founder-schema 0.4.0 → 0.6.0

package/dist/domains/media/media.d.ts

@@ -0,0 +1,159 @@
+/**
+ * founder-schema — Media: what an uploaded image becomes
+ *
+ * THE PIPELINE, end to end (0.5.0):
+ *
+ *   1. The client shrinks the photo (long edge at most the largest size in
+ *      `MEDIA_SIZES`, WebP or JPEG) and asks for an upload slot:
+ *      `POST /api/v1/uploads/presign` with a purpose, a content type and the
+ *      exact byte count (`uploadPresignBodySchema`).
+ *   2. It PUTs the bytes straight to storage, with the headers it was given.
+ *      Nothing passes through the API server.
+ *   3. It calls `POST /api/v1/uploads/:mediaId/complete`. The server checks the
+ *      file, decodes it fully, applies the photo's rotation, REMOVES EVERY
+ *      PIECE OF METADATA (GPS position, camera, timestamps), re-encodes it as
+ *      WebP at each size in `MEDIA_SIZES`, deletes the raw upload, and answers
+ *      with `uploadedMediaSchema`.
+ *   4. A post (`attachedMediaSchema`), the avatar (`setAvatarBodySchema`,
+ *      onboarding's `avatarMediaId`), or a product's logo and screenshots
+ *      (`setProductLogoBodySchema`, `setProductScreenshotsBodySchema`, 0.6.0)
+ *      takes the media id. One upload is used once, by its owner, for the
+ *      purpose it was uploaded for.
+ *
+ * A product's images belong to the PRODUCT, not to whoever on the team uploaded
+ * them: they stay when that person leaves or deletes their account, and go when
+ * the product is deleted.
+ *
+ * What nobody sees: the raw upload. It sits in a folder the CDN cannot reach
+ * and is deleted when processing finishes, or by storage itself after a day.
+ * Only the re-encoded sizes are ever served.
+ *
+ * An image never attached is deleted after `MEDIA_UNATTACHED_TTL_HOURS`; a
+ * deleted post's images, a replaced avatar, and an erased account's images are
+ * deleted from storage by the server, so a copied link stops working.
+ *
+ * @module founder-schema/domains/media
+ */
+import { z } from 'zod';
+/**
+ * What an upload is for. It decides the sizes made and where it may be attached.
+ * Append only: every stored upload names one.
+ */
+export declare const MEDIA_PURPOSE_VALUES: readonly ["post", "avatar", "product_logo", "product_screenshot"];
+export declare const mediaPurposeSchema: z.ZodEnum<{
+    post: "post";
+    avatar: "avatar";
+    product_logo: "product_logo";
+    product_screenshot: "product_screenshot";
+}>;
+export type MediaPurpose = z.infer<typeof mediaPurposeSchema>;
+/**
+ * The content types a member may upload. Every one is decoded and re-encoded
+ * to WebP before anyone sees it, so this list is about what the server can
+ * DECODE safely, not what it serves.
+ *
+ * Not HEIC: an iPhone's photo picker converts HEIC to JPEG for the web, and a
+ * client that shrinks the photo first re-encodes it anyway. SVG never: it is a
+ * document that can carry script, not an image.
+ */
+export declare const MEDIA_UPLOAD_CONTENT_TYPES: readonly ["image/jpeg", "image/png", "image/webp", "image/gif"];
+export declare const mediaUploadContentTypeSchema: z.ZodEnum<{
+    "image/jpeg": "image/jpeg";
+    "image/png": "image/png";
+    "image/webp": "image/webp";
+    "image/gif": "image/gif";
+}>;
+export type MediaUploadContentType = z.infer<typeof mediaUploadContentTypeSchema>;
+/**
+ * The sizes each purpose is stored at, smallest first.
+ *
+ *   - post: the LONG edge, aspect kept. 540 for a feed card on a plain screen,
+ *     1080 for the same card on a phone's dense screen, 2048 for the full-screen
+ *     view. An image smaller than a size is never enlarged, so a small image
+ *     has fewer sizes.
+ *   - avatar: a SQUARE, cropped around the most interesting region (usually a
+ *     face). 192 for every small circle (bylines, lists, chat) up to 64 CSS
+ *     pixels on a 3x screen, 512 for a profile header.
+ *   - product_logo: a SQUARE, but NEVER CROPPED: the whole logo is fitted
+ *     inside it and the rest is transparent, because cropping a wordmark the
+ *     way an avatar is cropped cuts letters off. Transparency is kept. 96 for
+ *     the product chip on a post (32 CSS pixels at 3x), 256 for a Discover card,
+ *     512 for the product page.
+ *   - product_screenshot: as a post's image (long edge, aspect kept); a phone
+ *     screenshot is tall, a desktop one wide. An animated GIF (a short demo)
+ *     stays animated, within the same limits as a post's.
+ *
+ * A client shrinks a photo to the largest size here before uploading: anything
+ * bigger is thrown away by the server anyway, and costs the member data.
+ */
+export declare const MEDIA_SIZES: {
+    readonly post: readonly [540, 1080, 2048];
+    readonly avatar: readonly [192, 512];
+    readonly product_logo: readonly [96, 256, 512];
+    readonly product_screenshot: readonly [540, 1080, 2048];
+};
+/** The most sizes any purpose stores: the bound on `variants`. */
+export declare const MEDIA_VARIANTS_MAX: number;
+/** One stored size of an image. */
+export declare const mediaVariantSchema: z.ZodObject<{
+    width: z.ZodNumber;
+    height: z.ZodNumber;
+    url: z.ZodURL;
+}, z.core.$strip>;
+export type MediaVariant = z.infer<typeof mediaVariantSchema>;
+/**
+ * A processed image, as every read shows it.
+ *
+ * `variants` is a ready-made `srcset`: smallest first, each with its own pixel
+ * width. `url`, `width` and `height` repeat the largest one, so a client that
+ * ignores `variants` still renders correctly and can reserve the image's box
+ * from the aspect ratio before it loads (no layout shift).
+ *
+ * `placeholder` is a ThumbHash (base64): a ~30 character blurred preview a
+ * client can paint instantly while the image loads.
+ *
+ * URLs point at our media CDN. They come from our own pipeline, never from a
+ * member, so a plain `z.url()`.
+ */
+export declare const mediaImageSchema: z.ZodObject<{
+    id: z.ZodString;
+    url: z.ZodURL;
+    width: z.ZodNumber;
+    height: z.ZodNumber;
+    variants: z.ZodArray<z.ZodObject<{
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+        url: z.ZodURL;
+    }, z.core.$strip>>;
+    placeholder: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type MediaImage = z.infer<typeof mediaImageSchema>;
+/**
+ * `POST /api/v1/uploads/:mediaId/complete` answers with this: the image as it
+ * will appear, not yet attached to anything.
+ *
+ * `expiresAt` is when the server deletes it if it is still unattached
+ * (`MEDIA_UNATTACHED_TTL_HOURS` after the slot was issued). A composer left
+ * open longer than that must upload again.
+ */
+export declare const uploadedMediaSchema: z.ZodObject<{
+    id: z.ZodString;
+    url: z.ZodURL;
+    width: z.ZodNumber;
+    height: z.ZodNumber;
+    variants: z.ZodArray<z.ZodObject<{
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+        url: z.ZodURL;
+    }, z.core.$strip>>;
+    placeholder: z.ZodOptional<z.ZodString>;
+    purpose: z.ZodEnum<{
+        post: "post";
+        avatar: "avatar";
+        product_logo: "product_logo";
+        product_screenshot: "product_screenshot";
+    }>;
+    expiresAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type UploadedMedia = z.infer<typeof uploadedMediaSchema>;
+//# sourceMappingURL=media.d.ts.map

package/dist/domains/media/media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../../src/domains/media/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;GAGG;AACH,eAAO,MAAM,oBAAoB,mEAKvB,CAAC;AACX,eAAO,MAAM,kBAAkB;;;;;EAA+B,CAAC;AAC/D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,iEAK7B,CAAC;AACX,eAAO,MAAM,4BAA4B;;;;;EAAqC,CAAC;AAC/E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,WAAW;;;;;CAKoC,CAAC;AAE7D,kEAAkE;AAClE,eAAO,MAAM,kBAAkB,QAE9B,CAAC;AAEF,mCAAmC;AACnC,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;iBAO3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;iBAG9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/domains/media/media.js

@@ -0,0 +1,136 @@
+/**
+ * founder-schema — Media: what an uploaded image becomes
+ *
+ * THE PIPELINE, end to end (0.5.0):
+ *
+ *   1. The client shrinks the photo (long edge at most the largest size in
+ *      `MEDIA_SIZES`, WebP or JPEG) and asks for an upload slot:
+ *      `POST /api/v1/uploads/presign` with a purpose, a content type and the
+ *      exact byte count (`uploadPresignBodySchema`).
+ *   2. It PUTs the bytes straight to storage, with the headers it was given.
+ *      Nothing passes through the API server.
+ *   3. It calls `POST /api/v1/uploads/:mediaId/complete`. The server checks the
+ *      file, decodes it fully, applies the photo's rotation, REMOVES EVERY
+ *      PIECE OF METADATA (GPS position, camera, timestamps), re-encodes it as
+ *      WebP at each size in `MEDIA_SIZES`, deletes the raw upload, and answers
+ *      with `uploadedMediaSchema`.
+ *   4. A post (`attachedMediaSchema`), the avatar (`setAvatarBodySchema`,
+ *      onboarding's `avatarMediaId`), or a product's logo and screenshots
+ *      (`setProductLogoBodySchema`, `setProductScreenshotsBodySchema`, 0.6.0)
+ *      takes the media id. One upload is used once, by its owner, for the
+ *      purpose it was uploaded for.
+ *
+ * A product's images belong to the PRODUCT, not to whoever on the team uploaded
+ * them: they stay when that person leaves or deletes their account, and go when
+ * the product is deleted.
+ *
+ * What nobody sees: the raw upload. It sits in a folder the CDN cannot reach
+ * and is deleted when processing finishes, or by storage itself after a day.
+ * Only the re-encoded sizes are ever served.
+ *
+ * An image never attached is deleted after `MEDIA_UNATTACHED_TTL_HOURS`; a
+ * deleted post's images, a replaced avatar, and an erased account's images are
+ * deleted from storage by the server, so a copied link stops working.
+ *
+ * @module founder-schema/domains/media
+ */
+import { z } from 'zod';
+import { MEDIA_PLACEHOLDER_MAX } from '../../core/limits.js';
+/**
+ * What an upload is for. It decides the sizes made and where it may be attached.
+ * Append only: every stored upload names one.
+ */
+export const MEDIA_PURPOSE_VALUES = [
+    'post',
+    'avatar',
+    'product_logo',
+    'product_screenshot',
+];
+export const mediaPurposeSchema = z.enum(MEDIA_PURPOSE_VALUES);
+/**
+ * The content types a member may upload. Every one is decoded and re-encoded
+ * to WebP before anyone sees it, so this list is about what the server can
+ * DECODE safely, not what it serves.
+ *
+ * Not HEIC: an iPhone's photo picker converts HEIC to JPEG for the web, and a
+ * client that shrinks the photo first re-encodes it anyway. SVG never: it is a
+ * document that can carry script, not an image.
+ */
+export const MEDIA_UPLOAD_CONTENT_TYPES = [
+    'image/jpeg',
+    'image/png',
+    'image/webp',
+    'image/gif',
+];
+export const mediaUploadContentTypeSchema = z.enum(MEDIA_UPLOAD_CONTENT_TYPES);
+/**
+ * The sizes each purpose is stored at, smallest first.
+ *
+ *   - post: the LONG edge, aspect kept. 540 for a feed card on a plain screen,
+ *     1080 for the same card on a phone's dense screen, 2048 for the full-screen
+ *     view. An image smaller than a size is never enlarged, so a small image
+ *     has fewer sizes.
+ *   - avatar: a SQUARE, cropped around the most interesting region (usually a
+ *     face). 192 for every small circle (bylines, lists, chat) up to 64 CSS
+ *     pixels on a 3x screen, 512 for a profile header.
+ *   - product_logo: a SQUARE, but NEVER CROPPED: the whole logo is fitted
+ *     inside it and the rest is transparent, because cropping a wordmark the
+ *     way an avatar is cropped cuts letters off. Transparency is kept. 96 for
+ *     the product chip on a post (32 CSS pixels at 3x), 256 for a Discover card,
+ *     512 for the product page.
+ *   - product_screenshot: as a post's image (long edge, aspect kept); a phone
+ *     screenshot is tall, a desktop one wide. An animated GIF (a short demo)
+ *     stays animated, within the same limits as a post's.
+ *
+ * A client shrinks a photo to the largest size here before uploading: anything
+ * bigger is thrown away by the server anyway, and costs the member data.
+ */
+export const MEDIA_SIZES = {
+    post: [540, 1080, 2048],
+    avatar: [192, 512],
+    product_logo: [96, 256, 512],
+    product_screenshot: [540, 1080, 2048],
+};
+/** The most sizes any purpose stores: the bound on `variants`. */
+export const MEDIA_VARIANTS_MAX = Math.max(...Object.values(MEDIA_SIZES).map((sizes) => sizes.length));
+/** One stored size of an image. */
+export const mediaVariantSchema = z.object({
+    width: z.number().int().positive(),
+    height: z.number().int().positive(),
+    url: z.url(),
+});
+/**
+ * A processed image, as every read shows it.
+ *
+ * `variants` is a ready-made `srcset`: smallest first, each with its own pixel
+ * width. `url`, `width` and `height` repeat the largest one, so a client that
+ * ignores `variants` still renders correctly and can reserve the image's box
+ * from the aspect ratio before it loads (no layout shift).
+ *
+ * `placeholder` is a ThumbHash (base64): a ~30 character blurred preview a
+ * client can paint instantly while the image loads.
+ *
+ * URLs point at our media CDN. They come from our own pipeline, never from a
+ * member, so a plain `z.url()`.
+ */
+export const mediaImageSchema = z.object({
+    id: z.string(),
+    url: z.url(),
+    width: z.number().int().positive(),
+    height: z.number().int().positive(),
+    variants: z.array(mediaVariantSchema).min(1).max(MEDIA_VARIANTS_MAX),
+    placeholder: z.string().max(MEDIA_PLACEHOLDER_MAX).optional(),
+});
+/**
+ * `POST /api/v1/uploads/:mediaId/complete` answers with this: the image as it
+ * will appear, not yet attached to anything.
+ *
+ * `expiresAt` is when the server deletes it if it is still unattached
+ * (`MEDIA_UNATTACHED_TTL_HOURS` after the slot was issued). A composer left
+ * open longer than that must upload again.
+ */
+export const uploadedMediaSchema = mediaImageSchema.extend({
+    purpose: mediaPurposeSchema,
+    expiresAt: z.iso.datetime(),
+});
+//# sourceMappingURL=media.js.map

package/dist/domains/media/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../../src/domains/media/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,MAAM;IACN,QAAQ;IACR,cAAc;IACd,oBAAoB;CACZ,CAAC;AACX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAG/D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,WAAW;CACH,CAAC;AACX,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAG/E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC;IACvB,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,YAAY,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC;IAC5B,kBAAkB,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC;CACqB,CAAC;AAE7D,kEAAkE;AAClE,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,CACxC,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAC3D,CAAC;AAEF,mCAAmC;AACnC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;CACb,CAAC,CAAC;AAGH;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACpE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;CAC9D,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,MAAM,CAAC;IACzD,OAAO,EAAE,kBAAkB;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — Media: what an uploaded image becomes\n *\n * THE PIPELINE, end to end (0.5.0):\n *\n *   1. The client shrinks the photo (long edge at most the largest size in\n *      `MEDIA_SIZES`, WebP or JPEG) and asks for an upload slot:\n *      `POST /api/v1/uploads/presign` with a purpose, a content type and the\n *      exact byte count (`uploadPresignBodySchema`).\n *   2. It PUTs the bytes straight to storage, with the headers it was given.\n *      Nothing passes through the API server.\n *   3. It calls `POST /api/v1/uploads/:mediaId/complete`. The server checks the\n *      file, decodes it fully, applies the photo's rotation, REMOVES EVERY\n *      PIECE OF METADATA (GPS position, camera, timestamps), re-encodes it as\n *      WebP at each size in `MEDIA_SIZES`, deletes the raw upload, and answers\n *      with `uploadedMediaSchema`.\n *   4. A post (`attachedMediaSchema`), the avatar (`setAvatarBodySchema`,\n *      onboarding's `avatarMediaId`), or a product's logo and screenshots\n *      (`setProductLogoBodySchema`, `setProductScreenshotsBodySchema`, 0.6.0)\n *      takes the media id. One upload is used once, by its owner, for the\n *      purpose it was uploaded for.\n *\n * A product's images belong to the PRODUCT, not to whoever on the team uploaded\n * them: they stay when that person leaves or deletes their account, and go when\n * the product is deleted.\n *\n * What nobody sees: the raw upload. It sits in a folder the CDN cannot reach\n * and is deleted when processing finishes, or by storage itself after a day.\n * Only the re-encoded sizes are ever served.\n *\n * An image never attached is deleted after `MEDIA_UNATTACHED_TTL_HOURS`; a\n * deleted post's images, a replaced avatar, and an erased account's images are\n * deleted from storage by the server, so a copied link stops working.\n *\n * @module founder-schema/domains/media\n */\n\nimport { z } from 'zod';\nimport { MEDIA_PLACEHOLDER_MAX } from '../../core/limits.js';\n\n/**\n * What an upload is for. It decides the sizes made and where it may be attached.\n * Append only: every stored upload names one.\n */\nexport const MEDIA_PURPOSE_VALUES = [\n  'post',\n  'avatar',\n  'product_logo',\n  'product_screenshot',\n] as const;\nexport const mediaPurposeSchema = z.enum(MEDIA_PURPOSE_VALUES);\nexport type MediaPurpose = z.infer<typeof mediaPurposeSchema>;\n\n/**\n * The content types a member may upload. Every one is decoded and re-encoded\n * to WebP before anyone sees it, so this list is about what the server can\n * DECODE safely, not what it serves.\n *\n * Not HEIC: an iPhone's photo picker converts HEIC to JPEG for the web, and a\n * client that shrinks the photo first re-encodes it anyway. SVG never: it is a\n * document that can carry script, not an image.\n */\nexport const MEDIA_UPLOAD_CONTENT_TYPES = [\n  'image/jpeg',\n  'image/png',\n  'image/webp',\n  'image/gif',\n] as const;\nexport const mediaUploadContentTypeSchema = z.enum(MEDIA_UPLOAD_CONTENT_TYPES);\nexport type MediaUploadContentType = z.infer<typeof mediaUploadContentTypeSchema>;\n\n/**\n * The sizes each purpose is stored at, smallest first.\n *\n *   - post: the LONG edge, aspect kept. 540 for a feed card on a plain screen,\n *     1080 for the same card on a phone's dense screen, 2048 for the full-screen\n *     view. An image smaller than a size is never enlarged, so a small image\n *     has fewer sizes.\n *   - avatar: a SQUARE, cropped around the most interesting region (usually a\n *     face). 192 for every small circle (bylines, lists, chat) up to 64 CSS\n *     pixels on a 3x screen, 512 for a profile header.\n *   - product_logo: a SQUARE, but NEVER CROPPED: the whole logo is fitted\n *     inside it and the rest is transparent, because cropping a wordmark the\n *     way an avatar is cropped cuts letters off. Transparency is kept. 96 for\n *     the product chip on a post (32 CSS pixels at 3x), 256 for a Discover card,\n *     512 for the product page.\n *   - product_screenshot: as a post's image (long edge, aspect kept); a phone\n *     screenshot is tall, a desktop one wide. An animated GIF (a short demo)\n *     stays animated, within the same limits as a post's.\n *\n * A client shrinks a photo to the largest size here before uploading: anything\n * bigger is thrown away by the server anyway, and costs the member data.\n */\nexport const MEDIA_SIZES = {\n  post: [540, 1080, 2048],\n  avatar: [192, 512],\n  product_logo: [96, 256, 512],\n  product_screenshot: [540, 1080, 2048],\n} as const satisfies Record<MediaPurpose, readonly number[]>;\n\n/** The most sizes any purpose stores: the bound on `variants`. */\nexport const MEDIA_VARIANTS_MAX = Math.max(\n  ...Object.values(MEDIA_SIZES).map((sizes) => sizes.length),\n);\n\n/** One stored size of an image. */\nexport const mediaVariantSchema = z.object({\n  width: z.number().int().positive(),\n  height: z.number().int().positive(),\n  url: z.url(),\n});\nexport type MediaVariant = z.infer<typeof mediaVariantSchema>;\n\n/**\n * A processed image, as every read shows it.\n *\n * `variants` is a ready-made `srcset`: smallest first, each with its own pixel\n * width. `url`, `width` and `height` repeat the largest one, so a client that\n * ignores `variants` still renders correctly and can reserve the image's box\n * from the aspect ratio before it loads (no layout shift).\n *\n * `placeholder` is a ThumbHash (base64): a ~30 character blurred preview a\n * client can paint instantly while the image loads.\n *\n * URLs point at our media CDN. They come from our own pipeline, never from a\n * member, so a plain `z.url()`.\n */\nexport const mediaImageSchema = z.object({\n  id: z.string(),\n  url: z.url(),\n  width: z.number().int().positive(),\n  height: z.number().int().positive(),\n  variants: z.array(mediaVariantSchema).min(1).max(MEDIA_VARIANTS_MAX),\n  placeholder: z.string().max(MEDIA_PLACEHOLDER_MAX).optional(),\n});\nexport type MediaImage = z.infer<typeof mediaImageSchema>;\n\n/**\n * `POST /api/v1/uploads/:mediaId/complete` answers with this: the image as it\n * will appear, not yet attached to anything.\n *\n * `expiresAt` is when the server deletes it if it is still unattached\n * (`MEDIA_UNATTACHED_TTL_HOURS` after the slot was issued). A composer left\n * open longer than that must upload again.\n */\nexport const uploadedMediaSchema = mediaImageSchema.extend({\n  purpose: mediaPurposeSchema,\n  expiresAt: z.iso.datetime(),\n});\nexport type UploadedMedia = z.infer<typeof uploadedMediaSchema>;\n"]}

package/dist/domains/members/members.d.ts

@@ -33,8 +33,8 @@ import { z } from 'zod';
 /** What staff can see an account's state as. A deleted account is not listed. */
 export declare const MEMBER_STATUS_VALUES: readonly ["active", "suspended"];
 export declare const memberStatusSchema: z.ZodEnum<{
-    suspended: "suspended";
     active: "active";
+    suspended: "suspended";
 }>;
 export type MemberStatus = z.infer<typeof memberStatusSchema>;
 /** `:memberId` in the paths above. */
@@ -52,8 +52,8 @@ export declare const memberDirectoryQuerySchema: z.ZodObject<{
     cursor: z.ZodOptional<z.ZodString>;
     q: z.ZodPreprocess<z.ZodOptional<z.ZodString>, unknown>;
     status: z.ZodPreprocess<z.ZodOptional<z.ZodEnum<{
-        suspended: "suspended";
         active: "active";
+        suspended: "suspended";
     }>>, unknown>;
     role: z.ZodPreprocess<z.ZodOptional<z.ZodEnum<{
         superadmin: "superadmin";
@@ -72,8 +72,8 @@ export declare const memberSummarySchema: z.ZodObject<{
     avatarUrl: z.ZodNullable<z.ZodURL>;
     email: z.ZodNullable<z.ZodString>;
     status: z.ZodEnum<{
-        suspended: "suspended";
         active: "active";
+        suspended: "suspended";
     }>;
     roles: z.ZodArray<z.ZodEnum<{
         superadmin: "superadmin";
@@ -93,8 +93,8 @@ export declare const memberDirectoryPageSchema: z.ZodObject<{
         avatarUrl: z.ZodNullable<z.ZodURL>;
         email: z.ZodNullable<z.ZodString>;
         status: z.ZodEnum<{
-            suspended: "suspended";
             active: "active";
+            suspended: "suspended";
         }>;
         roles: z.ZodArray<z.ZodEnum<{
             superadmin: "superadmin";
@@ -126,8 +126,8 @@ export declare const memberDetailSchema: z.ZodObject<{
     avatarUrl: z.ZodNullable<z.ZodURL>;
     email: z.ZodNullable<z.ZodString>;
     status: z.ZodEnum<{
-        suspended: "suspended";
         active: "active";
+        suspended: "suspended";
     }>;
     roles: z.ZodArray<z.ZodEnum<{
         superadmin: "superadmin";

package/dist/domains/moderation/moderation.d.ts

@@ -11,7 +11,14 @@
  *   what its author deleted) leaves the reports open and writes nothing: for
  *   those, dismiss.
  *   POST /api/v1/moderation/:contentKind/:contentId/decision { action, note? }
- *        decide on one post, poll or comment; answers the item as it now is
+ *        decide on one post, poll, comment, product or review; answers the
+ *        item as it now is
+ *
+ * PRODUCTS AND REVIEWS (0.6.0) are reported and decided here too. A product is
+ * hidden or restored, never removed by staff (it is its team's work; hiding
+ * takes it out of Discover and off every page but its team's). A review is
+ * hidden, restored or removed like a comment. The hidden and removed lists
+ * hold them too, so a hidden product can be found and put back.
  *
  * ONE ITEM PER THING, NOT PER REPORT. Five members reporting one post is one
  * row with five reports, so a moderator decides once. The queue's order is
@@ -32,7 +39,18 @@
  * @module founder-schema/domains/moderation
  */
 import { z } from 'zod';
-/** Where a post, poll or comment stands. */
+/**
+ * Where something is read in the app: a post or poll, or a product page (for a
+ * product, and for a review of it).
+ */
+export declare const MODERATION_CONTEXT_KIND_VALUES: readonly ["post", "poll", "product"];
+export declare const moderationContextKindSchema: z.ZodEnum<{
+    product: "product";
+    post: "post";
+    poll: "poll";
+}>;
+export type ModerationContextKind = z.infer<typeof moderationContextKindSchema>;
+/** Where a post, poll, comment, product or review stands. */
 export declare const MODERATION_STATE_VALUES: readonly ["visible", "hidden", "removed"];
 export declare const moderationStateSchema: z.ZodEnum<{
     visible: "visible";
@@ -48,18 +66,35 @@ export declare const moderationActionSchema: z.ZodEnum<{
     remove: "remove";
 }>;
 export type ModerationAction = z.infer<typeof moderationActionSchema>;
-/** One post, poll or comment as moderation sees it. */
+/**
+ * Which decisions apply to which kind of thing: everything, except that a
+ * product is never removed by staff (it is its team's work; hiding it takes it
+ * out of Discover and off every page but its team's). The decision dialog
+ * offers these, and the server refuses anything else with
+ * `MODERATION_ACTION_INVALID`. Exhaustive by type.
+ */
+export declare const MODERATION_ACTIONS_BY_TARGET_KIND: {
+    readonly post: readonly ["dismiss", "hide", "restore", "remove"];
+    readonly poll: readonly ["dismiss", "hide", "restore", "remove"];
+    readonly comment: readonly ["dismiss", "hide", "restore", "remove"];
+    readonly review: readonly ["dismiss", "hide", "restore", "remove"];
+    readonly product: readonly ["dismiss", "hide", "restore"];
+};
+/** One post, poll, comment, product or review as moderation sees it. */
 export declare const moderationItemSchema: z.ZodObject<{
     target: z.ZodObject<{
         kind: z.ZodEnum<{
+            product: "product";
             post: "post";
             poll: "poll";
             comment: "comment";
+            review: "review";
         }>;
         id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
     }, z.core.$strip>;
     content: z.ZodObject<{
         kind: z.ZodEnum<{
+            product: "product";
             post: "post";
             poll: "poll";
         }>;
@@ -106,14 +141,17 @@ export declare const moderationPageSchema: z.ZodObject<{
     items: z.ZodArray<z.ZodObject<{
         target: z.ZodObject<{
             kind: z.ZodEnum<{
+                product: "product";
                 post: "post";
                 poll: "poll";
                 comment: "comment";
+                review: "review";
             }>;
             id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         }, z.core.$strip>;
         content: z.ZodObject<{
             kind: z.ZodEnum<{
+                product: "product";
                 post: "post";
                 poll: "poll";
             }>;
@@ -170,6 +208,18 @@ export declare const moderationContentQuerySchema: z.ZodObject<{
 }, z.core.$strip>;
 export type ModerationContentQuery = z.infer<typeof moderationContentQuerySchema>;
 export type ModerationContentQueryInput = z.input<typeof moderationContentQuerySchema>;
+/** `POST /moderation/:contentKind/:contentId/decision`: what is decided on. */
+export declare const moderationTargetParamsSchema: z.ZodObject<{
+    contentKind: z.ZodEnum<{
+        product: "product";
+        post: "post";
+        poll: "poll";
+        comment: "comment";
+        review: "review";
+    }>;
+    contentId: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+}, z.core.$strip>;
+export type ModerationTargetParams = z.infer<typeof moderationTargetParamsSchema>;
 /** `POST /moderation/:contentKind/:contentId/decision`. */
 export declare const moderationDecisionBodySchema: z.ZodObject<{
     action: z.ZodEnum<{

package/dist/domains/moderation/moderation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"moderation.d.ts","sourceRoot":"","sources":["../../../src/domains/moderation/moderation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,4CAA4C;AAC5C,eAAO,MAAM,uBAAuB,2CAA4C,CAAC;AACjF,eAAO,MAAM,qBAAqB;;;;EAAkC,CAAC;AACrE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,wBAAwB,mDAAoD,CAAC;AAC1F,eAAO,MAAM,sBAAsB;;;;;EAAmC,CAAC;AACvE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAItE,uDAAuD;AACvD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgC/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAwC,CAAC;AAC1E,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,wDAAwD;AACxD,eAAO,MAAM,4BAA4B;;;;;;;;iBAEvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEvF,2DAA2D;AAC3D,eAAO,MAAM,4BAA4B;;;;;;;;iBAIvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}
+{"version":3,"file":"moderation.d.ts","sourceRoot":"","sources":["../../../src/domains/moderation/moderation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB;;;GAGG;AACH,eAAO,MAAM,8BAA8B,sCAAuC,CAAC;AACnF,eAAO,MAAM,2BAA2B;;;;EAAyC,CAAC;AAClF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,6DAA6D;AAC7D,eAAO,MAAM,uBAAuB,2CAA4C,CAAC;AACjF,eAAO,MAAM,qBAAqB;;;;EAAkC,CAAC;AACrE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,wBAAwB,mDAAoD,CAAC;AAC1F,eAAO,MAAM,sBAAsB;;;;;EAAmC,CAAC;AACvE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC;;;;;;CAM4B,CAAC;AAI3E,wEAAwE;AACxE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuC/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAwC,CAAC;AAC1E,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,wDAAwD;AACxD,eAAO,MAAM,4BAA4B;;;;;;;;iBAEvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEvF,+EAA+E;AAC/E,eAAO,MAAM,4BAA4B;;;;;;;;;iBAGvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,2DAA2D;AAC3D,eAAO,MAAM,4BAA4B;;;;;;;;iBAIvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/domains/moderation/moderation.js

@@ -11,7 +11,14 @@
  *   what its author deleted) leaves the reports open and writes nothing: for
  *   those, dismiss.
  *   POST /api/v1/moderation/:contentKind/:contentId/decision { action, note? }
- *        decide on one post, poll or comment; answers the item as it now is
+ *        decide on one post, poll, comment, product or review; answers the
+ *        item as it now is
+ *
+ * PRODUCTS AND REVIEWS (0.6.0) are reported and decided here too. A product is
+ * hidden or restored, never removed by staff (it is its team's work; hiding
+ * takes it out of Discover and off every page but its team's). A review is
+ * hidden, restored or removed like a comment. The hidden and removed lists
+ * hold them too, so a hidden product can be found and put back.
  *
  * ONE ITEM PER THING, NOT PER REPORT. Five members reporting one post is one
  * row with five reports, so a moderator decides once. The queue's order is
@@ -35,20 +42,47 @@ import { z } from 'zod';
 import { emptyStringToUndefined, objectIdSchema, optionalTrimmedString, paginationQuerySchema, } from '../../core/common.js';
 import { MODERATION_NOTE_MAX } from '../../core/limits.js';
 import { paginatedSchema } from '../../core/responses.js';
-import { contentKindSchema, engagementTargetKindSchema, reportReasonSchema } from '../feed/feed.js';
-/** Where a post, poll or comment stands. */
+import { reportReasonSchema, reportTargetKindSchema } from '../feed/feed.js';
+/**
+ * Where something is read in the app: a post or poll, or a product page (for a
+ * product, and for a review of it).
+ */
+export const MODERATION_CONTEXT_KIND_VALUES = ['post', 'poll', 'product'];
+export const moderationContextKindSchema = z.enum(MODERATION_CONTEXT_KIND_VALUES);
+/** Where a post, poll, comment, product or review stands. */
 export const MODERATION_STATE_VALUES = ['visible', 'hidden', 'removed'];
 export const moderationStateSchema = z.enum(MODERATION_STATE_VALUES);
 export const MODERATION_ACTION_VALUES = ['dismiss', 'hide', 'restore', 'remove'];
 export const moderationActionSchema = z.enum(MODERATION_ACTION_VALUES);
+/**
+ * Which decisions apply to which kind of thing: everything, except that a
+ * product is never removed by staff (it is its team's work; hiding it takes it
+ * out of Discover and off every page but its team's). The decision dialog
+ * offers these, and the server refuses anything else with
+ * `MODERATION_ACTION_INVALID`. Exhaustive by type.
+ */
+export const MODERATION_ACTIONS_BY_TARGET_KIND = {
+    post: MODERATION_ACTION_VALUES,
+    poll: MODERATION_ACTION_VALUES,
+    comment: MODERATION_ACTION_VALUES,
+    review: MODERATION_ACTION_VALUES,
+    product: ['dismiss', 'hide', 'restore'],
+};
 const count = z.number().int().min(0);
-/** One post, poll or comment as moderation sees it. */
+/** One post, poll, comment, product or review as moderation sees it. */
 export const moderationItemSchema = z.object({
-    target: z.object({ kind: engagementTargetKindSchema, id: objectIdSchema }),
-    /** The post or poll itself, or the one a comment is on: where it is read in the app. */
-    content: z.object({ kind: contentKindSchema, id: objectIdSchema }),
-    /** Its first words (a poll's question), cut to `MODERATION_EXCERPT_MAX`. */
+    target: z.object({ kind: reportTargetKindSchema, id: objectIdSchema }),
+    /**
+     * Where it is read in the app: the post or poll itself, or the one a comment
+     * is on; the product page for a product or a review.
+     */
+    content: z.object({ kind: moderationContextKindSchema, id: objectIdSchema }),
+    /**
+     * Its first words, cut to `MODERATION_EXCERPT_MAX`: a poll's question, a
+     * product's name and tagline, a review's stars and text.
+     */
     excerpt: z.string(),
+    /** Who wrote it; for a product, its owner. */
     author: z.object({
         id: objectIdSchema,
         displayName: z.string(),
@@ -81,6 +115,11 @@ export const moderationPageSchema = paginatedSchema(moderationItemSchema);
 export const moderationContentQuerySchema = paginationQuerySchema.extend({
     state: z.preprocess(emptyStringToUndefined, moderationStateSchema.default('visible')),
 });
+/** `POST /moderation/:contentKind/:contentId/decision`: what is decided on. */
+export const moderationTargetParamsSchema = z.object({
+    contentKind: reportTargetKindSchema,
+    contentId: objectIdSchema,
+});
 /** `POST /moderation/:contentKind/:contentId/decision`. */
 export const moderationDecisionBodySchema = z.object({
     action: moderationActionSchema,

package/dist/domains/moderation/moderation.js.map

@@ -1 +1 @@
-{"version":3,"file":"moderation.js","sourceRoot":"","sources":["../../../src/domains/moderation/moderation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEpG,4CAA4C;AAC5C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AACjF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;AAGrE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAC;AAC1F,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AAGvE,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEtC,uDAAuD;AACvD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC;IAC1E,wFAAwF;IACxF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC;IAClE,4EAA4E;IAC5E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,qBAAqB;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,qCAAqC;QACrC,IAAI,EAAE,KAAK;QACX,wCAAwC;QACxC,KAAK,EAAE,KAAK;QACZ,kEAAkE;QAClE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,gFAAgF;QAChF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,qEAAqE;QACrE,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAC1C,CAAC;IACF,qDAAqD;IACrD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;QACvB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;QACvB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;KACvB,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAAC,oBAAoB,CAAC,CAAC;AAG1E,wDAAwD;AACxD,MAAM,CAAC,MAAM,4BAA4B,GAAG,qBAAqB,CAAC,MAAM,CAAC;IACvE,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;CACtF,CAAC,CAAC;AAIH,2DAA2D;AAC3D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,MAAM,EAAE,sBAAsB;IAC9B,gFAAgF;IAChF,IAAI,EAAE,qBAAqB,CAAC,mBAAmB,CAAC;CACjD,CAAC,CAAC","sourcesContent":["/**\n * founder-schema: moderation\n *\n *   GET  /api/v1/moderation/queue                            ?limit&cursor\n *        what members reported and nobody has decided on, oldest report first\n *   GET  /api/v1/moderation/content                          ?state&limit&cursor\n *        by state, newest first: visible is posts and polls by when posted;\n *        hidden and removed also hold comments (so a hidden comment can be\n *        found and put back), by when hidden or removed\n *   A decision that changes nothing (hiding what is already hidden, removing\n *   what its author deleted) leaves the reports open and writes nothing: for\n *   those, dismiss.\n *   POST /api/v1/moderation/:contentKind/:contentId/decision { action, note? }\n *        decide on one post, poll or comment; answers the item as it now is\n *\n * ONE ITEM PER THING, NOT PER REPORT. Five members reporting one post is one\n * row with five reports, so a moderator decides once. The queue's order is\n * the oldest open report first: whoever has waited longest is seen first, and\n * a pile-on cannot jump the line.\n *\n * THE DECISIONS\n *   dismiss  it stays up; its open reports close as dismissed\n *   hide     out of every feed and thread, kept, restorable; reports actioned\n *   restore  a hidden item goes back up\n *   remove   deleted as its author deleting it would (counts move), not\n *            restorable from here; reports actioned\n * Every decision on someone else's content is written to the audit log, with\n * the note when there is one.\n *\n * A report's `note` was written by a member: untrusted text, shown as text.\n *\n * @module founder-schema/domains/moderation\n */\n\nimport { z } from 'zod';\nimport {\n  emptyStringToUndefined,\n  objectIdSchema,\n  optionalTrimmedString,\n  paginationQuerySchema,\n} from '../../core/common.js';\nimport { MODERATION_NOTE_MAX } from '../../core/limits.js';\nimport { paginatedSchema } from '../../core/responses.js';\nimport { contentKindSchema, engagementTargetKindSchema, reportReasonSchema } from '../feed/feed.js';\n\n/** Where a post, poll or comment stands. */\nexport const MODERATION_STATE_VALUES = ['visible', 'hidden', 'removed'] as const;\nexport const moderationStateSchema = z.enum(MODERATION_STATE_VALUES);\nexport type ModerationState = z.infer<typeof moderationStateSchema>;\n\nexport const MODERATION_ACTION_VALUES = ['dismiss', 'hide', 'restore', 'remove'] as const;\nexport const moderationActionSchema = z.enum(MODERATION_ACTION_VALUES);\nexport type ModerationAction = z.infer<typeof moderationActionSchema>;\n\nconst count = z.number().int().min(0);\n\n/** One post, poll or comment as moderation sees it. */\nexport const moderationItemSchema = z.object({\n  target: z.object({ kind: engagementTargetKindSchema, id: objectIdSchema }),\n  /** The post or poll itself, or the one a comment is on: where it is read in the app. */\n  content: z.object({ kind: contentKindSchema, id: objectIdSchema }),\n  /** Its first words (a poll's question), cut to `MODERATION_EXCERPT_MAX`. */\n  excerpt: z.string(),\n  author: z.object({\n    id: objectIdSchema,\n    displayName: z.string(),\n    avatarUrl: z.url().nullable(),\n  }),\n  createdAt: z.iso.datetime(),\n  state: moderationStateSchema,\n  reports: z.object({\n    /** Reports nobody has decided on. */\n    open: count,\n    /** Every report ever filed about it. */\n    total: count,\n    /** Why it was reported, among the open ones, most-given first. */\n    reasons: z.array(z.object({ reason: reportReasonSchema, count })),\n    /** The reporters' notes, among the open ones, newest first (a few, not all). */\n    notes: z.array(z.string()),\n    /** When the oldest open report was filed. Null when none is open. */\n    oldestOpenAt: z.iso.datetime().nullable(),\n  }),\n  /** What the asking staff member may do to it now. */\n  viewer: z.object({\n    canDismiss: z.boolean(),\n    canHide: z.boolean(),\n    canRestore: z.boolean(),\n    canRemove: z.boolean(),\n  }),\n});\nexport type ModerationItem = z.infer<typeof moderationItemSchema>;\n\nexport const moderationPageSchema = paginatedSchema(moderationItemSchema);\nexport type ModerationPage = z.infer<typeof moderationPageSchema>;\n\n/** `GET /moderation/content`. Visible when not said. */\nexport const moderationContentQuerySchema = paginationQuerySchema.extend({\n  state: z.preprocess(emptyStringToUndefined, moderationStateSchema.default('visible')),\n});\nexport type ModerationContentQuery = z.infer<typeof moderationContentQuerySchema>;\nexport type ModerationContentQueryInput = z.input<typeof moderationContentQuerySchema>;\n\n/** `POST /moderation/:contentKind/:contentId/decision`. */\nexport const moderationDecisionBodySchema = z.object({\n  action: moderationActionSchema,\n  /** Why, for the audit log. Optional: an obvious spam removal needs no essay. */\n  note: optionalTrimmedString(MODERATION_NOTE_MAX),\n});\nexport type ModerationDecisionBody = z.infer<typeof moderationDecisionBodySchema>;\n"]}
+{"version":3,"file":"moderation.js","sourceRoot":"","sources":["../../../src/domains/moderation/moderation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAyB,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEpG;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AACnF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;AAGlF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AACjF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;AAGrE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAC;AAC1F,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AAGvE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,IAAI,EAAE,wBAAwB;IAC9B,IAAI,EAAE,wBAAwB;IAC9B,OAAO,EAAE,wBAAwB;IACjC,MAAM,EAAE,wBAAwB;IAChC,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC;CACiC,CAAC;AAE3E,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEtC,wEAAwE;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC;IACtE;;;OAGG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC;IAC5E;;;OAGG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,8CAA8C;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,qBAAqB;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,qCAAqC;QACrC,IAAI,EAAE,KAAK;QACX,wCAAwC;QACxC,KAAK,EAAE,KAAK;QACZ,kEAAkE;QAClE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,gFAAgF;QAChF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,qEAAqE;QACrE,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAC1C,CAAC;IACF,qDAAqD;IACrD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;QACvB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;QACvB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;KACvB,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAAC,oBAAoB,CAAC,CAAC;AAG1E,wDAAwD;AACxD,MAAM,CAAC,MAAM,4BAA4B,GAAG,qBAAqB,CAAC,MAAM,CAAC;IACvE,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;CACtF,CAAC,CAAC;AAIH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,WAAW,EAAE,sBAAsB;IACnC,SAAS,EAAE,cAAc;CAC1B,CAAC,CAAC;AAGH,2DAA2D;AAC3D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,MAAM,EAAE,sBAAsB;IAC9B,gFAAgF;IAChF,IAAI,EAAE,qBAAqB,CAAC,mBAAmB,CAAC;CACjD,CAAC,CAAC","sourcesContent":["/**\n * founder-schema: moderation\n *\n *   GET  /api/v1/moderation/queue                            ?limit&cursor\n *        what members reported and nobody has decided on, oldest report first\n *   GET  /api/v1/moderation/content                          ?state&limit&cursor\n *        by state, newest first: visible is posts and polls by when posted;\n *        hidden and removed also hold comments (so a hidden comment can be\n *        found and put back), by when hidden or removed\n *   A decision that changes nothing (hiding what is already hidden, removing\n *   what its author deleted) leaves the reports open and writes nothing: for\n *   those, dismiss.\n *   POST /api/v1/moderation/:contentKind/:contentId/decision { action, note? }\n *        decide on one post, poll, comment, product or review; answers the\n *        item as it now is\n *\n * PRODUCTS AND REVIEWS (0.6.0) are reported and decided here too. A product is\n * hidden or restored, never removed by staff (it is its team's work; hiding\n * takes it out of Discover and off every page but its team's). A review is\n * hidden, restored or removed like a comment. The hidden and removed lists\n * hold them too, so a hidden product can be found and put back.\n *\n * ONE ITEM PER THING, NOT PER REPORT. Five members reporting one post is one\n * row with five reports, so a moderator decides once. The queue's order is\n * the oldest open report first: whoever has waited longest is seen first, and\n * a pile-on cannot jump the line.\n *\n * THE DECISIONS\n *   dismiss  it stays up; its open reports close as dismissed\n *   hide     out of every feed and thread, kept, restorable; reports actioned\n *   restore  a hidden item goes back up\n *   remove   deleted as its author deleting it would (counts move), not\n *            restorable from here; reports actioned\n * Every decision on someone else's content is written to the audit log, with\n * the note when there is one.\n *\n * A report's `note` was written by a member: untrusted text, shown as text.\n *\n * @module founder-schema/domains/moderation\n */\n\nimport { z } from 'zod';\nimport {\n  emptyStringToUndefined,\n  objectIdSchema,\n  optionalTrimmedString,\n  paginationQuerySchema,\n} from '../../core/common.js';\nimport { MODERATION_NOTE_MAX } from '../../core/limits.js';\nimport { paginatedSchema } from '../../core/responses.js';\nimport { type ReportTargetKind, reportReasonSchema, reportTargetKindSchema } from '../feed/feed.js';\n\n/**\n * Where something is read in the app: a post or poll, or a product page (for a\n * product, and for a review of it).\n */\nexport const MODERATION_CONTEXT_KIND_VALUES = ['post', 'poll', 'product'] as const;\nexport const moderationContextKindSchema = z.enum(MODERATION_CONTEXT_KIND_VALUES);\nexport type ModerationContextKind = z.infer<typeof moderationContextKindSchema>;\n\n/** Where a post, poll, comment, product or review stands. */\nexport const MODERATION_STATE_VALUES = ['visible', 'hidden', 'removed'] as const;\nexport const moderationStateSchema = z.enum(MODERATION_STATE_VALUES);\nexport type ModerationState = z.infer<typeof moderationStateSchema>;\n\nexport const MODERATION_ACTION_VALUES = ['dismiss', 'hide', 'restore', 'remove'] as const;\nexport const moderationActionSchema = z.enum(MODERATION_ACTION_VALUES);\nexport type ModerationAction = z.infer<typeof moderationActionSchema>;\n\n/**\n * Which decisions apply to which kind of thing: everything, except that a\n * product is never removed by staff (it is its team's work; hiding it takes it\n * out of Discover and off every page but its team's). The decision dialog\n * offers these, and the server refuses anything else with\n * `MODERATION_ACTION_INVALID`. Exhaustive by type.\n */\nexport const MODERATION_ACTIONS_BY_TARGET_KIND = {\n  post: MODERATION_ACTION_VALUES,\n  poll: MODERATION_ACTION_VALUES,\n  comment: MODERATION_ACTION_VALUES,\n  review: MODERATION_ACTION_VALUES,\n  product: ['dismiss', 'hide', 'restore'],\n} as const satisfies Record<ReportTargetKind, readonly ModerationAction[]>;\n\nconst count = z.number().int().min(0);\n\n/** One post, poll, comment, product or review as moderation sees it. */\nexport const moderationItemSchema = z.object({\n  target: z.object({ kind: reportTargetKindSchema, id: objectIdSchema }),\n  /**\n   * Where it is read in the app: the post or poll itself, or the one a comment\n   * is on; the product page for a product or a review.\n   */\n  content: z.object({ kind: moderationContextKindSchema, id: objectIdSchema }),\n  /**\n   * Its first words, cut to `MODERATION_EXCERPT_MAX`: a poll's question, a\n   * product's name and tagline, a review's stars and text.\n   */\n  excerpt: z.string(),\n  /** Who wrote it; for a product, its owner. */\n  author: z.object({\n    id: objectIdSchema,\n    displayName: z.string(),\n    avatarUrl: z.url().nullable(),\n  }),\n  createdAt: z.iso.datetime(),\n  state: moderationStateSchema,\n  reports: z.object({\n    /** Reports nobody has decided on. */\n    open: count,\n    /** Every report ever filed about it. */\n    total: count,\n    /** Why it was reported, among the open ones, most-given first. */\n    reasons: z.array(z.object({ reason: reportReasonSchema, count })),\n    /** The reporters' notes, among the open ones, newest first (a few, not all). */\n    notes: z.array(z.string()),\n    /** When the oldest open report was filed. Null when none is open. */\n    oldestOpenAt: z.iso.datetime().nullable(),\n  }),\n  /** What the asking staff member may do to it now. */\n  viewer: z.object({\n    canDismiss: z.boolean(),\n    canHide: z.boolean(),\n    canRestore: z.boolean(),\n    canRemove: z.boolean(),\n  }),\n});\nexport type ModerationItem = z.infer<typeof moderationItemSchema>;\n\nexport const moderationPageSchema = paginatedSchema(moderationItemSchema);\nexport type ModerationPage = z.infer<typeof moderationPageSchema>;\n\n/** `GET /moderation/content`. Visible when not said. */\nexport const moderationContentQuerySchema = paginationQuerySchema.extend({\n  state: z.preprocess(emptyStringToUndefined, moderationStateSchema.default('visible')),\n});\nexport type ModerationContentQuery = z.infer<typeof moderationContentQuerySchema>;\nexport type ModerationContentQueryInput = z.input<typeof moderationContentQuerySchema>;\n\n/** `POST /moderation/:contentKind/:contentId/decision`: what is decided on. */\nexport const moderationTargetParamsSchema = z.object({\n  contentKind: reportTargetKindSchema,\n  contentId: objectIdSchema,\n});\nexport type ModerationTargetParams = z.infer<typeof moderationTargetParamsSchema>;\n\n/** `POST /moderation/:contentKind/:contentId/decision`. */\nexport const moderationDecisionBodySchema = z.object({\n  action: moderationActionSchema,\n  /** Why, for the audit log. Optional: an obvious spam removal needs no essay. */\n  note: optionalTrimmedString(MODERATION_NOTE_MAX),\n});\nexport type ModerationDecisionBody = z.infer<typeof moderationDecisionBodySchema>;\n"]}