@spacefast/common 0.0.12 → 0.0.17

package/dist/contracts/runtime-api.d.ts

@@ -17,12 +17,6 @@ export declare const runtimeVersionCreateRequestSchema: z.ZodObject<{
         sourceUrl: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     reusable_version_id: z.ZodOptional<z.ZodString>;
-    session_mode: z.ZodDefault<z.ZodEnum<{
-        open: "open";
-        declared: "declared";
-    }>>;
-    max_total_bytes: z.ZodOptional<z.ZodNumber>;
-    max_file_count: z.ZodOptional<z.ZodNumber>;
     manifest_hash: z.ZodOptional<z.ZodString>;
     expires_at: z.ZodOptional<z.ZodString>;
     metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -41,7 +35,6 @@ export declare const runtimeUploadSessionDescriptorSchema: z.ZodObject<{
     upload_id: z.ZodString;
     space_id: z.ZodString;
     version_id: z.ZodString;
-    session_mode: z.ZodLiteral<"declared">;
     expires_at: z.ZodString;
     manifest_hash: z.ZodOptional<z.ZodString>;
     files: z.ZodArray<z.ZodObject<{
@@ -67,15 +60,12 @@ export declare const runtimeUploadSessionDescriptorSchema: z.ZodObject<{
 }, z.core.$strip>;
 export type RuntimeUploadSessionDescriptor = z.infer<typeof runtimeUploadSessionDescriptorSchema>;
 export declare const RUNTIME_UPLOAD_SESSION_DESCRIPTOR_MAX_BYTES = 4096;
+export declare const RUNTIME_UPLOAD_AUTHORIZATION_HEADER_MAX_BYTES: number;
 export declare const RUNTIME_UPLOAD_SESSION_STORED_MAX_BYTES: number;
 export declare const runtimeUploadSessionResponseSchema: z.ZodObject<{
     space_id: z.ZodString;
     version_id: z.ZodString;
     upload_id: z.ZodString;
-    session_mode: z.ZodEnum<{
-        open: "open";
-        declared: "declared";
-    }>;
     created_at: z.ZodNullable<z.ZodString>;
     expires_at: z.ZodNullable<z.ZodString>;
     manifest_hash: z.ZodNullable<z.ZodString>;
@@ -88,6 +78,160 @@ export declare const runtimeUploadSessionResponseSchema: z.ZodObject<{
     pending_paths: z.ZodArray<z.ZodString>;
     chunks: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodNumber>>;
 }, z.core.$strip>;
+export declare const visitorJwkSchema: z.ZodObject<{
+    kty: z.ZodLiteral<"OKP">;
+    crv: z.ZodLiteral<"Ed25519">;
+    kid: z.ZodString;
+    alg: z.ZodLiteral<"EdDSA">;
+    x: z.ZodString;
+    use: z.ZodOptional<z.ZodLiteral<"sig">>;
+}, z.core.$strip>;
+export declare const visitorJwksSchema: z.ZodObject<{
+    keys: z.ZodArray<z.ZodObject<{
+        kty: z.ZodLiteral<"OKP">;
+        crv: z.ZodLiteral<"Ed25519">;
+        kid: z.ZodString;
+        alg: z.ZodLiteral<"EdDSA">;
+        x: z.ZodString;
+        use: z.ZodOptional<z.ZodLiteral<"sig">>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const runtimePublicExposureDescriptorSchema: z.ZodObject<{
+    v: z.ZodNumber;
+    public: z.ZodBoolean;
+    authorizationDigest: z.ZodString;
+    contentTypes: z.ZodNullable<z.ZodArray<z.ZodString>>;
+    externalProxy: z.ZodBoolean;
+    unmodeled: z.ZodString;
+}, z.core.$strip>;
+export type RuntimePublicExposureDescriptor = z.infer<typeof runtimePublicExposureDescriptorSchema>;
+export declare const runtimeAccessPageDescriptorSchema: z.ZodObject<{
+    displayName: z.ZodNullable<z.ZodString>;
+    accountUrl: z.ZodNullable<z.ZodString>;
+    connections: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        startUrl: z.ZodString;
+    }, z.core.$strip>>;
+    exchange: z.ZodNullable<z.ZodObject<{
+        passwordUrl: z.ZodString;
+        linkUrl: z.ZodString;
+        tokenUrl: z.ZodString;
+        emailUrl: z.ZodString;
+        requestUrl: z.ZodString;
+        logoutUrl: z.ZodString;
+        commentsConfigUrl: z.ZodOptional<z.ZodString>;
+        commentsTicketUrl: z.ZodOptional<z.ZodString>;
+        commentsVersionUrlsUrl: z.ZodOptional<z.ZodString>;
+        zeroRealtimeTicketUrl: z.ZodOptional<z.ZodString>;
+        credential: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strict>;
+export type RuntimeAccessPageDescriptor = z.infer<typeof runtimeAccessPageDescriptorSchema>;
+export declare const RUNTIME_AUTHORIZATION_GRANT_LIMIT = 1024;
+export declare const runtimeAuthorizationProjectionSchema: z.ZodObject<{
+    generation: z.ZodNumber;
+    sessionVersion: z.ZodNumber;
+    fence: z.ZodEnum<{
+        none: "none";
+        ownership: "ownership";
+        exposure: "exposure";
+    }>;
+    acquireUrl: z.ZodString;
+    accessPage: z.ZodObject<{
+        displayName: z.ZodNullable<z.ZodString>;
+        accountUrl: z.ZodNullable<z.ZodString>;
+        connections: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            startUrl: z.ZodString;
+        }, z.core.$strip>>;
+        exchange: z.ZodNullable<z.ZodObject<{
+            passwordUrl: z.ZodString;
+            linkUrl: z.ZodString;
+            tokenUrl: z.ZodString;
+            emailUrl: z.ZodString;
+            requestUrl: z.ZodString;
+            logoutUrl: z.ZodString;
+            commentsConfigUrl: z.ZodOptional<z.ZodString>;
+            commentsTicketUrl: z.ZodOptional<z.ZodString>;
+            commentsVersionUrlsUrl: z.ZodOptional<z.ZodString>;
+            zeroRealtimeTicketUrl: z.ZodOptional<z.ZodString>;
+            credential: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strict>;
+    spaceClaimed: z.ZodBoolean;
+    grants: z.ZodArray<z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        audience: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"public">;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"team">;
+            teamId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"person">;
+            personId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"link">;
+            linkId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"password">;
+            credentialId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"machine">;
+            machineId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"external">;
+            issuer: z.ZodString;
+            subject: z.ZodString;
+        }, z.core.$strict>], "kind">;
+        resources: z.ZodObject<{
+            include: z.ZodArray<z.ZodString>;
+            exclude: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>;
+        capabilities: z.ZodArray<z.ZodEnum<{
+            "page.view": "page.view";
+            "comments.read": "comments.read";
+            "comments.write": "comments.write";
+            "content.publish": "content.publish";
+            "access.manage": "access.manage";
+        }>>;
+        constraints: z.ZodDefault<z.ZodObject<{
+            notBefore: z.ZodOptional<z.ZodString>;
+            expiresAt: z.ZodOptional<z.ZodString>;
+            maxUses: z.ZodOptional<z.ZodNumber>;
+            requireVerifiedEmail: z.ZodOptional<z.ZodBoolean>;
+            network: z.ZodOptional<z.ZodObject<{
+                ipCidrs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                countries: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                excludedCountries: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                excludedUserAgentSubstrings: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"live">;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"version">;
+            versionId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"branch">;
+            branch: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"all_versions">;
+        }, z.core.$strict>], "kind">;
+        id: z.ZodString;
+        source: z.ZodObject<{
+            kind: z.ZodEnum<{
+                config: "config";
+                system: "system";
+                managed: "managed";
+            }>;
+            reference: z.ZodString;
+        }, z.core.$strict>;
+        generation: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type RuntimeAuthorizationProjection = z.infer<typeof runtimeAuthorizationProjectionSchema>;
 export declare const runtimeZeroModeSchema: z.ZodEnum<{
     active: "active";
     activating: "activating";
@@ -99,7 +243,6 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
         upload_id: z.ZodString;
         space_id: z.ZodString;
         version_id: z.ZodString;
-        session_mode: z.ZodLiteral<"declared">;
         expires_at: z.ZodString;
         manifest_hash: z.ZodOptional<z.ZodString>;
         files: z.ZodArray<z.ZodObject<{
@@ -129,22 +272,18 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
     }>>;
     zero: z.ZodOptional<z.ZodObject<{
         auth: z.ZodDefault<z.ZodObject<{
-            provider: z.ZodDefault<z.ZodLiteral<"wpcom">>;
-            signInPath: z.ZodDefault<z.ZodNullable<z.ZodLiteral<"/__spacefast/zero/auth/wpcom/start">>>;
+            provider: z.ZodDefault<z.ZodLiteral<"gravatar">>;
+            signInPath: z.ZodDefault<z.ZodNullable<z.ZodLiteral<"/__spacefast/zero/auth/gravatar/start">>>;
             signInUrl: z.ZodDefault<z.ZodNullable<z.ZodString>>;
             signOutPath: z.ZodDefault<z.ZodNullable<z.ZodLiteral<"/__spacefast/zero/auth/sign-out">>>;
             signOutUrl: z.ZodDefault<z.ZodNullable<z.ZodString>>;
             returnToParam: z.ZodDefault<z.ZodString>;
         }, z.core.$strict>>;
-        variables: z.ZodObject<{
-            source: z.ZodLiteral<"stattic-variables">;
-            names: z.ZodDefault<z.ZodArray<z.ZodString>>;
-        }, z.core.$strict>;
         realtime: z.ZodObject<{
             mode: z.ZodEnum<{
-                "stattic-central": "stattic-central";
-                "spacefast-cast": "spacefast-cast";
-                "local-dev": "local-dev";
+                local: "local";
+                cast: "cast";
+                central: "central";
             }>;
             centralUrl: z.ZodDefault<z.ZodNullable<z.ZodString>>;
             replayUrl: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -154,86 +293,9 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
                 token: z.ZodString;
             }, z.core.$strict>>;
         }, z.core.$strict>;
-        runtimeKind: z.ZodLiteral<"zero">;
-        migrations: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-            format: z.ZodLiteral<"stattic.zero.migrations.v1">;
-            mode: z.ZodDefault<z.ZodEnum<{
-                safe: "safe";
-                drop: "drop";
-                rename: "rename";
-            }>>;
-            schemaHash: z.ZodString;
-            operations: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-                op: z.ZodLiteral<"create_table">;
-                table: z.ZodString;
-            }, z.core.$strict>, z.ZodObject<{
-                op: z.ZodLiteral<"add_column">;
-                table: z.ZodString;
-                column: z.ZodObject<{
-                    name: z.ZodString;
-                    type: z.ZodEnum<{
-                        string: "string";
-                        number: "number";
-                        boolean: "boolean";
-                        json: "json";
-                    }>;
-                    nullable: z.ZodDefault<z.ZodBoolean>;
-                    default: z.ZodOptional<z.ZodUnknown>;
-                }, z.core.$strict>;
-            }, z.core.$strict>, z.ZodObject<{
-                op: z.ZodLiteral<"add_index">;
-                table: z.ZodString;
-                columns: z.ZodArray<z.ZodString>;
-                unique: z.ZodDefault<z.ZodBoolean>;
-            }, z.core.$strict>, z.ZodObject<{
-                op: z.ZodLiteral<"drop_table">;
-                table: z.ZodString;
-                explicit: z.ZodLiteral<"drop">;
-            }, z.core.$strict>, z.ZodObject<{
-                op: z.ZodLiteral<"drop_column">;
-                table: z.ZodString;
-                column: z.ZodString;
-                explicit: z.ZodLiteral<"drop">;
-            }, z.core.$strict>, z.ZodObject<{
-                op: z.ZodLiteral<"rename_table">;
-                from: z.ZodString;
-                to: z.ZodString;
-                explicit: z.ZodLiteral<"rename">;
-            }, z.core.$strict>, z.ZodObject<{
-                op: z.ZodLiteral<"rename_column">;
-                table: z.ZodString;
-                from: z.ZodString;
-                to: z.ZodString;
-                explicit: z.ZodLiteral<"rename">;
-            }, z.core.$strict>], "op">>;
-        }, z.core.$strict>>>;
-        install: z.ZodObject<{
-            runtimeKind: z.ZodLiteral<"zero">;
-            engine: z.ZodLiteral<"quickjs-rust">;
-            storageRoot: z.ZodLiteral<"__spacefast/zero">;
-            artifactPath: z.ZodLiteral<"__spacefast/zero/artifact.json">;
-            configPath: z.ZodLiteral<"__spacefast/zero/config.json">;
-            binary: z.ZodObject<{
-                path: z.ZodLiteral<"__spacefast/zero/bin/stattic-zero-runner">;
-                compatibilityTarget: z.ZodObject<{
-                    profile: z.ZodLiteral<"wpcloud-linux-x86_64-gnu-v1">;
-                    os: z.ZodLiteral<"linux">;
-                    cpu: z.ZodLiteral<"x86_64">;
-                    libc: z.ZodLiteral<"glibc">;
-                    linking: z.ZodLiteral<"dynamic">;
-                    requireExecutableBit: z.ZodLiteral<true>;
-                }, z.core.$strict>;
-                sha256: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-                required: z.ZodLiteral<true>;
-            }, z.core.$strict>;
-            mysql: z.ZodObject<{
-                migrateAtFinalize: z.ZodLiteral<true>;
-                blockIncompatibleRollback: z.ZodLiteral<true>;
-            }, z.core.$strict>;
-            realtime: z.ZodObject<{
-                production: z.ZodLiteral<"stattic-central">;
-                local: z.ZodLiteral<"foreground-cli-ws">;
-            }, z.core.$strict>;
+        variables: z.ZodObject<{
+            source: z.ZodLiteral<"stattic-variables">;
+            names: z.ZodDefault<z.ZodArray<z.ZodString>>;
         }, z.core.$strict>;
         artifact: z.ZodObject<{
             format: z.ZodLiteral<"stattic.zero.capsule.v1">;
@@ -258,9 +320,14 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
                         nullable: z.ZodDefault<z.ZodBoolean>;
                         default: z.ZodOptional<z.ZodUnknown>;
                     }, z.core.$strict>>>;
+                    indexes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                        name: z.ZodString;
+                        fields: z.ZodArray<z.ZodString>;
+                    }, z.core.$strict>>>;
                 }, z.core.$strict>>>;
                 queries: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 mutations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                actions: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 endpoints: z.ZodDefault<z.ZodArray<z.ZodObject<{
                     method: z.ZodEnum<{
                         POST: "POST";
@@ -297,8 +364,14 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
                 }, z.core.$strict>, z.ZodObject<{
                     op: z.ZodLiteral<"add_index">;
                     table: z.ZodString;
+                    name: z.ZodString;
                     columns: z.ZodArray<z.ZodString>;
                     unique: z.ZodDefault<z.ZodBoolean>;
+                }, z.core.$strict>, z.ZodObject<{
+                    op: z.ZodLiteral<"drop_index">;
+                    table: z.ZodString;
+                    name: z.ZodString;
+                    explicit: z.ZodLiteral<"drop">;
                 }, z.core.$strict>, z.ZodObject<{
                     op: z.ZodLiteral<"drop_table">;
                     table: z.ZodString;
@@ -323,9 +396,9 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
             }, z.core.$strict>;
             realtime: z.ZodObject<{
                 mode: z.ZodEnum<{
-                    "stattic-central": "stattic-central";
-                    "spacefast-cast": "spacefast-cast";
-                    "local-dev": "local-dev";
+                    local: "local";
+                    cast: "cast";
+                    central: "central";
                 }>;
                 mutationEvents: z.ZodDefault<z.ZodBoolean>;
             }, z.core.$strict>;
@@ -337,8 +410,8 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
             }>>>;
             sourceManifest: z.ZodObject<{
                 entries: z.ZodObject<{
-                    client: z.ZodLiteral<"client/index.tsx">;
-                    server: z.ZodLiteral<"server/index.ts">;
+                    client: z.ZodString;
+                    server: z.ZodString;
                 }, z.core.$strict>;
                 sourceRoot: z.ZodString;
                 files: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -347,22 +420,99 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
                     sha256: z.ZodString;
                 }, z.core.$strict>>>;
                 env: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-                    file: z.ZodLiteral<".env.zero.server">;
+                    file: z.ZodEnum<{
+                        ".env.server": ".env.server";
+                        ".env.lakebed.server": ".env.lakebed.server";
+                    }>;
                     names: z.ZodDefault<z.ZodArray<z.ZodString>>;
                 }, z.core.$strip>>>;
-                sourceConfig: z.ZodDefault<z.ZodObject<{
-                    configFile: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-                        path: z.ZodLiteral<"zero.json">;
-                        appName: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-                        deployId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-                        name: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-                        title: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-                    }, z.core.$strip>>>;
-                    deployFile: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-                        path: z.ZodLiteral<".zero/deploy.json">;
-                        keys: z.ZodDefault<z.ZodArray<z.ZodString>>;
-                    }, z.core.$strip>>>;
-                }, z.core.$strip>>;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        runtimeKind: z.ZodLiteral<"zero">;
+        migrations: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            format: z.ZodLiteral<"stattic.zero.migrations.v1">;
+            mode: z.ZodDefault<z.ZodEnum<{
+                safe: "safe";
+                drop: "drop";
+                rename: "rename";
+            }>>;
+            schemaHash: z.ZodString;
+            operations: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                op: z.ZodLiteral<"create_table">;
+                table: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                op: z.ZodLiteral<"add_column">;
+                table: z.ZodString;
+                column: z.ZodObject<{
+                    name: z.ZodString;
+                    type: z.ZodEnum<{
+                        string: "string";
+                        number: "number";
+                        boolean: "boolean";
+                        json: "json";
+                    }>;
+                    nullable: z.ZodDefault<z.ZodBoolean>;
+                    default: z.ZodOptional<z.ZodUnknown>;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                op: z.ZodLiteral<"add_index">;
+                table: z.ZodString;
+                name: z.ZodString;
+                columns: z.ZodArray<z.ZodString>;
+                unique: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strict>, z.ZodObject<{
+                op: z.ZodLiteral<"drop_index">;
+                table: z.ZodString;
+                name: z.ZodString;
+                explicit: z.ZodLiteral<"drop">;
+            }, z.core.$strict>, z.ZodObject<{
+                op: z.ZodLiteral<"drop_table">;
+                table: z.ZodString;
+                explicit: z.ZodLiteral<"drop">;
+            }, z.core.$strict>, z.ZodObject<{
+                op: z.ZodLiteral<"drop_column">;
+                table: z.ZodString;
+                column: z.ZodString;
+                explicit: z.ZodLiteral<"drop">;
+            }, z.core.$strict>, z.ZodObject<{
+                op: z.ZodLiteral<"rename_table">;
+                from: z.ZodString;
+                to: z.ZodString;
+                explicit: z.ZodLiteral<"rename">;
+            }, z.core.$strict>, z.ZodObject<{
+                op: z.ZodLiteral<"rename_column">;
+                table: z.ZodString;
+                from: z.ZodString;
+                to: z.ZodString;
+                explicit: z.ZodLiteral<"rename">;
+            }, z.core.$strict>], "op">>;
+        }, z.core.$strict>>>;
+        install: z.ZodObject<{
+            runtimeKind: z.ZodLiteral<"zero">;
+            engine: z.ZodLiteral<"quickjs-rust">;
+            storageRoot: z.ZodLiteral<"__spacefast/zero">;
+            artifactPath: z.ZodLiteral<"__spacefast/zero/artifact.json">;
+            configPath: z.ZodLiteral<"__spacefast/zero/config.json">;
+            binary: z.ZodObject<{
+                path: z.ZodLiteral<"__spacefast/zero/bin/stattic-runtime">;
+                compatibilityTarget: z.ZodObject<{
+                    profile: z.ZodLiteral<"wpcloud-linux-x86_64-gnu-v1">;
+                    os: z.ZodLiteral<"linux">;
+                    cpu: z.ZodLiteral<"x86_64">;
+                    libc: z.ZodLiteral<"glibc">;
+                    linking: z.ZodLiteral<"dynamic">;
+                    requireExecutableBit: z.ZodLiteral<true>;
+                }, z.core.$strict>;
+                sha256: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                required: z.ZodLiteral<true>;
+            }, z.core.$strict>;
+            mysql: z.ZodObject<{
+                migrateAtFinalize: z.ZodLiteral<true>;
+                blockIncompatibleRollback: z.ZodLiteral<true>;
+            }, z.core.$strict>;
+            realtime: z.ZodObject<{
+                production: z.ZodLiteral<"central">;
+                local: z.ZodLiteral<"foreground-cli-ws">;
             }, z.core.$strict>;
         }, z.core.$strict>;
         inspect: z.ZodDefault<z.ZodObject<{
@@ -372,8 +522,69 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
             }>>;
         }, z.core.$strict>>;
         variableValues: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        databaseUrlSource: z.ZodDefault<z.ZodEnum<{
+            provider: "provider";
+            application: "application";
+        }>>;
+    }, z.core.$strict>>;
+    functions: z.ZodOptional<z.ZodObject<{
+        runtimeKind: z.ZodLiteral<"functions">;
+        artifact: z.ZodObject<{
+            format: z.ZodLiteral<"spacefast.functions.worker.v1">;
+            appName: z.ZodString;
+            entry: z.ZodString;
+            mainModule: z.ZodString;
+            bundle: z.ZodObject<{
+                path: z.ZodString;
+                sha256: z.ZodString;
+                size: z.ZodNumber;
+            }, z.core.$strict>;
+            compatibilityDate: z.ZodString;
+            compatibilityFlags: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            routes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                method: z.ZodDefault<z.ZodNullable<z.ZodEnum<{
+                    POST: "POST";
+                    PUT: "PUT";
+                    GET: "GET";
+                    HEAD: "HEAD";
+                    PATCH: "PATCH";
+                    DELETE: "DELETE";
+                    OPTIONS: "OPTIONS";
+                }>>>;
+                path: z.ZodString;
+                subtree: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strict>>>;
+            capabilities: z.ZodDefault<z.ZodObject<{
+                db: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                fetch: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                auth: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                env: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                realtime: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                logging: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+            }, z.core.$strip>>;
+        }, z.core.$strict>;
+        variables: z.ZodDefault<z.ZodObject<{
+            source: z.ZodLiteral<"spacefast-variables">;
+            names: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+        host: z.ZodObject<{
+            hostname: z.ZodString;
+            bundleUrl: z.ZodString;
+        }, z.core.$strict>;
+        grantedCapabilities: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            fetch: "fetch";
+            "db.read": "db.read";
+            "db.write": "db.write";
+            log: "log";
+        }>>>;
+        relay: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            url: z.ZodString;
+            token: z.ZodString;
+            maxBatchStatements: z.ZodNumber;
+            maxConcurrentCalls: z.ZodNumber;
+        }, z.core.$strict>>>;
+        variableValues: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
     }, z.core.$strict>>;
-    ready_at: z.ZodOptional<z.ZodNumber>;
     convention_files: z.ZodOptional<z.ZodObject<{
         redirects: z.ZodOptional<z.ZodString>;
         headers: z.ZodOptional<z.ZodString>;
@@ -403,9 +614,8 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
             pages: z.ZodOptional<z.ZodObject<{
                 routes: z.ZodRecord<z.ZodString, z.ZodObject<{
                     pages: z.ZodOptional<z.ZodRecord<z.ZodEnum<{
-                        login: "login";
-                        password: "password";
                         denied: "denied";
+                        access: "access";
                         404: "404";
                     }>, z.ZodString>>;
                     index: z.ZodOptional<z.ZodString>;
@@ -418,6 +628,7 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
                 cast_api_base: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                 cast_ws_url: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                 cast_resource_key: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                published_comments: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>>;
             inject: z.ZodOptional<z.ZodObject<{
                 head: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -468,72 +679,129 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
     activate: z.ZodOptional<z.ZodObject<{
         route_name: z.ZodDefault<z.ZodString>;
         config: z.ZodOptional<z.ZodObject<{
-            policy: z.ZodOptional<z.ZodNullable<z.ZodObject<{
-                rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
-                    id: z.ZodOptional<z.ZodString>;
-                    match: z.ZodDefault<z.ZodObject<{
-                        host: z.ZodOptional<z.ZodString>;
-                        hostPattern: z.ZodOptional<z.ZodString>;
-                        hostTemplate: z.ZodOptional<z.ZodString>;
-                        pathPattern: z.ZodOptional<z.ZodString>;
-                        channel: z.ZodOptional<z.ZodString>;
-                        ipCidrs: z.ZodOptional<z.ZodArray<z.ZodString>>;
-                        agent: z.ZodOptional<z.ZodString>;
-                        country: z.ZodOptional<z.ZodString>;
-                        countryNotIn: z.ZodOptional<z.ZodArray<z.ZodString>>;
-                        header: z.ZodOptional<z.ZodObject<{
-                            name: z.ZodString;
-                            value: z.ZodString;
-                        }, z.core.$strip>>;
+            authorization: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                generation: z.ZodNumber;
+                sessionVersion: z.ZodNumber;
+                fence: z.ZodEnum<{
+                    none: "none";
+                    ownership: "ownership";
+                    exposure: "exposure";
+                }>;
+                acquireUrl: z.ZodString;
+                accessPage: z.ZodObject<{
+                    displayName: z.ZodNullable<z.ZodString>;
+                    accountUrl: z.ZodNullable<z.ZodString>;
+                    connections: z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        label: z.ZodString;
+                        startUrl: z.ZodString;
                     }, z.core.$strip>>;
-                    effect: z.ZodEnum<{
-                        allow: "allow";
-                        deny: "deny";
-                        challenge: "challenge";
-                    }>;
-                    auth: z.ZodOptional<z.ZodObject<{
-                        requiredGrants: z.ZodArray<z.ZodString>;
-                        issuers: z.ZodOptional<z.ZodArray<z.ZodObject<{
-                            kid: z.ZodString;
-                            alg: z.ZodLiteral<"EdDSA">;
-                            publicKey: z.ZodString;
-                            grantNamespaces: z.ZodArray<z.ZodString>;
-                        }, z.core.$strip>>>;
-                        acquire: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-                            type: z.ZodLiteral<"password">;
-                            ref: z.ZodString;
-                            transport: z.ZodEnum<{
-                                basic: "basic";
-                                form: "form";
-                            }>;
-                            username: z.ZodOptional<z.ZodString>;
-                        }, z.core.$strip>, z.ZodObject<{
-                            type: z.ZodLiteral<"login">;
-                            url: z.ZodString;
-                            label: z.ZodOptional<z.ZodString>;
-                        }, z.core.$strip>], "type">>>;
+                    exchange: z.ZodNullable<z.ZodObject<{
+                        passwordUrl: z.ZodString;
+                        linkUrl: z.ZodString;
+                        tokenUrl: z.ZodString;
+                        emailUrl: z.ZodString;
+                        requestUrl: z.ZodString;
+                        logoutUrl: z.ZodString;
+                        commentsConfigUrl: z.ZodOptional<z.ZodString>;
+                        commentsTicketUrl: z.ZodOptional<z.ZodString>;
+                        commentsVersionUrlsUrl: z.ZodOptional<z.ZodString>;
+                        zeroRealtimeTicketUrl: z.ZodOptional<z.ZodString>;
+                        credential: z.ZodString;
                     }, z.core.$strip>>;
-                    managedBy: z.ZodOptional<z.ZodEnum<{
-                        sharing: "sharing";
-                        firewall: "firewall";
-                        file_share: "file_share";
-                        cast_reviewer: "cast_reviewer";
-                        team_default: "team_default";
+                }, z.core.$strict>;
+                spaceClaimed: z.ZodBoolean;
+                grants: z.ZodArray<z.ZodObject<{
+                    name: z.ZodOptional<z.ZodString>;
+                    audience: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                        kind: z.ZodLiteral<"public">;
+                    }, z.core.$strict>, z.ZodObject<{
+                        kind: z.ZodLiteral<"team">;
+                        teamId: z.ZodString;
+                    }, z.core.$strict>, z.ZodObject<{
+                        kind: z.ZodLiteral<"person">;
+                        personId: z.ZodString;
+                    }, z.core.$strict>, z.ZodObject<{
+                        kind: z.ZodLiteral<"link">;
+                        linkId: z.ZodString;
+                    }, z.core.$strict>, z.ZodObject<{
+                        kind: z.ZodLiteral<"password">;
+                        credentialId: z.ZodString;
+                    }, z.core.$strict>, z.ZodObject<{
+                        kind: z.ZodLiteral<"machine">;
+                        machineId: z.ZodString;
+                    }, z.core.$strict>, z.ZodObject<{
+                        kind: z.ZodLiteral<"external">;
+                        issuer: z.ZodString;
+                        subject: z.ZodString;
+                    }, z.core.$strict>], "kind">;
+                    resources: z.ZodObject<{
+                        include: z.ZodArray<z.ZodString>;
+                        exclude: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    }, z.core.$strict>;
+                    capabilities: z.ZodArray<z.ZodEnum<{
+                        "page.view": "page.view";
+                        "comments.read": "comments.read";
+                        "comments.write": "comments.write";
+                        "content.publish": "content.publish";
+                        "access.manage": "access.manage";
                     }>>;
-                    expiresAt: z.ZodOptional<z.ZodNumber>;
-                    reasonCode: z.ZodOptional<z.ZodString>;
-                    message: z.ZodOptional<z.ZodString>;
-                }, z.core.$strip>>>;
-                issuers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    constraints: z.ZodDefault<z.ZodObject<{
+                        notBefore: z.ZodOptional<z.ZodString>;
+                        expiresAt: z.ZodOptional<z.ZodString>;
+                        maxUses: z.ZodOptional<z.ZodNumber>;
+                        requireVerifiedEmail: z.ZodOptional<z.ZodBoolean>;
+                        network: z.ZodOptional<z.ZodObject<{
+                            ipCidrs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                            countries: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                            excludedCountries: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                            excludedUserAgentSubstrings: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
+                    target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                        kind: z.ZodLiteral<"live">;
+                    }, z.core.$strict>, z.ZodObject<{
+                        kind: z.ZodLiteral<"version">;
+                        versionId: z.ZodString;
+                    }, z.core.$strict>, z.ZodObject<{
+                        kind: z.ZodLiteral<"branch">;
+                        branch: z.ZodString;
+                    }, z.core.$strict>, z.ZodObject<{
+                        kind: z.ZodLiteral<"all_versions">;
+                    }, z.core.$strict>], "kind">;
+                    id: z.ZodString;
+                    source: z.ZodObject<{
+                        kind: z.ZodEnum<{
+                            config: "config";
+                            system: "system";
+                            managed: "managed";
+                        }>;
+                        reference: z.ZodString;
+                    }, z.core.$strict>;
+                    generation: z.ZodNumber;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>>;
+            public_exposure_digest: z.ZodOptional<z.ZodString>;
+            public_exposure: z.ZodOptional<z.ZodObject<{
+                v: z.ZodNumber;
+                public: z.ZodBoolean;
+                authorizationDigest: z.ZodString;
+                contentTypes: z.ZodNullable<z.ZodArray<z.ZodString>>;
+                externalProxy: z.ZodBoolean;
+                unmodeled: z.ZodString;
+            }, z.core.$strip>>;
+            projection_generation: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            visitor_issuer: z.ZodOptional<z.ZodString>;
+            visitor_jwks: z.ZodOptional<z.ZodObject<{
+                keys: z.ZodArray<z.ZodObject<{
+                    kty: z.ZodLiteral<"OKP">;
+                    crv: z.ZodLiteral<"Ed25519">;
                     kid: z.ZodString;
                     alg: z.ZodLiteral<"EdDSA">;
-                    publicKey: z.ZodString;
-                    grantNamespaces: z.ZodArray<z.ZodString>;
-                }, z.core.$strip>>>;
-                sessionVersion: z.ZodOptional<z.ZodNumber>;
-            }, z.core.$strip>>>;
-            secrets: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodString>>>;
-            session_version: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+                    x: z.ZodString;
+                    use: z.ZodOptional<z.ZodLiteral<"sig">>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
             anonymous_expires_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             content_types: z.ZodOptional<z.ZodNullable<z.ZodObject<{
                 allowed: z.ZodArray<z.ZodString>;
@@ -542,7 +810,10 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
             admission: z.ZodOptional<z.ZodObject<{
                 concurrency: z.ZodNumber;
             }, z.core.$strip>>;
-            revocations: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            tag_sdk: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                revision: z.ZodString;
+                body: z.ZodString;
+            }, z.core.$strip>>>;
             entitlements: z.ZodOptional<z.ZodNullable<z.ZodObject<{
                 externalProxy: z.ZodBoolean;
             }, z.core.$strip>>>;
@@ -561,14 +832,12 @@ export declare const runtimeVersionFinalizeRequestSchema: z.ZodObject<{
             to: z.ZodString;
             status: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<307>, z.ZodLiteral<308>]>>;
         }, z.core.$strip>>>;
-        static_mount_routes: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            hostname: z.ZodString;
-            path_prefix: z.ZodString;
-            target_space_id: z.ZodString;
-            target_version_id: z.ZodString;
-        }, z.core.$strip>>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
+export declare const runtimeReadinessTargetSchema: z.ZodObject<{
+    path: z.ZodString;
+    expected_statuses: z.ZodArray<z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodLiteral<200>, z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<303>, z.ZodLiteral<307>, z.ZodLiteral<308>, z.ZodLiteral<401>, z.ZodLiteral<403>]>, z.ZodLiteral<404>]>>;
+}, z.core.$strip>;
 export declare const runtimeVersionFinalizeResponseSchema: z.ZodObject<{
     space_id: z.ZodString;
     version_id: z.ZodString;
@@ -581,76 +850,143 @@ export declare const runtimeVersionFinalizeResponseSchema: z.ZodObject<{
         contentType: z.ZodOptional<z.ZodString>;
         sourceUrl: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
+    readiness_target: z.ZodObject<{
+        path: z.ZodString;
+        expected_statuses: z.ZodArray<z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodLiteral<200>, z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<303>, z.ZodLiteral<307>, z.ZodLiteral<308>, z.ZodLiteral<401>, z.ZodLiteral<403>]>, z.ZodLiteral<404>]>>;
+    }, z.core.$strip>;
+    activation_event_id: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const runtimeZeroMigrationsApplyResponseSchema: z.ZodObject<{
+    space_id: z.ZodString;
+    version_id: z.ZodString;
+    applied: z.ZodLiteral<true>;
 }, z.core.$strip>;
 export declare const runtimeRouteUpdateRequestSchema: z.ZodObject<{
     version_id: z.ZodString;
     config: z.ZodOptional<z.ZodObject<{
-        policy: z.ZodOptional<z.ZodNullable<z.ZodObject<{
-            rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
-                id: z.ZodOptional<z.ZodString>;
-                match: z.ZodDefault<z.ZodObject<{
-                    host: z.ZodOptional<z.ZodString>;
-                    hostPattern: z.ZodOptional<z.ZodString>;
-                    hostTemplate: z.ZodOptional<z.ZodString>;
-                    pathPattern: z.ZodOptional<z.ZodString>;
-                    channel: z.ZodOptional<z.ZodString>;
-                    ipCidrs: z.ZodOptional<z.ZodArray<z.ZodString>>;
-                    agent: z.ZodOptional<z.ZodString>;
-                    country: z.ZodOptional<z.ZodString>;
-                    countryNotIn: z.ZodOptional<z.ZodArray<z.ZodString>>;
-                    header: z.ZodOptional<z.ZodObject<{
-                        name: z.ZodString;
-                        value: z.ZodString;
-                    }, z.core.$strip>>;
+        authorization: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            generation: z.ZodNumber;
+            sessionVersion: z.ZodNumber;
+            fence: z.ZodEnum<{
+                none: "none";
+                ownership: "ownership";
+                exposure: "exposure";
+            }>;
+            acquireUrl: z.ZodString;
+            accessPage: z.ZodObject<{
+                displayName: z.ZodNullable<z.ZodString>;
+                accountUrl: z.ZodNullable<z.ZodString>;
+                connections: z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    label: z.ZodString;
+                    startUrl: z.ZodString;
                 }, z.core.$strip>>;
-                effect: z.ZodEnum<{
-                    allow: "allow";
-                    deny: "deny";
-                    challenge: "challenge";
-                }>;
-                auth: z.ZodOptional<z.ZodObject<{
-                    requiredGrants: z.ZodArray<z.ZodString>;
-                    issuers: z.ZodOptional<z.ZodArray<z.ZodObject<{
-                        kid: z.ZodString;
-                        alg: z.ZodLiteral<"EdDSA">;
-                        publicKey: z.ZodString;
-                        grantNamespaces: z.ZodArray<z.ZodString>;
-                    }, z.core.$strip>>>;
-                    acquire: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-                        type: z.ZodLiteral<"password">;
-                        ref: z.ZodString;
-                        transport: z.ZodEnum<{
-                            basic: "basic";
-                            form: "form";
-                        }>;
-                        username: z.ZodOptional<z.ZodString>;
-                    }, z.core.$strip>, z.ZodObject<{
-                        type: z.ZodLiteral<"login">;
-                        url: z.ZodString;
-                        label: z.ZodOptional<z.ZodString>;
-                    }, z.core.$strip>], "type">>>;
+                exchange: z.ZodNullable<z.ZodObject<{
+                    passwordUrl: z.ZodString;
+                    linkUrl: z.ZodString;
+                    tokenUrl: z.ZodString;
+                    emailUrl: z.ZodString;
+                    requestUrl: z.ZodString;
+                    logoutUrl: z.ZodString;
+                    commentsConfigUrl: z.ZodOptional<z.ZodString>;
+                    commentsTicketUrl: z.ZodOptional<z.ZodString>;
+                    commentsVersionUrlsUrl: z.ZodOptional<z.ZodString>;
+                    zeroRealtimeTicketUrl: z.ZodOptional<z.ZodString>;
+                    credential: z.ZodString;
                 }, z.core.$strip>>;
-                managedBy: z.ZodOptional<z.ZodEnum<{
-                    sharing: "sharing";
-                    firewall: "firewall";
-                    file_share: "file_share";
-                    cast_reviewer: "cast_reviewer";
-                    team_default: "team_default";
+            }, z.core.$strict>;
+            spaceClaimed: z.ZodBoolean;
+            grants: z.ZodArray<z.ZodObject<{
+                name: z.ZodOptional<z.ZodString>;
+                audience: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"public">;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"team">;
+                    teamId: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"person">;
+                    personId: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"link">;
+                    linkId: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"password">;
+                    credentialId: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"machine">;
+                    machineId: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"external">;
+                    issuer: z.ZodString;
+                    subject: z.ZodString;
+                }, z.core.$strict>], "kind">;
+                resources: z.ZodObject<{
+                    include: z.ZodArray<z.ZodString>;
+                    exclude: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                }, z.core.$strict>;
+                capabilities: z.ZodArray<z.ZodEnum<{
+                    "page.view": "page.view";
+                    "comments.read": "comments.read";
+                    "comments.write": "comments.write";
+                    "content.publish": "content.publish";
+                    "access.manage": "access.manage";
                 }>>;
-                expiresAt: z.ZodOptional<z.ZodNumber>;
-                reasonCode: z.ZodOptional<z.ZodString>;
-                message: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>>>;
-            issuers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                constraints: z.ZodDefault<z.ZodObject<{
+                    notBefore: z.ZodOptional<z.ZodString>;
+                    expiresAt: z.ZodOptional<z.ZodString>;
+                    maxUses: z.ZodOptional<z.ZodNumber>;
+                    requireVerifiedEmail: z.ZodOptional<z.ZodBoolean>;
+                    network: z.ZodOptional<z.ZodObject<{
+                        ipCidrs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        countries: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        excludedCountries: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        excludedUserAgentSubstrings: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    }, z.core.$strict>>;
+                }, z.core.$strict>>;
+                target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"live">;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"version">;
+                    versionId: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"branch">;
+                    branch: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"all_versions">;
+                }, z.core.$strict>], "kind">;
+                id: z.ZodString;
+                source: z.ZodObject<{
+                    kind: z.ZodEnum<{
+                        config: "config";
+                        system: "system";
+                        managed: "managed";
+                    }>;
+                    reference: z.ZodString;
+                }, z.core.$strict>;
+                generation: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>>;
+        public_exposure_digest: z.ZodOptional<z.ZodString>;
+        public_exposure: z.ZodOptional<z.ZodObject<{
+            v: z.ZodNumber;
+            public: z.ZodBoolean;
+            authorizationDigest: z.ZodString;
+            contentTypes: z.ZodNullable<z.ZodArray<z.ZodString>>;
+            externalProxy: z.ZodBoolean;
+            unmodeled: z.ZodString;
+        }, z.core.$strip>>;
+        projection_generation: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        visitor_issuer: z.ZodOptional<z.ZodString>;
+        visitor_jwks: z.ZodOptional<z.ZodObject<{
+            keys: z.ZodArray<z.ZodObject<{
+                kty: z.ZodLiteral<"OKP">;
+                crv: z.ZodLiteral<"Ed25519">;
                 kid: z.ZodString;
                 alg: z.ZodLiteral<"EdDSA">;
-                publicKey: z.ZodString;
-                grantNamespaces: z.ZodArray<z.ZodString>;
-            }, z.core.$strip>>>;
-            sessionVersion: z.ZodOptional<z.ZodNumber>;
-        }, z.core.$strip>>>;
-        secrets: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodString>>>;
-        session_version: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+                x: z.ZodString;
+                use: z.ZodOptional<z.ZodLiteral<"sig">>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
         anonymous_expires_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         content_types: z.ZodOptional<z.ZodNullable<z.ZodObject<{
             allowed: z.ZodArray<z.ZodString>;
@@ -659,7 +995,10 @@ export declare const runtimeRouteUpdateRequestSchema: z.ZodObject<{
         admission: z.ZodOptional<z.ZodObject<{
             concurrency: z.ZodNumber;
         }, z.core.$strip>>;
-        revocations: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        tag_sdk: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            revision: z.ZodString;
+            body: z.ZodString;
+        }, z.core.$strip>>>;
         entitlements: z.ZodOptional<z.ZodNullable<z.ZodObject<{
             externalProxy: z.ZodBoolean;
         }, z.core.$strip>>>;
@@ -678,12 +1017,6 @@ export declare const runtimeRouteUpdateRequestSchema: z.ZodObject<{
         to: z.ZodString;
         status: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<307>, z.ZodLiteral<308>]>>;
     }, z.core.$strip>>>;
-    static_mount_routes: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        hostname: z.ZodString;
-        path_prefix: z.ZodString;
-        target_space_id: z.ZodString;
-        target_version_id: z.ZodString;
-    }, z.core.$strip>>>;
 }, z.core.$strip>;
 export declare const runtimeHostnameIntentUpdateRequestSchema: z.ZodObject<{
     production_hostnames: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -697,18 +1030,13 @@ export declare const runtimeHostnameIntentUpdateRequestSchema: z.ZodObject<{
         to: z.ZodString;
         status: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<307>, z.ZodLiteral<308>]>>;
     }, z.core.$strip>>>;
-    static_mount_routes: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        hostname: z.ZodString;
-        path_prefix: z.ZodString;
-        target_space_id: z.ZodString;
-        target_version_id: z.ZodString;
-    }, z.core.$strip>>>;
 }, z.core.$strip>;
 export declare const runtimeRouteUpdateResponseSchema: z.ZodObject<{
     space_id: z.ZodString;
     route_name: z.ZodString;
     version_id: z.ZodString;
     unchanged: z.ZodOptional<z.ZodBoolean>;
+    activation_event_id: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const runtimeHostnameIntentUpdateResponseSchema: z.ZodObject<{
     space_id: z.ZodString;
@@ -735,15 +1063,6 @@ export declare const runtimeRetentionPolicyUpdateResponseSchema: z.ZodObject<{
     space_id: z.ZodString;
     prunable_count: z.ZodNumber;
 }, z.core.$strip>;
-export declare const runtimeGrantRevocationRequestSchema: z.ZodObject<{
-    grant: z.ZodString;
-}, z.core.$strip>;
-export declare const runtimeGrantRevocationResponseSchema: z.ZodObject<{
-    space_id: z.ZodString;
-    target_type: z.ZodLiteral<"grant">;
-    grant: z.ZodString;
-    revoked: z.ZodBoolean;
-}, z.core.$strip>;
 export declare const runtimeSpaceDeleteResponseSchema: z.ZodObject<{
     space_id: z.ZodString;
     status: z.ZodLiteral<"deleted">;
@@ -760,7 +1079,6 @@ export declare const runtimeSpaceRepairResponseSchema: z.ZodObject<{
 export declare const runtimeSpaceExportStartRequestSchema: z.ZodObject<{
     version_ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
     include_files: z.ZodOptional<z.ZodBoolean>;
-    include_explicit_config: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strict>;
 export declare const runtimeSpaceExportResponseSchema: z.ZodObject<{
     type: z.ZodLiteral<"space_export">;
@@ -783,7 +1101,6 @@ export declare const runtimeSpaceExportResponseSchema: z.ZodObject<{
     completed_at: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const runtimeSpaceImportStartRequestSchema: z.ZodObject<{
-    install_access_policy: z.ZodOptional<z.ZodBoolean>;
     version_id_map: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     zero_mode: z.ZodOptional<z.ZodEnum<{
         active: "active";
@@ -861,6 +1178,8 @@ export declare const runtimeSpaceStateSchema: z.ZodObject<{
     space_id: z.ZodString;
     routes: z.ZodRecord<z.ZodString, z.ZodString>;
     tombstone_count: z.ZodNumber;
+    intent_hostnames: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hostnames: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
 export declare const runtimeHealthResponseSchema: z.ZodObject<{
     ok: z.ZodLiteral<true>;
@@ -880,12 +1199,15 @@ export declare const runtimeStateResponseSchema: z.ZodObject<{
         space_id: z.ZodString;
         routes: z.ZodRecord<z.ZodString, z.ZodString>;
         tombstone_count: z.ZodNumber;
+        intent_hostnames: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        hostnames: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
 export declare const runtimeCallbackEventSchema: z.ZodObject<{
     event: z.ZodString;
     event_id: z.ZodOptional<z.ZodString>;
     operation_id: z.ZodOptional<z.ZodString>;
+    operation_action: z.ZodOptional<z.ZodString>;
     space_id: z.ZodOptional<z.ZodString>;
     version_id: z.ZodOptional<z.ZodString>;
     route_name: z.ZodOptional<z.ZodString>;
@@ -893,18 +1215,50 @@ export declare const runtimeCallbackEventSchema: z.ZodObject<{
     changed_paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
     changed_paths_known: z.ZodOptional<z.ZodBoolean>;
     previous_version_id: z.ZodOptional<z.ZodString>;
+    previous_public_exposure_digest: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    public_exposure_digest: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    previous_public_exposure: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        v: z.ZodNumber;
+        public: z.ZodBoolean;
+        authorizationDigest: z.ZodString;
+        contentTypes: z.ZodNullable<z.ZodArray<z.ZodString>>;
+        externalProxy: z.ZodBoolean;
+        unmodeled: z.ZodString;
+    }, z.core.$strip>>>;
+    public_exposure: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        v: z.ZodNumber;
+        public: z.ZodBoolean;
+        authorizationDigest: z.ZodString;
+        contentTypes: z.ZodNullable<z.ZodArray<z.ZodString>>;
+        externalProxy: z.ZodBoolean;
+        unmodeled: z.ZodString;
+    }, z.core.$strip>>>;
 }, z.core.$loose>;
+export declare const runtimeEventsDrainRequestSchema: z.ZodObject<{
+    session_id: z.ZodString;
+    page_id: z.ZodOptional<z.ZodString>;
+    target_event_id: z.ZodOptional<z.ZodString>;
+    exclude_deliveries: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        event_id: z.ZodString;
+        delivery_id: z.ZodString;
+    }, z.core.$strip>>>;
+    finish_session: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
 export declare const runtimeEventsDrainResponseSchema: z.ZodObject<{
     delivered_count: z.ZodNumber;
     failed_count: z.ZodNumber;
     expired_count: z.ZodOptional<z.ZodNumber>;
     returned_count: z.ZodOptional<z.ZodNumber>;
+    pending_count: z.ZodOptional<z.ZodNumber>;
     events: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        delivery_id: z.ZodString;
         operation_id: z.ZodOptional<z.ZodString>;
+        callback_token: z.ZodString;
         event: z.ZodObject<{
             event: z.ZodString;
             event_id: z.ZodOptional<z.ZodString>;
             operation_id: z.ZodOptional<z.ZodString>;
+            operation_action: z.ZodOptional<z.ZodString>;
             space_id: z.ZodOptional<z.ZodString>;
             version_id: z.ZodOptional<z.ZodString>;
             route_name: z.ZodOptional<z.ZodString>;
@@ -912,9 +1266,39 @@ export declare const runtimeEventsDrainResponseSchema: z.ZodObject<{
             changed_paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
             changed_paths_known: z.ZodOptional<z.ZodBoolean>;
             previous_version_id: z.ZodOptional<z.ZodString>;
+            previous_public_exposure_digest: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            public_exposure_digest: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            previous_public_exposure: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                v: z.ZodNumber;
+                public: z.ZodBoolean;
+                authorizationDigest: z.ZodString;
+                contentTypes: z.ZodNullable<z.ZodArray<z.ZodString>>;
+                externalProxy: z.ZodBoolean;
+                unmodeled: z.ZodString;
+            }, z.core.$strip>>>;
+            public_exposure: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+                v: z.ZodNumber;
+                public: z.ZodBoolean;
+                authorizationDigest: z.ZodString;
+                contentTypes: z.ZodNullable<z.ZodArray<z.ZodString>>;
+                externalProxy: z.ZodBoolean;
+                unmodeled: z.ZodString;
+            }, z.core.$strip>>>;
         }, z.core.$loose>;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
+export declare const runtimeEventsAckRequestSchema: z.ZodObject<{
+    session_id: z.ZodString;
+    deliveries: z.ZodArray<z.ZodObject<{
+        event_id: z.ZodString;
+        delivery_id: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const runtimeEventsAckResponseSchema: z.ZodObject<{
+    acknowledged_count: z.ZodNumber;
+    idempotent_count: z.ZodNumber;
+    stale_count: z.ZodNumber;
+}, z.core.$strip>;
 export declare const runtimeEngineJobLaneSchema: z.ZodEnum<{
     interactive: "interactive";
     bulk: "bulk";
@@ -1030,40 +1414,14 @@ export declare const runtimeEngineJobTickResponseSchema: z.ZodObject<{
     }, z.core.$strip>>>;
     drained: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
-export declare const runtimeAccessEventsCursorSchema: z.ZodObject<{
-    file: z.ZodNullable<z.ZodString>;
-    offset: z.ZodNumber;
-}, z.core.$strip>;
-export declare const runtimeAccessEventsResponseSchema: z.ZodObject<{
-    events: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        sub: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        grantsHash: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        ruleId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        effect: z.ZodEnum<{
-            allow: "allow";
-            deny: "deny";
-            challenge: "challenge";
-        }>;
-        reasonCode: z.ZodDefault<z.ZodNullable<z.ZodString>>;
-        host: z.ZodString;
-        path: z.ZodString;
-        ts: z.ZodNumber;
-    }, z.core.$strip>>>;
-    cursor: z.ZodObject<{
-        file: z.ZodNullable<z.ZodString>;
-        offset: z.ZodNumber;
-    }, z.core.$strip>;
-    done: z.ZodBoolean;
-    dropped: z.ZodDefault<z.ZodNumber>;
-}, z.core.$strip>;
 export type RuntimeVersionCreateRequest = z.infer<typeof runtimeVersionCreateRequestSchema>;
 export type RuntimeVersionFinalizeRequest = z.infer<typeof runtimeVersionFinalizeRequestSchema>;
+export type RuntimeReadinessTarget = z.infer<typeof runtimeReadinessTargetSchema>;
 export type RuntimeHostnameIntentUpdateRequest = z.infer<typeof runtimeHostnameIntentUpdateRequestSchema>;
 export type RuntimeRouteUpdateRequest = z.infer<typeof runtimeRouteUpdateRequestSchema>;
 export type RuntimeTombstonesUpdateRequest = z.infer<typeof runtimeTombstonesUpdateRequestSchema>;
 export type RuntimeRetentionPolicyUpdateRequest = z.infer<typeof runtimeRetentionPolicyUpdateRequestSchema>;
 export type RuntimeRetentionPolicyUpdateResponse = z.infer<typeof runtimeRetentionPolicyUpdateResponseSchema>;
-export type RuntimeGrantRevocationRequest = z.infer<typeof runtimeGrantRevocationRequestSchema>;
 export type RuntimeTransferBundleSourceRequest = z.infer<typeof runtimeTransferBundleSourceRequestSchema>;
 export type RuntimeTransferBundleTargetRequest = z.infer<typeof runtimeTransferBundleTargetRequestSchema>;
 export type RuntimeTransferBundleResponse = z.infer<typeof runtimeTransferBundleResponseSchema>;
@@ -1077,6 +1435,11 @@ export type RuntimeSpaceImportStartRequest = z.infer<typeof runtimeSpaceImportSt
 export type RuntimeSpaceImportMapRequest = z.infer<typeof runtimeSpaceImportMapRequestSchema>;
 export type RuntimeSpaceState = z.infer<typeof runtimeSpaceStateSchema>;
 export type RuntimeCallbackEvent = z.infer<typeof runtimeCallbackEventSchema>;
+export type RuntimeEventsDrainRequest = z.infer<typeof runtimeEventsDrainRequestSchema>;
+export type RuntimeEventsDrainResponse = z.infer<typeof runtimeEventsDrainResponseSchema>;
+export type RuntimeDrainedEvent = NonNullable<RuntimeEventsDrainResponse["events"]>[number];
+export type RuntimeEventsAckRequest = z.infer<typeof runtimeEventsAckRequestSchema>;
+export type RuntimeEventsAckResponse = z.infer<typeof runtimeEventsAckResponseSchema>;
 export type RuntimeEngineJobLane = z.infer<typeof runtimeEngineJobLaneSchema>;
 export type RuntimeEngineJobStatus = z.infer<typeof runtimeEngineJobStatusSchema>;
 export type RuntimeEngineJobRecord = z.infer<typeof runtimeEngineJobRecordSchema>;