feat(shortener): honor gateway-injected link_lifetime for permanent paid-tier links

- GenerateRequest.link_lifetime (server-set by qr-gateway from install entitlement)
- build_generation_kwargs passes it through
- generate_standard_qr/generate_artistic_qr accept and forward to shortener
- _maybe_shorten_url_for_qr sends permanent:true when link_lifetime=permanent
Paired with qrcut-shortener key-gated permanent flag + qr-gateway credit-aware injection.

app.py

@@ -821,6 +821,7 @@ def _maybe_shorten_url_for_qr(
     original_input: str,
     input_type: str,
     use_temporary_short_link: bool,
+    link_lifetime: str | None = None,
     request: Any | None = None,
 ) -> Mapping[str, Any]:
     fallback_qr_text = _normalize_qr_text_for_validation(original_input, input_type)
@@ -847,7 +848,13 @@ def _maybe_shorten_url_for_qr(
             "error": "shortener is not configured on the server",
         }
 
-    request_body = json.dumps({"url": str(original_input or ""), "reuse_existing": False}).encode("utf-8")
+    # link_lifetime is injected by the qr-gateway from the install's entitlement:
+    # "permanent" => paid-tier (Pro or credit-funded) => the short link never
+    # expires. Anything else => default rolling inactivity expiry.
+    permanent_link = str(link_lifetime or "").strip().lower() == "permanent"
+    request_body = json.dumps(
+        {"url": str(original_input or ""), "reuse_existing": False, "permanent": permanent_link}
+    ).encode("utf-8")
     # Set an explicit User-Agent: urllib's default "Python-urllib/3.x" is blocked
     # by Cloudflare WAF (Error 1010) at the qrcut.co edge, which surfaced as
     # "HTTP Error 403" → "short link unavailable, using normal link" in the UI.
@@ -2986,6 +2993,7 @@ def generate_standard_qr(
     text_input: str = "",
     input_type: str = "URL",
     use_temporary_short_link: bool = False,
+    link_lifetime: str | None = None,
     image_size: int = 512,
     border_size: int = 4,
     error_correction: str = "Medium (15%)",
@@ -3031,6 +3039,7 @@ def generate_standard_qr(
         original_input=text_input,
         input_type=input_type,
         use_temporary_short_link=use_temporary_short_link,
+        link_lifetime=link_lifetime,
         request=request,
     )
     qr_text_input = str(shortener_result.get("effective_qr_text") or qr_text_input)
@@ -3295,6 +3304,7 @@ def generate_artistic_qr(
     text_input: str = "",
     input_type: str = "URL",
     use_temporary_short_link: bool = False,
+    link_lifetime: str | None = None,
     image_size: int = 512,
     border_size: int = 4,
     error_correction: str = "Medium (15%)",
@@ -3357,6 +3367,7 @@ def generate_artistic_qr(
         original_input=text_input,
         input_type=input_type,
         use_temporary_short_link=use_temporary_short_link,
+        link_lifetime=link_lifetime,
         request=request,
     )
     qr_text_input = str(shortener_result.get("effective_qr_text") or qr_text_input)

qr_modal_contract.py

@@ -26,6 +26,9 @@ class GenerateRequest(BaseModel):
     include_svg: bool = Field(default=False)
     include_image_base64: bool = Field(default=True)
     use_temporary_short_link: bool = Field(default=False)
+    # Server-set by the qr-gateway from the install's entitlement (never trust
+    # client-supplied values for it): "permanent" => paid-tier link, no expiry.
+    link_lifetime: str | None = Field(default=None)
     analytics_opt_in: bool = Field(default=False)
     enable_freeu: bool = Field(default=True)
     negative_prompt: str = Field(
@@ -75,6 +78,7 @@ def build_generation_kwargs(
         "text_input": request.qr_text,
         "input_type": request.input_type,
         "use_temporary_short_link": request.use_temporary_short_link,
+        "link_lifetime": request.link_lifetime,
         "image_size": request.image_size,
         "border_size": request.border_size,
         "error_correction": request.error_correction,