@bodhiapp/bodhi-js 0.0.4 → 0.0.6

package/dist/bodhi-web.esm.js

@@ -1,38 +1,48 @@
-import { DirectClientBase as x, createStoragePrefixWithBasePath as w, STORAGE_PREFIXES as u, generateCodeVerifier as g, generateCodeChallenge as I, isApiResultOperationError as T, isApiResultSuccess as f, createStorageKeys as R, EXTENSION_STATE_NOT_INITIALIZED as y, Logger as C, createOAuthEndpoints as A, NOOP_STATE_CALLBACK as k, EXTENSION_STATE_NOT_FOUND as v, PENDING_EXTENSION_READY as b, BACKEND_SERVER_NOT_REACHABLE as d, extractUserInfo as _, refreshAccessToken as P, createOperationError as S, backendServerNotReady as E, SERVER_ERROR_CODES as O, createApiError as K, BaseFacadeClient as U } from "@bodhiapp/bodhi-js-core";
-class L extends x {
-  constructor(e, t) {
-    const s = e.basePath || "/", r = w(s, u.DIRECT);
-    super({ ...e, storagePrefix: r }, "DirectWebClient", t), this.redirectUri = e.redirectUri;
+import { DirectClientBase as C, createStoragePrefixWithBasePath as p, STORAGE_PREFIXES as S, isApiResultOperationError as f, createOperationError as h, isApiResultError as w, isApiResultSuccess as m, generateCodeVerifier as g, generateCodeChallenge as T, createStorageKeys as I, EXTENSION_STATE_NOT_INITIALIZED as y, Logger as R, createOAuthEndpoints as x, NOOP_STATE_CALLBACK as k, EXTENSION_STATE_NOT_FOUND as A, PENDING_EXTENSION_READY as v, BACKEND_SERVER_NOT_REACHABLE as d, extractUserInfo as _, refreshAccessToken as b, backendServerNotReady as E, SERVER_ERROR_CODES as O, createApiError as P, BaseFacadeClient as K } from "@bodhiapp/bodhi-js-core";
+class U extends C {
+  constructor(t, e) {
+    const r = t.basePath || "/", s = p(r, S.DIRECT);
+    super({ ...t, storagePrefix: s }, "DirectWebClient", e), this.redirectUri = t.redirectUri;
   }
   // ============================================================================
   // Authentication (Browser Redirect OAuth)
   // ============================================================================
   async login() {
-    const e = await this.getAuthState();
-    if (e.isLoggedIn)
-      return e;
-    const t = await this.requestResourceAccess(), s = `openid profile email roles ${this.userScope} ${t}`, r = g(), i = await I(r), o = g();
-    localStorage.setItem(this.storageKeys.CODE_VERIFIER, r), localStorage.setItem(this.storageKeys.STATE, o);
-    const a = new URL(this.authEndpoints.authorize);
-    throw a.searchParams.set("client_id", this.authClientId), a.searchParams.set("response_type", "code"), a.searchParams.set("redirect_uri", this.redirectUri), a.searchParams.set("scope", s), a.searchParams.set("code_challenge", i), a.searchParams.set("code_challenge_method", "S256"), a.searchParams.set("state", o), window.location.href = a.toString(), new Error("Redirect initiated");
-  }
-  async handleOAuthCallback(e, t) {
-    const s = localStorage.getItem(this.storageKeys.STATE);
-    if (!s || s !== t)
+    const t = await this.getAuthState();
+    if (t.status === "authenticated")
+      return t;
+    const e = await this.requestResourceAccess();
+    if (f(e))
+      throw h(e.error.message, e.error.type);
+    if (w(e)) {
+      const { message: i } = e.body.error;
+      throw h(i, "auth_error");
+    }
+    if (!m(e))
+      throw h(`Unexpected HTTP ${e.status}`, "auth_error");
+    const r = e.body.scope;
+    localStorage.setItem(this.storageKeys.RESOURCE_SCOPE, r);
+    const s = `openid profile email roles ${this.userScope} ${r}`, a = g(), o = await T(a), c = g();
+    localStorage.setItem(this.storageKeys.CODE_VERIFIER, a), localStorage.setItem(this.storageKeys.STATE, c);
+    const n = new URL(this.authEndpoints.authorize);
+    throw n.searchParams.set("client_id", this.authClientId), n.searchParams.set("response_type", "code"), n.searchParams.set("redirect_uri", this.redirectUri), n.searchParams.set("scope", s), n.searchParams.set("code_challenge", o), n.searchParams.set("code_challenge_method", "S256"), n.searchParams.set("state", c), window.location.href = n.toString(), new Error("Redirect initiated");
+  }
+  async handleOAuthCallback(t, e) {
+    const r = localStorage.getItem(this.storageKeys.STATE);
+    if (!r || r !== e)
       throw new Error("Invalid state parameter - possible CSRF attack");
-    await this.exchangeCodeForTokens(e), localStorage.removeItem(this.storageKeys.CODE_VERIFIER), localStorage.removeItem(this.storageKeys.STATE);
-    const r = await this.getAuthState();
-    if (!r.isLoggedIn)
+    await this.exchangeCodeForTokens(t), localStorage.removeItem(this.storageKeys.CODE_VERIFIER), localStorage.removeItem(this.storageKeys.STATE);
+    const s = await this.getAuthState();
+    if (s.status !== "authenticated")
       throw new Error("Login failed");
-    const i = r;
-    return this.setAuthState(i), i;
+    return this.setAuthState(s), s;
   }
   async logout() {
-    const e = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
-    if (e)
+    const t = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
+    if (t)
       try {
-        const s = new URLSearchParams({
-          token: e,
+        const r = new URLSearchParams({
+          token: t,
           client_id: this.authClientId,
           token_type_hint: "refresh_token"
         });
@@ -41,130 +51,118 @@ class L extends x {
           headers: {
             "Content-Type": "application/x-www-form-urlencoded"
           },
-          body: s
+          body: r
         });
-      } catch (s) {
-        this.logger.warn("Token revocation failed:", s);
+      } catch (r) {
+        this.logger.warn("Token revocation failed:", r);
       }
     localStorage.removeItem(this.storageKeys.ACCESS_TOKEN), localStorage.removeItem(this.storageKeys.REFRESH_TOKEN), localStorage.removeItem(this.storageKeys.EXPIRES_AT), localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);
-    const t = {
-      isLoggedIn: !1
+    const e = {
+      status: "unauthenticated",
+      user: null,
+      accessToken: null,
+      error: null
     };
-    return this.setAuthState(t), t;
+    return this.setAuthState(e), e;
   }
   // ============================================================================
   // OAuth Helper Methods
   // ============================================================================
-  async requestResourceAccess() {
-    const e = await this.sendApiRequest(
-      "POST",
-      "/bodhi/v1/apps/request-access",
-      { app_client_id: this.authClientId },
-      {},
-      !1
-    );
-    if (T(e))
-      throw new Error("Failed to get resource access scope from server");
-    if (!f(e))
-      throw new Error("Failed to get resource access scope from server: API error");
-    const t = e.body.scope;
-    return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE, t), t;
-  }
-  async exchangeCodeForTokens(e) {
-    const t = localStorage.getItem(this.storageKeys.CODE_VERIFIER);
-    if (!t)
+  async exchangeCodeForTokens(t) {
+    const e = localStorage.getItem(this.storageKeys.CODE_VERIFIER);
+    if (!e)
       throw new Error("Code verifier not found");
-    const s = await fetch(this.authEndpoints.token, {
+    const r = await fetch(this.authEndpoints.token, {
       method: "POST",
       headers: {
         "Content-Type": "application/x-www-form-urlencoded"
       },
       body: new URLSearchParams({
         grant_type: "authorization_code",
-        code: e,
+        code: t,
         redirect_uri: this.redirectUri,
         client_id: this.authClientId,
-        code_verifier: t
+        code_verifier: e
       })
     });
-    if (!s.ok) {
-      const i = await s.text();
-      throw new Error(`Token exchange failed: ${s.status} ${i}`);
+    if (!r.ok) {
+      const a = await r.text();
+      throw new Error(`Token exchange failed: ${r.status} ${a}`);
     }
-    const r = await s.json();
-    if (localStorage.setItem(this.storageKeys.ACCESS_TOKEN, r.access_token), r.refresh_token && localStorage.setItem(this.storageKeys.REFRESH_TOKEN, r.refresh_token), r.expires_in) {
-      const i = Date.now() + r.expires_in * 1e3;
-      localStorage.setItem(this.storageKeys.EXPIRES_AT, i.toString());
+    const s = await r.json();
+    if (localStorage.setItem(this.storageKeys.ACCESS_TOKEN, s.access_token), s.refresh_token && localStorage.setItem(this.storageKeys.REFRESH_TOKEN, s.refresh_token), s.expires_in) {
+      const a = Date.now() + s.expires_in * 1e3;
+      localStorage.setItem(this.storageKeys.EXPIRES_AT, a.toString());
     }
   }
   // ============================================================================
   // Storage Implementation (localStorage)
   // ============================================================================
-  async _storageGet(e) {
-    return localStorage.getItem(e);
+  async _storageGet(t) {
+    return localStorage.getItem(t);
   }
-  async _storageSet(e) {
-    Object.entries(e).forEach(([t, s]) => {
-      localStorage.setItem(t, String(s));
+  async _storageSet(t) {
+    Object.entries(t).forEach(([e, r]) => {
+      localStorage.setItem(e, String(r));
     });
   }
-  async _storageRemove(e) {
-    e.forEach((t) => localStorage.removeItem(t));
+  async _storageRemove(t) {
+    t.forEach((e) => localStorage.removeItem(e));
   }
   _getRedirectUri() {
     return this.redirectUri;
   }
 }
 const N = 500, D = 5e3;
-R(u.WEB);
-function F(l = "/") {
-  const e = w(l, u.WEB);
-  return R(e);
+I(S.WEB);
+function L(u = "/") {
+  const t = p(u, S.WEB);
+  return I(t);
 }
-class B {
-  constructor(e, t, s, r) {
-    this.state = y, this.bodhiext = null, this.refreshPromise = null, this.logger = new C("WindowBodhiextClient", t.logLevel), this.authClientId = e, this.config = t, this.authEndpoints = A(this.config.authServerUrl), this.onStateChange = s ?? k, this.storageKeys = F(r || "/");
+class F {
+  constructor(t, e, r, s) {
+    this.state = y, this.bodhiext = null, this.refreshPromise = null, this.logger = new R("WindowBodhiextClient", e.logLevel), this.authClientId = t, this.config = e, this.authEndpoints = x(this.config.authServerUrl), this.onStateChange = r ?? k, this.storageKeys = L(s || "/");
   }
   /**
    * Set client state and notify callback
    */
-  setState(e) {
-    this.state = e, this.logger.info(`{state: ${JSON.stringify(e)}} - Setting client state`), this.onStateChange({ type: "client-state", state: e });
+  setState(t) {
+    this.state = t, this.logger.info(`{state: ${JSON.stringify(t)}} - Setting client state`), this.onStateChange({ type: "client-state", state: t });
   }
   /**
    * Set auth state and notify callback
    */
-  setAuthState(e) {
-    this.onStateChange({ type: "auth-state", state: e });
+  setAuthState(t) {
+    this.onStateChange({ type: "auth-state", state: t });
   }
   /**
    * Set or update the state change callback
    */
-  setStateCallback(e) {
-    this.onStateChange = e;
+  setStateCallback(t) {
+    this.onStateChange = t;
   }
   // ============================================================================
   // Extension Communication
   // ============================================================================
   /**
    * Ensure bodhiext is available, attempting to acquire it if not already set
-   * @throws Error if client not initialized
+   * @throws OperationError if client not initialized
    */
   ensureBodhiext() {
     if (!this.bodhiext && window.bodhiext && (this.logger.info("Acquiring window.bodhiext reference"), this.bodhiext = window.bodhiext), !this.bodhiext)
-      throw new Error("Client not initialized");
+      throw h("Client not initialized", "extension_error");
   }
   /**
    * Send extension request via window.bodhiext.sendExtRequest
    */
-  async sendExtRequest(e, t) {
-    return this.ensureBodhiext(), this.bodhiext.sendExtRequest(e, t);
+  async sendExtRequest(t, e) {
+    return this.ensureBodhiext(), this.bodhiext.sendExtRequest(t, e);
   }
   /**
    * Send API message via window.bodhiext.sendApiRequest
    * Converts ApiResponse to ApiResponseResult
    */
-  async sendApiRequest(e, t, s, r, i) {
+  async sendApiRequest(t, e, r, s, a) {
     try {
       this.ensureBodhiext();
     } catch (o) {
@@ -176,10 +174,10 @@ class B {
       };
     }
     try {
-      let o = r || {};
-      if (i) {
-        const c = await this._getAccessTokenRaw();
-        if (!c)
+      let o = s || {};
+      if (a) {
+        const n = await this._getAccessTokenRaw();
+        if (!n)
           return {
             error: {
               message: "Not authenticated. Please log in first.",
@@ -188,21 +186,21 @@ class B {
           };
         o = {
           ...o,
-          Authorization: `Bearer ${c}`
+          Authorization: `Bearer ${n}`
         };
       }
       return await this.bodhiext.sendApiRequest(
-        e,
         t,
-        s,
+        e,
+        r,
         o
       );
     } catch (o) {
-      const a = o == null ? void 0 : o.error, c = (a == null ? void 0 : a.message) ?? (o instanceof Error ? o.message : String(o)), n = (a == null ? void 0 : a.type) || "extension_error";
+      const c = o?.error, n = c?.message ?? (o instanceof Error ? o.message : String(o)), i = c?.type || "extension_error";
       return {
         error: {
-          message: c,
-          type: n
+          message: n,
+          type: i
         }
       };
     }
@@ -226,47 +224,46 @@ class B {
    * Note: Web mode uses stateless discovery (always polls for window.bodhiext)
    * No extensionId storage/restoration needed - window.bodhiext handle is ephemeral
    */
-  async init(e = {}) {
-    var r, i, o, a;
-    if (!e.testConnection && !e.selectedConnection)
+  async init(t = {}) {
+    if (!t.testConnection && !t.selectedConnection)
       return this.logger.info("No testConnection or selectedConnection, returning not-initialized state"), y;
-    if (this.bodhiext && !e.testConnection)
+    if (this.bodhiext && !t.testConnection)
       return this.logger.debug("Already have bodhiext handle, skipping polling"), this.state;
     if (!this.bodhiext) {
-      const c = e.timeoutMs ?? ((i = (r = this.config.initParams) == null ? void 0 : r.extension) == null ? void 0 : i.timeoutMs) ?? D, n = e.intervalMs ?? ((a = (o = this.config.initParams) == null ? void 0 : o.extension) == null ? void 0 : a.intervalMs) ?? N, h = Date.now();
-      if (!await new Promise((p) => {
-        const m = () => {
+      const s = t.timeoutMs ?? this.config.initParams?.extension?.timeoutMs ?? D, a = t.intervalMs ?? this.config.initParams?.extension?.intervalMs ?? N, o = Date.now();
+      if (!await new Promise((n) => {
+        const i = () => {
           if (window.bodhiext) {
-            this.bodhiext = window.bodhiext, p(!0);
+            this.bodhiext = window.bodhiext, n(!0);
             return;
           }
-          if (Date.now() - h >= c) {
-            p(!1);
+          if (Date.now() - o >= s) {
+            n(!1);
             return;
           }
-          setTimeout(m, n);
+          setTimeout(i, a);
         };
-        m();
+        i();
       }))
-        return this.logger.warn("Extension discovery timed out"), this.setState(v), this.state;
+        return this.logger.warn("Extension discovery timed out"), this.setState(A), this.state;
     }
-    const t = await this.bodhiext.getExtensionId();
-    this.logger.info(`Extension discovered: ${t}`);
-    const s = {
+    const e = await this.bodhiext.getExtensionId();
+    this.logger.info(`Extension discovered: ${e}`);
+    const r = {
       type: "extension",
       extension: "ready",
-      extensionId: t,
-      server: b
+      extensionId: e,
+      server: v
     };
-    if (e.testConnection)
+    if (t.testConnection)
       try {
-        const c = await this.getServerState();
-        this.setState({ ...s, server: c }), this.logger.info(`Server connectivity tested: ${c.status}`);
-      } catch (c) {
-        this.logger.error("Failed to get server state:", c), this.setState({ ...s, server: d });
+        const s = await this.getServerState();
+        this.setState({ ...r, server: s }), this.logger.info(`Server connectivity tested: ${s.status}`);
+      } catch (s) {
+        this.logger.error("Failed to get server state:", s), this.setState({ ...r, server: d });
       }
     else
-      this.setState(s);
+      this.setState(r);
     return this.state;
   }
   // ============================================================================
@@ -277,82 +274,90 @@ class B {
    * Required for authenticated API access
    */
   async requestResourceAccess() {
-    this.ensureBodhiext();
-    const e = await this.bodhiext.sendApiRequest("POST", "/bodhi/v1/apps/request-access", {
-      app_client_id: this.authClientId
-    });
-    if (!f(e))
-      throw new Error("Failed to get resource access scope: API error");
-    const t = e.body.scope;
-    return localStorage.setItem(this.storageKeys.RESOURCE_SCOPE, t), t;
+    return this.ensureBodhiext(), this.bodhiext.sendApiRequest(
+      "POST",
+      "/bodhi/v1/apps/request-access",
+      { app_client_id: this.authClientId }
+    );
   }
   /**
    * Login via browser redirect OAuth2 + PKCE flow
-   * @returns AuthLoggedIn (though in practice, this redirects and never returns)
+   * @returns AuthState (though in practice, this redirects and never returns)
    */
   async login() {
-    const e = await this.getAuthState();
-    if (e.isLoggedIn)
-      return e;
+    const t = await this.getAuthState();
+    if (t.status === "authenticated")
+      return t;
     this.ensureBodhiext();
-    const t = await this.requestResourceAccess(), s = g(), r = await I(s), i = g();
-    localStorage.setItem(this.storageKeys.CODE_VERIFIER, s), localStorage.setItem(this.storageKeys.STATE, i);
-    const o = ["openid", "profile", "email", "roles", this.config.userScope, t], a = new URLSearchParams({
+    const e = await this.requestResourceAccess();
+    if (f(e))
+      throw h(e.error.message, e.error.type);
+    if (w(e)) {
+      const { message: l } = e.body.error;
+      throw h(l, "auth_error");
+    }
+    if (!m(e))
+      throw h(`Unexpected HTTP ${e.status}`, "auth_error");
+    const r = e.body.scope;
+    localStorage.setItem(this.storageKeys.RESOURCE_SCOPE, r);
+    const s = g(), a = await T(s), o = g();
+    localStorage.setItem(this.storageKeys.CODE_VERIFIER, s), localStorage.setItem(this.storageKeys.STATE, o);
+    const c = ["openid", "profile", "email", "roles", this.config.userScope, r], n = new URLSearchParams({
       response_type: "code",
       client_id: this.authClientId,
       redirect_uri: this.config.redirectUri,
-      scope: o.join(" "),
-      state: i,
-      code_challenge: r,
+      scope: c.join(" "),
+      state: o,
+      code_challenge: a,
       code_challenge_method: "S256"
-    }), c = `${this.authEndpoints.authorize}?${a}`;
-    return window.location.href = c, new Promise(() => {
+    }), i = `${this.authEndpoints.authorize}?${n}`;
+    return window.location.href = i, new Promise(() => {
     });
   }
   /**
    * Handle OAuth callback with authorization code
    * Should be called from callback page with extracted URL params
-   * @returns AuthLoggedIn with login state and user info
+   * @returns AuthState with login state and user info
    */
-  async handleOAuthCallback(e, t) {
-    const s = localStorage.getItem(this.storageKeys.STATE);
-    if (!s || s !== t)
+  async handleOAuthCallback(t, e) {
+    const r = localStorage.getItem(this.storageKeys.STATE);
+    if (!r || r !== e)
       throw new Error("Invalid state parameter - possible CSRF attack");
-    await this.exchangeCodeForTokens(e), localStorage.removeItem(this.storageKeys.CODE_VERIFIER), localStorage.removeItem(this.storageKeys.STATE);
-    const r = await this.getAuthState();
-    if (!r.isLoggedIn)
+    await this.exchangeCodeForTokens(t), localStorage.removeItem(this.storageKeys.CODE_VERIFIER), localStorage.removeItem(this.storageKeys.STATE);
+    const s = await this.getAuthState();
+    if (s.status !== "authenticated")
       throw new Error("Login failed");
-    return this.setAuthState(r), r;
+    return this.setAuthState(s), s;
   }
   /**
    * Exchange authorization code for tokens
    */
-  async exchangeCodeForTokens(e) {
-    const t = localStorage.getItem(this.storageKeys.CODE_VERIFIER);
-    if (!t)
+  async exchangeCodeForTokens(t) {
+    const e = localStorage.getItem(this.storageKeys.CODE_VERIFIER);
+    if (!e)
       throw new Error("Code verifier not found");
-    const s = new URLSearchParams({
+    const r = new URLSearchParams({
       grant_type: "authorization_code",
       client_id: this.authClientId,
-      code: e,
+      code: t,
       redirect_uri: this.config.redirectUri,
-      code_verifier: t
-    }), r = await fetch(this.authEndpoints.token, {
+      code_verifier: e
+    }), s = await fetch(this.authEndpoints.token, {
       method: "POST",
       headers: {
         "Content-Type": "application/x-www-form-urlencoded"
       },
-      body: s
+      body: r
     });
-    if (!r.ok) {
-      const o = await r.text();
-      throw new Error(`Token exchange failed: ${r.status} ${o}`);
+    if (!s.ok) {
+      const o = await s.text();
+      throw new Error(`Token exchange failed: ${s.status} ${o}`);
     }
-    const i = await r.json();
-    if (!i.access_token)
+    const a = await s.json();
+    if (!a.access_token)
       throw new Error("No access token received");
-    if (localStorage.setItem(this.storageKeys.ACCESS_TOKEN, i.access_token), i.refresh_token && localStorage.setItem(this.storageKeys.REFRESH_TOKEN, i.refresh_token), i.expires_in) {
-      const o = Date.now() + i.expires_in * 1e3;
+    if (localStorage.setItem(this.storageKeys.ACCESS_TOKEN, a.access_token), a.refresh_token && localStorage.setItem(this.storageKeys.REFRESH_TOKEN, a.refresh_token), a.expires_in) {
+      const o = Date.now() + a.expires_in * 1e3;
       localStorage.setItem(this.storageKeys.EXPIRES_AT, o.toString());
     }
   }
@@ -361,11 +366,11 @@ class B {
    * @returns AuthLoggedOut with logged out state
    */
   async logout() {
-    const e = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
-    if (e)
+    const t = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
+    if (t)
       try {
-        const s = new URLSearchParams({
-          token: e,
+        const r = new URLSearchParams({
+          token: t,
           client_id: this.authClientId,
           token_type_hint: "refresh_token"
         });
@@ -374,28 +379,31 @@ class B {
           headers: {
             "Content-Type": "application/x-www-form-urlencoded"
           },
-          body: s
+          body: r
         });
-      } catch (s) {
-        this.logger.warn("Token revocation failed:", s);
+      } catch (r) {
+        this.logger.warn("Token revocation failed:", r);
       }
     localStorage.removeItem(this.storageKeys.ACCESS_TOKEN), localStorage.removeItem(this.storageKeys.REFRESH_TOKEN), localStorage.removeItem(this.storageKeys.EXPIRES_AT), localStorage.removeItem(this.storageKeys.CODE_VERIFIER), localStorage.removeItem(this.storageKeys.STATE), localStorage.removeItem(this.storageKeys.RESOURCE_SCOPE);
-    const t = {
-      isLoggedIn: !1
+    const e = {
+      status: "unauthenticated",
+      user: null,
+      accessToken: null,
+      error: null
     };
-    return this.setAuthState(t), t;
+    return this.setAuthState(e), e;
   }
   /**
    * Get current authentication state
    */
   async getAuthState() {
-    const e = await this._getAccessTokenRaw();
-    if (!e)
-      return { isLoggedIn: !1 };
+    const t = await this._getAccessTokenRaw();
+    if (!t)
+      return { status: "unauthenticated", user: null, accessToken: null, error: null };
     try {
-      return { isLoggedIn: !0, userInfo: _(e), accessToken: e };
-    } catch (t) {
-      return this.logger.error("Failed to parse token:", t), { isLoggedIn: !1 };
+      return { status: "authenticated", user: _(t), accessToken: t, error: null };
+    } catch (e) {
+      return this.logger.error("Failed to parse token:", e), { status: "unauthenticated", user: null, accessToken: null, error: null };
     }
   }
   /**
@@ -403,26 +411,26 @@ class B {
    * Returns null if not logged in or token expired
    */
   async _getAccessTokenRaw() {
-    const e = localStorage.getItem(this.storageKeys.ACCESS_TOKEN), t = localStorage.getItem(this.storageKeys.EXPIRES_AT);
-    if (!e)
+    const t = localStorage.getItem(this.storageKeys.ACCESS_TOKEN), e = localStorage.getItem(this.storageKeys.EXPIRES_AT);
+    if (!t)
       return null;
-    if (t) {
-      const s = parseInt(t, 10);
-      if (Date.now() >= s - 5 * 1e3) {
-        const r = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
-        return r ? this._tryRefreshToken(r) : null;
+    if (e) {
+      const r = parseInt(e, 10);
+      if (Date.now() >= r - 5 * 1e3) {
+        const s = localStorage.getItem(this.storageKeys.REFRESH_TOKEN);
+        return s ? this._tryRefreshToken(s) : null;
       }
     }
-    return e;
+    return t;
   }
   /**
    * Try to refresh access token using refresh token
    * Race condition prevention: Returns existing promise if refresh already in progress
    */
-  async _tryRefreshToken(e) {
+  async _tryRefreshToken(t) {
     if (this.refreshPromise)
       return this.logger.debug("Refresh already in progress, returning existing promise"), this.refreshPromise;
-    this.refreshPromise = this._doRefreshToken(e);
+    this.refreshPromise = this._doRefreshToken(t);
     try {
       return await this.refreshPromise;
     } finally {
@@ -432,27 +440,28 @@ class B {
   /**
    * Perform the actual token refresh
    */
-  async _doRefreshToken(e) {
+  async _doRefreshToken(t) {
     this.logger.debug("Refreshing access token");
     try {
-      const t = await P(
+      const e = await b(
         this.authEndpoints.token,
-        e,
+        t,
         this.authClientId
       );
-      if (t) {
-        this._storeRefreshedTokens(t);
-        const s = _(t.access_token);
+      if (e) {
+        this._storeRefreshedTokens(e);
+        const r = _(e.access_token);
         return this.setAuthState({
-          isLoggedIn: !0,
-          userInfo: s,
-          accessToken: t.access_token
-        }), this.logger.info("Token refreshed successfully"), t.access_token;
+          status: "authenticated",
+          user: r,
+          accessToken: e.access_token,
+          error: null
+        }), this.logger.info("Token refreshed successfully"), e.access_token;
       }
-    } catch (t) {
-      this.logger.warn("Token refresh failed:", t);
+    } catch (e) {
+      this.logger.warn("Token refresh failed:", e);
     }
-    throw this.logger.warn("Token refresh failed, keeping tokens for manual retry"), S(
+    throw this.logger.warn("Token refresh failed, keeping tokens for manual retry"), h(
       "Access token expired and unable to refresh. Try logging out and logging in again.",
       "token_refresh_failed"
     );
@@ -460,9 +469,9 @@ class B {
   /**
    * Store refreshed tokens
    */
-  _storeRefreshedTokens(e) {
-    const t = Date.now() + e.expires_in * 1e3;
-    localStorage.setItem(this.storageKeys.ACCESS_TOKEN, e.access_token), localStorage.setItem(this.storageKeys.EXPIRES_AT, String(t)), e.refresh_token && localStorage.setItem(this.storageKeys.REFRESH_TOKEN, e.refresh_token);
+  _storeRefreshedTokens(t) {
+    const e = Date.now() + t.expires_in * 1e3;
+    localStorage.setItem(this.storageKeys.ACCESS_TOKEN, t.access_token), localStorage.setItem(this.storageKeys.EXPIRES_AT, String(e)), t.refresh_token && localStorage.setItem(this.storageKeys.REFRESH_TOKEN, t.refresh_token);
   }
   /**
    * Ping API
@@ -487,24 +496,24 @@ class B {
    * Calls /bodhi/v1/info and returns structured server state
    */
   async getServerState() {
-    const e = await this.sendApiRequest("GET", "/bodhi/v1/info");
-    if (T(e))
+    const t = await this.sendApiRequest("GET", "/bodhi/v1/info");
+    if (f(t))
       return d;
-    if (!f(e))
+    if (!m(t))
       return d;
-    const t = e.body;
-    switch (t.status) {
+    const e = t.body;
+    switch (e.status) {
       case "ready":
-        return { status: "ready", version: t.version || "unknown" };
+        return { status: "ready", version: e.version || "unknown", error: null };
       case "setup":
-        return E("setup", t.version || "unknown");
+        return E("setup", e.version || "unknown");
       case "resource-admin":
-        return E("resource-admin", t.version || "unknown");
+        return E("resource-admin", e.version || "unknown");
       case "error":
         return E(
           "error",
-          t.version || "unknown",
-          t.error ? { message: t.error.message, type: t.error.type } : O.SERVER_NOT_READY
+          e.version || "unknown",
+          e.error ? { message: e.error.message, type: e.error.type } : O.SERVER_NOT_READY
         );
       default:
         return d;
@@ -514,53 +523,53 @@ class B {
    * Generic streaming via window.bodhiext.sendStreamRequest
    * Wraps ReadableStream as AsyncGenerator
    */
-  async *stream(e, t, s, r, i = !0) {
+  async *stream(t, e, r, s, a = !0) {
     this.ensureBodhiext();
-    let o = r || {};
-    if (i) {
-      const n = await this._getAccessTokenRaw();
-      if (!n)
-        throw new Error("Not authenticated. Please log in first.");
+    let o = s || {};
+    if (a) {
+      const i = await this._getAccessTokenRaw();
+      if (!i)
+        throw h("Not authenticated. Please log in first.", "auth_error");
       o = {
         ...o,
-        Authorization: `Bearer ${n}`
+        Authorization: `Bearer ${i}`
       };
     }
-    const c = this.bodhiext.sendStreamRequest(e, t, s, o).getReader();
+    const n = this.bodhiext.sendStreamRequest(t, e, r, o).getReader();
     try {
       for (; ; ) {
-        const { value: n, done: h } = await c.read();
-        if (h || n != null && n.done)
+        const { value: i, done: l } = await n.read();
+        if (l || i?.done)
           break;
-        yield n.body;
+        yield i.body;
       }
-    } catch (n) {
-      if (n instanceof Error) {
-        if ("response" in n) {
-          const h = n;
-          throw K(n.message, h.response.status, h.response.body);
+    } catch (i) {
+      if (i instanceof Error) {
+        if ("response" in i) {
+          const l = i;
+          throw P(i.message, l.response.status, l.response.body);
         }
-        throw "error" in n ? S(n.message, "extension_error") : S(n.message, "extension_error");
+        throw "error" in i ? h(i.message, "extension_error") : h(i.message, "extension_error");
       }
-      throw n;
+      throw i;
     } finally {
-      c.releaseLock();
+      n.releaseLock();
     }
   }
   /**
    * Chat streaming
    */
-  async *streamChat(e, t, s = !0) {
+  async *streamChat(t, e, r = !0) {
     yield* this.stream(
       "POST",
       "/v1/chat/completions",
       {
-        model: e,
-        messages: [{ role: "user", content: t }],
+        model: t,
+        messages: [{ role: "user", content: e }],
         stream: !0
       },
       void 0,
-      s
+      r
     );
   }
   /**
@@ -587,47 +596,47 @@ class B {
     };
   }
 }
-class W extends U {
-  constructor(e, t, s, r) {
-    const i = {
-      redirectUri: t.redirectUri,
-      authServerUrl: t.authServerUrl || "https://id.getbodhi.app/realms/bodhi",
-      userScope: t.userScope || "scope_user_user",
-      basePath: t.basePath || "/",
-      logLevel: t.logLevel || "warn",
-      initParams: t.initParams
+class q extends K {
+  constructor(t, e, r, s) {
+    const a = {
+      redirectUri: e.redirectUri,
+      authServerUrl: e.authServerUrl || "https://id.getbodhi.app/realms/bodhi",
+      userScope: e.userScope || "scope_user_user",
+      basePath: e.basePath || "/",
+      logLevel: e.logLevel || "warn",
+      initParams: e.initParams
     };
-    super(e, i, s, r, t.basePath);
+    super(t, a, r, s, e.basePath);
   }
-  createLogger(e) {
-    return new C("WebUIClient", e.logLevel);
+  createLogger(t) {
+    return new R("WebUIClient", t.logLevel);
   }
-  createExtClient(e, t) {
-    return new B(this.authClientId, e, t, e.basePath);
+  createExtClient(t, e) {
+    return new F(this.authClientId, t, e, t.basePath);
   }
-  createDirectClient(e, t, s) {
-    return new L(
+  createDirectClient(t, e, r) {
+    return new U(
       {
-        authClientId: e,
-        authServerUrl: t.authServerUrl,
-        redirectUri: t.redirectUri,
-        userScope: t.userScope,
-        logLevel: t.logLevel,
-        storagePrefix: u.WEB,
-        basePath: t.basePath
+        authClientId: t,
+        authServerUrl: e.authServerUrl,
+        redirectUri: e.redirectUri,
+        userScope: e.userScope,
+        logLevel: e.logLevel,
+        storagePrefix: S.WEB,
+        basePath: e.basePath
       },
-      s
+      r
     );
   }
   // ============================================================================
   // Web-specific OAuth Callback
   // ============================================================================
-  async handleOAuthCallback(e, t) {
-    return this.connectionMode === "direct" ? this.directClient.handleOAuthCallback(e, t) : this.extClient.handleOAuthCallback(e, t);
+  async handleOAuthCallback(t, e) {
+    return this.connectionMode === "direct" ? this.directClient.handleOAuthCallback(t, e) : this.extClient.handleOAuthCallback(t, e);
   }
 }
-const $ = "production";
+const V = "production";
 export {
-  $ as WEB_BUILD_MODE,
-  W as WebUIClient
+  V as WEB_BUILD_MODE,
+  q as WebUIClient
 };