@spacefast/common 0.0.24 → 0.0.26

package/dist/contracts/activity.js

@@ -1,6 +1,6 @@
 import { z } from "zod";
 import { AnyObjectSchema, CursorPaginationSchema, cursorListQuerySchema } from "./common.js";
-// The single event taxonomy (internal-docs/platform.md "Event taxonomy").
+// The single event taxonomy (the platform spec "Event taxonomy").
 // Every emitted activity event and every webhook `events` filter selects on
 // these codes.
 // `appendActivityEvent` is typed against this list, so emitting a code that is
@@ -75,6 +75,8 @@ export const ACTIVITY_EVENT_CODES = [
     "transfer.canceled",
     "transfer.expired",
     "transfer.failed",
+    // cron (only failures are reported; a run that succeeds is silent)
+    "cron.failed",
     // variable (key-level only; never values)
     "variable.updated",
     "variable.deleted",
@@ -115,12 +117,12 @@ export const ACTIVITY_EVENT_CODES = [
     "abuse_report.created",
     "abuse_report.updated",
     // claim (additive extension: a claim attempt against a taken-down space is
-    // flagged, never silently 404ed — internal-docs/platform.md "Abuse Posture")
+    // flagged, never silently 404ed — the platform spec "Abuse Posture")
     "claim.blocked_takedown",
     "claim.authority_rotated",
     // user (additive extension: account lifecycle plus the 2FA and
     // admin-impersonation effects that must surface through ActivityEvent —
-    // internal-docs/platform.md Better Auth usage). `user.created` fires once on
+    // the platform spec Better Auth usage). `user.created` fires once on
     // signup; `user.signed_in` fires per non-impersonation session creation;
     // `user.deleted` fires on account deletion and retains the analyticsId in
     // its details so right-to-erasure can be completed in every provider.

package/dist/contracts/api-keys.js

@@ -149,7 +149,7 @@ export const ApiKeyPresetSchema = z
 ])
     .describe("Named policy preset compiled into a concrete access policy when the key is created.");
 // `system` is never a principal type: runtime/internal credentials are
-// platform-owned and omit ownerPrincipal entirely (internal-docs/platform.md).
+// platform-owned and omit ownerPrincipal entirely (the platform spec).
 const ApiKeyOwnerPrincipalSchema = z.object({
     type: z.enum(["team", "external"]).describe("Principal type that owns this key."),
     id: z.string().min(1).describe("Stable principal id (Better Auth team id, or external id)."),
@@ -239,7 +239,7 @@ export const ApiKeyPatchRequestSchema = z
     .refine((value) => Object.keys(value).length > 0, {
     message: "At least one mutable API key field is required.",
 });
-// Target §5C contract (internal-docs/cli-ux-dx-improvement-plan-2026-07-12.html
+// Target §5C contract (the internal plan
 // "API key: finite permissions, no broad role"): key creation selects an
 // explicit, finite scope and permission set — never a team-wide role that
 // falls out of an omitted field. This is deliberately a DISJOINT shape from

package/dist/contracts/billing.d.ts

@@ -10,6 +10,7 @@ export declare const billingIntervalSchema: z.ZodEnum<{
     yearly: "yearly";
 }>;
 export type BillingIntervalValue = z.infer<typeof billingIntervalSchema>;
+export declare const stripeSyncEventTypes: readonly ["checkout.session.completed", "checkout.session.expired", "checkout.session.async_payment_succeeded", "checkout.session.async_payment_failed", "customer.subscription.created", "customer.subscription.updated", "customer.subscription.paused", "customer.subscription.resumed", "customer.subscription.deleted", "customer.subscription.trial_will_end", "invoice.created", "invoice.finalized", "invoice.updated", "invoice.paid", "invoice.payment_succeeded", "invoice.payment_failed", "invoice.marked_uncollectible", "invoice.voided", "refund.created", "refund.updated", "charge.dispute.created", "charge.dispute.updated", "charge.dispute.closed", "charge.dispute.funds_withdrawn", "charge.dispute.funds_reinstated"];
 export declare const billingTransactionKindValues: readonly ["purchase", "renewal", "refund", "adjustment"];
 export declare const billingTransactionKindSchema: z.ZodEnum<{
     purchase: "purchase";
@@ -30,9 +31,9 @@ export type BillingTransactionScope = z.infer<typeof billingTransactionScopeSche
 export declare const billingAddonSourceValues: readonly ["grant", "stripe"];
 export declare const billingAddonLimitKeyValues: readonly ["teamMembers", "subTeams", "storageBytes", "externalDomainGroups"];
 export declare const billingAddonLimitKeySchema: z.ZodEnum<{
+    storageBytes: "storageBytes";
     teamMembers: "teamMembers";
     subTeams: "subTeams";
-    storageBytes: "storageBytes";
     externalDomainGroups: "externalDomainGroups";
 }>;
 export type BillingAddonLimitKey = z.infer<typeof billingAddonLimitKeySchema>;

package/dist/contracts/billing.js

@@ -7,6 +7,36 @@ export const billingProviderValues = ["stripe", "grant"];
 export const billingProviderSchema = z.enum(billingProviderValues).describe("Billing provider.");
 export const billingIntervalValues = ["monthly", "yearly"];
 export const billingIntervalSchema = z.enum(billingIntervalValues);
+// Keep Stripe endpoint subscriptions and the webhook intake allowlist on one
+// contract. The environment setup command imports this exact list, so adding a
+// new processor event cannot leave deployed webhook endpoints behind.
+export const stripeSyncEventTypes = [
+    "checkout.session.completed",
+    "checkout.session.expired",
+    "checkout.session.async_payment_succeeded",
+    "checkout.session.async_payment_failed",
+    "customer.subscription.created",
+    "customer.subscription.updated",
+    "customer.subscription.paused",
+    "customer.subscription.resumed",
+    "customer.subscription.deleted",
+    "customer.subscription.trial_will_end",
+    "invoice.created",
+    "invoice.finalized",
+    "invoice.updated",
+    "invoice.paid",
+    "invoice.payment_succeeded",
+    "invoice.payment_failed",
+    "invoice.marked_uncollectible",
+    "invoice.voided",
+    "refund.created",
+    "refund.updated",
+    "charge.dispute.created",
+    "charge.dispute.updated",
+    "charge.dispute.closed",
+    "charge.dispute.funds_withdrawn",
+    "charge.dispute.funds_reinstated",
+];
 // Transaction ledger vocabulary. Every REAL payment event lands as one row —
 // operator grants never do (no transactions by definition). Amounts are
 // micros of the payment currency (1_000_000 micros = 1 unit) so Stripe cents

package/dist/contracts/builds.d.ts

@@ -1,4 +1,16 @@
 import { z } from "zod";
+export declare const BuildSettingsOverrideSchema: z.ZodObject<{
+    rootDirectory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    installDirectory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    installCommand: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    buildCommand: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    outputDirectory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    ignoredBuildCommand: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    frameworkPreset: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    platformPreset: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    allowUnsupportedPlatformFeatures: z.ZodOptional<z.ZodBoolean>;
+    timeoutSeconds: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
 export declare const BuildSettingsSchema: z.ZodObject<{
     rootDirectory: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     installDirectory: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -181,14 +193,14 @@ export declare const BuildSchema: z.ZodObject<{
         code: z.ZodString;
         severity: z.ZodEnum<{
             info: "info";
-            warning: "warning";
             error: "error";
+            warning: "warning";
         }>;
         message: z.ZodString;
         path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         provider: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
             registrar: "registrar";
-            wpcloud: "wpcloud";
+            infra: "infra";
             dns: "dns";
             runtime: "runtime";
         }>>>;
@@ -213,16 +225,16 @@ export declare const buildCreateRequestSchema: z.ZodObject<{
         pullRequestNumber: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>], "kind">;
     settings: z.ZodOptional<z.ZodObject<{
-        rootDirectory: z.ZodOptional<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
-        installDirectory: z.ZodOptional<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
-        installCommand: z.ZodOptional<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
-        buildCommand: z.ZodOptional<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
-        outputDirectory: z.ZodOptional<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
-        ignoredBuildCommand: z.ZodOptional<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
-        frameworkPreset: z.ZodOptional<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
-        platformPreset: z.ZodOptional<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
-        allowUnsupportedPlatformFeatures: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
-        timeoutSeconds: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
+        rootDirectory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        installDirectory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        installCommand: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        buildCommand: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        outputDirectory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        ignoredBuildCommand: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        frameworkPreset: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        platformPreset: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        allowUnsupportedPlatformFeatures: z.ZodOptional<z.ZodBoolean>;
+        timeoutSeconds: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>>;
     target: z.ZodOptional<z.ZodObject<{
         channel: z.ZodOptional<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
@@ -232,14 +244,14 @@ export declare const buildCreateRequestSchema: z.ZodObject<{
         code: z.ZodString;
         severity: z.ZodEnum<{
             info: "info";
-            warning: "warning";
             error: "error";
+            warning: "warning";
         }>;
         message: z.ZodString;
         path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         provider: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
             registrar: "registrar";
-            wpcloud: "wpcloud";
+            infra: "infra";
             dns: "dns";
             runtime: "runtime";
         }>>>;
@@ -295,14 +307,14 @@ export declare const buildSourceArchiveUploadSchema: z.ZodObject<{
             code: z.ZodString;
             severity: z.ZodEnum<{
                 info: "info";
-                warning: "warning";
                 error: "error";
+                warning: "warning";
             }>;
             message: z.ZodString;
             path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             provider: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
                 registrar: "registrar";
-                wpcloud: "wpcloud";
+                infra: "infra";
                 dns: "dns";
                 runtime: "runtime";
             }>>>;
@@ -359,14 +371,14 @@ export declare const buildCreateResponseSchema: z.ZodObject<{
                 code: z.ZodString;
                 severity: z.ZodEnum<{
                     info: "info";
-                    warning: "warning";
                     error: "error";
+                    warning: "warning";
                 }>;
                 message: z.ZodString;
                 path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                 provider: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
                     registrar: "registrar";
-                    wpcloud: "wpcloud";
+                    infra: "infra";
                     dns: "dns";
                     runtime: "runtime";
                 }>>>;
@@ -424,14 +436,14 @@ export declare const buildCreateResponseSchema: z.ZodObject<{
                     code: z.ZodString;
                     severity: z.ZodEnum<{
                         info: "info";
-                        warning: "warning";
                         error: "error";
+                        warning: "warning";
                     }>;
                     message: z.ZodString;
                     path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                     provider: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
                         registrar: "registrar";
-                        wpcloud: "wpcloud";
+                        infra: "infra";
                         dns: "dns";
                         runtime: "runtime";
                     }>>>;
@@ -493,14 +505,14 @@ export declare const buildListResponseSchema: z.ZodObject<{
             code: z.ZodString;
             severity: z.ZodEnum<{
                 info: "info";
-                warning: "warning";
                 error: "error";
+                warning: "warning";
             }>;
             message: z.ZodString;
             path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             provider: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
                 registrar: "registrar";
-                wpcloud: "wpcloud";
+                infra: "infra";
                 dns: "dns";
                 runtime: "runtime";
             }>>>;

package/dist/contracts/builds.js

@@ -4,16 +4,30 @@ import { buildStatus } from "./enums.js";
 import { uploadInstructionsSchema } from "./internal.js";
 import { versionLogEntrySchema } from "./spaces.js";
 const nullableCommandSchema = z.string().trim().min(1).nullable();
-const buildTimeoutSecondsSchema = z.number().int().min(60).max(7200).default(900);
+const buildTimeoutSecondsSchema = z.number().int().min(60).max(7200);
 const scpStyleGitRemotePattern = /^[^@\s/:]+@[^:\s]+:[^\s]+$/;
 const gitCloneUrlSchema = z
     .string()
     .trim()
     .min(1)
     .refine((value) => scpStyleGitRemotePattern.test(value) || z.string().url().safeParse(value).success, "Clone URL must be a URL or scp-style Git remote.");
-// Build (`bld_`, internal-docs/platform.md "Build"): a first-class resource with
+// Build (`bld_`, the platform spec "Build"): a first-class resource with
 // its own table; ids are opaque and NEVER derived from version ids. The runner
 // mints the produced version through the normal finalize path.
+export const BuildSettingsOverrideSchema = z
+    .object({
+    rootDirectory: nullableCommandSchema.optional(),
+    installDirectory: nullableCommandSchema.optional(),
+    installCommand: nullableCommandSchema.optional(),
+    buildCommand: nullableCommandSchema.optional(),
+    outputDirectory: nullableCommandSchema.optional(),
+    ignoredBuildCommand: nullableCommandSchema.optional(),
+    frameworkPreset: nullableCommandSchema.optional(),
+    platformPreset: nullableCommandSchema.optional(),
+    allowUnsupportedPlatformFeatures: z.boolean().optional(),
+    timeoutSeconds: buildTimeoutSecondsSchema.optional(),
+})
+    .describe("Sparse per-request build setting overrides applied over saved settings.");
 export const BuildSettingsSchema = z
     .object({
     rootDirectory: nullableCommandSchema.default(null),
@@ -25,7 +39,7 @@ export const BuildSettingsSchema = z
     frameworkPreset: nullableCommandSchema.default(null),
     platformPreset: nullableCommandSchema.default(null),
     allowUnsupportedPlatformFeatures: z.boolean().default(false),
-    timeoutSeconds: buildTimeoutSecondsSchema,
+    timeoutSeconds: buildTimeoutSecondsSchema.default(900),
 })
     .describe("Resolved build settings. Builds persist this as an immutable `settingsSnapshot`.");
 export const BuildTargetSchema = z
@@ -226,9 +240,7 @@ export const BuildSchema = z.object({
 });
 export const buildCreateRequestSchema = z.object({
     input: BuildCreateInputSchema,
-    settings: BuildSettingsSchema.partial()
-        .optional()
-        .describe("Per-run settings overrides, persisted as `settingsSnapshot` after resolution."),
+    settings: BuildSettingsOverrideSchema.optional().describe("Per-run settings overrides, persisted as `settingsSnapshot` after resolution."),
     target: BuildTargetSchema.partial().optional(),
     diagnostics: z
         .array(baseDiagnosticSchema)

package/dist/contracts/channels.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-// Channels READ surface (internal-docs/platform.md "Channels"): a read-only
+// Channels READ surface (the platform spec "Channels"): a read-only
 // projection over the existing `channels` table and the `channel.promoted`
 // activity log. No writes, no new storage — promotion stays owned by the
 // publish/version lifecycle. Additive only.

package/dist/contracts/comments.d.ts

@@ -261,8 +261,8 @@ export declare const noticePublishSchema: z.ZodObject<{
     level: z.ZodDefault<z.ZodEnum<{
         info: "info";
         success: "success";
-        warning: "warning";
         error: "error";
+        warning: "warning";
     }>>;
     payload: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, z.core.$strip>;

package/dist/contracts/common.d.ts

@@ -9,14 +9,14 @@ export declare const baseDiagnosticSchema: z.ZodObject<{
     code: z.ZodString;
     severity: z.ZodEnum<{
         info: "info";
-        warning: "warning";
         error: "error";
+        warning: "warning";
     }>;
     message: z.ZodString;
     path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     provider: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
         registrar: "registrar";
-        wpcloud: "wpcloud";
+        infra: "infra";
         dns: "dns";
         runtime: "runtime";
     }>>>;
@@ -176,14 +176,14 @@ export declare const AsyncOperationSchema: z.ZodObject<{
         code: z.ZodString;
         severity: z.ZodEnum<{
             info: "info";
-            warning: "warning";
             error: "error";
+            warning: "warning";
         }>;
         message: z.ZodString;
         path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         provider: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
             registrar: "registrar";
-            wpcloud: "wpcloud";
+            infra: "infra";
             dns: "dns";
             runtime: "runtime";
         }>>>;
@@ -220,14 +220,14 @@ export declare function mutationEnvelope<T extends z.ZodType>(data: T): z.ZodObj
             code: z.ZodString;
             severity: z.ZodEnum<{
                 info: "info";
-                warning: "warning";
                 error: "error";
+                warning: "warning";
             }>;
             message: z.ZodString;
             path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             provider: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
                 registrar: "registrar";
-                wpcloud: "wpcloud";
+                infra: "infra";
                 dns: "dns";
                 runtime: "runtime";
             }>>>;

package/dist/contracts/common.js

@@ -6,7 +6,7 @@ export const SpaceViewerSchema = z.object({
     description: z.string().nullable(),
     ogImagePath: z.string().nullable(),
 });
-// The ONE Diagnostic shape (internal-docs/platform.md L1616-1623). Every lifecycle
+// The ONE Diagnostic shape (the platform spec). Every lifecycle
 // resource (versions, builds, bindings, assignments, exports, imports, transfers)
 // carries `diagnostics: Diagnostic[]` using exactly this vocabulary.
 export const baseDiagnosticSchema = z.object({
@@ -32,7 +32,7 @@ export const baseDiagnosticSchema = z.object({
         .nullish()
         .describe("Whether retrying the same operation can resolve this diagnostic without the caller changing anything."),
 });
-// Canonical DnsInstruction (internal-docs/platform.md L2500-2506): provider vocabulary
+// Canonical DnsInstruction (the platform spec): provider vocabulary
 // never leaks into `purpose`.
 export const DnsInstructionSchema = z.object({
     type: z.enum(["A", "AAAA", "CNAME", "TXT", "ALIAS"]),
@@ -41,7 +41,7 @@ export const DnsInstructionSchema = z.object({
     ttl: z.number().int().optional(),
     purpose: z.enum(["verification", "routing", "ssl"]).describe("Why this record is needed."),
 });
-// One shared requiredActions vocabulary (internal-docs/platform.md L2512-2517 + L1807-1811):
+// One shared requiredActions vocabulary (the platform spec):
 // lifecycle resources expose the concrete user steps that unblock them. New action types are
 // added HERE, never as per-resource variants.
 export const requiredActionSchema = z.discriminatedUnion("type", [
@@ -64,7 +64,7 @@ export const requiredActionSchema = z.discriminatedUnion("type", [
 export const requiredActionsSchema = z
     .array(requiredActionSchema)
     .describe("Concrete user steps that unblock this resource, using the one shared vocabulary.");
-// The error shape (internal-docs/platform.md "Global API Conventions"): every 4xx/5xx body
+// The error shape (the platform spec "Global API Conventions"): every 4xx/5xx body
 // is one RFC 9457 problem details document served as `application/problem+json`. `type` and
 // `title` are derived mechanically from `code` (see contracts/error-codes.ts); `code`,
 // `pointer` (RFC 6901), `details`, `suggestions`, `next`, and `requestId` are extension members.
@@ -93,7 +93,7 @@ export const ProblemDetailsSchema = z.object({
         .describe("Copy-pasteable commands or API requests an agent can run next."),
     requestId: z.string().describe("The request id to quote when contacting support."),
 });
-// Success envelope (internal-docs/platform.md "Global API Conventions"): `{ data: T }` for
+// Success envelope (the platform spec "Global API Conventions"): `{ data: T }` for
 // single resources and mutations, `{ data: T[], pagination }` for lists. Mutations whose work
 // outlives the request also carry `operation` — wrap with `.extend({ operation: ... })`.
 export function dataEnvelope(data) {

package/dist/contracts/crons.d.ts

@@ -0,0 +1,35 @@
+import { z } from "zod";
+export declare const spaceCronFailureSchema: z.ZodObject<{
+    id: z.ZodString;
+    occurredAt: z.ZodString;
+}, z.core.$strip>;
+export type SpaceCronFailure = z.infer<typeof spaceCronFailureSchema>;
+export declare const spaceCronListItemSchema: z.ZodObject<{
+    key: z.ZodString;
+    path: z.ZodString;
+    schedule: z.ZodString;
+    recentFailures: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        occurredAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type SpaceCronListItem = z.infer<typeof spaceCronListItemSchema>;
+export declare const spaceCronsResponseSchema: z.ZodObject<{
+    data: z.ZodObject<{
+        versionId: z.ZodNullable<z.ZodString>;
+        crons: z.ZodArray<z.ZodObject<{
+            key: z.ZodString;
+            path: z.ZodString;
+            schedule: z.ZodString;
+            recentFailures: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                occurredAt: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        unattributedFailures: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            occurredAt: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type SpaceCronsResponse = z.infer<typeof spaceCronsResponseSchema>;

package/dist/contracts/crons.js

@@ -0,0 +1,42 @@
+import { z } from "zod";
+// Crons READ surface: what the live version declares, plus what has failed.
+//
+// There is no write side and there will not be one. `crons` is an sf.jsonc key,
+// so the config file is the only writer and a publish is the only edit — which
+// is what makes a rollback restore the previous schedules for free. This
+// projection exists so a human or an agent can ask what is actually scheduled
+// right now without re-reading the file they think they published.
+// One reported failure. Deliberately just an identity and an instant: the
+// platform's own report of a failed run carries a payload whose shape is not
+// pinned yet, and guessing fields into a public contract now would freeze the
+// wrong ones. A timestamp is what both the CLI table and "did my cron break?"
+// actually need; the space's activity feed carries the narrative.
+export const spaceCronFailureSchema = z.object({
+    id: z.string().describe("Identifier of this failure report."),
+    occurredAt: z.string().datetime().describe("Instant the failure was reported."),
+});
+// One scheduled entry, exactly as the live version declared it. `key` is the
+// path's slug and is what names this entry everywhere else — the CLI argument,
+// the failure reports, the platform's own bookkeeping.
+export const spaceCronListItemSchema = z.object({
+    key: z.string().describe("Stable identifier for this entry, derived from its path."),
+    path: z.string().describe("Path on this space that gets requested."),
+    schedule: z
+        .string()
+        .describe("Schedule as declared, verbatim: named, an Nh/Nd/Nw interval, or a five-field crontab expression."),
+    recentFailures: z
+        .array(spaceCronFailureSchema)
+        .describe("Most recent failures reported for this entry, newest first. Empty when it has not failed."),
+});
+export const spaceCronsResponseSchema = z.object({
+    data: z.object({
+        versionId: z
+            .string()
+            .nullable()
+            .describe("Live version these declarations come from, or null before the first publish."),
+        crons: z.array(spaceCronListItemSchema),
+        unattributedFailures: z
+            .array(spaceCronFailureSchema)
+            .describe("Failures that could not be tied to one entry, newest first. A cron removed from the config can still have failed while it was live."),
+    }),
+});

package/dist/contracts/device-auth.js

@@ -3,7 +3,7 @@ import { AGENT_HANDOFF_DECLINE_REASONS } from "../docs/agent-setup.js";
 import { ApiKeyPresetSchema, ApiKeySchema } from "./api-keys.js";
 import { DeviceTeamScopeSchema } from "./device-team-scope.js";
 export { DeviceTeamScopeSchema } from "./device-team-scope.js";
-// Device authorization flow (internal-docs/platform.md Credential Bootstrap):
+// Device authorization flow (the platform spec Credential Bootstrap):
 // `POST /v1/auth/device` starts the flow, `POST /v1/auth/device/poll` redeems
 // it. Device codes are bearer capabilities: they ride POST bodies only, are
 // never logged, and redeem exactly once. User codes are short display codes the

package/dist/contracts/docs.d.ts

@@ -11,8 +11,8 @@ export declare const docsIndexQuerySchema: z.ZodObject<{
     category: z.ZodOptional<z.ZodEnum<{
         guide: "guide";
         api: "api";
-        cli: "cli";
         error: "error";
+        cli: "cli";
         workflow: "workflow";
         recipe: "recipe";
     }>>;
@@ -30,8 +30,8 @@ export declare const DocsEntrySchema: z.ZodObject<{
     category: z.ZodEnum<{
         guide: "guide";
         api: "api";
-        cli: "cli";
         error: "error";
+        cli: "cli";
         workflow: "workflow";
         recipe: "recipe";
     }>;
@@ -56,8 +56,8 @@ export declare const DocsDocSchema: z.ZodObject<{
     category: z.ZodEnum<{
         guide: "guide";
         api: "api";
-        cli: "cli";
         error: "error";
+        cli: "cli";
         workflow: "workflow";
         recipe: "recipe";
     }>;
@@ -86,8 +86,8 @@ export declare const DocsIndexResponseSchema: z.ZodObject<{
     category: z.ZodNullable<z.ZodEnum<{
         guide: "guide";
         api: "api";
-        cli: "cli";
         error: "error";
+        cli: "cli";
         workflow: "workflow";
         recipe: "recipe";
     }>>;
@@ -99,8 +99,8 @@ export declare const DocsIndexResponseSchema: z.ZodObject<{
         category: z.ZodEnum<{
             guide: "guide";
             api: "api";
-            cli: "cli";
             error: "error";
+            cli: "cli";
             workflow: "workflow";
             recipe: "recipe";
         }>;

package/dist/contracts/docs.js

@@ -19,7 +19,7 @@ export const docsIndexQuerySchema = z.object({
         .describe("Disclosure tier to list. `essential` (default) shows the core pages; `full` adds advanced pages; `reference` returns everything."),
     category: docCategoryEnum
         .optional()
-        .describe("Restrict to one docs area: guide, cli, api, recipe, workflow, or error."),
+        .describe("Restrict to one docs area: `guide`, `cli`, `api`, `recipe`, `workflow`, or `error`."),
 });
 /** Links carried by every docs entry. */
 export const DocsLinksSchema = z.object({
@@ -28,7 +28,7 @@ export const DocsLinksSchema = z.object({
 });
 /** One entry in the docs index. */
 export const DocsEntrySchema = z.object({
-    slug: z.string().describe("Stable topic id, e.g. `publishing` or `api/spaces`."),
+    slug: z.string().describe("Stable topic id, for example `publishing` or `api/spaces`."),
     title: z.string(),
     summary: z.string(),
     category: docCategoryEnum,