@spacefast/common 0.0.6 → 0.0.7

package/brand-assets/spacefast-favicon.svg

@@ -0,0 +1,16 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 160 160" role="img" aria-label="Spacefast">
+  <style>
+    .sf-favicon-primary { fill: #141419; }
+    @media (prefers-color-scheme: dark) { .sf-favicon-primary { fill: #fbf8f1; } }
+  </style>
+  <g transform="rotate(-1 80 80)">
+    <g transform="translate(22.5 48) scale(2.15)" fill="#ff4217">
+      <path d="M0 0h24v7H7v7h17v20H0v-7h17v-7H0V0Z"/>
+      <path d="M0 0h25v7H7v6h15v7H7v14H0V0Z" transform="translate(31 0)"/>
+    </g>
+    <g class="sf-favicon-primary" transform="translate(17.5 43) scale(2.15)" fill="#141419">
+      <path d="M0 0h24v7H7v7h17v20H0v-7h17v-7H0V0Z"/>
+      <path d="M0 0h25v7H7v6h15v7H7v14H0V0Z" transform="translate(31 0)"/>
+    </g>
+  </g>
+</svg>

package/brand-assets/spacefast-sf-full-bleed.svg

@@ -0,0 +1,13 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 160 160" role="img" aria-label="Spacefast">
+  <rect width="160" height="160" fill="#141419"/>
+  <g transform="rotate(-1 80 80)">
+    <g transform="translate(39.75 55.5) scale(1.5)" fill="#ff4217">
+      <path d="M0 0h24v7H7v7h17v20H0v-7h17v-7H0V0Z"/>
+      <path d="M0 0h25v7H7v6h15v7H7v14H0V0Z" transform="translate(31 0)"/>
+    </g>
+    <g transform="translate(34.75 50.5) scale(1.5)" fill="#fbf8f1">
+      <path d="M0 0h24v7H7v7h17v20H0v-7h17v-7H0V0Z"/>
+      <path d="M0 0h25v7H7v6h15v7H7v14H0V0Z" transform="translate(31 0)"/>
+    </g>
+  </g>
+</svg>

package/brand-assets/spacefast-wordmark.svg

@@ -0,0 +1,5 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 326 62" role="img" aria-label="Spacefast">
+  <rect x="14" y="12" width="306" height="48" fill="#ff4217"/>
+  <rect x="10" y="8" width="306" height="48" fill="#141419" stroke="#141419" stroke-width="1"/>
+  <path fill="#fbf8f1" d="M20 15h24v7H27v7h17v20H20v-7h17v-7H20V15ZM51 15h24v18H58v16h-7V15Zm7 11h10v-4H58v4ZM83 15h24l9 34h-8l-2-8H84l-2 8h-8l9-34Zm3 19h18l-4-12H90l-4 12ZM145 22h-19v20h19v7h-26V15h26v7ZM152 15h26v7h-19v6h15v7h-15v7h19v7h-26V15ZM185 15h25v7h-18v6h15v7h-15v14h-7V15ZM215 15h24l9 34h-8l-2-8h-22l-2 8h-8l9-34Zm3 19h18l-4-12h-10l-4 12ZM250 15h24v7h-17v7h17v20h-24v-7h17v-7h-17V15ZM279 15h27v7h-10v27h-7V22h-10v-7Z"/>
+</svg>

package/dist/agents/connect-targets.d.ts

@@ -108,8 +108,10 @@ export type ConnectDownload = Readonly<{
  * a copy of the command/endpoint that wires it), plus an optional secondary
  * "copy the client config file" affordance.
  */
+export declare const CONNECT_TARGET_IDS: readonly ["claude-code", "cursor", "vscode", "codex", "claude", "chatgpt"];
+export type ConnectTargetId = (typeof CONNECT_TARGET_IDS)[number];
 export type ConnectTarget = Readonly<{
-    id: string;
+    id: ConnectTargetId;
     name: string;
     /** One short line on how this agent connects. */
     blurb: string;
@@ -131,3 +133,6 @@ export type ConnectTarget = Readonly<{
 export declare function buildConnectTargets({ mcpEndpoint }: {
     mcpEndpoint: string;
 }): ConnectTarget[];
+export declare function getConnectTarget(id: ConnectTargetId, options: {
+    mcpEndpoint: string;
+}): ConnectTarget;

package/dist/agents/connect-targets.js

@@ -146,6 +146,19 @@ export function buildClaudeMcpAddCommand(mcpEndpoint) {
 export function buildCodexMcpAddCommand(mcpEndpoint) {
     return `codex mcp add ${LOCAL_MCP_PACKAGE} --url ${mcpEndpoint} && codex mcp login ${LOCAL_MCP_PACKAGE}`;
 }
+/**
+ * A single connect card: one agent, one primary action (a one-click deeplink or
+ * a copy of the command/endpoint that wires it), plus an optional secondary
+ * "copy the client config file" affordance.
+ */
+export const CONNECT_TARGET_IDS = [
+    "claude-code",
+    "cursor",
+    "vscode",
+    "codex",
+    "claude",
+    "chatgpt",
+];
 /**
  * The per-agent connect catalog, parameterized by the hosted MCP endpoint.
  * Every one-click and copy-config path carries the hosted endpoint (OAuth,
@@ -222,3 +235,9 @@ export function buildConnectTargets({ mcpEndpoint }) {
         },
     ];
 }
+export function getConnectTarget(id, options) {
+    const target = buildConnectTargets(options).find((entry) => entry.id === id);
+    if (!target)
+        throw new TypeError(`Unknown agent target: ${id}`);
+    return target;
+}

package/dist/brand-assets-build.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Build-only SVG serialization for the canonical Spacefast brand geometry.
+ *
+ * Browser and application modules must import `@spacefast/common/brand-assets`
+ * and render ordinary SVG markup from its constants. Only asset generators,
+ * plugin packaging, and other build steps may import this module.
+ */
+import { type SpacefastBrandColors } from "./brand-assets.js";
+export type WordmarkSvgOptions = {
+    ariaLabel?: string;
+    colors?: Partial<SpacefastBrandColors>;
+    height?: number;
+    width?: number;
+};
+export type IconSvgOptions = {
+    ariaLabel?: string;
+    colors?: Partial<SpacefastBrandColors>;
+    size?: number;
+};
+export type FaviconSvgOptions = {
+    ariaLabel?: string;
+    theme?: "adaptive" | "dark" | "light";
+};
+export declare function spacefastWordmarkSvg(options?: WordmarkSvgOptions): string;
+export declare function spacefastIconSvg(options?: IconSvgOptions): string;
+export declare function spacefastFaviconSvg(options?: FaviconSvgOptions): string;

package/dist/brand-assets-build.js

@@ -0,0 +1,81 @@
+/**
+ * Build-only SVG serialization for the canonical Spacefast brand geometry.
+ *
+ * Browser and application modules must import `@spacefast/common/brand-assets`
+ * and render ordinary SVG markup from its constants. Only asset generators,
+ * plugin packaging, and other build steps may import this module.
+ */
+import { SPACEFAST_BRAND_COLORS, SPACEFAST_ICON_F_OFFSET_X, SPACEFAST_ICON_F_PATH, SPACEFAST_ICON_LETTER_ORIGIN, SPACEFAST_ICON_LETTER_SCALE, SPACEFAST_ICON_S_PATH, SPACEFAST_ICON_SHADOW_OFFSET, SPACEFAST_ICON_VIEW_BOX, SPACEFAST_WORDMARK_PATH, SPACEFAST_WORDMARK_PLATE, SPACEFAST_WORDMARK_SHADOW_OFFSET, SPACEFAST_WORDMARK_VIEW_BOX, } from "./brand-assets.js";
+function resolvedColors(colors) {
+    return { ...SPACEFAST_BRAND_COLORS, ...colors };
+}
+function svgAttribute(value) {
+    return value
+        .replaceAll("&", "&")
+        .replaceAll('"', """)
+        .replaceAll("<", "&lt;")
+        .replaceAll(">", "&gt;");
+}
+function numericAttribute(name, value) {
+    if (value === undefined)
+        return "";
+    if (!Number.isFinite(value) || value <= 0) {
+        throw new RangeError(`${name} must be a positive finite number`);
+    }
+    return ` ${name}="${value}"`;
+}
+export function spacefastWordmarkSvg(options = {}) {
+    const colors = resolvedColors(options.colors);
+    const plate = SPACEFAST_WORDMARK_PLATE;
+    const shadow = SPACEFAST_WORDMARK_SHADOW_OFFSET;
+    const label = svgAttribute(options.ariaLabel ?? "Spacefast");
+    return `<svg xmlns="http://www.w3.org/2000/svg"${numericAttribute("width", options.width)}${numericAttribute("height", options.height)} viewBox="${SPACEFAST_WORDMARK_VIEW_BOX}" role="img" aria-label="${label}">
+  <rect x="${plate.x + shadow.x}" y="${plate.y + shadow.y}" width="${plate.width}" height="${plate.height}" fill="${svgAttribute(colors.shadow)}"/>
+  <rect x="${plate.x}" y="${plate.y}" width="${plate.width}" height="${plate.height}" fill="${svgAttribute(colors.plate)}" stroke="${svgAttribute(colors.plate)}" stroke-width="1"/>
+  <path fill="${svgAttribute(colors.paper)}" d="${SPACEFAST_WORDMARK_PATH}"/>
+</svg>
+`;
+}
+function iconLetters(fill, x, y, scale = SPACEFAST_ICON_LETTER_SCALE, className) {
+    const classAttribute = className ? ` class="${svgAttribute(className)}"` : "";
+    return `<g${classAttribute} transform="translate(${x} ${y}) scale(${scale})" fill="${svgAttribute(fill)}">
+      <path d="${SPACEFAST_ICON_S_PATH}"/>
+      <path d="${SPACEFAST_ICON_F_PATH}" transform="translate(${SPACEFAST_ICON_F_OFFSET_X} 0)"/>
+    </g>`;
+}
+export function spacefastIconSvg(options = {}) {
+    const colors = resolvedColors(options.colors);
+    const origin = SPACEFAST_ICON_LETTER_ORIGIN;
+    const shadow = SPACEFAST_ICON_SHADOW_OFFSET;
+    const label = svgAttribute(options.ariaLabel ?? "Spacefast");
+    const size = numericAttribute("width", options.size) + numericAttribute("height", options.size);
+    return `<svg xmlns="http://www.w3.org/2000/svg"${size} viewBox="${SPACEFAST_ICON_VIEW_BOX}" role="img" aria-label="${label}">
+  <rect width="160" height="160" fill="${svgAttribute(colors.plate)}"/>
+  <g transform="rotate(-1 80 80)">
+    ${iconLetters(colors.shadow, origin.x + shadow.x, origin.y + shadow.y)}
+    ${iconLetters(colors.paper, origin.x, origin.y)}
+  </g>
+</svg>
+`;
+}
+export function spacefastFaviconSvg(options = {}) {
+    const theme = options.theme ?? "adaptive";
+    const label = svgAttribute(options.ariaLabel ?? "Spacefast");
+    const primary = theme === "dark" ? SPACEFAST_BRAND_COLORS.paper : SPACEFAST_BRAND_COLORS.plate;
+    const adaptiveStyles = theme === "adaptive"
+        ? `
+  <style>
+    .sf-favicon-primary { fill: ${SPACEFAST_BRAND_COLORS.plate}; }
+    @media (prefers-color-scheme: dark) { .sf-favicon-primary { fill: ${SPACEFAST_BRAND_COLORS.paper}; } }
+  </style>`
+        : "";
+    const origin = { x: 17.5, y: 43 };
+    const scale = 2.15;
+    return `<svg xmlns="http://www.w3.org/2000/svg" viewBox="${SPACEFAST_ICON_VIEW_BOX}" role="img" aria-label="${label}">${adaptiveStyles}
+  <g transform="rotate(-1 80 80)">
+    ${iconLetters(SPACEFAST_BRAND_COLORS.shadow, origin.x + 5, origin.y + 5, scale)}
+    ${iconLetters(primary, origin.x, origin.y, scale, "sf-favicon-primary")}
+  </g>
+</svg>
+`;
+}

package/dist/brand-assets.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Canonical Spacefast visual geometry.
+ *
+ * Keep this module dependency-free: React, Astro, build scripts, social-card
+ * renderers, and plugin generators all consume it. Generated SVG/PNG files are
+ * build outputs of these constants, never independent sources of truth.
+ */
+export declare const SPACEFAST_BRAND_COLORS: {
+    readonly shadow: "#ff4217";
+    readonly plate: "#141419";
+    readonly paper: "#fbf8f1";
+};
+export type SpacefastBrandColors = {
+    shadow: string;
+    plate: string;
+    paper: string;
+};
+export declare const SPACEFAST_WORDMARK_VIEW_BOX = "0 0 326 62";
+export declare const SPACEFAST_WORDMARK_PLATE: {
+    readonly x: 10;
+    readonly y: 8;
+    readonly width: 306;
+    readonly height: 48;
+};
+export declare const SPACEFAST_WORDMARK_SHADOW_OFFSET: {
+    readonly x: 4;
+    readonly y: 4;
+};
+export declare const SPACEFAST_WORDMARK_PATH = "M20 15h24v7H27v7h17v20H20v-7h17v-7H20V15ZM51 15h24v18H58v16h-7V15Zm7 11h10v-4H58v4ZM83 15h24l9 34h-8l-2-8H84l-2 8h-8l9-34Zm3 19h18l-4-12H90l-4 12ZM145 22h-19v20h19v7h-26V15h26v7ZM152 15h26v7h-19v6h15v7h-15v7h19v7h-26V15ZM185 15h25v7h-18v6h15v7h-15v14h-7V15ZM215 15h24l9 34h-8l-2-8h-22l-2 8h-8l9-34Zm3 19h18l-4-12h-10l-4 12ZM250 15h24v7h-17v7h17v20h-24v-7h17v-7h-17V15ZM279 15h27v7h-10v27h-7V22h-10v-7Z";
+export declare const SPACEFAST_ICON_VIEW_BOX = "0 0 160 160";
+export declare const SPACEFAST_ICON_S_PATH = "M0 0h24v7H7v7h17v20H0v-7h17v-7H0V0Z";
+export declare const SPACEFAST_ICON_F_PATH = "M0 0h25v7H7v6h15v7H7v14H0V0Z";
+export declare const SPACEFAST_ICON_LETTER_ORIGIN: {
+    readonly x: 34.75;
+    readonly y: 50.5;
+};
+export declare const SPACEFAST_ICON_LETTER_SCALE = 1.5;
+export declare const SPACEFAST_ICON_F_OFFSET_X = 31;
+export declare const SPACEFAST_ICON_SHADOW_OFFSET: {
+    readonly x: 5;
+    readonly y: 5;
+};

package/dist/brand-assets.js

@@ -0,0 +1,30 @@
+/**
+ * Canonical Spacefast visual geometry.
+ *
+ * Keep this module dependency-free: React, Astro, build scripts, social-card
+ * renderers, and plugin generators all consume it. Generated SVG/PNG files are
+ * build outputs of these constants, never independent sources of truth.
+ */
+export const SPACEFAST_BRAND_COLORS = {
+    shadow: "#ff4217",
+    plate: "#141419",
+    paper: "#fbf8f1",
+};
+export const SPACEFAST_WORDMARK_VIEW_BOX = "0 0 326 62";
+export const SPACEFAST_WORDMARK_PLATE = {
+    x: 10,
+    y: 8,
+    width: 306,
+    height: 48,
+};
+export const SPACEFAST_WORDMARK_SHADOW_OFFSET = { x: 4, y: 4 };
+// Re-kerned and vertically centered on the plate. This is a literal so browser
+// consumers render ordinary SVG markup without assembling path text at runtime.
+export const SPACEFAST_WORDMARK_PATH = "M20 15h24v7H27v7h17v20H20v-7h17v-7H20V15ZM51 15h24v18H58v16h-7V15Zm7 11h10v-4H58v4ZM83 15h24l9 34h-8l-2-8H84l-2 8h-8l9-34Zm3 19h18l-4-12H90l-4 12ZM145 22h-19v20h19v7h-26V15h26v7ZM152 15h26v7h-19v6h15v7h-15v7h19v7h-26V15ZM185 15h25v7h-18v6h15v7h-15v14h-7V15ZM215 15h24l9 34h-8l-2-8h-22l-2 8h-8l9-34Zm3 19h18l-4-12h-10l-4 12ZM250 15h24v7h-17v7h17v20h-24v-7h17v-7h-17V15ZM279 15h27v7h-10v27h-7V22h-10v-7Z";
+export const SPACEFAST_ICON_VIEW_BOX = "0 0 160 160";
+export const SPACEFAST_ICON_S_PATH = "M0 0h24v7H7v7h17v20H0v-7h17v-7H0V0Z";
+export const SPACEFAST_ICON_F_PATH = "M0 0h25v7H7v6h15v7H7v14H0V0Z";
+export const SPACEFAST_ICON_LETTER_ORIGIN = { x: 34.75, y: 50.5 };
+export const SPACEFAST_ICON_LETTER_SCALE = 1.5;
+export const SPACEFAST_ICON_F_OFFSET_X = 31;
+export const SPACEFAST_ICON_SHADOW_OFFSET = { x: 5, y: 5 };

package/dist/contracts/access.d.ts

@@ -898,6 +898,149 @@ export declare const spacePolicySchema: z.ZodObject<{
     version: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strip>;
 export type SpacePolicy = z.infer<typeof spacePolicySchema>;
+export declare const spaceAccessRulesWriteSchema: z.ZodObject<{
+    rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        match: z.ZodDefault<z.ZodObject<{
+            host: z.ZodOptional<z.ZodString>;
+            hostPattern: z.ZodOptional<z.ZodString>;
+            hostTemplate: z.ZodOptional<z.ZodString>;
+            pathPattern: z.ZodOptional<z.ZodString>;
+            channel: z.ZodOptional<z.ZodString>;
+            ipCidrs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            agent: z.ZodOptional<z.ZodString>;
+            country: z.ZodOptional<z.ZodString>;
+            header: z.ZodOptional<z.ZodObject<{
+                name: z.ZodString;
+                value: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        effect: z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+            challenge: "challenge";
+        }>;
+        auth: z.ZodOptional<z.ZodObject<{
+            requiredGrants: z.ZodArray<z.ZodString>;
+            issuers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                kid: z.ZodString;
+                alg: z.ZodLiteral<"EdDSA">;
+                publicKey: z.ZodString;
+                grantNamespaces: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>>>;
+            acquire: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"password">;
+                ref: z.ZodString;
+                transport: z.ZodEnum<{
+                    basic: "basic";
+                    form: "form";
+                }>;
+                username: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>, z.ZodObject<{
+                type: z.ZodLiteral<"login">;
+                url: z.ZodString;
+                label: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>], "type">>>;
+        }, z.core.$strip>>;
+        managedBy: z.ZodOptional<z.ZodEnum<{
+            sharing: "sharing";
+            firewall: "firewall";
+            file_share: "file_share";
+            cast_reviewer: "cast_reviewer";
+            team_default: "team_default";
+        }>>;
+        expiresAt: z.ZodOptional<z.ZodNumber>;
+        reasonCode: z.ZodOptional<z.ZodString>;
+        message: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    expectedVersion: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type SpaceAccessRulesWrite = z.infer<typeof spaceAccessRulesWriteSchema>;
+export declare const spaceAccessRulesReadSchema: z.ZodObject<{
+    rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        match: z.ZodDefault<z.ZodObject<{
+            host: z.ZodOptional<z.ZodString>;
+            hostPattern: z.ZodOptional<z.ZodString>;
+            hostTemplate: z.ZodOptional<z.ZodString>;
+            pathPattern: z.ZodOptional<z.ZodString>;
+            channel: z.ZodOptional<z.ZodString>;
+            ipCidrs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            agent: z.ZodOptional<z.ZodString>;
+            country: z.ZodOptional<z.ZodString>;
+            header: z.ZodOptional<z.ZodObject<{
+                name: z.ZodString;
+                value: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        effect: z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+            challenge: "challenge";
+        }>;
+        auth: z.ZodOptional<z.ZodObject<{
+            requiredGrants: z.ZodArray<z.ZodString>;
+            issuers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                kid: z.ZodString;
+                alg: z.ZodLiteral<"EdDSA">;
+                publicKey: z.ZodString;
+                grantNamespaces: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>>>;
+            acquire: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"password">;
+                ref: z.ZodString;
+                transport: z.ZodEnum<{
+                    basic: "basic";
+                    form: "form";
+                }>;
+                username: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>, z.ZodObject<{
+                type: z.ZodLiteral<"login">;
+                url: z.ZodString;
+                label: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>], "type">>>;
+        }, z.core.$strip>>;
+        managedBy: z.ZodOptional<z.ZodEnum<{
+            sharing: "sharing";
+            firewall: "firewall";
+            file_share: "file_share";
+            cast_reviewer: "cast_reviewer";
+            team_default: "team_default";
+        }>>;
+        expiresAt: z.ZodOptional<z.ZodNumber>;
+        reasonCode: z.ZodOptional<z.ZodString>;
+        message: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    version: z.ZodDefault<z.ZodNumber>;
+    accessExceedsPlan: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type SpaceAccessRulesRead = z.infer<typeof spaceAccessRulesReadSchema>;
+export declare const quickShareSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"quick_share">;
+    url: z.ZodString;
+    expiresAt: z.ZodString;
+    outcome: z.ZodEnum<{
+        created: "created";
+        reused: "reused";
+    }>;
+}, z.core.$strip>;
+export type QuickShare = z.infer<typeof quickShareSchema>;
+export declare const quickShareDeleteSchema: z.ZodObject<{
+    outcome: z.ZodEnum<{
+        deleted: "deleted";
+        unchanged: "unchanged";
+    }>;
+}, z.core.$strip>;
+export type QuickShareDelete = z.infer<typeof quickShareDeleteSchema>;
+export declare const enhancementsSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    active: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type Enhancements = z.infer<typeof enhancementsSchema>;
+export declare const enhancementsWriteSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+}, z.core.$strip>;
+export type EnhancementsWrite = z.infer<typeof enhancementsWriteSchema>;
 export declare const ruleSourceSchema: z.ZodEnum<{
     cloud: "cloud";
     file: "file";

package/dist/contracts/access.js

@@ -956,6 +956,39 @@ export const spacePolicySchema = z.object({
     // for rollback to a prior lane revision.
     version: z.number().int().nonnegative().default(0),
 });
+// GET/PUT /v1/spaces/:id/access-rules wire schemas — the ordered, always-latest
+// access policy pair. Shared by the still-mounted /access route family and the
+// detached /access-rules core adapter so activation has exactly one schema to
+// retire, not two to reconcile.
+export const spaceAccessRulesWriteSchema = z.object({
+    rules: z.array(runtimeRuleSchema).default([]),
+    expectedVersion: z.number().int().nonnegative().optional(),
+});
+// The lane read plus the plan-downgrade marker (access-plan X-23): plan-gated
+// rules keep enforcing after a downgrade; this flag is the notice surface.
+export const spaceAccessRulesReadSchema = spacePolicySchema.extend({
+    accessExceedsPlan: z.boolean().default(false),
+});
+// PUT/DELETE /v1/spaces/:id/quick-share wire schemas — the one active
+// whole-space guest link (§5.2).
+export const quickShareSchema = z.object({
+    kind: z.literal("quick_share"),
+    url: z.string().url(),
+    expiresAt: z.string().min(1),
+    outcome: z.enum(["created", "reused"]),
+});
+export const quickShareDeleteSchema = z.object({
+    outcome: z.enum(["deleted", "unchanged"]),
+});
+// GET/PUT /v1/spaces/:id/enhancements wire schemas — whole-space page
+// enhancements (analytics, tag manager, custom scripts) on/off. `active` is
+// reserved and currently always empty (see the composition delta on
+// spaces/enhancements-service.ts).
+export const enhancementsSchema = z.object({
+    enabled: z.boolean(),
+    active: z.array(z.string()),
+});
+export const enhancementsWriteSchema = z.object({ enabled: z.boolean() });
 // Where an effective rule came from. `platform` = composed by the cloud from
 // platform state (plan window, abuse/ban/billing) and PREPENDED above every
 // user-authored rule so a platform decision always wins first-match-wins; the

package/dist/contracts/api-keys.d.ts

@@ -511,6 +511,129 @@ export declare const ApiKeyPatchRequestSchema: z.ZodObject<{
         }, z.core.$strict>>;
     }, z.core.$strict>>;
 }, z.core.$strip>;
+export declare const ApiKeyScopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"team">;
+    teamId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"space">;
+    spaceId: z.ZodString;
+}, z.core.$strict>], "kind">;
+export type ApiKeyScope = z.infer<typeof ApiKeyScopeSchema>;
+export declare const ApiKeyScopedCreateRequestSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    scope: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"team">;
+        teamId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"space">;
+        spaceId: z.ZodString;
+    }, z.core.$strict>], "kind">;
+    permissions: z.ZodArray<z.ZodEnum<{
+        "*": "*";
+        "sites:read": "sites:read";
+        "sites:create": "sites:create";
+        "sites:write": "sites:write";
+        "sites:delete": "sites:delete";
+        "sites:policy.write": "sites:policy.write";
+        "spaces:read": "spaces:read";
+        "spaces:create": "spaces:create";
+        "spaces:write": "spaces:write";
+        "spaces:delete": "spaces:delete";
+        "spaces:publish": "spaces:publish";
+        "spaces:transfer": "spaces:transfer";
+        "spaces:export": "spaces:export";
+        "spaces:import": "spaces:import";
+        "versions:read": "versions:read";
+        "versions:promote": "versions:promote";
+        "versions:delete": "versions:delete";
+        "versions:download": "versions:download";
+        "domains:read": "domains:read";
+        "domains:create": "domains:create";
+        "domains:verify": "domains:verify";
+        "domains:assign": "domains:assign";
+        "domains:bind": "domains:bind";
+        "domains:delete": "domains:delete";
+        "domains:dns.write": "domains:dns.write";
+        "domains:dns.credentials.write": "domains:dns.credentials.write";
+        "domains:purchase": "domains:purchase";
+        "webhooks:read": "webhooks:read";
+        "webhooks:write": "webhooks:write";
+        "builds:read": "builds:read";
+        "builds:create": "builds:create";
+        "teams:read": "teams:read";
+        "teams:write": "teams:write";
+        "teams:members.write": "teams:members.write";
+        "billing:read": "billing:read";
+        "billing:write": "billing:write";
+        "tokens:read": "tokens:read";
+        "tokens:create": "tokens:create";
+        "tokens:revoke": "tokens:revoke";
+        "mcp:tools": "mcp:tools";
+        "runtime:manage": "runtime:manage";
+    }>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    ipAllowlist: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    notBefore: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strict>;
+export type ApiKeyScopedCreateRequest = z.infer<typeof ApiKeyScopedCreateRequestSchema>;
+export declare const ApiKeyScopedPatchRequestSchema: z.ZodObject<{
+    scope: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"team">;
+        teamId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"space">;
+        spaceId: z.ZodString;
+    }, z.core.$strict>], "kind">>;
+    permissions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "*": "*";
+        "sites:read": "sites:read";
+        "sites:create": "sites:create";
+        "sites:write": "sites:write";
+        "sites:delete": "sites:delete";
+        "sites:policy.write": "sites:policy.write";
+        "spaces:read": "spaces:read";
+        "spaces:create": "spaces:create";
+        "spaces:write": "spaces:write";
+        "spaces:delete": "spaces:delete";
+        "spaces:publish": "spaces:publish";
+        "spaces:transfer": "spaces:transfer";
+        "spaces:export": "spaces:export";
+        "spaces:import": "spaces:import";
+        "versions:read": "versions:read";
+        "versions:promote": "versions:promote";
+        "versions:delete": "versions:delete";
+        "versions:download": "versions:download";
+        "domains:read": "domains:read";
+        "domains:create": "domains:create";
+        "domains:verify": "domains:verify";
+        "domains:assign": "domains:assign";
+        "domains:bind": "domains:bind";
+        "domains:delete": "domains:delete";
+        "domains:dns.write": "domains:dns.write";
+        "domains:dns.credentials.write": "domains:dns.credentials.write";
+        "domains:purchase": "domains:purchase";
+        "webhooks:read": "webhooks:read";
+        "webhooks:write": "webhooks:write";
+        "builds:read": "builds:read";
+        "builds:create": "builds:create";
+        "teams:read": "teams:read";
+        "teams:write": "teams:write";
+        "teams:members.write": "teams:members.write";
+        "billing:read": "billing:read";
+        "billing:write": "billing:write";
+        "tokens:read": "tokens:read";
+        "tokens:create": "tokens:create";
+        "tokens:revoke": "tokens:revoke";
+        "mcp:tools": "mcp:tools";
+        "runtime:manage": "runtime:manage";
+    }>>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    ipAllowlist: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    notBefore: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strict>;
+export type ApiKeyScopedPatchRequest = z.infer<typeof ApiKeyScopedPatchRequestSchema>;
 export declare const ApiKeyParamsSchema: z.ZodObject<{
     apiKeyId: z.ZodString;
 }, z.core.$strip>;