@spacefast/common 0.0.12 → 0.0.17

package/dist/contracts/execution.js

@@ -0,0 +1,309 @@
+import { z } from "zod";
+/**
+ * The platform execution layer: everything true of running tenant code on
+ * Spacefast regardless of which product is running it.
+ *
+ * Two products sit on top of this file, and they are genuinely different
+ * things rather than two configurations of one thing:
+ *
+ * - **Zero** (`./zero.js`) runs capsules — schema, queries, mutations and
+ *   endpoints that share one parent-owned transaction — in the native runner
+ *   on a dedicated wp.cloud site, next to that site's MySQL.
+ * - **Functions** (`./functions.js`) runs workers on Cloudflare Workers for
+ *   Platforms, carrying npm and framework output that we could never sandbox
+ *   as well ourselves.
+ *
+ * The only surface both can host is an endpoint that touches neither the
+ * database nor the caller's identity — see `endpointIsPortable`. That is the
+ * portable seam, and it is deliberately narrow: a capsule handler's semantics
+ * depend on the transaction wrapped around it, which does not exist on an
+ * isolate a continent away from the database.
+ */
+/**
+ * What a live version runs. `static` is bytes on disk with no execution at
+ * all, and remains the overwhelming majority of traffic; the other two each
+ * name a product.
+ */
+export const runtimeKindSchema = z.enum(["static", "zero", "functions"]);
+/**
+ * How a live runtime delivers realtime invalidations.
+ *
+ * One vocabulary end to end: the finalize payload, the client config a serving
+ * runtime hands the browser, and every API response all name the transport
+ * with these three values. `central` is the hosted relay, `cast` is the
+ * collaboration service, and `local` is a dev machine serving its own socket —
+ * a distinction a customer can act on, unlike the component names the transports
+ * used to be called after.
+ */
+export const RUNTIME_REALTIME_MODES = ["central", "cast", "local"];
+export const runtimeRealtimeModeSchema = z.enum(RUNTIME_REALTIME_MODES);
+export const EXECUTION_ENV_MAX_KEYS = 64;
+export const EXECUTION_ENV_NAME_MAX_BYTES = 128;
+export const EXECUTION_ENV_VALUE_MAX_BYTES = 16 * 1024;
+export const EXECUTION_ENV_TOTAL_VALUE_MAX_BYTES = 64 * 1024;
+/**
+ * Server-only variables for whichever runtime this version declares. Publish
+ * syncs the file into the space's variables as secrets; the shared publish
+ * denylist (`.env.*`) keeps the file itself out of every artifact, so the
+ * values reach the runtime through variables and never through content.
+ */
+export const SERVER_ENV_FILE = ".env.server";
+/** Lakebed's documented server-only env filename, accepted for capsule portability. */
+export const LAKEBED_SERVER_ENV_FILE = ".env.lakebed.server";
+/**
+ * Names the platform reserves for itself in the tenant environment. Tenant
+ * code cannot set these, so it cannot spoof the values the broker trusts.
+ */
+export const EXECUTION_ENV_RESERVED_PREFIXES = ["SPACEFAST_", "ZERO_"];
+/** Paths the platform owns on every space, whatever the product. */
+export const PLATFORM_ROUTE_PREFIX = "/__spacefast";
+/**
+ * First path segments the platform claims. Matched as segment prefixes rather
+ * than whole segments because the runtime already reserves the whole family —
+ * `/__stattic_probe` is a live serving path, and `upload-policy.php` refuses
+ * any first segment starting with either of these. Encoding it the same way
+ * here keeps a capsule or worker from declaring a route the origin would
+ * intercept before it ever reached them.
+ */
+export const PLATFORM_RESERVED_ROUTE_SEGMENT_PREFIXES = [
+    "__spacefast",
+    "__stattic",
+    "__span",
+];
+export const executionSha256Schema = z.string().regex(/^sha256:[a-f0-9]{64}$/);
+export const executionBase64Schema = z
+    .string()
+    .regex(/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/);
+export const executionIdentifierSchema = z
+    .string()
+    .min(1)
+    .max(128)
+    .regex(/^[A-Za-z_][A-Za-z0-9_]*$/);
+export const executionEnvNameSchema = z
+    .string()
+    .min(1)
+    .max(EXECUTION_ENV_NAME_MAX_BYTES)
+    .regex(/^[A-Za-z_][A-Za-z0-9_]*$/)
+    .refine((name) => !EXECUTION_ENV_RESERVED_PREFIXES.some((prefix) => name.toUpperCase().startsWith(prefix)), { message: "Environment variable name uses a reserved prefix." });
+/**
+ * Rejects lone surrogates. A path that survives JSON but not UTF-8 encoding
+ * round-trips differently through PHP, Rust and Cloudflare's router, so it is
+ * refused at the contract rather than resolved differently on each tier.
+ */
+function hasWellFormedUnicode(value) {
+    for (let index = 0; index < value.length; index++) {
+        const codeUnit = value.charCodeAt(index);
+        if (codeUnit >= 0xd800 && codeUnit <= 0xdbff) {
+            if (index + 1 >= value.length)
+                return false;
+            const next = value.charCodeAt(index + 1);
+            if (next < 0xdc00 || next > 0xdfff)
+                return false;
+            index++;
+        }
+        else if (codeUnit >= 0xdc00 && codeUnit <= 0xdfff) {
+            return false;
+        }
+    }
+    return true;
+}
+function hasNoAsciiControlCharacters(value) {
+    for (let index = 0; index < value.length; index++) {
+        const codeUnit = value.charCodeAt(index);
+        if (codeUnit <= 0x1f || codeUnit === 0x7f)
+            return false;
+    }
+    return true;
+}
+/**
+ * Builds the route-path schema for a product. Structural rules — normalization,
+ * traversal, wildcards, the platform's own prefixes — are identical everywhere
+ * and live here. Each product passes the extra paths and prefixes its own app
+ * shell claims, because those differ: Zero's client router owns `/auth/*`,
+ * a Functions worker owns nothing beyond what the platform reserves.
+ */
+export function appRoutePathSchema(options) {
+    const reservedPaths = options.reservedPaths ?? [];
+    const reservedPrefixes = options.reservedPrefixes ?? [];
+    return z
+        .string()
+        .min(1)
+        .max(2048)
+        .startsWith("/")
+        .refine(hasWellFormedUnicode, {
+        message: `${options.subject} must contain well-formed Unicode.`,
+    })
+        .refine((path) => path.normalize("NFC") === path, {
+        message: `${options.subject} must use NFC-normalized Unicode.`,
+    })
+        .refine(hasNoAsciiControlCharacters, {
+        message: `${options.subject} must not contain ASCII control characters.`,
+    })
+        .refine((path) => !path.includes("//") &&
+        !path.includes("\\") &&
+        !path.includes("*") &&
+        !path.includes("?") &&
+        !path.includes("#") &&
+        !path.includes("%") &&
+        // The root is the one path allowed to end in a slash. Zero reserves it
+        // for its app shell anyway, but a Functions worker serving a framework
+        // app needs to claim "/" as its index route.
+        (path === "/" || !path.endsWith("/")) &&
+        path
+            .split("/")
+            .every((segment, index, segments) => segment !== "." &&
+            segment !== ".." &&
+            segment !== ":" &&
+            (segment !== ":splat" || index === segments.length - 1)), {
+        message: `${options.subject} must be absolute app paths without encoded, empty, traversal, unnamed parameter, * wildcard, non-terminal splat, \\, ?, or # segments.`,
+    })
+        .refine((path) => !PLATFORM_RESERVED_ROUTE_SEGMENT_PREFIXES.some((segmentPrefix) => (path.split("/")[1] ?? "").startsWith(segmentPrefix)), { message: `${options.subject} cannot use a path the platform reserves.` })
+        .refine((path) => !reservedPaths.some((reservedPath) => path === reservedPath), {
+        message: `${options.subject} cannot use a reserved path.`,
+    })
+        .refine((path) => !reservedPrefixes.some((prefix) => path.startsWith(prefix)), {
+        message: `${options.subject} cannot use a reserved path prefix.`,
+    });
+}
+export const httpMethodSchema = z.enum([
+    "GET",
+    "HEAD",
+    "POST",
+    "PUT",
+    "PATCH",
+    "DELETE",
+    "OPTIONS",
+]);
+/**
+ * What a handler is allowed to reach. Declared at build time from what the
+ * source actually imports, not from what the author claims, and printed in the
+ * publish receipt so placement is never a surprise.
+ */
+export const executionCapabilitiesSchema = z
+    .object({
+    db: z.boolean().default(false),
+    fetch: z.boolean().default(false),
+    auth: z.boolean().default(false),
+    env: z.boolean().default(false),
+    realtime: z.boolean().default(false),
+    logging: z.boolean().default(false),
+})
+    .partial()
+    .default({});
+/**
+ * The portable seam, stated as one predicate.
+ *
+ * `db` and `auth` are the two capabilities that bind a handler to the local
+ * tier. `db` because Zero's store guarantees every handler runs inside one
+ * parent-owned transaction, which an isolate reaching the database over a
+ * relay cannot offer. `auth` because capsule identity is resolved against that
+ * same transaction's view. Everything else — fetch, env, realtime, logging —
+ * is brokered identically on both tiers and does not constrain placement.
+ *
+ * Nothing here decides placement automatically: the product a version deploys
+ * to is a property of what its author wrote, and this predicate only reports
+ * whether the code could also have run on the other tier.
+ */
+export function endpointIsPortable(capabilities) {
+    return capabilities.db !== true && capabilities.auth !== true;
+}
+/**
+ * A source-carrying handler, before it is compiled to whichever tier will run
+ * it. Both products publish these; only the capability set decides which of
+ * them could accept a given one.
+ */
+export function executionEndpointSourceSchema(routePathSchema) {
+    return z
+        .object({
+        method: httpMethodSchema,
+        path: routePathSchema,
+        endpointId: z.string().min(1).max(256),
+        source: z
+            .string()
+            .min(1)
+            .max(2 * 1024 * 1024),
+        capabilities: executionCapabilitiesSchema,
+    })
+        .strict();
+}
+/**
+ * Byte-carrying artifacts travel inline in the finalize payload rather than as
+ * a separate upload, so a version's code lands in the same atomic write as the
+ * rest of it. The storage root and ceiling differ per product, hence a factory.
+ */
+export function executionBundleSchema(options) {
+    return z
+        .object({
+        path: z
+            .string()
+            .min(1)
+            .startsWith(`${options.bundleRoot}/`)
+            .refine((bundlePath) => !bundlePath.split("/").includes(".."), {
+            message: "Bundle paths cannot traverse outside the runtime bundle root.",
+        }),
+        sha256: executionSha256Schema,
+        size: z.number().int().nonnegative().max(options.maxBytes),
+        contentBase64: executionBase64Schema,
+    })
+        .strict();
+}
+export function executionStaticFileSchema(options) {
+    return z
+        .object({
+        path: z
+            .string()
+            .min(1)
+            .max(2048)
+            .refine((path) => !path.startsWith("/") && !path.split("/").includes(".."), {
+            message: "Static file paths must be relative and cannot traverse.",
+        })
+            .refine((path) => !path.startsWith(`${options.storageRoot}/`), {
+            message: `Static files cannot use ${options.storageRoot}.`,
+        })
+            .refine((path) => !path.startsWith("_") && !path.startsWith("."), {
+            message: "Static file paths cannot use private root prefixes.",
+        }),
+        contentType: z.string().min(1).max(255),
+        sha256: executionSha256Schema,
+        size: z.number().int().nonnegative().max(options.maxBytes),
+        contentBase64: executionBase64Schema,
+    })
+        .strict();
+}
+/**
+ * Whether a version's execution surface may be read by anyone or only by the
+ * space's own members. Both products expose an inspect route; the policy is
+ * the same question on each.
+ */
+export const executionInspectPolicySchema = z.enum(["private", "public"]);
+export const executionLogEntrySchema = z
+    .object({
+    id: z.string().min(1),
+    timestamp: z.string().datetime(),
+    level: z.enum(["debug", "info", "warn", "error"]),
+    requestId: z.string().min(1).nullable(),
+    versionId: z.string().min(1).nullable(),
+    /** Zero names the mutation; Functions names the handler. */
+    handlerName: z.string().min(1).nullable(),
+    message: z.string(),
+    metadata: z.record(z.string(), z.unknown()).default({}),
+})
+    .strict();
+export const executionLogListQuerySchema = z
+    .object({
+    limit: z.coerce.number().int().min(1).max(100).default(50),
+    cursor: z.string().min(1).optional(),
+    requestId: z.string().min(1).optional(),
+    handlerName: z.string().min(1).optional(),
+})
+    .strict();
+export const executionLogListResponseSchema = z
+    .object({
+    data: z.array(executionLogEntrySchema),
+    pagination: z
+        .object({
+        nextCursor: z.string().nullable(),
+    })
+        .strict(),
+})
+    .strict();

package/dist/contracts/feature-lifecycle.d.ts

@@ -247,7 +247,7 @@ declare const featureEntries: readonly [{
     readonly assignmentScopes: readonly ["team", "global"];
     readonly docs: {
         readonly channel: "public";
-        readonly slug: "/docs/domains/proxy-bindings";
+        readonly slug: "/docs/spaces/proxy-routes";
         readonly feedbackUrl: null;
     };
     readonly owner: "team:domains";
@@ -261,45 +261,6 @@ declare const featureEntries: readonly [{
         readonly code: "proxy_binding_stop";
         readonly summary: "Deny new binds; discoverable authenticated read/detach plus service reconciliation continue.";
     };
-}, {
-    readonly cohort: "launch";
-    readonly key: "collab.comments";
-    readonly name: "Comments";
-    readonly description: "Enables Cast-backed comments on eligible immutable version URLs.";
-    readonly stage: "ga";
-    readonly surface: true;
-    readonly defaultEnabled: true;
-    readonly runtime: {
-        readonly enabledInDevelopment: true;
-        readonly enabledForA8c: true;
-        readonly planDefaults: {};
-    };
-    readonly assignmentScopes: readonly ["user", "team", "global"];
-    readonly docs: {
-        readonly channel: "public";
-        readonly slug: "/docs/collab";
-        readonly feedbackUrl: null;
-    };
-    readonly owner: "team:collaboration";
-    readonly requires: readonly [];
-    readonly lifecycleAdoptedAt: "2026-07-12";
-    readonly reviewAfter: "2026-08-11";
-    readonly removeAfter: "2026-10-10";
-    readonly gaAt: "2026-07-23";
-    readonly allowedActorPolicies: readonly ["request_actor", "persisted_request_actor", "resource_team"];
-    readonly downRamp: {
-        readonly code: "comments_stop";
-        readonly summary: "Deny every customer comment read/write route and deferred task; internal operator export/cleanup continue.";
-    };
-}, {
-    readonly key: "collab.anonymous_commenters";
-    readonly name: "Anonymous commenters";
-    readonly description: "Allows anyone with the link to comment when space policy allows it.";
-    readonly defaultEnabled: true;
-    readonly runtime: {
-        readonly enabledForA8c: true;
-        readonly planDefaults: {};
-    };
 }, {
     readonly cohort: "launch";
     readonly key: "collab.notices";
@@ -325,36 +286,6 @@ declare const featureEntries: readonly [{
         readonly code: "notices_stop";
         readonly summary: "Stop mint/publish; service/operator revoke and cleanup continue.";
     };
-}, {
-    readonly cohort: "launch";
-    readonly key: "collab.published_comments";
-    readonly name: "Published host comments";
-    readonly description: "Allows the Collab overlay to mount comments on a space's live/published host, not just immutable preview URLs.";
-    readonly stage: "ga";
-    readonly surface: true;
-    readonly defaultEnabled: true;
-    readonly runtime: {
-        readonly enabledInDevelopment: true;
-        readonly enabledForA8c: true;
-        readonly planDefaults: {};
-    };
-    readonly assignmentScopes: readonly ["team", "global"];
-    readonly docs: {
-        readonly channel: "public";
-        readonly slug: "/docs/collab/published-comments";
-        readonly feedbackUrl: null;
-    };
-    readonly owner: "team:collaboration";
-    readonly requires: readonly ["collab.comments"];
-    readonly lifecycleAdoptedAt: "2026-07-12";
-    readonly reviewAfter: "2026-08-11";
-    readonly removeAfter: "2026-10-10";
-    readonly gaAt: "2026-07-23";
-    readonly allowedActorPolicies: readonly ["resource_team"];
-    readonly downRamp: {
-        readonly code: "published_comments_stop";
-        readonly summary: "Stop published-host injection; stored data remains only for operator export/cleanup.";
-    };
 }, {
     readonly key: "collab.drawing";
     readonly name: "Collab drawing";
@@ -370,9 +301,9 @@ declare const featureEntries: readonly [{
     readonly key: "sites.dedicated_runtime";
     readonly name: "Dedicated runtime sites";
     readonly description: "Allows teams to create dedicated WP.Cloud sites and place team spaces on them.";
-    readonly stage: "internal";
+    readonly stage: "ga";
     readonly surface: true;
-    readonly defaultEnabled: false;
+    readonly defaultEnabled: true;
     readonly runtime: {
         readonly enabledInDevelopment: true;
         readonly enabledForA8c: true;
@@ -380,16 +311,16 @@ declare const featureEntries: readonly [{
     };
     readonly assignmentScopes: readonly ["team", "global"];
     readonly docs: {
-        readonly channel: "handbook";
-        readonly slug: "/features/sites/dedicated-runtime";
+        readonly channel: "public";
+        readonly slug: "/docs/apps";
         readonly feedbackUrl: null;
     };
     readonly owner: "team:runtime";
     readonly requires: readonly [];
     readonly lifecycleAdoptedAt: "2026-07-12";
-    readonly reviewAfter: "2026-08-11";
-    readonly removeAfter: "2026-10-10";
-    readonly gaAt: null;
+    readonly reviewAfter: null;
+    readonly removeAfter: "2026-11-01";
+    readonly gaAt: "2026-08-05";
     readonly allowedActorPolicies: readonly ["request_actor", "resource_team"];
     readonly downRamp: {
         readonly code: "dedicated_runtime_stop";
@@ -466,28 +397,25 @@ declare const featureEntries: readonly [{
     readonly key: "zero";
     readonly name: "Spacefast Zero";
     readonly description: "Enables Spacefast Zero command surfaces and hosted Zero app workflows.";
-    readonly stage: "internal";
+    readonly stage: "ga";
     readonly surface: true;
-    readonly defaultEnabled: false;
+    readonly defaultEnabled: true;
     readonly runtime: {
         readonly enabledForA8c: true;
-        readonly planDefaults: {
-            readonly enterprise: true;
-            readonly internal: true;
-        };
+        readonly planDefaults: {};
     };
     readonly assignmentScopes: readonly ["team", "global"];
     readonly docs: {
-        readonly channel: "handbook";
-        readonly slug: "/features/zero";
+        readonly channel: "public";
+        readonly slug: "/docs/apps/zero";
         readonly feedbackUrl: null;
     };
     readonly owner: "team:zero";
     readonly requires: readonly ["sites.dedicated_runtime"];
     readonly lifecycleAdoptedAt: "2026-07-12";
-    readonly reviewAfter: "2026-08-11";
-    readonly removeAfter: "2026-10-10";
-    readonly gaAt: null;
+    readonly reviewAfter: null;
+    readonly removeAfter: "2026-11-01";
+    readonly gaAt: "2026-08-05";
     readonly allowedActorPolicies: readonly ["resource_team"];
     readonly downRamp: {
         readonly code: "zero_stop";
@@ -495,127 +423,50 @@ declare const featureEntries: readonly [{
     };
 }, {
     readonly cohort: "launch";
-    readonly key: "access.invites";
-    readonly name: "Space invites";
-    readonly description: "Enables account-less viewer invites with magic-link accept and the request-access loop (access-plan §5.3/§5.4).";
-    readonly stage: "internal";
-    readonly surface: true;
-    readonly defaultEnabled: false;
-    readonly runtime: {
-        readonly enabledInDevelopment: true;
-        readonly enabledForA8c: true;
-        readonly planDefaults: {};
-    };
-    readonly assignmentScopes: readonly ["user", "team", "global"];
-    readonly docs: {
-        readonly channel: "handbook";
-        readonly slug: "/features/access/invites";
-        readonly feedbackUrl: null;
-    };
-    readonly owner: "team:access";
-    readonly requires: readonly [];
-    readonly lifecycleAdoptedAt: "2026-07-12";
-    readonly reviewAfter: "2026-08-11";
-    readonly removeAfter: "2026-10-10";
-    readonly gaAt: null;
-    readonly allowedActorPolicies: readonly ["request_actor", "persisted_request_actor"];
-    readonly downRamp: {
-        readonly code: "invites_stop";
-        readonly summary: "Deny every customer invite route and deferred delivery; internal operator cancel/revoke and service cleanup continue.";
-    };
-}, {
-    readonly key: "access.firewall_card";
-    readonly name: "Firewall card";
-    readonly description: "Enables the managed firewall block card (country/IP/bot rules) in space access settings (access-plan §5.6).";
-    readonly defaultEnabled: true;
-    readonly runtime: {
-        readonly enabledInDevelopment: true;
-        readonly enabledForA8c: true;
-        readonly planDefaults: {};
-    };
-}, {
-    readonly cohort: "launch";
-    readonly key: "access.sso_connections";
-    readonly name: "Company SSO connections";
-    readonly description: "Enables team-level OIDC connections minted at the authorize endpoint (access-plan §6.2, X-18).";
-    readonly stage: "internal";
+    readonly key: "functions";
+    readonly name: "Spacefast Functions";
+    readonly description: string;
+    readonly stage: "private_beta";
     readonly surface: true;
     readonly defaultEnabled: false;
     readonly runtime: {
-        readonly enabledInDevelopment: true;
         readonly enabledForA8c: true;
         readonly planDefaults: {};
     };
-    readonly assignmentScopes: readonly ["user", "team", "global"];
+    readonly assignmentScopes: readonly ["team", "global"];
     readonly docs: {
-        readonly channel: "handbook";
-        readonly slug: "/features/access/sso-connections";
+        readonly channel: "public";
+        readonly slug: "/docs/apps/functions";
         readonly feedbackUrl: null;
     };
-    readonly owner: "team:access";
+    readonly owner: "team:zero";
     readonly requires: readonly [];
-    readonly lifecycleAdoptedAt: "2026-07-12";
-    readonly reviewAfter: "2026-08-11";
-    readonly removeAfter: "2026-10-10";
+    readonly lifecycleAdoptedAt: "2026-07-27";
+    readonly reviewAfter: "2026-09-02";
+    readonly removeAfter: "2026-11-01";
     readonly gaAt: null;
-    readonly allowedActorPolicies: readonly ["request_actor", "persisted_request_actor"];
+    readonly allowedActorPolicies: readonly ["resource_team"];
     readonly downRamp: {
-        readonly code: "sso_connections_stop";
-        readonly summary: "Deny every customer SSO connection route and callback; internal operator revoke/cleanup continue.";
+        readonly code: "functions_stop";
+        readonly summary: string;
     };
 }, {
     readonly cohort: "launch";
-    readonly key: "access.byo_issuers";
-    readonly name: "Bring-your-own issuers";
-    readonly description: "Enables owner-held external token issuers with ext:-namespace binding (access-plan §6.3, X-19).";
-    readonly stage: "internal";
+    readonly key: "spaces.slug_rename";
+    readonly name: "Space slug rename";
+    readonly description: "Renames a space and its managed hostname while retained former hostnames temporarily redirect to the current address.";
+    readonly stage: "ga";
     readonly surface: true;
-    readonly defaultEnabled: false;
-    readonly runtime: {
-        readonly enabledInDevelopment: true;
-        readonly enabledForA8c: true;
-        readonly planDefaults: {};
-    };
-    readonly assignmentScopes: readonly ["user", "team", "global"];
-    readonly docs: {
-        readonly channel: "handbook";
-        readonly slug: "/features/access/byo-issuers";
-        readonly feedbackUrl: null;
-    };
-    readonly owner: "team:access";
-    readonly requires: readonly [];
-    readonly lifecycleAdoptedAt: "2026-07-12";
-    readonly reviewAfter: "2026-08-11";
-    readonly removeAfter: "2026-10-10";
-    readonly gaAt: null;
-    readonly allowedActorPolicies: readonly ["request_actor", "persisted_request_actor"];
-    readonly downRamp: {
-        readonly code: "byo_issuers_stop";
-        readonly summary: "Deny every customer issuer route and callback; internal operator revoke/cleanup continue.";
-    };
-}, {
-    readonly key: "access.views_panel";
-    readonly name: "Views panel";
-    readonly description: "Enables the identified who-viewed-what panel riding the analytics tiers (access-plan §5.6b, X-28).";
     readonly defaultEnabled: true;
     readonly runtime: {
         readonly enabledInDevelopment: true;
         readonly enabledForA8c: true;
         readonly planDefaults: {};
     };
-}, {
-    readonly cohort: "launch";
-    readonly key: "spaces.slug_rename";
-    readonly name: "Space slug rename";
-    readonly description: "Changes mutable space identity metadata while the stable managed hostname and hostname rows remain unchanged.";
-    readonly stage: "internal";
-    readonly surface: true;
-    readonly defaultEnabled: false;
-    readonly runtime: null;
     readonly assignmentScopes: readonly ["user", "team", "global"];
     readonly docs: {
-        readonly channel: "handbook";
-        readonly slug: "/features/spaces/slug-rename";
+        readonly channel: "public";
+        readonly slug: "/docs/spaces/rename";
         readonly feedbackUrl: null;
     };
     readonly owner: "team:spaces";
@@ -623,11 +474,11 @@ declare const featureEntries: readonly [{
     readonly lifecycleAdoptedAt: "2026-07-12";
     readonly reviewAfter: "2026-08-11";
     readonly removeAfter: "2026-10-10";
-    readonly gaAt: null;
+    readonly gaAt: "2026-07-27";
     readonly allowedActorPolicies: readonly ["request_actor"];
     readonly downRamp: {
         readonly code: "slug_rename_stop";
-        readonly summary: "Deny every new stable-host slug rename; the atomic metadata write has no deferred feature continuation.";
+        readonly summary: "Deny new slug renames while already-committed hostname redirects and runtime convergence continue.";
     };
 }];
 type FeatureEntry = (typeof featureEntries)[number];
@@ -645,5 +496,5 @@ type RuntimeDefinitionRecord<K extends string> = {
     readonly [Key in K]: RuntimeFeatureDefinitionShape<Key>;
 };
 export declare const FEATURE_RUNTIME_KEYS: readonly RuntimeFeatureKey[];
-export declare const FEATURE_RUNTIME_DEFINITIONS: Readonly<RuntimeDefinitionRecord<"zero" | "plans.paid.available" | "anonymous.publishing" | "beta.enrollment_gate" | "domains.search" | "domains.registration" | "domains.dns_management" | "domains.wpcom_dns" | "domains.domain_connect" | "domains.proxy_bindings" | "collab.comments" | "collab.anonymous_commenters" | "collab.notices" | "collab.published_comments" | "collab.drawing" | "sites.dedicated_runtime" | "shelf" | "tags" | "access.invites" | "access.firewall_card" | "access.sso_connections" | "access.byo_issuers" | "access.views_panel">>;
+export declare const FEATURE_RUNTIME_DEFINITIONS: Readonly<RuntimeDefinitionRecord<"zero" | "plans.paid.available" | "anonymous.publishing" | "beta.enrollment_gate" | "domains.search" | "domains.registration" | "domains.dns_management" | "domains.wpcom_dns" | "domains.domain_connect" | "domains.proxy_bindings" | "collab.notices" | "collab.drawing" | "sites.dedicated_runtime" | "shelf" | "tags" | "functions" | "spaces.slug_rename">>;
 export declare const FEATURE_LIFECYCLE_BY_KEY: ReadonlyMap<LifecycleFeatureKey, FeatureRegistryEntry<LifecycleFeatureKey>>;