@ttt-productions/ttt-core 0.79.96 → 0.79.98

package/dist/schemas/admin.js

@@ -24,6 +24,11 @@ export const MarkWorkLaterInputSchema = z.object({
     taskId: taskIdSchema,
     extendHours: z.union([z.literal(24), z.literal(48)]),
 }).strict();
+// `alreadyResolved` answers a task already gone: nothing was written.
+export const MarkWorkLaterResultSchema = z.object({
+    success: z.literal(true),
+    alreadyResolved: z.literal(true).optional(),
+});
 /** The two appeal-review decisions (ONE canonical declaration — shared by the review
  * input and its authoritative result). */
 export const ContentAppealDecisionSchema = z.enum(['approved', 'denied']);
@@ -33,7 +38,7 @@ export const ReviewContentAppealInputSchema = z.object({
     decision: ContentAppealDecisionSchema,
     adminNotes: textFieldSchema(APPEAL_REVIEW_NOTES_INPUT),
 }).strict();
-// Authoritative result of reviewContentAppeal. Non-strict (server → client posture).
+// Authoritative result of reviewContentAppeal.
 export const ReviewContentAppealResultSchema = z.object({
     success: z.literal(true),
     violationId: violationIdSchema,
@@ -43,10 +48,9 @@ export const ReviewContentAppealResultSchema = z.object({
      * underlying violation was already gone and only the stale task was cleared). */
     userId: z.string(),
     /** Operation-receipt audit id — the `admin.contentAppealReviewed` event written in the same
-     * transaction. Optional/additive so an older backend that omits it still type-checks. */
+     * transaction. */
     auditEventId: z.string().min(1).optional(),
 });
-// --- Public-document content inputs ---
 // The Admin editors' strict CONTENT schemas, one per public document. A working copy is saved
 // through `SavePublicDocumentDraftInputSchema` (./public-documents.ts), which pairs each
 // document id with its content schema here; the content is FULL (a version is the whole
@@ -167,25 +171,33 @@ export const UpdateAppConfigInputSchema = z.object({
         rateLimitMultiplier: z.number().gt(0).max(1).optional(),
     }).strict().refine((d) => Object.keys(d).length > 0, { message: 'data must have at least one field' }),
 }).strict();
+export const UpdateAppConfigResultSchema = z.object({
+    success: z.literal(true),
+    updatedFields: z.array(z.string()),
+});
 // recordAppModeFlip records the deployed app mode; it never sets it, so the only input is the
 // admin's optional milestone evidence.
 export const RecordAppModeFlipInputSchema = z.object({
     milestoneEvidence: textFieldSchema(APP_MODE_FLIP_EVIDENCE_INPUT).optional(),
 }).strict();
 // What recordAppModeFlip answers: whether this call recorded a change (false when the marker
-// already matched the deployed mode) and the mode before and after. Server → client: non-strict.
+// already matched the deployed mode) and the mode before and after.
 export const RecordAppModeFlipResultSchema = z.object({
     success: z.literal(true),
     recorded: z.boolean(),
     mode: AppModeSchema,
     previousMode: AppModeSchema.nullable(),
 });
-// --- System slots ---
 // clearSystemVideoSlot empties one video slot; the server refuses while the slot's upload is still
 // pending or processing.
 export const ClearSystemVideoSlotInputSchema = z.object({
     slotId: SystemVideoSlotIdSchema,
 }).strict();
+export const ClearSystemVideoSlotResultSchema = z.object({
+    success: z.literal(true),
+    /** False when the slot already held no video, so nothing changed. */
+    cleared: z.boolean(),
+});
 // updateSystemUidSlot sets one account slot: a `uid` slot takes one account id (null clears it), a
 // `uidList` slot an ordered list (empty clears it). The value's shape must match the slot's kind.
 export const UpdateSystemUidSlotInputSchema = z.union([
@@ -198,7 +210,11 @@ export const UpdateSystemUidSlotInputSchema = z.union([
         value: z.array(userIdSchema).max(MAX_SYSTEM_UID_LIST),
     }).strict(),
 ]);
-// --- Admin list mutations ---
+export const UpdateSystemUidSlotResultSchema = z.object({
+    success: z.literal(true),
+    /** False when the slot already held this value, so nothing was written. */
+    changed: z.boolean(),
+});
 const uidSchema = z.string().min(1).max(128);
 /**
  * Wire input for the `updateAdminList` callable in ttt-prod.
@@ -222,7 +238,6 @@ export const UpdateAdminListInputSchema = z.object({
     0, { message: 'At least one of addAdmins/removeAdmins/addJrAdmins/removeJrAdmins must be non-empty.' });
 // Authoritative result of updateAdminList — the grant/revoke delta counts computed inside
 // the roster transaction (uids already in their target state are no-ops and not counted).
-// Non-strict (server → client result posture).
 export const UpdateAdminListResultSchema = z.object({
     success: z.literal(true),
     adminsGranted: z.number().int().nonnegative(),
@@ -230,26 +245,28 @@ export const UpdateAdminListResultSchema = z.object({
     jrAdminsGranted: z.number().int().nonnegative(),
     jrAdminsRevoked: z.number().int().nonnegative(),
     /** Operation-receipt audit id — the `admin.systemRoleGranted` / `admin.systemRoleRevoked`
-     * event(s) key off the same roster transaction. Optional/additive. (No single domain id: a
+     * event(s) key off the same roster transaction. (No single domain id: a
      * roster edit spans multiple uids, so only the audit id is a meaningful receipt handle.) */
     auditEventId: z.string().min(1).optional(),
 });
-// --- Admin moderation: hide / restore / retitle content + Work/Realm objects ---
 export const CheckTrademarkInputSchema = z.object({
     // Primary: the work project's title (franchise-level check).
     workTitle: z.string().min(1).max(MAX_WORK_PROJECT_TITLE_LENGTH),
-    // Optional: the sub-item title (chapter, track, episode). Checked secondarily.
-    // `.nullish()` (not `.optional()`): the Firebase callable client serializes an
-    // undefined argument as JSON null, and the work-view caller passes
-    // `subItemTitle: subItem?.title` which is undefined when the sub-item hasn't
-    // loaded — that arrives here as null. A bare `.optional()` would 400 on it.
+    // Optional: the sub-item title (chapter, track, episode), checked secondarily; null or absent
+    // means there is none to check.
     subItemTitle: z.string().max(MAX_WORK_PROJECT_TITLE_LENGTH).nullish(),
 }).strict();
+export const CheckTrademarkResultSchema = z.object({
+    curatedMatch: z.boolean(),
+    matchedEntry: z.string().nullable(),
+    advisory: z.string(),
+    checkedAt: z.number(),
+});
 export const GetReportedContentDetailInputSchema = z.object({
     reportGroupId: reportGroupIdSchema,
 }).strict();
-// --- getReportedContentDetail result (cross-boundary: produced by the callable in functions/,
-// consumed by the admin report work-view) ---
+// getReportedContentDetail's result: produced by the callable in functions/, consumed by the admin
+// report work-view.
 /** One display-text field of the reported doc, labeled for the review panel. The server returns
  *  EVERY configured non-empty text field for the item type (title, description, body, …) in
  *  display order — never just the first non-empty one. */
@@ -304,13 +321,12 @@ export const GetReportedContentDetailResultSchema = z.object({
      * and have the clear runner silently drop it. The picker offers only this surface's fields, and
      * the resolve path re-checks caller-supplied fields against the same set.
      *
-     * `.nullish()`: absent on payloads produced before this field existed, and null when the
-     * reported item is not a clearable text surface at all (a square post, a chat message, a
-     * profile picture).
+     * `.nullish()`: null when the reported item is not a clearable text surface at all (a square
+     * post, a chat message, a profile picture).
      */
     clearableSurface: moderationClearableSurfaceSchema.nullish(),
     /** The FROZEN report-time snapshot (captured at intake), so the operator sees what was
-     *  reported even if the author edited the live doc to evade. Null for older reports. */
+     *  reported even if the author edited the live doc to evade. Null when the report holds none. */
     reportTimeSnapshot: z.object({
         capturedText: z.string().nullable(),
         capturedMediaAssetIds: z.array(z.string()),
@@ -324,29 +340,49 @@ export const HideHallSubItemInputSchema = z.object({
     subItemId: hallSubItemIdSchema,
     reason: textFieldSchema(HIDE_REASON_INPUT),
 }).strict();
+export const HideHallSubItemResultSchema = z.object({
+    success: z.literal(true),
+});
 export const RestoreHallSubItemInputSchema = z.object({
     hallItemId: hallItemIdSchema,
     workProjectType: workProjectTypeSchema,
     subItemId: hallSubItemIdSchema,
 }).strict();
+export const RestoreHallSubItemResultSchema = z.object({
+    success: z.literal(true),
+});
 export const HideWorkProjectInputSchema = z.object({
     workProjectId: workProjectIdSchema,
     reason: textFieldSchema(HIDE_REASON_INPUT),
 }).strict();
+export const HideWorkProjectResultSchema = z.object({
+    success: z.literal(true),
+    cascadeId: z.string().min(1),
+});
 export const HideWorkRealmInputSchema = z.object({
     workRealmId: workRealmIdSchema,
     reason: textFieldSchema(HIDE_REASON_INPUT),
 }).strict();
+export const HideWorkRealmResultSchema = z.object({
+    success: z.literal(true),
+    cascadeId: z.string().min(1),
+});
 // `cascadeId` is OPTIONAL: the app backends derive all active cascades for the target when it is
 // omitted, and restore just that one cascade when it is supplied.
 export const RestoreWorkProjectInputSchema = z.object({
     workProjectId: workProjectIdSchema,
     cascadeId: documentIdSegmentSchema.optional(),
 }).strict();
+export const RestoreWorkProjectResultSchema = z.object({
+    success: z.literal(true),
+});
 export const RestoreWorkRealmInputSchema = z.object({
     workRealmId: workRealmIdSchema,
     cascadeId: documentIdSegmentSchema.optional(),
 }).strict();
+export const RestoreWorkRealmResultSchema = z.object({
+    success: z.literal(true),
+});
 export const RequireWorkProjectRetitleInputSchema = z.object({
     reason: textFieldSchema(RETITLE_REASON_INPUT),
     workProjectId: workProjectIdSchema,
@@ -355,7 +391,11 @@ export const RequireWorkRealmRetitleInputSchema = z.object({
     reason: textFieldSchema(RETITLE_REASON_INPUT),
     workRealmId: workRealmIdSchema,
 }).strict();
-// --- Page-level "Clear text (moderation)" callables (per-field extension of the retitle family) ---
+// ONE result for both Work and Realm retitle callables.
+export const RequireRetitleResultSchema = z.object({
+    success: z.literal(true),
+});
+// Page-level "Clear text (moderation)" callables: the per-field extension of the retitle family.
 // The clearable SHELL fields (raw doc field names) for the workProject + workRealm contexts.
 // Derived from the canonical clearable-field map — the two shell surfaces share the same fields.
 const ModerationShellClearFieldSchema = z.enum(MODERATION_CLEARABLE_TEXT_FIELDS.workProject);
@@ -369,6 +409,10 @@ export const ClearWorkRealmTextInputSchema = z.object({
     fields: z.array(ModerationShellClearFieldSchema).min(1),
     reason: textFieldSchema(CLEAR_TEXT_REASON_INPUT),
 }).strict();
+// ONE result for both Work and Realm text-clear callables.
+export const ClearModerationTextResultSchema = z.object({
+    success: z.literal(true),
+});
 // The clearable TEXT fields across the whole hall content family — derived from the canonical
 // map (union of every hall surface's fields), never restated literals.
 const HallClearFieldSchema = z.enum(HALL_CLEARABLE_TEXT_FIELD_NAMES);
@@ -379,12 +423,22 @@ export const ClearHallContentTextInputSchema = z.object({
     fields: z.array(HallClearFieldSchema).min(1),
     reason: textFieldSchema(CLEAR_TEXT_REASON_INPUT),
 }).strict();
-// --- getLatestHideCascade — resolve the latest hide-cascade id for a Work/Realm ---
+export const ClearHallContentTextResultSchema = z.object({
+    success: z.literal(true),
+});
+// getLatestHideCascade resolves the latest hide-cascade id for a Work/Realm.
 export const GetLatestHideCascadeInputSchema = z.object({
     entityId: documentIdSegmentSchema,
     targetType: z.enum(['work-project', 'work-realm']),
 }).strict();
-// --- moderateReportedContent — hide / restore / soft perma-remove an individual reported item ---
+export const GetLatestHideCascadeResultSchema = z.object({
+    cascadeId: z.string().min(1).nullable(),
+});
+export const GetPendingGuildInviteCountInputSchema = z.object({}).strict();
+export const GetPendingGuildInviteCountResultSchema = z.object({
+    count: z.number().int().nonnegative(),
+});
+// moderateReportedContent hides, restores, or soft perma-removes an individual reported item.
 // The single-item content-action target set (SUBSET of ReportableItemType — excludes the
 // close-out-only hall-library-sub-item).
 const MODERATE_REPORTED_CONTENT_TARGET_TYPES = [
@@ -407,7 +461,7 @@ export const ModerateReportedContentInputSchema = z.object({
     reportedItemId: reportTargetItemIdSchema,
     parentItemId: reportTargetParentRefSchema.optional(),
     action: z.enum(['hide', 'restore', 'remove']),
-    // [EUAS-023] A destructive action (hide/remove) MUST carry a reason; restore is a reversal.
+    // A destructive action (hide/remove) MUST carry a reason; restore is a reversal.
     reason: textFieldSchema(MODERATION_ACTION_REASON_INPUT).optional(),
 })
     .strict()
@@ -420,8 +474,8 @@ export const ModerateReportedContentInputSchema = z.object({
         });
     }
 });
-// --- resolveAdminTask — the ONE guided close-out for EVERY admin case type ---
-// [EUAS-005] The content-action target set ALSO accepts hall-library-sub-item (hide/restore only),
+// resolveAdminTask — the ONE guided close-out for EVERY admin case type.
+// The content-action target set ALSO accepts hall-library-sub-item (hide/restore only),
 // which routes to the dedicated `runSetHallSubItemHidden` core (not `runModerateReportedContent`).
 const CONTENT_ACTION_TARGET_TYPES = [
     'square-streetz-post',
@@ -476,8 +530,8 @@ const WorkObjectActionSchema = z
     reportedItemId: reportTargetItemIdSchema,
 })
     .strict();
-// --- The in-flow clear-content disposition (staged counterpart of the page-level clear-text
-// callables) ---
+// The in-flow clear-content disposition: the staged counterpart of the page-level clear-text
+// callables.
 /** The three targets the in-flow text clear can neutralize — the Work/Realm shells plus a single
  *  published hall sub-item. Compile-linked subset of the canonical reportable-item enum. */
 const CLEAR_CONTENT_TEXT_TARGET_TYPES = [
@@ -575,6 +629,10 @@ export const NormalReportInputSchema = z
     adminNote: textFieldSchema(CLOSE_OUT_ADMIN_NOTE_INPUT).optional(),
 })
     .strict();
+export const ResolveAdminTaskResultSchema = z.object({
+    success: z.literal(true),
+    auditEventId: z.string().min(1).optional(),
+});
 const SafetyDispositionActionSchema = z
     .object({
     button: z.literal('setReportDisposition'),
@@ -591,7 +649,7 @@ const SafetyDispositionActionSchema = z
 })
     .strict();
 const QuarantineActionSchema = z.object({ button: z.literal('quarantinePreserveFile') }).strict();
-// [C-01/EUAS-002] No client-supplied requestId — the linked statutory request id(s) are derived
+// No client-supplied requestId — the linked statutory request id(s) are derived
 // SERVER-SIDE from the case's `requestLinks` inside `enqueueNciiRemovalForCase`.
 const HashRemoveActionSchema = z.object({ button: z.literal('hashRemoveFile') }).strict();
 const SafetyAccountActionSchema = z
@@ -628,12 +686,12 @@ export const SafetyCaseInputSchema = z
     resolutionSummary: z.string().trim().min(1).max(MAX_SAFETY_RESOLUTION_SUMMARY_LENGTH),
     actions: z.array(SafetyStagedActionSchema).max(16).default([]),
     adminNote: textFieldSchema(CLOSE_OUT_ADMIN_NOTE_INPUT).optional(),
-    // [EUAS-017] Optimistic-concurrency token (`childSafetyCaseList.revision` / `nciiCases.revision`).
+    // Optimistic-concurrency token (`childSafetyCaseList.revision` / `nciiCases.revision`).
     // The close is rejected if the case changed since the operator loaded it — concurrent stale closes
-    // can't silently overwrite. Optional for backward compatibility; the console always supplies it.
+    // can't silently overwrite. Optional; the console always supplies it.
     expectedRevision: z.number().int().nonnegative().optional(),
-    // Interim reauth: a single explicit typed confirmation for the privileged safety actions,
-    // standing in for the passkey two-step until [H-17]. The callable is full-admin gated.
+    // Reauth: a single explicit typed confirmation for the privileged safety actions. The
+    // callable is full-admin gated.
     confirmation: z.literal(SAFETY_ACTIONS_CONFIRMATION),
 })
     .strict();
@@ -646,9 +704,7 @@ export const ReopenSafetyCaseInputSchema = z
     confirmation: z.literal(SAFETY_CASE_REOPEN_CONFIRMATION),
 })
     .strict();
-// ---------------------------------------------------------------------------
 // Dead-letter operations — adminReplayDeadLetter + getDeadLetters (Ops Repairs).
-// ---------------------------------------------------------------------------
 /** Every ledger the dead-letter replay callable supports. */
 export const DeadLetterCollectionSchema = z.enum([
     'chatSyncEvents',