launchprep 0.5.4 → 0.5.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "launchprep",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "description": "Read-only CLI that scans your AI-built app and reports what will break before real users hit it — auth, tenant isolation, data, payments, GDPR. 117 checks run free on your machine.",
   "type": "module",
   "bin": {

package/src/interactive.mjs

@@ -20,6 +20,13 @@ const C = { d: '\x1b[2m', b: '\x1b[1m', o: '\x1b[0m', c: '\x1b[36m', g: '\x1b[32
 // the shape of the question: which key it sets, whether it is a yes/no or a
 // choice, and (for a choice) the options. Parsing the example rather than
 // duplicating it keeps one source of truth: questions.mjs.
+// One answer that means several. "worldwide" is the common case for a launch -
+// and answering "other" instead used to match only the [ru, kz, other] rules,
+// so an app serving everyone was never asked the GDPR, UK GDPR or Canadian
+// questions. Expanding it here keeps questions.mjs the single source of the
+// wording while the gate still sees real jurisdiction values.
+const EXPANDS = { worldwide: ['eu', 'uk', 'us', 'ca', 'ru', 'kz', 'other'] };
+
 export function shapeOf(answerExample) {
   const dash = answerExample.indexOf('—');
   const json = (dash >= 0 ? answerExample.slice(0, dash) : answerExample).trim();
@@ -39,7 +46,7 @@ export function shapeOf(answerExample) {
   // (has_rag), or a plain string (business_model).
   const apply = (stated, value) => {
     if (nested) stated[nested[1]] = { ...(stated[nested[1]] || {}), [nested[2]]: value };
-    else if (isArray) stated[topKey] = [value];
+    else if (isArray) stated[topKey] = EXPANDS[value] || [value];
     else if (isBool)  stated[topKey] = (value === 'yes' || value === true);
     else stated[topKey] = value;
     return stated;

package/src/questions.mjs

@@ -18,7 +18,12 @@ export const QUESTION = {
   // --- who and where -------------------------------------------------------
   jurisdictions: {
     ask: 'Where do your users live?',
-    answer: '"jurisdictions": ["eu"]   — any of: eu, uk, us, ca, ru, kz, other',
+    // "worldwide" is first because it is the honest answer for most launches,
+    // and because "other" is NOT a synonym for it: "other" matches only the
+    // [ru, kz, other] rules, so a global app answering "other" silently skipped
+    // GDPR, UK GDPR and the Canadian checks. worldwide expands to every
+    // jurisdiction (see EXPANDS in interactive.mjs) so nothing is missed.
+    answer: '"jurisdictions": ["eu"]   — any of: worldwide, eu, uk, us, ca, ru, kz, other',
     why: 'decides which privacy laws reach you at all',
   },
   business_model: {