ConusAI vendor v0.1.0-dev.20261027+9b1131fb

2026-10-27 18:05:17 +00:00
commit 3102273ec7
538 changed files with 80203 additions and 0 deletions
@@ -0,0 +1,53 @@
+// The module's names and limits, in a file with no import: a browser bundle can take them without
+// loading the data layer the schemas live beside.
+
+/** The format an export names itself with, so a reader of the file knows which shape it holds. */
+export const ACCOUNT_EXPORT_FORMAT = "conusai.account-export.v1"
+
+/** The section of an export that holds this app's own rows about the person. */
+export const ACCOUNT_SECTION = "account"
+
+/**
+ * How recent the sign-in of the session that asks for a deletion must be. Deleting an account is the
+ * owner action the template spec's session policy asks a re-authentication for (§7): a session that
+ * was left open on a shared machine is not enough.
+ */
+export const RECENT_SIGN_IN_SECONDS = 15 * 60
+
+/** The job that resumes a deletion a module's erasure held up, and how often the worker runs it. */
+export const DELETION_SWEEP_JOB = "account.deletion.sweep"
+export const DELETION_SWEEP_CRON = "*/5 * * * *"
+
+/** What a deleted user row is left holding until the deletion completes: no provider identity, no address. */
+export const DETACHED_ISSUER = "urn:conusai:account:deleted"
+export const DETACHED_DISPLAY_NAME = "Deleted account"
+
+/** Where the account page lives: `settings` is a reserved organization slug, so no organization shadows it. */
+export const ACCOUNT_PATH = "/settings/account"
+
+/**
+ * The job that delivers the revocations of app sessions whose derived service sessions a module's
+ * platform has not confirmed ending yet, and how often the worker runs it (pg-boss's finest cron).
+ */
+export const REVOCATION_JOB = "account.sessions.revoke"
+export const REVOCATION_CRON = "* * * * *"
+
+/** How long one module's revocation call may take before it counts as failed (a sign-out waits no longer). */
+export const REVOCATION_CALL_MS = 3000
+
+/** How long a delivery pass holds its row: well above one bounded call, so a pass that died is retried. */
+export const REVOCATION_CLAIM_MS = 30_000
+
+/** The first retry waits this long, each next one twice as long, up to REVOCATION_BACKOFF_MAX_MS. */
+export const REVOCATION_BACKOFF_MS = 30_000
+export const REVOCATION_BACKOFF_MAX_MS = 5 * 60_000
+
+/**
+ * The longest a derived service session can outlive its app session's revocation: a Support widget
+ * session lives 60 minutes from its mint (the platform's fixed lifetime), plus a margin for clocks.
+ * A revocation still undelivered after this has nothing left to end: it is `lapsed`, not retried.
+ */
+export const DERIVED_SESSION_LIFETIME_MS = 65 * 60_000
+
+/** Delivered and lapsed revocation rows are removed this long after they finished. */
+export const REVOCATION_RETENTION_MS = 24 * 60 * 60_000