@percher/shared 1.0.0 → 1.1.0

package/dist/billing-test-accounts.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Accounts allowed to buy a tier while that tier is closed to everyone else.
+ *
+ * Opening a tier through `POST /admin/plans/availability` emails every
+ * waitlisted address for it, so the only way to exercise a real Polar
+ * checkout in production before paid opening was to notify the waitlist.
+ * This list lets a named test account through the availability gate on
+ * `/billing/checkout`, and lets the dashboard unlock the button for it, with
+ * no change to what anyone else sees. It is read from
+ * `PERCHER_BILLING_TEST_ACCOUNTS` (comma-separated emails) by the API and the
+ * dashboard alike; the API is the enforcer, the dashboard only unlocks.
+ *
+ * Nothing else is exempted: express-request consent, product ids, quotas and
+ * the webhook path all apply to a test account exactly as to a customer.
+ */
+export declare const BILLING_TEST_ACCOUNTS_ENV = "PERCHER_BILLING_TEST_ACCOUNTS";
+/** Lower-cased, trimmed, de-duplicated; blanks and non-addresses dropped. */
+export declare function parseBillingTestAccounts(raw: string | undefined | null): ReadonlySet<string>;
+export declare function isBillingTestAccount(accounts: ReadonlySet<string> | undefined, email: string | null | undefined): boolean;
+//# sourceMappingURL=billing-test-accounts.d.ts.map

package/dist/billing-test-accounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-test-accounts.d.ts","sourceRoot":"","sources":["../src/billing-test-accounts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,eAAO,MAAM,yBAAyB,kCAAkC,CAAC;AAEzE,6EAA6E;AAC7E,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAO5F;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,EACzC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,OAAO,CAGT"}

package/dist/billing-test-accounts.js

@@ -0,0 +1,32 @@
+/**
+ * Accounts allowed to buy a tier while that tier is closed to everyone else.
+ *
+ * Opening a tier through `POST /admin/plans/availability` emails every
+ * waitlisted address for it, so the only way to exercise a real Polar
+ * checkout in production before paid opening was to notify the waitlist.
+ * This list lets a named test account through the availability gate on
+ * `/billing/checkout`, and lets the dashboard unlock the button for it, with
+ * no change to what anyone else sees. It is read from
+ * `PERCHER_BILLING_TEST_ACCOUNTS` (comma-separated emails) by the API and the
+ * dashboard alike; the API is the enforcer, the dashboard only unlocks.
+ *
+ * Nothing else is exempted: express-request consent, product ids, quotas and
+ * the webhook path all apply to a test account exactly as to a customer.
+ */
+export const BILLING_TEST_ACCOUNTS_ENV = "PERCHER_BILLING_TEST_ACCOUNTS";
+/** Lower-cased, trimmed, de-duplicated; blanks and non-addresses dropped. */
+export function parseBillingTestAccounts(raw) {
+    const out = new Set();
+    for (const part of (raw ?? "").split(",")) {
+        const email = part.trim().toLowerCase();
+        if (email.includes("@") && !email.includes(" "))
+            out.add(email);
+    }
+    return out;
+}
+export function isBillingTestAccount(accounts, email) {
+    if (!accounts || accounts.size === 0 || !email)
+        return false;
+    return accounts.has(email.trim().toLowerCase());
+}
+//# sourceMappingURL=billing-test-accounts.js.map

package/dist/billing-test-accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-test-accounts.js","sourceRoot":"","sources":["../src/billing-test-accounts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,+BAA+B,CAAC;AAEzE,6EAA6E;AAC7E,MAAM,UAAU,wBAAwB,CAAC,GAA8B;IACrE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAyC,EACzC,KAAgC;IAEhC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAC7D,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAClD,CAAC"}

package/dist/crash-prompt.d.ts

@@ -0,0 +1,8 @@
+/**
+ * A fixed request a crashed app's owner can paste into their own AI assistant.
+ * Percher does not send crash logs to an AI provider; the assistant reads them
+ * through `percher doctor`. Only the app name is interpolated, and callers pass
+ * a Percher app name, never log text.
+ */
+export declare function crashAssistantPrompt(appName: string): string;
+//# sourceMappingURL=crash-prompt.d.ts.map

package/dist/crash-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crash-prompt.d.ts","sourceRoot":"","sources":["../src/crash-prompt.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE5D"}

package/dist/crash-prompt.js

@@ -0,0 +1,10 @@
+/**
+ * A fixed request a crashed app's owner can paste into their own AI assistant.
+ * Percher does not send crash logs to an AI provider; the assistant reads them
+ * through `percher doctor`. Only the app name is interpolated, and callers pass
+ * a Percher app name, never log text.
+ */
+export function crashAssistantPrompt(appName) {
+    return `Run percher doctor for my Percher app "${appName}" in runtime mode and explain why it crashed.`;
+}
+//# sourceMappingURL=crash-prompt.js.map

package/dist/crash-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crash-prompt.js","sourceRoot":"","sources":["../src/crash-prompt.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,0CAA0C,OAAO,+CAA+C,CAAC;AAC1G,CAAC"}

package/dist/domain-name.d.ts

@@ -0,0 +1,14 @@
+/**
+ * A bare DNS hostname as Percher accepts it for custom domains: lowercase
+ * labels of 1 to 63 characters that neither start nor end with a hyphen, at
+ * least two labels, an alphabetic top-level label of two or more characters,
+ * and at most 253 characters in all. No protocol, no port, no trailing dot.
+ *
+ * One rule for the API's domain service and the worker's provision guard.
+ * The percher.toml schema (`@percher/toml`) carries the same pattern by
+ * value and lowercases before matching; it imports this one once a shared
+ * release carries it (cross-package exports move with version bumps).
+ * `packages/shared/test/domain-name.test.ts` fails if the two texts drift.
+ */
+export declare const DOMAIN_RE: RegExp;
+//# sourceMappingURL=domain-name.d.ts.map

package/dist/domain-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain-name.d.ts","sourceRoot":"","sources":["../src/domain-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,SAAS,QAA0E,CAAC"}

package/dist/domain-name.js

@@ -0,0 +1,14 @@
+/**
+ * A bare DNS hostname as Percher accepts it for custom domains: lowercase
+ * labels of 1 to 63 characters that neither start nor end with a hyphen, at
+ * least two labels, an alphabetic top-level label of two or more characters,
+ * and at most 253 characters in all. No protocol, no port, no trailing dot.
+ *
+ * One rule for the API's domain service and the worker's provision guard.
+ * The percher.toml schema (`@percher/toml`) carries the same pattern by
+ * value and lowercases before matching; it imports this one once a shared
+ * release carries it (cross-package exports move with version bumps).
+ * `packages/shared/test/domain-name.test.ts` fails if the two texts drift.
+ */
+export const DOMAIN_RE = /^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}$/;
+//# sourceMappingURL=domain-name.js.map

package/dist/domain-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain-name.js","sourceRoot":"","sources":["../src/domain-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,uEAAuE,CAAC"}

package/dist/env-mask.d.ts

@@ -0,0 +1,17 @@
+/** The mask every surface shows for a hidden environment value. */
+export declare const ENV_MASK = "\u2022\u2022\u2022\u2022";
+/**
+ * Mask an environment value for display: values of eight characters or
+ * fewer are hidden entirely, longer ones show their first four characters.
+ * One rule for the API listing, the dashboard's paste preview and the CLI,
+ * which used to disagree (the CLI returned values of eight characters or
+ * fewer unmasked; the dashboard showed two characters).
+ */
+export declare function maskEnvValue(value: string): string;
+/**
+ * True for a string shaped like `maskEnvValue`'s output. A client that
+ * re-masks what the API already masked uses this to leave the API's
+ * four-character hint intact instead of collapsing it to the bare mask.
+ */
+export declare function isMaskedEnvValue(value: string): boolean;
+//# sourceMappingURL=env-mask.d.ts.map

package/dist/env-mask.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-mask.d.ts","sourceRoot":"","sources":["../src/env-mask.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,eAAO,MAAM,QAAQ,6BAAS,CAAC;AAE/B;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGlD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEvD"}

package/dist/env-mask.js

@@ -0,0 +1,23 @@
+/** The mask every surface shows for a hidden environment value. */
+export const ENV_MASK = "••••";
+/**
+ * Mask an environment value for display: values of eight characters or
+ * fewer are hidden entirely, longer ones show their first four characters.
+ * One rule for the API listing, the dashboard's paste preview and the CLI,
+ * which used to disagree (the CLI returned values of eight characters or
+ * fewer unmasked; the dashboard showed two characters).
+ */
+export function maskEnvValue(value) {
+    if (value.length <= 8)
+        return ENV_MASK;
+    return `${value.slice(0, 4)}${ENV_MASK}`;
+}
+/**
+ * True for a string shaped like `maskEnvValue`'s output. A client that
+ * re-masks what the API already masked uses this to leave the API's
+ * four-character hint intact instead of collapsing it to the bare mask.
+ */
+export function isMaskedEnvValue(value) {
+    return /^[^•]{0,4}••••$/.test(value);
+}
+//# sourceMappingURL=env-mask.js.map

package/dist/env-mask.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-mask.js","sourceRoot":"","sources":["../src/env-mask.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE/B;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,QAAQ,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC"}

package/dist/env-name.d.ts

@@ -0,0 +1,25 @@
+/**
+ * An environment variable NAME as Percher stores and injects it: uppercase
+ * letters, digits and underscores, not starting with a digit, 1 to 256
+ * characters. The length is part of the pattern so a copy cannot carry the
+ * alphabet and forget the bound.
+ *
+ * This is the API's rule (`PUT /apps/:app/env`), so it is the contract: a
+ * client that accepts more sends a batch the API refuses whole, and one that
+ * accepts less hides a name the API would have stored.
+ *
+ * The API and the dashboard import it. `@percher/toml` (`ENV_NAME_RE`) and
+ * `@percher/client` (`KEY_PATTERN` in env-file.ts) carry the same pattern by
+ * value; they import this one once a shared release carries it (cross-package
+ * exports move with version bumps). `packages/shared/test/env-name.test.ts`
+ * fails if the texts drift.
+ *
+ * Two rules are wider on purpose and are NOT copies:
+ * - the worker's run-payload guard also admits lowercase, because the platform
+ *   injects `http_proxy`/`https_proxy`/`no_proxy` and because a name stored
+ *   before the API required uppercase must still reach its container;
+ * - `isEnvKey` in `@percher/core` validates names the API REPORTS, and the
+ *   source scanner reports references in whatever case the source wrote.
+ */
+export declare const ENV_NAME_RE: RegExp;
+//# sourceMappingURL=env-name.d.ts.map

package/dist/env-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-name.d.ts","sourceRoot":"","sources":["../src/env-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,WAAW,QAA6B,CAAC"}

package/dist/env-name.js

@@ -0,0 +1,25 @@
+/**
+ * An environment variable NAME as Percher stores and injects it: uppercase
+ * letters, digits and underscores, not starting with a digit, 1 to 256
+ * characters. The length is part of the pattern so a copy cannot carry the
+ * alphabet and forget the bound.
+ *
+ * This is the API's rule (`PUT /apps/:app/env`), so it is the contract: a
+ * client that accepts more sends a batch the API refuses whole, and one that
+ * accepts less hides a name the API would have stored.
+ *
+ * The API and the dashboard import it. `@percher/toml` (`ENV_NAME_RE`) and
+ * `@percher/client` (`KEY_PATTERN` in env-file.ts) carry the same pattern by
+ * value; they import this one once a shared release carries it (cross-package
+ * exports move with version bumps). `packages/shared/test/env-name.test.ts`
+ * fails if the texts drift.
+ *
+ * Two rules are wider on purpose and are NOT copies:
+ * - the worker's run-payload guard also admits lowercase, because the platform
+ *   injects `http_proxy`/`https_proxy`/`no_proxy` and because a name stored
+ *   before the API required uppercase must still reach its container;
+ * - `isEnvKey` in `@percher/core` validates names the API REPORTS, and the
+ *   source scanner reports references in whatever case the source wrote.
+ */
+export const ENV_NAME_RE = /^[A-Z_][A-Z0-9_]{0,255}$/;
+//# sourceMappingURL=env-name.js.map

package/dist/env-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-name.js","sourceRoot":"","sources":["../src/env-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,0BAA0B,CAAC"}

package/dist/escape-html.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Escape text for interpolation into HTML (or XML) markup: the five
+ * characters that can end a text node or an attribute value. One copy for
+ * every process; the six hand-rolled variants it replaces disagreed on
+ * whether quotes were escaped, which is the difference between a name that
+ * is safe in a text node and one that is also safe inside an attribute.
+ * Pure string work, so the barrel can carry it into browser bundles.
+ */
+export declare function escapeHtml(value: string): string;
+//# sourceMappingURL=escape-html.d.ts.map

package/dist/escape-html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"escape-html.d.ts","sourceRoot":"","sources":["../src/escape-html.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOhD"}

package/dist/escape-html.js

@@ -0,0 +1,17 @@
+/**
+ * Escape text for interpolation into HTML (or XML) markup: the five
+ * characters that can end a text node or an attribute value. One copy for
+ * every process; the six hand-rolled variants it replaces disagreed on
+ * whether quotes were escaped, which is the difference between a name that
+ * is safe in a text node and one that is also safe inside an attribute.
+ * Pure string work, so the barrel can carry it into browser bundles.
+ */
+export function escapeHtml(value) {
+    return value
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&#39;");
+}
+//# sourceMappingURL=escape-html.js.map

package/dist/escape-html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escape-html.js","sourceRoot":"","sources":["../src/escape-html.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC"}

package/dist/index.d.ts

@@ -1,6 +1,12 @@
 export { APP_NAME_RE } from "./app-name.js";
+export { BILLING_TEST_ACCOUNTS_ENV, isBillingTestAccount, parseBillingTestAccounts, } from "./billing-test-accounts.js";
 export { BRAND, ICON_COLOURS, type IconColourKey, iconColourHex } from "./brand.js";
 export { CLIENT_IP_ATTESTATION_MAX_SKEW_MS, CLIENT_IP_ATTESTATION_VERSION, CLIENT_IP_HEADER, CLIENT_IP_MAX_LENGTH, CLIENT_IP_PROOF_HEADER, type ClientIpAttestationParts, clientIpAttestationPayload, formatClientIpProof, parseClientIpProof, } from "./client-ip-attestation.js";
+export { crashAssistantPrompt } from "./crash-prompt.js";
+export { DOMAIN_RE } from "./domain-name.js";
+export { ENV_MASK, isMaskedEnvValue, maskEnvValue } from "./env-mask.js";
+export { ENV_NAME_RE } from "./env-name.js";
+export { escapeHtml } from "./escape-html.js";
 export { INTERNAL_SIG_HEADER, INTERNAL_SIG_MAX_SKEW_MS, INTERNAL_SIG_VERSION, INTERNAL_TS_HEADER, type InternalSigParts, internalSigPayload, } from "./internal-sig.js";
 export { CURRENT_TERMS_VERSION, LEGAL_DOCUMENT_HASHES, LEGAL_DOCUMENT_LAST_UPDATED, LEGAL_DOCUMENT_VERSIONS, type TermsAcceptanceEvidence, } from "./legal.js";
 export { canonicalLegalChangeJson, compareVersions, declaredVersion, LEGAL_CHANGE_ID_PATTERN, LEGAL_CHANGES, LEGAL_VERSION_PATTERN, type LegalChange, type LegalChangeDocument, type LegalChangeEnforcement, type LegalChangeReason, type LegalDocumentKey, MATERIAL_CHANGE_NOTICE_MS, openMaterialChanges, pendingAcknowledgement, SIGNUP_DISCLOSURE_HEADER, } from "./legal-changes.js";
@@ -12,6 +18,7 @@ export { DEFAULT_DOMAIN_SUFFIX, DEFAULT_MCP_HTTP_PORT, DEFAULT_POCKETBASE_IMAGE,
 export { canonicalInjectedKey, isPercherInjected, PERCHER_INJECTED_ENV_KEYS, } from "./platform-env.js";
 export { DEFAULT_NODE_VERSION_LABEL, DEFAULT_NODE_VERSION_MAJOR } from "./runtime.js";
 export { normalizeSignupInviteCode, SIGNUP_INVITE_CODE_ALPHABET, SIGNUP_INVITE_CODE_LENGTH, SIGNUP_INVITE_CODE_PREFIX, SIGNUP_INVITE_HEADER, } from "./signup-invite.js";
+export { assertValidSwitches, type BooleanSwitch, type EnumSwitch, type PresenceSwitch, reportSwitches, SWITCH_BY_NAME, SWITCHES, type SwitchReader, type SwitchReport, type SwitchSpec, type SwitchState, switchEnabled, switchState, switchValue, } from "./switches.js";
 export { BUN_MAX_IDLE_TIMEOUT_SECONDS, HTTP_IDLE_TIMEOUT_SECONDS, type HttpIdleTimeoutSurface, TIMEOUTS, type TimeoutKey, } from "./timeouts.js";
 export { WAITLIST_THROTTLE_WINDOW_MS } from "./waitlist.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,EACvB,KAAK,uBAAuB,GAC7B,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,iCAAiC,EACjC,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,KAAK,sBAAsB,EAC3B,QAAQ,EACR,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,EACvB,KAAK,uBAAuB,GAC7B,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,iCAAiC,EACjC,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,cAAc,EACd,cAAc,EACd,QAAQ,EACR,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,aAAa,EACb,WAAW,EACX,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,KAAK,sBAAsB,EAC3B,QAAQ,EACR,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,6 +1,12 @@
 export { APP_NAME_RE } from "./app-name.js";
+export { BILLING_TEST_ACCOUNTS_ENV, isBillingTestAccount, parseBillingTestAccounts, } from "./billing-test-accounts.js";
 export { BRAND, ICON_COLOURS, iconColourHex } from "./brand.js";
 export { CLIENT_IP_ATTESTATION_MAX_SKEW_MS, CLIENT_IP_ATTESTATION_VERSION, CLIENT_IP_HEADER, CLIENT_IP_MAX_LENGTH, CLIENT_IP_PROOF_HEADER, clientIpAttestationPayload, formatClientIpProof, parseClientIpProof, } from "./client-ip-attestation.js";
+export { crashAssistantPrompt } from "./crash-prompt.js";
+export { DOMAIN_RE } from "./domain-name.js";
+export { ENV_MASK, isMaskedEnvValue, maskEnvValue } from "./env-mask.js";
+export { ENV_NAME_RE } from "./env-name.js";
+export { escapeHtml } from "./escape-html.js";
 export { INTERNAL_SIG_HEADER, INTERNAL_SIG_MAX_SKEW_MS, INTERNAL_SIG_VERSION, INTERNAL_TS_HEADER, internalSigPayload, } from "./internal-sig.js";
 export { CURRENT_TERMS_VERSION, LEGAL_DOCUMENT_HASHES, LEGAL_DOCUMENT_LAST_UPDATED, LEGAL_DOCUMENT_VERSIONS, } from "./legal.js";
 export { canonicalLegalChangeJson, compareVersions, declaredVersion, LEGAL_CHANGE_ID_PATTERN, LEGAL_CHANGES, LEGAL_VERSION_PATTERN, MATERIAL_CHANGE_NOTICE_MS, openMaterialChanges, pendingAcknowledgement, SIGNUP_DISCLOSURE_HEADER, } from "./legal-changes.js";
@@ -12,6 +18,7 @@ export { DEFAULT_DOMAIN_SUFFIX, DEFAULT_MCP_HTTP_PORT, DEFAULT_POCKETBASE_IMAGE,
 export { canonicalInjectedKey, isPercherInjected, PERCHER_INJECTED_ENV_KEYS, } from "./platform-env.js";
 export { DEFAULT_NODE_VERSION_LABEL, DEFAULT_NODE_VERSION_MAJOR } from "./runtime.js";
 export { normalizeSignupInviteCode, SIGNUP_INVITE_CODE_ALPHABET, SIGNUP_INVITE_CODE_LENGTH, SIGNUP_INVITE_CODE_PREFIX, SIGNUP_INVITE_HEADER, } from "./signup-invite.js";
+export { assertValidSwitches, reportSwitches, SWITCH_BY_NAME, SWITCHES, switchEnabled, switchState, switchValue, } from "./switches.js";
 export { BUN_MAX_IDLE_TIMEOUT_SECONDS, HTTP_IDLE_TIMEOUT_SECONDS, TIMEOUTS, } from "./timeouts.js";
 export { WAITLIST_THROTTLE_WINDOW_MS } from "./waitlist.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAsB,aAAa,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EAEtB,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAElB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,GAExB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EAMrB,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,iCAAiC,EACjC,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EAEzB,QAAQ,GAET,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAsB,aAAa,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EAEtB,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAElB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,GAExB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EAMrB,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,iCAAiC,EACjC,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EAInB,cAAc,EACd,cAAc,EACd,QAAQ,EAKR,aAAa,EACb,WAAW,EACX,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EAEzB,QAAQ,GAET,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC"}

package/dist/legal-changes.d.ts

@@ -63,11 +63,7 @@ export interface LegalChange {
     /** Set when the same change also modifies the Service itself (2019/770 Art. 19). */
     modifiesService?: boolean;
 }
-/**
- * Newest last. Empty because version 1.0 is the first publication under
- * Kaizensu AB: there is no earlier version to have changed from, so the chain
- * starts here rather than being backfilled with a notice nobody was owed.
- */
+/** Newest last. Editorial corrections record the published document history. */
 export declare const LEGAL_CHANGES: readonly LegalChange[];
 /**
  * Header carrying the change ids the signup form actually rendered.

package/dist/legal-changes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"legal-changes.d.ts","sourceRoot":"","sources":["../src/legal-changes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAElD;;;;;;;;;;;;;;;;;GAiBG;AAEH,sFAAsF;AACtF,MAAM,MAAM,iBAAiB,GACzB,kBAAkB,GAClB,UAAU,GACV,kBAAkB,GAClB,gBAAgB,GAChB,iBAAiB,GACjB,eAAe,CAAC;AAEpB;;;;;;;;;;GAUG;AACH,MAAM,MAAM,sBAAsB,GAAG,aAAa,GAAG,sBAAsB,GAAG,kBAAkB,CAAC;AAEjG,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,uBAAuB,CAAC;AAEpE,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,gBAAgB,CAAC;IACtB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,kGAAkG;IAClG,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,WAAW;IAC1B,2FAA2F;IAC3F,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,WAAW,EAAE,UAAU,GAAG,WAAW,CAAC;IACtC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,WAAW,EAAE,sBAAsB,CAAC;IACpC,6DAA6D;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC1C;;;OAGG;IACH,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,oFAAoF;IACpF,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,WAAW,EAAO,CAAC;AAExD;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AAEtE,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,QAA2B,CAAC;AAElE,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,QAAiD,CAAC;AAEtF,2FAA2F;AAC3F,eAAO,MAAM,qBAAqB,QAAyB,CAAC;AAE5D;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAgBpE;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,SAAS,WAAW,EAAkB,GAC9C,WAAW,EAAE,CAIf;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,gBAAgB,EACrB,OAAO,GAAE,SAAS,WAAW,EAAkB,GAC9C,MAAM,CAMR;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CA6BnE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC/C,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,SAAS,WAAW,EAAkB,GAC9C,WAAW,GAAG,IAAI,CAiBpB"}
+{"version":3,"file":"legal-changes.d.ts","sourceRoot":"","sources":["../src/legal-changes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAElD;;;;;;;;;;;;;;;;;GAiBG;AAEH,sFAAsF;AACtF,MAAM,MAAM,iBAAiB,GACzB,kBAAkB,GAClB,UAAU,GACV,kBAAkB,GAClB,gBAAgB,GAChB,iBAAiB,GACjB,eAAe,CAAC;AAEpB;;;;;;;;;;GAUG;AACH,MAAM,MAAM,sBAAsB,GAAG,aAAa,GAAG,sBAAsB,GAAG,kBAAkB,CAAC;AAEjG,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,uBAAuB,CAAC;AAEpE,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,gBAAgB,CAAC;IACtB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,kGAAkG;IAClG,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,WAAW;IAC1B,2FAA2F;IAC3F,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,WAAW,EAAE,UAAU,GAAG,WAAW,CAAC;IACtC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,WAAW,EAAE,sBAAsB,CAAC;IACpC,6DAA6D;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC1C;;;OAGG;IACH,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,oFAAoF;IACpF,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,gFAAgF;AAChF,eAAO,MAAM,aAAa,EAAE,SAAS,WAAW,EA+D/C,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AAEtE,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,QAA2B,CAAC;AAElE,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,QAAiD,CAAC;AAEtF,2FAA2F;AAC3F,eAAO,MAAM,qBAAqB,QAAyB,CAAC;AAE5D;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAgBpE;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,SAAS,WAAW,EAAkB,GAC9C,WAAW,EAAE,CAIf;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,gBAAgB,EACrB,OAAO,GAAE,SAAS,WAAW,EAAkB,GAC9C,MAAM,CAMR;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CA6BnE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC/C,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,SAAS,WAAW,EAAkB,GAC9C,WAAW,GAAG,IAAI,CAiBpB"}

package/dist/legal-changes.js

@@ -1,10 +1,69 @@
 import { LEGAL_DOCUMENT_VERSIONS } from "./legal.js";
-/**
- * Newest last. Empty because version 1.0 is the first publication under
- * Kaizensu AB: there is no earlier version to have changed from, so the chain
- * starts here rather than being backfilled with a notice nobody was owed.
- */
-export const LEGAL_CHANGES = [];
+/** Newest last. Editorial corrections record the published document history. */
+export const LEGAL_CHANGES = [
+    {
+        id: "2026-09-21-cookie-inventory-correction",
+        materiality: "editorial",
+        reason: "clarification",
+        enforcement: "notice_only",
+        announceAt: "2026-09-21T00:00:00.000Z",
+        effectiveAt: "2026-09-21T00:00:00.000Z",
+        documents: [{ key: "cookies", from: "1.0", to: "1.0.1" }],
+        summary: {
+            en: "Removed an unused social sign-in cookie from the cookie inventory. Percher accounts use email and password; the GitHub App connection cookie remains listed.",
+            sv: "Tog bort en oanvänd cookie för social inloggning från cookieförteckningen. Percher-konton använder e-post och lösenord; cookien för anslutning av GitHub App finns kvar.",
+        },
+    },
+    {
+        id: "2026-09-21-badge-storage-removal",
+        materiality: "editorial",
+        reason: "clarification",
+        enforcement: "notice_only",
+        announceAt: "2026-09-21T00:00:00.000Z",
+        effectiveAt: "2026-09-21T00:00:00.000Z",
+        documents: [{ key: "cookies", from: "1.0.1", to: "1.0.2" }],
+        summary: {
+            en: "Removed the badge preference from the storage inventory. The Percher badge is now an icon link and no longer stores a collapse preference.",
+            sv: "Tog bort emblemets inställning från lagringsförteckningen. Percher-emblemet är nu en ikonlänk och sparar inte längre om det är hopfällt.",
+        },
+    },
+    {
+        id: "2026-09-22-precision-corrections",
+        materiality: "editorial",
+        reason: "clarification",
+        enforcement: "notice_only",
+        announceAt: "2026-09-22T00:00:00.000Z",
+        effectiveAt: "2026-09-22T00:00:00.000Z",
+        documents: [
+            { key: "terms", from: "1.0", to: "1.0.1" },
+            { key: "aup", from: "1.0", to: "1.0.1" },
+            { key: "privacy", from: "1.0", to: "1.0.1" },
+            { key: "cookies", from: "1.0.2", to: "1.0.3" },
+            { key: "subprocessors", from: "1.0", to: "1.0.1" },
+        ],
+        summary: {
+            en: "Corrections and shortening, no change to rights or obligations. The Privacy Policy now states the retention periods the Service applies to abuse reports and support cases. The Cookie Policy names the app-access cookies as set (__Host- prefix) and drops text repeated from the Privacy Policy. The AUP and Terms drop rules stated twice, the ARN filing fee and the AUP contact section; the language rule now sits in each document's header. The AUP keeps the rule against scraping the Service and restates the sanctions and export-control law that already applies.",
+            sv: "Rättelser och förkortning, utan ändring av rättigheter eller skyldigheter. Integritetspolicyn anger nu de lagringstider som Tjänsten tillämpar för missbruksanmälningar och supportärenden. Cookiepolicyn anger appåtkomstcookierna som de sätts (prefixet __Host-) och tar bort text som upprepas från Integritetspolicyn. AUP:n och Villkoren tar bort regler som angavs två gånger, ARN:s anmälningsavgift och AUP:ns kontaktavsnitt; språkregeln finns nu i varje dokuments sidhuvud. AUP:n behåller regeln mot att skrapa Tjänsten och återger den sanktions- och exportkontrollagstiftning som redan gäller.",
+        },
+    },
+    {
+        id: "2026-09-24-crash-diagnostics-without-external-ai",
+        materiality: "editorial",
+        reason: "provider_change",
+        enforcement: "notice_only",
+        announceAt: "2026-09-24T00:00:00.000Z",
+        effectiveAt: "2026-09-24T00:00:00.000Z",
+        documents: [
+            { key: "terms", from: "1.0.1", to: "1.0.2" },
+            { key: "privacy", from: "1.0.1", to: "1.0.2" },
+            { key: "subprocessors", from: "1.0.1", to: "1.0.2" },
+        ],
+        summary: {
+            en: "Crash Diagnostics now come from fixed rules within Percher, and crash logs are not sent to an external AI provider. The option of external AI crash analysis, which was switched off, is removed, and its provider is no longer listed. Section 3.3 explicitly refers to Section 9 and mandatory law for liability. No new processing and no change to your rights or obligations.",
+            sv: "Kraschdiagnostik tas nu fram med fasta regler inom Percher, och kraschloggar skickas inte till någon extern AI-leverantör. Möjligheten till extern AI-kraschanalys, som var avstängd, tas bort och dess leverantör listas inte längre. Avsnitt 3.3 hänvisar uttryckligen till avsnitt 9 och tvingande lag för ansvar. Ingen ny behandling och ingen ändring av dina rättigheter eller skyldigheter.",
+        },
+    },
+];
 /**
  * Header carrying the change ids the signup form actually rendered.
  *

package/dist/legal-changes.js.map

@@ -1 +1 @@
-{"version":3,"file":"legal-changes.js","sourceRoot":"","sources":["../src/legal-changes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AA2ElD;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAA2B,EAAE,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,6BAA6B,CAAC;AAEtE,gEAAgE;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElE,iFAAiF;AACjF,MAAM,CAAC,MAAM,uBAAuB,GAAG,8CAA8C,CAAC;AAEtF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAE5D;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAmB;IAC1D,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC7C,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,EAAE,EAAE,QAAQ,CAAC,EAAE;SAChB,CAAC,CAAC;QACH,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,eAAe,EAAE,MAAM,CAAC,eAAe,KAAK,IAAI;QAChD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,OAAO,GAA2B,aAAa;IAE/C,OAAO,OAAO,CAAC,MAAM,CACnB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,CACtF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAqB,EACrB,OAAO,GAA2B,aAAa;IAE/C,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC9E,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;IACnC,CAAC;IACD,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,KAAa;IACzD,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,8EAA8E;IAC9E,0EAA0E;IAC1E,gDAAgD;IAChD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAmC,EAAE;QAC/D,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,CAAC,IAAwB,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACvF,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC;IACF,4EAA4E;IAC5E,uDAAuD;IACvD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE;QAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC,CAAC;IACF,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QAC3D,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,oBAA+C,EAC/C,GAAW,EACX,OAAO,GAA2B,aAAa;IAE/C,IAAI,CAAC,oBAAoB;QAAE,OAAO,IAAI,CAAC;IACvC,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,MAAM,EAAE,WAAW,KAAK,UAAU;YAAE,SAAS;QACjD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,GAAG;YAAE,SAAS;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,yEAAyE;QACzE,uEAAuE;QACvE,qEAAqE;QACrE,wEAAwE;QACxE,0EAA0E;QAC1E,4BAA4B;QAC5B,OAAO,eAAe,CAAC,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"legal-changes.js","sourceRoot":"","sources":["../src/legal-changes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AA2ElD,gFAAgF;AAChF,MAAM,CAAC,MAAM,aAAa,GAA2B;IACnD;QACE,EAAE,EAAE,wCAAwC;QAC5C,WAAW,EAAE,WAAW;QACxB,MAAM,EAAE,eAAe;QACvB,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,0BAA0B;QACtC,WAAW,EAAE,0BAA0B;QACvC,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;QACzD,OAAO,EAAE;YACP,EAAE,EAAE,8JAA8J;YAClK,EAAE,EAAE,0KAA0K;SAC/K;KACF;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,WAAW,EAAE,WAAW;QACxB,MAAM,EAAE,eAAe;QACvB,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,0BAA0B;QACtC,WAAW,EAAE,0BAA0B;QACvC,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;QAC3D,OAAO,EAAE;YACP,EAAE,EAAE,4IAA4I;YAChJ,EAAE,EAAE,0IAA0I;SAC/I;KACF;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,WAAW,EAAE,WAAW;QACxB,MAAM,EAAE,eAAe;QACvB,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,0BAA0B;QACtC,WAAW,EAAE,0BAA0B;QACvC,SAAS,EAAE;YACT,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE;YAC1C,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE;YACxC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE;YAC5C,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE;YAC9C,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE;SACnD;QACD,OAAO,EAAE;YACP,EAAE,EAAE,kjBAAkjB;YACtjB,EAAE,EAAE,olBAAolB;SACzlB;KACF;IACD;QACE,EAAE,EAAE,kDAAkD;QACtD,WAAW,EAAE,WAAW;QACxB,MAAM,EAAE,iBAAiB;QACzB,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,0BAA0B;QACtC,WAAW,EAAE,0BAA0B;QACvC,SAAS,EAAE;YACT,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE;YAC5C,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE;YAC9C,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE;SACrD;QACD,OAAO,EAAE;YACP,EAAE,EAAE,oXAAoX;YACxX,EAAE,EAAE,qYAAqY;SAC1Y;KACF;CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,6BAA6B,CAAC;AAEtE,gEAAgE;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElE,iFAAiF;AACjF,MAAM,CAAC,MAAM,uBAAuB,GAAG,8CAA8C,CAAC;AAEtF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAE5D;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAmB;IAC1D,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC7C,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,EAAE,EAAE,QAAQ,CAAC,EAAE;SAChB,CAAC,CAAC;QACH,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,eAAe,EAAE,MAAM,CAAC,eAAe,KAAK,IAAI;QAChD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,OAAO,GAA2B,aAAa;IAE/C,OAAO,OAAO,CAAC,MAAM,CACnB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,CACtF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAqB,EACrB,OAAO,GAA2B,aAAa;IAE/C,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC9E,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;IACnC,CAAC;IACD,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,KAAa;IACzD,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,8EAA8E;IAC9E,0EAA0E;IAC1E,gDAAgD;IAChD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAmC,EAAE;QAC/D,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,CAAC,IAAwB,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACvF,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC;IACF,4EAA4E;IAC5E,uDAAuD;IACvD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE;QAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC,CAAC;IACF,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QAC3D,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,oBAA+C,EAC/C,GAAW,EACX,OAAO,GAA2B,aAAa;IAE/C,IAAI,CAAC,oBAAoB;QAAE,OAAO,IAAI,CAAC;IACvC,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,MAAM,EAAE,WAAW,KAAK,UAAU;YAAE,SAAS;QACjD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,GAAG;YAAE,SAAS;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,yEAAyE;QACzE,uEAAuE;QACvE,qEAAqE;QACrE,wEAAwE;QACxE,0EAA0E;QAC1E,4BAA4B;QAC5B,OAAO,eAAe,CAAC,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/legal.d.ts

@@ -12,12 +12,12 @@
  * re-acceptance.
  */
 export declare const LEGAL_DOCUMENT_VERSIONS: {
-    readonly terms: "1.0";
-    readonly aup: "1.0";
-    readonly privacy: "1.0";
-    readonly cookies: "1.0";
+    readonly terms: "1.0.2";
+    readonly aup: "1.0.1";
+    readonly privacy: "1.0.2";
+    readonly cookies: "1.0.3";
     readonly dpa: "1.0";
-    readonly subprocessors: "1.0";
+    readonly subprocessors: "1.0.2";
     readonly dataPortability: "1.0";
 };
 /**
@@ -39,18 +39,18 @@ export declare const LEGAL_DOCUMENT_VERSIONS: {
  * belongs to.
  */
 export declare const LEGAL_DOCUMENT_HASHES: {
-    readonly terms: "d412c9e85d7fefa5e3595b47aaea67a5d9f495955e458b2d0b4f43c9215317ce";
-    readonly aup: "138ce3bdd9d244a4f31c98955b3c9d59920f32c056608f1135dc8393769a761f";
-    readonly privacy: "186910f4f4825d3ac3bbc3340e7bf4babccea33f8b4166a10c892a7012cff175";
-    readonly cookies: "9c8250a4ea2fbf701d04cfb145d466ff8ba410e6da92433950f119952ba16bf0";
+    readonly terms: "dd1775a732d830cbc4fde88662ea557322cc2745a6afbe3b8bf9c497a97c2fc4";
+    readonly aup: "355feaa5c38bc2fb84ef66de73f16f2c7fcd25216b30399c451c263aa5c16597";
+    readonly privacy: "c4d5787c38eb8c0587dd92273c919037c88f8b712ea9f945a8051b50c9c99cf3";
+    readonly cookies: "aeb4d1c796e95077b88c5f5e5d11d5d9f43d6f5dae7e93bdfb1542162e9c9059";
     readonly dpa: "4c97fd36c886a113477f3eb2c2c0a9b5e03820ec624439906c938bbd40f7a0fb";
-    readonly subprocessors: "e7380f2d604814e1f06f44d8c4afcb34143c1c7994dfecdcec4cf1bbc8810363";
+    readonly subprocessors: "d45a3dc82df6aa5ba270a3066f544225848bcc8061934cfc910355f84c50f9a4";
     readonly dataPortability: "27a7d3ec0175af8f3f1c67db1a65bf01f74d5139b44d9134caef5dd8a924d775";
 };
 /** Version of the canonical English Terms presented during account acceptance. */
-export declare const CURRENT_TERMS_VERSION: "1.0";
+export declare const CURRENT_TERMS_VERSION: "1.0.2";
 /** The "Last updated" date shared by the current revision of the documents. */
-export declare const LEGAL_DOCUMENT_LAST_UPDATED = "10 September 2026";
+export declare const LEGAL_DOCUMENT_LAST_UPDATED = "24 September 2026";
 export interface TermsAcceptanceEvidence {
     version?: string;
     language?: "en" | "sv";

package/dist/legal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"legal.d.ts","sourceRoot":"","sources":["../src/legal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,uBAAuB;aAClC,KAAK,EAAE,KAAK;aACZ,GAAG,EAAE,KAAK;aACV,OAAO,EAAE,KAAK;aACd,OAAO,EAAE,KAAK;aACd,GAAG,EAAE,KAAK;aACV,aAAa,EAAE,KAAK;aACpB,eAAe,EAAE,KAAK;CACd,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,qBAAqB;aAChC,KAAK,EAAE,kEAAkE;aACzE,GAAG,EAAE,kEAAkE;aACvE,OAAO,EAAE,kEAAkE;aAC3E,OAAO,EAAE,kEAAkE;aAC3E,GAAG,EAAE,kEAAkE;aACvE,aAAa,EAAE,kEAAkE;aACjF,eAAe,EAAE,kEAAkE;CAC3E,CAAC;AAEX,kFAAkF;AAClF,eAAO,MAAM,qBAAqB,OAAgC,CAAC;AAEnE,+EAA+E;AAC/E,eAAO,MAAM,2BAA2B,sBAAsB,CAAC;AAE/D,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB"}
+{"version":3,"file":"legal.d.ts","sourceRoot":"","sources":["../src/legal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,uBAAuB;aAClC,KAAK,EAAE,OAAO;aACd,GAAG,EAAE,OAAO;aACZ,OAAO,EAAE,OAAO;aAChB,OAAO,EAAE,OAAO;aAChB,GAAG,EAAE,KAAK;aACV,aAAa,EAAE,OAAO;aACtB,eAAe,EAAE,KAAK;CACd,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,qBAAqB;aAChC,KAAK,EAAE,kEAAkE;aACzE,GAAG,EAAE,kEAAkE;aACvE,OAAO,EAAE,kEAAkE;aAC3E,OAAO,EAAE,kEAAkE;aAC3E,GAAG,EAAE,kEAAkE;aACvE,aAAa,EAAE,kEAAkE;aACjF,eAAe,EAAE,kEAAkE;CAC3E,CAAC;AAEX,kFAAkF;AAClF,eAAO,MAAM,qBAAqB,SAAgC,CAAC;AAEnE,+EAA+E;AAC/E,eAAO,MAAM,2BAA2B,sBAAsB,CAAC;AAE/D,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB"}

package/dist/legal.js

@@ -12,12 +12,12 @@
  * re-acceptance.
  */
 export const LEGAL_DOCUMENT_VERSIONS = {
-    terms: "1.0",
-    aup: "1.0",
-    privacy: "1.0",
-    cookies: "1.0",
+    terms: "1.0.2",
+    aup: "1.0.1",
+    privacy: "1.0.2",
+    cookies: "1.0.3",
     dpa: "1.0",
-    subprocessors: "1.0",
+    subprocessors: "1.0.2",
     dataPortability: "1.0",
 };
 /**
@@ -39,16 +39,16 @@ export const LEGAL_DOCUMENT_VERSIONS = {
  * belongs to.
  */
 export const LEGAL_DOCUMENT_HASHES = {
-    terms: "d412c9e85d7fefa5e3595b47aaea67a5d9f495955e458b2d0b4f43c9215317ce",
-    aup: "138ce3bdd9d244a4f31c98955b3c9d59920f32c056608f1135dc8393769a761f",
-    privacy: "186910f4f4825d3ac3bbc3340e7bf4babccea33f8b4166a10c892a7012cff175",
-    cookies: "9c8250a4ea2fbf701d04cfb145d466ff8ba410e6da92433950f119952ba16bf0",
+    terms: "dd1775a732d830cbc4fde88662ea557322cc2745a6afbe3b8bf9c497a97c2fc4",
+    aup: "355feaa5c38bc2fb84ef66de73f16f2c7fcd25216b30399c451c263aa5c16597",
+    privacy: "c4d5787c38eb8c0587dd92273c919037c88f8b712ea9f945a8051b50c9c99cf3",
+    cookies: "aeb4d1c796e95077b88c5f5e5d11d5d9f43d6f5dae7e93bdfb1542162e9c9059",
     dpa: "4c97fd36c886a113477f3eb2c2c0a9b5e03820ec624439906c938bbd40f7a0fb",
-    subprocessors: "e7380f2d604814e1f06f44d8c4afcb34143c1c7994dfecdcec4cf1bbc8810363",
+    subprocessors: "d45a3dc82df6aa5ba270a3066f544225848bcc8061934cfc910355f84c50f9a4",
     dataPortability: "27a7d3ec0175af8f3f1c67db1a65bf01f74d5139b44d9134caef5dd8a924d775",
 };
 /** Version of the canonical English Terms presented during account acceptance. */
 export const CURRENT_TERMS_VERSION = LEGAL_DOCUMENT_VERSIONS.terms;
 /** The "Last updated" date shared by the current revision of the documents. */
-export const LEGAL_DOCUMENT_LAST_UPDATED = "10 September 2026";
+export const LEGAL_DOCUMENT_LAST_UPDATED = "24 September 2026";
 //# sourceMappingURL=legal.js.map

package/dist/legal.js.map

@@ -1 +1 @@
-{"version":3,"file":"legal.js","sourceRoot":"","sources":["../src/legal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,KAAK,EAAE,KAAK;IACZ,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,KAAK;IACd,OAAO,EAAE,KAAK;IACd,GAAG,EAAE,KAAK;IACV,aAAa,EAAE,KAAK;IACpB,eAAe,EAAE,KAAK;CACd,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,KAAK,EAAE,kEAAkE;IACzE,GAAG,EAAE,kEAAkE;IACvE,OAAO,EAAE,kEAAkE;IAC3E,OAAO,EAAE,kEAAkE;IAC3E,GAAG,EAAE,kEAAkE;IACvE,aAAa,EAAE,kEAAkE;IACjF,eAAe,EAAE,kEAAkE;CAC3E,CAAC;AAEX,kFAAkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC,KAAK,CAAC;AAEnE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,2BAA2B,GAAG,mBAAmB,CAAC"}
+{"version":3,"file":"legal.js","sourceRoot":"","sources":["../src/legal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,KAAK,EAAE,OAAO;IACd,GAAG,EAAE,OAAO;IACZ,OAAO,EAAE,OAAO;IAChB,OAAO,EAAE,OAAO;IAChB,GAAG,EAAE,KAAK;IACV,aAAa,EAAE,OAAO;IACtB,eAAe,EAAE,KAAK;CACd,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,KAAK,EAAE,kEAAkE;IACzE,GAAG,EAAE,kEAAkE;IACvE,OAAO,EAAE,kEAAkE;IAC3E,OAAO,EAAE,kEAAkE;IAC3E,GAAG,EAAE,kEAAkE;IACvE,aAAa,EAAE,kEAAkE;IACjF,eAAe,EAAE,kEAAkE;CAC3E,CAAC;AAEX,kFAAkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC,KAAK,CAAC;AAEnE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,2BAA2B,GAAG,mBAAmB,CAAC"}

package/dist/platform.d.ts

@@ -26,6 +26,6 @@ export declare const DEFAULT_MCP_HTTP_PORT = 8787;
  * drifted to three different values (51/52/53), and one shipped artifact
  * disagreed with itself on two lines.
  */
-export declare const MCP_TOOL_COUNT_LOCAL = 53;
-export declare const MCP_TOOL_COUNT_HOSTED = 22;
+export declare const MCP_TOOL_COUNT_LOCAL = 54;
+export declare const MCP_TOOL_COUNT_HOSTED = 23;
 //# sourceMappingURL=platform.d.ts.map

package/dist/platform.js

@@ -26,6 +26,6 @@ export const DEFAULT_MCP_HTTP_PORT = 8787;
  * drifted to three different values (51/52/53), and one shipped artifact
  * disagreed with itself on two lines.
  */
-export const MCP_TOOL_COUNT_LOCAL = 53;
-export const MCP_TOOL_COUNT_HOSTED = 22;
+export const MCP_TOOL_COUNT_LOCAL = 54;
+export const MCP_TOOL_COUNT_HOSTED = 23;
 //# sourceMappingURL=platform.js.map

package/dist/secure-compare.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Constant-time equality for secrets, tokens and signatures that arrive as
+ * text. A subpath export (`@percher/shared/secure-compare`), never the
+ * barrel: the barrel is bundled into dashboard client components, and
+ * `node:crypto` there fails the web build. `timingSafeEqual` throws on buffers of different length, so callers
+ * guarded the length first, and most compared STRING length. A UTF-8 header
+ * with the same number of characters but more bytes ("é" vs "a") passed that
+ * guard and made the compare throw: a 500 where a 401 belonged. This compares
+ * byte length, and on a mismatch still runs one compare so the mismatch path
+ * does comparable work; it does not fully hide the length class (allocation
+ * and the branch remain), which is the same residual every caller had.
+ * Empty input never matches, including an empty expected value: two empty
+ * strings are not a shared secret.
+ */
+export declare function secretEquals(provided: string | null | undefined, expected: string): boolean;
+//# sourceMappingURL=secure-compare.d.ts.map

package/dist/secure-compare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-compare.d.ts","sourceRoot":"","sources":["../src/secure-compare.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAS3F"}

package/dist/secure-compare.js

@@ -0,0 +1,27 @@
+import { timingSafeEqual } from "node:crypto";
+/**
+ * Constant-time equality for secrets, tokens and signatures that arrive as
+ * text. A subpath export (`@percher/shared/secure-compare`), never the
+ * barrel: the barrel is bundled into dashboard client components, and
+ * `node:crypto` there fails the web build. `timingSafeEqual` throws on buffers of different length, so callers
+ * guarded the length first, and most compared STRING length. A UTF-8 header
+ * with the same number of characters but more bytes ("é" vs "a") passed that
+ * guard and made the compare throw: a 500 where a 401 belonged. This compares
+ * byte length, and on a mismatch still runs one compare so the mismatch path
+ * does comparable work; it does not fully hide the length class (allocation
+ * and the branch remain), which is the same residual every caller had.
+ * Empty input never matches, including an empty expected value: two empty
+ * strings are not a shared secret.
+ */
+export function secretEquals(provided, expected) {
+    if (!provided || !expected)
+        return false;
+    const a = Buffer.from(provided, "utf8");
+    const b = Buffer.from(expected, "utf8");
+    if (a.length !== b.length) {
+        timingSafeEqual(b, b);
+        return false;
+    }
+    return timingSafeEqual(a, b);
+}
+//# sourceMappingURL=secure-compare.js.map

package/dist/secure-compare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-compare.js","sourceRoot":"","sources":["../src/secure-compare.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,QAAmC,EAAE,QAAgB;IAChF,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC"}

package/dist/signup-invite.d.ts

@@ -11,7 +11,7 @@
 /** Request header the signup form uses to carry the code through BetterAuth. */
 export declare const SIGNUP_INVITE_HEADER = "x-percher-invite-code";
 export declare const SIGNUP_INVITE_CODE_PREFIX = "beta-";
-/** Random part is lowercase base36, so a code survives being typed or spoken. */
+/** Legacy code shape. Previously issued codes retain their exact hash. */
 export declare const SIGNUP_INVITE_CODE_ALPHABET = "abcdefghijklmnopqrstuvwxyz0123456789";
 export declare const SIGNUP_INVITE_CODE_LENGTH = 24;
 /**

package/dist/signup-invite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signup-invite.d.ts","sourceRoot":"","sources":["../src/signup-invite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAE5D,eAAO,MAAM,yBAAyB,UAAU,CAAC;AAEjD,iFAAiF;AACjF,eAAO,MAAM,2BAA2B,yCAAyC,CAAC;AAClF,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAI5C;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAIvF"}
+{"version":3,"file":"signup-invite.d.ts","sourceRoot":"","sources":["../src/signup-invite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAE5D,eAAO,MAAM,yBAAyB,UAAU,CAAC;AAEjD,0EAA0E;AAC1E,eAAO,MAAM,2BAA2B,yCAAyC,CAAC;AAClF,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAK5C;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAOvF"}

package/dist/signup-invite.js

@@ -11,10 +11,11 @@
 /** Request header the signup form uses to carry the code through BetterAuth. */
 export const SIGNUP_INVITE_HEADER = "x-percher-invite-code";
 export const SIGNUP_INVITE_CODE_PREFIX = "beta-";
-/** Random part is lowercase base36, so a code survives being typed or spoken. */
+/** Legacy code shape. Previously issued codes retain their exact hash. */
 export const SIGNUP_INVITE_CODE_ALPHABET = "abcdefghijklmnopqrstuvwxyz0123456789";
 export const SIGNUP_INVITE_CODE_LENGTH = 24;
 const CODE_RE = /^beta-[a-z0-9]{24}$/;
+const WORD_CODE_RE = /^beta[- ][a-z]{3,8}(?:[- ][a-z]{3,8}){3}$/;
 /**
  * Canonical form of a code as a user might have typed it: whitespace trimmed,
  * case folded. Returns null for anything that is not shaped like a code, so
@@ -24,6 +25,10 @@ export function normalizeSignupInviteCode(raw) {
     if (typeof raw !== "string")
         return null;
     const code = raw.trim().toLowerCase();
-    return CODE_RE.test(code) ? code : null;
+    if (CODE_RE.test(code))
+        return code;
+    // Four complete words, with single spaces or hyphens as spoken separators.
+    // The private API owns the vocabulary; only a stored hash authorizes signup.
+    return WORD_CODE_RE.test(code) ? code.replaceAll(" ", "-") : null;
 }
 //# sourceMappingURL=signup-invite.js.map

package/dist/signup-invite.js.map

@@ -1 +1 @@
-{"version":3,"file":"signup-invite.js","sourceRoot":"","sources":["../src/signup-invite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAEjD,iFAAiF;AACjF,MAAM,CAAC,MAAM,2BAA2B,GAAG,sCAAsC,CAAC;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAEtC;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAA8B;IACtE,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"signup-invite.js","sourceRoot":"","sources":["../src/signup-invite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAEjD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,2BAA2B,GAAG,sCAAsC,CAAC;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C,MAAM,OAAO,GAAG,qBAAqB,CAAC;AACtC,MAAM,YAAY,GAAG,2CAA2C,CAAC;AAEjE;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAA8B;IACtE,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,2EAA2E;IAC3E,6EAA6E;IAC7E,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC"}

package/dist/switches.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Every environment switch the platform reads, declared once.
+ *
+ * A switch is a variable that selects a code path (two paths, an enum of
+ * modes, or "armed when present"), as opposed to configuration such as a URL
+ * or a size. The readers spell their comparisons differently (`=== "1"` in
+ * most places, `=== "true"` in five, `!== "0"` for a default-on switch), and
+ * an operator who set `=1` on a `"true"` switch got the OFF path with no
+ * warning. This registry records each switch's EXISTING accepted spellings.
+ * `switchState` names the four states a raw value can be in, and
+ * `assertValidSwitches` refuses a boot on an invalid one. Readers resolve a
+ * switch through `switchEnabled` / `switchValue`, which return exactly what
+ * the literal comparisons they replaced returned;
+ * `test/switch-readers-parity.test.ts` holds those comparisons and the
+ * switches still read the old way.
+ *
+ * Widening a reader to accept both spellings is deliberately not done here:
+ * a value that is off today because of its spelling would turn on silently
+ * at the next deploy. Fix the value, deliberately, one switch at a time.
+ */
+export type SwitchReader = "api" | "worker" | "dashboard" | "mcp" | "cli";
+export type SwitchState = "enabled" | "disabled" | "unset" | "invalid";
+interface SwitchBase {
+    name: string;
+    readers: readonly SwitchReader[];
+    /** One line: what the ON path does. */
+    purpose: string;
+}
+export interface BooleanSwitch extends SwitchBase {
+    kind: "boolean";
+    /** Raw spellings the readers treat as ON today. */
+    enabled: readonly string[];
+    /** Raw spellings that mean an explicit OFF (never reported as invalid). */
+    disabled: readonly string[];
+    /** What an unset variable resolves to. */
+    default: "enabled" | "disabled";
+}
+export interface EnumSwitch extends SwitchBase {
+    kind: "enum";
+    values: readonly string[];
+    /** The value an unset variable resolves to. */
+    default: string;
+    /** The reader trims and lowercases before comparing, so `" ENFORCE "` works. */
+    normalize?: true;
+}
+export interface PresenceSwitch extends SwitchBase {
+    kind: "presence";
+}
+export type SwitchSpec = BooleanSwitch | EnumSwitch | PresenceSwitch;
+/** The registry. Order: builders, isolation, admission, product, ops, levers. */
+export declare const SWITCHES: readonly SwitchSpec[];
+export declare const SWITCH_BY_NAME: ReadonlyMap<string, SwitchSpec>;
+/** The state a raw value puts a switch in, by that switch's own spellings. */
+export declare function switchState(spec: SwitchSpec, raw: string | undefined): SwitchState;
+type Env = Record<string, string | undefined>;
+/**
+ * The path a boolean switch selects: ON for an enabled spelling, OFF for a
+ * disabled one, and the switch's default when unset or invalid. That is what
+ * every `=== "1"` / `!== "0"` reader returned, so moving a reader here changes
+ * no verdict.
+ */
+export declare function switchEnabled(name: string, env: Env): boolean;
+/** The mode an enum switch selects: its (normalized) value, or the default when unset or invalid. */
+export declare function switchValue(name: string, env: Env): string;
+export interface SwitchReport {
+    name: string;
+    raw: string;
+    state: SwitchState;
+    /** What the value should have been spelled as. */
+    accepted: readonly string[];
+    /** What an unset variable resolves to. */
+    fallback: string;
+}
+/**
+ * The switches whose raw value is set but not a spelling any reader accepts.
+ * The input to the boot refusal; it never throws.
+ */
+export declare function reportSwitches(env: Record<string, string | undefined>, reader?: SwitchReader): SwitchReport[];
+/**
+ * Refuse to boot on a set-but-invalid switch: the reader would silently take
+ * its default path, which is how a `"true"` switch set to `1` stayed off.
+ * A disabled spelling and an unset variable never refuse. The error names
+ * every invalid switch with its raw value and accepted spellings. Call it
+ * before any other boot guard and before any listener starts.
+ */
+export declare function assertValidSwitches(env: Record<string, string | undefined>, reader: SwitchReader): void;
+export {};
+//# sourceMappingURL=switches.d.ts.map

package/dist/switches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"switches.d.ts","sourceRoot":"","sources":["../src/switches.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,WAAW,GAAG,KAAK,GAAG,KAAK,CAAC;AAE1E,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC;AAEvE,UAAU,UAAU;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;IACjC,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,IAAI,EAAE,SAAS,CAAC;IAChB,mDAAmD;IACnD,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,2EAA2E;IAC3E,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,0CAA0C;IAC1C,OAAO,EAAE,SAAS,GAAG,UAAU,CAAC;CACjC;AAED,MAAM,WAAW,UAAW,SAAQ,UAAU;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG,UAAU,GAAG,cAAc,CAAC;AA2BrE,iFAAiF;AACjF,eAAO,MAAM,QAAQ,EAAE,SAAS,UAAU,EAkPzC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAE1D,CAAC;AAEF,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAclF;AAED,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAW9C;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAM7D;AAED,qGAAqG;AACrG,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,MAAM,CAK1D;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,WAAW,CAAC;IACnB,kDAAkD;IAClD,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,MAAM,CAAC,EAAE,YAAY,GACpB,YAAY,EAAE,CAiBhB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,MAAM,EAAE,YAAY,GACnB,IAAI,CAaN"}

package/dist/switches.js

@@ -0,0 +1,231 @@
+/**
+ * Every environment switch the platform reads, declared once.
+ *
+ * A switch is a variable that selects a code path (two paths, an enum of
+ * modes, or "armed when present"), as opposed to configuration such as a URL
+ * or a size. The readers spell their comparisons differently (`=== "1"` in
+ * most places, `=== "true"` in five, `!== "0"` for a default-on switch), and
+ * an operator who set `=1` on a `"true"` switch got the OFF path with no
+ * warning. This registry records each switch's EXISTING accepted spellings.
+ * `switchState` names the four states a raw value can be in, and
+ * `assertValidSwitches` refuses a boot on an invalid one. Readers resolve a
+ * switch through `switchEnabled` / `switchValue`, which return exactly what
+ * the literal comparisons they replaced returned;
+ * `test/switch-readers-parity.test.ts` holds those comparisons and the
+ * switches still read the old way.
+ *
+ * Widening a reader to accept both spellings is deliberately not done here:
+ * a value that is off today because of its spelling would turn on silently
+ * at the next deploy. Fix the value, deliberately, one switch at a time.
+ */
+const ONE = ["1"];
+const TRUE = ["true"];
+const OFF_SPELLINGS = ["0", "false"];
+// A default-on reader is written `!== "0"` (or `!== "false"`), which puts
+// EVERY other spelling on the ON side; its disabled list is exactly that one
+// literal, never both conventional spellings, or the registry would report as
+// OFF a value the reader turns ON.
+const bool = (name, readers, purpose, enabled, def = "disabled", disabled = OFF_SPELLINGS) => ({
+    kind: "boolean",
+    name,
+    readers,
+    purpose,
+    enabled,
+    disabled,
+    default: def,
+});
+/** The registry. Order: builders, isolation, admission, product, ops, levers. */
+export const SWITCHES = [
+    // Build dispatch
+    bool("PERCHER_NODE_USE_DOCKERFILE", ["api"], 'Node/Bun apps build through the Percher Dockerfile instead of Nixpacks (default; "0" is the emergency lever)', ONE, "enabled", ["0"]),
+    bool("PERCHER_PYTHON_USE_DOCKERFILE", ["api"], 'Python apps build through the Percher Dockerfile instead of Nixpacks (default; "0" is the emergency lever)', ONE, "enabled", ["0"]),
+    bool("PERCHER_OPS_BUILD_TRIAGE", ["api"], "append the internal cold-build triage block to build logs", ONE),
+    bool("PERCHER_CAPPED_BUILDER_ACTIVE", ["worker"], "builds run on the capped buildx builder; set by the worker itself once that builder is ready, not by the operator", ONE),
+    // Tenant isolation and networks
+    bool("PERCHER_PER_APP_NETWORKS", ["api", "worker"], "per-app internal networks, pbproxy and per-app egress (production refuses to boot without it)", TRUE),
+    bool("PERCHER_CADDY_RATELIMIT_ENABLED", ["api"], "emit Caddy rate_limit handlers for apps that declare [web].rate_limit", ONE),
+    bool("PERCHER_UNKNOWN_HOST_404", ["api"], "answer app-suffix hosts that no route serves with a 404 instead of Caddy's empty 200", ONE),
+    bool("PERCHER_PB_AUTH_RATELIMIT_ENABLED", ["api"], "limit login, OTP and account-mail requests per client IP on public PocketBase hosts", ONE),
+    bool("PERCHER_EGRESS_PROBE", ["api"], "run the in-container egress probe in diagnostics", ONE),
+    bool("PERCHER_WILDCARD_TLS", ["api"], "one wildcard DNS-01 certificate instead of per-host certificates", ONE),
+    // Admission and disk
+    bool("PERCHER_MEASURED_ADMISSION", ["api"], "measured admission, overcommit and box eviction instead of reservation accounting", ONE),
+    {
+        kind: "enum",
+        name: "PERCHER_DISK_GATE",
+        readers: ["api"],
+        purpose: "refuse uploads when disk state is unknown (required) or allow them (off)",
+        values: ["required", "off"],
+        default: "required",
+    },
+    bool("DISK_PRESSURE_AUTO_SUSPEND", ["api"], "auto-suspend PocketBase apps after the disk-pressure grace timeline", TRUE),
+    bool("PERCHER_APPDATA_HARD_CAP_ENFORCE", ["api"], "suspend an app immediately when its appdata exceeds the hard cap", TRUE),
+    // Accounts and product surface
+    bool("PERCHER_REQUIRE_EMAIL_VERIFICATION", ["api"], "block API use until the account's email is verified", ONE),
+    bool("PERCHER_ANON_DEPLOYS", ["api"], "open the anonymous deploy lane", ONE),
+    bool("PERCHER_SUPPORT_ENABLED", ["api"], "mount the support routes and jobs", ONE),
+    bool("PERCHER_SUPPORT_DIGEST_SEND_EMPTY", ["api"], "send the daily support digest even when it is empty", ONE),
+    bool("PERCHER_HOSTED_MCP_ENABLED", ["api"], "mount the OAuth authorization server and register mcp.percher.app", ONE),
+    bool("PERCHER_LEGAL_NOTICES_ENABLED", ["api"], "send material legal-change notices instead of reporting only", ONE),
+    bool("PERCHER_DEPLOY_SCREENSHOTS", ["api", "worker"], "capture a post-deploy screenshot with headless Chromium", ONE),
+    bool("PERCHER_RUNTIME_ERROR_CAPTURE", ["api"], "capture runtime errors over CDP instead of the log-trick screenshot", ONE),
+    {
+        kind: "enum",
+        name: "PERCHER_MANAGED_INFERENCE_MODE",
+        readers: ["api"],
+        purpose: "managed inference enabled (subject to credentials and approval) or disabled",
+        values: ["disabled", "enabled"],
+        default: "disabled",
+    },
+    // Deploy pipeline
+    bool("PERCHER_CANARY_AUTO_ROLLBACK", ["api"], "roll back on a canary failure instead of logging", TRUE, "enabled", ["false"]),
+    bool("PERCHER_CANARY_EDGE_KEEPS_LIVE", ["api"], "keep a deploy live when the canary failure was Percher's own edge", ONE, "enabled", ["0"]),
+    bool("PERCHER_DRAIN_AT_SETTLEMENT", ["api"], "drain the predecessor at canary settlement instead of on a timer", ONE, "enabled", ["0"]),
+    // Security scanning
+    bool("SECURITY_BLOCK_DEPLOY", ["api"], "block the swap on red scan findings instead of advising", TRUE),
+    bool("SECURITY_AUTO_HOLD", ["api"], "runtime re-scan places red apps on security hold automatically", TRUE),
+    {
+        kind: "enum",
+        name: "PERCHER_INTERNAL_SIG_MODE",
+        readers: ["api"],
+        purpose: "HMAC signing of /internal/* calls: off, log or enforce",
+        values: ["off", "log", "enforce"],
+        default: "off",
+    },
+    bool("METRICS_PUBLIC", ["api"], "serve /metrics without the internal secret", TRUE),
+    // Dashboard
+    {
+        kind: "enum",
+        name: "PERCHER_CONTROL_CSP",
+        readers: ["dashboard"],
+        purpose: "content-security policy off, report-only or enforced",
+        values: ["off", "report", "enforce"],
+        default: "report",
+        normalize: true,
+    },
+    bool("NEXT_PUBLIC_PERCHER_E2E", ["dashboard"], "compile the e2e login-as route into the bundle (build time)", ONE),
+    {
+        kind: "presence",
+        name: "PERCHER_E2E_SECRET",
+        readers: ["dashboard"],
+        purpose: "the e2e login-as route works when set",
+    },
+    bool("PERCHER_ALLOW_NO_CAPTCHA", ["dashboard"], "allow production without Turnstile", ONE),
+    bool("PERCHER_ALLOW_UNVERIFIED_SIGNUP", ["dashboard"], "allow production without Resend", ONE),
+    // Boot-guard opt-outs and topology
+    bool("PERCHER_ALLOW_NO_ALERTING", ["api"], "boot without an alert channel", ONE),
+    {
+        kind: "presence",
+        name: "PERCHER_WORKER_URL",
+        readers: ["api"],
+        purpose: "proxy container operations to the worker daemon (production topology) when set",
+    },
+    {
+        kind: "presence",
+        name: "PLATFORM_SUNSET_DATE",
+        readers: ["api"],
+        purpose: "sunset mode: banners, emails and the deletion schedule, when set",
+    },
+    // Client telemetry opt-outs
+    bool("PERCHER_NO_TELEMETRY", ["cli", "mcp"], "client telemetry off", ["1", "true"]),
+    bool("DO_NOT_TRACK", ["cli", "mcp"], "client telemetry off (the cross-tool convention)", ONE),
+    // Withdrawn provider seam
+    {
+        kind: "enum",
+        name: "CRASH_ANALYZER_PROVIDER",
+        readers: ["api"],
+        purpose: "the fake crash analyzer for tests, or none",
+        values: ["fake", "disabled"],
+        default: "disabled",
+    },
+];
+export const SWITCH_BY_NAME = new Map(SWITCHES.map((s) => [s.name, s]));
+/** The state a raw value puts a switch in, by that switch's own spellings. */
+export function switchState(spec, raw) {
+    if (raw === undefined || raw === "")
+        return "unset";
+    switch (spec.kind) {
+        case "boolean":
+            if (spec.enabled.includes(raw))
+                return "enabled";
+            if (spec.disabled.includes(raw))
+                return "disabled";
+            return "invalid";
+        case "enum": {
+            const value = spec.normalize ? raw.trim().toLowerCase() : raw;
+            return spec.values.includes(value) ? "enabled" : "invalid";
+        }
+        case "presence":
+            return "enabled";
+    }
+}
+function registered(name, kind) {
+    const spec = SWITCH_BY_NAME.get(name);
+    if (spec?.kind !== kind)
+        throw new Error(`${name} is not a registered ${kind} switch`);
+    return spec;
+}
+/**
+ * The path a boolean switch selects: ON for an enabled spelling, OFF for a
+ * disabled one, and the switch's default when unset or invalid. That is what
+ * every `=== "1"` / `!== "0"` reader returned, so moving a reader here changes
+ * no verdict.
+ */
+export function switchEnabled(name, env) {
+    const spec = registered(name, "boolean");
+    const state = switchState(spec, env[name]);
+    if (state === "enabled")
+        return true;
+    if (state === "disabled")
+        return false;
+    return spec.default === "enabled";
+}
+/** The mode an enum switch selects: its (normalized) value, or the default when unset or invalid. */
+export function switchValue(name, env) {
+    const spec = registered(name, "enum");
+    const raw = env[name];
+    if (raw === undefined || switchState(spec, raw) !== "enabled")
+        return spec.default;
+    return spec.normalize ? raw.trim().toLowerCase() : raw;
+}
+/**
+ * The switches whose raw value is set but not a spelling any reader accepts.
+ * The input to the boot refusal; it never throws.
+ */
+export function reportSwitches(env, reader) {
+    const out = [];
+    for (const spec of SWITCHES) {
+        if (reader && !spec.readers.includes(reader))
+            continue;
+        const raw = env[spec.name];
+        const state = switchState(spec, raw);
+        if (state !== "invalid" || raw === undefined)
+            continue;
+        const accepted = spec.kind === "boolean"
+            ? [...spec.enabled, ...spec.disabled]
+            : spec.kind === "enum"
+                ? spec.values
+                : [];
+        const fallback = spec.kind === "presence" ? "unset" : spec.default;
+        out.push({ name: spec.name, raw, state, accepted, fallback });
+    }
+    return out;
+}
+/**
+ * Refuse to boot on a set-but-invalid switch: the reader would silently take
+ * its default path, which is how a `"true"` switch set to `1` stayed off.
+ * A disabled spelling and an unset variable never refuse. The error names
+ * every invalid switch with its raw value and accepted spellings. Call it
+ * before any other boot guard and before any listener starts.
+ */
+export function assertValidSwitches(env, reader) {
+    const invalid = reportSwitches(env, reader);
+    if (invalid.length === 0)
+        return;
+    throw new Error(invalid
+        .map((r) => `[percher-${reader}] refusing to start: ${r.name}=${JSON.stringify(r.raw)} is not a spelling this switch accepts. ` +
+        `Accepted: ${r.accepted.map((a) => JSON.stringify(a)).join(", ")}. ` +
+        `Unset it for the default (${r.fallback}).`)
+        .join("\n"));
+}
+//# sourceMappingURL=switches.js.map

package/dist/switches.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"switches.js","sourceRoot":"","sources":["../src/switches.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAsCH,MAAM,GAAG,GAAG,CAAC,GAAG,CAAU,CAAC;AAC3B,MAAM,IAAI,GAAG,CAAC,MAAM,CAAU,CAAC;AAC/B,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,OAAO,CAAU,CAAC;AAE9C,0EAA0E;AAC1E,6EAA6E;AAC7E,8EAA8E;AAC9E,mCAAmC;AACnC,MAAM,IAAI,GAAG,CACX,IAAY,EACZ,OAAgC,EAChC,OAAe,EACf,OAA0B,EAC1B,GAAG,GAA2B,UAAU,EACxC,QAAQ,GAAsB,aAAa,EAC5B,EAAE,CAAC,CAAC;IACnB,IAAI,EAAE,SAAS;IACf,IAAI;IACJ,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO,EAAE,GAAG;CACb,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,QAAQ,GAA0B;IAC7C,iBAAiB;IACjB,IAAI,CACF,6BAA6B,EAC7B,CAAC,KAAK,CAAC,EACP,8GAA8G,EAC9G,GAAG,EACH,SAAS,EACT,CAAC,GAAG,CAAC,CACN;IACD,IAAI,CACF,+BAA+B,EAC/B,CAAC,KAAK,CAAC,EACP,4GAA4G,EAC5G,GAAG,EACH,SAAS,EACT,CAAC,GAAG,CAAC,CACN;IACD,IAAI,CACF,0BAA0B,EAC1B,CAAC,KAAK,CAAC,EACP,2DAA2D,EAC3D,GAAG,CACJ;IACD,IAAI,CACF,+BAA+B,EAC/B,CAAC,QAAQ,CAAC,EACV,mHAAmH,EACnH,GAAG,CACJ;IAED,gCAAgC;IAChC,IAAI,CACF,0BAA0B,EAC1B,CAAC,KAAK,EAAE,QAAQ,CAAC,EACjB,+FAA+F,EAC/F,IAAI,CACL;IACD,IAAI,CACF,iCAAiC,EACjC,CAAC,KAAK,CAAC,EACP,uEAAuE,EACvE,GAAG,CACJ;IACD,IAAI,CACF,0BAA0B,EAC1B,CAAC,KAAK,CAAC,EACP,sFAAsF,EACtF,GAAG,CACJ;IACD,IAAI,CACF,mCAAmC,EACnC,CAAC,KAAK,CAAC,EACP,qFAAqF,EACrF,GAAG,CACJ;IACD,IAAI,CAAC,sBAAsB,EAAE,CAAC,KAAK,CAAC,EAAE,kDAAkD,EAAE,GAAG,CAAC;IAC9F,IAAI,CACF,sBAAsB,EACtB,CAAC,KAAK,CAAC,EACP,kEAAkE,EAClE,GAAG,CACJ;IAED,qBAAqB;IACrB,IAAI,CACF,4BAA4B,EAC5B,CAAC,KAAK,CAAC,EACP,mFAAmF,EACnF,GAAG,CACJ;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,OAAO,EAAE,0EAA0E;QACnF,MAAM,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC;QAC3B,OAAO,EAAE,UAAU;KACpB;IACD,IAAI,CACF,4BAA4B,EAC5B,CAAC,KAAK,CAAC,EACP,qEAAqE,EACrE,IAAI,CACL;IACD,IAAI,CACF,kCAAkC,EAClC,CAAC,KAAK,CAAC,EACP,kEAAkE,EAClE,IAAI,CACL;IAED,+BAA+B;IAC/B,IAAI,CACF,oCAAoC,EACpC,CAAC,KAAK,CAAC,EACP,qDAAqD,EACrD,GAAG,CACJ;IACD,IAAI,CAAC,sBAAsB,EAAE,CAAC,KAAK,CAAC,EAAE,gCAAgC,EAAE,GAAG,CAAC;IAC5E,IAAI,CAAC,yBAAyB,EAAE,CAAC,KAAK,CAAC,EAAE,mCAAmC,EAAE,GAAG,CAAC;IAClF,IAAI,CACF,mCAAmC,EACnC,CAAC,KAAK,CAAC,EACP,qDAAqD,EACrD,GAAG,CACJ;IACD,IAAI,CACF,4BAA4B,EAC5B,CAAC,KAAK,CAAC,EACP,mEAAmE,EACnE,GAAG,CACJ;IACD,IAAI,CACF,+BAA+B,EAC/B,CAAC,KAAK,CAAC,EACP,8DAA8D,EAC9D,GAAG,CACJ;IACD,IAAI,CACF,4BAA4B,EAC5B,CAAC,KAAK,EAAE,QAAQ,CAAC,EACjB,yDAAyD,EACzD,GAAG,CACJ;IACD,IAAI,CACF,+BAA+B,EAC/B,CAAC,KAAK,CAAC,EACP,qEAAqE,EACrE,GAAG,CACJ;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,OAAO,EAAE,6EAA6E;QACtF,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;QAC/B,OAAO,EAAE,UAAU;KACpB;IAED,kBAAkB;IAClB,IAAI,CACF,8BAA8B,EAC9B,CAAC,KAAK,CAAC,EACP,kDAAkD,EAClD,IAAI,EACJ,SAAS,EACT,CAAC,OAAO,CAAC,CACV;IACD,IAAI,CACF,gCAAgC,EAChC,CAAC,KAAK,CAAC,EACP,mEAAmE,EACnE,GAAG,EACH,SAAS,EACT,CAAC,GAAG,CAAC,CACN;IACD,IAAI,CACF,6BAA6B,EAC7B,CAAC,KAAK,CAAC,EACP,kEAAkE,EAClE,GAAG,EACH,SAAS,EACT,CAAC,GAAG,CAAC,CACN;IAED,oBAAoB;IACpB,IAAI,CACF,uBAAuB,EACvB,CAAC,KAAK,CAAC,EACP,yDAAyD,EACzD,IAAI,CACL;IACD,IAAI,CACF,oBAAoB,EACpB,CAAC,KAAK,CAAC,EACP,gEAAgE,EAChE,IAAI,CACL;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC;QACjC,OAAO,EAAE,KAAK;KACf;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,EAAE,4CAA4C,EAAE,IAAI,CAAC;IAEnF,YAAY;IACZ;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,OAAO,EAAE,sDAAsD;QAC/D,MAAM,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;QACpC,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,IAAI;KAChB;IACD,IAAI,CACF,yBAAyB,EACzB,CAAC,WAAW,CAAC,EACb,6DAA6D,EAC7D,GAAG,CACJ;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,OAAO,EAAE,uCAAuC;KACjD;IACD,IAAI,CAAC,0BAA0B,EAAE,CAAC,WAAW,CAAC,EAAE,oCAAoC,EAAE,GAAG,CAAC;IAC1F,IAAI,CAAC,iCAAiC,EAAE,CAAC,WAAW,CAAC,EAAE,iCAAiC,EAAE,GAAG,CAAC;IAE9F,mCAAmC;IACnC,IAAI,CAAC,2BAA2B,EAAE,CAAC,KAAK,CAAC,EAAE,+BAA+B,EAAE,GAAG,CAAC;IAChF;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,OAAO,EAAE,gFAAgF;KAC1F;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,OAAO,EAAE,kEAAkE;KAC5E;IAED,4BAA4B;IAC5B,IAAI,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,sBAAsB,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnF,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,kDAAkD,EAAE,GAAG,CAAC;IAE7F,0BAA0B;IAC1B;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,OAAO,EAAE,4CAA4C;QACrD,MAAM,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;QAC5B,OAAO,EAAE,UAAU;KACpB;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAoC,IAAI,GAAG,CACpE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CACjC,CAAC;AAEF,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,IAAgB,EAAE,GAAuB;IACnE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,OAAO,CAAC;IACpD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,UAAU,CAAC;YACnD,OAAO,SAAS,CAAC;QACnB,KAAK,MAAM,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAC9D,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,CAAC;QACD,KAAK,UAAU;YACb,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAID,SAAS,UAAU,CACjB,IAAY,EACZ,IAAO;IAEP,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,IAAI,EAAE,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wBAAwB,IAAI,SAAS,CAAC,CAAC;IACvF,OAAO,IAAwC,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,GAAQ;IAClD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC;AACpC,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,GAAQ;IAChD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IACnF,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AACzD,CAAC;AAYD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAuC,EACvC,MAAqB;IAErB,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QACvD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QACvD,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,KAAK,SAAS;YACrB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;YACrC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM;gBACpB,CAAC,CAAC,IAAI,CAAC,MAAM;gBACb,CAAC,CAAC,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAuC,EACvC,MAAoB;IAEpB,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,IAAI,KAAK,CACb,OAAO;SACJ,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,YAAY,MAAM,wBAAwB,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,0CAA0C;QACnH,aAAa,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACpE,6BAA6B,CAAC,CAAC,QAAQ,IAAI,CAC9C;SACA,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@percher/shared",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Shared constants and contracts (timeouts, etc.) used across the Percher CLI, API, MCP, and worker. Internal — values change in lockstep across packages.",
   "type": "module",
   "main": "./dist/index.js",
@@ -36,6 +36,11 @@
       "import": "./dist/pow.js",
       "default": "./dist/pow.js"
     },
+    "./secure-compare": {
+      "types": "./dist/secure-compare.d.ts",
+      "import": "./dist/secure-compare.js",
+      "default": "./dist/secure-compare.js"
+    },
     "./signup-invite-hash": {
       "types": "./dist/signup-invite-hash.d.ts",
       "import": "./dist/signup-invite-hash.js",