berget 2.1.2 → 2.2.1

package/.github/workflows/publish.yml

@@ -1,11 +1,16 @@
 name: Publish to NPM
 
 on:
-  push:
-    branches:
-      - main
-  release:
-    types: [published]
+  workflow_dispatch:
+    inputs:
+      bump:
+        description: 'Version bump type'
+        required: true
+        type: choice
+        options:
+          - patch
+          - minor
+          - major
 
 jobs:
   test:
@@ -32,10 +37,12 @@ jobs:
   publish:
     needs: test
     runs-on: ubuntu-latest
-    if: github.ref == 'refs/heads/main' || github.event_name == 'release'
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          ref: main
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -50,6 +57,13 @@ jobs:
       - name: Build project
         run: npm run build
 
+      - name: Bump version
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          npm version ${{ inputs.bump }} -m "release: %s"
+          git push --follow-tags
+
       - name: Publish to NPM
         run: npm publish
         env:

package/dist/index.js

@@ -24,7 +24,8 @@ commander_1.program
                 |___/   AI on European terms
 Version: ${package_json_1.version}`)
     .version(package_json_1.version, '-v, --version')
-    .option('--local', 'Use local API endpoint (hidden)', false)
+    .addOption(new commander_1.Option('--local').default(false).hideHelp())
+    .addOption(new commander_1.Option('--stage').default(false).hideHelp())
     .option('--debug', 'Enable debug output', false);
 // Register all commands
 (0, commands_1.registerCommands)(commander_1.program);

package/dist/package.json

@@ -1,6 +1,6 @@
 {
     "name": "berget",
-    "version": "2.1.2",
+    "version": "2.2.1",
     "main": "dist/index.js",
     "bin": {
         "berget": "dist/index.js"

package/dist/src/client.js

@@ -19,12 +19,19 @@ const token_manager_1 = require("./utils/token-manager");
 const logger_1 = require("./utils/logger");
 // API Base URL
 // Use --local flag to test against local API
+// Use --stage flag to test against stage API
 const isLocalMode = process.argv.includes('--local');
+const isStageMode = process.argv.includes('--stage');
 exports.API_BASE_URL = process.env.BERGET_API_URL ||
-    (isLocalMode ? 'http://localhost:3000' : 'https://api.berget.ai');
+    (isLocalMode ? 'http://localhost:3000' :
+        isStageMode ? 'https://api.stage.berget.ai' :
+            'https://api.berget.ai'); // production default
 if (isLocalMode && !process.env.BERGET_API_URL) {
     logger_1.logger.debug('Using local API endpoint: http://localhost:3000');
 }
+else if (isStageMode && !process.env.BERGET_API_URL) {
+    logger_1.logger.debug('Using stage API endpoint: https://api.stage.berget.ai');
+}
 // Create a typed client for the Berget API
 exports.apiClient = (0, openapi_fetch_1.default)({
     baseUrl: exports.API_BASE_URL,
@@ -177,6 +184,12 @@ const createAuthenticatedClient = () => {
     });
 };
 exports.createAuthenticatedClient = createAuthenticatedClient;
+// Keycloak configuration for token refresh (must match auth-service.ts)
+const KEYCLOAK_URL = (isStageMode || isLocalMode)
+    ? 'https://keycloak.stage.berget.ai'
+    : 'https://keycloak.berget.ai';
+const KEYCLOAK_REALM = 'berget';
+const KEYCLOAK_CLIENT_ID = 'berget-code';
 // Helper function to refresh the access token
 function refreshAccessToken(tokenManager) {
     return __awaiter(this, void 0, void 0, function* () {
@@ -185,15 +198,18 @@ function refreshAccessToken(tokenManager) {
             if (!refreshToken)
                 return false;
             logger_1.logger.debug('Attempting to refresh access token');
-            // Use fetch directly since this endpoint might not be in the OpenAPI spec
+            // Refresh directly against Keycloak (berget-code is a public PKCE client)
             try {
-                const response = yield fetch(`${exports.API_BASE_URL}/v1/auth/refresh`, {
+                const response = yield fetch(`${KEYCLOAK_URL}/realms/${KEYCLOAK_REALM}/protocol/openid-connect/token`, {
                     method: 'POST',
                     headers: {
-                        'Content-Type': 'application/json',
-                        Accept: 'application/json',
+                        'Content-Type': 'application/x-www-form-urlencoded',
                     },
-                    body: JSON.stringify({ refresh_token: refreshToken }),
+                    body: new URLSearchParams({
+                        grant_type: 'refresh_token',
+                        client_id: KEYCLOAK_CLIENT_ID,
+                        refresh_token: refreshToken,
+                    }),
                 });
                 // Handle HTTP errors
                 if (!response.ok) {