@spacefast/common 0.0.10 → 0.0.12

package/dist/contracts/feature-lifecycle.js

@@ -1,6 +1,689 @@
-import { launchEntries as compiledLaunchEntries } from "./generated-feature-launch-entries.js";
+import { freezeFeatureRegistryEntry } from "./feature-lifecycle-core.js";
 export { FEATURE_ASSIGNMENT_SCOPES, FEATURE_EXECUTION_ACTOR_POLICIES, FEATURE_OWNER_IDS, FEATURE_STAGES, freezeFeatureRegistryEntry, validateFeatureLifecycleRegistry, } from "./feature-lifecycle-core.js";
-export const FEATURE_LIFECYCLE_REGISTRY = compiledLaunchEntries;
+const featureEntries = Object.freeze([
+    {
+        cohort: "launch",
+        key: "plans.paid.available",
+        name: "Paid plans available",
+        description: "Controls whether paid plan upgrade and management surfaces are available.",
+        stage: "internal",
+        surface: false,
+        defaultEnabled: false,
+        runtime: {
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        assignmentScopes: ["team", "global"],
+        docs: null,
+        owner: "team:commerce",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: null,
+        gaAt: null,
+        allowedActorPolicies: ["request_actor"],
+        downRamp: {
+            code: "paid_acquisition_stop",
+            summary: "Deny new acquisition; allow cancel, portal, provider reconciliation and purchase recovery.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "anonymous.publishing",
+        name: "Anonymous publishing",
+        description: "Allows unauthenticated space creation and publishing.",
+        stage: "ga",
+        surface: true,
+        defaultEnabled: true,
+        runtime: {
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        assignmentScopes: ["global"],
+        docs: {
+            channel: "public",
+            slug: "/docs/publishing/anonymous",
+            feedbackUrl: null,
+        },
+        owner: "team:publishing",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-07-26",
+        removeAfter: "2026-08-11",
+        gaAt: "2026-07-12",
+        allowedActorPolicies: ["request_actor", "global_policy"],
+        downRamp: {
+            code: "anonymous_publish_stop",
+            summary: "Deny new anonymous content/version/upload authorization or commit/finalize/promote/push side effects; already-issued bounded staging ingress stays quarantined, while static serving and service cleanup remain.",
+        },
+    },
+    {
+        key: "beta.enrollment_gate",
+        name: "Beta enrollment gate",
+        description: "Gates the whole API behind private-beta enrollment; non-enrolled credentials get 403 not_enrolled.",
+        defaultEnabled: false,
+        runtime: {
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+    },
+    {
+        key: "domains.search",
+        name: "Domain search",
+        description: "Allows domain availability search and suggestion surfaces.",
+        defaultEnabled: false,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+    },
+    {
+        cohort: "launch",
+        key: "domains.catalog",
+        name: "Domain catalog",
+        description: "Controls authenticated domain product/catalog operations; public suggestions, availability and WHOIS remain unflagged.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        runtime: null,
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/domains/catalog",
+            feedbackUrl: null,
+        },
+        owner: "team:domains",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor"],
+        downRamp: {
+            code: "domain_catalog_hide",
+            summary: "Hide authenticated catalog; public suggestions, availability and WHOIS remain.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "domains.registration",
+        name: "Domain registration",
+        description: "Allows domain registration, purchase, and transfer-in surfaces.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/domains/registration",
+            feedbackUrl: null,
+        },
+        owner: "team:domains",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "persisted_request_actor"],
+        downRamp: {
+            code: "domain_registration_stop",
+            summary: "Deny new customer mutations and unstarted provider submits; generic existing-domain read plus service-only reconciliation/compensation for externally committed work continue.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "domains.dns_management",
+        name: "DNS management",
+        description: "Allows customer DNS zone, nameserver, and record-management surfaces.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/domains/dns-management",
+            feedbackUrl: null,
+        },
+        owner: "team:domains",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "persisted_request_actor"],
+        downRamp: {
+            code: "dns_management_stop",
+            summary: "Deny customer mutation and unstarted provider apply; generic authoritative read plus service-only rollback/reconciliation for externally committed work continue.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "domains.wpcom_dns",
+        name: "WordPress.com DNS automation",
+        description: "Manage a domain's DNS through the owner's WordPress.com account.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        runtime: {
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        assignmentScopes: ["team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/domains/wpcom-dns",
+            feedbackUrl: null,
+        },
+        owner: "team:domains",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor"],
+        downRamp: {
+            code: "wpcom_dns_stop",
+            summary: "Deny new automation; service/operator detach and reconciliation continue.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "domains.domain_connect",
+        name: "Domain Connect",
+        description: "One-click DNS setup at providers that implement Domain Connect.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        runtime: {
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/domains/domain-connect",
+            feedbackUrl: null,
+        },
+        owner: "team:domains",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "persisted_request_actor"],
+        downRamp: {
+            code: "domain_connect_stop",
+            summary: "Deny new setup and every uncommitted callback; after an authenticated external commit, narrowly typed service-only reconciliation or compensation continues idempotently.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "domains.proxy_bindings",
+        name: "Domain proxy bindings",
+        description: "Allow a team to proxy custom-domain traffic to an external HTTP upstream.",
+        stage: "private_beta",
+        surface: true,
+        defaultEnabled: false,
+        runtime: {
+            enabledForA8c: true,
+            planDefaults: {
+                internal: true,
+            },
+        },
+        assignmentScopes: ["team", "global"],
+        docs: {
+            channel: "public",
+            slug: "/docs/domains/proxy-bindings",
+            feedbackUrl: null,
+        },
+        owner: "team:domains",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["resource_team"],
+        downRamp: {
+            code: "proxy_binding_stop",
+            summary: "Deny new binds; discoverable authenticated read/detach plus service reconciliation continue.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "collab.comments",
+        name: "Comments",
+        description: "Enables Cast-backed comments on eligible immutable version URLs.",
+        stage: "ga",
+        surface: true,
+        defaultEnabled: true,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "public",
+            slug: "/docs/collab",
+            feedbackUrl: null,
+        },
+        owner: "team:collaboration",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: "2026-07-23",
+        allowedActorPolicies: ["request_actor", "persisted_request_actor", "resource_team"],
+        downRamp: {
+            code: "comments_stop",
+            summary: "Deny every customer comment read/write route and deferred task; internal operator export/cleanup continue.",
+        },
+    },
+    {
+        key: "collab.anonymous_commenters",
+        name: "Anonymous commenters",
+        description: "Allows anyone with the link to comment when space policy allows it.",
+        defaultEnabled: true,
+        runtime: {
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+    },
+    {
+        cohort: "launch",
+        key: "collab.notices",
+        name: "Realtime notices",
+        description: "Reserved kill-switch for future realtime preview notices.",
+        stage: "internal",
+        surface: false,
+        defaultEnabled: false,
+        runtime: {
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        assignmentScopes: ["team", "global"],
+        docs: null,
+        owner: "team:collaboration",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: null,
+        gaAt: null,
+        allowedActorPolicies: ["resource_team"],
+        downRamp: {
+            code: "notices_stop",
+            summary: "Stop mint/publish; service/operator revoke and cleanup continue.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "collab.published_comments",
+        name: "Published host comments",
+        description: "Allows the Collab overlay to mount comments on a space's live/published host, not just immutable preview URLs.",
+        stage: "ga",
+        surface: true,
+        defaultEnabled: true,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        assignmentScopes: ["team", "global"],
+        docs: {
+            channel: "public",
+            slug: "/docs/collab/published-comments",
+            feedbackUrl: null,
+        },
+        owner: "team:collaboration",
+        requires: ["collab.comments"],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: "2026-07-23",
+        allowedActorPolicies: ["resource_team"],
+        downRamp: {
+            code: "published_comments_stop",
+            summary: "Stop published-host injection; stored data remains only for operator export/cleanup.",
+        },
+    },
+    {
+        key: "collab.drawing",
+        name: "Collab drawing",
+        description: "Enables drawing feedback in the Collab overlay.",
+        defaultEnabled: true,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+    },
+    {
+        cohort: "launch",
+        key: "sites.dedicated_runtime",
+        name: "Dedicated runtime sites",
+        description: "Allows teams to create dedicated WP.Cloud sites and place team spaces on them.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        assignmentScopes: ["team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/sites/dedicated-runtime",
+            feedbackUrl: null,
+        },
+        owner: "team:runtime",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "resource_team"],
+        downRamp: {
+            code: "dedicated_runtime_stop",
+            summary: "Deny customer mutation and new placement/materialization immediately; serve-time revocation of already-materialized output lands with the deferred runtime-proof slice; operator recovery/export/delete remain; downloaded bytes cannot be recalled.",
+        },
+    },
+    {
+        key: "shelf",
+        name: "Shelf",
+        description: "Exposes the per-user artifact shelf: dashboard curation and public /shelf/{handle} pages.",
+        defaultEnabled: false,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+    },
+    {
+        cohort: "launch",
+        key: "build.content_pipeline",
+        name: "Content pipeline",
+        description: "Controls publish/finalize use of the content transformation pipeline.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        runtime: null,
+        assignmentScopes: ["team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/build/content-pipeline",
+            feedbackUrl: null,
+        },
+        owner: "team:build-platform",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["resource_team"],
+        downRamp: {
+            code: "content_pipeline_stop",
+            summary: "Deny next build/finalize; completed immutable output remains.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "tags",
+        name: "Spacefast Tag Manager",
+        description: "Enables Spacefast Tag Manager command surfaces, SDK configuration, and governed tag workflows.",
+        stage: "private_beta",
+        surface: true,
+        defaultEnabled: false,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        assignmentScopes: ["team", "global"],
+        docs: {
+            channel: "public",
+            slug: "/docs/tags",
+            feedbackUrl: null,
+        },
+        owner: "team:tag-manager",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "resource_team"],
+        downRamp: {
+            code: "tags_stop",
+            summary: "Deny every customer Tag API and dynamic module delivery; internal operator export/cleanup and platform-generated inert marker bytes remain.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "zero",
+        name: "Spacefast Zero",
+        description: "Enables Spacefast Zero command surfaces and hosted Zero app workflows.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        runtime: {
+            enabledForA8c: true,
+            // Zero capsules can only run on a dedicated site, so the plans that grant
+            // `dedicatedRuntime` ARE the ones allowed to use it. Leaving these false
+            // made the entitlement and the flag two independent switches for one
+            // decision, and a team that paid for dedicated runtime still got
+            // `zero_requires_dedicated_plan` at finalize.
+            planDefaults: { enterprise: true, internal: true },
+        },
+        assignmentScopes: ["team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/zero",
+            feedbackUrl: null,
+        },
+        owner: "team:zero",
+        requires: ["sites.dedicated_runtime"],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["resource_team"],
+        downRamp: {
+            code: "zero_stop",
+            summary: "Stop activation/invocation; operator export/delete/migration recovery remain.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "access.invites",
+        name: "Space invites",
+        description: "Enables account-less viewer invites with magic-link accept and the request-access loop (access-plan §5.3/§5.4).",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/access/invites",
+            feedbackUrl: null,
+        },
+        owner: "team:access",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "persisted_request_actor"],
+        downRamp: {
+            code: "invites_stop",
+            summary: "Deny every customer invite route and deferred delivery; internal operator cancel/revoke and service cleanup continue.",
+        },
+    },
+    {
+        key: "access.firewall_card",
+        name: "Firewall card",
+        description: "Enables the managed firewall block card (country/IP/bot rules) in space access settings (access-plan §5.6).",
+        defaultEnabled: true,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+    },
+    {
+        cohort: "launch",
+        key: "access.sso_connections",
+        name: "Company SSO connections",
+        description: "Enables team-level OIDC connections minted at the authorize endpoint (access-plan §6.2, X-18).",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/access/sso-connections",
+            feedbackUrl: null,
+        },
+        owner: "team:access",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "persisted_request_actor"],
+        downRamp: {
+            code: "sso_connections_stop",
+            summary: "Deny every customer SSO connection route and callback; internal operator revoke/cleanup continue.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "access.byo_issuers",
+        name: "Bring-your-own issuers",
+        description: "Enables owner-held external token issuers with ext:-namespace binding (access-plan §6.3, X-19).",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/access/byo-issuers",
+            feedbackUrl: null,
+        },
+        owner: "team:access",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "persisted_request_actor"],
+        downRamp: {
+            code: "byo_issuers_stop",
+            summary: "Deny every customer issuer route and callback; internal operator revoke/cleanup continue.",
+        },
+    },
+    {
+        key: "access.views_panel",
+        name: "Views panel",
+        description: "Enables the identified who-viewed-what panel riding the analytics tiers (access-plan §5.6b, X-28).",
+        defaultEnabled: true,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+    },
+    {
+        cohort: "launch",
+        key: "spaces.slug_rename",
+        name: "Space slug rename",
+        description: "Changes mutable space identity metadata while the stable managed hostname and hostname rows remain unchanged.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        runtime: null,
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/spaces/slug-rename",
+            feedbackUrl: null,
+        },
+        owner: "team:spaces",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor"],
+        downRamp: {
+            code: "slug_rename_stop",
+            summary: "Deny every new stable-host slug rename; the atomic metadata write has no deferred feature continuation.",
+        },
+    },
+]);
+function isLifecycleFeatureEntry(entry) {
+    return "cohort" in entry;
+}
+function isRuntimeFeatureEntry(entry) {
+    return entry.runtime !== null;
+}
+const featureLifecycleEntries = Object.freeze(featureEntries.filter(isLifecycleFeatureEntry).map((entry) => {
+    const { runtime, ...definition } = entry;
+    void runtime;
+    return freezeFeatureRegistryEntry(definition);
+}));
+export const FEATURE_LIFECYCLE_REGISTRY = featureLifecycleEntries;
+const runtimeFeatureEntries = featureEntries.filter(isRuntimeFeatureEntry);
+function assertRuntimeDefinitionsComplete(definitions, keys) {
+    for (const key of keys) {
+        if (!(key in definitions))
+            throw new Error(`Missing runtime feature definition for ${key}`);
+    }
+}
+function buildRuntimeDefinitions(entries) {
+    const definitions = {};
+    for (const { key, name, description, defaultEnabled, runtime } of entries) {
+        if (key in definitions)
+            throw new Error(`Duplicate runtime feature definition for ${key}`);
+        definitions[key] = Object.freeze({
+            key,
+            name,
+            description,
+            defaultEnabled,
+            ...runtime,
+            planDefaults: Object.freeze({ ...runtime.planDefaults }),
+        });
+    }
+    assertRuntimeDefinitionsComplete(definitions, entries.map(({ key }) => key));
+    return Object.freeze(definitions);
+}
+export const FEATURE_RUNTIME_KEYS = Object.freeze(runtimeFeatureEntries.map(({ key }) => key));
+export const FEATURE_RUNTIME_DEFINITIONS = buildRuntimeDefinitions(runtimeFeatureEntries);
 const featureLifecycleByKey = new Map(FEATURE_LIFECYCLE_REGISTRY.map((definition) => [definition.key, definition]));
 export const FEATURE_LIFECYCLE_BY_KEY = Object.freeze({
     get size() {