@spacefast/common 0.0.12 → 0.0.17

package/dist/contracts/spaces.js

@@ -1,32 +1,29 @@
 import { z } from "zod";
+import { SPACE_SLUG_MAX_LENGTH } from "../slug-policy/index.js";
+import { publishedAccessSchema } from "./access.js";
 import { AsyncOperationSchema, baseDiagnosticSchema, CursorPaginationSchema, cursorListQuerySchema, } from "./common.js";
 import { versionStatus, spaceStatus } from "./enums.js";
+import { runtimeKindSchema } from "./execution.js";
 import { conventionFilesSchema, uploadInstructionsSchema, manifestFileSchema } from "./internal.js";
 import { VersionSchema, PublishSourceSchema, SpaceSchema, spaceSettingsDigestSchema, } from "./resources.js";
-import { spaceConfigSchema, spacePlacementConfigSchema } from "./space-config.js";
+import { runtimeAppSchema } from "./runtime-app.js";
+import { SPACE_CONFIG_ACCEPTED_FILES, spaceConfigSchema, spacePlacementConfigSchema, } from "./space-config.js";
 import { principalIdSchema } from "./transfers.js";
-import { zeroRuntimeKindSchema } from "./zero.js";
-export const AnonymousSpaceAccessSchema = z.object({
-    claimToken: z
-        .string()
-        .nullable()
-        .describe("One-time, space-scoped credential returned only at anonymous space creation. Save it immediately — it is never shown again and is required to publish and manage the space until it is claimed."),
-    claimUrl: z
+export const spaceClaimReceiptSchema = z.object({
+    token: z
         .string()
-        .nullable()
-        .describe("Browser-only claim link in `/claim#nonce` form. The fragment is a human handoff capability; API clients use the claim token as bearer auth for publish/update/status/exchange."),
-    expiresAt: z
-        .string()
-        .datetime()
-        .nullable()
-        .describe("When the unclaimed space expires if nobody publishes to it or claims it."),
-    warning: z
+        .min(1)
+        .describe("One-time, space-scoped credential returned only at anonymous space creation. Save it immediately. The server never shows it again. You need it to publish and manage the space until the space is claimed."),
+    url: z
         .string()
-        .describe("Human-readable notice explaining that the space is anonymous and will expire unless claimed."),
+        .url()
+        .describe("Browser-only claim link with a short-lived, one-use path token. The access origin consumes it into an HttpOnly handoff, then redirects to a clean claim page. API clients use the separate claim token as bearer auth for publish, update, status, and exchange."),
+    expiresAt: z.string().datetime(),
 });
 export const SpaceCreateResponseSchema = z.object({
     space: SpaceSchema,
-    anonymousAccess: AnonymousSpaceAccessSchema.optional(),
+    access: publishedAccessSchema,
+    claim: spaceClaimReceiptSchema.optional(),
 });
 // Stored per-version diagnostic surfaced on the space diagnostics feed: the shared
 // Diagnostic shape (contracts/common.ts) plus persistence identity.
@@ -70,31 +67,39 @@ export const spaceCreateSchema = z
 export const spacePatchSchema = z
     .object({
     title: z.string().min(1).max(255).optional(),
+    slug: z
+        .string()
+        .min(2)
+        .max(SPACE_SLUG_MAX_LENGTH)
+        .optional()
+        .describe("Renames the space and its managed view.fast hostname. Send slug by itself. Previously managed hostnames keep a temporary 307 redirect that preserves path and query to the current hostname. Immutable version URLs do not change."),
     config: spaceConfigSchema
         .nullable()
         .optional()
         .describe("Replaces the stored SpaceConfig overlay; null clears it."),
     baseSettingsDigest: spaceSettingsDigestSchema
         .optional()
-        .describe("Optimistic-concurrency base for versioned settings (title/config): the `settingsDigest` read from the Space resource when the form was loaded. When provided and the space's current settings digest no longer matches, the PATCH fails with 409 publish_base_changed and changes nothing."),
+        .describe("Optimistic-concurrency base for versioned settings (title and config): the `settingsDigest` read from the Space resource when the form loaded. If provided and the space's current settings digest no longer matches, the PATCH fails with 409 `publish_base_changed` and changes nothing."),
     force: z
         .boolean()
         .optional()
-        .describe("With baseSettingsDigest: acknowledge a changed base and overwrite anyway. The forced overwrite is recorded in the space activity feed. Never the default."),
+        .describe("With `baseSettingsDigest`, acknowledge a changed base and overwrite anyway. The server records the forced overwrite in the space activity feed. This is never the default."),
     dataLocation: z.string().min(1).optional(),
     placement: spacePlacementConfigSchema.optional(),
     noindex: z
         .boolean()
         .optional()
-        .describe("Hide the live production site from search engines. Applies only to claimed spaces' live hostnames; preview and version hostnames are always noindex."),
+        .describe("Hide the live production site from search engines. This applies only to live hostnames of claimed spaces. Preview and version hostnames are always noindex."),
 })
-    // Strict so an unknown field (notably `slug`) is rejected with a validation
-    // error rather than silently stripped. Slug rename is a deliberately
-    // post-flip surface (its dormant reserve/commit core + retained-hostname 308
-    // serving land with the slug-rename activation card); accepting-and-dropping
-    // `slug` here would be a silent no-op, so the live PATCH must refuse it.
     .strict()
     .superRefine((value, ctx) => {
+    if (value.slug !== undefined && Object.keys(value).some((key) => key !== "slug")) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "slug must be updated in a separate request.",
+            path: ["slug"],
+        });
+    }
     if (value.force === true && value.baseSettingsDigest === undefined) {
         ctx.addIssue({
             code: z.ZodIssueCode.custom,
@@ -108,7 +113,7 @@ export const spaceClaimSchema = z
     claimToken: z
         .string()
         .min(1)
-        .describe("One-time claim token returned at anonymous creation. API clients send it as bearer auth; browser claim links carry a separate nonce fragment."),
+        .describe("One-time claim token returned at anonymous creation. API clients send it as bearer auth; browser claim links carry a separate browser handoff credential."),
     teamId: z
         .string()
         .min(1)
@@ -122,7 +127,7 @@ export const spaceClaimSchema = z
     agentContinuation: z
         .boolean()
         .optional()
-        .describe("User consent to keep the publishing agent authorized after the claim. The server independently proves continuation eligibility; consent cannot grant continuation for an ineligible space."),
+        .describe("User consent to keep the publishing agent authorized after the claim. The server independently proves continuation eligibility. Consent cannot grant continuation for an ineligible space."),
 })
     .superRefine((value, ctx) => {
     if (value.teamId && value.targetTeamId && value.teamId !== value.targetTeamId) {
@@ -135,18 +140,18 @@ export const spaceClaimSchema = z
 });
 export const anonymousClaimAssignSchema = z.object({
     teamId: z.string().min(1).optional(),
-    nonce: z.string().min(1).optional().describe("Browser claim nonce from the claim URL fragment."),
+    nonce: z.string().min(1).optional().describe("Browser claim nonce from the claim handoff."),
     agentContinuation: z
         .boolean()
         .optional()
-        .describe("User consent to keep the publishing agent authorized after the claim. The server independently proves continuation eligibility; consent cannot grant continuation for an ineligible space."),
+        .describe("User consent to keep the publishing agent authorized after the claim. The server independently proves continuation eligibility. Consent cannot grant continuation for an ineligible space."),
 });
 export const anonymousClaimResolveSchema = z.object({
-    nonce: z.string().min(1).optional().describe("Browser claim nonce from the claim URL fragment."),
+    nonce: z.string().min(1).optional().describe("Browser claim nonce from the claim handoff."),
     agentContinuation: z
         .boolean()
         .optional()
-        .describe("User consent applied when resolve auto-claims. The server independently proves continuation eligibility; consent cannot grant continuation for an ineligible space."),
+        .describe("User consent applied when resolve auto-claims. The server independently proves continuation eligibility. Consent cannot grant continuation for an ineligible space."),
 });
 export const anonymousClaimTeamSchema = z.object({
     id: z.string(),
@@ -159,6 +164,25 @@ export const anonymousClaimSpacePreviewSchema = z.object({
     liveUrl: z.string().nullable(),
     createdAt: z.string().datetime().nullable(),
 });
+export const anonymousClaimSharingSummarySchema = z.object({
+    people: z.array(z.object({
+        id: z.string(),
+        displayName: z.string(),
+        status: z.enum(["pending", "accepted"]),
+        grants: z.array(z.object({
+            scope: z.string().startsWith("/"),
+            role: z.enum(["viewer", "commenter", "editor"]),
+        })),
+    })),
+    links: z.array(z.object({
+        id: z.string(),
+        revision: z.number().int().positive(),
+        name: z.string(),
+        landingPath: z.string().startsWith("/"),
+        scopes: z.array(z.string().startsWith("/")),
+        expiresAt: z.string().datetime().nullable(),
+    })),
+});
 export const anonymousClaimResponseSchema = z.object({
     state: z.enum(["unclaimed", "claimed"]),
     action: z.enum(["claimed", "login_required", "team_required", "confirm_assign"]),
@@ -167,17 +191,19 @@ export const anonymousClaimResponseSchema = z.object({
         expiresAt: z.string().datetime().nullable(),
         claimedAt: z.string().datetime().nullable(),
     }),
+    access: publishedAccessSchema,
     continuation: z
         .object({
         eligible: z
             .boolean()
-            .describe("Server-proven: the publish intent records an originating agent holding the claim token, the one-time exchange is unredeemed, and a safe secretless return exists. Only then may the UI offer continuation."),
+            .describe("Server-proven continuation eligibility. Eligible means the publish intent records an originating agent that holds the claim token, the one-time exchange is unredeemed, and a safe secretless return exists. Only then can the UI offer continuation."),
         granted: z
             .boolean()
-            .describe("True once the claim left the one-time continuation exchange open for the originating agent."),
+            .describe("Whether the claim left the one-time continuation exchange open for the originating agent."),
     })
         .describe("Server-authoritative continuation eligibility and claim result."),
     teams: z.array(anonymousClaimTeamSchema).optional(),
+    sharing: anonymousClaimSharingSummarySchema,
 });
 export const anonymousClaimStatusResponseSchema = z.object({
     publish: z.object({
@@ -203,8 +229,9 @@ export const anonymousClaimStatusResponseSchema = z.object({
         continuation: z
             .enum(["available", "used", "unavailable"])
             .optional()
-            .describe("Present once the space is claimed: whether this claim token can still be exchanged once for a durable access token (POST /v1/anonymous-claim/exchange)."),
+            .describe("Present once the space is claimed. Whether this claim token can still be exchanged once for a durable API key (POST /v1/anonymous-claim/exchange)."),
     }),
+    access: publishedAccessSchema,
 });
 export const anonymousClaimExchangeResponseSchema = z.object({
     space: z.object({
@@ -215,12 +242,26 @@ export const anonymousClaimExchangeResponseSchema = z.object({
     credential: z.object({
         accessToken: z
             .string()
-            .describe("Durable publish access token minted by the one-time exchange. Shown exactly once — store it (e.g. .spacefast/state.json) and never print it."),
+            .describe("Durable publish API key minted by the one-time exchange. Shown exactly once. Store it (for example, in .spacefast/state.json) and never print it."),
         accessTokenId: z.string(),
         label: z.string().nullable(),
         teamId: z.string(),
     }),
 });
+export const anonymousClaimRotateSchema = z.object({
+    spaceId: z.string().min(1),
+});
+export const anonymousClaimRotateResponseSchema = z.object({
+    spaceId: z.string(),
+    claimToken: z
+        .string()
+        .describe("Replacement claim token. Shown exactly once; store it before leaving this response."),
+    claimNonce: z
+        .string()
+        .describe("Replacement browser claim nonce embedded in claimUrl. Shown exactly once."),
+    claimUrl: z.string().url(),
+    expiresAt: z.string().datetime(),
+});
 export const spaceClaimReminderSchema = z.object({
     email: z
         .string()
@@ -238,28 +279,14 @@ const manifestMutationFieldsSchema = {
     deletePaths: z
         .array(z.string().min(1))
         .default([])
-        .describe("Explicit paths to remove when publishMode is additive. Omitted paths are retained; only paths listed here are deleted."),
+        .describe("Explicit paths to remove when `publishMode` is additive. Omitted paths are retained. Only listed paths are deleted."),
     immutableAssetPrefixes: z
         .array(z.string().min(2))
         .optional()
-        .describe("Publisher-owned directory prefixes whose declared files are immutable generation assets. Snapshot publishes retain the current generation's matching files for exactly one subsequent generation."),
+        .describe("Publisher-owned directory prefixes whose declared files are immutable generation assets. Snapshot publishes retain the matching files from the current generation for exactly one subsequent generation."),
 };
 function refineManifestMutationRules(value, ctx) {
-    if (value.files === undefined && value.deletePaths.length > 0) {
-        ctx.addIssue({
-            code: z.ZodIssueCode.custom,
-            message: "deletePaths requires a declared files manifest.",
-            path: ["deletePaths"],
-        });
-    }
     if (value.immutableAssetPrefixes !== undefined) {
-        if (value.files === undefined) {
-            ctx.addIssue({
-                code: z.ZodIssueCode.custom,
-                message: "immutableAssetPrefixes requires a declared files manifest.",
-                path: ["immutableAssetPrefixes"],
-            });
-        }
         if (value.publishMode !== "snapshot") {
             ctx.addIssue({
                 code: z.ZodIssueCode.custom,
@@ -275,16 +302,16 @@ export const spaceVersionCreateSchema = z
     publishMode: z
         .enum(["additive", "snapshot"])
         .default("additive")
-        .describe("How to interpret omitted paths in files: additive retains existing paths unless explicitly replaced; snapshot treats files as the complete desired manifest."),
+        .describe("How to interpret omitted paths in `files`: `additive` retains existing paths unless explicitly replaced; `snapshot` treats `files` as the complete desired manifest."),
     sourceMetadata: z
         .record(z.string(), z.unknown())
         .optional()
-        .describe("Additional control-plane-only provenance for build/deploy read models."),
+        .describe("Additional control-plane-only provenance for build and deploy read models."),
     buildLog: z
         .string()
         .max(64_000)
         .optional()
-        .describe("Bounded build transcript for deploys that ran a local build before publishing."),
+        .describe("Build transcript truncated to a bounded size for deploys that ran a local build before publishing."),
     conventionFiles: conventionFilesSchema
         .optional()
         .describe("Routing convention contents used when deciding whether this publish is unchanged. The same values are supplied again when the version is finalized."),
@@ -294,8 +321,7 @@ export const spaceVersionCreateSchema = z
         .describe("Finalize intent for a declared upload. When every declared file lands, the version finalizes itself; the explicit finalize call remains available for recovery and replay."),
     files: z
         .array(manifestFileSchema)
-        .optional()
-        .describe("Full desired file manifest. For first deploys, send path/size/contentType without hashes so upload can begin immediately. For updates, include sha256 to let the server skip unchanged files. Omit entirely for an open session: the upload token then authorizes any policy-valid path within plan caps and finalize derives the manifest from what was uploaded."),
+        .describe("The complete desired file manifest. For first deploys, send `path`, `size`, and `contentType` without hashes so upload can begin immediately. For updates, include `sha256` so the server can skip unchanged files."),
     ...manifestMutationFieldsSchema,
 })
     .superRefine(refineManifestMutationRules);
@@ -308,12 +334,16 @@ export const spaceListSchema = z.object({
     pagination: CursorPaginationSchema,
 });
 export const spaceListQuerySchema = cursorListQuerySchema.extend({
-    team: z.string().min(1).optional().describe("Filter to spaces owned by this team id or slug."),
+    team: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Filter that limits results to spaces owned by this team id or slug."),
 });
 export const spaceVersionListQuerySchema = cursorListQuerySchema;
 // Version processing log lines (upload/finalize/promote output), newest-first.
 export const versionLogEntrySchema = z.object({
-    timestamp: z.string().datetime().describe("When the version last changed state."),
+    timestamp: z.string().datetime().describe("Instant when the version last changed state."),
     level: z.string().describe("Log severity: info or error."),
     code: z.string().describe("Stable version.{status} code for the line."),
     message: z.string().describe("Human-readable log line."),
@@ -375,8 +405,10 @@ export const spaceFilesResponseSchema = z.object({
     index: spaceVersionFileIndexSchema,
     search: spaceVersionFilesSearchSchema,
 });
-export const spaceVersionFileQuerySchema = z.object({
+export const spaceVersionFilePathQuerySchema = z.object({
     path: z.string().min(1),
+});
+export const spaceVersionFileQuerySchema = spaceVersionFilePathQuerySchema.extend({
     download: z.string().optional(),
 });
 export const spaceVersionFileResponseSchema = z.object({
@@ -390,13 +422,6 @@ export const spaceVersionFileResponseSchema = z.object({
     truncated: z.boolean(),
     cached: z.boolean(),
 });
-export const spaceVersionFileDirectUrlResponseSchema = z.object({
-    versionId: z.string(),
-    path: z.string(),
-    url: z.string().url(),
-    managementHostname: z.string(),
-    expiresInSeconds: z.number().int().positive(),
-});
 export const spaceVersionFileUrlPreviewSchema = z.object({
     versionId: z.string(),
     path: z.string(),
@@ -448,8 +473,22 @@ export const spaceVersionConventionArtifactContentResponseSchema = spaceVersionC
     content: z.string(),
     truncated: z.boolean(),
 });
+/**
+ * Where a routing diagnostic came from — a committed path in the version the
+ * publisher can open. Wider than the convention artifacts: the Spacefast config
+ * file states routing rules too, and they compile through the same compiler and
+ * report the same codes. Every accepted config filename is listed because
+ * finalize reads whichever one the version ships, and naming the canonical
+ * `sf.jsonc` at a version that committed `spacefast.jsonc` sends the publisher
+ * to a file that is not there.
+ */
+export const spaceVersionRoutingDiagnosticFileSchema = z.enum([
+    "_redirects",
+    "_headers",
+    ...SPACE_CONFIG_ACCEPTED_FILES,
+]);
 export const spaceVersionRoutingDiagnosticSchema = z.object({
-    file: spaceVersionConventionArtifactPathSchema,
+    file: spaceVersionRoutingDiagnosticFileSchema,
     line: z.number().int().nonnegative(),
     severity: z.enum(["warning", "error"]),
     code: z.string(),
@@ -466,7 +505,6 @@ export const spaceVersionComputedRoutingSummarySchema = z.object({
         headerRuleCount: z.number().int().nonnegative(),
         staticRedirectCount: z.number().int().nonnegative(),
         dynamicRedirectCount: z.number().int().nonnegative(),
-        basicAuthRuleCount: z.number().int().nonnegative(),
         proxyRuleCount: z.number().int().nonnegative(),
     }),
     diagnostics: z.array(spaceVersionRoutingDiagnosticSchema),
@@ -527,7 +565,7 @@ export const spaceVersionIntentResponseSchema = z.object({
         .describe("Created version id, or null when the manifest matched and nothing changed."),
     upload: uploadInstructionsSchema
         .nullable()
-        .describe("Runtime upload session, present only while bytes still need uploading. Upload, then finalize."),
+        .describe("Runtime upload session; present only while bytes still need uploading. Upload first, then finalize."),
     ignoredPaths: z
         .array(z.string())
         .default([])
@@ -541,8 +579,7 @@ export const publishRequestSchema = z
     principal: principalRefInputSchema.optional(),
     files: z
         .array(manifestFileSchema)
-        .optional()
-        .describe("Desired file manifest for a declared publish session. Clients upload returned paths, then finalize. Omit for inline one-shot and open-session publishes."),
+        .describe("Desired file manifest for a declared publish session. Clients upload returned paths, then finalize."),
     ...manifestMutationFieldsSchema,
     source: PublishSourceSchema.optional().describe('Publish provenance recorded on the version; defaults to {kind: "direct_upload"}.'),
     // Same fields, same bounds as spaceVersionCreateSchema: a publish that ran
@@ -560,13 +597,13 @@ export const publishRequestSchema = z
     publishMode: z
         .enum(["additive", "snapshot"])
         .default("additive")
-        .describe("How to interpret omitted paths in files: additive retains existing paths unless explicitly replaced; snapshot treats files as the complete desired manifest."),
+        .describe("How to interpret omitted paths in `files`: `additive` retains existing paths unless explicitly replaced; `snapshot` treats `files` as the complete desired manifest."),
     email: z
         .string()
         .email()
         .max(320)
         .optional()
-        .describe("Optional expiry-reminder address for anonymous publishes. Stored only until the space is claimed or expires, then deleted; never logged."),
+        .describe("Optional expiry-reminder address for anonymous publishes. The server stores it only until the space is claimed or expires, then deletes it. It is never logged."),
     channel: z
         .enum(["live"])
         .nullable()
@@ -579,9 +616,7 @@ export const publishRequestSchema = z
         dataLocation: z.string().min(1).optional(),
     })
         .optional(),
-    config: spaceConfigSchema
-        .optional()
-        .describe("SpaceConfig overlay to store on the space (sf.jsonc contents)."),
+    config: spaceConfigSchema.optional().describe("SpaceConfig overlay to store on the space."),
 })
     .superRefine((value, ctx) => {
     if (value.teamId && value.principal?.type === "team" && value.teamId !== value.principal.id) {
@@ -618,7 +653,7 @@ export const publishActivationSchema = z.object({
     channel: z
         .enum(["live"])
         .nullable()
-        .describe("Channel this publish targeted. null = ready version without promotion."),
+        .describe("Channel this publish targeted; null means a ready version without promotion."),
     outcome: z
         .enum(["activated", "unpromoted", "superseded", "pending"])
         .describe("activated: the live pointer moved to this version. unpromoted: ready with channel null, by request. superseded: ready, but a newer publish holds the live pointer. pending: not settled yet."),
@@ -633,7 +668,7 @@ export const publishActivationSchema = z.object({
 export const publishNextSchema = z.object({
     action: z
         .enum(["done", "upload", "finalize", "poll"])
-        .describe("done: stop, this request's intent is settled. upload: PUT the upload targets, then follow the finalize link. finalize: all bytes are present, POST url to commit. poll: server-side work in flight, GET url after retryAfter seconds."),
+        .describe("What the caller does next: `done` (stop; this request intent is settled), `upload` (PUT upload targets, then follow the finalize link), `finalize` (all bytes are present, POST `url` to commit), or `poll` (server-side work is in flight, GET `url` after `retryAfter` seconds)."),
     url: z.string().optional().describe("The endpoint the action applies to."),
     retryAfter: z
         .number()
@@ -641,29 +676,21 @@ export const publishNextSchema = z.object({
         .positive()
         .optional()
         .describe("Polling cadence in seconds; present only when action is poll."),
-    hint: z.string().max(140).describe("One plain sentence for an agent mid-loop."),
+    hint: z.string().max(140).describe("One plain sentence for an agent in the middle of a loop."),
 });
 export const publishReceiptSchema = z.object({
     space: publishReceiptSpaceSchema,
+    access: publishedAccessSchema.optional(),
     version: publishReceiptVersionSchema,
     activation: publishActivationSchema,
     next: publishNextSchema,
     operation: AsyncOperationSchema.optional().describe("Background finalize operation when publish work continues asynchronously."),
-    // Paste-ready one-liner (URL + claim nudge) so agents propagate consistent
-    // claim copy into transcripts (internal-docs/platform.md M1a "share blurb").
-    shareBlurb: z.string(),
     upload: publishUploadReceiptSchema.optional(),
-    claim: z
-        .object({
-        token: z.string().optional(),
-        url: z.string(),
-        expiresAt: z.string().datetime(),
-    })
-        .optional(),
+    claim: spaceClaimReceiptSchema.optional(),
     diagnostics: z
         .array(baseDiagnosticSchema)
         .optional()
-        .describe("Publish diagnostics: the `noop_publish` info diagnostic when nothing changed (the only noop signal), manifest warnings such as `path_case_collision`, and serving-shape notes such as `single_html_index` or `files_mode_inferred`."),
+        .describe("Publish diagnostics. Includes the `noop_publish` info diagnostic when nothing changed (the only noop signal), manifest warnings such as `path_case_collision`, and serving-shape notes such as `single_html_index` or `files_mode_inferred`."),
     links: z
         .object({
         resume: z
@@ -695,7 +722,7 @@ export const spaceVersionResumeResponseSchema = z.object({
     versionId: z.string(),
     upload: uploadInstructionsSchema
         .nullable()
-        .describe("Fresh runtime upload session, present only while files still need uploading. Upload, then finalize."),
+        .describe("Fresh runtime upload session; present only while files still need uploading. Upload first, then finalize."),
     ignoredPaths: z
         .array(z.string())
         .default([])
@@ -711,7 +738,7 @@ export const versionPromoteSchema = z
         .string()
         .min(1)
         .optional()
-        .describe('Channel to point at this version; defaults to "live". Non-live channel names are rejected with channel_unsupported until additional channels ship.'),
+        .describe('Channel to point at this version. Defaults to "live". Non-live channel names are rejected with `channel_unsupported` until additional channels ship.'),
 })
     .optional()
     .default({});
@@ -730,25 +757,28 @@ export const spaceRuntimeStatusSchema = z.object({
     liveVersionId: z
         .string()
         .nullable()
-        .describe("Version that the live space URL currently points to, if any."),
+        .describe("Version that the live space URL now points to, if any."),
     pendingVersionId: z
         .string()
         .nullable()
-        .describe("Version that live traffic is trying to publish, if any."),
+        .describe("Version that live traffic is trying to publish now, if any."),
     liveUrl: z
         .string()
         .nullable()
-        .describe("Live space URL. Flips to the latest version after a successful publish to `live`."),
+        .describe("Live space URL. It moves to the latest version after a successful publish to `live`."),
     runtimeState: spaceStatus.describe("Space operation-lifecycle status."),
     liveVersionStatus: versionStatus.nullable(),
-    liveRuntimeKind: zeroRuntimeKindSchema
+    liveRuntimeKind: runtimeKindSchema
         .nullable()
         .describe("Runtime kind declared by the live version, if any."),
     pendingVersionStatus: versionStatus.nullable(),
     operation: AsyncOperationSchema.nullable(),
+    app: runtimeAppSchema
+        .nullable()
+        .describe("What the live version runs: its Zero capsule or Functions worker, discriminated by `runtimeKind`. Null for a static space. Also null for callers whose credential does not carry `versions:read`, because app details read version contents, not serving state."),
 });
 export const spaceApplyChangeBaseSchema = z.object({
-    kind: z.enum(["variable", "routing", "password", "settings"]),
+    kind: z.enum(["variable", "routing", "access", "settings"]),
     name: z.string(),
     label: z.string(),
 });

package/dist/contracts/superadmin-emails.d.ts

@@ -7,12 +7,12 @@ export declare const superadminEmailListQuerySchema: z.ZodObject<{
     status: z.ZodDefault<z.ZodEnum<{
         all: "all";
         failed: "failed";
-        delivered: "delivered";
-        dropped: "dropped";
         scheduled: "scheduled";
+        delivered: "delivered";
         sent: "sent";
         suppressed: "suppressed";
         bounced: "bounced";
+        dropped: "dropped";
         complained: "complained";
         opened: "opened";
         clicked: "clicked";