@crowdsource.you/core 1.2.0

package/dist/envelope.js

@@ -0,0 +1,258 @@
+"use strict";
+/**
+ * Composing a Case Envelope out of what an application already has.
+ *
+ * §5 is a rich document contract — resources with stable ids, relations between
+ * them, pseudonymous principal bindings, digests, a policy reference, privacy
+ * terms. Handing that to an integrator and asking them to fill it in is how a
+ * moderation integration becomes a two-week project, and it is how the parts
+ * that MATTER get filled in wrong: a random resource id or a per-report binding
+ * proof inside the hashed projection means two people reporting the same post
+ * open two cases, and "one penalty per incident" (Appendix F) fails in
+ * production with nothing failing in a test.
+ *
+ * So the integrator describes the object — its id, its author, its text, its
+ * attachments, what is alleged about it — and this module derives the rest:
+ *
+ *   * **Resource ids are positional and stable** (`res_subject`,
+ *     `res_attachment_1`, `res_context_1`). Two reporters describing the same
+ *     post through this SDK produce byte-identical resource lists, which is what
+ *     makes §7.3's dedup key match.
+ *   * **Principal refs are derived from the identity**, never generated. Same
+ *     reason: the content snapshot the server hashes includes every principal
+ *     the material points at, so a random ref would fragment the case.
+ *   * **Digests are computed** (see `digest.ts`).
+ *   * **Relations are derived** from the role each resource was given.
+ *   * **The binding proof is the Oxy `sub`.** §11.14 requires proof that a
+ *     pseudonymous ref corresponds to a real identity before anything can touch
+ *     Oxy Trust. Sign in with Oxy already produced exactly that: a subject
+ *     issued for this `applicationId`. There is no separate binding step to
+ *     implement, and this module does not invent one.
+ *   * **`applicationId` comes from the credential** (see `credential.ts`). No
+ *     input on this page can carry one.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CrowdSourceReportInputError = void 0;
+exports.composeCaseEnvelope = composeCaseEnvelope;
+exports.defaultIdempotencyKey = defaultIdempotencyKey;
+const contracts_1 = require("@crowdsource.you/contracts");
+const defaults_js_1 = require("./defaults.js");
+const digest_js_1 = require("./digest.js");
+const errors_js_1 = require("./errors.js");
+/** Raised when an input cannot become a valid envelope. Never retryable. */
+class CrowdSourceReportInputError extends errors_js_1.CrowdSourceError {
+    constructor(message) {
+        super(message, false);
+    }
+}
+exports.CrowdSourceReportInputError = CrowdSourceReportInputError;
+const SUBJECT_RESOURCE_ID = 'res_subject';
+function isoTimestamp(value) {
+    return value instanceof Date ? value.toISOString() : value;
+}
+/**
+ * A principal ref derived from the identity, so it is the same value for every
+ * reporter.
+ *
+ * Opaque on purpose: §9.1 keeps identities away from the jury, and a ref that
+ * embedded a username would put one on the reviewer's screen. Truncated to 128
+ * bits, which is far past any collision risk within one envelope's 50-binding
+ * ceiling and keeps the ref short enough to read in a case document.
+ */
+function principalRef(type, identity) {
+    return `p_${(0, digest_js_1.sha256Digest)((0, digest_js_1.canonicalJson)([type, identity])).slice('sha256:'.length, 'sha256:'.length + 32)}`;
+}
+function resolvePrincipal(input, role) {
+    const type = input.type ?? (input.oxyUserId === undefined ? 'local_user' : 'oxy_user');
+    if (type === 'oxy_user' && input.oxyUserId === undefined) {
+        throw new CrowdSourceReportInputError(`The ${role} is declared as an oxy_user but carries no oxyUserId. The Oxy subject IS the binding proof (§11.14); without it there is nothing to bind.`);
+    }
+    const externalPrincipalId = input.id ?? input.oxyUserId;
+    if (externalPrincipalId === undefined) {
+        throw new CrowdSourceReportInputError(`The ${role} carries neither an oxyUserId nor an id, so there is no identity to reference.`);
+    }
+    const ref = principalRef(type, externalPrincipalId);
+    return {
+        ref,
+        binding: {
+            principalRef: ref,
+            type,
+            externalPrincipalId,
+            /**
+             * The `sub` itself. §11.14 asks for proof that this ref is that identity,
+             * and an OAuth subject issued to this application for this user is that
+             * proof — it is not a receipt POINTING at one. Deliberately absent for
+             * every other principal type: they have no Oxy identity to move, and
+             * requiring a proof from them would lock out every tenant whose users are
+             * not Oxy users.
+             */
+            ...(type === 'oxy_user' && input.oxyUserId !== undefined
+                ? { bindingProofId: input.oxyUserId }
+                : {}),
+        },
+    };
+}
+/** The object a resource's digest is taken over — see `digest.ts`. */
+function reviewableRepresentation(resource) {
+    if (resource.type === 'custom') {
+        return { type: resource.type, schemaId: resource.schemaId, data: resource.payload };
+    }
+    return { type: resource.type, data: 'data' in resource ? resource.data : null };
+}
+/**
+ * Turns one described resource into a contract resource.
+ *
+ * The digest is the only field invented here. An asset-backed resource does not
+ * get one: its bytes are outside the envelope and `asset.sha256` already
+ * identifies them, which is the split the contract makes.
+ *
+ * Returns `unknown` rather than `Resource`, deliberately. The value is assembled
+ * from caller data and only becomes a `Resource` when `CaseEnvelopeSchema`
+ * parses it at the end of `composeCaseEnvelope`. Declaring it a `Resource` here
+ * would need a cast, and a cast is a claim the type system cannot check — the
+ * parse is what actually establishes it.
+ */
+function composeResource(input, id, role, authorPrincipalRef) {
+    const { createdAt, ...rest } = input;
+    return {
+        ...rest,
+        id,
+        role,
+        ...(createdAt === undefined ? {} : { createdAt: isoTimestamp(createdAt) }),
+        ...(authorPrincipalRef === undefined ? {} : { authorPrincipalRef }),
+        ...('asset' in input ? {} : { sha256: (0, digest_js_1.resourceDigest)(reviewableRepresentation(input)) }),
+    };
+}
+const CONTEXT_RELATIONS = Object.freeze({
+    parent: 'replies_to',
+    quoted: 'quotes',
+    context: 'contextualizes',
+    evidence: 'refers_to',
+});
+function normalisedAllegations(input) {
+    return input.map((entry) => (typeof entry === 'string' ? { code: entry } : entry));
+}
+/**
+ * Composes and VALIDATES a Case Envelope.
+ *
+ * The parse at the end is not belt-and-braces. Everything above assembles a
+ * document from caller data — a subject type, a text body, an asset digest —
+ * and the contract is where a bad one is caught. Catching it here means the
+ * integrator sees the field and the reason at the call site, in their own
+ * process, instead of reading a 422 out of a delivery worker's log an hour
+ * later.
+ */
+function composeCaseEnvelope(input, composition) {
+    if (input.submittedAt === undefined && composition.environment === 'sandbox') {
+        throw new CrowdSourceReportInputError('A sandbox report must declare submittedAt: the environment travels in `source`, and `source` cannot be composed without a submission time this client would otherwise have to invent — which would make every retry of this report a 409.');
+    }
+    const allegations = normalisedAllegations(input.allegations);
+    const allegationCodes = allegations.map((allegation) => allegation.code);
+    const bindings = [];
+    const rememberPrincipal = (principal) => {
+        if (!bindings.some((binding) => binding.principalRef === principal.ref)) {
+            bindings.push(principal.binding);
+        }
+        return principal.ref;
+    };
+    const authorRef = input.subject.author === undefined
+        ? undefined
+        : rememberPrincipal(resolvePrincipal(input.subject.author, 'subject author'));
+    const reporterRef = input.reportedBy === undefined
+        ? undefined
+        : rememberPrincipal(resolvePrincipal(input.reportedBy, 'reporter'));
+    const subjectContent = typeof input.content === 'string'
+        ? { type: 'text', data: { text: input.content } }
+        : input.content;
+    const resources = [
+        composeResource(subjectContent, SUBJECT_RESOURCE_ID, 'subject', authorRef),
+    ];
+    const relations = [];
+    (input.attachments ?? []).forEach((attachment, index) => {
+        const id = `res_attachment_${index + 1}`;
+        resources.push(composeResource(attachment, id, 'attachment', authorRef));
+        relations.push({ from: SUBJECT_RESOURCE_ID, type: 'has_attachment', to: id });
+    });
+    (input.context ?? []).forEach((entry, index) => {
+        const id = `res_context_${index + 1}`;
+        const { role, ...resource } = entry;
+        resources.push(composeResource(resource, id, role, undefined));
+        relations.push(role === 'context'
+            ? { from: id, type: CONTEXT_RELATIONS[role], to: SUBJECT_RESOURCE_ID }
+            : { from: SUBJECT_RESOURCE_ID, type: CONTEXT_RELATIONS[role], to: id });
+    });
+    const privacy = resolvePrivacy(input.privacy, allegationCodes);
+    const envelope = {
+        schemaVersion: contracts_1.CASE_ENVELOPE_SCHEMA_VERSION,
+        applicationId: composition.applicationId,
+        externalReportId: input.externalReportId,
+        ...(input.submittedAt === undefined
+            ? {}
+            : {
+                source: {
+                    environment: composition.environment,
+                    submittedAt: isoTimestamp(input.submittedAt),
+                },
+            }),
+        subject: {
+            externalId: input.subject.externalId,
+            type: input.subject.type,
+            primaryResourceId: SUBJECT_RESOURCE_ID,
+            ...(input.subject.permalink === undefined ? {} : { permalink: input.subject.permalink }),
+        },
+        principalBindings: bindings,
+        resources,
+        relations,
+        allegations: allegations.map((allegation) => ({
+            code: allegation.code,
+            ...(allegation.details === undefined ? {} : { details: allegation.details }),
+            ...(reporterRef === undefined ? {} : { reporterPrincipalRef: reporterRef }),
+        })),
+        policy: input.policy ?? defaults_js_1.DEFAULT_POLICY,
+        privacy,
+        ...(input.urgency === undefined ? {} : { urgency: input.urgency }),
+        ...(input.metadata === undefined ? {} : { metadata: input.metadata }),
+    };
+    const parsed = contracts_1.CaseEnvelopeSchema.safeParse(envelope);
+    if (!parsed.success) {
+        throw new CrowdSourceReportInputError(`This report cannot be composed into a valid Case Envelope — ${parsed.error.issues
+            .map((issue) => `${issue.path.join('.') || '(root)'}: ${issue.message}`)
+            .join('; ')}`);
+    }
+    return parsed.data;
+}
+/**
+ * Privacy terms, with §7.5's routing rule as a floor the caller cannot lift.
+ *
+ * An explicit `allowCommunityReview: true` alongside an allegation §7.5 keeps
+ * away from a community jury is REFUSED, not corrected. Correcting it would
+ * leave the application believing it had asked for something it did not get,
+ * and the next thing built on that belief would be wrong too.
+ */
+function resolvePrivacy(requested, allegationCodes) {
+    const base = (0, defaults_js_1.defaultPrivacy)(allegationCodes);
+    if (requested === undefined)
+        return base;
+    const forbidden = (0, defaults_js_1.allegationsForbiddingCommunityReview)(allegationCodes);
+    if (requested.allowCommunityReview === true && forbidden.length > 0) {
+        throw new CrowdSourceReportInputError(`A report alleging ${forbidden.join(', ')} cannot set allowCommunityReview: true — §7.5 routes this material to a specialist team, never to a community jury.`);
+    }
+    return {
+        ...base,
+        ...(requested.retentionDays === undefined ? {} : { retentionDays: requested.retentionDays }),
+        ...(requested.allowCommunityReview === undefined
+            ? {}
+            : { allowCommunityReview: requested.allowCommunityReview }),
+        ...(requested.containsPersonalData === undefined
+            ? {}
+            : { containsPersonalData: requested.containsPersonalData }),
+        ...(requested.sensitivityHint === undefined
+            ? {}
+            : { sensitivityHint: requested.sensitivityHint }),
+    };
+}
+/** Appendix D: the same report re-delivered must return the same `reportId`. */
+function defaultIdempotencyKey(externalReportId) {
+    return `report.${externalReportId}`;
+}
+//# sourceMappingURL=envelope.js.map

package/dist/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;;;AAgQH,kDAsGC;AAwCD,sDAEC;AA9YD,0DAeoC;AAEpC,+CAAqG;AACrG,2CAA+F;AAC/F,2CAA+C;AA+F/C,4EAA4E;AAC5E,MAAa,2BAA4B,SAAQ,4BAAgB;IAC/D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;CACF;AAJD,kEAIC;AAUD,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAE1C,SAAS,YAAY,CAAC,KAAoB;IACxC,OAAO,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7D,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,IAAmB,EAAE,QAAgB;IACzD,OAAO,KAAK,IAAA,wBAAY,EAAC,IAAA,yBAAa,EAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC;AAOD,SAAS,gBAAgB,CAAC,KAAqB,EAAE,IAAY;IAC3D,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAE5E,IAAI,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,IAAI,2BAA2B,CACnC,OAAO,IAAI,2IAA2I,CACvJ,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,SAAS,CAAC;IACxD,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,2BAA2B,CACnC,OAAO,IAAI,gFAAgF,CAC5F,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IACpD,OAAO;QACL,GAAG;QACH,OAAO,EAAE;YACP,YAAY,EAAE,GAAG;YACjB,IAAI;YACJ,mBAAmB;YACnB;;;;;;;eAOG;YACH,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;gBACtD,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE;gBACrC,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,SAAS,wBAAwB,CAAC,QAAuB;IACvD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;IACtF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAClF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,eAAe,CACtB,KAAoB,EACpB,EAAU,EACV,IAAsB,EACtB,kBAAsC;IAEtC,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAErC,OAAO;QACL,GAAG,IAAI;QACP,EAAE;QACF,IAAI;QACJ,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAA,0BAAc,EAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC;AACJ,CAAC;AAED,MAAM,iBAAiB,GAAoD,MAAM,CAAC,MAAM,CAAC;IACvF,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,gBAAgB;IACzB,QAAQ,EAAE,WAAW;CACtB,CAAC,CAAC;AAEH,SAAS,qBAAqB,CAC5B,KAAkD;IAElD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACrF,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,mBAAmB,CACjC,KAAkB,EAClB,WAAgC;IAEhC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC7E,MAAM,IAAI,2BAA2B,CACnC,2OAA2O,CAC5O,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,qBAAqB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAEzE,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,iBAAiB,GAAG,CAAC,SAA4B,EAAU,EAAE;QACjE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACxE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,SAAS,CAAC,GAAG,CAAC;IACvB,CAAC,CAAC;IAEF,MAAM,SAAS,GACb,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;QAChC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAClF,MAAM,WAAW,GACf,KAAK,CAAC,UAAU,KAAK,SAAS;QAC5B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IAExE,MAAM,cAAc,GAClB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAC/B,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE;QACjD,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IAEpB,MAAM,SAAS,GAAc;QAC3B,eAAe,CAAC,cAAc,EAAE,mBAAmB,EAAE,SAAS,EAAE,SAAS,CAAC;KAC3E,CAAC;IACF,MAAM,SAAS,GAAe,EAAE,CAAC;IAEjC,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;QACtD,MAAM,EAAE,GAAG,kBAAkB,KAAK,GAAG,CAAC,EAAE,CAAC;QACzC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;QACzE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7C,MAAM,EAAE,GAAG,eAAe,KAAK,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC;QACpC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/D,SAAS,CAAC,IAAI,CACZ,IAAI,KAAK,SAAS;YAChB,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE;YACtE,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CACzE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAE/D,MAAM,QAAQ,GAAY;QACxB,aAAa,EAAE,wCAA4B;QAC3C,aAAa,EAAE,WAAW,CAAC,aAAa;QACxC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,MAAM,EAAE;oBACN,WAAW,EAAE,WAAW,CAAC,WAAW;oBACpC,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC;iBAC7C;aACF,CAAC;QACN,OAAO,EAAE;YACP,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;YACpC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;YACxB,iBAAiB,EAAE,mBAAmB;YACtC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;SACzF;QACD,iBAAiB,EAAE,QAAQ;QAC3B,SAAS;QACT,SAAS;QACT,WAAW,EAAE,WAAW,CAAC,GAAG,CAC1B,CAAC,UAAU,EAAc,EAAE,CAAC,CAAC;YAC3B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,GAAG,CAAC,UAAU,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC;YAC5E,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,WAAW,EAAE,CAAC;SAC5E,CAAC,CACH;QACD,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,4BAAc;QACtC,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAClE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;KACtE,CAAC;IAEF,MAAM,MAAM,GAAG,8BAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,2BAA2B,CACnC,+DAA+D,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aACvE,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CACrB,SAA2C,EAC3C,eAAwC;IAExC,MAAM,IAAI,GAAG,IAAA,4BAAc,EAAC,eAAe,CAAC,CAAC;IAC7C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,SAAS,GAAG,IAAA,kDAAoC,EAAC,eAAe,CAAC,CAAC;IACxE,IAAI,SAAS,CAAC,oBAAoB,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,2BAA2B,CACnC,qBAAqB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,qHAAqH,CAC/J,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,IAAI;QACP,GAAG,CAAC,SAAS,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC;QAC5F,GAAG,CAAC,SAAS,CAAC,oBAAoB,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,EAAE,CAAC;QAC7D,GAAG,CAAC,SAAS,CAAC,oBAAoB,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,EAAE,CAAC;QAC7D,GAAG,CAAC,SAAS,CAAC,eAAe,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAgB,qBAAqB,CAAC,gBAAwB;IAC5D,OAAO,UAAU,gBAAgB,EAAE,CAAC;AACtC,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,90 @@
+/**
+ * The failures an integrator can observe, and the one question they all answer.
+ *
+ * §7.1 puts the durable retry path in the INTEGRATOR's outbox: a 2xx from their
+ * own application means the report is stored locally and will be delivered
+ * eventually, never that a synchronous call to CrowdSource succeeded. So the
+ * only thing an outbox worker needs from a failure is whether re-delivering the
+ * same payload can still succeed. That is `retryable`, and every error below
+ * answers it — an integrator branching on `instanceof` or on a status code is
+ * re-deriving something this class already knows.
+ *
+ * The distinction that matters most is 409. §10.5 gives it one meaning: the same
+ * `externalReportId` arrived with a different body. Retrying that forever never
+ * succeeds and the payload is the thing that has to change, so it is the one
+ * 4xx an outbox must stop on rather than back off from.
+ */
+/**
+ * The machine-readable codes §10.5 assigns a meaning to.
+ *
+ * Declared here rather than imported because `@crowdsource.you/contracts`
+ * does not publish the HTTP error vocabulary — it publishes the documents that
+ * travel over HTTP. That is a gap worth closing in contracts rather than a
+ * decision to state the list twice: the backend has the same union in
+ * `http/apiError.ts`, and the two must not drift. Until it moves, this is the
+ * copy integrators compile against.
+ */
+export declare const CROWDSOURCE_API_ERROR_CODES: readonly ["invalid_request", "unauthorized", "forbidden", "not_found", "conflict", "payload_too_large", "unprocessable_envelope", "rate_limited", "internal_error", "service_unavailable"];
+export type CrowdSourceApiErrorCode = (typeof CROWDSOURCE_API_ERROR_CODES)[number];
+export declare function isCrowdSourceApiErrorCode(value: unknown): value is CrowdSourceApiErrorCode;
+/**
+ * The code to report when the response carried no usable one — a proxy, a load
+ * balancer or a gateway answering instead of the service.
+ */
+export declare function apiErrorCodeForStatus(status: number): CrowdSourceApiErrorCode;
+/** The base of every error this package throws. */
+export declare class CrowdSourceError extends Error {
+    /** Whether re-delivering the same payload can still succeed. */
+    readonly retryable: boolean;
+    constructor(message: string, retryable: boolean, options?: {
+        cause?: unknown;
+    });
+}
+/**
+ * The client is not configured to be able to make the call.
+ *
+ * Never retryable: a missing service key, a malformed one or a base URL that is
+ * not a URL do not become correct by waiting.
+ */
+export declare class CrowdSourceConfigurationError extends CrowdSourceError {
+    constructor(message: string);
+}
+/**
+ * The request never produced an HTTP response — DNS, connection, TLS, timeout,
+ * or an abort.
+ *
+ * Retryable, with one exception: an abort the CALLER asked for. Retrying that
+ * would ignore the instruction, so it is surfaced as not retryable and the
+ * caller decides what happens next.
+ */
+export declare class CrowdSourceTransportError extends CrowdSourceError {
+    constructor(message: string, options?: {
+        cause?: unknown;
+        retryable?: boolean;
+    });
+}
+/**
+ * CrowdSource answered, and the answer was a refusal (§10.5).
+ *
+ * `code` is the machine-readable code from the response body when the service
+ * sent one. A proxy or load balancer that answers instead of the service does
+ * not, so it is derived from the status in that case rather than left undefined
+ * — an integrator switching on `code` should not have to handle "the 502 came
+ * from the ALB" as a separate shape.
+ */
+export declare class CrowdSourceApiError extends CrowdSourceError {
+    readonly status: number;
+    readonly code: CrowdSourceApiErrorCode;
+    readonly details?: Readonly<Record<string, string | number | boolean>>;
+    constructor(input: {
+        status: number;
+        code: CrowdSourceApiErrorCode;
+        message: string;
+        details?: Readonly<Record<string, string | number | boolean>>;
+    });
+    /** True when this is §10.5's "external id reused with a different body". */
+    get isPayloadConflict(): boolean;
+}
+export declare function isCrowdSourceError(error: unknown): error is CrowdSourceError;
+export declare function isCrowdSourceApiError(error: unknown): error is CrowdSourceApiError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B,4LAW9B,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAInF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,uBAAuB,CAE1F;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,uBAAuB,CAuB7E;AAED,mDAAmD;AACnD,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAEhB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAK/E;AAED;;;;;GAKG;AACH,qBAAa,6BAA8B,SAAQ,gBAAgB;gBACrD,OAAO,EAAE,MAAM;CAG5B;AAED;;;;;;;GAOG;AACH,qBAAa,yBAA0B,SAAQ,gBAAgB;gBACjD,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAO;CAGpF;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAoB,SAAQ,gBAAgB;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;gBAE3D,KAAK,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,uBAAuB,CAAC;QAC9B,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;KAC/D;IAOD,4EAA4E;IAC5E,IAAI,iBAAiB,IAAI,OAAO,CAE/B;CACF;AAaD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAElF"}

package/dist/errors.js

@@ -0,0 +1,151 @@
+"use strict";
+/**
+ * The failures an integrator can observe, and the one question they all answer.
+ *
+ * §7.1 puts the durable retry path in the INTEGRATOR's outbox: a 2xx from their
+ * own application means the report is stored locally and will be delivered
+ * eventually, never that a synchronous call to CrowdSource succeeded. So the
+ * only thing an outbox worker needs from a failure is whether re-delivering the
+ * same payload can still succeed. That is `retryable`, and every error below
+ * answers it — an integrator branching on `instanceof` or on a status code is
+ * re-deriving something this class already knows.
+ *
+ * The distinction that matters most is 409. §10.5 gives it one meaning: the same
+ * `externalReportId` arrived with a different body. Retrying that forever never
+ * succeeds and the payload is the thing that has to change, so it is the one
+ * 4xx an outbox must stop on rather than back off from.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CrowdSourceApiError = exports.CrowdSourceTransportError = exports.CrowdSourceConfigurationError = exports.CrowdSourceError = exports.CROWDSOURCE_API_ERROR_CODES = void 0;
+exports.isCrowdSourceApiErrorCode = isCrowdSourceApiErrorCode;
+exports.apiErrorCodeForStatus = apiErrorCodeForStatus;
+exports.isCrowdSourceError = isCrowdSourceError;
+exports.isCrowdSourceApiError = isCrowdSourceApiError;
+/**
+ * The machine-readable codes §10.5 assigns a meaning to.
+ *
+ * Declared here rather than imported because `@crowdsource.you/contracts`
+ * does not publish the HTTP error vocabulary — it publishes the documents that
+ * travel over HTTP. That is a gap worth closing in contracts rather than a
+ * decision to state the list twice: the backend has the same union in
+ * `http/apiError.ts`, and the two must not drift. Until it moves, this is the
+ * copy integrators compile against.
+ */
+exports.CROWDSOURCE_API_ERROR_CODES = [
+    'invalid_request',
+    'unauthorized',
+    'forbidden',
+    'not_found',
+    'conflict',
+    'payload_too_large',
+    'unprocessable_envelope',
+    'rate_limited',
+    'internal_error',
+    'service_unavailable',
+];
+const API_ERROR_CODE_SET = new Set(exports.CROWDSOURCE_API_ERROR_CODES);
+function isCrowdSourceApiErrorCode(value) {
+    return typeof value === 'string' && API_ERROR_CODE_SET.has(value);
+}
+/**
+ * The code to report when the response carried no usable one — a proxy, a load
+ * balancer or a gateway answering instead of the service.
+ */
+function apiErrorCodeForStatus(status) {
+    switch (status) {
+        case 400:
+            return 'invalid_request';
+        case 401:
+            return 'unauthorized';
+        case 403:
+            return 'forbidden';
+        case 404:
+            return 'not_found';
+        case 409:
+            return 'conflict';
+        case 413:
+            return 'payload_too_large';
+        case 422:
+            return 'unprocessable_envelope';
+        case 429:
+            return 'rate_limited';
+        case 503:
+            return 'service_unavailable';
+        default:
+            return 'internal_error';
+    }
+}
+/** The base of every error this package throws. */
+class CrowdSourceError extends Error {
+    constructor(message, retryable, options) {
+        super(message, options);
+        this.name = new.target.name;
+        this.retryable = retryable;
+    }
+}
+exports.CrowdSourceError = CrowdSourceError;
+/**
+ * The client is not configured to be able to make the call.
+ *
+ * Never retryable: a missing service key, a malformed one or a base URL that is
+ * not a URL do not become correct by waiting.
+ */
+class CrowdSourceConfigurationError extends CrowdSourceError {
+    constructor(message) {
+        super(message, false);
+    }
+}
+exports.CrowdSourceConfigurationError = CrowdSourceConfigurationError;
+/**
+ * The request never produced an HTTP response — DNS, connection, TLS, timeout,
+ * or an abort.
+ *
+ * Retryable, with one exception: an abort the CALLER asked for. Retrying that
+ * would ignore the instruction, so it is surfaced as not retryable and the
+ * caller decides what happens next.
+ */
+class CrowdSourceTransportError extends CrowdSourceError {
+    constructor(message, options = {}) {
+        super(message, options.retryable ?? true, { cause: options.cause });
+    }
+}
+exports.CrowdSourceTransportError = CrowdSourceTransportError;
+/**
+ * CrowdSource answered, and the answer was a refusal (§10.5).
+ *
+ * `code` is the machine-readable code from the response body when the service
+ * sent one. A proxy or load balancer that answers instead of the service does
+ * not, so it is derived from the status in that case rather than left undefined
+ * — an integrator switching on `code` should not have to handle "the 502 came
+ * from the ALB" as a separate shape.
+ */
+class CrowdSourceApiError extends CrowdSourceError {
+    constructor(input) {
+        super(input.message, RETRYABLE_STATUSES.has(input.status));
+        this.status = input.status;
+        this.code = input.code;
+        this.details = input.details;
+    }
+    /** True when this is §10.5's "external id reused with a different body". */
+    get isPayloadConflict() {
+        return this.code === 'conflict';
+    }
+}
+exports.CrowdSourceApiError = CrowdSourceApiError;
+/**
+ * The statuses a retry of the SAME payload can still resolve.
+ *
+ * 429 and 503 are the two §10.5 names for "come back later". 5xx is included
+ * because a defect on the service side is not a defect in the payload, and the
+ * idempotency key makes the retry free of duplicates either way. Every 4xx below
+ * 429 is excluded deliberately: a rejected envelope, a missing scope, a revoked
+ * credential and a payload conflict all stay rejected.
+ */
+const RETRYABLE_STATUSES = new Set([408, 425, 429, 500, 502, 503, 504]);
+function isCrowdSourceError(error) {
+    return error instanceof CrowdSourceError;
+}
+function isCrowdSourceApiError(error) {
+    return error instanceof CrowdSourceApiError;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AA6BH,8DAEC;AAMD,sDAuBC;AAmFD,gDAEC;AAED,sDAEC;AAnJD;;;;;;;;;GASG;AACU,QAAA,2BAA2B,GAAG;IACzC,iBAAiB;IACjB,cAAc;IACd,WAAW;IACX,WAAW;IACX,UAAU;IACV,mBAAmB;IACnB,wBAAwB;IACxB,cAAc;IACd,gBAAgB;IAChB,qBAAqB;CACb,CAAC;AAIX,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,mCAA2B,CAAC,CAAC;AAErF,SAAgB,yBAAyB,CAAC,KAAc;IACtD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,MAAc;IAClD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,OAAO,iBAAiB,CAAC;QAC3B,KAAK,GAAG;YACN,OAAO,cAAc,CAAC;QACxB,KAAK,GAAG;YACN,OAAO,WAAW,CAAC;QACrB,KAAK,GAAG;YACN,OAAO,WAAW,CAAC;QACrB,KAAK,GAAG;YACN,OAAO,UAAU,CAAC;QACpB,KAAK,GAAG;YACN,OAAO,mBAAmB,CAAC;QAC7B,KAAK,GAAG;YACN,OAAO,wBAAwB,CAAC;QAClC,KAAK,GAAG;YACN,OAAO,cAAc,CAAC;QACxB,KAAK,GAAG;YACN,OAAO,qBAAqB,CAAC;QAC/B;YACE,OAAO,gBAAgB,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,mDAAmD;AACnD,MAAa,gBAAiB,SAAQ,KAAK;IAIzC,YAAY,OAAe,EAAE,SAAkB,EAAE,OAA6B;QAC5E,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AATD,4CASC;AAED;;;;;GAKG;AACH,MAAa,6BAA8B,SAAQ,gBAAgB;IACjE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;CACF;AAJD,sEAIC;AAED;;;;;;;GAOG;AACH,MAAa,yBAA0B,SAAQ,gBAAgB;IAC7D,YAAY,OAAe,EAAE,UAAoD,EAAE;QACjF,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;CACF;AAJD,8DAIC;AAED;;;;;;;;GAQG;AACH,MAAa,mBAAoB,SAAQ,gBAAgB;IAKvD,YAAY,KAKX;QACC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC/B,CAAC;IAED,4EAA4E;IAC5E,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC;IAClC,CAAC;CACF;AArBD,kDAqBC;AAED;;;;;;;;GAQG;AACH,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE7F,SAAgB,kBAAkB,CAAC,KAAc;IAC/C,OAAO,KAAK,YAAY,gBAAgB,CAAC;AAC3C,CAAC;AAED,SAAgB,qBAAqB,CAAC,KAAc;IAClD,OAAO,KAAK,YAAY,mBAAmB,CAAC;AAC9C,CAAC"}

package/dist/esm/cases.js

@@ -0,0 +1,74 @@
+/**
+ * `GET /v1/cases/{id}` and `GET /v1/decisions/{id}` (§10.2).
+ *
+ * Both are look-ups by an id CrowdSource gave the application. There is no case
+ * search and there will not be one: "nobody chooses the case they review" is an
+ * invariant, and a list endpoint on the application API would be the first step
+ * towards a queue somebody browses.
+ *
+ * `decisions.get` is written against the route §10.2 defines. **The backend does
+ * not serve it yet** — nothing publishes decisions, because sortition, review
+ * and consensus are not built — so it answers 404 today. It is here because a
+ * client of a documented endpoint is not a stub, and because the webhook path
+ * (`case.decided`) is how an application learns about a decision anyway; this is
+ * the read-back for one it already has an id for.
+ */
+import { DecisionSchema } from '@crowdsource.you/contracts';
+import { z } from 'zod';
+import { CrowdSourceTransportError } from './errors.js';
+const CaseViewSchema = z.looseObject({
+    caseId: z.string(),
+    status: z.string(),
+    subject: z.looseObject({ externalId: z.string(), type: z.string() }),
+    policy: z.looseObject({ policySetId: z.string(), version: z.string() }),
+    taxonomyVersion: z.string(),
+    allegationCodes: z.array(z.string()),
+    reportCount: z.number(),
+    sensitivityClass: z.string(),
+    currentRevision: z.number(),
+    createdAt: z.string(),
+    updatedAt: z.string(),
+});
+export class Cases {
+    constructor(transport) {
+        this.transport = transport;
+    }
+    async get(caseId, options = {}) {
+        const response = await this.transport.request({
+            method: 'GET',
+            path: `/v1/cases/${encodeURIComponent(caseId)}`,
+            signal: options.signal,
+        });
+        const parsed = CaseViewSchema.safeParse(response);
+        if (!parsed.success) {
+            throw new CrowdSourceTransportError('CrowdSource answered with a case this client does not recognise.', { retryable: false, cause: parsed.error });
+        }
+        return parsed.data;
+    }
+}
+export class Decisions {
+    constructor(transport) {
+        this.transport = transport;
+    }
+    /**
+     * Reads one immutable revision of a decision.
+     *
+     * A published revision is never edited (Appendix F); a later revision
+     * supersedes it and carries `supersedesDecisionId`. So a decision read twice
+     * is byte-identical, and an application that cached one never needs to
+     * invalidate it — it needs to notice a `decision.corrected` webhook.
+     */
+    async get(decisionId, options = {}) {
+        const response = await this.transport.request({
+            method: 'GET',
+            path: `/v1/decisions/${encodeURIComponent(decisionId)}`,
+            signal: options.signal,
+        });
+        const parsed = DecisionSchema.safeParse(response);
+        if (!parsed.success) {
+            throw new CrowdSourceTransportError('CrowdSource answered with a decision this client does not recognise.', { retryable: false, cause: parsed.error });
+        }
+        return parsed.data;
+    }
+}
+//# sourceMappingURL=cases.js.map

package/dist/esm/cases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cases.js","sourceRoot":"","sources":["../../src/cases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,cAAc,EAAoC,MAAM,4BAA4B,CAAC;AAC9F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAyBxD,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACpE,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACvE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAMH,MAAM,OAAO,KAAK;IAGhB,YAAY,SAAoB;QAC9B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,UAAuB,EAAE;QACjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAU;YACrD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa,kBAAkB,CAAC,MAAM,CAAC,EAAE;YAC/C,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,yBAAyB,CACjC,kEAAkE,EAClE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAC1C,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;CACF;AAED,MAAM,OAAO,SAAS;IAGpB,YAAY,SAAoB;QAC9B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,GAAG,CAAC,UAAkB,EAAE,UAAuB,EAAE;QACrD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAU;YACrD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,iBAAiB,kBAAkB,CAAC,UAAU,CAAC,EAAE;YACvD,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,yBAAyB,CACjC,sEAAsE,EACtE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAC1C,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;CACF"}