@spacefast/common 0.0.26 → 0.2.1

package/dist/contracts/sf-config-v1.d.ts

@@ -6,19 +6,17 @@ export declare const SF_CONFIG_V1_SCHEMA_URL: `${string}/schemas/sf.v1.json`;
 /**
  * How a redirect answers. Omitting it means 302. There is no 200 and no 404:
  * a rule that serves other content under the requested URL is a `rewrites`
- * entry — with `notFound: true` when it should answer 404.
+ * entry, with `notFound: true` when it should answer 404.
  */
 export type SfConfigV1RedirectStatus = 301 | 302 | 303 | 307 | 308;
 /**
  * Query parameters a redirect or rewrite requires, as parameter name to
- * capture name — `{ id: "id" }` is the `id=:id` token of a `_redirects` line,
- * spelled the way the compiled rule (and the runtime matcher) carry it.
+ * capture name. `{ id: "id" }` is the `id=:id` token of a `_redirects` line.
  */
 export type SfConfigV1QueryMatch = Record<string, string>;
 /**
  * One header operation: `{ key, value }` sets, `{ key, remove: true }` is the
- * `!Name` line of a `_headers` block. The shape is what tells the two apart,
- * so a remove entry carries no value.
+ * `!Name` line of a `_headers` block. A remove entry carries no value.
  */
 export type SfConfigV1HeaderEntry = {
     key: string;
@@ -53,30 +51,29 @@ export type SfConfigV1 = {
         source: string;
         destination: string;
         status?: SfConfigV1RedirectStatus;
-        /** Answer even when the request path resolves to a committed file — the `!` of a `_redirects` rule. */
+        /** Answer even when the request path resolves to a committed file, the `!` of a `_redirects` rule. */
         force?: boolean;
         query?: SfConfigV1QueryMatch;
     }[];
     /**
      * Rewrite and proxy rules: the URL stays, the content comes from the
-     * destination. A path destination rewrites, an absolute URL proxies — the
-     * same 200 rules `_redirects` writes as `/from /to 200`, which is why they
-     * carry no status of their own. `notFound: true` answers 404 instead — the
-     * `/gone /404.html 404` rule, which is a rewrite in every way except the
-     * status; its destination must be a path.
+     * destination. A path destination rewrites, an absolute URL proxies. Both are
+     * the `/from /to 200` rule of `_redirects`, so they carry no status of their
+     * own. `notFound: true` answers 404 instead, and then the destination must be
+     * a path.
      */
     rewrites?: {
         source: string;
         destination: string;
         /** Let shared caches store the proxy response. Absolute-URL destinations only. */
         cache?: "shared";
-        /** Rewrite even when the request path resolves to a committed file — the `!` of a `200!` / `404!` file rule. */
+        /** Rewrite even when the request path resolves to a committed file, the `!` of a `200!` / `404!` file rule. */
         force?: boolean;
         query?: SfConfigV1QueryMatch;
         notFound?: boolean;
     }[];
     /**
-     * Response headers to set — or remove — on matching requests. Headers are a
+     * Response headers to set or remove on matching requests. Headers are a
      * list, not a map, so repeated names (Set-Cookie) survive and operations
      * keep their order.
      */
@@ -96,9 +93,9 @@ export type SfConfigV1 = {
         public: string[];
     };
     /**
-     * Scheduled requests against this space's own paths. Declarations pass
-     * through verbatim — the compiled `__spacefast/crons.json` derives each
-     * entry's key from its path, and the schedule is never normalized here.
+     * Scheduled requests against this space's own paths. The compiled
+     * `__spacefast/crons.json` derives each entry's key from its path; the
+     * schedule is never normalized.
      */
     crons?: {
         path: string;
@@ -130,8 +127,7 @@ export type EffectiveConfigV1 = {
 };
 /**
  * Config-shape problems use the `config_*` codes; a bad routing rule reports
- * the same code the `_redirects` / `_headers` compiler would give it, because
- * it is the same grammar and the same compiler.
+ * the same code the `_redirects` / `_headers` compiler would give it.
  */
 export type SfConfigV1Issue = {
     code: "config_alias" | "config_conflict" | "config_cron_duplicate_path" | "config_cron_invalid_path" | "config_cron_invalid_schedule" | "config_cron_too_many" | "config_identity_moved" | "config_invalid" | "config_key_removed" | "config_unknown_key" | "header_basic_auth_unsupported" | "header_cache_control_platform_managed" | "header_cdn_cache_unsupported" | "header_name_invalid" | "header_name_unsupported" | "header_path_invalid" | "header_pattern_invalid" | "header_port_unsupported" | "header_value_invalid" | "redirect_cache_directive_invalid" | "redirect_cache_not_proxy" | "redirect_destination_invalid" | "redirect_destination_missing" | "redirect_host_invalid" | "redirect_loop_invalid" | "redirect_pattern_invalid" | "redirect_query_match_invalid" | "redirect_rewrite_destination_invalid" | "redirect_source_invalid" | "redirect_status_unsupported" | "redirect_status_use_rewrites" | "serve_index_required" | "template_syntax_retired";

package/dist/contracts/slugs.js

@@ -2,10 +2,19 @@ import { z } from "zod";
 export const slugResourceKindValues = ["team", "space"];
 export const slugResourceKind = z.enum(slugResourceKindValues);
 export const slugAvailabilityQuerySchema = z.object({
-    kind: slugResourceKind,
-    slug: z.string().default(""),
-    currentSlug: z.string().optional(),
-    teamId: z.string().optional(),
+    kind: slugResourceKind.describe("Which kind of slug to check: a space slug or a team slug."),
+    slug: z
+        .string()
+        .default("")
+        .describe("Slug to check. It is normalized first, and the verdict describes the normalized form."),
+    currentSlug: z
+        .string()
+        .optional()
+        .describe("The resource's current slug, when renaming. A slug that normalizes to this one stays available instead of colliding with itself."),
+    teamId: z
+        .string()
+        .optional()
+        .describe("Team the space would belong to. Space slugs and their managed hostnames are checked inside that team; ignored for `kind=team`."),
 });
 export const slugAvailabilityResponseSchema = z.object({
     kind: slugResourceKind.describe("Resource kind the slug was checked for."),

package/dist/contracts/space-config.d.ts

@@ -3,10 +3,9 @@ export declare const SPACE_CONFIG_CANONICAL_FILE = "sf.jsonc";
 export declare const SPACE_CONFIG_ALIAS_FILES: readonly ["spacefast.jsonc", "spacefast.json", "sf.json", ".sf/sf.json", ".sf/config.jsonc", ".sf/config.json"];
 export declare const SPACE_CONFIG_ACCEPTED_FILES: readonly ["sf.jsonc", "spacefast.jsonc", "spacefast.json", "sf.json", ".sf/sf.json", ".sf/config.jsonc", ".sf/config.json"];
 /**
- * Accepted config filenames in read precedence order, highest first. Kept in
- * step with the finalizer's `CONFIG_ACCEPTED_FILES` (crates/stattic-runtime-core
- * protocol.rs) — the runtime compile is the selection authority, and a local
- * read choosing a different file than the publish serves is a split brain.
+ * Accepted config filenames in read precedence order, highest first. Must stay
+ * in step with the finalizer's `CONFIG_ACCEPTED_FILES`
+ * (crates/stattic-runtime-core protocol.rs), which is the selection authority.
  */
 export declare const SPACE_CONFIG_PRECEDENCE: readonly ["sf.jsonc", "spacefast.jsonc", "spacefast.json", "sf.json", ".sf/sf.json", ".sf/config.jsonc", ".sf/config.json"];
 export declare const SPACE_CONFIG_PRIVATE_FILES: readonly ["sf.jsonc", "spacefast.jsonc", "spacefast.json", "sf.json", ".sf/sf.json", ".sf/config.jsonc", ".sf/config.json"];
@@ -39,6 +38,38 @@ export declare const SPACE_CONFIG_CAPS: {
     readonly crons: 8;
     /** Max `crons[].path` length. */
     readonly cronPathChars: 512;
+    /** Max `system.presentation.name` display-name length. */
+    readonly systemNameChars: 255;
+    /** Max length of any https URL or origin in the `system` manifest. */
+    readonly systemUrlChars: 2048;
+    /** Max `system.hostnames.apex` length (a DNS name never exceeds 253). */
+    readonly systemHostnameChars: 253;
+    /** Max `system.presentation.contacts` entries. */
+    readonly systemContacts: 32;
+    /** Max length of a `system.presentation.contacts` key. */
+    readonly systemContactKeyChars: 64;
+    /** Max length of a `system.presentation.contacts` value. */
+    readonly systemContactValueChars: 2048;
+    /** Max `system.api.allowedOrigins` entries. */
+    readonly systemApiAllowedOrigins: 32;
+    /** Max `system.tokenIssuers` entries. */
+    readonly systemTokenIssuers: 16;
+    /** Max `system.tokenIssuers[].issuer` length. */
+    readonly systemIssuerChars: 512;
+    /** Max `system.tokenIssuers[].keys` entries. */
+    readonly systemIssuerKeys: 16;
+    /** Max `system.tokenIssuers[].keys[].kid` length. */
+    readonly systemKeyIdChars: 64;
+    /** Exact raw Ed25519 public-key length after base64url encoding. */
+    readonly systemPublicKeyChars: 43;
+    /** Max `system.tokenIssuers[].proof` length. */
+    readonly systemProofChars: 4096;
+    /** Max `system.subscriptions` entries. */
+    readonly systemSubscriptions: 32;
+    /** Max `system.subscriptions[].events` entries. */
+    readonly systemSubscriptionEvents: 64;
+    /** Max length of a `system.subscriptions[].events` name. */
+    readonly systemEventChars: 128;
 };
 /** Published JSON Schema URL for `sf.jsonc` ($schema autocomplete). */
 export declare const SPACE_CONFIG_SCHEMA_URL: string;
@@ -172,10 +203,10 @@ export declare const spaceConfigFileAccessSchema: z.ZodUnion<readonly [z.ZodPipe
 /**
  * Zero: a transactional app with its own database.
  *
- * Both entries are required because Zero is never inferred. A runtime that owns
- * a database must not spring into existence from a directory shape, so the only
- * way to get one is to say so — and once said, a server or client that cannot
- * be resolved fails the publish rather than degrading to static files.
+ * Both entries are required because Zero is never inferred: a runtime that owns
+ * a database must not spring into existence from a directory shape. Once
+ * declared, a server or client that cannot be resolved fails the publish rather
+ * than degrading to static files.
  */
 export declare const spaceRuntimeZeroSchema: z.ZodObject<{
     kind: z.ZodLiteral<"zero">;
@@ -186,10 +217,8 @@ export declare const spaceRuntimeZeroSchema: z.ZodObject<{
  * Functions: the worker `sf publish` compiles.
  *
  * Every field beyond `kind` is optional because the normal case is detection: a
- * project with `handler.ts` or an OpenNext build needs no configuration at all.
- * These exist for the layouts detection cannot guess — a worker somewhere
- * unusual, or a compatibility date the author wants pinned rather than
- * defaulted.
+ * project with `handler.ts` or an OpenNext build needs no configuration. These
+ * exist for the layouts detection cannot guess.
  */
 export declare const spaceRuntimeFunctionsSchema: z.ZodObject<{
     kind: z.ZodLiteral<"functions">;
@@ -199,12 +228,12 @@ export declare const spaceRuntimeFunctionsSchema: z.ZodObject<{
     compatibilityDate: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 /**
- * The one runtime declaration, discriminated on `kind`.
+ * The one runtime declaration, discriminated on `kind`. A version cannot
+ * express two runtimes at once.
  *
- * One block, one kind — a version cannot express two runtimes at once, so the
- * ambiguity never has to be resolved downstream. File-only on purpose: a
- * runtime is a fact about the content of a version, so it rolls forward and
- * back with the version instead of being set through the API config overlay.
+ * File-only on purpose: a runtime is a fact about the content of a version, so
+ * it rolls forward and back with the version instead of being set through the
+ * API config overlay.
  */
 export declare const spaceRuntimeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"zero">;
@@ -222,11 +251,7 @@ export type SpaceRuntimeFunctionsConfig = z.infer<typeof spaceRuntimeFunctionsSc
 export type SpaceRuntimeConfig = z.infer<typeof spaceRuntimeSchema>;
 /**
  * Scheduled requests: the provider crontab asks this space for these paths on
- * these schedules.
- *
- * File-only for the same reason `runtime` is: what runs on a schedule is a fact
- * about the content of a version, so it rolls forward and back with the version
- * instead of being set through the API config overlay.
+ * these schedules. File-only for the same reason `runtime` is.
  *
  * The Rust config compiler is the selection authority for both fields; this
  * schema exists so an editor and an agent get the same answer before publish.
@@ -234,14 +259,14 @@ export type SpaceRuntimeConfig = z.infer<typeof spaceRuntimeSchema>;
 export declare const SPACE_CRON_NAMED_SCHEDULES: readonly ["hourly", "daily", "twicedaily", "weekly"];
 /**
  * The wp.cloud schedule grammar: a named interval, an `Nh`/`Nd`/`Nw` count, or
- * a five-field crontab expression. No `@daily` macros and no month/day names —
- * the provider does not accept them either.
+ * a five-field crontab expression. No `@daily` macros and no month/day names.
+ * The provider does not accept them either.
  */
 export declare function isSpaceCronSchedule(schedule: string): boolean;
 /**
- * The artifact key for a cron path: lowercase, leading `/` stripped, every run
- * of non-alphanumerics collapsed to one `-`, trimmed. Two paths that produce
- * one key are rejected, so a key names exactly one schedule.
+ * The artifact key for a cron path — the shared slug normalizer, so an accented
+ * path folds the same way it does everywhere else. Two paths that produce one
+ * key are rejected, so a key names exactly one schedule.
  */
 export declare function spaceCronKey(path: string): string;
 /** Generated runtime file the serving engine reads, written only when a version declares a cron. */
@@ -252,7 +277,7 @@ export type SpaceCronEntry = {
     /** Slug of `path`; unique within a version. */
     key: string;
     path: string;
-    /** Verbatim as declared — never normalized or expanded. */
+    /** Verbatim as declared, never normalized or expanded. */
     schedule: string;
 };
 export type SpaceCronsArtifact = {
@@ -268,6 +293,123 @@ export declare const spaceCronsSchema: z.ZodArray<z.ZodObject<{
     schedule: z.ZodString;
 }, z.core.$strip>>;
 export type SpaceCronConfig = z.infer<typeof spaceCronSchema>;
+export declare const systemPresentationSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    logo: z.ZodOptional<z.ZodString>;
+    supportUrl: z.ZodOptional<z.ZodString>;
+    claimOrigin: z.ZodOptional<z.ZodString>;
+    accessHandoffOrigin: z.ZodOptional<z.ZodString>;
+    problemDocsBaseUrl: z.ZodOptional<z.ZodString>;
+    contacts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strict>;
+export declare const systemHostnamesSchema: z.ZodObject<{
+    apex: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const systemApiSchema: z.ZodObject<{
+    origin: z.ZodOptional<z.ZodString>;
+    allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+export declare const systemTokenIssuerSchema: z.ZodObject<{
+    issuer: z.ZodString;
+    keys: z.ZodArray<z.ZodObject<{
+        kid: z.ZodString;
+        publicKey: z.ZodString;
+    }, z.core.$strict>>;
+    proof: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const systemSubscriptionSchema: z.ZodObject<{
+    url: z.ZodString;
+    events: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export declare const spaceSystemManifestSchema: z.ZodObject<{
+    presentation: z.ZodOptional<z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        logo: z.ZodOptional<z.ZodString>;
+        supportUrl: z.ZodOptional<z.ZodString>;
+        claimOrigin: z.ZodOptional<z.ZodString>;
+        accessHandoffOrigin: z.ZodOptional<z.ZodString>;
+        problemDocsBaseUrl: z.ZodOptional<z.ZodString>;
+        contacts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, z.core.$strict>>;
+    hostnames: z.ZodOptional<z.ZodObject<{
+        apex: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    api: z.ZodOptional<z.ZodObject<{
+        origin: z.ZodOptional<z.ZodString>;
+        allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    tokenIssuers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        issuer: z.ZodString;
+        keys: z.ZodArray<z.ZodObject<{
+            kid: z.ZodString;
+            publicKey: z.ZodString;
+        }, z.core.$strict>>;
+        proof: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
+    subscriptions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        url: z.ZodString;
+        events: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>>;
+    plans: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        features: z.ZodArray<z.ZodEnum<{
+            zero: "zero";
+            "plans.paid.available": "plans.paid.available";
+            "anonymous.publishing": "anonymous.publishing";
+            "beta.enrollment_gate": "beta.enrollment_gate";
+            "domains.search": "domains.search";
+            "domains.registration": "domains.registration";
+            "domains.dns_management": "domains.dns_management";
+            "domains.wpcom_dns": "domains.wpcom_dns";
+            "domains.domain_connect": "domains.domain_connect";
+            "domains.proxy_bindings": "domains.proxy_bindings";
+            "collab.notices": "collab.notices";
+            "collab.comments": "collab.comments";
+            "content.managed": "content.managed";
+            "sites.dedicated_runtime": "sites.dedicated_runtime";
+            "collab.drawing": "collab.drawing";
+            tags: "tags";
+            functions: "functions";
+            "spaces.slug_rename": "spaces.slug_rename";
+            "pages.templates": "pages.templates";
+            "branding.hide": "branding.hide";
+        }>>;
+        quotas: z.ZodObject<{
+            spaces: z.ZodOptional<z.ZodNumber>;
+            storageBytes: z.ZodOptional<z.ZodNumber>;
+            buildMinutesPerMonth: z.ZodOptional<z.ZodNumber>;
+            customDomains: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>;
+        quotaPolicy: z.ZodOptional<z.ZodEnum<{
+            warn: "warn";
+            block: "block";
+        }>>;
+    }, z.core.$strict>>>;
+    defaultPlan: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type SpaceSystemManifest = z.infer<typeof spaceSystemManifestSchema>;
+/**
+ * The presentation slice of the system manifest, as a standalone schema.
+ * The presentation materializer re-parses the frozen declaration through this
+ * before storing it, so origins-https and within-schema bounds are re-asserted
+ * defensively at reconcile time and not just trusted from finalize.
+ */
+export type SpaceSystemPresentation = z.infer<typeof systemPresentationSchema>;
+/**
+ * A single declared token issuer / event subscription, as standalone schemas.
+ * The issuer and subscription materializers re-parse the frozen declaration
+ * through these before materializing — key shape, issuer https, subscription
+ * url https, and within-schema bounds re-asserted defensively at reconcile
+ * time, not trusted from finalize.
+ */
+export type SpaceSystemTokenIssuer = z.infer<typeof systemTokenIssuerSchema>;
+export type SpaceSystemSubscription = z.infer<typeof systemSubscriptionSchema>;
+/**
+ * The `api` slice of the system manifest, as a standalone schema. The api-origin
+ * materializer re-parses the frozen declaration through this before storing it
+ * to `tenants.api_origins_json` — origins https and within-schema bounds
+ * re-asserted defensively at reconcile time, not trusted from finalize.
+ */
+export type SpaceSystemApi = z.infer<typeof systemApiSchema>;
 export declare const spaceConfigFileSchema: z.ZodObject<{
     index: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodLiteral<false>]>>;
     fallback: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
@@ -366,6 +508,71 @@ export declare const spaceConfigFileSchema: z.ZodObject<{
         path: z.ZodString;
         schedule: z.ZodString;
     }, z.core.$strip>>>;
+    system: z.ZodOptional<z.ZodObject<{
+        presentation: z.ZodOptional<z.ZodObject<{
+            name: z.ZodOptional<z.ZodString>;
+            logo: z.ZodOptional<z.ZodString>;
+            supportUrl: z.ZodOptional<z.ZodString>;
+            claimOrigin: z.ZodOptional<z.ZodString>;
+            accessHandoffOrigin: z.ZodOptional<z.ZodString>;
+            problemDocsBaseUrl: z.ZodOptional<z.ZodString>;
+            contacts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, z.core.$strict>>;
+        hostnames: z.ZodOptional<z.ZodObject<{
+            apex: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        api: z.ZodOptional<z.ZodObject<{
+            origin: z.ZodOptional<z.ZodString>;
+            allowedOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+        tokenIssuers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            issuer: z.ZodString;
+            keys: z.ZodArray<z.ZodObject<{
+                kid: z.ZodString;
+                publicKey: z.ZodString;
+            }, z.core.$strict>>;
+            proof: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
+        subscriptions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            url: z.ZodString;
+            events: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        plans: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            features: z.ZodArray<z.ZodEnum<{
+                zero: "zero";
+                "plans.paid.available": "plans.paid.available";
+                "anonymous.publishing": "anonymous.publishing";
+                "beta.enrollment_gate": "beta.enrollment_gate";
+                "domains.search": "domains.search";
+                "domains.registration": "domains.registration";
+                "domains.dns_management": "domains.dns_management";
+                "domains.wpcom_dns": "domains.wpcom_dns";
+                "domains.domain_connect": "domains.domain_connect";
+                "domains.proxy_bindings": "domains.proxy_bindings";
+                "collab.notices": "collab.notices";
+                "collab.comments": "collab.comments";
+                "content.managed": "content.managed";
+                "sites.dedicated_runtime": "sites.dedicated_runtime";
+                "collab.drawing": "collab.drawing";
+                tags: "tags";
+                functions: "functions";
+                "spaces.slug_rename": "spaces.slug_rename";
+                "pages.templates": "pages.templates";
+                "branding.hide": "branding.hide";
+            }>>;
+            quotas: z.ZodObject<{
+                spaces: z.ZodOptional<z.ZodNumber>;
+                storageBytes: z.ZodOptional<z.ZodNumber>;
+                buildMinutesPerMonth: z.ZodOptional<z.ZodNumber>;
+                customDomains: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>;
+            quotaPolicy: z.ZodOptional<z.ZodEnum<{
+                warn: "warn";
+                block: "block";
+            }>>;
+        }, z.core.$strict>>>;
+        defaultPlan: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
 }, z.core.$strip>;
 export type SpaceConfigFile = z.infer<typeof spaceConfigFileSchema>;
 /**