@shipstatic/types 2.18.0 → 2.19.0

package/dist/index.d.ts

@@ -1221,9 +1221,10 @@ export declare const SIGN_IN_RETURN_PARAM = "signing-in";
  * How a request (or recorded activity) was authorized.
  *
  * Client populations: `SESSION` (first-party cookie), `API_KEY` (`ship-`
- * key), `TOKEN` (`deploy-` deploy token), `AGENT` (anonymous public deploy —
- * no credential; the platform grants the public-account identity per
- * request), `OAUTH` (delegated access token). The one server population:
+ * key), `TOKEN` (`deploy-` deploy token), `AGENT` (anonymous, no credential:
+ * public deploys are granted the public-account identity per request, and a
+ * captcha-verified share-link setup open audits as this population),
+ * `OAUTH` (delegated access token). The one server population:
  * `SYSTEM` (scheduled/background jobs). Webhook receipt is deliberately not
  * a population: a signed delivery is verified, never authorized — it acts
  * as no one and audits as no one.
@@ -1972,7 +1973,7 @@ export interface BillingSyncResponse {
  * keeps no IP address. Activity from deploys made without an account ages
  * out sooner, and deleting an account removes its rows outright, at any age.
  */
-export type ActivityEvent = 'account.create' | 'account.delete' | 'account.key.generate' | 'account.plan.transition' | 'deployment.create' | 'deployment.update' | 'deployment.delete' | 'deployment.claim' | 'deployment.flagged' | 'deployment.open' | 'domain.create' | 'domain.update' | 'domain.delete' | 'domain.verify' | 'token.create' | 'token.consume' | 'token.delete' | 'checkout.open' | 'admin.account.plan.update' | 'admin.account.suspended.update' | 'admin.account.ref.update' | 'admin.account.labels.update' | 'admin.deployment.delete' | 'admin.domain.delete' | 'admin.impersonate';
+export type ActivityEvent = 'account.create' | 'account.delete' | 'account.key.generate' | 'account.plan.transition' | 'deployment.create' | 'deployment.update' | 'deployment.delete' | 'deployment.claim' | 'deployment.flagged' | 'deployment.open' | 'domain.create' | 'domain.update' | 'domain.delete' | 'domain.verify' | 'domain.setup.open' | 'token.create' | 'token.consume' | 'token.delete' | 'checkout.open' | 'admin.account.plan.update' | 'admin.account.suspended.update' | 'admin.account.ref.update' | 'admin.account.labels.update' | 'admin.deployment.delete' | 'admin.domain.delete' | 'admin.impersonate';
 /**
  * Activity events visible to users in the dashboard
  */

package/dist/index.js

@@ -1148,9 +1148,10 @@ export const SIGN_IN_RETURN_PARAM = 'signing-in';
  * How a request (or recorded activity) was authorized.
  *
  * Client populations: `SESSION` (first-party cookie), `API_KEY` (`ship-`
- * key), `TOKEN` (`deploy-` deploy token), `AGENT` (anonymous public deploy —
- * no credential; the platform grants the public-account identity per
- * request), `OAUTH` (delegated access token). The one server population:
+ * key), `TOKEN` (`deploy-` deploy token), `AGENT` (anonymous, no credential:
+ * public deploys are granted the public-account identity per request, and a
+ * captcha-verified share-link setup open audits as this population),
+ * `OAUTH` (delegated access token). The one server population:
  * `SYSTEM` (scheduled/background jobs). Webhook receipt is deliberately not
  * a population: a signed delivery is verified, never authorized — it acts
  * as no one and audits as no one.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shipstatic/types",
-  "version": "2.18.0",
+  "version": "2.19.0",
   "description": "Shared types for ShipStatic platform",
   "type": "module",
   "main": "./dist/index.js",

package/src/index.ts

@@ -1896,9 +1896,10 @@ export const SIGN_IN_RETURN_PARAM = 'signing-in';
  * How a request (or recorded activity) was authorized.
  *
  * Client populations: `SESSION` (first-party cookie), `API_KEY` (`ship-`
- * key), `TOKEN` (`deploy-` deploy token), `AGENT` (anonymous public deploy —
- * no credential; the platform grants the public-account identity per
- * request), `OAUTH` (delegated access token). The one server population:
+ * key), `TOKEN` (`deploy-` deploy token), `AGENT` (anonymous, no credential:
+ * public deploys are granted the public-account identity per request, and a
+ * captcha-verified share-link setup open audits as this population),
+ * `OAUTH` (delegated access token). The one server population:
  * `SYSTEM` (scheduled/background jobs). Webhook receipt is deliberately not
  * a population: a signed delivery is verified, never authorized — it acts
  * as no one and audits as no one.
@@ -2856,6 +2857,7 @@ export type ActivityEvent =
   | 'domain.update'
   | 'domain.delete'
   | 'domain.verify'
+  | 'domain.setup.open' // Internal: DNS setup instructions were opened, by the owner or through the share link (not user-visible)
   // Token events
   | 'token.create'
   | 'token.consume'