deepspace 0.15.0 → 0.17.0

package/dist/server.d.ts

@@ -219,28 +219,24 @@ declare const UPLOAD_PART_BYTES: number;
  */
 declare const MAX_UPLOAD_PARTS: number;
 /**
- * Per-tier storage schedule, in bytes. Product semantics, not a deployment
- * dial — the one table both storage allocations admit against:
+ * The customer-visible storage schedule, in bytes, PER ACCOUNT — the total an
+ * owner's uploaded files may occupy across every app they own, not a budget
+ * each app gets separately. This is the number the billing page advertises.
  *
- *   - the repo store (Git packs + retained bundles + deploy assets), admitted
- *     by the app's Repo DO (`platform/deploy-worker/src/vc/storage-quota.ts`)
- *   - the app-files allocation, admitted by the shared files handler
- *     (`server/utils/scoped-r2-files.ts`)
+ * Admitted by the shared files handler (`server/utils/scoped-r2-files.ts`),
+ * which sums the owner's apps rather than the one being written to.
  *
- * Each allocation gets the full amount independently; they are different
- * buckets with different writers (docs/platform/r2-storage.md). The
- * customer-visible "storage" number is the app-files allocation — the repo
- * store is platform bookkeeping that degrades (drops rollback retention)
- * rather than surfacing here.
+ * It deliberately does NOT govern the repo store — see
+ * `REPO_STORE_LIMIT_BYTES` below, and docs/platform/r2-storage.md.
  */
-declare const APP_STORAGE_LIMIT_BYTES: {
+declare const ACCOUNT_STORAGE_LIMIT_BYTES: {
     readonly test: 0;
     readonly free: number;
     readonly starter: number;
     readonly premium: number;
     readonly admin: number;
 };
-/** The storage limit for a billing tier; unknown or missing tiers get free. */
+/** The account storage limit for a billing tier; unknown or missing tiers get free. */
 declare function storageLimitForTier(tier: string | null | undefined): number;
 /** The one storage-quota refusal sentence. `usedBytes` is net of any object
  *  the upload replaces, so an upsert is charged only for its growth. */
@@ -323,15 +319,26 @@ interface ScopedR2Config {
  * applies.
  */
 interface StorageAdmission {
-    /** The WHOLE allocation the quota governs — the app prefix, not the
-     *  (possibly deeper) scope prefix a request resolved to. */
+    /** This app's own prefix — the one the incoming write lands under. */
     prefix: string;
     /**
      * Resolve the owner's limit in bytes. `null` means the lookup failed;
-     * writes then fail closed (503) rather than admitting unmetered storage,
-     * mirroring the repo store's `StorageBillingUnavailableError`.
+     * writes then fail closed (503) rather than admitting unmetered storage.
      */
     limitBytes: () => Promise<number | null>;
+    /**
+     * The OTHER app prefixes this owner's storage spans, if any.
+     *
+     * The limit is per ACCOUNT, not per app: an owner's allocation is the total
+     * across everything they own, so admission has to see the siblings too. `[]`
+     * for an owner with one app, which is the common case and costs exactly what
+     * it did when this was a per-app limit.
+     *
+     * Returning `null` means the owner's apps could not be enumerated. Like a
+     * failed limit lookup that fails the write closed rather than admitting a
+     * write against an allocation we cannot measure.
+     */
+    siblingPrefixes?: () => Promise<string[] | null>;
 }
 interface ScopedR2Auth {
     userId: string | null;
@@ -1459,14 +1466,12 @@ declare function runMigrations(db: D1Database, migrations: readonly string[]): P
  * Wire protocol constants.
  *
  * The JSON WebSocket protocol uses dotted string identifiers (e.g.
- * `"game.input"`) as the `type` discriminator. All message types are
+ * `"records.query"`) as the `type` discriminator. All message types are
  * grouped under a single `MSG` object so imports stay tidy:
  *
  *     import { MSG, dispatch, clientBuild } from 'deepspace'
  *
  *     dispatch<ServerMessage>(raw, {
- *       [MSG.GAME_STATE]: (p) => { ... },
- *       [MSG.GAME_TICK]:  (p) => { ... },
  *     })
  *
  * Each key's value is the on-wire string — grep-friendly, self-
@@ -1495,14 +1500,6 @@ declare const MSG: {
     readonly ACK: "records.ack";
     readonly LIST_SCHEMAS: "records.list_schemas";
     readonly RESUBSCRIBE: "records.resubscribe";
-    readonly GAME_STATE: "game.state";
-    readonly GAME_INPUT: "game.input";
-    readonly GAME_PLAYER_JOIN: "game.player_join";
-    readonly GAME_PLAYER_LEAVE: "game.player_leave";
-    readonly GAME_PLAYER_READY: "game.player_ready";
-    readonly GAME_START: "game.start";
-    readonly GAME_END: "game.end";
-    readonly GAME_TICK: "game.tick";
     readonly CANVAS_SHAPES: "canvas.shapes";
     readonly CANVAS_ADD: "canvas.add";
     readonly CANVAS_MOVE: "canvas.move";
@@ -1575,7 +1572,7 @@ declare const MSG: {
  * ---------------
  *
  * Some message types carry different payloads depending on who's sending.
- * `MSG.GAME_START`, for example, is `{}` when the client requests a start
+ * `MSG.RECORDS_RESUBSCRIBE`, for example, is `{}` when the client asks to
  * but `{ state, tick }` when the server broadcasts the start event.
  * `MSG.CANVAS_ADD` is a flat shape dict on the way in and a `{ shape }`
  * wrapper on the way out. Modelling these with one union would force
@@ -1653,26 +1650,6 @@ type ServerMessage = BaseMessage<typeof MSG.QUERY_RESULT, {
     recordId: string;
     fieldName: string;
     canWrite: boolean;
-}> | BaseMessage<typeof MSG.GAME_STATE, {
-    state: unknown;
-    tick: number;
-    players: unknown[];
-    running: boolean;
-}> | BaseMessage<typeof MSG.GAME_TICK, {
-    state: unknown;
-    tick: number;
-}> | BaseMessage<typeof MSG.GAME_START, {
-    state: unknown;
-    tick: number;
-}> | BaseMessage<typeof MSG.GAME_END, {
-    state: unknown;
-    tick: number;
-}> | BaseMessage<typeof MSG.GAME_PLAYER_JOIN, {
-    player: unknown;
-}> | BaseMessage<typeof MSG.GAME_PLAYER_LEAVE, {
-    userId: string;
-}> | BaseMessage<typeof MSG.GAME_PLAYER_READY, {
-    userId: string;
 }> | BaseMessage<typeof MSG.CANVAS_SHAPES, {
     shapes: unknown[];
     viewports: unknown[];
@@ -2080,8 +2057,6 @@ declare class RecordRoom<E = Record<string, unknown>> extends BaseRoom<E> {
     private _fetchTiming;
     private ensureInitialized;
     private initializeDatabase;
-    private migrateUsersTableIfExists;
-    private migrateRecordsTable;
     private ensureCollectionTable;
     private ensureAllCollectionTables;
     protected onConnect(ws: WebSocket, user: UserAttachment): Promise<ConnectionAttachment>;
@@ -2149,106 +2124,6 @@ declare class YjsRoom<E = Record<string, unknown>> extends BaseRoom<E> {
     private broadcastRaw;
 }
 
-/**
- * GameRoom — Authoritative game loop Durable Object.
- *
- * Extends BaseRoom with:
- * - Alarm-based tick loop with configurable interval
- * - Player management (join, leave, ready state)
- * - Input collection per tick, authoritative state computation
- * - State broadcast to all connected players
- *
- * Subclasses implement game logic via lifecycle hooks:
- *   onTick, onPlayerJoin, onPlayerLeave, onGameStart, onGameEnd
- *
- * Message types: game.*
- */
-
-interface GameRoomConfig {
-    /** Ticks per second (default: 20) */
-    tickRate?: number;
-    /** Minimum players to start (default: 1) */
-    minPlayers?: number;
-    /** Maximum players (default: unlimited) */
-    maxPlayers?: number;
-}
-interface Player {
-    userId: string;
-    userName: string;
-    ready: boolean;
-    connectedAt: string;
-    data: Record<string, unknown>;
-}
-interface GameInput {
-    userId: string;
-    action: string;
-    data: Record<string, unknown>;
-    tick: number;
-}
-interface GameAttachment extends UserAttachment {
-    joinedAt: string;
-    /** True for member/admin roles; false for viewers, unauthenticated anon, spectators. */
-    canWrite: boolean;
-}
-declare abstract class GameRoom<E = Record<string, unknown>> extends BaseRoom<E> {
-    private config;
-    private players;
-    private inputBuffer;
-    private currentTick;
-    private gameState;
-    private running;
-    private initialized;
-    constructor(state: DurableObjectState, env: unknown, config?: GameRoomConfig);
-    private ensureInitialized;
-    private persistState;
-    protected onConnect(ws: WebSocket, user: UserAttachment): GameAttachment;
-    protected onMessage(ws: WebSocket, user: UserAttachment, message: {
-        type: string;
-        [key: string]: unknown;
-    }): Promise<void>;
-    protected onDisconnect(_ws: WebSocket, user: UserAttachment): void;
-    protected onAlarm(): Promise<void>;
-    private checkAutoStart;
-    private startGame;
-    private stopGame;
-    protected getGameState(): Record<string, unknown>;
-    protected setGameState(state: Record<string, unknown>): void;
-    protected getPlayers(): Player[];
-    protected isRunning(): boolean;
-    protected getCurrentTick(): number;
-    /**
-     * Called each tick with current state and collected inputs.
-     * Return the new game state, or undefined to keep current state.
-     */
-    protected abstract onTick(state: Record<string, unknown>, inputs: GameInput[], tick: number): Record<string, unknown> | undefined | Promise<Record<string, unknown> | undefined>;
-    /** Called when a player connects */
-    protected onPlayerJoin(_player: Player): void;
-    /** Called when a player disconnects */
-    protected onPlayerLeave(_player: Player): void;
-    /** Called when the game starts */
-    protected onGameStart(): void;
-    /** Called when the game ends */
-    protected onGameEnd(_finalState: Record<string, unknown>): void;
-    /**
-     * Called once when the DO first hydrates persisted state from storage.
-     * Receives the parsed state blob as it was written by a previous build.
-     * Return the state object to install as `gameState`.
-     *
-     * Subclasses with evolving schemas should override this hook to:
-     *   - merge new fields onto a default template,
-     *   - upgrade shapes across versioned states,
-     *   - or discard stale blobs entirely by returning a fresh object.
-     *
-     * The default implementation is a pass-through, preserving the legacy
-     * "stored blob is gospel" behavior for subclasses that don't care.
-     *
-     * If JSON parsing of the stored blob fails this hook is NOT called — the
-     * DO starts with an empty state and the subclass's `onGameStart` (or
-     * first `onTick`) is responsible for initializing.
-     */
-    protected onHydrateState(stored: Record<string, unknown>): Record<string, unknown>;
-}
-
 /**
  * CanvasRoom — Spatial canvas Durable Object (tldraw-style).
  *
@@ -2612,11 +2487,10 @@ type DOManifest = DOManifestEntry[];
  * @example
  * const manifest = [
  *   { binding: 'RECORD_ROOMS', className: 'AppRecordRoom', sqlite: true },
- *   { binding: 'GAME_ROOMS', className: 'AppGameRoom', sqlite: true },
  * ] as const satisfies DOManifest
  *
  * type Env = BaseEnv & DOBindings<typeof manifest>
- * // => { RECORD_ROOMS: DurableObjectNamespace; GAME_ROOMS: DurableObjectNamespace }
+ * // => { RECORD_ROOMS: DurableObjectNamespace }
  */
 type DOBindings<T extends readonly DOManifestEntry[]> = {
     [K in T[number]['binding']]: DurableObjectNamespace;
@@ -4659,4 +4533,4 @@ declare class RefundError extends Error {
     constructor(message: string, status: number);
 }
 
-export { AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_ID_RE, APP_NAME_RULES, APP_STORAGE_LIMIT_BYTES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, BaseRoom, CHANNELS_SCHEMA, CHANNEL_INVITATIONS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, CONVERSATION_SCHEMAS, COST_RATES, CancelSubscriptionError, type CancelSubscriptionOpts, type CancelSubscriptionResult, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type CollectionPermissionSummary, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConvMemberData, type ConvMessageData, type ConvReactionData, type ConvReadCursorData, type ConvVoteData, type ConversationStateData, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, DIRECTORY_SCHEMAS, type DOBindings, type DOManifest, type DOManifestEntry, type DebugApiContext, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, DeepSpaceAgentProfileError, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DirectoryCommunityData, type DirectoryConversationData, type DirectoryMembershipData, type DirectoryPostData, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, GLOBAL_DO_TYPES, GLOBAL_DO_TYPE_NAMES, type GameInput, GameRoom, type GameRoomConfig, type GetActionData, type GlobalDOType, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, MAX_APP_FILE_BYTES, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, type MutateActionData, type PermissionAnalysis, type PermissionContext, type PermissionLevel, type PermissionSource, type PlanInfo, type PlatformWorkerEnv, type Player, type PrefixResult, type PresencePeer, PresenceRoom, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, REGISTRY_INSTANCE, RESERVED_BINDING_NAMES, RESERVED_COLLECTION_NAMES, RESOURCE_ID_RE, type RecordContext, RecordRoom, type RecordRoomConfig, RefundError, type RefundOpts, type RefundResult, RegistryClientError, type ResolvedColumn, type ResolvedPermission, type RolePermissions, type RunMigrationsResult, STRICT_APP_ID_RE, SYSTEM_COLLECTION_SCHEMAS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type SharedConnection, type StorageAdmission, type StoredRecord, SubscriptionAuthError, type SubscriptionContext, type SubscriptionRead, SubscriptionRequiredError, type SubscriptionStatus, type Summarizer, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, type ToolsApiContext, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserContext, VOTING_SCHEMAS, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKSPACE_SCHEMAS, type YjsContext, YjsRoom, analyzePermissions, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, authWorkerFetch, bindingManifestFromOutputConfig, broadcastChange, broadcastYjsUpdate, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, cancelSubscription, capToolResultSize, captureScreenshot, checkFieldPermissions, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDeepSpaceAI, createDeepSpaceAuth, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, deleteRecord, enqueueJob, executeQuery, formatBytes, getAllUsers, getChat, getGlobalDOSchemas, getGlobalDOType, getOrCreateYjsDoc, getRecord, getRolePermissions, getSubscription, getUser, getYjsDocKey, handleApiRequest, handleDelete, handlePut, handleSetRole, handleSubscribe, handleToolsRequest, handleUnsubscribe, handleUserList, handleUserUpdate, handleYjsBinaryMessage, handleYjsJoin, handleYjsLeave, isAutoProvision, isFilesVerbPath, isOwner, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, lintSchema, loadMessages, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, noopPermissionContext, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, putRecord, readRecord, recordMatchesSubscription, refundInvoice, registerUser, registryErrorJson, registryStub, requireSubscription, resolveAppName, resolveColumn, rowToData, runMigrations, saveYjsDoc, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyJwt, workspaceAccountsSchema, workspaceContentSharesSchema, workspaceEmailHandlesSchema, workspaceFormResponsesSchema, workspacePeopleSchema, workspaceProjectsSchema, workspaceTagsSchema, workspaceTasksSchema, workspaceTeamMembersSchema, workspaceTeamsSchema, workspaceTransactionsSchema };
+export { ACCOUNT_STORAGE_LIMIT_BYTES, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_ID_RE, APP_NAME_RULES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, BaseRoom, CHANNELS_SCHEMA, CHANNEL_INVITATIONS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, CONVERSATION_SCHEMAS, COST_RATES, CancelSubscriptionError, type CancelSubscriptionOpts, type CancelSubscriptionResult, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type CollectionPermissionSummary, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConvMemberData, type ConvMessageData, type ConvReactionData, type ConvReadCursorData, type ConvVoteData, type ConversationStateData, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, DIRECTORY_SCHEMAS, type DOBindings, type DOManifest, type DOManifestEntry, type DebugApiContext, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, DeepSpaceAgentProfileError, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DirectoryCommunityData, type DirectoryConversationData, type DirectoryMembershipData, type DirectoryPostData, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, GLOBAL_DO_TYPES, GLOBAL_DO_TYPE_NAMES, type GetActionData, type GlobalDOType, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, MAX_APP_FILE_BYTES, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, type MutateActionData, type PermissionAnalysis, type PermissionContext, type PermissionLevel, type PermissionSource, type PlanInfo, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, REGISTRY_INSTANCE, RESERVED_BINDING_NAMES, RESERVED_COLLECTION_NAMES, RESOURCE_ID_RE, type RecordContext, RecordRoom, type RecordRoomConfig, RefundError, type RefundOpts, type RefundResult, RegistryClientError, type ResolvedColumn, type ResolvedPermission, type RolePermissions, type RunMigrationsResult, STRICT_APP_ID_RE, SYSTEM_COLLECTION_SCHEMAS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type SharedConnection, type StorageAdmission, type StoredRecord, SubscriptionAuthError, type SubscriptionContext, type SubscriptionRead, SubscriptionRequiredError, type SubscriptionStatus, type Summarizer, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, type ToolsApiContext, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserContext, VOTING_SCHEMAS, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKSPACE_SCHEMAS, type YjsContext, YjsRoom, analyzePermissions, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, authWorkerFetch, bindingManifestFromOutputConfig, broadcastChange, broadcastYjsUpdate, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, cancelSubscription, capToolResultSize, captureScreenshot, checkFieldPermissions, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDeepSpaceAI, createDeepSpaceAuth, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, deleteRecord, enqueueJob, executeQuery, formatBytes, getAllUsers, getChat, getGlobalDOSchemas, getGlobalDOType, getOrCreateYjsDoc, getRecord, getRolePermissions, getSubscription, getUser, getYjsDocKey, handleApiRequest, handleDelete, handlePut, handleSetRole, handleSubscribe, handleToolsRequest, handleUnsubscribe, handleUserList, handleUserUpdate, handleYjsBinaryMessage, handleYjsJoin, handleYjsLeave, isAutoProvision, isFilesVerbPath, isOwner, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, lintSchema, loadMessages, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, noopPermissionContext, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, putRecord, readRecord, recordMatchesSubscription, refundInvoice, registerUser, registryErrorJson, registryStub, requireSubscription, resolveAppName, resolveColumn, rowToData, runMigrations, saveYjsDoc, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyJwt, workspaceAccountsSchema, workspaceContentSharesSchema, workspaceEmailHandlesSchema, workspaceFormResponsesSchema, workspacePeopleSchema, workspaceProjectsSchema, workspaceTagsSchema, workspaceTasksSchema, workspaceTeamMembersSchema, workspaceTeamsSchema, workspaceTransactionsSchema };