@spacefast/common 0.0.10 → 0.0.12

package/dist/contracts/spaces.js

@@ -2,7 +2,7 @@ import { z } from "zod";
 import { AsyncOperationSchema, baseDiagnosticSchema, CursorPaginationSchema, cursorListQuerySchema, } from "./common.js";
 import { versionStatus, spaceStatus } from "./enums.js";
 import { conventionFilesSchema, uploadInstructionsSchema, manifestFileSchema } from "./internal.js";
-import { ChannelPointerSchema, VersionSchema, PublishSourceSchema, SpaceSchema, spaceSettingsDigestSchema, } from "./resources.js";
+import { VersionSchema, PublishSourceSchema, SpaceSchema, spaceSettingsDigestSchema, } from "./resources.js";
 import { spaceConfigSchema, spacePlacementConfigSchema } from "./space-config.js";
 import { principalIdSchema } from "./transfers.js";
 import { zeroRuntimeKindSchema } from "./zero.js";
@@ -87,13 +87,6 @@ export const spacePatchSchema = z
         .boolean()
         .optional()
         .describe("Hide the live production site from search engines. Applies only to claimed spaces' live hostnames; preview and version hostnames are always noindex."),
-    password: z
-        .string()
-        .min(1)
-        .max(255)
-        .nullable()
-        .optional()
-        .describe("Sets (string) or removes (null) space password protection."),
 })
     // Strict so an unknown field (notably `slug`) is rejected with a validation
     // error rather than silently stripped. Slug rename is a deliberately
@@ -238,6 +231,44 @@ export const spaceClaimReminderSchema = z.object({
 export const spaceClaimReminderResponseSchema = z.object({
     accepted: z.literal(true),
 });
+// Shared by spaceVersionCreateSchema and publishRequestSchema: both accept the
+// same manifest-mutation fields and enforce the same "requires a declared
+// files manifest / snapshot mode" rules on them.
+const manifestMutationFieldsSchema = {
+    deletePaths: z
+        .array(z.string().min(1))
+        .default([])
+        .describe("Explicit paths to remove when publishMode is additive. Omitted paths are retained; only paths listed here are deleted."),
+    immutableAssetPrefixes: z
+        .array(z.string().min(2))
+        .optional()
+        .describe("Publisher-owned directory prefixes whose declared files are immutable generation assets. Snapshot publishes retain the current generation's matching files for exactly one subsequent generation."),
+};
+function refineManifestMutationRules(value, ctx) {
+    if (value.files === undefined && value.deletePaths.length > 0) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "deletePaths requires a declared files manifest.",
+            path: ["deletePaths"],
+        });
+    }
+    if (value.immutableAssetPrefixes !== undefined) {
+        if (value.files === undefined) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: "immutableAssetPrefixes requires a declared files manifest.",
+                path: ["immutableAssetPrefixes"],
+            });
+        }
+        if (value.publishMode !== "snapshot") {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: "immutableAssetPrefixes requires snapshot publish mode.",
+                path: ["immutableAssetPrefixes"],
+            });
+        }
+    }
+}
 export const spaceVersionCreateSchema = z
     .object({
     source: PublishSourceSchema.optional().describe('Publish provenance recorded on the version; defaults to {kind: "direct_upload"}.'),
@@ -257,24 +288,17 @@ export const spaceVersionCreateSchema = z
     conventionFiles: conventionFilesSchema
         .optional()
         .describe("Routing convention contents used when deciding whether this publish is unchanged. The same values are supplied again when the version is finalized."),
+    finalize: z
+        .object({ channel: z.literal("live").nullable().optional() })
+        .optional()
+        .describe("Finalize intent for a declared upload. When every declared file lands, the version finalizes itself; the explicit finalize call remains available for recovery and replay."),
     files: z
         .array(manifestFileSchema)
         .optional()
         .describe("Full desired file manifest. For first deploys, send path/size/contentType without hashes so upload can begin immediately. For updates, include sha256 to let the server skip unchanged files. Omit entirely for an open session: the upload token then authorizes any policy-valid path within plan caps and finalize derives the manifest from what was uploaded."),
-    deletePaths: z
-        .array(z.string().min(1))
-        .default([])
-        .describe("Explicit paths to remove when publishMode is additive. Omitted paths are retained; only paths listed here are deleted."),
+    ...manifestMutationFieldsSchema,
 })
-    .superRefine((value, ctx) => {
-    if (value.files === undefined && value.deletePaths.length > 0) {
-        ctx.addIssue({
-            code: z.ZodIssueCode.custom,
-            message: "deletePaths requires a declared files manifest.",
-            path: ["deletePaths"],
-        });
-    }
-});
+    .superRefine(refineManifestMutationRules);
 export const spaceVersionListSchema = z.object({
     data: z.array(VersionSchema),
     pagination: CursorPaginationSchema,
@@ -467,16 +491,31 @@ export const spaceVersionFileDiffEntrySchema = z.object({
         format: z.literal("unified"),
         content: z.string(),
         truncated: z.boolean(),
+        truncationReason: z.literal("patch_byte_limit").nullable(),
     })
         .nullable(),
+    patchOmission: z
+        .enum(["input_too_large", "not_previewable", "content_unavailable", "patch_budget_exhausted"])
+        .nullable(),
 });
-export const spaceVersionFileDiffQuerySchema = z.object({
+export const spaceVersionFileDiffQuerySchema = cursorListQuerySchema.extend({
     baseVersionId: z.string().optional(),
 });
 export const spaceVersionFileDiffResponseSchema = z.object({
     versionId: z.string(),
     baseVersionId: z.string().nullable(),
     files: z.array(spaceVersionFileDiffEntrySchema),
+    pagination: CursorPaginationSchema,
+    limits: z.object({
+        maxFiles: z.number().int().positive(),
+        maxInputBytes: z.number().int().positive(),
+        maxPatchBytes: z.number().int().positive(),
+        readConcurrency: z.number().int().positive(),
+    }),
+    usage: z.object({
+        inputBytes: z.number().int().nonnegative(),
+        patchBytes: z.number().int().nonnegative(),
+    }),
 });
 // Upload state is inferable (internal-docs/platform.md L2216): `upload` present means bytes are
 // still needed (then finalize); `versionId` null means the manifest matched and nothing changed.
@@ -504,11 +543,20 @@ export const publishRequestSchema = z
         .array(manifestFileSchema)
         .optional()
         .describe("Desired file manifest for a declared publish session. Clients upload returned paths, then finalize. Omit for inline one-shot and open-session publishes."),
-    deletePaths: z
-        .array(z.string().min(1))
-        .default([])
-        .describe("Explicit paths to remove when publishMode is additive. Omitted paths are retained; only paths listed here are deleted."),
+    ...manifestMutationFieldsSchema,
     source: PublishSourceSchema.optional().describe('Publish provenance recorded on the version; defaults to {kind: "direct_upload"}.'),
+    // Same fields, same bounds as spaceVersionCreateSchema: a publish that ran
+    // a build carries its transcript and provenance whichever door it enters
+    // by, so the first version of a space is not poorer than its second.
+    sourceMetadata: z
+        .record(z.string(), z.unknown())
+        .optional()
+        .describe("Additional control-plane-only provenance for build/deploy read models."),
+    buildLog: z
+        .string()
+        .max(64_000)
+        .optional()
+        .describe("Bounded build transcript for deploys that ran a local build before publishing."),
     publishMode: z
         .enum(["additive", "snapshot"])
         .default("additive")
@@ -543,13 +591,7 @@ export const publishRequestSchema = z
             path: ["principal", "id"],
         });
     }
-    if (value.files === undefined && value.deletePaths.length > 0) {
-        ctx.addIssue({
-            code: z.ZodIssueCode.custom,
-            message: "deletePaths requires a declared files manifest.",
-            path: ["deletePaths"],
-        });
-    }
+    refineManifestMutationRules(value, ctx);
 });
 export const publishUploadReceiptSchema = z.object({
     ...uploadInstructionsSchema.shape,
@@ -569,9 +611,43 @@ export const publishReceiptVersionSchema = z.object({
     number: z.number().int().positive().nullable().optional(),
     manifestHash: z.string().nullable(),
 });
+// Liveness is never a version status — it is the channel pointer, reported
+// here. "Ready and live" (activated), "ready but outraced" (superseded), and
+// "ready by design" (unpromoted) are three different receipts.
+export const publishActivationSchema = z.object({
+    channel: z
+        .enum(["live"])
+        .nullable()
+        .describe("Channel this publish targeted. null = ready version without promotion."),
+    outcome: z
+        .enum(["activated", "unpromoted", "superseded", "pending"])
+        .describe("activated: the live pointer moved to this version. unpromoted: ready with channel null, by request. superseded: ready, but a newer publish holds the live pointer. pending: not settled yet."),
+    currentLiveVersionId: z
+        .string()
+        .nullable()
+        .describe("The version currently serving live traffic, or null when the space has none."),
+});
+// The receipt's normative next step: the deterministic projection of
+// (version status, activation outcome, pending bytes, operation state). An
+// agent drives the whole lifecycle by branching on `action` alone.
+export const publishNextSchema = z.object({
+    action: z
+        .enum(["done", "upload", "finalize", "poll"])
+        .describe("done: stop, this request's intent is settled. upload: PUT the upload targets, then follow the finalize link. finalize: all bytes are present, POST url to commit. poll: server-side work in flight, GET url after retryAfter seconds."),
+    url: z.string().optional().describe("The endpoint the action applies to."),
+    retryAfter: z
+        .number()
+        .int()
+        .positive()
+        .optional()
+        .describe("Polling cadence in seconds; present only when action is poll."),
+    hint: z.string().max(140).describe("One plain sentence for an agent mid-loop."),
+});
 export const publishReceiptSchema = z.object({
     space: publishReceiptSpaceSchema,
     version: publishReceiptVersionSchema,
+    activation: publishActivationSchema,
+    next: publishNextSchema,
     operation: AsyncOperationSchema.optional().describe("Background finalize operation when publish work continues asynchronously."),
     // Paste-ready one-liner (URL + claim nudge) so agents propagate consistent
     // claim copy into transcripts (internal-docs/platform.md M1a "share blurb").
@@ -671,15 +747,6 @@ export const spaceRuntimeStatusSchema = z.object({
     pendingVersionStatus: versionStatus.nullable(),
     operation: AsyncOperationSchema.nullable(),
 });
-// Channel listing entry: the channel name plus its spec ChannelPointer.
-export const spaceChannelSchema = z.object({
-    name: z.string().describe('Channel name; "live" is the default channel.'),
-    pointer: ChannelPointerSchema,
-});
-export const spaceChannelListResponseSchema = z.object({
-    data: z.array(spaceChannelSchema),
-    pagination: CursorPaginationSchema,
-});
 export const spaceApplyChangeBaseSchema = z.object({
     kind: z.enum(["variable", "routing", "password", "settings"]),
     name: z.string(),
@@ -690,7 +757,6 @@ export const spaceApplyChangeSchema = spaceApplyChangeBaseSchema.extend({
     id: z.string(),
     sourceSurface: z.string(),
     applyMode: spaceApplyModeSchema,
-    changesetId: z.string().optional(),
     before: z.record(z.string(), z.unknown()).nullable().optional(),
     after: z.record(z.string(), z.unknown()).nullable().optional(),
     metadata: z.record(z.string(), z.unknown()).optional(),

package/dist/contracts/superadmin-emails.d.ts

@@ -1,5 +1,5 @@
 import { z } from "zod";
-export declare const superadminEmailStatusValues: readonly ["all", "scheduled", "sent", "delivered", "bounced", "dropped", "complained", "opened", "clicked", "failed"];
+export declare const superadminEmailStatusValues: readonly ["all", "scheduled", "sent", "suppressed", "delivered", "bounced", "dropped", "complained", "opened", "clicked", "failed"];
 export declare const superadminEmailCategoryValues: readonly ["transactional", "announcements", "offers", "system", "invites"];
 export declare const superadminEmailListQuerySchema: z.ZodObject<{
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
@@ -11,6 +11,7 @@ export declare const superadminEmailListQuerySchema: z.ZodObject<{
         dropped: "dropped";
         scheduled: "scheduled";
         sent: "sent";
+        suppressed: "suppressed";
         bounced: "bounced";
         complained: "complained";
         opened: "opened";
@@ -49,6 +50,12 @@ export declare const superadminEmailSendSchema: z.ZodObject<{
         offers: "offers";
         invites: "invites";
     }>>;
+    preferenceTopic: z.ZodEnum<{
+        system: "system";
+        announcements: "announcements";
+        offers: "offers";
+        invites: "invites";
+    }>;
     type: z.ZodDefault<z.ZodString>;
     props: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     sendAt: z.ZodOptional<z.ZodString>;
@@ -92,6 +99,13 @@ export declare const SuperadminEmailSchema: z.ZodObject<{
     type: z.ZodString;
     template: z.ZodString;
     category: z.ZodString;
+    preferenceTopic: z.ZodNullable<z.ZodEnum<{
+        system: "system";
+        announcements: "announcements";
+        offers: "offers";
+        invites: "invites";
+    }>>;
+    essentialAuth: z.ZodBoolean;
     props: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     options: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     metadata: z.ZodNullable<z.ZodObject<{
@@ -125,6 +139,7 @@ export declare const SuperadminEmailSchema: z.ZodObject<{
     fakeOpenedAt: z.ZodNullable<z.ZodString>;
     combinedOpenedAt: z.ZodNullable<z.ZodString>;
     unsubscribedAt: z.ZodNullable<z.ZodString>;
+    suppressedAt: z.ZodNullable<z.ZodString>;
     failedAt: z.ZodNullable<z.ZodString>;
     createdAt: z.ZodString;
     updatedAt: z.ZodString;
@@ -148,6 +163,13 @@ export declare const SuperadminEmailListSchema: z.ZodObject<{
         type: z.ZodString;
         template: z.ZodString;
         category: z.ZodString;
+        preferenceTopic: z.ZodNullable<z.ZodEnum<{
+            system: "system";
+            announcements: "announcements";
+            offers: "offers";
+            invites: "invites";
+        }>>;
+        essentialAuth: z.ZodBoolean;
         props: z.ZodRecord<z.ZodString, z.ZodUnknown>;
         options: z.ZodRecord<z.ZodString, z.ZodUnknown>;
         metadata: z.ZodNullable<z.ZodObject<{
@@ -181,6 +203,7 @@ export declare const SuperadminEmailListSchema: z.ZodObject<{
         fakeOpenedAt: z.ZodNullable<z.ZodString>;
         combinedOpenedAt: z.ZodNullable<z.ZodString>;
         unsubscribedAt: z.ZodNullable<z.ZodString>;
+        suppressedAt: z.ZodNullable<z.ZodString>;
         failedAt: z.ZodNullable<z.ZodString>;
         createdAt: z.ZodString;
         updatedAt: z.ZodString;
@@ -203,6 +226,7 @@ export declare const SuperadminEmailSendResultSchema: z.ZodObject<{
             error: "error";
             scheduled: "scheduled";
             sent: "sent";
+            suppressed: "suppressed";
         }>;
         error: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;

package/dist/contracts/superadmin-emails.js

@@ -1,10 +1,12 @@
 import { z } from "zod";
 import { makeOffsetListSchema } from "./common.js";
+import { emailCategoryValues, emailPreferenceTopicValues } from "./email-preferences.js";
 import { superadminPaginationSchema } from "./superadmin.js";
 export const superadminEmailStatusValues = [
     "all",
     "scheduled",
     "sent",
+    "suppressed",
     "delivered",
     "bounced",
     "dropped",
@@ -13,20 +15,9 @@ export const superadminEmailStatusValues = [
     "clicked",
     "failed",
 ];
-// "invites" is the invite/request sending stream (access-plan X-25): mail
-// carrying sender-authored content to arbitrary non-user addresses is
-// attacker-adjacent, so it is categorized apart from transactional mail —
-// burned reputation on the invite stream must never take down password
-// resets. Stream-level isolation at the provider (a separate SES
-// configuration set / sending identity) is an infra follow-up; the category
-// is the seam it keys off.
-export const superadminEmailCategoryValues = [
-    "transactional",
-    "announcements",
-    "offers",
-    "system",
-    "invites",
-];
+// Delivery category is provider-facing telemetry/routing. Recipient control is
+// modeled independently by preferenceTopic; essential auth has no topic.
+export const superadminEmailCategoryValues = emailCategoryValues;
 export const superadminEmailListQuerySchema = z.object({
     limit: z.coerce.number().int().min(1).max(100).default(25),
     offset: z.coerce.number().int().min(0).default(0),
@@ -44,6 +35,7 @@ export const superadminEmailSendSchema = z.object({
     html: z.string().optional(),
     template: z.string().trim().min(1).default("generic-message"),
     category: z.enum(superadminEmailCategoryValues).default("transactional"),
+    preferenceTopic: z.enum(emailPreferenceTopicValues),
     type: z.string().trim().min(1).default("generic-message"),
     props: z.record(z.string(), z.unknown()).default({}),
     sendAt: z.string().datetime().optional(),
@@ -90,6 +82,8 @@ export const SuperadminEmailSchema = z.object({
     type: z.string(),
     template: z.string(),
     category: z.string(),
+    preferenceTopic: z.enum(emailPreferenceTopicValues).nullable(),
+    essentialAuth: z.boolean(),
     props: z.record(z.string(), z.unknown()),
     options: z.record(z.string(), z.unknown()),
     metadata: SuperadminEmailMetadataSchema.nullable(),
@@ -104,6 +98,7 @@ export const SuperadminEmailSchema = z.object({
     fakeOpenedAt: z.string().datetime().nullable(),
     combinedOpenedAt: z.string().datetime().nullable(),
     unsubscribedAt: z.string().datetime().nullable(),
+    suppressedAt: z.string().datetime().nullable(),
     failedAt: z.string().datetime().nullable(),
     createdAt: z.string().datetime(),
     updatedAt: z.string().datetime(),
@@ -114,7 +109,7 @@ export const SuperadminEmailSendResultSchema = z.object({
         id: z.string(),
         userId: z.string().nullable().optional(),
         email: z.string().optional(),
-        status: z.enum(["sent", "scheduled", "error"]),
+        status: z.enum(["sent", "scheduled", "suppressed", "error"]),
         error: z.string().optional(),
     })),
 });

package/dist/contracts/superadmin-runtime.d.ts

@@ -8,8 +8,8 @@ export declare const superadminEdgePurgeSchema: z.ZodObject<{
     uris: z.ZodNullable<z.ZodArray<z.ZodString>>;
     status: z.ZodEnum<{
         pending: "pending";
-        purged: "purged";
         superseded: "superseded";
+        purged: "purged";
     }>;
     executedAt: z.ZodNullable<z.ZodString>;
     createdAt: z.ZodString;
@@ -17,8 +17,8 @@ export declare const superadminEdgePurgeSchema: z.ZodObject<{
 export declare const superadminEdgePurgeListQuerySchema: z.ZodObject<{
     status: z.ZodOptional<z.ZodEnum<{
         pending: "pending";
-        purged: "purged";
         superseded: "superseded";
+        purged: "purged";
     }>>;
     providerSiteId: z.ZodOptional<z.ZodString>;
     hostname: z.ZodOptional<z.ZodString>;

package/dist/contracts/superadmin-spaces.d.ts

@@ -187,11 +187,7 @@ export declare const SuperadminSpaceDetailSchema: z.ZodObject<{
         }>;
         moving: z.ZodBoolean;
         channels: z.ZodRecord<z.ZodString, z.ZodObject<{
-            versionId: z.ZodOptional<z.ZodString>;
-            weighted: z.ZodOptional<z.ZodArray<z.ZodObject<{
-                versionId: z.ZodString;
-                percentage: z.ZodNumber;
-            }, z.core.$strip>>>;
+            versionId: z.ZodString;
             updatedAt: z.ZodString;
         }, z.core.$strip>>;
         config: z.ZodNullable<z.ZodObject<{
@@ -258,7 +254,6 @@ export declare const SuperadminSpaceDetailSchema: z.ZodObject<{
                 timeoutSeconds: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strict>>;
             placement: z.ZodOptional<z.ZodObject<{
-                region: z.ZodOptional<z.ZodString>;
                 mode: z.ZodOptional<z.ZodEnum<{
                     shared: "shared";
                     dedicated: "dedicated";
@@ -288,6 +283,7 @@ export declare const SuperadminSpaceDetailSchema: z.ZodObject<{
                     ipCidrs: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     agent: z.ZodOptional<z.ZodString>;
                     country: z.ZodOptional<z.ZodString>;
+                    countryNotIn: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     header: z.ZodOptional<z.ZodObject<{
                         name: z.ZodString;
                         value: z.ZodString;
@@ -362,8 +358,8 @@ export declare const SuperadminSpaceDetailSchema: z.ZodObject<{
                 code: z.ZodString;
                 severity: z.ZodEnum<{
                     info: "info";
-                    warning: "warning";
                     error: "error";
+                    warning: "warning";
                 }>;
                 message: z.ZodString;
                 path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -572,11 +568,7 @@ export declare const SuperadminAnonymousSpaceAssignResponseSchema: z.ZodObject<{
         }>;
         moving: z.ZodBoolean;
         channels: z.ZodRecord<z.ZodString, z.ZodObject<{
-            versionId: z.ZodOptional<z.ZodString>;
-            weighted: z.ZodOptional<z.ZodArray<z.ZodObject<{
-                versionId: z.ZodString;
-                percentage: z.ZodNumber;
-            }, z.core.$strip>>>;
+            versionId: z.ZodString;
             updatedAt: z.ZodString;
         }, z.core.$strip>>;
         config: z.ZodNullable<z.ZodObject<{
@@ -643,7 +635,6 @@ export declare const SuperadminAnonymousSpaceAssignResponseSchema: z.ZodObject<{
                 timeoutSeconds: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strict>>;
             placement: z.ZodOptional<z.ZodObject<{
-                region: z.ZodOptional<z.ZodString>;
                 mode: z.ZodOptional<z.ZodEnum<{
                     shared: "shared";
                     dedicated: "dedicated";
@@ -673,6 +664,7 @@ export declare const SuperadminAnonymousSpaceAssignResponseSchema: z.ZodObject<{
                     ipCidrs: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     agent: z.ZodOptional<z.ZodString>;
                     country: z.ZodOptional<z.ZodString>;
+                    countryNotIn: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     header: z.ZodOptional<z.ZodObject<{
                         name: z.ZodString;
                         value: z.ZodString;
@@ -747,8 +739,8 @@ export declare const SuperadminAnonymousSpaceAssignResponseSchema: z.ZodObject<{
                 code: z.ZodString;
                 severity: z.ZodEnum<{
                     info: "info";
-                    warning: "warning";
                     error: "error";
+                    warning: "warning";
                 }>;
                 message: z.ZodString;
                 path: z.ZodOptional<z.ZodNullable<z.ZodString>>;

package/dist/contracts/tags.d.ts

@@ -81,8 +81,8 @@ export declare const tagConsentPolicySchema: z.ZodObject<{
         code: z.ZodString;
         severity: z.ZodEnum<{
             info: "info";
-            warning: "warning";
             error: "error";
+            warning: "warning";
         }>;
         message: z.ZodString;
         path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -100,6 +100,16 @@ export declare const tagConsentPolicySchema: z.ZodObject<{
 export type TagConsentPolicy = z.infer<typeof tagConsentPolicySchema>;
 export declare function isKnownTagConsentCategory(value: string): value is TagConsentCategory;
 export declare function mergeTagConsentPolicyInputs(...policies: unknown[]): Record<string, unknown> | undefined;
+export declare const TAG_GRAPH_MAX_ENCODED_BYTES: number;
+export declare const TAG_GRAPH_MAX_REQUEST_BODY_BYTES: number;
+export declare const TAG_GRAPH_MAX_TAGS = 256;
+export declare const TAG_GRAPH_MAX_TRIGGERS = 256;
+export declare const TAG_GRAPH_MAX_VARIABLES = 256;
+export declare const TAG_GRAPH_MAX_SYSTEM_MODULES = 64;
+export declare const TAG_GRAPH_MAX_ARRAY_ITEMS = 256;
+export declare const TAG_GRAPH_MAX_OBJECT_KEYS = 64;
+export declare const TAG_GRAPH_MAX_STRING_BYTES: number;
+export declare const TAG_GRAPH_MAX_DEPTH = 16;
 export declare const tagGraphSchema: z.ZodObject<{
     format: z.ZodDefault<z.ZodLiteral<"spacefast.tag_graph.v1">>;
     tags: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
@@ -108,6 +118,22 @@ export declare const tagGraphSchema: z.ZodObject<{
     systemModules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     consentPolicy: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, z.core.$loose>;
+export declare const tagGraphCloneSchema: z.ZodObject<{
+    format: z.ZodDefault<z.ZodLiteral<"spacefast.tag_graph.v1">>;
+    tags: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    triggers: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    variables: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    systemModules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    consentPolicy: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$loose>;
+export declare const tagGraphWriteSchema: z.ZodObject<{
+    format: z.ZodDefault<z.ZodLiteral<"spacefast.tag_graph.v1">>;
+    tags: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    triggers: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    variables: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    systemModules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    consentPolicy: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strict>;
 export type TagGraph = z.infer<typeof tagGraphSchema>;
 export declare const emptyTagGraph: TagGraph;
 export declare const tagValidationResultSchema: z.ZodObject<{
@@ -116,8 +142,8 @@ export declare const tagValidationResultSchema: z.ZodObject<{
         code: z.ZodString;
         severity: z.ZodEnum<{
             info: "info";
-            warning: "warning";
             error: "error";
+            warning: "warning";
         }>;
         message: z.ZodString;
         path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -165,8 +191,8 @@ export declare const tagVersionSchema: z.ZodObject<{
             code: z.ZodString;
             severity: z.ZodEnum<{
                 info: "info";
-                warning: "warning";
                 error: "error";
+                warning: "warning";
             }>;
             message: z.ZodString;
             path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -235,8 +261,8 @@ export declare const tagVersionListResponseSchema: z.ZodObject<{
                 code: z.ZodString;
                 severity: z.ZodEnum<{
                     info: "info";
-                    warning: "warning";
                     error: "error";
+                    warning: "warning";
                 }>;
                 message: z.ZodString;
                 path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -298,8 +324,8 @@ export declare const tagVersionResponseSchema: z.ZodObject<{
                 code: z.ZodString;
                 severity: z.ZodEnum<{
                     info: "info";
-                    warning: "warning";
                     error: "error";
+                    warning: "warning";
                 }>;
                 message: z.ZodString;
                 path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -337,7 +363,7 @@ export declare const tagVersionCreateSchema: z.ZodObject<{
         variables: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         systemModules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         consentPolicy: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    }, z.core.$loose>>;
+    }, z.core.$strict>>;
 }, z.core.$strip>;
 export declare const tagVersionPatchSchema: z.ZodObject<{
     title: z.ZodOptional<z.ZodString>;
@@ -365,7 +391,7 @@ export declare const tagGraphPutSchema: z.ZodObject<{
         variables: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         systemModules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         consentPolicy: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    }, z.core.$loose>;
+    }, z.core.$strict>;
 }, z.core.$strip>;
 export declare const tagGraphPatchSchema: z.ZodObject<{
     baseGraphRevision: z.ZodNumber;
@@ -383,7 +409,7 @@ export declare const tagGraphPatchSchema: z.ZodObject<{
             variables: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
             systemModules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             consentPolicy: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-        }, z.core.$loose>;
+        }, z.core.$strict>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export declare const tagValidateResponseSchema: z.ZodObject<{
@@ -393,8 +419,8 @@ export declare const tagValidateResponseSchema: z.ZodObject<{
             code: z.ZodString;
             severity: z.ZodEnum<{
                 info: "info";
-                warning: "warning";
                 error: "error";
+                warning: "warning";
             }>;
             message: z.ZodString;
             path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -614,8 +640,8 @@ export declare const tagApplyResponseSchema: z.ZodObject<{
                     code: z.ZodString;
                     severity: z.ZodEnum<{
                         info: "info";
-                        warning: "warning";
                         error: "error";
+                        warning: "warning";
                     }>;
                     message: z.ZodString;
                     path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -647,8 +673,8 @@ export declare const tagApplyResponseSchema: z.ZodObject<{
                 code: z.ZodString;
                 severity: z.ZodEnum<{
                     info: "info";
-                    warning: "warning";
                     error: "error";
+                    warning: "warning";
                 }>;
                 message: z.ZodString;
                 path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -755,6 +781,10 @@ export declare const tagTriggerPresetSchema: z.ZodEnum<{
     file_download: "file_download";
     scroll_depth: "scroll_depth";
 }>;
+export declare const TAG_TEMPLATE_MAX_SELECTIONS = 256;
+export declare const TAG_TEMPLATE_MAX_TRIGGERS: 5;
+export declare const TAG_TEMPLATE_MAX_CONSENT_CATEGORIES: number;
+export declare const TAG_TEMPLATE_MAX_ENVIRONMENTS: number;
 export type TagTriggerPreset = z.infer<typeof tagTriggerPresetSchema>;
 export declare const TAG_TRIGGER_PRESETS: Array<{
     id: TagTriggerPreset;
@@ -992,8 +1022,8 @@ export declare const tagConsentPolicyResponseSchema: z.ZodObject<{
                 code: z.ZodString;
                 severity: z.ZodEnum<{
                     info: "info";
-                    warning: "warning";
                     error: "error";
+                    warning: "warning";
                 }>;
                 message: z.ZodString;
                 path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -1070,7 +1100,7 @@ export declare const tagTemplateGraphSchema: z.ZodObject<{
         variables: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         systemModules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         consentPolicy: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    }, z.core.$loose>>;
+    }, z.core.$strict>>;
 }, z.core.$strip>;
 export declare const TAG_TEMPLATE_DEFINITIONS: TagTemplateDefinition[];
 export declare function listTagTemplates(): {