proactive-gate 0.4.1 → 0.5.0

package/README.md

@@ -44,7 +44,7 @@ npx proactive-gate init --preset usTcpa --framework mastra
 
 That writes `proactive-gate.policy.json` with the ten checks in order, appends the
 preset you named, and prints the preset's own source next to the few lines that plug
-the gate into that framework. `npx proactive-gate init --list` shows the fourteen
+the gate into that framework. `npx proactive-gate init --list` shows the fifteen
 platform and legal presets and the four frameworks.
 
 If you would rather see the argument than read it: `npm run bench:compare` replays a
@@ -361,6 +361,7 @@ const gate = createGate({ checks: [checks.consent(), ...presets.kakaoBrandMessag
 | `krNetworkAct50` | advertising consent, plus night consent for 21:00 to 08:00 local |
 | `jpAntiSpamLaw` | opt-in |
 | `cnMinorMode` | for minors: 06:00 to 22:00 Asia/Shanghai and one a day |
+| `inTcccp` | promotional consent; the default-off bands 00:00 to 10:00 and 21:00 to 24:00 need their own opt-in |
 | `usTcpa` | 08:00 to 21:00 at the user's local time (47 CFR 64.1200) |
 | `euEprivacy` | marketing consent with the soft opt-in for existing customers |
 | `telegramBot` | 1 a second and 20 a minute per chat |
@@ -371,23 +372,28 @@ out. Reviewable defaults, not legal advice: several official sources disagree wi
 and the note says which value was chosen and why.
 
 **Read the scope before you reach for a legal preset.** Every instrument above regulates
-*commercial* communication. `usTcpa`, `euEprivacy`, `krNetworkAct50` and `jpAntiSpamLaw` are
-marketing rules, so they bind your message only when the message itself is commercial. A
-reminder your user asked for is not advertising, and pulling in a marketing preset for it
+*commercial* communication. `usTcpa`, `euEprivacy`, `krNetworkAct50`, `jpAntiSpamLaw` and
+`inTcccp` are marketing rules, so they bind your message only when the message itself is
+commercial. A reminder your user asked for is not advertising, and pulling in a marketing preset for it
 imports a restriction the law never placed on you, which is its own kind of wrong answer.
 Use them when the candidate is promotional; when it is not, the platform quotas and your own
-quiet hours are the honest constraints.
+quiet hours are the honest constraints. A preset that reads the recipient's own zone
+(`usTcpa`, `krNetworkAct50`, `inTcccp`) has no local time to compare without `user.timezone`,
+so those checks skip and the message goes out; each preset's note says so, and a user with no
+zone is the case to handle before you rely on one of them.
 
 That scope test is also why some jurisdictions people ask for are missing. Canada's CASL and
 Australia's Spam Act 2003 set consent, identification and unsubscribe duties, and neither
 carries a time-of-day rule at all. The Brazilian window quoted around the web comes from bill
 PLS 48/2018, a proposal rather than enacted law, and it covers telemarketing calls. India is
-the interesting one: the widely repeated "9am to 9pm" is not what the primary text says. The
-Telecom Commercial Communications Customer Preference Regulations make time bands a
+the interesting one, and the widely repeated "9am to 9pm" is not what the primary text says.
+The Telecom Commercial Communications Customer Preference Regulations make time bands a
 *preference the subscriber registers* with their access provider, alongside content category
 and day type, not a fixed statutory quiet window, and the secondary sources that quote a
-window disagree with each other about whether it starts at 09:00 or 10:00. A preset built on
-that would encode a number no primary source states, so there is none.
+window disagree with each other about whether it starts at 09:00 or 10:00. What the
+regulation does fix is the default: four of the nine Schedule-II bands, covering 00:00 to
+10:00 and 21:00 to 24:00, are off for every customer until the subscriber switches that band
+on, so `inTcccp` encodes those as one opt-in consent per band rather than a hard window.
 
 ## The budget is enforced at commit, not at evaluate
 
@@ -653,7 +659,7 @@ reproduces exactly. The race property was checked against a mutant: rewriting
 [`spec/SPEC.md`](spec/SPEC.md) states the behaviour as numbered requirements, and
 [`spec/fixtures`](spec/fixtures) holds language-neutral cases: the DST edge in
 America/New_York, Pacific/Apia, a wall-clock case in 2031, atomic commit, the ISO week,
-deferral, shadow mode, the optional checks and four presets. The TypeScript tests and the
+deferral, shadow mode, the optional checks and six presets. The TypeScript tests and the
 Python tests both run all of them; `npx proactive-gate replay --fixtures spec/fixtures` runs
 them from the command line. A third implementation starts from the fixtures, not from this
 source.
@@ -664,7 +670,7 @@ package's release tags, so an implementation in any language can pin it without
 or PyPI:
 
 ```sh
-git clone --depth 1 --branch spec/v1.2.0 https://github.com/Bubblegunn/proactive-gate
+git clone --depth 1 --branch spec/v1.3.0 https://github.com/Bubblegunn/proactive-gate
 ```
 
 The npm package also ships it, so `node_modules/proactive-gate/spec/fixtures` exists after an
@@ -677,8 +683,8 @@ Generated by `npm run conformance-table`; CI fails when it is stale.
 
 | implementation | spec version | fixtures passed | declared skips |
 |---|---|---:|---|
-| TypeScript | 1.2.0 | 32 of 32 | none |
-| Python | 1.2.0 | 32 of 32 | none |
+| TypeScript | 1.3.0 | 33 of 33 | none |
+| Python | 1.3.0 | 33 of 33 | none |
 <!-- conformance:end -->
 
 ### What made this work elsewhere, and why it might not here

package/README.tr.md

@@ -323,6 +323,7 @@ const gate = createGate({ checks: [checks.consent(), ...presets.kakaoBrandMessag
 | `krNetworkAct50` | reklam rızası, ayrıca 21:00 ile 08:00 yerel saat için gece rızası |
 | `jpAntiSpamLaw` | opt-in |
 | `cnMinorMode` | reşit olmayanlar için: 06:00 ile 22:00 Asia/Shanghai ve günde bir |
+| `inTcccp` | promosyon rızası; varsayılan olarak kapalı olan 00:00-10:00 ve 21:00-24:00 bantları ayrı ayrı opt-in ister |
 | `usTcpa` | kullanıcının yerel saatiyle 08:00 ile 21:00 (47 CFR 64.1200) |
 | `euEprivacy` | pazarlama rızası, mevcut müşteriler için yumuşak opt-in |
 | `telegramBot` | sohbet başına saniyede 1 ve dakikada 20 |
@@ -333,11 +334,15 @@ Her paket `sources` (sayıların geldiği sayfalar) ve neyi dışarıda bırakt
 birbiriyle çelişir ve not hangi değerin neden seçildiğini söyler.
 
 **Yasal bir pakete uzanmadan önce kapsamını okuyun.** Yukarıdaki bütün düzenlemeler *ticari*
-iletişimi düzenler. `usTcpa`, `euEprivacy`, `krNetworkAct50` ve `jpAntiSpamLaw` birer pazarlama
+iletişimi düzenler. `usTcpa`, `euEprivacy`, `krNetworkAct50`, `jpAntiSpamLaw` ve `inTcccp` birer pazarlama
 kuralıdır; yani mesajınızı ancak mesajın kendisi ticari olduğunda bağlar. Kullanıcının kendi
 istediği bir hatırlatma reklam değildir ve onun için pazarlama paketi kullanmak, yasanın size
 hiç koymadığı bir kısıtı kendi elinizle içeri almak olur. Aday promosyon niteliğindeyse
 kullanın; değilse dürüst sınırlar platform kotaları ve kendi sessiz saatlerinizdir.
+Alıcının kendi saat dilimini okuyan paketlerde (`usTcpa`, `krNetworkAct50`, `inTcccp`)
+`user.timezone` yoksa karşılaştırılacak yerel saat de yoktur: o kontroller atlanır ve mesaj
+çıkar. Her paketin notu bunu söyler; saat dilimi olmayan kullanıcı, bu paketlerden birine
+güvenmeden önce çözülmesi gereken durumdur.
 
 Bazı ülkelerin neden burada olmadığı da aynı kapsam sınavıyla açıklanır. Kanada'nın CASL'i ve
 Avustralya'nın 2003 tarihli Spam Act'i rıza, gönderen kimliği ve abonelikten çıkma
@@ -347,8 +352,10 @@ telefonla pazarlama aramalarını kapsar. Hindistan ilginç olanı: sıkça tekr
 birincil metinde yazmaz. TRAI düzenlemesi zaman bantlarını, içerik kategorisi ve gün tipiyle
 birlikte, abonenin operatörüne *kaydettirdiği bir tercih* yapar; sabit bir yasal sessizlik
 penceresi değildir. Üstelik pencereyi aktaran ikincil kaynaklar başlangıcın 09.00 mı 10.00 mı
-olduğunda birbiriyle çelişir. Bunun üzerine kurulacak bir paket, hiçbir birincil kaynağın
-yazmadığı bir sayıyı kodlardı; o yüzden yok.
+olduğunda birbiriyle çelişir. Düzenlemenin sabitlediği şey varsayılan durumdur:
+Schedule-II'deki dokuz bandın dördü, yani 00:00-10:00 ve 21:00-24:00 arasını kapsayanlar,
+abone o bandı açmadıkça her müşteri için kapalıdır. `inTcccp` bu bantları sabit bir pencere
+yerine bant başına birer opt-in rızası olarak kodlar.
 
 ## Adaptörler
 

package/dist/src/checks.js

@@ -489,8 +489,10 @@ export function requiresConsent(options) {
                 const zone = zoneOf(ctx, when.timezone);
                 if (!zone)
                     return skip("no timezone on the user; consent window cannot be evaluated");
+                // A bare pass here would be indistinguishable from "the consent is on file",
+                // and explain() said exactly that about a consent nobody had given.
                 if (!inWindow(localClock(ctx.now, zone).minutes, when.start, when.end))
-                    return pass;
+                    return { kind: "pass", reason: `outside the consent window ${options.when.start} to ${options.when.end}` };
             }
             return ctx.user.consents?.[options.name] ? pass : reject(`consent "${options.name}" is missing${when ? ` (required ${options.when.start} to ${options.when.end})` : ""}`);
         },

package/dist/src/explain.js

@@ -89,7 +89,11 @@ export const en = {
     "allowedWindow.pass": (f) => (f.name ? `the "${f.name}" allowed window did not block it` : "the allowed window did not block it"),
     "allowedWindow.reject": (f) => `messages may only go out between ${f.start} and ${f.end} (${f.zone}), and the local time was outside that window`,
     "allowedWindow.skip": () => "the user has no time zone, so the allowed window could not be checked",
-    "requiresConsent.pass": (f) => (f.name ? `the "${f.name}" consent the check needs was in place` : "the consent the check needs was in place"),
+    "requiresConsent.pass": (f) => f.start
+        ? `the ${f.name ? `"${f.name}" ` : ""}consent is only needed between ${f.start} and ${f.end}, and it was outside those hours`
+        : f.name
+            ? `the "${f.name}" consent the check needs was in place`
+            : "the consent the check needs was in place",
     "requiresConsent.reject": (f) => `the user has not given the required "${f.name}" consent${f.start ? `, which applies between ${f.start} and ${f.end}` : ""}`,
     "requiresConsent.skip": () => "the user has no time zone, so the hours this consent applies could not be checked",
     "recentInteraction.pass": () => "the user had written to the assistant recently enough",
@@ -163,6 +167,7 @@ const PARSERS = {
     },
     requiresConsent: {
         stop: match(/^consent "(.+)" is missing(?: \(required (\S+) to (\S+)\))?$/, ["name", "start", "end"]),
+        passReason: match(/^outside the consent window (\S+) to (\S+)$/, ["start", "end"]),
         idFacts: (id) => (id.startsWith("consent:") ? { name: id.slice("consent:".length) } : {}),
         skip: fixed("no timezone on the user; consent window cannot be evaluated"),
     },
@@ -245,8 +250,9 @@ function entryBody(entry, s) {
         case "pass": {
             if (reason) {
                 const facts = key ? PARSERS[key]?.passReason?.(reason) : BUDGET_NEAR(reason);
+                // The id carries facts a reason does not, like which consent this is.
                 if (facts)
-                    return t(s, `${key ?? "budget"}.pass`, facts);
+                    return t(s, `${key ?? "budget"}.pass`, { ...(key ? (PARSERS[key]?.idFacts?.(entry.id) ?? {}) : {}), ...facts });
                 return t(s, "fallback.pass", { id: entry.id, reason });
             }
             const facts = key ? (PARSERS[key]?.idFacts?.(entry.id) ?? {}) : {};

package/dist/src/presets.js

@@ -27,7 +27,7 @@ export const presets = {
     wecomAppMessage: define(() => [c.rateLimit({ limit: 30, perSeconds: 60, id: "rate:30/min" }), c.rateLimit({ limit: 1000, perSeconds: 3600, id: "rate:1000/h" })], ["https://developer.work.weixin.qq.com/document/path/96212"], "WeCom application messages per app per member: 30 a minute and 1,000 an hour; the platform drops the excess silently, this preset refuses it with a reason."),
     kakaoAlimtalk: define(() => [c.consent()], ["https://kakaobusiness.gitbook.io/main/ad/infotalk"], "AlimTalk is informational and carries no time-of-day limit; consent is the only gate."),
     kakaoBrandMessage: define(() => [c.requiresConsent({ name: "ad" }), c.allowedWindow({ start: "08:00", end: "20:50", timezone: "Asia/Seoul", id: "window:kakao" })], ["https://kakaobusiness.gitbook.io/main/ad/moment/messagead/channelmessage/new/send"], "Brand messages need advertising consent and go out 08:00 to 20:50 Korea time regardless of the recipient's location. Official sources also quote 20:00 and 20:55; 20:50 is the stricter documented value."),
-    krNetworkAct50: define(() => [c.requiresConsent({ name: "ad" }), c.requiresConsent({ name: "night", when: { start: "21:00", end: "08:00", timezone: "user" } })], ["https://www.law.go.kr", "https://developers.fingerpush.com/biz-message/console/ads-guide"], "Network Act article 50: prior consent for advertising, and a separate consent for 21:00 to 08:00 (email is exempt). The two-year re-confirmation is not encoded."),
+    krNetworkAct50: define(() => [c.requiresConsent({ name: "ad" }), c.requiresConsent({ name: "night", when: { start: "21:00", end: "08:00", timezone: "user" } })], ["https://www.law.go.kr", "https://developers.fingerpush.com/biz-message/console/ads-guide"], "Network Act article 50: prior consent for advertising, and a separate consent for 21:00 to 08:00 (email is exempt). Without user.timezone the night consent cannot be placed in the day and skips; the advertising consent still applies. The two-year re-confirmation is not encoded."),
     jpAntiSpamLaw: define(() => [c.requiresConsent({ name: "optIn" })], ["https://www.soumu.go.jp/main_sosiki/cybersecurity/kokumin/basic/legal/08/"], "Opt-in since 2008 with sender identity and an opt-out route. There is no time-of-day rule in the law; a Japanese quiet-hours window would be etiquette, so none is encoded."),
     cnMinorMode: define(() => {
         const window = c.allowedWindow({ start: "06:00", end: "22:00", timezone: "Asia/Shanghai", id: "window:minor" });
@@ -38,7 +38,21 @@ export const presets = {
             { id: budget.id, limit: budget.limit, run: (ctx) => (ctx.user.minor ? budget.run(ctx) : adult(ctx)), consume: (ctx) => (ctx.user.minor ? budget.consume(ctx) : Promise.resolve(true)) },
         ];
     }, ["https://www.cac.gov.cn/2024-11/15/c_1733364304749288.htm", "https://www.cac.gov.cn/2022-01/04/c_1642894606364259.htm"], "Minor mode: no service 22:00 to 06:00 China time and a daily budget of one when user.minor is true; adults pass both checks. Per-age daily durations are not encoded."),
-    usTcpa: define(() => [c.allowedWindow({ start: "08:00", end: "21:00", timezone: "user", id: "window:tcpa" })], ["https://www.law.cornell.edu/cfr/text/47/64.1200"], "47 CFR 64.1200: no solicitation before 8 a.m. or after 9 p.m. at the called party's local time."),
+    // India: TCCCPR 2018 (6 of 2018). Regulation 9 lets a commercial communication reach a
+    // recipient only per the recipient's registered preference or consent; Schedule-II item 3
+    // fixes nine time bands and keeps (i) 00:00-06:00, (ii) 06:00-08:00, (iii) 08:00-10:00
+    // and (ix) 21:00-24:00 default OFF for every customer until the subscriber switches that
+    // band on, which the four band flags below carry. The second source is the gazetted
+    // regulation and the third is the May 2026 consolidation, which says on its own first
+    // page that the gazetted text prevails where they differ. Read 2026-09-12.
+    inTcccp: define(() => [
+        c.requiresConsent({ name: "promotional" }),
+        c.requiresConsent({ name: "band00to06", when: { start: "00:00", end: "06:00", timezone: "user" } }),
+        c.requiresConsent({ name: "band06to08", when: { start: "06:00", end: "08:00", timezone: "user" } }),
+        c.requiresConsent({ name: "band08to10", when: { start: "08:00", end: "10:00", timezone: "user" } }),
+        c.requiresConsent({ name: "band21to24", when: { start: "21:00", end: "24:00", timezone: "user" } }),
+    ], ["https://trai.gov.in/tcccpr", "https://www.trai.gov.in/sites/default/files/2025-01/RegulationUcc19072018.pdf", "https://www.trai.gov.in/sites/default/files/2026-05/CA_21052026.pdf"], "TCCCPR 2018: commercial communication needs the recipient's registered preference or consent (consents.promotional), and the Schedule-II default-off bands pass only when the subscriber opted that band in (the consents.band* flags, at the recipient's local time). The preference machinery is about promotional communication: the regulation's own block options exempt transactional and service communication and government communication (Schedule-II item 1 Note-4, item 3 Note-4), so pointing this preset at a transactional message imports a restriction the regulation does not place on it. Without user.timezone the four band checks skip and only the promotional consent is left. Opt-outs inside the default-on 10:00 to 21:00, day-type and per-category preferences are per-subscriber state a fixed check list cannot express; carry them in user.quietHours and consents. It binds SMS and voice calls on access networks, not in-app notifications or email; 1909 and DLT registration are out of scope. Sources read 2026-09-12."),
+    usTcpa: define(() => [c.allowedWindow({ start: "08:00", end: "21:00", timezone: "user", id: "window:tcpa" })], ["https://www.law.cornell.edu/cfr/text/47/64.1200"], "47 CFR 64.1200: no solicitation before 8 a.m. or after 9 p.m. at the called party's local time. Without user.timezone there is no local time to compare, so the check skips and the caller is not covered."),
     euEprivacy: define(() => [{ ...c.requiresConsent({ name: "marketing" }), run: (ctx) => (ctx.user.existingCustomer ? { kind: "pass", reason: "existing customer, soft opt-in" } : c.requiresConsent({ name: "marketing" }).run(ctx)) }], ["https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32002L0058"], "Directive 2002/58/EC article 13: prior consent for direct marketing, with the soft opt-in for existing customers (user.existingCustomer)."),
     telegramBot: define(() => [c.rateLimit({ limit: 1, perSeconds: 1, keyBy: "channel", id: "rate:1/s" }), c.rateLimit({ limit: 20, perSeconds: 60, keyBy: "channel", id: "rate:20/min" })], ["https://core.telegram.org/bots/faq"], "One message a second per chat and twenty a minute per group, keyed by candidate.channel. The broadcast rate of roughly thirty a second is not encoded."),
     slackApp: define(() => [c.rateLimit({ limit: 1, perSeconds: 1, keyBy: "channel", id: "rate:1/s" })], ["https://docs.slack.dev/apis/web-api/rate-limits/"], "chat.postMessage: one message a second per channel, keyed by candidate.channel."),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "proactive-gate",
-  "version": "0.4.1",
+  "version": "0.5.0",
   "description": "Decide whether a proactive AI agent may reach a user right now, and log why not. Ordered checks as code or JSON, a conformance spec, presets for platform and legal limits, adapters for AI SDK, Mastra, LangChain and OpenAI Agents, and a Python sibling.",
   "type": "module",
   "main": "./dist/src/index.js",

package/spec/CONFORMANCE.md

@@ -11,9 +11,9 @@ The suite is versioned by `SPEC_VERSION`, and each version is tagged `spec/vX.Y.
 separate from the package's own `vX.Y.Z` release tags.
 
 ```sh
-git clone --depth 1 --branch spec/v1.2.0 https://github.com/Bubblegunn/proactive-gate
+git clone --depth 1 --branch spec/v1.3.0 https://github.com/Bubblegunn/proactive-gate
 # or, to keep it beside your own source and update it deliberately
-git subtree add --prefix spec https://github.com/Bubblegunn/proactive-gate spec/v1.2.0 --squash
+git subtree add --prefix spec https://github.com/Bubblegunn/proactive-gate spec/v1.3.0 --squash
 ```
 
 A JavaScript implementation can also read the fixtures from an install, because the npm package
@@ -72,7 +72,9 @@ A fixture is a contract for every implementation, not only this one. So a change
 `test/spec-lint.mjs` checks.
 
 Versioning follows `SPEC.md`: a patch adds fixtures existing implementations already pass, a minor
-adds a check or a field, a major changes an expectation.
+adds a check or a field, a major changes an expectation. A new preset is a minor for the same
+reason a new check is: 7.3 makes a policy that names an unknown preset a compile error, so nobody
+already passes the fixture that exercises it.
 
 ## The honest status of this suite
 

package/spec/SPEC.md

@@ -7,6 +7,9 @@ empty at a stable release.
 
 Versioning: patch releases add fixtures that existing implementations already pass; minor
 releases add a check or field and mark it with `since`; major releases change an expectation.
+A preset added to the vocabulary is a minor, because 7.3 requires an implementation to reject a
+policy naming a preset it does not know, so a fixture that names the new preset is one no existing
+implementation can pass.
 An implementation declares the spec version it targets, and its CI MUST assert that the value
 equals `SPEC_VERSION`.
 

package/spec/SPEC_VERSION

@@ -1 +1 @@
-1.2.0
+1.3.0

package/spec/fixtures/adaptive-timing/placeholder.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "adaptive-timing/placeholder",
   "description": "A JSON policy cannot carry a next-good-moment function; the placeholder passes and keeps the trace shape.",

package/spec/fixtures/budget/bypass-priority.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "budget/bypass-priority",
   "description": "A bypass priority passes the budget without reading or consuming it.",

package/spec/fixtures/budget/daily-atomic-commit.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "budget/daily-atomic-commit",
   "description": "evaluate reads the counter, commit consumes it, the extra commit is refused.",

package/spec/fixtures/budget/near-limit.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "budget/near-limit",
   "description": "A pass close to the limit carries nearLimit.",

package/spec/fixtures/budget/race-second-commit-loses.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "budget/race-second-commit-loses",
   "description": "Two evaluations before either commit: only the first commit wins.",

package/spec/fixtures/budget/weekly-iso-week.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "budget/weekly-iso-week",
   "description": "The weekly counter is keyed on the local ISO week.",

package/spec/fixtures/consent/required.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "consent/required",
   "description": "Consent is the first thing about the person that is checked.",

package/spec/fixtures/cooldown/three-dismissals.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "cooldown/three-dismissals",
   "description": "Three dismissals of a type within 30 days silence it for 7 days from the latest.",

package/spec/fixtures/dedupe/already-delivered.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.2.0",
   "name": "dedupe/already-delivered",
   "description": "A key claimed inside the window rejects the second attempt at the same event.",

package/spec/fixtures/dedupe/no-key-skips.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.2.0",
   "name": "dedupe/no-key-skips",
   "description": "With no dedupeKey on the candidate the check skips rather than guessing an identity.",

package/spec/fixtures/defer/snooze-as-defer.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "defer/snooze-as-defer",
   "description": "snooze with defer true produces a deferred decision with retryAt.",

package/spec/fixtures/mode/allow-list.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "mode/allow-list",
   "description": "Only listed operating modes receive proactive messages; an undefined mode passes.",

package/spec/fixtures/ordering/kill-switch.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "ordering/kill-switch",
   "description": "A kill switch that is on stops everything before consent is even read.",

package/spec/fixtures/ordering/short-circuit.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "ordering/short-circuit",
   "description": "Checks run in policy order and stop at the first rejection.",

package/spec/fixtures/policy/unknown-check-is-an-error.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "policy/unknown-check-is-an-error",
   "description": "The runner never sees this fixture's expectation matter; it documents that compile errors are for the schema, not the runtime. A minimal valid policy passes.",

package/spec/fixtures/presets/cn-minor-mode.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "presets/cn-minor-mode",
   "description": "cnMinorMode restricts minors to 06:00 to 22:00 China time and one message a day; adults pass.",

package/spec/fixtures/presets/in-tcccp.json

@@ -0,0 +1,258 @@
+{
+  "spec_version": "1.3.0",
+  "since": "1.3.0",
+  "name": "presets/in-tcccp",
+  "description": "inTcccp needs promotional consent always, and each Schedule-II default-off band passes only when the subscriber opted that band in.",
+  "policy": {
+    "specVersion": "1.0.0",
+    "checks": [
+      {
+        "preset": "inTcccp"
+      }
+    ]
+  },
+  "tests": [
+    {
+      "description": "no promotional consent",
+      "input": {
+        "user": {
+          "id": "u1",
+          "consent": true,
+          "proactiveEnabled": true,
+          "mode": "normal",
+          "intensity": "normal",
+          "timezone": "Asia/Kolkata",
+          "quietHours": {
+            "start": "22:00",
+            "end": "08:00"
+          },
+          "createdAt": "2026-01-01T00:00:00Z",
+          "consents": {}
+        },
+        "candidate": {
+          "id": "c1",
+          "type": "reminder",
+          "priority": "normal",
+          "surfaces": [
+            "push",
+            "feed"
+          ]
+        },
+        "now": "2026-09-04T06:30:00Z"
+      },
+      "expect": {
+        "allowed": false,
+        "rejectedBy": "consent:promotional",
+        "trace": [
+          "consent:promotional"
+        ]
+      }
+    },
+    {
+      "description": "promotional consent at 12:00 IST passes",
+      "input": {
+        "user": {
+          "id": "u1",
+          "consent": true,
+          "proactiveEnabled": true,
+          "mode": "normal",
+          "intensity": "normal",
+          "timezone": "Asia/Kolkata",
+          "quietHours": {
+            "start": "22:00",
+            "end": "08:00"
+          },
+          "createdAt": "2026-01-01T00:00:00Z",
+          "consents": {
+            "promotional": true
+          }
+        },
+        "candidate": {
+          "id": "c1",
+          "type": "reminder",
+          "priority": "normal",
+          "surfaces": [
+            "push",
+            "feed"
+          ]
+        },
+        "now": "2026-09-04T06:30:00Z"
+      },
+      "expect": {
+        "allowed": true,
+        "trace": [
+          "consent:promotional",
+          "consent:band00to06",
+          "consent:band06to08",
+          "consent:band08to10",
+          "consent:band21to24"
+        ]
+      }
+    },
+    {
+      "description": "22:30 IST without the band ix opt-in rejects",
+      "input": {
+        "user": {
+          "id": "u1",
+          "consent": true,
+          "proactiveEnabled": true,
+          "mode": "normal",
+          "intensity": "normal",
+          "timezone": "Asia/Kolkata",
+          "quietHours": {
+            "start": "22:00",
+            "end": "08:00"
+          },
+          "createdAt": "2026-01-01T00:00:00Z",
+          "consents": {
+            "promotional": true
+          }
+        },
+        "candidate": {
+          "id": "c1",
+          "type": "reminder",
+          "priority": "normal",
+          "surfaces": [
+            "push",
+            "feed"
+          ]
+        },
+        "now": "2026-09-04T17:00:00Z"
+      },
+      "expect": {
+        "allowed": false,
+        "rejectedBy": "consent:band21to24",
+        "trace": [
+          "consent:promotional",
+          "consent:band00to06",
+          "consent:band06to08",
+          "consent:band08to10",
+          "consent:band21to24"
+        ]
+      }
+    },
+    {
+      "description": "22:30 IST with the band ix opt-in passes",
+      "input": {
+        "user": {
+          "id": "u1",
+          "consent": true,
+          "proactiveEnabled": true,
+          "mode": "normal",
+          "intensity": "normal",
+          "timezone": "Asia/Kolkata",
+          "quietHours": {
+            "start": "22:00",
+            "end": "08:00"
+          },
+          "createdAt": "2026-01-01T00:00:00Z",
+          "consents": {
+            "promotional": true,
+            "band21to24": true
+          }
+        },
+        "candidate": {
+          "id": "c1",
+          "type": "reminder",
+          "priority": "normal",
+          "surfaces": [
+            "push",
+            "feed"
+          ]
+        },
+        "now": "2026-09-04T17:00:00Z"
+      },
+      "expect": {
+        "allowed": true,
+        "trace": [
+          "consent:promotional",
+          "consent:band00to06",
+          "consent:band06to08",
+          "consent:band08to10",
+          "consent:band21to24"
+        ]
+      }
+    },
+    {
+      "description": "04:00 IST rejects when only band 06:00 to 08:00 was opted in",
+      "input": {
+        "user": {
+          "id": "u1",
+          "consent": true,
+          "proactiveEnabled": true,
+          "mode": "normal",
+          "intensity": "normal",
+          "timezone": "Asia/Kolkata",
+          "quietHours": {
+            "start": "22:00",
+            "end": "08:00"
+          },
+          "createdAt": "2026-01-01T00:00:00Z",
+          "consents": {
+            "promotional": true,
+            "band06to08": true
+          }
+        },
+        "candidate": {
+          "id": "c1",
+          "type": "reminder",
+          "priority": "normal",
+          "surfaces": [
+            "push",
+            "feed"
+          ]
+        },
+        "now": "2026-09-04T22:30:00Z"
+      },
+      "expect": {
+        "allowed": false,
+        "rejectedBy": "consent:band00to06",
+        "trace": [
+          "consent:promotional",
+          "consent:band00to06"
+        ]
+      }
+    },
+    {
+      "description": "09:00 IST without the band iii opt-in rejects",
+      "input": {
+        "user": {
+          "id": "u1",
+          "consent": true,
+          "proactiveEnabled": true,
+          "mode": "normal",
+          "intensity": "normal",
+          "timezone": "Asia/Kolkata",
+          "quietHours": {
+            "start": "22:00",
+            "end": "08:00"
+          },
+          "createdAt": "2026-01-01T00:00:00Z",
+          "consents": {
+            "promotional": true
+          }
+        },
+        "candidate": {
+          "id": "c1",
+          "type": "reminder",
+          "priority": "normal",
+          "surfaces": [
+            "push",
+            "feed"
+          ]
+        },
+        "now": "2026-09-04T03:30:00Z"
+      },
+      "expect": {
+        "allowed": false,
+        "rejectedBy": "consent:band08to10",
+        "trace": [
+          "consent:promotional",
+          "consent:band00to06",
+          "consent:band06to08",
+          "consent:band08to10"
+        ]
+      }
+    }
+  ]
+}

package/spec/fixtures/presets/kakao-brand-message.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "presets/kakao-brand-message",
   "description": "kakaoBrandMessage runs 08:00 to 20:50 Korea time regardless of the recipient's zone.",

package/spec/fixtures/presets/kr-network-act-50.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "presets/kr-network-act-50",
   "description": "krNetworkAct50 needs ad consent always and night consent 21:00 to 08:00.",

package/spec/fixtures/presets/telegram-bot.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "presets/telegram-bot",
   "description": "telegramBot limits one message a second and twenty a minute per channel.",

package/spec/fixtures/presets/us-tcpa.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "presets/us-tcpa",
   "description": "usTcpa allows 08:00 to 21:00 in the user's zone.",

package/spec/fixtures/quiet-hours/apia.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "quiet-hours/apia",
   "description": "Pacific/Apia is UTC+13; 10:00Z is 23:00 local.",

package/spec/fixtures/quiet-hours/caller-supplied-dates.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.1.0",
   "name": "quiet-hours/caller-supplied-dates",
   "description": "A calendar date the caller supplies beats the weekday and the default, in both directions. There is no bundled holiday calendar.",

package/spec/fixtures/quiet-hours/crosses-midnight-by-day.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.1.0",
   "name": "quiet-hours/crosses-midnight-by-day",
   "description": "A window belongs to the day it opens on, so Friday 18:00 to 02:00 silences Saturday morning. Saturday has no window of its own, so the carry is the only thing that can explain the silence.",

package/spec/fixtures/quiet-hours/dst-new-york.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "quiet-hours/dst-new-york",
   "description": "On 2026-03-08 New York springs forward at 02:00; 06:30Z is 01:30 EST, 07:30Z is 03:30 EDT.",

package/spec/fixtures/quiet-hours/istanbul.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "quiet-hours/istanbul",
   "description": "Quiet hours cross midnight in the user's zone; the priority floor bypasses them.",

package/spec/fixtures/quiet-hours/wall-clock.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "quiet-hours/wall-clock",
   "description": "now is in 2031; the outcome only holds when the implementation used the supplied instant, not the wall clock.",

package/spec/fixtures/quiet-hours/weekday-schedule.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.1.0",
   "name": "quiet-hours/weekday-schedule",
   "description": "A Friday and Saturday weekend in Asia/Dubai (UTC+4, no daylight saving). A date beats a weekday beats the default, and null means the day has no quiet hours.",

package/spec/fixtures/shadow/reject-continues.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "shadow/reject-continues",
   "description": "A shadow check records its rejection and evaluation continues.",

package/spec/fixtures/trust-ramp/first-week.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "trust-ramp/first-week",
   "description": "During the first days only high priority and above gets through.",

package/spec/fixtures/utility/bounded-deferral-cap.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "utility/bounded-deferral-cap",
   "description": "The bound caps t*.",

package/spec/fixtures/utility/bounded-deferral.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "utility/bounded-deferral",
   "description": "boundedDeferral moves deliverAt by t* = min(bound, lambda * c / (2 * staleness)) when the candidate is busy.",

package/spec/fixtures/utility/floor.json

@@ -1,5 +1,5 @@
 {
-  "spec_version": "1.2.0",
+  "spec_version": "1.3.0",
   "since": "1.0.0",
   "name": "utility/floor",
   "description": "utilityFloor rejects when pAccept is below tau = cFA / (cFA + pNeed * cFN).",