deepspace 0.33.0 → 0.34.0

package/dist/cli.js

@@ -5753,6 +5753,7 @@ var ACTION_TOOLS_DELETE_WHERE_MIGRATION_ID = "2026-08-action-tools-delete-where"
 var BUILD_INJECTED_APP_ID_MIGRATION_ID = "2026-08-build-injected-app-id";
 var ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID = "2026-08-action-routes-bearer-guard";
 var FILES_SESSION_COOKIE_READS_MIGRATION_ID = "2026-09-files-session-cookie-reads";
+var AI_SDK_7_MIGRATION_ID = "2026-09-ai-sdk-7";
 function validateAppMigrationIds(value) {
   if (!Array.isArray(value)) {
     return { valid: false, reason: "app migrations must be a JSON string array" };
@@ -5816,6 +5817,12 @@ var APP_MIGRATION_GUIDANCE = [
     description: "Let private file URLs render in <img>/<audio>/<video> for the signed-in user",
     files: ["the app-owned HTTP route file that proxies /api/files/*"],
     guidance: "In the /api/files/* proxy only, replace `const auth = await resolveAuth(c.req.raw, c.env)` with `const auth = (await resolveAuth(c.req.raw, c.env)) ?? (await resolveSessionReadAuth(c.req.raw, c.env))`, importing resolveSessionReadAuth from 'deepspace/worker'. It identifies same-origin GET/HEAD by the app-origin session cookie and returns null for everything else. Do not add it to resolveAuth, which also gates writes. In the same route, skip the JSON URL rewrite for HEAD: change `if (contentType.includes('application/json'))` to `if (contentType.includes('application/json') && c.req.method !== 'HEAD')`, because a HEAD answer carries the content-type but no body and parsing it would turn every failed media probe into a 500."
+  },
+  {
+    id: AI_SDK_7_MIGRATION_ID,
+    description: "Move the app's own AI code to AI SDK 7",
+    files: ["src/ai/chat-routes.ts", 'every other file importing from "ai"'],
+    guidance: "Run `npx @ai-sdk/codemod v7 src` and review its diff: it renames `system` to `instructions` in ANY object, including non-AI-SDK request bodies, so revert those. Then by hand: in the chat route's `onEnd` (formerly `onFinish`), persist `responseMessages` \u2014 `response.messages` now holds only the final step, which drops earlier tool calls \u2014 and since `onEnd` no longer runs after an abort, also persist in `onAbort({ steps })` from the completed steps' `response.messages`. Replace `result.toUIMessageStreamResponse(options)` with `createUIMessageStreamResponse({ headers, stream: toUIMessageStream({ stream: result.stream, ...options }) })` imported from 'ai'. A tool's `execute` options now include `context`. `role: 'system'` messages inside `messages` are rejected unless the call sets `allowSystemInMessages: true`."
   }
 ];
 var APP_MIGRATION_DEFINITIONS = APP_MIGRATION_GUIDANCE.map(({ id, description }) => ({
@@ -5874,7 +5881,11 @@ async function buildDeployBundle(options) {
       env: {
         ...wranglerViteEnv(process.env, preparedWranglerConfig),
         // The Vite plugin's one documentation compile stamps release URLs.
-        DEEPSPACE_DOCUMENTATION_BASE_URL: `https://${appName}.${appDomain}/docs`
+        DEEPSPACE_DOCUMENTATION_BASE_URL: `https://${appName}.${appDomain}/docs`,
+        // The scaffold's build-time prerender (prerender.ts) builds canonical
+        // URLs and the sitemap on this, so a staging deploy resolves to
+        // spacestest.com instead of the wrangler name on app.space.
+        DEEPSPACE_SITE_ORIGIN: `https://${appName}.${appDomain}`
       }
     });
   } catch (error) {
@@ -10993,9 +11004,19 @@ function formatCurrency(value, currency) {
   return `${value} ${currency}`;
 }
 function priceLabel(billing) {
-  if (billing.baseCost === null) return "metered at the provider's actual cost";
-  const figure = `${formatCurrency(billing.baseCost, billing.currency)} ${billingUnit(billing.model)}`;
-  return billing.variesWithInput ? `base ${figure} (some inputs cost less or more)` : figure;
+  if (billing.baseCost === null) {
+    const price2 = "metered at the provider's actual cost plus platform markup";
+    return billing.freeTierPriceDiffers ? `${price2}; free-tier pricing differs` : price2;
+  }
+  const tokenScale = billing.model === "per_token" ? 1e6 : 1;
+  const unit = billing.model === "per_token" ? "per 1M tokens" : billingUnit(billing.model);
+  const paidCost = (billing.paidBaseCost ?? billing.baseCost) * tokenScale;
+  const figure = `${formatCurrency(paidCost, billing.currency)} ${unit}`;
+  const price = billing.variesWithInput ? `base ${figure} (some inputs cost less or more)` : figure;
+  if (!billing.freeTierPriceDiffers) return price;
+  const freeFigure = `${formatCurrency(billing.baseCost * tokenScale, billing.currency)} ${unit}`;
+  const freePrice = billing.variesWithInput ? `base ${freeFigure} (some inputs cost less or more)` : freeFigure;
+  return `paid tier: ${price}; free tier: ${freePrice}`;
 }
 function billingUnit(model) {
   if (model === "per_token") return "per token";
@@ -11561,14 +11582,31 @@ async function requestJson(url, init, token, timeout) {
     clearTimeout(timer);
   }
 }
+var MAX_DETAIL_TEXT = 2e3;
+var DETAIL_PROSE_KEYS = /* @__PURE__ */ new Set(["error", "detail", "guidance", "message"]);
+function describeDetail(detail) {
+  const parts = [];
+  for (const [key, value] of Object.entries(detail)) {
+    if (value === void 0 || value === null || value === "") continue;
+    const prose = typeof value === "string" && DETAIL_PROSE_KEYS.has(key);
+    parts.push(prose ? value : `${key}: ${JSON.stringify(value)}`);
+  }
+  const text2 = parts.join(" ");
+  return text2.length > MAX_DETAIL_TEXT ? `${text2.slice(0, MAX_DETAIL_TEXT)}\u2026` : text2;
+}
 function httpRefusal(response, tokens) {
   const server = isRecord(response.body) ? response.body : void 0;
   const code = safeServerCode(server?.code);
-  const message = typeof server?.error === "string" ? redact(server.error, tokens).slice(0, 500) : "";
+  const baseMessage = typeof server?.error === "string" ? redact(server.error, tokens).slice(0, 500) : "";
+  const redactedDetail = isRecord(server?.detail) ? redactValue(server.detail, tokens) : void 0;
+  const detail = isRecord(redactedDetail) ? { extra: { detail: redactedDetail } } : {};
+  const detailText = isRecord(redactedDetail) ? describeDetail(redactedDetail) : "";
+  const message = detailText ? `${baseMessage} ${detailText}`.trim() : baseMessage;
   if (response.status === 403) {
     return new Refusal(
       message || "You are not allowed to use this app agent.",
-      code ?? "agent_forbidden"
+      code ?? "agent_forbidden",
+      detail
     );
   }
   if (response.status === 404 && !server) {
@@ -11579,7 +11617,8 @@ function httpRefusal(response, tokens) {
   }
   return new Refusal(
     message || `App agent request failed (${response.status}).`,
-    code ?? (response.status === 404 ? "agent_endpoint_not_found" : "agent_request_failed")
+    code ?? (response.status === 404 ? "agent_endpoint_not_found" : "agent_request_failed"),
+    detail
   );
 }
 async function callAgent(target2, path, init, timeout) {
@@ -16045,7 +16084,7 @@ import { join as join28, resolve as resolve22 } from "path";
 // package.json
 var package_default = {
   name: "deepspace",
-  version: "0.33.0",
+  version: "0.34.0",
   engines: {
     node: ">=22.15.0 <23 || >=24 <25 || >=26 <27"
   },
@@ -16086,6 +16125,10 @@ var package_default = {
       types: "./dist/build.d.ts",
       import: "./dist/build.js"
     },
+    "./expo": {
+      types: "./dist/expo.d.ts",
+      import: "./dist/expo.js"
+    },
     "./documentation": {
       types: "./dist/documentation.d.ts",
       import: "./dist/documentation.js"
@@ -16109,19 +16152,19 @@ var package_default = {
     prepublishOnly: "pnpm build"
   },
   dependencies: {
-    "@ai-sdk/anthropic": "2.0.91",
-    "@ai-sdk/openai": "2.0.116",
-    "@ai-sdk/openai-compatible": "1.0.46",
+    "@ai-sdk/anthropic": "4.0.58",
+    "@ai-sdk/openai": "4.0.71",
+    "@ai-sdk/openai-compatible": "3.0.53",
     "@clack/prompts": "^1.2.0",
     "@mdx-js/mdx": "^3.1.1",
     acorn: "^8.16.0",
-    ai: "5.0.222",
+    ai: "7.0.107",
     "better-auth": "1.6.23",
     citty: "^0.2.0",
     "cross-spawn": "^7.0.6",
     esbuild: "^0.27.0",
     "highlight.js": "^11.11.1",
-    hono: "^4.12.34",
+    hono: "^4.13.7",
     jose: "^6.1.0",
     marked: "^18.0.7",
     "mdast-util-gfm": "^3.1.0",
@@ -16130,7 +16173,7 @@ var package_default = {
     "remark-frontmatter": "^5.0.0",
     "remark-gfm": "^4.0.1",
     "sanitize-html": "^2.17.7",
-    "smol-toml": "^1.6.1",
+    "smol-toml": "^1.7.1",
     yaml: "^2.9.0",
     yjs: "^13.6.0",
     zod: "^4.3.6"
@@ -16141,7 +16184,11 @@ var package_default = {
     "lucide-react": ">=0.400.0",
     react: "^18.0.0 || ^19.0.0",
     "react-dom": "^18.0.0 || ^19.0.0",
-    "tailwind-merge": ">=2.0.0"
+    "tailwind-merge": ">=2.0.0",
+    "expo-crypto": "~57.0.0",
+    "expo-linking": "~57.0.0",
+    "expo-secure-store": "~57.0.0",
+    "expo-web-browser": "~57.0.0"
   },
   peerDependenciesMeta: {
     "@playwright/test": {
@@ -16161,6 +16208,18 @@ var package_default = {
     },
     "lucide-react": {
       optional: true
+    },
+    "expo-crypto": {
+      optional: true
+    },
+    "expo-linking": {
+      optional: true
+    },
+    "expo-secure-store": {
+      optional: true
+    },
+    "expo-web-browser": {
+      optional: true
     }
   },
   devDependencies: {