@spacefast/common 0.0.13 → 0.0.17

package/dist/agents/client-registry.d.ts

@@ -0,0 +1,22 @@
+export declare const MACHINE_AGENT_CLIENT_IDS: readonly ["universal", "claude-code", "codex", "opencode", "github-copilot", "factory-droid", "cursor", "vscode", "gemini-cli", "windsurf", "cline", "continue"];
+export declare const CONNECT_TARGET_IDS: readonly ["claude-code", "cursor", "vscode", "codex", "claude", "chatgpt"];
+export type MachineAgentClientId = (typeof MACHINE_AGENT_CLIENT_IDS)[number];
+export type ConnectTargetId = (typeof CONNECT_TARGET_IDS)[number];
+export type AgentProductId = MachineAgentClientId | ConnectTargetId;
+export declare const AGENT_PRODUCT_NAMES: {
+    readonly universal: "Universal (.agents)";
+    readonly "claude-code": "Claude Code";
+    readonly codex: "Codex";
+    readonly cursor: "Cursor";
+    readonly vscode: "VS Code";
+    readonly "github-copilot": "GitHub Copilot";
+    readonly "factory-droid": "Factory Droid";
+    readonly opencode: "OpenCode";
+    readonly "gemini-cli": "Gemini CLI";
+    readonly windsurf: "Windsurf";
+    readonly cline: "Cline";
+    readonly continue: "Continue";
+    readonly claude: "Claude";
+    readonly chatgpt: "ChatGPT";
+};
+export declare function agentProductName(id: AgentProductId): string;

package/dist/agents/client-registry.js

@@ -0,0 +1,41 @@
+export const MACHINE_AGENT_CLIENT_IDS = [
+    "universal",
+    "claude-code",
+    "codex",
+    "opencode",
+    "github-copilot",
+    "factory-droid",
+    "cursor",
+    "vscode",
+    "gemini-cli",
+    "windsurf",
+    "cline",
+    "continue",
+];
+export const CONNECT_TARGET_IDS = [
+    "claude-code",
+    "cursor",
+    "vscode",
+    "codex",
+    "claude",
+    "chatgpt",
+];
+export const AGENT_PRODUCT_NAMES = {
+    universal: "Universal (.agents)",
+    "claude-code": "Claude Code",
+    codex: "Codex",
+    cursor: "Cursor",
+    vscode: "VS Code",
+    "github-copilot": "GitHub Copilot",
+    "factory-droid": "Factory Droid",
+    opencode: "OpenCode",
+    "gemini-cli": "Gemini CLI",
+    windsurf: "Windsurf",
+    cline: "Cline",
+    continue: "Continue",
+    claude: "Claude",
+    chatgpt: "ChatGPT",
+};
+export function agentProductName(id) {
+    return AGENT_PRODUCT_NAMES[id];
+}

package/dist/agents/connect-targets.d.ts

@@ -1,7 +1,10 @@
+import { type ConnectTargetId } from "./client-registry.js";
+export { CONNECT_TARGET_IDS } from "./client-registry.js";
+export type { ConnectTargetId } from "./client-registry.js";
 export declare const LOCAL_MCP_PACKAGE = "spacefast";
 export declare const LOCAL_MCP_COMMAND = "npx";
-export declare const LOCAL_MCP_ARGS: readonly ["-y", "spacefast", "mcp", "--preset", "essential"];
-/** The copy-paste one-liner form with the lean default tool surface. */
+export declare const LOCAL_MCP_ARGS: readonly ["-y", "spacefast", "mcp"];
+/** The copy-paste one-liner for the fixed On-Device product surface. */
 export declare const LOCAL_MCP_COMMAND_LINE: string;
 /**
  * base64 of a UTF-8 string, without Buffer. Byte-identical to
@@ -14,7 +17,7 @@ export declare function localMcpServersJson(): {
     mcpServers: {
         spacefast: {
             command: string;
-            args: ("mcp" | "essential" | "spacefast" | "-y" | "--preset")[];
+            args: ("mcp" | "spacefast" | "-y")[];
             env: {};
         };
     };
@@ -30,12 +33,30 @@ export declare function vscodeMcpServersJson(): {
         spacefast: {
             type: string;
             command: string;
-            args: ("mcp" | "essential" | "spacefast" | "-y" | "--preset")[];
+            args: ("mcp" | "spacefast" | "-y")[];
         };
     };
 };
 export declare function cursorHostedMcpDeeplink(mcpEndpoint: string): string;
 export declare function vscodeHostedMcpDeeplink(mcpEndpoint: string): string;
+export declare function pokeHostedMcpDeeplink(mcpEndpoint: string): string;
+/**
+ * The hosted server entry for the Pi coding agent's `pi-mcp-extension`
+ * (`~/.pi/agent/mcp.json` or a project `.pi/mcp.json`). Pi has no built-in
+ * MCP; the extension (`pi install npm:pi-mcp-extension`) adds it with a
+ * `transport: "streamable-http"` entry — its own key names, not the
+ * `type: "http"` shape Claude Code and VS Code use.
+ */
+export declare function piHostedMcpConfig(mcpEndpoint: string): {
+    mcpServers: {
+        spacefast: {
+            transport: string;
+            url: string;
+        };
+    };
+};
+export declare function claudeHostedConnectorInstallUrl(mcpEndpoint: string): string;
+export declare function claudeOrgConnectorInstallUrl(mcpEndpoint: string): string;
 /**
  * The hosted server entry for Claude Code's `.mcp.json`. Claude Code rejects a
  * bare `{ url }` as invalid, so the entry carries `type: "http"` — byte-identical
@@ -72,6 +93,18 @@ export declare function vscodeHostedMcpServersJson(mcpEndpoint: string): {
         };
     };
 };
+/** A complete, schema-pinned OpenCode V2 config for the hosted MCP server. */
+export declare function opencodeHostedMcpConfig(mcpEndpoint: string): {
+    $schema: string;
+    mcp: {
+        servers: {
+            spacefast: {
+                type: string;
+                url: string;
+            };
+        };
+    };
+};
 export declare function codexHostedMcpToml(mcpEndpoint: string): string;
 export declare const CODEX_MCP_TOML: string;
 /**
@@ -86,6 +119,20 @@ export declare function buildClaudeMcpAddCommand(mcpEndpoint: string): string;
  * connection unauthenticated and the tools 401.
  */
 export declare function buildCodexMcpAddCommand(mcpEndpoint: string): string;
+/**
+ * Hermes's hosted-MCP connect (`hermes mcp add --url`), the form NousResearch's
+ * hermes-agent MCP guide documents. `--auth oauth` opts the hosted server into
+ * the browser sign-in flow; unlike Codex there is no separate login command.
+ */
+export declare function buildHermesMcpAddCommand(mcpEndpoint: string): string;
+/**
+ * OpenClaw's hosted-MCP connect (`openclaw mcp add`), the form
+ * docs.openclaw.ai/cli/mcp documents: `--transport streamable-http` is required
+ * (no auto-detection), `--auth oauth` opts into OAuth. Sign-in is a separate
+ * two-step `openclaw mcp login <name>` (prints an auth URL, then `--code`), so
+ * setup copy must not promise a single-command flow.
+ */
+export declare function buildOpenclawMcpAddCommand(mcpEndpoint: string): string;
 export type ConnectCopyLanguage = "bash" | "json" | "toml" | "text";
 export type ConnectCopy = Readonly<{
     /** Short label for the affordance and the copied-value toast. */
@@ -108,8 +155,6 @@ export type ConnectDownload = Readonly<{
  * a copy of the command/endpoint that wires it), plus an optional secondary
  * "copy the client config file" affordance.
  */
-export declare const CONNECT_TARGET_IDS: readonly ["claude-code", "cursor", "vscode", "codex", "claude", "chatgpt"];
-export type ConnectTargetId = (typeof CONNECT_TARGET_IDS)[number];
 export type ConnectTarget = Readonly<{
     id: ConnectTargetId;
     name: string;

package/dist/agents/connect-targets.js

@@ -4,7 +4,7 @@
  * One source of truth for "add Spacefast to your agent": the MCP launch config,
  * the one-click deeplinks, and the per-agent connect entries. Both the marketing
  * site (apps/www/src/lib/llmo.ts + agent-targets.ts, with the hardcoded prod
- * endpoint) and the dashboard (apps/my /account/agents, with the runtime-derived
+ * endpoint) and the Team Developer dashboard (with the runtime-derived
  * hosted endpoint) consume these, so every "connect an agent" surface advertises
  * the identical command, package, and config — they can never drift apart.
  *
@@ -13,10 +13,12 @@
  * standard in browsers, Node 16+, and Bun) rather than Buffer.
  */
 import { spacefastClaudePluginAddCommand, spacefastClaudePluginInstallCommand, spacefastCodexPluginAddCommand, spacefastCodexPluginInstallCommand, } from "../docs/skill-distribution.js";
+import { agentProductName } from "./client-registry.js";
+export { CONNECT_TARGET_IDS } from "./client-registry.js";
 export const LOCAL_MCP_PACKAGE = "spacefast";
 export const LOCAL_MCP_COMMAND = "npx";
-export const LOCAL_MCP_ARGS = ["-y", LOCAL_MCP_PACKAGE, "mcp", "--preset", "essential"];
-/** The copy-paste one-liner form with the lean default tool surface. */
+export const LOCAL_MCP_ARGS = ["-y", LOCAL_MCP_PACKAGE, "mcp"];
+/** The copy-paste one-liner for the fixed On-Device product surface. */
 export const LOCAL_MCP_COMMAND_LINE = `${LOCAL_MCP_COMMAND} ${LOCAL_MCP_ARGS.join(" ")}`;
 /**
  * base64 of a UTF-8 string, without Buffer. Byte-identical to
@@ -65,7 +67,7 @@ export function vscodeMcpServersJson() {
  * on-device for local ones — but a one-click install must never depend on the
  * user having npm/npx. The hosted URL server needs no runtime at all (the
  * client speaks HTTP + OAuth), so every deeplink and every primary action
- * carries the hosted endpoint. On-device stdio (`npx -y spacefast mcp --preset essential`) stays
+ * carries the hosted endpoint. On-device stdio (`npx -y spacefast mcp`) stays
  * available as the explicitly-labeled alternative for people who run the CLI —
  * their environment already provides npx.
  */
@@ -77,13 +79,57 @@ export function vscodeMcpServersJson() {
 export function cursorHostedMcpDeeplink(mcpEndpoint) {
     return `https://cursor.com/install-mcp?name=${LOCAL_MCP_PACKAGE}&config=${encodeURIComponent(base64Utf8(JSON.stringify({ url: mcpEndpoint })))}`;
 }
-// VS Code one-click MCP install link — the HTTPS redirect service GitHub's
-// install badges use, which works for stable VS Code (not just Insiders). The
-// config is the server object WITHOUT the name (name is the query param), and
-// `type: "http"` is mandatory — VS Code treats a bare `url` as a stdio command
-// and fails confusingly.
+// VS Code one-click MCP install link — the HTTPS redirect service, which 302s
+// into the documented `vscode:mcp/install?<uriencoded JSON>` URL handler. Host
+// is `vscode.dev` (NOT the badge-era `insiders.vscode.dev`, which emits the
+// same stable-VS-Code Location header today but reads as "insiders" to users
+// and breaks if the redirect ever honors its host). The config is the server
+// object WITHOUT the name (the service merges the `name` param into the JSON),
+// plain URI-encoded — base64 is Cursor's rule, not VS Code's. `type: "http"`
+// is mandatory: VS Code treats a bare `url` as a stdio command and fails
+// confusingly.
 export function vscodeHostedMcpDeeplink(mcpEndpoint) {
-    return `https://insiders.vscode.dev/redirect/mcp/install?name=${LOCAL_MCP_PACKAGE}&config=${encodeURIComponent(JSON.stringify({ type: "http", url: mcpEndpoint }))}`;
+    return `https://vscode.dev/redirect/mcp/install?name=${LOCAL_MCP_PACKAGE}&config=${encodeURIComponent(JSON.stringify({ type: "http", url: mcpEndpoint }))}`;
+}
+// Poke one-click MCP install link — a plain HTTPS page that prefills the
+// new-integration form (https://poke.com/docs/mcp-servers): ordinary
+// URI-encoded query params, no JSON blob, no base64. All params stay
+// user-editable in the form; the user reviews and hits Create. `apiKey` is
+// also accepted but must NEVER appear in a public link — our hosted server
+// authenticates via OAuth.
+export function pokeHostedMcpDeeplink(mcpEndpoint) {
+    return `https://poke.com/integrations/new?name=Spacefast&url=${encodeURIComponent(mcpEndpoint)}`;
+}
+/**
+ * The hosted server entry for the Pi coding agent's `pi-mcp-extension`
+ * (`~/.pi/agent/mcp.json` or a project `.pi/mcp.json`). Pi has no built-in
+ * MCP; the extension (`pi install npm:pi-mcp-extension`) adds it with a
+ * `transport: "streamable-http"` entry — its own key names, not the
+ * `type: "http"` shape Claude Code and VS Code use.
+ */
+export function piHostedMcpConfig(mcpEndpoint) {
+    return {
+        mcpServers: {
+            [LOCAL_MCP_PACKAGE]: { transport: "streamable-http", url: mcpEndpoint },
+        },
+    };
+}
+// Claude custom-connector install link — opens claude.ai's "Add custom
+// connector" dialog with name and URL prefilled (documented under "Share an
+// install link", claude.com/docs/connectors/building/directory-vs-custom).
+// Plain percent-encoded params, no JSON blob; the dialog shows the values came
+// from an external link and the user confirms before anything is added. The
+// connector then syncs to every Claude client (web, Desktop, mobile). Signed-out
+// users get the sign-in first, then land on the prefilled dialog.
+export function claudeHostedConnectorInstallUrl(mcpEndpoint) {
+    return `https://claude.ai/customize/connectors?modal=add-custom-connector&connectorName=Spacefast&connectorUrl=${encodeURIComponent(mcpEndpoint)}`;
+}
+// The same documented params on the admin path: prefills the ORG-WIDE custom
+// connector dialog for Team/Enterprise Owners. Adding it org-wide connects
+// nobody by itself — each member still clicks Connect on the rolled-out
+// connector — so copy around this link must address the admin, not the member.
+export function claudeOrgConnectorInstallUrl(mcpEndpoint) {
+    return `https://claude.ai/admin-settings/connectors?modal=add-custom-connector&connectorName=Spacefast&connectorUrl=${encodeURIComponent(mcpEndpoint)}`;
 }
 /**
  * The hosted server entry for Claude Code's `.mcp.json`. Claude Code rejects a
@@ -119,6 +165,20 @@ export function vscodeHostedMcpServersJson(mcpEndpoint) {
         },
     };
 }
+/** A complete, schema-pinned OpenCode V2 config for the hosted MCP server. */
+export function opencodeHostedMcpConfig(mcpEndpoint) {
+    return {
+        $schema: "https://opencode.ai/config.json",
+        mcp: {
+            servers: {
+                [LOCAL_MCP_PACKAGE]: {
+                    type: "remote",
+                    url: mcpEndpoint,
+                },
+            },
+        },
+    };
+}
 // Codex reads MCP servers from `~/.codex/config.toml`; the hosted entry is a
 // bare streamable-HTTP url (same lane the committed codex plugin ships).
 export function codexHostedMcpToml(mcpEndpoint) {
@@ -147,18 +207,23 @@ export function buildCodexMcpAddCommand(mcpEndpoint) {
     return `codex mcp add ${LOCAL_MCP_PACKAGE} --url ${mcpEndpoint} && codex mcp login ${LOCAL_MCP_PACKAGE}`;
 }
 /**
- * A single connect card: one agent, one primary action (a one-click deeplink or
- * a copy of the command/endpoint that wires it), plus an optional secondary
- * "copy the client config file" affordance.
+ * Hermes's hosted-MCP connect (`hermes mcp add --url`), the form NousResearch's
+ * hermes-agent MCP guide documents. `--auth oauth` opts the hosted server into
+ * the browser sign-in flow; unlike Codex there is no separate login command.
  */
-export const CONNECT_TARGET_IDS = [
-    "claude-code",
-    "cursor",
-    "vscode",
-    "codex",
-    "claude",
-    "chatgpt",
-];
+export function buildHermesMcpAddCommand(mcpEndpoint) {
+    return `hermes mcp add ${LOCAL_MCP_PACKAGE} --url ${mcpEndpoint} --auth oauth`;
+}
+/**
+ * OpenClaw's hosted-MCP connect (`openclaw mcp add`), the form
+ * docs.openclaw.ai/cli/mcp documents: `--transport streamable-http` is required
+ * (no auto-detection), `--auth oauth` opts into OAuth. Sign-in is a separate
+ * two-step `openclaw mcp login <name>` (prints an auth URL, then `--code`), so
+ * setup copy must not promise a single-command flow.
+ */
+export function buildOpenclawMcpAddCommand(mcpEndpoint) {
+    return `openclaw mcp add ${LOCAL_MCP_PACKAGE} --url ${mcpEndpoint} --transport streamable-http --auth oauth`;
+}
 /**
  * The per-agent connect catalog, parameterized by the hosted MCP endpoint.
  * Every one-click and copy-config path carries the hosted endpoint (OAuth,
@@ -175,7 +240,7 @@ export function buildConnectTargets({ mcpEndpoint }) {
             // and stays updated through the marketplace. `claude mcp add` remains
             // the minimal MCP-only path in the config slot and on /agents.
             id: "claude-code",
-            name: "Claude Code",
+            name: agentProductName("claude-code"),
             blurb: "One paste installs the plugin: publish skill plus MCP, updated from the marketplace.",
             primary: {
                 label: "Install plugin",
@@ -190,21 +255,21 @@ export function buildConnectTargets({ mcpEndpoint }) {
         },
         {
             id: "cursor",
-            name: "Cursor",
-            blurb: "One click adds hosted MCP. OAuth sign-in, nothing to install.",
+            name: agentProductName("cursor"),
+            blurb: "One click adds hosted MCP. Approve once in the browser, nothing to install.",
             deeplink: { href: cursorHostedMcpDeeplink(mcpEndpoint), label: "Add to Cursor" },
             config: { label: "~/.cursor/mcp.json", value: cursorConfigJson, language: "json" },
         },
         {
             id: "vscode",
-            name: "VS Code",
+            name: agentProductName("vscode"),
             blurb: "One click adds hosted MCP for Copilot agent mode.",
             deeplink: { href: vscodeHostedMcpDeeplink(mcpEndpoint), label: "Add to VS Code" },
             config: { label: ".vscode/mcp.json", value: vscodeHostedConfigJson, language: "json" },
         },
         {
             id: "codex",
-            name: "Codex",
+            name: agentProductName("codex"),
             blurb: "One paste installs the plugin: publish skill plus MCP, updated from the marketplace.",
             primary: {
                 label: "Install plugin",
@@ -219,7 +284,7 @@ export function buildConnectTargets({ mcpEndpoint }) {
         },
         {
             id: "claude",
-            name: "Claude",
+            name: agentProductName("claude"),
             blurb: "Settings → Connectors → Add custom connector, paste this endpoint. Or grab the desktop extension.",
             primary: { label: "MCP endpoint", value: mcpEndpoint, language: "text" },
             download: {
@@ -229,7 +294,7 @@ export function buildConnectTargets({ mcpEndpoint }) {
         },
         {
             id: "chatgpt",
-            name: "ChatGPT",
+            name: agentProductName("chatgpt"),
             blurb: "Turn on Developer mode (Settings → Apps & Connectors → Advanced), then Connectors → Create with this endpoint.",
             primary: { label: "MCP endpoint", value: mcpEndpoint, language: "text" },
         },

package/dist/brand.d.ts

@@ -1,16 +1,5 @@
 export declare const BRAND: {
     /** Consumer product name shown on every user surface. */
     readonly productName: "Spacefast";
-    /** Public website/docs origin (`/docs`, `/llms.txt`, install script). */
-    readonly websiteOrigin: string;
-    /** Origin agents should fetch for the canonical `/ai` setup instructions. */
-    readonly agentSetupOrigin: string;
-    /** Canonical public API origin (generated SDK/OpenAPI server, `/skill`). */
-    readonly apiOrigin: string;
-    /** Apex for default space hostnames: `{hostLabel}.<apex>` (OPEN apex decision). */
-    readonly spaceHostnameApex: "view.fast";
-    /** Apex for internal management hostnames: `{siteId}.<apex>` (OPEN apex decision). */
-    readonly managementHostnameApex: "view.fast";
 };
-export declare const ERROR_DOCS_BASE_URL: `${string}/docs/errors`;
 export declare const GITHUB_CHECK_RUN_NAME: "Spacefast Builds";

package/dist/brand.js

@@ -1,27 +1,7 @@
-// The single home for brand strings. Hostnames are NOT hardcoded here: they
-// derive from the canonical domain registry (`./config/domains`) so the whole
-// rename to spacefast.com is a one-file edit. Consumer surfaces never hardcode
-// these values; they import from here (and `domains` underneath).
-import { serviceOrigin } from "./config/domains.js";
-import { MANAGEMENT_HOSTNAME_APEX, SPACE_HOSTNAME_APEX } from "./config/domains.js";
 export const BRAND = {
     /** Consumer product name shown on every user surface. */
     productName: "Spacefast",
-    /** Public website/docs origin (`/docs`, `/llms.txt`, install script). */
-    websiteOrigin: serviceOrigin("www", "prod"),
-    /** Origin agents should fetch for the canonical `/ai` setup instructions. */
-    agentSetupOrigin: serviceOrigin("www", "prod"),
-    /** Canonical public API origin (generated SDK/OpenAPI server, `/skill`). */
-    apiOrigin: serviceOrigin("api", "prod"),
-    /** Apex for default space hostnames: `{hostLabel}.<apex>` (OPEN apex decision). */
-    spaceHostnameApex: SPACE_HOSTNAME_APEX,
-    /** Apex for internal management hostnames: `{siteId}.<apex>` (OPEN apex decision). */
-    managementHostnameApex: MANAGEMENT_HOSTNAME_APEX,
 };
-// Mechanical error-docs derivation base (contract decision locked by the build
-// plan: `${websiteOrigin}/docs/errors/{code}` forever). Lives next to the
-// brand origin it derives from; `error-codes.ts` consumes it.
-export const ERROR_DOCS_BASE_URL = `${BRAND.websiteOrigin}/docs/errors`;
 // The GitHub check-run name every build reports under. One constant because the
 // create and update paths live in different modules and drifted once
 // ("Stattic" vs "Spacefast") — GitHub keys check runs by name, so a mismatch

package/dist/config/domains.d.ts

@@ -26,11 +26,20 @@ export declare const DEV_ENV_DOMAIN: "sf.localhost";
 export declare function envDomainsFor(domain: string): EnvDomains;
 /** Origin (scheme + host, no trailing slash) for a service in an environment. */
 export declare function serviceOrigin(service: Service, env: DeployEnv): string;
-/** Atomic infrastructure apex used for public managed/custom domains. */
-export declare const VIEW_FAST_APEX: "view.fast";
-/** Apex for default space hostnames: `{hostLabel}.view.fast`. */
-export declare const SPACE_HOSTNAME_APEX: "view.fast";
-/** Apex for internal management hostnames: `wpc-manage-{siteId}.view.fast`. */
-export declare const MANAGEMENT_HOSTNAME_APEX: "view.fast";
+/** Base URL every documentation link — catalog entries, skills, error pages — resolves against. */
+export declare const DOCS_BASE_URL: string;
+/**
+ * The production infrastructure apex. Committed artifacts and anything
+ * customer- or agent-facing (OpenAPI examples, docs, skills) must show this
+ * literal rather than the environment-resolved apex below: generating on a dev
+ * box would otherwise bake the dev apex into files everyone else reads.
+ */
+export declare const PROD_VIEW_FAST_APEX: "view.fast";
+/** The local-dev infrastructure apex. Never appears in committed artifacts. */
+export declare const DEV_VIEW_FAST_APEX: "preview.space";
+/** Resolve the infrastructure apex, allowing an explicit deployment override. */
+export declare function resolveViewFastApex(environment: Readonly<Partial<Pick<NodeJS.ProcessEnv, "NODE_ENV" | "SPACEFAST_VIEW_FAST_APEX">>>): string;
+/** Infrastructure apex used for public managed/custom domains. */
+export declare const VIEW_FAST_APEX: string;
 /** Reserved first-label prefix for the management namespace; users may not register it. */
 export declare const MANAGEMENT_LABEL_PREFIX: "wpc-manage-";

package/dist/config/domains.js

@@ -52,16 +52,30 @@ export function serviceOrigin(service, env) {
     const d = BY_ENV[env];
     return `${d.protocol}://${d.hosts[service]}`;
 }
+/** Base URL every documentation link — catalog entries, skills, error pages — resolves against. */
+export const DOCS_BASE_URL = `${serviceOrigin("www", "prod")}/docs`;
 // --- Apexes that are NOT spacefast.com subdomains -------------------------------
-// These live outside the per-env map because they are stable infra identities.
-/** Atomic infrastructure apex used for public managed/custom domains. */
-export const VIEW_FAST_APEX = "view.fast";
-// D-4 resolved 2026-06-26: default space hostnames are
-// `{hostLabel}.view.fast`; internal management hostnames share the same apex
-// under the reserved `wpc-manage-` label prefix and are never public space URLs.
-/** Apex for default space hostnames: `{hostLabel}.view.fast`. */
-export const SPACE_HOSTNAME_APEX = VIEW_FAST_APEX;
-/** Apex for internal management hostnames: `wpc-manage-{siteId}.view.fast`. */
-export const MANAGEMENT_HOSTNAME_APEX = VIEW_FAST_APEX;
+/**
+ * The production infrastructure apex. Committed artifacts and anything
+ * customer- or agent-facing (OpenAPI examples, docs, skills) must show this
+ * literal rather than the environment-resolved apex below: generating on a dev
+ * box would otherwise bake the dev apex into files everyone else reads.
+ */
+export const PROD_VIEW_FAST_APEX = "view.fast";
+/** The local-dev infrastructure apex. Never appears in committed artifacts. */
+export const DEV_VIEW_FAST_APEX = "preview.space";
+/** Resolve the infrastructure apex, allowing an explicit deployment override. */
+export function resolveViewFastApex(environment) {
+    const nodeEnvironment = environment.NODE_ENV?.trim().toLowerCase();
+    return (environment.SPACEFAST_VIEW_FAST_APEX?.trim().toLowerCase() ||
+        (["prod", "production"].includes(nodeEnvironment ?? "")
+            ? PROD_VIEW_FAST_APEX
+            : DEV_VIEW_FAST_APEX));
+}
+/** Infrastructure apex used for public managed/custom domains. */
+export const VIEW_FAST_APEX = resolveViewFastApex(typeof process === "undefined" ? {} : process.env);
+// Default space hostnames are `{hostLabel}.{VIEW_FAST_APEX}`; internal
+// management hostnames share the same apex under the reserved `wpc-manage-`
+// label prefix and are never public space URLs.
 /** Reserved first-label prefix for the management namespace; users may not register it. */
 export const MANAGEMENT_LABEL_PREFIX = "wpc-manage-";

package/dist/config/postgres-budget.d.ts

@@ -4,6 +4,7 @@ declare const postgresConnectionBudgetSchema: z.ZodObject<{
         maxConnections: z.ZodNumber;
         superuserReservedConnections: z.ZodNumber;
     }, z.core.$strip>;
+    migrationConnections: z.ZodNumber;
     operationalReserveConnections: z.ZodNumber;
     transactionPools: z.ZodRecord<z.ZodString, z.ZodObject<{
         serverConnections: z.ZodNumber;
@@ -57,6 +58,7 @@ export type PostgresConnectionBudgetSummary = {
     transactionPoolQueryHeadroom: number;
     steadyConnections: number;
     rollingDeploySurgeConnections: number;
+    migrationConnections: number;
     operationalReserveConnections: number;
     plannedConnections: number;
     unallocatedConnections: number;
@@ -66,6 +68,7 @@ export declare const POSTGRES_CONNECTION_BUDGET: {
         maxConnections: number;
         superuserReservedConnections: number;
     };
+    migrationConnections: number;
     operationalReserveConnections: number;
     transactionPools: Record<string, {
         serverConnections: number;

package/dist/config/postgres-budget.js

@@ -15,6 +15,7 @@ const postgresConnectionBudgetSchema = z
         maxConnections: z.number().int().positive(),
         superuserReservedConnections: z.number().int().nonnegative(),
     }),
+    migrationConnections: z.number().int().positive(),
     operationalReserveConnections: z.number().int().nonnegative(),
     transactionPools: z.record(z.string().min(1), z.object({
         serverConnections: z.number().int().positive(),
@@ -72,7 +73,10 @@ export function calculatePostgresConnectionBudget(plan, server = plan.server) {
     const transactionPoolQueryHeadroom = transactionPoolConnections - transactionPoolPinnedConnections;
     const steadyConnections = directSteadyConnections + transactionPoolConnections;
     const rollingDeploySurgeConnections = directServices.reduce((total, service) => total + service.rolloutOverlapReplicas * serviceFootprint(service), 0);
-    const plannedConnections = steadyConnections + rollingDeploySurgeConnections + plan.operationalReserveConnections;
+    const plannedConnections = steadyConnections +
+        rollingDeploySurgeConnections +
+        plan.migrationConnections +
+        plan.operationalReserveConnections;
     return {
         usableServerConnections,
         directSteadyConnections,
@@ -81,6 +85,7 @@ export function calculatePostgresConnectionBudget(plan, server = plan.server) {
         transactionPoolQueryHeadroom,
         steadyConnections,
         rollingDeploySurgeConnections,
+        migrationConnections: plan.migrationConnections,
         operationalReserveConnections: plan.operationalReserveConnections,
         plannedConnections,
         unallocatedConnections: usableServerConnections - plannedConnections,

package/dist/config/postgres-budget.json

@@ -3,10 +3,11 @@
         "maxConnections": 25,
         "superuserReservedConnections": 3
     },
+    "migrationConnections": 1,
     "operationalReserveConnections": 4,
     "transactionPools": {
         "controlPlaneRuntime": {
-            "serverConnections": 8
+            "serverConnections": 7
         }
     },
     "services": {

package/dist/contracts/abuse.js

@@ -32,7 +32,7 @@ export const abuseReportSchema = z.object({
     spaceId: z
         .string()
         .nullable()
-        .describe("Space the reported hostname resolved to, when it could be resolved."),
+        .describe("Space the reported hostname resolved to, when resolution succeeds."),
     createdAt: z.string().datetime().describe("When the report was filed."),
 });
 // Operator triage view: includes intake details the public receipt omits.