@oxyhq/crowdsource-contracts 0.1.0

package/dist/reputation-events.d.ts

@@ -0,0 +1,349 @@
+/**
+ * The internal reputation event (§11.5, §11.6, §11.7).
+ *
+ * This is the only thing CrowdSource ever sends toward Oxy Trust, and it is a
+ * statement, not an instruction. "CrowdSource does not write to reputation
+ * collections. It publishes an authenticated internal event" (§11.5), and Oxy
+ * Trust's own consequence engine decides what, if anything, follows. Nothing in
+ * this payload names points, a tier, a strike or a standing: an application —
+ * and CrowdSource on its behalf — never chooses an Oxy reputation figure.
+ *
+ * Three of §11.7's eight pre-effect validations are structural, and all three
+ * are moved into the type rather than left to a runtime check that a future
+ * refactor can drop:
+ *
+ *   * §11.7.4 — `subject.bindingProofId` is required. "No binding proof, no Oxy
+ *     Trust effect" becomes an event that cannot be constructed.
+ *   * §11.7.5 — a finding's scope must be `oxy_network` or `identity_integrity`.
+ *     `application_local` cannot appear here at all, which is §6.5's rule that
+ *     a local restriction does not become a global sanction, enforced at the
+ *     wire rather than by the receiver's diligence.
+ *   * §11.7.8 — the decision may not be superseded or corrected, so the status
+ *     enum has only the two values that may carry an effect (§11.7.3).
+ *
+ * The remaining five are stateful — who signed it, whether this event was seen
+ * before, whether the incident already produced an equivalent effect — and stay
+ * with the bridge.
+ *
+ * This is the one payload in the package that is `.strict()` in the OUTBOUND
+ * direction. §10.11's rule about unknown fields has an explicit exception for
+ * "where the schema forbids them for safety", and this is that case twice over:
+ * a finding here deliberately carries no `resourceIds` and no free text, so
+ * that nothing about the reviewed material reaches a reputation ledger or a
+ * signed attestation, and an unrecognised field is exactly how that would
+ * happen. Forward compatibility is handled by the `.v1` in the event type.
+ */
+import { z } from 'zod';
+/**
+ * §11.6 names one event type. §11.5 names four bridge operations — apply,
+ * finalize, reverse, reconcile — so siblings are expected, but the plan does
+ * not write them and they are not invented here. Adding one is additive: a new
+ * literal and a new variant, with the `.v1` suffix carrying the version.
+ */
+export declare const MODERATION_DECISION_FINALIZED_EVENT_TYPE = "moderation.decision.finalized.v1";
+/**
+ * §11.7.3 and §11.7.8 together: an effect may follow a final decision or,
+ * where policy allows, a provisional one — and never a superseded or corrected
+ * one. Those two states are absent from this enum rather than rejected by a
+ * refinement, so the impossibility is visible in the type.
+ */
+export declare const REPUTATION_EVENT_DECISION_STATUSES: readonly ["provisional", "final"];
+export declare const ReputationEventDecisionStatusSchema: z.ZodEnum<{
+    provisional: "provisional";
+    final: "final";
+}>;
+export type ReputationEventDecisionStatus = z.infer<typeof ReputationEventDecisionStatusSchema>;
+/**
+ * Who the effect would land on (§11.6 `subject`).
+ *
+ * `bindingProofId` is required, unconditionally — see §11.7.4 above. The
+ * envelope's `principalBindings` make the same proof optional for non-Oxy
+ * principal types, because those can never reach this event; here there is
+ * nothing to be lenient about.
+ */
+export declare const ReputationEventSubjectSchema: z.ZodObject<{
+    principalType: z.ZodEnum<{
+        oxy_user: "oxy_user";
+        local_user: "local_user";
+        organization: "organization";
+        bot: "bot";
+        federated_actor: "federated_actor";
+    }>;
+    principalId: z.ZodString;
+    bindingProofId: z.ZodString;
+}, z.core.$strict>;
+export type ReputationEventSubject = z.infer<typeof ReputationEventSubjectSchema>;
+/**
+ * A finding as Oxy Trust sees it (§11.6).
+ *
+ * Deliberately narrower than a `DecisionFinding`: no `resourceIds`, no policy
+ * rule ids, no text. Oxy Trust needs to know what was confirmed, how serious it
+ * was, how far it reaches and whose conduct it was — it does not need to know
+ * which piece of content it happened on, and §13.5's minimisation plus the
+ * invariant that sensitive content never appears in logs or public attestations
+ * mean it must not be told.
+ *
+ * `attribution` is required here where it is optional on a decision finding: an
+ * effect must land on somebody, and a finding that attributes nothing has
+ * nothing to contribute to this event.
+ */
+export declare const ReputationEventFindingSchema: z.ZodObject<{
+    code: z.ZodEnum<{
+        "integrity.spam": "integrity.spam";
+        "integrity.scam": "integrity.scam";
+        "integrity.fraud": "integrity.fraud";
+        "integrity.impersonation": "integrity.impersonation";
+        "integrity.coordinated_manipulation": "integrity.coordinated_manipulation";
+        "harassment.insult": "harassment.insult";
+        "harassment.targeted_abuse": "harassment.targeted_abuse";
+        "harassment.sexual_harassment": "harassment.sexual_harassment";
+        "harassment.doxxing": "harassment.doxxing";
+        "harassment.credible_threat": "harassment.credible_threat";
+        "hate.dehumanization": "hate.dehumanization";
+        "hate.slur": "hate.slur";
+        "hate.incitement": "hate.incitement";
+        "hate.protected_targeting": "hate.protected_targeting";
+        "violence.graphic": "violence.graphic";
+        "violence.threat": "violence.threat";
+        "violence.instruction": "violence.instruction";
+        "violence.celebration": "violence.celebration";
+        "sexual_content.nudity": "sexual_content.nudity";
+        "sexual_content.explicit_activity": "sexual_content.explicit_activity";
+        "sexual_content.non_consensual": "sexual_content.non_consensual";
+        "sexual_content.exploitation": "sexual_content.exploitation";
+        "child_safety.sexualization": "child_safety.sexualization";
+        "child_safety.grooming": "child_safety.grooming";
+        "child_safety.exploitation": "child_safety.exploitation";
+        "self_harm.promotion": "self_harm.promotion";
+        "self_harm.instruction": "self_harm.instruction";
+        "self_harm.imminent_risk": "self_harm.imminent_risk";
+        "privacy.personal_information": "privacy.personal_information";
+        "privacy.intimate_media": "privacy.intimate_media";
+        "privacy.location_exposure": "privacy.location_exposure";
+        "commerce.prohibited_item": "commerce.prohibited_item";
+        "commerce.counterfeit": "commerce.counterfeit";
+        "commerce.misleading_listing": "commerce.misleading_listing";
+        "commerce.unsafe_product": "commerce.unsafe_product";
+        "platform_abuse.ban_evasion": "platform_abuse.ban_evasion";
+        "platform_abuse.report_abuse": "platform_abuse.report_abuse";
+        "platform_abuse.automation_abuse": "platform_abuse.automation_abuse";
+        "other.policy_specific": "other.policy_specific";
+        "other.unclassifiable": "other.unclassifiable";
+    }>;
+    severity: z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+        critical: "critical";
+    }>;
+    scope: z.ZodEnum<{
+        oxy_network: "oxy_network";
+        identity_integrity: "identity_integrity";
+    }>;
+    attribution: z.ZodEnum<{
+        author: "author";
+        reporter: "reporter";
+        reviewer: "reviewer";
+    }>;
+}, z.core.$strict>;
+export type ReputationEventFinding = z.infer<typeof ReputationEventFindingSchema>;
+/**
+ * `moderation.decision.finalized.v1` (§11.6).
+ *
+ * `incidentId` is what makes "one penalty per incident" enforceable: it is the
+ * first component of the effect's idempotency key (Appendix D:
+ * `incidentId + principalId + effectType + decisionRevision`), so the same
+ * incident reaching the bridge twice — from a replay, from a redelivery, from
+ * two cases that were merged — produces one effect.
+ *
+ * `proofHash` binds the event to the decision it reports, so an effect can be
+ * explained and, if the decision is later corrected, reversed against the exact
+ * revision that caused it.
+ */
+export declare const ModerationDecisionFinalizedEventSchema: z.ZodObject<{
+    eventId: z.ZodString;
+    type: z.ZodLiteral<"moderation.decision.finalized.v1">;
+    caseId: z.ZodString;
+    incidentId: z.ZodString;
+    decisionId: z.ZodString;
+    decisionRevision: z.ZodNumber;
+    applicationId: z.ZodString;
+    subject: z.ZodObject<{
+        principalType: z.ZodEnum<{
+            oxy_user: "oxy_user";
+            local_user: "local_user";
+            organization: "organization";
+            bot: "bot";
+            federated_actor: "federated_actor";
+        }>;
+        principalId: z.ZodString;
+        bindingProofId: z.ZodString;
+    }, z.core.$strict>;
+    findings: z.ZodArray<z.ZodObject<{
+        code: z.ZodEnum<{
+            "integrity.spam": "integrity.spam";
+            "integrity.scam": "integrity.scam";
+            "integrity.fraud": "integrity.fraud";
+            "integrity.impersonation": "integrity.impersonation";
+            "integrity.coordinated_manipulation": "integrity.coordinated_manipulation";
+            "harassment.insult": "harassment.insult";
+            "harassment.targeted_abuse": "harassment.targeted_abuse";
+            "harassment.sexual_harassment": "harassment.sexual_harassment";
+            "harassment.doxxing": "harassment.doxxing";
+            "harassment.credible_threat": "harassment.credible_threat";
+            "hate.dehumanization": "hate.dehumanization";
+            "hate.slur": "hate.slur";
+            "hate.incitement": "hate.incitement";
+            "hate.protected_targeting": "hate.protected_targeting";
+            "violence.graphic": "violence.graphic";
+            "violence.threat": "violence.threat";
+            "violence.instruction": "violence.instruction";
+            "violence.celebration": "violence.celebration";
+            "sexual_content.nudity": "sexual_content.nudity";
+            "sexual_content.explicit_activity": "sexual_content.explicit_activity";
+            "sexual_content.non_consensual": "sexual_content.non_consensual";
+            "sexual_content.exploitation": "sexual_content.exploitation";
+            "child_safety.sexualization": "child_safety.sexualization";
+            "child_safety.grooming": "child_safety.grooming";
+            "child_safety.exploitation": "child_safety.exploitation";
+            "self_harm.promotion": "self_harm.promotion";
+            "self_harm.instruction": "self_harm.instruction";
+            "self_harm.imminent_risk": "self_harm.imminent_risk";
+            "privacy.personal_information": "privacy.personal_information";
+            "privacy.intimate_media": "privacy.intimate_media";
+            "privacy.location_exposure": "privacy.location_exposure";
+            "commerce.prohibited_item": "commerce.prohibited_item";
+            "commerce.counterfeit": "commerce.counterfeit";
+            "commerce.misleading_listing": "commerce.misleading_listing";
+            "commerce.unsafe_product": "commerce.unsafe_product";
+            "platform_abuse.ban_evasion": "platform_abuse.ban_evasion";
+            "platform_abuse.report_abuse": "platform_abuse.report_abuse";
+            "platform_abuse.automation_abuse": "platform_abuse.automation_abuse";
+            "other.policy_specific": "other.policy_specific";
+            "other.unclassifiable": "other.unclassifiable";
+        }>;
+        severity: z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+            critical: "critical";
+        }>;
+        scope: z.ZodEnum<{
+            oxy_network: "oxy_network";
+            identity_integrity: "identity_integrity";
+        }>;
+        attribution: z.ZodEnum<{
+            author: "author";
+            reporter: "reporter";
+            reviewer: "reviewer";
+        }>;
+    }, z.core.$strict>>;
+    decisionStatus: z.ZodEnum<{
+        provisional: "provisional";
+        final: "final";
+    }>;
+    policyVersions: z.ZodObject<{
+        universal: z.ZodString;
+        application: z.ZodString;
+        oxyConduct: z.ZodString;
+    }, z.core.$strict>;
+    proofHash: z.ZodString;
+}, z.core.$strict>;
+export type ModerationDecisionFinalizedEvent = z.infer<typeof ModerationDecisionFinalizedEventSchema>;
+/**
+ * Every reputation event CrowdSource emits.
+ *
+ * A union of one today. It exists so consumers switch on `type` from the start
+ * and adding §11.5's remaining operations does not change how they are written.
+ */
+export declare const ReputationEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    eventId: z.ZodString;
+    type: z.ZodLiteral<"moderation.decision.finalized.v1">;
+    caseId: z.ZodString;
+    incidentId: z.ZodString;
+    decisionId: z.ZodString;
+    decisionRevision: z.ZodNumber;
+    applicationId: z.ZodString;
+    subject: z.ZodObject<{
+        principalType: z.ZodEnum<{
+            oxy_user: "oxy_user";
+            local_user: "local_user";
+            organization: "organization";
+            bot: "bot";
+            federated_actor: "federated_actor";
+        }>;
+        principalId: z.ZodString;
+        bindingProofId: z.ZodString;
+    }, z.core.$strict>;
+    findings: z.ZodArray<z.ZodObject<{
+        code: z.ZodEnum<{
+            "integrity.spam": "integrity.spam";
+            "integrity.scam": "integrity.scam";
+            "integrity.fraud": "integrity.fraud";
+            "integrity.impersonation": "integrity.impersonation";
+            "integrity.coordinated_manipulation": "integrity.coordinated_manipulation";
+            "harassment.insult": "harassment.insult";
+            "harassment.targeted_abuse": "harassment.targeted_abuse";
+            "harassment.sexual_harassment": "harassment.sexual_harassment";
+            "harassment.doxxing": "harassment.doxxing";
+            "harassment.credible_threat": "harassment.credible_threat";
+            "hate.dehumanization": "hate.dehumanization";
+            "hate.slur": "hate.slur";
+            "hate.incitement": "hate.incitement";
+            "hate.protected_targeting": "hate.protected_targeting";
+            "violence.graphic": "violence.graphic";
+            "violence.threat": "violence.threat";
+            "violence.instruction": "violence.instruction";
+            "violence.celebration": "violence.celebration";
+            "sexual_content.nudity": "sexual_content.nudity";
+            "sexual_content.explicit_activity": "sexual_content.explicit_activity";
+            "sexual_content.non_consensual": "sexual_content.non_consensual";
+            "sexual_content.exploitation": "sexual_content.exploitation";
+            "child_safety.sexualization": "child_safety.sexualization";
+            "child_safety.grooming": "child_safety.grooming";
+            "child_safety.exploitation": "child_safety.exploitation";
+            "self_harm.promotion": "self_harm.promotion";
+            "self_harm.instruction": "self_harm.instruction";
+            "self_harm.imminent_risk": "self_harm.imminent_risk";
+            "privacy.personal_information": "privacy.personal_information";
+            "privacy.intimate_media": "privacy.intimate_media";
+            "privacy.location_exposure": "privacy.location_exposure";
+            "commerce.prohibited_item": "commerce.prohibited_item";
+            "commerce.counterfeit": "commerce.counterfeit";
+            "commerce.misleading_listing": "commerce.misleading_listing";
+            "commerce.unsafe_product": "commerce.unsafe_product";
+            "platform_abuse.ban_evasion": "platform_abuse.ban_evasion";
+            "platform_abuse.report_abuse": "platform_abuse.report_abuse";
+            "platform_abuse.automation_abuse": "platform_abuse.automation_abuse";
+            "other.policy_specific": "other.policy_specific";
+            "other.unclassifiable": "other.unclassifiable";
+        }>;
+        severity: z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+            critical: "critical";
+        }>;
+        scope: z.ZodEnum<{
+            oxy_network: "oxy_network";
+            identity_integrity: "identity_integrity";
+        }>;
+        attribution: z.ZodEnum<{
+            author: "author";
+            reporter: "reporter";
+            reviewer: "reviewer";
+        }>;
+    }, z.core.$strict>>;
+    decisionStatus: z.ZodEnum<{
+        provisional: "provisional";
+        final: "final";
+    }>;
+    policyVersions: z.ZodObject<{
+        universal: z.ZodString;
+        application: z.ZodString;
+        oxyConduct: z.ZodString;
+    }, z.core.$strict>;
+    proofHash: z.ZodString;
+}, z.core.$strict>], "type">;
+export type ReputationEvent = z.infer<typeof ReputationEventSchema>;
+//# sourceMappingURL=reputation-events.d.ts.map

package/dist/reputation-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reputation-events.d.ts","sourceRoot":"","sources":["../src/reputation-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB;;;;;GAKG;AACH,eAAO,MAAM,wCAAwC,qCAAqC,CAAC;AAE3F;;;;;GAKG;AACH,eAAO,MAAM,kCAAkC,mCAAoC,CAAC;AACpF,eAAO,MAAM,mCAAmC;;;EAA6C,CAAC;AAC9F,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;kBAIvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAKvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAajD,CAAC;AACH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACpD,OAAO,sCAAsC,CAC9C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAEhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/reputation-events.js

@@ -0,0 +1,128 @@
+"use strict";
+/**
+ * The internal reputation event (§11.5, §11.6, §11.7).
+ *
+ * This is the only thing CrowdSource ever sends toward Oxy Trust, and it is a
+ * statement, not an instruction. "CrowdSource does not write to reputation
+ * collections. It publishes an authenticated internal event" (§11.5), and Oxy
+ * Trust's own consequence engine decides what, if anything, follows. Nothing in
+ * this payload names points, a tier, a strike or a standing: an application —
+ * and CrowdSource on its behalf — never chooses an Oxy reputation figure.
+ *
+ * Three of §11.7's eight pre-effect validations are structural, and all three
+ * are moved into the type rather than left to a runtime check that a future
+ * refactor can drop:
+ *
+ *   * §11.7.4 — `subject.bindingProofId` is required. "No binding proof, no Oxy
+ *     Trust effect" becomes an event that cannot be constructed.
+ *   * §11.7.5 — a finding's scope must be `oxy_network` or `identity_integrity`.
+ *     `application_local` cannot appear here at all, which is §6.5's rule that
+ *     a local restriction does not become a global sanction, enforced at the
+ *     wire rather than by the receiver's diligence.
+ *   * §11.7.8 — the decision may not be superseded or corrected, so the status
+ *     enum has only the two values that may carry an effect (§11.7.3).
+ *
+ * The remaining five are stateful — who signed it, whether this event was seen
+ * before, whether the incident already produced an equivalent effect — and stay
+ * with the bridge.
+ *
+ * This is the one payload in the package that is `.strict()` in the OUTBOUND
+ * direction. §10.11's rule about unknown fields has an explicit exception for
+ * "where the schema forbids them for safety", and this is that case twice over:
+ * a finding here deliberately carries no `resourceIds` and no free text, so
+ * that nothing about the reviewed material reaches a reputation ledger or a
+ * signed attestation, and an unrecognised field is exactly how that would
+ * happen. Forward compatibility is handled by the `.v1` in the event type.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ReputationEventSchema = exports.ModerationDecisionFinalizedEventSchema = exports.ReputationEventFindingSchema = exports.ReputationEventSubjectSchema = exports.ReputationEventDecisionStatusSchema = exports.REPUTATION_EVENT_DECISION_STATUSES = exports.MODERATION_DECISION_FINALIZED_EVENT_TYPE = void 0;
+const zod_1 = require("zod");
+const primitives_1 = require("./primitives");
+const case_envelope_1 = require("./case-envelope");
+const policies_1 = require("./policies");
+const taxonomy_1 = require("./taxonomy");
+/**
+ * §11.6 names one event type. §11.5 names four bridge operations — apply,
+ * finalize, reverse, reconcile — so siblings are expected, but the plan does
+ * not write them and they are not invented here. Adding one is additive: a new
+ * literal and a new variant, with the `.v1` suffix carrying the version.
+ */
+exports.MODERATION_DECISION_FINALIZED_EVENT_TYPE = 'moderation.decision.finalized.v1';
+/**
+ * §11.7.3 and §11.7.8 together: an effect may follow a final decision or,
+ * where policy allows, a provisional one — and never a superseded or corrected
+ * one. Those two states are absent from this enum rather than rejected by a
+ * refinement, so the impossibility is visible in the type.
+ */
+exports.REPUTATION_EVENT_DECISION_STATUSES = ['provisional', 'final'];
+exports.ReputationEventDecisionStatusSchema = zod_1.z.enum(exports.REPUTATION_EVENT_DECISION_STATUSES);
+/**
+ * Who the effect would land on (§11.6 `subject`).
+ *
+ * `bindingProofId` is required, unconditionally — see §11.7.4 above. The
+ * envelope's `principalBindings` make the same proof optional for non-Oxy
+ * principal types, because those can never reach this event; here there is
+ * nothing to be lenient about.
+ */
+exports.ReputationEventSubjectSchema = zod_1.z.strictObject({
+    principalType: case_envelope_1.PrincipalTypeSchema,
+    principalId: primitives_1.IdentifierSchema,
+    bindingProofId: primitives_1.IdentifierSchema,
+});
+/**
+ * A finding as Oxy Trust sees it (§11.6).
+ *
+ * Deliberately narrower than a `DecisionFinding`: no `resourceIds`, no policy
+ * rule ids, no text. Oxy Trust needs to know what was confirmed, how serious it
+ * was, how far it reaches and whose conduct it was — it does not need to know
+ * which piece of content it happened on, and §13.5's minimisation plus the
+ * invariant that sensitive content never appears in logs or public attestations
+ * mean it must not be told.
+ *
+ * `attribution` is required here where it is optional on a decision finding: an
+ * effect must land on somebody, and a finding that attributes nothing has
+ * nothing to contribute to this event.
+ */
+exports.ReputationEventFindingSchema = zod_1.z.strictObject({
+    code: taxonomy_1.TaxonomyCodeSchema,
+    severity: taxonomy_1.SeveritySchema,
+    scope: taxonomy_1.ReputationEligibleFindingScopeSchema,
+    attribution: taxonomy_1.FindingAttributionSchema,
+});
+/**
+ * `moderation.decision.finalized.v1` (§11.6).
+ *
+ * `incidentId` is what makes "one penalty per incident" enforceable: it is the
+ * first component of the effect's idempotency key (Appendix D:
+ * `incidentId + principalId + effectType + decisionRevision`), so the same
+ * incident reaching the bridge twice — from a replay, from a redelivery, from
+ * two cases that were merged — produces one effect.
+ *
+ * `proofHash` binds the event to the decision it reports, so an effect can be
+ * explained and, if the decision is later corrected, reversed against the exact
+ * revision that caused it.
+ */
+exports.ModerationDecisionFinalizedEventSchema = zod_1.z.strictObject({
+    eventId: primitives_1.IdentifierSchema,
+    type: zod_1.z.literal(exports.MODERATION_DECISION_FINALIZED_EVENT_TYPE),
+    caseId: primitives_1.IdentifierSchema,
+    incidentId: primitives_1.IdentifierSchema,
+    decisionId: primitives_1.IdentifierSchema,
+    decisionRevision: zod_1.z.number().int().positive(),
+    applicationId: primitives_1.IdentifierSchema,
+    subject: exports.ReputationEventSubjectSchema,
+    findings: zod_1.z.array(exports.ReputationEventFindingSchema).min(1).max(primitives_1.CONTRACT_LIMITS.FINDINGS_MAX),
+    decisionStatus: exports.ReputationEventDecisionStatusSchema,
+    policyVersions: policies_1.ReputationPolicyVersionsSchema,
+    proofHash: primitives_1.Sha256DigestSchema,
+});
+/**
+ * Every reputation event CrowdSource emits.
+ *
+ * A union of one today. It exists so consumers switch on `type` from the start
+ * and adding §11.5's remaining operations does not change how they are written.
+ */
+exports.ReputationEventSchema = zod_1.z.discriminatedUnion('type', [
+    exports.ModerationDecisionFinalizedEventSchema,
+]);
+//# sourceMappingURL=reputation-events.js.map

package/dist/reputation-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reputation-events.js","sourceRoot":"","sources":["../src/reputation-events.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;;;AAEH,6BAAwB;AAExB,6CAAqF;AACrF,mDAAsD;AACtD,yCAA4D;AAC5D,yCAKoB;AAEpB;;;;;GAKG;AACU,QAAA,wCAAwC,GAAG,kCAAkC,CAAC;AAE3F;;;;;GAKG;AACU,QAAA,kCAAkC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAU,CAAC;AACvE,QAAA,mCAAmC,GAAG,OAAC,CAAC,IAAI,CAAC,0CAAkC,CAAC,CAAC;AAG9F;;;;;;;GAOG;AACU,QAAA,4BAA4B,GAAG,OAAC,CAAC,YAAY,CAAC;IACzD,aAAa,EAAE,mCAAmB;IAClC,WAAW,EAAE,6BAAgB;IAC7B,cAAc,EAAE,6BAAgB;CACjC,CAAC,CAAC;AAGH;;;;;;;;;;;;;GAaG;AACU,QAAA,4BAA4B,GAAG,OAAC,CAAC,YAAY,CAAC;IACzD,IAAI,EAAE,6BAAkB;IACxB,QAAQ,EAAE,yBAAc;IACxB,KAAK,EAAE,+CAAoC;IAC3C,WAAW,EAAE,mCAAwB;CACtC,CAAC,CAAC;AAGH;;;;;;;;;;;;GAYG;AACU,QAAA,sCAAsC,GAAG,OAAC,CAAC,YAAY,CAAC;IACnE,OAAO,EAAE,6BAAgB;IACzB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gDAAwC,CAAC;IACzD,MAAM,EAAE,6BAAgB;IACxB,UAAU,EAAE,6BAAgB;IAC5B,UAAU,EAAE,6BAAgB;IAC5B,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7C,aAAa,EAAE,6BAAgB;IAC/B,OAAO,EAAE,oCAA4B;IACrC,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,oCAA4B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,4BAAe,CAAC,YAAY,CAAC;IACxF,cAAc,EAAE,2CAAmC;IACnD,cAAc,EAAE,yCAA8B;IAC9C,SAAS,EAAE,+BAAkB;CAC9B,CAAC,CAAC;AAKH;;;;;GAKG;AACU,QAAA,qBAAqB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAChE,8CAAsC;CACvC,CAAC,CAAC"}