@diffenderfer-games/hub-contract 2.0.0-next.0 → 2.0.0-next.1

package/src/api/social/endpoints.ts

@@ -1,179 +1,179 @@
-/**
- * Social core REST (multiplayer-impl.md §5.1): config, your own social
- * settings, friends and requests, blocks, player cards, recent players and
- * online counts. Every route here is closed to suspended accounts (403
- * `suspended`) except `GET /social/config` and `GET /social/me`, which a
- * suspended player's UI needs to explain what happened.
- */
-import { z } from 'zod';
-import { Ok } from '../../common';
-import { requiredId } from '../../coerce';
-import { ContentRejected, ErrorBody } from '../../errors';
-import { requireActive, requireClaimed, requireUser, session } from '../../middleware';
-import { NotifyPrefs } from '../notify';
-import { SocialConfig } from './config';
-import { Audience, FriendsList, PlayerCard, RecentPlayer, SocialMe } from './people';
-import { Counts } from './presence';
-
-/** `{ me }`: your social settings after a change. */
-export const SocialMeResult = z.object({ me: SocialMe });
-
-/** `:id`, another player's user id. A malformed id is a 400. */
-const OtherUser = z.object({ id: requiredId('id must be a user id.') });
-
-/** An {@link Audience} field, with the old hub's message for anything else. */
-const audienceField = (field: string) => z.enum(Audience.options, { error: `${field} must be friends or nobody.` });
-
-/**
- * `POST /social/friends`: who to befriend, by id or by name, and an optional
- * first message. `userId` wins when both are given; with neither, the player
- * is not found (404 `no_player`).
- */
-export const FriendRequestInput = z.object({
-  userId: requiredId('userId must be a user id.').nullish(),
-  /** A username, case-insensitive. */
-  username: z.string().optional(),
-  message: z.string().optional(),
-});
-
-/** A friend request. */
-export type FriendRequestInput = z.infer<typeof FriendRequestInput>;
-
-/** The result of `POST /social/friends`. */
-export const FriendRequestStatus = z.enum(['requested', 'friends']);
-
-/** The social core endpoints. */
-export const socialEndpoints = {
-  ...session.group({
-    getSocialConfig: {
-      method: 'GET', path: '/social/config', response: SocialConfig,
-      doc: { summary: 'The site-wide social configuration', tags: ['social'] },
-    },
-    getOnlineCounts: {
-      method: 'GET', path: '/social/counts', response: Counts,
-      errors: { 403: ErrorBody },
-      doc: { summary: 'Anonymous online counts, overall and per game', tags: ['social'] },
-    },
-  }),
-  ...requireUser.group({
-    getMySocialProfile: {
-      method: 'GET', path: '/social/me',
-      response: z.object({
-        me: SocialMe,
-        notify: NotifyPrefs,
-        /** How many browsers have a push subscription for this account. */
-        pushSubs: z.number().int().nonnegative(),
-      }),
-      errors: { 401: ErrorBody },
-      doc: { summary: 'Your social settings, notification preferences and push subscription count', tags: ['social'] },
-    },
-  }),
-  ...requireActive.group({
-    listFriendsAndRequests: {
-      method: 'GET', path: '/social/friends', response: FriendsList,
-      errors: { 401: ErrorBody, 403: ErrorBody },
-      doc: { summary: 'Friends (online first), requests both ways and blocks', tags: ['social'] },
-    },
-    findPlayerByName: {
-      method: 'GET', path: '/social/players/by-name/:name',
-      params: z.object({ name: z.string() }), response: PlayerCard,
-      errors: { 401: ErrorBody, 403: ErrorBody, 404: ErrorBody },
-      doc: { summary: 'A player card, by username', tags: ['social'] },
-    },
-    getPlayerCard: {
-      method: 'GET', path: '/social/players/:id', params: OtherUser, response: PlayerCard,
-      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody, 404: ErrorBody },
-      doc: { summary: 'A player card, by id (404 `no_player` when blocked by them or suspended)', tags: ['social'] },
-    },
-  }),
-  ...requireClaimed.group({
-    updateMySocialProfile: {
-      method: 'PUT', path: '/social/me',
-      body: z.object({
-        /** One of the config's preset avatar ids (else 400 `bad_avatar`). */
-        avatar: z.string().optional(),
-        privacy: audienceField('privacy').optional(),
-        dmPolicy: audienceField('dmPolicy').optional(),
-      }),
-      response: SocialMeResult,
-      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody },
-      doc: { summary: 'Change your avatar, presence privacy or who may message you', tags: ['social'] },
-    },
-    setParentChatLock: {
-      method: 'POST', path: '/social/chat-lock',
-      body: z.union([
-        z.object({ on: z.literal(true) }),
-        z.object({
-          on: z.literal(false),
-          /** The account password; required to turn the lock off. */
-          password: z.string().optional(),
-        }),
-      ], { error: 'on must be true or false.' }),
-      response: SocialMeResult,
-      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody, 429: ErrorBody },
-      doc: {
-        summary: 'Parent chat lock: on with one tap, off only with the account password',
-        description: 'A wrong password is 403 `bad_password` (logged and rate-limited).',
-        tags: ['social'],
-      },
-    },
-    sendFriendRequest: {
-      method: 'POST', path: '/social/friends', body: FriendRequestInput,
-      response: z.object({ status: FriendRequestStatus }),
-      errors: {
-        400: ErrorBody, 401: ErrorBody, 403: ErrorBody, 404: ErrorBody, 409: ErrorBody,
-        422: ContentRejected, 429: ErrorBody,
-      },
-      doc: {
-        summary: 'Send a friend request (a reverse request accepts at once)',
-        description: 'Answers `requested` without doing anything when the target blocked you or is suspended. '
-          + '`message` is moderated now and delivered as the first DM once you are friends.',
-        tags: ['social'],
-      },
-    },
-    acceptFriendRequest: {
-      method: 'POST', path: '/social/friends/:id/accept', params: OtherUser, response: Ok,
-      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody, 404: ErrorBody, 409: ErrorBody },
-      doc: { summary: 'Accept the request from `:id`', tags: ['social'] },
-    },
-    declineFriendRequest: {
-      method: 'POST', path: '/social/friends/:id/decline', params: OtherUser, response: Ok,
-      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody },
-      doc: { summary: 'Quietly drop the request from `:id`', tags: ['social'] },
-    },
-    removeFriend: {
-      method: 'DELETE', path: '/social/friends/:id', params: OtherUser, response: Ok,
-      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody },
-      doc: { summary: 'Unfriend `:id`, or cancel your request to them', tags: ['social'] },
-    },
-    setFriendNotifications: {
-      method: 'PUT', path: '/social/friends/:id/notify', params: OtherUser,
-      body: z.object({ online: z.boolean({ error: 'online must be true or false.' }) }), response: Ok,
-      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody, 404: ErrorBody },
-      doc: { summary: "Turn a friend's \"tell me when they're online\" bell on or off", tags: ['social'] },
-    },
-    blockPlayer: {
-      method: 'POST', path: '/social/blocks', body: z.object({ userId: requiredId('userId must be a user id.') }), response: Ok,
-      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody, 404: ErrorBody, 409: ErrorBody },
-      doc: {
-        summary: 'Block a player',
-        description: 'Also unfriends, drops requests both ways and splits a shared party.',
-        tags: ['social'],
-      },
-    },
-    unblockPlayer: {
-      method: 'DELETE', path: '/social/blocks/:id', params: OtherUser, response: Ok,
-      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody },
-      doc: { summary: 'Unblock a player', tags: ['social'] },
-    },
-    listRecentPlayers: {
-      method: 'GET', path: '/social/recent',
-      response: z.object({
-        /** Newest first, at most 50. */
-        players: z.array(RecentPlayer),
-      }),
-      errors: { 401: ErrorBody, 403: ErrorBody },
-      doc: { summary: 'People you recently played with', tags: ['social'] },
-    },
-  }),
-};
+/**
+ * Social core REST (multiplayer-impl.md §5.1): config, your own social
+ * settings, friends and requests, blocks, player cards, recent players and
+ * online counts. Every route here is closed to suspended accounts (403
+ * `suspended`) except `GET /social/config` and `GET /social/me`, which a
+ * suspended player's UI needs to explain what happened.
+ */
+import { z } from 'zod';
+import { Ok } from '../../common';
+import { requiredId } from '../../coerce';
+import { ContentRejected, ErrorBody } from '../../errors';
+import { requireActive, requireClaimed, requireUser, session } from '../../middleware';
+import { NotifyPrefs } from '../notify';
+import { SocialConfig } from './config';
+import { Audience, FriendsList, PlayerCard, RecentPlayer, SocialMe } from './people';
+import { Counts } from './presence';
+
+/** `{ me }`: your social settings after a change. */
+export const SocialMeResult = z.object({ me: SocialMe });
+
+/** `:id`, another player's user id. A malformed id is a 400. */
+const OtherUser = z.object({ id: requiredId('id must be a user id.') });
+
+/** An {@link Audience} field, with the old hub's message for anything else. */
+const audienceField = (field: string) => z.enum(Audience.options, { error: `${field} must be friends or nobody.` });
+
+/**
+ * `POST /social/friends`: who to befriend, by id or by name, and an optional
+ * first message. `userId` wins when both are given; with neither, the player
+ * is not found (404 `no_player`).
+ */
+export const FriendRequestInput = z.object({
+  userId: requiredId('userId must be a user id.').nullish(),
+  /** A username, case-insensitive. */
+  username: z.string().optional(),
+  message: z.string().optional(),
+});
+
+/** A friend request. */
+export type FriendRequestInput = z.infer<typeof FriendRequestInput>;
+
+/** The result of `POST /social/friends`. */
+export const FriendRequestStatus = z.enum(['requested', 'friends']);
+
+/** The social core endpoints. */
+export const socialEndpoints = {
+  ...session.group({
+    getSocialConfig: {
+      method: 'GET', path: '/social/config', response: SocialConfig,
+      doc: { summary: 'The site-wide social configuration', tags: ['social'] },
+    },
+    getOnlineCounts: {
+      method: 'GET', path: '/social/counts', response: Counts,
+      errors: { 403: ErrorBody },
+      doc: { summary: 'Anonymous online counts, overall and per game', tags: ['social'] },
+    },
+  }),
+  ...requireUser.group({
+    getMySocialProfile: {
+      method: 'GET', path: '/social/me',
+      response: z.object({
+        me: SocialMe,
+        notify: NotifyPrefs,
+        /** How many browsers have a push subscription for this account. */
+        pushSubs: z.number().int().nonnegative(),
+      }),
+      errors: { 401: ErrorBody },
+      doc: { summary: 'Your social settings, notification preferences and push subscription count', tags: ['social'] },
+    },
+  }),
+  ...requireActive.group({
+    listFriendsAndRequests: {
+      method: 'GET', path: '/social/friends', response: FriendsList,
+      errors: { 401: ErrorBody, 403: ErrorBody },
+      doc: { summary: 'Friends (online first), requests both ways and blocks', tags: ['social'] },
+    },
+    findPlayerByName: {
+      method: 'GET', path: '/social/players/by-name/:name',
+      params: z.object({ name: z.string() }), response: PlayerCard,
+      errors: { 401: ErrorBody, 403: ErrorBody, 404: ErrorBody },
+      doc: { summary: 'A player card, by username', tags: ['social'] },
+    },
+    getPlayerCard: {
+      method: 'GET', path: '/social/players/:id', params: OtherUser, response: PlayerCard,
+      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody, 404: ErrorBody },
+      doc: { summary: 'A player card, by id (404 `no_player` when blocked by them or suspended)', tags: ['social'] },
+    },
+  }),
+  ...requireClaimed.group({
+    updateMySocialProfile: {
+      method: 'PUT', path: '/social/me',
+      body: z.object({
+        /** One of the config's preset avatar ids (else 400 `bad_avatar`). */
+        avatar: z.string().optional(),
+        privacy: audienceField('privacy').optional(),
+        dmPolicy: audienceField('dmPolicy').optional(),
+      }),
+      response: SocialMeResult,
+      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody },
+      doc: { summary: 'Change your avatar, presence privacy or who may message you', tags: ['social'] },
+    },
+    setParentChatLock: {
+      method: 'POST', path: '/social/chat-lock',
+      body: z.union([
+        z.object({ on: z.literal(true) }),
+        z.object({
+          on: z.literal(false),
+          /** The account password; required to turn the lock off. */
+          password: z.string().optional(),
+        }),
+      ], { error: 'on must be true or false.' }),
+      response: SocialMeResult,
+      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody, 429: ErrorBody },
+      doc: {
+        summary: 'Parent chat lock: on with one tap, off only with the account password',
+        description: 'A wrong password is 403 `bad_password` (logged and rate-limited).',
+        tags: ['social'],
+      },
+    },
+    sendFriendRequest: {
+      method: 'POST', path: '/social/friends', body: FriendRequestInput,
+      response: z.object({ status: FriendRequestStatus }),
+      errors: {
+        400: ErrorBody, 401: ErrorBody, 403: ErrorBody, 404: ErrorBody, 409: ErrorBody,
+        422: ContentRejected, 429: ErrorBody,
+      },
+      doc: {
+        summary: 'Send a friend request (a reverse request accepts at once)',
+        description: 'Answers `requested` without doing anything when the target blocked you or is suspended. '
+          + '`message` is moderated now and delivered as the first DM once you are friends.',
+        tags: ['social'],
+      },
+    },
+    acceptFriendRequest: {
+      method: 'POST', path: '/social/friends/:id/accept', params: OtherUser, response: Ok,
+      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody, 404: ErrorBody, 409: ErrorBody },
+      doc: { summary: 'Accept the request from `:id`', tags: ['social'] },
+    },
+    declineFriendRequest: {
+      method: 'POST', path: '/social/friends/:id/decline', params: OtherUser, response: Ok,
+      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody },
+      doc: { summary: 'Quietly drop the request from `:id`', tags: ['social'] },
+    },
+    removeFriend: {
+      method: 'DELETE', path: '/social/friends/:id', params: OtherUser, response: Ok,
+      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody },
+      doc: { summary: 'Unfriend `:id`, or cancel your request to them', tags: ['social'] },
+    },
+    setFriendNotifications: {
+      method: 'PUT', path: '/social/friends/:id/notify', params: OtherUser,
+      body: z.object({ online: z.boolean({ error: 'online must be true or false.' }) }), response: Ok,
+      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody, 404: ErrorBody },
+      doc: { summary: "Turn a friend's \"tell me when they're online\" bell on or off", tags: ['social'] },
+    },
+    blockPlayer: {
+      method: 'POST', path: '/social/blocks', body: z.object({ userId: requiredId('userId must be a user id.') }), response: Ok,
+      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody, 404: ErrorBody, 409: ErrorBody },
+      doc: {
+        summary: 'Block a player',
+        description: 'Also unfriends, drops requests both ways and splits a shared party.',
+        tags: ['social'],
+      },
+    },
+    unblockPlayer: {
+      method: 'DELETE', path: '/social/blocks/:id', params: OtherUser, response: Ok,
+      errors: { 400: ErrorBody, 401: ErrorBody, 403: ErrorBody },
+      doc: { summary: 'Unblock a player', tags: ['social'] },
+    },
+    listRecentPlayers: {
+      method: 'GET', path: '/social/recent',
+      response: z.object({
+        /** Newest first, at most 50. */
+        players: z.array(RecentPlayer),
+      }),
+      errors: { 401: ErrorBody, 403: ErrorBody },
+      doc: { summary: 'People you recently played with', tags: ['social'] },
+    },
+  }),
+};

package/src/api/social/people.ts

@@ -1,118 +1,118 @@
-/**
- * People shapes: your own social settings, friends, requests, player cards
- * and recent players. Several are also part of the socket `hello` snapshot.
- *
- * Privacy rules behind them: a block in either direction looks to the
- * blocked side like an ordinary unfriend (or a missing player), suspended
- * players are invisible, and guests have no friends.
- */
-import { z } from 'zod';
-import { Millis, Slug } from '../../common';
-import { PlayerLite, SessionUser } from '../../entities';
-import { Presence } from './presence';
-
-/** Who may see my presence, or message me: friends, or nobody. */
-export const Audience = z.enum(['friends', 'nobody']);
-
-/** An audience setting. */
-export type Audience = z.infer<typeof Audience>;
-
-/**
- * Your own account's social fields (`GET`/`PUT /social/me`, the `hello`
- * snapshot's `me`). Never shown to other players.
- */
-export const SocialMe = SessionUser.extend({
-  /** Avatar token; never empty (a default is derived from the id). */
-  avatar: PlayerLite.shape.avatar,
-  /** Who sees my presence and last-seen time. */
-  privacy: Audience,
-  /** Who may message me (and invite me). */
-  dmPolicy: Audience,
-});
-
-/** Your own social settings. */
-export type SocialMe = z.infer<typeof SocialMe>;
-
-/** A friend, with what you may see of their presence. Online friends sort first. */
-export const FriendEntry = PlayerLite.extend({
-  /** `null` when offline or hiding their presence. */
-  presence: Presence.nullable(),
-  /** "Tell me when they come online" is on for this friend. */
-  notifyOnline: z.boolean(),
-  /** When you became friends (epoch ms). */
-  since: Millis,
-  /** When they were last online (epoch ms); `0` when unknown or they hide their presence. */
-  lastSeenAt: Millis,
-});
-
-/** A friend. */
-export type FriendEntry = z.infer<typeof FriendEntry>;
-
-/** Pending friend requests both ways, newest first (blocked and suspended players left out). */
-export const FriendRequests = z.object({
-  /** Requests waiting for you. */
-  incoming: z.array(PlayerLite),
-  /** Requests you sent. */
-  outgoing: z.array(PlayerLite),
-});
-
-/** Pending friend requests. */
-export type FriendRequests = z.infer<typeof FriendRequests>;
-
-/** `GET /social/friends`: friends, requests and the players you blocked. Guests get empty lists. */
-export const FriendsList = FriendRequests.extend({
-  friends: z.array(FriendEntry),
-  /** Players you blocked, newest first. */
-  blocked: z.array(PlayerLite),
-});
-
-/** Friends, requests and blocks. */
-export type FriendsList = z.infer<typeof FriendsList>;
-
-/**
- * What changed in `ev:friends` (the client refetches `GET /social/friends`).
- * `restored`: a friend's suspension ended. A player you blocked only ever
- * sees `removed`.
- */
-export const FriendChange = z.enum(['request', 'accepted', 'removed', 'declined', 'cancelled', 'blocked', 'restored']);
-
-/** A friends-list change. */
-export type FriendChange = z.infer<typeof FriendChange>;
-
-/** My relation to another player, as their card shows it. */
-export const Relation = z.enum(['self', 'friend', 'incoming', 'outgoing', 'blocked', 'none']);
-
-/** A relation. */
-export type Relation = z.infer<typeof Relation>;
-
-/**
- * A player card (`GET /social/players/:id`). Someone who blocked you, or who
- * is suspended, answers 404 exactly like a player who doesn't exist.
- */
-export const PlayerCard = PlayerLite.extend({
-  relation: Relation,
-  /** Friends only; `null` otherwise, or when offline or hidden. */
-  presence: Presence.nullable(),
-  /** A friend request can be sent (both claimed, no relation yet or theirs is pending, requests on). */
-  canFriend: z.boolean(),
-  /** Friends who take messages, while DMs are on. */
-  canMessage: z.boolean(),
-  /** Friends who take messages. */
-  canInvite: z.boolean(),
-  /** Anyone but yourself. */
-  canReport: z.boolean(),
-});
-
-/** A player card. */
-export type PlayerCard = z.infer<typeof PlayerCard>;
-
-/** Someone you recently played with (`GET /social/recent`). */
-export const RecentPlayer = PlayerLite.extend({
-  /** The game you played together. */
-  game: Slug,
-  /** When you last played together (epoch ms). */
-  lastAt: Millis,
-});
-
-/** A recent player. */
-export type RecentPlayer = z.infer<typeof RecentPlayer>;
+/**
+ * People shapes: your own social settings, friends, requests, player cards
+ * and recent players. Several are also part of the socket `hello` snapshot.
+ *
+ * Privacy rules behind them: a block in either direction looks to the
+ * blocked side like an ordinary unfriend (or a missing player), suspended
+ * players are invisible, and guests have no friends.
+ */
+import { z } from 'zod';
+import { Millis, Slug } from '../../common';
+import { PlayerLite, SessionUser } from '../../entities';
+import { Presence } from './presence';
+
+/** Who may see my presence, or message me: friends, or nobody. */
+export const Audience = z.enum(['friends', 'nobody']);
+
+/** An audience setting. */
+export type Audience = z.infer<typeof Audience>;
+
+/**
+ * Your own account's social fields (`GET`/`PUT /social/me`, the `hello`
+ * snapshot's `me`). Never shown to other players.
+ */
+export const SocialMe = SessionUser.extend({
+  /** Avatar token; never empty (a default is derived from the id). */
+  avatar: PlayerLite.shape.avatar,
+  /** Who sees my presence and last-seen time. */
+  privacy: Audience,
+  /** Who may message me (and invite me). */
+  dmPolicy: Audience,
+});
+
+/** Your own social settings. */
+export type SocialMe = z.infer<typeof SocialMe>;
+
+/** A friend, with what you may see of their presence. Online friends sort first. */
+export const FriendEntry = PlayerLite.extend({
+  /** `null` when offline or hiding their presence. */
+  presence: Presence.nullable(),
+  /** "Tell me when they come online" is on for this friend. */
+  notifyOnline: z.boolean(),
+  /** When you became friends (epoch ms). */
+  since: Millis,
+  /** When they were last online (epoch ms); `0` when unknown or they hide their presence. */
+  lastSeenAt: Millis,
+});
+
+/** A friend. */
+export type FriendEntry = z.infer<typeof FriendEntry>;
+
+/** Pending friend requests both ways, newest first (blocked and suspended players left out). */
+export const FriendRequests = z.object({
+  /** Requests waiting for you. */
+  incoming: z.array(PlayerLite),
+  /** Requests you sent. */
+  outgoing: z.array(PlayerLite),
+});
+
+/** Pending friend requests. */
+export type FriendRequests = z.infer<typeof FriendRequests>;
+
+/** `GET /social/friends`: friends, requests and the players you blocked. Guests get empty lists. */
+export const FriendsList = FriendRequests.extend({
+  friends: z.array(FriendEntry),
+  /** Players you blocked, newest first. */
+  blocked: z.array(PlayerLite),
+});
+
+/** Friends, requests and blocks. */
+export type FriendsList = z.infer<typeof FriendsList>;
+
+/**
+ * What changed in `ev:friends` (the client refetches `GET /social/friends`).
+ * `restored`: a friend's suspension ended. A player you blocked only ever
+ * sees `removed`.
+ */
+export const FriendChange = z.enum(['request', 'accepted', 'removed', 'declined', 'cancelled', 'blocked', 'restored']);
+
+/** A friends-list change. */
+export type FriendChange = z.infer<typeof FriendChange>;
+
+/** My relation to another player, as their card shows it. */
+export const Relation = z.enum(['self', 'friend', 'incoming', 'outgoing', 'blocked', 'none']);
+
+/** A relation. */
+export type Relation = z.infer<typeof Relation>;
+
+/**
+ * A player card (`GET /social/players/:id`). Someone who blocked you, or who
+ * is suspended, answers 404 exactly like a player who doesn't exist.
+ */
+export const PlayerCard = PlayerLite.extend({
+  relation: Relation,
+  /** Friends only; `null` otherwise, or when offline or hidden. */
+  presence: Presence.nullable(),
+  /** A friend request can be sent (both claimed, no relation yet or theirs is pending, requests on). */
+  canFriend: z.boolean(),
+  /** Friends who take messages, while DMs are on. */
+  canMessage: z.boolean(),
+  /** Friends who take messages. */
+  canInvite: z.boolean(),
+  /** Anyone but yourself. */
+  canReport: z.boolean(),
+});
+
+/** A player card. */
+export type PlayerCard = z.infer<typeof PlayerCard>;
+
+/** Someone you recently played with (`GET /social/recent`). */
+export const RecentPlayer = PlayerLite.extend({
+  /** The game you played together. */
+  game: Slug,
+  /** When you last played together (epoch ms). */
+  lastAt: Millis,
+});
+
+/** A recent player. */
+export type RecentPlayer = z.infer<typeof RecentPlayer>;