@thegeem/protocol 0.1.36 → 0.1.38

package/dist/index.cjs

@@ -30,10 +30,15 @@ __export(index_exports, {
   MODES: () => MODES,
   MODE_IDS: () => MODE_IDS,
   PROTOCOL_VERSION: () => PROTOCOL_VERSION,
+  REJECT_REASONS: () => REJECT_REASONS,
   ROOM_ALPHABET: () => ROOM_ALPHABET,
+  SUBMISSION_KINDS: () => SUBMISSION_KINDS,
+  SUBMISSION_STATUSES: () => SUBMISSION_STATUSES,
   gameIdForPv: () => gameIdForPv,
   gamesForPv: () => gamesForPv,
-  modesForGame: () => modesForGame
+  modesForGame: () => modesForGame,
+  normalizeWesternDigits: () => normalizeWesternDigits,
+  sanitizeName: () => sanitizeName
 });
 module.exports = __toCommonJS(index_exports);
 var import_zod = require("zod");
@@ -75,7 +80,9 @@ var EMOTE_IDS = ["laugh", "wow", "think", "gg"];
 var CHARACTER_IDS = ["m", "f"];
 var ROOM_ALPHABET = "ACDEFGHJKMNPQRTUVWXY2346789";
 var UNSAFE_CHARS = /[\p{Cc}\u202A-\u202E\u2066-\u2069<>]/gu;
-var DisplayName = import_zod.z.string().trim().min(1).max(LIMITS.MAX_NAME_LEN).transform((s) => s.replace(UNSAFE_CHARS, "").trim()).refine((s) => s.length >= 1, "name is empty after sanitizing");
+var normalizeWesternDigits = (s) => s.replace(/[٠-٩۰-۹]/g, (d) => String("\u0660\u0661\u0662\u0663\u0664\u0665\u0666\u0667\u0668\u0669".indexOf(d) >= 0 ? "\u0660\u0661\u0662\u0663\u0664\u0665\u0666\u0667\u0668\u0669".indexOf(d) : "\u06F0\u06F1\u06F2\u06F3\u06F4\u06F5\u06F6\u06F7\u06F8\u06F9".indexOf(d)));
+var sanitizeName = (s) => normalizeWesternDigits(s.replace(UNSAFE_CHARS, "")).trim();
+var DisplayName = import_zod.z.string().trim().min(1).max(LIMITS.MAX_NAME_LEN).transform(sanitizeName).refine((s) => s.length >= 1, "name is empty after sanitizing");
 var RoomCode = import_zod.z.string().trim().toUpperCase().regex(new RegExp(`^[${ROOM_ALPHABET}]{${LIMITS.ROOM_CODE_LEN}}$`), "bad room code");
 var PlayerId = import_zod.z.string().max(40);
 var HelpType = import_zod.z.enum([
@@ -89,7 +96,7 @@ var HelpType = import_zod.z.enum([
 ]);
 var Pv = import_zod.z.number().int().min(1).max(1e6).optional();
 var IdToken = import_zod.z.string().max(4096).optional();
-var Platform = import_zod.z.enum(["web", "ios", "android"]).optional();
+var Platform = import_zod.z.enum(["web", "ios", "android", "tv"]).optional();
 var AppVersion = import_zod.z.string().trim().max(24).regex(/^[0-9]+(\.[0-9]+){0,3}([-+][0-9A-Za-z.-]+)?$/, "bad app version").optional();
 var Avatar = import_zod.z.object({
   emoji: import_zod.z.string().min(1).max(16).transform((s) => s.replace(UNSAFE_CHARS, "")).refine((s) => s.length >= 1, "empty emoji"),
@@ -216,7 +223,11 @@ var ClientMsg = import_zod.z.discriminatedUnion("t", [
   // trivia is 4-option (0–3)
   import_zod.z.object({ t: import_zod.z.literal("useHelp"), helpType: HelpType }),
   // sabotage a rival (active team only): spend a sabotage help to debuff targetTeam's next question
-  import_zod.z.object({ t: import_zod.z.literal("sabotage"), helpType: HelpType, targetTeam: import_zod.z.number().int().min(0).max(LIMITS.MAX_PLAYERS - 1) }),
+  // `player` (gs#80): WHICH member of the target team sits out — required by استريح/restPlayer and
+  // ignored by عرجوب/tripLevel, which targets a whole team. Optional on the wire so pre-gs#80 clients
+  // are unchanged; the engine refuses to spend a restPlayer card without a valid one, so an old client
+  // cannot burn a lifeline by omitting it.
+  import_zod.z.object({ t: import_zod.z.literal("sabotage"), helpType: HelpType, targetTeam: import_zod.z.number().int().min(0).max(LIMITS.MAX_PLAYERS - 1), player: import_zod.z.string().max(64).optional() }),
   // 0-based team index
   // moderation
   // Report another player in the room (App Store 1.2 UGC — display names). Available in lobby or
@@ -260,6 +271,9 @@ var ClientMsg = import_zod.z.discriminatedUnion("t", [
   // Drawer passes on the served word (capped per draw-turn; relay serves a fresh one).
   import_zod.z.object({ t: import_zod.z.literal("skipWord") })
 ]);
+var SUBMISSION_STATUSES = ["pending", "accepted", "rejected"];
+var SUBMISSION_KINDS = ["new", "edit"];
+var REJECT_REASONS = ["duplicate", "unclear_answer", "not_family", "inaccurate", "too_narrow", "other"];
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   CHARACTER_IDS,
@@ -272,8 +286,13 @@ var ClientMsg = import_zod.z.discriminatedUnion("t", [
   MODES,
   MODE_IDS,
   PROTOCOL_VERSION,
+  REJECT_REASONS,
   ROOM_ALPHABET,
+  SUBMISSION_KINDS,
+  SUBMISSION_STATUSES,
   gameIdForPv,
   gamesForPv,
-  modesForGame
+  modesForGame,
+  normalizeWesternDigits,
+  sanitizeName
 });

package/dist/index.d.cts

@@ -103,6 +103,23 @@ declare const CHARACTER_IDS: readonly ["m", "f"];
 type CharacterId = (typeof CHARACTER_IDS)[number];
 /** Unambiguous room-code alphabet — no 0/O, 1/I/L. */
 declare const ROOM_ALPHABET = "ACDEFGHJKMNPQRTUVWXY2346789";
+/**
+ * Arabic-Indic (٠-٩) and Extended/Persian (۰-۹) digits → Western, D-043 applied to NAMES at the
+ * gate (ruling 2026-08-13, the «سالم ١٧» leaderboard sighting). A digit is a GLYPH of a number,
+ * not identity — «سالم ١٧» and «سالم 17» are the same name — so normalising at write-time is the
+ * same class of edit as the bidi strip above, and every surface on every client agrees on what to
+ * call the person. Normalising at RENDER instead would have web and iOS disagreeing about a name.
+ * Letters are never touched; this maps exactly twenty codepoints.
+ */
+declare const normalizeWesternDigits: (s: string) => string;
+/**
+ * THE definition of "a safe player-supplied string": strip the unsafe class, normalise digits.
+ * Exported because it was being hand-copied — the relay's HTTP gates (account PATCH, question
+ * submissions) each grew their own copy of this exact body, and one of those copies stored the
+ * bidi characters LITERALLY in source, where any formatter or copy-paste could silently change
+ * what it matches. A rule that can be edited by accident is not a rule.
+ */
+declare const sanitizeName: (s: string) => string;
 declare const HelpType: z.ZodEnum<["removeTwoAnswers", "changeQuestion", "extraTime", "doublePoints", "stealPoints", "restPlayer", "tripLevel"]>;
 declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     t: z.ZodLiteral<"createRoom">;
@@ -121,7 +138,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character: z.ZodOptional<z.ZodEnum<["m", "f"]>>;
     pv: z.ZodOptional<z.ZodNumber>;
     idToken: z.ZodOptional<z.ZodString>;
-    platform: z.ZodOptional<z.ZodEnum<["web", "ios", "android"]>>;
+    platform: z.ZodOptional<z.ZodEnum<["web", "ios", "android", "tv"]>>;
     appVersion: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     t: "createRoom";
@@ -134,7 +151,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character?: "m" | "f" | undefined;
     pv?: number | undefined;
     idToken?: string | undefined;
-    platform?: "web" | "ios" | "android" | undefined;
+    platform?: "web" | "ios" | "android" | "tv" | undefined;
     appVersion?: string | undefined;
 }, {
     t: "createRoom";
@@ -147,7 +164,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character?: "m" | "f" | undefined;
     pv?: number | undefined;
     idToken?: string | undefined;
-    platform?: "web" | "ios" | "android" | undefined;
+    platform?: "web" | "ios" | "android" | "tv" | undefined;
     appVersion?: string | undefined;
 }>, z.ZodObject<{
     t: z.ZodLiteral<"renameHost">;
@@ -205,7 +222,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character: z.ZodOptional<z.ZodEnum<["m", "f"]>>;
     pv: z.ZodOptional<z.ZodNumber>;
     idToken: z.ZodOptional<z.ZodString>;
-    platform: z.ZodOptional<z.ZodEnum<["web", "ios", "android"]>>;
+    platform: z.ZodOptional<z.ZodEnum<["web", "ios", "android", "tv"]>>;
     appVersion: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     code: string;
@@ -218,7 +235,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character?: "m" | "f" | undefined;
     pv?: number | undefined;
     idToken?: string | undefined;
-    platform?: "web" | "ios" | "android" | undefined;
+    platform?: "web" | "ios" | "android" | "tv" | undefined;
     appVersion?: string | undefined;
 }, {
     code: string;
@@ -231,7 +248,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character?: "m" | "f" | undefined;
     pv?: number | undefined;
     idToken?: string | undefined;
-    platform?: "web" | "ios" | "android" | undefined;
+    platform?: "web" | "ios" | "android" | "tv" | undefined;
     appVersion?: string | undefined;
 }>, z.ZodObject<{
     t: z.ZodLiteral<"resume">;
@@ -250,7 +267,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character: z.ZodOptional<z.ZodEnum<["m", "f"]>>;
     pv: z.ZodOptional<z.ZodNumber>;
     idToken: z.ZodOptional<z.ZodString>;
-    platform: z.ZodOptional<z.ZodEnum<["web", "ios", "android"]>>;
+    platform: z.ZodOptional<z.ZodEnum<["web", "ios", "android", "tv"]>>;
     appVersion: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     code: string;
@@ -263,7 +280,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character?: "m" | "f" | undefined;
     pv?: number | undefined;
     idToken?: string | undefined;
-    platform?: "web" | "ios" | "android" | undefined;
+    platform?: "web" | "ios" | "android" | "tv" | undefined;
     appVersion?: string | undefined;
 }, {
     code: string;
@@ -276,7 +293,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character?: "m" | "f" | undefined;
     pv?: number | undefined;
     idToken?: string | undefined;
-    platform?: "web" | "ios" | "android" | undefined;
+    platform?: "web" | "ios" | "android" | "tv" | undefined;
     appVersion?: string | undefined;
 }>, z.ZodObject<{
     t: z.ZodLiteral<"setPlaying">;
@@ -505,14 +522,17 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     t: z.ZodLiteral<"sabotage">;
     helpType: z.ZodEnum<["removeTwoAnswers", "changeQuestion", "extraTime", "doublePoints", "stealPoints", "restPlayer", "tripLevel"]>;
     targetTeam: z.ZodNumber;
+    player: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     t: "sabotage";
     helpType: "removeTwoAnswers" | "changeQuestion" | "extraTime" | "doublePoints" | "stealPoints" | "restPlayer" | "tripLevel";
     targetTeam: number;
+    player?: string | undefined;
 }, {
     t: "sabotage";
     helpType: "removeTwoAnswers" | "changeQuestion" | "extraTime" | "doublePoints" | "stealPoints" | "restPlayer" | "tripLevel";
     targetTeam: number;
+    player?: string | undefined;
 }>, z.ZodObject<{
     t: z.ZodLiteral<"report">;
     playerId: z.ZodString;
@@ -691,6 +711,32 @@ interface LobbyPlayer {
     avatar?: AvatarView;
     /** Team index once the game has started; null/absent in the lobby. */
     teamIndex?: number | null;
+    /**
+     * Equipped avatar-frame slug (e.g. "frame-sadu") — resolves to art via /assets/store/catalog.json
+     * (the catalog is the ONLY resolver; nothing about the art is derived from the slug). Read from the
+     * account once at room entry, so an equip change shows on the player's next join/resume. Absent =
+     * frameless. Earnable-class cosmetics only ever ride the room wire (D-059) — a paid exclusive can
+     * never appear here, so there is no receipt check in the broadcast path and no have/have-not row
+     * between children on one sofa. (gs#84 contract, D-060.)
+     */
+    frame?: string;
+    /**
+     * This room kicked this exact person before — a HINT for the host, never a gate (the ruling is
+     * "label the re-knock, no ban list"). **Present ONLY in the HOST's copy of the frame**: telling a
+     * whole room who was once removed is a social leak, not a moderation aid.
+     *
+     * The same bit also rides `joinRequest` for the immediate ping. This one is the DURABLE carrier —
+     * it is RE-READ from the answer stored on the seat (decided once, at join; never recomputed by
+     * re-matching, which goes stale) and re-sent on every snapshot, so it survives a host reconnect,
+     * where a cached one-shot event would not. A client should prefer this and treat the event as a
+     * nudge. MID-GAME there are no lobby frames: there a host who resumes is re-sent the pending
+     * `joinRequest`s instead (labels included), so the durable promise holds in both halves.
+     *
+     * Absent means "no reason to think so", which includes the deliberate miss: an anonymous player who
+     * force-quits and rejoins reads as a stranger. Matched only on exact socket/sign-in identity — never
+     * a display name or IP, because a wrong label is worse than none.
+     */
+    wasKicked?: boolean;
 }
 /**
  * Who is in the room, carried ON the game-state push (gs#71).
@@ -719,6 +765,9 @@ interface RosterEntry {
     isHost?: boolean;
     /** Is this person currently connected? Mirrors `LobbyPlayer.connected`. */
     connected?: boolean;
+    /** Equipped avatar-frame slug — mirrors `LobbyPlayer.frame`, because the roster is the MID-GAME
+     *  carrier (gs#71): a cosmetic with no mid-game carrier silently vanishes for watchers and the TV. */
+    frame?: string;
 }
 /** Per-recipient context attached to lobby/state pushes. */
 interface YouContext {
@@ -786,10 +835,26 @@ interface TeamView {
     /** The player on THIS team whose turn it is to answer (rotates each turn); null if the team has
      *  no seated players. In controller mode only this player may `answer` on the team's turn. */
     currentPlayerId: string | null;
+    /** استريح (gs#80): this team's player who sits out their next question, if a rival named one. */
+    restedPlayerId?: string | null;
     /** The seated player's privacy-safe avatar (relay-enriched; engine view omits it). */
     avatar?: AvatarView;
 }
 interface QuestionView {
+    /** The category this question came from (gs#94 follow-up, geem-site#54). NOT reveal-gated: the
+     *  category is already on the board tile the player picked, so it gives nothing away — unlike the
+     *  id, which is a handle into the bank. It exists so «اقترح سؤال مشابه» can preset the category
+     *  instead of asking the player to re-pick it; without it a client either asks again or INFERS one,
+     *  and inferring files somebody's question under the wrong category. Optional: pre-gs#94 servers
+     *  omit it and clients must cope. */
+    categoryId?: string;
+    /** The question's id — present ONLY once revealed (gs#90). It exists so a player can say «عدّل
+     *  السؤال» about a specific question: text is neither unique (template-shaped questions collide on
+     *  wording) nor stable, so an edit identified only by its text is not reliably applicable. Kept off
+     *  the wire while the question is LIVE for the same reason `correctAnswerIndex` is — the bank is
+     *  server-side and an id is a handle into it. Optional on the wire: shipped clients ignore it, and
+     *  a client that wants it must tolerate its absence pre-reveal. */
+    id?: string;
     text: string;
     options: string[];
     hiddenOptionIndices: number[];
@@ -797,6 +862,14 @@ interface QuestionView {
     selectedAnswerIndex: number | null;
     /** Only present once revealed (anti-cheat). Null while the question is live. */
     correctAnswerIndex: number | null;
+    /** «سؤال من: …» — community submitter credit (owner ruling 2026-08-14). Present ONLY on
+     *  questions promoted from community submissions; official questions never carry it. NOT
+     *  reveal-gated — a name leaks nothing — so place it wherever it reads best. */
+    submittedBy?: string;
+    /** «معلومة» — optional explanation shown AFTER the reveal. Null while the question is live (it
+     *  usually names the answer — same anti-cheat gate as correctAnswerIndex) and null when the
+     *  question simply has none, which is most of the bank: render the card only when non-null. */
+    explain?: string | null;
     imageName?: string;
     videoName?: string;
     /** For video questions: seconds into the clip to stop playback (so the answer isn't shown). Absent = play through. */
@@ -958,6 +1031,7 @@ type ServerMsg = {
     t: 'joinRequest';
     playerId: string;
     name: string;
+    wasKicked?: boolean;
 } | {
     t: 'joined';
     youId: string;
@@ -983,6 +1057,7 @@ type ServerMsg = {
     hostId: string;
     hostName: string;
     hostAvatar?: AvatarView;
+    hostFrame?: string;
     hostPlaying?: boolean;
     hostPinned?: boolean;
     players: LobbyPlayer[];
@@ -994,6 +1069,9 @@ type ServerMsg = {
     tally?: {
         [playerId: string]: number;
     };
+    tallyNames?: {
+        [playerId: string]: string;
+    };
     modeId: ModeId | null;
     you: YouContext;
 } | {
@@ -1040,10 +1118,51 @@ type ServerMsg = {
     message: string;
     level?: 'info' | 'warn' | 'maintenance';
     restartInSec?: number;
-} | {
+}
+/** `reason` (gs#83, additive): today only `'ended'`, and only on `no_room` — the code WAS a room
+ *  until recently (stale WhatsApp link, knock after the host closed the night). Absent = "no such
+ *  room as far as we know". Lets a client say «انتهى اللعب» instead of «ما في غرفة بهذا الكود»
+ *  without guessing. Old clients ignore it. */
+ | {
     t: 'error';
     code: string;
     message: string;
+    reason?: string;
 };
+/** Review states for a community submission. ⚠️ `approved` is NOT here: it is a DEPRECATED alias
+ *  written by an older geem-admin, mapped to `accepted` by the relay and permitted by 0031's CHECK
+ *  only until that write is switched. It must never become a fourth state. */
+declare const SUBMISSION_STATUSES: readonly ["pending", "accepted", "rejected"];
+type SubmissionStatus = (typeof SUBMISSION_STATUSES)[number];
+/** A brand-new question vs a correction to one already in the bank. */
+declare const SUBMISSION_KINDS: readonly ["new", "edit"];
+type SubmissionKind = (typeof SUBMISSION_KINDS)[number];
+/** Why a submission was turned down. Blame-free by construction — the closest to "you did badly" is
+ *  `duplicate`, which is about the BANK, not the writer. Clients translate these and must fall back
+ *  to `other` on anything unrecognised, which is exactly what makes adding a seventh survivable for a
+ *  build that shipped last month and will never be updated. */
+declare const REJECT_REASONS: readonly ["duplicate", "unclear_answer", "not_family", "inaccurate", "too_narrow", "other"];
+type RejectReason = (typeof REJECT_REASONS)[number];
+/** One row of «أسئلتي». Exists as a named type so the native generator EMITS the three unions above
+ *  — quicktype only reaches what a root references, and hand-typed constants are the whole bug. */
+interface MyQuestionRow {
+    id: string;
+    status: SubmissionStatus;
+    kind: SubmissionKind;
+    text: string;
+    options: string[];
+    correctIndex: number;
+    explain: string | null;
+    createdAt: string;
+    accepted?: {
+        plays: number;
+        firstPlayedAt: string | null;
+        coins: number;
+    };
+    rejected?: {
+        reason: RejectReason;
+        canResubmit: boolean;
+    };
+}
 
-export { type AvatarView, type BuzzerGameMode, CHARACTER_IDS, type CategoryView, type CharacterId, ClientMsg, type DamaMoveView, type DamaPieceView, type DamaStateView, EMOTE_IDS, type Effect, type EmoteId, type ErsimhaStateView, GAMES, GAME_IDS, type GameId, type GameInfo, type GameStateView, type GameStatus, type GameplayFlow, type HelpName, LIMITS, type LobbyPlayer, MIN_SUPPORTED_PV, MODES, MODE_IDS, type ModeId, type ModeInfo, PROTOCOL_VERSION, type PackView, type QuestionView, ROOM_ALPHABET, type RosterEntry, type ServerMsg, type SoundName, type StrokePointView, type TeamSlotView, type TeamView, type YouContext, gameIdForPv, gamesForPv, modesForGame };
+export { type AvatarView, type BuzzerGameMode, CHARACTER_IDS, type CategoryView, type CharacterId, ClientMsg, type DamaMoveView, type DamaPieceView, type DamaStateView, EMOTE_IDS, type Effect, type EmoteId, type ErsimhaStateView, GAMES, GAME_IDS, type GameId, type GameInfo, type GameStateView, type GameStatus, type GameplayFlow, type HelpName, LIMITS, type LobbyPlayer, MIN_SUPPORTED_PV, MODES, MODE_IDS, type ModeId, type ModeInfo, type MyQuestionRow, PROTOCOL_VERSION, type PackView, type QuestionView, REJECT_REASONS, ROOM_ALPHABET, type RejectReason, type RosterEntry, SUBMISSION_KINDS, SUBMISSION_STATUSES, type ServerMsg, type SoundName, type StrokePointView, type SubmissionKind, type SubmissionStatus, type TeamSlotView, type TeamView, type YouContext, gameIdForPv, gamesForPv, modesForGame, normalizeWesternDigits, sanitizeName };

package/dist/index.d.ts

@@ -103,6 +103,23 @@ declare const CHARACTER_IDS: readonly ["m", "f"];
 type CharacterId = (typeof CHARACTER_IDS)[number];
 /** Unambiguous room-code alphabet — no 0/O, 1/I/L. */
 declare const ROOM_ALPHABET = "ACDEFGHJKMNPQRTUVWXY2346789";
+/**
+ * Arabic-Indic (٠-٩) and Extended/Persian (۰-۹) digits → Western, D-043 applied to NAMES at the
+ * gate (ruling 2026-08-13, the «سالم ١٧» leaderboard sighting). A digit is a GLYPH of a number,
+ * not identity — «سالم ١٧» and «سالم 17» are the same name — so normalising at write-time is the
+ * same class of edit as the bidi strip above, and every surface on every client agrees on what to
+ * call the person. Normalising at RENDER instead would have web and iOS disagreeing about a name.
+ * Letters are never touched; this maps exactly twenty codepoints.
+ */
+declare const normalizeWesternDigits: (s: string) => string;
+/**
+ * THE definition of "a safe player-supplied string": strip the unsafe class, normalise digits.
+ * Exported because it was being hand-copied — the relay's HTTP gates (account PATCH, question
+ * submissions) each grew their own copy of this exact body, and one of those copies stored the
+ * bidi characters LITERALLY in source, where any formatter or copy-paste could silently change
+ * what it matches. A rule that can be edited by accident is not a rule.
+ */
+declare const sanitizeName: (s: string) => string;
 declare const HelpType: z.ZodEnum<["removeTwoAnswers", "changeQuestion", "extraTime", "doublePoints", "stealPoints", "restPlayer", "tripLevel"]>;
 declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     t: z.ZodLiteral<"createRoom">;
@@ -121,7 +138,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character: z.ZodOptional<z.ZodEnum<["m", "f"]>>;
     pv: z.ZodOptional<z.ZodNumber>;
     idToken: z.ZodOptional<z.ZodString>;
-    platform: z.ZodOptional<z.ZodEnum<["web", "ios", "android"]>>;
+    platform: z.ZodOptional<z.ZodEnum<["web", "ios", "android", "tv"]>>;
     appVersion: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     t: "createRoom";
@@ -134,7 +151,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character?: "m" | "f" | undefined;
     pv?: number | undefined;
     idToken?: string | undefined;
-    platform?: "web" | "ios" | "android" | undefined;
+    platform?: "web" | "ios" | "android" | "tv" | undefined;
     appVersion?: string | undefined;
 }, {
     t: "createRoom";
@@ -147,7 +164,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character?: "m" | "f" | undefined;
     pv?: number | undefined;
     idToken?: string | undefined;
-    platform?: "web" | "ios" | "android" | undefined;
+    platform?: "web" | "ios" | "android" | "tv" | undefined;
     appVersion?: string | undefined;
 }>, z.ZodObject<{
     t: z.ZodLiteral<"renameHost">;
@@ -205,7 +222,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character: z.ZodOptional<z.ZodEnum<["m", "f"]>>;
     pv: z.ZodOptional<z.ZodNumber>;
     idToken: z.ZodOptional<z.ZodString>;
-    platform: z.ZodOptional<z.ZodEnum<["web", "ios", "android"]>>;
+    platform: z.ZodOptional<z.ZodEnum<["web", "ios", "android", "tv"]>>;
     appVersion: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     code: string;
@@ -218,7 +235,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character?: "m" | "f" | undefined;
     pv?: number | undefined;
     idToken?: string | undefined;
-    platform?: "web" | "ios" | "android" | undefined;
+    platform?: "web" | "ios" | "android" | "tv" | undefined;
     appVersion?: string | undefined;
 }, {
     code: string;
@@ -231,7 +248,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character?: "m" | "f" | undefined;
     pv?: number | undefined;
     idToken?: string | undefined;
-    platform?: "web" | "ios" | "android" | undefined;
+    platform?: "web" | "ios" | "android" | "tv" | undefined;
     appVersion?: string | undefined;
 }>, z.ZodObject<{
     t: z.ZodLiteral<"resume">;
@@ -250,7 +267,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character: z.ZodOptional<z.ZodEnum<["m", "f"]>>;
     pv: z.ZodOptional<z.ZodNumber>;
     idToken: z.ZodOptional<z.ZodString>;
-    platform: z.ZodOptional<z.ZodEnum<["web", "ios", "android"]>>;
+    platform: z.ZodOptional<z.ZodEnum<["web", "ios", "android", "tv"]>>;
     appVersion: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     code: string;
@@ -263,7 +280,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character?: "m" | "f" | undefined;
     pv?: number | undefined;
     idToken?: string | undefined;
-    platform?: "web" | "ios" | "android" | undefined;
+    platform?: "web" | "ios" | "android" | "tv" | undefined;
     appVersion?: string | undefined;
 }, {
     code: string;
@@ -276,7 +293,7 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     character?: "m" | "f" | undefined;
     pv?: number | undefined;
     idToken?: string | undefined;
-    platform?: "web" | "ios" | "android" | undefined;
+    platform?: "web" | "ios" | "android" | "tv" | undefined;
     appVersion?: string | undefined;
 }>, z.ZodObject<{
     t: z.ZodLiteral<"setPlaying">;
@@ -505,14 +522,17 @@ declare const ClientMsg: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
     t: z.ZodLiteral<"sabotage">;
     helpType: z.ZodEnum<["removeTwoAnswers", "changeQuestion", "extraTime", "doublePoints", "stealPoints", "restPlayer", "tripLevel"]>;
     targetTeam: z.ZodNumber;
+    player: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     t: "sabotage";
     helpType: "removeTwoAnswers" | "changeQuestion" | "extraTime" | "doublePoints" | "stealPoints" | "restPlayer" | "tripLevel";
     targetTeam: number;
+    player?: string | undefined;
 }, {
     t: "sabotage";
     helpType: "removeTwoAnswers" | "changeQuestion" | "extraTime" | "doublePoints" | "stealPoints" | "restPlayer" | "tripLevel";
     targetTeam: number;
+    player?: string | undefined;
 }>, z.ZodObject<{
     t: z.ZodLiteral<"report">;
     playerId: z.ZodString;
@@ -691,6 +711,32 @@ interface LobbyPlayer {
     avatar?: AvatarView;
     /** Team index once the game has started; null/absent in the lobby. */
     teamIndex?: number | null;
+    /**
+     * Equipped avatar-frame slug (e.g. "frame-sadu") — resolves to art via /assets/store/catalog.json
+     * (the catalog is the ONLY resolver; nothing about the art is derived from the slug). Read from the
+     * account once at room entry, so an equip change shows on the player's next join/resume. Absent =
+     * frameless. Earnable-class cosmetics only ever ride the room wire (D-059) — a paid exclusive can
+     * never appear here, so there is no receipt check in the broadcast path and no have/have-not row
+     * between children on one sofa. (gs#84 contract, D-060.)
+     */
+    frame?: string;
+    /**
+     * This room kicked this exact person before — a HINT for the host, never a gate (the ruling is
+     * "label the re-knock, no ban list"). **Present ONLY in the HOST's copy of the frame**: telling a
+     * whole room who was once removed is a social leak, not a moderation aid.
+     *
+     * The same bit also rides `joinRequest` for the immediate ping. This one is the DURABLE carrier —
+     * it is RE-READ from the answer stored on the seat (decided once, at join; never recomputed by
+     * re-matching, which goes stale) and re-sent on every snapshot, so it survives a host reconnect,
+     * where a cached one-shot event would not. A client should prefer this and treat the event as a
+     * nudge. MID-GAME there are no lobby frames: there a host who resumes is re-sent the pending
+     * `joinRequest`s instead (labels included), so the durable promise holds in both halves.
+     *
+     * Absent means "no reason to think so", which includes the deliberate miss: an anonymous player who
+     * force-quits and rejoins reads as a stranger. Matched only on exact socket/sign-in identity — never
+     * a display name or IP, because a wrong label is worse than none.
+     */
+    wasKicked?: boolean;
 }
 /**
  * Who is in the room, carried ON the game-state push (gs#71).
@@ -719,6 +765,9 @@ interface RosterEntry {
     isHost?: boolean;
     /** Is this person currently connected? Mirrors `LobbyPlayer.connected`. */
     connected?: boolean;
+    /** Equipped avatar-frame slug — mirrors `LobbyPlayer.frame`, because the roster is the MID-GAME
+     *  carrier (gs#71): a cosmetic with no mid-game carrier silently vanishes for watchers and the TV. */
+    frame?: string;
 }
 /** Per-recipient context attached to lobby/state pushes. */
 interface YouContext {
@@ -786,10 +835,26 @@ interface TeamView {
     /** The player on THIS team whose turn it is to answer (rotates each turn); null if the team has
      *  no seated players. In controller mode only this player may `answer` on the team's turn. */
     currentPlayerId: string | null;
+    /** استريح (gs#80): this team's player who sits out their next question, if a rival named one. */
+    restedPlayerId?: string | null;
     /** The seated player's privacy-safe avatar (relay-enriched; engine view omits it). */
     avatar?: AvatarView;
 }
 interface QuestionView {
+    /** The category this question came from (gs#94 follow-up, geem-site#54). NOT reveal-gated: the
+     *  category is already on the board tile the player picked, so it gives nothing away — unlike the
+     *  id, which is a handle into the bank. It exists so «اقترح سؤال مشابه» can preset the category
+     *  instead of asking the player to re-pick it; without it a client either asks again or INFERS one,
+     *  and inferring files somebody's question under the wrong category. Optional: pre-gs#94 servers
+     *  omit it and clients must cope. */
+    categoryId?: string;
+    /** The question's id — present ONLY once revealed (gs#90). It exists so a player can say «عدّل
+     *  السؤال» about a specific question: text is neither unique (template-shaped questions collide on
+     *  wording) nor stable, so an edit identified only by its text is not reliably applicable. Kept off
+     *  the wire while the question is LIVE for the same reason `correctAnswerIndex` is — the bank is
+     *  server-side and an id is a handle into it. Optional on the wire: shipped clients ignore it, and
+     *  a client that wants it must tolerate its absence pre-reveal. */
+    id?: string;
     text: string;
     options: string[];
     hiddenOptionIndices: number[];
@@ -797,6 +862,14 @@ interface QuestionView {
     selectedAnswerIndex: number | null;
     /** Only present once revealed (anti-cheat). Null while the question is live. */
     correctAnswerIndex: number | null;
+    /** «سؤال من: …» — community submitter credit (owner ruling 2026-08-14). Present ONLY on
+     *  questions promoted from community submissions; official questions never carry it. NOT
+     *  reveal-gated — a name leaks nothing — so place it wherever it reads best. */
+    submittedBy?: string;
+    /** «معلومة» — optional explanation shown AFTER the reveal. Null while the question is live (it
+     *  usually names the answer — same anti-cheat gate as correctAnswerIndex) and null when the
+     *  question simply has none, which is most of the bank: render the card only when non-null. */
+    explain?: string | null;
     imageName?: string;
     videoName?: string;
     /** For video questions: seconds into the clip to stop playback (so the answer isn't shown). Absent = play through. */
@@ -958,6 +1031,7 @@ type ServerMsg = {
     t: 'joinRequest';
     playerId: string;
     name: string;
+    wasKicked?: boolean;
 } | {
     t: 'joined';
     youId: string;
@@ -983,6 +1057,7 @@ type ServerMsg = {
     hostId: string;
     hostName: string;
     hostAvatar?: AvatarView;
+    hostFrame?: string;
     hostPlaying?: boolean;
     hostPinned?: boolean;
     players: LobbyPlayer[];
@@ -994,6 +1069,9 @@ type ServerMsg = {
     tally?: {
         [playerId: string]: number;
     };
+    tallyNames?: {
+        [playerId: string]: string;
+    };
     modeId: ModeId | null;
     you: YouContext;
 } | {
@@ -1040,10 +1118,51 @@ type ServerMsg = {
     message: string;
     level?: 'info' | 'warn' | 'maintenance';
     restartInSec?: number;
-} | {
+}
+/** `reason` (gs#83, additive): today only `'ended'`, and only on `no_room` — the code WAS a room
+ *  until recently (stale WhatsApp link, knock after the host closed the night). Absent = "no such
+ *  room as far as we know". Lets a client say «انتهى اللعب» instead of «ما في غرفة بهذا الكود»
+ *  without guessing. Old clients ignore it. */
+ | {
     t: 'error';
     code: string;
     message: string;
+    reason?: string;
 };
+/** Review states for a community submission. ⚠️ `approved` is NOT here: it is a DEPRECATED alias
+ *  written by an older geem-admin, mapped to `accepted` by the relay and permitted by 0031's CHECK
+ *  only until that write is switched. It must never become a fourth state. */
+declare const SUBMISSION_STATUSES: readonly ["pending", "accepted", "rejected"];
+type SubmissionStatus = (typeof SUBMISSION_STATUSES)[number];
+/** A brand-new question vs a correction to one already in the bank. */
+declare const SUBMISSION_KINDS: readonly ["new", "edit"];
+type SubmissionKind = (typeof SUBMISSION_KINDS)[number];
+/** Why a submission was turned down. Blame-free by construction — the closest to "you did badly" is
+ *  `duplicate`, which is about the BANK, not the writer. Clients translate these and must fall back
+ *  to `other` on anything unrecognised, which is exactly what makes adding a seventh survivable for a
+ *  build that shipped last month and will never be updated. */
+declare const REJECT_REASONS: readonly ["duplicate", "unclear_answer", "not_family", "inaccurate", "too_narrow", "other"];
+type RejectReason = (typeof REJECT_REASONS)[number];
+/** One row of «أسئلتي». Exists as a named type so the native generator EMITS the three unions above
+ *  — quicktype only reaches what a root references, and hand-typed constants are the whole bug. */
+interface MyQuestionRow {
+    id: string;
+    status: SubmissionStatus;
+    kind: SubmissionKind;
+    text: string;
+    options: string[];
+    correctIndex: number;
+    explain: string | null;
+    createdAt: string;
+    accepted?: {
+        plays: number;
+        firstPlayedAt: string | null;
+        coins: number;
+    };
+    rejected?: {
+        reason: RejectReason;
+        canResubmit: boolean;
+    };
+}
 
-export { type AvatarView, type BuzzerGameMode, CHARACTER_IDS, type CategoryView, type CharacterId, ClientMsg, type DamaMoveView, type DamaPieceView, type DamaStateView, EMOTE_IDS, type Effect, type EmoteId, type ErsimhaStateView, GAMES, GAME_IDS, type GameId, type GameInfo, type GameStateView, type GameStatus, type GameplayFlow, type HelpName, LIMITS, type LobbyPlayer, MIN_SUPPORTED_PV, MODES, MODE_IDS, type ModeId, type ModeInfo, PROTOCOL_VERSION, type PackView, type QuestionView, ROOM_ALPHABET, type RosterEntry, type ServerMsg, type SoundName, type StrokePointView, type TeamSlotView, type TeamView, type YouContext, gameIdForPv, gamesForPv, modesForGame };
+export { type AvatarView, type BuzzerGameMode, CHARACTER_IDS, type CategoryView, type CharacterId, ClientMsg, type DamaMoveView, type DamaPieceView, type DamaStateView, EMOTE_IDS, type Effect, type EmoteId, type ErsimhaStateView, GAMES, GAME_IDS, type GameId, type GameInfo, type GameStateView, type GameStatus, type GameplayFlow, type HelpName, LIMITS, type LobbyPlayer, MIN_SUPPORTED_PV, MODES, MODE_IDS, type ModeId, type ModeInfo, type MyQuestionRow, PROTOCOL_VERSION, type PackView, type QuestionView, REJECT_REASONS, ROOM_ALPHABET, type RejectReason, type RosterEntry, SUBMISSION_KINDS, SUBMISSION_STATUSES, type ServerMsg, type SoundName, type StrokePointView, type SubmissionKind, type SubmissionStatus, type TeamSlotView, type TeamView, type YouContext, gameIdForPv, gamesForPv, modesForGame, normalizeWesternDigits, sanitizeName };

package/dist/index.js

@@ -38,7 +38,9 @@ var EMOTE_IDS = ["laugh", "wow", "think", "gg"];
 var CHARACTER_IDS = ["m", "f"];
 var ROOM_ALPHABET = "ACDEFGHJKMNPQRTUVWXY2346789";
 var UNSAFE_CHARS = /[\p{Cc}\u202A-\u202E\u2066-\u2069<>]/gu;
-var DisplayName = z.string().trim().min(1).max(LIMITS.MAX_NAME_LEN).transform((s) => s.replace(UNSAFE_CHARS, "").trim()).refine((s) => s.length >= 1, "name is empty after sanitizing");
+var normalizeWesternDigits = (s) => s.replace(/[٠-٩۰-۹]/g, (d) => String("\u0660\u0661\u0662\u0663\u0664\u0665\u0666\u0667\u0668\u0669".indexOf(d) >= 0 ? "\u0660\u0661\u0662\u0663\u0664\u0665\u0666\u0667\u0668\u0669".indexOf(d) : "\u06F0\u06F1\u06F2\u06F3\u06F4\u06F5\u06F6\u06F7\u06F8\u06F9".indexOf(d)));
+var sanitizeName = (s) => normalizeWesternDigits(s.replace(UNSAFE_CHARS, "")).trim();
+var DisplayName = z.string().trim().min(1).max(LIMITS.MAX_NAME_LEN).transform(sanitizeName).refine((s) => s.length >= 1, "name is empty after sanitizing");
 var RoomCode = z.string().trim().toUpperCase().regex(new RegExp(`^[${ROOM_ALPHABET}]{${LIMITS.ROOM_CODE_LEN}}$`), "bad room code");
 var PlayerId = z.string().max(40);
 var HelpType = z.enum([
@@ -52,7 +54,7 @@ var HelpType = z.enum([
 ]);
 var Pv = z.number().int().min(1).max(1e6).optional();
 var IdToken = z.string().max(4096).optional();
-var Platform = z.enum(["web", "ios", "android"]).optional();
+var Platform = z.enum(["web", "ios", "android", "tv"]).optional();
 var AppVersion = z.string().trim().max(24).regex(/^[0-9]+(\.[0-9]+){0,3}([-+][0-9A-Za-z.-]+)?$/, "bad app version").optional();
 var Avatar = z.object({
   emoji: z.string().min(1).max(16).transform((s) => s.replace(UNSAFE_CHARS, "")).refine((s) => s.length >= 1, "empty emoji"),
@@ -179,7 +181,11 @@ var ClientMsg = z.discriminatedUnion("t", [
   // trivia is 4-option (0–3)
   z.object({ t: z.literal("useHelp"), helpType: HelpType }),
   // sabotage a rival (active team only): spend a sabotage help to debuff targetTeam's next question
-  z.object({ t: z.literal("sabotage"), helpType: HelpType, targetTeam: z.number().int().min(0).max(LIMITS.MAX_PLAYERS - 1) }),
+  // `player` (gs#80): WHICH member of the target team sits out — required by استريح/restPlayer and
+  // ignored by عرجوب/tripLevel, which targets a whole team. Optional on the wire so pre-gs#80 clients
+  // are unchanged; the engine refuses to spend a restPlayer card without a valid one, so an old client
+  // cannot burn a lifeline by omitting it.
+  z.object({ t: z.literal("sabotage"), helpType: HelpType, targetTeam: z.number().int().min(0).max(LIMITS.MAX_PLAYERS - 1), player: z.string().max(64).optional() }),
   // 0-based team index
   // moderation
   // Report another player in the room (App Store 1.2 UGC — display names). Available in lobby or
@@ -223,6 +229,9 @@ var ClientMsg = z.discriminatedUnion("t", [
   // Drawer passes on the served word (capped per draw-turn; relay serves a fresh one).
   z.object({ t: z.literal("skipWord") })
 ]);
+var SUBMISSION_STATUSES = ["pending", "accepted", "rejected"];
+var SUBMISSION_KINDS = ["new", "edit"];
+var REJECT_REASONS = ["duplicate", "unclear_answer", "not_family", "inaccurate", "too_narrow", "other"];
 export {
   CHARACTER_IDS,
   ClientMsg,
@@ -234,8 +243,13 @@ export {
   MODES,
   MODE_IDS,
   PROTOCOL_VERSION,
+  REJECT_REASONS,
   ROOM_ALPHABET,
+  SUBMISSION_KINDS,
+  SUBMISSION_STATUSES,
   gameIdForPv,
   gamesForPv,
-  modesForGame
+  modesForGame,
+  normalizeWesternDigits,
+  sanitizeName
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thegeem/protocol",
-  "version": "0.1.36",
+  "version": "0.1.38",
   "description": "Geem's wire protocol — shared zod schemas + TypeScript types for talking to the Geem game server over Socket.IO. The source of truth all clients implement against.",
   "license": "UNLICENSED",
   "homepage": "https://geem.tv",