deepspace 0.30.0 → 0.30.2

package/dist/server.d.ts

@@ -531,6 +531,26 @@ interface YjsLeavePayload {
     fieldName: string;
 }
 
+/**
+ * Platform API error normalization — the one chokepoint that turns the
+ * api-worker's error envelope into a render-safe + branch-safe shape.
+ *
+ * The platform emits errors as `{ error: <machine slug>, message?: <human>,
+ * ...details }` (e.g. 402 `{ error: 'insufficient_credits', message:
+ * 'Insufficient credits.', availableCredits, requiredCredits }`; some routes
+ * send the bare slug with no `message` at all, e.g. 409
+ * `{ error: 'owner_connect_not_ready' }`). Consumers must never show the slug
+ * to a person or make an agent parse the sentence — this module separates the
+ * two once, for the integration client, server actions, billing hooks, and the
+ * CLI.
+ */
+/** One structured validation issue (Zod shape) from a `validation_failed` response. */
+interface ApiErrorIssue {
+    path?: string[];
+    message: string;
+    code?: string;
+}
+
 /**
  * Server Action Types
  *
@@ -555,7 +575,16 @@ type ActionResult<TData = unknown> = {
 } | {
     success: false;
     data?: never;
+    /** Human-readable error, safe to render directly. */
     error: string;
+    /** Machine slug for branching, when the failing tool supplied one. */
+    code?: string;
+    /** HTTP status from an upstream platform request, when applicable. */
+    status?: number;
+    /** Structured fields supplied with the error response. */
+    details?: Record<string, unknown>;
+    /** Validation issues supplied with a `validation_failed` response. */
+    issues?: ApiErrorIssue[];
 };
 /** Shape of the data field for `tools.query`. */
 interface QueryActionData<T = Record<string, unknown>> {
@@ -610,7 +639,9 @@ interface ActionTools {
      * api-worker. On success, `result.data` is the integration's response
      * body directly — there is no `.response` wrapper. So an OpenAI call
      * yields `result.data.choices`, a Freepik image call yields
-     * `result.data.images`, etc.
+     * `result.data.images`, etc. On failure, `result.error` is human-readable;
+     * branch on `result.code` and inspect `status`, `details`, or `issues` when
+     * present.
      */
     integration<T = unknown>(endpoint: string, data?: unknown): Promise<ActionResult<T>>;
     /**

package/dist/worker.d.ts

@@ -2915,6 +2915,48 @@ declare function isFilesVerbPath(method: string, subpath: string): boolean;
  */
 declare function createScopedR2Handler(config: ScopedR2Config): ScopedR2Handler;
 
+/**
+ * Platform API error normalization — the one chokepoint that turns the
+ * api-worker's error envelope into a render-safe + branch-safe shape.
+ *
+ * The platform emits errors as `{ error: <machine slug>, message?: <human>,
+ * ...details }` (e.g. 402 `{ error: 'insufficient_credits', message:
+ * 'Insufficient credits.', availableCredits, requiredCredits }`; some routes
+ * send the bare slug with no `message` at all, e.g. 409
+ * `{ error: 'owner_connect_not_ready' }`). Consumers must never show the slug
+ * to a person or make an agent parse the sentence — this module separates the
+ * two once, for the integration client, server actions, billing hooks, and the
+ * CLI.
+ */
+/** One structured validation issue (Zod shape) from a `validation_failed` response. */
+interface ApiErrorIssue {
+    path?: string[];
+    message: string;
+    code?: string;
+}
+/** A platform error response, normalized. */
+interface NormalizedApiError {
+    /**
+     * Human-readable text, safe to render:
+     * `message ?? non-slug error ?? humanized(slug) ?? slug`.
+     */
+    error: string;
+    /** The machine slug (e.g. 'insufficient_credits') for branching — never render it. */
+    code?: string;
+    /** HTTP status of the response; 0 when no HTTP response arrived (transport failure). */
+    status: number;
+    /** Structured fields the server sent alongside the error (e.g. `availableCredits`). */
+    details?: Record<string, unknown>;
+    /** Zod issues accompanying a `validation_failed` response. */
+    issues?: ApiErrorIssue[];
+}
+/**
+ * Normalize a platform error body (parsed JSON, or anything else) plus its
+ * HTTP status into a {@link NormalizedApiError}. Pass status 0 for failures
+ * that never produced an HTTP response.
+ */
+declare function normalizeApiError(status: number, body: unknown): NormalizedApiError;
+
 /**
  * Server Action Types
  *
@@ -2939,7 +2981,16 @@ type ActionResult<TData = unknown> = {
 } | {
     success: false;
     data?: never;
+    /** Human-readable error, safe to render directly. */
     error: string;
+    /** Machine slug for branching, when the failing tool supplied one. */
+    code?: string;
+    /** HTTP status from an upstream platform request, when applicable. */
+    status?: number;
+    /** Structured fields supplied with the error response. */
+    details?: Record<string, unknown>;
+    /** Validation issues supplied with a `validation_failed` response. */
+    issues?: ApiErrorIssue[];
 };
 /** Shape of the data field for `tools.query`. */
 interface QueryActionData<T = Record<string, unknown>> {
@@ -2994,7 +3045,9 @@ interface ActionTools {
      * api-worker. On success, `result.data` is the integration's response
      * body directly — there is no `.response` wrapper. So an OpenAI call
      * yields `result.data.choices`, a Freepik image call yields
-     * `result.data.images`, etc.
+     * `result.data.images`, etc. On failure, `result.error` is human-readable;
+     * branch on `result.code` and inspect `status`, `details`, or `issues` when
+     * present.
      */
     integration<T = unknown>(endpoint: string, data?: unknown): Promise<ActionResult<T>>;
     /**
@@ -5237,15 +5290,11 @@ declare function registerAgentToolRoutes<Env extends AgentToolRouteEnv>(app: Hon
     Bindings: Env;
 }>, options: AgentToolRouteOptions<Env>): void;
 
-/**
- * First-party non-app origins allowed as agent targets on the production app
- * domain. The token minter and the CLI must agree on this policy, so both the
- * set AND the "is production" predicate (appDomain === PRODUCTION_APP_DOMAIN)
- * live here — callers never re-derive either.
- */
+/** First-party non-app origins retained for callers using the legacy policy shape. */
 declare const PRODUCTION_OFFICIAL_AGENT_ORIGINS: readonly string[];
 interface AgentTargetPolicy {
     appDomain: string;
+    platformDomain?: string;
     allowLoopback?: boolean;
 }
 /** Normalize an agent target only when it is an exact trusted origin. */
@@ -5400,4 +5449,4 @@ declare const MAX_LOG_TEXT_LENGTH: number;
  */
 declare function workerErrorHandler(prefix: string, respond?: (c: Context) => Response): ErrorHandler;
 
-export { ACCOUNT_STORAGE_LIMIT_BYTES, ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID, ACTION_TOOLS_DELETE_WHERE_MIGRATION_ID, AGENT_TOKEN_SCOPE, AGENT_TOOL_REQUEST_BODY_CAP, AGENT_TOOL_RESPONSE_BODY_CAP, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, ANONYMOUS_USER_ID_PREFIX, APP_ID_RE, APP_LOG_EVENT_KEYS, APP_NAME_RULES, ASSET_NOT_FOUND_HANDLING_VALUES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type AgentTargetPolicy, type AgentToolAccessResult, type AgentToolRouteEnv, type AgentToolRouteOptions, type ApiWorkerEnv, type AppLogEvent, type AppLogEventKey, type AppLogsResponse, type AppMembership, type AppMigrationIdsValidation, type AppNameResolution, type AppNameValidation, type AssetNotFoundHandling, type AuthWorkerEnv, Awareness, type AwarenessState, type AwarenessStates, BASE_USERS_SCHEMA, BROWSER_PROXY_ROUTES, BUILD_INJECTED_APP_ID_MIGRATION_ID, BUILT_IN_TOOLS, type BaseMessage, BaseRoom, type BindingJsonValue, CHANNELS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, COST_RATES, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type ClientMessage, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConnectionAttachment, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEEPSPACE_AGENT_PROFILES, DEEPSPACE_AI_DEFAULTS, DEEPSPACE_AI_MODELS, DEEPSPACE_MODEL_CATALOG_PROVENANCE, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, type DOBindings, type DOManifest, type DOManifestEntry, type DeepSpaceAIEnv, type DeepSpaceAIModel, type DeepSpaceAIModelId, type DeepSpaceAIOptions, type DeepSpaceAIProvider, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, type DeepSpaceAgentProfile, DeepSpaceAgentProfileError, type DeepSpaceAgentProfileId, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAgentSupport, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DeepSpaceDocumentationRouteEnv, type DeepSpaceDocumentationRouteOptions, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, type GetActionData, type HandlerContext, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, type KnowledgeAddOptions, type KnowledgeAddResult, type KnowledgeClient, type KnowledgeEnv, KnowledgeError, type KnowledgeItem, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeSearchChunk, type KnowledgeSearchOptions, type KnowledgeSearchResult, type KnowledgeStatus, LOG_LEVELS, type LogLevel, MAX_APP_FILE_BYTES, MAX_BINDING_NAME_LENGTH, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_ENV_VAR_BYTES, MAX_LOG_TEXT_LENGTH, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type MessageHandlers, type MsgType, type MutateActionData, PRODUCTION_OFFICIAL_AGENT_ORIGINS, type PermissionContext, type PermissionLevel, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type ProtocolMessage, type ProxyRoute, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RECORD_NOT_FOUND, REGISTRY_INSTANCE, RELEASE_STAMP_PATH, REPO_STORE_LIMIT_BYTES, REQUIRED_COMPATIBILITY_FLAGS, RESERVED_BINDING_NAMES, RESERVED_RUN_WORKER_FIRST, RESOURCE_ID_RE, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_DEFAULT, RecordRoom, type RecordRoomConfig, RegistryClientError, type ResolvedColumn, type ResolvedDeepSpaceAgentModel, type RolePermissions, type RunMigrationsResult, SDK_RUN_WORKER_FIRST, SECRET_NAME_RE, SECURE_ROOM_BOUNDARIES_MIGRATION_ID, SESSION_COOKIE, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTIONS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedKnowledgeClient, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type ServerMessage, type StorageAdmission, type StoredRecord, type Summarizer, type SyncResult, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, UNDECLARED_ASSET_NOT_FOUND_HANDLING, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserToolExecutorEnv, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKER_OWNED_NOT_FOUND_MIGRATION_ID, YjsRoom, agentTokenIssuer, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, armCronRoom, authWorkerFetch, authenticatedRoomRequest, bindingManifestFromOutputConfig, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, clientBuild, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDecoder, createDeepSpaceAI, createDeepSpaceAuth, createEncoder, createScopedR2Handler, createUserToolExecutor, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, enqueueJob, epochSeconds, folderFilter, formatBytes, getChat, getDeepSpaceAIModel, getMessageType, getRolePermissions, handleAwarenessMessage, handleSyncMessage, hasContent, isAnonymousUserId, isAssetNotFoundHandling, isAutoProvision, isFilesVerbPath, isOwner, isPlatformReservedPath, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, knowledge, lintSchema, lintSchemaSet, lintSchemas, listDeepSpaceAgentModels, loadMessages, logEventText, loggableError, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, noopPermissionContext, normalizeAgentTargetOrigin, normalizeKnowledgeFolder, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, readVarUint, readVarUint8Array, registerAgentToolRoutes, registerDeepSpaceDocumentation, registryErrorJson, registryStub, resolveAppMembership, resolveAppName, resolveAppRole, resolveColumn, resolveCompatibilityFlags, resolveDeepSpaceAgentModel, rowToData, runMigrations, serverBuild, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, toUint8Array, totalChars, truncateLogText, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppMigrationIds, validateAppName, validateBindingManifest, validateDoManifest, verifyAgentToken, verifyJwt, workerErrorHandler, writeVarUint, writeVarUint8Array };
+export { ACCOUNT_STORAGE_LIMIT_BYTES, ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID, ACTION_TOOLS_DELETE_WHERE_MIGRATION_ID, AGENT_TOKEN_SCOPE, AGENT_TOOL_REQUEST_BODY_CAP, AGENT_TOOL_RESPONSE_BODY_CAP, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, ANONYMOUS_USER_ID_PREFIX, APP_ID_RE, APP_LOG_EVENT_KEYS, APP_NAME_RULES, ASSET_NOT_FOUND_HANDLING_VALUES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type AgentTargetPolicy, type AgentToolAccessResult, type AgentToolRouteEnv, type AgentToolRouteOptions, type ApiErrorIssue, type ApiWorkerEnv, type AppLogEvent, type AppLogEventKey, type AppLogsResponse, type AppMembership, type AppMigrationIdsValidation, type AppNameResolution, type AppNameValidation, type AssetNotFoundHandling, type AuthWorkerEnv, Awareness, type AwarenessState, type AwarenessStates, BASE_USERS_SCHEMA, BROWSER_PROXY_ROUTES, BUILD_INJECTED_APP_ID_MIGRATION_ID, BUILT_IN_TOOLS, type BaseMessage, BaseRoom, type BindingJsonValue, CHANNELS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, COST_RATES, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type ClientMessage, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConnectionAttachment, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEEPSPACE_AGENT_PROFILES, DEEPSPACE_AI_DEFAULTS, DEEPSPACE_AI_MODELS, DEEPSPACE_MODEL_CATALOG_PROVENANCE, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, type DOBindings, type DOManifest, type DOManifestEntry, type DeepSpaceAIEnv, type DeepSpaceAIModel, type DeepSpaceAIModelId, type DeepSpaceAIOptions, type DeepSpaceAIProvider, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, type DeepSpaceAgentProfile, DeepSpaceAgentProfileError, type DeepSpaceAgentProfileId, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAgentSupport, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DeepSpaceDocumentationRouteEnv, type DeepSpaceDocumentationRouteOptions, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, type GetActionData, type HandlerContext, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, type KnowledgeAddOptions, type KnowledgeAddResult, type KnowledgeClient, type KnowledgeEnv, KnowledgeError, type KnowledgeItem, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeSearchChunk, type KnowledgeSearchOptions, type KnowledgeSearchResult, type KnowledgeStatus, LOG_LEVELS, type LogLevel, MAX_APP_FILE_BYTES, MAX_BINDING_NAME_LENGTH, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_ENV_VAR_BYTES, MAX_LOG_TEXT_LENGTH, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type MessageHandlers, type MsgType, type MutateActionData, type NormalizedApiError, PRODUCTION_OFFICIAL_AGENT_ORIGINS, type PermissionContext, type PermissionLevel, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type ProtocolMessage, type ProxyRoute, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RECORD_NOT_FOUND, REGISTRY_INSTANCE, RELEASE_STAMP_PATH, REPO_STORE_LIMIT_BYTES, REQUIRED_COMPATIBILITY_FLAGS, RESERVED_BINDING_NAMES, RESERVED_RUN_WORKER_FIRST, RESOURCE_ID_RE, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_DEFAULT, RecordRoom, type RecordRoomConfig, RegistryClientError, type ResolvedColumn, type ResolvedDeepSpaceAgentModel, type RolePermissions, type RunMigrationsResult, SDK_RUN_WORKER_FIRST, SECRET_NAME_RE, SECURE_ROOM_BOUNDARIES_MIGRATION_ID, SESSION_COOKIE, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTIONS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedKnowledgeClient, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type ServerMessage, type StorageAdmission, type StoredRecord, type Summarizer, type SyncResult, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, UNDECLARED_ASSET_NOT_FOUND_HANDLING, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserToolExecutorEnv, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKER_OWNED_NOT_FOUND_MIGRATION_ID, YjsRoom, agentTokenIssuer, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, armCronRoom, authWorkerFetch, authenticatedRoomRequest, bindingManifestFromOutputConfig, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, clientBuild, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDecoder, createDeepSpaceAI, createDeepSpaceAuth, createEncoder, createScopedR2Handler, createUserToolExecutor, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, enqueueJob, epochSeconds, folderFilter, formatBytes, getChat, getDeepSpaceAIModel, getMessageType, getRolePermissions, handleAwarenessMessage, handleSyncMessage, hasContent, isAnonymousUserId, isAssetNotFoundHandling, isAutoProvision, isFilesVerbPath, isOwner, isPlatformReservedPath, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, knowledge, lintSchema, lintSchemaSet, lintSchemas, listDeepSpaceAgentModels, loadMessages, logEventText, loggableError, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, noopPermissionContext, normalizeAgentTargetOrigin, normalizeApiError, normalizeKnowledgeFolder, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, readVarUint, readVarUint8Array, registerAgentToolRoutes, registerDeepSpaceDocumentation, registryErrorJson, registryStub, resolveAppMembership, resolveAppName, resolveAppRole, resolveColumn, resolveCompatibilityFlags, resolveDeepSpaceAgentModel, rowToData, runMigrations, serverBuild, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, toUint8Array, totalChars, truncateLogText, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppMigrationIds, validateAppName, validateBindingManifest, validateDoManifest, verifyAgentToken, verifyJwt, workerErrorHandler, writeVarUint, writeVarUint8Array };

package/dist/worker.js

@@ -10537,10 +10537,13 @@ function normalizeAgentTargetOrigin(value, policy) {
     return policy.allowLoopback && ["http:", "https:"].includes(url.protocol) ? url.origin : null;
   }
   if (url.protocol !== "https:" || url.port) return null;
-  if (policy.appDomain.toLowerCase() === PRODUCTION_APP_DOMAIN && PRODUCTION_OFFICIAL_AGENT_ORIGINS.includes(url.origin)) {
+  const appDomain = policy.appDomain.toLowerCase();
+  const platformDomain = policy.platformDomain?.toLowerCase();
+  const officialAdminOrigin = platformDomain ? `https://admin.${platformDomain}` : appDomain === PRODUCTION_APP_DOMAIN ? PRODUCTION_OFFICIAL_AGENT_ORIGINS[0] : null;
+  if (url.origin === officialAdminOrigin) {
     return url.origin;
   }
-  const suffix = `.${policy.appDomain.toLowerCase()}`;
+  const suffix = `.${appDomain}`;
   if (!hostname.endsWith(suffix)) return null;
   const label = hostname.slice(0, -suffix.length);
   return !label.includes(".") && validateAppName(label).valid ? url.origin : null;
@@ -10549,6 +10552,49 @@ function normalizeAgentTargetOrigin(value, policy) {
 // src/shared/auth-session.ts
 var SESSION_COOKIE = "__Secure-better-auth.session_token";
 
+// src/shared/api-error.ts
+var SLUG_RE = /^[a-z0-9]+(?:[_.-][a-z0-9]+)*$/;
+var HUMAN_MESSAGES = {
+  owner_connect_not_ready: "This app isn't ready to accept payments yet \u2014 the app owner needs to finish payment setup.",
+  invalid_json: "The request body was not valid JSON.",
+  invalid_body: "The request body is invalid.",
+  invalid_product_id: "Invalid product id.",
+  duplicate_product_id: "Duplicate product id.",
+  unknown_product: "Unknown product.",
+  too_many_products: "Too many products declared.",
+  invalid_amount: "Invalid amount.",
+  invalid_name: "Invalid product name.",
+  invalid_description: "Invalid product description.",
+  unsupported_currency: "Unsupported currency.",
+  unknown_app: "Unknown app.",
+  not_app_owner: "Only the app owner (or a collaborator) can do this.",
+  invalid_return_url: "Invalid return URL.",
+  invalid_cancel_url: "Invalid cancel URL.",
+  unknown_plan: "Unknown subscription plan.",
+  unknown_price: "No price is configured for that billing interval.",
+  no_subscription: "No subscription found for this account."
+};
+function normalizeApiError(status, body) {
+  const payload = body !== null && typeof body === "object" ? body : {};
+  const rawError = typeof payload.error === "string" ? payload.error : void 0;
+  const message = typeof payload.message === "string" ? payload.message : void 0;
+  const humanError = rawError !== void 0 && !SLUG_RE.test(rawError) ? rawError : void 0;
+  const code = rawError !== void 0 && SLUG_RE.test(rawError) ? rawError : typeof payload.code === "string" && SLUG_RE.test(payload.code) ? payload.code : void 0;
+  const details = {};
+  for (const [key, value] of Object.entries(payload)) {
+    if (key === "success" || key === "error" || key === "message" || key === "issues" || key === "code")
+      continue;
+    details[key] = value;
+  }
+  return {
+    error: message ?? humanError ?? (code !== void 0 ? HUMAN_MESSAGES[code] : void 0) ?? rawError ?? `Request failed (${status})`,
+    ...code !== void 0 ? { code } : {},
+    status,
+    ...Object.keys(details).length > 0 ? { details } : {},
+    ...Array.isArray(payload.issues) ? { issues: payload.issues } : {}
+  };
+}
+
 // src/server/worker-error.ts
 function workerErrorHandler(prefix, respond = (c) => c.text("Internal Server Error", 500)) {
   return (err, c) => {
@@ -10736,6 +10782,7 @@ export {
   mintUlid,
   noopPermissionContext,
   normalizeAgentTargetOrigin,
+  normalizeApiError,
   normalizeKnowledgeFolder,
   parseQuotaLimit,
   platformCorsPatterns,