@extenshi/mcp 0.7.0 → 0.9.0

package/dist/landing-workflow.js

@@ -0,0 +1,80 @@
+/**
+ * Body of the free `generate_landing_page` MCP tool.
+ *
+ * Pure function of its arguments — no API key, no network, no credits — so it
+ * is registered under the `docs` capability and works on both the local stdio
+ * server and the hosted connector. The HTML comes from ./landing-page.ts, a
+ * synced copy of shared-types/landing-page.ts: the page an agent generates here
+ * is byte-for-byte what the cabinet Page generator downloads for the same form.
+ *
+ * Extenshi does not host the page. The returned `nextSteps` describe hosting it
+ * on any HTTPS origin and registering the URL with `upsert_hosted_page`, which
+ * is what feeds HOMEPAGE_URL in the generated integration config.
+ */
+import { buildLandingPage, DEFAULT_LANDING_FORM, landingFormToInput, landingPageWarnings, } from './landing-page.js';
+export function landingFormFromArgs(args) {
+    const form = {
+        ...DEFAULT_LANDING_FORM,
+        extensionName: args.extensionName,
+        tagline: args.tagline ?? '',
+        description: args.description ?? '',
+        accentColor: args.accentColor ?? DEFAULT_LANDING_FORM.accentColor,
+        theme: args.theme ?? DEFAULT_LANDING_FORM.theme,
+        chromeUrl: args.chromeUrl ?? '',
+        firefoxUrl: args.firefoxUrl ?? '',
+        edgeUrl: args.edgeUrl ?? '',
+        privacyPolicyUrl: args.privacyPolicyUrl ?? '',
+        supportUrl: args.supportUrl ?? '',
+        features: (args.features ?? []).map((f) => ({ title: f.title, description: f.description ?? '' })),
+    };
+    if (args.homepageUrl)
+        form.homepageUrl = args.homepageUrl;
+    if (args.logoUrl)
+        form.logoUrl = args.logoUrl;
+    if (args.logoSvg)
+        form.logoSvg = args.logoSvg;
+    if (args.screenshots?.length) {
+        form.screenshots = args.screenshots.map((s) => ({ url: s.url, alt: s.alt ?? '' }));
+    }
+    return form;
+}
+export function landingNextSteps(homepageUrl) {
+    return [
+        'Save `html` verbatim as index.html. Put any relative screenshot or logo paths next to it at the same relative locations.',
+        'Host the file on a public HTTPS origin — for example GitHub Pages (commit index.html to the repository, then Settings → Pages → deploy from the branch and folder), Cloudflare Pages, Netlify or any static host. The page has no JavaScript, so it needs no build step or CSP changes.',
+        homepageUrl
+            ? `Confirm the page loads at ${homepageUrl} (the canonical/og:url tags already point there).`
+            : 'Once the final URL is known, regenerate with homepageUrl set to it so the canonical, og:url and JSON-LD url tags are filled in, and re-upload.',
+        'Register the URL on the project: upsert_hosted_page {projectId, kind: "homepage", url} (needs identity and hosted.write; the server fetches the public page and hashes it, so it has to be publicly reachable). CLI equivalent: npx @extenshi/cli@latest page register --project <id> --url <https-url>.',
+        'Re-read get_project_state and write integration.file verbatim to integration.path — the regenerated config carries the new HOMEPAGE_URL.',
+        'After later edits to the hosted page, verify_hosted_artifact {projectId, kind: "homepage"} reports whether the live page still matches the registered hash.',
+    ];
+}
+export function renderGenerateLandingPage(args) {
+    const input = landingFormToInput(landingFormFromArgs(args));
+    const html = buildLandingPage(input);
+    return {
+        html,
+        bytes: new TextEncoder().encode(html).length,
+        warnings: landingPageWarnings(input),
+        nextSteps: landingNextSteps(/^https:\/\/\S+$/i.test(input.homepageUrl ?? '') ? input.homepageUrl : undefined),
+    };
+}
+/** Follow-ups after publish_landing_page, from the fields the BFF returned. */
+export function hostedLandingNextSteps(result) {
+    const homepage = (result.homepage ?? {});
+    const steps = [
+        `The page is live at ${String(result.url)}; the same URL keeps serving every later version.`,
+        homepage.registered
+            ? 'It is now the project homepage. Re-read get_project_state and write integration.file verbatim to integration.path so HOMEPAGE_URL uses it.'
+            : 'The homepage registration was left unchanged (registerAsHomepage: false).',
+        'verify_hosted_artifact {projectId, kind: "homepage"} confirms the public URL serves the published bytes (the hash is contentHash).',
+    ];
+    if (homepage.previousUrl)
+        steps.push(`This replaced the previously registered homepage ${homepage.previousUrl}.`);
+    const warnings = Array.isArray(result.warnings) ? result.warnings : [];
+    if (warnings.length)
+        steps.push('Review warnings: those values were clamped or dropped in the rendered page.');
+    return steps;
+}
+//# sourceMappingURL=landing-workflow.js.map

package/dist/landing-workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"landing-workflow.js","sourceRoot":"","sources":["../src/landing-workflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACN,gBAAgB,EAChB,oBAAoB,EAGpB,kBAAkB,EAClB,mBAAmB,GACnB,MAAM,mBAAmB,CAAA;AA2B1B,MAAM,UAAU,mBAAmB,CAAC,IAAqB;IACxD,MAAM,IAAI,GAAgB;QACzB,GAAG,oBAAoB;QACvB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;QAC3B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;QACnC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC,WAAW;QACjE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,oBAAoB,CAAC,KAAK;QAC/C,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;QAC/B,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;QAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,EAAE;QAC7C,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;QACjC,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC;KAClG,CAAA;IACD,IAAI,IAAI,CAAC,WAAW;QAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;IACzD,IAAI,IAAI,CAAC,OAAO;QAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC7C,IAAI,IAAI,CAAC,OAAO;QAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC7C,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;IACtG,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAAoB;IACpD,OAAO;QACN,0HAA0H;QAC1H,yRAAyR;QACzR,WAAW;YACV,CAAC,CAAC,6BAA6B,WAAW,mDAAmD;YAC7F,CAAC,CAAC,gJAAgJ;QACnJ,0SAA0S;QAC1S,0IAA0I;QAC1I,6JAA6J;KAC7J,CAAA;AACF,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAqB;IAC9D,MAAM,KAAK,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3D,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO;QACN,IAAI;QACJ,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;QAC5C,QAAQ,EAAE,mBAAmB,CAAC,KAAK,CAAC;QACpC,SAAS,EAAE,gBAAgB,CAC1B,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAChF;KACD,CAAA;AACF,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,MAA+B;IACrE,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAA0D,CAAA;IACjG,MAAM,KAAK,GAAG;QACb,uBAAuB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,mDAAmD;QAC5F,QAAQ,CAAC,UAAU;YAClB,CAAC,CAAC,4IAA4I;YAC9I,CAAC,CAAC,2EAA2E;QAC9E,oIAAoI;KACpI,CAAA;IACD,IAAI,QAAQ,CAAC,WAAW;QACvB,KAAK,CAAC,IAAI,CAAC,oDAAoD,QAAQ,CAAC,WAAW,GAAG,CAAC,CAAA;IACxF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;IACtE,IAAI,QAAQ,CAAC,MAAM;QAClB,KAAK,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAA;IAC1F,OAAO,KAAK,CAAA;AACb,CAAC"}

package/dist/localize-workflow.d.ts

@@ -1,3 +1,8 @@
-/** Static, keyless guidance; translation and filesystem changes belong to the caller's local agent. */
+/**
+ * Static reference for the free `localize_workflow` MCP tool: the local
+ * localization process, the translation-bundle file format and the release
+ * checks. Written as documentation a developer can read on its own — it
+ * describes the process and its constraints, it does not address the reader.
+ */
 export declare function renderLocalizeWorkflow(): string;
 //# sourceMappingURL=localize-workflow.d.ts.map

package/dist/localize-workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"localize-workflow.d.ts","sourceRoot":"","sources":["../src/localize-workflow.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,wBAAgB,sBAAsB,IAAI,MAAM,CAoF/C"}
+{"version":3,"file":"localize-workflow.d.ts","sourceRoot":"","sources":["../src/localize-workflow.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAiG/C"}

package/dist/localize-workflow.js

@@ -1,35 +1,45 @@
-/** Static, keyless guidance; translation and filesystem changes belong to the caller's local agent. */
+/**
+ * Static reference for the free `localize_workflow` MCP tool: the local
+ * localization process, the translation-bundle file format and the release
+ * checks. Written as documentation a developer can read on its own — it
+ * describes the process and its constraints, it does not address the reader.
+ */
 export function renderLocalizeWorkflow() {
-    return `# Local extension localization
+    return `# Local extension localization — reference
 
-This workflow is free of Extenshi credits and requires no API key. The MCP tool returns
-static instructions. Your coding agent translates using its own provider and tokens;
-the CLI prepares and validates local files offline after installation.
+Cost and access: free. No Extenshi credits and no API key. Translation happens with
+whichever translation provider the developer already uses; the Extenshi CLI prepares
+and validates the local files offline.
 
 ## Availability
 
-First run \`extenshi localize --help\` with the CLI installed in your environment.
-Use a release that includes localize. A merged change is not proof that npm latest
-contains it. When working from the Extenshi repository, build the CLI with
-\`yarn workspace @extenshi/cli build\` and replace \`extenshi\` below with
-\`node tools/extenshi-cli/dist/cli.js\` (from the repository root).
+The \`localize\` command ships in recent \`@extenshi/cli\` releases; \`extenshi localize --help\`
+shows whether the installed version includes it. A merged change is not the same as an
+npm release — the npm \`latest\` tag is the reference for what is installable. Inside the
+Extenshi repository the CLI is built with \`yarn workspace @extenshi/cli build\` and run as
+\`node tools/extenshi-cli/dist/cli.js\` from the repository root in place of \`extenshi\`.
 
-## Prepare
+## Scope
 
-Start from manifest.json with default_locale and
-_locales/<default_locale>/messages.json. This workflow handles these messages,
-including manifest name/description references. Full store descriptions and arbitrary
-hardcoded UI strings need their own extraction and review.
+Input: \`manifest.json\` with \`default_locale\`, plus \`_locales/<default_locale>/messages.json\`.
+Covered: those messages, including the manifest name/description references.
+Not covered: full store descriptions and hardcoded UI strings — they need separate
+extraction and review.
+
+## Step 1 — Prepare
 
 \`\`\`bash
 extenshi localize prepare ./extension --lang fr,de,es --output ./localization --protect MyBrand
 \`\`\`
 
-The output localization-request.json contains missing, stale or untracked messages, grouped by
-locale. Use a fresh output directory on each run; prepare refuses to overwrite its request.
-When localization.json supplies targetLocales, --lang is optional. Its protectedTerms
-are combined with --protect. Keep the version, sourceLocale, locale keys and sourceHashes unchanged. Each
-locale has this structure (the hash shown is illustrative; retain the actual prepared hash):
+Output: \`localization-request.json\`, listing missing, stale or untracked messages grouped
+by locale. Each run needs a fresh output directory; prepare does not overwrite an existing
+request. When \`localization.json\` supplies \`targetLocales\`, \`--lang\` is optional, and its
+\`protectedTerms\` are combined with \`--protect\`.
+
+The fields \`version\`, \`sourceLocale\`, the locale keys and \`sourceHashes\` are part of the
+contract and stay unchanged. Per-locale structure (the hash is illustrative; the real
+prepared hash is kept):
 
 \`\`\`json
 {
@@ -44,42 +54,50 @@ locale has this structure (the hash shown is illustrative; retain the actual pre
 }
 \`\`\`
 
-## Translate and review
+## Step 2 — Translate and review
+
+Translation rules:
 
-Translate only message text into each target language. Preserve keys, placeholder
-names and definitions, positional substitutions, escaped dollar signs and protected
-terms exactly. Keep descriptions as translation context. Use the actual product for
-context; never invent features, guarantees or marketing claims. Save the edited bundle
-as ./localization/translations.json. Preserve any removeKeys array: it lists translations whose source keys were
-deleted. Review these removals together with the translated messages. A removal-only
-locale has empty messages and sourceHashes objects and still requires reviewed: true.
+- Only message text is translated into each target language.
+- Keys, placeholder names and definitions, positional substitutions, escaped dollar signs
+  and protected terms are preserved exactly.
+- Descriptions stay as translator context.
+- Copy reflects the actual product: no new features, guarantees or marketing claims.
 
-Review the translations for meaning, tone, brand spelling and truthful claims before
-applying, then add "reviewed": true inside each reviewed locale object alongside
-sourceHashes and messages. Apply requires this explicit review marker. Source hashes detect edits to the source while translation was in progress;
-if the source changed, prepare a fresh request and translate the changed entries again.
+The edited bundle is saved as \`./localization/translations.json\`. A \`removeKeys\` array, when
+present, lists translations whose source keys were deleted; it is preserved and reviewed
+together with the translated messages. A removal-only locale has empty \`messages\` and
+\`sourceHashes\` objects and still carries the review marker.
 
-## Apply and validate
+Review covers meaning, tone, brand spelling and truthful claims. Each reviewed locale object
+gets \`"reviewed": true\` next to \`sourceHashes\` and \`messages\`; apply rejects a locale without
+this marker. Source hashes detect source edits made while translation was in progress — when
+the source changed, a fresh prepare and re-translation of the changed entries is required.
+
+## Step 3 — Apply and validate
 
 \`\`\`bash
 extenshi localize apply ./extension --translations ./localization/translations.json --protect MyBrand
 extenshi localize check ./extension --protect MyBrand
 \`\`\`
 
-Apply validates the bundle before updating _locales. Keep .extenshi-localization.json
-with the project: it records source and reviewed target hashes for incremental updates. Direct target edits require re-review. Re-run
-prepare after changing source messages. Review the diff and resolve validation errors;
-do not bypass placeholder, protected-term or listing-risk failures to get a green result.
-
-## Release review gates
-
-- Run review-risk for every target locale using the exact command documented by your
-  installed CLI's help. Resolve listing risks against the real build and retain reports.
-- Have a fluent reviewer inspect the copy and any full store descriptions/screenshots.
-- Load the packaged extension under each target language. Check popup/options, long
-  strings, truncation and keyboard accessibility. For Arabic/Hebrew, inspect RTL direction,
-  layout and mixed text/numbers. A locale file or passing CLI check does not prove RTL UI support.
-- Rebuild and check every browser artifact. Publish only within the developer's authorization.
+Apply validates the bundle before it updates \`_locales\`. \`.extenshi-localization.json\` belongs
+in the project: it records source and reviewed target hashes for incremental updates. Direct
+edits to target files require re-review, and changed source messages require a new prepare.
+Validation errors (placeholders, protected terms, listing risks) are resolved in the copy;
+they are not bypassed to reach a passing result.
+
+## Release checks
+
+- \`review-risk\` runs for every target locale (exact syntax: the installed CLI's help); listing
+  risks are resolved against the real build and the reports are kept.
+- A fluent reviewer inspects the copy, full store descriptions and screenshots.
+- The packaged extension is loaded under each target language: popup/options, long strings,
+  truncation and keyboard accessibility. Arabic/Hebrew additionally need RTL direction,
+  layout and mixed text/number checks — a locale file or a passing CLI check does not prove
+  RTL UI support.
+- Every browser artifact is rebuilt and checked. Publication stays within the developer's
+  authorization.
 
 Documentation: https://docs.extenshi.io/developers/localization
 `;

package/dist/localize-workflow.js.map

@@ -1 +1 @@
-{"version":3,"file":"localize-workflow.js","sourceRoot":"","sources":["../src/localize-workflow.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,MAAM,UAAU,sBAAsB;IACrC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkFP,CAAA;AACD,CAAC"}
+{"version":3,"file":"localize-workflow.js","sourceRoot":"","sources":["../src/localize-workflow.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB;IACrC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+FP,CAAA;AACD,CAAC"}

package/dist/pay.d.ts

@@ -208,7 +208,7 @@ export type PayMethod = keyof typeof paySchemas;
 export type PayBff = {
     [M in PayMethod]: (input: z.infer<(typeof paySchemas)[M]>) => Promise<unknown>;
 };
-export declare const PAY_OPERATIONS: readonly [readonly ["listPayApps", "list_pay_apps", "list", "payApp.list", false, "List your independent Pay applications. No development project required. Follow nextCursor for more results."], readonly ["createPayApp", "create_pay_app", "create", "payApp.create", true, "Create an independent Pay application; linking a development project is optional. Creates a new application on every call: do not retry blindly after a timeout."], readonly ["getPayApp", "get_pay_app", "get", "payApp.get", false, "Read your Pay application and optional project link."], readonly ["getPayReadiness", "get_pay_readiness", "readiness", "payApp.readiness", false, "Check current checkout and launch prerequisites. A passing checkout check does not prove a live external purchase or SDK publication."], readonly ["linkPayApp", "link_pay_app", "link", "payApp.link", true, "Link your Pay application to your development project. Existing purchases remain attached to the Pay application."], readonly ["unlinkPayApp", "unlink_pay_app", "unlink", "payApp.unlink", true, "Remove the optional development-project link without deleting Pay data."], readonly ["archivePayApp", "archive_pay_app", "archive", "payApp.archive", true, "Archive your application and stop new checkout. Preserve payment records and existing entitlements."], readonly ["exportPayData", "export_pay_data", "export", "payApp.export", false, "Export one page of your application data. Follow nextCursor until null for a complete export. Customer/payment data is sensitive: save only to an author-controlled destination; never paste into public issues."], readonly ["getPaySeller", "get_pay_seller", "seller", "paySeller.get", false, "Read seller connection, public profile, offers and publishable SDK key. Agreement signing and KYC require the author in the browser."], readonly ["connectPaySeller", "connect_pay_seller", "connect", "paySeller.connect", true, "Start Stripe Connect onboarding and return a browser action URL. The author must complete KYC and legal acceptance; never do these on their behalf."], readonly ["refreshPaySeller", "refresh_pay_seller", "refresh", "paySeller.refreshStatus", true, "Refresh current payment-provider onboarding status. This does not complete KYC or accept agreements."], readonly ["setPaySellerProfile", "set_pay_seller_profile", "profile", "paySeller.setPublicProfile", true, "Save author-confirmed public seller identity, support and terms links. Never invent legal identity or terms."], readonly ["upsertPayOffer", "upsert_pay_offer", "offer-upsert", "paySeller.upsertOffer", true, "Create or update an offer by stable SKU. Price is in minor currency units. Use only the author-approved price, billing interval and features."], readonly ["archivePayOffer", "archive_pay_offer", "offer-archive", "paySeller.archiveOffer", true, "Stop offering a SKU for new checkout; preserve historical purchases."], readonly ["setPayEnabled", "set_pay_enabled", "enable", "paySeller.setEnabled", true, "Explicitly enable or disable new payments. Enabling is a live commerce change: only do so with author authorization and after checking readiness. Backend prerequisites remain enforced."], readonly ["rotatePayKey", "rotate_pay_key", "rotate-key", "paySeller.rotatePublishableKey", true, "Generate a new publishable SDK key. Prior keys remain accepted for installed extension builds; this is not secret revocation. Never retry blindly."]];
+export declare const PAY_OPERATIONS: readonly [readonly ["listPayApps", "list_pay_apps", "list", "payApp.list", false, "List your independent Pay applications. No development project required. Paginated: nextCursor is set while more results exist."], readonly ["createPayApp", "create_pay_app", "create", "payApp.create", true, "Create an independent Pay application; linking a development project is optional. Not idempotent: each call creates a new application, including a call repeated after a timeout."], readonly ["getPayApp", "get_pay_app", "get", "payApp.get", false, "Read your Pay application and optional project link."], readonly ["getPayReadiness", "get_pay_readiness", "readiness", "payApp.readiness", false, "Check current checkout and launch prerequisites. A passing checkout check does not prove a live external purchase or SDK publication."], readonly ["linkPayApp", "link_pay_app", "link", "payApp.link", true, "Link your Pay application to your development project. Existing purchases remain attached to the Pay application."], readonly ["unlinkPayApp", "unlink_pay_app", "unlink", "payApp.unlink", true, "Remove the optional development-project link without deleting Pay data."], readonly ["archivePayApp", "archive_pay_app", "archive", "payApp.archive", true, "Archive your application and stop new checkout. Payment records and existing entitlements are preserved."], readonly ["exportPayData", "export_pay_data", "export", "payApp.export", false, "Export one page of one resource (offers, payments, subscriptions, entitlements or customers). nextCursor is null on the last page. The output contains sensitive customer and payment data."], readonly ["getPaySeller", "get_pay_seller", "seller", "paySeller.get", false, "Read seller connection, public profile, offers, the publishable SDK key and the public entitlement verification key. Those two keys are the ones meant to be embedded in extension code; secret keys are not part of the response. Agreement signing and KYC take place in the browser."], readonly ["connectPaySeller", "connect_pay_seller", "connect", "paySeller.connect", true, "Start Stripe Connect onboarding and return a browser action URL. KYC and legal acceptance are completed by the author at that URL; this tool does not perform them."], readonly ["refreshPaySeller", "refresh_pay_seller", "refresh", "paySeller.refreshStatus", true, "Refresh current payment-provider onboarding status. This does not complete KYC or accept agreements."], readonly ["setPaySellerProfile", "set_pay_seller_profile", "profile", "paySeller.setPublicProfile", true, "Save the public seller profile: display name, support URL or email, and terms URL. The values are stored as provided and are publicly visible."], readonly ["upsertPayOffer", "upsert_pay_offer", "offer-upsert", "paySeller.upsertOffer", true, "Create or update an offer keyed by a stable SKU. Price is in minor currency units. Subscriptions keep the given billing interval; one-time and lifetime offers store no interval. Price and features are stored as provided."], readonly ["archivePayOffer", "archive_pay_offer", "offer-archive", "paySeller.archiveOffer", true, "Stop offering a SKU for new checkout; historical purchases are preserved."], readonly ["setPayEnabled", "set_pay_enabled", "enable", "paySeller.setEnabled", true, "Enable or disable new payments for the application; requires a connected payment provider. Enabling re-reads the seller status from the provider (charges and payouts). It does not verify the public profile, agreement or offer sync: buyers can check out only when every readiness check reported by get_pay_readiness passes. Enabling is a live commerce change."], readonly ["rotatePayKey", "rotate_pay_key", "rotate-key", "paySeller.rotatePublishableKey", true, "Generate a new publishable SDK key. Not idempotent: each call issues another key. Prior keys remain accepted for installed extension builds; this does not revoke any secret."]];
 /** The legacy seller API uses projectId as the payment namespace. Never substitute a linked project ID. */
 export declare function payWireInput(method: PayMethod, input: Record<string, unknown>): Record<string, unknown>;
 //# sourceMappingURL=pay.d.ts.map

package/dist/pay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pay.d.ts","sourceRoot":"","sources":["../src/pay.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAavB,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkDb,CAAA;AACV,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,UAAU,CAAA;AAC/C,MAAM,MAAM,MAAM,GAAG;KAAG,CAAC,IAAI,SAAS,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC;CAAE,CAAA;AACvG,eAAO,MAAM,cAAc,61GAiIjB,CAAA;AAEV,2GAA2G;AAC3G,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIvG"}
+{"version":3,"file":"pay.d.ts","sourceRoot":"","sources":["../src/pay.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAavB,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkDb,CAAA;AACV,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,UAAU,CAAA;AAC/C,MAAM,MAAM,MAAM,GAAG;KAAG,CAAC,IAAI,SAAS,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC;CAAE,CAAA;AACvG,eAAO,MAAM,cAAc,m1HAiIjB,CAAA;AAEV,2GAA2G;AAC3G,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIvG"}

package/dist/pay.js

@@ -69,7 +69,7 @@ export const PAY_OPERATIONS = [
         'list',
         'payApp.list',
         false,
-        'List your independent Pay applications. No development project required. Follow nextCursor for more results.',
+        'List your independent Pay applications. No development project required. Paginated: nextCursor is set while more results exist.',
     ],
     [
         'createPayApp',
@@ -77,7 +77,7 @@ export const PAY_OPERATIONS = [
         'create',
         'payApp.create',
         true,
-        'Create an independent Pay application; linking a development project is optional. Creates a new application on every call: do not retry blindly after a timeout.',
+        'Create an independent Pay application; linking a development project is optional. Not idempotent: each call creates a new application, including a call repeated after a timeout.',
     ],
     [
         'getPayApp',
@@ -117,7 +117,7 @@ export const PAY_OPERATIONS = [
         'archive',
         'payApp.archive',
         true,
-        'Archive your application and stop new checkout. Preserve payment records and existing entitlements.',
+        'Archive your application and stop new checkout. Payment records and existing entitlements are preserved.',
     ],
     [
         'exportPayData',
@@ -125,7 +125,7 @@ export const PAY_OPERATIONS = [
         'export',
         'payApp.export',
         false,
-        'Export one page of your application data. Follow nextCursor until null for a complete export. Customer/payment data is sensitive: save only to an author-controlled destination; never paste into public issues.',
+        'Export one page of one resource (offers, payments, subscriptions, entitlements or customers). nextCursor is null on the last page. The output contains sensitive customer and payment data.',
     ],
     [
         'getPaySeller',
@@ -133,7 +133,7 @@ export const PAY_OPERATIONS = [
         'seller',
         'paySeller.get',
         false,
-        'Read seller connection, public profile, offers and publishable SDK key. Agreement signing and KYC require the author in the browser.',
+        'Read seller connection, public profile, offers, the publishable SDK key and the public entitlement verification key. Those two keys are the ones meant to be embedded in extension code; secret keys are not part of the response. Agreement signing and KYC take place in the browser.',
     ],
     [
         'connectPaySeller',
@@ -141,7 +141,7 @@ export const PAY_OPERATIONS = [
         'connect',
         'paySeller.connect',
         true,
-        'Start Stripe Connect onboarding and return a browser action URL. The author must complete KYC and legal acceptance; never do these on their behalf.',
+        'Start Stripe Connect onboarding and return a browser action URL. KYC and legal acceptance are completed by the author at that URL; this tool does not perform them.',
     ],
     [
         'refreshPaySeller',
@@ -157,7 +157,7 @@ export const PAY_OPERATIONS = [
         'profile',
         'paySeller.setPublicProfile',
         true,
-        'Save author-confirmed public seller identity, support and terms links. Never invent legal identity or terms.',
+        'Save the public seller profile: display name, support URL or email, and terms URL. The values are stored as provided and are publicly visible.',
     ],
     [
         'upsertPayOffer',
@@ -165,7 +165,7 @@ export const PAY_OPERATIONS = [
         'offer-upsert',
         'paySeller.upsertOffer',
         true,
-        'Create or update an offer by stable SKU. Price is in minor currency units. Use only the author-approved price, billing interval and features.',
+        'Create or update an offer keyed by a stable SKU. Price is in minor currency units. Subscriptions keep the given billing interval; one-time and lifetime offers store no interval. Price and features are stored as provided.',
     ],
     [
         'archivePayOffer',
@@ -173,7 +173,7 @@ export const PAY_OPERATIONS = [
         'offer-archive',
         'paySeller.archiveOffer',
         true,
-        'Stop offering a SKU for new checkout; preserve historical purchases.',
+        'Stop offering a SKU for new checkout; historical purchases are preserved.',
     ],
     [
         'setPayEnabled',
@@ -181,7 +181,7 @@ export const PAY_OPERATIONS = [
         'enable',
         'paySeller.setEnabled',
         true,
-        'Explicitly enable or disable new payments. Enabling is a live commerce change: only do so with author authorization and after checking readiness. Backend prerequisites remain enforced.',
+        'Enable or disable new payments for the application; requires a connected payment provider. Enabling re-reads the seller status from the provider (charges and payouts). It does not verify the public profile, agreement or offer sync: buyers can check out only when every readiness check reported by get_pay_readiness passes. Enabling is a live commerce change.',
     ],
     [
         'rotatePayKey',
@@ -189,7 +189,7 @@ export const PAY_OPERATIONS = [
         'rotate-key',
         'paySeller.rotatePublishableKey',
         true,
-        'Generate a new publishable SDK key. Prior keys remain accepted for installed extension builds; this is not secret revocation. Never retry blindly.',
+        'Generate a new publishable SDK key. Not idempotent: each call issues another key. Prior keys remain accepted for installed extension builds; this does not revoke any secret.',
     ],
 ];
 /** The legacy seller API uses projectId as the payment namespace. Never substitute a linked project ID. */

package/dist/pay.js.map

@@ -1 +1 @@
-{"version":3,"file":"pay.js","sourceRoot":"","sources":["../src/pay.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;AAC3D,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAA;AAC1D,MAAM,SAAS,GAAG,CAAC;KACjB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,IAAI,CAAC;KACT,GAAG,EAAE;KACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;IACjB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IAC1B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAA;AACnE,CAAC,EAAE,sCAAsC,CAAC,CAAA;AAC3C,MAAM,CAAC,MAAM,UAAU,GAAG;IACzB,WAAW,EAAE,CAAC;SACZ,MAAM,CAAC;QACP,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KAClD,CAAC;SACD,MAAM,EAAE;IACV,YAAY,EAAE,CAAC;SACb,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;SAClG,MAAM,EAAE;IACV,SAAS,EAAE,GAAG;IACd,eAAe,EAAE,GAAG;IACpB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IACxD,YAAY,EAAE,GAAG;IACjB,aAAa,EAAE,GAAG;IAClB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC;QACzB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;QACtF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KAClD,CAAC;IACF,YAAY,EAAE,GAAG;IACjB,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC;QAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC/C,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;KAChE,CAAC;IACF,gBAAgB,EAAE,GAAG;IACrB,mBAAmB,EAAE,GAAG,CAAC,MAAM,CAAC;QAC/B,OAAO,EAAE,CAAC;aACR,MAAM,CAAC;YACP,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;YAC9C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACpE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE;SAC9B,CAAC;aACD,MAAM,EAAE;KACV,CAAC;IACF,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC;QAC1B,GAAG;QACH,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;QACtD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;QACtD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAChE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;KACvD,CAAC;IACF,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IACpC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACnD,YAAY,EAAE,GAAG;CACR,CAAA;AAGV,MAAM,CAAC,MAAM,cAAc,GAAG;IAC7B;QACC,aAAa;QACb,eAAe;QACf,MAAM;QACN,aAAa;QACb,KAAK;QACL,8GAA8G;KAC9G;IACD;QACC,cAAc;QACd,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,IAAI;QACJ,kKAAkK;KAClK;IACD;QACC,WAAW;QACX,aAAa;QACb,KAAK;QACL,YAAY;QACZ,KAAK;QACL,sDAAsD;KACtD;IACD;QACC,iBAAiB;QACjB,mBAAmB;QACnB,WAAW;QACX,kBAAkB;QAClB,KAAK;QACL,uIAAuI;KACvI;IACD;QACC,YAAY;QACZ,cAAc;QACd,MAAM;QACN,aAAa;QACb,IAAI;QACJ,mHAAmH;KACnH;IACD;QACC,cAAc;QACd,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,IAAI;QACJ,yEAAyE;KACzE;IACD;QACC,eAAe;QACf,iBAAiB;QACjB,SAAS;QACT,gBAAgB;QAChB,IAAI;QACJ,qGAAqG;KACrG;IACD;QACC,eAAe;QACf,iBAAiB;QACjB,QAAQ;QACR,eAAe;QACf,KAAK;QACL,kNAAkN;KAClN;IACD;QACC,cAAc;QACd,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,KAAK;QACL,sIAAsI;KACtI;IACD;QACC,kBAAkB;QAClB,oBAAoB;QACpB,SAAS;QACT,mBAAmB;QACnB,IAAI;QACJ,qJAAqJ;KACrJ;IACD;QACC,kBAAkB;QAClB,oBAAoB;QACpB,SAAS;QACT,yBAAyB;QACzB,IAAI;QACJ,sGAAsG;KACtG;IACD;QACC,qBAAqB;QACrB,wBAAwB;QACxB,SAAS;QACT,4BAA4B;QAC5B,IAAI;QACJ,8GAA8G;KAC9G;IACD;QACC,gBAAgB;QAChB,kBAAkB;QAClB,cAAc;QACd,uBAAuB;QACvB,IAAI;QACJ,+IAA+I;KAC/I;IACD;QACC,iBAAiB;QACjB,mBAAmB;QACnB,eAAe;QACf,wBAAwB;QACxB,IAAI;QACJ,sEAAsE;KACtE;IACD;QACC,eAAe;QACf,iBAAiB;QACjB,QAAQ;QACR,sBAAsB;QACtB,IAAI;QACJ,0LAA0L;KAC1L;IACD;QACC,cAAc;QACd,gBAAgB;QAChB,YAAY;QACZ,gCAAgC;QAChC,IAAI;QACJ,oJAAoJ;KACpJ;CACQ,CAAA;AAEV,2GAA2G;AAC3G,MAAM,UAAU,YAAY,CAAC,MAAiB,EAAE,KAA8B;IAC7E,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAA;IAC/F,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAA;IAChC,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;AACrC,CAAC"}
+{"version":3,"file":"pay.js","sourceRoot":"","sources":["../src/pay.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;AAC3D,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAA;AAC1D,MAAM,SAAS,GAAG,CAAC;KACjB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,IAAI,CAAC;KACT,GAAG,EAAE;KACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;IACjB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IAC1B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAA;AACnE,CAAC,EAAE,sCAAsC,CAAC,CAAA;AAC3C,MAAM,CAAC,MAAM,UAAU,GAAG;IACzB,WAAW,EAAE,CAAC;SACZ,MAAM,CAAC;QACP,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KAClD,CAAC;SACD,MAAM,EAAE;IACV,YAAY,EAAE,CAAC;SACb,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;SAClG,MAAM,EAAE;IACV,SAAS,EAAE,GAAG;IACd,eAAe,EAAE,GAAG;IACpB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IACxD,YAAY,EAAE,GAAG;IACjB,aAAa,EAAE,GAAG;IAClB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC;QACzB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;QACtF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KAClD,CAAC;IACF,YAAY,EAAE,GAAG;IACjB,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC;QAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC/C,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;KAChE,CAAC;IACF,gBAAgB,EAAE,GAAG;IACrB,mBAAmB,EAAE,GAAG,CAAC,MAAM,CAAC;QAC/B,OAAO,EAAE,CAAC;aACR,MAAM,CAAC;YACP,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;YAC9C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACpE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE;SAC9B,CAAC;aACD,MAAM,EAAE;KACV,CAAC;IACF,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC;QAC1B,GAAG;QACH,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;QACtD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;QACtD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAChE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;KACvD,CAAC;IACF,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IACpC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACnD,YAAY,EAAE,GAAG;CACR,CAAA;AAGV,MAAM,CAAC,MAAM,cAAc,GAAG;IAC7B;QACC,aAAa;QACb,eAAe;QACf,MAAM;QACN,aAAa;QACb,KAAK;QACL,iIAAiI;KACjI;IACD;QACC,cAAc;QACd,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,IAAI;QACJ,mLAAmL;KACnL;IACD;QACC,WAAW;QACX,aAAa;QACb,KAAK;QACL,YAAY;QACZ,KAAK;QACL,sDAAsD;KACtD;IACD;QACC,iBAAiB;QACjB,mBAAmB;QACnB,WAAW;QACX,kBAAkB;QAClB,KAAK;QACL,uIAAuI;KACvI;IACD;QACC,YAAY;QACZ,cAAc;QACd,MAAM;QACN,aAAa;QACb,IAAI;QACJ,mHAAmH;KACnH;IACD;QACC,cAAc;QACd,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,IAAI;QACJ,yEAAyE;KACzE;IACD;QACC,eAAe;QACf,iBAAiB;QACjB,SAAS;QACT,gBAAgB;QAChB,IAAI;QACJ,0GAA0G;KAC1G;IACD;QACC,eAAe;QACf,iBAAiB;QACjB,QAAQ;QACR,eAAe;QACf,KAAK;QACL,6LAA6L;KAC7L;IACD;QACC,cAAc;QACd,gBAAgB;QAChB,QAAQ;QACR,eAAe;QACf,KAAK;QACL,yRAAyR;KACzR;IACD;QACC,kBAAkB;QAClB,oBAAoB;QACpB,SAAS;QACT,mBAAmB;QACnB,IAAI;QACJ,qKAAqK;KACrK;IACD;QACC,kBAAkB;QAClB,oBAAoB;QACpB,SAAS;QACT,yBAAyB;QACzB,IAAI;QACJ,sGAAsG;KACtG;IACD;QACC,qBAAqB;QACrB,wBAAwB;QACxB,SAAS;QACT,4BAA4B;QAC5B,IAAI;QACJ,gJAAgJ;KAChJ;IACD;QACC,gBAAgB;QAChB,kBAAkB;QAClB,cAAc;QACd,uBAAuB;QACvB,IAAI;QACJ,8NAA8N;KAC9N;IACD;QACC,iBAAiB;QACjB,mBAAmB;QACnB,eAAe;QACf,wBAAwB;QACxB,IAAI;QACJ,2EAA2E;KAC3E;IACD;QACC,eAAe;QACf,iBAAiB;QACjB,QAAQ;QACR,sBAAsB;QACtB,IAAI;QACJ,wWAAwW;KACxW;IACD;QACC,cAAc;QACd,gBAAgB;QAChB,YAAY;QACZ,gCAAgC;QAChC,IAAI;QACJ,+KAA+K;KAC/K;CACQ,CAAA;AAEV,2GAA2G;AAC3G,MAAM,UAAU,YAAY,CAAC,MAAiB,EAAE,KAA8B;IAC7E,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAA;IAC/F,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAA;IAChC,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;AACrC,CAAC"}

package/dist/privacy-ai-outcome.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Agent-readable outcome for `update_privacy_policy_with_ai`.
+ *
+ * The backend always returns a proposal: an AI draft when the model ran and
+ * its draft passed the category guard, otherwise a deterministic section
+ * merge. This puts the difference first in the tool result (`aiStep` +
+ * `notice`) so an agent cannot present a merge as an AI draft.
+ *
+ * Skew-safe in both directions: a backend that returns `ai` (2026-09+) is
+ * described from it; an older backend that only returns `usedLlm` /
+ * `aiDegraded` / `keptHeadings` is described from those, and its
+ * `kind: 'ai_updated'` on a non-AI proposal is corrected to `edited`.
+ */
+export type AiStep = 'ran' | 'did_not_run' | 'discarded' | 'not_needed';
+export interface PrivacyAiUpdateView {
+    aiStep: AiStep;
+    notice: string;
+    [key: string]: unknown;
+}
+export declare function describePrivacyAiUpdate(result: unknown): PrivacyAiUpdateView;
+//# sourceMappingURL=privacy-ai-outcome.d.ts.map

package/dist/privacy-ai-outcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-ai-outcome.d.ts","sourceRoot":"","sources":["../src/privacy-ai-outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,aAAa,GAAG,WAAW,GAAG,YAAY,CAAA;AAEvE,MAAM,WAAW,mBAAmB;IACnC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACtB;AAaD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,OAAO,GAAG,mBAAmB,CA0C5E"}

package/dist/privacy-ai-outcome.js

@@ -0,0 +1,69 @@
+/**
+ * Agent-readable outcome for `update_privacy_policy_with_ai`.
+ *
+ * The backend always returns a proposal: an AI draft when the model ran and
+ * its draft passed the category guard, otherwise a deterministic section
+ * merge. This puts the difference first in the tool result (`aiStep` +
+ * `notice`) so an agent cannot present a merge as an AI draft.
+ *
+ * Skew-safe in both directions: a backend that returns `ai` (2026-09+) is
+ * described from it; an older backend that only returns `usedLlm` /
+ * `aiDegraded` / `keptHeadings` is described from those, and its
+ * `kind: 'ai_updated'` on a non-AI proposal is corrected to `edited`.
+ */
+const AI_STATUSES_NOT_RUN = new Set(['not_configured']);
+const AI_STATUSES_DISCARDED = new Set(['request_failed', 'incomplete_reply', 'rejected']);
+function asRecord(value) {
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+}
+function strings(value) {
+    return Array.isArray(value) ? value.filter((v) => typeof v === 'string') : [];
+}
+export function describePrivacyAiUpdate(result) {
+    const r = asRecord(result);
+    const ai = asRecord(r.ai);
+    const status = typeof ai.status === 'string' ? ai.status : undefined;
+    const usedLlm = ai.applied === true || (status === undefined && r.usedLlm === true);
+    const kept = strings(r.keptHeadings);
+    const conflicts = strings(r.conflictHeadings);
+    const missing = strings(r.missingCategories);
+    let aiStep;
+    if (usedLlm)
+        aiStep = 'ran';
+    else if (status === 'not_needed')
+        aiStep = 'not_needed';
+    else if (status && AI_STATUSES_NOT_RUN.has(status))
+        aiStep = 'did_not_run';
+    else if (status && AI_STATUSES_DISCARDED.has(status))
+        aiStep = 'discarded';
+    // Older backend: no `ai` field. It skipped the model silently when no key
+    // was configured, so a customized policy without usedLlm did not get an AI pass.
+    else if (r.aiDegraded === true || kept.length > 0)
+        aiStep = 'did_not_run';
+    else
+        aiStep = 'not_needed';
+    const reason = typeof ai.reason === 'string' && ai.reason ? ai.reason : undefined;
+    let reviewLine = '';
+    if (conflicts.length)
+        reviewLine += ` Sections that need a manual edit: ${conflicts.join(', ')}.`;
+    if (missing.length)
+        reviewLine += ` Required data categories not mentioned: ${missing.join(', ')}.`;
+    let notice;
+    switch (aiStep) {
+        case 'ran':
+            notice = `${reason ?? 'The proposal is an AI draft.'} Nothing is live until it is published.${reviewLine}`;
+            break;
+        case 'not_needed':
+            notice = `${reason ?? 'No AI step was needed; the proposal is the regenerated policy.'}${reviewLine}`;
+            break;
+        default:
+            notice =
+                `${reason ?? 'The AI step did not run. The proposal is the deterministic section merge, not an AI draft.'} ` +
+                    "proposedMarkdown keeps the author's sections and adds only sections new since the last generated " +
+                    `baseline; it is not AI-written.${reviewLine}`;
+    }
+    // Never let a non-AI proposal carry the AI version label into publish.
+    const kind = !usedLlm && r.kind === 'ai_updated' ? 'edited' : r.kind;
+    return { aiStep, notice, ...r, ...(kind === undefined ? {} : { kind }) };
+}
+//# sourceMappingURL=privacy-ai-outcome.js.map

package/dist/privacy-ai-outcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-ai-outcome.js","sourceRoot":"","sources":["../src/privacy-ai-outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAA;AACvD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC,CAAA;AAEzF,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC7G,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC3F,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAe;IACtD,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC1B,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACzB,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IACpE,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAA;IACnF,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAA;IAE5C,IAAI,MAAc,CAAA;IAClB,IAAI,OAAO;QAAE,MAAM,GAAG,KAAK,CAAA;SACtB,IAAI,MAAM,KAAK,YAAY;QAAE,MAAM,GAAG,YAAY,CAAA;SAClD,IAAI,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,GAAG,aAAa,CAAA;SACrE,IAAI,MAAM,IAAI,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,GAAG,WAAW,CAAA;IAC1E,0EAA0E;IAC1E,iFAAiF;SAC5E,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,GAAG,aAAa,CAAA;;QACpE,MAAM,GAAG,YAAY,CAAA;IAE1B,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IACjF,IAAI,UAAU,GAAG,EAAE,CAAA;IACnB,IAAI,SAAS,CAAC,MAAM;QAAE,UAAU,IAAI,sCAAsC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA;IACjG,IAAI,OAAO,CAAC,MAAM;QAAE,UAAU,IAAI,4CAA4C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA;IAEnG,IAAI,MAAc,CAAA;IAClB,QAAQ,MAAM,EAAE,CAAC;QAChB,KAAK,KAAK;YACT,MAAM,GAAG,GAAG,MAAM,IAAI,8BAA8B,0CAA0C,UAAU,EAAE,CAAA;YAC1G,MAAK;QACN,KAAK,YAAY;YAChB,MAAM,GAAG,GAAG,MAAM,IAAI,gEAAgE,GAAG,UAAU,EAAE,CAAA;YACrG,MAAK;QACN;YACC,MAAM;gBACL,GAAG,MAAM,IAAI,4FAA4F,GAAG;oBAC5G,mGAAmG;oBACnG,kCAAkC,UAAU,EAAE,CAAA;IACjD,CAAC;IAED,uEAAuE;IACvE,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACpE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;AACzE,CAAC"}

package/dist/scan.d.ts

@@ -41,5 +41,12 @@ export declare class ScanError extends Error {
     });
 }
 export type ScanReport = Record<string, unknown>;
+/**
+ * Why a parsed scan response is not a usable report, or null when it is. The
+ * backend has already committed the credit by the time a result arrives, so an
+ * unusable body must surface as an error naming the job — never as an empty
+ * success the caller cannot tell apart from a clean scan.
+ */
+export declare function scanReportProblem(report: unknown): string | null;
 export declare function scanArtifact(opts: ScanArtifactOptions): Promise<ScanReport>;
 //# sourceMappingURL=scan.d.ts.map

package/dist/scan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAWH,MAAM,WAAW,YAAY;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,GAAG,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,mBAAmB;IACnC,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAA;IACf,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,KAAK,IAAI,CAAA;CACtC;AAED,kFAAkF;AAClF,qBAAa,SAAU,SAAQ,KAAK;IACnC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;gBAEV,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAO;CAOvG;AAED,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEhD,wBAAsB,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,CAwDjF"}
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAWH,MAAM,WAAW,YAAY;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,GAAG,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,mBAAmB;IACnC,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAA;IACf,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,KAAK,IAAI,CAAA;CACtC;AAED,kFAAkF;AAClF,qBAAa,SAAU,SAAQ,KAAK;IACnC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;gBAEV,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAO;CAOvG;AAED,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEhD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAShE;AAaD,wBAAsB,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,CAwDjF"}

package/dist/scan.js

@@ -32,6 +32,30 @@ export class ScanError extends Error {
         this.retryAfterSec = opts.retryAfterSec;
     }
 }
+/**
+ * Why a parsed scan response is not a usable report, or null when it is. The
+ * backend has already committed the credit by the time a result arrives, so an
+ * unusable body must surface as an error naming the job — never as an empty
+ * success the caller cannot tell apart from a clean scan.
+ */
+export function scanReportProblem(report) {
+    if (!report || typeof report !== 'object' || Array.isArray(report))
+        return 'the scan returned no report object';
+    const r = report;
+    if (!Array.isArray(r.scanners)) {
+        const job = typeof r.jobId === 'string' ? ` (job ${r.jobId})` : '';
+        return `the scan result${job} has no scanner results`;
+    }
+    return null;
+}
+function assertScanReport(report) {
+    const problem = scanReportProblem(report);
+    if (problem) {
+        throw new ScanError(`Scan finished but ${problem}. If a scan credit was charged, keep the job id and re-run with ` +
+            '`npx @extenshi/cli@latest scan <artifact> --format json`, which reads the same backend.');
+    }
+    return report;
+}
 export async function scanArtifact(opts) {
     const { artifactPath, apiKey, scanUrl, extensionId, onProgress } = opts;
     if (!fs.existsSync(artifactPath)) {
@@ -78,10 +102,10 @@ export async function scanArtifact(opts) {
     }
     const contentType = response.headers.get('content-type') ?? '';
     if (contentType.includes('text/event-stream')) {
-        return await consumeSseStream(response, onProgress);
+        return assertScanReport(await consumeSseStream(response, onProgress));
     }
     // Legacy single-JSON mode (server ignored the Accept header).
-    return await parseJsonBody(response);
+    return assertScanReport(await parseJsonBody(response));
 }
 async function consumeSseStream(response, onProgress) {
     if (!response.body)