@ttt-productions/ttt-core 0.78.2 → 0.78.4

package/dist/safety/ncii-intake-derivations.d.ts

@@ -0,0 +1,63 @@
+import { resourceKeyHash } from './resource-keys.js';
+import type { TakeItDownFieldCode, TakeItDownRequesterRole, TargetLocatorV1, TargetLocatorSummaryV1 } from '../doc-schemas/index.js';
+/**
+ * sha256-hex chokepoint. Aliased to `resourceKeyHash` (the single canonical hashing
+ * helper in `./resource-keys`) so the whole `./safety` surface has ONE sha256
+ * implementation, never two. Named `sha256Hex` here because these intake derivations
+ * hash arbitrary keyspace strings, not resource keys.
+ */
+export declare const sha256Hex: typeof resourceKeyHash;
+/** Deterministic `nciiTemporaryHolds/{holdId}` doc id for a request. ONE definition shared
+ *  by intake (which writes the row) and the removal saga (which reads its `target` locator as
+ *  the fallback when a public-form request has no case-linked allegation). */
+export declare function tempHoldId(requestId: string): string;
+/**
+ * Canonical, collision-resistant key for a request target. For a resolvable
+ * TTT-hosted locator the key is the locator discriminant + its identity fields;
+ * for an external/unresolvable locator (a bare URL or free text) it is the
+ * `url`/`additionalText` payload. The SAME logical target ALWAYS normalizes to the
+ * SAME key so two submissions about the same content with the same idempotencyKey
+ * resolve to ONE request doc, and two DIFFERENT targets never collide.
+ *
+ * No JSON — a flat unit-separator-joined string (the separator is illegal in any
+ * id/url field) is stable by construction (no key-ordering ambiguity).
+ */
+export declare function normalizedTargetKey(locator: TargetLocatorV1): string;
+/** Best-effort URL normalization for the external-locator key. A non-parseable
+ *  string is lowercased + trimmed (still deterministic). NEVER throws. */
+export declare function normalizeExternalUrl(raw: string): string;
+/**
+ * [H-07] The deterministic intake requestId:
+ *   sha256('takeItDownRequest:v1:' + idempotencyKey + ':' + normalizedTargetKey).
+ * A retry with the SAME client idempotencyKey + the SAME target re-derives the SAME
+ * id, so the create-if-absent transaction is a no-op and re-returns the same receipt
+ * (never double-arms a clock / double-commits a hold).
+ */
+export declare function deterministicRequestId(idempotencyKey: string, targetKey: string): string;
+/**
+ * The opaque public `requestReference` printed on the one-time receipt and stored on the
+ * public-status projection. Since the status token was removed, this is a deterministic
+ * derivation of the internal `requestId` — a separate sha256 so the raw `requestId` is
+ * never recoverable from the reference (which appears on the receipt / projection).
+ * 32 hex chars is ample entropy for an opaque, non-enumerable capability.
+ */
+export declare function deriveRequestReference(requestId: string): string;
+/**
+ * Deterministic hash of the cumulative request state as of a submission — recorded
+ * on `TakeItDownSubmissionV1.cumulativeRequestSnapshotHash`. Built from the SORTED
+ * supplied field codes + the normalized target key + the requester role so the same
+ * cumulative state always fingerprints identically (append-order independent).
+ */
+export declare function cumulativeSnapshotHash(args: {
+    requesterRole: TakeItDownRequesterRole;
+    targetKey: string;
+    suppliedFieldCodes: readonly TakeItDownFieldCode[];
+}): string;
+/** A short, non-sensitive surface label per locator kind (no ids, no narrative). */
+export declare function surfaceLabelFor(locator: TargetLocatorV1): string;
+/** Build the privacy-safe `TargetLocatorSummaryV1` (kind + surface label +
+ *  whether a TTT-hosted target was server-resolved). NEVER the narrative or ids. */
+export declare function targetLocatorSummary(locator: TargetLocatorV1, hasResolvedTarget: boolean): TargetLocatorSummaryV1;
+/** True when the locator points at a TTT-hosted surface (server-resolvable). */
+export declare function isTttHostedLocator(locator: TargetLocatorV1): boolean;
+//# sourceMappingURL=ncii-intake-derivations.d.ts.map

package/dist/safety/ncii-intake-derivations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ncii-intake-derivations.d.ts","sourceRoot":"","sources":["../../src/safety/ncii-intake-derivations.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACvB,eAAe,EACf,sBAAsB,EACvB,MAAM,yBAAyB,CAAC;AAEjC;;;;;GAKG;AACH,eAAO,MAAM,SAAS,wBAAkB,CAAC;AAczC;;8EAE8E;AAC9E,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,CA4CpE;AAED;0EAC0E;AAC1E,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAUxD;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAExF;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEhE;AAMD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,aAAa,EAAE,uBAAuB,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACpD,GAAG,MAAM,CAKT;AAMD,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,CAyChE;AAED;oFACoF;AACpF,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,eAAe,EACxB,iBAAiB,EAAE,OAAO,GACzB,sBAAsB,CAMxB;AAmBD,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAEpE"}

package/dist/safety/ncii-intake-derivations.js

@@ -0,0 +1,227 @@
+// Shared NCII / TAKE IT DOWN intake derivations (Trust & Safety IMPLEMENTATION_PLAN
+// Phase NCII-2/3/4, Appendix A §A11). Pure, deterministic id/key/summary derivations
+// used by BOTH the public Next.js intake route and the Cloud Functions deadline/scan
+// workers. These used to be hand-mirrored in two app TS projects (the Cloud Functions
+// graph AND the App Hosting route graph, which cannot cross-import). This is now the ONE
+// canonical declaration (Rule 36 / Cross-Boundary Type Invariant): both module graphs
+// import these derivations from ttt-core so the deterministic id/key contracts can never
+// drift between the two runtimes.
+//
+// These are LOAD-BEARING KEYSPACE CONTRACTS. A formula (or version-tag) change re-keys
+// EVERY existing intake request doc / receipt / snapshot — treat any such change as a
+// breaking migration of the intake keyspace, never a routine edit. The per-function
+// version-bump warnings below are not decorative.
+//
+// node:crypto sha256 keeps this pure + server-safe: this module lives behind the
+// `./safety` entry (never on the main barrel), so the frontend bundle never loads it.
+// The completeness predicate + intake-facts shape are NOT here — they are canonical on
+// `./doc-schemas` (beside `computeCompleteness`); import those from there.
+import { resourceKeyHash } from './resource-keys.js';
+/**
+ * sha256-hex chokepoint. Aliased to `resourceKeyHash` (the single canonical hashing
+ * helper in `./resource-keys`) so the whole `./safety` surface has ONE sha256
+ * implementation, never two. Named `sha256Hex` here because these intake derivations
+ * hash arbitrary keyspace strings, not resource keys.
+ */
+export const sha256Hex = resourceKeyHash;
+/** Unit separator — illegal in any id/url/field we join, so a flat separator-joined
+ *  string is stable by construction (no key-ordering ambiguity, no JSON). */
+const SEP = '\x1f';
+// ===========================================================================
+// Deterministic ids ([H-07] idempotent intake)
+// ===========================================================================
+/** Version tag for the deterministic intake requestId. A bump re-keys EVERY
+ *  request doc id — treat as a breaking migration of the intake keyspace. */
+const REQUEST_ID_VERSION = 'takeItDownRequest:v1';
+/** Deterministic `nciiTemporaryHolds/{holdId}` doc id for a request. ONE definition shared
+ *  by intake (which writes the row) and the removal saga (which reads its `target` locator as
+ *  the fallback when a public-form request has no case-linked allegation). */
+export function tempHoldId(requestId) {
+    return sha256Hex(`nciiTemporaryHold:v1:${requestId}`);
+}
+/**
+ * Canonical, collision-resistant key for a request target. For a resolvable
+ * TTT-hosted locator the key is the locator discriminant + its identity fields;
+ * for an external/unresolvable locator (a bare URL or free text) it is the
+ * `url`/`additionalText` payload. The SAME logical target ALWAYS normalizes to the
+ * SAME key so two submissions about the same content with the same idempotencyKey
+ * resolve to ONE request doc, and two DIFFERENT targets never collide.
+ *
+ * No JSON — a flat unit-separator-joined string (the separator is illegal in any
+ * id/url field) is stable by construction (no key-ordering ambiguity).
+ */
+export function normalizedTargetKey(locator) {
+    const k = locator.kind;
+    switch (locator.kind) {
+        case 'mediaAsset':
+            return [k, locator.mediaAssetId].join(SEP);
+        case 'hallItem':
+            return [k, locator.hallItemId, locator.subItemId ?? ''].join(SEP);
+        case 'squarePost':
+            return [k, locator.postId].join(SEP);
+        case 'profileImage':
+            return [k, locator.profileUid].join(SEP);
+        case 'username':
+            return [k, locator.profileUid].join(SEP);
+        case 'craftSkill':
+            return [k, locator.profileUid, locator.craftSkillId].join(SEP);
+        case 'commissionListing':
+            return [k, locator.commissionListingId].join(SEP);
+        case 'audition':
+            return [k, locator.auditionId].join(SEP);
+        case 'auditionEntry':
+            return [k, locator.auditionId, locator.auditionEntryId].join(SEP);
+        case 'guildInviteMessage':
+            return [k, locator.channelId, locator.messageId].join(SEP);
+        case 'chatAttachment':
+            return [k, locator.channelId, locator.messageId, locator.attachmentId].join(SEP);
+        case 'guildChatMessage':
+            return [k, locator.channelId, locator.messageId].join(SEP);
+        case 'adminWorkMessage':
+            return [k, locator.adminDispatchId, locator.messageId].join(SEP);
+        case 'commissionProposal':
+            return [k, locator.commissionListingId, locator.commissionProposalId].join(SEP);
+        case 'workProject':
+            return [k, locator.workProjectId].join(SEP);
+        case 'workAsset':
+            return [k, locator.workProjectId, locator.workAssetId].join(SEP);
+        case 'workRealm':
+            return [k, locator.workRealmId].join(SEP);
+        case 'url':
+            // Normalize the URL (trim + lowercase scheme/host) so trivially-different
+            // spellings of the same external link collapse to one request.
+            return [k, normalizeExternalUrl(locator.url)].join(SEP);
+        case 'additionalText':
+            return [k, locator.textRef].join(SEP);
+    }
+}
+/** Best-effort URL normalization for the external-locator key. A non-parseable
+ *  string is lowercased + trimmed (still deterministic). NEVER throws. */
+export function normalizeExternalUrl(raw) {
+    const trimmed = raw.trim();
+    try {
+        const u = new URL(trimmed);
+        u.protocol = u.protocol.toLowerCase();
+        u.hostname = u.hostname.toLowerCase();
+        return u.toString();
+    }
+    catch {
+        return trimmed.toLowerCase();
+    }
+}
+/**
+ * [H-07] The deterministic intake requestId:
+ *   sha256('takeItDownRequest:v1:' + idempotencyKey + ':' + normalizedTargetKey).
+ * A retry with the SAME client idempotencyKey + the SAME target re-derives the SAME
+ * id, so the create-if-absent transaction is a no-op and re-returns the same receipt
+ * (never double-arms a clock / double-commits a hold).
+ */
+export function deterministicRequestId(idempotencyKey, targetKey) {
+    return sha256Hex(`${REQUEST_ID_VERSION}:${idempotencyKey}:${targetKey}`);
+}
+/**
+ * The opaque public `requestReference` printed on the one-time receipt and stored on the
+ * public-status projection. Since the status token was removed, this is a deterministic
+ * derivation of the internal `requestId` — a separate sha256 so the raw `requestId` is
+ * never recoverable from the reference (which appears on the receipt / projection).
+ * 32 hex chars is ample entropy for an opaque, non-enumerable capability.
+ */
+export function deriveRequestReference(requestId) {
+    return sha256Hex(`takeItDownRequestRef:v1:${requestId}`).slice(0, 32);
+}
+// ===========================================================================
+// Cumulative submission snapshot hash (the immutable receipt fingerprint)
+// ===========================================================================
+/**
+ * Deterministic hash of the cumulative request state as of a submission — recorded
+ * on `TakeItDownSubmissionV1.cumulativeRequestSnapshotHash`. Built from the SORTED
+ * supplied field codes + the normalized target key + the requester role so the same
+ * cumulative state always fingerprints identically (append-order independent).
+ */
+export function cumulativeSnapshotHash(args) {
+    const sorted = [...args.suppliedFieldCodes].sort();
+    return sha256Hex(['takeItDownSnapshot:v1', args.requesterRole, args.targetKey, sorted.join(',')].join(SEP));
+}
+// ===========================================================================
+// Privacy-safe target summary (root + public projection — NO narrative / PII)
+// ===========================================================================
+/** A short, non-sensitive surface label per locator kind (no ids, no narrative). */
+export function surfaceLabelFor(locator) {
+    switch (locator.kind) {
+        case 'mediaAsset':
+            return 'Media item';
+        case 'hallItem':
+            return 'Hall library item';
+        case 'squarePost':
+            return 'Square Streetz post';
+        case 'profileImage':
+            return 'Profile image';
+        case 'username':
+            return 'Username';
+        case 'craftSkill':
+            return 'Craft skill';
+        case 'commissionListing':
+            return 'Commission listing';
+        case 'audition':
+            return 'Audition';
+        case 'auditionEntry':
+            return 'Audition entry';
+        case 'guildInviteMessage':
+            return 'Guild invite message';
+        case 'chatAttachment':
+            return 'Chat attachment';
+        case 'guildChatMessage':
+            return 'Guild chat message';
+        case 'adminWorkMessage':
+            return 'Work correspondence message';
+        case 'commissionProposal':
+            return 'Commission proposal';
+        case 'workProject':
+            return 'Work project';
+        case 'workAsset':
+            return 'Work file';
+        case 'workRealm':
+            return 'Work realm';
+        case 'url':
+            return 'External link';
+        case 'additionalText':
+            return 'Described content';
+    }
+}
+/** Build the privacy-safe `TargetLocatorSummaryV1` (kind + surface label +
+ *  whether a TTT-hosted target was server-resolved). NEVER the narrative or ids. */
+export function targetLocatorSummary(locator, hasResolvedTarget) {
+    return {
+        kind: locator.kind,
+        surfaceLabel: surfaceLabelFor(locator),
+        hasResolvedTarget,
+    };
+}
+/** TTT-hosted locator kinds the intake will synchronously server-resolve +
+ *  snapshot + temp-hold. `url` / `additionalText` are external/unresolvable: store
+ *  the locator + submission, invent NO target. */
+const TTT_HOSTED_KINDS = new Set([
+    'mediaAsset',
+    'hallItem',
+    'squarePost',
+    'profileImage',
+    'username',
+    'craftSkill',
+    'commissionListing',
+    'audition',
+    'auditionEntry',
+    'guildInviteMessage',
+    'chatAttachment',
+]);
+/** True when the locator points at a TTT-hosted surface (server-resolvable). */
+export function isTttHostedLocator(locator) {
+    return TTT_HOSTED_KINDS.has(locator.kind);
+}
+// The intake temp hold is placed on the canonical key(s) every destructive guard checks — the
+// content-doc key (`contentDocResourceKey(docPath, 'current')` in `./resource-keys`) + the
+// mediaAsset byte key when the target is media-backed. There is intentionally NO bespoke
+// `nciiTemporaryTarget` key builder here: that namespace was consulted by NO guard, so a hold
+// placed on it never blocked deletion ([H3] void). The route-side mirror's `contentDocCanonicalKey`
+// is likewise NOT ported — it duplicated `contentDocResourceKey(docPath, 'current')`, which is the
+// single key authority.
+//# sourceMappingURL=ncii-intake-derivations.js.map

package/dist/safety/ncii-intake-derivations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ncii-intake-derivations.js","sourceRoot":"","sources":["../../src/safety/ncii-intake-derivations.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,qFAAqF;AACrF,qFAAqF;AACrF,sFAAsF;AACtF,yFAAyF;AACzF,sFAAsF;AACtF,yFAAyF;AACzF,kCAAkC;AAClC,EAAE;AACF,uFAAuF;AACvF,sFAAsF;AACtF,oFAAoF;AACpF,kDAAkD;AAClD,EAAE;AACF,iFAAiF;AACjF,sFAAsF;AACtF,uFAAuF;AACvF,2EAA2E;AAE3E,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAQrD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,eAAe,CAAC;AAEzC;6EAC6E;AAC7E,MAAM,GAAG,GAAG,MAAM,CAAC;AAEnB,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAE9E;6EAC6E;AAC7E,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAElD;;8EAE8E;AAC9E,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC1C,OAAO,SAAS,CAAC,wBAAwB,SAAS,EAAE,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAwB;IAC1D,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IACvB,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,YAAY;YACf,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,KAAK,UAAU;YACb,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpE,KAAK,YAAY;YACf,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,KAAK,cAAc;YACjB,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,KAAK,UAAU;YACb,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,KAAK,YAAY;YACf,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjE,KAAK,mBAAmB;YACtB,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,KAAK,UAAU;YACb,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,KAAK,eAAe;YAClB,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpE,KAAK,oBAAoB;YACvB,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7D,KAAK,gBAAgB;YACnB,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnF,KAAK,kBAAkB;YACrB,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7D,KAAK,kBAAkB;YACrB,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnE,KAAK,oBAAoB;YACvB,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,mBAAmB,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClF,KAAK,aAAa;YAChB,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,KAAK,WAAW;YACd,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnE,KAAK,WAAW;YACd,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,KAAK,KAAK;YACR,0EAA0E;YAC1E,+DAA+D;YAC/D,OAAO,CAAC,CAAC,EAAE,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1D,KAAK,gBAAgB;YACnB,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;0EAC0E;AAC1E,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACtC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACtC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,cAAsB,EAAE,SAAiB;IAC9E,OAAO,SAAS,CAAC,GAAG,kBAAkB,IAAI,cAAc,IAAI,SAAS,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,OAAO,SAAS,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAItC;IACC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,OAAO,SAAS,CACd,CAAC,uBAAuB,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAC1F,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAE9E,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,OAAwB;IACtD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,YAAY;YACf,OAAO,YAAY,CAAC;QACtB,KAAK,UAAU;YACb,OAAO,mBAAmB,CAAC;QAC7B,KAAK,YAAY;YACf,OAAO,qBAAqB,CAAC;QAC/B,KAAK,cAAc;YACjB,OAAO,eAAe,CAAC;QACzB,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,YAAY;YACf,OAAO,aAAa,CAAC;QACvB,KAAK,mBAAmB;YACtB,OAAO,oBAAoB,CAAC;QAC9B,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO,gBAAgB,CAAC;QAC1B,KAAK,oBAAoB;YACvB,OAAO,sBAAsB,CAAC;QAChC,KAAK,gBAAgB;YACnB,OAAO,iBAAiB,CAAC;QAC3B,KAAK,kBAAkB;YACrB,OAAO,oBAAoB,CAAC;QAC9B,KAAK,kBAAkB;YACrB,OAAO,6BAA6B,CAAC;QACvC,KAAK,oBAAoB;YACvB,OAAO,qBAAqB,CAAC;QAC/B,KAAK,aAAa;YAChB,OAAO,cAAc,CAAC;QACxB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,WAAW;YACd,OAAO,YAAY,CAAC;QACtB,KAAK,KAAK;YACR,OAAO,eAAe,CAAC;QACzB,KAAK,gBAAgB;YACnB,OAAO,mBAAmB,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;oFACoF;AACpF,MAAM,UAAU,oBAAoB,CAClC,OAAwB,EACxB,iBAA0B;IAE1B,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC;QACtC,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED;;kDAEkD;AAClD,MAAM,gBAAgB,GAAyC,IAAI,GAAG,CAAC;IACrE,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,cAAc;IACd,UAAU;IACV,YAAY;IACZ,mBAAmB;IACnB,UAAU;IACV,eAAe;IACf,oBAAoB;IACpB,gBAAgB;CACjB,CAAC,CAAC;AAEH,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,OAAwB;IACzD,OAAO,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,8FAA8F;AAC9F,2FAA2F;AAC3F,yFAAyF;AACzF,8FAA8F;AAC9F,oGAAoG;AACpG,mGAAmG;AACnG,wBAAwB"}

package/dist/safety/resource-keys.d.ts

@@ -0,0 +1,60 @@
+import type { MediaAsset, SafetyHoldResourceType } from '../doc-schemas/index.js';
+/** A canonical resource key paired with its sha256 hash (the Firestore doc id). */
+export interface ResourceKey {
+    /** The hold `resourceType` this key belongs to (Appendix A3 enum). */
+    readonly resourceType: SafetyHoldResourceType;
+    /** A natural identifier for the resource, stored on the ref as `resourceId`
+     *  (human-debuggable; NOT used for hashing — the canonical key is). */
+    readonly resourceId: string;
+    /** The deterministic canonical key string (Appendix A3). */
+    readonly canonicalResourceKey: string;
+    /** `sha256(canonicalResourceKey)` hex — the `safetyHoldResources` doc id. */
+    readonly resourceKeyHash: string;
+}
+/** sha256-hex of a canonical key string. The single hashing chokepoint. */
+export declare function resourceKeyHash(canonicalResourceKey: string): string;
+/**
+ * Firestore content document target = document path + immutable revision.
+ * `docPath` must be the canonical full path (e.g. via `toPath(PATH_BUILDERS.x(...))`),
+ * NOT a client-supplied path. `revision` pins a mutable doc to a specific version so a
+ * post-hold edit cannot slip the bytes out from under the hold; pass the revision/
+ * version the report froze.
+ */
+export declare function contentDocResourceKey(docPath: string, revision: string | number): ResourceKey;
+/**
+ * Storage object target = bucket + key + generation. `generation` pins the exact
+ * object version (a re-upload to the same key gets a new generation and is a different
+ * physical resource). Pass the generation captured when the hold was placed.
+ */
+export declare function storageObjectResourceKey(bucket: string, key: string, generation: string | number): ResourceKey;
+/**
+ * Media target. Returns keys for BOTH:
+ *   1. the specific `mediaAssetId` (this exact asset/copy), AND
+ *   2. its `originLineage.rootIngestId` — when present — as a SEPARATE `mediaAsset`
+ *      key so a hold can block the ENTIRE incident lineage (every copy/variant that
+ *      inherited the same root ingest), per Appendix A0/A3 incident-wide blocking.
+ *
+ * The caller decides which key(s) to place a hold on: a single-asset takedown holds
+ * key[0]; an incident-wide block over a CSAM/NCII lineage holds the rootIngest key so
+ * every existing AND future copy of the same root is denied. Both keys are `mediaAsset`
+ * resourceType (rootIngest is a media identity, not a distinct type — A3 has no
+ * separate `rootIngest` type; it is modeled as a mediaAsset key over the root id).
+ *
+ * Order is stable: index 0 = the asset itself; index 1 (if any) = the rootIngest.
+ */
+export declare function mediaAssetResourceKeys(asset: Pick<MediaAsset, 'mediaAssetId' | 'originLineage'>): ResourceKey[];
+/** The mediaAsset key for a bare rootIngestId (no asset doc in hand) — same canonical
+ *  shape as `mediaAssetResourceKeys(...)`'s index-1 entry, so it hashes identically. */
+export declare function rootIngestResourceKey(rootIngestId: string): ResourceKey;
+/**
+ * Chat message-range target = channelId + a sequence/epoch boundary identifying the
+ * span of messages held. `messageSeqOrEpoch` is the caller's range identifier (e.g. a
+ * sequence number or epoch marker); the SAME range over the same channel must always
+ * be passed in the same canonical form by the caller.
+ */
+export declare function chatMessageRangeResourceKey(channelId: string, messageSeqOrEpoch: string | number): ResourceKey;
+/** Channel target = channelId. */
+export declare function channelResourceKey(channelId: string): ResourceKey;
+/** Account target = uid. */
+export declare function accountResourceKey(uid: string): ResourceKey;
+//# sourceMappingURL=resource-keys.d.ts.map

package/dist/safety/resource-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-keys.d.ts","sourceRoot":"","sources":["../../src/safety/resource-keys.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AASlF,mFAAmF;AACnF,MAAM,WAAW,WAAW;IAC1B,sEAAsE;IACtE,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C;2EACuE;IACvE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,6EAA6E;IAC7E,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,2EAA2E;AAC3E,wBAAgB,eAAe,CAAC,oBAAoB,EAAE,MAAM,GAAG,MAAM,CAEpE;AAiBD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,CAE7F;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,GAAG,MAAM,GAC1B,WAAW,CAEb;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,GAAG,eAAe,CAAC,GAAG,WAAW,EAAE,CAS/G;AAED;wFACwF;AACxF,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,WAAW,CAEvE;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,GAAG,MAAM,GACjC,WAAW,CAOb;AAED,kCAAkC;AAClC,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,CAEjE;AAED,4BAA4B;AAC5B,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAE3D"}

package/dist/safety/resource-keys.js

@@ -0,0 +1,122 @@
+// Canonical safety-hold resource keys (Trust & Safety IMPLEMENTATION_PLAN Appendix A3).
+//
+// A safety hold is keyed by the PHYSICAL resource it protects, not by the case or
+// the request that created it. The `canonicalResourceKey` is a deterministic string
+// built from exactly the identity fields that pin a physical resource:
+//
+//   - a Firestore content target  = document path + immutable revision/generation
+//   - a storage object            = bucket + key + generation
+//   - a media target              = mediaAsset identity (and, incident-wide, its
+//                                   MediaOriginLineageV1.rootIngestId)
+//   - a chat message range        = channelId + sequence/epoch boundary
+//   - a channel                   = channelId
+//   - an account                  = uid
+//
+// `resourceKeyHash = sha256(canonicalResourceKey)` is the Firestore doc id for both
+// `safetyHoldResources/{resourceKeyHash}` (the O(1) per-flag counter aggregate) and
+// the `{caseId}__{resourceKeyHash}` ref. THE SAME PHYSICAL RESOURCE MUST ALWAYS HASH
+// IDENTICALLY — that is the whole correctness story: every hold over the same bytes
+// joins the same aggregate, and every destructive guard consults the same doc.
+//
+// This is the ONE canonical declaration (Rule 36). Both TTT app TS projects (the Cloud
+// Functions graph AND the App Hosting route graph) import these builders from ttt-core
+// rather than hand-mirroring the format — a re-key would otherwise drift the two runtimes
+// apart. node:crypto sha256 keeps it pure + server-safe (this module lives behind the
+// `./safety` entry, never on the main barrel, so the frontend bundle never loads it).
+//
+// Determinism rules (do not change without a key-version bump):
+//   - Format is `v1` + a type tag + the identity fields, joined by the unit-separator
+//     control char (\x1f), which cannot appear in a Firestore path, bucket name, key,
+//     uid, or channel id. No JSON (key ordering / whitespace is not load-bearing here;
+//     a flat separator-joined string is stable by construction).
+//   - The type tag prevents cross-type collisions (a contentDoc whose path happens to
+//     equal a storage key never shares a hash with that storage object).
+//   - A bump to the format string ('v1') is a hold-key migration and is NOT backward
+//     compatible — every existing ref/aggregate would re-key. Treat it as a breaking
+//     change to the entire hold authority.
+import { createHash } from 'node:crypto';
+/** Format/version tag for every canonical key. Bumping this re-keys ALL holds. */
+const KEY_FORMAT = 'safetyHoldKey/v1';
+/** Unit separator — illegal in every identity field we join, so it is an unambiguous
+ *  field delimiter that never appears inside a path, key, uid, or channel id. */
+const SEP = '\x1f';
+/** sha256-hex of a canonical key string. The single hashing chokepoint. */
+export function resourceKeyHash(canonicalResourceKey) {
+    return createHash('sha256').update(canonicalResourceKey, 'utf8').digest('hex');
+}
+/** Build a {canonicalResourceKey, resourceKeyHash} from a type tag + identity parts. */
+function buildKey(resourceType, resourceId, ...parts) {
+    const canonicalResourceKey = [KEY_FORMAT, resourceType, ...parts].join(SEP);
+    return {
+        resourceType,
+        resourceId,
+        canonicalResourceKey,
+        resourceKeyHash: resourceKeyHash(canonicalResourceKey),
+    };
+}
+/**
+ * Firestore content document target = document path + immutable revision.
+ * `docPath` must be the canonical full path (e.g. via `toPath(PATH_BUILDERS.x(...))`),
+ * NOT a client-supplied path. `revision` pins a mutable doc to a specific version so a
+ * post-hold edit cannot slip the bytes out from under the hold; pass the revision/
+ * version the report froze.
+ */
+export function contentDocResourceKey(docPath, revision) {
+    return buildKey('contentDoc', docPath, docPath, String(revision));
+}
+/**
+ * Storage object target = bucket + key + generation. `generation` pins the exact
+ * object version (a re-upload to the same key gets a new generation and is a different
+ * physical resource). Pass the generation captured when the hold was placed.
+ */
+export function storageObjectResourceKey(bucket, key, generation) {
+    return buildKey('storageObject', `${bucket}/${key}`, bucket, key, String(generation));
+}
+/**
+ * Media target. Returns keys for BOTH:
+ *   1. the specific `mediaAssetId` (this exact asset/copy), AND
+ *   2. its `originLineage.rootIngestId` — when present — as a SEPARATE `mediaAsset`
+ *      key so a hold can block the ENTIRE incident lineage (every copy/variant that
+ *      inherited the same root ingest), per Appendix A0/A3 incident-wide blocking.
+ *
+ * The caller decides which key(s) to place a hold on: a single-asset takedown holds
+ * key[0]; an incident-wide block over a CSAM/NCII lineage holds the rootIngest key so
+ * every existing AND future copy of the same root is denied. Both keys are `mediaAsset`
+ * resourceType (rootIngest is a media identity, not a distinct type — A3 has no
+ * separate `rootIngest` type; it is modeled as a mediaAsset key over the root id).
+ *
+ * Order is stable: index 0 = the asset itself; index 1 (if any) = the rootIngest.
+ */
+export function mediaAssetResourceKeys(asset) {
+    const keys = [
+        buildKey('mediaAsset', asset.mediaAssetId, 'asset', asset.mediaAssetId),
+    ];
+    const rootIngestId = asset.originLineage?.rootIngestId;
+    if (rootIngestId) {
+        keys.push(buildKey('mediaAsset', rootIngestId, 'rootIngest', rootIngestId));
+    }
+    return keys;
+}
+/** The mediaAsset key for a bare rootIngestId (no asset doc in hand) — same canonical
+ *  shape as `mediaAssetResourceKeys(...)`'s index-1 entry, so it hashes identically. */
+export function rootIngestResourceKey(rootIngestId) {
+    return buildKey('mediaAsset', rootIngestId, 'rootIngest', rootIngestId);
+}
+/**
+ * Chat message-range target = channelId + a sequence/epoch boundary identifying the
+ * span of messages held. `messageSeqOrEpoch` is the caller's range identifier (e.g. a
+ * sequence number or epoch marker); the SAME range over the same channel must always
+ * be passed in the same canonical form by the caller.
+ */
+export function chatMessageRangeResourceKey(channelId, messageSeqOrEpoch) {
+    return buildKey('chatMessageRange', `${channelId}#${messageSeqOrEpoch}`, channelId, String(messageSeqOrEpoch));
+}
+/** Channel target = channelId. */
+export function channelResourceKey(channelId) {
+    return buildKey('channel', channelId, channelId);
+}
+/** Account target = uid. */
+export function accountResourceKey(uid) {
+    return buildKey('account', uid, uid);
+}
+//# sourceMappingURL=resource-keys.js.map

package/dist/safety/resource-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-keys.js","sourceRoot":"","sources":["../../src/safety/resource-keys.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,EAAE;AACF,kFAAkF;AAClF,oFAAoF;AACpF,uEAAuE;AACvE,EAAE;AACF,kFAAkF;AAClF,8DAA8D;AAC9D,iFAAiF;AACjF,uEAAuE;AACvE,wEAAwE;AACxE,8CAA8C;AAC9C,wCAAwC;AACxC,EAAE;AACF,oFAAoF;AACpF,oFAAoF;AACpF,qFAAqF;AACrF,oFAAoF;AACpF,+EAA+E;AAC/E,EAAE;AACF,uFAAuF;AACvF,uFAAuF;AACvF,0FAA0F;AAC1F,sFAAsF;AACtF,sFAAsF;AACtF,EAAE;AACF,gEAAgE;AAChE,sFAAsF;AACtF,sFAAsF;AACtF,uFAAuF;AACvF,iEAAiE;AACjE,sFAAsF;AACtF,yEAAyE;AACzE,qFAAqF;AACrF,qFAAqF;AACrF,2CAA2C;AAE3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,kFAAkF;AAClF,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC;iFACiF;AACjF,MAAM,GAAG,GAAG,MAAM,CAAC;AAenB,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAAC,oBAA4B;IAC1D,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjF,CAAC;AAED,wFAAwF;AACxF,SAAS,QAAQ,CACf,YAAoC,EACpC,UAAkB,EAClB,GAAG,KAAe;IAElB,MAAM,oBAAoB,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,OAAO;QACL,YAAY;QACZ,UAAU;QACV,oBAAoB;QACpB,eAAe,EAAE,eAAe,CAAC,oBAAoB,CAAC;KACvD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,QAAyB;IAC9E,OAAO,QAAQ,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAc,EACd,GAAW,EACX,UAA2B;IAE3B,OAAO,QAAQ,CAAC,eAAe,EAAE,GAAG,MAAM,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAyD;IAC9F,MAAM,IAAI,GAAkB;QAC1B,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC;KACxE,CAAC;IACF,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,EAAE,YAAY,CAAC;IACvD,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;wFACwF;AACxF,MAAM,UAAU,qBAAqB,CAAC,YAAoB;IACxD,OAAO,QAAQ,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,SAAiB,EACjB,iBAAkC;IAElC,OAAO,QAAQ,CACb,kBAAkB,EAClB,GAAG,SAAS,IAAI,iBAAiB,EAAE,EACnC,SAAS,EACT,MAAM,CAAC,iBAAiB,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,OAAO,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,OAAO,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AACvC,CAAC"}

package/dist/schemas/admin-dispatch-actions.d.ts

@@ -22,4 +22,8 @@ export declare const UpdateGuildInviteStakeSharesInputSchema: z.ZodObject<{
     newStakeShares: z.ZodNumber;
 }, z.core.$strict>;
 export type UpdateGuildInviteStakeSharesInput = z.infer<typeof UpdateGuildInviteStakeSharesInputSchema>;
+export declare const DeleteAdminDispatchInputSchema: z.ZodObject<{
+    adminDispatchId: z.ZodString;
+}, z.core.$strip>;
+export type DeleteAdminDispatchInput = z.infer<typeof DeleteAdminDispatchInputSchema>;
 //# sourceMappingURL=admin-dispatch-actions.d.ts.map

package/dist/schemas/admin-dispatch-actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin-dispatch-actions.d.ts","sourceRoot":"","sources":["../../src/schemas/admin-dispatch-actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,oCAAoC;;;;;;kBAGtC,CAAC;AACZ,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAElG,eAAO,MAAM,mCAAmC;;;;;;;;kBAGrC,CAAC;AACZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,uCAAuC;;;kBAGzC,CAAC;AACZ,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC"}
+{"version":3,"file":"admin-dispatch-actions.d.ts","sourceRoot":"","sources":["../../src/schemas/admin-dispatch-actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,oCAAoC;;;;;;kBAGtC,CAAC;AACZ,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAElG,eAAO,MAAM,mCAAmC;;;;;;;;kBAGrC,CAAC;AACZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,uCAAuC;;;kBAGzC,CAAC;AACZ,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AAIxG,eAAO,MAAM,8BAA8B;;iBAEzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC"}

package/dist/schemas/admin-dispatch-actions.js

@@ -14,4 +14,9 @@ export const UpdateGuildInviteStakeSharesInputSchema = z.object({
     guildInviteId: guildInviteIdSchema,
     newStakeShares: z.number().int().min(1),
 }).strict();
+// Admin/jr-admin deletes a user's support dispatch thread (`deleteAdminDispatch`). Non-strict
+// posture is carried faithfully from the source callable.
+export const DeleteAdminDispatchInputSchema = z.object({
+    adminDispatchId: adminDispatchIdSchema,
+});
 //# sourceMappingURL=admin-dispatch-actions.js.map

package/dist/schemas/admin-dispatch-actions.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin-dispatch-actions.js","sourceRoot":"","sources":["../../src/schemas/admin-dispatch-actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAExE,0FAA0F;AAC1F,6FAA6F;AAC7F,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,eAAe,EAAE,qBAAqB;IACtC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;CAC5D,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,aAAa,EAAE,mBAAmB;IAClC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;CAC1D,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,aAAa,EAAE,mBAAmB;IAClC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxC,CAAC,CAAC,MAAM,EAAE,CAAC"}
+{"version":3,"file":"admin-dispatch-actions.js","sourceRoot":"","sources":["../../src/schemas/admin-dispatch-actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAExE,0FAA0F;AAC1F,6FAA6F;AAC7F,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,eAAe,EAAE,qBAAqB;IACtC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;CAC5D,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,aAAa,EAAE,mBAAmB;IAClC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;CAC1D,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,aAAa,EAAE,mBAAmB;IAClC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxC,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,8FAA8F;AAC9F,0DAA0D;AAC1D,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,eAAe,EAAE,qBAAqB;CACvC,CAAC,CAAC"}

package/dist/schemas/admin.d.ts

@@ -179,6 +179,83 @@ export declare const RequireRetitleInputSchema: z.ZodObject<{
     reason: z.ZodString;
 }, z.core.$strict>;
 export type RequireRetitleInput = z.infer<typeof RequireRetitleInputSchema>;
+declare const ModerationShellClearFieldSchema: z.ZodEnum<{
+    workingTitle: "workingTitle";
+    workingDescription: "workingDescription";
+}>;
+export type ModerationShellClearField = z.infer<typeof ModerationShellClearFieldSchema>;
+export declare const ClearWorkProjectTextInputSchema: z.ZodObject<{
+    workProjectId: z.ZodString;
+    fields: z.ZodArray<z.ZodEnum<{
+        workingTitle: "workingTitle";
+        workingDescription: "workingDescription";
+    }>>;
+    reason: z.ZodString;
+}, z.core.$strict>;
+export type ClearWorkProjectTextInput = z.infer<typeof ClearWorkProjectTextInputSchema>;
+export declare const ClearWorkRealmTextInputSchema: z.ZodObject<{
+    workRealmId: z.ZodString;
+    fields: z.ZodArray<z.ZodEnum<{
+        workingTitle: "workingTitle";
+        workingDescription: "workingDescription";
+    }>>;
+    reason: z.ZodString;
+}, z.core.$strict>;
+export type ClearWorkRealmTextInput = z.infer<typeof ClearWorkRealmTextInputSchema>;
+declare const HallClearFieldSchema: z.ZodEnum<{
+    title: "title";
+    description: "description";
+    content: "content";
+}>;
+export type HallClearField = z.infer<typeof HallClearFieldSchema>;
+export declare const ClearHallContentTextInputSchema: z.ZodObject<{
+    hallItemId: z.ZodString;
+    workProjectType: z.ZodEnum<{
+        Tales: "Tales";
+        Tunes: "Tunes";
+        Television: "Television";
+    }>;
+    subItemId: z.ZodOptional<z.ZodString>;
+    fields: z.ZodArray<z.ZodEnum<{
+        title: "title";
+        description: "description";
+        content: "content";
+    }>>;
+    reason: z.ZodString;
+}, z.core.$strict>;
+export type ClearHallContentTextInput = z.infer<typeof ClearHallContentTextInputSchema>;
+export declare const GetLatestHideCascadeInputSchema: z.ZodObject<{
+    entityId: z.ZodString;
+    targetType: z.ZodEnum<{
+        "work-project": "work-project";
+        "work-realm": "work-realm";
+    }>;
+}, z.core.$strict>;
+export type GetLatestHideCascadeInput = z.infer<typeof GetLatestHideCascadeInputSchema>;
+export declare const ModerateReportedContentInputSchema: z.ZodObject<{
+    reportGroupId: z.ZodString;
+    targetType: z.ZodEnum<{
+        "craft-skill": "craft-skill";
+        "commission-listing": "commission-listing";
+        "commission-proposal": "commission-proposal";
+        "square-streetz-post": "square-streetz-post";
+        "profile-picture": "profile-picture";
+        "admin-work-message": "admin-work-message";
+        "hall-library-item": "hall-library-item";
+        audition: "audition";
+        "audition-entry": "audition-entry";
+        "work-asset": "work-asset";
+    }>;
+    reportedItemId: z.ZodString;
+    parentItemId: z.ZodOptional<z.ZodString>;
+    action: z.ZodEnum<{
+        remove: "remove";
+        hide: "hide";
+        restore: "restore";
+    }>;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type ModerateReportedContentInput = z.infer<typeof ModerateReportedContentInputSchema>;
 export declare const StagedActionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     button: z.ZodEnum<{
         hideContent: "hideContent";
@@ -489,4 +566,5 @@ export declare const GetDeadLettersInputSchema: z.ZodOptional<z.ZodNullable<z.Zo
     limit: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>>>;
 export type GetDeadLettersInput = z.infer<typeof GetDeadLettersInputSchema>;
+export {};
 //# sourceMappingURL=admin.d.ts.map