@drawbridge/drawbridge-utils 0.0.163 → 0.0.164

package/dist/connections/index.cjs

@@ -5808,6 +5808,12 @@ var publicConnectionKeys = Object.freeze([
   // excerpt, guide, and any vendor redirect copy.
   "content",
   "createdAt",
+  // THE MERCHANT'S OWN SWITCH. `enabled : false` is a connection the merchant
+  // paused — kept, configured, and not run — as distinct from a vendor the
+  // platform switched off (which the api overlays as an error). Absent means
+  // on; the dashboard renders Paused from it and the sync gates refuse a paused
+  // connection the way they refuse a missing one.
+  "enabled",
   // The connection DOCUMENT's own errors array — scope-drift entries written by
   // drawbridge-sync. NOT the manifest's error copy, which is content.errors:
   // the document is spread OVER the resolved manifest downstream, so the two

package/dist/connections/index.d.cts

@@ -7500,6 +7500,12 @@ const publicConnectionKeys = Object.freeze([
 	// excerpt, guide, and any vendor redirect copy.
 	'content',
 	'createdAt',
+	// THE MERCHANT'S OWN SWITCH. `enabled : false` is a connection the merchant
+	// paused — kept, configured, and not run — as distinct from a vendor the
+	// platform switched off (which the api overlays as an error). Absent means
+	// on; the dashboard renders Paused from it and the sync gates refuse a paused
+	// connection the way they refuse a missing one.
+	'enabled',
 	// The connection DOCUMENT's own errors array — scope-drift entries written by
 	// drawbridge-sync. NOT the manifest's error copy, which is content.errors:
 	// the document is spread OVER the resolved manifest downstream, so the two

package/dist/connections/index.d.ts

@@ -7500,6 +7500,12 @@ const publicConnectionKeys = Object.freeze([
 	// excerpt, guide, and any vendor redirect copy.
 	'content',
 	'createdAt',
+	// THE MERCHANT'S OWN SWITCH. `enabled : false` is a connection the merchant
+	// paused — kept, configured, and not run — as distinct from a vendor the
+	// platform switched off (which the api overlays as an error). Absent means
+	// on; the dashboard renders Paused from it and the sync gates refuse a paused
+	// connection the way they refuse a missing one.
+	'enabled',
 	// The connection DOCUMENT's own errors array — scope-drift entries written by
 	// drawbridge-sync. NOT the manifest's error copy, which is content.errors:
 	// the document is spread OVER the resolved manifest downstream, so the two

package/dist/connections/index.js

@@ -5732,6 +5732,12 @@ var publicConnectionKeys = Object.freeze([
   // excerpt, guide, and any vendor redirect copy.
   "content",
   "createdAt",
+  // THE MERCHANT'S OWN SWITCH. `enabled : false` is a connection the merchant
+  // paused — kept, configured, and not run — as distinct from a vendor the
+  // platform switched off (which the api overlays as an error). Absent means
+  // on; the dashboard renders Paused from it and the sync gates refuse a paused
+  // connection the way they refuse a missing one.
+  "enabled",
   // The connection DOCUMENT's own errors array — scope-drift entries written by
   // drawbridge-sync. NOT the manifest's error copy, which is content.errors:
   // the document is spread OVER the resolved manifest downstream, so the two

package/dist/notification.cjs

@@ -19,6 +19,8 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // lib/notification.js
 var notification_exports = {};
 __export(notification_exports, {
+  POINTS: () => POINTS,
+  notificationRules: () => notificationRules,
   notificationWarnings: () => notificationWarnings
 });
 module.exports = __toCommonJS(notification_exports);
@@ -49,41 +51,103 @@ var phrasesIn = (value) => {
   return PHRASES.filter((phrase) => lower.includes(phrase));
 };
 var list = (values) => values.map((value) => "\u201C" + value + "\u201D").join(", ");
-var subjectWarnings = ({ brand, subject }) => {
+var POINTS = {
+  brand: 0,
+  currency: 1,
+  emoji: 0.5,
+  length: 0.5,
+  phrase: 1,
+  punctuation: 1,
+  shouting: 1.5
+};
+var subjectRules = ({ brand, subject }) => {
   const value = String(subject || "").trim();
   if (!value) return [];
   const found = phrasesIn(value);
   const emojis = emojiCount(value);
   return [
-    value.length > SUBJECT_DISPLAY_LIMIT && "Most email apps cut the subject around " + SUBJECT_DISPLAY_LIMIT + " characters \u2014 yours is " + value.length + ".",
-    shouting(value) && "Mostly capitals reads as shouting, and filters treat it that way too.",
-    /[!?]{2,}/.test(value) && "Repeated exclamation or question marks are a common spam signal.",
-    emojis > 1 && "More than one emoji in a subject is a common spam signal.",
-    /[$£€]\s?\d/.test(value) && "A currency amount in the subject is a common spam signal.",
-    found.length > 0 && "Reads like a scam to filters and to people: " + list(found) + ".",
-    brand && !value.toLowerCase().includes(String(brand).toLowerCase()) && "Nothing here says the mail is from " + brand + " \u2014 subjects that name the sender get opened more."
-  ].filter(Boolean);
+    value.length > SUBJECT_DISPLAY_LIMIT && {
+      message: "Most email apps cut the subject around " + SUBJECT_DISPLAY_LIMIT + " characters \u2014 yours is " + value.length + ".",
+      points: POINTS.length,
+      rule: "length"
+    },
+    shouting(value) && {
+      message: "Mostly capitals reads as shouting, and filters treat it that way too.",
+      points: POINTS.shouting,
+      rule: "shouting"
+    },
+    /[!?]{2,}/.test(value) && {
+      message: "Repeated exclamation or question marks are a common spam signal.",
+      points: POINTS.punctuation,
+      rule: "punctuation"
+    },
+    emojis > 1 && {
+      message: "More than one emoji in a subject is a common spam signal.",
+      points: POINTS.emoji,
+      rule: "emoji"
+    },
+    /[$£€]\s?\d/.test(value) && {
+      message: "A currency amount in the subject is a common spam signal.",
+      points: POINTS.currency,
+      rule: "currency"
+    },
+    found.length > 0 && {
+      message: "Reads like a scam to filters and to people: " + list(found) + ".",
+      points: POINTS.phrase * found.length,
+      rule: "phrase"
+    },
+    brand && !value.toLowerCase().includes(String(brand).toLowerCase()) && {
+      message: "Nothing here says the mail is from " + brand + " \u2014 subjects that name the sender get opened more.",
+      points: POINTS.brand,
+      rule: "brand"
+    }
+  ].filter(Boolean).map((rule) => ({ ...rule, field: "subject" }));
 };
-var messageWarnings = ({ message }) => {
+var messageRules = ({ message }) => {
   const value = String(message || "").trim();
   if (!value) return [];
   const found = phrasesIn(value);
   return [
-    value.length < MESSAGE_SHORT_LIMIT && "Very short messages read as a fragment, and bulk senders send exactly this shape.",
-    shouting(value) && "Mostly capitals reads as shouting, and filters treat it that way too.",
-    /[!?]{2,}/.test(value) && "Repeated exclamation or question marks are a common spam signal.",
-    found.length > 0 && "Reads like a scam to filters and to people: " + list(found) + "."
-  ].filter(Boolean);
+    value.length < MESSAGE_SHORT_LIMIT && {
+      message: "Very short messages read as a fragment, and bulk senders send exactly this shape.",
+      points: POINTS.length,
+      rule: "length"
+    },
+    shouting(value) && {
+      message: "Mostly capitals reads as shouting, and filters treat it that way too.",
+      points: POINTS.shouting,
+      rule: "shouting"
+    },
+    /[!?]{2,}/.test(value) && {
+      message: "Repeated exclamation or question marks are a common spam signal.",
+      points: POINTS.punctuation,
+      rule: "punctuation"
+    },
+    found.length > 0 && {
+      message: "Reads like a scam to filters and to people: " + list(found) + ".",
+      points: POINTS.phrase * found.length,
+      rule: "phrase"
+    }
+  ].filter(Boolean).map((rule) => ({ ...rule, field: "message" }));
 };
-var notificationWarnings = ({
+var notificationRules = ({
   brand,
   message,
   subject
-} = {}) => ({
-  message: messageWarnings({ message }),
-  subject: subjectWarnings({ brand, subject })
-});
+} = {}) => [
+  ...subjectRules({ brand, subject }),
+  ...messageRules({ message })
+];
+var notificationWarnings = (input) => {
+  const rules = notificationRules(input);
+  return {
+    message: rules.filter((rule) => rule.field === "message").map((rule) => rule.message),
+    subject: rules.filter((rule) => rule.field === "subject").map((rule) => rule.message)
+  };
+};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  POINTS,
+  notificationRules,
   notificationWarnings
 });

package/dist/notification.d.cts

@@ -75,11 +75,42 @@ const phrasesIn = ( value ) => {
 
 const list = ( values ) => values.map( ( value ) => '“' + value + '”' ).join( ', ' );
 
+// WHAT EACH RULE IS WORTH, on SpamAssassin's scale — its own rules run 0.1 to
+// about 2.0 and five is the line most installs call spam at.
+//
+// THESE CARRY THE NUMBER. Measured 2026-09-10 through Postmark's SpamCheck:
+// stock SpamAssassin scored "Congratulations!!!" at ZERO — its rules are tuned
+// for 2005-era pharma and lottery mail and header forgery, and a two-line
+// giveaway email trips none of them. So for the copy this product sends, the
+// filter's opinion is close to noise and these rules are the actual signal.
+// A flat half-point each (the first version) left "Congratulations!!!" reading
+// as fine, which is the opposite of what a merchant needs to hear.
+//
+// Weighted by how reliably each one gets mail binned, and by how likely it is
+// to be an accident. Shouting and scam phrasing are never accidents. Repeated
+// punctuation and a currency amount are strong. Emoji and length are habits
+// worth a nudge. The brand line is advice about context rather than the
+// words — and the default copy every campaign ships with cannot name a brand
+// it does not know — so it is listed at zero and never marks a default down.
+//
+// PHRASES COUNT PER MATCH. "Congratulations, click here, limited time" is
+// three of them and reads like three of them; one sentence lists them all,
+// the points say how many. A product table, and Darren's to move.
+const POINTS = {
+	brand : 0,
+	currency : 1,
+	emoji : 0.5,
+	length : 0.5,
+	phrase : 1,
+	punctuation : 1,
+	shouting : 1.5
+};
+
 // `brand` is the organization's own name. A subject that never mentions who is
 // writing is the single most recognisable trait of the mail people delete
 // unread — and the one a merchant can fix in five seconds once it is pointed
 // out. Skipped entirely when no brand is supplied rather than guessed at.
-const subjectWarnings = ({ brand, subject }) => {
+const subjectRules = ({ brand, subject }) => {
 
 	const value = String( subject || '' ).trim();
 
@@ -89,25 +120,46 @@ const subjectWarnings = ({ brand, subject }) => {
 	const emojis = emojiCount( value );
 
 	return [
-		value.length > SUBJECT_DISPLAY_LIMIT
-			&& 'Most email apps cut the subject around ' + SUBJECT_DISPLAY_LIMIT + ' characters — yours is ' + value.length + '.',
-		shouting( value )
-			&& 'Mostly capitals reads as shouting, and filters treat it that way too.',
-		/[!?]{2,}/.test( value )
-			&& 'Repeated exclamation or question marks are a common spam signal.',
-		emojis > 1
-			&& 'More than one emoji in a subject is a common spam signal.',
-		/[$£€]\s?\d/.test( value )
-			&& 'A currency amount in the subject is a common spam signal.',
-		found.length > 0
-			&& 'Reads like a scam to filters and to people: ' + list( found ) + '.',
-		brand && ! value.toLowerCase().includes( String( brand ).toLowerCase() )
-			&& 'Nothing here says the mail is from ' + brand + ' — subjects that name the sender get opened more.'
-	].filter( Boolean );
+		value.length > SUBJECT_DISPLAY_LIMIT && {
+			message : 'Most email apps cut the subject around ' + SUBJECT_DISPLAY_LIMIT + ' characters — yours is ' + value.length + '.',
+			points : POINTS.length,
+			rule : 'length'
+		},
+		shouting( value ) && {
+			message : 'Mostly capitals reads as shouting, and filters treat it that way too.',
+			points : POINTS.shouting,
+			rule : 'shouting'
+		},
+		/[!?]{2,}/.test( value ) && {
+			message : 'Repeated exclamation or question marks are a common spam signal.',
+			points : POINTS.punctuation,
+			rule : 'punctuation'
+		},
+		emojis > 1 && {
+			message : 'More than one emoji in a subject is a common spam signal.',
+			points : POINTS.emoji,
+			rule : 'emoji'
+		},
+		/[$£€]\s?\d/.test( value ) && {
+			message : 'A currency amount in the subject is a common spam signal.',
+			points : POINTS.currency,
+			rule : 'currency'
+		},
+		found.length > 0 && {
+			message : 'Reads like a scam to filters and to people: ' + list( found ) + '.',
+			points : POINTS.phrase * found.length,
+			rule : 'phrase'
+		},
+		brand && ! value.toLowerCase().includes( String( brand ).toLowerCase() ) && {
+			message : 'Nothing here says the mail is from ' + brand + ' — subjects that name the sender get opened more.',
+			points : POINTS.brand,
+			rule : 'brand'
+		}
+	].filter( Boolean ).map( ( rule ) => ({ ...rule, field : 'subject' }) );
 
 };
 
-const messageWarnings = ({ message }) => {
+const messageRules = ({ message }) => {
 
 	const value = String( message || '' ).trim();
 
@@ -116,20 +168,38 @@ const messageWarnings = ({ message }) => {
 	const found = phrasesIn( value );
 
 	return [
-		value.length < MESSAGE_SHORT_LIMIT
-			&& 'Very short messages read as a fragment, and bulk senders send exactly this shape.',
-		shouting( value )
-			&& 'Mostly capitals reads as shouting, and filters treat it that way too.',
-		/[!?]{2,}/.test( value )
-			&& 'Repeated exclamation or question marks are a common spam signal.',
-		found.length > 0
-			&& 'Reads like a scam to filters and to people: ' + list( found ) + '.'
-	].filter( Boolean );
+		value.length < MESSAGE_SHORT_LIMIT && {
+			message : 'Very short messages read as a fragment, and bulk senders send exactly this shape.',
+			points : POINTS.length,
+			rule : 'length'
+		},
+		shouting( value ) && {
+			message : 'Mostly capitals reads as shouting, and filters treat it that way too.',
+			points : POINTS.shouting,
+			rule : 'shouting'
+		},
+		/[!?]{2,}/.test( value ) && {
+			message : 'Repeated exclamation or question marks are a common spam signal.',
+			points : POINTS.punctuation,
+			rule : 'punctuation'
+		},
+		found.length > 0 && {
+			message : 'Reads like a scam to filters and to people: ' + list( found ) + '.',
+			points : POINTS.phrase * found.length,
+			rule : 'phrase'
+		}
+	].filter( Boolean ).map( ( rule ) => ({ ...rule, field : 'message' }) );
 
 };
 
-// ONE ENTRY POINT, answering per field so each warning renders against the
-// input it is about rather than as a pile at the bottom of the form.
+// THE RULES, WITH THEIR WEIGHT: `[ { field, message, points, rule } ]`, subject
+// first. This is what the api's scorer folds into the spam score beside
+// SpamAssassin's own rules, so the sentence a merchant reads and the points
+// it cost are one object.
+//
+// The same rule tripped in both fields comes back twice, once per field, each
+// with its points. Whether that is one habit or two is the scorer's call to
+// make; here the facts are just reported.
 //
 // NO CHANNEL ARGUMENT, deliberately, and it is worth saying why since one was
 // tried twice.
@@ -150,13 +220,26 @@ const messageWarnings = ({ message }) => {
 // wording, and the segment mechanics where one emoji drops the limit from 160
 // characters to 70. Those belong with the SMS connection work rather than here,
 // and their absence is a reason to write them, not to stay quiet meanwhile.
-const notificationWarnings = ({
+const notificationRules = ({
 	brand,
 	message,
 	subject
-} = {}) => ({
-	message : messageWarnings({ message }),
-	subject : subjectWarnings({ brand, subject })
-});
+} = {}) => [
+	...subjectRules({ brand, subject }),
+	...messageRules({ message })
+];
+
+// The sentences alone, per field — what the rules looked like before they had
+// points. Kept for anything that only wants the words.
+const notificationWarnings = ( input ) => {
+
+	const rules = notificationRules( input );
+
+	return {
+		message : rules.filter( ( rule ) => rule.field === 'message' ).map( ( rule ) => rule.message ),
+		subject : rules.filter( ( rule ) => rule.field === 'subject' ).map( ( rule ) => rule.message )
+	};
+
+};
 
-export { notificationWarnings };
+export { POINTS, notificationRules, notificationWarnings };

package/dist/notification.d.ts

@@ -75,11 +75,42 @@ const phrasesIn = ( value ) => {
 
 const list = ( values ) => values.map( ( value ) => '“' + value + '”' ).join( ', ' );
 
+// WHAT EACH RULE IS WORTH, on SpamAssassin's scale — its own rules run 0.1 to
+// about 2.0 and five is the line most installs call spam at.
+//
+// THESE CARRY THE NUMBER. Measured 2026-09-10 through Postmark's SpamCheck:
+// stock SpamAssassin scored "Congratulations!!!" at ZERO — its rules are tuned
+// for 2005-era pharma and lottery mail and header forgery, and a two-line
+// giveaway email trips none of them. So for the copy this product sends, the
+// filter's opinion is close to noise and these rules are the actual signal.
+// A flat half-point each (the first version) left "Congratulations!!!" reading
+// as fine, which is the opposite of what a merchant needs to hear.
+//
+// Weighted by how reliably each one gets mail binned, and by how likely it is
+// to be an accident. Shouting and scam phrasing are never accidents. Repeated
+// punctuation and a currency amount are strong. Emoji and length are habits
+// worth a nudge. The brand line is advice about context rather than the
+// words — and the default copy every campaign ships with cannot name a brand
+// it does not know — so it is listed at zero and never marks a default down.
+//
+// PHRASES COUNT PER MATCH. "Congratulations, click here, limited time" is
+// three of them and reads like three of them; one sentence lists them all,
+// the points say how many. A product table, and Darren's to move.
+const POINTS = {
+	brand : 0,
+	currency : 1,
+	emoji : 0.5,
+	length : 0.5,
+	phrase : 1,
+	punctuation : 1,
+	shouting : 1.5
+};
+
 // `brand` is the organization's own name. A subject that never mentions who is
 // writing is the single most recognisable trait of the mail people delete
 // unread — and the one a merchant can fix in five seconds once it is pointed
 // out. Skipped entirely when no brand is supplied rather than guessed at.
-const subjectWarnings = ({ brand, subject }) => {
+const subjectRules = ({ brand, subject }) => {
 
 	const value = String( subject || '' ).trim();
 
@@ -89,25 +120,46 @@ const subjectWarnings = ({ brand, subject }) => {
 	const emojis = emojiCount( value );
 
 	return [
-		value.length > SUBJECT_DISPLAY_LIMIT
-			&& 'Most email apps cut the subject around ' + SUBJECT_DISPLAY_LIMIT + ' characters — yours is ' + value.length + '.',
-		shouting( value )
-			&& 'Mostly capitals reads as shouting, and filters treat it that way too.',
-		/[!?]{2,}/.test( value )
-			&& 'Repeated exclamation or question marks are a common spam signal.',
-		emojis > 1
-			&& 'More than one emoji in a subject is a common spam signal.',
-		/[$£€]\s?\d/.test( value )
-			&& 'A currency amount in the subject is a common spam signal.',
-		found.length > 0
-			&& 'Reads like a scam to filters and to people: ' + list( found ) + '.',
-		brand && ! value.toLowerCase().includes( String( brand ).toLowerCase() )
-			&& 'Nothing here says the mail is from ' + brand + ' — subjects that name the sender get opened more.'
-	].filter( Boolean );
+		value.length > SUBJECT_DISPLAY_LIMIT && {
+			message : 'Most email apps cut the subject around ' + SUBJECT_DISPLAY_LIMIT + ' characters — yours is ' + value.length + '.',
+			points : POINTS.length,
+			rule : 'length'
+		},
+		shouting( value ) && {
+			message : 'Mostly capitals reads as shouting, and filters treat it that way too.',
+			points : POINTS.shouting,
+			rule : 'shouting'
+		},
+		/[!?]{2,}/.test( value ) && {
+			message : 'Repeated exclamation or question marks are a common spam signal.',
+			points : POINTS.punctuation,
+			rule : 'punctuation'
+		},
+		emojis > 1 && {
+			message : 'More than one emoji in a subject is a common spam signal.',
+			points : POINTS.emoji,
+			rule : 'emoji'
+		},
+		/[$£€]\s?\d/.test( value ) && {
+			message : 'A currency amount in the subject is a common spam signal.',
+			points : POINTS.currency,
+			rule : 'currency'
+		},
+		found.length > 0 && {
+			message : 'Reads like a scam to filters and to people: ' + list( found ) + '.',
+			points : POINTS.phrase * found.length,
+			rule : 'phrase'
+		},
+		brand && ! value.toLowerCase().includes( String( brand ).toLowerCase() ) && {
+			message : 'Nothing here says the mail is from ' + brand + ' — subjects that name the sender get opened more.',
+			points : POINTS.brand,
+			rule : 'brand'
+		}
+	].filter( Boolean ).map( ( rule ) => ({ ...rule, field : 'subject' }) );
 
 };
 
-const messageWarnings = ({ message }) => {
+const messageRules = ({ message }) => {
 
 	const value = String( message || '' ).trim();
 
@@ -116,20 +168,38 @@ const messageWarnings = ({ message }) => {
 	const found = phrasesIn( value );
 
 	return [
-		value.length < MESSAGE_SHORT_LIMIT
-			&& 'Very short messages read as a fragment, and bulk senders send exactly this shape.',
-		shouting( value )
-			&& 'Mostly capitals reads as shouting, and filters treat it that way too.',
-		/[!?]{2,}/.test( value )
-			&& 'Repeated exclamation or question marks are a common spam signal.',
-		found.length > 0
-			&& 'Reads like a scam to filters and to people: ' + list( found ) + '.'
-	].filter( Boolean );
+		value.length < MESSAGE_SHORT_LIMIT && {
+			message : 'Very short messages read as a fragment, and bulk senders send exactly this shape.',
+			points : POINTS.length,
+			rule : 'length'
+		},
+		shouting( value ) && {
+			message : 'Mostly capitals reads as shouting, and filters treat it that way too.',
+			points : POINTS.shouting,
+			rule : 'shouting'
+		},
+		/[!?]{2,}/.test( value ) && {
+			message : 'Repeated exclamation or question marks are a common spam signal.',
+			points : POINTS.punctuation,
+			rule : 'punctuation'
+		},
+		found.length > 0 && {
+			message : 'Reads like a scam to filters and to people: ' + list( found ) + '.',
+			points : POINTS.phrase * found.length,
+			rule : 'phrase'
+		}
+	].filter( Boolean ).map( ( rule ) => ({ ...rule, field : 'message' }) );
 
 };
 
-// ONE ENTRY POINT, answering per field so each warning renders against the
-// input it is about rather than as a pile at the bottom of the form.
+// THE RULES, WITH THEIR WEIGHT: `[ { field, message, points, rule } ]`, subject
+// first. This is what the api's scorer folds into the spam score beside
+// SpamAssassin's own rules, so the sentence a merchant reads and the points
+// it cost are one object.
+//
+// The same rule tripped in both fields comes back twice, once per field, each
+// with its points. Whether that is one habit or two is the scorer's call to
+// make; here the facts are just reported.
 //
 // NO CHANNEL ARGUMENT, deliberately, and it is worth saying why since one was
 // tried twice.
@@ -150,13 +220,26 @@ const messageWarnings = ({ message }) => {
 // wording, and the segment mechanics where one emoji drops the limit from 160
 // characters to 70. Those belong with the SMS connection work rather than here,
 // and their absence is a reason to write them, not to stay quiet meanwhile.
-const notificationWarnings = ({
+const notificationRules = ({
 	brand,
 	message,
 	subject
-} = {}) => ({
-	message : messageWarnings({ message }),
-	subject : subjectWarnings({ brand, subject })
-});
+} = {}) => [
+	...subjectRules({ brand, subject }),
+	...messageRules({ message })
+];
+
+// The sentences alone, per field — what the rules looked like before they had
+// points. Kept for anything that only wants the words.
+const notificationWarnings = ( input ) => {
+
+	const rules = notificationRules( input );
+
+	return {
+		message : rules.filter( ( rule ) => rule.field === 'message' ).map( ( rule ) => rule.message ),
+		subject : rules.filter( ( rule ) => rule.field === 'subject' ).map( ( rule ) => rule.message )
+	};
+
+};
 
-export { notificationWarnings };
+export { POINTS, notificationRules, notificationWarnings };

package/dist/notification.js

@@ -26,40 +26,102 @@ var phrasesIn = (value) => {
   return PHRASES.filter((phrase) => lower.includes(phrase));
 };
 var list = (values) => values.map((value) => "\u201C" + value + "\u201D").join(", ");
-var subjectWarnings = ({ brand, subject }) => {
+var POINTS = {
+  brand: 0,
+  currency: 1,
+  emoji: 0.5,
+  length: 0.5,
+  phrase: 1,
+  punctuation: 1,
+  shouting: 1.5
+};
+var subjectRules = ({ brand, subject }) => {
   const value = String(subject || "").trim();
   if (!value) return [];
   const found = phrasesIn(value);
   const emojis = emojiCount(value);
   return [
-    value.length > SUBJECT_DISPLAY_LIMIT && "Most email apps cut the subject around " + SUBJECT_DISPLAY_LIMIT + " characters \u2014 yours is " + value.length + ".",
-    shouting(value) && "Mostly capitals reads as shouting, and filters treat it that way too.",
-    /[!?]{2,}/.test(value) && "Repeated exclamation or question marks are a common spam signal.",
-    emojis > 1 && "More than one emoji in a subject is a common spam signal.",
-    /[$£€]\s?\d/.test(value) && "A currency amount in the subject is a common spam signal.",
-    found.length > 0 && "Reads like a scam to filters and to people: " + list(found) + ".",
-    brand && !value.toLowerCase().includes(String(brand).toLowerCase()) && "Nothing here says the mail is from " + brand + " \u2014 subjects that name the sender get opened more."
-  ].filter(Boolean);
+    value.length > SUBJECT_DISPLAY_LIMIT && {
+      message: "Most email apps cut the subject around " + SUBJECT_DISPLAY_LIMIT + " characters \u2014 yours is " + value.length + ".",
+      points: POINTS.length,
+      rule: "length"
+    },
+    shouting(value) && {
+      message: "Mostly capitals reads as shouting, and filters treat it that way too.",
+      points: POINTS.shouting,
+      rule: "shouting"
+    },
+    /[!?]{2,}/.test(value) && {
+      message: "Repeated exclamation or question marks are a common spam signal.",
+      points: POINTS.punctuation,
+      rule: "punctuation"
+    },
+    emojis > 1 && {
+      message: "More than one emoji in a subject is a common spam signal.",
+      points: POINTS.emoji,
+      rule: "emoji"
+    },
+    /[$£€]\s?\d/.test(value) && {
+      message: "A currency amount in the subject is a common spam signal.",
+      points: POINTS.currency,
+      rule: "currency"
+    },
+    found.length > 0 && {
+      message: "Reads like a scam to filters and to people: " + list(found) + ".",
+      points: POINTS.phrase * found.length,
+      rule: "phrase"
+    },
+    brand && !value.toLowerCase().includes(String(brand).toLowerCase()) && {
+      message: "Nothing here says the mail is from " + brand + " \u2014 subjects that name the sender get opened more.",
+      points: POINTS.brand,
+      rule: "brand"
+    }
+  ].filter(Boolean).map((rule) => ({ ...rule, field: "subject" }));
 };
-var messageWarnings = ({ message }) => {
+var messageRules = ({ message }) => {
   const value = String(message || "").trim();
   if (!value) return [];
   const found = phrasesIn(value);
   return [
-    value.length < MESSAGE_SHORT_LIMIT && "Very short messages read as a fragment, and bulk senders send exactly this shape.",
-    shouting(value) && "Mostly capitals reads as shouting, and filters treat it that way too.",
-    /[!?]{2,}/.test(value) && "Repeated exclamation or question marks are a common spam signal.",
-    found.length > 0 && "Reads like a scam to filters and to people: " + list(found) + "."
-  ].filter(Boolean);
+    value.length < MESSAGE_SHORT_LIMIT && {
+      message: "Very short messages read as a fragment, and bulk senders send exactly this shape.",
+      points: POINTS.length,
+      rule: "length"
+    },
+    shouting(value) && {
+      message: "Mostly capitals reads as shouting, and filters treat it that way too.",
+      points: POINTS.shouting,
+      rule: "shouting"
+    },
+    /[!?]{2,}/.test(value) && {
+      message: "Repeated exclamation or question marks are a common spam signal.",
+      points: POINTS.punctuation,
+      rule: "punctuation"
+    },
+    found.length > 0 && {
+      message: "Reads like a scam to filters and to people: " + list(found) + ".",
+      points: POINTS.phrase * found.length,
+      rule: "phrase"
+    }
+  ].filter(Boolean).map((rule) => ({ ...rule, field: "message" }));
 };
-var notificationWarnings = ({
+var notificationRules = ({
   brand,
   message,
   subject
-} = {}) => ({
-  message: messageWarnings({ message }),
-  subject: subjectWarnings({ brand, subject })
-});
+} = {}) => [
+  ...subjectRules({ brand, subject }),
+  ...messageRules({ message })
+];
+var notificationWarnings = (input) => {
+  const rules = notificationRules(input);
+  return {
+    message: rules.filter((rule) => rule.field === "message").map((rule) => rule.message),
+    subject: rules.filter((rule) => rule.field === "subject").map((rule) => rule.message)
+  };
+};
 export {
+  POINTS,
+  notificationRules,
   notificationWarnings
 };

package/dist/providers.cjs

@@ -5653,6 +5653,12 @@ var publicConnectionKeys = Object.freeze([
   // excerpt, guide, and any vendor redirect copy.
   "content",
   "createdAt",
+  // THE MERCHANT'S OWN SWITCH. `enabled : false` is a connection the merchant
+  // paused — kept, configured, and not run — as distinct from a vendor the
+  // platform switched off (which the api overlays as an error). Absent means
+  // on; the dashboard renders Paused from it and the sync gates refuse a paused
+  // connection the way they refuse a missing one.
+  "enabled",
   // The connection DOCUMENT's own errors array — scope-drift entries written by
   // drawbridge-sync. NOT the manifest's error copy, which is content.errors:
   // the document is spread OVER the resolved manifest downstream, so the two

package/dist/providers.js

@@ -5604,6 +5604,12 @@ var publicConnectionKeys = Object.freeze([
   // excerpt, guide, and any vendor redirect copy.
   "content",
   "createdAt",
+  // THE MERCHANT'S OWN SWITCH. `enabled : false` is a connection the merchant
+  // paused — kept, configured, and not run — as distinct from a vendor the
+  // platform switched off (which the api overlays as an error). Absent means
+  // on; the dashboard renders Paused from it and the sync gates refuse a paused
+  // connection the way they refuse a missing one.
+  "enabled",
   // The connection DOCUMENT's own errors array — scope-drift entries written by
   // drawbridge-sync. NOT the manifest's error copy, which is content.errors:
   // the document is spread OVER the resolved manifest downstream, so the two

package/package.json

@@ -226,5 +226,5 @@
     "prepublishOnly": ". \"$HOME/.nvm/nvm.sh\" && nvm use && tsup && node --test"
   },
   "types": "dist/index.d.ts",
-  "version": "0.0.163"
+  "version": "0.0.164"
 }