@spacefast/common 0.2.1 → 0.4.1

package/dist/docs/skills.d.ts

@@ -27,12 +27,12 @@ export declare const SPACEFAST_SKILLS: readonly [{
     readonly whenToUse: "Use when the user wants a new website built, improved, or launched.";
     readonly keywords: readonly ["create", "website", "design", "build", "responsive", "launch", "publish"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["publish", "operation_status", "show_space_deployments"];
+    readonly tools: readonly ["publish", "operation_status", "show_space"];
     readonly docs: readonly ["quickstart", "publishing"];
-    readonly instructions: readonly ["Use the user's brief. Infer optional design choices from the content and workspace.", "Ask a question only when a missing required value blocks safe work.", "Inspect the workspace. Reuse its framework, package manager, components, assets, and build commands when suitable.", "Build an accessible site with real content, responsive layouts, clear hierarchy, and useful interaction states.", "Run the real build. Check mobile and desktop layouts, links, assets, keyboard use, contrast, and layout stability.", "Review the final diff. Remove secrets and local authentication data from the artifact.", "Call `publish` once with the built output. Return useful access, live, and version URLs from the receipt. If the publish is anonymous, point the user to the claim action in the publish card and state its expiry.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
-    readonly verification: readonly ["Call `show_space_deployments` with `space: publish.result.receipt.space.id`. Confirm that the intended version is ready and current.", "If the deployment failed or stalled, report its stable error code and actionable diagnostics.", "Open the live URL. Verify the main page, navigation, assets, responsive layout, and primary call to action."];
+    readonly instructions: readonly ["Use the user's brief. Infer optional design choices from the content and workspace.", "Ask a question only when a missing required value blocks safe work.", "Inspect the workspace. Reuse its framework, package manager, components, assets, and build commands when suitable.", "Build an accessible site with real content, responsive layouts, clear hierarchy, and useful interaction states.", "Run the real build. Check mobile and desktop layouts, links, assets, keyboard use, contrast, and layout stability.", "Review the final diff. Remove secrets and local authentication data from the artifact.", "Call `publish` once with the built output. Return useful access, live, and version URLs from the receipt. If the publish is anonymous, point the user to the claim action in the publish card and state its expiry.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
+    readonly verification: readonly ["If `publish.result.receipt.claim` is present, use the completed publish receipt as verification. Do not call `show_space`. The user must claim the Space before you open a detailed view.", "If `publish.result.receipt.claim` is absent, call `show_space` with `request.view: \"deployments\"` and `request.input.space: publish.result.receipt.space.id`. Confirm that the intended version is ready and current.", "If the deployment failed or stalled, report its stable error code and actionable diagnostics.", "For a claimed Space, open its access URL. Verify the main page, navigation, assets, responsive layout, and primary call to action."];
     readonly runtimeNotes: {
-        readonly local: "On-Device can work directly inside the configured local workspace root and publish a local build path.";
+        readonly local: "On Linux, On-Device can publish a build path relative to the configured workspace root. On other systems, publish new artifacts inline or use a permitted CLI or HTTP upload.";
         readonly hosted: "Hosted has no filesystem. Generate small files in the client and publish them inline, or use catalog manifest and import operations for larger artifacts.";
     };
     readonly prompt: true;
@@ -48,10 +48,10 @@ export declare const SPACEFAST_SKILLS: readonly [{
     readonly whenToUse: "Use when the artifact already exists and the user wants it published or updated.";
     readonly keywords: readonly ["publish", "deploy", "live", "verify", "version", "claim"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["publish", "operation_status", "show_space_deployments"];
+    readonly tools: readonly ["publish", "operation_status", "show_space"];
     readonly docs: readonly ["publishing", "workflow/publish-receipt", "workflow/secret-handling"];
-    readonly instructions: readonly ["Identify the actual publish root or build output. Run the real build first when the source tree is not the artifact.", "Call `publish` once. Keep anonymous claim credentials in local custody.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop.", "Return the live, access, and version URLs that are present. For an anonymous publish, state the claim expiry and point the user to the claim action in the publish card.", "Never expose a raw claim credential. Never ask the user to paste one."];
-    readonly verification: readonly ["Call `show_space_deployments` with `space: publish.result.receipt.space.id`. Confirm that the intended version is ready and current.", "Report the stable error code and actionable diagnostics when the deployment failed or stalled.", "Open the live URL. Verify representative content and assets before reporting success."];
+    readonly instructions: readonly ["Identify the actual publish root or build output. Run the real build first when the source tree is not the artifact.", "Call `publish` once. Keep anonymous claim credentials in local custody.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop.", "Return the live, access, and version URLs that are present. For an anonymous publish, state the claim expiry and point the user to the claim action in the publish card.", "Never expose a raw claim credential. Never ask the user to paste one."];
+    readonly verification: readonly ["If `publish.result.receipt.claim` is present, use the completed publish receipt as verification. Do not call `show_space`. The user must claim the Space before you open a detailed view.", "If `publish.result.receipt.claim` is absent, call `show_space` with `request.view: \"deployments\"` and `request.input.space: publish.result.receipt.space.id`. Confirm that the intended version is ready and current.", "Report the stable error code and actionable diagnostics when the deployment failed or stalled.", "For a claimed Space, open its access URL. Verify representative content and assets before reporting success."];
     readonly runtimeNotes: {
         readonly local: "Publish a bounded local path; locally custodied claim credentials are reused automatically.";
         readonly hosted: "Publish inline files, or use catalog manifest and import operations for larger artifacts. Hosted has no filesystem.";
@@ -86,10 +86,10 @@ export declare const SPACEFAST_SKILLS: readonly [{
     readonly whenToUse: "Use when reviewers need a realistic preview before a change goes live.";
     readonly keywords: readonly ["preview", "channel", "branch", "pull request", "review", "private"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["publish", "operation_status", "show_space_deployments", "execute", "resume_execution"];
+    readonly tools: readonly ["publish", "operation_status", "show_space", "execute", "resume_execution"];
     readonly docs: readonly ["builds", "access-control"];
-    readonly instructions: readonly ["Call `publish` once for an explicit non-production space or channel. Do not change the production target.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop.", "Keep the preview private unless the user requests sharing.", "For reviewer access, use one bounded `execute` program. Read current access, create the narrowest Link, then read it again.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program.", "Label the preview with its branch, change, or pull request. Report what is out of scope."];
-    readonly verification: readonly ["Call `show_space_deployments` for each affected Space. Confirm that the preview changed. Confirm that production did not change.", "Test the reviewer Link in a signed-out context. Report its scope and expiry."];
+    readonly instructions: readonly ["Use `publish` for a separate preview Space. Pass its `spaceId`, or set `createNew: true` when the user requests a new Space.", "For a source preview in an existing Space, describe `createSpaceBuild` through `execute`. Use a repository input pinned to the saved commit.", "Set `body.target` to `{ preview: true, channel: null }`. Set the described `Idempotency-Key` header and keep `wait` false.", "Poll `getBuild` until it succeeds or fails. A build response does not prove that a version is live.", "Direct `publish` has no channel input. Keep the production target unchanged.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop.", "Keep the preview private unless the user requests sharing.", "For reviewer access, use one bounded `execute` program. Read current access, create the narrowest Link, then read it again.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program.", "Label the preview with its branch, change, or pull request. Report what is out of scope."];
+    readonly verification: readonly ["If `publish.result.receipt.claim` is present, use the completed publish receipt as verification. Do not call `show_space`. The user must claim the Space before you open a detailed view.", "If `publish.result.receipt.claim` is absent, call `show_space` with `request.view: \"deployments\"` and `request.input.space` set to each affected Space. Confirm that the preview changed. Confirm that production did not change.", "If `publish.result.receipt.claim` is absent, test the reviewer Link in a signed-out context. Report its scope and expiry."];
     readonly recipe: {
         readonly slug: "recipes/preview-channels";
         readonly tier: "full";
@@ -104,8 +104,8 @@ export declare const SPACEFAST_SKILLS: readonly [{
     readonly runtimes: readonly ["local", "hosted"];
     readonly tools: readonly ["publish", "operation_status", "execute", "resume_execution"];
     readonly docs: readonly ["anonymous-publish", "workflow/continue-after-claim", "workflow/secret-handling"];
-    readonly instructions: readonly ["Point the user to the claim action in the publish card and state its expiry. Never copy the claim credential into model text.", "When account credentials are available, use one bounded `execute` program. Search and describe the claim operation before calling it.", "Pass only the required team ID and expected space ID.", "After the claim resumes, read the space in the same program. Return its owner and claim state.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program.", "Otherwise, ask the user to use the claim action in the publish card.", "After a browser claim, call `publish` again from On-Device. It exchanges the locally held credential without exposing it.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
-    readonly verification: readonly ["Confirm that the space has no claim expiry. Confirm that it belongs to the intended account or team.", "Confirm that the republish uses durable access without a raw credential."];
+    readonly instructions: readonly ["Point the user to the claim action in the publish card and state its expiry. Never copy the claim credential into model text.", "Let the user complete the claim through the publish card. The card keeps the claim credential outside model text.", "After the claim, use one bounded `execute` program with the connected account to read the Space by its known ID.", "Return its owner and claim state. Do not extract the saved claim key or call its exchange through `execute`.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program.", "If account access is unavailable, reconnect Spacefast in the client.", "The next requested On-Device publish exchanges the locally held credential automatically without exposing it.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
+    readonly verification: readonly ["Confirm that the space has no claim expiry. Confirm that it belongs to the intended account or team.", "When the user next requests a publish, confirm that it succeeds through the saved credential without exposing it."];
     readonly prompt: true;
 }, {
     readonly name: "rollback-safely";
@@ -114,10 +114,10 @@ export declare const SPACEFAST_SKILLS: readonly [{
     readonly whenToUse: "Use when the current live version is broken and a prior healthy version is known or discoverable.";
     readonly keywords: readonly ["rollback", "revert", "version", "incident", "restore"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["show_space_deployments", "execute", "resume_execution"];
+    readonly tools: readonly ["show_space", "execute", "resume_execution"];
     readonly docs: readonly ["versions-and-rollback"];
-    readonly instructions: readonly ["Call `show_space_deployments`. Select a known-good ready version that is older than the current version.", "Use one bounded `execute` program. Search and describe the version promotion operation before calling it.", "Read the live pointer, promote the selected version, then read the pointer again in the same program.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program."];
-    readonly verification: readonly ["Call `show_space_deployments`. Confirm that the selected version is current and ready.", "Open the live URL. Verify that the failing path or behavior works again."];
+    readonly instructions: readonly ["Call `show_space` with `request.view: \"deployments\"` and `request.input.space` set to the affected Space. Select a known-good ready version that is older than the current version.", "Use one bounded `execute` program. Search and describe the version promotion operation before calling it.", "Read the live pointer, promote the selected version, then read the pointer again in the same program.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program."];
+    readonly verification: readonly ["Call `show_space` with `request.view: \"deployments\"` and `request.input.space` set to the affected Space. Confirm that the selected version is current and ready.", "Open the live URL. Verify that the failing path or behavior works again."];
     readonly prompt: true;
 }, {
     readonly name: "set-up-custom-domain";
@@ -126,10 +126,10 @@ export declare const SPACEFAST_SKILLS: readonly [{
     readonly whenToUse: "Use when the user owns a domain they want a Spacefast space to serve.";
     readonly keywords: readonly ["domain", "dns", "tls", "https", "cname", "custom"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["show_space_domains", "execute", "resume_execution"];
+    readonly tools: readonly ["show_space", "execute", "resume_execution"];
     readonly docs: readonly ["custom-domains", "recipes/migrate-dns"];
-    readonly instructions: readonly ["Call `show_space_domains`. Read the current domain, DNS, and certificate state.", "If setup is required, use one bounded `execute` program. Search and describe the add or assign operation before calling it.", "Read the domain again in the same program after the mutation resumes.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program.", "Return the exact DNS records from Spacefast. Do not claim that Spacefast changed third-party DNS.", "Keep the existing production hostname until the custom domain is ready."];
-    readonly verification: readonly ["After the external DNS change, call `show_space_domains`. Report the current verification state.", "Open the HTTPS URL only after DNS and certificate states are ready. Verify representative content."];
+    readonly instructions: readonly ["Call `show_space` with `request.view: \"domains\"` and `request.input.space` set to the affected Space. Read the current domain, DNS, and certificate state.", "If setup is required, use one bounded `execute` program. Search and describe the add or assign operation before calling it.", "Read the domain again in the same program after the mutation resumes.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program.", "Return the exact DNS records from Spacefast. Do not claim that Spacefast changed third-party DNS.", "Keep the existing production hostname until the custom domain is ready."];
+    readonly verification: readonly ["After the external DNS change, call `show_space` with `request.view: \"domains\"` and `request.input.space` set to the affected Space. Report the current verification state.", "Open the HTTPS URL only after DNS and certificate states are ready. Verify representative content."];
     readonly prompt: true;
     readonly recipe: {
         readonly slug: "recipes/custom-domain";
@@ -143,10 +143,10 @@ export declare const SPACEFAST_SKILLS: readonly [{
     readonly whenToUse: "Use for moved pages, canonical host paths, and intentional permanent or temporary redirects.";
     readonly keywords: readonly ["redirect", "rewrite", "routing", "301", "302", "path"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["publish", "operation_status", "show_space_deployments"];
+    readonly tools: readonly ["publish", "operation_status", "show_space"];
     readonly docs: readonly ["redirects"];
-    readonly instructions: readonly ["Inspect existing routing rules, then add the smallest non-conflicting rules to `_redirects` at the publish root.", "Choose a temporary or permanent status deliberately. Preserve required path and query behavior.", "Avoid redirect loops and rules that hide real assets.", "Call `publish` once. Include the redirect file and related content in the same immutable version.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
-    readonly verification: readonly ["Call `show_space_deployments` with `space: publish.result.receipt.space.id`. Confirm that the new version is current and ready.", "Request representative old and new paths and confirm the exact status and Location header.", "Verify the final target serves successfully and unrelated assets are not redirected."];
+    readonly instructions: readonly ["Inspect existing routing rules, then add the smallest non-conflicting rules to `_redirects` at the publish root.", "Choose a temporary or permanent status deliberately. Preserve required path and query behavior.", "Avoid redirect loops and rules that hide real assets.", "Call `publish` once. Include the redirect file and related content in the same immutable version.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
+    readonly verification: readonly ["If `publish.result.receipt.claim` is present, use the completed publish receipt as verification. Do not call `show_space`. The user must claim the Space before you open a detailed view.", "If `publish.result.receipt.claim` is absent, call `show_space` with `request.view: \"deployments\"` and `request.input.space: publish.result.receipt.space.id`. Confirm that the new version is current and ready.", "If `publish.result.receipt.claim` is absent, request representative old and new paths and confirm the exact status and Location header.", "If `publish.result.receipt.claim` is absent, verify the final target serves successfully and unrelated assets are not redirected."];
     readonly recipe: {
         readonly slug: "recipes/redirects";
         readonly tier: "reference";
@@ -159,10 +159,10 @@ export declare const SPACEFAST_SKILLS: readonly [{
     readonly whenToUse: "Use when an existing production domain must move to Spacefast.";
     readonly keywords: readonly ["dns", "migrate", "cutover", "domain", "downtime", "certificate"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["show_space_domains", "execute", "resume_execution"];
+    readonly tools: readonly ["show_space", "execute", "resume_execution"];
     readonly docs: readonly ["custom-domains"];
-    readonly instructions: readonly ["Inventory the current authoritative DNS records. Lower the TTL before cutover when the provider and timing permit it.", "Call `show_space_domains`. Read the current DNS and certificate state.", "If setup is required, use one bounded `execute` program. Search and describe the add or assign operation before calling it.", "Read the domain again in the same program after the mutation resumes.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program.", "Create the returned DNS records at the provider. Keep the previous origin available during propagation.", "Cut over only after the expected content and TLS state are ready."];
-    readonly verification: readonly ["Call `show_space_domains`. Confirm that DNS and certificate states are ready.", "Check more than one resolver. Confirm that the certificate matches the final hostname.", "Open the public HTTPS URL. Verify representative content before removing rollback records."];
+    readonly instructions: readonly ["Inventory the current authoritative DNS records. Lower the TTL before cutover when the provider and timing permit it.", "Call `show_space` with `request.view: \"domains\"` and `request.input.space` set to the affected Space. Read the current DNS and certificate state.", "If setup is required, use one bounded `execute` program. Search and describe the add or assign operation before calling it.", "Read the domain again in the same program after the mutation resumes.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program.", "Create the returned DNS records at the provider. Keep the previous origin available during propagation.", "Cut over only after the expected content and TLS state are ready."];
+    readonly verification: readonly ["Call `show_space` with `request.view: \"domains\"` and `request.input.space` set to the affected Space. Confirm that DNS and certificate states are ready.", "Check more than one resolver. Confirm that the certificate matches the final hostname.", "Open the public HTTPS URL. Verify representative content before removing rollback records."];
     readonly recipe: {
         readonly slug: "recipes/migrate-dns";
         readonly tier: "reference";
@@ -175,10 +175,10 @@ export declare const SPACEFAST_SKILLS: readonly [{
     readonly whenToUse: "Use when a build, finalize, activation, or live serving step fails or stalls.";
     readonly keywords: readonly ["debug", "failed", "build", "logs", "diagnose", "stalled"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["show_space_deployments", "execute", "publish", "operation_status"];
+    readonly tools: readonly ["show_space", "execute", "resume_execution", "publish", "operation_status"];
     readonly docs: readonly ["troubleshooting"];
-    readonly instructions: readonly ["Call `show_space_deployments`. Read the failed version, build state, stable error code, and diagnostics.", "If more detail is required, use one bounded `execute` program. Read only the required build logs or version data.", "Apply the smallest fix supported by the evidence. Run the real build.", "Call `publish` once with the fixed output.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
-    readonly verification: readonly ["Call `show_space_deployments` with `space: publish.result.receipt.space.id`. Confirm that the new version is current and ready.", "Open the affected live path. Verify that the concrete failure does not occur."];
+    readonly instructions: readonly ["Call `show_space` with `request.view: \"deployments\"` and `request.input.space` set to the affected Space. Read the failed version, build state, stable error code, and diagnostics.", "If more detail is required, use one bounded `execute` program. Read only the required build logs or version data.", "Apply the smallest fix supported by the evidence. Run the real build.", "Call `publish` once with the fixed output.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
+    readonly verification: readonly ["If `publish.result.receipt.claim` is present, use the completed publish receipt as verification. Do not call `show_space`. The user must claim the Space before you open a detailed view.", "If `publish.result.receipt.claim` is absent, call `show_space` with `request.view: \"deployments\"` and `request.input.space: publish.result.receipt.space.id`. Confirm that the new version is current and ready.", "If `publish.result.receipt.claim` is absent, open the affected live path. Verify that the concrete failure does not occur."];
     readonly prompt: true;
 }, {
     readonly name: "manage-access";
@@ -189,7 +189,7 @@ export declare const SPACEFAST_SKILLS: readonly [{
     readonly runtimes: readonly ["local", "hosted"];
     readonly tools: readonly ["execute", "resume_execution"];
     readonly docs: readonly ["access-control"];
-    readonly instructions: readonly ["Use one bounded `execute` program. Search and describe the access operations before calling them.", "Read current access. Apply the narrowest change for one explicit access intent. Read the resulting access state.", "Run the matching access check in the same program after the mutation resumes.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program.", "Show new Link or machine secrets only to the requesting user. Never store them in logs or committed files."];
+    readonly instructions: readonly ["Use one bounded `execute` program. Search and describe the access operations before calling them.", "Read current access. Apply the narrowest change for one explicit access intent. Read the resulting access state.", "Run the matching access check in the same program after the mutation resumes.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program.", "Show new Link or machine secrets only to the requesting user. Never store them in logs or committed files."];
     readonly verification: readonly ["Confirm that the access check permits the intended actor and path.", "Test a new Link in the intended signed-out context. Confirm that unrelated resources stay inaccessible."];
     readonly prompt: true;
 }];
@@ -200,12 +200,12 @@ export declare const SPACEFAST_PROMPT_SKILLS: ({
     readonly whenToUse: "Use when the user wants a new website built, improved, or launched.";
     readonly keywords: readonly ["create", "website", "design", "build", "responsive", "launch", "publish"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["publish", "operation_status", "show_space_deployments"];
+    readonly tools: readonly ["publish", "operation_status", "show_space"];
     readonly docs: readonly ["quickstart", "publishing"];
-    readonly instructions: readonly ["Use the user's brief. Infer optional design choices from the content and workspace.", "Ask a question only when a missing required value blocks safe work.", "Inspect the workspace. Reuse its framework, package manager, components, assets, and build commands when suitable.", "Build an accessible site with real content, responsive layouts, clear hierarchy, and useful interaction states.", "Run the real build. Check mobile and desktop layouts, links, assets, keyboard use, contrast, and layout stability.", "Review the final diff. Remove secrets and local authentication data from the artifact.", "Call `publish` once with the built output. Return useful access, live, and version URLs from the receipt. If the publish is anonymous, point the user to the claim action in the publish card and state its expiry.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
-    readonly verification: readonly ["Call `show_space_deployments` with `space: publish.result.receipt.space.id`. Confirm that the intended version is ready and current.", "If the deployment failed or stalled, report its stable error code and actionable diagnostics.", "Open the live URL. Verify the main page, navigation, assets, responsive layout, and primary call to action."];
+    readonly instructions: readonly ["Use the user's brief. Infer optional design choices from the content and workspace.", "Ask a question only when a missing required value blocks safe work.", "Inspect the workspace. Reuse its framework, package manager, components, assets, and build commands when suitable.", "Build an accessible site with real content, responsive layouts, clear hierarchy, and useful interaction states.", "Run the real build. Check mobile and desktop layouts, links, assets, keyboard use, contrast, and layout stability.", "Review the final diff. Remove secrets and local authentication data from the artifact.", "Call `publish` once with the built output. Return useful access, live, and version URLs from the receipt. If the publish is anonymous, point the user to the claim action in the publish card and state its expiry.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
+    readonly verification: readonly ["If `publish.result.receipt.claim` is present, use the completed publish receipt as verification. Do not call `show_space`. The user must claim the Space before you open a detailed view.", "If `publish.result.receipt.claim` is absent, call `show_space` with `request.view: \"deployments\"` and `request.input.space: publish.result.receipt.space.id`. Confirm that the intended version is ready and current.", "If the deployment failed or stalled, report its stable error code and actionable diagnostics.", "For a claimed Space, open its access URL. Verify the main page, navigation, assets, responsive layout, and primary call to action."];
     readonly runtimeNotes: {
-        readonly local: "On-Device can work directly inside the configured local workspace root and publish a local build path.";
+        readonly local: "On Linux, On-Device can publish a build path relative to the configured workspace root. On other systems, publish new artifacts inline or use a permitted CLI or HTTP upload.";
         readonly hosted: "Hosted has no filesystem. Generate small files in the client and publish them inline, or use catalog manifest and import operations for larger artifacts.";
     };
     readonly prompt: true;
@@ -221,10 +221,10 @@ export declare const SPACEFAST_PROMPT_SKILLS: ({
     readonly whenToUse: "Use when the artifact already exists and the user wants it published or updated.";
     readonly keywords: readonly ["publish", "deploy", "live", "verify", "version", "claim"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["publish", "operation_status", "show_space_deployments"];
+    readonly tools: readonly ["publish", "operation_status", "show_space"];
     readonly docs: readonly ["publishing", "workflow/publish-receipt", "workflow/secret-handling"];
-    readonly instructions: readonly ["Identify the actual publish root or build output. Run the real build first when the source tree is not the artifact.", "Call `publish` once. Keep anonymous claim credentials in local custody.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop.", "Return the live, access, and version URLs that are present. For an anonymous publish, state the claim expiry and point the user to the claim action in the publish card.", "Never expose a raw claim credential. Never ask the user to paste one."];
-    readonly verification: readonly ["Call `show_space_deployments` with `space: publish.result.receipt.space.id`. Confirm that the intended version is ready and current.", "Report the stable error code and actionable diagnostics when the deployment failed or stalled.", "Open the live URL. Verify representative content and assets before reporting success."];
+    readonly instructions: readonly ["Identify the actual publish root or build output. Run the real build first when the source tree is not the artifact.", "Call `publish` once. Keep anonymous claim credentials in local custody.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop.", "Return the live, access, and version URLs that are present. For an anonymous publish, state the claim expiry and point the user to the claim action in the publish card.", "Never expose a raw claim credential. Never ask the user to paste one."];
+    readonly verification: readonly ["If `publish.result.receipt.claim` is present, use the completed publish receipt as verification. Do not call `show_space`. The user must claim the Space before you open a detailed view.", "If `publish.result.receipt.claim` is absent, call `show_space` with `request.view: \"deployments\"` and `request.input.space: publish.result.receipt.space.id`. Confirm that the intended version is ready and current.", "Report the stable error code and actionable diagnostics when the deployment failed or stalled.", "For a claimed Space, open its access URL. Verify representative content and assets before reporting success."];
     readonly runtimeNotes: {
         readonly local: "Publish a bounded local path; locally custodied claim credentials are reused automatically.";
         readonly hosted: "Publish inline files, or use catalog manifest and import operations for larger artifacts. Hosted has no filesystem.";
@@ -259,10 +259,10 @@ export declare const SPACEFAST_PROMPT_SKILLS: ({
     readonly whenToUse: "Use when reviewers need a realistic preview before a change goes live.";
     readonly keywords: readonly ["preview", "channel", "branch", "pull request", "review", "private"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["publish", "operation_status", "show_space_deployments", "execute", "resume_execution"];
+    readonly tools: readonly ["publish", "operation_status", "show_space", "execute", "resume_execution"];
     readonly docs: readonly ["builds", "access-control"];
-    readonly instructions: readonly ["Call `publish` once for an explicit non-production space or channel. Do not change the production target.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop.", "Keep the preview private unless the user requests sharing.", "For reviewer access, use one bounded `execute` program. Read current access, create the narrowest Link, then read it again.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program.", "Label the preview with its branch, change, or pull request. Report what is out of scope."];
-    readonly verification: readonly ["Call `show_space_deployments` for each affected Space. Confirm that the preview changed. Confirm that production did not change.", "Test the reviewer Link in a signed-out context. Report its scope and expiry."];
+    readonly instructions: readonly ["Use `publish` for a separate preview Space. Pass its `spaceId`, or set `createNew: true` when the user requests a new Space.", "For a source preview in an existing Space, describe `createSpaceBuild` through `execute`. Use a repository input pinned to the saved commit.", "Set `body.target` to `{ preview: true, channel: null }`. Set the described `Idempotency-Key` header and keep `wait` false.", "Poll `getBuild` until it succeeds or fails. A build response does not prove that a version is live.", "Direct `publish` has no channel input. Keep the production target unchanged.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop.", "Keep the preview private unless the user requests sharing.", "For reviewer access, use one bounded `execute` program. Read current access, create the narrowest Link, then read it again.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program.", "Label the preview with its branch, change, or pull request. Report what is out of scope."];
+    readonly verification: readonly ["If `publish.result.receipt.claim` is present, use the completed publish receipt as verification. Do not call `show_space`. The user must claim the Space before you open a detailed view.", "If `publish.result.receipt.claim` is absent, call `show_space` with `request.view: \"deployments\"` and `request.input.space` set to each affected Space. Confirm that the preview changed. Confirm that production did not change.", "If `publish.result.receipt.claim` is absent, test the reviewer Link in a signed-out context. Report its scope and expiry."];
     readonly recipe: {
         readonly slug: "recipes/preview-channels";
         readonly tier: "full";
@@ -277,8 +277,8 @@ export declare const SPACEFAST_PROMPT_SKILLS: ({
     readonly runtimes: readonly ["local", "hosted"];
     readonly tools: readonly ["publish", "operation_status", "execute", "resume_execution"];
     readonly docs: readonly ["anonymous-publish", "workflow/continue-after-claim", "workflow/secret-handling"];
-    readonly instructions: readonly ["Point the user to the claim action in the publish card and state its expiry. Never copy the claim credential into model text.", "When account credentials are available, use one bounded `execute` program. Search and describe the claim operation before calling it.", "Pass only the required team ID and expected space ID.", "After the claim resumes, read the space in the same program. Return its owner and claim state.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program.", "Otherwise, ask the user to use the claim action in the publish card.", "After a browser claim, call `publish` again from On-Device. It exchanges the locally held credential without exposing it.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
-    readonly verification: readonly ["Confirm that the space has no claim expiry. Confirm that it belongs to the intended account or team.", "Confirm that the republish uses durable access without a raw credential."];
+    readonly instructions: readonly ["Point the user to the claim action in the publish card and state its expiry. Never copy the claim credential into model text.", "Let the user complete the claim through the publish card. The card keeps the claim credential outside model text.", "After the claim, use one bounded `execute` program with the connected account to read the Space by its known ID.", "Return its owner and claim state. Do not extract the saved claim key or call its exchange through `execute`.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program.", "If account access is unavailable, reconnect Spacefast in the client.", "The next requested On-Device publish exchanges the locally held credential automatically without exposing it.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
+    readonly verification: readonly ["Confirm that the space has no claim expiry. Confirm that it belongs to the intended account or team.", "When the user next requests a publish, confirm that it succeeds through the saved credential without exposing it."];
     readonly prompt: true;
 } | {
     readonly name: "rollback-safely";
@@ -287,10 +287,10 @@ export declare const SPACEFAST_PROMPT_SKILLS: ({
     readonly whenToUse: "Use when the current live version is broken and a prior healthy version is known or discoverable.";
     readonly keywords: readonly ["rollback", "revert", "version", "incident", "restore"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["show_space_deployments", "execute", "resume_execution"];
+    readonly tools: readonly ["show_space", "execute", "resume_execution"];
     readonly docs: readonly ["versions-and-rollback"];
-    readonly instructions: readonly ["Call `show_space_deployments`. Select a known-good ready version that is older than the current version.", "Use one bounded `execute` program. Search and describe the version promotion operation before calling it.", "Read the live pointer, promote the selected version, then read the pointer again in the same program.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program."];
-    readonly verification: readonly ["Call `show_space_deployments`. Confirm that the selected version is current and ready.", "Open the live URL. Verify that the failing path or behavior works again."];
+    readonly instructions: readonly ["Call `show_space` with `request.view: \"deployments\"` and `request.input.space` set to the affected Space. Select a known-good ready version that is older than the current version.", "Use one bounded `execute` program. Search and describe the version promotion operation before calling it.", "Read the live pointer, promote the selected version, then read the pointer again in the same program.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program."];
+    readonly verification: readonly ["Call `show_space` with `request.view: \"deployments\"` and `request.input.space` set to the affected Space. Confirm that the selected version is current and ready.", "Open the live URL. Verify that the failing path or behavior works again."];
     readonly prompt: true;
 } | {
     readonly name: "set-up-custom-domain";
@@ -299,10 +299,10 @@ export declare const SPACEFAST_PROMPT_SKILLS: ({
     readonly whenToUse: "Use when the user owns a domain they want a Spacefast space to serve.";
     readonly keywords: readonly ["domain", "dns", "tls", "https", "cname", "custom"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["show_space_domains", "execute", "resume_execution"];
+    readonly tools: readonly ["show_space", "execute", "resume_execution"];
     readonly docs: readonly ["custom-domains", "recipes/migrate-dns"];
-    readonly instructions: readonly ["Call `show_space_domains`. Read the current domain, DNS, and certificate state.", "If setup is required, use one bounded `execute` program. Search and describe the add or assign operation before calling it.", "Read the domain again in the same program after the mutation resumes.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program.", "Return the exact DNS records from Spacefast. Do not claim that Spacefast changed third-party DNS.", "Keep the existing production hostname until the custom domain is ready."];
-    readonly verification: readonly ["After the external DNS change, call `show_space_domains`. Report the current verification state.", "Open the HTTPS URL only after DNS and certificate states are ready. Verify representative content."];
+    readonly instructions: readonly ["Call `show_space` with `request.view: \"domains\"` and `request.input.space` set to the affected Space. Read the current domain, DNS, and certificate state.", "If setup is required, use one bounded `execute` program. Search and describe the add or assign operation before calling it.", "Read the domain again in the same program after the mutation resumes.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program.", "Return the exact DNS records from Spacefast. Do not claim that Spacefast changed third-party DNS.", "Keep the existing production hostname until the custom domain is ready."];
+    readonly verification: readonly ["After the external DNS change, call `show_space` with `request.view: \"domains\"` and `request.input.space` set to the affected Space. Report the current verification state.", "Open the HTTPS URL only after DNS and certificate states are ready. Verify representative content."];
     readonly prompt: true;
     readonly recipe: {
         readonly slug: "recipes/custom-domain";
@@ -316,10 +316,10 @@ export declare const SPACEFAST_PROMPT_SKILLS: ({
     readonly whenToUse: "Use for moved pages, canonical host paths, and intentional permanent or temporary redirects.";
     readonly keywords: readonly ["redirect", "rewrite", "routing", "301", "302", "path"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["publish", "operation_status", "show_space_deployments"];
+    readonly tools: readonly ["publish", "operation_status", "show_space"];
     readonly docs: readonly ["redirects"];
-    readonly instructions: readonly ["Inspect existing routing rules, then add the smallest non-conflicting rules to `_redirects` at the publish root.", "Choose a temporary or permanent status deliberately. Preserve required path and query behavior.", "Avoid redirect loops and rules that hide real assets.", "Call `publish` once. Include the redirect file and related content in the same immutable version.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
-    readonly verification: readonly ["Call `show_space_deployments` with `space: publish.result.receipt.space.id`. Confirm that the new version is current and ready.", "Request representative old and new paths and confirm the exact status and Location header.", "Verify the final target serves successfully and unrelated assets are not redirected."];
+    readonly instructions: readonly ["Inspect existing routing rules, then add the smallest non-conflicting rules to `_redirects` at the publish root.", "Choose a temporary or permanent status deliberately. Preserve required path and query behavior.", "Avoid redirect loops and rules that hide real assets.", "Call `publish` once. Include the redirect file and related content in the same immutable version.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
+    readonly verification: readonly ["If `publish.result.receipt.claim` is present, use the completed publish receipt as verification. Do not call `show_space`. The user must claim the Space before you open a detailed view.", "If `publish.result.receipt.claim` is absent, call `show_space` with `request.view: \"deployments\"` and `request.input.space: publish.result.receipt.space.id`. Confirm that the new version is current and ready.", "If `publish.result.receipt.claim` is absent, request representative old and new paths and confirm the exact status and Location header.", "If `publish.result.receipt.claim` is absent, verify the final target serves successfully and unrelated assets are not redirected."];
     readonly recipe: {
         readonly slug: "recipes/redirects";
         readonly tier: "reference";
@@ -332,10 +332,10 @@ export declare const SPACEFAST_PROMPT_SKILLS: ({
     readonly whenToUse: "Use when an existing production domain must move to Spacefast.";
     readonly keywords: readonly ["dns", "migrate", "cutover", "domain", "downtime", "certificate"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["show_space_domains", "execute", "resume_execution"];
+    readonly tools: readonly ["show_space", "execute", "resume_execution"];
     readonly docs: readonly ["custom-domains"];
-    readonly instructions: readonly ["Inventory the current authoritative DNS records. Lower the TTL before cutover when the provider and timing permit it.", "Call `show_space_domains`. Read the current DNS and certificate state.", "If setup is required, use one bounded `execute` program. Search and describe the add or assign operation before calling it.", "Read the domain again in the same program after the mutation resumes.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program.", "Create the returned DNS records at the provider. Keep the previous origin available during propagation.", "Cut over only after the expected content and TLS state are ready."];
-    readonly verification: readonly ["Call `show_space_domains`. Confirm that DNS and certificate states are ready.", "Check more than one resolver. Confirm that the certificate matches the final hostname.", "Open the public HTTPS URL. Verify representative content before removing rollback records."];
+    readonly instructions: readonly ["Inventory the current authoritative DNS records. Lower the TTL before cutover when the provider and timing permit it.", "Call `show_space` with `request.view: \"domains\"` and `request.input.space` set to the affected Space. Read the current DNS and certificate state.", "If setup is required, use one bounded `execute` program. Search and describe the add or assign operation before calling it.", "Read the domain again in the same program after the mutation resumes.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program.", "Create the returned DNS records at the provider. Keep the previous origin available during propagation.", "Cut over only after the expected content and TLS state are ready."];
+    readonly verification: readonly ["Call `show_space` with `request.view: \"domains\"` and `request.input.space` set to the affected Space. Confirm that DNS and certificate states are ready.", "Check more than one resolver. Confirm that the certificate matches the final hostname.", "Open the public HTTPS URL. Verify representative content before removing rollback records."];
     readonly recipe: {
         readonly slug: "recipes/migrate-dns";
         readonly tier: "reference";
@@ -348,10 +348,10 @@ export declare const SPACEFAST_PROMPT_SKILLS: ({
     readonly whenToUse: "Use when a build, finalize, activation, or live serving step fails or stalls.";
     readonly keywords: readonly ["debug", "failed", "build", "logs", "diagnose", "stalled"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["show_space_deployments", "execute", "publish", "operation_status"];
+    readonly tools: readonly ["show_space", "execute", "resume_execution", "publish", "operation_status"];
     readonly docs: readonly ["troubleshooting"];
-    readonly instructions: readonly ["Call `show_space_deployments`. Read the failed version, build state, stable error code, and diagnostics.", "If more detail is required, use one bounded `execute` program. Read only the required build logs or version data.", "Apply the smallest fix supported by the evidence. Run the real build.", "Call `publish` once with the fixed output.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
-    readonly verification: readonly ["Call `show_space_deployments` with `space: publish.result.receipt.space.id`. Confirm that the new version is current and ready.", "Open the affected live path. Verify that the concrete failure does not occur."];
+    readonly instructions: readonly ["Call `show_space` with `request.view: \"deployments\"` and `request.input.space` set to the affected Space. Read the failed version, build state, stable error code, and diagnostics.", "If more detail is required, use one bounded `execute` program. Read only the required build logs or version data.", "Apply the smallest fix supported by the evidence. Run the real build.", "Call `publish` once with the fixed output.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
+    readonly verification: readonly ["If `publish.result.receipt.claim` is present, use the completed publish receipt as verification. Do not call `show_space`. The user must claim the Space before you open a detailed view.", "If `publish.result.receipt.claim` is absent, call `show_space` with `request.view: \"deployments\"` and `request.input.space: publish.result.receipt.space.id`. Confirm that the new version is current and ready.", "If `publish.result.receipt.claim` is absent, open the affected live path. Verify that the concrete failure does not occur."];
     readonly prompt: true;
 } | {
     readonly name: "manage-access";
@@ -362,7 +362,7 @@ export declare const SPACEFAST_PROMPT_SKILLS: ({
     readonly runtimes: readonly ["local", "hosted"];
     readonly tools: readonly ["execute", "resume_execution"];
     readonly docs: readonly ["access-control"];
-    readonly instructions: readonly ["Use one bounded `execute` program. Search and describe the access operations before calling them.", "Read current access. Apply the narrowest change for one explicit access intent. Read the resulting access state.", "Run the matching access check in the same program after the mutation resumes.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program.", "Show new Link or machine secrets only to the requesting user. Never store them in logs or committed files."];
+    readonly instructions: readonly ["Use one bounded `execute` program. Search and describe the access operations before calling them.", "Read current access. Apply the narrowest change for one explicit access intent. Read the resulting access state.", "Run the matching access check in the same program after the mutation resumes.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program.", "Show new Link or machine secrets only to the requesting user. Never store them in logs or committed files."];
     readonly verification: readonly ["Confirm that the access check permits the intended actor and path.", "Test a new Link in the intended signed-out context. Confirm that unrelated resources stay inaccessible."];
     readonly prompt: true;
 })[];
@@ -373,12 +373,12 @@ export declare const SPACEFAST_RECIPE_SKILLS: (({
     readonly whenToUse: "Use when the user wants a new website built, improved, or launched.";
     readonly keywords: readonly ["create", "website", "design", "build", "responsive", "launch", "publish"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["publish", "operation_status", "show_space_deployments"];
+    readonly tools: readonly ["publish", "operation_status", "show_space"];
     readonly docs: readonly ["quickstart", "publishing"];
-    readonly instructions: readonly ["Use the user's brief. Infer optional design choices from the content and workspace.", "Ask a question only when a missing required value blocks safe work.", "Inspect the workspace. Reuse its framework, package manager, components, assets, and build commands when suitable.", "Build an accessible site with real content, responsive layouts, clear hierarchy, and useful interaction states.", "Run the real build. Check mobile and desktop layouts, links, assets, keyboard use, contrast, and layout stability.", "Review the final diff. Remove secrets and local authentication data from the artifact.", "Call `publish` once with the built output. Return useful access, live, and version URLs from the receipt. If the publish is anonymous, point the user to the claim action in the publish card and state its expiry.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
-    readonly verification: readonly ["Call `show_space_deployments` with `space: publish.result.receipt.space.id`. Confirm that the intended version is ready and current.", "If the deployment failed or stalled, report its stable error code and actionable diagnostics.", "Open the live URL. Verify the main page, navigation, assets, responsive layout, and primary call to action."];
+    readonly instructions: readonly ["Use the user's brief. Infer optional design choices from the content and workspace.", "Ask a question only when a missing required value blocks safe work.", "Inspect the workspace. Reuse its framework, package manager, components, assets, and build commands when suitable.", "Build an accessible site with real content, responsive layouts, clear hierarchy, and useful interaction states.", "Run the real build. Check mobile and desktop layouts, links, assets, keyboard use, contrast, and layout stability.", "Review the final diff. Remove secrets and local authentication data from the artifact.", "Call `publish` once with the built output. Return useful access, live, and version URLs from the receipt. If the publish is anonymous, point the user to the claim action in the publish card and state its expiry.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
+    readonly verification: readonly ["If `publish.result.receipt.claim` is present, use the completed publish receipt as verification. Do not call `show_space`. The user must claim the Space before you open a detailed view.", "If `publish.result.receipt.claim` is absent, call `show_space` with `request.view: \"deployments\"` and `request.input.space: publish.result.receipt.space.id`. Confirm that the intended version is ready and current.", "If the deployment failed or stalled, report its stable error code and actionable diagnostics.", "For a claimed Space, open its access URL. Verify the main page, navigation, assets, responsive layout, and primary call to action."];
     readonly runtimeNotes: {
-        readonly local: "On-Device can work directly inside the configured local workspace root and publish a local build path.";
+        readonly local: "On Linux, On-Device can publish a build path relative to the configured workspace root. On other systems, publish new artifacts inline or use a permitted CLI or HTTP upload.";
         readonly hosted: "Hosted has no filesystem. Generate small files in the client and publish them inline, or use catalog manifest and import operations for larger artifacts.";
     };
     readonly prompt: true;
@@ -394,10 +394,10 @@ export declare const SPACEFAST_RECIPE_SKILLS: (({
     readonly whenToUse: "Use when the artifact already exists and the user wants it published or updated.";
     readonly keywords: readonly ["publish", "deploy", "live", "verify", "version", "claim"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["publish", "operation_status", "show_space_deployments"];
+    readonly tools: readonly ["publish", "operation_status", "show_space"];
     readonly docs: readonly ["publishing", "workflow/publish-receipt", "workflow/secret-handling"];
-    readonly instructions: readonly ["Identify the actual publish root or build output. Run the real build first when the source tree is not the artifact.", "Call `publish` once. Keep anonymous claim credentials in local custody.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop.", "Return the live, access, and version URLs that are present. For an anonymous publish, state the claim expiry and point the user to the claim action in the publish card.", "Never expose a raw claim credential. Never ask the user to paste one."];
-    readonly verification: readonly ["Call `show_space_deployments` with `space: publish.result.receipt.space.id`. Confirm that the intended version is ready and current.", "Report the stable error code and actionable diagnostics when the deployment failed or stalled.", "Open the live URL. Verify representative content and assets before reporting success."];
+    readonly instructions: readonly ["Identify the actual publish root or build output. Run the real build first when the source tree is not the artifact.", "Call `publish` once. Keep anonymous claim credentials in local custody.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop.", "Return the live, access, and version URLs that are present. For an anonymous publish, state the claim expiry and point the user to the claim action in the publish card.", "Never expose a raw claim credential. Never ask the user to paste one."];
+    readonly verification: readonly ["If `publish.result.receipt.claim` is present, use the completed publish receipt as verification. Do not call `show_space`. The user must claim the Space before you open a detailed view.", "If `publish.result.receipt.claim` is absent, call `show_space` with `request.view: \"deployments\"` and `request.input.space: publish.result.receipt.space.id`. Confirm that the intended version is ready and current.", "Report the stable error code and actionable diagnostics when the deployment failed or stalled.", "For a claimed Space, open its access URL. Verify representative content and assets before reporting success."];
     readonly runtimeNotes: {
         readonly local: "Publish a bounded local path; locally custodied claim credentials are reused automatically.";
         readonly hosted: "Publish inline files, or use catalog manifest and import operations for larger artifacts. Hosted has no filesystem.";
@@ -432,10 +432,10 @@ export declare const SPACEFAST_RECIPE_SKILLS: (({
     readonly whenToUse: "Use when reviewers need a realistic preview before a change goes live.";
     readonly keywords: readonly ["preview", "channel", "branch", "pull request", "review", "private"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["publish", "operation_status", "show_space_deployments", "execute", "resume_execution"];
+    readonly tools: readonly ["publish", "operation_status", "show_space", "execute", "resume_execution"];
     readonly docs: readonly ["builds", "access-control"];
-    readonly instructions: readonly ["Call `publish` once for an explicit non-production space or channel. Do not change the production target.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop.", "Keep the preview private unless the user requests sharing.", "For reviewer access, use one bounded `execute` program. Read current access, create the narrowest Link, then read it again.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program.", "Label the preview with its branch, change, or pull request. Report what is out of scope."];
-    readonly verification: readonly ["Call `show_space_deployments` for each affected Space. Confirm that the preview changed. Confirm that production did not change.", "Test the reviewer Link in a signed-out context. Report its scope and expiry."];
+    readonly instructions: readonly ["Use `publish` for a separate preview Space. Pass its `spaceId`, or set `createNew: true` when the user requests a new Space.", "For a source preview in an existing Space, describe `createSpaceBuild` through `execute`. Use a repository input pinned to the saved commit.", "Set `body.target` to `{ preview: true, channel: null }`. Set the described `Idempotency-Key` header and keep `wait` false.", "Poll `getBuild` until it succeeds or fails. A build response does not prove that a version is live.", "Direct `publish` has no channel input. Keep the production target unchanged.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop.", "Keep the preview private unless the user requests sharing.", "For reviewer access, use one bounded `execute` program. Read current access, create the narrowest Link, then read it again.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program.", "Label the preview with its branch, change, or pull request. Report what is out of scope."];
+    readonly verification: readonly ["If `publish.result.receipt.claim` is present, use the completed publish receipt as verification. Do not call `show_space`. The user must claim the Space before you open a detailed view.", "If `publish.result.receipt.claim` is absent, call `show_space` with `request.view: \"deployments\"` and `request.input.space` set to each affected Space. Confirm that the preview changed. Confirm that production did not change.", "If `publish.result.receipt.claim` is absent, test the reviewer Link in a signed-out context. Report its scope and expiry."];
     readonly recipe: {
         readonly slug: "recipes/preview-channels";
         readonly tier: "full";
@@ -450,8 +450,8 @@ export declare const SPACEFAST_RECIPE_SKILLS: (({
     readonly runtimes: readonly ["local", "hosted"];
     readonly tools: readonly ["publish", "operation_status", "execute", "resume_execution"];
     readonly docs: readonly ["anonymous-publish", "workflow/continue-after-claim", "workflow/secret-handling"];
-    readonly instructions: readonly ["Point the user to the claim action in the publish card and state its expiry. Never copy the claim credential into model text.", "When account credentials are available, use one bounded `execute` program. Search and describe the claim operation before calling it.", "Pass only the required team ID and expected space ID.", "After the claim resumes, read the space in the same program. Return its owner and claim state.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program.", "Otherwise, ask the user to use the claim action in the publish card.", "After a browser claim, call `publish` again from On-Device. It exchanges the locally held credential without exposing it.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
-    readonly verification: readonly ["Confirm that the space has no claim expiry. Confirm that it belongs to the intended account or team.", "Confirm that the republish uses durable access without a raw credential."];
+    readonly instructions: readonly ["Point the user to the claim action in the publish card and state its expiry. Never copy the claim credential into model text.", "Let the user complete the claim through the publish card. The card keeps the claim credential outside model text.", "After the claim, use one bounded `execute` program with the connected account to read the Space by its known ID.", "Return its owner and claim state. Do not extract the saved claim key or call its exchange through `execute`.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program.", "If account access is unavailable, reconnect Spacefast in the client.", "The next requested On-Device publish exchanges the locally held credential automatically without exposing it.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
+    readonly verification: readonly ["Confirm that the space has no claim expiry. Confirm that it belongs to the intended account or team.", "When the user next requests a publish, confirm that it succeeds through the saved credential without exposing it."];
     readonly prompt: true;
 } | {
     readonly name: "rollback-safely";
@@ -460,10 +460,10 @@ export declare const SPACEFAST_RECIPE_SKILLS: (({
     readonly whenToUse: "Use when the current live version is broken and a prior healthy version is known or discoverable.";
     readonly keywords: readonly ["rollback", "revert", "version", "incident", "restore"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["show_space_deployments", "execute", "resume_execution"];
+    readonly tools: readonly ["show_space", "execute", "resume_execution"];
     readonly docs: readonly ["versions-and-rollback"];
-    readonly instructions: readonly ["Call `show_space_deployments`. Select a known-good ready version that is older than the current version.", "Use one bounded `execute` program. Search and describe the version promotion operation before calling it.", "Read the live pointer, promote the selected version, then read the pointer again in the same program.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program."];
-    readonly verification: readonly ["Call `show_space_deployments`. Confirm that the selected version is current and ready.", "Open the live URL. Verify that the failing path or behavior works again."];
+    readonly instructions: readonly ["Call `show_space` with `request.view: \"deployments\"` and `request.input.space` set to the affected Space. Select a known-good ready version that is older than the current version.", "Use one bounded `execute` program. Search and describe the version promotion operation before calling it.", "Read the live pointer, promote the selected version, then read the pointer again in the same program.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program."];
+    readonly verification: readonly ["Call `show_space` with `request.view: \"deployments\"` and `request.input.space` set to the affected Space. Confirm that the selected version is current and ready.", "Open the live URL. Verify that the failing path or behavior works again."];
     readonly prompt: true;
 } | {
     readonly name: "set-up-custom-domain";
@@ -472,10 +472,10 @@ export declare const SPACEFAST_RECIPE_SKILLS: (({
     readonly whenToUse: "Use when the user owns a domain they want a Spacefast space to serve.";
     readonly keywords: readonly ["domain", "dns", "tls", "https", "cname", "custom"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["show_space_domains", "execute", "resume_execution"];
+    readonly tools: readonly ["show_space", "execute", "resume_execution"];
     readonly docs: readonly ["custom-domains", "recipes/migrate-dns"];
-    readonly instructions: readonly ["Call `show_space_domains`. Read the current domain, DNS, and certificate state.", "If setup is required, use one bounded `execute` program. Search and describe the add or assign operation before calling it.", "Read the domain again in the same program after the mutation resumes.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program.", "Return the exact DNS records from Spacefast. Do not claim that Spacefast changed third-party DNS.", "Keep the existing production hostname until the custom domain is ready."];
-    readonly verification: readonly ["After the external DNS change, call `show_space_domains`. Report the current verification state.", "Open the HTTPS URL only after DNS and certificate states are ready. Verify representative content."];
+    readonly instructions: readonly ["Call `show_space` with `request.view: \"domains\"` and `request.input.space` set to the affected Space. Read the current domain, DNS, and certificate state.", "If setup is required, use one bounded `execute` program. Search and describe the add or assign operation before calling it.", "Read the domain again in the same program after the mutation resumes.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program.", "Return the exact DNS records from Spacefast. Do not claim that Spacefast changed third-party DNS.", "Keep the existing production hostname until the custom domain is ready."];
+    readonly verification: readonly ["After the external DNS change, call `show_space` with `request.view: \"domains\"` and `request.input.space` set to the affected Space. Report the current verification state.", "Open the HTTPS URL only after DNS and certificate states are ready. Verify representative content."];
     readonly prompt: true;
     readonly recipe: {
         readonly slug: "recipes/custom-domain";
@@ -489,10 +489,10 @@ export declare const SPACEFAST_RECIPE_SKILLS: (({
     readonly whenToUse: "Use for moved pages, canonical host paths, and intentional permanent or temporary redirects.";
     readonly keywords: readonly ["redirect", "rewrite", "routing", "301", "302", "path"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["publish", "operation_status", "show_space_deployments"];
+    readonly tools: readonly ["publish", "operation_status", "show_space"];
     readonly docs: readonly ["redirects"];
-    readonly instructions: readonly ["Inspect existing routing rules, then add the smallest non-conflicting rules to `_redirects` at the publish root.", "Choose a temporary or permanent status deliberately. Preserve required path and query behavior.", "Avoid redirect loops and rules that hide real assets.", "Call `publish` once. Include the redirect file and related content in the same immutable version.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
-    readonly verification: readonly ["Call `show_space_deployments` with `space: publish.result.receipt.space.id`. Confirm that the new version is current and ready.", "Request representative old and new paths and confirm the exact status and Location header.", "Verify the final target serves successfully and unrelated assets are not redirected."];
+    readonly instructions: readonly ["Inspect existing routing rules, then add the smallest non-conflicting rules to `_redirects` at the publish root.", "Choose a temporary or permanent status deliberately. Preserve required path and query behavior.", "Avoid redirect loops and rules that hide real assets.", "Call `publish` once. Include the redirect file and related content in the same immutable version.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
+    readonly verification: readonly ["If `publish.result.receipt.claim` is present, use the completed publish receipt as verification. Do not call `show_space`. The user must claim the Space before you open a detailed view.", "If `publish.result.receipt.claim` is absent, call `show_space` with `request.view: \"deployments\"` and `request.input.space: publish.result.receipt.space.id`. Confirm that the new version is current and ready.", "If `publish.result.receipt.claim` is absent, request representative old and new paths and confirm the exact status and Location header.", "If `publish.result.receipt.claim` is absent, verify the final target serves successfully and unrelated assets are not redirected."];
     readonly recipe: {
         readonly slug: "recipes/redirects";
         readonly tier: "reference";
@@ -505,10 +505,10 @@ export declare const SPACEFAST_RECIPE_SKILLS: (({
     readonly whenToUse: "Use when an existing production domain must move to Spacefast.";
     readonly keywords: readonly ["dns", "migrate", "cutover", "domain", "downtime", "certificate"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["show_space_domains", "execute", "resume_execution"];
+    readonly tools: readonly ["show_space", "execute", "resume_execution"];
     readonly docs: readonly ["custom-domains"];
-    readonly instructions: readonly ["Inventory the current authoritative DNS records. Lower the TTL before cutover when the provider and timing permit it.", "Call `show_space_domains`. Read the current DNS and certificate state.", "If setup is required, use one bounded `execute` program. Search and describe the add or assign operation before calling it.", "Read the domain again in the same program after the mutation resumes.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program.", "Create the returned DNS records at the provider. Keep the previous origin available during propagation.", "Cut over only after the expected content and TLS state are ready."];
-    readonly verification: readonly ["Call `show_space_domains`. Confirm that DNS and certificate states are ready.", "Check more than one resolver. Confirm that the certificate matches the final hostname.", "Open the public HTTPS URL. Verify representative content before removing rollback records."];
+    readonly instructions: readonly ["Inventory the current authoritative DNS records. Lower the TTL before cutover when the provider and timing permit it.", "Call `show_space` with `request.view: \"domains\"` and `request.input.space` set to the affected Space. Read the current DNS and certificate state.", "If setup is required, use one bounded `execute` program. Search and describe the add or assign operation before calling it.", "Read the domain again in the same program after the mutation resumes.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program.", "Create the returned DNS records at the provider. Keep the previous origin available during propagation.", "Cut over only after the expected content and TLS state are ready."];
+    readonly verification: readonly ["Call `show_space` with `request.view: \"domains\"` and `request.input.space` set to the affected Space. Confirm that DNS and certificate states are ready.", "Check more than one resolver. Confirm that the certificate matches the final hostname.", "Open the public HTTPS URL. Verify representative content before removing rollback records."];
     readonly recipe: {
         readonly slug: "recipes/migrate-dns";
         readonly tier: "reference";
@@ -521,10 +521,10 @@ export declare const SPACEFAST_RECIPE_SKILLS: (({
     readonly whenToUse: "Use when a build, finalize, activation, or live serving step fails or stalls.";
     readonly keywords: readonly ["debug", "failed", "build", "logs", "diagnose", "stalled"];
     readonly runtimes: readonly ["local", "hosted"];
-    readonly tools: readonly ["show_space_deployments", "execute", "publish", "operation_status"];
+    readonly tools: readonly ["show_space", "execute", "resume_execution", "publish", "operation_status"];
     readonly docs: readonly ["troubleshooting"];
-    readonly instructions: readonly ["Call `show_space_deployments`. Read the failed version, build state, stable error code, and diagnostics.", "If more detail is required, use one bounded `execute` program. Read only the required build logs or version data.", "Apply the smallest fix supported by the evidence. Run the real build.", "Call `publish` once with the fixed output.", "If `publish.result.status` is `publishing`, call `operation_status` with `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
-    readonly verification: readonly ["Call `show_space_deployments` with `space: publish.result.receipt.space.id`. Confirm that the new version is current and ready.", "Open the affected live path. Verify that the concrete failure does not occur."];
+    readonly instructions: readonly ["Call `show_space` with `request.view: \"deployments\"` and `request.input.space` set to the affected Space. Read the failed version, build state, stable error code, and diagnostics.", "If more detail is required, use one bounded `execute` program. Read only the required build logs or version data.", "Apply the smallest fix supported by the evidence. Run the real build.", "Call `publish` once with the fixed output.", "For authenticated `publish`, set a unique `requestId` before the first call. Reuse it only with the same input after uncertainty.", "If `publish.result.status` is `publishing`, call `operation_status`. Use `publish.result.job.poll.url` when present. Otherwise, use `publish.result.job.poll.operationId`.", "Call `operation_status` again only while `operation_status.result.done` is false.", "Wait two seconds between publish status reads.", "Continue only when `operation_status.result.status` is `succeeded`.", "Report `failed` or `canceled` and stop."];
+    readonly verification: readonly ["If `publish.result.receipt.claim` is present, use the completed publish receipt as verification. Do not call `show_space`. The user must claim the Space before you open a detailed view.", "If `publish.result.receipt.claim` is absent, call `show_space` with `request.view: \"deployments\"` and `request.input.space: publish.result.receipt.space.id`. Confirm that the new version is current and ready.", "If `publish.result.receipt.claim` is absent, open the affected live path. Verify that the concrete failure does not occur."];
     readonly prompt: true;
 } | {
     readonly name: "manage-access";
@@ -535,7 +535,7 @@ export declare const SPACEFAST_RECIPE_SKILLS: (({
     readonly runtimes: readonly ["local", "hosted"];
     readonly tools: readonly ["execute", "resume_execution"];
     readonly docs: readonly ["access-control"];
-    readonly instructions: readonly ["Use one bounded `execute` program. Search and describe the access operations before calling them.", "Read current access. Apply the narrowest change for one explicit access intent. Read the resulting access state.", "Run the matching access check in the same program after the mutation resumes.", "If `execute` pauses, follow its `resumePrompt`. Then call `resume_execution` with the returned `executionId`.", "Do not start another `execute` program.", "Show new Link or machine secrets only to the requesting user. Never store them in logs or committed files."];
+    readonly instructions: readonly ["Use one bounded `execute` program. Search and describe the access operations before calling them.", "Read current access. Apply the narrowest change for one explicit access intent. Read the resulting access state.", "Run the matching access check in the same program after the mutation resumes.", "Before editing an existing Space, read `get_work_mode`. If mode is null, open `show_work_mode` and wait for the user's choice.", "In vibe mode, handle routine source steps internally. Disable configured automatic deployment before committing. Build with `{preview:false,channel:null}`.", "Show the exact ready version as a visual preview. Request publishing approval separately. Do not show code or diff Apps unless asked.", "In code mode, show the existing files, diffs, commit history, and build logs for review. Reuse the saved mode on later requests.", "Describe each selected path with `tools.describe.tool({ path: item.path })`. Read `inputTypeScript` and `outputTypeScript` before calling it.", "Check `result.ok`. The HTTP body is `result.data`; a Spacefast JSON success envelope contains its payload at `result.data.data`.", "If `execute` pauses, follow its `resumePrompt`.", "For an MCP App approval, call `resume_execution` with only the same `executionId` to open the card.", "Wait for the card's user message before calling it again. Browser approval also resumes with only `executionId` after the user acts.", "For an On-Device form approval, send the requested action and content only after the user approves.", "Do not start another program. `resume_execution` continues the saved program.", "Show new Link or machine secrets only to the requesting user. Never store them in logs or committed files."];
     readonly verification: readonly ["Confirm that the access check permits the intended actor and path.", "Test a new Link in the intended signed-out context. Confirm that unrelated resources stay inaccessible."];
     readonly prompt: true;
 }) & {