deepspace 0.4.5 → 0.5.1

package/dist/server.js

@@ -475,7 +475,8 @@ function buildCronContext(env, ownerUserId, roomId = "default") {
       if (opts?.where) params.where = opts.where;
       if (opts?.limit) params.limit = opts.limit;
       const data = await executeTool3("records.query", params);
-      return data.records || [];
+      const records2 = data?.records;
+      return records2 ?? [];
     },
     async create(collection, data) {
       return executeTool3("records.create", { collection, data });
@@ -632,7 +633,8 @@ async function composioTools(env, options) {
   if (!list.ok || !list.success) {
     throw new Error(`composioTools: failed to list Composio tools: ${list.detail}`);
   }
-  const items = Array.isArray(list.data?.items) ? list.data.items : [];
+  const listItems = list.data?.items;
+  const items = Array.isArray(listItems) ? listItems : [];
   const tools = {};
   for (const item of items) {
     if (!item?.slug) continue;
@@ -667,13 +669,19 @@ async function composioTools(env, options) {
   return tools;
 }
 
+// src/server/utils/app-identity.ts
+function appendAppIdentity(headers, env) {
+  headers.delete("x-app-identity-token");
+  headers.delete("x-app-name");
+  if (!env.APP_IDENTITY_TOKEN) return;
+  headers.set("x-app-identity-token", env.APP_IDENTITY_TOKEN);
+  headers.set("x-app-name", env.APP_NAME);
+}
+
 // src/server/utils/screenshot.ts
 async function captureScreenshot(env, opts) {
-  const headers = new Headers({
-    "content-type": "application/json",
-    "x-app-identity-token": env.APP_IDENTITY_TOKEN,
-    "x-app-name": env.APP_NAME
-  });
+  const headers = new Headers({ "content-type": "application/json" });
+  appendAppIdentity(headers, env);
   const res = await platformWorkerFetch(
     env,
     new Request("https://platform-internal/internal/screenshot", {
@@ -1333,7 +1341,7 @@ var BaseRoom = class {
       console.error(`[${this.constructor.name}] Message error:`, e);
     }
   }
-  async webSocketClose(ws, code, reason) {
+  async webSocketClose(ws, _code, _reason) {
     const attachment = ws.deserializeAttachment();
     if (attachment) {
       try {
@@ -1358,12 +1366,12 @@ var BaseRoom = class {
    * Return an augmented attachment to serialize on the WebSocket,
    * or void to use the default attachment.
    */
-  onConnect(ws, user) {
+  onConnect(_ws, _user) {
   }
   /**
    * Called when a WebSocket disconnects.
    */
-  onDisconnect(ws, user) {
+  onDisconnect(_ws, _user) {
   }
   // ==========================================================================
   // Utilities
@@ -1611,7 +1619,7 @@ function coerceValue(value, storage, interpretation) {
     if (m) return parseFloat(m[1]) / 100;
   }
   if (interpretation.kind === "currency") {
-    const cleaned2 = s.replace(/[^0-9.\-]/g, "");
+    const cleaned2 = s.replace(/[^0-9.-]/g, "");
     const n2 = parseFloat(cleaned2);
     if (!isNaN(n2)) return n2;
     return s;
@@ -1801,9 +1809,6 @@ var SchemaRegistry = class {
   has(name) {
     return this.trusted.has(name);
   }
-  hasTrusted(name) {
-    return this.trusted.has(name);
-  }
   all() {
     return Array.from(this.trusted.values());
   }
@@ -2118,7 +2123,7 @@ function putRecord(ctx, collection, recordId, data, userId, userRole, skipUserRb
   const columns = getResolvedColumns(schema);
   const existing = getRecord(ctx.sql, collection, recordId, schema);
   const isUpdate = existing !== null;
-  let mergedData = isUpdate ? { ...existing.data, ...data } : { ...data };
+  const mergedData = isUpdate ? { ...existing.data, ...data } : { ...data };
   for (const col of columns) {
     if (col.readonly) continue;
     if (!isUpdate) {
@@ -2173,7 +2178,10 @@ function putRecord(ctx, collection, recordId, data, userId, userRole, skipUserRb
     const permCtx = ctx.getPermissionContext();
     if (isUpdate) {
       if (!canUpdate(schema, userRole, { ...existing, recordId }, userId, permCtx)) {
-        return { success: false, error: `UPDATE DENIED: role=${userRole}, collection=${collection}` };
+        return {
+          success: false,
+          error: `UPDATE DENIED: role=${userRole}, collection=${collection}`
+        };
       }
       const fieldError = checkFieldPermissions(schema, userRole, finalData, existing.data);
       if (fieldError) {
@@ -2181,7 +2189,10 @@ function putRecord(ctx, collection, recordId, data, userId, userRole, skipUserRb
       }
     } else {
       if (!canCreate(schema, userRole)) {
-        return { success: false, error: `CREATE DENIED: role=${userRole}, collection=${collection}` };
+        return {
+          success: false,
+          error: `CREATE DENIED: role=${userRole}, collection=${collection}`
+        };
       }
     }
   }
@@ -2203,7 +2214,10 @@ function putRecord(ctx, collection, recordId, data, userId, userRole, skipUserRb
     );
     if (existing2.toArray().length > 0) {
       const fields = schema.uniqueOn.map((f) => `${f}=${finalData[f] ?? "null"}`).join(", ");
-      return { success: false, error: `Duplicate: a record with ${fields} already exists in ${collection}` };
+      return {
+        success: false,
+        error: `Duplicate: a record with ${fields} already exists in ${collection}`
+      };
     }
   }
   if (isUpdate) {
@@ -2217,13 +2231,16 @@ function putRecord(ctx, collection, recordId, data, userId, userRole, skipUserRb
     ctx.sql.exec(`UPDATE "${tbl}" SET ${setClauses.join(", ")} WHERE _row_id = ?`, ...params);
   } else {
     const colIds = Object.keys(colValues);
-    const allCols = ["_row_id", "_created_by", "_created_at", "_updated_at", ...colIds.map((c) => `"${c}"`)];
+    const allCols = [
+      "_row_id",
+      "_created_by",
+      "_created_at",
+      "_updated_at",
+      ...colIds.map((c) => `"${c}"`)
+    ];
     const placeholders = allCols.map(() => "?").join(", ");
     const params = [recordId, userId, now, now, ...colIds.map((c) => colValues[c])];
-    ctx.sql.exec(
-      `INSERT INTO "${tbl}" (${allCols.join(", ")}) VALUES (${placeholders})`,
-      ...params
-    );
+    ctx.sql.exec(`INSERT INTO "${tbl}" (${allCols.join(", ")}) VALUES (${placeholders})`, ...params);
   }
   const saved = getRecord(ctx.sql, collection, recordId, schema);
   const record = {
@@ -3456,9 +3473,21 @@ var RecordRoom = class extends BaseRoom {
   ownerUserId;
   /** True until the first fetch() completes — detects hibernation wake-up */
   freshConstruct = true;
+  /**
+   * Per-connection `[DO Perf]` timing logs are noisy on every hot path, so
+   * they're gated behind a `DEEPSPACE_DO_PERF` env binding (set it to any
+   * truthy value on the worker to opt in). Off by default.
+   */
+  get perfLogEnabled() {
+    return !!this.env?.DEEPSPACE_DO_PERF;
+  }
   constructor(state, env, schemas = [], config = {}) {
     super(state, env);
-    this.schemaRegistry = new SchemaRegistry([...SYSTEM_COLLECTION_SCHEMAS, BASE_USERS_SCHEMA, ...schemas]);
+    this.schemaRegistry = new SchemaRegistry([
+      ...SYSTEM_COLLECTION_SCHEMAS,
+      BASE_USERS_SCHEMA,
+      ...schemas
+    ]);
     this.ownerUserId = config.ownerUserId ?? null;
     const wsCount = this.state.getWebSockets().length;
     if (wsCount > 0) {
@@ -3542,10 +3571,7 @@ var RecordRoom = class extends BaseRoom {
       const now = (/* @__PURE__ */ new Date()).toISOString();
       for (const row of oldUsers) {
         const r = row;
-        const existing = this.sql.exec(
-          `SELECT 1 FROM c_users WHERE _row_id = ?`,
-          r.user_id
-        ).toArray();
+        const existing = this.sql.exec(`SELECT 1 FROM c_users WHERE _row_id = ?`, r.user_id).toArray();
         if (existing.length > 0) continue;
         this.sql.exec(
           `INSERT INTO c_users (_row_id, _created_by, _created_at, _updated_at, col_email, col_name, col_imageurl, col_role, col_createdat, col_lastseenat) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
@@ -3579,7 +3605,6 @@ var RecordRoom = class extends BaseRoom {
       }
       let migrated = 0;
       let skipped = 0;
-      const now = (/* @__PURE__ */ new Date()).toISOString();
       for (const row of rows) {
         const r = row;
         const schema = this.schemaRegistry.get(r.collection);
@@ -3588,17 +3613,11 @@ var RecordRoom = class extends BaseRoom {
           continue;
         }
         const tbl = collectionTableName(r.collection);
-        const tblExists = this.sql.exec(
-          `SELECT name FROM sqlite_master WHERE type='table' AND name=?`,
-          tbl
-        ).toArray().length > 0;
+        const tblExists = this.sql.exec(`SELECT name FROM sqlite_master WHERE type='table' AND name=?`, tbl).toArray().length > 0;
         if (!tblExists) {
           this.ensureCollectionTable(schema);
         }
-        const existing = this.sql.exec(
-          `SELECT 1 FROM "${tbl}" WHERE _row_id = ?`,
-          r.record_id
-        ).toArray();
+        const existing = this.sql.exec(`SELECT 1 FROM "${tbl}" WHERE _row_id = ?`, r.record_id).toArray();
         if (existing.length > 0) {
           skipped++;
           continue;
@@ -3613,9 +3632,21 @@ var RecordRoom = class extends BaseRoom {
         const columns = schema.columns.map(resolveColumn);
         const colValues = dataToColumnValues(data, columns);
         const colIds = Object.keys(colValues);
-        const allCols = ["_row_id", "_created_by", "_created_at", "_updated_at", ...colIds.map((c) => `"${c}"`)];
+        const allCols = [
+          "_row_id",
+          "_created_by",
+          "_created_at",
+          "_updated_at",
+          ...colIds.map((c) => `"${c}"`)
+        ];
         const placeholders = allCols.map(() => "?").join(", ");
-        const params = [r.record_id, r.created_by, r.created_at, r.updated_at, ...colIds.map((c) => colValues[c])];
+        const params = [
+          r.record_id,
+          r.created_by,
+          r.created_at,
+          r.updated_at,
+          ...colIds.map((c) => colValues[c])
+        ];
         this.sql.exec(
           `INSERT INTO "${tbl}" (${allCols.join(", ")}) VALUES (${placeholders})`,
           ...params
@@ -3623,7 +3654,9 @@ var RecordRoom = class extends BaseRoom {
         migrated++;
       }
       if (migrated > 0 || skipped > 0) {
-        console.log(`[RecordRoom] Migrated ${migrated} records from document-mode, ${skipped} skipped`);
+        console.log(
+          `[RecordRoom] Migrated ${migrated} records from document-mode, ${skipped} skipped`
+        );
       }
       this.sql.exec(`DROP TABLE IF EXISTS records`);
     } catch (error) {
@@ -3646,7 +3679,12 @@ var RecordRoom = class extends BaseRoom {
   // ============================================================================
   async onConnect(ws, user) {
     await this.ensureInitialized();
-    const timing = this._fetchTiming ?? { fetchStart: Date.now(), isColdStart: false, needsInit: false, initMs: 0 };
+    const timing = this._fetchTiming ?? {
+      fetchStart: Date.now(),
+      isColdStart: false,
+      needsInit: false,
+      initMs: 0
+    };
     const userId = user.userId;
     const userName = user.userName;
     const userEmail = user.userEmail;
@@ -3657,7 +3695,16 @@ var RecordRoom = class extends BaseRoom {
       const isOwner2 = this.ownerUserId != null && userId === this.ownerUserId;
       const regStart = Date.now();
       const defaultRole = this.schemaRegistry.get("users")?.defaultRole ?? "member";
-      const registeredUser = await registerUser(this.sql, userId, userName, userEmail, userImageUrl, isOwner2, defaultRole, this.schemaRegistry);
+      const registeredUser = await registerUser(
+        this.sql,
+        userId,
+        userName,
+        userEmail,
+        userImageUrl,
+        isOwner2,
+        defaultRole,
+        this.schemaRegistry
+      );
       const regMs = Date.now() - regStart;
       attachment = {
         userId: registeredUser.id,
@@ -3671,7 +3718,10 @@ var RecordRoom = class extends BaseRoom {
       };
       this.send(ws, { type: MSG.USER_INFO, payload: registeredUser });
       const totalMs = Date.now() - timing.fetchStart;
-      console.log(`[DO Perf] cold=${timing.isColdStart} | init: ${timing.initMs}ms reg: ${regMs}ms | total: ${totalMs}ms`);
+      if (this.perfLogEnabled)
+        console.log(
+          `[DO Perf] cold=${timing.isColdStart} | init: ${timing.initMs}ms reg: ${regMs}ms | total: ${totalMs}ms`
+        );
     } else {
       attachment = {
         userId,
@@ -3682,63 +3732,37 @@ var RecordRoom = class extends BaseRoom {
         yjsSubscriptions: [],
         yjsClientId: this.nextYjsClientId++
       };
-      this.send(ws, { type: MSG.USER_INFO, payload: {
-        id: userId,
-        name: "Anonymous",
-        email: "",
-        role: ROLE_ANONYMOUS,
-        createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-        lastSeenAt: (/* @__PURE__ */ new Date()).toISOString()
-      } });
+      this.send(ws, {
+        type: MSG.USER_INFO,
+        payload: {
+          id: userId,
+          name: "Anonymous",
+          email: "",
+          role: ROLE_ANONYMOUS,
+          createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+          lastSeenAt: (/* @__PURE__ */ new Date()).toISOString()
+        }
+      });
       const totalMs = Date.now() - timing.fetchStart;
-      console.log(`[DO Perf] cold=${timing.isColdStart} anon | total: ${totalMs}ms`);
+      if (this.perfLogEnabled)
+        console.log(`[DO Perf] cold=${timing.isColdStart} anon | total: ${totalMs}ms`);
     }
     this._fetchTiming = null;
     return attachment;
   }
-  async onMessage(ws, user, msg) {
-    await this.ensureInitialized();
-    const attachment = ws.deserializeAttachment();
-    if (!attachment) {
-      this.send(ws, { type: MSG.ERROR, payload: { error: "Connection not found" } });
-      return;
-    }
-    try {
-      await this.handleRecordMessage(ws, attachment, msg);
-    } catch (e) {
-      const errMsg = e instanceof Error ? e.message : String(e);
-      console.error(`[RecordRoom] Message handler error: ${errMsg}`);
-      this.send(ws, { type: MSG.ERROR, payload: { error: `Invalid message: ${errMsg}` } });
-    }
-  }
-  async onBinaryMessage(ws, user, data) {
-    await this.ensureInitialized();
-    const attachment = ws.deserializeAttachment();
-    if (!attachment) return;
-    try {
-      await handleYjsBinaryMessage(
-        this.createYjsContext(),
-        ws,
-        attachment,
-        new Uint8Array(data)
-      );
-    } catch (e) {
-      console.error("[RecordRoom] Yjs binary message error:", e);
-    }
-  }
-  onDisconnect(ws, user) {
-    console.log(`[RecordRoom] webSocketClose`);
-    try {
-      const attachment = ws.deserializeAttachment();
-      if (attachment) {
-        broadcastAwarenessRemoval(this.createYjsContext(), attachment);
-      }
-    } catch {
-    }
+  /**
+   * Required to satisfy BaseRoom's abstract contract, but never invoked:
+   * RecordRoom overrides `webSocketMessage`/`webSocketClose` directly (below),
+   * so the BaseRoom dispatch path that would call this never runs. All real
+   * message handling lives in `handleRecordMessage`.
+   */
+  onMessage() {
+    throw new Error("RecordRoom.onMessage is unreachable; use webSocketMessage");
   }
   // ============================================================================
-  // Hibernation API (delegates to BaseRoom via super, but we need
-  // to ensure webSocketMessage gets the ensureInitialized treatment)
+  // Hibernation API — RecordRoom overrides these directly (rather than using
+  // BaseRoom's onMessage/onBinaryMessage/onDisconnect hooks) so it can run
+  // ensureInitialized() before every message after a hibernation wake-up.
   // ============================================================================
   async webSocketMessage(ws, message) {
     await this.ensureInitialized();
@@ -3809,7 +3833,12 @@ var RecordRoom = class extends BaseRoom {
         handleUserList(userCtx, ws, attachment);
         break;
       case MSG.USER_UPDATE:
-        handleUserUpdate(recordCtx, ws, attachment, payload);
+        handleUserUpdate(
+          recordCtx,
+          ws,
+          attachment,
+          payload
+        );
         break;
       case MSG.SET_ROLE:
         await handleSetRole(userCtx, ws, attachment, payload);
@@ -3975,7 +4004,7 @@ var YjsRoom = class extends BaseRoom {
     this.sendAwarenessSnapshot(ws);
     return attachment;
   }
-  onMessage(ws, user, message) {
+  onMessage(_ws, _user, _message) {
   }
   onBinaryMessage(ws, user, data) {
     const bytes = new Uint8Array(data);
@@ -3987,7 +4016,7 @@ var YjsRoom = class extends BaseRoom {
       this.handleAwareness(ws, decoder, bytes);
     }
   }
-  onDisconnect(ws, user) {
+  onDisconnect(ws, _user) {
     const attachment = ws.deserializeAttachment();
     if (attachment?.awarenessClientId == null) return;
     const clientId = attachment.awarenessClientId;
@@ -4348,16 +4377,16 @@ var GameRoom = class extends BaseRoom {
     return this.currentTick;
   }
   /** Called when a player connects */
-  onPlayerJoin(player) {
+  onPlayerJoin(_player) {
   }
   /** Called when a player disconnects */
-  onPlayerLeave(player) {
+  onPlayerLeave(_player) {
   }
   /** Called when the game starts */
   onGameStart() {
   }
   /** Called when the game ends */
-  onGameEnd(finalState) {
+  onGameEnd(_finalState) {
   }
   /**
    * Called once when the DO first hydrates persisted state from storage.
@@ -6817,6 +6846,18 @@ async function timingSafeEqualHex(a, b) {
   return diff === 0;
 }
 
+// src/server/auth/testAccounts.ts
+var TEST_ACCOUNT_EMAIL_SUFFIX = "@deepspace.test";
+function isTestAccountEmail(email) {
+  return !!email && email.trim().toLowerCase().endsWith(TEST_ACCOUNT_EMAIL_SUFFIX);
+}
+function isTestAccountClaims(claims) {
+  return claims?.isTestAccount === true;
+}
+function isTestAccountTier(tier) {
+  return tier === "test";
+}
+
 // src/server/auth/betterAuth.ts
 import { betterAuth } from "better-auth";
 import { organization, twoFactor } from "better-auth/plugins";
@@ -6904,11 +6945,8 @@ function isEntitled(tier, status) {
 
 // src/server/subscription.ts
 function appIdentityHeaders(c, extra) {
-  const h = new Headers({
-    "x-app-identity-token": c.env.APP_IDENTITY_TOKEN,
-    "x-app-name": c.env.APP_NAME,
-    ...extra ?? {}
-  });
+  const h = new Headers(extra ?? {});
+  appendAppIdentity(h, c.env);
   const authz = c.req.header("authorization");
   if (authz) h.set("authorization", authz);
   return h;
@@ -7006,12 +7044,9 @@ var CancelSubscriptionError = class extends Error {
 async function refundInvoice(c, opts) {
   const authz = c.req.header("authorization");
   const nonce = opts.requestNonce ?? crypto.randomUUID();
-  const headers = {
-    "Content-Type": "application/json",
-    "x-app-identity-token": c.env.APP_IDENTITY_TOKEN,
-    "x-app-name": c.env.APP_NAME
-  };
-  if (authz) headers["authorization"] = authz;
+  const headers = new Headers({ "Content-Type": "application/json" });
+  appendAppIdentity(headers, c.env);
+  if (authz) headers.set("authorization", authz);
   const res = await apiWorkerFetch(c.env, "/api/refunds/create", {
     method: "POST",
     headers,
@@ -7075,6 +7110,7 @@ export {
   SchemaRegistry,
   SubscriptionAuthError,
   SubscriptionRequiredError,
+  TEST_ACCOUNT_EMAIL_SUFFIX,
   USERS_COLUMNS,
   VOTING_SCHEMAS,
   WORKSPACE_SCHEMAS,
@@ -7139,6 +7175,9 @@ export {
   handleYjsLeave,
   isAutoProvision,
   isOwner,
+  isTestAccountClaims,
+  isTestAccountEmail,
+  isTestAccountTier,
   lintSchema,
   loadMessages,
   makeDefaultSummarizer,