@bodhiapp/bodhi-js 0.0.3 → 0.0.4

package/dist/bodhi-js-sdk/core/src/build-info.d.ts

@@ -0,0 +1 @@
+export declare const BUILD_MODE: string;

package/dist/bodhi-js-sdk/core/src/facade-client-base.d.ts

@@ -20,7 +20,7 @@ export declare abstract class BaseFacadeClient<TConfig, TExtClient extends IConn
     protected authClientId: string;
     protected config: TConfig;
     protected onStateChange: StateChangeCallback;
-    constructor(authClientId: string, config: TConfig, onStateChange?: StateChangeCallback, storagePrefix?: string);
+    constructor(authClientId: string, config: TConfig, onStateChange?: StateChangeCallback, storagePrefix?: string, basePath?: string);
     /**
      * Create logger instance
      * Subclasses extract logLevel from their specific config type

package/dist/bodhi-js-sdk/core/src/index.d.ts

@@ -17,3 +17,4 @@ export * from './oauth';
 export * from './direct-client-base';
 export * from './facade-client-base';
 export { isOperationError, type OperationError } from '../../../bodhi-browser-ext/src/types';
+export { BUILD_MODE as CORE_BUILD_MODE } from './build-info';

package/dist/bodhi-js-sdk/core/src/storage.d.ts

@@ -27,6 +27,18 @@ export declare const STORAGE_PREFIXES: {
     readonly WEB: "bodhi:web";
     readonly EXT: "bodhi:ext";
 };
+/**
+ * Create storage prefix with basePath for path isolation
+ *
+ * @param basePath - Base path of app (e.g., '/', '/app1/')
+ * @param prefix - Storage prefix (e.g., 'bodhi:web', 'bodhijs:')
+ * @returns Combined prefix with basePath isolation
+ *
+ * Examples:
+ * - createStoragePrefixWithBasePath('/', 'bodhi:web') => '/:bodhi:web'
+ * - createStoragePrefixWithBasePath('/app1/', 'bodhi:web') => '/app1/:bodhi:web'
+ */
+export declare function createStoragePrefixWithBasePath(basePath: string, prefix: string): string;
 /**
  * User Preferences Storage Manager
  *

package/dist/bodhi-js-sdk/web/src/build-info.d.ts

@@ -0,0 +1 @@
+export declare const BUILD_MODE: string;

package/dist/bodhi-js-sdk/web/src/constants.d.ts

@@ -1,9 +1,20 @@
-/**
- * Constants for web2ext communication
- */
+import { StorageKeys } from '../../core/src/index.ts';
+
 export declare const POLL_INTERVAL = 500;
 export declare const POLL_TIMEOUT = 5000;
 /**
  * LocalStorage keys for OAuth tokens and PKCE flow (namespaced with 'bodhi:web' prefix)
+ * @deprecated Use createWebStorageKeys(basePath) instead for basePath-aware keys
+ */
+export declare const STORAGE_KEYS: StorageKeys;
+/**
+ * Create storage keys for web mode with optional basePath isolation
+ *
+ * @param basePath - Base path of app (e.g., '/', '/app1/'), defaults to '/'
+ * @returns Storage keys with basePath-aware prefix
+ *
+ * Examples:
+ * - createWebStorageKeys('/') => keys with 'bodhi:web:' prefix
+ * - createWebStorageKeys('/app1/') => keys with '/app1/:bodhi:web:' prefix
  */
-export declare const STORAGE_KEYS: import('../../core/src/index.ts').StorageKeys;
+export declare function createWebStorageKeys(basePath?: string): StorageKeys;

package/dist/bodhi-js-sdk/web/src/direct-client.d.ts

@@ -5,6 +5,7 @@ import { DirectClientBase, AuthLoggedIn, AuthLoggedOut, DirectClientBaseConfig,
  */
 export interface DirectWebClientConfig extends DirectClientBaseConfig {
     redirectUri: string;
+    basePath?: string;
 }
 /**
  * DirectWebClient - Web mode implementation using browser redirect OAuth

package/dist/bodhi-js-sdk/web/src/ext-client.d.ts

@@ -23,7 +23,8 @@ export declare class WindowBodhiextClient implements IExtensionClient {
     private authEndpoints;
     private onStateChange;
     private refreshPromise;
-    constructor(authClientId: string, config: WebClientConfig, onStateChange?: StateChangeCallback);
+    private storageKeys;
+    constructor(authClientId: string, config: WebClientConfig, onStateChange?: StateChangeCallback, basePath?: string);
     /**
      * Set client state and notify callback
      */

package/dist/bodhi-js-sdk/web/src/facade-client.d.ts

@@ -9,6 +9,7 @@ export interface WebClientConfig {
     authServerUrl: string;
     redirectUri: string;
     userScope: UserScope;
+    basePath?: string;
     logLevel: LogLevel;
     initParams?: {
         extension?: {
@@ -28,6 +29,7 @@ export declare class WebUIClient extends BaseFacadeClient<WebClientConfig, Windo
         redirectUri: string;
         authServerUrl?: string;
         userScope?: UserScope;
+        basePath?: string;
         logLevel?: LogLevel;
         initParams?: {
             extension?: {

package/dist/bodhi-js-sdk/web/src/index.d.ts

@@ -3,3 +3,4 @@ import { IWebUIClient } from './interface';
 
 export { WebUIClient } from './facade-client';
 export type { IWebUIClient, SerializedWebExtensionState };
+export { BUILD_MODE as WEB_BUILD_MODE } from './build-info';

package/dist/bodhi-web.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const s=require("@bodhiapp/bodhi-js-core");class S extends s.DirectClientBase{constructor(e,t){super({...e,storagePrefix:s.STORAGE_PREFIXES.DIRECT},"DirectWebClient",t),this.redirectUri=e.redirectUri}async login(){const e=await this.getAuthState();if(e.isLoggedIn)return e;const t=await this.requestResourceAccess(),r=`openid profile email roles ${this.userScope} ${t}`,o=s.generateCodeVerifier(),n=await s.generateCodeChallenge(o),i=s.generateCodeVerifier();localStorage.setItem(this.storageKeys.CODE_VERIFIER,o),localStorage.setItem(this.storageKeys.STATE,i);const c=new URL(this.authEndpoints.authorize);throw c.searchParams.set("client_id",this.authClientId),c.searchParams.set("response_type","code"),c.searchParams.set("redirect_uri",this.redirectUri),c.searchParams.set("scope",r),c.searchParams.set("code_challenge",n),c.searchParams.set("code_challenge_method","S256"),c.searchParams.set("state",i),window.location.href=c.toString(),new Error("Redirect initiated")}async handleOAuthCallback(e,t){const r=localStorage.getItem(this.storageKeys.STATE);if(!r||r!==t)throw new Error("Invalid state parameter - possible CSRF attack");await this.exchangeCodeForTokens(e),localStorage.removeItem(this.storageKeys.CODE_VERIFIER),localStorage.removeItem(this.storageKeys.STATE);const o=await this.getAuthState();if(!o.isLoggedIn)throw new Error("Login failed");const n=o;return this.setAuthState(n),n}async logout(){const e=localStorage.getItem(this.storageKeys.REFRESH_TOKEN);if(e)try{const r=new URLSearchParams({token:e,client_id:this.authClientId,token_type_hint:"refresh_token"});await fetch(this.authEndpoints.revoke,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r})}catch(r){this.logger.warn("Token revocation failed:",r)}localStorage.removeItem(this.storageKeys.ACCESS_TOKEN),localStorage.removeItem(this.storageKeys.REFRESH_TOKEN),localStorage.removeItem(this.storageKeys.EXPIRES_AT),localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);const t={isLoggedIn:!1};return this.setAuthState(t),t}async requestResourceAccess(){const e=await this.sendApiRequest("POST","/bodhi/v1/apps/request-access",{app_client_id:this.authClientId},{},!1);if(s.isApiResultOperationError(e))throw new Error("Failed to get resource access scope from server");if(!s.isApiResultSuccess(e))throw new Error("Failed to get resource access scope from server: API error");const t=e.body.scope;return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE,t),t}async exchangeCodeForTokens(e){const t=localStorage.getItem(this.storageKeys.CODE_VERIFIER);if(!t)throw new Error("Code verifier not found");const r=await fetch(this.authEndpoints.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:e,redirect_uri:this.redirectUri,client_id:this.authClientId,code_verifier:t})});if(!r.ok){const n=await r.text();throw new Error(`Token exchange failed: ${r.status} ${n}`)}const o=await r.json();if(localStorage.setItem(this.storageKeys.ACCESS_TOKEN,o.access_token),o.refresh_token&&localStorage.setItem(this.storageKeys.REFRESH_TOKEN,o.refresh_token),o.expires_in){const n=Date.now()+o.expires_in*1e3;localStorage.setItem(this.storageKeys.EXPIRES_AT,n.toString())}}async _storageGet(e){return localStorage.getItem(e)}async _storageSet(e){Object.entries(e).forEach(([t,r])=>{localStorage.setItem(t,String(r))})}async _storageRemove(e){e.forEach(t=>localStorage.removeItem(t))}_getRedirectUri(){return this.redirectUri}}const f=500,_=5e3,a=s.createStorageKeys(s.STORAGE_PREFIXES.WEB);class p{constructor(e,t,r){this.state=s.EXTENSION_STATE_NOT_INITIALIZED,this.bodhiext=null,this.refreshPromise=null,this.logger=new s.Logger("WindowBodhiextClient",t.logLevel),this.authClientId=e,this.config=t,this.authEndpoints=s.createOAuthEndpoints(this.config.authServerUrl),this.onStateChange=r??s.NOOP_STATE_CALLBACK}setState(e){this.state=e,this.logger.info(`{state: ${JSON.stringify(e)}} - Setting client state`),this.onStateChange({type:"client-state",state:e})}setAuthState(e){this.onStateChange({type:"auth-state",state:e})}setStateCallback(e){this.onStateChange=e}ensureBodhiext(){if(!this.bodhiext&&window.bodhiext&&(this.logger.info("Acquiring window.bodhiext reference"),this.bodhiext=window.bodhiext),!this.bodhiext)throw new Error("Client not initialized")}async sendExtRequest(e,t){return this.ensureBodhiext(),this.bodhiext.sendExtRequest(e,t)}async sendApiRequest(e,t,r,o,n){try{this.ensureBodhiext()}catch(i){return{error:{message:i instanceof Error?i.message:String(i),type:"extension_error"}}}try{let i=o||{};if(n){const l=await this._getAccessTokenRaw();if(!l)return{error:{message:"Not authenticated. Please log in first.",type:"extension_error"}};i={...i,Authorization:`Bearer ${l}`}}return await this.bodhiext.sendApiRequest(e,t,r,i)}catch(i){const c=i==null?void 0:i.error,l=(c==null?void 0:c.message)??(i instanceof Error?i.message:String(i)),h=(c==null?void 0:c.type)||"extension_error";return{error:{message:l,type:h}}}}getState(){return this.state}isClientInitialized(){return this.state.extension==="ready"}isServerReady(){return this.isClientInitialized()&&this.state.server.status==="ready"}async init(e={}){var o,n,i,c;if(!e.testConnection&&!e.selectedConnection)return this.logger.info("No testConnection or selectedConnection, returning not-initialized state"),s.EXTENSION_STATE_NOT_INITIALIZED;if(this.bodhiext&&!e.testConnection)return this.logger.debug("Already have bodhiext handle, skipping polling"),this.state;if(!this.bodhiext){const l=e.timeoutMs??((n=(o=this.config.initParams)==null?void 0:o.extension)==null?void 0:n.timeoutMs)??_,h=e.intervalMs??((c=(i=this.config.initParams)==null?void 0:i.extension)==null?void 0:c.intervalMs)??f,d=Date.now();if(!await new Promise(u=>{const E=()=>{if(window.bodhiext){this.bodhiext=window.bodhiext,u(!0);return}if(Date.now()-d>=l){u(!1);return}setTimeout(E,h)};E()}))return this.logger.warn("Extension discovery timed out"),this.setState(s.EXTENSION_STATE_NOT_FOUND),this.state}const t=await this.bodhiext.getExtensionId();this.logger.info(`Extension discovered: ${t}`);const r={type:"extension",extension:"ready",extensionId:t,server:s.PENDING_EXTENSION_READY};if(e.testConnection)try{const l=await this.getServerState();this.setState({...r,server:l}),this.logger.info(`Server connectivity tested: ${l.status}`)}catch(l){this.logger.error("Failed to get server state:",l),this.setState({...r,server:s.BACKEND_SERVER_NOT_REACHABLE})}else this.setState(r);return this.state}async requestResourceAccess(){this.ensureBodhiext();const e=await this.bodhiext.sendApiRequest("POST","/bodhi/v1/apps/request-access",{app_client_id:this.authClientId});if(!s.isApiResultSuccess(e))throw new Error("Failed to get resource access scope: API error");const t=e.body.scope;return localStorage.setItem(a.RESOURCE_SCOPE,t),t}async login(){const e=await this.getAuthState();if(e.isLoggedIn)return e;this.ensureBodhiext();const t=await this.requestResourceAccess(),r=s.generateCodeVerifier(),o=await s.generateCodeChallenge(r),n=s.generateCodeVerifier();localStorage.setItem(a.CODE_VERIFIER,r),localStorage.setItem(a.STATE,n);const i=["openid","profile","email","roles",this.config.userScope,t],c=new URLSearchParams({response_type:"code",client_id:this.authClientId,redirect_uri:this.config.redirectUri,scope:i.join(" "),state:n,code_challenge:o,code_challenge_method:"S256"}),l=`${this.authEndpoints.authorize}?${c}`;return window.location.href=l,new Promise(()=>{})}async handleOAuthCallback(e,t){const r=localStorage.getItem(a.STATE);if(!r||r!==t)throw new Error("Invalid state parameter - possible CSRF attack");await this.exchangeCodeForTokens(e),localStorage.removeItem(a.CODE_VERIFIER),localStorage.removeItem(a.STATE);const o=await this.getAuthState();if(!o.isLoggedIn)throw new Error("Login failed");return this.setAuthState(o),o}async exchangeCodeForTokens(e){const t=localStorage.getItem(a.CODE_VERIFIER);if(!t)throw new Error("Code verifier not found");const r=new URLSearchParams({grant_type:"authorization_code",client_id:this.authClientId,code:e,redirect_uri:this.config.redirectUri,code_verifier:t}),o=await fetch(this.authEndpoints.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r});if(!o.ok){const i=await o.text();throw new Error(`Token exchange failed: ${o.status} ${i}`)}const n=await o.json();if(!n.access_token)throw new Error("No access token received");if(localStorage.setItem(a.ACCESS_TOKEN,n.access_token),n.refresh_token&&localStorage.setItem(a.REFRESH_TOKEN,n.refresh_token),n.expires_in){const i=Date.now()+n.expires_in*1e3;localStorage.setItem(a.EXPIRES_AT,i.toString())}}async logout(){const e=localStorage.getItem(a.REFRESH_TOKEN);if(e)try{const r=new URLSearchParams({token:e,client_id:this.authClientId,token_type_hint:"refresh_token"});await fetch(this.authEndpoints.revoke,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r})}catch(r){this.logger.warn("Token revocation failed:",r)}localStorage.removeItem(a.ACCESS_TOKEN),localStorage.removeItem(a.REFRESH_TOKEN),localStorage.removeItem(a.EXPIRES_AT),localStorage.removeItem(a.CODE_VERIFIER),localStorage.removeItem(a.STATE),localStorage.removeItem(a.RESOURCE_SCOPE);const t={isLoggedIn:!1};return this.setAuthState(t),t}async getAuthState(){const e=await this._getAccessTokenRaw();if(!e)return{isLoggedIn:!1};try{return{isLoggedIn:!0,userInfo:s.extractUserInfo(e),accessToken:e}}catch(t){return this.logger.error("Failed to parse token:",t),{isLoggedIn:!1}}}async _getAccessTokenRaw(){const e=localStorage.getItem(a.ACCESS_TOKEN),t=localStorage.getItem(a.EXPIRES_AT);if(!e)return null;if(t){const r=parseInt(t,10);if(Date.now()>=r-5*1e3){const o=localStorage.getItem(a.REFRESH_TOKEN);return o?this._tryRefreshToken(o):null}}return e}async _tryRefreshToken(e){if(this.refreshPromise)return this.logger.debug("Refresh already in progress, returning existing promise"),this.refreshPromise;this.refreshPromise=this._doRefreshToken(e);try{return await this.refreshPromise}finally{this.refreshPromise=null}}async _doRefreshToken(e){this.logger.debug("Refreshing access token");try{const t=await s.refreshAccessToken(this.authEndpoints.token,e,this.authClientId);if(t){this._storeRefreshedTokens(t);const r=s.extractUserInfo(t.access_token);return this.setAuthState({isLoggedIn:!0,userInfo:r,accessToken:t.access_token}),this.logger.info("Token refreshed successfully"),t.access_token}}catch(t){this.logger.warn("Token refresh failed:",t)}throw this.logger.warn("Token refresh failed, keeping tokens for manual retry"),s.createOperationError("Access token expired and unable to refresh. Try logging out and logging in again.","token_refresh_failed")}_storeRefreshedTokens(e){const t=Date.now()+e.expires_in*1e3;localStorage.setItem(a.ACCESS_TOKEN,e.access_token),localStorage.setItem(a.EXPIRES_AT,String(t)),e.refresh_token&&localStorage.setItem(a.REFRESH_TOKEN,e.refresh_token)}async pingApi(){return this.sendApiRequest("GET","/ping")}async fetchModels(){return this.sendApiRequest("GET","/v1/models",void 0,void 0,!0)}async getServerState(){const e=await this.sendApiRequest("GET","/bodhi/v1/info");if(s.isApiResultOperationError(e)||!s.isApiResultSuccess(e))return s.BACKEND_SERVER_NOT_REACHABLE;const t=e.body;switch(t.status){case"ready":return{status:"ready",version:t.version||"unknown"};case"setup":return s.backendServerNotReady("setup",t.version||"unknown");case"resource-admin":return s.backendServerNotReady("resource-admin",t.version||"unknown");case"error":return s.backendServerNotReady("error",t.version||"unknown",t.error?{message:t.error.message,type:t.error.type}:s.SERVER_ERROR_CODES.SERVER_NOT_READY);default:return s.BACKEND_SERVER_NOT_REACHABLE}}async*stream(e,t,r,o,n=!0){this.ensureBodhiext();let i=o||{};if(n){const h=await this._getAccessTokenRaw();if(!h)throw new Error("Not authenticated. Please log in first.");i={...i,Authorization:`Bearer ${h}`}}const l=this.bodhiext.sendStreamRequest(e,t,r,i).getReader();try{for(;;){const{value:h,done:d}=await l.read();if(d||h!=null&&h.done)break;yield h.body}}catch(h){if(h instanceof Error){if("response"in h){const d=h;throw s.createApiError(h.message,d.response.status,d.response.body)}throw"error"in h,s.createOperationError(h.message,"extension_error")}throw h}finally{l.releaseLock()}}async*streamChat(e,t,r=!0){yield*this.stream("POST","/v1/chat/completions",{model:e,messages:[{role:"user",content:t}],stream:!0},void 0,r)}serialize(){return{extensionId:this.state.type==="extension"&&this.state.extension==="ready"?this.state.extensionId:void 0}}async debug(){return{type:"WindowBodhiextClient",state:this.state,authState:await this.getAuthState(),bodhiextAvailable:this.bodhiext!==null,authClientId:this.authClientId,authServerUrl:this.config.authServerUrl,redirectUri:this.config.redirectUri,userScope:this.config.userScope}}}class m extends s.BaseFacadeClient{constructor(e,t,r,o){const n={redirectUri:t.redirectUri,authServerUrl:t.authServerUrl||"https://id.getbodhi.app/realms/bodhi",userScope:t.userScope||"scope_user_user",logLevel:t.logLevel||"warn",initParams:t.initParams};super(e,n,r,o)}createLogger(e){return new s.Logger("WebUIClient",e.logLevel)}createExtClient(e,t){return new p(this.authClientId,e,t)}createDirectClient(e,t,r){return new S({authClientId:e,authServerUrl:t.authServerUrl,redirectUri:t.redirectUri,userScope:t.userScope,logLevel:t.logLevel,storagePrefix:s.STORAGE_PREFIXES.WEB},r)}async handleOAuthCallback(e,t){return this.connectionMode==="direct"?this.directClient.handleOAuthCallback(e,t):this.extClient.handleOAuthCallback(e,t)}}exports.WebUIClient=m;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const s=require("@bodhiapp/bodhi-js-core");class E extends s.DirectClientBase{constructor(e,t){const r=e.basePath||"/",o=s.createStoragePrefixWithBasePath(r,s.STORAGE_PREFIXES.DIRECT);super({...e,storagePrefix:o},"DirectWebClient",t),this.redirectUri=e.redirectUri}async login(){const e=await this.getAuthState();if(e.isLoggedIn)return e;const t=await this.requestResourceAccess(),r=`openid profile email roles ${this.userScope} ${t}`,o=s.generateCodeVerifier(),a=await s.generateCodeChallenge(o),i=s.generateCodeVerifier();localStorage.setItem(this.storageKeys.CODE_VERIFIER,o),localStorage.setItem(this.storageKeys.STATE,i);const n=new URL(this.authEndpoints.authorize);throw n.searchParams.set("client_id",this.authClientId),n.searchParams.set("response_type","code"),n.searchParams.set("redirect_uri",this.redirectUri),n.searchParams.set("scope",r),n.searchParams.set("code_challenge",a),n.searchParams.set("code_challenge_method","S256"),n.searchParams.set("state",i),window.location.href=n.toString(),new Error("Redirect initiated")}async handleOAuthCallback(e,t){const r=localStorage.getItem(this.storageKeys.STATE);if(!r||r!==t)throw new Error("Invalid state parameter - possible CSRF attack");await this.exchangeCodeForTokens(e),localStorage.removeItem(this.storageKeys.CODE_VERIFIER),localStorage.removeItem(this.storageKeys.STATE);const o=await this.getAuthState();if(!o.isLoggedIn)throw new Error("Login failed");const a=o;return this.setAuthState(a),a}async logout(){const e=localStorage.getItem(this.storageKeys.REFRESH_TOKEN);if(e)try{const r=new URLSearchParams({token:e,client_id:this.authClientId,token_type_hint:"refresh_token"});await fetch(this.authEndpoints.revoke,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r})}catch(r){this.logger.warn("Token revocation failed:",r)}localStorage.removeItem(this.storageKeys.ACCESS_TOKEN),localStorage.removeItem(this.storageKeys.REFRESH_TOKEN),localStorage.removeItem(this.storageKeys.EXPIRES_AT),localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);const t={isLoggedIn:!1};return this.setAuthState(t),t}async requestResourceAccess(){const e=await this.sendApiRequest("POST","/bodhi/v1/apps/request-access",{app_client_id:this.authClientId},{},!1);if(s.isApiResultOperationError(e))throw new Error("Failed to get resource access scope from server");if(!s.isApiResultSuccess(e))throw new Error("Failed to get resource access scope from server: API error");const t=e.body.scope;return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE,t),t}async exchangeCodeForTokens(e){const t=localStorage.getItem(this.storageKeys.CODE_VERIFIER);if(!t)throw new Error("Code verifier not found");const r=await fetch(this.authEndpoints.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:e,redirect_uri:this.redirectUri,client_id:this.authClientId,code_verifier:t})});if(!r.ok){const a=await r.text();throw new Error(`Token exchange failed: ${r.status} ${a}`)}const o=await r.json();if(localStorage.setItem(this.storageKeys.ACCESS_TOKEN,o.access_token),o.refresh_token&&localStorage.setItem(this.storageKeys.REFRESH_TOKEN,o.refresh_token),o.expires_in){const a=Date.now()+o.expires_in*1e3;localStorage.setItem(this.storageKeys.EXPIRES_AT,a.toString())}}async _storageGet(e){return localStorage.getItem(e)}async _storageSet(e){Object.entries(e).forEach(([t,r])=>{localStorage.setItem(t,String(r))})}async _storageRemove(e){e.forEach(t=>localStorage.removeItem(t))}_getRedirectUri(){return this.redirectUri}}const S=500,f=5e3;s.createStorageKeys(s.STORAGE_PREFIXES.WEB);function _(d="/"){const e=s.createStoragePrefixWithBasePath(d,s.STORAGE_PREFIXES.WEB);return s.createStorageKeys(e)}class p{constructor(e,t,r,o){this.state=s.EXTENSION_STATE_NOT_INITIALIZED,this.bodhiext=null,this.refreshPromise=null,this.logger=new s.Logger("WindowBodhiextClient",t.logLevel),this.authClientId=e,this.config=t,this.authEndpoints=s.createOAuthEndpoints(this.config.authServerUrl),this.onStateChange=r??s.NOOP_STATE_CALLBACK,this.storageKeys=_(o||"/")}setState(e){this.state=e,this.logger.info(`{state: ${JSON.stringify(e)}} - Setting client state`),this.onStateChange({type:"client-state",state:e})}setAuthState(e){this.onStateChange({type:"auth-state",state:e})}setStateCallback(e){this.onStateChange=e}ensureBodhiext(){if(!this.bodhiext&&window.bodhiext&&(this.logger.info("Acquiring window.bodhiext reference"),this.bodhiext=window.bodhiext),!this.bodhiext)throw new Error("Client not initialized")}async sendExtRequest(e,t){return this.ensureBodhiext(),this.bodhiext.sendExtRequest(e,t)}async sendApiRequest(e,t,r,o,a){try{this.ensureBodhiext()}catch(i){return{error:{message:i instanceof Error?i.message:String(i),type:"extension_error"}}}try{let i=o||{};if(a){const h=await this._getAccessTokenRaw();if(!h)return{error:{message:"Not authenticated. Please log in first.",type:"extension_error"}};i={...i,Authorization:`Bearer ${h}`}}return await this.bodhiext.sendApiRequest(e,t,r,i)}catch(i){const n=i==null?void 0:i.error,h=(n==null?void 0:n.message)??(i instanceof Error?i.message:String(i)),c=(n==null?void 0:n.type)||"extension_error";return{error:{message:h,type:c}}}}getState(){return this.state}isClientInitialized(){return this.state.extension==="ready"}isServerReady(){return this.isClientInitialized()&&this.state.server.status==="ready"}async init(e={}){var o,a,i,n;if(!e.testConnection&&!e.selectedConnection)return this.logger.info("No testConnection or selectedConnection, returning not-initialized state"),s.EXTENSION_STATE_NOT_INITIALIZED;if(this.bodhiext&&!e.testConnection)return this.logger.debug("Already have bodhiext handle, skipping polling"),this.state;if(!this.bodhiext){const h=e.timeoutMs??((a=(o=this.config.initParams)==null?void 0:o.extension)==null?void 0:a.timeoutMs)??f,c=e.intervalMs??((n=(i=this.config.initParams)==null?void 0:i.extension)==null?void 0:n.intervalMs)??S,l=Date.now();if(!await new Promise(g=>{const u=()=>{if(window.bodhiext){this.bodhiext=window.bodhiext,g(!0);return}if(Date.now()-l>=h){g(!1);return}setTimeout(u,c)};u()}))return this.logger.warn("Extension discovery timed out"),this.setState(s.EXTENSION_STATE_NOT_FOUND),this.state}const t=await this.bodhiext.getExtensionId();this.logger.info(`Extension discovered: ${t}`);const r={type:"extension",extension:"ready",extensionId:t,server:s.PENDING_EXTENSION_READY};if(e.testConnection)try{const h=await this.getServerState();this.setState({...r,server:h}),this.logger.info(`Server connectivity tested: ${h.status}`)}catch(h){this.logger.error("Failed to get server state:",h),this.setState({...r,server:s.BACKEND_SERVER_NOT_REACHABLE})}else this.setState(r);return this.state}async requestResourceAccess(){this.ensureBodhiext();const e=await this.bodhiext.sendApiRequest("POST","/bodhi/v1/apps/request-access",{app_client_id:this.authClientId});if(!s.isApiResultSuccess(e))throw new Error("Failed to get resource access scope: API error");const t=e.body.scope;return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE,t),t}async login(){const e=await this.getAuthState();if(e.isLoggedIn)return e;this.ensureBodhiext();const t=await this.requestResourceAccess(),r=s.generateCodeVerifier(),o=await s.generateCodeChallenge(r),a=s.generateCodeVerifier();localStorage.setItem(this.storageKeys.CODE_VERIFIER,r),localStorage.setItem(this.storageKeys.STATE,a);const i=["openid","profile","email","roles",this.config.userScope,t],n=new URLSearchParams({response_type:"code",client_id:this.authClientId,redirect_uri:this.config.redirectUri,scope:i.join(" "),state:a,code_challenge:o,code_challenge_method:"S256"}),h=`${this.authEndpoints.authorize}?${n}`;return window.location.href=h,new Promise(()=>{})}async handleOAuthCallback(e,t){const r=localStorage.getItem(this.storageKeys.STATE);if(!r||r!==t)throw new Error("Invalid state parameter - possible CSRF attack");await this.exchangeCodeForTokens(e),localStorage.removeItem(this.storageKeys.CODE_VERIFIER),localStorage.removeItem(this.storageKeys.STATE);const o=await this.getAuthState();if(!o.isLoggedIn)throw new Error("Login failed");return this.setAuthState(o),o}async exchangeCodeForTokens(e){const t=localStorage.getItem(this.storageKeys.CODE_VERIFIER);if(!t)throw new Error("Code verifier not found");const r=new URLSearchParams({grant_type:"authorization_code",client_id:this.authClientId,code:e,redirect_uri:this.config.redirectUri,code_verifier:t}),o=await fetch(this.authEndpoints.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r});if(!o.ok){const i=await o.text();throw new Error(`Token exchange failed: ${o.status} ${i}`)}const a=await o.json();if(!a.access_token)throw new Error("No access token received");if(localStorage.setItem(this.storageKeys.ACCESS_TOKEN,a.access_token),a.refresh_token&&localStorage.setItem(this.storageKeys.REFRESH_TOKEN,a.refresh_token),a.expires_in){const i=Date.now()+a.expires_in*1e3;localStorage.setItem(this.storageKeys.EXPIRES_AT,i.toString())}}async logout(){const e=localStorage.getItem(this.storageKeys.REFRESH_TOKEN);if(e)try{const r=new URLSearchParams({token:e,client_id:this.authClientId,token_type_hint:"refresh_token"});await fetch(this.authEndpoints.revoke,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r})}catch(r){this.logger.warn("Token revocation failed:",r)}localStorage.removeItem(this.storageKeys.ACCESS_TOKEN),localStorage.removeItem(this.storageKeys.REFRESH_TOKEN),localStorage.removeItem(this.storageKeys.EXPIRES_AT),localStorage.removeItem(this.storageKeys.CODE_VERIFIER),localStorage.removeItem(this.storageKeys.STATE),localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);const t={isLoggedIn:!1};return this.setAuthState(t),t}async getAuthState(){const e=await this._getAccessTokenRaw();if(!e)return{isLoggedIn:!1};try{return{isLoggedIn:!0,userInfo:s.extractUserInfo(e),accessToken:e}}catch(t){return this.logger.error("Failed to parse token:",t),{isLoggedIn:!1}}}async _getAccessTokenRaw(){const e=localStorage.getItem(this.storageKeys.ACCESS_TOKEN),t=localStorage.getItem(this.storageKeys.EXPIRES_AT);if(!e)return null;if(t){const r=parseInt(t,10);if(Date.now()>=r-5*1e3){const o=localStorage.getItem(this.storageKeys.REFRESH_TOKEN);return o?this._tryRefreshToken(o):null}}return e}async _tryRefreshToken(e){if(this.refreshPromise)return this.logger.debug("Refresh already in progress, returning existing promise"),this.refreshPromise;this.refreshPromise=this._doRefreshToken(e);try{return await this.refreshPromise}finally{this.refreshPromise=null}}async _doRefreshToken(e){this.logger.debug("Refreshing access token");try{const t=await s.refreshAccessToken(this.authEndpoints.token,e,this.authClientId);if(t){this._storeRefreshedTokens(t);const r=s.extractUserInfo(t.access_token);return this.setAuthState({isLoggedIn:!0,userInfo:r,accessToken:t.access_token}),this.logger.info("Token refreshed successfully"),t.access_token}}catch(t){this.logger.warn("Token refresh failed:",t)}throw this.logger.warn("Token refresh failed, keeping tokens for manual retry"),s.createOperationError("Access token expired and unable to refresh. Try logging out and logging in again.","token_refresh_failed")}_storeRefreshedTokens(e){const t=Date.now()+e.expires_in*1e3;localStorage.setItem(this.storageKeys.ACCESS_TOKEN,e.access_token),localStorage.setItem(this.storageKeys.EXPIRES_AT,String(t)),e.refresh_token&&localStorage.setItem(this.storageKeys.REFRESH_TOKEN,e.refresh_token)}async pingApi(){return this.sendApiRequest("GET","/ping")}async fetchModels(){return this.sendApiRequest("GET","/v1/models",void 0,void 0,!0)}async getServerState(){const e=await this.sendApiRequest("GET","/bodhi/v1/info");if(s.isApiResultOperationError(e)||!s.isApiResultSuccess(e))return s.BACKEND_SERVER_NOT_REACHABLE;const t=e.body;switch(t.status){case"ready":return{status:"ready",version:t.version||"unknown"};case"setup":return s.backendServerNotReady("setup",t.version||"unknown");case"resource-admin":return s.backendServerNotReady("resource-admin",t.version||"unknown");case"error":return s.backendServerNotReady("error",t.version||"unknown",t.error?{message:t.error.message,type:t.error.type}:s.SERVER_ERROR_CODES.SERVER_NOT_READY);default:return s.BACKEND_SERVER_NOT_REACHABLE}}async*stream(e,t,r,o,a=!0){this.ensureBodhiext();let i=o||{};if(a){const c=await this._getAccessTokenRaw();if(!c)throw new Error("Not authenticated. Please log in first.");i={...i,Authorization:`Bearer ${c}`}}const h=this.bodhiext.sendStreamRequest(e,t,r,i).getReader();try{for(;;){const{value:c,done:l}=await h.read();if(l||c!=null&&c.done)break;yield c.body}}catch(c){if(c instanceof Error){if("response"in c){const l=c;throw s.createApiError(c.message,l.response.status,l.response.body)}throw"error"in c,s.createOperationError(c.message,"extension_error")}throw c}finally{h.releaseLock()}}async*streamChat(e,t,r=!0){yield*this.stream("POST","/v1/chat/completions",{model:e,messages:[{role:"user",content:t}],stream:!0},void 0,r)}serialize(){return{extensionId:this.state.type==="extension"&&this.state.extension==="ready"?this.state.extensionId:void 0}}async debug(){return{type:"WindowBodhiextClient",state:this.state,authState:await this.getAuthState(),bodhiextAvailable:this.bodhiext!==null,authClientId:this.authClientId,authServerUrl:this.config.authServerUrl,redirectUri:this.config.redirectUri,userScope:this.config.userScope}}}class y extends s.BaseFacadeClient{constructor(e,t,r,o){const a={redirectUri:t.redirectUri,authServerUrl:t.authServerUrl||"https://id.getbodhi.app/realms/bodhi",userScope:t.userScope||"scope_user_user",basePath:t.basePath||"/",logLevel:t.logLevel||"warn",initParams:t.initParams};super(e,a,r,o,t.basePath)}createLogger(e){return new s.Logger("WebUIClient",e.logLevel)}createExtClient(e,t){return new p(this.authClientId,e,t,e.basePath)}createDirectClient(e,t,r){return new E({authClientId:e,authServerUrl:t.authServerUrl,redirectUri:t.redirectUri,userScope:t.userScope,logLevel:t.logLevel,storagePrefix:s.STORAGE_PREFIXES.WEB,basePath:t.basePath},r)}async handleOAuthCallback(e,t){return this.connectionMode==="direct"?this.directClient.handleOAuthCallback(e,t):this.extClient.handleOAuthCallback(e,t)}}const m="production";exports.WEB_BUILD_MODE=m;exports.WebUIClient=y;

package/dist/bodhi-web.esm.js

@@ -1,7 +1,8 @@
-import { DirectClientBase as C, STORAGE_PREFIXES as f, generateCodeVerifier as g, generateCodeChallenge as y, isApiResultOperationError as T, isApiResultSuccess as E, createStorageKeys as x, EXTENSION_STATE_NOT_INITIALIZED as _, Logger as R, createOAuthEndpoints as A, NOOP_STATE_CALLBACK as k, EXTENSION_STATE_NOT_FOUND as v, PENDING_EXTENSION_READY as O, BACKEND_SERVER_NOT_REACHABLE as d, extractUserInfo as I, refreshAccessToken as b, createOperationError as u, backendServerNotReady as S, SERVER_ERROR_CODES as P, createApiError as U, BaseFacadeClient as N } from "@bodhiapp/bodhi-js-core";
-class L extends C {
+import { DirectClientBase as x, createStoragePrefixWithBasePath as w, STORAGE_PREFIXES as u, generateCodeVerifier as g, generateCodeChallenge as I, isApiResultOperationError as T, isApiResultSuccess as f, createStorageKeys as R, EXTENSION_STATE_NOT_INITIALIZED as y, Logger as C, createOAuthEndpoints as A, NOOP_STATE_CALLBACK as k, EXTENSION_STATE_NOT_FOUND as v, PENDING_EXTENSION_READY as b, BACKEND_SERVER_NOT_REACHABLE as d, extractUserInfo as _, refreshAccessToken as P, createOperationError as S, backendServerNotReady as E, SERVER_ERROR_CODES as O, createApiError as K, BaseFacadeClient as U } from "@bodhiapp/bodhi-js-core";
+class L extends x {
   constructor(e, t) {
-    super({ ...e, storagePrefix: f.DIRECT }, "DirectWebClient", t), this.redirectUri = e.redirectUri;
+    const s = e.basePath || "/", r = w(s, u.DIRECT);
+    super({ ...e, storagePrefix: r }, "DirectWebClient", t), this.redirectUri = e.redirectUri;
   }
   // ============================================================================
   // Authentication (Browser Redirect OAuth)
@@ -10,27 +11,27 @@ class L extends C {
     const e = await this.getAuthState();
     if (e.isLoggedIn)
       return e;
-    const t = await this.requestResourceAccess(), r = `openid profile email roles ${this.userScope} ${t}`, s = g(), i = await y(s), o = g();
-    localStorage.setItem(this.storageKeys.CODE_VERIFIER, s), localStorage.setItem(this.storageKeys.STATE, o);
+    const t = await this.requestResourceAccess(), s = `openid profile email roles ${this.userScope} ${t}`, r = g(), i = await I(r), o = g();
+    localStorage.setItem(this.storageKeys.CODE_VERIFIER, r), localStorage.setItem(this.storageKeys.STATE, o);
     const a = new URL(this.authEndpoints.authorize);
-    throw a.searchParams.set("client_id", this.authClientId), a.searchParams.set("response_type", "code"), a.searchParams.set("redirect_uri", this.redirectUri), a.searchParams.set("scope", r), a.searchParams.set("code_challenge", i), a.searchParams.set("code_challenge_method", "S256"), a.searchParams.set("state", o), window.location.href = a.toString(), new Error("Redirect initiated");
+    throw a.searchParams.set("client_id", this.authClientId), a.searchParams.set("response_type", "code"), a.searchParams.set("redirect_uri", this.redirectUri), a.searchParams.set("scope", s), a.searchParams.set("code_challenge", i), a.searchParams.set("code_challenge_method", "S256"), a.searchParams.set("state", o), window.location.href = a.toString(), new Error("Redirect initiated");
   }
   async handleOAuthCallback(e, t) {
-    const r = localStorage.getItem(this.storageKeys.STATE);
-    if (!r || r !== t)
+    const s = localStorage.getItem(this.storageKeys.STATE);
+    if (!s || s !== t)
       throw new Error("Invalid state parameter - possible CSRF attack");
     await this.exchangeCodeForTokens(e), localStorage.removeItem(this.storageKeys.CODE_VERIFIER), localStorage.removeItem(this.storageKeys.STATE);
-    const s = await this.getAuthState();
-    if (!s.isLoggedIn)
+    const r = await this.getAuthState();
+    if (!r.isLoggedIn)
       throw new Error("Login failed");
-    const i = s;
+    const i = r;
     return this.setAuthState(i), i;
   }
   async logout() {
     const e = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
     if (e)
       try {
-        const r = new URLSearchParams({
+        const s = new URLSearchParams({
           token: e,
           client_id: this.authClientId,
           token_type_hint: "refresh_token"
@@ -40,10 +41,10 @@ class L extends C {
           headers: {
             "Content-Type": "application/x-www-form-urlencoded"
           },
-          body: r
+          body: s
         });
-      } catch (r) {
-        this.logger.warn("Token revocation failed:", r);
+      } catch (s) {
+        this.logger.warn("Token revocation failed:", s);
       }
     localStorage.removeItem(this.storageKeys.ACCESS_TOKEN), localStorage.removeItem(this.storageKeys.REFRESH_TOKEN), localStorage.removeItem(this.storageKeys.EXPIRES_AT), localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);
     const t = {
@@ -64,7 +65,7 @@ class L extends C {
     );
     if (T(e))
       throw new Error("Failed to get resource access scope from server");
-    if (!E(e))
+    if (!f(e))
       throw new Error("Failed to get resource access scope from server: API error");
     const t = e.body.scope;
     return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE, t), t;
@@ -73,7 +74,7 @@ class L extends C {
     const t = localStorage.getItem(this.storageKeys.CODE_VERIFIER);
     if (!t)
       throw new Error("Code verifier not found");
-    const r = await fetch(this.authEndpoints.token, {
+    const s = await fetch(this.authEndpoints.token, {
       method: "POST",
       headers: {
         "Content-Type": "application/x-www-form-urlencoded"
@@ -86,13 +87,13 @@ class L extends C {
         code_verifier: t
       })
     });
-    if (!r.ok) {
-      const i = await r.text();
-      throw new Error(`Token exchange failed: ${r.status} ${i}`);
+    if (!s.ok) {
+      const i = await s.text();
+      throw new Error(`Token exchange failed: ${s.status} ${i}`);
     }
-    const s = await r.json();
-    if (localStorage.setItem(this.storageKeys.ACCESS_TOKEN, s.access_token), s.refresh_token && localStorage.setItem(this.storageKeys.REFRESH_TOKEN, s.refresh_token), s.expires_in) {
-      const i = Date.now() + s.expires_in * 1e3;
+    const r = await s.json();
+    if (localStorage.setItem(this.storageKeys.ACCESS_TOKEN, r.access_token), r.refresh_token && localStorage.setItem(this.storageKeys.REFRESH_TOKEN, r.refresh_token), r.expires_in) {
+      const i = Date.now() + r.expires_in * 1e3;
       localStorage.setItem(this.storageKeys.EXPIRES_AT, i.toString());
     }
   }
@@ -103,8 +104,8 @@ class L extends C {
     return localStorage.getItem(e);
   }
   async _storageSet(e) {
-    Object.entries(e).forEach(([t, r]) => {
-      localStorage.setItem(t, String(r));
+    Object.entries(e).forEach(([t, s]) => {
+      localStorage.setItem(t, String(s));
     });
   }
   async _storageRemove(e) {
@@ -114,10 +115,15 @@ class L extends C {
     return this.redirectUri;
   }
 }
-const K = 500, F = 5e3, n = x(f.WEB);
-class D {
-  constructor(e, t, r) {
-    this.state = _, this.bodhiext = null, this.refreshPromise = null, this.logger = new R("WindowBodhiextClient", t.logLevel), this.authClientId = e, this.config = t, this.authEndpoints = A(this.config.authServerUrl), this.onStateChange = r ?? k;
+const N = 500, D = 5e3;
+R(u.WEB);
+function F(l = "/") {
+  const e = w(l, u.WEB);
+  return R(e);
+}
+class B {
+  constructor(e, t, s, r) {
+    this.state = y, this.bodhiext = null, this.refreshPromise = null, this.logger = new C("WindowBodhiextClient", t.logLevel), this.authClientId = e, this.config = t, this.authEndpoints = A(this.config.authServerUrl), this.onStateChange = s ?? k, this.storageKeys = F(r || "/");
   }
   /**
    * Set client state and notify callback
@@ -158,7 +164,7 @@ class D {
    * Send API message via window.bodhiext.sendApiRequest
    * Converts ApiResponse to ApiResponseResult
    */
-  async sendApiRequest(e, t, r, s, i) {
+  async sendApiRequest(e, t, s, r, i) {
     try {
       this.ensureBodhiext();
     } catch (o) {
@@ -170,10 +176,10 @@ class D {
       };
     }
     try {
-      let o = s || {};
+      let o = r || {};
       if (i) {
-        const h = await this._getAccessTokenRaw();
-        if (!h)
+        const c = await this._getAccessTokenRaw();
+        if (!c)
           return {
             error: {
               message: "Not authenticated. Please log in first.",
@@ -182,21 +188,21 @@ class D {
           };
         o = {
           ...o,
-          Authorization: `Bearer ${h}`
+          Authorization: `Bearer ${c}`
         };
       }
       return await this.bodhiext.sendApiRequest(
         e,
         t,
-        r,
+        s,
         o
       );
     } catch (o) {
-      const a = o == null ? void 0 : o.error, h = (a == null ? void 0 : a.message) ?? (o instanceof Error ? o.message : String(o)), c = (a == null ? void 0 : a.type) || "extension_error";
+      const a = o == null ? void 0 : o.error, c = (a == null ? void 0 : a.message) ?? (o instanceof Error ? o.message : String(o)), n = (a == null ? void 0 : a.type) || "extension_error";
       return {
         error: {
-          message: h,
-          type: c
+          message: c,
+          type: n
         }
       };
     }
@@ -221,46 +227,46 @@ class D {
    * No extensionId storage/restoration needed - window.bodhiext handle is ephemeral
    */
   async init(e = {}) {
-    var s, i, o, a;
+    var r, i, o, a;
     if (!e.testConnection && !e.selectedConnection)
-      return this.logger.info("No testConnection or selectedConnection, returning not-initialized state"), _;
+      return this.logger.info("No testConnection or selectedConnection, returning not-initialized state"), y;
     if (this.bodhiext && !e.testConnection)
       return this.logger.debug("Already have bodhiext handle, skipping polling"), this.state;
     if (!this.bodhiext) {
-      const h = e.timeoutMs ?? ((i = (s = this.config.initParams) == null ? void 0 : s.extension) == null ? void 0 : i.timeoutMs) ?? F, c = e.intervalMs ?? ((a = (o = this.config.initParams) == null ? void 0 : o.extension) == null ? void 0 : a.intervalMs) ?? K, l = Date.now();
+      const c = e.timeoutMs ?? ((i = (r = this.config.initParams) == null ? void 0 : r.extension) == null ? void 0 : i.timeoutMs) ?? D, n = e.intervalMs ?? ((a = (o = this.config.initParams) == null ? void 0 : o.extension) == null ? void 0 : a.intervalMs) ?? N, h = Date.now();
       if (!await new Promise((p) => {
-        const w = () => {
+        const m = () => {
           if (window.bodhiext) {
             this.bodhiext = window.bodhiext, p(!0);
             return;
           }
-          if (Date.now() - l >= h) {
+          if (Date.now() - h >= c) {
             p(!1);
             return;
           }
-          setTimeout(w, c);
+          setTimeout(m, n);
         };
-        w();
+        m();
       }))
         return this.logger.warn("Extension discovery timed out"), this.setState(v), this.state;
     }
     const t = await this.bodhiext.getExtensionId();
     this.logger.info(`Extension discovered: ${t}`);
-    const r = {
+    const s = {
       type: "extension",
       extension: "ready",
       extensionId: t,
-      server: O
+      server: b
     };
     if (e.testConnection)
       try {
-        const h = await this.getServerState();
-        this.setState({ ...r, server: h }), this.logger.info(`Server connectivity tested: ${h.status}`);
-      } catch (h) {
-        this.logger.error("Failed to get server state:", h), this.setState({ ...r, server: d });
+        const c = await this.getServerState();
+        this.setState({ ...s, server: c }), this.logger.info(`Server connectivity tested: ${c.status}`);
+      } catch (c) {
+        this.logger.error("Failed to get server state:", c), this.setState({ ...s, server: d });
       }
     else
-      this.setState(r);
+      this.setState(s);
     return this.state;
   }
   // ============================================================================
@@ -275,10 +281,10 @@ class D {
     const e = await this.bodhiext.sendApiRequest("POST", "/bodhi/v1/apps/request-access", {
       app_client_id: this.authClientId
     });
-    if (!E(e))
+    if (!f(e))
       throw new Error("Failed to get resource access scope: API error");
     const t = e.body.scope;
-    return localStorage.setItem(n.RESOURCE_SCOPE, t), t;
+    return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE, t), t;
   }
   /**
    * Login via browser redirect OAuth2 + PKCE flow
@@ -289,18 +295,18 @@ class D {
     if (e.isLoggedIn)
       return e;
     this.ensureBodhiext();
-    const t = await this.requestResourceAccess(), r = g(), s = await y(r), i = g();
-    localStorage.setItem(n.CODE_VERIFIER, r), localStorage.setItem(n.STATE, i);
+    const t = await this.requestResourceAccess(), s = g(), r = await I(s), i = g();
+    localStorage.setItem(this.storageKeys.CODE_VERIFIER, s), localStorage.setItem(this.storageKeys.STATE, i);
     const o = ["openid", "profile", "email", "roles", this.config.userScope, t], a = new URLSearchParams({
       response_type: "code",
       client_id: this.authClientId,
       redirect_uri: this.config.redirectUri,
       scope: o.join(" "),
       state: i,
-      code_challenge: s,
+      code_challenge: r,
       code_challenge_method: "S256"
-    }), h = `${this.authEndpoints.authorize}?${a}`;
-    return window.location.href = h, new Promise(() => {
+    }), c = `${this.authEndpoints.authorize}?${a}`;
+    return window.location.href = c, new Promise(() => {
     });
   }
   /**
@@ -309,45 +315,45 @@ class D {
    * @returns AuthLoggedIn with login state and user info
    */
   async handleOAuthCallback(e, t) {
-    const r = localStorage.getItem(n.STATE);
-    if (!r || r !== t)
+    const s = localStorage.getItem(this.storageKeys.STATE);
+    if (!s || s !== t)
       throw new Error("Invalid state parameter - possible CSRF attack");
-    await this.exchangeCodeForTokens(e), localStorage.removeItem(n.CODE_VERIFIER), localStorage.removeItem(n.STATE);
-    const s = await this.getAuthState();
-    if (!s.isLoggedIn)
+    await this.exchangeCodeForTokens(e), localStorage.removeItem(this.storageKeys.CODE_VERIFIER), localStorage.removeItem(this.storageKeys.STATE);
+    const r = await this.getAuthState();
+    if (!r.isLoggedIn)
       throw new Error("Login failed");
-    return this.setAuthState(s), s;
+    return this.setAuthState(r), r;
   }
   /**
    * Exchange authorization code for tokens
    */
   async exchangeCodeForTokens(e) {
-    const t = localStorage.getItem(n.CODE_VERIFIER);
+    const t = localStorage.getItem(this.storageKeys.CODE_VERIFIER);
     if (!t)
       throw new Error("Code verifier not found");
-    const r = new URLSearchParams({
+    const s = new URLSearchParams({
       grant_type: "authorization_code",
       client_id: this.authClientId,
       code: e,
       redirect_uri: this.config.redirectUri,
       code_verifier: t
-    }), s = await fetch(this.authEndpoints.token, {
+    }), r = await fetch(this.authEndpoints.token, {
       method: "POST",
       headers: {
         "Content-Type": "application/x-www-form-urlencoded"
       },
-      body: r
+      body: s
     });
-    if (!s.ok) {
-      const o = await s.text();
-      throw new Error(`Token exchange failed: ${s.status} ${o}`);
+    if (!r.ok) {
+      const o = await r.text();
+      throw new Error(`Token exchange failed: ${r.status} ${o}`);
     }
-    const i = await s.json();
+    const i = await r.json();
     if (!i.access_token)
       throw new Error("No access token received");
-    if (localStorage.setItem(n.ACCESS_TOKEN, i.access_token), i.refresh_token && localStorage.setItem(n.REFRESH_TOKEN, i.refresh_token), i.expires_in) {
+    if (localStorage.setItem(this.storageKeys.ACCESS_TOKEN, i.access_token), i.refresh_token && localStorage.setItem(this.storageKeys.REFRESH_TOKEN, i.refresh_token), i.expires_in) {
       const o = Date.now() + i.expires_in * 1e3;
-      localStorage.setItem(n.EXPIRES_AT, o.toString());
+      localStorage.setItem(this.storageKeys.EXPIRES_AT, o.toString());
     }
   }
   /**
@@ -355,10 +361,10 @@ class D {
    * @returns AuthLoggedOut with logged out state
    */
   async logout() {
-    const e = localStorage.getItem(n.REFRESH_TOKEN);
+    const e = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
     if (e)
       try {
-        const r = new URLSearchParams({
+        const s = new URLSearchParams({
           token: e,
           client_id: this.authClientId,
           token_type_hint: "refresh_token"
@@ -368,12 +374,12 @@ class D {
           headers: {
             "Content-Type": "application/x-www-form-urlencoded"
           },
-          body: r
+          body: s
         });
-      } catch (r) {
-        this.logger.warn("Token revocation failed:", r);
+      } catch (s) {
+        this.logger.warn("Token revocation failed:", s);
       }
-    localStorage.removeItem(n.ACCESS_TOKEN), localStorage.removeItem(n.REFRESH_TOKEN), localStorage.removeItem(n.EXPIRES_AT), localStorage.removeItem(n.CODE_VERIFIER), localStorage.removeItem(n.STATE), localStorage.removeItem(n.RESOURCE_SCOPE);
+    localStorage.removeItem(this.storageKeys.ACCESS_TOKEN), localStorage.removeItem(this.storageKeys.REFRESH_TOKEN), localStorage.removeItem(this.storageKeys.EXPIRES_AT), localStorage.removeItem(this.storageKeys.CODE_VERIFIER), localStorage.removeItem(this.storageKeys.STATE), localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);
     const t = {
       isLoggedIn: !1
     };
@@ -387,7 +393,7 @@ class D {
     if (!e)
       return { isLoggedIn: !1 };
     try {
-      return { isLoggedIn: !0, userInfo: I(e), accessToken: e };
+      return { isLoggedIn: !0, userInfo: _(e), accessToken: e };
     } catch (t) {
       return this.logger.error("Failed to parse token:", t), { isLoggedIn: !1 };
     }
@@ -397,14 +403,14 @@ class D {
    * Returns null if not logged in or token expired
    */
   async _getAccessTokenRaw() {
-    const e = localStorage.getItem(n.ACCESS_TOKEN), t = localStorage.getItem(n.EXPIRES_AT);
+    const e = localStorage.getItem(this.storageKeys.ACCESS_TOKEN), t = localStorage.getItem(this.storageKeys.EXPIRES_AT);
     if (!e)
       return null;
     if (t) {
-      const r = parseInt(t, 10);
-      if (Date.now() >= r - 5 * 1e3) {
-        const s = localStorage.getItem(n.REFRESH_TOKEN);
-        return s ? this._tryRefreshToken(s) : null;
+      const s = parseInt(t, 10);
+      if (Date.now() >= s - 5 * 1e3) {
+        const r = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
+        return r ? this._tryRefreshToken(r) : null;
       }
     }
     return e;
@@ -429,24 +435,24 @@ class D {
   async _doRefreshToken(e) {
     this.logger.debug("Refreshing access token");
     try {
-      const t = await b(
+      const t = await P(
         this.authEndpoints.token,
         e,
         this.authClientId
       );
       if (t) {
         this._storeRefreshedTokens(t);
-        const r = I(t.access_token);
+        const s = _(t.access_token);
         return this.setAuthState({
           isLoggedIn: !0,
-          userInfo: r,
+          userInfo: s,
           accessToken: t.access_token
         }), this.logger.info("Token refreshed successfully"), t.access_token;
       }
     } catch (t) {
       this.logger.warn("Token refresh failed:", t);
     }
-    throw this.logger.warn("Token refresh failed, keeping tokens for manual retry"), u(
+    throw this.logger.warn("Token refresh failed, keeping tokens for manual retry"), S(
       "Access token expired and unable to refresh. Try logging out and logging in again.",
       "token_refresh_failed"
     );
@@ -456,7 +462,7 @@ class D {
    */
   _storeRefreshedTokens(e) {
     const t = Date.now() + e.expires_in * 1e3;
-    localStorage.setItem(n.ACCESS_TOKEN, e.access_token), localStorage.setItem(n.EXPIRES_AT, String(t)), e.refresh_token && localStorage.setItem(n.REFRESH_TOKEN, e.refresh_token);
+    localStorage.setItem(this.storageKeys.ACCESS_TOKEN, e.access_token), localStorage.setItem(this.storageKeys.EXPIRES_AT, String(t)), e.refresh_token && localStorage.setItem(this.storageKeys.REFRESH_TOKEN, e.refresh_token);
   }
   /**
    * Ping API
@@ -484,21 +490,21 @@ class D {
     const e = await this.sendApiRequest("GET", "/bodhi/v1/info");
     if (T(e))
       return d;
-    if (!E(e))
+    if (!f(e))
       return d;
     const t = e.body;
     switch (t.status) {
       case "ready":
         return { status: "ready", version: t.version || "unknown" };
       case "setup":
-        return S("setup", t.version || "unknown");
+        return E("setup", t.version || "unknown");
       case "resource-admin":
-        return S("resource-admin", t.version || "unknown");
+        return E("resource-admin", t.version || "unknown");
       case "error":
-        return S(
+        return E(
           "error",
           t.version || "unknown",
-          t.error ? { message: t.error.message, type: t.error.type } : P.SERVER_NOT_READY
+          t.error ? { message: t.error.message, type: t.error.type } : O.SERVER_NOT_READY
         );
       default:
         return d;
@@ -508,43 +514,43 @@ class D {
    * Generic streaming via window.bodhiext.sendStreamRequest
    * Wraps ReadableStream as AsyncGenerator
    */
-  async *stream(e, t, r, s, i = !0) {
+  async *stream(e, t, s, r, i = !0) {
     this.ensureBodhiext();
-    let o = s || {};
+    let o = r || {};
     if (i) {
-      const c = await this._getAccessTokenRaw();
-      if (!c)
+      const n = await this._getAccessTokenRaw();
+      if (!n)
         throw new Error("Not authenticated. Please log in first.");
       o = {
         ...o,
-        Authorization: `Bearer ${c}`
+        Authorization: `Bearer ${n}`
       };
     }
-    const h = this.bodhiext.sendStreamRequest(e, t, r, o).getReader();
+    const c = this.bodhiext.sendStreamRequest(e, t, s, o).getReader();
     try {
       for (; ; ) {
-        const { value: c, done: l } = await h.read();
-        if (l || c != null && c.done)
+        const { value: n, done: h } = await c.read();
+        if (h || n != null && n.done)
           break;
-        yield c.body;
+        yield n.body;
       }
-    } catch (c) {
-      if (c instanceof Error) {
-        if ("response" in c) {
-          const l = c;
-          throw U(c.message, l.response.status, l.response.body);
+    } catch (n) {
+      if (n instanceof Error) {
+        if ("response" in n) {
+          const h = n;
+          throw K(n.message, h.response.status, h.response.body);
         }
-        throw "error" in c ? u(c.message, "extension_error") : u(c.message, "extension_error");
+        throw "error" in n ? S(n.message, "extension_error") : S(n.message, "extension_error");
       }
-      throw c;
+      throw n;
     } finally {
-      h.releaseLock();
+      c.releaseLock();
     }
   }
   /**
    * Chat streaming
    */
-  async *streamChat(e, t, r = !0) {
+  async *streamChat(e, t, s = !0) {
     yield* this.stream(
       "POST",
       "/v1/chat/completions",
@@ -554,7 +560,7 @@ class D {
         stream: !0
       },
       void 0,
-      r
+      s
     );
   }
   /**
@@ -581,24 +587,25 @@ class D {
     };
   }
 }
-class V extends N {
-  constructor(e, t, r, s) {
+class W extends U {
+  constructor(e, t, s, r) {
     const i = {
       redirectUri: t.redirectUri,
       authServerUrl: t.authServerUrl || "https://id.getbodhi.app/realms/bodhi",
       userScope: t.userScope || "scope_user_user",
+      basePath: t.basePath || "/",
       logLevel: t.logLevel || "warn",
       initParams: t.initParams
     };
-    super(e, i, r, s);
+    super(e, i, s, r, t.basePath);
   }
   createLogger(e) {
-    return new R("WebUIClient", e.logLevel);
+    return new C("WebUIClient", e.logLevel);
   }
   createExtClient(e, t) {
-    return new D(this.authClientId, e, t);
+    return new B(this.authClientId, e, t, e.basePath);
   }
-  createDirectClient(e, t, r) {
+  createDirectClient(e, t, s) {
     return new L(
       {
         authClientId: e,
@@ -606,9 +613,10 @@ class V extends N {
         redirectUri: t.redirectUri,
         userScope: t.userScope,
         logLevel: t.logLevel,
-        storagePrefix: f.WEB
+        storagePrefix: u.WEB,
+        basePath: t.basePath
       },
-      r
+      s
     );
   }
   // ============================================================================
@@ -618,6 +626,8 @@ class V extends N {
     return this.connectionMode === "direct" ? this.directClient.handleOAuthCallback(e, t) : this.extClient.handleOAuthCallback(e, t);
   }
 }
+const $ = "production";
 export {
-  V as WebUIClient
+  $ as WEB_BUILD_MODE,
+  W as WebUIClient
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bodhiapp/bodhi-js",
-  "version": "0.0.3",
+  "version": "0.0.4",
   "description": "Web SDK for Bodhi Browser - window.bodhiext communication",
   "type": "module",
   "main": "dist/bodhi-web.cjs.js",
@@ -34,7 +34,7 @@
     "lint:fix": "prettier --write . && eslint . --ext .js,.jsx,.ts,.tsx --fix"
   },
   "dependencies": {
-    "@bodhiapp/bodhi-js-core": "0.0.3",
+    "@bodhiapp/bodhi-js-core": "0.0.4",
     "@bodhiapp/ts-client": "^0.1.7"
   },
   "devDependencies": {