@chainpatrol/sdk 1.9.0 → 1.11.0

package/dist/index.js

@@ -601,45 +601,6 @@ zod.z.object({
   name: zod.z.string().optional().describe("Asset name"),
   description: zod.z.string().nullish().optional().describe("Asset description")
 });
-zod.z.object({
-  slug: zod.z.string(),
-  assetId: zod.z.number(),
-  name: zod.z.string().optional(),
-  description: zod.z.string().optional(),
-  assetGroupId: zod.z.number().nullable().optional(),
-  updatedByOrganizationId: zod.z.number().optional()
-});
-zod.z.object({
-  content: zod.z.string().min(1, { message: "Content must be at least 3 character" }).max(1e3, { message: "Content must be less than 1000 characters" }),
-  email: zod.z.string().email(),
-  description: zod.z.string().optional().default("")
-});
-zod.z.object({
-  /** Canonicalization algorithm version the client computed its prefixes with. */
-  algoVersion: zod.z.number().int().positive(),
-  /** 4-byte (8-hex-char) prefixes that hit the client's local index. */
-  prefixes: zod.z.array(zod.z.string().regex(/^[0-9a-f]{8}$/)).min(1).max(200)
-}).describe("Blocklist confirm request");
-zod.z.object({
-  /** Full 64-char SHA-256 hashes of blocked expressions, grouped by prefix. */
-  fullHashes: zod.z.record(zod.z.string(), zod.z.array(zod.z.string()))
-}).describe("Blocklist confirm response");
-zod.z.void().describe("Blocklist version request");
-zod.z.object({
-  /** Canonicalization algorithm version the artifacts + confirm are built with. */
-  algoVersion: zod.z.number().int().positive(),
-  snapshot: zod.z.object({
-    token: zod.z.string(),
-    url: zod.z.string().url(),
-    prefixBytes: zod.z.number().int().positive(),
-    count: zod.z.number().int().nonnegative()
-  }),
-  recent: zod.z.object({
-    token: zod.z.string(),
-    url: zod.z.string().url(),
-    windowSeconds: zod.z.number().int().positive()
-  })
-}).describe("Blocklist version response");
 
 // ../../node_modules/luxon/src/errors.js
 var LuxonError = class extends Error {
@@ -1313,17 +1274,17 @@ var PolyDateFormatter = class {
   constructor(dt, intl, opts) {
     this.opts = opts;
     this.originalZone = void 0;
-    let z56 = void 0;
+    let z64 = void 0;
     if (this.opts.timeZone) {
       this.dt = dt;
     } else if (dt.zone.type === "fixed") {
       const gmtOffset = -1 * (dt.offset / 60);
       const offsetZ = gmtOffset >= 0 ? `Etc/GMT+${gmtOffset}` : `Etc/GMT${gmtOffset}`;
       if (dt.offset !== 0 && IANAZone.create(offsetZ).valid) {
-        z56 = offsetZ;
+        z64 = offsetZ;
         this.dt = dt;
       } else {
-        z56 = "UTC";
+        z64 = "UTC";
         this.dt = dt.offset === 0 ? dt : dt.setZone("UTC").plus({ minutes: dt.offset });
         this.originalZone = dt.zone;
       }
@@ -1331,14 +1292,14 @@ var PolyDateFormatter = class {
       this.dt = dt;
     } else if (dt.zone.type === "iana") {
       this.dt = dt;
-      z56 = dt.zone.name;
+      z64 = dt.zone.name;
     } else {
-      z56 = "UTC";
+      z64 = "UTC";
       this.dt = dt.setZone("UTC").plus({ minutes: dt.offset });
       this.originalZone = dt.zone;
     }
     const intlOpts = __spreadValues({}, this.opts);
-    intlOpts.timeZone = intlOpts.timeZone || z56;
+    intlOpts.timeZone = intlOpts.timeZone || z64;
     this.dtf = getCachedDTF(intl, intlOpts);
   }
   format() {
@@ -7054,6 +7015,79 @@ function friendlyDateTime(dateTimeish) {
     );
   }
 }
+var MAX_ASSET_NOTE_LENGTH = 5e3;
+var assetNoteBodySchema = zod.z.string().trim().min(1, "Note is required").max(MAX_ASSET_NOTE_LENGTH, `Note must be at most ${MAX_ASSET_NOTE_LENGTH} characters`);
+var assetNoteTimelineAtSchema = zod.z.coerce.date().refine((value) => value.getTime() <= DateTime.now().toUTC().toMillis(), {
+  message: "Timeline date cannot be in the future"
+});
+zod.z.object({
+  assetId: zod.z.number().int().positive(),
+  note: assetNoteBodySchema,
+  timelineAt: assetNoteTimelineAtSchema.optional()
+});
+zod.z.object({
+  noteId: zod.z.number().int().positive(),
+  note: assetNoteBodySchema,
+  timelineAt: assetNoteTimelineAtSchema.nullish()
+});
+zod.z.object({
+  noteId: zod.z.number().int().positive()
+});
+var ASSET_TAGS = {
+  ENFORCEMENT_EXHAUSTED: {
+    label: "Enforcement Exhausted",
+    description: "All available enforcement options have been pursued with the relevant providers. The asset remains active due to provider inaction.",
+    colorScheme: "orange"
+  }
+};
+var ASSET_TAG_KEYS = Object.keys(ASSET_TAGS);
+var assetTagKeySchema = zod.z.enum(ASSET_TAG_KEYS);
+zod.z.object({
+  assetId: zod.z.number().int().positive()
+});
+zod.z.object({
+  assetId: zod.z.number().int().positive(),
+  tag: assetTagKeySchema
+});
+zod.z.object({
+  slug: zod.z.string(),
+  assetId: zod.z.number(),
+  name: zod.z.string().optional(),
+  description: zod.z.string().optional(),
+  assetGroupId: zod.z.number().nullable().optional(),
+  updatedByOrganizationId: zod.z.number().optional()
+});
+zod.z.object({
+  content: zod.z.string().min(1, { message: "Content must be at least 3 character" }).max(1e3, { message: "Content must be less than 1000 characters" }),
+  email: zod.z.string().email(),
+  description: zod.z.string().optional().default("")
+});
+zod.z.object({
+  /** Canonicalization algorithm version the client computed its prefixes with. */
+  algoVersion: zod.z.number().int().positive(),
+  /** 4-byte (8-hex-char) prefixes that hit the client's local index. */
+  prefixes: zod.z.array(zod.z.string().regex(/^[0-9a-f]{8}$/)).min(1).max(200)
+}).describe("Blocklist confirm request");
+zod.z.object({
+  /** Full 64-char SHA-256 hashes of blocked expressions, grouped by prefix. */
+  fullHashes: zod.z.record(zod.z.string(), zod.z.array(zod.z.string()))
+}).describe("Blocklist confirm response");
+zod.z.void().describe("Blocklist version request");
+zod.z.object({
+  /** Canonicalization algorithm version the artifacts + confirm are built with. */
+  algoVersion: zod.z.number().int().positive(),
+  snapshot: zod.z.object({
+    token: zod.z.string(),
+    url: zod.z.string().url(),
+    prefixBytes: zod.z.number().int().positive(),
+    count: zod.z.number().int().nonnegative()
+  }),
+  recent: zod.z.object({
+    token: zod.z.string(),
+    url: zod.z.string().url(),
+    windowSeconds: zod.z.number().int().positive()
+  })
+}).describe("Blocklist version response");
 
 // ../../internal/database/src/generated/prisma/enums.ts
 var BrandType = {
@@ -7174,7 +7208,9 @@ var AssetType = {
   FIVE_HUNDRED_PX: "FIVE_HUNDRED_PX",
   LUMA: "LUMA",
   SMARTMONEYMATCH: "SMARTMONEYMATCH",
-  APK_GOLD: "APK_GOLD"
+  APK_GOLD: "APK_GOLD",
+  GLASSDOOR: "GLASSDOOR",
+  PUMP_FUN: "PUMP_FUN"
 };
 var LivenessStatus = {
   UNKNOWN: "UNKNOWN",
@@ -7335,8 +7371,23 @@ zod.z.object({
   watchStatus: zod.z.nativeEnum(WatchStatus).optional().describe("The watch status of the asset.")
 }).describe("Check asset response body");
 var assetListInputSchema = zod.z.object({
-  /** The type of asset to retrieve. */
-  type: zod.z.nativeEnum(AssetType).describe("Asset type"),
+  /**
+   * The type of asset to retrieve. Omitting the key means every asset type,
+   * which lets a bulk consumer sweep the whole blocklist with one cursor
+   * instead of looping all 94 members of `AssetType`.
+   *
+   * An explicit `null` is rejected with a 400 rather than treated as "all
+   * types". Only omission opts into the full sweep, so a client that sends
+   * `type: null` from an uninitialised variable gets a clear error instead of
+   * silently pulling every blocked asset.
+   *
+   * Not `.nullable()`: besides accepting that null, it renders in the
+   * generated MCP tool manifest as a nested `anyOf` containing `{"not": {}}`,
+   * which buries the enum hint telling a model which values are legal.
+   */
+  type: zod.z.nativeEnum(AssetType).optional().describe(
+    "Asset type to retrieve. Omit the field entirely to retrieve assets of every type in a single paginated sweep; an explicit null is rejected."
+  ),
   /** Optional status filter for the assets; defaults to `BLOCKED`. */
   status: zod.z.nativeEnum(AssetStatus).optional().default(AssetStatus.BLOCKED).describe("Status of the assets to retrieve"),
   /**
@@ -7364,7 +7415,8 @@ var assetListInputSchema = zod.z.object({
 }).describe(
   `List asset request body
 
-Defaults to getting all the updates in the last 1 day.
+With no \`startDate\`, this returns every matching asset regardless of age \u2014 there
+is no implicit one-day window. Pass \`startDate\` to get a delta instead.
 
 You can also choose a \`startDate\` and \`endDate\` for the range of asset updates, most 
 timestamp formats should work, we use [Luxon](https://moment.github.io/luxon/#/parsing) 
@@ -7473,6 +7525,8 @@ var ThreatDetectionSourceKey = /* @__PURE__ */ ((ThreatDetectionSourceKey2) => {
   ThreatDetectionSourceKey2["TELEGRAM_CHANNELS_SEARCH_VETRIC"] = "telegram_channels_search_vetric";
   ThreatDetectionSourceKey2["TELEGRAM_USER_SEARCH_VETRIC"] = "telegram_user_search_vetric";
   ThreatDetectionSourceKey2["FACEBOOK_PAGE_SEARCH_VETRIC"] = "facebook_page_search_vetric";
+  ThreatDetectionSourceKey2["FACEBOOK_USER_SEARCH_VETRIC"] = "facebook_user_search_vetric";
+  ThreatDetectionSourceKey2["FACEBOOK_POST_SEARCH_VETRIC"] = "facebook_post_search_vetric";
   ThreatDetectionSourceKey2["INSTAGRAM_ACCOUNT_SEARCH_VETRIC"] = "instagram_account_search_vetric";
   ThreatDetectionSourceKey2["TWITTER_SEARCH_VETRIC"] = "twitter_search_vetric";
   ThreatDetectionSourceKey2["LINKEDIN_PEOPLE_SEARCH_VETRIC"] = "linkedin_people_search_vetric";
@@ -7512,14 +7566,17 @@ var ThreatDetectionSourceKey = /* @__PURE__ */ ((ThreatDetectionSourceKey2) => {
   ThreatDetectionSourceKey2["GROK_USER_SEARCH"] = "grok_user_search";
   ThreatDetectionSourceKey2["GOOGLE_LENS_IMAGE_SEARCH"] = "google_lens_image_search";
   ThreatDetectionSourceKey2["YANDEX_SEARCH"] = "yandex_search";
+  ThreatDetectionSourceKey2["YANDEX_IMAGE_SEARCH"] = "yandex_image_search";
   ThreatDetectionSourceKey2["LINKEDIN_EMPLOYEE_DETECTION"] = "linkedin_employee_detection";
   ThreatDetectionSourceKey2["LINKEDIN_POST_SEARCH"] = "linkedin_post_search";
   ThreatDetectionSourceKey2["LINKEDIN_COMPANY_SEARCH"] = "linkedin_company_search";
   ThreatDetectionSourceKey2["BING_ADS_SEARCH"] = "bing_ads_search";
   ThreatDetectionSourceKey2["TIK_TOK_ADS_SEARCH"] = "tik_tok_ads_search";
+  ThreatDetectionSourceKey2["ADLIBRARY_ADS_SEARCH"] = "adlibrary_ads_search";
   ThreatDetectionSourceKey2["DNSDB"] = "dnsdb";
   ThreatDetectionSourceKey2["DAILY_MOTION_SEARCH"] = "daily_motion_search";
   ThreatDetectionSourceKey2["WATCHLIST"] = "watchlist";
+  ThreatDetectionSourceKey2["GITHUB_SEARCH"] = "github_search";
   return ThreatDetectionSourceKey2;
 })(ThreatDetectionSourceKey || {});
 var ThreatDetectionScope = /* @__PURE__ */ ((ThreatDetectionScope2) => {
@@ -7545,6 +7602,7 @@ var AssetScanEnrichmentType = /* @__PURE__ */ ((AssetScanEnrichmentType2) => {
   AssetScanEnrichmentType2["DNS"] = "dns";
   AssetScanEnrichmentType2["TLS"] = "tls";
   AssetScanEnrichmentType2["TCP"] = "tcp";
+  AssetScanEnrichmentType2["HOSTNAME_FIRST_SEEN"] = "hostname_first_seen";
   AssetScanEnrichmentType2["TWITTER_POST"] = "post";
   AssetScanEnrichmentType2["TWITTER_PROFILE"] = "profile";
   AssetScanEnrichmentType2["TWITTER_FOLLOWERS"] = "twitter_followers";
@@ -7570,12 +7628,17 @@ var AssetScanEnrichmentType = /* @__PURE__ */ ((AssetScanEnrichmentType2) => {
   AssetScanEnrichmentType2["VIMEO_PROFILE"] = "vimeo_profile";
   AssetScanEnrichmentType2["STACKBLITZ_PAGE"] = "stackblitz_page";
   AssetScanEnrichmentType2["LEETCODE_PAGE"] = "leetcode_page";
+  AssetScanEnrichmentType2["TUMBLR_BLOG"] = "tumblr_blog";
+  AssetScanEnrichmentType2["TUMBLR_POST"] = "tumblr_post";
+  AssetScanEnrichmentType2["TUMBLR_COMMUNITY"] = "tumblr_community";
   AssetScanEnrichmentType2["NPM_PACKAGE"] = "npm_package";
   AssetScanEnrichmentType2["PYPI_PACKAGE"] = "pypi_package";
   AssetScanEnrichmentType2["RUST_PACKAGE"] = "rust_package";
   AssetScanEnrichmentType2["LINKEDIN_PROFILE"] = "linkedin_profile";
+  AssetScanEnrichmentType2["PUMP_FUN_TOKEN"] = "pump_fun_token";
   AssetScanEnrichmentType2["META_AD"] = "meta_ad";
   AssetScanEnrichmentType2["GOOGLE_AD"] = "google_ad";
+  AssetScanEnrichmentType2["ADLIBRARY_AD"] = "adlibrary_ad";
   AssetScanEnrichmentType2["CONTRACT_DEPLOYER"] = "contract_deployer";
   return AssetScanEnrichmentType2;
 })(AssetScanEnrichmentType || {});
@@ -7587,6 +7650,8 @@ var AssetScanEnrichmentSource = /* @__PURE__ */ ((AssetScanEnrichmentSource2) =>
   AssetScanEnrichmentSource2["NETWORK"] = "node_js_network";
   AssetScanEnrichmentSource2["EXTENSION"] = "extension";
   AssetScanEnrichmentSource2["PLAYWRIGHT"] = "playwright";
+  AssetScanEnrichmentSource2["CHAINPATROL_BROWSER"] = "chainpatrol_browser";
+  AssetScanEnrichmentSource2["STEEL_BROWSER"] = "steel_browser";
   AssetScanEnrichmentSource2["X_API"] = "x_api";
   AssetScanEnrichmentSource2["SOCIALDATA_API"] = "socialdata_api";
   AssetScanEnrichmentSource2["NEYNAR_API"] = "neynar_api";
@@ -7605,12 +7670,16 @@ var AssetScanEnrichmentSource = /* @__PURE__ */ ((AssetScanEnrichmentSource2) =>
   AssetScanEnrichmentSource2["VIMEO_API"] = "vimeo_api";
   AssetScanEnrichmentSource2["STACKBLITZ_API"] = "stackblitz_api";
   AssetScanEnrichmentSource2["LEETCODE_API"] = "leetcode_api";
+  AssetScanEnrichmentSource2["TUMBLR_API"] = "tumblr_api";
   AssetScanEnrichmentSource2["NPM_REGISTRY_API"] = "npm_registry_api";
   AssetScanEnrichmentSource2["PYPI_REGISTRY_API"] = "pypi_registry_api";
   AssetScanEnrichmentSource2["CRATES_IO_API"] = "crates_io_api";
   AssetScanEnrichmentSource2["APIFY_LINKEDIN_API"] = "apify_linkedin_api";
+  AssetScanEnrichmentSource2["PUMP_FUN_API"] = "pump_fun_api";
   AssetScanEnrichmentSource2["META_ADS_LIBRARY"] = "meta_ads_library";
+  AssetScanEnrichmentSource2["STEEL_META_ADS_LIBRARY"] = "steel_meta_ads_library";
   AssetScanEnrichmentSource2["GOOGLE_ADS_TRANSPARENCY_CENTER"] = "google_ads_transparency_center";
+  AssetScanEnrichmentSource2["ADLIBRARY"] = "adlibrary";
   AssetScanEnrichmentSource2["ETHERSCAN_API"] = "etherscan_api";
   return AssetScanEnrichmentSource2;
 })(AssetScanEnrichmentSource || {});
@@ -7625,6 +7694,7 @@ var ASSET_SCAN_ENRICHMENT_TYPE_LABELS = {
   ["dns" /* DNS */]: "DNS Lookup",
   ["tls" /* TLS */]: "TLS Connection Info",
   ["tcp" /* TCP */]: "TCP Connection Info",
+  ["hostname_first_seen" /* HOSTNAME_FIRST_SEEN */]: "Hostname First Seen",
   // Farcaster
   ["cast" /* FARCASTER_CAST */]: "Farcaster Cast",
   ["farcaster_profile" /* FARCASTER_PROFILE */]: "Farcaster Profile",
@@ -7663,6 +7733,10 @@ var ASSET_SCAN_ENRICHMENT_TYPE_LABELS = {
   ["stackblitz_page" /* STACKBLITZ_PAGE */]: "Stackblitz Page",
   // Leetcode
   ["leetcode_page" /* LEETCODE_PAGE */]: "Leetcode Page",
+  // Tumblr
+  ["tumblr_blog" /* TUMBLR_BLOG */]: "Tumblr Blog",
+  ["tumblr_post" /* TUMBLR_POST */]: "Tumblr Post",
+  ["tumblr_community" /* TUMBLR_COMMUNITY */]: "Tumblr Community",
   // NPM
   ["npm_package" /* NPM_PACKAGE */]: "NPM Package",
   // PyPI
@@ -7671,10 +7745,14 @@ var ASSET_SCAN_ENRICHMENT_TYPE_LABELS = {
   ["rust_package" /* RUST_PACKAGE */]: "Rust Package",
   // LinkedIn
   ["linkedin_profile" /* LINKEDIN_PROFILE */]: "LinkedIn Profile",
+  // Pump.fun
+  ["pump_fun_token" /* PUMP_FUN_TOKEN */]: "Pump.fun Token",
   // Meta Ads
   ["meta_ad" /* META_AD */]: "Meta Ad",
   // Google Ads
   ["google_ad" /* GOOGLE_AD */]: "Google Ad",
+  // Cross-platform ad intelligence
+  ["adlibrary_ad" /* ADLIBRARY_AD */]: "AdLibrary Ad",
   // Crypto / Onchain
   ["contract_deployer" /* CONTRACT_DEPLOYER */]: "Contract Deployer"
 };
@@ -7687,6 +7765,8 @@ var ASSET_SCAN_ENRICHMENT_SOURCE_LABELS = {
   ["node_js_network" /* NETWORK */]: "Network",
   ["extension" /* EXTENSION */]: "Browser Extension",
   ["playwright" /* PLAYWRIGHT */]: "Playwright",
+  ["chainpatrol_browser" /* CHAINPATROL_BROWSER */]: "ChainPatrol Browser",
+  ["steel_browser" /* STEEL_BROWSER */]: "Steel Browser",
   // Twitter
   ["x_api" /* X_API */]: "X API",
   ["socialdata_api" /* SOCIALDATA_API */]: "SocialData API",
@@ -7721,6 +7801,8 @@ var ASSET_SCAN_ENRICHMENT_SOURCE_LABELS = {
   ["stackblitz_api" /* STACKBLITZ_API */]: "Stackblitz API",
   // Leetcode
   ["leetcode_api" /* LEETCODE_API */]: "Leetcode API",
+  // Tumblr
+  ["tumblr_api" /* TUMBLR_API */]: "Tumblr API",
   // NPM
   ["npm_registry_api" /* NPM_REGISTRY_API */]: "NPM Registry API",
   // PyPI
@@ -7729,10 +7811,15 @@ var ASSET_SCAN_ENRICHMENT_SOURCE_LABELS = {
   ["crates_io_api" /* CRATES_IO_API */]: "Crates.io API",
   // LinkedIn
   ["apify_linkedin_api" /* APIFY_LINKEDIN_API */]: "Apify LinkedIn API",
+  // Pump.fun
+  ["pump_fun_api" /* PUMP_FUN_API */]: "Pump.fun API",
   // Meta Ads
   ["meta_ads_library" /* META_ADS_LIBRARY */]: "Meta Ads Library",
+  ["steel_meta_ads_library" /* STEEL_META_ADS_LIBRARY */]: "Steel Meta Ads Library",
   // Google Ads
   ["google_ads_transparency_center" /* GOOGLE_ADS_TRANSPARENCY_CENTER */]: "Google Ads Transparency Center",
+  // Cross-platform ad intelligence
+  ["adlibrary" /* ADLIBRARY */]: "AdLibrary",
   // Crypto / Onchain
   ["etherscan_api" /* ETHERSCAN_API */]: "Etherscan"
 };
@@ -7740,7 +7827,8 @@ var ASSET_SCAN_ENRICHMENT_SOURCE_TO_TYPES = {
   // URL-related sources
   ["urlscan" /* URLSCAN */]: [
     "browser_capture" /* BROWSER_CAPTURE */,
-    "geolocation_and_ip" /* GEOLOCATION_AND_IP */
+    "geolocation_and_ip" /* GEOLOCATION_AND_IP */,
+    "hostname_first_seen" /* HOSTNAME_FIRST_SEEN */
   ],
   ["whois" /* WHOIS */]: ["ownership_and_registration" /* OWNERSHIP_AND_REGISTRATION */],
   ["rdap" /* RDAP */]: ["ownership_and_registration" /* OWNERSHIP_AND_REGISTRATION */],
@@ -7765,6 +7853,12 @@ var ASSET_SCAN_ENRICHMENT_SOURCE_TO_TYPES = {
     "bilibili_profile" /* BILIBILI_PROFILE */,
     "telegram_profile" /* TELEGRAM_PROFILE */
   ],
+  // Only the generic page capture: the in-house browser does not (yet) run the
+  // platform-specific scrapes PLAYWRIGHT does above.
+  ["chainpatrol_browser" /* CHAINPATROL_BROWSER */]: [
+    "browser_capture" /* BROWSER_CAPTURE */
+  ],
+  ["steel_browser" /* STEEL_BROWSER */]: ["browser_capture" /* BROWSER_CAPTURE */],
   // Twitter-related sources
   ["x_api" /* X_API */]: [
     "post" /* TWITTER_POST */,
@@ -7824,6 +7918,12 @@ var ASSET_SCAN_ENRICHMENT_SOURCE_TO_TYPES = {
   ["stackblitz_api" /* STACKBLITZ_API */]: ["stackblitz_page" /* STACKBLITZ_PAGE */],
   // Leetcode-related sources
   ["leetcode_api" /* LEETCODE_API */]: ["leetcode_page" /* LEETCODE_PAGE */],
+  // Tumblr-related sources
+  ["tumblr_api" /* TUMBLR_API */]: [
+    "tumblr_blog" /* TUMBLR_BLOG */,
+    "tumblr_post" /* TUMBLR_POST */,
+    "tumblr_community" /* TUMBLR_COMMUNITY */
+  ],
   // NPM-related sources
   ["npm_registry_api" /* NPM_REGISTRY_API */]: ["npm_package" /* NPM_PACKAGE */],
   // PyPI-related sources
@@ -7834,12 +7934,17 @@ var ASSET_SCAN_ENRICHMENT_SOURCE_TO_TYPES = {
   ["apify_linkedin_api" /* APIFY_LINKEDIN_API */]: [
     "linkedin_profile" /* LINKEDIN_PROFILE */
   ],
+  // Pump.fun
+  ["pump_fun_api" /* PUMP_FUN_API */]: ["pump_fun_token" /* PUMP_FUN_TOKEN */],
   // Meta Ads-related sources
   ["meta_ads_library" /* META_ADS_LIBRARY */]: ["meta_ad" /* META_AD */],
+  ["steel_meta_ads_library" /* STEEL_META_ADS_LIBRARY */]: ["meta_ad" /* META_AD */],
   // Google Ads-related sources
   ["google_ads_transparency_center" /* GOOGLE_ADS_TRANSPARENCY_CENTER */]: [
     "google_ad" /* GOOGLE_AD */
   ],
+  // Cross-platform ad intelligence sources
+  ["adlibrary" /* ADLIBRARY */]: ["adlibrary_ad" /* ADLIBRARY_AD */],
   // Crypto / Onchain sources
   ["etherscan_api" /* ETHERSCAN_API */]: ["contract_deployer" /* CONTRACT_DEPLOYER */]
 };
@@ -8040,6 +8145,7 @@ function isDefinedAndNotNull(value) {
 // ../../internal/utils/src/promise.ts
 var promise_exports = {};
 __export(promise_exports, {
+  allSettledWithConcurrency: () => allSettledWithConcurrency,
   isPromiseSettledResultFulfilled: () => isPromiseSettledResultFulfilled,
   isPromiseSettledResultRejected: () => isPromiseSettledResultRejected
 });
@@ -8049,6 +8155,27 @@ function isPromiseSettledResultFulfilled(result) {
 function isPromiseSettledResultRejected(result) {
   return result.status === "rejected";
 }
+function allSettledWithConcurrency(items, limit, fn5) {
+  return __async(this, null, function* () {
+    const results = new Array(items.length);
+    let next = 0;
+    const worker = () => __async(null, null, function* () {
+      for (; ; ) {
+        const index = next;
+        next += 1;
+        if (index >= items.length) return;
+        try {
+          results[index] = { status: "fulfilled", value: yield fn5(items[index], index) };
+        } catch (reason) {
+          results[index] = { status: "rejected", reason };
+        }
+      }
+    });
+    const workers = Math.max(1, Math.min(Math.floor(limit) || 1, items.length));
+    yield Promise.all(Array.from({ length: workers }, worker));
+    return results;
+  });
+}
 
 // ../../internal/utils/src/url.ts
 var url_exports = {};
@@ -10803,6 +10930,7 @@ function buildSafePreviewUrl({
 var parse_exports = {};
 __export(parse_exports, {
   parseTerms: () => parseTerms,
+  repairTermsString: () => repairTermsString,
   stringifyTerms: () => stringifyTerms
 });
 function parseTerms(terms, {
@@ -10829,6 +10957,31 @@ function parseTerms(terms, {
 function stringifyTerms(parsedTerms) {
   return parsedTerms.map((term) => term.type === "exact" ? `*${term.value}*` : term.value).join(", ");
 }
+function repairTermsString(terms) {
+  if (!terms) return terms;
+  const entries = terms.split(",").map((entry) => entry.trim()).filter((entry) => entry.length > 0);
+  if (entries.length === 0) return terms;
+  const first = entries[0];
+  const last = entries[entries.length - 1];
+  const isWholeListWrap = entries.length > 1 && first.startsWith("*") && !first.endsWith("*") && last.endsWith("*") && !last.startsWith("*");
+  const hasOneSidedAsterisk = entries.some(
+    (entry) => entry.startsWith("*") !== entry.endsWith("*")
+  );
+  if (!isWholeListWrap && !hasOneSidedAsterisk) return terms;
+  const seen = /* @__PURE__ */ new Set();
+  const repaired = [];
+  for (const entry of entries) {
+    const inner = entry.replace(/^\*+|\*+$/g, "").trim();
+    if (inner.length === 0) continue;
+    const isExact = isWholeListWrap || entry.startsWith("*") && entry.endsWith("*") && entry.length > 2;
+    const formatted = isExact ? `*${inner}*` : inner;
+    const key = formatted.toLowerCase();
+    if (seen.has(key)) continue;
+    seen.add(key);
+    repaired.push(formatted);
+  }
+  return repaired.join(", ");
+}
 
 // ../../internal/utils/src/brand-pattern.ts
 var brand_pattern_exports = {};
@@ -11474,6 +11627,44 @@ zod.z.object({
     })
   )
 });
+var DATE_ONLY_PATTERN = /^\d{4}-\d{2}-\d{2}$/;
+var utcDateSchema = (endOfDay) => zod.z.preprocess((value) => {
+  if (typeof value !== "string") {
+    return value;
+  }
+  const parsed = DateTime.fromISO(value, { zone: "utc" });
+  if (!parsed.isValid) {
+    return new Date(Number.NaN);
+  }
+  return endOfDay && DATE_ONLY_PATTERN.test(value) ? parsed.endOf("day").toJSDate() : parsed.toJSDate();
+}, zod.z.coerce.date());
+
+// ../../internal/validation/src/public/metrics/false-positive-rate.ts
+zod.z.object({
+  slug: zod.z.string().min(1).describe("Organization slug"),
+  startDate: utcDateSchema(false).optional().describe(
+    "Only include assets blocked on or after this date. A date-only value (YYYY-MM-DD) starts at midnight UTC"
+  ),
+  endDate: utcDateSchema(true).optional().describe(
+    "Only include assets blocked on or before this date. A date-only value (YYYY-MM-DD) covers the whole day in UTC; pass a full timestamp for a precise cut-off"
+  ),
+  brandIds: zod.z.array(zod.z.number().int().positive()).optional().describe("Only include assets belonging to these brands"),
+  countryCodes: zod.z.array(zod.z.string().length(2)).optional().describe("Only include assets scanned from these ISO 3166-1 alpha-2 countries")
+});
+zod.z.object({
+  byAssetType: zod.z.array(
+    zod.z.object({
+      assetType: zod.z.nativeEnum(AssetType).describe("Asset type that was blocked"),
+      blocked: zod.z.number().describe("Assets of this type blocked within the date range"),
+      falsePositives: zod.z.number().describe("Of those, how many are no longer blocked today"),
+      falsePositiveRate: zod.z.number().nullable().describe(
+        "falsePositives / blocked, 0-1. Null only when nothing was blocked, which cannot happen for a returned row"
+      )
+    })
+  ).describe(
+    "False positive rate, one entry per asset type blocked in the range, descending by number blocked. Asset types with no false positives are included with a rate of 0; asset types with no blocks at all in the range are omitted, since they have no rate to report. The denominator counts block events, not distinct assets, so an asset blocked twice in the range counts twice. Whether a block still stands is read as of now while the range bounds the block itself, so a recent range reads low. An asset's blocked status is global, so a block another organization's report caused to be reversed is counted here too"
+  )
+});
 zod.z.object({
   slug: zod.z.string().min(1),
   startDate: zod.z.date(),
@@ -11488,8 +11679,8 @@ zod.z.object({
     endDate: zod.z.date()
   })
 });
-var DATE_ONLY_PATTERN = /^\d{4}-\d{2}-\d{2}$/;
-var utcDateSchema = (endOfDay) => zod.z.preprocess((value) => {
+var DATE_ONLY_PATTERN2 = /^\d{4}-\d{2}-\d{2}$/;
+var utcDateSchema2 = (endOfDay) => zod.z.preprocess((value) => {
   if (typeof value !== "string") {
     return value;
   }
@@ -11497,7 +11688,7 @@ var utcDateSchema = (endOfDay) => zod.z.preprocess((value) => {
   if (!parsed.isValid) {
     return new Date(Number.NaN);
   }
-  return endOfDay && DATE_ONLY_PATTERN.test(value) ? parsed.endOf("day").toJSDate() : parsed.toJSDate();
+  return endOfDay && DATE_ONLY_PATTERN2.test(value) ? parsed.endOf("day").toJSDate() : parsed.toJSDate();
 }, zod.z.coerce.date());
 var funnelCountsSchema = zod.z.object({
   blocked: zod.z.number().int().nonnegative().describe(
@@ -11506,10 +11697,10 @@ var funnelCountsSchema = zod.z.object({
 });
 zod.z.object({
   slug: zod.z.string().min(1).describe("Organization slug"),
-  startDate: utcDateSchema(false).describe(
+  startDate: utcDateSchema2(false).describe(
     "Only include assets whose earliest report was created on or after this date. A date-only value (YYYY-MM-DD) starts at midnight UTC"
   ),
-  endDate: utcDateSchema(true).describe(
+  endDate: utcDateSchema2(true).describe(
     "Only include assets whose earliest report was created on or before this date. A date-only value (YYYY-MM-DD) covers the whole day in UTC; pass a full timestamp for a precise cut-off"
   ),
   brandIds: zod.z.array(zod.z.number().int().positive()).optional().describe("Only include assets belonging to these brands")
@@ -11563,23 +11754,43 @@ zod.z.object({
     })
   )
 });
-var DATE_ONLY_PATTERN2 = /^\d{4}-\d{2}-\d{2}$/;
-var utcDateSchema2 = (endOfDay) => zod.z.preprocess((value) => {
-  if (typeof value !== "string") {
-    return value;
-  }
-  const parsed = DateTime.fromISO(value, { zone: "utc" });
-  if (!parsed.isValid) {
-    return new Date(Number.NaN);
-  }
-  return endOfDay && DATE_ONLY_PATTERN2.test(value) ? parsed.endOf("day").toJSDate() : parsed.toJSDate();
-}, zod.z.coerce.date());
 zod.z.object({
   slug: zod.z.string().min(1).describe("Organization slug"),
-  startDate: utcDateSchema2(false).optional().describe(
+  startDate: utcDateSchema(false).optional().describe(
+    "Only include takedowns first submitted to a provider on or after this date. A date-only value (YYYY-MM-DD) starts at midnight UTC"
+  ),
+  endDate: utcDateSchema(true).optional().describe(
+    "Only include takedowns first submitted to a provider on or before this date. A date-only value (YYYY-MM-DD) covers the whole day in UTC; pass a full timestamp for a precise cut-off"
+  ),
+  blockLabel: zod.z.string().optional().describe(
+    'Only include assets blocked with this review label, e.g. "Brand Impersonation", "Employee Impersonation" or "Targeting Org Users"'
+  ),
+  brandType: zod.z.nativeEnum(BrandType).optional().describe("Only include assets belonging to brands of this type"),
+  countryCodes: zod.z.array(zod.z.string().length(2)).optional().describe("Only include assets scanned from these ISO 3166-1 alpha-2 countries"),
+  brandIds: zod.z.array(zod.z.number().int().positive()).optional().describe("Only include assets belonging to these brands")
+});
+zod.z.object({
+  byAssetType: zod.z.array(
+    zod.z.object({
+      assetType: zod.z.nativeEnum(AssetType).describe("Asset type the takedowns were filed against"),
+      submitted: zod.z.number().describe("Takedowns whose first submission to a provider fell in the range"),
+      completed: zod.z.number().describe("Of those, how many ended in a takedown"),
+      stillOpen: zod.z.number().describe("Of those, how many have not yet reached an outcome"),
+      successRate: zod.z.number().describe("completed / submitted, 0-1. Still-open takedowns count against it"),
+      resolvedSuccessRate: zod.z.number().nullable().describe(
+        "completed / (submitted - stillOpen), 0-1, or null when nothing has resolved yet. Higher than successRate whenever work is still outstanding"
+      )
+    })
+  ).describe(
+    "Takedown success rate, one entry per asset type, descending by number submitted"
+  )
+});
+zod.z.object({
+  slug: zod.z.string().min(1).describe("Organization slug"),
+  startDate: utcDateSchema(false).optional().describe(
     "Only include takedowns completed on or after this date. A date-only value (YYYY-MM-DD) starts at midnight UTC"
   ),
-  endDate: utcDateSchema2(true).optional().describe(
+  endDate: utcDateSchema(true).optional().describe(
     "Only include takedowns completed on or before this date. A date-only value (YYYY-MM-DD) covers the whole day in UTC; pass a full timestamp for a precise cut-off"
   ),
   blockLabel: zod.z.string().optional().describe(
@@ -11602,6 +11813,46 @@ zod.z.object({
     "Median time from takedown start to completion, one entry per asset type, ascending by median"
   )
 });
+var TakedownProviderRoleSchema = zod.z.enum([
+  "HOSTING_PROVIDER",
+  "DOMAIN_REGISTRAR",
+  "TLD_REGISTRAR"
+]);
+zod.z.object({
+  slug: zod.z.string().min(1).describe("Organization slug"),
+  startDate: utcDateSchema(false).optional().describe(
+    "Only include takedowns completed on or after this date. A date-only value (YYYY-MM-DD) starts at midnight UTC"
+  ),
+  endDate: utcDateSchema(true).optional().describe(
+    "Only include takedowns completed on or before this date. A date-only value (YYYY-MM-DD) covers the whole day in UTC; pass a full timestamp for a precise cut-off"
+  ),
+  roles: zod.z.array(TakedownProviderRoleSchema).optional().describe(
+    "Only break down these provider roles. Omit for every role. A takedown filed against both a host and a registrar is counted once under each"
+  ),
+  blockLabel: zod.z.string().optional().describe(
+    'Only include assets blocked with this review label, e.g. "Brand Impersonation", "Employee Impersonation" or "Targeting Org Users"'
+  ),
+  brandType: zod.z.nativeEnum(BrandType).optional().describe("Only include assets belonging to brands of this type"),
+  countryCodes: zod.z.array(zod.z.string().length(2)).optional().describe("Only include assets scanned from these ISO 3166-1 alpha-2 countries"),
+  brandIds: zod.z.array(zod.z.number().int().positive()).optional().describe("Only include assets belonging to these brands")
+});
+zod.z.object({
+  byProvider: zod.z.array(
+    zod.z.object({
+      providerId: zod.z.number().describe("Takedown provider id"),
+      providerName: zod.z.string().describe("Takedown provider name"),
+      role: TakedownProviderRoleSchema.describe(
+        "Which provider slot of the takedown this median is computed over"
+      ),
+      medianTakedownMinutes: zod.z.number(),
+      medianTakedownHours: zod.z.number(),
+      medianTakedownDays: zod.z.number(),
+      count: zod.z.number().describe("Number of completed takedowns behind the median")
+    })
+  ).describe(
+    "Median time from takedown start to completion, one entry per provider and role, ascending by median"
+  )
+});
 zod.z.object({
   slug: zod.z.string().min(1).describe("Organization slug"),
   months: zod.z.number().int().min(2).max(36).default(12).describe("Size of the trailing window in whole months, including the current month"),
@@ -11857,6 +12108,13 @@ zod.z.object({
   brands: zod.z.array(brandItemSchema).describe("List of brands")
 }).describe("Successful operation");
 var FILTERABLE_SUBSCRIPTION_STATUSES = [
+  SubscriptionStatus.PROSPECT,
+  SubscriptionStatus.POC,
+  SubscriptionStatus.ACTIVE,
+  SubscriptionStatus.INTEGRATION,
+  SubscriptionStatus.INACTIVE
+];
+[
   SubscriptionStatus.PROSPECT,
   SubscriptionStatus.POC,
   SubscriptionStatus.ACTIVE,
@@ -11891,7 +12149,9 @@ var userOrgsPendingServiceApprovalFilterSchema = zod.z.object({
 }).optional();
 zod.z.object({
   query: zod.z.string().default(""),
-  subscriptionStatus: zod.z.array(UserOrgsSubscriptionStatusSchema).min(1).optional(),
+  subscriptionStatus: zod.z.array(UserOrgsSubscriptionStatusSchema).min(1).optional().describe(
+    "Statuses to include. Defaults to the live set (PROSPECT/POC/ACTIVE/INTEGRATION); pass INACTIVE explicitly to see churned organizations."
+  ),
   services: userOrgsServicesFilterObjectSchema.optional(),
   obligatoryAdminApproval: userOrgsObligatoryAdminApprovalFilterSchema,
   pendingServiceApproval: userOrgsPendingServiceApprovalFilterSchema
@@ -12072,7 +12332,7 @@ zod.z.object({
     "Shortcut for 'every org the caller is authorized to read'. Reuses the same filter logic as `/user/orgs`: org-scoped API keys are rejected (they're pinned to one org \u2014 use the default form); user API keys / Bearer sessions resolve to the user's memberships (or every active org for staff). Combine with `subscriptionStatus` and `services` to narrow (e.g. only paying customers with takedowns enabled). The resolved org set is still capped at " + String(ORGANIZATION_METRICS_MAX_SLUGS) + " and a 413 is returned if exceeded. Mutually exclusive with `organizationSlug`, `slugs`, and `brandSlug`."
   ),
   subscriptionStatus: zod.z.array(UserOrgsSubscriptionStatusSchema).min(1).optional().describe(
-    "Only meaningful with `allMyOrgs: true`. Defaults to the same set `/user/orgs` uses (ACTIVE/POC/PROSPECT/INTEGRATION \u2014 INACTIVE is always excluded)."
+    "Only meaningful with `allMyOrgs: true`. Defaults to the same set `/user/orgs` uses (ACTIVE/POC/PROSPECT/INTEGRATION); pass INACTIVE explicitly to include churned organizations."
   ),
   services: organizationMetricsServicesFilterSchema.describe(
     "Only meaningful with `allMyOrgs: true`. Same shape as `/user/orgs`'s `services` filter \u2014 every service accepts `{ active }`, and **only `takedowns` additionally accepts `automated`** (the one service where manual-vs-automated changes real platform behavior). E.g. `{ takedowns: { active: true, automated: false } }` for 'orgs with takedowns enabled but automation off'."
@@ -12199,8 +12459,10 @@ var reportCreateInputSchema = zod.z.object({
   ).optional().refine((value) => !value || !isPhoneNumberMissingCountryCode(value), {
     message: PHONE_COUNTRY_CODE_ERROR_MESSAGE
   }),
-  /** Optional list of URLs for images to be attached to the report. */
-  attachmentUrls: zod.z.array(zod.z.string().url()).optional().describe("URLs of images to attach to the report"),
+  /** Optional list of URLs for files to be attached to the report as evidence. */
+  attachmentUrls: zod.z.array(zod.z.string().url()).optional().describe(
+    "URLs of files to attach to the report as evidence. Any file type, not only images: .eml/.msg messages, PDFs, and documents are all supported. Upload a file to POST /attachment/upload to get a URL, or pass a publicly reachable URL you host yourself."
+  ),
   /** Optional link to the external submission (e.g. Telegram message link) */
   externalSubmissionLink: zod.z.string().url().optional().describe("Link to the external submission (e.g. Telegram message link)"),
   /** Optional user agent string from the reporter's browser */
@@ -12368,6 +12630,38 @@ for parsing the dates.`
     path: ["startDate"]
   }
 );
+var TakedownProofType = {
+  ProviderEmail: "provider-email"
+};
+var takedownProofEmailSchema = zod.z.object({
+  text: zod.z.string().describe(
+    "The provider's reply, verbatim. Plain-text body where the provider sent one, otherwise the raw HTML body \u2014 treat it as untrusted content and escape it before rendering."
+  ),
+  subject: zod.z.string().nullable().describe("Subject line of the provider's reply.")
+}).nullable().describe(
+  "Present when `type` is `provider-email`, `null` for every other proof type."
+);
+var takedownProofSchema = zod.z.object({
+  type: zod.z.nativeEnum(TakedownProofType).describe(
+    "Which kind of evidence this is. Currently only `provider-email`. New types may be added over time \u2014 read `type` before reading any of the type-specific objects below, and treat an unrecognised value as an opaque proof rather than an error."
+  ),
+  source: zod.z.string().nullable().describe(
+    "Who confirmed the takedown, in whatever form that provider identifies itself \u2014 an address such as `abuse@example.com` for `provider-email`."
+  ),
+  confirmedAt: zod.z.date().describe("When the provider confirmed the takedown."),
+  email: takedownProofEmailSchema
+});
+var takedownProofsSchema = zod.z.array(takedownProofSchema).describe(
+  `Evidence that this takedown is ours: providers confirming they removed the asset, newest first.
+
+A takedown filed at several providers can be confirmed by more than one of them, so this is a list. At most 5 are returned per takedown.
+
+\`type\`, \`source\` and \`confirmedAt\` are present on every entry, so a caller that only needs to show "confirmed by X on date Y" never has to branch on the type. The type-specific object (\`email\`, and others as they are added) carries the underlying evidence.
+
+Empty unless the takedown is COMPLETED and we hold a confirmation \u2014 which is the common case, because most providers either never reply or reply without confirming they acted. An empty list is not evidence that the asset is still up.
+
+Requires the \`takedown-proof-api\` feature flag; without it this is always empty.`
+);
 var takedownItemSchema = zod.z.object({
   id: zod.z.number().describe("Takedown ID"),
   status: zod.z.nativeEnum(TakedownStatus).describe("Takedown status"),
@@ -12417,7 +12711,8 @@ var takedownItemSchema = zod.z.object({
     name: zod.z.string().describe("TLD registrar name (e.g. `Verisign`, `Public Interest Registry`)")
   }).nullable().describe(
     "Top-level-domain registrar assigned to this takedown. `null` when unresolved."
-  )
+  ),
+  proofs: takedownProofsSchema
 });
 zod.z.object({
   takedowns: zod.z.array(takedownItemSchema).describe("List of takedowns"),
@@ -12729,6 +13024,141 @@ zod.z.object({
   hiddenMetrics: zod.z.record(zod.z.string(), zod.z.boolean()).default({}),
   overriddenMetrics: zod.z.record(zod.z.string(), zod.z.boolean()).default({})
 });
+var ONE_PAGER_BUDGETS = {
+  headline: 60,
+  badge: 28,
+  frontLabel: 44,
+  paragraphsMax: 2,
+  heroPhrase: 80,
+  landscapeCaption: 180,
+  xp01Line: 220,
+  screenshotCaption: 48,
+  divergenceLine: 220
+};
+var ONE_PAGER_STORED_MAX = {
+  paragraph: 480,
+  paragraph2Lead: 60,
+  heroNarrative: 300
+};
+var onePagerFactPayloadSchema = zod.z.object({
+  /** Raw (not defanged) asset contents the prose may reference. */
+  assetContents: zod.z.array(zod.z.string()),
+  /** Every numeric token (as string) the prose is allowed to contain. */
+  numbers: zod.z.array(zod.z.string()),
+  /** ISO dates the prose may reference. */
+  dates: zod.z.array(zod.z.string()),
+  platforms: zod.z.array(zod.z.string()),
+  groupSize: zod.z.number(),
+  takedownCompletedAt: zod.z.string().nullable(),
+  activeSince: zod.z.string().nullable(),
+  // ---- v2 enrichment ----------------------------------------------------
+  // Optional rather than defaulted so rows stored by v1 keep parsing AND the
+  // inferred type stays assignable from a v1-shaped literal.
+  /** How the attacker paid for the surface ("free_subdomain" | ...). */
+  hostingPattern: zod.z.string().nullable().optional(),
+  /** Who surfaced it first ("client_reported" | "proactive"). */
+  sourceKind: zod.z.string().nullable().optional(),
+  /** Prior blocked assets in the same relaunch family. */
+  relaunchCount: zod.z.number().nullable().optional(),
+  /** Earliest sighting, ISO. */
+  firstSeenAt: zod.z.string().nullable().optional(),
+  /**
+   * Pre-computed hours from first sighting to confirmed removal, as a string
+   * so it lands in the same allowlist as `numbers`. The model is forbidden
+   * from doing arithmetic, so every duration it may cite is computed here.
+   */
+  timeToRemovalHrs: zod.z.string().nullable().optional()
+});
+var onePagerStorySchema = zod.z.object({
+  archetypeId: zod.z.string(),
+  archetypeCategory: zod.z.string(),
+  /** 1-5 = placed on the page; null = alternate available for swap. */
+  slot: zod.z.number().int().min(1).max(5).nullable(),
+  /** Column layout the story occupies; slot 1 is full-width by convention. */
+  layout: zod.z.enum(["full", "half"]).default("half"),
+  frontLabel: zod.z.string().max(ONE_PAGER_BUDGETS.frontLabel),
+  headline: zod.z.string().max(ONE_PAGER_BUDGETS.headline),
+  /** Compound "10 of 10 removed · 3 hrs". */
+  badge: zod.z.string().max(ONE_PAGER_BUDGETS.badge),
+  paragraphs: zod.z.array(zod.z.string().max(ONE_PAGER_STORED_MAX.paragraph)).min(1).max(ONE_PAGER_BUDGETS.paragraphsMax),
+  /** Bold lead-in shown ahead of the second paragraph. */
+  paragraph2Lead: zod.z.string().max(ONE_PAGER_STORED_MAX.paragraph2Lead).nullable().default(null),
+  /** Defanged, display-ready asset identifiers. */
+  assetList: zod.z.array(zod.z.string()).max(12),
+  /** Story-bank identity for the referenced assets. */
+  assetIds: zod.z.array(zod.z.number()).default([]),
+  screenshotUrls: zod.z.array(zod.z.string()),
+  selectedScreenshotUrls: zod.z.array(zod.z.string()).max(2),
+  /** Parallel to selectedScreenshotUrls. */
+  screenshotCaptions: zod.z.array(zod.z.string().max(ONE_PAGER_BUDGETS.screenshotCaption)).max(2).default([]),
+  /** Manual redact toggle, parallel to selectedScreenshotUrls. */
+  screenshotBlur: zod.z.array(zod.z.boolean()).max(2).default([]),
+  xp01Line: zod.z.string().max(ONE_PAGER_BUDGETS.xp01Line).nullable(),
+  factPayload: onePagerFactPayloadSchema,
+  proseSource: zod.z.enum(["llm", "template"]),
+  /** Cross-period continuation framing. */
+  continuation: zod.z.boolean().default(false),
+  /** Shown in the editor when this story overlaps with a prior period. */
+  priorHeadline: zod.z.string().nullable().default(null)
+});
+var onePagerLandscapeRowSchema = zod.z.object({
+  platform: zod.z.string(),
+  count: zod.z.number(),
+  sharePct: zod.z.number()
+});
+var onePagerFormDataObjectSchema = zod.z.object({
+  orgName: zod.z.string(),
+  orgSlug: zod.z.string(),
+  periodLabel: zod.z.string(),
+  partnershipLabel: zod.z.string().max(40).default("AN ONGOING PARTNERSHIP"),
+  coverageWindow: zod.z.object({ start: zod.z.string(), end: zod.z.string(), label: zod.z.string(), short: zod.z.boolean() }).nullable().default(null),
+  heroStat: zod.z.object({
+    value: zod.z.string(),
+    phrase: zod.z.string().max(ONE_PAGER_BUDGETS.heroPhrase)
+  }),
+  heroNarrative: zod.z.string().max(ONE_PAGER_STORED_MAX.heroNarrative),
+  /**
+   * Up to 4 rows, but the metric library legitimately returns fewer on a thin
+   * month (a zero-valued metric is excluded outright rather than rendered as
+   * a "0" row), so this is a range, not a fixed length. Below 2 the block
+   * reads as broken rather than short.
+   */
+  metricsRows: zod.z.array(
+    zod.z.object({
+      key: zod.z.string().default("legacy"),
+      label: zod.z.string(),
+      value: zod.z.string()
+    })
+  ).min(2).max(4),
+  landscape: zod.z.object({
+    rows: zod.z.array(onePagerLandscapeRowSchema).max(8),
+    otherCount: zod.z.number().nullable(),
+    otherPlatformsLabel: zod.z.string().nullable(),
+    /** Kept for legacy row parse; caption is preferred going forward. */
+    divergenceLine: zod.z.string().max(ONE_PAGER_BUDGETS.divergenceLine).nullable(),
+    caption: zod.z.string().max(ONE_PAGER_BUDGETS.landscapeCaption).nullable().default(null)
+  }),
+  stories: zod.z.array(onePagerStorySchema).min(1).max(6),
+  footer: zod.z.object({
+    contactName: zod.z.string(),
+    contactLine: zod.z.string(),
+    contactEmail: zod.z.string().default(""),
+    bookingLink: zod.z.string().default(""),
+    ctaLine: zod.z.string().default("Anything your community has flagged, send it over.")
+  }),
+  /** Engine v2 writes 2; absent/older rows default to 1. */
+  schemaVersion: zod.z.number().default(1)
+});
+onePagerFormDataObjectSchema.refine(
+  (data) => data.stories.some((s2) => s2.slot !== null),
+  { message: "at least one story must be placed", path: ["stories"] }
+);
+var INTERNAL_ORG_SLUGS = [
+  "chainpatrol",
+  "chainpatrol-automation",
+  "mountaintop"
+];
+new Set(INTERNAL_ORG_SLUGS);
 zod.z.object({
   x: zod.z.number().min(0).max(1),
   y: zod.z.number().min(0).max(1),
@@ -13494,20 +13924,20 @@ var convertA98ToXyz65_default = convertA98ToXyz65;
 
 // ../../node_modules/culori/src/a98/convertXyz65ToA98.js
 var gamma = (v) => Math.pow(Math.abs(v), 256 / 563) * Math.sign(v);
-var convertXyz65ToA98 = ({ x, y, z: z56, alpha }) => {
+var convertXyz65ToA98 = ({ x, y, z: z64, alpha }) => {
   if (x === void 0) x = 0;
   if (y === void 0) y = 0;
-  if (z56 === void 0) z56 = 0;
+  if (z64 === void 0) z64 = 0;
   let res = {
     mode: "a98",
     r: gamma(
-      x * 2.0415879038107465 - y * 0.5650069742788597 - 0.3447313507783297 * z56
+      x * 2.0415879038107465 - y * 0.5650069742788597 - 0.3447313507783297 * z64
     ),
     g: gamma(
-      x * -0.9692436362808798 + y * 1.8759675015077206 + 0.0415550574071756 * z56
+      x * -0.9692436362808798 + y * 1.8759675015077206 + 0.0415550574071756 * z64
     ),
     b: gamma(
-      x * 0.0134442806320312 - y * 0.1183623922310184 + 1.0151749943912058 * z56
+      x * 0.0134442806320312 - y * 0.1183623922310184 + 1.0151749943912058 * z64
     )
   };
   if (alpha !== void 0) {
@@ -13574,14 +14004,14 @@ var convertLrgbToRgb = ({ r, g, b, alpha }, mode = "rgb") => {
 var convertLrgbToRgb_default = convertLrgbToRgb;
 
 // ../../node_modules/culori/src/xyz65/convertXyz65ToRgb.js
-var convertXyz65ToRgb = ({ x, y, z: z56, alpha }) => {
+var convertXyz65ToRgb = ({ x, y, z: z64, alpha }) => {
   if (x === void 0) x = 0;
   if (y === void 0) y = 0;
-  if (z56 === void 0) z56 = 0;
+  if (z64 === void 0) z64 = 0;
   let res = convertLrgbToRgb_default({
-    r: x * 3.2409699419045226 - y * 1.537383177570094 - 0.4986107602930034 * z56,
-    g: x * -0.9692436362808796 + y * 1.8759675015077204 + 0.0415550574071756 * z56,
-    b: x * 0.0556300796969936 - y * 0.2039769588889765 + 1.0569715142428784 * z56
+    r: x * 3.2409699419045226 - y * 1.537383177570094 - 0.4986107602930034 * z64,
+    g: x * -0.9692436362808796 + y * 1.8759675015077204 + 0.0415550574071756 * z64,
+    b: x * 0.0556300796969936 - y * 0.2039769588889765 + 1.0569715142428784 * z64
   });
   if (alpha !== void 0) {
     res.alpha = alpha;
@@ -13831,13 +14261,13 @@ var convertLab65ToRgb_default = convertLab65ToRgb;
 
 // ../../node_modules/culori/src/lab65/convertXyz65ToLab65.js
 var f = (value) => value > e ? Math.cbrt(value) : (k * value + 16) / 116;
-var convertXyz65ToLab65 = ({ x, y, z: z56, alpha }) => {
+var convertXyz65ToLab65 = ({ x, y, z: z64, alpha }) => {
   if (x === void 0) x = 0;
   if (y === void 0) y = 0;
-  if (z56 === void 0) z56 = 0;
+  if (z64 === void 0) z64 = 0;
   let f0 = f(x / D65.X);
   let f1 = f(y / D65.Y);
-  let f22 = f(z56 / D65.Z);
+  let f22 = f(z64 / D65.Z);
   let res = {
     mode: "lab65",
     l: 116 * f1 - 16,
@@ -14494,10 +14924,10 @@ var convertItpToXyz65_default = convertItpToXyz65;
 
 // ../../node_modules/culori/src/itp/convertXyz65ToItp.js
 var toAbs = (c2 = 0) => Math.max(c2 * YW, 0);
-var convertXyz65ToItp = ({ x, y, z: z56, alpha }) => {
+var convertXyz65ToItp = ({ x, y, z: z64, alpha }) => {
   const absX = toAbs(x);
   const absY = toAbs(y);
-  const absZ = toAbs(z56);
+  const absZ = toAbs(z64);
   const l2 = transferPqEncode(
     0.3592832590121217 * absX + 0.6976051147779502 * absY - 0.0358915932320289 * absZ
   );
@@ -14555,15 +14985,15 @@ var jabPqEncode = (v) => {
   return Math.pow((C1 + C2 * vn3) / (1 + C3 * vn3), p);
 };
 var abs = (v = 0) => Math.max(v * 203, 0);
-var convertXyz65ToJab = ({ x, y, z: z56, alpha }) => {
+var convertXyz65ToJab = ({ x, y, z: z64, alpha }) => {
   x = abs(x);
   y = abs(y);
-  z56 = abs(z56);
-  let xp = 1.15 * x - 0.15 * z56;
+  z64 = abs(z64);
+  let xp = 1.15 * x - 0.15 * z64;
   let yp = 0.66 * y + 0.34 * x;
-  let l2 = jabPqEncode(0.41478972 * xp + 0.579999 * yp + 0.014648 * z56);
-  let m = jabPqEncode(-0.20151 * xp + 1.120649 * yp + 0.0531008 * z56);
-  let s2 = jabPqEncode(-0.0166008 * xp + 0.2648 * yp + 0.6684799 * z56);
+  let l2 = jabPqEncode(0.41478972 * xp + 0.579999 * yp + 0.014648 * z64);
+  let m = jabPqEncode(-0.20151 * xp + 1.120649 * yp + 0.0531008 * z64);
+  let s2 = jabPqEncode(-0.0166008 * xp + 0.2648 * yp + 0.6684799 * z64);
   let i = (l2 + m) / 2;
   let res = {
     mode: "jab",
@@ -14749,14 +15179,14 @@ var convertLabToXyz50 = ({ l: l2, a, b, alpha }) => {
 var convertLabToXyz50_default = convertLabToXyz50;
 
 // ../../node_modules/culori/src/xyz50/convertXyz50ToRgb.js
-var convertXyz50ToRgb = ({ x, y, z: z56, alpha }) => {
+var convertXyz50ToRgb = ({ x, y, z: z64, alpha }) => {
   if (x === void 0) x = 0;
   if (y === void 0) y = 0;
-  if (z56 === void 0) z56 = 0;
+  if (z64 === void 0) z64 = 0;
   let res = convertLrgbToRgb_default({
-    r: x * 3.1341359569958707 - y * 1.6173863321612538 - 0.4906619460083532 * z56,
-    g: x * -0.978795502912089 + y * 1.916254567259524 + 0.03344273116131949 * z56,
-    b: x * 0.07195537988411677 - y * 0.2289768264158322 + 1.405386058324125 * z56
+    r: x * 3.1341359569958707 - y * 1.6173863321612538 - 0.4906619460083532 * z64,
+    g: x * -0.978795502912089 + y * 1.916254567259524 + 0.03344273116131949 * z64,
+    b: x * 0.07195537988411677 - y * 0.2289768264158322 + 1.405386058324125 * z64
   });
   if (alpha !== void 0) {
     res.alpha = alpha;
@@ -14787,13 +15217,13 @@ var convertRgbToXyz50_default = convertRgbToXyz50;
 
 // ../../node_modules/culori/src/lab/convertXyz50ToLab.js
 var f2 = (value) => value > e3 ? Math.cbrt(value) : (k3 * value + 16) / 116;
-var convertXyz50ToLab = ({ x, y, z: z56, alpha }) => {
+var convertXyz50ToLab = ({ x, y, z: z64, alpha }) => {
   if (x === void 0) x = 0;
   if (y === void 0) y = 0;
-  if (z56 === void 0) z56 = 0;
+  if (z64 === void 0) z64 = 0;
   let f0 = f2(x / D50.X);
   let f1 = f2(y / D50.Y);
-  let f22 = f2(z56 / D50.Z);
+  let f22 = f2(z64 / D50.Z);
   let res = {
     mode: "lab",
     l: 116 * f1 - 16,
@@ -15028,18 +15458,18 @@ var convertLchuvToLuv = ({ l: l2, c: c2, h, alpha }) => {
 var convertLchuvToLuv_default = convertLchuvToLuv;
 
 // ../../node_modules/culori/src/luv/convertXyz50ToLuv.js
-var u_fn = (x, y, z56) => 4 * x / (x + 15 * y + 3 * z56);
-var v_fn = (x, y, z56) => 9 * y / (x + 15 * y + 3 * z56);
+var u_fn = (x, y, z64) => 4 * x / (x + 15 * y + 3 * z64);
+var v_fn = (x, y, z64) => 9 * y / (x + 15 * y + 3 * z64);
 var un = u_fn(D50.X, D50.Y, D50.Z);
 var vn = v_fn(D50.X, D50.Y, D50.Z);
 var l_fn = (value) => value <= e3 ? k3 * value : 116 * Math.cbrt(value) - 16;
-var convertXyz50ToLuv = ({ x, y, z: z56, alpha }) => {
+var convertXyz50ToLuv = ({ x, y, z: z64, alpha }) => {
   if (x === void 0) x = 0;
   if (y === void 0) y = 0;
-  if (z56 === void 0) z56 = 0;
+  if (z64 === void 0) z64 = 0;
   let l2 = l_fn(y / D50.Y);
-  let u = u_fn(x, y, z56);
-  let v = v_fn(x, y, z56);
+  let u = u_fn(x, y, z64);
+  let v = v_fn(x, y, z64);
   if (!isFinite(u) || !isFinite(v)) {
     l2 = u = v = 0;
   } else {
@@ -15060,8 +15490,8 @@ var convertXyz50ToLuv = ({ x, y, z: z56, alpha }) => {
 var convertXyz50ToLuv_default = convertXyz50ToLuv;
 
 // ../../node_modules/culori/src/luv/convertLuvToXyz50.js
-var u_fn2 = (x, y, z56) => 4 * x / (x + 15 * y + 3 * z56);
-var v_fn2 = (x, y, z56) => 9 * y / (x + 15 * y + 3 * z56);
+var u_fn2 = (x, y, z64) => 4 * x / (x + 15 * y + 3 * z64);
+var v_fn2 = (x, y, z64) => 9 * y / (x + 15 * y + 3 * z64);
 var un2 = u_fn2(D50.X, D50.Y, D50.Z);
 var vn2 = v_fn2(D50.X, D50.Y, D50.Z);
 var convertLuvToXyz50 = ({ l: l2, u, v, alpha }) => {
@@ -15075,8 +15505,8 @@ var convertLuvToXyz50 = ({ l: l2, u, v, alpha }) => {
   let vp = v / (13 * l2) + vn2;
   let y = D50.Y * (l2 <= 8 ? l2 / k3 : Math.pow((l2 + 16) / 116, 3));
   let x = y * (9 * up) / (4 * vp);
-  let z56 = y * (12 - 3 * up - 20 * vp) / (4 * vp);
-  let res = { mode: "xyz50", x, y, z: z56 };
+  let z64 = y * (12 - 3 * up - 20 * vp) / (4 * vp);
+  let res = { mode: "xyz50", x, y, z: z64 };
   if (alpha !== void 0) {
     res.alpha = alpha;
   }
@@ -15693,15 +16123,15 @@ var convertP3ToXyz65 = (rgb2) => {
 var convertP3ToXyz65_default = convertP3ToXyz65;
 
 // ../../node_modules/culori/src/p3/convertXyz65ToP3.js
-var convertXyz65ToP3 = ({ x, y, z: z56, alpha }) => {
+var convertXyz65ToP3 = ({ x, y, z: z64, alpha }) => {
   if (x === void 0) x = 0;
   if (y === void 0) y = 0;
-  if (z56 === void 0) z56 = 0;
+  if (z64 === void 0) z64 = 0;
   let res = convertLrgbToRgb_default(
     {
-      r: x * 2.4934969119414263 - y * 0.9313836179191242 - 0.402710784450717 * z56,
-      g: x * -0.8294889695615749 + y * 1.7626640603183465 + 0.0236246858419436 * z56,
-      b: x * 0.0358458302437845 - y * 0.0761723892680418 + 0.9568845240076871 * z56
+      r: x * 2.4934969119414263 - y * 0.9313836179191242 - 0.402710784450717 * z64,
+      g: x * -0.8294889695615749 + y * 1.7626640603183465 + 0.0236246858419436 * z64,
+      b: x * 0.0358458302437845 - y * 0.0761723892680418 + 0.9568845240076871 * z64
     },
     "p3"
   );
@@ -15736,19 +16166,19 @@ var gamma2 = (v) => {
   }
   return 16 * v;
 };
-var convertXyz50ToProphoto = ({ x, y, z: z56, alpha }) => {
+var convertXyz50ToProphoto = ({ x, y, z: z64, alpha }) => {
   if (x === void 0) x = 0;
   if (y === void 0) y = 0;
-  if (z56 === void 0) z56 = 0;
+  if (z64 === void 0) z64 = 0;
   let res = {
     mode: "prophoto",
     r: gamma2(
-      x * 1.3457868816471585 - y * 0.2555720873797946 - 0.0511018649755453 * z56
+      x * 1.3457868816471585 - y * 0.2555720873797946 - 0.0511018649755453 * z64
     ),
     g: gamma2(
-      x * -0.5446307051249019 + y * 1.5082477428451466 + 0.0205274474364214 * z56
+      x * -0.5446307051249019 + y * 1.5082477428451466 + 0.0205274474364214 * z64
     ),
-    b: gamma2(x * 0 + y * 0 + 1.2119675456389452 * z56)
+    b: gamma2(x * 0 + y * 0 + 1.2119675456389452 * z64)
   };
   if (alpha !== void 0) {
     res.alpha = alpha;
@@ -15808,20 +16238,20 @@ var gamma3 = (v) => {
   }
   return 4.5 * v;
 };
-var convertXyz65ToRec2020 = ({ x, y, z: z56, alpha }) => {
+var convertXyz65ToRec2020 = ({ x, y, z: z64, alpha }) => {
   if (x === void 0) x = 0;
   if (y === void 0) y = 0;
-  if (z56 === void 0) z56 = 0;
+  if (z64 === void 0) z64 = 0;
   let res = {
     mode: "rec2020",
     r: gamma3(
-      x * 1.7166511879712683 - y * 0.3556707837763925 - 0.2533662813736599 * z56
+      x * 1.7166511879712683 - y * 0.3556707837763925 - 0.2533662813736599 * z64
     ),
     g: gamma3(
-      x * -0.6666843518324893 + y * 1.6164812366349395 + 0.0157685458139111 * z56
+      x * -0.6666843518324893 + y * 1.6164812366349395 + 0.0157685458139111 * z64
     ),
     b: gamma3(
-      x * 0.0176398574453108 - y * 0.0427706132578085 + 0.9421031212354739 * z56
+      x * 0.0176398574453108 - y * 0.0427706132578085 + 0.9421031212354739 * z64
     )
   };
   if (alpha !== void 0) {
@@ -15974,15 +16404,15 @@ var definition_default26 = definition26;
 
 // ../../node_modules/culori/src/xyz65/convertXyz65ToXyz50.js
 var convertXyz65ToXyz50 = (xyz652) => {
-  let { x, y, z: z56, alpha } = xyz652;
+  let { x, y, z: z64, alpha } = xyz652;
   if (x === void 0) x = 0;
   if (y === void 0) y = 0;
-  if (z56 === void 0) z56 = 0;
+  if (z64 === void 0) z64 = 0;
   let res = {
     mode: "xyz50",
-    x: 1.0479298208405488 * x + 0.0229467933410191 * y - 0.0501922295431356 * z56,
-    y: 0.0296278156881593 * x + 0.990434484573249 * y - 0.0170738250293851 * z56,
-    z: -0.0092430581525912 * x + 0.0150551448965779 * y + 0.7518742899580008 * z56
+    x: 1.0479298208405488 * x + 0.0229467933410191 * y - 0.0501922295431356 * z64,
+    y: 0.0296278156881593 * x + 0.990434484573249 * y - 0.0170738250293851 * z64,
+    z: -0.0092430581525912 * x + 0.0150551448965779 * y + 0.7518742899580008 * z64
   };
   if (alpha !== void 0) {
     res.alpha = alpha;
@@ -15993,15 +16423,15 @@ var convertXyz65ToXyz50_default = convertXyz65ToXyz50;
 
 // ../../node_modules/culori/src/xyz65/convertXyz50ToXyz65.js
 var convertXyz50ToXyz65 = (xyz502) => {
-  let { x, y, z: z56, alpha } = xyz502;
+  let { x, y, z: z64, alpha } = xyz502;
   if (x === void 0) x = 0;
   if (y === void 0) y = 0;
-  if (z56 === void 0) z56 = 0;
+  if (z64 === void 0) z64 = 0;
   let res = {
     mode: "xyz65",
-    x: 0.9554734527042182 * x - 0.0230985368742614 * y + 0.0632593086610217 * z56,
-    y: -0.0283697069632081 * x + 1.0099954580058226 * y + 0.021041398966943 * z56,
-    z: 0.0123140016883199 * x - 0.0205076964334779 * y + 1.3303659366080753 * z56
+    x: 0.9554734527042182 * x - 0.0230985368742614 * y + 0.0632593086610217 * z64,
+    y: -0.0283697069632081 * x + 1.0099954580058226 * y + 0.021041398966943 * z64,
+    z: 0.0123140016883199 * x - 0.0205076964334779 * y + 1.3303659366080753 * z64
   };
   if (alpha !== void 0) {
     res.alpha = alpha;
@@ -16238,6 +16668,13 @@ function validateTermsString(termsString) {
         };
       }
     } else {
+      if (term.startsWith("*") || term.endsWith("*")) {
+        const inner = term.replace(/^\*+|\*+$/g, "");
+        return {
+          valid: false,
+          error: `Term "${term}" has an unmatched asterisk. Use *${inner}* for exact matching, or ${inner} for loose matching.`
+        };
+      }
       normalizedTerm = term.replace(/\s+/g, "");
       if (normalizedTerm.length < 6) {
         return {
@@ -16835,6 +17272,8 @@ var SCAN_TEMPLATES = [
 new Map(
   SCAN_TEMPLATES.map((template) => [template.id, template])
 );
+var DARK_WEB_ENTITY_SEARCH_KINDS = ["domain", "email", "crypto"];
+zod.z.enum(DARK_WEB_ENTITY_SEARCH_KINDS);
 
 // src/client.ts
 function trimTrailingSlashes(url) {