@spacefast/common 0.0.10 → 0.0.12

package/dist/contracts/runtime-api.d.ts

@@ -37,6 +37,37 @@ export declare const runtimeVersionCreateResponseSchema: z.ZodObject<{
     upload_id: z.ZodString;
     created_at: z.ZodString;
 }, z.core.$strip>;
+export declare const runtimeUploadSessionDescriptorSchema: z.ZodObject<{
+    upload_id: z.ZodString;
+    space_id: z.ZodString;
+    version_id: z.ZodString;
+    session_mode: z.ZodLiteral<"declared">;
+    expires_at: z.ZodString;
+    manifest_hash: z.ZodOptional<z.ZodString>;
+    files: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        size: z.ZodNumber;
+        sha256: z.ZodOptional<z.ZodString>;
+        contentType: z.ZodOptional<z.ZodString>;
+        sourceUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    retained_files: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        size: z.ZodNumber;
+        sha256: z.ZodOptional<z.ZodString>;
+        contentType: z.ZodOptional<z.ZodString>;
+        sourceUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    reusable_version_id: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    convention_files: z.ZodDefault<z.ZodObject<{
+        redirects: z.ZodOptional<z.ZodString>;
+        headers: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strip>;
+export type RuntimeUploadSessionDescriptor = z.infer<typeof runtimeUploadSessionDescriptorSchema>;
+export declare const RUNTIME_UPLOAD_SESSION_DESCRIPTOR_MAX_BYTES = 4096;
+export declare const RUNTIME_UPLOAD_SESSION_STORED_MAX_BYTES: number;
 export declare const runtimeUploadSessionResponseSchema: z.ZodObject<{
     space_id: z.ZodString;
     version_id: z.ZodString;
@@ -64,10 +95,284 @@ export declare const runtimeZeroModeSchema: z.ZodEnum<{
 export type RuntimeZeroMode = z.infer<typeof runtimeZeroModeSchema>;
 export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
     upload_id: z.ZodString;
+    session: z.ZodOptional<z.ZodObject<{
+        upload_id: z.ZodString;
+        space_id: z.ZodString;
+        version_id: z.ZodString;
+        session_mode: z.ZodLiteral<"declared">;
+        expires_at: z.ZodString;
+        manifest_hash: z.ZodOptional<z.ZodString>;
+        files: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            size: z.ZodNumber;
+            sha256: z.ZodOptional<z.ZodString>;
+            contentType: z.ZodOptional<z.ZodString>;
+            sourceUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        retained_files: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            size: z.ZodNumber;
+            sha256: z.ZodOptional<z.ZodString>;
+            contentType: z.ZodOptional<z.ZodString>;
+            sourceUrl: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        reusable_version_id: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        convention_files: z.ZodDefault<z.ZodObject<{
+            redirects: z.ZodOptional<z.ZodString>;
+            headers: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strip>>;
     zero_mode: z.ZodOptional<z.ZodEnum<{
         active: "active";
         activating: "activating";
     }>>;
+    zero: z.ZodOptional<z.ZodObject<{
+        auth: z.ZodDefault<z.ZodObject<{
+            provider: z.ZodDefault<z.ZodLiteral<"wpcom">>;
+            signInPath: z.ZodDefault<z.ZodNullable<z.ZodLiteral<"/__spacefast/zero/auth/wpcom/start">>>;
+            signInUrl: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            signOutPath: z.ZodDefault<z.ZodNullable<z.ZodLiteral<"/__spacefast/zero/auth/sign-out">>>;
+            signOutUrl: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            returnToParam: z.ZodDefault<z.ZodString>;
+        }, z.core.$strict>>;
+        variables: z.ZodObject<{
+            source: z.ZodLiteral<"stattic-variables">;
+            names: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>;
+        realtime: z.ZodObject<{
+            mode: z.ZodEnum<{
+                "stattic-central": "stattic-central";
+                "spacefast-cast": "spacefast-cast";
+                "local-dev": "local-dev";
+            }>;
+            centralUrl: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            replayUrl: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            castResourceKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            eventCallback: z.ZodOptional<z.ZodObject<{
+                url: z.ZodString;
+                token: z.ZodString;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+        runtimeKind: z.ZodLiteral<"zero">;
+        migrations: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            format: z.ZodLiteral<"stattic.zero.migrations.v1">;
+            mode: z.ZodDefault<z.ZodEnum<{
+                safe: "safe";
+                drop: "drop";
+                rename: "rename";
+            }>>;
+            schemaHash: z.ZodString;
+            operations: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                op: z.ZodLiteral<"create_table">;
+                table: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                op: z.ZodLiteral<"add_column">;
+                table: z.ZodString;
+                column: z.ZodObject<{
+                    name: z.ZodString;
+                    type: z.ZodEnum<{
+                        string: "string";
+                        number: "number";
+                        boolean: "boolean";
+                        json: "json";
+                    }>;
+                    nullable: z.ZodDefault<z.ZodBoolean>;
+                    default: z.ZodOptional<z.ZodUnknown>;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                op: z.ZodLiteral<"add_index">;
+                table: z.ZodString;
+                columns: z.ZodArray<z.ZodString>;
+                unique: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strict>, z.ZodObject<{
+                op: z.ZodLiteral<"drop_table">;
+                table: z.ZodString;
+                explicit: z.ZodLiteral<"drop">;
+            }, z.core.$strict>, z.ZodObject<{
+                op: z.ZodLiteral<"drop_column">;
+                table: z.ZodString;
+                column: z.ZodString;
+                explicit: z.ZodLiteral<"drop">;
+            }, z.core.$strict>, z.ZodObject<{
+                op: z.ZodLiteral<"rename_table">;
+                from: z.ZodString;
+                to: z.ZodString;
+                explicit: z.ZodLiteral<"rename">;
+            }, z.core.$strict>, z.ZodObject<{
+                op: z.ZodLiteral<"rename_column">;
+                table: z.ZodString;
+                from: z.ZodString;
+                to: z.ZodString;
+                explicit: z.ZodLiteral<"rename">;
+            }, z.core.$strict>], "op">>;
+        }, z.core.$strict>>>;
+        install: z.ZodObject<{
+            runtimeKind: z.ZodLiteral<"zero">;
+            engine: z.ZodLiteral<"quickjs-rust">;
+            storageRoot: z.ZodLiteral<"__spacefast/zero">;
+            artifactPath: z.ZodLiteral<"__spacefast/zero/artifact.json">;
+            configPath: z.ZodLiteral<"__spacefast/zero/config.json">;
+            binary: z.ZodObject<{
+                path: z.ZodLiteral<"__spacefast/zero/bin/stattic-zero-runner">;
+                compatibilityTarget: z.ZodObject<{
+                    profile: z.ZodLiteral<"wpcloud-linux-x86_64-gnu-v1">;
+                    os: z.ZodLiteral<"linux">;
+                    cpu: z.ZodLiteral<"x86_64">;
+                    libc: z.ZodLiteral<"glibc">;
+                    linking: z.ZodLiteral<"dynamic">;
+                    requireExecutableBit: z.ZodLiteral<true>;
+                }, z.core.$strict>;
+                sha256: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                required: z.ZodLiteral<true>;
+            }, z.core.$strict>;
+            mysql: z.ZodObject<{
+                migrateAtFinalize: z.ZodLiteral<true>;
+                blockIncompatibleRollback: z.ZodLiteral<true>;
+            }, z.core.$strict>;
+            realtime: z.ZodObject<{
+                production: z.ZodLiteral<"stattic-central">;
+                local: z.ZodLiteral<"foreground-cli-ws">;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        artifact: z.ZodObject<{
+            format: z.ZodLiteral<"stattic.zero.capsule.v1">;
+            appName: z.ZodString;
+            serverRuntime: z.ZodLiteral<"quickjs-rust">;
+            client: z.ZodObject<{
+                bundlePath: z.ZodString;
+                basePathAware: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strict>;
+            server: z.ZodObject<{
+                bundlePath: z.ZodString;
+                schema: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+                    name: z.ZodString;
+                    columns: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                        name: z.ZodString;
+                        type: z.ZodEnum<{
+                            string: "string";
+                            number: "number";
+                            boolean: "boolean";
+                            json: "json";
+                        }>;
+                        nullable: z.ZodDefault<z.ZodBoolean>;
+                        default: z.ZodOptional<z.ZodUnknown>;
+                    }, z.core.$strict>>>;
+                }, z.core.$strict>>>;
+                queries: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                mutations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                endpoints: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                    method: z.ZodEnum<{
+                        POST: "POST";
+                        PUT: "PUT";
+                        GET: "GET";
+                        HEAD: "HEAD";
+                        PATCH: "PATCH";
+                        DELETE: "DELETE";
+                        OPTIONS: "OPTIONS";
+                    }>;
+                    path: z.ZodString;
+                }, z.core.$strict>>>;
+                sockets: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>;
+            db: z.ZodObject<{
+                backend: z.ZodLiteral<"wpcloud-mysql">;
+                migrations: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    op: z.ZodLiteral<"create_table">;
+                    table: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    op: z.ZodLiteral<"add_column">;
+                    table: z.ZodString;
+                    column: z.ZodObject<{
+                        name: z.ZodString;
+                        type: z.ZodEnum<{
+                            string: "string";
+                            number: "number";
+                            boolean: "boolean";
+                            json: "json";
+                        }>;
+                        nullable: z.ZodDefault<z.ZodBoolean>;
+                        default: z.ZodOptional<z.ZodUnknown>;
+                    }, z.core.$strict>;
+                }, z.core.$strict>, z.ZodObject<{
+                    op: z.ZodLiteral<"add_index">;
+                    table: z.ZodString;
+                    columns: z.ZodArray<z.ZodString>;
+                    unique: z.ZodDefault<z.ZodBoolean>;
+                }, z.core.$strict>, z.ZodObject<{
+                    op: z.ZodLiteral<"drop_table">;
+                    table: z.ZodString;
+                    explicit: z.ZodLiteral<"drop">;
+                }, z.core.$strict>, z.ZodObject<{
+                    op: z.ZodLiteral<"drop_column">;
+                    table: z.ZodString;
+                    column: z.ZodString;
+                    explicit: z.ZodLiteral<"drop">;
+                }, z.core.$strict>, z.ZodObject<{
+                    op: z.ZodLiteral<"rename_table">;
+                    from: z.ZodString;
+                    to: z.ZodString;
+                    explicit: z.ZodLiteral<"rename">;
+                }, z.core.$strict>, z.ZodObject<{
+                    op: z.ZodLiteral<"rename_column">;
+                    table: z.ZodString;
+                    from: z.ZodString;
+                    to: z.ZodString;
+                    explicit: z.ZodLiteral<"rename">;
+                }, z.core.$strict>], "op">>>;
+            }, z.core.$strict>;
+            realtime: z.ZodObject<{
+                mode: z.ZodEnum<{
+                    "stattic-central": "stattic-central";
+                    "spacefast-cast": "spacefast-cast";
+                    "local-dev": "local-dev";
+                }>;
+                mutationEvents: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strict>;
+            limits: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            futureCapabilities: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+                ai: "ai";
+                blob: "blob";
+                "generalized-js": "generalized-js";
+            }>>>;
+            sourceManifest: z.ZodObject<{
+                entries: z.ZodObject<{
+                    client: z.ZodLiteral<"client/index.tsx">;
+                    server: z.ZodLiteral<"server/index.ts">;
+                }, z.core.$strict>;
+                sourceRoot: z.ZodString;
+                files: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                    path: z.ZodString;
+                    size: z.ZodNumber;
+                    sha256: z.ZodString;
+                }, z.core.$strict>>>;
+                env: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                    file: z.ZodLiteral<".env.zero.server">;
+                    names: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                }, z.core.$strip>>>;
+                sourceConfig: z.ZodDefault<z.ZodObject<{
+                    configFile: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                        path: z.ZodLiteral<"zero.json">;
+                        appName: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                        deployId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                        name: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                        title: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                    }, z.core.$strip>>>;
+                    deployFile: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+                        path: z.ZodLiteral<".zero/deploy.json">;
+                        keys: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>>;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        inspect: z.ZodDefault<z.ZodObject<{
+            policy: z.ZodDefault<z.ZodEnum<{
+                public: "public";
+                private: "private";
+            }>>;
+        }, z.core.$strict>>;
+        variableValues: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, z.core.$strict>>;
     ready_at: z.ZodOptional<z.ZodNumber>;
     convention_files: z.ZodOptional<z.ZodObject<{
         redirects: z.ZodOptional<z.ZodString>;
@@ -123,9 +428,10 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
         }, z.core.$strip>>;
         zero_endpoints: z.ZodOptional<z.ZodArray<z.ZodObject<{
             method: z.ZodEnum<{
-                PUT: "PUT";
                 POST: "POST";
+                PUT: "PUT";
                 GET: "GET";
+                HEAD: "HEAD";
                 PATCH: "PATCH";
                 DELETE: "DELETE";
                 OPTIONS: "OPTIONS";
@@ -174,6 +480,7 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
                         ipCidrs: z.ZodOptional<z.ZodArray<z.ZodString>>;
                         agent: z.ZodOptional<z.ZodString>;
                         country: z.ZodOptional<z.ZodString>;
+                        countryNotIn: z.ZodOptional<z.ZodArray<z.ZodString>>;
                         header: z.ZodOptional<z.ZodObject<{
                             name: z.ZodString;
                             value: z.ZodString;
@@ -240,6 +547,7 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
                 externalProxy: z.ZodBoolean;
             }, z.core.$strip>>>;
         }, z.core.$strip>>;
+        config_digest: z.ZodOptional<z.ZodString>;
         changed_paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
         previous_version_id: z.ZodOptional<z.ZodString>;
         production_hostnames: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -251,13 +559,13 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
         host_canonical_redirects: z.ZodDefault<z.ZodArray<z.ZodObject<{
             from: z.ZodString;
             to: z.ZodString;
-            status: z.ZodDefault<z.ZodLiteral<308>>;
+            status: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<307>, z.ZodLiteral<308>]>>;
         }, z.core.$strip>>>;
-        proxy_host_routes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        static_mount_routes: z.ZodOptional<z.ZodArray<z.ZodObject<{
             hostname: z.ZodString;
-            path_prefix: z.ZodDefault<z.ZodString>;
-            upstream: z.ZodString;
-            noindex: z.ZodDefault<z.ZodBoolean>;
+            path_prefix: z.ZodString;
+            target_space_id: z.ZodString;
+            target_version_id: z.ZodString;
         }, z.core.$strip>>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
@@ -289,6 +597,7 @@ export declare const runtimeRouteUpdateRequestSchema: z.ZodObject<{
                     ipCidrs: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     agent: z.ZodOptional<z.ZodString>;
                     country: z.ZodOptional<z.ZodString>;
+                    countryNotIn: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     header: z.ZodOptional<z.ZodObject<{
                         name: z.ZodString;
                         value: z.ZodString;
@@ -355,6 +664,7 @@ export declare const runtimeRouteUpdateRequestSchema: z.ZodObject<{
             externalProxy: z.ZodBoolean;
         }, z.core.$strip>>>;
     }, z.core.$strip>>;
+    config_digest: z.ZodOptional<z.ZodString>;
     changed_paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
     previous_version_id: z.ZodOptional<z.ZodString>;
     production_hostnames: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -366,13 +676,13 @@ export declare const runtimeRouteUpdateRequestSchema: z.ZodObject<{
     host_canonical_redirects: z.ZodDefault<z.ZodArray<z.ZodObject<{
         from: z.ZodString;
         to: z.ZodString;
-        status: z.ZodDefault<z.ZodLiteral<308>>;
+        status: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<307>, z.ZodLiteral<308>]>>;
     }, z.core.$strip>>>;
-    proxy_host_routes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+    static_mount_routes: z.ZodOptional<z.ZodArray<z.ZodObject<{
         hostname: z.ZodString;
-        path_prefix: z.ZodDefault<z.ZodString>;
-        upstream: z.ZodString;
-        noindex: z.ZodDefault<z.ZodBoolean>;
+        path_prefix: z.ZodString;
+        target_space_id: z.ZodString;
+        target_version_id: z.ZodString;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
 export declare const runtimeHostnameIntentUpdateRequestSchema: z.ZodObject<{
@@ -385,19 +695,20 @@ export declare const runtimeHostnameIntentUpdateRequestSchema: z.ZodObject<{
     host_canonical_redirects: z.ZodDefault<z.ZodArray<z.ZodObject<{
         from: z.ZodString;
         to: z.ZodString;
-        status: z.ZodDefault<z.ZodLiteral<308>>;
+        status: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<307>, z.ZodLiteral<308>]>>;
     }, z.core.$strip>>>;
-    proxy_host_routes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+    static_mount_routes: z.ZodOptional<z.ZodArray<z.ZodObject<{
         hostname: z.ZodString;
-        path_prefix: z.ZodDefault<z.ZodString>;
-        upstream: z.ZodString;
-        noindex: z.ZodDefault<z.ZodBoolean>;
+        path_prefix: z.ZodString;
+        target_space_id: z.ZodString;
+        target_version_id: z.ZodString;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
 export declare const runtimeRouteUpdateResponseSchema: z.ZodObject<{
     space_id: z.ZodString;
     route_name: z.ZodString;
     version_id: z.ZodString;
+    unchanged: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export declare const runtimeHostnameIntentUpdateResponseSchema: z.ZodObject<{
     space_id: z.ZodString;
@@ -472,6 +783,7 @@ export declare const runtimeSpaceExportResponseSchema: z.ZodObject<{
     completed_at: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const runtimeSpaceImportStartRequestSchema: z.ZodObject<{
+    install_access_policy: z.ZodOptional<z.ZodBoolean>;
     version_id_map: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     zero_mode: z.ZodOptional<z.ZodEnum<{
         active: "active";
@@ -507,6 +819,7 @@ export declare const runtimeTransferBundleSourceRequestSchema: z.ZodObject<{
     space_id: z.ZodString;
     version_ids: z.ZodArray<z.ZodString>;
     cursor: z.ZodNullable<z.ZodString>;
+    include_serving_state: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export declare const runtimeTransferBundleTargetRequestSchema: z.ZodObject<{
     space_id: z.ZodString;
@@ -533,6 +846,7 @@ export declare const runtimeTransferCommitRequestSchema: z.ZodObject<{
     space_id: z.ZodString;
     version_ids: z.ZodArray<z.ZodString>;
     live_version_id: z.ZodNullable<z.ZodString>;
+    install_serving_state: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export declare const runtimeTransferCommitResponseSchema: z.ZodObject<{
     installed: z.ZodLiteral<true>;

package/dist/contracts/runtime-api.js

@@ -2,11 +2,12 @@ import { z } from "zod";
 import { accessEventSchema, policyDocSchema } from "./access.js";
 import { conventionFilesSchema, manifestFileSchema } from "./internal.js";
 import { runtimePagesSchema } from "./pages.js";
+import { zeroEndpointSchema, zeroRuntimeConfigSchema } from "./zero.js";
 const runtimeConventionFilesSchema = conventionFilesSchema.omit({ routes: true }).strict();
 const hostCanonicalRedirectSchema = z.object({
     from: z.string().min(1),
-    to: z.string().min(1),
-    status: z.literal(308).default(308),
+    to: z.string().url(),
+    status: z.union([z.literal(301), z.literal(302), z.literal(307), z.literal(308)]).default(308),
 });
 // Immutable version hosts carry their own target version: the intent is the
 // COMPLETE declarative hostname map for the space (every retained ready
@@ -15,18 +16,18 @@ const versionHostnameEntrySchema = z.object({
     hostname: z.string().min(1),
     version_id: z.string().min(1),
 });
-const proxyHostRouteEntrySchema = z.object({
+const staticMountRouteEntrySchema = z.object({
     hostname: z.string().min(1),
-    path_prefix: z.string().min(1).default("/"),
-    upstream: z.string().url(),
-    noindex: z.boolean().default(false),
+    path_prefix: z.string().startsWith("/").min(2),
+    target_space_id: z.string().min(1),
+    target_version_id: z.string().min(1),
 });
 const runtimeRouteIntentSchema = z.object({
     production_hostnames: z.array(z.string().min(1)).default([]),
     noindex_production_hostnames: z.array(z.string().min(1)).default([]),
     version_hostnames: z.array(versionHostnameEntrySchema).default([]),
     host_canonical_redirects: z.array(hostCanonicalRedirectSchema).default([]),
-    proxy_host_routes: z.array(proxyHostRouteEntrySchema).default([]),
+    static_mount_routes: z.array(staticMountRouteEntrySchema).optional(),
 });
 // Changed-path purge contract (internal-docs/platform.md "Cache Management"):
 // finalize computes the changed-path set against the previous pointer target
@@ -78,6 +79,28 @@ export const runtimeVersionCreateResponseSchema = z.object({
     upload_id: z.string(),
     created_at: z.string(),
 });
+export const runtimeUploadSessionDescriptorSchema = z.object({
+    upload_id: z.string().min(1),
+    space_id: z.string().min(1),
+    version_id: z.string().min(1),
+    session_mode: z.literal("declared"),
+    expires_at: z.string(),
+    manifest_hash: z.string().optional(),
+    files: z.array(manifestFileSchema),
+    // Retained files only travel in the authenticated finalize request: they are
+    // unbounded and unused while accepting a PUT.
+    retained_files: z.array(manifestFileSchema).optional(),
+    reusable_version_id: z.string().min(1).optional(),
+    metadata: z.record(z.string(), z.unknown()).default({}),
+    convention_files: runtimeConventionFilesSchema.default({}),
+});
+// Budget for the half that rides in the upload JWT (everything except the
+// retained manifest): 4 KiB of JSON keeps the signed token inside common 8 KiB
+// header buffers, since it is sent on every PUT.
+export const RUNTIME_UPLOAD_SESSION_DESCRIPTOR_MAX_BYTES = 4096;
+// Budget for the whole descriptor, which is persisted on the version row and
+// replayed inside the durable finalize receipt.
+export const RUNTIME_UPLOAD_SESSION_STORED_MAX_BYTES = 256 * 1024;
 // Runtime-truth upload session state (spec "Upload Contract"): the resume flow asks
 // the runtime which declared files/chunks are actually present instead of guessing
 // from control-plane pending-upload state.
@@ -251,8 +274,8 @@ const runtimeZeroEndpointCapabilitiesSchema = z
 })
     .default({});
 const runtimeZeroEndpointSchema = z.object({
-    method: z.enum(["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"]),
-    path: z.string().min(1).max(2048),
+    method: zeroEndpointSchema.shape.method,
+    path: zeroEndpointSchema.shape.path,
     source: z
         .string()
         .min(1)
@@ -279,7 +302,9 @@ const runtimeZeroRunSchema = z.object({
 export const runtimeZeroModeSchema = z.enum(["active", "activating"]);
 export const runtimeVersionFinalizeRequestSchema = z.object({
     upload_id: z.string().min(1),
+    session: runtimeUploadSessionDescriptorSchema.optional(),
     zero_mode: runtimeZeroModeSchema.optional(),
+    zero: zeroRuntimeConfigSchema.optional(),
     // The version's authoritative ready timestamp (epoch seconds), passed by the
     // control plane when the version already reached ready (re-finalize, import
     // re-materialization, provider migration). The engine stamps it ONCE into the
@@ -356,13 +381,16 @@ export const runtimeVersionFinalizeRequestSchema = z.object({
             .default("production")
             .describe("Runtime route-pointer to activate; route names are runtime-only vocabulary."),
         config: runtimeRouteConfigSchema.optional(),
+        // Same contract as the route PUT's config_digest: stored with the
+        // pointer so later conditional route PUTs can no-op against it.
+        config_digest: z.string().min(1).optional(),
         changed_paths: changedPathsSchema,
         previous_version_id: previousVersionIdSchema,
         production_hostnames: runtimeRouteIntentSchema.shape.production_hostnames,
         noindex_production_hostnames: runtimeRouteIntentSchema.shape.noindex_production_hostnames,
         version_hostnames: runtimeRouteIntentSchema.shape.version_hostnames,
         host_canonical_redirects: runtimeRouteIntentSchema.shape.host_canonical_redirects,
-        proxy_host_routes: runtimeRouteIntentSchema.shape.proxy_host_routes,
+        static_mount_routes: runtimeRouteIntentSchema.shape.static_mount_routes,
     })
         .optional(),
 });
@@ -373,32 +401,42 @@ export const runtimeVersionFinalizeResponseSchema = z.object({
     // Runtime-compiled truth from zero/endpoints-index.json. Optional so older
     // runtimes remain parseable during rolling deploys.
     zero_endpoint_count: z.number().int().nonnegative().optional(),
-    // Open sessions: the manifest derived from what was actually uploaded
-    // (path, size, streaming sha256). Absent for declared sessions.
+    // Canonical runtime-committed manifest (path, size, streaming sha256).
+    // Returned by both first and idempotent finalize responses so recovery
+    // never needs an already-consumed upload session.
     manifest: z.array(manifestFileSchema).optional(),
 });
 export const runtimeRouteUpdateRequestSchema = z.object({
     version_id: z.string().min(1),
     config: runtimeRouteConfigSchema.optional(),
+    // Canonical digest of `config` (control-plane routeConfigDigest). The engine
+    // stores it with the route pointer and no-ops the whole PUT — no policy
+    // store, no journal event, no edge purge — when version, digest, and
+    // hostname intent all match the stored route. Absent = always write.
+    config_digest: z.string().min(1).optional(),
     changed_paths: changedPathsSchema,
     previous_version_id: previousVersionIdSchema,
     production_hostnames: runtimeRouteIntentSchema.shape.production_hostnames,
     noindex_production_hostnames: runtimeRouteIntentSchema.shape.noindex_production_hostnames,
     version_hostnames: runtimeRouteIntentSchema.shape.version_hostnames,
     host_canonical_redirects: runtimeRouteIntentSchema.shape.host_canonical_redirects,
-    proxy_host_routes: runtimeRouteIntentSchema.shape.proxy_host_routes,
+    static_mount_routes: runtimeRouteIntentSchema.shape.static_mount_routes,
 });
 export const runtimeHostnameIntentUpdateRequestSchema = z.object({
     production_hostnames: runtimeRouteIntentSchema.shape.production_hostnames,
     noindex_production_hostnames: runtimeRouteIntentSchema.shape.noindex_production_hostnames,
     version_hostnames: runtimeRouteIntentSchema.shape.version_hostnames,
     host_canonical_redirects: runtimeRouteIntentSchema.shape.host_canonical_redirects,
-    proxy_host_routes: runtimeRouteIntentSchema.shape.proxy_host_routes,
+    static_mount_routes: runtimeRouteIntentSchema.shape.static_mount_routes,
 });
 export const runtimeRouteUpdateResponseSchema = z.object({
     space_id: z.string(),
     route_name: z.string(),
     version_id: z.string(),
+    // True when the engine skipped the write because version_id, config_digest,
+    // and hostname intent all matched the stored route: nothing was journaled,
+    // so callers skip the event drain too.
+    unchanged: z.boolean().optional(),
 });
 export const runtimeHostnameIntentUpdateResponseSchema = z.object({
     space_id: z.string(),
@@ -491,6 +529,10 @@ export const runtimeSpaceExportResponseSchema = z.object({
 });
 export const runtimeSpaceImportStartRequestSchema = z
     .object({
+    // Version installation and target-policy replacement are separate trust
+    // decisions. Managed imports always pass false; trusted full-restore tools
+    // must opt in explicitly before archive upload.
+    install_access_policy: z.boolean().optional(),
     version_id_map: z.record(z.string(), z.string()).optional(),
     // Plan §9 gated activation, extended to import (I-4): shares
     // runtimeZeroModeSchema with runtimeVersionFinalizeRequestSchema.
@@ -530,6 +572,7 @@ export const runtimeTransferBundleSourceRequestSchema = z.object({
     space_id: z.string().min(1),
     version_ids: z.array(z.string().min(1)),
     cursor: z.string().nullable(),
+    include_serving_state: z.boolean().optional(),
 });
 export const runtimeTransferBundleTargetRequestSchema = z.object({
     space_id: z.string().min(1),
@@ -548,6 +591,7 @@ export const runtimeTransferCommitRequestSchema = z.object({
     space_id: z.string().min(1),
     version_ids: z.array(z.string().min(1)),
     live_version_id: z.string().nullable(),
+    install_serving_state: z.boolean().optional(),
 });
 export const runtimeTransferCommitResponseSchema = z.object({
     installed: z.literal(true),

package/dist/contracts/sf-config-v1.js

@@ -1,5 +1,5 @@
 import { BRAND } from "../brand.js";
-import { SPACE_CONFIG_ACCEPTED_FILES, SPACE_CONFIG_CANONICAL_FILE, } from "./space-config.js";
+import { SPACE_CONFIG_ACCEPTED_FILES, SPACE_CONFIG_CANONICAL_FILE } from "./space-config.js";
 export const SF_CONFIG_V1_CANONICAL_FILE = SPACE_CONFIG_CANONICAL_FILE;
 export const SF_CONFIG_V1_FILES = SPACE_CONFIG_ACCEPTED_FILES;
 /** Published JSON Schema URL for the strict `sf.jsonc` v1 contract. */