deepspace 0.23.1 → 0.24.0

package/dist/worker.d.ts

@@ -1078,7 +1078,8 @@ interface CollectionSchema {
     /**
      * `users` collection only: what the `user.list` roster shows a non-admin
      * whose `read` policy is row-scoped (`'own'`, `'team'`, …). Default
-     * `'public-identity'`: every registered user's id/name/imageUrl/role — the
+     * `'public-identity'`: every registered user's id/name/imageUrl/role/lastSeenAt
+     * (`lastSeenAt` is what `usePresence` reads) — the
      * row policy keeps guarding full-row reads on the records/query path.
      * `'read-policy'`: the roster contains only the rows the caller's read
      * policy grants (still projected to public identity) — for apps that scope
@@ -1256,6 +1257,8 @@ declare function resolveColumn(col: ColumnDefinition): ResolvedColumn;
 declare function rowToData(row: Record<string, unknown>, columns: ResolvedColumn[]): Record<string, unknown>;
 declare function dataToColumnValues(data: Record<string, unknown>, columns: ResolvedColumn[]): Record<string, unknown>;
 declare function coerceValue(value: unknown, storage: 'number' | 'text', interpretation: ColumnInterpretation): unknown;
+/** Canonical numeric representation for date/datetime storage and triggers. */
+declare function epochSeconds(date?: Date): number;
 declare function buildTableSelect(collectionName: string, columns: ResolvedColumn[]): string;
 interface User {
     id: string;
@@ -1678,6 +1681,7 @@ declare abstract class CronRoom<E = Record<string, unknown>> extends BaseRoom<E>
     constructor(state: DurableObjectState, env: unknown, config: CronRoomConfig);
     private ensureInitialized;
     fetch(request: Request): Promise<Response>;
+    protected handleInternalRequest(request: Request, url: URL): Promise<Response | null>;
     protected onConnect(ws: WebSocket, user: UserAttachment): CronAttachment;
     protected onMessage(ws: WebSocket, user: UserAttachment, message: {
         type: string;
@@ -1705,6 +1709,20 @@ declare abstract class CronRoom<E = Record<string, unknown>> extends BaseRoom<E>
      */
     protected abstract onTask(taskName: string): void | Promise<void>;
 }
+/**
+ * Wake the app's CronRoom so its alarm is armed.
+ *
+ * A Durable Object does not exist until something fetches it, and CronRoom
+ * arms its alarm inside that first fetch — so a deployed schedule that no
+ * client has opened yet runs nothing, and nothing reports it. The app worker
+ * calls this from its request path (once per isolate is enough); the first
+ * request the worker handles after a deploy then arms the schedule. A no-op
+ * when the app declares no tasks. The wake runs under `ctx.waitUntil`, so it
+ * never delays the response.
+ */
+declare function armCronRoom(ctx: {
+    waitUntil(promise: Promise<unknown>): void;
+}, namespace: DurableObjectNamespace, roomId: string, tasks: readonly CronTask[]): void;
 
 /**
  * JobRoom — Per-app durable background-job execution Durable Object.
@@ -1954,6 +1972,12 @@ declare function validateDoManifest(manifest: unknown): {
  * ignored by WfP.
  */
 type CustomBinding = {
+    /** Managed by DeepSpace; never forwarded into the customer Worker env. */
+    type: 'ai_search';
+    name: string;
+    /** Only the untrusted `auto` sentinel is accepted from wrangler.toml. */
+    instance_name: string;
+} | {
     type: 'vectorize';
     name: string;
     /** Either a pre-existing index name or the literal `"auto"`. */
@@ -2250,50 +2274,6 @@ declare const VOTING_SCHEMAS: CollectionSchema[];
 /** All directory schemas for the `dir:{appName}` global DO type. */
 declare const DIRECTORY_SCHEMAS: CollectionSchema[];
 
-/**
- * Workspace DO Schemas
- *
- * All collections for the workspace:default Durable Object.
- * This DO consolidates shared, cross-app business data:
- *
- * - teams / team_members — workspace-wide team management (replaces built-in teams)
- * - tasks / projects / tags — team-scoped task management
- * - people — shared contacts directory
- * - transactions / accounts — shared financial ledger
- *
- * Team-scoped collections use teamField RBAC: members see only
- * their team's records; admins see everything.
- */
-
-declare const workspaceTeamsSchema: CollectionSchema;
-declare const workspaceTeamMembersSchema: CollectionSchema;
-declare const workspaceTasksSchema: CollectionSchema;
-declare const workspaceProjectsSchema: CollectionSchema;
-declare const workspaceTagsSchema: CollectionSchema;
-declare const workspacePeopleSchema: CollectionSchema;
-declare const workspaceTransactionsSchema: CollectionSchema;
-declare const workspaceAccountsSchema: CollectionSchema;
-/**
- * Universal sharing index. Any app can create share records for any content type.
- *
- * ContentType: 'document' | 'slide' | 'spreadsheet' | ... (extensible)
- * ShareType:   'channel' | 'team' | 'direct' | 'link' | 'org' (extensible)
- * ShareTarget: the ID of the target (channelId, teamId, userId, linkId, orgId)
- * Permission:  'view' | 'edit' — what the share grants
- *
- * Content itself lives in the owner's app DO.
- * This table is the discovery layer: "what has been shared, with whom, and how".
- */
-declare const workspaceContentSharesSchema: CollectionSchema;
-declare const workspaceFormResponsesSchema: CollectionSchema;
-/**
- * Maps DeepSpace users to their claimed @app.space email handles.
- * Shared across all apps so any app can look up a user's email address.
- * All handles are under the @app.space domain.
- */
-declare const workspaceEmailHandlesSchema: CollectionSchema;
-declare const WORKSPACE_SCHEMAS: CollectionSchema[];
-
 /**
  * Shared Durable Object Schemas
  *
@@ -2304,8 +2284,10 @@ declare const WORKSPACE_SCHEMAS: CollectionSchema[];
  * Scope tiers:
  * - App DO (app:{appHandle}) — private to each app, app defines tables
  * - Dir DO (dir:{appHandle}) — cross-app directory (conversations, communities, posts)
- * - Workspace DO (workspace:default) — shared business data (teams, tasks, people, ledger)
  * - Conv DO (conv:{id}) — single conversation (messages, reactions, members)
+ *
+ * There is no platform-wide singleton scope: every global room is keyed by
+ * a conversation or an app, so no one DO holds data shared by all apps.
  */
 
 interface SharedConnection {
@@ -2466,6 +2448,16 @@ declare function getMessageType(data: Uint8Array): number;
 declare const WORKER_OWNED_NOT_FOUND_MIGRATION_ID = "2026-08-worker-owned-not-found";
 /** Room identity moved to internal headers and privileged room routes gained app-role checks. */
 declare const SECURE_ROOM_BOUNDARIES_MIGRATION_ID = "2026-08-secure-room-boundaries";
+/** `ActionTools` gained `deleteWhere`, so the app's own tools factory — which
+ *  declares that interface as its return type — has to supply it. */
+declare const ACTION_TOOLS_DELETE_WHERE_MIGRATION_ID = "2026-08-action-tools-delete-where";
+/** The browser's app id moved off a scaffold-time literal onto a build-time
+ *  define that `deepspace/build` reads from the wrangler config being built. */
+declare const BUILD_INJECTED_APP_ID_MIGRATION_ID = "2026-08-build-injected-app-id";
+/** The action route refuses a call without a bearer token as 401 (a cookie
+ *  session has none) instead of crashing on a non-null assertion, and the
+ *  file states the trust model actions run under. */
+declare const ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID = "2026-08-action-routes-bearer-guard";
 type AppMigrationIdsValidation = {
     valid: true;
     ids: string[];
@@ -3181,6 +3173,20 @@ interface ActionTools {
     create<T extends Record<string, unknown> = Record<string, unknown>>(collection: string, data: T, recordId?: string): Promise<ActionResult<MutateActionData>>;
     update<T extends Record<string, unknown> = Record<string, unknown>>(collection: string, recordId: string, data: Partial<T>): Promise<ActionResult<MutateActionData>>;
     remove(collection: string, recordId: string): Promise<ActionResult<MutateActionData>>;
+    /**
+     * Delete every record matching `where`, in one bounded batch — the cascade
+     * primitive, so draining a set costs one subrequest per page instead of one
+     * per row. Deletes at most `limit` (default 100, max 500) and returns
+     * `{ deleted }`; repeat the same call until `deleted` is below the limit to
+     * drain a larger set.
+     *
+     * `where` must be non-empty and every key must name a real field
+     * (`recordId`, `createdBy`, or a schema column) — an unknown key is refused,
+     * not ignored, so this can never truncate a whole collection.
+     */
+    deleteWhere(collection: string, where: Record<string, unknown>, limit?: number): Promise<ActionResult<{
+        deleted: number;
+    }>>;
     get<T extends Record<string, unknown> = Record<string, unknown>>(collection: string, recordId: string): Promise<ActionResult<GetActionData<T>>>;
     query<T extends Record<string, unknown> = Record<string, unknown>>(collection: string, options?: {
         where?: Record<string, unknown>;
@@ -3942,6 +3948,13 @@ declare const COST_RATES: {
         /** USD per stored dimension per month. */
         readonly storedPerDimPerMonth: number;
     };
+    readonly aiSearch: {
+        readonly ingestPerToken: number;
+        readonly ingestImagePerToken: number;
+        readonly storagePerByteMonth: number;
+        readonly hybridOrSemanticPerQuery: number;
+        readonly fulltextPerQuery: number;
+    };
 };
 /**
  * Price a single rolled-up `deepspace_binding_usage` row. Lives next to
@@ -3958,6 +3971,108 @@ declare const COST_RATES: {
  */
 declare function priceBindingUsageEvent(kind: string, op: string, units: number): number;
 
+/**
+ * App-identity headers for platform calls (api-worker, platform-worker).
+ *
+ * The pair is `x-app-identity-token` (HMAC(PLATFORM_IDENTITY_SECRET, appId),
+ * minted at deploy time and injected as a binding) + `x-app-id`. Pre-first-
+ * deploy the token binding is ABSENT — `deepspace dev start` can only fetch it once
+ * the app is in the deploy registry. Attaching headers built from an undefined
+ * binding sends the literal string "undefined", which upstream identity
+ * verification rejects as a *tampered* token (401 invalid) instead of the
+ * truthful "missing app identity" — so this helper fails closed by attaching
+ * nothing when the token is unset. The starter's worker.ts proxies follow the
+ * same policy (see reassertAppIdentity there).
+ */
+interface AppIdentityEnv {
+    /** The app's immutable id (wrangler.toml [vars] DEEPSPACE_APP_ID). */
+    DEEPSPACE_APP_ID: string;
+    /** Absent until the app's first deploy injects it. */
+    APP_IDENTITY_TOKEN?: string;
+}
+
+interface KnowledgeEnv extends ApiWorkerEnv, AppIdentityEnv {
+}
+type KnowledgeStatus = 'queued' | 'running' | 'completed' | 'error' | 'skipped' | 'outdated';
+interface KnowledgeItem {
+    id: string;
+    key: string;
+    status: KnowledgeStatus;
+    fileSize?: number;
+    chunksCount?: number;
+    createdAt?: string;
+    updatedAt?: string;
+    error?: string;
+}
+interface KnowledgeAddOptions {
+    folder?: string;
+}
+interface KnowledgeListOptions {
+    folder?: string;
+    page?: number;
+    perPage?: number;
+    status?: KnowledgeStatus;
+    search?: string;
+}
+interface KnowledgeSearchOptions {
+    folder?: string;
+    mode?: 'hybrid' | 'semantic' | 'fulltext';
+    limit?: number;
+    matchThreshold?: number;
+    queryRewrite?: boolean;
+}
+interface KnowledgeAddResult {
+    items: KnowledgeItem[];
+}
+interface KnowledgeListResult {
+    items: KnowledgeItem[];
+    page: number;
+    perPage: number;
+    total?: number;
+    totalPages?: number;
+}
+interface KnowledgeSearchChunk {
+    id: string;
+    score: number;
+    text: string;
+    key?: string;
+    filename?: string;
+    folder?: string;
+    timestamp?: string;
+}
+interface KnowledgeSearchResult {
+    chunks: KnowledgeSearchChunk[];
+    queryKind?: string;
+}
+interface ScopedKnowledgeClient {
+    add(file: File): Promise<KnowledgeAddResult>;
+    list(options?: Omit<KnowledgeListOptions, 'folder'>): Promise<KnowledgeListResult>;
+    search(query: string, options?: Omit<KnowledgeSearchOptions, 'folder'>): Promise<KnowledgeSearchResult>;
+}
+interface KnowledgeClient extends ScopedKnowledgeClient {
+    add(file: File, options?: KnowledgeAddOptions): Promise<KnowledgeAddResult>;
+    list(options?: KnowledgeListOptions): Promise<KnowledgeListResult>;
+    remove(itemId: string): Promise<void>;
+    search(query: string, options?: KnowledgeSearchOptions): Promise<KnowledgeSearchResult>;
+    scoped(scope: {
+        folder: string;
+    }): ScopedKnowledgeClient;
+}
+declare class KnowledgeError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly uploadedItems?: KnowledgeItem[] | undefined;
+    constructor(status: number, code: string, message: string, uploadedItems?: KnowledgeItem[] | undefined);
+}
+declare function normalizeKnowledgeFolder(folder: string): string;
+declare function folderFilter(folder: string): {
+    folder: {
+        $gte: string;
+        $lt: string;
+    };
+};
+declare function knowledge(env: KnowledgeEnv): KnowledgeClient;
+
 /**
  * Lightweight D1 schema bootstrapping for apps that use auto-provisioned
  * `[[d1_databases]]` bindings.
@@ -5356,13 +5471,28 @@ interface AppLogEvent {
      * branch on `source === 'client'`, never on a truthy/other check.
      */
     source?: 'client';
-    /** Invocation outcome (`ok`, `exception`, `exceededCpu`, …) when present. */
+    /**
+     * The runtime's verdict on the invocation (`ok`, `exception`, `exceededCpu`,
+     * `canceled`, …) — present on `request` and other invocation-summary events
+     * only, never on a `log` line. It says whether the Worker RETURNED, not
+     * whether the app succeeded: an action that throws inside the app's own
+     * error handling and answers 500 is `ok` here. Triage failures on
+     * `request.status`, `level`, and `eventType === 'exception'` (an exception
+     * that escaped the Worker), not on `outcome !== 'ok'` alone.
+     */
     outcome?: string;
     request?: {
         method: string;
         path: string;
         status?: number;
     };
+    /**
+     * The exception that ESCAPED the Worker (`eventType: 'exception'`), or a
+     * browser-reported one (`source: 'client'`). An error the app catches and
+     * `console.error`s is a plain `log` line — and the Workers runtime renders a
+     * logged Error object as its stack frames without the message, so log the
+     * message text yourself (`console.error(\`… ${err.message}\`, err.stack)`).
+     */
     exception?: {
         name: string;
         message: string;
@@ -5394,4 +5524,4 @@ interface AppLogsResponse {
 declare const APP_LOG_EVENT_KEYS: readonly ["id", "timestamp", "level", "eventType", "message", "source", "outcome", "request", "exception"];
 type AppLogEventKey = (typeof APP_LOG_EVENT_KEYS)[number];
 
-export { ACCOUNT_STORAGE_LIMIT_BYTES, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, ANONYMOUS_USER_ID_PREFIX, APP_ID_RE, APP_LOG_EVENT_KEYS, APP_NAME_RULES, ASSET_NOT_FOUND_HANDLING_VALUES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppLogEvent, type AppLogEventKey, type AppLogsResponse, type AppMigrationIdsValidation, type AppNameResolution, type AppNameValidation, type AssetNotFoundHandling, type AuthWorkerEnv, Awareness, type AwarenessState, type AwarenessStates, BASE_USERS_SCHEMA, BROWSER_PROXY_ROUTES, BUILT_IN_TOOLS, type BaseMessage, BaseRoom, CHANNELS_SCHEMA, CHANNEL_INVITATIONS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, CLIENT_LOG_MARKER, CONVERSATION_SCHEMAS, COST_RATES, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type ClientErrorKind, type ClientErrorReport, type ClientMessage, type CollectionPermissionSummary, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConnectionAttachment, type ConvMemberData, type ConvMessageData, type ConvReactionData, type ConvReadCursorData, type ConvVoteData, type ConversationStateData, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEEPSPACE_AGENT_PROFILES, DEEPSPACE_AI_DEFAULTS, DEEPSPACE_AI_MODELS, DEEPSPACE_MODEL_CATALOG_PROVENANCE, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, DIRECTORY_SCHEMAS, type DOBindings, type DOManifest, type DOManifestEntry, type DeepSpaceAIEnv, type DeepSpaceAIModel, type DeepSpaceAIModelId, type DeepSpaceAIOptions, type DeepSpaceAIProvider, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, type DeepSpaceAgentProfile, DeepSpaceAgentProfileError, type DeepSpaceAgentProfileId, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAgentSupport, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DeepSpaceDocumentationRouteEnv, type DeepSpaceDocumentationRouteOptions, type DirectoryCommunityData, type DirectoryConversationData, type DirectoryMembershipData, type DirectoryPostData, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, GLOBAL_DO_TYPES, GLOBAL_DO_TYPE_NAMES, type GetActionData, type GlobalDOType, type HandlerContext, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, LOG_LEVELS, type LogLevel, MAX_APP_FILE_BYTES, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type MessageHandlers, type MsgType, type MutateActionData, type PermissionAnalysis, type PermissionContext, type PermissionLevel, type PermissionSource, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type ProtocolMessage, type ProxyRoute, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RECORD_NOT_FOUND, REGISTRY_INSTANCE, RELEASE_STAMP_PATH, REPO_STORE_LIMIT_BYTES, REQUIRED_COMPATIBILITY_FLAGS, RESERVED_BINDING_NAMES, RESERVED_COLLECTION_NAMES, RESERVED_RUN_WORKER_FIRST, RESOURCE_ID_RE, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_DEFAULT, RecordRoom, type RecordRoomConfig, RegistryClientError, type ResolvedColumn, type ResolvedDeepSpaceAgentModel, type ResolvedPermission, type RolePermissions, type RunMigrationsResult, SDK_RUN_WORKER_FIRST, SECURE_ROOM_BOUNDARIES_MIGRATION_ID, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTIONS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type ServerMessage, type SharedConnection, type StorageAdmission, type StoredRecord, type Summarizer, type SyncResult, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, UNDECLARED_ASSET_NOT_FOUND_HANDLING, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, VOTING_SCHEMAS, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKER_OWNED_NOT_FOUND_MIGRATION_ID, WORKSPACE_SCHEMAS, YjsRoom, analyzePermissions, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, authWorkerFetch, authenticatedRoomRequest, bindingManifestFromOutputConfig, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, clientBuild, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDecoder, createDeepSpaceAI, createDeepSpaceAuth, createEncoder, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, enqueueJob, formatBytes, getChat, getDeepSpaceAIModel, getGlobalDOSchemas, getGlobalDOType, getMessageType, getRolePermissions, handleAwarenessMessage, handleClientErrorReport, handleSyncMessage, hasContent, isAnonymousUserId, isAssetNotFoundHandling, isAutoProvision, isFilesVerbPath, isOwner, isPlatformReservedPath, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, lintSchema, lintSchemaSet, lintSchemas, listDeepSpaceAgentModels, loadMessages, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, noopPermissionContext, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, readVarUint, readVarUint8Array, registerClientErrorRoute, registerDeepSpaceDocumentation, registryErrorJson, registryStub, resolveAppName, resolveAppRole, resolveColumn, resolveCompatibilityFlags, resolveDeepSpaceAgentModel, rowToData, runMigrations, serverBuild, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, toUint8Array, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppMigrationIds, validateAppName, validateBindingManifest, validateDoManifest, verifyJwt, workspaceAccountsSchema, workspaceContentSharesSchema, workspaceEmailHandlesSchema, workspaceFormResponsesSchema, workspacePeopleSchema, workspaceProjectsSchema, workspaceTagsSchema, workspaceTasksSchema, workspaceTeamMembersSchema, workspaceTeamsSchema, workspaceTransactionsSchema, writeVarUint, writeVarUint8Array };
+export { ACCOUNT_STORAGE_LIMIT_BYTES, ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID, ACTION_TOOLS_DELETE_WHERE_MIGRATION_ID, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, ANONYMOUS_USER_ID_PREFIX, APP_ID_RE, APP_LOG_EVENT_KEYS, APP_NAME_RULES, ASSET_NOT_FOUND_HANDLING_VALUES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppLogEvent, type AppLogEventKey, type AppLogsResponse, type AppMigrationIdsValidation, type AppNameResolution, type AppNameValidation, type AssetNotFoundHandling, type AuthWorkerEnv, Awareness, type AwarenessState, type AwarenessStates, BASE_USERS_SCHEMA, BROWSER_PROXY_ROUTES, BUILD_INJECTED_APP_ID_MIGRATION_ID, BUILT_IN_TOOLS, type BaseMessage, BaseRoom, CHANNELS_SCHEMA, CHANNEL_INVITATIONS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, CLIENT_LOG_MARKER, CONVERSATION_SCHEMAS, COST_RATES, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type ClientErrorKind, type ClientErrorReport, type ClientMessage, type CollectionPermissionSummary, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConnectionAttachment, type ConvMemberData, type ConvMessageData, type ConvReactionData, type ConvReadCursorData, type ConvVoteData, type ConversationStateData, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEEPSPACE_AGENT_PROFILES, DEEPSPACE_AI_DEFAULTS, DEEPSPACE_AI_MODELS, DEEPSPACE_MODEL_CATALOG_PROVENANCE, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, DIRECTORY_SCHEMAS, type DOBindings, type DOManifest, type DOManifestEntry, type DeepSpaceAIEnv, type DeepSpaceAIModel, type DeepSpaceAIModelId, type DeepSpaceAIOptions, type DeepSpaceAIProvider, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, type DeepSpaceAgentProfile, DeepSpaceAgentProfileError, type DeepSpaceAgentProfileId, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAgentSupport, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DeepSpaceDocumentationRouteEnv, type DeepSpaceDocumentationRouteOptions, type DirectoryCommunityData, type DirectoryConversationData, type DirectoryMembershipData, type DirectoryPostData, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, GLOBAL_DO_TYPES, GLOBAL_DO_TYPE_NAMES, type GetActionData, type GlobalDOType, type HandlerContext, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, type KnowledgeAddOptions, type KnowledgeAddResult, type KnowledgeClient, type KnowledgeEnv, KnowledgeError, type KnowledgeItem, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeSearchChunk, type KnowledgeSearchOptions, type KnowledgeSearchResult, type KnowledgeStatus, LOG_LEVELS, type LogLevel, MAX_APP_FILE_BYTES, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type MessageHandlers, type MsgType, type MutateActionData, type PermissionAnalysis, type PermissionContext, type PermissionLevel, type PermissionSource, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type ProtocolMessage, type ProxyRoute, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RECORD_NOT_FOUND, REGISTRY_INSTANCE, RELEASE_STAMP_PATH, REPO_STORE_LIMIT_BYTES, REQUIRED_COMPATIBILITY_FLAGS, RESERVED_BINDING_NAMES, RESERVED_COLLECTION_NAMES, RESERVED_RUN_WORKER_FIRST, RESOURCE_ID_RE, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_DEFAULT, RecordRoom, type RecordRoomConfig, RegistryClientError, type ResolvedColumn, type ResolvedDeepSpaceAgentModel, type ResolvedPermission, type RolePermissions, type RunMigrationsResult, SDK_RUN_WORKER_FIRST, SECURE_ROOM_BOUNDARIES_MIGRATION_ID, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTIONS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedKnowledgeClient, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type ServerMessage, type SharedConnection, type StorageAdmission, type StoredRecord, type Summarizer, type SyncResult, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, UNDECLARED_ASSET_NOT_FOUND_HANDLING, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, VOTING_SCHEMAS, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKER_OWNED_NOT_FOUND_MIGRATION_ID, YjsRoom, analyzePermissions, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, armCronRoom, authWorkerFetch, authenticatedRoomRequest, bindingManifestFromOutputConfig, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, clientBuild, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDecoder, createDeepSpaceAI, createDeepSpaceAuth, createEncoder, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, enqueueJob, epochSeconds, folderFilter, formatBytes, getChat, getDeepSpaceAIModel, getGlobalDOSchemas, getGlobalDOType, getMessageType, getRolePermissions, handleAwarenessMessage, handleClientErrorReport, handleSyncMessage, hasContent, isAnonymousUserId, isAssetNotFoundHandling, isAutoProvision, isFilesVerbPath, isOwner, isPlatformReservedPath, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, knowledge, lintSchema, lintSchemaSet, lintSchemas, listDeepSpaceAgentModels, loadMessages, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, noopPermissionContext, normalizeKnowledgeFolder, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, readVarUint, readVarUint8Array, registerClientErrorRoute, registerDeepSpaceDocumentation, registryErrorJson, registryStub, resolveAppName, resolveAppRole, resolveColumn, resolveCompatibilityFlags, resolveDeepSpaceAgentModel, rowToData, runMigrations, serverBuild, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, toUint8Array, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppMigrationIds, validateAppName, validateBindingManifest, validateDoManifest, verifyJwt, writeVarUint, writeVarUint8Array };