deepspace 0.30.1 → 0.31.0

package/dist/worker.d.ts

@@ -2253,6 +2253,10 @@ declare const BUILD_INJECTED_APP_ID_MIGRATION_ID = "2026-08-build-injected-app-i
  *  session has none) instead of crashing on a non-null assertion, and the
  *  file states the trust model actions run under. */
 declare const ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID = "2026-08-action-routes-bearer-guard";
+/** The files proxy identifies a header-less same-origin read (an `<img>`,
+ *  `<audio>`, or `<video>` load) by the app-origin session cookie, so private
+ *  file URLs render for the signed-in user without tokens or signed URLs. */
+declare const FILES_SESSION_COOKIE_READS_MIGRATION_ID = "2026-09-files-session-cookie-reads";
 type AppMigrationIdsValidation = {
     valid: true;
     ids: string[];
@@ -2846,7 +2850,8 @@ interface StorageAdmission {
  *   POST   /api/files/multipart/complete  → assemble the parts
  *   DELETE /api/files/multipart           → abandon a chunked upload
  *   GET    /api/files                     → list   (prefix + optional user prefix)
- *   GET    /api/files/:key                → download (validated against prefix)
+ *   GET    /api/files/:key                → download (validated against prefix; Range-aware)
+ *   HEAD   /api/files/:key                → the download's headers, no body
  *   DELETE /api/files/:key                → delete   (validated against prefix)
  *
  * ## One transport discipline
@@ -2915,6 +2920,48 @@ declare function isFilesVerbPath(method: string, subpath: string): boolean;
  */
 declare function createScopedR2Handler(config: ScopedR2Config): ScopedR2Handler;
 
+/**
+ * Platform API error normalization — the one chokepoint that turns the
+ * api-worker's error envelope into a render-safe + branch-safe shape.
+ *
+ * The platform emits errors as `{ error: <machine slug>, message?: <human>,
+ * ...details }` (e.g. 402 `{ error: 'insufficient_credits', message:
+ * 'Insufficient credits.', availableCredits, requiredCredits }`; some routes
+ * send the bare slug with no `message` at all, e.g. 409
+ * `{ error: 'owner_connect_not_ready' }`). Consumers must never show the slug
+ * to a person or make an agent parse the sentence — this module separates the
+ * two once, for the integration client, server actions, billing hooks, and the
+ * CLI.
+ */
+/** One structured validation issue (Zod shape) from a `validation_failed` response. */
+interface ApiErrorIssue {
+    path?: string[];
+    message: string;
+    code?: string;
+}
+/** A platform error response, normalized. */
+interface NormalizedApiError {
+    /**
+     * Human-readable text, safe to render:
+     * `message ?? non-slug error ?? humanized(slug) ?? slug`.
+     */
+    error: string;
+    /** The machine slug (e.g. 'insufficient_credits') for branching — never render it. */
+    code?: string;
+    /** HTTP status of the response; 0 when no HTTP response arrived (transport failure). */
+    status: number;
+    /** Structured fields the server sent alongside the error (e.g. `availableCredits`). */
+    details?: Record<string, unknown>;
+    /** Zod issues accompanying a `validation_failed` response. */
+    issues?: ApiErrorIssue[];
+}
+/**
+ * Normalize a platform error body (parsed JSON, or anything else) plus its
+ * HTTP status into a {@link NormalizedApiError}. Pass status 0 for failures
+ * that never produced an HTTP response.
+ */
+declare function normalizeApiError(status: number, body: unknown): NormalizedApiError;
+
 /**
  * Server Action Types
  *
@@ -2939,7 +2986,16 @@ type ActionResult<TData = unknown> = {
 } | {
     success: false;
     data?: never;
+    /** Human-readable error, safe to render directly. */
     error: string;
+    /** Machine slug for branching, when the failing tool supplied one. */
+    code?: string;
+    /** HTTP status from an upstream platform request, when applicable. */
+    status?: number;
+    /** Structured fields supplied with the error response. */
+    details?: Record<string, unknown>;
+    /** Validation issues supplied with a `validation_failed` response. */
+    issues?: ApiErrorIssue[];
 };
 /** Shape of the data field for `tools.query`. */
 interface QueryActionData<T = Record<string, unknown>> {
@@ -2994,7 +3050,9 @@ interface ActionTools {
      * api-worker. On success, `result.data` is the integration's response
      * body directly — there is no `.response` wrapper. So an OpenAI call
      * yields `result.data.choices`, a Freepik image call yields
-     * `result.data.images`, etc.
+     * `result.data.images`, etc. On failure, `result.error` is human-readable;
+     * branch on `result.code` and inspect `status`, `details`, or `issues` when
+     * present.
      */
     integration<T = unknown>(endpoint: string, data?: unknown): Promise<ActionResult<T>>;
     /**
@@ -4045,6 +4103,34 @@ interface VerifyOutcome {
  */
 declare function verifyJwt(config: JwtVerifierConfig, token: string | null | undefined): Promise<VerifyOutcome>;
 
+/**
+ * Session-cookie identity for header-less file reads.
+ *
+ * `<img>`, `<audio>`, `<video>`, and `<a href>` cannot send `Authorization`,
+ * but the browser attaches the app-origin Better Auth session cookie to every
+ * same-origin load. This exchanges that cookie for the same 15-minute JWT the
+ * client already holds and returns only the verified identity.
+ *
+ * Bearer always wins: this applies only when no `Authorization` header is
+ * present, only to GET/HEAD, and only when `Sec-Fetch-Site` is `same-origin`
+ * or `none`. `app.space` is not on the Public Suffix List, so a sibling
+ * `evil.app.space` is same-SITE and `SameSite=Lax` alone would let its
+ * `<img src>` carry the victim's cookie; `Sec-Fetch-Site` cannot be set by
+ * page script. A browser that omits it (Safari before 16.4) and a cross-site
+ * top-level link both get 401 by design.
+ */
+
+type SessionReadEnv = AuthWorkerEnv & {
+    AUTH_JWT_PUBLIC_KEY: string;
+    AUTH_JWT_ISSUER: string;
+};
+/**
+ * Identify a same-origin GET/HEAD by the app-origin session cookie. Returns
+ * `null` — never throws — whenever the request does not qualify or the
+ * exchange fails. Use it only as the fallback after bearer verification.
+ */
+declare function resolveSessionReadAuth(req: Request, env: SessionReadEnv): Promise<VerifyResult | null>;
+
 declare const AGENT_TOKEN_SCOPE = "agent";
 /** A separate issuer keeps agent credentials invalid at ordinary platform APIs. */
 declare function agentTokenIssuer(issuer: string): string;
@@ -5237,15 +5323,11 @@ declare function registerAgentToolRoutes<Env extends AgentToolRouteEnv>(app: Hon
     Bindings: Env;
 }>, options: AgentToolRouteOptions<Env>): void;
 
-/**
- * First-party non-app origins allowed as agent targets on the production app
- * domain. The token minter and the CLI must agree on this policy, so both the
- * set AND the "is production" predicate (appDomain === PRODUCTION_APP_DOMAIN)
- * live here — callers never re-derive either.
- */
+/** First-party non-app origins retained for callers using the legacy policy shape. */
 declare const PRODUCTION_OFFICIAL_AGENT_ORIGINS: readonly string[];
 interface AgentTargetPolicy {
     appDomain: string;
+    platformDomain?: string;
     allowLoopback?: boolean;
 }
 /** Normalize an agent target only when it is an exact trusted origin. */
@@ -5400,4 +5482,4 @@ declare const MAX_LOG_TEXT_LENGTH: number;
  */
 declare function workerErrorHandler(prefix: string, respond?: (c: Context) => Response): ErrorHandler;
 
-export { ACCOUNT_STORAGE_LIMIT_BYTES, ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID, ACTION_TOOLS_DELETE_WHERE_MIGRATION_ID, AGENT_TOKEN_SCOPE, AGENT_TOOL_REQUEST_BODY_CAP, AGENT_TOOL_RESPONSE_BODY_CAP, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, ANONYMOUS_USER_ID_PREFIX, APP_ID_RE, APP_LOG_EVENT_KEYS, APP_NAME_RULES, ASSET_NOT_FOUND_HANDLING_VALUES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type AgentTargetPolicy, type AgentToolAccessResult, type AgentToolRouteEnv, type AgentToolRouteOptions, type ApiWorkerEnv, type AppLogEvent, type AppLogEventKey, type AppLogsResponse, type AppMembership, type AppMigrationIdsValidation, type AppNameResolution, type AppNameValidation, type AssetNotFoundHandling, type AuthWorkerEnv, Awareness, type AwarenessState, type AwarenessStates, BASE_USERS_SCHEMA, BROWSER_PROXY_ROUTES, BUILD_INJECTED_APP_ID_MIGRATION_ID, BUILT_IN_TOOLS, type BaseMessage, BaseRoom, type BindingJsonValue, CHANNELS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, COST_RATES, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type ClientMessage, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConnectionAttachment, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEEPSPACE_AGENT_PROFILES, DEEPSPACE_AI_DEFAULTS, DEEPSPACE_AI_MODELS, DEEPSPACE_MODEL_CATALOG_PROVENANCE, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, type DOBindings, type DOManifest, type DOManifestEntry, type DeepSpaceAIEnv, type DeepSpaceAIModel, type DeepSpaceAIModelId, type DeepSpaceAIOptions, type DeepSpaceAIProvider, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, type DeepSpaceAgentProfile, DeepSpaceAgentProfileError, type DeepSpaceAgentProfileId, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAgentSupport, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DeepSpaceDocumentationRouteEnv, type DeepSpaceDocumentationRouteOptions, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, type GetActionData, type HandlerContext, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, type KnowledgeAddOptions, type KnowledgeAddResult, type KnowledgeClient, type KnowledgeEnv, KnowledgeError, type KnowledgeItem, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeSearchChunk, type KnowledgeSearchOptions, type KnowledgeSearchResult, type KnowledgeStatus, LOG_LEVELS, type LogLevel, MAX_APP_FILE_BYTES, MAX_BINDING_NAME_LENGTH, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_ENV_VAR_BYTES, MAX_LOG_TEXT_LENGTH, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type MessageHandlers, type MsgType, type MutateActionData, PRODUCTION_OFFICIAL_AGENT_ORIGINS, type PermissionContext, type PermissionLevel, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type ProtocolMessage, type ProxyRoute, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RECORD_NOT_FOUND, REGISTRY_INSTANCE, RELEASE_STAMP_PATH, REPO_STORE_LIMIT_BYTES, REQUIRED_COMPATIBILITY_FLAGS, RESERVED_BINDING_NAMES, RESERVED_RUN_WORKER_FIRST, RESOURCE_ID_RE, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_DEFAULT, RecordRoom, type RecordRoomConfig, RegistryClientError, type ResolvedColumn, type ResolvedDeepSpaceAgentModel, type RolePermissions, type RunMigrationsResult, SDK_RUN_WORKER_FIRST, SECRET_NAME_RE, SECURE_ROOM_BOUNDARIES_MIGRATION_ID, SESSION_COOKIE, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTIONS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedKnowledgeClient, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type ServerMessage, type StorageAdmission, type StoredRecord, type Summarizer, type SyncResult, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, UNDECLARED_ASSET_NOT_FOUND_HANDLING, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserToolExecutorEnv, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKER_OWNED_NOT_FOUND_MIGRATION_ID, YjsRoom, agentTokenIssuer, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, armCronRoom, authWorkerFetch, authenticatedRoomRequest, bindingManifestFromOutputConfig, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, clientBuild, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDecoder, createDeepSpaceAI, createDeepSpaceAuth, createEncoder, createScopedR2Handler, createUserToolExecutor, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, enqueueJob, epochSeconds, folderFilter, formatBytes, getChat, getDeepSpaceAIModel, getMessageType, getRolePermissions, handleAwarenessMessage, handleSyncMessage, hasContent, isAnonymousUserId, isAssetNotFoundHandling, isAutoProvision, isFilesVerbPath, isOwner, isPlatformReservedPath, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, knowledge, lintSchema, lintSchemaSet, lintSchemas, listDeepSpaceAgentModels, loadMessages, logEventText, loggableError, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, noopPermissionContext, normalizeAgentTargetOrigin, normalizeKnowledgeFolder, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, readVarUint, readVarUint8Array, registerAgentToolRoutes, registerDeepSpaceDocumentation, registryErrorJson, registryStub, resolveAppMembership, resolveAppName, resolveAppRole, resolveColumn, resolveCompatibilityFlags, resolveDeepSpaceAgentModel, rowToData, runMigrations, serverBuild, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, toUint8Array, totalChars, truncateLogText, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppMigrationIds, validateAppName, validateBindingManifest, validateDoManifest, verifyAgentToken, verifyJwt, workerErrorHandler, writeVarUint, writeVarUint8Array };
+export { ACCOUNT_STORAGE_LIMIT_BYTES, ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID, ACTION_TOOLS_DELETE_WHERE_MIGRATION_ID, AGENT_TOKEN_SCOPE, AGENT_TOOL_REQUEST_BODY_CAP, AGENT_TOOL_RESPONSE_BODY_CAP, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, ANONYMOUS_USER_ID_PREFIX, APP_ID_RE, APP_LOG_EVENT_KEYS, APP_NAME_RULES, ASSET_NOT_FOUND_HANDLING_VALUES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type AgentTargetPolicy, type AgentToolAccessResult, type AgentToolRouteEnv, type AgentToolRouteOptions, type ApiErrorIssue, type ApiWorkerEnv, type AppLogEvent, type AppLogEventKey, type AppLogsResponse, type AppMembership, type AppMigrationIdsValidation, type AppNameResolution, type AppNameValidation, type AssetNotFoundHandling, type AuthWorkerEnv, Awareness, type AwarenessState, type AwarenessStates, BASE_USERS_SCHEMA, BROWSER_PROXY_ROUTES, BUILD_INJECTED_APP_ID_MIGRATION_ID, BUILT_IN_TOOLS, type BaseMessage, BaseRoom, type BindingJsonValue, CHANNELS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, COST_RATES, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type ClientMessage, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConnectionAttachment, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEEPSPACE_AGENT_PROFILES, DEEPSPACE_AI_DEFAULTS, DEEPSPACE_AI_MODELS, DEEPSPACE_MODEL_CATALOG_PROVENANCE, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, type DOBindings, type DOManifest, type DOManifestEntry, type DeepSpaceAIEnv, type DeepSpaceAIModel, type DeepSpaceAIModelId, type DeepSpaceAIOptions, type DeepSpaceAIProvider, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, type DeepSpaceAgentProfile, DeepSpaceAgentProfileError, type DeepSpaceAgentProfileId, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAgentSupport, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DeepSpaceDocumentationRouteEnv, type DeepSpaceDocumentationRouteOptions, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, FILES_SESSION_COOKIE_READS_MIGRATION_ID, type GetActionData, type HandlerContext, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, type KnowledgeAddOptions, type KnowledgeAddResult, type KnowledgeClient, type KnowledgeEnv, KnowledgeError, type KnowledgeItem, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeSearchChunk, type KnowledgeSearchOptions, type KnowledgeSearchResult, type KnowledgeStatus, LOG_LEVELS, type LogLevel, MAX_APP_FILE_BYTES, MAX_BINDING_NAME_LENGTH, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_ENV_VAR_BYTES, MAX_LOG_TEXT_LENGTH, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type MessageHandlers, type MsgType, type MutateActionData, type NormalizedApiError, PRODUCTION_OFFICIAL_AGENT_ORIGINS, type PermissionContext, type PermissionLevel, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type ProtocolMessage, type ProxyRoute, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RECORD_NOT_FOUND, REGISTRY_INSTANCE, RELEASE_STAMP_PATH, REPO_STORE_LIMIT_BYTES, REQUIRED_COMPATIBILITY_FLAGS, RESERVED_BINDING_NAMES, RESERVED_RUN_WORKER_FIRST, RESOURCE_ID_RE, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_DEFAULT, RecordRoom, type RecordRoomConfig, RegistryClientError, type ResolvedColumn, type ResolvedDeepSpaceAgentModel, type RolePermissions, type RunMigrationsResult, SDK_RUN_WORKER_FIRST, SECRET_NAME_RE, SECURE_ROOM_BOUNDARIES_MIGRATION_ID, SESSION_COOKIE, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTIONS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedKnowledgeClient, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type ServerMessage, type StorageAdmission, type StoredRecord, type Summarizer, type SyncResult, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, UNDECLARED_ASSET_NOT_FOUND_HANDLING, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserToolExecutorEnv, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKER_OWNED_NOT_FOUND_MIGRATION_ID, YjsRoom, agentTokenIssuer, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, armCronRoom, authWorkerFetch, authenticatedRoomRequest, bindingManifestFromOutputConfig, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, clientBuild, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDecoder, createDeepSpaceAI, createDeepSpaceAuth, createEncoder, createScopedR2Handler, createUserToolExecutor, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, enqueueJob, epochSeconds, folderFilter, formatBytes, getChat, getDeepSpaceAIModel, getMessageType, getRolePermissions, handleAwarenessMessage, handleSyncMessage, hasContent, isAnonymousUserId, isAssetNotFoundHandling, isAutoProvision, isFilesVerbPath, isOwner, isPlatformReservedPath, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, knowledge, lintSchema, lintSchemaSet, lintSchemas, listDeepSpaceAgentModels, loadMessages, logEventText, loggableError, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, noopPermissionContext, normalizeAgentTargetOrigin, normalizeApiError, normalizeKnowledgeFolder, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, readVarUint, readVarUint8Array, registerAgentToolRoutes, registerDeepSpaceDocumentation, registryErrorJson, registryStub, resolveAppMembership, resolveAppName, resolveAppRole, resolveColumn, resolveCompatibilityFlags, resolveDeepSpaceAgentModel, resolveSessionReadAuth, rowToData, runMigrations, serverBuild, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, toUint8Array, totalChars, truncateLogText, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppMigrationIds, validateAppName, validateBindingManifest, validateDoManifest, verifyAgentToken, verifyJwt, workerErrorHandler, writeVarUint, writeVarUint8Array };

package/dist/worker.js

@@ -5794,6 +5794,7 @@ var SECURE_ROOM_BOUNDARIES_MIGRATION_ID = "2026-08-secure-room-boundaries";
 var ACTION_TOOLS_DELETE_WHERE_MIGRATION_ID = "2026-08-action-tools-delete-where";
 var BUILD_INJECTED_APP_ID_MIGRATION_ID = "2026-08-build-injected-app-id";
 var ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID = "2026-08-action-routes-bearer-guard";
+var FILES_SESSION_COOKIE_READS_MIGRATION_ID = "2026-09-files-session-cookie-reads";
 function validateAppMigrationIds(value) {
   if (!Array.isArray(value)) {
     return { valid: false, reason: "app migrations must be a JSON string array" };
@@ -6780,7 +6781,7 @@ function createScopedR2Handler(config) {
     if (!subpath && request2.method === "GET") {
       return handleList(bucket, prefix, excludedPrefixes, url, scope, auth);
     }
-    if (subpath && request2.method === "GET") {
+    if (subpath && (request2.method === "GET" || request2.method === "HEAD")) {
       if (!isKeyWithinScope(subpath, prefix, excludedPrefixes)) {
         return Response.json(
           { error: "Access denied: key outside scope" },
@@ -7387,11 +7388,64 @@ async function handleList(bucket, prefix, excludedPrefixes, url, scope, auth) {
     { headers: CORS_HEADERS4 }
   );
 }
+function parseByteRange(header, size) {
+  const [, first, last] = /^bytes=(\d*)-(\d*)$/.exec(header.trim()) ?? [];
+  if (first === void 0 || first === "" && last === "") return void 0;
+  const offset = first === "" ? Math.max(0, size - Number(last)) : Number(first);
+  if (offset >= size) return "unsatisfiable";
+  const end = first === "" || last === "" ? size - 1 : Math.min(Number(last), size - 1);
+  return end < offset ? void 0 : { offset, length: end - offset + 1 };
+}
 async function handleDownload(request2, bucket, key, scope) {
-  const object = await bucket.get(key);
-  if (!object) {
+  if (request2.method === "HEAD") {
+    const object = await bucket.head(key);
+    if (!object) {
+      return Response.json({ error: "File not found" }, { status: 404, headers: CORS_HEADERS4 });
+    }
+    const headers2 = downloadHeaders(object, key, scope);
+    if (scope === "app" && request2.headers.get("if-none-match") === object.httpEtag) {
+      return new Response(null, { status: 304, headers: headers2 });
+    }
+    headers2.set("Content-Length", String(object.size));
+    return new Response(null, { status: 200, headers: headers2 });
+  }
+  const rangeHeader = request2.headers.get("range");
+  if (rangeHeader === null) {
+    return wholeDownload(request2, await bucket.get(key), key, scope);
+  }
+  const head = await bucket.head(key);
+  if (!head) {
     return Response.json({ error: "File not found" }, { status: 404, headers: CORS_HEADERS4 });
   }
+  if (scope === "app" && request2.headers.get("if-none-match") === head.httpEtag) {
+    return new Response(null, { status: 304, headers: downloadHeaders(head, key, scope) });
+  }
+  const ifRange = request2.headers.get("if-range");
+  if (ifRange !== null && ifRange !== head.httpEtag) {
+    return wholeDownload(request2, await bucket.get(key), key, scope);
+  }
+  const range = parseByteRange(rangeHeader, head.size);
+  if (range === "unsatisfiable") {
+    const headers2 = { ...CORS_HEADERS4, "Content-Range": `bytes */${head.size}` };
+    return new Response(null, { status: 416, headers: headers2 });
+  }
+  if (!range) {
+    return wholeDownload(request2, await bucket.get(key), key, scope);
+  }
+  const conditional = await bucket.get(key, {
+    range,
+    onlyIf: { etagMatches: head.etag }
+  });
+  if (!conditional || !("body" in conditional)) {
+    return wholeDownload(request2, await bucket.get(key), key, scope);
+  }
+  const headers = downloadHeaders(conditional, key, scope);
+  const end = range.offset + range.length - 1;
+  headers.set("Content-Range", `bytes ${range.offset}-${end}/${conditional.size}`);
+  headers.set("Content-Length", String(range.length));
+  return new Response(conditional.body, { status: 206, headers });
+}
+function downloadHeaders(object, key, scope) {
   const headers = new Headers();
   const storedType = resolveMimeType(object.httpMetadata?.contentType ?? "");
   const mustDownload = DANGEROUS_MIME_TYPES.has(storedType);
@@ -7409,10 +7463,19 @@ async function handleDownload(request2, bucket, key, scope) {
     contentDisposition(originalName, mustDownload ? "attachment" : "inline")
   );
   if (mustDownload) headers.set("Content-Security-Policy", "sandbox; default-src 'none'");
+  headers.set("Accept-Ranges", "bytes");
+  return headers;
+}
+function wholeDownload(request2, object, key, scope) {
+  if (!object) {
+    return Response.json({ error: "File not found" }, { status: 404, headers: CORS_HEADERS4 });
+  }
+  const headers = downloadHeaders(object, key, scope);
   if (scope === "app" && request2.headers.get("if-none-match") === object.httpEtag) {
     return new Response(null, { status: 304, headers });
   }
-  return new Response(object.body, { headers });
+  headers.set("Content-Length", String(object.size));
+  return new Response(object.body, { status: 200, headers });
 }
 
 // src/server/utils/proxies.ts
@@ -10061,6 +10124,45 @@ async function verifyJwt(config, token) {
   }
 }
 
+// src/shared/auth-session.ts
+var SESSION_COOKIE = "__Secure-better-auth.session_token";
+
+// src/server/auth/sessionReadAuth.ts
+var TTL_MS = 5 * 6e4;
+var sessions = /* @__PURE__ */ new Map();
+async function exchange(session, env) {
+  try {
+    const res = await authWorkerFetch(env, "/api/auth/token", {
+      method: "POST",
+      headers: { Cookie: `${SESSION_COOKIE}=${session}` },
+      signal: AbortSignal.timeout(1e4)
+    });
+    const { token } = res.ok ? await res.json() : {};
+    if (typeof token !== "string") return null;
+    const config = { publicKey: env.AUTH_JWT_PUBLIC_KEY, issuer: env.AUTH_JWT_ISSUER };
+    return (await verifyJwt(config, token)).result;
+  } catch {
+    return null;
+  }
+}
+async function resolveSessionReadAuth(req, env) {
+  const site = req.headers.get("Sec-Fetch-Site");
+  if (req.method !== "GET" && req.method !== "HEAD") return null;
+  if (req.headers.has("Authorization") || site !== "same-origin" && site !== "none") return null;
+  const session = (req.headers.get("Cookie") ?? "").split(";").find((part) => part.trim().startsWith(`${SESSION_COOKIE}=`))?.trim().slice(SESSION_COOKIE.length + 1);
+  if (!session) return null;
+  const now = Date.now();
+  const cached = sessions.get(session);
+  if (cached && cached.expiresAt > now) return cached.promise;
+  if (sessions.size >= 500) sessions.clear();
+  const promise = exchange(session, env).then((result) => {
+    if (!result) sessions.delete(session);
+    return result;
+  });
+  sessions.set(session, { promise, expiresAt: now + TTL_MS });
+  return promise;
+}
+
 // src/server/auth/agentToken.ts
 var AGENT_TOKEN_SCOPE = "agent";
 function agentTokenIssuer(issuer) {
@@ -10537,17 +10639,60 @@ function normalizeAgentTargetOrigin(value, policy) {
     return policy.allowLoopback && ["http:", "https:"].includes(url.protocol) ? url.origin : null;
   }
   if (url.protocol !== "https:" || url.port) return null;
-  if (policy.appDomain.toLowerCase() === PRODUCTION_APP_DOMAIN && PRODUCTION_OFFICIAL_AGENT_ORIGINS.includes(url.origin)) {
+  const appDomain = policy.appDomain.toLowerCase();
+  const platformDomain = policy.platformDomain?.toLowerCase();
+  const officialAdminOrigin = platformDomain ? `https://admin.${platformDomain}` : appDomain === PRODUCTION_APP_DOMAIN ? PRODUCTION_OFFICIAL_AGENT_ORIGINS[0] : null;
+  if (url.origin === officialAdminOrigin) {
     return url.origin;
   }
-  const suffix = `.${policy.appDomain.toLowerCase()}`;
+  const suffix = `.${appDomain}`;
   if (!hostname.endsWith(suffix)) return null;
   const label = hostname.slice(0, -suffix.length);
   return !label.includes(".") && validateAppName(label).valid ? url.origin : null;
 }
 
-// src/shared/auth-session.ts
-var SESSION_COOKIE = "__Secure-better-auth.session_token";
+// src/shared/api-error.ts
+var SLUG_RE = /^[a-z0-9]+(?:[_.-][a-z0-9]+)*$/;
+var HUMAN_MESSAGES = {
+  owner_connect_not_ready: "This app isn't ready to accept payments yet \u2014 the app owner needs to finish payment setup.",
+  invalid_json: "The request body was not valid JSON.",
+  invalid_body: "The request body is invalid.",
+  invalid_product_id: "Invalid product id.",
+  duplicate_product_id: "Duplicate product id.",
+  unknown_product: "Unknown product.",
+  too_many_products: "Too many products declared.",
+  invalid_amount: "Invalid amount.",
+  invalid_name: "Invalid product name.",
+  invalid_description: "Invalid product description.",
+  unsupported_currency: "Unsupported currency.",
+  unknown_app: "Unknown app.",
+  not_app_owner: "Only the app owner (or a collaborator) can do this.",
+  invalid_return_url: "Invalid return URL.",
+  invalid_cancel_url: "Invalid cancel URL.",
+  unknown_plan: "Unknown subscription plan.",
+  unknown_price: "No price is configured for that billing interval.",
+  no_subscription: "No subscription found for this account."
+};
+function normalizeApiError(status, body) {
+  const payload = body !== null && typeof body === "object" ? body : {};
+  const rawError = typeof payload.error === "string" ? payload.error : void 0;
+  const message = typeof payload.message === "string" ? payload.message : void 0;
+  const humanError = rawError !== void 0 && !SLUG_RE.test(rawError) ? rawError : void 0;
+  const code = rawError !== void 0 && SLUG_RE.test(rawError) ? rawError : typeof payload.code === "string" && SLUG_RE.test(payload.code) ? payload.code : void 0;
+  const details = {};
+  for (const [key, value] of Object.entries(payload)) {
+    if (key === "success" || key === "error" || key === "message" || key === "issues" || key === "code")
+      continue;
+    details[key] = value;
+  }
+  return {
+    error: message ?? humanError ?? (code !== void 0 ? HUMAN_MESSAGES[code] : void 0) ?? rawError ?? `Request failed (${status})`,
+    ...code !== void 0 ? { code } : {},
+    status,
+    ...Object.keys(details).length > 0 ? { details } : {},
+    ...Array.isArray(payload.issues) ? { issues: payload.issues } : {}
+  };
+}
 
 // src/server/worker-error.ts
 function workerErrorHandler(prefix, respond = (c) => c.text("Internal Server Error", 500)) {
@@ -10601,6 +10746,7 @@ export {
   DEPLOYED_APPS_DEFAULTS,
   DeepSpaceAgentModelError,
   DeepSpaceAgentProfileError,
+  FILES_SESSION_COOKIE_READS_MIGRATION_ID,
   JobRoom,
   KnowledgeError,
   LOG_LEVELS,
@@ -10736,6 +10882,7 @@ export {
   mintUlid,
   noopPermissionContext,
   normalizeAgentTargetOrigin,
+  normalizeApiError,
   normalizeKnowledgeFolder,
   parseQuotaLimit,
   platformCorsPatterns,
@@ -10754,6 +10901,7 @@ export {
   resolveColumn,
   resolveCompatibilityFlags,
   resolveDeepSpaceAgentModel,
+  resolveSessionReadAuth,
   rowToData,
   runMigrations,
   serverBuild,