@spacefast/common 0.0.11 → 0.0.13

package/dist/contracts/activity.d.ts

@@ -1,5 +1,5 @@
 import { z } from "zod";
-export declare const ACTIVITY_EVENT_CODES: readonly ["space.created", "space.claimed", "feedback.lead_claim_pending", "space.transferred", "space.move_requested", "space.moved", "space.expired", "space.disabled", "space.enabled", "space.deleted", "space.config_updated", "space.slug_updated", "space.password_updated", "site.provision_requested", "site.placement_hold_set", "site.placement_hold_cleared", "site.burst_toggled", "space.access_logout_all", "space.access_transfer_scrub", "space.access_operator_token", "space.sharing_updated", "space.share_link_created", "space.share_link_revoked", "space.invite_created", "space.invite_revoked", "space.access_request_created", "space.access_request_resolved", "space.firewall_updated", "team.access_defaults_updated", "team.service_token_created", "team.service_token_revoked", "team.access_connection_created", "team.access_connection_updated", "team.access_connection_revoked", "version.created", "version.ready", "version.warning", "version.failed", "version.expired", "version.canceled", "version.deleted", "version.retention_warning", "version.retention_deleted", "channel.promoted", "build.created", "build.succeeded", "build.failed", "build.canceled", "build.skipped", "domain.created", "domain.verified", "domain.verification_failed", "domain.control_lost", "domain.dns_updated", "domain.nameservers_updated", "domain.registration_purchased", "domain.registration_renewed", "domain.registration_expiring", "domain.registration_expired", "domain.transfer_in_started", "domain.transfer_out_started", "domain.deleted", "binding.created", "binding.activated", "binding.blocked", "binding.deleted", "transfer.requested", "transfer.confirmed", "transfer.completed", "transfer.canceled", "transfer.expired", "transfer.failed", "variable.updated", "variable.deleted", "api_key.created", "api_key.updated", "api_key.revoked", "agent_handoff.created", "agent_handoff.redeemed", "agent_handoff.revoked", "webhook.created", "webhook.updated", "webhook.secret_rotated", "webhook.disabled", "webhook.deleted", "team.updated", "team.slug_updated", "team.member_added", "team.member_removed", "team.member_role_updated", "team.builds_deploys_quota_exceeded", "tenant.past_due", "tenant.suspended", "tenant.reactivated", "tenant.deleted", "export.ready", "export.failed", "import.ready", "import.failed", "comment.token_minted", "comment.created", "comment.reply_created", "comment.archived", "comment.unarchived", "abuse_report.created", "abuse_report.updated", "claim.blocked_takedown", "user.created", "user.signed_in", "user.deleted", "user.impersonation_started", "user.impersonation_stopped", "user.two_factor_enabled", "user.two_factor_disabled"];
+export declare const ACTIVITY_EVENT_CODES: readonly ["space.created", "space.claimed", "feedback.lead_claim_pending", "space.transferred", "space.move_requested", "space.moved", "space.expired", "space.disabled", "space.enabled", "space.deleted", "space.config_updated", "space.slug_updated", "site.provision_requested", "site.placement_hold_set", "site.placement_hold_cleared", "site.burst_toggled", "space.access_logout_all", "space.access_transfer_scrub", "space.share_link_created", "space.share_link_revoked", "space.access_request_created", "space.access_request_resolved", "space.grant_created", "space.grant_updated", "space.grant_revoked", "team.access_defaults_updated", "version.created", "version.ready", "version.warning", "version.failed", "version.expired", "version.canceled", "version.deleted", "version.retention_warning", "version.retention_deleted", "channel.promoted", "build.created", "build.succeeded", "build.failed", "build.canceled", "build.skipped", "domain.created", "domain.verified", "domain.verification_failed", "domain.control_lost", "domain.dns_updated", "domain.nameservers_updated", "domain.registration_purchased", "domain.registration_renewed", "domain.registration_expiring", "domain.registration_expired", "domain.transfer_in_started", "domain.transfer_out_started", "domain.deleted", "domain.attached", "domain.activated", "domain.blocked", "domain.detached", "transfer.requested", "transfer.confirmed", "transfer.completed", "transfer.canceled", "transfer.expired", "transfer.failed", "variable.updated", "variable.deleted", "api_key.created", "api_key.updated", "api_key.revoked", "agent_handoff.created", "agent_handoff.redeemed", "agent_handoff.revoked", "webhook.created", "webhook.updated", "webhook.secret_rotated", "webhook.disabled", "webhook.deleted", "team.updated", "team.slug_updated", "team.member_added", "team.member_removed", "team.member_role_updated", "team.builds_deploys_quota_exceeded", "tenant.past_due", "tenant.suspended", "tenant.reactivated", "tenant.deleted", "export.ready", "export.failed", "import.ready", "import.failed", "comment.token_minted", "comment.created", "comment.reply_created", "comment.archived", "comment.unarchived", "abuse_report.created", "abuse_report.updated", "claim.blocked_takedown", "claim.authority_rotated", "user.created", "user.signed_in", "user.deleted", "user.impersonation_started", "user.impersonation_stopped", "user.two_factor_enabled", "user.two_factor_disabled"];
 export type ActivityEventCode = (typeof ACTIVITY_EVENT_CODES)[number];
 export declare function isActivityEventCode(value: string): value is ActivityEventCode;
 export declare function isValidActivityEventFilter(filter: string): boolean;

package/dist/contracts/activity.js

@@ -2,7 +2,7 @@ import { z } from "zod";
 import { AnyObjectSchema, CursorPaginationSchema, cursorListQuerySchema } from "./common.js";
 // The single event taxonomy (internal-docs/platform.md "Event taxonomy").
 // Every emitted activity event and every webhook `events` filter selects on
-// these codes. Growth is additive-only: codes are never renamed or removed.
+// these codes.
 // `appendActivityEvent` is typed against this list, so emitting a code that is
 // not in the table is a typecheck (CI) failure.
 export const ACTIVITY_EVENT_CODES = [
@@ -19,31 +19,22 @@ export const ACTIVITY_EVENT_CODES = [
     "space.deleted",
     "space.config_updated",
     "space.slug_updated",
-    "space.password_updated",
     // site
     "site.provision_requested",
     "site.placement_hold_set",
     "site.placement_hold_cleared",
     "site.burst_toggled",
-    // access (internal-docs/access-plan.html): every access mutation emits an
-    // activity event; operator mints are audited and owner-visible (X-27).
+    // access
     "space.access_logout_all",
     "space.access_transfer_scrub",
-    "space.access_operator_token",
-    "space.sharing_updated",
     "space.share_link_created",
     "space.share_link_revoked",
-    "space.invite_created",
-    "space.invite_revoked",
     "space.access_request_created",
     "space.access_request_resolved",
-    "space.firewall_updated",
+    "space.grant_created",
+    "space.grant_updated",
+    "space.grant_revoked",
     "team.access_defaults_updated",
-    "team.service_token_created",
-    "team.service_token_revoked",
-    "team.access_connection_created",
-    "team.access_connection_updated",
-    "team.access_connection_revoked",
     // version
     "version.created",
     "version.ready",
@@ -77,10 +68,10 @@ export const ACTIVITY_EVENT_CODES = [
     "domain.transfer_out_started",
     "domain.deleted",
     // binding
-    "binding.created",
-    "binding.activated",
-    "binding.blocked",
-    "binding.deleted",
+    "domain.attached",
+    "domain.activated",
+    "domain.blocked",
+    "domain.detached",
     // transfer
     "transfer.requested",
     "transfer.confirmed",
@@ -123,7 +114,7 @@ export const ACTIVITY_EVENT_CODES = [
     "export.failed",
     "import.ready",
     "import.failed",
-    // annotations
+    // comments
     "comment.token_minted",
     "comment.created",
     "comment.reply_created",
@@ -135,6 +126,7 @@ export const ACTIVITY_EVENT_CODES = [
     // claim (additive extension: a claim attempt against a taken-down space is
     // flagged, never silently 404ed — internal-docs/platform.md "Abuse Posture")
     "claim.blocked_takedown",
+    "claim.authority_rotated",
     // user (additive extension: account lifecycle plus the 2FA and
     // admin-impersonation effects that must surface through ActivityEvent —
     // internal-docs/platform.md Better Auth usage). `user.created` fires once on

package/dist/contracts/api-keys.d.ts

@@ -1,15 +1,20 @@
 import { z } from "zod";
 export declare const SPACEFAST_ACCESS_POLICY_VERSION = "2026-06-09";
 export declare const StatticActionSchema: z.ZodEnum<{
+    "teams:read": "teams:read";
+    "teams:create": "teams:create";
+    "spaces:read": "spaces:read";
+    "spaces:write": "spaces:write";
+    "spaces:rename": "spaces:rename";
+    "domains:read": "domains:read";
+    "mcp:tools": "mcp:tools";
     "*": "*";
     "sites:read": "sites:read";
     "sites:create": "sites:create";
     "sites:write": "sites:write";
     "sites:delete": "sites:delete";
     "sites:policy.write": "sites:policy.write";
-    "spaces:read": "spaces:read";
     "spaces:create": "spaces:create";
-    "spaces:write": "spaces:write";
     "spaces:delete": "spaces:delete";
     "spaces:publish": "spaces:publish";
     "spaces:transfer": "spaces:transfer";
@@ -19,7 +24,6 @@ export declare const StatticActionSchema: z.ZodEnum<{
     "versions:promote": "versions:promote";
     "versions:delete": "versions:delete";
     "versions:download": "versions:download";
-    "domains:read": "domains:read";
     "domains:create": "domains:create";
     "domains:verify": "domains:verify";
     "domains:assign": "domains:assign";
@@ -31,8 +35,8 @@ export declare const StatticActionSchema: z.ZodEnum<{
     "webhooks:read": "webhooks:read";
     "webhooks:write": "webhooks:write";
     "builds:read": "builds:read";
+    "builds:trigger": "builds:trigger";
     "builds:create": "builds:create";
-    "teams:read": "teams:read";
     "teams:write": "teams:write";
     "teams:members.write": "teams:members.write";
     "billing:read": "billing:read";
@@ -40,7 +44,6 @@ export declare const StatticActionSchema: z.ZodEnum<{
     "tokens:read": "tokens:read";
     "tokens:create": "tokens:create";
     "tokens:revoke": "tokens:revoke";
-    "mcp:tools": "mcp:tools";
     "runtime:manage": "runtime:manage";
 }>;
 export type StatticAction = z.infer<typeof StatticActionSchema>;
@@ -82,15 +85,20 @@ export declare const ApiCredentialPolicySchema: z.ZodObject<{
             deny: "deny";
         }>;
         actions: z.ZodArray<z.ZodEnum<{
+            "teams:read": "teams:read";
+            "teams:create": "teams:create";
+            "spaces:read": "spaces:read";
+            "spaces:write": "spaces:write";
+            "spaces:rename": "spaces:rename";
+            "domains:read": "domains:read";
+            "mcp:tools": "mcp:tools";
             "*": "*";
             "sites:read": "sites:read";
             "sites:create": "sites:create";
             "sites:write": "sites:write";
             "sites:delete": "sites:delete";
             "sites:policy.write": "sites:policy.write";
-            "spaces:read": "spaces:read";
             "spaces:create": "spaces:create";
-            "spaces:write": "spaces:write";
             "spaces:delete": "spaces:delete";
             "spaces:publish": "spaces:publish";
             "spaces:transfer": "spaces:transfer";
@@ -100,7 +108,6 @@ export declare const ApiCredentialPolicySchema: z.ZodObject<{
             "versions:promote": "versions:promote";
             "versions:delete": "versions:delete";
             "versions:download": "versions:download";
-            "domains:read": "domains:read";
             "domains:create": "domains:create";
             "domains:verify": "domains:verify";
             "domains:assign": "domains:assign";
@@ -112,8 +119,8 @@ export declare const ApiCredentialPolicySchema: z.ZodObject<{
             "webhooks:read": "webhooks:read";
             "webhooks:write": "webhooks:write";
             "builds:read": "builds:read";
+            "builds:trigger": "builds:trigger";
             "builds:create": "builds:create";
-            "teams:read": "teams:read";
             "teams:write": "teams:write";
             "teams:members.write": "teams:members.write";
             "billing:read": "billing:read";
@@ -121,7 +128,6 @@ export declare const ApiCredentialPolicySchema: z.ZodObject<{
             "tokens:read": "tokens:read";
             "tokens:create": "tokens:create";
             "tokens:revoke": "tokens:revoke";
-            "mcp:tools": "mcp:tools";
             "runtime:manage": "runtime:manage";
         }>>;
         resources: z.ZodArray<z.ZodString>;
@@ -129,8 +135,8 @@ export declare const ApiCredentialPolicySchema: z.ZodObject<{
             "request.client": z.ZodOptional<z.ZodEnum<{
                 api: "api";
                 dashboard: "dashboard";
-                cli: "cli";
                 worker: "worker";
+                cli: "cli";
             }>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
@@ -185,15 +191,20 @@ export declare const ApiKeySchema: z.ZodObject<{
                 deny: "deny";
             }>;
             actions: z.ZodArray<z.ZodEnum<{
+                "teams:read": "teams:read";
+                "teams:create": "teams:create";
+                "spaces:read": "spaces:read";
+                "spaces:write": "spaces:write";
+                "spaces:rename": "spaces:rename";
+                "domains:read": "domains:read";
+                "mcp:tools": "mcp:tools";
                 "*": "*";
                 "sites:read": "sites:read";
                 "sites:create": "sites:create";
                 "sites:write": "sites:write";
                 "sites:delete": "sites:delete";
                 "sites:policy.write": "sites:policy.write";
-                "spaces:read": "spaces:read";
                 "spaces:create": "spaces:create";
-                "spaces:write": "spaces:write";
                 "spaces:delete": "spaces:delete";
                 "spaces:publish": "spaces:publish";
                 "spaces:transfer": "spaces:transfer";
@@ -203,7 +214,6 @@ export declare const ApiKeySchema: z.ZodObject<{
                 "versions:promote": "versions:promote";
                 "versions:delete": "versions:delete";
                 "versions:download": "versions:download";
-                "domains:read": "domains:read";
                 "domains:create": "domains:create";
                 "domains:verify": "domains:verify";
                 "domains:assign": "domains:assign";
@@ -215,8 +225,8 @@ export declare const ApiKeySchema: z.ZodObject<{
                 "webhooks:read": "webhooks:read";
                 "webhooks:write": "webhooks:write";
                 "builds:read": "builds:read";
+                "builds:trigger": "builds:trigger";
                 "builds:create": "builds:create";
-                "teams:read": "teams:read";
                 "teams:write": "teams:write";
                 "teams:members.write": "teams:members.write";
                 "billing:read": "billing:read";
@@ -224,7 +234,6 @@ export declare const ApiKeySchema: z.ZodObject<{
                 "tokens:read": "tokens:read";
                 "tokens:create": "tokens:create";
                 "tokens:revoke": "tokens:revoke";
-                "mcp:tools": "mcp:tools";
                 "runtime:manage": "runtime:manage";
             }>>;
             resources: z.ZodArray<z.ZodString>;
@@ -232,8 +241,8 @@ export declare const ApiKeySchema: z.ZodObject<{
                 "request.client": z.ZodOptional<z.ZodEnum<{
                     api: "api";
                     dashboard: "dashboard";
-                    cli: "cli";
                     worker: "worker";
+                    cli: "cli";
                 }>>;
             }, z.core.$strict>>;
         }, z.core.$strict>>;
@@ -296,15 +305,20 @@ export declare const ApiKeyListResponseSchema: z.ZodObject<{
                     deny: "deny";
                 }>;
                 actions: z.ZodArray<z.ZodEnum<{
+                    "teams:read": "teams:read";
+                    "teams:create": "teams:create";
+                    "spaces:read": "spaces:read";
+                    "spaces:write": "spaces:write";
+                    "spaces:rename": "spaces:rename";
+                    "domains:read": "domains:read";
+                    "mcp:tools": "mcp:tools";
                     "*": "*";
                     "sites:read": "sites:read";
                     "sites:create": "sites:create";
                     "sites:write": "sites:write";
                     "sites:delete": "sites:delete";
                     "sites:policy.write": "sites:policy.write";
-                    "spaces:read": "spaces:read";
                     "spaces:create": "spaces:create";
-                    "spaces:write": "spaces:write";
                     "spaces:delete": "spaces:delete";
                     "spaces:publish": "spaces:publish";
                     "spaces:transfer": "spaces:transfer";
@@ -314,7 +328,6 @@ export declare const ApiKeyListResponseSchema: z.ZodObject<{
                     "versions:promote": "versions:promote";
                     "versions:delete": "versions:delete";
                     "versions:download": "versions:download";
-                    "domains:read": "domains:read";
                     "domains:create": "domains:create";
                     "domains:verify": "domains:verify";
                     "domains:assign": "domains:assign";
@@ -326,8 +339,8 @@ export declare const ApiKeyListResponseSchema: z.ZodObject<{
                     "webhooks:read": "webhooks:read";
                     "webhooks:write": "webhooks:write";
                     "builds:read": "builds:read";
+                    "builds:trigger": "builds:trigger";
                     "builds:create": "builds:create";
-                    "teams:read": "teams:read";
                     "teams:write": "teams:write";
                     "teams:members.write": "teams:members.write";
                     "billing:read": "billing:read";
@@ -335,7 +348,6 @@ export declare const ApiKeyListResponseSchema: z.ZodObject<{
                     "tokens:read": "tokens:read";
                     "tokens:create": "tokens:create";
                     "tokens:revoke": "tokens:revoke";
-                    "mcp:tools": "mcp:tools";
                     "runtime:manage": "runtime:manage";
                 }>>;
                 resources: z.ZodArray<z.ZodString>;
@@ -343,8 +355,8 @@ export declare const ApiKeyListResponseSchema: z.ZodObject<{
                     "request.client": z.ZodOptional<z.ZodEnum<{
                         api: "api";
                         dashboard: "dashboard";
-                        cli: "cli";
                         worker: "worker";
+                        cli: "cli";
                     }>>;
                 }, z.core.$strict>>;
             }, z.core.$strict>>;
@@ -387,15 +399,20 @@ export declare const ApiKeyCreateRequestSchema: z.ZodObject<{
                 deny: "deny";
             }>;
             actions: z.ZodArray<z.ZodEnum<{
+                "teams:read": "teams:read";
+                "teams:create": "teams:create";
+                "spaces:read": "spaces:read";
+                "spaces:write": "spaces:write";
+                "spaces:rename": "spaces:rename";
+                "domains:read": "domains:read";
+                "mcp:tools": "mcp:tools";
                 "*": "*";
                 "sites:read": "sites:read";
                 "sites:create": "sites:create";
                 "sites:write": "sites:write";
                 "sites:delete": "sites:delete";
                 "sites:policy.write": "sites:policy.write";
-                "spaces:read": "spaces:read";
                 "spaces:create": "spaces:create";
-                "spaces:write": "spaces:write";
                 "spaces:delete": "spaces:delete";
                 "spaces:publish": "spaces:publish";
                 "spaces:transfer": "spaces:transfer";
@@ -405,7 +422,6 @@ export declare const ApiKeyCreateRequestSchema: z.ZodObject<{
                 "versions:promote": "versions:promote";
                 "versions:delete": "versions:delete";
                 "versions:download": "versions:download";
-                "domains:read": "domains:read";
                 "domains:create": "domains:create";
                 "domains:verify": "domains:verify";
                 "domains:assign": "domains:assign";
@@ -417,8 +433,8 @@ export declare const ApiKeyCreateRequestSchema: z.ZodObject<{
                 "webhooks:read": "webhooks:read";
                 "webhooks:write": "webhooks:write";
                 "builds:read": "builds:read";
+                "builds:trigger": "builds:trigger";
                 "builds:create": "builds:create";
-                "teams:read": "teams:read";
                 "teams:write": "teams:write";
                 "teams:members.write": "teams:members.write";
                 "billing:read": "billing:read";
@@ -426,7 +442,6 @@ export declare const ApiKeyCreateRequestSchema: z.ZodObject<{
                 "tokens:read": "tokens:read";
                 "tokens:create": "tokens:create";
                 "tokens:revoke": "tokens:revoke";
-                "mcp:tools": "mcp:tools";
                 "runtime:manage": "runtime:manage";
             }>>;
             resources: z.ZodArray<z.ZodString>;
@@ -434,8 +449,8 @@ export declare const ApiKeyCreateRequestSchema: z.ZodObject<{
                 "request.client": z.ZodOptional<z.ZodEnum<{
                     api: "api";
                     dashboard: "dashboard";
-                    cli: "cli";
                     worker: "worker";
+                    cli: "cli";
                 }>>;
             }, z.core.$strict>>;
         }, z.core.$strict>>;
@@ -460,15 +475,20 @@ export declare const ApiKeyPatchRequestSchema: z.ZodObject<{
                 deny: "deny";
             }>;
             actions: z.ZodArray<z.ZodEnum<{
+                "teams:read": "teams:read";
+                "teams:create": "teams:create";
+                "spaces:read": "spaces:read";
+                "spaces:write": "spaces:write";
+                "spaces:rename": "spaces:rename";
+                "domains:read": "domains:read";
+                "mcp:tools": "mcp:tools";
                 "*": "*";
                 "sites:read": "sites:read";
                 "sites:create": "sites:create";
                 "sites:write": "sites:write";
                 "sites:delete": "sites:delete";
                 "sites:policy.write": "sites:policy.write";
-                "spaces:read": "spaces:read";
                 "spaces:create": "spaces:create";
-                "spaces:write": "spaces:write";
                 "spaces:delete": "spaces:delete";
                 "spaces:publish": "spaces:publish";
                 "spaces:transfer": "spaces:transfer";
@@ -478,7 +498,6 @@ export declare const ApiKeyPatchRequestSchema: z.ZodObject<{
                 "versions:promote": "versions:promote";
                 "versions:delete": "versions:delete";
                 "versions:download": "versions:download";
-                "domains:read": "domains:read";
                 "domains:create": "domains:create";
                 "domains:verify": "domains:verify";
                 "domains:assign": "domains:assign";
@@ -490,8 +509,8 @@ export declare const ApiKeyPatchRequestSchema: z.ZodObject<{
                 "webhooks:read": "webhooks:read";
                 "webhooks:write": "webhooks:write";
                 "builds:read": "builds:read";
+                "builds:trigger": "builds:trigger";
                 "builds:create": "builds:create";
-                "teams:read": "teams:read";
                 "teams:write": "teams:write";
                 "teams:members.write": "teams:members.write";
                 "billing:read": "billing:read";
@@ -499,7 +518,6 @@ export declare const ApiKeyPatchRequestSchema: z.ZodObject<{
                 "tokens:read": "tokens:read";
                 "tokens:create": "tokens:create";
                 "tokens:revoke": "tokens:revoke";
-                "mcp:tools": "mcp:tools";
                 "runtime:manage": "runtime:manage";
             }>>;
             resources: z.ZodArray<z.ZodString>;
@@ -507,8 +525,8 @@ export declare const ApiKeyPatchRequestSchema: z.ZodObject<{
                 "request.client": z.ZodOptional<z.ZodEnum<{
                     api: "api";
                     dashboard: "dashboard";
-                    cli: "cli";
                     worker: "worker";
+                    cli: "cli";
                 }>>;
             }, z.core.$strict>>;
         }, z.core.$strict>>;
@@ -532,15 +550,20 @@ export declare const ApiKeyScopedCreateRequestSchema: z.ZodObject<{
         spaceId: z.ZodString;
     }, z.core.$strict>], "kind">;
     permissions: z.ZodArray<z.ZodEnum<{
+        "teams:read": "teams:read";
+        "teams:create": "teams:create";
+        "spaces:read": "spaces:read";
+        "spaces:write": "spaces:write";
+        "spaces:rename": "spaces:rename";
+        "domains:read": "domains:read";
+        "mcp:tools": "mcp:tools";
         "*": "*";
         "sites:read": "sites:read";
         "sites:create": "sites:create";
         "sites:write": "sites:write";
         "sites:delete": "sites:delete";
         "sites:policy.write": "sites:policy.write";
-        "spaces:read": "spaces:read";
         "spaces:create": "spaces:create";
-        "spaces:write": "spaces:write";
         "spaces:delete": "spaces:delete";
         "spaces:publish": "spaces:publish";
         "spaces:transfer": "spaces:transfer";
@@ -550,7 +573,6 @@ export declare const ApiKeyScopedCreateRequestSchema: z.ZodObject<{
         "versions:promote": "versions:promote";
         "versions:delete": "versions:delete";
         "versions:download": "versions:download";
-        "domains:read": "domains:read";
         "domains:create": "domains:create";
         "domains:verify": "domains:verify";
         "domains:assign": "domains:assign";
@@ -562,8 +584,8 @@ export declare const ApiKeyScopedCreateRequestSchema: z.ZodObject<{
         "webhooks:read": "webhooks:read";
         "webhooks:write": "webhooks:write";
         "builds:read": "builds:read";
+        "builds:trigger": "builds:trigger";
         "builds:create": "builds:create";
-        "teams:read": "teams:read";
         "teams:write": "teams:write";
         "teams:members.write": "teams:members.write";
         "billing:read": "billing:read";
@@ -571,7 +593,6 @@ export declare const ApiKeyScopedCreateRequestSchema: z.ZodObject<{
         "tokens:read": "tokens:read";
         "tokens:create": "tokens:create";
         "tokens:revoke": "tokens:revoke";
-        "mcp:tools": "mcp:tools";
         "runtime:manage": "runtime:manage";
     }>>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -590,15 +611,20 @@ export declare const ApiKeyScopedPatchRequestSchema: z.ZodObject<{
         spaceId: z.ZodString;
     }, z.core.$strict>], "kind">>;
     permissions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "teams:read": "teams:read";
+        "teams:create": "teams:create";
+        "spaces:read": "spaces:read";
+        "spaces:write": "spaces:write";
+        "spaces:rename": "spaces:rename";
+        "domains:read": "domains:read";
+        "mcp:tools": "mcp:tools";
         "*": "*";
         "sites:read": "sites:read";
         "sites:create": "sites:create";
         "sites:write": "sites:write";
         "sites:delete": "sites:delete";
         "sites:policy.write": "sites:policy.write";
-        "spaces:read": "spaces:read";
         "spaces:create": "spaces:create";
-        "spaces:write": "spaces:write";
         "spaces:delete": "spaces:delete";
         "spaces:publish": "spaces:publish";
         "spaces:transfer": "spaces:transfer";
@@ -608,7 +634,6 @@ export declare const ApiKeyScopedPatchRequestSchema: z.ZodObject<{
         "versions:promote": "versions:promote";
         "versions:delete": "versions:delete";
         "versions:download": "versions:download";
-        "domains:read": "domains:read";
         "domains:create": "domains:create";
         "domains:verify": "domains:verify";
         "domains:assign": "domains:assign";
@@ -620,8 +645,8 @@ export declare const ApiKeyScopedPatchRequestSchema: z.ZodObject<{
         "webhooks:read": "webhooks:read";
         "webhooks:write": "webhooks:write";
         "builds:read": "builds:read";
+        "builds:trigger": "builds:trigger";
         "builds:create": "builds:create";
-        "teams:read": "teams:read";
         "teams:write": "teams:write";
         "teams:members.write": "teams:members.write";
         "billing:read": "billing:read";
@@ -629,7 +654,6 @@ export declare const ApiKeyScopedPatchRequestSchema: z.ZodObject<{
         "tokens:read": "tokens:read";
         "tokens:create": "tokens:create";
         "tokens:revoke": "tokens:revoke";
-        "mcp:tools": "mcp:tools";
         "runtime:manage": "runtime:manage";
     }>>>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;

package/dist/contracts/api-keys.js

@@ -11,6 +11,7 @@ export const StatticActionSchema = z.enum([
     "spaces:read",
     "spaces:create",
     "spaces:write",
+    "spaces:rename",
     "spaces:delete",
     "spaces:publish",
     "spaces:transfer",
@@ -32,8 +33,10 @@ export const StatticActionSchema = z.enum([
     "webhooks:read",
     "webhooks:write",
     "builds:read",
+    "builds:trigger",
     "builds:create",
     "teams:read",
+    "teams:create",
     "teams:write",
     "teams:members.write",
     "billing:read",

package/dist/contracts/archives.d.ts

@@ -6,8 +6,7 @@ export declare const archiveListQuerySchema: z.ZodObject<{
 export declare const spaceExportRequestSchema: z.ZodObject<{
     versionIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
     includeFiles: z.ZodDefault<z.ZodBoolean>;
-    includeExplicitConfig: z.ZodDefault<z.ZodBoolean>;
-}, z.core.$strip>;
+}, z.core.$strict>;
 export declare const spaceExportArchiveSchema: z.ZodObject<{
     contentType: z.ZodLiteral<"application/zip">;
     downloadUrl: z.ZodString;
@@ -30,8 +29,8 @@ export declare const spaceExportSchema: z.ZodObject<{
         code: z.ZodString;
         severity: z.ZodEnum<{
             info: "info";
-            warning: "warning";
             error: "error";
+            warning: "warning";
         }>;
         message: z.ZodString;
         path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -72,8 +71,8 @@ export declare const spaceExportListResponseSchema: z.ZodObject<{
             code: z.ZodString;
             severity: z.ZodEnum<{
                 info: "info";
-                warning: "warning";
                 error: "error";
+                warning: "warning";
             }>;
             message: z.ZodString;
             path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -151,8 +150,8 @@ export declare const spaceImportSchema: z.ZodObject<{
         targets: z.ZodDefault<z.ZodArray<z.ZodObject<{
             path: z.ZodString;
             method: z.ZodEnum<{
-                PUT: "PUT";
                 POST: "POST";
+                PUT: "PUT";
             }>;
             url: z.ZodUnion<[z.ZodString, z.ZodString]>;
             headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -182,8 +181,8 @@ export declare const spaceImportSchema: z.ZodObject<{
                 code: z.ZodString;
                 severity: z.ZodEnum<{
                     info: "info";
-                    warning: "warning";
                     error: "error";
+                    warning: "warning";
                 }>;
                 message: z.ZodString;
                 path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -204,8 +203,8 @@ export declare const spaceImportSchema: z.ZodObject<{
         code: z.ZodString;
         severity: z.ZodEnum<{
             info: "info";
-            warning: "warning";
             error: "error";
+            warning: "warning";
         }>;
         message: z.ZodString;
         path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -251,8 +250,8 @@ export declare const spaceImportListResponseSchema: z.ZodObject<{
             targets: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 path: z.ZodString;
                 method: z.ZodEnum<{
-                    PUT: "PUT";
                     POST: "POST";
+                    PUT: "PUT";
                 }>;
                 url: z.ZodUnion<[z.ZodString, z.ZodString]>;
                 headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -282,8 +281,8 @@ export declare const spaceImportListResponseSchema: z.ZodObject<{
                     code: z.ZodString;
                     severity: z.ZodEnum<{
                         info: "info";
-                        warning: "warning";
                         error: "error";
+                        warning: "warning";
                     }>;
                     message: z.ZodString;
                     path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -304,8 +303,8 @@ export declare const spaceImportListResponseSchema: z.ZodObject<{
             code: z.ZodString;
             severity: z.ZodEnum<{
                 info: "info";
-                warning: "warning";
                 error: "error";
+                warning: "warning";
             }>;
             message: z.ZodString;
             path: z.ZodOptional<z.ZodNullable<z.ZodString>>;

package/dist/contracts/archives.js

@@ -2,7 +2,8 @@ import { z } from "zod";
 import { baseDiagnosticSchema, CursorPaginationSchema, cursorListQuerySchema } from "./common.js";
 import { uploadInstructionsSchema } from "./internal.js";
 export const archiveListQuerySchema = cursorListQuerySchema;
-export const spaceExportRequestSchema = z.object({
+export const spaceExportRequestSchema = z
+    .object({
     versionIds: z
         .array(z.string().min(1))
         .min(1)
@@ -12,11 +13,8 @@ export const spaceExportRequestSchema = z.object({
         .boolean()
         .default(true)
         .describe("Include version file trees and compiled serving artifacts. `false` produces a config-only archive that is not self-servable and cannot be re-imported."),
-    includeExplicitConfig: z
-        .boolean()
-        .default(true)
-        .describe("Include explicit space config (the space access policy) in the archive. Version manifests are always included."),
-});
+})
+    .strict();
 export const spaceExportArchiveSchema = z.object({
     // Zip-only contract: spacefast_export_v1 archives are always zip (the spec
     // allows "zip or tar"; one format keeps the enum honest).