deepspace 0.33.1 → 0.35.0

package/dist/worker.d.ts

@@ -1,11 +1,13 @@
 import * as Y from 'yjs';
-import { LanguageModel, ToolSet, StreamTextResult, streamText, ModelMessage } from 'ai';
+import { LanguageModel, ToolSet, streamText, Tool, FilePart, ModelMessage } from 'ai';
+import { forwardAnthropicContainerIdFromLastStep } from '@ai-sdk/anthropic';
 import { Hono, Context, ErrorHandler } from 'hono';
 import * as zod_v4_core from 'zod/v4/core';
 import * as zod from 'zod';
 import * as better_auth_plugins from 'better-auth/plugins';
 import * as better_auth from 'better-auth';
-import { betterAuth } from 'better-auth';
+import { BetterAuthOptions, betterAuth } from 'better-auth';
+import { getOAuthState } from 'better-auth/api';
 
 /**
  * Wire protocol constants.
@@ -1567,22 +1569,10 @@ declare function armCronRoom(ctx: {
 }, namespace: DurableObjectNamespace, roomId: string, tasks: readonly CronTask[]): void;
 
 /**
- * JobRoom — Per-app durable background-job execution Durable Object.
- *
- * Solves the "long job dies when the response goes out" problem on
- * Cloudflare Workers. `ctx.waitUntil` only gets 30s after a response;
- * jobs that need minutes-to-hours live here instead: rows in SQLite,
- * picked up by DO alarms (15-min wall budget per tick), resumable
- * across ticks via `ctx.continue` for the rare longer cases.
- *
- * Lifecycle: queued → running → succeeded | failed | canceled
- *
- * Crash recovery: if an isolate is recycled mid-run, the row stays at
- * `running`. On next init, rows older than ~16 min are either retried
- * (if attempts left) or marked failed.
- *
- * See the abstract `onJob` method below for the subclass contract.
- * Message types: job.*
+ * Persistent job queue with serial execution, progress, cancellation and retries.
+ * Jobs run inside alarms unless listed in `backgroundJobTypes`.
+ * Use `ctx.continue` to save a checkpoint for the next run.
+ * After a restart, running jobs older than 16 minutes are retried or failed.
  */
 
 type JobStatus = 'queued' | 'running' | 'succeeded' | 'failed' | 'canceled';
@@ -1627,6 +1617,11 @@ interface JobContext {
     signal: AbortSignal;
 }
 interface JobRoomConfig {
+    /**
+     * Job types that run after the alarm returns. Defaults to none.
+     * Handlers must set a deadline; restarts use existing checkpoint/retry rules.
+     */
+    backgroundJobTypes?: readonly string[];
     /** Default for jobs enqueued without explicit `maxAttempts`. Default 1 (no auto-retry). */
     defaultMaxAttempts?: number;
     /** TTL for terminal rows (succeeded/failed/canceled) in ms. Default 24h. */
@@ -1649,6 +1644,7 @@ declare abstract class JobRoom<E = Record<string, unknown>, P = unknown, R = unk
     private readonly retentionMs;
     private readonly snapshotLimit;
     private readonly retryBackoffMs;
+    private readonly backgroundJobTypes;
     private readonly authorizeWrite;
     private readonly authorizeRead;
     private broadcastQueue;
@@ -1697,10 +1693,6 @@ declare abstract class JobRoom<E = Record<string, unknown>, P = unknown, R = unk
     private insertJob;
     private cancelJob;
     private retryJob;
-    /**
-     * Drain due jobs in FIFO order. All due jobs share the alarm's
-     * 15-min wall budget (a CF property, not a per-job allocation).
-     */
     private drainDueJobs;
     private executeJob;
     private makeContext;
@@ -2257,6 +2249,9 @@ declare const ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID = "2026-08-action-routes-b
  *  `<audio>`, or `<video>` load) by the app-origin session cookie, so private
  *  file URLs render for the signed-in user without tokens or signed URLs. */
 declare const FILES_SESSION_COOKIE_READS_MIGRATION_ID = "2026-09-files-session-cookie-reads";
+/** The SDK moved to AI SDK 7 (`ai` 7, `@ai-sdk/anthropic` 4). Apps pin their
+ *  own `ai`, and their chat route persists and streams through its API. */
+declare const AI_SDK_7_MIGRATION_ID = "2026-09-ai-sdk-7";
 type AppMigrationIdsValidation = {
     valid: true;
     ids: string[];
@@ -2292,6 +2287,11 @@ interface DeepSpaceAIModel {
     transport: 'messages' | 'chat-completions';
     recommendation: 'frontier' | 'balanced' | 'fast' | 'available' | 'limited';
     note?: string;
+    /**
+     * Superseded: still resolvable by id, so an app that saved it keeps working,
+     * but left out of pickers and model lists.
+     */
+    legacy?: true;
 }
 interface DeepSpaceAgentProfile {
     id: DeepSpaceAgentProfileId;
@@ -2307,8 +2307,8 @@ interface DeepSpaceAgentProfile {
  * deployed app underneath a commit.
  */
 declare const DEEPSPACE_MODEL_CATALOG_PROVENANCE: {
-    readonly version: "2026-08-04";
-    readonly verifiedAt: "2026-08-04";
+    readonly version: "2026-09-24";
+    readonly verifiedAt: "2026-09-24";
     readonly sources: {
         readonly anthropic: "https://platform.claude.com/docs/en/api/beta/models/list";
         readonly openai: "https://developers.openai.com/api/docs/models/all";
@@ -2316,8 +2316,8 @@ declare const DEEPSPACE_MODEL_CATALOG_PROVENANCE: {
     };
 };
 declare const DEEPSPACE_AI_MODELS: readonly [{
-    readonly id: "claude-fable-5";
-    readonly label: "Claude Fable 5";
+    readonly id: "claude-opus-5-5";
+    readonly label: "Claude Opus 5.5";
     readonly family: "Claude 5";
     readonly recommendation: "frontier";
 } & {
@@ -2328,8 +2328,8 @@ declare const DEEPSPACE_AI_MODELS: readonly [{
     agentSupport: "multi-step";
     agentProfiles: readonly ["application", "documentation"];
 }, {
-    readonly id: "claude-opus-5";
-    readonly label: "Claude Opus 5";
+    readonly id: "claude-fable-5-1";
+    readonly label: "Claude Fable 5.1";
     readonly family: "Claude 5";
     readonly recommendation: "frontier";
 } & {
@@ -2363,11 +2363,95 @@ declare const DEEPSPACE_AI_MODELS: readonly [{
 } & {
     agentSupport: "multi-step";
     agentProfiles: readonly ["application", "documentation"];
+}, {
+    readonly id: "gpt-6-sol";
+    readonly label: "GPT-6 Sol";
+    readonly family: "GPT-6";
+    readonly recommendation: "balanced";
+} & {
+    readonly provider: "openai";
+    readonly providerLabel: "OpenAI";
+    readonly transport: "chat-completions";
+} & {
+    agentSupport: "multi-step";
+    agentProfiles: readonly ["application", "documentation"];
+}, {
+    readonly id: "gpt-6-luna";
+    readonly label: "GPT-6 Luna";
+    readonly family: "GPT-6";
+    readonly recommendation: "fast";
+} & {
+    readonly provider: "openai";
+    readonly providerLabel: "OpenAI";
+    readonly transport: "chat-completions";
+} & {
+    agentSupport: "multi-step";
+    agentProfiles: readonly ["application", "documentation"];
+}, {
+    readonly id: "gpt-6-astra";
+    readonly label: "GPT-6 Astra";
+    readonly provider: "openai";
+    readonly providerLabel: "OpenAI";
+    readonly family: "GPT-6";
+    readonly agentSupport: "none";
+    readonly agentProfiles: readonly [];
+    readonly transport: "chat-completions";
+    readonly recommendation: "limited";
+    readonly note: "Available for direct generation; its tool calling requires the Responses API, which the DeepSpace proxy does not serve.";
+}, {
+    readonly id: "gpt-oss-120b";
+    readonly label: "GPT-OSS 120B";
+    readonly provider: "cerebras";
+    readonly providerLabel: "Cerebras";
+    readonly family: "GPT-OSS";
+    readonly agentSupport: "single-step";
+    readonly agentProfiles: readonly [];
+    readonly transport: "chat-completions";
+    readonly recommendation: "limited";
+    readonly note: "Available for direct generation; the current proxy adapter has not passed multi-step tool-result continuation.";
+}, {
+    readonly id: "qwen-3.8-27b";
+    readonly label: "Qwen 3.8 27B";
+    readonly provider: "cerebras";
+    readonly providerLabel: "Cerebras";
+    readonly family: "Qwen 3.8";
+    readonly agentSupport: "single-step";
+    readonly agentProfiles: readonly [];
+    readonly transport: "chat-completions";
+    readonly recommendation: "limited";
+    readonly note: "Available for direct generation; the current proxy adapter has not passed multi-step tool-result continuation.";
+}, {
+    readonly id: "claude-opus-5";
+    readonly label: "Claude Opus 5";
+    readonly family: "Claude 5";
+    readonly recommendation: "frontier";
+    readonly legacy: true;
+} & {
+    readonly provider: "anthropic";
+    readonly providerLabel: "Anthropic";
+    readonly transport: "messages";
+} & {
+    agentSupport: "multi-step";
+    agentProfiles: readonly ["application", "documentation"];
+}, {
+    readonly id: "claude-fable-5";
+    readonly label: "Claude Fable 5";
+    readonly family: "Claude 5";
+    readonly recommendation: "frontier";
+    readonly legacy: true;
+} & {
+    readonly provider: "anthropic";
+    readonly providerLabel: "Anthropic";
+    readonly transport: "messages";
+} & {
+    agentSupport: "multi-step";
+    agentProfiles: readonly ["application", "documentation"];
 }, {
     readonly id: "gpt-5.6-sol";
     readonly label: "GPT-5.6 Sol";
     readonly family: "GPT-5.6";
     readonly recommendation: "frontier";
+    readonly legacy: true;
 } & {
     readonly provider: "openai";
     readonly providerLabel: "OpenAI";
@@ -2380,6 +2464,7 @@ declare const DEEPSPACE_AI_MODELS: readonly [{
     readonly label: "GPT-5.6 Terra";
     readonly family: "GPT-5.6";
     readonly recommendation: "balanced";
+    readonly legacy: true;
 } & {
     readonly provider: "openai";
     readonly providerLabel: "OpenAI";
@@ -2392,6 +2477,7 @@ declare const DEEPSPACE_AI_MODELS: readonly [{
     readonly label: "GPT-5.6 Luna";
     readonly family: "GPT-5.6";
     readonly recommendation: "fast";
+    readonly legacy: true;
 } & {
     readonly provider: "openai";
     readonly providerLabel: "OpenAI";
@@ -2399,34 +2485,23 @@ declare const DEEPSPACE_AI_MODELS: readonly [{
 } & {
     agentSupport: "multi-step";
     agentProfiles: readonly ["application", "documentation"];
-}, {
-    readonly id: "gpt-oss-120b";
-    readonly label: "GPT-OSS 120B";
-    readonly provider: "cerebras";
-    readonly providerLabel: "Cerebras";
-    readonly family: "GPT-OSS";
-    readonly agentSupport: "single-step";
-    readonly agentProfiles: readonly [];
-    readonly transport: "chat-completions";
-    readonly recommendation: "limited";
-    readonly note: "Available for direct generation; the current proxy adapter has not passed multi-step tool-result continuation.";
 }];
 declare const DEEPSPACE_AI_DEFAULTS: {
-    readonly agent: "claude-sonnet-5";
-    readonly directGeneration: "claude-sonnet-5";
+    readonly agent: "claude-opus-5-5";
+    readonly directGeneration: "claude-opus-5-5";
     readonly summarization: "claude-haiku-4-5";
 };
 declare const DEEPSPACE_AGENT_PROFILES: {
     readonly application: {
         readonly id: "application";
-        readonly defaultModel: "claude-sonnet-5";
+        readonly defaultModel: "claude-opus-5-5";
         readonly maxSteps: 21;
         readonly maxToolCalls: 20;
         readonly allowedTools: "application-defined";
     };
     readonly documentation: {
         readonly id: "documentation";
-        readonly defaultModel: "claude-sonnet-5";
+        readonly defaultModel: "claude-opus-5-5";
         readonly maxSteps: 21;
         readonly maxToolCalls: 20;
         readonly allowedTools: readonly ["documentation_search", "documentation_read"];
@@ -2519,6 +2594,23 @@ interface ProxyRoute {
 }
 declare const BROWSER_PROXY_ROUTES: ReadonlyArray<ProxyRoute>;
 
+/**
+ * Wire contract between the SDK's sandbox helpers (server/utils/sandbox.ts)
+ * and the api-worker proxy that records who owns each Anthropic
+ * code-execution file and container.
+ */
+/**
+ * Who may use a file or container the request creates:
+ * - `user` (default): only the JWT subject, inside the calling app.
+ * - `app`: any caller of the same app (shared workspaces, owner-billed
+ *   background turns continuing a user's conversation).
+ * Another app can never use either.
+ */
+declare const SANDBOX_SCOPES: readonly ["user", "app"];
+type SandboxScope = (typeof SANDBOX_SCOPES)[number];
+/** Request header carrying the {@link SandboxScope} for resources a request creates. */
+declare const SANDBOX_SCOPE_HEADER = "x-deepspace-sandbox-scope";
+
 /**
  * Identity claims cross from an app Worker to its private room Durable Object
  * in headers. Header values are ByteStrings, while verified profile claims may
@@ -2538,6 +2630,42 @@ declare function authenticatedRoomRequest(request: Request, auth: RoomAuth | nul
     role?: string;
 }): Request;
 
+/**
+ * DeepSpace's deployment planes, in one place: production, staging and
+ * DeepSpace Medical, the BAA-covered plane for healthcare apps
+ * (docs/proposals/deepspace-medical.md).
+ *
+ * Side-effect free. The CLI, the browser client, the test-account helpers and
+ * the platform workers all read it, so a plane's hosts and its restricted-plane
+ * rule cannot drift between them.
+ */
+type PlaneName = 'production' | 'staging' | 'medical';
+interface PlaneUrls {
+    auth: string;
+    api: string;
+    platform: string;
+    deploy: string;
+    /** Deployed apps live on `<name>.<appDomain>`. */
+    appDomain: string;
+    /** The zone the platform services live on. */
+    platformDomain: string;
+    /** The plane's public home page. */
+    home: string;
+    /** The builder dashboard; null where the plane has none. */
+    dashboard: string | null;
+    /** The privacy policy sign-in screens link to. */
+    privacyPolicy: string;
+}
+declare const PLANES: Readonly<Record<PlaneName, PlaneUrls>>;
+/**
+ * Whether a platform worker runs on a restricted plane (DeepSpace Medical
+ * sets `DEEPSPACE_PLANE = "medical"`). Unset means production. Any value other
+ * than `production` or `staging` restricts, so a typo fails closed.
+ */
+declare function isRestrictedPlane(env: {
+    DEEPSPACE_PLANE?: string;
+}): boolean;
+
 /**
  * Wildcard-aware CORS origin matching for the platform workers.
  *
@@ -3314,7 +3442,7 @@ declare function resolveAppRole(env: AppRoleEnv, userId: string): Promise<Role>;
  *   // Server-side autonomous — no auth config needed
  *   import { createDeepSpaceAI } from 'deepspace/worker'
  *   const cerebras = createDeepSpaceAI(env, 'cerebras')
- *   const result = await generateText({ model: cerebras('llama-3.3-70b'), ... })
+ *   const result = await generateText({ model: cerebras('gpt-oss-120b'), ... })
  *
  *   // User-initiated (inside a request handler)
  *   const jwt = c.req.header('Authorization')!.slice(7)
@@ -3334,6 +3462,13 @@ interface DeepSpaceAIEnv extends ApiWorkerEnv {
      * Bills the app owner.
      */
     APP_OWNER_JWT?: string;
+    /**
+     * The app's id and deploy-time identity token. Sent with every proxied call
+     * so the proxy can tie Anthropic sandbox files and containers to this app;
+     * code execution and files are refused without them.
+     */
+    DEEPSPACE_APP_ID?: string;
+    APP_IDENTITY_TOKEN?: string;
 }
 interface DeepSpaceAIOptions {
     /**
@@ -3346,6 +3481,12 @@ interface DeepSpaceAIOptions {
      * client-supplied billing override.
      */
     authToken?: string;
+    /**
+     * Who may reuse the sandbox files and containers this call creates.
+     * Default `'user'`: only the auth token's user. `'app'`: every caller of
+     * this app. Another app can never reach either.
+     */
+    sandboxScope?: SandboxScope;
 }
 /**
  * Build an AI SDK provider that routes through the DeepSpace API worker.
@@ -3361,10 +3502,12 @@ type DeepSpaceAgentStreamOptions<TOOLS extends ToolSet> = Omit<StreamTextOptions
     profile: DeepSpaceAgentProfileId;
     modelId?: unknown;
     authToken?: string;
+    /** Scope for sandbox files and containers this turn creates (see `createDeepSpaceAI`). */
+    sandboxScope?: SandboxScope;
 };
 interface DeepSpaceAgentStream<TOOLS extends ToolSet> {
     selection: ResolvedDeepSpaceAgentModel;
-    result: StreamTextResult<TOOLS, never>;
+    result: ReturnType<typeof streamText<TOOLS>>;
 }
 declare class DeepSpaceAgentModelError extends Error {
     readonly modelId: unknown;
@@ -3388,6 +3531,118 @@ interface DeepSpaceAgentDiagnosticContext {
 /** Preserve safe structured provider diagnostics in bounded Worker logs. */
 declare function deepSpaceAgentErrorSummary(error: unknown, context?: DeepSpaceAgentDiagnosticContext): string;
 
+/**
+ * Anthropic's hosted code-execution sandbox, through the DeepSpace proxy.
+ *
+ * Claude runs Python and shell in a container Anthropic hosts, so an agent can
+ * read, edit and create real files (Word, Excel, PowerPoint, PDF, charts). The
+ * container has no network: files go in and come out through Anthropic's
+ * Files API, which the proxy scopes to this app (and, by default, to the
+ * calling user — see `DeepSpaceAIOptions.sandboxScope`).
+ *
+ *   const ai = createDeepSpaceAI(env, 'anthropic', { authToken })
+ *   const files = sandboxFiles(env, { authToken })
+ *   const sheet = await files.upload(bytes, { filename: 'leads.xlsx' })
+ *
+ *   const result = streamText({            // stream: long jobs outlive a non-streamed call
+ *     model: ai('claude-sonnet-5'),
+ *     tools: { code_execution: codeExecutionTool(), crm_query: callableFromSandbox(crmQuery) },
+ *     prepareStep: forwardSandboxContainer,          // same container across steps
+ *     providerOptions: reuseSandbox(savedContainerId), // optional: across messages
+ *     messages: [{ role: 'user', content: [{ type: 'text', text: 'Chart this' }, sandboxUpload(sheet)] }],
+ *   })
+ *
+ *   const { containerId, fileIds } = sandboxOutputs(await result.steps)
+ *   const chart = await files.download(fileIds[0])
+ *
+ * Stream sandbox calls (`streamText`). A non-streamed call that runs longer
+ * than about two minutes is cut off with a 524 on its way to Anthropic —
+ * multi-step document jobs routinely do.
+ *
+ * Billing: tokens as usual, plus a flat 5 container-minutes for each request
+ * that used the sandbox. Files API calls are free.
+ */
+
+/** The code-execution tool. Add it to `tools`; Claude only starts a container when it uses it. */
+declare function codeExecutionTool(): Tool;
+/**
+ * Let code running in the sandbox call this tool (programmatic tool calling),
+ * in addition to Claude calling it directly. The call still runs in the app's
+ * worker with the tool's own permission checks — the sandbox gets no
+ * credentials. Anthropic waits about 4 minutes for each result.
+ */
+declare function callableFromSandbox<T extends Tool>(tool: T): T;
+/** `prepareStep` that keeps every step of a turn in the first step's container. */
+declare const forwardSandboxContainer: typeof forwardAnthropicContainerIdFromLastStep;
+/** `providerOptions` that continue in a container saved from an earlier turn. */
+declare function reuseSandbox(containerId: string | null | undefined): {
+    anthropic: {
+        container: {
+            id: string;
+        };
+    };
+} | undefined;
+/** A message part that copies an uploaded file into the sandbox. */
+declare function sandboxUpload(file: Pick<SandboxFile, 'id' | 'filename' | 'mime_type'>): FilePart;
+interface SandboxStep {
+    providerMetadata?: Record<string, unknown>;
+    content: ReadonlyArray<unknown>;
+}
+/**
+ * The container a turn ran in (save it to continue later) and the files the
+ * sandbox created (download them with `sandboxFiles`).
+ */
+declare function sandboxOutputs(steps: ReadonlyArray<SandboxStep>): {
+    containerId: string | null;
+    fileIds: string[];
+};
+/** Anthropic's file metadata, as returned through the proxy. */
+interface SandboxFile {
+    type: 'file';
+    id: string;
+    filename: string;
+    mime_type: string;
+    size_bytes: number;
+    created_at: string;
+    /** Only files the sandbox created are downloadable; uploads are not. */
+    downloadable?: boolean;
+    expires_at?: string | null;
+}
+interface SandboxFileList {
+    data: SandboxFile[];
+    /** Pass back as `page` for the next page; null on the last one. */
+    next_page: string | null;
+}
+interface SandboxUploadOptions {
+    /** Required when `file` is a Blob rather than a File. */
+    filename?: string;
+    /** 3,600–7,776,000. The proxy defaults uploads to 30 days. */
+    expiresInSeconds?: number;
+}
+interface SandboxFilesOptions {
+    /** Same meaning as in `createDeepSpaceAI`: whose file it is, and who is billed. */
+    authToken?: string;
+    /** Scope for files this client uploads. Must match the calls that will use them. */
+    scope?: SandboxScope;
+}
+interface SandboxFilesClient {
+    upload(file: Blob, options?: SandboxUploadOptions): Promise<SandboxFile>;
+    get(fileId: string): Promise<SandboxFile>;
+    /** The file's bytes as a streaming Response (content-type and content-disposition set). */
+    download(fileId: string): Promise<Response>;
+    list(options?: {
+        limit?: number;
+        page?: string;
+    }): Promise<SandboxFileList>;
+    delete(fileId: string): Promise<void>;
+}
+declare class SandboxFileError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
+/** Upload, read, list and delete the calling app's sandbox files. */
+declare function sandboxFiles(env: DeepSpaceAIEnv, options?: SandboxFilesOptions): SandboxFilesClient;
+
 /**
  * Composio tools for the Vercel AI SDK.
  *
@@ -4180,6 +4435,17 @@ declare function isTestAccountClaims(claims: JwtClaims | Record<string, unknown>
 /** True when a billing subscription tier marks a test account. */
 declare function isTestAccountTier(tier: string | null | undefined): boolean;
 
+type BetterAuthUserCreateBeforeHook = NonNullable<NonNullable<NonNullable<NonNullable<BetterAuthOptions['databaseHooks']>['user']>['create']>['before']>;
+type UserCreateData = Parameters<BetterAuthUserCreateBeforeHook>[0];
+type UserCreateResult = Awaited<ReturnType<BetterAuthUserCreateBeforeHook>>;
+interface DeepSpaceUserCreateContext {
+    request?: Request;
+    headers?: Headers;
+    path?: string;
+    /** OAuth state after Better Auth has decrypted/loaded and verified it. */
+    oauthState: Awaited<ReturnType<typeof getOAuthState>>;
+}
+type UserAdditionalFields = NonNullable<BetterAuthOptions['user']>['additionalFields'];
 interface DeepSpaceAuthConfig {
     /** D1 database binding */
     database: D1Database;
@@ -4217,6 +4483,19 @@ interface DeepSpaceAuthConfig {
     emailAndPassword?: boolean;
     /** Trusted origins for CORS */
     trustedOrigins?: string[];
+    /**
+     * Server-owned fields to add to Better Auth's user model. Use `input: false`
+     * for values that may only be populated by a database hook, and
+     * `returned: false` for values that must stay out of public auth responses.
+     */
+    userAdditionalFields?: UserAdditionalFields;
+    /**
+     * Runs inside Better Auth's `user.create.before` lifecycle and may return
+     * the library's `{ data }` patch. Errors intentionally abort user creation,
+     * which lets callers fail closed when a server-validated signup promise can
+     * no longer be attached to the new account.
+     */
+    beforeUserCreate?: (user: UserCreateData, ctx: DeepSpaceUserCreateContext | null) => Promise<UserCreateResult> | UserCreateResult;
     /**
      * Called after a new user row is created (any flow: social OAuth callback,
      * email/password, server-side `auth.api.signUpEmail`). When the signup came
@@ -5244,6 +5523,13 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             };
         };
     } | undefined;
+    socialProviders: Parameters<typeof betterAuth>[0]["socialProviders"];
+    trustedOrigins: string[];
+    user?: {
+        additionalFields: {
+            [x: string]: better_auth.DBFieldAttribute;
+        };
+    } | undefined;
     database: D1Database;
     baseURL: string;
     secret: string;
@@ -5254,8 +5540,6 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
     emailAndPassword: {
         enabled: boolean;
     };
-    socialProviders: Parameters<typeof betterAuth>[0]["socialProviders"];
-    trustedOrigins: string[];
 }>;
 type DeepSpaceAuth = ReturnType<typeof createDeepSpaceAuth>;
 
@@ -5340,6 +5624,22 @@ declare function normalizeAgentTargetOrigin(value: unknown, policy: AgentTargetP
  */
 declare const SESSION_COOKIE = "__Secure-better-auth.session_token";
 
+interface ExpoAuthWorkerEnv extends AuthWorkerEnv {
+    AUTH_WORKER_URL?: string;
+    AUTH_JWT_PUBLIC_KEY?: string;
+    AUTH_JWT_ISSUER?: string;
+}
+interface ExpoAuthBridgeOptions {
+    /** Exact native callback URIs registered by the app. */
+    allowedRedirectUris?: readonly string[];
+}
+declare function nativeAuthStart(request: Request, env: ExpoAuthWorkerEnv, options?: ExpoAuthBridgeOptions): Response;
+declare function nativeAuthCallback(request: Request, _env: ExpoAuthWorkerEnv, options?: ExpoAuthBridgeOptions): Response;
+declare function nativeAuthExchange(request: Request, env: ExpoAuthWorkerEnv): Promise<Response>;
+declare function nativeAuthToken(request: Request, env: ExpoAuthWorkerEnv): Promise<Response>;
+declare function nativeAuthMe(request: Request, env: ExpoAuthWorkerEnv): Promise<Response>;
+declare function nativeAuthSignOut(request: Request, env: ExpoAuthWorkerEnv): Promise<Response>;
+
 declare class BodyTooLargeError extends Error {
     readonly maxBytes: number;
     constructor(maxBytes: number);
@@ -5496,4 +5796,4 @@ declare const MAX_LOG_TEXT_LENGTH: number;
  */
 declare function workerErrorHandler(prefix: string, respond?: (c: Context) => Response): ErrorHandler;
 
-export { ACCOUNT_STORAGE_LIMIT_BYTES, ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID, ACTION_TOOLS_DELETE_WHERE_MIGRATION_ID, AGENT_TOKEN_SCOPE, AGENT_TOOL_REQUEST_BODY_CAP, AGENT_TOOL_RESPONSE_BODY_CAP, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, ANONYMOUS_USER_ID_PREFIX, APP_ID_RE, APP_LOG_EVENT_KEYS, APP_NAME_RULES, ASSET_NOT_FOUND_HANDLING_VALUES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type AgentTargetPolicy, type AgentToolAccessResult, type AgentToolRouteEnv, type AgentToolRouteOptions, type ApiErrorIssue, type ApiWorkerEnv, type AppLogEvent, type AppLogEventKey, type AppLogsResponse, type AppMembership, type AppMigrationIdsValidation, type AppNameResolution, type AppNameValidation, type AssetNotFoundHandling, type AuthWorkerEnv, Awareness, type AwarenessState, type AwarenessStates, BASE_USERS_SCHEMA, BROWSER_PROXY_ROUTES, BUILD_INJECTED_APP_ID_MIGRATION_ID, BUILT_IN_TOOLS, type BaseMessage, BaseRoom, type BindingJsonValue, BodyTooLargeError, CHANNELS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, COST_RATES, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type ClientMessage, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConnectionAttachment, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEEPSPACE_AGENT_PROFILES, DEEPSPACE_AI_DEFAULTS, DEEPSPACE_AI_MODELS, DEEPSPACE_MODEL_CATALOG_PROVENANCE, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, type DOBindings, type DOManifest, type DOManifestEntry, type DeepSpaceAIEnv, type DeepSpaceAIModel, type DeepSpaceAIModelId, type DeepSpaceAIOptions, type DeepSpaceAIProvider, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, type DeepSpaceAgentProfile, DeepSpaceAgentProfileError, type DeepSpaceAgentProfileId, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAgentSupport, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DeepSpaceDocumentationRouteEnv, type DeepSpaceDocumentationRouteOptions, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, FILES_SESSION_COOKIE_READS_MIGRATION_ID, type GetActionData, type HandlerContext, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, type KnowledgeAddOptions, type KnowledgeAddResult, type KnowledgeClient, type KnowledgeEnv, KnowledgeError, type KnowledgeItem, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeSearchChunk, type KnowledgeSearchOptions, type KnowledgeSearchResult, type KnowledgeStatus, LOG_LEVELS, type LogLevel, MAX_APP_FILE_BYTES, MAX_BINDING_NAME_LENGTH, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_ENV_VAR_BYTES, MAX_LOG_TEXT_LENGTH, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type MessageHandlers, type MsgType, type MutateActionData, type NormalizedApiError, PRODUCTION_OFFICIAL_AGENT_ORIGINS, type PermissionContext, type PermissionLevel, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type ProtocolMessage, type ProxyRoute, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RECORD_NOT_FOUND, REGISTRY_INSTANCE, RELEASE_STAMP_PATH, REPO_STORE_LIMIT_BYTES, REQUIRED_COMPATIBILITY_FLAGS, RESERVED_BINDING_NAMES, RESERVED_RUN_WORKER_FIRST, RESOURCE_ID_RE, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_DEFAULT, RecordRoom, type RecordRoomConfig, RegistryClientError, type ResolvedColumn, type ResolvedDeepSpaceAgentModel, type RolePermissions, type RunMigrationsResult, SDK_RUN_WORKER_FIRST, SECRET_NAME_RE, SECURE_ROOM_BOUNDARIES_MIGRATION_ID, SESSION_COOKIE, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTIONS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedKnowledgeClient, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type ServerMessage, type StorageAdmission, type StoredRecord, type Summarizer, type SyncResult, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, UNDECLARED_ASSET_NOT_FOUND_HANDLING, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserToolExecutorEnv, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKER_OWNED_NOT_FOUND_MIGRATION_ID, YjsRoom, agentTokenIssuer, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, armCronRoom, authWorkerFetch, authenticatedRoomRequest, bindingManifestFromOutputConfig, buildCronContext, buildTableSelect, buildUiParts, callRegistry, canCreate, canDelete, canRead, canUpdate, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, clientBuild, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDecoder, createDeepSpaceAI, createDeepSpaceAuth, createEncoder, createScopedR2Handler, createUserToolExecutor, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, enqueueJob, epochSeconds, folderFilter, formatBytes, getChat, getDeepSpaceAIModel, getMessageType, getRolePermissions, handleAwarenessMessage, handleSyncMessage, hasContent, isAnonymousUserId, isAssetNotFoundHandling, isAutoProvision, isFilesVerbPath, isOwner, isPlatformReservedPath, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, knowledge, lintSchema, lintSchemaSet, lintSchemas, listDeepSpaceAgentModels, loadMessages, logEventText, loggableError, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, noopPermissionContext, normalizeAgentTargetOrigin, normalizeApiError, normalizeKnowledgeFolder, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, readBoundedBodyText, readVarUint, readVarUint8Array, registerAgentToolRoutes, registerDeepSpaceDocumentation, registryErrorJson, registryStub, resolveAppMembership, resolveAppName, resolveAppRole, resolveColumn, resolveCompatibilityFlags, resolveDeepSpaceAgentModel, resolveSessionReadAuth, rowToData, runMigrations, serverBuild, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, toUint8Array, totalChars, truncateLogText, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppMigrationIds, validateAppName, validateBindingManifest, validateDoManifest, verifyAgentToken, verifyJwt, workerErrorHandler, writeVarUint, writeVarUint8Array };
+export { ACCOUNT_STORAGE_LIMIT_BYTES, ACTION_ROUTES_BEARER_GUARD_MIGRATION_ID, ACTION_TOOLS_DELETE_WHERE_MIGRATION_ID, AGENT_TOKEN_SCOPE, AGENT_TOOL_REQUEST_BODY_CAP, AGENT_TOOL_RESPONSE_BODY_CAP, AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, AI_SDK_7_MIGRATION_ID, ALLOWED_BINDING_TYPES, ANONYMOUS_USER_ID_PREFIX, APP_ID_RE, APP_LOG_EVENT_KEYS, APP_NAME_RULES, ASSET_NOT_FOUND_HANDLING_VALUES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type AgentTargetPolicy, type AgentToolAccessResult, type AgentToolRouteEnv, type AgentToolRouteOptions, type ApiErrorIssue, type ApiWorkerEnv, type AppLogEvent, type AppLogEventKey, type AppLogsResponse, type AppMembership, type AppMigrationIdsValidation, type AppNameResolution, type AppNameValidation, type AssetNotFoundHandling, type AuthWorkerEnv, Awareness, type AwarenessState, type AwarenessStates, BASE_USERS_SCHEMA, BROWSER_PROXY_ROUTES, BUILD_INJECTED_APP_ID_MIGRATION_ID, BUILT_IN_TOOLS, type BaseMessage, BaseRoom, type BindingJsonValue, BodyTooLargeError, CHANNELS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, COST_RATES, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type ClientMessage, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConnectionAttachment, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEEPSPACE_AGENT_PROFILES, DEEPSPACE_AI_DEFAULTS, DEEPSPACE_AI_MODELS, DEEPSPACE_MODEL_CATALOG_PROVENANCE, DEFAULT_CONTEXT_CONFIG, DEFAULT_DELETE_WHERE_LIMIT, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DEPLOYED_APPS_DEFAULTS, type DOBindings, type DOManifest, type DOManifestEntry, type DeepSpaceAIEnv, type DeepSpaceAIModel, type DeepSpaceAIModelId, type DeepSpaceAIOptions, type DeepSpaceAIProvider, type DeepSpaceAgentDiagnosticContext, DeepSpaceAgentModelError, type DeepSpaceAgentProfile, DeepSpaceAgentProfileError, type DeepSpaceAgentProfileId, type DeepSpaceAgentStream, type DeepSpaceAgentStreamOptions, type DeepSpaceAgentSupport, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DeepSpaceDocumentationRouteEnv, type DeepSpaceDocumentationRouteOptions, type DeepSpaceUserCreateContext, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, type ExpoAuthBridgeOptions, type ExpoAuthWorkerEnv, FILES_SESSION_COOKIE_READS_MIGRATION_ID, type GetActionData, type HandlerContext, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, type KnowledgeAddOptions, type KnowledgeAddResult, type KnowledgeClient, type KnowledgeEnv, KnowledgeError, type KnowledgeItem, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeSearchChunk, type KnowledgeSearchOptions, type KnowledgeSearchResult, type KnowledgeStatus, LOG_LEVELS, type LogLevel, MAX_APP_FILE_BYTES, MAX_BINDING_NAME_LENGTH, MAX_DELETE_WHERE_LIMIT, MAX_DEPLOY_ASSET_FILE_BYTES, MAX_ENV_VAR_BYTES, MAX_LOG_TEXT_LENGTH, MAX_UPLOAD_PARTS, MAX_UPLOAD_REQUEST_BYTES, MESSAGES_SCHEMA, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type MessageHandlers, type MsgType, type MutateActionData, type NormalizedApiError, PLANES, PRODUCTION_OFFICIAL_AGENT_ORIGINS, type PermissionContext, type PermissionLevel, type PlaneName, type PlaneUrls, type PlatformWorkerEnv, type PrefixResult, type PresencePeer, PresenceRoom, type ProtocolMessage, type ProxyRoute, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RECORD_NOT_FOUND, REGISTRY_INSTANCE, RELEASE_STAMP_PATH, REPO_STORE_LIMIT_BYTES, REQUIRED_COMPATIBILITY_FLAGS, RESERVED_BINDING_NAMES, RESERVED_RUN_WORKER_FIRST, RESOURCE_ID_RE, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_DEFAULT, RecordRoom, type RecordRoomConfig, RegistryClientError, type ResolvedColumn, type ResolvedDeepSpaceAgentModel, type RolePermissions, type RunMigrationsResult, SANDBOX_SCOPES, SANDBOX_SCOPE_HEADER, SDK_RUN_WORKER_FIRST, SECRET_NAME_RE, SECURE_ROOM_BOUNDARIES_MIGRATION_ID, SESSION_COOKIE, STRICT_APP_ID_RE, SYSTEM_ASSIGNED_COLUMNS, SYSTEM_COLLECTIONS, SYSTEM_MAINTAINED_COLUMNS, SYSTEM_MANAGED_COLUMNS, type SandboxFile, SandboxFileError, type SandboxFileList, type SandboxFilesClient, type SandboxFilesOptions, type SandboxScope, type SandboxUploadOptions, SchemaRegistry, type ScopeContext, type ScopedKnowledgeClient, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotResult, type ServerMessage, type StorageAdmission, type StoredRecord, type Summarizer, type SyncResult, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, UNDECLARED_ASSET_NOT_FOUND_HANDLING, UPLOAD_PART_BYTES, USERS_COLUMNS, type User, type UserAttachment, type UserToolExecutorEnv, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKER_OWNED_NOT_FOUND_MIGRATION_ID, YjsRoom, agentTokenIssuer, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, armCronRoom, authWorkerFetch, authenticatedRoomRequest, bindingManifestFromOutputConfig, buildCronContext, buildTableSelect, buildUiParts, callRegistry, callableFromSandbox, canCreate, canDelete, canRead, canUpdate, capToolResultSize, captureScreenshot, checkFieldPermissions, checkUnclaimedOwnerTransition, clientBuild, codeExecutionTool, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDecoder, createDeepSpaceAI, createDeepSpaceAuth, createEncoder, createScopedR2Handler, createUserToolExecutor, dataToColumnValues, decodeJwtPayload, deepSpaceAgentErrorSummary, deleteChatCascade, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, enqueueJob, epochSeconds, folderFilter, formatBytes, forwardSandboxContainer, getChat, getDeepSpaceAIModel, getMessageType, getRolePermissions, handleAwarenessMessage, handleSyncMessage, hasContent, isAnonymousUserId, isAssetNotFoundHandling, isAutoProvision, isFilesVerbPath, isOwner, isPlatformReservedPath, isRestrictedPlane, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, knowledge, lintSchema, lintSchemaSet, lintSchemas, listDeepSpaceAgentModels, loadMessages, logEventText, loggableError, makeDefaultSummarizer, matchOrigin, meterAi, meterUsage, meterVectorize, mintAppId, mintUlid, nativeAuthCallback, nativeAuthExchange, nativeAuthMe, nativeAuthSignOut, nativeAuthStart, nativeAuthToken, noopPermissionContext, normalizeAgentTargetOrigin, normalizeApiError, normalizeKnowledgeFolder, parseQuotaLimit, platformCorsPatterns, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, readBoundedBodyText, readVarUint, readVarUint8Array, registerAgentToolRoutes, registerDeepSpaceDocumentation, registryErrorJson, registryStub, resolveAppMembership, resolveAppName, resolveAppRole, resolveColumn, resolveCompatibilityFlags, resolveDeepSpaceAgentModel, resolveSessionReadAuth, reuseSandbox, rowToData, runMigrations, sandboxFiles, sandboxOutputs, sandboxUpload, serverBuild, storageLimitForTier, storageQuotaMessage, streamDeepSpaceAgent, timingSafeEqualHex, timingSafeEqualStrings, toUint8Array, totalChars, truncateLogText, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppMigrationIds, validateAppName, validateBindingManifest, validateDoManifest, verifyAgentToken, verifyJwt, workerErrorHandler, writeVarUint, writeVarUint8Array };