@percher/shared 1.1.0 → 1.2.0

package/dist/email-budget.d.ts

@@ -0,0 +1,60 @@
+/** Resend free tier: 100/day, 3,000/month. UTC calendar windows. */
+export declare const EMAIL_BUDGET_LIMITS: {
+    readonly daily: 95;
+    readonly monthly: 2900;
+    readonly notificationDaily: 45;
+    readonly crashPerAppDaily: 3;
+};
+export type EmailCategory = "auth" | "operator" | "legal" | "notification";
+interface EmailBudgetCounts {
+    total: number;
+    auth: number;
+    operator: number;
+    legal: number;
+    notification: number;
+}
+export interface EmailBudgetConnection {
+    run(query: string, params?: (string | number)[]): void;
+    /** Drizzle's raw Bun SQLite queries return positional rows. */
+    get<T extends unknown[]>(query: string, params?: (string | number)[]): T | undefined;
+}
+interface EmailBudgetDatabase extends EmailBudgetConnection {
+    immediate<T>(work: (connection: EmailBudgetConnection) => T): T;
+}
+interface EmailBudgetDecision {
+    allowed: boolean;
+    category: EmailCategory;
+    dayKey: string;
+    reason?: "notification_daily" | "daily" | "monthly" | "crash_daily";
+    overCeiling: boolean;
+}
+/** Dashboard-only startup must coexist with the API's migration. */
+export declare const EMAIL_BUDGET_SCHEMA = "\nCREATE TABLE IF NOT EXISTS email_budget_counters (\n  period TEXT PRIMARY KEY NOT NULL,\n  total INTEGER NOT NULL DEFAULT 0,\n  auth INTEGER NOT NULL DEFAULT 0,\n  operator INTEGER NOT NULL DEFAULT 0,\n  legal INTEGER NOT NULL DEFAULT 0,\n  notification INTEGER NOT NULL DEFAULT 0,\n  warning INTEGER NOT NULL DEFAULT 0\n);\nCREATE TABLE IF NOT EXISTS email_budget_crashes (\n  day TEXT NOT NULL,\n  app_id TEXT NOT NULL,\n  count INTEGER NOT NULL DEFAULT 0,\n  PRIMARY KEY (day, app_id)\n);";
+/** Attempts, not successful deliveries: uncertain sends never release capacity. */
+export declare class EmailBudget {
+    private readonly db;
+    private readonly now;
+    onWarning?: (usage: ReturnType<EmailBudget["usage"]>) => Promise<unknown>;
+    constructor(db: EmailBudgetDatabase, now?: () => Date);
+    reserve(category: EmailCategory, options?: {
+        count?: number;
+        crashAppId?: string;
+    }): EmailBudgetDecision;
+    usage(at?: Date): {
+        dayKey: string;
+        monthKey: string;
+        day: EmailBudgetCounts;
+        month: EmailBudgetCounts;
+        limits: {
+            readonly daily: 95;
+            readonly monthly: 2900;
+            readonly notificationDaily: 45;
+            readonly crashPerAppDaily: 3;
+        };
+        uncountedOperatorSenders: string[];
+    };
+    /** The dashboard leaves a durable pending warning; API monitoring drains it. */
+    dispatchWarning(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=email-budget.d.ts.map

package/dist/email-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-budget.d.ts","sourceRoot":"","sources":["../src/email-budget.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,eAAO,MAAM,mBAAmB;aAC9B,KAAK,EAAE,EAAE;aACT,OAAO,EAAE,IAAK;aACd,iBAAiB,EAAE,EAAE;aACrB,gBAAgB,EAAE,CAAC;CACX,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,GAAG,cAAc,CAAC;AAC3E,UAAU,iBAAiB;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC;IACvD,+DAA+D;IAC/D,GAAG,CAAC,CAAC,SAAS,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;CACtF;AACD,UAAU,mBAAoB,SAAQ,qBAAqB;IACzD,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,qBAAqB,KAAK,CAAC,GAAG,CAAC,CAAC;CACjE;AACD,UAAU,mBAAmB;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,oBAAoB,GAAG,OAAO,GAAG,SAAS,GAAG,aAAa,CAAC;IACpE,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,oEAAoE;AACpE,eAAO,MAAM,mBAAmB,kfAe7B,CAAC;AAoBJ,mFAAmF;AACnF,qBAAa,WAAW;IAIpB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAJtB,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAE1E,YACmB,EAAE,EAAE,mBAAmB,EACvB,GAAG,GAAE,MAAM,IAAuB,EACjD;IAEJ,OAAO,CACL,QAAQ,EAAE,aAAa,EACvB,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GACpD,mBAAmB,CAgErB;IAED,KAAK,CAAC,EAAE,OAAa;;;;;;4BAhJd,EAAE;8BACA,IAAK;wCACK,EAAE;uCACH,CAAC;;;MAwJlB;IAED,gFAAgF;IAC1E,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAarC;CACF"}

package/dist/email-budget.js

@@ -0,0 +1,135 @@
+/** Resend free tier: 100/day, 3,000/month. UTC calendar windows. */
+export const EMAIL_BUDGET_LIMITS = {
+    daily: 95,
+    monthly: 2_900,
+    notificationDaily: 45,
+    crashPerAppDaily: 3,
+};
+/** Dashboard-only startup must coexist with the API's migration. */
+export const EMAIL_BUDGET_SCHEMA = `
+CREATE TABLE IF NOT EXISTS email_budget_counters (
+  period TEXT PRIMARY KEY NOT NULL,
+  total INTEGER NOT NULL DEFAULT 0,
+  auth INTEGER NOT NULL DEFAULT 0,
+  operator INTEGER NOT NULL DEFAULT 0,
+  legal INTEGER NOT NULL DEFAULT 0,
+  notification INTEGER NOT NULL DEFAULT 0,
+  warning INTEGER NOT NULL DEFAULT 0
+);
+CREATE TABLE IF NOT EXISTS email_budget_crashes (
+  day TEXT NOT NULL,
+  app_id TEXT NOT NULL,
+  count INTEGER NOT NULL DEFAULT 0,
+  PRIMARY KEY (day, app_id)
+);`;
+const emptyCounts = () => ({
+    total: 0,
+    auth: 0,
+    operator: 0,
+    legal: 0,
+    notification: 0,
+});
+function readCounts(db, period) {
+    const row = db.get("SELECT total, auth, operator, legal, notification FROM email_budget_counters WHERE period = ?", [period]);
+    if (!row)
+        return emptyCounts();
+    const [total, auth, operator, legal, notification] = row;
+    return { total, auth, operator, legal, notification };
+}
+/** Attempts, not successful deliveries: uncertain sends never release capacity. */
+export class EmailBudget {
+    db;
+    now;
+    onWarning;
+    constructor(db, now = () => new Date()) {
+        this.db = db;
+        this.now = now;
+    }
+    reserve(category, options = {}) {
+        if (!["auth", "operator", "legal", "notification"].includes(category))
+            throw new Error("Invalid email category");
+        const count = options.count ?? 1;
+        if (!Number.isSafeInteger(count) || count < 1)
+            throw new Error("Invalid email recipient count");
+        if (options.crashAppId !== undefined && (category !== "notification" || !options.crashAppId))
+            throw new Error("Invalid crash email category or app");
+        const dayKey = this.now().toISOString().slice(0, 10);
+        const periods = [`day:${dayKey}`, `month:${dayKey.slice(0, 7)}`];
+        const decision = this.db.immediate((db) => {
+            for (const period of periods)
+                db.run("INSERT OR IGNORE INTO email_budget_counters (period) VALUES (?)", [period]);
+            const day = readCounts(db, periods[0]);
+            const month = readCounts(db, periods[1]);
+            const reason = day.total + count > EMAIL_BUDGET_LIMITS.daily
+                ? "daily"
+                : month.total + count > EMAIL_BUDGET_LIMITS.monthly
+                    ? "monthly"
+                    : category === "notification" &&
+                        day.notification + count > EMAIL_BUDGET_LIMITS.notificationDaily
+                        ? "notification_daily"
+                        : undefined;
+            if (category === "notification" && reason)
+                return { allowed: false, category, dayKey, reason, overCeiling: false };
+            if (options.crashAppId !== undefined) {
+                const crash = db.get("SELECT count FROM email_budget_crashes WHERE day = ? AND app_id = ?", [dayKey, options.crashAppId]);
+                if ((crash?.[0] ?? 0) >= EMAIL_BUDGET_LIMITS.crashPerAppDaily)
+                    return {
+                        allowed: false,
+                        category,
+                        dayKey,
+                        reason: "crash_daily",
+                        overCeiling: false,
+                    };
+                db.run("INSERT INTO email_budget_crashes (day, app_id, count) VALUES (?, ?, 1) ON CONFLICT(day, app_id) DO UPDATE SET count = count + 1", [dayKey, options.crashAppId]);
+            }
+            for (const period of periods)
+                db.run(`UPDATE email_budget_counters SET total = total + ?, ${category} = ${category} + ? WHERE period = ?`, [count, count, period]);
+            if (reason)
+                db.run("UPDATE email_budget_counters SET warning = 1 WHERE period = ? AND warning = 0", [
+                    periods[0],
+                ]);
+            return { allowed: true, category, dayKey, reason, overCeiling: reason !== undefined };
+        });
+        if (!decision.allowed || decision.overCeiling) {
+            const line = JSON.stringify({
+                event: decision.allowed ? "email_budget_priority_overflow" : "email_budget_skipped",
+                ...decision,
+                crashAppId: options.crashAppId,
+            });
+            if (decision.overCeiling)
+                console.error(line);
+            else
+                console.warn(line);
+        }
+        return decision;
+    }
+    usage(at = this.now()) {
+        const dayKey = at.toISOString().slice(0, 10);
+        const monthKey = dayKey.slice(0, 7);
+        return {
+            dayKey,
+            monthKey,
+            day: readCounts(this.db, `day:${dayKey}`),
+            month: readCounts(this.db, `month:${monthKey}`),
+            limits: EMAIL_BUDGET_LIMITS,
+            uncountedOperatorSenders: ["infra/scripts/lib/backup-alert.py"],
+        };
+    }
+    /** The dashboard leaves a durable pending warning; API monitoring drains it. */
+    async dispatchWarning() {
+        if (!this.onWarning)
+            return;
+        const claimed = this.db.get("UPDATE email_budget_counters SET warning = 2 WHERE period = (SELECT period FROM email_budget_counters WHERE period LIKE 'day:%' AND warning = 1 ORDER BY period LIMIT 1) AND warning = 1 RETURNING period");
+        if (!claimed)
+            return;
+        const [period] = claimed;
+        // Claim before dispatch: an operator warning itself goes through this budget.
+        try {
+            await this.onWarning(this.usage(new Date(`${period.slice(4)}T00:00:00Z`)));
+        }
+        catch {
+            console.error(JSON.stringify({ event: "email_budget_warning_failed", period }));
+        }
+    }
+}
+//# sourceMappingURL=email-budget.js.map

package/dist/email-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-budget.js","sourceRoot":"","sources":["../src/email-budget.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,EAAE;IACT,OAAO,EAAE,KAAK;IACd,iBAAiB,EAAE,EAAE;IACrB,gBAAgB,EAAE,CAAC;CACX,CAAC;AA0BX,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;GAehC,CAAC;AAEJ,MAAM,WAAW,GAAG,GAAsB,EAAE,CAAC,CAAC;IAC5C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;IACX,KAAK,EAAE,CAAC;IACR,YAAY,EAAE,CAAC;CAChB,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,EAAyB,EAAE,MAAc;IAC3D,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAChB,+FAA+F,EAC/F,CAAC,MAAM,CAAC,CACT,CAAC;IACF,IAAI,CAAC,GAAG;QAAE,OAAO,WAAW,EAAE,CAAC;IAC/B,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,GAAG,CAAC;IACzD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AACxD,CAAC;AAED,mFAAmF;AACnF,MAAM,OAAO,WAAW;IAIH,EAAE;IACF,GAAG;IAJtB,SAAS,CAAiE;IAE1E,YACmB,EAAuB,EACvB,GAAG,GAAe,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;kBADlC,EAAE;mBACF,GAAG;IACnB,CAAC;IAEJ,OAAO,CACL,QAAuB,EACvB,OAAO,GAA4C,EAAE;QAErD,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAChG,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,QAAQ,KAAK,cAAc,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YAC1F,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,CAAC,OAAO,MAAM,EAAE,EAAE,SAAS,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAU,CAAC;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,SAAS,CAAsB,CAAC,EAAE,EAAE,EAAE;YAC7D,KAAK,MAAM,MAAM,IAAI,OAAO;gBAC1B,EAAE,CAAC,GAAG,CAAC,iEAAiE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACtF,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM,MAAM,GACV,GAAG,CAAC,KAAK,GAAG,KAAK,GAAG,mBAAmB,CAAC,KAAK;gBAC3C,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,GAAG,mBAAmB,CAAC,OAAO;oBACjD,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,QAAQ,KAAK,cAAc;wBACzB,GAAG,CAAC,YAAY,GAAG,KAAK,GAAG,mBAAmB,CAAC,iBAAiB;wBAClE,CAAC,CAAC,oBAAoB;wBACtB,CAAC,CAAC,SAAS,CAAC;YACpB,IAAI,QAAQ,KAAK,cAAc,IAAI,MAAM;gBACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;YAC1E,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,EAAE,CAAC,GAAG,CAClB,qEAAqE,EACrE,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAC7B,CAAC;gBACF,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,mBAAmB,CAAC,gBAAgB;oBAC3D,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,QAAQ;wBACR,MAAM;wBACN,MAAM,EAAE,aAAsB;wBAC9B,WAAW,EAAE,KAAK;qBACnB,CAAC;gBACJ,EAAE,CAAC,GAAG,CACJ,iIAAiI,EACjI,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAC7B,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,OAAO;gBAC1B,EAAE,CAAC,GAAG,CACJ,uDAAuD,QAAQ,MAAM,QAAQ,uBAAuB,EACpG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CACvB,CAAC;YACJ,IAAI,MAAM;gBACR,EAAE,CAAC,GAAG,CAAC,+EAA+E,EAAE;oBACtF,OAAO,CAAC,CAAC,CAAC;iBACX,CAAC,CAAC;YACL,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;QACxF,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC1B,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,sBAAsB;gBACnF,GAAG,QAAQ;gBACX,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,WAAW;gBAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;;gBACzC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;QACnB,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,OAAO;YACL,MAAM;YACN,QAAQ;YACR,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,MAAM,EAAE,CAAC;YACzC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,QAAQ,EAAE,CAAC;YAC/C,MAAM,EAAE,mBAAmB;YAC3B,wBAAwB,EAAE,CAAC,mCAAmC,CAAC;SAChE,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,CACzB,2MAA2M,CAC5M,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC;QACzB,8EAA8E;QAC9E,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;CACF"}

package/dist/image-rejection.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Why a moderator turned down an owner-uploaded image. The API stores the
+ * stable `code`; the label is looked up when it is shown, so its wording
+ * can change without touching stored rows. Labels are written for the app
+ * owner, who reads them on their app's Settings page.
+ */
+export type ImageKind = "icon" | "preview";
+export declare const IMAGE_REJECTION_REASONS: readonly [{
+    readonly code: "not_screenshot";
+    readonly label: "Not a screenshot of the app (logo or marketing image)";
+    readonly kinds: readonly ["preview"];
+}, {
+    readonly code: "login_or_empty";
+    readonly label: "Shows only a login or empty screen";
+    readonly kinds: readonly ["preview"];
+}, {
+    readonly code: "personal_data";
+    readonly label: "Contains personal data";
+    readonly kinds: readonly ["icon", "preview"];
+}, {
+    readonly code: "unreadable";
+    readonly label: "Too small or unreadable";
+    readonly kinds: readonly ["icon", "preview"];
+}, {
+    readonly code: "mismatch";
+    readonly label: "Does not match the app";
+    readonly kinds: readonly ["icon", "preview"];
+}, {
+    readonly code: "aup";
+    readonly label: "Breaks the Acceptable Use Policy";
+    readonly kinds: readonly ["icon", "preview"];
+}];
+export type ImageRejectionCode = (typeof IMAGE_REJECTION_REASONS)[number]["code"];
+/** The longest moderator note (or legacy free-text reason) the API stores. */
+export declare const IMAGE_REJECTION_NOTE_MAX = 280;
+/** The reasons a moderator may pick for this kind of image, in display order. */
+export declare function imageRejectionReasons(kind: ImageKind): {
+    code: ImageRejectionCode;
+    label: string;
+}[];
+/** The owner-facing label for a stored code; null for an unknown or absent code. */
+export declare function imageRejectionLabel(code: string | null | undefined): string | null;
+/** True when `code` is a reason a moderator may pick for this kind of image. */
+export declare function isImageRejectionCode(kind: ImageKind, code: unknown): code is ImageRejectionCode;
+//# sourceMappingURL=image-rejection.d.ts.map

package/dist/image-rejection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-rejection.d.ts","sourceRoot":"","sources":["../src/image-rejection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAE3C,eAAO,MAAM,uBAAuB;mBAE1B,gBAAgB;oBACf,uDAAuD;;;mBAGxD,gBAAgB;oBAAS,oCAAoC;;;mBAC7D,eAAe;oBAAS,wBAAwB;;;mBAChD,YAAY;oBAAS,yBAAyB;;;mBAC9C,UAAU;oBAAS,wBAAwB;;;mBAC3C,KAAK;oBAAS,kCAAkC;;EACkC,CAAC;AAE7F,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;AAElF,8EAA8E;AAC9E,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAE5C,iFAAiF;AACjF,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,SAAS,GACd;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,CAI/C;AAED,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAElF;AAED,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,kBAAkB,CAE/F"}

package/dist/image-rejection.js

@@ -0,0 +1,27 @@
+export const IMAGE_REJECTION_REASONS = [
+    {
+        code: "not_screenshot",
+        label: "Not a screenshot of the app (logo or marketing image)",
+        kinds: ["preview"],
+    },
+    { code: "login_or_empty", label: "Shows only a login or empty screen", kinds: ["preview"] },
+    { code: "personal_data", label: "Contains personal data", kinds: ["icon", "preview"] },
+    { code: "unreadable", label: "Too small or unreadable", kinds: ["icon", "preview"] },
+    { code: "mismatch", label: "Does not match the app", kinds: ["icon", "preview"] },
+    { code: "aup", label: "Breaks the Acceptable Use Policy", kinds: ["icon", "preview"] },
+];
+/** The longest moderator note (or legacy free-text reason) the API stores. */
+export const IMAGE_REJECTION_NOTE_MAX = 280;
+/** The reasons a moderator may pick for this kind of image, in display order. */
+export function imageRejectionReasons(kind) {
+    return IMAGE_REJECTION_REASONS.filter((r) => r.kinds.includes(kind)).map(({ code, label }) => ({ code, label }));
+}
+/** The owner-facing label for a stored code; null for an unknown or absent code. */
+export function imageRejectionLabel(code) {
+    return IMAGE_REJECTION_REASONS.find((r) => r.code === code)?.label ?? null;
+}
+/** True when `code` is a reason a moderator may pick for this kind of image. */
+export function isImageRejectionCode(kind, code) {
+    return imageRejectionReasons(kind).some((r) => r.code === code);
+}
+//# sourceMappingURL=image-rejection.js.map

package/dist/image-rejection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-rejection.js","sourceRoot":"","sources":["../src/image-rejection.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC;QACE,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,uDAAuD;QAC9D,KAAK,EAAE,CAAC,SAAS,CAAC;KACnB;IACD,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,oCAAoC,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE;IAC3F,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE;IACtF,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE;IACpF,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE;IACjF,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE;CACI,CAAC;AAI7F,8EAA8E;AAC9E,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAE5C,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CACnC,IAAe;IAEf,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACzC,CAAC,CAAC,KAA8B,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjD,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,IAA+B;IACjE,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;AAC7E,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,oBAAoB,CAAC,IAAe,EAAE,IAAa;IACjE,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAClE,CAAC"}

package/dist/index.d.ts

@@ -3,20 +3,27 @@ export { BILLING_TEST_ACCOUNTS_ENV, isBillingTestAccount, parseBillingTestAccoun
 export { BRAND, ICON_COLOURS, type IconColourKey, iconColourHex } from "./brand.js";
 export { CLIENT_IP_ATTESTATION_MAX_SKEW_MS, CLIENT_IP_ATTESTATION_VERSION, CLIENT_IP_HEADER, CLIENT_IP_MAX_LENGTH, CLIENT_IP_PROOF_HEADER, type ClientIpAttestationParts, clientIpAttestationPayload, formatClientIpProof, parseClientIpProof, } from "./client-ip-attestation.js";
 export { crashAssistantPrompt } from "./crash-prompt.js";
+export { type DataExpressionErrorReason, type DataExpressionResult, type DataQueryInvalidExtra, type DataSchemaField, parseDataFields, parseDataFilter, parseDataSort, } from "./data-filter.js";
+export { DATA_ACCESS_MODES, DATA_ACCESS_SCOPES, DATA_ACCESS_SETTER_ERROR_STATUS, DATA_ACT_AS_UNAVAILABLE_REASONS, DATA_ACTING_AS, DATA_COLLECTION_RE, DATA_IDENTITY_KINDS, DATA_IDENTITY_LABEL_FIELD_TYPES, DATA_IDENTITY_LABELS, DATA_LIMITS, DATA_NOT_RUNNING_REASONS, DATA_RATE_LIMIT_SOURCES, DATA_RECORD_ERROR_STATUS, DATA_RECORD_ID_RE, DATA_RULE_CLASSES, DATA_RULE_DENIED_REASONS, DATA_RULE_OPS, type DataAccess, type DataAccessMode, type DataAccessNoticePayload, type DataAccessScope, type DataAccessSet, type DataAccessSetterErrorCode, type DataAccessUpdate, type DataActAsUnavailableExtra, type DataActAsUnavailableReason, type DataActingAs, type DataCollectionAccess, type DataCollectionSummary, type DataConflictExtra, type DataCreateInput, type DataFieldSummary, type DataIdentity, type DataIdentityCandidatesRequest, type DataIdentityCandidatesResponse, type DataIdentityCollection, type DataIdentityLabelFieldType, type DataNotRunningReason, type DataPaginatedRecords, type DataQueryOptions, type DataRateLimitedExtra, type DataRateLimitSource, type DataRecord, type DataRecordErrorCode, type DataRuleClass, type DataRuleDeniedExtra, type DataRuleDeniedReason, type DataRuleOp, type DataSchemaResponse, type DataTokenAccessNoticePayload, type DataTokenAccessRow, type DataTokenAccessUpdate, type DataUpdateInput, type DataValidationFields, type OAuthGrantsDataTools, } from "./data-records.js";
+export { disposableDomainCount, isDisposableEmailDomain } from "./disposable-email-domains.js";
 export { DOMAIN_RE } from "./domain-name.js";
+export { EMAIL_BUDGET_LIMITS, EMAIL_BUDGET_SCHEMA, EmailBudget, type EmailBudgetConnection, type EmailCategory, } from "./email-budget.js";
 export { ENV_MASK, isMaskedEnvValue, maskEnvValue } from "./env-mask.js";
 export { ENV_NAME_RE } from "./env-name.js";
 export { escapeHtml } from "./escape-html.js";
+export { IMAGE_REJECTION_NOTE_MAX, IMAGE_REJECTION_REASONS, type ImageKind, type ImageRejectionCode, imageRejectionLabel, imageRejectionReasons, isImageRejectionCode, } from "./image-rejection.js";
 export { INTERNAL_SIG_HEADER, INTERNAL_SIG_MAX_SKEW_MS, INTERNAL_SIG_VERSION, INTERNAL_TS_HEADER, type InternalSigParts, internalSigPayload, } from "./internal-sig.js";
 export { CURRENT_TERMS_VERSION, LEGAL_DOCUMENT_HASHES, LEGAL_DOCUMENT_LAST_UPDATED, LEGAL_DOCUMENT_VERSIONS, type TermsAcceptanceEvidence, } from "./legal.js";
 export { canonicalLegalChangeJson, compareVersions, declaredVersion, LEGAL_CHANGE_ID_PATTERN, LEGAL_CHANGES, LEGAL_VERSION_PATTERN, type LegalChange, type LegalChangeDocument, type LegalChangeEnforcement, type LegalChangeReason, type LegalDocumentKey, MATERIAL_CHANGE_NOTICE_MS, openMaterialChanges, pendingAcknowledgement, SIGNUP_DISCLOSURE_HEADER, } from "./legal-changes.js";
 export { MAX_ANON_TARBALL_BYTES, MAX_INLINE_PUBLISH_BYTES, MAX_OPEN_UPLOAD_SESSIONS_PER_USER, MAX_TARBALL_BYTES, MAX_UPLOAD_CHUNK_BYTES, MAX_UPLOAD_SESSION_FILES, MIN_UPLOAD_CHUNK_BYTES, UPLOAD_SESSION_MAX_LIFETIME_MS, UPLOAD_SESSION_TTL_MS, } from "./limits.js";
 export { MAX_LOG_SEARCH_LENGTH } from "./logs.js";
 export { MAX_OAUTH_CLIENT_NAME_DISPLAY_CODE_POINTS, normaliseOAuthClientName, } from "./oauth-client-name.js";
-export { describeOAuthScope, OAUTH_SCOPE_LABELS, parseOAuthScopes } from "./oauth-scopes.js";
+export { DATA_ACCESS_MODE_LABELS, describeOAuthScope, OAUTH_SCOPE_LABELS, parseOAuthScopes, } from "./oauth-scopes.js";
 export { DEFAULT_DOMAIN_SUFFIX, DEFAULT_MCP_HTTP_PORT, DEFAULT_POCKETBASE_IMAGE, MCP_TOOL_COUNT_HOSTED, MCP_TOOL_COUNT_LOCAL, } from "./platform.js";
 export { canonicalInjectedKey, isPercherInjected, PERCHER_INJECTED_ENV_KEYS, } from "./platform-env.js";
 export { DEFAULT_NODE_VERSION_LABEL, DEFAULT_NODE_VERSION_MAJOR } from "./runtime.js";
+export { parseSignupCapacity, SIGNUP_CAPACITY_MAX_AGE_MS, SIGNUP_CAPACITY_MESSAGE, type SignupCapacityReason, type SignupCapacityState, } from "./signup-capacity.js";
+export { signupDayWindow } from "./signup-day.js";
 export { normalizeSignupInviteCode, SIGNUP_INVITE_CODE_ALPHABET, SIGNUP_INVITE_CODE_LENGTH, SIGNUP_INVITE_CODE_PREFIX, SIGNUP_INVITE_HEADER, } from "./signup-invite.js";
 export { assertValidSwitches, type BooleanSwitch, type EnumSwitch, type PresenceSwitch, reportSwitches, SWITCH_BY_NAME, SWITCHES, type SwitchReader, type SwitchReport, type SwitchSpec, type SwitchState, switchEnabled, switchState, switchValue, } from "./switches.js";
 export { BUN_MAX_IDLE_TIMEOUT_SECONDS, HTTP_IDLE_TIMEOUT_SECONDS, type HttpIdleTimeoutSurface, TIMEOUTS, type TimeoutKey, } from "./timeouts.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,EACvB,KAAK,uBAAuB,GAC7B,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,iCAAiC,EACjC,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,cAAc,EACd,cAAc,EACd,QAAQ,EACR,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,aAAa,EACb,WAAW,EACX,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,KAAK,sBAAsB,EAC3B,QAAQ,EACR,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EACL,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,eAAe,EACf,eAAe,EACf,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,+BAA+B,EAC/B,+BAA+B,EAC/B,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,+BAA+B,EAC/B,oBAAoB,EACpB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACxB,aAAa,EACb,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,EACnC,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,KAAK,4BAA4B,EACjC,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACX,KAAK,qBAAqB,EAC1B,KAAK,aAAa,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,EACvB,KAAK,uBAAuB,GAC7B,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,iCAAiC,EACjC,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,cAAc,EACd,cAAc,EACd,QAAQ,EACR,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,aAAa,EACb,WAAW,EACX,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,KAAK,sBAAsB,EAC3B,QAAQ,EACR,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -3,20 +3,27 @@ export { BILLING_TEST_ACCOUNTS_ENV, isBillingTestAccount, parseBillingTestAccoun
 export { BRAND, ICON_COLOURS, iconColourHex } from "./brand.js";
 export { CLIENT_IP_ATTESTATION_MAX_SKEW_MS, CLIENT_IP_ATTESTATION_VERSION, CLIENT_IP_HEADER, CLIENT_IP_MAX_LENGTH, CLIENT_IP_PROOF_HEADER, clientIpAttestationPayload, formatClientIpProof, parseClientIpProof, } from "./client-ip-attestation.js";
 export { crashAssistantPrompt } from "./crash-prompt.js";
+export { parseDataFields, parseDataFilter, parseDataSort, } from "./data-filter.js";
+export { DATA_ACCESS_MODES, DATA_ACCESS_SCOPES, DATA_ACCESS_SETTER_ERROR_STATUS, DATA_ACT_AS_UNAVAILABLE_REASONS, DATA_ACTING_AS, DATA_COLLECTION_RE, DATA_IDENTITY_KINDS, DATA_IDENTITY_LABEL_FIELD_TYPES, DATA_IDENTITY_LABELS, DATA_LIMITS, DATA_NOT_RUNNING_REASONS, DATA_RATE_LIMIT_SOURCES, DATA_RECORD_ERROR_STATUS, DATA_RECORD_ID_RE, DATA_RULE_CLASSES, DATA_RULE_DENIED_REASONS, DATA_RULE_OPS, } from "./data-records.js";
+export { disposableDomainCount, isDisposableEmailDomain } from "./disposable-email-domains.js";
 export { DOMAIN_RE } from "./domain-name.js";
+export { EMAIL_BUDGET_LIMITS, EMAIL_BUDGET_SCHEMA, EmailBudget, } from "./email-budget.js";
 export { ENV_MASK, isMaskedEnvValue, maskEnvValue } from "./env-mask.js";
 export { ENV_NAME_RE } from "./env-name.js";
 export { escapeHtml } from "./escape-html.js";
+export { IMAGE_REJECTION_NOTE_MAX, IMAGE_REJECTION_REASONS, imageRejectionLabel, imageRejectionReasons, isImageRejectionCode, } from "./image-rejection.js";
 export { INTERNAL_SIG_HEADER, INTERNAL_SIG_MAX_SKEW_MS, INTERNAL_SIG_VERSION, INTERNAL_TS_HEADER, internalSigPayload, } from "./internal-sig.js";
 export { CURRENT_TERMS_VERSION, LEGAL_DOCUMENT_HASHES, LEGAL_DOCUMENT_LAST_UPDATED, LEGAL_DOCUMENT_VERSIONS, } from "./legal.js";
 export { canonicalLegalChangeJson, compareVersions, declaredVersion, LEGAL_CHANGE_ID_PATTERN, LEGAL_CHANGES, LEGAL_VERSION_PATTERN, MATERIAL_CHANGE_NOTICE_MS, openMaterialChanges, pendingAcknowledgement, SIGNUP_DISCLOSURE_HEADER, } from "./legal-changes.js";
 export { MAX_ANON_TARBALL_BYTES, MAX_INLINE_PUBLISH_BYTES, MAX_OPEN_UPLOAD_SESSIONS_PER_USER, MAX_TARBALL_BYTES, MAX_UPLOAD_CHUNK_BYTES, MAX_UPLOAD_SESSION_FILES, MIN_UPLOAD_CHUNK_BYTES, UPLOAD_SESSION_MAX_LIFETIME_MS, UPLOAD_SESSION_TTL_MS, } from "./limits.js";
 export { MAX_LOG_SEARCH_LENGTH } from "./logs.js";
 export { MAX_OAUTH_CLIENT_NAME_DISPLAY_CODE_POINTS, normaliseOAuthClientName, } from "./oauth-client-name.js";
-export { describeOAuthScope, OAUTH_SCOPE_LABELS, parseOAuthScopes } from "./oauth-scopes.js";
+export { DATA_ACCESS_MODE_LABELS, describeOAuthScope, OAUTH_SCOPE_LABELS, parseOAuthScopes, } from "./oauth-scopes.js";
 export { DEFAULT_DOMAIN_SUFFIX, DEFAULT_MCP_HTTP_PORT, DEFAULT_POCKETBASE_IMAGE, MCP_TOOL_COUNT_HOSTED, MCP_TOOL_COUNT_LOCAL, } from "./platform.js";
 export { canonicalInjectedKey, isPercherInjected, PERCHER_INJECTED_ENV_KEYS, } from "./platform-env.js";
 export { DEFAULT_NODE_VERSION_LABEL, DEFAULT_NODE_VERSION_MAJOR } from "./runtime.js";
+export { parseSignupCapacity, SIGNUP_CAPACITY_MAX_AGE_MS, SIGNUP_CAPACITY_MESSAGE, } from "./signup-capacity.js";
+export { signupDayWindow } from "./signup-day.js";
 export { normalizeSignupInviteCode, SIGNUP_INVITE_CODE_ALPHABET, SIGNUP_INVITE_CODE_LENGTH, SIGNUP_INVITE_CODE_PREFIX, SIGNUP_INVITE_HEADER, } from "./signup-invite.js";
 export { assertValidSwitches, reportSwitches, SWITCH_BY_NAME, SWITCHES, switchEnabled, switchState, switchValue, } from "./switches.js";
 export { BUN_MAX_IDLE_TIMEOUT_SECONDS, HTTP_IDLE_TIMEOUT_SECONDS, TIMEOUTS, } from "./timeouts.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAsB,aAAa,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EAEtB,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAElB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,GAExB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EAMrB,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,iCAAiC,EACjC,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EAInB,cAAc,EACd,cAAc,EACd,QAAQ,EAKR,aAAa,EACb,WAAW,EACX,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EAEzB,QAAQ,GAET,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAsB,aAAa,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EAEtB,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAKL,eAAe,EACf,eAAe,EACf,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,+BAA+B,EAC/B,+BAA+B,EAC/B,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,+BAA+B,EAC/B,oBAAoB,EACpB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACxB,aAAa,GAuCd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,GAGZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EAGvB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAElB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,GAExB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EAMrB,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,iCAAiC,EACjC,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EACL,yCAAyC,EACzC,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,GAGxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EAInB,cAAc,EACd,cAAc,EACd,QAAQ,EAKR,aAAa,EACb,WAAW,EACX,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EAEzB,QAAQ,GAET,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC"}

package/dist/internal-sig.d.ts

@@ -8,8 +8,8 @@
  * window, and the raw secret never has to ride on the wire once enforce is on.
  *
  * This module is the single source of truth for the canonical string both sides
- * HMAC, so the API verifier and every signer (the dashboard today; the external
- * CLABBE runner per docs/integrations/CLABBE_SECURITY_INGEST.md) can't drift. It
+ * HMAC, so the API verifier and every signer (the dashboard and the external
+ * security runner, per the security-ingest contract in docs/integrations) can't drift. It
  * is dependency-free on purpose — no crypto here — so it bundles cleanly into the
  * dashboard (Node) as well as the API (Bun). Each side wraps it with its own
  * `node:crypto` HMAC.

package/dist/internal-sig.js

@@ -8,8 +8,8 @@
  * window, and the raw secret never has to ride on the wire once enforce is on.
  *
  * This module is the single source of truth for the canonical string both sides
- * HMAC, so the API verifier and every signer (the dashboard today; the external
- * CLABBE runner per docs/integrations/CLABBE_SECURITY_INGEST.md) can't drift. It
+ * HMAC, so the API verifier and every signer (the dashboard and the external
+ * security runner, per the security-ingest contract in docs/integrations) can't drift. It
  * is dependency-free on purpose — no crypto here — so it bundles cleanly into the
  * dashboard (Node) as well as the API (Bun). Each side wraps it with its own
  * `node:crypto` HMAC.

package/dist/legal-changes.d.ts

@@ -46,9 +46,9 @@ export interface LegalChange {
     materiality: "material" | "editorial";
     reason: LegalChangeReason;
     enforcement: LegalChangeEnforcement;
-    /** ISO instant, UTC. When the notice may start going out. */
+    /** ISO instant, UTC. First send instant of the notice batch. */
     announceAt: string;
-    /** ISO instant, UTC. When the new documents govern. */
+    /** ISO instant, UTC. Existing-account effect; material changes need 30 full days after the last send. */
     effectiveAt: string;
     /** Every document whose version header moves in this change. */
     documents: readonly LegalChangeDocument[];
@@ -62,6 +62,8 @@ export interface LegalChange {
     };
     /** Set when the same change also modifies the Service itself (2019/770 Art. 19). */
     modifiesService?: boolean;
+    /** This change governs new accounts from signup, before the existing-account date. */
+    appliesToNewAccountsFromSignup?: boolean;
 }
 /** Newest last. Editorial corrections record the published document history. */
 export declare const LEGAL_CHANGES: readonly LegalChange[];

package/dist/legal-changes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"legal-changes.d.ts","sourceRoot":"","sources":["../src/legal-changes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAElD;;;;;;;;;;;;;;;;;GAiBG;AAEH,sFAAsF;AACtF,MAAM,MAAM,iBAAiB,GACzB,kBAAkB,GAClB,UAAU,GACV,kBAAkB,GAClB,gBAAgB,GAChB,iBAAiB,GACjB,eAAe,CAAC;AAEpB;;;;;;;;;;GAUG;AACH,MAAM,MAAM,sBAAsB,GAAG,aAAa,GAAG,sBAAsB,GAAG,kBAAkB,CAAC;AAEjG,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,uBAAuB,CAAC;AAEpE,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,gBAAgB,CAAC;IACtB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,kGAAkG;IAClG,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,WAAW;IAC1B,2FAA2F;IAC3F,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,WAAW,EAAE,UAAU,GAAG,WAAW,CAAC;IACtC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,WAAW,EAAE,sBAAsB,CAAC;IACpC,6DAA6D;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC1C;;;OAGG;IACH,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,oFAAoF;IACpF,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,gFAAgF;AAChF,eAAO,MAAM,aAAa,EAAE,SAAS,WAAW,EA+D/C,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AAEtE,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,QAA2B,CAAC;AAElE,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,QAAiD,CAAC;AAEtF,2FAA2F;AAC3F,eAAO,MAAM,qBAAqB,QAAyB,CAAC;AAE5D;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAgBpE;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,SAAS,WAAW,EAAkB,GAC9C,WAAW,EAAE,CAIf;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,gBAAgB,EACrB,OAAO,GAAE,SAAS,WAAW,EAAkB,GAC9C,MAAM,CAMR;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CA6BnE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC/C,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,SAAS,WAAW,EAAkB,GAC9C,WAAW,GAAG,IAAI,CAiBpB"}
+{"version":3,"file":"legal-changes.d.ts","sourceRoot":"","sources":["../src/legal-changes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAElD;;;;;;;;;;;;;;;;;GAiBG;AAEH,sFAAsF;AACtF,MAAM,MAAM,iBAAiB,GACzB,kBAAkB,GAClB,UAAU,GACV,kBAAkB,GAClB,gBAAgB,GAChB,iBAAiB,GACjB,eAAe,CAAC;AAEpB;;;;;;;;;;GAUG;AACH,MAAM,MAAM,sBAAsB,GAAG,aAAa,GAAG,sBAAsB,GAAG,kBAAkB,CAAC;AAEjG,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,uBAAuB,CAAC;AAEpE,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,gBAAgB,CAAC;IACtB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,kGAAkG;IAClG,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,WAAW;IAC1B,2FAA2F;IAC3F,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,WAAW,EAAE,UAAU,GAAG,WAAW,CAAC;IACtC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,WAAW,EAAE,sBAAsB,CAAC;IACpC,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,yGAAyG;IACzG,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC1C;;;OAGG;IACH,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,oFAAoF;IACpF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,sFAAsF;IACtF,8BAA8B,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,gFAAgF;AAChF,eAAO,MAAM,aAAa,EAAE,SAAS,WAAW,EA0L/C,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AAEtE,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,QAA2B,CAAC;AAElE,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,QAAiD,CAAC;AAEtF,2FAA2F;AAC3F,eAAO,MAAM,qBAAqB,QAAyB,CAAC;AAE5D;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAiBpE;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,SAAS,WAAW,EAAkB,GAC9C,WAAW,EAAE,CAIf;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,gBAAgB,EACrB,OAAO,GAAE,SAAS,WAAW,EAAkB,GAC9C,MAAM,CAMR;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CA6BnE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC/C,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,SAAS,WAAW,EAAkB,GAC9C,WAAW,GAAG,IAAI,CAiBpB"}

package/dist/legal-changes.js

@@ -63,6 +63,129 @@ export const LEGAL_CHANGES = [
             sv: "Kraschdiagnostik tas nu fram med fasta regler inom Percher, och kraschloggar skickas inte till någon extern AI-leverantör. Möjligheten till extern AI-kraschanalys, som var avstängd, tas bort och dess leverantör listas inte längre. Avsnitt 3.3 hänvisar uttryckligen till avsnitt 9 och tvingande lag för ansvar. Ingen ny behandling och ingen ändring av dina rättigheter eller skyldigheter.",
         },
     },
+    {
+        // Agent recommendation: inventory correction only; ship with the export implementation.
+        id: "2026-10-11-portability-export-inventory",
+        materiality: "editorial",
+        reason: "clarification",
+        enforcement: "notice_only",
+        announceAt: "2026-10-11T00:00:00.000Z",
+        effectiveAt: "2026-10-11T00:00:00.000Z",
+        documents: [{ key: "dataPortability", from: "1.0", to: "1.0.1" }],
+        summary: {
+            en: "The Data Portability Register lists the exported source, retained deployment history, visitor statistics, build and runtime logs, and crash reports. It explains archive link exclusions, log masking and unavailable data. This updates the technical inventory without changing switching rights or obligations.",
+            sv: "Dataportabilitetsregistret listar exporterad källkod, bevarad driftsättningshistorik, besöksstatistik, bygg- och körningsloggar samt kraschrapporter. Det förklarar undantagna arkivlänkar, maskering av loggar och otillgängliga data. Den tekniska förteckningen uppdateras utan ändring av rättigheter eller skyldigheter vid byte.",
+        },
+    },
+    {
+        // Editorial inventory only (ops declaration 2026-10-11, no mail): storage keys, exported fields, dates.
+        id: "2026-10-11-browser-storage-inventory",
+        materiality: "editorial",
+        reason: "clarification",
+        enforcement: "notice_only",
+        announceAt: "2026-10-11T00:00:00.000Z",
+        effectiveAt: "2026-10-11T00:00:00.000Z",
+        documents: [
+            { key: "cookies", from: "1.0.3", to: "1.0.4" },
+            { key: "terms", from: "1.0.2", to: "1.0.3" },
+            { key: "dataPortability", from: "1.0.1", to: "1.0.2" },
+        ],
+        summary: {
+            en: "The Cookie Policy lists existing rollback and admin interface storage, corrects the theme-key description and identifies application/deployment identifiers. The Register lists exported moderation codes and preview orientations. The Terms last-updated dates are aligned. No change to processing, rights or obligations.",
+            sv: "Cookiepolicyn listar befintlig lagring för återställning och administratörsgränssnittet, rättar beskrivningen av temanycklar och anger applikations- och publiceringsidentifierare. Registret listar exporterade modereringskoder och förhandsbildsorienteringar. Villkorens uppdateringsdatum samordnas. Ingen ändring av behandling, rättigheter eller skyldigheter.",
+        },
+    },
+    {
+        // Editorial (owner decision 2026-10-11: current facts go live at merge, no waiting date; no mail).
+        id: "2026-10-11-privacy-portability-current-facts",
+        materiality: "editorial",
+        reason: "legal_compliance",
+        enforcement: "notice_only",
+        announceAt: "2026-10-11T00:00:00.000Z",
+        effectiveAt: "2026-10-11T00:00:00.000Z",
+        documents: [
+            { key: "privacy", from: "1.0.2", to: "1.0.3" },
+            { key: "dataPortability", from: "1.0.2", to: "1.0.3" },
+        ],
+        summary: {
+            en: "Clarifies existing encryption, account password storage, log retention and beta invitation-use records. No processing or rights change.",
+            sv: "Förtydligar befintlig kryptering, lagring av kontolösenord, loggarnas lagringstider och uppgifter om användning av betainbjudningar. Ingen ändring av behandling eller rättigheter.",
+        },
+    },
+    {
+        // Editorial inventory (owner decision 2026-10-11: current facts go live at merge; no mail).
+        id: "2026-10-11-portability-image-exports",
+        materiality: "editorial",
+        reason: "clarification",
+        enforcement: "notice_only",
+        announceAt: "2026-10-11T00:00:00.000Z",
+        effectiveAt: "2026-10-11T00:00:00.000Z",
+        documents: [{ key: "dataPortability", from: "1.0.3", to: "1.0.4" }],
+        summary: {
+            en: "The Data Portability Register lists image downloads and source-less app bundles.",
+            sv: "Dataportabilitetsregistret listar nedladdning av bilder och appaket utan källkod.",
+        },
+    },
+    {
+        // Editorial (owner decision 2026-10-12: CLI/MCP usage telemetry is opt-in; no mail).
+        id: "2026-10-12-telemetry-opt-in",
+        materiality: "editorial",
+        reason: "clarification",
+        enforcement: "notice_only",
+        announceAt: "2026-10-12T00:00:00.000Z",
+        effectiveAt: "2026-10-12T00:00:00.000Z",
+        documents: [{ key: "privacy", from: "1.0.3", to: "1.0.4" }],
+        summary: {
+            en: "CLI and MCP usage statistics are sent only after the user turns them on, by answering yes to the CLI's one-time question or running percher telemetry on, and can be turned off at any time. The legal basis for these statistics is consent.",
+            sv: "Användningsstatistik från CLI och MCP skickas först när användaren slagit på den, genom att svara ja på CLI:ns engångsfråga eller köra percher telemetry on, och kan stängas av när som helst. Den rättsliga grunden för statistiken är samtycke.",
+        },
+    },
+    {
+        // No mail: every pre-publication account is the controller's own (owner decision 2026-10-07).
+        id: "2026-11-07-beta-dashboard-app-data",
+        materiality: "material",
+        reason: "service_change",
+        enforcement: "notice_only",
+        announceAt: "2026-10-07T10:00:00.000Z",
+        effectiveAt: "2026-11-07T00:00:00.000Z",
+        appliesToNewAccountsFromSignup: true,
+        documents: [{ key: "subprocessors", from: "1.0.2", to: "1.1" }],
+        summary: {
+            en: "During the beta, App Data (logs, files, database content and diagnostics) for ordinary support goes through dashboard cases, including public support access. For accounts created on or after publication, this applies from signup. For earlier accounts, it applies from the effective date; until then, cases are requested but not required and emailed App Data is handled under current terms. The abuse@, security@ and legal@ reporting channels are unchanged. Percher's own support emails contain notifications and links, never case content.",
+            sv: "Under betan lämnas Appdata (loggar, filer, databasinnehåll och diagnostik) för vanlig support via ärenden i dashboarden, inklusive publik supportåtkomst. För konton skapade på eller efter publiceringen gäller detta från registreringen. För äldre konton gäller det från ikraftträdandedatumet; tills dess önskas men krävs inte ärenden, och Appdata via e-post hanteras enligt nuvarande villkor. Rapporteringskanalerna abuse@, security@ och legal@ är oförändrade. Perchers egna e-postmeddelanden om support innehåller aviseringar och länkar, aldrig ärendeinnehåll.",
+        },
+    },
+    {
+        // No mail while every pre-publication account is the controller's own (owner decision 2026-10-11).
+        id: "2026-11-16-subprocessor-spacemail",
+        materiality: "material",
+        reason: "legal_compliance",
+        enforcement: "notice_only",
+        announceAt: "2026-10-11T14:30:00.000Z",
+        effectiveAt: "2026-11-16T00:00:00.000Z",
+        appliesToNewAccountsFromSignup: true,
+        documents: [{ key: "subprocessors", from: "1.1", to: "1.2" }],
+        summary: {
+            en: "Spaceship, Inc. (Spacemail) is listed as a sub-processor. It hosts the support@, abuse@, security@ and legal@percher.app mailboxes in the United States, including addresses and message content, which may include App Data. Transfers rely on the Standard Contractual Clauses (Module Two) in Spaceship's Data Processing Addendum. Spaceship may use OpenAI's Moderation tool, with OpenAI as its sub-processor, to scan parts of emails for spam and phishing.",
+            sv: "Spaceship, Inc. (Spacemail) anges som underbiträde. Spaceship driver e-postlådorna support@, abuse@, security@ och legal@percher.app och behandlar adresser och meddelandeinnehåll, som kan innehålla Appdata, i USA. Överföringarna sker med stöd av standardavtalsklausulerna (modul två) i Spaceships personuppgiftsbiträdesavtal. Spaceship kan använda OpenAI:s Moderation-verktyg, med OpenAI som underbiträde, för att skanna delar av e-post efter skräppost och nätfiske.",
+        },
+    },
+    {
+        // No mail while every pre-publication account is the controller's own (owner decision 2026-10-11:
+        // the DPA clause is the only material item; the Terms promise 30 days' notice, so it keeps its date).
+        id: "2026-11-16-dpa-prior-subprocessor-notice",
+        materiality: "material",
+        reason: "legal_compliance",
+        enforcement: "notice_only",
+        announceAt: "2026-10-11T17:45:00.000Z",
+        effectiveAt: "2026-11-16T00:00:00.000Z",
+        appliesToNewAccountsFromSignup: true,
+        documents: [{ key: "dpa", from: "1.0", to: "1.1" }],
+        summary: {
+            en: "The DPA requires notice before a subprocessor is added or replaced, including urgent changes. The existing right to object on reasonable data-protection grounds remains.",
+            sv: "DPA:n kräver information innan ett underbiträde läggs till eller byts ut, även vid brådskande ändringar. Den befintliga rätten att invända på skäliga dataskyddsgrunder kvarstår.",
+        },
+    },
 ];
 /**
  * Header carrying the change ids the signup form actually rendered.
@@ -88,6 +211,7 @@ export const LEGAL_VERSION_PATTERN = /^\d+\.\d+(?:\.\d+)?$/;
 export function canonicalLegalChangeJson(change) {
     return JSON.stringify({
         announceAt: change.announceAt,
+        ...(change.appliesToNewAccountsFromSignup ? { appliesToNewAccountsFromSignup: true } : {}),
         documents: change.documents.map((document) => ({
             from: document.from,
             key: document.key,