deepspace 0.4.5 → 0.5.1

package/dist/server.d.ts

@@ -1,5 +1,7 @@
 import { LanguageModel, ToolSet, ModelMessage } from 'ai';
 import * as Y from 'yjs';
+import * as zod_v4_core from 'zod/v4/core';
+import * as zod from 'zod';
 import * as better_auth from 'better-auth';
 import { betterAuth } from 'better-auth';
 import * as better_auth_plugins from 'better-auth/plugins';
@@ -488,10 +490,10 @@ interface CronContext {
         query(collection: string, opts?: {
             where?: Record<string, unknown>;
             limit?: number;
-        }): Promise<any[]>;
-        create(collection: string, data: Record<string, unknown>): Promise<any>;
-        update(collection: string, recordId: string, data: Record<string, unknown>): Promise<any>;
-        delete(collection: string, recordId: string): Promise<any>;
+        }): Promise<unknown[]>;
+        create(collection: string, data: Record<string, unknown>): Promise<unknown>;
+        update(collection: string, recordId: string, data: Record<string, unknown>): Promise<unknown>;
+        delete(collection: string, recordId: string): Promise<unknown>;
     };
     /**
      * Call a platform integration endpoint (e.g. "openai/chat-completion",
@@ -499,7 +501,7 @@ interface CronContext {
      * APP_OWNER_JWT the rest of the SDK uses for server-side billed calls.
      */
     integrations: {
-        call(endpoint: string, params?: Record<string, unknown>): Promise<any>;
+        call(endpoint: string, params?: Record<string, unknown>): Promise<unknown>;
     };
     /** App owner's user ID */
     ownerUserId: string;
@@ -669,7 +671,8 @@ interface ScreenshotOptions {
 }
 interface ScreenshotEnv extends PlatformWorkerEnv {
     APP_NAME: string;
-    APP_IDENTITY_TOKEN: string;
+    /** Absent until the app's first deploy registers it — see appendAppIdentity. */
+    APP_IDENTITY_TOKEN?: string;
 }
 interface ScreenshotResult {
     /** PNG bytes. */
@@ -1390,7 +1393,7 @@ declare abstract class BaseRoom<E = Record<string, unknown>> {
     fetch(request: Request): Promise<Response>;
     private handleWebSocketUpgrade;
     webSocketMessage(ws: WebSocket, message: ArrayBuffer | string): Promise<void>;
-    webSocketClose(ws: WebSocket, code: number, reason: string): Promise<void>;
+    webSocketClose(ws: WebSocket, _code: number, _reason: string): Promise<void>;
     webSocketError(ws: WebSocket, error: unknown): Promise<void>;
     alarm(): Promise<void>;
     /**
@@ -1398,7 +1401,7 @@ declare abstract class BaseRoom<E = Record<string, unknown>> {
      * Return an augmented attachment to serialize on the WebSocket,
      * or void to use the default attachment.
      */
-    protected onConnect(ws: WebSocket, user: UserAttachment): UserAttachment | void | Promise<UserAttachment | void>;
+    protected onConnect(_ws: WebSocket, _user: UserAttachment): UserAttachment | void | Promise<UserAttachment | void>;
     /**
      * Called for each parsed JSON message.
      */
@@ -1413,7 +1416,7 @@ declare abstract class BaseRoom<E = Record<string, unknown>> {
     /**
      * Called when a WebSocket disconnects.
      */
-    protected onDisconnect(ws: WebSocket, user: UserAttachment): void | Promise<void>;
+    protected onDisconnect(_ws: WebSocket, _user: UserAttachment): void | Promise<void>;
     /**
      * Called for HTTP requests that are NOT WebSocket upgrades.
      */
@@ -1670,7 +1673,6 @@ declare class SchemaRegistry {
     registerTrusted(schema: CollectionSchema): void;
     get(name: string): CollectionSchema | undefined;
     has(name: string): boolean;
-    hasTrusted(name: string): boolean;
     all(): CollectionSchema[];
     names(): string[];
 }
@@ -1742,6 +1744,12 @@ declare class RecordRoom<E = Record<string, unknown>> extends BaseRoom<E> {
     private ownerUserId;
     /** True until the first fetch() completes — detects hibernation wake-up */
     private freshConstruct;
+    /**
+     * Per-connection `[DO Perf]` timing logs are noisy on every hot path, so
+     * they're gated behind a `DEEPSPACE_DO_PERF` env binding (set it to any
+     * truthy value on the worker to opt in). Off by default.
+     */
+    private get perfLogEnabled();
     constructor(state: DurableObjectState, env: unknown, schemas?: CollectionSchema[], config?: RecordRoomConfig);
     private getPermissionContext;
     fetch(request: Request): Promise<Response>;
@@ -1754,12 +1762,13 @@ declare class RecordRoom<E = Record<string, unknown>> extends BaseRoom<E> {
     private ensureCollectionTable;
     private ensureAllCollectionTables;
     protected onConnect(ws: WebSocket, user: UserAttachment): Promise<ConnectionAttachment>;
-    protected onMessage(ws: WebSocket, user: UserAttachment, msg: {
-        type: string;
-        [key: string]: unknown;
-    }): Promise<void>;
-    protected onBinaryMessage(ws: WebSocket, user: UserAttachment, data: ArrayBuffer): Promise<void>;
-    protected onDisconnect(ws: WebSocket, user: UserAttachment): void;
+    /**
+     * Required to satisfy BaseRoom's abstract contract, but never invoked:
+     * RecordRoom overrides `webSocketMessage`/`webSocketClose` directly (below),
+     * so the BaseRoom dispatch path that would call this never runs. All real
+     * message handling lives in `handleRecordMessage`.
+     */
+    protected onMessage(): void;
     webSocketMessage(ws: WebSocket, message: ArrayBuffer | string): Promise<void>;
     webSocketClose(ws: WebSocket, code: number, reason: string): Promise<void>;
     webSocketError(ws: WebSocket, error: unknown): Promise<void>;
@@ -1803,12 +1812,12 @@ declare class YjsRoom<E = Record<string, unknown>> extends BaseRoom<E> {
     private getDoc;
     private persistDoc;
     protected onConnect(ws: WebSocket, user: UserAttachment): YjsAttachment;
-    protected onMessage(ws: WebSocket, user: UserAttachment, message: {
+    protected onMessage(_ws: WebSocket, _user: UserAttachment, _message: {
         type: string;
         [key: string]: unknown;
     }): void;
     protected onBinaryMessage(ws: WebSocket, user: UserAttachment, data: ArrayBuffer): void;
-    protected onDisconnect(ws: WebSocket, user: UserAttachment): void;
+    protected onDisconnect(ws: WebSocket, _user: UserAttachment): void;
     private handleSync;
     private handleAwareness;
     private readAwarenessUpdates;
@@ -1890,13 +1899,13 @@ declare abstract class GameRoom<E = Record<string, unknown>> extends BaseRoom<E>
      */
     protected abstract onTick(state: Record<string, unknown>, inputs: GameInput[], tick: number): Record<string, unknown> | undefined | Promise<Record<string, unknown> | undefined>;
     /** Called when a player connects */
-    protected onPlayerJoin(player: Player): void;
+    protected onPlayerJoin(_player: Player): void;
     /** Called when a player disconnects */
-    protected onPlayerLeave(player: Player): void;
+    protected onPlayerLeave(_player: Player): void;
     /** Called when the game starts */
     protected onGameStart(): void;
     /** Called when the game ends */
-    protected onGameEnd(finalState: Record<string, unknown>): void;
+    protected onGameEnd(_finalState: Record<string, unknown>): void;
     /**
      * Called once when the DO first hydrates persisted state from storage.
      * Receives the parsed state blob as it was written by a previous build.
@@ -3005,8 +3014,7 @@ interface VerifiedAuth {
     userId: string;
     claims: JwtClaims;
 }
-interface VerifyResult extends VerifiedAuth {
-}
+type VerifyResult = VerifiedAuth;
 interface TokenDebugInfo {
     iss?: string | null;
     aud?: string | string[] | null;
@@ -3048,6 +3056,33 @@ declare function timingSafeEqualHex(a: string, b: string): Promise<boolean>;
 
 declare function decodeJwtPayload(token: string | null | undefined): TokenDebugInfo | undefined;
 
+/**
+ * Test-account identification, shared by every platform worker.
+ *
+ * Test accounts (created via `deepspace test-accounts`) are real Better Auth
+ * users demarcated three ways, and a caller may present as any of them
+ * depending on where the check runs:
+ *  - their email always ends with @deepspace.test (enforced at creation)
+ *  - their JWTs carry `isTestAccount: true` (minted by the auth-worker,
+ *    the source of truth)
+ *  - their billing profile's subscription tier is 'test' (mirrored by the
+ *    api-worker on every authenticated request)
+ *
+ * Gate anything a test account must not do with these helpers rather than
+ * hand-rolled string comparisons, so the policy stays in one place. Prefer
+ * checking the claim when a verified JWT is at hand, and the tier as the
+ * fallback for persisted state that may outlive a claim (e.g. rows written
+ * before a guard existed).
+ */
+
+declare const TEST_ACCOUNT_EMAIL_SUFFIX = "@deepspace.test";
+/** True when the email belongs to a test account (case-insensitive). */
+declare function isTestAccountEmail(email: string | null | undefined): boolean;
+/** True when verified JWT claims identify the caller as a test account. */
+declare function isTestAccountClaims(claims: JwtClaims | Record<string, unknown> | null | undefined): boolean;
+/** True when a billing subscription tier marks a test account. */
+declare function isTestAccountTier(tier: string | null | undefined): boolean;
+
 interface DeepSpaceAuthConfig {
     /** D1 database binding */
     database: D1Database;
@@ -3089,6 +3124,7 @@ interface DeepSpaceAuthConfig {
 declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.Auth<{
     plugins: [{
         id: "organization";
+        version: string;
         endpoints: better_auth_plugins.OrganizationEndpoints<better_auth_plugins.OrganizationOptions & {
             teams: {
                 enabled: true;
@@ -3225,6 +3261,7 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             INVITATION_NOT_FOUND: better_auth.RawError<"INVITATION_NOT_FOUND">;
             YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION: better_auth.RawError<"YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION">;
             EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION: better_auth.RawError<"EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION">;
+            EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION: better_auth.RawError<"EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION">;
             YOU_ARE_NOT_ALLOWED_TO_CANCEL_THIS_INVITATION: better_auth.RawError<"YOU_ARE_NOT_ALLOWED_TO_CANCEL_THIS_INVITATION">;
             INVITER_IS_NO_LONGER_A_MEMBER_OF_THE_ORGANIZATION: better_auth.RawError<"INVITER_IS_NO_LONGER_A_MEMBER_OF_THE_ORGANIZATION">;
             YOU_ARE_NOT_ALLOWED_TO_INVITE_USER_WITH_THIS_ROLE: better_auth.RawError<"YOU_ARE_NOT_ALLOWED_TO_INVITE_USER_WITH_THIS_ROLE">;
@@ -3259,6 +3296,7 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             ROLE_NAME_IS_ALREADY_TAKEN: better_auth.RawError<"ROLE_NAME_IS_ALREADY_TAKEN">;
             CANNOT_DELETE_A_PRE_DEFINED_ROLE: better_auth.RawError<"CANNOT_DELETE_A_PRE_DEFINED_ROLE">;
             ROLE_IS_ASSIGNED_TO_MEMBERS: better_auth.RawError<"ROLE_IS_ASSIGNED_TO_MEMBERS">;
+            INVALID_TEAM_ID: better_auth.RawError<"INVALID_TEAM_ID">;
         };
         options: NoInfer<better_auth_plugins.OrganizationOptions & {
             teams: {
@@ -3270,13 +3308,17 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
         }>;
     }, {
         id: "two-factor";
+        version: string;
         endpoints: {
             enableTwoFactor: better_auth.StrictEndpoint<"/two-factor/enable", {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    password: better_auth.ZodString;
-                    issuer: better_auth.ZodOptional<better_auth.ZodString>;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    password: zod.ZodOptional<zod.ZodString>;
+                    issuer: zod.ZodOptional<zod.ZodString>;
+                }, zod_v4_core.$strip> | zod.ZodObject<{
+                    password: zod.ZodString;
+                    issuer: zod.ZodOptional<zod.ZodString>;
+                }, zod_v4_core.$strip>;
                 use: ((inputContext: better_auth.MiddlewareInputContext<better_auth.MiddlewareOptions>) => Promise<{
                     session: {
                         session: Record<string, any> & {
@@ -3337,9 +3379,11 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             }>;
             disableTwoFactor: better_auth.StrictEndpoint<"/two-factor/disable", {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    password: better_auth.ZodString;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    password: zod.ZodOptional<zod.ZodString>;
+                }, zod_v4_core.$strip> | zod.ZodObject<{
+                    password: zod.ZodString;
+                }, zod_v4_core.$strip>;
                 use: ((inputContext: better_auth.MiddlewareInputContext<better_auth.MiddlewareOptions>) => Promise<{
                     session: {
                         session: Record<string, any> & {
@@ -3391,11 +3435,11 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             }>;
             verifyBackupCode: better_auth.StrictEndpoint<"/two-factor/verify-backup-code", {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    code: better_auth.ZodString;
-                    disableSession: better_auth.ZodOptional<better_auth.ZodBoolean>;
-                    trustDevice: better_auth.ZodOptional<better_auth.ZodBoolean>;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    code: zod.ZodString;
+                    disableSession: zod.ZodOptional<zod.ZodBoolean>;
+                    trustDevice: zod.ZodOptional<zod.ZodBoolean>;
+                }, zod_v4_core.$strip>;
                 metadata: {
                     openapi: {
                         description: string;
@@ -3502,9 +3546,11 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             }>;
             generateBackupCodes: better_auth.StrictEndpoint<"/two-factor/generate-backup-codes", {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    password: better_auth.ZodString;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    password: zod.ZodOptional<zod.ZodString>;
+                }, zod_v4_core.$strip> | zod.ZodObject<{
+                    password: zod.ZodString;
+                }, zod_v4_core.$strip>;
                 use: ((inputContext: better_auth.MiddlewareInputContext<better_auth.MiddlewareOptions>) => Promise<{
                     session: {
                         session: Record<string, any> & {
@@ -3566,18 +3612,18 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             }>;
             viewBackupCodes: better_auth.StrictEndpoint<string, {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    userId: better_auth.ZodCoercedString<unknown>;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    userId: zod.ZodCoercedString<unknown>;
+                }, zod_v4_core.$strip>;
             }, {
                 status: boolean;
                 backupCodes: string[];
             }>;
             sendTwoFactorOTP: better_auth.StrictEndpoint<"/two-factor/send-otp", {
                 method: "POST";
-                body: better_auth.ZodOptional<better_auth.ZodObject<{
-                    trustDevice: better_auth.ZodOptional<better_auth.ZodBoolean>;
-                }, better_auth.$strip>>;
+                body: zod.ZodOptional<zod.ZodObject<{
+                    trustDevice: zod.ZodOptional<zod.ZodBoolean>;
+                }, zod_v4_core.$strip>>;
                 metadata: {
                     openapi: {
                         summary: string;
@@ -3606,10 +3652,10 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             }>;
             verifyTwoFactorOTP: better_auth.StrictEndpoint<"/two-factor/verify-otp", {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    code: better_auth.ZodString;
-                    trustDevice: better_auth.ZodOptional<better_auth.ZodBoolean>;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    code: zod.ZodString;
+                    trustDevice: zod.ZodOptional<zod.ZodBoolean>;
+                }, zod_v4_core.$strip>;
                 metadata: {
                     openapi: {
                         summary: string;
@@ -3695,9 +3741,9 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             }>;
             generateTOTP: better_auth.StrictEndpoint<string, {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    secret: better_auth.ZodString;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    secret: zod.ZodString;
+                }, zod_v4_core.$strip>;
                 metadata: {
                     openapi: {
                         summary: string;
@@ -3749,9 +3795,11 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
                         };
                     };
                 }>)[];
-                body: better_auth.ZodObject<{
-                    password: better_auth.ZodString;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    password: zod.ZodOptional<zod.ZodString>;
+                }, zod_v4_core.$strip> | zod.ZodObject<{
+                    password: zod.ZodString;
+                }, zod_v4_core.$strip>;
                 metadata: {
                     openapi: {
                         summary: string;
@@ -3780,10 +3828,10 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             }>;
             verifyTOTP: better_auth.StrictEndpoint<"/two-factor/verify-totp", {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    code: better_auth.ZodString;
-                    trustDevice: better_auth.ZodOptional<better_auth.ZodBoolean>;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    code: zod.ZodString;
+                    trustDevice: zod.ZodOptional<zod.ZodBoolean>;
+                }, zod_v4_core.$strip>;
                 metadata: {
                     openapi: {
                         summary: string;
@@ -3829,6 +3877,7 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
                 matcher(context: better_auth.HookEndpointContext): boolean;
                 handler: (inputContext: better_auth.MiddlewareInputContext<better_auth.MiddlewareOptions>) => Promise<{
                     twoFactorRedirect: boolean;
+                    twoFactorMethods: string[];
                 } | undefined>;
             }[];
         };
@@ -3866,6 +3915,25 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
                         };
                         index: true;
                     };
+                    verified: {
+                        type: "boolean";
+                        required: false;
+                        defaultValue: true;
+                        input: false;
+                    };
+                    failedVerificationCount: {
+                        type: "number";
+                        required: false;
+                        defaultValue: number;
+                        input: false;
+                        returned: false;
+                    };
+                    lockedUntil: {
+                        type: "date";
+                        required: false;
+                        input: false;
+                        returned: false;
+                    };
                 };
             };
         };
@@ -3883,6 +3951,7 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             INVALID_BACKUP_CODE: better_auth.RawError<"INVALID_BACKUP_CODE">;
             INVALID_CODE: better_auth.RawError<"INVALID_CODE">;
             TOO_MANY_ATTEMPTS_REQUEST_NEW_CODE: better_auth.RawError<"TOO_MANY_ATTEMPTS_REQUEST_NEW_CODE">;
+            ACCOUNT_TEMPORARILY_LOCKED: better_auth.RawError<"ACCOUNT_TEMPORARILY_LOCKED">;
             INVALID_TWO_FACTOR_COOKIE: better_auth.RawError<"INVALID_TWO_FACTOR_COOKIE">;
         };
     }];
@@ -3956,7 +4025,8 @@ interface SubscriptionRead {
     plans: PlanInfo[];
 }
 interface StarterAppEnv$1 extends ApiWorkerEnv {
-    APP_IDENTITY_TOKEN: string;
+    /** Absent until the app's first deploy registers it — see appendAppIdentity. */
+    APP_IDENTITY_TOKEN?: string;
     APP_NAME: string;
 }
 declare function getSubscription(c: Context<{
@@ -4043,7 +4113,8 @@ declare class CancelSubscriptionError extends Error {
 }
 
 interface StarterAppEnv extends ApiWorkerEnv {
-    APP_IDENTITY_TOKEN: string;
+    /** Absent until the app's first deploy registers it — see appendAppIdentity. */
+    APP_IDENTITY_TOKEN?: string;
     APP_NAME: string;
 }
 interface RefundResult {
@@ -4066,4 +4137,4 @@ declare class RefundError extends Error {
     constructor(message: string, status: number);
 }
 
-export { AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_NAME_RULES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, BaseRoom, CHANNELS_SCHEMA, CHANNEL_INVITATIONS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, CONVERSATION_SCHEMAS, COST_RATES, CancelSubscriptionError, type CancelSubscriptionOpts, type CancelSubscriptionResult, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type CollectionPermissionSummary, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConvMemberData, type ConvMessageData, type ConvReactionData, type ConvReadCursorData, type ConvVoteData, type ConversationStateData, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DIRECTORY_SCHEMAS, type DOBindings, type DOManifest, type DOManifestEntry, type DebugApiContext, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DirectoryCommunityData, type DirectoryConversationData, type DirectoryMembershipData, type DirectoryPostData, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, GLOBAL_DO_TYPES, GLOBAL_DO_TYPE_NAMES, type GameInput, GameRoom, type GameRoomConfig, type GetActionData, type GlobalDOType, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, MESSAGES_SCHEMA, type MutateActionData, type PermissionAnalysis, type PermissionContext, type PermissionLevel, type PermissionSource, type PlanInfo, type PlatformWorkerEnv, type Player, type PrefixResult, type PresencePeer, PresenceRoom, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RESERVED_BINDING_NAMES, RESERVED_COLLECTION_NAMES, type RecordContext, RecordRoom, type RecordRoomConfig, RefundError, type RefundOpts, type RefundResult, type ResolvedColumn, type ResolvedPermission, type RolePermissions, type RunMigrationsResult, SYSTEM_COLLECTION_SCHEMAS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotOptions, type ScreenshotResult, type SharedConnection, type StoredRecord, SubscriptionAuthError, type SubscriptionContext, type SubscriptionRead, SubscriptionRequiredError, type SubscriptionStatus, type Summarizer, type TokenDebugInfo, type ToolResult, type ToolSchema, type ToolsApiContext, USERS_COLUMNS, type User, type UserAttachment, type UserContext, VOTING_SCHEMAS, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKSPACE_SCHEMAS, type YjsContext, YjsRoom, analyzePermissions, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, authWorkerFetch, bindingManifestFromOutputConfig, broadcastChange, broadcastYjsUpdate, buildCronContext, buildTableSelect, buildUiParts, canCreate, canDelete, canRead, canUpdate, cancelSubscription, capToolResultSize, captureScreenshot, checkFieldPermissions, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDeepSpaceAI, createDeepSpaceAuth, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deleteChatCascade, deleteRecord, enqueueJob, executeQuery, getAllUsers, getChat, getGlobalDOSchemas, getGlobalDOType, getOrCreateYjsDoc, getRecord, getRolePermissions, getSubscription, getUser, getYjsDocKey, handleApiRequest, handleDelete, handlePut, handleSetRole, handleSubscribe, handleToolsRequest, handleUnsubscribe, handleUserList, handleUserUpdate, handleYjsBinaryMessage, handleYjsJoin, handleYjsLeave, isAutoProvision, isOwner, lintSchema, loadMessages, makeDefaultSummarizer, meterAi, meterUsage, meterVectorize, noopPermissionContext, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, putRecord, readRecord, recordMatchesSubscription, refundInvoice, registerUser, requireSubscription, resolveAppName, resolveColumn, rowToData, runMigrations, saveYjsDoc, timingSafeEqualHex, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyJwt, workspaceAccountsSchema, workspaceContentSharesSchema, workspaceEmailHandlesSchema, workspaceFormResponsesSchema, workspacePeopleSchema, workspaceProjectsSchema, workspaceTagsSchema, workspaceTasksSchema, workspaceTeamMembersSchema, workspaceTeamsSchema, workspaceTransactionsSchema };
+export { AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_NAME_RULES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, BaseRoom, CHANNELS_SCHEMA, CHANNEL_INVITATIONS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, CONVERSATION_SCHEMAS, COST_RATES, CancelSubscriptionError, type CancelSubscriptionOpts, type CancelSubscriptionResult, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type CollectionPermissionSummary, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConvMemberData, type ConvMessageData, type ConvReactionData, type ConvReadCursorData, type ConvVoteData, type ConversationStateData, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DIRECTORY_SCHEMAS, type DOBindings, type DOManifest, type DOManifestEntry, type DebugApiContext, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DirectoryCommunityData, type DirectoryConversationData, type DirectoryMembershipData, type DirectoryPostData, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, GLOBAL_DO_TYPES, GLOBAL_DO_TYPE_NAMES, type GameInput, GameRoom, type GameRoomConfig, type GetActionData, type GlobalDOType, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, MESSAGES_SCHEMA, type MutateActionData, type PermissionAnalysis, type PermissionContext, type PermissionLevel, type PermissionSource, type PlanInfo, type PlatformWorkerEnv, type Player, type PrefixResult, type PresencePeer, PresenceRoom, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RESERVED_BINDING_NAMES, RESERVED_COLLECTION_NAMES, type RecordContext, RecordRoom, type RecordRoomConfig, RefundError, type RefundOpts, type RefundResult, type ResolvedColumn, type ResolvedPermission, type RolePermissions, type RunMigrationsResult, SYSTEM_COLLECTION_SCHEMAS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotOptions, type ScreenshotResult, type SharedConnection, type StoredRecord, SubscriptionAuthError, type SubscriptionContext, type SubscriptionRead, SubscriptionRequiredError, type SubscriptionStatus, type Summarizer, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, type ToolsApiContext, USERS_COLUMNS, type User, type UserAttachment, type UserContext, VOTING_SCHEMAS, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKSPACE_SCHEMAS, type YjsContext, YjsRoom, analyzePermissions, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, authWorkerFetch, bindingManifestFromOutputConfig, broadcastChange, broadcastYjsUpdate, buildCronContext, buildTableSelect, buildUiParts, canCreate, canDelete, canRead, canUpdate, cancelSubscription, capToolResultSize, captureScreenshot, checkFieldPermissions, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDeepSpaceAI, createDeepSpaceAuth, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deleteChatCascade, deleteRecord, enqueueJob, executeQuery, getAllUsers, getChat, getGlobalDOSchemas, getGlobalDOType, getOrCreateYjsDoc, getRecord, getRolePermissions, getSubscription, getUser, getYjsDocKey, handleApiRequest, handleDelete, handlePut, handleSetRole, handleSubscribe, handleToolsRequest, handleUnsubscribe, handleUserList, handleUserUpdate, handleYjsBinaryMessage, handleYjsJoin, handleYjsLeave, isAutoProvision, isOwner, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, lintSchema, loadMessages, makeDefaultSummarizer, meterAi, meterUsage, meterVectorize, noopPermissionContext, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, putRecord, readRecord, recordMatchesSubscription, refundInvoice, registerUser, requireSubscription, resolveAppName, resolveColumn, rowToData, runMigrations, saveYjsDoc, timingSafeEqualHex, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyJwt, workspaceAccountsSchema, workspaceContentSharesSchema, workspaceEmailHandlesSchema, workspaceFormResponsesSchema, workspacePeopleSchema, workspaceProjectsSchema, workspaceTagsSchema, workspaceTasksSchema, workspaceTeamMembersSchema, workspaceTeamsSchema, workspaceTransactionsSchema };