@spacefast/common 0.0.26 → 0.2.1

package/dist/contracts/execution.js

@@ -1,38 +1,28 @@
 import { z } from "zod";
 /**
  * The platform execution layer: everything true of running tenant code on
- * Spacefast regardless of which product is running it.
+ * Spacefast, regardless of which product runs it.
  *
- * Two products sit on top of this file, and they are genuinely different
- * things rather than two configurations of one thing:
- *
- * - **Zero** (`./zero.js`) runs capsules — schema, queries, mutations and
- *   endpoints that share one parent-owned transaction — in the native runner
- *   on a dedicated wp.cloud site, next to that site's MySQL.
+ * - **Zero** (`./zero.js`) runs capsules in the native runner on a dedicated
+ *   wp.cloud site, next to that site's MySQL. A capsule is a schema, queries,
+ *   mutations and endpoints sharing one parent-owned transaction.
  * - **Functions** (`./functions.js`) runs workers on Cloudflare Workers for
- *   Platforms, carrying npm and framework output that we could never sandbox
- *   as well ourselves.
+ *   Platforms, carrying npm and framework output we could not sandbox as well
+ *   ourselves.
  *
- * The only surface both can host is an endpoint that touches neither the
- * database, the caller's identity, nor realtime — see `endpointIsPortable`.
- * That is the portable seam, and it is deliberately narrow: a capsule
- * handler's semantics depend on the transaction wrapped around it, which does
- * not exist on an isolate a continent away from the database.
+ * The only surface both can host is an endpoint touching neither the database,
+ * the caller's identity, nor realtime. See `endpointIsPortable`.
  *
- * Neither is a "kind" a space declares. Every space owns a site, so what runs
- * is a routing decision derived from what the published tree carries: static
- * files, a worker, a capsule, or any mix of the three in one publish. There is
- * no enum here to disagree with the tree.
+ * Neither is a "kind" a space declares. What runs is a routing decision derived
+ * from what the published tree carries, so there is no enum here to disagree
+ * with the tree.
  */
 /**
- * How a live runtime delivers realtime invalidations.
- *
- * One vocabulary end to end: the finalize payload, the client config a serving
- * runtime hands the browser, and every API response all name the transport
- * with these three values. `central` is the hosted relay, `cast` is the
- * collaboration service, and `local` is a dev machine serving its own socket —
- * a distinction a customer can act on, unlike the component names the transports
- * used to be called after.
+ * How a live runtime delivers realtime invalidations. One vocabulary end to
+ * end: the finalize payload, the client config handed to the browser, and every
+ * API response name the transport with these three values. `central` is the
+ * hosted relay, `cast` is the collaboration service, `local` is a dev machine
+ * serving its own socket.
  */
 export const RUNTIME_REALTIME_MODES = ["central", "cast", "local"];
 export const runtimeRealtimeModeSchema = z.enum(RUNTIME_REALTIME_MODES);
@@ -57,13 +47,19 @@ export const SERVER_ENV_FILES = [SERVER_ENV_FILE, LAKEBED_SERVER_ENV_FILE];
 export const EXECUTION_ENV_RESERVED_PREFIXES = ["SPACEFAST_", "ZERO_"];
 /** Paths the platform owns on every space, whatever the product. */
 export const PLATFORM_ROUTE_PREFIX = "/__spacefast";
+/** Runtime-owned files that travel inside a version but are never tenant files. */
+export function runtimeInternalArtifactPath(path) {
+    const foldedPlatformPath = path.toLowerCase();
+    return (path === "zero" ||
+        path.startsWith("zero/") ||
+        foldedPlatformPath === "__spacefast" ||
+        foldedPlatformPath.startsWith("__spacefast/"));
+}
 /**
- * First path segments the platform claims. Matched as segment prefixes rather
- * than whole segments because the runtime already reserves the whole family —
- * `/__stattic_probe` is a live serving path, and `upload-policy.php` refuses
- * any first segment starting with either of these. Encoding it the same way
- * here keeps a capsule or worker from declaring a route the origin would
- * intercept before it ever reached them.
+ * First path segments the platform claims. Matched as segment prefixes, not
+ * whole segments: `/__stattic_probe` is a live serving path, and
+ * `upload-policy.php` refuses any first segment starting with one of these. A
+ * capsule or worker must not declare a route the origin would intercept first.
  */
 export const PLATFORM_RESERVED_ROUTE_SEGMENT_PREFIXES = [
     "__spacefast",
@@ -116,11 +112,11 @@ function hasNoAsciiControlCharacters(value) {
     return true;
 }
 /**
- * Builds the route-path schema for a product. Structural rules — normalization,
- * traversal, wildcards, the platform's own prefixes — are identical everywhere
- * and live here. Each product passes the extra paths and prefixes its own app
- * shell claims, because those differ: Zero's client router owns `/auth/*`,
- * a Functions worker owns nothing beyond what the platform reserves.
+ * Builds the route-path schema for a product. The structural rules are
+ * identical everywhere and live here: normalization, traversal, wildcards, and
+ * the platform's own prefixes. Each product passes the extra paths and prefixes
+ * its own app shell claims, because those differ: Zero's client router owns
+ * `/auth/*`, a Functions worker owns nothing beyond what the platform reserves.
  */
 export function appRoutePathSchema(options) {
     const reservedPaths = options.reservedPaths ?? [];
@@ -145,9 +141,8 @@ export function appRoutePathSchema(options) {
         !path.includes("?") &&
         !path.includes("#") &&
         !path.includes("%") &&
-        // The root is the one path allowed to end in a slash. Zero reserves it
-        // for its app shell anyway, but a Functions worker serving a framework
-        // app needs to claim "/" as its index route.
+        // The root is the one path allowed to end in a slash: a Functions
+        // worker serving a framework app claims "/" as its index route.
         (path === "/" || !path.endsWith("/")) &&
         path
             .split("/")
@@ -190,14 +185,14 @@ export const executionCapabilitiesSchema = z
     gravatar: z.boolean().default(false),
     spam: z.boolean().default(false),
     email: z.boolean().default(false),
+    content: z.boolean().default(false),
 })
     .partial()
     .default({});
 /**
  * The order every surface renders a capability list in. Fixed rather than
  * derived from a response body, so two spaces never list their capabilities
- * differently because JSON came back reshuffled — and declared here, beside the
- * schema, so adding a capability cannot leave a renderer silently omitting it.
+ * differently because JSON came back reshuffled.
  */
 export const EXECUTION_CAPABILITY_ORDER = [
     "db",
@@ -209,32 +204,25 @@ export const EXECUTION_CAPABILITY_ORDER = [
     "gravatar",
     "spam",
     "email",
+    "content",
 ];
 // A capability added to executionCapabilitiesSchema must also be added to the order above.
 true;
 /**
- * The portable seam, stated as one predicate.
- *
- * `db`, `auth` and `realtime` are the three capabilities that bind a handler
- * to the local tier. `db` because Zero's store guarantees every handler runs
- * inside one parent-owned transaction, which an isolate reaching the database
- * over a relay cannot offer. `auth` because capsule identity is resolved
- * against that same transaction's view. `realtime` because invalidations are
- * emitted by the native runner beside the store, and the Functions grant
- * vocabulary has no counterpart for them — a worker declaring the capability
- * would fail closed at the relay with nothing to reach. Everything else —
- * fetch, env, logging, and the three platform services — is brokered
- * identically on both tiers and does not constrain placement.
+ * The portable seam. `db`, `auth` and `realtime` bind a handler to the local
+ * tier: `db` because Zero guarantees one parent-owned transaction that an
+ * isolate over a relay cannot offer, `auth` because capsule identity resolves
+ * against that transaction's view, `realtime` because the Functions grant
+ * vocabulary has no counterpart for invalidations. Everything else is brokered
+ * identically on both tiers.
  *
- * `email` is the one worth stating explicitly, because it looks like it should
- * bind: a Zero mutation's send is atomic with its database writes, and a
- * Function's is not. That is a difference in the *guarantee* either tier can
- * offer, not in what the handler is allowed to reach, and placement follows
- * what code reaches. An author who needs that atomicity writes a capsule.
+ * `email` looks like it should bind but does not: a Zero mutation's send is
+ * atomic with its writes and a Function's is not, which is a difference in
+ * guarantee, not in what the handler reaches. An author who needs that
+ * atomicity writes a capsule.
  *
- * Nothing here decides placement automatically: the product a version deploys
- * to is a property of what its author wrote, and this predicate only reports
- * whether the code could also have run on the other tier.
+ * This predicate reports only whether code could also have run on the other
+ * tier. It does not decide placement.
  */
 export function endpointIsPortable(capabilities) {
     return capabilities.db !== true && capabilities.auth !== true && capabilities.realtime !== true;
@@ -307,7 +295,6 @@ export function executionStaticFileSchema(options) {
 }
 /**
  * Whether a version's execution surface may be read by anyone or only by the
- * space's own members. Both products expose an inspect route; the policy is
- * the same question on each.
+ * space's own members. Both products expose an inspect route.
  */
 export const executionInspectPolicySchema = z.enum(["private", "public"]);

package/dist/contracts/feature-lifecycle.d.ts

@@ -17,7 +17,7 @@ declare const featureEntries: readonly [{
     readonly cohort: "launch";
     readonly key: "plans.paid.available";
     readonly name: "Paid plans available";
-    readonly description: "Controls whether paid plan upgrade and management surfaces are available.";
+    readonly description: "Enables paid plan upgrade and management surfaces.";
     readonly stage: "internal";
     readonly surface: false;
     readonly defaultEnabled: false;
@@ -50,7 +50,7 @@ declare const featureEntries: readonly [{
     };
     readonly docs: {
         readonly channel: "public";
-        readonly slug: "/docs/publishing/anonymous";
+        readonly slug: "/docs/publish/anonymous";
         readonly feedbackUrl: null;
     };
     readonly owner: "team:publishing";
@@ -86,7 +86,7 @@ declare const featureEntries: readonly [{
     readonly cohort: "launch";
     readonly key: "domains.catalog";
     readonly name: "Domain catalog";
-    readonly description: "Controls authenticated domain product/catalog operations; public suggestions, availability and WHOIS remain unflagged.";
+    readonly description: "Enables authenticated domain catalog operations. Public suggestions, availability and WHOIS stay unflagged.";
     readonly stage: "internal";
     readonly surface: true;
     readonly defaultEnabled: false;
@@ -232,7 +232,7 @@ declare const featureEntries: readonly [{
     };
     readonly docs: {
         readonly channel: "public";
-        readonly slug: "/docs/spaces/proxy-routes";
+        readonly slug: "/docs/serve/redirects";
         readonly feedbackUrl: null;
     };
     readonly owner: "team:domains";
@@ -249,7 +249,7 @@ declare const featureEntries: readonly [{
     readonly cohort: "launch";
     readonly key: "collab.notices";
     readonly name: "Realtime notices";
-    readonly description: "Live: the Space notice room. Turns on the dashboard's realtime comment feed and the overlay's notice chips. Not an authorization — who may watch a Space's feed is decided by its Grants.";
+    readonly description: "Turns on the Space notice room: the dashboard's realtime comment feed and the overlay's notice chips. Not an authorization; Grants decide who may watch a feed.";
     readonly stage: "internal";
     readonly surface: false;
     readonly defaultEnabled: false;
@@ -268,6 +268,44 @@ declare const featureEntries: readonly [{
         readonly code: "notices_stop";
         readonly summary: "Stop mint/publish; service/operator revoke and cleanup continue.";
     };
+}, {
+    readonly key: "collab.comments";
+    readonly name: "Comments";
+    readonly description: "Enables the Comments feature for a team: comment threads on spaces/versions, collaboration settings, and the third-party embed surface.";
+    readonly defaultEnabled: false;
+    readonly runtime: {
+        readonly enabledInDevelopment: true;
+        readonly enabledForA8c: true;
+        readonly planDefaults: {};
+    };
+}, {
+    readonly cohort: "launch";
+    readonly key: "content.managed";
+    readonly name: "Managed content";
+    readonly description: "Enables the managed WordPress content API and dashboard editor after the compatible runtime fleet is promoted.";
+    readonly stage: "internal";
+    readonly surface: true;
+    readonly defaultEnabled: false;
+    readonly runtime: {
+        readonly enabledInDevelopment: true;
+        readonly enabledForA8c: true;
+        readonly planDefaults: {};
+    };
+    readonly docs: {
+        readonly channel: "handbook";
+        readonly slug: "/features/content";
+        readonly feedbackUrl: null;
+    };
+    readonly owner: "team:runtime";
+    readonly requires: readonly ["sites.dedicated_runtime"];
+    readonly lifecycleAdoptedAt: "2026-08-28";
+    readonly reviewAfter: "2026-09-11";
+    readonly removeAfter: "2026-10-31";
+    readonly gaAt: null;
+    readonly downRamp: {
+        readonly code: "managed_content_stop";
+        readonly summary: "Deny customer Content API calls and new editor-session launches, let already-minted editor sessions expire within one hour, stop compiling and activating content releases, and leave existing WordPress data and static serving intact for recovery or export.";
+    };
 }, {
     readonly key: "collab.drawing";
     readonly name: "Collab drawing";
@@ -293,7 +331,7 @@ declare const featureEntries: readonly [{
     };
     readonly docs: {
         readonly channel: "public";
-        readonly slug: "/docs/apps";
+        readonly slug: "/docs/account/plans";
         readonly feedbackUrl: null;
     };
     readonly owner: "team:runtime";
@@ -310,7 +348,7 @@ declare const featureEntries: readonly [{
     readonly cohort: "launch";
     readonly key: "build.content_pipeline";
     readonly name: "Content pipeline";
-    readonly description: "Controls publish/finalize use of the content transformation pipeline.";
+    readonly description: "Enables the content transformation pipeline at publish and finalize.";
     readonly stage: "internal";
     readonly surface: true;
     readonly defaultEnabled: false;
@@ -345,7 +383,7 @@ declare const featureEntries: readonly [{
     };
     readonly docs: {
         readonly channel: "public";
-        readonly slug: "/docs/tags";
+        readonly slug: "/docs/guides/tag-manager";
         readonly feedbackUrl: null;
     };
     readonly owner: "team:tag-manager";
@@ -372,7 +410,7 @@ declare const featureEntries: readonly [{
     };
     readonly docs: {
         readonly channel: "public";
-        readonly slug: "/docs/apps/zero";
+        readonly slug: "/docs/zero-runtime";
         readonly feedbackUrl: null;
     };
     readonly owner: "team:zero";
@@ -399,7 +437,7 @@ declare const featureEntries: readonly [{
     };
     readonly docs: {
         readonly channel: "public";
-        readonly slug: "/docs/apps/functions";
+        readonly slug: "/docs/functions";
         readonly feedbackUrl: null;
     };
     readonly owner: "team:zero";
@@ -416,7 +454,7 @@ declare const featureEntries: readonly [{
     readonly cohort: "launch";
     readonly key: "spaces.slug_rename";
     readonly name: "Space slug rename";
-    readonly description: "Renames a space and its managed hostname while retained former hostnames temporarily redirect to the current address.";
+    readonly description: "Renames a space and its managed hostname. Retained former hostnames temporarily redirect to the current address.";
     readonly stage: "ga";
     readonly surface: true;
     readonly defaultEnabled: true;
@@ -427,7 +465,7 @@ declare const featureEntries: readonly [{
     };
     readonly docs: {
         readonly channel: "public";
-        readonly slug: "/docs/spaces/rename";
+        readonly slug: "/docs/operate/spaces";
         readonly feedbackUrl: null;
     };
     readonly owner: "team:spaces";
@@ -438,7 +476,25 @@ declare const featureEntries: readonly [{
     readonly gaAt: "2026-07-27";
     readonly downRamp: {
         readonly code: "slug_rename_stop";
-        readonly summary: "Deny new slug renames while already-committed hostname redirects and runtime convergence continue.";
+        readonly summary: "Block new slug renames while earlier hostname and runtime updates continue.";
+    };
+}, {
+    readonly key: "pages.templates";
+    readonly name: "Custom page templates";
+    readonly description: "Allows _pages/*.html full-page takeovers to compile for spaces owned by a principal on a plan that grants it.";
+    readonly defaultEnabled: false;
+    readonly runtime: {
+        readonly enabledForA8c: false;
+        readonly planDefaults: {};
+    };
+}, {
+    readonly key: "branding.hide";
+    readonly name: "Hide Spacefast branding";
+    readonly description: "Allows theme.hideSpacefastBranding to remove the Spacefast badge for spaces owned by a principal on a plan that grants it.";
+    readonly defaultEnabled: false;
+    readonly runtime: {
+        readonly enabledForA8c: false;
+        readonly planDefaults: {};
     };
 }];
 type FeatureEntry = (typeof featureEntries)[number];
@@ -456,5 +512,5 @@ type RuntimeDefinitionRecord<K extends string> = {
     readonly [Key in K]: RuntimeFeatureDefinitionFields<Key>;
 };
 export declare const FEATURE_RUNTIME_KEYS: readonly RuntimeFeatureKey[];
-export declare const FEATURE_RUNTIME_DEFINITIONS: Readonly<RuntimeDefinitionRecord<"zero" | "tags" | "functions" | "plans.paid.available" | "anonymous.publishing" | "beta.enrollment_gate" | "domains.search" | "domains.registration" | "domains.dns_management" | "domains.wpcom_dns" | "domains.domain_connect" | "domains.proxy_bindings" | "collab.notices" | "collab.drawing" | "sites.dedicated_runtime" | "spaces.slug_rename">>;
+export declare const FEATURE_RUNTIME_DEFINITIONS: Readonly<RuntimeDefinitionRecord<"zero" | "plans.paid.available" | "anonymous.publishing" | "beta.enrollment_gate" | "domains.search" | "domains.registration" | "domains.dns_management" | "domains.wpcom_dns" | "domains.domain_connect" | "domains.proxy_bindings" | "collab.notices" | "collab.comments" | "content.managed" | "sites.dedicated_runtime" | "collab.drawing" | "tags" | "functions" | "spaces.slug_rename" | "pages.templates" | "branding.hide">>;
 export declare const FEATURE_LIFECYCLE_BY_KEY: ReadonlyMap<LifecycleFeatureKey, FeatureRegistryEntry<LifecycleFeatureKey>>;

package/dist/contracts/feature-lifecycle.js

@@ -1,11 +1,16 @@
 import { freezeFeatureRegistryEntry } from "./feature-lifecycle-core.js";
 export { FEATURE_OWNER_IDS, FEATURE_STAGES, freezeFeatureRegistryEntry, validateFeatureLifecycleRegistry, } from "./feature-lifecycle-core.js";
+// A `public` docs slug is a live path on the published documentation site, and
+// the sidebar in that site's `blume.config.ts` is its route manifest. Nothing
+// here can check that a slug resolves, because the docs live in another
+// repository; `hasCanonicalDocsSlug` only checks the path's shape. Confirm a
+// slug against that sidebar when you add or move one.
 const featureEntries = Object.freeze([
     {
         cohort: "launch",
         key: "plans.paid.available",
         name: "Paid plans available",
-        description: "Controls whether paid plan upgrade and management surfaces are available.",
+        description: "Enables paid plan upgrade and management surfaces.",
         stage: "internal",
         surface: false,
         defaultEnabled: false,
@@ -39,7 +44,7 @@ const featureEntries = Object.freeze([
         },
         docs: {
             channel: "public",
-            slug: "/docs/publishing/anonymous",
+            slug: "/docs/publish/anonymous",
             feedbackUrl: null,
         },
         owner: "team:publishing",
@@ -78,7 +83,7 @@ const featureEntries = Object.freeze([
         cohort: "launch",
         key: "domains.catalog",
         name: "Domain catalog",
-        description: "Controls authenticated domain product/catalog operations; public suggestions, availability and WHOIS remain unflagged.",
+        description: "Enables authenticated domain catalog operations. Public suggestions, availability and WHOIS stay unflagged.",
         stage: "internal",
         surface: true,
         defaultEnabled: false,
@@ -229,7 +234,7 @@ const featureEntries = Object.freeze([
         },
         docs: {
             channel: "public",
-            slug: "/docs/spaces/proxy-routes",
+            slug: "/docs/serve/redirects",
             feedbackUrl: null,
         },
         owner: "team:domains",
@@ -247,7 +252,7 @@ const featureEntries = Object.freeze([
         cohort: "launch",
         key: "collab.notices",
         name: "Realtime notices",
-        description: "Live: the Space notice room. Turns on the dashboard's realtime comment feed and the overlay's notice chips. Not an authorization — who may watch a Space's feed is decided by its Grants.",
+        description: "Turns on the Space notice room: the dashboard's realtime comment feed and the overlay's notice chips. Not an authorization; Grants decide who may watch a feed.",
         stage: "internal",
         surface: false,
         defaultEnabled: false,
@@ -267,6 +272,46 @@ const featureEntries = Object.freeze([
             summary: "Stop mint/publish; service/operator revoke and cleanup continue.",
         },
     },
+    {
+        key: "collab.comments",
+        name: "Comments",
+        description: "Enables the Comments feature for a team: comment threads on spaces/versions, collaboration settings, and the third-party embed surface.",
+        defaultEnabled: false,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+    },
+    {
+        cohort: "launch",
+        key: "content.managed",
+        name: "Managed content",
+        description: "Enables the managed WordPress content API and dashboard editor after the compatible runtime fleet is promoted.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        docs: {
+            channel: "handbook",
+            slug: "/features/content",
+            feedbackUrl: null,
+        },
+        owner: "team:runtime",
+        requires: ["sites.dedicated_runtime"],
+        lifecycleAdoptedAt: "2026-08-28",
+        reviewAfter: "2026-09-11",
+        removeAfter: "2026-10-31",
+        gaAt: null,
+        downRamp: {
+            code: "managed_content_stop",
+            summary: "Deny customer Content API calls and new editor-session launches, let already-minted editor sessions expire within one hour, stop compiling and activating content releases, and leave existing WordPress data and static serving intact for recovery or export.",
+        },
+    },
     {
         key: "collab.drawing",
         name: "Collab drawing",
@@ -295,7 +340,7 @@ const featureEntries = Object.freeze([
         },
         docs: {
             channel: "public",
-            slug: "/docs/apps",
+            slug: "/docs/account/plans",
             feedbackUrl: null,
         },
         owner: "team:runtime",
@@ -313,7 +358,7 @@ const featureEntries = Object.freeze([
         cohort: "launch",
         key: "build.content_pipeline",
         name: "Content pipeline",
-        description: "Controls publish/finalize use of the content transformation pipeline.",
+        description: "Enables the content transformation pipeline at publish and finalize.",
         stage: "internal",
         surface: true,
         defaultEnabled: false,
@@ -349,7 +394,7 @@ const featureEntries = Object.freeze([
         },
         docs: {
             channel: "public",
-            slug: "/docs/tags",
+            slug: "/docs/guides/tag-manager",
             feedbackUrl: null,
         },
         owner: "team:tag-manager",
@@ -379,7 +424,7 @@ const featureEntries = Object.freeze([
         },
         docs: {
             channel: "public",
-            slug: "/docs/apps/zero",
+            slug: "/docs/zero-runtime",
             feedbackUrl: null,
         },
         owner: "team:zero",
@@ -410,7 +455,7 @@ const featureEntries = Object.freeze([
         },
         docs: {
             channel: "public",
-            slug: "/docs/apps/functions",
+            slug: "/docs/functions",
             feedbackUrl: null,
         },
         owner: "team:zero",
@@ -425,15 +470,15 @@ const featureEntries = Object.freeze([
         downRamp: {
             code: "functions_stop",
             summary: "Stop emitting dispatch configuration at finalize; published bundles stay on disk as inert content and the " +
-                "version serves statically. Versions already carrying a config keep dispatching until they are replaced — " +
-                "unsetting the runtime's dispatch token is the immediate kill.",
+                "version serves statically. Versions already carrying a config keep dispatching until they are replaced. " +
+                "Unsetting the runtime's dispatch token is the immediate kill.",
         },
     },
     {
         cohort: "launch",
         key: "spaces.slug_rename",
         name: "Space slug rename",
-        description: "Renames a space and its managed hostname while retained former hostnames temporarily redirect to the current address.",
+        description: "Renames a space and its managed hostname. Retained former hostnames temporarily redirect to the current address.",
         stage: "ga",
         surface: true,
         defaultEnabled: true,
@@ -444,7 +489,7 @@ const featureEntries = Object.freeze([
         },
         docs: {
             channel: "public",
-            slug: "/docs/spaces/rename",
+            slug: "/docs/operate/spaces",
             feedbackUrl: null,
         },
         owner: "team:spaces",
@@ -455,7 +500,33 @@ const featureEntries = Object.freeze([
         gaAt: "2026-07-27",
         downRamp: {
             code: "slug_rename_stop",
-            summary: "Deny new slug renames while already-committed hostname redirects and runtime convergence continue.",
+            summary: "Block new slug renames while earlier hostname and runtime updates continue.",
+        },
+    },
+    {
+        // Partner plan-catalog entitlement dial: a partner plan that grants this key
+        // lets its principals' spaces compile `_pages/*.html` full-page takeovers.
+        // First-party plans express the same capability through PlanDefinition, not
+        // this flag; entitlement resolution maps this key onto the entitlement shape.
+        key: "pages.templates",
+        name: "Custom page templates",
+        description: "Allows _pages/*.html full-page takeovers to compile for spaces owned by a principal on a plan that grants it.",
+        defaultEnabled: false,
+        runtime: {
+            enabledForA8c: false,
+            planDefaults: {},
+        },
+    },
+    {
+        // Partner plan-catalog entitlement dial: a partner plan that grants this key
+        // lets its principals hide the Spacefast badge via theme.hideSpacefastBranding.
+        key: "branding.hide",
+        name: "Hide Spacefast branding",
+        description: "Allows theme.hideSpacefastBranding to remove the Spacefast badge for spaces owned by a principal on a plan that grants it.",
+        defaultEnabled: false,
+        runtime: {
+            enabledForA8c: false,
+            planDefaults: {},
         },
     },
 ]);