@spacefast/common 0.2.2 → 0.4.1

package/dist/contracts/principal-assertion.d.ts

@@ -1,14 +1,52 @@
 import { z } from "zod";
+import type { GrantCapability } from "./grants-core.js";
 export declare const exactOriginSchema: z.core.$ZodBranded<z.ZodString, "ExactOrigin", "out">;
 export type ExactOrigin = z.infer<typeof exactOriginSchema>;
+/**
+ * Ordered weakest-first: the runtime projects exactly one of these onto the
+ * request's principal and nothing is ever stored on the WordPress user.
+ */
+export declare const WORDPRESS_PRINCIPAL_ROLES: readonly ["subscriber", "editor", "administrator"];
+export declare const wordpressPrincipalRoleSchema: z.ZodEnum<{
+    editor: "editor";
+    subscriber: "subscriber";
+    administrator: "administrator";
+}>;
+export type WordPressPrincipalRole = z.infer<typeof wordpressPrincipalRoleSchema>;
+/**
+ * THE grant→WordPress-role mapping site. WordPress roles are not authority
+ * here: the management JWT and the Grant decision already admitted the request
+ * before this runs, and this only decides which WordPress capabilities the
+ * runtime projects for the one request it is answering.
+ *
+ * Deliberately conservative, and deliberately coarse — WordPress has no role
+ * that means "may comment", so:
+ *
+ * - `access.manage` — the caller may change who reaches this Space, so they
+ *   are the Space's administrator. Safe only because the managed editor is
+ *   locked: no login screen, no file editing or plugin installs, and an
+ *   allowlist of admin screens (content-kernel.php). Widening that lock means
+ *   revisiting this line, because `administrator` carries `manage_options`.
+ * - `content.publish` — may write documents, so `editor`.
+ * - `page.view` / `comments.read` — may read managed content, including
+ *   unpublished drafts through the content API, so `subscriber`.
+ * - `comments.write` alone (and no capabilities at all) — comments are stored
+ *   by the platform, not by WordPress. `null`: no WordPress user is created,
+ *   and the request answers as nobody.
+ */
+export declare function wordpressRoleForGrantCapabilities(capabilities: Iterable<GrantCapability>): WordPressPrincipalRole | null;
 export declare const principalAssertionV1Schema: z.ZodUnion<readonly [z.ZodObject<{
     actor: z.ZodObject<{
         kind: z.ZodLiteral<"user">;
         id: z.ZodString;
     }, z.core.$strict>;
-    subject: z.ZodOptional<z.ZodObject<{
+    subject: z.ZodObject<{
         issuer: z.ZodString;
         subject: z.ZodString;
+    }, z.core.$strict>;
+    profile: z.ZodOptional<z.ZodObject<{
+        displayName: z.ZodOptional<z.ZodString>;
+        avatarUrl: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
     format: z.ZodLiteral<"spacefast.principal">;
     version: z.ZodLiteral<1>;
@@ -22,11 +60,41 @@ export declare const principalAssertionV1Schema: z.ZodUnion<readonly [z.ZodObjec
     nonce: z.ZodString;
     issuedAt: z.ZodNumber;
     expiresAt: z.ZodNumber;
+    wordpressRole: z.ZodNullable<z.ZodEnum<{
+        editor: "editor";
+        subscriber: "subscriber";
+        administrator: "administrator";
+    }>>;
 }, z.core.$strict>, z.ZodObject<{
     actor: z.ZodObject<{
         kind: z.ZodLiteral<"service">;
         id: z.ZodString;
     }, z.core.$strict>;
+    profile: z.ZodOptional<z.ZodObject<{
+        displayName: z.ZodOptional<z.ZodString>;
+        avatarUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    format: z.ZodLiteral<"spacefast.principal">;
+    version: z.ZodLiteral<1>;
+    audience: z.ZodObject<{
+        spaceId: z.ZodTemplateLiteral<`spc_${string}`>;
+        runtimeInstanceId: z.ZodString;
+        host: z.core.$ZodBranded<z.ZodString, "ExactOrigin", "out">;
+    }, z.core.$strict>;
+    sessionVersion: z.ZodNumber;
+    accessGeneration: z.ZodNumber;
+    nonce: z.ZodString;
+    issuedAt: z.ZodNumber;
+    expiresAt: z.ZodNumber;
+    wordpressRole: z.ZodNullable<z.ZodEnum<{
+        editor: "editor";
+        subscriber: "subscriber";
+        administrator: "administrator";
+    }>>;
+}, z.core.$strict>, z.ZodObject<{
+    actor: z.ZodObject<{
+        kind: z.ZodLiteral<"anonymous">;
+    }, z.core.$strict>;
     format: z.ZodLiteral<"spacefast.principal">;
     version: z.ZodLiteral<1>;
     audience: z.ZodObject<{
@@ -39,5 +107,10 @@ export declare const principalAssertionV1Schema: z.ZodUnion<readonly [z.ZodObjec
     nonce: z.ZodString;
     issuedAt: z.ZodNumber;
     expiresAt: z.ZodNumber;
+    wordpressRole: z.ZodNullable<z.ZodEnum<{
+        editor: "editor";
+        subscriber: "subscriber";
+        administrator: "administrator";
+    }>>;
 }, z.core.$strict>]>;
 export type PrincipalAssertionV1 = z.infer<typeof principalAssertionV1Schema>;

package/dist/contracts/principal-assertion.js

@@ -1,5 +1,7 @@
 import { z } from "zod";
-import { registeredIdSchema } from "./ids.js";
+// The `spc_` shape is this assertion's wire format, validated through the
+// prefixed-id grammar rather than the host's prefix registry.
+import { prefixedIdSchema } from "./ids-core.js";
 function isExactHttpOrigin(value) {
     let url;
     try {
@@ -24,7 +26,7 @@ export const exactOriginSchema = z
     .brand();
 const principalAudienceSchema = z
     .object({
-    spaceId: registeredIdSchema("spc"),
+    spaceId: prefixedIdSchema("spc", "Space"),
     runtimeInstanceId: z.string().min(1).max(255),
     host: exactOriginSchema,
 })
@@ -35,6 +37,49 @@ const principalSubjectSchema = z
     subject: z.string().min(1).max(512),
 })
     .strict();
+const principalProfileSchema = z
+    .object({
+    displayName: z.string().trim().min(1).max(255).optional(),
+    avatarUrl: z.string().url().max(2_000).optional(),
+})
+    .strict();
+/**
+ * Ordered weakest-first: the runtime projects exactly one of these onto the
+ * request's principal and nothing is ever stored on the WordPress user.
+ */
+export const WORDPRESS_PRINCIPAL_ROLES = ["subscriber", "editor", "administrator"];
+export const wordpressPrincipalRoleSchema = z.enum(WORDPRESS_PRINCIPAL_ROLES);
+/**
+ * THE grant→WordPress-role mapping site. WordPress roles are not authority
+ * here: the management JWT and the Grant decision already admitted the request
+ * before this runs, and this only decides which WordPress capabilities the
+ * runtime projects for the one request it is answering.
+ *
+ * Deliberately conservative, and deliberately coarse — WordPress has no role
+ * that means "may comment", so:
+ *
+ * - `access.manage` — the caller may change who reaches this Space, so they
+ *   are the Space's administrator. Safe only because the managed editor is
+ *   locked: no login screen, no file editing or plugin installs, and an
+ *   allowlist of admin screens (content-kernel.php). Widening that lock means
+ *   revisiting this line, because `administrator` carries `manage_options`.
+ * - `content.publish` — may write documents, so `editor`.
+ * - `page.view` / `comments.read` — may read managed content, including
+ *   unpublished drafts through the content API, so `subscriber`.
+ * - `comments.write` alone (and no capabilities at all) — comments are stored
+ *   by the platform, not by WordPress. `null`: no WordPress user is created,
+ *   and the request answers as nobody.
+ */
+export function wordpressRoleForGrantCapabilities(capabilities) {
+    const held = new Set(capabilities);
+    if (held.has("access.manage"))
+        return "administrator";
+    if (held.has("content.publish"))
+        return "editor";
+    if (held.has("page.view") || held.has("comments.read"))
+        return "subscriber";
+    return null;
+}
 const principalAssertionFields = {
     format: z.literal("spacefast.principal"),
     version: z.literal(1),
@@ -44,6 +89,9 @@ const principalAssertionFields = {
     nonce: z.string().min(16).max(512),
     issuedAt: z.number().int().nonnegative(),
     expiresAt: z.number().int().positive(),
+    // Re-derived per request from the caller's Grant capabilities and never read
+    // back from WordPress. `null` is "this caller needs no WordPress user".
+    wordpressRole: wordpressPrincipalRoleSchema.nullable(),
 };
 export const principalAssertionV1Schema = z
     .union([
@@ -51,17 +99,33 @@ export const principalAssertionV1Schema = z
         .object({
         ...principalAssertionFields,
         actor: z.object({ kind: z.literal("user"), id: z.string().min(1).max(255) }).strict(),
-        subject: principalSubjectSchema.optional(),
+        subject: principalSubjectSchema,
+        profile: principalProfileSchema.optional(),
     })
         .strict(),
     z
         .object({
         ...principalAssertionFields,
         actor: z.object({ kind: z.literal("service"), id: z.string().min(1).max(255) }).strict(),
+        profile: principalProfileSchema.optional(),
+    })
+        .strict(),
+    z
+        .object({
+        ...principalAssertionFields,
+        actor: z.object({ kind: z.literal("anonymous") }).strict(),
     })
         .strict(),
 ])
     .refine((assertion) => assertion.expiresAt > assertion.issuedAt, {
     path: ["expiresAt"],
     message: "expiresAt must be after issuedAt",
+})
+    .refine((assertion) => assertion.expiresAt - assertion.issuedAt <= 300, {
+    path: ["expiresAt"],
+    message: "principal assertions may live for at most five minutes",
+})
+    .refine((assertion) => assertion.actor.kind !== "anonymous" || assertion.wordpressRole === null, {
+    path: ["wordpressRole"],
+    message: "an anonymous actor has no WordPress role",
 });

package/dist/contracts/publish-archive.d.ts

@@ -133,6 +133,9 @@ export declare const archivePublishReceiptSchema: z.ZodObject<{
             superseded: "superseded";
         }>;
         currentLiveVersionId: z.ZodNullable<z.ZodString>;
+        reason: z.ZodOptional<z.ZodEnum<{
+            channel_promotion_manual: "channel_promotion_manual";
+        }>>;
     }, z.core.$strip>>;
     next: z.ZodObject<{
         action: z.ZodEnum<{
@@ -153,6 +156,7 @@ export declare const archivePublishReceiptSchema: z.ZodObject<{
         remoteUrl: z.ZodNullable<z.ZodString>;
         repository: z.ZodNullable<z.ZodString>;
         defaultBranch: z.ZodNullable<z.ZodString>;
+        provisioned: z.ZodBoolean;
     }, z.core.$strip>>;
     access: z.ZodOptional<z.ZodObject<{
         url: z.ZodString;
@@ -331,6 +335,9 @@ export declare const publishResponseReceiptSchema: z.ZodUnion<readonly [z.ZodObj
             superseded: "superseded";
         }>;
         currentLiveVersionId: z.ZodNullable<z.ZodString>;
+        reason: z.ZodOptional<z.ZodEnum<{
+            channel_promotion_manual: "channel_promotion_manual";
+        }>>;
     }, z.core.$strip>>;
     next: z.ZodObject<{
         action: z.ZodEnum<{
@@ -351,6 +358,7 @@ export declare const publishResponseReceiptSchema: z.ZodUnion<readonly [z.ZodObj
         remoteUrl: z.ZodNullable<z.ZodString>;
         repository: z.ZodNullable<z.ZodString>;
         defaultBranch: z.ZodNullable<z.ZodString>;
+        provisioned: z.ZodBoolean;
     }, z.core.$strip>>;
     access: z.ZodOptional<z.ZodObject<{
         url: z.ZodString;
@@ -432,6 +440,9 @@ export declare const publishResponseReceiptSchema: z.ZodUnion<readonly [z.ZodObj
             superseded: "superseded";
         }>;
         currentLiveVersionId: z.ZodNullable<z.ZodString>;
+        reason: z.ZodOptional<z.ZodEnum<{
+            channel_promotion_manual: "channel_promotion_manual";
+        }>>;
     }, z.core.$strip>;
     next: z.ZodObject<{
         action: z.ZodEnum<{
@@ -452,14 +463,15 @@ export declare const publishResponseReceiptSchema: z.ZodUnion<readonly [z.ZodObj
         remoteUrl: z.ZodNullable<z.ZodString>;
         repository: z.ZodNullable<z.ZodString>;
         defaultBranch: z.ZodNullable<z.ZodString>;
+        provisioned: z.ZodBoolean;
     }, z.core.$strip>>;
     authMode: z.ZodOptional<z.ZodEnum<{
         anonymous: "anonymous";
         authenticated: "authenticated";
     }>>;
     persistence: z.ZodOptional<z.ZodEnum<{
-        managed: "managed";
         temporary: "temporary";
+        managed: "managed";
     }>>;
     operation: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
@@ -531,6 +543,15 @@ export declare const publishResponseReceiptSchema: z.ZodUnion<readonly [z.ZodObj
             sha256: z.ZodOptional<z.ZodString>;
             contentType: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>>;
+        bulk: z.ZodOptional<z.ZodObject<{
+            kind: z.ZodLiteral<"zip-cas-v1">;
+            method: z.ZodLiteral<"PUT">;
+            url: z.ZodUnion<[z.ZodString, z.ZodString]>;
+            headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+            maxCompressedBytes: z.ZodNumber;
+            maxExpandedBytes: z.ZodNumber;
+            maxBlobs: z.ZodNumber;
+        }, z.core.$strip>>;
         links: z.ZodObject<{
             refresh: z.ZodString;
             resume: z.ZodOptional<z.ZodString>;

package/dist/contracts/push-new.d.ts

@@ -59,8 +59,8 @@ export declare const PushNewSessionSchema: z.ZodObject<{
         expiresAt: z.ZodString;
         kind: z.ZodEnum<{
             management: "management";
-            person: "person";
             claim_preview: "claim_preview";
+            person: "person";
         }>;
     }, z.core.$strip>]>>;
     sessionUrl: z.ZodString;
@@ -117,8 +117,8 @@ export declare const PushNewCreateSessionResponseSchema: z.ZodObject<{
         expiresAt: z.ZodString;
         kind: z.ZodEnum<{
             management: "management";
-            person: "person";
             claim_preview: "claim_preview";
+            person: "person";
         }>;
     }, z.core.$strip>]>>;
     sessionUrl: z.ZodString;
@@ -143,8 +143,8 @@ export declare const PushNewStatusResponseSchema: z.ZodObject<{
         expiresAt: z.ZodString;
         kind: z.ZodEnum<{
             management: "management";
-            person: "person";
             claim_preview: "claim_preview";
+            person: "person";
         }>;
     }, z.core.$strip>]>>;
     status: z.ZodEnum<{

package/dist/contracts/push-new.js

@@ -13,7 +13,7 @@ export const pushNewSourceKindSchema = z.enum(["git", "direct_upload"]);
 export const pushNewUploadModeSchema = z.enum(["static_publish", "source_archive_build"]);
 const nullableDateTime = z.string().datetime().nullable();
 export const PushNewSessionSchema = z.object({
-    id: z.string().describe("push.new session id (`psh_...`)."),
+    id: z.string().describe("Git push session id (`psh_...`)."),
     status: pushNewSessionStatusSchema,
     sourceKind: pushNewSourceKindSchema,
     uploadMode: pushNewUploadModeSchema.nullable(),

package/dist/contracts/quotas.js

@@ -1,3 +1,4 @@
+import { MAX_VERSION_TOTAL_BYTES } from "../utils/publish-policy.js";
 // Crude worst-case quotas (the platform spec "Abuse Posture"): hard,
 // launch-day abuse controls that exist independently of plan limits. One named
 // raise-only table: raise a limit later, never lower one. Enforcement points
@@ -5,7 +6,7 @@
 // activity/ops events so thresholds are tuned from data.
 export const WORST_CASE_QUOTAS = {
     // Per-version artifact ceiling (sum of file bytes; enforced at manifest intake).
-    maxArtifactBytes: 2 * 1024 * 1024 * 1024,
+    maxArtifactBytes: MAX_VERSION_TOTAL_BYTES,
     // Inline one-shot publish body cap (compressed archive bytes).
     maxInlinePublishBodyBytes: 128 * 1024 * 1024,
     // Versions a free/anonymous space may accumulate before old ones must go.

package/dist/contracts/repository-connections.d.ts

@@ -1,7 +1,7 @@
 import { z } from "zod";
 export declare const repositoryConnectionTypeSchema: z.ZodEnum<{
-    hosted: "hosted";
     connected: "connected";
+    hosted: "hosted";
 }>;
 export declare const repositoryConnectionSyncStatusSchema: z.ZodEnum<{
     failed: "failed";
@@ -25,8 +25,8 @@ export declare const RepositoryConnectionSchema: z.ZodObject<{
         generic: "generic";
     }>;
     connectionType: z.ZodEnum<{
-        hosted: "hosted";
         connected: "connected";
+        hosted: "hosted";
     }>;
     repositoryId: z.ZodNullable<z.ZodString>;
     installationId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -39,6 +39,7 @@ export declare const RepositoryConnectionSchema: z.ZodObject<{
     credentialConfigured: z.ZodBoolean;
     autoDeployProduction: z.ZodBoolean;
     autoDeployPreviews: z.ZodBoolean;
+    githubPreviewCommentsEnabled: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
     buildSettings: z.ZodObject<{
         rootDirectory: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         installDirectory: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -79,8 +80,8 @@ export declare const repositoryConnectionCreateSchema: z.ZodObject<{
         generic: "generic";
     }>>;
     connectionType: z.ZodDefault<z.ZodEnum<{
-        hosted: "hosted";
         connected: "connected";
+        hosted: "hosted";
     }>>;
     repositoryId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     repositoryName: z.ZodOptional<z.ZodString>;
@@ -93,6 +94,7 @@ export declare const repositoryConnectionCreateSchema: z.ZodObject<{
     credential: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     autoDeployProduction: z.ZodDefault<z.ZodBoolean>;
     autoDeployPreviews: z.ZodDefault<z.ZodBoolean>;
+    githubPreviewCommentsEnabled: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
     buildSettings: z.ZodOptional<z.ZodObject<{
         rootDirectory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         installDirectory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -108,8 +110,8 @@ export declare const repositoryConnectionCreateSchema: z.ZodObject<{
 }, z.core.$strip>;
 export declare const repositoryConnectionPatchSchema: z.ZodObject<{
     connectionType: z.ZodOptional<z.ZodEnum<{
-        hosted: "hosted";
         connected: "connected";
+        hosted: "hosted";
     }>>;
     productionBranch: z.ZodOptional<z.ZodString>;
     cloneUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -117,6 +119,7 @@ export declare const repositoryConnectionPatchSchema: z.ZodObject<{
     credential: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     autoDeployProduction: z.ZodOptional<z.ZodBoolean>;
     autoDeployPreviews: z.ZodOptional<z.ZodBoolean>;
+    githubPreviewCommentsEnabled: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
     buildSettings: z.ZodOptional<z.ZodObject<{
         rootDirectory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         installDirectory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -137,13 +140,14 @@ export declare const repositoryImportRemoteSchema: z.ZodObject<{
         bitbucket: "bitbucket";
         generic: "generic";
     }>>;
-    credential: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     defaultBranch: z.ZodDefault<z.ZodString>;
     repositoryFullName: z.ZodString;
+    credential: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     repositoryId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     repositoryName: z.ZodOptional<z.ZodString>;
     productionBranch: z.ZodOptional<z.ZodString>;
     cloneUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    githubPreviewCommentsEnabled: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
     buildSettings: z.ZodOptional<z.ZodObject<{
         rootDirectory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         installDirectory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -197,8 +201,8 @@ export declare const repositoryWebhookDeliveryListQuerySchema: z.ZodObject<{
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     cursor: z.ZodOptional<z.ZodString>;
     connectionType: z.ZodOptional<z.ZodEnum<{
-        hosted: "hosted";
         connected: "connected";
+        hosted: "hosted";
     }>>;
     status: z.ZodOptional<z.ZodEnum<{
         failed: "failed";

package/dist/contracts/repository-connections.js

@@ -41,6 +41,11 @@ export const RepositoryConnectionSchema = z.object({
     credentialConfigured: z.boolean(),
     autoDeployProduction: z.boolean(),
     autoDeployPreviews: z.boolean(),
+    githubPreviewCommentsEnabled: z
+        .boolean()
+        .nullable()
+        .optional()
+        .describe("Controls GitHub preview comments for this Space. Set null to use the team setting."),
     buildSettings: BuildSettingsSchema,
     syncStatus: repositoryConnectionSyncStatusSchema,
     providerAccessStatus: repositoryProviderAccessStatusSchema.default("active"),
@@ -72,6 +77,11 @@ export const repositoryConnectionCreateSchema = z.object({
     credential: z.string().trim().min(1).nullable().optional(),
     autoDeployProduction: z.boolean().default(true),
     autoDeployPreviews: z.boolean().default(true),
+    githubPreviewCommentsEnabled: z
+        .boolean()
+        .nullable()
+        .optional()
+        .describe("Controls GitHub preview comments for this Space. Set null to use the team setting."),
     buildSettings: BuildSettingsOverrideSchema.optional(),
 });
 export const repositoryConnectionPatchSchema = z.object({
@@ -82,6 +92,11 @@ export const repositoryConnectionPatchSchema = z.object({
     credential: z.string().trim().min(1).nullable().optional(),
     autoDeployProduction: z.boolean().optional(),
     autoDeployPreviews: z.boolean().optional(),
+    githubPreviewCommentsEnabled: z
+        .boolean()
+        .nullable()
+        .optional()
+        .describe("Controls GitHub preview comments for this Space. Set null to use the team setting."),
     buildSettings: BuildSettingsOverrideSchema.optional(),
 });
 // Importing an existing external remote is an action/flag, not a connection

package/dist/contracts/resources.d.ts

@@ -41,8 +41,8 @@ export declare const spaceInfrastructureSchema: z.ZodObject<{
     providerMainHostname: z.ZodNullable<z.ZodString>;
     provisioningState: z.ZodEnum<{
         provisioning: "provisioning";
-        degraded: "degraded";
         converged: "converged";
+        degraded: "degraded";
     }>;
 }, z.core.$strip>;
 export type SpaceInfrastructure = z.infer<typeof spaceInfrastructureSchema>;
@@ -54,6 +54,7 @@ export declare const spaceGitSchema: z.ZodObject<{
     remoteUrl: z.ZodNullable<z.ZodString>;
     repository: z.ZodNullable<z.ZodString>;
     defaultBranch: z.ZodNullable<z.ZodString>;
+    provisioned: z.ZodBoolean;
 }, z.core.$strip>;
 export type SpaceGit = z.infer<typeof spaceGitSchema>;
 export declare const SpaceSchema: z.ZodObject<{
@@ -81,8 +82,8 @@ export declare const SpaceSchema: z.ZodObject<{
         providerMainHostname: z.ZodNullable<z.ZodString>;
         provisioningState: z.ZodEnum<{
             provisioning: "provisioning";
-            degraded: "degraded";
             converged: "converged";
+            degraded: "degraded";
         }>;
     }, z.core.$strip>>;
     anonymous: z.ZodBoolean;
@@ -90,10 +91,10 @@ export declare const SpaceSchema: z.ZodObject<{
     title: z.ZodString;
     status: z.ZodEnum<{
         active: "active";
-        failed: "failed";
         provisioning: "provisioning";
         updating: "updating";
         deleting: "deleting";
+        failed: "failed";
     }>;
     disabled: z.ZodNullable<z.ZodObject<{
         at: z.ZodNullable<z.ZodString>;
@@ -205,7 +206,6 @@ export declare const SpaceSchema: z.ZodObject<{
             burstable: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict>>;
         markdownNegotiation: z.ZodOptional<z.ZodBoolean>;
-        experimental_gutenberg: z.ZodOptional<z.ZodBoolean>;
         inject: z.ZodOptional<z.ZodObject<{
             head: z.ZodOptional<z.ZodArray<z.ZodString>>;
             bodyStart: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -229,6 +229,7 @@ export declare const SpaceSchema: z.ZodObject<{
         remoteUrl: z.ZodNullable<z.ZodString>;
         repository: z.ZodNullable<z.ZodString>;
         defaultBranch: z.ZodNullable<z.ZodString>;
+        provisioned: z.ZodBoolean;
     }, z.core.$strip>>;
     operation: z.ZodNullable<z.ZodObject<{
         id: z.ZodString;
@@ -405,6 +406,7 @@ export declare const VersionSchema: z.ZodObject<{
     failedStage: z.ZodNullable<z.ZodString>;
     manifestHash: z.ZodNullable<z.ZodString>;
     buildId: z.ZodNullable<z.ZodString>;
+    gitCommitSha: z.ZodNullable<z.ZodString>;
     importedFromVersionId: z.ZodNullable<z.ZodString>;
     variables: z.ZodNull;
     fileCount: z.ZodNullable<z.ZodNumber>;
@@ -494,7 +496,6 @@ export declare const VersionSchema: z.ZodObject<{
             burstable: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict>>;
         markdownNegotiation: z.ZodOptional<z.ZodBoolean>;
-        experimental_gutenberg: z.ZodOptional<z.ZodBoolean>;
         inject: z.ZodOptional<z.ZodObject<{
             head: z.ZodOptional<z.ZodArray<z.ZodString>>;
             bodyStart: z.ZodOptional<z.ZodArray<z.ZodString>>;

package/dist/contracts/resources.js

@@ -82,6 +82,9 @@ export const spaceGitSchema = z.object({
         .string()
         .nullable()
         .describe("Branch that publishes to the live channel when pushed."),
+    provisioned: z
+        .boolean()
+        .describe("Whether the repository behind this block exists yet. Always true for a GitHub binding; for a hosted remote, true once it was minted or first pushed to, and false while there is nothing to browse."),
 });
 // Every `CONSUMER_HIDDEN_SPACE_FIELDS` member below is `.optional()` because
 // the consumer projection OMITS it rather than nulling it — absent means "not
@@ -301,6 +304,10 @@ export const VersionSchema = z.object({
     manifestHash: z.string().nullable(),
     // Build (`bld_`) that produced this version; null for direct uploads.
     buildId: z.string().nullable(),
+    gitCommitSha: z
+        .string()
+        .nullable()
+        .describe("Commit the build for this version was made from; null for direct uploads."),
     // Import provenance: the source version this one was materialized from.
     importedFromVersionId: z.string().nullable(),
     // Finalize-time dependency digests remain server-internal: historical rows