@ttt-productions/ttt-core 0.79.32 → 0.79.34

package/dist/constants/retention.d.ts

@@ -19,4 +19,7 @@ export declare const LISTENER_WINDOW_MS: number;
 export declare const PUBLIC_USERS_STALE_TIME_MS: number;
 /** GC time for the publicUsers query cache (1 hour). */
 export declare const PUBLIC_USERS_GC_TIME_MS: number;
+/** Stale time for an ABSENT public-lookup document (20 seconds) — short, so a
+ *  just-created or just-published entity stops reading as missing almost at once. */
+export declare const PUBLIC_LOOKUP_ABSENT_STALE_TIME_MS: number;
 //# sourceMappingURL=retention.d.ts.map

package/dist/constants/retention.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"retention.d.ts","sourceRoot":"","sources":["../../src/constants/retention.ts"],"names":[],"mappings":"AAIA,gEAAgE;AAChE,eAAO,MAAM,sBAAsB,QAAiB,CAAC;AAIrD,oFAAoF;AACpF,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAElD,oFAAoF;AACpF,eAAO,MAAM,gCAAgC,MAAM,CAAC;AAWpD;qCACqC;AACrC,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAIhD,uFAAuF;AACvF,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C,+CAA+C;AAC/C,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAE5C,4CAA4C;AAC5C,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAIjD,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,QAAsB,CAAC;AAItD,+DAA+D;AAC/D,eAAO,MAAM,0BAA0B,QAAiB,CAAC;AAEzD,wDAAwD;AACxD,eAAO,MAAM,uBAAuB,QAAiB,CAAC"}
+{"version":3,"file":"retention.d.ts","sourceRoot":"","sources":["../../src/constants/retention.ts"],"names":[],"mappings":"AAIA,gEAAgE;AAChE,eAAO,MAAM,sBAAsB,QAAiB,CAAC;AAIrD,oFAAoF;AACpF,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAElD,oFAAoF;AACpF,eAAO,MAAM,gCAAgC,MAAM,CAAC;AAWpD;qCACqC;AACrC,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAIhD,uFAAuF;AACvF,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C,+CAA+C;AAC/C,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAE5C,4CAA4C;AAC5C,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAIjD,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,QAAsB,CAAC;AAItD,+DAA+D;AAC/D,eAAO,MAAM,0BAA0B,QAAiB,CAAC;AAEzD,wDAAwD;AACxD,eAAO,MAAM,uBAAuB,QAAiB,CAAC;AAItD;qFACqF;AACrF,eAAO,MAAM,kCAAkC,QAAY,CAAC"}

package/dist/constants/retention.js

@@ -33,4 +33,8 @@ export const LISTENER_WINDOW_MS = 24 * 60 * 60 * 1000;
 export const PUBLIC_USERS_STALE_TIME_MS = 30 * 60 * 1000;
 /** GC time for the publicUsers query cache (1 hour). */
 export const PUBLIC_USERS_GC_TIME_MS = 60 * 60 * 1000;
+// --- Public-entity lookup negative cache ---
+/** Stale time for an ABSENT public-lookup document (20 seconds) — short, so a
+ *  just-created or just-published entity stops reading as missing almost at once. */
+export const PUBLIC_LOOKUP_ABSENT_STALE_TIME_MS = 20 * 1000;
 //# sourceMappingURL=retention.js.map

package/dist/constants/retention.js.map

@@ -1 +1 @@
-{"version":3,"file":"retention.js","sourceRoot":"","sources":["../../src/constants/retention.ts"],"names":[],"mappings":"AAAA,sDAAsD;AAEtD,oCAAoC;AAEpC,gEAAgE;AAChE,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC;AAErD,gCAAgC;AAEhC,oFAAoF;AACpF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAElD,oFAAoF;AACpF,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAEpD,4DAA4D;AAC5D,4FAA4F;AAC5F,8FAA8F;AAC9F,0FAA0F;AAC1F,+FAA+F;AAC/F,wFAAwF;AACxF,yFAAyF;AACzF,8FAA8F;AAE9F;qCACqC;AACrC,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAEhD,gCAAgC;AAEhC,uFAAuF;AACvF,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAE1C,+CAA+C;AAC/C,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAE5C,4CAA4C;AAC5C,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD,8CAA8C;AAE9C,4EAA4E;AAC5E,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtD,yCAAyC;AAEzC,+DAA+D;AAC/D,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzD,wDAAwD;AACxD,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC","sourcesContent":["// Caching, retention, and cleanup TTLs / batch sizes.\n\n// --- Profanity word list cache ---\n\n/** TTL for the in-memory profanity word list cache (1 hour). */\nexport const WORD_LIST_CACHE_TTL_MS = 1000 * 60 * 60;\n\n// --- Pending media archive ---\n\n/** Days after which a terminal pendingMedia doc is moved to pendingMediaArchive. */\nexport const PENDING_MEDIA_ARCHIVE_AFTER_DAYS = 7;\n\n/** Per-run cap on docs archived by the archivePendingMedia scheduled commission. */\nexport const PENDING_MEDIA_ARCHIVE_BATCH_SIZE = 500;\n\n// --- Rejected (moderation-quarantined) media retention ---\n// Bytes a moderation decision rejected are kept at `rejected/{userId}/…` as APPEAL EVIDENCE\n// (the violation's `rejectedFilePath`; owner + admin readable, never served through the media\n// gateway). They are not kept forever: after this window the hold-aware fail-closed sweep\n// deletes them. Fail-closed means a file it cannot prove is out of window — or that carries an\n// active Trust & Safety / legal hold — is LEFT IN PLACE, never deleted on a best guess.\n// 90 days sits comfortably past the appeal window while bounding indefinite retention of\n// often-adult rejected content. See ttt-prod docs/design/content-moderation-and-reporting.md.\n\n/** Days a moderation-rejected upload's quarantined bytes are retained before the\n *  hold-aware sweep deletes them. */\nexport const REJECTED_MEDIA_RETENTION_DAYS = 90;\n\n// --- Orphan upload cleanup ---\n\n/** TTL in hours after which an orphan storage upload becomes eligible for deletion. */\nexport const ORPHAN_UPLOAD_TTL_HOURS = 24;\n\n/** Per-run cap on orphan storage deletions. */\nexport const ORPHAN_UPLOAD_DELETE_CAP = 500;\n\n/** Page size for listing orphan uploads. */\nexport const ORPHAN_UPLOAD_LIST_PAGE_SIZE = 1000;\n\n// --- Frontend in-flight upload listeners ---\n\n/** Maximum lookback window for the in-flight upload listener (24 hours). */\nexport const LISTENER_WINDOW_MS = 24 * 60 * 60 * 1000;\n\n// --- Public users React Query cache ---\n\n/** Stale time for the publicUsers query cache (30 minutes). */\nexport const PUBLIC_USERS_STALE_TIME_MS = 30 * 60 * 1000;\n\n/** GC time for the publicUsers query cache (1 hour). */\nexport const PUBLIC_USERS_GC_TIME_MS = 60 * 60 * 1000;\n\n"]}
+{"version":3,"file":"retention.js","sourceRoot":"","sources":["../../src/constants/retention.ts"],"names":[],"mappings":"AAAA,sDAAsD;AAEtD,oCAAoC;AAEpC,gEAAgE;AAChE,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC;AAErD,gCAAgC;AAEhC,oFAAoF;AACpF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAElD,oFAAoF;AACpF,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAEpD,4DAA4D;AAC5D,4FAA4F;AAC5F,8FAA8F;AAC9F,0FAA0F;AAC1F,+FAA+F;AAC/F,wFAAwF;AACxF,yFAAyF;AACzF,8FAA8F;AAE9F;qCACqC;AACrC,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAEhD,gCAAgC;AAEhC,uFAAuF;AACvF,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAE1C,+CAA+C;AAC/C,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAE5C,4CAA4C;AAC5C,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD,8CAA8C;AAE9C,4EAA4E;AAC5E,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtD,yCAAyC;AAEzC,+DAA+D;AAC/D,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzD,wDAAwD;AACxD,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtD,8CAA8C;AAE9C;qFACqF;AACrF,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,GAAG,IAAI,CAAC","sourcesContent":["// Caching, retention, and cleanup TTLs / batch sizes.\n\n// --- Profanity word list cache ---\n\n/** TTL for the in-memory profanity word list cache (1 hour). */\nexport const WORD_LIST_CACHE_TTL_MS = 1000 * 60 * 60;\n\n// --- Pending media archive ---\n\n/** Days after which a terminal pendingMedia doc is moved to pendingMediaArchive. */\nexport const PENDING_MEDIA_ARCHIVE_AFTER_DAYS = 7;\n\n/** Per-run cap on docs archived by the archivePendingMedia scheduled commission. */\nexport const PENDING_MEDIA_ARCHIVE_BATCH_SIZE = 500;\n\n// --- Rejected (moderation-quarantined) media retention ---\n// Bytes a moderation decision rejected are kept at `rejected/{userId}/…` as APPEAL EVIDENCE\n// (the violation's `rejectedFilePath`; owner + admin readable, never served through the media\n// gateway). They are not kept forever: after this window the hold-aware fail-closed sweep\n// deletes them. Fail-closed means a file it cannot prove is out of window — or that carries an\n// active Trust & Safety / legal hold — is LEFT IN PLACE, never deleted on a best guess.\n// 90 days sits comfortably past the appeal window while bounding indefinite retention of\n// often-adult rejected content. See ttt-prod docs/design/content-moderation-and-reporting.md.\n\n/** Days a moderation-rejected upload's quarantined bytes are retained before the\n *  hold-aware sweep deletes them. */\nexport const REJECTED_MEDIA_RETENTION_DAYS = 90;\n\n// --- Orphan upload cleanup ---\n\n/** TTL in hours after which an orphan storage upload becomes eligible for deletion. */\nexport const ORPHAN_UPLOAD_TTL_HOURS = 24;\n\n/** Per-run cap on orphan storage deletions. */\nexport const ORPHAN_UPLOAD_DELETE_CAP = 500;\n\n/** Page size for listing orphan uploads. */\nexport const ORPHAN_UPLOAD_LIST_PAGE_SIZE = 1000;\n\n// --- Frontend in-flight upload listeners ---\n\n/** Maximum lookback window for the in-flight upload listener (24 hours). */\nexport const LISTENER_WINDOW_MS = 24 * 60 * 60 * 1000;\n\n// --- Public users React Query cache ---\n\n/** Stale time for the publicUsers query cache (30 minutes). */\nexport const PUBLIC_USERS_STALE_TIME_MS = 30 * 60 * 1000;\n\n/** GC time for the publicUsers query cache (1 hour). */\nexport const PUBLIC_USERS_GC_TIME_MS = 60 * 60 * 1000;\n\n// --- Public-entity lookup negative cache ---\n\n/** Stale time for an ABSENT public-lookup document (20 seconds) — short, so a\n *  just-created or just-published entity stops reading as missing almost at once. */\nexport const PUBLIC_LOOKUP_ABSENT_STALE_TIME_MS = 20 * 1000;\n"]}

package/dist/doc-schemas/backend-state.d.ts

@@ -4,6 +4,11 @@ export declare const HallMediaReaperCursorSchema: z.ZodObject<{
     updatedAt: z.ZodNumber;
 }, z.core.$strip>;
 export type HallMediaReaperCursor = z.infer<typeof HallMediaReaperCursorSchema>;
+export declare const PublicUsersReconcilerCursorSchema: z.ZodObject<{
+    profileIdCursor: z.ZodString;
+    updatedAt: z.ZodNumber;
+}, z.core.$strip>;
+export type PublicUsersReconcilerCursor = z.infer<typeof PublicUsersReconcilerCursorSchema>;
 export declare const OperatorStepUpSchema: z.ZodObject<{
     secret: z.ZodString;
     status: z.ZodEnum<{

package/dist/doc-schemas/backend-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backend-state.d.ts","sourceRoot":"","sources":["../../src/doc-schemas/backend-state.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,2BAA2B;;;iBAGtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAOhF,eAAO,MAAM,oBAAoB;;;;;;;;;;iBAS/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE,eAAO,MAAM,4BAA4B;;;iBAIvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AASlF,eAAO,MAAM,gBAAgB;;;;;iBAS3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAU1D,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;iBAc7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAS9F,eAAO,MAAM,kCAAkC;;;;;;;;;;;;iBAgB7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAQ9F,eAAO,MAAM,mCAAmC;;;;;;;;iBAU9C,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC"}
+{"version":3,"file":"backend-state.d.ts","sourceRoot":"","sources":["../../src/doc-schemas/backend-state.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,2BAA2B;;;iBAGtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAOhF,eAAO,MAAM,iCAAiC;;;iBAG5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAO5F,eAAO,MAAM,oBAAoB;;;;;;;;;;iBAS/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE,eAAO,MAAM,4BAA4B;;;iBAIvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AASlF,eAAO,MAAM,gBAAgB;;;;;iBAS3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAU1D,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;iBAc7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAS9F,eAAO,MAAM,kCAAkC;;;;;;;;;;;;iBAgB7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAQ9F,eAAO,MAAM,mCAAmC;;;;;;;;iBAU9C,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC"}

package/dist/doc-schemas/backend-state.js

@@ -14,6 +14,15 @@ export const HallMediaReaperCursorSchema = z.object({
     createdAtCursor: z.number(),
     updatedAt: z.number(),
 });
+// _systemData/publicUsersReconcilerCursor — the scheduled publicUsers reconciler's sweep cursor.
+// `profileIdCursor` is the last `userProfiles` document id the sweep has POSITIVELY cleared, so
+// each pass resumes after it instead of re-reading the same oldest page forever. An EMPTY STRING
+// means start from the beginning — both the first-ever pass and the wrap after the sweep exhausts
+// the collection. (functions/src/users/reconcilePublicUsers.ts)
+export const PublicUsersReconcilerCursorSchema = z.object({
+    profileIdCursor: z.string(),
+    updatedAt: z.number(),
+});
 // operatorStepUp/{uid} — [H-08] per-operator TOTP step-up state: the authenticator secret
 // plus the currently open grant window. The secret is returned to the client EXACTLY ONCE by
 // enrollOperatorStepUp and is never readable through Firestore afterwards; `status` goes

package/dist/doc-schemas/backend-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"backend-state.js","sourceRoot":"","sources":["../../src/doc-schemas/backend-state.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,0FAA0F;AAC1F,2FAA2F;AAC3F,2FAA2F;AAC3F,wDAAwD;AAExD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,uCAAuC,EACvC,yCAAyC,GAC1C,MAAM,kBAAkB,CAAC;AAE1B,4FAA4F;AAC5F,6FAA6F;AAC7F,wFAAwF;AACxF,mFAAmF;AACnF,uDAAuD;AACvD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,0FAA0F;AAC1F,6FAA6F;AAC7F,yFAAyF;AACzF,6FAA6F;AAC7F,+DAA+D;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrC,4FAA4F;IAC5F,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,mEAAmE;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAGH,uFAAuF;AACvF,mFAAmF;AACnF,wFAAwF;AACxF,yFAAyF;AACzF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,8FAA8F;IAC9F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,gGAAgG;AAChG,gGAAgG;AAChG,iGAAiG;AACjG,+FAA+F;AAC/F,4FAA4F;AAC5F,8CAA8C;AAC9C,oGAAoG;AACpG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,0FAA0F;IAC1F,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC;wFACoF;IACpF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,2EAA2E;IAC3E,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,0FAA0F;AAC1F,kGAAkG;AAClG,mGAAmG;AACnG,iGAAiG;AACjG,mFAAmF;AACnF,kGAAkG;AAClG,uFAAuF;AACvF,2CAA2C;AAC3C,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,OAAO,EAAE,uCAAuC;IAChD,SAAS,EAAE,yCAAyC;IACpD,8EAA8E;IAC9E,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE;IACnC,+DAA+D;IAC/D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC;yCACqC;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AAGH,2FAA2F;AAC3F,2FAA2F;AAC3F,yFAAyF;AACzF,2FAA2F;AAC3F,+FAA+F;AAC/F,0FAA0F;AAC1F,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,iEAAiE;IACjE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,sEAAsE;IACtE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,8DAA8D;IAC9D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,mEAAmE;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAGH,8FAA8F;AAC9F,4FAA4F;AAC5F,wFAAwF;AACxF,4FAA4F;AAC5F,6FAA6F;AAC7F,uEAAuE;AACvE,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,2DAA2D;IAC3D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,gFAAgF;IAChF,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC","sourcesContent":["// Backend-only state document SCHEMAS — Cloud-Functions-owned bookkeeping docs that no\n// client ever reads or writes (firestore.rules denies client access to every path below).\n// They are registered here for the same reason every other stored shape is: ARCH-104 gives\n// the path ONE owner, and COLLECTION_SCHEMAS is the inventory the schema-doc generator and\n// the drift-check read. Types are inferred via z.infer.\n\nimport { z } from 'zod';\nimport {\n  ChildSafetyNcmecCompletionChannelSchema,\n  ChildSafetyNcmecCompletionProofTypeSchema,\n} from './safety/case.js';\n\n// _systemData/hallMediaReaperCursor — the scheduled Hall-media orphan reaper's scan cursor.\n// `createdAtCursor` is the highest mediaAssets `createdAt` the reaper has POSITIVELY cleared\n// (candidate resolved referenced / reaped / already-deleted), so each pass resumes past\n// permanently-live Hall assets instead of re-reading the same oldest page forever.\n// (functions/src/media/reapOrphanedHallMediaCopies.ts)\nexport const HallMediaReaperCursorSchema = z.object({\n  createdAtCursor: z.number(),\n  updatedAt: z.number(),\n});\nexport type HallMediaReaperCursor = z.infer<typeof HallMediaReaperCursorSchema>;\n\n// operatorStepUp/{uid} — [H-08] per-operator TOTP step-up state: the authenticator secret\n// plus the currently open grant window. The secret is returned to the client EXACTLY ONCE by\n// enrollOperatorStepUp and is never readable through Firestore afterwards; `status` goes\n// 'pending' → 'active' on confirm, and each successful verify pushes `grantExpiresAt` out by\n// the step-up window. (functions/src/safety/operatorStepUp.ts)\nexport const OperatorStepUpSchema = z.object({\n  secret: z.string(),\n  status: z.enum(['pending', 'active']),\n  /** Absent until the first successful verify; a grant is live while now < grantExpiresAt. */\n  grantExpiresAt: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  /** Set when enrollment is confirmed (status flips to 'active'). */\n  confirmedAt: z.number().optional(),\n});\nexport type OperatorStepUp = z.infer<typeof OperatorStepUpSchema>;\n\n// safetyReconcilerCursors/{cursorKey} — one persisted pagination cursor per reconciler\n// needs-work backstop sweep (quarantine enqueue, NCMEC enqueue). The sweep pages a\n// needs-work-filtered query from `afterValue` and WRAPS to the start when exhausted, so\n// coverage does not stall on the oldest rows. (functions/src/safety/reconcilerCursor.ts)\nexport const SafetyReconcilerCursorSchema = z.object({\n  /** `orderBy` value of the last row examined last pass (exclusive lower bound). Absent ⇒ 0. */\n  afterValue: z.number().optional(),\n  updatedAt: z.number(),\n});\nexport type SafetyReconcilerCursor = z.infer<typeof SafetyReconcilerCursorSchema>;\n\n// sweepState/{sweepName} — durable cadence + cursor state for one scheduled user sweep. One doc\n// per sweep name; the fields a given sweep uses are the ones it declares, so every field except\n// `updatedAt` is optional. `orphanRegistrationCleanup` carries all three (the ~daily privateData\n// reaper's last completed pass + its rolling page cursor, and the ~weekly `listUsers()` scan);\n// `reconcileAccountStatus` carries only `fullScanLastRunAt`. The stamps are wall-clock so a\n// container recycle cannot reset the cadence.\n// (functions/src/users/orphanRegistrationCleanup.ts, functions/src/users/reconcileAccountStatus.ts)\nexport const SweepStateSchema = z.object({\n  /** Wall-clock ms the last COMPLETED privateData-reaper pass finished (absent = never). */\n  reaperLastRunAt: z.number().optional(),\n  /** Full document path of the last `privateData` doc the reaper examined. Empty/absent means no\n   *  pass is in flight; a non-empty value means one is mid-scan and must continue. */\n  reaperCursorPath: z.string().optional(),\n  /** Wall-clock ms the last full `listUsers()` scan ran (absent = never). */\n  fullScanLastRunAt: z.number().optional(),\n  updatedAt: z.number(),\n});\nexport type SweepState = z.infer<typeof SweepStateSchema>;\n\n// childSafetyCases/{caseId}/ncmecSubmissions/{submissionId}/ncmecCompletionProof/record —\n// [H-05] the IMMUTABLE record of a verified manual-portal completion. Written create-if-absent in\n// the SAME transaction as the submission's `completed` transition, so a submission can never reach\n// `completed` without a bound proof record; a re-completion keeps the original. The submission's\n// `completionProofRef` stores this doc's path, never an operator free-text string.\n// [Q13/H-06] `portalReceiptArtifactId` binds the proof to a verified NcmecPortalReceiptArtifactV1\n// on the same (caseId, submissionId) — an arbitrary operator string is never accepted.\n// (functions/src/safety/ncmecReporting.ts)\nexport const NcmecCompletionProofRecordV1Schema = z.object({\n  caseId: z.string(),\n  submissionId: z.string(),\n  channel: ChildSafetyNcmecCompletionChannelSchema,\n  proofType: ChildSafetyNcmecCompletionProofTypeSchema,\n  /** Id of the verified portal-receipt artifact this completion is bound to. */\n  portalReceiptArtifactId: z.string(),\n  /** Optional operator free-text note about the confirmation. */\n  proofText: z.string().optional(),\n  /** The NCMEC-assigned report id — REQUIRED. The number IS the proof; there is no\n   *  \"filed, number pending\" grace. */\n  ncmecReportId: z.string(),\n  recordedByUid: z.string(),\n  recordedAt: z.number(),\n});\nexport type NcmecCompletionProofRecordV1 = z.infer<typeof NcmecCompletionProofRecordV1Schema>;\n\n// childSafetyCases/{caseId}/portalReceiptArtifacts/{artifactId} — [Q13/H-06] the immutable\n// record of a PDF/screenshot of the completed NCMEC CyberTipline submission, stored in the\n// restricted evidence vault. `markNcmecPortalComplete` accepts only the id of a verified\n// artifact bound to the SAME (caseId, submissionId); an arbitrary operator string is never\n// proof. Written create-only, never overwritten, and carries the server-verified storage facts\n// (generation + sha256) so a later transactional verification can confirm the same object\n// still exists unchanged. (functions/src/safety/ncmecOperatorCommands.ts)\nexport const NcmecPortalReceiptArtifactV1Schema = z.object({\n  schemaVersion: z.literal(1),\n  caseId: z.string(),\n  submissionId: z.string(),\n  /** Key of the object in the restricted evidence vault bucket. */\n  evidenceVaultKey: z.string(),\n  /** GCS object generation at capture time (immutable identity peg). */\n  objectGeneration: z.string(),\n  /** SHA-256 hex digest of the object bytes at capture time. */\n  sha256: z.string(),\n  contentType: z.string(),\n  sizeBytes: z.number(),\n  capturedAt: z.number(),\n  registeredByUid: z.string(),\n  /** Optional operator free-text describing what the artifact is. */\n  description: z.string().optional(),\n});\nexport type NcmecPortalReceiptArtifactV1 = z.infer<typeof NcmecPortalReceiptArtifactV1Schema>;\n\n// childSafetyCases/{caseId}/ncmecPortalCorrections/{correctionId} — the immutable record that\n// the operator filed a CORRECTION on the NCMEC manual portal. There is no in-app correction\n// submission pipeline; this records the portal filing. Its EXISTENCE is the gate on the\n// corrected-no-apparent-violation disposition, so it is never a bare-discretion close. Each\n// correction is a fresh id — a later correction is an additional record, never a mutation of\n// the prior one. (functions/src/safety/recordNcmecPortalCorrection.ts)\nexport const NcmecPortalCorrectionRecordV1Schema = z.object({\n  schemaVersion: z.literal(1),\n  caseId: z.string(),\n  /** The portal-assigned NCMEC report id being corrected. */\n  ncmecReportId: z.string(),\n  /** When the operator filed the correction on the portal (operator-supplied). */\n  correctionFiledAt: z.number(),\n  reason: z.string(),\n  recordedByUid: z.string(),\n  recordedAt: z.number(),\n});\nexport type NcmecPortalCorrectionRecordV1 = z.infer<typeof NcmecPortalCorrectionRecordV1Schema>;\n"]}
+{"version":3,"file":"backend-state.js","sourceRoot":"","sources":["../../src/doc-schemas/backend-state.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,0FAA0F;AAC1F,2FAA2F;AAC3F,2FAA2F;AAC3F,wDAAwD;AAExD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,uCAAuC,EACvC,yCAAyC,GAC1C,MAAM,kBAAkB,CAAC;AAE1B,4FAA4F;AAC5F,6FAA6F;AAC7F,wFAAwF;AACxF,mFAAmF;AACnF,uDAAuD;AACvD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,iGAAiG;AACjG,gGAAgG;AAChG,iGAAiG;AACjG,kGAAkG;AAClG,gEAAgE;AAChE,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,0FAA0F;AAC1F,6FAA6F;AAC7F,yFAAyF;AACzF,6FAA6F;AAC7F,+DAA+D;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrC,4FAA4F;IAC5F,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,mEAAmE;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAGH,uFAAuF;AACvF,mFAAmF;AACnF,wFAAwF;AACxF,yFAAyF;AACzF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,8FAA8F;IAC9F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,gGAAgG;AAChG,gGAAgG;AAChG,iGAAiG;AACjG,+FAA+F;AAC/F,4FAA4F;AAC5F,8CAA8C;AAC9C,oGAAoG;AACpG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,0FAA0F;IAC1F,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC;wFACoF;IACpF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,2EAA2E;IAC3E,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,0FAA0F;AAC1F,kGAAkG;AAClG,mGAAmG;AACnG,iGAAiG;AACjG,mFAAmF;AACnF,kGAAkG;AAClG,uFAAuF;AACvF,2CAA2C;AAC3C,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,OAAO,EAAE,uCAAuC;IAChD,SAAS,EAAE,yCAAyC;IACpD,8EAA8E;IAC9E,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE;IACnC,+DAA+D;IAC/D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC;yCACqC;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AAGH,2FAA2F;AAC3F,2FAA2F;AAC3F,yFAAyF;AACzF,2FAA2F;AAC3F,+FAA+F;AAC/F,0FAA0F;AAC1F,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,iEAAiE;IACjE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,sEAAsE;IACtE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,8DAA8D;IAC9D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,mEAAmE;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAGH,8FAA8F;AAC9F,4FAA4F;AAC5F,wFAAwF;AACxF,4FAA4F;AAC5F,6FAA6F;AAC7F,uEAAuE;AACvE,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,2DAA2D;IAC3D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,gFAAgF;IAChF,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC","sourcesContent":["// Backend-only state document SCHEMAS — Cloud-Functions-owned bookkeeping docs that no\n// client ever reads or writes (firestore.rules denies client access to every path below).\n// They are registered here for the same reason every other stored shape is: ARCH-104 gives\n// the path ONE owner, and COLLECTION_SCHEMAS is the inventory the schema-doc generator and\n// the drift-check read. Types are inferred via z.infer.\n\nimport { z } from 'zod';\nimport {\n  ChildSafetyNcmecCompletionChannelSchema,\n  ChildSafetyNcmecCompletionProofTypeSchema,\n} from './safety/case.js';\n\n// _systemData/hallMediaReaperCursor — the scheduled Hall-media orphan reaper's scan cursor.\n// `createdAtCursor` is the highest mediaAssets `createdAt` the reaper has POSITIVELY cleared\n// (candidate resolved referenced / reaped / already-deleted), so each pass resumes past\n// permanently-live Hall assets instead of re-reading the same oldest page forever.\n// (functions/src/media/reapOrphanedHallMediaCopies.ts)\nexport const HallMediaReaperCursorSchema = z.object({\n  createdAtCursor: z.number(),\n  updatedAt: z.number(),\n});\nexport type HallMediaReaperCursor = z.infer<typeof HallMediaReaperCursorSchema>;\n\n// _systemData/publicUsersReconcilerCursor — the scheduled publicUsers reconciler's sweep cursor.\n// `profileIdCursor` is the last `userProfiles` document id the sweep has POSITIVELY cleared, so\n// each pass resumes after it instead of re-reading the same oldest page forever. An EMPTY STRING\n// means start from the beginning — both the first-ever pass and the wrap after the sweep exhausts\n// the collection. (functions/src/users/reconcilePublicUsers.ts)\nexport const PublicUsersReconcilerCursorSchema = z.object({\n  profileIdCursor: z.string(),\n  updatedAt: z.number(),\n});\nexport type PublicUsersReconcilerCursor = z.infer<typeof PublicUsersReconcilerCursorSchema>;\n\n// operatorStepUp/{uid} — [H-08] per-operator TOTP step-up state: the authenticator secret\n// plus the currently open grant window. The secret is returned to the client EXACTLY ONCE by\n// enrollOperatorStepUp and is never readable through Firestore afterwards; `status` goes\n// 'pending' → 'active' on confirm, and each successful verify pushes `grantExpiresAt` out by\n// the step-up window. (functions/src/safety/operatorStepUp.ts)\nexport const OperatorStepUpSchema = z.object({\n  secret: z.string(),\n  status: z.enum(['pending', 'active']),\n  /** Absent until the first successful verify; a grant is live while now < grantExpiresAt. */\n  grantExpiresAt: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  /** Set when enrollment is confirmed (status flips to 'active'). */\n  confirmedAt: z.number().optional(),\n});\nexport type OperatorStepUp = z.infer<typeof OperatorStepUpSchema>;\n\n// safetyReconcilerCursors/{cursorKey} — one persisted pagination cursor per reconciler\n// needs-work backstop sweep (quarantine enqueue, NCMEC enqueue). The sweep pages a\n// needs-work-filtered query from `afterValue` and WRAPS to the start when exhausted, so\n// coverage does not stall on the oldest rows. (functions/src/safety/reconcilerCursor.ts)\nexport const SafetyReconcilerCursorSchema = z.object({\n  /** `orderBy` value of the last row examined last pass (exclusive lower bound). Absent ⇒ 0. */\n  afterValue: z.number().optional(),\n  updatedAt: z.number(),\n});\nexport type SafetyReconcilerCursor = z.infer<typeof SafetyReconcilerCursorSchema>;\n\n// sweepState/{sweepName} — durable cadence + cursor state for one scheduled user sweep. One doc\n// per sweep name; the fields a given sweep uses are the ones it declares, so every field except\n// `updatedAt` is optional. `orphanRegistrationCleanup` carries all three (the ~daily privateData\n// reaper's last completed pass + its rolling page cursor, and the ~weekly `listUsers()` scan);\n// `reconcileAccountStatus` carries only `fullScanLastRunAt`. The stamps are wall-clock so a\n// container recycle cannot reset the cadence.\n// (functions/src/users/orphanRegistrationCleanup.ts, functions/src/users/reconcileAccountStatus.ts)\nexport const SweepStateSchema = z.object({\n  /** Wall-clock ms the last COMPLETED privateData-reaper pass finished (absent = never). */\n  reaperLastRunAt: z.number().optional(),\n  /** Full document path of the last `privateData` doc the reaper examined. Empty/absent means no\n   *  pass is in flight; a non-empty value means one is mid-scan and must continue. */\n  reaperCursorPath: z.string().optional(),\n  /** Wall-clock ms the last full `listUsers()` scan ran (absent = never). */\n  fullScanLastRunAt: z.number().optional(),\n  updatedAt: z.number(),\n});\nexport type SweepState = z.infer<typeof SweepStateSchema>;\n\n// childSafetyCases/{caseId}/ncmecSubmissions/{submissionId}/ncmecCompletionProof/record —\n// [H-05] the IMMUTABLE record of a verified manual-portal completion. Written create-if-absent in\n// the SAME transaction as the submission's `completed` transition, so a submission can never reach\n// `completed` without a bound proof record; a re-completion keeps the original. The submission's\n// `completionProofRef` stores this doc's path, never an operator free-text string.\n// [Q13/H-06] `portalReceiptArtifactId` binds the proof to a verified NcmecPortalReceiptArtifactV1\n// on the same (caseId, submissionId) — an arbitrary operator string is never accepted.\n// (functions/src/safety/ncmecReporting.ts)\nexport const NcmecCompletionProofRecordV1Schema = z.object({\n  caseId: z.string(),\n  submissionId: z.string(),\n  channel: ChildSafetyNcmecCompletionChannelSchema,\n  proofType: ChildSafetyNcmecCompletionProofTypeSchema,\n  /** Id of the verified portal-receipt artifact this completion is bound to. */\n  portalReceiptArtifactId: z.string(),\n  /** Optional operator free-text note about the confirmation. */\n  proofText: z.string().optional(),\n  /** The NCMEC-assigned report id — REQUIRED. The number IS the proof; there is no\n   *  \"filed, number pending\" grace. */\n  ncmecReportId: z.string(),\n  recordedByUid: z.string(),\n  recordedAt: z.number(),\n});\nexport type NcmecCompletionProofRecordV1 = z.infer<typeof NcmecCompletionProofRecordV1Schema>;\n\n// childSafetyCases/{caseId}/portalReceiptArtifacts/{artifactId} — [Q13/H-06] the immutable\n// record of a PDF/screenshot of the completed NCMEC CyberTipline submission, stored in the\n// restricted evidence vault. `markNcmecPortalComplete` accepts only the id of a verified\n// artifact bound to the SAME (caseId, submissionId); an arbitrary operator string is never\n// proof. Written create-only, never overwritten, and carries the server-verified storage facts\n// (generation + sha256) so a later transactional verification can confirm the same object\n// still exists unchanged. (functions/src/safety/ncmecOperatorCommands.ts)\nexport const NcmecPortalReceiptArtifactV1Schema = z.object({\n  schemaVersion: z.literal(1),\n  caseId: z.string(),\n  submissionId: z.string(),\n  /** Key of the object in the restricted evidence vault bucket. */\n  evidenceVaultKey: z.string(),\n  /** GCS object generation at capture time (immutable identity peg). */\n  objectGeneration: z.string(),\n  /** SHA-256 hex digest of the object bytes at capture time. */\n  sha256: z.string(),\n  contentType: z.string(),\n  sizeBytes: z.number(),\n  capturedAt: z.number(),\n  registeredByUid: z.string(),\n  /** Optional operator free-text describing what the artifact is. */\n  description: z.string().optional(),\n});\nexport type NcmecPortalReceiptArtifactV1 = z.infer<typeof NcmecPortalReceiptArtifactV1Schema>;\n\n// childSafetyCases/{caseId}/ncmecPortalCorrections/{correctionId} — the immutable record that\n// the operator filed a CORRECTION on the NCMEC manual portal. There is no in-app correction\n// submission pipeline; this records the portal filing. Its EXISTENCE is the gate on the\n// corrected-no-apparent-violation disposition, so it is never a bare-discretion close. Each\n// correction is a fresh id — a later correction is an additional record, never a mutation of\n// the prior one. (functions/src/safety/recordNcmecPortalCorrection.ts)\nexport const NcmecPortalCorrectionRecordV1Schema = z.object({\n  schemaVersion: z.literal(1),\n  caseId: z.string(),\n  /** The portal-assigned NCMEC report id being corrected. */\n  ncmecReportId: z.string(),\n  /** When the operator filed the correction on the portal (operator-supplied). */\n  correctionFiledAt: z.number(),\n  reason: z.string(),\n  recordedByUid: z.string(),\n  recordedAt: z.number(),\n});\nexport type NcmecPortalCorrectionRecordV1 = z.infer<typeof NcmecPortalCorrectionRecordV1Schema>;\n"]}

package/dist/doc-schemas/registry.d.ts

@@ -1444,6 +1444,13 @@ export declare const COLLECTION_SCHEMAS: {
         text: z.ZodString;
         createdAt: z.ZodNumber;
     }, z.core.$strict>;
+    readonly 'contentReports/{reportId}/privateDetails/narrativeEscalation': z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        reportId: z.ZodString;
+        reporterUid: z.ZodString;
+        text: z.ZodString;
+        createdAt: z.ZodNumber;
+    }, z.core.$strict>;
     readonly 'activeReportGroups/{groupKey}': z.ZodObject<{
         schemaVersion: z.ZodLiteral<1>;
         groupKey: z.ZodString;
@@ -2236,6 +2243,27 @@ export declare const COLLECTION_SCHEMAS: {
                     userId: z.ZodString;
                     violationId: z.ZodString;
                 }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"profile.displayNameChanged">;
+                ids: z.ZodObject<{
+                    userId: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"admin.displayNameResetForced">;
+                ids: z.ZodObject<{
+                    userId: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"workRealm.detailsUpdated">;
+                ids: z.ZodObject<{
+                    workRealmId: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"hallContentChangeRequest.approved">;
+                ids: z.ZodObject<{
+                    workProjectId: z.ZodString;
+                    workRealmId: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>;
             }, z.core.$strict>], "type">>;
             affected: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 collection: z.ZodString;
@@ -2692,6 +2720,27 @@ export declare const COLLECTION_SCHEMAS: {
                     userId: z.ZodString;
                     violationId: z.ZodString;
                 }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"profile.displayNameChanged">;
+                ids: z.ZodObject<{
+                    userId: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"admin.displayNameResetForced">;
+                ids: z.ZodObject<{
+                    userId: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"workRealm.detailsUpdated">;
+                ids: z.ZodObject<{
+                    workRealmId: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"hallContentChangeRequest.approved">;
+                ids: z.ZodObject<{
+                    workProjectId: z.ZodString;
+                    workRealmId: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>;
             }, z.core.$strict>], "type">>;
             affected: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 collection: z.ZodString;
@@ -3066,6 +3115,27 @@ export declare const COLLECTION_SCHEMAS: {
                     userId: z.ZodString;
                     violationId: z.ZodString;
                 }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"profile.displayNameChanged">;
+                ids: z.ZodObject<{
+                    userId: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"admin.displayNameResetForced">;
+                ids: z.ZodObject<{
+                    userId: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"workRealm.detailsUpdated">;
+                ids: z.ZodObject<{
+                    workRealmId: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"hallContentChangeRequest.approved">;
+                ids: z.ZodObject<{
+                    workProjectId: z.ZodString;
+                    workRealmId: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>;
             }, z.core.$strict>], "type">>;
             affected: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 collection: z.ZodString;
@@ -3524,6 +3594,27 @@ export declare const COLLECTION_SCHEMAS: {
                     userId: z.ZodString;
                     violationId: z.ZodString;
                 }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"profile.displayNameChanged">;
+                ids: z.ZodObject<{
+                    userId: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"admin.displayNameResetForced">;
+                ids: z.ZodObject<{
+                    userId: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"workRealm.detailsUpdated">;
+                ids: z.ZodObject<{
+                    workRealmId: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"hallContentChangeRequest.approved">;
+                ids: z.ZodObject<{
+                    workProjectId: z.ZodString;
+                    workRealmId: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>;
             }, z.core.$strict>], "type">>;
             affected: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 collection: z.ZodString;
@@ -6474,6 +6565,10 @@ export declare const COLLECTION_SCHEMAS: {
         createdAtCursor: z.ZodNumber;
         updatedAt: z.ZodNumber;
     }, z.core.$strip>;
+    readonly '_systemData/publicUsersReconcilerCursor': z.ZodObject<{
+        profileIdCursor: z.ZodString;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strip>;
 };
 export type RegisteredCollectionPath = keyof typeof COLLECTION_SCHEMAS;
 /**

package/dist/doc-schemas/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/doc-schemas/registry.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA2M7B,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoPkB,CAAC;AAElD,MAAM,MAAM,wBAAwB,GAAG,MAAM,OAAO,kBAAkB,CAAC;AAEvE;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;CAmBiC,CAAC;AAEvE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAUvC,CAAC"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/doc-schemas/registry.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA4M7B,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwPkB,CAAC;AAElD,MAAM,MAAM,wBAAwB,GAAG,MAAM,OAAO,kBAAkB,CAAC;AAEvE;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;CAmBiC,CAAC;AAEvE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAUvC,CAAC"}

package/dist/doc-schemas/registry.js

@@ -47,7 +47,7 @@ import { NciiCaseV1Schema, NciiCaseAllegationLinkV1Schema, NciiCaseRequestLinkV1
 import { NciiTemporaryHoldV1Schema } from './ncii/holds.js';
 import { NciiRemovalJobV1Schema, NciiRemovalTargetV1Schema, } from './ncii/removal.js';
 import { NciiPolicyConfigV1Schema, PrivilegedReviewerSecurityProfileV1Schema, } from './ncii/config.js';
-import { HallMediaReaperCursorSchema, NcmecCompletionProofRecordV1Schema, NcmecPortalCorrectionRecordV1Schema, NcmecPortalReceiptArtifactV1Schema, OperatorStepUpSchema, SafetyReconcilerCursorSchema, SweepStateSchema, } from './backend-state.js';
+import { HallMediaReaperCursorSchema, NcmecCompletionProofRecordV1Schema, NcmecPortalCorrectionRecordV1Schema, NcmecPortalReceiptArtifactV1Schema, OperatorStepUpSchema, PublicUsersReconcilerCursorSchema, SafetyReconcilerCursorSchema, SweepStateSchema, } from './backend-state.js';
 export const COLLECTION_SCHEMAS = {
     // ===== Users =====
     'userProfiles/{userId}': FullUserSchema,
@@ -126,6 +126,9 @@ export const COLLECTION_SCHEMAS = {
     'contentReports/{reportId}/publicProjection/{reportId}': ReportPublicProjectionV1Schema,
     'contentReports/{reportId}/privateDetails/snapshot': ReportTargetSnapshotV1Schema,
     'contentReports/{reportId}/privateDetails/narrative': NarrativeRecordV1Schema,
+    // The escalation narrative is byte-identical to the original — ONE shape, ONE definition
+    // (ENG-002): the same NarrativeRecordV1Schema binds both docs, never a duplicate schema.
+    'contentReports/{reportId}/privateDetails/narrativeEscalation': NarrativeRecordV1Schema,
     'activeReportGroups/{groupKey}': ReportGroupV1Schema,
     'activeReportGroups/{groupKey}/reportGroupCountedReports/{reportId}': ReportGroupCountedReportSchema,
     'adminTasks/{taskId}': AdminTaskDocSchema,
@@ -268,6 +271,7 @@ export const COLLECTION_SCHEMAS = {
     '_systemData/blockedFranchiseNames': BlockedFranchiseNamesSchema,
     '_systemData/appMode': AppModeMarkerSchema,
     '_systemData/hallMediaReaperCursor': HallMediaReaperCursorSchema,
+    '_systemData/publicUsersReconcilerCursor': PublicUsersReconcilerCursorSchema,
 };
 /**
  * Doc-id field annotation: for the listed bindings, the named body field equals the

package/dist/doc-schemas/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/doc-schemas/registry.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,0FAA0F;AAC1F,oFAAoF;AACpF,yFAAyF;AACzF,mFAAmF;AACnF,EAAE;AACF,0FAA0F;AAC1F,4EAA4E;AAG5E,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,+BAA+B,EAC/B,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,gCAAgC,EAChC,8BAA8B,EAC9B,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,8BAA8B,EAC9B,0BAA0B,EAC1B,8BAA8B,EAC9B,8BAA8B,EAC9B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,cAAc,EACd,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC/J,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EACL,qBAAqB,EACrB,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,EACvB,4BAA4B,EAC5B,mBAAmB,EACnB,uBAAuB,EACvB,uBAAuB,EACvB,4BAA4B,EAC5B,iCAAiC,EACjC,2CAA2C,GAC5C,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,GAChC,MAAM,kBAAkB,CAAC;AAC1B,kDAAkD;AAClD,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,mBAAmB,EACnB,8BAA8B,EAC9B,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,mEAAmE;AACnE,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,+BAA+B,EAC/B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,qCAAqC,EACrC,kCAAkC,EAClC,sCAAsC,EACtC,oCAAoC,GACrC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,6BAA6B,EAC7B,8CAA8C,EAC9C,sCAAsC,GACvC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,EACzB,6BAA6B,EAC7B,iCAAiC,GAClC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EACL,yBAAyB,EACzB,kCAAkC,EAClC,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AACvF,0DAA0D;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,kCAAkC,EAClC,mCAAmC,EACnC,+BAA+B,EAC/B,0BAA0B,EAC1B,qCAAqC,GACtC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,gBAAgB,EAChB,8BAA8B,EAC9B,2BAA2B,EAC3B,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,yCAAyC,GAC1C,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,2BAA2B,EAC3B,kCAAkC,EAClC,mCAAmC,EACnC,kCAAkC,EAClC,oBAAoB,EACpB,4BAA4B,EAC5B,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,oBAAoB;IACpB,uBAAuB,EAAE,cAAc;IACvC,4CAA4C,EAAE,qBAAqB;IACnE,0DAA0D,EAAE,4BAA4B;IACxF,yDAAyD,EAAE,gBAAgB;IAC3E,kDAAkD,EAAE,sBAAsB;IAC1E,8CAA8C,EAAE,4BAA4B;IAC5E,4DAA4D,EAAE,4BAA4B;IAC1F,yEAAyE,EAAE,uBAAuB;IAClG,mBAAmB,EAAE,gBAAgB;IAErC,mCAAmC;IACnC,iCAAiC,EAAE,qBAAqB;IACxD,sDAAsD,EAAE,mBAAmB;IAC3E,4DAA4D,EAAE,yBAAyB;IACvF,oEAAoE,EAAE,oBAAoB;IAC1F,2FAA2F,EAAE,cAAc;IAC3G,uEAAuE,EAAE,+BAA+B;IACxG,2DAA2D,EAAE,cAAc;IAC3E,oFAAoF,EAAE,iBAAiB;IACvG,2DAA2D,EAAE,cAAc;IAC3E,gFAAgF,EAAE,mBAAmB;IACrG,sEAAsE,EAAE,oBAAoB;IAC5F,qGAAqG,EAAE,2BAA2B;IAClI,wEAAwE,EAAE,sBAAsB;IAChG,4FAA4F;IAC5F,oCAAoC,EAAE,uBAAuB;IAC7D,0BAA0B,EAAE,eAAe;IAC3C,6FAA6F;IAC7F,6DAA6D;IAC7D,+DAA+D,EAAE,qBAAqB;IACtF,0CAA0C,EAAE,6BAA6B;IACzE,iFAAiF;IACjF,wEAAwE;IACxE,iFAAiF,EAAE,sBAAsB;IAEzG,8BAA8B;IAC9B,gFAAgF;IAChF,2EAA2E;IAC3E,6EAA6E;IAC7E,kCAAkC;IAClC,oDAAoD,EAAE,uBAAuB;IAC7E,iCAAiC,EAAE,mBAAmB;IACtD,4BAA4B,EAAE,gBAAgB;IAC9C,kCAAkC,EAAE,mBAAmB;IACvD,8EAA8E;IAC9E,gCAAgC,EAAE,2BAA2B;IAE7D,uCAAuC;IACvC,kCAAkC,EAAE,mBAAmB;IACvD,6CAA6C,EAAE,8BAA8B;IAC7E,uCAAuC,EAAE,0BAA0B;IACnE,sCAAsC,EAAE,8BAA8B;IACtE,0CAA0C,EAAE,8BAA8B;IAC1E,6BAA6B,EAAE,4BAA4B;IAC3D,kCAAkC,EAAE,yBAAyB;IAE7D,+BAA+B;IAC/B,kCAAkC,EAAE,mBAAmB;IACvD,wBAAwB,EAAE,uBAAuB;IACjD,qFAAqF;IACrF,sFAAsF;IACtF,8EAA8E;IAC9E,mBAAmB;IACnB,+CAA+C,EAAE,sBAAsB;IACvE,+CAA+C,EAAE,wBAAwB;IACzE,oDAAoD,EAAE,gCAAgC;IACtF,6CAA6C,EAAE,8BAA8B;IAE7E,oCAAoC;IACpC,0CAA0C,EAAE,2BAA2B;IACvE,qFAAqF,EAAE,wBAAwB;IAC/G,4BAA4B,EAAE,cAAc;IAC5C,8DAA8D,EAAE,mBAAmB;IAEnF,2CAA2C;IAC3C,qFAAqF;IACrF,iFAAiF;IACjF,4DAA4D;IAC5D,2BAA2B,EAAE,2BAA2B;IACxD,uDAAuD,EAAE,8BAA8B;IACvF,mDAAmD,EAAE,4BAA4B;IACjF,oDAAoD,EAAE,uBAAuB;IAC7E,+BAA+B,EAAE,mBAAmB;IACpD,oEAAoE,EAAE,8BAA8B;IACpG,qBAAqB,EAAE,kBAAkB;IACzC,iCAAiC,EAAE,sBAAsB;IACzD,wCAAwC,EAAE,+BAA+B;IACzE,mEAAmE,EAAE,iCAAiC;IACtG,uBAAuB,EAAE,mBAAmB;IAC5C,iCAAiC,EAAE,0BAA0B;IAC7D,0CAA0C,EAAE,mBAAmB;IAC/D,wFAAwF,EAAE,mBAAmB;IAC7G,iFAAiF,EAAE,sBAAsB;IAEzG,6BAA6B;IAC7B,+BAA+B,EAAE,kBAAkB;IACnD,sCAAsC,EAAE,6BAA6B;IACrE,4BAA4B,EAAE,gBAAgB;IAC9C,6BAA6B,EAAE,wBAAwB;IAEvD,4BAA4B;IAC5B,0CAA0C,EAAE,qBAAqB;IACjE,2CAA2C,EAAE,qBAAqB;IAClE,2CAA2C,EAAE,4BAA4B;IACzE,uCAAuC,EAAE,yBAAyB;IAElE,sEAAsE;IACtE,qCAAqC,EAAE,0BAA0B;IACjE,gCAAgC,EAAE,2BAA2B;IAC7D,oCAAoC,EAAE,+BAA+B;IAErE,yDAAyD;IACzD,0CAA0C,EAAE,+BAA+B;IAC3E,8BAA8B,EAAE,uBAAuB;IACvD,gEAAgE,EAAE,4BAA4B;IAC9F,0BAA0B,EAAE,mBAAmB;IAC/C,4BAA4B,EAAE,uBAAuB;IACrD,+BAA+B,EAAE,uBAAuB;IACxD,qCAAqC,EAAE,4BAA4B;IACnE,sCAAsC,EAAE,iCAAiC;IACzE,oEAAoE,EAAE,2CAA2C;IAEjH,iCAAiC;IACjC,wDAAwD,EAAE,yBAAyB;IAEnF,oCAAoC;IACpC,6CAA6C,EAAE,yBAAyB;IACxE,4CAA4C,EAAE,uBAAuB;IACrE,+BAA+B,EAAE,8BAA8B;IAC/D,sBAAsB,EAAE,eAAe;IACvC,mEAAmE,EAAE,oBAAoB;IACzF,4BAA4B,EAAE,+BAA+B;IAE7D,mEAAmE;IACnE,8BAA8B,EAAE,2BAA2B;IAC3D,iCAAiC,EAAE,uBAAuB;IAC1D,2BAA2B,EAAE,uBAAuB;IACpD,oDAAoD,EAAE,+BAA+B;IACrF,6DAA6D,EAAE,2BAA2B;IAC1F,+FAA+F,EAAE,+BAA+B;IAChI,yDAAyD,EAAE,8BAA8B;IACzF,mGAAmG,EAAE,qCAAqC;IAC1I,2DAA2D,EAAE,kCAAkC;IAC/F,yFAAyF,EAAE,sCAAsC;IACjI,iGAAiG;IACjG,qFAAqF;IACrF,uFAAuF,EAAE,kCAAkC;IAC3H,kDAAkD,EAAE,oCAAoC;IACxF,0FAA0F;IAC1F,6FAA6F;IAC7F,+DAA+D,EAAE,kCAAkC;IACnG,iEAAiE,EAAE,mCAAmC;IACtG,oCAAoC,EAAE,8BAA8B;IAEpE,+DAA+D;IAC/D,4BAA4B,EAAE,qBAAqB;IACnD,uCAAuC,EAAE,0BAA0B;IACnE,uCAAuC,EAAE,6BAA6B;IACtE,sEAAsE,EAAE,8CAA8C;IACtH,0DAA0D,EAAE,sCAAsC;IAElG,gEAAgE;IAChE,gFAAgF;IAChF,mFAAmF;IACnF,4DAA4D;IAC5D,sCAAsC,EAAE,8BAA8B;IACtE,4BAA4B,EAAE,yBAAyB;IACvD,4DAA4D,EAAE,6BAA6B;IAC3F,sEAAsE,EAAE,iCAAiC;IACzG,2BAA2B,EAAE,uBAAuB;IAEpD,qDAAqD;IACrD,6BAA6B,EAAE,yBAAyB;IACxD,qDAAqD,EAAE,kCAAkC;IACzF,kCAAkC,EAAE,0BAA0B;IAC9D,gDAAgD,EAAE,4BAA4B;IAE9E,8DAA8D;IAC9D,+BAA+B,EAAE,wBAAwB;IACzD,+BAA+B,EAAE,8BAA8B;IAE/D,4DAA4D;IAC5D,kCAAkC,EAAE,2BAA2B;IAE/D,oFAAoF;IACpF,iFAAiF;IACjF,sBAAsB,EAAE,oBAAoB;IAC5C,qCAAqC,EAAE,4BAA4B;IAEnE,kFAAkF;IAClF,wBAAwB,EAAE,gBAAgB;IAE1C,0DAA0D;IAC1D,gCAAgC,EAAE,sBAAsB;IACxD,gCAAgC,EAAE,6BAA6B;IAC/D,yDAAyD,EAAE,kCAAkC;IAC7F,qEAAqE,EAAE,4BAA4B;IACnG,+DAA+D,EAAE,kCAAkC;IACnG,kGAAkG,EAAE,mCAAmC;IACvI,6DAA6D,EAAE,+BAA+B;IAC9F,gEAAgE,EAAE,0BAA0B;IAC5F,oBAAoB,EAAE,gBAAgB;IACtC,mDAAmD,EAAE,8BAA8B;IACnF,6CAA6C,EAAE,2BAA2B;IAC1E,8CAA8C,EAAE,6BAA6B;IAC7E,2CAA2C,EAAE,uBAAuB;IACpE,6CAA6C,EAAE,qCAAqC;IACpF,sFAAsF;IACtF,4EAA4E;IAC5E,uCAAuC,EAAE,qCAAqC;IAC9E,6BAA6B,EAAE,yBAAyB;IACxD,yBAAyB,EAAE,sBAAsB;IACjD,4DAA4D,EAAE,yBAAyB;IAEvF,6CAA6C;IAC7C,gBAAgB,EAAE,eAAe;IACjC,wBAAwB,EAAE,yBAAyB;IACnD,+BAA+B,EAAE,wBAAwB;IACzD,4EAA4E;IAC5E,4EAA4E;IAC5E,+EAA+E;IAC/E,2BAA2B,EAAE,uBAAuB;IACpD,0BAA0B,EAAE,uBAAuB;IACnD,+BAA+B,EAAE,wBAAwB;IAEzD,+FAA+F;IAC/F,uBAAuB,EAAE,uBAAuB;IAChD,wBAAwB,EAAE,wBAAwB;IAClD,wCAAwC,EAAE,yCAAyC;IACnF,8EAA8E;IAC9E,sFAAsF;IACtF,gFAAgF;IAChF,uBAAuB;IACvB,qDAAqD,EAAE,mBAAmB;IAE1E,qCAAqC;IACrC,uBAAuB,EAAE,eAAe;IACxC,2BAA2B,EAAE,mBAAmB;IAChD,+BAA+B,EAAE,uBAAuB;IACxD,mCAAmC,EAAE,2BAA2B;IAChE,qBAAqB,EAAE,mBAAmB;IAC1C,mCAAmC,EAAE,2BAA2B;CACjB,CAAC;AAIlD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,2DAA2D,EAAE,KAAK;IAClE,oFAAoF,EAAE,KAAK;IAC3F,2DAA2D,EAAE,KAAK;IAClE,gFAAgF,EAAE,KAAK;IACvF,sEAAsE,EAAE,KAAK;IAC7E,qGAAqG,EAAE,KAAK;IAC5G,wEAAwE,EAAE,oBAAoB;IAC9F,uFAAuF;IACvF,oFAAoF;IACpF,+CAA+C,EAAE,KAAK;IACtD,+CAA+C,EAAE,KAAK;IACtD,oDAAoD,EAAE,KAAK;IAC3D,0CAA0C,EAAE,IAAI;IAChD,2CAA2C,EAAE,IAAI;IACjD,2CAA2C,EAAE,qBAAqB;IAClE,4DAA4D,EAAE,qBAAqB;IACnF,uCAAuC,EAAE,IAAI;IAC7C,4BAA4B,EAAE,KAAK;CACiC,CAAC;AAEvE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,cAAc;IACd,kBAAkB;IAClB,oFAAoF;IACpF,oEAAoE;IACpE,eAAe;IACf,yFAAyF;IACzF,wFAAwF;IACxF,4DAA4D;IAC5D,yBAAyB;CACjB,CAAC","sourcesContent":["// Firestore collection registry — the single, authoritative binding from each Firestore\n// collection/subcollection path template to its document Zod schema. This is the input to\n// the schema-doc generator and the drift-check, and its completeness is CI-enforced\n// (registry.test.ts) against the COLLECTIONS / *_SUBCOLLECTIONS name constants, so a new\n// collection cannot be added without either a schema or an explicit PENDING entry.\n//\n// Path templates reuse the segment names from ../paths/collections.ts (and the shapes the\n// path-builders produce). `{placeholder}` segments are document/parent IDs.\n\nimport type { z } from 'zod';\nimport {\n  FullUserSchema,\n  UserPrivateDataSchema,\n  CraftSkillSchema,\n  CraftSkillReferenceSchema,\n} from './user.js';\nimport { PublicUserSchema } from './publicUser.js';\nimport { AccountDeletionRequestV1Schema } from './account-deletion.js';\nimport {\n  FullWorkProjectSchema,\n  PublicWorkProjectSchema,\n  WorkFileFolderSchema,\n  WorkFileSchema,\n  WorkRealmSchema,\n  RealmFileFolderSchema,\n  GuildmateUserSchema,\n  PublicGuildmateUserSchema,\n} from './work-project.js';\nimport {\n  FullTaleSchema,\n  FullChapterSchema,\n  FullTuneSchema,\n  FullTuneTrackSchema,\n  FullTelevisionSchema,\n  FullTelevisionEpisodeSchema,\n  ThresholdItemSchema,\n  HallSubmissionReservationSchema,\n  PublishedHallItemSchema,\n  PublishedChapterSchema,\n  PublishedTuneTrackSchema,\n  PublishedTelevisionEpisodeSchema,\n  HallContentChangeRequestSchema,\n  FuturePlansDocumentSchema,\n  RulesAndAgreementsSchema,\n  LegalPageDocumentSchema,\n  TakeItDownPageCopySchema,\n  HallLibraryPreferencesSchema,\n} from './content.js';\nimport {\n  SquareStreetzPostSchema,\n  MentionHistoryDocumentSchema,\n  FollowEdgeSchema,\n  FollowCounterSchema,\n  SquareStreetzLikeSchema,\n  TrendingPostsSchema,\n} from './social.js';\nimport {\n  PledgePaymentSchema,\n  PledgePaymentProviderRefSchema,\n  ProcessedStripeEventSchema,\n  PledgePaymentLedgerEventSchema,\n  PaymentWebhookQuarantineSchema,\n  PledgePaymentTotalsDocSchema,\n  PledgeRefundRequestSchema,\n} from './payments.js';\nimport {\n  FullCommissionListingSchema,\n  CommissionProposalSchema,\n  AuditionSchema,\n  AuditionEntrySchema,\n  UserAuditionVoteSchema,\n} from './commissions.js';\nimport {\n  GuildChatChannelSchema,\n  GuildInviteConversationSchema,\n  AdminDispatchSchema,\n  ChatMessageV1Schema,\n  ConversationFileSchema,\n} from './messaging.js';\nimport { AppConfigSchema, AdminListSchema, ProfanityListSchema, ReservedUsernamesSchema, BlockedFranchiseNamesSchema, AppModeMarkerSchema } from './system.js';\nimport {\n  ContentViolationSchema,\n  ModerationCascadeManifestSchema,\n  ModerationCascadeChangedDocSchema,\n} from './moderation.js';\nimport {\n  AdminTaskDocSchema,\n} from './report-docs.js';\nimport { TTTAuditEventSchema } from './audit.js';\nimport {\n  NotificationDocSchema,\n  NotificationHistoryDocSchema,\n  PendingNotificationSchema,\n} from './notifications.js';\nimport {\n  NotificationDeliverySchema,\n  NotificationFanoutJobSchema,\n} from './notification-ledger.js';\nimport { NotificationArchiveAllJobSchema } from './notification-archive-all-jobs.js';\nimport {\n  ChatChannelAuthProjectionSchema,\n  ChatScopeDegradedSchema,\n  ChatScopeDegradedCauseSchema,\n  ChatSyncEventSchema,\n  ChatSyncFanoutJobSchema,\n  ChatMessageOutboxSchema,\n  ChatAdminActionCommandSchema,\n  ChatHistoryAnonymizationJobSchema,\n  ChatHistoryAnonymizationAffectedChunkSchema,\n} from './chat-sync.js';\nimport { SquareAnnouncementJobSchema } from './square-announcement-jobs.js';\nimport { PendingMediaSchema, ArchivedPendingMediaDocSchema } from '../media/pending-media.js';\nimport { MediaAssetSchema } from './media-assets.js';\nimport { MediaActivationJobSchema } from './media-activation-jobs.js';\nimport {\n  ReservedDisplayNameSchema,\n  ReservedRealmNameSchema,\n  StakeShareAuditEventSchema,\n  ShortLinkSchema,\n  FeedbackAliasSchema,\n  UserSuggestionSchema,\n  StatusReconcileQueueEntrySchema,\n} from './operational.js';\n// ===== Trust & Safety — report spine (§A1) =====\nimport {\n  ProtectedReportRootV1Schema,\n  ReportPublicProjectionV1Schema,\n  ReportGroupV1Schema,\n  ReportGroupCountedReportSchema,\n  ReportTargetSnapshotV1Schema,\n  NarrativeRecordV1Schema,\n} from './safety/report.js';\nimport { SafetyCaseAlertV1Schema } from './safety/case-alert.js';\n// ===== Trust & Safety — child-safety case spine (§A1b, §A2) =====\nimport {\n  ChildSafetyCaseListV1Schema,\n  ChildSafetyCaseV1Schema,\n  ChildSafetySourceSignalV1Schema,\n  ChildSafetyDecisionV1Schema,\n  ChildSafetyDecisionViewV1Schema,\n  ChildSafetyCaseAccountV1Schema,\n  ChildSafetyCaseAccountHistoryV1Schema,\n  ChildSafetyNcmecSubmissionV1Schema,\n  ChildSafetyNcmecSubmissionFileV1Schema,\n  ChildSafetyLegalProcessEventV1Schema,\n} from './safety/case.js';\nimport {\n  ChildSafetyOwningAliasV1Schema,\n} from './safety/case-aliases.js';\nimport {\n  SafetyHoldRefV1Schema,\n  SafetyHoldResourceV1Schema,\n  SafetyResourceCommandV1Schema,\n  SafetyResourceCommandAuthorizedRequestV1Schema,\n  SafetyResourceCommandBypassRefV1Schema,\n} from './safety/holds.js';\nimport {\n  SafetyEvidenceManifestV1Schema,\n  SafetyEvidenceJobV1Schema,\n  SafetyEvidenceJobItemV1Schema,\n  SafetyEvidenceDispositionV1Schema,\n} from './safety/evidence.js';\nimport { EventProvenanceV1Schema } from './safety/provenance.js';\nimport {\n  QuarantineSagaJobV1Schema,\n  QuarantineSagaRelatedAssetV1Schema,\n  NcmecSubmissionJobV1Schema,\n  AccountActionCommandV1Schema,\n} from './safety/sagas.js';\nimport {\n  SafetySlaMonitorV1Schema,\n  SafetyMonitorHeartbeatV1Schema,\n} from './safety/monitors.js';\nimport { AgeAttestationNonceV1Schema, AgePolicyConfigV1Schema } from './safety/age.js';\n// ===== Trust & Safety — NCII / TAKE IT DOWN (§A11) =====\nimport { NciiAllegationV1Schema } from './ncii/allegations.js';\nimport {\n  TakeItDownRequestRootV1Schema,\n  TakeItDownRequesterPrivateV1Schema,\n  TakeItDownSubmissionV1Schema,\n  TakeItDownValidityDecisionV1Schema,\n  TakeItDownValidityRationaleV1Schema,\n  TakeItDownRequestActionV1Schema,\n  TakeItDownEvidenceV1Schema,\n  NciiRetainedEvidenceInventoryV1Schema,\n} from './ncii/requests.js';\nimport {\n  NciiCaseV1Schema,\n  NciiCaseAllegationLinkV1Schema,\n  NciiCaseRequestLinkV1Schema,\n  NciiCaseRemovalActionV1Schema,\n  NciiBlockedHashV1Schema,\n} from './ncii/cases.js';\nimport { NciiTemporaryHoldV1Schema } from './ncii/holds.js';\nimport {\n  NciiRemovalJobV1Schema,\n  NciiRemovalTargetV1Schema,\n} from './ncii/removal.js';\nimport {\n  NciiPolicyConfigV1Schema,\n  PrivilegedReviewerSecurityProfileV1Schema,\n} from './ncii/config.js';\nimport {\n  HallMediaReaperCursorSchema,\n  NcmecCompletionProofRecordV1Schema,\n  NcmecPortalCorrectionRecordV1Schema,\n  NcmecPortalReceiptArtifactV1Schema,\n  OperatorStepUpSchema,\n  SafetyReconcilerCursorSchema,\n  SweepStateSchema,\n} from './backend-state.js';\n\nexport const COLLECTION_SCHEMAS = {\n  // ===== Users =====\n  'userProfiles/{userId}': FullUserSchema,\n  'userProfiles/{userId}/privateData/{userId}': UserPrivateDataSchema,\n  'userProfiles/{userId}/privateData/hallLibraryPreferences': HallLibraryPreferencesSchema,\n  'userProfiles/{userId}/profileCraftSkills/{craftSkillId}': CraftSkillSchema,\n  'userProfiles/{userId}/auditionVotes/{auditionId}': UserAuditionVoteSchema,\n  'userProfiles/{userId}/mentionHistory/{docId}': MentionHistoryDocumentSchema,\n  'userProfiles/{userId}/notificationHistory/{notificationId}': NotificationHistoryDocSchema,\n  'userProfiles/{userId}/userLikes/likeHistory/squareStreetzLikes/{postId}': SquareStreetzLikeSchema,\n  'publicUsers/{uid}': PublicUserSchema,\n\n  // ===== Work / Realm / Guild =====\n  'allWorkProjects/{workProjectId}': FullWorkProjectSchema,\n  'allWorkProjects/{workProjectId}/guildmateUsers/{uid}': GuildmateUserSchema,\n  'allWorkProjects/{workProjectId}/publicGuildmateUsers/{uid}': PublicGuildmateUserSchema,\n  'allWorkProjects/{workProjectId}/workFileFolders/{workFileFolderId}': WorkFileFolderSchema,\n  'allWorkProjects/{workProjectId}/workFileFolders/{workFileFolderId}/workFiles/{workFileId}': WorkFileSchema,\n  'allWorkProjects/{workProjectId}/hallSubmissionReservation/reservation': HallSubmissionReservationSchema,\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}': FullTaleSchema,\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}/taleChapters/{chapterId}': FullChapterSchema,\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}': FullTuneSchema,\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}/tuneTracks/{trackId}': FullTuneTrackSchema,\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}': FullTelevisionSchema,\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}/televisionEpisodes/{episodeId}': FullTelevisionEpisodeSchema,\n  'allWorkProjects/{workProjectId}/guildChatChannels/{guildChatChannelId}': GuildChatChannelSchema,\n  // Guild channel + invite messages are REALTIME-ONLY (chat Worker DO) — no Firestore schema.\n  'publicWorkProjects/{workProjectId}': PublicWorkProjectSchema,\n  'workRealms/{workRealmId}': WorkRealmSchema,\n  // Realm shared-file folders — steward-owned containers; callable-written, client-read denied\n  // (the gallery projection returns them alongside the files).\n  'workRealms/{workRealmId}/realmFileFolders/{realmFileFolderId}': RealmFileFolderSchema,\n  'guildInviteConversations/{guildInviteId}': GuildInviteConversationSchema,\n  // Conversation Files — the flat per-conversation file list. Backend-only writes;\n  // client-readable only while the caller holds conversation read access.\n  'guildInviteConversations/{guildInviteId}/conversationFiles/{conversationFileId}': ConversationFileSchema,\n\n  // ===== Square / Social =====\n  // SquareStreetzPostSchema is a refined ZodObject (superRefine for the MEDIA-101\n  // mediaAssetId↔mediaType pair invariant); the schema-doc generator and the\n  // drift-check both unwrap the effect to introspect its shape, so binding the\n  // refined schema here is correct.\n  'squareStreetzFeed/activePosts/socialPosts/{postId}': SquareStreetzPostSchema,\n  'squareStreetzFeed/trendingPosts': TrendingPostsSchema,\n  'followEdges/{followEdgeId}': FollowEdgeSchema,\n  'followCounters/{followCounterId}': FollowCounterSchema,\n  // Durable Square announcement outbox (Admin-SDK-only; deterministic job ids).\n  'squareAnnouncementJobs/{jobId}': SquareAnnouncementJobSchema,\n\n  // ===== Payments / pledge ledger =====\n  'pledgePayments/{pledgePaymentId}': PledgePaymentSchema,\n  'pledgePaymentProviderRefs/{pledgePaymentId}': PledgePaymentProviderRefSchema,\n  'processedStripeEvents/{stripeEventId}': ProcessedStripeEventSchema,\n  'pledgePaymentLedgerEvents/{ledgerId}': PledgePaymentLedgerEventSchema,\n  'paymentWebhookQuarantine/{stripeEventId}': PaymentWebhookQuarantineSchema,\n  'pledgePaymentTotals/summary': PledgePaymentTotalsDocSchema,\n  'pledgeRefundRequests/{requestId}': PledgeRefundRequestSchema,\n\n  // ===== Threshold / Hall =====\n  'thresholdItems/{thresholdItemId}': ThresholdItemSchema,\n  'hallItems/{hallItemId}': PublishedHallItemSchema,\n  // Published hall sub-item projections — the chapter/track/episode docs copied out of\n  // the Work at publish time (runPublishApprovedHallLibraryItem). Segment names are the\n  // HALL_ITEM_SUBCOLLECTIONS constants — fixed compound names, NOT derived from\n  // WorkProjectType.\n  'hallItems/{hallItemId}/hallItemTales/{itemId}': PublishedChapterSchema,\n  'hallItems/{hallItemId}/hallItemTunes/{itemId}': PublishedTuneTrackSchema,\n  'hallItems/{hallItemId}/hallItemTelevision/{itemId}': PublishedTelevisionEpisodeSchema,\n  'hallContentChangeRequests/{changeRequestId}': HallContentChangeRequestSchema,\n\n  // ===== Commission / Audition =====\n  'commissionListings/{commissionListingId}': FullCommissionListingSchema,\n  'commissionListings/{commissionListingId}/commissionProposals/{commissionProposalId}': CommissionProposalSchema,\n  'auditionBoard/{auditionId}': AuditionSchema,\n  'auditionBoard/{auditionId}/auditionEntries/{auditionEntryId}': AuditionEntrySchema,\n\n  // ===== Moderation / Reports / Admin =====\n  // The report spine (§A1): the restricted root, its public projection subdoc, and the\n  // dedup/count group. The root + projection are written by the app's submitReport\n  // callable; the group is maintained by an app-side trigger.\n  'contentReports/{reportId}': ProtectedReportRootV1Schema,\n  'contentReports/{reportId}/publicProjection/{reportId}': ReportPublicProjectionV1Schema,\n  'contentReports/{reportId}/privateDetails/snapshot': ReportTargetSnapshotV1Schema,\n  'contentReports/{reportId}/privateDetails/narrative': NarrativeRecordV1Schema,\n  'activeReportGroups/{groupKey}': ReportGroupV1Schema,\n  'activeReportGroups/{groupKey}/reportGroupCountedReports/{reportId}': ReportGroupCountedReportSchema,\n  'adminTasks/{taskId}': AdminTaskDocSchema,\n  'contentViolations/{violationId}': ContentViolationSchema,\n  'moderationCascadeManifests/{cascadeId}': ModerationCascadeManifestSchema,\n  'moderationCascadeManifests/{cascadeId}/changedDocs/{changedDocId}': ModerationCascadeChangedDocSchema,\n  'auditEvents/{eventId}': TTTAuditEventSchema,\n  'stakeShareAuditEvents/{eventId}': StakeShareAuditEventSchema,\n  'pendingAdminDispatches/{adminDispatchId}': AdminDispatchSchema,\n  'pendingAdminDispatches/{adminDispatchId}/conversationMessages/{adminDispatchMessageId}': ChatMessageV1Schema,\n  'pendingAdminDispatches/{adminDispatchId}/conversationFiles/{conversationFileId}': ConversationFileSchema,\n\n  // ===== Media pipeline =====\n  'pendingMedia/{pendingMediaId}': PendingMediaSchema,\n  'pendingMediaArchive/{pendingMediaId}': ArchivedPendingMediaDocSchema,\n  'mediaAssets/{mediaAssetId}': MediaAssetSchema,\n  'mediaActivationJobs/{jobId}': MediaActivationJobSchema,\n\n  // ===== Notifications =====\n  'activeUserNotifications/{notificationId}': NotificationDocSchema,\n  'activeAdminNotifications/{notificationId}': NotificationDocSchema,\n  'adminNotificationHistory/{notificationId}': NotificationHistoryDocSchema,\n  'pendingNotifications/{notificationId}': PendingNotificationSchema,\n\n  // ===== Notification redesign — delivery ledger + fanout engine =====\n  'notificationDeliveries/{deliveryId}': NotificationDeliverySchema,\n  'notificationFanoutJobs/{jobId}': NotificationFanoutJobSchema,\n  'notificationArchiveAllJobs/{jobId}': NotificationArchiveAllJobSchema,\n\n  // ===== Chat realtime sync / projection / commands =====\n  'chatChannelAuthProjections/{authPairKey}': ChatChannelAuthProjectionSchema,\n  'chatScopeDegraded/{scopeKey}': ChatScopeDegradedSchema,\n  'chatScopeDegraded/{scopeKey}/chatScopeDegradedCauses/{causeId}': ChatScopeDegradedCauseSchema,\n  'chatSyncEvents/{eventId}': ChatSyncEventSchema,\n  'chatSyncFanoutJobs/{jobId}': ChatSyncFanoutJobSchema,\n  'chatMessageOutbox/{commandId}': ChatMessageOutboxSchema,\n  'chatAdminActionCommands/{requestId}': ChatAdminActionCommandSchema,\n  'chatHistoryAnonymizationJobs/{jobId}': ChatHistoryAnonymizationJobSchema,\n  'chatHistoryAnonymizationJobs/{jobId}/affectedChunks/{chunkOrdinal}': ChatHistoryAnonymizationAffectedChunkSchema,\n\n  // ===== Craft skills index =====\n  'craftSkillsByTag/{tag}/taggedCraftSkills/{compositeId}': CraftSkillReferenceSchema,\n\n  // ===== Operational / utility =====\n  'reservedDisplayNames/{displayNameUppercase}': ReservedDisplayNameSchema,\n  'reservedRealmNames/{workingTitleUppercase}': ReservedRealmNameSchema,\n  'accountDeletionRequests/{uid}': AccountDeletionRequestV1Schema,\n  'shortLinks/{shortId}': ShortLinkSchema,\n  'feedbackSubmissions/{feedbackType}/userSuggestions/{suggestionId}': UserSuggestionSchema,\n  'statusReconcileQueue/{uid}': StatusReconcileQueueEntrySchema,\n\n  // ===== Trust & Safety — child-safety case spine (§A1b, §A2) =====\n  'childSafetyCaseList/{caseId}': ChildSafetyCaseListV1Schema,\n  'activeSafetyCaseAlerts/{caseId}': SafetyCaseAlertV1Schema,\n  'childSafetyCases/{caseId}': ChildSafetyCaseV1Schema,\n  'childSafetyCases/{caseId}/sourceSignals/{signalId}': ChildSafetySourceSignalV1Schema,\n  'childSafetyCases/{caseId}/childSafetyDecisions/{decisionId}': ChildSafetyDecisionV1Schema,\n  'childSafetyCases/{caseId}/childSafetyDecisions/{decisionId}/childSafetyDecisionViews/{viewId}': ChildSafetyDecisionViewV1Schema,\n  'childSafetyCases/{caseId}/childSafetyCaseAccounts/{uid}': ChildSafetyCaseAccountV1Schema,\n  'childSafetyCases/{caseId}/childSafetyCaseAccounts/{uid}/childSafetyCaseAccountHistory/{historyId}': ChildSafetyCaseAccountHistoryV1Schema,\n  'childSafetyCases/{caseId}/ncmecSubmissions/{submissionId}': ChildSafetyNcmecSubmissionV1Schema,\n  'childSafetyCases/{caseId}/ncmecSubmissions/{submissionId}/ncmecSubmissionFiles/{fileId}': ChildSafetyNcmecSubmissionFileV1Schema,\n  // [H-05] the submission's single immutable completion-proof record (fixed doc id). Backend-only,\n  // so its shape lives in doc-schemas/backend-state.ts alongside the portal artifacts.\n  'childSafetyCases/{caseId}/ncmecSubmissions/{submissionId}/ncmecCompletionProof/record': NcmecCompletionProofRecordV1Schema,\n  'childSafetyCases/{caseId}/legalProcess/{eventId}': ChildSafetyLegalProcessEventV1Schema,\n  // Portal-filed NCMEC artifacts recorded by the two step-up-gated operator callables. Both\n  // are backend-only (no client reader), so their shapes live in doc-schemas/backend-state.ts.\n  'childSafetyCases/{caseId}/portalReceiptArtifacts/{artifactId}': NcmecPortalReceiptArtifactV1Schema,\n  'childSafetyCases/{caseId}/ncmecPortalCorrections/{correctionId}': NcmecPortalCorrectionRecordV1Schema,\n  'childSafetyOwningAliases/{aliasId}': ChildSafetyOwningAliasV1Schema,\n\n  // ===== Trust & Safety — holds + resource commands (§A3) =====\n  'safetyHoldRefs/{holdRefId}': SafetyHoldRefV1Schema,\n  'safetyHoldResources/{resourceKeyHash}': SafetyHoldResourceV1Schema,\n  'safetyResourceCommands/{commandDocId}': SafetyResourceCommandV1Schema,\n  'safetyResourceCommands/{commandDocId}/authorizedRequests/{requestId}': SafetyResourceCommandAuthorizedRequestV1Schema,\n  'safetyResourceCommands/{commandDocId}/bypassRefs/{refId}': SafetyResourceCommandBypassRefV1Schema,\n\n  // ===== Trust & Safety — evidence + provenance (§A4, §A6) =====\n  // SafetyEvidenceManifestV1Schema is a refined ZodObject (superRefine for the H5\n  // sourceKind invariant); the schema-doc generator unwraps the effect to introspect\n  // its shape, so binding the refined schema here is correct.\n  'safetyEvidenceManifests/{manifestId}': SafetyEvidenceManifestV1Schema,\n  'safetyEvidenceJobs/{jobId}': SafetyEvidenceJobV1Schema,\n  'safetyEvidenceJobs/{jobId}/safetyEvidenceJobItems/{itemId}': SafetyEvidenceJobItemV1Schema,\n  'safetyEvidenceJobs/{jobId}/safetyEvidenceJobDisposition/{locationId}': SafetyEvidenceDispositionV1Schema,\n  'eventProvenance/{eventId}': EventProvenanceV1Schema,\n\n  // ===== Trust & Safety — sagas + closure (§A5) =====\n  'quarantineSagaJobs/{caseId}': QuarantineSagaJobV1Schema,\n  'quarantineSagaJobs/{caseId}/relatedAssets/{assetId}': QuarantineSagaRelatedAssetV1Schema,\n  'ncmecSubmissionJobs/{ncmecJobId}': NcmecSubmissionJobV1Schema,\n  'accountActionCommands/{accountActionCommandId}': AccountActionCommandV1Schema,\n\n  // ===== Trust & Safety — SLA monitors + heartbeat (§A8) =====\n  'safetySlaMonitors/{monitorId}': SafetySlaMonitorV1Schema,\n  'safetyMonitorHeartbeat/global': SafetyMonitorHeartbeatV1Schema,\n\n  // ===== Trust & Safety — age attestation nonces (§A7) =====\n  'ageAttestationNonces/{nonceHash}': AgeAttestationNonceV1Schema,\n\n  // ===== Trust & Safety — operator step-up + reconciler cursors (backend-only) =====\n  // Cloud-Functions-only readers/writers; client access denied in firestore.rules.\n  'operatorStepUp/{uid}': OperatorStepUpSchema,\n  'safetyReconcilerCursors/{cursorKey}': SafetyReconcilerCursorSchema,\n\n  // ===== Scheduled user sweeps — durable cadence/cursor state (backend-only) =====\n  'sweepState/{sweepName}': SweepStateSchema,\n\n  // ===== Trust & Safety — NCII / TAKE IT DOWN (§A11) =====\n  'nciiAllegations/{allegationId}': NciiAllegationV1Schema,\n  'takeItDownRequests/{requestId}': TakeItDownRequestRootV1Schema,\n  'takeItDownRequests/{requestId}/privateDetails/requester': TakeItDownRequesterPrivateV1Schema,\n  'takeItDownRequests/{requestId}/takeItDownSubmissions/{submissionId}': TakeItDownSubmissionV1Schema,\n  'takeItDownRequests/{requestId}/validityDecisions/{decisionId}': TakeItDownValidityDecisionV1Schema,\n  'takeItDownRequests/{requestId}/validityDecisions/{decisionId}/takeItDownValidityRationale/record': TakeItDownValidityRationaleV1Schema,\n  'takeItDownRequests/{requestId}/takeItDownActions/{actionId}': TakeItDownRequestActionV1Schema,\n  'takeItDownRequests/{requestId}/takeItDownEvidence/{evidenceId}': TakeItDownEvidenceV1Schema,\n  'nciiCases/{caseId}': NciiCaseV1Schema,\n  'nciiCases/{caseId}/allegationLinks/{allegationId}': NciiCaseAllegationLinkV1Schema,\n  'nciiCases/{caseId}/requestLinks/{requestId}': NciiCaseRequestLinkV1Schema,\n  'nciiCases/{caseId}/removalActions/{actionId}': NciiCaseRemovalActionV1Schema,\n  'nciiCases/{caseId}/blockedHashes/{hashId}': NciiBlockedHashV1Schema,\n  'nciiRetainedEvidenceInventory/{inventoryId}': NciiRetainedEvidenceInventoryV1Schema,\n  // [H-01] dead-letter sink for inventory rows that could not be written to the primary\n  // nciiRetainedEvidenceInventory collection. Stores the same document shape.\n  'nciiInventoryDeadLetter/{inventoryId}': NciiRetainedEvidenceInventoryV1Schema,\n  'nciiTemporaryHolds/{holdId}': NciiTemporaryHoldV1Schema,\n  'nciiRemovalJobs/{jobId}': NciiRemovalJobV1Schema,\n  'nciiRemovalJobs/{jobId}/nciiRemovalTargets/{targetKeyHash}': NciiRemovalTargetV1Schema,\n\n  // ===== _appConfig singletons (public) =====\n  '_appConfig/app': AppConfigSchema,\n  '_appConfig/futurePlans': FuturePlansDocumentSchema,\n  '_appConfig/rulesAndAgreements': RulesAndAgreementsSchema,\n  // Content-pages migration (DJ ruling 2026-07-06): /terms, /privacy, and the\n  // /take-it-down page copy render exclusively from these (all public pages —\n  // take-it-down is a NO-LOGIN page, so its copy doc must be publicly readable).\n  '_appConfig/termsOfService': LegalPageDocumentSchema,\n  '_appConfig/privacyPolicy': LegalPageDocumentSchema,\n  '_appConfig/takeItDownPageCopy': TakeItDownPageCopySchema,\n\n  // ===== _serverData singletons (server-only — Cloud-Functions-only readers, BACKEND-108) =====\n  '_serverData/agePolicy': AgePolicyConfigV1Schema,\n  '_serverData/nciiPolicy': NciiPolicyConfigV1Schema,\n  '_serverData/privilegedReviewerSecurity': PrivilegedReviewerSecurityProfileV1Schema,\n  // The submitFeedback alias map — moved off the anonymously-readable top-level\n  // `feedbackAliases` collection into the server-only bucket (BACKEND-108). The sibling\n  // `feedbackDenylist` subcollection has no field contract (`.exists`-only) — see\n  // PENDING_COLLECTIONS.\n  '_serverData/feedbackLists/feedbackAliases/{aliasId}': FeedbackAliasSchema,\n\n  // ===== _systemData singletons =====\n  '_systemData/adminList': AdminListSchema,\n  '_systemData/profanityList': ProfanityListSchema,\n  '_systemData/reservedUsernames': ReservedUsernamesSchema,\n  '_systemData/blockedFranchiseNames': BlockedFranchiseNamesSchema,\n  '_systemData/appMode': AppModeMarkerSchema,\n  '_systemData/hallMediaReaperCursor': HallMediaReaperCursorSchema,\n} as const satisfies Record<string, z.ZodTypeAny>;\n\nexport type RegisteredCollectionPath = keyof typeof COLLECTION_SCHEMAS;\n\n/**\n * Doc-id field annotation: for the listed bindings, the named body field equals the\n * Firestore document id and is injected at READ time (`{ ...doc.data(), <field>: doc.id }`),\n * never persisted — the write callables store the body via `Omit<…, '<field>'>`. The bound\n * schema models the (correct) consumer/read shape, where the field is required, so a raw\n * stored doc is \"missing\" it. The drift-check injects `{ [field]: doc.id, ...data }` before\n * validating, generalizing the one-off `AdminTaskDocSchema` stored-shape workaround into a\n * single mechanism so real-callable drift-checks don't false-flag every doc-id collection.\n * The schema-doc generator ignores this map. Keys are compiler-checked against the registry.\n */\nexport const COLLECTION_DOC_ID_FIELDS = {\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}/taleChapters/{chapterId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}/tuneTracks/{trackId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}/televisionEpisodes/{episodeId}': 'uid',\n  'allWorkProjects/{workProjectId}/guildChatChannels/{guildChatChannelId}': 'guildChatChannelId',\n  // Published hall sub-items: the doc id IS the live sub-item's id; `uid` is injected at\n  // read (the publish writer spreads the live doc's stored body, which has no `uid`).\n  'hallItems/{hallItemId}/hallItemTales/{itemId}': 'uid',\n  'hallItems/{hallItemId}/hallItemTunes/{itemId}': 'uid',\n  'hallItems/{hallItemId}/hallItemTelevision/{itemId}': 'uid',\n  'activeUserNotifications/{notificationId}': 'id',\n  'activeAdminNotifications/{notificationId}': 'id',\n  'adminNotificationHistory/{notificationId}': 'archiveOccurrenceId',\n  'userProfiles/{userId}/notificationHistory/{notificationId}': 'archiveOccurrenceId',\n  'pendingNotifications/{notificationId}': 'id',\n  'statusReconcileQueue/{uid}': 'uid',\n} as const satisfies Partial<Record<RegisteredCollectionPath, string>>;\n\n/**\n * Collections that exist (in COLLECTIONS / *_SUBCOLLECTIONS or firestore.rules) but are\n * intentionally NOT bound to a schema, each with a reason. Listed EXPLICITLY so completeness is\n * enforced and nothing is silently uncovered; the registry test fails if a NEW unlisted collection\n * appears. These are the only remaining gaps after the schema-registry binding pass:\n *\n *  - userMetadata: `userProfiles/{uid}/userMetadata/notificationSettings` — a firestore.rules\n *    match and `PATH_BUILDERS.userMetadata` exist, but there is no live reader/writer and no\n *    notification-settings type anywhere yet. Bind once that shape is implemented.\n *  - feedbackDenylist: `_serverData/feedbackLists/feedbackDenylist/{deniedWord}` — Console-managed\n *    (no callable writes it) and submitFeedback reads it via `.exists` only, so there is no field\n *    contract to author a schema from. The doc id is the denied word; the body is unused.\n *  - ncmecSubmissionAttempts: see the inline reason below.\n */\nexport const PENDING_COLLECTIONS: readonly string[] = [\n  'userMetadata',\n  'feedbackDenylist',\n  // Append-only NCII case closure/reopen event rows — the doc shape is owned app-side\n  // (NciiCaseV1 closure events), not modeled in ttt-core doc-schemas.\n  'closureEvents',\n  // Per-submission NCMEC transmission attempts. The segment exists only in firestore.rules\n  // today and has no writer or reader yet; the constant is registered so the name has one\n  // owner. Bind once the attempt-record shape is implemented.\n  'ncmecSubmissionAttempts',\n] as const;\n"]}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/doc-schemas/registry.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,0FAA0F;AAC1F,oFAAoF;AACpF,yFAAyF;AACzF,mFAAmF;AACnF,EAAE;AACF,0FAA0F;AAC1F,4EAA4E;AAG5E,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,+BAA+B,EAC/B,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,gCAAgC,EAChC,8BAA8B,EAC9B,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,8BAA8B,EAC9B,0BAA0B,EAC1B,8BAA8B,EAC9B,8BAA8B,EAC9B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,cAAc,EACd,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC/J,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EACL,qBAAqB,EACrB,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,EACvB,4BAA4B,EAC5B,mBAAmB,EACnB,uBAAuB,EACvB,uBAAuB,EACvB,4BAA4B,EAC5B,iCAAiC,EACjC,2CAA2C,GAC5C,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,GAChC,MAAM,kBAAkB,CAAC;AAC1B,kDAAkD;AAClD,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,mBAAmB,EACnB,8BAA8B,EAC9B,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,mEAAmE;AACnE,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,+BAA+B,EAC/B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,qCAAqC,EACrC,kCAAkC,EAClC,sCAAsC,EACtC,oCAAoC,GACrC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,6BAA6B,EAC7B,8CAA8C,EAC9C,sCAAsC,GACvC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,EACzB,6BAA6B,EAC7B,iCAAiC,GAClC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EACL,yBAAyB,EACzB,kCAAkC,EAClC,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AACvF,0DAA0D;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,kCAAkC,EAClC,mCAAmC,EACnC,+BAA+B,EAC/B,0BAA0B,EAC1B,qCAAqC,GACtC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,gBAAgB,EAChB,8BAA8B,EAC9B,2BAA2B,EAC3B,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,yCAAyC,GAC1C,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,2BAA2B,EAC3B,kCAAkC,EAClC,mCAAmC,EACnC,kCAAkC,EAClC,oBAAoB,EACpB,iCAAiC,EACjC,4BAA4B,EAC5B,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,oBAAoB;IACpB,uBAAuB,EAAE,cAAc;IACvC,4CAA4C,EAAE,qBAAqB;IACnE,0DAA0D,EAAE,4BAA4B;IACxF,yDAAyD,EAAE,gBAAgB;IAC3E,kDAAkD,EAAE,sBAAsB;IAC1E,8CAA8C,EAAE,4BAA4B;IAC5E,4DAA4D,EAAE,4BAA4B;IAC1F,yEAAyE,EAAE,uBAAuB;IAClG,mBAAmB,EAAE,gBAAgB;IAErC,mCAAmC;IACnC,iCAAiC,EAAE,qBAAqB;IACxD,sDAAsD,EAAE,mBAAmB;IAC3E,4DAA4D,EAAE,yBAAyB;IACvF,oEAAoE,EAAE,oBAAoB;IAC1F,2FAA2F,EAAE,cAAc;IAC3G,uEAAuE,EAAE,+BAA+B;IACxG,2DAA2D,EAAE,cAAc;IAC3E,oFAAoF,EAAE,iBAAiB;IACvG,2DAA2D,EAAE,cAAc;IAC3E,gFAAgF,EAAE,mBAAmB;IACrG,sEAAsE,EAAE,oBAAoB;IAC5F,qGAAqG,EAAE,2BAA2B;IAClI,wEAAwE,EAAE,sBAAsB;IAChG,4FAA4F;IAC5F,oCAAoC,EAAE,uBAAuB;IAC7D,0BAA0B,EAAE,eAAe;IAC3C,6FAA6F;IAC7F,6DAA6D;IAC7D,+DAA+D,EAAE,qBAAqB;IACtF,0CAA0C,EAAE,6BAA6B;IACzE,iFAAiF;IACjF,wEAAwE;IACxE,iFAAiF,EAAE,sBAAsB;IAEzG,8BAA8B;IAC9B,gFAAgF;IAChF,2EAA2E;IAC3E,6EAA6E;IAC7E,kCAAkC;IAClC,oDAAoD,EAAE,uBAAuB;IAC7E,iCAAiC,EAAE,mBAAmB;IACtD,4BAA4B,EAAE,gBAAgB;IAC9C,kCAAkC,EAAE,mBAAmB;IACvD,8EAA8E;IAC9E,gCAAgC,EAAE,2BAA2B;IAE7D,uCAAuC;IACvC,kCAAkC,EAAE,mBAAmB;IACvD,6CAA6C,EAAE,8BAA8B;IAC7E,uCAAuC,EAAE,0BAA0B;IACnE,sCAAsC,EAAE,8BAA8B;IACtE,0CAA0C,EAAE,8BAA8B;IAC1E,6BAA6B,EAAE,4BAA4B;IAC3D,kCAAkC,EAAE,yBAAyB;IAE7D,+BAA+B;IAC/B,kCAAkC,EAAE,mBAAmB;IACvD,wBAAwB,EAAE,uBAAuB;IACjD,qFAAqF;IACrF,sFAAsF;IACtF,8EAA8E;IAC9E,mBAAmB;IACnB,+CAA+C,EAAE,sBAAsB;IACvE,+CAA+C,EAAE,wBAAwB;IACzE,oDAAoD,EAAE,gCAAgC;IACtF,6CAA6C,EAAE,8BAA8B;IAE7E,oCAAoC;IACpC,0CAA0C,EAAE,2BAA2B;IACvE,qFAAqF,EAAE,wBAAwB;IAC/G,4BAA4B,EAAE,cAAc;IAC5C,8DAA8D,EAAE,mBAAmB;IAEnF,2CAA2C;IAC3C,qFAAqF;IACrF,iFAAiF;IACjF,4DAA4D;IAC5D,2BAA2B,EAAE,2BAA2B;IACxD,uDAAuD,EAAE,8BAA8B;IACvF,mDAAmD,EAAE,4BAA4B;IACjF,oDAAoD,EAAE,uBAAuB;IAC7E,yFAAyF;IACzF,yFAAyF;IACzF,8DAA8D,EAAE,uBAAuB;IACvF,+BAA+B,EAAE,mBAAmB;IACpD,oEAAoE,EAAE,8BAA8B;IACpG,qBAAqB,EAAE,kBAAkB;IACzC,iCAAiC,EAAE,sBAAsB;IACzD,wCAAwC,EAAE,+BAA+B;IACzE,mEAAmE,EAAE,iCAAiC;IACtG,uBAAuB,EAAE,mBAAmB;IAC5C,iCAAiC,EAAE,0BAA0B;IAC7D,0CAA0C,EAAE,mBAAmB;IAC/D,wFAAwF,EAAE,mBAAmB;IAC7G,iFAAiF,EAAE,sBAAsB;IAEzG,6BAA6B;IAC7B,+BAA+B,EAAE,kBAAkB;IACnD,sCAAsC,EAAE,6BAA6B;IACrE,4BAA4B,EAAE,gBAAgB;IAC9C,6BAA6B,EAAE,wBAAwB;IAEvD,4BAA4B;IAC5B,0CAA0C,EAAE,qBAAqB;IACjE,2CAA2C,EAAE,qBAAqB;IAClE,2CAA2C,EAAE,4BAA4B;IACzE,uCAAuC,EAAE,yBAAyB;IAElE,sEAAsE;IACtE,qCAAqC,EAAE,0BAA0B;IACjE,gCAAgC,EAAE,2BAA2B;IAC7D,oCAAoC,EAAE,+BAA+B;IAErE,yDAAyD;IACzD,0CAA0C,EAAE,+BAA+B;IAC3E,8BAA8B,EAAE,uBAAuB;IACvD,gEAAgE,EAAE,4BAA4B;IAC9F,0BAA0B,EAAE,mBAAmB;IAC/C,4BAA4B,EAAE,uBAAuB;IACrD,+BAA+B,EAAE,uBAAuB;IACxD,qCAAqC,EAAE,4BAA4B;IACnE,sCAAsC,EAAE,iCAAiC;IACzE,oEAAoE,EAAE,2CAA2C;IAEjH,iCAAiC;IACjC,wDAAwD,EAAE,yBAAyB;IAEnF,oCAAoC;IACpC,6CAA6C,EAAE,yBAAyB;IACxE,4CAA4C,EAAE,uBAAuB;IACrE,+BAA+B,EAAE,8BAA8B;IAC/D,sBAAsB,EAAE,eAAe;IACvC,mEAAmE,EAAE,oBAAoB;IACzF,4BAA4B,EAAE,+BAA+B;IAE7D,mEAAmE;IACnE,8BAA8B,EAAE,2BAA2B;IAC3D,iCAAiC,EAAE,uBAAuB;IAC1D,2BAA2B,EAAE,uBAAuB;IACpD,oDAAoD,EAAE,+BAA+B;IACrF,6DAA6D,EAAE,2BAA2B;IAC1F,+FAA+F,EAAE,+BAA+B;IAChI,yDAAyD,EAAE,8BAA8B;IACzF,mGAAmG,EAAE,qCAAqC;IAC1I,2DAA2D,EAAE,kCAAkC;IAC/F,yFAAyF,EAAE,sCAAsC;IACjI,iGAAiG;IACjG,qFAAqF;IACrF,uFAAuF,EAAE,kCAAkC;IAC3H,kDAAkD,EAAE,oCAAoC;IACxF,0FAA0F;IAC1F,6FAA6F;IAC7F,+DAA+D,EAAE,kCAAkC;IACnG,iEAAiE,EAAE,mCAAmC;IACtG,oCAAoC,EAAE,8BAA8B;IAEpE,+DAA+D;IAC/D,4BAA4B,EAAE,qBAAqB;IACnD,uCAAuC,EAAE,0BAA0B;IACnE,uCAAuC,EAAE,6BAA6B;IACtE,sEAAsE,EAAE,8CAA8C;IACtH,0DAA0D,EAAE,sCAAsC;IAElG,gEAAgE;IAChE,gFAAgF;IAChF,mFAAmF;IACnF,4DAA4D;IAC5D,sCAAsC,EAAE,8BAA8B;IACtE,4BAA4B,EAAE,yBAAyB;IACvD,4DAA4D,EAAE,6BAA6B;IAC3F,sEAAsE,EAAE,iCAAiC;IACzG,2BAA2B,EAAE,uBAAuB;IAEpD,qDAAqD;IACrD,6BAA6B,EAAE,yBAAyB;IACxD,qDAAqD,EAAE,kCAAkC;IACzF,kCAAkC,EAAE,0BAA0B;IAC9D,gDAAgD,EAAE,4BAA4B;IAE9E,8DAA8D;IAC9D,+BAA+B,EAAE,wBAAwB;IACzD,+BAA+B,EAAE,8BAA8B;IAE/D,4DAA4D;IAC5D,kCAAkC,EAAE,2BAA2B;IAE/D,oFAAoF;IACpF,iFAAiF;IACjF,sBAAsB,EAAE,oBAAoB;IAC5C,qCAAqC,EAAE,4BAA4B;IAEnE,kFAAkF;IAClF,wBAAwB,EAAE,gBAAgB;IAE1C,0DAA0D;IAC1D,gCAAgC,EAAE,sBAAsB;IACxD,gCAAgC,EAAE,6BAA6B;IAC/D,yDAAyD,EAAE,kCAAkC;IAC7F,qEAAqE,EAAE,4BAA4B;IACnG,+DAA+D,EAAE,kCAAkC;IACnG,kGAAkG,EAAE,mCAAmC;IACvI,6DAA6D,EAAE,+BAA+B;IAC9F,gEAAgE,EAAE,0BAA0B;IAC5F,oBAAoB,EAAE,gBAAgB;IACtC,mDAAmD,EAAE,8BAA8B;IACnF,6CAA6C,EAAE,2BAA2B;IAC1E,8CAA8C,EAAE,6BAA6B;IAC7E,2CAA2C,EAAE,uBAAuB;IACpE,6CAA6C,EAAE,qCAAqC;IACpF,sFAAsF;IACtF,4EAA4E;IAC5E,uCAAuC,EAAE,qCAAqC;IAC9E,6BAA6B,EAAE,yBAAyB;IACxD,yBAAyB,EAAE,sBAAsB;IACjD,4DAA4D,EAAE,yBAAyB;IAEvF,6CAA6C;IAC7C,gBAAgB,EAAE,eAAe;IACjC,wBAAwB,EAAE,yBAAyB;IACnD,+BAA+B,EAAE,wBAAwB;IACzD,4EAA4E;IAC5E,4EAA4E;IAC5E,+EAA+E;IAC/E,2BAA2B,EAAE,uBAAuB;IACpD,0BAA0B,EAAE,uBAAuB;IACnD,+BAA+B,EAAE,wBAAwB;IAEzD,+FAA+F;IAC/F,uBAAuB,EAAE,uBAAuB;IAChD,wBAAwB,EAAE,wBAAwB;IAClD,wCAAwC,EAAE,yCAAyC;IACnF,8EAA8E;IAC9E,sFAAsF;IACtF,gFAAgF;IAChF,uBAAuB;IACvB,qDAAqD,EAAE,mBAAmB;IAE1E,qCAAqC;IACrC,uBAAuB,EAAE,eAAe;IACxC,2BAA2B,EAAE,mBAAmB;IAChD,+BAA+B,EAAE,uBAAuB;IACxD,mCAAmC,EAAE,2BAA2B;IAChE,qBAAqB,EAAE,mBAAmB;IAC1C,mCAAmC,EAAE,2BAA2B;IAChE,yCAAyC,EAAE,iCAAiC;CAC7B,CAAC;AAIlD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,2DAA2D,EAAE,KAAK;IAClE,oFAAoF,EAAE,KAAK;IAC3F,2DAA2D,EAAE,KAAK;IAClE,gFAAgF,EAAE,KAAK;IACvF,sEAAsE,EAAE,KAAK;IAC7E,qGAAqG,EAAE,KAAK;IAC5G,wEAAwE,EAAE,oBAAoB;IAC9F,uFAAuF;IACvF,oFAAoF;IACpF,+CAA+C,EAAE,KAAK;IACtD,+CAA+C,EAAE,KAAK;IACtD,oDAAoD,EAAE,KAAK;IAC3D,0CAA0C,EAAE,IAAI;IAChD,2CAA2C,EAAE,IAAI;IACjD,2CAA2C,EAAE,qBAAqB;IAClE,4DAA4D,EAAE,qBAAqB;IACnF,uCAAuC,EAAE,IAAI;IAC7C,4BAA4B,EAAE,KAAK;CACiC,CAAC;AAEvE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,cAAc;IACd,kBAAkB;IAClB,oFAAoF;IACpF,oEAAoE;IACpE,eAAe;IACf,yFAAyF;IACzF,wFAAwF;IACxF,4DAA4D;IAC5D,yBAAyB;CACjB,CAAC","sourcesContent":["// Firestore collection registry — the single, authoritative binding from each Firestore\n// collection/subcollection path template to its document Zod schema. This is the input to\n// the schema-doc generator and the drift-check, and its completeness is CI-enforced\n// (registry.test.ts) against the COLLECTIONS / *_SUBCOLLECTIONS name constants, so a new\n// collection cannot be added without either a schema or an explicit PENDING entry.\n//\n// Path templates reuse the segment names from ../paths/collections.ts (and the shapes the\n// path-builders produce). `{placeholder}` segments are document/parent IDs.\n\nimport type { z } from 'zod';\nimport {\n  FullUserSchema,\n  UserPrivateDataSchema,\n  CraftSkillSchema,\n  CraftSkillReferenceSchema,\n} from './user.js';\nimport { PublicUserSchema } from './publicUser.js';\nimport { AccountDeletionRequestV1Schema } from './account-deletion.js';\nimport {\n  FullWorkProjectSchema,\n  PublicWorkProjectSchema,\n  WorkFileFolderSchema,\n  WorkFileSchema,\n  WorkRealmSchema,\n  RealmFileFolderSchema,\n  GuildmateUserSchema,\n  PublicGuildmateUserSchema,\n} from './work-project.js';\nimport {\n  FullTaleSchema,\n  FullChapterSchema,\n  FullTuneSchema,\n  FullTuneTrackSchema,\n  FullTelevisionSchema,\n  FullTelevisionEpisodeSchema,\n  ThresholdItemSchema,\n  HallSubmissionReservationSchema,\n  PublishedHallItemSchema,\n  PublishedChapterSchema,\n  PublishedTuneTrackSchema,\n  PublishedTelevisionEpisodeSchema,\n  HallContentChangeRequestSchema,\n  FuturePlansDocumentSchema,\n  RulesAndAgreementsSchema,\n  LegalPageDocumentSchema,\n  TakeItDownPageCopySchema,\n  HallLibraryPreferencesSchema,\n} from './content.js';\nimport {\n  SquareStreetzPostSchema,\n  MentionHistoryDocumentSchema,\n  FollowEdgeSchema,\n  FollowCounterSchema,\n  SquareStreetzLikeSchema,\n  TrendingPostsSchema,\n} from './social.js';\nimport {\n  PledgePaymentSchema,\n  PledgePaymentProviderRefSchema,\n  ProcessedStripeEventSchema,\n  PledgePaymentLedgerEventSchema,\n  PaymentWebhookQuarantineSchema,\n  PledgePaymentTotalsDocSchema,\n  PledgeRefundRequestSchema,\n} from './payments.js';\nimport {\n  FullCommissionListingSchema,\n  CommissionProposalSchema,\n  AuditionSchema,\n  AuditionEntrySchema,\n  UserAuditionVoteSchema,\n} from './commissions.js';\nimport {\n  GuildChatChannelSchema,\n  GuildInviteConversationSchema,\n  AdminDispatchSchema,\n  ChatMessageV1Schema,\n  ConversationFileSchema,\n} from './messaging.js';\nimport { AppConfigSchema, AdminListSchema, ProfanityListSchema, ReservedUsernamesSchema, BlockedFranchiseNamesSchema, AppModeMarkerSchema } from './system.js';\nimport {\n  ContentViolationSchema,\n  ModerationCascadeManifestSchema,\n  ModerationCascadeChangedDocSchema,\n} from './moderation.js';\nimport {\n  AdminTaskDocSchema,\n} from './report-docs.js';\nimport { TTTAuditEventSchema } from './audit.js';\nimport {\n  NotificationDocSchema,\n  NotificationHistoryDocSchema,\n  PendingNotificationSchema,\n} from './notifications.js';\nimport {\n  NotificationDeliverySchema,\n  NotificationFanoutJobSchema,\n} from './notification-ledger.js';\nimport { NotificationArchiveAllJobSchema } from './notification-archive-all-jobs.js';\nimport {\n  ChatChannelAuthProjectionSchema,\n  ChatScopeDegradedSchema,\n  ChatScopeDegradedCauseSchema,\n  ChatSyncEventSchema,\n  ChatSyncFanoutJobSchema,\n  ChatMessageOutboxSchema,\n  ChatAdminActionCommandSchema,\n  ChatHistoryAnonymizationJobSchema,\n  ChatHistoryAnonymizationAffectedChunkSchema,\n} from './chat-sync.js';\nimport { SquareAnnouncementJobSchema } from './square-announcement-jobs.js';\nimport { PendingMediaSchema, ArchivedPendingMediaDocSchema } from '../media/pending-media.js';\nimport { MediaAssetSchema } from './media-assets.js';\nimport { MediaActivationJobSchema } from './media-activation-jobs.js';\nimport {\n  ReservedDisplayNameSchema,\n  ReservedRealmNameSchema,\n  StakeShareAuditEventSchema,\n  ShortLinkSchema,\n  FeedbackAliasSchema,\n  UserSuggestionSchema,\n  StatusReconcileQueueEntrySchema,\n} from './operational.js';\n// ===== Trust & Safety — report spine (§A1) =====\nimport {\n  ProtectedReportRootV1Schema,\n  ReportPublicProjectionV1Schema,\n  ReportGroupV1Schema,\n  ReportGroupCountedReportSchema,\n  ReportTargetSnapshotV1Schema,\n  NarrativeRecordV1Schema,\n} from './safety/report.js';\nimport { SafetyCaseAlertV1Schema } from './safety/case-alert.js';\n// ===== Trust & Safety — child-safety case spine (§A1b, §A2) =====\nimport {\n  ChildSafetyCaseListV1Schema,\n  ChildSafetyCaseV1Schema,\n  ChildSafetySourceSignalV1Schema,\n  ChildSafetyDecisionV1Schema,\n  ChildSafetyDecisionViewV1Schema,\n  ChildSafetyCaseAccountV1Schema,\n  ChildSafetyCaseAccountHistoryV1Schema,\n  ChildSafetyNcmecSubmissionV1Schema,\n  ChildSafetyNcmecSubmissionFileV1Schema,\n  ChildSafetyLegalProcessEventV1Schema,\n} from './safety/case.js';\nimport {\n  ChildSafetyOwningAliasV1Schema,\n} from './safety/case-aliases.js';\nimport {\n  SafetyHoldRefV1Schema,\n  SafetyHoldResourceV1Schema,\n  SafetyResourceCommandV1Schema,\n  SafetyResourceCommandAuthorizedRequestV1Schema,\n  SafetyResourceCommandBypassRefV1Schema,\n} from './safety/holds.js';\nimport {\n  SafetyEvidenceManifestV1Schema,\n  SafetyEvidenceJobV1Schema,\n  SafetyEvidenceJobItemV1Schema,\n  SafetyEvidenceDispositionV1Schema,\n} from './safety/evidence.js';\nimport { EventProvenanceV1Schema } from './safety/provenance.js';\nimport {\n  QuarantineSagaJobV1Schema,\n  QuarantineSagaRelatedAssetV1Schema,\n  NcmecSubmissionJobV1Schema,\n  AccountActionCommandV1Schema,\n} from './safety/sagas.js';\nimport {\n  SafetySlaMonitorV1Schema,\n  SafetyMonitorHeartbeatV1Schema,\n} from './safety/monitors.js';\nimport { AgeAttestationNonceV1Schema, AgePolicyConfigV1Schema } from './safety/age.js';\n// ===== Trust & Safety — NCII / TAKE IT DOWN (§A11) =====\nimport { NciiAllegationV1Schema } from './ncii/allegations.js';\nimport {\n  TakeItDownRequestRootV1Schema,\n  TakeItDownRequesterPrivateV1Schema,\n  TakeItDownSubmissionV1Schema,\n  TakeItDownValidityDecisionV1Schema,\n  TakeItDownValidityRationaleV1Schema,\n  TakeItDownRequestActionV1Schema,\n  TakeItDownEvidenceV1Schema,\n  NciiRetainedEvidenceInventoryV1Schema,\n} from './ncii/requests.js';\nimport {\n  NciiCaseV1Schema,\n  NciiCaseAllegationLinkV1Schema,\n  NciiCaseRequestLinkV1Schema,\n  NciiCaseRemovalActionV1Schema,\n  NciiBlockedHashV1Schema,\n} from './ncii/cases.js';\nimport { NciiTemporaryHoldV1Schema } from './ncii/holds.js';\nimport {\n  NciiRemovalJobV1Schema,\n  NciiRemovalTargetV1Schema,\n} from './ncii/removal.js';\nimport {\n  NciiPolicyConfigV1Schema,\n  PrivilegedReviewerSecurityProfileV1Schema,\n} from './ncii/config.js';\nimport {\n  HallMediaReaperCursorSchema,\n  NcmecCompletionProofRecordV1Schema,\n  NcmecPortalCorrectionRecordV1Schema,\n  NcmecPortalReceiptArtifactV1Schema,\n  OperatorStepUpSchema,\n  PublicUsersReconcilerCursorSchema,\n  SafetyReconcilerCursorSchema,\n  SweepStateSchema,\n} from './backend-state.js';\n\nexport const COLLECTION_SCHEMAS = {\n  // ===== Users =====\n  'userProfiles/{userId}': FullUserSchema,\n  'userProfiles/{userId}/privateData/{userId}': UserPrivateDataSchema,\n  'userProfiles/{userId}/privateData/hallLibraryPreferences': HallLibraryPreferencesSchema,\n  'userProfiles/{userId}/profileCraftSkills/{craftSkillId}': CraftSkillSchema,\n  'userProfiles/{userId}/auditionVotes/{auditionId}': UserAuditionVoteSchema,\n  'userProfiles/{userId}/mentionHistory/{docId}': MentionHistoryDocumentSchema,\n  'userProfiles/{userId}/notificationHistory/{notificationId}': NotificationHistoryDocSchema,\n  'userProfiles/{userId}/userLikes/likeHistory/squareStreetzLikes/{postId}': SquareStreetzLikeSchema,\n  'publicUsers/{uid}': PublicUserSchema,\n\n  // ===== Work / Realm / Guild =====\n  'allWorkProjects/{workProjectId}': FullWorkProjectSchema,\n  'allWorkProjects/{workProjectId}/guildmateUsers/{uid}': GuildmateUserSchema,\n  'allWorkProjects/{workProjectId}/publicGuildmateUsers/{uid}': PublicGuildmateUserSchema,\n  'allWorkProjects/{workProjectId}/workFileFolders/{workFileFolderId}': WorkFileFolderSchema,\n  'allWorkProjects/{workProjectId}/workFileFolders/{workFileFolderId}/workFiles/{workFileId}': WorkFileSchema,\n  'allWorkProjects/{workProjectId}/hallSubmissionReservation/reservation': HallSubmissionReservationSchema,\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}': FullTaleSchema,\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}/taleChapters/{chapterId}': FullChapterSchema,\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}': FullTuneSchema,\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}/tuneTracks/{trackId}': FullTuneTrackSchema,\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}': FullTelevisionSchema,\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}/televisionEpisodes/{episodeId}': FullTelevisionEpisodeSchema,\n  'allWorkProjects/{workProjectId}/guildChatChannels/{guildChatChannelId}': GuildChatChannelSchema,\n  // Guild channel + invite messages are REALTIME-ONLY (chat Worker DO) — no Firestore schema.\n  'publicWorkProjects/{workProjectId}': PublicWorkProjectSchema,\n  'workRealms/{workRealmId}': WorkRealmSchema,\n  // Realm shared-file folders — steward-owned containers; callable-written, client-read denied\n  // (the gallery projection returns them alongside the files).\n  'workRealms/{workRealmId}/realmFileFolders/{realmFileFolderId}': RealmFileFolderSchema,\n  'guildInviteConversations/{guildInviteId}': GuildInviteConversationSchema,\n  // Conversation Files — the flat per-conversation file list. Backend-only writes;\n  // client-readable only while the caller holds conversation read access.\n  'guildInviteConversations/{guildInviteId}/conversationFiles/{conversationFileId}': ConversationFileSchema,\n\n  // ===== Square / Social =====\n  // SquareStreetzPostSchema is a refined ZodObject (superRefine for the MEDIA-101\n  // mediaAssetId↔mediaType pair invariant); the schema-doc generator and the\n  // drift-check both unwrap the effect to introspect its shape, so binding the\n  // refined schema here is correct.\n  'squareStreetzFeed/activePosts/socialPosts/{postId}': SquareStreetzPostSchema,\n  'squareStreetzFeed/trendingPosts': TrendingPostsSchema,\n  'followEdges/{followEdgeId}': FollowEdgeSchema,\n  'followCounters/{followCounterId}': FollowCounterSchema,\n  // Durable Square announcement outbox (Admin-SDK-only; deterministic job ids).\n  'squareAnnouncementJobs/{jobId}': SquareAnnouncementJobSchema,\n\n  // ===== Payments / pledge ledger =====\n  'pledgePayments/{pledgePaymentId}': PledgePaymentSchema,\n  'pledgePaymentProviderRefs/{pledgePaymentId}': PledgePaymentProviderRefSchema,\n  'processedStripeEvents/{stripeEventId}': ProcessedStripeEventSchema,\n  'pledgePaymentLedgerEvents/{ledgerId}': PledgePaymentLedgerEventSchema,\n  'paymentWebhookQuarantine/{stripeEventId}': PaymentWebhookQuarantineSchema,\n  'pledgePaymentTotals/summary': PledgePaymentTotalsDocSchema,\n  'pledgeRefundRequests/{requestId}': PledgeRefundRequestSchema,\n\n  // ===== Threshold / Hall =====\n  'thresholdItems/{thresholdItemId}': ThresholdItemSchema,\n  'hallItems/{hallItemId}': PublishedHallItemSchema,\n  // Published hall sub-item projections — the chapter/track/episode docs copied out of\n  // the Work at publish time (runPublishApprovedHallLibraryItem). Segment names are the\n  // HALL_ITEM_SUBCOLLECTIONS constants — fixed compound names, NOT derived from\n  // WorkProjectType.\n  'hallItems/{hallItemId}/hallItemTales/{itemId}': PublishedChapterSchema,\n  'hallItems/{hallItemId}/hallItemTunes/{itemId}': PublishedTuneTrackSchema,\n  'hallItems/{hallItemId}/hallItemTelevision/{itemId}': PublishedTelevisionEpisodeSchema,\n  'hallContentChangeRequests/{changeRequestId}': HallContentChangeRequestSchema,\n\n  // ===== Commission / Audition =====\n  'commissionListings/{commissionListingId}': FullCommissionListingSchema,\n  'commissionListings/{commissionListingId}/commissionProposals/{commissionProposalId}': CommissionProposalSchema,\n  'auditionBoard/{auditionId}': AuditionSchema,\n  'auditionBoard/{auditionId}/auditionEntries/{auditionEntryId}': AuditionEntrySchema,\n\n  // ===== Moderation / Reports / Admin =====\n  // The report spine (§A1): the restricted root, its public projection subdoc, and the\n  // dedup/count group. The root + projection are written by the app's submitReport\n  // callable; the group is maintained by an app-side trigger.\n  'contentReports/{reportId}': ProtectedReportRootV1Schema,\n  'contentReports/{reportId}/publicProjection/{reportId}': ReportPublicProjectionV1Schema,\n  'contentReports/{reportId}/privateDetails/snapshot': ReportTargetSnapshotV1Schema,\n  'contentReports/{reportId}/privateDetails/narrative': NarrativeRecordV1Schema,\n  // The escalation narrative is byte-identical to the original — ONE shape, ONE definition\n  // (ENG-002): the same NarrativeRecordV1Schema binds both docs, never a duplicate schema.\n  'contentReports/{reportId}/privateDetails/narrativeEscalation': NarrativeRecordV1Schema,\n  'activeReportGroups/{groupKey}': ReportGroupV1Schema,\n  'activeReportGroups/{groupKey}/reportGroupCountedReports/{reportId}': ReportGroupCountedReportSchema,\n  'adminTasks/{taskId}': AdminTaskDocSchema,\n  'contentViolations/{violationId}': ContentViolationSchema,\n  'moderationCascadeManifests/{cascadeId}': ModerationCascadeManifestSchema,\n  'moderationCascadeManifests/{cascadeId}/changedDocs/{changedDocId}': ModerationCascadeChangedDocSchema,\n  'auditEvents/{eventId}': TTTAuditEventSchema,\n  'stakeShareAuditEvents/{eventId}': StakeShareAuditEventSchema,\n  'pendingAdminDispatches/{adminDispatchId}': AdminDispatchSchema,\n  'pendingAdminDispatches/{adminDispatchId}/conversationMessages/{adminDispatchMessageId}': ChatMessageV1Schema,\n  'pendingAdminDispatches/{adminDispatchId}/conversationFiles/{conversationFileId}': ConversationFileSchema,\n\n  // ===== Media pipeline =====\n  'pendingMedia/{pendingMediaId}': PendingMediaSchema,\n  'pendingMediaArchive/{pendingMediaId}': ArchivedPendingMediaDocSchema,\n  'mediaAssets/{mediaAssetId}': MediaAssetSchema,\n  'mediaActivationJobs/{jobId}': MediaActivationJobSchema,\n\n  // ===== Notifications =====\n  'activeUserNotifications/{notificationId}': NotificationDocSchema,\n  'activeAdminNotifications/{notificationId}': NotificationDocSchema,\n  'adminNotificationHistory/{notificationId}': NotificationHistoryDocSchema,\n  'pendingNotifications/{notificationId}': PendingNotificationSchema,\n\n  // ===== Notification redesign — delivery ledger + fanout engine =====\n  'notificationDeliveries/{deliveryId}': NotificationDeliverySchema,\n  'notificationFanoutJobs/{jobId}': NotificationFanoutJobSchema,\n  'notificationArchiveAllJobs/{jobId}': NotificationArchiveAllJobSchema,\n\n  // ===== Chat realtime sync / projection / commands =====\n  'chatChannelAuthProjections/{authPairKey}': ChatChannelAuthProjectionSchema,\n  'chatScopeDegraded/{scopeKey}': ChatScopeDegradedSchema,\n  'chatScopeDegraded/{scopeKey}/chatScopeDegradedCauses/{causeId}': ChatScopeDegradedCauseSchema,\n  'chatSyncEvents/{eventId}': ChatSyncEventSchema,\n  'chatSyncFanoutJobs/{jobId}': ChatSyncFanoutJobSchema,\n  'chatMessageOutbox/{commandId}': ChatMessageOutboxSchema,\n  'chatAdminActionCommands/{requestId}': ChatAdminActionCommandSchema,\n  'chatHistoryAnonymizationJobs/{jobId}': ChatHistoryAnonymizationJobSchema,\n  'chatHistoryAnonymizationJobs/{jobId}/affectedChunks/{chunkOrdinal}': ChatHistoryAnonymizationAffectedChunkSchema,\n\n  // ===== Craft skills index =====\n  'craftSkillsByTag/{tag}/taggedCraftSkills/{compositeId}': CraftSkillReferenceSchema,\n\n  // ===== Operational / utility =====\n  'reservedDisplayNames/{displayNameUppercase}': ReservedDisplayNameSchema,\n  'reservedRealmNames/{workingTitleUppercase}': ReservedRealmNameSchema,\n  'accountDeletionRequests/{uid}': AccountDeletionRequestV1Schema,\n  'shortLinks/{shortId}': ShortLinkSchema,\n  'feedbackSubmissions/{feedbackType}/userSuggestions/{suggestionId}': UserSuggestionSchema,\n  'statusReconcileQueue/{uid}': StatusReconcileQueueEntrySchema,\n\n  // ===== Trust & Safety — child-safety case spine (§A1b, §A2) =====\n  'childSafetyCaseList/{caseId}': ChildSafetyCaseListV1Schema,\n  'activeSafetyCaseAlerts/{caseId}': SafetyCaseAlertV1Schema,\n  'childSafetyCases/{caseId}': ChildSafetyCaseV1Schema,\n  'childSafetyCases/{caseId}/sourceSignals/{signalId}': ChildSafetySourceSignalV1Schema,\n  'childSafetyCases/{caseId}/childSafetyDecisions/{decisionId}': ChildSafetyDecisionV1Schema,\n  'childSafetyCases/{caseId}/childSafetyDecisions/{decisionId}/childSafetyDecisionViews/{viewId}': ChildSafetyDecisionViewV1Schema,\n  'childSafetyCases/{caseId}/childSafetyCaseAccounts/{uid}': ChildSafetyCaseAccountV1Schema,\n  'childSafetyCases/{caseId}/childSafetyCaseAccounts/{uid}/childSafetyCaseAccountHistory/{historyId}': ChildSafetyCaseAccountHistoryV1Schema,\n  'childSafetyCases/{caseId}/ncmecSubmissions/{submissionId}': ChildSafetyNcmecSubmissionV1Schema,\n  'childSafetyCases/{caseId}/ncmecSubmissions/{submissionId}/ncmecSubmissionFiles/{fileId}': ChildSafetyNcmecSubmissionFileV1Schema,\n  // [H-05] the submission's single immutable completion-proof record (fixed doc id). Backend-only,\n  // so its shape lives in doc-schemas/backend-state.ts alongside the portal artifacts.\n  'childSafetyCases/{caseId}/ncmecSubmissions/{submissionId}/ncmecCompletionProof/record': NcmecCompletionProofRecordV1Schema,\n  'childSafetyCases/{caseId}/legalProcess/{eventId}': ChildSafetyLegalProcessEventV1Schema,\n  // Portal-filed NCMEC artifacts recorded by the two step-up-gated operator callables. Both\n  // are backend-only (no client reader), so their shapes live in doc-schemas/backend-state.ts.\n  'childSafetyCases/{caseId}/portalReceiptArtifacts/{artifactId}': NcmecPortalReceiptArtifactV1Schema,\n  'childSafetyCases/{caseId}/ncmecPortalCorrections/{correctionId}': NcmecPortalCorrectionRecordV1Schema,\n  'childSafetyOwningAliases/{aliasId}': ChildSafetyOwningAliasV1Schema,\n\n  // ===== Trust & Safety — holds + resource commands (§A3) =====\n  'safetyHoldRefs/{holdRefId}': SafetyHoldRefV1Schema,\n  'safetyHoldResources/{resourceKeyHash}': SafetyHoldResourceV1Schema,\n  'safetyResourceCommands/{commandDocId}': SafetyResourceCommandV1Schema,\n  'safetyResourceCommands/{commandDocId}/authorizedRequests/{requestId}': SafetyResourceCommandAuthorizedRequestV1Schema,\n  'safetyResourceCommands/{commandDocId}/bypassRefs/{refId}': SafetyResourceCommandBypassRefV1Schema,\n\n  // ===== Trust & Safety — evidence + provenance (§A4, §A6) =====\n  // SafetyEvidenceManifestV1Schema is a refined ZodObject (superRefine for the H5\n  // sourceKind invariant); the schema-doc generator unwraps the effect to introspect\n  // its shape, so binding the refined schema here is correct.\n  'safetyEvidenceManifests/{manifestId}': SafetyEvidenceManifestV1Schema,\n  'safetyEvidenceJobs/{jobId}': SafetyEvidenceJobV1Schema,\n  'safetyEvidenceJobs/{jobId}/safetyEvidenceJobItems/{itemId}': SafetyEvidenceJobItemV1Schema,\n  'safetyEvidenceJobs/{jobId}/safetyEvidenceJobDisposition/{locationId}': SafetyEvidenceDispositionV1Schema,\n  'eventProvenance/{eventId}': EventProvenanceV1Schema,\n\n  // ===== Trust & Safety — sagas + closure (§A5) =====\n  'quarantineSagaJobs/{caseId}': QuarantineSagaJobV1Schema,\n  'quarantineSagaJobs/{caseId}/relatedAssets/{assetId}': QuarantineSagaRelatedAssetV1Schema,\n  'ncmecSubmissionJobs/{ncmecJobId}': NcmecSubmissionJobV1Schema,\n  'accountActionCommands/{accountActionCommandId}': AccountActionCommandV1Schema,\n\n  // ===== Trust & Safety — SLA monitors + heartbeat (§A8) =====\n  'safetySlaMonitors/{monitorId}': SafetySlaMonitorV1Schema,\n  'safetyMonitorHeartbeat/global': SafetyMonitorHeartbeatV1Schema,\n\n  // ===== Trust & Safety — age attestation nonces (§A7) =====\n  'ageAttestationNonces/{nonceHash}': AgeAttestationNonceV1Schema,\n\n  // ===== Trust & Safety — operator step-up + reconciler cursors (backend-only) =====\n  // Cloud-Functions-only readers/writers; client access denied in firestore.rules.\n  'operatorStepUp/{uid}': OperatorStepUpSchema,\n  'safetyReconcilerCursors/{cursorKey}': SafetyReconcilerCursorSchema,\n\n  // ===== Scheduled user sweeps — durable cadence/cursor state (backend-only) =====\n  'sweepState/{sweepName}': SweepStateSchema,\n\n  // ===== Trust & Safety — NCII / TAKE IT DOWN (§A11) =====\n  'nciiAllegations/{allegationId}': NciiAllegationV1Schema,\n  'takeItDownRequests/{requestId}': TakeItDownRequestRootV1Schema,\n  'takeItDownRequests/{requestId}/privateDetails/requester': TakeItDownRequesterPrivateV1Schema,\n  'takeItDownRequests/{requestId}/takeItDownSubmissions/{submissionId}': TakeItDownSubmissionV1Schema,\n  'takeItDownRequests/{requestId}/validityDecisions/{decisionId}': TakeItDownValidityDecisionV1Schema,\n  'takeItDownRequests/{requestId}/validityDecisions/{decisionId}/takeItDownValidityRationale/record': TakeItDownValidityRationaleV1Schema,\n  'takeItDownRequests/{requestId}/takeItDownActions/{actionId}': TakeItDownRequestActionV1Schema,\n  'takeItDownRequests/{requestId}/takeItDownEvidence/{evidenceId}': TakeItDownEvidenceV1Schema,\n  'nciiCases/{caseId}': NciiCaseV1Schema,\n  'nciiCases/{caseId}/allegationLinks/{allegationId}': NciiCaseAllegationLinkV1Schema,\n  'nciiCases/{caseId}/requestLinks/{requestId}': NciiCaseRequestLinkV1Schema,\n  'nciiCases/{caseId}/removalActions/{actionId}': NciiCaseRemovalActionV1Schema,\n  'nciiCases/{caseId}/blockedHashes/{hashId}': NciiBlockedHashV1Schema,\n  'nciiRetainedEvidenceInventory/{inventoryId}': NciiRetainedEvidenceInventoryV1Schema,\n  // [H-01] dead-letter sink for inventory rows that could not be written to the primary\n  // nciiRetainedEvidenceInventory collection. Stores the same document shape.\n  'nciiInventoryDeadLetter/{inventoryId}': NciiRetainedEvidenceInventoryV1Schema,\n  'nciiTemporaryHolds/{holdId}': NciiTemporaryHoldV1Schema,\n  'nciiRemovalJobs/{jobId}': NciiRemovalJobV1Schema,\n  'nciiRemovalJobs/{jobId}/nciiRemovalTargets/{targetKeyHash}': NciiRemovalTargetV1Schema,\n\n  // ===== _appConfig singletons (public) =====\n  '_appConfig/app': AppConfigSchema,\n  '_appConfig/futurePlans': FuturePlansDocumentSchema,\n  '_appConfig/rulesAndAgreements': RulesAndAgreementsSchema,\n  // Content-pages migration (DJ ruling 2026-07-06): /terms, /privacy, and the\n  // /take-it-down page copy render exclusively from these (all public pages —\n  // take-it-down is a NO-LOGIN page, so its copy doc must be publicly readable).\n  '_appConfig/termsOfService': LegalPageDocumentSchema,\n  '_appConfig/privacyPolicy': LegalPageDocumentSchema,\n  '_appConfig/takeItDownPageCopy': TakeItDownPageCopySchema,\n\n  // ===== _serverData singletons (server-only — Cloud-Functions-only readers, BACKEND-108) =====\n  '_serverData/agePolicy': AgePolicyConfigV1Schema,\n  '_serverData/nciiPolicy': NciiPolicyConfigV1Schema,\n  '_serverData/privilegedReviewerSecurity': PrivilegedReviewerSecurityProfileV1Schema,\n  // The submitFeedback alias map — moved off the anonymously-readable top-level\n  // `feedbackAliases` collection into the server-only bucket (BACKEND-108). The sibling\n  // `feedbackDenylist` subcollection has no field contract (`.exists`-only) — see\n  // PENDING_COLLECTIONS.\n  '_serverData/feedbackLists/feedbackAliases/{aliasId}': FeedbackAliasSchema,\n\n  // ===== _systemData singletons =====\n  '_systemData/adminList': AdminListSchema,\n  '_systemData/profanityList': ProfanityListSchema,\n  '_systemData/reservedUsernames': ReservedUsernamesSchema,\n  '_systemData/blockedFranchiseNames': BlockedFranchiseNamesSchema,\n  '_systemData/appMode': AppModeMarkerSchema,\n  '_systemData/hallMediaReaperCursor': HallMediaReaperCursorSchema,\n  '_systemData/publicUsersReconcilerCursor': PublicUsersReconcilerCursorSchema,\n} as const satisfies Record<string, z.ZodTypeAny>;\n\nexport type RegisteredCollectionPath = keyof typeof COLLECTION_SCHEMAS;\n\n/**\n * Doc-id field annotation: for the listed bindings, the named body field equals the\n * Firestore document id and is injected at READ time (`{ ...doc.data(), <field>: doc.id }`),\n * never persisted — the write callables store the body via `Omit<…, '<field>'>`. The bound\n * schema models the (correct) consumer/read shape, where the field is required, so a raw\n * stored doc is \"missing\" it. The drift-check injects `{ [field]: doc.id, ...data }` before\n * validating, generalizing the one-off `AdminTaskDocSchema` stored-shape workaround into a\n * single mechanism so real-callable drift-checks don't false-flag every doc-id collection.\n * The schema-doc generator ignores this map. Keys are compiler-checked against the registry.\n */\nexport const COLLECTION_DOC_ID_FIELDS = {\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}/taleChapters/{chapterId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}/tuneTracks/{trackId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}/televisionEpisodes/{episodeId}': 'uid',\n  'allWorkProjects/{workProjectId}/guildChatChannels/{guildChatChannelId}': 'guildChatChannelId',\n  // Published hall sub-items: the doc id IS the live sub-item's id; `uid` is injected at\n  // read (the publish writer spreads the live doc's stored body, which has no `uid`).\n  'hallItems/{hallItemId}/hallItemTales/{itemId}': 'uid',\n  'hallItems/{hallItemId}/hallItemTunes/{itemId}': 'uid',\n  'hallItems/{hallItemId}/hallItemTelevision/{itemId}': 'uid',\n  'activeUserNotifications/{notificationId}': 'id',\n  'activeAdminNotifications/{notificationId}': 'id',\n  'adminNotificationHistory/{notificationId}': 'archiveOccurrenceId',\n  'userProfiles/{userId}/notificationHistory/{notificationId}': 'archiveOccurrenceId',\n  'pendingNotifications/{notificationId}': 'id',\n  'statusReconcileQueue/{uid}': 'uid',\n} as const satisfies Partial<Record<RegisteredCollectionPath, string>>;\n\n/**\n * Collections that exist (in COLLECTIONS / *_SUBCOLLECTIONS or firestore.rules) but are\n * intentionally NOT bound to a schema, each with a reason. Listed EXPLICITLY so completeness is\n * enforced and nothing is silently uncovered; the registry test fails if a NEW unlisted collection\n * appears. These are the only remaining gaps after the schema-registry binding pass:\n *\n *  - userMetadata: `userProfiles/{uid}/userMetadata/notificationSettings` — a firestore.rules\n *    match and `PATH_BUILDERS.userMetadata` exist, but there is no live reader/writer and no\n *    notification-settings type anywhere yet. Bind once that shape is implemented.\n *  - feedbackDenylist: `_serverData/feedbackLists/feedbackDenylist/{deniedWord}` — Console-managed\n *    (no callable writes it) and submitFeedback reads it via `.exists` only, so there is no field\n *    contract to author a schema from. The doc id is the denied word; the body is unused.\n *  - ncmecSubmissionAttempts: see the inline reason below.\n */\nexport const PENDING_COLLECTIONS: readonly string[] = [\n  'userMetadata',\n  'feedbackDenylist',\n  // Append-only NCII case closure/reopen event rows — the doc shape is owned app-side\n  // (NciiCaseV1 closure events), not modeled in ttt-core doc-schemas.\n  'closureEvents',\n  // Per-submission NCMEC transmission attempts. The segment exists only in firestore.rules\n  // today and has no writer or reader yet; the constant is registered so the name has one\n  // owner. Bind once the attempt-record shape is implemented.\n  'ncmecSubmissionAttempts',\n] as const;\n"]}

package/dist/media/domain-events-admin.d.ts

@@ -66,6 +66,19 @@ export declare const AdminDispatchReviewedEventSchema: z.ZodObject<{
     type: z.ZodLiteral<"admin.adminDispatchReviewed">;
     ids: z.ZodObject<{}, z.core.$strict>;
 }, z.core.$strict>;
+export declare const AdminDisplayNameResetForcedEventSchema: z.ZodObject<{
+    type: z.ZodLiteral<"admin.displayNameResetForced">;
+    ids: z.ZodObject<{
+        userId: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const HallContentChangeRequestApprovedEventSchema: z.ZodObject<{
+    type: z.ZodLiteral<"hallContentChangeRequest.approved">;
+    ids: z.ZodObject<{
+        workProjectId: z.ZodString;
+        workRealmId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
 export declare const ViolationAppealSubmittedEventSchema: z.ZodObject<{
     type: z.ZodLiteral<"violation.appealSubmitted">;
     ids: z.ZodObject<{

package/dist/media/domain-events-admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"domain-events-admin.d.ts","sourceRoot":"","sources":["../../src/media/domain-events-admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAYvC,CAAC;AAEZ,eAAO,MAAM,mCAAmC;;;;;;kBAUrC,CAAC;AAEZ,eAAO,MAAM,wCAAwC;;;;;;kBAU1C,CAAC;AAEZ,eAAO,MAAM,oCAAoC;;;;;kBAStC,CAAC;AAEZ,eAAO,MAAM,qCAAqC;;;;;kBASvC,CAAC;AAEZ,eAAO,MAAM,8BAA8B;;;;;;kBAUhC,CAAC;AAEZ,eAAO,MAAM,gCAAgC;;;kBAKlC,CAAC;AAEZ,eAAO,MAAM,mCAAmC;;;;;;kBAUrC,CAAC"}
+{"version":3,"file":"domain-events-admin.d.ts","sourceRoot":"","sources":["../../src/media/domain-events-admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAYvC,CAAC;AAEZ,eAAO,MAAM,mCAAmC;;;;;;kBAUrC,CAAC;AAEZ,eAAO,MAAM,wCAAwC;;;;;;kBAU1C,CAAC;AAEZ,eAAO,MAAM,oCAAoC;;;;;kBAStC,CAAC;AAEZ,eAAO,MAAM,qCAAqC;;;;;kBASvC,CAAC;AAEZ,eAAO,MAAM,8BAA8B;;;;;;kBAUhC,CAAC;AAEZ,eAAO,MAAM,gCAAgC;;;kBAKlC,CAAC;AAKZ,eAAO,MAAM,sCAAsC;;;;;kBASxC,CAAC;AAMZ,eAAO,MAAM,2CAA2C;;;;;;kBAU7C,CAAC;AAEZ,eAAO,MAAM,mCAAmC;;;;;;kBAUrC,CAAC"}

package/dist/media/domain-events-admin.js

@@ -75,6 +75,34 @@ export const AdminDispatchReviewedEventSchema = z
     ids: z.object({}).strict(),
 })
     .strict();
+// An admin forced a display-name reset on a member. The target's displayName is
+// a publicUsers-mirrored field; the actor is an admin, never the member, which
+// is why this is separate from profile.displayNameChanged.
+export const AdminDisplayNameResetForcedEventSchema = z
+    .object({
+    type: z.literal('admin.displayNameResetForced'),
+    ids: z
+        .object({
+        userId: z.string().min(1),
+    })
+        .strict(),
+})
+    .strict();
+// A hall content change request was APPROVED — the only decision that writes
+// anything. An approval updates the public Work shell and, on the realm grain,
+// the Realm doc, so both ids ride the event; `workRealmId` is absent on the hall
+// grains. A denial changes no content and emits nothing.
+export const HallContentChangeRequestApprovedEventSchema = z
+    .object({
+    type: z.literal('hallContentChangeRequest.approved'),
+    ids: z
+        .object({
+        workProjectId: z.string().min(1),
+        workRealmId: z.string().min(1).optional(),
+    })
+        .strict(),
+})
+    .strict();
 export const ViolationAppealSubmittedEventSchema = z
     .object({
     type: z.literal('violation.appealSubmitted'),