@ttt-productions/q-core 0.1.1 → 0.1.2

package/dist/types/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/types/audit.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0EAA0E;AAC1E,EAAE;AACF,4FAA4F;AAC5F,iBAAiB;AAKjB,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,WAAW;IACX,wBAAwB;IACxB,yBAAyB;IACzB,6FAA6F;IAC7F,mCAAmC;IACnC,gEAAgE;IAChE,oBAAoB;IACpB,sBAAsB;IACtB,oFAAoF;IACpF,yBAAyB;IACzB,yBAAyB;IACzB,6BAA6B;IAC7B,4FAA4F;IAC5F,mBAAmB;IACnB,qBAAqB;IACrB,kEAAkE;IAClE,gBAAgB;IAChB,gBAAgB;IAChB,sBAAsB;IACtB,qBAAqB;IACrB,0EAA0E;IAC1E,wBAAwB;IACxB,iCAAiC;IACjC,wBAAwB;IACxB,wBAAwB;IACxB,iBAAiB;IACjB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,gGAAgG;IAChG,sFAAsF;IACtF,eAAe;IACf,kBAAkB;IAClB,eAAe;IACf,yBAAyB;IACzB,iBAAiB;IACjB,4FAA4F;IAC5F,oFAAoF;IACpF,eAAe;IACf,qBAAqB;IACrB,eAAe;IACf,eAAe;IACf,eAAe;IACf,mGAAmG;IACnG,gCAAgC;IAChC,8BAA8B;IAC9B,6BAA6B;IAC7B,+BAA+B;IAC/B,8BAA8B;IAC9B,8FAA8F;IAC9F,oBAAoB;IACpB,qBAAqB;IACrB,wBAAwB;IACxB,iGAAiG;IACjG,8FAA8F;IAC9F,4BAA4B;IAC5B,2BAA2B;IAC3B,oBAAoB;IACpB,2BAA2B;IAC3B,mGAAmG;IACnG,sFAAsF;IACtF,qDAAqD;IACrD,wBAAwB;IACxB,qBAAqB;IACrB,oBAAoB;IACpB,gCAAgC;IAChC,oBAAoB;IACpB,kGAAkG;IAClG,6EAA6E;IAC7E,4BAA4B;IAC5B,8FAA8F;IAC9F,iGAAiG;IACjG,+BAA+B;IAC/B,wBAAwB;IACxB,0BAA0B;IAC1B,yBAAyB;IACzB,yBAAyB;IACzB,yBAAyB;IACzB,2BAA2B;IAC3B,0BAA0B;IAC1B,0BAA0B;IAC1B,yBAAyB;IACzB,yBAAyB;IACzB,0BAA0B;IAC1B,kFAAkF;IAClF,sBAAsB;IACtB,gGAAgG;IAChG,qFAAqF;IACrF,sBAAsB;IACtB,sBAAsB;IACtB,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,kGAAkG;IAClG,yFAAyF;IACzF,gFAAgF;IAChF,8BAA8B;IAC9B,0BAA0B;IAC1B,uBAAuB;IACvB,2BAA2B;IAC3B,iGAAiG;IACjG,mEAAmE;IACnE,qBAAqB;IACrB,oBAAoB;IACpB,gGAAgG;IAChG,wFAAwF;IACxF,0BAA0B;IAC1B,6BAA6B;IAC7B,6BAA6B;IAC7B,8BAA8B;IAC9B,gFAAgF;IAChF,qBAAqB;IACrB,uFAAuF;IACvF,+BAA+B;IAC/B,6FAA6F;IAC7F,kEAAkE;IAClE,kCAAkC;IAClC,8FAA8F;IAC9F,iGAAiG;IACjG,4BAA4B;IAC5B,uCAAuC;IACvC,kGAAkG;IAClG,kEAAkE;IAClE,2BAA2B;IAC3B,iGAAiG;IACjG,mGAAmG;IACnG,gFAAgF;IAChF,yBAAyB;IACzB,iCAAiC;IACjC,oCAAoC;IACpC,kCAAkC;CAC1B,CAAC;AAGX,mGAAmG;AACnG,8DAA8D;AAC9D,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,oBAAoB;IACpB,gCAAgC;CACY,CAAC;AAG/C,qGAAqG;AACrG,qGAAqG;AACrG,mDAAmD;AACnD,+DAA+D;AAC/D,6FAA6F;AAC7F,sFAAsF;AACtF,4FAA4F;AAC5F,0DAA0D;AAC1D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,QAAQ,CAAU,CAAC;AAGhH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,aAAa,EAAE,eAAe,CAA8C,CAAC;AAGzH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAA8C,CAAC;AAG9H,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,WAAW,CAAU,CAAC;AAoB1F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,SAAS,CAAU,CAAC","sourcesContent":["// The audit vocabulary: the closed event-type union (BACKEND-202) and how an actor was acting\n// (BACKEND-205). The document schema is in ../doc-schemas/audit-event.ts.\n//\n// The union is closed: a new sensitive action adds its event types here, in the same change\n// (BACKEND-202).\n\nimport type { SystemRole } from './unions.js';\nimport { CAPTAIN_TEAM_ROLES } from './unions.js';\n\nexport const AUDIT_EVENT_TYPE_KEYS = [\n  // Accounts\n  'user.accountRegistered',\n  'user.displayNameChanged',\n  // The scheduled sweep deleted a sign-in account that never finished registering (no profile)\n  'user.abandonedRegistrationDeleted',\n  // Account status — an admin banned an account or lifted its ban\n  'user.accountBanned',\n  'user.accountUnbanned',\n  // Global roles — the policy decision (callable) and the claim propagation (trigger)\n  'admin.systemRoleGranted',\n  'admin.systemRoleRevoked',\n  'admin.systemRoleClaimSynced',\n  // App configuration — the operational levers on `_appConfig/app`, and the landing page copy\n  'appConfig.updated',\n  'landingPage.updated',\n  // Leagues — created, settings edited, status moved, mode switched\n  'league.created',\n  'league.updated',\n  'league.statusChanged',\n  'league.modeSwitched',\n  // Waiver templates — created, a new wording published, retired or deleted\n  'waiverTemplate.created',\n  'waiverTemplate.versionPublished',\n  'waiverTemplate.retired',\n  'waiverTemplate.deleted',\n  // Game locations\n  'gameLocation.created',\n  'gameLocation.updated',\n  'gameLocation.deleted',\n  // Pictures — published to a gallery or a slot by the picture processor (attributed to the admin\n  // who uploaded it), and ordered, featured, and removed by the admin picture callables\n  'picture.added',\n  'picture.replaced',\n  'picture.moved',\n  'picture.featuredChanged',\n  'picture.removed',\n  // Awards — an award created by its first badge's publication, its badge replaced, the award\n  // deleted once nobody holds it, and an award granted to or revoked from one account\n  'award.created',\n  'award.badgeReplaced',\n  'award.deleted',\n  'award.granted',\n  'award.revoked',\n  // Hardware contracts — a loan created for a referee, signed by them, its equipment returned, and a\n  // contract never signed deleted\n  'hardwareLoanContract.created',\n  'hardwareLoanContract.signed',\n  'hardwareLoanContract.returned',\n  'hardwareLoanContract.deleted',\n  // Teams — created with its captain, a ghost player added, a team's failed roster work retried\n  'leagueTeam.created',\n  'ghostPlayer.created',\n  'teamRoster.syncRetried',\n  // Team management — a member promoted to co-captain or demoted to player, the captain changed by\n  // an admin, the team's name or type edited by an admin, and its contact phone set by an admin\n  'teamMembership.roleChanged',\n  'leagueTeam.captainChanged',\n  'leagueTeam.updated',\n  'leagueTeamContact.updated',\n  // Exits — a membership removed, a never-played ghost removed, a ghost linked by either link, and a\n  // never-played team deleted; each targets what it deleted, which the migration's live\n  // verifications read as proof the product removed it\n  'teamMembership.removed',\n  'ghostPlayer.removed',\n  'ghostPlayer.linked',\n  'ghostPlayer.closedLeagueLinked',\n  'leagueTeam.deleted',\n  // A ghost's removal stopped part-way because the ghost came to have played: the games it held are\n  // released, and the finished-game entries it had already taken off are named\n  'ghostPlayer.removalStopped',\n  // Joining a team — an invitation sent, withdrawn, accepted, or declined; a join request sent,\n  // withdrawn, accepted, or rejected; a free-agent signup made, withdrawn, or answered by an admin\n  // placing the player on a team\n  'teamInvitation.created',\n  'teamInvitation.cancelled',\n  'teamInvitation.accepted',\n  'teamInvitation.rejected',\n  'teamJoinRequest.created',\n  'teamJoinRequest.cancelled',\n  'teamJoinRequest.accepted',\n  'teamJoinRequest.rejected',\n  'leagueFreeAgent.created',\n  'leagueFreeAgent.deleted',\n  'leagueFreeAgent.assigned',\n  // Signed waivers — a legal record, signed by its subject or witnessed for a ghost\n  'signedWaiver.created',\n  // Schedules — a week created with its games or its shared fields edited; one game added, edited\n  // (moved, rescheduled, or its teams replaced), or deleted with its events and roster\n  'scheduleWeek.created',\n  'scheduleWeek.updated',\n  'sportGame.created',\n  'sportGame.updated',\n  'sportGame.deleted',\n  // Live scoring — a scoring write refused its caller's authority (a click writes no success event:\n  // the stat event document is its own record), a roster entry marked absent or present, a\n  // scorer's note on one person changed, and the jump-ball possession arrow moved\n  'sportGame.statEventsRejected',\n  'sportGame.absenceChanged',\n  'sportGame.memoUpdated',\n  'sportGame.jumpBallChanged',\n  // Finalizing — a game finalized, its numbers made permanent in every derived destination, and an\n  // admin's reopening of a finalized game, which takes them back out\n  'sportGame.finalized',\n  'sportGame.reopened',\n  // Fix stats — a game's numbers corrected (targets, or the stored numbers kept) or restored from\n  // its events; a derived aggregate rebuilt; and a person's pre-Q-Sports baseline written\n  'sportGame.statsCorrected',\n  'sportGame.statsRecalculated',\n  'stats.aggregateRecalculated',\n  'stats.historicalStatsUpdated',\n  // A stats check ran to its end: its scope, its summary, and its counts by kind.\n  'stats.validationRun',\n  // An admin deleted a stats check's report: its id, scope, summary, and counts by kind.\n  'stats.validationReportDeleted',\n  // The migration's placement of a recorded stat line no roster entry or play could place: the\n  // admin names the team, and the game's copy places the line there\n  'stats.unrosteredStatLineResolved',\n  // Admin notifications — a shared card archived, which takes it off every admin's list; and an\n  // admin's archive-all decision, recorded once when the job is written, with the request's origin\n  'adminNotification.archived',\n  'adminNotification.archiveAllRequested',\n  // An operator's manual intervention in a durable pipeline — a dead-lettered row put back to work,\n  // or a refused attempt at one — with the reason the operator gave\n  'system.manualIntervention',\n  // The migration console — one page of a cutover action run, with what it read, wrote, and found;\n  // a product control's run recorded once its evidence checked; an operator checkpoint recorded with\n  // its evidence; and the cutover, after which the product owns every destination\n  'migrationAction.pageRun',\n  'migrationAction.controlRecorded',\n  'migrationAction.checkpointRecorded',\n  'migrationConsole.cutoverRecorded',\n] as const;\nexport type AuditEventType = (typeof AUDIT_EVENT_TYPE_KEYS)[number];\n\n// The two ways a ghost is linked to an account — the normal link and the closed-league link — each\n// committing its own event over the one artifact-moving core.\nexport const GHOST_LINK_AUDIT_EVENT_TYPE_KEYS = [\n  'ghostPlayer.linked',\n  'ghostPlayer.closedLeagueLinked',\n] as const satisfies readonly AuditEventType[];\nexport type GhostLinkAuditEventType = (typeof GHOST_LINK_AUDIT_EVENT_TYPE_KEYS)[number];\n\n// How the actor was acting for the write — never merely which authorities they happen to hold. It is\n// orthogonal to the event type: one event type is produced under several modes, and the mode is what\n// tells an ordinary action from an admin override.\n//   user          a signed-in account acting on its own behalf\n//   teamManager   a captain or co-captain acting through their team's membership permissions\n//   adminReview   an admin or referee doing admin work that no team permission covers\n//   adminOverride an admin or referee superseding the team permission a normal entry checks\n//   system        backend automation with no human caller\nexport const AUDIT_ACTOR_MODE_KEYS = ['user', 'teamManager', 'adminReview', 'adminOverride', 'system'] as const;\nexport type AuditActorMode = (typeof AUDIT_ACTOR_MODE_KEYS)[number];\n\nexport const AUDIT_ADMIN_ACTOR_MODE_KEYS = ['adminReview', 'adminOverride'] as const satisfies readonly AuditActorMode[];\nexport type AuditAdminActorMode = (typeof AUDIT_ADMIN_ACTOR_MODE_KEYS)[number];\n\nexport const AUDIT_NON_ADMIN_ACTOR_MODE_KEYS = ['user', 'teamManager', 'system'] as const satisfies readonly AuditActorMode[];\nexport type AuditNonAdminActorMode = (typeof AUDIT_NON_ADMIN_ACTOR_MODE_KEYS)[number];\n\nexport const AUDIT_SYSTEM_REASON_KEYS = ['trigger', 'scheduledJob', 'migration'] as const;\nexport type AuditSystemReason = (typeof AUDIT_SYSTEM_REASON_KEYS)[number];\n\nexport type CaptainTeamRole = (typeof CAPTAIN_TEAM_ROLES)[number];\n\n// `isAdmin` is metadata only: it records that the caller's token carried a global-role claim (admin\n// or referee) when they acted, and grants nothing. `systemRole` is required on the admin modes and\n// forbidden on the others, so an admin action is never recorded without the authority it used and a\n// non-admin action never carries one.\nexport type AuditActor =\n  | { uid: string | null; isAdmin: boolean; actorMode: AuditNonAdminActorMode; systemRole?: never }\n  | { uid: string | null; isAdmin: boolean; actorMode: AuditAdminActorMode; systemRole: SystemRole };\n\nexport interface AuditTarget {\n  // The user the action was performed on, when there is one.\n  uid: string | null;\n  // The slash path of the document the action changed, when there is one.\n  ref: string | null;\n}\n\nexport const AUDIT_RESULT_KEYS = ['success', 'failure'] as const;\nexport type AuditResult = (typeof AUDIT_RESULT_KEYS)[number];\n"]}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/types/audit.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0EAA0E;AAC1E,EAAE;AACF,4FAA4F;AAC5F,iBAAiB;AAKjB,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,WAAW;IACX,wBAAwB;IACxB,yBAAyB;IACzB,6FAA6F;IAC7F,mCAAmC;IACnC,gEAAgE;IAChE,oBAAoB;IACpB,sBAAsB;IACtB,oFAAoF;IACpF,yBAAyB;IACzB,yBAAyB;IACzB,6BAA6B;IAC7B,4FAA4F;IAC5F,mBAAmB;IACnB,qBAAqB;IACrB,kEAAkE;IAClE,gBAAgB;IAChB,gBAAgB;IAChB,sBAAsB;IACtB,qBAAqB;IACrB,0EAA0E;IAC1E,wBAAwB;IACxB,iCAAiC;IACjC,wBAAwB;IACxB,wBAAwB;IACxB,iBAAiB;IACjB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,gGAAgG;IAChG,sFAAsF;IACtF,eAAe;IACf,kBAAkB;IAClB,eAAe;IACf,yBAAyB;IACzB,iBAAiB;IACjB,4FAA4F;IAC5F,oFAAoF;IACpF,eAAe;IACf,qBAAqB;IACrB,eAAe;IACf,eAAe;IACf,eAAe;IACf,mGAAmG;IACnG,gCAAgC;IAChC,8BAA8B;IAC9B,6BAA6B;IAC7B,+BAA+B;IAC/B,8BAA8B;IAC9B,8FAA8F;IAC9F,oBAAoB;IACpB,qBAAqB;IACrB,wBAAwB;IACxB,iGAAiG;IACjG,8FAA8F;IAC9F,4BAA4B;IAC5B,2BAA2B;IAC3B,oBAAoB;IACpB,2BAA2B;IAC3B,mGAAmG;IACnG,sFAAsF;IACtF,qDAAqD;IACrD,wBAAwB;IACxB,qBAAqB;IACrB,oBAAoB;IACpB,gCAAgC;IAChC,oBAAoB;IACpB,kGAAkG;IAClG,6EAA6E;IAC7E,4BAA4B;IAC5B,8FAA8F;IAC9F,iGAAiG;IACjG,+BAA+B;IAC/B,wBAAwB;IACxB,0BAA0B;IAC1B,yBAAyB;IACzB,yBAAyB;IACzB,yBAAyB;IACzB,2BAA2B;IAC3B,0BAA0B;IAC1B,0BAA0B;IAC1B,yBAAyB;IACzB,yBAAyB;IACzB,0BAA0B;IAC1B,kFAAkF;IAClF,sBAAsB;IACtB,gGAAgG;IAChG,qFAAqF;IACrF,sBAAsB;IACtB,sBAAsB;IACtB,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,kGAAkG;IAClG,yFAAyF;IACzF,gFAAgF;IAChF,8BAA8B;IAC9B,0BAA0B;IAC1B,uBAAuB;IACvB,2BAA2B;IAC3B,iGAAiG;IACjG,mEAAmE;IACnE,qBAAqB;IACrB,oBAAoB;IACpB,gGAAgG;IAChG,wFAAwF;IACxF,0BAA0B;IAC1B,6BAA6B;IAC7B,6BAA6B;IAC7B,8BAA8B;IAC9B,gFAAgF;IAChF,qBAAqB;IACrB,uFAAuF;IACvF,+BAA+B;IAC/B,6FAA6F;IAC7F,kEAAkE;IAClE,kCAAkC;IAClC,8FAA8F;IAC9F,iGAAiG;IACjG,4BAA4B;IAC5B,uCAAuC;IACvC,kGAAkG;IAClG,kEAAkE;IAClE,2BAA2B;IAC3B,iGAAiG;IACjG,gGAAgG;IAChG,6FAA6F;IAC7F,6FAA6F;IAC7F,4EAA4E;IAC5E,yBAAyB;IACzB,iCAAiC;IACjC,iCAAiC;IACjC,oCAAoC;IACpC,kCAAkC;CAC1B,CAAC;AAGX,mGAAmG;AACnG,8DAA8D;AAC9D,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,oBAAoB;IACpB,gCAAgC;CACY,CAAC;AAG/C,qGAAqG;AACrG,qGAAqG;AACrG,mDAAmD;AACnD,+DAA+D;AAC/D,6FAA6F;AAC7F,sFAAsF;AACtF,4FAA4F;AAC5F,0DAA0D;AAC1D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,QAAQ,CAAU,CAAC;AAGhH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,aAAa,EAAE,eAAe,CAA8C,CAAC;AAGzH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAA8C,CAAC;AAG9H,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,WAAW,CAAU,CAAC;AAoB1F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,SAAS,CAAU,CAAC","sourcesContent":["// The audit vocabulary: the closed event-type union (BACKEND-202) and how an actor was acting\n// (BACKEND-205). The document schema is in ../doc-schemas/audit-event.ts.\n//\n// The union is closed: a new sensitive action adds its event types here, in the same change\n// (BACKEND-202).\n\nimport type { SystemRole } from './unions.js';\nimport { CAPTAIN_TEAM_ROLES } from './unions.js';\n\nexport const AUDIT_EVENT_TYPE_KEYS = [\n  // Accounts\n  'user.accountRegistered',\n  'user.displayNameChanged',\n  // The scheduled sweep deleted a sign-in account that never finished registering (no profile)\n  'user.abandonedRegistrationDeleted',\n  // Account status — an admin banned an account or lifted its ban\n  'user.accountBanned',\n  'user.accountUnbanned',\n  // Global roles — the policy decision (callable) and the claim propagation (trigger)\n  'admin.systemRoleGranted',\n  'admin.systemRoleRevoked',\n  'admin.systemRoleClaimSynced',\n  // App configuration — the operational levers on `_appConfig/app`, and the landing page copy\n  'appConfig.updated',\n  'landingPage.updated',\n  // Leagues — created, settings edited, status moved, mode switched\n  'league.created',\n  'league.updated',\n  'league.statusChanged',\n  'league.modeSwitched',\n  // Waiver templates — created, a new wording published, retired or deleted\n  'waiverTemplate.created',\n  'waiverTemplate.versionPublished',\n  'waiverTemplate.retired',\n  'waiverTemplate.deleted',\n  // Game locations\n  'gameLocation.created',\n  'gameLocation.updated',\n  'gameLocation.deleted',\n  // Pictures — published to a gallery or a slot by the picture processor (attributed to the admin\n  // who uploaded it), and ordered, featured, and removed by the admin picture callables\n  'picture.added',\n  'picture.replaced',\n  'picture.moved',\n  'picture.featuredChanged',\n  'picture.removed',\n  // Awards — an award created by its first badge's publication, its badge replaced, the award\n  // deleted once nobody holds it, and an award granted to or revoked from one account\n  'award.created',\n  'award.badgeReplaced',\n  'award.deleted',\n  'award.granted',\n  'award.revoked',\n  // Hardware contracts — a loan created for a referee, signed by them, its equipment returned, and a\n  // contract never signed deleted\n  'hardwareLoanContract.created',\n  'hardwareLoanContract.signed',\n  'hardwareLoanContract.returned',\n  'hardwareLoanContract.deleted',\n  // Teams — created with its captain, a ghost player added, a team's failed roster work retried\n  'leagueTeam.created',\n  'ghostPlayer.created',\n  'teamRoster.syncRetried',\n  // Team management — a member promoted to co-captain or demoted to player, the captain changed by\n  // an admin, the team's name or type edited by an admin, and its contact phone set by an admin\n  'teamMembership.roleChanged',\n  'leagueTeam.captainChanged',\n  'leagueTeam.updated',\n  'leagueTeamContact.updated',\n  // Exits — a membership removed, a never-played ghost removed, a ghost linked by either link, and a\n  // never-played team deleted; each targets what it deleted, which the migration's live\n  // verifications read as proof the product removed it\n  'teamMembership.removed',\n  'ghostPlayer.removed',\n  'ghostPlayer.linked',\n  'ghostPlayer.closedLeagueLinked',\n  'leagueTeam.deleted',\n  // A ghost's removal stopped part-way because the ghost came to have played: the games it held are\n  // released, and the finished-game entries it had already taken off are named\n  'ghostPlayer.removalStopped',\n  // Joining a team — an invitation sent, withdrawn, accepted, or declined; a join request sent,\n  // withdrawn, accepted, or rejected; a free-agent signup made, withdrawn, or answered by an admin\n  // placing the player on a team\n  'teamInvitation.created',\n  'teamInvitation.cancelled',\n  'teamInvitation.accepted',\n  'teamInvitation.rejected',\n  'teamJoinRequest.created',\n  'teamJoinRequest.cancelled',\n  'teamJoinRequest.accepted',\n  'teamJoinRequest.rejected',\n  'leagueFreeAgent.created',\n  'leagueFreeAgent.deleted',\n  'leagueFreeAgent.assigned',\n  // Signed waivers — a legal record, signed by its subject or witnessed for a ghost\n  'signedWaiver.created',\n  // Schedules — a week created with its games or its shared fields edited; one game added, edited\n  // (moved, rescheduled, or its teams replaced), or deleted with its events and roster\n  'scheduleWeek.created',\n  'scheduleWeek.updated',\n  'sportGame.created',\n  'sportGame.updated',\n  'sportGame.deleted',\n  // Live scoring — a scoring write refused its caller's authority (a click writes no success event:\n  // the stat event document is its own record), a roster entry marked absent or present, a\n  // scorer's note on one person changed, and the jump-ball possession arrow moved\n  'sportGame.statEventsRejected',\n  'sportGame.absenceChanged',\n  'sportGame.memoUpdated',\n  'sportGame.jumpBallChanged',\n  // Finalizing — a game finalized, its numbers made permanent in every derived destination, and an\n  // admin's reopening of a finalized game, which takes them back out\n  'sportGame.finalized',\n  'sportGame.reopened',\n  // Fix stats — a game's numbers corrected (targets, or the stored numbers kept) or restored from\n  // its events; a derived aggregate rebuilt; and a person's pre-Q-Sports baseline written\n  'sportGame.statsCorrected',\n  'sportGame.statsRecalculated',\n  'stats.aggregateRecalculated',\n  'stats.historicalStatsUpdated',\n  // A stats check ran to its end: its scope, its summary, and its counts by kind.\n  'stats.validationRun',\n  // An admin deleted a stats check's report: its id, scope, summary, and counts by kind.\n  'stats.validationReportDeleted',\n  // The migration's placement of a recorded stat line no roster entry or play could place: the\n  // admin names the team, and the game's copy places the line there\n  'stats.unrosteredStatLineResolved',\n  // Admin notifications — a shared card archived, which takes it off every admin's list; and an\n  // admin's archive-all decision, recorded once when the job is written, with the request's origin\n  'adminNotification.archived',\n  'adminNotification.archiveAllRequested',\n  // An operator's manual intervention in a durable pipeline — a dead-lettered row put back to work,\n  // or a refused attempt at one — with the reason the operator gave\n  'system.manualIntervention',\n  // The migration console — one page of a cutover action run, with what it read, wrote, and found;\n  // the documents an action core wrote and removed, committed in the same batch or transaction as\n  // those writes (its action id, operation id, and document ids only — BACKEND-203); a product\n  // control's run recorded once its evidence checked; an operator checkpoint recorded with its\n  // evidence; and the cutover, after which the product owns every destination\n  'migrationAction.pageRun',\n  'migrationAction.writesCommitted',\n  'migrationAction.controlRecorded',\n  'migrationAction.checkpointRecorded',\n  'migrationConsole.cutoverRecorded',\n] as const;\nexport type AuditEventType = (typeof AUDIT_EVENT_TYPE_KEYS)[number];\n\n// The two ways a ghost is linked to an account — the normal link and the closed-league link — each\n// committing its own event over the one artifact-moving core.\nexport const GHOST_LINK_AUDIT_EVENT_TYPE_KEYS = [\n  'ghostPlayer.linked',\n  'ghostPlayer.closedLeagueLinked',\n] as const satisfies readonly AuditEventType[];\nexport type GhostLinkAuditEventType = (typeof GHOST_LINK_AUDIT_EVENT_TYPE_KEYS)[number];\n\n// How the actor was acting for the write — never merely which authorities they happen to hold. It is\n// orthogonal to the event type: one event type is produced under several modes, and the mode is what\n// tells an ordinary action from an admin override.\n//   user          a signed-in account acting on its own behalf\n//   teamManager   a captain or co-captain acting through their team's membership permissions\n//   adminReview   an admin or referee doing admin work that no team permission covers\n//   adminOverride an admin or referee superseding the team permission a normal entry checks\n//   system        backend automation with no human caller\nexport const AUDIT_ACTOR_MODE_KEYS = ['user', 'teamManager', 'adminReview', 'adminOverride', 'system'] as const;\nexport type AuditActorMode = (typeof AUDIT_ACTOR_MODE_KEYS)[number];\n\nexport const AUDIT_ADMIN_ACTOR_MODE_KEYS = ['adminReview', 'adminOverride'] as const satisfies readonly AuditActorMode[];\nexport type AuditAdminActorMode = (typeof AUDIT_ADMIN_ACTOR_MODE_KEYS)[number];\n\nexport const AUDIT_NON_ADMIN_ACTOR_MODE_KEYS = ['user', 'teamManager', 'system'] as const satisfies readonly AuditActorMode[];\nexport type AuditNonAdminActorMode = (typeof AUDIT_NON_ADMIN_ACTOR_MODE_KEYS)[number];\n\nexport const AUDIT_SYSTEM_REASON_KEYS = ['trigger', 'scheduledJob', 'migration'] as const;\nexport type AuditSystemReason = (typeof AUDIT_SYSTEM_REASON_KEYS)[number];\n\nexport type CaptainTeamRole = (typeof CAPTAIN_TEAM_ROLES)[number];\n\n// `isAdmin` is metadata only: it records that the caller's token carried a global-role claim (admin\n// or referee) when they acted, and grants nothing. `systemRole` is required on the admin modes and\n// forbidden on the others, so an admin action is never recorded without the authority it used and a\n// non-admin action never carries one.\nexport type AuditActor =\n  | { uid: string | null; isAdmin: boolean; actorMode: AuditNonAdminActorMode; systemRole?: never }\n  | { uid: string | null; isAdmin: boolean; actorMode: AuditAdminActorMode; systemRole: SystemRole };\n\nexport interface AuditTarget {\n  // The user the action was performed on, when there is one.\n  uid: string | null;\n  // The slash path of the document the action changed, when there is one.\n  ref: string | null;\n}\n\nexport const AUDIT_RESULT_KEYS = ['success', 'failure'] as const;\nexport type AuditResult = (typeof AUDIT_RESULT_KEYS)[number];\n"]}

package/dist/types/unions.d.ts

@@ -60,6 +60,8 @@ export declare const HARDWARE_LOAN_CONTRACT_STATUS_KEYS: readonly ["pending", "l
 export type HardwareLoanContractStatus = (typeof HARDWARE_LOAN_CONTRACT_STATUS_KEYS)[number];
 export declare const AWARD_GRANT_SKIP_REASON_KEYS: readonly ["noProfile", "ghost"];
 export type AwardGrantSkipReason = (typeof AWARD_GRANT_SKIP_REASON_KEYS)[number];
+export declare const FEATURED_AWARD_SLOT_KEYS: readonly ["primary", "secondary"];
+export type FeaturedAwardSlot = (typeof FEATURED_AWARD_SLOT_KEYS)[number];
 export declare const PENDING_HARDWARE_LOAN_CONTRACT_STATUS: "pending";
 export declare const LOANED_HARDWARE_LOAN_CONTRACT_STATUS: "loaned";
 export declare const RETURNED_HARDWARE_LOAN_CONTRACT_STATUS: "returned";
@@ -85,8 +87,8 @@ export declare const TEAM_ICON_KEYS: readonly ["Shield", "Swords", "Skull", "Gho
 export type TeamIcon = (typeof TEAM_ICON_KEYS)[number];
 export declare const PICTURE_VARIANT_KEYS: readonly ["sm", "md", "lg"];
 export type PictureVariantKey = (typeof PICTURE_VARIANT_KEYS)[number];
-export declare const GAME_TIER_DISCREPANCY_KIND_KEYS: readonly ["invalidEvent", "eventSequenceMismatch", "rollupMismatch", "scoreMirrorMismatch", "unrosteredStatLine", "fantasyPointsStale", "finalRecordMissing", "finalRecordMismatch", "participationSnapshotMismatch", "gameHeld"];
+export declare const GAME_TIER_DISCREPANCY_KIND_KEYS: readonly ["gameUnreadable", "invalidEvent", "eventSequenceMismatch", "eventSequenceGap", "rollupMismatch", "scoreMirrorMismatch", "unrosteredStatLine", "fantasyPointsStale", "finalRecordMissing", "finalRecordMismatch", "participationSnapshotMismatch", "gameHeld"];
 export declare const AGGREGATE_TIER_DISCREPANCY_KIND_KEYS: readonly ["aggregateMismatch", "aggregateEntryStale", "aggregateEntryMissing", "hallOfFameLifetimeMismatch"];
-export declare const STATS_DISCREPANCY_KIND_KEYS: readonly ["invalidEvent", "eventSequenceMismatch", "rollupMismatch", "scoreMirrorMismatch", "unrosteredStatLine", "fantasyPointsStale", "finalRecordMissing", "finalRecordMismatch", "participationSnapshotMismatch", "gameHeld", "aggregateMismatch", "aggregateEntryStale", "aggregateEntryMissing", "hallOfFameLifetimeMismatch"];
+export declare const STATS_DISCREPANCY_KIND_KEYS: readonly ["gameUnreadable", "invalidEvent", "eventSequenceMismatch", "eventSequenceGap", "rollupMismatch", "scoreMirrorMismatch", "unrosteredStatLine", "fantasyPointsStale", "finalRecordMissing", "finalRecordMismatch", "participationSnapshotMismatch", "gameHeld", "aggregateMismatch", "aggregateEntryStale", "aggregateEntryMissing", "hallOfFameLifetimeMismatch"];
 export type StatsDiscrepancyKind = (typeof STATS_DISCREPANCY_KIND_KEYS)[number];
 //# sourceMappingURL=unions.d.ts.map

package/dist/types/unions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unions.d.ts","sourceRoot":"","sources":["../../src/types/unions.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,gBAAgB,+BAAgC,CAAC;AAC9D,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAG3D,eAAO,MAAM,gBAAgB,+BAAgC,CAAC;AAC9D,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3D,+CAA+C;AAC/C,eAAO,MAAM,kBAAkB,WAAgC,CAAC;AAChE,qFAAqF;AACrF,eAAO,MAAM,kBAAkB,WAAgC,CAAC;AAMhE,eAAO,MAAM,mCAAmC,0CAA2C,CAAC;AAC5F,MAAM,MAAM,8BAA8B,GAAG,CAAC,OAAO,mCAAmC,CAAC,CAAC,MAAM,CAAC,CAAC;AAClG,eAAO,MAAM,0BAA0B,iBAAoE,CAAC;AAC5G,eAAO,MAAM,kBAAkB,cAAiE,CAAC;AAEjG,eAAO,MAAM,cAAc,6CAA8C,CAAC;AAC1E,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAIvD,eAAO,MAAM,kBAAkB,mCAAkE,CAAC;AAIlG,eAAO,MAAM,iBAAiB,WAAwC,CAAC;AAIvE,eAAO,MAAM,oBAAoB,aAA0C,CAAC;AAC5E,eAAO,MAAM,gBAAgB,UAAuC,CAAC;AAKrE,eAAO,MAAM,4BAA4B,kCAAkF,CAAC;AAC5H,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAIrF,wBAAgB,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,GAAG,QAAQ,CAExE;AAED,eAAO,MAAM,2BAA2B,qBAAsB,CAAC;AAC/D,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAIhF,eAAO,MAAM,6BAA6B,UAAmD,CAAC;AAG9F,eAAO,MAAM,qBAAqB,6EAMxB,CAAC;AACX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,eAAO,MAAM,kBAAkB,sDAAuD,CAAC;AACvF,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAG/D,eAAO,MAAM,uBAAuB,WAA4C,CAAC;AAGjF,eAAO,MAAM,oBAAoB,UAA2C,CAAC;AAG7E,eAAO,MAAM,sBAAsB,YAA6C,CAAC;AACjF,eAAO,MAAM,oBAAoB,UAA2C,CAAC;AAI7E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,YAAY,EAAE,CAAC,CAK7F,CAAC;AAIF,eAAO,MAAM,uBAAuB,EAAE,SAAS,OAAO,CAAC,YAAY,EAAE,OAAO,oBAAoB,CAAC,EAG9F,CAAC;AAIJ,eAAO,MAAM,0BAA0B,iCAGK,CAAC;AAE7C,eAAO,MAAM,gBAAgB,kDAAmD,CAAC;AACjF,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAI3D,eAAO,MAAM,cAAc,0CAA2C,CAAC;AACvE,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAGvD,eAAO,MAAM,sBAAsB,4BAA2D,CAAC;AAG/F,eAAO,MAAM,wBAAwB,gBAA6C,CAAC;AAEnF,eAAO,MAAM,gBAAgB,mDAAoD,CAAC;AAClF,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAI3D,eAAO,MAAM,qBAAqB,aAA4C,CAAC;AAG/E,eAAO,MAAM,qBAAqB,aAA4C,CAAC;AAI/E,eAAO,MAAM,qBAAqB,cAA6C,CAAC;AAIhF,eAAO,MAAM,2BAA2B,2DAA4D,CAAC;AACrG,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,eAAO,MAAM,8BAA8B,WAAoD,CAAC;AAChG,eAAO,MAAM,+BAA+B,YAAqD,CAAC;AAClG,eAAO,MAAM,+BAA+B,YAAqD,CAAC;AAClG,eAAO,MAAM,gCAAgC,aAAsD,CAAC;AAKpG,eAAO,MAAM,6BAA6B,2DAA4D,CAAC;AACvG,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnF,eAAO,MAAM,gCAAgC,WAAqD,CAAC;AACnG,eAAO,MAAM,iCAAiC,YAAsD,CAAC;AACrG,eAAO,MAAM,iCAAiC,YAAsD,CAAC;AACrG,eAAO,MAAM,kCAAkC,aAAuD,CAAC;AAEvG,eAAO,MAAM,kCAAkC,4CAA6C,CAAC;AAC7F,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,kCAAkC,CAAC,CAAC,MAAM,CAAC,CAAC;AAG7F,eAAO,MAAM,4BAA4B,iCAAkC,CAAC;AAC5E,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjF,eAAO,MAAM,qCAAqC,WAA0D,CAAC;AAC7G,eAAO,MAAM,oCAAoC,UAAyD,CAAC;AAC3G,eAAO,MAAM,sCAAsC,YAA2D,CAAC;AAI/G,eAAO,MAAM,mCAAmC,iCAAkC,CAAC;AACnF,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,mCAAmC,CAAC,CAAC,MAAM,CAAC,CAAC;AAI/F,eAAO,MAAM,wBAAwB,wFAAyF,CAAC;AAC/H,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAI1E,eAAO,MAAM,oCAAoC,iCAAyE,CAAC;AAC3H,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,oCAAoC,CAAC,CAAC,MAAM,CAAC,CAAC;AAIhG,eAAO,MAAM,qBAAqB,sCAAuE,CAAC;AAC1G,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIpE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,IAAI,cAAc,CAE7E;AAID,eAAO,MAAM,kCAAkC,8CAA+C,CAAC;AAC/F,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,kCAAkC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7F,eAAO,MAAM,0BAA0B,WAA0D,CAAC;AAClG,eAAO,MAAM,6BAA6B,cAA6D,CAAC;AACxG,eAAO,MAAM,yBAAyB,UAAyD,CAAC;AAIhG,eAAO,MAAM,6BAA6B,uDAAwD,CAAC;AACnG,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAKpF,eAAO,MAAM,2BAA2B,4BAA6B,CAAC;AACtE,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAGhF,eAAO,MAAM,cAAc,gnCA0HjB,CAAC;AACX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAIvD,eAAO,MAAM,oBAAoB,6BAA8B,CAAC;AAChE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAItE,eAAO,MAAM,+BAA+B,mOAWlC,CAAC;AACX,eAAO,MAAM,oCAAoC,8GAKvC,CAAC;AACX,eAAO,MAAM,2BAA2B,sUAG9B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC"}
+{"version":3,"file":"unions.d.ts","sourceRoot":"","sources":["../../src/types/unions.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,gBAAgB,+BAAgC,CAAC;AAC9D,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAG3D,eAAO,MAAM,gBAAgB,+BAAgC,CAAC;AAC9D,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3D,+CAA+C;AAC/C,eAAO,MAAM,kBAAkB,WAAgC,CAAC;AAChE,qFAAqF;AACrF,eAAO,MAAM,kBAAkB,WAAgC,CAAC;AAMhE,eAAO,MAAM,mCAAmC,0CAA2C,CAAC;AAC5F,MAAM,MAAM,8BAA8B,GAAG,CAAC,OAAO,mCAAmC,CAAC,CAAC,MAAM,CAAC,CAAC;AAClG,eAAO,MAAM,0BAA0B,iBAAoE,CAAC;AAC5G,eAAO,MAAM,kBAAkB,cAAiE,CAAC;AAEjG,eAAO,MAAM,cAAc,6CAA8C,CAAC;AAC1E,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAIvD,eAAO,MAAM,kBAAkB,mCAAkE,CAAC;AAIlG,eAAO,MAAM,iBAAiB,WAAwC,CAAC;AAIvE,eAAO,MAAM,oBAAoB,aAA0C,CAAC;AAC5E,eAAO,MAAM,gBAAgB,UAAuC,CAAC;AAKrE,eAAO,MAAM,4BAA4B,kCAAkF,CAAC;AAC5H,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAIrF,wBAAgB,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,GAAG,QAAQ,CAExE;AAED,eAAO,MAAM,2BAA2B,qBAAsB,CAAC;AAC/D,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAIhF,eAAO,MAAM,6BAA6B,UAAmD,CAAC;AAG9F,eAAO,MAAM,qBAAqB,6EAMxB,CAAC;AACX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,eAAO,MAAM,kBAAkB,sDAAuD,CAAC;AACvF,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAG/D,eAAO,MAAM,uBAAuB,WAA4C,CAAC;AAGjF,eAAO,MAAM,oBAAoB,UAA2C,CAAC;AAG7E,eAAO,MAAM,sBAAsB,YAA6C,CAAC;AACjF,eAAO,MAAM,oBAAoB,UAA2C,CAAC;AAI7E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,YAAY,EAAE,CAAC,CAK7F,CAAC;AAIF,eAAO,MAAM,uBAAuB,EAAE,SAAS,OAAO,CAAC,YAAY,EAAE,OAAO,oBAAoB,CAAC,EAG9F,CAAC;AAIJ,eAAO,MAAM,0BAA0B,iCAGK,CAAC;AAE7C,eAAO,MAAM,gBAAgB,kDAAmD,CAAC;AACjF,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAI3D,eAAO,MAAM,cAAc,0CAA2C,CAAC;AACvE,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAGvD,eAAO,MAAM,sBAAsB,4BAA2D,CAAC;AAG/F,eAAO,MAAM,wBAAwB,gBAA6C,CAAC;AAEnF,eAAO,MAAM,gBAAgB,mDAAoD,CAAC;AAClF,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAI3D,eAAO,MAAM,qBAAqB,aAA4C,CAAC;AAG/E,eAAO,MAAM,qBAAqB,aAA4C,CAAC;AAI/E,eAAO,MAAM,qBAAqB,cAA6C,CAAC;AAIhF,eAAO,MAAM,2BAA2B,2DAA4D,CAAC;AACrG,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,eAAO,MAAM,8BAA8B,WAAoD,CAAC;AAChG,eAAO,MAAM,+BAA+B,YAAqD,CAAC;AAClG,eAAO,MAAM,+BAA+B,YAAqD,CAAC;AAClG,eAAO,MAAM,gCAAgC,aAAsD,CAAC;AAKpG,eAAO,MAAM,6BAA6B,2DAA4D,CAAC;AACvG,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnF,eAAO,MAAM,gCAAgC,WAAqD,CAAC;AACnG,eAAO,MAAM,iCAAiC,YAAsD,CAAC;AACrG,eAAO,MAAM,iCAAiC,YAAsD,CAAC;AACrG,eAAO,MAAM,kCAAkC,aAAuD,CAAC;AAEvG,eAAO,MAAM,kCAAkC,4CAA6C,CAAC;AAC7F,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,kCAAkC,CAAC,CAAC,MAAM,CAAC,CAAC;AAG7F,eAAO,MAAM,4BAA4B,iCAAkC,CAAC;AAC5E,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAGjF,eAAO,MAAM,wBAAwB,mCAAoC,CAAC;AAC1E,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E,eAAO,MAAM,qCAAqC,WAA0D,CAAC;AAC7G,eAAO,MAAM,oCAAoC,UAAyD,CAAC;AAC3G,eAAO,MAAM,sCAAsC,YAA2D,CAAC;AAI/G,eAAO,MAAM,mCAAmC,iCAAkC,CAAC;AACnF,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,mCAAmC,CAAC,CAAC,MAAM,CAAC,CAAC;AAI/F,eAAO,MAAM,wBAAwB,wFAAyF,CAAC;AAC/H,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAI1E,eAAO,MAAM,oCAAoC,iCAAyE,CAAC;AAC3H,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,oCAAoC,CAAC,CAAC,MAAM,CAAC,CAAC;AAIhG,eAAO,MAAM,qBAAqB,sCAAuE,CAAC;AAC1G,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIpE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,IAAI,cAAc,CAE7E;AAID,eAAO,MAAM,kCAAkC,8CAA+C,CAAC;AAC/F,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,kCAAkC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7F,eAAO,MAAM,0BAA0B,WAA0D,CAAC;AAClG,eAAO,MAAM,6BAA6B,cAA6D,CAAC;AACxG,eAAO,MAAM,yBAAyB,UAAyD,CAAC;AAIhG,eAAO,MAAM,6BAA6B,uDAAwD,CAAC;AACnG,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAKpF,eAAO,MAAM,2BAA2B,4BAA6B,CAAC;AACtE,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAGhF,eAAO,MAAM,cAAc,gnCA0HjB,CAAC;AACX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAIvD,eAAO,MAAM,oBAAoB,6BAA8B,CAAC;AAChE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAItE,eAAO,MAAM,+BAA+B,yQAelC,CAAC;AACX,eAAO,MAAM,oCAAoC,8GAKvC,CAAC;AACX,eAAO,MAAM,2BAA2B,4WAG9B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/types/unions.js

@@ -110,6 +110,8 @@ export const HARDWARE_LOAN_CONTRACT_STATUS_KEYS = ['pending', 'loaned', 'returne
 // Why an award grant passed over an account its teams or leagues named: it has no profile, or it is
 // a ghost, which holds no account.
 export const AWARD_GRANT_SKIP_REASON_KEYS = ['noProfile', 'ghost'];
+// The two badges an account shows beside its name.
+export const FEATURED_AWARD_SLOT_KEYS = ['primary', 'secondary'];
 export const PENDING_HARDWARE_LOAN_CONTRACT_STATUS = 'pending';
 export const LOANED_HARDWARE_LOAN_CONTRACT_STATUS = 'loaned';
 export const RETURNED_HARDWARE_LOAN_CONTRACT_STATUS = 'returned';
@@ -273,8 +275,12 @@ export const PICTURE_VARIANT_KEYS = ['sm', 'md', 'lg'];
 // What a stats check found, game tier first — a game's own numbers are the cause of the aggregate
 // findings, so Fix stats repairs games before it rebuilds what they feed.
 export const GAME_TIER_DISCREPANCY_KIND_KEYS = [
+    // A game whose document the check could not read: nothing else about it could be checked.
+    'gameUnreadable',
     'invalidEvent',
     'eventSequenceMismatch',
+    // A game whose events do not hold exactly the sequences 1..n: a gap or a duplicate.
+    'eventSequenceGap',
     'rollupMismatch',
     'scoreMirrorMismatch',
     'unrosteredStatLine',

package/dist/types/unions.js.map

@@ -1 +1 @@
-{"version":3,"file":"unions.js","sourceRoot":"","sources":["../../src/types/unions.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,gGAAgG;AAChG,UAAU;AAEV,kGAAkG;AAClG,qEAAqE;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,SAAS,CAAU,CAAC;AAG9D,kGAAkG;AAClG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAE9D,+CAA+C;AAC/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAA6B,CAAC;AAChE,qFAAqF;AACrF,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAA6B,CAAC;AAEhE,sFAAsF;AACtF,mGAAmG;AACnG,qGAAqG;AACrG,eAAe;AACf,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAU,CAAC;AAE5F,MAAM,CAAC,MAAM,0BAA0B,GAAG,eAAiE,CAAC;AAC5G,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAA8D,CAAC;AAEjG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAG1E,qGAAqG;AACrG,oBAAoB;AACpB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,WAAW,CAAwC,CAAC;AAElG,+FAA+F;AAC/F,2CAA2C;AAC3C,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAqC,CAAC;AAEvE,0FAA0F;AAC1F,oCAAoC;AACpC,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAuC,CAAC;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAoC,CAAC;AAErE,kGAAkG;AAClG,gGAAgG;AAChG,sCAAsC;AACtC,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,oBAAoB,EAAE,gBAAgB,CAAwC,CAAC;AAG5H,iGAAiG;AACjG,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,IAAc,EAAE,KAAe;IAC5D,OAAO,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AACtF,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,QAAQ,CAAU,CAAC;AAG/D,mGAAmG;AACnG,gFAAgF;AAChF,MAAM,CAAC,MAAM,6BAA6B,GAAG,QAAgD,CAAC;AAE9F,8FAA8F;AAC9F,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,cAAc;IACd,QAAQ;IACR,aAAa;IACb,WAAW;IACX,UAAU;CACF,CAAC;AAGX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAGvF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAyC,CAAC;AAEjF,yFAAyF;AACzF,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAwC,CAAC;AAE7E,gGAAgG;AAChG,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAA0C,CAAC;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAwC,CAAC;AAE7E,gGAAgG;AAChG,qDAAqD;AACrD,MAAM,CAAC,MAAM,yBAAyB,GAA4D;IAChG,OAAO,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;IAC/B,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC9B,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,EAAE;CACX,CAAC;AAEF,8FAA8F;AAC9F,gFAAgF;AAChF,MAAM,CAAC,MAAM,uBAAuB,GAClC,kBAAkB,CAAC,MAAM,CACvB,CAAC,MAAM,EAAgE,EAAE,CAAC,MAAM,KAAK,oBAAoB,CAC1G,CAAC;AAEJ,gGAAgG;AAChG,qDAAqD;AACrD,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,sBAAsB;IACtB,oBAAoB;CACsB,CAAC;AAE7C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,0BAA0B,CAAU,CAAC;AAGjF,oGAAoG;AACpG,mCAAmC;AACnC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,cAAc,CAAU,CAAC;AAGvE,oDAAoD;AACpD,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAAwD,CAAC;AAE/F,oFAAoF;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAG,cAA0C,CAAC;AAEnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,CAAU,CAAC;AAGlF,gGAAgG;AAChG,0FAA0F;AAC1F,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAyC,CAAC;AAE/E,mDAAmD;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAyC,CAAC;AAE/E,kGAAkG;AAClG,QAAQ;AACR,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAA0C,CAAC;AAEhF,sGAAsG;AACtG,qGAAqG;AACrG,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,CAAU,CAAC;AAGrG,MAAM,CAAC,MAAM,8BAA8B,GAAG,SAAiD,CAAC;AAChG,MAAM,CAAC,MAAM,+BAA+B,GAAG,UAAkD,CAAC;AAClG,MAAM,CAAC,MAAM,+BAA+B,GAAG,UAAkD,CAAC;AAClG,MAAM,CAAC,MAAM,gCAAgC,GAAG,WAAmD,CAAC;AAEpG,oGAAoG;AACpG,qGAAqG;AACrG,cAAc;AACd,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,CAAU,CAAC;AAGvG,MAAM,CAAC,MAAM,gCAAgC,GAAG,SAAkD,CAAC;AACnG,MAAM,CAAC,MAAM,iCAAiC,GAAG,UAAmD,CAAC;AACrG,MAAM,CAAC,MAAM,iCAAiC,GAAG,UAAmD,CAAC;AACrG,MAAM,CAAC,MAAM,kCAAkC,GAAG,WAAoD,CAAC;AAEvG,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAC;AAE7F,oGAAoG;AACpG,mCAAmC;AACnC,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,WAAW,EAAE,OAAO,CAAU,CAAC;AAG5E,MAAM,CAAC,MAAM,qCAAqC,GAAG,SAAuD,CAAC;AAC7G,MAAM,CAAC,MAAM,oCAAoC,GAAG,QAAsD,CAAC;AAC3G,MAAM,CAAC,MAAM,sCAAsC,GAAG,UAAwD,CAAC;AAE/G,oGAAoG;AACpG,iGAAiG;AACjG,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAU,CAAC;AAGnF,iGAAiG;AACjG,gCAAgC;AAChC,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,CAAU,CAAC;AAG/H,qGAAqG;AACrG,oGAAoG;AACpG,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAiD,CAAC;AAG3H,gGAAgG;AAChG,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,WAAW,EAAE,YAAY,CAA0C,CAAC;AAG1G,qGAAqG;AACrG,0BAA0B;AAC1B,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,OAAQ,qBAA+C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC3E,CAAC;AAED,kGAAkG;AAClG,4FAA4F;AAC5F,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAU,CAAC;AAE/F,MAAM,CAAC,MAAM,0BAA0B,GAAG,SAAuD,CAAC;AAClG,MAAM,CAAC,MAAM,6BAA6B,GAAG,YAA0D,CAAC;AACxG,MAAM,CAAC,MAAM,yBAAyB,GAAG,QAAsD,CAAC;AAEhG,mGAAmG;AACnG,6CAA6C;AAC7C,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAU,CAAC;AAGnG,oGAAoG;AACpG,mGAAmG;AACnG,mEAAmE;AACnE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,eAAe,CAAU,CAAC;AAGtE,uFAAuF;AACvF,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,OAAO;IACP,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,OAAO;IACP,OAAO;IACP,SAAS;IACT,KAAK;IACL,QAAQ;IACR,oGAAoG;IACpG,UAAU;IACV,OAAO;IACP,eAAe;IACf,UAAU;IACV,WAAW;IACX,cAAc;IACd,MAAM;IACN,aAAa;IACb,WAAW;IACX,OAAO;IACP,UAAU;IACV,MAAM;IACN,KAAK;IACL,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,SAAS;IACT,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,SAAS;IACT,SAAS;IACT,MAAM;IACN,oBAAoB;IACpB,QAAQ;IACR,OAAO;IACP,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,WAAW;IACX,MAAM;IACN,UAAU;IACV,YAAY;IACZ,0BAA0B;IAC1B,KAAK;IACL,OAAO;IACP,eAAe;IACf,MAAM;IACN,MAAM;IACN,OAAO;IACP,UAAU;IACV,cAAc;IACd,UAAU;IACV,SAAS;IACT,MAAM;IACN,SAAS;IACT,gBAAgB;IAChB,UAAU;IACV,wBAAwB;IACxB,OAAO;IACP,KAAK;IACL,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,QAAQ;IACR,WAAW;IACX,UAAU;IACV,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,KAAK;IACL,OAAO;IACP,UAAU;IACV,SAAS;IACT,MAAM;IACN,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,mBAAmB;IACnB,OAAO;IACP,QAAQ;IACR,UAAU;IACV,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,SAAS;IACT,UAAU;IACV,UAAU;IACV,UAAU;IACV,SAAS;IACT,OAAO;CACC,CAAC;AAGX,oGAAoG;AACpG,kDAAkD;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAGhE,kGAAkG;AAClG,0EAA0E;AAC1E,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,cAAc;IACd,uBAAuB;IACvB,gBAAgB;IAChB,qBAAqB;IACrB,oBAAoB;IACpB,oBAAoB;IACpB,oBAAoB;IACpB,qBAAqB;IACrB,+BAA+B;IAC/B,UAAU;CACF,CAAC;AACX,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,mBAAmB;IACnB,qBAAqB;IACrB,uBAAuB;IACvB,4BAA4B;CACpB,CAAC;AACX,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,GAAG,+BAA+B;IAClC,GAAG,oCAAoC;CAC/B,CAAC","sourcesContent":["// Canonical unions (ARCH-102): an `as const` key array with the type derived from it. Zod enums,\n// type positions, query filters, and option lists all derive from these arrays — never a quoted\n// member.\n\n// The two global roles. Each is a roster on `_systemData/adminList` and a boolean custom claim of\n// the same name; the roster is the authority, the claim a fast hint.\nexport const SYSTEM_ROLE_KEYS = ['admin', 'referee'] as const;\nexport type SystemRole = (typeof SYSTEM_ROLE_KEYS)[number];\n\n// Account status on the private profile. Only an exact `active` passes the server auth assertion.\nexport const USER_STATUS_KEYS = ['active', 'banned'] as const;\nexport type UserStatus = (typeof USER_STATUS_KEYS)[number];\n/** The one status that lets an account act. */\nexport const ACTIVE_USER_STATUS = 'active' satisfies UserStatus;\n/** The status an admin's ban sets: the account keeps its data and cannot sign in. */\nexport const BANNED_USER_STATUS = 'banned' satisfies UserStatus;\n\n// Which post-commit Auth effect queued an account on `statusReconcileQueue/{userId}`:\n// `accountStatus` — a status change's disabled flag, status claim, and token revocation, queued in\n// the status transaction itself; `roleClaims` — the `admin` / `referee` claims after a failed roster\n// claim write.\nexport const STATUS_RECONCILE_QUEUE_AUTH_EFFECTS = ['accountStatus', 'roleClaims'] as const;\nexport type StatusReconcileQueueAuthEffect = (typeof STATUS_RECONCILE_QUEUE_AUTH_EFFECTS)[number];\nexport const ACCOUNT_STATUS_AUTH_EFFECT = 'accountStatus' as const satisfies StatusReconcileQueueAuthEffect;\nexport const ROLE_CLAIMS_EFFECT = 'roleClaims' as const satisfies StatusReconcileQueueAuthEffect;\n\nexport const TEAM_ROLE_KEYS = ['captain', 'coCaptain', 'player'] as const;\nexport type TeamRole = (typeof TEAM_ROLE_KEYS)[number];\n\n// The roles that carry captain authority. `firestore.rules` restates this list, because a rules file\n// cannot import it.\nexport const CAPTAIN_TEAM_ROLES = ['captain', 'coCaptain'] as const satisfies readonly TeamRole[];\n\n// The one role a team holds at most one of: team creation, the admin captain change, and ghost\n// linking write it, and nothing else does.\nexport const TEAM_CAPTAIN_ROLE = 'captain' as const satisfies TeamRole;\n\n// The two roles below the captain. A co-captain holds every captain power except managing\n// co-captains; a player holds none.\nexport const TEAM_CO_CAPTAIN_ROLE = 'coCaptain' as const satisfies TeamRole;\nexport const TEAM_PLAYER_ROLE = 'player' as const satisfies TeamRole;\n\n// The roles a member's role change moves a membership between — promoting a player to co-captain,\n// or demoting a co-captain to player. The captain's role moves only through the admin's captain\n// change, so it is never one of them.\nexport const MEMBER_ASSIGNABLE_TEAM_ROLES = [TEAM_CO_CAPTAIN_ROLE, TEAM_PLAYER_ROLE] as const satisfies readonly TeamRole[];\nexport type MemberAssignableTeamRole = (typeof MEMBER_ASSIGNABLE_TEAM_ROLES)[number];\n\n// A ghost link that merges a ghost's membership into the account's keeps one membership with the\n// higher of the two roles: `TEAM_ROLE_KEYS` runs from the highest role down.\nexport function higherTeamRole(left: TeamRole, right: TeamRole): TeamRole {\n  return TEAM_ROLE_KEYS.indexOf(left) <= TEAM_ROLE_KEYS.indexOf(right) ? left : right;\n}\n\nexport const TEAM_MEMBERSHIP_STATUS_KEYS = ['active'] as const;\nexport type TeamMembershipStatus = (typeof TEAM_MEMBERSHIP_STATUS_KEYS)[number];\n\n// The status a membership grants authority in. Every membership-based check reads it with the role\n// (BACKEND-006), so a status added later grants nothing until a check names it.\nexport const ACTIVE_TEAM_MEMBERSHIP_STATUS = 'active' as const satisfies TeamMembershipStatus;\n\n// How a membership came to exist; absent on a membership whose provenance was never recorded.\nexport const TEAM_JOIN_METHOD_KEYS = [\n  'teamCreation',\n  'invite',\n  'joinRequest',\n  'freeAgent',\n  'ghostAdd',\n] as const;\nexport type TeamJoinMethod = (typeof TEAM_JOIN_METHOD_KEYS)[number];\n\nexport const LEAGUE_STATUS_KEYS = ['pending', 'upcoming', 'active', 'closed'] as const;\nexport type LeagueStatus = (typeof LEAGUE_STATUS_KEYS)[number];\n\n// Every league is created unpublished; the admin moves it forward from here.\nexport const LEAGUE_STATUS_ON_CREATE = 'pending' as const satisfies LeagueStatus;\n\n// A finished season. Its settings stay editable; its status and mode never change again.\nexport const CLOSED_LEAGUE_STATUS = 'closed' as const satisfies LeagueStatus;\n\n// The two published statuses before a league closes: its teams are forming, then it is in play.\nexport const UPCOMING_LEAGUE_STATUS = 'upcoming' as const satisfies LeagueStatus;\nexport const ACTIVE_LEAGUE_STATUS = 'active' as const satisfies LeagueStatus;\n\n// The statuses a league may move to from each status. Movement is forward only, and `closed` is\n// final; the status callable refuses any other move.\nexport const LEAGUE_STATUS_TRANSITIONS: Readonly<Record<LeagueStatus, readonly LeagueStatus[]>> = {\n  pending: ['upcoming', 'closed'],\n  upcoming: ['active', 'closed'],\n  active: ['closed'],\n  closed: [],\n};\n\n// Every status but closed: a league still being set up, published, or played. Whatever such a\n// league is configured with — its waiver template among them — is still in use.\nexport const OPEN_LEAGUE_STATUS_KEYS: readonly Exclude<LeagueStatus, typeof CLOSED_LEAGUE_STATUS>[] =\n  LEAGUE_STATUS_KEYS.filter(\n    (status): status is Exclude<LeagueStatus, typeof CLOSED_LEAGUE_STATUS> => status !== CLOSED_LEAGUE_STATUS,\n  );\n\n// A league players are part of now or next: published and not yet closed. The admin dashboard's\n// active free-agent count covers only these leagues.\nexport const CURRENT_LEAGUE_STATUS_KEYS = [\n  UPCOMING_LEAGUE_STATUS,\n  ACTIVE_LEAGUE_STATUS,\n] as const satisfies readonly LeagueStatus[];\n\nexport const LEAGUE_MODE_KEYS = ['Regular', 'Competitive/Recreational'] as const;\nexport type LeagueMode = (typeof LEAGUE_MODE_KEYS)[number];\n\n// Present only on teams in a Competitive/Recreational league. In any other mode a team has no type:\n// the field is absent, never null.\nexport const TEAM_TYPE_KEYS = ['Competitive', 'Recreational'] as const;\nexport type TeamType = (typeof TEAM_TYPE_KEYS)[number];\n\n// The one mode whose teams each carry a `teamType`.\nexport const TEAM_TYPED_LEAGUE_MODE = 'Competitive/Recreational' as const satisfies LeagueMode;\n\n// The type every team takes when its league switches into `TEAM_TYPED_LEAGUE_MODE`.\nexport const TEAM_TYPE_ON_MODE_SWITCH = 'Recreational' as const satisfies TeamType;\n\nexport const GAME_STATUS_KEYS = ['scheduled', 'inprogress', 'completed'] as const;\nexport type GameStatus = (typeof GAME_STATUS_KEYS)[number];\n\n// The one status a finished game holds: it was played, and its stats count. Every reader asking\n// whether a game was played compares against this rather than naming a status of its own.\nexport const COMPLETED_GAME_STATUS = 'completed' as const satisfies GameStatus;\n\n// The status a newly scheduled game is created in.\nexport const GAME_STATUS_ON_CREATE = 'scheduled' as const satisfies GameStatus;\n\n// The status reopen returns a finalized game to: open for scoring again, its record of who played\n// kept.\nexport const GAME_STATUS_ON_REOPEN = 'inprogress' as const satisfies GameStatus;\n\n// An invitation is pending until the invitee accepts (`approved`) or declines (`rejected`) it, or the\n// team withdraws it (`cancelled`). A membership on its team made any other way closes it `approved`.\nexport const TEAM_INVITATION_STATUS_KEYS = ['pending', 'approved', 'rejected', 'cancelled'] as const;\nexport type TeamInvitationStatus = (typeof TEAM_INVITATION_STATUS_KEYS)[number];\n\nexport const PENDING_TEAM_INVITATION_STATUS = 'pending' as const satisfies TeamInvitationStatus;\nexport const APPROVED_TEAM_INVITATION_STATUS = 'approved' as const satisfies TeamInvitationStatus;\nexport const REJECTED_TEAM_INVITATION_STATUS = 'rejected' as const satisfies TeamInvitationStatus;\nexport const CANCELLED_TEAM_INVITATION_STATUS = 'cancelled' as const satisfies TeamInvitationStatus;\n\n// A join request is pending until the team's leaders accept (`approved`) or reject (`rejected`) it,\n// or the requester withdraws it (`cancelled`). A membership on its team made any other way closes it\n// `approved`.\nexport const TEAM_JOIN_REQUEST_STATUS_KEYS = ['pending', 'approved', 'rejected', 'cancelled'] as const;\nexport type TeamJoinRequestStatus = (typeof TEAM_JOIN_REQUEST_STATUS_KEYS)[number];\n\nexport const PENDING_TEAM_JOIN_REQUEST_STATUS = 'pending' as const satisfies TeamJoinRequestStatus;\nexport const APPROVED_TEAM_JOIN_REQUEST_STATUS = 'approved' as const satisfies TeamJoinRequestStatus;\nexport const REJECTED_TEAM_JOIN_REQUEST_STATUS = 'rejected' as const satisfies TeamJoinRequestStatus;\nexport const CANCELLED_TEAM_JOIN_REQUEST_STATUS = 'cancelled' as const satisfies TeamJoinRequestStatus;\n\nexport const HARDWARE_LOAN_CONTRACT_STATUS_KEYS = ['pending', 'loaned', 'returned'] as const;\nexport type HardwareLoanContractStatus = (typeof HARDWARE_LOAN_CONTRACT_STATUS_KEYS)[number];\n// Why an award grant passed over an account its teams or leagues named: it has no profile, or it is\n// a ghost, which holds no account.\nexport const AWARD_GRANT_SKIP_REASON_KEYS = ['noProfile', 'ghost'] as const;\nexport type AwardGrantSkipReason = (typeof AWARD_GRANT_SKIP_REASON_KEYS)[number];\n\nexport const PENDING_HARDWARE_LOAN_CONTRACT_STATUS = 'pending' as const satisfies HardwareLoanContractStatus;\nexport const LOANED_HARDWARE_LOAN_CONTRACT_STATUS = 'loaned' as const satisfies HardwareLoanContractStatus;\nexport const RETURNED_HARDWARE_LOAN_CONTRACT_STATUS = 'returned' as const satisfies HardwareLoanContractStatus;\n\n// What deleting a waiver template did. A template nothing names is deleted with its versions; one a\n// signature or a closed league still names is retired — kept for them, offered to no new league.\nexport const WAIVER_TEMPLATE_DELETE_OUTCOME_KEYS = ['deleted', 'retired'] as const;\nexport type WaiverTemplateDeleteOutcome = (typeof WAIVER_TEMPLATE_DELETE_OUTCOME_KEYS)[number];\n\n// What last changed the stats, as announced on the stats beacon; `link` is a ghost link moving a\n// game's lines onto an account.\nexport const STATS_BEACON_ACTION_KEYS = ['finalize', 'reopen', 'recalculate', 'correct', 'historical-update', 'link'] as const;\nexport type StatsBeaconAction = (typeof STATS_BEACON_ACTION_KEYS)[number];\n\n// The actions that describe one game, so a beacon announcing one names the game, its league, and its\n// teams; every other action names no game, and a game id left beside it would point at a stale one.\nexport const GAME_SCOPED_STATS_BEACON_ACTION_KEYS = ['finalize', 'reopen'] as const satisfies readonly StatsBeaconAction[];\nexport type GameScopedStatsBeaconAction = (typeof GAME_SCOPED_STATS_BEACON_ACTION_KEYS)[number];\n\n// The statuses a game's roster still follows its teams' memberships in: listed explicitly, so a\n// status added later is closed until it is named here, never open by default.\nexport const OPEN_GAME_STATUS_KEYS = ['scheduled', 'inprogress'] as const satisfies readonly GameStatus[];\nexport type OpenGameStatus = (typeof OPEN_GAME_STATUS_KEYS)[number];\n\n// Whether a game is still open — not yet finalized — so a scorer may still change it. Both app roots\n// ask this one predicate.\nexport function isOpenGameStatus(status: GameStatus): status is OpenGameStatus {\n  return (OPEN_GAME_STATUS_KEYS as readonly GameStatus[]).includes(status);\n}\n\n// Where one membership's roster obligation stands. `pending` waits for the reconciliation worker;\n// `failed` has spent its retries and waits for an admin's retry; `reconciled` owes nothing.\nexport const MEMBERSHIP_ROSTER_SYNC_STATUS_KEYS = ['pending', 'reconciled', 'failed'] as const;\nexport type MembershipRosterSyncStatus = (typeof MEMBERSHIP_ROSTER_SYNC_STATUS_KEYS)[number];\nexport const PENDING_ROSTER_SYNC_STATUS = 'pending' as const satisfies MembershipRosterSyncStatus;\nexport const RECONCILED_ROSTER_SYNC_STATUS = 'reconciled' as const satisfies MembershipRosterSyncStatus;\nexport const FAILED_ROSTER_SYNC_STATUS = 'failed' as const satisfies MembershipRosterSyncStatus;\n\n// The authority a ghost's waiver was signed under: the witness's captaincy on the ghost's team, or\n// the global role the admin entry confirmed.\nexport const WAIVER_WITNESS_AUTHORITY_KEYS = ['captain', 'coCaptain', 'admin', 'referee'] as const;\nexport type WaiverWitnessAuthority = (typeof WAIVER_WITNESS_AUTHORITY_KEYS)[number];\n\n// Why a signing was refused, named in its details so the signing dialog answers it: `waiverChanged`\n// when the wording the signer saw — the template id and version the dialog sent — is no longer the\n// league's, so the dialog loads the current wording to read again.\nexport const WAIVER_SIGNING_REFUSAL_KEYS = ['waiverChanged'] as const;\nexport type WaiverSigningRefusal = (typeof WAIVER_SIGNING_REFUSAL_KEYS)[number];\n\n// The icon a team picks at creation; the persisted value is the icon component's name.\nexport const TEAM_ICON_KEYS = [\n  'Shield',\n  'Swords',\n  'Skull',\n  'Ghost',\n  'Cat',\n  'Dog',\n  'Bird',\n  'Fish',\n  'Rabbit',\n  'Snail',\n  'Turtle',\n  'Cherry',\n  'Apple',\n  'Grape',\n  'Rocket',\n  'Plane',\n  'Ship',\n  'Train',\n  'Car',\n  'Bike',\n  'Bolt',\n  'Star',\n  'Sun',\n  'Moon',\n  'Cloud',\n  'Crown',\n  'Diamond',\n  'Gem',\n  'Anchor',\n  // Appended — the set only grows, and no stored key is ever renamed or removed. Seasonal and events.\n  'TreePine',\n  'Trees',\n  'TreeDeciduous',\n  'TreePalm',\n  'Snowflake',\n  'MountainSnow',\n  'Gift',\n  'PartyPopper',\n  'CandyCane',\n  'Candy',\n  'Lollipop',\n  'Cake',\n  'Egg',\n  'Clover',\n  'Heart',\n  'Flower',\n  'Flower2',\n  'Rose',\n  'Leaf',\n  'Sprout',\n  'Wheat',\n  'Sunrise',\n  'Rainbow',\n  'Bell',\n  // Awards and sport.\n  'Trophy',\n  'Medal',\n  'Award',\n  'Ribbon',\n  'Flag',\n  'Target',\n  'Crosshair',\n  'Goal',\n  'Dumbbell',\n  'Footprints',\n  // Power and the elements.\n  'Zap',\n  'Flame',\n  'FlameKindling',\n  'Bomb',\n  'Atom',\n  'Orbit',\n  'Sparkles',\n  'WandSparkles',\n  'Mountain',\n  'Tornado',\n  'Wind',\n  'Droplet',\n  'CloudLightning',\n  'MoonStar',\n  // Arms and strongholds.\n  'Sword',\n  'Axe',\n  'Hammer',\n  'Pickaxe',\n  'ShieldHalf',\n  'Castle',\n  // Animals.\n  'Squirrel',\n  'Rat',\n  'Panda',\n  'Shrimp',\n  'Worm',\n  'Bug',\n  'Shell',\n  'PawPrint',\n  'Feather',\n  'Bone',\n  'Origami',\n  // Food.\n  'Citrus',\n  'Banana',\n  'Carrot',\n  'Pizza',\n  'Cookie',\n  'Donut',\n  'Coffee',\n  // Games and music.\n  'Dices',\n  'Puzzle',\n  'Gamepad2',\n  'Spade',\n  'Club',\n  'Music',\n  'Guitar',\n  'Hexagon',\n  'Triangle',\n  // Travel.\n  'Sailboat',\n  'Tractor',\n  'Truck',\n] as const;\nexport type TeamIcon = (typeof TEAM_ICON_KEYS)[number];\n\n// A picture's processed sizes, smallest first: every picture kind declares all three, and a display\n// asks for the smallest one that covers its slot.\nexport const PICTURE_VARIANT_KEYS = ['sm', 'md', 'lg'] as const;\nexport type PictureVariantKey = (typeof PICTURE_VARIANT_KEYS)[number];\n\n// What a stats check found, game tier first — a game's own numbers are the cause of the aggregate\n// findings, so Fix stats repairs games before it rebuilds what they feed.\nexport const GAME_TIER_DISCREPANCY_KIND_KEYS = [\n  'invalidEvent',\n  'eventSequenceMismatch',\n  'rollupMismatch',\n  'scoreMirrorMismatch',\n  'unrosteredStatLine',\n  'fantasyPointsStale',\n  'finalRecordMissing',\n  'finalRecordMismatch',\n  'participationSnapshotMismatch',\n  'gameHeld',\n] as const;\nexport const AGGREGATE_TIER_DISCREPANCY_KIND_KEYS = [\n  'aggregateMismatch',\n  'aggregateEntryStale',\n  'aggregateEntryMissing',\n  'hallOfFameLifetimeMismatch',\n] as const;\nexport const STATS_DISCREPANCY_KIND_KEYS = [\n  ...GAME_TIER_DISCREPANCY_KIND_KEYS,\n  ...AGGREGATE_TIER_DISCREPANCY_KIND_KEYS,\n] as const;\nexport type StatsDiscrepancyKind = (typeof STATS_DISCREPANCY_KIND_KEYS)[number];\n"]}
+{"version":3,"file":"unions.js","sourceRoot":"","sources":["../../src/types/unions.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,gGAAgG;AAChG,UAAU;AAEV,kGAAkG;AAClG,qEAAqE;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,SAAS,CAAU,CAAC;AAG9D,kGAAkG;AAClG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAE9D,+CAA+C;AAC/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAA6B,CAAC;AAChE,qFAAqF;AACrF,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAA6B,CAAC;AAEhE,sFAAsF;AACtF,mGAAmG;AACnG,qGAAqG;AACrG,eAAe;AACf,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAU,CAAC;AAE5F,MAAM,CAAC,MAAM,0BAA0B,GAAG,eAAiE,CAAC;AAC5G,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAA8D,CAAC;AAEjG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAG1E,qGAAqG;AACrG,oBAAoB;AACpB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,WAAW,CAAwC,CAAC;AAElG,+FAA+F;AAC/F,2CAA2C;AAC3C,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAqC,CAAC;AAEvE,0FAA0F;AAC1F,oCAAoC;AACpC,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAuC,CAAC;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAoC,CAAC;AAErE,kGAAkG;AAClG,gGAAgG;AAChG,sCAAsC;AACtC,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,oBAAoB,EAAE,gBAAgB,CAAwC,CAAC;AAG5H,iGAAiG;AACjG,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,IAAc,EAAE,KAAe;IAC5D,OAAO,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AACtF,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,QAAQ,CAAU,CAAC;AAG/D,mGAAmG;AACnG,gFAAgF;AAChF,MAAM,CAAC,MAAM,6BAA6B,GAAG,QAAgD,CAAC;AAE9F,8FAA8F;AAC9F,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,cAAc;IACd,QAAQ;IACR,aAAa;IACb,WAAW;IACX,UAAU;CACF,CAAC;AAGX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAGvF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAyC,CAAC;AAEjF,yFAAyF;AACzF,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAwC,CAAC;AAE7E,gGAAgG;AAChG,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAA0C,CAAC;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAwC,CAAC;AAE7E,gGAAgG;AAChG,qDAAqD;AACrD,MAAM,CAAC,MAAM,yBAAyB,GAA4D;IAChG,OAAO,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;IAC/B,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC9B,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,EAAE;CACX,CAAC;AAEF,8FAA8F;AAC9F,gFAAgF;AAChF,MAAM,CAAC,MAAM,uBAAuB,GAClC,kBAAkB,CAAC,MAAM,CACvB,CAAC,MAAM,EAAgE,EAAE,CAAC,MAAM,KAAK,oBAAoB,CAC1G,CAAC;AAEJ,gGAAgG;AAChG,qDAAqD;AACrD,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,sBAAsB;IACtB,oBAAoB;CACsB,CAAC;AAE7C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,0BAA0B,CAAU,CAAC;AAGjF,oGAAoG;AACpG,mCAAmC;AACnC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,cAAc,CAAU,CAAC;AAGvE,oDAAoD;AACpD,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAAwD,CAAC;AAE/F,oFAAoF;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAG,cAA0C,CAAC;AAEnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,CAAU,CAAC;AAGlF,gGAAgG;AAChG,0FAA0F;AAC1F,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAyC,CAAC;AAE/E,mDAAmD;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAyC,CAAC;AAE/E,kGAAkG;AAClG,QAAQ;AACR,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAA0C,CAAC;AAEhF,sGAAsG;AACtG,qGAAqG;AACrG,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,CAAU,CAAC;AAGrG,MAAM,CAAC,MAAM,8BAA8B,GAAG,SAAiD,CAAC;AAChG,MAAM,CAAC,MAAM,+BAA+B,GAAG,UAAkD,CAAC;AAClG,MAAM,CAAC,MAAM,+BAA+B,GAAG,UAAkD,CAAC;AAClG,MAAM,CAAC,MAAM,gCAAgC,GAAG,WAAmD,CAAC;AAEpG,oGAAoG;AACpG,qGAAqG;AACrG,cAAc;AACd,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,CAAU,CAAC;AAGvG,MAAM,CAAC,MAAM,gCAAgC,GAAG,SAAkD,CAAC;AACnG,MAAM,CAAC,MAAM,iCAAiC,GAAG,UAAmD,CAAC;AACrG,MAAM,CAAC,MAAM,iCAAiC,GAAG,UAAmD,CAAC;AACrG,MAAM,CAAC,MAAM,kCAAkC,GAAG,WAAoD,CAAC;AAEvG,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAC;AAE7F,oGAAoG;AACpG,mCAAmC;AACnC,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,WAAW,EAAE,OAAO,CAAU,CAAC;AAG5E,mDAAmD;AACnD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,SAAS,EAAE,WAAW,CAAU,CAAC;AAG1E,MAAM,CAAC,MAAM,qCAAqC,GAAG,SAAuD,CAAC;AAC7G,MAAM,CAAC,MAAM,oCAAoC,GAAG,QAAsD,CAAC;AAC3G,MAAM,CAAC,MAAM,sCAAsC,GAAG,UAAwD,CAAC;AAE/G,oGAAoG;AACpG,iGAAiG;AACjG,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAU,CAAC;AAGnF,iGAAiG;AACjG,gCAAgC;AAChC,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,CAAU,CAAC;AAG/H,qGAAqG;AACrG,oGAAoG;AACpG,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAiD,CAAC;AAG3H,gGAAgG;AAChG,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,WAAW,EAAE,YAAY,CAA0C,CAAC;AAG1G,qGAAqG;AACrG,0BAA0B;AAC1B,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,OAAQ,qBAA+C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC3E,CAAC;AAED,kGAAkG;AAClG,4FAA4F;AAC5F,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAU,CAAC;AAE/F,MAAM,CAAC,MAAM,0BAA0B,GAAG,SAAuD,CAAC;AAClG,MAAM,CAAC,MAAM,6BAA6B,GAAG,YAA0D,CAAC;AACxG,MAAM,CAAC,MAAM,yBAAyB,GAAG,QAAsD,CAAC;AAEhG,mGAAmG;AACnG,6CAA6C;AAC7C,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAU,CAAC;AAGnG,oGAAoG;AACpG,mGAAmG;AACnG,mEAAmE;AACnE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,eAAe,CAAU,CAAC;AAGtE,uFAAuF;AACvF,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,OAAO;IACP,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,OAAO;IACP,OAAO;IACP,SAAS;IACT,KAAK;IACL,QAAQ;IACR,oGAAoG;IACpG,UAAU;IACV,OAAO;IACP,eAAe;IACf,UAAU;IACV,WAAW;IACX,cAAc;IACd,MAAM;IACN,aAAa;IACb,WAAW;IACX,OAAO;IACP,UAAU;IACV,MAAM;IACN,KAAK;IACL,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,SAAS;IACT,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,SAAS;IACT,SAAS;IACT,MAAM;IACN,oBAAoB;IACpB,QAAQ;IACR,OAAO;IACP,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,WAAW;IACX,MAAM;IACN,UAAU;IACV,YAAY;IACZ,0BAA0B;IAC1B,KAAK;IACL,OAAO;IACP,eAAe;IACf,MAAM;IACN,MAAM;IACN,OAAO;IACP,UAAU;IACV,cAAc;IACd,UAAU;IACV,SAAS;IACT,MAAM;IACN,SAAS;IACT,gBAAgB;IAChB,UAAU;IACV,wBAAwB;IACxB,OAAO;IACP,KAAK;IACL,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,QAAQ;IACR,WAAW;IACX,UAAU;IACV,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,KAAK;IACL,OAAO;IACP,UAAU;IACV,SAAS;IACT,MAAM;IACN,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,mBAAmB;IACnB,OAAO;IACP,QAAQ;IACR,UAAU;IACV,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,SAAS;IACT,UAAU;IACV,UAAU;IACV,UAAU;IACV,SAAS;IACT,OAAO;CACC,CAAC;AAGX,oGAAoG;AACpG,kDAAkD;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAGhE,kGAAkG;AAClG,0EAA0E;AAC1E,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,0FAA0F;IAC1F,gBAAgB;IAChB,cAAc;IACd,uBAAuB;IACvB,oFAAoF;IACpF,kBAAkB;IAClB,gBAAgB;IAChB,qBAAqB;IACrB,oBAAoB;IACpB,oBAAoB;IACpB,oBAAoB;IACpB,qBAAqB;IACrB,+BAA+B;IAC/B,UAAU;CACF,CAAC;AACX,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,mBAAmB;IACnB,qBAAqB;IACrB,uBAAuB;IACvB,4BAA4B;CACpB,CAAC;AACX,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,GAAG,+BAA+B;IAClC,GAAG,oCAAoC;CAC/B,CAAC","sourcesContent":["// Canonical unions (ARCH-102): an `as const` key array with the type derived from it. Zod enums,\n// type positions, query filters, and option lists all derive from these arrays — never a quoted\n// member.\n\n// The two global roles. Each is a roster on `_systemData/adminList` and a boolean custom claim of\n// the same name; the roster is the authority, the claim a fast hint.\nexport const SYSTEM_ROLE_KEYS = ['admin', 'referee'] as const;\nexport type SystemRole = (typeof SYSTEM_ROLE_KEYS)[number];\n\n// Account status on the private profile. Only an exact `active` passes the server auth assertion.\nexport const USER_STATUS_KEYS = ['active', 'banned'] as const;\nexport type UserStatus = (typeof USER_STATUS_KEYS)[number];\n/** The one status that lets an account act. */\nexport const ACTIVE_USER_STATUS = 'active' satisfies UserStatus;\n/** The status an admin's ban sets: the account keeps its data and cannot sign in. */\nexport const BANNED_USER_STATUS = 'banned' satisfies UserStatus;\n\n// Which post-commit Auth effect queued an account on `statusReconcileQueue/{userId}`:\n// `accountStatus` — a status change's disabled flag, status claim, and token revocation, queued in\n// the status transaction itself; `roleClaims` — the `admin` / `referee` claims after a failed roster\n// claim write.\nexport const STATUS_RECONCILE_QUEUE_AUTH_EFFECTS = ['accountStatus', 'roleClaims'] as const;\nexport type StatusReconcileQueueAuthEffect = (typeof STATUS_RECONCILE_QUEUE_AUTH_EFFECTS)[number];\nexport const ACCOUNT_STATUS_AUTH_EFFECT = 'accountStatus' as const satisfies StatusReconcileQueueAuthEffect;\nexport const ROLE_CLAIMS_EFFECT = 'roleClaims' as const satisfies StatusReconcileQueueAuthEffect;\n\nexport const TEAM_ROLE_KEYS = ['captain', 'coCaptain', 'player'] as const;\nexport type TeamRole = (typeof TEAM_ROLE_KEYS)[number];\n\n// The roles that carry captain authority. `firestore.rules` restates this list, because a rules file\n// cannot import it.\nexport const CAPTAIN_TEAM_ROLES = ['captain', 'coCaptain'] as const satisfies readonly TeamRole[];\n\n// The one role a team holds at most one of: team creation, the admin captain change, and ghost\n// linking write it, and nothing else does.\nexport const TEAM_CAPTAIN_ROLE = 'captain' as const satisfies TeamRole;\n\n// The two roles below the captain. A co-captain holds every captain power except managing\n// co-captains; a player holds none.\nexport const TEAM_CO_CAPTAIN_ROLE = 'coCaptain' as const satisfies TeamRole;\nexport const TEAM_PLAYER_ROLE = 'player' as const satisfies TeamRole;\n\n// The roles a member's role change moves a membership between — promoting a player to co-captain,\n// or demoting a co-captain to player. The captain's role moves only through the admin's captain\n// change, so it is never one of them.\nexport const MEMBER_ASSIGNABLE_TEAM_ROLES = [TEAM_CO_CAPTAIN_ROLE, TEAM_PLAYER_ROLE] as const satisfies readonly TeamRole[];\nexport type MemberAssignableTeamRole = (typeof MEMBER_ASSIGNABLE_TEAM_ROLES)[number];\n\n// A ghost link that merges a ghost's membership into the account's keeps one membership with the\n// higher of the two roles: `TEAM_ROLE_KEYS` runs from the highest role down.\nexport function higherTeamRole(left: TeamRole, right: TeamRole): TeamRole {\n  return TEAM_ROLE_KEYS.indexOf(left) <= TEAM_ROLE_KEYS.indexOf(right) ? left : right;\n}\n\nexport const TEAM_MEMBERSHIP_STATUS_KEYS = ['active'] as const;\nexport type TeamMembershipStatus = (typeof TEAM_MEMBERSHIP_STATUS_KEYS)[number];\n\n// The status a membership grants authority in. Every membership-based check reads it with the role\n// (BACKEND-006), so a status added later grants nothing until a check names it.\nexport const ACTIVE_TEAM_MEMBERSHIP_STATUS = 'active' as const satisfies TeamMembershipStatus;\n\n// How a membership came to exist; absent on a membership whose provenance was never recorded.\nexport const TEAM_JOIN_METHOD_KEYS = [\n  'teamCreation',\n  'invite',\n  'joinRequest',\n  'freeAgent',\n  'ghostAdd',\n] as const;\nexport type TeamJoinMethod = (typeof TEAM_JOIN_METHOD_KEYS)[number];\n\nexport const LEAGUE_STATUS_KEYS = ['pending', 'upcoming', 'active', 'closed'] as const;\nexport type LeagueStatus = (typeof LEAGUE_STATUS_KEYS)[number];\n\n// Every league is created unpublished; the admin moves it forward from here.\nexport const LEAGUE_STATUS_ON_CREATE = 'pending' as const satisfies LeagueStatus;\n\n// A finished season. Its settings stay editable; its status and mode never change again.\nexport const CLOSED_LEAGUE_STATUS = 'closed' as const satisfies LeagueStatus;\n\n// The two published statuses before a league closes: its teams are forming, then it is in play.\nexport const UPCOMING_LEAGUE_STATUS = 'upcoming' as const satisfies LeagueStatus;\nexport const ACTIVE_LEAGUE_STATUS = 'active' as const satisfies LeagueStatus;\n\n// The statuses a league may move to from each status. Movement is forward only, and `closed` is\n// final; the status callable refuses any other move.\nexport const LEAGUE_STATUS_TRANSITIONS: Readonly<Record<LeagueStatus, readonly LeagueStatus[]>> = {\n  pending: ['upcoming', 'closed'],\n  upcoming: ['active', 'closed'],\n  active: ['closed'],\n  closed: [],\n};\n\n// Every status but closed: a league still being set up, published, or played. Whatever such a\n// league is configured with — its waiver template among them — is still in use.\nexport const OPEN_LEAGUE_STATUS_KEYS: readonly Exclude<LeagueStatus, typeof CLOSED_LEAGUE_STATUS>[] =\n  LEAGUE_STATUS_KEYS.filter(\n    (status): status is Exclude<LeagueStatus, typeof CLOSED_LEAGUE_STATUS> => status !== CLOSED_LEAGUE_STATUS,\n  );\n\n// A league players are part of now or next: published and not yet closed. The admin dashboard's\n// active free-agent count covers only these leagues.\nexport const CURRENT_LEAGUE_STATUS_KEYS = [\n  UPCOMING_LEAGUE_STATUS,\n  ACTIVE_LEAGUE_STATUS,\n] as const satisfies readonly LeagueStatus[];\n\nexport const LEAGUE_MODE_KEYS = ['Regular', 'Competitive/Recreational'] as const;\nexport type LeagueMode = (typeof LEAGUE_MODE_KEYS)[number];\n\n// Present only on teams in a Competitive/Recreational league. In any other mode a team has no type:\n// the field is absent, never null.\nexport const TEAM_TYPE_KEYS = ['Competitive', 'Recreational'] as const;\nexport type TeamType = (typeof TEAM_TYPE_KEYS)[number];\n\n// The one mode whose teams each carry a `teamType`.\nexport const TEAM_TYPED_LEAGUE_MODE = 'Competitive/Recreational' as const satisfies LeagueMode;\n\n// The type every team takes when its league switches into `TEAM_TYPED_LEAGUE_MODE`.\nexport const TEAM_TYPE_ON_MODE_SWITCH = 'Recreational' as const satisfies TeamType;\n\nexport const GAME_STATUS_KEYS = ['scheduled', 'inprogress', 'completed'] as const;\nexport type GameStatus = (typeof GAME_STATUS_KEYS)[number];\n\n// The one status a finished game holds: it was played, and its stats count. Every reader asking\n// whether a game was played compares against this rather than naming a status of its own.\nexport const COMPLETED_GAME_STATUS = 'completed' as const satisfies GameStatus;\n\n// The status a newly scheduled game is created in.\nexport const GAME_STATUS_ON_CREATE = 'scheduled' as const satisfies GameStatus;\n\n// The status reopen returns a finalized game to: open for scoring again, its record of who played\n// kept.\nexport const GAME_STATUS_ON_REOPEN = 'inprogress' as const satisfies GameStatus;\n\n// An invitation is pending until the invitee accepts (`approved`) or declines (`rejected`) it, or the\n// team withdraws it (`cancelled`). A membership on its team made any other way closes it `approved`.\nexport const TEAM_INVITATION_STATUS_KEYS = ['pending', 'approved', 'rejected', 'cancelled'] as const;\nexport type TeamInvitationStatus = (typeof TEAM_INVITATION_STATUS_KEYS)[number];\n\nexport const PENDING_TEAM_INVITATION_STATUS = 'pending' as const satisfies TeamInvitationStatus;\nexport const APPROVED_TEAM_INVITATION_STATUS = 'approved' as const satisfies TeamInvitationStatus;\nexport const REJECTED_TEAM_INVITATION_STATUS = 'rejected' as const satisfies TeamInvitationStatus;\nexport const CANCELLED_TEAM_INVITATION_STATUS = 'cancelled' as const satisfies TeamInvitationStatus;\n\n// A join request is pending until the team's leaders accept (`approved`) or reject (`rejected`) it,\n// or the requester withdraws it (`cancelled`). A membership on its team made any other way closes it\n// `approved`.\nexport const TEAM_JOIN_REQUEST_STATUS_KEYS = ['pending', 'approved', 'rejected', 'cancelled'] as const;\nexport type TeamJoinRequestStatus = (typeof TEAM_JOIN_REQUEST_STATUS_KEYS)[number];\n\nexport const PENDING_TEAM_JOIN_REQUEST_STATUS = 'pending' as const satisfies TeamJoinRequestStatus;\nexport const APPROVED_TEAM_JOIN_REQUEST_STATUS = 'approved' as const satisfies TeamJoinRequestStatus;\nexport const REJECTED_TEAM_JOIN_REQUEST_STATUS = 'rejected' as const satisfies TeamJoinRequestStatus;\nexport const CANCELLED_TEAM_JOIN_REQUEST_STATUS = 'cancelled' as const satisfies TeamJoinRequestStatus;\n\nexport const HARDWARE_LOAN_CONTRACT_STATUS_KEYS = ['pending', 'loaned', 'returned'] as const;\nexport type HardwareLoanContractStatus = (typeof HARDWARE_LOAN_CONTRACT_STATUS_KEYS)[number];\n// Why an award grant passed over an account its teams or leagues named: it has no profile, or it is\n// a ghost, which holds no account.\nexport const AWARD_GRANT_SKIP_REASON_KEYS = ['noProfile', 'ghost'] as const;\nexport type AwardGrantSkipReason = (typeof AWARD_GRANT_SKIP_REASON_KEYS)[number];\n\n// The two badges an account shows beside its name.\nexport const FEATURED_AWARD_SLOT_KEYS = ['primary', 'secondary'] as const;\nexport type FeaturedAwardSlot = (typeof FEATURED_AWARD_SLOT_KEYS)[number];\n\nexport const PENDING_HARDWARE_LOAN_CONTRACT_STATUS = 'pending' as const satisfies HardwareLoanContractStatus;\nexport const LOANED_HARDWARE_LOAN_CONTRACT_STATUS = 'loaned' as const satisfies HardwareLoanContractStatus;\nexport const RETURNED_HARDWARE_LOAN_CONTRACT_STATUS = 'returned' as const satisfies HardwareLoanContractStatus;\n\n// What deleting a waiver template did. A template nothing names is deleted with its versions; one a\n// signature or a closed league still names is retired — kept for them, offered to no new league.\nexport const WAIVER_TEMPLATE_DELETE_OUTCOME_KEYS = ['deleted', 'retired'] as const;\nexport type WaiverTemplateDeleteOutcome = (typeof WAIVER_TEMPLATE_DELETE_OUTCOME_KEYS)[number];\n\n// What last changed the stats, as announced on the stats beacon; `link` is a ghost link moving a\n// game's lines onto an account.\nexport const STATS_BEACON_ACTION_KEYS = ['finalize', 'reopen', 'recalculate', 'correct', 'historical-update', 'link'] as const;\nexport type StatsBeaconAction = (typeof STATS_BEACON_ACTION_KEYS)[number];\n\n// The actions that describe one game, so a beacon announcing one names the game, its league, and its\n// teams; every other action names no game, and a game id left beside it would point at a stale one.\nexport const GAME_SCOPED_STATS_BEACON_ACTION_KEYS = ['finalize', 'reopen'] as const satisfies readonly StatsBeaconAction[];\nexport type GameScopedStatsBeaconAction = (typeof GAME_SCOPED_STATS_BEACON_ACTION_KEYS)[number];\n\n// The statuses a game's roster still follows its teams' memberships in: listed explicitly, so a\n// status added later is closed until it is named here, never open by default.\nexport const OPEN_GAME_STATUS_KEYS = ['scheduled', 'inprogress'] as const satisfies readonly GameStatus[];\nexport type OpenGameStatus = (typeof OPEN_GAME_STATUS_KEYS)[number];\n\n// Whether a game is still open — not yet finalized — so a scorer may still change it. Both app roots\n// ask this one predicate.\nexport function isOpenGameStatus(status: GameStatus): status is OpenGameStatus {\n  return (OPEN_GAME_STATUS_KEYS as readonly GameStatus[]).includes(status);\n}\n\n// Where one membership's roster obligation stands. `pending` waits for the reconciliation worker;\n// `failed` has spent its retries and waits for an admin's retry; `reconciled` owes nothing.\nexport const MEMBERSHIP_ROSTER_SYNC_STATUS_KEYS = ['pending', 'reconciled', 'failed'] as const;\nexport type MembershipRosterSyncStatus = (typeof MEMBERSHIP_ROSTER_SYNC_STATUS_KEYS)[number];\nexport const PENDING_ROSTER_SYNC_STATUS = 'pending' as const satisfies MembershipRosterSyncStatus;\nexport const RECONCILED_ROSTER_SYNC_STATUS = 'reconciled' as const satisfies MembershipRosterSyncStatus;\nexport const FAILED_ROSTER_SYNC_STATUS = 'failed' as const satisfies MembershipRosterSyncStatus;\n\n// The authority a ghost's waiver was signed under: the witness's captaincy on the ghost's team, or\n// the global role the admin entry confirmed.\nexport const WAIVER_WITNESS_AUTHORITY_KEYS = ['captain', 'coCaptain', 'admin', 'referee'] as const;\nexport type WaiverWitnessAuthority = (typeof WAIVER_WITNESS_AUTHORITY_KEYS)[number];\n\n// Why a signing was refused, named in its details so the signing dialog answers it: `waiverChanged`\n// when the wording the signer saw — the template id and version the dialog sent — is no longer the\n// league's, so the dialog loads the current wording to read again.\nexport const WAIVER_SIGNING_REFUSAL_KEYS = ['waiverChanged'] as const;\nexport type WaiverSigningRefusal = (typeof WAIVER_SIGNING_REFUSAL_KEYS)[number];\n\n// The icon a team picks at creation; the persisted value is the icon component's name.\nexport const TEAM_ICON_KEYS = [\n  'Shield',\n  'Swords',\n  'Skull',\n  'Ghost',\n  'Cat',\n  'Dog',\n  'Bird',\n  'Fish',\n  'Rabbit',\n  'Snail',\n  'Turtle',\n  'Cherry',\n  'Apple',\n  'Grape',\n  'Rocket',\n  'Plane',\n  'Ship',\n  'Train',\n  'Car',\n  'Bike',\n  'Bolt',\n  'Star',\n  'Sun',\n  'Moon',\n  'Cloud',\n  'Crown',\n  'Diamond',\n  'Gem',\n  'Anchor',\n  // Appended — the set only grows, and no stored key is ever renamed or removed. Seasonal and events.\n  'TreePine',\n  'Trees',\n  'TreeDeciduous',\n  'TreePalm',\n  'Snowflake',\n  'MountainSnow',\n  'Gift',\n  'PartyPopper',\n  'CandyCane',\n  'Candy',\n  'Lollipop',\n  'Cake',\n  'Egg',\n  'Clover',\n  'Heart',\n  'Flower',\n  'Flower2',\n  'Rose',\n  'Leaf',\n  'Sprout',\n  'Wheat',\n  'Sunrise',\n  'Rainbow',\n  'Bell',\n  // Awards and sport.\n  'Trophy',\n  'Medal',\n  'Award',\n  'Ribbon',\n  'Flag',\n  'Target',\n  'Crosshair',\n  'Goal',\n  'Dumbbell',\n  'Footprints',\n  // Power and the elements.\n  'Zap',\n  'Flame',\n  'FlameKindling',\n  'Bomb',\n  'Atom',\n  'Orbit',\n  'Sparkles',\n  'WandSparkles',\n  'Mountain',\n  'Tornado',\n  'Wind',\n  'Droplet',\n  'CloudLightning',\n  'MoonStar',\n  // Arms and strongholds.\n  'Sword',\n  'Axe',\n  'Hammer',\n  'Pickaxe',\n  'ShieldHalf',\n  'Castle',\n  // Animals.\n  'Squirrel',\n  'Rat',\n  'Panda',\n  'Shrimp',\n  'Worm',\n  'Bug',\n  'Shell',\n  'PawPrint',\n  'Feather',\n  'Bone',\n  'Origami',\n  // Food.\n  'Citrus',\n  'Banana',\n  'Carrot',\n  'Pizza',\n  'Cookie',\n  'Donut',\n  'Coffee',\n  // Games and music.\n  'Dices',\n  'Puzzle',\n  'Gamepad2',\n  'Spade',\n  'Club',\n  'Music',\n  'Guitar',\n  'Hexagon',\n  'Triangle',\n  // Travel.\n  'Sailboat',\n  'Tractor',\n  'Truck',\n] as const;\nexport type TeamIcon = (typeof TEAM_ICON_KEYS)[number];\n\n// A picture's processed sizes, smallest first: every picture kind declares all three, and a display\n// asks for the smallest one that covers its slot.\nexport const PICTURE_VARIANT_KEYS = ['sm', 'md', 'lg'] as const;\nexport type PictureVariantKey = (typeof PICTURE_VARIANT_KEYS)[number];\n\n// What a stats check found, game tier first — a game's own numbers are the cause of the aggregate\n// findings, so Fix stats repairs games before it rebuilds what they feed.\nexport const GAME_TIER_DISCREPANCY_KIND_KEYS = [\n  // A game whose document the check could not read: nothing else about it could be checked.\n  'gameUnreadable',\n  'invalidEvent',\n  'eventSequenceMismatch',\n  // A game whose events do not hold exactly the sequences 1..n: a gap or a duplicate.\n  'eventSequenceGap',\n  'rollupMismatch',\n  'scoreMirrorMismatch',\n  'unrosteredStatLine',\n  'fantasyPointsStale',\n  'finalRecordMissing',\n  'finalRecordMismatch',\n  'participationSnapshotMismatch',\n  'gameHeld',\n] as const;\nexport const AGGREGATE_TIER_DISCREPANCY_KIND_KEYS = [\n  'aggregateMismatch',\n  'aggregateEntryStale',\n  'aggregateEntryMissing',\n  'hallOfFameLifetimeMismatch',\n] as const;\nexport const STATS_DISCREPANCY_KIND_KEYS = [\n  ...GAME_TIER_DISCREPANCY_KIND_KEYS,\n  ...AGGREGATE_TIER_DISCREPANCY_KIND_KEYS,\n] as const;\nexport type StatsDiscrepancyKind = (typeof STATS_DISCREPANCY_KIND_KEYS)[number];\n"]}

package/dist/upload-variables/index.d.ts

@@ -0,0 +1,3 @@
+export * from './on-progress.js';
+export * from './picture-upload-variables.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/upload-variables/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/upload-variables/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC"}

package/dist/upload-variables/index.js

@@ -0,0 +1,3 @@
+export * from './on-progress.js';
+export * from './picture-upload-variables.js';
+//# sourceMappingURL=index.js.map

package/dist/upload-variables/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/upload-variables/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC","sourcesContent":["export * from './on-progress.js';\nexport * from './picture-upload-variables.js';\n"]}

package/dist/upload-variables/on-progress.d.ts

@@ -0,0 +1,4 @@
+import { z } from 'zod';
+import type { UploadState } from '@ttt-productions/media-schemas';
+export declare const onProgressSchema: z.ZodOptional<z.ZodCustom<(state: UploadState | null) => void, (state: UploadState | null) => void>>;
+//# sourceMappingURL=on-progress.d.ts.map

package/dist/upload-variables/on-progress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"on-progress.d.ts","sourceRoot":"","sources":["../../src/upload-variables/on-progress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAOlE,eAAO,MAAM,gBAAgB,oCACX,WAAW,GAAG,IAAI,KAAK,IAAI,UAA3B,WAAW,GAAG,IAAI,KAAK,IAAI,EAChC,CAAC"}

package/dist/upload-variables/on-progress.js

@@ -0,0 +1,10 @@
+import { z } from 'zod';
+// Shared schema for the optional upload-progress callback carried in upload
+// mutation variables. Zod 4 removed embeddable `z.function()` schemas, so this
+// validates "is a function" at parse time and preserves the callback's type
+// (and identity — zod 3's function schema returned a validating wrapper; this
+// returns the original function).
+export const onProgressSchema = z
+    .custom((value) => typeof value === 'function')
+    .optional();
+//# sourceMappingURL=on-progress.js.map

package/dist/upload-variables/on-progress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"on-progress.js","sourceRoot":"","sources":["../../src/upload-variables/on-progress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,4EAA4E;AAC5E,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,kCAAkC;AAClC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAsC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,UAAU,CAAC;KACnF,QAAQ,EAAE,CAAC","sourcesContent":["import { z } from 'zod';\nimport type { UploadState } from '@ttt-productions/media-schemas';\n\n// Shared schema for the optional upload-progress callback carried in upload\n// mutation variables. Zod 4 removed embeddable `z.function()` schemas, so this\n// validates \"is a function\" at parse time and preserves the callback's type\n// (and identity — zod 3's function schema returned a validating wrapper; this\n// returns the original function).\nexport const onProgressSchema = z\n  .custom<(state: UploadState | null) => void>((value) => typeof value === 'function')\n  .optional();\n"]}

package/dist/upload-variables/picture-upload-variables.d.ts

@@ -0,0 +1,32 @@
+import { z } from 'zod';
+import type { PictureOrigin } from '../media/file-origins.js';
+import { PICTURE_TARGETS } from '../schemas/uploads.js';
+/** What a picture is uploaded for: its origin, and that origin's target — the owner, by id. */
+export type PictureUploadTarget = {
+    [O in PictureOrigin]: {
+        origin: O;
+        targetInfo: z.infer<(typeof PICTURE_TARGETS)[O]['schema']>;
+    };
+}[PictureOrigin];
+export declare const PictureUploadTargetSchema: z.ZodType<PictureUploadTarget>;
+export declare const PictureUploadVariablesSchema: z.ZodObject<{
+    target: z.ZodType<PictureUploadTarget, unknown, z.core.$ZodTypeInternals<PictureUploadTarget, unknown>>;
+    file: z.ZodCustom<File, File>;
+    claim: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<{
+            file: "file";
+            image: "image";
+            video: "video";
+            audio: "audio";
+        }>;
+        source: z.ZodEnum<{
+            "file-picker": "file-picker";
+            "camera-capture": "camera-capture";
+            "media-recorder": "media-recorder";
+        }>;
+    }, z.core.$strict>>;
+    onProgress: z.ZodOptional<z.ZodCustom<(state: import("@ttt-productions/media-schemas").UploadState | null) => void, (state: import("@ttt-productions/media-schemas").UploadState | null) => void>>;
+    signal: z.ZodOptional<z.ZodCustom<AbortSignal, AbortSignal>>;
+}, z.core.$strict>;
+export type PictureUploadVariables = z.infer<typeof PictureUploadVariablesSchema>;
+//# sourceMappingURL=picture-upload-variables.d.ts.map

package/dist/upload-variables/picture-upload-variables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"picture-upload-variables.d.ts","sourceRoot":"","sources":["../../src/upload-variables/picture-upload-variables.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,+FAA+F;AAC/F,MAAM,MAAM,mBAAmB,GAAG;KAC/B,CAAC,IAAI,aAAa,GAAG;QAAE,MAAM,EAAE,CAAC,CAAC;QAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;KAAE;CAChG,CAAC,aAAa,CAAC,CAAC;AAUjB,eAAO,MAAM,yBAAyB,EAGtB,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAE/C,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;kBAQ9B,CAAC;AACZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/upload-variables/picture-upload-variables.js

@@ -0,0 +1,21 @@
+import { z } from 'zod';
+import { ClientMediaClaimSchema } from '@ttt-productions/media-schemas';
+import { PICTURE_ORIGIN_KEYS } from '../media/file-origins.js';
+import { PICTURE_TARGETS } from '../schemas/uploads.js';
+import { onProgressSchema } from './on-progress.js';
+// One member per picture origin, each pairing the origin with its own target schema, built from
+// `PICTURE_TARGETS` so a new origin joins it with no change here.
+const pictureUploadTargetOptions = PICTURE_ORIGIN_KEYS.map((origin) => z.object({ origin: z.literal(origin), targetInfo: PICTURE_TARGETS[origin].schema }).strict());
+// The mapped options are one object schema per origin; TypeScript cannot follow the origin-to-target
+// pairing through the map, so the union is typed by `PictureUploadTarget`, which states it.
+export const PictureUploadTargetSchema = z.discriminatedUnion('origin', pictureUploadTargetOptions);
+export const PictureUploadVariablesSchema = z.object({
+    target: PictureUploadTargetSchema,
+    file: z.instanceof(File),
+    // Untrusted client claim of what the user's action implies (advisory; the
+    // server byte inspection is the only classification authority).
+    claim: ClientMediaClaimSchema.optional(),
+    onProgress: onProgressSchema,
+    signal: z.instanceof(AbortSignal).optional(),
+}).strict();
+//# sourceMappingURL=picture-upload-variables.js.map

package/dist/upload-variables/picture-upload-variables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"picture-upload-variables.js","sourceRoot":"","sources":["../../src/upload-variables/picture-upload-variables.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAOpD,gGAAgG;AAChG,kEAAkE;AAClE,MAAM,0BAA0B,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAC7F,CAAC;AAEF,qGAAqG;AACrG,4FAA4F;AAC5F,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,kBAAkB,CAC3D,QAAQ,EACR,0BAA6H,CACjF,CAAC;AAE/C,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,MAAM,EAAE,yBAAyB;IACjC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;IACxB,0EAA0E;IAC1E,gEAAgE;IAChE,KAAK,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IACxC,UAAU,EAAE,gBAAgB;IAC5B,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC,MAAM,EAAE,CAAC","sourcesContent":["import { z } from 'zod';\nimport { ClientMediaClaimSchema } from '@ttt-productions/media-schemas';\nimport { PICTURE_ORIGIN_KEYS } from '../media/file-origins.js';\nimport type { PictureOrigin } from '../media/file-origins.js';\nimport { PICTURE_TARGETS } from '../schemas/uploads.js';\nimport { onProgressSchema } from './on-progress.js';\n\n/** What a picture is uploaded for: its origin, and that origin's target — the owner, by id. */\nexport type PictureUploadTarget = {\n  [O in PictureOrigin]: { origin: O; targetInfo: z.infer<(typeof PICTURE_TARGETS)[O]['schema']> };\n}[PictureOrigin];\n\n// One member per picture origin, each pairing the origin with its own target schema, built from\n// `PICTURE_TARGETS` so a new origin joins it with no change here.\nconst pictureUploadTargetOptions = PICTURE_ORIGIN_KEYS.map((origin) =>\n  z.object({ origin: z.literal(origin), targetInfo: PICTURE_TARGETS[origin].schema }).strict(),\n);\n\n// The mapped options are one object schema per origin; TypeScript cannot follow the origin-to-target\n// pairing through the map, so the union is typed by `PictureUploadTarget`, which states it.\nexport const PictureUploadTargetSchema = z.discriminatedUnion(\n  'origin',\n  pictureUploadTargetOptions as [(typeof pictureUploadTargetOptions)[number], ...(typeof pictureUploadTargetOptions)[number][]],\n) as unknown as z.ZodType<PictureUploadTarget>;\n\nexport const PictureUploadVariablesSchema = z.object({\n  target: PictureUploadTargetSchema,\n  file: z.instanceof(File),\n  // Untrusted client claim of what the user's action implies (advisory; the\n  // server byte inspection is the only classification authority).\n  claim: ClientMediaClaimSchema.optional(),\n  onProgress: onProgressSchema,\n  signal: z.instanceof(AbortSignal).optional(),\n}).strict();\nexport type PictureUploadVariables = z.infer<typeof PictureUploadVariablesSchema>;\n"]}

package/dist/utils/app-config.d.ts

@@ -38,16 +38,30 @@ export declare function isMaintenanceRefusalDetails(details: unknown): details i
  * outage is never mistaken for the designed refusal.
  */
 export declare function isMaintenanceRefusalError(err: unknown): boolean;
+/** A stored lever its schema field refused, with the raw value the document held. */
+export interface AppConfigLeverRepair {
+    readonly lever: AppConfigLeverKey;
+    readonly storedValue: unknown;
+}
+/** The document a writer writes, and every stored lever the merge had to repair to write it. */
+export interface AppConfigMerge {
+    readonly next: AppConfig;
+    readonly repairs: readonly AppConfigLeverRepair[];
+}
 /**
  * The complete `_appConfig/app` document to write after applying `update` to `existing` (the
  * document as read in the writer's transaction; `null` or `undefined` when it does not exist). The
  * update's fields win, `existing` supplies the rest, and any field still missing comes from
  * DEFAULT_APP_CONFIG. An `undefined` update field changes nothing. Pure.
  *
- * Throws when the result would not parse — the update itself, or a stored field the update does not
- * replace — so an invalid document is never written.
+ * A stored lever its schema refuses never blocks a save — a console typo must not disable the
+ * maintenance switch. It is dropped, so the update's value replaces it when the update sends that
+ * lever and its DEFAULT_APP_CONFIG value (what every reader already falls back to) otherwise, and it
+ * is reported in `repairs`. A valid stored lever is carried as it is.
+ *
+ * Throws when the update itself would not parse, so an invalid document is never written.
  */
-export declare function mergeAppConfigUpdate(existing: Readonly<Record<string, unknown>> | null | undefined, update: Readonly<Partial<AppConfig>>): AppConfig;
+export declare function mergeAppConfigUpdate(existing: Readonly<Record<string, unknown>> | null | undefined, update: Readonly<Partial<AppConfig>>): AppConfigMerge;
 /**
  * One operator lever off an unvalidated `_appConfig/app` snapshot (`null` or `undefined` when the
  * document is missing or not yet read): the stored value when its schema field accepts it, otherwise

package/dist/utils/app-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-config.d.ts","sourceRoot":"","sources":["../../src/utils/app-config.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D,0FAA0F;AAC1F,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AAE5D,sCAAsC;AACtC,MAAM,MAAM,iBAAiB,GAAG,MAAM,eAAe,CAAC;AAEtD,0DAA0D;AAC1D,eAAO,MAAM,qBAAqB,6GAAkC,CAAC;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,EAAE,eAM/B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,2BAA2B,4GAC8D,CAAC;AAEvG;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAG,aAAsB,CAAC;AAE/D,qEAAqE;AACrE,eAAO,MAAM,0BAA0B,EAAG,aAAsB,CAAC;AAEjE,sEAAsE;AACtE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,OAAO,0BAA0B,CAAC;CACpD;AASD,2EAA2E;AAC3E,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,yBAAyB,CAGlG;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAQ/D;AAMD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,EAC9D,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GACnC,SAAS,CAcX;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,iBAAiB,EAC5D,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,EAC9D,KAAK,EAAE,CAAC,GACP,eAAe,CAAC,CAAC,CAAC,CAKpB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,EAC9D,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAGT;AAED,gGAAgG;AAChG,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,GAC7D,eAAe,CAMjB"}
+{"version":3,"file":"app-config.d.ts","sourceRoot":"","sources":["../../src/utils/app-config.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D,0FAA0F;AAC1F,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AAE5D,sCAAsC;AACtC,MAAM,MAAM,iBAAiB,GAAG,MAAM,eAAe,CAAC;AAEtD,0DAA0D;AAC1D,eAAO,MAAM,qBAAqB,6GAAkC,CAAC;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,EAAE,eAM/B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,2BAA2B,4GAC8D,CAAC;AAEvG;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAG,aAAsB,CAAC;AAE/D,qEAAqE;AACrE,eAAO,MAAM,0BAA0B,EAAG,aAAsB,CAAC;AAEjE,sEAAsE;AACtE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,OAAO,0BAA0B,CAAC;CACpD;AASD,2EAA2E;AAC3E,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,yBAAyB,CAGlG;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAQ/D;AAMD,qFAAqF;AACrF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED,gGAAgG;AAChG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACnD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,EAC9D,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GACnC,cAAc,CAiBhB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,iBAAiB,EAC5D,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,EAC9D,KAAK,EAAE,CAAC,GACP,eAAe,CAAC,CAAC,CAAC,CAKpB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,EAC9D,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAGT;AAED,gGAAgG;AAChG,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,GAC7D,eAAe,CAMjB"}

package/dist/utils/app-config.js

@@ -1,12 +1,11 @@
 // The `_appConfig/app` singleton at rest, and the one rule each for writing it and reading it.
 //
 // WRITE. `mergeAppConfigUpdate(existing, update)`: the writer's update on top of the document it
-// read, any field that document lacks taken from DEFAULT_APP_CONFIG, the whole result validated.
-// A writer that runs first on a fresh environment therefore still writes a complete, valid
-// document rather than a partial one. A stored field that does not parse — a hand edit in the
-// console — is never written over by a save that does not send it: the merge refuses, and the
-// writer answers with the field, so the operator corrects it at the source. A save that sends the
-// field replaces it.
+// read, any field that document lacks — and any lever it holds at a value its schema refuses —
+// taken from DEFAULT_APP_CONFIG, the whole result validated. A writer that runs first on a fresh
+// environment therefore still writes a complete, valid document rather than a partial one, and a
+// hand edit in the console that broke one lever never blocks a save of another: the merge resets it
+// and reports the repair with the value it replaced, which the writer records.
 //
 // READ. The stored document is untrusted — an operator can edit any field in the console into any
 // shape — and a config read must never take the product down by itself. `readAppConfigLever`
@@ -77,21 +76,29 @@ function definedFields(fields) {
  * update's fields win, `existing` supplies the rest, and any field still missing comes from
  * DEFAULT_APP_CONFIG. An `undefined` update field changes nothing. Pure.
  *
- * Throws when the result would not parse — the update itself, or a stored field the update does not
- * replace — so an invalid document is never written.
+ * A stored lever its schema refuses never blocks a save — a console typo must not disable the
+ * maintenance switch. It is dropped, so the update's value replaces it when the update sends that
+ * lever and its DEFAULT_APP_CONFIG value (what every reader already falls back to) otherwise, and it
+ * is reported in `repairs`. A valid stored lever is carried as it is.
+ *
+ * Throws when the update itself would not parse, so an invalid document is never written.
  */
 export function mergeAppConfigUpdate(existing, update) {
-    const parsed = AppConfigSchema.safeParse({
-        ...DEFAULT_APP_CONFIG,
-        ...definedFields(existing ?? {}),
-        ...definedFields(update),
-    });
+    const stored = definedFields(existing ?? {});
+    const repairs = [];
+    for (const lever of APP_CONFIG_LEVER_KEYS) {
+        if (!(lever in stored) || AppConfigSchema.shape[lever].safeParse(stored[lever]).success)
+            continue;
+        repairs.push({ lever, storedValue: stored[lever] });
+        delete stored[lever];
+    }
+    const parsed = AppConfigSchema.safeParse({ ...DEFAULT_APP_CONFIG, ...stored, ...definedFields(update) });
     if (!parsed.success) {
         const issue = parsed.error.issues[0];
         const field = issue?.path.join('.') || 'document';
         throw new Error(`_appConfig/app would not match its schema after this update (${field}: ${issue?.message ?? 'invalid'}). Nothing should be written.`);
     }
-    return parsed.data;
+    return { next: parsed.data, repairs };
 }
 /**
  * One operator lever off an unvalidated `_appConfig/app` snapshot (`null` or `undefined` when the

package/dist/utils/app-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-config.js","sourceRoot":"","sources":["../../src/utils/app-config.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,EAAE;AACF,iGAAiG;AACjG,iGAAiG;AACjG,2FAA2F;AAC3F,8FAA8F;AAC9F,8FAA8F;AAC9F,kGAAkG;AAClG,qBAAqB;AACrB,EAAE;AACF,kGAAkG;AAClG,6FAA6F;AAC7F,gGAAgG;AAChG,oGAAoG;AACpG,iEAAiE;AAEjE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAS3D,0DAA0D;AAC1D,MAAM,CAAC,MAAM,qBAAqB,GAAG,eAAe,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAoB,MAAM,CAAC,MAAM,CAAC;IAC/D,UAAU,EAAE,EAAE;IACd,eAAe,EAAE,KAAK;IACtB,kBAAkB,EAAE,EAAE;IACtB,mBAAmB,EAAE,IAAI;IACzB,mBAAmB,EAAE,EAAE;CACxB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GACtC,oGAAoG,CAAC;AAEvG;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,aAAsB,CAAC;AAE/D,qEAAqE;AACrE,MAAM,CAAC,MAAM,0BAA0B,GAAG,aAAsB,CAAC;AAOjE,6EAA6E;AAC7E,sCAAsC;AACtC,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IAC7D,wBAAwB;IACxB,aAAa,wBAAwB,EAAE;CACxC,CAAC,CAAC;AAEH,2EAA2E;AAC3E,MAAM,UAAU,2BAA2B,CAAC,OAAgB;IAC1D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAQ,OAAmC,CAAC,MAAM,KAAK,0BAA0B,CAAC;AACpF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAY;IACpD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,SAAS,GAAG,GAA4C,CAAC;IAC/D,OAAO,CACL,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;QAClC,yBAAyB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;QAC7C,2BAA2B,CAAC,SAAS,CAAC,OAAO,CAAC,CAC/C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAyC;IAC9D,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAA8D,EAC9D,MAAoC;IAEpC,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC;QACvC,GAAG,kBAAkB;QACrB,GAAG,aAAa,CAAC,QAAQ,IAAI,EAAE,CAAC;QAChC,GAAG,aAAa,CAAC,MAAM,CAAC;KACzB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,gEAAgE,KAAK,KAAK,KAAK,EAAE,OAAO,IAAI,SAAS,+BAA+B,CACrI,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA8D,EAC9D,KAAQ;IAER,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAChD,CAAC,CAAE,MAAM,CAAC,IAA2B;QACrC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAA8D,EAC9D,KAAwB;IAExB,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;AACzF,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CACjC,QAA8D;IAE9D,MAAM,MAAM,GAAgD,EAAE,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,qBAAqB,EAAE,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,MAAyB,CAAC;AACnC,CAAC","sourcesContent":["// The `_appConfig/app` singleton at rest, and the one rule each for writing it and reading it.\n//\n// WRITE. `mergeAppConfigUpdate(existing, update)`: the writer's update on top of the document it\n// read, any field that document lacks taken from DEFAULT_APP_CONFIG, the whole result validated.\n// A writer that runs first on a fresh environment therefore still writes a complete, valid\n// document rather than a partial one. A stored field that does not parse — a hand edit in the\n// console — is never written over by a save that does not send it: the merge refuses, and the\n// writer answers with the field, so the operator corrects it at the source. A save that sends the\n// field replaces it.\n//\n// READ. The stored document is untrusted — an operator can edit any field in the console into any\n// shape — and a config read must never take the product down by itself. `readAppConfigLever`\n// answers one lever at a time: the stored value when its schema field accepts it, otherwise the\n// lever's DEFAULT_APP_CONFIG value, so one bad field never costs the good ones. The server's cached\n// snapshot reader and the client's readers both read through it.\n\nimport { AppConfigSchema } from '../doc-schemas/system.js';\nimport type { AppConfig } from '../doc-schemas/system.js';\n\n/** Every operator lever of `_appConfig/app`, each at a value its schema field accepts. */\nexport type AppConfigLevers = Readonly<Required<AppConfig>>;\n\n/** The name of one operator lever. */\nexport type AppConfigLeverKey = keyof AppConfigLevers;\n\n/** Every lever name, derived from the document schema. */\nexport const APP_CONFIG_LEVER_KEYS = AppConfigSchema.keyof().options;\n\n/**\n * The document a fresh environment behaves as if it held, and the value each reader falls back to\n * for a missing or unreadable field: maintenance off, registration open, no banner.\n *\n * `appVersion` is `''` — no version has been published — so the version gate stays dormant until an\n * operator sets a real one through `updateAppConfig`, whose input refuses `''`.\n */\nexport const DEFAULT_APP_CONFIG: AppConfigLevers = Object.freeze({\n  appVersion: '',\n  maintenanceMode: false,\n  maintenanceMessage: '',\n  registrationEnabled: true,\n  announcementMessage: '',\n});\n\n/**\n * The line shown while maintenance is on and the operator left `maintenanceMessage` blank — on the\n * maintenance screen and in the callable refusal alike.\n */\nexport const DEFAULT_MAINTENANCE_MESSAGE =\n  'Q-Sports is down for maintenance right now. We will be back shortly — thank you for your patience.';\n\n/**\n * The code the callable maintenance refusal is thrown with. `unavailable` is also what a real outage\n * produces, so the code alone never identifies the refusal — its details do.\n */\nexport const MAINTENANCE_REFUSAL_CODE = 'unavailable' as const;\n\n/** The `details.reason` the callable maintenance refusal carries. */\nexport const MAINTENANCE_REFUSAL_REASON = 'maintenance' as const;\n\n/** Structured details carried by the callable maintenance refusal. */\nexport interface MaintenanceRefusalDetails {\n  readonly reason: typeof MAINTENANCE_REFUSAL_REASON;\n}\n\n// The refusal code as the server (`unavailable`) and the Firebase client SDK\n// (`functions/unavailable`) spell it.\nconst MAINTENANCE_REFUSAL_CODES: ReadonlySet<string> = new Set([\n  MAINTENANCE_REFUSAL_CODE,\n  `functions/${MAINTENANCE_REFUSAL_CODE}`,\n]);\n\n/** True when `details` is the maintenance refusal's structured details. */\nexport function isMaintenanceRefusalDetails(details: unknown): details is MaintenanceRefusalDetails {\n  if (!details || typeof details !== 'object') return false;\n  return (details as Record<string, unknown>).reason === MAINTENANCE_REFUSAL_REASON;\n}\n\n/**\n * True when `err` is the callable maintenance refusal — an `unavailable` error in either spelling\n * whose details carry `reason: 'maintenance'`. Works on the server-side error and on the client-side\n * callable error alike, and is decided by the code and the details, never the message, so a genuine\n * outage is never mistaken for the designed refusal.\n */\nexport function isMaintenanceRefusalError(err: unknown): boolean {\n  if (!err || typeof err !== 'object') return false;\n  const candidate = err as { code?: unknown; details?: unknown };\n  return (\n    typeof candidate.code === 'string' &&\n    MAINTENANCE_REFUSAL_CODES.has(candidate.code) &&\n    isMaintenanceRefusalDetails(candidate.details)\n  );\n}\n\nfunction definedFields(fields: Readonly<Record<string, unknown>>): Record<string, unknown> {\n  return Object.fromEntries(Object.entries(fields).filter(([, value]) => value !== undefined));\n}\n\n/**\n * The complete `_appConfig/app` document to write after applying `update` to `existing` (the\n * document as read in the writer's transaction; `null` or `undefined` when it does not exist). The\n * update's fields win, `existing` supplies the rest, and any field still missing comes from\n * DEFAULT_APP_CONFIG. An `undefined` update field changes nothing. Pure.\n *\n * Throws when the result would not parse — the update itself, or a stored field the update does not\n * replace — so an invalid document is never written.\n */\nexport function mergeAppConfigUpdate(\n  existing: Readonly<Record<string, unknown>> | null | undefined,\n  update: Readonly<Partial<AppConfig>>,\n): AppConfig {\n  const parsed = AppConfigSchema.safeParse({\n    ...DEFAULT_APP_CONFIG,\n    ...definedFields(existing ?? {}),\n    ...definedFields(update),\n  });\n  if (!parsed.success) {\n    const issue = parsed.error.issues[0];\n    const field = issue?.path.join('.') || 'document';\n    throw new Error(\n      `_appConfig/app would not match its schema after this update (${field}: ${issue?.message ?? 'invalid'}). Nothing should be written.`,\n    );\n  }\n  return parsed.data;\n}\n\n/**\n * One operator lever off an unvalidated `_appConfig/app` snapshot (`null` or `undefined` when the\n * document is missing or not yet read): the stored value when its schema field accepts it, otherwise\n * the lever's DEFAULT_APP_CONFIG value — for an absent field and a refused one alike. Never throws.\n */\nexport function readAppConfigLever<L extends AppConfigLeverKey>(\n  snapshot: Readonly<Record<string, unknown>> | null | undefined,\n  lever: L,\n): AppConfigLevers[L] {\n  const parsed = AppConfigSchema.shape[lever].safeParse(snapshot?.[lever]);\n  return parsed.success && parsed.data !== undefined\n    ? (parsed.data as AppConfigLevers[L])\n    : DEFAULT_APP_CONFIG[lever];\n}\n\n/**\n * True when an unvalidated `_appConfig/app` snapshot holds `lever` with a value its schema field\n * refuses — the value every reader passes over for the default. An absent field is not refused.\n * Never throws.\n */\nexport function isAppConfigLeverRefused(\n  snapshot: Readonly<Record<string, unknown>> | null | undefined,\n  lever: AppConfigLeverKey,\n): boolean {\n  const stored = snapshot?.[lever];\n  return stored !== undefined && !AppConfigSchema.shape[lever].safeParse(stored).success;\n}\n\n/** Every lever off an unvalidated snapshot, each through `readAppConfigLever`. Never throws. */\nexport function readAppConfigLevers(\n  snapshot: Readonly<Record<string, unknown>> | null | undefined,\n): AppConfigLevers {\n  const levers: Partial<Record<AppConfigLeverKey, unknown>> = {};\n  for (const lever of APP_CONFIG_LEVER_KEYS) {\n    levers[lever] = readAppConfigLever(snapshot, lever);\n  }\n  return levers as AppConfigLevers;\n}\n"]}
+{"version":3,"file":"app-config.js","sourceRoot":"","sources":["../../src/utils/app-config.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,EAAE;AACF,iGAAiG;AACjG,+FAA+F;AAC/F,iGAAiG;AACjG,iGAAiG;AACjG,oGAAoG;AACpG,+EAA+E;AAC/E,EAAE;AACF,kGAAkG;AAClG,6FAA6F;AAC7F,gGAAgG;AAChG,oGAAoG;AACpG,iEAAiE;AAEjE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAS3D,0DAA0D;AAC1D,MAAM,CAAC,MAAM,qBAAqB,GAAG,eAAe,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAoB,MAAM,CAAC,MAAM,CAAC;IAC/D,UAAU,EAAE,EAAE;IACd,eAAe,EAAE,KAAK;IACtB,kBAAkB,EAAE,EAAE;IACtB,mBAAmB,EAAE,IAAI;IACzB,mBAAmB,EAAE,EAAE;CACxB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GACtC,oGAAoG,CAAC;AAEvG;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,aAAsB,CAAC;AAE/D,qEAAqE;AACrE,MAAM,CAAC,MAAM,0BAA0B,GAAG,aAAsB,CAAC;AAOjE,6EAA6E;AAC7E,sCAAsC;AACtC,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IAC7D,wBAAwB;IACxB,aAAa,wBAAwB,EAAE;CACxC,CAAC,CAAC;AAEH,2EAA2E;AAC3E,MAAM,UAAU,2BAA2B,CAAC,OAAgB;IAC1D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAQ,OAAmC,CAAC,MAAM,KAAK,0BAA0B,CAAC;AACpF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAY;IACpD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,SAAS,GAAG,GAA4C,CAAC;IAC/D,OAAO,CACL,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;QAClC,yBAAyB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;QAC7C,2BAA2B,CAAC,SAAS,CAAC,OAAO,CAAC,CAC/C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAyC;IAC9D,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC;AAC/F,CAAC;AAcD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAA8D,EAC9D,MAAoC;IAEpC,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,qBAAqB,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO;YAAE,SAAS;QAClG,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,EAAE,GAAG,kBAAkB,EAAE,GAAG,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,gEAAgE,KAAK,KAAK,KAAK,EAAE,OAAO,IAAI,SAAS,+BAA+B,CACrI,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA8D,EAC9D,KAAQ;IAER,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAChD,CAAC,CAAE,MAAM,CAAC,IAA2B;QACrC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAA8D,EAC9D,KAAwB;IAExB,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;AACzF,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CACjC,QAA8D;IAE9D,MAAM,MAAM,GAAgD,EAAE,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,qBAAqB,EAAE,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,MAAyB,CAAC;AACnC,CAAC","sourcesContent":["// The `_appConfig/app` singleton at rest, and the one rule each for writing it and reading it.\n//\n// WRITE. `mergeAppConfigUpdate(existing, update)`: the writer's update on top of the document it\n// read, any field that document lacks — and any lever it holds at a value its schema refuses —\n// taken from DEFAULT_APP_CONFIG, the whole result validated. A writer that runs first on a fresh\n// environment therefore still writes a complete, valid document rather than a partial one, and a\n// hand edit in the console that broke one lever never blocks a save of another: the merge resets it\n// and reports the repair with the value it replaced, which the writer records.\n//\n// READ. The stored document is untrusted — an operator can edit any field in the console into any\n// shape — and a config read must never take the product down by itself. `readAppConfigLever`\n// answers one lever at a time: the stored value when its schema field accepts it, otherwise the\n// lever's DEFAULT_APP_CONFIG value, so one bad field never costs the good ones. The server's cached\n// snapshot reader and the client's readers both read through it.\n\nimport { AppConfigSchema } from '../doc-schemas/system.js';\nimport type { AppConfig } from '../doc-schemas/system.js';\n\n/** Every operator lever of `_appConfig/app`, each at a value its schema field accepts. */\nexport type AppConfigLevers = Readonly<Required<AppConfig>>;\n\n/** The name of one operator lever. */\nexport type AppConfigLeverKey = keyof AppConfigLevers;\n\n/** Every lever name, derived from the document schema. */\nexport const APP_CONFIG_LEVER_KEYS = AppConfigSchema.keyof().options;\n\n/**\n * The document a fresh environment behaves as if it held, and the value each reader falls back to\n * for a missing or unreadable field: maintenance off, registration open, no banner.\n *\n * `appVersion` is `''` — no version has been published — so the version gate stays dormant until an\n * operator sets a real one through `updateAppConfig`, whose input refuses `''`.\n */\nexport const DEFAULT_APP_CONFIG: AppConfigLevers = Object.freeze({\n  appVersion: '',\n  maintenanceMode: false,\n  maintenanceMessage: '',\n  registrationEnabled: true,\n  announcementMessage: '',\n});\n\n/**\n * The line shown while maintenance is on and the operator left `maintenanceMessage` blank — on the\n * maintenance screen and in the callable refusal alike.\n */\nexport const DEFAULT_MAINTENANCE_MESSAGE =\n  'Q-Sports is down for maintenance right now. We will be back shortly — thank you for your patience.';\n\n/**\n * The code the callable maintenance refusal is thrown with. `unavailable` is also what a real outage\n * produces, so the code alone never identifies the refusal — its details do.\n */\nexport const MAINTENANCE_REFUSAL_CODE = 'unavailable' as const;\n\n/** The `details.reason` the callable maintenance refusal carries. */\nexport const MAINTENANCE_REFUSAL_REASON = 'maintenance' as const;\n\n/** Structured details carried by the callable maintenance refusal. */\nexport interface MaintenanceRefusalDetails {\n  readonly reason: typeof MAINTENANCE_REFUSAL_REASON;\n}\n\n// The refusal code as the server (`unavailable`) and the Firebase client SDK\n// (`functions/unavailable`) spell it.\nconst MAINTENANCE_REFUSAL_CODES: ReadonlySet<string> = new Set([\n  MAINTENANCE_REFUSAL_CODE,\n  `functions/${MAINTENANCE_REFUSAL_CODE}`,\n]);\n\n/** True when `details` is the maintenance refusal's structured details. */\nexport function isMaintenanceRefusalDetails(details: unknown): details is MaintenanceRefusalDetails {\n  if (!details || typeof details !== 'object') return false;\n  return (details as Record<string, unknown>).reason === MAINTENANCE_REFUSAL_REASON;\n}\n\n/**\n * True when `err` is the callable maintenance refusal — an `unavailable` error in either spelling\n * whose details carry `reason: 'maintenance'`. Works on the server-side error and on the client-side\n * callable error alike, and is decided by the code and the details, never the message, so a genuine\n * outage is never mistaken for the designed refusal.\n */\nexport function isMaintenanceRefusalError(err: unknown): boolean {\n  if (!err || typeof err !== 'object') return false;\n  const candidate = err as { code?: unknown; details?: unknown };\n  return (\n    typeof candidate.code === 'string' &&\n    MAINTENANCE_REFUSAL_CODES.has(candidate.code) &&\n    isMaintenanceRefusalDetails(candidate.details)\n  );\n}\n\nfunction definedFields(fields: Readonly<Record<string, unknown>>): Record<string, unknown> {\n  return Object.fromEntries(Object.entries(fields).filter(([, value]) => value !== undefined));\n}\n\n/** A stored lever its schema field refused, with the raw value the document held. */\nexport interface AppConfigLeverRepair {\n  readonly lever: AppConfigLeverKey;\n  readonly storedValue: unknown;\n}\n\n/** The document a writer writes, and every stored lever the merge had to repair to write it. */\nexport interface AppConfigMerge {\n  readonly next: AppConfig;\n  readonly repairs: readonly AppConfigLeverRepair[];\n}\n\n/**\n * The complete `_appConfig/app` document to write after applying `update` to `existing` (the\n * document as read in the writer's transaction; `null` or `undefined` when it does not exist). The\n * update's fields win, `existing` supplies the rest, and any field still missing comes from\n * DEFAULT_APP_CONFIG. An `undefined` update field changes nothing. Pure.\n *\n * A stored lever its schema refuses never blocks a save — a console typo must not disable the\n * maintenance switch. It is dropped, so the update's value replaces it when the update sends that\n * lever and its DEFAULT_APP_CONFIG value (what every reader already falls back to) otherwise, and it\n * is reported in `repairs`. A valid stored lever is carried as it is.\n *\n * Throws when the update itself would not parse, so an invalid document is never written.\n */\nexport function mergeAppConfigUpdate(\n  existing: Readonly<Record<string, unknown>> | null | undefined,\n  update: Readonly<Partial<AppConfig>>,\n): AppConfigMerge {\n  const stored = definedFields(existing ?? {});\n  const repairs: AppConfigLeverRepair[] = [];\n  for (const lever of APP_CONFIG_LEVER_KEYS) {\n    if (!(lever in stored) || AppConfigSchema.shape[lever].safeParse(stored[lever]).success) continue;\n    repairs.push({ lever, storedValue: stored[lever] });\n    delete stored[lever];\n  }\n  const parsed = AppConfigSchema.safeParse({ ...DEFAULT_APP_CONFIG, ...stored, ...definedFields(update) });\n  if (!parsed.success) {\n    const issue = parsed.error.issues[0];\n    const field = issue?.path.join('.') || 'document';\n    throw new Error(\n      `_appConfig/app would not match its schema after this update (${field}: ${issue?.message ?? 'invalid'}). Nothing should be written.`,\n    );\n  }\n  return { next: parsed.data, repairs };\n}\n\n/**\n * One operator lever off an unvalidated `_appConfig/app` snapshot (`null` or `undefined` when the\n * document is missing or not yet read): the stored value when its schema field accepts it, otherwise\n * the lever's DEFAULT_APP_CONFIG value — for an absent field and a refused one alike. Never throws.\n */\nexport function readAppConfigLever<L extends AppConfigLeverKey>(\n  snapshot: Readonly<Record<string, unknown>> | null | undefined,\n  lever: L,\n): AppConfigLevers[L] {\n  const parsed = AppConfigSchema.shape[lever].safeParse(snapshot?.[lever]);\n  return parsed.success && parsed.data !== undefined\n    ? (parsed.data as AppConfigLevers[L])\n    : DEFAULT_APP_CONFIG[lever];\n}\n\n/**\n * True when an unvalidated `_appConfig/app` snapshot holds `lever` with a value its schema field\n * refuses — the value every reader passes over for the default. An absent field is not refused.\n * Never throws.\n */\nexport function isAppConfigLeverRefused(\n  snapshot: Readonly<Record<string, unknown>> | null | undefined,\n  lever: AppConfigLeverKey,\n): boolean {\n  const stored = snapshot?.[lever];\n  return stored !== undefined && !AppConfigSchema.shape[lever].safeParse(stored).success;\n}\n\n/** Every lever off an unvalidated snapshot, each through `readAppConfigLever`. Never throws. */\nexport function readAppConfigLevers(\n  snapshot: Readonly<Record<string, unknown>> | null | undefined,\n): AppConfigLevers {\n  const levers: Partial<Record<AppConfigLeverKey, unknown>> = {};\n  for (const lever of APP_CONFIG_LEVER_KEYS) {\n    levers[lever] = readAppConfigLever(snapshot, lever);\n  }\n  return levers as AppConfigLevers;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ttt-productions/q-core",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Core types, Firestore path constants, zod schemas, and shared constants for Q-Sports",
   "repository": {
     "type": "git",
@@ -60,6 +60,10 @@
       "types": "./dist/media/index.d.ts",
       "default": "./dist/media/index.js"
     },
+    "./upload-variables": {
+      "types": "./dist/upload-variables/index.d.ts",
+      "default": "./dist/upload-variables/index.js"
+    },
     "./schemas": {
       "types": "./dist/schemas/index.d.ts",
       "default": "./dist/schemas/index.js"
@@ -87,7 +91,7 @@
   "dependencies": {
     "@ttt-productions/input-format-core": "^0.1.1",
     "@ttt-productions/media-schemas": "^0.14.10",
-    "@ttt-productions/notification-core": "^0.15.15",
+    "@ttt-productions/notification-core": "^0.15.16",
     "@ttt-productions/theme-core": "^0.12.11",
     "zod": "^4.4.3"
   },