@ttt-productions/ttt-core 0.18.0 → 0.19.1

package/dist/doc-schemas/ncii/allegations.d.ts

@@ -0,0 +1,84 @@
+import { z } from 'zod';
+/** Who alleged: an authenticated user or an anonymous member of the public. */
+export declare const NciiAllegationReporterTypeSchema: z.ZodEnum<{
+    authenticatedUser: "authenticatedUser";
+    anonymousPublic: "anonymousPublic";
+}>;
+export type NciiAllegationReporterType = z.infer<typeof NciiAllegationReporterTypeSchema>;
+/** Allegation lifecycle status — `received` until triaged into one of the
+ * terminal/linked states. An allegation NEVER becomes a statutory request. */
+export declare const NciiAllegationStatusSchema: z.ZodEnum<{
+    received: "received";
+    linked: "linked";
+    dismissed: "dismissed";
+    escalated: "escalated";
+}>;
+export type NciiAllegationStatus = z.infer<typeof NciiAllegationStatusSchema>;
+/** `nciiAllegations/{allegationId}` — any user may allege; does NOT by itself
+ * satisfy the statute or arm the 48h clock. Doc id `allegationId` is a
+ * deterministic/assigned id (z.string().min(1)). */
+export declare const NciiAllegationV1Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    allegationId: z.ZodString;
+    caseId: z.ZodOptional<z.ZodString>;
+    reporterType: z.ZodEnum<{
+        authenticatedUser: "authenticatedUser";
+        anonymousPublic: "anonymousPublic";
+    }>;
+    submittedAt: z.ZodNumber;
+    targetLocator: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"mediaAsset">;
+        mediaAssetId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"hallItem">;
+        hallItemId: z.ZodString;
+        subItemId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"squarePost">;
+        postId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"profileImage">;
+        profileUid: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"username">;
+        profileUid: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"craftSkill">;
+        profileUid: z.ZodString;
+        craftSkillId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"commissionListing">;
+        commissionListingId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"audition">;
+        auditionId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"auditionEntry">;
+        auditionId: z.ZodString;
+        auditionEntryId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"guildInviteMessage">;
+        channelId: z.ZodString;
+        messageId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"chatAttachment">;
+        channelId: z.ZodString;
+        messageId: z.ZodString;
+        attachmentId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"url">;
+        url: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"additionalText">;
+        textRef: z.ZodString;
+    }, z.core.$strict>], "kind">;
+    allegationReason: z.ZodString;
+    status: z.ZodEnum<{
+        received: "received";
+        linked: "linked";
+        dismissed: "dismissed";
+        escalated: "escalated";
+    }>;
+}, z.core.$strict>;
+export type NciiAllegationV1 = z.infer<typeof NciiAllegationV1Schema>;
+//# sourceMappingURL=allegations.d.ts.map

package/dist/doc-schemas/ncii/allegations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allegations.d.ts","sourceRoot":"","sources":["../../../src/doc-schemas/ncii/allegations.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,+EAA+E;AAC/E,eAAO,MAAM,gCAAgC;;;EAAmD,CAAC;AACjG,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F;8EAC8E;AAC9E,eAAO,MAAM,0BAA0B;;;;;EAA2D,CAAC;AACnG,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E;;oDAEoD;AACpD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAUxB,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/doc-schemas/ncii/allegations.js

@@ -0,0 +1,45 @@
+// Trust & Safety — NCII allegations (Appendix A §A11, concept (1)).
+//
+// `nciiAllegations/{allegationId}` — ANY user (authenticated or anonymous public)
+// may allege NCII. An allegation may justify platform-policy hiding but does NOT
+// by itself satisfy the statute or arm the 48h clock; it NEVER auto-becomes a
+// statutory `takeItDownRequest`. The discriminated locator is the ONE typed
+// locator (TargetLocatorV1) — never an all-optional contentRef.
+//
+// Every shape here is transcribed verbatim from docs/code_changes_needed/
+// trust-and-safety/IMPLEMENTATION_PLAN.md Appendix A §A11 (1) — no invented
+// values, no placeholders.
+//
+// SHARED enums + the locator come from ../safety/foundation.js (the single source
+// for every cross-cluster enum); they are NEVER redefined here. This cluster
+// IMPORTS TargetLocatorV1Schema.
+//
+// Collection note: this cluster introduces a NEW Firestore collection; wiring
+// collections.ts / path-builders.ts / registry.ts is deferred to the app leg (the
+// orchestrator binds the schema + path builders there); the doc-id shape is
+// documented on the schema below.
+import { z } from 'zod';
+import { TargetLocatorV1Schema } from '../safety/foundation.js';
+// ===========================================================================
+// §A11 (1) — nciiAllegations/{allegationId}
+// ===========================================================================
+/** Who alleged: an authenticated user or an anonymous member of the public. */
+export const NciiAllegationReporterTypeSchema = z.enum(['authenticatedUser', 'anonymousPublic']);
+/** Allegation lifecycle status — `received` until triaged into one of the
+ * terminal/linked states. An allegation NEVER becomes a statutory request. */
+export const NciiAllegationStatusSchema = z.enum(['received', 'linked', 'dismissed', 'escalated']);
+/** `nciiAllegations/{allegationId}` — any user may allege; does NOT by itself
+ * satisfy the statute or arm the 48h clock. Doc id `allegationId` is a
+ * deterministic/assigned id (z.string().min(1)). */
+export const NciiAllegationV1Schema = z.object({
+    schemaVersion: z.literal(1),
+    allegationId: z.string().min(1),
+    caseId: z.string().min(1).optional(),
+    reporterType: NciiAllegationReporterTypeSchema,
+    submittedAt: z.number(),
+    // the discriminated locator (the ONE typed locator) — never an all-optional contentRef
+    targetLocator: TargetLocatorV1Schema,
+    allegationReason: z.string(), // free-text reason; NEVER substitutes for a statutory request
+    status: NciiAllegationStatusSchema,
+}).strict();
+//# sourceMappingURL=allegations.js.map

package/dist/doc-schemas/ncii/allegations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allegations.js","sourceRoot":"","sources":["../../../src/doc-schemas/ncii/allegations.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,EAAE;AACF,kFAAkF;AAClF,iFAAiF;AACjF,8EAA8E;AAC9E,4EAA4E;AAC5E,gEAAgE;AAChE,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,2BAA2B;AAC3B,EAAE;AACF,kFAAkF;AAClF,6EAA6E;AAC7E,iCAAiC;AACjC,EAAE;AACF,8EAA8E;AAC9E,kFAAkF;AAClF,4EAA4E;AAC5E,kCAAkC;AAElC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,8EAA8E;AAC9E,4CAA4C;AAC5C,8EAA8E;AAE9E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAGjG;8EAC8E;AAC9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAGnG;;oDAEoD;AACpD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,YAAY,EAAE,gCAAgC;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,uFAAuF;IACvF,aAAa,EAAE,qBAAqB;IACpC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,8DAA8D;IAC5F,MAAM,EAAE,0BAA0B;CACnC,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/doc-schemas/ncii/appeals.d.ts

@@ -0,0 +1,121 @@
+import { z } from 'zod';
+/** The AUTHORITATIVE appeal state (`nciiCases.appealState` projects this). */
+export declare const NciiAppealStateSchema: z.ZodEnum<{
+    underReview: "underReview";
+    denied: "denied";
+    submitted: "submitted";
+    granted: "granted";
+    withdrawn: "withdrawn";
+}>;
+export type NciiAppealState = z.infer<typeof NciiAppealStateSchema>;
+/** Durable command/retry/dead-letter status for the reinstatement/denial effect. */
+export declare const NciiAppealCommandStatusSchema: z.ZodEnum<{
+    pending: "pending";
+    deadLetter: "deadLetter";
+    applied: "applied";
+    executing: "executing";
+}>;
+export type NciiAppealCommandStatus = z.infer<typeof NciiAppealCommandStatusSchema>;
+/** Durable command sub-record on the appeal — drives the reinstatement/denial
+ * effect with retry/dead-letter. */
+export declare const NciiAppealCommandV1Schema: z.ZodObject<{
+    commandId: z.ZodString;
+    status: z.ZodEnum<{
+        pending: "pending";
+        deadLetter: "deadLetter";
+        applied: "applied";
+        executing: "executing";
+    }>;
+    attemptCount: z.ZodNumber;
+    nextAttemptAt: z.ZodOptional<z.ZodNumber>;
+    leaseOwner: z.ZodOptional<z.ZodString>;
+    leaseExpiresAt: z.ZodOptional<z.ZodNumber>;
+    lastErrorCode: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type NciiAppealCommandV1 = z.infer<typeof NciiAppealCommandV1Schema>;
+/** `nciiAppeals/{appealId}` — durable, append-only uploader-removal appeal. Doc id
+ * `appealId` is deterministic:
+ * `sha256('ncii-appeal-v1:' + caseId + ':' + appellantUid + ':' + removalGeneration)`
+ * (a retried submit resolves to the same doc — idempotent). */
+export declare const NciiAppealV1Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    appealId: z.ZodString;
+    caseId: z.ZodString;
+    requestIds: z.ZodArray<z.ZodString>;
+    appealKind: z.ZodLiteral<"uploaderRemovalAppeal">;
+    removalGeneration: z.ZodNumber;
+    appellantUid: z.ZodString;
+    idempotencyKey: z.ZodString;
+    state: z.ZodEnum<{
+        underReview: "underReview";
+        denied: "denied";
+        submitted: "submitted";
+        granted: "granted";
+        withdrawn: "withdrawn";
+    }>;
+    deadlineAt: z.ZodOptional<z.ZodNumber>;
+    command: z.ZodObject<{
+        commandId: z.ZodString;
+        status: z.ZodEnum<{
+            pending: "pending";
+            deadLetter: "deadLetter";
+            applied: "applied";
+            executing: "executing";
+        }>;
+        attemptCount: z.ZodNumber;
+        nextAttemptAt: z.ZodOptional<z.ZodNumber>;
+        leaseOwner: z.ZodOptional<z.ZodString>;
+        leaseExpiresAt: z.ZodOptional<z.ZodNumber>;
+        lastErrorCode: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+    decidedAt: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export type NciiAppealV1 = z.infer<typeof NciiAppealV1Schema>;
+/** Who created the submission. */
+export declare const NciiAppealSubmissionAuthorSchema: z.ZodEnum<{
+    operator: "operator";
+    appellant: "appellant";
+}>;
+export type NciiAppealSubmissionAuthor = z.infer<typeof NciiAppealSubmissionAuthorSchema>;
+/** `nciiAppeals/{appealId}/submissions/{submissionId}` — IMMUTABLE append-only
+ * record of the appellant's reason + evidence. Doc id `submissionId` is a
+ * deterministic/assigned id (z.string().min(1)). */
+export declare const NciiAppealSubmissionV1Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    submissionId: z.ZodString;
+    sequence: z.ZodNumber;
+    receivedAt: z.ZodNumber;
+    appellantStatement: z.ZodString;
+    evidenceIds: z.ZodArray<z.ZodString>;
+    createdBy: z.ZodEnum<{
+        operator: "operator";
+        appellant: "appellant";
+    }>;
+}, z.core.$strict>;
+export type NciiAppealSubmissionV1 = z.infer<typeof NciiAppealSubmissionV1Schema>;
+/** Appeal decision result. */
+export declare const NciiAppealDecisionResultSchema: z.ZodEnum<{
+    denied: "denied";
+    granted: "granted";
+}>;
+export type NciiAppealDecisionResult = z.infer<typeof NciiAppealDecisionResultSchema>;
+/** `nciiAppeals/{appealId}/decisions/{decisionId}` — IMMUTABLE append-only
+ * decision. ONLY `nciiAppealReviewer` may write a decision (capability pinned by
+ * literal). Doc id `decisionId` is a deterministic/assigned id (z.string().min(1)). */
+export declare const NciiAppealDecisionV1Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    decisionId: z.ZodString;
+    result: z.ZodEnum<{
+        denied: "denied";
+        granted: "granted";
+    }>;
+    reviewerUid: z.ZodString;
+    capability: z.ZodLiteral<"nciiAppealReviewer">;
+    basisSubmissionIds: z.ZodArray<z.ZodString>;
+    rationaleRef: z.ZodString;
+    decidedAt: z.ZodNumber;
+}, z.core.$strict>;
+export type NciiAppealDecisionV1 = z.infer<typeof NciiAppealDecisionV1Schema>;
+//# sourceMappingURL=appeals.d.ts.map

package/dist/doc-schemas/ncii/appeals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appeals.d.ts","sourceRoot":"","sources":["../../../src/doc-schemas/ncii/appeals.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB;;;;;;EAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,oFAAoF;AACpF,eAAO,MAAM,6BAA6B;;;;;EAKxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;oCACoC;AACpC,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;kBAQ3B,CAAC;AACZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAM5E;;;+DAG+D;AAC/D,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAwBpB,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAO9D,kCAAkC;AAClC,eAAO,MAAM,gCAAgC;;;EAAoC,CAAC;AAClF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F;;oDAEoD;AACpD,eAAO,MAAM,4BAA4B;;;;;;;;;;;kBAQ9B,CAAC;AACZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AASlF,8BAA8B;AAC9B,eAAO,MAAM,8BAA8B;;;EAAgC,CAAC;AAC5E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;uFAEuF;AACvF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;kBAS5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/doc-schemas/ncii/appeals.js

@@ -0,0 +1,132 @@
+// Trust & Safety — durable uploader-removal appeal (Appendix A §A11 [H-09]).
+//
+// `nciiAppeals/{appealId}` — the `uploaderRemovalAppeal` is a first-class durable,
+// append-only record exactly like every other NCII workflow object. The mutable
+// `nciiCases.appealState` is a labeled NON-AUTHORITATIVE PROJECTION of this record,
+// NEVER the authority.
+//
+// This schema is the UPLOADER appeal ONLY (`appealKind:'uploaderRemovalAppeal'`).
+// The authenticated uploader whose content was removed appeals here; ONLY
+// `nciiAppealReviewer` may grant it (reinstate content / reverse an NCII hash
+// block), and a child-safety hold is NEVER reversible through it. A requester's
+// `requesterValidityCorrection` (status-token supplement) is NOT an appeal, carries
+// NO reinstatement power, and is NOT modeled by this schema.
+//
+// Deterministic `appealId = sha256('ncii-appeal-v1:' + caseId + ':' + appellantUid
+// + ':' + removalGeneration)` (a retried submit resolves to the same doc —
+// idempotent). The client-supplied ≥128-bit `idempotencyKey` together with the
+// deterministic appealId guarantees one record per retry.
+//
+// Every shape here is transcribed verbatim from docs/code_changes_needed/
+// trust-and-safety/IMPLEMENTATION_PLAN.md Appendix A §A11 [H-09] — no invented
+// values, no placeholders.
+//
+// Collection note: this cluster introduces a NEW Firestore collection (+ two
+// append-only child subcollections); wiring collections.ts / path-builders.ts /
+// registry.ts is deferred to the app leg (the orchestrator binds the schemas +
+// path builders there); the deterministic doc-id shape is documented on each
+// schema below. No shared enum is imported — the appeal kind/state/command/result
+// vocabularies are appeal-local literals (the cross-cluster NciiAppealKind enum
+// has two members; this schema pins the single literal it owns).
+import { z } from 'zod';
+// ===========================================================================
+// §A11 [H-09] — appeal state + command vocabularies
+// ===========================================================================
+/** The AUTHORITATIVE appeal state (`nciiCases.appealState` projects this). */
+export const NciiAppealStateSchema = z.enum([
+    'submitted',
+    'underReview',
+    'granted',
+    'denied',
+    'withdrawn',
+]);
+/** Durable command/retry/dead-letter status for the reinstatement/denial effect. */
+export const NciiAppealCommandStatusSchema = z.enum([
+    'pending',
+    'executing',
+    'applied',
+    'deadLetter',
+]);
+/** Durable command sub-record on the appeal — drives the reinstatement/denial
+ * effect with retry/dead-letter. */
+export const NciiAppealCommandV1Schema = z.object({
+    commandId: z.string().min(1),
+    status: NciiAppealCommandStatusSchema,
+    attemptCount: z.number(),
+    nextAttemptAt: z.number().optional(),
+    leaseOwner: z.string().min(1).optional(),
+    leaseExpiresAt: z.number().optional(),
+    lastErrorCode: z.string().optional(),
+}).strict();
+// ===========================================================================
+// §A11 [H-09] — nciiAppeals/{appealId}
+// ===========================================================================
+/** `nciiAppeals/{appealId}` — durable, append-only uploader-removal appeal. Doc id
+ * `appealId` is deterministic:
+ * `sha256('ncii-appeal-v1:' + caseId + ':' + appellantUid + ':' + removalGeneration)`
+ * (a retried submit resolves to the same doc — idempotent). */
+export const NciiAppealV1Schema = z.object({
+    schemaVersion: z.literal(1),
+    // = sha256('ncii-appeal-v1:' + caseId + ':' + appellantUid + ':' + removalGeneration)
+    appealId: z.string().min(1),
+    caseId: z.string().min(1),
+    // the request(s)/removal this appeal contests
+    requestIds: z.array(z.string().min(1)).max(16),
+    // this schema is the uploader appeal ONLY
+    appealKind: z.literal('uploaderRemovalAppeal'),
+    // ties the appeal to the specific NciiRemovalJobV1 generation that removed the content
+    removalGeneration: z.number(),
+    // the AUTHENTICATED uploader whose content was removed
+    appellantUid: z.string().min(1),
+    // client-supplied, ≥128-bit; together with the deterministic appealId guarantees one record per retry
+    idempotencyKey: z.string().min(1),
+    // the AUTHORITATIVE appeal state (appealState projects this)
+    state: NciiAppealStateSchema,
+    // per-appeal review SLA (NciiPolicyConfigV1.uploaderRemovalAppealWindowDays); UI-independent monitor may arm on it
+    deadlineAt: z.number().optional(),
+    // durable command/retry/dead-letter state for the reinstatement/denial effect
+    command: NciiAppealCommandV1Schema,
+    createdAt: z.number(),
+    updatedAt: z.number(),
+    decidedAt: z.number().optional(),
+}).strict();
+// ===========================================================================
+// §A11 [H-09] — nciiAppeals/{appealId}/submissions/{submissionId}
+// IMMUTABLE append-only — the appellant's reason + evidence.
+// ===========================================================================
+/** Who created the submission. */
+export const NciiAppealSubmissionAuthorSchema = z.enum(['appellant', 'operator']);
+/** `nciiAppeals/{appealId}/submissions/{submissionId}` — IMMUTABLE append-only
+ * record of the appellant's reason + evidence. Doc id `submissionId` is a
+ * deterministic/assigned id (z.string().min(1)). */
+export const NciiAppealSubmissionV1Schema = z.object({
+    schemaVersion: z.literal(1),
+    submissionId: z.string().min(1),
+    sequence: z.number(),
+    receivedAt: z.number(),
+    appellantStatement: z.string(),
+    evidenceIds: z.array(z.string().min(1)).max(16),
+    createdBy: NciiAppealSubmissionAuthorSchema,
+}).strict();
+// ===========================================================================
+// §A11 [H-09] — nciiAppeals/{appealId}/decisions/{decisionId}
+// IMMUTABLE append-only — ONLY `nciiAppealReviewer` may write a decision; a
+// `granted` decision drives the reinstatement command + a child-safety hold is
+// NEVER reversible through it.
+// ===========================================================================
+/** Appeal decision result. */
+export const NciiAppealDecisionResultSchema = z.enum(['granted', 'denied']);
+/** `nciiAppeals/{appealId}/decisions/{decisionId}` — IMMUTABLE append-only
+ * decision. ONLY `nciiAppealReviewer` may write a decision (capability pinned by
+ * literal). Doc id `decisionId` is a deterministic/assigned id (z.string().min(1)). */
+export const NciiAppealDecisionV1Schema = z.object({
+    schemaVersion: z.literal(1),
+    decisionId: z.string().min(1),
+    result: NciiAppealDecisionResultSchema,
+    reviewerUid: z.string().min(1),
+    capability: z.literal('nciiAppealReviewer'),
+    basisSubmissionIds: z.array(z.string().min(1)).max(16),
+    rationaleRef: z.string(),
+    decidedAt: z.number(),
+}).strict();
+//# sourceMappingURL=appeals.js.map

package/dist/doc-schemas/ncii/appeals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appeals.js","sourceRoot":"","sources":["../../../src/doc-schemas/ncii/appeals.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,mFAAmF;AACnF,gFAAgF;AAChF,oFAAoF;AACpF,uBAAuB;AACvB,EAAE;AACF,kFAAkF;AAClF,0EAA0E;AAC1E,8EAA8E;AAC9E,gFAAgF;AAChF,oFAAoF;AACpF,6DAA6D;AAC7D,EAAE;AACF,mFAAmF;AACnF,2EAA2E;AAC3E,+EAA+E;AAC/E,0DAA0D;AAC1D,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,2BAA2B;AAC3B,EAAE;AACF,6EAA6E;AAC7E,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,kFAAkF;AAClF,gFAAgF;AAChF,iEAAiE;AAEjE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8EAA8E;AAC9E,oDAAoD;AACpD,8EAA8E;AAE9E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC1C,WAAW;IACX,aAAa;IACb,SAAS;IACT,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AAGH,oFAAoF;AACpF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,IAAI,CAAC;IAClD,SAAS;IACT,WAAW;IACX,SAAS;IACT,YAAY;CACb,CAAC,CAAC;AAGH;oCACoC;AACpC,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,6BAA6B;IACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,8EAA8E;AAC9E,uCAAuC;AACvC,8EAA8E;AAE9E;;;+DAG+D;AAC/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,sFAAsF;IACtF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,8CAA8C;IAC9C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9C,0CAA0C;IAC1C,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC;IAC9C,uFAAuF;IACvF,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,uDAAuD;IACvD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,sGAAsG;IACtG,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,6DAA6D;IAC7D,KAAK,EAAE,qBAAqB;IAC5B,mHAAmH;IACnH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,8EAA8E;IAC9E,OAAO,EAAE,yBAAyB;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,8EAA8E;AAC9E,kEAAkE;AAClE,6DAA6D;AAC7D,8EAA8E;AAE9E,kCAAkC;AAClC,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAGlF;;oDAEoD;AACpD,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/C,SAAS,EAAE,gCAAgC;CAC5C,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,8EAA8E;AAC9E,8DAA8D;AAC9D,4EAA4E;AAC5E,+EAA+E;AAC/E,+BAA+B;AAC/B,8EAA8E;AAE9E,8BAA8B;AAC9B,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG5E;;uFAEuF;AACvF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,8BAA8B;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IAC3C,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACtD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/doc-schemas/ncii/cases.d.ts

@@ -0,0 +1,158 @@
+import { z } from 'zod';
+/** Case lane — adult NCII vs likeness/depiction. */
+export declare const NciiCaseLaneSchema: z.ZodEnum<{
+    ncii: "ncii";
+    likeness: "likeness";
+}>;
+export type NciiCaseLane = z.infer<typeof NciiCaseLaneSchema>;
+/** NON-AUTHORITATIVE projection of the durable NciiAppealV1 (the
+ * `uploaderRemovalAppeal` only) — derived from the appeal's latest decision; the
+ * appeal record, not this field, is the source of truth ([H-09]). Only
+ * `nciiAppealReviewer` may drive 'granted'/reinstate. */
+export declare const NciiCaseAppealStateSchema: z.ZodEnum<{
+    underReview: "underReview";
+    none: "none";
+    denied: "denied";
+    submitted: "submitted";
+    granted: "granted";
+}>;
+export type NciiCaseAppealState = z.infer<typeof NciiCaseAppealStateSchema>;
+/** `nciiCases/{caseId}` — the operational record; minimize-retention; child-link
+ * rows, never unbounded root arrays. Doc id `caseId` is a deterministic/assigned
+ * id (z.string().min(1)). NO case-level `fileDeleteAfter` [M3]: a single
+ * case-level timestamp could wrongly override a LATER-linked request, so each
+ * evidence row owns its own `deleteAfter` and each request owns its own
+ * PII/status/token schedule. */
+export declare const NciiCaseV1Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    caseId: z.ZodString;
+    revision: z.ZodNumber;
+    lane: z.ZodEnum<{
+        ncii: "ncii";
+        likeness: "likeness";
+    }>;
+    internalStatus: z.ZodEnum<{
+        open: "open";
+        rejected: "rejected";
+        removed: "removed";
+        removalInProgress: "removalInProgress";
+        appealPending: "appealPending";
+        reinstated: "reinstated";
+        closed: "closed";
+    }>;
+    childSafetyLinkStatus: z.ZodEnum<{
+        none: "none";
+        assessmentPending: "assessmentPending";
+        linked: "linked";
+        resolvedNoChildSafetyCase: "resolvedNoChildSafetyCase";
+    }>;
+    crossover: z.ZodObject<{
+        minorAssessment: z.ZodEnum<{
+            unknown: "unknown";
+            adult: "adult";
+            possibleMinor: "possibleMinor";
+            confirmedMinor: "confirmedMinor";
+        }>;
+        csamAssessment: z.ZodEnum<{
+            notAssessed: "notAssessed";
+            notApparent: "notApparent";
+            apparentViolation: "apparentViolation";
+            validatedHashMatch: "validatedHashMatch";
+        }>;
+        childSafetyCaseId: z.ZodOptional<z.ZodString>;
+        assessedByUid: z.ZodOptional<z.ZodString>;
+        assessedAt: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>;
+    childSafetyCaseId: z.ZodOptional<z.ZodString>;
+    appealState: z.ZodEnum<{
+        underReview: "underReview";
+        none: "none";
+        denied: "denied";
+        submitted: "submitted";
+        granted: "granted";
+    }>;
+    nciiRemovalDeadlineAt: z.ZodOptional<z.ZodNumber>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+}, z.core.$strict>;
+export type NciiCaseV1 = z.infer<typeof NciiCaseV1Schema>;
+/** `nciiCases/{caseId}/allegationLinks/{allegationId}` — links an allegation to
+ * the case. Doc id is the `allegationId`. */
+export declare const NciiCaseAllegationLinkV1Schema: z.ZodObject<{
+    allegationId: z.ZodString;
+    linkedAt: z.ZodNumber;
+    linkedByUid: z.ZodString;
+}, z.core.$strict>;
+export type NciiCaseAllegationLinkV1 = z.infer<typeof NciiCaseAllegationLinkV1Schema>;
+/** `nciiCases/{caseId}/requestLinks/{requestId}` — links a statutory request to
+ * the case. Doc id is the `requestId`. */
+export declare const NciiCaseRequestLinkV1Schema: z.ZodObject<{
+    requestId: z.ZodString;
+    linkedAt: z.ZodNumber;
+    linkedByUid: z.ZodString;
+}, z.core.$strict>;
+export type NciiCaseRequestLinkV1 = z.infer<typeof NciiCaseRequestLinkV1Schema>;
+/** Removal-action method on a `removalActions` row. */
+export declare const NciiCaseRemovalActionMethodSchema: z.ZodEnum<{
+    tombstone: "tombstone";
+    accountAction: "accountAction";
+    assetBlock: "assetBlock";
+}>;
+export type NciiCaseRemovalActionMethod = z.infer<typeof NciiCaseRemovalActionMethodSchema>;
+/** `nciiCases/{caseId}/removalActions/{actionId}` — append-only removal-action
+ * row. Doc id is the `actionId`. */
+export declare const NciiCaseRemovalActionV1Schema: z.ZodObject<{
+    at: z.ZodNumber;
+    actorId: z.ZodString;
+    surface: z.ZodString;
+    targetItemType: z.ZodString;
+    targetItemId: z.ZodString;
+    method: z.ZodEnum<{
+        tombstone: "tombstone";
+        accountAction: "accountAction";
+        assetBlock: "assetBlock";
+    }>;
+    result: z.ZodString;
+}, z.core.$strict>;
+export type NciiCaseRemovalActionV1 = z.infer<typeof NciiCaseRemovalActionV1Schema>;
+/** Provenance of a blocked exact hash. Transformed / non-identical content is
+ * NEVER auto-claimed identical. */
+export declare const NciiBlockedHashSourceSchema: z.ZodEnum<{
+    requestEvidence: "requestEvidence";
+    platformOriginal: "platformOriginal";
+    platformCopy: "platformCopy";
+    knownIdenticalCopy: "knownIdenticalCopy";
+}>;
+export type NciiBlockedHashSource = z.infer<typeof NciiBlockedHashSourceSchema>;
+/** Blocked-hash lifecycle. Reversal is restricted + audited; adult NCII hashes do
+ * NOT enter the CSAM hash system unless child-safety criteria independently
+ * apply. */
+export declare const NciiBlockedHashStatusSchema: z.ZodEnum<{
+    active: "active";
+    reversed: "reversed";
+}>;
+export type NciiBlockedHashStatus = z.infer<typeof NciiBlockedHashStatusSchema>;
+/** `nciiCases/{caseId}/blockedHashes/{hashId}` [F8] — exact-hash block. Doc id is
+ * the `hashId`. */
+export declare const NciiBlockedHashV1Schema: z.ZodObject<{
+    hashId: z.ZodString;
+    algorithm: z.ZodLiteral<"sha256">;
+    digest: z.ZodString;
+    source: z.ZodEnum<{
+        requestEvidence: "requestEvidence";
+        platformOriginal: "platformOriginal";
+        platformCopy: "platformCopy";
+        knownIdenticalCopy: "knownIdenticalCopy";
+    }>;
+    createdAt: z.ZodNumber;
+    createdByUid: z.ZodString;
+    status: z.ZodEnum<{
+        active: "active";
+        reversed: "reversed";
+    }>;
+    reversedAt: z.ZodOptional<z.ZodNumber>;
+    reversedByUid: z.ZodOptional<z.ZodString>;
+    reversalReason: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type NciiBlockedHashV1 = z.infer<typeof NciiBlockedHashV1Schema>;
+//# sourceMappingURL=cases.d.ts.map

package/dist/doc-schemas/ncii/cases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cases.d.ts","sourceRoot":"","sources":["../../../src/doc-schemas/ncii/cases.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,oDAAoD;AACpD,eAAO,MAAM,kBAAkB;;;EAA+B,CAAC;AAC/D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;yDAGyD;AACzD,eAAO,MAAM,yBAAyB;;;;;;EAMpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;gCAKgC;AAChC,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAoBlB,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAM1D;6CAC6C;AAC7C,eAAO,MAAM,8BAA8B;;;;kBAIhC,CAAC;AACZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;0CAC0C;AAC1C,eAAO,MAAM,2BAA2B;;;;kBAI7B,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,uDAAuD;AACvD,eAAO,MAAM,iCAAiC;;;;EAAuD,CAAC;AACtG,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F;oCACoC;AACpC,eAAO,MAAM,6BAA6B;;;;;;;;;;;;kBAQ/B,CAAC;AACZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAOpF;mCACmC;AACnC,eAAO,MAAM,2BAA2B;;;;;EAKtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;YAEY;AACZ,eAAO,MAAM,2BAA2B;;;EAAiC,CAAC;AAC1E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;mBACmB;AACnB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;kBAWzB,CAAC;AACZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}