busa-sdk 0.98.0 → 0.99.0

package/dist/airapp-check.d.ts

@@ -74,6 +74,21 @@ interface AirAppSources {
   config?: string;
   /** The slug the package ships this app under, for the `resourceKey` rule. */
   shippedSlug?: string;
+  /**
+   * The app's files, one entry each, paths relative to the app's root — for the
+   * rules that report a file and line (`airapp/forced-review`).
+   *
+   * Pass every file; the rule picks its own corpus with
+   * {@link isAirAppWriteRuleSource} (script sources only, never `vendor/`,
+   * `node_modules/`, tests, or `scripts/`), so a caller cannot widen it by
+   * accident. Omitted, the rule falls back to `browserLogic` + `server`, which
+   * still covers the provider and the host but can only quote the offending
+   * line, not name its file.
+   */
+  appSources?: readonly {
+    path: string;
+    content: string;
+  }[];
 }
 /**
  * The documented interactive page budget. A higher one may be justified — say so in
@@ -91,6 +106,57 @@ declare const AIRAPP_DEFAULT_READ_LIMIT = 50;
  * satisfy the rule.
  */
 declare const stripComments: (source: string) => string;
+/**
+ * The source with every comment, string, template-literal text, and regex
+ * literal blanked to spaces — newlines kept, so an offset still maps to its line.
+ *
+ * Stricter than {@link stripComments}, and for a rule that matches an
+ * identifier that has to be: the prose and messages explaining `autoMerge` name
+ * it constantly (`"pass autoMerge: false to force review"`), and a rule that
+ * fires on its own explanation stops being read. Template-literal
+ * *interpolations* stay code — `${autoMerge}` is a real use.
+ */
+declare const codeOnly: (source: string) => string;
+/** The reason an `allow-forced-review` comment has to give, at minimum, in characters. */
+declare const AIRAPP_FORCED_REVIEW_MIN_REASON = 20;
+/** Where `autoMerge` was set to something other than literal `true`. */
+interface AirAppForcedReview {
+  /** 1-based. */
+  line: number;
+  /** The offending line, trimmed. */
+  text: string;
+  problem: string;
+}
+/**
+ * Every `autoMerge` in `source`'s code that is not a literal `true`, with the
+ * line it is on — an explicit `false`, a value worked out at runtime
+ * (`autoMerge: isStandaloneLocalRuntime()`), or a variable passed through
+ * (`{ autoMerge }`). Comments, strings, template text, and regexes never match.
+ *
+ * Why it is a rule: a person's own write follows their permission. The app
+ * leaves `autoMerge` unset; Busabase merges it for someone with write access and
+ * opens a ChangeRequest for someone without. An app that forces review makes
+ * every owner approve their own click in the inbox — a fix that had to be
+ * applied to 49 shipped copies by hand.
+ *
+ * Forcing review is still right when the write is something outgoing a second
+ * person must approve before it is sent. Say so on the line, or the line above,
+ * and the rule lets it through:
+ *
+ * ```js
+ * autoMerge: false, // allow-forced-review: drafts an outgoing contract that legal must approve
+ * ```
+ *
+ * The reason must be at least {@link AIRAPP_FORCED_REVIEW_MIN_REASON} characters.
+ */
+declare const findForcedReview: (source: string) => AirAppForcedReview[];
+/**
+ * Whether `path` (relative to the app's root, `/`-separated) belongs to the
+ * corpus `airapp/forced-review` scans: a script source of the app's own, not a
+ * vendored bundle, a test, or a dev script. The same corpus as
+ * `scripts/check-app-writes.mjs` in busabase/templates.
+ */
+declare const isAirAppWriteRuleSource: (path: string) => boolean;
 /**
  * Objects inside a `bases: [ ... ]` literal, brace-matched rather than regexed across
  * the array, so a nested `fields:` entry is never mistaken for a Base.
@@ -114,4 +180,4 @@ declare const scanAirAppConfig: (source: string) => {
  */
 declare const checkAirApp: (sources: AirAppSources) => AirAppFinding[];
 //#endregion
-export { AIRAPP_DEFAULT_READ_LIMIT, AirAppFinding, AirAppFindingSeverity, AirAppSources, checkAirApp, scanAirAppConfig, stripComments };
+export { AIRAPP_DEFAULT_READ_LIMIT, AIRAPP_FORCED_REVIEW_MIN_REASON, AirAppFinding, AirAppFindingSeverity, AirAppForcedReview, AirAppSources, checkAirApp, codeOnly, findForcedReview, isAirAppWriteRuleSource, scanAirAppConfig, stripComments };

package/dist/airapp-check.js

@@ -14,6 +14,10 @@ const FORBIDDEN_DEPENDENCIES = [
 	"webpack",
 	"parcel"
 ];
+/** Code that branches on where the app is running. */
+const RUNTIME_BRANCH = /createAirAppConnectGate|getRuntime\s*\(|detectAirAppRuntime\s*\(|shouldUseLocalAirAppGateway|\bhosted\b/;
+/** The SDK's browser probe of `__airapp/runtime` (`busabase-sdk/airapp`). */
+const SDK_RUNTIME_PROBE = /\bdetectAirAppRuntime\s*\(/;
 /**
 * The documented interactive page budget. A higher one may be justified — say so in
 * review — so this is a warning rather than a hard bound. A generator checking its
@@ -30,6 +34,163 @@ const AIRAPP_DEFAULT_READ_LIMIT = 50;
 * satisfy the rule.
 */
 const stripComments = (source) => source.replace(/\/\*[\s\S]*?\*\//g, " ").replace(/(^|[^:'"`\\])\/\/[^\n]*/g, "$1 ");
+const REGEX_PREFIX = /[(,=:[!&|?{};+\-*%<>~^]$/;
+const REGEX_KEYWORD = /\b(?:return|typeof|instanceof|in|of|new|delete|void|throw|case|do|else|yield|await)$/;
+/**
+* The source with every comment, string, template-literal text, and regex
+* literal blanked to spaces — newlines kept, so an offset still maps to its line.
+*
+* Stricter than {@link stripComments}, and for a rule that matches an
+* identifier that has to be: the prose and messages explaining `autoMerge` name
+* it constantly (`"pass autoMerge: false to force review"`), and a rule that
+* fires on its own explanation stops being read. Template-literal
+* *interpolations* stay code — `${autoMerge}` is a real use.
+*/
+const codeOnly = (source) => {
+	const out = source.split("");
+	const blank = (from, to) => {
+		for (let index = from; index < to; index += 1) if (out[index] !== "\n") out[index] = " ";
+	};
+	const templateDepth = [];
+	let index = 0;
+	while (index < source.length) {
+		const char = source[index];
+		const next = source[index + 1];
+		if (char === "/" && next === "/") {
+			const end = source.indexOf("\n", index);
+			const stop = end === -1 ? source.length : end;
+			blank(index, stop);
+			index = stop;
+			continue;
+		}
+		if (char === "/" && next === "*") {
+			const end = source.indexOf("*/", index + 2);
+			const stop = end === -1 ? source.length : end + 2;
+			blank(index, stop);
+			index = stop;
+			continue;
+		}
+		if (char === "\"" || char === "'") {
+			let cursor = index + 1;
+			while (cursor < source.length && source[cursor] !== char && source[cursor] !== "\n") cursor += source[cursor] === "\\" ? 2 : 1;
+			blank(index + 1, cursor);
+			index = cursor + 1;
+			continue;
+		}
+		if (char === "`" || char === "}" && templateDepth.at(-1) === 0) {
+			if (char === "}") templateDepth.pop();
+			let cursor = index + 1;
+			while (cursor < source.length && source[cursor] !== "`") {
+				if (source[cursor] === "\\") {
+					cursor += 2;
+					continue;
+				}
+				if (source[cursor] === "$" && source[cursor + 1] === "{") break;
+				cursor += 1;
+			}
+			blank(index + 1, cursor);
+			if (source[cursor] === "$") {
+				templateDepth.push(0);
+				index = cursor + 2;
+			} else index = cursor + 1;
+			continue;
+		}
+		if (char === "/") {
+			const before = source.slice(Math.max(0, index - 12), index).trimEnd();
+			if (!before || REGEX_PREFIX.test(before) || REGEX_KEYWORD.test(before)) {
+				let cursor = index + 1;
+				let inClass = false;
+				while (cursor < source.length && source[cursor] !== "\n") {
+					const current = source[cursor];
+					if (current === "\\") {
+						cursor += 2;
+						continue;
+					}
+					if (current === "[") inClass = true;
+					else if (current === "]") inClass = false;
+					else if (current === "/" && !inClass) break;
+					cursor += 1;
+				}
+				blank(index + 1, cursor);
+				index = cursor + 1;
+				continue;
+			}
+		}
+		if (templateDepth.length) {
+			if (char === "{") templateDepth[templateDepth.length - 1] += 1;
+			else if (char === "}") templateDepth[templateDepth.length - 1] -= 1;
+		}
+		index += 1;
+	}
+	return out.join("");
+};
+/** The reason an `allow-forced-review` comment has to give, at minimum, in characters. */
+const AIRAPP_FORCED_REVIEW_MIN_REASON = 20;
+const ALLOW_FORCED_REVIEW = /allow-forced-review:\s*(.*)$/;
+/**
+* Every `autoMerge` in `source`'s code that is not a literal `true`, with the
+* line it is on — an explicit `false`, a value worked out at runtime
+* (`autoMerge: isStandaloneLocalRuntime()`), or a variable passed through
+* (`{ autoMerge }`). Comments, strings, template text, and regexes never match.
+*
+* Why it is a rule: a person's own write follows their permission. The app
+* leaves `autoMerge` unset; Busabase merges it for someone with write access and
+* opens a ChangeRequest for someone without. An app that forces review makes
+* every owner approve their own click in the inbox — a fix that had to be
+* applied to 49 shipped copies by hand.
+*
+* Forcing review is still right when the write is something outgoing a second
+* person must approve before it is sent. Say so on the line, or the line above,
+* and the rule lets it through:
+*
+* ```js
+* autoMerge: false, // allow-forced-review: drafts an outgoing contract that legal must approve
+* ```
+*
+* The reason must be at least {@link AIRAPP_FORCED_REVIEW_MIN_REASON} characters.
+*/
+const findForcedReview = (source) => {
+	const code = codeOnly(source);
+	const lines = source.split("\n");
+	const allowReason = (line) => line?.match(ALLOW_FORCED_REVIEW)?.[1]?.trim() ?? null;
+	const findings = [];
+	for (const match of code.matchAll(/\bautoMerge\b/g)) {
+		const offset = match.index ?? 0;
+		const after = code.slice(offset + match[0].length);
+		if (/^\s*[:=](?!=)\s*true\b/.test(after)) continue;
+		const lineIndex = code.slice(0, offset).split("\n").length - 1;
+		const reason = allowReason(lines[lineIndex]) ?? (lineIndex > 0 ? allowReason(lines[lineIndex - 1]) : null);
+		if (reason !== null && reason.length >= 20) continue;
+		findings.push({
+			line: lineIndex + 1,
+			text: (lines[lineIndex] ?? "").trim(),
+			problem: reason === null ? "forces review on a person's own write (leave autoMerge unset), or says why with an allow-forced-review comment" : `allow-forced-review needs a reason of at least 20 characters`
+		});
+	}
+	return findings;
+};
+/** Directories that are not the app's runtime: third-party bundles, the app's own tests and dev checks. */
+const NOT_APP_RUNTIME = /* @__PURE__ */ new Set([
+	"node_modules",
+	"vendor",
+	"test",
+	"tests",
+	"scripts",
+	".git"
+]);
+/**
+* Whether `path` (relative to the app's root, `/`-separated) belongs to the
+* corpus `airapp/forced-review` scans: a script source of the app's own, not a
+* vendored bundle, a test, or a dev script. The same corpus as
+* `scripts/check-app-writes.mjs` in busabase/templates.
+*/
+const isAirAppWriteRuleSource = (path) => {
+	const segments = path.split(/[\\/]/).filter(Boolean);
+	const name = segments.at(-1) ?? "";
+	if (!/\.(?:[cm]?js|jsx|ts|tsx)$/.test(name)) return false;
+	if (/\.test\.[cm]?[jt]sx?$/.test(name)) return false;
+	return !segments.slice(0, -1).some((segment) => NOT_APP_RUNTIME.has(segment));
+};
 /**
 * Objects inside a `bases: [ ... ]` literal, brace-matched rather than regexed across
 * the array, so a nested `fields:` entry is never mistaken for a Base.
@@ -119,17 +280,17 @@ const checkAirApp = (sources) => {
 		if (/(?:src|href)="\/(?!\/)|from\s+["']\/(?!\/)/.test(code)) error("airapp/absolute-asset", "An absolute asset path. Under the Local Node engine the app is proxied onto a sub-path of Busabase's origin, so a leading slash resolves against Busabase itself and 404s.");
 		if (/while\s*\(\s*cursor\s*\)|client\.bases\.list\s*\(/.test(code) || /while\s*\(\s*true\s*\)[\s\S]{0,400}?(?:records\.list|readPage)\s*\(/.test(code)) error("airapp/unbounded-read", "Unbounded loading or runtime Base discovery. Every interactive read gets an explicit budget and fetches one page per user action.");
 		if (/\bmax\w*pages?\w*\s*=\s*\d+[\s\S]{0,400}?(?:client\.)?records\.list\s*\(/i.test(code)) error("airapp/eager-multi-page", "A capped loop fetches several pages of records in one function call. A cap bounds the damage but does not fix the shape: this still hides a multi-page scan behind one loading state instead of fetching one page per user action.");
-		const branches = /createAirAppConnectGate|getRuntime\s*\(|\bhosted\b/.test(code) || sources.server !== void 0 && /createAirAppConnectGate/.test(sources.server);
+		const branches = RUNTIME_BRANCH.test(code) || sources.server !== void 0 && /createAirAppConnectGate/.test(sources.server);
 		if (/location\s*\.\s*(?:hostname|host)\b/.test(code)) error("airapp/runtime-hostname", "Hostname-based runtime detection. Both directions are wrong: a Busabase-hosted AirApp is served from `localhost` on Desktop, and a standalone `npm run dev` is reached over a LAN IP or a signed dev tunnel. Read the runtime from `__airapp/runtime`.");
 		if (/(?:===|!==|==|!=)\s*["'`][^"'`]*(?:localhost|127\.0\.0\.1)|(?:includes|startsWith|endsWith|indexOf|search|match|test)\s*\(\s*\/?["'`]?[^"'`)]*(?:localhost|127\.0\.0\.1)/.test(code)) error("airapp/runtime-loopback", "A loopback host comparison. Runtime detection must not depend on the URL at all.");
-		if (branches && !logic.includes("__airapp/runtime")) error("airapp/runtime-probe", "This app branches on where it is running but never probes `__airapp/runtime`, so that branch is deciding on something else.");
+		if (branches && !logic.includes("__airapp/runtime") && !SDK_RUNTIME_PROBE.test(code)) error("airapp/runtime-probe", "This app branches on where it is running but never probes `__airapp/runtime`, so that branch is deciding on something else.");
 		if (/["'`]\/__airapp\/runtime/.test(logic)) error("airapp/runtime-probe-relative", "The runtime probe has a leading slash. It must be relative (`__airapp/runtime`) — a leading slash resolves against Busabase's root under the Local Node sub-path proxy.");
 	}
 	if (sources.server !== void 0) {
 		const server = sources.server;
 		const serverCode = stripComments(server);
 		const readsRuntimeEnv = (sources.serverLanguage ? sources.serverLanguage === "python" : /^\s*(?:import|from)\s+\w+|def\s+\w+\s*\(/m.test(server)) ? /BUSABASE_AIRAPP_RUNTIME/.test(serverCode) : /(?:read|describe)BusabaseAirAppRuntime\s*\(|process\.env\.BUSABASE_AIRAPP_RUNTIME\b/.test(serverCode);
-		const clientBranches = sources.browserLogic !== void 0 && /createAirAppConnectGate|getRuntime\s*\(|\bhosted\b/.test(stripComments(sources.browserLogic));
+		const clientBranches = sources.browserLogic !== void 0 && RUNTIME_BRANCH.test(stripComments(sources.browserLogic));
 		if (clientBranches && !readsRuntimeEnv) error("airapp/runtime-env", "The server never reads `BUSABASE_AIRAPP_RUNTIME`, directly or through the SDK, so it has nothing to serve at `__airapp/runtime`.");
 		if (/AIRAPP_HOSTED_RUNTIMES\s*=\s*new Set|hosted:\s*\w*RUNTIMES?\w*\.has\s*\(/.test(serverCode)) error("airapp/runtime-engine-list", "Hosting is decided from a hardcoded list of engine names. Use presence, not membership — a private list is what broke 66 apps when `local-node` was renamed `local`.");
 		if (clientBranches && !/["'`]\/__airapp\/runtime["'`]/.test(server)) error("airapp/runtime-route", "Browser code branches on the runtime but the server does not serve `/__airapp/runtime`.");
@@ -141,6 +302,8 @@ const checkAirApp = (sources) => {
 		if (/Bearer\s+(?!\$\{)[A-Za-z0-9_.-]{8,}/.test(downloads)) error("airapp/credential", "A literal Bearer token in browser source.");
 		if (/["'`]\s*Bearer\s*\$\{/.test(downloads)) error("airapp/credential", "Browser code builds an Authorization header. A deployed AirApp uses the viewer's ambient same-origin session and needs none.");
 	}
+	const forcedReviewCorpus = sources.appSources ? sources.appSources.filter((file) => isAirAppWriteRuleSource(file.path)) : [sources.browserLogic, sources.server].filter((content) => content !== void 0).map((content) => ({ content }));
+	for (const file of forcedReviewCorpus) for (const found of findForcedReview(file.content)) error("airapp/forced-review", `${file.path ? `${file.path}:${found.line}: ` : ""}\`${found.text}\` ${found.problem}. Leave \`autoMerge\` unset: Busabase merges a person's write when they have write access and opens a ChangeRequest when they do not.`);
 	if (sources.config !== void 0) {
 		const config = scanAirAppConfig(sources.config);
 		if (sources.shippedSlug !== void 0 && config.resourceKey !== null && config.resourceKey !== sources.shippedSlug) error("airapp/resource-key", `Config declares resourceKey "${config.resourceKey}" but the package ships this app as "${sources.shippedSlug}". Install stamps nodes with the shipped slug, so the app would not recognise its own node.`);
@@ -156,4 +319,4 @@ const checkAirApp = (sources) => {
 	return findings;
 };
 //#endregion
-export { AIRAPP_DEFAULT_READ_LIMIT, checkAirApp, scanAirAppConfig, stripComments };
+export { AIRAPP_DEFAULT_READ_LIMIT, AIRAPP_FORCED_REVIEW_MIN_REASON, checkAirApp, codeOnly, findForcedReview, isAirAppWriteRuleSource, scanAirAppConfig, stripComments };

package/dist/airapp-gate.d.ts

@@ -1,4 +1,4 @@
-import { BusabaseAirAppAuthStatus } from "./airapp-node.js";
+import { a as BusabaseAirAppAuthStatus } from "./airapp-node-D2GcMwde.js";
 //#region src/airapp-gate.d.ts
 /** Which screen the gate owes the operator right now. */
 type AirAppGateScreen = "connect" | "space" | "ready";

package/dist/airapp-node-D2GcMwde.d.ts

@@ -0,0 +1,152 @@
+import { t as BusabaseAirAppCredentialStoreOptions } from "./oauth-node-DGiWkh_l.js";
+//#region src/airapp-node.d.ts
+/**
+ * The env var Busabase injects into every AirApp process it spawns. Nobody else
+ * sets it, which is what makes its **absence** the positive fact "standalone".
+ */
+declare const BUSABASE_AIRAPP_RUNTIME_ENV = "BUSABASE_AIRAPP_RUNTIME";
+/**
+ * Every runtime Busabase hosts an AirApp in, as known to *this* SDK version.
+ *
+ * **Informational. Not what decides whether an app is hosted.** That separation
+ * is the whole point of this constant existing here rather than being pasted
+ * into each app, and getting it backwards is a bug we have already shipped once:
+ * every generated AirApp used to carry its own hardcoded copy of this list and
+ * answer `hosted` from membership in it. When the `local-node` engine was
+ * renamed to `local`, all of them started answering "standalone" *inside a
+ * hosted preview* — showing their own connection gate, calling `/api/v1` with no
+ * credential, and leaving the operator with nothing to act on.
+ *
+ * Moving the list into the SDK does not by itself fix that. An app pins an SDK
+ * version, so a list that gates behaviour would simply rot on a slower clock:
+ * add an engine, and every app on an older SDK is wrong again until it upgrades.
+ *
+ * So the list names runtimes; {@link isBusabaseAirAppHosted} decides hosting,
+ * from presence alone, and needs no upgrade to stay correct.
+ */
+declare const BUSABASE_AIRAPP_RUNTIMES: readonly ["browser", "local", "remote", "embed"];
+/**
+ * Names Busabase has emitted in the past and may still be emitting to an app
+ * pinned to an older deployment. Kept separate from the list above so the
+ * current vocabulary stays readable, and exported so an app that genuinely
+ * wants to branch (a demo that prints where it is running, say) can normalise
+ * instead of growing its own if-chain. Nothing here gates `hosted`.
+ */
+declare const BUSABASE_AIRAPP_RUNTIME_ALIASES: Record<string, BusabaseAirAppRuntime>;
+type BusabaseAirAppRuntime = (typeof BUSABASE_AIRAPP_RUNTIMES)[number];
+/** Read the injected runtime, normalised. `""` means nobody hosted this process. */
+declare const readBusabaseAirAppRuntime: (env?: Record<string, string | undefined>) => string;
+/**
+ * Whether Busabase is hosting this process.
+ *
+ * Presence, never membership — see {@link BUSABASE_AIRAPP_RUNTIMES}. An engine
+ * this SDK has never heard of still means "Busabase spawned me", because only
+ * Busabase sets the variable at all.
+ */
+declare const isBusabaseAirAppHosted: (runtime?: string) => boolean;
+/**
+ * Narrow a runtime string to one this SDK knows, or `null`.
+ *
+ * For code that wants to *branch* on a specific engine — an app that renders
+ * differently under a public embed, say. Deliberately returns `null` rather than
+ * throwing on an unknown value: a newer Busabase naming an engine this SDK
+ * predates is normal, not an error, and the caller should fall back to generic
+ * behaviour rather than break.
+ */
+declare const asKnownBusabaseAirAppRuntime: (runtime: string) => BusabaseAirAppRuntime | null;
+/** The body every AirApp serves at `__airapp/runtime`. */
+interface BusabaseAirAppRuntimeReport {
+  /**
+   * The engine name verbatim, or `"standalone"` when nothing hosted this process.
+   *
+   * Deliberately a plain string and not the enum: a newer Busabase naming an engine
+   * this SDK predates must still round-trip, and narrowing here would erase it.
+   */
+  runtime: string;
+  /**
+   * The same value narrowed to what this SDK knows, or `null` for an engine it has
+   * never heard of. This is the field to branch on when behaviour genuinely differs
+   * per engine — and `null` is a normal answer, not an error.
+   */
+  knownRuntime: BusabaseAirAppRuntime | null;
+  /** Presence of the injected variable. Never membership of {@link BUSABASE_AIRAPP_RUNTIMES}. */
+  hosted: boolean;
+  /** Whether a standalone run is proxying to a Busabase base URL. A separate axis. */
+  devProxy: boolean;
+}
+/**
+ * Build the `__airapp/runtime` body.
+ *
+ * This exists because the one line it replaces — `hosted: …` — has now regressed
+ * twice. Both times a correct app was copied from an older source and came back
+ * deciding hosting from a hardcoded list of engine names, and both times every test
+ * stayed green, because nothing asserted the shape of that decision.
+ *
+ * An app that calls this cannot get it wrong: `hosted` is presence by construction,
+ * and the engine name is reported both verbatim (so an unknown one survives) and
+ * narrowed (so code that wants to branch on a specific engine has a type).
+ */
+declare const describeBusabaseAirAppRuntime: (env?: Record<string, string | undefined>) => BusabaseAirAppRuntimeReport;
+declare const BUSABASE_AIRAPP_GATEWAY_REASONS: {
+  readonly authRequired: "AUTH_REQUIRED";
+  readonly authUnavailable: "AUTH_UNAVAILABLE";
+  readonly connectionRequired: "CONNECTION_REQUIRED";
+  readonly oauthCallbackInvalid: "OAUTH_CALLBACK_INVALID";
+  readonly spaceNotAllowed: "SPACE_NOT_ALLOWED";
+  readonly spaceSelectionRequired: "SPACE_SELECTION_REQUIRED";
+};
+type GatewayReason = (typeof BUSABASE_AIRAPP_GATEWAY_REASONS)[keyof typeof BUSABASE_AIRAPP_GATEWAY_REASONS];
+interface AuthSpace {
+  id: string;
+  name: string;
+  slug?: string | null;
+  plan?: string | null;
+}
+interface GatewayTarget {
+  baseUrl: string;
+  accessToken: string;
+  selectedSpace?: AuthSpace;
+  source: "airapp-oauth-local" | "environment" | "open-server";
+}
+interface BusabaseAirAppLocalGatewayOptions {
+  appId: string;
+  cloudBaseUrl?: string;
+  clientId?: string;
+  environment?: Record<string, string | undefined>;
+  fetch?: typeof fetch;
+  now?: () => number;
+  oauthPendingTtlMs?: number;
+  requestTimeoutMs?: number;
+  credentialStore?: BusabaseAirAppCredentialStoreOptions;
+  successPath?: string;
+  errorPath?: string;
+}
+interface BusabaseAirAppAuthStatus {
+  connected: boolean;
+  cloudBaseUrl: string;
+  baseUrl?: string;
+  source?: GatewayTarget["source"];
+  readiness: "needs_connection" | "needs_auth" | "needs_space" | "ready" | "retry";
+  action: "connect" | "reconnect" | "select_space" | "continue" | "retry";
+  requiresSpace?: boolean;
+  selectedSpace?: AuthSpace | null;
+  space?: AuthSpace | null;
+  spaces?: AuthSpace[];
+  reason?: GatewayReason;
+  message?: string;
+}
+declare class BusabaseAirAppLocalGateway {
+  #private;
+  constructor(options: BusabaseAirAppLocalGatewayOptions);
+  get cloudBaseUrl(): string;
+  status(): Promise<BusabaseAirAppAuthStatus>;
+  statusResponse: () => Promise<Response>;
+  start: (request: Request) => Promise<Response>;
+  callback: (request: Request) => Promise<Response>;
+  selectSpace: (request: Request) => Promise<Response>;
+  logout: (request: Request) => Promise<Response>;
+  proxy: (request: Request) => Promise<Response>;
+}
+declare const createBusabaseAirAppLocalGateway: (options: BusabaseAirAppLocalGatewayOptions) => BusabaseAirAppLocalGateway;
+//#endregion
+export { BusabaseAirAppAuthStatus as a, BusabaseAirAppRuntime as c, createBusabaseAirAppLocalGateway as d, describeBusabaseAirAppRuntime as f, BUSABASE_AIRAPP_RUNTIME_ENV as i, BusabaseAirAppRuntimeReport as l, readBusabaseAirAppRuntime as m, BUSABASE_AIRAPP_RUNTIMES as n, BusabaseAirAppLocalGateway as o, isBusabaseAirAppHosted as p, BUSABASE_AIRAPP_RUNTIME_ALIASES as r, BusabaseAirAppLocalGatewayOptions as s, BUSABASE_AIRAPP_GATEWAY_REASONS as t, asKnownBusabaseAirAppRuntime as u };

package/dist/airapp-node.d.ts

@@ -1,152 +1,2 @@
-import { t as BusabaseAirAppCredentialStoreOptions } from "./oauth-node-DGiWkh_l.js";
-//#region src/airapp-node.d.ts
-/**
- * The env var Busabase injects into every AirApp process it spawns. Nobody else
- * sets it, which is what makes its **absence** the positive fact "standalone".
- */
-declare const BUSABASE_AIRAPP_RUNTIME_ENV = "BUSABASE_AIRAPP_RUNTIME";
-/**
- * Every runtime Busabase hosts an AirApp in, as known to *this* SDK version.
- *
- * **Informational. Not what decides whether an app is hosted.** That separation
- * is the whole point of this constant existing here rather than being pasted
- * into each app, and getting it backwards is a bug we have already shipped once:
- * every generated AirApp used to carry its own hardcoded copy of this list and
- * answer `hosted` from membership in it. When the `local-node` engine was
- * renamed to `local`, all of them started answering "standalone" *inside a
- * hosted preview* — showing their own connection gate, calling `/api/v1` with no
- * credential, and leaving the operator with nothing to act on.
- *
- * Moving the list into the SDK does not by itself fix that. An app pins an SDK
- * version, so a list that gates behaviour would simply rot on a slower clock:
- * add an engine, and every app on an older SDK is wrong again until it upgrades.
- *
- * So the list names runtimes; {@link isBusabaseAirAppHosted} decides hosting,
- * from presence alone, and needs no upgrade to stay correct.
- */
-declare const BUSABASE_AIRAPP_RUNTIMES: readonly ["browser", "local", "remote", "embed"];
-/**
- * Names Busabase has emitted in the past and may still be emitting to an app
- * pinned to an older deployment. Kept separate from the list above so the
- * current vocabulary stays readable, and exported so an app that genuinely
- * wants to branch (a demo that prints where it is running, say) can normalise
- * instead of growing its own if-chain. Nothing here gates `hosted`.
- */
-declare const BUSABASE_AIRAPP_RUNTIME_ALIASES: Record<string, BusabaseAirAppRuntime>;
-type BusabaseAirAppRuntime = (typeof BUSABASE_AIRAPP_RUNTIMES)[number];
-/** Read the injected runtime, normalised. `""` means nobody hosted this process. */
-declare const readBusabaseAirAppRuntime: (env?: Record<string, string | undefined>) => string;
-/**
- * Whether Busabase is hosting this process.
- *
- * Presence, never membership — see {@link BUSABASE_AIRAPP_RUNTIMES}. An engine
- * this SDK has never heard of still means "Busabase spawned me", because only
- * Busabase sets the variable at all.
- */
-declare const isBusabaseAirAppHosted: (runtime?: string) => boolean;
-/**
- * Narrow a runtime string to one this SDK knows, or `null`.
- *
- * For code that wants to *branch* on a specific engine — an app that renders
- * differently under a public embed, say. Deliberately returns `null` rather than
- * throwing on an unknown value: a newer Busabase naming an engine this SDK
- * predates is normal, not an error, and the caller should fall back to generic
- * behaviour rather than break.
- */
-declare const asKnownBusabaseAirAppRuntime: (runtime: string) => BusabaseAirAppRuntime | null;
-/** The body every AirApp serves at `__airapp/runtime`. */
-interface BusabaseAirAppRuntimeReport {
-  /**
-   * The engine name verbatim, or `"standalone"` when nothing hosted this process.
-   *
-   * Deliberately a plain string and not the enum: a newer Busabase naming an engine
-   * this SDK predates must still round-trip, and narrowing here would erase it.
-   */
-  runtime: string;
-  /**
-   * The same value narrowed to what this SDK knows, or `null` for an engine it has
-   * never heard of. This is the field to branch on when behaviour genuinely differs
-   * per engine — and `null` is a normal answer, not an error.
-   */
-  knownRuntime: BusabaseAirAppRuntime | null;
-  /** Presence of the injected variable. Never membership of {@link BUSABASE_AIRAPP_RUNTIMES}. */
-  hosted: boolean;
-  /** Whether a standalone run is proxying to a Busabase base URL. A separate axis. */
-  devProxy: boolean;
-}
-/**
- * Build the `__airapp/runtime` body.
- *
- * This exists because the one line it replaces — `hosted: …` — has now regressed
- * twice. Both times a correct app was copied from an older source and came back
- * deciding hosting from a hardcoded list of engine names, and both times every test
- * stayed green, because nothing asserted the shape of that decision.
- *
- * An app that calls this cannot get it wrong: `hosted` is presence by construction,
- * and the engine name is reported both verbatim (so an unknown one survives) and
- * narrowed (so code that wants to branch on a specific engine has a type).
- */
-declare const describeBusabaseAirAppRuntime: (env?: Record<string, string | undefined>) => BusabaseAirAppRuntimeReport;
-declare const BUSABASE_AIRAPP_GATEWAY_REASONS: {
-  readonly authRequired: "AUTH_REQUIRED";
-  readonly authUnavailable: "AUTH_UNAVAILABLE";
-  readonly connectionRequired: "CONNECTION_REQUIRED";
-  readonly oauthCallbackInvalid: "OAUTH_CALLBACK_INVALID";
-  readonly spaceNotAllowed: "SPACE_NOT_ALLOWED";
-  readonly spaceSelectionRequired: "SPACE_SELECTION_REQUIRED";
-};
-type GatewayReason = (typeof BUSABASE_AIRAPP_GATEWAY_REASONS)[keyof typeof BUSABASE_AIRAPP_GATEWAY_REASONS];
-interface AuthSpace {
-  id: string;
-  name: string;
-  slug?: string | null;
-  plan?: string | null;
-}
-interface GatewayTarget {
-  baseUrl: string;
-  accessToken: string;
-  selectedSpace?: AuthSpace;
-  source: "airapp-oauth-local" | "environment" | "open-server";
-}
-interface BusabaseAirAppLocalGatewayOptions {
-  appId: string;
-  cloudBaseUrl?: string;
-  clientId?: string;
-  environment?: Record<string, string | undefined>;
-  fetch?: typeof fetch;
-  now?: () => number;
-  oauthPendingTtlMs?: number;
-  requestTimeoutMs?: number;
-  credentialStore?: BusabaseAirAppCredentialStoreOptions;
-  successPath?: string;
-  errorPath?: string;
-}
-interface BusabaseAirAppAuthStatus {
-  connected: boolean;
-  cloudBaseUrl: string;
-  baseUrl?: string;
-  source?: GatewayTarget["source"];
-  readiness: "needs_connection" | "needs_auth" | "needs_space" | "ready" | "retry";
-  action: "connect" | "reconnect" | "select_space" | "continue" | "retry";
-  requiresSpace?: boolean;
-  selectedSpace?: AuthSpace | null;
-  space?: AuthSpace | null;
-  spaces?: AuthSpace[];
-  reason?: GatewayReason;
-  message?: string;
-}
-declare class BusabaseAirAppLocalGateway {
-  #private;
-  constructor(options: BusabaseAirAppLocalGatewayOptions);
-  get cloudBaseUrl(): string;
-  status(): Promise<BusabaseAirAppAuthStatus>;
-  statusResponse: () => Promise<Response>;
-  start: (request: Request) => Promise<Response>;
-  callback: (request: Request) => Promise<Response>;
-  selectSpace: (request: Request) => Promise<Response>;
-  logout: (request: Request) => Promise<Response>;
-  proxy: (request: Request) => Promise<Response>;
-}
-declare const createBusabaseAirAppLocalGateway: (options: BusabaseAirAppLocalGatewayOptions) => BusabaseAirAppLocalGateway;
-//#endregion
+import { a as BusabaseAirAppAuthStatus, c as BusabaseAirAppRuntime, d as createBusabaseAirAppLocalGateway, f as describeBusabaseAirAppRuntime, i as BUSABASE_AIRAPP_RUNTIME_ENV, l as BusabaseAirAppRuntimeReport, m as readBusabaseAirAppRuntime, n as BUSABASE_AIRAPP_RUNTIMES, o as BusabaseAirAppLocalGateway, p as isBusabaseAirAppHosted, r as BUSABASE_AIRAPP_RUNTIME_ALIASES, s as BusabaseAirAppLocalGatewayOptions, t as BUSABASE_AIRAPP_GATEWAY_REASONS, u as asKnownBusabaseAirAppRuntime } from "./airapp-node-D2GcMwde.js";
 export { BUSABASE_AIRAPP_GATEWAY_REASONS, BUSABASE_AIRAPP_RUNTIMES, BUSABASE_AIRAPP_RUNTIME_ALIASES, BUSABASE_AIRAPP_RUNTIME_ENV, BusabaseAirAppAuthStatus, BusabaseAirAppLocalGateway, BusabaseAirAppLocalGatewayOptions, BusabaseAirAppRuntime, BusabaseAirAppRuntimeReport, asKnownBusabaseAirAppRuntime, createBusabaseAirAppLocalGateway, describeBusabaseAirAppRuntime, isBusabaseAirAppHosted, readBusabaseAirAppRuntime };