@spacefast/common 0.2.2 → 0.4.1

package/dist/contracts/grants.js

@@ -1,14 +1,11 @@
 import { z } from "zod";
-import { ISO_COUNTRY_CODES } from "./countries.js";
+import { grantCapabilitySchema, grantConstraintsSchema, grantReferenceSchema, identityConnectionPublicKeySchema, grantResourceSetSchema, grantTargetSelectorSchema, GRANT_CAPABILITIES, uniqueArray, } from "./grants-core.js";
 import { registeredIdSchema } from "./ids.js";
-export const GRANT_CAPABILITIES = [
-    "page.view",
-    "comments.read",
-    "comments.write",
-    "content.publish",
-    "access.manage",
-];
-export const grantCapabilitySchema = z.enum(GRANT_CAPABILITIES);
+// Spacefast's sharing model: WHO holds an authority, and how it is stored,
+// minted and revoked. The vocabulary an authority is expressed in — capabilities,
+// resource patterns, targets, constraints — is host-agnostic and lives in
+// `./grants-core.js`, which this module re-exports so a Grant reads whole.
+export * from "./grants-core.js";
 export const GRANT_AUDIENCE_KINDS = [
     "public",
     "team",
@@ -19,7 +16,6 @@ export const GRANT_AUDIENCE_KINDS = [
     "external",
 ];
 export const grantAudienceKindSchema = z.enum(GRANT_AUDIENCE_KINDS);
-const grantReferenceSchema = z.string().trim().min(1).max(255);
 export const grantAudienceSchema = z.discriminatedUnion("kind", [
     z.object({ kind: z.literal("public") }).strict(),
     z.object({ kind: z.literal("team"), teamId: grantReferenceSchema }).strict(),
@@ -35,357 +31,6 @@ export const grantAudienceSchema = z.discriminatedUnion("kind", [
     })
         .strict(),
 ]);
-function hasUnsafePatternCharacter(value) {
-    for (const character of value) {
-        const codePoint = character.codePointAt(0);
-        if (codePoint === undefined ||
-            codePoint <= 0x1f ||
-            codePoint === 0x7f ||
-            character === "\\" ||
-            character === "?" ||
-            character === "#") {
-            return true;
-        }
-    }
-    return false;
-}
-/**
- * Canonical resource-pattern syntax shared by config compilation and evaluation.
- * `*` matches one path segment and `**` matches zero or more segments. Wildcards
- * are whole segments so a pattern can never disguise an encoded separator.
- *
- * Unlike URL-route canonicalization, resource patterns retain a terminal
- * `index.html`: Grants can constrain the visitor-facing route and the artifact
- * it resolves to independently.
- */
-export function normalizeGrantResourcePattern(input) {
-    if (!input.startsWith("/") || input.startsWith("//") || hasUnsafePatternCharacter(input)) {
-        throw new TypeError("resource pattern must be a plain absolute URL path pattern");
-    }
-    if (/%2f|%5c|%2a/iu.test(input)) {
-        throw new TypeError("resource pattern contains an ambiguous encoded separator or wildcard");
-    }
-    let decoded;
-    try {
-        decoded = decodeURIComponent(input);
-    }
-    catch {
-        throw new TypeError("resource pattern contains malformed percent encoding");
-    }
-    if (hasUnsafePatternCharacter(decoded)) {
-        throw new TypeError("resource pattern contains an unsafe character");
-    }
-    const segments = [];
-    for (const rawSegment of decoded.split("/")) {
-        const segment = rawSegment.normalize("NFC");
-        if (segment === "" || segment === ".")
-            continue;
-        if (segment === "..") {
-            if (segments.length === 0)
-                throw new TypeError("resource pattern escapes the URL root");
-            segments.pop();
-            continue;
-        }
-        if (segment.includes("*") && segment !== "*" && segment !== "**") {
-            throw new TypeError("resource wildcards must occupy a whole path segment");
-        }
-        segments.push(segment);
-    }
-    return segments.length === 0 ? "/" : `/${segments.join("/")}`;
-}
-export const grantResourcePatternSchema = z
-    .string()
-    .min(1)
-    .max(1024)
-    .check((context) => {
-    try {
-        context.value = normalizeGrantResourcePattern(context.value);
-    }
-    catch (error) {
-        context.issues.push({
-            code: "custom",
-            input: context.value,
-            message: error instanceof Error ? error.message : "invalid resource pattern",
-        });
-    }
-});
-function uniqueArray(values) {
-    return new Set(values).size === values.length;
-}
-export const GRANT_RESOURCE_PATTERN_LIMIT = 100;
-export const grantResourceSetSchema = z
-    .object({
-    include: z.array(grantResourcePatternSchema).min(1).max(GRANT_RESOURCE_PATTERN_LIMIT),
-    exclude: z.array(grantResourcePatternSchema).max(GRANT_RESOURCE_PATTERN_LIMIT).default([]),
-})
-    .strict()
-    .superRefine((value, context) => {
-    if (value.include.length + value.exclude.length > GRANT_RESOURCE_PATTERN_LIMIT) {
-        context.addIssue({
-            code: "custom",
-            message: `resource sets support up to ${GRANT_RESOURCE_PATTERN_LIMIT} patterns`,
-        });
-    }
-    if (!uniqueArray(value.include)) {
-        context.addIssue({
-            code: "custom",
-            path: ["include"],
-            message: "include patterns must be unique",
-        });
-    }
-    if (!uniqueArray(value.exclude)) {
-        context.addIssue({
-            code: "custom",
-            path: ["exclude"],
-            message: "exclude patterns must be unique",
-        });
-    }
-});
-export const GRANT_TARGET_KINDS = ["live", "version", "branch", "all_versions"];
-export const grantTargetKindSchema = z.enum(GRANT_TARGET_KINDS);
-export const grantTargetSelectorSchema = z.discriminatedUnion("kind", [
-    z.object({ kind: z.literal("live") }).strict(),
-    z.object({ kind: z.literal("version"), versionId: grantReferenceSchema }).strict(),
-    z.object({ kind: z.literal("branch"), branch: grantReferenceSchema }).strict(),
-    z.object({ kind: z.literal("all_versions") }).strict(),
-]);
-function parseIpv4(input) {
-    const parts = input.split(".");
-    if (parts.length !== 4)
-        return null;
-    let bits = 0n;
-    for (const part of parts) {
-        if (!/^(?:0|[1-9][0-9]{0,2})$/u.test(part))
-            return null;
-        const value = Number(part);
-        if (value > 255)
-            return null;
-        bits = (bits << 8n) | BigInt(value);
-    }
-    return { bits, width: 32 };
-}
-function parseIpv6(input) {
-    if (input === "" || input.includes("%") || input.split("::").length > 2)
-        return null;
-    let value = input.toLowerCase();
-    const ipv4Tail = value.match(/(?:^|:)([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)$/u)?.[1];
-    if (ipv4Tail) {
-        const parsed = parseIpv4(ipv4Tail);
-        if (!parsed)
-            return null;
-        value = `${value.slice(0, -ipv4Tail.length)}${Number((parsed.bits >> 16n) & 0xffffn).toString(16)}:${Number(parsed.bits & 0xffffn).toString(16)}`;
-    }
-    const [leftText, rightText] = value.split("::");
-    const left = leftText ? leftText.split(":") : [];
-    const right = rightText ? rightText.split(":") : [];
-    if ([...left, ...right].some((part) => !/^[0-9a-f]{1,4}$/u.test(part)))
-        return null;
-    const compressed = value.includes("::");
-    const missing = 8 - left.length - right.length;
-    if ((!compressed && missing !== 0) || (compressed && missing < 1))
-        return null;
-    const parts = [...left, ...Array.from({ length: missing }, () => "0"), ...right];
-    if (parts.length !== 8)
-        return null;
-    return {
-        bits: parts.reduce((bits, part) => (bits << 16n) | BigInt(`0x${part}`), 0n),
-        width: 128,
-    };
-}
-function parseIpAddress(input) {
-    return parseIpv4(input) ?? parseIpv6(input);
-}
-export function normalizeGrantNetworkCidr(input) {
-    const value = input.trim().toLowerCase();
-    const separator = value.lastIndexOf("/");
-    const address = separator === -1 ? value : value.slice(0, separator);
-    const parsed = parseIpAddress(address);
-    if (!parsed)
-        throw new TypeError("network rules require a valid IPv4 or IPv6 address");
-    if (separator === -1)
-        return value;
-    const prefixText = value.slice(separator + 1);
-    if (!/^(?:0|[1-9][0-9]{0,2})$/u.test(prefixText)) {
-        throw new TypeError("network rules require a valid CIDR prefix");
-    }
-    const prefix = Number(prefixText);
-    if (prefix > parsed.width)
-        throw new TypeError("network CIDR prefix exceeds its address width");
-    return `${address}/${prefix}`;
-}
-export function grantNetworkCidrMatches(cidr, ipAddress) {
-    let canonical;
-    try {
-        canonical = normalizeGrantNetworkCidr(cidr);
-    }
-    catch {
-        return false;
-    }
-    const separator = canonical.lastIndexOf("/");
-    const networkText = separator === -1 ? canonical : canonical.slice(0, separator);
-    const network = parseIpAddress(networkText);
-    const address = parseIpAddress(ipAddress.trim().toLowerCase());
-    if (!network || !address || network.width !== address.width)
-        return false;
-    const prefix = separator === -1 ? network.width : Number(canonical.slice(separator + 1));
-    if (prefix === 0)
-        return true;
-    const shift = BigInt(network.width - prefix);
-    return network.bits >> shift === address.bits >> shift;
-}
-const grantNetworkCidrSchema = z
-    .string()
-    .min(1)
-    .max(64)
-    .check((context) => {
-    try {
-        context.value = normalizeGrantNetworkCidr(context.value);
-    }
-    catch (error) {
-        context.issues.push({
-            code: "custom",
-            input: context.value,
-            message: error instanceof Error ? error.message : "invalid network rule",
-        });
-    }
-});
-const grantCountrySchema = z
-    .string()
-    .length(2)
-    .overwrite((country) => country.toUpperCase())
-    .refine((country) => ISO_COUNTRY_CODES.includes(country), "Country must be an ISO 3166-1 alpha-2 code.");
-const grantConstraintDateSchema = z.string().datetime();
-const grantConstraintMaxUsesSchema = z.number().int().positive().max(1_000_000);
-const grantConstraintIpCidrsSchema = z.array(grantNetworkCidrSchema).min(1).max(50);
-const grantConstraintCountriesSchema = z.array(grantCountrySchema).min(1).max(250);
-const grantConstraintUserAgentsSchema = z.array(z.string().trim().min(1).max(200)).min(1).max(50);
-const grantNetworkConstraintsSchema = z
-    .object({
-    ipCidrs: grantConstraintIpCidrsSchema.optional(),
-    countries: grantConstraintCountriesSchema.optional(),
-    excludedCountries: grantConstraintCountriesSchema.optional(),
-    excludedUserAgentSubstrings: grantConstraintUserAgentsSchema.optional(),
-})
-    .strict()
-    .superRefine((network, context) => {
-    if (network.ipCidrs === undefined &&
-        network.countries === undefined &&
-        network.excludedCountries === undefined &&
-        network.excludedUserAgentSubstrings === undefined) {
-        context.addIssue({
-            code: "custom",
-            message: "network requires at least one IP, country, or user-agent selector",
-        });
-    }
-});
-export const grantConstraintsSchema = z
-    .object({
-    notBefore: grantConstraintDateSchema.optional(),
-    expiresAt: grantConstraintDateSchema.optional(),
-    maxUses: grantConstraintMaxUsesSchema.optional(),
-    requireVerifiedEmail: z.boolean().optional(),
-    network: grantNetworkConstraintsSchema.optional(),
-})
-    .strict()
-    .superRefine((value, context) => {
-    if (value.notBefore !== undefined &&
-        value.expiresAt !== undefined &&
-        Date.parse(value.notBefore) >= Date.parse(value.expiresAt)) {
-        context.addIssue({
-            code: "custom",
-            path: ["expiresAt"],
-            message: "expiresAt must be later than notBefore",
-        });
-    }
-});
-/** Field-scoped PATCH shape. `null` clears one constraint without replacing its siblings. */
-export const grantConstraintsPatchSchema = z
-    .object({
-    notBefore: grantConstraintDateSchema.nullable().optional(),
-    expiresAt: grantConstraintDateSchema.nullable().optional(),
-    maxUses: grantConstraintMaxUsesSchema.nullable().optional(),
-    requireVerifiedEmail: z.boolean().nullable().optional(),
-    network: z
-        .object({
-        ipCidrs: grantConstraintIpCidrsSchema.nullable().optional(),
-        countries: grantConstraintCountriesSchema.nullable().optional(),
-        excludedCountries: grantConstraintCountriesSchema.nullable().optional(),
-        excludedUserAgentSubstrings: grantConstraintUserAgentsSchema.nullable().optional(),
-    })
-        .strict()
-        .nullable()
-        .optional(),
-})
-    .strict();
-export function diffGrantConstraints(original, draft) {
-    const network = JSON.stringify(original.network) === JSON.stringify(draft.network)
-        ? undefined
-        : draft.network === undefined
-            ? null
-            : {
-                ...(JSON.stringify(original.network?.ipCidrs) === JSON.stringify(draft.network.ipCidrs)
-                    ? {}
-                    : { ipCidrs: draft.network.ipCidrs ?? null }),
-                ...(JSON.stringify(original.network?.countries) ===
-                    JSON.stringify(draft.network.countries)
-                    ? {}
-                    : { countries: draft.network.countries ?? null }),
-                ...(JSON.stringify(original.network?.excludedCountries) ===
-                    JSON.stringify(draft.network.excludedCountries)
-                    ? {}
-                    : { excludedCountries: draft.network.excludedCountries ?? null }),
-                ...(JSON.stringify(original.network?.excludedUserAgentSubstrings) ===
-                    JSON.stringify(draft.network.excludedUserAgentSubstrings)
-                    ? {}
-                    : {
-                        excludedUserAgentSubstrings: draft.network.excludedUserAgentSubstrings ?? null,
-                    }),
-            };
-    const patch = {
-        ...(original.notBefore === draft.notBefore ? {} : { notBefore: draft.notBefore ?? null }),
-        ...(original.expiresAt === draft.expiresAt ? {} : { expiresAt: draft.expiresAt ?? null }),
-        ...(original.maxUses === draft.maxUses ? {} : { maxUses: draft.maxUses ?? null }),
-        ...(original.requireVerifiedEmail === draft.requireVerifiedEmail
-            ? {}
-            : { requireVerifiedEmail: draft.requireVerifiedEmail ?? null }),
-        ...(network === undefined ? {} : { network }),
-    };
-    return Object.keys(patch).length === 0 ? undefined : patch;
-}
-export function applyGrantConstraintsPatch(current, patch) {
-    const network = patch.network === undefined
-        ? current.network
-        : patch.network === null
-            ? undefined
-            : {
-                ...current.network,
-                ...(patch.network.ipCidrs === undefined
-                    ? {}
-                    : { ipCidrs: patch.network.ipCidrs ?? undefined }),
-                ...(patch.network.countries === undefined
-                    ? {}
-                    : { countries: patch.network.countries ?? undefined }),
-                ...(patch.network.excludedCountries === undefined
-                    ? {}
-                    : { excludedCountries: patch.network.excludedCountries ?? undefined }),
-                ...(patch.network.excludedUserAgentSubstrings === undefined
-                    ? {}
-                    : {
-                        excludedUserAgentSubstrings: patch.network.excludedUserAgentSubstrings ?? undefined,
-                    }),
-            };
-    const compactNetwork = network && Object.values(network).some((value) => value !== undefined) ? network : undefined;
-    return grantConstraintsSchema.parse({
-        ...current,
-        ...(patch.notBefore === undefined ? {} : { notBefore: patch.notBefore ?? undefined }),
-        ...(patch.expiresAt === undefined ? {} : { expiresAt: patch.expiresAt ?? undefined }),
-        ...(patch.maxUses === undefined ? {} : { maxUses: patch.maxUses ?? undefined }),
-        ...(patch.requireVerifiedEmail === undefined
-            ? {}
-            : { requireVerifiedEmail: patch.requireVerifiedEmail ?? undefined }),
-        network: compactNetwork,
-    });
-}
 export const GRANT_SOURCE_KINDS = ["config", "managed", "system"];
 export const grantSourceKindSchema = z.enum(GRANT_SOURCE_KINDS);
 export const PRECLAIM_OPEN_GRANT_SOURCE_REFERENCE = "open:preclaim-author";
@@ -416,6 +61,21 @@ const grantDimensionsSchema = z
 })
     .strict();
 function validateGrantAudienceCapabilityBoundary(value, context) {
+    if (value.constraints.frameOrigin !== undefined && value.audience.kind !== "link") {
+        context.addIssue({
+            code: "custom",
+            path: ["constraints", "frameOrigin"],
+            message: "frameOrigin is available only for Link audiences",
+        });
+    }
+    if (value.constraints.frameOrigin !== undefined &&
+        (value.constraints.requireVerifiedEmail === true || value.constraints.network !== undefined)) {
+        context.addIssue({
+            code: "custom",
+            path: ["constraints", "frameOrigin"],
+            message: "Frame Links cannot use email or network checks",
+        });
+    }
     if (value.audience.kind === "public" &&
         value.capabilities.some((capability) => capability === "content.publish" || capability === "access.manage")) {
         context.addIssue({
@@ -807,14 +467,6 @@ export const credentialRevocationSchema = z
     .strict();
 export const IDENTITY_CONNECTION_DEFAULT_TTL_SECONDS = 8 * 60 * 60;
 export const EXTERNAL_IDENTITY_MAX_TTL_SECONDS = 30 * 60;
-export const identityConnectionPublicKeySchema = z
-    .object({
-    kid: z.string().min(1).max(64),
-    publicKey: z
-        .string()
-        .regex(/^[A-Za-z0-9_-]{43}$/, "publicKey must be a raw Ed25519 public key"),
-})
-    .strict();
 /**
  * Issuers the platform stamps on its own external Grants. A Team-configured
  * connection may not claim one: the authority reference an external audience

package/dist/contracts/ids-core.d.ts

@@ -0,0 +1,11 @@
+import { z } from "zod";
+/** An id in one prefixed family, e.g. `spc_…`. */
+export type PrefixedId<P extends string = string> = `${P}_${string}`;
+/**
+ * Validate an id in one prefixed family. `label` names the resource in the
+ * failure message ("Invalid Space id"), so a caller that has a registry can
+ * spend it and a caller that does not can pass the prefix itself.
+ */
+export declare function prefixedIdSchema<P extends string>(prefix: P, label: string): z.ZodTemplateLiteral<`${`${P}_` extends infer T extends string | number | bigint | boolean | null | undefined ? T extends undefined ? "" : T : never}${string}`>;
+/** Mint a globally unique id in one prefixed family. */
+export declare function createPrefixedId<P extends string>(prefix: P): PrefixedId<P>;

package/dist/contracts/ids-core.js

@@ -0,0 +1,14 @@
+import { z } from "zod";
+const ID_BODY_PATTERN = /^[A-Za-z0-9]+$/;
+/**
+ * Validate an id in one prefixed family. `label` names the resource in the
+ * failure message ("Invalid Space id"), so a caller that has a registry can
+ * spend it and a caller that does not can pass the prefix itself.
+ */
+export function prefixedIdSchema(prefix, label) {
+    return z.templateLiteral([z.literal(`${prefix}_`), z.string().regex(ID_BODY_PATTERN)], `Invalid ${label} id`);
+}
+/** Mint a globally unique id in one prefixed family. */
+export function createPrefixedId(prefix) {
+    return `${prefix}_${crypto.randomUUID().replaceAll("-", "")}`;
+}

package/dist/contracts/ids.d.ts

@@ -1,8 +1,9 @@
-import { z } from "zod";
+import { type PrefixedId } from "./ids-core.js";
 export declare const ID_PREFIXES: {
     readonly ten: "Tenant";
     readonly site: "Site";
     readonly spc: "Space";
+    readonly swk: "SourceWorkspace";
     readonly ver: "Version";
     readonly cmt: "CommentThread";
     readonly bld: "Build";
@@ -37,12 +38,14 @@ export declare const ID_PREFIXES: {
     readonly pti: "PartnerTokenIssuer";
     readonly usg: "UsageRecord";
     readonly upr: "UsagePeriod";
+    readonly cxn: "ConnectorConnection";
+    readonly cxr: "ConnectorRun";
 };
 export type IdPrefix = keyof typeof ID_PREFIXES;
 /** Any registered public resource id, e.g. `spc_…` or `ver_…`. */
-export type Id = `${IdPrefix}_${string}`;
+export type Id = PrefixedId<IdPrefix>;
 /** Validate an id belonging to one registered public resource family. */
-export declare function registeredIdSchema<P extends IdPrefix>(prefix: P): z.ZodTemplateLiteral<`${`${P}_` extends infer T extends string | number | bigint | boolean | null | undefined ? T extends undefined ? "" : T : never}${string}`>;
+export declare function registeredIdSchema<P extends IdPrefix>(prefix: P): import("zod").ZodTemplateLiteral<`${`${P}_` extends infer T extends string | number | bigint | boolean | null | undefined ? T extends undefined ? "" : T : never}${string}`>;
 export declare const MAIN_TENANT_ID = "ten_main";
 /** Mint a globally unique id for a registered public resource prefix. */
-export declare function createId<P extends IdPrefix>(prefix: P): `${P}_${string}`;
+export declare function createId<P extends IdPrefix>(prefix: P): PrefixedId<P>;

package/dist/contracts/ids.js

@@ -1,5 +1,8 @@
-import { z } from "zod";
-// Id prefix registry (the platform spec "Id prefix registry").
+import { createPrefixedId, prefixedIdSchema } from "./ids-core.js";
+// The SPACEFAST id prefix registry (the platform spec "Id prefix registry").
+// The prefixed-id grammar itself is host-agnostic and lives in `./ids-core.js`;
+// this file is the concrete list of families Spacefast mints, so it is a
+// Spacefast-private contract that Zero-side packages must not import.
 // Every PUBLIC resource registers a prefix here before it ships; ids are globally
 // unique and handle ids (operations, exports, imports, transfers, builds) are
 // fetchable at a top-level collection with no extra context. Control-plane-internal
@@ -10,6 +13,7 @@ export const ID_PREFIXES = {
     ten: "Tenant",
     site: "Site",
     spc: "Space",
+    swk: "SourceWorkspace",
     ver: "Version",
     cmt: "CommentThread",
     bld: "Build",
@@ -45,10 +49,14 @@ export const ID_PREFIXES = {
     pti: "PartnerTokenIssuer",
     usg: "UsageRecord",
     upr: "UsagePeriod",
+    // Connectors. A connector is addressed by its team-unique slug and a policy
+    // rule by the engine's own opaque id, so neither mints a prefix here.
+    cxn: "ConnectorConnection",
+    cxr: "ConnectorRun",
 };
 /** Validate an id belonging to one registered public resource family. */
 export function registeredIdSchema(prefix) {
-    return z.templateLiteral([z.literal(`${prefix}_`), z.string().regex(/^[A-Za-z0-9]+$/)], `Invalid ${ID_PREFIXES[prefix]} id`);
+    return prefixedIdSchema(prefix, ID_PREFIXES[prefix]);
 }
 // The main Stattic tenant every self-serve team/user/resource lives under. A
 // well-known CONSTANT, never configuration: grammatically a normal tenant id with
@@ -56,5 +64,5 @@ export function registeredIdSchema(prefix) {
 export const MAIN_TENANT_ID = "ten_main";
 /** Mint a globally unique id for a registered public resource prefix. */
 export function createId(prefix) {
-    return `${prefix}_${crypto.randomUUID().replaceAll("-", "")}`;
+    return createPrefixedId(prefix);
 }

package/dist/contracts/internal.d.ts

@@ -40,6 +40,15 @@ export declare const uploadTargetSchema: z.ZodObject<{
     sha256: z.ZodOptional<z.ZodString>;
     contentType: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+export declare const bulkCasUploadSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"zip-cas-v1">;
+    method: z.ZodLiteral<"PUT">;
+    url: z.ZodUnion<[z.ZodString, z.ZodString]>;
+    headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    maxCompressedBytes: z.ZodNumber;
+    maxExpandedBytes: z.ZodNumber;
+    maxBlobs: z.ZodNumber;
+}, z.core.$strip>;
 export declare const uploadInstructionsSchema: z.ZodObject<{
     id: z.ZodString;
     mode: z.ZodEnum<{
@@ -69,6 +78,15 @@ export declare const uploadInstructionsSchema: z.ZodObject<{
         sha256: z.ZodOptional<z.ZodString>;
         contentType: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
+    bulk: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodLiteral<"zip-cas-v1">;
+        method: z.ZodLiteral<"PUT">;
+        url: z.ZodUnion<[z.ZodString, z.ZodString]>;
+        headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        maxCompressedBytes: z.ZodNumber;
+        maxExpandedBytes: z.ZodNumber;
+        maxBlobs: z.ZodNumber;
+    }, z.core.$strip>>;
     links: z.ZodObject<{
         refresh: z.ZodString;
         resume: z.ZodOptional<z.ZodString>;

package/dist/contracts/internal.js

@@ -60,6 +60,22 @@ export const uploadTargetSchema = z.object({
         .optional(),
     contentType: z.string().optional(),
 });
+export const bulkCasUploadSchema = z.object({
+    kind: z.literal("zip-cas-v1"),
+    method: z.literal("PUT"),
+    url: z
+        .string()
+        .url()
+        .or(z.string().startsWith("/"))
+        .describe("Upload-auth runtime URL that accepts a ZIP of SHA-named CAS blobs."),
+    headers: z
+        .record(z.string().min(1), z.string())
+        .default({})
+        .describe("Exact headers to send with the bulk upload request."),
+    maxCompressedBytes: z.number().int().positive(),
+    maxExpandedBytes: z.number().int().positive(),
+    maxBlobs: z.number().int().positive(),
+});
 export const uploadInstructionsSchema = z.object({
     id: z.string().min(1).describe("Upload session id (upl_…) minted by the runtime."),
     mode: uploadSessionModeSchema,
@@ -78,6 +94,9 @@ export const uploadInstructionsSchema = z.object({
         .array(uploadTargetSchema)
         .default([])
         .describe("Opaque upload targets, bounded by the instruction payload budget. Upload these, then call `links.refresh` for the remainder."),
+    bulk: bulkCasUploadSchema
+        .optional()
+        .describe("Optional direct runtime transport for this page's content-addressed targets. Clients that do not support it continue with targets."),
     links: z.object({
         // The key names the action — mint a fresh instruction page for whatever the
         // session still needs — not the route that happens to serve it.

package/dist/contracts/mcp.d.ts

@@ -1,21 +1,4 @@
 import { z } from "zod";
-export declare const HOSTED_MCP_SERVER_VERSION: "2026-08-22";
-export declare const HOSTED_MCP_TOOL_CATALOG: readonly [{
-    readonly name: "execute";
-    readonly description: "Run JavaScript against the OpenAPI-generated Spacefast catalog in a secure sandbox.";
-}, {
-    readonly name: "skills";
-    readonly description: "Fetch Spacefast how-to guidance for an MCP workflow.";
-}, {
-    readonly name: "resume";
-    readonly description: "Resume an execution that paused for approval or input.";
-}, {
-    readonly name: "publish";
-    readonly description: "Publish inline files as a new immutable Spacefast version.";
-}, {
-    readonly name: "search_docs";
-    readonly description: "Search the published Spacefast documentation. An exact slug or path returns that page in full.";
-}];
 export declare const hostedMcpSessionStatusSchema: z.ZodEnum<{
     active: "active";
     expired: "expired";
@@ -24,6 +7,7 @@ export declare const hostedMcpSessionStatusSchema: z.ZodEnum<{
 }>;
 export declare const hostedMcpSessionSchema: z.ZodObject<{
     sessionId: z.ZodString;
+    closable: z.ZodBoolean;
     clientId: z.ZodNullable<z.ZodString>;
     credentialId: z.ZodNullable<z.ZodString>;
     credentialKind: z.ZodNullable<z.ZodString>;
@@ -86,6 +70,7 @@ export declare const hostedMcpDashboardSchema: z.ZodObject<{
     }, z.core.$strip>;
     sessions: z.ZodArray<z.ZodObject<{
         sessionId: z.ZodString;
+        closable: z.ZodBoolean;
         clientId: z.ZodNullable<z.ZodString>;
         credentialId: z.ZodNullable<z.ZodString>;
         credentialKind: z.ZodNullable<z.ZodString>;
@@ -137,6 +122,7 @@ export declare const hostedMcpDashboardResponseSchema: z.ZodObject<{
         }, z.core.$strip>;
         sessions: z.ZodArray<z.ZodObject<{
             sessionId: z.ZodString;
+            closable: z.ZodBoolean;
             clientId: z.ZodNullable<z.ZodString>;
             credentialId: z.ZodNullable<z.ZodString>;
             credentialKind: z.ZodNullable<z.ZodString>;
@@ -185,6 +171,7 @@ export declare const hostedMcpProxyTokenResponseSchema: z.ZodObject<{
 export declare const hostedMcpCloseSessionResponseSchema: z.ZodObject<{
     data: z.ZodObject<{
         sessionId: z.ZodString;
+        closable: z.ZodBoolean;
         clientId: z.ZodNullable<z.ZodString>;
         credentialId: z.ZodNullable<z.ZodString>;
         credentialKind: z.ZodNullable<z.ZodString>;
@@ -211,6 +198,7 @@ export declare const hostedMcpSessionEventsResponseSchema: z.ZodObject<{
     data: z.ZodObject<{
         session: z.ZodObject<{
             sessionId: z.ZodString;
+            closable: z.ZodBoolean;
             clientId: z.ZodNullable<z.ZodString>;
             credentialId: z.ZodNullable<z.ZodString>;
             credentialKind: z.ZodNullable<z.ZodString>;
@@ -247,19 +235,21 @@ export declare const hostedMcpSessionEventsResponseSchema: z.ZodObject<{
     }, z.core.$strip>;
 }, z.core.$strip>;
 export declare const hostedMcpPausedExecutionSchema: z.ZodObject<{
+    allowAlways: z.ZodBoolean;
     text: z.ZodString;
     structured: z.ZodUnknown;
 }, z.core.$strip>;
 export declare const hostedMcpPausedExecutionResponseSchema: z.ZodObject<{
     data: z.ZodObject<{
+        allowAlways: z.ZodBoolean;
         text: z.ZodString;
         structured: z.ZodUnknown;
     }, z.core.$strip>;
 }, z.core.$strip>;
 export declare const hostedMcpApprovalActionSchema: z.ZodEnum<{
     accept: "accept";
-    cancel: "cancel";
     decline: "decline";
+    cancel: "cancel";
 }>;
 export declare const hostedMcpApprovalResponseSchema: z.ZodObject<{
     data: z.ZodObject<{