deepspace 0.33.1 → 0.35.0

package/dist/expo.d.ts

@@ -0,0 +1,83 @@
+/** Pure URL helpers shared by the Expo auth client and its tests. */
+declare function buildExpoOAuthStartUrl(baseUrl: string, provider: string, redirectUri: string, state?: string, startPath?: string, codeChallenge?: string): string;
+declare function codeFromExpoRedirect(url: string): string | null;
+declare function stateFromExpoRedirect(url: string): string | null;
+declare function normalizeExpoBaseUrl(baseUrl: string): string;
+
+type ExpoAuthProvider = 'google' | (string & {});
+interface DeepSpaceExpoSession {
+    sessionToken: string;
+    accessToken: string;
+}
+interface DeepSpaceExpoUser {
+    userId: string;
+    claims: Record<string, unknown>;
+}
+interface ExpoAuthStorage {
+    getItem(key: string): Promise<string | null>;
+    setItem(key: string, value: string): Promise<void>;
+    deleteItem(key: string): Promise<void>;
+}
+interface DeepSpaceExpoClientOptions {
+    /** Deployed app origin, for example `https://example.app.space`. */
+    baseUrl: string;
+    /** Defaults to Expo's `createURL('auth/callback')`. */
+    redirectUri?: string;
+    /** SecureStore-backed by default; inject a test store when unit testing. */
+    storage?: ExpoAuthStorage;
+    /** Namespaced storage key so multiple apps can share one device. */
+    storageKey?: string;
+    /** Worker endpoint overrides for apps with a custom auth route. */
+    paths?: Partial<ExpoAuthPaths>;
+    fetch?: typeof globalThis.fetch;
+    /** Abort stalled auth/API requests after this many milliseconds. */
+    timeoutMs?: number;
+}
+interface ExpoAuthPaths {
+    start: string;
+    exchange: string;
+    token: string;
+    me: string;
+    signOut: string;
+}
+declare class DeepSpaceExpoError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    constructor(message: string, status: number, body: unknown);
+}
+/**
+ * Thrown by `signIn` when the person closes the sign-in sheet. It isn't a
+ * failure, so apps usually return to where they were without showing an error.
+ * Check `code`: `instanceof` fails if the bundler includes two copies of
+ * this package.
+ */
+declare class DeepSpaceSignInCancelledError extends Error {
+    readonly code: "sign_in_cancelled";
+    constructor();
+}
+declare function createDeepSpaceExpoClient(options: DeepSpaceExpoClientOptions): DeepSpaceExpoClient;
+declare class DeepSpaceExpoClient {
+    private readonly baseUrl;
+    private readonly redirectUri;
+    private readonly storage;
+    private readonly storageKey;
+    private readonly paths;
+    private readonly fetcher;
+    private readonly timeoutMs;
+    private session;
+    constructor(options: DeepSpaceExpoClientOptions);
+    getSession(): Promise<DeepSpaceExpoSession | null>;
+    signIn(provider?: ExpoAuthProvider, state?: string): Promise<DeepSpaceExpoUser>;
+    signInWithGoogle(state?: string): Promise<DeepSpaceExpoUser>;
+    refresh(): Promise<string | null>;
+    getAuthToken(): Promise<string | null>;
+    me(): Promise<DeepSpaceExpoUser>;
+    request<T>(path: string, init?: RequestInit, retried?: boolean): Promise<T>;
+    signOut(): Promise<void>;
+    private json;
+    private saveSession;
+    private clearSession;
+    private fetchWithTimeout;
+}
+
+export { DeepSpaceExpoClient, type DeepSpaceExpoClientOptions, DeepSpaceExpoError, type DeepSpaceExpoSession, type DeepSpaceExpoUser, DeepSpaceSignInCancelledError, type ExpoAuthPaths, type ExpoAuthProvider, type ExpoAuthStorage, buildExpoOAuthStartUrl, codeFromExpoRedirect, createDeepSpaceExpoClient, normalizeExpoBaseUrl, stateFromExpoRedirect };

package/dist/expo.js

@@ -0,0 +1,242 @@
+// src/expo.ts
+import * as Linking from "expo-linking";
+import * as Crypto from "expo-crypto";
+import * as SecureStore from "expo-secure-store";
+import * as WebBrowser from "expo-web-browser";
+
+// src/expo-url.ts
+function buildExpoOAuthStartUrl(baseUrl, provider, redirectUri, state, startPath = "/api/auth/native-start", codeChallenge) {
+  const url = new URL(startPath, baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`);
+  url.searchParams.set("provider", provider);
+  url.searchParams.set("redirect_uri", redirectUri);
+  if (state) url.searchParams.set("state", state);
+  if (codeChallenge) {
+    url.searchParams.set("code_challenge", codeChallenge);
+    url.searchParams.set("code_challenge_method", "S256");
+  }
+  return url.toString();
+}
+function codeFromExpoRedirect(url) {
+  try {
+    return new URL(url).searchParams.get("code");
+  } catch {
+    return null;
+  }
+}
+function stateFromExpoRedirect(url) {
+  try {
+    return new URL(url).searchParams.get("state");
+  } catch {
+    return null;
+  }
+}
+function normalizeExpoBaseUrl(baseUrl) {
+  return baseUrl.replace(/\/+$/, "");
+}
+
+// src/expo.ts
+var DeepSpaceExpoError = class extends Error {
+  status;
+  body;
+  constructor(message, status, body) {
+    super(message);
+    this.name = "DeepSpaceExpoError";
+    this.status = status;
+    this.body = body;
+  }
+};
+var DeepSpaceSignInCancelledError = class extends Error {
+  code = "sign_in_cancelled";
+  constructor() {
+    super("DeepSpace sign-in was cancelled");
+    this.name = "DeepSpaceSignInCancelledError";
+  }
+};
+var DEFAULT_PATHS = {
+  start: "/api/auth/native-start",
+  exchange: "/api/auth/native-exchange",
+  token: "/api/auth/native-token",
+  me: "/api/auth/native-me",
+  signOut: "/api/auth/native-signout"
+};
+var defaultStorage = {
+  getItem: (key) => SecureStore.getItemAsync(key),
+  setItem: (key, value) => SecureStore.setItemAsync(key, value),
+  deleteItem: (key) => SecureStore.deleteItemAsync(key)
+};
+function createDeepSpaceExpoClient(options) {
+  return new DeepSpaceExpoClient(options);
+}
+var DeepSpaceExpoClient = class {
+  baseUrl;
+  redirectUri;
+  storage;
+  storageKey;
+  paths;
+  fetcher;
+  timeoutMs;
+  session;
+  constructor(options) {
+    if (!options.baseUrl) throw new Error("DeepSpace Expo client requires baseUrl");
+    this.baseUrl = normalizeExpoBaseUrl(options.baseUrl);
+    this.redirectUri = options.redirectUri ?? Linking.createURL("auth/callback");
+    this.storage = options.storage ?? defaultStorage;
+    this.storageKey = options.storageKey ?? `deepspace.session.${encodeURIComponent(this.baseUrl)}`;
+    this.paths = { ...DEFAULT_PATHS, ...options.paths };
+    this.fetcher = options.fetch ?? globalThis.fetch.bind(globalThis);
+    this.timeoutMs = options.timeoutMs ?? 15e3;
+  }
+  async getSession() {
+    if (this.session !== void 0) return this.session;
+    const raw = await this.storage.getItem(this.storageKey);
+    if (!raw) return this.session = null;
+    try {
+      const value = JSON.parse(raw);
+      if (typeof value.sessionToken !== "string" || typeof value.accessToken !== "string") throw new Error("invalid session");
+      return this.session = value;
+    } catch {
+      await this.storage.deleteItem(this.storageKey);
+      return this.session = null;
+    }
+  }
+  async signIn(provider = "google", state) {
+    const expectedState = state ?? createOAuthState();
+    const codeVerifier = createCodeVerifier();
+    const codeChallenge = await createCodeChallenge(codeVerifier);
+    const startUrl = buildExpoOAuthStartUrl(
+      this.baseUrl,
+      provider,
+      this.redirectUri,
+      expectedState,
+      this.paths.start,
+      codeChallenge
+    );
+    const result = await WebBrowser.openAuthSessionAsync(startUrl, this.redirectUri);
+    if (result.type === "cancel" || result.type === "dismiss") throw new DeepSpaceSignInCancelledError();
+    if (result.type !== "success" || !result.url) throw new Error("DeepSpace sign-in did not finish");
+    const code = codeFromExpoRedirect(result.url);
+    if (!code) throw new Error("DeepSpace sign-in returned no exchange code");
+    if (stateFromExpoRedirect(result.url) !== expectedState) {
+      throw new Error("DeepSpace sign-in returned an invalid state");
+    }
+    const session = await this.json(this.paths.exchange, {
+      method: "POST",
+      body: JSON.stringify({ code, code_verifier: codeVerifier })
+    });
+    await this.saveSession(session);
+    return this.me();
+  }
+  signInWithGoogle(state) {
+    return this.signIn("google", state);
+  }
+  async refresh() {
+    const session = await this.getSession();
+    if (!session) return null;
+    try {
+      const next = await this.json(this.paths.token, { method: "POST", body: JSON.stringify({ sessionToken: session.sessionToken }) });
+      const accessToken = next.accessToken ?? next.token;
+      if (!accessToken) throw new Error("DeepSpace did not issue an access token");
+      await this.saveSession({ ...session, accessToken });
+      return accessToken;
+    } catch (error) {
+      if (error instanceof DeepSpaceExpoError && error.status === 401) await this.clearSession();
+      return null;
+    }
+  }
+  async getAuthToken() {
+    const session = await this.getSession();
+    return session?.accessToken || await this.refresh();
+  }
+  async me() {
+    const result = await this.request(this.paths.me);
+    return result;
+  }
+  async request(path, init = {}, retried = false) {
+    const token = await this.getAuthToken();
+    const headers = new Headers(init.headers);
+    if (!headers.has("Content-Type") && init.body != null && isJsonBody(init.body)) {
+      headers.set("Content-Type", "application/json");
+    }
+    if (token) headers.set("Authorization", `Bearer ${token}`);
+    const response = await this.fetchWithTimeout(`${this.baseUrl}${path}`, { ...init, headers });
+    const body = await response.json().catch(() => ({}));
+    if (response.status === 401 && !retried && isReplayableBody(init.body) && (await this.getSession())?.sessionToken) {
+      const refreshed = await this.refresh();
+      if (refreshed) return this.request(path, init, true);
+    }
+    if (!response.ok) throw new DeepSpaceExpoError(typeof body.error === "string" ? body.error : `DeepSpace request failed (${response.status})`, response.status, body);
+    return body;
+  }
+  async signOut() {
+    const session = await this.getSession();
+    if (session) {
+      await this.fetchWithTimeout(`${this.baseUrl}${this.paths.signOut}`, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ sessionToken: session.sessionToken }) }).catch(() => void 0);
+    }
+    await this.clearSession();
+  }
+  async json(path, init) {
+    const response = await this.fetchWithTimeout(`${this.baseUrl}${path}`, { ...init, headers: { "Content-Type": "application/json", ...init.headers ?? {} } });
+    const body = await response.json().catch(() => ({}));
+    if (!response.ok) throw new DeepSpaceExpoError(typeof body.error === "string" ? body.error : `DeepSpace auth failed (${response.status})`, response.status, body);
+    return body;
+  }
+  async saveSession(session) {
+    this.session = session;
+    await this.storage.setItem(this.storageKey, JSON.stringify(session));
+  }
+  async clearSession() {
+    this.session = null;
+    await this.storage.deleteItem(this.storageKey);
+  }
+  async fetchWithTimeout(input, init = {}) {
+    if (!this.timeoutMs || this.timeoutMs <= 0) return this.fetcher(input, init);
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+    const signal = init.signal;
+    if (signal) {
+      if (signal.aborted) controller.abort();
+      else signal.addEventListener("abort", () => controller.abort(), { once: true });
+    }
+    try {
+      return await this.fetcher(input, { ...init, signal: controller.signal });
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+};
+function createOAuthState() {
+  return Crypto.randomUUID();
+}
+function createCodeVerifier() {
+  return `${Crypto.randomUUID().replaceAll("-", "")}${Crypto.randomUUID().replaceAll("-", "")}`;
+}
+async function createCodeChallenge(verifier) {
+  const digest = await Crypto.digestStringAsync(
+    Crypto.CryptoDigestAlgorithm.SHA256,
+    verifier,
+    { encoding: Crypto.CryptoEncoding.BASE64 }
+  );
+  return digest.replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
+}
+function isJsonBody(body) {
+  return typeof body === "string";
+}
+function isReplayableBody(body) {
+  if (body == null || typeof body === "string") return true;
+  if (typeof FormData !== "undefined" && body instanceof FormData) return true;
+  if (typeof URLSearchParams !== "undefined" && body instanceof URLSearchParams) return true;
+  if (typeof Blob !== "undefined" && body instanceof Blob) return true;
+  if (body instanceof ArrayBuffer || ArrayBuffer.isView(body)) return true;
+  return false;
+}
+export {
+  DeepSpaceExpoClient,
+  DeepSpaceExpoError,
+  DeepSpaceSignInCancelledError,
+  buildExpoOAuthStartUrl,
+  codeFromExpoRedirect,
+  createDeepSpaceExpoClient,
+  normalizeExpoBaseUrl,
+  stateFromExpoRedirect
+};
+//# sourceMappingURL=expo.js.map

package/dist/expo.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/expo.ts","../src/expo-url.ts"],"sourcesContent":["/**\n * DeepSpace Expo client.\n *\n * This entry is intentionally separate from `deepspace`: the browser client\n * uses Better Auth cookies and browser globals, while an Expo app needs the\n * system browser, a custom-scheme callback, and SecureStore-backed sessions.\n * The Worker still owns auth and JWT issuance; this package only transports the\n * one-time OAuth code and refreshes the short-lived bearer.\n */\nimport * as Linking from 'expo-linking'\nimport * as Crypto from 'expo-crypto'\nimport * as SecureStore from 'expo-secure-store'\nimport * as WebBrowser from 'expo-web-browser'\nimport {\n  buildExpoOAuthStartUrl,\n  codeFromExpoRedirect,\n  normalizeExpoBaseUrl,\n  stateFromExpoRedirect,\n} from './expo-url'\n\nexport type ExpoAuthProvider = 'google' | (string & {})\n\nexport interface DeepSpaceExpoSession {\n  sessionToken: string\n  accessToken: string\n}\n\nexport interface DeepSpaceExpoUser {\n  userId: string\n  claims: Record<string, unknown>\n}\n\nexport interface ExpoAuthStorage {\n  getItem(key: string): Promise<string | null>\n  setItem(key: string, value: string): Promise<void>\n  deleteItem(key: string): Promise<void>\n}\n\nexport interface DeepSpaceExpoClientOptions {\n  /** Deployed app origin, for example `https://example.app.space`. */\n  baseUrl: string\n  /** Defaults to Expo's `createURL('auth/callback')`. */\n  redirectUri?: string\n  /** SecureStore-backed by default; inject a test store when unit testing. */\n  storage?: ExpoAuthStorage\n  /** Namespaced storage key so multiple apps can share one device. */\n  storageKey?: string\n  /** Worker endpoint overrides for apps with a custom auth route. */\n  paths?: Partial<ExpoAuthPaths>\n  fetch?: typeof globalThis.fetch\n  /** Abort stalled auth/API requests after this many milliseconds. */\n  timeoutMs?: number\n}\n\nexport interface ExpoAuthPaths {\n  start: string\n  exchange: string\n  token: string\n  me: string\n  signOut: string\n}\n\nexport class DeepSpaceExpoError extends Error {\n  readonly status: number\n  readonly body: unknown\n\n  constructor(message: string, status: number, body: unknown) {\n    super(message)\n    this.name = 'DeepSpaceExpoError'\n    this.status = status\n    this.body = body\n  }\n}\n\n/**\n * Thrown by `signIn` when the person closes the sign-in sheet. It isn't a\n * failure, so apps usually return to where they were without showing an error.\n * Check `code`: `instanceof` fails if the bundler includes two copies of\n * this package.\n */\nexport class DeepSpaceSignInCancelledError extends Error {\n  readonly code = 'sign_in_cancelled' as const\n\n  constructor() {\n    super('DeepSpace sign-in was cancelled')\n    this.name = 'DeepSpaceSignInCancelledError'\n  }\n}\n\nconst DEFAULT_PATHS: ExpoAuthPaths = {\n  start: '/api/auth/native-start',\n  exchange: '/api/auth/native-exchange',\n  token: '/api/auth/native-token',\n  me: '/api/auth/native-me',\n  signOut: '/api/auth/native-signout',\n}\n\nconst defaultStorage: ExpoAuthStorage = {\n  getItem: (key) => SecureStore.getItemAsync(key),\n  setItem: (key, value) => SecureStore.setItemAsync(key, value),\n  deleteItem: (key) => SecureStore.deleteItemAsync(key),\n}\n\nexport function createDeepSpaceExpoClient(options: DeepSpaceExpoClientOptions): DeepSpaceExpoClient {\n  return new DeepSpaceExpoClient(options)\n}\n\nexport class DeepSpaceExpoClient {\n  private readonly baseUrl: string\n  private readonly redirectUri: string\n  private readonly storage: ExpoAuthStorage\n  private readonly storageKey: string\n  private readonly paths: ExpoAuthPaths\n  private readonly fetcher: typeof globalThis.fetch\n  private readonly timeoutMs: number\n  private session: DeepSpaceExpoSession | null | undefined\n\n  constructor(options: DeepSpaceExpoClientOptions) {\n    if (!options.baseUrl) throw new Error('DeepSpace Expo client requires baseUrl')\n    this.baseUrl = normalizeExpoBaseUrl(options.baseUrl)\n    this.redirectUri = options.redirectUri ?? Linking.createURL('auth/callback')\n    this.storage = options.storage ?? defaultStorage\n    this.storageKey = options.storageKey ?? `deepspace.session.${encodeURIComponent(this.baseUrl)}`\n    this.paths = { ...DEFAULT_PATHS, ...options.paths }\n    this.fetcher = options.fetch ?? globalThis.fetch.bind(globalThis)\n    this.timeoutMs = options.timeoutMs ?? 15_000\n  }\n\n  async getSession(): Promise<DeepSpaceExpoSession | null> {\n    if (this.session !== undefined) return this.session\n    const raw = await this.storage.getItem(this.storageKey)\n    if (!raw) return (this.session = null)\n    try {\n      const value = JSON.parse(raw) as Partial<DeepSpaceExpoSession>\n      if (typeof value.sessionToken !== 'string' || typeof value.accessToken !== 'string') throw new Error('invalid session')\n      return (this.session = value as DeepSpaceExpoSession)\n    } catch {\n      await this.storage.deleteItem(this.storageKey)\n      return (this.session = null)\n    }\n  }\n\n  async signIn(provider: ExpoAuthProvider = 'google', state?: string): Promise<DeepSpaceExpoUser> {\n    const expectedState = state ?? createOAuthState()\n    const codeVerifier = createCodeVerifier()\n    const codeChallenge = await createCodeChallenge(codeVerifier)\n    const startUrl = buildExpoOAuthStartUrl(\n      this.baseUrl,\n      provider,\n      this.redirectUri,\n      expectedState,\n      this.paths.start,\n      codeChallenge,\n    )\n    const result = await WebBrowser.openAuthSessionAsync(startUrl, this.redirectUri)\n    if (result.type === 'cancel' || result.type === 'dismiss') throw new DeepSpaceSignInCancelledError()\n    if (result.type !== 'success' || !result.url) throw new Error('DeepSpace sign-in did not finish')\n    const code = codeFromExpoRedirect(result.url)\n    if (!code) throw new Error('DeepSpace sign-in returned no exchange code')\n    if (stateFromExpoRedirect(result.url) !== expectedState) {\n      throw new Error('DeepSpace sign-in returned an invalid state')\n    }\n    const session = await this.json<DeepSpaceExpoSession>(this.paths.exchange, {\n      method: 'POST',\n      body: JSON.stringify({ code, code_verifier: codeVerifier }),\n    })\n    await this.saveSession(session)\n    return this.me()\n  }\n\n  signInWithGoogle(state?: string): Promise<DeepSpaceExpoUser> { return this.signIn('google', state) }\n\n  async refresh(): Promise<string | null> {\n    const session = await this.getSession()\n    if (!session) return null\n    try {\n      const next = await this.json<{ accessToken?: string; token?: string }>(this.paths.token, { method: 'POST', body: JSON.stringify({ sessionToken: session.sessionToken }) })\n      const accessToken = next.accessToken ?? next.token\n      if (!accessToken) throw new Error('DeepSpace did not issue an access token')\n      await this.saveSession({ ...session, accessToken })\n      return accessToken\n    } catch (error) {\n      if (error instanceof DeepSpaceExpoError && error.status === 401) await this.clearSession()\n      return null\n    }\n  }\n\n  async getAuthToken(): Promise<string | null> {\n    const session = await this.getSession()\n    return session?.accessToken || (await this.refresh())\n  }\n\n  async me(): Promise<DeepSpaceExpoUser> {\n    const result = await this.request<DeepSpaceExpoUser>(this.paths.me)\n    return result\n  }\n\n  async request<T>(path: string, init: RequestInit = {}, retried = false): Promise<T> {\n    const token = await this.getAuthToken()\n    const headers = new Headers(init.headers)\n    if (!headers.has('Content-Type') && init.body != null && isJsonBody(init.body)) {\n      headers.set('Content-Type', 'application/json')\n    }\n    if (token) headers.set('Authorization', `Bearer ${token}`)\n    const response = await this.fetchWithTimeout(`${this.baseUrl}${path}`, { ...init, headers })\n    const body = await response.json().catch(() => ({})) as T & { error?: string }\n    if (response.status === 401 && !retried && isReplayableBody(init.body) && (await this.getSession())?.sessionToken) {\n      const refreshed = await this.refresh()\n      if (refreshed) return this.request<T>(path, init, true)\n    }\n    if (!response.ok) throw new DeepSpaceExpoError(typeof body.error === 'string' ? body.error : `DeepSpace request failed (${response.status})`, response.status, body)\n    return body\n  }\n\n  async signOut(): Promise<void> {\n    const session = await this.getSession()\n    if (session) {\n      await this.fetchWithTimeout(`${this.baseUrl}${this.paths.signOut}`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ sessionToken: session.sessionToken }) }).catch(() => undefined)\n    }\n    await this.clearSession()\n  }\n\n  private async json<T>(path: string, init: RequestInit): Promise<T> {\n    const response = await this.fetchWithTimeout(`${this.baseUrl}${path}`, { ...init, headers: { 'Content-Type': 'application/json', ...(init.headers ?? {}) } })\n    const body = await response.json().catch(() => ({})) as T & { error?: string }\n    if (!response.ok) throw new DeepSpaceExpoError(typeof body.error === 'string' ? body.error : `DeepSpace auth failed (${response.status})`, response.status, body)\n    return body\n  }\n\n  private async saveSession(session: DeepSpaceExpoSession) { this.session = session; await this.storage.setItem(this.storageKey, JSON.stringify(session)) }\n  private async clearSession() { this.session = null; await this.storage.deleteItem(this.storageKey) }\n\n  private async fetchWithTimeout(input: RequestInfo | URL, init: RequestInit = {}): Promise<Response> {\n    if (!this.timeoutMs || this.timeoutMs <= 0) return this.fetcher(input, init)\n    const controller = new AbortController()\n    const timer = setTimeout(() => controller.abort(), this.timeoutMs)\n    const signal = init.signal\n    if (signal) {\n      if (signal.aborted) controller.abort()\n      else signal.addEventListener('abort', () => controller.abort(), { once: true })\n    }\n    try {\n      return await this.fetcher(input, { ...init, signal: controller.signal })\n    } finally {\n      clearTimeout(timer)\n    }\n  }\n}\n\nexport {\n  buildExpoOAuthStartUrl,\n  codeFromExpoRedirect,\n  normalizeExpoBaseUrl,\n  stateFromExpoRedirect,\n}\n\nfunction createOAuthState(): string {\n  return Crypto.randomUUID()\n}\n\nfunction createCodeVerifier(): string {\n  return `${Crypto.randomUUID().replaceAll('-', '')}${Crypto.randomUUID().replaceAll('-', '')}`\n}\n\nasync function createCodeChallenge(verifier: string): Promise<string> {\n  const digest = await Crypto.digestStringAsync(\n    Crypto.CryptoDigestAlgorithm.SHA256,\n    verifier,\n    { encoding: Crypto.CryptoEncoding.BASE64 },\n  )\n  return digest.replaceAll('+', '-').replaceAll('/', '_').replace(/=+$/, '')\n}\n\nfunction isJsonBody(body: BodyInit): boolean {\n  return typeof body === 'string'\n}\n\nfunction isReplayableBody(body: BodyInit | null | undefined): boolean {\n  if (body == null || typeof body === 'string') return true\n  if (typeof FormData !== 'undefined' && body instanceof FormData) return true\n  if (typeof URLSearchParams !== 'undefined' && body instanceof URLSearchParams) return true\n  if (typeof Blob !== 'undefined' && body instanceof Blob) return true\n  if (body instanceof ArrayBuffer || ArrayBuffer.isView(body)) return true\n  return false\n}\n","/** Pure URL helpers shared by the Expo auth client and its tests. */\nexport function buildExpoOAuthStartUrl(\n  baseUrl: string,\n  provider: string,\n  redirectUri: string,\n  state?: string,\n  startPath = '/api/auth/native-start',\n  codeChallenge?: string,\n): string {\n  const url = new URL(startPath, baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`)\n  url.searchParams.set('provider', provider)\n  url.searchParams.set('redirect_uri', redirectUri)\n  if (state) url.searchParams.set('state', state)\n  if (codeChallenge) {\n    url.searchParams.set('code_challenge', codeChallenge)\n    url.searchParams.set('code_challenge_method', 'S256')\n  }\n  return url.toString()\n}\n\nexport function codeFromExpoRedirect(url: string): string | null {\n  try {\n    return new URL(url).searchParams.get('code')\n  } catch {\n    return null\n  }\n}\n\nexport function stateFromExpoRedirect(url: string): string | null {\n  try {\n    return new URL(url).searchParams.get('state')\n  } catch {\n    return null\n  }\n}\n\nexport function normalizeExpoBaseUrl(baseUrl: string): string {\n  return baseUrl.replace(/\\/+$/, '')\n}\n"],"mappings":";AASA,YAAY,aAAa;AACzB,YAAY,YAAY;AACxB,YAAY,iBAAiB;AAC7B,YAAY,gBAAgB;;;ACXrB,SAAS,uBACd,SACA,UACA,aACA,OACA,YAAY,0BACZ,eACQ;AACR,QAAM,MAAM,IAAI,IAAI,WAAW,QAAQ,SAAS,GAAG,IAAI,UAAU,GAAG,OAAO,GAAG;AAC9E,MAAI,aAAa,IAAI,YAAY,QAAQ;AACzC,MAAI,aAAa,IAAI,gBAAgB,WAAW;AAChD,MAAI,MAAO,KAAI,aAAa,IAAI,SAAS,KAAK;AAC9C,MAAI,eAAe;AACjB,QAAI,aAAa,IAAI,kBAAkB,aAAa;AACpD,QAAI,aAAa,IAAI,yBAAyB,MAAM;AAAA,EACtD;AACA,SAAO,IAAI,SAAS;AACtB;AAEO,SAAS,qBAAqB,KAA4B;AAC/D,MAAI;AACF,WAAO,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,MAAM;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,sBAAsB,KAA4B;AAChE,MAAI;AACF,WAAO,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,OAAO;AAAA,EAC9C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,qBAAqB,SAAyB;AAC5D,SAAO,QAAQ,QAAQ,QAAQ,EAAE;AACnC;;;ADwBO,IAAM,qBAAN,cAAiC,MAAM;AAAA,EACnC;AAAA,EACA;AAAA,EAET,YAAY,SAAiB,QAAgB,MAAe;AAC1D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;AAQO,IAAM,gCAAN,cAA4C,MAAM;AAAA,EAC9C,OAAO;AAAA,EAEhB,cAAc;AACZ,UAAM,iCAAiC;AACvC,SAAK,OAAO;AAAA,EACd;AACF;AAEA,IAAM,gBAA+B;AAAA,EACnC,OAAO;AAAA,EACP,UAAU;AAAA,EACV,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,SAAS;AACX;AAEA,IAAM,iBAAkC;AAAA,EACtC,SAAS,CAAC,QAAoB,yBAAa,GAAG;AAAA,EAC9C,SAAS,CAAC,KAAK,UAAsB,yBAAa,KAAK,KAAK;AAAA,EAC5D,YAAY,CAAC,QAAoB,4BAAgB,GAAG;AACtD;AAEO,SAAS,0BAA0B,SAA0D;AAClG,SAAO,IAAI,oBAAoB,OAAO;AACxC;AAEO,IAAM,sBAAN,MAA0B;AAAA,EACd;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACT;AAAA,EAER,YAAY,SAAqC;AAC/C,QAAI,CAAC,QAAQ,QAAS,OAAM,IAAI,MAAM,wCAAwC;AAC9E,SAAK,UAAU,qBAAqB,QAAQ,OAAO;AACnD,SAAK,cAAc,QAAQ,eAAuB,kBAAU,eAAe;AAC3E,SAAK,UAAU,QAAQ,WAAW;AAClC,SAAK,aAAa,QAAQ,cAAc,qBAAqB,mBAAmB,KAAK,OAAO,CAAC;AAC7F,SAAK,QAAQ,EAAE,GAAG,eAAe,GAAG,QAAQ,MAAM;AAClD,SAAK,UAAU,QAAQ,SAAS,WAAW,MAAM,KAAK,UAAU;AAChE,SAAK,YAAY,QAAQ,aAAa;AAAA,EACxC;AAAA,EAEA,MAAM,aAAmD;AACvD,QAAI,KAAK,YAAY,OAAW,QAAO,KAAK;AAC5C,UAAM,MAAM,MAAM,KAAK,QAAQ,QAAQ,KAAK,UAAU;AACtD,QAAI,CAAC,IAAK,QAAQ,KAAK,UAAU;AACjC,QAAI;AACF,YAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,UAAI,OAAO,MAAM,iBAAiB,YAAY,OAAO,MAAM,gBAAgB,SAAU,OAAM,IAAI,MAAM,iBAAiB;AACtH,aAAQ,KAAK,UAAU;AAAA,IACzB,QAAQ;AACN,YAAM,KAAK,QAAQ,WAAW,KAAK,UAAU;AAC7C,aAAQ,KAAK,UAAU;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,WAA6B,UAAU,OAA4C;AAC9F,UAAM,gBAAgB,SAAS,iBAAiB;AAChD,UAAM,eAAe,mBAAmB;AACxC,UAAM,gBAAgB,MAAM,oBAAoB,YAAY;AAC5D,UAAM,WAAW;AAAA,MACf,KAAK;AAAA,MACL;AAAA,MACA,KAAK;AAAA,MACL;AAAA,MACA,KAAK,MAAM;AAAA,MACX;AAAA,IACF;AACA,UAAM,SAAS,MAAiB,gCAAqB,UAAU,KAAK,WAAW;AAC/E,QAAI,OAAO,SAAS,YAAY,OAAO,SAAS,UAAW,OAAM,IAAI,8BAA8B;AACnG,QAAI,OAAO,SAAS,aAAa,CAAC,OAAO,IAAK,OAAM,IAAI,MAAM,kCAAkC;AAChG,UAAM,OAAO,qBAAqB,OAAO,GAAG;AAC5C,QAAI,CAAC,KAAM,OAAM,IAAI,MAAM,6CAA6C;AACxE,QAAI,sBAAsB,OAAO,GAAG,MAAM,eAAe;AACvD,YAAM,IAAI,MAAM,6CAA6C;AAAA,IAC/D;AACA,UAAM,UAAU,MAAM,KAAK,KAA2B,KAAK,MAAM,UAAU;AAAA,MACzE,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,EAAE,MAAM,eAAe,aAAa,CAAC;AAAA,IAC5D,CAAC;AACD,UAAM,KAAK,YAAY,OAAO;AAC9B,WAAO,KAAK,GAAG;AAAA,EACjB;AAAA,EAEA,iBAAiB,OAA4C;AAAE,WAAO,KAAK,OAAO,UAAU,KAAK;AAAA,EAAE;AAAA,EAEnG,MAAM,UAAkC;AACtC,UAAM,UAAU,MAAM,KAAK,WAAW;AACtC,QAAI,CAAC,QAAS,QAAO;AACrB,QAAI;AACF,YAAM,OAAO,MAAM,KAAK,KAA+C,KAAK,MAAM,OAAO,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,EAAE,cAAc,QAAQ,aAAa,CAAC,EAAE,CAAC;AACzK,YAAM,cAAc,KAAK,eAAe,KAAK;AAC7C,UAAI,CAAC,YAAa,OAAM,IAAI,MAAM,yCAAyC;AAC3E,YAAM,KAAK,YAAY,EAAE,GAAG,SAAS,YAAY,CAAC;AAClD,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,iBAAiB,sBAAsB,MAAM,WAAW,IAAK,OAAM,KAAK,aAAa;AACzF,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,eAAuC;AAC3C,UAAM,UAAU,MAAM,KAAK,WAAW;AACtC,WAAO,SAAS,eAAgB,MAAM,KAAK,QAAQ;AAAA,EACrD;AAAA,EAEA,MAAM,KAAiC;AACrC,UAAM,SAAS,MAAM,KAAK,QAA2B,KAAK,MAAM,EAAE;AAClE,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,QAAW,MAAc,OAAoB,CAAC,GAAG,UAAU,OAAmB;AAClF,UAAM,QAAQ,MAAM,KAAK,aAAa;AACtC,UAAM,UAAU,IAAI,QAAQ,KAAK,OAAO;AACxC,QAAI,CAAC,QAAQ,IAAI,cAAc,KAAK,KAAK,QAAQ,QAAQ,WAAW,KAAK,IAAI,GAAG;AAC9E,cAAQ,IAAI,gBAAgB,kBAAkB;AAAA,IAChD;AACA,QAAI,MAAO,SAAQ,IAAI,iBAAiB,UAAU,KAAK,EAAE;AACzD,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC;AAC3F,UAAM,OAAO,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACnD,QAAI,SAAS,WAAW,OAAO,CAAC,WAAW,iBAAiB,KAAK,IAAI,MAAM,MAAM,KAAK,WAAW,IAAI,cAAc;AACjH,YAAM,YAAY,MAAM,KAAK,QAAQ;AACrC,UAAI,UAAW,QAAO,KAAK,QAAW,MAAM,MAAM,IAAI;AAAA,IACxD;AACA,QAAI,CAAC,SAAS,GAAI,OAAM,IAAI,mBAAmB,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,6BAA6B,SAAS,MAAM,KAAK,SAAS,QAAQ,IAAI;AACnK,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,UAAyB;AAC7B,UAAM,UAAU,MAAM,KAAK,WAAW;AACtC,QAAI,SAAS;AACX,YAAM,KAAK,iBAAiB,GAAG,KAAK,OAAO,GAAG,KAAK,MAAM,OAAO,IAAI,EAAE,QAAQ,QAAQ,SAAS,EAAE,gBAAgB,mBAAmB,GAAG,MAAM,KAAK,UAAU,EAAE,cAAc,QAAQ,aAAa,CAAC,EAAE,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,IAC9N;AACA,UAAM,KAAK,aAAa;AAAA,EAC1B;AAAA,EAEA,MAAc,KAAQ,MAAc,MAA+B;AACjE,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,gBAAgB,oBAAoB,GAAI,KAAK,WAAW,CAAC,EAAG,EAAE,CAAC;AAC5J,UAAM,OAAO,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACnD,QAAI,CAAC,SAAS,GAAI,OAAM,IAAI,mBAAmB,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,0BAA0B,SAAS,MAAM,KAAK,SAAS,QAAQ,IAAI;AAChK,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,YAAY,SAA+B;AAAE,SAAK,UAAU;AAAS,UAAM,KAAK,QAAQ,QAAQ,KAAK,YAAY,KAAK,UAAU,OAAO,CAAC;AAAA,EAAE;AAAA,EACxJ,MAAc,eAAe;AAAE,SAAK,UAAU;AAAM,UAAM,KAAK,QAAQ,WAAW,KAAK,UAAU;AAAA,EAAE;AAAA,EAEnG,MAAc,iBAAiB,OAA0B,OAAoB,CAAC,GAAsB;AAClG,QAAI,CAAC,KAAK,aAAa,KAAK,aAAa,EAAG,QAAO,KAAK,QAAQ,OAAO,IAAI;AAC3E,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,SAAS;AACjE,UAAM,SAAS,KAAK;AACpB,QAAI,QAAQ;AACV,UAAI,OAAO,QAAS,YAAW,MAAM;AAAA,UAChC,QAAO,iBAAiB,SAAS,MAAM,WAAW,MAAM,GAAG,EAAE,MAAM,KAAK,CAAC;AAAA,IAChF;AACA,QAAI;AACF,aAAO,MAAM,KAAK,QAAQ,OAAO,EAAE,GAAG,MAAM,QAAQ,WAAW,OAAO,CAAC;AAAA,IACzE,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF;AACF;AASA,SAAS,mBAA2B;AAClC,SAAc,kBAAW;AAC3B;AAEA,SAAS,qBAA6B;AACpC,SAAO,GAAU,kBAAW,EAAE,WAAW,KAAK,EAAE,CAAC,GAAU,kBAAW,EAAE,WAAW,KAAK,EAAE,CAAC;AAC7F;AAEA,eAAe,oBAAoB,UAAmC;AACpE,QAAM,SAAS,MAAa;AAAA,IACnB,6BAAsB;AAAA,IAC7B;AAAA,IACA,EAAE,UAAiB,sBAAe,OAAO;AAAA,EAC3C;AACA,SAAO,OAAO,WAAW,KAAK,GAAG,EAAE,WAAW,KAAK,GAAG,EAAE,QAAQ,OAAO,EAAE;AAC3E;AAEA,SAAS,WAAW,MAAyB;AAC3C,SAAO,OAAO,SAAS;AACzB;AAEA,SAAS,iBAAiB,MAA4C;AACpE,MAAI,QAAQ,QAAQ,OAAO,SAAS,SAAU,QAAO;AACrD,MAAI,OAAO,aAAa,eAAe,gBAAgB,SAAU,QAAO;AACxE,MAAI,OAAO,oBAAoB,eAAe,gBAAgB,gBAAiB,QAAO;AACtF,MAAI,OAAO,SAAS,eAAe,gBAAgB,KAAM,QAAO;AAChE,MAAI,gBAAgB,eAAe,YAAY,OAAO,IAAI,EAAG,QAAO;AACpE,SAAO;AACT;","names":[]}

package/dist/index.d.ts

@@ -141,7 +141,7 @@ interface YjsSubscription {
  * 3. Server-side process.env.DEEPSPACE_ENV
  * 4. Hostname detection (fallback)
  */
-type Environment = 'dev' | 'staging' | 'prod';
+type Environment = 'dev' | 'staging' | 'medical' | 'prod';
 interface EnvironmentConfig {
     name: Environment;
     /** Platform API worker URL */
@@ -158,6 +158,8 @@ interface EnvironmentConfig {
     mainAppUrl: string;
     /** Builder dashboard URL */
     dashboardUrl: string;
+    /** Privacy policy that sign-in screens link to */
+    privacyPolicyUrl: string;
 }
 declare function detectEnvironment(): Environment;
 declare function getEnvironmentConfig(): EnvironmentConfig;
@@ -165,6 +167,8 @@ declare function getApiUrl(): string;
 declare function getPlatformWorkerUrl(): string;
 declare function getAuthUrl(): string;
 declare function isLocalDev(): boolean;
+/** True only on production. DeepSpace Medical (`medical`) is its own plane,
+ *  so this is false there; check `detectEnvironment()` to tell the planes apart. */
 declare function isProduction(): boolean;
 /** Reset cached environment (useful for testing) */
 declare function resetEnvironmentCache(): void;
@@ -229,6 +233,11 @@ interface DeepSpaceAIModel {
     transport: 'messages' | 'chat-completions';
     recommendation: 'frontier' | 'balanced' | 'fast' | 'available' | 'limited';
     note?: string;
+    /**
+     * Superseded: still resolvable by id, so an app that saved it keeps working,
+     * but left out of pickers and model lists.
+     */
+    legacy?: true;
 }
 interface DeepSpaceAgentProfile {
     id: DeepSpaceAgentProfileId;
@@ -244,8 +253,8 @@ interface DeepSpaceAgentProfile {
  * deployed app underneath a commit.
  */
 declare const DEEPSPACE_MODEL_CATALOG_PROVENANCE: {
-    readonly version: "2026-08-04";
-    readonly verifiedAt: "2026-08-04";
+    readonly version: "2026-09-24";
+    readonly verifiedAt: "2026-09-24";
     readonly sources: {
         readonly anthropic: "https://platform.claude.com/docs/en/api/beta/models/list";
         readonly openai: "https://developers.openai.com/api/docs/models/all";
@@ -253,8 +262,8 @@ declare const DEEPSPACE_MODEL_CATALOG_PROVENANCE: {
     };
 };
 declare const DEEPSPACE_AI_MODELS: readonly [{
-    readonly id: "claude-fable-5";
-    readonly label: "Claude Fable 5";
+    readonly id: "claude-opus-5-5";
+    readonly label: "Claude Opus 5.5";
     readonly family: "Claude 5";
     readonly recommendation: "frontier";
 } & {
@@ -265,8 +274,8 @@ declare const DEEPSPACE_AI_MODELS: readonly [{
     agentSupport: "multi-step";
     agentProfiles: readonly ["application", "documentation"];
 }, {
-    readonly id: "claude-opus-5";
-    readonly label: "Claude Opus 5";
+    readonly id: "claude-fable-5-1";
+    readonly label: "Claude Fable 5.1";
     readonly family: "Claude 5";
     readonly recommendation: "frontier";
 } & {
@@ -300,11 +309,95 @@ declare const DEEPSPACE_AI_MODELS: readonly [{
 } & {
     agentSupport: "multi-step";
     agentProfiles: readonly ["application", "documentation"];
+}, {
+    readonly id: "gpt-6-sol";
+    readonly label: "GPT-6 Sol";
+    readonly family: "GPT-6";
+    readonly recommendation: "balanced";
+} & {
+    readonly provider: "openai";
+    readonly providerLabel: "OpenAI";
+    readonly transport: "chat-completions";
+} & {
+    agentSupport: "multi-step";
+    agentProfiles: readonly ["application", "documentation"];
+}, {
+    readonly id: "gpt-6-luna";
+    readonly label: "GPT-6 Luna";
+    readonly family: "GPT-6";
+    readonly recommendation: "fast";
+} & {
+    readonly provider: "openai";
+    readonly providerLabel: "OpenAI";
+    readonly transport: "chat-completions";
+} & {
+    agentSupport: "multi-step";
+    agentProfiles: readonly ["application", "documentation"];
+}, {
+    readonly id: "gpt-6-astra";
+    readonly label: "GPT-6 Astra";
+    readonly provider: "openai";
+    readonly providerLabel: "OpenAI";
+    readonly family: "GPT-6";
+    readonly agentSupport: "none";
+    readonly agentProfiles: readonly [];
+    readonly transport: "chat-completions";
+    readonly recommendation: "limited";
+    readonly note: "Available for direct generation; its tool calling requires the Responses API, which the DeepSpace proxy does not serve.";
+}, {
+    readonly id: "gpt-oss-120b";
+    readonly label: "GPT-OSS 120B";
+    readonly provider: "cerebras";
+    readonly providerLabel: "Cerebras";
+    readonly family: "GPT-OSS";
+    readonly agentSupport: "single-step";
+    readonly agentProfiles: readonly [];
+    readonly transport: "chat-completions";
+    readonly recommendation: "limited";
+    readonly note: "Available for direct generation; the current proxy adapter has not passed multi-step tool-result continuation.";
+}, {
+    readonly id: "qwen-3.8-27b";
+    readonly label: "Qwen 3.8 27B";
+    readonly provider: "cerebras";
+    readonly providerLabel: "Cerebras";
+    readonly family: "Qwen 3.8";
+    readonly agentSupport: "single-step";
+    readonly agentProfiles: readonly [];
+    readonly transport: "chat-completions";
+    readonly recommendation: "limited";
+    readonly note: "Available for direct generation; the current proxy adapter has not passed multi-step tool-result continuation.";
+}, {
+    readonly id: "claude-opus-5";
+    readonly label: "Claude Opus 5";
+    readonly family: "Claude 5";
+    readonly recommendation: "frontier";
+    readonly legacy: true;
+} & {
+    readonly provider: "anthropic";
+    readonly providerLabel: "Anthropic";
+    readonly transport: "messages";
+} & {
+    agentSupport: "multi-step";
+    agentProfiles: readonly ["application", "documentation"];
+}, {
+    readonly id: "claude-fable-5";
+    readonly label: "Claude Fable 5";
+    readonly family: "Claude 5";
+    readonly recommendation: "frontier";
+    readonly legacy: true;
+} & {
+    readonly provider: "anthropic";
+    readonly providerLabel: "Anthropic";
+    readonly transport: "messages";
+} & {
+    agentSupport: "multi-step";
+    agentProfiles: readonly ["application", "documentation"];
 }, {
     readonly id: "gpt-5.6-sol";
     readonly label: "GPT-5.6 Sol";
     readonly family: "GPT-5.6";
     readonly recommendation: "frontier";
+    readonly legacy: true;
 } & {
     readonly provider: "openai";
     readonly providerLabel: "OpenAI";
@@ -317,6 +410,7 @@ declare const DEEPSPACE_AI_MODELS: readonly [{
     readonly label: "GPT-5.6 Terra";
     readonly family: "GPT-5.6";
     readonly recommendation: "balanced";
+    readonly legacy: true;
 } & {
     readonly provider: "openai";
     readonly providerLabel: "OpenAI";
@@ -329,6 +423,7 @@ declare const DEEPSPACE_AI_MODELS: readonly [{
     readonly label: "GPT-5.6 Luna";
     readonly family: "GPT-5.6";
     readonly recommendation: "fast";
+    readonly legacy: true;
 } & {
     readonly provider: "openai";
     readonly providerLabel: "OpenAI";
@@ -336,34 +431,23 @@ declare const DEEPSPACE_AI_MODELS: readonly [{
 } & {
     agentSupport: "multi-step";
     agentProfiles: readonly ["application", "documentation"];
-}, {
-    readonly id: "gpt-oss-120b";
-    readonly label: "GPT-OSS 120B";
-    readonly provider: "cerebras";
-    readonly providerLabel: "Cerebras";
-    readonly family: "GPT-OSS";
-    readonly agentSupport: "single-step";
-    readonly agentProfiles: readonly [];
-    readonly transport: "chat-completions";
-    readonly recommendation: "limited";
-    readonly note: "Available for direct generation; the current proxy adapter has not passed multi-step tool-result continuation.";
 }];
 declare const DEEPSPACE_AI_DEFAULTS: {
-    readonly agent: "claude-sonnet-5";
-    readonly directGeneration: "claude-sonnet-5";
+    readonly agent: "claude-opus-5-5";
+    readonly directGeneration: "claude-opus-5-5";
     readonly summarization: "claude-haiku-4-5";
 };
 declare const DEEPSPACE_AGENT_PROFILES: {
     readonly application: {
         readonly id: "application";
-        readonly defaultModel: "claude-sonnet-5";
+        readonly defaultModel: "claude-opus-5-5";
         readonly maxSteps: 21;
         readonly maxToolCalls: 20;
         readonly allowedTools: "application-defined";
     };
     readonly documentation: {
         readonly id: "documentation";
-        readonly defaultModel: "claude-sonnet-5";
+        readonly defaultModel: "claude-opus-5-5";
         readonly maxSteps: 21;
         readonly maxToolCalls: 20;
         readonly allowedTools: readonly ["documentation_search", "documentation_read"];
@@ -1375,6 +1459,9 @@ declare const ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID = "2026-08-action-routes-b
  *  `<audio>`, or `<video>` load) by the app-origin session cookie, so private
  *  file URLs render for the signed-in user without tokens or signed URLs. */
 declare const FILES_SESSION_COOKIE_READS_MIGRATION_ID = "2026-09-files-session-cookie-reads";
+/** The SDK moved to AI SDK 7 (`ai` 7, `@ai-sdk/anthropic` 4). Apps pin their
+ *  own `ai`, and their chat route persists and streams through its API. */
+declare const AI_SDK_7_MIGRATION_ID = "2026-09-ai-sdk-7";
 type AppMigrationIdsValidation = {
     valid: true;
     ids: string[];
@@ -4663,4 +4750,4 @@ declare const ACCOUNT_STORAGE_LIMIT_BYTES: {
 declare function storageLimitForTier(tier: string | null | undefined): number;
 declare function formatBytes(bytes: number): string;
 
-export { ACCOUNT_STORAGE_LIMIT_BYTES, ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID, ACTION_TOOLS_DELETE_WHERE_MIGRATION_ID, ANONYMOUS_USER_ID_PREFIX, APP_LOG_EVENT_KEYS, ASYNC_RESOURCE_DEFAULTS, type AdHocChargeOpts, type AiStreamAction, type AiStreamChunk, type ApiErrorIssue, type AppLogEvent, type AppLogEventKey, type AppLogsResponse, type AppMigrationIdsValidation, type AsyncResourceDefaults, type AsyncResourceState, type AsyncResourceStatus, AuthGate, type AuthGateProps, AuthOverlay, Awareness, type AwarenessState, type AwarenessStates, BUILD_INJECTED_APP_ID_MIGRATION_ID, type BaseMessage, type CanvasShapeClient, type Channel, type ChannelMember, type ChargeOnceOpts, type ChargeOnceResult, type ClientMessage, type CollectionSchema, type ConnectionAttachment, type ConnectionStatus, type CronHistoryEntry, type CronMutationResult, type CronTaskState, DEEPSPACE_AGENT_PROFILES, DEEPSPACE_AI_DEFAULTS, DEEPSPACE_AI_MODELS, DEEPSPACE_MODEL_CATALOG_PROVENANCE, DEEPSPACE_THEME_PROPERTIES, DEFAULT_USER_COLORS, type DeepSpaceAIModel, type DeepSpaceAIModelId, type DeepSpaceAIProvider, type DeepSpaceAgentProfile, type DeepSpaceAgentProfileId, type DeepSpaceAgentSupport, DeepSpaceAuthProvider, type DeepSpaceThemeConfig, DeepSpaceThemeProvider, type DeepSpaceThemeProviderProps, type DeriveLoadStateInput, ENV, type Environment, FILES_SESSION_COOKIE_READS_MIGRATION_ID, type FileAttachment, type GroupedReaction, GuestBanner, type HandlerContext, type IntegrationResponse, type JobStatusView, type JobView, LOG_LEVELS, type LoadState, type LoadStateAuthInput, type LoadStateStatusInput, type LogLevel, MAX_LOG_TEXT_LENGTH, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type Message, type MessageHandlers, type MsgType, type NormalizedApiError, type PagedResourceFetchArgs, type PagedResourcePage, type PagedResourceState, type PagedResourceStatus, type PlanInfo, PlatformApiError, type PresencePeerClient, PricingTable, type PricingTablePlan, type PricingTablePrice, type ProductChargeOpts, type ProtocolMessage, type Purchase, type Query, type R2FileInfo, type R2FileListPage, type R2Scope, type R2UploadResult, RECORD_NOT_FOUND, ROLES, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_CONFIG, ROLE_DEFAULT, type Reaction, type ReadReceipt, type RecordData, RecordProvider, type RecordProviderProps, RecordRoomNotReadyError, RecordScope, type RequestOptions, type ResolvedDeepSpaceAgentModel, type Role, type RoomUser, SECURE_ROOM_BOUNDARIES_MIGRATION_ID, type ScopeEntry, ScopeRegistryProvider, type ServerMessage, SignedIn, SignedOut, type SubscribeOpts, type SubscribeResult, type SubscriptionState, type SubscriptionStatus, type SyncResult, type UseAsyncResourceOptions, type UseAuthProfileReadyOptions, type UseAuthStatusOptions, type UseCanvasResult, type UseCheckoutOpts, type UseCronMonitorResult, type UseJobsResult, type UsePagedResourceOptions, type UsePresenceRoomResult, type UseR2FilesReturn, type UseVoiceAgentOptions, type UseVoiceAgentResult, type UseYjsFieldResult, type UseYjsRoomResult, type UseYjsTextResult, type User, type UserCredits, type UserInfo, type UserKarma, type UserProfile, type ViewportClient, type VoiceStatus, type VoiceTranscriptEntry, WORKER_OWNED_NOT_FOUND_MIGRATION_ID, type WriteError, applyDeepSpaceTheme, applyUIThemeTokens, authClient, canAutoLoadPagedResource, clampPagedResourceItems, clearAuthToken, clearDeepSpaceTheme, clientBuild, createDecoder, createEncoder, decodeAiStreamChunk, deriveLoadState, detectEnvironment, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, formatBytes, formatFileSize, getApiUrl, getAuthToken, getAuthUrl, getDeepSpaceAIModel, getEnvironmentConfig, getMessageType, getPagedResourceCooldownMs, getPlatformWorkerUrl, getUserColor, handleAwarenessMessage, handleSyncMessage, hasContent, integration, isAnonymousUserId, isAsyncResourceSlow, isDarkColor, isImageFile, isLocalDev, isProduction, isWriterRole, listDeepSpaceAgentModels, logEventText, loggableError, parseSseLine, readThemeFromDOM, readVarUint, readVarUint8Array, resetEnvironmentCache, resolveDeepSpaceAgentModel, serverBuild, signIn, signOut, storageLimitForTier, toConnectionStatus, toUint8Array, truncateLogText, useAsyncResource, useAuth, useAuthProfileReady, useAuthStatus, useAuthUser, useCanvas, useChannelMembers, useChannels, useCheckout, useCronMonitor, useDisplayName, useIsDarkTheme, useJobs, useMessages, useMutations, usePagedResource, usePresence, usePresenceRoom, useQuery, useR2Files, useReactions, useReadReceipts, useRecordContext, useSession, useSubscription, useUser, useUserLookup, useUsers, useVoiceAgent, useYjsField, useYjsRoom, useYjsText, validateAppMigrationIds, writeVarUint, writeVarUint8Array };
+export { ACCOUNT_STORAGE_LIMIT_BYTES, ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID, ACTION_TOOLS_DELETE_WHERE_MIGRATION_ID, AI_SDK_7_MIGRATION_ID, ANONYMOUS_USER_ID_PREFIX, APP_LOG_EVENT_KEYS, ASYNC_RESOURCE_DEFAULTS, type AdHocChargeOpts, type AiStreamAction, type AiStreamChunk, type ApiErrorIssue, type AppLogEvent, type AppLogEventKey, type AppLogsResponse, type AppMigrationIdsValidation, type AsyncResourceDefaults, type AsyncResourceState, type AsyncResourceStatus, AuthGate, type AuthGateProps, AuthOverlay, Awareness, type AwarenessState, type AwarenessStates, BUILD_INJECTED_APP_ID_MIGRATION_ID, type BaseMessage, type CanvasShapeClient, type Channel, type ChannelMember, type ChargeOnceOpts, type ChargeOnceResult, type ClientMessage, type CollectionSchema, type ConnectionAttachment, type ConnectionStatus, type CronHistoryEntry, type CronMutationResult, type CronTaskState, DEEPSPACE_AGENT_PROFILES, DEEPSPACE_AI_DEFAULTS, DEEPSPACE_AI_MODELS, DEEPSPACE_MODEL_CATALOG_PROVENANCE, DEEPSPACE_THEME_PROPERTIES, DEFAULT_USER_COLORS, type DeepSpaceAIModel, type DeepSpaceAIModelId, type DeepSpaceAIProvider, type DeepSpaceAgentProfile, type DeepSpaceAgentProfileId, type DeepSpaceAgentSupport, DeepSpaceAuthProvider, type DeepSpaceThemeConfig, DeepSpaceThemeProvider, type DeepSpaceThemeProviderProps, type DeriveLoadStateInput, ENV, type Environment, FILES_SESSION_COOKIE_READS_MIGRATION_ID, type FileAttachment, type GroupedReaction, GuestBanner, type HandlerContext, type IntegrationResponse, type JobStatusView, type JobView, LOG_LEVELS, type LoadState, type LoadStateAuthInput, type LoadStateStatusInput, type LogLevel, MAX_LOG_TEXT_LENGTH, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type Message, type MessageHandlers, type MsgType, type NormalizedApiError, type PagedResourceFetchArgs, type PagedResourcePage, type PagedResourceState, type PagedResourceStatus, type PlanInfo, PlatformApiError, type PresencePeerClient, PricingTable, type PricingTablePlan, type PricingTablePrice, type ProductChargeOpts, type ProtocolMessage, type Purchase, type Query, type R2FileInfo, type R2FileListPage, type R2Scope, type R2UploadResult, RECORD_NOT_FOUND, ROLES, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_CONFIG, ROLE_DEFAULT, type Reaction, type ReadReceipt, type RecordData, RecordProvider, type RecordProviderProps, RecordRoomNotReadyError, RecordScope, type RequestOptions, type ResolvedDeepSpaceAgentModel, type Role, type RoomUser, SECURE_ROOM_BOUNDARIES_MIGRATION_ID, type ScopeEntry, ScopeRegistryProvider, type ServerMessage, SignedIn, SignedOut, type SubscribeOpts, type SubscribeResult, type SubscriptionState, type SubscriptionStatus, type SyncResult, type UseAsyncResourceOptions, type UseAuthProfileReadyOptions, type UseAuthStatusOptions, type UseCanvasResult, type UseCheckoutOpts, type UseCronMonitorResult, type UseJobsResult, type UsePagedResourceOptions, type UsePresenceRoomResult, type UseR2FilesReturn, type UseVoiceAgentOptions, type UseVoiceAgentResult, type UseYjsFieldResult, type UseYjsRoomResult, type UseYjsTextResult, type User, type UserCredits, type UserInfo, type UserKarma, type UserProfile, type ViewportClient, type VoiceStatus, type VoiceTranscriptEntry, WORKER_OWNED_NOT_FOUND_MIGRATION_ID, type WriteError, applyDeepSpaceTheme, applyUIThemeTokens, authClient, canAutoLoadPagedResource, clampPagedResourceItems, clearAuthToken, clearDeepSpaceTheme, clientBuild, createDecoder, createEncoder, decodeAiStreamChunk, deriveLoadState, detectEnvironment, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, formatBytes, formatFileSize, getApiUrl, getAuthToken, getAuthUrl, getDeepSpaceAIModel, getEnvironmentConfig, getMessageType, getPagedResourceCooldownMs, getPlatformWorkerUrl, getUserColor, handleAwarenessMessage, handleSyncMessage, hasContent, integration, isAnonymousUserId, isAsyncResourceSlow, isDarkColor, isImageFile, isLocalDev, isProduction, isWriterRole, listDeepSpaceAgentModels, logEventText, loggableError, parseSseLine, readThemeFromDOM, readVarUint, readVarUint8Array, resetEnvironmentCache, resolveDeepSpaceAgentModel, serverBuild, signIn, signOut, storageLimitForTier, toConnectionStatus, toUint8Array, truncateLogText, useAsyncResource, useAuth, useAuthProfileReady, useAuthStatus, useAuthUser, useCanvas, useChannelMembers, useChannels, useCheckout, useCronMonitor, useDisplayName, useIsDarkTheme, useJobs, useMessages, useMutations, usePagedResource, usePresence, usePresenceRoom, useQuery, useR2Files, useReactions, useReadReceipts, useRecordContext, useSession, useSubscription, useUser, useUserLookup, useUsers, useVoiceAgent, useYjsField, useYjsRoom, useYjsText, validateAppMigrationIds, writeVarUint, writeVarUint8Array };