@spacefast/common 0.2.1 → 0.4.1

package/dist/contracts/functions.d.ts

@@ -388,6 +388,8 @@ export declare const functionsWorkerArtifactSchema: z.ZodObject<{
         spam: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
         email: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
         content: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+        storage: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+        connectors: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
     }, z.core.$strip>>;
     platform: z.ZodDefault<z.ZodObject<{
         nextCache: z.ZodDefault<z.ZodBoolean>;
@@ -401,7 +403,7 @@ export type FunctionsWorkerArtifact = z.infer<typeof functionsWorkerArtifactSche
  * the control plane at finalize so the origin forwards a decision rather than
  * making one. Anything absent fails closed at the relay.
  */
-export declare const FUNCTIONS_DISPATCH_CAPABILITIES: readonly ["storage.read", "storage.write", "db.read", "db.write", "fetch", "log", "next.cache", "gravatar.profile", "spam.check", "email.send"];
+export declare const FUNCTIONS_DISPATCH_CAPABILITIES: readonly ["storage.read", "storage.write", "db.read", "db.write", "fetch", "log", "next.cache", "gravatar.profile", "spam.check", "email.send", "connectors.call", "zero.call"];
 export declare const functionsDispatchCapabilitySchema: z.ZodEnum<{
     fetch: "fetch";
     "storage.read": "storage.read";
@@ -413,6 +415,8 @@ export declare const functionsDispatchCapabilitySchema: z.ZodEnum<{
     "gravatar.profile": "gravatar.profile";
     "spam.check": "spam.check";
     "email.send": "email.send";
+    "connectors.call": "connectors.call";
+    "zero.call": "zero.call";
 }>;
 export type FunctionsDispatchCapability = z.infer<typeof functionsDispatchCapabilitySchema>;
 /**
@@ -432,6 +436,8 @@ export type FunctionsDispatchCapability = z.infer<typeof functionsDispatchCapabi
  */
 export declare function functionsDispatchCapabilities(capabilities: ExecutionCapabilities, platform?: {
     nextCache?: boolean;
+    connectors?: boolean;
+    zero?: boolean;
 }): FunctionsDispatchCapability[];
 /** Logs and the host-local Next cache do not transit the origin relay. */
 export declare function functionsGrantNeedsRelay(granted: readonly FunctionsDispatchCapability[]): boolean;
@@ -449,7 +455,13 @@ export declare const functionsHostConfigSchema: z.ZodObject<{
 }, z.core.$strict>;
 export type FunctionsHostConfig = z.infer<typeof functionsHostConfigSchema>;
 /**
- * The callback a dispatched worker uses for `ctx.db`, `ctx.fetch` and logging.
+ * Workers receive `env.CONNECTORS.call(role, tool, args)` and role proxies when
+ * the Space has connector bindings or its capsule declares roles. `env.ZERO.query(name,
+ * ...args)` and `env.ZERO.mutate(name, ...args)` call this version's capsule.
+ * Both bindings forward a signed visitor session when the request carries one.
+ * Without a visitor, ZERO runs as the Space's service principal.
+ *
+ * The callback a dispatched worker uses for database, services and capsule calls.
  *
  * Each relay call re-enters the space's PHP-FPM pool, the deadlock hazard this
  * product's admission control bounds: a proxied request occupies a worker for
@@ -544,6 +556,8 @@ export declare const functionsSourceFinalizeSchema: z.ZodObject<{
             spam: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
             email: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
             content: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+            storage: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+            connectors: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
         }, z.core.$strip>>;
         platform: z.ZodDefault<z.ZodObject<{
             nextCache: z.ZodDefault<z.ZodBoolean>;
@@ -608,6 +622,8 @@ export declare const functionsRuntimeConfigSchema: z.ZodObject<{
             spam: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
             email: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
             content: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+            storage: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+            connectors: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
         }, z.core.$strip>>;
         platform: z.ZodDefault<z.ZodObject<{
             nextCache: z.ZodDefault<z.ZodBoolean>;
@@ -622,6 +638,9 @@ export declare const functionsRuntimeConfigSchema: z.ZodObject<{
         bundleUrl: z.ZodString;
         seedUrl: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     }, z.core.$strict>;
+    connectors: z.ZodOptional<z.ZodObject<{
+        token: z.ZodString;
+    }, z.core.$strict>>;
     grantedCapabilities: z.ZodDefault<z.ZodArray<z.ZodEnum<{
         fetch: "fetch";
         "storage.read": "storage.read";
@@ -633,6 +652,8 @@ export declare const functionsRuntimeConfigSchema: z.ZodObject<{
         "gravatar.profile": "gravatar.profile";
         "spam.check": "spam.check";
         "email.send": "email.send";
+        "connectors.call": "connectors.call";
+        "zero.call": "zero.call";
     }>>>;
     relay: z.ZodDefault<z.ZodNullable<z.ZodObject<{
         url: z.ZodString;
@@ -697,6 +718,8 @@ export declare const functionsDeployMetadataSchema: z.ZodObject<{
                 spam: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
                 email: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
                 content: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                storage: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                connectors: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
             }, z.core.$strip>>;
             platform: z.ZodDefault<z.ZodObject<{
                 nextCache: z.ZodDefault<z.ZodBoolean>;
@@ -707,6 +730,7 @@ export declare const functionsDeployMetadataSchema: z.ZodObject<{
             names: z.ZodDefault<z.ZodArray<z.ZodString>>;
         }, z.core.$strict>>;
     }, z.core.$strict>;
+    connectorsTokenHash: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 export type FunctionsDeployMetadata = z.infer<typeof functionsDeployMetadataSchema>;
 /**
@@ -782,6 +806,8 @@ export declare const functionsAppSchema: z.ZodObject<{
         spam: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
         email: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
         content: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+        storage: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+        connectors: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
     }, z.core.$strip>>;
     executionState: z.ZodEnum<{
         ready: "ready";

package/dist/contracts/functions.js

@@ -442,6 +442,8 @@ export const FUNCTIONS_DISPATCH_CAPABILITIES = [
     "gravatar.profile",
     "spam.check",
     "email.send",
+    "connectors.call",
+    "zero.call",
 ];
 export const functionsDispatchCapabilitySchema = z.enum(FUNCTIONS_DISPATCH_CAPABILITIES);
 /**
@@ -486,6 +488,10 @@ export function functionsDispatchCapabilities(capabilities, platform = {}) {
     if (platform.nextCache) {
         granted.add("next.cache");
     }
+    if (platform.connectors)
+        granted.add("connectors.call");
+    if (platform.zero)
+        granted.add("zero.call");
     // Filtered from the canonical list so the order is stable: the grant is part
     // of the host's isolate identity, and reordering would retire warm isolates.
     return FUNCTIONS_DISPATCH_CAPABILITIES.filter((capability) => granted.has(capability));
@@ -526,7 +532,13 @@ export const functionsHostConfigSchema = z
 })
     .strict();
 /**
- * The callback a dispatched worker uses for `ctx.db`, `ctx.fetch` and logging.
+ * Workers receive `env.CONNECTORS.call(role, tool, args)` and role proxies when
+ * the Space has connector bindings or its capsule declares roles. `env.ZERO.query(name,
+ * ...args)` and `env.ZERO.mutate(name, ...args)` call this version's capsule.
+ * Both bindings forward a signed visitor session when the request carries one.
+ * Without a visitor, ZERO runs as the Space's service principal.
+ *
+ * The callback a dispatched worker uses for database, services and capsule calls.
  *
  * Each relay call re-enters the space's PHP-FPM pool, the deadlock hazard this
  * product's admission control bounds: a proxied request occupies a worker for
@@ -612,7 +624,14 @@ export const functionsSourceFinalizeSchema = z
 export const functionsRuntimeConfigSchema = functionsSourceFinalizeSchema
     .extend({
     host: functionsHostConfigSchema,
-    grantedCapabilities: z.array(functionsDispatchCapabilitySchema).max(10).default([]),
+    connectors: z
+        .object({ token: z.string().min(1) })
+        .strict()
+        .optional(),
+    grantedCapabilities: z
+        .array(functionsDispatchCapabilitySchema)
+        .max(FUNCTIONS_DISPATCH_CAPABILITIES.length)
+        .default([]),
     relay: functionsRelayConfigSchema.nullable().default(null),
     usage: functionsUsageConfigSchema.nullable().default(null),
     purge: functionsPurgeConfigSchema.nullable().default(null),
@@ -632,6 +651,10 @@ export const functionsDeployMetadataSchema = z
     .object({
     artifactId: z.string().min(1).optional(),
     finalize: functionsSourceFinalizeSchema,
+    connectorsTokenHash: z
+        .string()
+        .regex(/^[a-f0-9]{64}$/)
+        .optional(),
 })
     .strict();
 /**

package/dist/contracts/grant-copy.d.ts

@@ -31,12 +31,14 @@ export declare const GRANT_PURPOSE_COPY: {
     readonly "publish.confirm": "publish a new version";
     readonly "deploy.confirm": "deploy a site";
     readonly "version.rollback.confirm": "roll a site back to an earlier version";
+    readonly "space.delete.confirm": "get temporary permission to delete sites";
     readonly "domain.purchase.confirm": "purchase a domain";
     readonly "domain.dns.confirm": "change domain DNS";
     readonly "device.authorize": "connect the Spacefast CLI";
     readonly "agent_handoff.redeem": "continue a Spacefast handoff";
     readonly "claim.continue": "continue a claimed site";
     readonly "oauth.connect": "connect to Spacefast";
+    readonly connector_tool_call: "run a connector tool";
 };
 export type GrantPurposeCode = keyof typeof GRANT_PURPOSE_COPY;
 /** Never throws: an unknown code renders the neutral fallback, never the code. */

package/dist/contracts/grant-copy.js

@@ -30,12 +30,14 @@ export const GRANT_PURPOSE_COPY = {
     "publish.confirm": "publish a new version",
     "deploy.confirm": "deploy a site",
     "version.rollback.confirm": "roll a site back to an earlier version",
+    "space.delete.confirm": "get temporary permission to delete sites",
     "domain.purchase.confirm": "purchase a domain",
     "domain.dns.confirm": "change domain DNS",
     "device.authorize": "connect the Spacefast CLI",
     "agent_handoff.redeem": "continue a Spacefast handoff",
     "claim.continue": "continue a claimed site",
     "oauth.connect": "connect to Spacefast",
+    connector_tool_call: "run a connector tool",
 };
 /** Never throws: an unknown code renders the neutral fallback, never the code. */
 export function grantPurposeCopy(purposeCode) {

package/dist/contracts/grants-core.d.ts

@@ -0,0 +1,95 @@
+import { z } from "zod";
+export declare const GRANT_CAPABILITIES: readonly ["page.view", "comments.read", "comments.write", "content.publish", "access.manage"];
+export declare const grantCapabilitySchema: z.ZodEnum<{
+    "page.view": "page.view";
+    "comments.read": "comments.read";
+    "comments.write": "comments.write";
+    "content.publish": "content.publish";
+    "access.manage": "access.manage";
+}>;
+export type GrantCapability = z.infer<typeof grantCapabilitySchema>;
+/** An opaque reference to something a grant points at (a version, a branch, a holder). */
+export declare const grantReferenceSchema: z.ZodString;
+/**
+ * A verification key an external token issuer publishes: a key id and a raw
+ * Ed25519 public key, base64url-encoded. Key material, not a host concept — the
+ * same shape serves identity connections and a partner's declared issuers.
+ */
+export declare const identityConnectionPublicKeySchema: z.ZodObject<{
+    kid: z.ZodString;
+    publicKey: z.ZodString;
+}, z.core.$strict>;
+export type IdentityConnectionPublicKey = z.infer<typeof identityConnectionPublicKeySchema>;
+/**
+ * Canonical resource-pattern syntax shared by config compilation and evaluation.
+ * `*` matches one path segment and `**` matches zero or more segments. Wildcards
+ * are whole segments so a pattern can never disguise an encoded separator.
+ *
+ * Unlike URL-route canonicalization, resource patterns retain a terminal
+ * `index.html`: Grants can constrain the visitor-facing route and the artifact
+ * it resolves to independently.
+ */
+export declare function normalizeGrantResourcePattern(input: string): string;
+export declare const grantResourcePatternSchema: z.ZodString;
+export type GrantResourcePattern = z.infer<typeof grantResourcePatternSchema>;
+export declare function uniqueArray(values: readonly unknown[]): boolean;
+export declare const GRANT_RESOURCE_PATTERN_LIMIT = 100;
+export declare const grantResourceSetSchema: z.ZodObject<{
+    include: z.ZodArray<z.ZodString>;
+    exclude: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+export type GrantResourceSet = z.infer<typeof grantResourceSetSchema>;
+export declare const GRANT_TARGET_KINDS: readonly ["live", "version", "branch", "all_versions"];
+export declare const grantTargetKindSchema: z.ZodEnum<{
+    live: "live";
+    version: "version";
+    branch: "branch";
+    all_versions: "all_versions";
+}>;
+export type GrantTargetKind = z.infer<typeof grantTargetKindSchema>;
+export declare const grantTargetSelectorSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"live">;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"version">;
+    versionId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"branch">;
+    branch: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"all_versions">;
+}, z.core.$strict>], "kind">;
+export type GrantTargetSelector = z.infer<typeof grantTargetSelectorSchema>;
+export declare function normalizeGrantNetworkCidr(input: string): string;
+export declare function grantNetworkCidrMatches(cidr: string, ipAddress: string): boolean;
+export declare const grantFrameOriginSchema: z.ZodString;
+export declare const grantConstraintsSchema: z.ZodObject<{
+    notBefore: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodString>;
+    maxUses: z.ZodOptional<z.ZodNumber>;
+    requireVerifiedEmail: z.ZodOptional<z.ZodBoolean>;
+    network: z.ZodOptional<z.ZodObject<{
+        ipCidrs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        countries: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        excludedCountries: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        excludedUserAgentSubstrings: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    frameOrigin: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type GrantConstraints = z.infer<typeof grantConstraintsSchema>;
+/** Field-scoped PATCH shape. `null` clears one constraint without replacing its siblings. */
+export declare const grantConstraintsPatchSchema: z.ZodObject<{
+    notBefore: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    maxUses: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    requireVerifiedEmail: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+    frameOrigin: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    network: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        ipCidrs: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        countries: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        excludedCountries: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        excludedUserAgentSubstrings: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type GrantConstraintsPatch = z.infer<typeof grantConstraintsPatchSchema>;
+export declare function diffGrantConstraints(original: GrantConstraints, draft: GrantConstraints): GrantConstraintsPatch | undefined;
+export declare function applyGrantConstraintsPatch(current: GrantConstraints, patch: GrantConstraintsPatch): GrantConstraints;