busabase-sdk 0.17.2 → 0.18.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "busabase-sdk",
-  "version": "0.17.2",
+  "version": "0.18.0",
   "description": "Typed TypeScript/JavaScript SDK for the Busabase OpenAPI REST API. Talks to a local or remote `busabase server` (or Busabase Cloud).",
   "license": "MIT",
   "homepage": "https://github.com/busabase/busabase/tree/main/apps/busabase-sdk",
@@ -59,20 +59,20 @@
   "devDependencies": {
     "@types/node": "^24.13.2",
     "jsdom": "^27.0.0",
-    "tsup": "^8.5.0",
+    "tsdown": "^0.22.14",
     "tsx": "^4.20.5",
-    "typescript": "^5.9.3",
+    "typescript": "^7.0.2",
     "vitest": "^2.1.8",
+    "busabase-contract": "0.18.0",
     "open-domains": "0.0.2",
-    "busabase-contract": "0.17.2",
     "openlib": "0.1.1"
   },
   "engines": {
     "node": ">=24.18.0"
   },
   "scripts": {
-    "dev": "tsup --watch",
-    "build": "tsup",
+    "dev": "tsdown --watch",
+    "build": "tsdown",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "lint": "biome format . --write && biome check .",

package/dist/chunk-5NYQX65A.js

@@ -1,6 +0,0 @@
-// src/url.ts
-function normalizeBaseUrl(raw) {
-  return raw.replace(/\/+$/, "").replace(/\/api\/v1$/, "");
-}
-
-export { normalizeBaseUrl };

package/dist/chunk-C23JVY2Y.js

@@ -1,211 +0,0 @@
-import { BusabaseOAuthError, BUSABASE_AIRAPP_CLIENT_ID, refreshBusabaseOAuthToken, revokeBusabaseOAuthToken } from './chunk-WSHJMHUS.js';
-import { normalizeBaseUrl } from './chunk-5NYQX65A.js';
-import { randomUUID } from 'crypto';
-import { readFileSync, rmSync, mkdirSync, chmodSync, writeFileSync, renameSync } from 'fs';
-import { homedir } from 'os';
-import { join, dirname } from 'path';
-
-var STORE_VERSION = 1;
-var APP_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
-var REFRESH_WINDOW_MS = 6e4;
-var refreshesByCredentialPath = /* @__PURE__ */ new Map();
-var assertAppId = (appId) => {
-  if (!APP_ID_RE.test(appId)) {
-    throw new BusabaseOAuthError(
-      "invalid_airapp_id",
-      "AirApp id must use letters, digits, dot, dash, or underscore"
-    );
-  }
-  return appId;
-};
-var storeRoot = (options = {}) => options.rootDir ?? join(homedir(), ".busabase");
-var busabaseAirAppCredentialsDir = (options = {}) => join(storeRoot(options), "airapps");
-var busabaseAirAppCredentialPath = (appId, options = {}) => join(busabaseAirAppCredentialsDir(options), `${assertAppId(appId)}.json`);
-var busabaseAirAppDynamicClientsPath = (appId, options = {}) => join(busabaseAirAppCredentialsDir(options), `${assertAppId(appId)}.clients.json`);
-var normalizeOrigin = (raw) => {
-  const url = new URL(normalizeBaseUrl(raw));
-  if (url.username || url.password || url.search || url.hash) {
-    throw new BusabaseOAuthError("invalid_base_url", "Busabase base URL must be an origin");
-  }
-  return url.origin;
-};
-var writeOwnerOnlyJson = (path, value) => {
-  const directory = dirname(path);
-  mkdirSync(directory, { recursive: true, mode: 448 });
-  try {
-    chmodSync(directory, 448);
-  } catch {
-  }
-  const temporaryPath = `${path}.${randomUUID()}.tmp`;
-  writeFileSync(temporaryPath, `${JSON.stringify(value, null, 2)}
-`, { mode: 384 });
-  try {
-    chmodSync(temporaryPath, 384);
-  } catch {
-  }
-  renameSync(temporaryPath, path);
-};
-var parseCredential = (raw, expectedAppId) => {
-  let value;
-  try {
-    value = JSON.parse(raw);
-  } catch {
-    throw new BusabaseOAuthError("invalid_local_credential", "AirApp OAuth credential is invalid");
-  }
-  const item = value;
-  if (item.version !== STORE_VERSION || item.appId !== expectedAppId || typeof item.baseUrl !== "string" || typeof item.clientId !== "string" || typeof item.accessToken !== "string" || typeof item.refreshToken !== "string" || typeof item.expiresAt !== "string" || !Array.isArray(item.scope) || item.scope.some((scope) => typeof scope !== "string") || typeof item.tokenType !== "string") {
-    throw new BusabaseOAuthError("invalid_local_credential", "AirApp OAuth credential is invalid");
-  }
-  if (item.selectedSpace !== void 0 && (typeof item.selectedSpace !== "object" || item.selectedSpace === null || typeof item.selectedSpace.id !== "string" || typeof item.selectedSpace.name !== "string")) {
-    throw new BusabaseOAuthError("invalid_local_credential", "AirApp OAuth credential is invalid");
-  }
-  return item;
-};
-function loadBusabaseAirAppOAuthCredential(appId, options = {}) {
-  const path = busabaseAirAppCredentialPath(appId, options);
-  try {
-    return parseCredential(readFileSync(path, "utf8"), appId);
-  } catch (error) {
-    if (error.code === "ENOENT") return null;
-    throw error;
-  }
-}
-function storeBusabaseAirAppOAuthCredential(input, options = {}) {
-  if (!input.tokenSet.refreshToken) {
-    throw new BusabaseOAuthError(
-      "missing_refresh_token",
-      "A refresh token is required for a persistent local AirApp login"
-    );
-  }
-  const credential = {
-    version: STORE_VERSION,
-    appId: assertAppId(input.appId),
-    baseUrl: normalizeOrigin(input.baseUrl),
-    clientId: input.clientId ?? BUSABASE_AIRAPP_CLIENT_ID,
-    accessToken: input.tokenSet.accessToken,
-    refreshToken: input.tokenSet.refreshToken,
-    expiresAt: input.tokenSet.expiresAt,
-    scope: input.tokenSet.scope,
-    tokenType: input.tokenSet.tokenType,
-    ...input.selectedSpace ? { selectedSpace: input.selectedSpace } : {}
-  };
-  writeOwnerOnlyJson(busabaseAirAppCredentialPath(input.appId, options), credential);
-  return credential;
-}
-var dynamicClientKey = (baseUrl, redirectUri) => `${normalizeOrigin(baseUrl)}|${new URL(redirectUri).toString()}`;
-var loadDynamicClientRegistry = (appId, options) => {
-  const empty = {
-    version: STORE_VERSION,
-    appId: assertAppId(appId),
-    clients: {}
-  };
-  let raw;
-  try {
-    raw = readFileSync(busabaseAirAppDynamicClientsPath(appId, options), "utf8");
-  } catch (error) {
-    if (error.code === "ENOENT") return empty;
-    throw error;
-  }
-  try {
-    const value = JSON.parse(raw);
-    if (value.version !== STORE_VERSION || value.appId !== appId || typeof value.clients !== "object" || value.clients === null) {
-      return empty;
-    }
-    const clients = Object.fromEntries(
-      Object.entries(value.clients).filter(([, clientId]) => typeof clientId === "string")
-    );
-    return { ...empty, clients };
-  } catch {
-    return empty;
-  }
-};
-function loadBusabaseAirAppDynamicClientId(input, options = {}) {
-  const registry = loadDynamicClientRegistry(input.appId, options);
-  return registry.clients[dynamicClientKey(input.baseUrl, input.redirectUri)] ?? null;
-}
-function storeBusabaseAirAppDynamicClientId(input, options = {}) {
-  const registry = loadDynamicClientRegistry(input.appId, options);
-  const key = dynamicClientKey(input.baseUrl, input.redirectUri);
-  delete registry.clients[key];
-  const entries = [...Object.entries(registry.clients), [key, input.clientId]];
-  writeOwnerOnlyJson(busabaseAirAppDynamicClientsPath(input.appId, options), {
-    ...registry,
-    clients: Object.fromEntries(entries.slice(-32))
-  });
-}
-async function getBusabaseAirAppAccessToken(appId, options = {}, fetchImpl = fetch) {
-  const credential = loadBusabaseAirAppOAuthCredential(appId, options);
-  if (!credential) return null;
-  const expiresAt = Date.parse(credential.expiresAt);
-  if (Number.isFinite(expiresAt) && expiresAt > Date.now() + REFRESH_WINDOW_MS) return credential;
-  const credentialPath = busabaseAirAppCredentialPath(appId, options);
-  const activeRefresh = refreshesByCredentialPath.get(credentialPath);
-  if (activeRefresh) return activeRefresh;
-  const refresh = (async () => {
-    const tokenSet = await refreshBusabaseOAuthToken(
-      {
-        baseUrl: credential.baseUrl,
-        refreshToken: credential.refreshToken,
-        clientId: credential.clientId
-      },
-      fetchImpl
-    );
-    return storeBusabaseAirAppOAuthCredential(
-      {
-        appId,
-        baseUrl: credential.baseUrl,
-        clientId: credential.clientId,
-        tokenSet: {
-          ...tokenSet,
-          refreshToken: tokenSet.refreshToken ?? credential.refreshToken
-        },
-        selectedSpace: credential.selectedSpace
-      },
-      options
-    );
-  })();
-  refreshesByCredentialPath.set(credentialPath, refresh);
-  try {
-    return await refresh;
-  } finally {
-    if (refreshesByCredentialPath.get(credentialPath) === refresh) {
-      refreshesByCredentialPath.delete(credentialPath);
-    }
-  }
-}
-function storeBusabaseAirAppSelectedSpace(appId, selectedSpace, options = {}) {
-  const credential = loadBusabaseAirAppOAuthCredential(appId, options);
-  if (!credential) {
-    throw new BusabaseOAuthError(
-      "missing_local_credential",
-      "Connect this local AirApp before selecting a Space"
-    );
-  }
-  const next = {
-    ...credential,
-    ...selectedSpace ? { selectedSpace } : { selectedSpace: void 0 }
-  };
-  writeOwnerOnlyJson(busabaseAirAppCredentialPath(appId, options), next);
-  return next;
-}
-function clearBusabaseAirAppOAuthCredential(appId, options = {}) {
-  rmSync(busabaseAirAppCredentialPath(appId, options), { force: true });
-}
-async function revokeBusabaseAirAppOAuthCredential(appId, options = {}, fetchImpl = fetch) {
-  const credential = loadBusabaseAirAppOAuthCredential(appId, options);
-  if (!credential) return;
-  try {
-    await revokeBusabaseOAuthToken(
-      {
-        baseUrl: credential.baseUrl,
-        token: credential.refreshToken,
-        clientId: credential.clientId
-      },
-      fetchImpl
-    );
-  } finally {
-    clearBusabaseAirAppOAuthCredential(appId, options);
-  }
-}
-
-export { busabaseAirAppCredentialPath, busabaseAirAppCredentialsDir, busabaseAirAppDynamicClientsPath, clearBusabaseAirAppOAuthCredential, getBusabaseAirAppAccessToken, loadBusabaseAirAppDynamicClientId, loadBusabaseAirAppOAuthCredential, revokeBusabaseAirAppOAuthCredential, storeBusabaseAirAppDynamicClientId, storeBusabaseAirAppOAuthCredential, storeBusabaseAirAppSelectedSpace };

package/dist/chunk-WSHJMHUS.js

@@ -1,215 +0,0 @@
-import { normalizeBaseUrl } from './chunk-5NYQX65A.js';
-
-// ../../packages/busabase-contract/src/auth/device-authorization.ts
-var BUSABASE_AIRAPP_CLIENT_ID = "busabase-airapp";
-
-// src/oauth.ts
-var AIRAPP_OAUTH_SCOPE = "api";
-var BusabaseOAuthError = class extends Error {
-  code;
-  status;
-  constructor(code, message, status) {
-    super(message);
-    this.name = "BusabaseOAuthError";
-    this.code = code;
-    this.status = status;
-  }
-};
-var oauthBaseUrl = (raw) => {
-  let url;
-  try {
-    url = new URL(normalizeBaseUrl(raw));
-  } catch {
-    throw new BusabaseOAuthError("invalid_base_url", "Busabase base URL is invalid");
-  }
-  if (url.protocol !== "https:" && url.protocol !== "http:" || url.username || url.password || url.search || url.hash || url.pathname !== "/" && url.pathname !== "") {
-    throw new BusabaseOAuthError(
-      "invalid_base_url",
-      "Busabase base URL must be an HTTP(S) origin without credentials, query, or path"
-    );
-  }
-  return url.origin;
-};
-var randomBase64Url = (byteLength) => {
-  const bytes = globalThis.crypto.getRandomValues(new Uint8Array(byteLength));
-  let binary = "";
-  for (const byte of bytes) binary += String.fromCharCode(byte);
-  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-};
-var digestBase64Url = async (value) => {
-  const encoded = new TextEncoder().encode(value);
-  const data = encoded.buffer.slice(
-    encoded.byteOffset,
-    encoded.byteOffset + encoded.byteLength
-  );
-  const digest = await globalThis.crypto.subtle.digest("SHA-256", data);
-  let binary = "";
-  for (const byte of new Uint8Array(digest)) binary += String.fromCharCode(byte);
-  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-};
-async function registerBusabaseAirAppOAuthClient(input, fetchImpl = fetch) {
-  const baseUrl = oauthBaseUrl(input.baseUrl);
-  const redirectUri = new URL(input.redirectUri).toString();
-  const response = await fetchImpl(new URL("/api/oauth/register", baseUrl), {
-    method: "POST",
-    headers: { "content-type": "application/json" },
-    body: JSON.stringify({
-      client_name: input.appId,
-      client_kind: "airapp",
-      scope: AIRAPP_OAUTH_SCOPE,
-      redirect_uris: [redirectUri],
-      grant_types: ["authorization_code", "refresh_token"],
-      response_types: ["code"],
-      token_endpoint_auth_method: "none"
-    })
-  });
-  const body = await response.json().catch(() => null);
-  if (!response.ok) {
-    throw new BusabaseOAuthError(
-      typeof body?.error === "string" ? body.error : "client_registration_failed",
-      typeof body?.error_description === "string" ? body.error_description : `Busabase OAuth client registration failed (${response.status})`,
-      response.status
-    );
-  }
-  if (typeof body?.client_id !== "string" || !Array.isArray(body.redirect_uris) || body.redirect_uris.length !== 1 || body.redirect_uris[0] !== redirectUri) {
-    throw new BusabaseOAuthError(
-      "invalid_client_registration",
-      "Busabase returned an invalid OAuth client registration"
-    );
-  }
-  const grantedScopes = typeof body.scope === "string" ? body.scope.split(/\s+/).filter(Boolean) : null;
-  if (!grantedScopes?.includes(AIRAPP_OAUTH_SCOPE)) {
-    throw new BusabaseOAuthError(
-      "unsupported_airapp_registration",
-      `This Busabase server did not grant the "${AIRAPP_OAUTH_SCOPE}" scope to a dynamically registered AirApp. Upgrade Busabase, or run the AirApp on a loopback address to use the shared AirApp client.`
-    );
-  }
-  return { clientId: body.client_id, redirectUri };
-}
-async function createBusabaseOAuthRequest(input) {
-  const baseUrl = oauthBaseUrl(input.baseUrl);
-  const redirectUri = new URL(input.redirectUri).toString();
-  const clientId = input.clientId ?? BUSABASE_AIRAPP_CLIENT_ID;
-  const codeVerifier = randomBase64Url(32);
-  const state = input.state ?? randomBase64Url(24);
-  const resource = new URL("/api/v1", baseUrl).toString();
-  const authorizeUrl = new URL("/api/oauth/authorize", baseUrl);
-  authorizeUrl.search = new URLSearchParams({
-    response_type: "code",
-    client_id: clientId,
-    resource,
-    scope: AIRAPP_OAUTH_SCOPE,
-    code_challenge: await digestBase64Url(codeVerifier),
-    code_challenge_method: "S256",
-    redirect_uri: redirectUri,
-    state
-  }).toString();
-  if (input.prompt) authorizeUrl.searchParams.set("prompt", input.prompt);
-  return {
-    authorizeUrl: authorizeUrl.toString(),
-    baseUrl,
-    clientId,
-    codeVerifier,
-    redirectUri,
-    resource,
-    state
-  };
-}
-function parseBusabaseOAuthCallback(callbackUrl, request) {
-  const callback = new URL(callbackUrl);
-  const error = callback.searchParams.get("error");
-  if (error) {
-    throw new BusabaseOAuthError(
-      error,
-      callback.searchParams.get("error_description") || "Busabase authorization was denied"
-    );
-  }
-  if (callback.searchParams.get("state") !== request.state) {
-    throw new BusabaseOAuthError("state_mismatch", "OAuth callback state did not match");
-  }
-  const issuer = callback.searchParams.get("iss");
-  let issuerMatches = false;
-  try {
-    issuerMatches = Boolean(issuer && new URL(issuer).origin === new URL(request.baseUrl).origin);
-  } catch {
-    issuerMatches = false;
-  }
-  if (!issuerMatches) {
-    throw new BusabaseOAuthError("issuer_mismatch", "OAuth callback issuer did not match");
-  }
-  const code = callback.searchParams.get("code");
-  if (!code) throw new BusabaseOAuthError("missing_code", "OAuth callback had no code");
-  return code;
-}
-var parseTokenResponse = async (response) => {
-  const body = await response.json().catch(() => null);
-  if (!response.ok) {
-    const code = typeof body?.error === "string" ? body.error : "token_request_failed";
-    const message = typeof body?.error_description === "string" ? body.error_description : `Busabase OAuth token request failed (${response.status})`;
-    throw new BusabaseOAuthError(code, message, response.status);
-  }
-  if (typeof body?.access_token !== "string" || typeof body.expires_in !== "number") {
-    throw new BusabaseOAuthError(
-      "invalid_token_response",
-      "Busabase returned an invalid token set"
-    );
-  }
-  return {
-    accessToken: body.access_token,
-    refreshToken: typeof body.refresh_token === "string" ? body.refresh_token : void 0,
-    expiresIn: body.expires_in,
-    expiresAt: new Date(Date.now() + body.expires_in * 1e3).toISOString(),
-    scope: typeof body.scope === "string" ? body.scope.split(/\s+/).filter(Boolean) : [],
-    tokenType: typeof body.token_type === "string" ? body.token_type : "Bearer",
-    user: body.user && typeof body.user === "object" ? body.user : void 0
-  };
-};
-async function exchangeBusabaseOAuthCode(request, code, fetchImpl = fetch) {
-  const response = await fetchImpl(new URL("/api/oauth/token", request.baseUrl), {
-    method: "POST",
-    headers: { "content-type": "application/x-www-form-urlencoded" },
-    body: new URLSearchParams({
-      grant_type: "authorization_code",
-      client_id: request.clientId,
-      code,
-      code_verifier: request.codeVerifier,
-      redirect_uri: request.redirectUri,
-      resource: request.resource
-    })
-  });
-  return parseTokenResponse(response);
-}
-async function refreshBusabaseOAuthToken(input, fetchImpl = fetch) {
-  const baseUrl = oauthBaseUrl(input.baseUrl);
-  const response = await fetchImpl(new URL("/api/oauth/token", baseUrl), {
-    method: "POST",
-    headers: { "content-type": "application/x-www-form-urlencoded" },
-    body: new URLSearchParams({
-      grant_type: "refresh_token",
-      refresh_token: input.refreshToken,
-      client_id: input.clientId ?? BUSABASE_AIRAPP_CLIENT_ID,
-      resource: new URL("/api/v1", baseUrl).toString()
-    })
-  });
-  return parseTokenResponse(response);
-}
-async function revokeBusabaseOAuthToken(input, fetchImpl = fetch) {
-  const baseUrl = oauthBaseUrl(input.baseUrl);
-  const response = await fetchImpl(new URL("/api/oauth/revoke", baseUrl), {
-    method: "POST",
-    headers: { "content-type": "application/x-www-form-urlencoded" },
-    body: new URLSearchParams({
-      token: input.token,
-      client_id: input.clientId ?? BUSABASE_AIRAPP_CLIENT_ID
-    })
-  });
-  if (!response.ok) {
-    throw new BusabaseOAuthError(
-      "revoke_failed",
-      `Busabase OAuth revocation failed (${response.status})`,
-      response.status
-    );
-  }
-}
-
-export { AIRAPP_OAUTH_SCOPE, BUSABASE_AIRAPP_CLIENT_ID, BusabaseOAuthError, createBusabaseOAuthRequest, exchangeBusabaseOAuthCode, parseBusabaseOAuthCallback, refreshBusabaseOAuthToken, registerBusabaseAirAppOAuthClient, revokeBusabaseOAuthToken };