@robono/server 0.16.0 → 0.17.0

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.17.0 — 2026-11-03
+
+- Add optional photo/video screening for connected networks and return attachment screening status without holding server requests open.
+
+
 ## 0.16.0 — 2026-11-03
 
 Add createRobonoMessengerServer for one authenticated messaging/media route, plus optional signed-event notification delivery using customer Apple/Google credentials and a durable private PostgreSQL queue. Announce supported group controls; keep actor identity server-verified and recheck customer permissions on search results. Include NOTIFICATIONS.md and the notification schema.

package/README.md

@@ -373,3 +373,10 @@ synchronizing messages, but do not show a banner, play a sound or send a push wh
 this flag is true. Its value is refreshed on webhook retries. Do not treat mute as
 loss of membership or stop delivery. The host owns OS push notifications and must
 honor this field in its notification sender.
+
+## Optional photo and video screening
+
+Connected networks can use Robono-hosted Amazon screening with their existing
+Processing API key, including apps with their own storage. See [screening setup](https://robono.com/docs#screening)
+for the private-upload flow, prices, spending controls and pending-result handling.
+This addition is not in server 0.16.0; update to the screening release before use.

package/SBOM.spdx.json

@@ -2,22 +2,22 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@robono/server@0.16.0",
-  "documentNamespace": "http://spdx.org/spdxdocs/@robono%2fserver-0.16.0-***",
+  "name": "@robono/server@0.17.0",
+  "documentNamespace": "http://spdx.org/spdxdocs/@robono%2fserver-0.17.0-***",
   "creationInfo": {
-    "created": "2026-11-03T12:40:11.342Z",
+    "created": "2026-11-03T15:35:51.400Z",
     "creators": [
       "Tool: npm/cli-11.6.2"
     ]
   },
   "documentDescribes": [
-    "SPDXRef-Package-robono.server-0.16.0"
+    "SPDXRef-Package-robono.server-0.17.0"
   ],
   "packages": [
     {
       "name": "@robono/server",
-      "SPDXID": "SPDXRef-Package-robono.server-0.16.0",
-      "versionInfo": "0.16.0",
+      "SPDXID": "SPDXRef-Package-robono.server-0.17.0",
+      "versionInfo": "0.17.0",
       "packageFileName": "",
       "description": "Provider-neutral server SDK for the Robono Bridge API.",
       "primaryPackagePurpose": "LIBRARY",
@@ -29,7 +29,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40robono/server@0.16.0"
+          "referenceLocator": "pkg:npm/%40robono/server@0.17.0"
         }
       ]
     }
@@ -37,7 +37,7 @@
   "relationships": [
     {
       "spdxElementId": "SPDXRef-DOCUMENT",
-      "relatedSpdxElement": "SPDXRef-Package-robono.server-0.16.0",
+      "relatedSpdxElement": "SPDXRef-Package-robono.server-0.17.0",
       "relationshipType": "DESCRIBES"
     }
   ]

package/SCREENING.md

@@ -0,0 +1,73 @@
+# Photo and video screening for connected networks
+
+Available in the upcoming server release (not present in server 0.16.0).
+
+A connected network can use Robono's Amazon screening without replacing its own
+chat interface or attachment storage. Do not put your network API key in a phone
+app or website. No customer AWS account, Amazon keys or extra AWS server is needed.
+
+1. In Robono's **Features & preview → Photo and video screening**, choose categories,
+   sensitivity and a monthly limit, then accept the prices and processing terms.
+2. Use an existing backend API key with **Processing** permission.
+3. Keep attachments private until screening returns `allowed` for the exact bytes.
+
+```ts
+import {RobonoScreening} from '@robono/server';
+const screening = new RobonoScreening({apiKey: process.env.ROBONO_API_KEY!});
+// Authenticate your own user and authorize their upload before this call.
+const job = await screening.upload(stableUploadId, {
+  kind: 'image', fileName: 'photo.jpg', mimeType: 'image/jpeg', byteSize: bytes.length,
+}, bytes);
+// Store job.id against your private upload. Return promptly; poll status later.
+const result = await screening.status(job.id);
+if (result.state === 'allowed') {
+  await screening.assertAllowed(job.id, bytes); // checks current policy + SHA-256
+  // Publish these exact bytes to the recipients your app has authorized.
+}
+```
+
+Videos use `kind: 'video'`, `mimeType: 'video/mp4'` or `video/quicktime`, and
+`durationMs`. Server verification checks duration; a false short duration fails.
+Video analysis can take minutes. Show "Checking attachment" while pending, allow
+canceling, and keep ordinary chat usable. `blocked` and `failed` must never release
+the file. Store a stable request ID across network retries. A changed file needs a
+new request ID. A policy change invalidates approval for future publication.
+
+For direct HTTPS integration, POST to `https://api.robono.com/v1/screening` with
+`Authorization: Bearer YOUR_SERVER_KEY`. Operations:
+
+- `prepare`: `{operation:'prepare', requestId, file}`. Returns job and private PUT
+  upload instructions. Send only the returned storage headers to the upload URL.
+- `submit`: `{operation:'submit', id}` after upload.
+- `status`: `{operation:'status', id}`. Pending is not approval.
+
+Responses include `id`, `state`, `categories`, `sha256`, `chargedMicros`,
+`reservedMicros` and timestamps. Amounts are USD millionths. Do not trust a client
+phone's claim that it passed screening; read the result on your backend. Never
+publish a mutable URL whose contents can change after the check.
+
+## Robono-hosted attachments
+
+With the updated server and supplied web/mobile packages, existing managed uploads
+are automatically checked before delivery. The database also rejects direct sends
+of unchecked photos/videos. Enabled screening requires managed storage for hosted
+messaging; private external storage can use the standalone flow above. Older SDKs
+must be updated before enabling screening. No extra per-chat switches.
+
+## Formats, costs and privacy
+
+JPEG/PNG up to 15 MiB. MP4/MOV up to 32 MiB and 15 minutes. Other formats fail rather
+than bypass screening. These are visual checks, not audio/profanity checks, and
+can produce missed content or mistaken blocks.
+
+Release prices: $3/1,000 photos and $0.20 per started video minute, no monthly fee.
+Successful checks count even if blocked. Failed checks are uncharged. The same
+accepted job is not billed twice. New work stops at the network screening cap or
+overall spending cap. Job status expires after 30 days; upload a new copy for a new
+check. Keep the originally screened bytes private while a check is pending.
+
+Only selected media goes to Amazon Rekognition in Northern Virginia. Robono opts
+out of AWS using it for AI-service improvement. Private temporary screening copies
+are removed after completion, with a one-day S3 expiry backstop. File names and
+hashes are cleared after 30 days; aggregate usage/billing records remain. AWS
+operational retention follows its terms. See Robono's provider disclosure.

package/dist/index.d.ts

@@ -24,4 +24,6 @@ export type { RobonoMessengerServerOptions, MessengerAccess } from './messenger.
 export * from './messaging-notifications.js';
 export * from './messaging-notification-providers.js';
 export * from './messaging-notification-postgres.js';
+export { RobonoScreening } from './screening.js';
+export type { ScreeningFile, ScreeningResult } from './screening.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,YAAY,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACrI,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAC1D,YAAY,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,yBAAyB,EACzB,WAAW,EACX,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACtE,mBAAmB,YAAY,CAAC;AAEhC,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AACvF,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEpF,OAAO,EAAC,kCAAkC,EAAC,MAAM,sBAAsB,CAAC;AACxE,YAAY,EAAC,uBAAuB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AACtI,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAC,sCAAsC,EAAC,MAAM,2BAA2B,CAAC;AAEjF,OAAO,EAAC,qBAAqB,EAAC,4BAA4B,EAAC,MAAM,eAAe,CAAC;AACjF,YAAY,EAAC,kBAAkB,EAAC,MAAM,eAAe,CAAC;AACtD,OAAO,EAAC,yBAAyB,EAAC,MAAM,oBAAoB,CAAC;AAE7D,OAAO,EAAC,2BAA2B,EAAC,MAAM,gBAAgB,CAAC;AAC3D,YAAY,EAAC,4BAA4B,EAAC,eAAe,EAAC,MAAM,gBAAgB,CAAC;AAEjF,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,YAAY,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACrI,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAC1D,YAAY,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,yBAAyB,EACzB,WAAW,EACX,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACtE,mBAAmB,YAAY,CAAC;AAEhC,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AACvF,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEpF,OAAO,EAAC,kCAAkC,EAAC,MAAM,sBAAsB,CAAC;AACxE,YAAY,EAAC,uBAAuB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AACtI,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAC,sCAAsC,EAAC,MAAM,2BAA2B,CAAC;AAEjF,OAAO,EAAC,qBAAqB,EAAC,4BAA4B,EAAC,MAAM,eAAe,CAAC;AACjF,YAAY,EAAC,kBAAkB,EAAC,MAAM,eAAe,CAAC;AACtD,OAAO,EAAC,yBAAyB,EAAC,MAAM,oBAAoB,CAAC;AAE7D,OAAO,EAAC,2BAA2B,EAAC,MAAM,gBAAgB,CAAC;AAC3D,YAAY,EAAC,4BAA4B,EAAC,eAAe,EAAC,MAAM,gBAAgB,CAAC;AAEjF,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC;AAErD,OAAO,EAAC,eAAe,EAAC,MAAM,gBAAgB,CAAC;AAC/C,YAAY,EAAC,aAAa,EAAC,eAAe,EAAC,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -15,4 +15,5 @@ export { createRobonoMessengerServer } from './messenger.js';
 export * from './messaging-notifications.js';
 export * from './messaging-notification-providers.js';
 export * from './messaging-notification-postgres.js';
+export { RobonoScreening } from './screening.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAM1D,OAAO,EACL,yBAAyB,EACzB,WAAW,EACX,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAGtE,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAGvF,OAAO,EAAC,kCAAkC,EAAC,MAAM,sBAAsB,CAAC;AAExE,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAC,sCAAsC,EAAC,MAAM,2BAA2B,CAAC;AAEjF,OAAO,EAAC,qBAAqB,EAAC,4BAA4B,EAAC,MAAM,eAAe,CAAC;AAEjF,OAAO,EAAC,yBAAyB,EAAC,MAAM,oBAAoB,CAAC;AAE7D,OAAO,EAAC,2BAA2B,EAAC,MAAM,gBAAgB,CAAC;AAG3D,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAM1D,OAAO,EACL,yBAAyB,EACzB,WAAW,EACX,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAGtE,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAGvF,OAAO,EAAC,kCAAkC,EAAC,MAAM,sBAAsB,CAAC;AAExE,OAAO,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAC,sCAAsC,EAAC,MAAM,2BAA2B,CAAC;AAEjF,OAAO,EAAC,qBAAqB,EAAC,4BAA4B,EAAC,MAAM,eAAe,CAAC;AAEjF,OAAO,EAAC,yBAAyB,EAAC,MAAM,oBAAoB,CAAC;AAE7D,OAAO,EAAC,2BAA2B,EAAC,MAAM,gBAAgB,CAAC;AAG3D,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC;AAErD,OAAO,EAAC,eAAe,EAAC,MAAM,gBAAgB,CAAC"}

package/dist/managed-media.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"managed-media.d.ts","sourceRoot":"","sources":["../src/managed-media.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,uBAAuB,EAAC,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AACvF,yFAAyF;AACzF,qBAAa,kBAAmB,YAAW,uBAAuB;IAErD,OAAO,CAAC,OAAO;IAD3B,OAAO,CAAC,GAAG,CAAQ;gBACC,OAAO,EAAC;QAAC,MAAM,EAAC,MAAM,CAAC;QAAA,OAAO,CAAC,EAAC,MAAM,CAAC;QAAA,KAAK,CAAC,EAAC,OAAO,KAAK,CAAA;KAAC;YAKjE,OAAO;IAMrB,OAAO,CAAC,KAAK,EAAC,UAAU,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAE,UAAU,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACzG,QAAQ,CAAC,KAAK,EAAC,UAAU,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAE,UAAU,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAKxH,QAAQ,CAAC,KAAK,EAAC,UAAU,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAE,UAAU,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAClH,iBAAiB,CAAC,KAAK,EAAC;QAAC,OAAO,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAA;KAAC,GAAE,OAAO,CAAC;QAAC,GAAG,EAAC,MAAM,CAAC;QAAA,OAAO,CAAC,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC;QAAA,KAAK,EAAC,oBAAoB,CAAA;KAAC,CAAC;IAChK,SAAS,CAAC,KAAK,EAAC;QAAC,OAAO,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAA;KAAC,GAAE,OAAO,CAAC;QAAC,GAAG,EAAC,MAAM,CAAC;QAAA,OAAO,CAAC,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC;QAAA,KAAK,EAAC,oBAAoB,CAAA;KAAC,GAAC,IAAI,CAAC;IACvJ,OAAO,CAAC,KAAK,EAAC,UAAU,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,KAAK,EAAC;QAAC,OAAO,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAM,CAAC;QAAA,OAAO,EAAC,MAAM,CAAA;KAAC,GAAE,OAAO,CAAC,oBAAoB,GAAC,IAAI,CAAC;CAG7G"}
+{"version":3,"file":"managed-media.d.ts","sourceRoot":"","sources":["../src/managed-media.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,uBAAuB,EAAC,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AACvF,yFAAyF;AACzF,qBAAa,kBAAmB,YAAW,uBAAuB;IAErD,OAAO,CAAC,OAAO;IAD3B,OAAO,CAAC,GAAG,CAAQ;gBACC,OAAO,EAAC;QAAC,MAAM,EAAC,MAAM,CAAC;QAAA,OAAO,CAAC,EAAC,MAAM,CAAC;QAAA,KAAK,CAAC,EAAC,OAAO,KAAK,CAAA;KAAC;YAKjE,OAAO;IAOrB,OAAO,CAAC,KAAK,EAAC,UAAU,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAE,UAAU,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACzG,QAAQ,CAAC,KAAK,EAAC,UAAU,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAE,UAAU,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAKxH,QAAQ,CAAC,KAAK,EAAC,UAAU,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAE,UAAU,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAClH,iBAAiB,CAAC,KAAK,EAAC;QAAC,OAAO,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAA;KAAC,GAAE,OAAO,CAAC;QAAC,GAAG,EAAC,MAAM,CAAC;QAAA,OAAO,CAAC,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC;QAAA,KAAK,EAAC,oBAAoB,CAAA;KAAC,CAAC;IAChK,SAAS,CAAC,KAAK,EAAC;QAAC,OAAO,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAA;KAAC,GAAE,OAAO,CAAC;QAAC,GAAG,EAAC,MAAM,CAAC;QAAA,OAAO,CAAC,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC;QAAA,KAAK,EAAC,oBAAoB,CAAA;KAAC,GAAC,IAAI,CAAC;IACvJ,OAAO,CAAC,KAAK,EAAC,UAAU,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,KAAK,EAAC;QAAC,OAAO,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAM,CAAC;QAAA,OAAO,EAAC,MAAM,CAAA;KAAC,GAAE,OAAO,CAAC,oBAAoB,GAAC,IAAI,CAAC;CAG7G"}

package/dist/managed-media.js

@@ -13,6 +13,8 @@ export class RobonoManagedMedia {
     async request(operation, input) {
         const response = await (this.options.fetch ?? fetch)(this.url, { method: 'POST', redirect: 'error', signal: AbortSignal.timeout(operation === 'complete' ? 120000 : 15000), headers: { authorization: `Bearer ${this.options.apiKey}`, 'content-type': 'application/json' }, body: JSON.stringify({ ...input, operation }) });
         const data = await response.json().catch(() => null);
+        if (response.status === 202 && data?.error?.code === 'screening_pending')
+            throw new RobonoError('This attachment is being checked before delivery.', { status: 202, code: 'screening_pending', retryable: true });
         if (!response.ok)
             throw new RobonoError(data?.error?.message ?? 'Attachment request failed.', { status: response.status, code: data?.error?.code ?? 'media_unavailable', retryable: response.status === 429 || response.status >= 500 });
         return data;

package/dist/managed-media.js.map

@@ -1 +1 @@
-{"version":3,"file":"managed-media.js","sourceRoot":"","sources":["../src/managed-media.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAExC,yFAAyF;AACzF,MAAM,OAAO,kBAAkB;IAEV;IADZ,GAAG,CAAQ;IACnB,YAAoB,OAA2D;QAA3D,YAAO,GAAP,OAAO,CAAoD;QAC9E,MAAM,GAAG,GAAC,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAE,2CAA2C,CAAC,CAAC;QAChF,IAAG,GAAG,CAAC,QAAQ,KAAG,QAAQ,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,QAAQ,IAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;YAAC,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC1I,IAAI,CAAC,GAAG,GAAC,GAAG,CAAC,IAAI,CAAC;IACnB,CAAC;IACO,KAAK,CAAC,OAAO,CAAC,SAAgB,EAAC,KAAY;QAClD,MAAM,QAAQ,GAAC,MAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,MAAM,EAAC,WAAW,CAAC,OAAO,CAAC,SAAS,KAAG,UAAU,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,KAAK,CAAC,EAAC,OAAO,EAAC,EAAC,aAAa,EAAC,UAAU,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAC,cAAc,EAAC,kBAAkB,EAAC,EAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,EAAC,GAAG,KAAK,EAAC,SAAS,EAAC,CAAC,EAAC,CAAC,CAAC;QAC/R,MAAM,IAAI,GAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,CAAC;QACjD,IAAG,CAAC,QAAQ,CAAC,EAAE;YAAC,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,IAAE,4BAA4B,EAAC,EAAC,MAAM,EAAC,QAAQ,CAAC,MAAM,EAAC,IAAI,EAAC,IAAI,EAAE,KAAK,EAAE,IAAI,IAAE,mBAAmB,EAAC,SAAS,EAAC,QAAQ,CAAC,MAAM,KAAG,GAAG,IAAE,QAAQ,CAAC,MAAM,IAAE,GAAG,EAAC,CAAC,CAAC;QACrN,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,CAAC,KAAuD,IAAiD,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC;IACtJ,KAAK,CAAC,QAAQ,CAAC,KAAwD;QACtE,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAC,KAAK,CAAC,CAAC;QAClD,oFAAoF;QACpF,OAAO,EAAC,IAAI,EAAC,MAAM,CAAC,IAAI,EAAC,KAAK,EAAC,MAAM,CAAC,KAAK,EAAC,CAAC;IAC9C,CAAC;IACD,QAAQ,CAAC,KAAwD,IAAkD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC;IAC1J,iBAAiB,CAAC,KAA6D,IAAkF,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC;IACxM,SAAS,CAAC,KAA6D,IAAuF,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC;IACtM,KAAK,CAAC,OAAO,CAAC,KAAuD,IAAE,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC;IAC5G,KAAK,CAAC,OAAO,CAAC,KAA2D;QACxE,IAAG,CAAC;YAAA,OAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAAA,CAAC;QAAA,OAAM,CAAC,EAAC,CAAC;YAAA,IAAG,CAAC,YAAY,WAAW,IAAE,CAAC,CAAC,MAAM,KAAG,GAAG;gBAAC,OAAO,IAAI,CAAC;YAAA,MAAM,CAAC,CAAC;QAAA,CAAC;IAClI,CAAC;CACD"}
+{"version":3,"file":"managed-media.js","sourceRoot":"","sources":["../src/managed-media.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAExC,yFAAyF;AACzF,MAAM,OAAO,kBAAkB;IAEV;IADZ,GAAG,CAAQ;IACnB,YAAoB,OAA2D;QAA3D,YAAO,GAAP,OAAO,CAAoD;QAC9E,MAAM,GAAG,GAAC,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAE,2CAA2C,CAAC,CAAC;QAChF,IAAG,GAAG,CAAC,QAAQ,KAAG,QAAQ,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,QAAQ,IAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;YAAC,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC1I,IAAI,CAAC,GAAG,GAAC,GAAG,CAAC,IAAI,CAAC;IACnB,CAAC;IACO,KAAK,CAAC,OAAO,CAAC,SAAgB,EAAC,KAAY;QAClD,MAAM,QAAQ,GAAC,MAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,MAAM,EAAC,WAAW,CAAC,OAAO,CAAC,SAAS,KAAG,UAAU,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,KAAK,CAAC,EAAC,OAAO,EAAC,EAAC,aAAa,EAAC,UAAU,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAC,cAAc,EAAC,kBAAkB,EAAC,EAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,EAAC,GAAG,KAAK,EAAC,SAAS,EAAC,CAAC,EAAC,CAAC,CAAC;QAC/R,MAAM,IAAI,GAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,CAAC;QACjD,IAAG,QAAQ,CAAC,MAAM,KAAG,GAAG,IAAE,IAAI,EAAE,KAAK,EAAE,IAAI,KAAG,mBAAmB;YAAC,MAAM,IAAI,WAAW,CAAC,mDAAmD,EAAC,EAAC,MAAM,EAAC,GAAG,EAAC,IAAI,EAAC,mBAAmB,EAAC,SAAS,EAAC,IAAI,EAAC,CAAC,CAAC;QAClM,IAAG,CAAC,QAAQ,CAAC,EAAE;YAAC,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,IAAE,4BAA4B,EAAC,EAAC,MAAM,EAAC,QAAQ,CAAC,MAAM,EAAC,IAAI,EAAC,IAAI,EAAE,KAAK,EAAE,IAAI,IAAE,mBAAmB,EAAC,SAAS,EAAC,QAAQ,CAAC,MAAM,KAAG,GAAG,IAAE,QAAQ,CAAC,MAAM,IAAE,GAAG,EAAC,CAAC,CAAC;QACrN,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,CAAC,KAAuD,IAAiD,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC;IACtJ,KAAK,CAAC,QAAQ,CAAC,KAAwD;QACtE,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAC,KAAK,CAAC,CAAC;QAClD,oFAAoF;QACpF,OAAO,EAAC,IAAI,EAAC,MAAM,CAAC,IAAI,EAAC,KAAK,EAAC,MAAM,CAAC,KAAK,EAAC,CAAC;IAC9C,CAAC;IACD,QAAQ,CAAC,KAAwD,IAAkD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC;IAC1J,iBAAiB,CAAC,KAA6D,IAAkF,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC;IACxM,SAAS,CAAC,KAA6D,IAAuF,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC;IACtM,KAAK,CAAC,OAAO,CAAC,KAAuD,IAAE,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC;IAC5G,KAAK,CAAC,OAAO,CAAC,KAA2D;QACxE,IAAG,CAAC;YAAA,OAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAAA,CAAC;QAAA,OAAM,CAAC,EAAC,CAAC;YAAA,IAAG,CAAC,YAAY,WAAW,IAAE,CAAC,CAAC,MAAM,KAAG,GAAG;gBAAC,OAAO,IAAI,CAAC;YAAA,MAAM,CAAC,CAAC;QAAA,CAAC;IAClI,CAAC;CACD"}

package/dist/screening.d.ts

@@ -0,0 +1,53 @@
+export type ScreeningFile = {
+    kind: 'image' | 'video';
+    mimeType: string;
+    byteSize: number;
+    fileName: string;
+    durationMs?: number;
+};
+export type ScreeningResult = {
+    id: string;
+    state: 'uploading' | 'queued' | 'processing' | 'allowed' | 'blocked' | 'failed';
+    kind: 'image' | 'video';
+    categories: string[];
+    sha256: string | null;
+    error: string | null;
+    chargedMicros: number;
+    reservedMicros: number;
+    createdAt: string;
+    finishedAt: string | null;
+};
+/** Server-only. Existing connected networks use their Robono Processing API key. */
+export declare class RobonoScreening {
+    private options;
+    private url;
+    constructor(options: {
+        apiKey: string;
+        baseUrl?: string;
+        fetch?: typeof fetch;
+    });
+    private request;
+    prepare(requestId: string, file: ScreeningFile): Promise<ScreeningResult & {
+        upload?: {
+            url: string;
+            headers: Record<string, string>;
+        };
+    }>;
+    submit(id: string): Promise<ScreeningResult & {
+        upload?: {
+            url: string;
+            headers: Record<string, string>;
+        };
+    }>;
+    status(id: string): Promise<ScreeningResult & {
+        upload?: {
+            url: string;
+            headers: Record<string, string>;
+        };
+    }>;
+    /** Upload exactly the bytes to be published. Returns a job; never treats pending as approved. */
+    upload(requestId: string, file: ScreeningFile, bytes: Uint8Array): Promise<ScreeningResult>;
+    /** Call this before releasing bytes stored by your own application. */
+    assertAllowed(id: string, bytes: Uint8Array): Promise<ScreeningResult>;
+}
+//# sourceMappingURL=screening.d.ts.map

package/dist/screening.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"screening.d.ts","sourceRoot":"","sources":["../src/screening.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GAAC;IAAC,IAAI,EAAC,OAAO,GAAC,OAAO,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC;IAAA,UAAU,CAAC,EAAC,MAAM,CAAA;CAAC,CAAC;AACpH,MAAM,MAAM,eAAe,GAAC;IAAC,EAAE,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,WAAW,GAAC,QAAQ,GAAC,YAAY,GAAC,SAAS,GAAC,SAAS,GAAC,QAAQ,CAAC;IAAA,IAAI,EAAC,OAAO,GAAC,OAAO,CAAC;IAAA,UAAU,EAAC,MAAM,EAAE,CAAC;IAAA,MAAM,EAAC,MAAM,GAAC,IAAI,CAAC;IAAA,KAAK,EAAC,MAAM,GAAC,IAAI,CAAC;IAAA,aAAa,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,GAAC,IAAI,CAAA;CAAC,CAAC;AAC9Q,oFAAoF;AACpF,qBAAa,eAAe;IAEf,OAAO,CAAC,OAAO;IAD3B,OAAO,CAAC,GAAG,CAAQ;gBACC,OAAO,EAAC;QAAC,MAAM,EAAC,MAAM,CAAC;QAAA,OAAO,CAAC,EAAC,MAAM,CAAC;QAAA,KAAK,CAAC,EAAC,OAAO,KAAK,CAAA;KAAC;YAIjE,OAAO;IAMrB,OAAO,CAAC,SAAS,EAAC,MAAM,EAAC,IAAI,EAAC,aAAa;iBAN0C;YAAC,GAAG,EAAC,MAAM,CAAC;YAAA,OAAO,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAA;SAAC;;IAO/H,MAAM,CAAC,EAAE,EAAC,MAAM;iBAPqE;YAAC,GAAG,EAAC,MAAM,CAAC;YAAA,OAAO,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAA;SAAC;;IAQ/H,MAAM,CAAC,EAAE,EAAC,MAAM;iBARqE;YAAC,GAAG,EAAC,MAAM,CAAC;YAAA,OAAO,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAA;SAAC;;IAS/H,iGAAiG;IAC3F,MAAM,CAAC,SAAS,EAAC,MAAM,EAAC,IAAI,EAAC,aAAa,EAAC,KAAK,EAAC,UAAU,GAAE,OAAO,CAAC,eAAe,CAAC;IAY3F,uEAAuE;IACjE,aAAa,CAAC,EAAE,EAAC,MAAM,EAAC,KAAK,EAAC,UAAU,GAAE,OAAO,CAAC,eAAe,CAAC;CAKxE"}

package/dist/screening.js

@@ -0,0 +1,52 @@
+import { createHash } from 'node:crypto';
+import { RobonoError } from './errors.js';
+/** Server-only. Existing connected networks use their Robono Processing API key. */
+export class RobonoScreening {
+    options;
+    url;
+    constructor(options) {
+        this.options = options;
+        const u = new URL(options.baseUrl ?? 'https://api.robono.com/v1/screening');
+        if (u.protocol !== 'https:' || u.username || u.password || !options.apiKey.trim())
+            throw Error('Use HTTPS and a server API key.');
+        this.url = u.href;
+    }
+    async request(operation, body) {
+        const r = await (this.options.fetch ?? fetch)(this.url, { method: 'POST', redirect: 'error', signal: AbortSignal.timeout(30000), headers: { authorization: 'Bearer ' + this.options.apiKey, 'content-type': 'application/json' }, body: JSON.stringify({ ...body, operation }) });
+        const data = await r.json().catch(() => null);
+        if (!r.ok)
+            throw new RobonoError(data?.error?.message ?? 'Screening request failed.', { status: r.status, code: data?.error?.code ?? 'screening_unavailable', retryable: r.status === 429 || r.status >= 500 });
+        if (!data?.id || !['uploading', 'queued', 'processing', 'allowed', 'blocked', 'failed'].includes(data.state))
+            throw Error('Invalid screening response');
+        return data;
+    }
+    prepare(requestId, file) { return this.request('prepare', { requestId, file }); }
+    submit(id) { return this.request('submit', { id }); }
+    status(id) { return this.request('status', { id }); }
+    /** Upload exactly the bytes to be published. Returns a job; never treats pending as approved. */
+    async upload(requestId, file, bytes) {
+        if (file.byteSize !== bytes.byteLength)
+            throw Error('File size does not match the supplied bytes.');
+        const digest = createHash('sha256').update(bytes).digest('hex');
+        const prepared = await this.prepare(requestId, file);
+        if (prepared.sha256 && prepared.sha256 !== digest)
+            throw Error('This request ID belongs to different file contents.');
+        if (prepared.upload) {
+            const destination = new URL(prepared.upload.url);
+            if (destination.protocol !== 'https:' || destination.username || destination.password)
+                throw Error('Invalid private upload URL');
+            const r = await (this.options.fetch ?? fetch)(destination, { method: 'PUT', redirect: 'error', headers: prepared.upload.headers, body: bytes, signal: AbortSignal.timeout(120000) });
+            if (!r.ok && r.status !== 412)
+                throw new RobonoError('Screening upload failed.', { status: r.status, code: 'screening_upload_failed', retryable: true });
+        }
+        return this.submit(prepared.id);
+    }
+    /** Call this before releasing bytes stored by your own application. */
+    async assertAllowed(id, bytes) {
+        const result = await this.status(id);
+        if (result.state !== 'allowed' || !result.sha256 || createHash('sha256').update(bytes).digest('hex') !== result.sha256)
+            throw new RobonoError('This file has not been approved for delivery.', { status: 409, code: result.state === 'blocked' ? 'content_blocked' : 'screening_not_approved', retryable: result.state === 'queued' || result.state === 'processing' });
+        return result;
+    }
+}
+//# sourceMappingURL=screening.js.map

package/dist/screening.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"screening.js","sourceRoot":"","sources":["../src/screening.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAGxC,oFAAoF;AACpF,MAAM,OAAO,eAAe;IAEP;IADZ,GAAG,CAAQ;IACnB,YAAoB,OAA2D;QAA3D,YAAO,GAAP,OAAO,CAAoD;QAC9E,MAAM,CAAC,GAAC,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAE,qCAAqC,CAAC,CAAC;QACxE,IAAG,CAAC,CAAC,QAAQ,KAAG,QAAQ,IAAE,CAAC,CAAC,QAAQ,IAAE,CAAC,CAAC,QAAQ,IAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;YAAC,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAAA,IAAI,CAAC,GAAG,GAAC,CAAC,CAAC,IAAI,CAAC;IACzI,CAAC;IACO,KAAK,CAAC,OAAO,CAAC,SAAgB,EAAC,IAAW;QACjD,MAAM,CAAC,GAAC,MAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,MAAM,EAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAC,OAAO,EAAC,EAAC,aAAa,EAAC,SAAS,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAC,cAAc,EAAC,kBAAkB,EAAC,EAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,EAAC,GAAG,IAAI,EAAC,SAAS,EAAC,CAAC,EAAC,CAAC,CAAC;QACvP,MAAM,IAAI,GAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,CAAC;QAC1C,IAAG,CAAC,CAAC,CAAC,EAAE;YAAC,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,IAAE,2BAA2B,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAC,IAAI,EAAC,IAAI,EAAE,KAAK,EAAE,IAAI,IAAE,uBAAuB,EAAC,SAAS,EAAC,CAAC,CAAC,MAAM,KAAG,GAAG,IAAE,CAAC,CAAC,MAAM,IAAE,GAAG,EAAC,CAAC,CAAC;QAC5L,IAAG,CAAC,IAAI,EAAE,EAAE,IAAE,CAAC,CAAC,WAAW,EAAC,QAAQ,EAAC,YAAY,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;YAAC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAC5J,CAAC;IACD,OAAO,CAAC,SAAgB,EAAC,IAAkB,IAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,CAAC,CAAC,CAAA,CAAC;IAC9F,MAAM,CAAC,EAAS,IAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAC,EAAC,EAAE,EAAC,CAAC,CAAC,CAAA,CAAC;IACtD,MAAM,CAAC,EAAS,IAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAC,EAAC,EAAE,EAAC,CAAC,CAAC,CAAA,CAAC;IACtD,iGAAiG;IACjG,KAAK,CAAC,MAAM,CAAC,SAAgB,EAAC,IAAkB,EAAC,KAAgB;QAChE,IAAG,IAAI,CAAC,QAAQ,KAAG,KAAK,CAAC,UAAU;YAAC,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAChG,MAAM,MAAM,GAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,IAAI,CAAC,CAAC;QAClD,IAAG,QAAQ,CAAC,MAAM,IAAE,QAAQ,CAAC,MAAM,KAAG,MAAM;YAAC,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAChH,IAAG,QAAQ,CAAC,MAAM,EAAC,CAAC;YACnB,MAAM,WAAW,GAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAA,IAAG,WAAW,CAAC,QAAQ,KAAG,QAAQ,IAAE,WAAW,CAAC,QAAQ,IAAE,WAAW,CAAC,QAAQ;gBAAC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACxK,MAAM,CAAC,GAAC,MAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAE,KAAK,CAAC,CAAC,WAAW,EAAC,EAAC,MAAM,EAAC,KAAK,EAAC,QAAQ,EAAC,OAAO,EAAC,OAAO,EAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAC,IAAI,EAAC,KAAiB,EAAC,MAAM,EAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAC,CAAC,CAAC;YAChL,IAAG,CAAC,CAAC,CAAC,EAAE,IAAE,CAAC,CAAC,MAAM,KAAG,GAAG;gBAAC,MAAM,IAAI,WAAW,CAAC,0BAA0B,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAC,IAAI,EAAC,yBAAyB,EAAC,SAAS,EAAC,IAAI,EAAC,CAAC,CAAC;QAC5I,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IACD,uEAAuE;IACvE,KAAK,CAAC,aAAa,CAAC,EAAS,EAAC,KAAgB;QAC7C,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnC,IAAG,MAAM,CAAC,KAAK,KAAG,SAAS,IAAE,CAAC,MAAM,CAAC,MAAM,IAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAG,MAAM,CAAC,MAAM;YAAC,MAAM,IAAI,WAAW,CAAC,+CAA+C,EAAC,EAAC,MAAM,EAAC,GAAG,EAAC,IAAI,EAAC,MAAM,CAAC,KAAK,KAAG,SAAS,CAAA,CAAC,CAAA,iBAAiB,CAAA,CAAC,CAAA,wBAAwB,EAAC,SAAS,EAAC,MAAM,CAAC,KAAK,KAAG,QAAQ,IAAE,MAAM,CAAC,KAAK,KAAG,YAAY,EAAC,CAAC,CAAC;QAC1U,OAAO,MAAM,CAAC;IACf,CAAC;CACD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@robono/server",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "Provider-neutral server SDK for the Robono Bridge API.",
   "keywords": [
     "robono",
@@ -48,7 +48,8 @@
     "LICENSE",
     "SBOM.spdx.json",
     "sql",
-    "NOTIFICATIONS.md"
+    "NOTIFICATIONS.md",
+    "SCREENING.md"
   ],
   "scripts": {
     "build": "tsc -p tsconfig.json",