@spacefast/common 0.0.24 → 0.2.1

package/dist/contracts/events.d.ts

@@ -65,13 +65,25 @@ export declare const EVENT_CATALOG: {
             path: z.ZodString;
         }, z.core.$strict>;
     };
-    "cli.command.completed": {
+    "cli.agent_tooling.outcome": {
         sources: "cli"[];
-        actors: "anonymous_machine"[];
+        actors: "system"[];
         properties: z.ZodObject<{
-            command: z.ZodString;
-            version: z.ZodString;
-            error_class: z.ZodOptional<z.ZodString>;
+            event: z.ZodEnum<{
+                install: "install";
+                setup: "setup";
+            }>;
+            agentId: z.ZodString;
+            method: z.ZodString;
+            outcome: z.ZodEnum<{
+                failed: "failed";
+                skipped: "skipped";
+                installed: "installed";
+            }>;
+            reasonCode: z.ZodString;
+            cliVersion: z.ZodString;
+            os: z.ZodString;
+            timestamp: z.ZodString;
         }, z.core.$strict>;
     };
     "browser.funnel.claim_page_viewed": {
@@ -89,15 +101,44 @@ export declare const EVENT_CATALOG: {
         actors: ("analytics_id" | "anonymous_id")[];
         properties: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
     };
-    "browser.funnel.claim_rescue_countdown_viewed": {
-        sources: ("www" | "dashboard")[];
+    "browser.funnel.start_step_viewed": {
+        sources: "dashboard"[];
         actors: ("analytics_id" | "anonymous_id")[];
-        properties: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        properties: z.ZodObject<{
+            mode: z.ZodEnum<{
+                start: "start";
+                "new-space": "new-space";
+            }>;
+            step: z.ZodString;
+            signed_in: z.ZodBoolean;
+        }, z.core.$strict>;
     };
-    "browser.funnel.claim_reminder_requested": {
-        sources: ("www" | "dashboard")[];
+    "browser.funnel.start_option_chosen": {
+        sources: "dashboard"[];
         actors: ("analytics_id" | "anonymous_id")[];
-        properties: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        properties: z.ZodObject<{
+            mode: z.ZodEnum<{
+                start: "start";
+                "new-space": "new-space";
+            }>;
+            step: z.ZodString;
+            option_id: z.ZodString;
+            option_kind: z.ZodString;
+        }, z.core.$strict>;
+    };
+    "browser.funnel.start_prompt_copied": {
+        sources: "dashboard"[];
+        actors: ("analytics_id" | "anonymous_id")[];
+        properties: z.ZodObject<{
+            mode: z.ZodEnum<{
+                start: "start";
+                "new-space": "new-space";
+            }>;
+            step: z.ZodString;
+            agent_id: z.ZodNullable<z.ZodString>;
+            credentialed: z.ZodBoolean;
+            handoff_id: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>;
     };
     "domain.search.session_started": {
         sources: "domain-ssh"[];
@@ -242,6 +283,36 @@ export declare const EVENT_CATALOG: {
             operation_id: z.ZodString;
         }, z.core.$strict>;
     };
+    "auth.agent_handoff.redeemed": {
+        sources: "control-plane"[];
+        actors: ("system" | "analytics_id" | "anonymous_id")[];
+        properties: z.ZodObject<{
+            handoff_id: z.ZodString;
+            kind: z.ZodEnum<{
+                space: "space";
+                page_context: "page_context";
+            }>;
+            client_target: z.ZodString;
+            team_id: z.ZodString;
+            space_id: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>;
+    };
+    "auth.agent_handoff.fetched": {
+        sources: "control-plane"[];
+        actors: "system"[];
+        properties: z.ZodObject<{
+            handoff_id: z.ZodString;
+            space_id: z.ZodNullable<z.ZodString>;
+            kind: z.ZodEnum<{
+                space: "space";
+                anonymous: "anonymous";
+                page_context: "page_context";
+            }>;
+            client_target: z.ZodNullable<z.ZodString>;
+            team_id: z.ZodNullable<z.ZodString>;
+            fetch_count: z.ZodNumber;
+        }, z.core.$strict>;
+    };
     "feature.blocked": {
         sources: "control-plane"[];
         actors: ("system" | "analytics_id" | "anonymous_id")[];
@@ -269,12 +340,13 @@ export declare const eventNameSchema: z.ZodEnum<{
     "client.page_viewed": "client.page_viewed";
     "client.web_vital.measured": "client.web_vital.measured";
     "client.error.observed": "client.error.observed";
-    "cli.command.completed": "cli.command.completed";
+    "cli.agent_tooling.outcome": "cli.agent_tooling.outcome";
     "browser.funnel.claim_page_viewed": "browser.funnel.claim_page_viewed";
     "browser.funnel.claim_token_validated": "browser.funnel.claim_token_validated";
     "browser.funnel.space_claimed": "browser.funnel.space_claimed";
-    "browser.funnel.claim_rescue_countdown_viewed": "browser.funnel.claim_rescue_countdown_viewed";
-    "browser.funnel.claim_reminder_requested": "browser.funnel.claim_reminder_requested";
+    "browser.funnel.start_step_viewed": "browser.funnel.start_step_viewed";
+    "browser.funnel.start_option_chosen": "browser.funnel.start_option_chosen";
+    "browser.funnel.start_prompt_copied": "browser.funnel.start_prompt_copied";
     "domain.search.session_started": "domain.search.session_started";
     "domain.search.session_ended": "domain.search.session_ended";
     "domain.search.lookup_requested": "domain.search.lookup_requested";
@@ -282,6 +354,8 @@ export declare const eventNameSchema: z.ZodEnum<{
     "version.intent.created": "version.intent.created";
     "version.finalize.queued": "version.finalize.queued";
     "version.promote.queued": "version.promote.queued";
+    "auth.agent_handoff.redeemed": "auth.agent_handoff.redeemed";
+    "auth.agent_handoff.fetched": "auth.agent_handoff.fetched";
     "feature.blocked": "feature.blocked";
     "abuse.limit_tripped": "abuse.limit_tripped";
 }>;
@@ -292,12 +366,13 @@ export declare const eventPayloadSchema: z.ZodObject<{
         "client.page_viewed": "client.page_viewed";
         "client.web_vital.measured": "client.web_vital.measured";
         "client.error.observed": "client.error.observed";
-        "cli.command.completed": "cli.command.completed";
+        "cli.agent_tooling.outcome": "cli.agent_tooling.outcome";
         "browser.funnel.claim_page_viewed": "browser.funnel.claim_page_viewed";
         "browser.funnel.claim_token_validated": "browser.funnel.claim_token_validated";
         "browser.funnel.space_claimed": "browser.funnel.space_claimed";
-        "browser.funnel.claim_rescue_countdown_viewed": "browser.funnel.claim_rescue_countdown_viewed";
-        "browser.funnel.claim_reminder_requested": "browser.funnel.claim_reminder_requested";
+        "browser.funnel.start_step_viewed": "browser.funnel.start_step_viewed";
+        "browser.funnel.start_option_chosen": "browser.funnel.start_option_chosen";
+        "browser.funnel.start_prompt_copied": "browser.funnel.start_prompt_copied";
         "domain.search.session_started": "domain.search.session_started";
         "domain.search.session_ended": "domain.search.session_ended";
         "domain.search.lookup_requested": "domain.search.lookup_requested";
@@ -305,6 +380,8 @@ export declare const eventPayloadSchema: z.ZodObject<{
         "version.intent.created": "version.intent.created";
         "version.finalize.queued": "version.finalize.queued";
         "version.promote.queued": "version.promote.queued";
+        "auth.agent_handoff.redeemed": "auth.agent_handoff.redeemed";
+        "auth.agent_handoff.fetched": "auth.agent_handoff.fetched";
         "feature.blocked": "feature.blocked";
         "abuse.limit_tripped": "abuse.limit_tripped";
     }>;
@@ -354,12 +431,13 @@ export declare const eventIngestSchema: z.ZodObject<{
             "client.page_viewed": "client.page_viewed";
             "client.web_vital.measured": "client.web_vital.measured";
             "client.error.observed": "client.error.observed";
-            "cli.command.completed": "cli.command.completed";
+            "cli.agent_tooling.outcome": "cli.agent_tooling.outcome";
             "browser.funnel.claim_page_viewed": "browser.funnel.claim_page_viewed";
             "browser.funnel.claim_token_validated": "browser.funnel.claim_token_validated";
             "browser.funnel.space_claimed": "browser.funnel.space_claimed";
-            "browser.funnel.claim_rescue_countdown_viewed": "browser.funnel.claim_rescue_countdown_viewed";
-            "browser.funnel.claim_reminder_requested": "browser.funnel.claim_reminder_requested";
+            "browser.funnel.start_step_viewed": "browser.funnel.start_step_viewed";
+            "browser.funnel.start_option_chosen": "browser.funnel.start_option_chosen";
+            "browser.funnel.start_prompt_copied": "browser.funnel.start_prompt_copied";
             "domain.search.session_started": "domain.search.session_started";
             "domain.search.session_ended": "domain.search.session_ended";
             "domain.search.lookup_requested": "domain.search.lookup_requested";
@@ -367,6 +445,8 @@ export declare const eventIngestSchema: z.ZodObject<{
             "version.intent.created": "version.intent.created";
             "version.finalize.queued": "version.finalize.queued";
             "version.promote.queued": "version.promote.queued";
+            "auth.agent_handoff.redeemed": "auth.agent_handoff.redeemed";
+            "auth.agent_handoff.fetched": "auth.agent_handoff.fetched";
             "feature.blocked": "feature.blocked";
             "abuse.limit_tripped": "abuse.limit_tripped";
         }>;

package/dist/contracts/events.js

@@ -68,18 +68,16 @@ const webVitalPropertiesSchema = z
     path: pathSchema,
 })
     .strict();
-// An uncaught browser error is not a single label — `error.name` is "Error" for
-// almost every application throw, so a one-field shape both fails to attribute
-// and (because it feeds the sender's dedupe key) suppresses genuinely distinct
-// errors. Model the fingerprint instead: signal kind, thrown-value class,
-// redacted message, top frames, and a deterministic grouping key. Every string
-// stays within `propertyValueSchema`'s 512-char cap — the generic property bag
+// `error.name` is "Error" for almost every application throw, so a one-field
+// shape cannot attribute the error and, since it feeds the sender's dedupe key,
+// suppresses distinct errors. Model the fingerprint instead. Every string stays
+// within `propertyValueSchema`'s 512-char cap: the generic property bag
 // validates alongside this schema, so a longer field would 400 at ingest.
 const clientErrorPropertiesSchema = z
     .object({
     kind: z
         .enum(["uncaught_exception", "unhandled_rejection"])
-        .describe("Which browser signal produced this — orthogonal to what was thrown."),
+        .describe("Which browser signal produced the event. Orthogonal to what was thrown."),
     error_class: z
         .string()
         .min(1)
@@ -102,14 +100,88 @@ const clientErrorPropertiesSchema = z
     path: pathSchema,
 })
     .strict();
-const cliCommandPropertiesSchema = z
+const cliAgentToolingPropertiesSchema = z
     .object({
-    command: z.string().min(1).max(128),
-    version: z.string().min(1).max(64),
-    error_class: z.string().min(1).max(128).optional(),
+    event: z.enum(["install", "setup"]),
+    agentId: z.string().min(1).max(128),
+    method: z.string().min(1).max(128),
+    outcome: z.enum(["installed", "skipped", "failed"]),
+    reasonCode: z.string().min(1).max(128),
+    cliVersion: z.string().min(1).max(64),
+    os: z.string().min(1).max(64),
+    timestamp: z.string().datetime(),
 })
     .strict();
 const browserFunnelPropertiesSchema = propertyBagSchema.default({});
+// The /start funnel — prompt copied → handoff fetched → handoff redeemed —
+// followed across the browser and the control plane. `/start` runs signed out,
+// so the join keys are ids that are safe to hold in analytics: `handoff_id` is
+// the non-secret ledger id. The handoff URL, its UUID bearer, and any minted
+// credential NEVER appear here — every shape
+// below is strict, so a sender that adds one is rejected at ingest.
+const startFunnelModeSchema = z
+    .enum(["start", "new-space"])
+    .describe("Which entry point the visitor is in: first-run /start, or new-space inside a team.");
+const startFunnelStepSchema = z.string().min(1).max(64);
+const startFunnelAgentIdSchema = z
+    .string()
+    .min(1)
+    .max(128)
+    .nullable()
+    .describe("Agent the visitor picked, or null before a pick.");
+const startFunnelHandoffIdSchema = z
+    .string()
+    .min(1)
+    .max(128)
+    .nullable()
+    .describe("Non-secret agent-handoff ledger id; null when the prompt carries no credential.");
+const startFunnelCredentialedSchema = z
+    .boolean()
+    .describe("Whether the copied prompt carried a handoff, not what the handoff was.");
+const startStepViewedPropertiesSchema = z
+    .object({
+    mode: startFunnelModeSchema,
+    step: startFunnelStepSchema,
+    signed_in: z.boolean(),
+})
+    .strict();
+const startOptionChosenPropertiesSchema = z
+    .object({
+    mode: startFunnelModeSchema,
+    step: startFunnelStepSchema,
+    option_id: z.string().min(1).max(128),
+    option_kind: z.string().min(1).max(64),
+})
+    .strict();
+const startPromptCopiedPropertiesSchema = z
+    .object({
+    mode: startFunnelModeSchema,
+    step: startFunnelStepSchema,
+    agent_id: startFunnelAgentIdSchema,
+    credentialed: startFunnelCredentialedSchema,
+    handoff_id: startFunnelHandoffIdSchema,
+})
+    .strict();
+const agentHandoffRedeemedPropertiesSchema = z
+    .object({
+    handoff_id: z.string().min(1).max(128),
+    kind: z.enum(["space", "page_context"]),
+    client_target: z.string().min(1).max(128),
+    team_id: z.string().min(1).max(128),
+    space_id: z.string().min(1).max(128).nullable(),
+})
+    .strict();
+// Fetching is the one handoff event an `anonymous` handoff can produce: it has
+// no team, no Space, and no chosen client, so those join keys are nullable here
+// and never nullable on redemption, which anonymous handoffs cannot reach.
+const agentHandoffFetchedPropertiesSchema = agentHandoffRedeemedPropertiesSchema
+    .extend({
+    kind: z.enum(["space", "page_context", "anonymous"]),
+    client_target: z.string().min(1).max(128).nullable(),
+    team_id: z.string().min(1).max(128).nullable(),
+    fetch_count: z.number().int().positive(),
+})
+    .strict();
 const domainSearchPropertiesSchema = z
     .object({
     action: z.enum(["suggestions", "availability", "whois"]).nullable().optional(),
@@ -216,10 +288,10 @@ export const EVENT_CATALOG = {
         actors: ["analytics_id", "anonymous_id"],
         properties: clientErrorPropertiesSchema,
     },
-    "cli.command.completed": {
+    "cli.agent_tooling.outcome": {
         sources: ["cli"],
-        actors: ["anonymous_machine"],
-        properties: cliCommandPropertiesSchema,
+        actors: ["system"],
+        properties: cliAgentToolingPropertiesSchema,
     },
     "browser.funnel.claim_page_viewed": {
         sources: ["dashboard", "www"],
@@ -236,15 +308,20 @@ export const EVENT_CATALOG = {
         actors: ["analytics_id", "anonymous_id"],
         properties: browserFunnelPropertiesSchema,
     },
-    "browser.funnel.claim_rescue_countdown_viewed": {
-        sources: ["dashboard", "www"],
+    "browser.funnel.start_step_viewed": {
+        sources: ["dashboard"],
         actors: ["analytics_id", "anonymous_id"],
-        properties: browserFunnelPropertiesSchema,
+        properties: startStepViewedPropertiesSchema,
     },
-    "browser.funnel.claim_reminder_requested": {
-        sources: ["dashboard", "www"],
+    "browser.funnel.start_option_chosen": {
+        sources: ["dashboard"],
         actors: ["analytics_id", "anonymous_id"],
-        properties: browserFunnelPropertiesSchema,
+        properties: startOptionChosenPropertiesSchema,
+    },
+    "browser.funnel.start_prompt_copied": {
+        sources: ["dashboard"],
+        actors: ["analytics_id", "anonymous_id"],
+        properties: startPromptCopiedPropertiesSchema,
     },
     "domain.search.session_started": {
         sources: ["domain-ssh"],
@@ -281,6 +358,16 @@ export const EVENT_CATALOG = {
         actors: ["analytics_id", "anonymous_id", "system"],
         properties: versionPromotePropertiesSchema,
     },
+    "auth.agent_handoff.redeemed": {
+        sources: ["control-plane"],
+        actors: ["analytics_id", "anonymous_id", "system"],
+        properties: agentHandoffRedeemedPropertiesSchema,
+    },
+    "auth.agent_handoff.fetched": {
+        sources: ["control-plane"],
+        actors: ["system"],
+        properties: agentHandoffFetchedPropertiesSchema,
+    },
     "feature.blocked": {
         sources: ["control-plane"],
         actors: ["analytics_id", "anonymous_id", "system"],

package/dist/contracts/execution.d.ts

@@ -1,38 +1,28 @@
 import { z } from "zod";
 /**
  * The platform execution layer: everything true of running tenant code on
- * Spacefast regardless of which product is running it.
+ * Spacefast, regardless of which product runs it.
  *
- * Two products sit on top of this file, and they are genuinely different
- * things rather than two configurations of one thing:
- *
- * - **Zero** (`./zero.js`) runs capsules — schema, queries, mutations and
- *   endpoints that share one parent-owned transaction — in the native runner
- *   on a dedicated wp.cloud site, next to that site's MySQL.
+ * - **Zero** (`./zero.js`) runs capsules in the native runner on a dedicated
+ *   wp.cloud site, next to that site's MySQL. A capsule is a schema, queries,
+ *   mutations and endpoints sharing one parent-owned transaction.
  * - **Functions** (`./functions.js`) runs workers on Cloudflare Workers for
- *   Platforms, carrying npm and framework output that we could never sandbox
- *   as well ourselves.
+ *   Platforms, carrying npm and framework output we could not sandbox as well
+ *   ourselves.
  *
- * The only surface both can host is an endpoint that touches neither the
- * database nor the caller's identity — see `endpointIsPortable`. That is the
- * portable seam, and it is deliberately narrow: a capsule handler's semantics
- * depend on the transaction wrapped around it, which does not exist on an
- * isolate a continent away from the database.
+ * The only surface both can host is an endpoint touching neither the database,
+ * the caller's identity, nor realtime. See `endpointIsPortable`.
  *
- * Neither is a "kind" a space declares. Every space owns a site, so what runs
- * is a routing decision derived from what the published tree carries: static
- * files, a worker, a capsule, or any mix of the three in one publish. There is
- * no enum here to disagree with the tree.
+ * Neither is a "kind" a space declares. What runs is a routing decision derived
+ * from what the published tree carries, so there is no enum here to disagree
+ * with the tree.
  */
 /**
- * How a live runtime delivers realtime invalidations.
- *
- * One vocabulary end to end: the finalize payload, the client config a serving
- * runtime hands the browser, and every API response all name the transport
- * with these three values. `central` is the hosted relay, `cast` is the
- * collaboration service, and `local` is a dev machine serving its own socket —
- * a distinction a customer can act on, unlike the component names the transports
- * used to be called after.
+ * How a live runtime delivers realtime invalidations. One vocabulary end to
+ * end: the finalize payload, the client config handed to the browser, and every
+ * API response name the transport with these three values. `central` is the
+ * hosted relay, `cast` is the collaboration service, `local` is a dev machine
+ * serving its own socket.
  */
 export declare const RUNTIME_REALTIME_MODES: readonly ["central", "cast", "local"];
 export declare const runtimeRealtimeModeSchema: z.ZodEnum<{
@@ -62,13 +52,13 @@ export declare const SERVER_ENV_FILES: readonly [".env.server", ".env.lakebed.se
 export declare const EXECUTION_ENV_RESERVED_PREFIXES: readonly ["SPACEFAST_", "ZERO_"];
 /** Paths the platform owns on every space, whatever the product. */
 export declare const PLATFORM_ROUTE_PREFIX = "/__spacefast";
+/** Runtime-owned files that travel inside a version but are never tenant files. */
+export declare function runtimeInternalArtifactPath(path: string): boolean;
 /**
- * First path segments the platform claims. Matched as segment prefixes rather
- * than whole segments because the runtime already reserves the whole family —
- * `/__stattic_probe` is a live serving path, and `upload-policy.php` refuses
- * any first segment starting with either of these. Encoding it the same way
- * here keeps a capsule or worker from declaring a route the origin would
- * intercept before it ever reached them.
+ * First path segments the platform claims. Matched as segment prefixes, not
+ * whole segments: `/__stattic_probe` is a live serving path, and
+ * `upload-policy.php` refuses any first segment starting with one of these. A
+ * capsule or worker must not declare a route the origin would intercept first.
  */
 export declare const PLATFORM_RESERVED_ROUTE_SEGMENT_PREFIXES: readonly ["__spacefast", "__stattic", "__span"];
 export declare const executionSha256Schema: z.ZodString;
@@ -76,11 +66,11 @@ export declare const executionBase64Schema: z.ZodString;
 export declare const executionIdentifierSchema: z.ZodString;
 export declare const executionEnvNameSchema: z.ZodString;
 /**
- * Builds the route-path schema for a product. Structural rules — normalization,
- * traversal, wildcards, the platform's own prefixes — are identical everywhere
- * and live here. Each product passes the extra paths and prefixes its own app
- * shell claims, because those differ: Zero's client router owns `/auth/*`,
- * a Functions worker owns nothing beyond what the platform reserves.
+ * Builds the route-path schema for a product. The structural rules are
+ * identical everywhere and live here: normalization, traversal, wildcards, and
+ * the platform's own prefixes. Each product passes the extra paths and prefixes
+ * its own app shell claims, because those differ: Zero's client router owns
+ * `/auth/*`, a Functions worker owns nothing beyond what the platform reserves.
  */
 export declare function appRoutePathSchema(options: {
     subject: string;
@@ -112,35 +102,30 @@ export declare const executionCapabilitiesSchema: z.ZodDefault<z.ZodObject<{
     gravatar: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
     spam: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
     email: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+    content: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
 }, z.core.$strip>>;
 export type ExecutionCapabilities = z.infer<typeof executionCapabilitiesSchema>;
 /**
  * The order every surface renders a capability list in. Fixed rather than
  * derived from a response body, so two spaces never list their capabilities
- * differently because JSON came back reshuffled — and declared here, beside the
- * schema, so adding a capability cannot leave a renderer silently omitting it.
+ * differently because JSON came back reshuffled.
  */
-export declare const EXECUTION_CAPABILITY_ORDER: readonly ["db", "fetch", "auth", "env", "realtime", "logging", "gravatar", "spam", "email"];
+export declare const EXECUTION_CAPABILITY_ORDER: readonly ["db", "fetch", "auth", "env", "realtime", "logging", "gravatar", "spam", "email", "content"];
 /**
- * The portable seam, stated as one predicate.
- *
- * `db` and `auth` are the two capabilities that bind a handler to the local
- * tier. `db` because Zero's store guarantees every handler runs inside one
- * parent-owned transaction, which an isolate reaching the database over a
- * relay cannot offer. `auth` because capsule identity is resolved against that
- * same transaction's view. Everything else — fetch, env, realtime, logging, and
- * the three platform services — is brokered identically on both tiers and does
- * not constrain placement.
+ * The portable seam. `db`, `auth` and `realtime` bind a handler to the local
+ * tier: `db` because Zero guarantees one parent-owned transaction that an
+ * isolate over a relay cannot offer, `auth` because capsule identity resolves
+ * against that transaction's view, `realtime` because the Functions grant
+ * vocabulary has no counterpart for invalidations. Everything else is brokered
+ * identically on both tiers.
  *
- * `email` is the one worth stating explicitly, because it looks like it should
- * bind: a Zero mutation's send is atomic with its database writes, and a
- * Function's is not. That is a difference in the *guarantee* either tier can
- * offer, not in what the handler is allowed to reach, and placement follows
- * what code reaches. An author who needs that atomicity writes a capsule.
+ * `email` looks like it should bind but does not: a Zero mutation's send is
+ * atomic with its writes and a Function's is not, which is a difference in
+ * guarantee, not in what the handler reaches. An author who needs that
+ * atomicity writes a capsule.
  *
- * Nothing here decides placement automatically: the product a version deploys
- * to is a property of what its author wrote, and this predicate only reports
- * whether the code could also have run on the other tier.
+ * This predicate reports only whether code could also have run on the other
+ * tier. It does not decide placement.
  */
 export declare function endpointIsPortable(capabilities: ExecutionCapabilities): boolean;
 /**
@@ -171,6 +156,7 @@ export declare function executionEndpointSourceSchema(routePathSchema: z.ZodType
         gravatar: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
         spam: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
         email: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+        content: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
     }, z.core.$strip>>;
 }, z.core.$strict>;
 /**
@@ -191,10 +177,9 @@ export declare function executionStaticFileSchema(options: {
     storageRoot: string;
     maxBytes: number;
     /**
-     * The one underscore-prefixed root a platform compile may write into. Author
-     * trees still cannot: the leading-underscore ban is what keeps `_headers` and
-     * `_redirects` from being forged as content, and this exemption is a literal
-     * prefix the compiler owns, not a relaxation of the rule.
+     * The one underscore-prefixed root a platform compile may write into. The
+     * leading-underscore ban keeps `_headers` and `_redirects` from being forged
+     * as content; this is a literal prefix the compiler owns, not a relaxation.
      */
     platformAssetRoot?: string;
 }): z.ZodObject<{
@@ -206,11 +191,10 @@ export declare function executionStaticFileSchema(options: {
 }, z.core.$strict>;
 /**
  * Whether a version's execution surface may be read by anyone or only by the
- * space's own members. Both products expose an inspect route; the policy is
- * the same question on each.
+ * space's own members. Both products expose an inspect route.
  */
 export declare const executionInspectPolicySchema: z.ZodEnum<{
-    public: "public";
     private: "private";
+    public: "public";
 }>;
 export type ExecutionInspectPolicy = z.infer<typeof executionInspectPolicySchema>;