@spacefast/common 0.0.5 → 0.0.7

package/dist/contracts/activity.d.ts

@@ -1,5 +1,5 @@
 import { z } from "zod";
-export declare const ACTIVITY_EVENT_CODES: readonly ["space.created", "space.claimed", "space.transferred", "space.moved", "space.expired", "space.disabled", "space.enabled", "space.deleted", "space.config_updated", "space.password_updated", "version.created", "version.ready", "version.warning", "version.failed", "version.expired", "version.canceled", "version.deleted", "version.retention_warning", "version.retention_deleted", "channel.promoted", "build.created", "build.succeeded", "build.failed", "build.canceled", "build.skipped", "domain.created", "domain.verified", "domain.verification_failed", "domain.control_lost", "domain.dns_updated", "domain.nameservers_updated", "domain.registration_purchased", "domain.registration_renewed", "domain.registration_expiring", "domain.registration_expired", "domain.transfer_in_started", "domain.transfer_out_started", "domain.deleted", "binding.created", "binding.activated", "binding.blocked", "binding.deleted", "transfer.requested", "transfer.confirmed", "transfer.completed", "transfer.canceled", "transfer.expired", "transfer.failed", "variable.updated", "variable.deleted", "api_key.created", "api_key.updated", "api_key.revoked", "webhook.created", "webhook.updated", "webhook.secret_rotated", "webhook.disabled", "team.updated", "team.member_added", "team.member_removed", "team.member_role_updated", "team.builds_deploys_quota_exceeded", "tenant.past_due", "tenant.suspended", "tenant.reactivated", "tenant.deleted", "export.ready", "export.failed", "import.ready", "import.failed", "annotation.token_minted", "annotation.created", "annotation.comment_created", "annotation.resolved", "annotation.reopened", "annotation.archived", "abuse_report.created", "abuse_report.updated", "claim.blocked_takedown", "user.created", "user.signed_in", "user.deleted", "user.impersonation_started", "user.impersonation_stopped", "user.two_factor_enabled", "user.two_factor_disabled"];
+export declare const ACTIVITY_EVENT_CODES: readonly ["space.created", "space.claimed", "feedback.lead_claim_pending", "space.transferred", "space.move_requested", "space.moved", "space.expired", "space.disabled", "space.enabled", "space.deleted", "space.config_updated", "space.password_updated", "site.provision_requested", "site.placement_hold_set", "site.placement_hold_cleared", "site.burst_toggled", "space.access_logout_all", "space.access_transfer_scrub", "space.access_operator_token", "space.sharing_updated", "space.share_link_created", "space.share_link_revoked", "space.invite_created", "space.invite_revoked", "space.access_request_created", "space.access_request_resolved", "space.firewall_updated", "team.access_defaults_updated", "team.service_token_created", "team.service_token_revoked", "team.access_connection_created", "team.access_connection_updated", "team.access_connection_revoked", "version.created", "version.ready", "version.warning", "version.failed", "version.expired", "version.canceled", "version.deleted", "version.retention_warning", "version.retention_deleted", "channel.promoted", "build.created", "build.succeeded", "build.failed", "build.canceled", "build.skipped", "domain.created", "domain.verified", "domain.verification_failed", "domain.control_lost", "domain.dns_updated", "domain.nameservers_updated", "domain.registration_purchased", "domain.registration_renewed", "domain.registration_expiring", "domain.registration_expired", "domain.transfer_in_started", "domain.transfer_out_started", "domain.deleted", "binding.created", "binding.activated", "binding.blocked", "binding.deleted", "transfer.requested", "transfer.confirmed", "transfer.completed", "transfer.canceled", "transfer.expired", "transfer.failed", "variable.updated", "variable.deleted", "api_key.created", "api_key.updated", "api_key.revoked", "webhook.created", "webhook.updated", "webhook.secret_rotated", "webhook.disabled", "webhook.deleted", "team.updated", "team.member_added", "team.member_removed", "team.member_role_updated", "team.builds_deploys_quota_exceeded", "tenant.past_due", "tenant.suspended", "tenant.reactivated", "tenant.deleted", "export.ready", "export.failed", "import.ready", "import.failed", "annotation.token_minted", "annotation.created", "annotation.comment_created", "annotation.resolved", "annotation.reopened", "annotation.archived", "abuse_report.created", "abuse_report.updated", "claim.blocked_takedown", "user.created", "user.signed_in", "user.deleted", "user.impersonation_started", "user.impersonation_stopped", "user.two_factor_enabled", "user.two_factor_disabled"];
 export type ActivityEventCode = (typeof ACTIVITY_EVENT_CODES)[number];
 export declare function isActivityEventCode(value: string): value is ActivityEventCode;
 export declare function isValidActivityEventFilter(filter: string): boolean;

package/dist/contracts/activity.js

@@ -9,7 +9,9 @@ export const ACTIVITY_EVENT_CODES = [
     // space
     "space.created",
     "space.claimed",
+    "feedback.lead_claim_pending",
     "space.transferred",
+    "space.move_requested",
     "space.moved",
     "space.expired",
     "space.disabled",
@@ -17,6 +19,30 @@ export const ACTIVITY_EVENT_CODES = [
     "space.deleted",
     "space.config_updated",
     "space.password_updated",
+    // site
+    "site.provision_requested",
+    "site.placement_hold_set",
+    "site.placement_hold_cleared",
+    "site.burst_toggled",
+    // access (internal-docs/access-plan.html): every access mutation emits an
+    // activity event; operator mints are audited and owner-visible (X-27).
+    "space.access_logout_all",
+    "space.access_transfer_scrub",
+    "space.access_operator_token",
+    "space.sharing_updated",
+    "space.share_link_created",
+    "space.share_link_revoked",
+    "space.invite_created",
+    "space.invite_revoked",
+    "space.access_request_created",
+    "space.access_request_resolved",
+    "space.firewall_updated",
+    "team.access_defaults_updated",
+    "team.service_token_created",
+    "team.service_token_revoked",
+    "team.access_connection_created",
+    "team.access_connection_updated",
+    "team.access_connection_revoked",
     // version
     "version.created",
     "version.ready",
@@ -68,12 +94,12 @@ export const ACTIVITY_EVENT_CODES = [
     "api_key.created",
     "api_key.updated",
     "api_key.revoked",
-    // webhook (DELETE is a soft-disable that emits webhook.disabled; there is no
-    // webhook.deleted event — internal-docs/platform.md "Webhook DELETE")
+    // webhook
     "webhook.created",
     "webhook.updated",
     "webhook.secret_rotated",
     "webhook.disabled",
+    "webhook.deleted",
     // team (builds_deploys_quota_exceeded is a shipped additive extension: the
     // pooled monthly builds+deploys meter is SOFT — it tracks, never blocks)
     "team.updated",

package/dist/contracts/annotations.d.ts

@@ -273,8 +273,8 @@ export declare const annotationPatchSchema: z.ZodObject<{
 }, z.core.$strip>;
 export declare const annotationExportQuerySchema: z.ZodObject<{
     format: z.ZodDefault<z.ZodEnum<{
-        markdown: "markdown";
         json: "json";
+        markdown: "markdown";
     }>>;
     status: z.ZodOptional<z.ZodEnum<{
         open: "open";
@@ -314,14 +314,12 @@ export declare const annotationListResponseSchema: z.ZodObject<{
 }, z.core.$strip>;
 export declare const annotationExportResponseSchema: z.ZodObject<{
     format: z.ZodEnum<{
-        markdown: "markdown";
         json: "json";
+        markdown: "markdown";
     }>;
     content: z.ZodString;
 }, z.core.$strip>;
 export type CollaborationInvitedReviewer = z.infer<typeof collaborationInvitedReviewerSchema>;
 export type Collaboration = z.infer<typeof collaborationSchema>;
-export type OverlayConfig = z.infer<typeof overlayConfigSchema>;
 export type PublicOverlayConfig = z.infer<typeof publicOverlayConfigSchema>;
 export type AnnotationThread = z.infer<typeof annotationThreadSchema>;
-export type RealtimeToken = z.infer<typeof realtimeTokenResponseSchema>;

package/dist/contracts/api-keys.d.ts

@@ -61,7 +61,7 @@ export type ParsedStatticResource = {
 } | {
     kind: "space";
     tenantId: string;
-    siteId: string;
+    siteId: string | null;
     spaceId: string;
     wildcard: boolean;
 } | {
@@ -74,7 +74,7 @@ export type ParsedStatticResource = {
     domainGroupId: string;
 };
 export declare function parseStatticResource(value: string): ParsedStatticResource | null;
-export declare const StatticAccessPolicySchema: z.ZodObject<{
+export declare const ApiCredentialPolicySchema: z.ZodObject<{
     version: z.ZodLiteral<"2026-06-09">;
     statements: z.ZodArray<z.ZodObject<{
         effect: z.ZodEnum<{
@@ -135,7 +135,7 @@ export declare const StatticAccessPolicySchema: z.ZodObject<{
         }, z.core.$strict>>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
-export type StatticAccessPolicy = z.infer<typeof StatticAccessPolicySchema>;
+export type ApiCredentialPolicy = z.infer<typeof ApiCredentialPolicySchema>;
 export declare const ApiKeyPresetSchema: z.ZodEnum<{
     ci_deploy: "ci_deploy";
     space_publisher: "space_publisher";
@@ -511,7 +511,129 @@ export declare const ApiKeyPatchRequestSchema: z.ZodObject<{
         }, z.core.$strict>>;
     }, z.core.$strict>>;
 }, z.core.$strip>;
-export type ApiKeyPatchRequest = z.infer<typeof ApiKeyPatchRequestSchema>;
+export declare const ApiKeyScopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"team">;
+    teamId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"space">;
+    spaceId: z.ZodString;
+}, z.core.$strict>], "kind">;
+export type ApiKeyScope = z.infer<typeof ApiKeyScopeSchema>;
+export declare const ApiKeyScopedCreateRequestSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    scope: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"team">;
+        teamId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"space">;
+        spaceId: z.ZodString;
+    }, z.core.$strict>], "kind">;
+    permissions: z.ZodArray<z.ZodEnum<{
+        "*": "*";
+        "sites:read": "sites:read";
+        "sites:create": "sites:create";
+        "sites:write": "sites:write";
+        "sites:delete": "sites:delete";
+        "sites:policy.write": "sites:policy.write";
+        "spaces:read": "spaces:read";
+        "spaces:create": "spaces:create";
+        "spaces:write": "spaces:write";
+        "spaces:delete": "spaces:delete";
+        "spaces:publish": "spaces:publish";
+        "spaces:transfer": "spaces:transfer";
+        "spaces:export": "spaces:export";
+        "spaces:import": "spaces:import";
+        "versions:read": "versions:read";
+        "versions:promote": "versions:promote";
+        "versions:delete": "versions:delete";
+        "versions:download": "versions:download";
+        "domains:read": "domains:read";
+        "domains:create": "domains:create";
+        "domains:verify": "domains:verify";
+        "domains:assign": "domains:assign";
+        "domains:bind": "domains:bind";
+        "domains:delete": "domains:delete";
+        "domains:dns.write": "domains:dns.write";
+        "domains:dns.credentials.write": "domains:dns.credentials.write";
+        "domains:purchase": "domains:purchase";
+        "webhooks:read": "webhooks:read";
+        "webhooks:write": "webhooks:write";
+        "builds:read": "builds:read";
+        "builds:create": "builds:create";
+        "teams:read": "teams:read";
+        "teams:write": "teams:write";
+        "teams:members.write": "teams:members.write";
+        "billing:read": "billing:read";
+        "billing:write": "billing:write";
+        "tokens:read": "tokens:read";
+        "tokens:create": "tokens:create";
+        "tokens:revoke": "tokens:revoke";
+        "mcp:tools": "mcp:tools";
+        "runtime:manage": "runtime:manage";
+    }>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    ipAllowlist: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    notBefore: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strict>;
+export type ApiKeyScopedCreateRequest = z.infer<typeof ApiKeyScopedCreateRequestSchema>;
+export declare const ApiKeyScopedPatchRequestSchema: z.ZodObject<{
+    scope: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"team">;
+        teamId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"space">;
+        spaceId: z.ZodString;
+    }, z.core.$strict>], "kind">>;
+    permissions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "*": "*";
+        "sites:read": "sites:read";
+        "sites:create": "sites:create";
+        "sites:write": "sites:write";
+        "sites:delete": "sites:delete";
+        "sites:policy.write": "sites:policy.write";
+        "spaces:read": "spaces:read";
+        "spaces:create": "spaces:create";
+        "spaces:write": "spaces:write";
+        "spaces:delete": "spaces:delete";
+        "spaces:publish": "spaces:publish";
+        "spaces:transfer": "spaces:transfer";
+        "spaces:export": "spaces:export";
+        "spaces:import": "spaces:import";
+        "versions:read": "versions:read";
+        "versions:promote": "versions:promote";
+        "versions:delete": "versions:delete";
+        "versions:download": "versions:download";
+        "domains:read": "domains:read";
+        "domains:create": "domains:create";
+        "domains:verify": "domains:verify";
+        "domains:assign": "domains:assign";
+        "domains:bind": "domains:bind";
+        "domains:delete": "domains:delete";
+        "domains:dns.write": "domains:dns.write";
+        "domains:dns.credentials.write": "domains:dns.credentials.write";
+        "domains:purchase": "domains:purchase";
+        "webhooks:read": "webhooks:read";
+        "webhooks:write": "webhooks:write";
+        "builds:read": "builds:read";
+        "builds:create": "builds:create";
+        "teams:read": "teams:read";
+        "teams:write": "teams:write";
+        "teams:members.write": "teams:members.write";
+        "billing:read": "billing:read";
+        "billing:write": "billing:write";
+        "tokens:read": "tokens:read";
+        "tokens:create": "tokens:create";
+        "tokens:revoke": "tokens:revoke";
+        "mcp:tools": "mcp:tools";
+        "runtime:manage": "runtime:manage";
+    }>>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    ipAllowlist: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    notBefore: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strict>;
+export type ApiKeyScopedPatchRequest = z.infer<typeof ApiKeyScopedPatchRequestSchema>;
 export declare const ApiKeyParamsSchema: z.ZodObject<{
     apiKeyId: z.ZodString;
 }, z.core.$strip>;

package/dist/contracts/api-keys.js

@@ -79,6 +79,9 @@ export function parseStatticResource(value) {
         }
         return null;
     }
+    if (head === "space" && isResourceSegment(a) && path.length === 2) {
+        return { kind: "space", tenantId, siteId: null, spaceId: a, wildcard };
+    }
     if (head === "domain" && isResourceSegment(a) && path.length === 2 && !wildcard) {
         return { kind: "domain", tenantId, domainId: a };
     }
@@ -91,10 +94,10 @@ const StatticResourceSchema = z
     .string()
     .max(512)
     .refine((value) => parseStatticResource(value) !== null, {
-    message: "Resource must be a stt:// URI from the StatticResource union (tenant, principal, site, site space, domain, or domain-group).",
+    message: "Resource must be a stt:// URI from the StatticResource union (tenant, principal, site, space, site space, domain, or domain-group).",
 })
-    .describe("A resource URI from the StatticResource union: stt://tenant/{t}, …/principal/(team|external)/{id}[/*], …/site/{id}[/*], …/site/{id}/space/{id}[/*], …/domain/{id}, or …/domain-group/{id}.");
-export const StatticAccessPolicySchema = z
+    .describe("A resource URI from the StatticResource union: stt://tenant/{t}, …/principal/(team|external)/{id}[/*], …/site/{id}[/*], …/space/{id}[/*], …/site/{id}/space/{id}[/*], …/domain/{id}, or …/domain-group/{id}.");
+export const ApiCredentialPolicySchema = z
     .object({
     version: z
         .literal(SPACEFAST_ACCESS_POLICY_VERSION)
@@ -161,7 +164,7 @@ export const ApiKeySchema = z.object({
     ownerPrincipal: ApiKeyOwnerPrincipalSchema.nullable().describe("Owning principal (ownership metadata, never the authorization gate)."),
     createdByUserId: z.string().describe("User who created the key."),
     preset: ApiKeyPresetSchema.nullable().describe("Preset the policy was compiled from, if any."),
-    policy: StatticAccessPolicySchema.nullable().describe("Effective access policy. A key authorizes by policy only."),
+    policy: ApiCredentialPolicySchema.nullable().describe("Effective access policy. A key authorizes by policy only."),
     metadata: AnyObjectSchema.describe("Caller-supplied metadata."),
     secretPreview: z.string().describe("Masked secret preview (prefix and last characters)."),
     secret: z.string().optional().describe("Full secret. Returned once, at creation only."),
@@ -196,7 +199,7 @@ export const ApiKeyCreateRequestSchema = z.object({
         .optional()
         .describe("Owning team for the new key. Defaults to the caller's own team; authorization is by the credential's policy, not key ownership."),
     preset: ApiKeyPresetSchema.optional(),
-    policy: StatticAccessPolicySchema.nullable()
+    policy: ApiCredentialPolicySchema.nullable()
         .optional()
         .describe("Explicit policy. Must be a subset of the calling credential's policy."),
     metadata: AnyObjectSchema.optional().describe("Caller-supplied metadata."),
@@ -225,10 +228,75 @@ export const ApiKeyPatchRequestSchema = z
         .nullable()
         .optional()
         .describe("Replacement activation instant."),
-    policy: StatticAccessPolicySchema.optional().describe("Replacement policy. Must be a subset of the calling credential's policy at mutation time."),
+    policy: ApiCredentialPolicySchema.optional().describe("Replacement policy. Must be a subset of the calling credential's policy at mutation time."),
+})
+    .refine((value) => Object.keys(value).length > 0, {
+    message: "At least one mutable API key field is required.",
+});
+// Target §5C contract (internal-docs/cli-ux-dx-improvement-plan-2026-07-12.html
+// "API key: finite permissions, no broad role"): key creation selects an
+// explicit, finite scope and permission set — never a team-wide role that
+// falls out of an omitted field. This is deliberately a DISJOINT shape from
+// `ApiKeyCreateRequestSchema` (no teamId/preset/policy): the legacy shape
+// stays valid only on the legacy route (api-keys/routes.ts); this is the only
+// request shape the public core contract (api-contracts/core/api-keys.ts)
+// accepts.
+export const ApiKeyScopeSchema = z
+    .discriminatedUnion("kind", [
+    z.object({ kind: z.literal("team"), teamId: z.string().min(1) }).strict(),
+    z.object({ kind: z.literal("space"), spaceId: z.string().min(1) }).strict(),
+])
+    .describe("Explicit, finite policy target. A space scope narrows the derived policy to exactly that space — never the owning team's whole tree.");
+export const ApiKeyScopedCreateRequestSchema = z
+    .object({
+    name: z.string().trim().min(1).max(255).optional().describe("Human-readable key name."),
+    scope: ApiKeyScopeSchema,
+    permissions: z
+        .array(DescribedStatticActionSchema)
+        .min(1)
+        .max(64)
+        .describe("Finite permission set the derived policy grants, and nothing beyond it."),
+    metadata: AnyObjectSchema.optional().describe("Caller-supplied metadata."),
+    ipAllowlist: z
+        .array(z.string().trim().min(1).max(255))
+        .max(100)
+        .nullable()
+        .optional()
+        .describe("CIDR/IP allowlist for the new key."),
+    expiresAt: z.string().datetime().nullable().optional().describe("Expiry instant."),
+    notBefore: z.string().datetime().nullable().optional().describe("Activation instant."),
+})
+    .strict();
+export const ApiKeyScopedPatchRequestSchema = z
+    .object({
+    scope: ApiKeyScopeSchema.optional().describe("Replacement policy target. Must be supplied together with permissions."),
+    permissions: z
+        .array(DescribedStatticActionSchema)
+        .min(1)
+        .max(64)
+        .optional()
+        .describe("Replacement finite permission set. Must be supplied together with scope."),
+    metadata: AnyObjectSchema.optional().describe("Replacement caller-supplied metadata."),
+    ipAllowlist: z
+        .array(z.string().trim().min(1).max(255))
+        .max(100)
+        .nullable()
+        .optional()
+        .describe("Replacement CIDR/IP allowlist."),
+    expiresAt: z.string().datetime().nullable().optional().describe("Replacement expiry instant."),
+    notBefore: z
+        .string()
+        .datetime()
+        .nullable()
+        .optional()
+        .describe("Replacement activation instant."),
 })
+    .strict()
     .refine((value) => Object.keys(value).length > 0, {
     message: "At least one mutable API key field is required.",
+})
+    .refine((value) => (value.scope === undefined) === (value.permissions === undefined), {
+    message: "scope and permissions must be set together, or both omitted.",
 });
 export const ApiKeyParamsSchema = z.object({
     apiKeyId: z.string().min(1).describe("API key id."),

package/dist/contracts/archives.d.ts

@@ -25,7 +25,10 @@ export declare const spaceExportSchema: z.ZodObject<{
         queued: "queued";
         running: "running";
     }>;
-    format: z.ZodLiteral<"stattic_export_v1">;
+    format: z.ZodEnum<{
+        spacefast_export_v1: "spacefast_export_v1";
+        stattic_export_v1: "stattic_export_v1";
+    }>;
     diagnostics: z.ZodDefault<z.ZodArray<z.ZodObject<{
         code: z.ZodString;
         severity: z.ZodEnum<{
@@ -67,7 +70,10 @@ export declare const spaceExportListResponseSchema: z.ZodObject<{
             queued: "queued";
             running: "running";
         }>;
-        format: z.ZodLiteral<"stattic_export_v1">;
+        format: z.ZodEnum<{
+            spacefast_export_v1: "spacefast_export_v1";
+            stattic_export_v1: "stattic_export_v1";
+        }>;
         diagnostics: z.ZodDefault<z.ZodArray<z.ZodObject<{
             code: z.ZodString;
             severity: z.ZodEnum<{

package/dist/contracts/archives.js

@@ -18,7 +18,7 @@ export const spaceExportRequestSchema = z.object({
         .describe("Include explicit space config (the space access policy) in the archive. Version manifests are always included."),
 });
 export const spaceExportArchiveSchema = z.object({
-    // Zip-only contract: stattic_export_v1 archives are always zip (the spec
+    // Zip-only contract: spacefast_export_v1 archives are always zip (the spec
     // allows "zip or tar"; one format keeps the enum honest).
     contentType: z.literal("application/zip").describe("Archive media type. Always zip."),
     downloadUrl: z
@@ -40,7 +40,11 @@ export const spaceExportSchema = z.object({
     status: z
         .enum(["queued", "running", "ready", "failed", "expired"])
         .describe("Export lifecycle. `expired` means the archive download window has passed."),
-    format: z.literal("stattic_export_v1").describe("Archive format identifier."),
+    // Producers emit `spacefast_export_v1`; `stattic_export_v1` remains accepted
+    // for archives/handles minted before the rename (legacy read-compat).
+    format: z
+        .enum(["spacefast_export_v1", "stattic_export_v1"])
+        .describe("Archive format identifier. New exports are `spacefast_export_v1`."),
     diagnostics: z
         .array(baseDiagnosticSchema)
         .default([])
@@ -68,14 +72,17 @@ export const spaceImportSourceSchema = z
     }),
     z.object({
         kind: z.literal("url").describe("Fetch the archive from a public HTTPS URL."),
-        url: z.string().url().describe("Public HTTPS URL of a stattic_export_v1 archive."),
+        url: z
+            .string()
+            .url()
+            .describe("Public HTTPS URL of a spacefast_export_v1 (or legacy stattic_export_v1) archive."),
     }),
     z.object({
         kind: z.literal("export").describe("Import directly from an export on this control plane."),
         exportId: z.string().min(1).describe("Source export id (exp_…) accessible to the caller."),
     }),
 ])
-    .describe("Where the stattic_export_v1 archive comes from.");
+    .describe("Where the spacefast_export_v1 archive comes from.");
 export const spaceImportRequestSchema = z.object({
     source: spaceImportSourceSchema,
     publish: z

package/dist/contracts/billing.d.ts

@@ -6,7 +6,6 @@ export declare const billingProviderSchema: z.ZodEnum<{
     app_store: "app_store";
     google_play: "google_play";
 }>;
-export type BillingProvider = z.infer<typeof billingProviderSchema>;
 export declare const billingIntervalValues: readonly ["monthly", "yearly"];
 export declare const billingIntervalSchema: z.ZodEnum<{
     monthly: "monthly";
@@ -68,7 +67,6 @@ export declare const billingStoreAccountResponseSchema: z.ZodObject<{
     appStoreProducts: z.ZodArray<z.ZodString>;
     googlePlayBasePlans: z.ZodArray<z.ZodString>;
 }, z.core.$strip>;
-export type BillingStoreAccountResponse = z.infer<typeof billingStoreAccountResponseSchema>;
 export declare const appStoreVerifyRequestSchema: z.ZodObject<{
     transactionId: z.ZodString;
 }, z.core.$strip>;
@@ -88,7 +86,6 @@ export declare const storeSubscriptionResultSchema: z.ZodObject<{
     isActive: z.ZodBoolean;
     expiresAt: z.ZodNullable<z.ZodString>;
 }, z.core.$strip>;
-export type StoreSubscriptionResult = z.infer<typeof storeSubscriptionResultSchema>;
 export declare const stripeCheckoutRequestSchema: z.ZodObject<{
     planCode: z.ZodDefault<z.ZodEnum<{
         free: "free";
@@ -104,17 +101,14 @@ export declare const stripeCheckoutRequestSchema: z.ZodObject<{
     successUrl: z.ZodString;
     cancelUrl: z.ZodString;
 }, z.core.$strip>;
-export type StripeCheckoutRequest = z.infer<typeof stripeCheckoutRequestSchema>;
 export declare const stripePortalRequestSchema: z.ZodObject<{
     returnUrl: z.ZodString;
 }, z.core.$strip>;
-export type StripePortalRequest = z.infer<typeof stripePortalRequestSchema>;
 export declare const billingLinkResponseSchema: z.ZodObject<{
     url: z.ZodString;
 }, z.core.$strip>;
 export type BillingLinkResponse = z.infer<typeof billingLinkResponseSchema>;
 export declare const stripeCancelSubscriptionRequestSchema: z.ZodDefault<z.ZodObject<{}, z.core.$strip>>;
-export type StripeCancelSubscriptionRequest = z.infer<typeof stripeCancelSubscriptionRequestSchema>;
 export declare const stripeChangePlanRequestSchema: z.ZodObject<{
     planCode: z.ZodEnum<{
         free: "free";
@@ -128,14 +122,12 @@ export declare const stripeChangePlanRequestSchema: z.ZodObject<{
         yearly: "yearly";
     }>>;
 }, z.core.$strip>;
-export type StripeChangePlanRequest = z.infer<typeof stripeChangePlanRequestSchema>;
 export declare const stripeSubscriptionActionResponseSchema: z.ZodObject<{
     provider: z.ZodLiteral<"stripe">;
     stripeSubscriptionId: z.ZodString;
     status: z.ZodString;
     cancelAtPeriodEnd: z.ZodNullable<z.ZodBoolean>;
 }, z.core.$strip>;
-export type StripeSubscriptionActionResponse = z.infer<typeof stripeSubscriptionActionResponseSchema>;
 export declare const billingAddressSchema: z.ZodObject<{
     line1: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     line2: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -218,7 +210,6 @@ export declare const teamBillingSettingsUpdateSchema: z.ZodObject<{
     invoiceFooter: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     customFields: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 }, z.core.$strict>;
-export type TeamBillingSettingsResponse = z.infer<typeof teamBillingSettingsResponseSchema>;
 export type TeamBillingSettingsUpdate = z.infer<typeof teamBillingSettingsUpdateSchema>;
 export declare const billingCustomerRefSchema: z.ZodObject<{
     id: z.ZodString;