@koda-sl/baker-cli 0.264.0 → 0.265.0

package/dist/cli.js

@@ -12503,6 +12503,22 @@ var analyticsBeaconPayloadSchema = z24.object({
   siteKey: z24.string().max(64).optional()
 });
 
+// ../api/src/analytics/submissionAnswers.ts
+var MAX_ANSWER_CHARS = 16384;
+var MAX_ANSWER_NAME_CHARS = 120;
+var TRUNCATED = "\u2026";
+function cutToLength(value, max) {
+  if (value.length <= max) return value;
+  return `${[...value].slice(0, max - 1).join("")}${TRUNCATED}`;
+}
+function boundSubmissionAnswers(answers) {
+  const kept = {};
+  for (const [name, value] of Object.entries(answers)) {
+    kept[cutToLength(name, MAX_ANSWER_NAME_CHARS)] = cutToLength(value, MAX_ANSWER_CHARS);
+  }
+  return kept;
+}
+
 // ../api/src/analytics/trackingTemplate.ts
 function placeholderKey(raw) {
   return raw.replace(/[{}]/g, "").replace(/^_+|_+$/g, "").trim().toLowerCase();
@@ -13888,29 +13904,48 @@ var analyticsTrackingResponseSchema = z25.object({
   data: z25.object({ days: z25.number(), platforms: z25.array(analyticsTrackingPlatformSchema) }),
   hints: z25.array(z25.string()).optional()
 });
+var boundedReference = (max) => z25.string().transform((value) => cutToLength(value, max));
 var submissionRecordRequestSchema = z25.object({
-  /** Injected by the Worker from the host or the site key. Never from the page. */
+  /**
+   * Injected by the Worker from the host or the site key. Never from the page.
+   *
+   * One of the two fields that is still required, because a copy that cannot
+   * be filed under a company cannot be found again by anybody. Bounding it
+   * would produce a row belonging to a company that does not exist, which is
+   * worse than refusing — this is the case where refusing is right.
+   */
   companyId: z25.string().min(1),
   /** Shared with every destination this submit was sent to, and with its event. */
-  submissionId: z25.string().min(1).max(128),
-  flowSlug: z25.string().max(120).default(""),
-  nodeId: z25.string().max(120).default(""),
-  nodeType: z25.string().max(40).default(""),
-  landingId: z25.string().max(120).default(""),
-  release: z25.string().max(64).default(""),
-  pageUrl: z25.string().max(2048).default(""),
+  submissionId: z25.string().min(1).pipe(boundedReference(128)),
+  flowSlug: boundedReference(120).default(""),
+  nodeId: boundedReference(120).default(""),
+  nodeType: boundedReference(40).default(""),
+  landingId: boundedReference(120).default(""),
+  release: boundedReference(64).default(""),
+  pageUrl: boundedReference(2048).default(""),
   /**
    * A SHA-256 digest, or absent. Never an address.
    *
    * The join from a recovered copy to every session the same person had,
    * without anybody having to open the copy to get there.
    */
-  identityHash: z25.string().max(128).optional(),
-  identityKind: z25.enum(["email", "phone"]).optional(),
+  identityHash: boundedReference(128).optional(),
+  /**
+   * Degraded rather than refused, like everything else here: an unrecognised
+   * kind costs the copy one label, and refusing it would cost the copy.
+   */
+  identityKind: z25.enum(["email", "phone"]).optional().catch(void 0),
   /** Injected by the Worker's edge. Kept exactly here and as a /24 everywhere else. */
-  clientIp: z25.string().max(64).nullish(),
-  /** Every answer on the step, free text included. Sealed on arrival. */
-  answers: z25.record(z25.string().max(120), z25.string().max(4096))
+  clientIp: boundedReference(64).nullish(),
+  /**
+   * Every answer on the step, free text included. Sealed on arrival.
+   *
+   * Bounded rather than length-checked, and that is the whole of it: a `max()`
+   * here refused the **entire copy** over one long answer, so a visitor who
+   * pasted a paragraph into a free-text field lost the email and the budget
+   * beside it too. See {@link boundSubmissionAnswers}.
+   */
+  answers: z25.record(z25.string(), z25.string()).transform(boundSubmissionAnswers)
 });
 
 // src/commands/ads/google/mapping-hints.ts