@spacefast/common 0.0.13 → 0.0.18

package/dist/contracts/spaces.js

@@ -1,28 +1,28 @@
 import { z } from "zod";
 import { SPACE_SLUG_MAX_LENGTH } from "../slug-policy/index.js";
-import { openHandoffSchema } from "./access.js";
+import { publishedAccessSchema } from "./access.js";
 import { AsyncOperationSchema, baseDiagnosticSchema, CursorPaginationSchema, cursorListQuerySchema, } from "./common.js";
 import { versionStatus, spaceStatus } from "./enums.js";
 import { runtimeKindSchema } from "./execution.js";
 import { conventionFilesSchema, uploadInstructionsSchema, manifestFileSchema } from "./internal.js";
 import { VersionSchema, PublishSourceSchema, SpaceSchema, spaceSettingsDigestSchema, } from "./resources.js";
 import { runtimeAppSchema } from "./runtime-app.js";
-import { spaceConfigSchema, spacePlacementConfigSchema } from "./space-config.js";
+import { SPACE_CONFIG_ACCEPTED_FILES, spaceConfigSchema, spacePlacementConfigSchema, } from "./space-config.js";
 import { principalIdSchema } from "./transfers.js";
 export const spaceClaimReceiptSchema = z.object({
     token: z
         .string()
         .min(1)
-        .describe("One-time, space-scoped credential returned only at anonymous space creation. Save it immediately — it is never shown again and is required to publish and manage the space until it is claimed."),
+        .describe("One-time, space-scoped credential returned only at anonymous space creation. Save it immediately. The server never shows it again. You need it to publish and manage the space until the space is claimed."),
     url: z
         .string()
         .url()
-        .describe("Browser-only claim link in `/claim#nonce` form. The fragment is a human handoff capability; API clients use the claim token as bearer auth for publish/update/status/exchange."),
+        .describe("Browser-only claim link with a short-lived, one-use path token. The access origin consumes it into an HttpOnly handoff, then redirects to a clean claim page. API clients use the separate claim token as bearer auth for publish, update, status, and exchange."),
     expiresAt: z.string().datetime(),
 });
 export const SpaceCreateResponseSchema = z.object({
     space: SpaceSchema,
-    open: openHandoffSchema,
+    access: publishedAccessSchema,
     claim: spaceClaimReceiptSchema.optional(),
 });
 // Stored per-version diagnostic surfaced on the space diagnostics feed: the shared
@@ -72,24 +72,24 @@ export const spacePatchSchema = z
         .min(2)
         .max(SPACE_SLUG_MAX_LENGTH)
         .optional()
-        .describe("Renames the space and its managed view.fast hostname. Send slug by itself. Previously managed hostnames keep a temporary, path- and query-preserving 307 redirect to the current hostname; immutable version URLs do not change."),
+        .describe("Renames the space and its managed view.fast hostname. Send slug by itself. Previously managed hostnames keep a temporary 307 redirect that preserves path and query to the current hostname. Immutable version URLs do not change."),
     config: spaceConfigSchema
         .nullable()
         .optional()
         .describe("Replaces the stored SpaceConfig overlay; null clears it."),
     baseSettingsDigest: spaceSettingsDigestSchema
         .optional()
-        .describe("Optimistic-concurrency base for versioned settings (title/config): the `settingsDigest` read from the Space resource when the form was loaded. When provided and the space's current settings digest no longer matches, the PATCH fails with 409 publish_base_changed and changes nothing."),
+        .describe("Optimistic-concurrency base for versioned settings (title and config): the `settingsDigest` read from the Space resource when the form loaded. If provided and the space's current settings digest no longer matches, the PATCH fails with 409 `publish_base_changed` and changes nothing."),
     force: z
         .boolean()
         .optional()
-        .describe("With baseSettingsDigest: acknowledge a changed base and overwrite anyway. The forced overwrite is recorded in the space activity feed. Never the default."),
+        .describe("With `baseSettingsDigest`, acknowledge a changed base and overwrite anyway. The server records the forced overwrite in the space activity feed. This is never the default."),
     dataLocation: z.string().min(1).optional(),
     placement: spacePlacementConfigSchema.optional(),
     noindex: z
         .boolean()
         .optional()
-        .describe("Hide the live production site from search engines. Applies only to claimed spaces' live hostnames; preview and version hostnames are always noindex."),
+        .describe("Hide the live production site from search engines. This applies only to live hostnames of claimed spaces. Preview and version hostnames are always noindex."),
 })
     .strict()
     .superRefine((value, ctx) => {
@@ -113,7 +113,7 @@ export const spaceClaimSchema = z
     claimToken: z
         .string()
         .min(1)
-        .describe("One-time claim token returned at anonymous creation. API clients send it as bearer auth; browser claim links carry a separate nonce fragment."),
+        .describe("One-time claim token returned at anonymous creation. API clients send it as bearer auth; browser claim links carry a separate browser handoff credential."),
     teamId: z
         .string()
         .min(1)
@@ -127,7 +127,7 @@ export const spaceClaimSchema = z
     agentContinuation: z
         .boolean()
         .optional()
-        .describe("User consent to keep the publishing agent authorized after the claim. The server independently proves continuation eligibility; consent cannot grant continuation for an ineligible space."),
+        .describe("User consent to keep the publishing agent authorized after the claim. The server independently proves continuation eligibility. Consent cannot grant continuation for an ineligible space."),
 })
     .superRefine((value, ctx) => {
     if (value.teamId && value.targetTeamId && value.teamId !== value.targetTeamId) {
@@ -140,18 +140,18 @@ export const spaceClaimSchema = z
 });
 export const anonymousClaimAssignSchema = z.object({
     teamId: z.string().min(1).optional(),
-    nonce: z.string().min(1).optional().describe("Browser claim nonce from the claim URL fragment."),
+    nonce: z.string().min(1).optional().describe("Browser claim nonce from the claim handoff."),
     agentContinuation: z
         .boolean()
         .optional()
-        .describe("User consent to keep the publishing agent authorized after the claim. The server independently proves continuation eligibility; consent cannot grant continuation for an ineligible space."),
+        .describe("User consent to keep the publishing agent authorized after the claim. The server independently proves continuation eligibility. Consent cannot grant continuation for an ineligible space."),
 });
 export const anonymousClaimResolveSchema = z.object({
-    nonce: z.string().min(1).optional().describe("Browser claim nonce from the claim URL fragment."),
+    nonce: z.string().min(1).optional().describe("Browser claim nonce from the claim handoff."),
     agentContinuation: z
         .boolean()
         .optional()
-        .describe("User consent applied when resolve auto-claims. The server independently proves continuation eligibility; consent cannot grant continuation for an ineligible space."),
+        .describe("User consent applied when resolve auto-claims. The server independently proves continuation eligibility. Consent cannot grant continuation for an ineligible space."),
 });
 export const anonymousClaimTeamSchema = z.object({
     id: z.string(),
@@ -176,6 +176,7 @@ export const anonymousClaimSharingSummarySchema = z.object({
     })),
     links: z.array(z.object({
         id: z.string(),
+        revision: z.number().int().positive(),
         name: z.string(),
         landingPath: z.string().startsWith("/"),
         scopes: z.array(z.string().startsWith("/")),
@@ -190,14 +191,15 @@ export const anonymousClaimResponseSchema = z.object({
         expiresAt: z.string().datetime().nullable(),
         claimedAt: z.string().datetime().nullable(),
     }),
+    access: publishedAccessSchema,
     continuation: z
         .object({
         eligible: z
             .boolean()
-            .describe("Server-proven: the publish intent records an originating agent holding the claim token, the one-time exchange is unredeemed, and a safe secretless return exists. Only then may the UI offer continuation."),
+            .describe("Server-proven continuation eligibility. Eligible means the publish intent records an originating agent that holds the claim token, the one-time exchange is unredeemed, and a safe secretless return exists. Only then can the UI offer continuation."),
         granted: z
             .boolean()
-            .describe("True once the claim left the one-time continuation exchange open for the originating agent."),
+            .describe("Whether the claim left the one-time continuation exchange open for the originating agent."),
     })
         .describe("Server-authoritative continuation eligibility and claim result."),
     teams: z.array(anonymousClaimTeamSchema).optional(),
@@ -227,8 +229,9 @@ export const anonymousClaimStatusResponseSchema = z.object({
         continuation: z
             .enum(["available", "used", "unavailable"])
             .optional()
-            .describe("Present once the space is claimed: whether this claim token can still be exchanged once for a durable access token (POST /v1/anonymous-claim/exchange)."),
+            .describe("Present once the space is claimed. Whether this claim token can still be exchanged once for a durable API key (POST /v1/anonymous-claim/exchange)."),
     }),
+    access: publishedAccessSchema,
 });
 export const anonymousClaimExchangeResponseSchema = z.object({
     space: z.object({
@@ -239,7 +242,7 @@ export const anonymousClaimExchangeResponseSchema = z.object({
     credential: z.object({
         accessToken: z
             .string()
-            .describe("Durable publish access token minted by the one-time exchange. Shown exactly once — store it (e.g. .spacefast/state.json) and never print it."),
+            .describe("Durable publish API key minted by the one-time exchange. Shown exactly once. Store it (for example, in .spacefast/state.json) and never print it."),
         accessTokenId: z.string(),
         label: z.string().nullable(),
         teamId: z.string(),
@@ -276,11 +279,11 @@ const manifestMutationFieldsSchema = {
     deletePaths: z
         .array(z.string().min(1))
         .default([])
-        .describe("Explicit paths to remove when publishMode is additive. Omitted paths are retained; only paths listed here are deleted."),
+        .describe("Explicit paths to remove when `publishMode` is additive. Omitted paths are retained. Only listed paths are deleted."),
     immutableAssetPrefixes: z
         .array(z.string().min(2))
         .optional()
-        .describe("Publisher-owned directory prefixes whose declared files are immutable generation assets. Snapshot publishes retain the current generation's matching files for exactly one subsequent generation."),
+        .describe("Publisher-owned directory prefixes whose declared files are immutable generation assets. Snapshot publishes retain the matching files from the current generation for exactly one subsequent generation."),
 };
 function refineManifestMutationRules(value, ctx) {
     if (value.immutableAssetPrefixes !== undefined) {
@@ -299,16 +302,16 @@ export const spaceVersionCreateSchema = z
     publishMode: z
         .enum(["additive", "snapshot"])
         .default("additive")
-        .describe("How to interpret omitted paths in files: additive retains existing paths unless explicitly replaced; snapshot treats files as the complete desired manifest."),
+        .describe("How to interpret omitted paths in `files`: `additive` retains existing paths unless explicitly replaced; `snapshot` treats `files` as the complete desired manifest."),
     sourceMetadata: z
         .record(z.string(), z.unknown())
         .optional()
-        .describe("Additional control-plane-only provenance for build/deploy read models."),
+        .describe("Additional control-plane-only provenance for build and deploy read models."),
     buildLog: z
         .string()
         .max(64_000)
         .optional()
-        .describe("Bounded build transcript for deploys that ran a local build before publishing."),
+        .describe("Build transcript truncated to a bounded size for deploys that ran a local build before publishing."),
     conventionFiles: conventionFilesSchema
         .optional()
         .describe("Routing convention contents used when deciding whether this publish is unchanged. The same values are supplied again when the version is finalized."),
@@ -318,7 +321,7 @@ export const spaceVersionCreateSchema = z
         .describe("Finalize intent for a declared upload. When every declared file lands, the version finalizes itself; the explicit finalize call remains available for recovery and replay."),
     files: z
         .array(manifestFileSchema)
-        .describe("Full desired file manifest. For first deploys, send path/size/contentType without hashes so upload can begin immediately. For updates, include sha256 to let the server skip unchanged files."),
+        .describe("The complete desired file manifest. For first deploys, send `path`, `size`, and `contentType` without hashes so upload can begin immediately. For updates, include `sha256` so the server can skip unchanged files."),
     ...manifestMutationFieldsSchema,
 })
     .superRefine(refineManifestMutationRules);
@@ -331,12 +334,16 @@ export const spaceListSchema = z.object({
     pagination: CursorPaginationSchema,
 });
 export const spaceListQuerySchema = cursorListQuerySchema.extend({
-    team: z.string().min(1).optional().describe("Filter to spaces owned by this team id or slug."),
+    team: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Filter that limits results to spaces owned by this team id or slug."),
 });
 export const spaceVersionListQuerySchema = cursorListQuerySchema;
 // Version processing log lines (upload/finalize/promote output), newest-first.
 export const versionLogEntrySchema = z.object({
-    timestamp: z.string().datetime().describe("When the version last changed state."),
+    timestamp: z.string().datetime().describe("Instant when the version last changed state."),
     level: z.string().describe("Log severity: info or error."),
     code: z.string().describe("Stable version.{status} code for the line."),
     message: z.string().describe("Human-readable log line."),
@@ -398,8 +405,10 @@ export const spaceFilesResponseSchema = z.object({
     index: spaceVersionFileIndexSchema,
     search: spaceVersionFilesSearchSchema,
 });
-export const spaceVersionFileQuerySchema = z.object({
+export const spaceVersionFilePathQuerySchema = z.object({
     path: z.string().min(1),
+});
+export const spaceVersionFileQuerySchema = spaceVersionFilePathQuerySchema.extend({
     download: z.string().optional(),
 });
 export const spaceVersionFileResponseSchema = z.object({
@@ -413,13 +422,6 @@ export const spaceVersionFileResponseSchema = z.object({
     truncated: z.boolean(),
     cached: z.boolean(),
 });
-export const spaceVersionFileDirectUrlResponseSchema = z.object({
-    versionId: z.string(),
-    path: z.string(),
-    url: z.string().url(),
-    managementHostname: z.string(),
-    expiresInSeconds: z.number().int().positive(),
-});
 export const spaceVersionFileUrlPreviewSchema = z.object({
     versionId: z.string(),
     path: z.string(),
@@ -471,8 +473,22 @@ export const spaceVersionConventionArtifactContentResponseSchema = spaceVersionC
     content: z.string(),
     truncated: z.boolean(),
 });
+/**
+ * Where a routing diagnostic came from — a committed path in the version the
+ * publisher can open. Wider than the convention artifacts: the Spacefast config
+ * file states routing rules too, and they compile through the same compiler and
+ * report the same codes. Every accepted config filename is listed because
+ * finalize reads whichever one the version ships, and naming the canonical
+ * `sf.jsonc` at a version that committed `spacefast.jsonc` sends the publisher
+ * to a file that is not there.
+ */
+export const spaceVersionRoutingDiagnosticFileSchema = z.enum([
+    "_redirects",
+    "_headers",
+    ...SPACE_CONFIG_ACCEPTED_FILES,
+]);
 export const spaceVersionRoutingDiagnosticSchema = z.object({
-    file: spaceVersionConventionArtifactPathSchema,
+    file: spaceVersionRoutingDiagnosticFileSchema,
     line: z.number().int().nonnegative(),
     severity: z.enum(["warning", "error"]),
     code: z.string(),
@@ -549,7 +565,7 @@ export const spaceVersionIntentResponseSchema = z.object({
         .describe("Created version id, or null when the manifest matched and nothing changed."),
     upload: uploadInstructionsSchema
         .nullable()
-        .describe("Runtime upload session, present only while bytes still need uploading. Upload, then finalize."),
+        .describe("Runtime upload session; present only while bytes still need uploading. Upload first, then finalize."),
     ignoredPaths: z
         .array(z.string())
         .default([])
@@ -581,13 +597,13 @@ export const publishRequestSchema = z
     publishMode: z
         .enum(["additive", "snapshot"])
         .default("additive")
-        .describe("How to interpret omitted paths in files: additive retains existing paths unless explicitly replaced; snapshot treats files as the complete desired manifest."),
+        .describe("How to interpret omitted paths in `files`: `additive` retains existing paths unless explicitly replaced; `snapshot` treats `files` as the complete desired manifest."),
     email: z
         .string()
         .email()
         .max(320)
         .optional()
-        .describe("Optional expiry-reminder address for anonymous publishes. Stored only until the space is claimed or expires, then deleted; never logged."),
+        .describe("Optional expiry-reminder address for anonymous publishes. The server stores it only until the space is claimed or expires, then deletes it. It is never logged."),
     channel: z
         .enum(["live"])
         .nullable()
@@ -637,7 +653,7 @@ export const publishActivationSchema = z.object({
     channel: z
         .enum(["live"])
         .nullable()
-        .describe("Channel this publish targeted. null = ready version without promotion."),
+        .describe("Channel this publish targeted; null means a ready version without promotion."),
     outcome: z
         .enum(["activated", "unpromoted", "superseded", "pending"])
         .describe("activated: the live pointer moved to this version. unpromoted: ready with channel null, by request. superseded: ready, but a newer publish holds the live pointer. pending: not settled yet."),
@@ -652,7 +668,7 @@ export const publishActivationSchema = z.object({
 export const publishNextSchema = z.object({
     action: z
         .enum(["done", "upload", "finalize", "poll"])
-        .describe("done: stop, this request's intent is settled. upload: PUT the upload targets, then follow the finalize link. finalize: all bytes are present, POST url to commit. poll: server-side work in flight, GET url after retryAfter seconds."),
+        .describe("What the caller does next: `done` (stop; this request intent is settled), `upload` (PUT upload targets, then follow the finalize link), `finalize` (all bytes are present, POST `url` to commit), or `poll` (server-side work is in flight, GET `url` after `retryAfter` seconds)."),
     url: z.string().optional().describe("The endpoint the action applies to."),
     retryAfter: z
         .number()
@@ -660,11 +676,11 @@ export const publishNextSchema = z.object({
         .positive()
         .optional()
         .describe("Polling cadence in seconds; present only when action is poll."),
-    hint: z.string().max(140).describe("One plain sentence for an agent mid-loop."),
+    hint: z.string().max(140).describe("One plain sentence for an agent in the middle of a loop."),
 });
 export const publishReceiptSchema = z.object({
     space: publishReceiptSpaceSchema,
-    open: openHandoffSchema.optional(),
+    access: publishedAccessSchema.optional(),
     version: publishReceiptVersionSchema,
     activation: publishActivationSchema,
     next: publishNextSchema,
@@ -674,7 +690,7 @@ export const publishReceiptSchema = z.object({
     diagnostics: z
         .array(baseDiagnosticSchema)
         .optional()
-        .describe("Publish diagnostics: the `noop_publish` info diagnostic when nothing changed (the only noop signal), manifest warnings such as `path_case_collision`, and serving-shape notes such as `single_html_index` or `files_mode_inferred`."),
+        .describe("Publish diagnostics. Includes the `noop_publish` info diagnostic when nothing changed (the only noop signal), manifest warnings such as `path_case_collision`, and serving-shape notes such as `single_html_index` or `files_mode_inferred`."),
     links: z
         .object({
         resume: z
@@ -706,7 +722,7 @@ export const spaceVersionResumeResponseSchema = z.object({
     versionId: z.string(),
     upload: uploadInstructionsSchema
         .nullable()
-        .describe("Fresh runtime upload session, present only while files still need uploading. Upload, then finalize."),
+        .describe("Fresh runtime upload session; present only while files still need uploading. Upload first, then finalize."),
     ignoredPaths: z
         .array(z.string())
         .default([])
@@ -722,7 +738,7 @@ export const versionPromoteSchema = z
         .string()
         .min(1)
         .optional()
-        .describe('Channel to point at this version; defaults to "live". Non-live channel names are rejected with channel_unsupported until additional channels ship.'),
+        .describe('Channel to point at this version. Defaults to "live". Non-live channel names are rejected with `channel_unsupported` until additional channels ship.'),
 })
     .optional()
     .default({});
@@ -741,15 +757,15 @@ export const spaceRuntimeStatusSchema = z.object({
     liveVersionId: z
         .string()
         .nullable()
-        .describe("Version that the live space URL currently points to, if any."),
+        .describe("Version that the live space URL now points to, if any."),
     pendingVersionId: z
         .string()
         .nullable()
-        .describe("Version that live traffic is trying to publish, if any."),
+        .describe("Version that live traffic is trying to publish now, if any."),
     liveUrl: z
         .string()
         .nullable()
-        .describe("Live space URL. Flips to the latest version after a successful publish to `live`."),
+        .describe("Live space URL. It moves to the latest version after a successful publish to `live`."),
     runtimeState: spaceStatus.describe("Space operation-lifecycle status."),
     liveVersionStatus: versionStatus.nullable(),
     liveRuntimeKind: runtimeKindSchema
@@ -759,7 +775,7 @@ export const spaceRuntimeStatusSchema = z.object({
     operation: AsyncOperationSchema.nullable(),
     app: runtimeAppSchema
         .nullable()
-        .describe("What the live version runs: its Zero capsule or Functions worker, discriminated by `runtimeKind`. Null for a static space, and null for callers whose credential does not carry `versions:read` — describing an app is a read of the version's contents, not of the space's serving state."),
+        .describe("What the live version runs: its Zero capsule or Functions worker, discriminated by `runtimeKind`. Null for a static space. Also null for callers whose credential does not carry `versions:read`, because app details read version contents, not serving state."),
 });
 export const spaceApplyChangeBaseSchema = z.object({
     kind: z.enum(["variable", "routing", "access", "settings"]),

package/dist/contracts/superadmin-spaces.d.ts

@@ -185,6 +185,7 @@ export declare const SuperadminSpaceDetailSchema: z.ZodObject<{
             always_hot: "always_hot";
         }>;
         moving: z.ZodBoolean;
+        hasRuntime: z.ZodBoolean;
         channels: z.ZodRecord<z.ZodString, z.ZodObject<{
             versionId: z.ZodString;
             updatedAt: z.ZodString;
@@ -267,7 +268,7 @@ export declare const SuperadminSpaceDetailSchema: z.ZodObject<{
                 bodyEnd: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 noscript: z.ZodOptional<z.ZodArray<z.ZodString>>;
             }, z.core.$strip>>;
-            dataSources: z.ZodOptional<z.ZodPreprocess<z.ZodRecord<z.ZodString, z.ZodObject<{
+            dataSources: z.ZodOptional<z.ZodPipe<z.ZodUnknown, z.ZodRecord<z.ZodString, z.ZodObject<{
                 kind: z.ZodLiteral<"wordpress">;
                 url: z.ZodString;
             }, z.core.$strict>>>>;
@@ -405,6 +406,14 @@ export declare const SuperadminSpaceDetailSchema: z.ZodObject<{
         updatedAt: z.ZodString;
     }, z.core.$strip>>;
 }, z.core.$strip>;
+export declare const superadminSpaceViewLinkWriteSchema: z.ZodObject<{
+    path: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const SuperadminSpaceViewLinkSchema: z.ZodObject<{
+    landingPath: z.ZodString;
+    expiresAt: z.ZodString;
+    url: z.ZodString;
+}, z.core.$strict>;
 export declare const SuperadminAnonymousSpaceSchema: z.ZodObject<{
     id: z.ZodString;
     tenantId: z.ZodString;
@@ -511,6 +520,7 @@ export declare const SuperadminAnonymousSpaceAssignResponseSchema: z.ZodObject<{
             always_hot: "always_hot";
         }>;
         moving: z.ZodBoolean;
+        hasRuntime: z.ZodBoolean;
         channels: z.ZodRecord<z.ZodString, z.ZodObject<{
             versionId: z.ZodString;
             updatedAt: z.ZodString;
@@ -593,7 +603,7 @@ export declare const SuperadminAnonymousSpaceAssignResponseSchema: z.ZodObject<{
                 bodyEnd: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 noscript: z.ZodOptional<z.ZodArray<z.ZodString>>;
             }, z.core.$strip>>;
-            dataSources: z.ZodOptional<z.ZodPreprocess<z.ZodRecord<z.ZodString, z.ZodObject<{
+            dataSources: z.ZodOptional<z.ZodPipe<z.ZodUnknown, z.ZodRecord<z.ZodString, z.ZodObject<{
                 kind: z.ZodLiteral<"wordpress">;
                 url: z.ZodString;
             }, z.core.$strict>>>>;
@@ -652,3 +662,4 @@ export type SuperadminSpaceVersion = z.infer<typeof SuperadminSpaceVersionSchema
 export type SuperadminSpaceDetail = z.infer<typeof SuperadminSpaceDetailSchema>;
 export type SuperadminAnonymousSpace = z.infer<typeof SuperadminAnonymousSpaceSchema>;
 export type SuperadminAnonymousSpaceList = z.infer<typeof SuperadminAnonymousSpaceListSchema>;
+export type SuperadminSpaceViewLink = z.infer<typeof SuperadminSpaceViewLinkSchema>;

package/dist/contracts/superadmin-spaces.js

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { accessScopePathSchema } from "./access.js";
 import { SpaceSchema } from "./resources.js";
 import { ZERO_RUNTIME_KIND } from "./zero.js";
 const zeroLogLevelSchema = z.enum(["debug", "info", "warn", "error"]);
@@ -87,6 +88,20 @@ export const SuperadminSpaceDetailSchema = z.object({
     hostnames: z.array(SuperadminSpaceHostnameSchema),
     versions: z.array(SuperadminSpaceVersionSchema),
 });
+// Operator view links. Ops Slack links superadmin instead of a customer's own
+// private URL, so this is the hop that opens the actual page from an alert.
+export const superadminSpaceViewLinkWriteSchema = z
+    .object({ path: accessScopePathSchema.optional() })
+    .strict();
+// Stateless: the URL is a signed token, so there is no row to name, list, or
+// revoke individually — it simply expires.
+export const SuperadminSpaceViewLinkSchema = z
+    .object({
+    landingPath: z.string(),
+    expiresAt: z.string().datetime(),
+    url: z.string().url(),
+})
+    .strict();
 export const SuperadminAnonymousSpaceSchema = z.object({
     id: z.string(),
     tenantId: z.string(),

package/dist/contracts/superadmin-tenants.js

@@ -22,11 +22,11 @@ export const SuperadminProviderClientSchema = z.object({
         .string()
         .nullable()
         .describe("Default PHP version for sites provisioned under this client."),
-    status: providerClientStatus.describe("Whether this client identity may provision sites."),
+    status: providerClientStatus.describe("Whether this client identity can provision sites."),
     tokenHint: z
         .string()
         .nullable()
-        .describe("Masked tail of the stored API token (never the full value)."),
+        .describe("Masked tail of the stored API key (never the full value)."),
     createdAt: z.string().datetime(),
     updatedAt: z.string().datetime(),
 });
@@ -78,11 +78,11 @@ export const SuperadminTenantSchema = z.object({
         .string()
         .datetime()
         .nullable()
-        .describe("Billing grace deadline; present only while status is past_due."),
+        .describe("Billing grace deadline; present only when status is past_due."),
     defaultRegion: z
         .string()
         .nullable()
-        .describe('Default placement region for new sites; null/"auto" lets placement decide.'),
+        .describe('Default placement region for new sites; null or "auto" lets placement decide.'),
     metadata: z.record(z.string(), z.string()).nullable().describe("Operator-attached metadata."),
     providerClient: SuperadminProviderClientSchema.nullable().describe("ProviderClient owned by this tenant; null when the tenant provisions under the first-party client."),
     teamCount: z.number().int().nonnegative(),

package/dist/contracts/superadmin.d.ts

@@ -277,6 +277,10 @@ export declare const superadminAddonCreateSchema: z.ZodObject<{
     note: z.ZodOptional<z.ZodString>;
     expiresAt: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+export declare const superadminStorageQuotaSetSchema: z.ZodObject<{
+    storageBytes: z.ZodNumber;
+    note: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 export declare const SuperadminAddonSchema: z.ZodObject<{
     id: z.ZodString;
     teamId: z.ZodString;

package/dist/contracts/superadmin.js

@@ -136,10 +136,23 @@ export const SuperadminPlanGrantListSchema = makeOffsetListSchema("grants", Supe
 export const superadminAddonCreateSchema = z.object({
     team: z.string().trim().min(1).describe("Team id or slug."),
     limit: z.enum(["teamMembers", "subTeams", "storageBytes", "externalDomainGroups"]),
-    amount: z.number().int().positive().describe("Additive amount (seats count, bytes, ...)."),
+    amount: z
+        .number()
+        .int()
+        .positive()
+        .describe("Additive amount (seat count, bytes, and similar units)."),
     note: z.string().trim().max(500).optional(),
     expiresAt: z.string().datetime().optional(),
 });
+export const superadminStorageQuotaSetSchema = z.object({
+    storageBytes: z
+        .number()
+        .int()
+        .positive()
+        .max(Number.MAX_SAFE_INTEGER)
+        .describe("Desired total storage quota in bytes."),
+    note: z.string().trim().max(500).optional(),
+});
 export const SuperadminAddonSchema = z.object({
     id: z.string(),
     teamId: z.string(),