@spacefast/common 0.0.11 → 0.0.12

package/dist/contracts/internal.d.ts

@@ -24,8 +24,8 @@ export declare const uploadSessionModeSchema: z.ZodEnum<{
 export declare const uploadTargetSchema: z.ZodObject<{
     path: z.ZodString;
     method: z.ZodEnum<{
-        PUT: "PUT";
         POST: "POST";
+        PUT: "PUT";
     }>;
     url: z.ZodUnion<[z.ZodString, z.ZodString]>;
     headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -53,8 +53,8 @@ export declare const uploadInstructionsSchema: z.ZodObject<{
     targets: z.ZodDefault<z.ZodArray<z.ZodObject<{
         path: z.ZodString;
         method: z.ZodEnum<{
-            PUT: "PUT";
             POST: "POST";
+            PUT: "PUT";
         }>;
         url: z.ZodUnion<[z.ZodString, z.ZodString]>;
         headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -84,8 +84,8 @@ export declare const uploadInstructionsSchema: z.ZodObject<{
             code: z.ZodString;
             severity: z.ZodEnum<{
                 info: "info";
-                warning: "warning";
                 error: "error";
+                warning: "warning";
             }>;
             message: z.ZodString;
             path: z.ZodOptional<z.ZodNullable<z.ZodString>>;

package/dist/contracts/mcp.d.ts

@@ -101,8 +101,8 @@ export declare const hostedMcpExecutionArtifactSchema: z.ZodObject<{
     runId: z.ZodString;
     kind: z.ZodEnum<{
         file: "file";
-        warning: "warning";
         resource: "resource";
+        warning: "warning";
         summary: "summary";
         result: "result";
         log: "log";
@@ -151,8 +151,8 @@ export declare const hostedMcpExecutionRunSchema: z.ZodObject<{
         runId: z.ZodString;
         kind: z.ZodEnum<{
             file: "file";
-            warning: "warning";
             resource: "resource";
+            warning: "warning";
             summary: "summary";
             result: "result";
             log: "log";
@@ -377,8 +377,8 @@ export declare const hostedMcpDashboardSchema: z.ZodObject<{
             runId: z.ZodString;
             kind: z.ZodEnum<{
                 file: "file";
-                warning: "warning";
                 resource: "resource";
+                warning: "warning";
                 summary: "summary";
                 result: "result";
                 log: "log";
@@ -542,8 +542,8 @@ export declare const hostedMcpDashboardResponseSchema: z.ZodObject<{
                 runId: z.ZodString;
                 kind: z.ZodEnum<{
                     file: "file";
-                    warning: "warning";
                     resource: "resource";
+                    warning: "warning";
                     summary: "summary";
                     result: "result";
                     log: "log";
@@ -707,8 +707,8 @@ export declare const hostedMcpExecutionRunsResponseSchema: z.ZodObject<{
                 runId: z.ZodString;
                 kind: z.ZodEnum<{
                     file: "file";
-                    warning: "warning";
                     resource: "resource";
+                    warning: "warning";
                     summary: "summary";
                     result: "result";
                     log: "log";
@@ -761,8 +761,8 @@ export declare const hostedMcpExecutionRunResponseSchema: z.ZodObject<{
             runId: z.ZodString;
             kind: z.ZodEnum<{
                 file: "file";
-                warning: "warning";
                 resource: "resource";
+                warning: "warning";
                 summary: "summary";
                 result: "result";
                 log: "log";

package/dist/contracts/me.js

@@ -30,7 +30,7 @@ export const meResponseSchema = z.object({
         isSuperadmin: z.boolean().describe("Whether the user is a platform operator."),
     })
         .nullable()
-        .describe("User identity when known: the session user, or the machine credential's creator. Null for automation-created credentials."),
+        .describe("Authenticated user identity for user-subject credentials. Null for team- or service-subject machine credentials; creator metadata is retained only for audit attribution, not request identity."),
     tenants: z
         .array(z.object({
         id: z.string().describe("Tenant id."),

package/dist/contracts/mounts.d.ts

@@ -0,0 +1,142 @@
+import { z } from "zod";
+export declare function normalizeMountPathPrefix(value: string): string;
+export declare const mountPathPrefixSchema: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+export declare const spaceMountCreateSchema: z.ZodObject<{
+    sourceVersionId: z.ZodCustom<`ver_${string}`, `ver_${string}`>;
+    pathPrefix: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    targetSpaceId: z.ZodCustom<`spc_${string}`, `spc_${string}`>;
+    channel: z.ZodDefault<z.ZodLiteral<"live">>;
+}, z.core.$strip>;
+export declare const spaceMountSchema: z.ZodObject<{
+    id: z.ZodCustom<`mnt_${string}`, `mnt_${string}`>;
+    spaceId: z.ZodCustom<`spc_${string}`, `spc_${string}`>;
+    sourceVersionId: z.ZodCustom<`ver_${string}`, `ver_${string}`>;
+    pathPrefix: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    targetSpaceId: z.ZodCustom<`spc_${string}`, `spc_${string}`>;
+    targetSpaceSlug: z.ZodString;
+    channel: z.ZodLiteral<"live">;
+    versionId: z.ZodNullable<z.ZodCustom<`ver_${string}`, `ver_${string}`>>;
+    targetVersionId: z.ZodNullable<z.ZodCustom<`ver_${string}`, `ver_${string}`>>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export declare const spaceMountListResponseSchema: z.ZodObject<{
+    data: z.ZodArray<z.ZodObject<{
+        id: z.ZodCustom<`mnt_${string}`, `mnt_${string}`>;
+        spaceId: z.ZodCustom<`spc_${string}`, `spc_${string}`>;
+        sourceVersionId: z.ZodCustom<`ver_${string}`, `ver_${string}`>;
+        pathPrefix: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        targetSpaceId: z.ZodCustom<`spc_${string}`, `spc_${string}`>;
+        targetSpaceSlug: z.ZodString;
+        channel: z.ZodLiteral<"live">;
+        versionId: z.ZodNullable<z.ZodCustom<`ver_${string}`, `ver_${string}`>>;
+        targetVersionId: z.ZodNullable<z.ZodCustom<`ver_${string}`, `ver_${string}`>>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const spaceMountResponseSchema: z.ZodObject<{
+    data: z.ZodObject<{
+        id: z.ZodCustom<`mnt_${string}`, `mnt_${string}`>;
+        spaceId: z.ZodCustom<`spc_${string}`, `spc_${string}`>;
+        sourceVersionId: z.ZodCustom<`ver_${string}`, `ver_${string}`>;
+        pathPrefix: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        targetSpaceId: z.ZodCustom<`spc_${string}`, `spc_${string}`>;
+        targetSpaceSlug: z.ZodString;
+        channel: z.ZodLiteral<"live">;
+        versionId: z.ZodNullable<z.ZodCustom<`ver_${string}`, `ver_${string}`>>;
+        targetVersionId: z.ZodNullable<z.ZodCustom<`ver_${string}`, `ver_${string}`>>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>;
+    operation: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodString;
+        status: z.ZodEnum<{
+            failed: "failed";
+            canceled: "canceled";
+            queued: "queued";
+            running: "running";
+            succeeded: "succeeded";
+        }>;
+        resources: z.ZodArray<z.ZodObject<{
+            type: z.ZodString;
+            id: z.ZodString;
+        }, z.core.$strip>>;
+        progress: z.ZodOptional<z.ZodObject<{
+            total: z.ZodNumber;
+            completed: z.ZodNumber;
+            failed: z.ZodNumber;
+        }, z.core.$strip>>;
+        diagnostics: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            code: z.ZodString;
+            severity: z.ZodEnum<{
+                info: "info";
+                error: "error";
+                warning: "warning";
+            }>;
+            message: z.ZodString;
+            path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            provider: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+                registrar: "registrar";
+                wpcloud: "wpcloud";
+                dns: "dns";
+                runtime: "runtime";
+            }>>>;
+            details: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            fix: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            retryable: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+        }, z.core.$strip>>>;
+        createdAt: z.ZodString;
+        finishedAt: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const spaceMountDeleteResponseSchema: z.ZodObject<{
+    data: z.ZodObject<{
+        id: z.ZodCustom<`mnt_${string}`, `mnt_${string}`>;
+        deleted: z.ZodLiteral<true>;
+    }, z.core.$strip>;
+    operation: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodString;
+        status: z.ZodEnum<{
+            failed: "failed";
+            canceled: "canceled";
+            queued: "queued";
+            running: "running";
+            succeeded: "succeeded";
+        }>;
+        resources: z.ZodArray<z.ZodObject<{
+            type: z.ZodString;
+            id: z.ZodString;
+        }, z.core.$strip>>;
+        progress: z.ZodOptional<z.ZodObject<{
+            total: z.ZodNumber;
+            completed: z.ZodNumber;
+            failed: z.ZodNumber;
+        }, z.core.$strip>>;
+        diagnostics: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            code: z.ZodString;
+            severity: z.ZodEnum<{
+                info: "info";
+                error: "error";
+                warning: "warning";
+            }>;
+            message: z.ZodString;
+            path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            provider: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+                registrar: "registrar";
+                wpcloud: "wpcloud";
+                dns: "dns";
+                runtime: "runtime";
+            }>>>;
+            details: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            fix: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            retryable: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+        }, z.core.$strip>>>;
+        createdAt: z.ZodString;
+        finishedAt: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type SpaceMountCreate = z.infer<typeof spaceMountCreateSchema>;
+export type SpaceMount = z.infer<typeof spaceMountSchema>;

package/dist/contracts/mounts.js

@@ -0,0 +1,56 @@
+import { z } from "zod";
+import { dataEnvelope, mutationEnvelope } from "./common.js";
+import { registeredIdSchema } from "./ids.js";
+const RESERVED_MOUNT_PREFIXES = ["/__spacefast", "/__stattic", "/.well-known"];
+export function normalizeMountPathPrefix(value) {
+    const trimmed = value.trim();
+    if (trimmed === "" || trimmed === "/")
+        return "/";
+    return `/${trimmed.replace(/^\/+|\/+$/g, "")}`;
+}
+export const mountPathPrefixSchema = z
+    .string()
+    .min(1)
+    .max(1024)
+    .transform(normalizeMountPathPrefix)
+    .refine((value) => value !== "/", "A mount path must be below the site root.")
+    .refine((value) => Array.from(value).every((character) => {
+    const codePoint = character.codePointAt(0) ?? 0;
+    return codePoint > 0x9f || (codePoint > 0x1f && codePoint !== 0x7f);
+}), "Mount path is invalid.")
+    .refine((value) => !value.includes("\\") && !value.includes("//"), "Mount path is invalid.")
+    .refine((value) => !value
+    .split("/")
+    .filter(Boolean)
+    .some((segment) => segment === "." || segment === ".."), "Mount path is invalid.")
+    .refine((value) => !RESERVED_MOUNT_PREFIXES.some((reserved) => value === reserved || value.startsWith(`${reserved}/`)), "Mount path uses a Spacefast-reserved prefix.")
+    .describe("Normalized path prefix on the website, for example `/docs`.");
+export const spaceMountCreateSchema = z.object({
+    sourceVersionId: registeredIdSchema("ver").describe("Immutable website version whose production activation enables this mount."),
+    pathPrefix: mountPathPrefixSchema,
+    targetSpaceId: registeredIdSchema("spc").describe("Explicitly authorized same-team space to mount."),
+    channel: z
+        .literal("live")
+        .default("live")
+        .describe("Target production channel followed by this mount."),
+});
+export const spaceMountSchema = z.object({
+    id: registeredIdSchema("mnt"),
+    spaceId: registeredIdSchema("spc"),
+    sourceVersionId: registeredIdSchema("ver"),
+    pathPrefix: mountPathPrefixSchema,
+    targetSpaceId: registeredIdSchema("spc"),
+    targetSpaceSlug: z.string(),
+    channel: z.literal("live"),
+    versionId: registeredIdSchema("ver")
+        .nullable()
+        .describe("Immutable target version currently serving from the mount."),
+    targetVersionId: registeredIdSchema("ver")
+        .nullable()
+        .describe("Target production-channel version the durable synchronizer is converging toward."),
+    createdAt: z.string().datetime(),
+    updatedAt: z.string().datetime(),
+});
+export const spaceMountListResponseSchema = dataEnvelope(z.array(spaceMountSchema));
+export const spaceMountResponseSchema = mutationEnvelope(spaceMountSchema);
+export const spaceMountDeleteResponseSchema = mutationEnvelope(z.object({ id: registeredIdSchema("mnt"), deleted: z.literal(true) }));

package/dist/contracts/oauth-resources.d.ts

@@ -3,22 +3,22 @@ export declare const OAUTH_AUTHORIZATION_SERVER_PATH: "/v1/auth";
  * mcp origin (`https://mcp.<domain>`), so it has no path entry here. */
 export declare const OAUTH_API_RESOURCE_PATH: "/v1";
 export type OAuthResourceKey = "api" | "mcp";
-export declare const OAUTH_API_RESOURCE_SCOPES: readonly ["teams:read", "spaces:read", "spaces:write", "publish:write", "domains:read", "domains:write"];
+export declare const OAUTH_API_RESOURCE_SCOPES: readonly ["teams:read", "teams:create", "spaces:read", "spaces:write", "publish:write", "domains:read", "domains:write"];
 export declare const OAUTH_MCP_TOOL_SCOPE: "mcp:tools";
-export declare const OAUTH_MCP_RESOURCE_SCOPES: readonly ["mcp:tools", "teams:read", "spaces:read", "spaces:write", "publish:write", "domains:read", "domains:write"];
-export declare const OAUTH_PROVIDER_SCOPES: readonly ["openid", "profile", "email", "offline_access", "teams:read", "spaces:read", "spaces:write", "publish:write", "domains:read", "domains:write", "mcp:tools"];
+export declare const OAUTH_MCP_RESOURCE_SCOPES: readonly ["mcp:tools", "teams:read", "teams:create", "spaces:read", "spaces:write", "publish:write", "domains:read", "domains:write"];
+export declare const OAUTH_PROVIDER_SCOPES: readonly ["openid", "profile", "email", "offline_access", "teams:read", "teams:create", "spaces:read", "spaces:write", "publish:write", "domains:read", "domains:write", "mcp:tools"];
 export declare const OAUTH_RESOURCE_DEFINITIONS: {
     readonly api: {
         readonly key: "api";
         readonly name: "Spacefast API";
         readonly accessTokenTtlSeconds: number;
-        readonly allowedScopes: readonly ["teams:read", "spaces:read", "spaces:write", "publish:write", "domains:read", "domains:write"];
+        readonly allowedScopes: readonly ["teams:read", "teams:create", "spaces:read", "spaces:write", "publish:write", "domains:read", "domains:write"];
     };
     readonly mcp: {
         readonly key: "mcp";
         readonly name: "Spacefast MCP";
         readonly accessTokenTtlSeconds: number;
-        readonly allowedScopes: readonly ["mcp:tools", "teams:read", "spaces:read", "spaces:write", "publish:write", "domains:read", "domains:write"];
+        readonly allowedScopes: readonly ["mcp:tools", "teams:read", "teams:create", "spaces:read", "spaces:write", "publish:write", "domains:read", "domains:write"];
     };
 };
 /** Resource identifier for the public API: `https://api.<domain>/v1`. */

package/dist/contracts/oauth-resources.js

@@ -4,6 +4,7 @@ export const OAUTH_AUTHORIZATION_SERVER_PATH = "/v1/auth";
 export const OAUTH_API_RESOURCE_PATH = "/v1";
 export const OAUTH_API_RESOURCE_SCOPES = [
     "teams:read",
+    "teams:create",
     "spaces:read",
     "spaces:write",
     "publish:write",

package/dist/contracts/operations.d.ts

@@ -39,8 +39,8 @@ export declare const UserOperationSchema: z.ZodObject<{
         code: z.ZodString;
         severity: z.ZodEnum<{
             info: "info";
-            warning: "warning";
             error: "error";
+            warning: "warning";
         }>;
         message: z.ZodString;
         path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -137,8 +137,8 @@ export declare const operationListResponseSchema: z.ZodObject<{
             code: z.ZodString;
             severity: z.ZodEnum<{
                 info: "info";
-                warning: "warning";
                 error: "error";
+                warning: "warning";
             }>;
             message: z.ZodString;
             path: z.ZodOptional<z.ZodNullable<z.ZodString>>;

package/dist/contracts/pages.d.ts

@@ -41,12 +41,12 @@ export declare const platformPageIdSchema: z.ZodEnum<{
     "content-too-large": "content-too-large";
 }>;
 export type PlatformPageId = z.infer<typeof platformPageIdSchema>;
-export declare const PAGE_ELEMENTS: readonly ["sf-content", "sf-password-form", "sf-login", "sf-files", "sf-file", "sf-logo", "sf-name"];
+export declare const PAGE_ELEMENTS: readonly ["sf-content", "sf-password-form", "sf-login", "sf-denial-context", "sf-page-path", "sf-page-title", "sf-page-summary", "sf-spacefast-branding", "sf-files", "sf-file", "sf-logo", "sf-name"];
 export type PageElement = (typeof PAGE_ELEMENTS)[number];
 export type PageDefinition = {
     id: SitePageId;
     status: 200 | 401 | 403 | 404;
-    cacheControl: "public, max-age=0, must-revalidate" | "private, no-store";
+    cacheControl: "public, max-age=0, s-maxage=60, must-revalidate" | "private, no-store";
     noindex: boolean;
     customTemplate: boolean;
 };

package/dist/contracts/pages.js

@@ -23,6 +23,11 @@ export const PAGE_ELEMENTS = [
     "sf-content",
     "sf-password-form",
     "sf-login",
+    "sf-denial-context",
+    "sf-page-path",
+    "sf-page-title",
+    "sf-page-summary",
+    "sf-spacefast-branding",
     "sf-files",
     "sf-file",
     "sf-logo",
@@ -32,7 +37,7 @@ export const PAGE_CATALOG = {
     "404": {
         id: "404",
         status: 404,
-        cacheControl: "public, max-age=0, must-revalidate",
+        cacheControl: "public, max-age=0, s-maxage=60, must-revalidate",
         noindex: false,
         customTemplate: true,
     },
@@ -60,14 +65,14 @@ export const PAGE_CATALOG = {
     index: {
         id: "index",
         status: 200,
-        cacheControl: "public, max-age=0, must-revalidate",
+        cacheControl: "public, max-age=0, s-maxage=60, must-revalidate",
         noindex: false,
         customTemplate: true,
     },
     preview: {
         id: "preview",
         status: 200,
-        cacheControl: "public, max-age=0, must-revalidate",
+        cacheControl: "public, max-age=0, s-maxage=60, must-revalidate",
         noindex: false,
         customTemplate: true,
     },

package/dist/contracts/plan-policy.d.ts

@@ -60,8 +60,8 @@ export declare const PlanPolicyResponseSchema: z.ZodObject<{
     warnings: z.ZodOptional<z.ZodArray<z.ZodObject<{
         severity: z.ZodEnum<{
             info: "info";
-            warning: "warning";
             error: "error";
+            warning: "warning";
         }>;
         code: z.ZodString;
         message: z.ZodString;

package/dist/contracts/platform.d.ts

@@ -56,8 +56,8 @@ export declare const accessLogListResponseSchema: z.ZodObject<{
         code: z.ZodString;
         severity: z.ZodEnum<{
             info: "info";
-            warning: "warning";
             error: "error";
+            warning: "warning";
         }>;
         message: z.ZodString;
         path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -90,8 +90,8 @@ export declare const runtimeLogListResponseSchema: z.ZodObject<{
         code: z.ZodString;
         severity: z.ZodEnum<{
             info: "info";
-            warning: "warning";
             error: "error";
+            warning: "warning";
         }>;
         message: z.ZodString;
         path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -161,8 +161,8 @@ export declare const analyticsResponseSchema: z.ZodObject<{
         code: z.ZodString;
         severity: z.ZodEnum<{
             info: "info";
-            warning: "warning";
             error: "error";
+            warning: "warning";
         }>;
         message: z.ZodString;
         path: z.ZodOptional<z.ZodNullable<z.ZodString>>;

package/dist/contracts/resources.d.ts

@@ -3,8 +3,8 @@ export declare const DiagnosticSchema: z.ZodObject<{
     code: z.ZodString;
     severity: z.ZodEnum<{
         info: "info";
-        warning: "warning";
         error: "error";
+        warning: "warning";
     }>;
     message: z.ZodString;
     path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -30,11 +30,7 @@ export declare const PrincipalRefSchema: z.ZodObject<{
     principalId: z.ZodString;
 }, z.core.$strip>;
 export declare const ChannelPointerSchema: z.ZodObject<{
-    versionId: z.ZodOptional<z.ZodString>;
-    weighted: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        versionId: z.ZodString;
-        percentage: z.ZodNumber;
-    }, z.core.$strip>>>;
+    versionId: z.ZodString;
     updatedAt: z.ZodString;
 }, z.core.$strip>;
 export type ChannelPointer = z.infer<typeof ChannelPointerSchema>;
@@ -111,11 +107,7 @@ export declare const SpaceSchema: z.ZodObject<{
     }>;
     moving: z.ZodBoolean;
     channels: z.ZodRecord<z.ZodString, z.ZodObject<{
-        versionId: z.ZodOptional<z.ZodString>;
-        weighted: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            versionId: z.ZodString;
-            percentage: z.ZodNumber;
-        }, z.core.$strip>>>;
+        versionId: z.ZodString;
         updatedAt: z.ZodString;
     }, z.core.$strip>>;
     config: z.ZodNullable<z.ZodObject<{
@@ -182,7 +174,6 @@ export declare const SpaceSchema: z.ZodObject<{
             timeoutSeconds: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
         placement: z.ZodOptional<z.ZodObject<{
-            region: z.ZodOptional<z.ZodString>;
             mode: z.ZodOptional<z.ZodEnum<{
                 shared: "shared";
                 dedicated: "dedicated";
@@ -212,6 +203,7 @@ export declare const SpaceSchema: z.ZodObject<{
                 ipCidrs: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 agent: z.ZodOptional<z.ZodString>;
                 country: z.ZodOptional<z.ZodString>;
+                countryNotIn: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 header: z.ZodOptional<z.ZodObject<{
                     name: z.ZodString;
                     value: z.ZodString;
@@ -286,8 +278,8 @@ export declare const SpaceSchema: z.ZodObject<{
             code: z.ZodString;
             severity: z.ZodEnum<{
                 info: "info";
-                warning: "warning";
                 error: "error";
+                warning: "warning";
             }>;
             message: z.ZodString;
             path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -393,10 +385,7 @@ export declare const VersionSchema: z.ZodObject<{
     manifestHash: z.ZodNullable<z.ZodString>;
     buildId: z.ZodNullable<z.ZodString>;
     importedFromVersionId: z.ZodNullable<z.ZodString>;
-    variables: z.ZodNullable<z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
-        valueHash: z.ZodString;
-    }, z.core.$strip>>>;
+    variables: z.ZodNull;
     fileCount: z.ZodNullable<z.ZodNumber>;
     totalBytes: z.ZodNullable<z.ZodNumber>;
     pendingUploads: z.ZodArray<z.ZodObject<{
@@ -407,6 +396,10 @@ export declare const VersionSchema: z.ZodObject<{
     }, z.core.$strip>>;
     skippedPaths: z.ZodArray<z.ZodString>;
     immutableUrl: z.ZodNullable<z.ZodString>;
+    immutableUrlStatus: z.ZodNullable<z.ZodEnum<{
+        ready: "ready";
+        converging: "converging";
+    }>>;
     isCurrentProduction: z.ZodBoolean;
     siteTitle: z.ZodString;
     config: z.ZodNullable<z.ZodObject<{
@@ -473,7 +466,6 @@ export declare const VersionSchema: z.ZodObject<{
             timeoutSeconds: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
         placement: z.ZodOptional<z.ZodObject<{
-            region: z.ZodOptional<z.ZodString>;
             mode: z.ZodOptional<z.ZodEnum<{
                 shared: "shared";
                 dedicated: "dedicated";
@@ -512,8 +504,8 @@ export declare const VersionSchema: z.ZodObject<{
             code: z.ZodString;
             severity: z.ZodEnum<{
                 info: "info";
-                warning: "warning";
                 error: "error";
+                warning: "warning";
             }>;
             message: z.ZodString;
             path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -539,8 +531,8 @@ export declare const VersionSchema: z.ZodObject<{
         code: z.ZodString;
         severity: z.ZodEnum<{
             info: "info";
-            warning: "warning";
             error: "error";
+            warning: "warning";
         }>;
         message: z.ZodString;
         path: z.ZodOptional<z.ZodNullable<z.ZodString>>;

package/dist/contracts/resources.js

@@ -14,40 +14,12 @@ export const PrincipalRefSchema = z.object({
     principalType: z.enum(["team", "external"]),
     principalId: z.string(),
 });
-// ChannelPointer (internal-docs/platform.md "ChannelPointer"): exactly one of
-// `versionId` | `weighted` is present; an empty pointer is invalid. Weighted
-// pointers (gradual rollouts) are a future write surface — the shape is final.
-export const ChannelPointerSchema = z
-    .object({
-    versionId: z.string().optional().describe("Version this channel serves."),
-    weighted: z
-        .array(z.object({
-        versionId: z.string(),
-        percentage: z.number().int().min(1).max(100),
-    }))
-        .min(2)
-        .optional()
-        .describe("Weighted rollout across >=2 ready versions; percentages sum to 100."),
+// ChannelPointer (internal-docs/platform.md "ChannelPointer"): a channel names
+// exactly one version. A channel with no version yet is absent from the map
+// rather than present with an empty pointer.
+export const ChannelPointerSchema = z.object({
+    versionId: z.string().describe("Version this channel serves."),
     updatedAt: z.string().datetime(),
-})
-    .superRefine((value, ctx) => {
-    const hasVersion = value.versionId !== undefined;
-    const hasWeighted = value.weighted !== undefined;
-    if (hasVersion === hasWeighted) {
-        ctx.addIssue({
-            code: z.ZodIssueCode.custom,
-            message: "Exactly one of versionId or weighted must be present.",
-        });
-        return;
-    }
-    if (value.weighted &&
-        value.weighted.reduce((sum, entry) => sum + entry.percentage, 0) !== 100) {
-        ctx.addIssue({
-            code: z.ZodIssueCode.custom,
-            path: ["weighted"],
-            message: "Weighted percentages must sum to 100.",
-        });
-    }
 });
 // The versioned-settings CAS token: always the lowercase hex sha256 the
 // control plane computes over canonical {config, title}. Shared by the Space
@@ -107,7 +79,7 @@ export const SpaceSchema = z.object({
         .describe("Server-selected dashboard thumbnail. Screenshots use WordPress.com mShots; image thumbnails use WordPress.com Site Accelerator."),
     dataLocation: z
         .string()
-        .describe('Resolved data-location region. PATCH may queue a move to change it; "auto" only while no concrete region is known yet.'),
+        .describe('Resolved data-location region, fixed when the space is created and immutable afterwards; "auto" only while no concrete region is known yet.'),
     region: z
         .string()
         .describe('Alias of dataLocation for placement dashboards; "auto" only while no concrete region is known yet.'),
@@ -201,9 +173,9 @@ export const VersionSchema = z.object({
     buildId: z.string().nullable(),
     // Import provenance: the source version this one was materialized from.
     importedFromVersionId: z.string().nullable(),
-    // Finalize-time variable resolution provenance — names and value hashes only,
-    // never values.
-    variables: z.array(z.object({ name: z.string(), valueHash: z.string() })).nullable(),
+    // Finalize-time dependency digests remain server-internal: historical rows
+    // cannot distinguish hashes of sealed values safely.
+    variables: z.null().describe("Variable dependency provenance is not publicly exposed."),
     fileCount: z.number().int().nullable(),
     totalBytes: z.number().int().nullable(),
     pendingUploads: z.array(pendingUploadSchema),
@@ -212,6 +184,10 @@ export const VersionSchema = z.object({
         .string()
         .nullable()
         .describe("Permanent version URL (v{number}--{label}.view.fast form), computed once and stored at ready; survives slug changes, transfers, and channel repointing. Null before ready."),
+    immutableUrlStatus: z
+        .enum(["converging", "ready"])
+        .nullable()
+        .describe("Whether the immutable version URL provider alias has converged. converging means the URL may not resolve yet."),
     isCurrentProduction: z.boolean(),
     siteTitle: z.string(),
     config: spaceConfigSchema