deepspace 0.4.0 → 0.4.1

package/dist/index.d.ts

@@ -6230,17 +6230,23 @@ declare function toConnectionStatus(queryStatus: string): ConnectionStatus;
 /**
  * useR2Files — Scoped file storage hook for DeepSpace apps.
  *
- * Provides upload, download, list, and delete for files in R2, scoped to
- * the current app ("self" — uses hostname-based scoping on the server).
+ * Provides upload, download, list, and delete for files in R2.
+ *
+ * Two scopes are supported via the `scope` option:
+ *   - `'self'` (default): per-user storage. Reads require auth.
+ *   - `'app'`: app-wide storage. Reads are public — the upload URL works
+ *     directly as an `<img src>`. Use for avatars, logos, etc.
  *
  * @example
  * ```tsx
- * const { upload, downloadFile, deleteFile, list } = useR2Files()
+ * // Per-user files (default):
+ * const { upload, downloadFile } = useR2Files()
  * await upload(myFile, 'photo.png')
  *
- * const files = await list()
- * await downloadFile(files[0])  // uses originalName automatically
- * await deleteFile(files[0])
+ * // App-shared files (public reads — usable in <img src>):
+ * const { upload } = useR2Files({ scope: 'app' })
+ * const r = await upload(file, `avatars/${userId}.png`)
+ * // r.url is a plain, anon-readable URL.
  * ```
  */
 interface R2UploadResult {
@@ -6314,17 +6320,29 @@ interface UseR2FilesReturn {
     /**
      * Build a plain URL for a file. Accepts an R2FileInfo or a raw key string.
      *
-     * **Note**: This URL has no auth token attached. It only works for
-     * unauthenticated reads on deployed sites where the prefix is derived
-     * from the hostname. For authenticated access, use `downloadFile` or
-     * `readFile` instead.
+     * **Note**: This URL has no auth token attached. It works for `'app'`-scope
+     * files (which are publicly readable) but not for `'self'`-scope files —
+     * those require an Authorization header, so use `readFile` / `downloadFile`.
      */
     getUrl: (fileOrKey: R2FileInfo | string) => string;
     /** Whether an upload is currently in progress. */
     isUploading: boolean;
 }
+/**
+ * Scope controls where files live and who can read them:
+ *
+ *  - `'self'` (default) — `apps/<app>/users/<userId>/…`. Per-user storage.
+ *    Reads require the caller's auth token; not usable from a plain `<img>`
+ *    or unauthenticated browser request.
+ *  - `'app'` — `apps/<app>/…`. Shared by everyone in the app. Reads are
+ *    public (no auth header needed), so the upload URL works directly as
+ *    an `<img src>`. Use this for avatars, logos, attachments, and other
+ *    assets meant to be embedded in pages.
+ *
+ * Uploads under `'app'` still require a signed-in user.
+ */
 type R2Scope = {
-    scope?: 'self';
+    scope?: 'self' | 'app';
 };
 declare function useR2Files(options?: R2Scope): UseR2FilesReturn;
 

package/dist/index.js

@@ -892,7 +892,35 @@ function AuthOverlay({
                   }
                 )
               ] }),
-              /* @__PURE__ */ jsxs2("div", { className: "mt-5 flex items-center justify-center gap-1.5 text-[11px] text-muted-foreground", children: [
+              /* @__PURE__ */ jsxs2("p", { className: "mt-5 text-xs leading-snug text-muted-foreground", children: [
+                "By continuing, you agree to the DeepSpace",
+                " ",
+                /* @__PURE__ */ jsx2(
+                  "a",
+                  {
+                    href: "https://deep.space/terms",
+                    target: "_blank",
+                    rel: "noopener noreferrer",
+                    className: "underline hover:text-foreground",
+                    children: "Terms of Service"
+                  }
+                ),
+                " ",
+                "and",
+                " ",
+                /* @__PURE__ */ jsx2(
+                  "a",
+                  {
+                    href: "https://deep.space/privacy",
+                    target: "_blank",
+                    rel: "noopener noreferrer",
+                    className: "underline hover:text-foreground",
+                    children: "Privacy Policy"
+                  }
+                ),
+                "."
+              ] }),
+              /* @__PURE__ */ jsxs2("div", { className: "mt-4 flex items-center justify-center gap-1.5 text-[11px] text-muted-foreground", children: [
                 /* @__PURE__ */ jsx2("svg", { width: "12", height: "12", viewBox: "0 0 24 24", fill: "currentColor", opacity: "0.5", "aria-hidden": true, children: /* @__PURE__ */ jsx2("circle", { cx: "12", cy: "12", r: "10" }) }),
                 "Powered by DeepSpace"
               ] })
@@ -3407,11 +3435,12 @@ function resolveFile(fileOrKey) {
 }
 function useR2Files(options) {
   const [isUploading, setIsUploading] = useState13(false);
+  const scope = options?.scope ?? "self";
   const scopeParams = useMemo10(() => {
     const params = new URLSearchParams();
-    params.set("scope", "self");
+    params.set("scope", scope);
     return params.toString();
-  }, []);
+  }, [scope]);
   const authHeaders = useCallback15(async () => {
     const token = await getAuthToken();
     if (token) {