deepspace 0.19.5 → 0.20.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # deepspace
 
+## 0.20.0
+
+### Minor Changes
+
+- Harden and simplify app-file storage with race-safe quota summaries, fixed-layout recoverable multipart reservations, strict public/private scope isolation, bounded request bodies, and safe downloadable HTML/SVG/JavaScript attachments. Quota-enabled custom handlers must now provide a coordination key.
+
 ## 0.19.5
 
 ### Patch Changes

package/dist/cli.js

@@ -3799,13 +3799,13 @@ var MAX_UPLOAD_REQUEST_BYTES = 25 * 1024 * 1024;
 var UPLOAD_PART_BYTES = 20 * 1024 * 1024;
 var MAX_UPLOAD_PARTS = Math.ceil(MAX_APP_FILE_BYTES / UPLOAD_PART_BYTES);
 var MAX_BASE64_UPLOAD_BYTES = Math.floor(MAX_UPLOAD_REQUEST_BYTES * 3 / 4);
-function planUploadParts(totalBytes, partSize) {
+function planUploadParts(totalBytes) {
   const parts = [];
-  for (let start = 0; start < totalBytes; start += partSize) {
+  for (let start = 0; start < totalBytes; start += UPLOAD_PART_BYTES) {
     parts.push({
       partNumber: parts.length + 1,
       start,
-      end: Math.min(start + partSize, totalBytes)
+      end: Math.min(start + UPLOAD_PART_BYTES, totalBytes)
     });
   }
   return parts;
@@ -3820,20 +3820,6 @@ var ACCOUNT_STORAGE_LIMIT_BYTES = {
 };
 var REPO_STORE_LIMIT_BYTES = 256 * 1024 * 1024;
 var MAX_DEPLOY_ASSET_FILE_BYTES = 25 * 1024 * 1024;
-var DANGEROUS_MIME_TYPES = /* @__PURE__ */ new Set([
-  "text/html",
-  "application/xhtml+xml",
-  "image/svg+xml",
-  "application/xml",
-  "text/xml",
-  "application/javascript",
-  "text/javascript",
-  "application/ecmascript",
-  "text/ecmascript"
-]);
-function activeContentMessage(mimeType) {
-  return `${mimeType} is not accepted: the files API serves your app's own origin, so stored HTML/SVG/JavaScript would execute there with your users' sessions. Ship it as a build asset under \`public/\` instead, where it is served as part of your app rather than as user-uploaded content.`;
-}
 function formatBytes(bytes) {
   if (bytes >= 1024 * 1024 * 1024) return `${(bytes / (1024 * 1024 * 1024)).toFixed(1)} GiB`;
   if (bytes >= 1024 * 1024) return `${(bytes / (1024 * 1024)).toFixed(1)} MiB`;
@@ -8491,9 +8477,6 @@ async function uploadAppFile(baseUrl, token, appId, localPath, key, onProgress)
     throw new ApiError(oversizeMessage(size), 0, "too_large", path);
   }
   const declaredType = contentTypeFor(localPath);
-  if (DANGEROUS_MIME_TYPES.has(declaredType)) {
-    throw new ApiError(activeContentMessage(declaredType), 0, "active_content", path);
-  }
   if (size > UPLOAD_PART_BYTES) {
     return uploadInParts(baseUrl, token, appId, localPath, key, size, onProgress);
   }
@@ -8514,24 +8497,35 @@ function isRetryable(err) {
 async function uploadInParts(baseUrl, token, appId, localPath, key, size, onProgress) {
   const contentType = contentTypeFor(localPath);
   const initPath = filesPath(appId, `/multipart?key=${encodeKeyPath(key)}`);
-  const session = await readJson(
-    await request(baseUrl, token, initPath, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ name: basename3(localPath), mimeType: contentType, size })
-    }),
-    initPath
-  );
-  const query = `uploadKey=${encodeKeyPath(session.uploadKey)}&uploadId=${encodeURIComponent(session.uploadId)}`;
-  if (!Number.isSafeInteger(session.partSize) || session.partSize < 1) {
+  const requestId = randomUUID2();
+  const initBody = JSON.stringify({
+    requestId,
+    name: basename3(localPath),
+    mimeType: contentType,
+    size
+  });
+  const sendInit = () => request(baseUrl, token, initPath, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: initBody
+  }).then((response) => readJson(response, initPath));
+  let session;
+  try {
+    session = await sendInit();
+  } catch (error) {
+    if (!isRetryable(error)) throw error;
+    session = await sendInit();
+  }
+  const query = `uploadKey=${encodeKeyPath(session.uploadKey)}&uploadId=${encodeURIComponent(session.uploadId)}&reservationId=${encodeURIComponent(session.reservationId)}`;
+  if (!session.uploadId || !session.uploadKey || !session.reservationId || session.partSize !== UPLOAD_PART_BYTES) {
     throw new ApiError(
-      `The platform advertised an unusable part size (${session.partSize}).`,
+      `The platform returned an unusable part size or multipart session (${session.partSize}).`,
       0,
       "invalid_response",
       initPath
     );
   }
-  const plan = planUploadParts(size, session.partSize);
+  const plan = planUploadParts(size);
   const file = await openAsBlob(localPath, { type: contentType });
   const uploaded = [];
   try {
@@ -13628,7 +13622,7 @@ import { join as join23, resolve as resolve20 } from "path";
 // package.json
 var package_default = {
   name: "deepspace",
-  version: "0.19.5",
+  version: "0.20.0",
   engines: {
     node: ">=22.15.0 <23 || >=24 <25 || >=26 <27"
   },