@cross-deck/node 1.9.1 → 1.10.1

package/dist/index.cjs

@@ -387,7 +387,7 @@ function byteLength(s) {
 var https = __toESM(require("https"));
 
 // src/_version.ts
-var SDK_VERSION = "1.9.1";
+var SDK_VERSION = "1.10.1";
 var SDK_NAME = "@cross-deck/node";
 
 // src/_diagnostic-telemetry.ts
@@ -3149,6 +3149,184 @@ var CrossdeckServer = class extends import_node_events.EventEmitter {
     this.populateEntitlementCache({ customerId }, response);
     return response;
   }
+  // ── Blocking — "entitlements, inverted" (Crossdeck Trust, v2 preview) ───────
+  //
+  // getEntitlements() answers "can they access Pro?"; resolve() answers "should
+  // they be here at all?". Same call, opposite question. Both read Crossdeck live.
+  // The safety inversion: entitlements fail CLOSED (protect revenue); blocking
+  // fails OPEN (protect real users) — these methods NEVER throw for the verdict
+  // and NEVER return blocked:true on uncertainty.
+  /**
+   * Resolve a user's BLOCK verdict (plus identity / entitlement context) — the same
+   * `/v1/resolve` you'd call for entitlements, read for `blocked`. Wire it into signup
+   * and every visit; on `blocked`, sign the user out (and, for public content, take
+   * their pages offline — see the Blocking developer guide, Pattern B).
+   *
+   * **Fail-open is the contract.** This never throws for the block decision and never
+   * returns `blocked: true` on uncertainty. Any error — Crossdeck unreachable, timeout,
+   * unresolved identity — yields `{ blocked: false, degraded: true }`, so a glitch can
+   * never lock out a real user.
+   *
+   * Forward the END USER's `ip` (you call this server-to-server, so otherwise Crossdeck
+   * sees your server's IP and an ip-rule can't match the visitor), and the verified
+   * identity (`userId` + `idToken`) so a `domain`/`email` rule can match the email.
+   *
+   * @experimental Preview — Crossdeck Trust ships with Crossdeck v2. Stable shape, not yet GA.
+   */
+  async resolve(input, options) {
+    const failOpen = () => ({
+      blocked: false,
+      blockReason: null,
+      blockedKey: null,
+      degraded: true,
+      status: "anonymous",
+      entitlements: [],
+      crossdeckCustomerId: null,
+      anonymousId: input?.anonymousId ?? null,
+      identityError: null
+    });
+    if (!input || !input.anonymousId && !input.userId) {
+      this.debug.emit(
+        "sdk.resolve_missing_identity",
+        "resolve() needs an anonymousId or a userId; returning fail-open blocked:false."
+      );
+      return failOpen();
+    }
+    try {
+      const raw = await this.http.request("POST", "/resolve", {
+        body: {
+          ...input.userId ? { userId: input.userId } : {},
+          ...input.idToken ? { idToken: input.idToken } : {},
+          ...input.anonymousId ? { anonymousId: input.anonymousId } : {},
+          ...input.ip ? { ip: input.ip } : {}
+        },
+        signal: options?.signal,
+        timeoutMs: options?.timeoutMs
+      });
+      return {
+        blocked: raw.blocked === true,
+        blockReason: raw.blockReason ?? null,
+        blockedKey: raw.blockedKey ?? null,
+        status: typeof raw.status === "string" ? raw.status : "active",
+        entitlements: Array.isArray(raw.entitlements) ? raw.entitlements.filter((e) => typeof e === "string") : [],
+        crossdeckCustomerId: raw.crossdeckCustomerId ?? raw.user?.id ?? null,
+        anonymousId: raw.anonymousId ?? input.anonymousId ?? null,
+        identityError: raw.identityError ?? null
+      };
+    } catch (err) {
+      this.debug.emit(
+        "sdk.resolve_failed",
+        `resolve() failed \u2014 fail-open blocked:false. ${err instanceof Error ? err.message : String(err)}`,
+        { error: err instanceof Error ? err.message : String(err) }
+      );
+      return failOpen();
+    }
+  }
+  /**
+   * Convenience over {@link resolve}: just the boolean. Fail-open (false on any error).
+   *
+   * @experimental Preview — see {@link resolve}.
+   */
+  async isBlocked(input, options) {
+    return (await this.resolve(input, options)).blocked;
+  }
+  /**
+   * The OWNER's block verdict for the public-page path (Pattern B / §5b of the Blocking
+   * developer guide) — "is the owner of this page blocked?", no session token required.
+   * Pass the owner's recorded identifiers (`userId`/`email`/`domain`/`ip`; the `ip` is
+   * their CREATION ip, not a live visitor's). Poll on a short TTL to invalidate your
+   * public-page cache. Fail-open — any error → `{ blocked: false, degraded: true }`.
+   *
+   * @experimental Preview — see {@link resolve}.
+   */
+  async getOwnerStatus(input, options) {
+    const query = {
+      userId: input?.userId || void 0,
+      email: input?.email || void 0,
+      domain: input?.domain || void 0,
+      ip: input?.ip || void 0
+    };
+    if (!query.userId && !query.email && !query.domain && !query.ip) {
+      this.debug.emit(
+        "sdk.owner_status_missing_identity",
+        "getOwnerStatus() needs at least one of userId/email/domain/ip; returning fail-open blocked:false."
+      );
+      return { blocked: false, blockReason: null, blockedKey: null, degraded: true };
+    }
+    try {
+      const raw = await this.http.request("GET", "/trust/status", {
+        query,
+        signal: options?.signal,
+        timeoutMs: options?.timeoutMs
+      });
+      return {
+        blocked: raw.blocked === true,
+        blockReason: raw.blockReason ?? null,
+        blockedKey: raw.blockedKey ?? null
+      };
+    } catch (err) {
+      this.debug.emit(
+        "sdk.owner_status_failed",
+        `getOwnerStatus() failed \u2014 fail-open blocked:false. ${err instanceof Error ? err.message : String(err)}`,
+        { error: err instanceof Error ? err.message : String(err) }
+      );
+      return { blocked: false, blockReason: null, blockedKey: null, degraded: true };
+    }
+  }
+  /**
+   * The brand-new-signup door (§3 of the Blocking developer guide). Block a user Crossdeck
+   * has **never seen** — at the instant they sign up — by the two strings you have then:
+   * their `email` and `ip`. There's no identity to ride yet, so {@link resolve} can't catch
+   * them; this matches `email` / domain / `ip` blocklist rules directly. Call it BEFORE you
+   * create the account; on `action: "block"`, reject the signup.
+   *
+   * **Fail-open by contract** — never throws, never blocks on uncertainty: any error →
+   * `{ action: "allow", allow: true, degraded: true }`, so a glitch can't reject a real signup.
+   *
+   * @experimental Preview — Crossdeck Trust ships with Crossdeck v2.
+   */
+  async gate(input, options) {
+    const failOpen = () => ({
+      action: "allow",
+      allow: true,
+      blockReason: null,
+      blockedKey: null,
+      degraded: true
+    });
+    if (!input || !input.email && !input.ip && !input.domain) {
+      this.debug.emit(
+        "sdk.gate_missing_input",
+        "gate() needs at least one of email / ip / domain; returning fail-open allow:true."
+      );
+      return failOpen();
+    }
+    try {
+      const raw = await this.http.request("POST", "/trust/gate", {
+        body: {
+          ...input.email ? { email: input.email } : {},
+          ...input.ip ? { ip: input.ip } : {},
+          ...input.domain ? { domain: input.domain } : {},
+          ...input.fingerprint ? { fingerprint: input.fingerprint } : {}
+        },
+        signal: options?.signal,
+        timeoutMs: options?.timeoutMs
+      });
+      const action = raw.action === "block" || raw.action === "review" ? raw.action : "allow";
+      return {
+        action,
+        allow: raw.allow !== false && action !== "block",
+        blockReason: raw.blockReason ?? null,
+        blockedKey: raw.blockedKey ?? null
+      };
+    } catch (err) {
+      this.debug.emit(
+        "sdk.gate_failed",
+        `gate() failed \u2014 fail-open allow:true. ${err instanceof Error ? err.message : String(err)}`,
+        { error: err instanceof Error ? err.message : String(err) }
+      );
+      return failOpen();
+    }
+  }
   /**
    * Synchronous entitlement check. Returns `true` iff the customer
    * has the entitlement AND the cache entry is fresh (within
@@ -4596,8 +4774,8 @@ function normaliseSecrets(input) {
 }
 
 // src/_contracts-bundled.ts
-var BUNDLED_IN = "@cross-deck/node@1.8.2";
-var SDK_VERSION2 = "1.8.2";
+var BUNDLED_IN = "@cross-deck/node@1.10.1";
+var SDK_VERSION2 = "1.10.1";
 var BUNDLED_CONTRACTS = Object.freeze([
   {
     "id": "contract-failed-payload-schema-lock",
@@ -4719,7 +4897,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
       "legal/security/index.html#diagnostic",
       "legal/sdk-data/index.html#b-diagnostic"
     ],
-    "bundledIn": "@cross-deck/node@1.8.2"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "documentation-honesty",
@@ -4751,7 +4929,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 7.1",
-    "bundledIn": "@cross-deck/node@1.8.2"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "error-envelope-shape",
@@ -4790,7 +4968,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 8 (codifies existing contract)",
-    "bundledIn": "@cross-deck/node@1.8.2"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "flush-interval-parity",
@@ -4835,7 +5013,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.3",
-    "bundledIn": "@cross-deck/node@1.8.2"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "idempotency-key-deterministic",
@@ -4940,7 +5118,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 2.2.a + 2.2.b + 2.2.c",
-    "bundledIn": "@cross-deck/node@1.8.2"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "invalid-input-rejected-natively",
@@ -4996,7 +5174,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-06-11",
     "firstRegisteredIn": "swift trap-on-input class fix \u2014 first machine-tested Swift release",
-    "bundledIn": "@cross-deck/node@1.8.2"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "node-pii-scrubber",
@@ -5035,7 +5213,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.1",
-    "bundledIn": "@cross-deck/node@1.8.2"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "node-shutdown-awaits-flush",
@@ -5068,7 +5246,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 5.4",
-    "bundledIn": "@cross-deck/node@1.8.2"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "sdk-error-codes-catalogue",
@@ -5113,7 +5291,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 6.2",
-    "bundledIn": "@cross-deck/node@1.8.2"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "sync-purchases-funnel-parity",
@@ -5146,7 +5324,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 3.5",
-    "bundledIn": "@cross-deck/node@1.8.2"
+    "bundledIn": "@cross-deck/node@1.10.1"
   },
   {
     "id": "verifier-timestamp-mandatory",
@@ -5200,7 +5378,7 @@ var BUNDLED_CONTRACTS = Object.freeze([
     ],
     "registeredAt": "2026-05-26",
     "firstRegisteredIn": "bank-grade reconciliation v1.4.0 \u2014 phase 7.2",
-    "bundledIn": "@cross-deck/node@1.8.2"
+    "bundledIn": "@cross-deck/node@1.10.1"
   }
 ]);