@spacefast/common 0.0.21 → 0.0.24

package/dist/contracts/error-codes.js

@@ -34,19 +34,14 @@ export const ERROR_CODES = [
     "agent_handoff_origin_unsupported",
     "ambiguous_space_slug",
     "anonymous_expired",
-    "anonymous_pool_unavailable",
     "anonymous_publish_rate_limited",
     "anonymous_space_limit_reached",
     "api_key_scope_underivable",
-    "archive_body_required",
     "archive_too_large",
     "auth_code_required",
     "authorization_pending",
-    "billing_receipt_invalid",
-    "billing_receipt_not_bound_to_team",
-    "billing_store_not_configured",
-    "billing_subscription_conflict",
-    "billing_unknown_product",
+    "blob_gate_record_missing",
+    "blob_gate_token_invalid",
     "build_command_missing",
     "build_execution_unavailable",
     "build_failed",
@@ -65,7 +60,6 @@ export const ERROR_CODES = [
     "claim_target_not_found",
     "claimed_space_quota_exceeded",
     "cli_upgrade_required",
-    "comment_screenshot_rate_limited",
     "config_file_too_large",
     "config_functions_key_removed",
     "config_invalid",
@@ -82,7 +76,6 @@ export const ERROR_CODES = [
     "credential_revoked",
     "csam_blocked",
     "csam_policy_floor",
-    "custom_certificates_require_dedicated_site",
     "data_location_immutable",
     "db_not_available",
     "device_authorization_failed",
@@ -142,19 +135,14 @@ export const ERROR_CODES = [
     "event_payload_too_large",
     "event_rate_limited",
     "expired_token",
-    "export_archive_not_ready",
-    "export_version_not_found",
     "feature_unavailable",
     "files_mode_does_not_support_spa",
     "forbidden",
     "free_external_proxy_disabled",
-    "google_play_webhook_identity_not_configured",
     "idempotency_conflict_in_progress",
     "idempotency_key_reused",
-    "import_archive_not_uploaded",
-    "import_not_cancelable",
-    "import_not_waiting_for_archive",
     "incumbent_controls_dns",
+    "ingest_admission_exceeded",
     "inject_invalid",
     "inject_snippet_too_large",
     "internal_error",
@@ -165,7 +153,6 @@ export const ERROR_CODES = [
     "invalid_domain",
     "invalid_domain_name",
     "invalid_file_path",
-    "invalid_google_play_webhook_identity",
     "invalid_grant",
     "invalid_idempotency_key",
     "invalid_publish_archive",
@@ -214,15 +201,16 @@ export const ERROR_CODES = [
     "path_case_collision",
     "path_too_long",
     "placement_invalid_burstable",
-    "placement_mode_requires_plan",
     "plan_grant_already_active",
     "plan_grant_already_revoked",
     "platform_tenant_immutable_client",
     "policy_exceeds_grantor",
     "principal_space_mismatch",
+    "promote_admission_exceeded",
     "provider_error",
     "provider_job_failed",
     "provider_job_timeout",
+    "provider_privilege",
     "provider_runtime_feature_unsupported",
     "provider_site_id_required",
     "proxy_upstream_denied",
@@ -241,6 +229,7 @@ export const ERROR_CODES = [
     "publish_not_cancelable",
     "publish_path_collision",
     "publish_path_invalid",
+    "publish_session_expired",
     "publish_setup_failed",
     "publish_snapshot_empty",
     "publish_upload_failed",
@@ -250,12 +239,14 @@ export const ERROR_CODES = [
     "registration_expired",
     "registration_expiring",
     "resource_revision_changed",
+    "response_headers_unservable",
+    "response_table_too_large",
+    "review_item_claimed",
     "routing_rules_over_plan",
     "runtime_action_forbidden",
     "runtime_api_not_found",
     "runtime_callback_forbidden",
     "runtime_dev_unsupported",
-    "runtime_engine_zip_missing",
     "runtime_hostname_unassigned",
     "runtime_instance_mismatch",
     "runtime_jti_missing",
@@ -265,6 +256,7 @@ export const ERROR_CODES = [
     "runtime_management_unavailable",
     "runtime_not_provisioned",
     "runtime_operation_missing",
+    "runtime_purge_failed",
     "runtime_scope_forbidden",
     "runtime_token_bad_signature",
     "runtime_token_expired",
@@ -289,7 +281,6 @@ export const ERROR_CODES = [
     "source_archive_expansion_ratio_exceeded",
     "source_archive_validation_busy",
     "space_already_claimed",
-    "space_capacity_warming",
     "space_claim_unavailable",
     "space_claimed_credential_available",
     "space_disabled",
@@ -297,12 +288,6 @@ export const ERROR_CODES = [
     "space_has_active_publish",
     "space_has_active_version",
     "space_hostname_identity_missing",
-    "space_import_archive_invalid",
-    "space_import_archive_too_large",
-    "space_import_config_only_archive",
-    "space_import_runtime_schema_unsupported",
-    "space_move_would_strand_zero_data",
-    "space_moving",
     "space_no_live_version",
     "space_not_disabled",
     "space_not_restorable",
@@ -329,7 +314,6 @@ export const ERROR_CODES = [
     "storage_quota_decrease_not_supported",
     "storage_quota_exceeded",
     "storage_unavailable",
-    "storage_usage_unavailable",
     "stripe_error",
     "superseded_by_publish",
     "takeover_notice_window",
@@ -348,7 +332,6 @@ export const ERROR_CODES = [
     "tenant_suspended",
     "theme_value_invalid",
     "transfer_cross_tenant_unsupported",
-    "transfer_move_failed",
     "transfer_not_cancelable",
     "transfer_push_failed",
     "transfer_source_changed",
@@ -362,7 +345,6 @@ export const ERROR_CODES = [
     "upload_size_mismatch",
     "user_banned",
     "validation_error",
-    "variable_cascade_failed",
     "verification_required",
     "version_already_live",
     "version_artifact_not_found",
@@ -387,7 +369,6 @@ export const ERROR_CODES = [
     "version_total_bytes_exceeded",
     "webhook_delivery_budget_exceeded",
     "whois_unavailable",
-    "wp_cloud_anonymous_pool_required",
     "wp_cloud_assignment_kind_mismatch",
     "wp_cloud_assignment_space_mismatch",
     "wp_cloud_assignment_team_mismatch",
@@ -396,7 +377,6 @@ export const ERROR_CODES = [
     "wp_cloud_site_still_assigned",
     "wp_cloud_team_shared_site_exists",
     "wp_cloud_webhook_secret_not_configured",
-    "zero_activating",
     "zero_ai_unavailable",
     "zero_artifact_abi_mismatch",
     "zero_artifact_invalid",
@@ -478,7 +458,6 @@ export const ERROR_CODES = [
     "zero_replay_query_invalid",
     "zero_replay_unavailable",
     "zero_request_body_too_large",
-    "zero_requires_dedicated_plan",
     "zero_response_header_forbidden",
     "zero_response_header_invalid",
     "zero_response_too_large",
@@ -500,7 +479,6 @@ export const ERROR_CODES = [
     "zero_runs_invalid",
     "zero_runs_require_runtime_compiler",
     "zero_runs_too_many",
-    "zero_shopify_unavailable",
 ];
 const ERROR_CODE_SET = new Set(ERROR_CODES);
 export function isErrorCode(value) {

package/dist/contracts/execution.d.ts

@@ -18,18 +18,12 @@ import { z } from "zod";
  * portable seam, and it is deliberately narrow: a capsule handler's semantics
  * depend on the transaction wrapped around it, which does not exist on an
  * isolate a continent away from the database.
+ *
+ * Neither is a "kind" a space declares. Every space owns a site, so what runs
+ * is a routing decision derived from what the published tree carries: static
+ * files, a worker, a capsule, or any mix of the three in one publish. There is
+ * no enum here to disagree with the tree.
  */
-/**
- * What a live version runs. `static` is bytes on disk with no execution at
- * all, and remains the overwhelming majority of traffic; the other two each
- * name a product.
- */
-export declare const runtimeKindSchema: z.ZodEnum<{
-    zero: "zero";
-    functions: "functions";
-    static: "static";
-}>;
-export type RuntimeKind = z.infer<typeof runtimeKindSchema>;
 /**
  * How a live runtime delivers realtime invalidations.
  *
@@ -60,6 +54,7 @@ export declare const EXECUTION_ENV_TOTAL_VALUE_MAX_BYTES: number;
 export declare const SERVER_ENV_FILE = ".env.server";
 /** Lakebed's documented server-only env filename, accepted for capsule portability. */
 export declare const LAKEBED_SERVER_ENV_FILE = ".env.lakebed.server";
+export declare const SERVER_ENV_FILES: readonly [".env.server", ".env.lakebed.server"];
 /**
  * Names the platform reserves for itself in the tenant environment. Tenant
  * code cannot set these, so it cannot spoof the values the broker trusts.
@@ -114,8 +109,18 @@ export declare const executionCapabilitiesSchema: z.ZodDefault<z.ZodObject<{
     env: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
     realtime: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
     logging: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+    gravatar: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+    spam: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+    email: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
 }, z.core.$strip>>;
 export type ExecutionCapabilities = z.infer<typeof executionCapabilitiesSchema>;
+/**
+ * The order every surface renders a capability list in. Fixed rather than
+ * derived from a response body, so two spaces never list their capabilities
+ * differently because JSON came back reshuffled — and declared here, beside the
+ * schema, so adding a capability cannot leave a renderer silently omitting it.
+ */
+export declare const EXECUTION_CAPABILITY_ORDER: readonly ["db", "fetch", "auth", "env", "realtime", "logging", "gravatar", "spam", "email"];
 /**
  * The portable seam, stated as one predicate.
  *
@@ -123,8 +128,15 @@ export type ExecutionCapabilities = z.infer<typeof executionCapabilitiesSchema>;
  * tier. `db` because Zero's store guarantees every handler runs inside one
  * parent-owned transaction, which an isolate reaching the database over a
  * relay cannot offer. `auth` because capsule identity is resolved against that
- * same transaction's view. Everything else — fetch, env, realtime, logging —
- * is brokered identically on both tiers and does not constrain placement.
+ * same transaction's view. Everything else — fetch, env, realtime, logging, and
+ * the three platform services — is brokered identically on both tiers and does
+ * not constrain placement.
+ *
+ * `email` is the one worth stating explicitly, because it looks like it should
+ * bind: a Zero mutation's send is atomic with its database writes, and a
+ * Function's is not. That is a difference in the *guarantee* either tier can
+ * offer, not in what the handler is allowed to reach, and placement follows
+ * what code reaches. An author who needs that atomicity writes a capsule.
  *
  * Nothing here decides placement automatically: the product a version deploys
  * to is a property of what its author wrote, and this predicate only reports
@@ -156,6 +168,9 @@ export declare function executionEndpointSourceSchema(routePathSchema: z.ZodType
         env: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
         realtime: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
         logging: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+        gravatar: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+        spam: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+        email: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
     }, z.core.$strip>>;
 }, z.core.$strict>;
 /**
@@ -175,6 +190,13 @@ export declare function executionBundleSchema(options: {
 export declare function executionStaticFileSchema(options: {
     storageRoot: string;
     maxBytes: number;
+    /**
+     * The one underscore-prefixed root a platform compile may write into. Author
+     * trees still cannot: the leading-underscore ban is what keeps `_headers` and
+     * `_redirects` from being forged as content, and this exemption is a literal
+     * prefix the compiler owns, not a relaxation of the rule.
+     */
+    platformAssetRoot?: string;
 }): z.ZodObject<{
     path: z.ZodString;
     contentType: z.ZodString;
@@ -192,47 +214,3 @@ export declare const executionInspectPolicySchema: z.ZodEnum<{
     private: "private";
 }>;
 export type ExecutionInspectPolicy = z.infer<typeof executionInspectPolicySchema>;
-export declare const executionLogEntrySchema: z.ZodObject<{
-    id: z.ZodString;
-    timestamp: z.ZodString;
-    level: z.ZodEnum<{
-        info: "info";
-        error: "error";
-        debug: "debug";
-        warn: "warn";
-    }>;
-    requestId: z.ZodNullable<z.ZodString>;
-    versionId: z.ZodNullable<z.ZodString>;
-    handlerName: z.ZodNullable<z.ZodString>;
-    message: z.ZodString;
-    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-}, z.core.$strict>;
-export type ExecutionLogEntry = z.infer<typeof executionLogEntrySchema>;
-export declare const executionLogListQuerySchema: z.ZodObject<{
-    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
-    cursor: z.ZodOptional<z.ZodString>;
-    requestId: z.ZodOptional<z.ZodString>;
-    handlerName: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-export type ExecutionLogListQuery = z.infer<typeof executionLogListQuerySchema>;
-export declare const executionLogListResponseSchema: z.ZodObject<{
-    data: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        timestamp: z.ZodString;
-        level: z.ZodEnum<{
-            info: "info";
-            error: "error";
-            debug: "debug";
-            warn: "warn";
-        }>;
-        requestId: z.ZodNullable<z.ZodString>;
-        versionId: z.ZodNullable<z.ZodString>;
-        handlerName: z.ZodNullable<z.ZodString>;
-        message: z.ZodString;
-        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    }, z.core.$strict>>;
-    pagination: z.ZodObject<{
-        nextCursor: z.ZodNullable<z.ZodString>;
-    }, z.core.$strict>;
-}, z.core.$strict>;
-export type ExecutionLogListResponse = z.infer<typeof executionLogListResponseSchema>;

package/dist/contracts/execution.js

@@ -18,13 +18,12 @@ import { z } from "zod";
  * portable seam, and it is deliberately narrow: a capsule handler's semantics
  * depend on the transaction wrapped around it, which does not exist on an
  * isolate a continent away from the database.
+ *
+ * Neither is a "kind" a space declares. Every space owns a site, so what runs
+ * is a routing decision derived from what the published tree carries: static
+ * files, a worker, a capsule, or any mix of the three in one publish. There is
+ * no enum here to disagree with the tree.
  */
-/**
- * What a live version runs. `static` is bytes on disk with no execution at
- * all, and remains the overwhelming majority of traffic; the other two each
- * name a product.
- */
-export const runtimeKindSchema = z.enum(["static", "zero", "functions"]);
 /**
  * How a live runtime delivers realtime invalidations.
  *
@@ -50,6 +49,7 @@ export const EXECUTION_ENV_TOTAL_VALUE_MAX_BYTES = 64 * 1024;
 export const SERVER_ENV_FILE = ".env.server";
 /** Lakebed's documented server-only env filename, accepted for capsule portability. */
 export const LAKEBED_SERVER_ENV_FILE = ".env.lakebed.server";
+export const SERVER_ENV_FILES = [SERVER_ENV_FILE, LAKEBED_SERVER_ENV_FILE];
 /**
  * Names the platform reserves for itself in the tenant environment. Tenant
  * code cannot set these, so it cannot spoof the values the broker trusts.
@@ -187,9 +187,31 @@ export const executionCapabilitiesSchema = z
     env: z.boolean().default(false),
     realtime: z.boolean().default(false),
     logging: z.boolean().default(false),
+    gravatar: z.boolean().default(false),
+    spam: z.boolean().default(false),
+    email: z.boolean().default(false),
 })
     .partial()
     .default({});
+/**
+ * The order every surface renders a capability list in. Fixed rather than
+ * derived from a response body, so two spaces never list their capabilities
+ * differently because JSON came back reshuffled — and declared here, beside the
+ * schema, so adding a capability cannot leave a renderer silently omitting it.
+ */
+export const EXECUTION_CAPABILITY_ORDER = [
+    "db",
+    "fetch",
+    "auth",
+    "env",
+    "realtime",
+    "logging",
+    "gravatar",
+    "spam",
+    "email",
+];
+// A capability added to executionCapabilitiesSchema must also be added to the order above.
+true;
 /**
  * The portable seam, stated as one predicate.
  *
@@ -197,8 +219,15 @@ export const executionCapabilitiesSchema = z
  * tier. `db` because Zero's store guarantees every handler runs inside one
  * parent-owned transaction, which an isolate reaching the database over a
  * relay cannot offer. `auth` because capsule identity is resolved against that
- * same transaction's view. Everything else — fetch, env, realtime, logging —
- * is brokered identically on both tiers and does not constrain placement.
+ * same transaction's view. Everything else — fetch, env, realtime, logging, and
+ * the three platform services — is brokered identically on both tiers and does
+ * not constrain placement.
+ *
+ * `email` is the one worth stating explicitly, because it looks like it should
+ * bind: a Zero mutation's send is atomic with its database writes, and a
+ * Function's is not. That is a difference in the *guarantee* either tier can
+ * offer, not in what the handler is allowed to reach, and placement follows
+ * what code reaches. An author who needs that atomicity writes a capsule.
  *
  * Nothing here decides placement automatically: the product a version deploys
  * to is a property of what its author wrote, and this predicate only reports
@@ -248,6 +277,7 @@ export function executionBundleSchema(options) {
         .strict();
 }
 export function executionStaticFileSchema(options) {
+    const platformAssetPrefix = options.platformAssetRoot ? `${options.platformAssetRoot}/` : null;
     return z
         .object({
         path: z
@@ -260,7 +290,9 @@ export function executionStaticFileSchema(options) {
             .refine((path) => !path.startsWith(`${options.storageRoot}/`), {
             message: `Static files cannot use ${options.storageRoot}.`,
         })
-            .refine((path) => !path.startsWith("_") && !path.startsWith("."), {
+            .refine((path) => (!path.startsWith("_") ||
+            (platformAssetPrefix !== null && path.startsWith(platformAssetPrefix))) &&
+            !path.startsWith("."), {
             message: "Static file paths cannot use private root prefixes.",
         }),
         contentType: z.string().min(1).max(255),
@@ -276,34 +308,3 @@ export function executionStaticFileSchema(options) {
  * the same question on each.
  */
 export const executionInspectPolicySchema = z.enum(["private", "public"]);
-export const executionLogEntrySchema = z
-    .object({
-    id: z.string().min(1),
-    timestamp: z.string().datetime(),
-    level: z.enum(["debug", "info", "warn", "error"]),
-    requestId: z.string().min(1).nullable(),
-    versionId: z.string().min(1).nullable(),
-    /** Zero names the mutation; Functions names the handler. */
-    handlerName: z.string().min(1).nullable(),
-    message: z.string(),
-    metadata: z.record(z.string(), z.unknown()).default({}),
-})
-    .strict();
-export const executionLogListQuerySchema = z
-    .object({
-    limit: z.coerce.number().int().min(1).max(100).default(50),
-    cursor: z.string().min(1).optional(),
-    requestId: z.string().min(1).optional(),
-    handlerName: z.string().min(1).optional(),
-})
-    .strict();
-export const executionLogListResponseSchema = z
-    .object({
-    data: z.array(executionLogEntrySchema),
-    pagination: z
-        .object({
-        nextCursor: z.string().nullable(),
-    })
-        .strict(),
-})
-    .strict();

package/dist/contracts/feature-lifecycle-core.d.ts

@@ -1,9 +1,5 @@
 export declare const FEATURE_STAGES: readonly ["internal", "private_beta", "ga"];
 export type FeatureStage = (typeof FEATURE_STAGES)[number];
-export declare const FEATURE_ASSIGNMENT_SCOPES: readonly ["user", "team", "global"];
-export type FeatureAssignmentScope = (typeof FEATURE_ASSIGNMENT_SCOPES)[number];
-export declare const FEATURE_EXECUTION_ACTOR_POLICIES: readonly ["request_actor", "persisted_request_actor", "resource_team", "global_policy"];
-export type FeatureExecutionActorPolicy = (typeof FEATURE_EXECUTION_ACTOR_POLICIES)[number];
 export declare const FEATURE_OWNER_IDS: readonly ["team:access", "team:build-platform", "team:collaboration", "team:commerce", "team:domains", "team:publishing", "team:runtime", "team:spaces", "team:tag-manager", "team:zero"];
 export type FeatureOwnerId = (typeof FEATURE_OWNER_IDS)[number];
 export type FeatureRegistryEntry<K extends string = string, DependencyKey extends string = K> = {
@@ -14,7 +10,6 @@ export type FeatureRegistryEntry<K extends string = string, DependencyKey extend
     readonly stage: FeatureStage;
     readonly surface: boolean;
     readonly defaultEnabled: boolean;
-    readonly assignmentScopes: readonly FeatureAssignmentScope[];
     readonly docs: {
         readonly channel: "public" | "handbook";
         readonly slug: string;
@@ -26,7 +21,6 @@ export type FeatureRegistryEntry<K extends string = string, DependencyKey extend
     readonly reviewAfter: string | null;
     readonly removeAfter: string | null;
     readonly gaAt: string | null;
-    readonly allowedActorPolicies: readonly FeatureExecutionActorPolicy[];
     readonly downRamp: {
         readonly code: string;
         readonly summary: string;

package/dist/contracts/feature-lifecycle-core.js

@@ -1,11 +1,4 @@
 export const FEATURE_STAGES = ["internal", "private_beta", "ga"];
-export const FEATURE_ASSIGNMENT_SCOPES = ["user", "team", "global"];
-export const FEATURE_EXECUTION_ACTOR_POLICIES = [
-    "request_actor",
-    "persisted_request_actor",
-    "resource_team",
-    "global_policy",
-];
 export const FEATURE_OWNER_IDS = [
     "team:access",
     "team:build-platform",
@@ -21,10 +14,8 @@ export const FEATURE_OWNER_IDS = [
 export function freezeFeatureRegistryEntry(definition) {
     return Object.freeze({
         ...definition,
-        assignmentScopes: Object.freeze([...definition.assignmentScopes]),
         docs: definition.docs === null ? null : Object.freeze({ ...definition.docs }),
         requires: Object.freeze([...definition.requires]),
-        allowedActorPolicies: Object.freeze([...definition.allowedActorPolicies]),
         downRamp: Object.freeze({ ...definition.downRamp }),
     });
 }
@@ -104,21 +95,8 @@ export function validateFeatureLifecycleRegistry(registry) {
         if (hasRequiredMetadata(definition.downRamp.code) &&
             !/^[a-z][a-z0-9]*(?:_[a-z][a-z0-9]*)*$/.test(definition.downRamp.code))
             errors.push(`${definition.key}: downRamp.code must use canonical snake_case`);
-        if (definition.assignmentScopes.length === 0 || !definition.assignmentScopes.includes("global"))
-            errors.push(`${definition.key}: assignmentScopes must include global`);
-        if (definition.allowedActorPolicies.length === 0)
-            errors.push(`${definition.key}: allowedActorPolicies must not be empty`);
-        for (const [field, values] of [
-            ["assignmentScopes", definition.assignmentScopes],
-            ["allowedActorPolicies", definition.allowedActorPolicies],
-            ["requires", definition.requires],
-        ]) {
-            for (const duplicate of duplicateValues(values))
-                errors.push(`${definition.key}: ${field} contains duplicate ${duplicate}`);
-        }
-        if (definition.allowedActorPolicies.includes("global_policy") &&
-            (definition.assignmentScopes.length !== 1 || definition.assignmentScopes[0] !== "global"))
-            errors.push(`${definition.key}: global policy requires exactly global assignment scope`);
+        for (const duplicate of duplicateValues(definition.requires))
+            errors.push(`${definition.key}: requires contains duplicate ${duplicate}`);
         if (definition.stage !== "ga" && definition.surface && definition.defaultEnabled)
             errors.push(`${definition.key}: non-GA features default off`);
         if (definition.stage === "ga" && definition.surface && !definition.defaultEnabled)
@@ -173,19 +151,12 @@ export function validateFeatureLifecycleRegistry(registry) {
             definition.removeAfter !== null &&
             definition.gaAt > definition.removeAfter)
             errors.push(`${definition.key}: gaAt must not follow removeAfter`);
-        if (definition.assignmentScopes.includes("user") &&
-            !definition.allowedActorPolicies.some((policy) => policy === "request_actor" || policy === "persisted_request_actor"))
-            errors.push(`${definition.key}: user scope requires an actor-aware policy`);
         for (const dependency of definition.requires) {
             const dependencyDefinition = byKey.get(dependency);
             if (!dependencyDefinition) {
                 errors.push(`${definition.key}: unknown dependency ${dependency}`);
                 continue;
             }
-            if (definition.allowedActorPolicies.some((policy) => !dependencyDefinition.allowedActorPolicies.includes(policy)))
-                errors.push(`${definition.key}: actor policies must be allowed by dependency ${dependency}`);
-            if (definition.assignmentScopes.some((scope) => !dependencyDefinition.assignmentScopes.includes(scope)))
-                errors.push(`${definition.key}: assignment scopes must be supported by dependency ${dependency}`);
             if (FEATURE_STAGES.indexOf(dependencyDefinition.stage) <
                 FEATURE_STAGES.indexOf(definition.stage))
                 errors.push(`${definition.key}: dependency ${dependency} must be at least as mature as its dependent`);