@ttt-productions/ttt-core 0.79.11 → 0.79.13

package/dist/schemas/commissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"commissions.js","sourceRoot":"","sources":["../../src/schemas/commissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,0BAA0B,CAAC;AAE7E,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,IAAI,CAAC;IACnD,MAAM;IACN,SAAS;IACT,UAAU;IACV,UAAU;CACX,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,mBAAmB,EAAE,yBAAyB;CAC/C,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,mBAAmB,EAAE,yBAAyB;CAC/C,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,mBAAmB,EAAE,yBAAyB;IAC9C,oBAAoB,EAAE,0BAA0B;CACjD,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,mBAAmB,EAAE,yBAAyB;IAC9C,oBAAoB,EAAE,0BAA0B;IAChD,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;CACnB,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,mBAAmB,EAAE,yBAAyB;IAC9C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC;CAC1E,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,uFAAuF;AACvF,sFAAsF;AACtF,8EAA8E;AAC9E,uFAAuF;AACvF,6EAA6E;AAC7E,wFAAwF;AACxF,oFAAoF;AACpF,+EAA+E;AAC/E,kDAAkD;AAClD,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxB,mBAAmB,EAAE,yBAAyB;IAC9C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,+EAA+E;IAC/E,oBAAoB,EAAE,0BAA0B;CACjD,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport { commissionListingIdSchema, commissionProposalIdSchema } from './atoms.js';\nimport { MAX_COMMISSION_DESCRIPTION_LENGTH } from '../constants/business.js';\n\nexport const CommissionProposalStatusSchema = z.enum([\n  'open',\n  'invited',\n  'accepted',\n  'rejected',\n]);\nexport type CommissionProposalStatus = z.infer<typeof CommissionProposalStatusSchema>;\n\nexport const CloseCommissionInputSchema = z.object({\n  commissionListingId: commissionListingIdSchema,\n}).strict();\nexport type CloseCommissionInput = z.infer<typeof CloseCommissionInputSchema>;\n\nexport const DeleteCommissionInputSchema = z.object({\n  commissionListingId: commissionListingIdSchema,\n}).strict();\nexport type DeleteCommissionInput = z.infer<typeof DeleteCommissionInputSchema>;\n\nexport const RejectCommissionProposalInputSchema = z.object({\n  commissionListingId: commissionListingIdSchema,\n  commissionProposalId: commissionProposalIdSchema,\n}).strict();\nexport type RejectCommissionProposalInput = z.infer<typeof RejectCommissionProposalInputSchema>;\n\nexport const SetCommissionProposalSavedInputSchema = z.object({\n  commissionListingId: commissionListingIdSchema,\n  commissionProposalId: commissionProposalIdSchema,\n  saved: z.boolean(),\n}).strict();\nexport type SetCommissionProposalSavedInput = z.infer<typeof SetCommissionProposalSavedInputSchema>;\n\nexport const CreateCommissionProposalTextInputSchema = z.object({\n  commissionListingId: commissionListingIdSchema,\n  coverLetterText: z.string().min(1).max(MAX_COMMISSION_DESCRIPTION_LENGTH),\n}).strict();\nexport type CreateCommissionProposalTextInput = z.infer<typeof CreateCommissionProposalTextInputSchema>;\n\n// Acceptance result of the commission-proposal MEDIA path (startUpload with fileOrigin\n// 'commission-proposal'). Creation itself is asynchronous via the media pipeline; the\n// proposal doc id is the CALLER's uid (one proposal per user per commission —\n// runCreateCommissionProposal: commissionProposalId = callerUid), so it is knowable at\n// accept time without any read. Non-strict (server → client result posture).\n// (The TEXT path's created-item result, CreateCommissionProposalTextResultSchema, lives\n// in ../doc-schemas/commissions.ts — it composes CommissionProposalSchema, and that\n// module imports THIS one, so declaring it here would be a module cycle. It is\n// re-exported on ./schemas via schemas/index.ts.)\nexport const ApplyToCommissionAcceptedResultSchema = z.object({\n  success: z.literal(true),\n  commissionListingId: commissionListingIdSchema,\n  pendingMediaId: z.string().min(1),\n  /** The eventual proposal doc id — the caller's uid (one proposal per user). */\n  commissionProposalId: commissionProposalIdSchema,\n});\nexport type ApplyToCommissionAcceptedResult = z.infer<typeof ApplyToCommissionAcceptedResultSchema>;\n\n\n"]}
+{"version":3,"file":"commissions.js","sourceRoot":"","sources":["../../src/schemas/commissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AACnF,OAAO,EAAE,iCAAiC,EAAE,MAAM,0BAA0B,CAAC;AAE7E,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,IAAI,CAAC;IACnD,MAAM;IACN,SAAS;IACT,UAAU;IACV,UAAU;CACX,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,mBAAmB,EAAE,yBAAyB;CAC/C,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,mBAAmB,EAAE,yBAAyB;IAC9C,oBAAoB,EAAE,0BAA0B;CACjD,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,mBAAmB,EAAE,yBAAyB;IAC9C,oBAAoB,EAAE,0BAA0B;IAChD,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;CACnB,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,mBAAmB,EAAE,yBAAyB;IAC9C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAAC;CAC1E,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,uFAAuF;AACvF,sFAAsF;AACtF,8EAA8E;AAC9E,uFAAuF;AACvF,6EAA6E;AAC7E,wFAAwF;AACxF,oFAAoF;AACpF,+EAA+E;AAC/E,kDAAkD;AAClD,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxB,mBAAmB,EAAE,yBAAyB;IAC9C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,+EAA+E;IAC/E,oBAAoB,EAAE,0BAA0B;CACjD,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport { commissionListingIdSchema, commissionProposalIdSchema } from './atoms.js';\nimport { MAX_COMMISSION_DESCRIPTION_LENGTH } from '../constants/business.js';\n\nexport const CommissionProposalStatusSchema = z.enum([\n  'open',\n  'invited',\n  'accepted',\n  'rejected',\n]);\nexport type CommissionProposalStatus = z.infer<typeof CommissionProposalStatusSchema>;\n\nexport const CloseCommissionInputSchema = z.object({\n  commissionListingId: commissionListingIdSchema,\n}).strict();\nexport type CloseCommissionInput = z.infer<typeof CloseCommissionInputSchema>;\n\nexport const RejectCommissionProposalInputSchema = z.object({\n  commissionListingId: commissionListingIdSchema,\n  commissionProposalId: commissionProposalIdSchema,\n}).strict();\nexport type RejectCommissionProposalInput = z.infer<typeof RejectCommissionProposalInputSchema>;\n\nexport const SetCommissionProposalSavedInputSchema = z.object({\n  commissionListingId: commissionListingIdSchema,\n  commissionProposalId: commissionProposalIdSchema,\n  saved: z.boolean(),\n}).strict();\nexport type SetCommissionProposalSavedInput = z.infer<typeof SetCommissionProposalSavedInputSchema>;\n\nexport const CreateCommissionProposalTextInputSchema = z.object({\n  commissionListingId: commissionListingIdSchema,\n  coverLetterText: z.string().min(1).max(MAX_COMMISSION_DESCRIPTION_LENGTH),\n}).strict();\nexport type CreateCommissionProposalTextInput = z.infer<typeof CreateCommissionProposalTextInputSchema>;\n\n// Acceptance result of the commission-proposal MEDIA path (startUpload with fileOrigin\n// 'commission-proposal'). Creation itself is asynchronous via the media pipeline; the\n// proposal doc id is the CALLER's uid (one proposal per user per commission —\n// runCreateCommissionProposal: commissionProposalId = callerUid), so it is knowable at\n// accept time without any read. Non-strict (server → client result posture).\n// (The TEXT path's created-item result, CreateCommissionProposalTextResultSchema, lives\n// in ../doc-schemas/commissions.ts — it composes CommissionProposalSchema, and that\n// module imports THIS one, so declaring it here would be a module cycle. It is\n// re-exported on ./schemas via schemas/index.ts.)\nexport const ApplyToCommissionAcceptedResultSchema = z.object({\n  success: z.literal(true),\n  commissionListingId: commissionListingIdSchema,\n  pendingMediaId: z.string().min(1),\n  /** The eventual proposal doc id — the caller's uid (one proposal per user). */\n  commissionProposalId: commissionProposalIdSchema,\n});\nexport type ApplyToCommissionAcceptedResult = z.infer<typeof ApplyToCommissionAcceptedResultSchema>;\n\n\n"]}

package/dist/schemas/users.d.ts

@@ -82,4 +82,15 @@ export declare const LookupUserByEmailOrUidInputSchema: z.ZodObject<{
     query: z.ZodString;
 }, z.core.$strict>;
 export type LookupUserByEmailOrUidInput = z.infer<typeof LookupUserByEmailOrUidInputSchema>;
+export declare const RequestAccountDeletionResultSchema: z.ZodObject<{
+    success: z.ZodLiteral<true>;
+    scheduledScrubAt: z.ZodNumber;
+    alreadyPending: z.ZodBoolean;
+}, z.core.$strip>;
+export type RequestAccountDeletionResult = z.infer<typeof RequestAccountDeletionResultSchema>;
+export declare const CancelAccountDeletionResultSchema: z.ZodObject<{
+    success: z.ZodLiteral<true>;
+    cancelled: z.ZodBoolean;
+}, z.core.$strip>;
+export type CancelAccountDeletionResult = z.infer<typeof CancelAccountDeletionResultSchema>;
 //# sourceMappingURL=users.d.ts.map

package/dist/schemas/users.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/schemas/users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB;gFACgF;AAChF,eAAO,MAAM,iBAAiB,aAIN,CAAC;AAEzB,eAAO,MAAM,wCAAwC,iCAAwB,CAAC;AAC9E,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wCAAwC,CAAC,CAAC;AAM1G,eAAO,MAAM,4CAA4C,iCAAwB,CAAC;AAClF,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4CAA4C,CAAC,CAAC;AAKlH,eAAO,MAAM,+BAA+B;;;;;;;;kBAiBjC,CAAC;AACZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,eAAO,MAAM,qCAAqC,iCAAwB,CAAC;AAC3E,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAapG,eAAO,MAAM,mCAAmC;;;;;;;8BAW9C,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAMhG,eAAO,MAAM,mCAAmC;;;kBAGrC,CAAC;AACZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,uBAAuB;;;;;;;;;kBASzB,CAAC;AACZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,wBAAwB;;;;;;;;kBAO1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAI1E,eAAO,MAAM,gCAAgC;;;kBAIlC,CAAC;AACZ,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAI1F,eAAO,MAAM,2BAA2B;;kBAE7B,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAKhF,eAAO,MAAM,oCAAoC;;kBAEtC,CAAC;AACZ,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAKlG,eAAO,MAAM,gCAAgC;;;;;;kBAMlC,CAAC;AACZ,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAK1F,eAAO,MAAM,4BAA4B;;kBAE9B,CAAC;AACZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAOlF,eAAO,MAAM,iCAAiC;;kBAEnC,CAAC;AACZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC"}
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/schemas/users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB;gFACgF;AAChF,eAAO,MAAM,iBAAiB,aAIN,CAAC;AAEzB,eAAO,MAAM,wCAAwC,iCAAwB,CAAC;AAC9E,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wCAAwC,CAAC,CAAC;AAM1G,eAAO,MAAM,4CAA4C,iCAAwB,CAAC;AAClF,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4CAA4C,CAAC,CAAC;AAKlH,eAAO,MAAM,+BAA+B;;;;;;;;kBAiBjC,CAAC;AACZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,eAAO,MAAM,qCAAqC,iCAAwB,CAAC;AAC3E,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAapG,eAAO,MAAM,mCAAmC;;;;;;;8BAW9C,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAMhG,eAAO,MAAM,mCAAmC;;;kBAGrC,CAAC;AACZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,uBAAuB;;;;;;;;;kBASzB,CAAC;AACZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,wBAAwB;;;;;;;;kBAO1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAI1E,eAAO,MAAM,gCAAgC;;;kBAIlC,CAAC;AACZ,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAI1F,eAAO,MAAM,2BAA2B;;kBAE7B,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAKhF,eAAO,MAAM,oCAAoC;;kBAEtC,CAAC;AACZ,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAKlG,eAAO,MAAM,gCAAgC;;;;;;kBAMlC,CAAC;AACZ,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAK1F,eAAO,MAAM,4BAA4B;;kBAE9B,CAAC;AACZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAOlF,eAAO,MAAM,iCAAiC;;kBAEnC,CAAC;AACZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAK5F,eAAO,MAAM,kCAAkC;;;;iBAM7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F,eAAO,MAAM,iCAAiC;;;iBAI5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC"}

package/dist/schemas/users.js

@@ -128,4 +128,19 @@ export const SearchPublicUsersInputSchema = z.object({
 export const LookupUserByEmailOrUidInputSchema = z.object({
     query: z.string().trim().min(1).max(MAX_USER_SEARCH_QUERY_LENGTH),
 }).strict();
+// N3 account deletion — wire result contracts for the two user-facing callables (both take
+// no input). Previously declared independently in functions/src and src/hooks — one drifting
+// pair per callable. Non-strict (server → client result posture).
+export const RequestAccountDeletionResultSchema = z.object({
+    success: z.literal(true),
+    /** When the scheduled scrub will run (requestedAt + the grace window), epoch ms. */
+    scheduledScrubAt: z.number(),
+    /** True when an ACTIVE request already existed and its schedule was re-returned. */
+    alreadyPending: z.boolean(),
+});
+export const CancelAccountDeletionResultSchema = z.object({
+    success: z.literal(true),
+    /** False when there was no active request to cancel (idempotent no-op). */
+    cancelled: z.boolean(),
+});
 //# sourceMappingURL=users.js.map

package/dist/schemas/users.js.map

@@ -1 +1 @@
-{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/schemas/users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE;gFACgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,EAAE;KACR,GAAG,CAAC,mBAAmB,CAAC;KACxB,GAAG,CAAC,mBAAmB,CAAC;KACxB,KAAK,CAAC,cAAc,CAAC,CAAC;AAEzB,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAG9E,qFAAqF;AACrF,oFAAoF;AACpF,kEAAkE;AAClE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,4CAA4C,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAGlF,gGAAgG;AAChG,8EAA8E;AAC9E,mGAAmG;AACnG,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5B,+FAA+F;IAC/F,8FAA8F;IAC9F,kFAAkF;IAClF,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACjC,6FAA6F;IAC7F,8FAA8F;IAC9F,+FAA+F;IAC/F,8FAA8F;IAC9F,6FAA6F;IAC7F,2EAA2E;IAC3E,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;KACrC,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAG3E,sFAAsF;AACtF,qFAAqF;AACrF,uCAAuC;AACvC,yFAAyF;AACzF,qDAAqD;AACrD,8FAA8F;AAC9F,yFAAyF;AACzF,qFAAqF;AACrF,2FAA2F;AAC3F,4FAA4F;AAC5F,8FAA8F;AAC9F,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IAChF,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,8CAA8C;KAC9F,CAAC,CAAC,MAAM,EAAE;IACX,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;KAC7C,CAAC,CAAC,MAAM,EAAE;IACX,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;KAClC,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC;AAGH,wFAAwF;AACxF,gGAAgG;AAChG,8FAA8F;AAC9F,6CAA6C;AAC7C,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC;IAC3D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,WAAW,EAAE,iBAAiB;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACpB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACrB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;KACvB,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,uBAAuB;IAC/B,gFAAgF;IAChF,gFAAgF;IAChF,0EAA0E;IAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE;CAC5E,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,oFAAoF;AACpF,qFAAqF;AACrF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,EAAE,YAAY;IACpB,mDAAmD;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE;CAC5E,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,wFAAwF;AACxF,yEAAyE;AACzE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,WAAW,EAAE,iBAAiB;CAC/B,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,uFAAuF;AACvF,0FAA0F;AAC1F,oFAAoF;AACpF,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,WAAW,EAAE,iBAAiB;CAC/B,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,sFAAsF;AACtF,wFAAwF;AACxF,iEAAiE;AACjE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;KACrC,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,uFAAuF;AACvF,wFAAwF;AACxF,yBAAyB;AACzB,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;CAClE,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,yFAAyF;AACzF,uFAAuF;AACvF,0FAA0F;AAC1F,0FAA0F;AAC1F,4DAA4D;AAC5D,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;CAClE,CAAC,CAAC,MAAM,EAAE,CAAC","sourcesContent":["import { z } from 'zod';\nimport { userIdSchema } from './atoms.js';\nimport {\n  USERNAME_MIN_LENGTH,\n  USERNAME_MAX_LENGTH,\n  USERNAME_REGEX,\n  MAX_ARTISAN_LOCATION_LENGTH,\n  MAX_INTERNAL_REASON_LENGTH,\n  MAX_USER_SEARCH_QUERY_LENGTH,\n} from '../constants/business.js';\nimport { UserAccountStatusSchema } from '../doc-schemas/user.js';\n\n/** The ONE composed display-name field validator (length bounds + charset). Every\n * callable accepting a display name spreads this — never a re-composed copy. */\nexport const displayNameSchema = z\n  .string()\n  .min(USERNAME_MIN_LENGTH)\n  .max(USERNAME_MAX_LENGTH)\n  .regex(USERNAME_REGEX);\n\nexport const AcceptSquareStreetzAgreementsInputSchema = z.object({}).strict();\nexport type AcceptSquareStreetzAgreementsInput = z.infer<typeof AcceptSquareStreetzAgreementsInputSchema>;\n\n// One-time acknowledgement gate before a user may download Hall content for personal\n// offline use (final wording owned by the legal-and-content step). No payload — the\n// callable records the timestamp in the caller's privateData. See\n// docs/design/media-assets-and-protected-serving.md (Hall/Library downloads).\nexport const AcceptHallDownloadAcknowledgementInputSchema = z.object({}).strict();\nexport type AcceptHallDownloadAcknowledgementInput = z.infer<typeof AcceptHallDownloadAcknowledgementInputSchema>;\n\n// The become-creator dialog's \"I confirm I am 18 years of age or older\" checkbox must reach the\n// server: the callable rejects when absent and records the attestation on the\n// artisanCreator.grantedToUser audit event (immutable, timestamped, with IP/UA) so it is provable.\nexport const BecomeArtisanCreatorInputSchema = z.object({\n  ageAttested: z.literal(true),\n  // \"I confirm I am a person located in the United States\" — required for now (only U.S. persons\n  // may become artisans). Mirrors ageAttested: the callable rejects when absent and records the\n  // attestation timestamp (privateData.usPersonAttestedAt) + the grant audit event.\n  usPersonAttested: z.literal(true),\n  // [Q21.5 REVISED — DJ 2026-07-06] The artisan's date of birth — the ONLY point in the system\n  // where a DOB is collected for persistence (registration/upgrade derive the bracket and store\n  // nothing). The dialog copy tells the user this must be THEIR birthday: when the payout system\n  // ships, it has to match their payout (KYC) identity. The callable re-derives 18+ server-side\n  // from this value; an under-18 derivation rejects (failure audit, nothing stored). Stored as\n  // privateData attestedDateOfBirth + attestedDobSource 'artisanOnboarding'.\n  dob: z.object({\n    year: z.number().int(),\n    month: z.number().int().min(1).max(12),\n    day: z.number().int().min(1).max(31),\n  }).strict(),\n}).strict();\nexport type BecomeArtisanCreatorInput = z.infer<typeof BecomeArtisanCreatorInputSchema>;\n\nexport const MarkWaitingForNewsApprovalInputSchema = z.object({}).strict();\nexport type MarkWaitingForNewsApprovalInput = z.infer<typeof MarkWaitingForNewsApprovalInputSchema>;\n\n// First-visit site-tour preference writer (updateSiteTourPreference). This is the ONE\n// server writer for `privateData/{uid}.siteTour`; the client never writes tour state\n// directly. Discriminated on `action`:\n//  - deferToday: records the member's LOCAL calendar `date` (\"Not today\"); the automatic\n//    invitation is suppressed for exactly that date.\n//  - dismissAutomaticInvites: records the permanent \"Don't show this again\" time; no payload.\n//  - completeTour: records completion; the callable stamps SITE_TOUR_CURRENT_VERSION and\n//    completedAt server-side, so no version is accepted from the client (mirrors the\n//    acknowledgement callables that record the authoritative value server-side rather than\n//    trusting a client-supplied one). Bump SITE_TOUR_CURRENT_VERSION to re-invite everyone.\n// `date` uses the same strict YYYY-MM-DD convention as the age cluster's attestedDateOfBirth.\nexport const UpdateSiteTourPreferenceInputSchema = z.discriminatedUnion('action', [\n  z.object({\n    action: z.literal('deferToday'),\n    date: z.string().regex(/^\\d{4}-\\d{2}-\\d{2}$/), // 'YYYY-MM-DD' (member's LOCAL calendar date)\n  }).strict(),\n  z.object({\n    action: z.literal('dismissAutomaticInvites'),\n  }).strict(),\n  z.object({\n    action: z.literal('completeTour'),\n  }).strict(),\n]);\nexport type UpdateSiteTourPreferenceInput = z.infer<typeof UpdateSiteTourPreferenceInputSchema>;\n\n// Non-U.S. artisan-interest signup (the FCFS \"waitlist\" fields on privateData). Mirrors\n// MarkWaitingForNewsApproval but carries the applicant's country (+ optional region) so signups\n// can be opened by jurisdiction as each region's laws clear. The callable records it ONLY for\n// adult accounts (never a minor's location).\nexport const MarkNonUsArtisanInterestInputSchema = z.object({\n  country: z.string().min(1).max(MAX_ARTISAN_LOCATION_LENGTH),\n  region: z.string().max(MAX_ARTISAN_LOCATION_LENGTH).optional(),\n}).strict();\nexport type MarkNonUsArtisanInterestInput = z.infer<typeof MarkNonUsArtisanInterestInputSchema>;\n\nexport const RegisterUserInputSchema = z.object({\n  displayName: displayNameSchema,\n  agreements: z.object({\n    age: z.literal(true),\n    nudity: z.literal(true),\n    meet: z.literal(true),\n    cookies: z.literal(true),\n    terms: z.literal(true),\n  }).strict(),\n}).strict();\nexport type RegisterUserInput = z.infer<typeof RegisterUserInputSchema>;\n\nexport const SetUserStatusInputSchema = z.object({\n  userId: userIdSchema,\n  status: UserAccountStatusSchema,\n  // Required by the callable when status is 'suspended' or 'banned' (shown to the\n  // user in their restricted view and recorded on the audit event). Optional here\n  // so reinstating to 'active' can omit it; the callable enforces presence.\n  reason: z.string().trim().min(1).max(MAX_INTERNAL_REASON_LENGTH).optional(),\n}).strict();\nexport type SetUserStatusInput = z.infer<typeof SetUserStatusInputSchema>;\n\n// Admin forces an abusive display name off a user: the name is swapped to a neutral\n// placeholder, the old name is blocked from reuse, and the user must pick a new one.\nexport const ForceDisplayNameResetInputSchema = z.object({\n  userId: userIdSchema,\n  // Optional admin note recorded on the audit event.\n  reason: z.string().trim().min(1).max(MAX_INTERNAL_REASON_LENGTH).optional(),\n}).strict();\nexport type ForceDisplayNameResetInput = z.infer<typeof ForceDisplayNameResetInputSchema>;\n\n// User completes a forced display-name reset by choosing a new name. Only honored while\n// the caller's userProfiles doc has `displayNameResetRequired === true`.\nexport const SetMyDisplayNameInputSchema = z.object({\n  displayName: displayNameSchema,\n}).strict();\nexport type SetMyDisplayNameInput = z.infer<typeof SetMyDisplayNameInputSchema>;\n\n// Unauthenticated soft-check the register page runs BEFORE creating the Auth user so a\n// taken name never orphans an auth account. Mirrors the RegisterUser displayName contract\n// (same length + regex). The authoritative claim still happens inside registerUser.\nexport const CheckDisplayNameAvailableInputSchema = z.object({\n  displayName: displayNameSchema,\n}).strict();\nexport type CheckDisplayNameAvailableInput = z.infer<typeof CheckDisplayNameAvailableInputSchema>;\n\n// Teen→adult upgrade: a transient DOB (never persisted) the callable re-derives adult\n// eligibility from server-side against a fresh attestation. Only the shape is validated\n// here; the age math + attestation binding live in the callable.\nexport const UpgradeAccountToAdultInputSchema = z.object({\n  dob: z.object({\n    year: z.number().int(),\n    month: z.number().int().min(1).max(12),\n    day: z.number().int().min(1).max(31),\n  }).strict(),\n}).strict();\nexport type UpgradeAccountToAdultInput = z.infer<typeof UpgradeAccountToAdultInputSchema>;\n\n// Admin-only user lookup for the User Management view (prefix search on publicUsers by\n// displayName). Only the trimmed query string is validated here; authz (admin/jr-admin)\n// lives in the callable.\nexport const SearchPublicUsersInputSchema = z.object({\n  query: z.string().trim().min(1).max(MAX_USER_SEARCH_QUERY_LENGTH),\n}).strict();\nexport type SearchPublicUsersInput = z.infer<typeof SearchPublicUsersInputSchema>;\n\n// Admin exact-account lookup (\"look up by email or uid\" in User Management): a solo full\n// admin resolves ONE account by its exact email, uid, or display name. The app detects\n// email-vs-uid-vs-name both client- and server-side, so there is ONE query field (mirrors\n// SearchPublicUsersInput's single trimmed-query shape + bound). Only the trimmed query is\n// validated here; authz (full admin) lives in the callable.\nexport const LookupUserByEmailOrUidInputSchema = z.object({\n  query: z.string().trim().min(1).max(MAX_USER_SEARCH_QUERY_LENGTH),\n}).strict();\nexport type LookupUserByEmailOrUidInput = z.infer<typeof LookupUserByEmailOrUidInputSchema>;\n\n"]}
+{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/schemas/users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE;gFACgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,EAAE;KACR,GAAG,CAAC,mBAAmB,CAAC;KACxB,GAAG,CAAC,mBAAmB,CAAC;KACxB,KAAK,CAAC,cAAc,CAAC,CAAC;AAEzB,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAG9E,qFAAqF;AACrF,oFAAoF;AACpF,kEAAkE;AAClE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,4CAA4C,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAGlF,gGAAgG;AAChG,8EAA8E;AAC9E,mGAAmG;AACnG,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5B,+FAA+F;IAC/F,8FAA8F;IAC9F,kFAAkF;IAClF,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACjC,6FAA6F;IAC7F,8FAA8F;IAC9F,+FAA+F;IAC/F,8FAA8F;IAC9F,6FAA6F;IAC7F,2EAA2E;IAC3E,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;KACrC,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAG3E,sFAAsF;AACtF,qFAAqF;AACrF,uCAAuC;AACvC,yFAAyF;AACzF,qDAAqD;AACrD,8FAA8F;AAC9F,yFAAyF;AACzF,qFAAqF;AACrF,2FAA2F;AAC3F,4FAA4F;AAC5F,8FAA8F;AAC9F,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IAChF,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,8CAA8C;KAC9F,CAAC,CAAC,MAAM,EAAE;IACX,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;KAC7C,CAAC,CAAC,MAAM,EAAE;IACX,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;KAClC,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC;AAGH,wFAAwF;AACxF,gGAAgG;AAChG,8FAA8F;AAC9F,6CAA6C;AAC7C,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC;IAC3D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,WAAW,EAAE,iBAAiB;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACpB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACrB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;KACvB,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,uBAAuB;IAC/B,gFAAgF;IAChF,gFAAgF;IAChF,0EAA0E;IAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE;CAC5E,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,oFAAoF;AACpF,qFAAqF;AACrF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,EAAE,YAAY;IACpB,mDAAmD;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE;CAC5E,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,wFAAwF;AACxF,yEAAyE;AACzE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,WAAW,EAAE,iBAAiB;CAC/B,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,uFAAuF;AACvF,0FAA0F;AAC1F,oFAAoF;AACpF,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,WAAW,EAAE,iBAAiB;CAC/B,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,sFAAsF;AACtF,wFAAwF;AACxF,iEAAiE;AACjE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;KACrC,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,uFAAuF;AACvF,wFAAwF;AACxF,yBAAyB;AACzB,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;CAClE,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,yFAAyF;AACzF,uFAAuF;AACvF,0FAA0F;AAC1F,0FAA0F;AAC1F,4DAA4D;AAC5D,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;CAClE,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,2FAA2F;AAC3F,6FAA6F;AAC7F,kEAAkE;AAClE,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxB,oFAAoF;IACpF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,oFAAoF;IACpF,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;CAC5B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxB,2EAA2E;IAC3E,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport { userIdSchema } from './atoms.js';\nimport {\n  USERNAME_MIN_LENGTH,\n  USERNAME_MAX_LENGTH,\n  USERNAME_REGEX,\n  MAX_ARTISAN_LOCATION_LENGTH,\n  MAX_INTERNAL_REASON_LENGTH,\n  MAX_USER_SEARCH_QUERY_LENGTH,\n} from '../constants/business.js';\nimport { UserAccountStatusSchema } from '../doc-schemas/user.js';\n\n/** The ONE composed display-name field validator (length bounds + charset). Every\n * callable accepting a display name spreads this — never a re-composed copy. */\nexport const displayNameSchema = z\n  .string()\n  .min(USERNAME_MIN_LENGTH)\n  .max(USERNAME_MAX_LENGTH)\n  .regex(USERNAME_REGEX);\n\nexport const AcceptSquareStreetzAgreementsInputSchema = z.object({}).strict();\nexport type AcceptSquareStreetzAgreementsInput = z.infer<typeof AcceptSquareStreetzAgreementsInputSchema>;\n\n// One-time acknowledgement gate before a user may download Hall content for personal\n// offline use (final wording owned by the legal-and-content step). No payload — the\n// callable records the timestamp in the caller's privateData. See\n// docs/design/media-assets-and-protected-serving.md (Hall/Library downloads).\nexport const AcceptHallDownloadAcknowledgementInputSchema = z.object({}).strict();\nexport type AcceptHallDownloadAcknowledgementInput = z.infer<typeof AcceptHallDownloadAcknowledgementInputSchema>;\n\n// The become-creator dialog's \"I confirm I am 18 years of age or older\" checkbox must reach the\n// server: the callable rejects when absent and records the attestation on the\n// artisanCreator.grantedToUser audit event (immutable, timestamped, with IP/UA) so it is provable.\nexport const BecomeArtisanCreatorInputSchema = z.object({\n  ageAttested: z.literal(true),\n  // \"I confirm I am a person located in the United States\" — required for now (only U.S. persons\n  // may become artisans). Mirrors ageAttested: the callable rejects when absent and records the\n  // attestation timestamp (privateData.usPersonAttestedAt) + the grant audit event.\n  usPersonAttested: z.literal(true),\n  // [Q21.5 REVISED — DJ 2026-07-06] The artisan's date of birth — the ONLY point in the system\n  // where a DOB is collected for persistence (registration/upgrade derive the bracket and store\n  // nothing). The dialog copy tells the user this must be THEIR birthday: when the payout system\n  // ships, it has to match their payout (KYC) identity. The callable re-derives 18+ server-side\n  // from this value; an under-18 derivation rejects (failure audit, nothing stored). Stored as\n  // privateData attestedDateOfBirth + attestedDobSource 'artisanOnboarding'.\n  dob: z.object({\n    year: z.number().int(),\n    month: z.number().int().min(1).max(12),\n    day: z.number().int().min(1).max(31),\n  }).strict(),\n}).strict();\nexport type BecomeArtisanCreatorInput = z.infer<typeof BecomeArtisanCreatorInputSchema>;\n\nexport const MarkWaitingForNewsApprovalInputSchema = z.object({}).strict();\nexport type MarkWaitingForNewsApprovalInput = z.infer<typeof MarkWaitingForNewsApprovalInputSchema>;\n\n// First-visit site-tour preference writer (updateSiteTourPreference). This is the ONE\n// server writer for `privateData/{uid}.siteTour`; the client never writes tour state\n// directly. Discriminated on `action`:\n//  - deferToday: records the member's LOCAL calendar `date` (\"Not today\"); the automatic\n//    invitation is suppressed for exactly that date.\n//  - dismissAutomaticInvites: records the permanent \"Don't show this again\" time; no payload.\n//  - completeTour: records completion; the callable stamps SITE_TOUR_CURRENT_VERSION and\n//    completedAt server-side, so no version is accepted from the client (mirrors the\n//    acknowledgement callables that record the authoritative value server-side rather than\n//    trusting a client-supplied one). Bump SITE_TOUR_CURRENT_VERSION to re-invite everyone.\n// `date` uses the same strict YYYY-MM-DD convention as the age cluster's attestedDateOfBirth.\nexport const UpdateSiteTourPreferenceInputSchema = z.discriminatedUnion('action', [\n  z.object({\n    action: z.literal('deferToday'),\n    date: z.string().regex(/^\\d{4}-\\d{2}-\\d{2}$/), // 'YYYY-MM-DD' (member's LOCAL calendar date)\n  }).strict(),\n  z.object({\n    action: z.literal('dismissAutomaticInvites'),\n  }).strict(),\n  z.object({\n    action: z.literal('completeTour'),\n  }).strict(),\n]);\nexport type UpdateSiteTourPreferenceInput = z.infer<typeof UpdateSiteTourPreferenceInputSchema>;\n\n// Non-U.S. artisan-interest signup (the FCFS \"waitlist\" fields on privateData). Mirrors\n// MarkWaitingForNewsApproval but carries the applicant's country (+ optional region) so signups\n// can be opened by jurisdiction as each region's laws clear. The callable records it ONLY for\n// adult accounts (never a minor's location).\nexport const MarkNonUsArtisanInterestInputSchema = z.object({\n  country: z.string().min(1).max(MAX_ARTISAN_LOCATION_LENGTH),\n  region: z.string().max(MAX_ARTISAN_LOCATION_LENGTH).optional(),\n}).strict();\nexport type MarkNonUsArtisanInterestInput = z.infer<typeof MarkNonUsArtisanInterestInputSchema>;\n\nexport const RegisterUserInputSchema = z.object({\n  displayName: displayNameSchema,\n  agreements: z.object({\n    age: z.literal(true),\n    nudity: z.literal(true),\n    meet: z.literal(true),\n    cookies: z.literal(true),\n    terms: z.literal(true),\n  }).strict(),\n}).strict();\nexport type RegisterUserInput = z.infer<typeof RegisterUserInputSchema>;\n\nexport const SetUserStatusInputSchema = z.object({\n  userId: userIdSchema,\n  status: UserAccountStatusSchema,\n  // Required by the callable when status is 'suspended' or 'banned' (shown to the\n  // user in their restricted view and recorded on the audit event). Optional here\n  // so reinstating to 'active' can omit it; the callable enforces presence.\n  reason: z.string().trim().min(1).max(MAX_INTERNAL_REASON_LENGTH).optional(),\n}).strict();\nexport type SetUserStatusInput = z.infer<typeof SetUserStatusInputSchema>;\n\n// Admin forces an abusive display name off a user: the name is swapped to a neutral\n// placeholder, the old name is blocked from reuse, and the user must pick a new one.\nexport const ForceDisplayNameResetInputSchema = z.object({\n  userId: userIdSchema,\n  // Optional admin note recorded on the audit event.\n  reason: z.string().trim().min(1).max(MAX_INTERNAL_REASON_LENGTH).optional(),\n}).strict();\nexport type ForceDisplayNameResetInput = z.infer<typeof ForceDisplayNameResetInputSchema>;\n\n// User completes a forced display-name reset by choosing a new name. Only honored while\n// the caller's userProfiles doc has `displayNameResetRequired === true`.\nexport const SetMyDisplayNameInputSchema = z.object({\n  displayName: displayNameSchema,\n}).strict();\nexport type SetMyDisplayNameInput = z.infer<typeof SetMyDisplayNameInputSchema>;\n\n// Unauthenticated soft-check the register page runs BEFORE creating the Auth user so a\n// taken name never orphans an auth account. Mirrors the RegisterUser displayName contract\n// (same length + regex). The authoritative claim still happens inside registerUser.\nexport const CheckDisplayNameAvailableInputSchema = z.object({\n  displayName: displayNameSchema,\n}).strict();\nexport type CheckDisplayNameAvailableInput = z.infer<typeof CheckDisplayNameAvailableInputSchema>;\n\n// Teen→adult upgrade: a transient DOB (never persisted) the callable re-derives adult\n// eligibility from server-side against a fresh attestation. Only the shape is validated\n// here; the age math + attestation binding live in the callable.\nexport const UpgradeAccountToAdultInputSchema = z.object({\n  dob: z.object({\n    year: z.number().int(),\n    month: z.number().int().min(1).max(12),\n    day: z.number().int().min(1).max(31),\n  }).strict(),\n}).strict();\nexport type UpgradeAccountToAdultInput = z.infer<typeof UpgradeAccountToAdultInputSchema>;\n\n// Admin-only user lookup for the User Management view (prefix search on publicUsers by\n// displayName). Only the trimmed query string is validated here; authz (admin/jr-admin)\n// lives in the callable.\nexport const SearchPublicUsersInputSchema = z.object({\n  query: z.string().trim().min(1).max(MAX_USER_SEARCH_QUERY_LENGTH),\n}).strict();\nexport type SearchPublicUsersInput = z.infer<typeof SearchPublicUsersInputSchema>;\n\n// Admin exact-account lookup (\"look up by email or uid\" in User Management): a solo full\n// admin resolves ONE account by its exact email, uid, or display name. The app detects\n// email-vs-uid-vs-name both client- and server-side, so there is ONE query field (mirrors\n// SearchPublicUsersInput's single trimmed-query shape + bound). Only the trimmed query is\n// validated here; authz (full admin) lives in the callable.\nexport const LookupUserByEmailOrUidInputSchema = z.object({\n  query: z.string().trim().min(1).max(MAX_USER_SEARCH_QUERY_LENGTH),\n}).strict();\nexport type LookupUserByEmailOrUidInput = z.infer<typeof LookupUserByEmailOrUidInputSchema>;\n\n// N3 account deletion — wire result contracts for the two user-facing callables (both take\n// no input). Previously declared independently in functions/src and src/hooks — one drifting\n// pair per callable. Non-strict (server → client result posture).\nexport const RequestAccountDeletionResultSchema = z.object({\n  success: z.literal(true),\n  /** When the scheduled scrub will run (requestedAt + the grace window), epoch ms. */\n  scheduledScrubAt: z.number(),\n  /** True when an ACTIVE request already existed and its schedule was re-returned. */\n  alreadyPending: z.boolean(),\n});\nexport type RequestAccountDeletionResult = z.infer<typeof RequestAccountDeletionResultSchema>;\n\nexport const CancelAccountDeletionResultSchema = z.object({\n  success: z.literal(true),\n  /** False when there was no active request to cancel (idempotent no-op). */\n  cancelled: z.boolean(),\n});\nexport type CancelAccountDeletionResult = z.infer<typeof CancelAccountDeletionResultSchema>;\n\n"]}

package/dist/types/audit.d.ts

@@ -1,5 +1,5 @@
 import type { AuditEvent } from '@ttt-productions/audit-core';
-export type AuditEventType = 'artisanCreator.grantedToUser' | 'user.accountRegistered' | 'user.statusChanged' | 'user.accountSuspended' | 'user.accountBanned' | 'user.accountUnbanned' | 'user.displayNameResetForced' | 'user.displayNameChanged' | 'user.nonUsArtisanInterestRecorded' | 'account.deletionRequested' | 'account.deletionCancelled' | 'account.erasureCompleted' | 'account.erasureParkedOnHold' | 'account.erasureSuperseded' | 'admin.systemRoleGranted' | 'admin.systemRoleRevoked' | 'admin.systemRoleSyncedFromDirectEdit' | 'admin.contentAppealReviewed' | 'admin.thresholdItemReviewed' | 'admin.futurePlansUpdated' | 'admin.rulesAndAgreementsUpdated' | 'admin.termsPageUpdated' | 'admin.privacyPageUpdated' | 'admin.takeItDownPageCopyUpdated' | 'admin.reservedUsernamesSeeded' | 'admin.blockedFranchiseNamesSeeded' | 'admin.rulesAndAgreementsSeeded' | 'admin.futurePlansSeeded' | 'admin.termsPageSeeded' | 'admin.privacyPageSeeded' | 'admin.takeItDownPageCopySeeded' | 'admin.dispatchDeleted' | 'admin.shortLinkDeleted' | 'admin.trademarkChecked' | 'content.parodyDisclaimerApplied' | 'workProject.created' | 'workProject.guildmateUserGuildStandingChanged' | 'workProject.guildmateUserTradeProfessionsChanged' | 'workProject.guildMemberDeparted' | 'workProject.publicDetailsUpdated' | 'workProject.workAssetDeleted' | 'workProject.fileFolderCreated' | 'workProject.fileFolderRenamed' | 'workProject.fileFolderAccessChanged' | 'workProject.fileFolderDeleted' | 'workProject.guildInviteSent' | 'workProject.guildInviteAccepted' | 'workProject.guildInviteDeclined' | 'workProject.guildInviteCancelled' | 'workProject.guildInviteStakeSharesUpdated' | 'workProject.commissionListingCreated' | 'workProject.commissionProposalCreated' | 'workProject.commissionClosed' | 'workProject.commissionDeleted' | 'workProject.commissionProposalSaveToggled' | 'workProject.commissionProposalRejected' | 'workProject.stakeSharesChanged' | 'workProject.stakeShares.created' | 'workProject.stakeShares.increased' | 'workProject.stakeShares.anomaly' | 'workFile.sharedToRealm' | 'workFile.realmCanonChanged' | 'workFile.unsharedFromRealm' | 'craftSkill.userCraftSkillDeleted' | 'craftSkill.hidden' | 'craftSkill.restored' | 'craftSkill.removed' | 'content.itemReported' | 'content.violationRecorded' | 'content.thresholdItemSubmitted' | 'content.thresholdItemWithdrawn' | 'content.hallItemPublished' | 'content.hallContentChangeRequestSubmitted' | 'admin.hallContentChangeRequestResolved' | 'content.appealSubmitted' | 'content.violationAccepted' | 'content.hidden' | 'content.restored' | 'content.removed' | 'content.taleDetailsUpdated' | 'content.taleWorkGenresUpdated' | 'content.chapterCreated' | 'content.chapterDetailsUpdated' | 'content.tuneDetailsUpdated' | 'content.tuneWorkGenresUpdated' | 'content.tuneTrackCreated' | 'content.tuneTrackDetailsUpdated' | 'content.televisionDetailsUpdated' | 'content.televisionWorkGenresUpdated' | 'content.televisionEpisodeCreated' | 'content.televisionEpisodeDetailsUpdated' | 'payment.sessionCreated' | 'payment.pledgePaymentCompleted' | 'payment.pledgePaymentAbandoned' | 'payment.pledgePaymentFailed' | 'payment.pledgePaymentQuarantined' | 'payment.pledgePaymentRefunded' | 'payment.pledgePaymentDisputeOpened' | 'payment.pledgePaymentDisputeClosed' | 'payment.pledgeRefundRequested' | 'payment.pledgeRefundRequestResolved' | 'payment.pledgeLedger.recorded' | 'payment.pledgeLedger.anomaly' | 'admin.taskCheckedOut' | 'admin.taskCheckedIn' | 'admin.taskReleased' | 'admin.taskAutoReleased' | 'admin.taskDeferredLater' | 'workProject.auditionCreated' | 'admin.auditionCreated' | 'audition.entryCreated' | 'audition.closedByUser' | 'audition.curatedBatchFailed' | 'system.manualIntervention' | 'system.appConfigUpdated' | 'admin.appModeFlipRecorded' | 'system.pendingMediaArchived' | 'system.orphanUploadsCleanedUp' | 'admin.profanityListSeeded' | 'admin.profanityListCurated' | 'social.squareStreetzPostLiked' | 'social.squareStreetzPostUnliked' | 'social.targetFollowed' | 'social.targetUnfollowed' | 'chat.guildChatChannelCreated' | 'chat.guildChatChannelUpdated' | 'chat.guildChatChannelArchived' | 'chat.guildChatChannelUnarchived' | 'chat.guildChatChannelDeleted' | 'chat.adminThreadStarted' | 'chat.adminThreadStatusChanged' | 'conversationFile.deleted' | 'chat.moderationActionRequested' | 'chat.moderationActionApplied' | 'chat.moderationActionFailed' | 'chat.moderationContextRead' | 'notification.broadcastSent' | 'notification.adminArchived' | 'workProject.released' | 'workProject.hidden' | 'workProject.restored' | 'workProject.moderationPlaceholderApplied' | 'workProject.moderationRetitleCleared' | 'workRealm.created' | 'workRealm.released' | 'workRealm.detailsUpdated' | 'workRealm.hidden' | 'workRealm.restored' | 'workRealm.moderationPlaceholderApplied' | 'workRealm.moderationRetitleCleared' | 'hallItem.moderationPlaceholderApplied' | 'report.childSafetyCaseOpened' | 'report.nciiCaseOpened' | 'childSafety.reportDispositionSet' | 'childSafety.holdPlaced' | 'childSafety.holdReleased' | 'childSafety.accountActionApplied' | 'childSafety.accountActionReverted' | 'childSafety.evidenceManifestCreated' | 'childSafety.evidenceDisposed' | 'childSafety.quarantineCompleted' | 'childSafety.ncmecSubmissionCompleted' | 'childSafety.ncmecPortalReceiptArtifactRecorded' | 'childSafety.legalProcessRecorded' | 'childSafety.falsePositiveCorrected' | 'user.ageAttested' | 'user.ageUpgradedToAdult' | 'user.orphanAuthDeleted' | 'user.accountClosedUnder13' | 'user.safetyLocked' | 'ncii.requestReceived' | 'ncii.requestSupplemented' | 'ncii.completenessDetermined' | 'ncii.validityDecided' | 'ncii.tempHoldPlaced' | 'ncii.tempHoldReleased' | 'ncii.removalCompleted' | 'ncii.removalUnableToComplete' | 'ncii.evidenceMarked' | 'ncii.evidenceScanValidatedMatch' | 'ncii.hashBlockReversed' | 'ncii.requesterPiiScrubbed' | 'ncii.policyConfigUpdated' | 'ncii.minorAssessmentSet' | 'ncii.crossoverLegReconciled' | 'safety.privilegedReauthPerformed' | 'safety.privilegedRawLocatorRead' | 'safety.deadlineBreachRecorded' | 'safety.reviewerCapabilityGranted' | 'safety.reviewerCapabilityRevoked';
+export type AuditEventType = 'artisanCreator.grantedToUser' | 'user.accountRegistered' | 'user.statusChanged' | 'user.accountSuspended' | 'user.accountBanned' | 'user.accountUnbanned' | 'user.displayNameResetForced' | 'user.displayNameChanged' | 'user.nonUsArtisanInterestRecorded' | 'account.deletionRequested' | 'account.deletionCancelled' | 'account.erasureCompleted' | 'account.erasureParkedOnHold' | 'account.erasureSuperseded' | 'admin.systemRoleGranted' | 'admin.systemRoleRevoked' | 'admin.systemRoleSyncedFromDirectEdit' | 'admin.contentAppealReviewed' | 'admin.thresholdItemReviewed' | 'admin.futurePlansUpdated' | 'admin.rulesAndAgreementsUpdated' | 'admin.termsPageUpdated' | 'admin.privacyPageUpdated' | 'admin.takeItDownPageCopyUpdated' | 'admin.reservedUsernamesSeeded' | 'admin.blockedFranchiseNamesSeeded' | 'admin.rulesAndAgreementsSeeded' | 'admin.futurePlansSeeded' | 'admin.termsPageSeeded' | 'admin.privacyPageSeeded' | 'admin.takeItDownPageCopySeeded' | 'admin.dispatchDeleted' | 'admin.shortLinkDeleted' | 'admin.trademarkChecked' | 'content.parodyDisclaimerApplied' | 'workProject.created' | 'workProject.guildmateUserGuildStandingChanged' | 'workProject.guildmateUserTradeProfessionsChanged' | 'workProject.guildMemberDeparted' | 'workProject.publicDetailsUpdated' | 'workProject.workAssetDeleted' | 'workProject.fileFolderCreated' | 'workProject.fileFolderRenamed' | 'workProject.fileFolderAccessChanged' | 'workProject.fileFolderDeleted' | 'workProject.guildInviteSent' | 'workProject.guildInviteAccepted' | 'workProject.guildInviteDeclined' | 'workProject.guildInviteCancelled' | 'workProject.guildInviteStakeSharesUpdated' | 'workProject.commissionListingCreated' | 'workProject.commissionProposalCreated' | 'workProject.commissionClosed' | 'workProject.commissionProposalSaveToggled' | 'workProject.commissionProposalRejected' | 'workProject.stakeSharesChanged' | 'workProject.stakeShares.created' | 'workProject.stakeShares.increased' | 'workProject.stakeShares.anomaly' | 'workFile.sharedToRealm' | 'workFile.realmCanonChanged' | 'workFile.unsharedFromRealm' | 'craftSkill.userCraftSkillDeleted' | 'craftSkill.hidden' | 'craftSkill.restored' | 'craftSkill.removed' | 'content.itemReported' | 'content.violationRecorded' | 'content.thresholdItemSubmitted' | 'content.thresholdItemWithdrawn' | 'content.hallItemPublished' | 'content.hallContentChangeRequestSubmitted' | 'admin.hallContentChangeRequestResolved' | 'content.appealSubmitted' | 'content.violationAccepted' | 'content.hidden' | 'content.restored' | 'content.removed' | 'content.taleDetailsUpdated' | 'content.taleWorkGenresUpdated' | 'content.chapterCreated' | 'content.chapterDetailsUpdated' | 'content.tuneDetailsUpdated' | 'content.tuneWorkGenresUpdated' | 'content.tuneTrackCreated' | 'content.tuneTrackDetailsUpdated' | 'content.televisionDetailsUpdated' | 'content.televisionWorkGenresUpdated' | 'content.televisionEpisodeCreated' | 'content.televisionEpisodeDetailsUpdated' | 'payment.sessionCreated' | 'payment.pledgePaymentCompleted' | 'payment.pledgePaymentAbandoned' | 'payment.pledgePaymentFailed' | 'payment.pledgePaymentQuarantined' | 'payment.pledgePaymentRefunded' | 'payment.pledgePaymentDisputeOpened' | 'payment.pledgePaymentDisputeClosed' | 'payment.pledgeRefundRequested' | 'payment.pledgeRefundRequestResolved' | 'payment.pledgeLedger.recorded' | 'payment.pledgeLedger.anomaly' | 'admin.taskCheckedOut' | 'admin.taskCheckedIn' | 'admin.taskReleased' | 'admin.taskAutoReleased' | 'admin.taskDeferredLater' | 'workProject.auditionCreated' | 'admin.auditionCreated' | 'audition.entryCreated' | 'audition.closedByUser' | 'audition.curatedBatchFailed' | 'system.manualIntervention' | 'system.appConfigUpdated' | 'admin.appModeFlipRecorded' | 'system.pendingMediaArchived' | 'system.orphanUploadsCleanedUp' | 'admin.profanityListSeeded' | 'admin.profanityListCurated' | 'social.squareStreetzPostLiked' | 'social.squareStreetzPostUnliked' | 'social.targetFollowed' | 'social.targetUnfollowed' | 'chat.guildChatChannelCreated' | 'chat.guildChatChannelUpdated' | 'chat.guildChatChannelArchived' | 'chat.guildChatChannelUnarchived' | 'chat.guildChatChannelDeleted' | 'chat.adminThreadStarted' | 'chat.adminThreadStatusChanged' | 'conversationFile.deleted' | 'chat.moderationActionRequested' | 'chat.moderationActionApplied' | 'chat.moderationActionFailed' | 'chat.moderationContextRead' | 'notification.broadcastSent' | 'notification.adminArchived' | 'workProject.released' | 'workProject.hidden' | 'workProject.restored' | 'workProject.moderationPlaceholderApplied' | 'workProject.moderationRetitleCleared' | 'workRealm.created' | 'workRealm.released' | 'workRealm.detailsUpdated' | 'workRealm.hidden' | 'workRealm.restored' | 'workRealm.moderationPlaceholderApplied' | 'workRealm.moderationRetitleCleared' | 'hallItem.moderationPlaceholderApplied' | 'report.childSafetyCaseOpened' | 'report.nciiCaseOpened' | 'childSafety.reportDispositionSet' | 'childSafety.holdPlaced' | 'childSafety.holdReleased' | 'childSafety.accountActionApplied' | 'childSafety.accountActionReverted' | 'childSafety.evidenceManifestCreated' | 'childSafety.evidenceDisposed' | 'childSafety.quarantineCompleted' | 'childSafety.ncmecSubmissionCompleted' | 'childSafety.ncmecPortalReceiptArtifactRecorded' | 'childSafety.legalProcessRecorded' | 'childSafety.falsePositiveCorrected' | 'user.ageAttested' | 'user.ageUpgradedToAdult' | 'user.orphanAuthDeleted' | 'user.accountClosedUnder13' | 'user.safetyLocked' | 'ncii.requestReceived' | 'ncii.requestSupplemented' | 'ncii.completenessDetermined' | 'ncii.validityDecided' | 'ncii.tempHoldPlaced' | 'ncii.tempHoldReleased' | 'ncii.removalCompleted' | 'ncii.removalUnableToComplete' | 'ncii.evidenceMarked' | 'ncii.evidenceScanValidatedMatch' | 'ncii.hashBlockReversed' | 'ncii.requesterPiiScrubbed' | 'ncii.policyConfigUpdated' | 'ncii.minorAssessmentSet' | 'ncii.crossoverLegReconciled' | 'safety.privilegedReauthPerformed' | 'safety.privilegedRawLocatorRead' | 'safety.deadlineBreachRecorded' | 'safety.reviewerCapabilityGranted' | 'safety.reviewerCapabilityRevoked';
 /**
  * How the actor was acting when the audited action was performed. This is
  * orthogonal to the event name — the same event type can be produced by

package/dist/types/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/types/audit.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,MAAM,MAAM,cAAc,GAEtB,8BAA8B,GAC9B,wBAAwB,GACxB,oBAAoB,GACpB,uBAAuB,GACvB,oBAAoB,GACpB,sBAAsB,GACtB,6BAA6B,GAC7B,yBAAyB,GACzB,mCAAmC,GAEnC,2BAA2B,GAC3B,2BAA2B,GAC3B,0BAA0B,GAC1B,6BAA6B,GAC7B,2BAA2B,GAE3B,yBAAyB,GACzB,yBAAyB,GACzB,sCAAsC,GACtC,6BAA6B,GAC7B,6BAA6B,GAC7B,0BAA0B,GAC1B,iCAAiC,GAEjC,wBAAwB,GACxB,0BAA0B,GAC1B,iCAAiC,GAEjC,+BAA+B,GAC/B,mCAAmC,GACnC,gCAAgC,GAChC,yBAAyB,GACzB,uBAAuB,GACvB,yBAAyB,GACzB,gCAAgC,GAGhC,uBAAuB,GACvB,wBAAwB,GAExB,wBAAwB,GACxB,iCAAiC,GAEjC,qBAAqB,GACrB,+CAA+C,GAC/C,kDAAkD,GAElD,iCAAiC,GACjC,kCAAkC,GAClC,8BAA8B,GAG9B,+BAA+B,GAC/B,+BAA+B,GAC/B,qCAAqC,GACrC,+BAA+B,GAC/B,6BAA6B,GAC7B,iCAAiC,GACjC,iCAAiC,GACjC,kCAAkC,GAClC,2CAA2C,GAC3C,sCAAsC,GACtC,uCAAuC,GACvC,8BAA8B,GAC9B,+BAA+B,GAC/B,2CAA2C,GAC3C,wCAAwC,GACxC,gCAAgC,GAChC,iCAAiC,GACjC,mCAAmC,GACnC,iCAAiC,GAEjC,wBAAwB,GACxB,4BAA4B,GAC5B,4BAA4B,GAE5B,kCAAkC,GAClC,mBAAmB,GACnB,qBAAqB,GACrB,oBAAoB,GAEpB,sBAAsB,GACtB,2BAA2B,GAC3B,gCAAgC,GAGhC,gCAAgC,GAChC,2BAA2B,GAG3B,2CAA2C,GAC3C,wCAAwC,GACxC,yBAAyB,GACzB,2BAA2B,GAC3B,gBAAgB,GAChB,kBAAkB,GAClB,iBAAiB,GAEjB,4BAA4B,GAC5B,+BAA+B,GAC/B,wBAAwB,GACxB,+BAA+B,GAC/B,4BAA4B,GAC5B,+BAA+B,GAC/B,0BAA0B,GAC1B,iCAAiC,GACjC,kCAAkC,GAClC,qCAAqC,GACrC,kCAAkC,GAClC,yCAAyC,GAEzC,wBAAwB,GACxB,gCAAgC,GAChC,gCAAgC,GAChC,6BAA6B,GAC7B,kCAAkC,GAIlC,+BAA+B,GAC/B,oCAAoC,GACpC,oCAAoC,GACpC,+BAA+B,GAC/B,qCAAqC,GAErC,+BAA+B,GAC/B,8BAA8B,GAE9B,sBAAsB,GACtB,qBAAqB,GACrB,oBAAoB,GACpB,wBAAwB,GACxB,yBAAyB,GAEzB,6BAA6B,GAC7B,uBAAuB,GACvB,uBAAuB,GACvB,uBAAuB,GAGvB,6BAA6B,GAE7B,2BAA2B,GAC3B,yBAAyB,GAGzB,2BAA2B,GAC3B,6BAA6B,GAC7B,+BAA+B,GAC/B,2BAA2B,GAC3B,4BAA4B,GAE5B,+BAA+B,GAC/B,iCAAiC,GACjC,uBAAuB,GACvB,yBAAyB,GAEzB,8BAA8B,GAC9B,8BAA8B,GAC9B,+BAA+B,GAC/B,iCAAiC,GACjC,8BAA8B,GAC9B,yBAAyB,GACzB,+BAA+B,GAG/B,0BAA0B,GAG1B,gCAAgC,GAChC,8BAA8B,GAC9B,6BAA6B,GAG7B,4BAA4B,GAI5B,4BAA4B,GAC5B,4BAA4B,GAE5B,sBAAsB,GACtB,oBAAoB,GACpB,sBAAsB,GACtB,0CAA0C,GAC1C,sCAAsC,GACtC,mBAAmB,GACnB,oBAAoB,GACpB,0BAA0B,GAC1B,kBAAkB,GAClB,oBAAoB,GACpB,wCAAwC,GACxC,oCAAoC,GAIpC,uCAAuC,GAEvC,8BAA8B,GAC9B,uBAAuB,GACvB,kCAAkC,GAClC,wBAAwB,GACxB,0BAA0B,GAC1B,kCAAkC,GAClC,mCAAmC,GACnC,qCAAqC,GACrC,8BAA8B,GAC9B,iCAAiC,GACjC,sCAAsC,GACtC,gDAAgD,GAChD,kCAAkC,GAClC,oCAAoC,GAEpC,kBAAkB,GAClB,yBAAyB,GACzB,wBAAwB,GACxB,2BAA2B,GAC3B,mBAAmB,GAEnB,sBAAsB,GACtB,0BAA0B,GAC1B,6BAA6B,GAC7B,sBAAsB,GACtB,qBAAqB,GACrB,uBAAuB,GACvB,uBAAuB,GACvB,8BAA8B,GAG9B,qBAAqB,GACrB,iCAAiC,GACjC,wBAAwB,GACxB,2BAA2B,GAC3B,0BAA0B,GAI1B,yBAAyB,GAGzB,6BAA6B,GAI7B,kCAAkC,GAKlC,iCAAiC,GACjC,+BAA+B,GAG/B,kCAAkC,GAClC,kCAAkC,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,eAAe,GACf,aAAa,GACb,eAAe,GACf,QAAQ,CAAC;AAEb;;6DAE6D;AAC7D,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF;;;;kCAIkC;AAClC,MAAM,MAAM,aAAa,GACrB,CAAC,iBAAiB,GAAG;IACnB,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,QAAQ,CAAC;IAC/C,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB,CAAC,GACF,CAAC,iBAAiB,GAAG;IACnB,SAAS,EAAE,aAAa,GAAG,eAAe,CAAC;IAC3C,UAAU,EAAE,OAAO,GAAG,SAAS,CAAC;CACjC,CAAC,CAAC;AAEP;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG;IAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,UAAU,CACpC,cAAc,EACd,aAAa,EACb,cAAc,EACd,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CACxB,CAAC"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/types/audit.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,MAAM,MAAM,cAAc,GAEtB,8BAA8B,GAC9B,wBAAwB,GACxB,oBAAoB,GACpB,uBAAuB,GACvB,oBAAoB,GACpB,sBAAsB,GACtB,6BAA6B,GAC7B,yBAAyB,GACzB,mCAAmC,GAEnC,2BAA2B,GAC3B,2BAA2B,GAC3B,0BAA0B,GAC1B,6BAA6B,GAC7B,2BAA2B,GAE3B,yBAAyB,GACzB,yBAAyB,GACzB,sCAAsC,GACtC,6BAA6B,GAC7B,6BAA6B,GAC7B,0BAA0B,GAC1B,iCAAiC,GAEjC,wBAAwB,GACxB,0BAA0B,GAC1B,iCAAiC,GAEjC,+BAA+B,GAC/B,mCAAmC,GACnC,gCAAgC,GAChC,yBAAyB,GACzB,uBAAuB,GACvB,yBAAyB,GACzB,gCAAgC,GAGhC,uBAAuB,GACvB,wBAAwB,GAExB,wBAAwB,GACxB,iCAAiC,GAEjC,qBAAqB,GACrB,+CAA+C,GAC/C,kDAAkD,GAElD,iCAAiC,GACjC,kCAAkC,GAClC,8BAA8B,GAG9B,+BAA+B,GAC/B,+BAA+B,GAC/B,qCAAqC,GACrC,+BAA+B,GAC/B,6BAA6B,GAC7B,iCAAiC,GACjC,iCAAiC,GACjC,kCAAkC,GAClC,2CAA2C,GAC3C,sCAAsC,GACtC,uCAAuC,GACvC,8BAA8B,GAC9B,2CAA2C,GAC3C,wCAAwC,GACxC,gCAAgC,GAChC,iCAAiC,GACjC,mCAAmC,GACnC,iCAAiC,GAEjC,wBAAwB,GACxB,4BAA4B,GAC5B,4BAA4B,GAE5B,kCAAkC,GAClC,mBAAmB,GACnB,qBAAqB,GACrB,oBAAoB,GAEpB,sBAAsB,GACtB,2BAA2B,GAC3B,gCAAgC,GAGhC,gCAAgC,GAChC,2BAA2B,GAG3B,2CAA2C,GAC3C,wCAAwC,GACxC,yBAAyB,GACzB,2BAA2B,GAC3B,gBAAgB,GAChB,kBAAkB,GAClB,iBAAiB,GAEjB,4BAA4B,GAC5B,+BAA+B,GAC/B,wBAAwB,GACxB,+BAA+B,GAC/B,4BAA4B,GAC5B,+BAA+B,GAC/B,0BAA0B,GAC1B,iCAAiC,GACjC,kCAAkC,GAClC,qCAAqC,GACrC,kCAAkC,GAClC,yCAAyC,GAEzC,wBAAwB,GACxB,gCAAgC,GAChC,gCAAgC,GAChC,6BAA6B,GAC7B,kCAAkC,GAIlC,+BAA+B,GAC/B,oCAAoC,GACpC,oCAAoC,GACpC,+BAA+B,GAC/B,qCAAqC,GAErC,+BAA+B,GAC/B,8BAA8B,GAE9B,sBAAsB,GACtB,qBAAqB,GACrB,oBAAoB,GACpB,wBAAwB,GACxB,yBAAyB,GAEzB,6BAA6B,GAC7B,uBAAuB,GACvB,uBAAuB,GACvB,uBAAuB,GAGvB,6BAA6B,GAE7B,2BAA2B,GAC3B,yBAAyB,GAGzB,2BAA2B,GAC3B,6BAA6B,GAC7B,+BAA+B,GAC/B,2BAA2B,GAC3B,4BAA4B,GAE5B,+BAA+B,GAC/B,iCAAiC,GACjC,uBAAuB,GACvB,yBAAyB,GAEzB,8BAA8B,GAC9B,8BAA8B,GAC9B,+BAA+B,GAC/B,iCAAiC,GACjC,8BAA8B,GAC9B,yBAAyB,GACzB,+BAA+B,GAG/B,0BAA0B,GAG1B,gCAAgC,GAChC,8BAA8B,GAC9B,6BAA6B,GAG7B,4BAA4B,GAI5B,4BAA4B,GAC5B,4BAA4B,GAE5B,sBAAsB,GACtB,oBAAoB,GACpB,sBAAsB,GACtB,0CAA0C,GAC1C,sCAAsC,GACtC,mBAAmB,GACnB,oBAAoB,GACpB,0BAA0B,GAC1B,kBAAkB,GAClB,oBAAoB,GACpB,wCAAwC,GACxC,oCAAoC,GAIpC,uCAAuC,GAEvC,8BAA8B,GAC9B,uBAAuB,GACvB,kCAAkC,GAClC,wBAAwB,GACxB,0BAA0B,GAC1B,kCAAkC,GAClC,mCAAmC,GACnC,qCAAqC,GACrC,8BAA8B,GAC9B,iCAAiC,GACjC,sCAAsC,GACtC,gDAAgD,GAChD,kCAAkC,GAClC,oCAAoC,GAEpC,kBAAkB,GAClB,yBAAyB,GACzB,wBAAwB,GACxB,2BAA2B,GAC3B,mBAAmB,GAEnB,sBAAsB,GACtB,0BAA0B,GAC1B,6BAA6B,GAC7B,sBAAsB,GACtB,qBAAqB,GACrB,uBAAuB,GACvB,uBAAuB,GACvB,8BAA8B,GAG9B,qBAAqB,GACrB,iCAAiC,GACjC,wBAAwB,GACxB,2BAA2B,GAC3B,0BAA0B,GAI1B,yBAAyB,GAGzB,6BAA6B,GAI7B,kCAAkC,GAKlC,iCAAiC,GACjC,+BAA+B,GAG/B,kCAAkC,GAClC,kCAAkC,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,eAAe,GACf,aAAa,GACb,eAAe,GACf,QAAQ,CAAC;AAEb;;6DAE6D;AAC7D,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF;;;;kCAIkC;AAClC,MAAM,MAAM,aAAa,GACrB,CAAC,iBAAiB,GAAG;IACnB,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,QAAQ,CAAC;IAC/C,UAAU,CAAC,EAAE,KAAK,CAAC;CACpB,CAAC,GACF,CAAC,iBAAiB,GAAG;IACnB,SAAS,EAAE,aAAa,GAAG,eAAe,CAAC;IAC3C,UAAU,EAAE,OAAO,GAAG,SAAS,CAAC;CACjC,CAAC,CAAC;AAEP;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG;IAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,UAAU,CACpC,cAAc,EACd,aAAa,EACb,cAAc,EACd,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CACxB,CAAC"}

package/dist/types/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/types/audit.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,oEAAoE;AACpE,yEAAyE;AACzE,sEAAsE;AACtE,4DAA4D;AAC5D,EAAE;AACF,wEAAwE;AACxE,qBAAqB","sourcesContent":["// TTT audit event catalog. The `AuditEventType` union is the canonical list\n// of all sensitive actions the system logs. The `TTTAuditActor` and\n// `TTTAuditTarget` shapes describe who performed the action and what was\n// affected. `TTTAuditEvent` specializes the generic `AuditEvent` from\n// @ttt-productions/audit-core with the TTT-specific shapes.\n//\n// Backend writers and future native/TV/console readers all consume this\n// catalog from here.\n\nimport type { AuditEvent } from '@ttt-productions/audit-core';\n\nexport type AuditEventType =\n  // user status\n  | 'artisanCreator.grantedToUser'\n  | 'user.accountRegistered'\n  | 'user.statusChanged'\n  | 'user.accountSuspended'\n  | 'user.accountBanned'\n  | 'user.accountUnbanned'\n  | 'user.displayNameResetForced'\n  | 'user.displayNameChanged'\n  | 'user.nonUsArtisanInterestRecorded'\n  // account deletion / GDPR erasure (N3)\n  | 'account.deletionRequested'\n  | 'account.deletionCancelled'\n  | 'account.erasureCompleted'\n  | 'account.erasureParkedOnHold'\n  | 'account.erasureSuperseded'\n  // admin actions\n  | 'admin.systemRoleGranted'\n  | 'admin.systemRoleRevoked'\n  | 'admin.systemRoleSyncedFromDirectEdit'\n  | 'admin.contentAppealReviewed'\n  | 'admin.thresholdItemReviewed'\n  | 'admin.futurePlansUpdated'\n  | 'admin.rulesAndAgreementsUpdated'\n  // content-pages migration (DJ ruling 2026-07-06): per-page admin editors\n  | 'admin.termsPageUpdated'\n  | 'admin.privacyPageUpdated'\n  | 'admin.takeItDownPageCopyUpdated'\n  // admin launch-seed actions (Ready for Launch tab)\n  | 'admin.reservedUsernamesSeeded'\n  | 'admin.blockedFranchiseNamesSeeded'\n  | 'admin.rulesAndAgreementsSeeded'\n  | 'admin.futurePlansSeeded'\n  | 'admin.termsPageSeeded'\n  | 'admin.privacyPageSeeded'\n  | 'admin.takeItDownPageCopySeeded'\n  // admin direct-delete callables (replaced the last two direct-SDK admin-browser deletes):\n  // deleteAdminDispatch (support thread + its conversationMessages) and deleteShortLink.\n  | 'admin.dispatchDeleted'\n  | 'admin.shortLinkDeleted'\n  // trademark-assist (advisory check at approval) + parody/real-people disclaimer baked at approval\n  | 'admin.trademarkChecked'\n  | 'content.parodyDisclaimerApplied'\n  // workProject\n  | 'workProject.created'\n  | 'workProject.guildmateUserGuildStandingChanged'\n  | 'workProject.guildmateUserTradeProfessionsChanged'\n  // Member self-leave (leaveWorkProject) — pre-publish voluntary exit, shares forfeited to the pool.\n  | 'workProject.guildMemberDeparted'\n  | 'workProject.publicDetailsUpdated'\n  | 'workProject.workAssetDeleted'\n  // work-file folders (S7). fileFolderAccessChanged is an ACL change (folder trade-profession\n  // view/upload/delete lists gate custom-folder confidentiality) — audited with before/after lists.\n  | 'workProject.fileFolderCreated'\n  | 'workProject.fileFolderRenamed'\n  | 'workProject.fileFolderAccessChanged'\n  | 'workProject.fileFolderDeleted'\n  | 'workProject.guildInviteSent'\n  | 'workProject.guildInviteAccepted'\n  | 'workProject.guildInviteDeclined'\n  | 'workProject.guildInviteCancelled'\n  | 'workProject.guildInviteStakeSharesUpdated'\n  | 'workProject.commissionListingCreated'\n  | 'workProject.commissionProposalCreated'\n  | 'workProject.commissionClosed'\n  | 'workProject.commissionDeleted'\n  | 'workProject.commissionProposalSaveToggled'\n  | 'workProject.commissionProposalRejected'\n  | 'workProject.stakeSharesChanged'\n  | 'workProject.stakeShares.created'\n  | 'workProject.stakeShares.increased'\n  | 'workProject.stakeShares.anomaly'\n  // realm shared files — a work file promoted into its realm's shared pool + canon toggles + un-share\n  | 'workFile.sharedToRealm'\n  | 'workFile.realmCanonChanged'\n  | 'workFile.unsharedFromRealm'\n  // craft-skills\n  | 'craftSkill.userCraftSkillDeleted'\n  | 'craftSkill.hidden'\n  | 'craftSkill.restored'\n  | 'craftSkill.removed'\n  // content\n  | 'content.itemReported'\n  | 'content.violationRecorded'\n  | 'content.thresholdItemSubmitted'\n  // Member-initiated pull-back of a still-pending threshold submission (withdraw callable —\n  // deletes the threshold doc + admin task, flips the live sub-item back to unpublished).\n  | 'content.thresholdItemWithdrawn'\n  | 'content.hallItemPublished'\n  // Published change requests (text-only at launch): a member proposes new text-field values\n  // for a PUBLISHED hall item; an admin approves (server writes values in place) or denies.\n  | 'content.hallContentChangeRequestSubmitted'\n  | 'admin.hallContentChangeRequestResolved'\n  | 'content.appealSubmitted'\n  | 'content.violationAccepted'\n  | 'content.hidden'\n  | 'content.restored'\n  | 'content.removed'\n  // content (workProject content)\n  | 'content.taleDetailsUpdated'\n  | 'content.taleWorkGenresUpdated'\n  | 'content.chapterCreated'\n  | 'content.chapterDetailsUpdated'\n  | 'content.tuneDetailsUpdated'\n  | 'content.tuneWorkGenresUpdated'\n  | 'content.tuneTrackCreated'\n  | 'content.tuneTrackDetailsUpdated'\n  | 'content.televisionDetailsUpdated'\n  | 'content.televisionWorkGenresUpdated'\n  | 'content.televisionEpisodeCreated'\n  | 'content.televisionEpisodeDetailsUpdated'\n  // money\n  | 'payment.sessionCreated'\n  | 'payment.pledgePaymentCompleted'\n  | 'payment.pledgePaymentAbandoned'\n  | 'payment.pledgePaymentFailed'\n  | 'payment.pledgePaymentQuarantined'\n  // money — refund + dispute lifecycle (post-launch handlers; types added now to avoid a\n  // second package publish). Refund REQUESTS are the user-initiated ask; the refund itself is\n  // the money movement. Disputes are Stripe-initiated (chargeback) open/close.\n  | 'payment.pledgePaymentRefunded'\n  | 'payment.pledgePaymentDisputeOpened'\n  | 'payment.pledgePaymentDisputeClosed'\n  | 'payment.pledgeRefundRequested'\n  | 'payment.pledgeRefundRequestResolved'\n  // money — independent ledger-integrity trigger (mirrors workProject.stakeShares.*)\n  | 'payment.pledgeLedger.recorded'\n  | 'payment.pledgeLedger.anomaly'\n  // admin task lifecycle\n  | 'admin.taskCheckedOut'\n  | 'admin.taskCheckedIn'\n  | 'admin.taskReleased'\n  | 'admin.taskAutoReleased'\n  | 'admin.taskDeferredLater'\n  // audition\n  | 'workProject.auditionCreated'\n  | 'admin.auditionCreated'\n  | 'audition.entryCreated'\n  | 'audition.closedByUser'\n  // system-actor event: a curated audition's option batch failed to assemble (media\n  // rejection) and its curatedAssemblyStatus flipped to 'failed' (runFailCuratedAudition).\n  | 'audition.curatedBatchFailed'\n  // system\n  | 'system.manualIntervention'\n  | 'system.appConfigUpdated'\n  // records (never controls) a charter↔full APP_MODE flip after deploy — written\n  // by the idempotent recordAppModeFlip admin callable\n  | 'admin.appModeFlipRecorded'\n  | 'system.pendingMediaArchived'\n  | 'system.orphanUploadsCleanedUp'\n  | 'admin.profanityListSeeded'\n  | 'admin.profanityListCurated'\n  // social\n  | 'social.squareStreetzPostLiked'\n  | 'social.squareStreetzPostUnliked'\n  | 'social.targetFollowed'\n  | 'social.targetUnfollowed'\n  // chat\n  | 'chat.guildChatChannelCreated'\n  | 'chat.guildChatChannelUpdated'\n  | 'chat.guildChatChannelArchived'\n  | 'chat.guildChatChannelUnarchived'\n  | 'chat.guildChatChannelDeleted'\n  | 'chat.adminThreadStarted'\n  | 'chat.adminThreadStatusChanged'\n  // conversation files — every successful delete is audited with UID references and\n  // canonical resource ids (the conversation ref, conversationFileId, mediaAssetId).\n  | 'conversationFile.deleted'\n  // chat moderation (DO-owned hide/delete via chatAdminActionCommands) — append-only,\n  // deterministic ids hash('chat-moderation-{requested,applied,failed}', requestId, …).\n  | 'chat.moderationActionRequested'\n  | 'chat.moderationActionApplied'\n  | 'chat.moderationActionFailed'\n  // case-bound admin context read (read-on-demand, REVIEW-ONLY) — audits the request\n  // AND outcome; one event per read keyed deterministically by the read's requestId.\n  | 'chat.moderationContextRead'\n  // notification (admin-only). Actor mode is always adminReview / adminOverride.\n  // Payload shapes: NotificationBroadcastSentAuditMetadata /\n  // NotificationAdminArchivedAuditMetadata in ../schemas/notification.ts.\n  | 'notification.broadcastSent'\n  | 'notification.adminArchived'\n  // workProject\n  | 'workProject.released'\n  | 'workProject.hidden'\n  | 'workProject.restored'\n  | 'workProject.moderationPlaceholderApplied'\n  | 'workProject.moderationRetitleCleared'\n  | 'workRealm.created'\n  | 'workRealm.released'\n  | 'workRealm.detailsUpdated'\n  | 'workRealm.hidden'\n  | 'workRealm.restored'\n  | 'workRealm.moderationPlaceholderApplied'\n  | 'workRealm.moderationRetitleCleared'\n  // hall-content moderation text-clear remedy (extends the workProject/workRealm placeholder\n  // family across Tale/Tune/Television details + their chapter/track/episode sub-items and the\n  // published Hall projections). Same past-tense placeholder-applied shape as the pair above.\n  | 'hallItem.moderationPlaceholderApplied'\n  // trust & safety — child safety / CSAM\n  | 'report.childSafetyCaseOpened'\n  | 'report.nciiCaseOpened'\n  | 'childSafety.reportDispositionSet'\n  | 'childSafety.holdPlaced'\n  | 'childSafety.holdReleased'\n  | 'childSafety.accountActionApplied'\n  | 'childSafety.accountActionReverted'\n  | 'childSafety.evidenceManifestCreated'\n  | 'childSafety.evidenceDisposed'\n  | 'childSafety.quarantineCompleted'\n  | 'childSafety.ncmecSubmissionCompleted'\n  | 'childSafety.ncmecPortalReceiptArtifactRecorded'\n  | 'childSafety.legalProcessRecorded'\n  | 'childSafety.falsePositiveCorrected'\n  // trust & safety — age / registration\n  | 'user.ageAttested'\n  | 'user.ageUpgradedToAdult'\n  | 'user.orphanAuthDeleted'\n  | 'user.accountClosedUnder13'\n  | 'user.safetyLocked'\n  // trust & safety — NCII / TAKE IT DOWN\n  | 'ncii.requestReceived'\n  | 'ncii.requestSupplemented'\n  | 'ncii.completenessDetermined'\n  | 'ncii.validityDecided'\n  | 'ncii.tempHoldPlaced'\n  | 'ncii.tempHoldReleased'\n  | 'ncii.removalCompleted'\n  | 'ncii.removalUnableToComplete'\n  // operator marks NCII evidence (e.g. flags/annotates an evidence item on the case) — a reviewed\n  // evidence-handling action, audited like the other ncii evidence events.\n  | 'ncii.evidenceMarked'\n  | 'ncii.evidenceScanValidatedMatch'\n  | 'ncii.hashBlockReversed'\n  | 'ncii.requesterPiiScrubbed'\n  | 'ncii.policyConfigUpdated'\n  // operator sets the child-safety crossover minorAssessment on an NCII case (e.g. → possibleMinor):\n  // routing action that opens/links a PARALLEL child-safety review + deny-serving + PhotoDNA, WITHOUT\n  // touching the NCII removal clock and WITHOUT auto-NCMEC. Payload records from→to assessment.\n  | 'ncii.minorAssessmentSet'\n  // [H-2] a failed possible-minor crossover leg (serving-deny / PhotoDNA) was reconciled or replayed\n  // by an operator/reconciler (crossoverLegs.<leg> failed → done). Payload records which leg + outcome.\n  | 'ncii.crossoverLegReconciled'\n  // trust & safety — operator security\n  // Passkey enrollment/assertion reuses safety.privilegedReauthPerformed (the reauth catalog entry, as\n  // the TOTP step-up enroll/confirm/verify phases already do) — no distinct passkey-registration type.\n  | 'safety.privilegedReauthPerformed'\n  // [P2-08] A privileged operator read of a TAKE IT DOWN request's RAW target locator (the\n  // reveal-on-demand, review-only read of the sensitive locator itself — distinct from the\n  // reveal reauth above, which is the step-up). One event per read. Mirrors the\n  // chat.moderationContextRead privileged-read convention.\n  | 'safety.privilegedRawLocatorRead'\n  | 'safety.deadlineBreachRecorded'\n  // [M-6] per-operator reviewer-capability grant lifecycle (privilegedReviewerCapabilityGrants/{uid}).\n  // Granting/revoking a SafetyReviewerCapability is an authorization change — always audited.\n  | 'safety.reviewerCapabilityGranted'\n  | 'safety.reviewerCapabilityRevoked';\n\n/**\n * How the actor was acting when the audited action was performed. This is\n * orthogonal to the event name — the same event type can be produced by\n * different actor modes (e.g. a normal member vs. an admin override).\n *\n * - 'user'          — authenticated action not tied to project membership\n * - 'projectMember' — acting through normal Work/project (guild standing) permissions\n * - 'adminReview'   — admin queue/support work on admin surfaces (no project-permission concept)\n * - 'adminOverride' — system-admin authority superseding normal user/project permission\n * - 'system'        — backend automation: trigger, scheduled job, migration, media pipeline\n */\nexport type TTTAuditActorMode =\n  | 'user'\n  | 'projectMember'\n  | 'adminReview'\n  | 'adminOverride'\n  | 'system';\n\n/** Fields common to every audited actor regardless of mode. `isAdmin` is\n * claim-present metadata only — it records that the caller held an admin\n * claim at the time, NOT that the action was an override. */\nexport type TTTAuditActorBase = {\n  uid: string | null;\n  isAdmin: boolean;\n};\n\n/** TTT actor shape, discriminated on `actorMode`. The admin system role is\n * REQUIRED on admin modes (adminReview / adminOverride) and FORBIDDEN on\n * non-admin modes (user / projectMember / system) — so an admin action can\n * never be audited without recording full-vs-jr, and a non-admin action can\n * never carry a spurious role. */\nexport type TTTAuditActor =\n  | (TTTAuditActorBase & {\n      actorMode: 'user' | 'projectMember' | 'system';\n      systemRole?: never;\n    })\n  | (TTTAuditActorBase & {\n      actorMode: 'adminReview' | 'adminOverride';\n      systemRole: 'admin' | 'jrAdmin';\n    });\n\n/**\n * TTT target shape: the uid the audited action affects (if any), plus the\n * Firestore path of the affected document (if any).\n */\nexport type TTTAuditTarget = { uid: string | null; ref: string | null };\n\n/**\n * The canonical TTT audit event document shape. Specializes the generic\n * `AuditEvent` from @ttt-productions/audit-core with the TTT event-type\n * union, actor shape, target shape, and a generic metadata bag.\n */\nexport type TTTAuditEvent = AuditEvent<\n  AuditEventType,\n  TTTAuditActor,\n  TTTAuditTarget,\n  Record<string, unknown>\n>;\n\n"]}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/types/audit.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,oEAAoE;AACpE,yEAAyE;AACzE,sEAAsE;AACtE,4DAA4D;AAC5D,EAAE;AACF,wEAAwE;AACxE,qBAAqB","sourcesContent":["// TTT audit event catalog. The `AuditEventType` union is the canonical list\n// of all sensitive actions the system logs. The `TTTAuditActor` and\n// `TTTAuditTarget` shapes describe who performed the action and what was\n// affected. `TTTAuditEvent` specializes the generic `AuditEvent` from\n// @ttt-productions/audit-core with the TTT-specific shapes.\n//\n// Backend writers and future native/TV/console readers all consume this\n// catalog from here.\n\nimport type { AuditEvent } from '@ttt-productions/audit-core';\n\nexport type AuditEventType =\n  // user status\n  | 'artisanCreator.grantedToUser'\n  | 'user.accountRegistered'\n  | 'user.statusChanged'\n  | 'user.accountSuspended'\n  | 'user.accountBanned'\n  | 'user.accountUnbanned'\n  | 'user.displayNameResetForced'\n  | 'user.displayNameChanged'\n  | 'user.nonUsArtisanInterestRecorded'\n  // account deletion / GDPR erasure (N3)\n  | 'account.deletionRequested'\n  | 'account.deletionCancelled'\n  | 'account.erasureCompleted'\n  | 'account.erasureParkedOnHold'\n  | 'account.erasureSuperseded'\n  // admin actions\n  | 'admin.systemRoleGranted'\n  | 'admin.systemRoleRevoked'\n  | 'admin.systemRoleSyncedFromDirectEdit'\n  | 'admin.contentAppealReviewed'\n  | 'admin.thresholdItemReviewed'\n  | 'admin.futurePlansUpdated'\n  | 'admin.rulesAndAgreementsUpdated'\n  // content-pages migration (DJ ruling 2026-07-06): per-page admin editors\n  | 'admin.termsPageUpdated'\n  | 'admin.privacyPageUpdated'\n  | 'admin.takeItDownPageCopyUpdated'\n  // admin launch-seed actions (Ready for Launch tab)\n  | 'admin.reservedUsernamesSeeded'\n  | 'admin.blockedFranchiseNamesSeeded'\n  | 'admin.rulesAndAgreementsSeeded'\n  | 'admin.futurePlansSeeded'\n  | 'admin.termsPageSeeded'\n  | 'admin.privacyPageSeeded'\n  | 'admin.takeItDownPageCopySeeded'\n  // admin direct-delete callables (replaced the last two direct-SDK admin-browser deletes):\n  // deleteAdminDispatch (support thread + its conversationMessages) and deleteShortLink.\n  | 'admin.dispatchDeleted'\n  | 'admin.shortLinkDeleted'\n  // trademark-assist (advisory check at approval) + parody/real-people disclaimer baked at approval\n  | 'admin.trademarkChecked'\n  | 'content.parodyDisclaimerApplied'\n  // workProject\n  | 'workProject.created'\n  | 'workProject.guildmateUserGuildStandingChanged'\n  | 'workProject.guildmateUserTradeProfessionsChanged'\n  // Member self-leave (leaveWorkProject) — pre-publish voluntary exit, shares forfeited to the pool.\n  | 'workProject.guildMemberDeparted'\n  | 'workProject.publicDetailsUpdated'\n  | 'workProject.workAssetDeleted'\n  // work-file folders (S7). fileFolderAccessChanged is an ACL change (folder trade-profession\n  // view/upload/delete lists gate custom-folder confidentiality) — audited with before/after lists.\n  | 'workProject.fileFolderCreated'\n  | 'workProject.fileFolderRenamed'\n  | 'workProject.fileFolderAccessChanged'\n  | 'workProject.fileFolderDeleted'\n  | 'workProject.guildInviteSent'\n  | 'workProject.guildInviteAccepted'\n  | 'workProject.guildInviteDeclined'\n  | 'workProject.guildInviteCancelled'\n  | 'workProject.guildInviteStakeSharesUpdated'\n  | 'workProject.commissionListingCreated'\n  | 'workProject.commissionProposalCreated'\n  | 'workProject.commissionClosed'\n  | 'workProject.commissionProposalSaveToggled'\n  | 'workProject.commissionProposalRejected'\n  | 'workProject.stakeSharesChanged'\n  | 'workProject.stakeShares.created'\n  | 'workProject.stakeShares.increased'\n  | 'workProject.stakeShares.anomaly'\n  // realm shared files — a work file promoted into its realm's shared pool + canon toggles + un-share\n  | 'workFile.sharedToRealm'\n  | 'workFile.realmCanonChanged'\n  | 'workFile.unsharedFromRealm'\n  // craft-skills\n  | 'craftSkill.userCraftSkillDeleted'\n  | 'craftSkill.hidden'\n  | 'craftSkill.restored'\n  | 'craftSkill.removed'\n  // content\n  | 'content.itemReported'\n  | 'content.violationRecorded'\n  | 'content.thresholdItemSubmitted'\n  // Member-initiated pull-back of a still-pending threshold submission (withdraw callable —\n  // deletes the threshold doc + admin task, flips the live sub-item back to unpublished).\n  | 'content.thresholdItemWithdrawn'\n  | 'content.hallItemPublished'\n  // Published change requests (text-only at launch): a member proposes new text-field values\n  // for a PUBLISHED hall item; an admin approves (server writes values in place) or denies.\n  | 'content.hallContentChangeRequestSubmitted'\n  | 'admin.hallContentChangeRequestResolved'\n  | 'content.appealSubmitted'\n  | 'content.violationAccepted'\n  | 'content.hidden'\n  | 'content.restored'\n  | 'content.removed'\n  // content (workProject content)\n  | 'content.taleDetailsUpdated'\n  | 'content.taleWorkGenresUpdated'\n  | 'content.chapterCreated'\n  | 'content.chapterDetailsUpdated'\n  | 'content.tuneDetailsUpdated'\n  | 'content.tuneWorkGenresUpdated'\n  | 'content.tuneTrackCreated'\n  | 'content.tuneTrackDetailsUpdated'\n  | 'content.televisionDetailsUpdated'\n  | 'content.televisionWorkGenresUpdated'\n  | 'content.televisionEpisodeCreated'\n  | 'content.televisionEpisodeDetailsUpdated'\n  // money\n  | 'payment.sessionCreated'\n  | 'payment.pledgePaymentCompleted'\n  | 'payment.pledgePaymentAbandoned'\n  | 'payment.pledgePaymentFailed'\n  | 'payment.pledgePaymentQuarantined'\n  // money — refund + dispute lifecycle (post-launch handlers; types added now to avoid a\n  // second package publish). Refund REQUESTS are the user-initiated ask; the refund itself is\n  // the money movement. Disputes are Stripe-initiated (chargeback) open/close.\n  | 'payment.pledgePaymentRefunded'\n  | 'payment.pledgePaymentDisputeOpened'\n  | 'payment.pledgePaymentDisputeClosed'\n  | 'payment.pledgeRefundRequested'\n  | 'payment.pledgeRefundRequestResolved'\n  // money — independent ledger-integrity trigger (mirrors workProject.stakeShares.*)\n  | 'payment.pledgeLedger.recorded'\n  | 'payment.pledgeLedger.anomaly'\n  // admin task lifecycle\n  | 'admin.taskCheckedOut'\n  | 'admin.taskCheckedIn'\n  | 'admin.taskReleased'\n  | 'admin.taskAutoReleased'\n  | 'admin.taskDeferredLater'\n  // audition\n  | 'workProject.auditionCreated'\n  | 'admin.auditionCreated'\n  | 'audition.entryCreated'\n  | 'audition.closedByUser'\n  // system-actor event: a curated audition's option batch failed to assemble (media\n  // rejection) and its curatedAssemblyStatus flipped to 'failed' (runFailCuratedAudition).\n  | 'audition.curatedBatchFailed'\n  // system\n  | 'system.manualIntervention'\n  | 'system.appConfigUpdated'\n  // records (never controls) a charter↔full APP_MODE flip after deploy — written\n  // by the idempotent recordAppModeFlip admin callable\n  | 'admin.appModeFlipRecorded'\n  | 'system.pendingMediaArchived'\n  | 'system.orphanUploadsCleanedUp'\n  | 'admin.profanityListSeeded'\n  | 'admin.profanityListCurated'\n  // social\n  | 'social.squareStreetzPostLiked'\n  | 'social.squareStreetzPostUnliked'\n  | 'social.targetFollowed'\n  | 'social.targetUnfollowed'\n  // chat\n  | 'chat.guildChatChannelCreated'\n  | 'chat.guildChatChannelUpdated'\n  | 'chat.guildChatChannelArchived'\n  | 'chat.guildChatChannelUnarchived'\n  | 'chat.guildChatChannelDeleted'\n  | 'chat.adminThreadStarted'\n  | 'chat.adminThreadStatusChanged'\n  // conversation files — every successful delete is audited with UID references and\n  // canonical resource ids (the conversation ref, conversationFileId, mediaAssetId).\n  | 'conversationFile.deleted'\n  // chat moderation (DO-owned hide/delete via chatAdminActionCommands) — append-only,\n  // deterministic ids hash('chat-moderation-{requested,applied,failed}', requestId, …).\n  | 'chat.moderationActionRequested'\n  | 'chat.moderationActionApplied'\n  | 'chat.moderationActionFailed'\n  // case-bound admin context read (read-on-demand, REVIEW-ONLY) — audits the request\n  // AND outcome; one event per read keyed deterministically by the read's requestId.\n  | 'chat.moderationContextRead'\n  // notification (admin-only). Actor mode is always adminReview / adminOverride.\n  // Payload shapes: NotificationBroadcastSentAuditMetadata /\n  // NotificationAdminArchivedAuditMetadata in ../schemas/notification.ts.\n  | 'notification.broadcastSent'\n  | 'notification.adminArchived'\n  // workProject\n  | 'workProject.released'\n  | 'workProject.hidden'\n  | 'workProject.restored'\n  | 'workProject.moderationPlaceholderApplied'\n  | 'workProject.moderationRetitleCleared'\n  | 'workRealm.created'\n  | 'workRealm.released'\n  | 'workRealm.detailsUpdated'\n  | 'workRealm.hidden'\n  | 'workRealm.restored'\n  | 'workRealm.moderationPlaceholderApplied'\n  | 'workRealm.moderationRetitleCleared'\n  // hall-content moderation text-clear remedy (extends the workProject/workRealm placeholder\n  // family across Tale/Tune/Television details + their chapter/track/episode sub-items and the\n  // published Hall projections). Same past-tense placeholder-applied shape as the pair above.\n  | 'hallItem.moderationPlaceholderApplied'\n  // trust & safety — child safety / CSAM\n  | 'report.childSafetyCaseOpened'\n  | 'report.nciiCaseOpened'\n  | 'childSafety.reportDispositionSet'\n  | 'childSafety.holdPlaced'\n  | 'childSafety.holdReleased'\n  | 'childSafety.accountActionApplied'\n  | 'childSafety.accountActionReverted'\n  | 'childSafety.evidenceManifestCreated'\n  | 'childSafety.evidenceDisposed'\n  | 'childSafety.quarantineCompleted'\n  | 'childSafety.ncmecSubmissionCompleted'\n  | 'childSafety.ncmecPortalReceiptArtifactRecorded'\n  | 'childSafety.legalProcessRecorded'\n  | 'childSafety.falsePositiveCorrected'\n  // trust & safety — age / registration\n  | 'user.ageAttested'\n  | 'user.ageUpgradedToAdult'\n  | 'user.orphanAuthDeleted'\n  | 'user.accountClosedUnder13'\n  | 'user.safetyLocked'\n  // trust & safety — NCII / TAKE IT DOWN\n  | 'ncii.requestReceived'\n  | 'ncii.requestSupplemented'\n  | 'ncii.completenessDetermined'\n  | 'ncii.validityDecided'\n  | 'ncii.tempHoldPlaced'\n  | 'ncii.tempHoldReleased'\n  | 'ncii.removalCompleted'\n  | 'ncii.removalUnableToComplete'\n  // operator marks NCII evidence (e.g. flags/annotates an evidence item on the case) — a reviewed\n  // evidence-handling action, audited like the other ncii evidence events.\n  | 'ncii.evidenceMarked'\n  | 'ncii.evidenceScanValidatedMatch'\n  | 'ncii.hashBlockReversed'\n  | 'ncii.requesterPiiScrubbed'\n  | 'ncii.policyConfigUpdated'\n  // operator sets the child-safety crossover minorAssessment on an NCII case (e.g. → possibleMinor):\n  // routing action that opens/links a PARALLEL child-safety review + deny-serving + PhotoDNA, WITHOUT\n  // touching the NCII removal clock and WITHOUT auto-NCMEC. Payload records from→to assessment.\n  | 'ncii.minorAssessmentSet'\n  // [H-2] a failed possible-minor crossover leg (serving-deny / PhotoDNA) was reconciled or replayed\n  // by an operator/reconciler (crossoverLegs.<leg> failed → done). Payload records which leg + outcome.\n  | 'ncii.crossoverLegReconciled'\n  // trust & safety — operator security\n  // Passkey enrollment/assertion reuses safety.privilegedReauthPerformed (the reauth catalog entry, as\n  // the TOTP step-up enroll/confirm/verify phases already do) — no distinct passkey-registration type.\n  | 'safety.privilegedReauthPerformed'\n  // [P2-08] A privileged operator read of a TAKE IT DOWN request's RAW target locator (the\n  // reveal-on-demand, review-only read of the sensitive locator itself — distinct from the\n  // reveal reauth above, which is the step-up). One event per read. Mirrors the\n  // chat.moderationContextRead privileged-read convention.\n  | 'safety.privilegedRawLocatorRead'\n  | 'safety.deadlineBreachRecorded'\n  // [M-6] per-operator reviewer-capability grant lifecycle (privilegedReviewerCapabilityGrants/{uid}).\n  // Granting/revoking a SafetyReviewerCapability is an authorization change — always audited.\n  | 'safety.reviewerCapabilityGranted'\n  | 'safety.reviewerCapabilityRevoked';\n\n/**\n * How the actor was acting when the audited action was performed. This is\n * orthogonal to the event name — the same event type can be produced by\n * different actor modes (e.g. a normal member vs. an admin override).\n *\n * - 'user'          — authenticated action not tied to project membership\n * - 'projectMember' — acting through normal Work/project (guild standing) permissions\n * - 'adminReview'   — admin queue/support work on admin surfaces (no project-permission concept)\n * - 'adminOverride' — system-admin authority superseding normal user/project permission\n * - 'system'        — backend automation: trigger, scheduled job, migration, media pipeline\n */\nexport type TTTAuditActorMode =\n  | 'user'\n  | 'projectMember'\n  | 'adminReview'\n  | 'adminOverride'\n  | 'system';\n\n/** Fields common to every audited actor regardless of mode. `isAdmin` is\n * claim-present metadata only — it records that the caller held an admin\n * claim at the time, NOT that the action was an override. */\nexport type TTTAuditActorBase = {\n  uid: string | null;\n  isAdmin: boolean;\n};\n\n/** TTT actor shape, discriminated on `actorMode`. The admin system role is\n * REQUIRED on admin modes (adminReview / adminOverride) and FORBIDDEN on\n * non-admin modes (user / projectMember / system) — so an admin action can\n * never be audited without recording full-vs-jr, and a non-admin action can\n * never carry a spurious role. */\nexport type TTTAuditActor =\n  | (TTTAuditActorBase & {\n      actorMode: 'user' | 'projectMember' | 'system';\n      systemRole?: never;\n    })\n  | (TTTAuditActorBase & {\n      actorMode: 'adminReview' | 'adminOverride';\n      systemRole: 'admin' | 'jrAdmin';\n    });\n\n/**\n * TTT target shape: the uid the audited action affects (if any), plus the\n * Firestore path of the affected document (if any).\n */\nexport type TTTAuditTarget = { uid: string | null; ref: string | null };\n\n/**\n * The canonical TTT audit event document shape. Specializes the generic\n * `AuditEvent` from @ttt-productions/audit-core with the TTT event-type\n * union, actor shape, target shape, and a generic metadata bag.\n */\nexport type TTTAuditEvent = AuditEvent<\n  AuditEventType,\n  TTTAuditActor,\n  TTTAuditTarget,\n  Record<string, unknown>\n>;\n\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ttt-productions/ttt-core",
-  "version": "0.79.11",
+  "version": "0.79.13",
   "description": "Core types, Firestore path constants, and shared constants for TTT Productions",
   "repository": {
     "type": "git",
@@ -117,7 +117,7 @@
     "@ttt-productions/edge-protocol-core": "^0.1.5",
     "@ttt-productions/media-schemas": "^0.14.4",
     "@ttt-productions/notification-core": "^0.15.5",
-    "@ttt-productions/report-core": "^0.16.7",
+    "@ttt-productions/report-core": "^0.16.8",
     "zod": "^4.4.3"
   },
   "devDependencies": {