@bunizao/contracts 0.3.0 → 0.4.0

package/dist/index.d.ts

@@ -3,6 +3,7 @@ export * from './admin';
 export * from './comments';
 export * from './content';
 export * from './listening';
+export * from './messages';
 export * from './mood';
 export * from './notify';
 export * from './routes';

package/dist/index.js

@@ -85,6 +85,13 @@ function parsePostLocaleTag(tagName) {
   }
   return canonicalSlug ? { locale, canonicalSlug } : { locale };
 }
+// src/messages.ts
+var MESSAGE_LOCALES = ["zh", "en"];
+var MESSAGE_MIN_BODY_LENGTH = 2;
+var MESSAGE_MAX_BODY_LENGTH = 4000;
+var MESSAGE_MAX_NAME_LENGTH = 32;
+var MESSAGE_STATES = ["new", "read", "replied", "archived", "spam"];
+
 // src/mood.ts
 var MOOD_SENTIMENT_LABELS = ["joy", "calm", "melancholy", "anger", "anxiety", "neutral"];
 var MOOD_AI_MODELS = ["gpt-5.5", "gpt-5", "claude-sonnet-4.6"];
@@ -109,6 +116,7 @@ var MOOD_MEDIA_PROXY_BASE_PATH = "/v2/media";
 var LISTENING_PATH = "/v2/listening";
 var COMMENTS_PATH = "/v2/comments";
 var COMMENT_PATH_PREFIX = "/v2/comments/";
+var OWNER_MESSAGES_PATH = "/v2/messages";
 var REACTIONS_PATH = "/v2/reactions";
 var REACTIONS_TOGGLE_PATH = "/v2/reactions/toggle";
 var READER_ME_PATH = "/v2/reader/me";
@@ -212,6 +220,11 @@ export {
   LEGACY_NOTIFY_BASE_PATH,
   LISTENING_ANALYTICS_EVENT_ENDPOINT,
   LISTENING_PATH,
+  MESSAGE_LOCALES,
+  MESSAGE_MAX_BODY_LENGTH,
+  MESSAGE_MAX_NAME_LENGTH,
+  MESSAGE_MIN_BODY_LENGTH,
+  MESSAGE_STATES,
   MODERATION_ACTIONS,
   MODERATION_REASONS,
   MOOD_AI_MODELS,
@@ -235,6 +248,7 @@ export {
   NOTIFY_GATE_PATH,
   NOTIFY_GATE_RELEASE_PATH,
   NOTIFY_GATE_STATES,
+  OWNER_MESSAGES_PATH,
   PING_PATH,
   REACTIONS_PATH,
   REACTIONS_TOGGLE_PATH,

package/dist/messages.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Owner messages — the standalone form at /message.
+ *
+ * This is deliberately NOT the comments contract. A message is private by
+ * construction, not by moderation state: there is no `published`, no thread,
+ * no parent, no reactions, and no public read endpoint anywhere in this file.
+ * The comments stack answers "who may see this row"; here the answer is fixed
+ * at the storage layer, so a mis-written WHERE clause cannot leak one.
+ *
+ * What it does share with comments is everything that lives above the table:
+ * Turnstile, the honeypot and dwell tripwires, Akismet, the risk heuristics,
+ * reader identity, and the ops-bot notification. See site-api's
+ * features/messages/server/message-service.ts.
+ */
+export declare const MESSAGE_LOCALES: readonly ['zh', 'en'];
+export type MessageLocale = (typeof MESSAGE_LOCALES)[number];
+/** Body bounds, shared by the form's client-side validation and the service. */
+export declare const MESSAGE_MIN_BODY_LENGTH = 2;
+export declare const MESSAGE_MAX_BODY_LENGTH = 4000;
+export declare const MESSAGE_MAX_NAME_LENGTH = 32;
+/**
+ * Triage, not moderation. Every value here is private; none of them makes a
+ * message visible to anyone but the owner, which is why there is no
+ * `published` member to accidentally set.
+ *
+ *   new      — landed, not yet looked at
+ *   read     — the owner has seen it
+ *   replied  — answered from Telegram; `repliedAt` is set
+ *   archived — filed away by the owner
+ *   spam     — the risk stack or Akismet called it; never notified loudly
+ */
+export declare const MESSAGE_STATES: readonly ['new', 'read', 'replied', 'archived', 'spam'];
+export type MessageState = (typeof MESSAGE_STATES)[number];
+export interface OwnerMessageCreateInput {
+    /** Plain text, MESSAGE_MIN_BODY_LENGTH–MESSAGE_MAX_BODY_LENGTH characters. */
+    body: string;
+    displayName: string;
+    /**
+     * Optional, and optional on purpose — the same "channeling beats blocking"
+     * call the comment box makes. Supplied, it must be valid: it triggers the
+     * shared lazy-verification mail, and only a verified address can ever
+     * receive the owner's reply.
+     */
+    email?: string;
+    turnstileToken: string;
+    /** Minted by the form on load; proves the submit was not instant. */
+    dwellToken: string;
+    /** Honeypot. Any non-empty value is a silent drop. */
+    website?: string;
+    locale?: MessageLocale;
+}
+export interface OwnerMessageCreateResult {
+    id: string;
+    createdAt: string;
+    /**
+     * Whether the owner's reply can actually reach the sender. True only when
+     * the address belongs to a verified reader — an address typed into a public
+     * form is not proof that its owner sent anything, so an unverified one is
+     * never mailed. False also when no address was given at all; the form uses
+     * this to decide whether the receipt promises a reply or not.
+     */
+    replyable: boolean;
+    /**
+     * A verification mail just went out to a not-yet-verified address. The
+     * receipt tells the sender to click it if they want an answer.
+     */
+    verificationSent: boolean;
+}

package/dist/messages.js

@@ -0,0 +1,13 @@
+// src/messages.ts
+var MESSAGE_LOCALES = ["zh", "en"];
+var MESSAGE_MIN_BODY_LENGTH = 2;
+var MESSAGE_MAX_BODY_LENGTH = 4000;
+var MESSAGE_MAX_NAME_LENGTH = 32;
+var MESSAGE_STATES = ["new", "read", "replied", "archived", "spam"];
+export {
+  MESSAGE_LOCALES,
+  MESSAGE_MAX_BODY_LENGTH,
+  MESSAGE_MAX_NAME_LENGTH,
+  MESSAGE_MIN_BODY_LENGTH,
+  MESSAGE_STATES
+};

package/dist/routes.d.ts

@@ -14,6 +14,7 @@ export declare const MOOD_MEDIA_PROXY_BASE_PATH: '/v2/media';
 export declare const LISTENING_PATH: '/v2/listening';
 export declare const COMMENTS_PATH: '/v2/comments';
 export declare const COMMENT_PATH_PREFIX: '/v2/comments/';
+export declare const OWNER_MESSAGES_PATH: '/v2/messages';
 export declare const REACTIONS_PATH: '/v2/reactions';
 export declare const REACTIONS_TOGGLE_PATH: '/v2/reactions/toggle';
 export declare const READER_ME_PATH: '/v2/reader/me';

package/dist/routes.js

@@ -15,6 +15,7 @@ var MOOD_MEDIA_PROXY_BASE_PATH = "/v2/media";
 var LISTENING_PATH = "/v2/listening";
 var COMMENTS_PATH = "/v2/comments";
 var COMMENT_PATH_PREFIX = "/v2/comments/";
+var OWNER_MESSAGES_PATH = "/v2/messages";
 var REACTIONS_PATH = "/v2/reactions";
 var REACTIONS_TOGGLE_PATH = "/v2/reactions/toggle";
 var READER_ME_PATH = "/v2/reader/me";
@@ -61,6 +62,7 @@ export {
   MOOD_SEARCH_PATH,
   MUSICKIT_TOKEN_PATH,
   NOTIFY_BASE_PATH,
+  OWNER_MESSAGES_PATH,
   PING_PATH,
   REACTIONS_PATH,
   REACTIONS_TOGGLE_PATH,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bunizao/contracts",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Shared TypeScript contracts for buxx.me services and clients.",
   "type": "module",
   "sideEffects": false,
@@ -53,6 +53,11 @@
       "import": "./dist/listening.js",
       "default": "./dist/listening.js"
     },
+    "./messages": {
+      "types": "./dist/messages.d.ts",
+      "import": "./dist/messages.js",
+      "default": "./dist/messages.js"
+    },
     "./mood": {
       "types": "./dist/mood.d.ts",
       "import": "./dist/mood.js",