@spacefast/common 0.0.6 → 0.0.8

package/dist/contracts/generated-feature-launch-entries.js

@@ -0,0 +1,518 @@
+// Generated from feature-launch-fixture.json. Do not edit.
+// Regenerate with: cd packages/common && bun run generate:launch-entries
+import { freezeFeatureRegistryEntry } from "./feature-lifecycle-core.js";
+export const launchEntries = Object.freeze([
+    {
+        cohort: "launch",
+        key: "plans.paid.available",
+        name: "Paid acquisition",
+        description: "Controls new paid-plan acquisition; cancellation, portal and reconciliation are independent.",
+        stage: "internal",
+        surface: false,
+        defaultEnabled: false,
+        assignmentScopes: ["team", "global"],
+        docs: null,
+        owner: "team:commerce",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: null,
+        gaAt: null,
+        allowedActorPolicies: ["request_actor"],
+        downRamp: {
+            code: "paid_acquisition_stop",
+            summary: "Deny new acquisition; allow cancel, portal, provider reconciliation and purchase recovery.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "anonymous.publishing",
+        name: "Anonymous publishing",
+        description: "Allows unauthenticated creation and publishing.",
+        stage: "ga",
+        surface: true,
+        defaultEnabled: true,
+        assignmentScopes: ["global"],
+        docs: {
+            channel: "public",
+            slug: "/docs/publishing/anonymous",
+            feedbackUrl: null,
+        },
+        owner: "team:publishing",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-07-26",
+        removeAfter: "2026-08-11",
+        gaAt: "2026-07-12",
+        allowedActorPolicies: ["request_actor", "global_policy"],
+        downRamp: {
+            code: "anonymous_publish_stop",
+            summary: "Deny new anonymous content/version/upload authorization or commit/finalize/promote/push side effects; already-issued bounded staging ingress stays quarantined, while static serving and service cleanup remain.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "domains.catalog",
+        name: "Domain catalog",
+        description: "Controls authenticated domain product/catalog operations; public suggestions, availability and WHOIS remain unflagged.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/domains/catalog",
+            feedbackUrl: null,
+        },
+        owner: "team:domains",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor"],
+        downRamp: {
+            code: "domain_catalog_hide",
+            summary: "Hide authenticated catalog; public suggestions, availability and WHOIS remain.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "domains.registration",
+        name: "Domain registration",
+        description: "Controls registration status, purchase, renewal, transfer-in and registration settings.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/domains/registration",
+            feedbackUrl: null,
+        },
+        owner: "team:domains",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "persisted_request_actor"],
+        downRamp: {
+            code: "domain_registration_stop",
+            summary: "Deny new customer mutations and unstarted provider submits; generic existing-domain read plus service-only reconciliation/compensation for externally committed work continue.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "domains.dns_management",
+        name: "DNS management",
+        description: "Controls customer DNS zones, nameservers and records.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/domains/dns-management",
+            feedbackUrl: null,
+        },
+        owner: "team:domains",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "persisted_request_actor"],
+        downRamp: {
+            code: "dns_management_stop",
+            summary: "Deny customer mutation and unstarted provider apply; generic authoritative read plus service-only rollback/reconciliation for externally committed work continue.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "domains.wpcom_dns",
+        name: "WordPress.com DNS automation",
+        description: "Controls WordPress.com-owned DNS automation.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/domains/wpcom-dns",
+            feedbackUrl: null,
+        },
+        owner: "team:domains",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor"],
+        downRamp: {
+            code: "wpcom_dns_stop",
+            summary: "Deny new automation; service/operator detach and reconciliation continue.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "domains.domain_connect",
+        name: "Domain Connect",
+        description: "Controls one-click Domain Connect DNS setup.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/domains/domain-connect",
+            feedbackUrl: null,
+        },
+        owner: "team:domains",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "persisted_request_actor"],
+        downRamp: {
+            code: "domain_connect_stop",
+            summary: "Deny new setup and every uncommitted callback; after an authenticated external commit, narrowly typed service-only reconciliation or compensation continues idempotently.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "domains.proxy_bindings",
+        name: "Domain proxy bindings",
+        description: "Controls team proxy bindings to external upstreams.",
+        stage: "private_beta",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["team", "global"],
+        docs: {
+            channel: "public",
+            slug: "/docs/domains/proxy-bindings",
+            feedbackUrl: null,
+        },
+        owner: "team:domains",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["resource_team"],
+        downRamp: {
+            code: "proxy_binding_stop",
+            summary: "Deny new binds; discoverable authenticated read/detach plus service reconciliation continue.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "annotations.preview_loader",
+        name: "Collab preview loader",
+        description: "Controls preview loader/config delivery.",
+        stage: "private_beta",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["team", "global"],
+        docs: {
+            channel: "public",
+            slug: "/docs/collab/preview-loader",
+            feedbackUrl: null,
+        },
+        owner: "team:collaboration",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["resource_team"],
+        downRamp: {
+            code: "preview_loader_stop",
+            summary: "Stop new loader/config delivery; immutable preview data remains.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "annotations.comments",
+        name: "Collab comments",
+        description: "Controls comment, reply and collaboration operations.",
+        stage: "private_beta",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "public",
+            slug: "/docs/collab",
+            feedbackUrl: null,
+        },
+        owner: "team:collaboration",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "persisted_request_actor", "resource_team"],
+        downRamp: {
+            code: "comments_stop",
+            summary: "Deny every customer comment read/write route and deferred task; internal operator export/cleanup continue.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "annotations.notices",
+        name: "Collab notices",
+        description: "Controls notice token minting, publishing and projection.",
+        stage: "internal",
+        surface: false,
+        defaultEnabled: false,
+        assignmentScopes: ["team", "global"],
+        docs: null,
+        owner: "team:collaboration",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: null,
+        gaAt: null,
+        allowedActorPolicies: ["resource_team"],
+        downRamp: {
+            code: "notices_stop",
+            summary: "Stop mint/publish; service/operator revoke and cleanup continue.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "annotations.published_comments",
+        name: "Published-host Collab comments",
+        description: "Controls Collab comment overlay on published hosts.",
+        stage: "private_beta",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["team", "global"],
+        docs: {
+            channel: "public",
+            slug: "/docs/collab/published-comments",
+            feedbackUrl: null,
+        },
+        owner: "team:collaboration",
+        requires: ["annotations.comments"],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["resource_team"],
+        downRamp: {
+            code: "published_comments_stop",
+            summary: "Stop published-host injection; stored data remains only for operator export/cleanup.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "sites.dedicated_runtime",
+        name: "Dedicated runtime",
+        description: "Controls dedicated-site placement, management and gated serving.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/sites/dedicated-runtime",
+            feedbackUrl: null,
+        },
+        owner: "team:runtime",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "resource_team"],
+        downRamp: {
+            code: "dedicated_runtime_stop",
+            summary: "Deny customer mutation and new placement/materialization immediately; serve-time revocation of already-materialized output lands with the deferred runtime-proof slice; operator recovery/export/delete remain; downloaded bytes cannot be recalled.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "build.content_pipeline",
+        name: "Content pipeline",
+        description: "Controls publish/finalize use of the content transformation pipeline.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/build/content-pipeline",
+            feedbackUrl: null,
+        },
+        owner: "team:build-platform",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["resource_team"],
+        downRamp: {
+            code: "content_pipeline_stop",
+            summary: "Deny next build/finalize; completed immutable output remains.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "tags",
+        name: "Tag Manager",
+        description: "Controls Tag Manager APIs, surfaces and its module inside the shared SDK container.",
+        stage: "private_beta",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["team", "global"],
+        docs: {
+            channel: "public",
+            slug: "/docs/tags",
+            feedbackUrl: null,
+        },
+        owner: "team:tag-manager",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "resource_team"],
+        downRamp: {
+            code: "tags_stop",
+            summary: "Deny every customer Tag API and dynamic module delivery; internal operator export/cleanup and platform-generated inert marker bytes remain.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "zero",
+        name: "Zero",
+        description: "Controls Zero APIs, activation and dynamic invocation.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/zero",
+            feedbackUrl: null,
+        },
+        owner: "team:zero",
+        requires: ["sites.dedicated_runtime"],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["resource_team"],
+        downRamp: {
+            code: "zero_stop",
+            summary: "Stop activation/invocation; operator export/delete/migration recovery remain.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "access.invites",
+        name: "Access invites",
+        description: "Controls account-less viewer invitation workflows.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/access/invites",
+            feedbackUrl: null,
+        },
+        owner: "team:access",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "persisted_request_actor"],
+        downRamp: {
+            code: "invites_stop",
+            summary: "Deny every customer invite route and deferred delivery; internal operator cancel/revoke and service cleanup continue.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "access.sso_connections",
+        name: "SSO connections",
+        description: "Controls team OIDC connection creation and update.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/access/sso-connections",
+            feedbackUrl: null,
+        },
+        owner: "team:access",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "persisted_request_actor"],
+        downRamp: {
+            code: "sso_connections_stop",
+            summary: "Deny every customer SSO connection route and callback; internal operator revoke/cleanup continue.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "access.byo_issuers",
+        name: "Bring-your-own issuers",
+        description: "Controls owner-held external token issuer creation and update.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/access/byo-issuers",
+            feedbackUrl: null,
+        },
+        owner: "team:access",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor", "persisted_request_actor"],
+        downRamp: {
+            code: "byo_issuers_stop",
+            summary: "Deny every customer issuer route and callback; internal operator revoke/cleanup continue.",
+        },
+    },
+    {
+        cohort: "launch",
+        key: "spaces.slug_rename",
+        name: "Space slug rename",
+        description: "Changes mutable space identity metadata while the stable managed hostname and hostname rows remain unchanged.",
+        stage: "internal",
+        surface: true,
+        defaultEnabled: false,
+        assignmentScopes: ["user", "team", "global"],
+        docs: {
+            channel: "handbook",
+            slug: "/features/spaces/slug-rename",
+            feedbackUrl: null,
+        },
+        owner: "team:spaces",
+        requires: [],
+        lifecycleAdoptedAt: "2026-07-12",
+        reviewAfter: "2026-08-11",
+        removeAfter: "2026-10-10",
+        gaAt: null,
+        allowedActorPolicies: ["request_actor"],
+        downRamp: {
+            code: "slug_rename_stop",
+            summary: "Deny every new stable-host slug rename; the atomic metadata write has no deferred feature continuation.",
+        },
+    },
+].map((definition) => freezeFeatureRegistryEntry(definition)));
+export const registryHash = "sha256:bb171bdc1b4815eae685a2c97c5ab5042faf5b1fa0a99ad9ac4406d14210381d";

package/dist/contracts/ids.d.ts

@@ -1,3 +1,4 @@
+import { z } from "zod";
 export declare const ID_PREFIXES: {
     readonly ten: "Tenant";
     readonly site: "Site";
@@ -15,6 +16,7 @@ export declare const ID_PREFIXES: {
     readonly exp: "SpaceExport";
     readonly trf: "SpaceTransfer";
     readonly op: "Operation";
+    readonly pub: "Publish";
     readonly whk: "Webhook";
     readonly whd: "WebhookDelivery";
     readonly rec: "DnsRecord";
@@ -35,6 +37,8 @@ export declare const ID_PREFIXES: {
 export type IdPrefix = keyof typeof ID_PREFIXES;
 /** Any registered public resource id, e.g. `spc_…` or `ver_…`. */
 export type Id = `${IdPrefix}_${string}`;
+/** Validate an id belonging to one registered public resource family. */
+export declare function registeredIdSchema<P extends IdPrefix>(prefix: P): z.ZodCustom<`${P}_${string}`, `${P}_${string}`>;
 export declare const MAIN_TENANT_ID = "ten_main";
 /** Mint a globally unique id for a registered public resource prefix. */
 export declare function createId<P extends IdPrefix>(prefix: P): `${P}_${string}`;

package/dist/contracts/ids.js

@@ -1,3 +1,4 @@
+import { z } from "zod";
 // Id prefix registry (internal-docs/platform.md "Id prefix registry", L1106-1127).
 // Every PUBLIC resource registers a prefix here before it ships; ids are globally
 // unique and handle ids (operations, exports, imports, transfers, builds) are
@@ -22,6 +23,7 @@ export const ID_PREFIXES = {
     exp: "SpaceExport",
     trf: "SpaceTransfer",
     op: "Operation",
+    pub: "Publish",
     whk: "Webhook",
     whd: "WebhookDelivery",
     rec: "DnsRecord",
@@ -40,6 +42,12 @@ export const ID_PREFIXES = {
     stk: "ServiceToken",
     acn: "AccessConnection",
 };
+/** Validate an id belonging to one registered public resource family. */
+export function registeredIdSchema(prefix) {
+    return z.custom((value) => typeof value === "string" &&
+        value.startsWith(`${prefix}_`) &&
+        /^[A-Za-z0-9]+$/.test(value.slice(prefix.length + 1)), `Invalid ${ID_PREFIXES[prefix]} id`);
+}
 // The main Stattic tenant every self-serve team/user/resource lives under. A
 // well-known CONSTANT, never configuration: grammatically a normal tenant id with
 // zero special cases in contracts, policy URIs, or parsers (spec L1100-1105).