deepspace 0.3.6 → 0.3.8

package/dist/worker.d.ts

@@ -815,11 +815,9 @@ interface UserAttachment {
     /** Subclass-specific data serialized alongside user info */
     [key: string]: unknown;
 }
-declare abstract class BaseRoom {
+declare abstract class BaseRoom<E = Record<string, unknown>> {
     protected state: DurableObjectState;
-    protected env: {
-        [key: string]: unknown;
-    };
+    protected env: E;
     protected sql: SqlStorage;
     constructor(state: DurableObjectState, env: unknown);
     fetch(request: Request): Promise<Response>;
@@ -915,6 +913,13 @@ interface YjsSubscription {
     recordId: string;
     fieldName: string;
 }
+interface RecordResult {
+    recordId: string;
+    data: Record<string, unknown>;
+    createdBy: string;
+    createdAt: string;
+    updatedAt: string;
+}
 interface DirectoryConversationData {
     Name: string;
     Description: string;
@@ -1270,7 +1275,7 @@ interface RecordRoomConfig {
 /**
  * RecordRoom Durable Object
  */
-declare class RecordRoom extends BaseRoom {
+declare class RecordRoom<E = Record<string, unknown>> extends BaseRoom<E> {
     private schemaRegistry;
     private initPromise;
     /** Yjs docs loaded in memory (key: collection:recordId:fieldName) */
@@ -1333,7 +1338,7 @@ interface YjsAttachment extends UserAttachment {
     canWrite: boolean;
     awarenessClientId: number | null;
 }
-declare class YjsRoom extends BaseRoom {
+declare class YjsRoom<E = Record<string, unknown>> extends BaseRoom<E> {
     private doc;
     private initialized;
     constructor(state: DurableObjectState, env: unknown);
@@ -1391,7 +1396,7 @@ interface GameInput {
 interface GameAttachment extends UserAttachment {
     joinedAt: string;
 }
-declare abstract class GameRoom extends BaseRoom {
+declare abstract class GameRoom<E = Record<string, unknown>> extends BaseRoom<E> {
     private config;
     private players;
     private inputBuffer;
@@ -1488,7 +1493,7 @@ interface Viewport {
 interface CanvasAttachment extends UserAttachment {
     viewport: Viewport | null;
 }
-declare class CanvasRoom extends BaseRoom {
+declare class CanvasRoom<E = Record<string, unknown>> extends BaseRoom<E> {
     private doc;
     private initialized;
     private viewports;
@@ -1541,7 +1546,7 @@ interface PresencePeer {
 interface PresenceAttachment extends UserAttachment {
     joinedAt: string;
 }
-declare class PresenceRoom extends BaseRoom {
+declare class PresenceRoom<E = Record<string, unknown>> extends BaseRoom<E> {
     private peers;
     private peerSockets;
     constructor(state: DurableObjectState, env: unknown);
@@ -1593,7 +1598,7 @@ interface CronExecution {
     durationMs: number;
     error?: string;
 }
-declare abstract class CronRoom extends BaseRoom {
+declare abstract class CronRoom<E = Record<string, unknown>> extends BaseRoom<E> {
     private tasks;
     private initialized;
     constructor(state: DurableObjectState, env: unknown, config: CronRoomConfig);
@@ -2285,24 +2290,62 @@ declare function createScopedR2Handler(config: ScopedR2Config): ScopedR2Handler;
  * Actions bypass user RBAC via the X-App-Action header — the app's
  * server-side code IS the trust boundary.
  */
-interface ActionResult {
-    success: boolean;
-    data?: unknown;
-    error?: string;
+
+/**
+ * Discriminated result wrapper. Narrowing on `.success` lets TS know
+ * `.data` is present in the success branch and `.error` in the failure
+ * branch, so callers can't read the wrong field by accident.
+ *
+ * `TData` is the per-operation data shape — `tools.query` returns
+ * `{ records, count }`, `tools.get` returns `{ record }`, etc. Apps
+ * that compose their own server actions can specialize further.
+ */
+type ActionResult<TData = unknown> = {
+    success: true;
+    data: TData;
+    error?: never;
+} | {
+    success: false;
+    data?: never;
+    error: string;
+};
+/** Shape of the data field for `tools.query`. */
+interface QueryActionData<T = Record<string, unknown>> {
+    records: Array<RecordResult & {
+        data: T;
+    }>;
+    count: number;
+}
+/** Shape of the data field for `tools.get`. */
+interface GetActionData<T = Record<string, unknown>> {
+    record: RecordResult & {
+        data: T;
+    };
+}
+/** Shape of the data field for `tools.create`/`update`/`remove`. */
+interface MutateActionData {
+    recordId: string;
+}
+/** Shape of the data field for `tools.integration`. */
+interface IntegrationActionData<T = unknown> {
+    /** The integration endpoint's response body, parsed as JSON when possible. */
+    response: T;
+    /** HTTP status the api-worker forwarded back. */
+    status?: number;
 }
 interface ActionTools {
-    create(collection: string, data: Record<string, unknown>): Promise<ActionResult>;
-    update(collection: string, recordId: string, data: Record<string, unknown>): Promise<ActionResult>;
-    remove(collection: string, recordId: string): Promise<ActionResult>;
-    get(collection: string, recordId: string): Promise<ActionResult>;
-    query(collection: string, options?: {
+    create<T extends Record<string, unknown> = Record<string, unknown>>(collection: string, data: T): Promise<ActionResult<MutateActionData>>;
+    update<T extends Record<string, unknown> = Record<string, unknown>>(collection: string, recordId: string, data: Partial<T>): Promise<ActionResult<MutateActionData>>;
+    remove(collection: string, recordId: string): Promise<ActionResult<MutateActionData>>;
+    get<T extends Record<string, unknown> = Record<string, unknown>>(collection: string, recordId: string): Promise<ActionResult<GetActionData<T>>>;
+    query<T extends Record<string, unknown> = Record<string, unknown>>(collection: string, options?: {
         where?: Record<string, unknown>;
         orderBy?: string;
         orderDir?: 'asc' | 'desc';
         limit?: number;
-    }): Promise<ActionResult>;
+    }): Promise<ActionResult<QueryActionData<T>>>;
     /** Call an integration endpoint (e.g. 'openai/completions') via the API worker */
-    integration(endpoint: string, data?: unknown): Promise<ActionResult>;
+    integration<T = unknown>(endpoint: string, data?: unknown): Promise<ActionResult<IntegrationActionData<T>>>;
 }
 /**
  * `TEnv` lets apps type the worker-scoped env object passed to the
@@ -3847,4 +3890,4 @@ type DeepSpaceAuth = ReturnType<typeof createDeepSpaceAuth>;
 /** Collections that bypass schema checks (permissive access) */
 declare const SYSTEM_COLLECTIONS: Set<string>;
 
-export { AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_NAME_RULES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, Awareness, type AwarenessState, type AwarenessStates, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, type BaseMessage, BaseRoom, CHANNELS_SCHEMA, CHANNEL_INVITATIONS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, CONVERSATION_SCHEMAS, COST_RATES, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type ClientMessage, type CollectionPermissionSummary, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ConnectionAttachment, type ConvMemberData, type ConvMessageData, type ConvReactionData, type ConvReadCursorData, type ConvVoteData, type ConversationStateData, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DO_MANIFEST, DEFAULT_MAX_SKEW_MS, DIRECTORY_SCHEMAS, type DOBindings, type DOManifest, type DOManifestEntry, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DirectoryCommunityData, type DirectoryConversationData, type DirectoryMembershipData, type DirectoryPostData, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, GLOBAL_DO_TYPES, GLOBAL_DO_TYPE_NAMES, type GameInput, GameRoom, type GameRoomConfig, type GlobalDOType, type HandlerContext, type InternalSignature, type JwtClaims, type JwtVerifierConfig, MESSAGES_SCHEMA, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type MessageHandlers, type MsgType, type PermissionAnalysis, type PermissionContext, type PermissionLevel, type PermissionSource, type PlatformWorkerEnv, type Player, type PrefixResult, type PresencePeer, PresenceRoom, type ProtocolMessage, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RESERVED_BINDING_NAMES, RESERVED_COLLECTION_NAMES, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_DEFAULT, RecordRoom, type RecordRoomConfig, type ResolvedColumn, type ResolvedPermission, type RolePermissions, type RunMigrationsResult, SYSTEM_COLLECTIONS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ServerMessage, type SharedConnection, type SignInternalPayloadInput, type StoredRecord, type Summarizer, type SyncResult, type TokenDebugInfo, type ToolResult, type ToolSchema, USERS_COLUMNS, type User, type UserAttachment, VOTING_SCHEMAS, type ValidationError, type VerifiedAuth, type VerifyInternalSignatureInput, type VerifyOutcome, type VerifyResult, type Viewport, WORKSPACE_SCHEMAS, YjsRoom, analyzePermissions, apiWorkerFetch, appendMessage, applySlidingWindow, authWorkerFetch, bindingManifestFromOutputConfig, buildCronContext, buildInternalPayload, buildTableSelect, buildUiParts, canCreate, canDelete, canRead, canUpdate, capToolResultSize, checkFieldPermissions, clientBuild, coerceValue, collectionTableName, columnId, computeDoMigration, computeHmacHex, createChat, createDecoder, createDeepSpaceAI, createDeepSpaceAuth, createEncoder, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deleteChatCascade, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, getChat, getGlobalDOSchemas, getGlobalDOType, getMessageType, getRolePermissions, handleAwarenessMessage, handleSyncMessage, hasContent, isAutoProvision, isOwner, loadMessages, makeDefaultSummarizer, meterAi, meterUsage, meterVectorize, noopPermissionContext, platformWorkerFetch, prepareMessagesWithCompaction, readVarUint, readVarUint8Array, resolveAppName, resolveColumn, rowToData, runMigrations, serverBuild, signInternalPayload, timingSafeEqualHex, toUint8Array, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyInternalSignature, verifyJwt, workspaceAccountsSchema, workspaceContentSharesSchema, workspaceEmailHandlesSchema, workspaceFormResponsesSchema, workspacePeopleSchema, workspaceProjectsSchema, workspaceTagsSchema, workspaceTasksSchema, workspaceTeamMembersSchema, workspaceTeamsSchema, workspaceTransactionsSchema, writeVarUint, writeVarUint8Array };
+export { AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_NAME_RULES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, Awareness, type AwarenessState, type AwarenessStates, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, type BaseMessage, BaseRoom, CHANNELS_SCHEMA, CHANNEL_INVITATIONS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, CONVERSATION_SCHEMAS, COST_RATES, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type ClientMessage, type CollectionPermissionSummary, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ConnectionAttachment, type ConvMemberData, type ConvMessageData, type ConvReactionData, type ConvReadCursorData, type ConvVoteData, type ConversationStateData, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DO_MANIFEST, DEFAULT_MAX_SKEW_MS, DIRECTORY_SCHEMAS, type DOBindings, type DOManifest, type DOManifestEntry, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DirectoryCommunityData, type DirectoryConversationData, type DirectoryMembershipData, type DirectoryPostData, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, GLOBAL_DO_TYPES, GLOBAL_DO_TYPE_NAMES, type GameInput, GameRoom, type GameRoomConfig, type GetActionData, type GlobalDOType, type HandlerContext, type IntegrationActionData, type InternalSignature, type JwtClaims, type JwtVerifierConfig, MESSAGES_SCHEMA, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type MessageHandlers, type MsgType, type MutateActionData, type PermissionAnalysis, type PermissionContext, type PermissionLevel, type PermissionSource, type PlatformWorkerEnv, type Player, type PrefixResult, type PresencePeer, PresenceRoom, type ProtocolMessage, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RESERVED_BINDING_NAMES, RESERVED_COLLECTION_NAMES, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_DEFAULT, RecordRoom, type RecordRoomConfig, type ResolvedColumn, type ResolvedPermission, type RolePermissions, type RunMigrationsResult, SYSTEM_COLLECTIONS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ServerMessage, type SharedConnection, type SignInternalPayloadInput, type StoredRecord, type Summarizer, type SyncResult, type TokenDebugInfo, type ToolResult, type ToolSchema, USERS_COLUMNS, type User, type UserAttachment, VOTING_SCHEMAS, type ValidationError, type VerifiedAuth, type VerifyInternalSignatureInput, type VerifyOutcome, type VerifyResult, type Viewport, WORKSPACE_SCHEMAS, YjsRoom, analyzePermissions, apiWorkerFetch, appendMessage, applySlidingWindow, authWorkerFetch, bindingManifestFromOutputConfig, buildCronContext, buildInternalPayload, buildTableSelect, buildUiParts, canCreate, canDelete, canRead, canUpdate, capToolResultSize, checkFieldPermissions, clientBuild, coerceValue, collectionTableName, columnId, computeDoMigration, computeHmacHex, createChat, createDecoder, createDeepSpaceAI, createDeepSpaceAuth, createEncoder, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deleteChatCascade, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, getChat, getGlobalDOSchemas, getGlobalDOType, getMessageType, getRolePermissions, handleAwarenessMessage, handleSyncMessage, hasContent, isAutoProvision, isOwner, loadMessages, makeDefaultSummarizer, meterAi, meterUsage, meterVectorize, noopPermissionContext, platformWorkerFetch, prepareMessagesWithCompaction, readVarUint, readVarUint8Array, resolveAppName, resolveColumn, rowToData, runMigrations, serverBuild, signInternalPayload, timingSafeEqualHex, toUint8Array, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyInternalSignature, verifyJwt, workspaceAccountsSchema, workspaceContentSharesSchema, workspaceEmailHandlesSchema, workspaceFormResponsesSchema, workspacePeopleSchema, workspaceProjectsSchema, workspaceTagsSchema, workspaceTasksSchema, workspaceTeamMembersSchema, workspaceTeamsSchema, workspaceTransactionsSchema, writeVarUint, writeVarUint8Array };

package/dist/worker.js

@@ -1507,7 +1507,7 @@ function handleSubscribe(ctx, ws, attachment, payload) {
 }
 function handleUnsubscribe(_ctx, _ws, _attachment, _payload) {
 }
-function executeQuery(ctx, query, userId, userRole) {
+function executeQuery(ctx, query, userId, userRole, skipUserRbac = false) {
   const isSystem = SYSTEM_COLLECTIONS.has(query.collection);
   const schema = ctx.schemaRegistry.get(query.collection);
   if (!schema && !isSystem) {
@@ -1516,7 +1516,7 @@ function executeQuery(ctx, query, userId, userRole) {
   if (!schema) {
     return executeSystemQuery(ctx, query);
   }
-  return executeTableQuery(ctx, query, schema, userId, userRole, isSystem);
+  return executeTableQuery(ctx, query, schema, userId, userRole, isSystem, skipUserRbac);
 }
 function executeSystemQuery(ctx, query) {
   const tbl = collectionTableName(query.collection);
@@ -1552,14 +1552,14 @@ function preloadUserTeamIds(ctx, userId) {
   );
   return cursor.toArray().map((r) => r.col_teamid);
 }
-function executeTableQuery(ctx, query, schema, userId, userRole, isSystem) {
+function executeTableQuery(ctx, query, schema, userId, userRole, isSystem, skipUserRbac = false) {
   const columns = (schema.columns ?? []).map(resolveColumn);
   const perms = getRolePermissions(schema, userRole);
   let sql = buildTableSelect(query.collection, columns);
   const params = [];
   const whereClauses = [];
-  let skipPerRecordCheck = false;
-  if (schema.teamField && perms.read === "team") {
+  let skipPerRecordCheck = skipUserRbac;
+  if (!skipUserRbac && schema.teamField && perms.read === "team") {
     const filterCol = schema.teamField === "_rowId" ? "_row_id" : columns.find((c) => c.name === schema.teamField)?.id ?? columnId(schema.teamField);
     const teamIds = preloadUserTeamIds(ctx, userId);
     if (teamIds && teamIds.length > 0) {
@@ -2128,7 +2128,7 @@ function executeTool(ctx, toolName, params, userId, userRole, skipUserRbac) {
         orderDir: params.orderDir,
         limit: params.limit
       };
-      const records = executeQuery(ctx, query, userId, userRole);
+      const records = executeQuery(ctx, query, userId, userRole, skipUserRbac);
       return { success: true, data: { records, count: records.length } };
     }
     case "records.get": {