deepspace 0.30.2 → 0.31.1

package/dist/worker.d.ts

@@ -2253,6 +2253,10 @@ declare const BUILD_INJECTED_APP_ID_MIGRATION_ID = "2026-08-build-injected-app-i
  *  session has none) instead of crashing on a non-null assertion, and the
  *  file states the trust model actions run under. */
 declare const ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID = "2026-08-action-routes-bearer-guard";
+/** The files proxy identifies a header-less same-origin read (an `<img>`,
+ *  `<audio>`, or `<video>` load) by the app-origin session cookie, so private
+ *  file URLs render for the signed-in user without tokens or signed URLs. */
+declare const FILES_SESSION_COOKIE_READS_MIGRATION_ID = "2026-09-files-session-cookie-reads";
 type AppMigrationIdsValidation = {
     valid: true;
     ids: string[];
@@ -2846,7 +2850,8 @@ interface StorageAdmission {
  *   POST   /api/files/multipart/complete  → assemble the parts
  *   DELETE /api/files/multipart           → abandon a chunked upload
  *   GET    /api/files                     → list   (prefix + optional user prefix)
- *   GET    /api/files/:key                → download (validated against prefix)
+ *   GET    /api/files/:key                → download (validated against prefix; Range-aware)
+ *   HEAD   /api/files/:key                → the download's headers, no body
  *   DELETE /api/files/:key                → delete   (validated against prefix)
  *
  * ## One transport discipline
@@ -4098,6 +4103,34 @@ interface VerifyOutcome {
  */
 declare function verifyJwt(config: JwtVerifierConfig, token: string | null | undefined): Promise<VerifyOutcome>;
 
+/**
+ * Session-cookie identity for header-less file reads.
+ *
+ * `<img>`, `<audio>`, `<video>`, and `<a href>` cannot send `Authorization`,
+ * but the browser attaches the app-origin Better Auth session cookie to every
+ * same-origin load. This exchanges that cookie for the same 15-minute JWT the
+ * client already holds and returns only the verified identity.
+ *
+ * Bearer always wins: this applies only when no `Authorization` header is
+ * present, only to GET/HEAD, and only when `Sec-Fetch-Site` is `same-origin`
+ * or `none`. `app.space` is not on the Public Suffix List, so a sibling
+ * `evil.app.space` is same-SITE and `SameSite=Lax` alone would let its
+ * `<img src>` carry the victim's cookie; `Sec-Fetch-Site` cannot be set by
+ * page script. A browser that omits it (Safari before 16.4) and a cross-site
+ * top-level link both get 401 by design.
+ */
+
+type SessionReadEnv = AuthWorkerEnv & {
+    AUTH_JWT_PUBLIC_KEY: string;
+    AUTH_JWT_ISSUER: string;
+};
+/**
+ * Identify a same-origin GET/HEAD by the app-origin session cookie. Returns
+ * `null` — never throws — whenever the request does not qualify or the
+ * exchange fails. Use it only as the fallback after bearer verification.
+ */
+declare function resolveSessionReadAuth(req: Request, env: SessionReadEnv): Promise<VerifyResult | null>;
+
 declare const AGENT_TOKEN_SCOPE = "agent";
 /** A separate issuer keeps agent credentials invalid at ordinary platform APIs. */
 declare function agentTokenIssuer(issuer: string): string;
@@ -5449,4 +5482,4 @@ declare const MAX_LOG_TEXT_LENGTH: number;
  */
 declare function workerErrorHandler(prefix: string, respond?: (c: Context) => Response): ErrorHandler;
 
-export { ACCOUNT_STORAGE_LIMIT_BYTES, ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID, ACTION_TOOLS_DELETE_WHERE_MIGRATION_ID, AGENT_TOKEN_SCOPE, AGENT_TOOL_REQUEST_BODY_CAP, AGENT_TOOL_RESPONSE_BODY_CAP, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, ANONYMOUS_USER_ID_PREFIX, APP_ID_RE, APP_LOG_EVENT_KEYS, APP_NAME_RULES, ASSET_NOT_FOUND_HANDLING_VALUES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type AgentTargetPolicy, type AgentToolAccessResult, type AgentToolRouteEnv, type AgentToolRouteOptions, type ApiErrorIssue, type ApiWorkerEnv, type AppLogEvent, type AppLogEventKey, type AppLogsResponse, type AppMembership, type AppMigrationIdsValidation, type AppNameResolution, type AppNameValidation, type AssetNotFoundHandling, type AuthWorkerEnv, Awareness, type AwarenessState, type AwarenessStates, BASE_USERS_SCHEMA, BROWSER_PROXY_ROUTES, BUILD_INJECTED_APP_ID_MIGRATION_ID, BUILT_IN_TOOLS, type BaseMessage, BaseRoom, type BindingJsonValue, CHANNELS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, COST_RATES, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type ClientMessage, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConnectionAttachment, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEEPSPACE_AGENT_PROFILES, DEEPSPACE_AI_DEFAULTS, DEEPSPACE_AI_MODELS, DEEPSPACE_MODEL_CATALOG_PROVENANCE, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, type DOBindings, type DOManifest, type DOManifestEntry, type DeepSpaceAIEnv, type DeepSpaceAIModel, type DeepSpaceAIModelId, type DeepSpaceAIOptions, type DeepSpaceAIProvider, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, type DeepSpaceAgentProfile, DeepSpaceAgentProfileError, type DeepSpaceAgentProfileId, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAgentSupport, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DeepSpaceDocumentationRouteEnv, type DeepSpaceDocumentationRouteOptions, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, type GetActionData, type HandlerContext, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, type KnowledgeAddOptions, type KnowledgeAddResult, type KnowledgeClient, type KnowledgeEnv, KnowledgeError, type KnowledgeItem, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeSearchChunk, type KnowledgeSearchOptions, type KnowledgeSearchResult, type KnowledgeStatus, LOG_LEVELS, type LogLevel, MAX_APP_FILE_BYTES, MAX_BINDING_NAME_LENGTH, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_ENV_VAR_BYTES, MAX_LOG_TEXT_LENGTH, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type MessageHandlers, type MsgType, type MutateActionData, type NormalizedApiError, PRODUCTION_OFFICIAL_AGENT_ORIGINS, type PermissionContext, type PermissionLevel, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type ProtocolMessage, type ProxyRoute, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RECORD_NOT_FOUND, REGISTRY_INSTANCE, RELEASE_STAMP_PATH, REPO_STORE_LIMIT_BYTES, REQUIRED_COMPATIBILITY_FLAGS, RESERVED_BINDING_NAMES, RESERVED_RUN_WORKER_FIRST, RESOURCE_ID_RE, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_DEFAULT, RecordRoom, type RecordRoomConfig, RegistryClientError, type ResolvedColumn, type ResolvedDeepSpaceAgentModel, type RolePermissions, type RunMigrationsResult, SDK_RUN_WORKER_FIRST, SECRET_NAME_RE, SECURE_ROOM_BOUNDARIES_MIGRATION_ID, SESSION_COOKIE, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTIONS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedKnowledgeClient, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type ServerMessage, type StorageAdmission, type StoredRecord, type Summarizer, type SyncResult, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, UNDECLARED_ASSET_NOT_FOUND_HANDLING, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserToolExecutorEnv, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKER_OWNED_NOT_FOUND_MIGRATION_ID, YjsRoom, agentTokenIssuer, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, armCronRoom, authWorkerFetch, authenticatedRoomRequest, bindingManifestFromOutputConfig, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, clientBuild, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDecoder, createDeepSpaceAI, createDeepSpaceAuth, createEncoder, createScopedR2Handler, createUserToolExecutor, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, enqueueJob, epochSeconds, folderFilter, formatBytes, getChat, getDeepSpaceAIModel, getMessageType, getRolePermissions, handleAwarenessMessage, handleSyncMessage, hasContent, isAnonymousUserId, isAssetNotFoundHandling, isAutoProvision, isFilesVerbPath, isOwner, isPlatformReservedPath, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, knowledge, lintSchema, lintSchemaSet, lintSchemas, listDeepSpaceAgentModels, loadMessages, logEventText, loggableError, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, noopPermissionContext, normalizeAgentTargetOrigin, normalizeApiError, normalizeKnowledgeFolder, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, readVarUint, readVarUint8Array, registerAgentToolRoutes, registerDeepSpaceDocumentation, registryErrorJson, registryStub, resolveAppMembership, resolveAppName, resolveAppRole, resolveColumn, resolveCompatibilityFlags, resolveDeepSpaceAgentModel, rowToData, runMigrations, serverBuild, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, toUint8Array, totalChars, truncateLogText, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppMigrationIds, validateAppName, validateBindingManifest, validateDoManifest, verifyAgentToken, verifyJwt, workerErrorHandler, writeVarUint, writeVarUint8Array };
+export { ACCOUNT_STORAGE_LIMIT_BYTES, ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID, ACTION_TOOLS_DELETE_WHERE_MIGRATION_ID, AGENT_TOKEN_SCOPE, AGENT_TOOL_REQUEST_BODY_CAP, AGENT_TOOL_RESPONSE_BODY_CAP, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, ANONYMOUS_USER_ID_PREFIX, APP_ID_RE, APP_LOG_EVENT_KEYS, APP_NAME_RULES, ASSET_NOT_FOUND_HANDLING_VALUES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type AgentTargetPolicy, type AgentToolAccessResult, type AgentToolRouteEnv, type AgentToolRouteOptions, type ApiErrorIssue, type ApiWorkerEnv, type AppLogEvent, type AppLogEventKey, type AppLogsResponse, type AppMembership, type AppMigrationIdsValidation, type AppNameResolution, type AppNameValidation, type AssetNotFoundHandling, type AuthWorkerEnv, Awareness, type AwarenessState, type AwarenessStates, BASE_USERS_SCHEMA, BROWSER_PROXY_ROUTES, BUILD_INJECTED_APP_ID_MIGRATION_ID, BUILT_IN_TOOLS, type BaseMessage, BaseRoom, type BindingJsonValue, CHANNELS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, COST_RATES, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type ClientMessage, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConnectionAttachment, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEEPSPACE_AGENT_PROFILES, DEEPSPACE_AI_DEFAULTS, DEEPSPACE_AI_MODELS, DEEPSPACE_MODEL_CATALOG_PROVENANCE, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, type DOBindings, type DOManifest, type DOManifestEntry, type DeepSpaceAIEnv, type DeepSpaceAIModel, type DeepSpaceAIModelId, type DeepSpaceAIOptions, type DeepSpaceAIProvider, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, type DeepSpaceAgentProfile, DeepSpaceAgentProfileError, type DeepSpaceAgentProfileId, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAgentSupport, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DeepSpaceDocumentationRouteEnv, type DeepSpaceDocumentationRouteOptions, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, FILES_SESSION_COOKIE_READS_MIGRATION_ID, type GetActionData, type HandlerContext, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, type KnowledgeAddOptions, type KnowledgeAddResult, type KnowledgeClient, type KnowledgeEnv, KnowledgeError, type KnowledgeItem, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeSearchChunk, type KnowledgeSearchOptions, type KnowledgeSearchResult, type KnowledgeStatus, LOG_LEVELS, type LogLevel, MAX_APP_FILE_BYTES, MAX_BINDING_NAME_LENGTH, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_ENV_VAR_BYTES, MAX_LOG_TEXT_LENGTH, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type MessageHandlers, type MsgType, type MutateActionData, type NormalizedApiError, PRODUCTION_OFFICIAL_AGENT_ORIGINS, type PermissionContext, type PermissionLevel, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type ProtocolMessage, type ProxyRoute, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RECORD_NOT_FOUND, REGISTRY_INSTANCE, RELEASE_STAMP_PATH, REPO_STORE_LIMIT_BYTES, REQUIRED_COMPATIBILITY_FLAGS, RESERVED_BINDING_NAMES, RESERVED_RUN_WORKER_FIRST, RESOURCE_ID_RE, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_DEFAULT, RecordRoom, type RecordRoomConfig, RegistryClientError, type ResolvedColumn, type ResolvedDeepSpaceAgentModel, type RolePermissions, type RunMigrationsResult, SDK_RUN_WORKER_FIRST, SECRET_NAME_RE, SECURE_ROOM_BOUNDARIES_MIGRATION_ID, SESSION_COOKIE, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTIONS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedKnowledgeClient, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type ServerMessage, type StorageAdmission, type StoredRecord, type Summarizer, type SyncResult, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, UNDECLARED_ASSET_NOT_FOUND_HANDLING, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserToolExecutorEnv, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKER_OWNED_NOT_FOUND_MIGRATION_ID, YjsRoom, agentTokenIssuer, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, armCronRoom, authWorkerFetch, authenticatedRoomRequest, bindingManifestFromOutputConfig, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, clientBuild, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDecoder, createDeepSpaceAI, createDeepSpaceAuth, createEncoder, createScopedR2Handler, createUserToolExecutor, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, enqueueJob, epochSeconds, folderFilter, formatBytes, getChat, getDeepSpaceAIModel, getMessageType, getRolePermissions, handleAwarenessMessage, handleSyncMessage, hasContent, isAnonymousUserId, isAssetNotFoundHandling, isAutoProvision, isFilesVerbPath, isOwner, isPlatformReservedPath, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, knowledge, lintSchema, lintSchemaSet, lintSchemas, listDeepSpaceAgentModels, loadMessages, logEventText, loggableError, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, noopPermissionContext, normalizeAgentTargetOrigin, normalizeApiError, normalizeKnowledgeFolder, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, readVarUint, readVarUint8Array, registerAgentToolRoutes, registerDeepSpaceDocumentation, registryErrorJson, registryStub, resolveAppMembership, resolveAppName, resolveAppRole, resolveColumn, resolveCompatibilityFlags, resolveDeepSpaceAgentModel, resolveSessionReadAuth, rowToData, runMigrations, serverBuild, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, toUint8Array, totalChars, truncateLogText, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppMigrationIds, validateAppName, validateBindingManifest, validateDoManifest, verifyAgentToken, verifyJwt, workerErrorHandler, writeVarUint, writeVarUint8Array };

package/dist/worker.js

@@ -5794,6 +5794,7 @@ var SECURE_ROOM_BOUNDARIES_MIGRATION_ID = "2026-08-secure-room-boundaries";
 var ACTION_TOOLS_DELETE_WHERE_MIGRATION_ID = "2026-08-action-tools-delete-where";
 var BUILD_INJECTED_APP_ID_MIGRATION_ID = "2026-08-build-injected-app-id";
 var ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID = "2026-08-action-routes-bearer-guard";
+var FILES_SESSION_COOKIE_READS_MIGRATION_ID = "2026-09-files-session-cookie-reads";
 function validateAppMigrationIds(value) {
   if (!Array.isArray(value)) {
     return { valid: false, reason: "app migrations must be a JSON string array" };
@@ -6780,7 +6781,7 @@ function createScopedR2Handler(config) {
     if (!subpath && request2.method === "GET") {
       return handleList(bucket, prefix, excludedPrefixes, url, scope, auth);
     }
-    if (subpath && request2.method === "GET") {
+    if (subpath && (request2.method === "GET" || request2.method === "HEAD")) {
       if (!isKeyWithinScope(subpath, prefix, excludedPrefixes)) {
         return Response.json(
           { error: "Access denied: key outside scope" },
@@ -7387,11 +7388,64 @@ async function handleList(bucket, prefix, excludedPrefixes, url, scope, auth) {
     { headers: CORS_HEADERS4 }
   );
 }
+function parseByteRange(header, size) {
+  const [, first, last] = /^bytes=(\d*)-(\d*)$/.exec(header.trim()) ?? [];
+  if (first === void 0 || first === "" && last === "") return void 0;
+  const offset = first === "" ? Math.max(0, size - Number(last)) : Number(first);
+  if (offset >= size) return "unsatisfiable";
+  const end = first === "" || last === "" ? size - 1 : Math.min(Number(last), size - 1);
+  return end < offset ? void 0 : { offset, length: end - offset + 1 };
+}
 async function handleDownload(request2, bucket, key, scope) {
-  const object = await bucket.get(key);
-  if (!object) {
+  if (request2.method === "HEAD") {
+    const object = await bucket.head(key);
+    if (!object) {
+      return Response.json({ error: "File not found" }, { status: 404, headers: CORS_HEADERS4 });
+    }
+    const headers2 = downloadHeaders(object, key, scope);
+    if (scope === "app" && request2.headers.get("if-none-match") === object.httpEtag) {
+      return new Response(null, { status: 304, headers: headers2 });
+    }
+    headers2.set("Content-Length", String(object.size));
+    return new Response(null, { status: 200, headers: headers2 });
+  }
+  const rangeHeader = request2.headers.get("range");
+  if (rangeHeader === null) {
+    return wholeDownload(request2, await bucket.get(key), key, scope);
+  }
+  const head = await bucket.head(key);
+  if (!head) {
     return Response.json({ error: "File not found" }, { status: 404, headers: CORS_HEADERS4 });
   }
+  if (scope === "app" && request2.headers.get("if-none-match") === head.httpEtag) {
+    return new Response(null, { status: 304, headers: downloadHeaders(head, key, scope) });
+  }
+  const ifRange = request2.headers.get("if-range");
+  if (ifRange !== null && ifRange !== head.httpEtag) {
+    return wholeDownload(request2, await bucket.get(key), key, scope);
+  }
+  const range = parseByteRange(rangeHeader, head.size);
+  if (range === "unsatisfiable") {
+    const headers2 = { ...CORS_HEADERS4, "Content-Range": `bytes */${head.size}` };
+    return new Response(null, { status: 416, headers: headers2 });
+  }
+  if (!range) {
+    return wholeDownload(request2, await bucket.get(key), key, scope);
+  }
+  const conditional = await bucket.get(key, {
+    range,
+    onlyIf: { etagMatches: head.etag }
+  });
+  if (!conditional || !("body" in conditional)) {
+    return wholeDownload(request2, await bucket.get(key), key, scope);
+  }
+  const headers = downloadHeaders(conditional, key, scope);
+  const end = range.offset + range.length - 1;
+  headers.set("Content-Range", `bytes ${range.offset}-${end}/${conditional.size}`);
+  headers.set("Content-Length", String(range.length));
+  return new Response(conditional.body, { status: 206, headers });
+}
+function downloadHeaders(object, key, scope) {
   const headers = new Headers();
   const storedType = resolveMimeType(object.httpMetadata?.contentType ?? "");
   const mustDownload = DANGEROUS_MIME_TYPES.has(storedType);
@@ -7409,10 +7463,19 @@ async function handleDownload(request2, bucket, key, scope) {
     contentDisposition(originalName, mustDownload ? "attachment" : "inline")
   );
   if (mustDownload) headers.set("Content-Security-Policy", "sandbox; default-src 'none'");
+  headers.set("Accept-Ranges", "bytes");
+  return headers;
+}
+function wholeDownload(request2, object, key, scope) {
+  if (!object) {
+    return Response.json({ error: "File not found" }, { status: 404, headers: CORS_HEADERS4 });
+  }
+  const headers = downloadHeaders(object, key, scope);
   if (scope === "app" && request2.headers.get("if-none-match") === object.httpEtag) {
     return new Response(null, { status: 304, headers });
   }
-  return new Response(object.body, { headers });
+  headers.set("Content-Length", String(object.size));
+  return new Response(object.body, { status: 200, headers });
 }
 
 // src/server/utils/proxies.ts
@@ -10061,6 +10124,45 @@ async function verifyJwt(config, token) {
   }
 }
 
+// src/shared/auth-session.ts
+var SESSION_COOKIE = "__Secure-better-auth.session_token";
+
+// src/server/auth/sessionReadAuth.ts
+var TTL_MS = 5 * 6e4;
+var sessions = /* @__PURE__ */ new Map();
+async function exchange(session, env) {
+  try {
+    const res = await authWorkerFetch(env, "/api/auth/token", {
+      method: "POST",
+      headers: { Cookie: `${SESSION_COOKIE}=${session}` },
+      signal: AbortSignal.timeout(1e4)
+    });
+    const { token } = res.ok ? await res.json() : {};
+    if (typeof token !== "string") return null;
+    const config = { publicKey: env.AUTH_JWT_PUBLIC_KEY, issuer: env.AUTH_JWT_ISSUER };
+    return (await verifyJwt(config, token)).result;
+  } catch {
+    return null;
+  }
+}
+async function resolveSessionReadAuth(req, env) {
+  const site = req.headers.get("Sec-Fetch-Site");
+  if (req.method !== "GET" && req.method !== "HEAD") return null;
+  if (req.headers.has("Authorization") || site !== "same-origin" && site !== "none") return null;
+  const session = (req.headers.get("Cookie") ?? "").split(";").find((part) => part.trim().startsWith(`${SESSION_COOKIE}=`))?.trim().slice(SESSION_COOKIE.length + 1);
+  if (!session) return null;
+  const now = Date.now();
+  const cached = sessions.get(session);
+  if (cached && cached.expiresAt > now) return cached.promise;
+  if (sessions.size >= 500) sessions.clear();
+  const promise = exchange(session, env).then((result) => {
+    if (!result) sessions.delete(session);
+    return result;
+  });
+  sessions.set(session, { promise, expiresAt: now + TTL_MS });
+  return promise;
+}
+
 // src/server/auth/agentToken.ts
 var AGENT_TOKEN_SCOPE = "agent";
 function agentTokenIssuer(issuer) {
@@ -10549,9 +10651,6 @@ function normalizeAgentTargetOrigin(value, policy) {
   return !label.includes(".") && validateAppName(label).valid ? url.origin : null;
 }
 
-// src/shared/auth-session.ts
-var SESSION_COOKIE = "__Secure-better-auth.session_token";
-
 // src/shared/api-error.ts
 var SLUG_RE = /^[a-z0-9]+(?:[_.-][a-z0-9]+)*$/;
 var HUMAN_MESSAGES = {
@@ -10647,6 +10746,7 @@ export {
   DEPLOYED_APPS_DEFAULTS,
   DeepSpaceAgentModelError,
   DeepSpaceAgentProfileError,
+  FILES_SESSION_COOKIE_READS_MIGRATION_ID,
   JobRoom,
   KnowledgeError,
   LOG_LEVELS,
@@ -10801,6 +10901,7 @@ export {
   resolveColumn,
   resolveCompatibilityFlags,
   resolveDeepSpaceAgentModel,
+  resolveSessionReadAuth,
   rowToData,
   runMigrations,
   serverBuild,