@spacefast/common 0.0.11 → 0.0.13

package/dist/contracts/runtime-app.js

@@ -0,0 +1,21 @@
+import { z } from "zod";
+import { functionsAppSchema } from "./functions.js";
+import { zeroAppSchema } from "./zero.js";
+/**
+ * The one answer to "what is running on this space".
+ *
+ * A space is exactly one runtime kind — `versionRuntimeKind()` returns a single
+ * value and a publish carrying both declarations is refused at finalize — so
+ * this is a discriminated union rather than a bag of optional per-product
+ * fields. Anything that is not an execution tier has no member here and reads
+ * as `null`, which is the overwhelmingly common answer: a static space is not a
+ * degenerate app, it is the absence of one.
+ *
+ * It lives in its own module because it is the only place that needs to know
+ * about both products at once. `spaces.ts` imports it to describe runtime
+ * status; neither `zero.ts` nor `functions.ts` has to learn about the other.
+ */
+export const runtimeAppSchema = z.discriminatedUnion("runtimeKind", [
+    zeroAppSchema,
+    functionsAppSchema,
+]);

package/dist/contracts/sf-config-v1.d.ts

@@ -1,3 +1,4 @@
+import type { Grant } from "./grants.js";
 export declare const SF_CONFIG_V1_CANONICAL_FILE = "sf.jsonc";
 export declare const SF_CONFIG_V1_FILES: readonly ["sf.jsonc", "spacefast.jsonc", "spacefast.json", "sf.json", ".sf/sf.json", ".sf/config.jsonc", ".sf/config.json"];
 /** Published JSON Schema URL for the strict `sf.jsonc` v1 contract. */
@@ -26,6 +27,9 @@ export type SfConfigV1 = {
     substitute?: {
         files: string[];
     };
+    access?: {
+        public: string[];
+    };
 };
 export type EffectiveConfigV1 = {
     version: 1;
@@ -41,6 +45,7 @@ export type EffectiveConfigV1 = {
     };
     metadata?: SfConfigV1["metadata"];
     substitute?: SfConfigV1["substitute"];
+    grants?: Grant[];
 };
 export type SfConfigV1Issue = {
     code: "config_alias" | "config_conflict" | "config_identity_moved" | "config_invalid" | "config_key_removed" | "config_unknown_key" | "serve_index_required" | "template_syntax_retired";

package/dist/contracts/sf-config-v1.js

@@ -1,5 +1,5 @@
 import { BRAND } from "../brand.js";
-import { SPACE_CONFIG_ACCEPTED_FILES, SPACE_CONFIG_CANONICAL_FILE, } from "./space-config.js";
+import { SPACE_CONFIG_ACCEPTED_FILES, SPACE_CONFIG_CANONICAL_FILE } from "./space-config.js";
 export const SF_CONFIG_V1_CANONICAL_FILE = SPACE_CONFIG_CANONICAL_FILE;
 export const SF_CONFIG_V1_FILES = SPACE_CONFIG_ACCEPTED_FILES;
 /** Published JSON Schema URL for the strict `sf.jsonc` v1 contract. */

package/dist/contracts/sites.d.ts

@@ -14,6 +14,7 @@ export declare const SitePressureSchema: z.ZodObject<{
     lastSampleAt: z.ZodOptional<z.ZodString>;
     consecutivePressured: z.ZodOptional<z.ZodNumber>;
     consecutiveClean: z.ZodOptional<z.ZodNumber>;
+    placementHoldRevision: z.ZodOptional<z.ZodNumber>;
     pressureHoldUntil: z.ZodOptional<z.ZodString>;
     lastBulkLaneActivityAt: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>;
@@ -76,8 +77,8 @@ export declare const SiteSchema: z.ZodObject<{
             code: z.ZodString;
             severity: z.ZodEnum<{
                 info: "info";
-                warning: "warning";
                 error: "error";
+                warning: "warning";
             }>;
             message: z.ZodString;
             path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -98,9 +99,10 @@ export declare const SiteSchema: z.ZodObject<{
     updatedAt: z.ZodString;
 }, z.core.$strip>;
 export type Site = z.infer<typeof SiteSchema>;
-export declare const siteProvisioningSchema: z.ZodOptional<z.ZodObject<{
+export declare const operatorSiteProvisioningSchema: z.ZodOptional<z.ZodObject<{
     importProviderSiteId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>>;
+export declare const tenantSiteProvisioningSchema: z.ZodOptional<z.ZodObject<{}, z.core.$strict>>;
 export declare const siteCreateSchema: z.ZodObject<{
     kind: z.ZodDefault<z.ZodEnum<{
         static_runtime: "static_runtime";
@@ -110,10 +112,8 @@ export declare const siteCreateSchema: z.ZodObject<{
         space: "space";
     }>>;
     region: z.ZodOptional<z.ZodString>;
-    provisioning: z.ZodOptional<z.ZodObject<{
-        importProviderSiteId: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
+    provisioning: z.ZodOptional<z.ZodObject<{}, z.core.$strict>>;
+}, z.core.$strict>;
 export declare const siteListSchema: z.ZodObject<{
     data: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -173,8 +173,8 @@ export declare const siteListSchema: z.ZodObject<{
                 code: z.ZodString;
                 severity: z.ZodEnum<{
                     info: "info";
-                    warning: "warning";
                     error: "error";
+                    warning: "warning";
                 }>;
                 message: z.ZodString;
                 path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -264,8 +264,8 @@ export declare const SuperadminSiteSchema: z.ZodObject<{
             code: z.ZodString;
             severity: z.ZodEnum<{
                 info: "info";
-                warning: "warning";
                 error: "error";
+                warning: "warning";
             }>;
             message: z.ZodString;
             path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -353,8 +353,8 @@ export declare const SuperadminSiteListSchema: z.ZodObject<{
                 code: z.ZodString;
                 severity: z.ZodEnum<{
                     info: "info";
-                    warning: "warning";
                     error: "error";
+                    warning: "warning";
                 }>;
                 message: z.ZodString;
                 path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -388,16 +388,16 @@ export declare const superadminSiteCreateSchema: z.ZodObject<{
     kind: z.ZodDefault<z.ZodEnum<{
         static_runtime: "static_runtime";
     }>>;
+    region: z.ZodOptional<z.ZodString>;
     isolation: z.ZodDefault<z.ZodEnum<{
         site: "site";
         space: "space";
     }>>;
-    region: z.ZodOptional<z.ZodString>;
+    tenantId: z.ZodString;
     provisioning: z.ZodOptional<z.ZodObject<{
         importProviderSiteId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
-    tenantId: z.ZodString;
-}, z.core.$strip>;
+}, z.core.$strict>;
 export declare const siteRebalanceRequestSchema: z.ZodObject<{
     spaceIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
@@ -407,4 +407,9 @@ export declare const SiteRebalanceResultSchema: z.ZodObject<{
         spaceId: z.ZodString;
         operationId: z.ZodString;
     }, z.core.$strip>>;
+    warning: z.ZodString;
+    domainsRequiringReverification: z.ZodArray<z.ZodObject<{
+        spaceId: z.ZodString;
+        hostname: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>;

package/dist/contracts/sites.js

@@ -36,6 +36,10 @@ export const SitePressureSchema = z
     lastSampleAt: z.string().datetime().optional(),
     consecutivePressured: z.number().int().nonnegative().optional(),
     consecutiveClean: z.number().int().nonnegative().optional(),
+    // Monotonic CAS token shared by explicit operator hold actions and the
+    // pressure sampler. Every durable hold transition advances it, including
+    // transitions that restore a prior timestamp.
+    placementHoldRevision: z.number().int().nonnegative().optional(),
     // Provenance stamp for the sampler's automatic hold: set on trip to the
     // exact hold instant it wrote, so release only clears holds the pressure
     // pipeline itself set — never an operator-set placement hold.
@@ -70,13 +74,10 @@ export const SiteSchema = z.object({
     createdAt: z.string().datetime(),
     updatedAt: z.string().datetime(),
 });
-// How a site connects to WP.Cloud on creation: provision a fresh provider site
-// (optional region override, falling back to the tenant's WP.Cloud client
-// defaults), or import an existing one by its WP.Cloud site id (atomic_site_id).
-// Runtime-owned knobs such as filesystem mode, static miss handling, PHP
-// workers, and alias canonicalization are intentionally not exposed here; the
-// control plane sets them from Spacefast runtime invariants.
-export const siteProvisioningSchema = z
+// Operator-only WP.Cloud provisioning controls. Tenant site creation never
+// accepts provider object identifiers: authority to create a Spacefast site
+// must not imply authority to adopt existing provider infrastructure.
+export const operatorSiteProvisioningSchema = z
     .object({
     importProviderSiteId: z
         .string()
@@ -86,12 +87,17 @@ export const siteProvisioningSchema = z
         .describe("Import an existing WP.Cloud site by its atomic_site_id (operator flows)."),
 })
     .optional();
-export const siteCreateSchema = z.object({
+// An explicit empty object requests fresh provider provisioning while keeping
+// every provider identity and runtime knob outside tenant control.
+export const tenantSiteProvisioningSchema = z.object({}).strict().optional();
+export const siteCreateSchema = z
+    .object({
     kind: siteKind.default("static_runtime"),
     isolation: siteIsolation.default("site"),
     region: z.string().trim().min(1).optional().describe('Placement region; defaults to `"auto"`.'),
-    provisioning: siteProvisioningSchema,
-});
+    provisioning: tenantSiteProvisioningSchema,
+})
+    .strict();
 export const siteListSchema = z.object({
     data: z.array(SiteSchema),
     pagination: CursorPaginationSchema,
@@ -114,8 +120,9 @@ export const SuperadminSiteListSchema = z.object({
 });
 // Superadmin site create targets an explicit tenant (the tenant-facing
 // `siteCreateSchema` derives the tenant from the principal).
-export const superadminSiteCreateSchema = siteCreateSchema.extend({
+export const superadminSiteCreateSchema = siteCreateSchema.omit({ provisioning: true }).extend({
     tenantId: z.string().trim().min(1),
+    provisioning: operatorSiteProvisioningSchema,
 });
 // Operator rebalance trigger (internal-docs/platform.md "Space placement and
 // moves": operator rebalancing is a move trigger). Queues `space_move`
@@ -128,7 +135,7 @@ export const siteRebalanceRequestSchema = z
         .optional()
         .describe("Limit the rebalance to these space ids; omitted means every live space on the site."),
 })
-    .describe("Operator-only rebalance trigger: move spaces off this site.");
+    .describe("Operator-only rebalance trigger: move spaces off this site. This is the ONLY path that relocates an existing Space, and it is not free — see the reverification warning on the result.");
 export const SiteRebalanceResultSchema = z
     .object({
     siteId: z.string().describe("The site spaces are being moved off."),
@@ -138,5 +145,16 @@ export const SiteRebalanceResultSchema = z
         operationId: z.string().describe("The queued `space_move` operation id (`op_...`)."),
     }))
         .describe("One queued move operation per affected space."),
+    warning: z
+        .string()
+        .describe("Consequence of relocating these Spaces: each hostname is handed to another provider site, which re-runs the provider's domain-exclusivity check and is rejected unless the domain's ownership TXT record is still live in DNS."),
+    domainsRequiringReverification: z
+        .array(z.object({
+        spaceId: z.string().describe("Space the hostname serves."),
+        hostname: z
+            .string()
+            .describe("Custom hostname whose provider ownership check re-runs during the move."),
+    }))
+        .describe("Live custom hostnames on the moved Spaces. Empty means nothing customer-visible is at risk."),
 })
     .describe("Queued rebalance moves; track each operation for completion.");

package/dist/contracts/space-config.d.ts

@@ -17,8 +17,8 @@ export declare const SPACE_CONFIG_CAPS: {
     readonly injectSnippetBytes: number;
     /** Max snippets per `inject` array. */
     readonly injectSnippets: 16;
-    /** Max `access.rules` entries in the file lane. */
-    readonly accessRules: 100;
+    /** Max public WordPress sources exposed to repository builds. */
+    readonly dataSources: 32;
     /** Max `theme` color token length. */
     readonly themeColorChars: 64;
     /** Max `theme.logo` URL/path length. */
@@ -56,7 +56,6 @@ export declare const spacePlacementModeSchema: z.ZodEnum<{
     dedicated: "dedicated";
 }>;
 export declare const spacePlacementConfigSchema: z.ZodObject<{
-    region: z.ZodOptional<z.ZodString>;
     mode: z.ZodOptional<z.ZodEnum<{
         shared: "shared";
         dedicated: "dedicated";
@@ -64,6 +63,17 @@ export declare const spacePlacementConfigSchema: z.ZodObject<{
     burstable: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strict>;
 export type SpacePlacementConfig = z.infer<typeof spacePlacementConfigSchema>;
+export declare const dataSourceNameSchema: z.ZodString;
+export declare const wordpressDataSourceUrlSchema: z.ZodString;
+export declare const wordpressDataSourceSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"wordpress">;
+    url: z.ZodString;
+}, z.core.$strict>;
+export type WordPressDataSource = z.infer<typeof wordpressDataSourceSchema>;
+export declare const spaceDataSourcesSchema: z.ZodPreprocess<z.ZodRecord<z.ZodString, z.ZodObject<{
+    kind: z.ZodLiteral<"wordpress">;
+    url: z.ZodString;
+}, z.core.$strict>>>;
 export declare const spaceConfigSchema: z.ZodObject<{
     index: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodLiteral<false>]>>;
     fallback: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
@@ -128,7 +138,6 @@ export declare const spaceConfigSchema: z.ZodObject<{
         timeoutSeconds: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
     placement: z.ZodOptional<z.ZodObject<{
-        region: z.ZodOptional<z.ZodString>;
         mode: z.ZodOptional<z.ZodEnum<{
             shared: "shared";
             dedicated: "dedicated";
@@ -143,69 +152,38 @@ export declare const spaceConfigSchema: z.ZodObject<{
         bodyEnd: z.ZodOptional<z.ZodArray<z.ZodString>>;
         noscript: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>;
+    dataSources: z.ZodOptional<z.ZodPreprocess<z.ZodRecord<z.ZodString, z.ZodObject<{
+        kind: z.ZodLiteral<"wordpress">;
+        url: z.ZodString;
+    }, z.core.$strict>>>>;
+    defaultDataSource: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type SpaceConfig = z.infer<typeof spaceConfigSchema>;
+export declare function compareDataSourceNames(left: string, right: string): number;
+export declare function resolveDefaultDataSourceName(config: Pick<SpaceConfig, "dataSources" | "defaultDataSource"> | null | undefined): string | null;
 export declare function spaceSuperpowersEnabled(config: SpaceConfig | null | undefined): boolean;
-export declare const spaceAccessConfigSchema: z.ZodObject<{
-    rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        id: z.ZodOptional<z.ZodString>;
-        match: z.ZodDefault<z.ZodObject<{
-            host: z.ZodOptional<z.ZodString>;
-            hostPattern: z.ZodOptional<z.ZodString>;
-            hostTemplate: z.ZodOptional<z.ZodString>;
-            pathPattern: z.ZodOptional<z.ZodString>;
-            channel: z.ZodOptional<z.ZodString>;
-            ipCidrs: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            agent: z.ZodOptional<z.ZodString>;
-            country: z.ZodOptional<z.ZodString>;
-            header: z.ZodOptional<z.ZodObject<{
-                name: z.ZodString;
-                value: z.ZodString;
-            }, z.core.$strip>>;
-        }, z.core.$strip>>;
-        effect: z.ZodEnum<{
-            allow: "allow";
-            deny: "deny";
-            challenge: "challenge";
-        }>;
-        auth: z.ZodOptional<z.ZodObject<{
-            requiredGrants: z.ZodArray<z.ZodString>;
-            issuers: z.ZodOptional<z.ZodArray<z.ZodObject<{
-                kid: z.ZodString;
-                alg: z.ZodLiteral<"EdDSA">;
-                publicKey: z.ZodString;
-                grantNamespaces: z.ZodArray<z.ZodString>;
-            }, z.core.$strip>>>;
-            acquire: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-                type: z.ZodLiteral<"password">;
-                ref: z.ZodString;
-                transport: z.ZodEnum<{
-                    basic: "basic";
-                    form: "form";
-                }>;
-                username: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>, z.ZodObject<{
-                type: z.ZodLiteral<"login">;
-                url: z.ZodString;
-                label: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>], "type">>>;
-        }, z.core.$strip>>;
-        managedBy: z.ZodOptional<z.ZodEnum<{
-            sharing: "sharing";
-            firewall: "firewall";
-            file_share: "file_share";
-            cast_reviewer: "cast_reviewer";
-            team_default: "team_default";
-        }>>;
-        expiresAt: z.ZodOptional<z.ZodNumber>;
-        reasonCode: z.ZodOptional<z.ZodString>;
-        message: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>>;
-}, z.core.$strip>;
 export declare const spacePublishOptionsSchema: z.ZodObject<{
     fingerprint: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type SpacePublishOptions = z.infer<typeof spacePublishOptionsSchema>;
+export declare const spaceConfigFileAccessSchema: z.ZodObject<{
+    public: z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+}, z.core.$strict>;
+export type SpaceConfigFileAccess = z.infer<typeof spaceConfigFileAccessSchema>;
+/**
+ * Overrides for the worker `sf publish` compiles.
+ *
+ * Every field is optional because the normal case is detection: a project with
+ * `handler.ts` or an OpenNext build needs no configuration at all. These exist
+ * for the layouts detection cannot guess — a worker somewhere unusual, or a
+ * compatibility date the author wants pinned rather than defaulted.
+ */
+export declare const spaceFunctionsOptionsSchema: z.ZodObject<{
+    entry: z.ZodOptional<z.ZodString>;
+    database: z.ZodDefault<z.ZodBoolean>;
+    compatibilityDate: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type SpaceFunctionsOptions = z.infer<typeof spaceFunctionsOptionsSchema>;
 export declare const spaceConfigFileSchema: z.ZodObject<{
     index: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodLiteral<false>]>>;
     fallback: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
@@ -270,7 +248,6 @@ export declare const spaceConfigFileSchema: z.ZodObject<{
         timeoutSeconds: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
     placement: z.ZodOptional<z.ZodObject<{
-        region: z.ZodOptional<z.ZodString>;
         mode: z.ZodOptional<z.ZodEnum<{
             shared: "shared";
             dedicated: "dedicated";
@@ -287,65 +264,17 @@ export declare const spaceConfigFileSchema: z.ZodObject<{
     }, z.core.$strip>>;
     $schema: z.ZodOptional<z.ZodString>;
     space: z.ZodOptional<z.ZodString>;
-    access: z.ZodOptional<z.ZodObject<{
-        rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
-            id: z.ZodOptional<z.ZodString>;
-            match: z.ZodDefault<z.ZodObject<{
-                host: z.ZodOptional<z.ZodString>;
-                hostPattern: z.ZodOptional<z.ZodString>;
-                hostTemplate: z.ZodOptional<z.ZodString>;
-                pathPattern: z.ZodOptional<z.ZodString>;
-                channel: z.ZodOptional<z.ZodString>;
-                ipCidrs: z.ZodOptional<z.ZodArray<z.ZodString>>;
-                agent: z.ZodOptional<z.ZodString>;
-                country: z.ZodOptional<z.ZodString>;
-                header: z.ZodOptional<z.ZodObject<{
-                    name: z.ZodString;
-                    value: z.ZodString;
-                }, z.core.$strip>>;
-            }, z.core.$strip>>;
-            effect: z.ZodEnum<{
-                allow: "allow";
-                deny: "deny";
-                challenge: "challenge";
-            }>;
-            auth: z.ZodOptional<z.ZodObject<{
-                requiredGrants: z.ZodArray<z.ZodString>;
-                issuers: z.ZodOptional<z.ZodArray<z.ZodObject<{
-                    kid: z.ZodString;
-                    alg: z.ZodLiteral<"EdDSA">;
-                    publicKey: z.ZodString;
-                    grantNamespaces: z.ZodArray<z.ZodString>;
-                }, z.core.$strip>>>;
-                acquire: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-                    type: z.ZodLiteral<"password">;
-                    ref: z.ZodString;
-                    transport: z.ZodEnum<{
-                        basic: "basic";
-                        form: "form";
-                    }>;
-                    username: z.ZodOptional<z.ZodString>;
-                }, z.core.$strip>, z.ZodObject<{
-                    type: z.ZodLiteral<"login">;
-                    url: z.ZodString;
-                    label: z.ZodOptional<z.ZodString>;
-                }, z.core.$strip>], "type">>>;
-            }, z.core.$strip>>;
-            managedBy: z.ZodOptional<z.ZodEnum<{
-                sharing: "sharing";
-                firewall: "firewall";
-                file_share: "file_share";
-                cast_reviewer: "cast_reviewer";
-                team_default: "team_default";
-            }>>;
-            expiresAt: z.ZodOptional<z.ZodNumber>;
-            reasonCode: z.ZodOptional<z.ZodString>;
-            message: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>>;
-    }, z.core.$strip>>;
     publish: z.ZodOptional<z.ZodObject<{
         fingerprint: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
+    access: z.ZodOptional<z.ZodObject<{
+        public: z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    }, z.core.$strict>>;
+    functions: z.ZodOptional<z.ZodObject<{
+        entry: z.ZodOptional<z.ZodString>;
+        database: z.ZodDefault<z.ZodBoolean>;
+        compatibilityDate: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type SpaceConfigFile = z.infer<typeof spaceConfigFileSchema>;
 /**