deepspace 0.3.11 → 0.4.0

package/dist/server.d.ts

@@ -357,52 +357,6 @@ interface ActionContext<TEnv = Record<string, unknown>> {
 }
 type ActionHandler<TEnv = Record<string, unknown>> = (ctx: ActionContext<TEnv>) => Promise<ActionResult>;
 
-/**
- * Cron System — Server-Side Scheduled Tasks
- *
- * Provides CronContext for miniapp cron handlers and buildCronContext
- * to construct it from worker environment bindings.
- *
- * CronContext gives handlers access to:
- *   - records: Query/create/update/delete via RecordRoom tools API
- *   - integrations: Call platform integration endpoints (billed to owner)
- *   - ownerUserId: The app owner's user ID
- */
-/** Context passed to cron handler functions */
-interface CronContext {
-    /** RecordRoom data access (queries the DO directly via tools API) */
-    records: {
-        query(collection: string, opts?: {
-            where?: Record<string, unknown>;
-            limit?: number;
-        }): Promise<any[]>;
-        create(collection: string, data: Record<string, unknown>): Promise<any>;
-        update(collection: string, recordId: string, data: Record<string, unknown>): Promise<any>;
-        delete(collection: string, recordId: string): Promise<any>;
-    };
-    /** Call platform integration endpoints, billed to owner */
-    integrations: {
-        call(endpoint: string, params: Record<string, unknown>): Promise<any>;
-    };
-    /** App owner's user ID */
-    ownerUserId: string;
-}
-/** Environment bindings needed by buildCronContext */
-interface CronEnv {
-    RECORD_ROOMS: DurableObjectNamespace;
-    INTERNAL_STORAGE_HMAC_SECRET?: string;
-    /** Override API base URL for local dev or custom platform deployments. */
-    API_BASE_URL?: string;
-}
-/**
- * Build a CronContext from worker environment bindings.
- *
- * @param env - Worker environment with RECORD_ROOMS DO namespace and HMAC secret
- * @param ownerUserId - App owner's user ID (for RBAC and billing)
- * @param roomId - RecordRoom ID (defaults to 'default')
- */
-declare function buildCronContext(env: CronEnv, ownerUserId: string, roomId?: string): CronContext;
-
 /**
  * Upstream worker proxy helpers.
  *
@@ -490,6 +444,61 @@ declare function platformWorkerFetch(env: PlatformWorkerEnv, pathOrRequest: stri
  */
 declare function authWorkerFetch(env: AuthWorkerEnv, path: string, init?: RequestInit): Promise<Response>;
 
+/**
+ * Cron System — Server-Side Scheduled Tasks
+ *
+ * Provides CronContext for miniapp cron handlers and buildCronContext
+ * to construct it from worker environment bindings.
+ *
+ * CronContext gives handlers access to:
+ *   - records: Query/create/update/delete via RecordRoom tools API
+ *   - integrations: Call platform integration endpoints, billed to the app owner
+ *   - ownerUserId: The app owner's user ID
+ */
+
+/** Context passed to cron handler functions */
+interface CronContext {
+    /** RecordRoom data access (queries the DO directly via tools API) */
+    records: {
+        query(collection: string, opts?: {
+            where?: Record<string, unknown>;
+            limit?: number;
+        }): Promise<any[]>;
+        create(collection: string, data: Record<string, unknown>): Promise<any>;
+        update(collection: string, recordId: string, data: Record<string, unknown>): Promise<any>;
+        delete(collection: string, recordId: string): Promise<any>;
+    };
+    /**
+     * Call a platform integration endpoint (e.g. "openai/chat-completion",
+     * "freepik/text-to-image-classic"). Billed to the app owner — the same
+     * APP_OWNER_JWT the rest of the SDK uses for server-side billed calls.
+     */
+    integrations: {
+        call(endpoint: string, params?: Record<string, unknown>): Promise<any>;
+    };
+    /** App owner's user ID */
+    ownerUserId: string;
+}
+/** Environment bindings needed by buildCronContext */
+interface CronEnv extends ApiWorkerEnv {
+    RECORD_ROOMS: DurableObjectNamespace;
+    /**
+     * Long-lived app-owner JWT minted at deploy time. Required for
+     * `integrations.call()` so the call is billed to the app owner.
+     * Optional here so apps that don't use integrations from cron can omit
+     * it without a type error; missing-at-call-time throws a clear message.
+     */
+    APP_OWNER_JWT?: string;
+}
+/**
+ * Build a CronContext from worker environment bindings.
+ *
+ * @param env - Worker environment with RECORD_ROOMS DO namespace, APP_OWNER_JWT, and an api-worker transport (API_WORKER binding or API_WORKER_URL)
+ * @param ownerUserId - App owner's user ID (for RBAC and billing)
+ * @param roomId - RecordRoom ID (defaults to 'default')
+ */
+declare function buildCronContext(env: CronEnv, ownerUserId: string, roomId?: string): CronContext;
+
 /**
  * AI provider helpers — create Vercel AI SDK providers that route through
  * the DeepSpace API worker proxy for per-user billing.
@@ -1034,6 +1043,7 @@ declare const MSG: {
     readonly USER_LIST: "user.list";
     readonly SET_ROLE: "user.set_role";
     readonly USER_UPDATE: "user.update";
+    readonly AUTH: "auth";
     readonly YJS_JOIN: "yjs.join";
     readonly YJS_LEAVE: "yjs.leave";
     readonly ACK: "records.ack";
@@ -1188,6 +1198,8 @@ type ServerMessage = BaseMessage<typeof MSG.QUERY_RESULT, {
     error: string;
 }> | BaseMessage<typeof MSG.RESUBSCRIBE, EmptyPayload> | BaseMessage<typeof MSG.LIST_SCHEMAS, {
     schemas: unknown;
+}> | BaseMessage<typeof MSG.AUTH, {
+    canWrite: boolean;
 }> | BaseMessage<typeof MSG.USER_INFO, unknown> | BaseMessage<typeof MSG.USER_LIST, {
     users: unknown[];
 }> | BaseMessage<typeof MSG.YJS_JOIN, {
@@ -1766,6 +1778,8 @@ interface GameInput {
 }
 interface GameAttachment extends UserAttachment {
     joinedAt: string;
+    /** True for member/admin roles; false for viewers, unauthenticated anon, spectators. */
+    canWrite: boolean;
 }
 declare abstract class GameRoom<E = Record<string, unknown>> extends BaseRoom<E> {
     private config;
@@ -1863,6 +1877,8 @@ interface Viewport {
 }
 interface CanvasAttachment extends UserAttachment {
     viewport: Viewport | null;
+    /** True for member/admin roles; false for viewers and unauthenticated anon. */
+    canWrite: boolean;
 }
 declare class CanvasRoom<E = Record<string, unknown>> extends BaseRoom<E> {
     private doc;
@@ -1975,13 +1991,17 @@ interface CronExecution {
     durationMs: number;
     error?: string;
 }
+interface CronAttachment extends UserAttachment {
+    /** True for member/admin roles; false for viewers and unauthenticated anon. */
+    canWrite: boolean;
+}
 declare abstract class CronRoom<E = Record<string, unknown>> extends BaseRoom<E> {
     private tasks;
     private initialized;
     constructor(state: DurableObjectState, env: unknown, config: CronRoomConfig);
     private ensureInitialized;
     fetch(request: Request): Promise<Response>;
-    protected onConnect(ws: WebSocket, user: UserAttachment): UserAttachment;
+    protected onConnect(ws: WebSocket, user: UserAttachment): CronAttachment;
     protected onMessage(ws: WebSocket, user: UserAttachment, message: {
         type: string;
         [key: string]: unknown;
@@ -2300,7 +2320,7 @@ declare const ALLOWED_BINDING_TYPES: Set<string>;
  *
  * Includes:
  *   - Static-asset + service bindings the platform sets up automatically.
- *   - SDK-managed env (auth, identity, owner JWT, HMAC secret).
+ *   - SDK-managed env (auth, identity, owner JWT).
  *   - The auto-attached cost-tracking AE dataset (`USAGE_EVENTS`).
  *
  * DO binding names (RECORD_ROOMS, YJS_ROOMS, etc.) are NOT in this set
@@ -2922,22 +2942,6 @@ interface VerifyOutcome {
     debug?: TokenDebugInfo;
     error?: unknown;
 }
-interface InternalSignature {
-    timestamp: string;
-    signature: string;
-}
-interface VerifyInternalSignatureInput {
-    secret: string | undefined;
-    timestamp: string | null | undefined;
-    signature: string | null | undefined;
-    payload: string;
-    maxSkewMs?: number;
-}
-interface SignInternalPayloadInput {
-    secret: string;
-    payload: string;
-    timestamp?: string;
-}
 
 /**
  * JWT verification for DeepSpace workers.
@@ -2958,17 +2962,12 @@ interface SignInternalPayloadInput {
 declare function verifyJwt(config: JwtVerifierConfig, token: string | null | undefined): Promise<VerifyOutcome>;
 
 /**
- * HMAC-based internal authentication for service-to-service calls.
- *
- * Ported as-is from Miyagi3 — this is auth-provider-agnostic.
+ * HMAC primitives used by the per-app identity tokens (APP_IDENTITY_TOKEN)
+ * minted at deploy time and verified on every /internal/* call into the
+ * platform worker. Auth-provider-agnostic.
  */
-
-declare const DEFAULT_MAX_SKEW_MS: number;
 declare function computeHmacHex(secret: string, payload: string): Promise<string>;
 declare function timingSafeEqualHex(a: string, b: string): Promise<boolean>;
-declare function signInternalPayload({ secret, payload, timestamp, }: SignInternalPayloadInput): Promise<InternalSignature>;
-declare function verifyInternalSignature({ secret, timestamp, signature, payload, maxSkewMs, }: VerifyInternalSignatureInput): Promise<boolean>;
-declare function buildInternalPayload(body: unknown): string;
 
 declare function decodeJwtPayload(token: string | null | undefined): TokenDebugInfo | undefined;
 
@@ -3972,4 +3971,4 @@ declare class RefundError extends Error {
     constructor(message: string, status: number);
 }
 
-export { AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_NAME_RULES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, BaseRoom, CHANNELS_SCHEMA, CHANNEL_INVITATIONS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, CONVERSATION_SCHEMAS, COST_RATES, CancelSubscriptionError, type CancelSubscriptionOpts, type CancelSubscriptionResult, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type CollectionPermissionSummary, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ConvMemberData, type ConvMessageData, type ConvReactionData, type ConvReadCursorData, type ConvVoteData, type ConversationStateData, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DO_MANIFEST, DEFAULT_MAX_SKEW_MS, DIRECTORY_SCHEMAS, type DOBindings, type DOManifest, type DOManifestEntry, type DebugApiContext, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DirectoryCommunityData, type DirectoryConversationData, type DirectoryMembershipData, type DirectoryPostData, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, GLOBAL_DO_TYPES, GLOBAL_DO_TYPE_NAMES, type GameInput, GameRoom, type GameRoomConfig, type GetActionData, type GlobalDOType, type InternalSignature, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, MESSAGES_SCHEMA, type MutateActionData, type PermissionAnalysis, type PermissionContext, type PermissionLevel, type PermissionSource, type PlanInfo, type PlatformWorkerEnv, type Player, type PrefixResult, type PresencePeer, PresenceRoom, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RESERVED_BINDING_NAMES, RESERVED_COLLECTION_NAMES, type RecordContext, RecordRoom, type RecordRoomConfig, RefundError, type RefundOpts, type RefundResult, type ResolvedColumn, type ResolvedPermission, type RolePermissions, type RunMigrationsResult, SYSTEM_COLLECTION_SCHEMAS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotOptions, type ScreenshotResult, type SharedConnection, type SignInternalPayloadInput, type StoredRecord, SubscriptionAuthError, type SubscriptionContext, type SubscriptionRead, SubscriptionRequiredError, type SubscriptionStatus, type Summarizer, type TokenDebugInfo, type ToolResult, type ToolSchema, type ToolsApiContext, USERS_COLUMNS, type User, type UserAttachment, type UserContext, VOTING_SCHEMAS, type ValidationError, type VerifiedAuth, type VerifyInternalSignatureInput, type VerifyOutcome, type VerifyResult, type Viewport, WORKSPACE_SCHEMAS, type YjsContext, YjsRoom, analyzePermissions, apiWorkerFetch, appendMessage, applySlidingWindow, authWorkerFetch, bindingManifestFromOutputConfig, broadcastChange, broadcastYjsUpdate, buildCronContext, buildInternalPayload, buildTableSelect, buildUiParts, canCreate, canDelete, canRead, canUpdate, cancelSubscription, capToolResultSize, captureScreenshot, checkFieldPermissions, coerceValue, collectionTableName, columnId, computeDoMigration, computeHmacHex, createChat, createDeepSpaceAI, createDeepSpaceAuth, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deleteChatCascade, deleteRecord, enqueueJob, executeQuery, getAllUsers, getChat, getGlobalDOSchemas, getGlobalDOType, getOrCreateYjsDoc, getRecord, getRolePermissions, getSubscription, getUser, getYjsDocKey, handleApiRequest, handleDelete, handlePut, handleSetRole, handleSubscribe, handleToolsRequest, handleUnsubscribe, handleUserList, handleUserUpdate, handleYjsBinaryMessage, handleYjsJoin, handleYjsLeave, isAutoProvision, isOwner, lintSchema, loadMessages, makeDefaultSummarizer, meterAi, meterUsage, meterVectorize, noopPermissionContext, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, putRecord, readRecord, recordMatchesSubscription, refundInvoice, registerUser, requireSubscription, resolveAppName, resolveColumn, rowToData, runMigrations, saveYjsDoc, signInternalPayload, timingSafeEqualHex, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyInternalSignature, verifyJwt, workspaceAccountsSchema, workspaceContentSharesSchema, workspaceEmailHandlesSchema, workspaceFormResponsesSchema, workspacePeopleSchema, workspaceProjectsSchema, workspaceTagsSchema, workspaceTasksSchema, workspaceTeamMembersSchema, workspaceTeamsSchema, workspaceTransactionsSchema };
+export { AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_NAME_RULES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, BaseRoom, CHANNELS_SCHEMA, CHANNEL_INVITATIONS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, CONVERSATION_SCHEMAS, COST_RATES, CancelSubscriptionError, type CancelSubscriptionOpts, type CancelSubscriptionResult, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type CollectionPermissionSummary, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ConvMemberData, type ConvMessageData, type ConvReactionData, type ConvReadCursorData, type ConvVoteData, type ConversationStateData, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DO_MANIFEST, DIRECTORY_SCHEMAS, type DOBindings, type DOManifest, type DOManifestEntry, type DebugApiContext, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DirectoryCommunityData, type DirectoryConversationData, type DirectoryMembershipData, type DirectoryPostData, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, GLOBAL_DO_TYPES, GLOBAL_DO_TYPE_NAMES, type GameInput, GameRoom, type GameRoomConfig, type GetActionData, type GlobalDOType, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, MESSAGES_SCHEMA, type MutateActionData, type PermissionAnalysis, type PermissionContext, type PermissionLevel, type PermissionSource, type PlanInfo, type PlatformWorkerEnv, type Player, type PrefixResult, type PresencePeer, PresenceRoom, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RESERVED_BINDING_NAMES, RESERVED_COLLECTION_NAMES, type RecordContext, RecordRoom, type RecordRoomConfig, RefundError, type RefundOpts, type RefundResult, type ResolvedColumn, type ResolvedPermission, type RolePermissions, type RunMigrationsResult, SYSTEM_COLLECTION_SCHEMAS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotOptions, type ScreenshotResult, type SharedConnection, type StoredRecord, SubscriptionAuthError, type SubscriptionContext, type SubscriptionRead, SubscriptionRequiredError, type SubscriptionStatus, type Summarizer, type TokenDebugInfo, type ToolResult, type ToolSchema, type ToolsApiContext, USERS_COLUMNS, type User, type UserAttachment, type UserContext, VOTING_SCHEMAS, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKSPACE_SCHEMAS, type YjsContext, YjsRoom, analyzePermissions, apiWorkerFetch, appendMessage, applySlidingWindow, authWorkerFetch, bindingManifestFromOutputConfig, broadcastChange, broadcastYjsUpdate, buildCronContext, buildTableSelect, buildUiParts, canCreate, canDelete, canRead, canUpdate, cancelSubscription, capToolResultSize, captureScreenshot, checkFieldPermissions, coerceValue, collectionTableName, columnId, computeDoMigration, computeHmacHex, createChat, createDeepSpaceAI, createDeepSpaceAuth, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deleteChatCascade, deleteRecord, enqueueJob, executeQuery, getAllUsers, getChat, getGlobalDOSchemas, getGlobalDOType, getOrCreateYjsDoc, getRecord, getRolePermissions, getSubscription, getUser, getYjsDocKey, handleApiRequest, handleDelete, handlePut, handleSetRole, handleSubscribe, handleToolsRequest, handleUnsubscribe, handleUserList, handleUserUpdate, handleYjsBinaryMessage, handleYjsJoin, handleYjsLeave, isAutoProvision, isOwner, lintSchema, loadMessages, makeDefaultSummarizer, meterAi, meterUsage, meterVectorize, noopPermissionContext, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, putRecord, readRecord, recordMatchesSubscription, refundInvoice, registerUser, requireSubscription, resolveAppName, resolveColumn, rowToData, runMigrations, saveYjsDoc, timingSafeEqualHex, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyJwt, workspaceAccountsSchema, workspaceContentSharesSchema, workspaceEmailHandlesSchema, workspaceFormResponsesSchema, workspacePeopleSchema, workspaceProjectsSchema, workspaceTagsSchema, workspaceTasksSchema, workspaceTeamMembersSchema, workspaceTeamsSchema, workspaceTransactionsSchema };