@spacefast/common 0.0.5 → 0.0.7

package/dist/contracts/spaces.js

@@ -2,8 +2,8 @@ import { z } from "zod";
 import { AsyncOperationSchema, baseDiagnosticSchema, CursorPaginationSchema, cursorListQuerySchema, } from "./common.js";
 import { versionStatus, spaceStatus } from "./enums.js";
 import { conventionFilesSchema, uploadInstructionsSchema, manifestFileSchema } from "./internal.js";
-import { ChannelPointerSchema, VersionSchema, PublishSourceSchema, SpaceSchema, } from "./resources.js";
-import { spaceConfigSchema } from "./space-config.js";
+import { ChannelPointerSchema, VersionSchema, PublishSourceSchema, SpaceSchema, spaceSettingsDigestSchema, } from "./resources.js";
+import { spaceConfigSchema, spacePlacementConfigSchema } from "./space-config.js";
 import { principalIdSchema } from "./transfers.js";
 import { zeroRuntimeKindSchema } from "./zero.js";
 export const AnonymousSpaceAccessSchema = z.object({
@@ -14,7 +14,7 @@ export const AnonymousSpaceAccessSchema = z.object({
     claimUrl: z
         .string()
         .nullable()
-        .describe("Browser-only claim link in `/claim#five-word-token` form. The fragment is a human handoff capability; API clients send the same token as bearer auth."),
+        .describe("Browser-only claim link in `/claim#nonce` form. The fragment is a human handoff capability; API clients use the claim token as bearer auth for publish/update/status/exchange."),
     expiresAt: z
         .string()
         .datetime()
@@ -67,13 +67,22 @@ export const spaceCreateSchema = z
 })
     .optional()
     .default({});
-export const spacePatchSchema = z.object({
+export const spacePatchSchema = z
+    .object({
     title: z.string().min(1).max(255).optional(),
     config: spaceConfigSchema
         .nullable()
         .optional()
         .describe("Replaces the stored SpaceConfig overlay; null clears it."),
+    baseSettingsDigest: spaceSettingsDigestSchema
+        .optional()
+        .describe("Optimistic-concurrency base for versioned settings (title/config): the `settingsDigest` read from the Space resource when the form was loaded. When provided and the space's current settings digest no longer matches, the PATCH fails with 409 publish_base_changed and changes nothing."),
+    force: z
+        .boolean()
+        .optional()
+        .describe("With baseSettingsDigest: acknowledge a changed base and overwrite anyway. The forced overwrite is recorded in the space activity feed. Never the default."),
     dataLocation: z.string().min(1).optional(),
+    placement: spacePlacementConfigSchema.optional(),
     noindex: z
         .boolean()
         .optional()
@@ -85,13 +94,22 @@ export const spacePatchSchema = z.object({
         .nullable()
         .optional()
         .describe("Sets (string) or removes (null) space password protection."),
+})
+    .superRefine((value, ctx) => {
+    if (value.force === true && value.baseSettingsDigest === undefined) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "force requires baseSettingsDigest.",
+            path: ["force"],
+        });
+    }
 });
 export const spaceClaimSchema = z
     .object({
     claimToken: z
         .string()
         .min(1)
-        .describe("One-time claim token returned at anonymous creation. Browser claim links carry it as a URL fragment; API claim requests send it as bearer auth."),
+        .describe("One-time claim token returned at anonymous creation. API clients send it as bearer auth; browser claim links carry a separate nonce fragment."),
     teamId: z
         .string()
         .min(1)
@@ -102,6 +120,10 @@ export const spaceClaimSchema = z
         .min(1)
         .optional()
         .describe("Alias of teamId; must match when both are provided."),
+    agentContinuation: z
+        .boolean()
+        .optional()
+        .describe("Keep the publishing agent authorized after the claim (default false unless explicitly granted): the claim token demotes to a one-time voucher exchangeable for a durable publish access token."),
 })
     .superRefine((value, ctx) => {
     if (value.teamId && value.targetTeamId && value.teamId !== value.targetTeamId) {
@@ -114,6 +136,18 @@ export const spaceClaimSchema = z
 });
 export const anonymousClaimAssignSchema = z.object({
     teamId: z.string().min(1).optional(),
+    nonce: z.string().min(1).optional().describe("Browser claim nonce from the claim URL fragment."),
+    agentContinuation: z
+        .boolean()
+        .optional()
+        .describe("Keep the publishing agent authorized after the claim (default false unless explicitly granted): the claim token demotes to a one-time voucher exchangeable for a durable publish access token."),
+});
+export const anonymousClaimResolveSchema = z.object({
+    nonce: z.string().min(1).optional().describe("Browser claim nonce from the claim URL fragment."),
+    agentContinuation: z
+        .boolean()
+        .optional()
+        .describe("Applied when the resolve auto-claims (signed-in user with exactly one writable team). Defaults to false unless explicitly granted."),
 });
 export const anonymousClaimTeamSchema = z.object({
     id: z.string(),
@@ -150,13 +184,32 @@ export const anonymousClaimStatusResponseSchema = z.object({
         ref: z.string().nullable(),
         number: z.number().int().positive().nullable(),
         status: VersionSchema.shape.status,
-        immutableUrl: z.string(),
+        immutableUrl: z.string().nullable(),
         manifestHash: z.string().nullable(),
     }),
     claim: z.object({
         state: z.enum(["unclaimed", "claimed"]),
         url: z.string().nullable(),
         expiresAt: z.string().datetime().nullable(),
+        continuation: z
+            .enum(["available", "used", "unavailable"])
+            .optional()
+            .describe("Present once the space is claimed: whether this claim token can still be exchanged once for a durable access token (POST /v1/anonymous-claim/exchange)."),
+    }),
+});
+export const anonymousClaimExchangeResponseSchema = z.object({
+    space: z.object({
+        id: z.string(),
+        slug: z.string(),
+        liveUrl: z.string().nullable(),
+    }),
+    credential: z.object({
+        accessToken: z
+            .string()
+            .describe("Durable publish access token minted by the one-time exchange. Shown exactly once — store it (e.g. .spacefast/state.json) and never print it."),
+        accessTokenId: z.string(),
+        label: z.string().nullable(),
+        teamId: z.string(),
     }),
 });
 export const spaceClaimReminderSchema = z.object({
@@ -185,6 +238,9 @@ export const spaceVersionCreateSchema = z
         .max(64_000)
         .optional()
         .describe("Bounded build transcript for deploys that ran a local build before publishing."),
+    conventionFiles: conventionFilesSchema
+        .optional()
+        .describe("Routing convention contents used when deciding whether this publish is unchanged. The same values are supplied again when the version is finalized."),
     files: z
         .array(manifestFileSchema)
         .optional()
@@ -261,9 +317,6 @@ export const spaceVersionFileIndexSchema = z.object({
     byHash: z.record(z.string(), spaceVersionFileIndexEntrySchema),
     byPath: z.record(z.string(), spaceVersionFileIndexEntrySchema),
 });
-export const spaceVersionFilesQuerySchema = z.object({
-    q: z.string().trim().min(1).max(255).optional(),
-});
 export const spaceVersionFilesSearchSchema = z.object({
     query: z.string().nullable(),
     total: z.number().int().nonnegative(),
@@ -556,7 +609,6 @@ export const spaceVersionResumeResponseSchema = z.object({
         .default([])
         .describe("Manifest paths ignored by the server because the current plan does not allow them."),
 });
-export const spaceVersionRefreshResponseSchema = spaceVersionResumeResponseSchema;
 // Promote body (spec "Explicit version routes"): `{ channel? }` defaulting to
 // "live". Channels beyond live arrive additively; non-live names reject with
 // `channel_unsupported` until then. Rollback is promoting an older ready

package/dist/contracts/superadmin-emails.d.ts

@@ -1,6 +1,6 @@
 import { z } from "zod";
 export declare const superadminEmailStatusValues: readonly ["all", "scheduled", "sent", "delivered", "bounced", "dropped", "complained", "opened", "clicked", "failed"];
-export declare const superadminEmailCategoryValues: readonly ["transactional", "announcements", "offers", "system"];
+export declare const superadminEmailCategoryValues: readonly ["transactional", "announcements", "offers", "system", "invites"];
 export declare const superadminEmailListQuerySchema: z.ZodObject<{
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     offset: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
@@ -8,10 +8,10 @@ export declare const superadminEmailListQuerySchema: z.ZodObject<{
         all: "all";
         failed: "failed";
         delivered: "delivered";
+        dropped: "dropped";
         scheduled: "scheduled";
         sent: "sent";
         bounced: "bounced";
-        dropped: "dropped";
         complained: "complained";
         opened: "opened";
         clicked: "clicked";
@@ -25,6 +25,7 @@ export declare const superadminEmailListQuerySchema: z.ZodObject<{
         transactional: "transactional";
         announcements: "announcements";
         offers: "offers";
+        invites: "invites";
     }>>;
     timeRange: z.ZodDefault<z.ZodEnum<{
         now: "now";
@@ -46,6 +47,7 @@ export declare const superadminEmailSendSchema: z.ZodObject<{
         transactional: "transactional";
         announcements: "announcements";
         offers: "offers";
+        invites: "invites";
     }>>;
     type: z.ZodDefault<z.ZodString>;
     props: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;

package/dist/contracts/superadmin-emails.js

@@ -13,11 +13,19 @@ export const superadminEmailStatusValues = [
     "clicked",
     "failed",
 ];
+// "invites" is the invite/request sending stream (access-plan X-25): mail
+// carrying sender-authored content to arbitrary non-user addresses is
+// attacker-adjacent, so it is categorized apart from transactional mail —
+// burned reputation on the invite stream must never take down password
+// resets. Stream-level isolation at the provider (a separate SES
+// configuration set / sending identity) is an infra follow-up; the category
+// is the seam it keys off.
 export const superadminEmailCategoryValues = [
     "transactional",
     "announcements",
     "offers",
     "system",
+    "invites",
 ];
 export const superadminEmailListQuerySchema = z.object({
     limit: z.coerce.number().int().min(1).max(100).default(25),

package/dist/contracts/superadmin-queues.d.ts

@@ -5,20 +5,20 @@ export declare const superadminBullmqJobStateSchema: z.ZodEnum<{
     active: "active";
     failed: "failed";
     completed: "completed";
+    waiting: "waiting";
     delayed: "delayed";
+    paused: "paused";
     prioritized: "prioritized";
-    waiting: "waiting";
     "waiting-children": "waiting-children";
-    paused: "paused";
 }>;
 export declare const superadminBullmqQueueCleanStateSchema: z.ZodEnum<{
     active: "active";
     failed: "failed";
     completed: "completed";
-    delayed: "delayed";
-    prioritized: "prioritized";
     waiting: "waiting";
+    delayed: "delayed";
     paused: "paused";
+    prioritized: "prioritized";
 }>;
 export declare const SuperadminBullmqQueueSchema: z.ZodObject<{
     name: z.ZodString;
@@ -83,11 +83,11 @@ export declare const SuperadminBullmqJobSchema: z.ZodObject<{
         active: "active";
         failed: "failed";
         completed: "completed";
+        waiting: "waiting";
         delayed: "delayed";
+        paused: "paused";
         prioritized: "prioritized";
-        waiting: "waiting";
         "waiting-children": "waiting-children";
-        paused: "paused";
     }>;
     attemptsMade: z.ZodNumber;
     timestamp: z.ZodNumber;
@@ -103,11 +103,11 @@ export declare const SuperadminBullmqFleetJobSchema: z.ZodObject<{
         active: "active";
         failed: "failed";
         completed: "completed";
+        waiting: "waiting";
         delayed: "delayed";
+        paused: "paused";
         prioritized: "prioritized";
-        waiting: "waiting";
         "waiting-children": "waiting-children";
-        paused: "paused";
     }>;
     attemptsMade: z.ZodNumber;
     timestamp: z.ZodNumber;
@@ -126,11 +126,11 @@ export declare const superadminBullmqJobListQuerySchema: z.ZodObject<{
         active: "active";
         failed: "failed";
         completed: "completed";
+        waiting: "waiting";
         delayed: "delayed";
+        paused: "paused";
         prioritized: "prioritized";
-        waiting: "waiting";
         "waiting-children": "waiting-children";
-        paused: "paused";
     }>]>>;
 }, z.core.$strip>;
 export declare const SuperadminBullmqJobListSchema: z.ZodObject<{
@@ -143,11 +143,11 @@ export declare const SuperadminBullmqJobListSchema: z.ZodObject<{
         active: "active";
         failed: "failed";
         completed: "completed";
+        waiting: "waiting";
         delayed: "delayed";
+        paused: "paused";
         prioritized: "prioritized";
-        waiting: "waiting";
         "waiting-children": "waiting-children";
-        paused: "paused";
     }>]>;
     asc: z.ZodBoolean;
     jobId: z.ZodNullable<z.ZodString>;
@@ -160,11 +160,11 @@ export declare const SuperadminBullmqJobListSchema: z.ZodObject<{
             active: "active";
             failed: "failed";
             completed: "completed";
+            waiting: "waiting";
             delayed: "delayed";
+            paused: "paused";
             prioritized: "prioritized";
-            waiting: "waiting";
             "waiting-children": "waiting-children";
-            paused: "paused";
         }>;
         attemptsMade: z.ZodNumber;
         timestamp: z.ZodNumber;
@@ -180,11 +180,11 @@ export declare const superadminBullmqFleetJobListQuerySchema: z.ZodObject<{
         active: "active";
         failed: "failed";
         completed: "completed";
+        waiting: "waiting";
         delayed: "delayed";
+        paused: "paused";
         prioritized: "prioritized";
-        waiting: "waiting";
         "waiting-children": "waiting-children";
-        paused: "paused";
     }>]>>;
     offset: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
@@ -202,11 +202,11 @@ export declare const SuperadminBullmqFleetJobListSchema: z.ZodObject<{
         active: "active";
         failed: "failed";
         completed: "completed";
+        waiting: "waiting";
         delayed: "delayed";
+        paused: "paused";
         prioritized: "prioritized";
-        waiting: "waiting";
         "waiting-children": "waiting-children";
-        paused: "paused";
     }>]>;
     asc: z.ZodBoolean;
     search: z.ZodNullable<z.ZodString>;
@@ -220,11 +220,11 @@ export declare const SuperadminBullmqFleetJobListSchema: z.ZodObject<{
             active: "active";
             failed: "failed";
             completed: "completed";
+            waiting: "waiting";
             delayed: "delayed";
+            paused: "paused";
             prioritized: "prioritized";
-            waiting: "waiting";
             "waiting-children": "waiting-children";
-            paused: "paused";
         }>;
         attemptsMade: z.ZodNumber;
         timestamp: z.ZodNumber;
@@ -244,11 +244,11 @@ export declare const SuperadminBullmqJobDetailSchema: z.ZodObject<{
         active: "active";
         failed: "failed";
         completed: "completed";
+        waiting: "waiting";
         delayed: "delayed";
+        paused: "paused";
         prioritized: "prioritized";
-        waiting: "waiting";
         "waiting-children": "waiting-children";
-        paused: "paused";
     }>;
     attemptsMade: z.ZodNumber;
     attemptsConfigured: z.ZodNullable<z.ZodNumber>;
@@ -295,10 +295,10 @@ export declare const superadminBullmqQueueCleanSchema: z.ZodObject<{
         active: "active";
         failed: "failed";
         completed: "completed";
-        delayed: "delayed";
-        prioritized: "prioritized";
         waiting: "waiting";
+        delayed: "delayed";
         paused: "paused";
+        prioritized: "prioritized";
     }>>;
     graceMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
@@ -330,10 +330,10 @@ export declare const superadminBullmqQueueActionBodySchema: z.ZodUnion<readonly
         active: "active";
         failed: "failed";
         completed: "completed";
-        delayed: "delayed";
-        prioritized: "prioritized";
         waiting: "waiting";
+        delayed: "delayed";
         paused: "paused";
+        prioritized: "prioritized";
     }>>;
     graceMs: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;