@tickernelz/paperclip-pro-shared 2026.925.0

package/dist/runtime-exposure/ports.test.js

@@ -0,0 +1,46 @@
+import { describe, expect, it } from "vitest";
+import { RUNTIME_EXPOSURE_APP_PORT_MAX, RUNTIME_EXPOSURE_APP_PORT_MIN, RUNTIME_EXPOSURE_HMR_PORT_MAX, RUNTIME_EXPOSURE_HMR_PORT_MIN, RUNTIME_EXPOSURE_HMR_PORT_OFFSET, buildRuntimeExposureHealthUrl, buildRuntimeExposureUrl, deriveViteHmrPort, derivePaperclipViteHmrPort, isAllowedRuntimeExposurePort, isRuntimeExposureAppPort, isRuntimeExposureHmrPort, } from "./ports.js";
+describe("runtime exposure port policy", () => {
+    it("accepts app ports only inside the dedicated range", () => {
+        expect(isRuntimeExposureAppPort(RUNTIME_EXPOSURE_APP_PORT_MIN)).toBe(true);
+        expect(isRuntimeExposureAppPort(RUNTIME_EXPOSURE_APP_PORT_MAX)).toBe(true);
+        expect(isRuntimeExposureAppPort(RUNTIME_EXPOSURE_APP_PORT_MIN - 1)).toBe(false);
+        expect(isRuntimeExposureAppPort(RUNTIME_EXPOSURE_APP_PORT_MAX + 1)).toBe(false);
+    });
+    it("rejects privileged, reserved, and non-integer ports", () => {
+        expect(isAllowedRuntimeExposurePort(443)).toBe(false);
+        expect(isAllowedRuntimeExposurePort(22)).toBe(false);
+        expect(isAllowedRuntimeExposurePort(3100)).toBe(false);
+        expect(isAllowedRuntimeExposurePort(0)).toBe(false);
+        expect(isAllowedRuntimeExposurePort(65536)).toBe(false);
+        expect(isAllowedRuntimeExposurePort(42000.5)).toBe(false);
+        expect(isAllowedRuntimeExposurePort(Number.NaN)).toBe(false);
+    });
+    it("keeps the HMR range in sync with the offset", () => {
+        expect(RUNTIME_EXPOSURE_HMR_PORT_MIN).toBe(RUNTIME_EXPOSURE_APP_PORT_MIN + RUNTIME_EXPOSURE_HMR_PORT_OFFSET);
+        expect(RUNTIME_EXPOSURE_HMR_PORT_MAX).toBe(RUNTIME_EXPOSURE_APP_PORT_MAX + RUNTIME_EXPOSURE_HMR_PORT_OFFSET);
+        expect(isRuntimeExposureHmrPort(RUNTIME_EXPOSURE_HMR_PORT_MIN)).toBe(true);
+        expect(isAllowedRuntimeExposurePort(RUNTIME_EXPOSURE_HMR_PORT_MIN)).toBe(true);
+    });
+    it("derives a deterministic HMR companion port and rejects out-of-range apps", () => {
+        expect(deriveViteHmrPort(42000)).toBe(52000);
+        expect(deriveViteHmrPort(42123)).toBe(52123);
+        expect(() => deriveViteHmrPort(3100)).toThrow(RangeError);
+        expect(() => deriveViteHmrPort(52000)).toThrow(RangeError);
+    });
+    it("shares the generic Paperclip HMR derivation with high-port overflow fallback", () => {
+        expect(derivePaperclipViteHmrPort(3_100)).toBe(13_100);
+        expect(derivePaperclipViteHmrPort(55_535)).toBe(65_535);
+        expect(derivePaperclipViteHmrPort(55_536)).toBe(45_536);
+        expect(() => derivePaperclipViteHmrPort(0)).toThrow(/valid TCP port/);
+    });
+    it("builds https URLs on the non-standard port", () => {
+        expect(buildRuntimeExposureUrl("paperclip-dev.tail29c1aa.ts.net", 42010)).toBe("https://paperclip-dev.tail29c1aa.ts.net:42010");
+        expect(buildRuntimeExposureHealthUrl("paperclip-dev.tail29c1aa.ts.net", 42010)).toBe("https://paperclip-dev.tail29c1aa.ts.net:42010/api/health");
+    });
+    it("rejects empty hostnames and out-of-range ports when building URLs", () => {
+        expect(() => buildRuntimeExposureUrl("", 42010)).toThrow();
+        expect(() => buildRuntimeExposureUrl("host", 443)).toThrow(RangeError);
+    });
+});
+//# sourceMappingURL=ports.test.js.map

package/dist/runtime-exposure/ports.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.test.js","sourceRoot":"","sources":["../../src/runtime-exposure/ports.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,EAC7B,6BAA6B,EAC7B,6BAA6B,EAC7B,gCAAgC,EAChC,6BAA6B,EAC7B,uBAAuB,EACvB,iBAAiB,EACjB,0BAA0B,EAC1B,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AAEpB,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,wBAAwB,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,wBAAwB,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,wBAAwB,CAAC,6BAA6B,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChF,MAAM,CAAC,wBAAwB,CAAC,6BAA6B,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,6BAA6B,CAAC,CAAC,IAAI,CACxC,6BAA6B,GAAG,gCAAgC,CACjE,CAAC;QACF,MAAM,CAAC,6BAA6B,CAAC,CAAC,IAAI,CACxC,6BAA6B,GAAG,gCAAgC,CACjE,CAAC;QACF,MAAM,CAAC,wBAAwB,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,4BAA4B,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,uBAAuB,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAC5E,+CAA+C,CAChD,CAAC;QACF,MAAM,CAAC,6BAA6B,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAClF,0DAA0D,CAC3D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3D,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/self-serve-mcp-research.d.ts

@@ -0,0 +1,5 @@
+import type { SelfServeMcpResearchManifest } from "./types/app-definition.js";
+export declare const SELF_SERVE_MCP_RESEARCH: SelfServeMcpResearchManifest;
+export declare const SELF_SERVE_MCP_CANDIDATES: import("./types/app-definition.js").SelfServeMcpResearchEntry[];
+export declare const BLOCKED_MCP_PROVIDERS: import("./types/app-definition.js").SelfServeMcpResearchEntry[];
+//# sourceMappingURL=self-serve-mcp-research.d.ts.map

package/dist/self-serve-mcp-research.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-serve-mcp-research.d.ts","sourceRoot":"","sources":["../src/self-serve-mcp-research.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAE9E,eAAO,MAAM,uBAAuB,EAAe,4BAA4B,CAAC;AAChF,eAAO,MAAM,yBAAyB,iEAErC,CAAC;AACF,eAAO,MAAM,qBAAqB,iEAEjC,CAAC"}

package/dist/self-serve-mcp-research.js

@@ -0,0 +1,5 @@
+import manifest from "./self-serve-mcp-research.json" with { type: "json" };
+export const SELF_SERVE_MCP_RESEARCH = manifest;
+export const SELF_SERVE_MCP_CANDIDATES = SELF_SERVE_MCP_RESEARCH.entries.filter((entry) => entry.status === "self_serve");
+export const BLOCKED_MCP_PROVIDERS = SELF_SERVE_MCP_RESEARCH.entries.filter((entry) => entry.status === "blocked");
+//# sourceMappingURL=self-serve-mcp-research.js.map

package/dist/self-serve-mcp-research.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-serve-mcp-research.js","sourceRoot":"","sources":["../src/self-serve-mcp-research.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gCAAgC,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAG5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,QAAwC,CAAC;AAChF,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAC7E,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,YAAY,CACzC,CAAC;AACF,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CACzE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CACtC,CAAC"}

package/dist/self-serve-mcp-research.json

@@ -0,0 +1,54 @@
+{
+    "schemaVersion": 1,
+    "verifiedAt": "2026-08-26",
+    "entries": [
+        { "slug": "jira", "name": "Jira", "wave": 1, "status": "self_serve", "docsUrl": "https://support.atlassian.com/atlassian-rovo-mcp-server/docs/getting-started-with-the-atlassian-remote-mcp-server/", "serverUrl": "https://mcp.atlassian.com/v1/mcp/authv2", "authMode": "dcr_cimd", "prerequisite": "An active Jira or Confluence site; tenant policy may require an administrator to approve the client.", "riskTier": "S3" },
+        { "slug": "airtable", "name": "Airtable", "wave": 1, "status": "self_serve", "docsUrl": "https://support.airtable.com/articles/9897799762-using-the-airtable-mcp-server", "serverUrl": "https://mcp.airtable.com/mcp", "authMode": "dcr", "prerequisite": "An Airtable account; enterprise administrators may need to allowlist the client.", "riskTier": "S3" },
+        { "slug": "beehiiv", "name": "beehiiv", "wave": 1, "status": "self_serve", "docsUrl": "https://www.beehiiv.com/features/mcp/getting-started", "serverUrl": "https://mcp.beehiiv.com/mcp", "authMode": "dcr", "prerequisite": "A beehiiv account; the subscription plan controls available write capabilities.", "riskTier": "S3" },
+        { "slug": "bitly", "name": "Bitly", "wave": 1, "status": "self_serve", "docsUrl": "https://dev.bitly.com/bitly-mcp/overview/quickstart/", "serverUrl": "https://api-ssl.bitly.com/v4/mcp", "authMode": "dcr_or_api_key", "prerequisite": "A Bitly account with either browser authorization or an API token.", "riskTier": "S2" },
+        { "slug": "candid", "name": "Candid", "wave": 1, "status": "self_serve", "docsUrl": "https://learning.candid.org/getting-started-with-the-candid-mcp-connector/375441", "serverUrl": "https://mcp.candid.org/mcp", "authMode": "dcr", "prerequisite": "A Candid account with access to the MCP connector.", "riskTier": "S2" },
+        { "slug": "cloudflare", "name": "Cloudflare", "wave": 1, "status": "self_serve", "docsUrl": "https://developers.cloudflare.com/agents/model-context-protocol/cloudflare/servers-for-cloudflare/", "serverUrl": "https://mcp.cloudflare.com/mcp", "authMode": "dcr_or_api_key", "prerequisite": "A Cloudflare account with access to the resources being connected.", "riskTier": "S3" },
+        { "slug": "cloudinary", "name": "Cloudinary", "wave": 1, "status": "self_serve", "docsUrl": "https://cloudinary.com/documentation/cloudinary_llm_mcp", "serverUrl": "https://asset-management.mcp.cloudinary.com/mcp", "authMode": "dcr", "prerequisite": "A Cloudinary account; authorization is limited by the signed-in user's roles.", "riskTier": "S3" },
+        { "slug": "coda", "name": "Coda", "wave": 1, "status": "self_serve", "docsUrl": "https://help.coda.io/hc/en-us/articles/44722769665549-Security-recommendations-for-the-Coda-MCP", "serverUrl": "https://coda.io/apis/mcp", "authMode": "dcr_or_api_key", "prerequisite": "A Coda account; the hosted MCP service is currently beta.", "riskTier": "S3" },
+        { "slug": "hugging-face", "name": "Hugging Face", "wave": 1, "status": "self_serve", "docsUrl": "https://huggingface.co/docs/hub/agents-mcp", "serverUrl": "https://huggingface.co/mcp?login&gradio=none", "authMode": "dcr_cimd", "prerequisite": "A Hugging Face account.", "riskTier": "S2" },
+        { "slug": "kernel", "name": "Kernel", "wave": 1, "status": "self_serve", "docsUrl": "https://www.kernel.sh/docs/reference/mcp-server/", "serverUrl": "https://mcp.onkernel.com/mcp", "authMode": "dcr_or_api_key", "prerequisite": "A Kernel account with either browser authorization or an API key.", "riskTier": "S3" },
+        { "slug": "local-falcon", "name": "Local Falcon", "wave": 1, "status": "self_serve", "docsUrl": "https://docs.localfalcon.com/", "serverUrl": "https://mcp.localfalcon.com", "authMode": "dcr", "prerequisite": "A Local Falcon account with MCP access.", "riskTier": "S2" },
+        { "slug": "make", "name": "Make", "wave": 1, "status": "self_serve", "docsUrl": "https://developers.make.com/mcp-server", "serverUrl": "https://mcp.make.com", "authMode": "dcr", "prerequisite": "A Make account and access to the scenarios exposed to MCP.", "riskTier": "S3" },
+        { "slug": "manufact", "name": "Manufact", "wave": 1, "status": "self_serve", "docsUrl": "https://docs.manufact.com/mcp", "serverUrl": "https://mcp.manufact.com/mcp", "authMode": "dcr", "prerequisite": "A Manufact account with MCP access.", "riskTier": "S3" },
+        { "slug": "miro", "name": "Miro", "wave": 1, "status": "self_serve", "docsUrl": "https://help.miro.com/hc/en-us/articles/31625301583890-How-to-enable-Miro-s-MCP-Server-user-guide", "serverUrl": "https://mcp.miro.com/", "authMode": "dcr", "prerequisite": "A Miro account; enterprise administrators may restrict third-party MCP clients.", "riskTier": "S3" },
+        { "slug": "netlify", "name": "Netlify", "wave": 1, "status": "self_serve", "docsUrl": "https://docs.netlify.com/build/build-with-ai/agent-setup-guides/agent-setup-overview/", "serverUrl": "https://netlify-mcp.netlify.app/mcp", "authMode": "dcr", "prerequisite": "A Netlify account with access to the relevant team and sites.", "riskTier": "S3" },
+        { "slug": "notion", "name": "Notion", "wave": 1, "status": "self_serve", "docsUrl": "https://developers.notion.com/guides/mcp/build-mcp-client", "serverUrl": "https://mcp.notion.com/mcp", "authMode": "dcr", "prerequisite": "A Notion account and access to the pages or databases being shared.", "riskTier": "S3" },
+        { "slug": "oreilly", "name": "O'Reilly", "wave": 1, "status": "self_serve", "docsUrl": "https://learning.oreilly.com/apidocs/mcp/content/", "serverUrl": "https://api.oreilly.com/api/content-discovery/v1/mcp/", "authMode": "dcr_or_api_key", "prerequisite": "An O'Reilly Learning subscription with MCP or API access.", "riskTier": "S2" },
+        { "slug": "planetscale", "name": "PlanetScale", "wave": 1, "status": "self_serve", "docsUrl": "https://planetscale.com/docs/connect/mcp", "serverUrl": "https://mcp.pscale.dev/mcp/planetscale", "authMode": "dcr", "prerequisite": "A PlanetScale account; database and branch access are chosen during authorization.", "riskTier": "S4" },
+        { "slug": "posthog", "name": "PostHog", "wave": 1, "status": "self_serve", "docsUrl": "https://posthog.com/docs/model-context-protocol", "serverUrl": "https://mcp.posthog.com/mcp", "authMode": "dcr_or_api_key", "prerequisite": "A PostHog account; personal API keys and optional organization or project pinning are supported as alternatives and advanced controls.", "riskTier": "S3" },
+        { "slug": "resend", "name": "Resend", "wave": 1, "status": "self_serve", "docsUrl": "https://resend.com/changelog/remote-mcp-server", "serverUrl": "https://mcp.resend.com/mcp", "authMode": "dcr", "prerequisite": "A Resend account with access to the relevant domains.", "riskTier": "S3" },
+        { "slug": "sentry", "name": "Sentry", "wave": 1, "status": "self_serve", "docsUrl": "https://mcp.sentry.dev/.well-known/oauth-authorization-server", "serverUrl": "https://mcp.sentry.dev/mcp", "authMode": "dcr_cimd", "prerequisite": "A Sentry account with access to the relevant organizations and projects.", "riskTier": "S3" },
+        { "slug": "ticktick", "name": "TickTick", "wave": 1, "status": "self_serve", "docsUrl": "https://help.ticktick.com/articles/7438129581631995904", "serverUrl": "https://mcp.ticktick.com", "authMode": "dcr", "prerequisite": "A TickTick account with MCP access.", "riskTier": "S3" },
+        { "slug": "todoist", "name": "Todoist", "wave": 1, "status": "self_serve", "docsUrl": "https://developer.todoist.com/", "serverUrl": "https://ai.todoist.net/mcp", "authMode": "dcr", "prerequisite": "A Todoist account.", "riskTier": "S3" },
+        { "slug": "webflow", "name": "Webflow", "wave": 1, "status": "self_serve", "docsUrl": "https://developers.webflow.com/mcp/reference/getting-started", "serverUrl": "https://mcp.webflow.com/mcp", "authMode": "dcr", "prerequisite": "A Webflow account; workspace and site roles constrain accessible sites.", "riskTier": "S3" },
+        { "slug": "wix", "name": "Wix", "wave": 1, "status": "self_serve", "docsUrl": "https://www.wix.com/studio/developers/mcp-server", "serverUrl": "https://mcp.wix.com/mcp", "authMode": "dcr", "prerequisite": "A Wix account with access to the relevant sites.", "riskTier": "S3" },
+        { "slug": "brex", "name": "Brex", "wave": 2, "status": "self_serve", "docsUrl": "https://www.brex.com/support/using-brex-in-ai-apps", "serverUrl": "https://api.brex.com/mcp", "authMode": "dcr", "prerequisite": "Brex early access and an administrator enabling the integration; financial actions require explicit approval.", "riskTier": "S4" },
+        { "slug": "clickhouse", "name": "ClickHouse", "wave": 2, "status": "self_serve", "docsUrl": "https://clickhouse.com/blog/announcing-managed-clickstack-mcp-server", "serverUrl": "https://mcp.clickhouse.cloud/clickstack", "authMode": "dcr", "prerequisite": "A ClickHouse Cloud ClickStack service and its service ID.", "riskTier": "S4" },
+        { "slug": "egnyte", "name": "Egnyte", "wave": 2, "status": "self_serve", "docsUrl": "https://developers.egnyte.com/docs/Remote_MCP_Server", "serverUrl": "https://mcp-server.egnyte.com/mcp", "authMode": "dcr", "prerequisite": "An eligible Egnyte plan and administrator approval for external LLM access.", "riskTier": "S3" },
+        { "slug": "embat", "name": "Embat", "wave": 2, "status": "self_serve", "docsUrl": "https://tellme.embat.io/.well-known/oauth-protected-resource/mcp", "serverUrl": "https://tellme.embat.io/mcp", "authMode": "dcr_cimd", "prerequisite": "An Embat account; pilot the connection because provider setup documentation is sparse.", "riskTier": "S4" },
+        { "slug": "mixpanel", "name": "Mixpanel", "wave": 2, "status": "self_serve", "docsUrl": "https://mixpanel.com/blog/mixpanel-mcp-server/", "serverUrl": "https://mcp.mixpanel.com/mcp", "authMode": "dcr", "prerequisite": "A Mixpanel account; the hosted MCP server is currently beta.", "riskTier": "S3" },
+        { "slug": "postman", "name": "Postman", "wave": 2, "status": "self_serve", "docsUrl": "https://learning.postman.com/latest-v-12/docs/reference/postman-api/postman-mcp-server/postman-mcp-remote-server", "serverUrl": "https://mcp.postman.com/minimal", "authMode": "dcr_or_api_key", "prerequisite": "A Postman account; OAuth is available for US endpoints and API keys are required for EU endpoints.", "riskTier": "S3" },
+        { "slug": "razorpay", "name": "Razorpay", "wave": 2, "status": "self_serve", "docsUrl": "https://razorpay.com/docs/mcp-server/oauth/", "serverUrl": "https://mcp.razorpay.com/mcp", "authMode": "dcr_or_api_key", "prerequisite": "A Razorpay account; financial or destructive actions always require explicit approval.", "riskTier": "S4" },
+        { "slug": "sanity", "name": "Sanity", "wave": 2, "status": "self_serve", "docsUrl": "https://www.sanity.io/docs/ai/mcp-server", "serverUrl": "https://mcp.sanity.io", "authMode": "dcr_or_api_key", "prerequisite": "A Sanity account with access to the relevant projects and datasets.", "riskTier": "S3" },
+        { "slug": "stripe", "name": "Stripe", "wave": 2, "status": "self_serve", "docsUrl": "https://docs.stripe.com/mcp", "serverUrl": "https://mcp.stripe.com", "authMode": "dcr_or_api_key", "prerequisite": "A Stripe account; the server is public preview and payment actions require explicit approval.", "riskTier": "S4" },
+        { "slug": "supabase", "name": "Supabase", "wave": 2, "status": "self_serve", "docsUrl": "https://supabase.com/docs/guides/ai-tools/mcp", "serverUrl": "https://mcp.supabase.com/mcp", "authMode": "dcr_or_api_key", "prerequisite": "A Supabase account; use a development project and review write actions before connecting production data.", "riskTier": "S4" },
+        { "slug": "ticket-tailor", "name": "Ticket Tailor", "wave": 2, "status": "self_serve", "docsUrl": "https://developers.tickettailor.com/docs/mcp/authentication/", "serverUrl": "https://mcp.tickettailor.ai/mcp", "authMode": "dcr", "prerequisite": "A Ticket Tailor account; the provider may request an API key during its hosted authorization prompt.", "riskTier": "S3" },
+        { "slug": "asana", "name": "Asana", "wave": 3, "status": "self_serve", "docsUrl": "https://developers.asana.com/docs/integrating-with-asanas-mcp-server", "serverUrl": "https://mcp.asana.com/v2/mcp", "authMode": "customer_oauth", "prerequisite": "Create an Asana MCP OAuth app and register Paperclip's callback URI; DCR is not supported.", "riskTier": "S3" },
+        { "slug": "box", "name": "Box", "wave": 3, "status": "self_serve", "docsUrl": "https://support.box.com/hc/en-us/articles/43847256139923-Managing-Box-MCP-Servers", "serverUrl": "https://mcp.box.com", "authMode": "customer_oauth", "prerequisite": "A Box administrator creates the OAuth integration and enables AI access.", "riskTier": "S3" },
+        { "slug": "mem0", "name": "Mem0", "wave": 3, "status": "self_serve", "docsUrl": "https://docs.mem0.ai/platform/mem0-mcp", "serverUrl": "https://mcp.mem0.ai/mcp/", "authMode": "api_key", "prerequisite": "A Mem0 API key; the live server currently requires the slash-normalized endpoint.", "riskTier": "S3" },
+        { "slug": "pagerduty", "name": "PagerDuty", "wave": 3, "status": "self_serve", "docsUrl": "https://support.pagerduty.com/main/docs/pagerduty-mcp-server", "serverUrl": "https://mcp.pagerduty.com/mcp", "authMode": "api_key", "prerequisite": "A PagerDuty API token; choose the regional endpoint that hosts the account.", "riskTier": "S4" },
+        { "slug": "similarweb", "name": "Similarweb", "wave": 3, "status": "self_serve", "docsUrl": "https://developers.similarweb.com/docs/similarweb-mcp", "serverUrl": "https://mcp.similarweb.com", "authMode": "api_key", "prerequisite": "A Similarweb subscription with API access and an API key.", "riskTier": "S2" },
+        { "slug": "xero", "name": "Xero", "wave": 3, "status": "self_serve", "docsUrl": "https://developer.xero.com/ai", "serverUrl": "https://mcp.xero.com/mcp", "authMode": "customer_oauth", "prerequisite": "Create a Xero OAuth app and confirm the applicable AI and data-use terms before connecting.", "riskTier": "S4" },
+        { "slug": "zapier", "name": "Zapier", "wave": 3, "status": "self_serve", "docsUrl": "https://docs.zapier.com/mcp/quickstart", "serverUrl": "https://mcp.zapier.com/", "authMode": "generated_url", "prerequisite": "Create a Zapier MCP server, choose the actions it exposes, and paste its generated connection URL.", "riskTier": "S3" },
+        { "slug": "youcom", "name": "You.com", "wave": 4, "status": "self_serve", "docsUrl": "https://you.com/docs/build-with-agents/mcp-server", "serverUrl": "https://api.you.com/mcp", "authMode": "dcr_or_api_key", "prerequisite": "A You.com account for browser sign-in, or a You.com API key from you.com/platform for higher rate limits; a keyless free profile is also available.", "riskTier": "S2" },
+        { "slug": "fireflies", "name": "Fireflies", "wave": 4, "status": "self_serve", "docsUrl": "https://docs.fireflies.ai/getting-started/mcp-configuration", "serverUrl": "https://api.fireflies.ai/mcp", "authMode": "dcr_or_api_key", "prerequisite": "A Fireflies account with access to the meetings you want to use. API keys are available in Settings → Developer Settings.", "riskTier": "S3" },
+        { "slug": "g2", "name": "G2", "wave": "blocked", "status": "blocked", "docsUrl": "https://documentation.g2.com/docs/g2-mcp-server", "serverUrl": "https://mcp.g2.com/mcp", "authMode": "provider_approval", "prerequisite": "G2 must enable cross-application token introspection before an independently registered client can work.", "riskTier": "S3" },
+        { "slug": "vercel", "name": "Vercel", "wave": "blocked", "status": "blocked", "docsUrl": "https://vercel.com/docs/agent-resources/vercel-mcp", "serverUrl": "https://mcp.vercel.com", "authMode": "provider_approval", "prerequisite": "Vercel currently reviews and approves MCP clients.", "riskTier": "S3" },
+        { "slug": "zomato", "name": "Zomato", "wave": "blocked", "status": "blocked", "docsUrl": "https://github.com/Zomato/mcp-server-manifest", "serverUrl": "https://mcp-server.zomato.com/mcp", "authMode": "provider_approval", "prerequisite": "Zomato currently limits third-party clients and requires redirect-URI allowlisting.", "riskTier": "S3" }
+    ]
+}

package/dist/setting-defaults.d.ts

@@ -0,0 +1,72 @@
+import type { InstanceGeneralSettings } from "./types/instance.js";
+/**
+ * Operator-configurable setting defaults.
+ *
+ * A hosting operator (a managed cloud, an internal shared server) can replace
+ * the schema default of selected instance settings by setting the
+ * `PAPERCLIP_SETTING_DEFAULTS` environment variable to a JSON object, e.g.
+ * `{"feedbackDataSharingPreference":"allowed"}`. The operator value
+ * substitutes for the schema default at read time: any field whose effective
+ * value is still the schema default resolves to the operator value, while an
+ * explicit non-default user choice always wins. The overlay is never
+ * persisted, so unsetting the variable restores stock behavior everywhere a
+ * user has not chosen otherwise.
+ *
+ * Parsing is fail-closed for policy content: malformed JSON or an invalid
+ * value for a known field is an error (the server refuses to boot), because a
+ * silently dropped policy default is worse than a loud failure. Unknown field
+ * names are warned about and ignored, so one value can be rolled across a
+ * fleet of mixed app versions where older images predate a field.
+ *
+ * Pairing note: an operator that also wants the control invisible hides it
+ * with `PAPERCLIP_HIDDEN_SETTINGS` (see settings-visibility.ts); the two
+ * mechanisms are orthogonal.
+ */
+export declare const SETTING_DEFAULTS_ENV_KEY = "PAPERCLIP_SETTING_DEFAULTS";
+/** Instance → General fields whose schema default an operator may replace. */
+export declare const DEFAULTABLE_GENERAL_SETTINGS: readonly ["feedbackDataSharingPreference"];
+export type DefaultableGeneralSetting = (typeof DEFAULTABLE_GENERAL_SETTINGS)[number];
+export type OperatorSettingDefaults = Partial<Pick<InstanceGeneralSettings, DefaultableGeneralSetting>>;
+export interface ParsedSettingDefaults {
+    /** Validated operator defaults for known fields; null when the var is unset. */
+    defaults: OperatorSettingDefaults | null;
+    /** Unrecognized field names, for the caller to warn about. */
+    unknown: string[];
+}
+/**
+ * Parse a `PAPERCLIP_SETTING_DEFAULTS`-style JSON object.
+ *
+ * @throws when the JSON is malformed, not an object, or a known field carries
+ * an invalid value — policy configuration fails closed.
+ */
+export declare function parseSettingDefaults(raw: string | undefined): ParsedSettingDefaults;
+/**
+ * Overlay operator defaults onto normalized general settings at read time.
+ *
+ * The operator value substitutes for the schema default: a field still at its
+ * schema default (absent from storage, or stored equal to it) resolves to the
+ * operator value; an explicit non-default choice is untouched. Callers must
+ * never persist the result.
+ */
+export declare function applyOperatorGeneralDefaults(general: InstanceGeneralSettings, defaults: OperatorSettingDefaults | null): InstanceGeneralSettings;
+/**
+ * Strip overlay echoes from a general-settings write at persist time.
+ *
+ * A client that writes back the full object it read (a full-GET echo) sends
+ * the overlaid operator value for a field the user never chose. Persisting
+ * that echo would promote the operator value into an explicit stored choice —
+ * sticky across later changes to, or removal of, the environment variable.
+ * This maps such a write back to the schema default: a field whose stored
+ * value is still the schema default (unchosen) and whose incoming value
+ * equals the operator default stays unchosen, keeping the overlay
+ * strictly read-time.
+ *
+ * A user cannot be distinguished from an echo when they deliberately pick the
+ * value that already shows as the default, so that pick also stays unchosen —
+ * the mirror image of the documented "stored schema default is treated as
+ * unchosen" rule, with identical effective behavior. Any other write persists
+ * as given: an incoming value that differs from the operator default, or a
+ * write over an explicit stored choice.
+ */
+export declare function stripOperatorGeneralEchoes(stored: InstanceGeneralSettings, next: InstanceGeneralSettings, defaults: OperatorSettingDefaults | null): InstanceGeneralSettings;
+//# sourceMappingURL=setting-defaults.d.ts.map

package/dist/setting-defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setting-defaults.d.ts","sourceRoot":"","sources":["../src/setting-defaults.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,eAAO,MAAM,wBAAwB,+BAA+B,CAAC;AAErE,8EAA8E;AAC9E,eAAO,MAAM,4BAA4B,YACvC,+BAA+B,CACvB,CAAC;AAEX,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtF,MAAM,MAAM,uBAAuB,GAAG,OAAO,CAC3C,IAAI,CAAC,uBAAuB,EAAE,yBAAyB,CAAC,CACzD,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,gFAAgF;IAChF,QAAQ,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACzC,8DAA8D;IAC9D,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAaD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,qBAAqB,CAgCnF;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,uBAAuB,EAChC,QAAQ,EAAE,uBAAuB,GAAG,IAAI,GACvC,uBAAuB,CAYzB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,uBAAuB,EAC/B,IAAI,EAAE,uBAAuB,EAC7B,QAAQ,EAAE,uBAAuB,GAAG,IAAI,GACvC,uBAAuB,CAgBzB"}

package/dist/setting-defaults.js

@@ -0,0 +1,132 @@
+import { instanceGeneralSettingsSchema } from "./validators/instance.js";
+/**
+ * Operator-configurable setting defaults.
+ *
+ * A hosting operator (a managed cloud, an internal shared server) can replace
+ * the schema default of selected instance settings by setting the
+ * `PAPERCLIP_SETTING_DEFAULTS` environment variable to a JSON object, e.g.
+ * `{"feedbackDataSharingPreference":"allowed"}`. The operator value
+ * substitutes for the schema default at read time: any field whose effective
+ * value is still the schema default resolves to the operator value, while an
+ * explicit non-default user choice always wins. The overlay is never
+ * persisted, so unsetting the variable restores stock behavior everywhere a
+ * user has not chosen otherwise.
+ *
+ * Parsing is fail-closed for policy content: malformed JSON or an invalid
+ * value for a known field is an error (the server refuses to boot), because a
+ * silently dropped policy default is worse than a loud failure. Unknown field
+ * names are warned about and ignored, so one value can be rolled across a
+ * fleet of mixed app versions where older images predate a field.
+ *
+ * Pairing note: an operator that also wants the control invisible hides it
+ * with `PAPERCLIP_HIDDEN_SETTINGS` (see settings-visibility.ts); the two
+ * mechanisms are orthogonal.
+ */
+export const SETTING_DEFAULTS_ENV_KEY = "PAPERCLIP_SETTING_DEFAULTS";
+/** Instance → General fields whose schema default an operator may replace. */
+export const DEFAULTABLE_GENERAL_SETTINGS = [
+    "feedbackDataSharingPreference",
+];
+const defaultableFieldsSchema = instanceGeneralSettingsSchema
+    .pick(Object.fromEntries(DEFAULTABLE_GENERAL_SETTINGS.map((key) => [key, true])))
+    .partial();
+/** The all-schema-defaults view used to decide whether a value was chosen. */
+const schemaDefaults = instanceGeneralSettingsSchema.parse({});
+/**
+ * Parse a `PAPERCLIP_SETTING_DEFAULTS`-style JSON object.
+ *
+ * @throws when the JSON is malformed, not an object, or a known field carries
+ * an invalid value — policy configuration fails closed.
+ */
+export function parseSettingDefaults(raw) {
+    if (raw === undefined || raw.trim() === "")
+        return { defaults: null, unknown: [] };
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (error) {
+        throw new Error(`${SETTING_DEFAULTS_ENV_KEY} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new Error(`${SETTING_DEFAULTS_ENV_KEY} must be a JSON object of setting defaults`);
+    }
+    const known = {};
+    const unknown = [];
+    const defaultable = new Set(DEFAULTABLE_GENERAL_SETTINGS);
+    for (const [key, value] of Object.entries(parsed)) {
+        if (defaultable.has(key)) {
+            known[key] = value;
+        }
+        else {
+            unknown.push(key);
+        }
+    }
+    const result = defaultableFieldsSchema.safeParse(known);
+    if (!result.success) {
+        throw new Error(`${SETTING_DEFAULTS_ENV_KEY} carries an invalid value: ${result.error.issues
+            .map((issue) => `${issue.path.join(".")}: ${issue.message}`)
+            .join("; ")}`);
+    }
+    return { defaults: result.data, unknown };
+}
+/**
+ * Overlay operator defaults onto normalized general settings at read time.
+ *
+ * The operator value substitutes for the schema default: a field still at its
+ * schema default (absent from storage, or stored equal to it) resolves to the
+ * operator value; an explicit non-default choice is untouched. Callers must
+ * never persist the result.
+ */
+export function applyOperatorGeneralDefaults(general, defaults) {
+    if (!defaults)
+        return general;
+    let next = null;
+    for (const key of DEFAULTABLE_GENERAL_SETTINGS) {
+        const value = defaults[key];
+        if (value === undefined)
+            continue;
+        if (general[key] === schemaDefaults[key] && general[key] !== value) {
+            next ??= { ...general };
+            next[key] = value;
+        }
+    }
+    return next ?? general;
+}
+/**
+ * Strip overlay echoes from a general-settings write at persist time.
+ *
+ * A client that writes back the full object it read (a full-GET echo) sends
+ * the overlaid operator value for a field the user never chose. Persisting
+ * that echo would promote the operator value into an explicit stored choice —
+ * sticky across later changes to, or removal of, the environment variable.
+ * This maps such a write back to the schema default: a field whose stored
+ * value is still the schema default (unchosen) and whose incoming value
+ * equals the operator default stays unchosen, keeping the overlay
+ * strictly read-time.
+ *
+ * A user cannot be distinguished from an echo when they deliberately pick the
+ * value that already shows as the default, so that pick also stays unchosen —
+ * the mirror image of the documented "stored schema default is treated as
+ * unchosen" rule, with identical effective behavior. Any other write persists
+ * as given: an incoming value that differs from the operator default, or a
+ * write over an explicit stored choice.
+ */
+export function stripOperatorGeneralEchoes(stored, next, defaults) {
+    if (!defaults)
+        return next;
+    let result = null;
+    for (const key of DEFAULTABLE_GENERAL_SETTINGS) {
+        const value = defaults[key];
+        if (value === undefined)
+            continue;
+        if (stored[key] === schemaDefaults[key] &&
+            next[key] === value &&
+            next[key] !== schemaDefaults[key]) {
+            result ??= { ...next };
+            result[key] = schemaDefaults[key];
+        }
+    }
+    return result ?? next;
+}
+//# sourceMappingURL=setting-defaults.js.map

package/dist/setting-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setting-defaults.js","sourceRoot":"","sources":["../src/setting-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAGzE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AAErE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,+BAA+B;CACvB,CAAC;AAeX,MAAM,uBAAuB,GAAG,6BAA6B;KAC1D,IAAI,CACH,MAAM,CAAC,WAAW,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAExE,CACF;KACA,OAAO,EAAE,CAAC;AAEb,8EAA8E;AAC9E,MAAM,cAAc,GAA4B,6BAA6B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAExF;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAuB;IAC1D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACnF,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,GAAG,wBAAwB,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3G,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,GAAG,wBAAwB,4CAA4C,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,4BAA4B,CAAC,CAAC;IAClE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,GAAG,wBAAwB,8BAA8B,MAAM,CAAC,KAAK,CAAC,MAAM;aACzE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC3D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAA+B,EAAE,OAAO,EAAE,CAAC;AACvE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAgC,EAChC,QAAwC;IAExC,IAAI,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC9B,IAAI,IAAI,GAAmC,IAAI,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,4BAA4B,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;YACnE,IAAI,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,IAAI,OAAO,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAA+B,EAC/B,IAA6B,EAC7B,QAAwC;IAExC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,MAAM,GAAmC,IAAI,CAAC;IAClD,KAAK,MAAM,GAAG,IAAI,4BAA4B,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IACE,MAAM,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC,GAAG,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK;YACnB,IAAI,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC,GAAG,CAAC,EACjC,CAAC;YACD,MAAM,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,IAAI,IAAI,CAAC;AACxB,CAAC"}

package/dist/setting-defaults.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=setting-defaults.test.d.ts.map

package/dist/setting-defaults.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setting-defaults.test.d.ts","sourceRoot":"","sources":["../src/setting-defaults.test.ts"],"names":[],"mappings":""}

package/dist/setting-defaults.test.js

@@ -0,0 +1,102 @@
+import { describe, expect, it } from "vitest";
+import { DEFAULTABLE_GENERAL_SETTINGS, SETTING_DEFAULTS_ENV_KEY, applyOperatorGeneralDefaults, parseSettingDefaults, stripOperatorGeneralEchoes, } from "./setting-defaults.js";
+import { instanceGeneralSettingsSchema } from "./validators/instance.js";
+describe("parseSettingDefaults", () => {
+    it("returns null defaults for an unset or blank variable", () => {
+        expect(parseSettingDefaults(undefined)).toEqual({ defaults: null, unknown: [] });
+        expect(parseSettingDefaults("")).toEqual({ defaults: null, unknown: [] });
+        expect(parseSettingDefaults("   ")).toEqual({ defaults: null, unknown: [] });
+    });
+    it("parses known fields and validates their values", () => {
+        const { defaults, unknown } = parseSettingDefaults('{"feedbackDataSharingPreference":"allowed"}');
+        expect(defaults).toEqual({ feedbackDataSharingPreference: "allowed" });
+        expect(unknown).toEqual([]);
+    });
+    it("collects unknown fields instead of failing, for mixed-version fleets", () => {
+        const { defaults, unknown } = parseSettingDefaults('{"feedbackDataSharingPreference":"not_allowed","someFutureSetting":true}');
+        expect(defaults).toEqual({ feedbackDataSharingPreference: "not_allowed" });
+        expect(unknown).toEqual(["someFutureSetting"]);
+    });
+    it("fails closed on malformed JSON and non-object shapes", () => {
+        expect(() => parseSettingDefaults("{nope")).toThrow(SETTING_DEFAULTS_ENV_KEY);
+        expect(() => parseSettingDefaults('"allowed"')).toThrow(/JSON object/);
+        expect(() => parseSettingDefaults("[1,2]")).toThrow(/JSON object/);
+        expect(() => parseSettingDefaults("null")).toThrow(/JSON object/);
+    });
+    it("fails closed on an invalid value for a known field", () => {
+        expect(() => parseSettingDefaults('{"feedbackDataSharingPreference":"sometimes"}')).toThrow(/feedbackDataSharingPreference/);
+    });
+    it("keeps every registry entry a real general-settings field", () => {
+        const shape = Object.keys(instanceGeneralSettingsSchema.shape);
+        for (const key of DEFAULTABLE_GENERAL_SETTINGS) {
+            expect(shape).toContain(key);
+        }
+    });
+});
+describe("applyOperatorGeneralDefaults", () => {
+    const schemaDefaults = instanceGeneralSettingsSchema.parse({});
+    it("is the identity when no operator defaults are configured", () => {
+        expect(applyOperatorGeneralDefaults(schemaDefaults, null)).toBe(schemaDefaults);
+    });
+    it("substitutes the operator value where the schema default still holds", () => {
+        const overlaid = applyOperatorGeneralDefaults(schemaDefaults, {
+            feedbackDataSharingPreference: "allowed",
+        });
+        expect(overlaid.feedbackDataSharingPreference).toBe("allowed");
+        // Other fields are untouched.
+        expect(overlaid.backupRetention).toEqual(schemaDefaults.backupRetention);
+    });
+    it("never overrides an explicit non-default choice", () => {
+        const chosen = { ...schemaDefaults, feedbackDataSharingPreference: "not_allowed" };
+        const overlaid = applyOperatorGeneralDefaults(chosen, {
+            feedbackDataSharingPreference: "allowed",
+        });
+        expect(overlaid.feedbackDataSharingPreference).toBe("not_allowed");
+        expect(overlaid).toBe(chosen);
+    });
+    it("does not mutate its input", () => {
+        const input = { ...schemaDefaults };
+        applyOperatorGeneralDefaults(input, { feedbackDataSharingPreference: "allowed" });
+        expect(input.feedbackDataSharingPreference).toBe(schemaDefaults.feedbackDataSharingPreference);
+    });
+});
+describe("stripOperatorGeneralEchoes", () => {
+    const schemaDefaults = instanceGeneralSettingsSchema.parse({});
+    const defaults = { feedbackDataSharingPreference: "allowed" };
+    it("is the identity when no operator defaults are configured", () => {
+        const next = { ...schemaDefaults, feedbackDataSharingPreference: "allowed" };
+        expect(stripOperatorGeneralEchoes(schemaDefaults, next, null)).toBe(next);
+    });
+    it("maps an echoed operator value on an unchosen field back to the schema default", () => {
+        // Stored is still the schema default (unchosen); the incoming full-object
+        // echo carries the overlaid operator value. Persisting it would make the
+        // operator value sticky, so it maps back to the schema default.
+        const next = { ...schemaDefaults, feedbackDataSharingPreference: "allowed" };
+        const stripped = stripOperatorGeneralEchoes(schemaDefaults, next, defaults);
+        expect(stripped.feedbackDataSharingPreference).toBe(schemaDefaults.feedbackDataSharingPreference);
+    });
+    it("keeps an incoming value that differs from the operator default", () => {
+        const next = { ...schemaDefaults, feedbackDataSharingPreference: "not_allowed" };
+        const stripped = stripOperatorGeneralEchoes(schemaDefaults, next, defaults);
+        expect(stripped).toBe(next);
+        expect(stripped.feedbackDataSharingPreference).toBe("not_allowed");
+    });
+    it("keeps a write over an explicit stored choice, even at the operator value", () => {
+        // The user previously chose "not_allowed" and now picks the operator's
+        // value: stored is not the schema default, so this is a real transition
+        // and persists as given.
+        const stored = { ...schemaDefaults, feedbackDataSharingPreference: "not_allowed" };
+        const next = { ...schemaDefaults, feedbackDataSharingPreference: "allowed" };
+        const stripped = stripOperatorGeneralEchoes(stored, next, defaults);
+        expect(stripped).toBe(next);
+        expect(stripped.feedbackDataSharingPreference).toBe("allowed");
+    });
+    it("does not mutate its inputs", () => {
+        const stored = { ...schemaDefaults };
+        const next = { ...schemaDefaults, feedbackDataSharingPreference: "allowed" };
+        stripOperatorGeneralEchoes(stored, next, defaults);
+        expect(next.feedbackDataSharingPreference).toBe("allowed");
+        expect(stored.feedbackDataSharingPreference).toBe(schemaDefaults.feedbackDataSharingPreference);
+    });
+});
+//# sourceMappingURL=setting-defaults.test.js.map

package/dist/setting-defaults.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setting-defaults.test.js","sourceRoot":"","sources":["../src/setting-defaults.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,4BAA4B,EAC5B,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAEzE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAChD,6CAA6C,CAC9C,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,6BAA6B,EAAE,SAAS,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAChD,0EAA0E,CAC3E,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,6BAA6B,EAAE,aAAa,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAC9E,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACnE,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,EAAE,CACV,oBAAoB,CAAC,+CAA+C,CAAC,CACtE,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC;QAC/D,KAAK,MAAM,GAAG,IAAI,4BAA4B,EAAE,CAAC;YAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,MAAM,cAAc,GAAG,6BAA6B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAE/D,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,4BAA4B,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,QAAQ,GAAG,4BAA4B,CAAC,cAAc,EAAE;YAC5D,6BAA6B,EAAE,SAAS;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/D,8BAA8B;QAC9B,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,6BAA6B,EAAE,aAAsB,EAAE,CAAC;QAC5F,MAAM,QAAQ,GAAG,4BAA4B,CAAC,MAAM,EAAE;YACpD,6BAA6B,EAAE,SAAS;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnE,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,KAAK,GAAG,EAAE,GAAG,cAAc,EAAE,CAAC;QACpC,4BAA4B,CAAC,KAAK,EAAE,EAAE,6BAA6B,EAAE,SAAS,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAC9C,cAAc,CAAC,6BAA6B,CAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,MAAM,cAAc,GAAG,6BAA6B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,EAAE,6BAA6B,EAAE,SAAkB,EAAE,CAAC;IAEvE,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,6BAA6B,EAAE,SAAkB,EAAE,CAAC;QACtF,MAAM,CAAC,0BAA0B,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,0EAA0E;QAC1E,yEAAyE;QACzE,gEAAgE;QAChE,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,6BAA6B,EAAE,SAAkB,EAAE,CAAC;QACtF,MAAM,QAAQ,GAAG,0BAA0B,CAAC,cAAc,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5E,MAAM,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,IAAI,CACjD,cAAc,CAAC,6BAA6B,CAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,6BAA6B,EAAE,aAAsB,EAAE,CAAC;QAC1F,MAAM,QAAQ,GAAG,0BAA0B,CAAC,cAAc,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5E,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,uEAAuE;QACvE,wEAAwE;QACxE,yBAAyB;QACzB,MAAM,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,6BAA6B,EAAE,aAAsB,EAAE,CAAC;QAC5F,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,6BAA6B,EAAE,SAAkB,EAAE,CAAC;QACtF,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpE,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,6BAA6B,EAAE,SAAkB,EAAE,CAAC;QACtF,0BAA0B,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAC/C,cAAc,CAAC,6BAA6B,CAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/settings-visibility.d.ts

@@ -0,0 +1,86 @@
+import { type InstanceFeatureKey } from "./feature-catalog.js";
+/**
+ * Operator-configurable settings visibility.
+ *
+ * A hosting operator (a managed cloud, an internal shared server) can hide
+ * settings surfaces that do not apply to their deployment by setting the
+ * `PAPERCLIP_HIDDEN_SETTINGS` environment variable to a comma-separated
+ * list of keys from this registry. Hiding a surface removes it from the UI
+ * (nav, routes, page sections). Surfaces backed by instance-level mutation
+ * routes are also floored with a 403 carrying
+ * `SETTINGS_OPERATOR_MANAGED_ERROR_CODE`: the Access, Plugins, and Adapters
+ * pages, every field-backed General section, every experimental toggle
+ * (individually or via the whole Experimental page), and the company Import
+ * page (whose whole route surface is floored). The other company pages are
+ * UI-visibility keys only: their APIs (memberships, invites, secrets,
+ * exports) stay live for agents and integrations.
+ *
+ * Nothing is hidden by default: with the variable unset, UI and API behave
+ * exactly as before this mechanism existed.
+ *
+ * Unknown keys are ignored (with a server-side warning) rather than rejected,
+ * so an operator may roll one list across a fleet of mixed app versions: an
+ * image that predates a key simply keeps that surface visible instead of
+ * refusing to boot.
+ */
+/**
+ * Instance settings pages that can be hidden (nav entry + route). The General
+ * page is deliberately not hideable: it is the settings root and the redirect
+ * target for hidden pages. Individual General sections are hideable below.
+ */
+export declare const HIDEABLE_INSTANCE_PAGES: readonly ["instance.profile", "instance.environments", "instance.access", "instance.experimental", "instance.plugins", "instance.adapters"];
+export type HideableInstancePage = (typeof HIDEABLE_INSTANCE_PAGES)[number];
+/**
+ * Company-level settings pages that can be hidden (nav entry + tab + route).
+ * The company General page is deliberately not hideable: it is the settings
+ * root and the redirect target for hidden pages. `company.import` also floors
+ * the import API routes; the rest only hide UI surfaces.
+ */
+export declare const HIDEABLE_COMPANY_PAGES: readonly ["company.members", "company.invites", "company.secrets", "company.export", "company.import"];
+export type HideableCompanyPage = (typeof HIDEABLE_COMPANY_PAGES)[number];
+/**
+ * Sub-surfaces of company settings pages that can be hidden individually.
+ * UI-visibility keys only: the backing APIs stay live for agents and
+ * integrations. Hiding the whole page (`company.secrets`) already removes
+ * everything inside it; these keys hide one tab while the page stays up.
+ */
+export declare const HIDEABLE_COMPANY_SECTIONS: readonly ["company.secrets.vaults", "company.secrets.proposals"];
+export type HideableCompanySection = (typeof HIDEABLE_COMPANY_SECTIONS)[number];
+/**
+ * Sections of Instance → General that can be hidden. Field-backed sections
+ * (their suffix names a general-settings field) also floor writes to that
+ * field; `deploymentStatus` and `signOut` are read-only UI with no field.
+ */
+export declare const HIDEABLE_GENERAL_SECTIONS: readonly ["instance.general.deploymentStatus", "instance.general.censorUsernameInLogs", "instance.general.keyboardShortcuts", "instance.general.backupRetention", "instance.general.feedbackDataSharingPreference", "instance.general.signOut"];
+export type HideableGeneralSection = (typeof HIDEABLE_GENERAL_SECTIONS)[number];
+/** General sections that are informational UI only, with no settings field. */
+export declare const UI_ONLY_GENERAL_SECTIONS: readonly ["instance.general.deploymentStatus", "instance.general.signOut"];
+export type HideableExperimentalSetting = `instance.experimental.${InstanceFeatureKey}`;
+/** The visibility key for an experimental toggle; every boolean flag is hideable. */
+export declare function experimentalSettingKey(key: InstanceFeatureKey): HideableExperimentalSetting;
+/** Workspace policy editors and selectors. UI-only; execution and APIs stay active. */
+export declare const HIDEABLE_WORKSPACE_SECTIONS: readonly ["workspaces.isolation"];
+export type HideableWorkspaceSection = (typeof HIDEABLE_WORKSPACE_SECTIONS)[number];
+export type HideableSettingKey = HideableWorkspaceSection | HideableInstancePage | HideableCompanyPage | HideableCompanySection | HideableGeneralSection | HideableExperimentalSetting;
+/** Every key `PAPERCLIP_HIDDEN_SETTINGS` accepts. */
+export declare const HIDEABLE_SETTING_KEYS: readonly HideableSettingKey[];
+/** Stable 403 code for writes to operator-hidden settings. */
+export declare const SETTINGS_OPERATOR_MANAGED_ERROR_CODE = "settings_operator_managed";
+export interface ParsedHiddenSettings {
+    /** Recognized keys, deduplicated, in input order. */
+    hidden: HideableSettingKey[];
+    /** Unrecognized entries, for the caller to warn about. */
+    unknown: string[];
+}
+/** Parse a `PAPERCLIP_HIDDEN_SETTINGS`-style comma-separated list. */
+export declare function parseHiddenSettingsList(raw: string | undefined): ParsedHiddenSettings;
+export declare function hidesInstancePage(hidden: ReadonlySet<string>, page: HideableInstancePage): boolean;
+export declare function hidesCompanyPage(hidden: ReadonlySet<string>, page: HideableCompanyPage): boolean;
+export declare function hidesCompanySection(hidden: ReadonlySet<string>, section: HideableCompanySection): boolean;
+export declare function hidesGeneralSection(hidden: ReadonlySet<string>, section: HideableGeneralSection): boolean;
+/**
+ * Whether a toggle is hidden, either individually or because the whole
+ * Experimental page is hidden.
+ */
+export declare function hidesExperimentalSetting(hidden: ReadonlySet<string>, key: InstanceFeatureKey): boolean;
+//# sourceMappingURL=settings-visibility.d.ts.map

package/dist/settings-visibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-visibility.d.ts","sourceRoot":"","sources":["../src/settings-visibility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyB,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEtF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,YAClC,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,CACX,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,YACjC,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,CACR,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,YACpC,wBAAwB,EACxB,2BAA2B,CACnB,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,YACpC,mCAAmC,EACnC,uCAAuC,EACvC,oCAAoC,EACpC,kCAAkC,EAClC,gDAAgD,EAChD,0BAA0B,CAClB,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,+EAA+E;AAC/E,eAAO,MAAM,wBAAwB,4EAGiB,CAAC;AAEvD,MAAM,MAAM,2BAA2B,GAAG,yBAAyB,kBAAkB,EAAE,CAAC;AAExF,qFAAqF;AACrF,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,kBAAkB,GAAG,2BAA2B,CAE3F;AAED,uFAAuF;AACvF,eAAO,MAAM,2BAA2B,YAAI,sBAAsB,CAAU,CAAC;AAC7E,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpF,MAAM,MAAM,kBAAkB,GAC1B,wBAAwB,GACxB,oBAAoB,GACpB,mBAAmB,GACnB,sBAAsB,GACtB,sBAAsB,GACtB,2BAA2B,CAAC;AAEhC,qDAAqD;AACrD,eAAO,MAAM,qBAAqB,EAAE,SAAS,kBAAkB,EAO9D,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,oCAAoC,8BAA8B,CAAC;AAEhF,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,0DAA0D;IAC1D,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,sEAAsE;AACtE,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,oBAAoB,CAiBrF;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAC3B,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAET;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAC3B,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAET;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAC3B,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAET;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAC3B,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAET;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAC3B,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAET"}