founder-schema 0.8.0 → 0.10.0

package/dist/domains/audit/audit.d.ts

@@ -22,7 +22,7 @@
  * @module founder-schema/domains/audit
  */
 import { z } from 'zod';
-export declare const AUDIT_ACTION_VALUES: readonly ["role.granted", "role.revoked", "mpin.cleared", "content.removed", "content.hidden", "content.restored", "report.dismissed", "member.suspended", "member.unsuspended", "ticket.claimed", "ticket.resolved"];
+export declare const AUDIT_ACTION_VALUES: readonly ["role.granted", "role.revoked", "mpin.cleared", "content.removed", "content.hidden", "content.restored", "report.dismissed", "member.suspended", "member.unsuspended", "ticket.claimed", "ticket.resolved", "capability.granted", "capability.revoked", "community.created", "community.visibility_changed", "community.archived", "community.restored", "community.deleted", "community_suggestion.declined", "community.orphaned"];
 export declare const auditActionSchema: z.ZodEnum<{
     "role.granted": "role.granted";
     "role.revoked": "role.revoked";
@@ -35,11 +35,21 @@ export declare const auditActionSchema: z.ZodEnum<{
     "member.unsuspended": "member.unsuspended";
     "ticket.claimed": "ticket.claimed";
     "ticket.resolved": "ticket.resolved";
+    "capability.granted": "capability.granted";
+    "capability.revoked": "capability.revoked";
+    "community.created": "community.created";
+    "community.visibility_changed": "community.visibility_changed";
+    "community.archived": "community.archived";
+    "community.restored": "community.restored";
+    "community.deleted": "community.deleted";
+    "community_suggestion.declined": "community_suggestion.declined";
+    "community.orphaned": "community.orphaned";
 }>;
 export type AuditAction = z.infer<typeof auditActionSchema>;
 /**
- * Who did it. A person, acting as one of their roles; or a server script, which
- * is the only way a superadmin is ever made.
+ * Who did it. A person, acting as one of their roles; a server script, which
+ * is the only way a superadmin is ever made; or (0.9.0) a member acting in a
+ * community they run, who is not staff.
  */
 export declare const auditActorSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"staff">;
@@ -55,6 +65,10 @@ export declare const auditActorSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
 }, z.core.$strip>, z.ZodObject<{
     kind: z.ZodLiteral<"script">;
     name: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"member">;
+    id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    displayName: z.ZodString;
 }, z.core.$strip>], "kind">;
 export type AuditActor = z.infer<typeof auditActorSchema>;
 export declare const auditEntrySchema: z.ZodObject<{
@@ -73,6 +87,10 @@ export declare const auditEntrySchema: z.ZodObject<{
     }, z.core.$strip>, z.ZodObject<{
         kind: z.ZodLiteral<"script">;
         name: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member">;
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        displayName: z.ZodString;
     }, z.core.$strip>], "kind">;
     action: z.ZodEnum<{
         "role.granted": "role.granted";
@@ -86,6 +104,15 @@ export declare const auditEntrySchema: z.ZodObject<{
         "member.unsuspended": "member.unsuspended";
         "ticket.claimed": "ticket.claimed";
         "ticket.resolved": "ticket.resolved";
+        "capability.granted": "capability.granted";
+        "capability.revoked": "capability.revoked";
+        "community.created": "community.created";
+        "community.visibility_changed": "community.visibility_changed";
+        "community.archived": "community.archived";
+        "community.restored": "community.restored";
+        "community.deleted": "community.deleted";
+        "community_suggestion.declined": "community_suggestion.declined";
+        "community.orphaned": "community.orphaned";
     }>;
     target: z.ZodObject<{
         subject: z.ZodEnum<{
@@ -104,6 +131,8 @@ export declare const auditEntrySchema: z.ZodObject<{
             PlatformSettings: "PlatformSettings";
             Product: "Product";
             Review: "Review";
+            Community: "Community";
+            CommunitySuggestion: "CommunitySuggestion";
         }>;
         id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         label: z.ZodNullable<z.ZodString>;
@@ -129,6 +158,10 @@ export declare const auditPageSchema: z.ZodObject<{
         }, z.core.$strip>, z.ZodObject<{
             kind: z.ZodLiteral<"script">;
             name: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"member">;
+            id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+            displayName: z.ZodString;
         }, z.core.$strip>], "kind">;
         action: z.ZodEnum<{
             "role.granted": "role.granted";
@@ -142,6 +175,15 @@ export declare const auditPageSchema: z.ZodObject<{
             "member.unsuspended": "member.unsuspended";
             "ticket.claimed": "ticket.claimed";
             "ticket.resolved": "ticket.resolved";
+            "capability.granted": "capability.granted";
+            "capability.revoked": "capability.revoked";
+            "community.created": "community.created";
+            "community.visibility_changed": "community.visibility_changed";
+            "community.archived": "community.archived";
+            "community.restored": "community.restored";
+            "community.deleted": "community.deleted";
+            "community_suggestion.declined": "community_suggestion.declined";
+            "community.orphaned": "community.orphaned";
         }>;
         target: z.ZodObject<{
             subject: z.ZodEnum<{
@@ -160,6 +202,8 @@ export declare const auditPageSchema: z.ZodObject<{
                 PlatformSettings: "PlatformSettings";
                 Product: "Product";
                 Review: "Review";
+                Community: "Community";
+                CommunitySuggestion: "CommunitySuggestion";
             }>;
             id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
             label: z.ZodNullable<z.ZodString>;

package/dist/domains/audit/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/domains/audit/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,mBAAmB,uNA0BtB,CAAC;AACX,eAAO,MAAM,iBAAiB;;;;;;;;;;;;EAA8B,CAAC;AAC7D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;2BAc3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAS3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAoC,CAAC;AACjE,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/domains/audit/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,mBAAmB,gbAkDtB,CAAC;AACX,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;EAA8B,CAAC;AAC7D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;2BAyB3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAS3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAoC,CAAC;AACjE,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/domains/audit/audit.js

@@ -37,10 +37,12 @@ export const AUDIT_ACTION_VALUES = [
     'content.removed',
     /**
      * Staff hid a post, poll, comment, product or review: out of every feed and
-     * list, restorable. `detail.note`.
+     * list, restorable. `detail.note`. Since 0.9.0 also a community's
+     * moderators hiding a post, poll or comment in it (actor kind `member`, or
+     * staff), with `detail.communityId`.
      */
     'content.hidden',
-    /** Staff put hidden content (a product or review too) back. */
+    /** Hidden content (a product or review too) put back, by staff or (0.9.0) a community's moderators. */
     'content.restored',
     /** Staff looked at what was reported and left it up. `detail.reports`: how many closed. */
     'report.dismissed',
@@ -52,11 +54,34 @@ export const AUDIT_ACTION_VALUES = [
     'ticket.claimed',
     /** A support agent closed a ticket as resolved. */
     'ticket.resolved',
+    /** A capability was granted (0.9.0). `detail.capability`. */
+    'capability.granted',
+    /** A capability was taken away (0.9.0). `detail.capability`. */
+    'capability.revoked',
+    /** A community was created (0.9.0). `detail.visibility`; `detail.suggestionId` when from a suggestion. */
+    'community.created',
+    /** A community's type changed (0.9.0). `detail.from`, `detail.to`, `detail.exposed`. */
+    'community.visibility_changed',
+    /** Staff archived a community (0.9.0). */
+    'community.archived',
+    /** Staff restored an archived community (0.9.0). */
+    'community.restored',
+    /** Staff deleted a community (0.9.0). */
+    'community.deleted',
+    /** Staff declined a community suggestion (0.9.0). `detail.reason`. Approving is `community.created`. */
+    'community_suggestion.declined',
+    /**
+     * A community was left with no admin (0.9.0): its last admin's account was
+     * deleted where that cannot be refused. Written by the deletion (actor
+     * kind `script`); managers then make a member admin.
+     */
+    'community.orphaned',
 ];
 export const auditActionSchema = z.enum(AUDIT_ACTION_VALUES);
 /**
- * Who did it. A person, acting as one of their roles; or a server script, which
- * is the only way a superadmin is ever made.
+ * Who did it. A person, acting as one of their roles; a server script, which
+ * is the only way a superadmin is ever made; or (0.9.0) a member acting in a
+ * community they run, who is not staff.
  */
 export const auditActorSchema = z.discriminatedUnion('kind', [
     z.object({
@@ -72,6 +97,17 @@ export const auditActorSchema = z.discriminatedUnion('kind', [
         /** Which script, e.g. `grant-superadmin`. */
         name: z.string(),
     }),
+    /**
+     * A member who is not acting as staff (0.9.0): a community's admin changing
+     * its type, say. Its own kind, so nobody reading the log mistakes a
+     * community admin for staff.
+     */
+    z.object({
+        kind: z.literal('member'),
+        id: objectIdSchema,
+        /** Their name when they did it. */
+        displayName: z.string(),
+    }),
 ]);
 export const auditEntrySchema = z.object({
     id: objectIdSchema,

package/dist/domains/audit/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/domains/audit/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,kDAAkD;IAClD,cAAc;IACd,qDAAqD;IACrD,cAAc;IACd,uEAAuE;IACvE,cAAc;IACd,gGAAgG;IAChG,iBAAiB;IACjB;;;OAGG;IACH,gBAAgB;IAChB,+DAA+D;IAC/D,kBAAkB;IAClB,2FAA2F;IAC3F,kBAAkB;IAClB,gEAAgE;IAChE,kBAAkB;IAClB,+BAA+B;IAC/B,oBAAoB;IACpB,qCAAqC;IACrC,gBAAgB;IAChB,mDAAmD;IACnD,iBAAiB;CACT,CAAC;AACX,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAG7D;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3D,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,EAAE,EAAE,cAAc;QAClB,qFAAqF;QACrF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,oCAAoC;QACpC,QAAQ,EAAE,UAAU;KACrB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,6CAA6C;QAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,cAAc;IAClB,KAAK,EAAE,gBAAgB;IACvB,MAAM,EAAE,iBAAiB;IACzB,6EAA6E;IAC7E,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC9F,mFAAmF;IACnF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CACrB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC","sourcesContent":["/**\n * founder-schema: the audit log\n *\n *   GET /api/v1/audit   staff actions, newest first\n *\n * Every action a staff member takes on a MEMBER or on what a member wrote\n * (roles, MPIN resets, suspensions, moderation decisions, taking and closing\n * tickets) is written here, at the moment it happens, by the server: who did\n * it, AS WHICH ROLE, what they did, to what, and anything that explains it.\n * The support team's own library (saved replies) is not a member's, so its\n * edits are not entries. Entries are never edited or\n * deleted. It is how a dispute (\"who removed my post, and why\") gets an\n * answer, and how a misused staff account is noticed.\n *\n * WHO READS WHAT is the reader's permissions, applied to the query: a\n * superadmin reads every entry; any other staff role reads the entries it\n * wrote itself (its History).\n *\n * The action list grows with the staff features; it never shrinks, because an\n * old entry must still parse.\n *\n * @module founder-schema/domains/audit\n */\n\nimport { z } from 'zod';\nimport { subjectSchema } from '../../access/permissions.js';\nimport { roleSchema } from '../../access/roles.js';\nimport { objectIdSchema } from '../../core/common.js';\nimport { paginatedSchema } from '../../core/responses.js';\n\nexport const AUDIT_ACTION_VALUES = [\n  /** A platform role was granted. `detail.role`. */\n  'role.granted',\n  /** A platform role was taken away. `detail.role`. */\n  'role.revoked',\n  /** Someone's forgotten MPIN was cleared, so they can set a new one. */\n  'mpin.cleared',\n  /** Staff removed someone else's post, poll, comment or review (`target.subject` says which). */\n  'content.removed',\n  /**\n   * Staff hid a post, poll, comment, product or review: out of every feed and\n   * list, restorable. `detail.note`.\n   */\n  'content.hidden',\n  /** Staff put hidden content (a product or review too) back. */\n  'content.restored',\n  /** Staff looked at what was reported and left it up. `detail.reports`: how many closed. */\n  'report.dismissed',\n  /** A member was suspended from the product. `detail.reason`. */\n  'member.suspended',\n  /** A suspension was lifted. */\n  'member.unsuspended',\n  /** A support agent took a ticket. */\n  'ticket.claimed',\n  /** A support agent closed a ticket as resolved. */\n  'ticket.resolved',\n] as const;\nexport const auditActionSchema = z.enum(AUDIT_ACTION_VALUES);\nexport type AuditAction = z.infer<typeof auditActionSchema>;\n\n/**\n * Who did it. A person, acting as one of their roles; or a server script, which\n * is the only way a superadmin is ever made.\n */\nexport const auditActorSchema = z.discriminatedUnion('kind', [\n  z.object({\n    kind: z.literal('staff'),\n    id: objectIdSchema,\n    /** Their name when they did it. An entry is a record, so it is not renamed later. */\n    displayName: z.string(),\n    /** The role they were acting as. */\n    actingAs: roleSchema,\n  }),\n  z.object({\n    kind: z.literal('script'),\n    /** Which script, e.g. `grant-superadmin`. */\n    name: z.string(),\n  }),\n]);\nexport type AuditActor = z.infer<typeof auditActorSchema>;\n\nexport const auditEntrySchema = z.object({\n  id: objectIdSchema,\n  actor: auditActorSchema,\n  action: auditActionSchema,\n  /** What it was done to. `label` is its name at the time, when it has one. */\n  target: z.object({ subject: subjectSchema, id: objectIdSchema, label: z.string().nullable() }),\n  /** The specifics, by action (the role granted, a reason given). Never a secret. */\n  detail: z.record(z.string(), z.union([z.string(), z.number(), z.boolean(), z.null()])),\n  at: z.iso.datetime(),\n});\nexport type AuditEntry = z.infer<typeof auditEntrySchema>;\n\nexport const auditPageSchema = paginatedSchema(auditEntrySchema);\nexport type AuditPage = z.infer<typeof auditPageSchema>;\n"]}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/domains/audit/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,kDAAkD;IAClD,cAAc;IACd,qDAAqD;IACrD,cAAc;IACd,uEAAuE;IACvE,cAAc;IACd,gGAAgG;IAChG,iBAAiB;IACjB;;;;;OAKG;IACH,gBAAgB;IAChB,uGAAuG;IACvG,kBAAkB;IAClB,2FAA2F;IAC3F,kBAAkB;IAClB,gEAAgE;IAChE,kBAAkB;IAClB,+BAA+B;IAC/B,oBAAoB;IACpB,qCAAqC;IACrC,gBAAgB;IAChB,mDAAmD;IACnD,iBAAiB;IACjB,6DAA6D;IAC7D,oBAAoB;IACpB,gEAAgE;IAChE,oBAAoB;IACpB,0GAA0G;IAC1G,mBAAmB;IACnB,wFAAwF;IACxF,8BAA8B;IAC9B,0CAA0C;IAC1C,oBAAoB;IACpB,oDAAoD;IACpD,oBAAoB;IACpB,yCAAyC;IACzC,mBAAmB;IACnB,wGAAwG;IACxG,+BAA+B;IAC/B;;;;OAIG;IACH,oBAAoB;CACZ,CAAC;AACX,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAG7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3D,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,EAAE,EAAE,cAAc;QAClB,qFAAqF;QACrF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,oCAAoC;QACpC,QAAQ,EAAE,UAAU;KACrB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,6CAA6C;QAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF;;;;OAIG;IACH,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,EAAE,EAAE,cAAc;QAClB,mCAAmC;QACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;KACxB,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,cAAc;IAClB,KAAK,EAAE,gBAAgB;IACvB,MAAM,EAAE,iBAAiB;IACzB,6EAA6E;IAC7E,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC9F,mFAAmF;IACnF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CACrB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC","sourcesContent":["/**\n * founder-schema: the audit log\n *\n *   GET /api/v1/audit   staff actions, newest first\n *\n * Every action a staff member takes on a MEMBER or on what a member wrote\n * (roles, MPIN resets, suspensions, moderation decisions, taking and closing\n * tickets) is written here, at the moment it happens, by the server: who did\n * it, AS WHICH ROLE, what they did, to what, and anything that explains it.\n * The support team's own library (saved replies) is not a member's, so its\n * edits are not entries. Entries are never edited or\n * deleted. It is how a dispute (\"who removed my post, and why\") gets an\n * answer, and how a misused staff account is noticed.\n *\n * WHO READS WHAT is the reader's permissions, applied to the query: a\n * superadmin reads every entry; any other staff role reads the entries it\n * wrote itself (its History).\n *\n * The action list grows with the staff features; it never shrinks, because an\n * old entry must still parse.\n *\n * @module founder-schema/domains/audit\n */\n\nimport { z } from 'zod';\nimport { subjectSchema } from '../../access/permissions.js';\nimport { roleSchema } from '../../access/roles.js';\nimport { objectIdSchema } from '../../core/common.js';\nimport { paginatedSchema } from '../../core/responses.js';\n\nexport const AUDIT_ACTION_VALUES = [\n  /** A platform role was granted. `detail.role`. */\n  'role.granted',\n  /** A platform role was taken away. `detail.role`. */\n  'role.revoked',\n  /** Someone's forgotten MPIN was cleared, so they can set a new one. */\n  'mpin.cleared',\n  /** Staff removed someone else's post, poll, comment or review (`target.subject` says which). */\n  'content.removed',\n  /**\n   * Staff hid a post, poll, comment, product or review: out of every feed and\n   * list, restorable. `detail.note`. Since 0.9.0 also a community's\n   * moderators hiding a post, poll or comment in it (actor kind `member`, or\n   * staff), with `detail.communityId`.\n   */\n  'content.hidden',\n  /** Hidden content (a product or review too) put back, by staff or (0.9.0) a community's moderators. */\n  'content.restored',\n  /** Staff looked at what was reported and left it up. `detail.reports`: how many closed. */\n  'report.dismissed',\n  /** A member was suspended from the product. `detail.reason`. */\n  'member.suspended',\n  /** A suspension was lifted. */\n  'member.unsuspended',\n  /** A support agent took a ticket. */\n  'ticket.claimed',\n  /** A support agent closed a ticket as resolved. */\n  'ticket.resolved',\n  /** A capability was granted (0.9.0). `detail.capability`. */\n  'capability.granted',\n  /** A capability was taken away (0.9.0). `detail.capability`. */\n  'capability.revoked',\n  /** A community was created (0.9.0). `detail.visibility`; `detail.suggestionId` when from a suggestion. */\n  'community.created',\n  /** A community's type changed (0.9.0). `detail.from`, `detail.to`, `detail.exposed`. */\n  'community.visibility_changed',\n  /** Staff archived a community (0.9.0). */\n  'community.archived',\n  /** Staff restored an archived community (0.9.0). */\n  'community.restored',\n  /** Staff deleted a community (0.9.0). */\n  'community.deleted',\n  /** Staff declined a community suggestion (0.9.0). `detail.reason`. Approving is `community.created`. */\n  'community_suggestion.declined',\n  /**\n   * A community was left with no admin (0.9.0): its last admin's account was\n   * deleted where that cannot be refused. Written by the deletion (actor\n   * kind `script`); managers then make a member admin.\n   */\n  'community.orphaned',\n] as const;\nexport const auditActionSchema = z.enum(AUDIT_ACTION_VALUES);\nexport type AuditAction = z.infer<typeof auditActionSchema>;\n\n/**\n * Who did it. A person, acting as one of their roles; a server script, which\n * is the only way a superadmin is ever made; or (0.9.0) a member acting in a\n * community they run, who is not staff.\n */\nexport const auditActorSchema = z.discriminatedUnion('kind', [\n  z.object({\n    kind: z.literal('staff'),\n    id: objectIdSchema,\n    /** Their name when they did it. An entry is a record, so it is not renamed later. */\n    displayName: z.string(),\n    /** The role they were acting as. */\n    actingAs: roleSchema,\n  }),\n  z.object({\n    kind: z.literal('script'),\n    /** Which script, e.g. `grant-superadmin`. */\n    name: z.string(),\n  }),\n  /**\n   * A member who is not acting as staff (0.9.0): a community's admin changing\n   * its type, say. Its own kind, so nobody reading the log mistakes a\n   * community admin for staff.\n   */\n  z.object({\n    kind: z.literal('member'),\n    id: objectIdSchema,\n    /** Their name when they did it. */\n    displayName: z.string(),\n  }),\n]);\nexport type AuditActor = z.infer<typeof auditActorSchema>;\n\nexport const auditEntrySchema = z.object({\n  id: objectIdSchema,\n  actor: auditActorSchema,\n  action: auditActionSchema,\n  /** What it was done to. `label` is its name at the time, when it has one. */\n  target: z.object({ subject: subjectSchema, id: objectIdSchema, label: z.string().nullable() }),\n  /** The specifics, by action (the role granted, a reason given). Never a secret. */\n  detail: z.record(z.string(), z.union([z.string(), z.number(), z.boolean(), z.null()])),\n  at: z.iso.datetime(),\n});\nexport type AuditEntry = z.infer<typeof auditEntrySchema>;\n\nexport const auditPageSchema = paginatedSchema(auditEntrySchema);\nexport type AuditPage = z.infer<typeof auditPageSchema>;\n"]}