typebulb 0.46.0 → 0.47.0

package/README.md

@@ -198,7 +198,7 @@ everywhere.
 | `tb.copy(text)` | Copy text to the clipboard | |
 | `tb.url()` | Get the bulb URL (the served localhost URL, locally) | |
 | `tb.models()` | List available AI models (for dynamic model selectors); the `.env` default is flagged (`default: true`); returns `[]` when embedded (no host AI) | |
-| `tb.hasOwnKeys()` | Whether the user's own AI keys back `tb.ai` — `false` means courtesy model only; always `false` embedded | |
+| `tb.aiAccess()` | What backs `tb.ai` — `'own' \| 'courtesy' \| 'none'` | |
 | `tb.log(...)` | Print to the CLI's stdout (read back with `typebulb logs`); falls back to the browser console when no CLI serves the page | |
 | `tb.onMessage(cb)` | Receive a value pushed in from the terminal by `typebulb send`; a non-`undefined` return becomes the reply `send --wait` prints — inert when embedded (no sender) | |
 | `tb.fs.read/readBytes/write` | Read and write local files | yes |
@@ -311,7 +311,7 @@ The host owns a bulb's **width**; you own its **height**.
 - **Theme-aware styling.** Style off CSS variables / `currentColor` so the bulb reads correctly in both light and dark; the host sets the theme.
 - **Native dropdowns.** Style `select, option { background: Canvas; color: CanvasText }` (system colors track the host's `color-scheme`) — a `transparent` `<select>` otherwise opens an unthemed popup, white-on-white in dark mode.
 - **`tb.ai()` takes more than the basics** — the full shape is `tb.ai({ messages, system?, effort?, provider?, model?, webSearch? })` → `Promise<{ text }>`. `webSearch` defaults **on** in the CLI (you supply your own key); pass `webSearch: false` to turn it off. For token-by-token output use `tb.ai.stream(...)` (see [`tb.ai()` § Streaming](#streaming)).
-- **Gate AI-heavy bulbs on `tb.hasOwnKeys()`.** `false` means only the quota-limited courtesy model backs `tb.ai` (or, in the CLI, no keys at all) — fine for a call or two, but a bulb that makes many (an agent loop, a model-vs-model game) should render a "use your own keys" notice instead of the run controls.
+- **Gate AI-heavy bulbs on `tb.aiAccess()`** — `'own'` / `'courtesy'` / `'none'`, never re-derived from `tb.mode` or the model list (see [AI access](#ai-access)).
 - **`tb.theme` drives the `html[data-theme]` attribute** — style off that selector (`html[data-theme="dark"] { … }`); don't read `tb.theme` to branch your rendering.
 - **`color-scheme` is set for you** — the host always applies `html[data-theme="dark"] { color-scheme: dark }` / `html[data-theme="light"] { color-scheme: light }` on top of your `styles.css`.
 - **Math (KaTeX) renders in your replies** — write inline `$…$` / display `$$…$$` (prefer `$y = x^2$` over inline-code or a Unicode `y = x²`). The mirror's KaTeX renders only in prose and doesn't reach inside a fenced block (bulb, mermaid, svg, code).
@@ -373,7 +373,7 @@ Which must be declared in the dependencies section:
 
 Typebulb has a package resolver that will load and cache these packages from `esm.sh` when the bulb runs.
 
-## Custom AI Models
+## AI Models
 
 Three ways to use models from different providers in typebulb:
 
@@ -442,6 +442,21 @@ for await (const c of tb.ai.stream({ messages })) {
 
 Breaking the loop stops the stream; same options as `tb.ai()`. **`kind: "reasoning"` chunks require `effort: 1-3` and a thinking-capable model**.
 
+### AI access
+
+`tb.aiAccess()` reports what backs `tb.ai`, typed as the ambient `AiAccess`.
+
+| Value | What it means | What a bulb does |
+|-------|---------------|------------------|
+| `'own'` | The user's own keys, or their own local model server | Run everything |
+| `'courtesy'` | typebulb.com's quota-limited courtesy model | Fine for a call or two; a bulb that makes many (an agent loop, a model-vs-model game) shows a "use your own keys" notice instead of the run controls |
+| `'none'` | No AI at all — the CLI with no keys, or an embedded bulb | Say so; don't leave dead controls on screen |
+
+```ts
+const [access, setAccess] = useState<AiAccess>("own");
+useEffect(() => { tb.aiAccess().then(setAccess); }, []);
+```
+
 ### Ollama & OpenAI-compatible endpoints
 
 `provider: "ollama"` is the zero-config local preset: it talks to a local [Ollama](https://ollama.com) server over its OpenAI-compatible endpoint — no API key, defaults to `http://localhost:11434` (override with `OLLAMA_HOST`). `typebulb models` lists your installed Ollama models alongside cloud ones.

package/SKILL.md

@@ -1,10 +1,10 @@
 ---
 name: typebulb
 description: "Author and run Typebulb bulbs — single-file markdown apps (TypeScript/TSX) that run locally via `npx typebulb` (full power: filesystem, database, `server.ts`, `tb.ai`) or render live inline in your coding agent's session through Typebulb's agent mirror (embedded, client-only). A bulb can be a visual widget (chart, simulation, diagram, calculator, UI), a full-stack tool with a Node backend, or an AI app that calls models at runtime. Covers the bulb format, the `tb.*` API, trust, and the local run/embed workflow. Use when the user wants a bulb, a quick local tool (visual, backend-backed, or AI-powered), or something visual rendered inline in the conversation."
-version: 0.46.0
+version: 0.47.0
 ---
 
-> Generated from typebulb v0.46.0. `npx typebulb agent` prints the running version alongside the path to its packaged SKILL.md: if that version is newer than this one, replace this file with that one.
+> Generated from typebulb v0.47.0. `npx typebulb agent` prints the running version alongside the path to its packaged SKILL.md: if that version is newer than this one, replace this file with that one.
 
 # typebulb
 
@@ -206,7 +206,7 @@ everywhere.
 | `tb.copy(text)` | Copy text to the clipboard | |
 | `tb.url()` | Get the bulb URL (the served localhost URL, locally) | |
 | `tb.models()` | List available AI models (for dynamic model selectors); the `.env` default is flagged (`default: true`); returns `[]` when embedded (no host AI) | |
-| `tb.hasOwnKeys()` | Whether the user's own AI keys back `tb.ai` — `false` means courtesy model only; always `false` embedded | |
+| `tb.aiAccess()` | What backs `tb.ai` — `'own' \| 'courtesy' \| 'none'` | |
 | `tb.log(...)` | Print to the CLI's stdout (read back with `typebulb logs`); falls back to the browser console when no CLI serves the page | |
 | `tb.onMessage(cb)` | Receive a value pushed in from the terminal by `typebulb send`; a non-`undefined` return becomes the reply `send --wait` prints — inert when embedded (no sender) | |
 | `tb.fs.read/readBytes/write` | Read and write local files | yes |
@@ -319,7 +319,7 @@ The host owns a bulb's **width**; you own its **height**.
 - **Theme-aware styling.** Style off CSS variables / `currentColor` so the bulb reads correctly in both light and dark; the host sets the theme.
 - **Native dropdowns.** Style `select, option { background: Canvas; color: CanvasText }` (system colors track the host's `color-scheme`) — a `transparent` `<select>` otherwise opens an unthemed popup, white-on-white in dark mode.
 - **`tb.ai()` takes more than the basics** — the full shape is `tb.ai({ messages, system?, effort?, provider?, model?, webSearch? })` → `Promise<{ text }>`. `webSearch` defaults **on** in the CLI (you supply your own key); pass `webSearch: false` to turn it off. For token-by-token output use `tb.ai.stream(...)` (see [`tb.ai()` § Streaming](#streaming)).
-- **Gate AI-heavy bulbs on `tb.hasOwnKeys()`.** `false` means only the quota-limited courtesy model backs `tb.ai` (or, in the CLI, no keys at all) — fine for a call or two, but a bulb that makes many (an agent loop, a model-vs-model game) should render a "use your own keys" notice instead of the run controls.
+- **Gate AI-heavy bulbs on `tb.aiAccess()`** — `'own'` / `'courtesy'` / `'none'`, never re-derived from `tb.mode` or the model list (see [AI access](#ai-access)).
 - **`tb.theme` drives the `html[data-theme]` attribute** — style off that selector (`html[data-theme="dark"] { … }`); don't read `tb.theme` to branch your rendering.
 - **`color-scheme` is set for you** — the host always applies `html[data-theme="dark"] { color-scheme: dark }` / `html[data-theme="light"] { color-scheme: light }` on top of your `styles.css`.
 - **Math (KaTeX) renders in your replies** — write inline `$…$` / display `$$…$$` (prefer `$y = x^2$` over inline-code or a Unicode `y = x²`). The mirror's KaTeX renders only in prose and doesn't reach inside a fenced block (bulb, mermaid, svg, code).
@@ -381,7 +381,7 @@ Which must be declared in the dependencies section:
 
 Typebulb has a package resolver that will load and cache these packages from `esm.sh` when the bulb runs.
 
-## Custom AI Models
+## AI Models
 
 Three ways to use models from different providers in typebulb:
 
@@ -450,6 +450,21 @@ for await (const c of tb.ai.stream({ messages })) {
 
 Breaking the loop stops the stream; same options as `tb.ai()`. **`kind: "reasoning"` chunks require `effort: 1-3` and a thinking-capable model**.
 
+### AI access
+
+`tb.aiAccess()` reports what backs `tb.ai`, typed as the ambient `AiAccess`.
+
+| Value | What it means | What a bulb does |
+|-------|---------------|------------------|
+| `'own'` | The user's own keys, or their own local model server | Run everything |
+| `'courtesy'` | typebulb.com's quota-limited courtesy model | Fine for a call or two; a bulb that makes many (an agent loop, a model-vs-model game) shows a "use your own keys" notice instead of the run controls |
+| `'none'` | No AI at all — the CLI with no keys, or an embedded bulb | Say so; don't leave dead controls on screen |
+
+```ts
+const [access, setAccess] = useState<AiAccess>("own");
+useEffect(() => { tb.aiAccess().then(setAccess); }, []);
+```
+
 ### Ollama & OpenAI-compatible endpoints
 
 `provider: "ollama"` is the zero-config local preset: it talks to a local [Ollama](https://ollama.com) server over its OpenAI-compatible endpoint — no API key, defaults to `http://localhost:11434` (override with `OLLAMA_HOST`). `typebulb models` lists your installed Ollama models alongside cloud ones.

package/dist/agents/claude/client.js

@@ -1225,12 +1225,13 @@ const something = require('module-name')  // NOT SUPPORTED!
       return resp.json();
     },
 
-    // Own-keys check - true when the user's own AI backs tb.ai (env keys, compat endpoint, or Ollama)
-    hasOwnKeys: async () => {
-      if (isEmbedded) return false;
-      const resp = await fetch('/__has-own-keys');
-      if (!resp.ok) return false;
-      return (await resp.json()) === true;
+    // AI-access check - 'own' when the user's own AI backs tb.ai (env keys, compat endpoint, or
+    // Ollama), else 'none': an embed has no host AI, and the CLI has no courtesy model
+    aiAccess: async () => {
+      if (isEmbedded) return 'none';
+      const resp = await fetch('/__ai-access');
+      if (!resp.ok) return 'none';
+      return await resp.json();
     },
 
     // Dump just logs to console in local mode

package/dist/agents/pi/client.js

@@ -1225,12 +1225,13 @@ const something = require('module-name')  // NOT SUPPORTED!
       return resp.json();
     },
 
-    // Own-keys check - true when the user's own AI backs tb.ai (env keys, compat endpoint, or Ollama)
-    hasOwnKeys: async () => {
-      if (isEmbedded) return false;
-      const resp = await fetch('/__has-own-keys');
-      if (!resp.ok) return false;
-      return (await resp.json()) === true;
+    // AI-access check - 'own' when the user's own AI backs tb.ai (env keys, compat endpoint, or
+    // Ollama), else 'none': an embed has no host AI, and the CLI has no courtesy model
+    aiAccess: async () => {
+      if (isEmbedded) return 'none';
+      const resp = await fetch('/__ai-access');
+      if (!resp.ok) return 'none';
+      return await resp.json();
     },
 
     // Dump just logs to console in local mode

package/dist/agents/pi/matchu-patchu.ts

@@ -2440,7 +2440,7 @@ var Patcher = class {
 
 // cli/agents/pi/server/piPatcherExtension.ts
 var DESCRIPTION = true ? "Apply unified diffs to files \u2014 tolerant of form, strict about intent. Repairs sloppy AI-generated diffs (mangled headers, whitespace drift, missing prefixes; line numbers can be wrong or absent \u2014 hunks anchor by fuzzy-matched context lines) and applies all hunks atomically when the intent is unambiguous; fails with a precise, typed error when it isn't. Use for multi-hunk edits in one step, or when exact string-replacement editing fails on whitespace or invisible characters." : "Apply unified diffs to files.";
-var BUILD_TAG = true ? "matchu-patchu-pi 0.3.5, built 2026-07-31 11:26:51" : "matchu-patchu-pi dev";
+var BUILD_TAG = true ? "matchu-patchu-pi 0.3.5, built 2026-07-31 12:20:40" : "matchu-patchu-pi dev";
 var errorBlocks = (errors) => {
   const parts = [`Patch failed with ${errors.length} error(s):`];
   for (const e of errors) parts.push("", e.toString());

package/dist/ai/protocol.d.ts

@@ -63,6 +63,10 @@ export type AiChunk = {
     kind: 'reasoning';
     text: string;
 };
+/** What backs `tb.ai` for the current user: their own keys (`own`), the quota-limited courtesy
+ *  model (`courtesy`), or nothing at all (`none` — the CLI without keys, an embedded bulb). Which
+ *  hosts can answer which value is the host's business, not a bulb's; see runtime-specs/TB-AI.md. */
+export type AiAccess = 'own' | 'courtesy' | 'none';
 /** tb.models() response — model available to the current user */
 export interface TbModelDto {
     /** Provider protocol: "anthropic", "openai", "gemini", "openrouter" */

package/dist/ai/protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../ai/src/protocol.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAA;AAEtD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,QAAQ,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,UAAU,GAAG,aAAa,GAAG,QAAQ,GAAG,WAAW,CAAA;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAGD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAGD,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,0IAA0I;AAC1I,MAAM,WAAW,mBAAmB;IAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE;AAE/D,yHAAyH;AACzH,MAAM,WAAW,sBAAsB;IAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE;AAIlE,6CAA6C;AAC7C,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,kBAAkB,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,CAAA;AAEvG,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,eAAe,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAe,SAAQ,QAAQ,CAAC,kBAAkB,CAAC;IAClE,IAAI,EAAE,OAAO,CAAA;CACd;AAED;;;4CAG4C;AAC5C,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,GAAG,QAAQ,GAAG,eAAe,CAAA;AAE5G;;;;;iEAKiE;AACjE,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAEvC;;+FAE+F;AAC/F,MAAM,MAAM,OAAO,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvC,iEAAiE;AACjE,MAAM,WAAW,UAAU;IACzB,uEAAuE;IACvE,QAAQ,EAAE,MAAM,CAAA;IAChB,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAA;IACZ,qDAAqD;IACrD,YAAY,EAAE,MAAM,CAAA;IACpB,8CAA8C;IAC9C,YAAY,EAAE,MAAM,CAAA;IACpB,0GAA0G;IAC1G,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB"}
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../ai/src/protocol.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAA;AAEtD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,QAAQ,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,UAAU,GAAG,aAAa,GAAG,QAAQ,GAAG,WAAW,CAAA;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAGD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAGD,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,0IAA0I;AAC1I,MAAM,WAAW,mBAAmB;IAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE;AAE/D,yHAAyH;AACzH,MAAM,WAAW,sBAAsB;IAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE;AAIlE,6CAA6C;AAC7C,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,kBAAkB,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,CAAA;AAEvG,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,eAAe,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAe,SAAQ,QAAQ,CAAC,kBAAkB,CAAC;IAClE,IAAI,EAAE,OAAO,CAAA;CACd;AAED;;;4CAG4C;AAC5C,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,GAAG,QAAQ,GAAG,eAAe,CAAA;AAE5G;;;;;iEAKiE;AACjE,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAEvC;;+FAE+F;AAC/F,MAAM,MAAM,OAAO,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvC;;qGAEqG;AACrG,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,UAAU,GAAG,MAAM,CAAA;AAElD,iEAAiE;AACjE,MAAM,WAAW,UAAU;IACzB,uEAAuE;IACvE,QAAQ,EAAE,MAAM,CAAA;IAChB,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAA;IACZ,qDAAqD;IACrD,YAAY,EAAE,MAAM,CAAA;IACpB,8CAA8C;IAC9C,YAAY,EAAE,MAAM,CAAA;IACpB,0GAA0G;IAC1G,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB"}

package/dist/dts/tbTypings.d.ts

@@ -9,10 +9,10 @@
  * TypeChecker, and the CLI's emitted typecheck dirs.
  */
 /** Typebulb globals available in browser-side code (code.tsx). */
-export declare const clientTbTypings = "\n/** A single streamed delta from `tb.ai.stream()`. Discriminated by `kind`. */\ntype AiChunk =\n  | { kind: \"text\"; text: string }\n  | { kind: \"reasoning\"; text: string };\n\n/**\n * Typebulb utilities namespace.\n * Type `tb.` to discover available helpers.\n */\ndeclare const tb: {\n  /**\n   * Get raw data chunk from the Data tab.\n   * @param index - Chunk index (0-based). Separate chunks with 2 blank lines.\n   */\n  data(index: number): string;\n  /**\n   * Get data chunk parsed as JSON (handles JSON-ish with unquoted keys).\n   * @param index - Chunk index (0-based)\n   * @throws If chunk is not valid JSON/JSON-ish\n   */\n  json<T = unknown>(index: number): T;\n  /**\n   * Async value inspector for tensor-like objects.\n   *\n   * Materializes lazy values (like GPU tensors) and logs them with metadata.\n   * Handles objects with `.js()`, `.data()`, `.array()`, `.arraySync()`, etc.\n   *\n   * @remarks\n   * - Always use `await` - materialization may be async (GPU\u2192CPU readback)\n   * - Large values are truncated (max 1000 elements)\n   * - Promises are logged as `[Promise]` (not awaited - could hang)\n   */\n  dump(...args: any[]): Promise<void>;\n  /**\n   * Trigger inference to generate new insight data.\n   *\n   * Opens a confirmation modal showing the data to be analyzed, then streams\n   * the inference result. On success, updates the insight so subsequent\n   * `tb.insight()` calls return the new value.\n   *\n   * @param opts - Options for inference\n   * @param opts.data - Data to pre-populate in the modal (string or array of strings). If omitted, modal opens with empty textarea for user to paste.\n   * @returns Promise that resolves with the parsed insight JSON\n   * @throws If inference is already in progress, or on network/parse/rate limit errors\n   */\n  infer<T = unknown>(opts?: { data?: string | string[] }): Promise<T>;\n  /**\n   * Get the current inference state.\n   *\n   * @returns 'idle' | 'running' | 'complete' | 'error'\n   */\n  inferenceState(): 'idle' | 'running' | 'complete' | 'error';\n  /**\n   * Set a data chunk for the next inference call.\n   *\n   * Use this to programmatically set data that will be sent when `tb.infer()` is called\n   * without the `data` option.\n   *\n   * @param index - The chunk index (0-based)\n   * @param content - The content for this chunk\n   */\n  setData(index: number, content: string): void;\n  /**\n   * Proxy a CDN URL through the sandbox origin for Web Worker/WASM same-origin loading.\n   *\n   * In the sandbox, prepends `/proxy/` so the URL is served from the same origin.\n   * Outside the sandbox (exported HTML, CLI), returns the URL unchanged.\n   *\n   * @param url - Full HTTPS URL to an allowlisted CDN (esm.sh, unpkg.com, cdn.jsdelivr.net, cdnjs.cloudflare.com)\n   * @returns The proxied URL (sandbox) or the original URL (standalone/CLI)\n   */\n  proxy(url: string): string;\n  /**\n   * Copy text to clipboard.\n   * Must be called synchronously within a user gesture (click/keydown).\n   * @returns true if successful, false otherwise\n   */\n  copy(text: string): Promise<boolean>;\n  /**\n   * Get the canonical URL of this bulb.\n   *\n   * Returns the parent typebulb.com URL (including path, query, and `#tb=` fragment),\n   * resolving correctly from inside the cross-origin sandbox iframe.\n   * Use this instead of `location.href` or `document.referrer`.\n   *\n   * @returns The full canonical URL\n   */\n  url(): Promise<string>;\n  /**\n   * Get the insight data produced by the inference layer.\n   *\n   * Returns the parsed JSON from insight.json, populated by the inference LLM.\n   * Use a type parameter to get typed access to the insight data.\n   *\n   * @returns The parsed insight JSON, or undefined if no insight is available\n   */\n  insight<T = unknown>(): T | undefined;\n  /**\n   * Print to the CLI's stdout \u2014 the bulb's log channel, read back with `typebulb logs <file>`.\n   *\n   * Ungated: needs no `server.ts` block and no `--trust`, so a Restricted client-only bulb can\n   * instrument itself. Args cross to the CLI as JSON; where no CLI serves the page (web, embedded,\n   * or a transport failure) it falls back to the browser console. Works in `server.ts` too (same\n   * as `console.log` there).\n   */\n  log(...args: any[]): void;\n  /**\n   * Server-side function proxy.\n   *\n   * In the CLI, calls exported functions from the `**server.ts**` section.\n   *\n   * A normal export is awaited for its result (`await tb.server.fn()`). An `async function*`\n   * export streams: `for await (const chunk of tb.server.gen())`. The call object supports both;\n   * break the `for await` to cancel and tear down the server generator.\n   */\n  server: Record<string, (...args: any[]) => Promise<any> & AsyncIterable<any>>;\n  /**\n   * Subscribe to a value pushed from the terminal via `typebulb send <file> [message]`.\n   *\n   * The dual of `tb.log` (data out): a value sent *in* from the CLI, no `--trust` required.\n   * Use it to start expensive work on demand instead of on load \u2014 e.g. `tb.onMessage(() => start())`\n   * \u2014 so hot reloads don't re-trigger it while you edit, and an agent kicks off one run when ready.\n   *\n   * The message is the JSON-parsed value of what `send` was given (or the raw string if it isn't\n   * JSON; `undefined` for a bare `typebulb send <file>`). A non-`undefined` return value (awaited)\n   * becomes the reply `send --wait` prints on stdout \u2014 JSON-serializable, at most one handler\n   * replying \u2014 the structured read-back for self-tests. Returns an unsubscribe function. Inert in\n   * an embedded bulb (no sender) \u2014 the handler is registered but never fires.\n   *\n   * @param handler - Called with each pushed message; may return a JSON-serializable reply.\n   * @returns An unsubscribe function.\n   */\n  onMessage(handler: (message: any) => unknown): () => void;\n  /**\n   * General-purpose AI call. `tb.ai(opts)` resolves with the full text; `tb.ai.stream(opts)`\n   * returns an async iterable of {@link AiChunk} deltas you consume with `for await`.\n   *\n   * @returns Promise resolving to { text: string }\n   * @throws On rate limit, network error, or provider error\n   */\n  ai: {\n    (options: {\n    messages: Array<{ role: \"user\" | \"assistant\"; content: string }>;\n    system?: string;\n    /** Reasoning effort hint: 0=minimal, 1=low, 2=med, 3=high. Mapped to each provider's native mechanism (OpenAI/OpenRouter reasoning effort, Gemini thinking budget, Anthropic adaptive thinking). 0 minimizes reasoning \u2014 a floor, not a guaranteed \"off\": some models still think a little at 0, and adaptive models already self-skip at 1 (low). Level 1 (low) is the sensible default for most work; reach for 0 only when you truly want minimal deliberation. Omit for the model's own default. */\n    effort?: 0 | 1 | 2 | 3;\n    provider?: string;\n    model?: string;\n    /** Enable/disable web search. Default: on for BYOK, always off for free model. */\n    webSearch?: boolean;\n    /** Abort the request. On abort the promise rejects / the stream ends. */\n    signal?: AbortSignal;\n  }): Promise<{ text: string }>;\n    /**\n     * Streaming counterpart of `tb.ai()`. Yields `{ kind: \"text\" | \"reasoning\", text }` deltas\n     * as they arrive; break the loop (or abort `signal`) to cancel and stop the upstream.\n     *\n     * `kind: \"reasoning\"` deltas only arrive when you pass `effort: 1-3` AND use a\n     * thinking-capable model; otherwise the stream is `text`-only.\n     *\n     * @example\n     * let answer = \"\";\n     * for await (const c of tb.ai.stream({ messages })) {\n     *   if (c.kind === \"text\") answer += c.text;\n     * }\n     */\n    stream(options: {\n    messages: Array<{ role: \"user\" | \"assistant\"; content: string }>;\n    system?: string;\n    /** Reasoning effort hint: 0=minimal, 1=low, 2=med, 3=high. Mapped to each provider's native mechanism (OpenAI/OpenRouter reasoning effort, Gemini thinking budget, Anthropic adaptive thinking). 0 minimizes reasoning \u2014 a floor, not a guaranteed \"off\": some models still think a little at 0, and adaptive models already self-skip at 1 (low). Level 1 (low) is the sensible default for most work; reach for 0 only when you truly want minimal deliberation. Omit for the model's own default. */\n    effort?: 0 | 1 | 2 | 3;\n    provider?: string;\n    model?: string;\n    /** Enable/disable web search. Default: on for BYOK, always off for free model. */\n    webSearch?: boolean;\n    /** Abort the request. On abort the promise rejects / the stream ends. */\n    signal?: AbortSignal;\n  }): AsyncIterable<AiChunk>;\n  };\n  /**\n   * Local filesystem access (CLI only).\n   *\n   * Relative paths resolve against the bulb's folder (`tb.dir` \u2014\n   * `<bulb-dir>/<filename-stem>/`, created on demand), so\n   * `tb.fs.write('results.json')` lands beside the bulb. `../` reaches sibling\n   * bulbs' folders; everything stays confined to the project (the launch cwd).\n   * Throws in editor/published mode.\n   */\n  fs: {\n    /** Read a file as UTF-8 text. Throws if the file is not valid UTF-8 \u2014 use readBytes for binary. */\n    read(path: string): Promise<string>;\n    /** Read a file as raw bytes. */\n    readBytes(path: string): Promise<Uint8Array>;\n    /** Write text or raw bytes to a file. Creates parent directories if needed. */\n    write(path: string, content: string | Uint8Array): Promise<boolean>;\n  };\n  /**\n   * The bulb's folder \u2014 absolute path to `<bulb-dir>/<filename-stem>/`\n   * (or its `batches/<name>/` folder when the run is scoped with `--batch`).\n   *\n   * For interop only (handing a path to `server.ts` or a spawned tool):\n   * `tb.fs` already resolves relative paths against it, so bulb code writing\n   * its own files never needs it. CLI only \u2014 throws in editor/published/embedded mode.\n   */\n  readonly dir: string;\n  /**\n   * Returns AI models available to the current user.\n   * Models are filtered by the user's configured API keys.\n   * If no keys are configured, returns only the courtesy model.\n   */\n  models(): Promise<Array<{\n    /** Provider protocol: \"anthropic\", \"openai\", \"gemini\", \"openrouter\" */\n    provider: string;\n    /** Model identifier, e.g. \"claude-sonnet-4-6\" */\n    name: string;\n    /** Human-readable display name, e.g. \"Sonnet 4.6\" */\n    friendlyName: string;\n    /** Provider display name, e.g. \"Anthropic\" */\n    providerName: string;\n    /** True on the .env-configured default model (TB_AI_PROVIDER + TB_AI_MODEL); absent otherwise */\n    default?: boolean;\n  }>>;\n  /**\n   * Whether the user's own AI keys back `tb.ai`. False means only the\n   * quota-limited courtesy model is available (or no AI at all) \u2014 a bulb\n   * making many AI calls should check this and show a \"use your own keys\"\n   * notice instead of running.\n   */\n  hasOwnKeys(): Promise<boolean>;\n  /**\n   * The bulb's theme override (`<html data-theme>`).\n   *\n   * - Get: the current override \u2014 `'dark'` | `'light'`, or `undefined` when\n   *   following the OS preference.\n   * - Set `'dark'`/`'light'` to force and persist it (per-bulb); set\n   *   `undefined` to clear the override and follow the OS again.\n   *\n   * Drives `<html data-theme>`, so render off `html[data-theme=\"\u2026\"]` selectors\n   * (or observe the attribute) rather than reading `tb.theme`.\n   */\n  theme: 'light' | 'dark' | undefined;\n  /**\n   * The mode this bulb is running in.\n   *\n   * - `'local'` \u2014 Running via the typebulb CLI\n   * - `'editor'` \u2014 Running in the typebulb.com editor\n   * - `'published'` \u2014 Running as a published/standalone bulb on typebulb.com\n   * - `'embedded'` \u2014 Running as a bulb embedded inside another bulb (sandboxed,\n   *   client-only: AI, filesystem, and server RPC are unavailable)\n   */\n  mode: 'local' | 'editor' | 'published' | 'embedded';\n};\n";
+export declare const clientTbTypings = "\n/** A single streamed delta from `tb.ai.stream()`. Discriminated by `kind`. */\ntype AiChunk =\n  | { kind: \"text\"; text: string }\n  | { kind: \"reasoning\"; text: string };\n\n/** What backs `tb.ai`: the user's own keys, the quota-limited courtesy model, or nothing. */\ntype AiAccess = \"own\" | \"courtesy\" | \"none\";\n\n/**\n * Typebulb utilities namespace.\n * Type `tb.` to discover available helpers.\n */\ndeclare const tb: {\n  /**\n   * Get raw data chunk from the Data tab.\n   * @param index - Chunk index (0-based). Separate chunks with 2 blank lines.\n   */\n  data(index: number): string;\n  /**\n   * Get data chunk parsed as JSON (handles JSON-ish with unquoted keys).\n   * @param index - Chunk index (0-based)\n   * @throws If chunk is not valid JSON/JSON-ish\n   */\n  json<T = unknown>(index: number): T;\n  /**\n   * Async value inspector for tensor-like objects.\n   *\n   * Materializes lazy values (like GPU tensors) and logs them with metadata.\n   * Handles objects with `.js()`, `.data()`, `.array()`, `.arraySync()`, etc.\n   *\n   * @remarks\n   * - Always use `await` - materialization may be async (GPU\u2192CPU readback)\n   * - Large values are truncated (max 1000 elements)\n   * - Promises are logged as `[Promise]` (not awaited - could hang)\n   */\n  dump(...args: any[]): Promise<void>;\n  /**\n   * Trigger inference to generate new insight data.\n   *\n   * Opens a confirmation modal showing the data to be analyzed, then streams\n   * the inference result. On success, updates the insight so subsequent\n   * `tb.insight()` calls return the new value.\n   *\n   * @param opts - Options for inference\n   * @param opts.data - Data to pre-populate in the modal (string or array of strings). If omitted, modal opens with empty textarea for user to paste.\n   * @returns Promise that resolves with the parsed insight JSON\n   * @throws If inference is already in progress, or on network/parse/rate limit errors\n   */\n  infer<T = unknown>(opts?: { data?: string | string[] }): Promise<T>;\n  /**\n   * Get the current inference state.\n   *\n   * @returns 'idle' | 'running' | 'complete' | 'error'\n   */\n  inferenceState(): 'idle' | 'running' | 'complete' | 'error';\n  /**\n   * Set a data chunk for the next inference call.\n   *\n   * Use this to programmatically set data that will be sent when `tb.infer()` is called\n   * without the `data` option.\n   *\n   * @param index - The chunk index (0-based)\n   * @param content - The content for this chunk\n   */\n  setData(index: number, content: string): void;\n  /**\n   * Proxy a CDN URL through the sandbox origin for Web Worker/WASM same-origin loading.\n   *\n   * In the sandbox, prepends `/proxy/` so the URL is served from the same origin.\n   * Outside the sandbox (exported HTML, CLI), returns the URL unchanged.\n   *\n   * @param url - Full HTTPS URL to an allowlisted CDN (esm.sh, unpkg.com, cdn.jsdelivr.net, cdnjs.cloudflare.com)\n   * @returns The proxied URL (sandbox) or the original URL (standalone/CLI)\n   */\n  proxy(url: string): string;\n  /**\n   * Copy text to clipboard.\n   * Must be called synchronously within a user gesture (click/keydown).\n   * @returns true if successful, false otherwise\n   */\n  copy(text: string): Promise<boolean>;\n  /**\n   * Get the canonical URL of this bulb.\n   *\n   * Returns the parent typebulb.com URL (including path, query, and `#tb=` fragment),\n   * resolving correctly from inside the cross-origin sandbox iframe.\n   * Use this instead of `location.href` or `document.referrer`.\n   *\n   * @returns The full canonical URL\n   */\n  url(): Promise<string>;\n  /**\n   * Get the insight data produced by the inference layer.\n   *\n   * Returns the parsed JSON from insight.json, populated by the inference LLM.\n   * Use a type parameter to get typed access to the insight data.\n   *\n   * @returns The parsed insight JSON, or undefined if no insight is available\n   */\n  insight<T = unknown>(): T | undefined;\n  /**\n   * Print to the CLI's stdout \u2014 the bulb's log channel, read back with `typebulb logs <file>`.\n   *\n   * Ungated: needs no `server.ts` block and no `--trust`, so a Restricted client-only bulb can\n   * instrument itself. Args cross to the CLI as JSON; where no CLI serves the page (web, embedded,\n   * or a transport failure) it falls back to the browser console. Works in `server.ts` too (same\n   * as `console.log` there).\n   */\n  log(...args: any[]): void;\n  /**\n   * Server-side function proxy.\n   *\n   * In the CLI, calls exported functions from the `**server.ts**` section.\n   *\n   * A normal export is awaited for its result (`await tb.server.fn()`). An `async function*`\n   * export streams: `for await (const chunk of tb.server.gen())`. The call object supports both;\n   * break the `for await` to cancel and tear down the server generator.\n   */\n  server: Record<string, (...args: any[]) => Promise<any> & AsyncIterable<any>>;\n  /**\n   * Subscribe to a value pushed from the terminal via `typebulb send <file> [message]`.\n   *\n   * The dual of `tb.log` (data out): a value sent *in* from the CLI, no `--trust` required.\n   * Use it to start expensive work on demand instead of on load \u2014 e.g. `tb.onMessage(() => start())`\n   * \u2014 so hot reloads don't re-trigger it while you edit, and an agent kicks off one run when ready.\n   *\n   * The message is the JSON-parsed value of what `send` was given (or the raw string if it isn't\n   * JSON; `undefined` for a bare `typebulb send <file>`). A non-`undefined` return value (awaited)\n   * becomes the reply `send --wait` prints on stdout \u2014 JSON-serializable, at most one handler\n   * replying \u2014 the structured read-back for self-tests. Returns an unsubscribe function. Inert in\n   * an embedded bulb (no sender) \u2014 the handler is registered but never fires.\n   *\n   * @param handler - Called with each pushed message; may return a JSON-serializable reply.\n   * @returns An unsubscribe function.\n   */\n  onMessage(handler: (message: any) => unknown): () => void;\n  /**\n   * General-purpose AI call. `tb.ai(opts)` resolves with the full text; `tb.ai.stream(opts)`\n   * returns an async iterable of {@link AiChunk} deltas you consume with `for await`.\n   *\n   * @returns Promise resolving to { text: string }\n   * @throws On rate limit, network error, or provider error\n   */\n  ai: {\n    (options: {\n    messages: Array<{ role: \"user\" | \"assistant\"; content: string }>;\n    system?: string;\n    /** Reasoning effort hint: 0=minimal, 1=low, 2=med, 3=high. Mapped to each provider's native mechanism (OpenAI/OpenRouter reasoning effort, Gemini thinking budget, Anthropic adaptive thinking). 0 minimizes reasoning \u2014 a floor, not a guaranteed \"off\": some models still think a little at 0, and adaptive models already self-skip at 1 (low). Level 1 (low) is the sensible default for most work; reach for 0 only when you truly want minimal deliberation. Omit for the model's own default. */\n    effort?: 0 | 1 | 2 | 3;\n    provider?: string;\n    model?: string;\n    /** Enable/disable web search. Default: on for BYOK, always off for free model. */\n    webSearch?: boolean;\n    /** Abort the request. On abort the promise rejects / the stream ends. */\n    signal?: AbortSignal;\n  }): Promise<{ text: string }>;\n    /**\n     * Streaming counterpart of `tb.ai()`. Yields `{ kind: \"text\" | \"reasoning\", text }` deltas\n     * as they arrive; break the loop (or abort `signal`) to cancel and stop the upstream.\n     *\n     * `kind: \"reasoning\"` deltas only arrive when you pass `effort: 1-3` AND use a\n     * thinking-capable model; otherwise the stream is `text`-only.\n     *\n     * @example\n     * let answer = \"\";\n     * for await (const c of tb.ai.stream({ messages })) {\n     *   if (c.kind === \"text\") answer += c.text;\n     * }\n     */\n    stream(options: {\n    messages: Array<{ role: \"user\" | \"assistant\"; content: string }>;\n    system?: string;\n    /** Reasoning effort hint: 0=minimal, 1=low, 2=med, 3=high. Mapped to each provider's native mechanism (OpenAI/OpenRouter reasoning effort, Gemini thinking budget, Anthropic adaptive thinking). 0 minimizes reasoning \u2014 a floor, not a guaranteed \"off\": some models still think a little at 0, and adaptive models already self-skip at 1 (low). Level 1 (low) is the sensible default for most work; reach for 0 only when you truly want minimal deliberation. Omit for the model's own default. */\n    effort?: 0 | 1 | 2 | 3;\n    provider?: string;\n    model?: string;\n    /** Enable/disable web search. Default: on for BYOK, always off for free model. */\n    webSearch?: boolean;\n    /** Abort the request. On abort the promise rejects / the stream ends. */\n    signal?: AbortSignal;\n  }): AsyncIterable<AiChunk>;\n  };\n  /**\n   * Local filesystem access (CLI only).\n   *\n   * Relative paths resolve against the bulb's folder (`tb.dir` \u2014\n   * `<bulb-dir>/<filename-stem>/`, created on demand), so\n   * `tb.fs.write('results.json')` lands beside the bulb. `../` reaches sibling\n   * bulbs' folders; everything stays confined to the project (the launch cwd).\n   * Throws in editor/published mode.\n   */\n  fs: {\n    /** Read a file as UTF-8 text. Throws if the file is not valid UTF-8 \u2014 use readBytes for binary. */\n    read(path: string): Promise<string>;\n    /** Read a file as raw bytes. */\n    readBytes(path: string): Promise<Uint8Array>;\n    /** Write text or raw bytes to a file. Creates parent directories if needed. */\n    write(path: string, content: string | Uint8Array): Promise<boolean>;\n  };\n  /**\n   * The bulb's folder \u2014 absolute path to `<bulb-dir>/<filename-stem>/`\n   * (or its `batches/<name>/` folder when the run is scoped with `--batch`).\n   *\n   * For interop only (handing a path to `server.ts` or a spawned tool):\n   * `tb.fs` already resolves relative paths against it, so bulb code writing\n   * its own files never needs it. CLI only \u2014 throws in editor/published/embedded mode.\n   */\n  readonly dir: string;\n  /**\n   * Returns AI models available to the current user.\n   * Models are filtered by the user's configured API keys.\n   * If no keys are configured, returns only the courtesy model.\n   */\n  models(): Promise<Array<{\n    /** Provider protocol: \"anthropic\", \"openai\", \"gemini\", \"openrouter\" */\n    provider: string;\n    /** Model identifier, e.g. \"claude-sonnet-4-6\" */\n    name: string;\n    /** Human-readable display name, e.g. \"Sonnet 4.6\" */\n    friendlyName: string;\n    /** Provider display name, e.g. \"Anthropic\" */\n    providerName: string;\n    /** True on the .env-configured default model (TB_AI_PROVIDER + TB_AI_MODEL); absent otherwise */\n    default?: boolean;\n  }>>;\n  /**\n   * What backs `tb.ai` right now:\n   *\n   * - `'own'` \u2014 the user's own API keys (or their own local model server)\n   * - `'courtesy'` \u2014 the quota-limited courtesy model, fine for a call or two\n   * - `'none'` \u2014 no AI at all (the CLI with no keys, an embedded bulb)\n   *\n   * A bulb making many AI calls should show a \"use your own keys\" notice\n   * instead of running unless this is `'own'`. Never derive it from\n   * `tb.mode` or the length of `tb.models()` \u2014 which hosts offer a courtesy\n   * model is the host's business and changes without your bulb changing.\n   */\n  aiAccess(): Promise<AiAccess>;\n  /**\n   * The bulb's theme override (`<html data-theme>`).\n   *\n   * - Get: the current override \u2014 `'dark'` | `'light'`, or `undefined` when\n   *   following the OS preference.\n   * - Set `'dark'`/`'light'` to force and persist it (per-bulb); set\n   *   `undefined` to clear the override and follow the OS again.\n   *\n   * Drives `<html data-theme>`, so render off `html[data-theme=\"\u2026\"]` selectors\n   * (or observe the attribute) rather than reading `tb.theme`.\n   */\n  theme: 'light' | 'dark' | undefined;\n  /**\n   * The mode this bulb is running in.\n   *\n   * - `'local'` \u2014 Running via the typebulb CLI\n   * - `'editor'` \u2014 Running in the typebulb.com editor\n   * - `'published'` \u2014 Running as a published/standalone bulb on typebulb.com\n   * - `'embedded'` \u2014 Running as a bulb embedded inside another bulb (sandboxed,\n   *   client-only: AI, filesystem, and server RPC are unavailable)\n   */\n  mode: 'local' | 'editor' | 'published' | 'embedded';\n};\n";
 /** Typebulb globals available in Node-side code (server.ts).
  *  Only what carries a bulb-specific rule Node can't know — tb.ai, tb.fs, tb.dir (TB-FS.md);
  *  plus the tb.log uniformity exception (serverTb.ts). The browser-only helpers are intentionally
  *  absent. Must match serverTb.ts's runtime surface. */
-export declare const serverTbTypings = "\n/** A single streamed delta from `tb.ai.stream()`. Discriminated by `kind`. */\ntype AiChunk =\n  | { kind: \"text\"; text: string }\n  | { kind: \"reasoning\"; text: string };\n\n/**\n * Typebulb utilities namespace (server-side).\n * Type `tb.` to discover available helpers.\n */\ndeclare const tb: {\n  /**\n   * Print to the CLI's stdout \u2014 the same channel as `console.log` here (the server's console IS\n   * the bulb's log). One log verb across blocks: page-side `tb.log` reaches this same stdout.\n   */\n  log(...args: any[]): void;\n  /**\n   * General-purpose AI call. `tb.ai(opts)` resolves with the full text; `tb.ai.stream(opts)`\n   * returns an async iterable of {@link AiChunk} deltas you consume with `for await`.\n   *\n   * @returns Promise resolving to { text: string }\n   * @throws On rate limit, network error, or provider error\n   */\n  ai: {\n    (options: {\n    messages: Array<{ role: \"user\" | \"assistant\"; content: string }>;\n    system?: string;\n    /** Reasoning effort hint: 0=minimal, 1=low, 2=med, 3=high. Mapped to each provider's native mechanism (OpenAI/OpenRouter reasoning effort, Gemini thinking budget, Anthropic adaptive thinking). 0 minimizes reasoning \u2014 a floor, not a guaranteed \"off\": some models still think a little at 0, and adaptive models already self-skip at 1 (low). Level 1 (low) is the sensible default for most work; reach for 0 only when you truly want minimal deliberation. Omit for the model's own default. */\n    effort?: 0 | 1 | 2 | 3;\n    provider?: string;\n    model?: string;\n    /** Enable/disable web search. Default: on for BYOK, always off for free model. */\n    webSearch?: boolean;\n    /** Abort the request. On abort the promise rejects / the stream ends. */\n    signal?: AbortSignal;\n  }): Promise<{ text: string }>;\n    /**\n     * Streaming counterpart of `tb.ai()`. Yields `{ kind: \"text\" | \"reasoning\", text }` deltas\n     * as they arrive; break the loop (or abort `signal`) to cancel and stop the upstream.\n     *\n     * `kind: \"reasoning\"` deltas only arrive when you pass `effort: 1-3` AND use a\n     * thinking-capable model; otherwise the stream is `text`-only.\n     *\n     * @example\n     * let answer = \"\";\n     * for await (const c of tb.ai.stream({ messages })) {\n     *   if (c.kind === \"text\") answer += c.text;\n     * }\n     */\n    stream(options: {\n    messages: Array<{ role: \"user\" | \"assistant\"; content: string }>;\n    system?: string;\n    /** Reasoning effort hint: 0=minimal, 1=low, 2=med, 3=high. Mapped to each provider's native mechanism (OpenAI/OpenRouter reasoning effort, Gemini thinking budget, Anthropic adaptive thinking). 0 minimizes reasoning \u2014 a floor, not a guaranteed \"off\": some models still think a little at 0, and adaptive models already self-skip at 1 (low). Level 1 (low) is the sensible default for most work; reach for 0 only when you truly want minimal deliberation. Omit for the model's own default. */\n    effort?: 0 | 1 | 2 | 3;\n    provider?: string;\n    model?: string;\n    /** Enable/disable web search. Default: on for BYOK, always off for free model. */\n    webSearch?: boolean;\n    /** Abort the request. On abort the promise rejects / the stream ends. */\n    signal?: AbortSignal;\n  }): AsyncIterable<AiChunk>;\n  };\n  /**\n   * Local filesystem access (CLI only).\n   *\n   * Relative paths resolve against the bulb's folder (`tb.dir` \u2014\n   * `<bulb-dir>/<filename-stem>/`, created on demand), so\n   * `tb.fs.write('results.json')` lands beside the bulb. `../` reaches sibling\n   * bulbs' folders; everything stays confined to the project (the launch cwd).\n   * Throws in editor/published mode.\n   */\n  fs: {\n    /** Read a file as UTF-8 text. Throws if the file is not valid UTF-8 \u2014 use readBytes for binary. */\n    read(path: string): Promise<string>;\n    /** Read a file as raw bytes. */\n    readBytes(path: string): Promise<Uint8Array>;\n    /** Write text or raw bytes to a file. Creates parent directories if needed. */\n    write(path: string, content: string | Uint8Array): Promise<boolean>;\n  };\n  /**\n   * The bulb's folder \u2014 absolute path to `<bulb-dir>/<filename-stem>/`\n   * (or its `batches/<name>/` folder when the run is scoped with `--batch`).\n   *\n   * For interop only (handing a path to `server.ts` or a spawned tool):\n   * `tb.fs` already resolves relative paths against it, so bulb code writing\n   * its own files never needs it. CLI only \u2014 throws in editor/published/embedded mode.\n   */\n  readonly dir: string;\n  /**\n   * Returns AI models available to the current user.\n   * Models are filtered by the user's configured API keys.\n   * If no keys are configured, returns only the courtesy model.\n   */\n  models(): Promise<Array<{\n    /** Provider protocol: \"anthropic\", \"openai\", \"gemini\", \"openrouter\" */\n    provider: string;\n    /** Model identifier, e.g. \"claude-sonnet-4-6\" */\n    name: string;\n    /** Human-readable display name, e.g. \"Sonnet 4.6\" */\n    friendlyName: string;\n    /** Provider display name, e.g. \"Anthropic\" */\n    providerName: string;\n    /** True on the .env-configured default model (TB_AI_PROVIDER + TB_AI_MODEL); absent otherwise */\n    default?: boolean;\n  }>>;\n  /**\n   * Whether the user's own AI keys back `tb.ai`. False means only the\n   * quota-limited courtesy model is available (or no AI at all) \u2014 a bulb\n   * making many AI calls should check this and show a \"use your own keys\"\n   * notice instead of running.\n   */\n  hasOwnKeys(): Promise<boolean>;\n  /**\n   * The mode this bulb is running in.\n   *\n   * - `'local'` \u2014 Running via the typebulb CLI\n   * - `'editor'` \u2014 Running in the typebulb.com editor\n   * - `'published'` \u2014 Running as a published/standalone bulb on typebulb.com\n   * - `'embedded'` \u2014 Running as a bulb embedded inside another bulb (sandboxed,\n   *   client-only: AI, filesystem, and server RPC are unavailable)\n   */\n  mode: 'local' | 'editor' | 'published' | 'embedded';\n};\n";
+export declare const serverTbTypings = "\n/** A single streamed delta from `tb.ai.stream()`. Discriminated by `kind`. */\ntype AiChunk =\n  | { kind: \"text\"; text: string }\n  | { kind: \"reasoning\"; text: string };\n\n/** What backs `tb.ai`: the user's own keys, the quota-limited courtesy model, or nothing. */\ntype AiAccess = \"own\" | \"courtesy\" | \"none\";\n\n/**\n * Typebulb utilities namespace (server-side).\n * Type `tb.` to discover available helpers.\n */\ndeclare const tb: {\n  /**\n   * Print to the CLI's stdout \u2014 the same channel as `console.log` here (the server's console IS\n   * the bulb's log). One log verb across blocks: page-side `tb.log` reaches this same stdout.\n   */\n  log(...args: any[]): void;\n  /**\n   * General-purpose AI call. `tb.ai(opts)` resolves with the full text; `tb.ai.stream(opts)`\n   * returns an async iterable of {@link AiChunk} deltas you consume with `for await`.\n   *\n   * @returns Promise resolving to { text: string }\n   * @throws On rate limit, network error, or provider error\n   */\n  ai: {\n    (options: {\n    messages: Array<{ role: \"user\" | \"assistant\"; content: string }>;\n    system?: string;\n    /** Reasoning effort hint: 0=minimal, 1=low, 2=med, 3=high. Mapped to each provider's native mechanism (OpenAI/OpenRouter reasoning effort, Gemini thinking budget, Anthropic adaptive thinking). 0 minimizes reasoning \u2014 a floor, not a guaranteed \"off\": some models still think a little at 0, and adaptive models already self-skip at 1 (low). Level 1 (low) is the sensible default for most work; reach for 0 only when you truly want minimal deliberation. Omit for the model's own default. */\n    effort?: 0 | 1 | 2 | 3;\n    provider?: string;\n    model?: string;\n    /** Enable/disable web search. Default: on for BYOK, always off for free model. */\n    webSearch?: boolean;\n    /** Abort the request. On abort the promise rejects / the stream ends. */\n    signal?: AbortSignal;\n  }): Promise<{ text: string }>;\n    /**\n     * Streaming counterpart of `tb.ai()`. Yields `{ kind: \"text\" | \"reasoning\", text }` deltas\n     * as they arrive; break the loop (or abort `signal`) to cancel and stop the upstream.\n     *\n     * `kind: \"reasoning\"` deltas only arrive when you pass `effort: 1-3` AND use a\n     * thinking-capable model; otherwise the stream is `text`-only.\n     *\n     * @example\n     * let answer = \"\";\n     * for await (const c of tb.ai.stream({ messages })) {\n     *   if (c.kind === \"text\") answer += c.text;\n     * }\n     */\n    stream(options: {\n    messages: Array<{ role: \"user\" | \"assistant\"; content: string }>;\n    system?: string;\n    /** Reasoning effort hint: 0=minimal, 1=low, 2=med, 3=high. Mapped to each provider's native mechanism (OpenAI/OpenRouter reasoning effort, Gemini thinking budget, Anthropic adaptive thinking). 0 minimizes reasoning \u2014 a floor, not a guaranteed \"off\": some models still think a little at 0, and adaptive models already self-skip at 1 (low). Level 1 (low) is the sensible default for most work; reach for 0 only when you truly want minimal deliberation. Omit for the model's own default. */\n    effort?: 0 | 1 | 2 | 3;\n    provider?: string;\n    model?: string;\n    /** Enable/disable web search. Default: on for BYOK, always off for free model. */\n    webSearch?: boolean;\n    /** Abort the request. On abort the promise rejects / the stream ends. */\n    signal?: AbortSignal;\n  }): AsyncIterable<AiChunk>;\n  };\n  /**\n   * Local filesystem access (CLI only).\n   *\n   * Relative paths resolve against the bulb's folder (`tb.dir` \u2014\n   * `<bulb-dir>/<filename-stem>/`, created on demand), so\n   * `tb.fs.write('results.json')` lands beside the bulb. `../` reaches sibling\n   * bulbs' folders; everything stays confined to the project (the launch cwd).\n   * Throws in editor/published mode.\n   */\n  fs: {\n    /** Read a file as UTF-8 text. Throws if the file is not valid UTF-8 \u2014 use readBytes for binary. */\n    read(path: string): Promise<string>;\n    /** Read a file as raw bytes. */\n    readBytes(path: string): Promise<Uint8Array>;\n    /** Write text or raw bytes to a file. Creates parent directories if needed. */\n    write(path: string, content: string | Uint8Array): Promise<boolean>;\n  };\n  /**\n   * The bulb's folder \u2014 absolute path to `<bulb-dir>/<filename-stem>/`\n   * (or its `batches/<name>/` folder when the run is scoped with `--batch`).\n   *\n   * For interop only (handing a path to `server.ts` or a spawned tool):\n   * `tb.fs` already resolves relative paths against it, so bulb code writing\n   * its own files never needs it. CLI only \u2014 throws in editor/published/embedded mode.\n   */\n  readonly dir: string;\n  /**\n   * Returns AI models available to the current user.\n   * Models are filtered by the user's configured API keys.\n   * If no keys are configured, returns only the courtesy model.\n   */\n  models(): Promise<Array<{\n    /** Provider protocol: \"anthropic\", \"openai\", \"gemini\", \"openrouter\" */\n    provider: string;\n    /** Model identifier, e.g. \"claude-sonnet-4-6\" */\n    name: string;\n    /** Human-readable display name, e.g. \"Sonnet 4.6\" */\n    friendlyName: string;\n    /** Provider display name, e.g. \"Anthropic\" */\n    providerName: string;\n    /** True on the .env-configured default model (TB_AI_PROVIDER + TB_AI_MODEL); absent otherwise */\n    default?: boolean;\n  }>>;\n  /**\n   * What backs `tb.ai` right now:\n   *\n   * - `'own'` \u2014 the user's own API keys (or their own local model server)\n   * - `'courtesy'` \u2014 the quota-limited courtesy model, fine for a call or two\n   * - `'none'` \u2014 no AI at all (the CLI with no keys, an embedded bulb)\n   *\n   * A bulb making many AI calls should show a \"use your own keys\" notice\n   * instead of running unless this is `'own'`. Never derive it from\n   * `tb.mode` or the length of `tb.models()` \u2014 which hosts offer a courtesy\n   * model is the host's business and changes without your bulb changing.\n   */\n  aiAccess(): Promise<AiAccess>;\n  /**\n   * The mode this bulb is running in.\n   *\n   * - `'local'` \u2014 Running via the typebulb CLI\n   * - `'editor'` \u2014 Running in the typebulb.com editor\n   * - `'published'` \u2014 Running as a published/standalone bulb on typebulb.com\n   * - `'embedded'` \u2014 Running as a bulb embedded inside another bulb (sandboxed,\n   *   client-only: AI, filesystem, and server RPC are unavailable)\n   */\n  mode: 'local' | 'editor' | 'published' | 'embedded';\n};\n";
 //# sourceMappingURL=tbTypings.d.ts.map

package/dist/dts/tbTypings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tbTypings.d.ts","sourceRoot":"","sources":["../../dts/src/tbTypings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA2QH,kEAAkE;AAClE,eAAO,MAAM,eAAe,0tXAO3B,CAAA;AASD;;;wDAGwD;AACxD,eAAO,MAAM,eAAe,s8LAO3B,CAAA"}
+{"version":3,"file":"tbTypings.d.ts","sourceRoot":"","sources":["../../dts/src/tbTypings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAuRH,kEAAkE;AAClE,eAAO,MAAM,eAAe,4rYAO3B,CAAA;AASD;;;wDAGwD;AACxD,eAAO,MAAM,eAAe,w6MAO3B,CAAA"}

package/dist/dts/tbTypings.js

@@ -50,6 +50,11 @@ type AiChunk =
   | { kind: "text"; text: string }
   | { kind: "reasoning"; text: string };
 `;
+/** What \`tb.aiAccess()\` answers. Named so bulbs can hold it in state without respelling the union. */
+const aiAccessType = `
+/** What backs \`tb.ai\`: the user's own keys, the quota-limited courtesy model, or nothing. */
+type AiAccess = "own" | "courtesy" | "none";
+`;
 const ai = `
   /**
    * General-purpose AI call. \`tb.ai(opts)\` resolves with the full text; \`tb.ai.stream(opts)\`
@@ -94,12 +99,18 @@ const models = `
     default?: boolean;
   }>>;
   /**
-   * Whether the user's own AI keys back \`tb.ai\`. False means only the
-   * quota-limited courtesy model is available (or no AI at all) — a bulb
-   * making many AI calls should check this and show a "use your own keys"
-   * notice instead of running.
+   * What backs \`tb.ai\` right now:
+   *
+   * - \`'own'\` — the user's own API keys (or their own local model server)
+   * - \`'courtesy'\` — the quota-limited courtesy model, fine for a call or two
+   * - \`'none'\` — no AI at all (the CLI with no keys, an embedded bulb)
+   *
+   * A bulb making many AI calls should show a "use your own keys" notice
+   * instead of running unless this is \`'own'\`. Never derive it from
+   * \`tb.mode\` or the length of \`tb.models()\` — which hosts offer a courtesy
+   * model is the host's business and changes without your bulb changing.
    */
-  hasOwnKeys(): Promise<boolean>;`;
+  aiAccess(): Promise<AiAccess>;`;
 const theme = `
   /**
    * The bulb's theme override (\`<html data-theme>\`).
@@ -260,7 +271,7 @@ const clientServerProxy = `
    */
   server: Record<string, (...args: any[]) => Promise<any> & AsyncIterable<any>>;`;
 /** Typebulb globals available in browser-side code (code.tsx). */
-export const clientTbTypings = `${aiChunkType}
+export const clientTbTypings = `${aiChunkType}${aiAccessType}
 /**
  * Typebulb utilities namespace.
  * Type \`tb.\` to discover available helpers.
@@ -278,7 +289,7 @@ const serverLog = `
  *  Only what carries a bulb-specific rule Node can't know — tb.ai, tb.fs, tb.dir (TB-FS.md);
  *  plus the tb.log uniformity exception (serverTb.ts). The browser-only helpers are intentionally
  *  absent. Must match serverTb.ts's runtime surface. */
-export const serverTbTypings = `${aiChunkType}
+export const serverTbTypings = `${aiChunkType}${aiAccessType}
 /**
  * Typebulb utilities namespace (server-side).
  * Type \`tb.\` to discover available helpers.

package/dist/dts/tbTypings.js.map

@@ -1 +1 @@
-{"version":3,"file":"tbTypings.js","sourceRoot":"","sources":["../../dts/src/tbTypings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,GAAG;;;;;;;;;;;uCAWmB,CAAA;AAEvC,MAAM,OAAO,GAAG;;;;;;;;;yCASyB,CAAA;AAEzC,2DAA2D;AAC3D,MAAM,SAAS,GAAG;;;;;;;;;;;IAWd,CAAA;AAEJ,oGAAoG;AACpG,MAAM,WAAW,GAAG;;;;;CAKnB,CAAA;AAED,MAAM,EAAE,GAAG;;;;;;;;;OASJ,SAAS;;;;;;;;;;;;;;aAcH,SAAS;KACjB,CAAA;AAEL,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;kCAwBmB,CAAA;AAElC,MAAM,KAAK,GAAG;;;;;;;;;;;;uCAYyB,CAAA;AAEvC,MAAM,IAAI,GAAG;;;;;;;;;;uDAU0C,CAAA;AAEvD,MAAM,EAAE,GAAG;;;;;;;;;;;;;;;;;KAiBN,CAAA;AAEL,MAAM,GAAG,GAAG;;;;;;;;;wBASY,CAAA;AAExB,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0BAmEA,CAAA;AAE1B,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;6DAiB2C,CAAA;AAE7D,MAAM,GAAG,GAAG;;;;;;;;;6BASiB,CAAA;AAE7B,MAAM,iBAAiB,GAAG;;;;;;;;;;iFAUuD,CAAA;AAEjF,kEAAkE;AAClE,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,WAAW;;;;;qBAKxB,WAAW,GAAG,iBAAiB,GAAG,OAAO,GAAG,GAAG,GAAG,iBAAiB,GAAG,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,MAAM,GAAG,KAAK,GAAG,IAAI;;CAE3I,CAAA;AAED,MAAM,SAAS,GAAG;;;;;6BAKW,CAAA;AAE7B;;;wDAGwD;AACxD,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,WAAW;;;;;qBAKxB,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI;;CAE7D,CAAA"}
+{"version":3,"file":"tbTypings.js","sourceRoot":"","sources":["../../dts/src/tbTypings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,GAAG;;;;;;;;;;;uCAWmB,CAAA;AAEvC,MAAM,OAAO,GAAG;;;;;;;;;yCASyB,CAAA;AAEzC,2DAA2D;AAC3D,MAAM,SAAS,GAAG;;;;;;;;;;;IAWd,CAAA;AAEJ,oGAAoG;AACpG,MAAM,WAAW,GAAG;;;;;CAKnB,CAAA;AAED,wGAAwG;AACxG,MAAM,YAAY,GAAG;;;CAGpB,CAAA;AAED,MAAM,EAAE,GAAG;;;;;;;;;OASJ,SAAS;;;;;;;;;;;;;;aAcH,SAAS;KACjB,CAAA;AAEL,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCA8BkB,CAAA;AAEjC,MAAM,KAAK,GAAG;;;;;;;;;;;;uCAYyB,CAAA;AAEvC,MAAM,IAAI,GAAG;;;;;;;;;;uDAU0C,CAAA;AAEvD,MAAM,EAAE,GAAG;;;;;;;;;;;;;;;;;KAiBN,CAAA;AAEL,MAAM,GAAG,GAAG;;;;;;;;;wBASY,CAAA;AAExB,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0BAmEA,CAAA;AAE1B,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;6DAiB2C,CAAA;AAE7D,MAAM,GAAG,GAAG;;;;;;;;;6BASiB,CAAA;AAE7B,MAAM,iBAAiB,GAAG;;;;;;;;;;iFAUuD,CAAA;AAEjF,kEAAkE;AAClE,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,WAAW,GAAG,YAAY;;;;;qBAKvC,WAAW,GAAG,iBAAiB,GAAG,OAAO,GAAG,GAAG,GAAG,iBAAiB,GAAG,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,MAAM,GAAG,KAAK,GAAG,IAAI;;CAE3I,CAAA;AAED,MAAM,SAAS,GAAG;;;;;6BAKW,CAAA;AAE7B;;;wDAGwD;AACxD,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,WAAW,GAAG,YAAY;;;;;qBAKvC,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI;;CAE7D,CAAA"}