@oxyhq/crowdsource-contracts 0.3.0 → 0.4.0

package/dist/esm/reviews.js

@@ -0,0 +1,141 @@
+/**
+ * What one reviewer submits (§9.2, §9.3) and how they step away (§4.1).
+ *
+ * §9.2 splits the form in two — describe the material, then evaluate it against
+ * a rule — to reduce anchoring on the reporter's category and to let the same
+ * description be reused under different policies. §9.3 then gives one flat
+ * result object. Both are true at once: a `ReviewFinding` carries the step-one
+ * fields (`code`, `resourceIds`, `severity`, `confidence`) and the step-two
+ * fields (`policyRuleIds`), and the enclosing submission carries the step-two
+ * verdict (`outcome`, `recommendedActions`). The split is a property of the
+ * interface, not of the payload, so it is documented here rather than nested.
+ *
+ * The submission is `.strict()`, and that is a safety decision, not tidiness.
+ * A review belongs to an assignment the server issued; the assignment id comes
+ * from the route, the case and the reviewer come from the assignment. If this
+ * object tolerated a `caseId`, an `assignmentId` or a `reviewerId`, the day
+ * somebody read one of them would be the day a reviewer could vote on a case
+ * they were never drawn for — against "nobody chooses the case they review".
+ * Strict makes that field impossible rather than merely unused.
+ */
+import { z } from 'zod';
+import { CONTRACT_LIMITS, UnitIntervalSchema } from './primitives.js';
+import { PolicyRuleIdSchema } from './policies.js';
+import { ResourceIdSchema } from './resources.js';
+import { FindingContextSchema, RecommendedActionSchema, SeveritySchema, TaxonomyCodeSchema, } from './taxonomy.js';
+/**
+ * What a single reviewer can conclude.
+ *
+ * Narrower than §9.6's decision outcomes on purpose. `inconclusive` is what the
+ * consensus engine reports when a panel does not agree — a single reviewer
+ * cannot fail to agree with themselves, and "the absence of consensus is
+ * neither guilt nor innocence" only holds if `inconclusive` is produced by the
+ * engine and never voted for. `duplicate`, `escalated` and `superseded` are
+ * likewise case-level states, not opinions about material. The plan never
+ * enumerates review outcomes; this is that gap resolved toward the invariant.
+ */
+export const REVIEW_OUTCOMES = [
+    'violation',
+    'no_violation',
+    'insufficient_context',
+    'content_unavailable',
+];
+export const ReviewOutcomeSchema = z.enum(REVIEW_OUTCOMES);
+/** §9.5 feeds this into `contextFactor`: 1.0 if sufficient, 0.5 otherwise. */
+export const CONTEXT_SUFFICIENCIES = ['sufficient', 'insufficient'];
+export const ContextSufficiencySchema = z.enum(CONTEXT_SUFFICIENCIES);
+/**
+ * One structured finding from one reviewer (§9.3).
+ *
+ * `resourceIds` is required and non-empty: §9.4 makes the affected resource one
+ * of the dimensions consensus is measured on, so a finding that does not say
+ * what it is about cannot be agreed with or disagreed with.
+ *
+ * `policyRuleIds` is optional: step one of the form can complete without step
+ * two — a reviewer may classify material accurately and find no rule that
+ * covers it, which is exactly the `no_violation`-with-findings case §6.2
+ * describes.
+ *
+ * `context` is §9.2's and §9.4's "excepción", written as §6.2 writes it: beside
+ * the code and the severity, because "artistic nudity" is a different
+ * description of the material from "nudity" rather than a different verdict
+ * about it. Optional, and absence means no exception applies.
+ *
+ * `confidence` communicates quality and triggers escalation (§9.5). It never
+ * weights the vote.
+ */
+export const ReviewFindingSchema = z.strictObject({
+    code: TaxonomyCodeSchema,
+    resourceIds: z.array(ResourceIdSchema).min(1).max(CONTRACT_LIMITS.RESOURCE_REFS_PER_FINDING_MAX),
+    severity: SeveritySchema,
+    context: FindingContextSchema.optional(),
+    confidence: UnitIntervalSchema,
+    policyRuleIds: z.array(PolicyRuleIdSchema).max(CONTRACT_LIMITS.POLICY_RULE_IDS_MAX).optional(),
+});
+/**
+ * The body of `POST /v1/reviewer/assignments/{id}/reviews` — §9.3's "result of
+ * a review".
+ *
+ * `recommendedActions` is a list of action tokens here, where a decision's
+ * `recommendedActions` are objects that name their target resources. That
+ * difference is in the plan (§9.3 versus Appendix B) and is kept: a reviewer
+ * recommends a course of action, and the consensus process is what binds an
+ * agreed recommendation to the specific resources it applies to.
+ */
+export const ReviewSubmissionSchema = z
+    .strictObject({
+    outcome: ReviewOutcomeSchema,
+    contextSufficiency: ContextSufficiencySchema,
+    findings: z.array(ReviewFindingSchema).max(CONTRACT_LIMITS.FINDINGS_MAX),
+    recommendedActions: z
+        .array(RecommendedActionSchema)
+        .max(CONTRACT_LIMITS.RECOMMENDED_ACTIONS_MAX),
+    /**
+     * §13.5 and the "sensitive content never reaches logs" invariant apply to
+     * this field as much as to the evidence: a note is free text a human wrote
+     * while looking at the material, so it is bounded here and must be treated
+     * as case content everywhere downstream — never logged, never attested.
+     */
+    notes: z.string().max(CONTRACT_LIMITS.LONG_TEXT_MAX_LENGTH).optional(),
+})
+    .superRefine((review, ctx) => {
+    if (review.outcome === 'insufficient_context' && review.contextSufficiency !== 'insufficient') {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['contextSufficiency'],
+            message: 'an outcome of insufficient_context requires contextSufficiency "insufficient"',
+        });
+    }
+    if (review.outcome === 'violation' && review.findings.length === 0) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['findings'],
+            message: 'a violation outcome requires at least one finding',
+        });
+    }
+});
+/**
+ * §4.1: a reviewer may declare a conflict, a language they do not have,
+ * material too sensitive for them, or context they cannot obtain — "without
+ * penalty". These four are the plan's own list, made structured as §10.3 asks.
+ */
+export const RECUSAL_REASONS = [
+    'conflict_of_interest',
+    'language',
+    'too_sensitive',
+    'insufficient_context',
+];
+export const RecusalReasonSchema = z.enum(RECUSAL_REASONS);
+/**
+ * The body of `POST /v1/reviewer/assignments/{id}/recuse`.
+ *
+ * Strict for the same reason as the submission, and with no free-text field
+ * beyond a short optional note: a recusal is routing information, and the more
+ * it can say about the case, the more it becomes a channel for case content to
+ * leak into operational data.
+ */
+export const RecusalSubmissionSchema = z.strictObject({
+    reason: RecusalReasonSchema,
+    note: z.string().max(CONTRACT_LIMITS.SHORT_TEXT_MAX_LENGTH).optional(),
+});
+//# sourceMappingURL=reviews.js.map

package/dist/esm/reviews.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviews.js","sourceRoot":"","sources":["../../src/reviews.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,cAAc,EACd,kBAAkB,GACnB,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,WAAW;IACX,cAAc;IACd,sBAAsB;IACtB,qBAAqB;CACb,CAAC;AACX,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAG3D,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,YAAY,EAAE,cAAc,CAAU,CAAC;AAC7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAGtE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,YAAY,CAAC;IAChD,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,6BAA6B,CAAC;IAChG,QAAQ,EAAE,cAAc;IACxB,OAAO,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACxC,UAAU,EAAE,kBAAkB;IAC9B,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;CAC/F,CAAC,CAAC;AAGH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,YAAY,CAAC;IACZ,OAAO,EAAE,mBAAmB;IAC5B,kBAAkB,EAAE,wBAAwB;IAC5C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,YAAY,CAAC;IACxE,kBAAkB,EAAE,CAAC;SAClB,KAAK,CAAC,uBAAuB,CAAC;SAC9B,GAAG,CAAC,eAAe,CAAC,uBAAuB,CAAC;IAC/C;;;;;OAKG;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC;KACD,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC3B,IAAI,MAAM,CAAC,OAAO,KAAK,sBAAsB,IAAI,MAAM,CAAC,kBAAkB,KAAK,cAAc,EAAE,CAAC;QAC9F,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,oBAAoB,CAAC;YAC5B,OAAO,EAAE,+EAA+E;SACzF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EAAE,mDAAmD;SAC7D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAGL;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,sBAAsB;IACtB,UAAU;IACV,eAAe;IACf,sBAAsB;CACd,CAAC;AACX,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAG3D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC;IACpD,MAAM,EAAE,mBAAmB;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC,CAAC"}

package/dist/esm/taxonomy.js

@@ -0,0 +1,278 @@
+/**
+ * The universal classification layer (§6.1, §6.3).
+ *
+ * §6.1 separates three layers and warns that mixing them makes the service
+ * unusable across applications with different rules. This module is the FIRST
+ * layer only — "what does the material contain or represent?" — and it belongs
+ * to CrowdSource. Whether that content violates anything is the second layer
+ * (`policies.ts`, per tenant) and whether it should move global trust is the
+ * third (`reputation-events.ts`). Nothing here may encode a single tenant's
+ * vocabulary.
+ *
+ * The code list is CLOSED. `other.policy_specific` and `other.unclassifiable`
+ * are the escape hatches the plan provides for material that does not fit; an
+ * open string would let a tenant mint private codes, which is precisely the
+ * cross-application comparability §6.1 exists to protect. Adding a code is an
+ * additive change that bumps `UNIVERSAL_TAXONOMY_VERSION`, and §6.4 requires
+ * every decision to record the version it was classified under, so historical
+ * decisions keep meaning what they meant.
+ */
+import { z } from 'zod';
+/** §6.3 families. */
+export const TAXONOMY_FAMILIES = [
+    'integrity',
+    'harassment',
+    'hate',
+    'violence',
+    'sexual_content',
+    'child_safety',
+    'self_harm',
+    'privacy',
+    'commerce',
+    'platform_abuse',
+    'other',
+];
+export const TaxonomyFamilySchema = z.enum(TAXONOMY_FAMILIES);
+const INTEGRITY_CODES = [
+    'integrity.spam',
+    'integrity.scam',
+    'integrity.fraud',
+    'integrity.impersonation',
+    'integrity.coordinated_manipulation',
+];
+const HARASSMENT_CODES = [
+    'harassment.insult',
+    'harassment.targeted_abuse',
+    'harassment.sexual_harassment',
+    'harassment.doxxing',
+    'harassment.credible_threat',
+];
+const HATE_CODES = [
+    'hate.dehumanization',
+    'hate.slur',
+    'hate.incitement',
+    'hate.protected_targeting',
+];
+const VIOLENCE_CODES = [
+    'violence.graphic',
+    'violence.threat',
+    'violence.instruction',
+    'violence.celebration',
+];
+const SEXUAL_CONTENT_CODES = [
+    'sexual_content.nudity',
+    'sexual_content.explicit_activity',
+    'sexual_content.non_consensual',
+    'sexual_content.exploitation',
+];
+const CHILD_SAFETY_CODES = [
+    'child_safety.sexualization',
+    'child_safety.grooming',
+    'child_safety.exploitation',
+];
+const SELF_HARM_CODES = [
+    'self_harm.promotion',
+    'self_harm.instruction',
+    'self_harm.imminent_risk',
+];
+const PRIVACY_CODES = [
+    'privacy.personal_information',
+    'privacy.intimate_media',
+    'privacy.location_exposure',
+];
+const COMMERCE_CODES = [
+    'commerce.prohibited_item',
+    'commerce.counterfeit',
+    'commerce.misleading_listing',
+    'commerce.unsafe_product',
+];
+const PLATFORM_ABUSE_CODES = [
+    'platform_abuse.ban_evasion',
+    'platform_abuse.report_abuse',
+    'platform_abuse.automation_abuse',
+];
+const OTHER_CODES = ['other.policy_specific', 'other.unclassifiable'];
+/**
+ * §6.3, grouped.
+ *
+ * §9.4 requires consensus on the "main taxonomic family", not only on the exact
+ * code, so the grouping is part of the contract rather than something the
+ * consensus engine re-derives from string prefixes.
+ */
+export const TAXONOMY_CODES_BY_FAMILY = Object.freeze({
+    integrity: INTEGRITY_CODES,
+    harassment: HARASSMENT_CODES,
+    hate: HATE_CODES,
+    violence: VIOLENCE_CODES,
+    sexual_content: SEXUAL_CONTENT_CODES,
+    child_safety: CHILD_SAFETY_CODES,
+    self_harm: SELF_HARM_CODES,
+    privacy: PRIVACY_CODES,
+    commerce: COMMERCE_CODES,
+    platform_abuse: PLATFORM_ABUSE_CODES,
+    other: OTHER_CODES,
+});
+export const UNIVERSAL_TAXONOMY_CODES = [
+    ...INTEGRITY_CODES,
+    ...HARASSMENT_CODES,
+    ...HATE_CODES,
+    ...VIOLENCE_CODES,
+    ...SEXUAL_CONTENT_CODES,
+    ...CHILD_SAFETY_CODES,
+    ...SELF_HARM_CODES,
+    ...PRIVACY_CODES,
+    ...COMMERCE_CODES,
+    ...PLATFORM_ABUSE_CODES,
+    ...OTHER_CODES,
+];
+export const TaxonomyCodeSchema = z.enum(UNIVERSAL_TAXONOMY_CODES);
+/**
+ * The version of the code list above.
+ *
+ * §6.4: every decision records the taxonomy version it was decided under, and a
+ * policy update never silently rewrites history. Keeping the constant in the
+ * same module as the codes is what makes that possible — the two cannot drift.
+ * The value is the one the plan uses in Appendix B and §11.6.
+ */
+export const UNIVERSAL_TAXONOMY_VERSION = '2026.1';
+/** The family a code belongs to. */
+export function taxonomyFamilyOf(code) {
+    const [family] = code.split('.');
+    return TaxonomyFamilySchema.parse(family);
+}
+/** §9.4 / §11.8 severity scale. */
+export const SEVERITIES = ['low', 'medium', 'high', 'critical'];
+export const SeveritySchema = z.enum(SEVERITIES);
+/**
+ * How far a finding reaches.
+ *
+ * §11.6 and Appendix B use `oxy_network`; §11.7.5 additionally names
+ * `identity_integrity` as a scope that may produce an Oxy Trust effect. The
+ * plan never names the third value — the one that means "this matters to the
+ * application and stops there" — even though §6.5's entire argument is that
+ * most local restrictions must NOT become global sanctions. `application_local`
+ * is the contract's name for it and is the ONE token in this package invented
+ * rather than quoted. Modelling it as an absent field instead would make
+ * §11.7.5 a presence check, which fails open.
+ */
+export const FINDING_SCOPES = ['application_local', 'oxy_network', 'identity_integrity'];
+export const FindingScopeSchema = z.enum(FINDING_SCOPES);
+/**
+ * Scopes that §11.7.5 allows to reach Oxy Trust.
+ *
+ * Exported as its own schema so `reputation-events.ts` states the rule in the
+ * type rather than re-checking it at runtime.
+ */
+export const REPUTATION_ELIGIBLE_FINDING_SCOPES = ['oxy_network', 'identity_integrity'];
+export const ReputationEligibleFindingScopeSchema = z.enum(REPUTATION_ELIGIBLE_FINDING_SCOPES);
+/**
+ * Who a finding attributes conduct to.
+ *
+ * Appendix B and §11.6 use `author`. §11.11 and §11.12 describe confirmed
+ * report abuse and confirmed review abuse producing conduct effects of their
+ * own, which is where the other two values come from. There is deliberately no
+ * `unknown`: attribution exists to name a principal, and §11.7.4 will not let
+ * an effect land without a binding proof for that principal anyway.
+ */
+export const FINDING_ATTRIBUTIONS = ['author', 'reporter', 'reviewer'];
+export const FindingAttributionSchema = z.enum(FINDING_ATTRIBUTIONS);
+/**
+ * What CrowdSource may recommend an application do.
+ *
+ * The plan writes action tokens in two places. §6.2, §9.3, §10.7 and Appendix B
+ * recommend `remove_or_restrict` and `allow_with_label`; §7.6 tabulates, per
+ * decision outcome, the actions an application may take in response. They are
+ * the same vocabulary seen from the two ends of one exchange, so the contract
+ * carries the union as one closed list — otherwise a recommendation and the
+ * enforcement that answers it would not be comparable, and §7.6's requirement
+ * that an application "record what it did and why" would compare apples to
+ * pears.
+ *
+ * §7.6's outcome→action table is NOT reproduced as a constraint. It bounds what
+ * an application may do in response to an outcome, not what a jury may
+ * recommend — Appendix B recommends `remove_or_restrict`, which does not appear
+ * in §7.6's `violation` row at all. Binding the two would reject the plan's own
+ * reference decision.
+ */
+export const RECOMMENDED_ACTIONS = [
+    'remove_or_restrict',
+    'allow_with_label',
+    'remove',
+    'hide',
+    'label',
+    'age_gate',
+    'reduce_distribution',
+    'freeze_transaction',
+    'suspend_user',
+    'request_changes',
+    'allow',
+    'restore',
+    'no_action',
+    'request_more_context',
+    'hold',
+    'local_manual_review',
+    'keep_restricted_temporarily',
+    'escalate',
+    'no_global_effect',
+    'specialist_queue',
+    'legal_queue',
+    'safety_queue',
+];
+export const RecommendedActionSchema = z.enum(RECOMMENDED_ACTIONS);
+/**
+ * The context that makes a classification not mean what it usually means —
+ * §9.2's and §9.4's "excepción", §6.2's `context`.
+ *
+ * §6.2's worked example is where this field comes from and what fixes its
+ * shape: the jury's finding is `sexual_content.nudity, severity = medium,
+ * context = artistic`, and it is that qualifier — not the code and not the
+ * severity — that turns the same classification into a violation under one
+ * application's policy and not under another's. It therefore belongs to layer
+ * one, beside the code: a reviewer describes what the material IS, and
+ * "artistic nudity" is a different description from "nudity".
+ *
+ * §9.4 makes it one of the six dimensions consensus is measured on, which is
+ * the reason it must be a CLOSED list. Two reviewers who both answer
+ * `no_violation` but for incompatible reasons — one because the material is
+ * documentary, one because they think the rule does not cover it at all — have
+ * not agreed about the material, and a free-text field could not tell the two
+ * apart. An open token would also be a channel for case content to reach a
+ * decision record, which §13.5 forbids.
+ *
+ * Only `artistic` is the plan's own word. The rest are the exception vocabulary
+ * every published moderation policy shares, and they are named here rather than
+ * left to a tenant because layer one is CrowdSource's (§6.1) — a tenant that
+ * could mint its own exception tokens would make findings incomparable across
+ * applications, which is exactly what §6.1 exists to prevent. Absence means no
+ * exception applies, which is the safe direction: a finding with no exception
+ * stands as classified.
+ */
+export const FINDING_CONTEXTS = [
+    'artistic',
+    'educational',
+    'documentary',
+    'newsworthy',
+    'satire',
+    'counter_speech',
+    'medical',
+    'consensual',
+    'fictional',
+];
+export const FindingContextSchema = z.enum(FINDING_CONTEXTS);
+/**
+ * A tenant's advance classification of how exposing the material is.
+ *
+ * The plan names exactly one value — `standard`, in Appendix A — and §7.5
+ * clearly implies at least one more (categories that never reach a community
+ * jury). Rather than invent the rest, this stays an open lowercase token: it is
+ * a HINT (§5.2: "never shown as a verdict"), the authoritative
+ * `sensitivity_class` is computed by triage server-side (§12.8), and access to
+ * sensitive material is gated on that computed class, never on what the tenant
+ * asserted. Closing this list is a product decision that has not been made.
+ */
+export const SensitivityHintSchema = z
+    .string()
+    .min(1)
+    .max(40)
+    .regex(/^[a-z][a-z0-9_]*$/, 'must be a lowercase token');
+//# sourceMappingURL=taxonomy.js.map

package/dist/esm/taxonomy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taxonomy.js","sourceRoot":"","sources":["../../src/taxonomy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,qBAAqB;AACrB,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,WAAW;IACX,YAAY;IACZ,MAAM;IACN,UAAU;IACV,gBAAgB;IAChB,cAAc;IACd,WAAW;IACX,SAAS;IACT,UAAU;IACV,gBAAgB;IAChB,OAAO;CACC,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAG9D,MAAM,eAAe,GAAG;IACtB,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,yBAAyB;IACzB,oCAAoC;CAC5B,CAAC;AAEX,MAAM,gBAAgB,GAAG;IACvB,mBAAmB;IACnB,2BAA2B;IAC3B,8BAA8B;IAC9B,oBAAoB;IACpB,4BAA4B;CACpB,CAAC;AAEX,MAAM,UAAU,GAAG;IACjB,qBAAqB;IACrB,WAAW;IACX,iBAAiB;IACjB,0BAA0B;CAClB,CAAC;AAEX,MAAM,cAAc,GAAG;IACrB,kBAAkB;IAClB,iBAAiB;IACjB,sBAAsB;IACtB,sBAAsB;CACd,CAAC;AAEX,MAAM,oBAAoB,GAAG;IAC3B,uBAAuB;IACvB,kCAAkC;IAClC,+BAA+B;IAC/B,6BAA6B;CACrB,CAAC;AAEX,MAAM,kBAAkB,GAAG;IACzB,4BAA4B;IAC5B,uBAAuB;IACvB,2BAA2B;CACnB,CAAC;AAEX,MAAM,eAAe,GAAG;IACtB,qBAAqB;IACrB,uBAAuB;IACvB,yBAAyB;CACjB,CAAC;AAEX,MAAM,aAAa,GAAG;IACpB,8BAA8B;IAC9B,wBAAwB;IACxB,2BAA2B;CACnB,CAAC;AAEX,MAAM,cAAc,GAAG;IACrB,0BAA0B;IAC1B,sBAAsB;IACtB,6BAA6B;IAC7B,yBAAyB;CACjB,CAAC;AAEX,MAAM,oBAAoB,GAAG;IAC3B,4BAA4B;IAC5B,6BAA6B;IAC7B,iCAAiC;CACzB,CAAC;AAEX,MAAM,WAAW,GAAG,CAAC,uBAAuB,EAAE,sBAAsB,CAAU,CAAC;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,SAAS,EAAE,eAAe;IAC1B,UAAU,EAAE,gBAAgB;IAC5B,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,cAAc;IACxB,cAAc,EAAE,oBAAoB;IACpC,YAAY,EAAE,kBAAkB;IAChC,SAAS,EAAE,eAAe;IAC1B,OAAO,EAAE,aAAa;IACtB,QAAQ,EAAE,cAAc;IACxB,cAAc,EAAE,oBAAoB;IACpC,KAAK,EAAE,WAAW;CACV,CAAC,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,GAAG,eAAe;IAClB,GAAG,gBAAgB;IACnB,GAAG,UAAU;IACb,GAAG,cAAc;IACjB,GAAG,oBAAoB;IACvB,GAAG,kBAAkB;IACrB,GAAG,eAAe;IAClB,GAAG,aAAa;IAChB,GAAG,cAAc;IACjB,GAAG,oBAAoB;IACvB,GAAG,WAAW;CACN,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AAGnE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,QAAQ,CAAC;AAEnD,oCAAoC;AACpC,MAAM,UAAU,gBAAgB,CAAC,IAAkB;IACjD,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,mCAAmC;AACnC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAU,CAAC;AACzE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAGjD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,mBAAmB,EAAE,aAAa,EAAE,oBAAoB,CAAU,CAAC;AAClG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAGzD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,aAAa,EAAE,oBAAoB,CAAU,CAAC;AACjG,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;AAG/F;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC;AAChF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAGrE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,oBAAoB;IACpB,kBAAkB;IAClB,QAAQ;IACR,MAAM;IACN,OAAO;IACP,UAAU;IACV,qBAAqB;IACrB,oBAAoB;IACpB,cAAc;IACd,iBAAiB;IACjB,OAAO;IACP,SAAS;IACT,WAAW;IACX,sBAAsB;IACtB,MAAM;IACN,qBAAqB;IACrB,6BAA6B;IAC7B,UAAU;IACV,kBAAkB;IAClB,kBAAkB;IAClB,aAAa;IACb,cAAc;CACN,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAGnE;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,UAAU;IACV,aAAa;IACb,aAAa;IACb,YAAY;IACZ,QAAQ;IACR,gBAAgB;IAChB,SAAS;IACT,YAAY;IACZ,WAAW;CACH,CAAC;AACX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAG7D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,CAAC"}

package/dist/esm/webhooks.js

@@ -0,0 +1,188 @@
+/**
+ * Outbound webhooks (§10.6–§10.9) and the signature contract (§10.8).
+ *
+ * §10.11 asks for two behaviours that pull in opposite directions: unknown
+ * EVENTS must be ignored safely, and unknown FIELDS must not break clients.
+ * This module gives each its own schema rather than compromising on one.
+ *
+ *   * `WebhookEventEnvelopeSchema` validates only what every event has —
+ *     identity, type, timing, tenant — and leaves `data` opaque. A receiver
+ *     verifies the signature, records the event id for idempotency, and ignores
+ *     what it does not recognise, without a schema update ever being the reason
+ *     a delivery fails.
+ *   * `KnownWebhookEventSchema` is the discriminated union of the eight events
+ *     §10.6 defines, for the branch that actually handles one.
+ *
+ * Everything here is `.loose()`. These payloads travel from CrowdSource to a
+ * tenant, so an unknown field is a newer server, not an attack; stripping it
+ * would silently discard data from a receiver that persists `event.data` for
+ * later processing — which is precisely what §10.8's "respond 2xx quickly and
+ * queue the processing" tells receivers to do.
+ */
+import { z } from 'zod';
+import { CreateReportResponseSchema } from './case-envelope.js';
+import { DecisionSchema } from './decisions.js';
+import { IdentifierSchema, TimestampSchema } from './primitives.js';
+/** §10.6. */
+export const WEBHOOK_EVENT_TYPES = [
+    'report.received',
+    'case.created',
+    'case.escalated',
+    'case.decided',
+    'decision.corrected',
+    'appeal.created',
+    'appeal.decided',
+    'case.closed',
+];
+export const WebhookEventTypeSchema = z.enum(WEBHOOK_EVENT_TYPES);
+/**
+ * Any event type, including ones this version of the contract does not know.
+ *
+ * Shape-checked but not enumerated, so that "unknown events must be ignored
+ * safely" is something a receiver can DO rather than something it is told about
+ * after its parse has already thrown.
+ */
+export const AnyWebhookEventTypeSchema = z
+    .string()
+    .min(3)
+    .max(64)
+    .regex(/^[a-z][a-z0-9_]*(\.[a-z0-9_]+)+$/, 'must be a dotted lowercase event type');
+const webhookEnvelopeShape = {
+    id: IdentifierSchema,
+    createdAt: TimestampSchema,
+    organizationId: IdentifierSchema,
+    applicationId: IdentifierSchema,
+};
+/**
+ * The envelope every delivery shares (§10.7), with `data` left opaque.
+ *
+ * Parse with this first. `id` is the idempotency key §10.8 requires receivers
+ * to store; `type` decides whether there is anything to do.
+ */
+export const WebhookEventEnvelopeSchema = z.looseObject({
+    ...webhookEnvelopeShape,
+    type: AnyWebhookEventTypeSchema,
+    data: z.record(z.string(), z.unknown()),
+});
+const ReportReceivedEventSchema = z.looseObject({
+    ...webhookEnvelopeShape,
+    type: z.literal('report.received'),
+    /** §10.6: "optional confirmation of receipt and merge" — §10.4's response. */
+    data: CreateReportResponseSchema,
+});
+const CaseCreatedEventSchema = z.looseObject({
+    ...webhookEnvelopeShape,
+    type: z.literal('case.created'),
+    data: z.looseObject({ caseId: IdentifierSchema }),
+});
+const CaseEscalatedEventSchema = z.looseObject({
+    ...webhookEnvelopeShape,
+    type: z.literal('case.escalated'),
+    data: z.looseObject({ caseId: IdentifierSchema }),
+});
+const CaseDecidedEventSchema = z.looseObject({
+    ...webhookEnvelopeShape,
+    type: z.literal('case.decided'),
+    data: z.looseObject({ caseId: IdentifierSchema, decision: DecisionSchema }),
+});
+/**
+ * §10.6: "a later revision replaces the previous decision".
+ *
+ * The carried decision must therefore name what it superseded. `DecisionSchema`
+ * already requires that of any revision past the first; requiring it again here
+ * is what stops a correction from carrying revision 1.
+ */
+const DecisionCorrectedEventSchema = z.looseObject({
+    ...webhookEnvelopeShape,
+    type: z.literal('decision.corrected'),
+    data: z.looseObject({
+        caseId: IdentifierSchema,
+        decision: DecisionSchema.refine((decision) => decision.supersedesDecisionId !== undefined, { message: 'a corrected decision must supersede the decision it replaces' }),
+    }),
+});
+const AppealCreatedEventSchema = z.looseObject({
+    ...webhookEnvelopeShape,
+    type: z.literal('appeal.created'),
+    data: z.looseObject({ caseId: IdentifierSchema, appealId: IdentifierSchema }),
+});
+const AppealDecidedEventSchema = z.looseObject({
+    ...webhookEnvelopeShape,
+    type: z.literal('appeal.decided'),
+    data: z.looseObject({
+        caseId: IdentifierSchema,
+        appealId: IdentifierSchema,
+        decision: DecisionSchema,
+    }),
+});
+const CaseClosedEventSchema = z.looseObject({
+    ...webhookEnvelopeShape,
+    type: z.literal('case.closed'),
+    data: z.looseObject({ caseId: IdentifierSchema }),
+});
+/**
+ * The eight events of §10.6, discriminated on `type`.
+ *
+ * Only `case.decided` has its payload specified in the plan (§10.7). The other
+ * seven carry the case they are about and whatever identifies the object that
+ * moved; they are loose, so filling them in later is additive and needs no
+ * version bump (§10.11).
+ */
+export const KnownWebhookEventSchema = z.discriminatedUnion('type', [
+    ReportReceivedEventSchema,
+    CaseCreatedEventSchema,
+    CaseEscalatedEventSchema,
+    CaseDecidedEventSchema,
+    DecisionCorrectedEventSchema,
+    AppealCreatedEventSchema,
+    AppealDecidedEventSchema,
+    CaseClosedEventSchema,
+]);
+/** §10.8 headers, in their canonical casing. HTTP header names are case-insensitive; look them up accordingly. */
+export const WEBHOOK_EVENT_ID_HEADER = 'X-CrowdSource-Event-Id';
+export const WEBHOOK_TIMESTAMP_HEADER = 'X-CrowdSource-Timestamp';
+export const WEBHOOK_SIGNATURE_HEADER = 'X-CrowdSource-Signature';
+/** The signature scheme prefix, as in `v1=<hex>`. */
+export const WEBHOOK_SIGNATURE_VERSION = 'v1';
+/** §10.8: reject timestamps more than five minutes away from now. */
+export const WEBHOOK_TIMESTAMP_TOLERANCE_SECONDS = 300;
+/** Unix seconds, as the header carries them. */
+export const WebhookTimestampHeaderSchema = z
+    .string()
+    .regex(/^[0-9]{1,15}$/, 'must be unix seconds');
+/** `v1=<64 lowercase hex>` — HMAC-SHA256 of the signed payload. */
+export const WebhookSignatureHeaderSchema = z
+    .string()
+    .regex(/^v1=[0-9a-f]{64}$/, 'must be "v1=" followed by 64 lowercase hex characters');
+/**
+ * The exact bytes both sides sign: `timestamp + "." + rawBody` (§10.8).
+ *
+ * This lives in the contract, not in the signer or the verifier, because a
+ * disagreement between those two about what gets signed is invisible until
+ * every delivery starts failing — or, far worse, until a signature validates
+ * over bytes that are not the ones the receiver goes on to parse. There is no
+ * cryptography here and no transport; the HMAC belongs to the backend's signer
+ * and the SDK's middleware.
+ *
+ * `timestamp` is the header value VERBATIM. Re-deriving it from a parsed number
+ * is the mistake this signature exists to catch, and the receiver must verify
+ * over exactly what arrived.
+ */
+export function buildWebhookSignedPayload(timestamp, rawBody) {
+    return `${timestamp}.${rawBody}`;
+}
+/**
+ * §10.9's backoff, in seconds after the initial attempt.
+ *
+ * Published behaviour a tenant plans around, so it belongs to the contract
+ * rather than to the delivery worker. After the last one the delivery is
+ * `dead_letter`, the tenant is alerted, and replay is manual.
+ */
+export const WEBHOOK_RETRY_SCHEDULE_SECONDS = Object.freeze([
+    30,
+    120,
+    900,
+    3600,
+    21600,
+    86400,
+]);
+//# sourceMappingURL=webhooks.js.map

package/dist/esm/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGpE,aAAa;AACb,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,iBAAiB;IACjB,cAAc;IACd,gBAAgB;IAChB,cAAc;IACd,oBAAoB;IACpB,gBAAgB;IAChB,gBAAgB;IAChB,aAAa;CACL,CAAC;AACX,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAGlE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,kCAAkC,EAAE,uCAAuC,CAAC,CAAC;AAEtF,MAAM,oBAAoB,GAAG;IAC3B,EAAE,EAAE,gBAAgB;IACpB,SAAS,EAAE,eAAe;IAC1B,cAAc,EAAE,gBAAgB;IAChC,aAAa,EAAE,gBAAgB;CAChC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,WAAW,CAAC;IACtD,GAAG,oBAAoB;IACvB,IAAI,EAAE,yBAAyB;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CACxC,CAAC,CAAC;AAGH,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC;IAC9C,GAAG,oBAAoB;IACvB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,8EAA8E;IAC9E,IAAI,EAAE,0BAA0B;CACjC,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC,WAAW,CAAC;IAC3C,GAAG,oBAAoB;IACvB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,CAAC,WAAW,CAAC;IAC7C,GAAG,oBAAoB;IACvB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC,WAAW,CAAC;IAC3C,GAAG,oBAAoB;IACvB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5E,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,4BAA4B,GAAG,CAAC,CAAC,WAAW,CAAC;IACjD,GAAG,oBAAoB;IACvB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC;QAClB,MAAM,EAAE,gBAAgB;QACxB,QAAQ,EAAE,cAAc,CAAC,MAAM,CAC7B,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS,EACzD,EAAE,OAAO,EAAE,8DAA8D,EAAE,CAC5E;KACF,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,CAAC,WAAW,CAAC;IAC7C,GAAG,oBAAoB;IACvB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CAC9E,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,CAAC,WAAW,CAAC;IAC7C,GAAG,oBAAoB;IACvB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC;QAClB,MAAM,EAAE,gBAAgB;QACxB,QAAQ,EAAE,gBAAgB;QAC1B,QAAQ,EAAE,cAAc;KACzB,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,WAAW,CAAC;IAC1C,GAAG,oBAAoB;IACvB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAClE,yBAAyB;IACzB,sBAAsB;IACtB,wBAAwB;IACxB,sBAAsB;IACtB,4BAA4B;IAC5B,wBAAwB;IACxB,wBAAwB;IACxB,qBAAqB;CACtB,CAAC,CAAC;AAGH,kHAAkH;AAClH,MAAM,CAAC,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAChE,MAAM,CAAC,MAAM,wBAAwB,GAAG,yBAAyB,CAAC;AAClE,MAAM,CAAC,MAAM,wBAAwB,GAAG,yBAAyB,CAAC;AAElE,qDAAqD;AACrD,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAE9C,qEAAqE;AACrE,MAAM,CAAC,MAAM,mCAAmC,GAAG,GAAG,CAAC;AAEvD,gDAAgD;AAChD,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,EAAE;KACR,KAAK,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;AAElD,mEAAmE;AACnE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,EAAE;KACR,KAAK,CAAC,mBAAmB,EAAE,uDAAuD,CAAC,CAAC;AAEvF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB,CAAC,SAAiB,EAAE,OAAe;IAC1E,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC7E,EAAE;IACF,GAAG;IACH,GAAG;IACH,IAAK;IACL,KAAM;IACN,KAAM;CACP,CAAC,CAAC"}

package/dist/index.d.ts

@@ -32,15 +32,17 @@
  * depth-bounded, scalar-typed, key-restricted and free of prototype-bearing
  * names.
  */
-export * from './closed';
-export * from './primitives';
-export * from './taxonomy';
-export * from './policies';
-export * from './resources';
-export * from './case-envelope';
-export * from './reviews';
-export * from './decisions';
-export * from './webhooks';
-export * from './reputation-events';
-export * from './json-schema';
+export * from './closed.js';
+export * from './primitives.js';
+export * from './taxonomy.js';
+export * from './policies.js';
+export * from './resources.js';
+export * from './case-envelope.js';
+export * from './reviews.js';
+export * from './reviewer-surface.js';
+export * from './decisions.js';
+export * from './appeals.js';
+export * from './webhooks.js';
+export * from './reputation-events.js';
+export * from './json-schema.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC"}