@spacefast/common 0.2.2 → 0.4.1

package/dist/contracts/error-codes.js

@@ -6,13 +6,25 @@
 // emitted; retiring an API surface removes its dead codes and generated
 // references together. Diagnostic codes share this table, so every diagnostic
 // carries a resolvable docs link.
-import { DOCS_BASE_URL } from "../config/domains.js";
-export const ERROR_DOCS_BASE_URL = `${DOCS_BASE_URL}/errors`;
+/**
+ * Where problem documents point when nobody says otherwise.
+ *
+ * Compiled in rather than imported from the domain registry: a host that serves
+ * its own error pages passes its own base URL through {@link errorDocsUrl}, and
+ * a table of codes must not drag a hostname registry along to be readable. The
+ * literal is checked against the registry in `config/domains.test.ts`.
+ */
+export const DEFAULT_PROBLEM_DOCS_BASE_URL = "https://spacefast.com/docs/errors";
 /** Media type of every 4xx/5xx response body (RFC 9457 problem details). */
 export const PROBLEM_CONTENT_TYPE = "application/problem+json";
-/** Problem `type` URI: docs origin + `/{code}`. Asserted by the conformance suite. */
-export function errorDocsUrl(code) {
-    return `${ERROR_DOCS_BASE_URL}/${code}`;
+/**
+ * Problem `type` URI: docs base + `/{code}`. Asserted by the conformance suite.
+ *
+ * `baseUrl` is what a white-labeled surface injects (the brand document's
+ * `problemDocsBaseUrl`); omitting it resolves against Spacefast's own docs.
+ */
+export function errorDocsUrl(code, baseUrl = DEFAULT_PROBLEM_DOCS_BASE_URL) {
+    return `${baseUrl.replace(/\/+$/, "")}/${code}`;
 }
 /** Problem `title`: the snake_case code as a sentence ("version_not_found" -> "Version not found"). */
 export function errorTitle(code) {
@@ -51,6 +63,7 @@ export const ERROR_CODES = [
     "build_timeout",
     "cache_purge_domain_required",
     "cache_purge_path_required",
+    "catalog_unavailable",
     "channel_name_reserved",
     "channel_pointer_moved",
     "channel_unsupported",
@@ -71,6 +84,26 @@ export const ERROR_CODES = [
     "confirmation_mismatch",
     "confirmation_required",
     "confirmation_token_required",
+    "connection_ambiguous",
+    "connection_forbidden",
+    "connection_needs_reauth",
+    "connection_not_found",
+    "connection_revoked",
+    "connection_serving_not_granted",
+    "connector_approval_required",
+    "connector_first_party_immutable",
+    "connector_not_found",
+    "connector_role_unknown",
+    "connector_run_budget_exhausted",
+    "connector_run_not_found",
+    "connector_run_not_resumable",
+    "connector_serving_admin_only",
+    "connector_serving_not_allowlisted",
+    "connector_slug_taken",
+    "connector_source_blocked",
+    "connector_source_unreachable",
+    "connector_tool_blocked",
+    "connector_write_in_read_handler",
     "continuation_unavailable",
     "continuation_used",
     "credential_expired",
@@ -89,6 +122,7 @@ export const ERROR_CODES = [
     "decision_in_progress",
     "device_authorization_failed",
     "device_verification_rate_limited",
+    "dns_control_observation_indeterminate",
     "dns_export_required",
     "dns_field_conflict",
     "dns_field_not_applicable",
@@ -127,7 +161,6 @@ export const ERROR_CODES = [
     "domain_facet_already_managed",
     "domain_facet_external",
     "domain_facet_not_applicable",
-    "domain_hostname_site_mismatch",
     "domain_in_use",
     "domain_lookup_rate_limited",
     "domain_not_bound",
@@ -140,7 +173,9 @@ export const ERROR_CODES = [
     "domain_wildcard_not_enabled",
     "download_required",
     "duplicate_version_path",
+    "elevation_denied",
     "elevation_not_required",
+    "elevation_required",
     "email_already_claimed",
     "email_verification_code_invalid",
     "enforcement_policy_overlap",
@@ -150,7 +185,17 @@ export const ERROR_CODES = [
     "feature_unavailable",
     "files_mode_does_not_support_spa",
     "forbidden",
+    "frame_link_inactive",
+    "frame_path_outside_link_resources",
+    "frame_principal_required",
+    "frame_session_invalid",
+    "frame_session_stale",
+    "frame_session_target_changed",
+    "frame_target_fixed",
+    "frame_version_required",
     "free_external_proxy_disabled",
+    "hostname_contested",
+    "human_approval_required",
     "idempotency_conflict_in_progress",
     "idempotency_key_reused",
     "incumbent_controls_dns",
@@ -198,6 +243,9 @@ export const ERROR_CODES = [
     "issuer_proof_invalid",
     "issuer_tenant_occupied",
     "issuer_unknown",
+    "jetpack_licensing_rejected",
+    "jetpack_licensing_response_invalid",
+    "jetpack_licensing_unavailable",
     "job_not_found",
     "job_not_promotable",
     "job_not_removable",
@@ -206,6 +254,8 @@ export const ERROR_CODES = [
     "log_retention_clamped",
     "lost_domain_control",
     "maintenance_in_progress",
+    "malformed_policy_pattern",
+    "malformed_tool_address",
     "malware_detected",
     "managed_domain_protected",
     "manifest_body_too_large",
@@ -218,18 +268,19 @@ export const ERROR_CODES = [
     "name_managed_by_config",
     "nameserver_delegation_required",
     "nameserver_divergence",
+    "next_package_layout_unsupported",
     "next_version_unsupported",
     "no_space_selected",
     "noop_publish",
     "not_enrolled",
     "not_found",
+    "owner_binding_requires_private_space",
     "partner_preset_not_grantable",
     "partner_tenant_immutable_client",
     "password_already_set",
     "password_compromised",
     "path_case_collision",
     "path_too_long",
-    "placement_invalid_burstable",
     "plan_grant_already_active",
     "plan_grant_already_revoked",
     "plan_unknown",
@@ -280,16 +331,21 @@ export const ERROR_CODES = [
     "queue_not_found",
     "quota_exceeded",
     "rate_limited",
+    "realtime_cursor_expired",
     "registration_expired",
     "registration_expiring",
+    "repository_ref_not_found",
+    "repository_stale_base",
     "resource_revision_changed",
     "response_headers_unservable",
     "response_table_too_large",
     "review_item_claimed",
     "routing_rules_over_plan",
+    "run_replay_diverged",
     "runtime_action_forbidden",
     "runtime_api_not_found",
     "runtime_callback_forbidden",
+    "runtime_capabilities_pending",
     "runtime_dev_unsupported",
     "runtime_hostname_unassigned",
     "runtime_instance_mismatch",
@@ -315,8 +371,6 @@ export const ERROR_CODES = [
     "service_signature_invalid",
     "session_not_fresh",
     "site_already_deleted",
-    "site_has_live_spaces",
-    "site_not_static",
     "site_required",
     "site_suspended",
     "slow_down",
@@ -326,6 +380,41 @@ export const ERROR_CODES = [
     "source_archive_decompression_timeout",
     "source_archive_expansion_ratio_exceeded",
     "source_archive_validation_busy",
+    "source_branch_changed",
+    "source_branch_missing",
+    "source_commit_not_saved",
+    "source_conflict_content_unavailable",
+    "source_conflicts_missing",
+    "source_exact_diff_unsupported",
+    "source_file_incomplete",
+    "source_file_mode_unavailable",
+    "source_file_required",
+    "source_file_too_large",
+    "source_file_unavailable",
+    "source_files_too_large",
+    "source_hunk_selection_invalid",
+    "source_hunk_stale",
+    "source_merge_snapshot_changed",
+    "source_merge_undo_unsupported",
+    "source_nothing_staged",
+    "source_operation_pending",
+    "source_operation_reused",
+    "source_operation_superseded",
+    "source_operation_unreconciled",
+    "source_patch_unavailable",
+    "source_resolution_invalid",
+    "source_resolution_pending",
+    "source_selection_invalid",
+    "source_snapshot_changed",
+    "source_tree_too_large",
+    "source_workspace_closed",
+    "source_workspace_connection_changed",
+    "source_workspace_connection_in_use",
+    "source_workspace_dirty",
+    "source_workspace_initializing",
+    "source_workspace_ref_reserved",
+    "source_workspace_revision_conflict",
+    "source_workspaces_unavailable",
     "space_already_claimed",
     "space_claim_unavailable",
     "space_claimed_credential_available",
@@ -429,16 +518,24 @@ export const ERROR_CODES = [
     "version_not_ready",
     "version_quota_exceeded",
     "version_total_bytes_exceeded",
+    "visitor_role_not_bindable",
+    "visual_review_context_too_large",
+    "visual_review_expired",
+    "visual_review_forbidden",
+    "visual_review_invalid_image",
+    "visual_review_invalid_note",
+    "visual_review_submitted",
+    "visual_review_too_large",
     "webhook_delivery_budget_exceeded",
     "webhook_managed_by_manifest",
     "whois_unavailable",
+    "wp_cli_timeout",
     "wp_cloud_assignment_kind_mismatch",
     "wp_cloud_assignment_space_mismatch",
     "wp_cloud_assignment_team_mismatch",
     "wp_cloud_client_in_use",
     "wp_cloud_client_not_found",
     "wp_cloud_site_still_assigned",
-    "wp_cloud_team_shared_site_exists",
     "wp_cloud_webhook_secret_not_configured",
     "zero_ai_unavailable",
     "zero_artifact_abi_mismatch",
@@ -511,6 +608,7 @@ export const ERROR_CODES = [
     "zero_log_query_invalid",
     "zero_method_not_allowed",
     "zero_migration_failed",
+    "zero_mutation_origin_invalid",
     "zero_query_name_missing",
     "zero_realtime_forbidden",
     "zero_realtime_message_invalid",

package/dist/contracts/events.d.ts

@@ -1,4 +1,5 @@
 import { z } from "zod";
+export declare const EVENT_PROPERTY_STRING_MAX_LENGTH = 512;
 export declare const eventSourceSchema: z.ZodEnum<{
     www: "www";
     dashboard: "dashboard";
@@ -32,6 +33,7 @@ export declare const EVENT_CATALOG: {
         actors: ("analytics_id" | "anonymous_id")[];
         properties: z.ZodObject<{
             path: z.ZodString;
+            url: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             referrer: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strict>;
     };
@@ -106,6 +108,7 @@ export declare const EVENT_CATALOG: {
         actors: ("analytics_id" | "anonymous_id")[];
         properties: z.ZodObject<{
             mode: z.ZodEnum<{
+                publish: "publish";
                 start: "start";
                 "new-space": "new-space";
             }>;
@@ -118,6 +121,7 @@ export declare const EVENT_CATALOG: {
         actors: ("analytics_id" | "anonymous_id")[];
         properties: z.ZodObject<{
             mode: z.ZodEnum<{
+                publish: "publish";
                 start: "start";
                 "new-space": "new-space";
             }>;
@@ -131,6 +135,7 @@ export declare const EVENT_CATALOG: {
         actors: ("analytics_id" | "anonymous_id")[];
         properties: z.ZodObject<{
             mode: z.ZodEnum<{
+                publish: "publish";
                 start: "start";
                 "new-space": "new-space";
             }>;

package/dist/contracts/events.js

@@ -15,7 +15,13 @@ const pathSchema = z
     .min(1)
     .max(2048)
     .describe("Client route or URL path the event happened on, without query strings.");
-const propertyValueSchema = z.union([z.string().max(512), z.number(), z.boolean(), z.null()]);
+export const EVENT_PROPERTY_STRING_MAX_LENGTH = 512;
+const propertyValueSchema = z.union([
+    z.string().max(EVENT_PROPERTY_STRING_MAX_LENGTH),
+    z.number(),
+    z.boolean(),
+    z.null(),
+]);
 const propertyBagSchema = z
     .record(z.string().max(64), propertyValueSchema)
     .refine((value) => Object.keys(value).length <= 32, {
@@ -58,6 +64,9 @@ const eventContextSchema = z
 const pageViewedPropertiesSchema = z
     .object({
     path: pathSchema,
+    // Full token-scrubbed location.href, so PostHog's $current_url keeps its
+    // host. Optional: senders that only know the path fall back to it.
+    url: z.string().max(2048).nullable().optional(),
     referrer: z.string().max(2048).nullable().optional(),
 })
     .strict();
@@ -120,8 +129,8 @@ const browserFunnelPropertiesSchema = propertyBagSchema.default({});
 // credential NEVER appear here — every shape
 // below is strict, so a sender that adds one is rejected at ingest.
 const startFunnelModeSchema = z
-    .enum(["start", "new-space"])
-    .describe("Which entry point the visitor is in: first-run /start, or new-space inside a team.");
+    .enum(["start", "new-space", "publish"])
+    .describe("Which entry point the visitor is in: first-run /start, new-space inside a team, or publishing an existing space.");
 const startFunnelStepSchema = z.string().min(1).max(64);
 const startFunnelAgentIdSchema = z
     .string()

package/dist/contracts/execution.d.ts

@@ -103,6 +103,8 @@ export declare const executionCapabilitiesSchema: z.ZodDefault<z.ZodObject<{
     spam: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
     email: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
     content: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+    storage: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+    connectors: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
 }, z.core.$strip>>;
 export type ExecutionCapabilities = z.infer<typeof executionCapabilitiesSchema>;
 /**
@@ -110,7 +112,7 @@ export type ExecutionCapabilities = z.infer<typeof executionCapabilitiesSchema>;
  * derived from a response body, so two spaces never list their capabilities
  * differently because JSON came back reshuffled.
  */
-export declare const EXECUTION_CAPABILITY_ORDER: readonly ["db", "fetch", "auth", "env", "realtime", "logging", "gravatar", "spam", "email", "content"];
+export declare const EXECUTION_CAPABILITY_ORDER: readonly ["db", "fetch", "auth", "env", "realtime", "logging", "gravatar", "spam", "email", "content", "storage", "connectors"];
 /**
  * The portable seam. `db`, `auth` and `realtime` bind a handler to the local
  * tier: `db` because Zero guarantees one parent-owned transaction that an
@@ -157,6 +159,8 @@ export declare function executionEndpointSourceSchema(routePathSchema: z.ZodType
         spam: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
         email: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
         content: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+        storage: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+        connectors: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
     }, z.core.$strip>>;
 }, z.core.$strict>;
 /**

package/dist/contracts/execution.js

@@ -186,6 +186,8 @@ export const executionCapabilitiesSchema = z
     spam: z.boolean().default(false),
     email: z.boolean().default(false),
     content: z.boolean().default(false),
+    storage: z.boolean().default(false),
+    connectors: z.boolean().default(false),
 })
     .partial()
     .default({});
@@ -205,6 +207,8 @@ export const EXECUTION_CAPABILITY_ORDER = [
     "spam",
     "email",
     "content",
+    "storage",
+    "connectors",
 ];
 // A capability added to executionCapabilitiesSchema must also be added to the order above.
 true;

package/dist/contracts/feature-lifecycle.d.ts

@@ -297,7 +297,7 @@ declare const featureEntries: readonly [{
         readonly feedbackUrl: null;
     };
     readonly owner: "team:runtime";
-    readonly requires: readonly ["sites.dedicated_runtime"];
+    readonly requires: readonly [];
     readonly lifecycleAdoptedAt: "2026-08-28";
     readonly reviewAfter: "2026-09-11";
     readonly removeAfter: "2026-10-31";
@@ -318,31 +318,26 @@ declare const featureEntries: readonly [{
     };
 }, {
     readonly cohort: "launch";
-    readonly key: "sites.dedicated_runtime";
-    readonly name: "Dedicated runtime sites";
-    readonly description: "Allows teams to create dedicated WP.Cloud sites and place team spaces on them.";
-    readonly stage: "ga";
-    readonly surface: true;
-    readonly defaultEnabled: true;
+    readonly key: "sites.jetpack";
+    readonly name: "Managed Jetpack";
+    readonly description: "Activates Jetpack on managed WordPress sites and attaches configured partner licenses.";
+    readonly stage: "internal";
+    readonly surface: false;
+    readonly defaultEnabled: false;
     readonly runtime: {
-        readonly enabledInDevelopment: true;
         readonly enabledForA8c: true;
         readonly planDefaults: {};
     };
-    readonly docs: {
-        readonly channel: "public";
-        readonly slug: "/docs/account/plans";
-        readonly feedbackUrl: null;
-    };
+    readonly docs: null;
     readonly owner: "team:runtime";
     readonly requires: readonly [];
-    readonly lifecycleAdoptedAt: "2026-07-12";
-    readonly reviewAfter: null;
-    readonly removeAfter: "2026-11-01";
-    readonly gaAt: "2026-08-05";
+    readonly lifecycleAdoptedAt: "2026-08-29";
+    readonly reviewAfter: "2026-09-12";
+    readonly removeAfter: "2026-10-31";
+    readonly gaAt: null;
     readonly downRamp: {
-        readonly code: "dedicated_runtime_stop";
-        readonly summary: "Deny customer mutation and new placement/materialization immediately; serve-time revocation of already-materialized output lands with the deferred runtime-proof slice; operator recovery/export/delete remain; downloaded bytes cannot be recalled.";
+        readonly code: "managed_jetpack_stop";
+        readonly summary: "Stop new plugin and license reconciliation. Leave attached licenses and existing Jetpack connections intact for deliberate cleanup.";
     };
 }, {
     readonly cohort: "launch";
@@ -478,6 +473,34 @@ declare const featureEntries: readonly [{
         readonly code: "slug_rename_stop";
         readonly summary: "Block new slug renames while earlier hostname and runtime updates continue.";
     };
+}, {
+    readonly cohort: "launch";
+    readonly key: "content.users";
+    readonly name: "Space users";
+    readonly description: string;
+    readonly stage: "internal";
+    readonly surface: true;
+    readonly defaultEnabled: false;
+    readonly runtime: {
+        readonly enabledInDevelopment: true;
+        readonly enabledForA8c: true;
+        readonly planDefaults: {};
+    };
+    readonly docs: {
+        readonly channel: "handbook";
+        readonly slug: "/features/content";
+        readonly feedbackUrl: null;
+    };
+    readonly owner: "team:runtime";
+    readonly requires: readonly [];
+    readonly lifecycleAdoptedAt: "2026-08-29";
+    readonly reviewAfter: "2026-09-26";
+    readonly removeAfter: "2026-11-01";
+    readonly gaAt: null;
+    readonly downRamp: {
+        readonly code: "space_users_stop";
+        readonly summary: string;
+    };
 }, {
     readonly key: "pages.templates";
     readonly name: "Custom page templates";
@@ -496,6 +519,16 @@ declare const featureEntries: readonly [{
         readonly enabledForA8c: false;
         readonly planDefaults: {};
     };
+}, {
+    readonly key: "connectors";
+    readonly name: "Connectors";
+    readonly description: "Team-scoped connectors: register tool sources, connect accounts, decide policy, and run tools from agents, the CLI, MCP, and the dashboard.";
+    readonly defaultEnabled: true;
+    readonly runtime: {
+        readonly enabledInDevelopment: true;
+        readonly enabledForA8c: true;
+        readonly planDefaults: {};
+    };
 }];
 type FeatureEntry = (typeof featureEntries)[number];
 type LifecycleFeatureEntry = Extract<FeatureEntry, {
@@ -512,5 +545,5 @@ type RuntimeDefinitionRecord<K extends string> = {
     readonly [Key in K]: RuntimeFeatureDefinitionFields<Key>;
 };
 export declare const FEATURE_RUNTIME_KEYS: readonly RuntimeFeatureKey[];
-export declare const FEATURE_RUNTIME_DEFINITIONS: Readonly<RuntimeDefinitionRecord<"zero" | "plans.paid.available" | "anonymous.publishing" | "beta.enrollment_gate" | "domains.search" | "domains.registration" | "domains.dns_management" | "domains.wpcom_dns" | "domains.domain_connect" | "domains.proxy_bindings" | "collab.notices" | "collab.comments" | "content.managed" | "sites.dedicated_runtime" | "collab.drawing" | "tags" | "functions" | "spaces.slug_rename" | "pages.templates" | "branding.hide">>;
+export declare const FEATURE_RUNTIME_DEFINITIONS: Readonly<RuntimeDefinitionRecord<"connectors" | "zero" | "tags" | "functions" | "plans.paid.available" | "anonymous.publishing" | "beta.enrollment_gate" | "domains.search" | "domains.registration" | "domains.dns_management" | "domains.wpcom_dns" | "domains.domain_connect" | "domains.proxy_bindings" | "collab.notices" | "collab.comments" | "content.managed" | "collab.drawing" | "sites.jetpack" | "spaces.slug_rename" | "content.users" | "pages.templates" | "branding.hide">>;
 export declare const FEATURE_LIFECYCLE_BY_KEY: ReadonlyMap<LifecycleFeatureKey, FeatureRegistryEntry<LifecycleFeatureKey>>;

package/dist/contracts/feature-lifecycle.js

@@ -302,7 +302,7 @@ const featureEntries = Object.freeze([
             feedbackUrl: null,
         },
         owner: "team:runtime",
-        requires: ["sites.dedicated_runtime"],
+        requires: [],
         lifecycleAdoptedAt: "2026-08-28",
         reviewAfter: "2026-09-11",
         removeAfter: "2026-10-31",
@@ -325,33 +325,26 @@ const featureEntries = Object.freeze([
     },
     {
         cohort: "launch",
-        key: "sites.dedicated_runtime",
-        name: "Dedicated runtime sites",
-        description: "Allows teams to create dedicated WP.Cloud sites and place team spaces on them.",
-        // Every Space owns its runtime site. The flag remains only as the
-        // operational down-ramp for new placement and materialization.
-        stage: "ga",
-        surface: true,
-        defaultEnabled: true,
+        key: "sites.jetpack",
+        name: "Managed Jetpack",
+        description: "Activates Jetpack on managed WordPress sites and attaches configured partner licenses.",
+        stage: "internal",
+        surface: false,
+        defaultEnabled: false,
         runtime: {
-            enabledInDevelopment: true,
             enabledForA8c: true,
             planDefaults: {},
         },
-        docs: {
-            channel: "public",
-            slug: "/docs/account/plans",
-            feedbackUrl: null,
-        },
+        docs: null,
         owner: "team:runtime",
         requires: [],
-        lifecycleAdoptedAt: "2026-07-12",
-        reviewAfter: null,
-        removeAfter: "2026-11-01",
-        gaAt: "2026-08-05",
+        lifecycleAdoptedAt: "2026-08-29",
+        reviewAfter: "2026-09-12",
+        removeAfter: "2026-10-31",
+        gaAt: null,
         downRamp: {
-            code: "dedicated_runtime_stop",
-            summary: "Deny customer mutation and new placement/materialization immediately; serve-time revocation of already-materialized output lands with the deferred runtime-proof slice; operator recovery/export/delete remain; downloaded bytes cannot be recalled.",
+            code: "managed_jetpack_stop",
+            summary: "Stop new plugin and license reconciliation. Leave attached licenses and existing Jetpack connections intact for deliberate cleanup.",
         },
     },
     {
@@ -460,8 +453,7 @@ const featureEntries = Object.freeze([
         },
         owner: "team:zero",
         // A worker executes on Cloudflare rather than on the space's box and
-        // reaches the database only through the broker, so dispatch has no
-        // dedicated-runtime lifecycle dependency.
+        // reaches the database only through the broker.
         requires: [],
         lifecycleAdoptedAt: "2026-07-27",
         reviewAfter: null,
@@ -503,6 +495,45 @@ const featureEntries = Object.freeze([
             summary: "Block new slug renames while earlier hostname and runtime updates continue.",
         },
     },
+    {
+        cohort: "launch",
+        key: "content.users",
+        name: "Space users",
+        description: "Exposes a Space's own WordPress users — list, read, create and update — as zero/wp/users/* Abilities, " +
+            "under WordPress's capability rules. It adds no user store: a Space user is the durable WordPress " +
+            "principal for an (issuer, subject) authority, and roles stay projected from Grants.",
+        stage: "internal",
+        // The Space's Users page is the surface, and this key gates it in both
+        // places that matter: the dashboard row, and the editor launch that opens
+        // the screen. Off by default while internal, opened per team, exactly as
+        // content.managed is — the two are turned on together.
+        surface: true,
+        defaultEnabled: false,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+        docs: {
+            channel: "handbook",
+            slug: "/features/content",
+            feedbackUrl: null,
+        },
+        owner: "team:runtime",
+        // The Abilities register on the Space's WordPress whether or not content
+        // is managed. Every Space has that runtime, so it is not a feature dependency.
+        requires: [],
+        lifecycleAdoptedAt: "2026-08-29",
+        reviewAfter: "2026-09-26",
+        removeAfter: "2026-11-01",
+        gaAt: null,
+        downRamp: {
+            code: "space_users_stop",
+            summary: "Stop registering the zero/wp/users/* Abilities, which denies every user read and write through them. " +
+                "WordPress user rows, their Space membership and the durable principal lane that keeps sign-in working " +
+                "are untouched.",
+        },
+    },
     {
         // Partner plan-catalog entitlement dial: a partner plan that grants this key
         // lets its principals' spaces compile `_pages/*.html` full-page takeovers.
@@ -529,6 +560,17 @@ const featureEntries = Object.freeze([
             planDefaults: {},
         },
     },
+    {
+        key: "connectors",
+        name: "Connectors",
+        description: "Team-scoped connectors: register tool sources, connect accounts, decide policy, and run tools from agents, the CLI, MCP, and the dashboard.",
+        defaultEnabled: true,
+        runtime: {
+            enabledInDevelopment: true,
+            enabledForA8c: true,
+            planDefaults: {},
+        },
+    },
 ]);
 function isLifecycleFeatureEntry(entry) {
     return "cohort" in entry;