@bodhiapp/bodhi-js 0.0.3 → 0.0.5

package/dist/bodhi-browser-ext/src/types/bodhiext.d.ts

@@ -1,5 +1,4 @@
 import { OpenAiApiError, PingResponse, CreateChatCompletionRequest, CreateChatCompletionResponse, CreateChatCompletionStreamResponse } from '@bodhiapp/ts-client';
-
 /**
  * HTTP response wrapper - body can be success type OR error type
  * Use isApiErrorResponse() to narrow the type based on status

package/dist/bodhi-browser-ext/src/types/protocol.d.ts

@@ -1,6 +1,5 @@
 import { OpenAiApiError, ErrorBody } from '@bodhiapp/ts-client';
 import { ApiResponse, ServerStateInfo } from './bodhiext';
-
 /**
  * Validate OpenAI API error body structure
  * { error: { message: string, type: string } }

package/dist/bodhi-js-sdk/core/src/build-info.d.ts

@@ -0,0 +1 @@
+export declare const BUILD_MODE: string;

package/dist/bodhi-js-sdk/core/src/errors.d.ts

@@ -1,6 +1,5 @@
 import { ApiError, OperationError } from '../../../bodhi-browser-ext/src/types';
 import { OpenAiApiError } from '@bodhiapp/ts-client';
-
 /**
  * Create API error (HTTP 4xx/5xx from server)
  * Thrown for streaming responses when server returns error

package/dist/bodhi-js-sdk/core/src/facade-client-base.d.ts

@@ -3,7 +3,6 @@ import { IConnectionClient } from './interface';
 import { Logger } from './logger';
 import { BodhiClientUserPrefsManager } from './storage';
 import { ApiResponseResult, AuthLoggedIn, AuthLoggedOut, AuthState, BackendServerState, ClientState, ConnectionMode, DirectState, ExtensionState, InitParams, SerializedClientState, SerializedDirectState, SerializedExtensionState, StateChange, StateChangeCallback } from './types';
-
 /**
  * Base facade client with common delegation logic
  *
@@ -20,7 +19,7 @@ export declare abstract class BaseFacadeClient<TConfig, TExtClient extends IConn
     protected authClientId: string;
     protected config: TConfig;
     protected onStateChange: StateChangeCallback;
-    constructor(authClientId: string, config: TConfig, onStateChange?: StateChangeCallback, storagePrefix?: string);
+    constructor(authClientId: string, config: TConfig, onStateChange?: StateChangeCallback, storagePrefix?: string, basePath?: string);
     /**
      * Create logger instance
      * Subclasses extract logLevel from their specific config type

package/dist/bodhi-js-sdk/core/src/index.d.ts

@@ -17,3 +17,4 @@ export * from './oauth';
 export * from './direct-client-base';
 export * from './facade-client-base';
 export { isOperationError, type OperationError } from '../../../bodhi-browser-ext/src/types';
+export { BUILD_MODE as CORE_BUILD_MODE } from './build-info';

package/dist/bodhi-js-sdk/core/src/interface.d.ts

@@ -1,6 +1,5 @@
 import { CreateChatCompletionStreamResponse } from '@bodhiapp/ts-client';
 import { ApiResponseResult, AuthLoggedIn, AuthLoggedOut, AuthState, BackendServerState, ClientState, ConnectionMode, DirectState, ExtensionState, InitParams, StateChangeCallback } from './types';
-
 /**
  * ConnectionClient - Base interface for all client implementations
  *

package/dist/bodhi-js-sdk/core/src/logger.d.ts

@@ -1,5 +1,4 @@
 import { LogLevel } from './types/config';
-
 export declare class Logger {
     private prefix;
     private level;

package/dist/bodhi-js-sdk/core/src/oauth.d.ts

@@ -1,5 +1,4 @@
 import { UserInfo } from './types';
-
 /**
  * Base64 URL encode a buffer (for PKCE)
  */

package/dist/bodhi-js-sdk/core/src/onboarding/config.d.ts

@@ -1,5 +1,4 @@
 import { Browser, OS } from '../../../../setup-modal/src/types';
-
 /**
  * Browser configurations with extension store URLs
  */

package/dist/bodhi-js-sdk/core/src/onboarding/modal.d.ts

@@ -1,5 +1,4 @@
 import { MessageType, RequestMessage, ResponsePayload } from '../../../../setup-modal/src/types';
-
 import type * as ModalTypes from '@bodhiapp/setup-modal/types';
 /**
  * Async handler for modal requests

package/dist/bodhi-js-sdk/core/src/onboarding/protocol-utils.d.ts

@@ -1,5 +1,4 @@
 import { MessageType, RequestPayload, ResponsePayload, RequestMessage, RequestId } from '../../../../setup-modal/src/types';
-
 /** Build fire-and-forget event message */
 export declare function buildEvent<T extends MessageType>(type: T, payload: RequestPayload<T>): {
     kind: "event";

package/dist/bodhi-js-sdk/core/src/platform.d.ts

@@ -1,5 +1,4 @@
 import { BrowserInfo, OSInfo } from './types';
-
 /**
  * Detects the current browser using UAParser.js
  */

package/dist/bodhi-js-sdk/core/src/storage.d.ts

@@ -27,6 +27,18 @@ export declare const STORAGE_PREFIXES: {
     readonly WEB: "bodhi:web";
     readonly EXT: "bodhi:ext";
 };
+/**
+ * Create storage prefix with basePath for path isolation
+ *
+ * @param basePath - Base path of app (e.g., '/', '/app1/')
+ * @param prefix - Storage prefix (e.g., 'bodhi:web', 'bodhijs:')
+ * @returns Combined prefix with basePath isolation
+ *
+ * Examples:
+ * - createStoragePrefixWithBasePath('/', 'bodhi:web') => '/:bodhi:web'
+ * - createStoragePrefixWithBasePath('/app1/', 'bodhi:web') => '/app1/:bodhi:web'
+ */
+export declare function createStoragePrefixWithBasePath(basePath: string, prefix: string): string;
 /**
  * User Preferences Storage Manager
  *

package/dist/bodhi-js-sdk/core/src/types/api.d.ts

@@ -1,6 +1,5 @@
 import { ApiResponse, OperationErrorResponse } from '../../../../bodhi-browser-ext/src/types';
 import { OpenAiApiError } from '@bodhiapp/ts-client';
-
 /**
  * Public API result type - discriminated union without protocol fields
  *

package/dist/bodhi-js-sdk/core/src/types/callback.d.ts

@@ -1,6 +1,5 @@
 import { ClientState } from './client-state';
 import { AuthState } from './user-info';
-
 /**
  * Discriminated union for state changes.
  * Allows single callback to handle both client state and auth state changes.

package/dist/bodhi-js-sdk/core/src/types/client-state.d.ts

@@ -1,5 +1,4 @@
 import { OperationErrorResponse } from '../../../../bodhi-browser-ext/src/types';
-
 /**
  * Serialized direct client state for persistence
  * Stores minimal state needed to restore direct connection

package/dist/bodhi-js-sdk/core/src/types/config.d.ts

@@ -1,5 +1,4 @@
 import { UserScope } from './user-info';
-
 /**
  * Log levels for client logging
  */

package/dist/bodhi-js-sdk/core/src/types/platform.d.ts

@@ -1,5 +1,4 @@
 import { BrowserType, OSType } from '../../../../setup-modal/src/types';
-
 /**
  * Browser detection result
  */

package/dist/bodhi-js-sdk/web/src/build-info.d.ts

@@ -0,0 +1 @@
+export declare const BUILD_MODE: string;

package/dist/bodhi-js-sdk/web/src/constants.d.ts

@@ -1,9 +1,19 @@
-/**
- * Constants for web2ext communication
- */
+import { StorageKeys } from '../../core/src/index.ts';
 export declare const POLL_INTERVAL = 500;
 export declare const POLL_TIMEOUT = 5000;
 /**
  * LocalStorage keys for OAuth tokens and PKCE flow (namespaced with 'bodhi:web' prefix)
+ * @deprecated Use createWebStorageKeys(basePath) instead for basePath-aware keys
+ */
+export declare const STORAGE_KEYS: StorageKeys;
+/**
+ * Create storage keys for web mode with optional basePath isolation
+ *
+ * @param basePath - Base path of app (e.g., '/', '/app1/'), defaults to '/'
+ * @returns Storage keys with basePath-aware prefix
+ *
+ * Examples:
+ * - createWebStorageKeys('/') => keys with 'bodhi:web:' prefix
+ * - createWebStorageKeys('/app1/') => keys with '/app1/:bodhi:web:' prefix
  */
-export declare const STORAGE_KEYS: import('../../core/src/index.ts').StorageKeys;
+export declare function createWebStorageKeys(basePath?: string): StorageKeys;

package/dist/bodhi-js-sdk/web/src/direct-client.d.ts

@@ -1,10 +1,10 @@
 import { DirectClientBase, AuthLoggedIn, AuthLoggedOut, DirectClientBaseConfig, StateChangeCallback } from '../../core/src/index.ts';
-
 /**
  * Configuration for DirectWebClient
  */
 export interface DirectWebClientConfig extends DirectClientBaseConfig {
     redirectUri: string;
+    basePath?: string;
 }
 /**
  * DirectWebClient - Web mode implementation using browser redirect OAuth

package/dist/bodhi-js-sdk/web/src/ext-client.d.ts

@@ -1,7 +1,6 @@
 import { ApiResponseResult, AuthLoggedIn, AuthLoggedOut, AuthState, BackendServerState, ClientState, ExtensionState, IExtensionClient, InitParams, StateChangeCallback } from '../../core/src/index.ts';
 import { CreateChatCompletionStreamResponse } from '@bodhiapp/ts-client';
 import { WebClientConfig } from './facade-client';
-
 export type SerializedWebExtensionState = {
     extensionId?: string;
 };
@@ -23,7 +22,8 @@ export declare class WindowBodhiextClient implements IExtensionClient {
     private authEndpoints;
     private onStateChange;
     private refreshPromise;
-    constructor(authClientId: string, config: WebClientConfig, onStateChange?: StateChangeCallback);
+    private storageKeys;
+    constructor(authClientId: string, config: WebClientConfig, onStateChange?: StateChangeCallback, basePath?: string);
     /**
      * Set client state and notify callback
      */
@@ -38,7 +38,7 @@ export declare class WindowBodhiextClient implements IExtensionClient {
     setStateCallback(callback: StateChangeCallback): void;
     /**
      * Ensure bodhiext is available, attempting to acquire it if not already set
-     * @throws Error if client not initialized
+     * @throws OperationError if client not initialized
      */
     private ensureBodhiext;
     /**

package/dist/bodhi-js-sdk/web/src/facade-client.d.ts

@@ -1,7 +1,6 @@
 import { BaseFacadeClient, Logger, AuthLoggedIn, IWebUIClient, LogLevel, StateChange, StateChangeCallback, UserScope } from '../../core/src/index.ts';
 import { DirectWebClient } from './direct-client';
 import { WindowBodhiextClient } from './ext-client';
-
 /**
  * Configuration for WebClient OAuth
  */
@@ -9,6 +8,7 @@ export interface WebClientConfig {
     authServerUrl: string;
     redirectUri: string;
     userScope: UserScope;
+    basePath?: string;
     logLevel: LogLevel;
     initParams?: {
         extension?: {
@@ -28,6 +28,7 @@ export declare class WebUIClient extends BaseFacadeClient<WebClientConfig, Windo
         redirectUri: string;
         authServerUrl?: string;
         userScope?: UserScope;
+        basePath?: string;
         logLevel?: LogLevel;
         initParams?: {
             extension?: {

package/dist/bodhi-js-sdk/web/src/index.d.ts

@@ -1,5 +1,5 @@
 import { SerializedWebExtensionState } from './ext-client';
 import { IWebUIClient } from './interface';
-
 export { WebUIClient } from './facade-client';
 export type { IWebUIClient, SerializedWebExtensionState };
+export { BUILD_MODE as WEB_BUILD_MODE } from './build-info';

package/dist/bodhi-web.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const s=require("@bodhiapp/bodhi-js-core");class S extends s.DirectClientBase{constructor(e,t){super({...e,storagePrefix:s.STORAGE_PREFIXES.DIRECT},"DirectWebClient",t),this.redirectUri=e.redirectUri}async login(){const e=await this.getAuthState();if(e.isLoggedIn)return e;const t=await this.requestResourceAccess(),r=`openid profile email roles ${this.userScope} ${t}`,o=s.generateCodeVerifier(),n=await s.generateCodeChallenge(o),i=s.generateCodeVerifier();localStorage.setItem(this.storageKeys.CODE_VERIFIER,o),localStorage.setItem(this.storageKeys.STATE,i);const c=new URL(this.authEndpoints.authorize);throw c.searchParams.set("client_id",this.authClientId),c.searchParams.set("response_type","code"),c.searchParams.set("redirect_uri",this.redirectUri),c.searchParams.set("scope",r),c.searchParams.set("code_challenge",n),c.searchParams.set("code_challenge_method","S256"),c.searchParams.set("state",i),window.location.href=c.toString(),new Error("Redirect initiated")}async handleOAuthCallback(e,t){const r=localStorage.getItem(this.storageKeys.STATE);if(!r||r!==t)throw new Error("Invalid state parameter - possible CSRF attack");await this.exchangeCodeForTokens(e),localStorage.removeItem(this.storageKeys.CODE_VERIFIER),localStorage.removeItem(this.storageKeys.STATE);const o=await this.getAuthState();if(!o.isLoggedIn)throw new Error("Login failed");const n=o;return this.setAuthState(n),n}async logout(){const e=localStorage.getItem(this.storageKeys.REFRESH_TOKEN);if(e)try{const r=new URLSearchParams({token:e,client_id:this.authClientId,token_type_hint:"refresh_token"});await fetch(this.authEndpoints.revoke,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r})}catch(r){this.logger.warn("Token revocation failed:",r)}localStorage.removeItem(this.storageKeys.ACCESS_TOKEN),localStorage.removeItem(this.storageKeys.REFRESH_TOKEN),localStorage.removeItem(this.storageKeys.EXPIRES_AT),localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);const t={isLoggedIn:!1};return this.setAuthState(t),t}async requestResourceAccess(){const e=await this.sendApiRequest("POST","/bodhi/v1/apps/request-access",{app_client_id:this.authClientId},{},!1);if(s.isApiResultOperationError(e))throw new Error("Failed to get resource access scope from server");if(!s.isApiResultSuccess(e))throw new Error("Failed to get resource access scope from server: API error");const t=e.body.scope;return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE,t),t}async exchangeCodeForTokens(e){const t=localStorage.getItem(this.storageKeys.CODE_VERIFIER);if(!t)throw new Error("Code verifier not found");const r=await fetch(this.authEndpoints.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:e,redirect_uri:this.redirectUri,client_id:this.authClientId,code_verifier:t})});if(!r.ok){const n=await r.text();throw new Error(`Token exchange failed: ${r.status} ${n}`)}const o=await r.json();if(localStorage.setItem(this.storageKeys.ACCESS_TOKEN,o.access_token),o.refresh_token&&localStorage.setItem(this.storageKeys.REFRESH_TOKEN,o.refresh_token),o.expires_in){const n=Date.now()+o.expires_in*1e3;localStorage.setItem(this.storageKeys.EXPIRES_AT,n.toString())}}async _storageGet(e){return localStorage.getItem(e)}async _storageSet(e){Object.entries(e).forEach(([t,r])=>{localStorage.setItem(t,String(r))})}async _storageRemove(e){e.forEach(t=>localStorage.removeItem(t))}_getRedirectUri(){return this.redirectUri}}const f=500,_=5e3,a=s.createStorageKeys(s.STORAGE_PREFIXES.WEB);class p{constructor(e,t,r){this.state=s.EXTENSION_STATE_NOT_INITIALIZED,this.bodhiext=null,this.refreshPromise=null,this.logger=new s.Logger("WindowBodhiextClient",t.logLevel),this.authClientId=e,this.config=t,this.authEndpoints=s.createOAuthEndpoints(this.config.authServerUrl),this.onStateChange=r??s.NOOP_STATE_CALLBACK}setState(e){this.state=e,this.logger.info(`{state: ${JSON.stringify(e)}} - Setting client state`),this.onStateChange({type:"client-state",state:e})}setAuthState(e){this.onStateChange({type:"auth-state",state:e})}setStateCallback(e){this.onStateChange=e}ensureBodhiext(){if(!this.bodhiext&&window.bodhiext&&(this.logger.info("Acquiring window.bodhiext reference"),this.bodhiext=window.bodhiext),!this.bodhiext)throw new Error("Client not initialized")}async sendExtRequest(e,t){return this.ensureBodhiext(),this.bodhiext.sendExtRequest(e,t)}async sendApiRequest(e,t,r,o,n){try{this.ensureBodhiext()}catch(i){return{error:{message:i instanceof Error?i.message:String(i),type:"extension_error"}}}try{let i=o||{};if(n){const l=await this._getAccessTokenRaw();if(!l)return{error:{message:"Not authenticated. Please log in first.",type:"extension_error"}};i={...i,Authorization:`Bearer ${l}`}}return await this.bodhiext.sendApiRequest(e,t,r,i)}catch(i){const c=i==null?void 0:i.error,l=(c==null?void 0:c.message)??(i instanceof Error?i.message:String(i)),h=(c==null?void 0:c.type)||"extension_error";return{error:{message:l,type:h}}}}getState(){return this.state}isClientInitialized(){return this.state.extension==="ready"}isServerReady(){return this.isClientInitialized()&&this.state.server.status==="ready"}async init(e={}){var o,n,i,c;if(!e.testConnection&&!e.selectedConnection)return this.logger.info("No testConnection or selectedConnection, returning not-initialized state"),s.EXTENSION_STATE_NOT_INITIALIZED;if(this.bodhiext&&!e.testConnection)return this.logger.debug("Already have bodhiext handle, skipping polling"),this.state;if(!this.bodhiext){const l=e.timeoutMs??((n=(o=this.config.initParams)==null?void 0:o.extension)==null?void 0:n.timeoutMs)??_,h=e.intervalMs??((c=(i=this.config.initParams)==null?void 0:i.extension)==null?void 0:c.intervalMs)??f,d=Date.now();if(!await new Promise(u=>{const E=()=>{if(window.bodhiext){this.bodhiext=window.bodhiext,u(!0);return}if(Date.now()-d>=l){u(!1);return}setTimeout(E,h)};E()}))return this.logger.warn("Extension discovery timed out"),this.setState(s.EXTENSION_STATE_NOT_FOUND),this.state}const t=await this.bodhiext.getExtensionId();this.logger.info(`Extension discovered: ${t}`);const r={type:"extension",extension:"ready",extensionId:t,server:s.PENDING_EXTENSION_READY};if(e.testConnection)try{const l=await this.getServerState();this.setState({...r,server:l}),this.logger.info(`Server connectivity tested: ${l.status}`)}catch(l){this.logger.error("Failed to get server state:",l),this.setState({...r,server:s.BACKEND_SERVER_NOT_REACHABLE})}else this.setState(r);return this.state}async requestResourceAccess(){this.ensureBodhiext();const e=await this.bodhiext.sendApiRequest("POST","/bodhi/v1/apps/request-access",{app_client_id:this.authClientId});if(!s.isApiResultSuccess(e))throw new Error("Failed to get resource access scope: API error");const t=e.body.scope;return localStorage.setItem(a.RESOURCE_SCOPE,t),t}async login(){const e=await this.getAuthState();if(e.isLoggedIn)return e;this.ensureBodhiext();const t=await this.requestResourceAccess(),r=s.generateCodeVerifier(),o=await s.generateCodeChallenge(r),n=s.generateCodeVerifier();localStorage.setItem(a.CODE_VERIFIER,r),localStorage.setItem(a.STATE,n);const i=["openid","profile","email","roles",this.config.userScope,t],c=new URLSearchParams({response_type:"code",client_id:this.authClientId,redirect_uri:this.config.redirectUri,scope:i.join(" "),state:n,code_challenge:o,code_challenge_method:"S256"}),l=`${this.authEndpoints.authorize}?${c}`;return window.location.href=l,new Promise(()=>{})}async handleOAuthCallback(e,t){const r=localStorage.getItem(a.STATE);if(!r||r!==t)throw new Error("Invalid state parameter - possible CSRF attack");await this.exchangeCodeForTokens(e),localStorage.removeItem(a.CODE_VERIFIER),localStorage.removeItem(a.STATE);const o=await this.getAuthState();if(!o.isLoggedIn)throw new Error("Login failed");return this.setAuthState(o),o}async exchangeCodeForTokens(e){const t=localStorage.getItem(a.CODE_VERIFIER);if(!t)throw new Error("Code verifier not found");const r=new URLSearchParams({grant_type:"authorization_code",client_id:this.authClientId,code:e,redirect_uri:this.config.redirectUri,code_verifier:t}),o=await fetch(this.authEndpoints.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r});if(!o.ok){const i=await o.text();throw new Error(`Token exchange failed: ${o.status} ${i}`)}const n=await o.json();if(!n.access_token)throw new Error("No access token received");if(localStorage.setItem(a.ACCESS_TOKEN,n.access_token),n.refresh_token&&localStorage.setItem(a.REFRESH_TOKEN,n.refresh_token),n.expires_in){const i=Date.now()+n.expires_in*1e3;localStorage.setItem(a.EXPIRES_AT,i.toString())}}async logout(){const e=localStorage.getItem(a.REFRESH_TOKEN);if(e)try{const r=new URLSearchParams({token:e,client_id:this.authClientId,token_type_hint:"refresh_token"});await fetch(this.authEndpoints.revoke,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r})}catch(r){this.logger.warn("Token revocation failed:",r)}localStorage.removeItem(a.ACCESS_TOKEN),localStorage.removeItem(a.REFRESH_TOKEN),localStorage.removeItem(a.EXPIRES_AT),localStorage.removeItem(a.CODE_VERIFIER),localStorage.removeItem(a.STATE),localStorage.removeItem(a.RESOURCE_SCOPE);const t={isLoggedIn:!1};return this.setAuthState(t),t}async getAuthState(){const e=await this._getAccessTokenRaw();if(!e)return{isLoggedIn:!1};try{return{isLoggedIn:!0,userInfo:s.extractUserInfo(e),accessToken:e}}catch(t){return this.logger.error("Failed to parse token:",t),{isLoggedIn:!1}}}async _getAccessTokenRaw(){const e=localStorage.getItem(a.ACCESS_TOKEN),t=localStorage.getItem(a.EXPIRES_AT);if(!e)return null;if(t){const r=parseInt(t,10);if(Date.now()>=r-5*1e3){const o=localStorage.getItem(a.REFRESH_TOKEN);return o?this._tryRefreshToken(o):null}}return e}async _tryRefreshToken(e){if(this.refreshPromise)return this.logger.debug("Refresh already in progress, returning existing promise"),this.refreshPromise;this.refreshPromise=this._doRefreshToken(e);try{return await this.refreshPromise}finally{this.refreshPromise=null}}async _doRefreshToken(e){this.logger.debug("Refreshing access token");try{const t=await s.refreshAccessToken(this.authEndpoints.token,e,this.authClientId);if(t){this._storeRefreshedTokens(t);const r=s.extractUserInfo(t.access_token);return this.setAuthState({isLoggedIn:!0,userInfo:r,accessToken:t.access_token}),this.logger.info("Token refreshed successfully"),t.access_token}}catch(t){this.logger.warn("Token refresh failed:",t)}throw this.logger.warn("Token refresh failed, keeping tokens for manual retry"),s.createOperationError("Access token expired and unable to refresh. Try logging out and logging in again.","token_refresh_failed")}_storeRefreshedTokens(e){const t=Date.now()+e.expires_in*1e3;localStorage.setItem(a.ACCESS_TOKEN,e.access_token),localStorage.setItem(a.EXPIRES_AT,String(t)),e.refresh_token&&localStorage.setItem(a.REFRESH_TOKEN,e.refresh_token)}async pingApi(){return this.sendApiRequest("GET","/ping")}async fetchModels(){return this.sendApiRequest("GET","/v1/models",void 0,void 0,!0)}async getServerState(){const e=await this.sendApiRequest("GET","/bodhi/v1/info");if(s.isApiResultOperationError(e)||!s.isApiResultSuccess(e))return s.BACKEND_SERVER_NOT_REACHABLE;const t=e.body;switch(t.status){case"ready":return{status:"ready",version:t.version||"unknown"};case"setup":return s.backendServerNotReady("setup",t.version||"unknown");case"resource-admin":return s.backendServerNotReady("resource-admin",t.version||"unknown");case"error":return s.backendServerNotReady("error",t.version||"unknown",t.error?{message:t.error.message,type:t.error.type}:s.SERVER_ERROR_CODES.SERVER_NOT_READY);default:return s.BACKEND_SERVER_NOT_REACHABLE}}async*stream(e,t,r,o,n=!0){this.ensureBodhiext();let i=o||{};if(n){const h=await this._getAccessTokenRaw();if(!h)throw new Error("Not authenticated. Please log in first.");i={...i,Authorization:`Bearer ${h}`}}const l=this.bodhiext.sendStreamRequest(e,t,r,i).getReader();try{for(;;){const{value:h,done:d}=await l.read();if(d||h!=null&&h.done)break;yield h.body}}catch(h){if(h instanceof Error){if("response"in h){const d=h;throw s.createApiError(h.message,d.response.status,d.response.body)}throw"error"in h,s.createOperationError(h.message,"extension_error")}throw h}finally{l.releaseLock()}}async*streamChat(e,t,r=!0){yield*this.stream("POST","/v1/chat/completions",{model:e,messages:[{role:"user",content:t}],stream:!0},void 0,r)}serialize(){return{extensionId:this.state.type==="extension"&&this.state.extension==="ready"?this.state.extensionId:void 0}}async debug(){return{type:"WindowBodhiextClient",state:this.state,authState:await this.getAuthState(),bodhiextAvailable:this.bodhiext!==null,authClientId:this.authClientId,authServerUrl:this.config.authServerUrl,redirectUri:this.config.redirectUri,userScope:this.config.userScope}}}class m extends s.BaseFacadeClient{constructor(e,t,r,o){const n={redirectUri:t.redirectUri,authServerUrl:t.authServerUrl||"https://id.getbodhi.app/realms/bodhi",userScope:t.userScope||"scope_user_user",logLevel:t.logLevel||"warn",initParams:t.initParams};super(e,n,r,o)}createLogger(e){return new s.Logger("WebUIClient",e.logLevel)}createExtClient(e,t){return new p(this.authClientId,e,t)}createDirectClient(e,t,r){return new S({authClientId:e,authServerUrl:t.authServerUrl,redirectUri:t.redirectUri,userScope:t.userScope,logLevel:t.logLevel,storagePrefix:s.STORAGE_PREFIXES.WEB},r)}async handleOAuthCallback(e,t){return this.connectionMode==="direct"?this.directClient.handleOAuthCallback(e,t):this.extClient.handleOAuthCallback(e,t)}}exports.WebUIClient=m;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const s=require("@bodhiapp/bodhi-js-core");class g extends s.DirectClientBase{constructor(e,t){const r=e.basePath||"/",o=s.createStoragePrefixWithBasePath(r,s.STORAGE_PREFIXES.DIRECT);super({...e,storagePrefix:o},"DirectWebClient",t),this.redirectUri=e.redirectUri}async login(){const e=await this.getAuthState();if(e.isLoggedIn)return e;const t=await this.requestResourceAccess(),r=`openid profile email roles ${this.userScope} ${t}`,o=s.generateCodeVerifier(),a=await s.generateCodeChallenge(o),i=s.generateCodeVerifier();localStorage.setItem(this.storageKeys.CODE_VERIFIER,o),localStorage.setItem(this.storageKeys.STATE,i);const c=new URL(this.authEndpoints.authorize);throw c.searchParams.set("client_id",this.authClientId),c.searchParams.set("response_type","code"),c.searchParams.set("redirect_uri",this.redirectUri),c.searchParams.set("scope",r),c.searchParams.set("code_challenge",a),c.searchParams.set("code_challenge_method","S256"),c.searchParams.set("state",i),window.location.href=c.toString(),new Error("Redirect initiated")}async handleOAuthCallback(e,t){const r=localStorage.getItem(this.storageKeys.STATE);if(!r||r!==t)throw new Error("Invalid state parameter - possible CSRF attack");await this.exchangeCodeForTokens(e),localStorage.removeItem(this.storageKeys.CODE_VERIFIER),localStorage.removeItem(this.storageKeys.STATE);const o=await this.getAuthState();if(!o.isLoggedIn)throw new Error("Login failed");const a=o;return this.setAuthState(a),a}async logout(){const e=localStorage.getItem(this.storageKeys.REFRESH_TOKEN);if(e)try{const r=new URLSearchParams({token:e,client_id:this.authClientId,token_type_hint:"refresh_token"});await fetch(this.authEndpoints.revoke,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r})}catch(r){this.logger.warn("Token revocation failed:",r)}localStorage.removeItem(this.storageKeys.ACCESS_TOKEN),localStorage.removeItem(this.storageKeys.REFRESH_TOKEN),localStorage.removeItem(this.storageKeys.EXPIRES_AT),localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);const t={isLoggedIn:!1};return this.setAuthState(t),t}async requestResourceAccess(){const e=await this.sendApiRequest("POST","/bodhi/v1/apps/request-access",{app_client_id:this.authClientId},{},!1);if(s.isApiResultOperationError(e))throw new Error("Failed to get resource access scope from server");if(!s.isApiResultSuccess(e))throw new Error("Failed to get resource access scope from server: API error");const t=e.body.scope;return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE,t),t}async exchangeCodeForTokens(e){const t=localStorage.getItem(this.storageKeys.CODE_VERIFIER);if(!t)throw new Error("Code verifier not found");const r=await fetch(this.authEndpoints.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:e,redirect_uri:this.redirectUri,client_id:this.authClientId,code_verifier:t})});if(!r.ok){const a=await r.text();throw new Error(`Token exchange failed: ${r.status} ${a}`)}const o=await r.json();if(localStorage.setItem(this.storageKeys.ACCESS_TOKEN,o.access_token),o.refresh_token&&localStorage.setItem(this.storageKeys.REFRESH_TOKEN,o.refresh_token),o.expires_in){const a=Date.now()+o.expires_in*1e3;localStorage.setItem(this.storageKeys.EXPIRES_AT,a.toString())}}async _storageGet(e){return localStorage.getItem(e)}async _storageSet(e){Object.entries(e).forEach(([t,r])=>{localStorage.setItem(t,String(r))})}async _storageRemove(e){e.forEach(t=>localStorage.removeItem(t))}_getRedirectUri(){return this.redirectUri}}const u=500,E=5e3;s.createStorageKeys(s.STORAGE_PREFIXES.WEB);function S(l="/"){const e=s.createStoragePrefixWithBasePath(l,s.STORAGE_PREFIXES.WEB);return s.createStorageKeys(e)}class f{constructor(e,t,r,o){this.state=s.EXTENSION_STATE_NOT_INITIALIZED,this.bodhiext=null,this.refreshPromise=null,this.logger=new s.Logger("WindowBodhiextClient",t.logLevel),this.authClientId=e,this.config=t,this.authEndpoints=s.createOAuthEndpoints(this.config.authServerUrl),this.onStateChange=r??s.NOOP_STATE_CALLBACK,this.storageKeys=S(o||"/")}setState(e){this.state=e,this.logger.info(`{state: ${JSON.stringify(e)}} - Setting client state`),this.onStateChange({type:"client-state",state:e})}setAuthState(e){this.onStateChange({type:"auth-state",state:e})}setStateCallback(e){this.onStateChange=e}ensureBodhiext(){if(!this.bodhiext&&window.bodhiext&&(this.logger.info("Acquiring window.bodhiext reference"),this.bodhiext=window.bodhiext),!this.bodhiext)throw s.createOperationError("Client not initialized","extension_error")}async sendExtRequest(e,t){return this.ensureBodhiext(),this.bodhiext.sendExtRequest(e,t)}async sendApiRequest(e,t,r,o,a){try{this.ensureBodhiext()}catch(i){return{error:{message:i instanceof Error?i.message:String(i),type:"extension_error"}}}try{let i=o||{};if(a){const h=await this._getAccessTokenRaw();if(!h)return{error:{message:"Not authenticated. Please log in first.",type:"extension_error"}};i={...i,Authorization:`Bearer ${h}`}}return await this.bodhiext.sendApiRequest(e,t,r,i)}catch(i){const c=i?.error,h=c?.message??(i instanceof Error?i.message:String(i)),n=c?.type||"extension_error";return{error:{message:h,type:n}}}}getState(){return this.state}isClientInitialized(){return this.state.extension==="ready"}isServerReady(){return this.isClientInitialized()&&this.state.server.status==="ready"}async init(e={}){if(!e.testConnection&&!e.selectedConnection)return this.logger.info("No testConnection or selectedConnection, returning not-initialized state"),s.EXTENSION_STATE_NOT_INITIALIZED;if(this.bodhiext&&!e.testConnection)return this.logger.debug("Already have bodhiext handle, skipping polling"),this.state;if(!this.bodhiext){const o=e.timeoutMs??this.config.initParams?.extension?.timeoutMs??E,a=e.intervalMs??this.config.initParams?.extension?.intervalMs??u,i=Date.now();if(!await new Promise(h=>{const n=()=>{if(window.bodhiext){this.bodhiext=window.bodhiext,h(!0);return}if(Date.now()-i>=o){h(!1);return}setTimeout(n,a)};n()}))return this.logger.warn("Extension discovery timed out"),this.setState(s.EXTENSION_STATE_NOT_FOUND),this.state}const t=await this.bodhiext.getExtensionId();this.logger.info(`Extension discovered: ${t}`);const r={type:"extension",extension:"ready",extensionId:t,server:s.PENDING_EXTENSION_READY};if(e.testConnection)try{const o=await this.getServerState();this.setState({...r,server:o}),this.logger.info(`Server connectivity tested: ${o.status}`)}catch(o){this.logger.error("Failed to get server state:",o),this.setState({...r,server:s.BACKEND_SERVER_NOT_REACHABLE})}else this.setState(r);return this.state}async requestResourceAccess(){this.ensureBodhiext();const e=await this.bodhiext.sendApiRequest("POST","/bodhi/v1/apps/request-access",{app_client_id:this.authClientId});if(!s.isApiResultSuccess(e))throw new Error("Failed to get resource access scope: API error");const t=e.body.scope;return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE,t),t}async login(){const e=await this.getAuthState();if(e.isLoggedIn)return e;this.ensureBodhiext();const t=await this.requestResourceAccess(),r=s.generateCodeVerifier(),o=await s.generateCodeChallenge(r),a=s.generateCodeVerifier();localStorage.setItem(this.storageKeys.CODE_VERIFIER,r),localStorage.setItem(this.storageKeys.STATE,a);const i=["openid","profile","email","roles",this.config.userScope,t],c=new URLSearchParams({response_type:"code",client_id:this.authClientId,redirect_uri:this.config.redirectUri,scope:i.join(" "),state:a,code_challenge:o,code_challenge_method:"S256"}),h=`${this.authEndpoints.authorize}?${c}`;return window.location.href=h,new Promise(()=>{})}async handleOAuthCallback(e,t){const r=localStorage.getItem(this.storageKeys.STATE);if(!r||r!==t)throw new Error("Invalid state parameter - possible CSRF attack");await this.exchangeCodeForTokens(e),localStorage.removeItem(this.storageKeys.CODE_VERIFIER),localStorage.removeItem(this.storageKeys.STATE);const o=await this.getAuthState();if(!o.isLoggedIn)throw new Error("Login failed");return this.setAuthState(o),o}async exchangeCodeForTokens(e){const t=localStorage.getItem(this.storageKeys.CODE_VERIFIER);if(!t)throw new Error("Code verifier not found");const r=new URLSearchParams({grant_type:"authorization_code",client_id:this.authClientId,code:e,redirect_uri:this.config.redirectUri,code_verifier:t}),o=await fetch(this.authEndpoints.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r});if(!o.ok){const i=await o.text();throw new Error(`Token exchange failed: ${o.status} ${i}`)}const a=await o.json();if(!a.access_token)throw new Error("No access token received");if(localStorage.setItem(this.storageKeys.ACCESS_TOKEN,a.access_token),a.refresh_token&&localStorage.setItem(this.storageKeys.REFRESH_TOKEN,a.refresh_token),a.expires_in){const i=Date.now()+a.expires_in*1e3;localStorage.setItem(this.storageKeys.EXPIRES_AT,i.toString())}}async logout(){const e=localStorage.getItem(this.storageKeys.REFRESH_TOKEN);if(e)try{const r=new URLSearchParams({token:e,client_id:this.authClientId,token_type_hint:"refresh_token"});await fetch(this.authEndpoints.revoke,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r})}catch(r){this.logger.warn("Token revocation failed:",r)}localStorage.removeItem(this.storageKeys.ACCESS_TOKEN),localStorage.removeItem(this.storageKeys.REFRESH_TOKEN),localStorage.removeItem(this.storageKeys.EXPIRES_AT),localStorage.removeItem(this.storageKeys.CODE_VERIFIER),localStorage.removeItem(this.storageKeys.STATE),localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);const t={isLoggedIn:!1};return this.setAuthState(t),t}async getAuthState(){const e=await this._getAccessTokenRaw();if(!e)return{isLoggedIn:!1};try{return{isLoggedIn:!0,userInfo:s.extractUserInfo(e),accessToken:e}}catch(t){return this.logger.error("Failed to parse token:",t),{isLoggedIn:!1}}}async _getAccessTokenRaw(){const e=localStorage.getItem(this.storageKeys.ACCESS_TOKEN),t=localStorage.getItem(this.storageKeys.EXPIRES_AT);if(!e)return null;if(t){const r=parseInt(t,10);if(Date.now()>=r-5*1e3){const o=localStorage.getItem(this.storageKeys.REFRESH_TOKEN);return o?this._tryRefreshToken(o):null}}return e}async _tryRefreshToken(e){if(this.refreshPromise)return this.logger.debug("Refresh already in progress, returning existing promise"),this.refreshPromise;this.refreshPromise=this._doRefreshToken(e);try{return await this.refreshPromise}finally{this.refreshPromise=null}}async _doRefreshToken(e){this.logger.debug("Refreshing access token");try{const t=await s.refreshAccessToken(this.authEndpoints.token,e,this.authClientId);if(t){this._storeRefreshedTokens(t);const r=s.extractUserInfo(t.access_token);return this.setAuthState({isLoggedIn:!0,userInfo:r,accessToken:t.access_token}),this.logger.info("Token refreshed successfully"),t.access_token}}catch(t){this.logger.warn("Token refresh failed:",t)}throw this.logger.warn("Token refresh failed, keeping tokens for manual retry"),s.createOperationError("Access token expired and unable to refresh. Try logging out and logging in again.","token_refresh_failed")}_storeRefreshedTokens(e){const t=Date.now()+e.expires_in*1e3;localStorage.setItem(this.storageKeys.ACCESS_TOKEN,e.access_token),localStorage.setItem(this.storageKeys.EXPIRES_AT,String(t)),e.refresh_token&&localStorage.setItem(this.storageKeys.REFRESH_TOKEN,e.refresh_token)}async pingApi(){return this.sendApiRequest("GET","/ping")}async fetchModels(){return this.sendApiRequest("GET","/v1/models",void 0,void 0,!0)}async getServerState(){const e=await this.sendApiRequest("GET","/bodhi/v1/info");if(s.isApiResultOperationError(e)||!s.isApiResultSuccess(e))return s.BACKEND_SERVER_NOT_REACHABLE;const t=e.body;switch(t.status){case"ready":return{status:"ready",version:t.version||"unknown"};case"setup":return s.backendServerNotReady("setup",t.version||"unknown");case"resource-admin":return s.backendServerNotReady("resource-admin",t.version||"unknown");case"error":return s.backendServerNotReady("error",t.version||"unknown",t.error?{message:t.error.message,type:t.error.type}:s.SERVER_ERROR_CODES.SERVER_NOT_READY);default:return s.BACKEND_SERVER_NOT_REACHABLE}}async*stream(e,t,r,o,a=!0){this.ensureBodhiext();let i=o||{};if(a){const n=await this._getAccessTokenRaw();if(!n)throw s.createOperationError("Not authenticated. Please log in first.","auth_error");i={...i,Authorization:`Bearer ${n}`}}const h=this.bodhiext.sendStreamRequest(e,t,r,i).getReader();try{for(;;){const{value:n,done:d}=await h.read();if(d||n?.done)break;yield n.body}}catch(n){if(n instanceof Error){if("response"in n){const d=n;throw s.createApiError(n.message,d.response.status,d.response.body)}throw"error"in n,s.createOperationError(n.message,"extension_error")}throw n}finally{h.releaseLock()}}async*streamChat(e,t,r=!0){yield*this.stream("POST","/v1/chat/completions",{model:e,messages:[{role:"user",content:t}],stream:!0},void 0,r)}serialize(){return{extensionId:this.state.type==="extension"&&this.state.extension==="ready"?this.state.extensionId:void 0}}async debug(){return{type:"WindowBodhiextClient",state:this.state,authState:await this.getAuthState(),bodhiextAvailable:this.bodhiext!==null,authClientId:this.authClientId,authServerUrl:this.config.authServerUrl,redirectUri:this.config.redirectUri,userScope:this.config.userScope}}}class _ extends s.BaseFacadeClient{constructor(e,t,r,o){const a={redirectUri:t.redirectUri,authServerUrl:t.authServerUrl||"https://id.getbodhi.app/realms/bodhi",userScope:t.userScope||"scope_user_user",basePath:t.basePath||"/",logLevel:t.logLevel||"warn",initParams:t.initParams};super(e,a,r,o,t.basePath)}createLogger(e){return new s.Logger("WebUIClient",e.logLevel)}createExtClient(e,t){return new f(this.authClientId,e,t,e.basePath)}createDirectClient(e,t,r){return new g({authClientId:e,authServerUrl:t.authServerUrl,redirectUri:t.redirectUri,userScope:t.userScope,logLevel:t.logLevel,storagePrefix:s.STORAGE_PREFIXES.WEB,basePath:t.basePath},r)}async handleOAuthCallback(e,t){return this.connectionMode==="direct"?this.directClient.handleOAuthCallback(e,t):this.extClient.handleOAuthCallback(e,t)}}const p="production";exports.WEB_BUILD_MODE=p;exports.WebUIClient=_;

package/dist/bodhi-web.esm.d.ts

@@ -1 +1,2 @@
 export * from './bodhi-js-sdk/web/src/index'
+export {}

package/dist/bodhi-web.esm.js

@@ -1,7 +1,8 @@
-import { DirectClientBase as C, STORAGE_PREFIXES as f, generateCodeVerifier as g, generateCodeChallenge as y, isApiResultOperationError as T, isApiResultSuccess as E, createStorageKeys as x, EXTENSION_STATE_NOT_INITIALIZED as _, Logger as R, createOAuthEndpoints as A, NOOP_STATE_CALLBACK as k, EXTENSION_STATE_NOT_FOUND as v, PENDING_EXTENSION_READY as O, BACKEND_SERVER_NOT_REACHABLE as d, extractUserInfo as I, refreshAccessToken as b, createOperationError as u, backendServerNotReady as S, SERVER_ERROR_CODES as P, createApiError as U, BaseFacadeClient as N } from "@bodhiapp/bodhi-js-core";
-class L extends C {
+import { DirectClientBase as R, createStoragePrefixWithBasePath as y, STORAGE_PREFIXES as S, generateCodeVerifier as u, generateCodeChallenge as _, isApiResultOperationError as w, isApiResultSuccess as f, createStorageKeys as I, EXTENSION_STATE_NOT_INITIALIZED as p, Logger as T, createOAuthEndpoints as C, NOOP_STATE_CALLBACK as x, createOperationError as h, EXTENSION_STATE_NOT_FOUND as A, PENDING_EXTENSION_READY as k, BACKEND_SERVER_NOT_REACHABLE as g, extractUserInfo as m, refreshAccessToken as v, backendServerNotReady as E, SERVER_ERROR_CODES as b, createApiError as O, BaseFacadeClient as P } from "@bodhiapp/bodhi-js-core";
+class K extends R {
   constructor(e, t) {
-    super({ ...e, storagePrefix: f.DIRECT }, "DirectWebClient", t), this.redirectUri = e.redirectUri;
+    const r = e.basePath || "/", s = y(r, S.DIRECT);
+    super({ ...e, storagePrefix: s }, "DirectWebClient", t), this.redirectUri = e.redirectUri;
   }
   // ============================================================================
   // Authentication (Browser Redirect OAuth)
@@ -10,10 +11,10 @@ class L extends C {
     const e = await this.getAuthState();
     if (e.isLoggedIn)
       return e;
-    const t = await this.requestResourceAccess(), r = `openid profile email roles ${this.userScope} ${t}`, s = g(), i = await y(s), o = g();
+    const t = await this.requestResourceAccess(), r = `openid profile email roles ${this.userScope} ${t}`, s = u(), i = await _(s), o = u();
     localStorage.setItem(this.storageKeys.CODE_VERIFIER, s), localStorage.setItem(this.storageKeys.STATE, o);
-    const a = new URL(this.authEndpoints.authorize);
-    throw a.searchParams.set("client_id", this.authClientId), a.searchParams.set("response_type", "code"), a.searchParams.set("redirect_uri", this.redirectUri), a.searchParams.set("scope", r), a.searchParams.set("code_challenge", i), a.searchParams.set("code_challenge_method", "S256"), a.searchParams.set("state", o), window.location.href = a.toString(), new Error("Redirect initiated");
+    const n = new URL(this.authEndpoints.authorize);
+    throw n.searchParams.set("client_id", this.authClientId), n.searchParams.set("response_type", "code"), n.searchParams.set("redirect_uri", this.redirectUri), n.searchParams.set("scope", r), n.searchParams.set("code_challenge", i), n.searchParams.set("code_challenge_method", "S256"), n.searchParams.set("state", o), window.location.href = n.toString(), new Error("Redirect initiated");
   }
   async handleOAuthCallback(e, t) {
     const r = localStorage.getItem(this.storageKeys.STATE);
@@ -62,9 +63,9 @@ class L extends C {
       {},
       !1
     );
-    if (T(e))
+    if (w(e))
       throw new Error("Failed to get resource access scope from server");
-    if (!E(e))
+    if (!f(e))
       throw new Error("Failed to get resource access scope from server: API error");
     const t = e.body.scope;
     return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE, t), t;
@@ -114,10 +115,15 @@ class L extends C {
     return this.redirectUri;
   }
 }
-const K = 500, F = 5e3, n = x(f.WEB);
+const U = 500, L = 5e3;
+I(S.WEB);
+function N(l = "/") {
+  const e = y(l, S.WEB);
+  return I(e);
+}
 class D {
-  constructor(e, t, r) {
-    this.state = _, this.bodhiext = null, this.refreshPromise = null, this.logger = new R("WindowBodhiextClient", t.logLevel), this.authClientId = e, this.config = t, this.authEndpoints = A(this.config.authServerUrl), this.onStateChange = r ?? k;
+  constructor(e, t, r, s) {
+    this.state = p, this.bodhiext = null, this.refreshPromise = null, this.logger = new T("WindowBodhiextClient", t.logLevel), this.authClientId = e, this.config = t, this.authEndpoints = C(this.config.authServerUrl), this.onStateChange = r ?? x, this.storageKeys = N(s || "/");
   }
   /**
    * Set client state and notify callback
@@ -142,11 +148,11 @@ class D {
   // ============================================================================
   /**
    * Ensure bodhiext is available, attempting to acquire it if not already set
-   * @throws Error if client not initialized
+   * @throws OperationError if client not initialized
    */
   ensureBodhiext() {
     if (!this.bodhiext && window.bodhiext && (this.logger.info("Acquiring window.bodhiext reference"), this.bodhiext = window.bodhiext), !this.bodhiext)
-      throw new Error("Client not initialized");
+      throw h("Client not initialized", "extension_error");
   }
   /**
    * Send extension request via window.bodhiext.sendExtRequest
@@ -172,8 +178,8 @@ class D {
     try {
       let o = s || {};
       if (i) {
-        const h = await this._getAccessTokenRaw();
-        if (!h)
+        const c = await this._getAccessTokenRaw();
+        if (!c)
           return {
             error: {
               message: "Not authenticated. Please log in first.",
@@ -182,7 +188,7 @@ class D {
           };
         o = {
           ...o,
-          Authorization: `Bearer ${h}`
+          Authorization: `Bearer ${c}`
         };
       }
       return await this.bodhiext.sendApiRequest(
@@ -192,11 +198,11 @@ class D {
         o
       );
     } catch (o) {
-      const a = o == null ? void 0 : o.error, h = (a == null ? void 0 : a.message) ?? (o instanceof Error ? o.message : String(o)), c = (a == null ? void 0 : a.type) || "extension_error";
+      const n = o?.error, c = n?.message ?? (o instanceof Error ? o.message : String(o)), a = n?.type || "extension_error";
       return {
         error: {
-          message: h,
-          type: c
+          message: c,
+          type: a
         }
       };
     }
@@ -221,28 +227,27 @@ class D {
    * No extensionId storage/restoration needed - window.bodhiext handle is ephemeral
    */
   async init(e = {}) {
-    var s, i, o, a;
     if (!e.testConnection && !e.selectedConnection)
-      return this.logger.info("No testConnection or selectedConnection, returning not-initialized state"), _;
+      return this.logger.info("No testConnection or selectedConnection, returning not-initialized state"), p;
     if (this.bodhiext && !e.testConnection)
       return this.logger.debug("Already have bodhiext handle, skipping polling"), this.state;
     if (!this.bodhiext) {
-      const h = e.timeoutMs ?? ((i = (s = this.config.initParams) == null ? void 0 : s.extension) == null ? void 0 : i.timeoutMs) ?? F, c = e.intervalMs ?? ((a = (o = this.config.initParams) == null ? void 0 : o.extension) == null ? void 0 : a.intervalMs) ?? K, l = Date.now();
-      if (!await new Promise((p) => {
-        const w = () => {
+      const s = e.timeoutMs ?? this.config.initParams?.extension?.timeoutMs ?? L, i = e.intervalMs ?? this.config.initParams?.extension?.intervalMs ?? U, o = Date.now();
+      if (!await new Promise((c) => {
+        const a = () => {
           if (window.bodhiext) {
-            this.bodhiext = window.bodhiext, p(!0);
+            this.bodhiext = window.bodhiext, c(!0);
             return;
           }
-          if (Date.now() - l >= h) {
-            p(!1);
+          if (Date.now() - o >= s) {
+            c(!1);
             return;
           }
-          setTimeout(w, c);
+          setTimeout(a, i);
         };
-        w();
+        a();
       }))
-        return this.logger.warn("Extension discovery timed out"), this.setState(v), this.state;
+        return this.logger.warn("Extension discovery timed out"), this.setState(A), this.state;
     }
     const t = await this.bodhiext.getExtensionId();
     this.logger.info(`Extension discovered: ${t}`);
@@ -250,14 +255,14 @@ class D {
       type: "extension",
       extension: "ready",
       extensionId: t,
-      server: O
+      server: k
     };
     if (e.testConnection)
       try {
-        const h = await this.getServerState();
-        this.setState({ ...r, server: h }), this.logger.info(`Server connectivity tested: ${h.status}`);
-      } catch (h) {
-        this.logger.error("Failed to get server state:", h), this.setState({ ...r, server: d });
+        const s = await this.getServerState();
+        this.setState({ ...r, server: s }), this.logger.info(`Server connectivity tested: ${s.status}`);
+      } catch (s) {
+        this.logger.error("Failed to get server state:", s), this.setState({ ...r, server: g });
       }
     else
       this.setState(r);
@@ -275,10 +280,10 @@ class D {
     const e = await this.bodhiext.sendApiRequest("POST", "/bodhi/v1/apps/request-access", {
       app_client_id: this.authClientId
     });
-    if (!E(e))
+    if (!f(e))
       throw new Error("Failed to get resource access scope: API error");
     const t = e.body.scope;
-    return localStorage.setItem(n.RESOURCE_SCOPE, t), t;
+    return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE, t), t;
   }
   /**
    * Login via browser redirect OAuth2 + PKCE flow
@@ -289,9 +294,9 @@ class D {
     if (e.isLoggedIn)
       return e;
     this.ensureBodhiext();
-    const t = await this.requestResourceAccess(), r = g(), s = await y(r), i = g();
-    localStorage.setItem(n.CODE_VERIFIER, r), localStorage.setItem(n.STATE, i);
-    const o = ["openid", "profile", "email", "roles", this.config.userScope, t], a = new URLSearchParams({
+    const t = await this.requestResourceAccess(), r = u(), s = await _(r), i = u();
+    localStorage.setItem(this.storageKeys.CODE_VERIFIER, r), localStorage.setItem(this.storageKeys.STATE, i);
+    const o = ["openid", "profile", "email", "roles", this.config.userScope, t], n = new URLSearchParams({
       response_type: "code",
       client_id: this.authClientId,
       redirect_uri: this.config.redirectUri,
@@ -299,8 +304,8 @@ class D {
       state: i,
       code_challenge: s,
       code_challenge_method: "S256"
-    }), h = `${this.authEndpoints.authorize}?${a}`;
-    return window.location.href = h, new Promise(() => {
+    }), c = `${this.authEndpoints.authorize}?${n}`;
+    return window.location.href = c, new Promise(() => {
     });
   }
   /**
@@ -309,10 +314,10 @@ class D {
    * @returns AuthLoggedIn with login state and user info
    */
   async handleOAuthCallback(e, t) {
-    const r = localStorage.getItem(n.STATE);
+    const r = localStorage.getItem(this.storageKeys.STATE);
     if (!r || r !== t)
       throw new Error("Invalid state parameter - possible CSRF attack");
-    await this.exchangeCodeForTokens(e), localStorage.removeItem(n.CODE_VERIFIER), localStorage.removeItem(n.STATE);
+    await this.exchangeCodeForTokens(e), localStorage.removeItem(this.storageKeys.CODE_VERIFIER), localStorage.removeItem(this.storageKeys.STATE);
     const s = await this.getAuthState();
     if (!s.isLoggedIn)
       throw new Error("Login failed");
@@ -322,7 +327,7 @@ class D {
    * Exchange authorization code for tokens
    */
   async exchangeCodeForTokens(e) {
-    const t = localStorage.getItem(n.CODE_VERIFIER);
+    const t = localStorage.getItem(this.storageKeys.CODE_VERIFIER);
     if (!t)
       throw new Error("Code verifier not found");
     const r = new URLSearchParams({
@@ -345,9 +350,9 @@ class D {
     const i = await s.json();
     if (!i.access_token)
       throw new Error("No access token received");
-    if (localStorage.setItem(n.ACCESS_TOKEN, i.access_token), i.refresh_token && localStorage.setItem(n.REFRESH_TOKEN, i.refresh_token), i.expires_in) {
+    if (localStorage.setItem(this.storageKeys.ACCESS_TOKEN, i.access_token), i.refresh_token && localStorage.setItem(this.storageKeys.REFRESH_TOKEN, i.refresh_token), i.expires_in) {
       const o = Date.now() + i.expires_in * 1e3;
-      localStorage.setItem(n.EXPIRES_AT, o.toString());
+      localStorage.setItem(this.storageKeys.EXPIRES_AT, o.toString());
     }
   }
   /**
@@ -355,7 +360,7 @@ class D {
    * @returns AuthLoggedOut with logged out state
    */
   async logout() {
-    const e = localStorage.getItem(n.REFRESH_TOKEN);
+    const e = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
     if (e)
       try {
         const r = new URLSearchParams({
@@ -373,7 +378,7 @@ class D {
       } catch (r) {
         this.logger.warn("Token revocation failed:", r);
       }
-    localStorage.removeItem(n.ACCESS_TOKEN), localStorage.removeItem(n.REFRESH_TOKEN), localStorage.removeItem(n.EXPIRES_AT), localStorage.removeItem(n.CODE_VERIFIER), localStorage.removeItem(n.STATE), localStorage.removeItem(n.RESOURCE_SCOPE);
+    localStorage.removeItem(this.storageKeys.ACCESS_TOKEN), localStorage.removeItem(this.storageKeys.REFRESH_TOKEN), localStorage.removeItem(this.storageKeys.EXPIRES_AT), localStorage.removeItem(this.storageKeys.CODE_VERIFIER), localStorage.removeItem(this.storageKeys.STATE), localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);
     const t = {
       isLoggedIn: !1
     };
@@ -387,7 +392,7 @@ class D {
     if (!e)
       return { isLoggedIn: !1 };
     try {
-      return { isLoggedIn: !0, userInfo: I(e), accessToken: e };
+      return { isLoggedIn: !0, userInfo: m(e), accessToken: e };
     } catch (t) {
       return this.logger.error("Failed to parse token:", t), { isLoggedIn: !1 };
     }
@@ -397,13 +402,13 @@ class D {
    * Returns null if not logged in or token expired
    */
   async _getAccessTokenRaw() {
-    const e = localStorage.getItem(n.ACCESS_TOKEN), t = localStorage.getItem(n.EXPIRES_AT);
+    const e = localStorage.getItem(this.storageKeys.ACCESS_TOKEN), t = localStorage.getItem(this.storageKeys.EXPIRES_AT);
     if (!e)
       return null;
     if (t) {
       const r = parseInt(t, 10);
       if (Date.now() >= r - 5 * 1e3) {
-        const s = localStorage.getItem(n.REFRESH_TOKEN);
+        const s = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
         return s ? this._tryRefreshToken(s) : null;
       }
     }
@@ -429,14 +434,14 @@ class D {
   async _doRefreshToken(e) {
     this.logger.debug("Refreshing access token");
     try {
-      const t = await b(
+      const t = await v(
         this.authEndpoints.token,
         e,
         this.authClientId
       );
       if (t) {
         this._storeRefreshedTokens(t);
-        const r = I(t.access_token);
+        const r = m(t.access_token);
         return this.setAuthState({
           isLoggedIn: !0,
           userInfo: r,
@@ -446,7 +451,7 @@ class D {
     } catch (t) {
       this.logger.warn("Token refresh failed:", t);
     }
-    throw this.logger.warn("Token refresh failed, keeping tokens for manual retry"), u(
+    throw this.logger.warn("Token refresh failed, keeping tokens for manual retry"), h(
       "Access token expired and unable to refresh. Try logging out and logging in again.",
       "token_refresh_failed"
     );
@@ -456,7 +461,7 @@ class D {
    */
   _storeRefreshedTokens(e) {
     const t = Date.now() + e.expires_in * 1e3;
-    localStorage.setItem(n.ACCESS_TOKEN, e.access_token), localStorage.setItem(n.EXPIRES_AT, String(t)), e.refresh_token && localStorage.setItem(n.REFRESH_TOKEN, e.refresh_token);
+    localStorage.setItem(this.storageKeys.ACCESS_TOKEN, e.access_token), localStorage.setItem(this.storageKeys.EXPIRES_AT, String(t)), e.refresh_token && localStorage.setItem(this.storageKeys.REFRESH_TOKEN, e.refresh_token);
   }
   /**
    * Ping API
@@ -482,26 +487,26 @@ class D {
    */
   async getServerState() {
     const e = await this.sendApiRequest("GET", "/bodhi/v1/info");
-    if (T(e))
-      return d;
-    if (!E(e))
-      return d;
+    if (w(e))
+      return g;
+    if (!f(e))
+      return g;
     const t = e.body;
     switch (t.status) {
       case "ready":
         return { status: "ready", version: t.version || "unknown" };
       case "setup":
-        return S("setup", t.version || "unknown");
+        return E("setup", t.version || "unknown");
       case "resource-admin":
-        return S("resource-admin", t.version || "unknown");
+        return E("resource-admin", t.version || "unknown");
       case "error":
-        return S(
+        return E(
           "error",
           t.version || "unknown",
-          t.error ? { message: t.error.message, type: t.error.type } : P.SERVER_NOT_READY
+          t.error ? { message: t.error.message, type: t.error.type } : b.SERVER_NOT_READY
         );
       default:
-        return d;
+        return g;
     }
   }
   /**
@@ -512,33 +517,33 @@ class D {
     this.ensureBodhiext();
     let o = s || {};
     if (i) {
-      const c = await this._getAccessTokenRaw();
-      if (!c)
-        throw new Error("Not authenticated. Please log in first.");
+      const a = await this._getAccessTokenRaw();
+      if (!a)
+        throw h("Not authenticated. Please log in first.", "auth_error");
       o = {
         ...o,
-        Authorization: `Bearer ${c}`
+        Authorization: `Bearer ${a}`
       };
     }
-    const h = this.bodhiext.sendStreamRequest(e, t, r, o).getReader();
+    const c = this.bodhiext.sendStreamRequest(e, t, r, o).getReader();
     try {
       for (; ; ) {
-        const { value: c, done: l } = await h.read();
-        if (l || c != null && c.done)
+        const { value: a, done: d } = await c.read();
+        if (d || a?.done)
           break;
-        yield c.body;
+        yield a.body;
       }
-    } catch (c) {
-      if (c instanceof Error) {
-        if ("response" in c) {
-          const l = c;
-          throw U(c.message, l.response.status, l.response.body);
+    } catch (a) {
+      if (a instanceof Error) {
+        if ("response" in a) {
+          const d = a;
+          throw O(a.message, d.response.status, d.response.body);
         }
-        throw "error" in c ? u(c.message, "extension_error") : u(c.message, "extension_error");
+        throw "error" in a ? h(a.message, "extension_error") : h(a.message, "extension_error");
       }
-      throw c;
+      throw a;
     } finally {
-      h.releaseLock();
+      c.releaseLock();
     }
   }
   /**
@@ -581,32 +586,34 @@ class D {
     };
   }
 }
-class V extends N {
+class B extends P {
   constructor(e, t, r, s) {
     const i = {
       redirectUri: t.redirectUri,
       authServerUrl: t.authServerUrl || "https://id.getbodhi.app/realms/bodhi",
       userScope: t.userScope || "scope_user_user",
+      basePath: t.basePath || "/",
       logLevel: t.logLevel || "warn",
       initParams: t.initParams
     };
-    super(e, i, r, s);
+    super(e, i, r, s, t.basePath);
   }
   createLogger(e) {
-    return new R("WebUIClient", e.logLevel);
+    return new T("WebUIClient", e.logLevel);
   }
   createExtClient(e, t) {
-    return new D(this.authClientId, e, t);
+    return new D(this.authClientId, e, t, e.basePath);
   }
   createDirectClient(e, t, r) {
-    return new L(
+    return new K(
       {
         authClientId: e,
         authServerUrl: t.authServerUrl,
         redirectUri: t.redirectUri,
         userScope: t.userScope,
         logLevel: t.logLevel,
-        storagePrefix: f.WEB
+        storagePrefix: S.WEB,
+        basePath: t.basePath
       },
       r
     );
@@ -618,6 +625,8 @@ class V extends N {
     return this.connectionMode === "direct" ? this.directClient.handleOAuthCallback(e, t) : this.extClient.handleOAuthCallback(e, t);
   }
 }
+const q = "production";
 export {
-  V as WebUIClient
+  q as WEB_BUILD_MODE,
+  B as WebUIClient
 };

package/dist/setup-modal/src/types/message-types.d.ts

@@ -1,5 +1,4 @@
 import { SetupState } from './state';
-
 /**
  * Central registry mapping message types to their payload/response shapes
  * Single source of truth - everything else is inferred!

package/dist/setup-modal/src/types/protocol.d.ts

@@ -1,5 +1,4 @@
 import { MessageType, RequestPayload, ResponsePayload } from './message-types';
-
 /** Branded type for type-safe request IDs */
 export type RequestId = string & {
     readonly __brand: 'RequestId';

package/dist/setup-modal/src/types/state.d.ts

@@ -2,7 +2,6 @@ import { Browser, EnvState, OS } from './platform';
 import { ExtensionState } from './extension';
 import { ServerState } from './server';
 import { LnaServerState, LnaState } from './lna';
-
 export declare enum SetupStep {
     PLATFORM_CHECK = "platform-check",
     SERVER_SETUP = "server-setup",

package/dist/setup-modal/src/types/type-guards.d.ts

@@ -2,7 +2,6 @@ import { ExtensionState, ExtensionStateNotReady, ExtensionStateReady } from './e
 import { ServerState, ServerStateError, ServerStatePending, ServerStateReachable, ServerStateReady, ServerStateUnreachable } from './server';
 import { LnaServerState, LnaServerStateError, LnaServerStatePending, LnaServerStateReady, LnaServerStateResourceAdmin, LnaServerStateSetup, LnaState, LnaStateDenied, LnaStateGranted, LnaStatePrompt, LnaStateSkipped, LnaStateUnreachable, LnaStateUnsupported } from './lna';
 import { Browser, NotSupportedBrowser, NotSupportedOS, OS, SupportedBrowser, SupportedOS } from './platform';
-
 export declare function isExtensionStateReady(ext: ExtensionState): ext is ExtensionStateReady;
 export declare function isExtensionStateNotReady(ext: ExtensionState): ext is ExtensionStateNotReady;
 export declare function isServerStateReady(server: ServerState): server is ServerStateReady;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bodhiapp/bodhi-js",
-  "version": "0.0.3",
+  "version": "0.0.5",
   "description": "Web SDK for Bodhi Browser - window.bodhiext communication",
   "type": "module",
   "main": "dist/bodhi-web.cjs.js",
@@ -34,11 +34,12 @@
     "lint:fix": "prettier --write . && eslint . --ext .js,.jsx,.ts,.tsx --fix"
   },
   "dependencies": {
-    "@bodhiapp/bodhi-js-core": "0.0.3",
-    "@bodhiapp/ts-client": "^0.1.7"
+    "@bodhiapp/bodhi-js-core": "0.0.5",
+    "@bodhiapp/ts-client": "0.1.8"
   },
   "devDependencies": {
     "@eslint/js": "^9.23.0",
+    "@types/node": "^20.19.10",
     "@typescript-eslint/eslint-plugin": "8.28.0",
     "@typescript-eslint/parser": "8.28.0",
     "eslint": "9.32.0",
@@ -48,7 +49,7 @@
     "rimraf": "^6.0.1",
     "tslib": "^2.6.2",
     "typescript": "^5.8.3",
-    "vite": "^5.2.0",
-    "vite-plugin-dts": "^3.9.1"
+    "vite": "^7.1.12",
+    "vite-plugin-dts": "^4.5.4"
   }
 }