@igstack/app-catalog-backend-core 6.3.1-alpha-20261003051755 → 6.5.0

package/dist/modules/feedback/service.mjs

@@ -0,0 +1,165 @@
+import { getDbClient } from "../../db/client.mjs";
+
+//#region src/modules/feedback/service.ts
+/** How long an author may edit their own wording. */
+const EDIT_WINDOW_MS = 3600 * 1e3;
+const MAX_BODY_LENGTH = 1e3;
+const MAX_SUBJECT_LENGTH = 120;
+const MAX_ATTACHMENTS = 3;
+function toView(row, actor) {
+	const isMine = !!actor && row.authorHash === actor.hash;
+	return {
+		id: row.id,
+		authorName: row.authorAlias,
+		body: row.body,
+		subject: row.subject,
+		resourceSlug: row.resource?.slug ?? null,
+		resourceName: row.resource?.displayName ?? null,
+		attachmentIds: (row.attachments ?? []).map((a) => a.id),
+		status: row.status,
+		reviewerReply: row.reviewerReply,
+		reviewedAt: row.reviewedAt?.toISOString() ?? null,
+		createdAt: row.createdAt.toISOString(),
+		editedAt: row.editedAt?.toISOString() ?? null,
+		isMine,
+		canEditUntil: isMine ? new Date(row.createdAt.getTime() + EDIT_WINDOW_MS).toISOString() : null
+	};
+}
+const WITH_RELATIONS = {
+	resource: { select: {
+		slug: true,
+		displayName: true
+	} },
+	attachments: { select: { id: true } }
+};
+async function resourceIdForSlug(slug) {
+	return (await getDbClient().dbResource.findUnique({
+		where: { slug },
+		select: { id: true }
+	}))?.id ?? null;
+}
+/** Oldest first: a thread reads top to bottom. */
+async function listFeedback(resourceSlug, actor) {
+	const resourceId = await resourceIdForSlug(resourceSlug);
+	if (!resourceId) return {
+		items: [],
+		openCount: 0
+	};
+	const rows = await getDbClient().dbFeedback.findMany({
+		where: { resourceId },
+		orderBy: { createdAt: "asc" },
+		include: WITH_RELATIONS
+	});
+	return {
+		items: rows.map((row) => toView(row, actor)),
+		openCount: rows.filter((row) => row.status === null).length
+	};
+}
+/**
+* Everything this browser filed, across entries, for the tracker.
+*
+* Sorted the way the tracker renders: unreviewed first, then newest. Postgres sorts
+* NULLs last by default, so `status` ascending would bury the pending rows — hence the
+* explicit two-key ordering rather than relying on the default.
+*/
+async function listMyFeedback(actor) {
+	if (!actor) return [];
+	return (await getDbClient().dbFeedback.findMany({
+		where: { authorHash: actor.hash },
+		orderBy: [{ status: {
+			sort: "asc",
+			nulls: "first"
+		} }, { createdAt: "desc" }],
+		include: WITH_RELATIONS
+	})).map((row) => toView(row, actor));
+}
+var FeedbackError = class extends Error {
+	constructor(reason, message) {
+		super(message);
+		this.reason = reason;
+	}
+};
+function normaliseBody(body) {
+	if (body === void 0 || body === null) return null;
+	const trimmed = body.trim();
+	return trimmed ? trimmed.slice(0, MAX_BODY_LENGTH) : null;
+}
+async function addFeedback(input, actor) {
+	const { resourceSlug, subject, body, attachmentIds = [] } = input;
+	if (!resourceSlug && !subject?.trim()) throw new FeedbackError("empty", "Tell us which entry this is about, or what you were looking for");
+	if (attachmentIds.length > 3) throw new FeedbackError("too-many-attachments", `Up to ${3} images`);
+	let resourceId = null;
+	if (resourceSlug) {
+		resourceId = await resourceIdForSlug(resourceSlug);
+		if (!resourceId) throw new FeedbackError("not-found", `Unknown resource: ${resourceSlug}`);
+	}
+	return toView(await getDbClient().$transaction(async (tx) => {
+		const created = await tx.dbFeedback.create({
+			data: {
+				resourceId,
+				subject: resourceId ? null : subject.trim().slice(0, 120),
+				authorHash: actor.hash,
+				authorAlias: actor.alias,
+				body: normaliseBody(body)
+			},
+			select: { id: true }
+		});
+		if (attachmentIds.length > 0) await tx.dbFeedbackAttachment.updateMany({
+			where: {
+				id: { in: attachmentIds },
+				authorHash: actor.hash,
+				feedbackId: null
+			},
+			data: { feedbackId: created.id }
+		});
+		return tx.dbFeedback.findUniqueOrThrow({
+			where: { id: created.id },
+			include: WITH_RELATIONS
+		});
+	}), actor);
+}
+/**
+* Load a row and check this actor may still change its wording.
+*
+* Enforced here, not in the UI: the control disappearing is a courtesy, and a request
+* that arrives a second late must still be refused.
+*/
+async function loadOwnForEdit(id, actor) {
+	const row = await getDbClient().dbFeedback.findUnique({ where: { id } });
+	if (!row) throw new FeedbackError("not-found", "This no longer exists");
+	if (row.authorHash !== actor.hash) throw new FeedbackError("not-author", "Only the author can change this");
+	if (Date.now() > row.createdAt.getTime() + 36e5) throw new FeedbackError("window-closed", "Wording can only be changed in the first hour");
+	return row;
+}
+async function editFeedback(id, body, actor) {
+	await loadOwnForEdit(id, actor);
+	return toView(await getDbClient().dbFeedback.update({
+		where: { id },
+		data: {
+			body: normaliseBody(body),
+			editedAt: /* @__PURE__ */ new Date()
+		},
+		include: WITH_RELATIONS
+	}), actor);
+}
+/**
+* Withdraw your own feedback.
+*
+* Allowed for as long as nobody has reviewed it, with no time limit — the edit window
+* exists to stop someone rewriting words others have already read, and that reasoning
+* does not apply to withdrawing something no maintainer has acted on. Once reviewed it
+* is public record carrying a maintainer's reply, so withdrawing would delete their
+* answer; from then on it is refused.
+*/
+async function dismissFeedback(id, actor) {
+	const row = await getDbClient().dbFeedback.findUnique({ where: { id } });
+	if (!row) throw new FeedbackError("not-found", "This no longer exists");
+	if (row.authorHash !== actor.hash) throw new FeedbackError("not-author", "Only the author can withdraw this");
+	if (row.status !== null) throw new FeedbackError("already-reviewed", "This has been answered, so it stays on the entry");
+	await getDbClient().dbFeedback.delete({ where: { id } });
+	return { id };
+}
+
+//#endregion
+export { EDIT_WINDOW_MS, FeedbackError, MAX_ATTACHMENTS, MAX_BODY_LENGTH, MAX_SUBJECT_LENGTH, addFeedback, dismissFeedback, editFeedback, listFeedback, listMyFeedback };
+//# sourceMappingURL=service.mjs.map

package/dist/modules/feedback/service.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.mjs","names":[],"sources":["../../../src/modules/feedback/service.ts"],"sourcesContent":["import { getDbClient } from '../../db/client'\nimport type { Actor } from '../visitor/visitorIdentity'\n\n/** How long an author may edit their own wording. */\nexport const EDIT_WINDOW_MS = 60 * 60 * 1000\n\nexport const MAX_BODY_LENGTH = 1000\nexport const MAX_SUBJECT_LENGTH = 120\nexport const MAX_ATTACHMENTS = 3\n\n/** One piece of feedback as a client sees it. Never carries an author hash. */\nexport interface FeedbackView {\n  id: string\n  authorName: string\n  /** Null when the visitor sent a bare flag with no words. */\n  body: string | null\n  /** What they were looking for, on a catalog-level ask. Null on entry feedback. */\n  subject: string | null\n  /** Slug of the entry this is about, or null for a catalog-level ask. */\n  resourceSlug: string | null\n  /** Display name of that entry, so the tracker can label a row without a second query. */\n  resourceName: string | null\n  attachmentIds: string[]\n  status: 'applied' | 'acknowledged' | null\n  reviewerReply: string | null\n  /** When a maintainer last touched it — what \"unread\" is computed against. */\n  reviewedAt: string | null\n  createdAt: string\n  editedAt: string | null\n  /** Whether this browser wrote it — what makes Edit and Dismiss appear. */\n  isMine: boolean\n  /**\n   * The absolute instant this browser's edit window closes, or null when it is not\n   * theirs. Absolute rather than a remaining duration so a client with a skewed clock\n   * hides the control at the same moment the server starts refusing the edit.\n   */\n  canEditUntil: string | null\n}\n\ntype Row = {\n  id: string\n  authorHash: string\n  authorAlias: string\n  body: string | null\n  subject: string | null\n  status: 'applied' | 'acknowledged' | null\n  reviewerReply: string | null\n  reviewedAt: Date | null\n  editedAt: Date | null\n  createdAt: Date\n  resource?: { slug: string; displayName: string } | null\n  attachments?: { id: string }[]\n}\n\nfunction toView(row: Row, actor: Actor | null): FeedbackView {\n  const isMine = !!actor && row.authorHash === actor.hash\n  return {\n    id: row.id,\n    authorName: row.authorAlias,\n    body: row.body,\n    subject: row.subject,\n    resourceSlug: row.resource?.slug ?? null,\n    resourceName: row.resource?.displayName ?? null,\n    attachmentIds: (row.attachments ?? []).map((a) => a.id),\n    status: row.status,\n    reviewerReply: row.reviewerReply,\n    reviewedAt: row.reviewedAt?.toISOString() ?? null,\n    createdAt: row.createdAt.toISOString(),\n    editedAt: row.editedAt?.toISOString() ?? null,\n    isMine,\n    canEditUntil: isMine\n      ? new Date(row.createdAt.getTime() + EDIT_WINDOW_MS).toISOString()\n      : null,\n  }\n}\n\nconst WITH_RELATIONS = {\n  resource: { select: { slug: true, displayName: true } },\n  attachments: { select: { id: true } },\n} as const\n\nasync function resourceIdForSlug(slug: string): Promise<string | null> {\n  const resource = await getDbClient().dbResource.findUnique({\n    where: { slug },\n    select: { id: true },\n  })\n  return resource?.id ?? null\n}\n\nexport interface FeedbackList {\n  items: FeedbackView[]\n  /** Unreviewed count — what the badge shows. `status IS NULL` is the whole definition. */\n  openCount: number\n}\n\n/** Oldest first: a thread reads top to bottom. */\nexport async function listFeedback(\n  resourceSlug: string,\n  actor: Actor | null,\n): Promise<FeedbackList> {\n  const resourceId = await resourceIdForSlug(resourceSlug)\n  if (!resourceId) return { items: [], openCount: 0 }\n\n  const rows = await getDbClient().dbFeedback.findMany({\n    where: { resourceId },\n    orderBy: { createdAt: 'asc' },\n    include: WITH_RELATIONS,\n  })\n  return {\n    items: rows.map((row) => toView(row, actor)),\n    openCount: rows.filter((row) => row.status === null).length,\n  }\n}\n\n/**\n * Everything this browser filed, across entries, for the tracker.\n *\n * Sorted the way the tracker renders: unreviewed first, then newest. Postgres sorts\n * NULLs last by default, so `status` ascending would bury the pending rows — hence the\n * explicit two-key ordering rather than relying on the default.\n */\nexport async function listMyFeedback(\n  actor: Actor | null,\n): Promise<FeedbackView[]> {\n  if (!actor) return []\n  const rows = await getDbClient().dbFeedback.findMany({\n    where: { authorHash: actor.hash },\n    orderBy: [\n      { status: { sort: 'asc', nulls: 'first' } },\n      { createdAt: 'desc' },\n    ],\n    include: WITH_RELATIONS,\n  })\n  return rows.map((row) => toView(row, actor))\n}\n\nexport class FeedbackError extends Error {\n  constructor(\n    readonly reason:\n      | 'not-found'\n      | 'not-author'\n      | 'window-closed'\n      | 'already-reviewed'\n      | 'empty'\n      | 'too-many-attachments',\n    message: string,\n  ) {\n    super(message)\n  }\n}\n\nfunction normaliseBody(body: string | undefined | null): string | null {\n  if (body === undefined || body === null) return null\n  const trimmed = body.trim()\n  // A bare flag is a valid signal, so empty is stored as absent rather than refused.\n  return trimmed ? trimmed.slice(0, MAX_BODY_LENGTH) : null\n}\n\nexport interface AddFeedbackInput {\n  /** Omitted for a catalog-level ask. */\n  resourceSlug?: string\n  /** Required when there is no resourceSlug — it is the substance of the ask. */\n  subject?: string\n  body?: string\n  attachmentIds?: string[]\n}\n\nexport async function addFeedback(\n  input: AddFeedbackInput,\n  actor: Actor,\n): Promise<FeedbackView> {\n  const { resourceSlug, subject, body, attachmentIds = [] } = input\n\n  if (!resourceSlug && !subject?.trim()) {\n    throw new FeedbackError(\n      'empty',\n      'Tell us which entry this is about, or what you were looking for',\n    )\n  }\n  if (attachmentIds.length > MAX_ATTACHMENTS) {\n    throw new FeedbackError(\n      'too-many-attachments',\n      `Up to ${MAX_ATTACHMENTS} images`,\n    )\n  }\n\n  let resourceId: string | null = null\n  if (resourceSlug) {\n    resourceId = await resourceIdForSlug(resourceSlug)\n    if (!resourceId) {\n      throw new FeedbackError('not-found', `Unknown resource: ${resourceSlug}`)\n    }\n  }\n\n  const row = await getDbClient().$transaction(async (tx) => {\n    const created = await tx.dbFeedback.create({\n      data: {\n        resourceId,\n        subject: resourceId\n          ? null\n          : subject!.trim().slice(0, MAX_SUBJECT_LENGTH),\n        authorHash: actor.hash,\n        authorAlias: actor.alias,\n        body: normaliseBody(body),\n      },\n      select: { id: true },\n    })\n\n    // Claim only images this browser uploaded and nobody has claimed yet, so an id\n    // guessed from someone else's upload cannot be pulled onto your feedback.\n    //\n    // `updateMany` with the conditions in the WHERE, rather than a nested `connect`:\n    // `connect` takes only the id, and because `feedbackId` is a single FK it would\n    // MOVE a claimed image off its owner's feedback instead of refusing.\n    if (attachmentIds.length > 0) {\n      await tx.dbFeedbackAttachment.updateMany({\n        where: {\n          id: { in: attachmentIds },\n          authorHash: actor.hash,\n          feedbackId: null,\n        },\n        data: { feedbackId: created.id },\n      })\n    }\n\n    return tx.dbFeedback.findUniqueOrThrow({\n      where: { id: created.id },\n      include: WITH_RELATIONS,\n    })\n  })\n  return toView(row, actor)\n}\n\n/**\n * Load a row and check this actor may still change its wording.\n *\n * Enforced here, not in the UI: the control disappearing is a courtesy, and a request\n * that arrives a second late must still be refused.\n */\nasync function loadOwnForEdit(id: string, actor: Actor) {\n  const row = await getDbClient().dbFeedback.findUnique({ where: { id } })\n  if (!row) throw new FeedbackError('not-found', 'This no longer exists')\n  if (row.authorHash !== actor.hash) {\n    throw new FeedbackError('not-author', 'Only the author can change this')\n  }\n  if (Date.now() > row.createdAt.getTime() + EDIT_WINDOW_MS) {\n    throw new FeedbackError(\n      'window-closed',\n      'Wording can only be changed in the first hour',\n    )\n  }\n  return row\n}\n\nexport async function editFeedback(\n  id: string,\n  body: string,\n  actor: Actor,\n): Promise<FeedbackView> {\n  await loadOwnForEdit(id, actor)\n  const row = await getDbClient().dbFeedback.update({\n    where: { id },\n    data: { body: normaliseBody(body), editedAt: new Date() },\n    include: WITH_RELATIONS,\n  })\n  return toView(row, actor)\n}\n\n/**\n * Withdraw your own feedback.\n *\n * Allowed for as long as nobody has reviewed it, with no time limit — the edit window\n * exists to stop someone rewriting words others have already read, and that reasoning\n * does not apply to withdrawing something no maintainer has acted on. Once reviewed it\n * is public record carrying a maintainer's reply, so withdrawing would delete their\n * answer; from then on it is refused.\n */\nexport async function dismissFeedback(\n  id: string,\n  actor: Actor,\n): Promise<{ id: string }> {\n  const row = await getDbClient().dbFeedback.findUnique({ where: { id } })\n  if (!row) throw new FeedbackError('not-found', 'This no longer exists')\n  if (row.authorHash !== actor.hash) {\n    throw new FeedbackError('not-author', 'Only the author can withdraw this')\n  }\n  if (row.status !== null) {\n    throw new FeedbackError(\n      'already-reviewed',\n      'This has been answered, so it stays on the entry',\n    )\n  }\n  await getDbClient().dbFeedback.delete({ where: { id } })\n  return { id }\n}\n"],"mappings":";;;;AAIA,MAAa,iBAAiB,OAAU;AAExC,MAAa,kBAAkB;AAC/B,MAAa,qBAAqB;AAClC,MAAa,kBAAkB;AA8C/B,SAAS,OAAO,KAAU,OAAmC;CAC3D,MAAM,SAAS,CAAC,CAAC,SAAS,IAAI,eAAe,MAAM;AACnD,QAAO;EACL,IAAI,IAAI;EACR,YAAY,IAAI;EAChB,MAAM,IAAI;EACV,SAAS,IAAI;EACb,cAAc,IAAI,UAAU,QAAQ;EACpC,cAAc,IAAI,UAAU,eAAe;EAC3C,gBAAgB,IAAI,eAAe,EAAE,EAAE,KAAK,MAAM,EAAE,GAAG;EACvD,QAAQ,IAAI;EACZ,eAAe,IAAI;EACnB,YAAY,IAAI,YAAY,aAAa,IAAI;EAC7C,WAAW,IAAI,UAAU,aAAa;EACtC,UAAU,IAAI,UAAU,aAAa,IAAI;EACzC;EACA,cAAc,SACV,IAAI,KAAK,IAAI,UAAU,SAAS,GAAG,eAAe,CAAC,aAAa,GAChE;EACL;;AAGH,MAAM,iBAAiB;CACrB,UAAU,EAAE,QAAQ;EAAE,MAAM;EAAM,aAAa;EAAM,EAAE;CACvD,aAAa,EAAE,QAAQ,EAAE,IAAI,MAAM,EAAE;CACtC;AAED,eAAe,kBAAkB,MAAsC;AAKrE,SAJiB,MAAM,aAAa,CAAC,WAAW,WAAW;EACzD,OAAO,EAAE,MAAM;EACf,QAAQ,EAAE,IAAI,MAAM;EACrB,CAAC,GACe,MAAM;;;AAUzB,eAAsB,aACpB,cACA,OACuB;CACvB,MAAM,aAAa,MAAM,kBAAkB,aAAa;AACxD,KAAI,CAAC,WAAY,QAAO;EAAE,OAAO,EAAE;EAAE,WAAW;EAAG;CAEnD,MAAM,OAAO,MAAM,aAAa,CAAC,WAAW,SAAS;EACnD,OAAO,EAAE,YAAY;EACrB,SAAS,EAAE,WAAW,OAAO;EAC7B,SAAS;EACV,CAAC;AACF,QAAO;EACL,OAAO,KAAK,KAAK,QAAQ,OAAO,KAAK,MAAM,CAAC;EAC5C,WAAW,KAAK,QAAQ,QAAQ,IAAI,WAAW,KAAK,CAAC;EACtD;;;;;;;;;AAUH,eAAsB,eACpB,OACyB;AACzB,KAAI,CAAC,MAAO,QAAO,EAAE;AASrB,SARa,MAAM,aAAa,CAAC,WAAW,SAAS;EACnD,OAAO,EAAE,YAAY,MAAM,MAAM;EACjC,SAAS,CACP,EAAE,QAAQ;GAAE,MAAM;GAAO,OAAO;GAAS,EAAE,EAC3C,EAAE,WAAW,QAAQ,CACtB;EACD,SAAS;EACV,CAAC,EACU,KAAK,QAAQ,OAAO,KAAK,MAAM,CAAC;;AAG9C,IAAa,gBAAb,cAAmC,MAAM;CACvC,YACE,AAAS,QAOT,SACA;AACA,QAAM,QAAQ;EATL;;;AAab,SAAS,cAAc,MAAgD;AACrE,KAAI,SAAS,UAAa,SAAS,KAAM,QAAO;CAChD,MAAM,UAAU,KAAK,MAAM;AAE3B,QAAO,UAAU,QAAQ,MAAM,GAAG,gBAAgB,GAAG;;AAYvD,eAAsB,YACpB,OACA,OACuB;CACvB,MAAM,EAAE,cAAc,SAAS,MAAM,gBAAgB,EAAE,KAAK;AAE5D,KAAI,CAAC,gBAAgB,CAAC,SAAS,MAAM,CACnC,OAAM,IAAI,cACR,SACA,kEACD;AAEH,KAAI,cAAc,WAChB,OAAM,IAAI,cACR,wBACA,WAAyB,SAC1B;CAGH,IAAI,aAA4B;AAChC,KAAI,cAAc;AAChB,eAAa,MAAM,kBAAkB,aAAa;AAClD,MAAI,CAAC,WACH,OAAM,IAAI,cAAc,aAAa,qBAAqB,eAAe;;AAwC7E,QAAO,OApCK,MAAM,aAAa,CAAC,aAAa,OAAO,OAAO;EACzD,MAAM,UAAU,MAAM,GAAG,WAAW,OAAO;GACzC,MAAM;IACJ;IACA,SAAS,aACL,OACA,QAAS,MAAM,CAAC,MAAM,OAAsB;IAChD,YAAY,MAAM;IAClB,aAAa,MAAM;IACnB,MAAM,cAAc,KAAK;IAC1B;GACD,QAAQ,EAAE,IAAI,MAAM;GACrB,CAAC;AAQF,MAAI,cAAc,SAAS,EACzB,OAAM,GAAG,qBAAqB,WAAW;GACvC,OAAO;IACL,IAAI,EAAE,IAAI,eAAe;IACzB,YAAY,MAAM;IAClB,YAAY;IACb;GACD,MAAM,EAAE,YAAY,QAAQ,IAAI;GACjC,CAAC;AAGJ,SAAO,GAAG,WAAW,kBAAkB;GACrC,OAAO,EAAE,IAAI,QAAQ,IAAI;GACzB,SAAS;GACV,CAAC;GACF,EACiB,MAAM;;;;;;;;AAS3B,eAAe,eAAe,IAAY,OAAc;CACtD,MAAM,MAAM,MAAM,aAAa,CAAC,WAAW,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACxE,KAAI,CAAC,IAAK,OAAM,IAAI,cAAc,aAAa,wBAAwB;AACvE,KAAI,IAAI,eAAe,MAAM,KAC3B,OAAM,IAAI,cAAc,cAAc,kCAAkC;AAE1E,KAAI,KAAK,KAAK,GAAG,IAAI,UAAU,SAAS,QACtC,OAAM,IAAI,cACR,iBACA,gDACD;AAEH,QAAO;;AAGT,eAAsB,aACpB,IACA,MACA,OACuB;AACvB,OAAM,eAAe,IAAI,MAAM;AAM/B,QAAO,OALK,MAAM,aAAa,CAAC,WAAW,OAAO;EAChD,OAAO,EAAE,IAAI;EACb,MAAM;GAAE,MAAM,cAAc,KAAK;GAAE,0BAAU,IAAI,MAAM;GAAE;EACzD,SAAS;EACV,CAAC,EACiB,MAAM;;;;;;;;;;;AAY3B,eAAsB,gBACpB,IACA,OACyB;CACzB,MAAM,MAAM,MAAM,aAAa,CAAC,WAAW,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACxE,KAAI,CAAC,IAAK,OAAM,IAAI,cAAc,aAAa,wBAAwB;AACvE,KAAI,IAAI,eAAe,MAAM,KAC3B,OAAM,IAAI,cAAc,cAAc,oCAAoC;AAE5E,KAAI,IAAI,WAAW,KACjB,OAAM,IAAI,cACR,oBACA,mDACD;AAEH,OAAM,aAAa,CAAC,WAAW,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACxD,QAAO,EAAE,IAAI"}

package/dist/modules/visitor/visitorIdentity.d.mts

@@ -0,0 +1,86 @@
+//#region src/modules/visitor/visitorIdentity.d.ts
+/** Opaque per-browser token. httpOnly, so page scripts cannot read or forge it. */
+declare const VISITOR_COOKIE = "ac_cid";
+/**
+ * Who the server thinks is commenting.
+ *
+ * The catalog is browsable without logging in, so there is no session to hang a
+ * comment on. `hash` is the only thing that authorises editing or deleting a
+ * comment later, and `alias` is the only name a reader ever sees.
+ */
+interface Visitor {
+  hash: string;
+  alias: string;
+}
+/** Who the server thinks is acting, whether or not they ever signed in. */
+type ActorKind = 'user' | 'visitor';
+/**
+ * One identity for every surface that needs one.
+ *
+ * `hash` is the secret-derived half: it authorises editing and withdrawing, is stored on
+ * rows, and never leaves the server. `publicId` is the half a client may hold — it
+ * identifies without authorising, which is what analytics needs and what the httpOnly
+ * cookie deliberately cannot give it. Same split better-auth already uses between its
+ * session cookie and `user.id`.
+ */
+interface Actor {
+  hash: string;
+  publicId: string;
+  alias: string;
+  kind: ActorKind;
+}
+/**
+ * Read the visitor token, issuing one when this browser has none yet.
+ *
+ * Called on every tRPC request rather than only when commenting: the cookie has to
+ * already exist by the time someone clicks Post, and issuing it on the read that
+ * renders the comment list is the one moment we know a page is open.
+ *
+ * `res` is absent on internally-created contexts (see createAcMiddleware), and
+ * those never comment — they get an identity derived from the token they carry, if
+ * any, and cannot be issued a new one.
+ */
+declare function resolveVisitor(req: {
+  headers: {
+    cookie?: string;
+  };
+}, res?: {
+  cookie: (name: string, value: string, options: Record<string, unknown>) => unknown;
+}): Visitor | null;
+/**
+ * A non-authorising id derived from the hash.
+ *
+ * Safe to hand a client: knowing it proves nothing and authorises nothing, because the
+ * check is always against the full hash of the cookie the browser actually sent.
+ */
+declare function publicIdFromHash(hash: string): string;
+/**
+ * Who is acting, signed in or not.
+ *
+ * `userId` is passed in rather than looked up, so this stays synchronous and testable in
+ * a node environment — the caller already has the session when it builds the request
+ * context. When login arrives this starts returning `kind: 'user'` and nothing
+ * downstream has to change.
+ */
+declare function resolveActor(req: {
+  headers: {
+    cookie?: string;
+  };
+}, res?: Parameters<typeof resolveVisitor>[1], userId?: string | null): Actor | null;
+/**
+ * A deterministic identity from a seed, for tests and local development.
+ *
+ * Returns the raw token *and* its hash, so a database fixture and a browser cookie can
+ * refer to the same person: seed rows with `hash`, hand the browser `token`. Without
+ * this, nothing scoped to one visitor is testable — the cookie is httpOnly on purpose,
+ * so page scripts cannot set it.
+ */
+declare function visitorFromSeed(seed: string): {
+  token: string;
+  hash: string;
+  publicId: string;
+  alias: string;
+};
+//#endregion
+export { Actor, ActorKind, VISITOR_COOKIE, Visitor, publicIdFromHash, resolveActor, resolveVisitor, visitorFromSeed };
+//# sourceMappingURL=visitorIdentity.d.mts.map

package/dist/modules/visitor/visitorIdentity.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"visitorIdentity.d.mts","names":[],"sources":["../../../src/modules/visitor/visitorIdentity.ts"],"mappings":";;cAIa,cAAA;;;;;AAWb;;;UAAiB,OAAA;EACf,IAAA;EACA,KAAA;AAAA;;KAIU,SAAA;;AAWZ;;;;;;;;UAAiB,KAAA;EACf,IAAA;EACA,QAAA;EACA,KAAA;EACA,IAAA,EAAM,SAAA;AAAA;;;;;;AAwIR;;;;;AAYA;iBA7CgB,cAAA,CACd,GAAA;EAAO,OAAA;IAAW,MAAA;EAAA;AAAA,GAClB,GAAA;EACE,MAAA,GACE,IAAA,UACA,KAAA,UACA,OAAA,EAAS,MAAA;AAAA,IAGZ,OAAA;;;;;;;iBAwBa,gBAAA,CAAiB,IAAA;;;;AA2CjC;;;;;iBA/BgB,YAAA,CACd,GAAA;EAAO,OAAA;IAAW,MAAA;EAAA;AAAA,GAClB,GAAA,GAAM,UAAA,QAAkB,cAAA,MACxB,MAAA,mBACC,KAAA;;;;;;;;;iBA2Ba,eAAA,CAAgB,IAAA;EAC9B,KAAA;EACA,IAAA;EACA,QAAA;EACA,KAAA;AAAA"}

package/dist/modules/{comments → visitor}/visitorIdentity.mjs

@@ -1,7 +1,7 @@
 import { getCookie } from "../../utils/cookies.mjs";
 import { createHash, randomUUID } from "node:crypto";
 
-//#region src/modules/comments/visitorIdentity.ts
+//#region src/modules/visitor/visitorIdentity.ts
 /** Opaque per-browser token. httpOnly, so page scripts cannot read or forge it. */
 const VISITOR_COOKIE = "ac_cid";
 const ONE_YEAR_MS = 365 * 24 * 60 * 60 * 1e3;
@@ -115,7 +115,58 @@ function resolveVisitor(req, res) {
 		alias: aliasForHash(hash)
 	};
 }
+/**
+* A non-authorising id derived from the hash.
+*
+* Safe to hand a client: knowing it proves nothing and authorises nothing, because the
+* check is always against the full hash of the cookie the browser actually sent.
+*/
+function publicIdFromHash(hash) {
+	return hash.slice(0, 16);
+}
+/**
+* Who is acting, signed in or not.
+*
+* `userId` is passed in rather than looked up, so this stays synchronous and testable in
+* a node environment — the caller already has the session when it builds the request
+* context. When login arrives this starts returning `kind: 'user'` and nothing
+* downstream has to change.
+*/
+function resolveActor(req, res, userId) {
+	if (userId) return {
+		hash: hashToken(`user:${userId}`),
+		publicId: publicIdFromHash(hashToken(`user:${userId}`)),
+		alias: aliasForHash(hashToken(`user:${userId}`)),
+		kind: "user"
+	};
+	const visitor = resolveVisitor(req, res);
+	if (!visitor) return null;
+	return {
+		hash: visitor.hash,
+		publicId: publicIdFromHash(visitor.hash),
+		alias: visitor.alias,
+		kind: "visitor"
+	};
+}
+/**
+* A deterministic identity from a seed, for tests and local development.
+*
+* Returns the raw token *and* its hash, so a database fixture and a browser cookie can
+* refer to the same person: seed rows with `hash`, hand the browser `token`. Without
+* this, nothing scoped to one visitor is testable — the cookie is httpOnly on purpose,
+* so page scripts cannot set it.
+*/
+function visitorFromSeed(seed) {
+	const token = createHash("sha256").update(`seed:${seed}`).digest("hex");
+	const hash = hashToken(token);
+	return {
+		token,
+		hash,
+		publicId: publicIdFromHash(hash),
+		alias: aliasForHash(hash)
+	};
+}
 
 //#endregion
-export { resolveVisitor };
+export { VISITOR_COOKIE, publicIdFromHash, resolveActor, resolveVisitor, visitorFromSeed };
 //# sourceMappingURL=visitorIdentity.mjs.map

package/dist/modules/visitor/visitorIdentity.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"visitorIdentity.mjs","names":[],"sources":["../../../src/modules/visitor/visitorIdentity.ts"],"sourcesContent":["import { createHash, randomUUID } from 'node:crypto'\nimport { getCookie } from '../../utils/cookies'\n\n/** Opaque per-browser token. httpOnly, so page scripts cannot read or forge it. */\nexport const VISITOR_COOKIE = 'ac_cid'\n\nconst ONE_YEAR_MS = 365 * 24 * 60 * 60 * 1000\n\n/**\n * Who the server thinks is commenting.\n *\n * The catalog is browsable without logging in, so there is no session to hang a\n * comment on. `hash` is the only thing that authorises editing or deleting a\n * comment later, and `alias` is the only name a reader ever sees.\n */\nexport interface Visitor {\n  hash: string\n  alias: string\n}\n\n/** Who the server thinks is acting, whether or not they ever signed in. */\nexport type ActorKind = 'user' | 'visitor'\n\n/**\n * One identity for every surface that needs one.\n *\n * `hash` is the secret-derived half: it authorises editing and withdrawing, is stored on\n * rows, and never leaves the server. `publicId` is the half a client may hold — it\n * identifies without authorising, which is what analytics needs and what the httpOnly\n * cookie deliberately cannot give it. Same split better-auth already uses between its\n * session cookie and `user.id`.\n */\nexport interface Actor {\n  hash: string\n  publicId: string\n  alias: string\n  kind: ActorKind\n}\n\nconst ADJECTIVES = [\n  'Ancient',\n  'Brave',\n  'Calm',\n  'Clever',\n  'Curious',\n  'Eager',\n  'Gentle',\n  'Happy',\n  'Honest',\n  'Humble',\n  'Jolly',\n  'Keen',\n  'Kind',\n  'Lively',\n  'Loyal',\n  'Merry',\n  'Mighty',\n  'Modest',\n  'Noble',\n  'Patient',\n  'Polite',\n  'Proud',\n  'Quiet',\n  'Rapid',\n  'Silent',\n  'Smooth',\n  'Steady',\n  'Subtle',\n  'Sunny',\n  'Swift',\n  'Tidy',\n  'Witty',\n]\n\nconst ANIMALS = [\n  'Badger',\n  'Beaver',\n  'Bison',\n  'Crane',\n  'Dolphin',\n  'Falcon',\n  'Ferret',\n  'Finch',\n  'Fox',\n  'Gecko',\n  'Heron',\n  'Ibex',\n  'Jackal',\n  'Kestrel',\n  'Lemur',\n  'Lynx',\n  'Magpie',\n  'Marten',\n  'Mole',\n  'Narwhal',\n  'Ocelot',\n  'Osprey',\n  'Otter',\n  'Panda',\n  'Puffin',\n  'Raven',\n  'Seal',\n  'Shrew',\n  'Stoat',\n  'Tapir',\n  'Vole',\n  'Walrus',\n]\n\n/**\n * A stable, readable name for a visitor hash, e.g. \"Curious Ferret\".\n *\n * Deterministic, so the same browser keeps the same name across comments — but it\n * is derived once and stored on the row, because widening these lists later would\n * otherwise rename every comment ever written.\n */\nexport function aliasForHash(hash: string): string {\n  // Two independent slices of the hash, so the two words vary independently.\n  const adjective =\n    ADJECTIVES[parseInt(hash.slice(0, 8), 16) % ADJECTIVES.length]\n  const animal = ANIMALS[parseInt(hash.slice(8, 16), 16) % ANIMALS.length]\n  return `${adjective} ${animal}`\n}\n\nfunction hashToken(token: string): string {\n  return createHash('sha256').update(token).digest('hex')\n}\n\n/**\n * Read the visitor token, issuing one when this browser has none yet.\n *\n * Called on every tRPC request rather than only when commenting: the cookie has to\n * already exist by the time someone clicks Post, and issuing it on the read that\n * renders the comment list is the one moment we know a page is open.\n *\n * `res` is absent on internally-created contexts (see createAcMiddleware), and\n * those never comment — they get an identity derived from the token they carry, if\n * any, and cannot be issued a new one.\n */\nexport function resolveVisitor(\n  req: { headers: { cookie?: string } },\n  res?: {\n    cookie: (\n      name: string,\n      value: string,\n      options: Record<string, unknown>,\n    ) => unknown\n  },\n): Visitor | null {\n  let token = getCookie(req, VISITOR_COOKIE)\n\n  if (!token) {\n    if (!res) return null\n    token = randomUUID()\n    res.cookie(VISITOR_COOKIE, token, {\n      httpOnly: true,\n      sameSite: 'lax',\n      path: '/',\n      maxAge: ONE_YEAR_MS,\n    })\n  }\n\n  const hash = hashToken(token)\n  return { hash, alias: aliasForHash(hash) }\n}\n\n/**\n * A non-authorising id derived from the hash.\n *\n * Safe to hand a client: knowing it proves nothing and authorises nothing, because the\n * check is always against the full hash of the cookie the browser actually sent.\n */\nexport function publicIdFromHash(hash: string): string {\n  return hash.slice(0, 16)\n}\n\n/**\n * Who is acting, signed in or not.\n *\n * `userId` is passed in rather than looked up, so this stays synchronous and testable in\n * a node environment — the caller already has the session when it builds the request\n * context. When login arrives this starts returning `kind: 'user'` and nothing\n * downstream has to change.\n */\nexport function resolveActor(\n  req: { headers: { cookie?: string } },\n  res?: Parameters<typeof resolveVisitor>[1],\n  userId?: string | null,\n): Actor | null {\n  if (userId) {\n    return {\n      hash: hashToken(`user:${userId}`),\n      publicId: publicIdFromHash(hashToken(`user:${userId}`)),\n      alias: aliasForHash(hashToken(`user:${userId}`)),\n      kind: 'user',\n    }\n  }\n  const visitor = resolveVisitor(req, res)\n  if (!visitor) return null\n  return {\n    hash: visitor.hash,\n    publicId: publicIdFromHash(visitor.hash),\n    alias: visitor.alias,\n    kind: 'visitor',\n  }\n}\n\n/**\n * A deterministic identity from a seed, for tests and local development.\n *\n * Returns the raw token *and* its hash, so a database fixture and a browser cookie can\n * refer to the same person: seed rows with `hash`, hand the browser `token`. Without\n * this, nothing scoped to one visitor is testable — the cookie is httpOnly on purpose,\n * so page scripts cannot set it.\n */\nexport function visitorFromSeed(seed: string): {\n  token: string\n  hash: string\n  publicId: string\n  alias: string\n} {\n  const token = createHash('sha256').update(`seed:${seed}`).digest('hex')\n  const hash = hashToken(token)\n  return {\n    token,\n    hash,\n    publicId: publicIdFromHash(hash),\n    alias: aliasForHash(hash),\n  }\n}\n"],"mappings":";;;;;AAIA,MAAa,iBAAiB;AAE9B,MAAM,cAAc,MAAM,KAAK,KAAK,KAAK;AAiCzC,MAAM,aAAa;CACjB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAED,MAAM,UAAU;CACd;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;;;;AASD,SAAgB,aAAa,MAAsB;AAKjD,QAAO,GAFL,WAAW,SAAS,KAAK,MAAM,GAAG,EAAE,EAAE,GAAG,GAAG,WAAW,QAErC,GADL,QAAQ,SAAS,KAAK,MAAM,GAAG,GAAG,EAAE,GAAG,GAAG,QAAQ;;AAInE,SAAS,UAAU,OAAuB;AACxC,QAAO,WAAW,SAAS,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM;;;;;;;;;;;;;AAczD,SAAgB,eACd,KACA,KAOgB;CAChB,IAAI,QAAQ,UAAU,KAAK,eAAe;AAE1C,KAAI,CAAC,OAAO;AACV,MAAI,CAAC,IAAK,QAAO;AACjB,UAAQ,YAAY;AACpB,MAAI,OAAO,gBAAgB,OAAO;GAChC,UAAU;GACV,UAAU;GACV,MAAM;GACN,QAAQ;GACT,CAAC;;CAGJ,MAAM,OAAO,UAAU,MAAM;AAC7B,QAAO;EAAE;EAAM,OAAO,aAAa,KAAK;EAAE;;;;;;;;AAS5C,SAAgB,iBAAiB,MAAsB;AACrD,QAAO,KAAK,MAAM,GAAG,GAAG;;;;;;;;;;AAW1B,SAAgB,aACd,KACA,KACA,QACc;AACd,KAAI,OACF,QAAO;EACL,MAAM,UAAU,QAAQ,SAAS;EACjC,UAAU,iBAAiB,UAAU,QAAQ,SAAS,CAAC;EACvD,OAAO,aAAa,UAAU,QAAQ,SAAS,CAAC;EAChD,MAAM;EACP;CAEH,MAAM,UAAU,eAAe,KAAK,IAAI;AACxC,KAAI,CAAC,QAAS,QAAO;AACrB,QAAO;EACL,MAAM,QAAQ;EACd,UAAU,iBAAiB,QAAQ,KAAK;EACxC,OAAO,QAAQ;EACf,MAAM;EACP;;;;;;;;;;AAWH,SAAgB,gBAAgB,MAK9B;CACA,MAAM,QAAQ,WAAW,SAAS,CAAC,OAAO,QAAQ,OAAO,CAAC,OAAO,MAAM;CACvE,MAAM,OAAO,UAAU,MAAM;AAC7B,QAAO;EACL;EACA;EACA,UAAU,iBAAiB,KAAK;EAChC,OAAO,aAAa,KAAK;EAC1B"}

package/dist/server/acTrpcContext.d.mts

@@ -1,5 +1,5 @@
 import { AppCatalogCompanySpecificBackend } from "../types/backend/companySpecificBackend.mjs";
-import { Visitor } from "../modules/comments/visitorIdentity.mjs";
+import { Actor } from "../modules/visitor/visitorIdentity.mjs";
 import { User } from "better-auth/types";
 
 //#region src/server/acTrpcContext.d.ts
@@ -8,23 +8,24 @@ interface AcTrpcContext {
   user: User | null;
   isAdmin: boolean;
   /**
-   * The anonymous browser behind this request, independent of `user` — the catalog
-   * is browsable logged out, and comments are attributed to this instead. Null when
-   * the context was built without a response to issue the cookie on.
+   * Who is acting on this request — the signed-in user when there is one, otherwise the
+   * anonymous browser behind it. The catalog is browsable logged out and feedback is
+   * attributed to this rather than to `user`. Null when the context was built without a
+   * response to issue the cookie on.
    */
-  visitor: Visitor | null;
+  actor: Actor | null;
 }
 interface AcTrpcContextOptions {
   companySpecificBackend: AppCatalogCompanySpecificBackend;
   user?: User | null;
   isAdmin?: boolean;
-  visitor?: Visitor | null;
+  actor?: Actor | null;
 }
 declare function createAcTrpcContext({
   companySpecificBackend,
   user,
   isAdmin,
-  visitor
+  actor
 }: AcTrpcContextOptions): AcTrpcContext;
 //#endregion
 export { AcTrpcContext, AcTrpcContextOptions, createAcTrpcContext };

package/dist/server/acTrpcContext.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"acTrpcContext.d.mts","names":[],"sources":["../../src/server/acTrpcContext.ts"],"mappings":";;;;;UAIiB,aAAA;EACf,sBAAA,EAAwB,gCAAA;EACxB,IAAA,EAAM,IAAA;EACN,OAAA;;;;;;EAMA,OAAA,EAAS,OAAA;AAAA;AAAA,UAGM,oBAAA;EACf,sBAAA,EAAwB,gCAAA;EACxB,IAAA,GAAO,IAAA;EACP,OAAA;EACA,OAAA,GAAU,OAAA;AAAA;AAAA,iBAGI,mBAAA,CAAA;EACd,sBAAA;EACA,IAAA;EACA,OAAA;EACA;AAAA,GACC,oBAAA,GAAuB,aAAA"}
+{"version":3,"file":"acTrpcContext.d.mts","names":[],"sources":["../../src/server/acTrpcContext.ts"],"mappings":";;;;;UAIiB,aAAA;EACf,sBAAA,EAAwB,gCAAA;EACxB,IAAA,EAAM,IAAA;EACN,OAAA;;;;;;;EAOA,KAAA,EAAO,KAAA;AAAA;AAAA,UAGQ,oBAAA;EACf,sBAAA,EAAwB,gCAAA;EACxB,IAAA,GAAO,IAAA;EACP,OAAA;EACA,KAAA,GAAQ,KAAA;AAAA;AAAA,iBAGM,mBAAA,CAAA;EACd,sBAAA;EACA,IAAA;EACA,OAAA;EACA;AAAA,GACC,oBAAA,GAAuB,aAAA"}

package/dist/server/acTrpcContext.mjs

@@ -1,10 +1,10 @@
 //#region src/server/acTrpcContext.ts
-function createAcTrpcContext({ companySpecificBackend, user = null, isAdmin = false, visitor = null }) {
+function createAcTrpcContext({ companySpecificBackend, user = null, isAdmin = false, actor = null }) {
 	return {
 		companySpecificBackend,
 		user,
 		isAdmin,
-		visitor
+		actor
 	};
 }
 

package/dist/server/acTrpcContext.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"acTrpcContext.mjs","names":[],"sources":["../../src/server/acTrpcContext.ts"],"sourcesContent":["import type { AppCatalogCompanySpecificBackend } from '../types'\nimport type { Visitor } from '../modules/comments/visitorIdentity'\nimport type { User } from 'better-auth/types'\n\nexport interface AcTrpcContext {\n  companySpecificBackend: AppCatalogCompanySpecificBackend\n  user: User | null\n  isAdmin: boolean\n  /**\n   * The anonymous browser behind this request, independent of `user` — the catalog\n   * is browsable logged out, and comments are attributed to this instead. Null when\n   * the context was built without a response to issue the cookie on.\n   */\n  visitor: Visitor | null\n}\n\nexport interface AcTrpcContextOptions {\n  companySpecificBackend: AppCatalogCompanySpecificBackend\n  user?: User | null\n  isAdmin?: boolean\n  visitor?: Visitor | null\n}\n\nexport function createAcTrpcContext({\n  companySpecificBackend,\n  user = null,\n  isAdmin = false,\n  visitor = null,\n}: AcTrpcContextOptions): AcTrpcContext {\n  return { companySpecificBackend, user, isAdmin, visitor }\n}\n"],"mappings":";AAuBA,SAAgB,oBAAoB,EAClC,wBACA,OAAO,MACP,UAAU,OACV,UAAU,QAC4B;AACtC,QAAO;EAAE;EAAwB;EAAM;EAAS;EAAS"}
+{"version":3,"file":"acTrpcContext.mjs","names":[],"sources":["../../src/server/acTrpcContext.ts"],"sourcesContent":["import type { AppCatalogCompanySpecificBackend } from '../types'\nimport type { Actor } from '../modules/visitor/visitorIdentity'\nimport type { User } from 'better-auth/types'\n\nexport interface AcTrpcContext {\n  companySpecificBackend: AppCatalogCompanySpecificBackend\n  user: User | null\n  isAdmin: boolean\n  /**\n   * Who is acting on this request — the signed-in user when there is one, otherwise the\n   * anonymous browser behind it. The catalog is browsable logged out and feedback is\n   * attributed to this rather than to `user`. Null when the context was built without a\n   * response to issue the cookie on.\n   */\n  actor: Actor | null\n}\n\nexport interface AcTrpcContextOptions {\n  companySpecificBackend: AppCatalogCompanySpecificBackend\n  user?: User | null\n  isAdmin?: boolean\n  actor?: Actor | null\n}\n\nexport function createAcTrpcContext({\n  companySpecificBackend,\n  user = null,\n  isAdmin = false,\n  actor = null,\n}: AcTrpcContextOptions): AcTrpcContext {\n  return { companySpecificBackend, user, isAdmin, actor }\n}\n"],"mappings":";AAwBA,SAAgB,oBAAoB,EAClC,wBACA,OAAO,MACP,UAAU,OACV,QAAQ,QAC8B;AACtC,QAAO;EAAE;EAAwB;EAAM;EAAS;EAAO"}

package/dist/server/controller.d.mts

@@ -1,7 +1,7 @@
 import { AppCatalogData, Resource } from "../types/common/appCatalogTypes.mjs";
 import { AcTrpcContext } from "./acTrpcContext.mjs";
 import { BetterAuth } from "../modules/auth/auth.mjs";
-import { CommentView } from "../modules/comments/service.mjs";
+import { FeedbackList, FeedbackView } from "../modules/feedback/service.mjs";
 import * as _trpc_server0 from "@trpc/server";
 import * as better_auth0 from "better-auth";
 
@@ -54,7 +54,7 @@ declare function createTrpcRouter(auth?: BetterAuth, options?: {
       meta: object;
     }>;
   }>>;
-  comments: _trpc_server0.TRPCBuiltRouter<{
+  feedback: _trpc_server0.TRPCBuiltRouter<{
     ctx: AcTrpcContext;
     meta: object;
     errorShape: _trpc_server0.TRPCDefaultErrorShape;
@@ -64,15 +64,22 @@ declare function createTrpcRouter(auth?: BetterAuth, options?: {
       input: {
         resourceSlug: string;
       };
-      output: CommentView[];
+      output: FeedbackList;
+      meta: object;
+    }>;
+    mine: _trpc_server0.TRPCQueryProcedure<{
+      input: void;
+      output: FeedbackView[];
       meta: object;
     }>;
     add: _trpc_server0.TRPCMutationProcedure<{
       input: {
-        resourceSlug: string;
-        body: string;
+        resourceSlug?: string | undefined;
+        subject?: string | undefined;
+        body?: string | undefined;
+        attachmentIds?: string[] | undefined;
       };
-      output: CommentView;
+      output: FeedbackView;
       meta: object;
     }>;
     edit: _trpc_server0.TRPCMutationProcedure<{
@@ -80,10 +87,10 @@ declare function createTrpcRouter(auth?: BetterAuth, options?: {
         id: string;
         body: string;
       };
-      output: CommentView;
+      output: FeedbackView;
       meta: object;
     }>;
-    remove: _trpc_server0.TRPCMutationProcedure<{
+    dismiss: _trpc_server0.TRPCMutationProcedure<{
       input: {
         id: string;
       };

package/dist/server/controller.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"controller.d.mts","names":[],"sources":["../../src/server/controller.ts"],"mappings":";;;;;;;;;;;;iBAmCgB,gBAAA,CACd,IAAA,GAAO,UAAA,EACP,OAAA;EAAY,eAAA;AAAA,kBAA2B,eAAA;OADtB,aAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAwCP,UAAA,GAAa,UAAA,QAAkB,gBAAA"}
+{"version":3,"file":"controller.d.mts","names":[],"sources":["../../src/server/controller.ts"],"mappings":";;;;;;;;;;;;iBAmCgB,gBAAA,CACd,IAAA,GAAO,UAAA,EACP,OAAA;EAAY,eAAA;AAAA,kBAA2B,eAAA;OADtB,aAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAwCP,UAAA,GAAa,UAAA,QAAkB,gBAAA"}

package/dist/server/controller.mjs

@@ -1,7 +1,7 @@
 import { getAppCatalogData, updateAiMemory, updateApp } from "../modules/appCatalog/service.mjs";
 import { createAuthRouter } from "../modules/auth/authRouter.mjs";
 import { publicProcedure, router, t } from "./trpcSetup.mjs";
-import { createCommentsRouter } from "../modules/comments/commentsRouter.mjs";
+import { createFeedbackRouter } from "../modules/feedback/feedbackRouter.mjs";
 import { z } from "zod";
 
 //#region src/server/controller.ts
@@ -42,7 +42,7 @@ function createTrpcRouter(auth, options) {
 				return updateAiMemory(input);
 			})
 		}),
-		comments: createCommentsRouter(),
+		feedback: createFeedbackRouter(),
 		auth: createAuthRouter(t, auth, options)
 	});
 }

package/dist/server/controller.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"controller.mjs","names":["updateAppService","updateAiMemoryService"],"sources":["../../src/server/controller.ts"],"sourcesContent":["import {\n  getAppCatalogData,\n  updateAiMemory as updateAiMemoryService,\n  updateApp as updateAppService,\n} from '../modules/appCatalog/service'\nimport type { AppCatalogData } from '../types'\nimport type { Resource } from '../types/common/appCatalogTypes'\n\nimport type { BetterAuth } from '../modules/auth/auth'\nimport { createAuthRouter } from '../modules/auth/authRouter.js'\nimport { createCommentsRouter } from '../modules/comments/commentsRouter'\nimport { publicProcedure, router, t } from './trpcSetup'\nimport { z } from 'zod'\n\nconst updateAppInputSchema = z.object({\n  id: z.string(),\n  data: z\n    .object({\n      displayName: z.string().optional(),\n      abbreviation: z.string().max(20).nullable().optional(),\n      slug: z.string().optional(),\n      appUrl: z.string().optional(),\n      description: z.string().optional(),\n      sources: z.array(z.string()).optional(),\n      aiPrompt: z.string().nullable().optional(),\n    })\n    .refine((d) => Object.keys(d).length > 0, {\n      message: 'At least one field required',\n    }),\n})\n\n/**\n * Create the main tRPC router with optional auth instance\n * @param auth - Optional Better Auth instance for auth-related queries\n */\nexport function createTrpcRouter(\n  auth?: BetterAuth,\n  options?: { devLoginEnabled?: boolean },\n) {\n  return router({\n    appCatalog: router({\n      getData: publicProcedure.query(\n        async ({ ctx }): Promise<AppCatalogData> => {\n          const baseData = await getAppCatalogData()\n          const versions = await ctx.companySpecificBackend.getVersionInfo?.()\n\n          return {\n            ...baseData,\n            ...(versions && { versions }),\n          }\n        },\n      ),\n      updateApp: publicProcedure\n        .input(updateAppInputSchema)\n        .mutation(async ({ input }): Promise<Resource> => {\n          return updateAppService(input)\n        }),\n      updateAiMemory: publicProcedure\n        .input(\n          z.object({\n            id: z.string(),\n            aiMemory: z.string().nullable(),\n          }),\n        )\n        .mutation(async ({ input }): Promise<Resource> => {\n          return updateAiMemoryService(input)\n        }),\n    }),\n\n    comments: createCommentsRouter(),\n\n    // Auth routes (requires auth instance)\n    auth: createAuthRouter(t, auth, options),\n  })\n}\n\nexport type TRPCRouter = ReturnType<typeof createTrpcRouter>\n"],"mappings":";;;;;;;AAcA,MAAM,uBAAuB,EAAE,OAAO;CACpC,IAAI,EAAE,QAAQ;CACd,MAAM,EACH,OAAO;EACN,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,cAAc,EAAE,QAAQ,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU;EACtD,MAAM,EAAE,QAAQ,CAAC,UAAU;EAC3B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACvC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EAC3C,CAAC,CACD,QAAQ,MAAM,OAAO,KAAK,EAAE,CAAC,SAAS,GAAG,EACxC,SAAS,+BACV,CAAC;CACL,CAAC;;;;;AAMF,SAAgB,iBACd,MACA,SACA;AACA,QAAO,OAAO;EACZ,YAAY,OAAO;GACjB,SAAS,gBAAgB,MACvB,OAAO,EAAE,UAAmC;IAC1C,MAAM,WAAW,MAAM,mBAAmB;IAC1C,MAAM,WAAW,MAAM,IAAI,uBAAuB,kBAAkB;AAEpE,WAAO;KACL,GAAG;KACH,GAAI,YAAY,EAAE,UAAU;KAC7B;KAEJ;GACD,WAAW,gBACR,MAAM,qBAAqB,CAC3B,SAAS,OAAO,EAAE,YAA+B;AAChD,WAAOA,UAAiB,MAAM;KAC9B;GACJ,gBAAgB,gBACb,MACC,EAAE,OAAO;IACP,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,QAAQ,CAAC,UAAU;IAChC,CAAC,CACH,CACA,SAAS,OAAO,EAAE,YAA+B;AAChD,WAAOC,eAAsB,MAAM;KACnC;GACL,CAAC;EAEF,UAAU,sBAAsB;EAGhC,MAAM,iBAAiB,GAAG,MAAM,QAAQ;EACzC,CAAC"}
+{"version":3,"file":"controller.mjs","names":["updateAppService","updateAiMemoryService"],"sources":["../../src/server/controller.ts"],"sourcesContent":["import {\n  getAppCatalogData,\n  updateAiMemory as updateAiMemoryService,\n  updateApp as updateAppService,\n} from '../modules/appCatalog/service'\nimport type { AppCatalogData } from '../types'\nimport type { Resource } from '../types/common/appCatalogTypes'\n\nimport type { BetterAuth } from '../modules/auth/auth'\nimport { createAuthRouter } from '../modules/auth/authRouter.js'\nimport { createFeedbackRouter } from '../modules/feedback/feedbackRouter'\nimport { publicProcedure, router, t } from './trpcSetup'\nimport { z } from 'zod'\n\nconst updateAppInputSchema = z.object({\n  id: z.string(),\n  data: z\n    .object({\n      displayName: z.string().optional(),\n      abbreviation: z.string().max(20).nullable().optional(),\n      slug: z.string().optional(),\n      appUrl: z.string().optional(),\n      description: z.string().optional(),\n      sources: z.array(z.string()).optional(),\n      aiPrompt: z.string().nullable().optional(),\n    })\n    .refine((d) => Object.keys(d).length > 0, {\n      message: 'At least one field required',\n    }),\n})\n\n/**\n * Create the main tRPC router with optional auth instance\n * @param auth - Optional Better Auth instance for auth-related queries\n */\nexport function createTrpcRouter(\n  auth?: BetterAuth,\n  options?: { devLoginEnabled?: boolean },\n) {\n  return router({\n    appCatalog: router({\n      getData: publicProcedure.query(\n        async ({ ctx }): Promise<AppCatalogData> => {\n          const baseData = await getAppCatalogData()\n          const versions = await ctx.companySpecificBackend.getVersionInfo?.()\n\n          return {\n            ...baseData,\n            ...(versions && { versions }),\n          }\n        },\n      ),\n      updateApp: publicProcedure\n        .input(updateAppInputSchema)\n        .mutation(async ({ input }): Promise<Resource> => {\n          return updateAppService(input)\n        }),\n      updateAiMemory: publicProcedure\n        .input(\n          z.object({\n            id: z.string(),\n            aiMemory: z.string().nullable(),\n          }),\n        )\n        .mutation(async ({ input }): Promise<Resource> => {\n          return updateAiMemoryService(input)\n        }),\n    }),\n\n    feedback: createFeedbackRouter(),\n\n    // Auth routes (requires auth instance)\n    auth: createAuthRouter(t, auth, options),\n  })\n}\n\nexport type TRPCRouter = ReturnType<typeof createTrpcRouter>\n"],"mappings":";;;;;;;AAcA,MAAM,uBAAuB,EAAE,OAAO;CACpC,IAAI,EAAE,QAAQ;CACd,MAAM,EACH,OAAO;EACN,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,cAAc,EAAE,QAAQ,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU;EACtD,MAAM,EAAE,QAAQ,CAAC,UAAU;EAC3B,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACvC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EAC3C,CAAC,CACD,QAAQ,MAAM,OAAO,KAAK,EAAE,CAAC,SAAS,GAAG,EACxC,SAAS,+BACV,CAAC;CACL,CAAC;;;;;AAMF,SAAgB,iBACd,MACA,SACA;AACA,QAAO,OAAO;EACZ,YAAY,OAAO;GACjB,SAAS,gBAAgB,MACvB,OAAO,EAAE,UAAmC;IAC1C,MAAM,WAAW,MAAM,mBAAmB;IAC1C,MAAM,WAAW,MAAM,IAAI,uBAAuB,kBAAkB;AAEpE,WAAO;KACL,GAAG;KACH,GAAI,YAAY,EAAE,UAAU;KAC7B;KAEJ;GACD,WAAW,gBACR,MAAM,qBAAqB,CAC3B,SAAS,OAAO,EAAE,YAA+B;AAChD,WAAOA,UAAiB,MAAM;KAC9B;GACJ,gBAAgB,gBACb,MACC,EAAE,OAAO;IACP,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,QAAQ,CAAC,UAAU;IAChC,CAAC,CACH,CACA,SAAS,OAAO,EAAE,YAA+B;AAChD,WAAOC,eAAsB,MAAM;KACnC;GACL,CAAC;EAEF,UAAU,sBAAsB;EAGhC,MAAM,iBAAiB,GAAG,MAAM,QAAQ;EACzC,CAAC"}

package/dist/types/common/appCatalogTypes.d.mts

@@ -170,6 +170,18 @@ interface Resource {
   tiers?: TierVariant[];
   /** Deep links that take one typed identifier — see {@link QuickJump}. */
   quickJumps?: QuickJump[];
+  /**
+   * What this resource's children are called, as a plural noun ("Accounts",
+   * "Namespaces", "Databases"). Set on the PARENT, not the children.
+   *
+   * The detail card names its children tab with this. Children are modelled as
+   * plain resources carrying a `parentSlug`, so nothing in the data says what
+   * kind of thing they are — and a tab reading "Accounts 430" tells the reader
+   * what is in there, where the generic fallback tells them nothing. Omit it and
+   * the card says "Resources"; only the handful of entries that actually have
+   * children need to set it.
+   */
+  childrenLabel?: string;
   /** Slug of parent resource (undefined for top-level applications) */
   parentSlug?: string;
   /** Tier slug (e.g. "prod", "dev") — for sub-resources */

package/dist/types/common/appCatalogTypes.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"appCatalogTypes.d.mts","names":[],"sources":["../../../src/types/common/appCatalogTypes.ts"],"mappings":";;;;;;;;UAmBiB,WAAA;EACf,QAAA;EACA,WAAA;EACA,WAAA;EACA,MAAA;EACA,aAAA,GAAgB,gBAAA;AAAA;;;;;;AAqClB;;;;;AAWA;;UA7BiB,SAAA;EAuCY;;;;;;EAhC3B,QAAA;EAgC2B;EA9B3B,KAAA;EACA,GAAA;AAAA;;UAQe,WAAA;EAyBQ;EAvBvB,IAAA;EACA,OAAA;AAAA;;;AAoCF;;;UA5BiB,cAAA;EAgCN;EA9BT,aAAA;EA0CmB;EAxCnB,cAAA;EAyBA;EAvBA,mBAAA;EAyBA;EAvBA,kBAAA;EAwBS;EAtBT,aAAA,GAAgB,WAAA;AAAA;;KAIN,aAAA;;KAQA,gBAAA;;;AAkCZ;;UA5BiB,WAAA;EACf,KAAA,EAAO,gBAAA;EA4BP;EA1BA,aAAA;EACA,OAAA,EAAS,aAAA;EACT,aAAA;EA4BW;EA1BX,KAAA;EACA,mBAAA;EA2BmB;;AAOrB;;;EA5BE,yBAAA;EA8BA;EA5BA,MAAA,EAAQ,WAAA;AAAA;;;AA4CV;;;;;;;UAhCiB,eAAA;EACf,UAAA;EACA,GAAA;EACA,SAAA;EA8BA;EA5BA,QAAA,GAAW,cAAA;EA+BX;EA7BA,KAAA,GAAQ,WAAA;AAAA;;;;;UAOO,SAAA;EA6Bf;EA3BA,aAAA;EAqCA;;;;;;EA9BA,mBAAA;EAmCA;EAjCA,OAAA;AAAA;;;;;UAOe,QAAA;EACf,EAAA;EACA,IAAA;EAwCQ;EAtCR,IAAA;EACA,WAAA;EACA,YAAA;EACA,SAAA;EACA,WAAA;EACA,KAAA;EACA,aAAA,GAAgB,gBAAA;EAChB,KAAA;EAiDA;;;;;;;;EAxCA,UAAA;EACA,IAAA;EACA,MAAA;EACA,KAAA;IAAU,GAAA;IAAa,KAAA;EAAA;EACvB,QAAA;EACA,aAAA;EACA,OAAA,cAAqB,eAAA;EACrB,UAAA;IAqEwB,0HAnEtB,IAAA,iCAiEF;IA/DE,eAAA,WAiEF;IA/DE,OAAA;EAAA;EA+DsB;EA5DxB,QAAA;EA+DmB;EA7DnB,QAAA;EA6DiD;EA3DjD,SAAA;EA4DU;EA1DV,KAAA,GAAQ,WAAA;EA0DF;EAxDN,UAAA,GAAa,SAAA;EAuDO;EAnDpB,UAAA;EAmDiD;EAjDjD,IAAA;EAkDO;EAhDP,OAAA;EAgDc;EA9Cd,eAAA;EAiDU;EA/CV,aAAA;;EAEA,cAAA;EA8Cc;EA5Cd,KAAA,GAAQ,MAAA;EAgDuB;;;;;;EAzC/B,SAAA,GAAY,SAAA;EA4CD;AAGb;;;;EAzCE,aAAA;EACA,cAAA;EACA,mBAAA;EA6CA;;;AAGF;;EA1CE,cAAA;EA2CU;EAzCV,SAAA;AAAA;AAAA,UAIe,WAAA;EACf,EAAA;EACA,IAAA;AAAA;AAAA,UAGe,qBAAA;EACf,MAAA;EACA,WAAA;EACA,WAAA;EACA,MAAA,EAAQ,gBAAA;AAAA;AAAA,KAGL,gBAAA,8BAA8C,CAAA,eAC/C,IAAA,CAAK,CAAA,EAAG,IAAA;AAAA,KAGA,iBAAA,GAAoB,gBAAA,CAC9B,cAAA;AAAA,UAIe,gBAAA;EACf,KAAA;EACA,WAAA;EACA,WAAA;AAAA;AAAA,UAGe,WAAA;EACf,WAAA;EACA,GAAA;EAmByB;EAjBzB,GAAA;EAYW;EAVX,MAAA;AAAA;AAAA,UAGe,cAAA;EACf,OAAA,GAAU,WAAA;EACV,QAAA,GAAW,WAAA;EACX,WAAA,GAAc,WAAA;AAAA;AAAA,UAGC,cAAA;EACf,SAAA,EAAW,QAAA;EACX,eAAA,EAAiB,qBAAA;EACjB,eAAA,EAAiB,iBAAA;EACjB,OAAA,EAAS,MAAA;EACT,MAAA,EAAQ,KAAA;EACR,QAAA,GAAW,cAAA;AAAA"}
+{"version":3,"file":"appCatalogTypes.d.mts","names":[],"sources":["../../../src/types/common/appCatalogTypes.ts"],"mappings":";;;;;;;;UAmBiB,WAAA;EACf,QAAA;EACA,WAAA;EACA,WAAA;EACA,MAAA;EACA,aAAA,GAAgB,gBAAA;AAAA;;;;;;AAqClB;;;;;AAWA;;UA7BiB,SAAA;EAuCY;;;;;;EAhC3B,QAAA;EAgC2B;EA9B3B,KAAA;EACA,GAAA;AAAA;;UAQe,WAAA;EAyBQ;EAvBvB,IAAA;EACA,OAAA;AAAA;;;AAoCF;;;UA5BiB,cAAA;EAgCN;EA9BT,aAAA;EA0CmB;EAxCnB,cAAA;EAyBA;EAvBA,mBAAA;EAyBA;EAvBA,kBAAA;EAwBS;EAtBT,aAAA,GAAgB,WAAA;AAAA;;KAIN,aAAA;;KAQA,gBAAA;;;AAkCZ;;UA5BiB,WAAA;EACf,KAAA,EAAO,gBAAA;EA4BP;EA1BA,aAAA;EACA,OAAA,EAAS,aAAA;EACT,aAAA;EA4BW;EA1BX,KAAA;EACA,mBAAA;EA2BmB;;AAOrB;;;EA5BE,yBAAA;EA8BA;EA5BA,MAAA,EAAQ,WAAA;AAAA;;;AA4CV;;;;;;;UAhCiB,eAAA;EACf,UAAA;EACA,GAAA;EACA,SAAA;EA8BA;EA5BA,QAAA,GAAW,cAAA;EA+BX;EA7BA,KAAA,GAAQ,WAAA;AAAA;;;;;UAOO,SAAA;EA6Bf;EA3BA,aAAA;EAqCA;;;;;;EA9BA,mBAAA;EAmCA;EAjCA,OAAA;AAAA;;;;;UAOe,QAAA;EACf,EAAA;EACA,IAAA;EAwCQ;EAtCR,IAAA;EACA,WAAA;EACA,YAAA;EACA,SAAA;EACA,WAAA;EACA,KAAA;EACA,aAAA,GAAgB,gBAAA;EAChB,KAAA;EA2DA;;;;;;;;EAlDA,UAAA;EACA,IAAA;EACA,MAAA;EACA,KAAA;IAAU,GAAA;IAAa,KAAA;EAAA;EACvB,QAAA;EACA,aAAA;EACA,OAAA,cAAqB,eAAA;EACrB,UAAA;IAiFQ,0HA/EN,IAAA,iCA4EF;IA1EE,eAAA,WA4EF;IA1EE,OAAA;EAAA;EA2EsB;EAxExB,QAAA;EA2EG;EAzEH,QAAA;EAyEmB;EAvEnB,SAAA;EAwEO;EAtEP,KAAA,GAAQ,WAAA;EAsEN;EApEF,UAAA,GAAa,SAAA;EAoEP;;;;;;;;;AAGR;;EA3DE,aAAA;EA2D8B;EAvD9B,UAAA;EA4De;EA1Df,IAAA;;EAEA,OAAA;EAyDA;EAvDA,eAAA;EAyDA;EAvDA,aAAA;EAuDW;EArDX,cAAA;EAwD0B;EAtD1B,KAAA,GAAQ,MAAA;EAsDkB;;;;;;EA/C1B,SAAA,GAAY,SAAA;EAwDG;;;;;EAlDf,aAAA;EACA,cAAA;EACA,mBAAA;EAiDA;;;;;EA3CA,cAAA;EA6CyB;EA3CzB,SAAA;AAAA;AAAA,UAIe,WAAA;EACf,EAAA;EACA,IAAA;AAAA;AAAA,UAGe,qBAAA;EACf,MAAA;EACA,WAAA;EACA,WAAA;EACA,MAAA,EAAQ,gBAAA;AAAA;AAAA,KAGL,gBAAA,8BAA8C,CAAA,eAC/C,IAAA,CAAK,CAAA,EAAG,IAAA;AAAA,KAGA,iBAAA,GAAoB,gBAAA,CAC9B,cAAA;AAAA,UAIe,gBAAA;EACf,KAAA;EACA,WAAA;EACA,WAAA;AAAA;AAAA,UAGe,WAAA;EACf,WAAA;EACA,GAAA;EAmBA;EAjBA,GAAA;EAiByB;EAfzB,MAAA;AAAA;AAAA,UAGe,cAAA;EACf,OAAA,GAAU,WAAA;EACV,QAAA,GAAW,WAAA;EACX,WAAA,GAAc,WAAA;AAAA;AAAA,UAGC,cAAA;EACf,SAAA,EAAW,QAAA;EACX,eAAA,EAAiB,qBAAA;EACjB,eAAA,EAAiB,iBAAA;EACjB,OAAA,EAAS,MAAA;EACT,MAAA,EAAQ,KAAA;EACR,QAAA,GAAW,cAAA;AAAA"}

package/dist/types/common/approvalMethodTypes.d.mts

@@ -38,6 +38,18 @@ type ApprovalMethod = {
    * Displayed approval method
    */
   displayName: string;
+  /**
+   * One or two words for places that cannot afford `displayName`, above all the
+   * detail card's access tab — which names the route it describes, so the reader
+   * knows what they are in for before they open it.
+   *
+   * `displayName` is written to stand alone in prose and routinely will not fit:
+   * a name ending in "Bot" or "Portal" repeats what the context already says,
+   * and the longest in use runs past thirty characters. Falls back to
+   * `displayName` when unset, so this is only worth setting where that reads
+   * badly in a tab.
+   */
+  shortName?: string;
   /**
    * Optionally - older name of approval method if there were migration in organization.
    */

package/dist/types/common/approvalMethodTypes.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"approvalMethodTypes.d.mts","names":[],"sources":["../../../src/types/common/approvalMethodTypes.ts"],"mappings":";;AAWA;;;;;KAAY,kBAAA;;;;UAUK,aAAA;EACf,GAAA;EACA,IAAA;EACA,WAAA;AAAA;AAMF;;;AAAA,UAAiB,gBAAA;EACf,WAAA;EACA,UAAA;AAAA;;;;UAMe,YAAA;;;;KAOL,oBAAA,GACR,aAAA,GACA,gBAAA,GACA,YAAA;;;;KAKQ,cAAA;EACV,IAAA;EANc;;AAKhB;EAKE,WAAA;;;;EAIA,iBAAA;EACA,SAAA,GAAY,IAAA;EACZ,SAAA,GAAY,IAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,aAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,gBAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,YAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,YAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,YAAA;AAAA;;;;UAWG,OAAA;EAhBX;;;EAoBJ,WAAA;EAfI;;;EAmBJ,WAAA;EARe;;;EAYf,UAAA;AAAA;;;;UAMe,WAAA;EACf,KAAA;EACA,GAAA;AAAA;;;AAMF;UAAiB,gBAAA;;;;EAIf,kBAAA;EASA;;;EAJA,QAAA;EAmBA;;;EAfA,aAAA;EAmBkB;AAIpB;;EAnBE,wBAAA;EAmB0B;;AAG5B;EAjBE,KAAA,GAAQ,OAAA;;;;;EAMR,aAAA;;;;EAIA,IAAA,GAAO,WAAA;AAAA;;KAIG,aAAA,GAAgB,gBAAA;;KAGhB,IAAA,GAAO,OAAA"}
+{"version":3,"file":"approvalMethodTypes.d.mts","names":[],"sources":["../../../src/types/common/approvalMethodTypes.ts"],"mappings":";;AAWA;;;;;KAAY,kBAAA;;;;UAUK,aAAA;EACf,GAAA;EACA,IAAA;EACA,WAAA;AAAA;AAMF;;;AAAA,UAAiB,gBAAA;EACf,WAAA;EACA,UAAA;AAAA;;;;UAMe,YAAA;;;;KAOL,oBAAA,GACR,aAAA,GACA,gBAAA,GACA,YAAA;;;;KAKQ,cAAA;EACV,IAAA;EANc;;AAKhB;EAKE,WAAA;;;;;;;;;;;;EAYA,SAAA;EAAA;;;EAIA,iBAAA;EACA,SAAA,GAAY,IAAA;EACZ,SAAA,GAAY,IAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,aAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,gBAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,YAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,YAAA;AAAA;EAGR,IAAA;EACA,MAAA,EAAQ,YAAA;AAAA;;AAWd;;UAAiB,OAAA;EAAO;;;EAItB,WAAA;EAQU;;AAMZ;EAVE,WAAA;;;;EAIA,UAAA;AAAA;;;;UAMe,WAAA;EACf,KAAA;EACA,GAAA;AAAA;;;;UAMe,gBAAA;EAgCG;;AAIpB;EAhCE,kBAAA;;;;EAKA,QAAA;EA8Bc;;;EA1Bd,aAAA;;;;EAIA,wBAAA;;;;EAKA,KAAA,GAAQ,OAAA;;;;;EAMR,aAAA;;;;EAIA,IAAA,GAAO,WAAA;AAAA;;KAIG,aAAA,GAAgB,gBAAA;;KAGhB,IAAA,GAAO,OAAA"}