@softure-ai/privacy 0.0.0-stage → 0.1.5

package/dist/messages/index.d.ts

@@ -0,0 +1,99 @@
+import type { DeleteAccountErrorCode } from "../contract.js";
+import { en } from "./en.js";
+/** Complete default dictionaries; apps pass partial overrides per locale. */
+export declare const privacyMessages: {
+    en: {
+        page: {
+            title: string;
+            lead: string;
+        };
+        export: {
+            title: string;
+            description: string;
+            button: string;
+        };
+        delete: {
+            title: string;
+            description: string;
+            password: string;
+            confirm: string;
+            submit: string;
+            pending: string;
+        };
+        legal: {
+            contents: string;
+            version: string;
+            effectiveFrom: string;
+            changes: string;
+            footer: string;
+        };
+        errors: {
+            privacy: {
+                export_failed: string;
+                export_too_large: string;
+                deletion_refused: string;
+                password_invalid: string;
+                confirmation_required: string;
+            };
+            auth: {
+                unauthenticated: string;
+            };
+            security: {
+                rate_limited: string;
+            };
+            core: {
+                database_failed: string;
+                unexpected: string;
+            };
+        };
+    };
+    pl: {
+        page: {
+            title: string;
+            lead: string;
+        };
+        export: {
+            title: string;
+            description: string;
+            button: string;
+        };
+        delete: {
+            title: string;
+            description: string;
+            password: string;
+            confirm: string;
+            submit: string;
+            pending: string;
+        };
+        legal: {
+            contents: string;
+            version: string;
+            effectiveFrom: string;
+            changes: string;
+            footer: string;
+        };
+        errors: {
+            privacy: {
+                export_failed: string;
+                export_too_large: string;
+                deletion_refused: string;
+                password_invalid: string;
+                confirmation_required: string;
+            };
+            auth: {
+                unauthenticated: string;
+            };
+            security: {
+                rate_limited: string;
+            };
+            core: {
+                database_failed: string;
+                unexpected: string;
+            };
+        };
+    };
+};
+export type PrivacyMessages = typeof en;
+/** The copy for an error code; an unknown code gets the generic failure. */
+export declare function getPrivacyErrorMessage(messages: PrivacyMessages, code: DeleteAccountErrorCode): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/messages/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/messages/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAG7B,6EAA6E;AAC7E,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAa,CAAC;AAE1C,MAAM,MAAM,eAAe,GAAG,OAAO,EAAE,CAAC;AAExC,4EAA4E;AAC5E,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,sBAAsB,GAAG,MAAM,CAOtG"}

package/dist/messages/index.js

@@ -0,0 +1,14 @@
+import { en } from "./en.js";
+import { pl } from "./pl.js";
+/** Complete default dictionaries; apps pass partial overrides per locale. */
+export const privacyMessages = { en, pl };
+/** The copy for an error code; an unknown code gets the generic failure. */
+export function getPrivacyErrorMessage(messages, code) {
+    const separator = code.lastIndexOf(".");
+    const namespace = code.slice(0, separator);
+    const name = code.slice(separator + 1);
+    const groups = messages.errors;
+    const group = Object.hasOwn(groups, namespace) ? groups[namespace] : undefined;
+    return (group !== undefined && Object.hasOwn(group, name) ? group[name] : undefined) ?? messages.errors.core.unexpected;
+}
+//# sourceMappingURL=index.js.map

package/dist/messages/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/messages/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAE7B,6EAA6E;AAC7E,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;AAI1C,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CAAC,QAAyB,EAAE,IAA4B;IAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAoE,CAAC;IAC7F,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;AAC1H,CAAC"}

package/dist/messages/pl.d.ts

@@ -0,0 +1,3 @@
+import type { en } from "./en.js";
+export declare const pl: typeof en;
+//# sourceMappingURL=pl.d.ts.map

package/dist/messages/pl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pl.d.ts","sourceRoot":"","sources":["../../src/messages/pl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAElC,eAAO,MAAM,EAAE,EAAE,OAAO,EA4CvB,CAAC"}

package/dist/messages/pl.js

@@ -0,0 +1,46 @@
+export const pl = {
+    page: {
+        title: "Twoje dane",
+        lead: "Pobierz kopię danych, które ta aplikacja o Tobie przechowuje, albo usuń konto.",
+    },
+    export: {
+        title: "Pobierz swoje dane",
+        description: "Plik JSON ze wszystkim, co ta aplikacja przechowuje o Twoim koncie.",
+        button: "Pobierz moje dane",
+    },
+    delete: {
+        title: "Usuń konto",
+        description: "To usunie Twoje konto i dane oraz wyloguje Cię na wszystkich urządzeniach. Tego nie da się cofnąć.",
+        password: "Obecne hasło",
+        confirm: "Rozumiem, że moje konto i moje dane zostaną usunięte na zawsze.",
+        submit: "Usuń moje konto",
+        pending: "Usuwanie…",
+    },
+    legal: {
+        contents: "Spis treści",
+        version: "Wersja",
+        effectiveFrom: "Obowiązuje od",
+        changes: "Historia zmian",
+        footer: "Informacje prawne",
+    },
+    errors: {
+        privacy: {
+            export_failed: "Nie udało się zebrać Twoich danych. Spróbuj ponownie za chwilę.",
+            export_too_large: "Twoich danych jest za dużo, by pobrać je tutaj. Napisz do nas, a prześlemy je.",
+            deletion_refused: "Nie można teraz usunąć konta, bo część jego danych musimy jeszcze przechowywać. Napisz do nas po szczegóły.",
+            password_invalid: "To nie jest Twoje obecne hasło.",
+            confirmation_required: "Potwierdź, że chcesz usunąć konto.",
+        },
+        auth: {
+            unauthenticated: "Twoja sesja wygasła. Zaloguj się ponownie.",
+        },
+        security: {
+            rate_limited: "Zbyt wiele prób. Odczekaj chwilę i spróbuj ponownie.",
+        },
+        core: {
+            database_failed: "Coś poszło nie tak po naszej stronie. Spróbuj ponownie za chwilę.",
+            unexpected: "Coś poszło nie tak po naszej stronie. Spróbuj ponownie za chwilę.",
+        },
+    },
+};
+//# sourceMappingURL=pl.js.map

package/dist/messages/pl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pl.js","sourceRoot":"","sources":["../../src/messages/pl.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,EAAE,GAAc;IAC3B,IAAI,EAAE;QACJ,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,gFAAgF;KACvF;IACD,MAAM,EAAE;QACN,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,qEAAqE;QAClF,MAAM,EAAE,mBAAmB;KAC5B;IACD,MAAM,EAAE;QACN,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,oGAAoG;QACjH,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,iEAAiE;QAC1E,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,WAAW;KACrB;IACD,KAAK,EAAE;QACL,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,eAAe;QAC9B,OAAO,EAAE,gBAAgB;QACzB,MAAM,EAAE,mBAAmB;KAC5B;IACD,MAAM,EAAE;QACN,OAAO,EAAE;YACP,aAAa,EAAE,iEAAiE;YAChF,gBAAgB,EAAE,gFAAgF;YAClG,gBAAgB,EAAE,6GAA6G;YAC/H,gBAAgB,EAAE,iCAAiC;YACnD,qBAAqB,EAAE,oCAAoC;SAC5D;QACD,IAAI,EAAE;YACJ,eAAe,EAAE,4CAA4C;SAC9D;QACD,QAAQ,EAAE;YACR,YAAY,EAAE,sDAAsD;SACrE;QACD,IAAI,EAAE;YACJ,eAAe,EAAE,mEAAmE;YACpF,UAAU,EAAE,mEAAmE;SAChF;KACF;CACF,CAAC"}

package/dist/next/actions.d.ts

@@ -0,0 +1,4 @@
+import type { DeleteAccountFormState } from "../contract.js";
+/** Deletes the signed-in user's account, ends the browser's session and goes to `afterDelete`. */
+export declare function deleteAccountAction(_previous: DeleteAccountFormState, formData: FormData): Promise<DeleteAccountFormState>;
+//# sourceMappingURL=actions.d.ts.map

package/dist/next/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/next/actions.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAA8C,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AA4BzG,kGAAkG;AAClG,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,sBAAsB,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAqBhI"}

package/dist/next/actions.js

@@ -0,0 +1,57 @@
+"use server";
+// The account deletion action. The user comes from the session (never from a bound argument or
+// the form, which the client controls, docs/02 §8) before the form is read; unexpected failures
+// become `safeError` codes. Next refuses an action whose Origin does not match the host.
+import { getCurrentUser } from "@softure-ai/auth/next";
+import { errorLogLabel, safeError } from "@softure-ai/core";
+import { getSoftureConfig } from "@softure-ai/core/next";
+import { redirect } from "next/navigation";
+import { z } from "zod";
+import { getPrivacyRoutes } from "../server/options.js";
+import { deleteOwnAccount } from "../server/self-service.js";
+import { getPrivacyContext } from "./context.js";
+import { clearSessionCookie } from "./session-cookie.js";
+/** Longer values are cut: auth refuses them anyway, and nothing huge is hashed. */
+const MAX_FIELD_LENGTH = 4096;
+const deleteAccountInput = z.object({
+    password: z
+        .string()
+        .catch("")
+        .transform((value) => value.slice(0, MAX_FIELD_LENGTH)),
+    // A checked HTML checkbox sends "on" (or its value); an unchecked one sends nothing.
+    confirm: z.string().nullable().catch(null),
+});
+const FIELD_OF = {
+    "privacy.password_invalid": "password",
+    "privacy.confirmation_required": "confirm",
+};
+function failure(error) {
+    const field = FIELD_OF[error];
+    return field === undefined ? { status: "error", error } : { status: "error", error, field };
+}
+/** Deletes the signed-in user's account, ends the browser's session and goes to `afterDelete`. */
+export async function deleteAccountAction(_previous, formData) {
+    const config = getSoftureConfig();
+    let result;
+    try {
+        const user = await getCurrentUser();
+        if (user === null)
+            return failure("auth.unauthenticated");
+        // Every field has a `catch`, so parsing cannot fail.
+        const input = deleteAccountInput.parse({ password: formData.get("password"), confirm: formData.get("confirm") });
+        result = await deleteOwnAccount(await getPrivacyContext(config), {
+            userId: user.id,
+            password: input.password,
+            isConfirmed: input.confirm !== null,
+        });
+    }
+    catch (error) {
+        console.error(`@softure-ai/privacy: account deletion failed: ${errorLogLabel(error)}`);
+        return failure(safeError(error).error);
+    }
+    if (!result.ok)
+        return failure(result.error);
+    await clearSessionCookie(config);
+    redirect(getPrivacyRoutes(config).afterDelete);
+}
+//# sourceMappingURL=actions.js.map

package/dist/next/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/next/actions.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,+FAA+F;AAC/F,gGAAgG;AAChG,yFAAyF;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,mFAAmF;AACnF,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,KAAK,CAAC,EAAE,CAAC;SACT,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACzD,qFAAqF;IACrF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAgE;IAC5E,0BAA0B,EAAE,UAAU;IACtC,+BAA+B,EAAE,SAAS;CAC3C,CAAC;AAEF,SAAS,OAAO,CAAC,KAA6B;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC9F,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiC,EAAE,QAAkB;IAC7F,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC;QACpC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC1D,qDAAqD;QACrD,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjH,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,iBAAiB,CAAC,MAAM,CAAC,EAAE;YAC/D,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,iDAAiD,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvF,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7C,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;AACjD,CAAC"}

package/dist/next/context.d.ts

@@ -0,0 +1,4 @@
+import { type SoftureConfig } from "@softure-ai/core";
+import type { PrivacyContext } from "../server/context.js";
+export declare function getPrivacyContext(config?: SoftureConfig): Promise<PrivacyContext>;
+//# sourceMappingURL=context.d.ts.map

package/dist/next/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/next/context.ts"],"names":[],"mappings":"AAEA,OAAO,EAAe,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,wBAAsB,iBAAiB,CAAC,MAAM,GAAE,aAAkC,GAAG,OAAO,CAAC,cAAc,CAAC,CAM3G"}

package/dist/next/context.js

@@ -0,0 +1,13 @@
+// What the adapter hands the server functions: the registered config, the process-wide database
+// handle and the wall clock. Request scope (cookies, headers) stays in this folder.
+import { systemClock } from "@softure-ai/core";
+import { getSoftureConfig } from "@softure-ai/core/next";
+import { getSharedDatabase } from "@softure-ai/db";
+export async function getPrivacyContext(config = getSoftureConfig()) {
+    if (config.database === null) {
+        throw new Error("@softure-ai/privacy: softure.config.ts has no database; privacy needs one");
+    }
+    const { db } = await getSharedDatabase(config.database.url);
+    return { db, clock: systemClock, config };
+}
+//# sourceMappingURL=context.js.map

package/dist/next/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/next/context.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,oFAAoF;AACpF,OAAO,EAAE,WAAW,EAAsB,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGnD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAwB,gBAAgB,EAAE;IAChF,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC"}

package/dist/next/index.d.ts

@@ -0,0 +1,5 @@
+export { deleteAccountAction } from "./actions.js";
+export { getPrivacyMessages } from "./messages.js";
+export { PrivacyPage } from "./pages.js";
+export { exportRoute } from "./route.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/next/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/next/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/next/index.js

@@ -0,0 +1,7 @@
+// The Next.js adapter of @softure-ai/privacy: the page, the delete action and the export route
+// (docs/02-module-standard.md §8).
+export { deleteAccountAction } from "./actions.js";
+export { getPrivacyMessages } from "./messages.js";
+export { PrivacyPage } from "./pages.js";
+export { exportRoute } from "./route.js";
+//# sourceMappingURL=index.js.map

package/dist/next/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/next/index.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,mCAAmC;AACnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/next/messages.d.ts

@@ -0,0 +1,5 @@
+import type { SoftureConfig } from "@softure-ai/core";
+import type { PrivacyMessages } from "../messages/index.js";
+/** The module's copy in the app's locale, with the app's overrides applied. */
+export declare function getPrivacyMessages(config: SoftureConfig): PrivacyMessages;
+//# sourceMappingURL=messages.d.ts.map

package/dist/next/messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/next/messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG5D,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,GAAG,eAAe,CAGzE"}

package/dist/next/messages.js

@@ -0,0 +1,7 @@
+import { getPrivacyModule } from "../server/options.js";
+/** The module's copy in the app's locale, with the app's overrides applied. */
+export function getPrivacyMessages(config) {
+    // The module factory merged the dictionaries; their shape is the module's own.
+    return getPrivacyModule(config).messages[config.locale];
+}
+//# sourceMappingURL=messages.js.map

package/dist/next/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../src/next/messages.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,+EAA+E;IAC/E,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAoB,CAAC;AAC7E,CAAC"}

package/dist/next/pages.d.ts

@@ -0,0 +1,2 @@
+export declare function PrivacyPage(): Promise<import("react").JSX.Element>;
+//# sourceMappingURL=pages.d.ts.map

package/dist/next/pages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pages.d.ts","sourceRoot":"","sources":["../../src/next/pages.tsx"],"names":[],"mappings":"AAeA,wBAAsB,WAAW,yCAoBhC"}

package/dist/next/pages.js

@@ -0,0 +1,22 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// The privacy page, ready to mount with one line:
+// `export { PrivacyPage as default } from "@softure-ai/privacy/next"` in app/account/privacy/page.tsx.
+// A server component: without a session it redirects to the login page and back.
+import { requireUser } from "@softure-ai/auth/next";
+import { getSoftureConfig } from "@softure-ai/core/next";
+import { ButtonLink, Card } from "@softure-ai/ui";
+import { getPrivacyRoutes } from "../server/options.js";
+import { DeleteAccountForm } from "../ui/delete-account-form.js";
+import { deleteAccountAction } from "./actions.js";
+import { getPrivacyMessages } from "./messages.js";
+const LAYOUT_CLASS = "sft:mx-auto sft:box-border sft:flex sft:w-full sft:flex-col sft:gap-4 sft:sm:max-w-md sft:px-4 sft:py-4";
+const DESCRIPTION_CLASS = "sft:m-0 sft:text-sm sft:text-muted";
+const SECTION_CLASS = "sft:flex sft:flex-col sft:gap-3";
+export async function PrivacyPage() {
+    const config = getSoftureConfig();
+    const routes = getPrivacyRoutes(config);
+    await requireUser({ next: routes.account });
+    const messages = getPrivacyMessages(config);
+    return (_jsxs("main", { className: LAYOUT_CLASS, children: [_jsx(Card, { title: messages.page.title, subtitle: messages.page.lead, variant: "lead", children: _jsxs("div", { className: SECTION_CLASS, children: [_jsx("p", { className: DESCRIPTION_CLASS, children: messages.export.description }), _jsx(ButtonLink, { href: routes.export, download: true, variant: "secondary", children: messages.export.button })] }) }), _jsx(Card, { title: messages.delete.title, children: _jsx(DeleteAccountForm, { action: deleteAccountAction, messages: messages, locale: config.locale }) })] }));
+}
+//# sourceMappingURL=pages.js.map

package/dist/next/pages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pages.js","sourceRoot":"","sources":["../../src/next/pages.tsx"],"names":[],"mappings":";AAAA,kDAAkD;AAClD,uGAAuG;AACvG,iFAAiF;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,YAAY,GAAG,yGAAyG,CAAC;AAC/H,MAAM,iBAAiB,GAAG,oCAAoC,CAAC;AAC/D,MAAM,aAAa,GAAG,iCAAiC,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,CACL,gBAAM,SAAS,EAAE,YAAY,aAC3B,KAAC,IAAI,IAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAC,MAAM,YAC5E,eAAK,SAAS,EAAE,aAAa,aAC3B,YAAG,SAAS,EAAE,iBAAiB,YAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,GAAK,EAClE,KAAC,UAAU,IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,QAAC,OAAO,EAAC,WAAW,YAC1D,QAAQ,CAAC,MAAM,CAAC,MAAM,GACZ,IACT,GACD,EACP,KAAC,IAAI,IAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,YAChC,KAAC,iBAAiB,IAAC,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAI,GACxF,IACF,CACR,CAAC;AACJ,CAAC"}

package/dist/next/route.d.ts

@@ -0,0 +1,6 @@
+/**
+ * The signed-in user's data as a JSON download. 401 without a session, 429 with `retry-after` over
+ * the `privacy-export` limit, 413 over `export.maxBytes`, 500 when a contributor fails.
+ */
+export declare function exportRoute(): Promise<Response>;
+//# sourceMappingURL=route.d.ts.map

package/dist/next/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../src/next/route.ts"],"names":[],"mappings":"AAsBA;;;GAGG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,CAuBrD"}

package/dist/next/route.js

@@ -0,0 +1,49 @@
+// The export route handler. Mount with a rename:
+// `export { exportRoute as GET } from "@softure-ai/privacy/next"` in app/api/privacy/export/route.ts.
+// The user comes from the session cookie only; the answer is a JSON attachment that is never cached.
+import { getCurrentUser } from "@softure-ai/auth/next";
+import { errorLogLabel, safeError } from "@softure-ai/core";
+import { getSoftureConfig } from "@softure-ai/core/next";
+import { getPrivacyOptions } from "../server/options.js";
+import { exportOwnData } from "../server/self-service.js";
+import { getPrivacyContext } from "./context.js";
+const NO_STORE = { "cache-control": "no-store", "x-content-type-options": "nosniff" };
+function fail(error, status, headers = {}) {
+    return Response.json({ error }, { status, headers: { ...NO_STORE, ...headers } });
+}
+/** `account-data-2026-10-03.json`: the date of the download in the app's time zone. */
+function getFileName(config, now) {
+    const date = new Intl.DateTimeFormat("en-CA", { timeZone: config.timezone, year: "numeric", month: "2-digit", day: "2-digit" }).format(now);
+    return `${getPrivacyOptions(config).export.fileName}-${date}.json`;
+}
+/**
+ * The signed-in user's data as a JSON download. 401 without a session, 429 with `retry-after` over
+ * the `privacy-export` limit, 413 over `export.maxBytes`, 500 when a contributor fails.
+ */
+export async function exportRoute() {
+    try {
+        const config = getSoftureConfig();
+        const user = await getCurrentUser();
+        if (user === null)
+            return fail("auth.unauthenticated", 401);
+        const ctx = await getPrivacyContext(config);
+        const result = await exportOwnData(ctx, { userId: user.id });
+        if (!result.ok) {
+            if ("retryAfterSeconds" in result)
+                return fail(result.error, 429, { "retry-after": String(result.retryAfterSeconds) });
+            return fail(result.error, result.error === "privacy.export_too_large" ? 413 : 500);
+        }
+        return new Response(result.value.json, {
+            headers: {
+                ...NO_STORE,
+                "content-type": "application/json; charset=utf-8",
+                "content-disposition": `attachment; filename="${getFileName(config, ctx.clock.now())}"`,
+            },
+        });
+    }
+    catch (error) {
+        console.error(`@softure-ai/privacy: export failed: ${errorLogLabel(error)}`);
+        return fail(safeError(error).error, 500);
+    }
+}
+//# sourceMappingURL=route.js.map

package/dist/next/route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../src/next/route.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,sGAAsG;AACtG,qGAAqG;AACrG,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAsB,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,QAAQ,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,wBAAwB,EAAE,SAAS,EAAE,CAAC;AAEtF,SAAS,IAAI,CAAC,KAAa,EAAE,MAAc,EAAE,UAAkC,EAAE;IAC/E,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,uFAAuF;AACvF,SAAS,WAAW,CAAC,MAAqB,EAAE,GAAS;IACnD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5I,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,OAAO,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC;QACpC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;QAE5D,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,IAAI,mBAAmB,IAAI,MAAM;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;YACvH,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,0BAA0B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YACrC,OAAO,EAAE;gBACP,GAAG,QAAQ;gBACX,cAAc,EAAE,iCAAiC;gBACjD,qBAAqB,EAAE,yBAAyB,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG;aACxF;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC"}

package/dist/next/session-cookie.d.ts

@@ -0,0 +1,3 @@
+import type { SoftureConfig } from "@softure-ai/core";
+export declare function clearSessionCookie(config: SoftureConfig): Promise<void>;
+//# sourceMappingURL=session-cookie.d.ts.map

package/dist/next/session-cookie.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-cookie.d.ts","sourceRoot":"","sources":["../../src/next/session-cookie.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAW7E"}

package/dist/next/session-cookie.js

@@ -0,0 +1,17 @@
+// Ending the browser's session cookie after the account is gone. The database sessions are
+// deleted with the account; this removes the cookie with the attributes auth set it with.
+import { getSessionCookie } from "@softure-ai/auth";
+import { cookies } from "next/headers";
+export async function clearSessionCookie(config) {
+    const cookie = getSessionCookie(config);
+    const store = await cookies();
+    store.set(cookie.name, "", {
+        httpOnly: cookie.httpOnly,
+        secure: cookie.secure,
+        sameSite: cookie.sameSite,
+        path: cookie.path,
+        domain: cookie.domain,
+        maxAge: 0,
+    });
+}
+//# sourceMappingURL=session-cookie.js.map

package/dist/next/session-cookie.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-cookie.js","sourceRoot":"","sources":["../../src/next/session-cookie.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,0FAA0F;AAC1F,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAqB;IAC5D,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,OAAO,EAAE,CAAC;IAC9B,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,CAAC;KACV,CAAC,CAAC;AACL,CAAC"}

package/dist/options.d.ts

@@ -0,0 +1,27 @@
+import { z } from "zod";
+/** Kebab-case, like a module id: contributor ids are the keys of the export. */
+export declare const CONTRIBUTOR_ID_PATTERN: RegExp;
+/** A document version as the app writes it, e.g. `2026-10-01` or `1.2`. */
+export declare const DOCUMENT_VERSION_PATTERN: RegExp;
+/** The export size limit when the app sets none. */
+export declare const DEFAULT_EXPORT_MAX_BYTES: number;
+export declare const privacyOptionsSchema: z.ZodObject<{
+    contributors: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        exportUserData: z.ZodOptional<z.ZodCustom<(context: import("@softure-ai/core").ModuleContext, userId: string) => Promise<import("@softure-ai/core").Result<unknown>>, (context: import("@softure-ai/core").ModuleContext, userId: string) => Promise<import("@softure-ai/core").Result<unknown>>>>;
+        deleteUserData: z.ZodOptional<z.ZodCustom<(context: import("@softure-ai/core").ModuleContext, userId: string) => Promise<import("@softure-ai/core").Result<undefined>>, (context: import("@softure-ai/core").ModuleContext, userId: string) => Promise<import("@softure-ai/core").Result<undefined>>>>;
+    }, z.core.$strict>>>;
+    documents: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        version: z.ZodString;
+    }, z.core.$strict>>>;
+    export: z.ZodPrefault<z.ZodObject<{
+        maxBytes: z.ZodDefault<z.ZodNumber>;
+        fileName: z.ZodDefault<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type PrivacyOptionsInput = z.input<typeof privacyOptionsSchema>;
+export type PrivacyOptions = z.output<typeof privacyOptionsSchema>;
+export type AppPrivacyContributor = PrivacyOptions["contributors"][number];
+export type LegalDocumentDeclaration = PrivacyOptions["documents"][number];
+//# sourceMappingURL=options.d.ts.map

package/dist/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,QAAoC,CAAC;AAExE,2EAA2E;AAC3E,eAAO,MAAM,wBAAwB,QAAsC,CAAC;AAI5E,oDAAoD;AACpD,eAAO,MAAM,wBAAwB,QAAgB,CAAC;AA8BtD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;kBAsC7B,CAAC;AAEL,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACvE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACnE,MAAM,MAAM,qBAAqB,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3E,MAAM,MAAM,wBAAwB,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/options.js

@@ -0,0 +1,70 @@
+import { z } from "zod";
+/** Kebab-case, like a module id: contributor ids are the keys of the export. */
+export const CONTRIBUTOR_ID_PATTERN = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/;
+/** A document version as the app writes it, e.g. `2026-10-01` or `1.2`. */
+export const DOCUMENT_VERSION_PATTERN = /^[0-9A-Za-z][0-9A-Za-z._-]{0,31}$/;
+const MEBIBYTE = 1024 * 1024;
+/** The export size limit when the app sets none. */
+export const DEFAULT_EXPORT_MAX_BYTES = 10 * MEBIBYTE;
+const isFunction = (value) => typeof value === "function";
+const appContributorSchema = z
+    .strictObject({
+    /** Names the contributor's part of the export and its log lines, e.g. `profile`. */
+    id: z.string().max(64, "must be at most 64 characters").regex(CONTRIBUTOR_ID_PATTERN, "must be kebab-case, e.g. user-profile"),
+    /** The user's data held by the app, as plain JSON values (dates become ISO strings). */
+    exportUserData: z.custom(isFunction, "must be a function").optional(),
+    /** Deletes (or anonymises) that data. An `Err` refuses the deletion of the whole account. */
+    deleteUserData: z.custom(isFunction, "must be a function").optional(),
+})
+    .refine((contributor) => contributor.exportUserData !== undefined || contributor.deleteUserData !== undefined, {
+    message: "needs exportUserData, deleteUserData or both",
+});
+const legalDocumentSchema = z.strictObject({
+    /** Names the document in consent records and in `getLegalDocument`, e.g. `terms`. */
+    id: z.string().max(64, "must be at most 64 characters").regex(CONTRIBUTOR_ID_PATTERN, "must be kebab-case, e.g. privacy-policy"),
+    /**
+     * The version in force, stamped on every consent given to the document. Change it whenever the
+     * published text changes, e.g. to the date the new text takes effect.
+     */
+    version: z.string().regex(DOCUMENT_VERSION_PATTERN, "must be 1-32 letters, digits, '.', '_' or '-', e.g. 2026-10-01"),
+});
+export const privacyOptionsSchema = z
+    .strictObject({
+    /**
+     * The app's own contributors, next to the ones of its modules. They export after the modules
+     * and delete before them, so app tables that reference module tables go first.
+     */
+    contributors: z.array(appContributorSchema).default([]),
+    /** The app's legal documents (terms, privacy policy) and their current versions. */
+    documents: z.array(legalDocumentSchema).default([]),
+    export: z
+        .strictObject({
+        /** The largest export, in bytes of JSON; a larger one is refused instead of sent. */
+        maxBytes: z
+            .number()
+            .int()
+            .min(1024)
+            .max(100 * MEBIBYTE)
+            .default(DEFAULT_EXPORT_MAX_BYTES),
+        /** The download's file name before the date, e.g. `account-data-2026-10-03.json`. */
+        fileName: z.string().regex(/^[a-z0-9][a-z0-9-]{0,63}$/, "must be 1-64 lowercase letters, digits or -").default("account-data"),
+    })
+        .prefault({}),
+})
+    .superRefine((options, context) => {
+    const seen = new Set();
+    options.contributors.forEach((contributor, index) => {
+        if (seen.has(contributor.id)) {
+            context.addIssue({ code: "custom", path: ["contributors", index, "id"], message: `"${contributor.id}" is registered twice` });
+        }
+        seen.add(contributor.id);
+    });
+    const documentIds = new Set();
+    options.documents.forEach((document, index) => {
+        if (documentIds.has(document.id)) {
+            context.addIssue({ code: "custom", path: ["documents", index, "id"], message: `"${document.id}" is declared twice` });
+        }
+        documentIds.add(document.id);
+    });
+});
+//# sourceMappingURL=options.js.map

package/dist/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,iCAAiC,CAAC;AAExE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,wBAAwB,GAAG,mCAAmC,CAAC;AAE5E,MAAM,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC;AAE7B,oDAAoD;AACpD,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,QAAQ,CAAC;AAKtD,MAAM,UAAU,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,UAAU,CAAC;AAEnE,MAAM,oBAAoB,GAAG,CAAC;KAC3B,YAAY,CAAC;IACZ,oFAAoF;IACpF,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAC,KAAK,CAAC,sBAAsB,EAAE,uCAAuC,CAAC;IAC9H,wFAAwF;IACxF,cAAc,EAAE,CAAC,CAAC,MAAM,CAAiB,UAAU,EAAE,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACrF,6FAA6F;IAC7F,cAAc,EAAE,CAAC,CAAC,MAAM,CAAiB,UAAU,EAAE,oBAAoB,CAAC,CAAC,QAAQ,EAAE;CACtF,CAAC;KACD,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,cAAc,KAAK,SAAS,IAAI,WAAW,CAAC,cAAc,KAAK,SAAS,EAAE;IAC7G,OAAO,EAAE,8CAA8C;CACxD,CAAC,CAAC;AAEL,MAAM,mBAAmB,GAAG,CAAC,CAAC,YAAY,CAAC;IACzC,qFAAqF;IACrF,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAC,KAAK,CAAC,sBAAsB,EAAE,yCAAyC,CAAC;IAChI;;;OAGG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,EAAE,gEAAgE,CAAC;CACtH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,YAAY,CAAC;IACZ;;;OAGG;IACH,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,oFAAoF;IACpF,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,MAAM,EAAE,CAAC;SACN,YAAY,CAAC;QACZ,qFAAqF;QACrF,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,IAAI,CAAC;aACT,GAAG,CAAC,GAAG,GAAG,QAAQ,CAAC;aACnB,OAAO,CAAC,wBAAwB,CAAC;QACpC,qFAAqF;QACrF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,EAAE,6CAA6C,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;KAC/H,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;CAChB,CAAC;KACD,WAAW,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,WAAW,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAChI,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC5C,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,QAAQ,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACxH,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}