@spacefast/common 0.0.2

package/dist/contracts/superadmin-tenants.js

@@ -0,0 +1,117 @@
+import { z } from "zod";
+import { makeOffsetListSchema } from "./common.js";
+import { providerClientStatus, tenantKind, tenantStatus } from "./enums.js";
+import { superadminPaginationSchema } from "./superadmin.js";
+// ProviderClient (`pvc_`) = one WP.Cloud API client identity sites are
+// provisioned under (internal-docs/platform.md "ProviderClient"). Operator-only
+// resource. `tenantId` is null for the Spacefast first-party client; a tenant
+// bringing its own WP.Cloud account owns exactly one row. The API token is
+// write-only; responses expose only a masked hint, never the secret.
+export const SuperadminProviderClientSchema = z.object({
+    id: z.string().describe("ProviderClient id (`pvc_`)."),
+    provider: z.literal("wpcloud").describe("Hosting provider this client identity belongs to."),
+    tenantId: z
+        .string()
+        .nullable()
+        .describe("Owning tenant; null for the Spacefast first-party client."),
+    name: z.string().describe("The WP.Cloud client/account name used as the {client} path param."),
+    label: z.string().describe("Human-readable operator label."),
+    apiBase: z.string().nullable().describe("API base URL override; null uses the default."),
+    defaultDatacenter: z
+        .string()
+        .nullable()
+        .describe("Default datacenter for sites provisioned under this client."),
+    defaultPhpVersion: z
+        .string()
+        .nullable()
+        .describe("Default PHP version for sites provisioned under this client."),
+    status: providerClientStatus.describe("Whether this client identity may provision sites."),
+    tokenHint: z
+        .string()
+        .nullable()
+        .describe("Masked tail of the stored API token (never the full value)."),
+    createdAt: z.string().datetime(),
+    updatedAt: z.string().datetime(),
+});
+export const SuperadminProviderClientListSchema = z.object({
+    clients: z.array(SuperadminProviderClientSchema),
+});
+const providerClientName = z
+    .string()
+    .trim()
+    .min(1)
+    .max(128)
+    .regex(/^[a-z0-9][a-z0-9-]*$/, {
+    message: "WP.Cloud client names are lowercase letters, numbers, and hyphens.",
+});
+export const superadminProviderClientCreateSchema = z.object({
+    name: providerClientName,
+    label: z.string().trim().min(1).max(255),
+    apiToken: z.string().trim().min(1),
+    apiBase: z.string().url().optional(),
+    defaultDatacenter: z.string().trim().min(1).optional(),
+    defaultPhpVersion: z.string().trim().min(1).optional(),
+    // Connect the client to a tenant at creation; omit for the first-party client.
+    tenantId: z.string().trim().min(1).optional(),
+});
+export const superadminProviderClientPatchSchema = z.object({
+    label: z.string().trim().min(1).max(255).optional(),
+    // Rotate the stored token. Omit to keep the existing one.
+    apiToken: z.string().trim().min(1).optional(),
+    apiBase: z.string().url().nullable().optional(),
+    defaultDatacenter: z.string().trim().min(1).nullable().optional(),
+    defaultPhpVersion: z.string().trim().min(1).nullable().optional(),
+    status: providerClientStatus.optional(),
+    // Connect/disconnect the owning tenant (null disconnects → first-party pool).
+    tenantId: z.string().trim().min(1).nullable().optional(),
+});
+// Live connectivity check against the client's WP.Cloud account.
+export const superadminProviderClientTestResponseSchema = z.object({
+    ok: z.boolean(),
+    clientName: z.string(),
+    datacenters: z.array(z.string()).optional(),
+    error: z.string().nullable(),
+});
+// Tenant = a Spacefast platform account (Stripe-style). Superadmins provision
+// `partner` tenants; partner tenants may own a ProviderClient.
+export const SuperadminTenantSchema = z.object({
+    id: z.string().describe("Tenant id (`ten_`); the main tenant is `ten_main`."),
+    kind: tenantKind,
+    name: z.string(),
+    status: tenantStatus,
+    servingGraceUntil: z
+        .string()
+        .datetime()
+        .nullable()
+        .describe("Billing grace deadline; present only while status is past_due."),
+    defaultRegion: z
+        .string()
+        .nullable()
+        .describe('Default placement region for new sites; null/"auto" lets placement decide.'),
+    metadata: z.record(z.string(), z.string()).nullable().describe("Operator-attached metadata."),
+    providerClient: SuperadminProviderClientSchema.nullable().describe("ProviderClient owned by this tenant; null when the tenant provisions under the first-party client."),
+    teamCount: z.number().int().nonnegative(),
+    siteCount: z.number().int().nonnegative(),
+    spaceCount: z.number().int().nonnegative(),
+    createdAt: z.string().datetime(),
+    updatedAt: z.string().datetime(),
+});
+export const SuperadminTenantListSchema = makeOffsetListSchema("tenants", SuperadminTenantSchema, superadminPaginationSchema);
+export const superadminTenantListQuerySchema = z.object({
+    limit: z.coerce.number().int().min(1).max(100).default(25),
+    offset: z.coerce.number().int().min(0).default(0),
+    search: z.string().trim().optional(),
+});
+export const superadminTenantCreateSchema = z.object({
+    name: z.string().trim().min(1).max(255),
+    // Superadmins only ever create partner tenants; the main tenant is seeded.
+    kind: z.literal("partner").default("partner"),
+    defaultRegion: z.string().trim().min(1).optional(),
+    metadata: z.record(z.string(), z.string()).optional(),
+});
+export const superadminTenantPatchSchema = z.object({
+    name: z.string().trim().min(1).max(255).optional(),
+    status: tenantStatus.optional(),
+    defaultRegion: z.string().trim().min(1).nullable().optional(),
+    metadata: z.record(z.string(), z.string()).nullable().optional(),
+});