@bravely-studios/account-web 0.3.4

package/dist/EntitlementCache.d.ts

@@ -0,0 +1,50 @@
+import type { CachedEntitlements, Entitlement } from "./types.js";
+import type { Storage } from "./storage.js";
+declare const TTL_SECONDS: number;
+export interface EntitlementCacheConfig {
+    storage: Storage;
+    /** TTL override (seconds). Defaults to 72h. */
+    ttlSeconds?: number;
+    /** Logger override; defaults to console.info. Used for `offline_entitlement_served` marker. */
+    log?: (event: string, ctx: Record<string, unknown>) => void;
+}
+export interface CacheRead {
+    entitlements: Entitlement[];
+    cachedAt: Date;
+    ttlSeconds: number;
+    /** True when the read came from the cache (rather than a fresh fetch). */
+    fromCache: true;
+}
+export declare class EntitlementCache {
+    private readonly storage;
+    private readonly ttl;
+    private readonly log;
+    /** In-memory mirror so synchronous reads after `update` are immediate. */
+    private memory;
+    /** Track whether we've hydrated from the persistent store yet. */
+    private hydrated;
+    constructor(config: EntitlementCacheConfig);
+    /** Hydrate from persistent storage on first call; safe to call multiple times. */
+    hydrate(): Promise<void>;
+    /**
+     * Returns the cached entitlements iff fresh (within TTL). Emits the
+     * `offline_entitlement_served` marker. Returns null if stale or empty.
+     */
+    getCached(): CacheRead | null;
+    /** Update the cache from a fresh server response. */
+    update(args: {
+        entitlements: Entitlement[];
+        dpopJktThumbprint?: string | null;
+        signature?: string | null;
+    }): Promise<void>;
+    /** Drop the cache (sign-out, account switch, etc.). */
+    invalidate(): Promise<void>;
+    /** True iff the cache is older than the TTL (or empty). */
+    isStale(): boolean;
+    /** Age of the cached row in seconds. Returns Infinity if empty. */
+    ageSeconds(): number;
+    /** Raw cache row (for debugging / inspection). */
+    raw(): CachedEntitlements | null;
+}
+export { TTL_SECONDS as ENTITLEMENT_CACHE_TTL_SECONDS };
+//# sourceMappingURL=EntitlementCache.d.ts.map

package/dist/EntitlementCache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntitlementCache.d.ts","sourceRoot":"","sources":["../src/EntitlementCache.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG5C,QAAA,MAAM,WAAW,QAAe,CAAC;AAEjC,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+FAA+F;IAC/F,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC7D;AAED,MAAM,WAAW,SAAS;IACxB,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,QAAQ,EAAE,IAAI,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAwD;IAC5E,0EAA0E;IAC1E,OAAO,CAAC,MAAM,CAAmC;IACjD,kEAAkE;IAClE,OAAO,CAAC,QAAQ,CAAS;gBAEb,MAAM,EAAE,sBAAsB;IAM1C,kFAAkF;IAC5E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB9B;;;OAGG;IACH,SAAS,IAAI,SAAS,GAAG,IAAI;IAiB7B,qDAAqD;IAC/C,MAAM,CAAC,IAAI,EAAE;QACjB,YAAY,EAAE,WAAW,EAAE,CAAC;QAC5B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,GAAG,OAAO,CAAC,IAAI,CAAC;IAWjB,uDAAuD;IACjD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAKjC,2DAA2D;IAC3D,OAAO,IAAI,OAAO;IAQlB,mEAAmE;IACnE,UAAU,IAAI,MAAM;IAOpB,kDAAkD;IAClD,GAAG,IAAI,kBAAkB,GAAG,IAAI;CAGjC;AAED,OAAO,EAAE,WAAW,IAAI,6BAA6B,EAAE,CAAC"}

package/dist/EntitlementCache.js

@@ -0,0 +1,116 @@
+// Track E3 — 72-hour signed entitlement cache.
+//
+// Why: reduces network calls and lets the app serve Pro to a returning user
+// who is briefly offline (plane, transit, ISP hiccup) without forcing a
+// dead-end "Couldn't reach servers" message. Matches the
+// `entitlement_cached_valid` state in the canonical activation state machine.
+//
+// Gate 1 vs Gate 2:
+//   - Gate 1: cache row signature is `null`. The cache is best-effort offline
+//     fallback only. If a host page corrupts the localStorage row the only
+//     downside is "user has to re-verify online."
+//   - Gate 2: server returns a signed entitlement payload (HMAC over
+//     `entitlements + ba_id + dpopJktThumbprint`). Cache stores the signature
+//     and validates on read, refusing tampered rows.
+//
+// TTL is 72h. After that `isStale()` returns true, `getCached()` returns null,
+// and the caller MUST re-fetch.
+const CACHE_KEY = "entitlement_cache";
+const TTL_SECONDS = 72 * 60 * 60; // 72 hours
+export class EntitlementCache {
+    storage;
+    ttl;
+    log;
+    /** In-memory mirror so synchronous reads after `update` are immediate. */
+    memory = null;
+    /** Track whether we've hydrated from the persistent store yet. */
+    hydrated = false;
+    constructor(config) {
+        this.storage = config.storage;
+        this.ttl = config.ttlSeconds ?? TTL_SECONDS;
+        this.log = config.log ?? ((event, ctx) => console.info(`[bravely-account-web] ${event}`, ctx));
+    }
+    /** Hydrate from persistent storage on first call; safe to call multiple times. */
+    async hydrate() {
+        if (this.hydrated)
+            return;
+        const raw = await this.storage.get(CACHE_KEY);
+        if (raw) {
+            try {
+                const parsed = JSON.parse(raw);
+                // Validate shape minimally so a malformed row doesn't crash.
+                if (Array.isArray(parsed.entitlements) && typeof parsed.cachedAt === "string") {
+                    this.memory = parsed;
+                }
+            }
+            catch {
+                // Corrupt row — drop it.
+                await this.storage.remove(CACHE_KEY);
+            }
+        }
+        this.hydrated = true;
+    }
+    /**
+     * Returns the cached entitlements iff fresh (within TTL). Emits the
+     * `offline_entitlement_served` marker. Returns null if stale or empty.
+     */
+    getCached() {
+        if (!this.memory)
+            return null;
+        if (this.isStale())
+            return null;
+        const cachedAt = new Date(this.memory.cachedAt);
+        this.log("offline_entitlement_served", {
+            cachedAt: this.memory.cachedAt,
+            entitlementCount: this.memory.entitlements.length,
+            dpopJktThumbprint: this.memory.dpopJktThumbprint,
+        });
+        return {
+            entitlements: this.memory.entitlements,
+            cachedAt,
+            ttlSeconds: this.ttl,
+            fromCache: true,
+        };
+    }
+    /** Update the cache from a fresh server response. */
+    async update(args) {
+        const row = {
+            entitlements: args.entitlements,
+            cachedAt: new Date().toISOString(),
+            dpopJktThumbprint: args.dpopJktThumbprint ?? null,
+            signature: args.signature ?? null,
+        };
+        this.memory = row;
+        await this.storage.set(CACHE_KEY, JSON.stringify(row));
+    }
+    /** Drop the cache (sign-out, account switch, etc.). */
+    async invalidate() {
+        this.memory = null;
+        await this.storage.remove(CACHE_KEY);
+    }
+    /** True iff the cache is older than the TTL (or empty). */
+    isStale() {
+        if (!this.memory)
+            return true;
+        const cachedAt = Date.parse(this.memory.cachedAt);
+        if (Number.isNaN(cachedAt))
+            return true;
+        const ageSeconds = (Date.now() - cachedAt) / 1000;
+        return ageSeconds > this.ttl;
+    }
+    /** Age of the cached row in seconds. Returns Infinity if empty. */
+    ageSeconds() {
+        if (!this.memory)
+            return Infinity;
+        const cachedAt = Date.parse(this.memory.cachedAt);
+        if (Number.isNaN(cachedAt))
+            return Infinity;
+        return (Date.now() - cachedAt) / 1000;
+    }
+    /** Raw cache row (for debugging / inspection). */
+    raw() {
+        return this.memory ? { ...this.memory } : null;
+    }
+}
+export { TTL_SECONDS as ENTITLEMENT_CACHE_TTL_SECONDS };
+//# sourceMappingURL=EntitlementCache.js.map

package/dist/EntitlementCache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntitlementCache.js","sourceRoot":"","sources":["../src/EntitlementCache.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,yDAAyD;AACzD,8EAA8E;AAC9E,EAAE;AACF,oBAAoB;AACpB,8EAA8E;AAC9E,2EAA2E;AAC3E,kDAAkD;AAClD,qEAAqE;AACrE,8EAA8E;AAC9E,qDAAqD;AACrD,EAAE;AACF,+EAA+E;AAC/E,gCAAgC;AAKhC,MAAM,SAAS,GAAG,mBAAmB,CAAC;AACtC,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW;AAkB7C,MAAM,OAAO,gBAAgB;IACV,OAAO,CAAU;IACjB,GAAG,CAAS;IACZ,GAAG,CAAwD;IAC5E,0EAA0E;IAClE,MAAM,GAA8B,IAAI,CAAC;IACjD,kEAAkE;IAC1D,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAAY,MAA8B;QACxC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,IAAI,WAAW,CAAC;QAC5C,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;gBACrD,6DAA6D;gBAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC9E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;gBACvB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;gBACzB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,SAAS;QACP,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,IAAI,CAAC,OAAO,EAAE;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,4BAA4B,EAAE;YACrC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM;YACjD,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;SACjD,CAAC,CAAC;QACH,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,QAAQ;YACR,UAAU,EAAE,IAAI,CAAC,GAAG;YACpB,SAAS,EAAE,IAAI;SAChB,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,MAAM,CAAC,IAIZ;QACC,MAAM,GAAG,GAAuB;YAC9B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,IAAI;YACjD,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;SAClC,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;QAClB,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,2DAA2D;IAC3D,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC;QAClD,OAAO,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC;IAC/B,CAAC;IAED,mEAAmE;IACnE,UAAU;QACR,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC;IACxC,CAAC;IAED,kDAAkD;IAClD,GAAG;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;CACF;AAED,OAAO,EAAE,WAAW,IAAI,6BAA6B,EAAE,CAAC"}

package/dist/components/ActivationLadder.d.ts

@@ -0,0 +1,78 @@
+import { type ReactElement } from "react";
+import type { ActivationState } from "../types.js";
+export interface ActivationLadderPhase {
+    /** Phase index (0..3). */
+    index: 0 | 1 | 2 | 3;
+    /** Inclusive lower bound, ms since state entered. */
+    fromMs: number;
+    /** Exclusive upper bound, ms since state entered. `null` = open-ended. */
+    toMs: number | null;
+    /** Final rendered copy (already interpolated). */
+    text: string;
+    /** True iff this is the terminal phase that surfaces Retry + Contact CTAs. */
+    showRecoveryActions: boolean;
+}
+/**
+ * Phase fixtures used by `<ActivationLadder>`. Templates mirror
+ * `activation-state-machine.json` byte-for-byte — DO NOT edit by hand
+ * outside a router/spec change.
+ */
+export declare const ACTIVATION_LADDER_PHASE_TEMPLATES: readonly {
+    fromMs: number;
+    toMs: number | null;
+    template: string;
+    showRecoveryActions: boolean;
+}[];
+/**
+ * Resolve the active ladder phase for a given elapsedMs.
+ * Phases are 0-indexed.
+ */
+export declare function ladderPhaseForElapsed(elapsedMs: number): 0 | 1 | 2 | 3;
+/**
+ * Interpolate one ladder phase template with the supplied `appName` and
+ * `orderId`. When `orderId` is null/undefined, the order-bearing phrase
+ * is rewritten to drop the `(order #…)` chunk (router decision #3 plan B).
+ */
+export declare function renderLadderCopy(template: string, appName: string, orderId: string | null | undefined): string;
+/**
+ * Build the full set of resolved phases for a given run. Useful for
+ * snapshot testing and for host pages that want to render the ladder
+ * with all phases visible at once.
+ */
+export declare function buildResolvedLadder(appName: string, orderId: string | null | undefined): ActivationLadderPhase[];
+export interface ActivationLadderProps {
+    /** Current activation state (from `manager.getActivationState()`). */
+    state: ActivationState;
+    /**
+     * Override the elapsed ms. If omitted, the component computes elapsed
+     * from `state.enteredAt` and ticks every second.
+     */
+    elapsedMs?: number;
+    /** Paddle order id; rendered into phase 3 + 4 copy when present. */
+    orderId?: string | null;
+    /** App slug — drives the `displayNameFor()` interpolation. */
+    appSlug: string;
+    /**
+     * Override the display name. Defaults to `displayNameFor(appSlug)`.
+     * Useful for utilities with slug variants (e.g. `printscreenly-web`
+     * still uses appSlug `printscreenly`).
+     */
+    appName?: string;
+    /** Phase-4 retry callback. */
+    onRetry?: () => void;
+    /** Phase-4 contact-support callback. */
+    onContactSupport?: () => void;
+    /** Optional class name applied to the outer container. */
+    className?: string;
+    /** Localized "Retry" button label. Defaults to "Try again". */
+    retryLabel?: string;
+    /** Localized "Contact support" button label. */
+    contactSupportLabel?: string;
+}
+/**
+ * Render the M3 activation ladder. Renders nothing unless the manager is
+ * in `post_checkout_activation`. Host pages decide where to mount it
+ * (modal, banner, inline panel).
+ */
+export declare function ActivationLadder(props: ActivationLadderProps): ReactElement | null;
+//# sourceMappingURL=ActivationLadder.d.ts.map

package/dist/components/ActivationLadder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivationLadder.d.ts","sourceRoot":"","sources":["../../src/components/ActivationLadder.tsx"],"names":[],"mappings":"AA6BA,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,OAAO,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD,MAAM,WAAW,qBAAqB;IACpC,0BAA0B;IAC1B,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,EAAE,SAAS;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,OAAO,CAAC;CAC9B,EA0BS,CAAC;AAEX;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAKtE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACjC,MAAM,CAeR;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACjC,qBAAqB,EAAE,CAQzB;AAED,MAAM,WAAW,qBAAqB;IACpC,sEAAsE;IACtE,KAAK,EAAE,eAAe,CAAC;IACvB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,wCAAwC;IACxC,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,YAAY,GAAG,IAAI,CAwElF"}

package/dist/components/ActivationLadder.js

@@ -0,0 +1,145 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// `<ActivationLadder>` — M3 post-checkout activation surface.
+//
+// Renders the 4-phase ladder defined by `post_checkout_activation` in
+// `bravely-commerce-router/docs/activation-state-machine.json` (v1.0.0).
+// Copy is mirrored byte-for-byte from that file. The drift-test in
+// `__tests__/ActivationLadder.test.tsx` enforces the exact strings.
+//
+// Inputs:
+//   - `state`: the current `ActivationState` from the manager. The ladder
+//     only renders when `state.name === "post_checkout_activation"`. In any
+//     other state it renders nothing (the host page should hide the surface).
+//   - `elapsedMs`: ms since the state was entered. Host pages either pass
+//     a tick from a `setInterval`, or rely on `<ActivationLadder>` to
+//     compute it from `state.enteredAt` (the default fallback).
+//   - `orderId`: the Paddle order #, surfaced from `?order=<id>` on the
+//     post-checkout return URL (or BAS exchange). Phase 60-120s and 120s+
+//     interpolate it; if unset, the phrase shifts to drop the `(order #…)`.
+//   - `appSlug`: the current app's canonical slug. Drives the
+//     `displayNameFor()` lookup; copy stays product-side per CLAUDE.md.
+//   - `onRetry` / `onContactSupport`: invoked when the user clicks the
+//     phase-4 CTAs. Host pages typically reset the manager state machine
+//     (`force("post_checkout_activation")` for retry) or open a mailto/
+//     intercom thread for support.
+//
+// CLAUDE.md `feedback_no_etas` rule: ELAPSED time is the only number the
+// surface ever shows. No predicted ETA. Anti-pattern #4 ("Taking longer
+// than usual") is banned — the drift-test asserts the substring is absent
+// from every phase.
+import { useEffect, useState } from "react";
+import { displayNameFor } from "../displayName.js";
+/**
+ * Phase fixtures used by `<ActivationLadder>`. Templates mirror
+ * `activation-state-machine.json` byte-for-byte — DO NOT edit by hand
+ * outside a router/spec change.
+ */
+export const ACTIVATION_LADDER_PHASE_TEMPLATES = [
+    {
+        fromMs: 0,
+        toMs: 15_000,
+        template: "Activating [AppName] Pro…",
+        showRecoveryActions: false,
+    },
+    {
+        fromMs: 15_000,
+        toMs: 60_000,
+        template: "Just a moment, finalizing your purchase.",
+        showRecoveryActions: false,
+    },
+    {
+        fromMs: 60_000,
+        toMs: 120_000,
+        template: "Your purchase is confirmed (order #[OrderId]). We're applying it now.",
+        showRecoveryActions: false,
+    },
+    {
+        fromMs: 120_000,
+        toMs: null,
+        template: "Something went sideways on our end — your purchase is safe (order #[OrderId]).",
+        showRecoveryActions: true,
+    },
+];
+/**
+ * Resolve the active ladder phase for a given elapsedMs.
+ * Phases are 0-indexed.
+ */
+export function ladderPhaseForElapsed(elapsedMs) {
+    if (elapsedMs < 15_000)
+        return 0;
+    if (elapsedMs < 60_000)
+        return 1;
+    if (elapsedMs < 120_000)
+        return 2;
+    return 3;
+}
+/**
+ * Interpolate one ladder phase template with the supplied `appName` and
+ * `orderId`. When `orderId` is null/undefined, the order-bearing phrase
+ * is rewritten to drop the `(order #…)` chunk (router decision #3 plan B).
+ */
+export function renderLadderCopy(template, appName, orderId) {
+    let out = template.replace(/\[AppName\]/g, appName);
+    if (orderId && orderId.length > 0) {
+        out = out.replace(/\[OrderId\]/g, orderId);
+    }
+    else {
+        // Strip the parenthetical " (order #[OrderId])" entirely when no ID is
+        // known. Per plan doc decision #3, option B — render the 60-120s and
+        // 120s+ phases without the order-# anchor instead of waiting for the
+        // BAS-side router change.
+        out = out
+            .replace(/ \(order #\[OrderId\]\)\./g, ".")
+            .replace(/ \(order #\[OrderId\]\)/g, "")
+            .replace(/\[OrderId\]/g, "unknown");
+    }
+    return out;
+}
+/**
+ * Build the full set of resolved phases for a given run. Useful for
+ * snapshot testing and for host pages that want to render the ladder
+ * with all phases visible at once.
+ */
+export function buildResolvedLadder(appName, orderId) {
+    return ACTIVATION_LADDER_PHASE_TEMPLATES.map((p, i) => ({
+        index: i,
+        fromMs: p.fromMs,
+        toMs: p.toMs,
+        text: renderLadderCopy(p.template, appName, orderId),
+        showRecoveryActions: p.showRecoveryActions,
+    }));
+}
+/**
+ * Render the M3 activation ladder. Renders nothing unless the manager is
+ * in `post_checkout_activation`. Host pages decide where to mount it
+ * (modal, banner, inline panel).
+ */
+export function ActivationLadder(props) {
+    const { state, elapsedMs: elapsedOverride, orderId, appSlug, appName: appNameOverride, onRetry, onContactSupport, className, retryLabel = "Try again", contactSupportLabel = "Contact support", } = props;
+    // The component auto-ticks if no elapsedMs override is supplied. We use
+    // `Date.now() - state.enteredAt.getTime()` as the source of truth.
+    const [tickElapsed, setTickElapsed] = useState(() => elapsedOverride !== undefined
+        ? elapsedOverride
+        : Math.max(0, Date.now() - state.enteredAt.getTime()));
+    useEffect(() => {
+        if (elapsedOverride !== undefined) {
+            setTickElapsed(elapsedOverride);
+            return;
+        }
+        // Auto-tick every 1s. Phase boundaries are 15s / 60s / 120s so a 1s
+        // tick is comfortably finer-grained than the UI needs.
+        setTickElapsed(Math.max(0, Date.now() - state.enteredAt.getTime()));
+        const id = setInterval(() => {
+            setTickElapsed(Math.max(0, Date.now() - state.enteredAt.getTime()));
+        }, 1000);
+        return () => clearInterval(id);
+    }, [state.enteredAt, elapsedOverride]);
+    if (state.name !== "post_checkout_activation")
+        return null;
+    const appName = appNameOverride ?? displayNameFor(appSlug);
+    const phaseIndex = ladderPhaseForElapsed(tickElapsed);
+    const phaseFixture = ACTIVATION_LADDER_PHASE_TEMPLATES[phaseIndex];
+    const text = renderLadderCopy(phaseFixture.template, appName, orderId);
+    return (_jsxs("div", { className: className, "data-bravely-component": "activation-ladder", "data-phase": phaseIndex, role: "status", "aria-live": "polite", children: [_jsx("p", { "data-bravely-slot": "text", children: text }), phaseFixture.showRecoveryActions ? (_jsxs("div", { "data-bravely-slot": "recovery-actions", children: [onRetry ? (_jsx("button", { type: "button", onClick: onRetry, "data-bravely-action": "retry", children: retryLabel })) : null, onContactSupport ? (_jsx("button", { type: "button", onClick: onContactSupport, "data-bravely-action": "contact-support", children: contactSupportLabel })) : null] })) : null] }));
+}
+//# sourceMappingURL=ActivationLadder.js.map

package/dist/components/ActivationLadder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivationLadder.js","sourceRoot":"","sources":["../../src/components/ActivationLadder.tsx"],"names":[],"mappings":";AAAA,8DAA8D;AAC9D,EAAE;AACF,sEAAsE;AACtE,yEAAyE;AACzE,mEAAmE;AACnE,oEAAoE;AACpE,EAAE;AACF,UAAU;AACV,0EAA0E;AAC1E,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAC1E,sEAAsE;AACtE,gEAAgE;AAChE,wEAAwE;AACxE,0EAA0E;AAC1E,4EAA4E;AAC5E,8DAA8D;AAC9D,wEAAwE;AACxE,uEAAuE;AACvE,yEAAyE;AACzE,wEAAwE;AACxE,mCAAmC;AACnC,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,0EAA0E;AAC1E,oBAAoB;AAEpB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAqB,MAAM,OAAO,CAAC;AAE/D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAenD;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAKxC;IACJ;QACE,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,2BAA2B;QACrC,mBAAmB,EAAE,KAAK;KAC3B;IACD;QACE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,0CAA0C;QACpD,mBAAmB,EAAE,KAAK;KAC3B;IACD;QACE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,uEAAuE;QACjF,mBAAmB,EAAE,KAAK;KAC3B;IACD;QACE,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,IAAI;QACV,QAAQ,EACN,gFAAgF;QAClF,mBAAmB,EAAE,IAAI;KAC1B;CACO,CAAC;AAEX;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,IAAI,SAAS,GAAG,MAAM;QAAE,OAAO,CAAC,CAAC;IACjC,IAAI,SAAS,GAAG,MAAM;QAAE,OAAO,CAAC,CAAC;IACjC,IAAI,SAAS,GAAG,OAAO;QAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,OAAe,EACf,OAAkC;IAElC,IAAI,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,uEAAuE;QACvE,qEAAqE;QACrE,qEAAqE;QACrE,0BAA0B;QAC1B,GAAG,GAAG,GAAG;aACN,OAAO,CAAC,4BAA4B,EAAE,GAAG,CAAC;aAC1C,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC;aACvC,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,OAAkC;IAElC,OAAO,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACtD,KAAK,EAAE,CAAkB;QACzB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;QACpD,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;KAC3C,CAAC,CAAC,CAAC;AACN,CAAC;AAgCD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,MAAM,EACJ,KAAK,EACL,SAAS,EAAE,eAAe,EAC1B,OAAO,EACP,OAAO,EACP,OAAO,EAAE,eAAe,EACxB,OAAO,EACP,gBAAgB,EAChB,SAAS,EACT,UAAU,GAAG,WAAW,EACxB,mBAAmB,GAAG,iBAAiB,GACxC,GAAG,KAAK,CAAC;IAEV,wEAAwE;IACxE,mEAAmE;IACnE,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAS,GAAG,EAAE,CAC1D,eAAe,KAAK,SAAS;QAC3B,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CACxD,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,cAAc,CAAC,eAAe,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QACD,oEAAoE;QACpE,uDAAuD;QACvD,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpE,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE;YAC1B,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;IAEvC,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B;QAAE,OAAO,IAAI,CAAC;IAE3D,MAAM,OAAO,GAAG,eAAe,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,iCAAiC,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,gBAAgB,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAEvE,OAAO,CACL,eACE,SAAS,EAAE,SAAS,4BACG,mBAAmB,gBAC9B,UAAU,EACtB,IAAI,EAAC,QAAQ,eACH,QAAQ,aAElB,iCAAqB,MAAM,YAAE,IAAI,GAAK,EACrC,YAAY,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAClC,oCAAuB,kBAAkB,aACtC,OAAO,CAAC,CAAC,CAAC,CACT,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,OAAO,yBAAsB,OAAO,YAChE,UAAU,GACJ,CACV,CAAC,CAAC,CAAC,IAAI,EACP,gBAAgB,CAAC,CAAC,CAAC,CAClB,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,gBAAgB,yBACL,iBAAiB,YAEpC,mBAAmB,GACb,CACV,CAAC,CAAC,CAAC,IAAI,IACJ,CACP,CAAC,CAAC,CAAC,IAAI,IACJ,CACP,CAAC;AACJ,CAAC"}

package/dist/components/CrossAppCard.d.ts

@@ -0,0 +1,48 @@
+import type { ReactElement } from "react";
+import type { Entitlement } from "../types.js";
+/**
+ * Return the entitlements that count as "other Bravely Pro apps" for the
+ * cross-app card on `currentAppSlug`. Excludes the current app's own
+ * `<slug>_pro` entitlement. Includes `bravely_premium` only if the user
+ * does NOT have `<currentApp>_pro` (otherwise the bundle double-counts the
+ * current app).
+ */
+export declare function filterCrossAppEntitlements(entitlements: Entitlement[], currentAppSlug: string): Entitlement[];
+/**
+ * Count how many distinct apps the user owns across the account, excluding
+ * the current app. `bravely_premium` (the bundle entitlement) counts as
+ * one cross-app token — the journey doc treats it as a single "unifying
+ * signal" rather than enumerating every bundled app.
+ */
+export declare function countCrossAppEntitlements(entitlements: Entitlement[], currentAppSlug: string): number;
+/**
+ * Render the locked cross-app copy: "You own [N] Bravely Pro app[s] on
+ * this account." with grammatically correct pluralization.
+ */
+export declare function renderCrossAppCopy(count: number): string;
+export interface CrossAppCardProps {
+    /** Full set of active entitlements from `manager.getEntitlements()`. */
+    entitlements: Entitlement[];
+    /** This utility's slug; the card excludes its own entitlement from the count. */
+    currentAppSlug: string;
+    /**
+     * When true, render a Dismiss button that calls `onDismiss`. Per the
+     * 5-decisions list in `cux-m2-m4-rollout-plan.md` the journey doc default
+     * is persistent (non-dismissible). Wave B-D can override per-variant.
+     */
+    dismissible?: boolean;
+    /** Invoked when the dismiss button is clicked (only when `dismissible`). */
+    onDismiss?: () => void;
+    /** Render variant: full card or compact paywall footer chip. */
+    variant?: "card" | "footer-chip";
+    /** Outer class name. */
+    className?: string;
+    /** Localized dismiss label. */
+    dismissLabel?: string;
+}
+/**
+ * Render the M4 cross-app card. Returns null when the user has zero
+ * cross-app entitlements (the card has nothing to say).
+ */
+export declare function CrossAppCard(props: CrossAppCardProps): ReactElement | null;
+//# sourceMappingURL=CrossAppCard.d.ts.map

package/dist/components/CrossAppCard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CrossAppCard.d.ts","sourceRoot":"","sources":["../../src/components/CrossAppCard.tsx"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,WAAW,EAAE,EAC3B,cAAc,EAAE,MAAM,GACrB,WAAW,EAAE,CAGf;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,WAAW,EAAE,EAC3B,cAAc,EAAE,MAAM,GACrB,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIxD;AAED,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,iFAAiF;IACjF,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC;IACjC,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,YAAY,GAAG,IAAI,CAoC1E"}

package/dist/components/CrossAppCard.js

@@ -0,0 +1,45 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { displayNameFor } from "../displayName.js";
+/**
+ * Return the entitlements that count as "other Bravely Pro apps" for the
+ * cross-app card on `currentAppSlug`. Excludes the current app's own
+ * `<slug>_pro` entitlement. Includes `bravely_premium` only if the user
+ * does NOT have `<currentApp>_pro` (otherwise the bundle double-counts the
+ * current app).
+ */
+export function filterCrossAppEntitlements(entitlements, currentAppSlug) {
+    const own = `${currentAppSlug}_pro`;
+    return entitlements.filter((e) => e.lookup_key !== own);
+}
+/**
+ * Count how many distinct apps the user owns across the account, excluding
+ * the current app. `bravely_premium` (the bundle entitlement) counts as
+ * one cross-app token — the journey doc treats it as a single "unifying
+ * signal" rather than enumerating every bundled app.
+ */
+export function countCrossAppEntitlements(entitlements, currentAppSlug) {
+    return filterCrossAppEntitlements(entitlements, currentAppSlug).length;
+}
+/**
+ * Render the locked cross-app copy: "You own [N] Bravely Pro app[s] on
+ * this account." with grammatically correct pluralization.
+ */
+export function renderCrossAppCopy(count) {
+    if (count <= 0)
+        return "";
+    const noun = count === 1 ? "app" : "apps";
+    return `You own ${count} Bravely Pro ${noun} on this account.`;
+}
+/**
+ * Render the M4 cross-app card. Returns null when the user has zero
+ * cross-app entitlements (the card has nothing to say).
+ */
+export function CrossAppCard(props) {
+    const { entitlements, currentAppSlug, dismissible = false, onDismiss, variant = "card", className, dismissLabel = "Dismiss", } = props;
+    const count = countCrossAppEntitlements(entitlements, currentAppSlug);
+    if (count <= 0)
+        return null;
+    const text = renderCrossAppCopy(count);
+    return (_jsxs("aside", { className: className, "data-bravely-component": "cross-app-card", "data-variant": variant, "data-count": count, "data-current-app": currentAppSlug, "data-current-app-name": displayNameFor(currentAppSlug), children: [_jsx("p", { "data-bravely-slot": "text", children: text }), dismissible && onDismiss ? (_jsx("button", { type: "button", onClick: onDismiss, "data-bravely-action": "dismiss", children: dismissLabel })) : null] }));
+}
+//# sourceMappingURL=CrossAppCard.js.map

package/dist/components/CrossAppCard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CrossAppCard.js","sourceRoot":"","sources":["../../src/components/CrossAppCard.tsx"],"names":[],"mappings":";AAkBA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAA2B,EAC3B,cAAsB;IAEtB,MAAM,GAAG,GAAG,GAAG,cAAc,MAAM,CAAC;IACpC,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,YAA2B,EAC3B,cAAsB;IAEtB,OAAO,0BAA0B,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,MAAM,CAAC;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,WAAW,KAAK,gBAAgB,IAAI,mBAAmB,CAAC;AACjE,CAAC;AAuBD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAwB;IACnD,MAAM,EACJ,YAAY,EACZ,cAAc,EACd,WAAW,GAAG,KAAK,EACnB,SAAS,EACT,OAAO,GAAG,MAAM,EAChB,SAAS,EACT,YAAY,GAAG,SAAS,GACzB,GAAG,KAAK,CAAC;IAEV,MAAM,KAAK,GAAG,yBAAyB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACtE,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,CACL,iBACE,SAAS,EAAE,SAAS,4BACG,gBAAgB,kBACzB,OAAO,gBACT,KAAK,sBACC,cAAc,2BACT,cAAc,CAAC,cAAc,CAAC,aAErD,iCAAqB,MAAM,YAAE,IAAI,GAAK,EACrC,WAAW,IAAI,SAAS,CAAC,CAAC,CAAC,CAC1B,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,SAAS,yBACE,SAAS,YAE5B,YAAY,GACN,CACV,CAAC,CAAC,CAAC,IAAI,IACF,CACT,CAAC;AACJ,CAAC"}

package/dist/deprecation.d.ts

@@ -0,0 +1,19 @@
+import type { DeprecationDirective } from "./types.js";
+/** Parse one `Bravely-Deprecation` header value into directives. */
+export declare function parseDeprecation(header: string | null): DeprecationDirective[];
+/** Thrown when the server returns HTTP 426 (kill-switch). */
+export declare class BravelyClientKilledError extends Error {
+    readonly replacement?: string;
+    readonly reason?: string;
+    constructor(message: string, opts?: {
+        replacement?: string;
+        reason?: string;
+    });
+}
+/** Thrown when the OAuth token endpoint returns an RFC 6749 error. */
+export declare class OAuthError extends Error {
+    readonly error: string;
+    readonly errorDescription?: string;
+    constructor(error: string, description?: string);
+}
+//# sourceMappingURL=deprecation.d.ts.map

package/dist/deprecation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deprecation.d.ts","sourceRoot":"","sources":["../src/deprecation.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,oBAAoB,EAAE,CAW9E;AAmCD,6DAA6D;AAC7D,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBACb,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO;CAMlF;AAED,sEAAsE;AACtE,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;gBACvB,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM;CAMhD"}

package/dist/deprecation.js

@@ -0,0 +1,83 @@
+// `Bravely-Deprecation` response-header parser. Server publishes this on any
+// response to flag the endpoint or the calling client as deprecated. Two
+// shapes (Track E9):
+//
+//   Bravely-Deprecation: endpoint; expires=2026-08-11; replacement=/api/v2/...; reason=demolition
+//   Bravely-Deprecation: client; min-version=0.3.0; current=0.2.22; reason=force-upgrade
+//
+// Multiple values can be comma-separated. Browsers can read it via
+// `Access-Control-Expose-Headers`.
+/** Parse one `Bravely-Deprecation` header value into directives. */
+export function parseDeprecation(header) {
+    if (!header)
+        return [];
+    // Multiple directives are comma-separated at the top level. We tolerate
+    // missing whitespace and stray semicolons inside values (none should
+    // contain commas).
+    const out = [];
+    for (const raw of header.split(",")) {
+        const directive = parseOne(raw.trim());
+        if (directive)
+            out.push(directive);
+    }
+    return out;
+}
+function parseOne(raw) {
+    if (!raw)
+        return null;
+    const parts = raw.split(";").map((p) => p.trim()).filter(Boolean);
+    if (parts.length === 0)
+        return null;
+    const kindToken = parts.shift();
+    const params = {};
+    for (const p of parts) {
+        const idx = p.indexOf("=");
+        if (idx === -1)
+            continue;
+        const k = p.slice(0, idx).trim();
+        const v = p.slice(idx + 1).trim();
+        if (k && v)
+            params[k] = v;
+    }
+    if (kindToken === "endpoint") {
+        return {
+            kind: "endpoint",
+            endpoint: params.endpoint,
+            expires: params.expires,
+            replacement: params.replacement,
+            reason: params.reason,
+        };
+    }
+    if (kindToken === "client") {
+        return {
+            kind: "client",
+            minVersion: params["min-version"] ?? params.min_version,
+            current: params.current,
+            reason: params.reason,
+        };
+    }
+    return null;
+}
+/** Thrown when the server returns HTTP 426 (kill-switch). */
+export class BravelyClientKilledError extends Error {
+    replacement;
+    reason;
+    constructor(message, opts = {}) {
+        super(message);
+        this.name = "BravelyClientKilledError";
+        this.replacement = opts.replacement;
+        this.reason = opts.reason;
+    }
+}
+/** Thrown when the OAuth token endpoint returns an RFC 6749 error. */
+export class OAuthError extends Error {
+    error;
+    errorDescription;
+    constructor(error, description) {
+        super(description ?? error);
+        this.name = "OAuthError";
+        this.error = error;
+        this.errorDescription = description;
+    }
+}
+//# sourceMappingURL=deprecation.js.map

package/dist/deprecation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deprecation.js","sourceRoot":"","sources":["../src/deprecation.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,yEAAyE;AACzE,qBAAqB;AACrB,EAAE;AACF,kGAAkG;AAClG,yFAAyF;AACzF,EAAE;AACF,mEAAmE;AACnE,mCAAmC;AAInC,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,wEAAwE;IACxE,qEAAqE;IACrE,mBAAmB;IACnB,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,IAAI,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;IACjC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,SAAS;QACzB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QAC7B,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,WAAW;YACvD,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6DAA6D;AAC7D,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,WAAW,CAAU;IACrB,MAAM,CAAU;IACzB,YAAY,OAAe,EAAE,OAAkD,EAAE;QAC/E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;CACF;AAED,sEAAsE;AACtE,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,KAAK,CAAS;IACd,gBAAgB,CAAU;IACnC,YAAY,KAAa,EAAE,WAAoB;QAC7C,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC;IACtC,CAAC;CACF"}

package/dist/displayName.d.ts

@@ -0,0 +1,15 @@
+import type { AppSlug } from "./types.js";
+/**
+ * Canonical slug → display name map. Sourced from the H1 of each
+ * `<app>-free-vs-pro.md`. Branding owners: keep this in lockstep with the
+ * marketing pages on `bravely.dev/<slug>` and the Settings strings inside
+ * each utility.
+ */
+export declare const DISPLAY_NAMES: Record<AppSlug, string>;
+/**
+ * Returns the display name for a slug. Unknown slugs fall back to a
+ * naive Title-case rendering so host pages never crash on an unrecognized
+ * slug (e.g. a new utility added before this lib version ships).
+ */
+export declare function displayNameFor(slug: string): string;
+//# sourceMappingURL=displayName.d.ts.map