@spacefast/common 0.0.9 → 0.0.10

package/dist/contracts/features.js

@@ -14,12 +14,13 @@ export const FEATURE_KEYS = [
     "domains.wpcom_dns",
     "domains.domain_connect",
     "domains.proxy_bindings",
-    "annotations.preview_loader",
-    "annotations.comments",
-    "annotations.anonymous_reviewers",
-    "annotations.cli",
-    "annotations.notices",
-    "annotations.published_comments",
+    "collab.preview_loader",
+    "collab.comments",
+    "collab.anonymous_commenters",
+    "collab.cli",
+    "collab.notices",
+    "collab.published_comments",
+    "collab.drawing",
     "sites.dedicated_runtime",
     "shelf",
     "tags",
@@ -35,7 +36,6 @@ export const FEATURE_KEYS = [
     "access.sso_connections",
     "access.byo_issuers",
     "access.views_panel",
-    "pages.white_label",
 ];
 export const featureKeySchema = z.enum(FEATURE_KEYS).describe("Feature flag key.");
 // Feature override states (env `SPACEFAST_FLAG_*` and the feature_overrides
@@ -114,15 +114,12 @@ export const teamEntitlementsSchema = z
         .describe("Whether `_headers` Basic-Auth rules compile on this plan."),
     externalProxy: z.boolean().describe("Whether external proxy upstreams compile on this plan."),
     dedicatedRuntime: z.boolean().describe("Whether the team can use dedicated runtime sites."),
-    pagesWhiteLabel: z
+    pagesTemplates: z
         .boolean()
-        .describe("Whether the pages.white_label tier compiles (Spacefast branding removed from gate pages)."),
-    pagesCustomHtml: z
+        .describe("Whether _pages/*.html full-page takeovers compile for this team."),
+    hideSpacefastBranding: z
         .boolean()
-        .describe("Whether custom gate-page HTML compiles (401.html/403.html slot overrides and .spacefast/templates/layout.html chrome, access-plan §8/§9 paid tier 1)."),
-    pagesAdvancedTheming: z
-        .boolean()
-        .describe("Whether the sf.theme.jsonc escape-hatch theme tier compiles (access-plan §8/§9 paid tier 1); theme.json and pages.theme basics stay free."),
+        .describe("Whether theme.hideSpacefastBranding removes the badge from default pages."),
     runtimePhpWorkers: z.number().int().describe("PHP workers per serving site."),
     analyticsHourlyGranularity: z
         .boolean()
@@ -214,9 +211,8 @@ export const PLAN_DEFINITIONS = {
         headersBasicAuth: false,
         externalProxy: false,
         dedicatedRuntime: false,
-        pagesWhiteLabel: false,
-        pagesCustomHtml: false,
-        pagesAdvancedTheming: false,
+        pagesTemplates: false,
+        hideSpacefastBranding: false,
         runtimePhpWorkers: 2,
         analyticsHourlyGranularity: false,
     },
@@ -241,9 +237,8 @@ export const PLAN_DEFINITIONS = {
         headersBasicAuth: true,
         externalProxy: true,
         dedicatedRuntime: false,
-        pagesWhiteLabel: false,
-        pagesCustomHtml: true,
-        pagesAdvancedTheming: true,
+        pagesTemplates: true,
+        hideSpacefastBranding: true,
         runtimePhpWorkers: 4,
         analyticsHourlyGranularity: true,
     },
@@ -264,9 +259,8 @@ export const PLAN_DEFINITIONS = {
         headersBasicAuth: true,
         externalProxy: true,
         dedicatedRuntime: false,
-        pagesWhiteLabel: true,
-        pagesCustomHtml: true,
-        pagesAdvancedTheming: true,
+        pagesTemplates: true,
+        hideSpacefastBranding: true,
         runtimePhpWorkers: 4,
         analyticsHourlyGranularity: true,
     },
@@ -279,9 +273,8 @@ export const PLAN_DEFINITIONS = {
         headersBasicAuth: true,
         externalProxy: true,
         dedicatedRuntime: true,
-        pagesWhiteLabel: true,
-        pagesCustomHtml: true,
-        pagesAdvancedTheming: true,
+        pagesTemplates: true,
+        hideSpacefastBranding: true,
         runtimePhpWorkers: 4,
         analyticsHourlyGranularity: true,
     },
@@ -293,9 +286,8 @@ export const PLAN_DEFINITIONS = {
         headersBasicAuth: true,
         externalProxy: true,
         dedicatedRuntime: true,
-        pagesWhiteLabel: true,
-        pagesCustomHtml: true,
-        pagesAdvancedTheming: true,
+        pagesTemplates: true,
+        hideSpacefastBranding: true,
         runtimePhpWorkers: 4,
         analyticsHourlyGranularity: true,
     },
@@ -380,61 +372,70 @@ export const FEATURE_DEFINITIONS = {
             internal: true,
         },
     },
-    "annotations.preview_loader": {
-        key: "annotations.preview_loader",
-        name: "Annotations preview loader",
+    "collab.preview_loader": {
+        key: "collab.preview_loader",
+        name: "Collab preview loader",
         description: "Allows immutable version URLs to receive a no-secret preview overlay configuration.",
         defaultEnabled: false,
         enabledInDevelopment: true,
         enabledForA8c: true,
         planDefaults: {},
     },
-    "annotations.comments": {
-        key: "annotations.comments",
-        name: "Annotation comments",
+    "collab.comments": {
+        key: "collab.comments",
+        name: "Comments",
         description: "Enables Cast-backed comments on eligible immutable version URLs.",
         defaultEnabled: false,
         enabledInDevelopment: true,
         enabledForA8c: true,
         planDefaults: {},
     },
-    "annotations.anonymous_reviewers": {
-        key: "annotations.anonymous_reviewers",
-        name: "Anonymous annotation reviewers",
-        description: "Allows anyone-with-link annotation identities when space policy allows it.",
+    "collab.anonymous_commenters": {
+        key: "collab.anonymous_commenters",
+        name: "Anonymous commenters",
+        description: "Allows anyone with the link to comment when space policy allows it.",
         defaultEnabled: false,
         enabledForA8c: true,
         planDefaults: {},
     },
-    "annotations.cli": {
-        key: "annotations.cli",
-        name: "Annotation CLI access",
-        description: "Enables scriptable annotation read/export/reply/resolve operations.",
+    "collab.cli": {
+        key: "collab.cli",
+        name: "Comments CLI access",
+        description: "Enables scriptable comment read, export, reply, and archive operations.",
         defaultEnabled: false,
         enabledInDevelopment: true,
         enabledForA8c: true,
         planDefaults: {},
     },
-    "annotations.notices": {
-        key: "annotations.notices",
+    "collab.notices": {
+        key: "collab.notices",
         name: "Realtime notices",
         description: "Reserved kill-switch for future realtime preview notices.",
         defaultEnabled: false,
         enabledForA8c: true,
         planDefaults: {},
     },
-    "annotations.published_comments": {
-        key: "annotations.published_comments",
-        name: "Published host annotation comments",
-        description: "Allows the annotation overlay to mount comments on a space's live/published host, not just immutable preview URLs.",
+    "collab.published_comments": {
+        key: "collab.published_comments",
+        name: "Published host comments",
+        description: "Allows the Collab overlay to mount comments on a space's live/published host, not just immutable preview URLs.",
         defaultEnabled: false,
         // ON in local dev so the Spacefast-native published path is exercised end-to-end
-        // alongside annotations.comments (which already defaults on in dev).
+        // alongside collab.comments (which already defaults on in dev).
         // Production stays gated behind the per-space toggle.
         enabledInDevelopment: true,
         enabledForA8c: true,
         planDefaults: {},
     },
+    "collab.drawing": {
+        key: "collab.drawing",
+        name: "Collab drawing",
+        description: "Enables drawing feedback in the Collab overlay.",
+        defaultEnabled: true,
+        enabledInDevelopment: true,
+        enabledForA8c: true,
+        planDefaults: {},
+    },
     "sites.dedicated_runtime": {
         key: "sites.dedicated_runtime",
         name: "Dedicated runtime sites",
@@ -529,15 +530,6 @@ export const FEATURE_DEFINITIONS = {
         enabledForA8c: true,
         planDefaults: {},
     },
-    "pages.white_label": {
-        key: "pages.white_label",
-        name: "White-label platform pages",
-        description: "Removes Spacefast branding from the challenge/deny page tier between theme tokens and full custom pages (access-plan §5.7, X-16).",
-        defaultEnabled: false,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
 };
 export const featureStateSourceSchema = z
     .enum(["kill_switch", "env", "override", "default"])

package/dist/contracts/generated-feature-launch-entries.d.ts

@@ -1,2 +1,2 @@
-export declare const launchEntries: readonly import("./feature-lifecycle-core.js").FeatureRegistryEntry<"zero" | "plans.paid.available" | "anonymous.publishing" | "domains.registration" | "domains.dns_management" | "domains.wpcom_dns" | "domains.domain_connect" | "domains.proxy_bindings" | "annotations.preview_loader" | "annotations.comments" | "annotations.notices" | "annotations.published_comments" | "sites.dedicated_runtime" | "tags" | "access.invites" | "access.sso_connections" | "access.byo_issuers" | "domains.catalog" | "build.content_pipeline" | "spaces.slug_rename", "annotations.comments" | "sites.dedicated_runtime">[];
-export declare const registryHash = "sha256:bb171bdc1b4815eae685a2c97c5ab5042faf5b1fa0a99ad9ac4406d14210381d";
+export declare const launchEntries: readonly import("./feature-lifecycle-core.js").FeatureRegistryEntry<"zero" | "plans.paid.available" | "anonymous.publishing" | "domains.registration" | "domains.dns_management" | "domains.wpcom_dns" | "domains.domain_connect" | "domains.proxy_bindings" | "collab.preview_loader" | "collab.comments" | "collab.notices" | "collab.published_comments" | "sites.dedicated_runtime" | "tags" | "access.invites" | "access.sso_connections" | "access.byo_issuers" | "domains.catalog" | "build.content_pipeline" | "spaces.slug_rename", "collab.comments" | "sites.dedicated_runtime">[];
+export declare const registryHash = "sha256:a1d9cbc355096bb6a473c87d7cb7624d47bd39ad2dd476d7d8eaa728dd94e93f";

package/dist/contracts/generated-feature-launch-entries.js

@@ -208,7 +208,7 @@ export const launchEntries = Object.freeze([
     },
     {
         cohort: "launch",
-        key: "annotations.preview_loader",
+        key: "collab.preview_loader",
         name: "Collab preview loader",
         description: "Controls preview loader/config delivery.",
         stage: "private_beta",
@@ -234,7 +234,7 @@ export const launchEntries = Object.freeze([
     },
     {
         cohort: "launch",
-        key: "annotations.comments",
+        key: "collab.comments",
         name: "Collab comments",
         description: "Controls comment, reply and collaboration operations.",
         stage: "private_beta",
@@ -260,7 +260,7 @@ export const launchEntries = Object.freeze([
     },
     {
         cohort: "launch",
-        key: "annotations.notices",
+        key: "collab.notices",
         name: "Collab notices",
         description: "Controls notice token minting, publishing and projection.",
         stage: "internal",
@@ -282,7 +282,7 @@ export const launchEntries = Object.freeze([
     },
     {
         cohort: "launch",
-        key: "annotations.published_comments",
+        key: "collab.published_comments",
         name: "Published-host Collab comments",
         description: "Controls Collab comment overlay on published hosts.",
         stage: "private_beta",
@@ -295,7 +295,7 @@ export const launchEntries = Object.freeze([
             feedbackUrl: null,
         },
         owner: "team:collaboration",
-        requires: ["annotations.comments"],
+        requires: ["collab.comments"],
         lifecycleAdoptedAt: "2026-07-12",
         reviewAfter: "2026-08-11",
         removeAfter: "2026-10-10",
@@ -515,4 +515,4 @@ export const launchEntries = Object.freeze([
         },
     },
 ].map((definition) => freezeFeatureRegistryEntry(definition)));
-export const registryHash = "sha256:bb171bdc1b4815eae685a2c97c5ab5042faf5b1fa0a99ad9ac4406d14210381d";
+export const registryHash = "sha256:a1d9cbc355096bb6a473c87d7cb7624d47bd39ad2dd476d7d8eaa728dd94e93f";

package/dist/contracts/ids.d.ts

@@ -4,7 +4,7 @@ export declare const ID_PREFIXES: {
     readonly site: "Site";
     readonly spc: "Space";
     readonly ver: "Version";
-    readonly ann: "AnnotationThread";
+    readonly cmt: "CommentThread";
     readonly bld: "Build";
     readonly dom: "Domain";
     readonly dbn: "DomainBinding";

package/dist/contracts/ids.js

@@ -11,7 +11,7 @@ export const ID_PREFIXES = {
     site: "Site",
     spc: "Space",
     ver: "Version",
-    ann: "AnnotationThread",
+    cmt: "CommentThread",
     bld: "Build",
     dom: "Domain",
     dbn: "DomainBinding",

package/dist/contracts/oauth-resources.d.ts

@@ -36,6 +36,13 @@ export declare function normalizeOAuthResourceIdentifier(resource: string): stri
  * (loopback dev, docker test hosts) — callers fall back to the api origin.
  */
 export declare function oauthMcpOriginFromApiOrigin(apiOrigin: string | URL): string | null;
+/**
+ * The hosted MCP endpoint advertised for a configured api origin: the derived
+ * mcp origin in RFC 8707 canonical form, falling back to the api origin itself
+ * for loopback/dev stacks without an mcp subdomain. Single source for the
+ * dashboard runtime (`hostedMcpEndpoint`) and build-time document generation.
+ */
+export declare function oauthHostedMcpEndpointForApiOrigin(apiOrigin: string | URL): string;
 export declare function oauthAuthorizationServerUrl(origin: string | URL): string;
 export declare function oauthTokenEndpointUrl(origin: string | URL): string;
 export declare function oauthResourceKeyForPathname(pathname: string): OAuthResourceKey | null;

package/dist/contracts/oauth-resources.js

@@ -77,6 +77,15 @@ export function oauthMcpOriginFromApiOrigin(apiOrigin) {
     url.hostname = `mcp.${url.hostname.slice("api.".length)}`;
     return url.origin;
 }
+/**
+ * The hosted MCP endpoint advertised for a configured api origin: the derived
+ * mcp origin in RFC 8707 canonical form, falling back to the api origin itself
+ * for loopback/dev stacks without an mcp subdomain. Single source for the
+ * dashboard runtime (`hostedMcpEndpoint`) and build-time document generation.
+ */
+export function oauthHostedMcpEndpointForApiOrigin(apiOrigin) {
+    return oauthMcpResourceUrl(oauthMcpOriginFromApiOrigin(apiOrigin) ?? apiOrigin);
+}
 export function oauthAuthorizationServerUrl(origin) {
     return new URL(OAUTH_AUTHORIZATION_SERVER_PATH, origin).toString();
 }
@@ -84,8 +93,7 @@ export function oauthTokenEndpointUrl(origin) {
     return new URL(`${OAUTH_AUTHORIZATION_SERVER_PATH}/oauth2/token`, origin).toString();
 }
 export function oauthResourceKeyForPathname(pathname) {
-    if (pathname === OAUTH_API_RESOURCE_PATH ||
-        pathname.startsWith(`${OAUTH_API_RESOURCE_PATH}/`)) {
+    if (pathname === OAUTH_API_RESOURCE_PATH || pathname.startsWith(`${OAUTH_API_RESOURCE_PATH}/`)) {
         return "api";
     }
     return null;

package/dist/contracts/operations.d.ts

@@ -9,7 +9,6 @@ export declare const userOperationKindSchema: z.ZodEnum<{
     domain_ssl_retry: "domain_ssl_retry";
     domain_registration_submit: "domain_registration_submit";
     domain_transfer_submit: "domain_transfer_submit";
-    domain_zone_publish: "domain_zone_publish";
     domain_dns_apply: "domain_dns_apply";
     domain_lifecycle: "domain_lifecycle";
     variable_cascade: "variable_cascade";
@@ -67,7 +66,6 @@ export declare const UserOperationSchema: z.ZodObject<{
         domain_ssl_retry: "domain_ssl_retry";
         domain_registration_submit: "domain_registration_submit";
         domain_transfer_submit: "domain_transfer_submit";
-        domain_zone_publish: "domain_zone_publish";
         domain_dns_apply: "domain_dns_apply";
         domain_lifecycle: "domain_lifecycle";
         variable_cascade: "variable_cascade";
@@ -114,6 +112,7 @@ export declare const operationListQuerySchema: z.ZodObject<{
     cursor: z.ZodOptional<z.ZodString>;
     resourceType: z.ZodOptional<z.ZodString>;
     resourceId: z.ZodOptional<z.ZodString>;
+    spaceId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const operationListResponseSchema: z.ZodObject<{
     data: z.ZodArray<z.ZodObject<{
@@ -165,7 +164,6 @@ export declare const operationListResponseSchema: z.ZodObject<{
             domain_ssl_retry: "domain_ssl_retry";
             domain_registration_submit: "domain_registration_submit";
             domain_transfer_submit: "domain_transfer_submit";
-            domain_zone_publish: "domain_zone_publish";
             domain_dns_apply: "domain_dns_apply";
             domain_lifecycle: "domain_lifecycle";
             variable_cascade: "variable_cascade";

package/dist/contracts/operations.js

@@ -9,7 +9,6 @@ export const userOperationKindSchema = z.enum([
     "domain_ssl_retry",
     "domain_registration_submit",
     "domain_transfer_submit",
-    "domain_zone_publish",
     "domain_dns_apply",
     "domain_lifecycle",
     "variable_cascade",
@@ -55,6 +54,11 @@ export const operationListQuerySchema = cursorListQuerySchema.extend({
         .optional()
         .describe("Filter to operations touching one resource type, e.g. `space`."),
     resourceId: z.string().min(1).optional().describe("Filter to operations touching one resource."),
+    spaceId: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Filter to operations pertaining to one Space — its own operations plus those of its versions and builds. The Space must be readable by the caller."),
 });
 export const operationListResponseSchema = z.object({
     data: z.array(UserOperationSchema),

package/dist/contracts/pages.d.ts

@@ -0,0 +1,70 @@
+import { z } from "zod";
+export declare const SITE_PAGE_IDS: readonly ["404", "password", "denied", "login", "index", "preview"];
+export declare const sitePageIdSchema: z.ZodEnum<{
+    login: "login";
+    password: "password";
+    denied: "denied";
+    index: "index";
+    preview: "preview";
+    404: "404";
+}>;
+export type SitePageId = z.infer<typeof sitePageIdSchema>;
+export declare const ROUTE_PAGE_IDS: readonly ["404", "password", "denied", "login"];
+export declare const routePageIdSchema: z.ZodEnum<{
+    login: "login";
+    password: "password";
+    denied: "denied";
+    404: "404";
+}>;
+export type RoutePageId = z.infer<typeof routePageIdSchema>;
+export declare const CUSTOM_PAGE_IDS: readonly ["404", "password", "denied", "index", "preview"];
+export declare const customPageIdSchema: z.ZodEnum<{
+    password: "password";
+    denied: "denied";
+    index: "index";
+    preview: "preview";
+    404: "404";
+}>;
+export type CustomPageId = z.infer<typeof customPageIdSchema>;
+export declare const PLATFORM_PAGE_IDS: readonly ["undeployed", "suspended", "legal", "visit-cap", "gone", "runtime-error", "rate-limited", "tier-unavailable", "proxy-error", "method-not-allowed", "content-too-large"];
+export declare const platformPageIdSchema: z.ZodEnum<{
+    legal: "legal";
+    suspended: "suspended";
+    undeployed: "undeployed";
+    "visit-cap": "visit-cap";
+    gone: "gone";
+    "runtime-error": "runtime-error";
+    "rate-limited": "rate-limited";
+    "tier-unavailable": "tier-unavailable";
+    "proxy-error": "proxy-error";
+    "method-not-allowed": "method-not-allowed";
+    "content-too-large": "content-too-large";
+}>;
+export type PlatformPageId = z.infer<typeof platformPageIdSchema>;
+export declare const PAGE_ELEMENTS: readonly ["sf-content", "sf-password-form", "sf-login", "sf-files", "sf-file", "sf-logo", "sf-name"];
+export type PageElement = (typeof PAGE_ELEMENTS)[number];
+export type PageDefinition = {
+    id: SitePageId;
+    status: 200 | 401 | 403 | 404;
+    cacheControl: "public, max-age=0, must-revalidate" | "private, no-store";
+    noindex: boolean;
+    customTemplate: boolean;
+};
+export declare const PAGE_CATALOG: Readonly<Record<SitePageId, PageDefinition>>;
+export declare const PAGE_SOURCE_MAX_BYTES: number;
+export declare const PAGES_DIRECTORY = "_pages";
+export declare const PAGE_LAYOUT_FILE = "_layout.html";
+export declare const pageArtifactKeySchema: z.ZodString;
+export declare const runtimePagesSchema: z.ZodObject<{
+    routes: z.ZodRecord<z.ZodString, z.ZodObject<{
+        pages: z.ZodOptional<z.ZodRecord<z.ZodEnum<{
+            login: "login";
+            password: "password";
+            denied: "denied";
+            404: "404";
+        }>, z.ZodString>>;
+        index: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    previews: z.ZodRecord<z.ZodString, z.ZodString>;
+}, z.core.$strip>;
+export type RuntimePages = z.infer<typeof runtimePagesSchema>;

package/dist/contracts/pages.js

@@ -0,0 +1,89 @@
+import { z } from "zod";
+export const SITE_PAGE_IDS = ["404", "password", "denied", "login", "index", "preview"];
+export const sitePageIdSchema = z.enum(SITE_PAGE_IDS);
+export const ROUTE_PAGE_IDS = ["404", "password", "denied", "login"];
+export const routePageIdSchema = z.enum(ROUTE_PAGE_IDS);
+export const CUSTOM_PAGE_IDS = ["404", "password", "denied", "index", "preview"];
+export const customPageIdSchema = z.enum(CUSTOM_PAGE_IDS);
+export const PLATFORM_PAGE_IDS = [
+    "undeployed",
+    "suspended",
+    "legal",
+    "visit-cap",
+    "gone",
+    "runtime-error",
+    "rate-limited",
+    "tier-unavailable",
+    "proxy-error",
+    "method-not-allowed",
+    "content-too-large",
+];
+export const platformPageIdSchema = z.enum(PLATFORM_PAGE_IDS);
+export const PAGE_ELEMENTS = [
+    "sf-content",
+    "sf-password-form",
+    "sf-login",
+    "sf-files",
+    "sf-file",
+    "sf-logo",
+    "sf-name",
+];
+export const PAGE_CATALOG = {
+    "404": {
+        id: "404",
+        status: 404,
+        cacheControl: "public, max-age=0, must-revalidate",
+        noindex: false,
+        customTemplate: true,
+    },
+    password: {
+        id: "password",
+        status: 401,
+        cacheControl: "private, no-store",
+        noindex: true,
+        customTemplate: true,
+    },
+    denied: {
+        id: "denied",
+        status: 403,
+        cacheControl: "private, no-store",
+        noindex: true,
+        customTemplate: true,
+    },
+    login: {
+        id: "login",
+        status: 401,
+        cacheControl: "private, no-store",
+        noindex: true,
+        customTemplate: false,
+    },
+    index: {
+        id: "index",
+        status: 200,
+        cacheControl: "public, max-age=0, must-revalidate",
+        noindex: false,
+        customTemplate: true,
+    },
+    preview: {
+        id: "preview",
+        status: 200,
+        cacheControl: "public, max-age=0, must-revalidate",
+        noindex: false,
+        customTemplate: true,
+    },
+};
+export const PAGE_SOURCE_MAX_BYTES = 2 * 1024 * 1024;
+export const PAGES_DIRECTORY = "_pages";
+export const PAGE_LAYOUT_FILE = "_layout.html";
+export const pageArtifactKeySchema = z
+    .string()
+    .min(1)
+    .max(240)
+    .regex(/^[a-z0-9-]+$/);
+export const runtimePagesSchema = z.object({
+    routes: z.record(z.string().startsWith("/").max(2048), z.object({
+        pages: z.record(routePageIdSchema, pageArtifactKeySchema).optional(),
+        index: pageArtifactKeySchema.optional(),
+    })),
+    previews: z.record(z.string().startsWith("/").max(2048), pageArtifactKeySchema),
+});

package/dist/contracts/publishes.d.ts

@@ -72,6 +72,11 @@ export declare const publishSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         updated: "updated";
     }>;
     capturedBaseVersionId: z.ZodOptional<z.ZodNullable<z.ZodCustom<`ver_${string}`, `ver_${string}`>>>;
+    claim: z.ZodOptional<z.ZodObject<{
+        token: z.ZodString;
+        url: z.ZodString;
+        expiresAt: z.ZodString;
+    }, z.core.$strip>>;
     result: z.ZodObject<{
         space: z.ZodObject<{
             id: z.ZodCustom<`spc_${string}`, `spc_${string}`>;

package/dist/contracts/publishes.js

@@ -24,7 +24,8 @@ const cancellableActionSchema = z.object({
     publishId: publishIdSchema,
 });
 export const publishSchema = z.discriminatedUnion("state", [
-    z.object({
+    z
+        .object({
         id: publishIdSchema,
         state: z.literal("awaiting_upload"),
         target: z
@@ -40,22 +41,31 @@ export const publishSchema = z.discriminatedUnion("state", [
         })
             .optional(),
         expiresAt: z.string().datetime().optional(),
-        upload: z.object({
-            missing: z.array(z.object({
+        upload: z
+            .object({
+            missing: z
+                .array(z.object({
                 path: z.string(),
-                sha256: z.string().regex(/^[0-9a-f]{64}$/).nullable(),
+                sha256: z
+                    .string()
+                    .regex(/^[0-9a-f]{64}$/)
+                    .nullable(),
                 size: z.number().int().nonnegative(),
                 url: z.string().url(),
                 headers: z.record(z.string(), z.string()),
                 expiresAt: z.string().datetime(),
-            })).min(1),
-        }).optional(),
-    }).refine((publish) => publish.counts === undefined ||
+            }))
+                .min(1),
+        })
+            .optional(),
+    })
+        .refine((publish) => publish.counts === undefined ||
         publish.upload === undefined ||
         publish.counts.missing === publish.upload.missing.length, {
         message: "Upload instructions must match the missing upload count.",
         path: ["upload", "missing"],
-    }).refine((publish) => publish.counts !== undefined || publish.upload !== undefined, {
+    })
+        .refine((publish) => publish.counts !== undefined || publish.upload !== undefined, {
         message: "An awaiting_upload publish must carry counts or upload instructions.",
         path: ["counts"],
     }),
@@ -87,6 +97,13 @@ export const publishSchema = z.discriminatedUnion("state", [
         state: z.literal("succeeded"),
         outcome: z.enum(["created", "updated", "unchanged"]),
         capturedBaseVersionId: versionIdSchema.nullable().optional(),
+        claim: z
+            .object({
+            token: z.string().min(1),
+            url: z.string().url(),
+            expiresAt: z.string().datetime(),
+        })
+            .optional(),
         result: z.object({
             space: z.object({ id: spaceIdSchema, liveUrl: z.string().url() }),
             version: z.object({ id: versionIdSchema, immutableUrl: z.string().url() }),