@spacefast/common 0.2.2 → 0.4.1

package/dist/contracts/application-journal.d.ts

@@ -1,7 +1,86 @@
 import { z } from "zod";
 export declare const APPLICATION_JOURNAL_MAX_DELIVERY_ATTEMPTS = 12;
+/**
+ * The sink that carries editor changes back to a Space's repository. Its PHP
+ * twin is `STATTIC_APPLICATION_JOURNAL_CONTENT_SOURCE_SINK` in
+ * runtime/engine/shared/content-source-journal.php; the two must agree or the
+ * runtime answers a drain for this sink with an empty page.
+ */
+export declare const APPLICATION_JOURNAL_CONTENT_SOURCE_SINK = "control-plane:content-source";
 export declare const applicationJournalEntryIdSchema: z.core.$ZodBranded<z.ZodString, "ApplicationJournalEntryId", "out">;
 export type ApplicationJournalEntryId = z.infer<typeof applicationJournalEntryIdSchema>;
+export declare const journalEmailAddressSchema: z.ZodObject<{
+    email: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const applicationJournalMailPayloadSchema: z.ZodObject<{
+    messageId: z.ZodString;
+    from: z.ZodObject<{
+        email: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    to: z.ZodArray<z.ZodObject<{
+        email: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    cc: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        email: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
+    bcc: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        email: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
+    subject: z.ZodString;
+    body: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"text">;
+        text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"html">;
+        html: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"multipart">;
+        text: z.ZodString;
+        html: z.ZodString;
+    }, z.core.$strict>], "kind">;
+    replyTo: z.ZodOptional<z.ZodObject<{
+        email: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strict>;
+export type ApplicationJournalMailPayload = z.infer<typeof applicationJournalMailPayloadSchema>;
+export declare const applicationJournalContentSourcePayloadSchema: z.ZodObject<{
+    bindingId: z.core.$ZodBranded<z.ZodString, "ContentSyncBindingId", "out">;
+    source: z.ZodString;
+    postId: z.ZodNumber;
+    wordpressRevisionId: z.ZodNumber;
+    baseRevision: z.core.$ZodBranded<z.ZodString, "ContentModelSha256", "out">;
+    author: z.ZodObject<{
+        name: z.ZodString;
+        email: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type ApplicationJournalContentSourcePayload = z.infer<typeof applicationJournalContentSourcePayloadSchema>;
+/**
+ * A document the editor holds needs a file of its own.
+ *
+ * A post created in wp-admin under a collection that declares where its files
+ * live has no binding yet, so the entry names the post and the collection and
+ * lets the runtime decide the path — the same decision it would make for any
+ * other document in that collection. There is no `source` to carry because
+ * there is no file yet, and no `baseRevision` because there is no common base.
+ */
+export declare const applicationJournalContentMaterializePayloadSchema: z.ZodObject<{
+    resourceId: z.core.$ZodBranded<z.ZodString, "ContentResourceId", "out">;
+    postId: z.ZodNumber;
+    wordpressRevisionId: z.ZodNumber;
+    author: z.ZodObject<{
+        name: z.ZodString;
+        email: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type ApplicationJournalContentMaterializePayload = z.infer<typeof applicationJournalContentMaterializePayloadSchema>;
 export declare const applicationJournalEntryV1Schema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"application-event">;
     payload: z.ZodObject<{
@@ -18,7 +97,7 @@ export declare const applicationJournalEntryV1Schema: z.ZodDiscriminatedUnion<[z
         wordpress: "wordpress";
         lakebed: "lakebed";
     }>;
-    payloadDigest: z.core.$ZodBranded<z.ZodString, "ContentProgramSha256", "out">;
+    payloadDigest: z.core.$ZodBranded<z.ZodString, "ContentModelSha256", "out">;
     createdAt: z.ZodString;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"mail">;
@@ -32,6 +111,14 @@ export declare const applicationJournalEntryV1Schema: z.ZodDiscriminatedUnion<[z
             email: z.ZodString;
             name: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        cc: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            email: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
+        bcc: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            email: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
         subject: z.ZodString;
         body: z.ZodDiscriminatedUnion<[z.ZodObject<{
             kind: z.ZodLiteral<"text">;
@@ -48,6 +135,55 @@ export declare const applicationJournalEntryV1Schema: z.ZodDiscriminatedUnion<[z
             email: z.ZodString;
             name: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, z.core.$strict>;
+    format: z.ZodLiteral<"spacefast.application-journal">;
+    version: z.ZodLiteral<1>;
+    id: z.core.$ZodBranded<z.ZodString, "ApplicationJournalEntryId", "out">;
+    spaceId: z.ZodTemplateLiteral<`spc_${string}`>;
+    operationId: z.ZodTemplateLiteral<`op_${string}`>;
+    effectOrdinal: z.ZodNumber;
+    store: z.ZodEnum<{
+        wordpress: "wordpress";
+        lakebed: "lakebed";
+    }>;
+    payloadDigest: z.core.$ZodBranded<z.ZodString, "ContentModelSha256", "out">;
+    createdAt: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"content-source-changed">;
+    payload: z.ZodObject<{
+        bindingId: z.core.$ZodBranded<z.ZodString, "ContentSyncBindingId", "out">;
+        source: z.ZodString;
+        postId: z.ZodNumber;
+        wordpressRevisionId: z.ZodNumber;
+        baseRevision: z.core.$ZodBranded<z.ZodString, "ContentModelSha256", "out">;
+        author: z.ZodObject<{
+            name: z.ZodString;
+            email: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    format: z.ZodLiteral<"spacefast.application-journal">;
+    version: z.ZodLiteral<1>;
+    id: z.core.$ZodBranded<z.ZodString, "ApplicationJournalEntryId", "out">;
+    spaceId: z.ZodTemplateLiteral<`spc_${string}`>;
+    operationId: z.ZodTemplateLiteral<`op_${string}`>;
+    effectOrdinal: z.ZodNumber;
+    store: z.ZodEnum<{
+        wordpress: "wordpress";
+        lakebed: "lakebed";
+    }>;
+    payloadDigest: z.core.$ZodBranded<z.ZodString, "ContentModelSha256", "out">;
+    createdAt: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"content-source-materialized">;
+    payload: z.ZodObject<{
+        resourceId: z.core.$ZodBranded<z.ZodString, "ContentResourceId", "out">;
+        postId: z.ZodNumber;
+        wordpressRevisionId: z.ZodNumber;
+        author: z.ZodObject<{
+            name: z.ZodString;
+            email: z.ZodString;
+        }, z.core.$strict>;
     }, z.core.$strict>;
     format: z.ZodLiteral<"spacefast.application-journal">;
     version: z.ZodLiteral<1>;
@@ -59,7 +195,7 @@ export declare const applicationJournalEntryV1Schema: z.ZodDiscriminatedUnion<[z
         wordpress: "wordpress";
         lakebed: "lakebed";
     }>;
-    payloadDigest: z.core.$ZodBranded<z.ZodString, "ContentProgramSha256", "out">;
+    payloadDigest: z.core.$ZodBranded<z.ZodString, "ContentModelSha256", "out">;
     createdAt: z.ZodString;
 }, z.core.$strict>], "kind">;
 export type ApplicationJournalEntryV1 = z.infer<typeof applicationJournalEntryV1Schema>;
@@ -160,7 +296,7 @@ export declare const applicationJournalDeliveryClaimV1Schema: z.ZodObject<{
             wordpress: "wordpress";
             lakebed: "lakebed";
         }>;
-        payloadDigest: z.core.$ZodBranded<z.ZodString, "ContentProgramSha256", "out">;
+        payloadDigest: z.core.$ZodBranded<z.ZodString, "ContentModelSha256", "out">;
         createdAt: z.ZodString;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"mail">;
@@ -174,6 +310,14 @@ export declare const applicationJournalDeliveryClaimV1Schema: z.ZodObject<{
                 email: z.ZodString;
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
+            cc: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                email: z.ZodString;
+                name: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>>;
+            bcc: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                email: z.ZodString;
+                name: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>>;
             subject: z.ZodString;
             body: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 kind: z.ZodLiteral<"text">;
@@ -190,6 +334,55 @@ export declare const applicationJournalDeliveryClaimV1Schema: z.ZodObject<{
                 email: z.ZodString;
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, z.core.$strict>;
+        format: z.ZodLiteral<"spacefast.application-journal">;
+        version: z.ZodLiteral<1>;
+        id: z.core.$ZodBranded<z.ZodString, "ApplicationJournalEntryId", "out">;
+        spaceId: z.ZodTemplateLiteral<`spc_${string}`>;
+        operationId: z.ZodTemplateLiteral<`op_${string}`>;
+        effectOrdinal: z.ZodNumber;
+        store: z.ZodEnum<{
+            wordpress: "wordpress";
+            lakebed: "lakebed";
+        }>;
+        payloadDigest: z.core.$ZodBranded<z.ZodString, "ContentModelSha256", "out">;
+        createdAt: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"content-source-changed">;
+        payload: z.ZodObject<{
+            bindingId: z.core.$ZodBranded<z.ZodString, "ContentSyncBindingId", "out">;
+            source: z.ZodString;
+            postId: z.ZodNumber;
+            wordpressRevisionId: z.ZodNumber;
+            baseRevision: z.core.$ZodBranded<z.ZodString, "ContentModelSha256", "out">;
+            author: z.ZodObject<{
+                name: z.ZodString;
+                email: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        format: z.ZodLiteral<"spacefast.application-journal">;
+        version: z.ZodLiteral<1>;
+        id: z.core.$ZodBranded<z.ZodString, "ApplicationJournalEntryId", "out">;
+        spaceId: z.ZodTemplateLiteral<`spc_${string}`>;
+        operationId: z.ZodTemplateLiteral<`op_${string}`>;
+        effectOrdinal: z.ZodNumber;
+        store: z.ZodEnum<{
+            wordpress: "wordpress";
+            lakebed: "lakebed";
+        }>;
+        payloadDigest: z.core.$ZodBranded<z.ZodString, "ContentModelSha256", "out">;
+        createdAt: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"content-source-materialized">;
+        payload: z.ZodObject<{
+            resourceId: z.core.$ZodBranded<z.ZodString, "ContentResourceId", "out">;
+            postId: z.ZodNumber;
+            wordpressRevisionId: z.ZodNumber;
+            author: z.ZodObject<{
+                name: z.ZodString;
+                email: z.ZodString;
+            }, z.core.$strict>;
         }, z.core.$strict>;
         format: z.ZodLiteral<"spacefast.application-journal">;
         version: z.ZodLiteral<1>;
@@ -201,7 +394,7 @@ export declare const applicationJournalDeliveryClaimV1Schema: z.ZodObject<{
             wordpress: "wordpress";
             lakebed: "lakebed";
         }>;
-        payloadDigest: z.core.$ZodBranded<z.ZodString, "ContentProgramSha256", "out">;
+        payloadDigest: z.core.$ZodBranded<z.ZodString, "ContentModelSha256", "out">;
         createdAt: z.ZodString;
     }, z.core.$strict>], "kind">;
     fence: z.ZodObject<{

package/dist/contracts/application-journal.js

@@ -1,14 +1,21 @@
 import { z } from "zod";
-import { contentProgramSha256Schema } from "./content-program.js";
-import { registeredIdSchema } from "./ids.js";
+import { contentModelSha256Schema, contentResourceIdSchema, contentSyncBindingIdSchema, contentSyncSourcePathSchema, } from "./content-model.js";
+import { prefixedIdSchema } from "./ids-core.js";
 export const APPLICATION_JOURNAL_MAX_DELIVERY_ATTEMPTS = 12;
+/**
+ * The sink that carries editor changes back to a Space's repository. Its PHP
+ * twin is `STATTIC_APPLICATION_JOURNAL_CONTENT_SOURCE_SINK` in
+ * runtime/engine/shared/content-source-journal.php; the two must agree or the
+ * runtime answers a drain for this sink with an empty page.
+ */
+export const APPLICATION_JOURNAL_CONTENT_SOURCE_SINK = "control-plane:content-source";
 export const applicationJournalEntryIdSchema = z
     .string()
     .min(1)
     .max(512)
     .regex(/^spc_[A-Za-z0-9]+:op_[A-Za-z0-9]+:[0-9]+$/)
     .brand();
-const journalEmailAddressSchema = z
+export const journalEmailAddressSchema = z
     .object({
     email: z.string().email(),
     name: z.string().trim().min(1).max(200).optional(),
@@ -25,15 +32,84 @@ const journalMailBodySchema = z.discriminatedUnion("kind", [
     })
         .strict(),
 ]);
+export const applicationJournalMailPayloadSchema = z
+    .object({
+    messageId: z.string().min(1).max(255),
+    from: journalEmailAddressSchema,
+    to: z.array(journalEmailAddressSchema).min(1).max(100),
+    cc: z.array(journalEmailAddressSchema).max(100).optional(),
+    bcc: z.array(journalEmailAddressSchema).max(100).optional(),
+    subject: z.string().min(1).max(998),
+    body: journalMailBodySchema,
+    replyTo: journalEmailAddressSchema.optional(),
+    headers: z
+        .record(z.string().regex(/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/), z.string().refine((value) => !/[\r\n\0]/.test(value)))
+        .optional(),
+})
+    .strict();
+/**
+ * A bound document changed in the editor and its source file has to catch up.
+ *
+ * The entry is intent, not content: it names the binding, the post revision the
+ * editor produced, and the common base the WordPress ledger stood on when the
+ * save committed. The canonical Markdown is deliberately absent — only
+ * `source.reconcile` may produce it, and only against the file the repository
+ * actually holds at delivery time.
+ *
+ * `author` is the acting principal's display identity, carried so the commit
+ * this becomes is attributed to the person who made the edit.
+ */
+const journalAuthorSchema = z
+    .object({ name: z.string().trim().min(1).max(200), email: z.string().email() })
+    .strict();
+export const applicationJournalContentSourcePayloadSchema = z
+    .object({
+    bindingId: contentSyncBindingIdSchema,
+    source: contentSyncSourcePathSchema,
+    postId: z.number().int().positive(),
+    wordpressRevisionId: z.number().int().positive(),
+    /**
+     * What the WordPress side called its base when the save committed, and what
+     * it means depends on the binding's class.
+     *
+     * A two-way binding has a ledger, so this is that ledger's revision and the
+     * reconciliation compares against it. A compile-class binding has no ledger
+     * — `source.reconcile` refuses it — so the runtime fills this with the
+     * document's blocks digest instead. That value is still a digest, but it is
+     * not a common base: the takeover lane never compare-and-swaps against it
+     * (its write goes in against `"absent"`), and the control plane only mirrors
+     * it onto the ledger row for reading.
+     */
+    baseRevision: contentModelSha256Schema,
+    author: journalAuthorSchema,
+})
+    .strict();
+/**
+ * A document the editor holds needs a file of its own.
+ *
+ * A post created in wp-admin under a collection that declares where its files
+ * live has no binding yet, so the entry names the post and the collection and
+ * lets the runtime decide the path — the same decision it would make for any
+ * other document in that collection. There is no `source` to carry because
+ * there is no file yet, and no `baseRevision` because there is no common base.
+ */
+export const applicationJournalContentMaterializePayloadSchema = z
+    .object({
+    resourceId: contentResourceIdSchema,
+    postId: z.number().int().positive(),
+    wordpressRevisionId: z.number().int().positive(),
+    author: journalAuthorSchema,
+})
+    .strict();
 const journalEntryFields = {
     format: z.literal("spacefast.application-journal"),
     version: z.literal(1),
     id: applicationJournalEntryIdSchema,
-    spaceId: registeredIdSchema("spc"),
-    operationId: registeredIdSchema("op"),
+    spaceId: prefixedIdSchema("spc", "Space"),
+    operationId: prefixedIdSchema("op", "Operation"),
     effectOrdinal: z.number().int().nonnegative(),
     store: z.enum(["wordpress", "lakebed"]),
-    payloadDigest: contentProgramSha256Schema,
+    payloadDigest: contentModelSha256Schema,
     createdAt: z.string().datetime({ offset: true }),
 };
 export const applicationJournalEntryV1Schema = z
@@ -54,16 +130,21 @@ export const applicationJournalEntryV1Schema = z
         .object({
         ...journalEntryFields,
         kind: z.literal("mail"),
-        payload: z
-            .object({
-            messageId: z.string().min(1).max(255),
-            from: journalEmailAddressSchema,
-            to: z.array(journalEmailAddressSchema).min(1).max(100),
-            subject: z.string().min(1).max(998),
-            body: journalMailBodySchema,
-            replyTo: journalEmailAddressSchema.optional(),
-        })
-            .strict(),
+        payload: applicationJournalMailPayloadSchema,
+    })
+        .strict(),
+    z
+        .object({
+        ...journalEntryFields,
+        kind: z.literal("content-source-changed"),
+        payload: applicationJournalContentSourcePayloadSchema,
+    })
+        .strict(),
+    z
+        .object({
+        ...journalEntryFields,
+        kind: z.literal("content-source-materialized"),
+        payload: applicationJournalContentMaterializePayloadSchema,
     })
         .strict(),
 ])

package/dist/contracts/auth.d.ts

@@ -13,6 +13,13 @@ export declare const betterAuthAdditionalFields: {
             readonly returned: true;
             readonly input: false;
         };
+        readonly analyticsOptOut: {
+            readonly type: "boolean";
+            readonly required: false;
+            readonly defaultValue: false;
+            readonly returned: true;
+            readonly input: false;
+        };
         readonly isAutomattician: {
             readonly type: "boolean";
             readonly required: false;
@@ -73,6 +80,19 @@ export type BetterAuthCustomSessionUser = {
     wpcomUserId?: string | null;
     isSuperadmin?: boolean;
 };
+/**
+ * The providers that are a way INTO an account, as opposed to the utility
+ * lanes (`wpcom-dns`, `cloudflare`) that only manage domains. Mirrored by
+ * `authMethodsResponseSchema.providers` below and by the dashboard's
+ * `AuthProviderId`: a provider missing here cannot be asked for by name.
+ */
+export declare const AUTH_LOGIN_PROVIDER_IDS: readonly ["wpcom", "google", "github"];
+export declare const authLoginProviderIdSchema: z.ZodEnum<{
+    google: "google";
+    github: "github";
+    wpcom: "wpcom";
+}>;
+export type AuthLoginProviderId = z.infer<typeof authLoginProviderIdSchema>;
 /**
  * What this deployment can sign people in with. The sign-in page renders its
  * available controls from this response; the account-specific email lane is a

package/dist/contracts/auth.js

@@ -13,6 +13,16 @@ export const betterAuthAdditionalFields = {
             returned: true,
             input: false,
         },
+        // Rides the session so server-side product-event emission can honor the
+        // account analytics opt-out without a per-event lookup. Written only
+        // through PATCH /v1/me/privacy.
+        analyticsOptOut: {
+            type: "boolean",
+            required: false,
+            defaultValue: false,
+            returned: true,
+            input: false,
+        },
         isAutomattician: {
             type: "boolean",
             required: false,
@@ -75,6 +85,14 @@ export const betterAuthAdditionalFields = {
         },
     },
 };
+/**
+ * The providers that are a way INTO an account, as opposed to the utility
+ * lanes (`wpcom-dns`, `cloudflare`) that only manage domains. Mirrored by
+ * `authMethodsResponseSchema.providers` below and by the dashboard's
+ * `AuthProviderId`: a provider missing here cannot be asked for by name.
+ */
+export const AUTH_LOGIN_PROVIDER_IDS = ["wpcom", "google", "github"];
+export const authLoginProviderIdSchema = z.enum(AUTH_LOGIN_PROVIDER_IDS);
 /**
  * What this deployment can sign people in with. The sign-in page renders its
  * available controls from this response; the account-specific email lane is a

package/dist/contracts/beta.d.ts

@@ -39,6 +39,19 @@ export declare const betaAcceptSchema: z.ZodObject<{
 export declare const betaAcceptResponseSchema: z.ZodObject<{
     enrolled: z.ZodLiteral<true>;
 }, z.core.$strip>;
+/**
+ * Domains that may never be whole-domain auto-enroll entries: free-mail
+ * providers, where a domain match would offer the listing team to the entire
+ * public internet, plus `wordpress.com`, which is an Automattic-controlled
+ * domain no single team owns. The control plane enforces this after IDNA
+ * canonicalization; the dashboard reads it to skip suggesting these domains.
+ *
+ * `a8c.com` / `automattic.com` are deliberately NOT here. Their dedicated
+ * admission path runs first, while authoritative WP.com identity alone owns
+ * the global `automattic` team. A team entry can only add that listing team as
+ * an optional join in the person's picker.
+ */
+export declare const AUTO_ENROLL_DOMAIN_BLOCKLIST: Set<string>;
 export declare const teamAutoEnrollEntrySchema: z.ZodObject<{
     id: z.ZodString;
     teamId: z.ZodString;

package/dist/contracts/beta.js

@@ -60,6 +60,34 @@ export const betaAcceptSchema = z.object({
 export const betaAcceptResponseSchema = z.object({
     enrolled: z.literal(true).describe("The calling account is enrolled in the private beta."),
 });
+/**
+ * Domains that may never be whole-domain auto-enroll entries: free-mail
+ * providers, where a domain match would offer the listing team to the entire
+ * public internet, plus `wordpress.com`, which is an Automattic-controlled
+ * domain no single team owns. The control plane enforces this after IDNA
+ * canonicalization; the dashboard reads it to skip suggesting these domains.
+ *
+ * `a8c.com` / `automattic.com` are deliberately NOT here. Their dedicated
+ * admission path runs first, while authoritative WP.com identity alone owns
+ * the global `automattic` team. A team entry can only add that listing team as
+ * an optional join in the person's picker.
+ */
+export const AUTO_ENROLL_DOMAIN_BLOCKLIST = new Set([
+    "gmail.com",
+    "googlemail.com",
+    "outlook.com",
+    "hotmail.com",
+    "live.com",
+    "yahoo.com",
+    "proton.me",
+    "protonmail.com",
+    "icloud.com",
+    "me.com",
+    "aol.com",
+    "mail.com",
+    "gmx.com",
+    "wordpress.com",
+]);
 // Team auto-enroll entries (`GET/POST/DELETE /v1/teams/{teamId}/auto-enroll`).
 // A match grants beta enrollment but NOT team membership; the user gets a
 // picker. Domains are IDNA-canonicalized to ASCII before storage.

package/dist/contracts/billing.d.ts

@@ -1,8 +1,8 @@
 import { z } from "zod";
 export declare const billingProviderValues: readonly ["stripe", "grant"];
 export declare const billingProviderSchema: z.ZodEnum<{
-    grant: "grant";
     stripe: "stripe";
+    grant: "grant";
 }>;
 export declare const billingIntervalValues: readonly ["monthly", "yearly"];
 export declare const billingIntervalSchema: z.ZodEnum<{
@@ -39,8 +39,8 @@ export declare const billingAddonLimitKeySchema: z.ZodEnum<{
 export type BillingAddonLimitKey = z.infer<typeof billingAddonLimitKeySchema>;
 export declare const billingPlanSourceSchema: z.ZodObject<{
     provider: z.ZodEnum<{
-        grant: "grant";
         stripe: "stripe";
+        grant: "grant";
     }>;
     planCode: z.ZodEnum<{
         free: "free";

package/dist/contracts/bootstrap.d.ts

@@ -128,6 +128,9 @@ export declare const bootstrapResponseSchema: z.ZodObject<{
             personal: "personal";
             enterprise: "enterprise";
         }>;
+        partner: z.ZodNullable<z.ZodObject<{
+            enabledAt: z.ZodString;
+        }, z.core.$strip>>;
         defaultDataLocation: z.ZodString;
         createdAt: z.ZodString;
         updatedAt: z.ZodString;
@@ -155,6 +158,9 @@ export declare const bootstrapResponseSchema: z.ZodObject<{
                 personal: "personal";
                 enterprise: "enterprise";
             }>;
+            partner: z.ZodNullable<z.ZodObject<{
+                enabledAt: z.ZodString;
+            }, z.core.$strip>>;
             defaultDataLocation: z.ZodString;
             createdAt: z.ZodString;
             updatedAt: z.ZodString;
@@ -172,6 +178,7 @@ export declare const bootstrapResponseSchema: z.ZodObject<{
                     }>;
                     detail: z.ZodOptional<z.ZodString>;
                     since: z.ZodString;
+                    challenge: z.ZodOptional<z.ZodString>;
                     audience: z.ZodOptional<z.ZodString>;
                 }, z.core.$strip>>;
                 sourceVersionId: z.ZodNullable<z.ZodString>;
@@ -229,8 +236,8 @@ export declare const bootstrapResponseSchema: z.ZodObject<{
                 providerMainHostname: z.ZodNullable<z.ZodString>;
                 provisioningState: z.ZodEnum<{
                     provisioning: "provisioning";
-                    degraded: "degraded";
                     converged: "converged";
+                    degraded: "degraded";
                 }>;
             }, z.core.$strip>>;
             anonymous: z.ZodBoolean;
@@ -238,10 +245,10 @@ export declare const bootstrapResponseSchema: z.ZodObject<{
             title: z.ZodString;
             status: z.ZodEnum<{
                 active: "active";
-                failed: "failed";
                 provisioning: "provisioning";
                 updating: "updating";
                 deleting: "deleting";
+                failed: "failed";
             }>;
             disabled: z.ZodNullable<z.ZodObject<{
                 at: z.ZodNullable<z.ZodString>;
@@ -353,7 +360,6 @@ export declare const bootstrapResponseSchema: z.ZodObject<{
                     burstable: z.ZodOptional<z.ZodBoolean>;
                 }, z.core.$strict>>;
                 markdownNegotiation: z.ZodOptional<z.ZodBoolean>;
-                experimental_gutenberg: z.ZodOptional<z.ZodBoolean>;
                 inject: z.ZodOptional<z.ZodObject<{
                     head: z.ZodOptional<z.ZodArray<z.ZodString>>;
                     bodyStart: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -377,6 +383,7 @@ export declare const bootstrapResponseSchema: z.ZodObject<{
                 remoteUrl: z.ZodNullable<z.ZodString>;
                 repository: z.ZodNullable<z.ZodString>;
                 defaultBranch: z.ZodNullable<z.ZodString>;
+                provisioned: z.ZodBoolean;
             }, z.core.$strip>>;
             operation: z.ZodNullable<z.ZodObject<{
                 id: z.ZodString;
@@ -446,10 +453,10 @@ export declare const bootstrapResponseSchema: z.ZodObject<{
             liveUrl: z.ZodNullable<z.ZodString>;
             runtimeState: z.ZodEnum<{
                 active: "active";
-                failed: "failed";
                 provisioning: "provisioning";
                 updating: "updating";
                 deleting: "deleting";
+                failed: "failed";
             }>;
             liveVersionStatus: z.ZodNullable<z.ZodEnum<{
                 failed: "failed";
@@ -558,8 +565,11 @@ export declare const bootstrapResponseSchema: z.ZodObject<{
                     tables: z.ZodDefault<z.ZodArray<z.ZodString>>;
                     queries: z.ZodDefault<z.ZodArray<z.ZodString>>;
                     mutations: z.ZodDefault<z.ZodArray<z.ZodString>>;
-                    actions: z.ZodDefault<z.ZodArray<z.ZodString>>;
                     endpoints: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                        mode: z.ZodEnum<{
+                            read: "read";
+                            write: "write";
+                        }>;
                         method: z.ZodEnum<{
                             POST: "POST";
                             PUT: "PUT";
@@ -629,6 +639,8 @@ export declare const bootstrapResponseSchema: z.ZodObject<{
                         spam: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
                         email: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
                         content: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                        storage: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                        connectors: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
                     }, z.core.$strip>>;
                     executionState: z.ZodEnum<{
                         ready: "ready";
@@ -685,8 +697,11 @@ export declare const bootstrapResponseSchema: z.ZodObject<{
                     tables: z.ZodDefault<z.ZodArray<z.ZodString>>;
                     queries: z.ZodDefault<z.ZodArray<z.ZodString>>;
                     mutations: z.ZodDefault<z.ZodArray<z.ZodString>>;
-                    actions: z.ZodDefault<z.ZodArray<z.ZodString>>;
                     endpoints: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                        mode: z.ZodEnum<{
+                            read: "read";
+                            write: "write";
+                        }>;
                         method: z.ZodEnum<{
                             POST: "POST";
                             PUT: "PUT";
@@ -756,6 +771,8 @@ export declare const bootstrapResponseSchema: z.ZodObject<{
                         spam: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
                         email: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
                         content: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                        storage: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+                        connectors: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
                     }, z.core.$strip>>;
                     executionState: z.ZodEnum<{
                         ready: "ready";