@cross-deck/node 1.10.1 → 1.11.0

package/CHANGELOG.md

@@ -6,6 +6,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.11.0] — 2026-06-30
+
+**Added — block `reference` and `supportEmail` on the trust surface (still v2 preview).**
+`resolve()` and `gate()` now surface two fields on a block:
+
+- `reference` — a short, opaque, human-quotable support handle (the "Ray ID", `xxxx-xxxx`).
+  Show it on your suspended screen; Crossdeck stores the same string on the block event, so
+  support resolves a quoted reference to the exact block in the admin Caught feed.
+- `supportEmail` — the email you registered with Crossdeck at signup, so your suspended
+  screen's "Contact support" reaches the real operator by default instead of a placeholder.
+
+Both were typed on `ResolveResult` / `GateVerdict` but the client previously **dropped**
+them when building the result object — now passed through. Additive, non-breaking. Opaque +
+non-PII (never the score or rule logic).
+
 ## [1.10.1] — 2026-06-30
 
 **Fixed — the blocking surface now works for the documented paths (still v2 preview).**

package/dist/auto-events/index.d.mts

@@ -1,4 +1,4 @@
-import { x as CrossdeckServer } from '../crossdeck-server-BpBVFC4O.mjs';
+import { x as CrossdeckServer } from '../crossdeck-server-DAQX_7rm.mjs';
 import 'node:events';
 
 /**

package/dist/auto-events/index.d.ts

@@ -1,4 +1,4 @@
-import { x as CrossdeckServer } from '../crossdeck-server-BpBVFC4O.js';
+import { x as CrossdeckServer } from '../crossdeck-server-DAQX_7rm.js';
 import 'node:events';
 
 /**

package/dist/{crossdeck-server-BpBVFC4O.d.mts → crossdeck-server-DAQX_7rm.d.mts}

@@ -183,8 +183,8 @@ declare const CrossdeckContracts: {
     readonly byId: (id: string) => Contract | undefined;
     readonly byPillar: (pillar: ContractPillar) => readonly Contract[];
     readonly withStatus: (status: ContractStatus) => readonly Contract[];
-    readonly sdkVersion: "1.10.1";
-    readonly bundledIn: "@cross-deck/node@1.10.1";
+    readonly sdkVersion: "1.11.0";
+    readonly bundledIn: "@cross-deck/node@1.11.0";
     /**
      * Resolve a failing test back to the contract it exercises.
      * Used by test-framework hooks to find the contract id of a
@@ -472,6 +472,18 @@ interface BlockVerdict {
     blockReason: string | null;
     /** The exact rule that fired: `"domain:spartan.net"` | `"ip:1.2.3.4"` | `"manual"` | null. */
     blockedKey: string | null;
+    /**
+     * Human-quotable support handle for this verdict (the "Ray ID"), formatted `xxxx-xxxx`.
+     * Show it on your suspended screen ("reference: blocklist:domain · a1f9-7c2e"); Crossdeck
+     * stores the same string on the block event, so support resolves it in the Caught feed.
+     */
+    reference?: string | null;
+    /**
+     * The recorded support contact (the project owner's signup email), present only when
+     * blocked — render it as the suspended screen's "Contact support" so appeals reach the
+     * real operator by default. Override with a dedicated address if you have one.
+     */
+    supportEmail?: string | null;
     /**
      * True when this is the fail-open default (Crossdeck unreachable / identity unresolved).
      * `blocked` is `false`; log it for observability, never treat it as a real "not blocked".
@@ -546,6 +558,10 @@ interface GateVerdict {
     blockReason: string | null;
     /** The exact rule/key that fired, when blocked. */
     blockedKey: string | null;
+    /** Human-quotable support handle (the "Ray ID"), formatted `xxxx-xxxx` — show it on the blocked screen. */
+    reference?: string | null;
+    /** Recorded support contact (project owner's signup email), present only on `block` — the blocked screen's "Contact support" default. */
+    supportEmail?: string | null;
     /** True when this is the fail-open default (Crossdeck unreachable). `allow` is `true`. */
     degraded?: boolean;
 }

package/dist/{crossdeck-server-BpBVFC4O.d.ts → crossdeck-server-DAQX_7rm.d.ts}

@@ -183,8 +183,8 @@ declare const CrossdeckContracts: {
     readonly byId: (id: string) => Contract | undefined;
     readonly byPillar: (pillar: ContractPillar) => readonly Contract[];
     readonly withStatus: (status: ContractStatus) => readonly Contract[];
-    readonly sdkVersion: "1.10.1";
-    readonly bundledIn: "@cross-deck/node@1.10.1";
+    readonly sdkVersion: "1.11.0";
+    readonly bundledIn: "@cross-deck/node@1.11.0";
     /**
      * Resolve a failing test back to the contract it exercises.
      * Used by test-framework hooks to find the contract id of a
@@ -472,6 +472,18 @@ interface BlockVerdict {
     blockReason: string | null;
     /** The exact rule that fired: `"domain:spartan.net"` | `"ip:1.2.3.4"` | `"manual"` | null. */
     blockedKey: string | null;
+    /**
+     * Human-quotable support handle for this verdict (the "Ray ID"), formatted `xxxx-xxxx`.
+     * Show it on your suspended screen ("reference: blocklist:domain · a1f9-7c2e"); Crossdeck
+     * stores the same string on the block event, so support resolves it in the Caught feed.
+     */
+    reference?: string | null;
+    /**
+     * The recorded support contact (the project owner's signup email), present only when
+     * blocked — render it as the suspended screen's "Contact support" so appeals reach the
+     * real operator by default. Override with a dedicated address if you have one.
+     */
+    supportEmail?: string | null;
     /**
      * True when this is the fail-open default (Crossdeck unreachable / identity unresolved).
      * `blocked` is `false`; log it for observability, never treat it as a real "not blocked".
@@ -546,6 +558,10 @@ interface GateVerdict {
     blockReason: string | null;
     /** The exact rule/key that fired, when blocked. */
     blockedKey: string | null;
+    /** Human-quotable support handle (the "Ray ID"), formatted `xxxx-xxxx` — show it on the blocked screen. */
+    reference?: string | null;
+    /** Recorded support contact (project owner's signup email), present only on `block` — the blocked screen's "Contact support" default. */
+    supportEmail?: string | null;
     /** True when this is the fail-open default (Crossdeck unreachable). `allow` is `true`. */
     degraded?: boolean;
 }

package/dist/index.cjs

@@ -387,7 +387,7 @@ function byteLength(s) {
 var https = __toESM(require("https"));
 
 // src/_version.ts
-var SDK_VERSION = "1.10.1";
+var SDK_VERSION = "1.11.0";
 var SDK_NAME = "@cross-deck/node";
 
 // src/_diagnostic-telemetry.ts
@@ -3207,6 +3207,8 @@ var CrossdeckServer = class extends import_node_events.EventEmitter {
         blocked: raw.blocked === true,
         blockReason: raw.blockReason ?? null,
         blockedKey: raw.blockedKey ?? null,
+        reference: raw.reference ?? null,
+        supportEmail: raw.supportEmail ?? null,
         status: typeof raw.status === "string" ? raw.status : "active",
         entitlements: Array.isArray(raw.entitlements) ? raw.entitlements.filter((e) => typeof e === "string") : [],
         crossdeckCustomerId: raw.crossdeckCustomerId ?? raw.user?.id ?? null,
@@ -3316,7 +3318,9 @@ var CrossdeckServer = class extends import_node_events.EventEmitter {
         action,
         allow: raw.allow !== false && action !== "block",
         blockReason: raw.blockReason ?? null,
-        blockedKey: raw.blockedKey ?? null
+        blockedKey: raw.blockedKey ?? null,
+        reference: raw.reference ?? null,
+        supportEmail: raw.supportEmail ?? null
       };
     } catch (err) {
       this.debug.emit(
@@ -4774,8 +4778,8 @@ function normaliseSecrets(input) {
 }
 
 // src/_contracts-bundled.ts
-var BUNDLED_IN = "@cross-deck/node@1.10.1";
-var SDK_VERSION2 = "1.10.1";
+var BUNDLED_IN = "@cross-deck/node@1.11.0";
+var SDK_VERSION2 = "1.11.0";
 var BUNDLED_CONTRACTS = Object.freeze([
   {
     "id": "contract-failed-payload-schema-lock",
@@ -4897,7 +4901,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
       "legal/security/index.html#diagnostic",
       "legal/sdk-data/index.html#b-diagnostic"
     ],
-    "bundledIn": "@cross-deck/node@1.10.1"
+    "bundledIn": "@cross-deck/node@1.11.0"
   },
   {
     "id": "documentation-honesty",
@@ -4929,7 +4933,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 7.1",
-    "bundledIn": "@cross-deck/node@1.10.1"
+    "bundledIn": "@cross-deck/node@1.11.0"
   },
   {
     "id": "error-envelope-shape",
@@ -4968,7 +4972,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 8 (codifies existing contract)",
-    "bundledIn": "@cross-deck/node@1.10.1"
+    "bundledIn": "@cross-deck/node@1.11.0"
   },
   {
     "id": "flush-interval-parity",
@@ -5013,7 +5017,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.3",
-    "bundledIn": "@cross-deck/node@1.10.1"
+    "bundledIn": "@cross-deck/node@1.11.0"
   },
   {
     "id": "idempotency-key-deterministic",
@@ -5118,7 +5122,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 2.2.a + 2.2.b + 2.2.c",
-    "bundledIn": "@cross-deck/node@1.10.1"
+    "bundledIn": "@cross-deck/node@1.11.0"
   },
   {
     "id": "invalid-input-rejected-natively",
@@ -5174,7 +5178,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-06-11",
     "firstRegisteredIn": "swift trap-on-input class fix \u2014 first machine-tested Swift release",
-    "bundledIn": "@cross-deck/node@1.10.1"
+    "bundledIn": "@cross-deck/node@1.11.0"
   },
   {
     "id": "node-pii-scrubber",
@@ -5213,7 +5217,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.1",
-    "bundledIn": "@cross-deck/node@1.10.1"
+    "bundledIn": "@cross-deck/node@1.11.0"
   },
   {
     "id": "node-shutdown-awaits-flush",
@@ -5246,7 +5250,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 5.4",
-    "bundledIn": "@cross-deck/node@1.10.1"
+    "bundledIn": "@cross-deck/node@1.11.0"
   },
   {
     "id": "sdk-error-codes-catalogue",
@@ -5291,7 +5295,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 6.2",
-    "bundledIn": "@cross-deck/node@1.10.1"
+    "bundledIn": "@cross-deck/node@1.11.0"
   },
   {
     "id": "sync-purchases-funnel-parity",
@@ -5324,7 +5328,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.5",
-    "bundledIn": "@cross-deck/node@1.10.1"
+    "bundledIn": "@cross-deck/node@1.11.0"
   },
   {
     "id": "verifier-timestamp-mandatory",
@@ -5378,7 +5382,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 7.2",
-    "bundledIn": "@cross-deck/node@1.10.1"
+    "bundledIn": "@cross-deck/node@1.11.0"
   }
 ]);