@percher/shared 1.0.2 → 1.2.0

package/dist/domain-name.js

@@ -0,0 +1,14 @@
+/**
+ * A bare DNS hostname as Percher accepts it for custom domains: lowercase
+ * labels of 1 to 63 characters that neither start nor end with a hyphen, at
+ * least two labels, an alphabetic top-level label of two or more characters,
+ * and at most 253 characters in all. No protocol, no port, no trailing dot.
+ *
+ * One rule for the API's domain service and the worker's provision guard.
+ * The percher.toml schema (`@percher/toml`) carries the same pattern by
+ * value and lowercases before matching; it imports this one once a shared
+ * release carries it (cross-package exports move with version bumps).
+ * `packages/shared/test/domain-name.test.ts` fails if the two texts drift.
+ */
+export const DOMAIN_RE = /^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}$/;
+//# sourceMappingURL=domain-name.js.map

package/dist/domain-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain-name.js","sourceRoot":"","sources":["../src/domain-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,uEAAuE,CAAC"}

package/dist/email-budget.d.ts

@@ -0,0 +1,60 @@
+/** Resend free tier: 100/day, 3,000/month. UTC calendar windows. */
+export declare const EMAIL_BUDGET_LIMITS: {
+    readonly daily: 95;
+    readonly monthly: 2900;
+    readonly notificationDaily: 45;
+    readonly crashPerAppDaily: 3;
+};
+export type EmailCategory = "auth" | "operator" | "legal" | "notification";
+interface EmailBudgetCounts {
+    total: number;
+    auth: number;
+    operator: number;
+    legal: number;
+    notification: number;
+}
+export interface EmailBudgetConnection {
+    run(query: string, params?: (string | number)[]): void;
+    /** Drizzle's raw Bun SQLite queries return positional rows. */
+    get<T extends unknown[]>(query: string, params?: (string | number)[]): T | undefined;
+}
+interface EmailBudgetDatabase extends EmailBudgetConnection {
+    immediate<T>(work: (connection: EmailBudgetConnection) => T): T;
+}
+interface EmailBudgetDecision {
+    allowed: boolean;
+    category: EmailCategory;
+    dayKey: string;
+    reason?: "notification_daily" | "daily" | "monthly" | "crash_daily";
+    overCeiling: boolean;
+}
+/** Dashboard-only startup must coexist with the API's migration. */
+export declare const EMAIL_BUDGET_SCHEMA = "\nCREATE TABLE IF NOT EXISTS email_budget_counters (\n  period TEXT PRIMARY KEY NOT NULL,\n  total INTEGER NOT NULL DEFAULT 0,\n  auth INTEGER NOT NULL DEFAULT 0,\n  operator INTEGER NOT NULL DEFAULT 0,\n  legal INTEGER NOT NULL DEFAULT 0,\n  notification INTEGER NOT NULL DEFAULT 0,\n  warning INTEGER NOT NULL DEFAULT 0\n);\nCREATE TABLE IF NOT EXISTS email_budget_crashes (\n  day TEXT NOT NULL,\n  app_id TEXT NOT NULL,\n  count INTEGER NOT NULL DEFAULT 0,\n  PRIMARY KEY (day, app_id)\n);";
+/** Attempts, not successful deliveries: uncertain sends never release capacity. */
+export declare class EmailBudget {
+    private readonly db;
+    private readonly now;
+    onWarning?: (usage: ReturnType<EmailBudget["usage"]>) => Promise<unknown>;
+    constructor(db: EmailBudgetDatabase, now?: () => Date);
+    reserve(category: EmailCategory, options?: {
+        count?: number;
+        crashAppId?: string;
+    }): EmailBudgetDecision;
+    usage(at?: Date): {
+        dayKey: string;
+        monthKey: string;
+        day: EmailBudgetCounts;
+        month: EmailBudgetCounts;
+        limits: {
+            readonly daily: 95;
+            readonly monthly: 2900;
+            readonly notificationDaily: 45;
+            readonly crashPerAppDaily: 3;
+        };
+        uncountedOperatorSenders: string[];
+    };
+    /** The dashboard leaves a durable pending warning; API monitoring drains it. */
+    dispatchWarning(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=email-budget.d.ts.map

package/dist/email-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-budget.d.ts","sourceRoot":"","sources":["../src/email-budget.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,eAAO,MAAM,mBAAmB;aAC9B,KAAK,EAAE,EAAE;aACT,OAAO,EAAE,IAAK;aACd,iBAAiB,EAAE,EAAE;aACrB,gBAAgB,EAAE,CAAC;CACX,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,GAAG,cAAc,CAAC;AAC3E,UAAU,iBAAiB;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC;IACvD,+DAA+D;IAC/D,GAAG,CAAC,CAAC,SAAS,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;CACtF;AACD,UAAU,mBAAoB,SAAQ,qBAAqB;IACzD,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,qBAAqB,KAAK,CAAC,GAAG,CAAC,CAAC;CACjE;AACD,UAAU,mBAAmB;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,oBAAoB,GAAG,OAAO,GAAG,SAAS,GAAG,aAAa,CAAC;IACpE,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,oEAAoE;AACpE,eAAO,MAAM,mBAAmB,kfAe7B,CAAC;AAoBJ,mFAAmF;AACnF,qBAAa,WAAW;IAIpB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAJtB,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAE1E,YACmB,EAAE,EAAE,mBAAmB,EACvB,GAAG,GAAE,MAAM,IAAuB,EACjD;IAEJ,OAAO,CACL,QAAQ,EAAE,aAAa,EACvB,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GACpD,mBAAmB,CAgErB;IAED,KAAK,CAAC,EAAE,OAAa;;;;;;4BAhJd,EAAE;8BACA,IAAK;wCACK,EAAE;uCACH,CAAC;;;MAwJlB;IAED,gFAAgF;IAC1E,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAarC;CACF"}

package/dist/email-budget.js

@@ -0,0 +1,135 @@
+/** Resend free tier: 100/day, 3,000/month. UTC calendar windows. */
+export const EMAIL_BUDGET_LIMITS = {
+    daily: 95,
+    monthly: 2_900,
+    notificationDaily: 45,
+    crashPerAppDaily: 3,
+};
+/** Dashboard-only startup must coexist with the API's migration. */
+export const EMAIL_BUDGET_SCHEMA = `
+CREATE TABLE IF NOT EXISTS email_budget_counters (
+  period TEXT PRIMARY KEY NOT NULL,
+  total INTEGER NOT NULL DEFAULT 0,
+  auth INTEGER NOT NULL DEFAULT 0,
+  operator INTEGER NOT NULL DEFAULT 0,
+  legal INTEGER NOT NULL DEFAULT 0,
+  notification INTEGER NOT NULL DEFAULT 0,
+  warning INTEGER NOT NULL DEFAULT 0
+);
+CREATE TABLE IF NOT EXISTS email_budget_crashes (
+  day TEXT NOT NULL,
+  app_id TEXT NOT NULL,
+  count INTEGER NOT NULL DEFAULT 0,
+  PRIMARY KEY (day, app_id)
+);`;
+const emptyCounts = () => ({
+    total: 0,
+    auth: 0,
+    operator: 0,
+    legal: 0,
+    notification: 0,
+});
+function readCounts(db, period) {
+    const row = db.get("SELECT total, auth, operator, legal, notification FROM email_budget_counters WHERE period = ?", [period]);
+    if (!row)
+        return emptyCounts();
+    const [total, auth, operator, legal, notification] = row;
+    return { total, auth, operator, legal, notification };
+}
+/** Attempts, not successful deliveries: uncertain sends never release capacity. */
+export class EmailBudget {
+    db;
+    now;
+    onWarning;
+    constructor(db, now = () => new Date()) {
+        this.db = db;
+        this.now = now;
+    }
+    reserve(category, options = {}) {
+        if (!["auth", "operator", "legal", "notification"].includes(category))
+            throw new Error("Invalid email category");
+        const count = options.count ?? 1;
+        if (!Number.isSafeInteger(count) || count < 1)
+            throw new Error("Invalid email recipient count");
+        if (options.crashAppId !== undefined && (category !== "notification" || !options.crashAppId))
+            throw new Error("Invalid crash email category or app");
+        const dayKey = this.now().toISOString().slice(0, 10);
+        const periods = [`day:${dayKey}`, `month:${dayKey.slice(0, 7)}`];
+        const decision = this.db.immediate((db) => {
+            for (const period of periods)
+                db.run("INSERT OR IGNORE INTO email_budget_counters (period) VALUES (?)", [period]);
+            const day = readCounts(db, periods[0]);
+            const month = readCounts(db, periods[1]);
+            const reason = day.total + count > EMAIL_BUDGET_LIMITS.daily
+                ? "daily"
+                : month.total + count > EMAIL_BUDGET_LIMITS.monthly
+                    ? "monthly"
+                    : category === "notification" &&
+                        day.notification + count > EMAIL_BUDGET_LIMITS.notificationDaily
+                        ? "notification_daily"
+                        : undefined;
+            if (category === "notification" && reason)
+                return { allowed: false, category, dayKey, reason, overCeiling: false };
+            if (options.crashAppId !== undefined) {
+                const crash = db.get("SELECT count FROM email_budget_crashes WHERE day = ? AND app_id = ?", [dayKey, options.crashAppId]);
+                if ((crash?.[0] ?? 0) >= EMAIL_BUDGET_LIMITS.crashPerAppDaily)
+                    return {
+                        allowed: false,
+                        category,
+                        dayKey,
+                        reason: "crash_daily",
+                        overCeiling: false,
+                    };
+                db.run("INSERT INTO email_budget_crashes (day, app_id, count) VALUES (?, ?, 1) ON CONFLICT(day, app_id) DO UPDATE SET count = count + 1", [dayKey, options.crashAppId]);
+            }
+            for (const period of periods)
+                db.run(`UPDATE email_budget_counters SET total = total + ?, ${category} = ${category} + ? WHERE period = ?`, [count, count, period]);
+            if (reason)
+                db.run("UPDATE email_budget_counters SET warning = 1 WHERE period = ? AND warning = 0", [
+                    periods[0],
+                ]);
+            return { allowed: true, category, dayKey, reason, overCeiling: reason !== undefined };
+        });
+        if (!decision.allowed || decision.overCeiling) {
+            const line = JSON.stringify({
+                event: decision.allowed ? "email_budget_priority_overflow" : "email_budget_skipped",
+                ...decision,
+                crashAppId: options.crashAppId,
+            });
+            if (decision.overCeiling)
+                console.error(line);
+            else
+                console.warn(line);
+        }
+        return decision;
+    }
+    usage(at = this.now()) {
+        const dayKey = at.toISOString().slice(0, 10);
+        const monthKey = dayKey.slice(0, 7);
+        return {
+            dayKey,
+            monthKey,
+            day: readCounts(this.db, `day:${dayKey}`),
+            month: readCounts(this.db, `month:${monthKey}`),
+            limits: EMAIL_BUDGET_LIMITS,
+            uncountedOperatorSenders: ["infra/scripts/lib/backup-alert.py"],
+        };
+    }
+    /** The dashboard leaves a durable pending warning; API monitoring drains it. */
+    async dispatchWarning() {
+        if (!this.onWarning)
+            return;
+        const claimed = this.db.get("UPDATE email_budget_counters SET warning = 2 WHERE period = (SELECT period FROM email_budget_counters WHERE period LIKE 'day:%' AND warning = 1 ORDER BY period LIMIT 1) AND warning = 1 RETURNING period");
+        if (!claimed)
+            return;
+        const [period] = claimed;
+        // Claim before dispatch: an operator warning itself goes through this budget.
+        try {
+            await this.onWarning(this.usage(new Date(`${period.slice(4)}T00:00:00Z`)));
+        }
+        catch {
+            console.error(JSON.stringify({ event: "email_budget_warning_failed", period }));
+        }
+    }
+}
+//# sourceMappingURL=email-budget.js.map

package/dist/email-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-budget.js","sourceRoot":"","sources":["../src/email-budget.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,EAAE;IACT,OAAO,EAAE,KAAK;IACd,iBAAiB,EAAE,EAAE;IACrB,gBAAgB,EAAE,CAAC;CACX,CAAC;AA0BX,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;GAehC,CAAC;AAEJ,MAAM,WAAW,GAAG,GAAsB,EAAE,CAAC,CAAC;IAC5C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;IACX,KAAK,EAAE,CAAC;IACR,YAAY,EAAE,CAAC;CAChB,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,EAAyB,EAAE,MAAc;IAC3D,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAChB,+FAA+F,EAC/F,CAAC,MAAM,CAAC,CACT,CAAC;IACF,IAAI,CAAC,GAAG;QAAE,OAAO,WAAW,EAAE,CAAC;IAC/B,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,GAAG,CAAC;IACzD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AACxD,CAAC;AAED,mFAAmF;AACnF,MAAM,OAAO,WAAW;IAIH,EAAE;IACF,GAAG;IAJtB,SAAS,CAAiE;IAE1E,YACmB,EAAuB,EACvB,GAAG,GAAe,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;kBADlC,EAAE;mBACF,GAAG;IACnB,CAAC;IAEJ,OAAO,CACL,QAAuB,EACvB,OAAO,GAA4C,EAAE;QAErD,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAChG,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,QAAQ,KAAK,cAAc,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YAC1F,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,CAAC,OAAO,MAAM,EAAE,EAAE,SAAS,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAU,CAAC;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,SAAS,CAAsB,CAAC,EAAE,EAAE,EAAE;YAC7D,KAAK,MAAM,MAAM,IAAI,OAAO;gBAC1B,EAAE,CAAC,GAAG,CAAC,iEAAiE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACtF,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM,MAAM,GACV,GAAG,CAAC,KAAK,GAAG,KAAK,GAAG,mBAAmB,CAAC,KAAK;gBAC3C,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,GAAG,mBAAmB,CAAC,OAAO;oBACjD,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,QAAQ,KAAK,cAAc;wBACzB,GAAG,CAAC,YAAY,GAAG,KAAK,GAAG,mBAAmB,CAAC,iBAAiB;wBAClE,CAAC,CAAC,oBAAoB;wBACtB,CAAC,CAAC,SAAS,CAAC;YACpB,IAAI,QAAQ,KAAK,cAAc,IAAI,MAAM;gBACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;YAC1E,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,EAAE,CAAC,GAAG,CAClB,qEAAqE,EACrE,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAC7B,CAAC;gBACF,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,mBAAmB,CAAC,gBAAgB;oBAC3D,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,QAAQ;wBACR,MAAM;wBACN,MAAM,EAAE,aAAsB;wBAC9B,WAAW,EAAE,KAAK;qBACnB,CAAC;gBACJ,EAAE,CAAC,GAAG,CACJ,iIAAiI,EACjI,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAC7B,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,OAAO;gBAC1B,EAAE,CAAC,GAAG,CACJ,uDAAuD,QAAQ,MAAM,QAAQ,uBAAuB,EACpG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CACvB,CAAC;YACJ,IAAI,MAAM;gBACR,EAAE,CAAC,GAAG,CAAC,+EAA+E,EAAE;oBACtF,OAAO,CAAC,CAAC,CAAC;iBACX,CAAC,CAAC;YACL,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;QACxF,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC1B,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,sBAAsB;gBACnF,GAAG,QAAQ;gBACX,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,WAAW;gBAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;;gBACzC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;QACnB,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,OAAO;YACL,MAAM;YACN,QAAQ;YACR,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,MAAM,EAAE,CAAC;YACzC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,QAAQ,EAAE,CAAC;YAC/C,MAAM,EAAE,mBAAmB;YAC3B,wBAAwB,EAAE,CAAC,mCAAmC,CAAC;SAChE,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,CACzB,2MAA2M,CAC5M,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC;QACzB,8EAA8E;QAC9E,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;CACF"}

package/dist/env-mask.d.ts

@@ -0,0 +1,17 @@
+/** The mask every surface shows for a hidden environment value. */
+export declare const ENV_MASK = "\u2022\u2022\u2022\u2022";
+/**
+ * Mask an environment value for display: values of eight characters or
+ * fewer are hidden entirely, longer ones show their first four characters.
+ * One rule for the API listing, the dashboard's paste preview and the CLI,
+ * which used to disagree (the CLI returned values of eight characters or
+ * fewer unmasked; the dashboard showed two characters).
+ */
+export declare function maskEnvValue(value: string): string;
+/**
+ * True for a string shaped like `maskEnvValue`'s output. A client that
+ * re-masks what the API already masked uses this to leave the API's
+ * four-character hint intact instead of collapsing it to the bare mask.
+ */
+export declare function isMaskedEnvValue(value: string): boolean;
+//# sourceMappingURL=env-mask.d.ts.map

package/dist/env-mask.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-mask.d.ts","sourceRoot":"","sources":["../src/env-mask.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,eAAO,MAAM,QAAQ,6BAAS,CAAC;AAE/B;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGlD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEvD"}

package/dist/env-mask.js

@@ -0,0 +1,23 @@
+/** The mask every surface shows for a hidden environment value. */
+export const ENV_MASK = "••••";
+/**
+ * Mask an environment value for display: values of eight characters or
+ * fewer are hidden entirely, longer ones show their first four characters.
+ * One rule for the API listing, the dashboard's paste preview and the CLI,
+ * which used to disagree (the CLI returned values of eight characters or
+ * fewer unmasked; the dashboard showed two characters).
+ */
+export function maskEnvValue(value) {
+    if (value.length <= 8)
+        return ENV_MASK;
+    return `${value.slice(0, 4)}${ENV_MASK}`;
+}
+/**
+ * True for a string shaped like `maskEnvValue`'s output. A client that
+ * re-masks what the API already masked uses this to leave the API's
+ * four-character hint intact instead of collapsing it to the bare mask.
+ */
+export function isMaskedEnvValue(value) {
+    return /^[^•]{0,4}••••$/.test(value);
+}
+//# sourceMappingURL=env-mask.js.map

package/dist/env-mask.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-mask.js","sourceRoot":"","sources":["../src/env-mask.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE/B;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,QAAQ,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC"}

package/dist/env-name.d.ts

@@ -0,0 +1,25 @@
+/**
+ * An environment variable NAME as Percher stores and injects it: uppercase
+ * letters, digits and underscores, not starting with a digit, 1 to 256
+ * characters. The length is part of the pattern so a copy cannot carry the
+ * alphabet and forget the bound.
+ *
+ * This is the API's rule (`PUT /apps/:app/env`), so it is the contract: a
+ * client that accepts more sends a batch the API refuses whole, and one that
+ * accepts less hides a name the API would have stored.
+ *
+ * The API and the dashboard import it. `@percher/toml` (`ENV_NAME_RE`) and
+ * `@percher/client` (`KEY_PATTERN` in env-file.ts) carry the same pattern by
+ * value; they import this one once a shared release carries it (cross-package
+ * exports move with version bumps). `packages/shared/test/env-name.test.ts`
+ * fails if the texts drift.
+ *
+ * Two rules are wider on purpose and are NOT copies:
+ * - the worker's run-payload guard also admits lowercase, because the platform
+ *   injects `http_proxy`/`https_proxy`/`no_proxy` and because a name stored
+ *   before the API required uppercase must still reach its container;
+ * - `isEnvKey` in `@percher/core` validates names the API REPORTS, and the
+ *   source scanner reports references in whatever case the source wrote.
+ */
+export declare const ENV_NAME_RE: RegExp;
+//# sourceMappingURL=env-name.d.ts.map

package/dist/env-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-name.d.ts","sourceRoot":"","sources":["../src/env-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,WAAW,QAA6B,CAAC"}

package/dist/env-name.js

@@ -0,0 +1,25 @@
+/**
+ * An environment variable NAME as Percher stores and injects it: uppercase
+ * letters, digits and underscores, not starting with a digit, 1 to 256
+ * characters. The length is part of the pattern so a copy cannot carry the
+ * alphabet and forget the bound.
+ *
+ * This is the API's rule (`PUT /apps/:app/env`), so it is the contract: a
+ * client that accepts more sends a batch the API refuses whole, and one that
+ * accepts less hides a name the API would have stored.
+ *
+ * The API and the dashboard import it. `@percher/toml` (`ENV_NAME_RE`) and
+ * `@percher/client` (`KEY_PATTERN` in env-file.ts) carry the same pattern by
+ * value; they import this one once a shared release carries it (cross-package
+ * exports move with version bumps). `packages/shared/test/env-name.test.ts`
+ * fails if the texts drift.
+ *
+ * Two rules are wider on purpose and are NOT copies:
+ * - the worker's run-payload guard also admits lowercase, because the platform
+ *   injects `http_proxy`/`https_proxy`/`no_proxy` and because a name stored
+ *   before the API required uppercase must still reach its container;
+ * - `isEnvKey` in `@percher/core` validates names the API REPORTS, and the
+ *   source scanner reports references in whatever case the source wrote.
+ */
+export const ENV_NAME_RE = /^[A-Z_][A-Z0-9_]{0,255}$/;
+//# sourceMappingURL=env-name.js.map

package/dist/env-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-name.js","sourceRoot":"","sources":["../src/env-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,0BAA0B,CAAC"}

package/dist/escape-html.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Escape text for interpolation into HTML (or XML) markup: the five
+ * characters that can end a text node or an attribute value. One copy for
+ * every process; the six hand-rolled variants it replaces disagreed on
+ * whether quotes were escaped, which is the difference between a name that
+ * is safe in a text node and one that is also safe inside an attribute.
+ * Pure string work, so the barrel can carry it into browser bundles.
+ */
+export declare function escapeHtml(value: string): string;
+//# sourceMappingURL=escape-html.d.ts.map

package/dist/escape-html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"escape-html.d.ts","sourceRoot":"","sources":["../src/escape-html.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOhD"}

package/dist/escape-html.js

@@ -0,0 +1,17 @@
+/**
+ * Escape text for interpolation into HTML (or XML) markup: the five
+ * characters that can end a text node or an attribute value. One copy for
+ * every process; the six hand-rolled variants it replaces disagreed on
+ * whether quotes were escaped, which is the difference between a name that
+ * is safe in a text node and one that is also safe inside an attribute.
+ * Pure string work, so the barrel can carry it into browser bundles.
+ */
+export function escapeHtml(value) {
+    return value
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&#39;");
+}
+//# sourceMappingURL=escape-html.js.map

package/dist/escape-html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escape-html.js","sourceRoot":"","sources":["../src/escape-html.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC"}

package/dist/image-rejection.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Why a moderator turned down an owner-uploaded image. The API stores the
+ * stable `code`; the label is looked up when it is shown, so its wording
+ * can change without touching stored rows. Labels are written for the app
+ * owner, who reads them on their app's Settings page.
+ */
+export type ImageKind = "icon" | "preview";
+export declare const IMAGE_REJECTION_REASONS: readonly [{
+    readonly code: "not_screenshot";
+    readonly label: "Not a screenshot of the app (logo or marketing image)";
+    readonly kinds: readonly ["preview"];
+}, {
+    readonly code: "login_or_empty";
+    readonly label: "Shows only a login or empty screen";
+    readonly kinds: readonly ["preview"];
+}, {
+    readonly code: "personal_data";
+    readonly label: "Contains personal data";
+    readonly kinds: readonly ["icon", "preview"];
+}, {
+    readonly code: "unreadable";
+    readonly label: "Too small or unreadable";
+    readonly kinds: readonly ["icon", "preview"];
+}, {
+    readonly code: "mismatch";
+    readonly label: "Does not match the app";
+    readonly kinds: readonly ["icon", "preview"];
+}, {
+    readonly code: "aup";
+    readonly label: "Breaks the Acceptable Use Policy";
+    readonly kinds: readonly ["icon", "preview"];
+}];
+export type ImageRejectionCode = (typeof IMAGE_REJECTION_REASONS)[number]["code"];
+/** The longest moderator note (or legacy free-text reason) the API stores. */
+export declare const IMAGE_REJECTION_NOTE_MAX = 280;
+/** The reasons a moderator may pick for this kind of image, in display order. */
+export declare function imageRejectionReasons(kind: ImageKind): {
+    code: ImageRejectionCode;
+    label: string;
+}[];
+/** The owner-facing label for a stored code; null for an unknown or absent code. */
+export declare function imageRejectionLabel(code: string | null | undefined): string | null;
+/** True when `code` is a reason a moderator may pick for this kind of image. */
+export declare function isImageRejectionCode(kind: ImageKind, code: unknown): code is ImageRejectionCode;
+//# sourceMappingURL=image-rejection.d.ts.map

package/dist/image-rejection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-rejection.d.ts","sourceRoot":"","sources":["../src/image-rejection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAE3C,eAAO,MAAM,uBAAuB;mBAE1B,gBAAgB;oBACf,uDAAuD;;;mBAGxD,gBAAgB;oBAAS,oCAAoC;;;mBAC7D,eAAe;oBAAS,wBAAwB;;;mBAChD,YAAY;oBAAS,yBAAyB;;;mBAC9C,UAAU;oBAAS,wBAAwB;;;mBAC3C,KAAK;oBAAS,kCAAkC;;EACkC,CAAC;AAE7F,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;AAElF,8EAA8E;AAC9E,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAE5C,iFAAiF;AACjF,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,SAAS,GACd;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,CAI/C;AAED,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAElF;AAED,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,kBAAkB,CAE/F"}

package/dist/image-rejection.js

@@ -0,0 +1,27 @@
+export const IMAGE_REJECTION_REASONS = [
+    {
+        code: "not_screenshot",
+        label: "Not a screenshot of the app (logo or marketing image)",
+        kinds: ["preview"],
+    },
+    { code: "login_or_empty", label: "Shows only a login or empty screen", kinds: ["preview"] },
+    { code: "personal_data", label: "Contains personal data", kinds: ["icon", "preview"] },
+    { code: "unreadable", label: "Too small or unreadable", kinds: ["icon", "preview"] },
+    { code: "mismatch", label: "Does not match the app", kinds: ["icon", "preview"] },
+    { code: "aup", label: "Breaks the Acceptable Use Policy", kinds: ["icon", "preview"] },
+];
+/** The longest moderator note (or legacy free-text reason) the API stores. */
+export const IMAGE_REJECTION_NOTE_MAX = 280;
+/** The reasons a moderator may pick for this kind of image, in display order. */
+export function imageRejectionReasons(kind) {
+    return IMAGE_REJECTION_REASONS.filter((r) => r.kinds.includes(kind)).map(({ code, label }) => ({ code, label }));
+}
+/** The owner-facing label for a stored code; null for an unknown or absent code. */
+export function imageRejectionLabel(code) {
+    return IMAGE_REJECTION_REASONS.find((r) => r.code === code)?.label ?? null;
+}
+/** True when `code` is a reason a moderator may pick for this kind of image. */
+export function isImageRejectionCode(kind, code) {
+    return imageRejectionReasons(kind).some((r) => r.code === code);
+}
+//# sourceMappingURL=image-rejection.js.map

package/dist/image-rejection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-rejection.js","sourceRoot":"","sources":["../src/image-rejection.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC;QACE,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,uDAAuD;QAC9D,KAAK,EAAE,CAAC,SAAS,CAAC;KACnB;IACD,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,oCAAoC,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE;IAC3F,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE;IACtF,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE;IACpF,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE;IACjF,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE;CACI,CAAC;AAI7F,8EAA8E;AAC9E,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAE5C,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CACnC,IAAe;IAEf,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACzC,CAAC,CAAC,KAA8B,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjD,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,IAA+B;IACjE,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;AAC7E,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,oBAAoB,CAAC,IAAe,EAAE,IAAa;IACjE,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAClE,CAAC"}

package/dist/index.d.ts

@@ -1,17 +1,31 @@
 export { APP_NAME_RE } from "./app-name.js";
+export { BILLING_TEST_ACCOUNTS_ENV, isBillingTestAccount, parseBillingTestAccounts, } from "./billing-test-accounts.js";
 export { BRAND, ICON_COLOURS, type IconColourKey, iconColourHex } from "./brand.js";
 export { CLIENT_IP_ATTESTATION_MAX_SKEW_MS, CLIENT_IP_ATTESTATION_VERSION, CLIENT_IP_HEADER, CLIENT_IP_MAX_LENGTH, CLIENT_IP_PROOF_HEADER, type ClientIpAttestationParts, clientIpAttestationPayload, formatClientIpProof, parseClientIpProof, } from "./client-ip-attestation.js";
+export { crashAssistantPrompt } from "./crash-prompt.js";
+export { type DataExpressionErrorReason, type DataExpressionResult, type DataQueryInvalidExtra, type DataSchemaField, parseDataFields, parseDataFilter, parseDataSort, } from "./data-filter.js";
+export { DATA_ACCESS_MODES, DATA_ACCESS_SCOPES, DATA_ACCESS_SETTER_ERROR_STATUS, DATA_ACT_AS_UNAVAILABLE_REASONS, DATA_ACTING_AS, DATA_COLLECTION_RE, DATA_IDENTITY_KINDS, DATA_IDENTITY_LABEL_FIELD_TYPES, DATA_IDENTITY_LABELS, DATA_LIMITS, DATA_NOT_RUNNING_REASONS, DATA_RATE_LIMIT_SOURCES, DATA_RECORD_ERROR_STATUS, DATA_RECORD_ID_RE, DATA_RULE_CLASSES, DATA_RULE_DENIED_REASONS, DATA_RULE_OPS, type DataAccess, type DataAccessMode, type DataAccessNoticePayload, type DataAccessScope, type DataAccessSet, type DataAccessSetterErrorCode, type DataAccessUpdate, type DataActAsUnavailableExtra, type DataActAsUnavailableReason, type DataActingAs, type DataCollectionAccess, type DataCollectionSummary, type DataConflictExtra, type DataCreateInput, type DataFieldSummary, type DataIdentity, type DataIdentityCandidatesRequest, type DataIdentityCandidatesResponse, type DataIdentityCollection, type DataIdentityLabelFieldType, type DataNotRunningReason, type DataPaginatedRecords, type DataQueryOptions, type DataRateLimitedExtra, type DataRateLimitSource, type DataRecord, type DataRecordErrorCode, type DataRuleClass, type DataRuleDeniedExtra, type DataRuleDeniedReason, type DataRuleOp, type DataSchemaResponse, type DataTokenAccessNoticePayload, type DataTokenAccessRow, type DataTokenAccessUpdate, type DataUpdateInput, type DataValidationFields, type OAuthGrantsDataTools, } from "./data-records.js";
+export { disposableDomainCount, isDisposableEmailDomain } from "./disposable-email-domains.js";
+export { DOMAIN_RE } from "./domain-name.js";
+export { EMAIL_BUDGET_LIMITS, EMAIL_BUDGET_SCHEMA, EmailBudget, type EmailBudgetConnection, type EmailCategory, } from "./email-budget.js";
+export { ENV_MASK, isMaskedEnvValue, maskEnvValue } from "./env-mask.js";
+export { ENV_NAME_RE } from "./env-name.js";
+export { escapeHtml } from "./escape-html.js";
+export { IMAGE_REJECTION_NOTE_MAX, IMAGE_REJECTION_REASONS, type ImageKind, type ImageRejectionCode, imageRejectionLabel, imageRejectionReasons, isImageRejectionCode, } from "./image-rejection.js";
 export { INTERNAL_SIG_HEADER, INTERNAL_SIG_MAX_SKEW_MS, INTERNAL_SIG_VERSION, INTERNAL_TS_HEADER, type InternalSigParts, internalSigPayload, } from "./internal-sig.js";
 export { CURRENT_TERMS_VERSION, LEGAL_DOCUMENT_HASHES, LEGAL_DOCUMENT_LAST_UPDATED, LEGAL_DOCUMENT_VERSIONS, type TermsAcceptanceEvidence, } from "./legal.js";
 export { canonicalLegalChangeJson, compareVersions, declaredVersion, LEGAL_CHANGE_ID_PATTERN, LEGAL_CHANGES, LEGAL_VERSION_PATTERN, type LegalChange, type LegalChangeDocument, type LegalChangeEnforcement, type LegalChangeReason, type LegalDocumentKey, MATERIAL_CHANGE_NOTICE_MS, openMaterialChanges, pendingAcknowledgement, SIGNUP_DISCLOSURE_HEADER, } from "./legal-changes.js";
 export { MAX_ANON_TARBALL_BYTES, MAX_INLINE_PUBLISH_BYTES, MAX_OPEN_UPLOAD_SESSIONS_PER_USER, MAX_TARBALL_BYTES, MAX_UPLOAD_CHUNK_BYTES, MAX_UPLOAD_SESSION_FILES, MIN_UPLOAD_CHUNK_BYTES, UPLOAD_SESSION_MAX_LIFETIME_MS, UPLOAD_SESSION_TTL_MS, } from "./limits.js";
 export { MAX_LOG_SEARCH_LENGTH } from "./logs.js";
 export { MAX_OAUTH_CLIENT_NAME_DISPLAY_CODE_POINTS, normaliseOAuthClientName, } from "./oauth-client-name.js";
-export { describeOAuthScope, OAUTH_SCOPE_LABELS, parseOAuthScopes } from "./oauth-scopes.js";
+export { DATA_ACCESS_MODE_LABELS, describeOAuthScope, OAUTH_SCOPE_LABELS, parseOAuthScopes, } from "./oauth-scopes.js";
 export { DEFAULT_DOMAIN_SUFFIX, DEFAULT_MCP_HTTP_PORT, DEFAULT_POCKETBASE_IMAGE, MCP_TOOL_COUNT_HOSTED, MCP_TOOL_COUNT_LOCAL, } from "./platform.js";
 export { canonicalInjectedKey, isPercherInjected, PERCHER_INJECTED_ENV_KEYS, } from "./platform-env.js";
 export { DEFAULT_NODE_VERSION_LABEL, DEFAULT_NODE_VERSION_MAJOR } from "./runtime.js";
+export { parseSignupCapacity, SIGNUP_CAPACITY_MAX_AGE_MS, SIGNUP_CAPACITY_MESSAGE, type SignupCapacityReason, type SignupCapacityState, } from "./signup-capacity.js";
+export { signupDayWindow } from "./signup-day.js";
 export { normalizeSignupInviteCode, SIGNUP_INVITE_CODE_ALPHABET, SIGNUP_INVITE_CODE_LENGTH, SIGNUP_INVITE_CODE_PREFIX, SIGNUP_INVITE_HEADER, } from "./signup-invite.js";
+export { assertValidSwitches, type BooleanSwitch, type EnumSwitch, type PresenceSwitch, reportSwitches, SWITCH_BY_NAME, SWITCHES, type SwitchReader, type SwitchReport, type SwitchSpec, type SwitchState, switchEnabled, switchState, switchValue, } from "./switches.js";
 export { BUN_MAX_IDLE_TIMEOUT_SECONDS, HTTP_IDLE_TIMEOUT_SECONDS, type HttpIdleTimeoutSurface, TIMEOUTS, type TimeoutKey, } from "./timeouts.js";
 export { WAITLIST_THROTTLE_WINDOW_MS } from "./waitlist.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,EACvB,KAAK,uBAAuB,GAC7B,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,iCAAiC,EACjC,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,KAAK,sBAAsB,EAC3B,QAAQ,EACR,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EACL,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,eAAe,EACf,eAAe,EACf,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,+BAA+B,EAC/B,+BAA+B,EAC/B,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,+BAA+B,EAC/B,oBAAoB,EACpB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACxB,aAAa,EACb,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,EACnC,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,KAAK,4BAA4B,EACjC,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACX,KAAK,qBAAqB,EAC1B,KAAK,aAAa,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,EACvB,KAAK,uBAAuB,GAC7B,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,iCAAiC,EACjC,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,cAAc,EACd,cAAc,EACd,QAAQ,EACR,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,aAAa,EACb,WAAW,EACX,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,KAAK,sBAAsB,EAC3B,QAAQ,EACR,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,17 +1,31 @@
 export { APP_NAME_RE } from "./app-name.js";
+export { BILLING_TEST_ACCOUNTS_ENV, isBillingTestAccount, parseBillingTestAccounts, } from "./billing-test-accounts.js";
 export { BRAND, ICON_COLOURS, iconColourHex } from "./brand.js";
 export { CLIENT_IP_ATTESTATION_MAX_SKEW_MS, CLIENT_IP_ATTESTATION_VERSION, CLIENT_IP_HEADER, CLIENT_IP_MAX_LENGTH, CLIENT_IP_PROOF_HEADER, clientIpAttestationPayload, formatClientIpProof, parseClientIpProof, } from "./client-ip-attestation.js";
+export { crashAssistantPrompt } from "./crash-prompt.js";
+export { parseDataFields, parseDataFilter, parseDataSort, } from "./data-filter.js";
+export { DATA_ACCESS_MODES, DATA_ACCESS_SCOPES, DATA_ACCESS_SETTER_ERROR_STATUS, DATA_ACT_AS_UNAVAILABLE_REASONS, DATA_ACTING_AS, DATA_COLLECTION_RE, DATA_IDENTITY_KINDS, DATA_IDENTITY_LABEL_FIELD_TYPES, DATA_IDENTITY_LABELS, DATA_LIMITS, DATA_NOT_RUNNING_REASONS, DATA_RATE_LIMIT_SOURCES, DATA_RECORD_ERROR_STATUS, DATA_RECORD_ID_RE, DATA_RULE_CLASSES, DATA_RULE_DENIED_REASONS, DATA_RULE_OPS, } from "./data-records.js";
+export { disposableDomainCount, isDisposableEmailDomain } from "./disposable-email-domains.js";
+export { DOMAIN_RE } from "./domain-name.js";
+export { EMAIL_BUDGET_LIMITS, EMAIL_BUDGET_SCHEMA, EmailBudget, } from "./email-budget.js";
+export { ENV_MASK, isMaskedEnvValue, maskEnvValue } from "./env-mask.js";
+export { ENV_NAME_RE } from "./env-name.js";
+export { escapeHtml } from "./escape-html.js";
+export { IMAGE_REJECTION_NOTE_MAX, IMAGE_REJECTION_REASONS, imageRejectionLabel, imageRejectionReasons, isImageRejectionCode, } from "./image-rejection.js";
 export { INTERNAL_SIG_HEADER, INTERNAL_SIG_MAX_SKEW_MS, INTERNAL_SIG_VERSION, INTERNAL_TS_HEADER, internalSigPayload, } from "./internal-sig.js";
 export { CURRENT_TERMS_VERSION, LEGAL_DOCUMENT_HASHES, LEGAL_DOCUMENT_LAST_UPDATED, LEGAL_DOCUMENT_VERSIONS, } from "./legal.js";
 export { canonicalLegalChangeJson, compareVersions, declaredVersion, LEGAL_CHANGE_ID_PATTERN, LEGAL_CHANGES, LEGAL_VERSION_PATTERN, MATERIAL_CHANGE_NOTICE_MS, openMaterialChanges, pendingAcknowledgement, SIGNUP_DISCLOSURE_HEADER, } from "./legal-changes.js";
 export { MAX_ANON_TARBALL_BYTES, MAX_INLINE_PUBLISH_BYTES, MAX_OPEN_UPLOAD_SESSIONS_PER_USER, MAX_TARBALL_BYTES, MAX_UPLOAD_CHUNK_BYTES, MAX_UPLOAD_SESSION_FILES, MIN_UPLOAD_CHUNK_BYTES, UPLOAD_SESSION_MAX_LIFETIME_MS, UPLOAD_SESSION_TTL_MS, } from "./limits.js";
 export { MAX_LOG_SEARCH_LENGTH } from "./logs.js";
 export { MAX_OAUTH_CLIENT_NAME_DISPLAY_CODE_POINTS, normaliseOAuthClientName, } from "./oauth-client-name.js";
-export { describeOAuthScope, OAUTH_SCOPE_LABELS, parseOAuthScopes } from "./oauth-scopes.js";
+export { DATA_ACCESS_MODE_LABELS, describeOAuthScope, OAUTH_SCOPE_LABELS, parseOAuthScopes, } from "./oauth-scopes.js";
 export { DEFAULT_DOMAIN_SUFFIX, DEFAULT_MCP_HTTP_PORT, DEFAULT_POCKETBASE_IMAGE, MCP_TOOL_COUNT_HOSTED, MCP_TOOL_COUNT_LOCAL, } from "./platform.js";
 export { canonicalInjectedKey, isPercherInjected, PERCHER_INJECTED_ENV_KEYS, } from "./platform-env.js";
 export { DEFAULT_NODE_VERSION_LABEL, DEFAULT_NODE_VERSION_MAJOR } from "./runtime.js";
+export { parseSignupCapacity, SIGNUP_CAPACITY_MAX_AGE_MS, SIGNUP_CAPACITY_MESSAGE, } from "./signup-capacity.js";
+export { signupDayWindow } from "./signup-day.js";
 export { normalizeSignupInviteCode, SIGNUP_INVITE_CODE_ALPHABET, SIGNUP_INVITE_CODE_LENGTH, SIGNUP_INVITE_CODE_PREFIX, SIGNUP_INVITE_HEADER, } from "./signup-invite.js";
+export { assertValidSwitches, reportSwitches, SWITCH_BY_NAME, SWITCHES, switchEnabled, switchState, switchValue, } from "./switches.js";
 export { BUN_MAX_IDLE_TIMEOUT_SECONDS, HTTP_IDLE_TIMEOUT_SECONDS, TIMEOUTS, } from "./timeouts.js";
 export { WAITLIST_THROTTLE_WINDOW_MS } from "./waitlist.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAsB,aAAa,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EAEtB,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAElB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,GAExB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EAMrB,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,iCAAiC,EACjC,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EAEzB,QAAQ,GAET,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAsB,aAAa,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EAEtB,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAKL,eAAe,EACf,eAAe,EACf,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,+BAA+B,EAC/B,+BAA+B,EAC/B,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,+BAA+B,EAC/B,oBAAoB,EACpB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACxB,aAAa,GAuCd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,GAGZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EAGvB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAElB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,GAExB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EAMrB,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,iCAAiC,EACjC,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,GAGxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EAInB,cAAc,EACd,cAAc,EACd,QAAQ,EAKR,aAAa,EACb,WAAW,EACX,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EAEzB,QAAQ,GAET,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC"}

package/dist/internal-sig.d.ts

@@ -8,8 +8,8 @@
  * window, and the raw secret never has to ride on the wire once enforce is on.
  *
  * This module is the single source of truth for the canonical string both sides
- * HMAC, so the API verifier and every signer (the dashboard today; the external
- * CLABBE runner per docs/integrations/CLABBE_SECURITY_INGEST.md) can't drift. It
+ * HMAC, so the API verifier and every signer (the dashboard and the external
+ * security runner, per the security-ingest contract in docs/integrations) can't drift. It
  * is dependency-free on purpose — no crypto here — so it bundles cleanly into the
  * dashboard (Node) as well as the API (Bun). Each side wraps it with its own
  * `node:crypto` HMAC.

package/dist/internal-sig.js

@@ -8,8 +8,8 @@
  * window, and the raw secret never has to ride on the wire once enforce is on.
  *
  * This module is the single source of truth for the canonical string both sides
- * HMAC, so the API verifier and every signer (the dashboard today; the external
- * CLABBE runner per docs/integrations/CLABBE_SECURITY_INGEST.md) can't drift. It
+ * HMAC, so the API verifier and every signer (the dashboard and the external
+ * security runner, per the security-ingest contract in docs/integrations) can't drift. It
  * is dependency-free on purpose — no crypto here — so it bundles cleanly into the
  * dashboard (Node) as well as the API (Bun). Each side wraps it with its own
  * `node:crypto` HMAC.

package/dist/legal-changes.d.ts

@@ -46,9 +46,9 @@ export interface LegalChange {
     materiality: "material" | "editorial";
     reason: LegalChangeReason;
     enforcement: LegalChangeEnforcement;
-    /** ISO instant, UTC. When the notice may start going out. */
+    /** ISO instant, UTC. First send instant of the notice batch. */
     announceAt: string;
-    /** ISO instant, UTC. When the new documents govern. */
+    /** ISO instant, UTC. Existing-account effect; material changes need 30 full days after the last send. */
     effectiveAt: string;
     /** Every document whose version header moves in this change. */
     documents: readonly LegalChangeDocument[];
@@ -62,12 +62,10 @@ export interface LegalChange {
     };
     /** Set when the same change also modifies the Service itself (2019/770 Art. 19). */
     modifiesService?: boolean;
+    /** This change governs new accounts from signup, before the existing-account date. */
+    appliesToNewAccountsFromSignup?: boolean;
 }
-/**
- * Newest last. Empty because version 1.0 is the first publication under
- * Kaizensu AB: there is no earlier version to have changed from, so the chain
- * starts here rather than being backfilled with a notice nobody was owed.
- */
+/** Newest last. Editorial corrections record the published document history. */
 export declare const LEGAL_CHANGES: readonly LegalChange[];
 /**
  * Header carrying the change ids the signup form actually rendered.