deepspace 0.23.1 → 0.24.0

package/dist/server.d.ts

@@ -464,7 +464,8 @@ interface CollectionSchema {
     /**
      * `users` collection only: what the `user.list` roster shows a non-admin
      * whose `read` policy is row-scoped (`'own'`, `'team'`, …). Default
-     * `'public-identity'`: every registered user's id/name/imageUrl/role — the
+     * `'public-identity'`: every registered user's id/name/imageUrl/role/lastSeenAt
+     * (`lastSeenAt` is what `usePresence` reads) — the
      * row policy keeps guarding full-row reads on the records/query path.
      * `'read-policy'`: the roster contains only the rows the caller's read
      * policy grants (still projected to public identity) — for apps that scope
@@ -667,6 +668,20 @@ interface ActionTools {
     create<T extends Record<string, unknown> = Record<string, unknown>>(collection: string, data: T, recordId?: string): Promise<ActionResult<MutateActionData>>;
     update<T extends Record<string, unknown> = Record<string, unknown>>(collection: string, recordId: string, data: Partial<T>): Promise<ActionResult<MutateActionData>>;
     remove(collection: string, recordId: string): Promise<ActionResult<MutateActionData>>;
+    /**
+     * Delete every record matching `where`, in one bounded batch — the cascade
+     * primitive, so draining a set costs one subrequest per page instead of one
+     * per row. Deletes at most `limit` (default 100, max 500) and returns
+     * `{ deleted }`; repeat the same call until `deleted` is below the limit to
+     * drain a larger set.
+     *
+     * `where` must be non-empty and every key must name a real field
+     * (`recordId`, `createdBy`, or a schema column) — an unknown key is refused,
+     * not ignored, so this can never truncate a whole collection.
+     */
+    deleteWhere(collection: string, where: Record<string, unknown>, limit?: number): Promise<ActionResult<{
+        deleted: number;
+    }>>;
     get<T extends Record<string, unknown> = Record<string, unknown>>(collection: string, recordId: string): Promise<ActionResult<GetActionData<T>>>;
     query<T extends Record<string, unknown> = Record<string, unknown>>(collection: string, options?: {
         where?: Record<string, unknown>;
@@ -1468,6 +1483,13 @@ declare const COST_RATES: {
         /** USD per stored dimension per month. */
         readonly storedPerDimPerMonth: number;
     };
+    readonly aiSearch: {
+        readonly ingestPerToken: number;
+        readonly ingestImagePerToken: number;
+        readonly storagePerByteMonth: number;
+        readonly hybridOrSemanticPerQuery: number;
+        readonly fulltextPerQuery: number;
+    };
 };
 /**
  * Price a single rolled-up `deepspace_binding_usage` row. Lives next to
@@ -1484,6 +1506,108 @@ declare const COST_RATES: {
  */
 declare function priceBindingUsageEvent(kind: string, op: string, units: number): number;
 
+/**
+ * App-identity headers for platform calls (api-worker, platform-worker).
+ *
+ * The pair is `x-app-identity-token` (HMAC(PLATFORM_IDENTITY_SECRET, appId),
+ * minted at deploy time and injected as a binding) + `x-app-id`. Pre-first-
+ * deploy the token binding is ABSENT — `deepspace dev start` can only fetch it once
+ * the app is in the deploy registry. Attaching headers built from an undefined
+ * binding sends the literal string "undefined", which upstream identity
+ * verification rejects as a *tampered* token (401 invalid) instead of the
+ * truthful "missing app identity" — so this helper fails closed by attaching
+ * nothing when the token is unset. The starter's worker.ts proxies follow the
+ * same policy (see reassertAppIdentity there).
+ */
+interface AppIdentityEnv {
+    /** The app's immutable id (wrangler.toml [vars] DEEPSPACE_APP_ID). */
+    DEEPSPACE_APP_ID: string;
+    /** Absent until the app's first deploy injects it. */
+    APP_IDENTITY_TOKEN?: string;
+}
+
+interface KnowledgeEnv extends ApiWorkerEnv, AppIdentityEnv {
+}
+type KnowledgeStatus = 'queued' | 'running' | 'completed' | 'error' | 'skipped' | 'outdated';
+interface KnowledgeItem {
+    id: string;
+    key: string;
+    status: KnowledgeStatus;
+    fileSize?: number;
+    chunksCount?: number;
+    createdAt?: string;
+    updatedAt?: string;
+    error?: string;
+}
+interface KnowledgeAddOptions {
+    folder?: string;
+}
+interface KnowledgeListOptions {
+    folder?: string;
+    page?: number;
+    perPage?: number;
+    status?: KnowledgeStatus;
+    search?: string;
+}
+interface KnowledgeSearchOptions {
+    folder?: string;
+    mode?: 'hybrid' | 'semantic' | 'fulltext';
+    limit?: number;
+    matchThreshold?: number;
+    queryRewrite?: boolean;
+}
+interface KnowledgeAddResult {
+    items: KnowledgeItem[];
+}
+interface KnowledgeListResult {
+    items: KnowledgeItem[];
+    page: number;
+    perPage: number;
+    total?: number;
+    totalPages?: number;
+}
+interface KnowledgeSearchChunk {
+    id: string;
+    score: number;
+    text: string;
+    key?: string;
+    filename?: string;
+    folder?: string;
+    timestamp?: string;
+}
+interface KnowledgeSearchResult {
+    chunks: KnowledgeSearchChunk[];
+    queryKind?: string;
+}
+interface ScopedKnowledgeClient {
+    add(file: File): Promise<KnowledgeAddResult>;
+    list(options?: Omit<KnowledgeListOptions, 'folder'>): Promise<KnowledgeListResult>;
+    search(query: string, options?: Omit<KnowledgeSearchOptions, 'folder'>): Promise<KnowledgeSearchResult>;
+}
+interface KnowledgeClient extends ScopedKnowledgeClient {
+    add(file: File, options?: KnowledgeAddOptions): Promise<KnowledgeAddResult>;
+    list(options?: KnowledgeListOptions): Promise<KnowledgeListResult>;
+    remove(itemId: string): Promise<void>;
+    search(query: string, options?: KnowledgeSearchOptions): Promise<KnowledgeSearchResult>;
+    scoped(scope: {
+        folder: string;
+    }): ScopedKnowledgeClient;
+}
+declare class KnowledgeError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly uploadedItems?: KnowledgeItem[] | undefined;
+    constructor(status: number, code: string, message: string, uploadedItems?: KnowledgeItem[] | undefined);
+}
+declare function normalizeKnowledgeFolder(folder: string): string;
+declare function folderFilter(folder: string): {
+    folder: {
+        $gte: string;
+        $lt: string;
+    };
+};
+declare function knowledge(env: KnowledgeEnv): KnowledgeClient;
+
 /**
  * Lightweight D1 schema bootstrapping for apps that use auto-provisioned
  * `[[d1_databases]]` bindings.
@@ -1997,6 +2121,8 @@ declare function resolveColumn(col: ColumnDefinition): ResolvedColumn;
 declare function rowToData(row: Record<string, unknown>, columns: ResolvedColumn[]): Record<string, unknown>;
 declare function dataToColumnValues(data: Record<string, unknown>, columns: ResolvedColumn[]): Record<string, unknown>;
 declare function coerceValue(value: unknown, storage: 'number' | 'text', interpretation: ColumnInterpretation): unknown;
+/** Canonical numeric representation for date/datetime storage and triggers. */
+declare function epochSeconds(date?: Date): number;
 declare function buildTableSelect(collectionName: string, columns: ResolvedColumn[]): string;
 interface User {
     id: string;
@@ -2419,6 +2545,7 @@ declare abstract class CronRoom<E = Record<string, unknown>> extends BaseRoom<E>
     constructor(state: DurableObjectState, env: unknown, config: CronRoomConfig);
     private ensureInitialized;
     fetch(request: Request): Promise<Response>;
+    protected handleInternalRequest(request: Request, url: URL): Promise<Response | null>;
     protected onConnect(ws: WebSocket, user: UserAttachment): CronAttachment;
     protected onMessage(ws: WebSocket, user: UserAttachment, message: {
         type: string;
@@ -2446,6 +2573,20 @@ declare abstract class CronRoom<E = Record<string, unknown>> extends BaseRoom<E>
      */
     protected abstract onTask(taskName: string): void | Promise<void>;
 }
+/**
+ * Wake the app's CronRoom so its alarm is armed.
+ *
+ * A Durable Object does not exist until something fetches it, and CronRoom
+ * arms its alarm inside that first fetch — so a deployed schedule that no
+ * client has opened yet runs nothing, and nothing reports it. The app worker
+ * calls this from its request path (once per isolate is enough); the first
+ * request the worker handles after a deploy then arms the schedule. A no-op
+ * when the app declares no tasks. The wake runs under `ctx.waitUntil`, so it
+ * never delays the response.
+ */
+declare function armCronRoom(ctx: {
+    waitUntil(promise: Promise<unknown>): void;
+}, namespace: DurableObjectNamespace, roomId: string, tasks: readonly CronTask[]): void;
 
 /**
  * JobRoom — Per-app durable background-job execution Durable Object.
@@ -2695,6 +2836,12 @@ declare function validateDoManifest(manifest: unknown): {
  * ignored by WfP.
  */
 type CustomBinding = {
+    /** Managed by DeepSpace; never forwarded into the customer Worker env. */
+    type: 'ai_search';
+    name: string;
+    /** Only the untrusted `auto` sentinel is accepted from wrangler.toml. */
+    instance_name: string;
+} | {
     type: 'vectorize';
     name: string;
     /** Either a pre-existing index name or the literal `"auto"`. */
@@ -2991,50 +3138,6 @@ declare const VOTING_SCHEMAS: CollectionSchema[];
 /** All directory schemas for the `dir:{appName}` global DO type. */
 declare const DIRECTORY_SCHEMAS: CollectionSchema[];
 
-/**
- * Workspace DO Schemas
- *
- * All collections for the workspace:default Durable Object.
- * This DO consolidates shared, cross-app business data:
- *
- * - teams / team_members — workspace-wide team management (replaces built-in teams)
- * - tasks / projects / tags — team-scoped task management
- * - people — shared contacts directory
- * - transactions / accounts — shared financial ledger
- *
- * Team-scoped collections use teamField RBAC: members see only
- * their team's records; admins see everything.
- */
-
-declare const workspaceTeamsSchema: CollectionSchema;
-declare const workspaceTeamMembersSchema: CollectionSchema;
-declare const workspaceTasksSchema: CollectionSchema;
-declare const workspaceProjectsSchema: CollectionSchema;
-declare const workspaceTagsSchema: CollectionSchema;
-declare const workspacePeopleSchema: CollectionSchema;
-declare const workspaceTransactionsSchema: CollectionSchema;
-declare const workspaceAccountsSchema: CollectionSchema;
-/**
- * Universal sharing index. Any app can create share records for any content type.
- *
- * ContentType: 'document' | 'slide' | 'spreadsheet' | ... (extensible)
- * ShareType:   'channel' | 'team' | 'direct' | 'link' | 'org' (extensible)
- * ShareTarget: the ID of the target (channelId, teamId, userId, linkId, orgId)
- * Permission:  'view' | 'edit' — what the share grants
- *
- * Content itself lives in the owner's app DO.
- * This table is the discovery layer: "what has been shared, with whom, and how".
- */
-declare const workspaceContentSharesSchema: CollectionSchema;
-declare const workspaceFormResponsesSchema: CollectionSchema;
-/**
- * Maps DeepSpace users to their claimed @app.space email handles.
- * Shared across all apps so any app can look up a user's email address.
- * All handles are under the @app.space domain.
- */
-declare const workspaceEmailHandlesSchema: CollectionSchema;
-declare const WORKSPACE_SCHEMAS: CollectionSchema[];
-
 /**
  * Shared Durable Object Schemas
  *
@@ -3045,8 +3148,10 @@ declare const WORKSPACE_SCHEMAS: CollectionSchema[];
  * Scope tiers:
  * - App DO (app:{appHandle}) — private to each app, app defines tables
  * - Dir DO (dir:{appHandle}) — cross-app directory (conversations, communities, posts)
- * - Workspace DO (workspace:default) — shared business data (teams, tasks, people, ledger)
  * - Conv DO (conv:{id}) — single conversation (messages, reactions, members)
+ *
+ * There is no platform-wide singleton scope: every global room is keyed by
+ * a conversation or an app, so no one DO holds data shared by all apps.
  */
 
 interface SharedConnection {
@@ -3080,7 +3185,7 @@ interface SubscriptionContext {
     state: DurableObjectState;
     /**
      * The scope this room was addressed by — `app:{appId}`, `chat:{channelId}`,
-     * `conv:{convId}`, `workspace:default`, … Records are sharded across rooms
+     * `conv:{convId}`, `dir:{appId}`, … Records are sharded across rooms
      * by scope, so the scope is what names the room in an unknown-collection
      * failure. Undefined only for rooms addressed by a unique id rather than a
      * name (`idFromName` populates `DurableObjectId.name`).
@@ -4702,4 +4807,4 @@ declare class RefundError extends Error {
     constructor(message: string, status: number);
 }
 
-export { ACCOUNT_STORAGE_LIMIT_BYTES, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_ID_RE, APP_NAME_RULES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, BaseRoom, CHANNELS_SCHEMA, CHANNEL_INVITATIONS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, CONVERSATION_SCHEMAS, COST_RATES, CancelSubscriptionError, type CancelSubscriptionOpts, type CancelSubscriptionResult, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type CollectionPermissionSummary, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConvMemberData, type ConvMessageData, type ConvReactionData, type ConvReadCursorData, type ConvVoteData, type ConversationStateData, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, DIRECTORY_SCHEMAS, type DOBindings, type DOManifest, type DOManifestEntry, type DebugApiContext, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, DeepSpaceAgentProfileError, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DirectoryCommunityData, type DirectoryConversationData, type DirectoryMembershipData, type DirectoryPostData, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, GLOBAL_DO_TYPES, GLOBAL_DO_TYPE_NAMES, type GetActionData, type GlobalDOType, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, MAX_APP_FILE_BYTES, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, type MutateActionData, type PermissionAnalysis, type PermissionContext, type PermissionLevel, type PermissionSource, type PlanInfo, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, REGISTRY_INSTANCE, RESERVED_BINDING_NAMES, RESERVED_COLLECTION_NAMES, RESOURCE_ID_RE, type RecordContext, RecordRoom, type RecordRoomConfig, RefundError, type RefundOpts, type RefundResult, RegistryClientError, type ResolvedColumn, type ResolvedPermission, type RolePermissions, type RunMigrationsResult, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTION_SCHEMAS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type SharedConnection, type StorageAdmission, type StoredRecord, SubscriptionAuthError, type SubscriptionContext, type SubscriptionRead, SubscriptionRequiredError, type SubscriptionStatus, type Summarizer, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, type ToolsApiContext, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserContext, VOTING_SCHEMAS, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKSPACE_SCHEMAS, type YjsContext, YjsRoom, analyzePermissions, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, authWorkerFetch, bindingManifestFromOutputConfig, broadcastChange, broadcastUserList, broadcastYjsUpdate, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, cancelSubscription, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDeepSpaceAI, createDeepSpaceAuth, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, deleteRecord, enqueueJob, executeQuery, formatBytes, getAllUsers, getChat, getGlobalDOSchemas, getGlobalDOType, getOrCreateYjsDoc, getRecord, getRolePermissions, getSubscription, getUser, getYjsDocKey, handleApiRequest, handleDelete, handlePut, handleSetRole, handleSubscribe, handleToolsRequest, handleUnsubscribe, handleUserList, handleUserUpdate, handleYjsBinaryMessage, handleYjsJoin, handleYjsLeave, isAutoProvision, isFilesVerbPath, isOwner, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, lintSchema, lintSchemaSet, lintSchemas, loadMessages, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, noopPermissionContext, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, putRecord, readRecord, recordMatchesSubscription, refundInvoice, registerUser, registryErrorJson, registryStub, requireSubscription, resolveAppName, resolveAppRole, resolveColumn, rowToData, runMigrations, saveYjsDoc, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyJwt, workspaceAccountsSchema, workspaceContentSharesSchema, workspaceEmailHandlesSchema, workspaceFormResponsesSchema, workspacePeopleSchema, workspaceProjectsSchema, workspaceTagsSchema, workspaceTasksSchema, workspaceTeamMembersSchema, workspaceTeamsSchema, workspaceTransactionsSchema };
+export { ACCOUNT_STORAGE_LIMIT_BYTES, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_ID_RE, APP_NAME_RULES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, BaseRoom, CHANNELS_SCHEMA, CHANNEL_INVITATIONS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, CONVERSATION_SCHEMAS, COST_RATES, CancelSubscriptionError, type CancelSubscriptionOpts, type CancelSubscriptionResult, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type CollectionPermissionSummary, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConvMemberData, type ConvMessageData, type ConvReactionData, type ConvReadCursorData, type ConvVoteData, type ConversationStateData, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, DIRECTORY_SCHEMAS, type DOBindings, type DOManifest, type DOManifestEntry, type DebugApiContext, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, DeepSpaceAgentProfileError, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DirectoryCommunityData, type DirectoryConversationData, type DirectoryMembershipData, type DirectoryPostData, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, GLOBAL_DO_TYPES, GLOBAL_DO_TYPE_NAMES, type GetActionData, type GlobalDOType, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, type KnowledgeAddOptions, type KnowledgeAddResult, type KnowledgeClient, type KnowledgeEnv, KnowledgeError, type KnowledgeItem, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeSearchChunk, type KnowledgeSearchOptions, type KnowledgeSearchResult, type KnowledgeStatus, MAX_APP_FILE_BYTES, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, type MutateActionData, type PermissionAnalysis, type PermissionContext, type PermissionLevel, type PermissionSource, type PlanInfo, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, REGISTRY_INSTANCE, RESERVED_BINDING_NAMES, RESERVED_COLLECTION_NAMES, RESOURCE_ID_RE, type RecordContext, RecordRoom, type RecordRoomConfig, RefundError, type RefundOpts, type RefundResult, RegistryClientError, type ResolvedColumn, type ResolvedPermission, type RolePermissions, type RunMigrationsResult, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTION_SCHEMAS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedKnowledgeClient, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type SharedConnection, type StorageAdmission, type StoredRecord, SubscriptionAuthError, type SubscriptionContext, type SubscriptionRead, SubscriptionRequiredError, type SubscriptionStatus, type Summarizer, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, type ToolsApiContext, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserContext, VOTING_SCHEMAS, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, type YjsContext, YjsRoom, analyzePermissions, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, armCronRoom, authWorkerFetch, bindingManifestFromOutputConfig, broadcastChange, broadcastUserList, broadcastYjsUpdate, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, cancelSubscription, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDeepSpaceAI, createDeepSpaceAuth, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, deleteRecord, enqueueJob, epochSeconds, executeQuery, folderFilter, formatBytes, getAllUsers, getChat, getGlobalDOSchemas, getGlobalDOType, getOrCreateYjsDoc, getRecord, getRolePermissions, getSubscription, getUser, getYjsDocKey, handleApiRequest, handleDelete, handlePut, handleSetRole, handleSubscribe, handleToolsRequest, handleUnsubscribe, handleUserList, handleUserUpdate, handleYjsBinaryMessage, handleYjsJoin, handleYjsLeave, isAutoProvision, isFilesVerbPath, isOwner, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, knowledge, lintSchema, lintSchemaSet, lintSchemas, loadMessages, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, noopPermissionContext, normalizeKnowledgeFolder, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, putRecord, readRecord, recordMatchesSubscription, refundInvoice, registerUser, registryErrorJson, registryStub, requireSubscription, resolveAppName, resolveAppRole, resolveColumn, rowToData, runMigrations, saveYjsDoc, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyJwt };