deepspace 0.33.0 → 0.34.0

package/dist/server.d.ts

@@ -1,10 +1,12 @@
-import { LanguageModel, ToolSet, StreamTextResult, streamText, ModelMessage } from 'ai';
+import { LanguageModel, ToolSet, streamText, Tool, FilePart, ModelMessage } from 'ai';
+import { forwardAnthropicContainerIdFromLastStep } from '@ai-sdk/anthropic';
 import * as Y from 'yjs';
 import * as zod_v4_core from 'zod/v4/core';
 import * as zod from 'zod';
 import * as better_auth_plugins from 'better-auth/plugins';
 import * as better_auth from 'better-auth';
-import { betterAuth } from 'better-auth';
+import { BetterAuthOptions, betterAuth } from 'better-auth';
+import { getOAuthState } from 'better-auth/api';
 import { Context } from 'hono';
 
 /**
@@ -902,6 +904,11 @@ interface DeepSpaceAIModel {
     transport: 'messages' | 'chat-completions';
     recommendation: 'frontier' | 'balanced' | 'fast' | 'available' | 'limited';
     note?: string;
+    /**
+     * Superseded: still resolvable by id, so an app that saved it keeps working,
+     * but left out of pickers and model lists.
+     */
+    legacy?: true;
 }
 interface DeepSpaceAgentProfile {
     id: DeepSpaceAgentProfileId;
@@ -917,6 +924,21 @@ interface ResolvedDeepSpaceAgentModel {
     profile: DeepSpaceAgentProfile;
 }
 
+/**
+ * Wire contract between the SDK's sandbox helpers (server/utils/sandbox.ts)
+ * and the api-worker proxy that records who owns each Anthropic
+ * code-execution file and container.
+ */
+/**
+ * Who may use a file or container the request creates:
+ * - `user` (default): only the JWT subject, inside the calling app.
+ * - `app`: any caller of the same app (shared workspaces, owner-billed
+ *   background turns continuing a user's conversation).
+ * Another app can never use either.
+ */
+declare const SANDBOX_SCOPES: readonly ["user", "app"];
+type SandboxScope = (typeof SANDBOX_SCOPES)[number];
+
 /**
  * AI provider helpers — create Vercel AI SDK providers that route through
  * the DeepSpace API worker proxy for per-user billing.
@@ -944,7 +966,7 @@ interface ResolvedDeepSpaceAgentModel {
  *   // Server-side autonomous — no auth config needed
  *   import { createDeepSpaceAI } from 'deepspace/worker'
  *   const cerebras = createDeepSpaceAI(env, 'cerebras')
- *   const result = await generateText({ model: cerebras('llama-3.3-70b'), ... })
+ *   const result = await generateText({ model: cerebras('gpt-oss-120b'), ... })
  *
  *   // User-initiated (inside a request handler)
  *   const jwt = c.req.header('Authorization')!.slice(7)
@@ -964,6 +986,13 @@ interface DeepSpaceAIEnv extends ApiWorkerEnv {
      * Bills the app owner.
      */
     APP_OWNER_JWT?: string;
+    /**
+     * The app's id and deploy-time identity token. Sent with every proxied call
+     * so the proxy can tie Anthropic sandbox files and containers to this app;
+     * code execution and files are refused without them.
+     */
+    DEEPSPACE_APP_ID?: string;
+    APP_IDENTITY_TOKEN?: string;
 }
 interface DeepSpaceAIOptions {
     /**
@@ -976,6 +1005,12 @@ interface DeepSpaceAIOptions {
      * client-supplied billing override.
      */
     authToken?: string;
+    /**
+     * Who may reuse the sandbox files and containers this call creates.
+     * Default `'user'`: only the auth token's user. `'app'`: every caller of
+     * this app. Another app can never reach either.
+     */
+    sandboxScope?: SandboxScope;
 }
 /**
  * Build an AI SDK provider that routes through the DeepSpace API worker.
@@ -991,10 +1026,12 @@ type DeepSpaceAgentStreamOptions<TOOLS extends ToolSet> = Omit<StreamTextOptions
     profile: DeepSpaceAgentProfileId;
     modelId?: unknown;
     authToken?: string;
+    /** Scope for sandbox files and containers this turn creates (see `createDeepSpaceAI`). */
+    sandboxScope?: SandboxScope;
 };
 interface DeepSpaceAgentStream<TOOLS extends ToolSet> {
     selection: ResolvedDeepSpaceAgentModel;
-    result: StreamTextResult<TOOLS, never>;
+    result: ReturnType<typeof streamText<TOOLS>>;
 }
 declare class DeepSpaceAgentModelError extends Error {
     readonly modelId: unknown;
@@ -1018,6 +1055,118 @@ interface DeepSpaceAgentDiagnosticContext {
 /** Preserve safe structured provider diagnostics in bounded Worker logs. */
 declare function deepSpaceAgentErrorSummary(error: unknown, context?: DeepSpaceAgentDiagnosticContext): string;
 
+/**
+ * Anthropic's hosted code-execution sandbox, through the DeepSpace proxy.
+ *
+ * Claude runs Python and shell in a container Anthropic hosts, so an agent can
+ * read, edit and create real files (Word, Excel, PowerPoint, PDF, charts). The
+ * container has no network: files go in and come out through Anthropic's
+ * Files API, which the proxy scopes to this app (and, by default, to the
+ * calling user — see `DeepSpaceAIOptions.sandboxScope`).
+ *
+ *   const ai = createDeepSpaceAI(env, 'anthropic', { authToken })
+ *   const files = sandboxFiles(env, { authToken })
+ *   const sheet = await files.upload(bytes, { filename: 'leads.xlsx' })
+ *
+ *   const result = streamText({            // stream: long jobs outlive a non-streamed call
+ *     model: ai('claude-sonnet-5'),
+ *     tools: { code_execution: codeExecutionTool(), crm_query: callableFromSandbox(crmQuery) },
+ *     prepareStep: forwardSandboxContainer,          // same container across steps
+ *     providerOptions: reuseSandbox(savedContainerId), // optional: across messages
+ *     messages: [{ role: 'user', content: [{ type: 'text', text: 'Chart this' }, sandboxUpload(sheet)] }],
+ *   })
+ *
+ *   const { containerId, fileIds } = sandboxOutputs(await result.steps)
+ *   const chart = await files.download(fileIds[0])
+ *
+ * Stream sandbox calls (`streamText`). A non-streamed call that runs longer
+ * than about two minutes is cut off with a 524 on its way to Anthropic —
+ * multi-step document jobs routinely do.
+ *
+ * Billing: tokens as usual, plus a flat 5 container-minutes for each request
+ * that used the sandbox. Files API calls are free.
+ */
+
+/** The code-execution tool. Add it to `tools`; Claude only starts a container when it uses it. */
+declare function codeExecutionTool(): Tool;
+/**
+ * Let code running in the sandbox call this tool (programmatic tool calling),
+ * in addition to Claude calling it directly. The call still runs in the app's
+ * worker with the tool's own permission checks — the sandbox gets no
+ * credentials. Anthropic waits about 4 minutes for each result.
+ */
+declare function callableFromSandbox<T extends Tool>(tool: T): T;
+/** `prepareStep` that keeps every step of a turn in the first step's container. */
+declare const forwardSandboxContainer: typeof forwardAnthropicContainerIdFromLastStep;
+/** `providerOptions` that continue in a container saved from an earlier turn. */
+declare function reuseSandbox(containerId: string | null | undefined): {
+    anthropic: {
+        container: {
+            id: string;
+        };
+    };
+} | undefined;
+/** A message part that copies an uploaded file into the sandbox. */
+declare function sandboxUpload(file: Pick<SandboxFile, 'id' | 'filename' | 'mime_type'>): FilePart;
+interface SandboxStep {
+    providerMetadata?: Record<string, unknown>;
+    content: ReadonlyArray<unknown>;
+}
+/**
+ * The container a turn ran in (save it to continue later) and the files the
+ * sandbox created (download them with `sandboxFiles`).
+ */
+declare function sandboxOutputs(steps: ReadonlyArray<SandboxStep>): {
+    containerId: string | null;
+    fileIds: string[];
+};
+/** Anthropic's file metadata, as returned through the proxy. */
+interface SandboxFile {
+    type: 'file';
+    id: string;
+    filename: string;
+    mime_type: string;
+    size_bytes: number;
+    created_at: string;
+    /** Only files the sandbox created are downloadable; uploads are not. */
+    downloadable?: boolean;
+    expires_at?: string | null;
+}
+interface SandboxFileList {
+    data: SandboxFile[];
+    /** Pass back as `page` for the next page; null on the last one. */
+    next_page: string | null;
+}
+interface SandboxUploadOptions {
+    /** Required when `file` is a Blob rather than a File. */
+    filename?: string;
+    /** 3,600–7,776,000. The proxy defaults uploads to 30 days. */
+    expiresInSeconds?: number;
+}
+interface SandboxFilesOptions {
+    /** Same meaning as in `createDeepSpaceAI`: whose file it is, and who is billed. */
+    authToken?: string;
+    /** Scope for files this client uploads. Must match the calls that will use them. */
+    scope?: SandboxScope;
+}
+interface SandboxFilesClient {
+    upload(file: Blob, options?: SandboxUploadOptions): Promise<SandboxFile>;
+    get(fileId: string): Promise<SandboxFile>;
+    /** The file's bytes as a streaming Response (content-type and content-disposition set). */
+    download(fileId: string): Promise<Response>;
+    list(options?: {
+        limit?: number;
+        page?: string;
+    }): Promise<SandboxFileList>;
+    delete(fileId: string): Promise<void>;
+}
+declare class SandboxFileError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
+/** Upload, read, list and delete the calling app's sandbox files. */
+declare function sandboxFiles(env: DeepSpaceAIEnv, options?: SandboxFilesOptions): SandboxFilesClient;
+
 /**
  * Composio tools for the Vercel AI SDK.
  *
@@ -2517,22 +2666,10 @@ declare function armCronRoom(ctx: {
 }, namespace: DurableObjectNamespace, roomId: string, tasks: readonly CronTask[]): void;
 
 /**
- * JobRoom — Per-app durable background-job execution Durable Object.
- *
- * Solves the "long job dies when the response goes out" problem on
- * Cloudflare Workers. `ctx.waitUntil` only gets 30s after a response;
- * jobs that need minutes-to-hours live here instead: rows in SQLite,
- * picked up by DO alarms (15-min wall budget per tick), resumable
- * across ticks via `ctx.continue` for the rare longer cases.
- *
- * Lifecycle: queued → running → succeeded | failed | canceled
- *
- * Crash recovery: if an isolate is recycled mid-run, the row stays at
- * `running`. On next init, rows older than ~16 min are either retried
- * (if attempts left) or marked failed.
- *
- * See the abstract `onJob` method below for the subclass contract.
- * Message types: job.*
+ * Persistent job queue with serial execution, progress, cancellation and retries.
+ * Jobs run inside alarms unless listed in `backgroundJobTypes`.
+ * Use `ctx.continue` to save a checkpoint for the next run.
+ * After a restart, running jobs older than 16 minutes are retried or failed.
  */
 
 type JobStatus = 'queued' | 'running' | 'succeeded' | 'failed' | 'canceled';
@@ -2577,6 +2714,11 @@ interface JobContext {
     signal: AbortSignal;
 }
 interface JobRoomConfig {
+    /**
+     * Job types that run after the alarm returns. Defaults to none.
+     * Handlers must set a deadline; restarts use existing checkpoint/retry rules.
+     */
+    backgroundJobTypes?: readonly string[];
     /** Default for jobs enqueued without explicit `maxAttempts`. Default 1 (no auto-retry). */
     defaultMaxAttempts?: number;
     /** TTL for terminal rows (succeeded/failed/canceled) in ms. Default 24h. */
@@ -2599,6 +2741,7 @@ declare abstract class JobRoom<E = Record<string, unknown>, P = unknown, R = unk
     private readonly retentionMs;
     private readonly snapshotLimit;
     private readonly retryBackoffMs;
+    private readonly backgroundJobTypes;
     private readonly authorizeWrite;
     private readonly authorizeRead;
     private broadcastQueue;
@@ -2647,10 +2790,6 @@ declare abstract class JobRoom<E = Record<string, unknown>, P = unknown, R = unk
     private insertJob;
     private cancelJob;
     private retryJob;
-    /**
-     * Drain due jobs in FIFO order. All due jobs share the alarm's
-     * 15-min wall budget (a CF property, not a per-job allocation).
-     */
     private drainDueJobs;
     private executeJob;
     private makeContext;
@@ -3222,18 +3361,18 @@ declare function handleUserList(ctx: UserContext, ws: WebSocket, attachment: Con
  */
 declare function broadcastUserList(ctx: UserContext, except?: WebSocket | ReadonlySet<WebSocket>): void;
 /**
- * Handle user profile update.
+ * Handle the presence heartbeat (`user.update`): refresh `lastSeenAt`.
  *
- * Called when the client's profile loads after the initial WS connection.
- * Updates the user's name/email/imageUrl in c_users and pushes the updated
- * roster to every connected client so names refresh in real time.
+ * Nothing else on the users row can be set from this frame. Its identity
+ * fields — email, name, imageUrl — are what the auth plane verified at
+ * connect (`registerUser` from the JWT claims) and are refreshed only there:
+ * `email` is the key invites resolve on, and `name`/`imageUrl` are what a
+ * share dialog shows an owner about a collaborator, so a client-chosen value
+ * would let any member be resolved in, or pose as, another user. The SDK
+ * client sends the frame empty (the protocol types it as `EmptyPayload`), and
+ * the room's dispatch does not hand the payload down.
  */
-interface UserUpdatePayload {
-    name?: string;
-    email?: string;
-    imageUrl?: string;
-}
-declare function handleUserUpdate(ctx: RecordContext, _ws: WebSocket, attachment: ConnectionAttachment, payload: UserUpdatePayload): void;
+declare function handleUserUpdate(ctx: RecordContext, _ws: WebSocket, attachment: ConnectionAttachment): void;
 /**
  * Handle set role request (admin only).
  * Updates the role field in the c_users table.
@@ -3487,6 +3626,17 @@ declare function isTestAccountClaims(claims: JwtClaims | Record<string, unknown>
 /** True when a billing subscription tier marks a test account. */
 declare function isTestAccountTier(tier: string | null | undefined): boolean;
 
+type BetterAuthUserCreateBeforeHook = NonNullable<NonNullable<NonNullable<NonNullable<BetterAuthOptions['databaseHooks']>['user']>['create']>['before']>;
+type UserCreateData = Parameters<BetterAuthUserCreateBeforeHook>[0];
+type UserCreateResult = Awaited<ReturnType<BetterAuthUserCreateBeforeHook>>;
+interface DeepSpaceUserCreateContext {
+    request?: Request;
+    headers?: Headers;
+    path?: string;
+    /** OAuth state after Better Auth has decrypted/loaded and verified it. */
+    oauthState: Awaited<ReturnType<typeof getOAuthState>>;
+}
+type UserAdditionalFields = NonNullable<BetterAuthOptions['user']>['additionalFields'];
 interface DeepSpaceAuthConfig {
     /** D1 database binding */
     database: D1Database;
@@ -3524,6 +3674,19 @@ interface DeepSpaceAuthConfig {
     emailAndPassword?: boolean;
     /** Trusted origins for CORS */
     trustedOrigins?: string[];
+    /**
+     * Server-owned fields to add to Better Auth's user model. Use `input: false`
+     * for values that may only be populated by a database hook, and
+     * `returned: false` for values that must stay out of public auth responses.
+     */
+    userAdditionalFields?: UserAdditionalFields;
+    /**
+     * Runs inside Better Auth's `user.create.before` lifecycle and may return
+     * the library's `{ data }` patch. Errors intentionally abort user creation,
+     * which lets callers fail closed when a server-validated signup promise can
+     * no longer be attached to the new account.
+     */
+    beforeUserCreate?: (user: UserCreateData, ctx: DeepSpaceUserCreateContext | null) => Promise<UserCreateResult> | UserCreateResult;
     /**
      * Called after a new user row is created (any flow: social OAuth callback,
      * email/password, server-side `auth.api.signUpEmail`). When the signup came
@@ -4551,6 +4714,13 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             };
         };
     } | undefined;
+    socialProviders: Parameters<typeof betterAuth>[0]["socialProviders"];
+    trustedOrigins: string[];
+    user?: {
+        additionalFields: {
+            [x: string]: better_auth.DBFieldAttribute;
+        };
+    } | undefined;
     database: D1Database;
     baseURL: string;
     secret: string;
@@ -4561,8 +4731,6 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
     emailAndPassword: {
         enabled: boolean;
     };
-    socialProviders: Parameters<typeof betterAuth>[0]["socialProviders"];
-    trustedOrigins: string[];
 }>;
 type DeepSpaceAuth = ReturnType<typeof createDeepSpaceAuth>;
 
@@ -4724,4 +4892,4 @@ declare class RefundError extends Error {
     constructor(message: string, status: number);
 }
 
-export { ACCOUNT_STORAGE_LIMIT_BYTES, AGENT_TOKEN_SCOPE, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_ID_RE, APP_NAME_RULES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppMembership, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, BaseRoom, type BindingJsonValue, CHANNELS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, COST_RATES, CancelSubscriptionError, type CancelSubscriptionOpts, type CancelSubscriptionResult, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, type DOBindings, type DOManifest, type DOManifestEntry, type DebugApiContext, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, DeepSpaceAgentProfileError, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, type GetActionData, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, type KnowledgeAddOptions, type KnowledgeAddResult, type KnowledgeClient, type KnowledgeEnv, KnowledgeError, type KnowledgeItem, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeSearchChunk, type KnowledgeSearchOptions, type KnowledgeSearchResult, type KnowledgeStatus, MAX_APP_FILE_BYTES, MAX_BINDING_NAME_LENGTH, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_ENV_VAR_BYTES, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, type MutateActionData, type PermissionContext, type PermissionLevel, type PlanInfo, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, REGISTRY_INSTANCE, RESERVED_BINDING_NAMES, RESOURCE_ID_RE, type RecordContext, RecordRoom, type RecordRoomConfig, RefundError, type RefundOpts, type RefundResult, RegistryClientError, type ResolvedColumn, type RolePermissions, type RunMigrationsResult, SECRET_NAME_RE, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTION_SCHEMAS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedKnowledgeClient, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type StorageAdmission, type StoredRecord, SubscriptionAuthError, type SubscriptionContext, type SubscriptionRead, SubscriptionRequiredError, type SubscriptionStatus, type Summarizer, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, type ToolsApiContext, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserContext, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, type YjsContext, YjsRoom, agentTokenIssuer, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, armCronRoom, authWorkerFetch, bindingManifestFromOutputConfig, broadcastChange, broadcastUserList, broadcastYjsUpdate, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, cancelSubscription, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDeepSpaceAI, createDeepSpaceAuth, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, deleteRecord, enqueueJob, epochSeconds, executeQuery, folderFilter, formatBytes, getAllUsers, getChat, getOrCreateYjsDoc, getRecord, getRolePermissions, getSubscription, getUser, getYjsDocKey, handleApiRequest, handleDelete, handlePut, handleSetRole, handleSubscribe, handleToolsRequest, handleUnsubscribe, handleUserList, handleUserUpdate, handleYjsBinaryMessage, handleYjsJoin, handleYjsLeave, isAutoProvision, isFilesVerbPath, isOwner, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, knowledge, lintSchema, lintSchemaSet, lintSchemas, loadMessages, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, noopPermissionContext, normalizeKnowledgeFolder, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, putRecord, readRecord, recordMatchesSubscription, refundInvoice, registerUser, registryErrorJson, registryStub, requireSubscription, resolveAppMembership, resolveAppName, resolveAppRole, resolveColumn, resolveSessionReadAuth, rowToData, runMigrations, saveYjsDoc, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyAgentToken, verifyJwt };
+export { ACCOUNT_STORAGE_LIMIT_BYTES, AGENT_TOKEN_SCOPE, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_ID_RE, APP_NAME_RULES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppMembership, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, BaseRoom, type BindingJsonValue, CHANNELS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, COST_RATES, CancelSubscriptionError, type CancelSubscriptionOpts, type CancelSubscriptionResult, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, type DOBindings, type DOManifest, type DOManifestEntry, type DebugApiContext, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, DeepSpaceAgentProfileError, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DeepSpaceUserCreateContext, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, type GetActionData, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, type KnowledgeAddOptions, type KnowledgeAddResult, type KnowledgeClient, type KnowledgeEnv, KnowledgeError, type KnowledgeItem, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeSearchChunk, type KnowledgeSearchOptions, type KnowledgeSearchResult, type KnowledgeStatus, MAX_APP_FILE_BYTES, MAX_BINDING_NAME_LENGTH, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_ENV_VAR_BYTES, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, type MutateActionData, type PermissionContext, type PermissionLevel, type PlanInfo, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, REGISTRY_INSTANCE, RESERVED_BINDING_NAMES, RESOURCE_ID_RE, type RecordContext, RecordRoom, type RecordRoomConfig, RefundError, type RefundOpts, type RefundResult, RegistryClientError, type ResolvedColumn, type RolePermissions, type RunMigrationsResult, SECRET_NAME_RE, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTION_SCHEMAS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, type SandboxFile, SandboxFileError, type SandboxFileList, type SandboxFilesClient, type SandboxFilesOptions, type SandboxUploadOptions, SchemaRegistry, type ScopeContext, type ScopedKnowledgeClient, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type StorageAdmission, type StoredRecord, SubscriptionAuthError, type SubscriptionContext, type SubscriptionRead, SubscriptionRequiredError, type SubscriptionStatus, type Summarizer, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, type ToolsApiContext, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserContext, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, type YjsContext, YjsRoom, agentTokenIssuer, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, armCronRoom, authWorkerFetch, bindingManifestFromOutputConfig, broadcastChange, broadcastUserList, broadcastYjsUpdate, buildCronContext, buildTableSelect, buildUiParts, callRegistry, callableFromSandbox, canCreate, canDelete, canRead, canUpdate, cancelSubscription, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, codeExecutionTool, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDeepSpaceAI, createDeepSpaceAuth, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, deleteRecord, enqueueJob, epochSeconds, executeQuery, folderFilter, formatBytes, forwardSandboxContainer, getAllUsers, getChat, getOrCreateYjsDoc, getRecord, getRolePermissions, getSubscription, getUser, getYjsDocKey, handleApiRequest, handleDelete, handlePut, handleSetRole, handleSubscribe, handleToolsRequest, handleUnsubscribe, handleUserList, handleUserUpdate, handleYjsBinaryMessage, handleYjsJoin, handleYjsLeave, isAutoProvision, isFilesVerbPath, isOwner, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, knowledge, lintSchema, lintSchemaSet, lintSchemas, loadMessages, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, noopPermissionContext, normalizeKnowledgeFolder, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, putRecord, readRecord, recordMatchesSubscription, refundInvoice, registerUser, registryErrorJson, registryStub, requireSubscription, resolveAppMembership, resolveAppName, resolveAppRole, resolveColumn, resolveSessionReadAuth, reuseSandbox, rowToData, runMigrations, sandboxFiles, sandboxOutputs, sandboxUpload, saveYjsDoc, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyAgentToken, verifyJwt };