * Get current client state
-   */
-  getState() {
-    return this.state;
-  }
-  isClientInitialized() {
-    return this.state.extension === "ready";
-  }
-  isServerReady() {
-    return this.isClientInitialized() && this.state.server.status === "ready";
-  }
-  /**
-   * Initialize extension discovery with optional timeout
-   * Returns ExtensionState with extension and server status
-   *
-   * Note: Web mode uses stateless discovery (always polls for window.bodhiext)
-   * No extensionId storage/restoration needed - window.bodhiext handle is ephemeral
-   */
-  async init(params = {}) {
-    var _a, _b, _c, _d;
-    if (!params.testConnection && !params.selectedConnection) {
-      this.logger.info("No testConnection or selectedConnection, returning not-initialized state");
-      return bodhiJsCore.EXTENSION_STATE_NOT_INITIALIZED;
-    }
-    if (this.bodhiext && !params.testConnection) {
-      this.logger.debug("Already have bodhiext handle, skipping polling");
-      return this.state;
-    }
-    if (!this.bodhiext) {
-      const timeoutMs = params.timeoutMs ?? ((_b = (_a = this.config.initParams) == null ? void 0 : _a.extension) == null ? void 0 : _b.timeoutMs) ?? POLL_TIMEOUT;
-      const intervalMs = params.intervalMs ?? ((_d = (_c = this.config.initParams) == null ? void 0 : _c.extension) == null ? void 0 : _d.intervalMs) ?? POLL_INTERVAL;
-      const startTime = Date.now();
-      const found = await new Promise((resolve) => {
-        const check = () => {
-          if (window.bodhiext) {
-            this.bodhiext = window.bodhiext;
-            resolve(true);
-            return;
-          }
-          if (Date.now() - startTime >= timeoutMs) {
-            resolve(false);
-            return;
-          }
-          setTimeout(check, intervalMs);
-        };
-        check();
-      });
-      if (!found) {
-        this.logger.warn(`Extension discovery timed out`);
-        this.setState(bodhiJsCore.EXTENSION_STATE_NOT_FOUND);
-        return this.state;
-      }
-    }
-    const extensionId = await this.bodhiext.getExtensionId();
-    this.logger.info(`Extension discovered: ${extensionId}`);
-    const state = {
-      type: "extension",
-      extension: "ready",
-      extensionId,
-      server: bodhiJsCore.PENDING_EXTENSION_READY
-    };
-    if (params.testConnection) {
-      try {
-        const serverState = await this.getServerState();
-        this.setState({ ...state, server: serverState });
-        this.logger.info(`Server connectivity tested: ${serverState.status}`);
-      } catch (error) {
-        this.logger.error(`Failed to get server state:`, error);
-        this.setState({ ...state, server: bodhiJsCore.BACKEND_SERVER_NOT_REACHABLE });
-      }
-    } else {
-      this.setState(state);
-    }
-    return this.state;
-  }
-  // ============================================================================
-  // OAuth Methods
-  // ============================================================================
-  /**
-   * Request resource access scope from backend
-   * Required for authenticated API access
-   */
-  async requestResourceAccess() {
-    this.ensureBodhiext();
-    const response = await this.bodhiext.sendApiRequest("POST", "/bodhi/v1/apps/request-access", {
-      app_client_id: this.authClientId
-    });
-    if (!bodhiJsCore.isApiResultSuccess(response)) {
-      throw new Error("Failed to get resource access scope: API error");
-    }
-    const scope = response.body.scope;
-    localStorage.setItem(STORAGE_KEYS.RESOURCE_SCOPE, scope);
-    return scope;
-  }
-  /**
-   * Login via browser redirect OAuth2 + PKCE flow
-   * @returns AuthLoggedIn (though in practice, this redirects and never returns)
-   */
-  async login() {
-    const existingAuth = await this.getAuthState();
-    if (existingAuth.isLoggedIn) {
-      return existingAuth;
-    }
-    this.ensureBodhiext();
-    const resourceScope = await this.requestResourceAccess();
-    const codeVerifier = bodhiJsCore.generateCodeVerifier();
-    const codeChallenge = await bodhiJsCore.generateCodeChallenge(codeVerifier);
-    const state = bodhiJsCore.generateCodeVerifier();
-    localStorage.setItem(STORAGE_KEYS.CODE_VERIFIER, codeVerifier);
-    localStorage.setItem(STORAGE_KEYS.STATE, state);
-    const scopes = ["openid", "profile", "email", "roles", this.config.userScope, resourceScope];
-    const params = new URLSearchParams({
-      response_type: "code",
-      client_id: this.authClientId,
-      redirect_uri: this.config.redirectUri,
-      scope: scopes.join(" "),
-      state,
-      code_challenge: codeChallenge,
-      code_challenge_method: "S256"
-    });
-    const authUrl = `${this.authEndpoints.authorize}?${params}`;
-    window.location.href = authUrl;
-    return new Promise(() => {
-    });
-  }
-  /**
-   * Handle OAuth callback with authorization code
-   * Should be called from callback page with extracted URL params
-   * @returns AuthLoggedIn with login state and user info
-   */
-  async handleOAuthCallback(code, state) {
-    const storedState = localStorage.getItem(STORAGE_KEYS.STATE);
-    if (!storedState || storedState !== state) {
-      throw new Error("Invalid state parameter - possible CSRF attack");
-    }
-    await this.exchangeCodeForTokens(code);
-    localStorage.removeItem(STORAGE_KEYS.CODE_VERIFIER);
-    localStorage.removeItem(STORAGE_KEYS.STATE);
-    const authState = await this.getAuthState();
-    if (!authState.isLoggedIn) {
-      throw new Error("Login failed");
-    }
-    this.setAuthState(authState);
-    return authState;
-  }
-  /**
-   * Exchange authorization code for tokens
-   */
-  async exchangeCodeForTokens(code) {
-    const codeVerifier = localStorage.getItem(STORAGE_KEYS.CODE_VERIFIER);
-    if (!codeVerifier) {
-      throw new Error("Code verifier not found");
-    }
-    const params = new URLSearchParams({
-      grant_type: "authorization_code",
-      client_id: this.authClientId,
-      code,
-      redirect_uri: this.config.redirectUri,
-      code_verifier: codeVerifier
-    });
-    const response = await fetch(this.authEndpoints.token, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/x-www-form-urlencoded"
-      },
-      body: params
-    });
-    if (!response.ok) {
-      const errorText = await response.text();
-      throw new Error(`Token exchange failed: ${response.status} ${errorText}`);
-    }
-    const tokenData = await response.json();
-    if (!tokenData.access_token) {
-      throw new Error("No access token received");
-    }
-    localStorage.setItem(STORAGE_KEYS.ACCESS_TOKEN, tokenData.access_token);
-    if (tokenData.refresh_token) {
-      localStorage.setItem(STORAGE_KEYS.REFRESH_TOKEN, tokenData.refresh_token);
-    }
-    if (tokenData.expires_in) {
-      const expiresAt = Date.now() + tokenData.expires_in * 1e3;
-      localStorage.setItem(STORAGE_KEYS.EXPIRES_AT, expiresAt.toString());
-    }
-  }
-  /**
-   * Logout user and revoke tokens
-   * @returns AuthLoggedOut with logged out state
-   */
-  async logout() {
-    const refreshToken = localStorage.getItem(STORAGE_KEYS.REFRESH_TOKEN);
-    if (refreshToken) {
-      try {
-        const params = new URLSearchParams({
-          token: refreshToken,
-          client_id: this.authClientId,
-          token_type_hint: "refresh_token"
-        });
-        await fetch(this.authEndpoints.revoke, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/x-www-form-urlencoded"
-          },
-          body: params
-        });
-      } catch (error) {
-        this.logger.warn("Token revocation failed:", error);
-      }
-    }
-    localStorage.removeItem(STORAGE_KEYS.ACCESS_TOKEN);
-    localStorage.removeItem(STORAGE_KEYS.REFRESH_TOKEN);
-    localStorage.removeItem(STORAGE_KEYS.EXPIRES_AT);
-    localStorage.removeItem(STORAGE_KEYS.CODE_VERIFIER);
-    localStorage.removeItem(STORAGE_KEYS.STATE);
-    localStorage.removeItem(STORAGE_KEYS.RESOURCE_SCOPE);
-    const result = {
-      isLoggedIn: false
-    };
-    this.setAuthState(result);
-    return result;
-  }
-  /**
-   * Get current authentication state
-   */
-  async getAuthState() {
-    const accessToken = await this._getAccessTokenRaw();
-    if (!accessToken) {
-      return { isLoggedIn: false };
-    }
-    try {
-      const userInfo = bodhiJsCore.extractUserInfo(accessToken);
-      return { isLoggedIn: true, userInfo, accessToken };
-    } catch (error) {
-      this.logger.error("Failed to parse token:", error);
-      return { isLoggedIn: false };
-    }
-  }
-  /**
-   * Get current access token
-   * Returns null if not logged in or token expired
-   */
-  async _getAccessTokenRaw() {
-    const accessToken = localStorage.getItem(STORAGE_KEYS.ACCESS_TOKEN);
-    const expiresAt = localStorage.getItem(STORAGE_KEYS.EXPIRES_AT);
-    if (!accessToken) {
-      return null;
-    }
-    if (expiresAt) {
-      const expirationTime = parseInt(expiresAt, 10);
-      if (Date.now() >= expirationTime - 5 * 1e3) {
-        const refreshToken = localStorage.getItem(STORAGE_KEYS.REFRESH_TOKEN);
-        if (refreshToken) {
-          return this._tryRefreshToken(refreshToken);
-        }
-        return null;
-      }
-    }
-    return accessToken;
-  }
-  /**
-   * Try to refresh access token using refresh token
-   * Race condition prevention: Returns existing promise if refresh already in progress
-   */
-  async _tryRefreshToken(refreshToken) {
-    if (this.refreshPromise) {
-      this.logger.debug("Refresh already in progress, returning existing promise");
-      return this.refreshPromise;
-    }
-    this.refreshPromise = this._doRefreshToken(refreshToken);
-    try {
-      return await this.refreshPromise;
-    } finally {
-      this.refreshPromise = null;
-    }
-  }
-  /**
-   * Perform the actual token refresh
-   */
-  async _doRefreshToken(refreshToken) {
-    this.logger.debug("Refreshing access token");
-    try {
-      const tokens = await bodhiJsCore.refreshAccessToken(
-        this.authEndpoints.token,
-        refreshToken,
-        this.authClientId
-      );
-      if (tokens) {
-        this._storeRefreshedTokens(tokens);
-        const userInfo = bodhiJsCore.extractUserInfo(tokens.access_token);
-        this.setAuthState({
-          isLoggedIn: true,
-          userInfo,
-          accessToken: tokens.access_token
-        });
-        this.logger.info("Token refreshed successfully");
-        return tokens.access_token;
-      }
-    } catch (error) {
-      this.logger.warn("Token refresh failed:", error);
-    }
-    this.logger.warn("Token refresh failed, keeping tokens for manual retry");
-    throw bodhiJsCore.createOperationError(
-      "Access token expired and unable to refresh. Try logging out and logging in again.",
-      "token_refresh_failed"
-    );
-  }
-  /**
-   * Store refreshed tokens
-   */
-  _storeRefreshedTokens(tokens) {
-    const expiresAt = Date.now() + tokens.expires_in * 1e3;
-    localStorage.setItem(STORAGE_KEYS.ACCESS_TOKEN, tokens.access_token);
-    localStorage.setItem(STORAGE_KEYS.EXPIRES_AT, String(expiresAt));
-    if (tokens.refresh_token) {
-      localStorage.setItem(STORAGE_KEYS.REFRESH_TOKEN, tokens.refresh_token);
-    }
-  }
-  /**
-   * Ping API
-   */
-  async pingApi() {
-    return this.sendApiRequest("GET", "/ping");
-  }
-  /**
-   * Fetch models
-   */
-  async fetchModels() {
-    return this.sendApiRequest(
-      "GET",
-      "/v1/models",
-      void 0,
-      void 0,
-      true
-    );
-  }
-  /**
-   * Get backend server state
-   * Calls /bodhi/v1/info and returns structured server state
-   */
-  async getServerState() {
-    const result = await this.sendApiRequest("GET", "/bodhi/v1/info");
-    if (bodhiJsCore.isApiResultOperationError(result)) {
-      return bodhiJsCore.BACKEND_SERVER_NOT_REACHABLE;
-    }
-    if (!bodhiJsCore.isApiResultSuccess(result)) {
-      return bodhiJsCore.BACKEND_SERVER_NOT_REACHABLE;
-    }
-    const body = result.body;
-    switch (body.status) {
-      case "ready":
-        return { status: "ready", version: body.version || "unknown" };
-      case "setup":
-        return bodhiJsCore.backendServerNotReady("setup", body.version || "unknown");
-      case "resource-admin":
-        return bodhiJsCore.backendServerNotReady("resource-admin", body.version || "unknown");
-      case "error":
-        return bodhiJsCore.backendServerNotReady(
-          "error",
-          body.version || "unknown",
-          body.error ? { message: body.error.message, type: body.error.type } : bodhiJsCore.SERVER_ERROR_CODES.SERVER_NOT_READY
-        );
-      default:
-        return bodhiJsCore.BACKEND_SERVER_NOT_REACHABLE;
-    }
-  }
-  /**
-   * Generic streaming via window.bodhiext.sendStreamRequest
-   * Wraps ReadableStream as AsyncGenerator
-   */
-  async *stream(method, endpoint, body, headers, authenticated = true) {
-    this.ensureBodhiext();
-    let requestHeaders = headers || {};
-    if (authenticated) {
-      const accessToken = await this._getAccessTokenRaw();
-      if (!accessToken) {
-        throw new Error("Not authenticated. Please log in first.");
-      }
-      requestHeaders = {
-        ...requestHeaders,
-        Authorization: `Bearer ${accessToken}`
-      };
-    }
-    const stream = this.bodhiext.sendStreamRequest(method, endpoint, body, requestHeaders);
-    const reader = stream.getReader();
-    try {
-      while (true) {
-        const { value, done } = await reader.read();
-        if (done || (value == null ? void 0 : value.done)) {
-          break;
-        }
-        yield value.body;
-      }
-    } catch (err) {
-      if (err instanceof Error) {
-        if ("response" in err) {
-          const apiErr = err;
-          throw bodhiJsCore.createApiError(err.message, apiErr.response.status, apiErr.response.body);
-        }
-        if ("error" in err) {
-          throw bodhiJsCore.createOperationError(err.message, "extension_error");
-        }
-        throw bodhiJsCore.createOperationError(err.message, "extension_error");
-      }
-      throw err;
-    } finally {
-      reader.releaseLock();
-    }
-  }
-  /**
-   * Chat streaming
-   */
-  async *streamChat(model, prompt, authenticated = true) {
-    yield* this.stream(
-      "POST",
-      "/v1/chat/completions",
-      {
-        model,
-        messages: [{ role: "user", content: prompt }],
-        stream: true
-      },
-      void 0,
-      authenticated
-    );
-  }
-  /**
-   * Serialize web extension client state (all transient, nothing to persist)
-   */
-  serialize() {
-    return {
-      extensionId: this.state.type === "extension" && this.state.extension === "ready" ? this.state.extensionId : void 0
-    };
-  }
-  /**
-   * Debug dump of WindowBodhiextClient internal state
-   */
-  async debug() {
-    return {
-      type: "WindowBodhiextClient",
-      state: this.state,
-      authState: await this.getAuthState(),
-      bodhiextAvailable: this.bodhiext !== null,
-      authClientId: this.authClientId,
-      authServerUrl: this.config.authServerUrl,
-      redirectUri: this.config.redirectUri,
-      userScope: this.config.userScope
-    };
-  }
-}
-class WebUIClient extends bodhiJsCore.BaseFacadeClient {
-  constructor(authClientId, config, onStateChange, storagePrefix) {
-    const normalizedConfig = {
-      redirectUri: config.redirectUri,
-      authServerUrl: config.authServerUrl || "https://id.getbodhi.app/realms/bodhi",
-      userScope: config.userScope || "scope_user_user",
-      logLevel: config.logLevel || "warn",
-      initParams: config.initParams
-    };
-    super(authClientId, normalizedConfig, onStateChange, storagePrefix);
-  }
-  createLogger(config) {
-    return new bodhiJsCore.Logger("WebUIClient", config.logLevel);
-  }
-  createExtClient(config, onStateChange) {
-    return new WindowBodhiextClient(this.authClientId, config, onStateChange);
-  }
-  createDirectClient(authClientId, config, onStateChange) {
-    return new DirectWebClient(
-      {
-        authClientId,
-        authServerUrl: config.authServerUrl,
-        redirectUri: config.redirectUri,
-        userScope: config.userScope,
-        logLevel: config.logLevel,
-        storagePrefix: bodhiJsCore.STORAGE_PREFIXES.WEB
-      },
-      onStateChange
-    );
-  }
-  // ============================================================================
-  // Web-specific OAuth Callback
-  // ============================================================================
-  async handleOAuthCallback(code, state) {
-    if (this.connectionMode === "direct") {
-      return this.directClient.handleOAuthCallback(code, state);
-    }
-    return this.extClient.handleOAuthCallback(code, state);
-  }
-}
-exports.WebUIClient = WebUIClient;
-//# sourceMappingURL=bodhi-web.cjs.js.map
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const s=require("@bodhiapp/bodhi-js-core");class S extends s.DirectClientBase{constructor(e,t){super({...e,storagePrefix:s.STORAGE_PREFIXES.DIRECT},"DirectWebClient",t),this.redirectUri=e.redirectUri}async login(){const e=await this.getAuthState();if(e.isLoggedIn)return e;const t=await this.requestResourceAccess(),r=`openid profile email roles ${this.userScope} ${t}`,o=s.generateCodeVerifier(),n=await s.generateCodeChallenge(o),i=s.generateCodeVerifier();localStorage.setItem(this.storageKeys.CODE_VERIFIER,o),localStorage.setItem(this.storageKeys.STATE,i);const c=new URL(this.authEndpoints.authorize);throw c.searchParams.set("client_id",this.authClientId),c.searchParams.set("response_type","code"),c.searchParams.set("redirect_uri",this.redirectUri),c.searchParams.set("scope",r),c.searchParams.set("code_challenge",n),c.searchParams.set("code_challenge_method","S256"),c.searchParams.set("state",i),window.location.href=c.toString(),new Error("Redirect initiated")}async handleOAuthCallback(e,t){const r=localStorage.getItem(this.storageKeys.STATE);if(!r||r!==t)throw new Error("Invalid state parameter - possible CSRF attack");await this.exchangeCodeForTokens(e),localStorage.removeItem(this.storageKeys.CODE_VERIFIER),localStorage.removeItem(this.storageKeys.STATE);const o=await this.getAuthState();if(!o.isLoggedIn)throw new Error("Login failed");const n=o;return this.setAuthState(n),n}async logout(){const e=localStorage.getItem(this.storageKeys.REFRESH_TOKEN);if(e)try{const r=new URLSearchParams({token:e,client_id:this.authClientId,token_type_hint:"refresh_token"});await fetch(this.authEndpoints.revoke,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r})}catch(r){this.logger.warn("Token revocation failed:",r)}localStorage.removeItem(this.storageKeys.ACCESS_TOKEN),localStorage.removeItem(this.storageKeys.REFRESH_TOKEN),localStorage.removeItem(this.storageKeys.EXPIRES_AT),localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);const t={isLoggedIn:!1};return this.setAuthState(t),t}async requestResourceAccess(){const e=await this.sendApiRequest("POST","/bodhi/v1/apps/request-access",{app_client_id:this.authClientId},{},!1);if(s.isApiResultOperationError(e))throw new Error("Failed to get resource access scope from server");if(!s.isApiResultSuccess(e))throw new Error("Failed to get resource access scope from server: API error");const t=e.body.scope;return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE,t),t}async exchangeCodeForTokens(e){const t=localStorage.getItem(this.storageKeys.CODE_VERIFIER);if(!t)throw new Error("Code verifier not found");const r=await fetch(this.authEndpoints.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:e,redirect_uri:this.redirectUri,client_id:this.authClientId,code_verifier:t})});if(!r.ok){const n=await r.text();throw new Error(`Token exchange failed: ${r.status} ${n}`)}const o=await r.json();if(localStorage.setItem(this.storageKeys.ACCESS_TOKEN,o.access_token),o.refresh_token&&localStorage.setItem(this.storageKeys.REFRESH_TOKEN,o.refresh_token),o.expires_in){const n=Date.now()+o.expires_in*1e3;localStorage.setItem(this.storageKeys.EXPIRES_AT,n.toString())}}async _storageGet(e){return localStorage.getItem(e)}async _storageSet(e){Object.entries(e).forEach(([t,r])=>{localStorage.setItem(t,String(r))})}async _storageRemove(e){e.forEach(t=>localStorage.removeItem(t))}_getRedirectUri(){return this.redirectUri}}const f=500,_=5e3,a=s.createStorageKeys(s.STORAGE_PREFIXES.WEB);class p{constructor(e,t,r){this.state=s.EXTENSION_STATE_NOT_INITIALIZED,this.bodhiext=null,this.refreshPromise=null,this.logger=new s.Logger("WindowBodhiextClient",t.logLevel),this.authClientId=e,this.config=t,this.authEndpoints=s.createOAuthEndpoints(this.config.authServerUrl),this.onStateChange=r??s.NOOP_STATE_CALLBACK}setState(e){this.state=e,this.logger.info(`{state: ${JSON.stringify(e)}} - Setting client state`),this.onStateChange({type:"client-state",state:e})}setAuthState(e){this.onStateChange({type:"auth-state",state:e})}setStateCallback(e){this.onStateChange=e}ensureBodhiext(){if(!this.bodhiext&&window.bodhiext&&(this.logger.info("Acquiring window.bodhiext reference"),this.bodhiext=window.bodhiext),!this.bodhiext)throw new Error("Client not initialized")}async sendExtRequest(e,t){return this.ensureBodhiext(),this.bodhiext.sendExtRequest(e,t)}async sendApiRequest(e,t,r,o,n){try{this.ensureBodhiext()}catch(i){return{error:{message:i instanceof Error?i.message:String(i),type:"extension_error"}}}try{let i=o||{};if(n){const l=await this._getAccessTokenRaw();if(!l)return{error:{message:"Not authenticated. Please log in first.",type:"extension_error"}};i={...i,Authorization:`Bearer ${l}`}}return await this.bodhiext.sendApiRequest(e,t,r,i)}catch(i){const c=i==null?void 0:i.error,l=(c==null?void 0:c.message)??(i instanceof Error?i.message:String(i)),h=(c==null?void 0:c.type)||"extension_error";return{error:{message:l,type:h}}}}getState(){return this.state}isClientInitialized(){return this.state.extension==="ready"}isServerReady(){return this.isClientInitialized()&&this.state.server.status==="ready"}async init(e={}){var o,n,i,c;if(!e.testConnection&&!e.selectedConnection)return this.logger.info("No testConnection or selectedConnection, returning not-initialized state"),s.EXTENSION_STATE_NOT_INITIALIZED;if(this.bodhiext&&!e.testConnection)return this.logger.debug("Already have bodhiext handle, skipping polling"),this.state;if(!this.bodhiext){const l=e.timeoutMs??((n=(o=this.config.initParams)==null?void 0:o.extension)==null?void 0:n.timeoutMs)??_,h=e.intervalMs??((c=(i=this.config.initParams)==null?void 0:i.extension)==null?void 0:c.intervalMs)??f,d=Date.now();if(!await new Promise(u=>{const E=()=>{if(window.bodhiext){this.bodhiext=window.bodhiext,u(!0);return}if(Date.now()-d>=l){u(!1);return}setTimeout(E,h)};E()}))return this.logger.warn("Extension discovery timed out"),this.setState(s.EXTENSION_STATE_NOT_FOUND),this.state}const t=await this.bodhiext.getExtensionId();this.logger.info(`Extension discovered: ${t}`);const r={type:"extension",extension:"ready",extensionId:t,server:s.PENDING_EXTENSION_READY};if(e.testConnection)try{const l=await this.getServerState();this.setState({...r,server:l}),this.logger.info(`Server connectivity tested: ${l.status}`)}catch(l){this.logger.error("Failed to get server state:",l),this.setState({...r,server:s.BACKEND_SERVER_NOT_REACHABLE})}else this.setState(r);return this.state}async requestResourceAccess(){this.ensureBodhiext();const e=await this.bodhiext.sendApiRequest("POST","/bodhi/v1/apps/request-access",{app_client_id:this.authClientId});if(!s.isApiResultSuccess(e))throw new Error("Failed to get resource access scope: API error");const t=e.body.scope;return localStorage.setItem(a.RESOURCE_SCOPE,t),t}async login(){const e=await this.getAuthState();if(e.isLoggedIn)return e;this.ensureBodhiext();const t=await this.requestResourceAccess(),r=s.generateCodeVerifier(),o=await s.generateCodeChallenge(r),n=s.generateCodeVerifier();localStorage.setItem(a.CODE_VERIFIER,r),localStorage.setItem(a.STATE,n);const i=["openid","profile","email","roles",this.config.userScope,t],c=new URLSearchParams({response_type:"code",client_id:this.authClientId,redirect_uri:this.config.redirectUri,scope:i.join(" "),state:n,code_challenge:o,code_challenge_method:"S256"}),l=`${this.authEndpoints.authorize}?${c}`;return window.location.href=l,new Promise(()=>{})}async handleOAuthCallback(e,t){const r=localStorage.getItem(a.STATE);if(!r||r!==t)throw new Error("Invalid state parameter - possible CSRF attack");await this.exchangeCodeForTokens(e),localStorage.removeItem(a.CODE_VERIFIER),localStorage.removeItem(a.STATE);const o=await this.getAuthState();if(!o.isLoggedIn)throw new Error("Login failed");return this.setAuthState(o),o}async exchangeCodeForTokens(e){const t=localStorage.getItem(a.CODE_VERIFIER);if(!t)throw new Error("Code verifier not found");const r=new URLSearchParams({grant_type:"authorization_code",client_id:this.authClientId,code:e,redirect_uri:this.config.redirectUri,code_verifier:t}),o=await fetch(this.authEndpoints.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r});if(!o.ok){const i=await o.text();throw new Error(`Token exchange failed: ${o.status} ${i}`)}const n=await o.json();if(!n.access_token)throw new Error("No access token received");if(localStorage.setItem(a.ACCESS_TOKEN,n.access_token),n.refresh_token&&localStorage.setItem(a.REFRESH_TOKEN,n.refresh_token),n.expires_in){const i=Date.now()+n.expires_in*1e3;localStorage.setItem(a.EXPIRES_AT,i.toString())}}async logout(){const e=localStorage.getItem(a.REFRESH_TOKEN);if(e)try{const r=new URLSearchParams({token:e,client_id:this.authClientId,token_type_hint:"refresh_token"});await fetch(this.authEndpoints.revoke,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r})}catch(r){this.logger.warn("Token revocation failed:",r)}localStorage.removeItem(a.ACCESS_TOKEN),localStorage.removeItem(a.REFRESH_TOKEN),localStorage.removeItem(a.EXPIRES_AT),localStorage.removeItem(a.CODE_VERIFIER),localStorage.removeItem(a.STATE),localStorage.removeItem(a.RESOURCE_SCOPE);const t={isLoggedIn:!1};return this.setAuthState(t),t}async getAuthState(){const e=await this._getAccessTokenRaw();if(!e)return{isLoggedIn:!1};try{return{isLoggedIn:!0,userInfo:s.extractUserInfo(e),accessToken:e}}catch(t){return this.logger.error("Failed to parse token:",t),{isLoggedIn:!1}}}async _getAccessTokenRaw(){const e=localStorage.getItem(a.ACCESS_TOKEN),t=localStorage.getItem(a.EXPIRES_AT);if(!e)return null;if(t){const r=parseInt(t,10);if(Date.now()>=r-5*1e3){const o=localStorage.getItem(a.REFRESH_TOKEN);return o?this._tryRefreshToken(o):null}}return e}async _tryRefreshToken(e){if(this.refreshPromise)return this.logger.debug("Refresh already in progress, returning existing promise"),this.refreshPromise;this.refreshPromise=this._doRefreshToken(e);try{return await this.refreshPromise}finally{this.refreshPromise=null}}async _doRefreshToken(e){this.logger.debug("Refreshing access token");try{const t=await s.refreshAccessToken(this.authEndpoints.token,e,this.authClientId);if(t){this._storeRefreshedTokens(t);const r=s.extractUserInfo(t.access_token);return this.setAuthState({isLoggedIn:!0,userInfo:r,accessToken:t.access_token}),this.logger.info("Token refreshed successfully"),t.access_token}}catch(t){this.logger.warn("Token refresh failed:",t)}throw this.logger.warn("Token refresh failed, keeping tokens for manual retry"),s.createOperationError("Access token expired and unable to refresh. Try logging out and logging in again.","token_refresh_failed")}_storeRefreshedTokens(e){const t=Date.now()+e.expires_in*1e3;localStorage.setItem(a.ACCESS_TOKEN,e.access_token),localStorage.setItem(a.EXPIRES_AT,String(t)),e.refresh_token&&localStorage.setItem(a.REFRESH_TOKEN,e.refresh_token)}async pingApi(){return this.sendApiRequest("GET","/ping")}async fetchModels(){return this.sendApiRequest("GET","/v1/models",void 0,void 0,!0)}async getServerState(){const e=await this.sendApiRequest("GET","/bodhi/v1/info");if(s.isApiResultOperationError(e)||!s.isApiResultSuccess(e))return s.BACKEND_SERVER_NOT_REACHABLE;const t=e.body;switch(t.status){case"ready":return{status:"ready",version:t.version||"unknown"};case"setup":return s.backendServerNotReady("setup",t.version||"unknown");case"resource-admin":return s.backendServerNotReady("resource-admin",t.version||"unknown");case"error":return s.backendServerNotReady("error",t.version||"unknown",t.error?{message:t.error.message,type:t.error.type}:s.SERVER_ERROR_CODES.SERVER_NOT_READY);default:return s.BACKEND_SERVER_NOT_REACHABLE}}async*stream(e,t,r,o,n=!0){this.ensureBodhiext();let i=o||{};if(n){const h=await this._getAccessTokenRaw();if(!h)throw new Error("Not authenticated. Please log in first.");i={...i,Authorization:`Bearer ${h}`}}const l=this.bodhiext.sendStreamRequest(e,t,r,i).getReader();try{for(;;){const{value:h,done:d}=await l.read();if(d||h!=null&&h.done)break;yield h.body}}catch(h){if(h instanceof Error){if("response"in h){const d=h;throw s.createApiError(h.message,d.response.status,d.response.body)}throw"error"in h,s.createOperationError(h.message,"extension_error")}throw h}finally{l.releaseLock()}}async*streamChat(e,t,r=!0){yield*this.stream("POST","/v1/chat/completions",{model:e,messages:[{role:"user",content:t}],stream:!0},void 0,r)}serialize(){return{extensionId:this.state.type==="extension"&&this.state.extension==="ready"?this.state.extensionId:void 0}}async debug(){return{type:"WindowBodhiextClient",state:this.state,authState:await this.getAuthState(),bodhiextAvailable:this.bodhiext!==null,authClientId:this.authClientId,authServerUrl:this.config.authServerUrl,redirectUri:this.config.redirectUri,userScope:this.config.userScope}}}class m extends s.BaseFacadeClient{constructor(e,t,r,o){const n={redirectUri:t.redirectUri,authServerUrl:t.authServerUrl||"https://id.getbodhi.app/realms/bodhi",userScope:t.userScope||"scope_user_user",logLevel:t.logLevel||"warn",initParams:t.initParams};super(e,n,r,o)}createLogger(e){return new s.Logger("WebUIClient",e.logLevel)}createExtClient(e,t){return new p(this.authClientId,e,t)}createDirectClient(e,t,r){return new S({authClientId:e,authServerUrl:t.authServerUrl,redirectUri:t.redirectUri,userScope:t.userScope,logLevel:t.logLevel,storagePrefix:s.STORAGE_PREFIXES.WEB},r)}async handleOAuthCallback(e,t){return this.connectionMode==="direct"?this.directClient.handleOAuthCallback(e,t):this.extClient.handleOAuthCallback(e,t)}}exports.WebUIClient=m;