@spacefast/common 0.0.3 → 0.0.6

package/dist/contracts/spaces.js

@@ -3,7 +3,7 @@ import { AsyncOperationSchema, baseDiagnosticSchema, CursorPaginationSchema, cur
 import { versionStatus, spaceStatus } from "./enums.js";
 import { conventionFilesSchema, uploadInstructionsSchema, manifestFileSchema } from "./internal.js";
 import { ChannelPointerSchema, VersionSchema, PublishSourceSchema, SpaceSchema, } from "./resources.js";
-import { spaceConfigSchema } from "./space-config.js";
+import { spaceConfigSchema, spacePlacementConfigSchema } from "./space-config.js";
 import { principalIdSchema } from "./transfers.js";
 import { zeroRuntimeKindSchema } from "./zero.js";
 export const AnonymousSpaceAccessSchema = z.object({
@@ -14,7 +14,7 @@ export const AnonymousSpaceAccessSchema = z.object({
     claimUrl: z
         .string()
         .nullable()
-        .describe("Browser-only link that lets a human log in with WordPress.com and claim this space into an team. Not an API credential."),
+        .describe("Browser-only claim link in `/claim#nonce` form. The fragment is a human handoff capability; API clients use the claim token as bearer auth for publish/update/status/exchange."),
     expiresAt: z
         .string()
         .datetime()
@@ -74,6 +74,7 @@ export const spacePatchSchema = z.object({
         .optional()
         .describe("Replaces the stored SpaceConfig overlay; null clears it."),
     dataLocation: z.string().min(1).optional(),
+    placement: spacePlacementConfigSchema.optional(),
     noindex: z
         .boolean()
         .optional()
@@ -91,7 +92,7 @@ export const spaceClaimSchema = z
     claimToken: z
         .string()
         .min(1)
-        .describe("One-time claim token returned at anonymous creation. Rides the body, never URLs; claiming revokes it."),
+        .describe("One-time claim token returned at anonymous creation. API clients send it as bearer auth; browser claim links carry a separate nonce fragment."),
     teamId: z
         .string()
         .min(1)
@@ -102,6 +103,10 @@ export const spaceClaimSchema = z
         .min(1)
         .optional()
         .describe("Alias of teamId; must match when both are provided."),
+    agentContinuation: z
+        .boolean()
+        .optional()
+        .describe("Keep the publishing agent authorized after the claim (default false unless explicitly granted): the claim token demotes to a one-time voucher exchangeable for a durable publish access token."),
 })
     .superRefine((value, ctx) => {
     if (value.teamId && value.targetTeamId && value.teamId !== value.targetTeamId) {
@@ -112,6 +117,84 @@ export const spaceClaimSchema = z
         });
     }
 });
+export const anonymousClaimAssignSchema = z.object({
+    teamId: z.string().min(1).optional(),
+    nonce: z.string().min(1).optional().describe("Browser claim nonce from the claim URL fragment."),
+    agentContinuation: z
+        .boolean()
+        .optional()
+        .describe("Keep the publishing agent authorized after the claim (default false unless explicitly granted): the claim token demotes to a one-time voucher exchangeable for a durable publish access token."),
+});
+export const anonymousClaimResolveSchema = z.object({
+    nonce: z.string().min(1).optional().describe("Browser claim nonce from the claim URL fragment."),
+    agentContinuation: z
+        .boolean()
+        .optional()
+        .describe("Applied when the resolve auto-claims (signed-in user with exactly one writable team). Defaults to false unless explicitly granted."),
+});
+export const anonymousClaimTeamSchema = z.object({
+    id: z.string(),
+    slug: z.string(),
+    name: z.string(),
+});
+export const anonymousClaimSpacePreviewSchema = z.object({
+    id: z.string(),
+    title: z.string(),
+    liveUrl: z.string().nullable(),
+    createdAt: z.string().datetime().nullable(),
+});
+export const anonymousClaimResponseSchema = z.object({
+    state: z.enum(["unclaimed", "claimed"]),
+    action: z.enum(["claimed", "login_required", "team_required", "confirm_assign"]),
+    space: anonymousClaimSpacePreviewSchema,
+    claim: z.object({
+        expiresAt: z.string().datetime().nullable(),
+        claimedAt: z.string().datetime().nullable(),
+    }),
+    teams: z.array(anonymousClaimTeamSchema).optional(),
+});
+export const anonymousClaimStatusResponseSchema = z.object({
+    publish: z.object({
+        status: z.enum(["pending", "ready", "failed", "expired", "claimed"]),
+        operationId: z.string().nullable().optional(),
+    }),
+    space: z.object({
+        id: z.string(),
+        liveUrl: z.string().nullable(),
+    }),
+    version: z.object({
+        id: z.string(),
+        ref: z.string().nullable(),
+        number: z.number().int().positive().nullable(),
+        status: VersionSchema.shape.status,
+        immutableUrl: z.string().nullable(),
+        manifestHash: z.string().nullable(),
+    }),
+    claim: z.object({
+        state: z.enum(["unclaimed", "claimed"]),
+        url: z.string().nullable(),
+        expiresAt: z.string().datetime().nullable(),
+        continuation: z
+            .enum(["available", "used", "unavailable"])
+            .optional()
+            .describe("Present once the space is claimed: whether this claim token can still be exchanged once for a durable access token (POST /v1/anonymous-claim/exchange)."),
+    }),
+});
+export const anonymousClaimExchangeResponseSchema = z.object({
+    space: z.object({
+        id: z.string(),
+        slug: z.string(),
+        liveUrl: z.string().nullable(),
+    }),
+    credential: z.object({
+        accessToken: z
+            .string()
+            .describe("Durable publish access token minted by the one-time exchange. Shown exactly once — store it (e.g. .spacefast/state.json) and never print it."),
+        accessTokenId: z.string(),
+        label: z.string().nullable(),
+        teamId: z.string(),
+    }),
+});
 export const spaceClaimReminderSchema = z.object({
     email: z
         .string()
@@ -214,9 +297,6 @@ export const spaceVersionFileIndexSchema = z.object({
     byHash: z.record(z.string(), spaceVersionFileIndexEntrySchema),
     byPath: z.record(z.string(), spaceVersionFileIndexEntrySchema),
 });
-export const spaceVersionFilesQuerySchema = z.object({
-    q: z.string().trim().min(1).max(255).optional(),
-});
 export const spaceVersionFilesSearchSchema = z.object({
     query: z.string().nullable(),
     total: z.number().int().nonnegative(),
@@ -448,7 +528,9 @@ export const publishReceiptSpaceSchema = z.object({
 export const publishReceiptVersionSchema = z.object({
     id: z.string(),
     status: VersionSchema.shape.status,
-    immutableUrl: z.string().nullable(),
+    immutableUrl: z.string(),
+    ref: z.string().nullable().optional(),
+    number: z.number().int().positive().nullable().optional(),
     manifestHash: z.string().nullable(),
 });
 export const publishReceiptSchema = z.object({
@@ -486,6 +568,11 @@ export const publishReceiptSchema = z.object({
             .describe('Promote endpoint; followable once the version reaches status "ready".'),
         operation: z.string().optional().describe("Operation polling endpoint when publish queued."),
         inspect: z.string().optional().describe("Space resource URL for follow-up reads."),
+        version: z.string().optional().describe("Version resource URL for structured clients."),
+        status: z
+            .string()
+            .optional()
+            .describe("Claim-token-authenticated anonymous publish status endpoint."),
     })
         .optional()
         .describe("Follow-up links so agents can act on the receipt without knowing the full API."),
@@ -502,7 +589,6 @@ export const spaceVersionResumeResponseSchema = z.object({
         .default([])
         .describe("Manifest paths ignored by the server because the current plan does not allow them."),
 });
-export const spaceVersionRefreshResponseSchema = spaceVersionResumeResponseSchema;
 // Promote body (spec "Explicit version routes"): `{ channel? }` defaulting to
 // "live". Channels beyond live arrive additively; non-live names reject with
 // `channel_unsupported` until then. Rollback is promoting an older ready

package/dist/contracts/superadmin-emails.d.ts

@@ -1,17 +1,17 @@
 import { z } from "zod";
 export declare const superadminEmailStatusValues: readonly ["all", "scheduled", "sent", "delivered", "bounced", "dropped", "complained", "opened", "clicked", "failed"];
-export declare const superadminEmailCategoryValues: readonly ["transactional", "announcements", "offers", "system"];
+export declare const superadminEmailCategoryValues: readonly ["transactional", "announcements", "offers", "system", "invites"];
 export declare const superadminEmailListQuerySchema: z.ZodObject<{
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     offset: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     status: z.ZodDefault<z.ZodEnum<{
-        failed: "failed";
         all: "all";
+        failed: "failed";
         delivered: "delivered";
+        dropped: "dropped";
         scheduled: "scheduled";
         sent: "sent";
         bounced: "bounced";
-        dropped: "dropped";
         complained: "complained";
         opened: "opened";
         clicked: "clicked";
@@ -20,17 +20,18 @@ export declare const superadminEmailListQuerySchema: z.ZodObject<{
     userId: z.ZodOptional<z.ZodString>;
     template: z.ZodOptional<z.ZodString>;
     category: z.ZodDefault<z.ZodEnum<{
-        system: "system";
         all: "all";
+        system: "system";
         transactional: "transactional";
         announcements: "announcements";
         offers: "offers";
+        invites: "invites";
     }>>;
     timeRange: z.ZodDefault<z.ZodEnum<{
+        now: "now";
         all: "all";
         "7d": "7d";
         "30d": "30d";
-        now: "now";
         "1h": "1h";
         "24h": "24h";
     }>>;
@@ -46,6 +47,7 @@ export declare const superadminEmailSendSchema: z.ZodObject<{
         transactional: "transactional";
         announcements: "announcements";
         offers: "offers";
+        invites: "invites";
     }>>;
     type: z.ZodDefault<z.ZodString>;
     props: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;

package/dist/contracts/superadmin-emails.js

@@ -13,11 +13,19 @@ export const superadminEmailStatusValues = [
     "clicked",
     "failed",
 ];
+// "invites" is the invite/request sending stream (access-plan X-25): mail
+// carrying sender-authored content to arbitrary non-user addresses is
+// attacker-adjacent, so it is categorized apart from transactional mail —
+// burned reputation on the invite stream must never take down password
+// resets. Stream-level isolation at the provider (a separate SES
+// configuration set / sending identity) is an infra follow-up; the category
+// is the seam it keys off.
 export const superadminEmailCategoryValues = [
     "transactional",
     "announcements",
     "offers",
     "system",
+    "invites",
 ];
 export const superadminEmailListQuerySchema = z.object({
     limit: z.coerce.number().int().min(1).max(100).default(25),

package/dist/contracts/superadmin-queues.d.ts

@@ -2,9 +2,9 @@ import { z } from "zod";
 export declare const SUPERADMIN_BULLMQ_JOB_STATE_VALUES: readonly ["active", "completed", "delayed", "failed", "paused", "prioritized", "waiting", "waiting-children"];
 export declare const SUPERADMIN_BULLMQ_QUEUE_CLEAN_STATE_VALUES: readonly ["active", "completed", "delayed", "failed", "paused", "prioritized", "waiting"];
 export declare const superadminBullmqJobStateSchema: z.ZodEnum<{
-    completed: "completed";
-    failed: "failed";
     active: "active";
+    failed: "failed";
+    completed: "completed";
     waiting: "waiting";
     delayed: "delayed";
     paused: "paused";
@@ -12,9 +12,9 @@ export declare const superadminBullmqJobStateSchema: z.ZodEnum<{
     "waiting-children": "waiting-children";
 }>;
 export declare const superadminBullmqQueueCleanStateSchema: z.ZodEnum<{
-    completed: "completed";
-    failed: "failed";
     active: "active";
+    failed: "failed";
+    completed: "completed";
     waiting: "waiting";
     delayed: "delayed";
     paused: "paused";
@@ -80,9 +80,9 @@ export declare const SuperadminBullmqJobSchema: z.ZodObject<{
     id: z.ZodString;
     name: z.ZodString;
     state: z.ZodEnum<{
-        completed: "completed";
-        failed: "failed";
         active: "active";
+        failed: "failed";
+        completed: "completed";
         waiting: "waiting";
         delayed: "delayed";
         paused: "paused";
@@ -100,9 +100,9 @@ export declare const SuperadminBullmqFleetJobSchema: z.ZodObject<{
     id: z.ZodString;
     name: z.ZodString;
     state: z.ZodEnum<{
-        completed: "completed";
-        failed: "failed";
         active: "active";
+        failed: "failed";
+        completed: "completed";
         waiting: "waiting";
         delayed: "delayed";
         paused: "paused";
@@ -123,9 +123,9 @@ export declare const superadminBullmqJobListQuerySchema: z.ZodObject<{
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     offset: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     state: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodEnum<{
-        completed: "completed";
-        failed: "failed";
         active: "active";
+        failed: "failed";
+        completed: "completed";
         waiting: "waiting";
         delayed: "delayed";
         paused: "paused";
@@ -140,9 +140,9 @@ export declare const SuperadminBullmqJobListSchema: z.ZodObject<{
         prev: z.ZodNullable<z.ZodNumber>;
     }, z.core.$strip>;
     state: z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodEnum<{
-        completed: "completed";
-        failed: "failed";
         active: "active";
+        failed: "failed";
+        completed: "completed";
         waiting: "waiting";
         delayed: "delayed";
         paused: "paused";
@@ -157,9 +157,9 @@ export declare const SuperadminBullmqJobListSchema: z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
         state: z.ZodEnum<{
-            completed: "completed";
-            failed: "failed";
             active: "active";
+            failed: "failed";
+            completed: "completed";
             waiting: "waiting";
             delayed: "delayed";
             paused: "paused";
@@ -177,9 +177,9 @@ export declare const SuperadminBullmqJobListSchema: z.ZodObject<{
 }, z.core.$strip>;
 export declare const superadminBullmqFleetJobListQuerySchema: z.ZodObject<{
     state: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodEnum<{
-        completed: "completed";
-        failed: "failed";
         active: "active";
+        failed: "failed";
+        completed: "completed";
         waiting: "waiting";
         delayed: "delayed";
         paused: "paused";
@@ -199,9 +199,9 @@ export declare const SuperadminBullmqFleetJobListSchema: z.ZodObject<{
         prev: z.ZodNullable<z.ZodNumber>;
     }, z.core.$strip>;
     state: z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodEnum<{
-        completed: "completed";
-        failed: "failed";
         active: "active";
+        failed: "failed";
+        completed: "completed";
         waiting: "waiting";
         delayed: "delayed";
         paused: "paused";
@@ -217,9 +217,9 @@ export declare const SuperadminBullmqFleetJobListSchema: z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
         state: z.ZodEnum<{
-            completed: "completed";
-            failed: "failed";
             active: "active";
+            failed: "failed";
+            completed: "completed";
             waiting: "waiting";
             delayed: "delayed";
             paused: "paused";
@@ -241,9 +241,9 @@ export declare const SuperadminBullmqJobDetailSchema: z.ZodObject<{
     queueName: z.ZodString;
     name: z.ZodString;
     state: z.ZodEnum<{
-        completed: "completed";
-        failed: "failed";
         active: "active";
+        failed: "failed";
+        completed: "completed";
         waiting: "waiting";
         delayed: "delayed";
         paused: "paused";
@@ -292,9 +292,9 @@ export declare const SuperadminBullmqWorkerListSchema: z.ZodObject<{
 }, z.core.$strip>;
 export declare const superadminBullmqQueueCleanSchema: z.ZodObject<{
     state: z.ZodDefault<z.ZodEnum<{
-        completed: "completed";
-        failed: "failed";
         active: "active";
+        failed: "failed";
+        completed: "completed";
         waiting: "waiting";
         delayed: "delayed";
         paused: "paused";
@@ -327,9 +327,9 @@ export declare const superadminBullmqQueueActionBodySchema: z.ZodUnion<readonly
     }>;
 }, z.core.$strip>, z.ZodObject<{
     state: z.ZodDefault<z.ZodEnum<{
-        completed: "completed";
-        failed: "failed";
         active: "active";
+        failed: "failed";
+        completed: "completed";
         waiting: "waiting";
         delayed: "delayed";
         paused: "paused";
@@ -372,15 +372,15 @@ export declare const SuperadminBullmqFleetActionResponseSchema: z.ZodObject<{
     affectedJobs: z.ZodNullable<z.ZodNumber>;
 }, z.core.$strip>;
 export declare const superadminBullmqJobActionSchema: z.ZodEnum<{
-    retry: "retry";
-    promote: "promote";
     remove: "remove";
+    promote: "promote";
+    retry: "retry";
 }>;
 export declare const superadminBullmqJobActionBodySchema: z.ZodObject<{
     action: z.ZodEnum<{
-        retry: "retry";
-        promote: "promote";
         remove: "remove";
+        promote: "promote";
+        retry: "retry";
     }>;
 }, z.core.$strip>;
 export declare const SuperadminBullmqJobActionResponseSchema: z.ZodObject<{
@@ -388,9 +388,9 @@ export declare const SuperadminBullmqJobActionResponseSchema: z.ZodObject<{
     queueName: z.ZodString;
     jobId: z.ZodString;
     action: z.ZodEnum<{
-        retry: "retry";
-        promote: "promote";
         remove: "remove";
+        promote: "promote";
+        retry: "retry";
     }>;
 }, z.core.$strip>;
 export type SuperadminBullmqJobState = z.infer<typeof superadminBullmqJobStateSchema>;