@spacefast/common 0.0.23 → 0.0.26

package/dist/docs/agent-setup.js

@@ -1,8 +1,9 @@
 import { buildClaudeMcpAddCommand, buildHermesMcpAddCommand, cursorHostedMcpDeeplink, cursorHostedMcpServersJson, getConnectTarget, opencodeHostedMcpConfig, vscodeHostedMcpDeeplink, vscodeHostedMcpServersJson, } from "../agents/connect-targets.js";
 import { BRAND } from "../brand.js";
 import { serviceOrigin } from "../config/domains.js";
+import { PLAN_DEFINITIONS, SELF_SERVE_PLAN_CODES } from "../contracts/features.js";
 import { createBrowserCredentialUrl, parseBrowserCredentialUrl, } from "../utils/browser-credential.js";
-import { CHECK_BEFORE_PUBLISH_PROSE, CONTINUE_AFTER_CLAIM_PROSE, ENV_NOTES_PROSE, FAILURE_CONDUCT_PROSE, HOW_TO_RESEARCH_PROSE, LANE_PICKER_PROSE, POSITIONING_PROSE, PUBLISH_SEQUENCE_PROSE, RECEIPT_SHAPE_PROSE, SAVE_STATE_PROSE, SECRET_RULES_PROSE, SIGNED_UPLOAD_PROSE, UPDATE_SPACE_PROSE, } from "./agent-prose.js";
+import { CHECK_BEFORE_PUBLISH_PROSE, CONTINUE_AFTER_CLAIM_PROSE, ENV_NOTES_PROSE, FAILURE_CONDUCT_PROSE, FEEDBACK_PROSE, HOW_TO_RESEARCH_PROSE, LANE_PICKER_PROSE, POSITIONING_PROSE, PUBLISH_SEQUENCE_PROSE, RECEIPT_SHAPE_PROSE, SAVE_STATE_PROSE, SECRET_RULES_PROSE, SIGNED_UPLOAD_PROSE, UPDATE_SPACE_PROSE, } from "./agent-prose.js";
 import { spacefastClaudePluginAddCommand, spacefastClaudeDesktopExtensionUrl, spacefastClaudePluginInstallCommand, spacefastCodexPluginAddCommand, spacefastCodexPluginInstallCommand, spacefastInstallCurlCommand, spacefastInstallPowerShellCommand, spacefastSkillFetchCommand, spacefastSkillInstallCommand, spacefastSkillUrl, } from "./skill-distribution.js";
 // The one URL every agent prompt points at. /setup.md is the actionable front
 // door (publish now, then set up your client); /ai.txt stays the deep
@@ -17,7 +18,19 @@ export const agentSetupHostLabel = agentSetupParsedUrl.host + agentSetupParsedUr
 export const agentSetupPrompt = `Fetch ${agentSetupUrl}`;
 // The no-install publish: one POST, no account. Single-sourced so the
 // marketing pages and the setup doc can never show different commands.
-export const anonymousPublishCurlCommand = `curl -F "files=@index.html" ${serviceOrigin("api", "prod")}/v1/publish`;
+//
+// `?wait=1` is load-bearing, not decoration. Without it the request takes the
+// default finalize budget (SPACEFAST_PUBLISH_DEFAULT_WAIT_MS, 1.5s), so the 201
+// comes back with `activation.outcome: "pending"` plus a `next.action: "poll"`
+// pointer — measured in production at ~4.2s to a receipt describing a site that
+// is not serving yet, settling ~37s later. A one-shot agent then has to run a
+// poll loop against an endpoint that requires the space key as bearer. With
+// `?wait=1` the same publish returns `activation.outcome: "activated"` and
+// `next.action: "done"`, so the documented happy path is genuinely one command.
+//
+// The URL is quoted because `?` is a glob character in zsh: unquoted, the
+// documented command dies with "no matches found" before curl ever runs.
+export const anonymousPublishCurlCommand = `curl -F "files=@index.html" "${serviceOrigin("api", "prod")}/v1/publish?wait=1"`;
 /*
  * Agent handoff contract: private links carry a one-use path token on
  * https://<access-origin>/agent/<documentId>/<token>; durable agent credentials stay encrypted at
@@ -366,8 +379,8 @@ export function aiInstructionsText() {
         "  — for anonymous spaces — the claim link with its expiry. Bare Live and Version URLs carry",
         "  no authority for a private Space; create a scoped Link when a recipient needs access.",
         "  If the receipt's immutable URL is null, poll the",
-        "  operation and version links with the claim token as bearer auth until the version is ready.",
-        "- Never print access tokens, claim tokens, auth files, or `.spacefast/state.json`.",
+        "  operation and version links with the space key as bearer auth until the version is ready.",
+        "- Never print access tokens, space keys, auth files, or `.spacefast/state.json`.",
         "",
         "## After the user claims",
         "",
@@ -386,7 +399,7 @@ export function aiInstructionsText() {
         "  agent-readable too.",
         "- Plan limits surface as diagnostics, not failures you should guess at: publish the",
         "  intended artifact, then read and report what the CLI or API says. When a feature",
-        '  is plan-gated, say: "Not available on Free. Available on Personal and Work."',
+        `  is plan-gated, say: "Not available on ${PLAN_DEFINITIONS.free.name}. Available on ${SELF_SERVE_PLAN_CODES.map((code) => PLAN_DEFINITIONS[code].name).join(" and ")}."`,
         "",
         "## Agent-aware routing",
         "",
@@ -452,14 +465,26 @@ export function agentSetupMarkdown() {
         "endpoint. Fetch the full contract when a publish goes beyond the happy path:",
         `${agentSetupTextUrl}.`,
         "",
-        "The JSON receipt is the result:",
-        "",
-        "- `data.space.liveUrl` — the live URL. Lead the reply with it.",
-        "- `data.version.immutableUrl` — the permanent address of this version.",
-        "- `data.claim.url` and `data.claim.expiresAt` — an anonymous space expires unless claimed.",
-        "  Always show the claim link and its deadline.",
-        "- `data.claim.token` — a secret. Use it as the bearer to update the same `spaceId`;",
-        "  never print it.",
+        "The JSON receipt is the result. **An anonymous space is private.** Until someone",
+        "claims it, the only way in is the space key, so treat every link below as a",
+        "credential unless this page says otherwise:",
+        "",
+        "- `data.claim.url` — the door. Open this yourself to check the page, and give it to",
+        "  the user, because it is the one link that renders the site. It is `/__/<key>`: the",
+        "  key is *in the URL*, so anyone who has it can also publish over this space and claim",
+        "  it. Hand it to the person you are working for, never to a wider audience, and keep",
+        "  it out of commits, logs, and anything public.",
+        "- `data.claim.key` — the same secret, bare. Use it as the bearer to update this",
+        "  `spaceId`. Never print it on its own; the user has it already inside `data.claim.url`.",
+        "- `data.claim.claimUrl` and `data.claim.expiresAt` — an anonymous space expires unless",
+        "  claimed. Always show the claim link and its deadline: claiming is what makes the",
+        "  space permanent and lets the owner share it with people who should not get the key.",
+        "- `data.space.liveUrl` — the space's permanent address, and what it will serve from",
+        "  once claimed. Do not lead with it and do not hand it to anyone yet: while the space",
+        "  is anonymous this URL answers 403 for every visitor who has not been through the",
+        "  door above.",
+        "- `data.version.immutableUrl` — the permanent address of this exact version. Same",
+        "  rule: it carries no authority of its own while the space is anonymous.",
         "",
         "## If you can't act on this page",
         "",
@@ -586,8 +611,11 @@ export function agentSetupMarkdown() {
         "",
         "## After publishing",
         "",
-        "- Report the live URL first, then the immutable version URL, then the claim link with",
-        "  its expiry.",
+        "- Lead with `data.claim.url` — it is the only link that renders an anonymous space —",
+        "  then the claim link with its expiry. Mention the live and immutable URLs as the",
+        "  addresses the space will serve from once it is claimed, not as links to open now.",
+        "- Say plainly that the door link carries the key, so it is for the user and not for",
+        "  a public post. Claiming is what turns the space into something shareable.",
         "- Persist the space id and credential so the next publish updates the same space instead",
         "  of creating a new one. The CLI and On-Device MCP do this automatically in `.spacefast/`.",
         "  Hosted MCP is stateless between publishes: retain the receipt's `spaceId` in conversation",
@@ -596,6 +624,8 @@ export function agentSetupMarkdown() {
         "  saved bearer token.",
         "- Recommend the matching setup above so the next publish is one word.",
         "",
+        FEEDBACK_PROSE,
+        "",
         "## Resources",
         "",
         `- Full publishing contract for agents: ${agentSetupTextUrl}`,

package/dist/docs/catalog.d.ts

@@ -39,7 +39,7 @@ export declare const DOCS_CATALOG: readonly [{
     readonly kind: "guide";
     readonly tier: "essential";
     readonly summary: "How `sf publish` builds, uploads, and goes live.";
-    readonly keywords: readonly ["publish", "go live", "upload", "release", "static"];
+    readonly keywords: readonly ["publish", "go live", "upload", "release", "artifact"];
     readonly url: "https://spacefast.com/docs/publishing";
     readonly body: "`sf publish` snapshots your output directory into an immutable version and promotes it to the production channel. Use `--no-wait` to return before serving finishes.";
 }, {
@@ -65,10 +65,10 @@ export declare const DOCS_CATALOG: readonly [{
     readonly title: "Anonymous publish and claim";
     readonly kind: "guide";
     readonly tier: "essential";
-    readonly summary: "Publish without an account, then claim the space with its token.";
+    readonly summary: "Publish without an account, then claim the space with its key.";
     readonly keywords: readonly ["anonymous", "claim", "unclaimed", "agent", "token", "adopt"];
     readonly url: "https://spacefast.com/docs/anonymous-publish";
-    readonly body: "Publish without logging in to get an instant URL and a claim token; run `sf spaces claim` with that token to bind the space to your account.";
+    readonly body: "Publish without logging in to get an instant URL and a space key; run `sf spaces claim` with that key to bind the space to your account.";
 }, {
     readonly slug: "agents";
     readonly title: "Agents and MCP";
@@ -86,13 +86,13 @@ export declare const DOCS_CATALOG: readonly [{
     readonly summary: "Publish a file or zipped output folder directly to /v1/publish. No account, CLI install, or MCP setup is required for anonymous publishes.";
     readonly keywords: readonly ["publish", "curl", "anonymous", "no install", "claim"];
     readonly url: "https://spacefast.com/docs/agents#publish-with-curl";
-    readonly body: "curl publish static file folder archive zip anonymous no account no install live URL immutable version claim link /v1/publish";
+    readonly body: "curl publish file folder archive zip anonymous no account no install live URL immutable version claim link /v1/publish";
 }, {
     readonly slug: "workflow/publish-receipt";
     readonly title: "Publish receipt fields";
     readonly kind: "workflow";
     readonly tier: "full";
-    readonly summary: "Use the receipt as the source of truth. Present open.url and claim.url as the two user-facing links; liveUrl and immutableUrl identify resources for automation.";
+    readonly summary: "Use the receipt as the source of truth. For anonymous publishes, claim.url is the private-site door and claim.claimUrl is the browser claim link; liveUrl and immutableUrl identify resources for automation.";
     readonly keywords: readonly ["receipt", "share", "claim", "diagnostics"];
     readonly url: "https://spacefast.com/docs/api#publish";
     readonly body: "receipt liveUrl open url immutableUrl claim expiresAt diagnostics links finalize promote upload errors docsUrl";
@@ -101,16 +101,16 @@ export declare const DOCS_CATALOG: readonly [{
     readonly title: "Keep publishing after the user claims";
     readonly kind: "workflow";
     readonly tier: "full";
-    readonly summary: "After the owner claims an anonymous space with continuation enabled, exchange the saved claim token once for a durable space-scoped access token, save it over the claim token, and keep publishing.";
+    readonly summary: "After the owner claims an anonymous space with continuation enabled, exchange the saved space key once for a durable space-scoped access token, save it over the key, and keep publishing.";
     readonly keywords: readonly ["continue", "exchange", "claim token", "space_claimed_credential_available", "continuation"];
     readonly url: "https://spacefast.com/docs/agents#continue-after-claim";
-    readonly body: "continue continuation claim token exchange voucher publish execute POST /v1/anonymous-claim/exchange space_claimed_credential_available continuation_used continuation_unavailable durable access token state.json update after claim";
+    readonly body: "continue continuation space key claim token exchange voucher publish execute POST /v1/claim/exchange space_claimed_credential_available continuation_used continuation_unavailable durable access token state.json update after claim";
 }, {
     readonly slug: "workflow/secret-handling";
     readonly title: "Secret handling rules";
     readonly kind: "workflow";
     readonly tier: "full";
-    readonly summary: "Treat claim tokens, upload tokens, device codes, API keys, auth files, and .spacefast state as credentials. Do not print, commit, archive, or log them.";
+    readonly summary: "Treat space keys, upload tokens, device codes, API keys, auth files, and .spacefast state as credentials. Do not print, commit, archive, or log them.";
     readonly keywords: readonly ["secret", "token", "claim token", "redact"];
     readonly url: "https://spacefast.com/docs/agents#secret-handling";
     readonly body: "secret handling claim token upload token device code API key auth file .spacefast state redact logs transcripts archive";
@@ -137,10 +137,10 @@ export declare const DOCS_CATALOG: readonly [{
     readonly title: "Space file conventions";
     readonly kind: "workflow";
     readonly tier: "full";
-    readonly summary: "Spacefast recognizes _redirects, _headers, nearest 404.html, and sf.jsonc. Static artifacts are served as files; server code is not executed.";
+    readonly summary: "Spacefast recognizes _redirects, _headers, nearest 404.html, and sf.jsonc. Published artifacts are served as files; server code is not executed.";
     readonly keywords: readonly ["_redirects", "_headers", "sf.jsonc", "spacefast.jsonc", "404"];
     readonly url: "https://spacefast.com/docs/configuration";
-    readonly body: "_redirects _headers 404.html sf.jsonc static artifact server code not executed proxy rewrite headers";
+    readonly body: "_redirects _headers 404.html sf.jsonc artifact server code not executed proxy rewrite headers";
 }, {
     readonly slug: "workflow/domains-diagnostics";
     readonly title: "Domains and DNS diagnostics";
@@ -239,7 +239,7 @@ export declare const DOCS_CATALOG: readonly [{
     readonly summary: "Run code on a space with Zero or Functions.";
     readonly keywords: readonly ["runtime", "zero", "functions", "server", "dynamic", "code", "backend", "sf.jsonc"];
     readonly url: "https://spacefast.com/docs/runtimes";
-    readonly body: "A space serves static files until you declare a `runtime` block in sf.jsonc. Zero is a capsule with its own database and transactions; Functions is a worker with one `fetch` handler and any npm package. Both compile during `sf publish`. Zero runs on plans with dedicated runtime isolation; Functions remains in private beta.";
+    readonly body: "A space serves published files until you declare a `runtime` block in sf.jsonc. Every space has its own runtime site. Zero is a capsule with its own database and transactions; Functions is a Cloudflare worker with one `fetch` handler and any npm package. Both are available on every plan and compile during `sf publish`.";
 }, {
     readonly slug: "runtimes/zero";
     readonly title: "Spacefast Zero";
@@ -248,7 +248,7 @@ export declare const DOCS_CATALOG: readonly [{
     readonly summary: "A capsule with a database: schema, queries, mutations, endpoints.";
     readonly keywords: readonly ["zero", "capsule", "database", "schema", "query", "mutation", "endpoint", "transaction", "sql", "sf dev"];
     readonly url: "https://spacefast.com/docs/runtimes/zero";
-    readonly body: "Zero is for apps where the data is the point. Write one capsule — schema, queries, mutations, endpoints — start it locally with `sf dev`, and `sf publish` puts it live with its own database on a plan with dedicated runtime isolation.";
+    readonly body: "Zero is for apps where the data is the point. Write one capsule — schema, queries, mutations, endpoints — start it locally with `sf dev`, and `sf publish` puts it live with its own database and dedicated runtime site on every plan.";
 }, {
     readonly slug: "runtimes/functions";
     readonly title: "Spacefast Functions";
@@ -257,7 +257,7 @@ export declare const DOCS_CATALOG: readonly [{
     readonly summary: "A worker for your space: one `fetch` handler, any npm package.";
     readonly keywords: readonly ["functions", "worker", "fetch", "ssr", "cloudflare", "npm", "handler", "server", "api"];
     readonly url: "https://spacefast.com/docs/runtimes/functions";
-    readonly body: "Functions runs a worker for your space: a default export with a `fetch` method, served from your space's own origin, so requests no file answers reach your code. Opt into a database with `\"database\": true`. Private beta — the team needs the flag.";
+    readonly body: "Functions runs a Cloudflare worker for your space: a default export with a `fetch` method, served from your space's own origin, so requests no file answers reach your code. It is available on every plan. Opt into a database with `\"database\": true`. Automatic Next.js builds use a private, version-scoped origin cache for the Data Cache, `revalidateTag()`, `revalidatePath()`, and ISR regeneration leases; no cache credential enters the worker.";
 }, {
     readonly slug: "collab";
     readonly title: "Comments";
@@ -284,7 +284,7 @@ export declare const DOCS_CATALOG: readonly [{
     readonly summary: "Proxy selected paths to an upstream origin.";
     readonly keywords: readonly ["proxy", "upstream", "route", "api", "backend", "rewrite"];
     readonly url: "https://spacefast.com/docs/proxy-routes";
-    readonly body: "Forward specific path prefixes to an external upstream so a static space can front a dynamic API without exposing the origin.";
+    readonly body: "Forward specific path prefixes to an external upstream so a space can front an external API without exposing its origin.";
 }, {
     readonly slug: "image-acceleration";
     readonly title: "Image acceleration";
@@ -299,10 +299,10 @@ export declare const DOCS_CATALOG: readonly [{
     readonly title: "Next.js integration";
     readonly kind: "guide";
     readonly tier: "reference";
-    readonly summary: "Publish a Next.js static export to a space.";
-    readonly keywords: readonly ["nextjs", "next", "react", "framework", "integration", "export"];
+    readonly summary: "Build and publish a full Next.js app with OpenNext.";
+    readonly keywords: readonly ["nextjs", "next", "react", "framework", "integration", "opennext", "isr", "data cache", "revalidateTag", "revalidatePath"];
     readonly url: "https://spacefast.com/docs/integrations/nextjs";
-    readonly body: "Build your Next.js static export and publish the output directory with `sf publish`; `sf init` detects the framework and sets the output path.";
+    readonly body: "Run `sf publish` in a Next.js project. Spacefast builds it with pinned OpenNext and publishes the browser assets plus its Functions worker. The automatic adapter keeps the Next Data Cache and tag invalidations in private origin storage scoped to the exact space and version, so cached data survives cold Worker isolates; `revalidateTag()` and `revalidatePath()` invalidate that same store. Concurrent stale ISR requests share a 30-second regeneration lease, with at most 4,096 leases active for one version. Each cached value is limited to 4 MiB; one version may retain 128 MiB, 4,096 entries, and 8,192 tags. A project with its own `open-next.config.ts` owns its adapters instead of receiving Spacefast's automatic cache config.";
 }, {
     readonly slug: "integrations/vite";
     readonly title: "Vite integration";
@@ -320,7 +320,7 @@ export declare const DOCS_CATALOG: readonly [{
     readonly summary: "File counts, sizes, and rate limits per plan.";
     readonly keywords: readonly ["limits", "quota", "size", "rate limit", "plan", "storage"];
     readonly url: "https://spacefast.com/docs/limits";
-    readonly body: "Reference for per-space file counts, archive and file size ceilings, version retention, and rate limits, which vary by plan.";
+    readonly body: "Reference for per-space file counts, archive and file size ceilings, and rate limits, which vary by plan.";
 }, {
     readonly slug: "troubleshooting";
     readonly title: "Troubleshooting";
@@ -383,23 +383,23 @@ export declare const DOCS_CATALOG: readonly [{
     readonly summary: "Attach an anonymously-published space to your account.";
     readonly keywords: readonly ["claim", "anonymous", "attach", "token", "adopt", "spaces"];
     readonly url: "https://spacefast.com/docs/cli";
-    readonly body: "After an agent publishes anonymously, run `sf spaces claim` with the claim token to bind the space to your account.";
+    readonly body: "After an agent publishes anonymously, run `sf spaces claim` with the space key to bind the space to your account.";
 }, {
     readonly slug: "cli/spaces";
     readonly title: "sf spaces";
     readonly kind: "cli";
     readonly tier: "full";
-    readonly summary: "List, inspect, transfer, import, and remove spaces.";
-    readonly keywords: readonly ["spaces", "space", "ls", "get", "rm", "transfer", "import", "export"];
+    readonly summary: "List, inspect, download, duplicate, transfer, and remove spaces.";
+    readonly keywords: readonly ["spaces", "space", "ls", "get", "download", "duplicate", "rm", "transfer"];
     readonly url: "https://spacefast.com/docs/cli";
-    readonly body: "The `sf spaces` group manages spaces: `ls`, `get`, `claim`, `transfer`, `duplicate`, `import`/`export`, and `rm`.";
+    readonly body: "The `sf spaces` group manages spaces: `ls`, `get`, `claim`, `download`, `duplicate`, `transfer`, and `rm`. Use `sf spaces download --version <ref>` to retrieve one immutable version.";
 }, {
     readonly slug: "cli/versions";
     readonly title: "sf versions";
     readonly kind: "cli";
     readonly tier: "full";
-    readonly summary: "List, inspect, download, and remove immutable versions.";
-    readonly keywords: readonly ["versions", "version", "ls", "get", "download", "rollback", "history"];
+    readonly summary: "List, inspect, and remove immutable versions.";
+    readonly keywords: readonly ["versions", "version", "ls", "get", "rm", "rollback", "history"];
     readonly url: "https://spacefast.com/docs/cli";
     readonly body: "`sf versions ls` shows a space's history; `sf versions get` inspects one and `sf rollback` promotes an earlier version back to live.";
 }, {

package/dist/docs/catalog.js

@@ -40,7 +40,7 @@ const HAND_WRITTEN_DOCS_CATALOG = [
         kind: "guide",
         tier: "essential",
         summary: "How `sf publish` builds, uploads, and goes live.",
-        keywords: ["publish", "go live", "upload", "release", "static"],
+        keywords: ["publish", "go live", "upload", "release", "artifact"],
         url: `${DOCS_BASE_URL}/publishing`,
         body: "`sf publish` snapshots your output directory into an immutable version and promotes it to the production channel. Use `--no-wait` to return before serving finishes.",
     },
@@ -69,10 +69,10 @@ const HAND_WRITTEN_DOCS_CATALOG = [
         title: "Anonymous publish and claim",
         kind: "guide",
         tier: "essential",
-        summary: "Publish without an account, then claim the space with its token.",
+        summary: "Publish without an account, then claim the space with its key.",
         keywords: ["anonymous", "claim", "unclaimed", "agent", "token", "adopt"],
         url: `${DOCS_BASE_URL}/anonymous-publish`,
-        body: "Publish without logging in to get an instant URL and a claim token; run `sf spaces claim` with that token to bind the space to your account.",
+        body: "Publish without logging in to get an instant URL and a space key; run `sf spaces claim` with that key to bind the space to your account.",
     },
     {
         slug: "agents",
@@ -93,14 +93,14 @@ const HAND_WRITTEN_DOCS_CATALOG = [
         summary: "Publish a file or zipped output folder directly to /v1/publish. No account, CLI install, or MCP setup is required for anonymous publishes.",
         keywords: ["publish", "curl", "anonymous", "no install", "claim"],
         url: `${DOCS_BASE_URL}/agents#publish-with-curl`,
-        body: "curl publish static file folder archive zip anonymous no account no install live URL immutable version claim link /v1/publish",
+        body: "curl publish file folder archive zip anonymous no account no install live URL immutable version claim link /v1/publish",
     },
     {
         slug: "workflow/publish-receipt",
         title: "Publish receipt fields",
         kind: "workflow",
         tier: "full",
-        summary: "Use the receipt as the source of truth. Present open.url and claim.url as the two user-facing links; liveUrl and immutableUrl identify resources for automation.",
+        summary: "Use the receipt as the source of truth. For anonymous publishes, claim.url is the private-site door and claim.claimUrl is the browser claim link; liveUrl and immutableUrl identify resources for automation.",
         keywords: ["receipt", "share", "claim", "diagnostics"],
         url: `${DOCS_BASE_URL}/api#publish`,
         body: "receipt liveUrl open url immutableUrl claim expiresAt diagnostics links finalize promote upload errors docsUrl",
@@ -110,7 +110,7 @@ const HAND_WRITTEN_DOCS_CATALOG = [
         title: "Keep publishing after the user claims",
         kind: "workflow",
         tier: "full",
-        summary: "After the owner claims an anonymous space with continuation enabled, exchange the saved claim token once for a durable space-scoped access token, save it over the claim token, and keep publishing.",
+        summary: "After the owner claims an anonymous space with continuation enabled, exchange the saved space key once for a durable space-scoped access token, save it over the key, and keep publishing.",
         keywords: [
             "continue",
             "exchange",
@@ -119,14 +119,14 @@ const HAND_WRITTEN_DOCS_CATALOG = [
             "continuation",
         ],
         url: `${DOCS_BASE_URL}/agents#continue-after-claim`,
-        body: "continue continuation claim token exchange voucher publish execute POST /v1/anonymous-claim/exchange space_claimed_credential_available continuation_used continuation_unavailable durable access token state.json update after claim",
+        body: "continue continuation space key claim token exchange voucher publish execute POST /v1/claim/exchange space_claimed_credential_available continuation_used continuation_unavailable durable access token state.json update after claim",
     },
     {
         slug: "workflow/secret-handling",
         title: "Secret handling rules",
         kind: "workflow",
         tier: "full",
-        summary: "Treat claim tokens, upload tokens, device codes, API keys, auth files, and .spacefast state as credentials. Do not print, commit, archive, or log them.",
+        summary: "Treat space keys, upload tokens, device codes, API keys, auth files, and .spacefast state as credentials. Do not print, commit, archive, or log them.",
         keywords: ["secret", "token", "claim token", "redact"],
         url: `${DOCS_BASE_URL}/agents#secret-handling`,
         body: "secret handling claim token upload token device code API key auth file .spacefast state redact logs transcripts archive",
@@ -156,10 +156,10 @@ const HAND_WRITTEN_DOCS_CATALOG = [
         title: "Space file conventions",
         kind: "workflow",
         tier: "full",
-        summary: "Spacefast recognizes _redirects, _headers, nearest 404.html, and sf.jsonc. Static artifacts are served as files; server code is not executed.",
+        summary: "Spacefast recognizes _redirects, _headers, nearest 404.html, and sf.jsonc. Published artifacts are served as files; server code is not executed.",
         keywords: ["_redirects", "_headers", "sf.jsonc", "spacefast.jsonc", "404"],
         url: `${DOCS_BASE_URL}/configuration`,
-        body: "_redirects _headers 404.html sf.jsonc static artifact server code not executed proxy rewrite headers",
+        body: "_redirects _headers 404.html sf.jsonc artifact server code not executed proxy rewrite headers",
     },
     {
         slug: "workflow/domains-diagnostics",
@@ -269,7 +269,7 @@ const HAND_WRITTEN_DOCS_CATALOG = [
         summary: "Run code on a space with Zero or Functions.",
         keywords: ["runtime", "zero", "functions", "server", "dynamic", "code", "backend", "sf.jsonc"],
         url: `${DOCS_BASE_URL}/runtimes`,
-        body: "A space serves static files until you declare a `runtime` block in sf.jsonc. Zero is a capsule with its own database and transactions; Functions is a worker with one `fetch` handler and any npm package. Both compile during `sf publish`. Zero runs on plans with dedicated runtime isolation; Functions remains in private beta.",
+        body: "A space serves published files until you declare a `runtime` block in sf.jsonc. Every space has its own runtime site. Zero is a capsule with its own database and transactions; Functions is a Cloudflare worker with one `fetch` handler and any npm package. Both are available on every plan and compile during `sf publish`.",
     },
     {
         slug: "runtimes/zero",
@@ -290,7 +290,7 @@ const HAND_WRITTEN_DOCS_CATALOG = [
             "sf dev",
         ],
         url: `${DOCS_BASE_URL}/runtimes/zero`,
-        body: "Zero is for apps where the data is the point. Write one capsule — schema, queries, mutations, endpoints — start it locally with `sf dev`, and `sf publish` puts it live with its own database on a plan with dedicated runtime isolation.",
+        body: "Zero is for apps where the data is the point. Write one capsule — schema, queries, mutations, endpoints — start it locally with `sf dev`, and `sf publish` puts it live with its own database and dedicated runtime site on every plan.",
     },
     {
         slug: "runtimes/functions",
@@ -310,7 +310,7 @@ const HAND_WRITTEN_DOCS_CATALOG = [
             "api",
         ],
         url: `${DOCS_BASE_URL}/runtimes/functions`,
-        body: 'Functions runs a worker for your space: a default export with a `fetch` method, served from your space\'s own origin, so requests no file answers reach your code. Opt into a database with `"database": true`. Private beta — the team needs the flag.',
+        body: 'Functions runs a Cloudflare worker for your space: a default export with a `fetch` method, served from your space\'s own origin, so requests no file answers reach your code. It is available on every plan. Opt into a database with `"database": true`. Automatic Next.js builds use a private, version-scoped origin cache for the Data Cache, `revalidateTag()`, `revalidatePath()`, and ISR regeneration leases; no cache credential enters the worker.',
     },
     {
         slug: "collab",
@@ -340,7 +340,7 @@ const HAND_WRITTEN_DOCS_CATALOG = [
         summary: "Proxy selected paths to an upstream origin.",
         keywords: ["proxy", "upstream", "route", "api", "backend", "rewrite"],
         url: `${DOCS_BASE_URL}/proxy-routes`,
-        body: "Forward specific path prefixes to an external upstream so a static space can front a dynamic API without exposing the origin.",
+        body: "Forward specific path prefixes to an external upstream so a space can front an external API without exposing its origin.",
     },
     {
         slug: "image-acceleration",
@@ -357,10 +357,21 @@ const HAND_WRITTEN_DOCS_CATALOG = [
         title: "Next.js integration",
         kind: "guide",
         tier: "reference",
-        summary: "Publish a Next.js static export to a space.",
-        keywords: ["nextjs", "next", "react", "framework", "integration", "export"],
+        summary: "Build and publish a full Next.js app with OpenNext.",
+        keywords: [
+            "nextjs",
+            "next",
+            "react",
+            "framework",
+            "integration",
+            "opennext",
+            "isr",
+            "data cache",
+            "revalidateTag",
+            "revalidatePath",
+        ],
         url: `${DOCS_BASE_URL}/integrations/nextjs`,
-        body: "Build your Next.js static export and publish the output directory with `sf publish`; `sf init` detects the framework and sets the output path.",
+        body: "Run `sf publish` in a Next.js project. Spacefast builds it with pinned OpenNext and publishes the browser assets plus its Functions worker. The automatic adapter keeps the Next Data Cache and tag invalidations in private origin storage scoped to the exact space and version, so cached data survives cold Worker isolates; `revalidateTag()` and `revalidatePath()` invalidate that same store. Concurrent stale ISR requests share a 30-second regeneration lease, with at most 4,096 leases active for one version. Each cached value is limited to 4 MiB; one version may retain 128 MiB, 4,096 entries, and 8,192 tags. A project with its own `open-next.config.ts` owns its adapters instead of receiving Spacefast's automatic cache config.",
     },
     {
         slug: "integrations/vite",
@@ -380,7 +391,7 @@ const HAND_WRITTEN_DOCS_CATALOG = [
         summary: "File counts, sizes, and rate limits per plan.",
         keywords: ["limits", "quota", "size", "rate limit", "plan", "storage"],
         url: `${DOCS_BASE_URL}/limits`,
-        body: "Reference for per-space file counts, archive and file size ceilings, version retention, and rate limits, which vary by plan.",
+        body: "Reference for per-space file counts, archive and file size ceilings, and rate limits, which vary by plan.",
     },
     {
         slug: "troubleshooting",
@@ -451,25 +462,25 @@ const HAND_WRITTEN_DOCS_CATALOG = [
         summary: "Attach an anonymously-published space to your account.",
         keywords: ["claim", "anonymous", "attach", "token", "adopt", "spaces"],
         url: `${DOCS_BASE_URL}/cli`,
-        body: "After an agent publishes anonymously, run `sf spaces claim` with the claim token to bind the space to your account.",
+        body: "After an agent publishes anonymously, run `sf spaces claim` with the space key to bind the space to your account.",
     },
     {
         slug: "cli/spaces",
         title: "sf spaces",
         kind: "cli",
         tier: "full",
-        summary: "List, inspect, transfer, import, and remove spaces.",
-        keywords: ["spaces", "space", "ls", "get", "rm", "transfer", "import", "export"],
+        summary: "List, inspect, download, duplicate, transfer, and remove spaces.",
+        keywords: ["spaces", "space", "ls", "get", "download", "duplicate", "rm", "transfer"],
         url: `${DOCS_BASE_URL}/cli`,
-        body: "The `sf spaces` group manages spaces: `ls`, `get`, `claim`, `transfer`, `duplicate`, `import`/`export`, and `rm`.",
+        body: "The `sf spaces` group manages spaces: `ls`, `get`, `claim`, `download`, `duplicate`, `transfer`, and `rm`. Use `sf spaces download --version <ref>` to retrieve one immutable version.",
     },
     {
         slug: "cli/versions",
         title: "sf versions",
         kind: "cli",
         tier: "full",
-        summary: "List, inspect, download, and remove immutable versions.",
-        keywords: ["versions", "version", "ls", "get", "download", "rollback", "history"],
+        summary: "List, inspect, and remove immutable versions.",
+        keywords: ["versions", "version", "ls", "get", "rm", "rollback", "history"],
         url: `${DOCS_BASE_URL}/cli`,
         body: "`sf versions ls` shows a space's history; `sf versions get` inspects one and `sf rollback` promotes an earlier version back to live.",
     },