deepspace 0.5.0 → 0.5.2

package/dist/testing.d.ts

@@ -0,0 +1,115 @@
+import * as _playwright_test from '@playwright/test';
+import { BrowserContext, Page, Browser } from '@playwright/test';
+export { expect } from '@playwright/test';
+
+interface MultiplayerUser {
+    context: BrowserContext;
+    page: Page;
+    email: string;
+    name: string;
+    /** Test account user ID, if known from the accounts registry. */
+    userId?: string;
+}
+/**
+ * Fixture function signature. Pass either a count (`users(2)`) or an
+ * array of account names (`users(['Alice', 'Bob'])`). Returns one entry
+ * per requested user.
+ */
+type UsersFixture = (selector: number | string[], options?: {
+    label?: string;
+}) => Promise<MultiplayerUser[]>;
+interface MultiplayerFixtures {
+    users: UsersFixture;
+}
+declare const test: _playwright_test.TestType<_playwright_test.PlaywrightTestArgs & _playwright_test.PlaywrightTestOptions & MultiplayerFixtures, _playwright_test.PlaywrightWorkerArgs & _playwright_test.PlaywrightWorkerOptions>;
+
+/**
+ * Account-credential plumbing for the testing module.
+ *
+ * Reads test accounts from `~/.deepspace/test-accounts.json` (the same
+ * file `deepspace test-accounts create` writes). Each account has at
+ * minimum `{email, password}`; `name` and `label` are optional.
+ *
+ * Used by the multi-user Playwright fixture in `./fixtures.ts` and is
+ * also exported standalone in case suites want to do their own
+ * orchestration.
+ */
+interface TestAccount {
+    email: string;
+    password: string;
+    name?: string;
+    label?: string | null;
+    id?: string;
+    userId?: string;
+    createdAt?: number;
+}
+/**
+ * Load all test accounts the developer has created. Returns an empty
+ * array if the file doesn't exist yet.
+ */
+declare function loadAllTestAccounts(): TestAccount[];
+/**
+ * Pick `count` test accounts from the local registry, optionally
+ * filtered by `label`. Order-stable: sorted by `createdAt` ascending so
+ * the first test account you created is always the first one returned.
+ *
+ * Throws with a helpful message if not enough accounts exist.
+ */
+declare function pickTestAccounts(count: number, options?: {
+    label?: string;
+}): TestAccount[];
+/**
+ * Find a single account by name. Used by `users(['Alice', 'Bob'])`.
+ * Throws if not found.
+ */
+declare function findTestAccountByName(name: string): TestAccount;
+
+/**
+ * Per-account `storageState` cache for Playwright.
+ *
+ * Better Auth applies a per-IP rate limit on `/api/auth/sign-in/email`
+ * (~5 sign-ins / 60s / endpoint). A multiplayer suite that spins up
+ * 5+ users per spec would hit the limit and start failing in non-obvious
+ * ways. This module signs each account in *once*, persists the
+ * resulting browser cookies + storage to disk, and reuses the file on
+ * subsequent runs.
+ *
+ * Cache layout:
+ *   ~/.deepspace/playwright-states/<sha256(email)>.json
+ *
+ * Validity: a cached file is reused if Playwright successfully loads it
+ * AND the resulting context produces a non-anonymous session on the
+ * target app. If validation fails, we fall back to a fresh sign-in and
+ * overwrite the cache.
+ */
+
+interface EnsureStorageStateOptions {
+    /** Max age of a cached state file before we re-sign-in. Default 7 days. */
+    maxAgeMs?: number;
+    /** Force a fresh sign-in even if the cache is fresh. */
+    force?: boolean;
+}
+/**
+ * Ensure a Playwright `storageState` file exists for `account` and
+ * return its path. Signs in once if the cache is missing, stale, or
+ * `force: true`.
+ */
+declare function ensureStorageState(browser: Browser, account: {
+    email: string;
+    password: string;
+}, baseURL: string, options?: EnsureStorageStateOptions): Promise<string>;
+/**
+ * Convenience: open a fresh `BrowserContext` for `account` using the
+ * cached storage state (signing in if needed). The caller is responsible
+ * for closing the context.
+ */
+declare function newSignedInContext(browser: Browser, account: {
+    email: string;
+    password: string;
+}, baseURL: string, options?: EnsureStorageStateOptions): Promise<BrowserContext>;
+/** Read a cached storageState file (mostly for debugging). */
+declare function readCachedState(email: string): unknown | null;
+/** Where the cache for `email` lives. Useful for diagnostics. */
+declare function getStatePathForEmail(email: string): string;
+
+export { type EnsureStorageStateOptions, type MultiplayerUser, type TestAccount, type UsersFixture, ensureStorageState, findTestAccountByName, getStatePathForEmail, loadAllTestAccounts, newSignedInContext, pickTestAccounts, readCachedState, test };

package/dist/worker.d.ts

@@ -1,5 +1,7 @@
 import * as Y from 'yjs';
 import { LanguageModel, ToolSet, ModelMessage } from 'ai';
+import * as zod_v4_core from 'zod/v4/core';
+import * as zod from 'zod';
 import * as better_auth from 'better-auth';
 import { betterAuth } from 'better-auth';
 import * as better_auth_plugins from 'better-auth/plugins';
@@ -2989,11 +2991,11 @@ declare function composioTools(env: ApiWorkerEnv, options: ComposioToolsOptions)
  * `null` on any non-2xx — callers should treat as "no preview available"
  * and surface their own fallback UX.
  *
- * Auth is the same HMAC-of-appName pattern `/internal/files` uses:
- *   x-app-identity-token = hmac(PLATFORM_IDENTITY_SECRET, APP_NAME)
- *   x-app-name           = APP_NAME
+ * Auth is the same HMAC-of-appId pattern `/internal/files` uses:
+ *   x-app-identity-token = hmac(PLATFORM_IDENTITY_SECRET, DEEPSPACE_APP_ID)
+ *   x-app-id             = DEEPSPACE_APP_ID
  *
- * Apps already have both as bindings (APP_IDENTITY_TOKEN + APP_NAME),
+ * Apps already have both as bindings (APP_IDENTITY_TOKEN + DEEPSPACE_APP_ID),
  * so this helper is a thin wrapper — no extra secrets to manage.
  */
 
@@ -3008,8 +3010,10 @@ interface ScreenshotOptions {
     fullPage?: boolean;
 }
 interface ScreenshotEnv extends PlatformWorkerEnv {
-    APP_NAME: string;
-    APP_IDENTITY_TOKEN: string;
+    /** Immutable app id — the identity the platform verifies (HMAC input). */
+    DEEPSPACE_APP_ID: string;
+    /** Absent until the app's first deploy registers it — see appendAppIdentity. */
+    APP_IDENTITY_TOKEN?: string;
 }
 interface ScreenshotResult {
     /** PNG bytes. */
@@ -3500,9 +3504,42 @@ declare function verifyJwt(config: JwtVerifierConfig, token: string | null | und
  */
 declare function computeHmacHex(secret: string, payload: string): Promise<string>;
 declare function timingSafeEqualHex(a: string, b: string): Promise<boolean>;
+/**
+ * Constant-time equality for arbitrary strings (hash-then-compare: SHA-256
+ * normalizes lengths so neither length nor content short-circuits). The one
+ * implementation every worker's bearer/secret checks share.
+ */
+declare function timingSafeEqualStrings(a: string, b: string): Promise<boolean>;
 
 declare function decodeJwtPayload(token: string | null | undefined): TokenDebugInfo | undefined;
 
+/**
+ * Test-account identification, shared by every platform worker.
+ *
+ * Test accounts (created via `deepspace test-accounts`) are real Better Auth
+ * users demarcated three ways, and a caller may present as any of them
+ * depending on where the check runs:
+ *  - their email always ends with @deepspace.test (enforced at creation)
+ *  - their JWTs carry `isTestAccount: true` (minted by the auth-worker,
+ *    the source of truth)
+ *  - their billing profile's subscription tier is 'test' (mirrored by the
+ *    api-worker on every authenticated request)
+ *
+ * Gate anything a test account must not do with these helpers rather than
+ * hand-rolled string comparisons, so the policy stays in one place. Prefer
+ * checking the claim when a verified JWT is at hand, and the tier as the
+ * fallback for persisted state that may outlive a claim (e.g. rows written
+ * before a guard existed).
+ */
+
+declare const TEST_ACCOUNT_EMAIL_SUFFIX = "@deepspace.test";
+/** True when the email belongs to a test account (case-insensitive). */
+declare function isTestAccountEmail(email: string | null | undefined): boolean;
+/** True when verified JWT claims identify the caller as a test account. */
+declare function isTestAccountClaims(claims: JwtClaims | Record<string, unknown> | null | undefined): boolean;
+/** True when a billing subscription tier marks a test account. */
+declare function isTestAccountTier(tier: string | null | undefined): boolean;
+
 interface DeepSpaceAuthConfig {
     /** D1 database binding */
     database: D1Database;
@@ -3544,6 +3581,7 @@ interface DeepSpaceAuthConfig {
 declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.Auth<{
     plugins: [{
         id: "organization";
+        version: string;
         endpoints: better_auth_plugins.OrganizationEndpoints<better_auth_plugins.OrganizationOptions & {
             teams: {
                 enabled: true;
@@ -3680,6 +3718,7 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             INVITATION_NOT_FOUND: better_auth.RawError<"INVITATION_NOT_FOUND">;
             YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION: better_auth.RawError<"YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION">;
             EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION: better_auth.RawError<"EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION">;
+            EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION: better_auth.RawError<"EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION">;
             YOU_ARE_NOT_ALLOWED_TO_CANCEL_THIS_INVITATION: better_auth.RawError<"YOU_ARE_NOT_ALLOWED_TO_CANCEL_THIS_INVITATION">;
             INVITER_IS_NO_LONGER_A_MEMBER_OF_THE_ORGANIZATION: better_auth.RawError<"INVITER_IS_NO_LONGER_A_MEMBER_OF_THE_ORGANIZATION">;
             YOU_ARE_NOT_ALLOWED_TO_INVITE_USER_WITH_THIS_ROLE: better_auth.RawError<"YOU_ARE_NOT_ALLOWED_TO_INVITE_USER_WITH_THIS_ROLE">;
@@ -3714,6 +3753,7 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             ROLE_NAME_IS_ALREADY_TAKEN: better_auth.RawError<"ROLE_NAME_IS_ALREADY_TAKEN">;
             CANNOT_DELETE_A_PRE_DEFINED_ROLE: better_auth.RawError<"CANNOT_DELETE_A_PRE_DEFINED_ROLE">;
             ROLE_IS_ASSIGNED_TO_MEMBERS: better_auth.RawError<"ROLE_IS_ASSIGNED_TO_MEMBERS">;
+            INVALID_TEAM_ID: better_auth.RawError<"INVALID_TEAM_ID">;
         };
         options: NoInfer<better_auth_plugins.OrganizationOptions & {
             teams: {
@@ -3725,13 +3765,17 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
         }>;
     }, {
         id: "two-factor";
+        version: string;
         endpoints: {
             enableTwoFactor: better_auth.StrictEndpoint<"/two-factor/enable", {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    password: better_auth.ZodString;
-                    issuer: better_auth.ZodOptional<better_auth.ZodString>;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    password: zod.ZodOptional<zod.ZodString>;
+                    issuer: zod.ZodOptional<zod.ZodString>;
+                }, zod_v4_core.$strip> | zod.ZodObject<{
+                    password: zod.ZodString;
+                    issuer: zod.ZodOptional<zod.ZodString>;
+                }, zod_v4_core.$strip>;
                 use: ((inputContext: better_auth.MiddlewareInputContext<better_auth.MiddlewareOptions>) => Promise<{
                     session: {
                         session: Record<string, any> & {
@@ -3792,9 +3836,11 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             }>;
             disableTwoFactor: better_auth.StrictEndpoint<"/two-factor/disable", {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    password: better_auth.ZodString;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    password: zod.ZodOptional<zod.ZodString>;
+                }, zod_v4_core.$strip> | zod.ZodObject<{
+                    password: zod.ZodString;
+                }, zod_v4_core.$strip>;
                 use: ((inputContext: better_auth.MiddlewareInputContext<better_auth.MiddlewareOptions>) => Promise<{
                     session: {
                         session: Record<string, any> & {
@@ -3846,11 +3892,11 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             }>;
             verifyBackupCode: better_auth.StrictEndpoint<"/two-factor/verify-backup-code", {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    code: better_auth.ZodString;
-                    disableSession: better_auth.ZodOptional<better_auth.ZodBoolean>;
-                    trustDevice: better_auth.ZodOptional<better_auth.ZodBoolean>;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    code: zod.ZodString;
+                    disableSession: zod.ZodOptional<zod.ZodBoolean>;
+                    trustDevice: zod.ZodOptional<zod.ZodBoolean>;
+                }, zod_v4_core.$strip>;
                 metadata: {
                     openapi: {
                         description: string;
@@ -3957,9 +4003,11 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             }>;
             generateBackupCodes: better_auth.StrictEndpoint<"/two-factor/generate-backup-codes", {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    password: better_auth.ZodString;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    password: zod.ZodOptional<zod.ZodString>;
+                }, zod_v4_core.$strip> | zod.ZodObject<{
+                    password: zod.ZodString;
+                }, zod_v4_core.$strip>;
                 use: ((inputContext: better_auth.MiddlewareInputContext<better_auth.MiddlewareOptions>) => Promise<{
                     session: {
                         session: Record<string, any> & {
@@ -4021,18 +4069,18 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             }>;
             viewBackupCodes: better_auth.StrictEndpoint<string, {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    userId: better_auth.ZodCoercedString<unknown>;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    userId: zod.ZodCoercedString<unknown>;
+                }, zod_v4_core.$strip>;
             }, {
                 status: boolean;
                 backupCodes: string[];
             }>;
             sendTwoFactorOTP: better_auth.StrictEndpoint<"/two-factor/send-otp", {
                 method: "POST";
-                body: better_auth.ZodOptional<better_auth.ZodObject<{
-                    trustDevice: better_auth.ZodOptional<better_auth.ZodBoolean>;
-                }, better_auth.$strip>>;
+                body: zod.ZodOptional<zod.ZodObject<{
+                    trustDevice: zod.ZodOptional<zod.ZodBoolean>;
+                }, zod_v4_core.$strip>>;
                 metadata: {
                     openapi: {
                         summary: string;
@@ -4061,10 +4109,10 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             }>;
             verifyTwoFactorOTP: better_auth.StrictEndpoint<"/two-factor/verify-otp", {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    code: better_auth.ZodString;
-                    trustDevice: better_auth.ZodOptional<better_auth.ZodBoolean>;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    code: zod.ZodString;
+                    trustDevice: zod.ZodOptional<zod.ZodBoolean>;
+                }, zod_v4_core.$strip>;
                 metadata: {
                     openapi: {
                         summary: string;
@@ -4150,9 +4198,9 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             }>;
             generateTOTP: better_auth.StrictEndpoint<string, {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    secret: better_auth.ZodString;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    secret: zod.ZodString;
+                }, zod_v4_core.$strip>;
                 metadata: {
                     openapi: {
                         summary: string;
@@ -4204,9 +4252,11 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
                         };
                     };
                 }>)[];
-                body: better_auth.ZodObject<{
-                    password: better_auth.ZodString;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    password: zod.ZodOptional<zod.ZodString>;
+                }, zod_v4_core.$strip> | zod.ZodObject<{
+                    password: zod.ZodString;
+                }, zod_v4_core.$strip>;
                 metadata: {
                     openapi: {
                         summary: string;
@@ -4235,10 +4285,10 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             }>;
             verifyTOTP: better_auth.StrictEndpoint<"/two-factor/verify-totp", {
                 method: "POST";
-                body: better_auth.ZodObject<{
-                    code: better_auth.ZodString;
-                    trustDevice: better_auth.ZodOptional<better_auth.ZodBoolean>;
-                }, better_auth.$strip>;
+                body: zod.ZodObject<{
+                    code: zod.ZodString;
+                    trustDevice: zod.ZodOptional<zod.ZodBoolean>;
+                }, zod_v4_core.$strip>;
                 metadata: {
                     openapi: {
                         summary: string;
@@ -4284,6 +4334,7 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
                 matcher(context: better_auth.HookEndpointContext): boolean;
                 handler: (inputContext: better_auth.MiddlewareInputContext<better_auth.MiddlewareOptions>) => Promise<{
                     twoFactorRedirect: boolean;
+                    twoFactorMethods: string[];
                 } | undefined>;
             }[];
         };
@@ -4321,6 +4372,25 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
                         };
                         index: true;
                     };
+                    verified: {
+                        type: "boolean";
+                        required: false;
+                        defaultValue: true;
+                        input: false;
+                    };
+                    failedVerificationCount: {
+                        type: "number";
+                        required: false;
+                        defaultValue: number;
+                        input: false;
+                        returned: false;
+                    };
+                    lockedUntil: {
+                        type: "date";
+                        required: false;
+                        input: false;
+                        returned: false;
+                    };
                 };
             };
         };
@@ -4338,6 +4408,7 @@ declare function createDeepSpaceAuth(config: DeepSpaceAuthConfig): better_auth.A
             INVALID_BACKUP_CODE: better_auth.RawError<"INVALID_BACKUP_CODE">;
             INVALID_CODE: better_auth.RawError<"INVALID_CODE">;
             TOO_MANY_ATTEMPTS_REQUEST_NEW_CODE: better_auth.RawError<"TOO_MANY_ATTEMPTS_REQUEST_NEW_CODE">;
+            ACCOUNT_TEMPORARILY_LOCKED: better_auth.RawError<"ACCOUNT_TEMPORARILY_LOCKED">;
             INVALID_TWO_FACTOR_COOKIE: better_auth.RawError<"INVALID_TWO_FACTOR_COOKIE">;
         };
     }];
@@ -4375,4 +4446,4 @@ type DeepSpaceAuth = ReturnType<typeof createDeepSpaceAuth>;
 /** Collections that bypass schema checks (permissive access) */
 declare const SYSTEM_COLLECTIONS: Set<string>;
 
-export { AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_NAME_RULES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, Awareness, type AwarenessState, type AwarenessStates, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, type BaseMessage, BaseRoom, CHANNELS_SCHEMA, CHANNEL_INVITATIONS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, CONVERSATION_SCHEMAS, COST_RATES, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type ClientMessage, type CollectionPermissionSummary, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConnectionAttachment, type ConvMemberData, type ConvMessageData, type ConvReactionData, type ConvReadCursorData, type ConvVoteData, type ConversationStateData, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DIRECTORY_SCHEMAS, type DOBindings, type DOManifest, type DOManifestEntry, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DirectoryCommunityData, type DirectoryConversationData, type DirectoryMembershipData, type DirectoryPostData, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, GLOBAL_DO_TYPES, GLOBAL_DO_TYPE_NAMES, type GameInput, GameRoom, type GameRoomConfig, type GetActionData, type GlobalDOType, type HandlerContext, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, MESSAGES_SCHEMA, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type MessageHandlers, type MsgType, type MutateActionData, type PermissionAnalysis, type PermissionContext, type PermissionLevel, type PermissionSource, type PlatformWorkerEnv, type Player, type PrefixResult, type PresencePeer, PresenceRoom, type ProtocolMessage, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RESERVED_BINDING_NAMES, RESERVED_COLLECTION_NAMES, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_DEFAULT, RecordRoom, type RecordRoomConfig, type ResolvedColumn, type ResolvedPermission, type RolePermissions, type RunMigrationsResult, SYSTEM_COLLECTIONS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotOptions, type ScreenshotResult, type ServerMessage, type SharedConnection, type StoredRecord, type Summarizer, type SyncResult, type TokenDebugInfo, type ToolResult, type ToolSchema, USERS_COLUMNS, type User, type UserAttachment, VOTING_SCHEMAS, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKSPACE_SCHEMAS, YjsRoom, analyzePermissions, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, authWorkerFetch, bindingManifestFromOutputConfig, buildCronContext, buildTableSelect, buildUiParts, canCreate, canDelete, canRead, canUpdate, capToolResultSize, captureScreenshot, checkFieldPermissions, clientBuild, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDecoder, createDeepSpaceAI, createDeepSpaceAuth, createEncoder, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deleteChatCascade, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, enqueueJob, getChat, getGlobalDOSchemas, getGlobalDOType, getMessageType, getRolePermissions, handleAwarenessMessage, handleSyncMessage, hasContent, isAutoProvision, isOwner, lintSchema, loadMessages, makeDefaultSummarizer, meterAi, meterUsage, meterVectorize, noopPermissionContext, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, readVarUint, readVarUint8Array, resolveAppName, resolveColumn, rowToData, runMigrations, serverBuild, timingSafeEqualHex, toUint8Array, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyJwt, workspaceAccountsSchema, workspaceContentSharesSchema, workspaceEmailHandlesSchema, workspaceFormResponsesSchema, workspacePeopleSchema, workspaceProjectsSchema, workspaceTagsSchema, workspaceTasksSchema, workspaceTeamMembersSchema, workspaceTeamsSchema, workspaceTransactionsSchema, writeVarUint, writeVarUint8Array };
+export { AI_CHATS_SCHEMA, AI_MESSAGES_SCHEMA, ALLOWED_BINDING_TYPES, APP_NAME_RULES, AUTO_PROVISIONABLE_TYPES, AUTO_PROVISION_SENTINEL, type ActionContext, type ActionHandler, type ActionResult, type ActionTools, type ApiWorkerEnv, type AppNameResolution, type AppNameValidation, type AuthWorkerEnv, Awareness, type AwarenessState, type AwarenessStates, BASE_USERS_SCHEMA, BUILT_IN_TOOLS, type BaseMessage, BaseRoom, CHANNELS_SCHEMA, CHANNEL_INVITATIONS_SCHEMA, CHANNEL_MEMBERS_SCHEMA, CONVERSATION_SCHEMAS, COST_RATES, CanvasRoom, type CanvasShape, type ChatContextConfig, type ChatMessageRow, type ChatRow, type ChatTurn, type ClientMessage, type CollectionPermissionSummary, type CollectionSchema, type ColumnDefinition, type ColumnInterpretation, type ComposioToolsOptions, type ConnectionAttachment, type ConvMemberData, type ConvMessageData, type ConvReactionData, type ConvReadCursorData, type ConvVoteData, type ConversationStateData, type CronContext, type CronExecution, CronRoom, type CronRoomConfig, type CronTask, type CustomBinding, type CustomBindingManifest, DEFAULT_CONTEXT_CONFIG, DEFAULT_DO_MANIFEST, DEFAULT_QUERY_LIMIT, DIRECTORY_SCHEMAS, type DOBindings, type DOManifest, type DOManifestEntry, type DeepSpaceAIEnv, type DeepSpaceAIOptions, type DeepSpaceAuth, type DeepSpaceAuthConfig, type DirectoryCommunityData, type DirectoryConversationData, type DirectoryMembershipData, type DirectoryPostData, type DoMigrationDirective, type DoMigrationPlan, type ExistingDOBinding, GLOBAL_DO_TYPES, GLOBAL_DO_TYPE_NAMES, type GameInput, GameRoom, type GameRoomConfig, type GetActionData, type GlobalDOType, type HandlerContext, type Job, type JobContext, JobRoom, type JobRoomConfig, type JobStatus, type JwtClaims, type JwtVerifierConfig, MESSAGES_SCHEMA, MSG, MSG_AWARENESS, MSG_SYNC, MSG_SYNC_STEP1, MSG_SYNC_STEP2, MSG_SYNC_UPDATE, MSG_YJS_AWARENESS, MSG_YJS_SYNC, type MessageHandlers, type MsgType, type MutateActionData, type PermissionAnalysis, type PermissionContext, type PermissionLevel, type PermissionSource, type PlatformWorkerEnv, type Player, type PrefixResult, type PresencePeer, PresenceRoom, type ProtocolMessage, type QueryActionData, REACTIONS_SCHEMA, READ_RECEIPTS_SCHEMA, RESERVED_BINDING_NAMES, RESERVED_COLLECTION_NAMES, ROLE_ADMIN, ROLE_ANONYMOUS, ROLE_DEFAULT, RecordRoom, type RecordRoomConfig, type ResolvedColumn, type ResolvedPermission, type RolePermissions, type RunMigrationsResult, SYSTEM_COLLECTIONS, SYSTEM_MANAGED_COLUMNS, SchemaRegistry, type ScopeContext, type ScopedR2Auth, type ScopedR2Config, type ScopedR2Handler, type ScreenshotEnv, type ScreenshotOptions, type ScreenshotResult, type ServerMessage, type SharedConnection, type StoredRecord, type Summarizer, type SyncResult, TEST_ACCOUNT_EMAIL_SUFFIX, type TokenDebugInfo, type ToolResult, type ToolSchema, USERS_COLUMNS, type User, type UserAttachment, VOTING_SCHEMAS, type ValidationError, type VerifiedAuth, type VerifyOutcome, type VerifyResult, type Viewport, WORKSPACE_SCHEMAS, YjsRoom, analyzePermissions, apiWorkerFetch, appendMessage, applyAiToolDefaults, applySlidingWindow, authWorkerFetch, bindingManifestFromOutputConfig, buildCronContext, buildTableSelect, buildUiParts, canCreate, canDelete, canRead, canUpdate, capToolResultSize, captureScreenshot, checkFieldPermissions, clientBuild, coerceValue, collectionTableName, columnId, composioTools, computeDoMigration, computeHmacHex, createChat, createDecoder, createDeepSpaceAI, createDeepSpaceAuth, createEncoder, createScopedR2Handler, dataToColumnValues, decodeJwtPayload, deleteChatCascade, dispatch, encode, encodeAwarenessMessage, encodeSyncStep1, encodeSyncStep2, encodeUpdate, enqueueJob, getChat, getGlobalDOSchemas, getGlobalDOType, getMessageType, getRolePermissions, handleAwarenessMessage, handleSyncMessage, hasContent, isAutoProvision, isOwner, isTestAccountClaims, isTestAccountEmail, isTestAccountTier, lintSchema, loadMessages, makeDefaultSummarizer, meterAi, meterUsage, meterVectorize, noopPermissionContext, platformWorkerFetch, prepareMessagesWithCompaction, priceBindingUsageEvent, readVarUint, readVarUint8Array, resolveAppName, resolveColumn, rowToData, runMigrations, serverBuild, timingSafeEqualHex, timingSafeEqualStrings, toUint8Array, totalChars, truncateOldToolResults, turnsToCoreMessages, unwrapToolOutput, updateChat, validateAppName, validateBindingManifest, validateDoManifest, verifyJwt, workspaceAccountsSchema, workspaceContentSharesSchema, workspaceEmailHandlesSchema, workspaceFormResponsesSchema, workspacePeopleSchema, workspaceProjectsSchema, workspaceTagsSchema, workspaceTasksSchema, workspaceTeamMembersSchema, workspaceTeamsSchema, workspaceTransactionsSchema, writeVarUint, writeVarUint8Array };

package/dist/worker.js

@@ -6354,13 +6354,19 @@ async function composioTools(env, options) {
   return tools;
 }
 
+// src/server/utils/app-identity.ts
+function appendAppIdentity(headers, env) {
+  headers.delete("x-app-identity-token");
+  headers.delete("x-app-id");
+  if (!env.APP_IDENTITY_TOKEN) return;
+  headers.set("x-app-identity-token", env.APP_IDENTITY_TOKEN);
+  headers.set("x-app-id", env.DEEPSPACE_APP_ID);
+}
+
 // src/server/utils/screenshot.ts
 async function captureScreenshot(env, opts) {
-  const headers = new Headers({
-    "content-type": "application/json",
-    "x-app-identity-token": env.APP_IDENTITY_TOKEN,
-    "x-app-name": env.APP_NAME
-  });
+  const headers = new Headers({ "content-type": "application/json" });
+  appendAppIdentity(headers, env);
   const res = await platformWorkerFetch(
     env,
     new Request("https://platform-internal/internal/screenshot", {
@@ -7127,6 +7133,30 @@ async function timingSafeEqualHex(a, b) {
   }
   return diff === 0;
 }
+async function timingSafeEqualStrings(a, b) {
+  const encoder = new TextEncoder();
+  const [aHash, bHash] = await Promise.all([
+    crypto.subtle.digest("SHA-256", encoder.encode(a)),
+    crypto.subtle.digest("SHA-256", encoder.encode(b))
+  ]);
+  const aBytes = new Uint8Array(aHash);
+  const bBytes = new Uint8Array(bHash);
+  let diff = 0;
+  for (let i = 0; i < aBytes.length; i++) diff |= aBytes[i] ^ bBytes[i];
+  return diff === 0;
+}
+
+// src/server/auth/testAccounts.ts
+var TEST_ACCOUNT_EMAIL_SUFFIX = "@deepspace.test";
+function isTestAccountEmail(email) {
+  return !!email && email.trim().toLowerCase().endsWith(TEST_ACCOUNT_EMAIL_SUFFIX);
+}
+function isTestAccountClaims(claims) {
+  return claims?.isTestAccount === true;
+}
+function isTestAccountTier(tier) {
+  return tier === "test";
+}
 
 // src/server/auth/betterAuth.ts
 import { betterAuth } from "better-auth";
@@ -7249,6 +7279,7 @@ export {
   SYSTEM_COLLECTIONS,
   SYSTEM_MANAGED_COLUMNS,
   SchemaRegistry,
+  TEST_ACCOUNT_EMAIL_SUFFIX,
   USERS_COLUMNS,
   VOTING_SCHEMAS,
   WORKSPACE_SCHEMAS,
@@ -7303,6 +7334,9 @@ export {
   hasContent,
   isAutoProvision,
   isOwner,
+  isTestAccountClaims,
+  isTestAccountEmail,
+  isTestAccountTier,
   lintSchema,
   loadMessages,
   makeDefaultSummarizer,
@@ -7321,6 +7355,7 @@ export {
   runMigrations,
   serverBuild,
   timingSafeEqualHex,
+  timingSafeEqualStrings,
   toUint8Array,
   totalChars,
   truncateOldToolResults,