@oxyhq/crowdsource-contracts 0.3.0 → 0.4.0

package/dist/reviews.js

@@ -22,10 +22,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RecusalSubmissionSchema = exports.RecusalReasonSchema = exports.RECUSAL_REASONS = exports.ReviewSubmissionSchema = exports.ReviewFindingSchema = exports.ContextSufficiencySchema = exports.CONTEXT_SUFFICIENCIES = exports.ReviewOutcomeSchema = exports.REVIEW_OUTCOMES = void 0;
 const zod_1 = require("zod");
-const primitives_1 = require("./primitives");
-const policies_1 = require("./policies");
-const resources_1 = require("./resources");
-const taxonomy_1 = require("./taxonomy");
+const primitives_js_1 = require("./primitives.js");
+const policies_js_1 = require("./policies.js");
+const resources_js_1 = require("./resources.js");
+const taxonomy_js_1 = require("./taxonomy.js");
 /**
  * What a single reviewer can conclude.
  *
@@ -68,12 +68,12 @@ exports.ContextSufficiencySchema = zod_1.z.enum(exports.CONTEXT_SUFFICIENCIES);
  * weights the vote.
  */
 exports.ReviewFindingSchema = zod_1.z.strictObject({
-    code: taxonomy_1.TaxonomyCodeSchema,
-    resourceIds: zod_1.z.array(resources_1.ResourceIdSchema).min(1).max(primitives_1.CONTRACT_LIMITS.RESOURCE_REFS_PER_FINDING_MAX),
-    severity: taxonomy_1.SeveritySchema,
-    context: taxonomy_1.FindingContextSchema.optional(),
-    confidence: primitives_1.UnitIntervalSchema,
-    policyRuleIds: zod_1.z.array(policies_1.PolicyRuleIdSchema).max(primitives_1.CONTRACT_LIMITS.POLICY_RULE_IDS_MAX).optional(),
+    code: taxonomy_js_1.TaxonomyCodeSchema,
+    resourceIds: zod_1.z.array(resources_js_1.ResourceIdSchema).min(1).max(primitives_js_1.CONTRACT_LIMITS.RESOURCE_REFS_PER_FINDING_MAX),
+    severity: taxonomy_js_1.SeveritySchema,
+    context: taxonomy_js_1.FindingContextSchema.optional(),
+    confidence: primitives_js_1.UnitIntervalSchema,
+    policyRuleIds: zod_1.z.array(policies_js_1.PolicyRuleIdSchema).max(primitives_js_1.CONTRACT_LIMITS.POLICY_RULE_IDS_MAX).optional(),
 });
 /**
  * The body of `POST /v1/reviewer/assignments/{id}/reviews` — §9.3's "result of
@@ -89,17 +89,17 @@ exports.ReviewSubmissionSchema = zod_1.z
     .strictObject({
     outcome: exports.ReviewOutcomeSchema,
     contextSufficiency: exports.ContextSufficiencySchema,
-    findings: zod_1.z.array(exports.ReviewFindingSchema).max(primitives_1.CONTRACT_LIMITS.FINDINGS_MAX),
+    findings: zod_1.z.array(exports.ReviewFindingSchema).max(primitives_js_1.CONTRACT_LIMITS.FINDINGS_MAX),
     recommendedActions: zod_1.z
-        .array(taxonomy_1.RecommendedActionSchema)
-        .max(primitives_1.CONTRACT_LIMITS.RECOMMENDED_ACTIONS_MAX),
+        .array(taxonomy_js_1.RecommendedActionSchema)
+        .max(primitives_js_1.CONTRACT_LIMITS.RECOMMENDED_ACTIONS_MAX),
     /**
      * §13.5 and the "sensitive content never reaches logs" invariant apply to
      * this field as much as to the evidence: a note is free text a human wrote
      * while looking at the material, so it is bounded here and must be treated
      * as case content everywhere downstream — never logged, never attested.
      */
-    notes: zod_1.z.string().max(primitives_1.CONTRACT_LIMITS.LONG_TEXT_MAX_LENGTH).optional(),
+    notes: zod_1.z.string().max(primitives_js_1.CONTRACT_LIMITS.LONG_TEXT_MAX_LENGTH).optional(),
 })
     .superRefine((review, ctx) => {
     if (review.outcome === 'insufficient_context' && review.contextSufficiency !== 'insufficient') {
@@ -139,6 +139,6 @@ exports.RecusalReasonSchema = zod_1.z.enum(exports.RECUSAL_REASONS);
  */
 exports.RecusalSubmissionSchema = zod_1.z.strictObject({
     reason: exports.RecusalReasonSchema,
-    note: zod_1.z.string().max(primitives_1.CONTRACT_LIMITS.SHORT_TEXT_MAX_LENGTH).optional(),
+    note: zod_1.z.string().max(primitives_js_1.CONTRACT_LIMITS.SHORT_TEXT_MAX_LENGTH).optional(),
 });
 //# sourceMappingURL=reviews.js.map

package/dist/reviews.js.map

@@ -1 +1 @@
-{"version":3,"file":"reviews.js","sourceRoot":"","sources":["../src/reviews.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AAEH,6BAAwB;AAExB,6CAAmE;AACnE,yCAAgD;AAChD,2CAA+C;AAC/C,yCAKoB;AAEpB;;;;;;;;;;GAUG;AACU,QAAA,eAAe,GAAG;IAC7B,WAAW;IACX,cAAc;IACd,sBAAsB;IACtB,qBAAqB;CACb,CAAC;AACE,QAAA,mBAAmB,GAAG,OAAC,CAAC,IAAI,CAAC,uBAAe,CAAC,CAAC;AAG3D,8EAA8E;AACjE,QAAA,qBAAqB,GAAG,CAAC,YAAY,EAAE,cAAc,CAAU,CAAC;AAChE,QAAA,wBAAwB,GAAG,OAAC,CAAC,IAAI,CAAC,6BAAqB,CAAC,CAAC;AAGtE;;;;;;;;;;;;;;;;;;;GAmBG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,YAAY,CAAC;IAChD,IAAI,EAAE,6BAAkB;IACxB,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,4BAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,4BAAe,CAAC,6BAA6B,CAAC;IAChG,QAAQ,EAAE,yBAAc;IACxB,OAAO,EAAE,+BAAoB,CAAC,QAAQ,EAAE;IACxC,UAAU,EAAE,+BAAkB;IAC9B,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,6BAAkB,CAAC,CAAC,GAAG,CAAC,4BAAe,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;CAC/F,CAAC,CAAC;AAGH;;;;;;;;;GASG;AACU,QAAA,sBAAsB,GAAG,OAAC;KACpC,YAAY,CAAC;IACZ,OAAO,EAAE,2BAAmB;IAC5B,kBAAkB,EAAE,gCAAwB;IAC5C,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,2BAAmB,CAAC,CAAC,GAAG,CAAC,4BAAe,CAAC,YAAY,CAAC;IACxE,kBAAkB,EAAE,OAAC;SAClB,KAAK,CAAC,kCAAuB,CAAC;SAC9B,GAAG,CAAC,4BAAe,CAAC,uBAAuB,CAAC;IAC/C;;;;;OAKG;IACH,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,4BAAe,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC;KACD,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC3B,IAAI,MAAM,CAAC,OAAO,KAAK,sBAAsB,IAAI,MAAM,CAAC,kBAAkB,KAAK,cAAc,EAAE,CAAC;QAC9F,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,oBAAoB,CAAC;YAC5B,OAAO,EAAE,+EAA+E;SACzF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EAAE,mDAAmD;SAC7D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAGL;;;;GAIG;AACU,QAAA,eAAe,GAAG;IAC7B,sBAAsB;IACtB,UAAU;IACV,eAAe;IACf,sBAAsB;CACd,CAAC;AACE,QAAA,mBAAmB,GAAG,OAAC,CAAC,IAAI,CAAC,uBAAe,CAAC,CAAC;AAG3D;;;;;;;GAOG;AACU,QAAA,uBAAuB,GAAG,OAAC,CAAC,YAAY,CAAC;IACpD,MAAM,EAAE,2BAAmB;IAC3B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,4BAAe,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC,CAAC"}
+{"version":3,"file":"reviews.js","sourceRoot":"","sources":["../src/reviews.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AAEH,6BAAwB;AAExB,mDAAsE;AACtE,+CAAmD;AACnD,iDAAkD;AAClD,+CAKuB;AAEvB;;;;;;;;;;GAUG;AACU,QAAA,eAAe,GAAG;IAC7B,WAAW;IACX,cAAc;IACd,sBAAsB;IACtB,qBAAqB;CACb,CAAC;AACE,QAAA,mBAAmB,GAAG,OAAC,CAAC,IAAI,CAAC,uBAAe,CAAC,CAAC;AAG3D,8EAA8E;AACjE,QAAA,qBAAqB,GAAG,CAAC,YAAY,EAAE,cAAc,CAAU,CAAC;AAChE,QAAA,wBAAwB,GAAG,OAAC,CAAC,IAAI,CAAC,6BAAqB,CAAC,CAAC;AAGtE;;;;;;;;;;;;;;;;;;;GAmBG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,YAAY,CAAC;IAChD,IAAI,EAAE,gCAAkB;IACxB,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,+BAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAAe,CAAC,6BAA6B,CAAC;IAChG,QAAQ,EAAE,4BAAc;IACxB,OAAO,EAAE,kCAAoB,CAAC,QAAQ,EAAE;IACxC,UAAU,EAAE,kCAAkB;IAC9B,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,gCAAkB,CAAC,CAAC,GAAG,CAAC,+BAAe,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;CAC/F,CAAC,CAAC;AAGH;;;;;;;;;GASG;AACU,QAAA,sBAAsB,GAAG,OAAC;KACpC,YAAY,CAAC;IACZ,OAAO,EAAE,2BAAmB;IAC5B,kBAAkB,EAAE,gCAAwB;IAC5C,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,2BAAmB,CAAC,CAAC,GAAG,CAAC,+BAAe,CAAC,YAAY,CAAC;IACxE,kBAAkB,EAAE,OAAC;SAClB,KAAK,CAAC,qCAAuB,CAAC;SAC9B,GAAG,CAAC,+BAAe,CAAC,uBAAuB,CAAC;IAC/C;;;;;OAKG;IACH,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,+BAAe,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC;KACD,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC3B,IAAI,MAAM,CAAC,OAAO,KAAK,sBAAsB,IAAI,MAAM,CAAC,kBAAkB,KAAK,cAAc,EAAE,CAAC;QAC9F,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,oBAAoB,CAAC;YAC5B,OAAO,EAAE,+EAA+E;SACzF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EAAE,mDAAmD;SAC7D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAGL;;;;GAIG;AACU,QAAA,eAAe,GAAG;IAC7B,sBAAsB;IACtB,UAAU;IACV,eAAe;IACf,sBAAsB;CACd,CAAC;AACE,QAAA,mBAAmB,GAAG,OAAC,CAAC,IAAI,CAAC,uBAAe,CAAC,CAAC;AAG3D;;;;;;;GAOG;AACU,QAAA,uBAAuB,GAAG,OAAC,CAAC,YAAY,CAAC;IACpD,MAAM,EAAE,2BAAmB;IAC3B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,+BAAe,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC,CAAC"}

package/dist/webhooks.d.ts

@@ -20,7 +20,7 @@
  * queue the processing" tells receivers to do.
  */
 import { z } from 'zod';
-import type { Closed } from './closed';
+import type { Closed } from './closed.js';
 /** §10.6. */
 export declare const WEBHOOK_EVENT_TYPES: readonly ["report.received", "case.created", "case.escalated", "case.decided", "decision.corrected", "appeal.created", "appeal.decided", "case.closed"];
 export declare const WebhookEventTypeSchema: z.ZodEnum<{

package/dist/webhooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEvC,aAAa;AACb,eAAO,MAAM,mBAAmB,yJAStB,CAAC;AACX,eAAO,MAAM,sBAAsB;;;;;;;;;EAA8B,CAAC;AAClE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,aAI+C,CAAC;AAStF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B;;;;;;;iBAIrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC,CAAC;AAoEtF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BASlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC;AAEhF,kHAAkH;AAClH,eAAO,MAAM,uBAAuB,2BAA2B,CAAC;AAChE,eAAO,MAAM,wBAAwB,4BAA4B,CAAC;AAClE,eAAO,MAAM,wBAAwB,4BAA4B,CAAC;AAElE,qDAAqD;AACrD,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAE9C,qEAAqE;AACrE,eAAO,MAAM,mCAAmC,MAAM,CAAC;AAEvD,gDAAgD;AAChD,eAAO,MAAM,4BAA4B,aAEQ,CAAC;AAElD,mEAAmE;AACnE,eAAO,MAAM,4BAA4B,aAE6C,CAAC;AAEvF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpF;AAED;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,EAAE,SAAS,MAAM,EAO1D,CAAC"}
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,aAAa;AACb,eAAO,MAAM,mBAAmB,yJAStB,CAAC;AACX,eAAO,MAAM,sBAAsB;;;;;;;;;EAA8B,CAAC;AAClE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,aAI+C,CAAC;AAStF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B;;;;;;;iBAIrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC,CAAC;AAoEtF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BASlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC;AAEhF,kHAAkH;AAClH,eAAO,MAAM,uBAAuB,2BAA2B,CAAC;AAChE,eAAO,MAAM,wBAAwB,4BAA4B,CAAC;AAClE,eAAO,MAAM,wBAAwB,4BAA4B,CAAC;AAElE,qDAAqD;AACrD,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAE9C,qEAAqE;AACrE,eAAO,MAAM,mCAAmC,MAAM,CAAC;AAEvD,gDAAgD;AAChD,eAAO,MAAM,4BAA4B,aAEQ,CAAC;AAElD,mEAAmE;AACnE,eAAO,MAAM,4BAA4B,aAE6C,CAAC;AAEvF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpF;AAED;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,EAAE,SAAS,MAAM,EAO1D,CAAC"}

package/dist/webhooks.js

@@ -24,9 +24,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.WEBHOOK_RETRY_SCHEDULE_SECONDS = exports.WebhookSignatureHeaderSchema = exports.WebhookTimestampHeaderSchema = exports.WEBHOOK_TIMESTAMP_TOLERANCE_SECONDS = exports.WEBHOOK_SIGNATURE_VERSION = exports.WEBHOOK_SIGNATURE_HEADER = exports.WEBHOOK_TIMESTAMP_HEADER = exports.WEBHOOK_EVENT_ID_HEADER = exports.KnownWebhookEventSchema = exports.WebhookEventEnvelopeSchema = exports.AnyWebhookEventTypeSchema = exports.WebhookEventTypeSchema = exports.WEBHOOK_EVENT_TYPES = void 0;
 exports.buildWebhookSignedPayload = buildWebhookSignedPayload;
 const zod_1 = require("zod");
-const case_envelope_1 = require("./case-envelope");
-const decisions_1 = require("./decisions");
-const primitives_1 = require("./primitives");
+const case_envelope_js_1 = require("./case-envelope.js");
+const decisions_js_1 = require("./decisions.js");
+const primitives_js_1 = require("./primitives.js");
 /** §10.6. */
 exports.WEBHOOK_EVENT_TYPES = [
     'report.received',
@@ -52,10 +52,10 @@ exports.AnyWebhookEventTypeSchema = zod_1.z
     .max(64)
     .regex(/^[a-z][a-z0-9_]*(\.[a-z0-9_]+)+$/, 'must be a dotted lowercase event type');
 const webhookEnvelopeShape = {
-    id: primitives_1.IdentifierSchema,
-    createdAt: primitives_1.TimestampSchema,
-    organizationId: primitives_1.IdentifierSchema,
-    applicationId: primitives_1.IdentifierSchema,
+    id: primitives_js_1.IdentifierSchema,
+    createdAt: primitives_js_1.TimestampSchema,
+    organizationId: primitives_js_1.IdentifierSchema,
+    applicationId: primitives_js_1.IdentifierSchema,
 };
 /**
  * The envelope every delivery shares (§10.7), with `data` left opaque.
@@ -72,22 +72,22 @@ const ReportReceivedEventSchema = zod_1.z.looseObject({
     ...webhookEnvelopeShape,
     type: zod_1.z.literal('report.received'),
     /** §10.6: "optional confirmation of receipt and merge" — §10.4's response. */
-    data: case_envelope_1.CreateReportResponseSchema,
+    data: case_envelope_js_1.CreateReportResponseSchema,
 });
 const CaseCreatedEventSchema = zod_1.z.looseObject({
     ...webhookEnvelopeShape,
     type: zod_1.z.literal('case.created'),
-    data: zod_1.z.looseObject({ caseId: primitives_1.IdentifierSchema }),
+    data: zod_1.z.looseObject({ caseId: primitives_js_1.IdentifierSchema }),
 });
 const CaseEscalatedEventSchema = zod_1.z.looseObject({
     ...webhookEnvelopeShape,
     type: zod_1.z.literal('case.escalated'),
-    data: zod_1.z.looseObject({ caseId: primitives_1.IdentifierSchema }),
+    data: zod_1.z.looseObject({ caseId: primitives_js_1.IdentifierSchema }),
 });
 const CaseDecidedEventSchema = zod_1.z.looseObject({
     ...webhookEnvelopeShape,
     type: zod_1.z.literal('case.decided'),
-    data: zod_1.z.looseObject({ caseId: primitives_1.IdentifierSchema, decision: decisions_1.DecisionSchema }),
+    data: zod_1.z.looseObject({ caseId: primitives_js_1.IdentifierSchema, decision: decisions_js_1.DecisionSchema }),
 });
 /**
  * §10.6: "a later revision replaces the previous decision".
@@ -100,28 +100,28 @@ const DecisionCorrectedEventSchema = zod_1.z.looseObject({
     ...webhookEnvelopeShape,
     type: zod_1.z.literal('decision.corrected'),
     data: zod_1.z.looseObject({
-        caseId: primitives_1.IdentifierSchema,
-        decision: decisions_1.DecisionSchema.refine((decision) => decision.supersedesDecisionId !== undefined, { message: 'a corrected decision must supersede the decision it replaces' }),
+        caseId: primitives_js_1.IdentifierSchema,
+        decision: decisions_js_1.DecisionSchema.refine((decision) => decision.supersedesDecisionId !== undefined, { message: 'a corrected decision must supersede the decision it replaces' }),
     }),
 });
 const AppealCreatedEventSchema = zod_1.z.looseObject({
     ...webhookEnvelopeShape,
     type: zod_1.z.literal('appeal.created'),
-    data: zod_1.z.looseObject({ caseId: primitives_1.IdentifierSchema, appealId: primitives_1.IdentifierSchema }),
+    data: zod_1.z.looseObject({ caseId: primitives_js_1.IdentifierSchema, appealId: primitives_js_1.IdentifierSchema }),
 });
 const AppealDecidedEventSchema = zod_1.z.looseObject({
     ...webhookEnvelopeShape,
     type: zod_1.z.literal('appeal.decided'),
     data: zod_1.z.looseObject({
-        caseId: primitives_1.IdentifierSchema,
-        appealId: primitives_1.IdentifierSchema,
-        decision: decisions_1.DecisionSchema,
+        caseId: primitives_js_1.IdentifierSchema,
+        appealId: primitives_js_1.IdentifierSchema,
+        decision: decisions_js_1.DecisionSchema,
     }),
 });
 const CaseClosedEventSchema = zod_1.z.looseObject({
     ...webhookEnvelopeShape,
     type: zod_1.z.literal('case.closed'),
-    data: zod_1.z.looseObject({ caseId: primitives_1.IdentifierSchema }),
+    data: zod_1.z.looseObject({ caseId: primitives_js_1.IdentifierSchema }),
 });
 /**
  * The eight events of §10.6, discriminated on `type`.

package/dist/webhooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AAiLH,8DAEC;AAjLD,6BAAwB;AAExB,mDAA6D;AAC7D,2CAA6C;AAC7C,6CAAiE;AAGjE,aAAa;AACA,QAAA,mBAAmB,GAAG;IACjC,iBAAiB;IACjB,cAAc;IACd,gBAAgB;IAChB,cAAc;IACd,oBAAoB;IACpB,gBAAgB;IAChB,gBAAgB;IAChB,aAAa;CACL,CAAC;AACE,QAAA,sBAAsB,GAAG,OAAC,CAAC,IAAI,CAAC,2BAAmB,CAAC,CAAC;AAGlE;;;;;;GAMG;AACU,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,kCAAkC,EAAE,uCAAuC,CAAC,CAAC;AAEtF,MAAM,oBAAoB,GAAG;IAC3B,EAAE,EAAE,6BAAgB;IACpB,SAAS,EAAE,4BAAe;IAC1B,cAAc,EAAE,6BAAgB;IAChC,aAAa,EAAE,6BAAgB;CAChC,CAAC;AAEF;;;;;GAKG;AACU,QAAA,0BAA0B,GAAG,OAAC,CAAC,WAAW,CAAC;IACtD,GAAG,oBAAoB;IACvB,IAAI,EAAE,iCAAyB;IAC/B,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC;CACxC,CAAC,CAAC;AAGH,MAAM,yBAAyB,GAAG,OAAC,CAAC,WAAW,CAAC;IAC9C,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,8EAA8E;IAC9E,IAAI,EAAE,0CAA0B;CACjC,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,OAAC,CAAC,WAAW,CAAC;IAC3C,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,IAAI,EAAE,OAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,6BAAgB,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,OAAC,CAAC,WAAW,CAAC;IAC7C,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,IAAI,EAAE,OAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,6BAAgB,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,OAAC,CAAC,WAAW,CAAC;IAC3C,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,IAAI,EAAE,OAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,6BAAgB,EAAE,QAAQ,EAAE,0BAAc,EAAE,CAAC;CAC5E,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,4BAA4B,GAAG,OAAC,CAAC,WAAW,CAAC;IACjD,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACrC,IAAI,EAAE,OAAC,CAAC,WAAW,CAAC;QAClB,MAAM,EAAE,6BAAgB;QACxB,QAAQ,EAAE,0BAAc,CAAC,MAAM,CAC7B,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS,EACzD,EAAE,OAAO,EAAE,8DAA8D,EAAE,CAC5E;KACF,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,OAAC,CAAC,WAAW,CAAC;IAC7C,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,IAAI,EAAE,OAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,6BAAgB,EAAE,QAAQ,EAAE,6BAAgB,EAAE,CAAC;CAC9E,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,OAAC,CAAC,WAAW,CAAC;IAC7C,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,IAAI,EAAE,OAAC,CAAC,WAAW,CAAC;QAClB,MAAM,EAAE,6BAAgB;QACxB,QAAQ,EAAE,6BAAgB;QAC1B,QAAQ,EAAE,0BAAc;KACzB,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,OAAC,CAAC,WAAW,CAAC;IAC1C,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9B,IAAI,EAAE,OAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,6BAAgB,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH;;;;;;;GAOG;AACU,QAAA,uBAAuB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAClE,yBAAyB;IACzB,sBAAsB;IACtB,wBAAwB;IACxB,sBAAsB;IACtB,4BAA4B;IAC5B,wBAAwB;IACxB,wBAAwB;IACxB,qBAAqB;CACtB,CAAC,CAAC;AAGH,kHAAkH;AACrG,QAAA,uBAAuB,GAAG,wBAAwB,CAAC;AACnD,QAAA,wBAAwB,GAAG,yBAAyB,CAAC;AACrD,QAAA,wBAAwB,GAAG,yBAAyB,CAAC;AAElE,qDAAqD;AACxC,QAAA,yBAAyB,GAAG,IAAI,CAAC;AAE9C,qEAAqE;AACxD,QAAA,mCAAmC,GAAG,GAAG,CAAC;AAEvD,gDAAgD;AACnC,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,EAAE;KACR,KAAK,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;AAElD,mEAAmE;AACtD,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,EAAE;KACR,KAAK,CAAC,mBAAmB,EAAE,uDAAuD,CAAC,CAAC;AAEvF;;;;;;;;;;;;;GAaG;AACH,SAAgB,yBAAyB,CAAC,SAAiB,EAAE,OAAe;IAC1E,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACU,QAAA,8BAA8B,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC7E,EAAE;IACF,GAAG;IACH,GAAG;IACH,IAAK;IACL,KAAM;IACN,KAAM;CACP,CAAC,CAAC"}
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AAiLH,8DAEC;AAjLD,6BAAwB;AAExB,yDAAgE;AAChE,iDAAgD;AAChD,mDAAoE;AAGpE,aAAa;AACA,QAAA,mBAAmB,GAAG;IACjC,iBAAiB;IACjB,cAAc;IACd,gBAAgB;IAChB,cAAc;IACd,oBAAoB;IACpB,gBAAgB;IAChB,gBAAgB;IAChB,aAAa;CACL,CAAC;AACE,QAAA,sBAAsB,GAAG,OAAC,CAAC,IAAI,CAAC,2BAAmB,CAAC,CAAC;AAGlE;;;;;;GAMG;AACU,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,kCAAkC,EAAE,uCAAuC,CAAC,CAAC;AAEtF,MAAM,oBAAoB,GAAG;IAC3B,EAAE,EAAE,gCAAgB;IACpB,SAAS,EAAE,+BAAe;IAC1B,cAAc,EAAE,gCAAgB;IAChC,aAAa,EAAE,gCAAgB;CAChC,CAAC;AAEF;;;;;GAKG;AACU,QAAA,0BAA0B,GAAG,OAAC,CAAC,WAAW,CAAC;IACtD,GAAG,oBAAoB;IACvB,IAAI,EAAE,iCAAyB;IAC/B,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC;CACxC,CAAC,CAAC;AAGH,MAAM,yBAAyB,GAAG,OAAC,CAAC,WAAW,CAAC;IAC9C,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,8EAA8E;IAC9E,IAAI,EAAE,6CAA0B;CACjC,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,OAAC,CAAC,WAAW,CAAC;IAC3C,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,IAAI,EAAE,OAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,gCAAgB,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,OAAC,CAAC,WAAW,CAAC;IAC7C,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,IAAI,EAAE,OAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,gCAAgB,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,OAAC,CAAC,WAAW,CAAC;IAC3C,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,IAAI,EAAE,OAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,gCAAgB,EAAE,QAAQ,EAAE,6BAAc,EAAE,CAAC;CAC5E,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,4BAA4B,GAAG,OAAC,CAAC,WAAW,CAAC;IACjD,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACrC,IAAI,EAAE,OAAC,CAAC,WAAW,CAAC;QAClB,MAAM,EAAE,gCAAgB;QACxB,QAAQ,EAAE,6BAAc,CAAC,MAAM,CAC7B,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS,EACzD,EAAE,OAAO,EAAE,8DAA8D,EAAE,CAC5E;KACF,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,OAAC,CAAC,WAAW,CAAC;IAC7C,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,IAAI,EAAE,OAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,gCAAgB,EAAE,QAAQ,EAAE,gCAAgB,EAAE,CAAC;CAC9E,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,OAAC,CAAC,WAAW,CAAC;IAC7C,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,IAAI,EAAE,OAAC,CAAC,WAAW,CAAC;QAClB,MAAM,EAAE,gCAAgB;QACxB,QAAQ,EAAE,gCAAgB;QAC1B,QAAQ,EAAE,6BAAc;KACzB,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,OAAC,CAAC,WAAW,CAAC;IAC1C,GAAG,oBAAoB;IACvB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9B,IAAI,EAAE,OAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,gCAAgB,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH;;;;;;;GAOG;AACU,QAAA,uBAAuB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAClE,yBAAyB;IACzB,sBAAsB;IACtB,wBAAwB;IACxB,sBAAsB;IACtB,4BAA4B;IAC5B,wBAAwB;IACxB,wBAAwB;IACxB,qBAAqB;CACtB,CAAC,CAAC;AAGH,kHAAkH;AACrG,QAAA,uBAAuB,GAAG,wBAAwB,CAAC;AACnD,QAAA,wBAAwB,GAAG,yBAAyB,CAAC;AACrD,QAAA,wBAAwB,GAAG,yBAAyB,CAAC;AAElE,qDAAqD;AACxC,QAAA,yBAAyB,GAAG,IAAI,CAAC;AAE9C,qEAAqE;AACxD,QAAA,mCAAmC,GAAG,GAAG,CAAC;AAEvD,gDAAgD;AACnC,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,EAAE;KACR,KAAK,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;AAElD,mEAAmE;AACtD,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,EAAE;KACR,KAAK,CAAC,mBAAmB,EAAE,uDAAuD,CAAC,CAAC;AAEvF;;;;;;;;;;;;;GAaG;AACH,SAAgB,yBAAyB,CAAC,SAAiB,EAAE,OAAe;IAC1E,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACU,QAAA,8BAA8B,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC7E,EAAE;IACF,GAAG;IACH,GAAG;IACH,IAAK;IACL,KAAM;IACN,KAAM;CACP,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxyhq/crowdsource-contracts",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Versioned CrowdSource contracts: case envelope, resources, taxonomy, policies, reviews, decisions, webhooks and reputation events",
   "type": "commonjs",
   "main": "dist/index.js",
@@ -8,16 +8,16 @@
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
+      "import": "./dist/esm/index.js",
       "require": "./dist/index.js",
       "default": "./dist/index.js"
     },
     "./package.json": "./package.json"
   },
   "scripts": {
-    "build": "tsc",
+    "build": "tsc && tsc -p tsconfig.esm.json && bun ../../scripts/write-esm-marker.mjs",
     "dev": "tsc --watch",
-    "clean": "rm -rf dist",
+    "clean": "rm -rf dist *.tsbuildinfo",
     "lint": "tsc --noEmit --noUnusedLocals --noUnusedParameters && tsc -p tsconfig.test.json",
     "test": "node ../../node_modules/vitest/vitest.mjs run",
     "test:watch": "node ../../node_modules/vitest/vitest.mjs",

package/src/appeals.ts

@@ -0,0 +1,229 @@
+/**
+ * Appeals (§9.8, §9.9, §10.2).
+ *
+ * §9.8 opens with the rule the rest of this module serves: "la apelación no
+ * edita la decisión original. Crea una nueva revisión del caso con un jurado
+ * distinto y una nueva Decision revision." So an appeal is not a mutation and it
+ * is not a request to reconsider — it is an OBJECT: a requester, a reason, the
+ * author's structured additional context, and the pair of revisions it sits
+ * between. Everything about the outcome belongs to the decision it opens.
+ *
+ * Two strictness directions meet here, and they are the same two the package
+ * uses everywhere else:
+ *
+ *   * **`AppealSubmissionSchema` is strict.** It arrives from a tenant, over the
+ *     application API, carrying text the SUBJECT of a moderation case wrote —
+ *     which is to say attacker-controlled text, filed by somebody with a motive.
+ *     A field this schema tolerated is a field nobody validated.
+ *   * **`AppealSchema` is loose.** It travels outbound, in the response and in
+ *     §10.6's `appeal.created` and `appeal.decided`, so §10.11's "unknown fields
+ *     must not break clients" applies.
+ *
+ * What is deliberately NOT here: the appeal's outcome, the new jury, the votes,
+ * anything about the panel. An appeal that carried its own verdict would be a
+ * second place the outcome of a case is written down, and §9.9 is explicit that
+ * there is exactly one — the decision revision.
+ */
+
+import { z } from 'zod';
+
+import type { Closed } from './closed.js';
+import { DecisionSchema } from './decisions.js';
+import {
+  CONTRACT_LIMITS,
+  ExternalIdSchema,
+  IdentifierSchema,
+  MetadataBagSchema,
+  TimestampSchema,
+} from './primitives.js';
+import { ResourceIdSchema } from './resources.js';
+
+/**
+ * Why an appeal was filed.
+ *
+ * §9.8 requires a reason but never enumerates one, and a closed list is the only
+ * shape that works: the reason is carried into the appeal record, read by an
+ * operator, and counted in §15.9's overturn-rate metrics, so a free-text field
+ * would be both a channel for case content and a dimension nobody can aggregate.
+ *
+ * The six are derived from what the plan already says an appeal can be about.
+ * `context_missing` is §9.8's own "el autor puede aportar una explicación" and
+ * the remedy §9.6's `insufficient_context` asks for. `policy_misapplied` and
+ * `finding_incorrect` split §6.2's two layers — the rule that was applied
+ * against the classification of the material — because they want different
+ * remedies and conflating them would lose that. `exception_applies` is §6.2's
+ * `context` qualifier (artistic, documentary, satire) asserted by the person who
+ * made the material. `not_responsible` is §11.7.4's attribution being wrong,
+ * which matters most: an effect landing on the wrong principal is the one error
+ * a reversal cannot fully undo. `procedural_error` covers the process itself.
+ */
+export const APPEAL_REASONS = [
+  'context_missing',
+  'policy_misapplied',
+  'finding_incorrect',
+  'exception_applies',
+  'not_responsible',
+  'procedural_error',
+] as const;
+export const AppealReasonSchema = z.enum(APPEAL_REASONS);
+export type AppealReason = z.infer<typeof AppealReasonSchema>;
+
+/**
+ * The lifecycle of an appeal, which has exactly two states and no third.
+ *
+ * `open` from the moment it creates a revision until that revision publishes a
+ * decision, `decided` afterwards. There is no `rejected` state: an appeal that
+ * is not eligible is REFUSED at the boundary and never becomes an object at all
+ * (§10.5's 403 and 409), because an appeal row that exists without having opened
+ * a revision would be a case in `appealed` status with no jury owed to it — the
+ * one failure mode §9.8 cannot tolerate, since the author has been told their
+ * case is being looked at again.
+ *
+ * There is also no `upheld`/`overturned` pair, and that is the same rule as
+ * above: whether the outcome changed is a property of the two decisions, and
+ * `decision.corrected` (§10.6) is what says so.
+ */
+export const APPEAL_STATUSES = ['open', 'decided'] as const;
+export const AppealStatusSchema = z.enum(APPEAL_STATUSES);
+export type AppealStatus = z.infer<typeof AppealStatusSchema>;
+
+/**
+ * §9.8's "contexto adicional": what the author may add, "sujeta a validación y
+ * redacción".
+ *
+ * Three shapes, and each is bounded for a different reason. `statement` is the
+ * explanation in the author's own words and is the field the redaction in the
+ * backend's `appealContext.ts` exists for. `resourceIds` point at material
+ * ALREADY in the case snapshot — an appeal cannot introduce new evidence through
+ * this field, because evidence enters through §10.2's upload endpoints where it
+ * is hashed and scanned, and a URL or a blob here would be an unvalidated
+ * resource reaching a reviewer's screen. `fields` is §9.8's "evidencia
+ * estructurada" in the one shape the contract already trusts: a flat bag of
+ * scalars, key-restricted and prototype-safe.
+ */
+export const AppealAuthorContextSchema = z.strictObject({
+  /**
+   * Free text from the author. Case content everywhere downstream: never logged,
+   * never attested, redacted before a reviewer sees it (§9.8, §13.4, §13.5).
+   */
+  statement: z.string().min(1).max(CONTRACT_LIMITS.LONG_TEXT_MAX_LENGTH),
+  /** Resources of the case this context is about. Validated against the case. */
+  resourceIds: z
+    .array(ResourceIdSchema)
+    .max(CONTRACT_LIMITS.RESOURCE_REFS_PER_FINDING_MAX)
+    .optional(),
+  /** §9.8's structured evidence: flat, scalar, bounded — never a document tree. */
+  fields: MetadataBagSchema.optional(),
+});
+export type AppealAuthorContext = z.infer<typeof AppealAuthorContextSchema>;
+
+/**
+ * The body of `POST /v1/cases/{id}/appeals` (§10.2).
+ *
+ * Strict, and with no `caseId`, no `decisionId` and no `applicationId` — the
+ * case comes from the route, the revision under appeal is whichever one the case
+ * has decided, and the application comes from the credential. A schema that
+ * tolerated any of the three would let a caller appeal a decision of a case it
+ * was not handed, which is the same class of hole as a review submission that
+ * accepted a case id.
+ *
+ * `appellantExternalPrincipalId` is the application's own id for the person
+ * appealing, and the server checks it against the principals the CASE MATERIAL
+ * points at. That is what makes §9.8's "el autor" enforceable rather than
+ * declarative: a reporter is referenced by an allegation and never by the
+ * material, so a reporter's id is not in that set and cannot appeal a decision
+ * that went against somebody else.
+ */
+export const AppealSubmissionSchema = z.strictObject({
+  appellantExternalPrincipalId: ExternalIdSchema,
+  reason: AppealReasonSchema,
+  authorContext: AppealAuthorContextSchema.optional(),
+});
+export type AppealSubmission = z.infer<typeof AppealSubmissionSchema>;
+
+/**
+ * One appeal, as it travels back to the application (§10.2, §10.6).
+ *
+ * `supersededRevision` and `openedRevision` are both here because an appeal is
+ * exactly the link between them, and reading it is how an integrator follows
+ * §9.9's history: the decision it appealed is the one at `supersededRevision`,
+ * and the decision that answers it is the one at `openedRevision`.
+ *
+ * `requiredAgreeingVotes` is the bar the new panel must clear — §9.4's "umbral
+ * superior al de la primera decisión cuando la acción sea grave" — recorded on
+ * the appeal so it is auditable and fixed at filing time rather than recomputed
+ * later from a ladder that may have changed.
+ *
+ * The author's context is deliberately absent. The application supplied it, so
+ * echoing it back tells the tenant nothing it does not have, and §13.5's
+ * minimisation applies to every copy of case content — including the ones in a
+ * webhook body that will be retried, stored and logged by a receiver.
+ */
+export const AppealSchema = z
+  .looseObject({
+    id: IdentifierSchema,
+    caseId: IdentifierSchema,
+    status: AppealStatusSchema,
+    reason: AppealReasonSchema,
+    /** The revision whose decision was appealed, and which is now superseded. */
+    supersededRevision: z.number().int().positive(),
+    supersededDecisionId: IdentifierSchema,
+    /** The revision this appeal opened. Always `supersededRevision + 1` (§9.9). */
+    openedRevision: z.number().int().positive(),
+    requiredAgreeingVotes: z.number().int().positive().max(CONTRACT_LIMITS.JURY_SIZE_MAX),
+    filedAt: TimestampSchema,
+    /** The decision that answered the appeal, once one exists. */
+    decision: DecisionSchema.optional(),
+  })
+  .superRefine((appeal, ctx) => {
+    /**
+     * §9.9's chain, checked rather than described: an appeal opens the revision
+     * immediately after the one it superseded. A gap would mean a revision
+     * nobody appealed and nobody decided.
+     */
+    if (appeal.openedRevision !== appeal.supersededRevision + 1) {
+      ctx.addIssue({
+        code: 'custom',
+        path: ['openedRevision'],
+        message: 'an appeal opens the revision immediately after the one it superseded',
+      });
+    }
+    /**
+     * The status is DERIVED from whether the revision it opened has published a
+     * decision, so the two cannot disagree — and asserting it here is what
+     * catches a serializer that started storing the status separately.
+     */
+    if (appeal.status === 'decided' && appeal.decision === undefined) {
+      ctx.addIssue({
+        code: 'custom',
+        path: ['decision'],
+        message: 'a decided appeal must carry the decision that answered it',
+      });
+    }
+    if (appeal.status === 'open' && appeal.decision !== undefined) {
+      ctx.addIssue({
+        code: 'custom',
+        path: ['status'],
+        message: 'an appeal that carries a decision is decided, not open',
+      });
+    }
+    if (appeal.decision !== undefined && appeal.decision.revision !== appeal.openedRevision) {
+      ctx.addIssue({
+        code: 'custom',
+        path: ['decision', 'revision'],
+        message: 'the decision answering an appeal is the one at the revision it opened',
+      });
+    }
+  });
+/**
+ * `Closed`, like every other outbound type in this package.
+ *
+ * The schema stays loose — §10.11 requires unknown fields to pass through — and
+ * the exported type drops the index signature that looseness contributes. This
+ * DTO is the one in the package most likely to be misnamed by an integrator:
+ * `appeal.appealId` reads naturally and the field is `id`, and the webhook
+ * payload carries `data.appealId` beside `data.appeal.id`, so the two spellings
+ * sit next to each other in the same body. With an index signature both compile
+ * and one is `undefined` at runtime; closed, only the real one does.
+ */
+export type Appeal = Closed<z.infer<typeof AppealSchema>>;

package/src/case-envelope.ts

@@ -35,17 +35,17 @@ import {
   IdentifierSchema,
   MetadataBagSchema,
   TimestampSchema,
-} from './primitives';
-import { CasePolicyRefSchema } from './policies';
+} from './primitives.js';
+import { CasePolicyRefSchema } from './policies.js';
 import {
   PRINCIPAL_TARGETED_RELATION_TYPES,
   PrincipalRefSchema,
   RelationSchema,
   ResourceIdSchema,
   ResourceSchema,
-} from './resources';
-import { SensitivityHintSchema, TaxonomyCodeSchema } from './taxonomy';
-import type { Closed } from './closed';
+} from './resources.js';
+import { SensitivityHintSchema, TaxonomyCodeSchema } from './taxonomy.js';
+import type { Closed } from './closed.js';
 
 /**
  * The contract version carried inside the payload.

package/src/decisions.ts

@@ -21,10 +21,10 @@
 
 import { z } from 'zod';
 
-import { CONTRACT_LIMITS, IdentifierSchema, TimestampSchema, UnitIntervalSchema } from './primitives';
-import { DecisionPolicyVersionsSchema, PolicyRuleIdSchema } from './policies';
-import { ResourceIdSchema } from './resources';
-import { ContextSufficiencySchema } from './reviews';
+import { CONTRACT_LIMITS, IdentifierSchema, TimestampSchema, UnitIntervalSchema } from './primitives.js';
+import { DecisionPolicyVersionsSchema, PolicyRuleIdSchema } from './policies.js';
+import { ResourceIdSchema } from './resources.js';
+import { ContextSufficiencySchema } from './reviews.js';
 import {
   FindingAttributionSchema,
   FindingContextSchema,
@@ -32,8 +32,8 @@ import {
   RecommendedActionSchema,
   SeveritySchema,
   TaxonomyCodeSchema,
-} from './taxonomy';
-import type { Closed } from './closed';
+} from './taxonomy.js';
+import type { Closed } from './closed.js';
 
 /** §3.2 decision states. */
 export const DECISION_STATUSES = ['provisional', 'final', 'superseded', 'corrected'] as const;

package/src/index.ts

@@ -33,14 +33,16 @@
  * names.
  */
 
-export * from './closed';
-export * from './primitives';
-export * from './taxonomy';
-export * from './policies';
-export * from './resources';
-export * from './case-envelope';
-export * from './reviews';
-export * from './decisions';
-export * from './webhooks';
-export * from './reputation-events';
-export * from './json-schema';
+export * from './closed.js';
+export * from './primitives.js';
+export * from './taxonomy.js';
+export * from './policies.js';
+export * from './resources.js';
+export * from './case-envelope.js';
+export * from './reviews.js';
+export * from './reviewer-surface.js';
+export * from './decisions.js';
+export * from './appeals.js';
+export * from './webhooks.js';
+export * from './reputation-events.js';
+export * from './json-schema.js';

package/src/json-schema.ts

@@ -28,13 +28,14 @@
 
 import { z } from 'zod';
 
-import { CaseEnvelopeSchema, CreateReportRequestSchema, CreateReportResponseSchema } from './case-envelope';
-import { DecisionSchema } from './decisions';
-import { PolicySetVersionSchema } from './policies';
-import { ReputationEventSchema } from './reputation-events';
-import { RelationSchema, ResourceSchema, ResourceSchemaRegistrationSchema } from './resources';
-import { RecusalSubmissionSchema, ReviewSubmissionSchema } from './reviews';
-import { KnownWebhookEventSchema, WebhookEventEnvelopeSchema } from './webhooks';
+import { AppealSchema, AppealSubmissionSchema } from './appeals.js';
+import { CaseEnvelopeSchema, CreateReportRequestSchema, CreateReportResponseSchema } from './case-envelope.js';
+import { DecisionSchema } from './decisions.js';
+import { PolicySetVersionSchema } from './policies.js';
+import { ReputationEventSchema } from './reputation-events.js';
+import { RelationSchema, ResourceSchema, ResourceSchemaRegistrationSchema } from './resources.js';
+import { RecusalSubmissionSchema, ReviewSubmissionSchema } from './reviews.js';
+import { KnownWebhookEventSchema, WebhookEventEnvelopeSchema } from './webhooks.js';
 
 /** A JSON Schema document, as produced by the conversion. */
 export type JsonSchemaDocument = z.core.JSONSchema.BaseSchema;
@@ -50,6 +51,8 @@ export const CONTRACT_JSON_SCHEMA_NAMES = [
   'review-submission',
   'recusal-submission',
   'decision',
+  'appeal-submission',
+  'appeal',
   'webhook-event-envelope',
   'known-webhook-event',
   'reputation-event',
@@ -75,6 +78,8 @@ export const CONTRACT_SCHEMAS: Record<ContractJsonSchemaName, z.ZodType> = {
   'review-submission': ReviewSubmissionSchema,
   'recusal-submission': RecusalSubmissionSchema,
   decision: DecisionSchema,
+  'appeal-submission': AppealSubmissionSchema,
+  appeal: AppealSchema,
   'webhook-event-envelope': WebhookEventEnvelopeSchema,
   'known-webhook-event': KnownWebhookEventSchema,
   'reputation-event': ReputationEventSchema,

package/src/policies.ts

@@ -20,9 +20,9 @@
 
 import { z } from 'zod';
 
-import { CONTRACT_LIMITS, LanguageTagSchema, TimestampSchema } from './primitives';
-import { RecommendedActionSchema, SeveritySchema, TaxonomyCodeSchema } from './taxonomy';
-import type { Closed } from './closed';
+import { CONTRACT_LIMITS, LanguageTagSchema, TimestampSchema } from './primitives.js';
+import { RecommendedActionSchema, SeveritySchema, TaxonomyCodeSchema } from './taxonomy.js';
+import type { Closed } from './closed.js';
 
 /** A namespaced policy set id, e.g. `mention.community`. */
 export const PolicySetIdSchema = z

package/src/reputation-events.ts

@@ -36,15 +36,15 @@
 
 import { z } from 'zod';
 
-import { CONTRACT_LIMITS, IdentifierSchema, Sha256DigestSchema } from './primitives';
-import { PrincipalTypeSchema } from './case-envelope';
-import { ReputationPolicyVersionsSchema } from './policies';
+import { CONTRACT_LIMITS, IdentifierSchema, Sha256DigestSchema } from './primitives.js';
+import { PrincipalTypeSchema } from './case-envelope.js';
+import { ReputationPolicyVersionsSchema } from './policies.js';
 import {
   FindingAttributionSchema,
   ReputationEligibleFindingScopeSchema,
   SeveritySchema,
   TaxonomyCodeSchema,
-} from './taxonomy';
+} from './taxonomy.js';
 
 /**
  * §11.6 names one event type. §11.5 names four bridge operations — apply,