founder-schema 0.8.0 → 0.9.0

package/dist/domains/members/members.js.map

@@ -1 +1 @@
-{"version":3,"file":"members.js","sourceRoot":"","sources":["../../../src/domains/members/members.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,qBAAqB,EACrB,qBAAqB,EACrB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAU,CAAC;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAG/D,sCAAsC;AACtC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;AAGzE;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,qBAAqB,CAAC,MAAM,CAAC;IACrE,CAAC,EAAE,qBAAqB,CAAC,iBAAiB,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC;IAC3E,2CAA2C;IAC3C,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC;CAC1E,CAAC,CAAC;AAIH,gCAAgC;AAChC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,cAAc;IAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,0EAA0E;IAC1E,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B,gDAAgD;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,kBAAkB;IAC1B,qEAAqE;IACrE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC1B,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAC,mBAAmB,CAAC,CAAC;AAG9E,6BAA6B;AAC7B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,+CAA+C;IAC/C,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzE,CAAC,CAAC;AAGH,qCAAqC;AACrC,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,MAAM,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,gDAAgD;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,6EAA6E;QAC7E,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,gCAAgC;QAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACjC,CAAC;IACF,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,0DAA0D;IAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;QACvB,4EAA4E;QAC5E,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;QAC3C,yEAAyE;QACzE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;KAC1B,CAAC;IACF,gEAAgE;IAChE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAGH,sFAAsF;AACtF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;CAChF,CAAC,CAAC","sourcesContent":["/**\n * founder-schema: the staff member directory\n *\n *   GET    /api/v1/members                        ?q&status&role&limit&cursor\n *   GET    /api/v1/members/:memberId              one member, as staff see them\n *   POST   /api/v1/members/:memberId/suspension   { reason }  suspend\n *   DELETE /api/v1/members/:memberId/suspension               lift it\n *\n * Every staff role has a Members tab: a moderator looks up who wrote\n * something, a support agent finds the person who wrote in, a manager decides\n * on a suspension. What each sees is the server's call, per field: a\n * moderator gets no email (`email: null`), because finding a member's\n * address is support's job, not moderation's.\n *\n * A SUSPENDED member cannot use the product at all, on any device, from the\n * next request on (every call answers `ACCOUNT_SUSPENDED`); their posts stay\n * up unless moderated separately, and a staff role they were acting in is\n * switched off. Lifting it restores everything else.\n *\n * SEARCH (`q`) finds people by the start of their name or handle among listed\n * founders, or by their exact email among everyone (only for a role that may\n * see emails: a moderator's email search finds nothing). It returns up to\n * `limit` matches in one page (type more to narrow), not a pageable list. Who may suspend whom is the access policy's: never\n * yourself, never a superadmin, and a manager never a fellow manager.\n *\n * Each detail carries a `viewer` block of what the asking staff member may do\n * to THIS member, worked out by the server, so the screen shows only the\n * buttons that will work.\n *\n * @module founder-schema/domains/members\n */\n\nimport { z } from 'zod';\nimport { platformRoleSchema } from '../../access/roles.js';\nimport {\n  emptyStringToUndefined,\n  objectIdSchema,\n  optionalTrimmedString,\n  paginationQuerySchema,\n  usernameSchema,\n} from '../../core/common.js';\nimport {\n  MEMBER_SEARCH_MAX,\n  SUSPENSION_REASON_MAX,\n  SUSPENSION_REASON_MIN,\n} from '../../core/limits.js';\nimport { paginatedSchema } from '../../core/responses.js';\n\n/** What staff can see an account's state as. A deleted account is not listed. */\nexport const MEMBER_STATUS_VALUES = ['active', 'suspended'] as const;\nexport const memberStatusSchema = z.enum(MEMBER_STATUS_VALUES);\nexport type MemberStatus = z.infer<typeof memberStatusSchema>;\n\n/** `:memberId` in the paths above. */\nexport const memberParamsSchema = z.object({ memberId: objectIdSchema });\nexport type MemberParams = z.infer<typeof memberParamsSchema>;\n\n/**\n * The directory's query. `q` is a name or handle prefix, or a whole email\n * address (anything with an `@` is matched as an email, exactly). An emptied\n * box is \"no search\", not an error.\n */\nexport const memberDirectoryQuerySchema = paginationQuerySchema.extend({\n  q: optionalTrimmedString(MEMBER_SEARCH_MAX),\n  status: z.preprocess(emptyStringToUndefined, memberStatusSchema.optional()),\n  /** Only people holding this staff role. */\n  role: z.preprocess(emptyStringToUndefined, platformRoleSchema.optional()),\n});\nexport type MemberDirectoryQuery = z.infer<typeof memberDirectoryQuerySchema>;\nexport type MemberDirectoryQueryInput = z.input<typeof memberDirectoryQuerySchema>;\n\n/** One row of the directory. */\nexport const memberSummarySchema = z.object({\n  id: objectIdSchema,\n  displayName: z.string(),\n  /** Null when they have no founder profile (never finished onboarding). */\n  username: usernameSchema.nullable(),\n  avatarUrl: z.url().nullable(),\n  /** Null when the asking role may not see it. */\n  email: z.string().nullable(),\n  status: memberStatusSchema,\n  /** Staff roles held, highest first. Empty for an ordinary member. */\n  roles: z.array(platformRoleSchema),\n  joinedAt: z.iso.datetime(),\n  lastActiveAt: z.iso.datetime().nullable(),\n});\nexport type MemberSummary = z.infer<typeof memberSummarySchema>;\n\nexport const memberDirectoryPageSchema = paginatedSchema(memberSummarySchema);\nexport type MemberDirectoryPage = z.infer<typeof memberDirectoryPageSchema>;\n\n/** A suspension in force. */\nexport const suspensionSchema = z.object({\n  since: z.iso.datetime(),\n  reason: z.string(),\n  /** Who suspended them, by name at the time. */\n  by: z.object({ id: objectIdSchema, displayName: z.string() }).nullable(),\n});\nexport type Suspension = z.infer<typeof suspensionSchema>;\n\n/** One member, as staff see them. */\nexport const memberDetailSchema = memberSummarySchema.extend({\n  headline: z.string().nullable(),\n  /** Their city, as declared on their profile. */\n  city: z.string().nullable(),\n  counts: z.object({\n    posts: z.number().int().min(0),\n    polls: z.number().int().min(0),\n    comments: z.number().int().min(0),\n    /** Reports filed about their posts, polls and comments that are still up. */\n    reportsAgainst: z.number().int().min(0),\n    /** Tickets they have raised. */\n    tickets: z.number().int().min(0),\n  }),\n  suspension: suspensionSchema.nullable(),\n  /** What the asking staff member may do to this member. */\n  viewer: z.object({\n    canSuspend: z.boolean(),\n    /** Roles the asker may grant or revoke on this member (never their own). */\n    grantableRoles: z.array(platformRoleSchema),\n    /** May clear this member's forgotten MPIN (superadmin, someone else). */\n    canResetMpin: z.boolean(),\n  }),\n  /** Whether they have set an MPIN. Only meaningful for staff. */\n  mpinSet: z.boolean(),\n});\nexport type MemberDetail = z.infer<typeof memberDetailSchema>;\n\n/** `POST /members/:memberId/suspension`. The reason is on record in the audit log. */\nexport const suspendMemberBodySchema = z.object({\n  reason: z.string().trim().min(SUSPENSION_REASON_MIN).max(SUSPENSION_REASON_MAX),\n});\nexport type SuspendMemberBody = z.infer<typeof suspendMemberBodySchema>;\n"]}
+{"version":3,"file":"members.js","sourceRoot":"","sources":["../../../src/domains/members/members.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,qBAAqB,EACrB,qBAAqB,EACrB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAU,CAAC;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAG/D,sCAAsC;AACtC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;AAGzE;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,qBAAqB,CAAC,MAAM,CAAC;IACrE,CAAC,EAAE,qBAAqB,CAAC,iBAAiB,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC;IAC3E,2CAA2C;IAC3C,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC;CAC1E,CAAC,CAAC;AAIH,gCAAgC;AAChC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,cAAc;IAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,0EAA0E;IAC1E,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B,gDAAgD;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,kBAAkB;IAC1B,qEAAqE;IACrE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC1B,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAC,mBAAmB,CAAC,CAAC;AAG9E,6BAA6B;AAC7B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,+CAA+C;IAC/C,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzE,CAAC,CAAC;AAGH,qCAAqC;AACrC,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,MAAM,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,gDAAgD;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,6EAA6E;QAC7E,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,gCAAgC;QAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACjC,CAAC;IACF,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,0DAA0D;IAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;QACvB,4EAA4E;QAC5E,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;QAC3C,yEAAyE;QACzE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;QACzB,2FAA2F;QAC3F,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;KACjD,CAAC;IACF,qEAAqE;IACrE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACvC,gEAAgE;IAChE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAGH,sFAAsF;AACtF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;CAChF,CAAC,CAAC","sourcesContent":["/**\n * founder-schema: the staff member directory\n *\n *   GET    /api/v1/members                        ?q&status&role&limit&cursor\n *   GET    /api/v1/members/:memberId              one member, as staff see them\n *   POST   /api/v1/members/:memberId/suspension   { reason }  suspend\n *   DELETE /api/v1/members/:memberId/suspension               lift it\n *\n * Every staff role has a Members tab: a moderator looks up who wrote\n * something, a support agent finds the person who wrote in, a manager decides\n * on a suspension. What each sees is the server's call, per field: a\n * moderator gets no email (`email: null`), because finding a member's\n * address is support's job, not moderation's.\n *\n * A SUSPENDED member cannot use the product at all, on any device, from the\n * next request on (every call answers `ACCOUNT_SUSPENDED`); their posts stay\n * up unless moderated separately, and a staff role they were acting in is\n * switched off. Lifting it restores everything else.\n *\n * SEARCH (`q`) finds people by the start of their name or handle among listed\n * founders, or by their exact email among everyone (only for a role that may\n * see emails: a moderator's email search finds nothing). It returns up to\n * `limit` matches in one page (type more to narrow), not a pageable list. Who may suspend whom is the access policy's: never\n * yourself, never a superadmin, and a manager never a fellow manager.\n *\n * Each detail carries a `viewer` block of what the asking staff member may do\n * to THIS member, worked out by the server, so the screen shows only the\n * buttons that will work.\n *\n * @module founder-schema/domains/members\n */\n\nimport { z } from 'zod';\nimport { capabilitySchema } from '../../access/capabilities.js';\nimport { platformRoleSchema } from '../../access/roles.js';\nimport {\n  emptyStringToUndefined,\n  objectIdSchema,\n  optionalTrimmedString,\n  paginationQuerySchema,\n  usernameSchema,\n} from '../../core/common.js';\nimport {\n  MEMBER_SEARCH_MAX,\n  SUSPENSION_REASON_MAX,\n  SUSPENSION_REASON_MIN,\n} from '../../core/limits.js';\nimport { paginatedSchema } from '../../core/responses.js';\n\n/** What staff can see an account's state as. A deleted account is not listed. */\nexport const MEMBER_STATUS_VALUES = ['active', 'suspended'] as const;\nexport const memberStatusSchema = z.enum(MEMBER_STATUS_VALUES);\nexport type MemberStatus = z.infer<typeof memberStatusSchema>;\n\n/** `:memberId` in the paths above. */\nexport const memberParamsSchema = z.object({ memberId: objectIdSchema });\nexport type MemberParams = z.infer<typeof memberParamsSchema>;\n\n/**\n * The directory's query. `q` is a name or handle prefix, or a whole email\n * address (anything with an `@` is matched as an email, exactly). An emptied\n * box is \"no search\", not an error.\n */\nexport const memberDirectoryQuerySchema = paginationQuerySchema.extend({\n  q: optionalTrimmedString(MEMBER_SEARCH_MAX),\n  status: z.preprocess(emptyStringToUndefined, memberStatusSchema.optional()),\n  /** Only people holding this staff role. */\n  role: z.preprocess(emptyStringToUndefined, platformRoleSchema.optional()),\n});\nexport type MemberDirectoryQuery = z.infer<typeof memberDirectoryQuerySchema>;\nexport type MemberDirectoryQueryInput = z.input<typeof memberDirectoryQuerySchema>;\n\n/** One row of the directory. */\nexport const memberSummarySchema = z.object({\n  id: objectIdSchema,\n  displayName: z.string(),\n  /** Null when they have no founder profile (never finished onboarding). */\n  username: usernameSchema.nullable(),\n  avatarUrl: z.url().nullable(),\n  /** Null when the asking role may not see it. */\n  email: z.string().nullable(),\n  status: memberStatusSchema,\n  /** Staff roles held, highest first. Empty for an ordinary member. */\n  roles: z.array(platformRoleSchema),\n  joinedAt: z.iso.datetime(),\n  lastActiveAt: z.iso.datetime().nullable(),\n});\nexport type MemberSummary = z.infer<typeof memberSummarySchema>;\n\nexport const memberDirectoryPageSchema = paginatedSchema(memberSummarySchema);\nexport type MemberDirectoryPage = z.infer<typeof memberDirectoryPageSchema>;\n\n/** A suspension in force. */\nexport const suspensionSchema = z.object({\n  since: z.iso.datetime(),\n  reason: z.string(),\n  /** Who suspended them, by name at the time. */\n  by: z.object({ id: objectIdSchema, displayName: z.string() }).nullable(),\n});\nexport type Suspension = z.infer<typeof suspensionSchema>;\n\n/** One member, as staff see them. */\nexport const memberDetailSchema = memberSummarySchema.extend({\n  headline: z.string().nullable(),\n  /** Their city, as declared on their profile. */\n  city: z.string().nullable(),\n  counts: z.object({\n    posts: z.number().int().min(0),\n    polls: z.number().int().min(0),\n    comments: z.number().int().min(0),\n    /** Reports filed about their posts, polls and comments that are still up. */\n    reportsAgainst: z.number().int().min(0),\n    /** Tickets they have raised. */\n    tickets: z.number().int().min(0),\n  }),\n  suspension: suspensionSchema.nullable(),\n  /** What the asking staff member may do to this member. */\n  viewer: z.object({\n    canSuspend: z.boolean(),\n    /** Roles the asker may grant or revoke on this member (never their own). */\n    grantableRoles: z.array(platformRoleSchema),\n    /** May clear this member's forgotten MPIN (superadmin, someone else). */\n    canResetMpin: z.boolean(),\n    /** Capabilities the asker may grant or revoke on this member (never their own) (0.9.0). */\n    grantableCapabilities: z.array(capabilitySchema),\n  }),\n  /** The capabilities they hold (0.9.0), e.g. `create_communities`. */\n  capabilities: z.array(capabilitySchema),\n  /** Whether they have set an MPIN. Only meaningful for staff. */\n  mpinSet: z.boolean(),\n});\nexport type MemberDetail = z.infer<typeof memberDetailSchema>;\n\n/** `POST /members/:memberId/suspension`. The reason is on record in the audit log. */\nexport const suspendMemberBodySchema = z.object({\n  reason: z.string().trim().min(SUSPENSION_REASON_MIN).max(SUSPENSION_REASON_MAX),\n});\nexport type SuspendMemberBody = z.infer<typeof suspendMemberBodySchema>;\n"]}

package/dist/domains/moderation/moderation.d.ts

@@ -53,8 +53,8 @@ export type ModerationContextKind = z.infer<typeof moderationContextKindSchema>;
 /** Where a post, poll, comment, product or review stands. */
 export declare const MODERATION_STATE_VALUES: readonly ["visible", "hidden", "removed"];
 export declare const moderationStateSchema: z.ZodEnum<{
-    visible: "visible";
     hidden: "hidden";
+    visible: "visible";
     removed: "removed";
 }>;
 export type ModerationState = z.infer<typeof moderationStateSchema>;
@@ -109,8 +109,8 @@ export declare const moderationItemSchema: z.ZodObject<{
     }, z.core.$strip>;
     createdAt: z.ZodISODateTime;
     state: z.ZodEnum<{
-        visible: "visible";
         hidden: "hidden";
+        visible: "visible";
         removed: "removed";
     }>;
     reports: z.ZodObject<{
@@ -167,8 +167,8 @@ export declare const moderationPageSchema: z.ZodObject<{
         }, z.core.$strip>;
         createdAt: z.ZodISODateTime;
         state: z.ZodEnum<{
-            visible: "visible";
             hidden: "hidden";
+            visible: "visible";
             removed: "removed";
         }>;
         reports: z.ZodObject<{
@@ -203,8 +203,8 @@ export declare const moderationContentQuerySchema: z.ZodObject<{
     limit: z.ZodPreprocess<z.ZodDefault<z.ZodCoercedNumber<unknown>>, unknown>;
     cursor: z.ZodOptional<z.ZodString>;
     state: z.ZodPreprocess<z.ZodDefault<z.ZodEnum<{
-        visible: "visible";
         hidden: "hidden";
+        visible: "visible";
         removed: "removed";
     }>>, unknown>;
 }, z.core.$strip>;

package/dist/domains/notifications/notifications.d.ts

@@ -43,12 +43,17 @@ import { z } from 'zod';
  *   post_reaction            someone reacted to your post or poll (0.8.0)
  *   comment_reaction         someone reacted to your comment (0.8.0)
  *   repost                   someone reposted your post or poll (0.8.0)
+ *   community_join_request   someone asked to join a community you moderate (0.9.0)
+ *   community_request_approved  your request to join was approved (always delivered)
+ *   community_invite         a community invited you (always delivered)
+ *   community_announcement   a community you are in pinned an announcement for everyone
+ *   community_suggestion_decided  your community suggestion was approved or declined (always delivered)
  *
  * The three 0.8.0 kinds merge per target like the others. A reaction counts
  * once: changing it to another type is not a new event, and taking it back
  * does not take the event back.
  */
-export declare const NOTIFICATION_KIND_VALUES: readonly ["comment_on_post", "reply_to_comment", "product_invite", "product_invite_accepted", "product_review", "review_reply", "feedback_helpful", "tester_confirmed", "post_reaction", "comment_reaction", "repost"];
+export declare const NOTIFICATION_KIND_VALUES: readonly ["comment_on_post", "reply_to_comment", "product_invite", "product_invite_accepted", "product_review", "review_reply", "feedback_helpful", "tester_confirmed", "post_reaction", "comment_reaction", "repost", "community_join_request", "community_request_approved", "community_invite", "community_announcement", "community_suggestion_decided"];
 export declare const notificationKindSchema: z.ZodEnum<{
     feedback_helpful: "feedback_helpful";
     tester_confirmed: "tester_confirmed";
@@ -61,11 +66,17 @@ export declare const notificationKindSchema: z.ZodEnum<{
     post_reaction: "post_reaction";
     comment_reaction: "comment_reaction";
     repost: "repost";
+    community_join_request: "community_join_request";
+    community_request_approved: "community_request_approved";
+    community_invite: "community_invite";
+    community_announcement: "community_announcement";
+    community_suggestion_decided: "community_suggestion_decided";
 }>;
 export type NotificationKind = z.infer<typeof notificationKindSchema>;
 /** The switches a member has, each covering one or more kinds. */
-export declare const NOTIFICATION_PREFERENCE_VALUES: readonly ["comments", "replies", "productActivity", "recognition", "reactions", "reposts"];
+export declare const NOTIFICATION_PREFERENCE_VALUES: readonly ["comments", "replies", "productActivity", "recognition", "reactions", "reposts", "communities"];
 export declare const notificationPreferenceSchema: z.ZodEnum<{
+    communities: "communities";
     comments: "comments";
     replies: "replies";
     productActivity: "productActivity";
@@ -90,6 +101,11 @@ export declare const NOTIFICATION_PREFERENCE_OF: {
     readonly post_reaction: "reactions";
     readonly comment_reaction: "reactions";
     readonly repost: "reposts";
+    readonly community_join_request: "communities";
+    readonly community_request_approved: null;
+    readonly community_invite: null;
+    readonly community_announcement: "communities";
+    readonly community_suggestion_decided: null;
 };
 /**
  * One row of the bell. Which of the optional targets are present depends on
@@ -106,6 +122,16 @@ export declare const NOTIFICATION_PREFERENCE_OF: {
  *   post_reaction            content, reaction
  *   comment_reaction         content, commentId, reaction, excerpt (your comment)
  *   repost                   content (yours, the one reposted), repostId (the latest repost, to read their words)
+ *   community_join_request   community
+ *   community_request_approved  community
+ *   community_invite         community
+ *   community_announcement   community, content (the pinned post or poll)
+ *   community_suggestion_decided  suggestion, community (once approved)
+ *
+ * Any row about something inside a community also carries `community`
+ * (0.9.0), whatever its kind. When the recipient leaves the community, is
+ * removed or is banned, its rows about that community lose their content,
+ * comment, excerpt and repost: what they could read there, they no longer can.
  *
  * A target that no longer exists (a deleted post, product or review) is
  * absent rather than pointing at a 404; the row still says what happened.
@@ -124,6 +150,11 @@ export declare const notificationSchema: z.ZodObject<{
         post_reaction: "post_reaction";
         comment_reaction: "comment_reaction";
         repost: "repost";
+        community_join_request: "community_join_request";
+        community_request_approved: "community_request_approved";
+        community_invite: "community_invite";
+        community_announcement: "community_announcement";
+        community_suggestion_decided: "community_suggestion_decided";
     }>;
     actor: z.ZodNullable<z.ZodObject<{
         userId: z.ZodString;
@@ -149,6 +180,27 @@ export declare const notificationSchema: z.ZodObject<{
     }, z.core.$strip>>;
     reviewId: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
     repostId: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    community: z.ZodOptional<z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        slug: z.ZodString;
+        name: z.ZodString;
+        iconUrl: z.ZodOptional<z.ZodURL>;
+        visibility: z.ZodEnum<{
+            public: "public";
+            private: "private";
+            hidden: "hidden";
+        }>;
+        archived: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    suggestion: z.ZodOptional<z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        name: z.ZodString;
+        status: z.ZodEnum<{
+            approved: "approved";
+            declined: "declined";
+        }>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
     role: z.ZodOptional<z.ZodEnum<{
         team: "team";
         cofounder: "cofounder";
@@ -183,6 +235,11 @@ export declare const notificationPageSchema: z.ZodObject<{
             post_reaction: "post_reaction";
             comment_reaction: "comment_reaction";
             repost: "repost";
+            community_join_request: "community_join_request";
+            community_request_approved: "community_request_approved";
+            community_invite: "community_invite";
+            community_announcement: "community_announcement";
+            community_suggestion_decided: "community_suggestion_decided";
         }>;
         actor: z.ZodNullable<z.ZodObject<{
             userId: z.ZodString;
@@ -208,6 +265,27 @@ export declare const notificationPageSchema: z.ZodObject<{
         }, z.core.$strip>>;
         reviewId: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
         repostId: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+        community: z.ZodOptional<z.ZodObject<{
+            id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+            slug: z.ZodString;
+            name: z.ZodString;
+            iconUrl: z.ZodOptional<z.ZodURL>;
+            visibility: z.ZodEnum<{
+                public: "public";
+                private: "private";
+                hidden: "hidden";
+            }>;
+            archived: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        suggestion: z.ZodOptional<z.ZodObject<{
+            id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+            name: z.ZodString;
+            status: z.ZodEnum<{
+                approved: "approved";
+                declined: "declined";
+            }>;
+            reason: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
         role: z.ZodOptional<z.ZodEnum<{
             team: "team";
             cofounder: "cofounder";
@@ -246,6 +324,7 @@ export declare const notificationPreferencesSchema: z.ZodObject<{
     recognition: z.ZodBoolean;
     reactions: z.ZodBoolean;
     reposts: z.ZodBoolean;
+    communities: z.ZodBoolean;
 }, z.core.$strip>;
 export type NotificationPreferences = z.infer<typeof notificationPreferencesSchema>;
 /** Only the switches that changed; no defaults (a patch states what was sent). */
@@ -256,6 +335,7 @@ export declare const updateNotificationPreferencesBodySchema: z.ZodObject<{
     recognition: z.ZodOptional<z.ZodBoolean>;
     reactions: z.ZodOptional<z.ZodBoolean>;
     reposts: z.ZodOptional<z.ZodBoolean>;
+    communities: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type UpdateNotificationPreferencesBody = z.infer<typeof updateNotificationPreferencesBodySchema>;
 //# sourceMappingURL=notifications.d.ts.map

package/dist/domains/notifications/notifications.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../../../src/domains/notifications/notifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,wBAAwB,wNAY3B,CAAC;AACX,eAAO,MAAM,sBAAsB;;;;;;;;;;;;EAAmC,CAAC;AACvE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,kEAAkE;AAClE,eAAO,MAAM,8BAA8B,4FAOjC,CAAC;AACX,eAAO,MAAM,4BAA4B;;;;;;;EAAyC,CAAC;AACnF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;CAYqC,CAAC;AAE7E;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAoC7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAsC,CAAC;AAC1E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,iBAAiB;AACjB,eAAO,MAAM,6BAA6B;;iBAExC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,wBAAwB;;iBAA+C,CAAC;AACrF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,+CAA+C;AAC/C,eAAO,MAAM,6BAA6B;;;;;;;iBASxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,kFAAkF;AAClF,eAAO,MAAM,uCAAuC;;;;;;;iBAOlD,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC"}
+{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../../../src/domains/notifications/notifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,wBAAwB,8VAiB3B,CAAC;AACX,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;EAAmC,CAAC;AACvE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,kEAAkE;AAClE,eAAO,MAAM,8BAA8B,2GAQjC,CAAC;AACX,eAAO,MAAM,4BAA4B;;;;;;;;EAAyC,CAAC;AACnF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;CAiBqC,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmD7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAsC,CAAC;AAC1E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,iBAAiB;AACjB,eAAO,MAAM,6BAA6B;;iBAExC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,wBAAwB;;iBAA+C,CAAC;AACrF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,+CAA+C;AAC/C,eAAO,MAAM,6BAA6B;;;;;;;;iBAWxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,kFAAkF;AAClF,eAAO,MAAM,uCAAuC;;;;;;;;iBAQlD,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC"}

package/dist/domains/notifications/notifications.js

@@ -32,6 +32,7 @@ import { z } from 'zod';
 import { objectIdSchema } from '../../core/common.js';
 import { NOTIFICATION_EXCERPT_MAX } from '../../core/limits.js';
 import { paginatedSchema } from '../../core/responses.js';
+import { communityChipSchema } from '../communities/communities.js';
 import { contentKindSchema, reactionTypeSchema } from '../feed/feed.js';
 import { productChipSchema, productInvitableRoleSchema } from '../products/products.js';
 import { memberBylineSchema } from '../profile/founder-profile.js';
@@ -49,6 +50,11 @@ import { memberBylineSchema } from '../profile/founder-profile.js';
  *   post_reaction            someone reacted to your post or poll (0.8.0)
  *   comment_reaction         someone reacted to your comment (0.8.0)
  *   repost                   someone reposted your post or poll (0.8.0)
+ *   community_join_request   someone asked to join a community you moderate (0.9.0)
+ *   community_request_approved  your request to join was approved (always delivered)
+ *   community_invite         a community invited you (always delivered)
+ *   community_announcement   a community you are in pinned an announcement for everyone
+ *   community_suggestion_decided  your community suggestion was approved or declined (always delivered)
  *
  * The three 0.8.0 kinds merge per target like the others. A reaction counts
  * once: changing it to another type is not a new event, and taking it back
@@ -66,6 +72,11 @@ export const NOTIFICATION_KIND_VALUES = [
     'post_reaction',
     'comment_reaction',
     'repost',
+    'community_join_request',
+    'community_request_approved',
+    'community_invite',
+    'community_announcement',
+    'community_suggestion_decided',
 ];
 export const notificationKindSchema = z.enum(NOTIFICATION_KIND_VALUES);
 /** The switches a member has, each covering one or more kinds. */
@@ -76,6 +87,7 @@ export const NOTIFICATION_PREFERENCE_VALUES = [
     'recognition',
     'reactions',
     'reposts',
+    'communities',
 ];
 export const notificationPreferenceSchema = z.enum(NOTIFICATION_PREFERENCE_VALUES);
 /**
@@ -94,6 +106,11 @@ export const NOTIFICATION_PREFERENCE_OF = {
     post_reaction: 'reactions',
     comment_reaction: 'reactions',
     repost: 'reposts',
+    community_join_request: 'communities',
+    community_request_approved: null,
+    community_invite: null,
+    community_announcement: 'communities',
+    community_suggestion_decided: null,
 };
 /**
  * One row of the bell. Which of the optional targets are present depends on
@@ -110,6 +127,16 @@ export const NOTIFICATION_PREFERENCE_OF = {
  *   post_reaction            content, reaction
  *   comment_reaction         content, commentId, reaction, excerpt (your comment)
  *   repost                   content (yours, the one reposted), repostId (the latest repost, to read their words)
+ *   community_join_request   community
+ *   community_request_approved  community
+ *   community_invite         community
+ *   community_announcement   community, content (the pinned post or poll)
+ *   community_suggestion_decided  suggestion, community (once approved)
+ *
+ * Any row about something inside a community also carries `community`
+ * (0.9.0), whatever its kind. When the recipient leaves the community, is
+ * removed or is banned, its rows about that community lose their content,
+ * comment, excerpt and repost: what they could read there, they no longer can.
  *
  * A target that no longer exists (a deleted post, product or review) is
  * absent rather than pointing at a 404; the row still says what happened.
@@ -134,6 +161,21 @@ export const notificationSchema = z.object({
      * reposter's words above your post. Gone once that repost is.
      */
     repostId: objectIdSchema.optional(),
+    /**
+     * The community the row is about, or that its content is in (0.9.0). Absent
+     * once that community is deleted, or the recipient may no longer see it.
+     */
+    community: communityChipSchema.optional(),
+    /** For `community_suggestion_decided` (0.9.0): which suggestion, and how it went. */
+    suggestion: z
+        .object({
+        id: objectIdSchema,
+        name: z.string(),
+        status: z.enum(['approved', 'declined']),
+        /** Why it was declined. */
+        reason: z.string().optional(),
+    })
+        .optional(),
     /** For `product_invite`: the role offered. */
     role: productInvitableRoleSchema.optional(),
     /** For the reaction kinds: the latest reaction, as it is now (0.8.0). */
@@ -167,6 +209,8 @@ export const notificationPreferencesSchema = z.object({
     reactions: z.boolean(),
     /** Reposts of your posts and polls (0.8.0). */
     reposts: z.boolean(),
+    /** Announcements in your communities, and join requests to communities you moderate (0.9.0). */
+    communities: z.boolean(),
 });
 /** Only the switches that changed; no defaults (a patch states what was sent). */
 export const updateNotificationPreferencesBodySchema = z.object({
@@ -176,5 +220,6 @@ export const updateNotificationPreferencesBodySchema = z.object({
     recognition: z.boolean().optional(),
     reactions: z.boolean().optional(),
     reposts: z.boolean().optional(),
+    communities: z.boolean().optional(),
 });
 //# sourceMappingURL=notifications.js.map

package/dist/domains/notifications/notifications.js.map

@@ -1 +1 @@
-{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../../src/domains/notifications/notifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;IAChB,yBAAyB;IACzB,gBAAgB;IAChB,cAAc;IACd,kBAAkB;IAClB,kBAAkB;IAClB,eAAe;IACf,kBAAkB;IAClB,QAAQ;CACA,CAAC;AACX,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AAGvE,kEAAkE;AAClE,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,UAAU;IACV,SAAS;IACT,iBAAiB;IACjB,aAAa;IACb,WAAW;IACX,SAAS;CACD,CAAC;AACX,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;AAGnF;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,eAAe,EAAE,UAAU;IAC3B,gBAAgB,EAAE,SAAS;IAC3B,cAAc,EAAE,IAAI;IACpB,uBAAuB,EAAE,iBAAiB;IAC1C,cAAc,EAAE,iBAAiB;IACjC,YAAY,EAAE,iBAAiB;IAC/B,gBAAgB,EAAE,aAAa;IAC/B,gBAAgB,EAAE,aAAa;IAC/B,aAAa,EAAE,WAAW;IAC1B,gBAAgB,EAAE,WAAW;IAC7B,MAAM,EAAE,SAAS;CACyD,CAAC;AAE7E;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,sBAAsB;IAC5B,oEAAoE;IACpE,KAAK,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACpC;;;;OAIG;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7E,SAAS,EAAE,cAAc,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC;;;OAGG;IACH,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,8CAA8C;IAC9C,IAAI,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC3C,yEAAyE;IACzE,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACvC;;;;;OAKG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;IAC5D,2FAA2F;IAC3F,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnC,+CAA+C;IAC/C,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAe,CAAC,kBAAkB,CAAC,CAAC;AAG1E,iBAAiB;AACjB,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACvC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC;AAGrF,+CAA+C;AAC/C,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,2DAA2D;IAC3D,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,+CAA+C;IAC/C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAGH,kFAAkF;AAClF,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — Notifications: the bell\n *\n * The design the user approved on 2026-10-05 (\"Founder Circle Schema Review\"):\n *\n *   - ONE ROW PER RECIPIENT, written when the event happens.\n *   - REPEATS MERGE: a second comment on your post updates the same row\n *     (\"2 new comments, latest from Asha\"), it never adds one. `count` is how\n *     many events it holds and `actor` the latest. A member repeating the same\n *     act (reacting, taking it back, reacting again) does not ring it again.\n *   - THE ACTOR IS LOOKED UP WHEN READ, never copied in: a renamed member shows\n *     their new name, and a deleted one shows as null (\"A former member\").\n *   - PREFERENCES ARE CHECKED before writing (Jansathi stores them and never\n *     reads them). A team invitation is always delivered: it needs an answer.\n *   - KEPT `NOTIFICATION_RETENTION_DAYS`, then deleted.\n *   - Nobody is notified of their own action.\n *\n * In-app only. Push stays chat's (async-service) until a channel is designed:\n * a client polls the unread count (on focus, and every minute while visible).\n *\n * Routes (all signed in):\n *   GET  /api/v1/notifications                  paginationQuerySchema -> notificationPageSchema\n *   GET  /api/v1/notifications/unread-count     -> notificationUnreadCountSchema\n *   POST /api/v1/notifications/read             mark every one read -> notificationUnreadCountSchema\n *   PUT  /api/v1/notifications/:notificationId/read   -> notificationSchema\n *   GET  /api/v1/notifications/preferences      -> notificationPreferencesSchema\n *   PUT  /api/v1/notifications/preferences      updateNotificationPreferencesBodySchema -> notificationPreferencesSchema\n *\n * @module founder-schema/domains/notifications\n */\n\nimport { z } from 'zod';\nimport { objectIdSchema } from '../../core/common.js';\nimport { NOTIFICATION_EXCERPT_MAX } from '../../core/limits.js';\nimport { paginatedSchema } from '../../core/responses.js';\nimport { contentKindSchema, reactionTypeSchema } from '../feed/feed.js';\nimport { productChipSchema, productInvitableRoleSchema } from '../products/products.js';\nimport { memberBylineSchema } from '../profile/founder-profile.js';\n\n/**\n * What happened. ⚠ Stored per row: append only.\n *\n *   comment_on_post          someone commented on your post or poll\n *   reply_to_comment         someone replied to your comment\n *   product_invite           a team invited you (always delivered)\n *   product_invite_accepted  someone accepted your team's invitation\n *   product_review           someone reviewed a product you are on the team of\n *   review_reply             a product's team answered your review\n *   feedback_helpful         a team marked your feedback as having helped\n *   tester_confirmed         a team confirmed you tested their product\n *   post_reaction            someone reacted to your post or poll (0.8.0)\n *   comment_reaction         someone reacted to your comment (0.8.0)\n *   repost                   someone reposted your post or poll (0.8.0)\n *\n * The three 0.8.0 kinds merge per target like the others. A reaction counts\n * once: changing it to another type is not a new event, and taking it back\n * does not take the event back.\n */\nexport const NOTIFICATION_KIND_VALUES = [\n  'comment_on_post',\n  'reply_to_comment',\n  'product_invite',\n  'product_invite_accepted',\n  'product_review',\n  'review_reply',\n  'feedback_helpful',\n  'tester_confirmed',\n  'post_reaction',\n  'comment_reaction',\n  'repost',\n] as const;\nexport const notificationKindSchema = z.enum(NOTIFICATION_KIND_VALUES);\nexport type NotificationKind = z.infer<typeof notificationKindSchema>;\n\n/** The switches a member has, each covering one or more kinds. */\nexport const NOTIFICATION_PREFERENCE_VALUES = [\n  'comments',\n  'replies',\n  'productActivity',\n  'recognition',\n  'reactions',\n  'reposts',\n] as const;\nexport const notificationPreferenceSchema = z.enum(NOTIFICATION_PREFERENCE_VALUES);\nexport type NotificationPreference = z.infer<typeof notificationPreferenceSchema>;\n\n/**\n * Which switch silences which kind. Null: always delivered. Exhaustive by\n * type, so a kind added without a decision here does not compile.\n */\nexport const NOTIFICATION_PREFERENCE_OF = {\n  comment_on_post: 'comments',\n  reply_to_comment: 'replies',\n  product_invite: null,\n  product_invite_accepted: 'productActivity',\n  product_review: 'productActivity',\n  review_reply: 'productActivity',\n  feedback_helpful: 'recognition',\n  tester_confirmed: 'recognition',\n  post_reaction: 'reactions',\n  comment_reaction: 'reactions',\n  repost: 'reposts',\n} as const satisfies Record<NotificationKind, NotificationPreference | null>;\n\n/**\n * One row of the bell. Which of the optional targets are present depends on\n * `kind`:\n *\n *   comment_on_post          content, commentId\n *   reply_to_comment         content, commentId (the reply)\n *   product_invite           product, role\n *   product_invite_accepted  product\n *   product_review           product, reviewId\n *   review_reply             product, reviewId\n *   feedback_helpful         product, content, commentId\n *   tester_confirmed         product\n *   post_reaction            content, reaction\n *   comment_reaction         content, commentId, reaction, excerpt (your comment)\n *   repost                   content (yours, the one reposted), repostId (the latest repost, to read their words)\n *\n * A target that no longer exists (a deleted post, product or review) is\n * absent rather than pointing at a 404; the row still says what happened.\n */\nexport const notificationSchema = z.object({\n  id: objectIdSchema,\n  kind: notificationKindSchema,\n  /** The latest person to do it, live; null for a deleted account. */\n  actor: memberBylineSchema.nullable(),\n  /**\n   * How many EVENTS this row merges, at least 1: three comments by one person\n   * are 3. Word it as events (\"3 new comments, latest from Asha\"), never as\n   * people (\"Asha and 2 others\"), which this count does not know.\n   */\n  count: z.number().int().positive(),\n  content: z.object({ kind: contentKindSchema, id: objectIdSchema }).optional(),\n  commentId: objectIdSchema.optional(),\n  product: productChipSchema.optional(),\n  reviewId: objectIdSchema.optional(),\n  /**\n   * For `repost` (0.8.0): the latest repost itself, so the row opens the\n   * reposter's words above your post. Gone once that repost is.\n   */\n  repostId: objectIdSchema.optional(),\n  /** For `product_invite`: the role offered. */\n  role: productInvitableRoleSchema.optional(),\n  /** For the reaction kinds: the latest reaction, as it is now (0.8.0). */\n  reaction: reactionTypeSchema.optional(),\n  /**\n   * The first words of what was written, for the comment and review kinds\n   * (the latest one, on a merged row), cut to `NOTIFICATION_EXCERPT_MAX`. Gone\n   * when that comment or review is deleted or hidden, and when its writer's\n   * account is.\n   */\n  excerpt: z.string().max(NOTIFICATION_EXCERPT_MAX).optional(),\n  /** Null until opened (or until \"mark all read\"). A merged repeat makes it unread again. */\n  readAt: z.iso.datetime().nullable(),\n  /** When it last happened: the list's order. */\n  lastAt: z.iso.datetime(),\n  createdAt: z.iso.datetime(),\n});\nexport type Notification = z.infer<typeof notificationSchema>;\n\nexport const notificationPageSchema = paginatedSchema(notificationSchema);\nexport type NotificationPage = z.infer<typeof notificationPageSchema>;\n\n/** The badge. */\nexport const notificationUnreadCountSchema = z.object({\n  unread: z.number().int().nonnegative(),\n});\nexport type NotificationUnreadCount = z.infer<typeof notificationUnreadCountSchema>;\n\nexport const notificationParamsSchema = z.object({ notificationId: objectIdSchema });\nexport type NotificationParams = z.infer<typeof notificationParamsSchema>;\n\n/** Every switch, as stored (on by default). */\nexport const notificationPreferencesSchema = z.object({\n  comments: z.boolean(),\n  replies: z.boolean(),\n  productActivity: z.boolean(),\n  recognition: z.boolean(),\n  /** Reactions to your posts, polls and comments (0.8.0). */\n  reactions: z.boolean(),\n  /** Reposts of your posts and polls (0.8.0). */\n  reposts: z.boolean(),\n});\nexport type NotificationPreferences = z.infer<typeof notificationPreferencesSchema>;\n\n/** Only the switches that changed; no defaults (a patch states what was sent). */\nexport const updateNotificationPreferencesBodySchema = z.object({\n  comments: z.boolean().optional(),\n  replies: z.boolean().optional(),\n  productActivity: z.boolean().optional(),\n  recognition: z.boolean().optional(),\n  reactions: z.boolean().optional(),\n  reposts: z.boolean().optional(),\n});\nexport type UpdateNotificationPreferencesBody = z.infer<\n  typeof updateNotificationPreferencesBodySchema\n>;\n"]}
+{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../../src/domains/notifications/notifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;IAChB,yBAAyB;IACzB,gBAAgB;IAChB,cAAc;IACd,kBAAkB;IAClB,kBAAkB;IAClB,eAAe;IACf,kBAAkB;IAClB,QAAQ;IACR,wBAAwB;IACxB,4BAA4B;IAC5B,kBAAkB;IAClB,wBAAwB;IACxB,8BAA8B;CACtB,CAAC;AACX,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AAGvE,kEAAkE;AAClE,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,UAAU;IACV,SAAS;IACT,iBAAiB;IACjB,aAAa;IACb,WAAW;IACX,SAAS;IACT,aAAa;CACL,CAAC;AACX,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;AAGnF;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,eAAe,EAAE,UAAU;IAC3B,gBAAgB,EAAE,SAAS;IAC3B,cAAc,EAAE,IAAI;IACpB,uBAAuB,EAAE,iBAAiB;IAC1C,cAAc,EAAE,iBAAiB;IACjC,YAAY,EAAE,iBAAiB;IAC/B,gBAAgB,EAAE,aAAa;IAC/B,gBAAgB,EAAE,aAAa;IAC/B,aAAa,EAAE,WAAW;IAC1B,gBAAgB,EAAE,WAAW;IAC7B,MAAM,EAAE,SAAS;IACjB,sBAAsB,EAAE,aAAa;IACrC,0BAA0B,EAAE,IAAI;IAChC,gBAAgB,EAAE,IAAI;IACtB,sBAAsB,EAAE,aAAa;IACrC,4BAA4B,EAAE,IAAI;CACwC,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,sBAAsB;IAC5B,oEAAoE;IACpE,KAAK,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACpC;;;;OAIG;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7E,SAAS,EAAE,cAAc,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC;;;OAGG;IACH,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC;;;OAGG;IACH,SAAS,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACzC,qFAAqF;IACrF,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACxC,2BAA2B;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;SACD,QAAQ,EAAE;IACb,8CAA8C;IAC9C,IAAI,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC3C,yEAAyE;IACzE,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACvC;;;;;OAKG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;IAC5D,2FAA2F;IAC3F,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnC,+CAA+C;IAC/C,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAe,CAAC,kBAAkB,CAAC,CAAC;AAG1E,iBAAiB;AACjB,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACvC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC;AAGrF,+CAA+C;AAC/C,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,2DAA2D;IAC3D,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,+CAA+C;IAC/C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,gGAAgG;IAChG,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;CACzB,CAAC,CAAC;AAGH,kFAAkF;AAClF,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — Notifications: the bell\n *\n * The design the user approved on 2026-10-05 (\"Founder Circle Schema Review\"):\n *\n *   - ONE ROW PER RECIPIENT, written when the event happens.\n *   - REPEATS MERGE: a second comment on your post updates the same row\n *     (\"2 new comments, latest from Asha\"), it never adds one. `count` is how\n *     many events it holds and `actor` the latest. A member repeating the same\n *     act (reacting, taking it back, reacting again) does not ring it again.\n *   - THE ACTOR IS LOOKED UP WHEN READ, never copied in: a renamed member shows\n *     their new name, and a deleted one shows as null (\"A former member\").\n *   - PREFERENCES ARE CHECKED before writing (Jansathi stores them and never\n *     reads them). A team invitation is always delivered: it needs an answer.\n *   - KEPT `NOTIFICATION_RETENTION_DAYS`, then deleted.\n *   - Nobody is notified of their own action.\n *\n * In-app only. Push stays chat's (async-service) until a channel is designed:\n * a client polls the unread count (on focus, and every minute while visible).\n *\n * Routes (all signed in):\n *   GET  /api/v1/notifications                  paginationQuerySchema -> notificationPageSchema\n *   GET  /api/v1/notifications/unread-count     -> notificationUnreadCountSchema\n *   POST /api/v1/notifications/read             mark every one read -> notificationUnreadCountSchema\n *   PUT  /api/v1/notifications/:notificationId/read   -> notificationSchema\n *   GET  /api/v1/notifications/preferences      -> notificationPreferencesSchema\n *   PUT  /api/v1/notifications/preferences      updateNotificationPreferencesBodySchema -> notificationPreferencesSchema\n *\n * @module founder-schema/domains/notifications\n */\n\nimport { z } from 'zod';\nimport { objectIdSchema } from '../../core/common.js';\nimport { NOTIFICATION_EXCERPT_MAX } from '../../core/limits.js';\nimport { paginatedSchema } from '../../core/responses.js';\nimport { communityChipSchema } from '../communities/communities.js';\nimport { contentKindSchema, reactionTypeSchema } from '../feed/feed.js';\nimport { productChipSchema, productInvitableRoleSchema } from '../products/products.js';\nimport { memberBylineSchema } from '../profile/founder-profile.js';\n\n/**\n * What happened. ⚠ Stored per row: append only.\n *\n *   comment_on_post          someone commented on your post or poll\n *   reply_to_comment         someone replied to your comment\n *   product_invite           a team invited you (always delivered)\n *   product_invite_accepted  someone accepted your team's invitation\n *   product_review           someone reviewed a product you are on the team of\n *   review_reply             a product's team answered your review\n *   feedback_helpful         a team marked your feedback as having helped\n *   tester_confirmed         a team confirmed you tested their product\n *   post_reaction            someone reacted to your post or poll (0.8.0)\n *   comment_reaction         someone reacted to your comment (0.8.0)\n *   repost                   someone reposted your post or poll (0.8.0)\n *   community_join_request   someone asked to join a community you moderate (0.9.0)\n *   community_request_approved  your request to join was approved (always delivered)\n *   community_invite         a community invited you (always delivered)\n *   community_announcement   a community you are in pinned an announcement for everyone\n *   community_suggestion_decided  your community suggestion was approved or declined (always delivered)\n *\n * The three 0.8.0 kinds merge per target like the others. A reaction counts\n * once: changing it to another type is not a new event, and taking it back\n * does not take the event back.\n */\nexport const NOTIFICATION_KIND_VALUES = [\n  'comment_on_post',\n  'reply_to_comment',\n  'product_invite',\n  'product_invite_accepted',\n  'product_review',\n  'review_reply',\n  'feedback_helpful',\n  'tester_confirmed',\n  'post_reaction',\n  'comment_reaction',\n  'repost',\n  'community_join_request',\n  'community_request_approved',\n  'community_invite',\n  'community_announcement',\n  'community_suggestion_decided',\n] as const;\nexport const notificationKindSchema = z.enum(NOTIFICATION_KIND_VALUES);\nexport type NotificationKind = z.infer<typeof notificationKindSchema>;\n\n/** The switches a member has, each covering one or more kinds. */\nexport const NOTIFICATION_PREFERENCE_VALUES = [\n  'comments',\n  'replies',\n  'productActivity',\n  'recognition',\n  'reactions',\n  'reposts',\n  'communities',\n] as const;\nexport const notificationPreferenceSchema = z.enum(NOTIFICATION_PREFERENCE_VALUES);\nexport type NotificationPreference = z.infer<typeof notificationPreferenceSchema>;\n\n/**\n * Which switch silences which kind. Null: always delivered. Exhaustive by\n * type, so a kind added without a decision here does not compile.\n */\nexport const NOTIFICATION_PREFERENCE_OF = {\n  comment_on_post: 'comments',\n  reply_to_comment: 'replies',\n  product_invite: null,\n  product_invite_accepted: 'productActivity',\n  product_review: 'productActivity',\n  review_reply: 'productActivity',\n  feedback_helpful: 'recognition',\n  tester_confirmed: 'recognition',\n  post_reaction: 'reactions',\n  comment_reaction: 'reactions',\n  repost: 'reposts',\n  community_join_request: 'communities',\n  community_request_approved: null,\n  community_invite: null,\n  community_announcement: 'communities',\n  community_suggestion_decided: null,\n} as const satisfies Record<NotificationKind, NotificationPreference | null>;\n\n/**\n * One row of the bell. Which of the optional targets are present depends on\n * `kind`:\n *\n *   comment_on_post          content, commentId\n *   reply_to_comment         content, commentId (the reply)\n *   product_invite           product, role\n *   product_invite_accepted  product\n *   product_review           product, reviewId\n *   review_reply             product, reviewId\n *   feedback_helpful         product, content, commentId\n *   tester_confirmed         product\n *   post_reaction            content, reaction\n *   comment_reaction         content, commentId, reaction, excerpt (your comment)\n *   repost                   content (yours, the one reposted), repostId (the latest repost, to read their words)\n *   community_join_request   community\n *   community_request_approved  community\n *   community_invite         community\n *   community_announcement   community, content (the pinned post or poll)\n *   community_suggestion_decided  suggestion, community (once approved)\n *\n * Any row about something inside a community also carries `community`\n * (0.9.0), whatever its kind. When the recipient leaves the community, is\n * removed or is banned, its rows about that community lose their content,\n * comment, excerpt and repost: what they could read there, they no longer can.\n *\n * A target that no longer exists (a deleted post, product or review) is\n * absent rather than pointing at a 404; the row still says what happened.\n */\nexport const notificationSchema = z.object({\n  id: objectIdSchema,\n  kind: notificationKindSchema,\n  /** The latest person to do it, live; null for a deleted account. */\n  actor: memberBylineSchema.nullable(),\n  /**\n   * How many EVENTS this row merges, at least 1: three comments by one person\n   * are 3. Word it as events (\"3 new comments, latest from Asha\"), never as\n   * people (\"Asha and 2 others\"), which this count does not know.\n   */\n  count: z.number().int().positive(),\n  content: z.object({ kind: contentKindSchema, id: objectIdSchema }).optional(),\n  commentId: objectIdSchema.optional(),\n  product: productChipSchema.optional(),\n  reviewId: objectIdSchema.optional(),\n  /**\n   * For `repost` (0.8.0): the latest repost itself, so the row opens the\n   * reposter's words above your post. Gone once that repost is.\n   */\n  repostId: objectIdSchema.optional(),\n  /**\n   * The community the row is about, or that its content is in (0.9.0). Absent\n   * once that community is deleted, or the recipient may no longer see it.\n   */\n  community: communityChipSchema.optional(),\n  /** For `community_suggestion_decided` (0.9.0): which suggestion, and how it went. */\n  suggestion: z\n    .object({\n      id: objectIdSchema,\n      name: z.string(),\n      status: z.enum(['approved', 'declined']),\n      /** Why it was declined. */\n      reason: z.string().optional(),\n    })\n    .optional(),\n  /** For `product_invite`: the role offered. */\n  role: productInvitableRoleSchema.optional(),\n  /** For the reaction kinds: the latest reaction, as it is now (0.8.0). */\n  reaction: reactionTypeSchema.optional(),\n  /**\n   * The first words of what was written, for the comment and review kinds\n   * (the latest one, on a merged row), cut to `NOTIFICATION_EXCERPT_MAX`. Gone\n   * when that comment or review is deleted or hidden, and when its writer's\n   * account is.\n   */\n  excerpt: z.string().max(NOTIFICATION_EXCERPT_MAX).optional(),\n  /** Null until opened (or until \"mark all read\"). A merged repeat makes it unread again. */\n  readAt: z.iso.datetime().nullable(),\n  /** When it last happened: the list's order. */\n  lastAt: z.iso.datetime(),\n  createdAt: z.iso.datetime(),\n});\nexport type Notification = z.infer<typeof notificationSchema>;\n\nexport const notificationPageSchema = paginatedSchema(notificationSchema);\nexport type NotificationPage = z.infer<typeof notificationPageSchema>;\n\n/** The badge. */\nexport const notificationUnreadCountSchema = z.object({\n  unread: z.number().int().nonnegative(),\n});\nexport type NotificationUnreadCount = z.infer<typeof notificationUnreadCountSchema>;\n\nexport const notificationParamsSchema = z.object({ notificationId: objectIdSchema });\nexport type NotificationParams = z.infer<typeof notificationParamsSchema>;\n\n/** Every switch, as stored (on by default). */\nexport const notificationPreferencesSchema = z.object({\n  comments: z.boolean(),\n  replies: z.boolean(),\n  productActivity: z.boolean(),\n  recognition: z.boolean(),\n  /** Reactions to your posts, polls and comments (0.8.0). */\n  reactions: z.boolean(),\n  /** Reposts of your posts and polls (0.8.0). */\n  reposts: z.boolean(),\n  /** Announcements in your communities, and join requests to communities you moderate (0.9.0). */\n  communities: z.boolean(),\n});\nexport type NotificationPreferences = z.infer<typeof notificationPreferencesSchema>;\n\n/** Only the switches that changed; no defaults (a patch states what was sent). */\nexport const updateNotificationPreferencesBodySchema = z.object({\n  comments: z.boolean().optional(),\n  replies: z.boolean().optional(),\n  productActivity: z.boolean().optional(),\n  recognition: z.boolean().optional(),\n  reactions: z.boolean().optional(),\n  reposts: z.boolean().optional(),\n  communities: z.boolean().optional(),\n});\nexport type UpdateNotificationPreferencesBody = z.infer<\n  typeof updateNotificationPreferencesBodySchema\n>;\n"]}

package/dist/domains/team/team.d.ts

@@ -3,6 +3,7 @@
  *
  *   GET    /api/v1/team                    the people holding a platform role
  *   PUT    /api/v1/team/:memberId/roles    set someone's platform roles
+ *   PUT    /api/v1/team/:memberId/capabilities  set someone's capabilities (0.9.0)
  *   DELETE /api/v1/team/:memberId/mpin     clear a forgotten MPIN (superadmin;
  *                                          answers `IdResponse`)
  *
@@ -76,4 +77,25 @@ export declare const setMemberRolesResponseSchema: z.ZodObject<{
     }>>;
 }, z.core.$strip>;
 export type SetMemberRolesResponse = z.infer<typeof setMemberRolesResponseSchema>;
+/**
+ * `PUT /team/:memberId/capabilities` (0.9.0): the capabilities the person
+ * should hold, as a whole set. Every one that changes must be one the actor's
+ * active role may grant (`CAPABILITY_GRANTED_BY`, else
+ * `CAPABILITY_NOT_GRANTABLE`); never one's own (`CANNOT_CHANGE_OWN_CAPABILITIES`).
+ * Sending what they already hold changes nothing and writes no audit entry.
+ */
+export declare const setMemberCapabilitiesBodySchema: z.ZodObject<{
+    capabilities: z.ZodArray<z.ZodEnum<{
+        create_communities: "create_communities";
+    }>>;
+}, z.core.$strip>;
+export type SetMemberCapabilitiesBody = z.infer<typeof setMemberCapabilitiesBodySchema>;
+/** What it answers: the capabilities the person now holds. */
+export declare const setMemberCapabilitiesResponseSchema: z.ZodObject<{
+    id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    capabilities: z.ZodArray<z.ZodEnum<{
+        create_communities: "create_communities";
+    }>>;
+}, z.core.$strip>;
+export type SetMemberCapabilitiesResponse = z.infer<typeof setMemberCapabilitiesResponseSchema>;
 //# sourceMappingURL=team.d.ts.map

package/dist/domains/team/team.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"team.d.ts","sourceRoot":"","sources":["../../../src/domains/team/team.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,sCAAsC;AACtC,eAAO,MAAM,sBAAsB;;iBAAyC,CAAC;AAC7E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;iBAS3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;iBAAoC,CAAC;AAChE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;;;;;iBAOnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,+FAA+F;AAC/F,eAAO,MAAM,4BAA4B;;;;;;;;iBAGvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}
+{"version":3,"file":"team.d.ts","sourceRoot":"","sources":["../../../src/domains/team/team.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,sCAAsC;AACtC,eAAO,MAAM,sBAAsB;;iBAAyC,CAAC;AAC7E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;iBAS3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;iBAAoC,CAAC;AAChE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;;;;;iBAOnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,+FAA+F;AAC/F,eAAO,MAAM,4BAA4B;;;;;;;;iBAGvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B;;;;iBAO1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,8DAA8D;AAC9D,eAAO,MAAM,mCAAmC;;;;;iBAG9C,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC"}

package/dist/domains/team/team.js

@@ -3,6 +3,7 @@
  *
  *   GET    /api/v1/team                    the people holding a platform role
  *   PUT    /api/v1/team/:memberId/roles    set someone's platform roles
+ *   PUT    /api/v1/team/:memberId/capabilities  set someone's capabilities (0.9.0)
  *   DELETE /api/v1/team/:memberId/mpin     clear a forgotten MPIN (superadmin;
  *                                          answers `IdResponse`)
  *
@@ -15,6 +16,7 @@
  * @module founder-schema/domains/team
  */
 import { z } from 'zod';
+import { CAPABILITY_VALUES, capabilitySchema } from '../../access/capabilities.js';
 import { PLATFORM_ROLE_VALUES, platformRoleSchema } from '../../access/roles.js';
 import { objectIdSchema } from '../../core/common.js';
 import { paginatedSchema } from '../../core/responses.js';
@@ -51,4 +53,24 @@ export const setMemberRolesResponseSchema = z.object({
     id: objectIdSchema,
     roles: z.array(platformRoleSchema),
 });
+/**
+ * `PUT /team/:memberId/capabilities` (0.9.0): the capabilities the person
+ * should hold, as a whole set. Every one that changes must be one the actor's
+ * active role may grant (`CAPABILITY_GRANTED_BY`, else
+ * `CAPABILITY_NOT_GRANTABLE`); never one's own (`CANNOT_CHANGE_OWN_CAPABILITIES`).
+ * Sending what they already hold changes nothing and writes no audit entry.
+ */
+export const setMemberCapabilitiesBodySchema = z.object({
+    capabilities: z
+        .array(capabilitySchema)
+        .max(CAPABILITY_VALUES.length)
+        .refine((list) => new Set(list).size === list.length, {
+        error: VALIDATION_MESSAGE.capabilitiesDuplicate,
+    }),
+});
+/** What it answers: the capabilities the person now holds. */
+export const setMemberCapabilitiesResponseSchema = z.object({
+    id: objectIdSchema,
+    capabilities: z.array(capabilitySchema),
+});
 //# sourceMappingURL=team.js.map

package/dist/domains/team/team.js.map

@@ -1 +1 @@
-{"version":3,"file":"team.js","sourceRoot":"","sources":["../../../src/domains/team/team.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,sCAAsC;AACtC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;AAG7E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,cAAc;IAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,+FAA+F;IAC/F,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,qEAAqE;IACrE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;AAGhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;SACjD,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC;SAChC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE;QACvD,KAAK,EAAE,kBAAkB,CAAC,cAAc;KACzC,CAAC;CACL,CAAC,CAAC;AAGH,+FAA+F;AAC/F,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,EAAE,EAAE,cAAc;IAClB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACnC,CAAC,CAAC","sourcesContent":["/**\n * founder-schema: the staff team\n *\n *   GET    /api/v1/team                    the people holding a platform role\n *   PUT    /api/v1/team/:memberId/roles    set someone's platform roles\n *   DELETE /api/v1/team/:memberId/mpin     clear a forgotten MPIN (superadmin;\n *                                          answers `IdResponse`)\n *\n * Setting roles sends the person's WHOLE set, so the request says what they\n * should end up with rather than a list of changes to replay. Every role that\n * changes must be one the actor's active role may grant (`ROLE_GRANTED_BY`);\n * nobody changes their own; superadmin is never in a request. Each change is\n * written to the audit log.\n *\n * @module founder-schema/domains/team\n */\n\nimport { z } from 'zod';\nimport { PLATFORM_ROLE_VALUES, platformRoleSchema } from '../../access/roles.js';\nimport { objectIdSchema } from '../../core/common.js';\nimport { paginatedSchema } from '../../core/responses.js';\nimport { VALIDATION_MESSAGE } from '../../core/validation.js';\n\n/** `:memberId` in the paths above. */\nexport const teamMemberParamsSchema = z.object({ memberId: objectIdSchema });\nexport type TeamMemberParams = z.infer<typeof teamMemberParamsSchema>;\n\n/** One person on the team, as the Team screens list them. */\nexport const teamMemberSchema = z.object({\n  id: objectIdSchema,\n  displayName: z.string(),\n  /** Server-set or from the login provider, like every avatar on the wire: a plain URL check. */\n  avatarUrl: z.url().nullable(),\n  email: z.string().nullable(),\n  /** Their platform roles, highest first. Never empty in this list. */\n  roles: z.array(platformRoleSchema).min(1),\n  mpinSet: z.boolean(),\n});\nexport type TeamMember = z.infer<typeof teamMemberSchema>;\n\nexport const teamPageSchema = paginatedSchema(teamMemberSchema);\nexport type TeamPage = z.infer<typeof teamPageSchema>;\n\n/**\n * `PUT /team/:memberId/roles`: the platform roles the person should hold.\n * Empty takes every staff role away. No duplicates; no superadmin (a server\n * script grants it, never the product).\n */\nexport const setMemberRolesBodySchema = z.object({\n  roles: z\n    .array(platformRoleSchema.exclude(['superadmin']))\n    .max(PLATFORM_ROLE_VALUES.length)\n    .refine((roles) => new Set(roles).size === roles.length, {\n      error: VALIDATION_MESSAGE.rolesDuplicate,\n    }),\n});\nexport type SetMemberRolesBody = z.infer<typeof setMemberRolesBodySchema>;\n\n/** What `PUT /team/:memberId/roles` answers: the roles the person now holds, highest first. */\nexport const setMemberRolesResponseSchema = z.object({\n  id: objectIdSchema,\n  roles: z.array(platformRoleSchema),\n});\nexport type SetMemberRolesResponse = z.infer<typeof setMemberRolesResponseSchema>;\n"]}
+{"version":3,"file":"team.js","sourceRoot":"","sources":["../../../src/domains/team/team.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,sCAAsC;AACtC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;AAG7E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,cAAc;IAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,+FAA+F;IAC/F,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,qEAAqE;IACrE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;AAGhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;SACjD,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC;SAChC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE;QACvD,KAAK,EAAE,kBAAkB,CAAC,cAAc;KACzC,CAAC;CACL,CAAC,CAAC;AAGH,+FAA+F;AAC/F,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,EAAE,EAAE,cAAc;IAClB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACnC,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,YAAY,EAAE,CAAC;SACZ,KAAK,CAAC,gBAAgB,CAAC;SACvB,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC;SAC7B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE;QACpD,KAAK,EAAE,kBAAkB,CAAC,qBAAqB;KAChD,CAAC;CACL,CAAC,CAAC;AAGH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,EAAE,EAAE,cAAc;IAClB,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACxC,CAAC,CAAC","sourcesContent":["/**\n * founder-schema: the staff team\n *\n *   GET    /api/v1/team                    the people holding a platform role\n *   PUT    /api/v1/team/:memberId/roles    set someone's platform roles\n *   PUT    /api/v1/team/:memberId/capabilities  set someone's capabilities (0.9.0)\n *   DELETE /api/v1/team/:memberId/mpin     clear a forgotten MPIN (superadmin;\n *                                          answers `IdResponse`)\n *\n * Setting roles sends the person's WHOLE set, so the request says what they\n * should end up with rather than a list of changes to replay. Every role that\n * changes must be one the actor's active role may grant (`ROLE_GRANTED_BY`);\n * nobody changes their own; superadmin is never in a request. Each change is\n * written to the audit log.\n *\n * @module founder-schema/domains/team\n */\n\nimport { z } from 'zod';\nimport { CAPABILITY_VALUES, capabilitySchema } from '../../access/capabilities.js';\nimport { PLATFORM_ROLE_VALUES, platformRoleSchema } from '../../access/roles.js';\nimport { objectIdSchema } from '../../core/common.js';\nimport { paginatedSchema } from '../../core/responses.js';\nimport { VALIDATION_MESSAGE } from '../../core/validation.js';\n\n/** `:memberId` in the paths above. */\nexport const teamMemberParamsSchema = z.object({ memberId: objectIdSchema });\nexport type TeamMemberParams = z.infer<typeof teamMemberParamsSchema>;\n\n/** One person on the team, as the Team screens list them. */\nexport const teamMemberSchema = z.object({\n  id: objectIdSchema,\n  displayName: z.string(),\n  /** Server-set or from the login provider, like every avatar on the wire: a plain URL check. */\n  avatarUrl: z.url().nullable(),\n  email: z.string().nullable(),\n  /** Their platform roles, highest first. Never empty in this list. */\n  roles: z.array(platformRoleSchema).min(1),\n  mpinSet: z.boolean(),\n});\nexport type TeamMember = z.infer<typeof teamMemberSchema>;\n\nexport const teamPageSchema = paginatedSchema(teamMemberSchema);\nexport type TeamPage = z.infer<typeof teamPageSchema>;\n\n/**\n * `PUT /team/:memberId/roles`: the platform roles the person should hold.\n * Empty takes every staff role away. No duplicates; no superadmin (a server\n * script grants it, never the product).\n */\nexport const setMemberRolesBodySchema = z.object({\n  roles: z\n    .array(platformRoleSchema.exclude(['superadmin']))\n    .max(PLATFORM_ROLE_VALUES.length)\n    .refine((roles) => new Set(roles).size === roles.length, {\n      error: VALIDATION_MESSAGE.rolesDuplicate,\n    }),\n});\nexport type SetMemberRolesBody = z.infer<typeof setMemberRolesBodySchema>;\n\n/** What `PUT /team/:memberId/roles` answers: the roles the person now holds, highest first. */\nexport const setMemberRolesResponseSchema = z.object({\n  id: objectIdSchema,\n  roles: z.array(platformRoleSchema),\n});\nexport type SetMemberRolesResponse = z.infer<typeof setMemberRolesResponseSchema>;\n\n/**\n * `PUT /team/:memberId/capabilities` (0.9.0): the capabilities the person\n * should hold, as a whole set. Every one that changes must be one the actor's\n * active role may grant (`CAPABILITY_GRANTED_BY`, else\n * `CAPABILITY_NOT_GRANTABLE`); never one's own (`CANNOT_CHANGE_OWN_CAPABILITIES`).\n * Sending what they already hold changes nothing and writes no audit entry.\n */\nexport const setMemberCapabilitiesBodySchema = z.object({\n  capabilities: z\n    .array(capabilitySchema)\n    .max(CAPABILITY_VALUES.length)\n    .refine((list) => new Set(list).size === list.length, {\n      error: VALIDATION_MESSAGE.capabilitiesDuplicate,\n    }),\n});\nexport type SetMemberCapabilitiesBody = z.infer<typeof setMemberCapabilitiesBodySchema>;\n\n/** What it answers: the capabilities the person now holds. */\nexport const setMemberCapabilitiesResponseSchema = z.object({\n  id: objectIdSchema,\n  capabilities: z.array(capabilitySchema),\n});\nexport type SetMemberCapabilitiesResponse = z.infer<typeof setMemberCapabilitiesResponseSchema>;\n"]}

package/dist/domains/uploads/uploads.d.ts

@@ -65,6 +65,7 @@ export declare const uploadPresignBodySchema: z.ZodObject<{
         avatar: "avatar";
         product_logo: "product_logo";
         product_screenshot: "product_screenshot";
+        community_icon: "community_icon";
     }>;
     contentType: z.ZodEnum<{
         "image/jpeg": "image/jpeg";

package/dist/domains/uploads/uploads.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uploads.d.ts","sourceRoot":"","sources":["../../../src/domains/uploads/uploads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,gDAAiD,CAAC;AACpF,eAAO,MAAM,wBAAwB;;;;;;EAAgC,CAAC;AACtE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,oBAAoB;;;;;;CAMiC,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC,mGAAmG;AACnG,eAAO,MAAM,kBAAkB,QAE9B,CAAC;AAEF,8CAA8C;AAC9C,eAAO,MAAM,eAAe,aAMuD,CAAC;AACpF,8CAA8C;AAC9C,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;iBAIlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B;;;;;;iBAMtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,iFAAiF;AACjF,eAAO,MAAM,kBAAkB;;iBAAwC,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"uploads.d.ts","sourceRoot":"","sources":["../../../src/domains/uploads/uploads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,gDAAiD,CAAC;AACpF,eAAO,MAAM,wBAAwB;;;;;;EAAgC,CAAC;AACtE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,oBAAoB;;;;;;CAMiC,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC,mGAAmG;AACnG,eAAO,MAAM,kBAAkB,QAE9B,CAAC;AAEF,8CAA8C;AAC9C,eAAO,MAAM,eAAe,aAMuD,CAAC;AACpF,8CAA8C;AAC9C,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;iBAIlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B;;;;;;iBAMtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,iFAAiF;AACjF,eAAO,MAAM,kBAAkB;;iBAAwC,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}