@ttt-productions/ttt-core 0.79.47 → 0.79.49

package/dist/doc-schemas/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/doc-schemas/registry.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,0FAA0F;AAC1F,oFAAoF;AACpF,yFAAyF;AACzF,mFAAmF;AACnF,EAAE;AACF,0FAA0F;AAC1F,4EAA4E;AAG5E,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,+BAA+B,EAC/B,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,gCAAgC,EAChC,8BAA8B,EAC9B,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,8BAA8B,EAC9B,0BAA0B,EAC1B,8BAA8B,EAC9B,8BAA8B,EAC9B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,cAAc,EACd,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC/J,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EACL,qBAAqB,EACrB,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,EACvB,4BAA4B,EAC5B,mBAAmB,EACnB,uBAAuB,EACvB,uBAAuB,EACvB,4BAA4B,EAC5B,iCAAiC,EACjC,2CAA2C,GAC5C,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,GAChC,MAAM,kBAAkB,CAAC;AAC1B,kDAAkD;AAClD,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,mBAAmB,EACnB,8BAA8B,EAC9B,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,mEAAmE;AACnE,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,+BAA+B,EAC/B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,qCAAqC,EACrC,kCAAkC,EAClC,sCAAsC,EACtC,oCAAoC,GACrC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,6BAA6B,EAC7B,8CAA8C,EAC9C,sCAAsC,GACvC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,EACzB,gCAAgC,EAChC,iCAAiC,GAClC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EACL,yBAAyB,EACzB,kCAAkC,EAClC,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AACvF,0DAA0D;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,kCAAkC,EAClC,mCAAmC,EACnC,+BAA+B,EAC/B,0BAA0B,EAC1B,qCAAqC,GACtC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,gBAAgB,EAChB,8BAA8B,EAC9B,2BAA2B,EAC3B,6BAA6B,EAC7B,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,yCAAyC,GAC1C,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,2BAA2B,EAC3B,kCAAkC,EAClC,mCAAmC,EACnC,kCAAkC,EAClC,oBAAoB,EACpB,iCAAiC,EACjC,4BAA4B,EAC5B,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,oBAAoB;IACpB,uBAAuB,EAAE,cAAc;IACvC,4CAA4C,EAAE,qBAAqB;IACnE,0DAA0D,EAAE,4BAA4B;IACxF,yDAAyD,EAAE,gBAAgB;IAC3E,kDAAkD,EAAE,sBAAsB;IAC1E,8CAA8C,EAAE,4BAA4B;IAC5E,4DAA4D,EAAE,4BAA4B;IAC1F,yEAAyE,EAAE,uBAAuB;IAClG,mBAAmB,EAAE,gBAAgB;IAErC,mCAAmC;IACnC,iCAAiC,EAAE,qBAAqB;IACxD,sDAAsD,EAAE,mBAAmB;IAC3E,4DAA4D,EAAE,yBAAyB;IACvF,oEAAoE,EAAE,oBAAoB;IAC1F,2FAA2F,EAAE,cAAc;IAC3G,uEAAuE,EAAE,+BAA+B;IACxG,2DAA2D,EAAE,cAAc;IAC3E,oFAAoF,EAAE,iBAAiB;IACvG,2DAA2D,EAAE,cAAc;IAC3E,gFAAgF,EAAE,mBAAmB;IACrG,sEAAsE,EAAE,oBAAoB;IAC5F,qGAAqG,EAAE,2BAA2B;IAClI,wEAAwE,EAAE,sBAAsB;IAChG,4FAA4F;IAC5F,oCAAoC,EAAE,uBAAuB;IAC7D,0BAA0B,EAAE,eAAe;IAC3C,6FAA6F;IAC7F,6DAA6D;IAC7D,+DAA+D,EAAE,qBAAqB;IACtF,0CAA0C,EAAE,6BAA6B;IACzE,iFAAiF;IACjF,wEAAwE;IACxE,iFAAiF,EAAE,sBAAsB;IAEzG,8BAA8B;IAC9B,gFAAgF;IAChF,2EAA2E;IAC3E,6EAA6E;IAC7E,kCAAkC;IAClC,oDAAoD,EAAE,uBAAuB;IAC7E,iCAAiC,EAAE,mBAAmB;IACtD,4BAA4B,EAAE,gBAAgB;IAC9C,kCAAkC,EAAE,mBAAmB;IACvD,8EAA8E;IAC9E,gCAAgC,EAAE,2BAA2B;IAE7D,uCAAuC;IACvC,kCAAkC,EAAE,mBAAmB;IACvD,6CAA6C,EAAE,8BAA8B;IAC7E,uCAAuC,EAAE,0BAA0B;IACnE,sCAAsC,EAAE,8BAA8B;IACtE,0CAA0C,EAAE,8BAA8B;IAC1E,6BAA6B,EAAE,4BAA4B;IAC3D,kCAAkC,EAAE,yBAAyB;IAE7D,+BAA+B;IAC/B,kCAAkC,EAAE,mBAAmB;IACvD,wBAAwB,EAAE,uBAAuB;IACjD,qFAAqF;IACrF,sFAAsF;IACtF,8EAA8E;IAC9E,mBAAmB;IACnB,+CAA+C,EAAE,sBAAsB;IACvE,+CAA+C,EAAE,wBAAwB;IACzE,oDAAoD,EAAE,gCAAgC;IACtF,6CAA6C,EAAE,8BAA8B;IAE7E,oCAAoC;IACpC,0CAA0C,EAAE,2BAA2B;IACvE,qFAAqF,EAAE,wBAAwB;IAC/G,4BAA4B,EAAE,cAAc;IAC5C,8DAA8D,EAAE,mBAAmB;IAEnF,2CAA2C;IAC3C,qFAAqF;IACrF,iFAAiF;IACjF,4DAA4D;IAC5D,2BAA2B,EAAE,2BAA2B;IACxD,uDAAuD,EAAE,8BAA8B;IACvF,mDAAmD,EAAE,4BAA4B;IACjF,oDAAoD,EAAE,uBAAuB;IAC7E,yFAAyF;IACzF,yFAAyF;IACzF,8DAA8D,EAAE,uBAAuB;IACvF,+BAA+B,EAAE,mBAAmB;IACpD,oEAAoE,EAAE,8BAA8B;IACpG,qBAAqB,EAAE,kBAAkB;IACzC,iCAAiC,EAAE,sBAAsB;IACzD,wCAAwC,EAAE,+BAA+B;IACzE,mEAAmE,EAAE,iCAAiC;IACtG,uBAAuB,EAAE,mBAAmB;IAC5C,iCAAiC,EAAE,0BAA0B;IAC7D,0CAA0C,EAAE,mBAAmB;IAC/D,wFAAwF,EAAE,mBAAmB;IAC7G,iFAAiF,EAAE,sBAAsB;IAEzG,6BAA6B;IAC7B,+BAA+B,EAAE,kBAAkB;IACnD,sCAAsC,EAAE,6BAA6B;IACrE,4BAA4B,EAAE,gBAAgB;IAC9C,6BAA6B,EAAE,wBAAwB;IAEvD,4BAA4B;IAC5B,0CAA0C,EAAE,qBAAqB;IACjE,2CAA2C,EAAE,qBAAqB;IAClE,2CAA2C,EAAE,4BAA4B;IACzE,uCAAuC,EAAE,yBAAyB;IAElE,sEAAsE;IACtE,qCAAqC,EAAE,0BAA0B;IACjE,gCAAgC,EAAE,2BAA2B;IAC7D,oCAAoC,EAAE,+BAA+B;IAErE,yDAAyD;IACzD,0CAA0C,EAAE,+BAA+B;IAC3E,8BAA8B,EAAE,uBAAuB;IACvD,gEAAgE,EAAE,4BAA4B;IAC9F,0BAA0B,EAAE,mBAAmB;IAC/C,4BAA4B,EAAE,uBAAuB;IACrD,+BAA+B,EAAE,uBAAuB;IACxD,qCAAqC,EAAE,4BAA4B;IACnE,sCAAsC,EAAE,iCAAiC;IACzE,oEAAoE,EAAE,2CAA2C;IAEjH,iCAAiC;IACjC,wDAAwD,EAAE,yBAAyB;IAEnF,oCAAoC;IACpC,6CAA6C,EAAE,yBAAyB;IACxE,4CAA4C,EAAE,uBAAuB;IACrE,+BAA+B,EAAE,8BAA8B;IAC/D,sBAAsB,EAAE,eAAe;IACvC,mEAAmE,EAAE,oBAAoB;IACzF,4BAA4B,EAAE,+BAA+B;IAE7D,mEAAmE;IACnE,8BAA8B,EAAE,2BAA2B;IAC3D,iCAAiC,EAAE,uBAAuB;IAC1D,2BAA2B,EAAE,uBAAuB;IACpD,oDAAoD,EAAE,+BAA+B;IACrF,6DAA6D,EAAE,2BAA2B;IAC1F,+FAA+F,EAAE,+BAA+B;IAChI,yDAAyD,EAAE,8BAA8B;IACzF,mGAAmG,EAAE,qCAAqC;IAC1I,2DAA2D,EAAE,kCAAkC;IAC/F,yFAAyF,EAAE,sCAAsC;IACjI,iGAAiG;IACjG,qFAAqF;IACrF,uFAAuF,EAAE,kCAAkC;IAC3H,kDAAkD,EAAE,oCAAoC;IACxF,0FAA0F;IAC1F,6FAA6F;IAC7F,+DAA+D,EAAE,kCAAkC;IACnG,iEAAiE,EAAE,mCAAmC;IACtG,oCAAoC,EAAE,8BAA8B;IAEpE,+DAA+D;IAC/D,4BAA4B,EAAE,qBAAqB;IACnD,uCAAuC,EAAE,0BAA0B;IACnE,uCAAuC,EAAE,6BAA6B;IACtE,sEAAsE,EAAE,8CAA8C;IACtH,0DAA0D,EAAE,sCAAsC;IAElG,gEAAgE;IAChE,gFAAgF;IAChF,mFAAmF;IACnF,4DAA4D;IAC5D,sCAAsC,EAAE,8BAA8B;IACtE,4BAA4B,EAAE,yBAAyB;IACvD,4DAA4D,EAAE,gCAAgC;IAC9F,sEAAsE,EAAE,iCAAiC;IACzG,2BAA2B,EAAE,uBAAuB;IAEpD,qDAAqD;IACrD,6BAA6B,EAAE,yBAAyB;IACxD,qDAAqD,EAAE,kCAAkC;IACzF,kCAAkC,EAAE,0BAA0B;IAC9D,gDAAgD,EAAE,4BAA4B;IAE9E,8DAA8D;IAC9D,+BAA+B,EAAE,wBAAwB;IACzD,+BAA+B,EAAE,8BAA8B;IAE/D,4DAA4D;IAC5D,kCAAkC,EAAE,2BAA2B;IAE/D,oFAAoF;IACpF,iFAAiF;IACjF,sBAAsB,EAAE,oBAAoB;IAC5C,qCAAqC,EAAE,4BAA4B;IAEnE,kFAAkF;IAClF,wBAAwB,EAAE,gBAAgB;IAE1C,0DAA0D;IAC1D,gCAAgC,EAAE,sBAAsB;IACxD,gCAAgC,EAAE,6BAA6B;IAC/D,yDAAyD,EAAE,kCAAkC;IAC7F,qEAAqE,EAAE,4BAA4B;IACnG,+DAA+D,EAAE,kCAAkC;IACnG,kGAAkG,EAAE,mCAAmC;IACvI,6DAA6D,EAAE,+BAA+B;IAC9F,oGAAoG;IACpG,kGAAkG;IAClG,2EAA2E,EAAE,iCAAiC;IAC9G,gEAAgE,EAAE,0BAA0B;IAC5F,oBAAoB,EAAE,gBAAgB;IACtC,mDAAmD,EAAE,8BAA8B;IACnF,6CAA6C,EAAE,2BAA2B;IAC1E,8CAA8C,EAAE,6BAA6B;IAC7E,2CAA2C,EAAE,uBAAuB;IACpE,4CAA4C,EAAE,4BAA4B;IAC1E,6CAA6C,EAAE,qCAAqC;IACpF,sFAAsF;IACtF,4EAA4E;IAC5E,uCAAuC,EAAE,qCAAqC;IAC9E,6BAA6B,EAAE,yBAAyB;IACxD,yBAAyB,EAAE,sBAAsB;IACjD,4DAA4D,EAAE,yBAAyB;IAEvF,6CAA6C;IAC7C,gBAAgB,EAAE,eAAe;IACjC,wBAAwB,EAAE,yBAAyB;IACnD,+BAA+B,EAAE,wBAAwB;IACzD,4EAA4E;IAC5E,4EAA4E;IAC5E,+EAA+E;IAC/E,2BAA2B,EAAE,uBAAuB;IACpD,0BAA0B,EAAE,uBAAuB;IACnD,+BAA+B,EAAE,wBAAwB;IAEzD,+FAA+F;IAC/F,uBAAuB,EAAE,uBAAuB;IAChD,wBAAwB,EAAE,wBAAwB;IAClD,wCAAwC,EAAE,yCAAyC;IACnF,8EAA8E;IAC9E,sFAAsF;IACtF,gFAAgF;IAChF,uBAAuB;IACvB,qDAAqD,EAAE,mBAAmB;IAE1E,qCAAqC;IACrC,uBAAuB,EAAE,eAAe;IACxC,2BAA2B,EAAE,mBAAmB;IAChD,+BAA+B,EAAE,uBAAuB;IACxD,mCAAmC,EAAE,2BAA2B;IAChE,qBAAqB,EAAE,mBAAmB;IAC1C,mCAAmC,EAAE,2BAA2B;IAChE,yCAAyC,EAAE,iCAAiC;CAC7B,CAAC;AAIlD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,2DAA2D,EAAE,KAAK;IAClE,oFAAoF,EAAE,KAAK;IAC3F,2DAA2D,EAAE,KAAK;IAClE,gFAAgF,EAAE,KAAK;IACvF,sEAAsE,EAAE,KAAK;IAC7E,qGAAqG,EAAE,KAAK;IAC5G,wEAAwE,EAAE,oBAAoB;IAC9F,uFAAuF;IACvF,oFAAoF;IACpF,+CAA+C,EAAE,KAAK;IACtD,+CAA+C,EAAE,KAAK;IACtD,oDAAoD,EAAE,KAAK;IAC3D,0CAA0C,EAAE,IAAI;IAChD,2CAA2C,EAAE,IAAI;IACjD,2CAA2C,EAAE,qBAAqB;IAClE,4DAA4D,EAAE,qBAAqB;IACnF,uCAAuC,EAAE,IAAI;IAC7C,4BAA4B,EAAE,KAAK;CACiC,CAAC;AAEvE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,cAAc;IACd,kBAAkB;IAClB,yFAAyF;IACzF,wFAAwF;IACxF,4DAA4D;IAC5D,yBAAyB;CACjB,CAAC","sourcesContent":["// Firestore collection registry — the single, authoritative binding from each Firestore\n// collection/subcollection path template to its document Zod schema. This is the input to\n// the schema-doc generator and the drift-check, and its completeness is CI-enforced\n// (registry.test.ts) against the COLLECTIONS / *_SUBCOLLECTIONS name constants, so a new\n// collection cannot be added without either a schema or an explicit PENDING entry.\n//\n// Path templates reuse the segment names from ../paths/collections.ts (and the shapes the\n// path-builders produce). `{placeholder}` segments are document/parent IDs.\n\nimport type { z } from 'zod';\nimport {\n  FullUserSchema,\n  UserPrivateDataSchema,\n  CraftSkillSchema,\n  CraftSkillReferenceSchema,\n} from './user.js';\nimport { PublicUserSchema } from './publicUser.js';\nimport { AccountDeletionRequestV1Schema } from './account-deletion.js';\nimport {\n  FullWorkProjectSchema,\n  PublicWorkProjectSchema,\n  WorkFileFolderSchema,\n  WorkFileSchema,\n  WorkRealmSchema,\n  RealmFileFolderSchema,\n  GuildmateUserSchema,\n  PublicGuildmateUserSchema,\n} from './work-project.js';\nimport {\n  FullTaleSchema,\n  FullChapterSchema,\n  FullTuneSchema,\n  FullTuneTrackSchema,\n  FullTelevisionSchema,\n  FullTelevisionEpisodeSchema,\n  ThresholdItemSchema,\n  HallSubmissionReservationSchema,\n  PublishedHallItemSchema,\n  PublishedChapterSchema,\n  PublishedTuneTrackSchema,\n  PublishedTelevisionEpisodeSchema,\n  HallContentChangeRequestSchema,\n  FuturePlansDocumentSchema,\n  RulesAndAgreementsSchema,\n  LegalPageDocumentSchema,\n  TakeItDownPageCopySchema,\n  HallLibraryPreferencesSchema,\n} from './content.js';\nimport {\n  SquareStreetzPostSchema,\n  MentionHistoryDocumentSchema,\n  FollowEdgeSchema,\n  FollowCounterSchema,\n  SquareStreetzLikeSchema,\n  TrendingPostsSchema,\n} from './social.js';\nimport {\n  PledgePaymentSchema,\n  PledgePaymentProviderRefSchema,\n  ProcessedStripeEventSchema,\n  PledgePaymentLedgerEventSchema,\n  PaymentWebhookQuarantineSchema,\n  PledgePaymentTotalsDocSchema,\n  PledgeRefundRequestSchema,\n} from './payments.js';\nimport {\n  FullCommissionListingSchema,\n  CommissionProposalSchema,\n  AuditionSchema,\n  AuditionEntrySchema,\n  UserAuditionVoteSchema,\n} from './commissions.js';\nimport {\n  GuildChatChannelSchema,\n  GuildInviteConversationSchema,\n  AdminDispatchSchema,\n  ChatMessageV1Schema,\n  ConversationFileSchema,\n} from './messaging.js';\nimport { AppConfigSchema, AdminListSchema, ProfanityListSchema, ReservedUsernamesSchema, BlockedFranchiseNamesSchema, AppModeMarkerSchema } from './system.js';\nimport {\n  ContentViolationSchema,\n  ModerationCascadeManifestSchema,\n  ModerationCascadeChangedDocSchema,\n} from './moderation.js';\nimport {\n  AdminTaskDocSchema,\n} from './report-docs.js';\nimport { TTTAuditEventSchema } from './audit.js';\nimport {\n  NotificationDocSchema,\n  NotificationHistoryDocSchema,\n  PendingNotificationSchema,\n} from './notifications.js';\nimport {\n  NotificationDeliverySchema,\n  NotificationFanoutJobSchema,\n} from './notification-ledger.js';\nimport { NotificationArchiveAllJobSchema } from './notification-archive-all-jobs.js';\nimport {\n  ChatChannelAuthProjectionSchema,\n  ChatScopeDegradedSchema,\n  ChatScopeDegradedCauseSchema,\n  ChatSyncEventSchema,\n  ChatSyncFanoutJobSchema,\n  ChatMessageOutboxSchema,\n  ChatAdminActionCommandSchema,\n  ChatHistoryAnonymizationJobSchema,\n  ChatHistoryAnonymizationAffectedChunkSchema,\n} from './chat-sync.js';\nimport { SquareAnnouncementJobSchema } from './square-announcement-jobs.js';\nimport { PendingMediaSchema, ArchivedPendingMediaDocSchema } from '../media/pending-media.js';\nimport { MediaAssetSchema } from './media-assets.js';\nimport { MediaActivationJobSchema } from './media-activation-jobs.js';\nimport {\n  ReservedDisplayNameSchema,\n  ReservedRealmNameSchema,\n  StakeShareAuditEventSchema,\n  ShortLinkSchema,\n  FeedbackAliasSchema,\n  UserSuggestionSchema,\n  StatusReconcileQueueEntrySchema,\n} from './operational.js';\n// ===== Trust & Safety — report spine (§A1) =====\nimport {\n  ProtectedReportRootV1Schema,\n  ReportPublicProjectionV1Schema,\n  ReportGroupV1Schema,\n  ReportGroupCountedReportSchema,\n  ReportTargetSnapshotV1Schema,\n  NarrativeRecordV1Schema,\n} from './safety/report.js';\nimport { SafetyCaseAlertV1Schema } from './safety/case-alert.js';\n// ===== Trust & Safety — child-safety case spine (§A1b, §A2) =====\nimport {\n  ChildSafetyCaseListV1Schema,\n  ChildSafetyCaseV1Schema,\n  ChildSafetySourceSignalV1Schema,\n  ChildSafetyDecisionV1Schema,\n  ChildSafetyDecisionViewV1Schema,\n  ChildSafetyCaseAccountV1Schema,\n  ChildSafetyCaseAccountHistoryV1Schema,\n  ChildSafetyNcmecSubmissionV1Schema,\n  ChildSafetyNcmecSubmissionFileV1Schema,\n  ChildSafetyLegalProcessEventV1Schema,\n} from './safety/case.js';\nimport {\n  ChildSafetyOwningAliasV1Schema,\n} from './safety/case-aliases.js';\nimport {\n  SafetyHoldRefV1Schema,\n  SafetyHoldResourceV1Schema,\n  SafetyResourceCommandV1Schema,\n  SafetyResourceCommandAuthorizedRequestV1Schema,\n  SafetyResourceCommandBypassRefV1Schema,\n} from './safety/holds.js';\nimport {\n  SafetyEvidenceManifestV1Schema,\n  SafetyEvidenceJobV1Schema,\n  SafetyEvidenceJobItemDocV1Schema,\n  SafetyEvidenceDispositionV1Schema,\n} from './safety/evidence.js';\nimport { EventProvenanceV1Schema } from './safety/provenance.js';\nimport {\n  QuarantineSagaJobV1Schema,\n  QuarantineSagaRelatedAssetV1Schema,\n  NcmecSubmissionJobV1Schema,\n  AccountActionCommandV1Schema,\n} from './safety/sagas.js';\nimport {\n  SafetySlaMonitorV1Schema,\n  SafetyMonitorHeartbeatV1Schema,\n} from './safety/monitors.js';\nimport { AgeAttestationNonceV1Schema, AgePolicyConfigV1Schema } from './safety/age.js';\n// ===== Trust & Safety — NCII / TAKE IT DOWN (§A11) =====\nimport { NciiAllegationV1Schema } from './ncii/allegations.js';\nimport {\n  TakeItDownRequestRootV1Schema,\n  TakeItDownRequesterPrivateV1Schema,\n  TakeItDownSubmissionV1Schema,\n  TakeItDownValidityDecisionV1Schema,\n  TakeItDownValidityRationaleV1Schema,\n  TakeItDownRequestActionV1Schema,\n  TakeItDownEvidenceV1Schema,\n  NciiRetainedEvidenceInventoryV1Schema,\n} from './ncii/requests.js';\nimport {\n  NciiCaseV1Schema,\n  NciiCaseAllegationLinkV1Schema,\n  NciiCaseRequestLinkV1Schema,\n  NciiCaseRemovalActionV1Schema,\n  NciiBlockedHashV1Schema,\n  NciiCaseClosureEventV1Schema,\n} from './ncii/cases.js';\nimport { NciiTemporaryHoldV1Schema } from './ncii/holds.js';\nimport {\n  NciiRemovalJobV1Schema,\n  NciiRemovalTargetV1Schema,\n} from './ncii/removal.js';\nimport {\n  NciiPolicyConfigV1Schema,\n  PrivilegedReviewerSecurityProfileV1Schema,\n} from './ncii/config.js';\nimport {\n  HallMediaReaperCursorSchema,\n  NcmecCompletionProofRecordV1Schema,\n  NcmecPortalCorrectionRecordV1Schema,\n  NcmecPortalReceiptArtifactV1Schema,\n  OperatorStepUpSchema,\n  PublicUsersReconcilerCursorSchema,\n  SafetyReconcilerCursorSchema,\n  SweepStateSchema,\n} from './backend-state.js';\n\nexport const COLLECTION_SCHEMAS = {\n  // ===== Users =====\n  'userProfiles/{userId}': FullUserSchema,\n  'userProfiles/{userId}/privateData/{userId}': UserPrivateDataSchema,\n  'userProfiles/{userId}/privateData/hallLibraryPreferences': HallLibraryPreferencesSchema,\n  'userProfiles/{userId}/profileCraftSkills/{craftSkillId}': CraftSkillSchema,\n  'userProfiles/{userId}/auditionVotes/{auditionId}': UserAuditionVoteSchema,\n  'userProfiles/{userId}/mentionHistory/{docId}': MentionHistoryDocumentSchema,\n  'userProfiles/{userId}/notificationHistory/{notificationId}': NotificationHistoryDocSchema,\n  'userProfiles/{userId}/userLikes/likeHistory/squareStreetzLikes/{postId}': SquareStreetzLikeSchema,\n  'publicUsers/{uid}': PublicUserSchema,\n\n  // ===== Work / Realm / Guild =====\n  'allWorkProjects/{workProjectId}': FullWorkProjectSchema,\n  'allWorkProjects/{workProjectId}/guildmateUsers/{uid}': GuildmateUserSchema,\n  'allWorkProjects/{workProjectId}/publicGuildmateUsers/{uid}': PublicGuildmateUserSchema,\n  'allWorkProjects/{workProjectId}/workFileFolders/{workFileFolderId}': WorkFileFolderSchema,\n  'allWorkProjects/{workProjectId}/workFileFolders/{workFileFolderId}/workFiles/{workFileId}': WorkFileSchema,\n  'allWorkProjects/{workProjectId}/hallSubmissionReservation/reservation': HallSubmissionReservationSchema,\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}': FullTaleSchema,\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}/taleChapters/{chapterId}': FullChapterSchema,\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}': FullTuneSchema,\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}/tuneTracks/{trackId}': FullTuneTrackSchema,\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}': FullTelevisionSchema,\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}/televisionEpisodes/{episodeId}': FullTelevisionEpisodeSchema,\n  'allWorkProjects/{workProjectId}/guildChatChannels/{guildChatChannelId}': GuildChatChannelSchema,\n  // Guild channel + invite messages are REALTIME-ONLY (chat Worker DO) — no Firestore schema.\n  'publicWorkProjects/{workProjectId}': PublicWorkProjectSchema,\n  'workRealms/{workRealmId}': WorkRealmSchema,\n  // Realm shared-file folders — steward-owned containers; callable-written, client-read denied\n  // (the gallery projection returns them alongside the files).\n  'workRealms/{workRealmId}/realmFileFolders/{realmFileFolderId}': RealmFileFolderSchema,\n  'guildInviteConversations/{guildInviteId}': GuildInviteConversationSchema,\n  // Conversation Files — the flat per-conversation file list. Backend-only writes;\n  // client-readable only while the caller holds conversation read access.\n  'guildInviteConversations/{guildInviteId}/conversationFiles/{conversationFileId}': ConversationFileSchema,\n\n  // ===== Square / Social =====\n  // SquareStreetzPostSchema is a refined ZodObject (superRefine for the MEDIA-101\n  // mediaAssetId↔mediaType pair invariant); the schema-doc generator and the\n  // drift-check both unwrap the effect to introspect its shape, so binding the\n  // refined schema here is correct.\n  'squareStreetzFeed/activePosts/socialPosts/{postId}': SquareStreetzPostSchema,\n  'squareStreetzFeed/trendingPosts': TrendingPostsSchema,\n  'followEdges/{followEdgeId}': FollowEdgeSchema,\n  'followCounters/{followCounterId}': FollowCounterSchema,\n  // Durable Square announcement outbox (Admin-SDK-only; deterministic job ids).\n  'squareAnnouncementJobs/{jobId}': SquareAnnouncementJobSchema,\n\n  // ===== Payments / pledge ledger =====\n  'pledgePayments/{pledgePaymentId}': PledgePaymentSchema,\n  'pledgePaymentProviderRefs/{pledgePaymentId}': PledgePaymentProviderRefSchema,\n  'processedStripeEvents/{stripeEventId}': ProcessedStripeEventSchema,\n  'pledgePaymentLedgerEvents/{ledgerId}': PledgePaymentLedgerEventSchema,\n  'paymentWebhookQuarantine/{stripeEventId}': PaymentWebhookQuarantineSchema,\n  'pledgePaymentTotals/summary': PledgePaymentTotalsDocSchema,\n  'pledgeRefundRequests/{requestId}': PledgeRefundRequestSchema,\n\n  // ===== Threshold / Hall =====\n  'thresholdItems/{thresholdItemId}': ThresholdItemSchema,\n  'hallItems/{hallItemId}': PublishedHallItemSchema,\n  // Published hall sub-item projections — the chapter/track/episode docs copied out of\n  // the Work at publish time (runPublishApprovedHallLibraryItem). Segment names are the\n  // HALL_ITEM_SUBCOLLECTIONS constants — fixed compound names, NOT derived from\n  // WorkProjectType.\n  'hallItems/{hallItemId}/hallItemTales/{itemId}': PublishedChapterSchema,\n  'hallItems/{hallItemId}/hallItemTunes/{itemId}': PublishedTuneTrackSchema,\n  'hallItems/{hallItemId}/hallItemTelevision/{itemId}': PublishedTelevisionEpisodeSchema,\n  'hallContentChangeRequests/{changeRequestId}': HallContentChangeRequestSchema,\n\n  // ===== Commission / Audition =====\n  'commissionListings/{commissionListingId}': FullCommissionListingSchema,\n  'commissionListings/{commissionListingId}/commissionProposals/{commissionProposalId}': CommissionProposalSchema,\n  'auditionBoard/{auditionId}': AuditionSchema,\n  'auditionBoard/{auditionId}/auditionEntries/{auditionEntryId}': AuditionEntrySchema,\n\n  // ===== Moderation / Reports / Admin =====\n  // The report spine (§A1): the restricted root, its public projection subdoc, and the\n  // dedup/count group. The root + projection are written by the app's submitReport\n  // callable; the group is maintained by an app-side trigger.\n  'contentReports/{reportId}': ProtectedReportRootV1Schema,\n  'contentReports/{reportId}/publicProjection/{reportId}': ReportPublicProjectionV1Schema,\n  'contentReports/{reportId}/privateDetails/snapshot': ReportTargetSnapshotV1Schema,\n  'contentReports/{reportId}/privateDetails/narrative': NarrativeRecordV1Schema,\n  // The escalation narrative is byte-identical to the original — ONE shape, ONE definition\n  // (ENG-002): the same NarrativeRecordV1Schema binds both docs, never a duplicate schema.\n  'contentReports/{reportId}/privateDetails/narrativeEscalation': NarrativeRecordV1Schema,\n  'activeReportGroups/{groupKey}': ReportGroupV1Schema,\n  'activeReportGroups/{groupKey}/reportGroupCountedReports/{reportId}': ReportGroupCountedReportSchema,\n  'adminTasks/{taskId}': AdminTaskDocSchema,\n  'contentViolations/{violationId}': ContentViolationSchema,\n  'moderationCascadeManifests/{cascadeId}': ModerationCascadeManifestSchema,\n  'moderationCascadeManifests/{cascadeId}/changedDocs/{changedDocId}': ModerationCascadeChangedDocSchema,\n  'auditEvents/{eventId}': TTTAuditEventSchema,\n  'stakeShareAuditEvents/{eventId}': StakeShareAuditEventSchema,\n  'pendingAdminDispatches/{adminDispatchId}': AdminDispatchSchema,\n  'pendingAdminDispatches/{adminDispatchId}/conversationMessages/{adminDispatchMessageId}': ChatMessageV1Schema,\n  'pendingAdminDispatches/{adminDispatchId}/conversationFiles/{conversationFileId}': ConversationFileSchema,\n\n  // ===== Media pipeline =====\n  'pendingMedia/{pendingMediaId}': PendingMediaSchema,\n  'pendingMediaArchive/{pendingMediaId}': ArchivedPendingMediaDocSchema,\n  'mediaAssets/{mediaAssetId}': MediaAssetSchema,\n  'mediaActivationJobs/{jobId}': MediaActivationJobSchema,\n\n  // ===== Notifications =====\n  'activeUserNotifications/{notificationId}': NotificationDocSchema,\n  'activeAdminNotifications/{notificationId}': NotificationDocSchema,\n  'adminNotificationHistory/{notificationId}': NotificationHistoryDocSchema,\n  'pendingNotifications/{notificationId}': PendingNotificationSchema,\n\n  // ===== Notification redesign — delivery ledger + fanout engine =====\n  'notificationDeliveries/{deliveryId}': NotificationDeliverySchema,\n  'notificationFanoutJobs/{jobId}': NotificationFanoutJobSchema,\n  'notificationArchiveAllJobs/{jobId}': NotificationArchiveAllJobSchema,\n\n  // ===== Chat realtime sync / projection / commands =====\n  'chatChannelAuthProjections/{authPairKey}': ChatChannelAuthProjectionSchema,\n  'chatScopeDegraded/{scopeKey}': ChatScopeDegradedSchema,\n  'chatScopeDegraded/{scopeKey}/chatScopeDegradedCauses/{causeId}': ChatScopeDegradedCauseSchema,\n  'chatSyncEvents/{eventId}': ChatSyncEventSchema,\n  'chatSyncFanoutJobs/{jobId}': ChatSyncFanoutJobSchema,\n  'chatMessageOutbox/{commandId}': ChatMessageOutboxSchema,\n  'chatAdminActionCommands/{requestId}': ChatAdminActionCommandSchema,\n  'chatHistoryAnonymizationJobs/{jobId}': ChatHistoryAnonymizationJobSchema,\n  'chatHistoryAnonymizationJobs/{jobId}/affectedChunks/{chunkOrdinal}': ChatHistoryAnonymizationAffectedChunkSchema,\n\n  // ===== Craft skills index =====\n  'craftSkillsByTag/{tag}/taggedCraftSkills/{compositeId}': CraftSkillReferenceSchema,\n\n  // ===== Operational / utility =====\n  'reservedDisplayNames/{displayNameUppercase}': ReservedDisplayNameSchema,\n  'reservedRealmNames/{workingTitleUppercase}': ReservedRealmNameSchema,\n  'accountDeletionRequests/{uid}': AccountDeletionRequestV1Schema,\n  'shortLinks/{shortId}': ShortLinkSchema,\n  'feedbackSubmissions/{feedbackType}/userSuggestions/{suggestionId}': UserSuggestionSchema,\n  'statusReconcileQueue/{uid}': StatusReconcileQueueEntrySchema,\n\n  // ===== Trust & Safety — child-safety case spine (§A1b, §A2) =====\n  'childSafetyCaseList/{caseId}': ChildSafetyCaseListV1Schema,\n  'activeSafetyCaseAlerts/{caseId}': SafetyCaseAlertV1Schema,\n  'childSafetyCases/{caseId}': ChildSafetyCaseV1Schema,\n  'childSafetyCases/{caseId}/sourceSignals/{signalId}': ChildSafetySourceSignalV1Schema,\n  'childSafetyCases/{caseId}/childSafetyDecisions/{decisionId}': ChildSafetyDecisionV1Schema,\n  'childSafetyCases/{caseId}/childSafetyDecisions/{decisionId}/childSafetyDecisionViews/{viewId}': ChildSafetyDecisionViewV1Schema,\n  'childSafetyCases/{caseId}/childSafetyCaseAccounts/{uid}': ChildSafetyCaseAccountV1Schema,\n  'childSafetyCases/{caseId}/childSafetyCaseAccounts/{uid}/childSafetyCaseAccountHistory/{historyId}': ChildSafetyCaseAccountHistoryV1Schema,\n  'childSafetyCases/{caseId}/ncmecSubmissions/{submissionId}': ChildSafetyNcmecSubmissionV1Schema,\n  'childSafetyCases/{caseId}/ncmecSubmissions/{submissionId}/ncmecSubmissionFiles/{fileId}': ChildSafetyNcmecSubmissionFileV1Schema,\n  // [H-05] the submission's single immutable completion-proof record (fixed doc id). Backend-only,\n  // so its shape lives in doc-schemas/backend-state.ts alongside the portal artifacts.\n  'childSafetyCases/{caseId}/ncmecSubmissions/{submissionId}/ncmecCompletionProof/record': NcmecCompletionProofRecordV1Schema,\n  'childSafetyCases/{caseId}/legalProcess/{eventId}': ChildSafetyLegalProcessEventV1Schema,\n  // Portal-filed NCMEC artifacts recorded by the two step-up-gated operator callables. Both\n  // are backend-only (no client reader), so their shapes live in doc-schemas/backend-state.ts.\n  'childSafetyCases/{caseId}/portalReceiptArtifacts/{artifactId}': NcmecPortalReceiptArtifactV1Schema,\n  'childSafetyCases/{caseId}/ncmecPortalCorrections/{correctionId}': NcmecPortalCorrectionRecordV1Schema,\n  'childSafetyOwningAliases/{aliasId}': ChildSafetyOwningAliasV1Schema,\n\n  // ===== Trust & Safety — holds + resource commands (§A3) =====\n  'safetyHoldRefs/{holdRefId}': SafetyHoldRefV1Schema,\n  'safetyHoldResources/{resourceKeyHash}': SafetyHoldResourceV1Schema,\n  'safetyResourceCommands/{commandDocId}': SafetyResourceCommandV1Schema,\n  'safetyResourceCommands/{commandDocId}/authorizedRequests/{requestId}': SafetyResourceCommandAuthorizedRequestV1Schema,\n  'safetyResourceCommands/{commandDocId}/bypassRefs/{refId}': SafetyResourceCommandBypassRefV1Schema,\n\n  // ===== Trust & Safety — evidence + provenance (§A4, §A6) =====\n  // SafetyEvidenceManifestV1Schema is a refined ZodObject (superRefine for the H5\n  // sourceKind invariant); the schema-doc generator unwraps the effect to introspect\n  // its shape, so binding the refined schema here is correct.\n  'safetyEvidenceManifests/{manifestId}': SafetyEvidenceManifestV1Schema,\n  'safetyEvidenceJobs/{jobId}': SafetyEvidenceJobV1Schema,\n  'safetyEvidenceJobs/{jobId}/safetyEvidenceJobItems/{itemId}': SafetyEvidenceJobItemDocV1Schema,\n  'safetyEvidenceJobs/{jobId}/safetyEvidenceJobDisposition/{locationId}': SafetyEvidenceDispositionV1Schema,\n  'eventProvenance/{eventId}': EventProvenanceV1Schema,\n\n  // ===== Trust & Safety — sagas + closure (§A5) =====\n  'quarantineSagaJobs/{caseId}': QuarantineSagaJobV1Schema,\n  'quarantineSagaJobs/{caseId}/relatedAssets/{assetId}': QuarantineSagaRelatedAssetV1Schema,\n  'ncmecSubmissionJobs/{ncmecJobId}': NcmecSubmissionJobV1Schema,\n  'accountActionCommands/{accountActionCommandId}': AccountActionCommandV1Schema,\n\n  // ===== Trust & Safety — SLA monitors + heartbeat (§A8) =====\n  'safetySlaMonitors/{monitorId}': SafetySlaMonitorV1Schema,\n  'safetyMonitorHeartbeat/global': SafetyMonitorHeartbeatV1Schema,\n\n  // ===== Trust & Safety — age attestation nonces (§A7) =====\n  'ageAttestationNonces/{nonceHash}': AgeAttestationNonceV1Schema,\n\n  // ===== Trust & Safety — operator step-up + reconciler cursors (backend-only) =====\n  // Cloud-Functions-only readers/writers; client access denied in firestore.rules.\n  'operatorStepUp/{uid}': OperatorStepUpSchema,\n  'safetyReconcilerCursors/{cursorKey}': SafetyReconcilerCursorSchema,\n\n  // ===== Scheduled user sweeps — durable cadence/cursor state (backend-only) =====\n  'sweepState/{sweepName}': SweepStateSchema,\n\n  // ===== Trust & Safety — NCII / TAKE IT DOWN (§A11) =====\n  'nciiAllegations/{allegationId}': NciiAllegationV1Schema,\n  'takeItDownRequests/{requestId}': TakeItDownRequestRootV1Schema,\n  'takeItDownRequests/{requestId}/privateDetails/requester': TakeItDownRequesterPrivateV1Schema,\n  'takeItDownRequests/{requestId}/takeItDownSubmissions/{submissionId}': TakeItDownSubmissionV1Schema,\n  'takeItDownRequests/{requestId}/validityDecisions/{decisionId}': TakeItDownValidityDecisionV1Schema,\n  'takeItDownRequests/{requestId}/validityDecisions/{decisionId}/takeItDownValidityRationale/record': TakeItDownValidityRationaleV1Schema,\n  'takeItDownRequests/{requestId}/takeItDownActions/{actionId}': TakeItDownRequestActionV1Schema,\n  // Deletion-verification record per evidence object — see SafetyEvidenceDispositionV1Schema for what\n  // `result: 'gone'` means in THIS bucket (absent from the live bucket, not permanent destruction).\n  'takeItDownRequests/{requestId}/takeItDownEvidenceDisposition/{evidenceId}': SafetyEvidenceDispositionV1Schema,\n  'takeItDownRequests/{requestId}/takeItDownEvidence/{evidenceId}': TakeItDownEvidenceV1Schema,\n  'nciiCases/{caseId}': NciiCaseV1Schema,\n  'nciiCases/{caseId}/allegationLinks/{allegationId}': NciiCaseAllegationLinkV1Schema,\n  'nciiCases/{caseId}/requestLinks/{requestId}': NciiCaseRequestLinkV1Schema,\n  'nciiCases/{caseId}/removalActions/{actionId}': NciiCaseRemovalActionV1Schema,\n  'nciiCases/{caseId}/blockedHashes/{hashId}': NciiBlockedHashV1Schema,\n  'nciiCases/{caseId}/closureEvents/{eventId}': NciiCaseClosureEventV1Schema,\n  'nciiRetainedEvidenceInventory/{inventoryId}': NciiRetainedEvidenceInventoryV1Schema,\n  // [H-01] dead-letter sink for inventory rows that could not be written to the primary\n  // nciiRetainedEvidenceInventory collection. Stores the same document shape.\n  'nciiInventoryDeadLetter/{inventoryId}': NciiRetainedEvidenceInventoryV1Schema,\n  'nciiTemporaryHolds/{holdId}': NciiTemporaryHoldV1Schema,\n  'nciiRemovalJobs/{jobId}': NciiRemovalJobV1Schema,\n  'nciiRemovalJobs/{jobId}/nciiRemovalTargets/{targetKeyHash}': NciiRemovalTargetV1Schema,\n\n  // ===== _appConfig singletons (public) =====\n  '_appConfig/app': AppConfigSchema,\n  '_appConfig/futurePlans': FuturePlansDocumentSchema,\n  '_appConfig/rulesAndAgreements': RulesAndAgreementsSchema,\n  // Content-pages migration (DJ ruling 2026-07-06): /terms, /privacy, and the\n  // /take-it-down page copy render exclusively from these (all public pages —\n  // take-it-down is a NO-LOGIN page, so its copy doc must be publicly readable).\n  '_appConfig/termsOfService': LegalPageDocumentSchema,\n  '_appConfig/privacyPolicy': LegalPageDocumentSchema,\n  '_appConfig/takeItDownPageCopy': TakeItDownPageCopySchema,\n\n  // ===== _serverData singletons (server-only — Cloud-Functions-only readers, BACKEND-108) =====\n  '_serverData/agePolicy': AgePolicyConfigV1Schema,\n  '_serverData/nciiPolicy': NciiPolicyConfigV1Schema,\n  '_serverData/privilegedReviewerSecurity': PrivilegedReviewerSecurityProfileV1Schema,\n  // The submitFeedback alias map — moved off the anonymously-readable top-level\n  // `feedbackAliases` collection into the server-only bucket (BACKEND-108). The sibling\n  // `feedbackDenylist` subcollection has no field contract (`.exists`-only) — see\n  // PENDING_COLLECTIONS.\n  '_serverData/feedbackLists/feedbackAliases/{aliasId}': FeedbackAliasSchema,\n\n  // ===== _systemData singletons =====\n  '_systemData/adminList': AdminListSchema,\n  '_systemData/profanityList': ProfanityListSchema,\n  '_systemData/reservedUsernames': ReservedUsernamesSchema,\n  '_systemData/blockedFranchiseNames': BlockedFranchiseNamesSchema,\n  '_systemData/appMode': AppModeMarkerSchema,\n  '_systemData/hallMediaReaperCursor': HallMediaReaperCursorSchema,\n  '_systemData/publicUsersReconcilerCursor': PublicUsersReconcilerCursorSchema,\n} as const satisfies Record<string, z.ZodTypeAny>;\n\nexport type RegisteredCollectionPath = keyof typeof COLLECTION_SCHEMAS;\n\n/**\n * Doc-id field annotation: for the listed bindings, the named body field equals the\n * Firestore document id and is injected at READ time (`{ ...doc.data(), <field>: doc.id }`),\n * never persisted — the write callables store the body via `Omit<…, '<field>'>`. The bound\n * schema models the (correct) consumer/read shape, where the field is required, so a raw\n * stored doc is \"missing\" it. The drift-check injects `{ [field]: doc.id, ...data }` before\n * validating, generalizing the one-off `AdminTaskDocSchema` stored-shape workaround into a\n * single mechanism so real-callable drift-checks don't false-flag every doc-id collection.\n * The schema-doc generator ignores this map. Keys are compiler-checked against the registry.\n */\nexport const COLLECTION_DOC_ID_FIELDS = {\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}/taleChapters/{chapterId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}/tuneTracks/{trackId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}/televisionEpisodes/{episodeId}': 'uid',\n  'allWorkProjects/{workProjectId}/guildChatChannels/{guildChatChannelId}': 'guildChatChannelId',\n  // Published hall sub-items: the doc id IS the live sub-item's id; `uid` is injected at\n  // read (the publish writer spreads the live doc's stored body, which has no `uid`).\n  'hallItems/{hallItemId}/hallItemTales/{itemId}': 'uid',\n  'hallItems/{hallItemId}/hallItemTunes/{itemId}': 'uid',\n  'hallItems/{hallItemId}/hallItemTelevision/{itemId}': 'uid',\n  'activeUserNotifications/{notificationId}': 'id',\n  'activeAdminNotifications/{notificationId}': 'id',\n  'adminNotificationHistory/{notificationId}': 'archiveOccurrenceId',\n  'userProfiles/{userId}/notificationHistory/{notificationId}': 'archiveOccurrenceId',\n  'pendingNotifications/{notificationId}': 'id',\n  'statusReconcileQueue/{uid}': 'uid',\n} as const satisfies Partial<Record<RegisteredCollectionPath, string>>;\n\n/**\n * Collections that exist (in COLLECTIONS / *_SUBCOLLECTIONS or firestore.rules) but are\n * intentionally NOT bound to a schema, each with a reason. Listed EXPLICITLY so completeness is\n * enforced and nothing is silently uncovered; the registry test fails if a NEW unlisted collection\n * appears. These are the only remaining gaps after the schema-registry binding pass:\n *\n *  - userMetadata: `userProfiles/{uid}/userMetadata/notificationSettings` — a firestore.rules\n *    match and `PATH_BUILDERS.userMetadata` exist, but there is no live reader/writer and no\n *    notification-settings type anywhere yet. Bind once that shape is implemented.\n *  - feedbackDenylist: `_serverData/feedbackLists/feedbackDenylist/{deniedWord}` — Console-managed\n *    (no callable writes it) and submitFeedback reads it via `.exists` only, so there is no field\n *    contract to author a schema from. The doc id is the denied word; the body is unused.\n *  - ncmecSubmissionAttempts: see the inline reason below.\n */\nexport const PENDING_COLLECTIONS: readonly string[] = [\n  'userMetadata',\n  'feedbackDenylist',\n  // Per-submission NCMEC transmission attempts. The segment exists only in firestore.rules\n  // today and has no writer or reader yet; the constant is registered so the name has one\n  // owner. Bind once the attempt-record shape is implemented.\n  'ncmecSubmissionAttempts',\n] as const;\n"]}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/doc-schemas/registry.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,0FAA0F;AAC1F,oFAAoF;AACpF,yFAAyF;AACzF,mFAAmF;AACnF,EAAE;AACF,0FAA0F;AAC1F,4EAA4E;AAG5E,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,+BAA+B,EAC/B,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,gCAAgC,EAChC,8BAA8B,EAC9B,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,8BAA8B,EAC9B,0BAA0B,EAC1B,8BAA8B,EAC9B,8BAA8B,EAC9B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,cAAc,EACd,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC/J,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EACL,qBAAqB,EACrB,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,EACvB,4BAA4B,EAC5B,mBAAmB,EACnB,uBAAuB,EACvB,uBAAuB,EACvB,4BAA4B,EAC5B,iCAAiC,EACjC,2CAA2C,GAC5C,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,GAChC,MAAM,kBAAkB,CAAC;AAC1B,kDAAkD;AAClD,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,mBAAmB,EACnB,8BAA8B,EAC9B,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,mEAAmE;AACnE,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,+BAA+B,EAC/B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,qCAAqC,EACrC,kCAAkC,EAClC,sCAAsC,EACtC,oCAAoC,GACrC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,6BAA6B,EAC7B,8CAA8C,EAC9C,sCAAsC,GACvC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,EACzB,gCAAgC,EAChC,iCAAiC,GAClC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EACL,yBAAyB,EACzB,kCAAkC,EAClC,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AACvF,0DAA0D;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,kCAAkC,EAClC,mCAAmC,EACnC,+BAA+B,EAC/B,0BAA0B,EAC1B,qCAAqC,GACtC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,gBAAgB,EAChB,8BAA8B,EAC9B,2BAA2B,EAC3B,6BAA6B,EAC7B,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,yCAAyC,GAC1C,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,2BAA2B,EAC3B,kCAAkC,EAClC,mCAAmC,EACnC,kCAAkC,EAClC,oBAAoB,EACpB,iCAAiC,EACjC,4BAA4B,EAC5B,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,oBAAoB;IACpB,uBAAuB,EAAE,cAAc;IACvC,4CAA4C,EAAE,qBAAqB;IACnE,0DAA0D,EAAE,4BAA4B;IACxF,yDAAyD,EAAE,gBAAgB;IAC3E,kDAAkD,EAAE,sBAAsB;IAC1E,8CAA8C,EAAE,4BAA4B;IAC5E,4DAA4D,EAAE,4BAA4B;IAC1F,yEAAyE,EAAE,uBAAuB;IAClG,mBAAmB,EAAE,gBAAgB;IAErC,mCAAmC;IACnC,iCAAiC,EAAE,qBAAqB;IACxD,sDAAsD,EAAE,mBAAmB;IAC3E,4DAA4D,EAAE,yBAAyB;IACvF,oEAAoE,EAAE,oBAAoB;IAC1F,2FAA2F,EAAE,cAAc;IAC3G,uEAAuE,EAAE,+BAA+B;IACxG,2DAA2D,EAAE,cAAc;IAC3E,oFAAoF,EAAE,iBAAiB;IACvG,2DAA2D,EAAE,cAAc;IAC3E,gFAAgF,EAAE,mBAAmB;IACrG,sEAAsE,EAAE,oBAAoB;IAC5F,qGAAqG,EAAE,2BAA2B;IAClI,wEAAwE,EAAE,sBAAsB;IAChG,4FAA4F;IAC5F,oCAAoC,EAAE,uBAAuB;IAC7D,0BAA0B,EAAE,eAAe;IAC3C,6FAA6F;IAC7F,6DAA6D;IAC7D,+DAA+D,EAAE,qBAAqB;IACtF,0CAA0C,EAAE,6BAA6B;IACzE,iFAAiF;IACjF,wEAAwE;IACxE,iFAAiF,EAAE,sBAAsB;IAEzG,8BAA8B;IAC9B,gFAAgF;IAChF,2EAA2E;IAC3E,6EAA6E;IAC7E,kCAAkC;IAClC,oDAAoD,EAAE,uBAAuB;IAC7E,iCAAiC,EAAE,mBAAmB;IACtD,4BAA4B,EAAE,gBAAgB;IAC9C,kCAAkC,EAAE,mBAAmB;IACvD,8EAA8E;IAC9E,gCAAgC,EAAE,2BAA2B;IAE7D,uCAAuC;IACvC,kCAAkC,EAAE,mBAAmB;IACvD,6CAA6C,EAAE,8BAA8B;IAC7E,uCAAuC,EAAE,0BAA0B;IACnE,sCAAsC,EAAE,8BAA8B;IACtE,0CAA0C,EAAE,8BAA8B;IAC1E,6BAA6B,EAAE,4BAA4B;IAC3D,kCAAkC,EAAE,yBAAyB;IAE7D,+BAA+B;IAC/B,kCAAkC,EAAE,mBAAmB;IACvD,wBAAwB,EAAE,uBAAuB;IACjD,qFAAqF;IACrF,sFAAsF;IACtF,8EAA8E;IAC9E,mBAAmB;IACnB,+CAA+C,EAAE,sBAAsB;IACvE,+CAA+C,EAAE,wBAAwB;IACzE,oDAAoD,EAAE,gCAAgC;IACtF,6CAA6C,EAAE,8BAA8B;IAE7E,oCAAoC;IACpC,0CAA0C,EAAE,2BAA2B;IACvE,qFAAqF,EAAE,wBAAwB;IAC/G,4BAA4B,EAAE,cAAc;IAC5C,8DAA8D,EAAE,mBAAmB;IAEnF,2CAA2C;IAC3C,qFAAqF;IACrF,iFAAiF;IACjF,4DAA4D;IAC5D,2BAA2B,EAAE,2BAA2B;IACxD,uDAAuD,EAAE,8BAA8B;IACvF,mDAAmD,EAAE,4BAA4B;IACjF,oDAAoD,EAAE,uBAAuB;IAC7E,yFAAyF;IACzF,yFAAyF;IACzF,8DAA8D,EAAE,uBAAuB;IACvF,+BAA+B,EAAE,mBAAmB;IACpD,oEAAoE,EAAE,8BAA8B;IACpG,qBAAqB,EAAE,kBAAkB;IACzC,iCAAiC,EAAE,sBAAsB;IACzD,wCAAwC,EAAE,+BAA+B;IACzE,mEAAmE,EAAE,iCAAiC;IACtG,uBAAuB,EAAE,mBAAmB;IAC5C,iCAAiC,EAAE,0BAA0B;IAC7D,0CAA0C,EAAE,mBAAmB;IAC/D,wFAAwF,EAAE,mBAAmB;IAC7G,iFAAiF,EAAE,sBAAsB;IAEzG,6BAA6B;IAC7B,+BAA+B,EAAE,kBAAkB;IACnD,sCAAsC,EAAE,6BAA6B;IACrE,4BAA4B,EAAE,gBAAgB;IAC9C,6BAA6B,EAAE,wBAAwB;IAEvD,4BAA4B;IAC5B,0CAA0C,EAAE,qBAAqB;IACjE,2CAA2C,EAAE,qBAAqB;IAClE,2CAA2C,EAAE,4BAA4B;IACzE,uCAAuC,EAAE,yBAAyB;IAElE,sEAAsE;IACtE,qCAAqC,EAAE,0BAA0B;IACjE,gCAAgC,EAAE,2BAA2B;IAC7D,oCAAoC,EAAE,+BAA+B;IAErE,yDAAyD;IACzD,0CAA0C,EAAE,+BAA+B;IAC3E,8BAA8B,EAAE,uBAAuB;IACvD,gEAAgE,EAAE,4BAA4B;IAC9F,0BAA0B,EAAE,mBAAmB;IAC/C,4BAA4B,EAAE,uBAAuB;IACrD,+BAA+B,EAAE,uBAAuB;IACxD,qCAAqC,EAAE,4BAA4B;IACnE,sCAAsC,EAAE,iCAAiC;IACzE,oEAAoE,EAAE,2CAA2C;IAEjH,iCAAiC;IACjC,wDAAwD,EAAE,yBAAyB;IAEnF,oCAAoC;IACpC,6CAA6C,EAAE,yBAAyB;IACxE,4CAA4C,EAAE,uBAAuB;IACrE,+BAA+B,EAAE,8BAA8B;IAC/D,sBAAsB,EAAE,eAAe;IACvC,mEAAmE,EAAE,oBAAoB;IACzF,4BAA4B,EAAE,+BAA+B;IAE7D,uHAAuH;IACvH,iEAAiE,EAAE,2BAA2B;IAC9F,mCAAmC,EAAE,yBAAyB;IAC9D,oCAAoC,EAAE,2BAA2B;IAEjE,mEAAmE;IACnE,8BAA8B,EAAE,2BAA2B;IAC3D,iCAAiC,EAAE,uBAAuB;IAC1D,2BAA2B,EAAE,uBAAuB;IACpD,oDAAoD,EAAE,+BAA+B;IACrF,6DAA6D,EAAE,2BAA2B;IAC1F,+FAA+F,EAAE,+BAA+B;IAChI,yDAAyD,EAAE,8BAA8B;IACzF,mGAAmG,EAAE,qCAAqC;IAC1I,2DAA2D,EAAE,kCAAkC;IAC/F,yFAAyF,EAAE,sCAAsC;IACjI,iGAAiG;IACjG,qFAAqF;IACrF,uFAAuF,EAAE,kCAAkC;IAC3H,kDAAkD,EAAE,oCAAoC;IACxF,0FAA0F;IAC1F,6FAA6F;IAC7F,+DAA+D,EAAE,kCAAkC;IACnG,iEAAiE,EAAE,mCAAmC;IACtG,oCAAoC,EAAE,8BAA8B;IAEpE,+DAA+D;IAC/D,4BAA4B,EAAE,qBAAqB;IACnD,uCAAuC,EAAE,0BAA0B;IACnE,uCAAuC,EAAE,6BAA6B;IACtE,sEAAsE,EAAE,8CAA8C;IACtH,0DAA0D,EAAE,sCAAsC;IAElG,gEAAgE;IAChE,gFAAgF;IAChF,mFAAmF;IACnF,4DAA4D;IAC5D,sCAAsC,EAAE,8BAA8B;IACtE,4BAA4B,EAAE,yBAAyB;IACvD,4DAA4D,EAAE,gCAAgC;IAC9F,sEAAsE,EAAE,iCAAiC;IACzG,2BAA2B,EAAE,uBAAuB;IAEpD,qDAAqD;IACrD,6BAA6B,EAAE,yBAAyB;IACxD,qDAAqD,EAAE,kCAAkC;IACzF,kCAAkC,EAAE,0BAA0B;IAC9D,gDAAgD,EAAE,4BAA4B;IAE9E,8DAA8D;IAC9D,+BAA+B,EAAE,wBAAwB;IACzD,+BAA+B,EAAE,8BAA8B;IAE/D,4DAA4D;IAC5D,kCAAkC,EAAE,2BAA2B;IAE/D,oFAAoF;IACpF,iFAAiF;IACjF,sBAAsB,EAAE,oBAAoB;IAC5C,qCAAqC,EAAE,4BAA4B;IAEnE,kFAAkF;IAClF,wBAAwB,EAAE,gBAAgB;IAE1C,0DAA0D;IAC1D,gCAAgC,EAAE,sBAAsB;IACxD,gCAAgC,EAAE,6BAA6B;IAC/D,yDAAyD,EAAE,kCAAkC;IAC7F,qEAAqE,EAAE,4BAA4B;IACnG,+DAA+D,EAAE,kCAAkC;IACnG,kGAAkG,EAAE,mCAAmC;IACvI,6DAA6D,EAAE,+BAA+B;IAC9F,oGAAoG;IACpG,kGAAkG;IAClG,2EAA2E,EAAE,iCAAiC;IAC9G,gEAAgE,EAAE,0BAA0B;IAC5F,oBAAoB,EAAE,gBAAgB;IACtC,mDAAmD,EAAE,8BAA8B;IACnF,6CAA6C,EAAE,2BAA2B;IAC1E,8CAA8C,EAAE,6BAA6B;IAC7E,2CAA2C,EAAE,uBAAuB;IACpE,4CAA4C,EAAE,4BAA4B;IAC1E,6CAA6C,EAAE,qCAAqC;IACpF,sFAAsF;IACtF,4EAA4E;IAC5E,uCAAuC,EAAE,qCAAqC;IAC9E,6BAA6B,EAAE,yBAAyB;IACxD,yBAAyB,EAAE,sBAAsB;IACjD,4DAA4D,EAAE,yBAAyB;IAEvF,6CAA6C;IAC7C,gBAAgB,EAAE,eAAe;IACjC,wBAAwB,EAAE,yBAAyB;IACnD,+BAA+B,EAAE,wBAAwB;IACzD,4EAA4E;IAC5E,4EAA4E;IAC5E,+EAA+E;IAC/E,2BAA2B,EAAE,uBAAuB;IACpD,0BAA0B,EAAE,uBAAuB;IACnD,+BAA+B,EAAE,wBAAwB;IACzD,gFAAgF;IAChF,uBAAuB,EAAE,wBAAwB;IAEjD,+FAA+F;IAC/F,uBAAuB,EAAE,uBAAuB;IAChD,wBAAwB,EAAE,wBAAwB;IAClD,wCAAwC,EAAE,yCAAyC;IACnF,8EAA8E;IAC9E,sFAAsF;IACtF,gFAAgF;IAChF,uBAAuB;IACvB,qDAAqD,EAAE,mBAAmB;IAE1E,qCAAqC;IACrC,uBAAuB,EAAE,eAAe;IACxC,2BAA2B,EAAE,mBAAmB;IAChD,+BAA+B,EAAE,uBAAuB;IACxD,mCAAmC,EAAE,2BAA2B;IAChE,qBAAqB,EAAE,mBAAmB;IAC1C,mCAAmC,EAAE,2BAA2B;IAChE,yCAAyC,EAAE,iCAAiC;CAC7B,CAAC;AAIlD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,2DAA2D,EAAE,KAAK;IAClE,oFAAoF,EAAE,KAAK;IAC3F,2DAA2D,EAAE,KAAK;IAClE,gFAAgF,EAAE,KAAK;IACvF,sEAAsE,EAAE,KAAK;IAC7E,qGAAqG,EAAE,KAAK;IAC5G,wEAAwE,EAAE,oBAAoB;IAC9F,uFAAuF;IACvF,oFAAoF;IACpF,+CAA+C,EAAE,KAAK;IACtD,+CAA+C,EAAE,KAAK;IACtD,oDAAoD,EAAE,KAAK;IAC3D,0CAA0C,EAAE,IAAI;IAChD,2CAA2C,EAAE,IAAI;IACjD,2CAA2C,EAAE,qBAAqB;IAClE,4DAA4D,EAAE,qBAAqB;IACnF,uCAAuC,EAAE,IAAI;IAC7C,4BAA4B,EAAE,KAAK;CACiC,CAAC;AAEvE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,cAAc;IACd,kBAAkB;IAClB,yFAAyF;IACzF,wFAAwF;IACxF,4DAA4D;IAC5D,yBAAyB;CACjB,CAAC","sourcesContent":["// Firestore collection registry — the single, authoritative binding from each Firestore\n// collection/subcollection path template to its document Zod schema. This is the input to\n// the schema-doc generator and the drift-check, and its completeness is CI-enforced\n// (registry.test.ts) against the COLLECTIONS / *_SUBCOLLECTIONS name constants, so a new\n// collection cannot be added without either a schema or an explicit PENDING entry.\n//\n// Path templates reuse the segment names from ../paths/collections.ts (and the shapes the\n// path-builders produce). `{placeholder}` segments are document/parent IDs.\n\nimport type { z } from 'zod';\nimport {\n  FullUserSchema,\n  UserPrivateDataSchema,\n  CraftSkillSchema,\n  CraftSkillReferenceSchema,\n} from './user.js';\nimport { PublicUserSchema } from './publicUser.js';\nimport { AccountDeletionRequestV1Schema } from './account-deletion.js';\nimport {\n  FullWorkProjectSchema,\n  PublicWorkProjectSchema,\n  WorkFileFolderSchema,\n  WorkFileSchema,\n  WorkRealmSchema,\n  RealmFileFolderSchema,\n  GuildmateUserSchema,\n  PublicGuildmateUserSchema,\n} from './work-project.js';\nimport {\n  FullTaleSchema,\n  FullChapterSchema,\n  FullTuneSchema,\n  FullTuneTrackSchema,\n  FullTelevisionSchema,\n  FullTelevisionEpisodeSchema,\n  ThresholdItemSchema,\n  HallSubmissionReservationSchema,\n  PublishedHallItemSchema,\n  PublishedChapterSchema,\n  PublishedTuneTrackSchema,\n  PublishedTelevisionEpisodeSchema,\n  HallContentChangeRequestSchema,\n  FuturePlansDocumentSchema,\n  RulesAndAgreementsSchema,\n  LegalPageDocumentSchema,\n  TakeItDownPageCopySchema,\n  DmcaPolicyDocumentSchema,\n  HallLibraryPreferencesSchema,\n} from './content.js';\nimport {\n  SquareStreetzPostSchema,\n  MentionHistoryDocumentSchema,\n  FollowEdgeSchema,\n  FollowCounterSchema,\n  SquareStreetzLikeSchema,\n  TrendingPostsSchema,\n} from './social.js';\nimport {\n  PledgePaymentSchema,\n  PledgePaymentProviderRefSchema,\n  ProcessedStripeEventSchema,\n  PledgePaymentLedgerEventSchema,\n  PaymentWebhookQuarantineSchema,\n  PledgePaymentTotalsDocSchema,\n  PledgeRefundRequestSchema,\n} from './payments.js';\nimport {\n  FullCommissionListingSchema,\n  CommissionProposalSchema,\n  AuditionSchema,\n  AuditionEntrySchema,\n  UserAuditionVoteSchema,\n} from './commissions.js';\nimport {\n  GuildChatChannelSchema,\n  GuildInviteConversationSchema,\n  AdminDispatchSchema,\n  ChatMessageV1Schema,\n  ConversationFileSchema,\n} from './messaging.js';\nimport {\n  PublicDocumentVersionSchema,\n  PublicDocumentDraftSchema,\n  PublicDocumentReleaseSchema,\n} from './public-documents.js';\nimport { AppConfigSchema, AdminListSchema, ProfanityListSchema, ReservedUsernamesSchema, BlockedFranchiseNamesSchema, AppModeMarkerSchema } from './system.js';\nimport {\n  ContentViolationSchema,\n  ModerationCascadeManifestSchema,\n  ModerationCascadeChangedDocSchema,\n} from './moderation.js';\nimport {\n  AdminTaskDocSchema,\n} from './report-docs.js';\nimport { TTTAuditEventSchema } from './audit.js';\nimport {\n  NotificationDocSchema,\n  NotificationHistoryDocSchema,\n  PendingNotificationSchema,\n} from './notifications.js';\nimport {\n  NotificationDeliverySchema,\n  NotificationFanoutJobSchema,\n} from './notification-ledger.js';\nimport { NotificationArchiveAllJobSchema } from './notification-archive-all-jobs.js';\nimport {\n  ChatChannelAuthProjectionSchema,\n  ChatScopeDegradedSchema,\n  ChatScopeDegradedCauseSchema,\n  ChatSyncEventSchema,\n  ChatSyncFanoutJobSchema,\n  ChatMessageOutboxSchema,\n  ChatAdminActionCommandSchema,\n  ChatHistoryAnonymizationJobSchema,\n  ChatHistoryAnonymizationAffectedChunkSchema,\n} from './chat-sync.js';\nimport { SquareAnnouncementJobSchema } from './square-announcement-jobs.js';\nimport { PendingMediaSchema, ArchivedPendingMediaDocSchema } from '../media/pending-media.js';\nimport { MediaAssetSchema } from './media-assets.js';\nimport { MediaActivationJobSchema } from './media-activation-jobs.js';\nimport {\n  ReservedDisplayNameSchema,\n  ReservedRealmNameSchema,\n  StakeShareAuditEventSchema,\n  ShortLinkSchema,\n  FeedbackAliasSchema,\n  UserSuggestionSchema,\n  StatusReconcileQueueEntrySchema,\n} from './operational.js';\n// ===== Trust & Safety — report spine (§A1) =====\nimport {\n  ProtectedReportRootV1Schema,\n  ReportPublicProjectionV1Schema,\n  ReportGroupV1Schema,\n  ReportGroupCountedReportSchema,\n  ReportTargetSnapshotV1Schema,\n  NarrativeRecordV1Schema,\n} from './safety/report.js';\nimport { SafetyCaseAlertV1Schema } from './safety/case-alert.js';\n// ===== Trust & Safety — child-safety case spine (§A1b, §A2) =====\nimport {\n  ChildSafetyCaseListV1Schema,\n  ChildSafetyCaseV1Schema,\n  ChildSafetySourceSignalV1Schema,\n  ChildSafetyDecisionV1Schema,\n  ChildSafetyDecisionViewV1Schema,\n  ChildSafetyCaseAccountV1Schema,\n  ChildSafetyCaseAccountHistoryV1Schema,\n  ChildSafetyNcmecSubmissionV1Schema,\n  ChildSafetyNcmecSubmissionFileV1Schema,\n  ChildSafetyLegalProcessEventV1Schema,\n} from './safety/case.js';\nimport {\n  ChildSafetyOwningAliasV1Schema,\n} from './safety/case-aliases.js';\nimport {\n  SafetyHoldRefV1Schema,\n  SafetyHoldResourceV1Schema,\n  SafetyResourceCommandV1Schema,\n  SafetyResourceCommandAuthorizedRequestV1Schema,\n  SafetyResourceCommandBypassRefV1Schema,\n} from './safety/holds.js';\nimport {\n  SafetyEvidenceManifestV1Schema,\n  SafetyEvidenceJobV1Schema,\n  SafetyEvidenceJobItemDocV1Schema,\n  SafetyEvidenceDispositionV1Schema,\n} from './safety/evidence.js';\nimport { EventProvenanceV1Schema } from './safety/provenance.js';\nimport {\n  QuarantineSagaJobV1Schema,\n  QuarantineSagaRelatedAssetV1Schema,\n  NcmecSubmissionJobV1Schema,\n  AccountActionCommandV1Schema,\n} from './safety/sagas.js';\nimport {\n  SafetySlaMonitorV1Schema,\n  SafetyMonitorHeartbeatV1Schema,\n} from './safety/monitors.js';\nimport { AgeAttestationNonceV1Schema, AgePolicyConfigV1Schema } from './safety/age.js';\n// ===== Trust & Safety — NCII / TAKE IT DOWN (§A11) =====\nimport { NciiAllegationV1Schema } from './ncii/allegations.js';\nimport {\n  TakeItDownRequestRootV1Schema,\n  TakeItDownRequesterPrivateV1Schema,\n  TakeItDownSubmissionV1Schema,\n  TakeItDownValidityDecisionV1Schema,\n  TakeItDownValidityRationaleV1Schema,\n  TakeItDownRequestActionV1Schema,\n  TakeItDownEvidenceV1Schema,\n  NciiRetainedEvidenceInventoryV1Schema,\n} from './ncii/requests.js';\nimport {\n  NciiCaseV1Schema,\n  NciiCaseAllegationLinkV1Schema,\n  NciiCaseRequestLinkV1Schema,\n  NciiCaseRemovalActionV1Schema,\n  NciiBlockedHashV1Schema,\n  NciiCaseClosureEventV1Schema,\n} from './ncii/cases.js';\nimport { NciiTemporaryHoldV1Schema } from './ncii/holds.js';\nimport {\n  NciiRemovalJobV1Schema,\n  NciiRemovalTargetV1Schema,\n} from './ncii/removal.js';\nimport {\n  NciiPolicyConfigV1Schema,\n  PrivilegedReviewerSecurityProfileV1Schema,\n} from './ncii/config.js';\nimport {\n  HallMediaReaperCursorSchema,\n  NcmecCompletionProofRecordV1Schema,\n  NcmecPortalCorrectionRecordV1Schema,\n  NcmecPortalReceiptArtifactV1Schema,\n  OperatorStepUpSchema,\n  PublicUsersReconcilerCursorSchema,\n  SafetyReconcilerCursorSchema,\n  SweepStateSchema,\n} from './backend-state.js';\n\nexport const COLLECTION_SCHEMAS = {\n  // ===== Users =====\n  'userProfiles/{userId}': FullUserSchema,\n  'userProfiles/{userId}/privateData/{userId}': UserPrivateDataSchema,\n  'userProfiles/{userId}/privateData/hallLibraryPreferences': HallLibraryPreferencesSchema,\n  'userProfiles/{userId}/profileCraftSkills/{craftSkillId}': CraftSkillSchema,\n  'userProfiles/{userId}/auditionVotes/{auditionId}': UserAuditionVoteSchema,\n  'userProfiles/{userId}/mentionHistory/{docId}': MentionHistoryDocumentSchema,\n  'userProfiles/{userId}/notificationHistory/{notificationId}': NotificationHistoryDocSchema,\n  'userProfiles/{userId}/userLikes/likeHistory/squareStreetzLikes/{postId}': SquareStreetzLikeSchema,\n  'publicUsers/{uid}': PublicUserSchema,\n\n  // ===== Work / Realm / Guild =====\n  'allWorkProjects/{workProjectId}': FullWorkProjectSchema,\n  'allWorkProjects/{workProjectId}/guildmateUsers/{uid}': GuildmateUserSchema,\n  'allWorkProjects/{workProjectId}/publicGuildmateUsers/{uid}': PublicGuildmateUserSchema,\n  'allWorkProjects/{workProjectId}/workFileFolders/{workFileFolderId}': WorkFileFolderSchema,\n  'allWorkProjects/{workProjectId}/workFileFolders/{workFileFolderId}/workFiles/{workFileId}': WorkFileSchema,\n  'allWorkProjects/{workProjectId}/hallSubmissionReservation/reservation': HallSubmissionReservationSchema,\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}': FullTaleSchema,\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}/taleChapters/{chapterId}': FullChapterSchema,\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}': FullTuneSchema,\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}/tuneTracks/{trackId}': FullTuneTrackSchema,\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}': FullTelevisionSchema,\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}/televisionEpisodes/{episodeId}': FullTelevisionEpisodeSchema,\n  'allWorkProjects/{workProjectId}/guildChatChannels/{guildChatChannelId}': GuildChatChannelSchema,\n  // Guild channel + invite messages are REALTIME-ONLY (chat Worker DO) — no Firestore schema.\n  'publicWorkProjects/{workProjectId}': PublicWorkProjectSchema,\n  'workRealms/{workRealmId}': WorkRealmSchema,\n  // Realm shared-file folders — steward-owned containers; callable-written, client-read denied\n  // (the gallery projection returns them alongside the files).\n  'workRealms/{workRealmId}/realmFileFolders/{realmFileFolderId}': RealmFileFolderSchema,\n  'guildInviteConversations/{guildInviteId}': GuildInviteConversationSchema,\n  // Conversation Files — the flat per-conversation file list. Backend-only writes;\n  // client-readable only while the caller holds conversation read access.\n  'guildInviteConversations/{guildInviteId}/conversationFiles/{conversationFileId}': ConversationFileSchema,\n\n  // ===== Square / Social =====\n  // SquareStreetzPostSchema is a refined ZodObject (superRefine for the MEDIA-101\n  // mediaAssetId↔mediaType pair invariant); the schema-doc generator and the\n  // drift-check both unwrap the effect to introspect its shape, so binding the\n  // refined schema here is correct.\n  'squareStreetzFeed/activePosts/socialPosts/{postId}': SquareStreetzPostSchema,\n  'squareStreetzFeed/trendingPosts': TrendingPostsSchema,\n  'followEdges/{followEdgeId}': FollowEdgeSchema,\n  'followCounters/{followCounterId}': FollowCounterSchema,\n  // Durable Square announcement outbox (Admin-SDK-only; deterministic job ids).\n  'squareAnnouncementJobs/{jobId}': SquareAnnouncementJobSchema,\n\n  // ===== Payments / pledge ledger =====\n  'pledgePayments/{pledgePaymentId}': PledgePaymentSchema,\n  'pledgePaymentProviderRefs/{pledgePaymentId}': PledgePaymentProviderRefSchema,\n  'processedStripeEvents/{stripeEventId}': ProcessedStripeEventSchema,\n  'pledgePaymentLedgerEvents/{ledgerId}': PledgePaymentLedgerEventSchema,\n  'paymentWebhookQuarantine/{stripeEventId}': PaymentWebhookQuarantineSchema,\n  'pledgePaymentTotals/summary': PledgePaymentTotalsDocSchema,\n  'pledgeRefundRequests/{requestId}': PledgeRefundRequestSchema,\n\n  // ===== Threshold / Hall =====\n  'thresholdItems/{thresholdItemId}': ThresholdItemSchema,\n  'hallItems/{hallItemId}': PublishedHallItemSchema,\n  // Published hall sub-item projections — the chapter/track/episode docs copied out of\n  // the Work at publish time (runPublishApprovedHallLibraryItem). Segment names are the\n  // HALL_ITEM_SUBCOLLECTIONS constants — fixed compound names, NOT derived from\n  // WorkProjectType.\n  'hallItems/{hallItemId}/hallItemTales/{itemId}': PublishedChapterSchema,\n  'hallItems/{hallItemId}/hallItemTunes/{itemId}': PublishedTuneTrackSchema,\n  'hallItems/{hallItemId}/hallItemTelevision/{itemId}': PublishedTelevisionEpisodeSchema,\n  'hallContentChangeRequests/{changeRequestId}': HallContentChangeRequestSchema,\n\n  // ===== Commission / Audition =====\n  'commissionListings/{commissionListingId}': FullCommissionListingSchema,\n  'commissionListings/{commissionListingId}/commissionProposals/{commissionProposalId}': CommissionProposalSchema,\n  'auditionBoard/{auditionId}': AuditionSchema,\n  'auditionBoard/{auditionId}/auditionEntries/{auditionEntryId}': AuditionEntrySchema,\n\n  // ===== Moderation / Reports / Admin =====\n  // The report spine (§A1): the restricted root, its public projection subdoc, and the\n  // dedup/count group. The root + projection are written by the app's submitReport\n  // callable; the group is maintained by an app-side trigger.\n  'contentReports/{reportId}': ProtectedReportRootV1Schema,\n  'contentReports/{reportId}/publicProjection/{reportId}': ReportPublicProjectionV1Schema,\n  'contentReports/{reportId}/privateDetails/snapshot': ReportTargetSnapshotV1Schema,\n  'contentReports/{reportId}/privateDetails/narrative': NarrativeRecordV1Schema,\n  // The escalation narrative is byte-identical to the original — ONE shape, ONE definition\n  // (ENG-002): the same NarrativeRecordV1Schema binds both docs, never a duplicate schema.\n  'contentReports/{reportId}/privateDetails/narrativeEscalation': NarrativeRecordV1Schema,\n  'activeReportGroups/{groupKey}': ReportGroupV1Schema,\n  'activeReportGroups/{groupKey}/reportGroupCountedReports/{reportId}': ReportGroupCountedReportSchema,\n  'adminTasks/{taskId}': AdminTaskDocSchema,\n  'contentViolations/{violationId}': ContentViolationSchema,\n  'moderationCascadeManifests/{cascadeId}': ModerationCascadeManifestSchema,\n  'moderationCascadeManifests/{cascadeId}/changedDocs/{changedDocId}': ModerationCascadeChangedDocSchema,\n  'auditEvents/{eventId}': TTTAuditEventSchema,\n  'stakeShareAuditEvents/{eventId}': StakeShareAuditEventSchema,\n  'pendingAdminDispatches/{adminDispatchId}': AdminDispatchSchema,\n  'pendingAdminDispatches/{adminDispatchId}/conversationMessages/{adminDispatchMessageId}': ChatMessageV1Schema,\n  'pendingAdminDispatches/{adminDispatchId}/conversationFiles/{conversationFileId}': ConversationFileSchema,\n\n  // ===== Media pipeline =====\n  'pendingMedia/{pendingMediaId}': PendingMediaSchema,\n  'pendingMediaArchive/{pendingMediaId}': ArchivedPendingMediaDocSchema,\n  'mediaAssets/{mediaAssetId}': MediaAssetSchema,\n  'mediaActivationJobs/{jobId}': MediaActivationJobSchema,\n\n  // ===== Notifications =====\n  'activeUserNotifications/{notificationId}': NotificationDocSchema,\n  'activeAdminNotifications/{notificationId}': NotificationDocSchema,\n  'adminNotificationHistory/{notificationId}': NotificationHistoryDocSchema,\n  'pendingNotifications/{notificationId}': PendingNotificationSchema,\n\n  // ===== Notification redesign — delivery ledger + fanout engine =====\n  'notificationDeliveries/{deliveryId}': NotificationDeliverySchema,\n  'notificationFanoutJobs/{jobId}': NotificationFanoutJobSchema,\n  'notificationArchiveAllJobs/{jobId}': NotificationArchiveAllJobSchema,\n\n  // ===== Chat realtime sync / projection / commands =====\n  'chatChannelAuthProjections/{authPairKey}': ChatChannelAuthProjectionSchema,\n  'chatScopeDegraded/{scopeKey}': ChatScopeDegradedSchema,\n  'chatScopeDegraded/{scopeKey}/chatScopeDegradedCauses/{causeId}': ChatScopeDegradedCauseSchema,\n  'chatSyncEvents/{eventId}': ChatSyncEventSchema,\n  'chatSyncFanoutJobs/{jobId}': ChatSyncFanoutJobSchema,\n  'chatMessageOutbox/{commandId}': ChatMessageOutboxSchema,\n  'chatAdminActionCommands/{requestId}': ChatAdminActionCommandSchema,\n  'chatHistoryAnonymizationJobs/{jobId}': ChatHistoryAnonymizationJobSchema,\n  'chatHistoryAnonymizationJobs/{jobId}/affectedChunks/{chunkOrdinal}': ChatHistoryAnonymizationAffectedChunkSchema,\n\n  // ===== Craft skills index =====\n  'craftSkillsByTag/{tag}/taggedCraftSkills/{compositeId}': CraftSkillReferenceSchema,\n\n  // ===== Operational / utility =====\n  'reservedDisplayNames/{displayNameUppercase}': ReservedDisplayNameSchema,\n  'reservedRealmNames/{workingTitleUppercase}': ReservedRealmNameSchema,\n  'accountDeletionRequests/{uid}': AccountDeletionRequestV1Schema,\n  'shortLinks/{shortId}': ShortLinkSchema,\n  'feedbackSubmissions/{feedbackType}/userSuggestions/{suggestionId}': UserSuggestionSchema,\n  'statusReconcileQueue/{uid}': StatusReconcileQueueEntrySchema,\n\n  // ===== Versioned public documents (backend-written; never public — the public reads the _appConfig projections) =====\n  'publicDocuments/{documentId}/publicDocumentVersions/{versionId}': PublicDocumentVersionSchema,\n  'publicDocumentDrafts/{documentId}': PublicDocumentDraftSchema,\n  'publicDocumentReleases/{releaseId}': PublicDocumentReleaseSchema,\n\n  // ===== Trust & Safety — child-safety case spine (§A1b, §A2) =====\n  'childSafetyCaseList/{caseId}': ChildSafetyCaseListV1Schema,\n  'activeSafetyCaseAlerts/{caseId}': SafetyCaseAlertV1Schema,\n  'childSafetyCases/{caseId}': ChildSafetyCaseV1Schema,\n  'childSafetyCases/{caseId}/sourceSignals/{signalId}': ChildSafetySourceSignalV1Schema,\n  'childSafetyCases/{caseId}/childSafetyDecisions/{decisionId}': ChildSafetyDecisionV1Schema,\n  'childSafetyCases/{caseId}/childSafetyDecisions/{decisionId}/childSafetyDecisionViews/{viewId}': ChildSafetyDecisionViewV1Schema,\n  'childSafetyCases/{caseId}/childSafetyCaseAccounts/{uid}': ChildSafetyCaseAccountV1Schema,\n  'childSafetyCases/{caseId}/childSafetyCaseAccounts/{uid}/childSafetyCaseAccountHistory/{historyId}': ChildSafetyCaseAccountHistoryV1Schema,\n  'childSafetyCases/{caseId}/ncmecSubmissions/{submissionId}': ChildSafetyNcmecSubmissionV1Schema,\n  'childSafetyCases/{caseId}/ncmecSubmissions/{submissionId}/ncmecSubmissionFiles/{fileId}': ChildSafetyNcmecSubmissionFileV1Schema,\n  // [H-05] the submission's single immutable completion-proof record (fixed doc id). Backend-only,\n  // so its shape lives in doc-schemas/backend-state.ts alongside the portal artifacts.\n  'childSafetyCases/{caseId}/ncmecSubmissions/{submissionId}/ncmecCompletionProof/record': NcmecCompletionProofRecordV1Schema,\n  'childSafetyCases/{caseId}/legalProcess/{eventId}': ChildSafetyLegalProcessEventV1Schema,\n  // Portal-filed NCMEC artifacts recorded by the two step-up-gated operator callables. Both\n  // are backend-only (no client reader), so their shapes live in doc-schemas/backend-state.ts.\n  'childSafetyCases/{caseId}/portalReceiptArtifacts/{artifactId}': NcmecPortalReceiptArtifactV1Schema,\n  'childSafetyCases/{caseId}/ncmecPortalCorrections/{correctionId}': NcmecPortalCorrectionRecordV1Schema,\n  'childSafetyOwningAliases/{aliasId}': ChildSafetyOwningAliasV1Schema,\n\n  // ===== Trust & Safety — holds + resource commands (§A3) =====\n  'safetyHoldRefs/{holdRefId}': SafetyHoldRefV1Schema,\n  'safetyHoldResources/{resourceKeyHash}': SafetyHoldResourceV1Schema,\n  'safetyResourceCommands/{commandDocId}': SafetyResourceCommandV1Schema,\n  'safetyResourceCommands/{commandDocId}/authorizedRequests/{requestId}': SafetyResourceCommandAuthorizedRequestV1Schema,\n  'safetyResourceCommands/{commandDocId}/bypassRefs/{refId}': SafetyResourceCommandBypassRefV1Schema,\n\n  // ===== Trust & Safety — evidence + provenance (§A4, §A6) =====\n  // SafetyEvidenceManifestV1Schema is a refined ZodObject (superRefine for the H5\n  // sourceKind invariant); the schema-doc generator unwraps the effect to introspect\n  // its shape, so binding the refined schema here is correct.\n  'safetyEvidenceManifests/{manifestId}': SafetyEvidenceManifestV1Schema,\n  'safetyEvidenceJobs/{jobId}': SafetyEvidenceJobV1Schema,\n  'safetyEvidenceJobs/{jobId}/safetyEvidenceJobItems/{itemId}': SafetyEvidenceJobItemDocV1Schema,\n  'safetyEvidenceJobs/{jobId}/safetyEvidenceJobDisposition/{locationId}': SafetyEvidenceDispositionV1Schema,\n  'eventProvenance/{eventId}': EventProvenanceV1Schema,\n\n  // ===== Trust & Safety — sagas + closure (§A5) =====\n  'quarantineSagaJobs/{caseId}': QuarantineSagaJobV1Schema,\n  'quarantineSagaJobs/{caseId}/relatedAssets/{assetId}': QuarantineSagaRelatedAssetV1Schema,\n  'ncmecSubmissionJobs/{ncmecJobId}': NcmecSubmissionJobV1Schema,\n  'accountActionCommands/{accountActionCommandId}': AccountActionCommandV1Schema,\n\n  // ===== Trust & Safety — SLA monitors + heartbeat (§A8) =====\n  'safetySlaMonitors/{monitorId}': SafetySlaMonitorV1Schema,\n  'safetyMonitorHeartbeat/global': SafetyMonitorHeartbeatV1Schema,\n\n  // ===== Trust & Safety — age attestation nonces (§A7) =====\n  'ageAttestationNonces/{nonceHash}': AgeAttestationNonceV1Schema,\n\n  // ===== Trust & Safety — operator step-up + reconciler cursors (backend-only) =====\n  // Cloud-Functions-only readers/writers; client access denied in firestore.rules.\n  'operatorStepUp/{uid}': OperatorStepUpSchema,\n  'safetyReconcilerCursors/{cursorKey}': SafetyReconcilerCursorSchema,\n\n  // ===== Scheduled user sweeps — durable cadence/cursor state (backend-only) =====\n  'sweepState/{sweepName}': SweepStateSchema,\n\n  // ===== Trust & Safety — NCII / TAKE IT DOWN (§A11) =====\n  'nciiAllegations/{allegationId}': NciiAllegationV1Schema,\n  'takeItDownRequests/{requestId}': TakeItDownRequestRootV1Schema,\n  'takeItDownRequests/{requestId}/privateDetails/requester': TakeItDownRequesterPrivateV1Schema,\n  'takeItDownRequests/{requestId}/takeItDownSubmissions/{submissionId}': TakeItDownSubmissionV1Schema,\n  'takeItDownRequests/{requestId}/validityDecisions/{decisionId}': TakeItDownValidityDecisionV1Schema,\n  'takeItDownRequests/{requestId}/validityDecisions/{decisionId}/takeItDownValidityRationale/record': TakeItDownValidityRationaleV1Schema,\n  'takeItDownRequests/{requestId}/takeItDownActions/{actionId}': TakeItDownRequestActionV1Schema,\n  // Deletion-verification record per evidence object — see SafetyEvidenceDispositionV1Schema for what\n  // `result: 'gone'` means in THIS bucket (absent from the live bucket, not permanent destruction).\n  'takeItDownRequests/{requestId}/takeItDownEvidenceDisposition/{evidenceId}': SafetyEvidenceDispositionV1Schema,\n  'takeItDownRequests/{requestId}/takeItDownEvidence/{evidenceId}': TakeItDownEvidenceV1Schema,\n  'nciiCases/{caseId}': NciiCaseV1Schema,\n  'nciiCases/{caseId}/allegationLinks/{allegationId}': NciiCaseAllegationLinkV1Schema,\n  'nciiCases/{caseId}/requestLinks/{requestId}': NciiCaseRequestLinkV1Schema,\n  'nciiCases/{caseId}/removalActions/{actionId}': NciiCaseRemovalActionV1Schema,\n  'nciiCases/{caseId}/blockedHashes/{hashId}': NciiBlockedHashV1Schema,\n  'nciiCases/{caseId}/closureEvents/{eventId}': NciiCaseClosureEventV1Schema,\n  'nciiRetainedEvidenceInventory/{inventoryId}': NciiRetainedEvidenceInventoryV1Schema,\n  // [H-01] dead-letter sink for inventory rows that could not be written to the primary\n  // nciiRetainedEvidenceInventory collection. Stores the same document shape.\n  'nciiInventoryDeadLetter/{inventoryId}': NciiRetainedEvidenceInventoryV1Schema,\n  'nciiTemporaryHolds/{holdId}': NciiTemporaryHoldV1Schema,\n  'nciiRemovalJobs/{jobId}': NciiRemovalJobV1Schema,\n  'nciiRemovalJobs/{jobId}/nciiRemovalTargets/{targetKeyHash}': NciiRemovalTargetV1Schema,\n\n  // ===== _appConfig singletons (public) =====\n  '_appConfig/app': AppConfigSchema,\n  '_appConfig/futurePlans': FuturePlansDocumentSchema,\n  '_appConfig/rulesAndAgreements': RulesAndAgreementsSchema,\n  // Content-pages migration (DJ ruling 2026-07-06): /terms, /privacy, and the\n  // /take-it-down page copy render exclusively from these (all public pages —\n  // take-it-down is a NO-LOGIN page, so its copy doc must be publicly readable).\n  '_appConfig/termsOfService': LegalPageDocumentSchema,\n  '_appConfig/privacyPolicy': LegalPageDocumentSchema,\n  '_appConfig/takeItDownPageCopy': TakeItDownPageCopySchema,\n  // The /dmca page's current projection — a public document like the three above.\n  '_appConfig/dmcaPolicy': DmcaPolicyDocumentSchema,\n\n  // ===== _serverData singletons (server-only — Cloud-Functions-only readers, BACKEND-108) =====\n  '_serverData/agePolicy': AgePolicyConfigV1Schema,\n  '_serverData/nciiPolicy': NciiPolicyConfigV1Schema,\n  '_serverData/privilegedReviewerSecurity': PrivilegedReviewerSecurityProfileV1Schema,\n  // The submitFeedback alias map — moved off the anonymously-readable top-level\n  // `feedbackAliases` collection into the server-only bucket (BACKEND-108). The sibling\n  // `feedbackDenylist` subcollection has no field contract (`.exists`-only) — see\n  // PENDING_COLLECTIONS.\n  '_serverData/feedbackLists/feedbackAliases/{aliasId}': FeedbackAliasSchema,\n\n  // ===== _systemData singletons =====\n  '_systemData/adminList': AdminListSchema,\n  '_systemData/profanityList': ProfanityListSchema,\n  '_systemData/reservedUsernames': ReservedUsernamesSchema,\n  '_systemData/blockedFranchiseNames': BlockedFranchiseNamesSchema,\n  '_systemData/appMode': AppModeMarkerSchema,\n  '_systemData/hallMediaReaperCursor': HallMediaReaperCursorSchema,\n  '_systemData/publicUsersReconcilerCursor': PublicUsersReconcilerCursorSchema,\n} as const satisfies Record<string, z.ZodTypeAny>;\n\nexport type RegisteredCollectionPath = keyof typeof COLLECTION_SCHEMAS;\n\n/**\n * Doc-id field annotation: for the listed bindings, the named body field equals the\n * Firestore document id and is injected at READ time (`{ ...doc.data(), <field>: doc.id }`),\n * never persisted — the write callables store the body via `Omit<…, '<field>'>`. The bound\n * schema models the (correct) consumer/read shape, where the field is required, so a raw\n * stored doc is \"missing\" it. The drift-check injects `{ [field]: doc.id, ...data }` before\n * validating, generalizing the one-off `AdminTaskDocSchema` stored-shape workaround into a\n * single mechanism so real-callable drift-checks don't false-flag every doc-id collection.\n * The schema-doc generator ignores this map. Keys are compiler-checked against the registry.\n */\nexport const COLLECTION_DOC_ID_FIELDS = {\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTales/{taleId}/taleChapters/{chapterId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTunes/{tuneId}/tuneTracks/{trackId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}': 'uid',\n  'allWorkProjects/{workProjectId}/workProjectTelevision/{televisionId}/televisionEpisodes/{episodeId}': 'uid',\n  'allWorkProjects/{workProjectId}/guildChatChannels/{guildChatChannelId}': 'guildChatChannelId',\n  // Published hall sub-items: the doc id IS the live sub-item's id; `uid` is injected at\n  // read (the publish writer spreads the live doc's stored body, which has no `uid`).\n  'hallItems/{hallItemId}/hallItemTales/{itemId}': 'uid',\n  'hallItems/{hallItemId}/hallItemTunes/{itemId}': 'uid',\n  'hallItems/{hallItemId}/hallItemTelevision/{itemId}': 'uid',\n  'activeUserNotifications/{notificationId}': 'id',\n  'activeAdminNotifications/{notificationId}': 'id',\n  'adminNotificationHistory/{notificationId}': 'archiveOccurrenceId',\n  'userProfiles/{userId}/notificationHistory/{notificationId}': 'archiveOccurrenceId',\n  'pendingNotifications/{notificationId}': 'id',\n  'statusReconcileQueue/{uid}': 'uid',\n} as const satisfies Partial<Record<RegisteredCollectionPath, string>>;\n\n/**\n * Collections that exist (in COLLECTIONS / *_SUBCOLLECTIONS or firestore.rules) but are\n * intentionally NOT bound to a schema, each with a reason. Listed EXPLICITLY so completeness is\n * enforced and nothing is silently uncovered; the registry test fails if a NEW unlisted collection\n * appears. These are the only remaining gaps after the schema-registry binding pass:\n *\n *  - userMetadata: `userProfiles/{uid}/userMetadata/notificationSettings` — a firestore.rules\n *    match and `PATH_BUILDERS.userMetadata` exist, but there is no live reader/writer and no\n *    notification-settings type anywhere yet. Bind once that shape is implemented.\n *  - feedbackDenylist: `_serverData/feedbackLists/feedbackDenylist/{deniedWord}` — Console-managed\n *    (no callable writes it) and submitFeedback reads it via `.exists` only, so there is no field\n *    contract to author a schema from. The doc id is the denied word; the body is unused.\n *  - ncmecSubmissionAttempts: see the inline reason below.\n */\nexport const PENDING_COLLECTIONS: readonly string[] = [\n  'userMetadata',\n  'feedbackDenylist',\n  // Per-submission NCMEC transmission attempts. The segment exists only in firestore.rules\n  // today and has no writer or reader yet; the constant is registered so the name has one\n  // owner. Bind once the attempt-record shape is implemented.\n  'ncmecSubmissionAttempts',\n] as const;\n"]}

package/dist/doc-schemas/safety/case.d.ts

@@ -84,8 +84,8 @@ export declare const ChildSafetyDecisionKindSchema: z.ZodEnum<{
 export type ChildSafetyDecisionKind = z.infer<typeof ChildSafetyDecisionKindSchema>;
 /** §A1b accounts[].role on a case. */
 export declare const ChildSafetyAccountRoleSchema: z.ZodEnum<{
-    uploader: "uploader";
     requester: "requester";
+    uploader: "uploader";
     distributor: "distributor";
     questionable: "questionable";
 }>;
@@ -384,8 +384,8 @@ export type ChildSafetyDecisionViewV1 = z.infer<typeof ChildSafetyDecisionViewV1
  * `subjectDisposition` is distinct from the case-level `reportDisposition`. */
 export declare const ChildSafetyCaseAccountV1Schema: z.ZodObject<{
     role: z.ZodEnum<{
-        uploader: "uploader";
         requester: "requester";
+        uploader: "uploader";
         distributor: "distributor";
         questionable: "questionable";
     }>;
@@ -409,8 +409,8 @@ export type ChildSafetyCaseAccountV1 = z.infer<typeof ChildSafetyCaseAccountV1Sc
 /** …/accounts/{uid}/history/{historyId} — append-only per-account history. */
 export declare const ChildSafetyCaseAccountHistoryV1Schema: z.ZodObject<{
     role: z.ZodEnum<{
-        uploader: "uploader";
         requester: "requester";
+        uploader: "uploader";
         distributor: "distributor";
         questionable: "questionable";
     }>;

package/dist/doc-schemas/system.d.ts

@@ -6,6 +6,20 @@ export declare const AppConfigSchema: z.ZodObject<{
     registrationEnabled: z.ZodBoolean;
     announcementMessage: z.ZodOptional<z.ZodString>;
     rateLimitMultiplier: z.ZodOptional<z.ZodNumber>;
+    publicDocumentVersions: z.ZodOptional<z.ZodObject<{
+        documents: z.ZodRecord<z.ZodEnum<{
+            futurePlans: "futurePlans";
+            rulesAndAgreements: "rulesAndAgreements";
+            termsOfService: "termsOfService";
+            privacyPolicy: "privacyPolicy";
+            takeItDownPageCopy: "takeItDownPageCopy";
+            dmcaPolicy: "dmcaPolicy";
+        }> & z.core.$partial, z.ZodObject<{
+            currentVersion: z.ZodNumber;
+            requiredVersion: z.ZodNumber;
+        }, z.core.$strict>>;
+        requiredAcceptanceLevel: z.ZodNumber;
+    }, z.core.$strict>>;
 }, z.core.$strip>;
 export type AppConfig = z.infer<typeof AppConfigSchema>;
 export declare const AdminListSchema: z.ZodObject<{

package/dist/doc-schemas/system.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"system.d.ts","sourceRoot":"","sources":["../../src/doc-schemas/system.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,eAAe;;;;;;;iBAe1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAIxD,eAAO,MAAM,eAAe;;;iBAG1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAIxD,eAAO,MAAM,mBAAmB;;;;;iBAQ9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAOhE,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAKxE,eAAO,MAAM,2BAA2B;;;iBAGtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAIhF,eAAO,MAAM,mBAAmB;;;;;;iBAG9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"system.d.ts","sourceRoot":"","sources":["../../src/doc-schemas/system.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;iBAqB1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAIxD,eAAO,MAAM,eAAe;;;iBAG1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAIxD,eAAO,MAAM,mBAAmB;;;;;iBAQ9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAOhE,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAKxE,eAAO,MAAM,2BAA2B;;;iBAGtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAIhF,eAAO,MAAM,mBAAmB;;;;;;iBAG9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/doc-schemas/system.js

@@ -2,6 +2,7 @@
 // Type inferred via z.infer. (Field docs live in ../types/system.ts.)
 import { z } from 'zod';
 import { MAX_ANNOUNCEMENT_MESSAGE_LENGTH } from '../constants/business-admin.js';
+import { PublicDocumentVersionBlockSchema } from './public-documents.js';
 export const AppConfigSchema = z.object({
     appVersion: z.string(),
     maintenanceMode: z.boolean(),
@@ -17,6 +18,12 @@ export const AppConfigSchema = z.object({
     // 0 < m <= 1, tighten-only. Absent = 1 (no throttle). Set via updateAppConfig
     // (audited); read by the backend limiter wrapper with a short in-memory cache.
     rateLimitMultiplier: z.number().gt(0).max(1).optional(),
+    // Public-document version block — per document its current version and the latest version
+    // that required acceptance, plus the one required-acceptance level. Written ONLY by the
+    // release publish transaction (never updateAppConfig); every session already reads this doc
+    // live, so a required release reaches open sessions without a new listener. Absent until the
+    // first release: every document is then version 0 and nothing is required.
+    publicDocumentVersions: PublicDocumentVersionBlockSchema.optional(),
 });
 // _systemData/adminList — the admin / jrAdmin uid lists; source of truth synced to custom claims
 // by setAdminStatusClaim. (functions/src/auth/runUpdateAdminList.ts)

package/dist/doc-schemas/system.js.map

@@ -1 +1 @@
-{"version":3,"file":"system.js","sourceRoot":"","sources":["../../src/doc-schemas/system.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,sEAAsE;AAEtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AAEjF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE;IAChC,kFAAkF;IAClF,mFAAmF;IACnF,sFAAsF;IACtF,kFAAkF;IAClF,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;IAC/E,+EAA+E;IAC/E,2EAA2E;IAC3E,8EAA8E;IAC9E,+EAA+E;IAC/E,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAC;AAGH,iGAAiG;AACjG,qEAAqE;AACrE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC9B,CAAC,CAAC;AAGH,wFAAwF;AACxF,wEAAwE;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,sFAAsF;IACtF,uFAAuF;IACvF,cAAc;IACd,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,4FAA4F;AAC5F,2FAA2F;AAC3F,gGAAgG;AAChG,oFAAoF;AACpF,+CAA+C;AAC/C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,iGAAiG;AACjG,oGAAoG;AACpG,kGAAkG;AAClG,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,oFAAoF;AACpF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC","sourcesContent":["// System Firestore document SCHEMAS — the `_appConfig/app` runtime-config singleton.\n// Type inferred via z.infer. (Field docs live in ../types/system.ts.)\n\nimport { z } from 'zod';\nimport { MAX_ANNOUNCEMENT_MESSAGE_LENGTH } from '../constants/business-admin.js';\n\nexport const AppConfigSchema = z.object({\n  appVersion: z.string(),\n  maintenanceMode: z.boolean(),\n  maintenanceMessage: z.string().optional(),\n  registrationEnabled: z.boolean(),\n  // Announcement banner (the third operational lever, alongside maintenanceMode and\n  // registrationEnabled). OPTIONAL, and EMPTY means no banner — there is no separate\n  // on/off boolean, so clearing the text IS turning the banner off. Non-empty renders a\n  // banner on the landing page and login screen. Set via updateAppConfig (audited).\n  announcementMessage: z.string().max(MAX_ANNOUNCEMENT_MESSAGE_LENGTH).optional(),\n  // Runtime abuse throttle (incident lever — NOT the charter/full mode, which is\n  // a ttt-core code constant). Scales every rate limiter's maxRequests DOWN:\n  // 0 < m <= 1, tighten-only. Absent = 1 (no throttle). Set via updateAppConfig\n  // (audited); read by the backend limiter wrapper with a short in-memory cache.\n  rateLimitMultiplier: z.number().gt(0).max(1).optional(),\n});\nexport type AppConfig = z.infer<typeof AppConfigSchema>;\n\n// _systemData/adminList — the admin / jrAdmin uid lists; source of truth synced to custom claims\n// by setAdminStatusClaim. (functions/src/auth/runUpdateAdminList.ts)\nexport const AdminListSchema = z.object({\n  admins: z.array(z.string()),\n  jrAdmins: z.array(z.string()),\n});\nexport type AdminList = z.infer<typeof AdminListSchema>;\n\n// _systemData/profanityList — the moderation word list read by the runtime text filter.\n// (functions/src/utility/seedProfanityList.ts / curateProfanityList.ts)\nexport const ProfanityListSchema = z.object({\n  words: z.array(z.string()),\n  updatedAt: z.number(),\n  wordCount: z.number(),\n  // Monotonic version for the chat-realtime word-list sync (Contract B). Bumped by each\n  // curation; the chat Worker KV snapshot + the channel-DO lazy version check key on it.\n  // Absent ⇒ 0.\n  wordListVersion: z.number().optional(),\n});\nexport type ProfanityList = z.infer<typeof ProfanityListSchema>;\n\n// _systemData/reservedUsernames — curated brand/impersonation terms blocked at registration\n// by exact normalized (UPPERCASE) match. Distinct from the per-user `reservedDisplayNames`\n// uniqueness collection. Seeded by functions/src/utility/seedReservedUsernames.ts; consulted by\n// registerUser + checkDisplayNameAvailable. Names are stored UPPERCASE to match the\n// reservedDisplayName case-folding convention.\nexport const ReservedUsernamesSchema = z.object({\n  names: z.array(z.string()),\n  updatedAt: z.number(),\n});\nexport type ReservedUsernames = z.infer<typeof ReservedUsernamesSchema>;\n\n// _systemData/blockedFranchiseNames — curated famous-franchise / IP names (UPPERCASE), consulted\n// when creating/publishing a Work or Realm title and by the admin trademark-assist button. Distinct\n// from reservedUsernames (registration). Seeded by an admin seed callable. (legal-convo [BUILD].)\nexport const BlockedFranchiseNamesSchema = z.object({\n  names: z.array(z.string()),\n  updatedAt: z.number(),\n});\nexport type BlockedFranchiseNames = z.infer<typeof BlockedFranchiseNamesSchema>;\n\n// _systemData/appMode — the charter→full mode marker that recordAppModeFlip writes.\n// `current` mirrors the deployed `APP_MODE` constant after a flip is recorded.\nexport const AppModeMarkerSchema = z.object({\n  current: z.enum(['charter', 'full']),\n  updatedAt: z.number(),\n});\nexport type AppModeMarker = z.infer<typeof AppModeMarkerSchema>;\n"]}
+{"version":3,"file":"system.js","sourceRoot":"","sources":["../../src/doc-schemas/system.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,sEAAsE;AAEtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,gCAAgC,EAAE,MAAM,uBAAuB,CAAC;AAEzE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE;IAChC,kFAAkF;IAClF,mFAAmF;IACnF,sFAAsF;IACtF,kFAAkF;IAClF,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;IAC/E,+EAA+E;IAC/E,2EAA2E;IAC3E,8EAA8E;IAC9E,+EAA+E;IAC/E,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvD,0FAA0F;IAC1F,wFAAwF;IACxF,4FAA4F;IAC5F,6FAA6F;IAC7F,2EAA2E;IAC3E,sBAAsB,EAAE,gCAAgC,CAAC,QAAQ,EAAE;CACpE,CAAC,CAAC;AAGH,iGAAiG;AACjG,qEAAqE;AACrE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC9B,CAAC,CAAC;AAGH,wFAAwF;AACxF,wEAAwE;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,sFAAsF;IACtF,uFAAuF;IACvF,cAAc;IACd,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,4FAA4F;AAC5F,2FAA2F;AAC3F,gGAAgG;AAChG,oFAAoF;AACpF,+CAA+C;AAC/C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,iGAAiG;AACjG,oGAAoG;AACpG,kGAAkG;AAClG,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,oFAAoF;AACpF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC","sourcesContent":["// System Firestore document SCHEMAS — the `_appConfig/app` runtime-config singleton.\n// Type inferred via z.infer. (Field docs live in ../types/system.ts.)\n\nimport { z } from 'zod';\nimport { MAX_ANNOUNCEMENT_MESSAGE_LENGTH } from '../constants/business-admin.js';\nimport { PublicDocumentVersionBlockSchema } from './public-documents.js';\n\nexport const AppConfigSchema = z.object({\n  appVersion: z.string(),\n  maintenanceMode: z.boolean(),\n  maintenanceMessage: z.string().optional(),\n  registrationEnabled: z.boolean(),\n  // Announcement banner (the third operational lever, alongside maintenanceMode and\n  // registrationEnabled). OPTIONAL, and EMPTY means no banner — there is no separate\n  // on/off boolean, so clearing the text IS turning the banner off. Non-empty renders a\n  // banner on the landing page and login screen. Set via updateAppConfig (audited).\n  announcementMessage: z.string().max(MAX_ANNOUNCEMENT_MESSAGE_LENGTH).optional(),\n  // Runtime abuse throttle (incident lever — NOT the charter/full mode, which is\n  // a ttt-core code constant). Scales every rate limiter's maxRequests DOWN:\n  // 0 < m <= 1, tighten-only. Absent = 1 (no throttle). Set via updateAppConfig\n  // (audited); read by the backend limiter wrapper with a short in-memory cache.\n  rateLimitMultiplier: z.number().gt(0).max(1).optional(),\n  // Public-document version block — per document its current version and the latest version\n  // that required acceptance, plus the one required-acceptance level. Written ONLY by the\n  // release publish transaction (never updateAppConfig); every session already reads this doc\n  // live, so a required release reaches open sessions without a new listener. Absent until the\n  // first release: every document is then version 0 and nothing is required.\n  publicDocumentVersions: PublicDocumentVersionBlockSchema.optional(),\n});\nexport type AppConfig = z.infer<typeof AppConfigSchema>;\n\n// _systemData/adminList — the admin / jrAdmin uid lists; source of truth synced to custom claims\n// by setAdminStatusClaim. (functions/src/auth/runUpdateAdminList.ts)\nexport const AdminListSchema = z.object({\n  admins: z.array(z.string()),\n  jrAdmins: z.array(z.string()),\n});\nexport type AdminList = z.infer<typeof AdminListSchema>;\n\n// _systemData/profanityList — the moderation word list read by the runtime text filter.\n// (functions/src/utility/seedProfanityList.ts / curateProfanityList.ts)\nexport const ProfanityListSchema = z.object({\n  words: z.array(z.string()),\n  updatedAt: z.number(),\n  wordCount: z.number(),\n  // Monotonic version for the chat-realtime word-list sync (Contract B). Bumped by each\n  // curation; the chat Worker KV snapshot + the channel-DO lazy version check key on it.\n  // Absent ⇒ 0.\n  wordListVersion: z.number().optional(),\n});\nexport type ProfanityList = z.infer<typeof ProfanityListSchema>;\n\n// _systemData/reservedUsernames — curated brand/impersonation terms blocked at registration\n// by exact normalized (UPPERCASE) match. Distinct from the per-user `reservedDisplayNames`\n// uniqueness collection. Seeded by functions/src/utility/seedReservedUsernames.ts; consulted by\n// registerUser + checkDisplayNameAvailable. Names are stored UPPERCASE to match the\n// reservedDisplayName case-folding convention.\nexport const ReservedUsernamesSchema = z.object({\n  names: z.array(z.string()),\n  updatedAt: z.number(),\n});\nexport type ReservedUsernames = z.infer<typeof ReservedUsernamesSchema>;\n\n// _systemData/blockedFranchiseNames — curated famous-franchise / IP names (UPPERCASE), consulted\n// when creating/publishing a Work or Realm title and by the admin trademark-assist button. Distinct\n// from reservedUsernames (registration). Seeded by an admin seed callable. (legal-convo [BUILD].)\nexport const BlockedFranchiseNamesSchema = z.object({\n  names: z.array(z.string()),\n  updatedAt: z.number(),\n});\nexport type BlockedFranchiseNames = z.infer<typeof BlockedFranchiseNamesSchema>;\n\n// _systemData/appMode — the charter→full mode marker that recordAppModeFlip writes.\n// `current` mirrors the deployed `APP_MODE` constant after a flip is recorded.\nexport const AppModeMarkerSchema = z.object({\n  current: z.enum(['charter', 'full']),\n  updatedAt: z.number(),\n});\nexport type AppModeMarker = z.infer<typeof AppModeMarkerSchema>;\n"]}

package/dist/doc-schemas/user.d.ts

@@ -278,7 +278,6 @@ export declare const FullUserSchema: z.ZodObject<{
     profilePictureAssetId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     artisanCreator: z.ZodOptional<z.ZodNumber>;
     hasPledged: z.ZodOptional<z.ZodBoolean>;
-    charterSignupMember: z.ZodOptional<z.ZodBoolean>;
     status: z.ZodOptional<z.ZodEnum<{
         banned: "banned";
         active: "active";
@@ -383,6 +382,7 @@ export declare const UserPrivateDataSchema: z.ZodObject<{
     }, z.core.$strip>>;
     squareStreetzAgreementsDate: z.ZodOptional<z.ZodNumber>;
     squareStreetzAgreementsVersion: z.ZodOptional<z.ZodNumber>;
+    artisanCreatorAgreementsVersion: z.ZodOptional<z.ZodNumber>;
     hallDownloadAcknowledgedAt: z.ZodOptional<z.ZodNumber>;
     agreements: z.ZodOptional<z.ZodObject<{
         age: z.ZodOptional<z.ZodBoolean>;
@@ -394,6 +394,19 @@ export declare const UserPrivateDataSchema: z.ZodObject<{
         termsVersion: z.ZodOptional<z.ZodNumber>;
         privacyVersion: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>>;
+    publicDocumentAcceptance: z.ZodOptional<z.ZodObject<{
+        documentVersions: z.ZodRecord<z.ZodEnum<{
+            futurePlans: "futurePlans";
+            rulesAndAgreements: "rulesAndAgreements";
+            termsOfService: "termsOfService";
+            privacyPolicy: "privacyPolicy";
+            takeItDownPageCopy: "takeItDownPageCopy";
+            dmcaPolicy: "dmcaPolicy";
+        }> & z.core.$partial, z.ZodNumber>;
+        acceptedLevel: z.ZodNumber;
+        legalReviewNoticeRevision: z.ZodOptional<z.ZodString>;
+        acceptedAt: z.ZodNumber;
+    }, z.core.$strict>>;
     siteTour: z.ZodOptional<z.ZodObject<{
         completedVersion: z.ZodOptional<z.ZodNumber>;
         completedAt: z.ZodOptional<z.ZodNumber>;

package/dist/doc-schemas/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../src/doc-schemas/user.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB;;yDAEyD;AACzD,eAAO,MAAM,uBAAuB;;;;EAA4C,CAAC;AACjF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAOxE,eAAO,MAAM,oBAAoB;;;;EAAoD,CAAC;AACtF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;0EAE0E;AAC1E,eAAO,MAAM,iCAAiC,EAAE,cAA6B,CAAC;AAM9E,eAAO,MAAM,+BAA+B;;;;;;kBAKjC,CAAC;AACZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAKxF,eAAO,MAAM,2BAA2B;;;;;;;;kBAM7B,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAoBhF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAe3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkBpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,uBAAuB;;;;;;;;;iBAKlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,sBAAsB;;;;;;;;;;;iBAOjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,2BAA2B;;;;;;iBAMtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6CzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,oBAAoB;;;;;;;;;iBAmB/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB;;;;;iBAalC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiDhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../src/doc-schemas/user.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB;;yDAEyD;AACzD,eAAO,MAAM,uBAAuB;;;;EAA4C,CAAC;AACjF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAOxE,eAAO,MAAM,oBAAoB;;;;EAAoD,CAAC;AACtF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;0EAE0E;AAC1E,eAAO,MAAM,iCAAiC,EAAE,cAA6B,CAAC;AAM9E,eAAO,MAAM,+BAA+B;;;;;;kBAKjC,CAAC;AACZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAKxF,eAAO,MAAM,2BAA2B;;;;;;;;kBAM7B,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAoBhF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAe3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkBpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,uBAAuB;;;;;;;;;iBAKlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,sBAAsB;;;;;;;;;;;iBAOjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,2BAA2B;;;;;;iBAMtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwCzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,oBAAoB;;;;;;;;;iBAqB/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB;;;;;iBAalC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyDhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/doc-schemas/user.js

@@ -10,6 +10,7 @@ import { CRAFT_SKILL_TAG_VALUES } from '../constants/options.js';
 import { userPrivateDataAgeFieldsShape } from './safety/age.js';
 import { ContentMediaKindSchema } from './media-assets.js';
 import { calendarDateSchema } from '../schemas/atoms.js';
+import { PublicDocumentAcceptanceSchema } from './public-documents.js';
 // The canonical stored media kind — declared once in doc-schemas/media-assets.ts.
 const mediaKindSchema = ContentMediaKindSchema;
 /** The ONE canonical application account status (userProfiles.status is the
@@ -133,11 +134,6 @@ export const FullUserSchema = z.object({
     // any authenticated user, so other viewers see the badge with no mirror. Not PII.
     // Revoked (→ false) on refund once refunds ship.
     hasPledged: z.boolean().optional(),
-    // Charter honor stamp: written once at registration by /api/register/complete as
-    // byMode(true, false) — true only for accounts created during Charter Season. The
-    // flip publish makes new signups false automatically; no backfill, no date math.
-    // Backend-only-writable, cosmetic, not PII (ttt-prod docs/charter-season/honor-roll-and-badges.md).
-    charterSignupMember: z.boolean().optional(),
     status: UserAccountStatusSchema.optional(),
     // Stamped by the one status writer on every status change: when, and the acting admin/operator
     // uid (a system actor writes its own id). Absent on an account whose status never changed.
@@ -173,8 +169,10 @@ export const UserAgreementsSchema = z.object({
     terms: z.boolean().optional(),
     agreedOn: z.number().optional(),
     /**
-     * The legal-document versions this account actually accepted, read server-side from the live
-     * terms/privacy docs at acceptance time — never client-supplied, never a hardcoded constant.
+     * The Terms / Privacy versions accepted at registration, read server-side from the live
+     * docs at acceptance time — never client-supplied, never a hardcoded constant. Kept for the
+     * accounts that recorded them; the current per-document record is
+     * `privateData.publicDocumentAcceptance`.
      *
      * `0` is the sentinel for "registered while no legal document was published" (a fresh
      * environment's first account). Published versions start at 1, so 0 can never equal a live
@@ -244,11 +242,19 @@ export const UserPrivateDataSchema = z.object({
     // The rules-and-agreements `version` in force when the user accepted; 0 when no versioned
     // rules doc existed yet, so a later real version 1 still re-prompts.
     squareStreetzAgreementsVersion: z.number().optional(),
+    // The rules-and-agreements version in force when the user accepted the Artisan upgrade's
+    // agreement, read server-side in the grant transaction (the grant time is the profile's
+    // `artisanCreator` stamp). Same 0 sentinel as `squareStreetzAgreementsVersion`.
+    artisanCreatorAgreementsVersion: z.number().int().nonnegative().optional(),
     // Epoch ms when the user accepted the one-time Hall download acknowledgement
     // (personal offline use only, no redistribution). Written server-side by the
     // acceptHallDownloadAcknowledgement callable; gates the Hall download button.
     hallDownloadAcknowledgedAt: z.number().optional(),
     agreements: UserAgreementsSchema.optional(),
+    // The latest accepted version of each public document and the accepted level (see
+    // PublicDocumentAcceptanceSchema). Written by registration and the acceptance callable only;
+    // the `docsAccepted` claim mirrors `acceptedLevel`. Absent = nothing accepted (level 0).
+    publicDocumentAcceptance: PublicDocumentAcceptanceSchema.optional(),
     // First-visit site-tour state (account-durable; the SOLE authority for tour
     // eligibility — no local-storage cache/mirror). Absent = never handled. Written only
     // by the updateSiteTourPreference callable. See UserSiteTourStateSchema above.

package/dist/doc-schemas/user.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.js","sourceRoot":"","sources":["../../src/doc-schemas/user.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,oFAAoF;AACpF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAE/E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,kFAAkF;AAClF,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAE/C;;yDAEyD;AACzD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGjF,0EAA0E;AAC1E,8FAA8F;AAC9F,uFAAuF;AACvF,uFAAuF;AACvF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC;AAGtF;;0EAE0E;AAC1E,MAAM,CAAC,MAAM,iCAAiC,GAAmB,YAAY,CAAC;AAE9E,yFAAyF;AACzF,uFAAuF;AACvF,wFAAwF;AACxF,iCAAiC;AACjC,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,kFAAkF;AAClF,iFAAiF;AACjF,wBAAwB;AACxB,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,aAAa,EAAE,oBAAoB;IACnC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,yFAAyF;AACzF,yFAAyF;AACzF,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG;IAC1B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,kFAAkF;IAClF,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,eAAe;IACrB,2EAA2E;IAC3E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,WAAW,EAAE,2BAA2B;CACzC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3D,CAAC,CAAC,MAAM,CAAC;QACP,GAAG,mBAAmB;QACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;KAC5B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,GAAG,mBAAmB;QACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAC7B,2EAA2E;QAC3E,MAAM,EAAE,+BAA+B;KACxC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,GAAG,mBAAmB;QACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;KAC/B,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,cAAc,EAAE,eAAe;IAC/B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,6EAA6E;IAC7E,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,uFAAuF;IACvF,eAAe;IACf,IAAI,EAAE,oBAAoB;IAC1B,wFAAwF;IACxF,qFAAqF;IACrF,4EAA4E;IAC5E,MAAM,EAAE,+BAA+B,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,IAAI,EAAE,eAAe;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;CAC1C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE;IACjC,0EAA0E;IAC1E,oEAAoE;IACpE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,mFAAmF;IACnF,sFAAsF;IACtF,uFAAuF;IACvF,kFAAkF;IAClF,iDAAiD;IACjD,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,iFAAiF;IACjF,kFAAkF;IAClF,iFAAiF;IACjF,oGAAoG;IACpG,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3C,MAAM,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC1C,+FAA+F;IAC/F,2FAA2F;IAC3F,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,2EAA2E;IAC3E,8DAA8D;IAC9D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,iFAAiF;IACjF,qFAAqF;IACrF,sFAAsF;IACtF,uFAAuF;IACvF,kFAAkF;IAClF,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,kBAAkB,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IACtD,qFAAqF;IACrF,0FAA0F;IAC1F,oGAAoG;IACpG,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChD,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;IAC7D,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;IACvE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,iDAAiD;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B;;;;;;;;;OASG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC;AAGH;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,uFAAuF;IACvF,kFAAkF;IAClF,yCAAyC;IACzC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7C,wCAAwC;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,uFAAuF;IACvF,sFAAsF;IACtF,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE,EAAE,eAAe;IAC5D,qFAAqF;IACrF,wEAAwE;IACxE,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,mFAAmF;IACnF,0EAA0E;IAC1E,kFAAkF;IAClF,gEAAgE;IAChE,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/C,yFAAyF;IACzF,6FAA6F;IAC7F,uCAAuC;IACvC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,+FAA+F;IAC/F,8FAA8F;IAC9F,kGAAkG;IAClG,2FAA2F;IAC3F,oBAAoB,EAAE,CAAC;SACpB,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC;QAC3D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;QAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;KACxB,CAAC;SACD,QAAQ,EAAE;IACb,2BAA2B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClD,0FAA0F;IAC1F,qEAAqE;IACrE,8BAA8B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrD,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjD,UAAU,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC3C,4EAA4E;IAC5E,qFAAqF;IACrF,+EAA+E;IAC/E,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC5C,gFAAgF;IAChF,+EAA+E;IAC/E,0EAA0E;IAC1E,sDAAsD;IACtD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,gFAAgF;IAChF,+EAA+E;IAC/E,mEAAmE;IACnE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,mFAAmF;IACnF,iFAAiF;IACjF,4BAA4B;IAC5B,GAAG,6BAA6B;CACjC,CAAC,CAAC","sourcesContent":["// User-related Firestore document SCHEMAS — the single source of truth for the\n// `userProfiles/{uid}` doc, its `privateData/{uid}` subdoc, and craft-skill shapes.\n// (The `publicUsers/{uid}` mirror lives in ./publicUser.) TypeScript types are\n// inferred from these schemas via `z.infer`, so a document's shape and its type\n// cannot drift apart. See docs/design/firestore-schema-registry.md (ttt-prod).\n\nimport { z } from 'zod';\nimport { HALL_WING_TYPE_KEYS } from '../types/content.js';\nimport { MAX_ARTISAN_LOCATION_LENGTH } from '../constants/business.js';\nimport { CRAFT_SKILL_TAG_VALUES } from '../constants/options.js';\nimport { userPrivateDataAgeFieldsShape } from './safety/age.js';\nimport { ContentMediaKindSchema } from './media-assets.js';\nimport { calendarDateSchema } from '../schemas/atoms.js';\n\n// The canonical stored media kind — declared once in doc-schemas/media-assets.ts.\nconst mediaKindSchema = ContentMediaKindSchema;\n\n/** The ONE canonical application account status (userProfiles.status is the\n * authoritative value; the chat access projection and the status-reconcile queue\n * derive from the same set). Never re-declare inline. */\nexport const UserAccountStatusSchema = z.enum(['active', 'suspended', 'banned']);\nexport type UserAccountStatus = z.infer<typeof UserAccountStatusSchema>;\n\n// Craft-skill kind — mandatory choice at upload, no default (see ttt-prod\n// docs/design/profile-and-craft-skills.md). 'original' = the artisan's own original creation;\n// 'mimicOnTtt' = a performance/recreation of work that originated in the TTT community\n// (requires a source reference); 'mimicOffTtt' = a performance/recreation of work from\n// outside TTT (covers covers + public-domain works, no source reference).\nexport const CraftSkillKindSchema = z.enum(['original', 'mimicOnTtt', 'mimicOffTtt']);\nexport type CraftSkillKind = z.infer<typeof CraftSkillKindSchema>;\n\n/** The ONE craft-skill kind that carries a `source` reference. The discriminated\n *  CraftSkillSchema arm below and every upload-time validator derive from this named\n *  declaration rather than re-quoting the member (ENG-005 / ARCH-102). */\nexport const CRAFT_SKILL_KIND_REQUIRING_SOURCE: CraftSkillKind = 'mimicOnTtt';\n\n// Source reference for a 'mimicOnTtt' skill — the original artisan OR the original work,\n// linked mention-style (id only, no name snapshots, resolved at render per the Display\n// Identity Invariant). 'workProject' is the safe framing today; linking a specific hall\n// item is optional future scope.\nexport const CraftSkillSourceReferenceSchema = z\n  .object({\n    type: z.enum(['user', 'workProject']),\n    id: z.string().min(1),\n  })\n  .strict();\nexport type CraftSkillSourceReference = z.infer<typeof CraftSkillSourceReferenceSchema>;\n\n// The agreed attestation recorded on the doc: which statement (keyed by kind) the\n// uploader agreed to, its version, and when (epoch ms, always a number — never a\n// Firestore Timestamp).\nexport const CraftSkillAttestationSchema = z\n  .object({\n    statementKind: CraftSkillKindSchema,\n    statementVersion: z.number().int().min(1),\n    agreedAt: z.number(),\n  })\n  .strict();\nexport type CraftSkillAttestation = z.infer<typeof CraftSkillAttestationSchema>;\n\n// Base craft-skill fields shared across all kinds. The `kind` + `source` relationship is\n// layered on top as a discriminated union so an invalid combination (e.g. a source on an\n// 'original', or a missing source on a 'mimicOnTtt') fails schema validation.\nconst craftSkillBaseShape = {\n  id: z.string(),\n  name: z.string(),\n  mediaAssetId: z.string(),\n  // Canonical discipline-tag allowlist — never open strings (DJ ruling 2026-07-13).\n  tags: z.array(z.enum(CRAFT_SKILL_TAG_VALUES)),\n  createdAt: z.number(),\n  type: mediaKindSchema,\n  // Moderation visibility flag. Absent/false = visible; true = hidden by the\n  // craft-skill hide cascade (report auto-hide or admin action). Mirrored onto\n  // every taggedCraftSkills index doc so discovery surfaces can filter it.\n  hidden: z.boolean(),\n  attestation: CraftSkillAttestationSchema,\n};\n\nexport const CraftSkillSchema = z.discriminatedUnion('kind', [\n  z.object({\n    ...craftSkillBaseShape,\n    kind: z.literal('original'),\n  }),\n  z.object({\n    ...craftSkillBaseShape,\n    kind: z.literal('mimicOnTtt'),\n    // REQUIRED for the on-TTT mimic kind: the linked original artisan or work.\n    source: CraftSkillSourceReferenceSchema,\n  }),\n  z.object({\n    ...craftSkillBaseShape,\n    kind: z.literal('mimicOffTtt'),\n  }),\n]);\nexport type CraftSkill = z.infer<typeof CraftSkillSchema>;\n\nexport const CraftSkillReferenceSchema = z.object({\n  craftSkillId: z.string(),\n  compositeId: z.string(),\n  userId: z.string(),\n  craftSkillName: z.string(),\n  craftSkillAssetId: z.string(),\n  craftSkillType: mediaKindSchema,\n  tags: z.array(z.enum(CRAFT_SKILL_TAG_VALUES)),\n  createdAt: z.number(),\n  // Mirror of CraftSkill.hidden; lets the tag-browse filter hidden skills out.\n  hidden: z.boolean(),\n  // Mirror of CraftSkill.kind so the tag-browse card can render the kind badge without a\n  // second read.\n  kind: CraftSkillKindSchema,\n  // Mirror of CraftSkill.source — present ONLY when kind === 'mimicOnTtt' (the source-doc\n  // discriminated union guarantees that invariant on the authoritative side). Lets the\n  // browse card render the clickable \"someone performed my work\" source link.\n  source: CraftSkillSourceReferenceSchema.optional(),\n});\nexport type CraftSkillReference = z.infer<typeof CraftSkillReferenceSchema>;\n\nexport const MinimalCraftSkillSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  mediaAssetId: z.string(),\n  type: mediaKindSchema,\n});\nexport type MinimalCraftSkill = z.infer<typeof MinimalCraftSkillSchema>;\n\nexport const OwnedWorkProjectSchema = z.object({\n  workProjectId: z.string(),\n  workingTitle: z.string(),\n  workingDescription: z.string(),\n  type: z.string(),\n  createdOn: z.number(),\n  hallWingType: z.enum(HALL_WING_TYPE_KEYS),\n});\nexport type OwnedWorkProject = z.infer<typeof OwnedWorkProjectSchema>;\n\nexport const AssociatedWorkProjectSchema = z.object({\n  workProjectId: z.string(),\n  workingTitle: z.string(),\n  workingDescription: z.string(),\n  type: z.string(),\n  joinedOn: z.number(),\n});\nexport type AssociatedWorkProject = z.infer<typeof AssociatedWorkProjectSchema>;\n\nexport const FullUserSchema = z.object({\n  uid: z.string(),\n  displayName: z.string(),\n  displayName_lowercase: z.string(),\n  // One asset, variants full/medium/small in the mediaAssets registry; URLs\n  // are built at render time (media-assets-and-protected-serving.md).\n  profilePictureAssetId: z.string().nullable().optional(),\n  artisanCreator: z.number().optional(),\n  // Cosmetic supporter badge. Set true via the Admin SDK inside the Stripe webhook's\n  // pledge-record transaction once the user completes a pledge; rendered on the profile\n  // page. Lives here (not publicUsers) because userProfiles/{uid} is already readable by\n  // any authenticated user, so other viewers see the badge with no mirror. Not PII.\n  // Revoked (→ false) on refund once refunds ship.\n  hasPledged: z.boolean().optional(),\n  // Charter honor stamp: written once at registration by /api/register/complete as\n  // byMode(true, false) — true only for accounts created during Charter Season. The\n  // flip publish makes new signups false automatically; no backfill, no date math.\n  // Backend-only-writable, cosmetic, not PII (ttt-prod docs/charter-season/honor-roll-and-badges.md).\n  charterSignupMember: z.boolean().optional(),\n  status: UserAccountStatusSchema.optional(),\n  // Stamped by the one status writer on every status change: when, and the acting admin/operator\n  // uid (a system actor writes its own id). Absent on an account whose status never changed.\n  statusUpdatedAt: z.number().optional(),\n  // Either the authenticated actor's uid or a stable namespaced system actor\n  // identifier (for example `system:autoHashLock`); never null.\n  statusUpdatedBy: z.string().min(1).optional(),\n  // Chat-edge-rebuild account-access domain (Contract B / round-10 blocker 1): the\n  // single ban/unban ordering version + state the chat `accountAccess` sync events key\n  // on. Backend-only-writable. Deliberate defaults when ABSENT: a never-touched account\n  // is `{ accountAccessVersion: 0, accountAccessState: 'active' }` (NOT banned) — bumped\n  // atomically on suspend/ban/unban, which enqueue the accountAccessChanged fanout.\n  accountAccessVersion: z.number().optional(),\n  accountAccessState: UserAccountStatusSchema.optional(),\n  // Moderation: set true by the forceDisplayNameReset callable when an admin resets an\n  // abusive display name. The app gates the user into a forced \"pick a new name\" flow until\n  // they complete it via setMyDisplayName (which clears this). Backend-only-writable (like `status`).\n  displayNameResetRequired: z.boolean().optional(),\n  ownedWorkProjects: z.array(OwnedWorkProjectSchema).optional(),\n  associatedWorkProjects: z.array(AssociatedWorkProjectSchema).optional(),\n  createdAt: z.number(),\n  // N3 data-deletion / GDPR erasure: epoch ms when the account-deletion scrub\n  // anonymized this profile in place. When set, the identity fields have been\n  // scrubbed (displayName → the FORMER_MEMBER_DISPLAY_NAME sentinel) and the\n  // account is a tombstone. Backend-only-writable.\n  anonymizedAt: z.number().optional(),\n});\nexport type FullUser = z.infer<typeof FullUserSchema>;\n\nexport const UserAgreementsSchema = z.object({\n  age: z.boolean().optional(),\n  nudity: z.boolean().optional(),\n  meet: z.boolean().optional(),\n  cookies: z.boolean().optional(),\n  terms: z.boolean().optional(),\n  agreedOn: z.number().optional(),\n  /**\n   * The legal-document versions this account actually accepted, read server-side from the live\n   * terms/privacy docs at acceptance time — never client-supplied, never a hardcoded constant.\n   *\n   * `0` is the sentinel for \"registered while no legal document was published\" (a fresh\n   * environment's first account). Published versions start at 1, so 0 can never equal a live\n   * version — which is deliberate: it keeps the record from claiming consent that never\n   * happened, and leaves the version-bump re-acceptance path free to catch the account once\n   * real legal content ships.\n   */\n  termsVersion: z.number().int().nonnegative().optional(),\n  privacyVersion: z.number().int().nonnegative().optional(),\n});\nexport type UserAgreements = z.infer<typeof UserAgreementsSchema>;\n\n/**\n * First-visit site-tour state (account-durable, server-written) stored on\n * `privateData/{uid}.siteTour`. A missing `siteTour` field means the member has never\n * handled the tour. Automatic-invitation eligibility is evaluated in this order:\n *   1. `automaticInvitesDisabledAt` present → never invite automatically (\"Don't show\n *      this again\");\n *   2. `notTodayDate` equals the member's current LOCAL calendar date → do not invite\n *      that day (\"Not today\");\n *   3. `completedVersion` equals `SITE_TOUR_CURRENT_VERSION` → already handled;\n *   4. otherwise → offer the tour.\n * Written ONLY by the `updateSiteTourPreference` callable via the Admin SDK; never\n * client-written. `notTodayDate` is a strict `YYYY-MM-DD` local-date string (same\n * date-string convention as the age cluster's `attestedDateOfBirth`). See\n * docs/design/landing-backstage-guide-and-first-visit-plan.md §10.\n */\nexport const UserSiteTourStateSchema = z.object({\n  // The tour version the member completed. The callable stamps SITE_TOUR_CURRENT_VERSION\n  // server-side at completion (the version is server-owned, never client-supplied);\n  // absent until a completion is recorded.\n  completedVersion: z.number().int().optional(),\n  // Epoch ms when the tour was completed.\n  completedAt: z.number().optional(),\n  // The member's LOCAL calendar date (YYYY-MM-DD) recorded by \"Not today\"; the automatic\n  // invitation is suppressed for exactly that date, then offered again on a later date.\n  notTodayDate: calendarDateSchema.optional(), // 'YYYY-MM-DD'\n  // Epoch ms when the member chose \"Don't show this again\" (permanent automatic-invite\n  // dismissal). Manual replay from Help ignores this without clearing it.\n  automaticInvitesDisabledAt: z.number().optional(),\n});\nexport type UserSiteTourState = z.infer<typeof UserSiteTourStateSchema>;\n\n/**\n * Owner-only account state at `userProfiles/{uid}/privateData/{uid}` (readable\n * only by the owner; never mirrored to publicUsers).\n */\nexport const UserPrivateDataSchema = z.object({\n  email: z.string(),\n  // Epoch ms when the user applied for news/political posting (not a boolean) so the\n  // applicant queue can be ordered/triaged by application date. Mirrors the\n  // `artisanCreator?: number` grant-timestamp pattern. Truthy when set, so existing\n  // truthiness reads keep working; absent until the user applies.\n  isWaitingForNewsApproval: z.number().optional(),\n  // Epoch ms when the user attested they are a U.S.-based person while becoming an artisan\n  // (required at artisan signup for now). Mirrors the ageAttested attestation pattern; written\n  // server-side by becomeArtisanCreator.\n  usPersonAttestedAt: z.number().optional(),\n  // Non-U.S. artisan-interest \"waitlist\" recorded ONLY for adult accounts when a non-U.S. person\n  // asks to be notified once creator signups open in their region. Owner-only, backend-written.\n  // `requestedAt` is the immutable first-come-first-serve timestamp; `country`/`region` let signups\n  // be opened by jurisdiction as each region's laws clear. Mirrors isWaitingForNewsApproval.\n  nonUsArtisanInterest: z\n    .object({\n      country: z.string().min(1).max(MAX_ARTISAN_LOCATION_LENGTH),\n      region: z.string().max(MAX_ARTISAN_LOCATION_LENGTH).optional(),\n      requestedAt: z.number(),\n    })\n    .optional(),\n  squareStreetzAgreementsDate: z.number().optional(),\n  // The rules-and-agreements `version` in force when the user accepted; 0 when no versioned\n  // rules doc existed yet, so a later real version 1 still re-prompts.\n  squareStreetzAgreementsVersion: z.number().optional(),\n  // Epoch ms when the user accepted the one-time Hall download acknowledgement\n  // (personal offline use only, no redistribution). Written server-side by the\n  // acceptHallDownloadAcknowledgement callable; gates the Hall download button.\n  hallDownloadAcknowledgedAt: z.number().optional(),\n  agreements: UserAgreementsSchema.optional(),\n  // First-visit site-tour state (account-durable; the SOLE authority for tour\n  // eligibility — no local-storage cache/mirror). Absent = never handled. Written only\n  // by the updateSiteTourPreference callable. See UserSiteTourStateSchema above.\n  siteTour: UserSiteTourStateSchema.optional(),\n  // Moderation: human-readable reason for the current account status (set when an\n  // admin suspends/bans the user). Written by the setUserStatus callable via the\n  // Admin SDK; readable only by the owner (shown in their restricted view).\n  // Cleared when the account is reinstated to 'active'.\n  statusReason: z.string().optional(),\n  statusReasonAt: z.number().optional(),\n  // Trust & Safety (§A8): silent interim safety-lock flag. Backend-only-writable,\n  // restricted to the owner's view. Set true while a child-safety/NCII action is\n  // pending against the account; the app gates the user accordingly.\n  safetyLocked: z.boolean().optional(),\n  // Trust & Safety (§A7): server-write-only age/registration fields, merged from the\n  // standalone age cluster shape (./safety/age.js) so the canonical schema and the\n  // age cluster cannot drift.\n  ...userPrivateDataAgeFieldsShape,\n});\nexport type UserPrivateData = z.infer<typeof UserPrivateDataSchema>;\n"]}
+{"version":3,"file":"user.js","sourceRoot":"","sources":["../../src/doc-schemas/user.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,oFAAoF;AACpF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAE/E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AAEvE,kFAAkF;AAClF,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAE/C;;yDAEyD;AACzD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGjF,0EAA0E;AAC1E,8FAA8F;AAC9F,uFAAuF;AACvF,uFAAuF;AACvF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC;AAGtF;;0EAE0E;AAC1E,MAAM,CAAC,MAAM,iCAAiC,GAAmB,YAAY,CAAC;AAE9E,yFAAyF;AACzF,uFAAuF;AACvF,wFAAwF;AACxF,iCAAiC;AACjC,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,kFAAkF;AAClF,iFAAiF;AACjF,wBAAwB;AACxB,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,aAAa,EAAE,oBAAoB;IACnC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,yFAAyF;AACzF,yFAAyF;AACzF,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG;IAC1B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,kFAAkF;IAClF,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,eAAe;IACrB,2EAA2E;IAC3E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,WAAW,EAAE,2BAA2B;CACzC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3D,CAAC,CAAC,MAAM,CAAC;QACP,GAAG,mBAAmB;QACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;KAC5B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,GAAG,mBAAmB;QACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAC7B,2EAA2E;QAC3E,MAAM,EAAE,+BAA+B;KACxC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,GAAG,mBAAmB;QACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;KAC/B,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,cAAc,EAAE,eAAe;IAC/B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,6EAA6E;IAC7E,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,uFAAuF;IACvF,eAAe;IACf,IAAI,EAAE,oBAAoB;IAC1B,wFAAwF;IACxF,qFAAqF;IACrF,4EAA4E;IAC5E,MAAM,EAAE,+BAA+B,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,IAAI,EAAE,eAAe;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;CAC1C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE;IACjC,0EAA0E;IAC1E,oEAAoE;IACpE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,mFAAmF;IACnF,sFAAsF;IACtF,uFAAuF;IACvF,kFAAkF;IAClF,iDAAiD;IACjD,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC1C,+FAA+F;IAC/F,2FAA2F;IAC3F,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,2EAA2E;IAC3E,8DAA8D;IAC9D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,iFAAiF;IACjF,qFAAqF;IACrF,sFAAsF;IACtF,uFAAuF;IACvF,kFAAkF;IAClF,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,kBAAkB,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IACtD,qFAAqF;IACrF,0FAA0F;IAC1F,oGAAoG;IACpG,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChD,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;IAC7D,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;IACvE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,iDAAiD;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B;;;;;;;;;;;OAWG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC;AAGH;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,uFAAuF;IACvF,kFAAkF;IAClF,yCAAyC;IACzC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7C,wCAAwC;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,uFAAuF;IACvF,sFAAsF;IACtF,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE,EAAE,eAAe;IAC5D,qFAAqF;IACrF,wEAAwE;IACxE,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,mFAAmF;IACnF,0EAA0E;IAC1E,kFAAkF;IAClF,gEAAgE;IAChE,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/C,yFAAyF;IACzF,6FAA6F;IAC7F,uCAAuC;IACvC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,+FAA+F;IAC/F,8FAA8F;IAC9F,kGAAkG;IAClG,2FAA2F;IAC3F,oBAAoB,EAAE,CAAC;SACpB,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC;QAC3D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;QAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;KACxB,CAAC;SACD,QAAQ,EAAE;IACb,2BAA2B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClD,0FAA0F;IAC1F,qEAAqE;IACrE,8BAA8B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrD,yFAAyF;IACzF,wFAAwF;IACxF,gFAAgF;IAChF,+BAA+B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC1E,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjD,UAAU,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC3C,kFAAkF;IAClF,6FAA6F;IAC7F,yFAAyF;IACzF,wBAAwB,EAAE,8BAA8B,CAAC,QAAQ,EAAE;IACnE,4EAA4E;IAC5E,qFAAqF;IACrF,+EAA+E;IAC/E,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC5C,gFAAgF;IAChF,+EAA+E;IAC/E,0EAA0E;IAC1E,sDAAsD;IACtD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,gFAAgF;IAChF,+EAA+E;IAC/E,mEAAmE;IACnE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,mFAAmF;IACnF,iFAAiF;IACjF,4BAA4B;IAC5B,GAAG,6BAA6B;CACjC,CAAC,CAAC","sourcesContent":["// User-related Firestore document SCHEMAS — the single source of truth for the\n// `userProfiles/{uid}` doc, its `privateData/{uid}` subdoc, and craft-skill shapes.\n// (The `publicUsers/{uid}` mirror lives in ./publicUser.) TypeScript types are\n// inferred from these schemas via `z.infer`, so a document's shape and its type\n// cannot drift apart. See docs/design/firestore-schema-registry.md (ttt-prod).\n\nimport { z } from 'zod';\nimport { HALL_WING_TYPE_KEYS } from '../types/content.js';\nimport { MAX_ARTISAN_LOCATION_LENGTH } from '../constants/business.js';\nimport { CRAFT_SKILL_TAG_VALUES } from '../constants/options.js';\nimport { userPrivateDataAgeFieldsShape } from './safety/age.js';\nimport { ContentMediaKindSchema } from './media-assets.js';\nimport { calendarDateSchema } from '../schemas/atoms.js';\nimport { PublicDocumentAcceptanceSchema } from './public-documents.js';\n\n// The canonical stored media kind — declared once in doc-schemas/media-assets.ts.\nconst mediaKindSchema = ContentMediaKindSchema;\n\n/** The ONE canonical application account status (userProfiles.status is the\n * authoritative value; the chat access projection and the status-reconcile queue\n * derive from the same set). Never re-declare inline. */\nexport const UserAccountStatusSchema = z.enum(['active', 'suspended', 'banned']);\nexport type UserAccountStatus = z.infer<typeof UserAccountStatusSchema>;\n\n// Craft-skill kind — mandatory choice at upload, no default (see ttt-prod\n// docs/design/profile-and-craft-skills.md). 'original' = the artisan's own original creation;\n// 'mimicOnTtt' = a performance/recreation of work that originated in the TTT community\n// (requires a source reference); 'mimicOffTtt' = a performance/recreation of work from\n// outside TTT (covers covers + public-domain works, no source reference).\nexport const CraftSkillKindSchema = z.enum(['original', 'mimicOnTtt', 'mimicOffTtt']);\nexport type CraftSkillKind = z.infer<typeof CraftSkillKindSchema>;\n\n/** The ONE craft-skill kind that carries a `source` reference. The discriminated\n *  CraftSkillSchema arm below and every upload-time validator derive from this named\n *  declaration rather than re-quoting the member (ENG-005 / ARCH-102). */\nexport const CRAFT_SKILL_KIND_REQUIRING_SOURCE: CraftSkillKind = 'mimicOnTtt';\n\n// Source reference for a 'mimicOnTtt' skill — the original artisan OR the original work,\n// linked mention-style (id only, no name snapshots, resolved at render per the Display\n// Identity Invariant). 'workProject' is the safe framing today; linking a specific hall\n// item is optional future scope.\nexport const CraftSkillSourceReferenceSchema = z\n  .object({\n    type: z.enum(['user', 'workProject']),\n    id: z.string().min(1),\n  })\n  .strict();\nexport type CraftSkillSourceReference = z.infer<typeof CraftSkillSourceReferenceSchema>;\n\n// The agreed attestation recorded on the doc: which statement (keyed by kind) the\n// uploader agreed to, its version, and when (epoch ms, always a number — never a\n// Firestore Timestamp).\nexport const CraftSkillAttestationSchema = z\n  .object({\n    statementKind: CraftSkillKindSchema,\n    statementVersion: z.number().int().min(1),\n    agreedAt: z.number(),\n  })\n  .strict();\nexport type CraftSkillAttestation = z.infer<typeof CraftSkillAttestationSchema>;\n\n// Base craft-skill fields shared across all kinds. The `kind` + `source` relationship is\n// layered on top as a discriminated union so an invalid combination (e.g. a source on an\n// 'original', or a missing source on a 'mimicOnTtt') fails schema validation.\nconst craftSkillBaseShape = {\n  id: z.string(),\n  name: z.string(),\n  mediaAssetId: z.string(),\n  // Canonical discipline-tag allowlist — never open strings (DJ ruling 2026-07-13).\n  tags: z.array(z.enum(CRAFT_SKILL_TAG_VALUES)),\n  createdAt: z.number(),\n  type: mediaKindSchema,\n  // Moderation visibility flag. Absent/false = visible; true = hidden by the\n  // craft-skill hide cascade (report auto-hide or admin action). Mirrored onto\n  // every taggedCraftSkills index doc so discovery surfaces can filter it.\n  hidden: z.boolean(),\n  attestation: CraftSkillAttestationSchema,\n};\n\nexport const CraftSkillSchema = z.discriminatedUnion('kind', [\n  z.object({\n    ...craftSkillBaseShape,\n    kind: z.literal('original'),\n  }),\n  z.object({\n    ...craftSkillBaseShape,\n    kind: z.literal('mimicOnTtt'),\n    // REQUIRED for the on-TTT mimic kind: the linked original artisan or work.\n    source: CraftSkillSourceReferenceSchema,\n  }),\n  z.object({\n    ...craftSkillBaseShape,\n    kind: z.literal('mimicOffTtt'),\n  }),\n]);\nexport type CraftSkill = z.infer<typeof CraftSkillSchema>;\n\nexport const CraftSkillReferenceSchema = z.object({\n  craftSkillId: z.string(),\n  compositeId: z.string(),\n  userId: z.string(),\n  craftSkillName: z.string(),\n  craftSkillAssetId: z.string(),\n  craftSkillType: mediaKindSchema,\n  tags: z.array(z.enum(CRAFT_SKILL_TAG_VALUES)),\n  createdAt: z.number(),\n  // Mirror of CraftSkill.hidden; lets the tag-browse filter hidden skills out.\n  hidden: z.boolean(),\n  // Mirror of CraftSkill.kind so the tag-browse card can render the kind badge without a\n  // second read.\n  kind: CraftSkillKindSchema,\n  // Mirror of CraftSkill.source — present ONLY when kind === 'mimicOnTtt' (the source-doc\n  // discriminated union guarantees that invariant on the authoritative side). Lets the\n  // browse card render the clickable \"someone performed my work\" source link.\n  source: CraftSkillSourceReferenceSchema.optional(),\n});\nexport type CraftSkillReference = z.infer<typeof CraftSkillReferenceSchema>;\n\nexport const MinimalCraftSkillSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  mediaAssetId: z.string(),\n  type: mediaKindSchema,\n});\nexport type MinimalCraftSkill = z.infer<typeof MinimalCraftSkillSchema>;\n\nexport const OwnedWorkProjectSchema = z.object({\n  workProjectId: z.string(),\n  workingTitle: z.string(),\n  workingDescription: z.string(),\n  type: z.string(),\n  createdOn: z.number(),\n  hallWingType: z.enum(HALL_WING_TYPE_KEYS),\n});\nexport type OwnedWorkProject = z.infer<typeof OwnedWorkProjectSchema>;\n\nexport const AssociatedWorkProjectSchema = z.object({\n  workProjectId: z.string(),\n  workingTitle: z.string(),\n  workingDescription: z.string(),\n  type: z.string(),\n  joinedOn: z.number(),\n});\nexport type AssociatedWorkProject = z.infer<typeof AssociatedWorkProjectSchema>;\n\nexport const FullUserSchema = z.object({\n  uid: z.string(),\n  displayName: z.string(),\n  displayName_lowercase: z.string(),\n  // One asset, variants full/medium/small in the mediaAssets registry; URLs\n  // are built at render time (media-assets-and-protected-serving.md).\n  profilePictureAssetId: z.string().nullable().optional(),\n  artisanCreator: z.number().optional(),\n  // Cosmetic supporter badge. Set true via the Admin SDK inside the Stripe webhook's\n  // pledge-record transaction once the user completes a pledge; rendered on the profile\n  // page. Lives here (not publicUsers) because userProfiles/{uid} is already readable by\n  // any authenticated user, so other viewers see the badge with no mirror. Not PII.\n  // Revoked (→ false) on refund once refunds ship.\n  hasPledged: z.boolean().optional(),\n  status: UserAccountStatusSchema.optional(),\n  // Stamped by the one status writer on every status change: when, and the acting admin/operator\n  // uid (a system actor writes its own id). Absent on an account whose status never changed.\n  statusUpdatedAt: z.number().optional(),\n  // Either the authenticated actor's uid or a stable namespaced system actor\n  // identifier (for example `system:autoHashLock`); never null.\n  statusUpdatedBy: z.string().min(1).optional(),\n  // Chat-edge-rebuild account-access domain (Contract B / round-10 blocker 1): the\n  // single ban/unban ordering version + state the chat `accountAccess` sync events key\n  // on. Backend-only-writable. Deliberate defaults when ABSENT: a never-touched account\n  // is `{ accountAccessVersion: 0, accountAccessState: 'active' }` (NOT banned) — bumped\n  // atomically on suspend/ban/unban, which enqueue the accountAccessChanged fanout.\n  accountAccessVersion: z.number().optional(),\n  accountAccessState: UserAccountStatusSchema.optional(),\n  // Moderation: set true by the forceDisplayNameReset callable when an admin resets an\n  // abusive display name. The app gates the user into a forced \"pick a new name\" flow until\n  // they complete it via setMyDisplayName (which clears this). Backend-only-writable (like `status`).\n  displayNameResetRequired: z.boolean().optional(),\n  ownedWorkProjects: z.array(OwnedWorkProjectSchema).optional(),\n  associatedWorkProjects: z.array(AssociatedWorkProjectSchema).optional(),\n  createdAt: z.number(),\n  // N3 data-deletion / GDPR erasure: epoch ms when the account-deletion scrub\n  // anonymized this profile in place. When set, the identity fields have been\n  // scrubbed (displayName → the FORMER_MEMBER_DISPLAY_NAME sentinel) and the\n  // account is a tombstone. Backend-only-writable.\n  anonymizedAt: z.number().optional(),\n});\nexport type FullUser = z.infer<typeof FullUserSchema>;\n\nexport const UserAgreementsSchema = z.object({\n  age: z.boolean().optional(),\n  nudity: z.boolean().optional(),\n  meet: z.boolean().optional(),\n  cookies: z.boolean().optional(),\n  terms: z.boolean().optional(),\n  agreedOn: z.number().optional(),\n  /**\n   * The Terms / Privacy versions accepted at registration, read server-side from the live\n   * docs at acceptance time — never client-supplied, never a hardcoded constant. Kept for the\n   * accounts that recorded them; the current per-document record is\n   * `privateData.publicDocumentAcceptance`.\n   *\n   * `0` is the sentinel for \"registered while no legal document was published\" (a fresh\n   * environment's first account). Published versions start at 1, so 0 can never equal a live\n   * version — which is deliberate: it keeps the record from claiming consent that never\n   * happened, and leaves the version-bump re-acceptance path free to catch the account once\n   * real legal content ships.\n   */\n  termsVersion: z.number().int().nonnegative().optional(),\n  privacyVersion: z.number().int().nonnegative().optional(),\n});\nexport type UserAgreements = z.infer<typeof UserAgreementsSchema>;\n\n/**\n * First-visit site-tour state (account-durable, server-written) stored on\n * `privateData/{uid}.siteTour`. A missing `siteTour` field means the member has never\n * handled the tour. Automatic-invitation eligibility is evaluated in this order:\n *   1. `automaticInvitesDisabledAt` present → never invite automatically (\"Don't show\n *      this again\");\n *   2. `notTodayDate` equals the member's current LOCAL calendar date → do not invite\n *      that day (\"Not today\");\n *   3. `completedVersion` equals `SITE_TOUR_CURRENT_VERSION` → already handled;\n *   4. otherwise → offer the tour.\n * Written ONLY by the `updateSiteTourPreference` callable via the Admin SDK; never\n * client-written. `notTodayDate` is a strict `YYYY-MM-DD` local-date string (same\n * date-string convention as the age cluster's `attestedDateOfBirth`). See\n * docs/design/landing-backstage-guide-and-first-visit-plan.md §10.\n */\nexport const UserSiteTourStateSchema = z.object({\n  // The tour version the member completed. The callable stamps SITE_TOUR_CURRENT_VERSION\n  // server-side at completion (the version is server-owned, never client-supplied);\n  // absent until a completion is recorded.\n  completedVersion: z.number().int().optional(),\n  // Epoch ms when the tour was completed.\n  completedAt: z.number().optional(),\n  // The member's LOCAL calendar date (YYYY-MM-DD) recorded by \"Not today\"; the automatic\n  // invitation is suppressed for exactly that date, then offered again on a later date.\n  notTodayDate: calendarDateSchema.optional(), // 'YYYY-MM-DD'\n  // Epoch ms when the member chose \"Don't show this again\" (permanent automatic-invite\n  // dismissal). Manual replay from Help ignores this without clearing it.\n  automaticInvitesDisabledAt: z.number().optional(),\n});\nexport type UserSiteTourState = z.infer<typeof UserSiteTourStateSchema>;\n\n/**\n * Owner-only account state at `userProfiles/{uid}/privateData/{uid}` (readable\n * only by the owner; never mirrored to publicUsers).\n */\nexport const UserPrivateDataSchema = z.object({\n  email: z.string(),\n  // Epoch ms when the user applied for news/political posting (not a boolean) so the\n  // applicant queue can be ordered/triaged by application date. Mirrors the\n  // `artisanCreator?: number` grant-timestamp pattern. Truthy when set, so existing\n  // truthiness reads keep working; absent until the user applies.\n  isWaitingForNewsApproval: z.number().optional(),\n  // Epoch ms when the user attested they are a U.S.-based person while becoming an artisan\n  // (required at artisan signup for now). Mirrors the ageAttested attestation pattern; written\n  // server-side by becomeArtisanCreator.\n  usPersonAttestedAt: z.number().optional(),\n  // Non-U.S. artisan-interest \"waitlist\" recorded ONLY for adult accounts when a non-U.S. person\n  // asks to be notified once creator signups open in their region. Owner-only, backend-written.\n  // `requestedAt` is the immutable first-come-first-serve timestamp; `country`/`region` let signups\n  // be opened by jurisdiction as each region's laws clear. Mirrors isWaitingForNewsApproval.\n  nonUsArtisanInterest: z\n    .object({\n      country: z.string().min(1).max(MAX_ARTISAN_LOCATION_LENGTH),\n      region: z.string().max(MAX_ARTISAN_LOCATION_LENGTH).optional(),\n      requestedAt: z.number(),\n    })\n    .optional(),\n  squareStreetzAgreementsDate: z.number().optional(),\n  // The rules-and-agreements `version` in force when the user accepted; 0 when no versioned\n  // rules doc existed yet, so a later real version 1 still re-prompts.\n  squareStreetzAgreementsVersion: z.number().optional(),\n  // The rules-and-agreements version in force when the user accepted the Artisan upgrade's\n  // agreement, read server-side in the grant transaction (the grant time is the profile's\n  // `artisanCreator` stamp). Same 0 sentinel as `squareStreetzAgreementsVersion`.\n  artisanCreatorAgreementsVersion: z.number().int().nonnegative().optional(),\n  // Epoch ms when the user accepted the one-time Hall download acknowledgement\n  // (personal offline use only, no redistribution). Written server-side by the\n  // acceptHallDownloadAcknowledgement callable; gates the Hall download button.\n  hallDownloadAcknowledgedAt: z.number().optional(),\n  agreements: UserAgreementsSchema.optional(),\n  // The latest accepted version of each public document and the accepted level (see\n  // PublicDocumentAcceptanceSchema). Written by registration and the acceptance callable only;\n  // the `docsAccepted` claim mirrors `acceptedLevel`. Absent = nothing accepted (level 0).\n  publicDocumentAcceptance: PublicDocumentAcceptanceSchema.optional(),\n  // First-visit site-tour state (account-durable; the SOLE authority for tour\n  // eligibility — no local-storage cache/mirror). Absent = never handled. Written only\n  // by the updateSiteTourPreference callable. See UserSiteTourStateSchema above.\n  siteTour: UserSiteTourStateSchema.optional(),\n  // Moderation: human-readable reason for the current account status (set when an\n  // admin suspends/bans the user). Written by the setUserStatus callable via the\n  // Admin SDK; readable only by the owner (shown in their restricted view).\n  // Cleared when the account is reinstated to 'active'.\n  statusReason: z.string().optional(),\n  statusReasonAt: z.number().optional(),\n  // Trust & Safety (§A8): silent interim safety-lock flag. Backend-only-writable,\n  // restricted to the owner's view. Set true while a child-safety/NCII action is\n  // pending against the account; the app gates the user accordingly.\n  safetyLocked: z.boolean().optional(),\n  // Trust & Safety (§A7): server-write-only age/registration fields, merged from the\n  // standalone age cluster shape (./safety/age.js) so the canonical schema and the\n  // age cluster cannot drift.\n  ...userPrivateDataAgeFieldsShape,\n});\nexport type UserPrivateData = z.infer<typeof UserPrivateDataSchema>;\n"]}

package/dist/media/domain-events-admin.d.ts

@@ -43,12 +43,6 @@ export declare const ThresholdLibraryNeedsRevisionEventSchema: z.ZodObject<{
         hallItemId: z.ZodString;
     }, z.core.$strict>;
 }, z.core.$strict>;
-export declare const AdminDispatchSystemMarkedEventSchema: z.ZodObject<{
-    type: z.ZodLiteral<"adminDispatch.systemMarked">;
-    ids: z.ZodObject<{
-        userId: z.ZodString;
-    }, z.core.$strict>;
-}, z.core.$strict>;
 export declare const AdminDispatchThreadUpdatedEventSchema: z.ZodObject<{
     type: z.ZodLiteral<"adminDispatch.threadUpdated">;
     ids: z.ZodObject<{

package/dist/media/domain-events-admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"domain-events-admin.d.ts","sourceRoot":"","sources":["../../src/media/domain-events-admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAYvC,CAAC;AAEZ,eAAO,MAAM,mCAAmC;;;;;;kBAUrC,CAAC;AAEZ,eAAO,MAAM,wCAAwC;;;;;;kBAU1C,CAAC;AAEZ,eAAO,MAAM,oCAAoC;;;;;kBAStC,CAAC;AAEZ,eAAO,MAAM,qCAAqC;;;;;kBASvC,CAAC;AAEZ,eAAO,MAAM,8BAA8B;;;;;;kBAUhC,CAAC;AAEZ,eAAO,MAAM,gCAAgC;;;kBAKlC,CAAC;AAKZ,eAAO,MAAM,sCAAsC;;;;;kBASxC,CAAC;AAMZ,eAAO,MAAM,2CAA2C;;;;;;kBAU7C,CAAC;AAEZ,eAAO,MAAM,mCAAmC;;;;;;kBAUrC,CAAC"}
+{"version":3,"file":"domain-events-admin.d.ts","sourceRoot":"","sources":["../../src/media/domain-events-admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAYvC,CAAC;AAEZ,eAAO,MAAM,mCAAmC;;;;;;kBAUrC,CAAC;AAEZ,eAAO,MAAM,wCAAwC;;;;;;kBAU1C,CAAC;AAEZ,eAAO,MAAM,qCAAqC;;;;;kBASvC,CAAC;AAEZ,eAAO,MAAM,8BAA8B;;;;;;kBAUhC,CAAC;AAEZ,eAAO,MAAM,gCAAgC;;;kBAKlC,CAAC;AAKZ,eAAO,MAAM,sCAAsC;;;;;kBASxC,CAAC;AAMZ,eAAO,MAAM,2CAA2C;;;;;;kBAU7C,CAAC;AAEZ,eAAO,MAAM,mCAAmC;;;;;;kBAUrC,CAAC"}

package/dist/media/domain-events-admin.js

@@ -38,16 +38,6 @@ export const ThresholdLibraryNeedsRevisionEventSchema = z
         .strict(),
 })
     .strict();
-export const AdminDispatchSystemMarkedEventSchema = z
-    .object({
-    type: z.literal('adminDispatch.systemMarked'),
-    ids: z
-        .object({
-        userId: z.string().min(1),
-    })
-        .strict(),
-})
-    .strict();
 export const AdminDispatchThreadUpdatedEventSchema = z
     .object({
     type: z.literal('adminDispatch.threadUpdated'),