@bodhiapp/bodhi-js 0.0.4 → 0.0.5

package/dist/bodhi-browser-ext/src/types/bodhiext.d.ts

@@ -1,5 +1,4 @@
 import { OpenAiApiError, PingResponse, CreateChatCompletionRequest, CreateChatCompletionResponse, CreateChatCompletionStreamResponse } from '@bodhiapp/ts-client';
-
 /**
  * HTTP response wrapper - body can be success type OR error type
  * Use isApiErrorResponse() to narrow the type based on status

package/dist/bodhi-browser-ext/src/types/protocol.d.ts

@@ -1,6 +1,5 @@
 import { OpenAiApiError, ErrorBody } from '@bodhiapp/ts-client';
 import { ApiResponse, ServerStateInfo } from './bodhiext';
-
 /**
  * Validate OpenAI API error body structure
  * { error: { message: string, type: string } }

package/dist/bodhi-js-sdk/core/src/errors.d.ts

@@ -1,6 +1,5 @@
 import { ApiError, OperationError } from '../../../bodhi-browser-ext/src/types';
 import { OpenAiApiError } from '@bodhiapp/ts-client';
-
 /**
  * Create API error (HTTP 4xx/5xx from server)
  * Thrown for streaming responses when server returns error

package/dist/bodhi-js-sdk/core/src/facade-client-base.d.ts

@@ -3,7 +3,6 @@ import { IConnectionClient } from './interface';
 import { Logger } from './logger';
 import { BodhiClientUserPrefsManager } from './storage';
 import { ApiResponseResult, AuthLoggedIn, AuthLoggedOut, AuthState, BackendServerState, ClientState, ConnectionMode, DirectState, ExtensionState, InitParams, SerializedClientState, SerializedDirectState, SerializedExtensionState, StateChange, StateChangeCallback } from './types';
-
 /**
  * Base facade client with common delegation logic
  *

package/dist/bodhi-js-sdk/core/src/interface.d.ts

@@ -1,6 +1,5 @@
 import { CreateChatCompletionStreamResponse } from '@bodhiapp/ts-client';
 import { ApiResponseResult, AuthLoggedIn, AuthLoggedOut, AuthState, BackendServerState, ClientState, ConnectionMode, DirectState, ExtensionState, InitParams, StateChangeCallback } from './types';
-
 /**
  * ConnectionClient - Base interface for all client implementations
  *

package/dist/bodhi-js-sdk/core/src/logger.d.ts

@@ -1,5 +1,4 @@
 import { LogLevel } from './types/config';
-
 export declare class Logger {
     private prefix;
     private level;

package/dist/bodhi-js-sdk/core/src/oauth.d.ts

@@ -1,5 +1,4 @@
 import { UserInfo } from './types';
-
 /**
  * Base64 URL encode a buffer (for PKCE)
  */

package/dist/bodhi-js-sdk/core/src/onboarding/config.d.ts

@@ -1,5 +1,4 @@
 import { Browser, OS } from '../../../../setup-modal/src/types';
-
 /**
  * Browser configurations with extension store URLs
  */

package/dist/bodhi-js-sdk/core/src/onboarding/modal.d.ts

@@ -1,5 +1,4 @@
 import { MessageType, RequestMessage, ResponsePayload } from '../../../../setup-modal/src/types';
-
 import type * as ModalTypes from '@bodhiapp/setup-modal/types';
 /**
  * Async handler for modal requests

package/dist/bodhi-js-sdk/core/src/onboarding/protocol-utils.d.ts

@@ -1,5 +1,4 @@
 import { MessageType, RequestPayload, ResponsePayload, RequestMessage, RequestId } from '../../../../setup-modal/src/types';
-
 /** Build fire-and-forget event message */
 export declare function buildEvent<T extends MessageType>(type: T, payload: RequestPayload<T>): {
     kind: "event";

package/dist/bodhi-js-sdk/core/src/platform.d.ts

@@ -1,5 +1,4 @@
 import { BrowserInfo, OSInfo } from './types';
-
 /**
  * Detects the current browser using UAParser.js
  */

package/dist/bodhi-js-sdk/core/src/types/api.d.ts

@@ -1,6 +1,5 @@
 import { ApiResponse, OperationErrorResponse } from '../../../../bodhi-browser-ext/src/types';
 import { OpenAiApiError } from '@bodhiapp/ts-client';
-
 /**
  * Public API result type - discriminated union without protocol fields
  *

package/dist/bodhi-js-sdk/core/src/types/callback.d.ts

@@ -1,6 +1,5 @@
 import { ClientState } from './client-state';
 import { AuthState } from './user-info';
-
 /**
  * Discriminated union for state changes.
  * Allows single callback to handle both client state and auth state changes.

package/dist/bodhi-js-sdk/core/src/types/client-state.d.ts

@@ -1,5 +1,4 @@
 import { OperationErrorResponse } from '../../../../bodhi-browser-ext/src/types';
-
 /**
  * Serialized direct client state for persistence
  * Stores minimal state needed to restore direct connection

package/dist/bodhi-js-sdk/core/src/types/config.d.ts

@@ -1,5 +1,4 @@
 import { UserScope } from './user-info';
-
 /**
  * Log levels for client logging
  */

package/dist/bodhi-js-sdk/core/src/types/platform.d.ts

@@ -1,5 +1,4 @@
 import { BrowserType, OSType } from '../../../../setup-modal/src/types';
-
 /**
  * Browser detection result
  */

package/dist/bodhi-js-sdk/web/src/constants.d.ts

@@ -1,5 +1,4 @@
 import { StorageKeys } from '../../core/src/index.ts';
-
 export declare const POLL_INTERVAL = 500;
 export declare const POLL_TIMEOUT = 5000;
 /**

package/dist/bodhi-js-sdk/web/src/direct-client.d.ts

@@ -1,5 +1,4 @@
 import { DirectClientBase, AuthLoggedIn, AuthLoggedOut, DirectClientBaseConfig, StateChangeCallback } from '../../core/src/index.ts';
-
 /**
  * Configuration for DirectWebClient
  */

package/dist/bodhi-js-sdk/web/src/ext-client.d.ts

@@ -1,7 +1,6 @@
 import { ApiResponseResult, AuthLoggedIn, AuthLoggedOut, AuthState, BackendServerState, ClientState, ExtensionState, IExtensionClient, InitParams, StateChangeCallback } from '../../core/src/index.ts';
 import { CreateChatCompletionStreamResponse } from '@bodhiapp/ts-client';
 import { WebClientConfig } from './facade-client';
-
 export type SerializedWebExtensionState = {
     extensionId?: string;
 };
@@ -39,7 +38,7 @@ export declare class WindowBodhiextClient implements IExtensionClient {
     setStateCallback(callback: StateChangeCallback): void;
     /**
      * Ensure bodhiext is available, attempting to acquire it if not already set
-     * @throws Error if client not initialized
+     * @throws OperationError if client not initialized
      */
     private ensureBodhiext;
     /**

package/dist/bodhi-js-sdk/web/src/facade-client.d.ts

@@ -1,7 +1,6 @@
 import { BaseFacadeClient, Logger, AuthLoggedIn, IWebUIClient, LogLevel, StateChange, StateChangeCallback, UserScope } from '../../core/src/index.ts';
 import { DirectWebClient } from './direct-client';
 import { WindowBodhiextClient } from './ext-client';
-
 /**
  * Configuration for WebClient OAuth
  */

package/dist/bodhi-js-sdk/web/src/index.d.ts

@@ -1,6 +1,5 @@
 import { SerializedWebExtensionState } from './ext-client';
 import { IWebUIClient } from './interface';
-
 export { WebUIClient } from './facade-client';
 export type { IWebUIClient, SerializedWebExtensionState };
 export { BUILD_MODE as WEB_BUILD_MODE } from './build-info';

package/dist/bodhi-web.cjs.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const s=require("@bodhiapp/bodhi-js-core");class E extends s.DirectClientBase{constructor(e,t){const r=e.basePath||"/",o=s.createStoragePrefixWithBasePath(r,s.STORAGE_PREFIXES.DIRECT);super({...e,storagePrefix:o},"DirectWebClient",t),this.redirectUri=e.redirectUri}async login(){const e=await this.getAuthState();if(e.isLoggedIn)return e;const t=await this.requestResourceAccess(),r=`openid profile email roles ${this.userScope} ${t}`,o=s.generateCodeVerifier(),a=await s.generateCodeChallenge(o),i=s.generateCodeVerifier();localStorage.setItem(this.storageKeys.CODE_VERIFIER,o),localStorage.setItem(this.storageKeys.STATE,i);const n=new URL(this.authEndpoints.authorize);throw n.searchParams.set("client_id",this.authClientId),n.searchParams.set("response_type","code"),n.searchParams.set("redirect_uri",this.redirectUri),n.searchParams.set("scope",r),n.searchParams.set("code_challenge",a),n.searchParams.set("code_challenge_method","S256"),n.searchParams.set("state",i),window.location.href=n.toString(),new Error("Redirect initiated")}async handleOAuthCallback(e,t){const r=localStorage.getItem(this.storageKeys.STATE);if(!r||r!==t)throw new Error("Invalid state parameter - possible CSRF attack");await this.exchangeCodeForTokens(e),localStorage.removeItem(this.storageKeys.CODE_VERIFIER),localStorage.removeItem(this.storageKeys.STATE);const o=await this.getAuthState();if(!o.isLoggedIn)throw new Error("Login failed");const a=o;return this.setAuthState(a),a}async logout(){const e=localStorage.getItem(this.storageKeys.REFRESH_TOKEN);if(e)try{const r=new URLSearchParams({token:e,client_id:this.authClientId,token_type_hint:"refresh_token"});await fetch(this.authEndpoints.revoke,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r})}catch(r){this.logger.warn("Token revocation failed:",r)}localStorage.removeItem(this.storageKeys.ACCESS_TOKEN),localStorage.removeItem(this.storageKeys.REFRESH_TOKEN),localStorage.removeItem(this.storageKeys.EXPIRES_AT),localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);const t={isLoggedIn:!1};return this.setAuthState(t),t}async requestResourceAccess(){const e=await this.sendApiRequest("POST","/bodhi/v1/apps/request-access",{app_client_id:this.authClientId},{},!1);if(s.isApiResultOperationError(e))throw new Error("Failed to get resource access scope from server");if(!s.isApiResultSuccess(e))throw new Error("Failed to get resource access scope from server: API error");const t=e.body.scope;return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE,t),t}async exchangeCodeForTokens(e){const t=localStorage.getItem(this.storageKeys.CODE_VERIFIER);if(!t)throw new Error("Code verifier not found");const r=await fetch(this.authEndpoints.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:e,redirect_uri:this.redirectUri,client_id:this.authClientId,code_verifier:t})});if(!r.ok){const a=await r.text();throw new Error(`Token exchange failed: ${r.status} ${a}`)}const o=await r.json();if(localStorage.setItem(this.storageKeys.ACCESS_TOKEN,o.access_token),o.refresh_token&&localStorage.setItem(this.storageKeys.REFRESH_TOKEN,o.refresh_token),o.expires_in){const a=Date.now()+o.expires_in*1e3;localStorage.setItem(this.storageKeys.EXPIRES_AT,a.toString())}}async _storageGet(e){return localStorage.getItem(e)}async _storageSet(e){Object.entries(e).forEach(([t,r])=>{localStorage.setItem(t,String(r))})}async _storageRemove(e){e.forEach(t=>localStorage.removeItem(t))}_getRedirectUri(){return this.redirectUri}}const S=500,f=5e3;s.createStorageKeys(s.STORAGE_PREFIXES.WEB);function _(d="/"){const e=s.createStoragePrefixWithBasePath(d,s.STORAGE_PREFIXES.WEB);return s.createStorageKeys(e)}class p{constructor(e,t,r,o){this.state=s.EXTENSION_STATE_NOT_INITIALIZED,this.bodhiext=null,this.refreshPromise=null,this.logger=new s.Logger("WindowBodhiextClient",t.logLevel),this.authClientId=e,this.config=t,this.authEndpoints=s.createOAuthEndpoints(this.config.authServerUrl),this.onStateChange=r??s.NOOP_STATE_CALLBACK,this.storageKeys=_(o||"/")}setState(e){this.state=e,this.logger.info(`{state: ${JSON.stringify(e)}} - Setting client state`),this.onStateChange({type:"client-state",state:e})}setAuthState(e){this.onStateChange({type:"auth-state",state:e})}setStateCallback(e){this.onStateChange=e}ensureBodhiext(){if(!this.bodhiext&&window.bodhiext&&(this.logger.info("Acquiring window.bodhiext reference"),this.bodhiext=window.bodhiext),!this.bodhiext)throw new Error("Client not initialized")}async sendExtRequest(e,t){return this.ensureBodhiext(),this.bodhiext.sendExtRequest(e,t)}async sendApiRequest(e,t,r,o,a){try{this.ensureBodhiext()}catch(i){return{error:{message:i instanceof Error?i.message:String(i),type:"extension_error"}}}try{let i=o||{};if(a){const h=await this._getAccessTokenRaw();if(!h)return{error:{message:"Not authenticated. Please log in first.",type:"extension_error"}};i={...i,Authorization:`Bearer ${h}`}}return await this.bodhiext.sendApiRequest(e,t,r,i)}catch(i){const n=i==null?void 0:i.error,h=(n==null?void 0:n.message)??(i instanceof Error?i.message:String(i)),c=(n==null?void 0:n.type)||"extension_error";return{error:{message:h,type:c}}}}getState(){return this.state}isClientInitialized(){return this.state.extension==="ready"}isServerReady(){return this.isClientInitialized()&&this.state.server.status==="ready"}async init(e={}){var o,a,i,n;if(!e.testConnection&&!e.selectedConnection)return this.logger.info("No testConnection or selectedConnection, returning not-initialized state"),s.EXTENSION_STATE_NOT_INITIALIZED;if(this.bodhiext&&!e.testConnection)return this.logger.debug("Already have bodhiext handle, skipping polling"),this.state;if(!this.bodhiext){const h=e.timeoutMs??((a=(o=this.config.initParams)==null?void 0:o.extension)==null?void 0:a.timeoutMs)??f,c=e.intervalMs??((n=(i=this.config.initParams)==null?void 0:i.extension)==null?void 0:n.intervalMs)??S,l=Date.now();if(!await new Promise(g=>{const u=()=>{if(window.bodhiext){this.bodhiext=window.bodhiext,g(!0);return}if(Date.now()-l>=h){g(!1);return}setTimeout(u,c)};u()}))return this.logger.warn("Extension discovery timed out"),this.setState(s.EXTENSION_STATE_NOT_FOUND),this.state}const t=await this.bodhiext.getExtensionId();this.logger.info(`Extension discovered: ${t}`);const r={type:"extension",extension:"ready",extensionId:t,server:s.PENDING_EXTENSION_READY};if(e.testConnection)try{const h=await this.getServerState();this.setState({...r,server:h}),this.logger.info(`Server connectivity tested: ${h.status}`)}catch(h){this.logger.error("Failed to get server state:",h),this.setState({...r,server:s.BACKEND_SERVER_NOT_REACHABLE})}else this.setState(r);return this.state}async requestResourceAccess(){this.ensureBodhiext();const e=await this.bodhiext.sendApiRequest("POST","/bodhi/v1/apps/request-access",{app_client_id:this.authClientId});if(!s.isApiResultSuccess(e))throw new Error("Failed to get resource access scope: API error");const t=e.body.scope;return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE,t),t}async login(){const e=await this.getAuthState();if(e.isLoggedIn)return e;this.ensureBodhiext();const t=await this.requestResourceAccess(),r=s.generateCodeVerifier(),o=await s.generateCodeChallenge(r),a=s.generateCodeVerifier();localStorage.setItem(this.storageKeys.CODE_VERIFIER,r),localStorage.setItem(this.storageKeys.STATE,a);const i=["openid","profile","email","roles",this.config.userScope,t],n=new URLSearchParams({response_type:"code",client_id:this.authClientId,redirect_uri:this.config.redirectUri,scope:i.join(" "),state:a,code_challenge:o,code_challenge_method:"S256"}),h=`${this.authEndpoints.authorize}?${n}`;return window.location.href=h,new Promise(()=>{})}async handleOAuthCallback(e,t){const r=localStorage.getItem(this.storageKeys.STATE);if(!r||r!==t)throw new Error("Invalid state parameter - possible CSRF attack");await this.exchangeCodeForTokens(e),localStorage.removeItem(this.storageKeys.CODE_VERIFIER),localStorage.removeItem(this.storageKeys.STATE);const o=await this.getAuthState();if(!o.isLoggedIn)throw new Error("Login failed");return this.setAuthState(o),o}async exchangeCodeForTokens(e){const t=localStorage.getItem(this.storageKeys.CODE_VERIFIER);if(!t)throw new Error("Code verifier not found");const r=new URLSearchParams({grant_type:"authorization_code",client_id:this.authClientId,code:e,redirect_uri:this.config.redirectUri,code_verifier:t}),o=await fetch(this.authEndpoints.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r});if(!o.ok){const i=await o.text();throw new Error(`Token exchange failed: ${o.status} ${i}`)}const a=await o.json();if(!a.access_token)throw new Error("No access token received");if(localStorage.setItem(this.storageKeys.ACCESS_TOKEN,a.access_token),a.refresh_token&&localStorage.setItem(this.storageKeys.REFRESH_TOKEN,a.refresh_token),a.expires_in){const i=Date.now()+a.expires_in*1e3;localStorage.setItem(this.storageKeys.EXPIRES_AT,i.toString())}}async logout(){const e=localStorage.getItem(this.storageKeys.REFRESH_TOKEN);if(e)try{const r=new URLSearchParams({token:e,client_id:this.authClientId,token_type_hint:"refresh_token"});await fetch(this.authEndpoints.revoke,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r})}catch(r){this.logger.warn("Token revocation failed:",r)}localStorage.removeItem(this.storageKeys.ACCESS_TOKEN),localStorage.removeItem(this.storageKeys.REFRESH_TOKEN),localStorage.removeItem(this.storageKeys.EXPIRES_AT),localStorage.removeItem(this.storageKeys.CODE_VERIFIER),localStorage.removeItem(this.storageKeys.STATE),localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);const t={isLoggedIn:!1};return this.setAuthState(t),t}async getAuthState(){const e=await this._getAccessTokenRaw();if(!e)return{isLoggedIn:!1};try{return{isLoggedIn:!0,userInfo:s.extractUserInfo(e),accessToken:e}}catch(t){return this.logger.error("Failed to parse token:",t),{isLoggedIn:!1}}}async _getAccessTokenRaw(){const e=localStorage.getItem(this.storageKeys.ACCESS_TOKEN),t=localStorage.getItem(this.storageKeys.EXPIRES_AT);if(!e)return null;if(t){const r=parseInt(t,10);if(Date.now()>=r-5*1e3){const o=localStorage.getItem(this.storageKeys.REFRESH_TOKEN);return o?this._tryRefreshToken(o):null}}return e}async _tryRefreshToken(e){if(this.refreshPromise)return this.logger.debug("Refresh already in progress, returning existing promise"),this.refreshPromise;this.refreshPromise=this._doRefreshToken(e);try{return await this.refreshPromise}finally{this.refreshPromise=null}}async _doRefreshToken(e){this.logger.debug("Refreshing access token");try{const t=await s.refreshAccessToken(this.authEndpoints.token,e,this.authClientId);if(t){this._storeRefreshedTokens(t);const r=s.extractUserInfo(t.access_token);return this.setAuthState({isLoggedIn:!0,userInfo:r,accessToken:t.access_token}),this.logger.info("Token refreshed successfully"),t.access_token}}catch(t){this.logger.warn("Token refresh failed:",t)}throw this.logger.warn("Token refresh failed, keeping tokens for manual retry"),s.createOperationError("Access token expired and unable to refresh. Try logging out and logging in again.","token_refresh_failed")}_storeRefreshedTokens(e){const t=Date.now()+e.expires_in*1e3;localStorage.setItem(this.storageKeys.ACCESS_TOKEN,e.access_token),localStorage.setItem(this.storageKeys.EXPIRES_AT,String(t)),e.refresh_token&&localStorage.setItem(this.storageKeys.REFRESH_TOKEN,e.refresh_token)}async pingApi(){return this.sendApiRequest("GET","/ping")}async fetchModels(){return this.sendApiRequest("GET","/v1/models",void 0,void 0,!0)}async getServerState(){const e=await this.sendApiRequest("GET","/bodhi/v1/info");if(s.isApiResultOperationError(e)||!s.isApiResultSuccess(e))return s.BACKEND_SERVER_NOT_REACHABLE;const t=e.body;switch(t.status){case"ready":return{status:"ready",version:t.version||"unknown"};case"setup":return s.backendServerNotReady("setup",t.version||"unknown");case"resource-admin":return s.backendServerNotReady("resource-admin",t.version||"unknown");case"error":return s.backendServerNotReady("error",t.version||"unknown",t.error?{message:t.error.message,type:t.error.type}:s.SERVER_ERROR_CODES.SERVER_NOT_READY);default:return s.BACKEND_SERVER_NOT_REACHABLE}}async*stream(e,t,r,o,a=!0){this.ensureBodhiext();let i=o||{};if(a){const c=await this._getAccessTokenRaw();if(!c)throw new Error("Not authenticated. Please log in first.");i={...i,Authorization:`Bearer ${c}`}}const h=this.bodhiext.sendStreamRequest(e,t,r,i).getReader();try{for(;;){const{value:c,done:l}=await h.read();if(l||c!=null&&c.done)break;yield c.body}}catch(c){if(c instanceof Error){if("response"in c){const l=c;throw s.createApiError(c.message,l.response.status,l.response.body)}throw"error"in c,s.createOperationError(c.message,"extension_error")}throw c}finally{h.releaseLock()}}async*streamChat(e,t,r=!0){yield*this.stream("POST","/v1/chat/completions",{model:e,messages:[{role:"user",content:t}],stream:!0},void 0,r)}serialize(){return{extensionId:this.state.type==="extension"&&this.state.extension==="ready"?this.state.extensionId:void 0}}async debug(){return{type:"WindowBodhiextClient",state:this.state,authState:await this.getAuthState(),bodhiextAvailable:this.bodhiext!==null,authClientId:this.authClientId,authServerUrl:this.config.authServerUrl,redirectUri:this.config.redirectUri,userScope:this.config.userScope}}}class y extends s.BaseFacadeClient{constructor(e,t,r,o){const a={redirectUri:t.redirectUri,authServerUrl:t.authServerUrl||"https://id.getbodhi.app/realms/bodhi",userScope:t.userScope||"scope_user_user",basePath:t.basePath||"/",logLevel:t.logLevel||"warn",initParams:t.initParams};super(e,a,r,o,t.basePath)}createLogger(e){return new s.Logger("WebUIClient",e.logLevel)}createExtClient(e,t){return new p(this.authClientId,e,t,e.basePath)}createDirectClient(e,t,r){return new E({authClientId:e,authServerUrl:t.authServerUrl,redirectUri:t.redirectUri,userScope:t.userScope,logLevel:t.logLevel,storagePrefix:s.STORAGE_PREFIXES.WEB,basePath:t.basePath},r)}async handleOAuthCallback(e,t){return this.connectionMode==="direct"?this.directClient.handleOAuthCallback(e,t):this.extClient.handleOAuthCallback(e,t)}}const m="production";exports.WEB_BUILD_MODE=m;exports.WebUIClient=y;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const s=require("@bodhiapp/bodhi-js-core");class g extends s.DirectClientBase{constructor(e,t){const r=e.basePath||"/",o=s.createStoragePrefixWithBasePath(r,s.STORAGE_PREFIXES.DIRECT);super({...e,storagePrefix:o},"DirectWebClient",t),this.redirectUri=e.redirectUri}async login(){const e=await this.getAuthState();if(e.isLoggedIn)return e;const t=await this.requestResourceAccess(),r=`openid profile email roles ${this.userScope} ${t}`,o=s.generateCodeVerifier(),a=await s.generateCodeChallenge(o),i=s.generateCodeVerifier();localStorage.setItem(this.storageKeys.CODE_VERIFIER,o),localStorage.setItem(this.storageKeys.STATE,i);const c=new URL(this.authEndpoints.authorize);throw c.searchParams.set("client_id",this.authClientId),c.searchParams.set("response_type","code"),c.searchParams.set("redirect_uri",this.redirectUri),c.searchParams.set("scope",r),c.searchParams.set("code_challenge",a),c.searchParams.set("code_challenge_method","S256"),c.searchParams.set("state",i),window.location.href=c.toString(),new Error("Redirect initiated")}async handleOAuthCallback(e,t){const r=localStorage.getItem(this.storageKeys.STATE);if(!r||r!==t)throw new Error("Invalid state parameter - possible CSRF attack");await this.exchangeCodeForTokens(e),localStorage.removeItem(this.storageKeys.CODE_VERIFIER),localStorage.removeItem(this.storageKeys.STATE);const o=await this.getAuthState();if(!o.isLoggedIn)throw new Error("Login failed");const a=o;return this.setAuthState(a),a}async logout(){const e=localStorage.getItem(this.storageKeys.REFRESH_TOKEN);if(e)try{const r=new URLSearchParams({token:e,client_id:this.authClientId,token_type_hint:"refresh_token"});await fetch(this.authEndpoints.revoke,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r})}catch(r){this.logger.warn("Token revocation failed:",r)}localStorage.removeItem(this.storageKeys.ACCESS_TOKEN),localStorage.removeItem(this.storageKeys.REFRESH_TOKEN),localStorage.removeItem(this.storageKeys.EXPIRES_AT),localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);const t={isLoggedIn:!1};return this.setAuthState(t),t}async requestResourceAccess(){const e=await this.sendApiRequest("POST","/bodhi/v1/apps/request-access",{app_client_id:this.authClientId},{},!1);if(s.isApiResultOperationError(e))throw new Error("Failed to get resource access scope from server");if(!s.isApiResultSuccess(e))throw new Error("Failed to get resource access scope from server: API error");const t=e.body.scope;return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE,t),t}async exchangeCodeForTokens(e){const t=localStorage.getItem(this.storageKeys.CODE_VERIFIER);if(!t)throw new Error("Code verifier not found");const r=await fetch(this.authEndpoints.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:e,redirect_uri:this.redirectUri,client_id:this.authClientId,code_verifier:t})});if(!r.ok){const a=await r.text();throw new Error(`Token exchange failed: ${r.status} ${a}`)}const o=await r.json();if(localStorage.setItem(this.storageKeys.ACCESS_TOKEN,o.access_token),o.refresh_token&&localStorage.setItem(this.storageKeys.REFRESH_TOKEN,o.refresh_token),o.expires_in){const a=Date.now()+o.expires_in*1e3;localStorage.setItem(this.storageKeys.EXPIRES_AT,a.toString())}}async _storageGet(e){return localStorage.getItem(e)}async _storageSet(e){Object.entries(e).forEach(([t,r])=>{localStorage.setItem(t,String(r))})}async _storageRemove(e){e.forEach(t=>localStorage.removeItem(t))}_getRedirectUri(){return this.redirectUri}}const u=500,E=5e3;s.createStorageKeys(s.STORAGE_PREFIXES.WEB);function S(l="/"){const e=s.createStoragePrefixWithBasePath(l,s.STORAGE_PREFIXES.WEB);return s.createStorageKeys(e)}class f{constructor(e,t,r,o){this.state=s.EXTENSION_STATE_NOT_INITIALIZED,this.bodhiext=null,this.refreshPromise=null,this.logger=new s.Logger("WindowBodhiextClient",t.logLevel),this.authClientId=e,this.config=t,this.authEndpoints=s.createOAuthEndpoints(this.config.authServerUrl),this.onStateChange=r??s.NOOP_STATE_CALLBACK,this.storageKeys=S(o||"/")}setState(e){this.state=e,this.logger.info(`{state: ${JSON.stringify(e)}} - Setting client state`),this.onStateChange({type:"client-state",state:e})}setAuthState(e){this.onStateChange({type:"auth-state",state:e})}setStateCallback(e){this.onStateChange=e}ensureBodhiext(){if(!this.bodhiext&&window.bodhiext&&(this.logger.info("Acquiring window.bodhiext reference"),this.bodhiext=window.bodhiext),!this.bodhiext)throw s.createOperationError("Client not initialized","extension_error")}async sendExtRequest(e,t){return this.ensureBodhiext(),this.bodhiext.sendExtRequest(e,t)}async sendApiRequest(e,t,r,o,a){try{this.ensureBodhiext()}catch(i){return{error:{message:i instanceof Error?i.message:String(i),type:"extension_error"}}}try{let i=o||{};if(a){const h=await this._getAccessTokenRaw();if(!h)return{error:{message:"Not authenticated. Please log in first.",type:"extension_error"}};i={...i,Authorization:`Bearer ${h}`}}return await this.bodhiext.sendApiRequest(e,t,r,i)}catch(i){const c=i?.error,h=c?.message??(i instanceof Error?i.message:String(i)),n=c?.type||"extension_error";return{error:{message:h,type:n}}}}getState(){return this.state}isClientInitialized(){return this.state.extension==="ready"}isServerReady(){return this.isClientInitialized()&&this.state.server.status==="ready"}async init(e={}){if(!e.testConnection&&!e.selectedConnection)return this.logger.info("No testConnection or selectedConnection, returning not-initialized state"),s.EXTENSION_STATE_NOT_INITIALIZED;if(this.bodhiext&&!e.testConnection)return this.logger.debug("Already have bodhiext handle, skipping polling"),this.state;if(!this.bodhiext){const o=e.timeoutMs??this.config.initParams?.extension?.timeoutMs??E,a=e.intervalMs??this.config.initParams?.extension?.intervalMs??u,i=Date.now();if(!await new Promise(h=>{const n=()=>{if(window.bodhiext){this.bodhiext=window.bodhiext,h(!0);return}if(Date.now()-i>=o){h(!1);return}setTimeout(n,a)};n()}))return this.logger.warn("Extension discovery timed out"),this.setState(s.EXTENSION_STATE_NOT_FOUND),this.state}const t=await this.bodhiext.getExtensionId();this.logger.info(`Extension discovered: ${t}`);const r={type:"extension",extension:"ready",extensionId:t,server:s.PENDING_EXTENSION_READY};if(e.testConnection)try{const o=await this.getServerState();this.setState({...r,server:o}),this.logger.info(`Server connectivity tested: ${o.status}`)}catch(o){this.logger.error("Failed to get server state:",o),this.setState({...r,server:s.BACKEND_SERVER_NOT_REACHABLE})}else this.setState(r);return this.state}async requestResourceAccess(){this.ensureBodhiext();const e=await this.bodhiext.sendApiRequest("POST","/bodhi/v1/apps/request-access",{app_client_id:this.authClientId});if(!s.isApiResultSuccess(e))throw new Error("Failed to get resource access scope: API error");const t=e.body.scope;return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE,t),t}async login(){const e=await this.getAuthState();if(e.isLoggedIn)return e;this.ensureBodhiext();const t=await this.requestResourceAccess(),r=s.generateCodeVerifier(),o=await s.generateCodeChallenge(r),a=s.generateCodeVerifier();localStorage.setItem(this.storageKeys.CODE_VERIFIER,r),localStorage.setItem(this.storageKeys.STATE,a);const i=["openid","profile","email","roles",this.config.userScope,t],c=new URLSearchParams({response_type:"code",client_id:this.authClientId,redirect_uri:this.config.redirectUri,scope:i.join(" "),state:a,code_challenge:o,code_challenge_method:"S256"}),h=`${this.authEndpoints.authorize}?${c}`;return window.location.href=h,new Promise(()=>{})}async handleOAuthCallback(e,t){const r=localStorage.getItem(this.storageKeys.STATE);if(!r||r!==t)throw new Error("Invalid state parameter - possible CSRF attack");await this.exchangeCodeForTokens(e),localStorage.removeItem(this.storageKeys.CODE_VERIFIER),localStorage.removeItem(this.storageKeys.STATE);const o=await this.getAuthState();if(!o.isLoggedIn)throw new Error("Login failed");return this.setAuthState(o),o}async exchangeCodeForTokens(e){const t=localStorage.getItem(this.storageKeys.CODE_VERIFIER);if(!t)throw new Error("Code verifier not found");const r=new URLSearchParams({grant_type:"authorization_code",client_id:this.authClientId,code:e,redirect_uri:this.config.redirectUri,code_verifier:t}),o=await fetch(this.authEndpoints.token,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r});if(!o.ok){const i=await o.text();throw new Error(`Token exchange failed: ${o.status} ${i}`)}const a=await o.json();if(!a.access_token)throw new Error("No access token received");if(localStorage.setItem(this.storageKeys.ACCESS_TOKEN,a.access_token),a.refresh_token&&localStorage.setItem(this.storageKeys.REFRESH_TOKEN,a.refresh_token),a.expires_in){const i=Date.now()+a.expires_in*1e3;localStorage.setItem(this.storageKeys.EXPIRES_AT,i.toString())}}async logout(){const e=localStorage.getItem(this.storageKeys.REFRESH_TOKEN);if(e)try{const r=new URLSearchParams({token:e,client_id:this.authClientId,token_type_hint:"refresh_token"});await fetch(this.authEndpoints.revoke,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:r})}catch(r){this.logger.warn("Token revocation failed:",r)}localStorage.removeItem(this.storageKeys.ACCESS_TOKEN),localStorage.removeItem(this.storageKeys.REFRESH_TOKEN),localStorage.removeItem(this.storageKeys.EXPIRES_AT),localStorage.removeItem(this.storageKeys.CODE_VERIFIER),localStorage.removeItem(this.storageKeys.STATE),localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);const t={isLoggedIn:!1};return this.setAuthState(t),t}async getAuthState(){const e=await this._getAccessTokenRaw();if(!e)return{isLoggedIn:!1};try{return{isLoggedIn:!0,userInfo:s.extractUserInfo(e),accessToken:e}}catch(t){return this.logger.error("Failed to parse token:",t),{isLoggedIn:!1}}}async _getAccessTokenRaw(){const e=localStorage.getItem(this.storageKeys.ACCESS_TOKEN),t=localStorage.getItem(this.storageKeys.EXPIRES_AT);if(!e)return null;if(t){const r=parseInt(t,10);if(Date.now()>=r-5*1e3){const o=localStorage.getItem(this.storageKeys.REFRESH_TOKEN);return o?this._tryRefreshToken(o):null}}return e}async _tryRefreshToken(e){if(this.refreshPromise)return this.logger.debug("Refresh already in progress, returning existing promise"),this.refreshPromise;this.refreshPromise=this._doRefreshToken(e);try{return await this.refreshPromise}finally{this.refreshPromise=null}}async _doRefreshToken(e){this.logger.debug("Refreshing access token");try{const t=await s.refreshAccessToken(this.authEndpoints.token,e,this.authClientId);if(t){this._storeRefreshedTokens(t);const r=s.extractUserInfo(t.access_token);return this.setAuthState({isLoggedIn:!0,userInfo:r,accessToken:t.access_token}),this.logger.info("Token refreshed successfully"),t.access_token}}catch(t){this.logger.warn("Token refresh failed:",t)}throw this.logger.warn("Token refresh failed, keeping tokens for manual retry"),s.createOperationError("Access token expired and unable to refresh. Try logging out and logging in again.","token_refresh_failed")}_storeRefreshedTokens(e){const t=Date.now()+e.expires_in*1e3;localStorage.setItem(this.storageKeys.ACCESS_TOKEN,e.access_token),localStorage.setItem(this.storageKeys.EXPIRES_AT,String(t)),e.refresh_token&&localStorage.setItem(this.storageKeys.REFRESH_TOKEN,e.refresh_token)}async pingApi(){return this.sendApiRequest("GET","/ping")}async fetchModels(){return this.sendApiRequest("GET","/v1/models",void 0,void 0,!0)}async getServerState(){const e=await this.sendApiRequest("GET","/bodhi/v1/info");if(s.isApiResultOperationError(e)||!s.isApiResultSuccess(e))return s.BACKEND_SERVER_NOT_REACHABLE;const t=e.body;switch(t.status){case"ready":return{status:"ready",version:t.version||"unknown"};case"setup":return s.backendServerNotReady("setup",t.version||"unknown");case"resource-admin":return s.backendServerNotReady("resource-admin",t.version||"unknown");case"error":return s.backendServerNotReady("error",t.version||"unknown",t.error?{message:t.error.message,type:t.error.type}:s.SERVER_ERROR_CODES.SERVER_NOT_READY);default:return s.BACKEND_SERVER_NOT_REACHABLE}}async*stream(e,t,r,o,a=!0){this.ensureBodhiext();let i=o||{};if(a){const n=await this._getAccessTokenRaw();if(!n)throw s.createOperationError("Not authenticated. Please log in first.","auth_error");i={...i,Authorization:`Bearer ${n}`}}const h=this.bodhiext.sendStreamRequest(e,t,r,i).getReader();try{for(;;){const{value:n,done:d}=await h.read();if(d||n?.done)break;yield n.body}}catch(n){if(n instanceof Error){if("response"in n){const d=n;throw s.createApiError(n.message,d.response.status,d.response.body)}throw"error"in n,s.createOperationError(n.message,"extension_error")}throw n}finally{h.releaseLock()}}async*streamChat(e,t,r=!0){yield*this.stream("POST","/v1/chat/completions",{model:e,messages:[{role:"user",content:t}],stream:!0},void 0,r)}serialize(){return{extensionId:this.state.type==="extension"&&this.state.extension==="ready"?this.state.extensionId:void 0}}async debug(){return{type:"WindowBodhiextClient",state:this.state,authState:await this.getAuthState(),bodhiextAvailable:this.bodhiext!==null,authClientId:this.authClientId,authServerUrl:this.config.authServerUrl,redirectUri:this.config.redirectUri,userScope:this.config.userScope}}}class _ extends s.BaseFacadeClient{constructor(e,t,r,o){const a={redirectUri:t.redirectUri,authServerUrl:t.authServerUrl||"https://id.getbodhi.app/realms/bodhi",userScope:t.userScope||"scope_user_user",basePath:t.basePath||"/",logLevel:t.logLevel||"warn",initParams:t.initParams};super(e,a,r,o,t.basePath)}createLogger(e){return new s.Logger("WebUIClient",e.logLevel)}createExtClient(e,t){return new f(this.authClientId,e,t,e.basePath)}createDirectClient(e,t,r){return new g({authClientId:e,authServerUrl:t.authServerUrl,redirectUri:t.redirectUri,userScope:t.userScope,logLevel:t.logLevel,storagePrefix:s.STORAGE_PREFIXES.WEB,basePath:t.basePath},r)}async handleOAuthCallback(e,t){return this.connectionMode==="direct"?this.directClient.handleOAuthCallback(e,t):this.extClient.handleOAuthCallback(e,t)}}const p="production";exports.WEB_BUILD_MODE=p;exports.WebUIClient=_;

package/dist/bodhi-web.esm.d.ts

@@ -1 +1,2 @@
 export * from './bodhi-js-sdk/web/src/index'
+export {}

package/dist/bodhi-web.esm.js

@@ -1,8 +1,8 @@
-import { DirectClientBase as x, createStoragePrefixWithBasePath as w, STORAGE_PREFIXES as u, generateCodeVerifier as g, generateCodeChallenge as I, isApiResultOperationError as T, isApiResultSuccess as f, createStorageKeys as R, EXTENSION_STATE_NOT_INITIALIZED as y, Logger as C, createOAuthEndpoints as A, NOOP_STATE_CALLBACK as k, EXTENSION_STATE_NOT_FOUND as v, PENDING_EXTENSION_READY as b, BACKEND_SERVER_NOT_REACHABLE as d, extractUserInfo as _, refreshAccessToken as P, createOperationError as S, backendServerNotReady as E, SERVER_ERROR_CODES as O, createApiError as K, BaseFacadeClient as U } from "@bodhiapp/bodhi-js-core";
-class L extends x {
+import { DirectClientBase as R, createStoragePrefixWithBasePath as y, STORAGE_PREFIXES as S, generateCodeVerifier as u, generateCodeChallenge as _, isApiResultOperationError as w, isApiResultSuccess as f, createStorageKeys as I, EXTENSION_STATE_NOT_INITIALIZED as p, Logger as T, createOAuthEndpoints as C, NOOP_STATE_CALLBACK as x, createOperationError as h, EXTENSION_STATE_NOT_FOUND as A, PENDING_EXTENSION_READY as k, BACKEND_SERVER_NOT_REACHABLE as g, extractUserInfo as m, refreshAccessToken as v, backendServerNotReady as E, SERVER_ERROR_CODES as b, createApiError as O, BaseFacadeClient as P } from "@bodhiapp/bodhi-js-core";
+class K extends R {
   constructor(e, t) {
-    const s = e.basePath || "/", r = w(s, u.DIRECT);
-    super({ ...e, storagePrefix: r }, "DirectWebClient", t), this.redirectUri = e.redirectUri;
+    const r = e.basePath || "/", s = y(r, S.DIRECT);
+    super({ ...e, storagePrefix: s }, "DirectWebClient", t), this.redirectUri = e.redirectUri;
   }
   // ============================================================================
   // Authentication (Browser Redirect OAuth)
@@ -11,27 +11,27 @@ class L extends x {
     const e = await this.getAuthState();
     if (e.isLoggedIn)
       return e;
-    const t = await this.requestResourceAccess(), s = `openid profile email roles ${this.userScope} ${t}`, r = g(), i = await I(r), o = g();
-    localStorage.setItem(this.storageKeys.CODE_VERIFIER, r), localStorage.setItem(this.storageKeys.STATE, o);
-    const a = new URL(this.authEndpoints.authorize);
-    throw a.searchParams.set("client_id", this.authClientId), a.searchParams.set("response_type", "code"), a.searchParams.set("redirect_uri", this.redirectUri), a.searchParams.set("scope", s), a.searchParams.set("code_challenge", i), a.searchParams.set("code_challenge_method", "S256"), a.searchParams.set("state", o), window.location.href = a.toString(), new Error("Redirect initiated");
+    const t = await this.requestResourceAccess(), r = `openid profile email roles ${this.userScope} ${t}`, s = u(), i = await _(s), o = u();
+    localStorage.setItem(this.storageKeys.CODE_VERIFIER, s), localStorage.setItem(this.storageKeys.STATE, o);
+    const n = new URL(this.authEndpoints.authorize);
+    throw n.searchParams.set("client_id", this.authClientId), n.searchParams.set("response_type", "code"), n.searchParams.set("redirect_uri", this.redirectUri), n.searchParams.set("scope", r), n.searchParams.set("code_challenge", i), n.searchParams.set("code_challenge_method", "S256"), n.searchParams.set("state", o), window.location.href = n.toString(), new Error("Redirect initiated");
   }
   async handleOAuthCallback(e, t) {
-    const s = localStorage.getItem(this.storageKeys.STATE);
-    if (!s || s !== t)
+    const r = localStorage.getItem(this.storageKeys.STATE);
+    if (!r || r !== t)
       throw new Error("Invalid state parameter - possible CSRF attack");
     await this.exchangeCodeForTokens(e), localStorage.removeItem(this.storageKeys.CODE_VERIFIER), localStorage.removeItem(this.storageKeys.STATE);
-    const r = await this.getAuthState();
-    if (!r.isLoggedIn)
+    const s = await this.getAuthState();
+    if (!s.isLoggedIn)
       throw new Error("Login failed");
-    const i = r;
+    const i = s;
     return this.setAuthState(i), i;
   }
   async logout() {
     const e = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
     if (e)
       try {
-        const s = new URLSearchParams({
+        const r = new URLSearchParams({
           token: e,
           client_id: this.authClientId,
           token_type_hint: "refresh_token"
@@ -41,10 +41,10 @@ class L extends x {
           headers: {
             "Content-Type": "application/x-www-form-urlencoded"
           },
-          body: s
+          body: r
         });
-      } catch (s) {
-        this.logger.warn("Token revocation failed:", s);
+      } catch (r) {
+        this.logger.warn("Token revocation failed:", r);
       }
     localStorage.removeItem(this.storageKeys.ACCESS_TOKEN), localStorage.removeItem(this.storageKeys.REFRESH_TOKEN), localStorage.removeItem(this.storageKeys.EXPIRES_AT), localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);
     const t = {
@@ -63,7 +63,7 @@ class L extends x {
       {},
       !1
     );
-    if (T(e))
+    if (w(e))
       throw new Error("Failed to get resource access scope from server");
     if (!f(e))
       throw new Error("Failed to get resource access scope from server: API error");
@@ -74,7 +74,7 @@ class L extends x {
     const t = localStorage.getItem(this.storageKeys.CODE_VERIFIER);
     if (!t)
       throw new Error("Code verifier not found");
-    const s = await fetch(this.authEndpoints.token, {
+    const r = await fetch(this.authEndpoints.token, {
       method: "POST",
       headers: {
         "Content-Type": "application/x-www-form-urlencoded"
@@ -87,13 +87,13 @@ class L extends x {
         code_verifier: t
       })
     });
-    if (!s.ok) {
-      const i = await s.text();
-      throw new Error(`Token exchange failed: ${s.status} ${i}`);
+    if (!r.ok) {
+      const i = await r.text();
+      throw new Error(`Token exchange failed: ${r.status} ${i}`);
     }
-    const r = await s.json();
-    if (localStorage.setItem(this.storageKeys.ACCESS_TOKEN, r.access_token), r.refresh_token && localStorage.setItem(this.storageKeys.REFRESH_TOKEN, r.refresh_token), r.expires_in) {
-      const i = Date.now() + r.expires_in * 1e3;
+    const s = await r.json();
+    if (localStorage.setItem(this.storageKeys.ACCESS_TOKEN, s.access_token), s.refresh_token && localStorage.setItem(this.storageKeys.REFRESH_TOKEN, s.refresh_token), s.expires_in) {
+      const i = Date.now() + s.expires_in * 1e3;
       localStorage.setItem(this.storageKeys.EXPIRES_AT, i.toString());
     }
   }
@@ -104,8 +104,8 @@ class L extends x {
     return localStorage.getItem(e);
   }
   async _storageSet(e) {
-    Object.entries(e).forEach(([t, s]) => {
-      localStorage.setItem(t, String(s));
+    Object.entries(e).forEach(([t, r]) => {
+      localStorage.setItem(t, String(r));
     });
   }
   async _storageRemove(e) {
@@ -115,15 +115,15 @@ class L extends x {
     return this.redirectUri;
   }
 }
-const N = 500, D = 5e3;
-R(u.WEB);
-function F(l = "/") {
-  const e = w(l, u.WEB);
-  return R(e);
+const U = 500, L = 5e3;
+I(S.WEB);
+function N(l = "/") {
+  const e = y(l, S.WEB);
+  return I(e);
 }
-class B {
-  constructor(e, t, s, r) {
-    this.state = y, this.bodhiext = null, this.refreshPromise = null, this.logger = new C("WindowBodhiextClient", t.logLevel), this.authClientId = e, this.config = t, this.authEndpoints = A(this.config.authServerUrl), this.onStateChange = s ?? k, this.storageKeys = F(r || "/");
+class D {
+  constructor(e, t, r, s) {
+    this.state = p, this.bodhiext = null, this.refreshPromise = null, this.logger = new T("WindowBodhiextClient", t.logLevel), this.authClientId = e, this.config = t, this.authEndpoints = C(this.config.authServerUrl), this.onStateChange = r ?? x, this.storageKeys = N(s || "/");
   }
   /**
    * Set client state and notify callback
@@ -148,11 +148,11 @@ class B {
   // ============================================================================
   /**
    * Ensure bodhiext is available, attempting to acquire it if not already set
-   * @throws Error if client not initialized
+   * @throws OperationError if client not initialized
    */
   ensureBodhiext() {
     if (!this.bodhiext && window.bodhiext && (this.logger.info("Acquiring window.bodhiext reference"), this.bodhiext = window.bodhiext), !this.bodhiext)
-      throw new Error("Client not initialized");
+      throw h("Client not initialized", "extension_error");
   }
   /**
    * Send extension request via window.bodhiext.sendExtRequest
@@ -164,7 +164,7 @@ class B {
    * Send API message via window.bodhiext.sendApiRequest
    * Converts ApiResponse to ApiResponseResult
    */
-  async sendApiRequest(e, t, s, r, i) {
+  async sendApiRequest(e, t, r, s, i) {
     try {
       this.ensureBodhiext();
     } catch (o) {
@@ -176,7 +176,7 @@ class B {
       };
     }
     try {
-      let o = r || {};
+      let o = s || {};
       if (i) {
         const c = await this._getAccessTokenRaw();
         if (!c)
@@ -194,15 +194,15 @@ class B {
       return await this.bodhiext.sendApiRequest(
         e,
         t,
-        s,
+        r,
         o
       );
     } catch (o) {
-      const a = o == null ? void 0 : o.error, c = (a == null ? void 0 : a.message) ?? (o instanceof Error ? o.message : String(o)), n = (a == null ? void 0 : a.type) || "extension_error";
+      const n = o?.error, c = n?.message ?? (o instanceof Error ? o.message : String(o)), a = n?.type || "extension_error";
       return {
         error: {
           message: c,
-          type: n
+          type: a
         }
       };
     }
@@ -227,46 +227,45 @@ class B {
    * No extensionId storage/restoration needed - window.bodhiext handle is ephemeral
    */
   async init(e = {}) {
-    var r, i, o, a;
     if (!e.testConnection && !e.selectedConnection)
-      return this.logger.info("No testConnection or selectedConnection, returning not-initialized state"), y;
+      return this.logger.info("No testConnection or selectedConnection, returning not-initialized state"), p;
     if (this.bodhiext && !e.testConnection)
       return this.logger.debug("Already have bodhiext handle, skipping polling"), this.state;
     if (!this.bodhiext) {
-      const c = e.timeoutMs ?? ((i = (r = this.config.initParams) == null ? void 0 : r.extension) == null ? void 0 : i.timeoutMs) ?? D, n = e.intervalMs ?? ((a = (o = this.config.initParams) == null ? void 0 : o.extension) == null ? void 0 : a.intervalMs) ?? N, h = Date.now();
-      if (!await new Promise((p) => {
-        const m = () => {
+      const s = e.timeoutMs ?? this.config.initParams?.extension?.timeoutMs ?? L, i = e.intervalMs ?? this.config.initParams?.extension?.intervalMs ?? U, o = Date.now();
+      if (!await new Promise((c) => {
+        const a = () => {
           if (window.bodhiext) {
-            this.bodhiext = window.bodhiext, p(!0);
+            this.bodhiext = window.bodhiext, c(!0);
             return;
           }
-          if (Date.now() - h >= c) {
-            p(!1);
+          if (Date.now() - o >= s) {
+            c(!1);
             return;
           }
-          setTimeout(m, n);
+          setTimeout(a, i);
         };
-        m();
+        a();
       }))
-        return this.logger.warn("Extension discovery timed out"), this.setState(v), this.state;
+        return this.logger.warn("Extension discovery timed out"), this.setState(A), this.state;
     }
     const t = await this.bodhiext.getExtensionId();
     this.logger.info(`Extension discovered: ${t}`);
-    const s = {
+    const r = {
       type: "extension",
       extension: "ready",
       extensionId: t,
-      server: b
+      server: k
     };
     if (e.testConnection)
       try {
-        const c = await this.getServerState();
-        this.setState({ ...s, server: c }), this.logger.info(`Server connectivity tested: ${c.status}`);
-      } catch (c) {
-        this.logger.error("Failed to get server state:", c), this.setState({ ...s, server: d });
+        const s = await this.getServerState();
+        this.setState({ ...r, server: s }), this.logger.info(`Server connectivity tested: ${s.status}`);
+      } catch (s) {
+        this.logger.error("Failed to get server state:", s), this.setState({ ...r, server: g });
       }
     else
-      this.setState(s);
+      this.setState(r);
     return this.state;
   }
   // ============================================================================
@@ -295,17 +294,17 @@ class B {
     if (e.isLoggedIn)
       return e;
     this.ensureBodhiext();
-    const t = await this.requestResourceAccess(), s = g(), r = await I(s), i = g();
-    localStorage.setItem(this.storageKeys.CODE_VERIFIER, s), localStorage.setItem(this.storageKeys.STATE, i);
-    const o = ["openid", "profile", "email", "roles", this.config.userScope, t], a = new URLSearchParams({
+    const t = await this.requestResourceAccess(), r = u(), s = await _(r), i = u();
+    localStorage.setItem(this.storageKeys.CODE_VERIFIER, r), localStorage.setItem(this.storageKeys.STATE, i);
+    const o = ["openid", "profile", "email", "roles", this.config.userScope, t], n = new URLSearchParams({
       response_type: "code",
       client_id: this.authClientId,
       redirect_uri: this.config.redirectUri,
       scope: o.join(" "),
       state: i,
-      code_challenge: r,
+      code_challenge: s,
       code_challenge_method: "S256"
-    }), c = `${this.authEndpoints.authorize}?${a}`;
+    }), c = `${this.authEndpoints.authorize}?${n}`;
     return window.location.href = c, new Promise(() => {
     });
   }
@@ -315,14 +314,14 @@ class B {
    * @returns AuthLoggedIn with login state and user info
    */
   async handleOAuthCallback(e, t) {
-    const s = localStorage.getItem(this.storageKeys.STATE);
-    if (!s || s !== t)
+    const r = localStorage.getItem(this.storageKeys.STATE);
+    if (!r || r !== t)
       throw new Error("Invalid state parameter - possible CSRF attack");
     await this.exchangeCodeForTokens(e), localStorage.removeItem(this.storageKeys.CODE_VERIFIER), localStorage.removeItem(this.storageKeys.STATE);
-    const r = await this.getAuthState();
-    if (!r.isLoggedIn)
+    const s = await this.getAuthState();
+    if (!s.isLoggedIn)
       throw new Error("Login failed");
-    return this.setAuthState(r), r;
+    return this.setAuthState(s), s;
   }
   /**
    * Exchange authorization code for tokens
@@ -331,24 +330,24 @@ class B {
     const t = localStorage.getItem(this.storageKeys.CODE_VERIFIER);
     if (!t)
       throw new Error("Code verifier not found");
-    const s = new URLSearchParams({
+    const r = new URLSearchParams({
       grant_type: "authorization_code",
       client_id: this.authClientId,
       code: e,
       redirect_uri: this.config.redirectUri,
       code_verifier: t
-    }), r = await fetch(this.authEndpoints.token, {
+    }), s = await fetch(this.authEndpoints.token, {
       method: "POST",
       headers: {
         "Content-Type": "application/x-www-form-urlencoded"
       },
-      body: s
+      body: r
     });
-    if (!r.ok) {
-      const o = await r.text();
-      throw new Error(`Token exchange failed: ${r.status} ${o}`);
+    if (!s.ok) {
+      const o = await s.text();
+      throw new Error(`Token exchange failed: ${s.status} ${o}`);
     }
-    const i = await r.json();
+    const i = await s.json();
     if (!i.access_token)
       throw new Error("No access token received");
     if (localStorage.setItem(this.storageKeys.ACCESS_TOKEN, i.access_token), i.refresh_token && localStorage.setItem(this.storageKeys.REFRESH_TOKEN, i.refresh_token), i.expires_in) {
@@ -364,7 +363,7 @@ class B {
     const e = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
     if (e)
       try {
-        const s = new URLSearchParams({
+        const r = new URLSearchParams({
           token: e,
           client_id: this.authClientId,
           token_type_hint: "refresh_token"
@@ -374,10 +373,10 @@ class B {
           headers: {
             "Content-Type": "application/x-www-form-urlencoded"
           },
-          body: s
+          body: r
         });
-      } catch (s) {
-        this.logger.warn("Token revocation failed:", s);
+      } catch (r) {
+        this.logger.warn("Token revocation failed:", r);
       }
     localStorage.removeItem(this.storageKeys.ACCESS_TOKEN), localStorage.removeItem(this.storageKeys.REFRESH_TOKEN), localStorage.removeItem(this.storageKeys.EXPIRES_AT), localStorage.removeItem(this.storageKeys.CODE_VERIFIER), localStorage.removeItem(this.storageKeys.STATE), localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);
     const t = {
@@ -393,7 +392,7 @@ class B {
     if (!e)
       return { isLoggedIn: !1 };
     try {
-      return { isLoggedIn: !0, userInfo: _(e), accessToken: e };
+      return { isLoggedIn: !0, userInfo: m(e), accessToken: e };
     } catch (t) {
       return this.logger.error("Failed to parse token:", t), { isLoggedIn: !1 };
     }
@@ -407,10 +406,10 @@ class B {
     if (!e)
       return null;
     if (t) {
-      const s = parseInt(t, 10);
-      if (Date.now() >= s - 5 * 1e3) {
-        const r = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
-        return r ? this._tryRefreshToken(r) : null;
+      const r = parseInt(t, 10);
+      if (Date.now() >= r - 5 * 1e3) {
+        const s = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
+        return s ? this._tryRefreshToken(s) : null;
       }
     }
     return e;
@@ -435,24 +434,24 @@ class B {
   async _doRefreshToken(e) {
     this.logger.debug("Refreshing access token");
     try {
-      const t = await P(
+      const t = await v(
         this.authEndpoints.token,
         e,
         this.authClientId
       );
       if (t) {
         this._storeRefreshedTokens(t);
-        const s = _(t.access_token);
+        const r = m(t.access_token);
         return this.setAuthState({
           isLoggedIn: !0,
-          userInfo: s,
+          userInfo: r,
           accessToken: t.access_token
         }), this.logger.info("Token refreshed successfully"), t.access_token;
       }
     } catch (t) {
       this.logger.warn("Token refresh failed:", t);
     }
-    throw this.logger.warn("Token refresh failed, keeping tokens for manual retry"), S(
+    throw this.logger.warn("Token refresh failed, keeping tokens for manual retry"), h(
       "Access token expired and unable to refresh. Try logging out and logging in again.",
       "token_refresh_failed"
     );
@@ -488,10 +487,10 @@ class B {
    */
   async getServerState() {
     const e = await this.sendApiRequest("GET", "/bodhi/v1/info");
-    if (T(e))
-      return d;
+    if (w(e))
+      return g;
     if (!f(e))
-      return d;
+      return g;
     const t = e.body;
     switch (t.status) {
       case "ready":
@@ -504,45 +503,45 @@ class B {
         return E(
           "error",
           t.version || "unknown",
-          t.error ? { message: t.error.message, type: t.error.type } : O.SERVER_NOT_READY
+          t.error ? { message: t.error.message, type: t.error.type } : b.SERVER_NOT_READY
         );
       default:
-        return d;
+        return g;
     }
   }
   /**
    * Generic streaming via window.bodhiext.sendStreamRequest
    * Wraps ReadableStream as AsyncGenerator
    */
-  async *stream(e, t, s, r, i = !0) {
+  async *stream(e, t, r, s, i = !0) {
     this.ensureBodhiext();
-    let o = r || {};
+    let o = s || {};
     if (i) {
-      const n = await this._getAccessTokenRaw();
-      if (!n)
-        throw new Error("Not authenticated. Please log in first.");
+      const a = await this._getAccessTokenRaw();
+      if (!a)
+        throw h("Not authenticated. Please log in first.", "auth_error");
       o = {
         ...o,
-        Authorization: `Bearer ${n}`
+        Authorization: `Bearer ${a}`
       };
     }
-    const c = this.bodhiext.sendStreamRequest(e, t, s, o).getReader();
+    const c = this.bodhiext.sendStreamRequest(e, t, r, o).getReader();
     try {
       for (; ; ) {
-        const { value: n, done: h } = await c.read();
-        if (h || n != null && n.done)
+        const { value: a, done: d } = await c.read();
+        if (d || a?.done)
           break;
-        yield n.body;
+        yield a.body;
       }
-    } catch (n) {
-      if (n instanceof Error) {
-        if ("response" in n) {
-          const h = n;
-          throw K(n.message, h.response.status, h.response.body);
+    } catch (a) {
+      if (a instanceof Error) {
+        if ("response" in a) {
+          const d = a;
+          throw O(a.message, d.response.status, d.response.body);
         }
-        throw "error" in n ? S(n.message, "extension_error") : S(n.message, "extension_error");
+        throw "error" in a ? h(a.message, "extension_error") : h(a.message, "extension_error");
       }
-      throw n;
+      throw a;
     } finally {
       c.releaseLock();
     }
@@ -550,7 +549,7 @@ class B {
   /**
    * Chat streaming
    */
-  async *streamChat(e, t, s = !0) {
+  async *streamChat(e, t, r = !0) {
     yield* this.stream(
       "POST",
       "/v1/chat/completions",
@@ -560,7 +559,7 @@ class B {
         stream: !0
       },
       void 0,
-      s
+      r
     );
   }
   /**
@@ -587,8 +586,8 @@ class B {
     };
   }
 }
-class W extends U {
-  constructor(e, t, s, r) {
+class B extends P {
+  constructor(e, t, r, s) {
     const i = {
       redirectUri: t.redirectUri,
       authServerUrl: t.authServerUrl || "https://id.getbodhi.app/realms/bodhi",
@@ -597,26 +596,26 @@ class W extends U {
       logLevel: t.logLevel || "warn",
       initParams: t.initParams
     };
-    super(e, i, s, r, t.basePath);
+    super(e, i, r, s, t.basePath);
   }
   createLogger(e) {
-    return new C("WebUIClient", e.logLevel);
+    return new T("WebUIClient", e.logLevel);
   }
   createExtClient(e, t) {
-    return new B(this.authClientId, e, t, e.basePath);
+    return new D(this.authClientId, e, t, e.basePath);
   }
-  createDirectClient(e, t, s) {
-    return new L(
+  createDirectClient(e, t, r) {
+    return new K(
       {
         authClientId: e,
         authServerUrl: t.authServerUrl,
         redirectUri: t.redirectUri,
         userScope: t.userScope,
         logLevel: t.logLevel,
-        storagePrefix: u.WEB,
+        storagePrefix: S.WEB,
         basePath: t.basePath
       },
-      s
+      r
     );
   }
   // ============================================================================
@@ -626,8 +625,8 @@ class W extends U {
     return this.connectionMode === "direct" ? this.directClient.handleOAuthCallback(e, t) : this.extClient.handleOAuthCallback(e, t);
   }
 }
-const $ = "production";
+const q = "production";
 export {
-  $ as WEB_BUILD_MODE,
-  W as WebUIClient
+  q as WEB_BUILD_MODE,
+  B as WebUIClient
 };

package/dist/setup-modal/src/types/message-types.d.ts

@@ -1,5 +1,4 @@
 import { SetupState } from './state';
-
 /**
  * Central registry mapping message types to their payload/response shapes
  * Single source of truth - everything else is inferred!

package/dist/setup-modal/src/types/protocol.d.ts

@@ -1,5 +1,4 @@
 import { MessageType, RequestPayload, ResponsePayload } from './message-types';
-
 /** Branded type for type-safe request IDs */
 export type RequestId = string & {
     readonly __brand: 'RequestId';

package/dist/setup-modal/src/types/state.d.ts

@@ -2,7 +2,6 @@ import { Browser, EnvState, OS } from './platform';
 import { ExtensionState } from './extension';
 import { ServerState } from './server';
 import { LnaServerState, LnaState } from './lna';
-
 export declare enum SetupStep {
     PLATFORM_CHECK = "platform-check",
     SERVER_SETUP = "server-setup",

package/dist/setup-modal/src/types/type-guards.d.ts

@@ -2,7 +2,6 @@ import { ExtensionState, ExtensionStateNotReady, ExtensionStateReady } from './e
 import { ServerState, ServerStateError, ServerStatePending, ServerStateReachable, ServerStateReady, ServerStateUnreachable } from './server';
 import { LnaServerState, LnaServerStateError, LnaServerStatePending, LnaServerStateReady, LnaServerStateResourceAdmin, LnaServerStateSetup, LnaState, LnaStateDenied, LnaStateGranted, LnaStatePrompt, LnaStateSkipped, LnaStateUnreachable, LnaStateUnsupported } from './lna';
 import { Browser, NotSupportedBrowser, NotSupportedOS, OS, SupportedBrowser, SupportedOS } from './platform';
-
 export declare function isExtensionStateReady(ext: ExtensionState): ext is ExtensionStateReady;
 export declare function isExtensionStateNotReady(ext: ExtensionState): ext is ExtensionStateNotReady;
 export declare function isServerStateReady(server: ServerState): server is ServerStateReady;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bodhiapp/bodhi-js",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "description": "Web SDK for Bodhi Browser - window.bodhiext communication",
   "type": "module",
   "main": "dist/bodhi-web.cjs.js",
@@ -34,11 +34,12 @@
     "lint:fix": "prettier --write . && eslint . --ext .js,.jsx,.ts,.tsx --fix"
   },
   "dependencies": {
-    "@bodhiapp/bodhi-js-core": "0.0.4",
-    "@bodhiapp/ts-client": "^0.1.7"
+    "@bodhiapp/bodhi-js-core": "0.0.5",
+    "@bodhiapp/ts-client": "0.1.8"
   },
   "devDependencies": {
     "@eslint/js": "^9.23.0",
+    "@types/node": "^20.19.10",
     "@typescript-eslint/eslint-plugin": "8.28.0",
     "@typescript-eslint/parser": "8.28.0",
     "eslint": "9.32.0",
@@ -48,7 +49,7 @@
     "rimraf": "^6.0.1",
     "tslib": "^2.6.2",
     "typescript": "^5.8.3",
-    "vite": "^5.2.0",
-    "vite-plugin-dts": "^3.9.1"
+    "vite": "^7.1.12",
+    "vite-plugin-dts": "^4.5.4"
   }
 }