@spacefast/common 0.0.3 → 0.0.6

package/dist/contracts/countries.js

@@ -0,0 +1,261 @@
+// ISO 3166-1 alpha-2 country codes — the vocabulary of the firewall card's
+// country section (contracts/access.ts `firewallCountriesSchema`, access-plan
+// §5.6). The rule `match.country` is an exact-equality matcher against the
+// edge-supplied country header, so "allow only these countries" compiles to
+// one deny/challenge rule per code in the COMPLEMENT of this list — which is
+// why the list itself is a contract: the compiler and the projection must
+// agree on the universe.
+//
+// Officially assigned codes only (no exceptionally-reserved / user-assigned
+// ranges). Display names are a UI concern (`Intl.DisplayNames`), never stored.
+export const ISO_COUNTRY_CODES = [
+    "AD",
+    "AE",
+    "AF",
+    "AG",
+    "AI",
+    "AL",
+    "AM",
+    "AO",
+    "AQ",
+    "AR",
+    "AS",
+    "AT",
+    "AU",
+    "AW",
+    "AX",
+    "AZ",
+    "BA",
+    "BB",
+    "BD",
+    "BE",
+    "BF",
+    "BG",
+    "BH",
+    "BI",
+    "BJ",
+    "BL",
+    "BM",
+    "BN",
+    "BO",
+    "BQ",
+    "BR",
+    "BS",
+    "BT",
+    "BV",
+    "BW",
+    "BY",
+    "BZ",
+    "CA",
+    "CC",
+    "CD",
+    "CF",
+    "CG",
+    "CH",
+    "CI",
+    "CK",
+    "CL",
+    "CM",
+    "CN",
+    "CO",
+    "CR",
+    "CU",
+    "CV",
+    "CW",
+    "CX",
+    "CY",
+    "CZ",
+    "DE",
+    "DJ",
+    "DK",
+    "DM",
+    "DO",
+    "DZ",
+    "EC",
+    "EE",
+    "EG",
+    "EH",
+    "ER",
+    "ES",
+    "ET",
+    "FI",
+    "FJ",
+    "FK",
+    "FM",
+    "FO",
+    "FR",
+    "GA",
+    "GB",
+    "GD",
+    "GE",
+    "GF",
+    "GG",
+    "GH",
+    "GI",
+    "GL",
+    "GM",
+    "GN",
+    "GP",
+    "GQ",
+    "GR",
+    "GS",
+    "GT",
+    "GU",
+    "GW",
+    "GY",
+    "HK",
+    "HM",
+    "HN",
+    "HR",
+    "HT",
+    "HU",
+    "ID",
+    "IE",
+    "IL",
+    "IM",
+    "IN",
+    "IO",
+    "IQ",
+    "IR",
+    "IS",
+    "IT",
+    "JE",
+    "JM",
+    "JO",
+    "JP",
+    "KE",
+    "KG",
+    "KH",
+    "KI",
+    "KM",
+    "KN",
+    "KP",
+    "KR",
+    "KW",
+    "KY",
+    "KZ",
+    "LA",
+    "LB",
+    "LC",
+    "LI",
+    "LK",
+    "LR",
+    "LS",
+    "LT",
+    "LU",
+    "LV",
+    "LY",
+    "MA",
+    "MC",
+    "MD",
+    "ME",
+    "MF",
+    "MG",
+    "MH",
+    "MK",
+    "ML",
+    "MM",
+    "MN",
+    "MO",
+    "MP",
+    "MQ",
+    "MR",
+    "MS",
+    "MT",
+    "MU",
+    "MV",
+    "MW",
+    "MX",
+    "MY",
+    "MZ",
+    "NA",
+    "NC",
+    "NE",
+    "NF",
+    "NG",
+    "NI",
+    "NL",
+    "NO",
+    "NP",
+    "NR",
+    "NU",
+    "NZ",
+    "OM",
+    "PA",
+    "PE",
+    "PF",
+    "PG",
+    "PH",
+    "PK",
+    "PL",
+    "PM",
+    "PN",
+    "PR",
+    "PS",
+    "PT",
+    "PW",
+    "PY",
+    "QA",
+    "RE",
+    "RO",
+    "RS",
+    "RU",
+    "RW",
+    "SA",
+    "SB",
+    "SC",
+    "SD",
+    "SE",
+    "SG",
+    "SH",
+    "SI",
+    "SJ",
+    "SK",
+    "SL",
+    "SM",
+    "SN",
+    "SO",
+    "SR",
+    "SS",
+    "ST",
+    "SV",
+    "SX",
+    "SY",
+    "SZ",
+    "TC",
+    "TD",
+    "TF",
+    "TG",
+    "TH",
+    "TJ",
+    "TK",
+    "TL",
+    "TM",
+    "TN",
+    "TO",
+    "TR",
+    "TT",
+    "TV",
+    "TW",
+    "TZ",
+    "UA",
+    "UG",
+    "UM",
+    "US",
+    "UY",
+    "UZ",
+    "VA",
+    "VC",
+    "VE",
+    "VG",
+    "VI",
+    "VN",
+    "VU",
+    "WF",
+    "WS",
+    "YE",
+    "YT",
+    "ZA",
+    "ZM",
+    "ZW",
+];

package/dist/contracts/deployments.d.ts

@@ -1,12 +1,12 @@
 import { z } from "zod";
 export declare const deploymentStatusSchema: z.ZodEnum<{
     failed: "failed";
-    queued: "queued";
     canceled: "canceled";
+    building: "building";
     ready: "ready";
     waiting_for_source: "waiting_for_source";
+    queued: "queued";
     skipped: "skipped";
-    building: "building";
 }>;
 export declare const DeploymentSourceSchema: z.ZodObject<{
     kind: z.ZodNullable<z.ZodString>;
@@ -29,11 +29,11 @@ export declare const DeploymentSourceSchema: z.ZodObject<{
     commitAuthorLogin: z.ZodNullable<z.ZodString>;
     pullRequestNumber: z.ZodNullable<z.ZodNumber>;
     actorType: z.ZodNullable<z.ZodEnum<{
+        system: "system";
         user: "user";
         api_key: "api_key";
         oauth_client: "oauth_client";
         anonymous_claim: "anonymous_claim";
-        system: "system";
     }>>;
     actorId: z.ZodNullable<z.ZodString>;
 }, z.core.$strip>;
@@ -73,9 +73,9 @@ export declare const DeploymentChannelStateSchema: z.ZodObject<{
 }, z.core.$strip>;
 export declare const DeploymentActivityGroupSchema: z.ZodObject<{
     kind: z.ZodEnum<{
-        version: "version";
         channel: "channel";
         source: "source";
+        version: "version";
         branch: "branch";
         pull_request: "pull_request";
     }>;
@@ -104,9 +104,9 @@ export declare const DeploymentSchema: z.ZodObject<{
     }, z.core.$strip>>;
     activityGroup: z.ZodObject<{
         kind: z.ZodEnum<{
-            version: "version";
             channel: "channel";
             source: "source";
+            version: "version";
             branch: "branch";
             pull_request: "pull_request";
         }>;
@@ -115,33 +115,33 @@ export declare const DeploymentSchema: z.ZodObject<{
     }, z.core.$strip>;
     status: z.ZodEnum<{
         failed: "failed";
-        queued: "queued";
         canceled: "canceled";
+        building: "building";
         ready: "ready";
         waiting_for_source: "waiting_for_source";
+        queued: "queued";
         skipped: "skipped";
-        building: "building";
     }>;
     versionStatus: z.ZodNullable<z.ZodEnum<{
         failed: "failed";
         canceled: "canceled";
-        ready: "ready";
         expired: "expired";
-        created: "created";
         building: "building";
         prepared: "prepared";
+        created: "created";
         uploading: "uploading";
         uploaded: "uploaded";
         finalizing: "finalizing";
+        ready: "ready";
     }>>;
     buildStatus: z.ZodNullable<z.ZodEnum<{
         failed: "failed";
-        queued: "queued";
-        running: "running";
-        succeeded: "succeeded";
         canceled: "canceled";
         waiting_for_source: "waiting_for_source";
         uploading_source: "uploading_source";
+        queued: "queued";
+        running: "running";
+        succeeded: "succeeded";
         skipped: "skipped";
     }>>;
     input: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -190,11 +190,11 @@ export declare const DeploymentSchema: z.ZodObject<{
         commitAuthorLogin: z.ZodNullable<z.ZodString>;
         pullRequestNumber: z.ZodNullable<z.ZodNumber>;
         actorType: z.ZodNullable<z.ZodEnum<{
+            system: "system";
             user: "user";
             api_key: "api_key";
             oauth_client: "oauth_client";
             anonymous_claim: "anonymous_claim";
-            system: "system";
         }>>;
         actorId: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>;
@@ -223,9 +223,9 @@ export declare const DeploymentSchema: z.ZodObject<{
         message: z.ZodString;
         path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         provider: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+            registrar: "registrar";
             wpcloud: "wpcloud";
             dns: "dns";
-            registrar: "registrar";
             runtime: "runtime";
         }>>>;
         details: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
@@ -268,9 +268,9 @@ export declare const deploymentListResponseSchema: z.ZodObject<{
         }, z.core.$strip>>;
         activityGroup: z.ZodObject<{
             kind: z.ZodEnum<{
-                version: "version";
                 channel: "channel";
                 source: "source";
+                version: "version";
                 branch: "branch";
                 pull_request: "pull_request";
             }>;
@@ -279,33 +279,33 @@ export declare const deploymentListResponseSchema: z.ZodObject<{
         }, z.core.$strip>;
         status: z.ZodEnum<{
             failed: "failed";
-            queued: "queued";
             canceled: "canceled";
+            building: "building";
             ready: "ready";
             waiting_for_source: "waiting_for_source";
+            queued: "queued";
             skipped: "skipped";
-            building: "building";
         }>;
         versionStatus: z.ZodNullable<z.ZodEnum<{
             failed: "failed";
             canceled: "canceled";
-            ready: "ready";
             expired: "expired";
-            created: "created";
             building: "building";
             prepared: "prepared";
+            created: "created";
             uploading: "uploading";
             uploaded: "uploaded";
             finalizing: "finalizing";
+            ready: "ready";
         }>>;
         buildStatus: z.ZodNullable<z.ZodEnum<{
             failed: "failed";
-            queued: "queued";
-            running: "running";
-            succeeded: "succeeded";
             canceled: "canceled";
             waiting_for_source: "waiting_for_source";
             uploading_source: "uploading_source";
+            queued: "queued";
+            running: "running";
+            succeeded: "succeeded";
             skipped: "skipped";
         }>>;
         input: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -354,11 +354,11 @@ export declare const deploymentListResponseSchema: z.ZodObject<{
             commitAuthorLogin: z.ZodNullable<z.ZodString>;
             pullRequestNumber: z.ZodNullable<z.ZodNumber>;
             actorType: z.ZodNullable<z.ZodEnum<{
+                system: "system";
                 user: "user";
                 api_key: "api_key";
                 oauth_client: "oauth_client";
                 anonymous_claim: "anonymous_claim";
-                system: "system";
             }>>;
             actorId: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>;
@@ -387,9 +387,9 @@ export declare const deploymentListResponseSchema: z.ZodObject<{
             message: z.ZodString;
             path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             provider: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+                registrar: "registrar";
                 wpcloud: "wpcloud";
                 dns: "dns";
-                registrar: "registrar";
                 runtime: "runtime";
             }>>>;
             details: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
@@ -433,9 +433,9 @@ export declare const deploymentGetResponseSchema: z.ZodObject<{
         }, z.core.$strip>>;
         activityGroup: z.ZodObject<{
             kind: z.ZodEnum<{
-                version: "version";
                 channel: "channel";
                 source: "source";
+                version: "version";
                 branch: "branch";
                 pull_request: "pull_request";
             }>;
@@ -444,33 +444,33 @@ export declare const deploymentGetResponseSchema: z.ZodObject<{
         }, z.core.$strip>;
         status: z.ZodEnum<{
             failed: "failed";
-            queued: "queued";
             canceled: "canceled";
+            building: "building";
             ready: "ready";
             waiting_for_source: "waiting_for_source";
+            queued: "queued";
             skipped: "skipped";
-            building: "building";
         }>;
         versionStatus: z.ZodNullable<z.ZodEnum<{
             failed: "failed";
             canceled: "canceled";
-            ready: "ready";
             expired: "expired";
-            created: "created";
             building: "building";
             prepared: "prepared";
+            created: "created";
             uploading: "uploading";
             uploaded: "uploaded";
             finalizing: "finalizing";
+            ready: "ready";
         }>>;
         buildStatus: z.ZodNullable<z.ZodEnum<{
             failed: "failed";
-            queued: "queued";
-            running: "running";
-            succeeded: "succeeded";
             canceled: "canceled";
             waiting_for_source: "waiting_for_source";
             uploading_source: "uploading_source";
+            queued: "queued";
+            running: "running";
+            succeeded: "succeeded";
             skipped: "skipped";
         }>>;
         input: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -519,11 +519,11 @@ export declare const deploymentGetResponseSchema: z.ZodObject<{
             commitAuthorLogin: z.ZodNullable<z.ZodString>;
             pullRequestNumber: z.ZodNullable<z.ZodNumber>;
             actorType: z.ZodNullable<z.ZodEnum<{
+                system: "system";
                 user: "user";
                 api_key: "api_key";
                 oauth_client: "oauth_client";
                 anonymous_claim: "anonymous_claim";
-                system: "system";
             }>>;
             actorId: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>;
@@ -552,9 +552,9 @@ export declare const deploymentGetResponseSchema: z.ZodObject<{
             message: z.ZodString;
             path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             provider: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+                registrar: "registrar";
                 wpcloud: "wpcloud";
                 dns: "dns";
-                registrar: "registrar";
                 runtime: "runtime";
             }>>>;
             details: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;

package/dist/contracts/device-auth.d.ts

@@ -19,7 +19,6 @@ export type DeviceAuthorizationStartResponse = z.infer<typeof DeviceAuthorizatio
 export declare const DeviceAuthorizationPollRequestSchema: z.ZodObject<{
     deviceCode: z.ZodString;
 }, z.core.$strip>;
-export type DeviceAuthorizationPollRequest = z.infer<typeof DeviceAuthorizationPollRequestSchema>;
 export declare const DeviceAuthorizationStatusSchema: z.ZodEnum<{
     expired: "expired";
     pending: "pending";
@@ -27,7 +26,6 @@ export declare const DeviceAuthorizationStatusSchema: z.ZodEnum<{
     denied: "denied";
     consumed: "consumed";
 }>;
-export type DeviceAuthorizationStatus = z.infer<typeof DeviceAuthorizationStatusSchema>;
 export declare const DeviceAuthorizationPollResponseSchema: z.ZodObject<{
     status: z.ZodEnum<{
         expired: "expired";
@@ -42,17 +40,17 @@ export declare const DeviceAuthorizationPollResponseSchema: z.ZodObject<{
         tenantId: z.ZodNullable<z.ZodString>;
         subject: z.ZodNullable<z.ZodObject<{
             type: z.ZodEnum<{
+                team: "team";
                 external: "external";
-                user: "user";
                 system: "system";
-                team: "team";
+                user: "user";
             }>;
             id: z.ZodString;
         }, z.core.$strip>>;
         ownerPrincipal: z.ZodNullable<z.ZodObject<{
             type: z.ZodEnum<{
-                external: "external";
                 team: "team";
+                external: "external";
             }>;
             id: z.ZodString;
         }, z.core.$strip>>;
@@ -145,7 +143,6 @@ export type DeviceAuthorizationPollResponse = z.infer<typeof DeviceAuthorization
 export declare const DeviceAuthorizationVerifyQuerySchema: z.ZodObject<{
     user_code: z.ZodString;
 }, z.core.$strip>;
-export type DeviceAuthorizationVerifyQuery = z.infer<typeof DeviceAuthorizationVerifyQuerySchema>;
 export declare const DeviceAuthorizationVerifyResponseSchema: z.ZodObject<{
     status: z.ZodEnum<{
         expired: "expired";
@@ -164,7 +161,6 @@ export declare const DeviceAuthorizationVerifyResponseSchema: z.ZodObject<{
         liveUrl: z.ZodNullable<z.ZodString>;
     }, z.core.$strict>>;
 }, z.core.$strip>;
-export type DeviceAuthorizationVerifyResponse = z.infer<typeof DeviceAuthorizationVerifyResponseSchema>;
 export declare const DeviceAuthorizationApproveRequestSchema: z.ZodObject<{
     userCode: z.ZodString;
     teamId: z.ZodString;
@@ -177,18 +173,15 @@ export declare const DeviceAuthorizationApproveRequestSchema: z.ZodObject<{
         team_admin: "team_admin";
         billing_viewer: "billing_viewer";
     }>;
+    agentContinuation: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strict>;
-export type DeviceAuthorizationApproveRequest = z.infer<typeof DeviceAuthorizationApproveRequestSchema>;
 export declare const DeviceAuthorizationApproveResponseSchema: z.ZodObject<{
     status: z.ZodLiteral<"approved">;
     claimedSpaceId: z.ZodNullable<z.ZodString>;
 }, z.core.$strict>;
-export type DeviceAuthorizationApproveResponse = z.infer<typeof DeviceAuthorizationApproveResponseSchema>;
 export declare const DeviceAuthorizationDenyRequestSchema: z.ZodObject<{
     userCode: z.ZodString;
 }, z.core.$strip>;
-export type DeviceAuthorizationDenyRequest = z.infer<typeof DeviceAuthorizationDenyRequestSchema>;
 export declare const DeviceAuthorizationDenyResponseSchema: z.ZodObject<{
     status: z.ZodLiteral<"denied">;
 }, z.core.$strip>;
-export type DeviceAuthorizationDenyResponse = z.infer<typeof DeviceAuthorizationDenyResponseSchema>;

package/dist/contracts/device-auth.js

@@ -138,6 +138,10 @@ export const DeviceAuthorizationApproveRequestSchema = z
         .min(1)
         .describe("Team the minted API key will belong to. The approver must be a member."),
     preset: ApiKeyPresetSchema.describe("Policy preset for the minted key. Its compiled policy must be a subset of the approver's team-role policy."),
+    agentContinuation: z
+        .boolean()
+        .optional()
+        .describe("Applies when the device flow carries an anonymous-space claim: keep the publishing agent authorized after the claim (default false unless explicitly granted) via the one-time claim-token exchange."),
 })
     .strict();
 export const DeviceAuthorizationApproveResponseSchema = z