@commonpub/server 2.88.0 → 2.90.0

package/dist/contest/read.js

@@ -0,0 +1,164 @@
+import { eq, ne, and, or, desc, sql, inArray } from 'drizzle-orm';
+import { contests, contestJudges, contestStakeholders } from '@commonpub/schema';
+import { normalizePagination, countRows } from '../query.js';
+import { isContestStakeholder } from './stakeholders.js';
+import { isContestJudge } from './judges.js';
+// Contest read path: listing (visibility-filtered), detail mapping, per-contest
+// view authorization, and the score-reveal decision. Writers live in contest.ts.
+export async function listContests(db, filters = {}, viewer) {
+    const conditions = [];
+    if (filters.status) {
+        conditions.push(eq(contests.status, filters.status));
+    }
+    // Visibility: admins see everything. Everyone else sees `public` contests,
+    // plus — when signed in — the ones they have a relationship to so they're not
+    // hidden in the listing: their own, ones they review (stakeholder), ones they
+    // judge, and private ones whose `visibleToRoles` includes their role. (`unlisted`
+    // stays link-only; mirrors canViewContest so the listing matches per-contest access.)
+    if (viewer?.role !== 'admin') {
+        const visConds = [eq(contests.visibility, 'public')];
+        if (viewer?.userId) {
+            visConds.push(eq(contests.createdById, viewer.userId));
+            visConds.push(inArray(contests.id, db.select({ id: contestStakeholders.contestId }).from(contestStakeholders).where(eq(contestStakeholders.userId, viewer.userId))));
+            visConds.push(inArray(contests.id, db.select({ id: contestJudges.contestId }).from(contestJudges).where(eq(contestJudges.userId, viewer.userId))));
+        }
+        if (viewer?.role) {
+            visConds.push(sql `${contests.visibleToRoles} @> ${JSON.stringify([viewer.role])}::jsonb`);
+        }
+        conditions.push(visConds.length > 1 ? or(...visConds) : visConds[0]);
+        // Drafts never appear in listings except to their own owner (admins, handled
+        // above, see everything). Orthogonal to visibility — a public draft is still hidden.
+        conditions.push(viewer?.userId
+            ? or(ne(contests.status, 'draft'), eq(contests.createdById, viewer.userId))
+            : ne(contests.status, 'draft'));
+    }
+    const where = conditions.length > 0 ? and(...conditions) : undefined;
+    const { limit, offset } = normalizePagination(filters);
+    const [rows, total] = await Promise.all([
+        db
+            .select()
+            .from(contests)
+            .where(where)
+            .orderBy(desc(contests.startDate), desc(contests.id))
+            .limit(limit)
+            .offset(offset),
+        countRows(db, contests, where),
+    ]);
+    const items = rows.map((row) => ({
+        id: row.id,
+        title: row.title,
+        slug: row.slug,
+        subheading: row.subheading,
+        description: row.description,
+        bannerUrl: row.bannerUrl,
+        coverImageUrl: row.coverImageUrl,
+        status: row.status,
+        startDate: row.startDate,
+        endDate: row.endDate,
+        entryCount: row.entryCount,
+        createdAt: row.createdAt,
+    }));
+    return { items, total };
+}
+/** Map a contest row to the API detail shape. Shared by the CRUD writers. */
+export function toContestDetail(row) {
+    return {
+        id: row.id,
+        title: row.title,
+        slug: row.slug,
+        description: row.description,
+        bannerUrl: row.bannerUrl,
+        coverImageUrl: row.coverImageUrl,
+        status: row.status,
+        startDate: row.startDate,
+        endDate: row.endDate,
+        entryCount: row.entryCount,
+        createdAt: row.createdAt,
+        subheading: row.subheading,
+        rules: row.rules,
+        prizesDescription: row.prizesDescription,
+        descriptionFormat: row.descriptionFormat,
+        rulesFormat: row.rulesFormat,
+        prizesDescriptionFormat: row.prizesDescriptionFormat,
+        descriptionBlocks: row.descriptionBlocks ?? null,
+        rulesBlocks: row.rulesBlocks ?? null,
+        prizesBlocks: row.prizesBlocks ?? null,
+        showPrizes: row.showPrizes,
+        stages: row.stages ?? [],
+        currentStageId: row.currentStageId ?? null,
+        prizes: row.prizes ?? null,
+        judgingCriteria: row.judgingCriteria ?? null,
+        judgingVisibility: row.judgingVisibility,
+        judgingEndDate: row.judgingEndDate,
+        communityVotingEnabled: row.communityVotingEnabled,
+        eligibleContentTypes: row.eligibleContentTypes ?? null,
+        maxEntriesPerUser: row.maxEntriesPerUser ?? null,
+        visibility: row.visibility,
+        visibleToRoles: row.visibleToRoles ?? null,
+        createdById: row.createdById,
+    };
+}
+/**
+ * Whether `user` may view this contest. `public`/`unlisted` are viewable by
+ * anyone (unlisted is simply hidden from listings). `private` is restricted to
+ * the owner, admins, stakeholders, panel judges, and users whose role is in
+ * `visibleToRoles`.
+ */
+export async function canViewContest(db, contest, user) {
+    // Drafts are owner-only regardless of the visibility setting — an unlaunched
+    // contest must never be world-readable, even when its visibility is `public`.
+    if (contest.status === 'draft') {
+        if (!user)
+            return false;
+        if (user.id === contest.createdById || user.role === 'admin')
+            return true;
+        if (await isContestStakeholder(db, contest.id, user.id))
+            return true;
+        if (await isContestJudge(db, contest.id, user.id))
+            return true;
+        return false;
+    }
+    if (contest.visibility !== 'private')
+        return true;
+    if (!user)
+        return false;
+    if (user.id === contest.createdById || user.role === 'admin')
+        return true;
+    if (contest.visibleToRoles && contest.visibleToRoles.includes(user.role))
+        return true;
+    if (await isContestStakeholder(db, contest.id, user.id))
+        return true;
+    if (await isContestJudge(db, contest.id, user.id))
+        return true;
+    return false;
+}
+export async function getContestBySlug(db, slug) {
+    const rows = await db
+        .select()
+        .from(contests)
+        .where(eq(contests.slug, slug))
+        .limit(1);
+    if (rows.length === 0)
+        return null;
+    return toContestDetail(rows[0]);
+}
+/**
+ * Decide whether a viewer may see aggregate entry scores, honouring the
+ * contest's `judgingVisibility` setting. Pure + exhaustively testable.
+ *
+ * - Privileged viewers (owner / admin / panel judge) always see scores.
+ * - `public`     → scores visible to everyone (during judging and after).
+ * - `judges-only`→ scores hidden from the public until the contest completes.
+ * - `private`    → aggregate scores never exposed to the public (ranks may
+ *                  still be shown so winners can be announced).
+ */
+export function shouldRevealScores(visibility, status, privileged) {
+    if (privileged)
+        return true;
+    if (visibility === 'public')
+        return true;
+    if (visibility === 'private')
+        return false;
+    return status === 'completed';
+}
+//# sourceMappingURL=read.js.map

package/dist/contest/read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../src/contest/read.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAGjF,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAS7C,gFAAgF;AAChF,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAM,EACN,UAA0B,EAAE,EAC5B,MAAgD;IAEhD,MAAM,UAAU,GAAG,EAAE,CAAC;IAEtB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,UAAU,CAAC,IAAI,CACb,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CACpC,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,kFAAkF;IAClF,sFAAsF;IACtF,IAAI,MAAM,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrD,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YACvD,QAAQ,CAAC,IAAI,CACX,OAAO,CACL,QAAQ,CAAC,EAAE,EACX,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAChI,CACF,CAAC;YACF,QAAQ,CAAC,IAAI,CACX,OAAO,CACL,QAAQ,CAAC,EAAE,EACX,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAC9G,CACF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,EAAE,IAAI,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAA,GAAG,QAAQ,CAAC,cAAc,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5F,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;QAEvE,6EAA6E;QAC7E,qFAAqF;QACrF,UAAU,CAAC,IAAI,CACb,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAE;YAC5E,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CACjC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAEvD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtC,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,KAAK,CAAC;aACZ,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;aACpD,KAAK,CAAC,KAAK,CAAC;aACZ,MAAM,CAAC,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC;KAC/B,CAAC,CAAC;IAEH,MAAM,KAAK,GAAsB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAClD,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAID,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAAC,GAAe;IAC7C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,uBAAuB,EAAE,GAAG,CAAC,uBAAuB;QACpD,iBAAiB,EAAG,GAAG,CAAC,iBAAsC,IAAI,IAAI;QACtE,WAAW,EAAG,GAAG,CAAC,WAAgC,IAAI,IAAI;QAC1D,YAAY,EAAG,GAAG,CAAC,YAAiC,IAAI,IAAI;QAC5D,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;QACxB,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;QAC1C,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;QAC1B,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,IAAI;QAC5C,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,sBAAsB,EAAE,GAAG,CAAC,sBAAsB;QAClD,oBAAoB,EAAE,GAAG,CAAC,oBAAoB,IAAI,IAAI;QACtD,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,IAAI;QAChD,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;QAC1C,WAAW,EAAE,GAAG,CAAC,WAAW;KAC7B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAM,EACN,OAA6H,EAC7H,IAAyC;IAEzC,6EAA6E;IAC7E,8EAA8E;IAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,IAAI,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1E,IAAI,MAAM,oBAAoB,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACrE,IAAI,MAAM,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtF,IAAI,MAAM,oBAAoB,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,MAAM,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAM,EACN,IAAY;IAEZ,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,EAAE;SACR,IAAI,CAAC,QAAQ,CAAC;SACd,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;SAC9B,KAAK,CAAC,CAAC,CAAC,CAAC;IAEZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAoC,EACpC,MAAqB,EACrB,UAAmB;IAEnB,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,MAAM,KAAK,WAAW,CAAC;AAChC,CAAC"}

package/dist/contest/stages.d.ts

@@ -0,0 +1,28 @@
+import type { ContestStage } from '@commonpub/schema';
+import type { StageSource } from './types.js';
+/**
+ * The classic Submissions → Judging → Results timeline, synthesized from the
+ * status + date columns for contests that haven't defined explicit stages.
+ * Stable ids let `currentStageId` reference them even for legacy contests.
+ */
+export declare function synthesizeStages(c: StageSource): ContestStage[];
+/**
+ * The contest's stage timeline: its explicit `stages` if any are defined,
+ * otherwise the synthesized classic flow. The standard flow is the zero-config
+ * default — a contest with no `stages` renders identically to pre-B1.
+ */
+export declare function normalizeStages(c: StageSource): ContestStage[];
+/**
+ * The stage that is currently "now": the one `currentStageId` points at (if it
+ * resolves), else derived from the coarse `status`. Null while draft/cancelled
+ * (nothing is running). `status` remains the behavioural source of truth for
+ * gating; this is for DISPLAY (hero pill, sidebar highlight, countdown label).
+ */
+export declare function currentStage(c: StageSource): ContestStage | null;
+/** True when an entry was culled at some review stage (Phase B2 cohort gate). */
+export declare function isEliminated(entry: {
+    stageState?: Array<{
+        status: string;
+    }> | null;
+}): boolean;
+//# sourceMappingURL=stages.d.ts.map

package/dist/contest/stages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stages.d.ts","sourceRoot":"","sources":["../../src/contest/stages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAO9C;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,WAAW,GAAG,YAAY,EAAE,CAM/D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,WAAW,GAAG,YAAY,EAAE,CAE9D;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,WAAW,GAAG,YAAY,GAAG,IAAI,CAiBhE;AAED,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAAE,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAA;CAAE,GAAG,OAAO,CAE9F"}

package/dist/contest/stages.js

@@ -0,0 +1,52 @@
+// --- Phase B1: stage timeline helpers (pure — operate on a contest-like object) ---
+const toIso = (d) => d ? new Date(d).toISOString() : undefined;
+/**
+ * The classic Submissions → Judging → Results timeline, synthesized from the
+ * status + date columns for contests that haven't defined explicit stages.
+ * Stable ids let `currentStageId` reference them even for legacy contests.
+ */
+export function synthesizeStages(c) {
+    return [
+        { id: 'core-submission', name: 'Submissions', kind: 'submission', core: true, startsAt: toIso(c.startDate), endsAt: toIso(c.endDate) },
+        { id: 'core-review', name: 'Judging', kind: 'review', core: true, endsAt: toIso(c.judgingEndDate) ?? toIso(c.endDate) },
+        { id: 'core-results', name: 'Results', kind: 'results', core: true },
+    ];
+}
+/**
+ * The contest's stage timeline: its explicit `stages` if any are defined,
+ * otherwise the synthesized classic flow. The standard flow is the zero-config
+ * default — a contest with no `stages` renders identically to pre-B1.
+ */
+export function normalizeStages(c) {
+    return c.stages && c.stages.length > 0 ? c.stages : synthesizeStages(c);
+}
+/**
+ * The stage that is currently "now": the one `currentStageId` points at (if it
+ * resolves), else derived from the coarse `status`. Null while draft/cancelled
+ * (nothing is running). `status` remains the behavioural source of truth for
+ * gating; this is for DISPLAY (hero pill, sidebar highlight, countdown label).
+ */
+export function currentStage(c) {
+    const stages = normalizeStages(c);
+    if (c.currentStageId) {
+        const found = stages.find((s) => s.id === c.currentStageId);
+        if (found)
+            return found;
+    }
+    switch (c.status) {
+        case 'draft':
+        case 'cancelled':
+            return null;
+        case 'completed':
+            return stages.find((s) => s.kind === 'results') ?? stages[stages.length - 1] ?? null;
+        case 'judging':
+            return stages.find((s) => s.kind === 'review') ?? null;
+        default: // upcoming | active | paused
+            return stages.find((s) => s.kind === 'submission') ?? stages[0] ?? null;
+    }
+}
+/** True when an entry was culled at some review stage (Phase B2 cohort gate). */
+export function isEliminated(entry) {
+    return !!entry.stageState?.some((s) => s.status === 'eliminated');
+}
+//# sourceMappingURL=stages.js.map

package/dist/contest/stages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stages.js","sourceRoot":"","sources":["../../src/contest/stages.ts"],"names":[],"mappings":"AAGA,qFAAqF;AAErF,MAAM,KAAK,GAAG,CAAC,CAAmC,EAAsB,EAAE,CACxE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAE5C;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAc;IAC7C,OAAO;QACL,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;QACtI,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;QACvH,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE;KACrE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,CAAc;IAC5C,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,CAAc;IACzC,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,cAAc,CAAC,CAAC;QAC5D,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,OAAO,CAAC;QACb,KAAK,WAAW;YACd,OAAO,IAAI,CAAC;QACd,KAAK,WAAW;YACd,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;QACvF,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC;QACzD,SAAS,6BAA6B;YACpC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,KAAwD;IACnF,OAAO,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC;AACpE,CAAC"}

package/dist/contest/stakeholders.d.ts

@@ -1,27 +1,52 @@
+import type { StakeholderRole } from '@commonpub/schema';
 import type { DB } from '../types.js';
 /**
- * Stakeholders are view-only reviewers: they can see a contest (even private /
- * pre-publish) without admin-panel access or being a judge. Distinct from
- * judges — they never appear in the judge list and cannot score.
+ * Per-contest collaborators, distinguished by `role`:
+ *   - 'reviewer' — view-only: can see a contest (even private / pre-publish)
+ *     without admin-panel access or being a judge. Never appears in the judge
+ *     list and cannot score. (Original stakeholder semantics.)
+ *   - 'editor' — full edit rights to THIS contest only (no system-wide access).
+ *     Recognized by `isContestEditor`, which the edit/advance/transition routes
+ *     fold into their canManage decision.
  */
 export interface ContestStakeholderItem {
     id: string;
     contestId: string;
     userId: string;
+    role: StakeholderRole;
     invitedAt: Date;
     userName: string;
     userUsername: string;
     userAvatar: string | null;
 }
 export declare function listContestStakeholders(db: DB, contestId: string): Promise<ContestStakeholderItem[]>;
-export declare function addContestStakeholder(db: DB, contestId: string, userId: string, context?: {
-    contestSlug: string;
-    contestTitle: string;
-    invitedBy: string;
+/**
+ * Grant (or update) a user's per-contest collaborator role. Upserts: if the
+ * user is already a stakeholder with a different role, their role is updated
+ * (so a reviewer can be promoted to editor) — `updated:true` is returned.
+ * Adding/promoting is gated to the contest owner / `contest.manage` at the route
+ * (an editor cannot mint more editors).
+ */
+export declare function addContestStakeholder(db: DB, contestId: string, userId: string, opts?: {
+    role?: StakeholderRole;
+    contestSlug?: string;
+    contestTitle?: string;
+    invitedBy?: string;
 }): Promise<{
     added: boolean;
+    updated?: boolean;
     error?: string;
 }>;
 export declare function removeContestStakeholder(db: DB, contestId: string, userId: string): Promise<boolean>;
+/**
+ * True if the user is a stakeholder of ANY role (reviewer or editor) — i.e. may
+ * VIEW a private/draft contest. Role-agnostic on purpose.
+ */
 export declare function isContestStakeholder(db: DB, contestId: string, userId: string): Promise<boolean>;
+/**
+ * True if the user is an `editor` stakeholder of this contest — i.e. holds full
+ * edit rights to it (no system-wide access). Folded into the canManage decision
+ * on the edit/advance/transition routes alongside owner + `contest.manage`.
+ */
+export declare function isContestEditor(db: DB, contestId: string, userId: string): Promise<boolean>;
 //# sourceMappingURL=stakeholders.d.ts.map

package/dist/contest/stakeholders.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stakeholders.d.ts","sourceRoot":"","sources":["../../src/contest/stakeholders.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAGtC;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAmBnC;AAED,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACzE,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA4B7C;AAED,wBAAsB,wBAAwB,CAC5C,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CASlB;AAED,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAOlB"}
+{"version":3,"file":"stakeholders.d.ts","sourceRoot":"","sources":["../../src/contest/stakeholders.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAGtC;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAoBnC;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;IACL,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA+BhE;AAoBD,wBAAsB,wBAAwB,CAC5C,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CASlB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAOlB"}

package/dist/contest/stakeholders.js

@@ -14,13 +14,22 @@ export async function listContestStakeholders(db, contestId) {
         id: sh.id,
         contestId: sh.contestId,
         userId: sh.userId,
+        role: sh.role ?? 'reviewer',
         invitedAt: sh.invitedAt,
         userName: user.displayName ?? user.username,
         userUsername: user.username,
         userAvatar: user.avatarUrl,
     }));
 }
-export async function addContestStakeholder(db, contestId, userId, context) {
+/**
+ * Grant (or update) a user's per-contest collaborator role. Upserts: if the
+ * user is already a stakeholder with a different role, their role is updated
+ * (so a reviewer can be promoted to editor) — `updated:true` is returned.
+ * Adding/promoting is gated to the contest owner / `contest.manage` at the route
+ * (an editor cannot mint more editors).
+ */
+export async function addContestStakeholder(db, contestId, userId, opts) {
+    const role = opts?.role ?? 'reviewer';
     const [contest] = await db.select({ id: contests.id }).from(contests).where(eq(contests.id, contestId)).limit(1);
     if (!contest)
         return { added: false, error: 'Contest not found' };
@@ -28,25 +37,40 @@ export async function addContestStakeholder(db, contestId, userId, context) {
     if (!user)
         return { added: false, error: 'User not found' };
     const [existing] = await db
-        .select({ id: contestStakeholders.id })
+        .select({ id: contestStakeholders.id, role: contestStakeholders.role })
         .from(contestStakeholders)
         .where(and(eq(contestStakeholders.contestId, contestId), eq(contestStakeholders.userId, userId)))
         .limit(1);
-    if (existing)
-        return { added: false, error: 'User is already a stakeholder' };
-    await db.insert(contestStakeholders).values({ contestId, userId });
-    if (context) {
-        createNotification(db, {
-            userId,
-            type: 'contest',
-            title: 'Contest Access',
-            message: `You've been granted review access to "${context.contestTitle}"`,
-            link: `/contests/${context.contestSlug}`,
-            actorId: context.invitedBy,
-        }).catch(() => { });
+    if (existing) {
+        if (existing.role === role)
+            return { added: false, error: 'User already has that role' };
+        await db.update(contestStakeholders).set({ role }).where(eq(contestStakeholders.id, existing.id));
+        notifyStakeholder(db, userId, role, opts);
+        return { added: true, updated: true };
     }
+    // Conflict-safe insert: a concurrent double-submit can pass the `existing`
+    // check above and race the unique (contestId,userId) constraint — upsert the
+    // role instead of 500ing on the violation.
+    await db
+        .insert(contestStakeholders)
+        .values({ contestId, userId, role })
+        .onConflictDoUpdate({ target: [contestStakeholders.contestId, contestStakeholders.userId], set: { role } });
+    notifyStakeholder(db, userId, role, opts);
     return { added: true };
 }
+function notifyStakeholder(db, userId, role, opts) {
+    if (!opts?.contestSlug || !opts.contestTitle || !opts.invitedBy)
+        return;
+    const access = role === 'editor' ? 'edit access' : 'review access';
+    createNotification(db, {
+        userId,
+        type: 'contest',
+        title: 'Contest Access',
+        message: `You've been granted ${access} to "${opts.contestTitle}"`,
+        link: `/contests/${opts.contestSlug}`,
+        actorId: opts.invitedBy,
+    }).catch(() => { });
+}
 export async function removeContestStakeholder(db, contestId, userId) {
     const [existing] = await db
         .select({ id: contestStakeholders.id })
@@ -58,6 +82,10 @@ export async function removeContestStakeholder(db, contestId, userId) {
     await db.delete(contestStakeholders).where(eq(contestStakeholders.id, existing.id));
     return true;
 }
+/**
+ * True if the user is a stakeholder of ANY role (reviewer or editor) — i.e. may
+ * VIEW a private/draft contest. Role-agnostic on purpose.
+ */
 export async function isContestStakeholder(db, contestId, userId) {
     const [row] = await db
         .select({ id: contestStakeholders.id })
@@ -66,4 +94,17 @@ export async function isContestStakeholder(db, contestId, userId) {
         .limit(1);
     return !!row;
 }
+/**
+ * True if the user is an `editor` stakeholder of this contest — i.e. holds full
+ * edit rights to it (no system-wide access). Folded into the canManage decision
+ * on the edit/advance/transition routes alongside owner + `contest.manage`.
+ */
+export async function isContestEditor(db, contestId, userId) {
+    const [row] = await db
+        .select({ role: contestStakeholders.role })
+        .from(contestStakeholders)
+        .where(and(eq(contestStakeholders.contestId, contestId), eq(contestStakeholders.userId, userId)))
+        .limit(1);
+    return row?.role === 'editor';
+}
 //# sourceMappingURL=stakeholders.js.map

package/dist/contest/stakeholders.js.map

@@ -1 +1 @@
-{"version":3,"file":"stakeholders.js","sourceRoot":"","sources":["../../src/contest/stakeholders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAEzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAiBrE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,EAAM,EACN,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;KAC/F,CAAC;SACD,IAAI,CAAC,mBAAmB,CAAC;SACzB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;SAC1D,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAEvD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACjC,EAAE,EAAE,EAAE,CAAC,EAAE;QACT,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,QAAQ,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ;QAC3C,YAAY,EAAE,IAAI,CAAC,QAAQ;QAC3B,UAAU,EAAE,IAAI,CAAC,SAAS;KAC3B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAM,EACN,SAAiB,EACjB,MAAc,EACd,OAA0E;IAE1E,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjH,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAElE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAE5D,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;SACtC,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;SAChG,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;IAE9E,MAAM,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAEnE,IAAI,OAAO,EAAE,CAAC;QACZ,kBAAkB,CAAC,EAAE,EAAE;YACrB,MAAM;YACN,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,yCAAyC,OAAO,CAAC,YAAY,GAAG;YACzE,IAAI,EAAE,aAAa,OAAO,CAAC,WAAW,EAAE;YACxC,OAAO,EAAE,OAAO,CAAC,SAAS;SAC3B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,EAAM,EACN,SAAiB,EACjB,MAAc;IAEd,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;SACtC,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;SAChG,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAAM,EACN,SAAiB,EACjB,MAAc;IAEd,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;SACtC,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;SAChG,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,CAAC,CAAC,GAAG,CAAC;AACf,CAAC"}
+{"version":3,"file":"stakeholders.js","sourceRoot":"","sources":["../../src/contest/stakeholders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAGzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAsBrE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,EAAM,EACN,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;KAC/F,CAAC;SACD,IAAI,CAAC,mBAAmB,CAAC;SACzB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;SAC1D,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAEvD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACjC,EAAE,EAAE,EAAE,CAAC,EAAE;QACT,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,IAAI,EAAG,EAAE,CAAC,IAAwB,IAAI,UAAU;QAChD,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,QAAQ,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ;QAC3C,YAAY,EAAE,IAAI,CAAC,QAAQ;QAC3B,UAAU,EAAE,IAAI,CAAC,SAAS;KAC3B,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAM,EACN,SAAiB,EACjB,MAAc,EACd,IAKC;IAED,MAAM,IAAI,GAAoB,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC;IAEvD,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjH,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAElE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAE5D,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,IAAI,EAAE,mBAAmB,CAAC,IAAI,EAAE,CAAC;SACtE,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;SAChG,KAAK,CAAC,CAAC,CAAC,CAAC;IAEZ,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;QACzF,MAAM,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAClG,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,2CAA2C;IAC3C,MAAM,EAAE;SACL,MAAM,CAAC,mBAAmB,CAAC;SAC3B,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SACnC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,mBAAmB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9G,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,iBAAiB,CACxB,EAAM,EACN,MAAc,EACd,IAAqB,EACrB,IAA0E;IAE1E,IAAI,CAAC,IAAI,EAAE,WAAW,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO;IACxE,MAAM,MAAM,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC;IACnE,kBAAkB,CAAC,EAAE,EAAE;QACrB,MAAM;QACN,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,uBAAuB,MAAM,QAAQ,IAAI,CAAC,YAAY,GAAG;QAClE,IAAI,EAAE,aAAa,IAAI,CAAC,WAAW,EAAE;QACrC,OAAO,EAAE,IAAI,CAAC,SAAS;KACxB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,EAAM,EACN,SAAiB,EACjB,MAAc;IAEd,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;SACtC,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;SAChG,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAAM,EACN,SAAiB,EACjB,MAAc;IAEd,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC;SACtC,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;SAChG,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,CAAC,CAAC,GAAG,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAM,EACN,SAAiB,EACjB,MAAc;IAEd,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,EAAE,IAAI,EAAE,mBAAmB,CAAC,IAAI,EAAE,CAAC;SAC1C,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;SAChG,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,GAAG,EAAE,IAAI,KAAK,QAAQ,CAAC;AAChC,CAAC"}

package/dist/contest/submissions.d.ts

@@ -0,0 +1,90 @@
+import type { ContestStageSubmission } from '@commonpub/schema';
+import type { DB } from '../types.js';
+import type { AgreementAcceptanceInput, ContestTx } from './types.js';
+/**
+ * Persist the PII + agreement halves of a partitioned submission within an open
+ * transaction. PII is upserted (one row per entry, merged with any prior PII so
+ * a later stage's PII doesn't wipe an earlier stage's); agreements are appended
+ * as immutable acceptance rows (terms hash + snapshot). No-op when both empty.
+ */
+export declare function recordPrivateAndAgreements(tx: ContestTx, args: {
+    contestId: string;
+    entryId: string;
+    userId: string;
+    stageId: string;
+    pii: Record<string, string>;
+    agreements: AgreementAcceptanceInput[];
+    ip?: string | null;
+}): Promise<void>;
+/**
+ * Submit (or update) an entrant's per-stage artifact: the filled template
+ * values for one `submission` stage, snapshotted onto the entry's
+ * `stageSubmissions`. Owner-only. The stage must be the contest's CURRENT
+ * stage while the contest is `active` (status stays the gating truth — the
+ * organizer maps a later submission round back to `active` when advancing).
+ * Re-submitting while the stage is open replaces that stage's artifact.
+ * Cohort gate: an entry culled at a prior review stage can no longer submit.
+ */
+export declare function submitStageArtifact(db: DB, entryId: string, stageId: string, fields: Record<string, string>, userId: string, ip?: string | null): Promise<{
+    submitted: boolean;
+    stageSubmissions?: ContestStageSubmission[];
+    error?: string;
+}>;
+export interface SubmitProposalArgs {
+    contestId: string;
+    stageId: string;
+    /** Raw entrant form values (template-key → string). */
+    fields: Record<string, string>;
+    userId: string;
+    /** Best-effort client IP, recorded with any agreement acceptances. */
+    ip?: string | null;
+}
+export type SubmitProposalResult = {
+    ok: true;
+    entryId: string;
+    projectSlug: string;
+    contentId: string;
+    contentType: string;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Form-first proposal submission (Phase 4). For a `submission` stage in
+ * `proposal` mode: validate the form, create a DRAFT placeholder project, link a
+ * contest entry to it (relaxing the published-only gate that `submitContestEntry`
+ * enforces), snapshot the artifact, record agreement acceptances, store PII in
+ * the private table, and bump `entryCount`. The placeholder + the entry +
+ * PII/agreements are written atomically: the placeholder is created first, then
+ * the entry tx; if the entry tx fails the placeholder is removed (compensating
+ * delete) so a failed submit never leaves an orphan draft.
+ *
+ * Flag (`features.contestProposals`) is enforced at the route; this fn enforces
+ * the structural gate that the target stage is current + proposal-mode.
+ */
+export declare function submitContestProposal(db: DB, args: SubmitProposalArgs): Promise<SubmitProposalResult>;
+export interface EntryPrivateData {
+    contestId: string;
+    entryId: string;
+    userId: string;
+    fields: Record<string, string>;
+    updatedAt: Date;
+    agreements: Array<{
+        fieldKey: string;
+        stageId: string;
+        termsHash: string;
+        termsSnapshot: string;
+        acceptedAt: Date;
+        /** Consent-audit IP captured at acceptance. Surfaced so the subject can see
+         *  the data held about them (transparency) and organizers have the audit trail. */
+        ip: string | null;
+    }>;
+}
+/**
+ * Read an entry's PII + agreement acceptances. NEVER reachable through the
+ * normal entries endpoints — the calling route gates this on the `contest.pii`
+ * permission OR the requester being the entrant. Returns null when the entry has
+ * no stored PII and no agreements.
+ */
+export declare function getEntryPrivateData(db: DB, entryId: string): Promise<EntryPrivateData | null>;
+//# sourceMappingURL=submissions.d.ts.map

package/dist/contest/submissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"submissions.d.ts","sourceRoot":"","sources":["../../src/contest/submissions.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAe,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAKtC,OAAO,KAAK,EAAe,wBAAwB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAInF;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,EAAE,EAAE,SAAS,EACb,IAAI,EAAE;IACJ,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,UAAU,EAAE,wBAAwB,EAAE,CAAC;IACvC,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB,GACA,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,EAAE,EACN,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,MAAM,EAAE,MAAM,EACd,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,GACjB,OAAO,CAAC;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,gBAAgB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAkF9F;AAOD,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED,MAAM,MAAM,oBAAoB,GAI5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC1F;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAiG3G;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,KAAK,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,IAAI,CAAC;QACjB;2FACmF;QACnF,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;KACnB,CAAC,CAAC;CACJ;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA6BnG"}