deepspace 0.28.0 → 0.28.1

package/dist/server.d.ts

@@ -828,6 +828,20 @@ interface AppRoleEnv {
     DEEPSPACE_APP_ID: string;
     OWNER_USER_ID: string;
 }
+interface AppMembership {
+    /** True when the caller's row exists in the app's canonical users collection. */
+    member: boolean;
+    role: Role;
+}
+/**
+ * Resolve a user's membership and role from the app's canonical users
+ * collection in one read. This is the single definition of "is this user in
+ * the app" — gate new surfaces with it rather than re-deriving membership
+ * from another tool call. Returns null when the read itself failed (room
+ * unreachable, aborted): callers must treat that as "could not verify", never
+ * as "not a member".
+ */
+declare function resolveAppMembership(env: AppRoleEnv, userId: string, signal?: AbortSignal): Promise<AppMembership | null>;
 /** Resolve a user's current role from the app's canonical users collection. */
 declare function resolveAppRole(env: AppRoleEnv, userId: string): Promise<Role>;
 
@@ -3354,6 +3368,12 @@ interface VerifyOutcome {
  */
 declare function verifyJwt(config: JwtVerifierConfig, token: string | null | undefined): Promise<VerifyOutcome>;
 
+declare const AGENT_TOKEN_SCOPE = "agent";
+/** A separate issuer keeps agent credentials invalid at ordinary platform APIs. */
+declare function agentTokenIssuer(issuer: string): string;
+/** Verify an agent credential for the exact origin currently receiving it. */
+declare function verifyAgentToken(config: Omit<JwtVerifierConfig, 'audience'>, token: string | null | undefined, targetOrigin: string): Promise<VerifyOutcome>;
+
 /**
  * HMAC primitives used by the per-app identity tokens (APP_IDENTITY_TOKEN)
  * minted at deploy time and verified on every /internal/* call into the
@@ -4634,4 +4654,4 @@ declare class RefundError extends Error {
     constructor(message: string, status: number);
 }
 
-export { ACCOUNT_STORAGE_LIMIT_BYTES, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_ID_RE, APP_NAME_RULES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, BaseRoom, type BindingJsonValue, CHANNELS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, COST_RATES, CancelSubscriptionError, type CancelSubscriptionOpts, type CancelSubscriptionResult, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, type DOBindings, type DOManifest, type DOManifestEntry, type DebugApiContext, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, DeepSpaceAgentProfileError, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, type GetActionData, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, type KnowledgeAddOptions, type KnowledgeAddResult, type KnowledgeClient, type KnowledgeEnv, KnowledgeError, type KnowledgeItem, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeSearchChunk, type KnowledgeSearchOptions, type KnowledgeSearchResult, type KnowledgeStatus, MAX_APP_FILE_BYTES, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_ENV_VAR_BYTES, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, type MutateActionData, type PermissionContext, type PermissionLevel, type PlanInfo, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, REGISTRY_INSTANCE, RESERVED_BINDING_NAMES, RESOURCE_ID_RE, type RecordContext, RecordRoom, type RecordRoomConfig, RefundError, type RefundOpts, type RefundResult, RegistryClientError, type ResolvedColumn, type RolePermissions, type RunMigrationsResult, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTION_SCHEMAS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedKnowledgeClient, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type StorageAdmission, type StoredRecord, SubscriptionAuthError, type SubscriptionContext, type SubscriptionRead, SubscriptionRequiredError, type SubscriptionStatus, type Summarizer, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, type ToolsApiContext, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserContext, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, type YjsContext, YjsRoom, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, armCronRoom, authWorkerFetch, bindingManifestFromOutputConfig, broadcastChange, broadcastUserList, broadcastYjsUpdate, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, cancelSubscription, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDeepSpaceAI, createDeepSpaceAuth, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, deleteRecord, enqueueJob, epochSeconds, executeQuery, folderFilter, formatBytes, getAllUsers, getChat, getOrCreateYjsDoc, getRecord, getRolePermissions, getSubscription, getUser, getYjsDocKey, handleApiRequest, handleDelete, handlePut, handleSetRole, handleSubscribe, handleToolsRequest, handleUnsubscribe, handleUserList, handleUserUpdate, handleYjsBinaryMessage, handleYjsJoin, handleYjsLeave, isAutoProvision, isFilesVerbPath, isOwner, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, knowledge, lintSchema, lintSchemaSet, lintSchemas, loadMessages, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, noopPermissionContext, normalizeKnowledgeFolder, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, putRecord, readRecord, recordMatchesSubscription, refundInvoice, registerUser, registryErrorJson, registryStub, requireSubscription, resolveAppName, resolveAppRole, resolveColumn, rowToData, runMigrations, saveYjsDoc, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyJwt };
+export { ACCOUNT_STORAGE_LIMIT_BYTES, AGENT_TOKEN_SCOPE, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_ID_RE, APP_NAME_RULES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppMembership, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, BaseRoom, type BindingJsonValue, CHANNELS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, COST_RATES, CancelSubscriptionError, type CancelSubscriptionOpts, type CancelSubscriptionResult, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, type DOBindings, type DOManifest, type DOManifestEntry, type DebugApiContext, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, DeepSpaceAgentProfileError, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, type GetActionData, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, type KnowledgeAddOptions, type KnowledgeAddResult, type KnowledgeClient, type KnowledgeEnv, KnowledgeError, type KnowledgeItem, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeSearchChunk, type KnowledgeSearchOptions, type KnowledgeSearchResult, type KnowledgeStatus, MAX_APP_FILE_BYTES, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_ENV_VAR_BYTES, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, type MutateActionData, type PermissionContext, type PermissionLevel, type PlanInfo, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, REGISTRY_INSTANCE, RESERVED_BINDING_NAMES, RESOURCE_ID_RE, type RecordContext, RecordRoom, type RecordRoomConfig, RefundError, type RefundOpts, type RefundResult, RegistryClientError, type ResolvedColumn, type RolePermissions, type RunMigrationsResult, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTION_SCHEMAS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedKnowledgeClient, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type StorageAdmission, type StoredRecord, SubscriptionAuthError, type SubscriptionContext, type SubscriptionRead, SubscriptionRequiredError, type SubscriptionStatus, type Summarizer, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, type ToolsApiContext, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserContext, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, type YjsContext, YjsRoom, agentTokenIssuer, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, armCronRoom, authWorkerFetch, bindingManifestFromOutputConfig, broadcastChange, broadcastUserList, broadcastYjsUpdate, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, cancelSubscription, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDeepSpaceAI, createDeepSpaceAuth, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, deleteRecord, enqueueJob, epochSeconds, executeQuery, folderFilter, formatBytes, getAllUsers, getChat, getOrCreateYjsDoc, getRecord, getRolePermissions, getSubscription, getUser, getYjsDocKey, handleApiRequest, handleDelete, handlePut, handleSetRole, handleSubscribe, handleToolsRequest, handleUnsubscribe, handleUserList, handleUserUpdate, handleYjsBinaryMessage, handleYjsJoin, handleYjsLeave, isAutoProvision, isFilesVerbPath, isOwner, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, knowledge, lintSchema, lintSchemaSet, lintSchemas, loadMessages, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, noopPermissionContext, normalizeKnowledgeFolder, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, putRecord, readRecord, recordMatchesSubscription, refundInvoice, registerUser, registryErrorJson, registryStub, requireSubscription, resolveAppMembership, resolveAppName, resolveAppRole, resolveColumn, rowToData, runMigrations, saveYjsDoc, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyAgentToken, verifyJwt };

package/dist/server.js

@@ -1676,8 +1676,8 @@ function isWriterRole(role) {
 }
 
 // src/server/utils/app-role.ts
-async function resolveAppRole(env, userId) {
-  if (userId === env.OWNER_USER_ID) return "admin";
+async function resolveAppMembership(env, userId, signal) {
+  if (userId === env.OWNER_USER_ID) return { member: true, role: "admin" };
   const stub = env.RECORD_ROOMS.get(env.RECORD_ROOMS.idFromName(`app:${env.DEEPSPACE_APP_ID}`));
   try {
     const res = await stub.fetch(
@@ -1691,16 +1691,21 @@ async function resolveAppRole(env, userId) {
         body: JSON.stringify({
           tool: "records.get",
           params: { collection: "users", recordId: userId }
-        })
+        }),
+        signal
       })
     );
     const json = await res.json();
-    const role = json.data?.record?.data?.role;
-    return json.success && isWriterRole(role) ? role : "viewer";
+    if (!json.success || !json.data?.record) return { member: false, role: "viewer" };
+    const role = json.data.record.data?.role;
+    return { member: true, role: isWriterRole(role) ? role : "viewer" };
   } catch {
-    return "viewer";
+    return null;
   }
 }
+async function resolveAppRole(env, userId) {
+  return (await resolveAppMembership(env, userId))?.role ?? "viewer";
+}
 
 // src/server/utils/ai.ts
 import { createAnthropic } from "@ai-sdk/anthropic";
@@ -2248,6 +2253,9 @@ function locateTrimmableArray(result) {
   }
   return void 0;
 }
+function utf8ByteLength(text) {
+  return new TextEncoder().encode(text).byteLength;
+}
 function capToolResultSize(result, byteCap) {
   let serialized;
   try {
@@ -2256,7 +2264,7 @@ function capToolResultSize(result, byteCap) {
     return { success: false, error: "Tool result could not be serialized." };
   }
   if (typeof serialized !== "string") return result;
-  if (serialized.length <= byteCap) return result;
+  if (utf8ByteLength(serialized) <= byteCap) return result;
   if (result && typeof result === "object") {
     const located = locateTrimmableArray(result);
     if (located) {
@@ -2265,7 +2273,7 @@ function capToolResultSize(result, byteCap) {
       const build = (k) => setPath(result, path, items.slice(0, k), { truncated: true, returned: k, total });
       const fits = (k) => {
         try {
-          return JSON.stringify(build(k)).length <= byteCap;
+          return utf8ByteLength(JSON.stringify(build(k))) <= byteCap;
         } catch {
           return false;
         }
@@ -2285,7 +2293,7 @@ function capToolResultSize(result, byteCap) {
   return {
     success: false,
     truncated: true,
-    error: `Tool result exceeded ${byteCap} bytes (was ${serialized.length}). Retry with a narrower query (e.g. add a \`where\` filter, reduce \`limit\`, or call records.get for a single record).`,
+    error: `Tool result exceeded ${byteCap} bytes (was ${utf8ByteLength(serialized)}). Retry with a narrower query (e.g. add a \`where\` filter, reduce \`limit\`, or call records.get for a single record).`,
     preview: serialized.slice(0, 2e3)
   };
 }
@@ -2437,10 +2445,15 @@ async function prepareMessagesWithCompaction(messages, config, options) {
         newSummary: { text, throughId }
       };
     } catch (err) {
-      console.error("prepareMessagesWithCompaction: summarizer failed, falling back to sliding window", err);
+      console.error(
+        "prepareMessagesWithCompaction: summarizer failed, falling back to sliding window",
+        err
+      );
     }
   } else {
-    console.warn("prepareMessagesWithCompaction: messages lack ids; cannot anchor a summary, falling back to sliding window");
+    console.warn(
+      "prepareMessagesWithCompaction: messages lack ids; cannot anchor a summary, falling back to sliding window"
+    );
   }
   return {
     messages: applySlidingWindow(working, config.contextBudget, config.minKept)
@@ -8318,6 +8331,24 @@ async function verifyJwt(config, token) {
   }
 }
 
+// src/server/auth/agentToken.ts
+var AGENT_TOKEN_SCOPE = "agent";
+function agentTokenIssuer(issuer) {
+  return `${issuer.replace(/\/+$/, "")}/agent`;
+}
+async function verifyAgentToken(config, token, targetOrigin) {
+  const outcome = await verifyJwt(
+    {
+      ...config,
+      issuer: agentTokenIssuer(config.issuer),
+      audience: targetOrigin
+    },
+    token
+  );
+  if (!outcome.result || outcome.result.claims.scope === AGENT_TOKEN_SCOPE) return outcome;
+  return { ...outcome, result: null, error: new Error("Invalid agent token scope") };
+}
+
 // src/server/auth/internalAuth.ts
 var nodeCryptoPromise = null;
 async function loadNodeCrypto() {
@@ -8647,6 +8678,7 @@ var RefundError = class extends Error {
 };
 export {
   ACCOUNT_STORAGE_LIMIT_BYTES,
+  AGENT_TOKEN_SCOPE,
   AI_CHATS_SCHEMA,
   AI_MESSAGES_SCHEMA,
   ALLOWED_BINDING_TYPES,
@@ -8700,6 +8732,7 @@ export {
   UPLOAD_PART_BYTES,
   USERS_COLUMNS,
   YjsRoom,
+  agentTokenIssuer,
   apiWorkerFetch,
   appendMessage,
   applyAiToolDefaults,
@@ -8796,6 +8829,7 @@ export {
   registryErrorJson,
   registryStub,
   requireSubscription,
+  resolveAppMembership,
   resolveAppName,
   resolveAppRole,
   resolveColumn,
@@ -8815,6 +8849,7 @@ export {
   validateAppName,
   validateBindingManifest,
   validateDoManifest,
+  verifyAgentToken,
   verifyJwt
 };
 //# sourceMappingURL=server.js.map