@thejob/schema 2.1.8 → 2.2.0

package/dist/index.js

@@ -20,6 +20,102 @@ var UserIdAndCreatedAtSchema = object().shape({
   createdAt: string().required().label("Created At")
 });
 
+// src/common/facet.schema.ts
+import { array, boolean as boolean2, number as number2, object as object2, string as string2 } from "yup";
+var tokens = (label) => array().of(string2().trim().required()).optional().default([]).label(label);
+var codeTokens = (label) => array().of(string2().trim().uppercase().required()).optional().default([]).label(label);
+var enumFacet = (values, label) => array().of(string2().oneOf(values).required()).optional().default([]).label(label);
+var days = (label) => number2().integer().min(0).max(3650).optional().default(void 0).label(label);
+var months = (label) => number2().integer().min(0).max(1200).optional().default(void 0).label(label);
+var percent = (label) => number2().integer().min(0).max(100).optional().default(void 0).label(label);
+var epoch = (label) => number2().integer().min(0).optional().default(void 0).label(label).meta({ widget: "date" });
+var currencyBound = (label, currencyField) => number2().integer().min(0).optional().default(void 0).label(label).when(currencyField, {
+  is: (v) => !Array.isArray(v) || v.length !== 1,
+  then: (s) => s.test(
+    "requires-single-currency",
+    "Pick exactly one salary currency to filter by salary",
+    (value) => value === void 0 || value === null
+  )
+});
+var qualified = (qualifierValues, qualifierKey, label) => array().of(
+  // `rejectUnknownKeys`, not `.noUnknown()`, for the reason spelled out on
+  // that helper: outside strict mode `.noUnknown()` silently STRIPS an
+  // unknown key rather than failing, so a misspelled qualifier would arrive
+  // as a name-only entry and quietly widen the match instead of erroring.
+  rejectUnknownKeys(
+    object2({
+      name: string2().trim().required().label("Name"),
+      // `"open"` for a free-text qualifier (a certification's issuing body).
+      // An empty array would NOT mean "anything goes" — `.oneOf([])` rejects
+      // every value — so the open case is named rather than inferred from an
+      // empty vocabulary.
+      [qualifierKey]: qualifierValues === "open" ? string2().trim().optional().default(void 0).label(label) : string2().oneOf(qualifierValues).optional().default(void 0).label(label)
+    }).label(label).required(),
+    () => ["name", qualifierKey]
+  )
+).optional().default([]).label(label);
+var conjunctionFieldName = (f) => typeof f === "string" ? f : f.name;
+var conjunction = (fields, label) => {
+  const names = fields.map(conjunctionFieldName);
+  const isBoolean = (name) => fields.some(
+    (f) => typeof f !== "string" && f.name === name && f.type === "boolean"
+  );
+  return array().of(
+    rejectUnknownKeys(
+      object2(
+        Object.fromEntries(
+          fields.map((f) => {
+            const name = conjunctionFieldName(f);
+            if (typeof f !== "string" && f.type === "boolean") {
+              return [name, boolean2().optional().default(void 0).label(name)];
+            }
+            const base = string2().trim().optional().default(void 0).label(name);
+            return [
+              name,
+              typeof f !== "string" && f.oneOf ? base.oneOf([...f.oneOf, void 0]) : base
+            ];
+          })
+        )
+      ).test(
+        "at-least-one-field",
+        // Names the unknown key when that is the real problem. A misspelled
+        // field (`companyName`) is stripped before this test sees it, so it
+        // would otherwise report "needs at least one field set" — true, but
+        // it sends the reader looking in the wrong place.
+        ({ value }) => {
+          const unknown = Object.keys(
+            value ?? {}
+          ).filter((k) => !names.includes(k));
+          return unknown.length ? `${label} has unsupported keys: ${unknown.join(", ")}` : `${label} needs at least one of: ${names.join(", ")}`;
+        },
+        (value) => value == null || names.some((f) => {
+          const v = value[f];
+          if (isBoolean(f)) return typeof v === "boolean";
+          return typeof v === "string" && v.trim() !== "";
+        })
+      ).label(label).required(),
+      () => names
+    )
+  ).optional().default([]).label(label);
+};
+var rejectUnknownKeys = (schema, allowed) => schema.test(
+  "no-unknown-keys",
+  ({ value, label }) => {
+    const known = new Set(allowed());
+    const bad = Object.keys(value ?? {}).filter(
+      (k) => !known.has(k)
+    );
+    return `${label} has unsupported keys: ${bad.join(", ")}`;
+  },
+  (value) => {
+    if (value == null) return true;
+    const known = new Set(allowed());
+    return Object.keys(value).every(
+      (k) => known.has(k)
+    );
+  }
+);
+
 // src/common/common.constant.ts
 var Common = /* @__PURE__ */ ((Common2) => {
   Common2["Yes"] = "yes";
@@ -76,7 +172,7 @@ var ExperienceLevel = /* @__PURE__ */ ((ExperienceLevel2) => {
 var SupportedExperienceLevels = Object.values(ExperienceLevel);
 
 // src/duration/duration.schema.ts
-import { boolean as boolean2, object as object2, ref } from "yup";
+import { boolean as boolean3, object as object3, ref } from "yup";
 
 // src/extensions/date-string.extension.ts
 import dayjs from "dayjs";
@@ -131,7 +227,7 @@ var DurationSchema = (options) => {
   const { startKey = "startDate", endKey = "endDate", format } = options || {};
   const startLabel = options?.startLabel || startKey;
   const endLabel = options?.endLabel || endKey;
-  return object2().shape({
+  return object3().shape({
     [startKey]: dateString().format(format, `${startLabel} must be in the format ${format}`).required(`${startLabel} is required`).typeError(`${startLabel} must be a valid date`),
     [endKey]: dateString().format(format, `${endLabel} must be in the format ${format}`).when("isActive", {
       is: (val) => Boolean(val) === false,
@@ -143,12 +239,12 @@ var DurationSchema = (options) => {
       //   (value) => !value
       // ),ccc
     }),
-    isActive: boolean2().optional().default(false).typeError("isActive must be a boolean value")
+    isActive: boolean3().optional().default(false).typeError("isActive must be a boolean value")
   });
 };
 
 // src/group/group.schema.ts
-import { array, boolean as boolean3, mixed, number as number2, object as object3, string as string2 } from "yup";
+import { array as array2, boolean as boolean4, mixed, number as number3, object as object4, string as string3 } from "yup";
 
 // src/group/group.constant.ts
 var GroupVisibility = /* @__PURE__ */ ((GroupVisibility2) => {
@@ -172,80 +268,129 @@ var GroupStatus = /* @__PURE__ */ ((GroupStatus2) => {
   GroupStatus2["Archived"] = "archived";
   return GroupStatus2;
 })(GroupStatus || {});
+var SupportedGroupStatuses = Object.values(GroupStatus);
+var SupportedGroupVisibilities = Object.values(GroupVisibility);
+var SupportedGroupManagedBy = Object.values(GroupManagedBy);
+var SupportedGroupMembershipStatuses = Object.values(
+  GroupMembershipStatus
+);
 
 // src/group/group.schema.ts
-var GroupTranslationSchema = object3({
-  language: string2().required("Language is required"),
-  name: string2().required("Name is required"),
-  description: string2().optional(),
-  slug: string2().optional(),
-  seo: object3({
-    description: string2().optional(),
-    keywords: array().of(string2().required()).optional()
+var GroupTranslationSchema = object4({
+  language: string3().required("Language is required"),
+  name: string3().required("Name is required"),
+  description: string3().optional(),
+  slug: string3().optional(),
+  seo: object4({
+    description: string3().optional(),
+    keywords: array2().of(string3().required()).optional()
   }).optional()
 });
-var GroupSchema = object3().shape({
-  name: string2().required().min(3).max(100).label("Name"),
-  description: string2().required().min(10).max(1e3).label("Description"),
-  slug: string2().required().label("Slug"),
-  banner: string2().label("Banner"),
-  logo: object3().shape({
-    light: string2().required().label("Light Logo"),
-    dark: string2().optional().nullable().label("Dark Logo")
+var GroupSchema = object4().shape({
+  name: string3().required().min(3).max(100).label("Name"),
+  description: string3().required().min(10).max(1e3).label("Description"),
+  slug: string3().required().label("Slug"),
+  banner: string3().label("Banner"),
+  logo: object4().shape({
+    light: string3().required().label("Light Logo"),
+    dark: string3().optional().nullable().label("Dark Logo")
   }).optional().nullable().default(null).label("Logo"),
-  isFeatured: boolean3().label("Is Featured"),
-  isDiscoverable: boolean3().default(true).label("Is Discoverable"),
-  featuredMarkets: array().of(string2()).optional().default([]).label("Featured Markets"),
-  followersCount: number2().min(0).label("Followers Count"),
-  membersCount: number2().min(0).label("Members Count"),
+  isFeatured: boolean4().label("Is Featured"),
+  isDiscoverable: boolean4().default(true).label("Is Discoverable"),
+  featuredMarkets: array2().of(string3()).optional().default([]).label("Featured Markets"),
+  followersCount: number3().min(0).label("Followers Count"),
+  membersCount: number3().min(0).label("Members Count"),
   visibility: mixed().oneOf(Object.values(GroupVisibility)).default("public" /* Public */).label("Visibility"),
-  groupRules: string2().optional().label("Group Rules"),
-  countries: array().of(string2()).optional().label("Countries"),
-  filterQuery: object3().shape({
-    jobs: string2().label("Job"),
-    courses: string2().label("Course"),
-    discussions: string2().label("Discussion")
+  groupRules: string3().optional().label("Group Rules"),
+  countries: array2().of(string3()).optional().label("Countries"),
+  filterQuery: object4().shape({
+    jobs: string3().label("Job"),
+    courses: string3().label("Course"),
+    discussions: string3().label("Discussion")
   }).label("Filter Query"),
-  seo: object3().shape({
-    description: string2().optional().label("Description"),
-    keywords: array().of(string2()).optional().label("Keywords")
+  seo: object4().shape({
+    description: string3().optional().label("Description"),
+    keywords: array2().of(string3()).optional().label("Keywords")
   }).optional().label("SEO"),
-  translation: array().of(GroupTranslationSchema).optional().label("Translations"),
+  translation: array2().of(GroupTranslationSchema).optional().label("Translations"),
   managedBy: mixed().oneOf(Object.values(GroupManagedBy)).default("community" /* Community */).label("Managed By"),
   status: mixed().oneOf(Object.values(GroupStatus)).default("active" /* Active */).label("Status"),
-  createdAt: number2().optional().label("Created At"),
-  updatedAt: number2().optional().label("Updated At")
+  createdAt: number3().optional().label("Created At"),
+  updatedAt: number3().optional().label("Updated At")
 }).label("Group Schema");
-var GroupMembershipSchema = object3({
-  groupId: string2().required().label("Group ID"),
-  userId: string2().required().label("User ID"),
+var GroupMembershipSchema = object4({
+  groupId: string3().required().label("Group ID"),
+  userId: string3().required().label("User ID"),
   status: mixed().oneOf(Object.values(GroupMembershipStatus)).required().label("Status"),
-  createdAt: number2().optional().label("Created At"),
-  updatedAt: number2().optional().label("Updated At")
+  createdAt: number3().optional().label("Created At"),
+  updatedAt: number3().optional().label("Updated At")
 });
 
+// src/group/group-filter.schema.ts
+import { boolean as boolean5, object as object5 } from "yup";
+var GroupFilterShape = object5({
+  // ── Classification ──────────────────────────────────────────────────────────
+  // Closed vocabularies, matched exactly. Values are LOWERCASE (`active`,
+  // `public`, `system`) and that casing is data, not style: it is what is stored.
+  //
+  // All three are currently NON-SELECTIVE — every group in production is
+  // `active` / `public` / `system`. They are declared anyway because they are
+  // real vocabulary that gains meaning as the corpus grows, and a filter that
+  // silently ignores `status` would be worse than one that narrows to everything.
+  status: enumFacet(SupportedGroupStatuses, "Status"),
+  visibility: enumFacet(SupportedGroupVisibilities, "Visibility"),
+  managedBy: enumFacet(SupportedGroupManagedBy, "Managed By"),
+  // ── Flags ───────────────────────────────────────────────────────────────────
+  // No `.default(false)`: an unchecked box must mean "no constraint", not "only
+  // the non-featured ones", so absent simply omits the clause.
+  isFeatured: boolean5().optional().label("Featured Only"),
+  isDiscoverable: boolean5().optional().label("Discoverable Only"),
+  // ── Markets ─────────────────────────────────────────────────────────────────
+  /**
+   * `tokens`, NOT `codeTokens`. This is the trap in this file.
+   *
+   * Every other filter here uses `codeTokens` for country codes, because users
+   * and jobs store uppercase ISO alpha-2. Groups store them LOWERCASE (`in`,
+   * `se`, `ww` — verified against production). `codeTokens` uppercases its
+   * input, so `$in: ["IN"]` against a stored `"in"` matches nothing: no error,
+   * empty result, empty mail.
+   *
+   * If these are ever normalised to uppercase, this becomes `codeTokens` in the
+   * same change as the data migration, not before it.
+   */
+  countries: tokens("Countries"),
+  featuredMarkets: tokens("Featured Markets"),
+  /** Group SLUGS, for naming specific groups. A display name breaks on rename. */
+  slugs: tokens("Slugs")
+}).label("Group Filter");
+var GROUP_FILTER_KEYS = Object.keys(GroupFilterShape.fields);
+var GroupFilterSchema = rejectUnknownKeys(
+  GroupFilterShape,
+  () => GROUP_FILTER_KEYS
+);
+
 // src/job/job.schema.ts
-import { array as array8, boolean as boolean9, lazy, mixed as mixed3, number as number5, object as object16, string as string13 } from "yup";
+import { array as array9, boolean as boolean11, lazy, mixed as mixed3, number as number6, object as object18, string as string14 } from "yup";
 
 // src/location/location.schema.ts
-import { array as array2, number as number3, object as object4, string as string3 } from "yup";
-var LocationSchema = object4({
-  placeId: string3().optional().nullable(),
-  country: string3().required(),
-  countryCode: string3().required(),
-  state: string3().optional().nullable(),
-  stateCode: string3().optional().nullable(),
-  city: string3().optional().nullable(),
-  address: string3().optional().nullable(),
-  geo: object4({
-    type: string3().oneOf(["Point"]).default("Point"),
-    coordinates: array2().of(number3().required()).length(2).required()
+import { array as array3, number as number4, object as object6, string as string4 } from "yup";
+var LocationSchema = object6({
+  placeId: string4().optional().nullable(),
+  country: string4().required(),
+  countryCode: string4().required(),
+  state: string4().optional().nullable(),
+  stateCode: string4().optional().nullable(),
+  city: string4().optional().nullable(),
+  address: string4().optional().nullable(),
+  geo: object6({
+    type: string4().oneOf(["Point"]).default("Point"),
+    coordinates: array3().of(number4().required()).length(2).required()
     // [longitude, latitude]
   }).required()
 });
 
 // src/page/page.schema.ts
-import { array as array5, boolean as boolean7, date, number as number4, object as object10, string as string7 } from "yup";
+import { array as array6, boolean as boolean9, date, number as number5, object as object12, string as string8 } from "yup";
 
 // src/page/page.constant.ts
 var PageType = /* @__PURE__ */ ((PageType2) => {
@@ -283,44 +428,44 @@ var ContactTypes = /* @__PURE__ */ ((ContactTypes2) => {
 var SupportedContactTypes = Object.values(ContactTypes);
 
 // src/page/page-location.schema.ts
-import { boolean as boolean4, object as object5, string as string4 } from "yup";
-var PageLocationSchema = object5().shape({
-  isHeadquarters: boolean4().oneOf([true, false]).default(false).label("Is Headquarters"),
-  coverImage: string4().optional().label("Cover Image"),
-  name: string4().required().label("Office Name"),
+import { boolean as boolean6, object as object7, string as string5 } from "yup";
+var PageLocationSchema = object7().shape({
+  isHeadquarters: boolean6().oneOf([true, false]).default(false).label("Is Headquarters"),
+  coverImage: string5().optional().label("Cover Image"),
+  name: string5().required().label("Office Name"),
   /* TODO: Add Location Schema to enable geo spacial search*/
   // location: LocationSchema,
-  contact: object5().shape({
-    email: string4().email().optional().label("Email"),
-    phone: string4().optional().label("Phone"),
-    address: string4().required().label("Address")
+  contact: object7().shape({
+    email: string5().email().optional().label("Email"),
+    phone: string5().optional().label("Phone"),
+    address: string5().required().label("Address")
   })
 }).label("PageLocationSchema");
 
 // src/page/institute/institute.schema.ts
-import { object as object6 } from "yup";
-var InstituteSchema = object6().shape({}).label("InstituteSchema");
+import { object as object8 } from "yup";
+var InstituteSchema = object8().shape({}).label("InstituteSchema");
 
 // src/page/company/company.schema.ts
-import { array as array4, boolean as boolean5, object as object8 } from "yup";
+import { array as array5, boolean as boolean7, object as object10 } from "yup";
 
 // src/page/company/perks-and-benefits.schema.ts
-import { array as array3 } from "yup";
-import { object as object7, string as string5 } from "yup";
-var PerksAndBenefitSchema = object7().shape({
-  name: string5().trim().max(50).required().label("Name"),
-  description: string5().max(1e3).required().label("Description"),
-  category: array3().of(string5()).optional().label("Category")
+import { array as array4 } from "yup";
+import { object as object9, string as string6 } from "yup";
+var PerksAndBenefitSchema = object9().shape({
+  name: string6().trim().max(50).required().label("Name"),
+  description: string6().max(1e3).required().label("Description"),
+  category: array4().of(string6()).optional().label("Category")
 });
 
 // src/page/company/company.schema.ts
-var CompanySchema = object8().shape({
-  equalOpportunityEmployer: boolean5().optional().label("Equal Opportunity Employer"),
-  perksAndBenefits: array4().of(PerksAndBenefitSchema).optional().label("Perks and Benefits")
+var CompanySchema = object10().shape({
+  equalOpportunityEmployer: boolean7().optional().label("Equal Opportunity Employer"),
+  perksAndBenefits: array5().of(PerksAndBenefitSchema).optional().label("Perks and Benefits")
 }).noUnknown().strict().label("Company Schema");
 
 // src/social-account/social-account.schema.ts
-import { boolean as boolean6, object as object9, string as string6 } from "yup";
+import { boolean as boolean8, object as object11, string as string7 } from "yup";
 
 // src/social-account/social-account.constant.ts
 var SocialAccount = /* @__PURE__ */ ((SocialAccount2) => {
@@ -358,43 +503,43 @@ var SocialAccount = /* @__PURE__ */ ((SocialAccount2) => {
 var SupportedSocialAccounts = Object.values(SocialAccount);
 
 // src/social-account/social-account.schema.ts
-var SocialAccountSchema = object9().shape({
+var SocialAccountSchema = object11().shape({
   // TODO: Remove isNew - it's unused. Backend (user-social-accounts.service.ts) just strips it before saving.
-  isNew: boolean6().default(false).optional().label("Is New"),
-  type: string6().oneOf(SupportedSocialAccounts).required().label("Account Type"),
-  url: string6().required().label("URL")
+  isNew: boolean8().default(false).optional().label("Is New"),
+  type: string7().oneOf(SupportedSocialAccounts).required().label("Account Type"),
+  url: string7().required().label("URL")
 }).noUnknown().strict().label("Social Account");
 
 // src/page/page.schema.ts
-var PageSchema = object10().shape({
-  id: string7().required().label("ID"),
-  shortId: string7().required().label("Short ID"),
-  name: string7().required().label("Name"),
-  headline: string7().max(100).optional().label("Headline"),
-  about: string7().required().min(100).max(1e4).label("About"),
-  website: string7().required().label("Website"),
-  slug: string7().required().label("Slug"),
-  employeeCount: string7().optional().label("Employee Count"),
-  yearFounded: string7().optional().label("Year Founded"),
-  type: string7().oneOf(SupportedPageTypes).required().label("Page Type"),
-  locations: array5().of(PageLocationSchema).optional().label("Locations"),
+var PageSchema = object12().shape({
+  id: string8().required().label("ID"),
+  shortId: string8().required().label("Short ID"),
+  name: string8().required().label("Name"),
+  headline: string8().max(100).optional().label("Headline"),
+  about: string8().required().min(100).max(1e4).label("About"),
+  website: string8().required().label("Website"),
+  slug: string8().required().label("Slug"),
+  employeeCount: string8().optional().label("Employee Count"),
+  yearFounded: string8().optional().label("Year Founded"),
+  type: string8().oneOf(SupportedPageTypes).required().label("Page Type"),
+  locations: array6().of(PageLocationSchema).optional().label("Locations"),
   /*
    * @deprecated
    * 'locations' prop already has contact information, so this can be removed
    */
-  contacts: array5().of(
-    object10().shape({
-      type: string7().oneOf(SupportedContactTypes).required().label("Type"),
-      value: string7().required().label("Value"),
-      label: string7().optional().label("Label"),
-      isPrimary: boolean7().optional().default(false).label("Is Primary"),
-      isVerified: boolean7().optional().default(false).label("Is Verified")
+  contacts: array6().of(
+    object12().shape({
+      type: string8().oneOf(SupportedContactTypes).required().label("Type"),
+      value: string8().required().label("Value"),
+      label: string8().optional().label("Label"),
+      isPrimary: boolean9().optional().default(false).label("Is Primary"),
+      isVerified: boolean9().optional().default(false).label("Is Verified")
     })
   ).optional().label("Contacts"),
   verified: date().optional().label("Verified"),
-  logo: object10().shape({
-    dark: string7().optional().nullable().label("Dark Logo"),
-    light: string7().required().label("Light Logo")
+  logo: object12().shape({
+    dark: string8().optional().nullable().label("Dark Logo"),
+    light: string8().required().label("Light Logo")
   }).optional().nullable().default(null).label("Logo"),
   // Taxonomy (see job-taxonomy.constant.ts): category -> industry -> subCategory,
   // stored as slugs and translated for display. As on JobSchema, these are NOT
@@ -402,21 +547,21 @@ var PageSchema = object10().shape({
   // never a reason to reject the whole page. `categories` is the top level (kept
   // required for backward compatibility); `industries` and `subCategories` are the
   // deeper levels the tree picker fills in when a leaf auto-selects its parents.
-  categories: array5().of(string7().trim().required()).required().min(1).label("Categories"),
-  industries: array5().of(string7().trim().required()).optional().default([]).label("Industries"),
-  subCategories: array5().of(string7().trim().required()).optional().default([]).label("Sub Categories"),
-  socialAccounts: array5().of(SocialAccountSchema).optional().label("Social Accounts"),
-  isOwner: boolean7().optional().label("Is Owner"),
-  isFeatured: boolean7().optional().default(false).label("Is Featured"),
-  featuredMarkets: array5().of(string7().required()).optional().default([]).label("Featured Markets"),
-  status: string7().oneOf(SupportedPageStatuses).required().label("Status"),
-  followersCount: number4().min(0).optional().label("Followers Count")
+  categories: array6().of(string8().trim().required()).required().min(1).label("Categories"),
+  industries: array6().of(string8().trim().required()).optional().default([]).label("Industries"),
+  subCategories: array6().of(string8().trim().required()).optional().default([]).label("Sub Categories"),
+  socialAccounts: array6().of(SocialAccountSchema).optional().label("Social Accounts"),
+  isOwner: boolean9().optional().label("Is Owner"),
+  isFeatured: boolean9().optional().default(false).label("Is Featured"),
+  featuredMarkets: array6().of(string8().required()).optional().default([]).label("Featured Markets"),
+  status: string8().oneOf(SupportedPageStatuses).required().label("Status"),
+  followersCount: number5().min(0).optional().label("Followers Count")
 }).concat(CompanySchema).concat(InstituteSchema).concat(DbDefaultSchema).noUnknown(true).strict(true).required().label("Page Schema");
 
 // src/skill/skill.schema.ts
-import { array as array6, object as object11, string as string8 } from "yup";
-var SkillSchema = object11({
-  name: string8().trim().required().label("Skill Name"),
+import { array as array7, object as object13, string as string9 } from "yup";
+var SkillSchema = object13({
+  name: string9().trim().required().label("Skill Name"),
   /**
    * The taxonomy concept this skill resolved to, assigned by thejob-taxonomy-service
    * via `POST /normalize/batch`. Stable slug, e.g. "power-bi".
@@ -434,14 +579,14 @@ var SkillSchema = object11({
    *
    * Consumers must therefore read `conceptName ?? name`, never `conceptName` alone.
    */
-  conceptId: string8().optional().nullable().label("Concept ID"),
+  conceptId: string9().optional().nullable().label("Concept ID"),
   /** Canonical display name for `conceptId`, e.g. "Power BI". See `conceptId`. */
-  conceptName: string8().optional().nullable().label("Concept Name"),
-  logo: object11({
-    light: string8().required().label("Light Logo"),
-    dark: string8().optional().nullable().label("Dark Logo")
+  conceptName: string9().optional().nullable().label("Concept Name"),
+  logo: object13({
+    light: string9().required().label("Light Logo"),
+    dark: string9().optional().nullable().label("Dark Logo")
   }).optional().nullable().default(null).label("Logo"),
-  tags: array6().of(string8().max(50)).max(20).optional().label("Tags")
+  tags: array7().of(string9().max(50)).max(20).optional().label("Tags")
 }).concat(DbDefaultSchema).noUnknown().strict().label("Skill");
 
 // src/question/question.constant.ts
@@ -460,24 +605,24 @@ var AnswerChoiceType = /* @__PURE__ */ ((AnswerChoiceType2) => {
 var SupportedAnswerChoiceTypes = Object.values(AnswerChoiceType);
 
 // src/question/question.schema.ts
-import { boolean as boolean8, object as object12, string as string9 } from "yup";
-var QuestionSchema = object12().shape({
-  label: string9().max(50).optional().label("Label"),
-  default: boolean8().optional().default(false).label("Default"),
-  title: string9().required().max(200).label("Title"),
-  type: string9().oneOf(SupportedQuestionTypes).required().label("Type"),
-  isOptional: boolean8().optional().label("Mark if the question is optional"),
-  readonly: boolean8().optional().label("Readonly"),
-  isNew: boolean8().optional().label("Is New")
+import { boolean as boolean10, object as object14, string as string10 } from "yup";
+var QuestionSchema = object14().shape({
+  label: string10().max(50).optional().label("Label"),
+  default: boolean10().optional().default(false).label("Default"),
+  title: string10().required().max(200).label("Title"),
+  type: string10().oneOf(SupportedQuestionTypes).required().label("Type"),
+  isOptional: boolean10().optional().label("Mark if the question is optional"),
+  readonly: boolean10().optional().label("Readonly"),
+  isNew: boolean10().optional().label("Is New")
 });
 
 // src/question/input-question.schema.ts
-import { object as object13, string as string10 } from "yup";
+import { object as object15, string as string11 } from "yup";
 var InputQuestionSchema = QuestionSchema.concat(
-  object13().shape({
-    type: string10().oneOf(["input" /* Input */]).required().label("Question type"),
-    preferredAnswer: string10().max(100).optional().label("Preferred Answer"),
-    answers: string10().max(500).when("isOptional", {
+  object15().shape({
+    type: string11().oneOf(["input" /* Input */]).required().label("Question type"),
+    preferredAnswer: string11().max(100).optional().label("Preferred Answer"),
+    answers: string11().max(500).when("isOptional", {
       is: (isOptional) => Boolean(isOptional),
       then: (schema) => schema.optional(),
       otherwise: (schema) => schema.required()
@@ -486,10 +631,10 @@ var InputQuestionSchema = QuestionSchema.concat(
 );
 
 // src/question/choice-question.schema.ts
-import { array as array7, mixed as mixed2, object as object14, string as string11 } from "yup";
+import { array as array8, mixed as mixed2, object as object16, string as string12 } from "yup";
 var ChoicePreferredAnswerSchema = (label = "Preferred answer") => mixed2().when("answerChoiceType", {
   is: (value) => value === "multiple" /* Multiple */,
-  then: () => array7(string11()).test(
+  then: () => array8(string12()).test(
     "is-valid-option",
     `${label} must be from the provided options`,
     function(answer) {
@@ -500,7 +645,7 @@ var ChoicePreferredAnswerSchema = (label = "Preferred answer") => mixed2().when(
       return true;
     }
   ).optional().label(label),
-  otherwise: () => string11().test(
+  otherwise: () => string12().test(
     "is-valid-option",
     `${label} must be from the provided options`,
     function(answer) {
@@ -511,18 +656,18 @@ var ChoicePreferredAnswerSchema = (label = "Preferred answer") => mixed2().when(
 });
 var getChoiceAnswerSchema = (answerChoiceType, isOptional) => {
   if (answerChoiceType === "multiple" /* Multiple */) {
-    const multiAnswerSchema = array7(string11().max(500));
+    const multiAnswerSchema = array8(string12().max(500));
     return isOptional ? multiAnswerSchema.optional().default([]) : multiAnswerSchema.min(1, "Select at least one option.").required("Select at least one option.").default([]);
   }
-  const singleAnswerSchema = string11().max(500);
+  const singleAnswerSchema = string12().max(500);
   return isOptional ? singleAnswerSchema.optional() : singleAnswerSchema.required("Select an option.");
 };
 var ChoiceQuestionSchema = QuestionSchema.concat(
-  object14().shape({
-    type: string11().oneOf(["choice" /* Choice */]).required().label("Question type"),
-    optionsFrom: string11().oneOf(["skill" /* Skill */, "education_level" /* EducationLevel */, "experience_level" /* ExperienceLevel */]).optional().label("Option field"),
-    options: array7(string11().required()).min(1).required().label("Options"),
-    answerChoiceType: string11().oneOf(SupportedAnswerChoiceTypes).required().default("single" /* Single */).label("Type"),
+  object16().shape({
+    type: string12().oneOf(["choice" /* Choice */]).required().label("Question type"),
+    optionsFrom: string12().oneOf(["skill" /* Skill */, "education_level" /* EducationLevel */, "experience_level" /* ExperienceLevel */]).optional().label("Option field"),
+    options: array8(string12().required()).min(1).required().label("Options"),
+    answerChoiceType: string12().oneOf(SupportedAnswerChoiceTypes).required().default("single" /* Single */).label("Type"),
     preferredAnswer: ChoicePreferredAnswerSchema("Preferred answer"),
     answers: mixed2().when(
       ["answerChoiceType", "isOptional"],
@@ -532,12 +677,12 @@ var ChoiceQuestionSchema = QuestionSchema.concat(
 );
 
 // src/question/read-and-acknowledge.schema.ts
-import { object as object15, string as string12 } from "yup";
-var AcknowledgeAnswerSchema = string12().oneOf(["yes" /* Yes */, "no" /* No */]).required("This question must be acknowledged.");
+import { object as object17, string as string13 } from "yup";
+var AcknowledgeAnswerSchema = string13().oneOf(["yes" /* Yes */, "no" /* No */]).required("This question must be acknowledged.");
 var ReadAndAcknowledgeQuestionSchema = QuestionSchema.concat(
-  object15().shape({
-    type: string12().oneOf(["readAndAcknowledge" /* ReadAndAcknowledge */]).required().label("Question type"),
-    description: string12().max(1e4).required().label("Content"),
+  object17().shape({
+    type: string13().oneOf(["readAndAcknowledge" /* ReadAndAcknowledge */]).required().label("Question type"),
+    description: string13().max(1e4).required().label("Content"),
     preferredAnswer: AcknowledgeAnswerSchema.label("Preferred Answer"),
     answers: AcknowledgeAnswerSchema.label("Answer")
   })
@@ -618,20 +763,20 @@ var SupportedApplicationReceivePreferences = Object.values(
 );
 
 // src/job/job.schema.ts
-var JobSchema = object16({
+var JobSchema = object18({
   /** Unique id usable by external systems to reference the job. */
-  uniqueId: string13().optional().label("Unique ID"),
+  uniqueId: string14().optional().label("Unique ID"),
   /** Job title shown in listings and search. */
-  headline: string13().required().min(5).max(150).label("Headline"),
+  headline: string14().required().min(5).max(150).label("Headline"),
   /** User-friendly, unique URL identifier. */
-  slug: string13().required().max(250).label("Slug"),
+  slug: string14().required().max(250).label("Slug"),
   /** How applications are received (inbox vs external website). */
   applicationReceivePreference: mixed3().oneOf([
     "inbox" /* Inbox */,
     "external_website" /* ExternalWebsite */
   ]).required().label("Preference"),
   /** Required when applicationReceivePreference is ExternalWebsite. */
-  externalApplyLink: string13().when("applicationReceivePreference", {
+  externalApplyLink: string14().when("applicationReceivePreference", {
     is: (value) => value === "external_website" /* ExternalWebsite */,
     then: (schema) => schema.url().required().label("Apply for Job link"),
     otherwise: (schema) => schema.optional()
@@ -639,35 +784,35 @@ var JobSchema = object16({
   /** Company the job belongs to (subset of PageSchema). */
   company: PageSchema.pick(["name", "slug", "type", "logo"]).deepPartial().concat(PageSchema.pick(["name", "type"])).required().label("Company"),
   /** @deprecated kept for backwards compatibility. */
-  designation: string13().optional().nullable().label("Designation"),
-  employmentType: string13().required().label("Employment type"),
-  workMode: string13().required().label("Work mode"),
+  designation: string14().optional().nullable().label("Designation"),
+  employmentType: string14().required().label("Employment type"),
+  workMode: string14().required().label("Work mode"),
   /**
    * `conceptId`/`conceptName` carry the taxonomy-service normalization. They are
    * picked here (not just `name`/`logo`) because SkillSchema is `.noUnknown()`:
    * an unpicked field that is actually PRESENT fails validation, so omitting them
    * would reject every normalized job.
    */
-  skills: array8().of(
+  skills: array9().of(
     SkillSchema.pick(["name", "logo", "conceptId", "conceptName"]).required().label("Skill")
   ).nullable().optional().label("Skills"),
-  bookmarks: array8().of(UserIdAndCreatedAtSchema).optional().label("Bookmarks"),
-  embedding: object16({
-    vector: array8(number5().required()).optional().label("Embedding vector"),
-    model: string13().optional().label("Embedding model")
+  bookmarks: array9().of(UserIdAndCreatedAtSchema).optional().label("Bookmarks"),
+  embedding: object18({
+    vector: array9(number6().required()).optional().label("Embedding vector"),
+    model: string14().optional().label("Embedding model")
   }).nullable().optional().label("Embedding"),
-  applicants: array8().of(UserIdAndCreatedAtSchema).optional().label("Applicants"),
-  applicantCount: number5().optional().label("Applicant count"),
-  externalApplicationLinkClickCount: number5().optional().label("External application link click count"),
-  description: string13().required().min(100).max(5e4).label("Description"),
-  descriptionMarkdown: string13().required().label("Description Markdown"),
-  descriptionHTML: string13().optional().label("Description HTML"),
+  applicants: array9().of(UserIdAndCreatedAtSchema).optional().label("Applicants"),
+  applicantCount: number6().optional().label("Applicant count"),
+  externalApplicationLinkClickCount: number6().optional().label("External application link click count"),
+  description: string14().required().min(100).max(5e4).label("Description"),
+  descriptionMarkdown: string14().required().label("Description Markdown"),
+  descriptionHTML: string14().optional().label("Description HTML"),
   /**
    * Job locations. Required even for remote roles (compliance/legal). Defaults
    * to an empty array; min(1) is intentionally not enforced yet.
    */
-  locations: array8().of(LocationSchema).default([]).label("Location"),
-  educationLevel: array8(string13().oneOf(SupportedEducationLevels)).required().min(1).label("Educational level"),
+  locations: array9().of(LocationSchema).default([]).label("Location"),
+  educationLevel: array9(string14().oneOf(SupportedEducationLevels)).required().min(1).label("Educational level"),
   /** Posting validity window (start/expiry). */
   validity: DurationSchema({
     format: SYSTEM_DATE_FORMAT,
@@ -680,21 +825,21 @@ var JobSchema = object16({
    * has no `validity.endDate` and must be verified by crawling its page. Guards
    * re-check cadence so the same job is not re-crawled on every sweep.
    */
-  lastExpiryCheckAt: number5().optional().nullable().label("Last expiry check at"),
+  lastExpiryCheckAt: number6().optional().nullable().label("Last expiry check at"),
   /**
    * When this job transitioned to `status: closed` (epoch ms). Server-owned
    * operational field: stamped by every jobs-service close path (expiry
    * auto-close and the dated lapse sweep). Distinct from `updatedAt` so a later
    * edit to a closed job does not move it.
    */
-  closedAt: number5().optional().nullable().label("Closed at"),
-  experienceLevel: string13().oneOf(SupportedExperienceLevels).nullable().optional().label("Experience level"),
-  contactEmail: string13().email().nullable().optional().label("Contact email"),
-  workingHoursPerWeek: number5().nullable().optional().min(1).max(24 * 7).label("Working hours per week"),
-  tags: array8().max(50).optional().label("Tags"),
+  closedAt: number6().optional().nullable().label("Closed at"),
+  experienceLevel: string14().oneOf(SupportedExperienceLevels).nullable().optional().label("Experience level"),
+  contactEmail: string14().email().nullable().optional().label("Contact email"),
+  workingHoursPerWeek: number6().nullable().optional().min(1).max(24 * 7).label("Working hours per week"),
+  tags: array9().max(50).optional().label("Tags"),
   /** Direct/Quick-apply questionnaire. Each item is validated against the
    *  concrete question schema for its `type`, with the stored `answers` omitted. */
-  questionnaire: array8().of(
+  questionnaire: array9().of(
     lazy((question) => {
       const schema = getSchemaByQuestion(question.type);
       if (question.type === "input" /* Input */) {
@@ -711,12 +856,12 @@ var JobSchema = object16({
       return schema;
     })
   ).label("Questionnaire"),
-  status: string13().oneOf(SupportedJobStatuses).default("draft" /* Draft */).required().label("Status"),
-  seoTags: object16({
-    description: string13().optional().label("Description"),
-    keywords: array8().of(string13()).optional().label("Keywords")
+  status: string14().oneOf(SupportedJobStatuses).default("draft" /* Draft */).required().label("Status"),
+  seoTags: object18({
+    description: string14().optional().label("Description"),
+    keywords: array9().of(string14()).optional().label("Keywords")
   }).nullable().optional().label("SEO Tags"),
-  jdSummary: string13().optional().label("JD Summary"),
+  jdSummary: string14().optional().label("JD Summary"),
   /**
    * Structured, model-extracted sections of the posting, re-organized into clean
    * bullet points. This is our OWN unique presentation of the job (rendered as the
@@ -725,28 +870,28 @@ var JobSchema = object16({
    * optional: absent on jobs not yet (re-)enriched, and any section is `[]`/omitted
    * when the posting genuinely has none.
    */
-  jobHighlights: object16({
-    responsibilities: array8().of(string13()).optional().label("Responsibilities"),
-    requirements: array8().of(string13()).optional().label("Requirements"),
-    benefits: array8().of(string13()).optional().label("Benefits"),
-    qualifications: array8().of(string13()).optional().label("Qualifications")
+  jobHighlights: object18({
+    responsibilities: array9().of(string14()).optional().label("Responsibilities"),
+    requirements: array9().of(string14()).optional().label("Requirements"),
+    benefits: array9().of(string14()).optional().label("Benefits"),
+    qualifications: array9().of(string14()).optional().label("Qualifications")
   }).nullable().optional().label("Job Highlights"),
-  canCreateAlert: boolean9().optional().label("Can create alert"),
-  canDirectApply: boolean9().optional().label("Can direct apply"),
-  hasApplied: boolean9().optional().label("Has applied"),
-  isOwner: boolean9().optional().label("Is owner"),
-  hasBookmarked: boolean9().optional().label("Has bookmarked"),
-  hasReported: boolean9().optional().label("Has reported"),
-  ratePerHour: number5().optional().min(0).label("Rate per hour"),
-  isPromoted: boolean9().optional().label("Is promoted"),
-  salaryRange: object16({
-    currency: string13().required().label("Currency").default("USD"),
-    min: number5().nullable().optional().min(0).label("Minimum Salary"),
-    max: number5().nullable().optional().min(0).label("Maximum Salary"),
-    compensationType: string13().oneOf(SupportedCompensationTypes).nullable().optional().label("Compensation Type"),
-    isNegotiable: boolean9().nullable().optional().default(true).label("Is Negotiable")
+  canCreateAlert: boolean11().optional().label("Can create alert"),
+  canDirectApply: boolean11().optional().label("Can direct apply"),
+  hasApplied: boolean11().optional().label("Has applied"),
+  isOwner: boolean11().optional().label("Is owner"),
+  hasBookmarked: boolean11().optional().label("Has bookmarked"),
+  hasReported: boolean11().optional().label("Has reported"),
+  ratePerHour: number6().optional().min(0).label("Rate per hour"),
+  isPromoted: boolean11().optional().label("Is promoted"),
+  salaryRange: object18({
+    currency: string14().required().label("Currency").default("USD"),
+    min: number6().nullable().optional().min(0).label("Minimum Salary"),
+    max: number6().nullable().optional().min(0).label("Maximum Salary"),
+    compensationType: string14().oneOf(SupportedCompensationTypes).nullable().optional().label("Compensation Type"),
+    isNegotiable: boolean11().nullable().optional().default(true).label("Is Negotiable")
   }).nullable().optional().label("Salary Range"),
-  reports: array8().of(UserIdAndCreatedAtSchema).optional().label("Reports"),
+  reports: array9().of(UserIdAndCreatedAtSchema).optional().label("Reports"),
   // Taxonomy fields are constants (see job-taxonomy.constant.ts), stored as slugs and
   // translated for display. They are deliberately NOT `oneOf`-constrained here: a value
   // outside the taxonomy must be DROPPED, never a reason to reject the posting. Yup
@@ -759,15 +904,135 @@ var JobSchema = object16({
   // time (values get renamed, retired, added), so stored jobs will always outlive the
   // enum — being lenient here is what lets the taxonomy evolve without a migration
   // gate on every write.
-  category: string13().nullable().optional().label("Category"),
-  industry: string13().nullable().optional().label("Industry"),
-  subCategories: array8().of(string13().trim().required()).nullable().optional().label("Sub Categories"),
-  termsAccepted: boolean9().oneOf([true], "Accept terms before proceeding").required("Accept terms before proceeding").label("Terms accepted"),
-  isFeatured: boolean9().optional().default(false).label("Is featured"),
+  category: string14().nullable().optional().label("Category"),
+  industry: string14().nullable().optional().label("Industry"),
+  subCategories: array9().of(string14().trim().required()).nullable().optional().label("Sub Categories"),
+  termsAccepted: boolean11().oneOf([true], "Accept terms before proceeding").required("Accept terms before proceeding").label("Terms accepted"),
+  isFeatured: boolean11().optional().default(false).label("Is featured"),
   /** Market country codes to feature this job in; empty = global. */
-  featuredMarkets: array8().of(string13().required()).optional().default([]).label("Featured markets")
+  featuredMarkets: array9().of(string14().required()).optional().default([]).label("Featured markets")
 }).concat(DbDefaultSchema).noUnknown().label("Job");
 
+// src/job/job-filter.schema.ts
+import { boolean as boolean12, number as number7, object as object19, string as string15 } from "yup";
+
+// src/user/user.constant.ts
+var UserRole = /* @__PURE__ */ ((UserRole2) => {
+  UserRole2["Admin"] = "admin";
+  UserRole2["Moderator"] = "moderator";
+  UserRole2["Manager"] = "manager";
+  UserRole2["Recruiter"] = "recruiter";
+  UserRole2["JobSeeker"] = "job_seeker";
+  UserRole2["Coordinator"] = "coordinator";
+  UserRole2["System"] = "system";
+  UserRole2["Normal"] = "normal";
+  return UserRole2;
+})(UserRole || {});
+var SupportedUserRoles = Object.values(UserRole);
+var UserStatus = /* @__PURE__ */ ((UserStatus2) => {
+  UserStatus2["Active"] = "active";
+  UserStatus2["Blocked"] = "blocked";
+  UserStatus2["Pending"] = "pending";
+  UserStatus2["Deleted"] = "deleted";
+  UserStatus2["MarkedForDeletion"] = "marked_for_deletion";
+  return UserStatus2;
+})(UserStatus || {});
+var SupportedUserStatuses = Object.values(UserStatus);
+var DefaultUserRoles = ["normal" /* Normal */];
+var UserProfileVisibility = /* @__PURE__ */ ((UserProfileVisibility2) => {
+  UserProfileVisibility2["Public"] = "public";
+  UserProfileVisibility2["Private"] = "private";
+  UserProfileVisibility2["Hidden"] = "hidden";
+  return UserProfileVisibility2;
+})(UserProfileVisibility || {});
+var SupportedUserProfileVisibilities = Object.values(
+  UserProfileVisibility
+);
+var SignupContextSource = /* @__PURE__ */ ((SignupContextSource2) => {
+  SignupContextSource2["CfHeader"] = "cf-header";
+  SignupContextSource2["Location"] = "location";
+  SignupContextSource2["Default"] = "default";
+  return SignupContextSource2;
+})(SignupContextSource || {});
+var SupportedSignupContextSources = Object.values(SignupContextSource);
+var UserDetailType = /* @__PURE__ */ ((UserDetailType2) => {
+  UserDetailType2["Overview"] = "overview";
+  UserDetailType2["AdditionalInfo"] = "additionalInfo";
+  UserDetailType2["General"] = "general";
+  UserDetailType2["SocialAccounts"] = "socialAccounts";
+  UserDetailType2["WorkExperiences"] = "workExperiences";
+  UserDetailType2["Educations"] = "educations";
+  UserDetailType2["Skills"] = "skills";
+  UserDetailType2["Languages"] = "languages";
+  UserDetailType2["Certifications"] = "certifications";
+  UserDetailType2["Interests"] = "interests";
+  UserDetailType2["Projects"] = "projects";
+  return UserDetailType2;
+})(UserDetailType || {});
+var ProficiencyLevel = /* @__PURE__ */ ((ProficiencyLevel2) => {
+  ProficiencyLevel2["BasicAwareness"] = "basic_awareness";
+  ProficiencyLevel2["Beginner"] = "beginner";
+  ProficiencyLevel2["Intermediate"] = "intermediate";
+  ProficiencyLevel2["Advanced"] = "advanced";
+  ProficiencyLevel2["Expert"] = "expert";
+  return ProficiencyLevel2;
+})(ProficiencyLevel || {});
+var SupportedProficiencyLevels = Object.values(ProficiencyLevel);
+var JobSearchUrgency = /* @__PURE__ */ ((JobSearchUrgency2) => {
+  JobSearchUrgency2["Asap"] = "asap";
+  JobSearchUrgency2["WithinThreeMonths"] = "within_3_months";
+  JobSearchUrgency2["WithinSixMonths"] = "within_6_months";
+  JobSearchUrgency2["PassivelyBrowsing"] = "passively_browsing";
+  return JobSearchUrgency2;
+})(JobSearchUrgency || {});
+var SupportedJobSearchUrgencies = Object.values(JobSearchUrgency);
+var ReferralSource = /* @__PURE__ */ ((ReferralSource2) => {
+  ReferralSource2["Recruiter"] = "recruiter";
+  ReferralSource2["LinkedIn"] = "linkedin";
+  ReferralSource2["TikTokInstagram"] = "tiktok_instagram";
+  ReferralSource2["Google"] = "google";
+  ReferralSource2["Reddit"] = "reddit";
+  ReferralSource2["ChatGptGemini"] = "chatgpt_gemini";
+  ReferralSource2["Friend"] = "friend";
+  ReferralSource2["Other"] = "other";
+  return ReferralSource2;
+})(ReferralSource || {});
+var SupportedReferralSources = Object.values(ReferralSource);
+var JobAlertFrequency = /* @__PURE__ */ ((JobAlertFrequency2) => {
+  JobAlertFrequency2["Off"] = "off";
+  JobAlertFrequency2["Daily"] = "daily";
+  JobAlertFrequency2["Weekly"] = "weekly";
+  return JobAlertFrequency2;
+})(JobAlertFrequency || {});
+var SupportedJobAlertFrequencies = Object.values(JobAlertFrequency);
+var NotificationType = /* @__PURE__ */ ((NotificationType2) => {
+  NotificationType2["GroupActivity"] = "groupActivity";
+  NotificationType2["JobActivity"] = "jobActivity";
+  NotificationType2["ApplicationUpdates"] = "applicationUpdates";
+  NotificationType2["ProductUpdates"] = "productUpdates";
+  return NotificationType2;
+})(NotificationType || {});
+var SupportedNotificationTypes = Object.values(NotificationType);
+var SupportedSalaryCurrencies = ["USD", "EUR", "GBP", "SEK", "INR"];
+var MIN_SALARY_LOWER_BOUND = 0;
+var MIN_SALARY_UPPER_BOUND = 1e6;
+var PREFILL_MIRRORED_KEYS = [
+  "headline",
+  "aboutMe",
+  "mobile",
+  "location",
+  "experienceLevel",
+  "socialAccounts",
+  "workExperiences",
+  "educations"
+];
+var PRIVATE_PROFILE_FIELDS = [
+  "email",
+  "emailVerified",
+  "mobile",
+  "additionalInfo"
+];
+
 // src/job/job-taxonomy.constant.ts
 var JobCategory = /* @__PURE__ */ ((JobCategory2) => {
   JobCategory2["TechnologyDataAndDigital"] = "technology_data_and_digital";
@@ -1835,6 +2100,185 @@ var TAXONOMY_LABELS = {
   "fleet_management": "Fleet Management"
 };
 
+// src/job/job-filter.schema.ts
+var GEO_GROUP = "Geo";
+var JobFilterShape = object19({
+  // ── Classification ──────────────────────────────────────────────────────────
+  // Closed vocabularies, sent verbatim and matched exactly: a partial match
+  // would make "remote" also match a hypothetical "remote_first".
+  employmentType: enumFacet(SupportedEmploymentTypes, "Employment Type"),
+  workMode: enumFacet(SupportedWorkModes, "Work Mode"),
+  experienceLevel: enumFacet(SupportedExperienceLevels, "Experience Level"),
+  educationLevel: enumFacet(SupportedEducationLevels, "Education Level"),
+  status: enumFacet(SupportedJobStatuses, "Status"),
+  // ── Taxonomy ────────────────────────────────────────────────────────────────
+  // NOT `enumFacet`, deliberately. Taxonomy is stored as the ENGLISH LABEL
+  // ("Technology, Data & Digital"), not the enum constant, so a caller sends the
+  // label and constraining these to `SupportedJobCategories` would reject every
+  // value that actually matches.
+  //
+  // `meta.options` publishes the vocabulary anyway, for forms only. The schema
+  // still accepts any string — it must, per the note above — but an admin
+  // picking one of eight categories should not be typing it: the stored label
+  // is "Technology, Data & Digital", and a hand-typed "Technology" matches
+  // nothing while looking correctly configured.
+  category: tokens("Category").meta({ options: SupportedJobCategories }),
+  industry: tokens("Industry").meta({ options: SupportedJobIndustries }),
+  subCategories: tokens("Sub-category").meta({
+    options: SupportedJobSubCategories
+  }),
+  tags: tokens("Tags"),
+  // ── Identity ────────────────────────────────────────────────────────────────
+  /**
+   * Specific jobs, by `shortId`. The one facet that names jobs outright rather
+   * than narrowing by an attribute of them.
+   *
+   * It exists for a HAND-PICKED set: a group whose jobs an admin chose
+   * individually stores exactly this list as `group.jobIds`, so the field and
+   * the facet share a name and the stored data needs no translation.
+   *
+   * Case is LOAD-BEARING and must not be normalised: a shortId is mixed case
+   * (`tI8wnSIgRG5O`), so the uppercase treatment country and state codes get
+   * would turn every lookup into a match on nothing.
+   */
+  jobIds: tokens("Jobs"),
+  // ── Skills and company ──────────────────────────────────────────────────────
+  //
+  // `widget` is a RENDERING hint for whoever builds a form from this schema: it
+  // names the picker that produces values this facet can actually match, and
+  // nothing validates differently because of it. A form generated without one
+  // falls back to a free text box, which is what every admin filter was doing —
+  // so "Angular" was typed where the stored skill is "angular" and the filter
+  // narrowed to nothing while looking correctly configured.
+  skills: tokens("Skills").meta({ widget: "skill" }),
+  /** Company page SLUGS: a display name breaks the day a company renames itself. */
+  companies: tokens("Companies").meta({ widget: "company" }),
+  /**
+   * Company display names, for callers that only have one. Prefer `companies`.
+   *
+   * `hidden`: not a second control in a generated form. An admin picking a
+   * company gets the page, and `companies` (its slug) is the stable way to name
+   * it — a display name stops matching the day a company renames itself. This
+   * stays in the vocabulary for API callers who genuinely only hold a name.
+   */
+  companyNames: tokens("Company Names").meta({ widget: "hidden" }),
+  // ── Location ────────────────────────────────────────────────────────────────
+  //
+  // Four facets, THREE controls. They are independent OR-lists: jobs-service
+  // matches each path separately, so `countryCodes` alone asks "anywhere in
+  // India" and `cities` alone asks "in Pune, wherever that is". Collapsing them
+  // into one object facet would lose exactly that, and lose the cross-entry
+  // reading ("has an India office OR a London office") with it.
+  //
+  // What they must NOT be is free text. A country here is `IN`, not "India",
+  // and a state code is a BARE `KA`, not `IN-KA` — type either long form and
+  // the filter matches nothing while looking correctly configured.
+  //
+  // So each names the GEO reference autocomplete (common-service `/geo/*`, a
+  // closed vocabulary) and the field of the picked row it stores. `geoLevel`
+  // says which endpoint to search and `geoField` which key lands in the facet.
+  //
+  // THREE controls, not four: a picked state carries its name and its code, so
+  // the old separate "State Codes" box asked twice for one fact. See `states`.
+  //
+  // Geoapify's `/locations` is NOT the vocabulary here. It geocodes free-text
+  // addresses — the right tool for "where is this job", the wrong one for a
+  // filter, since it is a paid call per keystroke and its results are open.
+  /** ISO 3166-1 alpha-2, uppercase. */
+  countryCodes: codeTokens("Countries").meta({
+    group: GEO_GROUP,
+    widget: "geo",
+    geoLevel: "country",
+    geoField: "countryCode"
+  }),
+  /** Stored BARE (`KA`, not `IN-KA`) — see @todo STATE-CODE-ISO-PREFIX. */
+  stateCodes: codeTokens("States").meta({
+    group: GEO_GROUP,
+    widget: "geo",
+    geoLevel: "state",
+    geoField: "stateCode"
+  }),
+  /**
+   * State NAMES, kept as a facet but WITHOUT a control of its own.
+   *
+   * There is no second box to fill: a picked state carries its name and its
+   * code together, so asking an admin for both was asking twice for one fact.
+   * The picker writes `stateCodes`, which is where the data is going.
+   *
+   * The facet stays because jobs still hold state names — 15,483 carry a name
+   * with NO code — and a saved campaign may already constrain on it. Removing
+   * it would silently drop that constraint from those campaigns. It becomes
+   * unreachable from the UI and is settled by the data migration.
+   *
+   * @todo STATE-CODE-ISO-PREFIX — retire once every job carries a stateCode.
+   */
+  states: tokens("States").meta({ group: GEO_GROUP, widget: "hidden" }),
+  /**
+   * City NAMES, and the one facet here that does not match on a code.
+   *
+   * A name is a display label, not a matching key: it is not unique (99 Indian
+   * city names repeat in the reference data) and not stable (Bengaluru was
+   * Bangalore). Every other facet here matches a code for exactly that reason.
+   *
+   * Cities cannot yet. There is no city code to match ON either side: the
+   * reference dataset carries none, and no job stores one — `LocationSchema`
+   * has country/state codes and a city NAME. A `cityCodes` facet would match
+   * zero of 82,875 jobs on day one.
+   *
+   * So this stays on the name, and the picker does the work a code would: the
+   * admin selects a real city from the reference data, so the stored string is
+   * guaranteed to be a spelling that exists rather than a typo that silently
+   * matches nothing.
+   *
+   * @todo CITY-CODE-UNLOCODE — the fix is UN/LOCODE (or IATA) as the city key,
+   * and it is a data programme, not a facet change: ingest and reconcile the
+   * codes against the 152,970 reference rows, add `cityCode` to
+   * `LocationSchema`, backfill the ~81,000 jobs that carry only a name, and fix
+   * the write paths that emit it. Only then can this match on a code.
+   */
+  cities: tokens("Cities").meta({
+    group: GEO_GROUP,
+    widget: "geo",
+    geoLevel: "city",
+    geoField: "name"
+  }),
+  // ── Flags ───────────────────────────────────────────────────────────────────
+  // No `.default(false)`: an unchecked box must mean "no constraint", not "only
+  // the non-featured ones", so absent simply omits the clause.
+  isFeatured: boolean12().optional().label("Featured Only"),
+  isPromoted: boolean12().optional().label("Promoted Only"),
+  featuredMarkets: tokens("Featured Markets"),
+  // ── Ranges ──────────────────────────────────────────────────────────────────
+  /**
+   * Matched as an OVERLAP against the job's advertised band, not as a bound on
+   * one end: `{min}` keeps jobs whose `salaryRange.max` reaches it.
+   */
+  // NOT `currencyBound`: that guards the USER filter, where several currencies
+  // can be selected and a bound is meaningless across them. Here the currency is
+  // a single sibling field, so the bound is plain and the currency simply
+  // narrows which jobs are compared.
+  salary: object19({
+    min: number7().integer().min(0).optional().default(void 0).label("Salary \u2265"),
+    max: number7().integer().min(0).optional().default(void 0).label("Salary \u2264"),
+    currency: string15().oneOf(SupportedSalaryCurrencies).optional().label("Currency")
+  }).optional().default(void 0).label("Salary"),
+  /** Posted within this many days. Relative, so a saved filter does not rot. */
+  postedWithinDays: days("Posted Within (days)"),
+  /**
+   * Absolute posting window, for callers that want bounds rather than the
+   * relative `postedWithinDays`. EPOCH MS, matching how the field is stored — a
+   * coerced date string would not compare.
+   */
+  createdAt: object19({
+    min: epoch("Posted After"),
+    max: epoch("Posted Before")
+  }).optional().default(void 0).label("Posted Between")
+}).label("Job Filter");
+var JobFilterSchema = rejectUnknownKeys(
+  JobFilterShape,
+  () => Object.keys(JobFilterShape.fields)
+);
+
 // src/job/job-taxonomy.util.ts
 var INDUSTRY_OF_SUB = new Map(
   JOB_TAXONOMY.flatMap(
@@ -1879,7 +2323,7 @@ function deriveIndustry(category, subCategories) {
 }
 
 // src/post/post.schema.ts
-import { array as array9, boolean as boolean10, number as number6, object as object17, string as string14 } from "yup";
+import { array as array11, boolean as boolean13, number as number8, object as object20, string as string16 } from "yup";
 
 // src/post/post.constant.ts
 var PostStatus = /* @__PURE__ */ ((PostStatus2) => {
@@ -1891,177 +2335,540 @@ var PostStatus = /* @__PURE__ */ ((PostStatus2) => {
 var SupportedPostStatuses = Object.values(PostStatus);
 
 // src/post/post.schema.ts
-var PostSchema = object17({
+var PostSchema = object20({
   /** Headline shown in listings and at the top of the post. */
-  title: string14().required().min(5).max(200).label("Title"),
+  title: string16().required().min(5).max(200).label("Title"),
   /** User-friendly, unique URL identifier. */
-  slug: string14().required().max(250).label("Slug"),
+  slug: string16().required().max(250).label("Slug"),
   /** Short summary used in listings and meta description fallback. */
-  excerpt: string14().max(500).optional().label("Excerpt"),
+  excerpt: string16().max(500).optional().label("Excerpt"),
   /** Rendered HTML source of truth for the post body (sanitized on write/render).
    *  Supports rich formatting markdown can't express (image size/alignment, etc). */
-  bodyHTML: string14().required().min(1).label("Body (HTML)"),
+  bodyHTML: string16().required().min(1).label("Body (HTML)"),
   /** Optional Markdown mirror of the body (portable text / search fallback).
    *  Kept for back-compat and plain-text derivation; bodyHTML is authoritative. */
-  bodyMarkdown: string14().optional().label("Body (Markdown)"),
+  bodyMarkdown: string16().optional().label("Body (Markdown)"),
   /** Cover/hero image URL. Not `.url()`-validated: the value is either an
    *  uploaded file URL served by this platform (which may be a bare host like
    *  `http://localhost:3082/...` in dev, that yup's `.url()` wrongly rejects) or
    *  an admin-pasted link. Kept as a plain string; empty ⇒ null. */
-  coverImage: string14().nullable().optional().label("Cover image"),
+  coverImage: string16().nullable().optional().label("Cover image"),
   /** Author (user id). */
-  authorId: string14().required().label("Author ID"),
+  authorId: string16().required().label("Author ID"),
   /** Free-form tags for filtering and related-posts. */
-  tags: array9().of(string14().trim().required()).default([]).label("Tags"),
+  tags: array11().of(string16().trim().required()).default([]).label("Tags"),
   /** Estimated reading time in minutes (server-derived from body length). */
-  readingTimeMinutes: number6().min(0).optional().label("Reading time (minutes)"),
+  readingTimeMinutes: number8().min(0).optional().label("Reading time (minutes)"),
   /** SEO overrides. */
-  seoTags: object17({
-    description: string14().optional().label("Description"),
-    keywords: array9().of(string14().required()).optional().label("Keywords")
+  seoTags: object20({
+    description: string16().optional().label("Description"),
+    keywords: array11().of(string16().required()).optional().label("Keywords")
   }).nullable().optional().label("SEO Tags"),
   /** When the post was first published (epoch ms). Server-owned. */
-  publishedAt: number6().nullable().optional().label("Published at"),
+  publishedAt: number8().nullable().optional().label("Published at"),
   /** Whether the post is featured in the blog listing. */
-  isFeatured: boolean10().default(false).optional().label("Is featured"),
+  isFeatured: boolean13().default(false).optional().label("Is featured"),
   /** Publication state. */
-  status: string14().oneOf(SupportedPostStatuses).default("draft" /* Draft */).required().label("Status")
+  status: string16().oneOf(SupportedPostStatuses).default("draft" /* Draft */).required().label("Status")
 }).concat(DbDefaultSchema).noUnknown().label("Post");
 
-// src/marketing/marketing.schema.ts
-import { array as array10, boolean as boolean11, lazy as lazy2, mixed as mixed4, number as number7, object as object18, string as string15 } from "yup";
+// src/geo/geo.constant.ts
+var GeoKind = /* @__PURE__ */ ((GeoKind2) => {
+  GeoKind2["Country"] = "country";
+  GeoKind2["State"] = "state";
+  GeoKind2["City"] = "city";
+  return GeoKind2;
+})(GeoKind || {});
+var SupportedGeoKinds = Object.values(GeoKind);
+var GeoSyncStatus = /* @__PURE__ */ ((GeoSyncStatus3) => {
+  GeoSyncStatus3["Pending"] = "pending";
+  GeoSyncStatus3["Running"] = "running";
+  GeoSyncStatus3["Succeeded"] = "succeeded";
+  GeoSyncStatus3["Failed"] = "failed";
+  GeoSyncStatus3["Skipped"] = "skipped";
+  return GeoSyncStatus3;
+})(GeoSyncStatus || {});
+var SupportedGeoSyncStatuses = Object.values(GeoSyncStatus);
+var TerminalGeoSyncStatuses = [
+  "succeeded" /* Succeeded */,
+  "failed" /* Failed */,
+  "skipped" /* Skipped */
+];
+var GeoSyncPhase = /* @__PURE__ */ ((GeoSyncPhase3) => {
+  GeoSyncPhase3["Checking"] = "checking";
+  GeoSyncPhase3["Countries"] = "countries";
+  GeoSyncPhase3["States"] = "states";
+  GeoSyncPhase3["Cities"] = "cities";
+  GeoSyncPhase3["Indexing"] = "indexing";
+  GeoSyncPhase3["Done"] = "done";
+  return GeoSyncPhase3;
+})(GeoSyncPhase || {});
+var SupportedGeoSyncPhases = Object.values(GeoSyncPhase);
+var GeoSyncTrigger = /* @__PURE__ */ ((GeoSyncTrigger3) => {
+  GeoSyncTrigger3["Manual"] = "manual";
+  GeoSyncTrigger3["Boot"] = "boot";
+  return GeoSyncTrigger3;
+})(GeoSyncTrigger || {});
+var SupportedGeoSyncTriggers = Object.values(GeoSyncTrigger);
+var GEO_COLLECTIONS = {
+  countries: "geo_countries",
+  states: "geo_states",
+  cities: "geo_cities",
+  syncRuns: "geo_sync_runs"
+};
+var GEO_SEARCH_MAX = 64;
 
-// src/user/user.constant.ts
-var UserRole = /* @__PURE__ */ ((UserRole2) => {
-  UserRole2["Admin"] = "admin";
-  UserRole2["Moderator"] = "moderator";
-  UserRole2["Manager"] = "manager";
-  UserRole2["Recruiter"] = "recruiter";
-  UserRole2["JobSeeker"] = "job_seeker";
-  UserRole2["Coordinator"] = "coordinator";
-  UserRole2["System"] = "system";
-  UserRole2["Normal"] = "normal";
-  return UserRole2;
-})(UserRole || {});
-var SupportedUserRoles = Object.values(UserRole);
-var UserStatus = /* @__PURE__ */ ((UserStatus2) => {
-  UserStatus2["Active"] = "active";
-  UserStatus2["Blocked"] = "blocked";
-  UserStatus2["Pending"] = "pending";
-  UserStatus2["Deleted"] = "deleted";
-  UserStatus2["MarkedForDeletion"] = "marked_for_deletion";
-  return UserStatus2;
-})(UserStatus || {});
-var SupportedUserStatuses = Object.values(UserStatus);
-var DefaultUserRoles = ["normal" /* Normal */];
-var UserProfileVisibility = /* @__PURE__ */ ((UserProfileVisibility2) => {
-  UserProfileVisibility2["Public"] = "public";
-  UserProfileVisibility2["Private"] = "private";
-  UserProfileVisibility2["Hidden"] = "hidden";
-  return UserProfileVisibility2;
-})(UserProfileVisibility || {});
-var SupportedUserProfileVisibilities = Object.values(
-  UserProfileVisibility
+// src/geo/country.schema.ts
+import { array as array12, number as number9, object as object21, string as string17 } from "yup";
+var CountrySchema = object21({
+  /** The upstream dr5hn id. Stable, and the key every upsert matches on. */
+  id: number9().integer().required().label("ID"),
+  name: string17().trim().required().label("Name"),
+  /**
+   * ISO 3166-1 alpha-2, UPPERCASE (`IN`, `SE`).
+   *
+   * Uppercased on ingest, because every filter facet in this package
+   * uppercase-normalizes codes (`codeTokens`) and stored job/user documents are
+   * already clean uppercase alpha-2. A lowercase value here would compare
+   * unequal to all of them and silently match nothing.
+   */
+  countryCode: string17().trim().uppercase().length(2).required().label("Country Code"),
+  iso3: string17().trim().uppercase().length(3).optional().nullable().label("ISO3"),
+  numericCode: string17().trim().optional().nullable().label("Numeric Code"),
+  phonecode: string17().trim().optional().nullable().label("Phone Code"),
+  capital: string17().trim().optional().nullable().label("Capital"),
+  currency: string17().trim().optional().nullable().label("Currency"),
+  currencyName: string17().trim().optional().nullable().label("Currency Name"),
+  currencySymbol: string17().trim().optional().nullable().label("Currency Symbol"),
+  tld: string17().trim().optional().nullable().label("TLD"),
+  /** The name in its own script, e.g. "भारत". Stored, but NOT searchable; see `searchByLocale`. */
+  native: string17().trim().optional().nullable().label("Native Name"),
+  population: number9().optional().nullable().label("Population"),
+  gdp: number9().optional().nullable().label("GDP"),
+  region: string17().trim().optional().nullable().label("Region"),
+  regionId: number9().integer().optional().nullable().label("Region ID"),
+  subregion: string17().trim().optional().nullable().label("Subregion"),
+  subregionId: number9().integer().optional().nullable().label("Subregion ID"),
+  nationality: string17().trim().optional().nullable().label("Nationality"),
+  areaSqKm: number9().optional().nullable().label("Area (sq km)"),
+  postalCodeFormat: string17().trim().optional().nullable().label("Postal Code Format"),
+  postalCodeRegex: string17().optional().nullable().label("Postal Code Regex"),
+  timezones: array12().of(
+    object21({
+      zoneName: string17().optional().nullable().label("Zone Name"),
+      gmtOffset: number9().optional().nullable().label("GMT Offset"),
+      gmtOffsetName: string17().optional().nullable().label("GMT Offset Name"),
+      abbreviation: string17().optional().nullable().label("Abbreviation"),
+      tzName: string17().optional().nullable().label("TZ Name")
+    })
+  ).optional().nullable().label("Timezones"),
+  /**
+   * Localized names keyed by locale (`{ sv: "Indien", fr: "Inde", … }`), ~19 of
+   * them. Deliberately UNSHAPED: the key set is upstream's to change, and
+   * declaring it here would turn a new locale into a validation failure. The
+   * VALUES are split per-locale into `searchByLocale`.
+   */
+  translations: object21().optional().nullable().label("Translations"),
+  /**
+   * Coordinates as NUMBERS.
+   *
+   * Upstream ships these as strings (`"33.00000000"`). They are coerced on
+   * ingest, because a range query against a string compares lexicographically:
+   * `"9" > "10"` is true, so a bounding-box filter would be quietly wrong rather
+   * than failing loudly.
+   */
+  latitude: number9().optional().nullable().label("Latitude"),
+  longitude: number9().optional().nullable().label("Longitude"),
+  emoji: string17().optional().nullable().label("Emoji"),
+  emojiU: string17().optional().nullable().label("Emoji Unicode"),
+  /**
+   * The name field searched for the DEFAULT (English) locale: the canonical
+   * `name`, and nothing else.
+   *
+   * Search is scoped to ONE locale, so the searchable names are split across
+   * this field and `searchByLocale` rather than pooled into one array. A pooled
+   * field would make every locale's search implicitly a search of all 19
+   * languages: a French UI searching "Inde" would also match German "Indien".
+   */
+  searchDefault: array12().of(string17().required()).optional().default([]).label("Search Default"),
+  /**
+   * Per-locale name fields, keyed by lowercased BCP-47 tag (`de`, `pt-br`).
+   * Each carries ONLY that locale's translation, which is what makes
+   * `?locale=de` German and not "German plus everything that looks similar".
+   *
+   * Unshaped for the same reason as `translations`: the key set is upstream's.
+   *
+   * `native` is deliberately NOT indexed here. It cannot be attributed to a
+   * language with this data — 84% of city native names equal SEVERAL locales'
+   * translations (Latin spellings coinciding across de/it/nl/hr/pl) while
+   * distinctive non-Latin names like `भारत` match none — so filing `कर्नाटक`
+   * under German would be worse than not indexing it at all.
+   *
+   * The 19 upstream locales are br, ko, pt-BR, pt, nl, hr, fa, de, es, fr, ja,
+   * it, zh-CN, tr, ru, uk, pl, hi, ar. **`sv` is absent**, so a Swedish search
+   * matches nothing. That is the accepted cost of strict scoping.
+   */
+  searchByLocale: object21().optional().nullable().label("Search By Locale"),
+  /** Epoch ms of the run that last wrote this row. Drives the stale-row prune. */
+  syncedAt: number9().optional().nullable().label("Synced At")
+}).label("Country");
+
+// src/geo/state.schema.ts
+import { array as array13, number as number10, object as object22, string as string18 } from "yup";
+var StateSchema = object22({
+  /** The upstream dr5hn id. Stable, and the key every upsert matches on. */
+  id: number10().integer().required().label("ID"),
+  name: string18().trim().required().label("Name"),
+  countryId: number10().integer().optional().nullable().label("Country ID"),
+  /** ISO 3166-1 alpha-2 of the parent, UPPERCASE. See `CountrySchema.countryCode`. */
+  countryCode: string18().trim().uppercase().length(2).required().label("Country Code"),
+  countryName: string18().trim().optional().nullable().label("Country Name"),
+  /**
+   * The BARE subdivision code, e.g. `KA` (upstream `iso2`).
+   *
+   * `@todo STATE-CODE-ISO-PREFIX` — this is **not globally unique**: `BDS`, `CA`,
+   * `NL` and `SP` all recur across several countries, so it is only meaningful
+   * PAIRED with `countryCode`. That is why the cities route is nested under both
+   * codes rather than under a state code alone, which would silently serve
+   * another country's cities. `stateCodeIso` below is the migration target;
+   * both are stored so the migration has its destination present before any
+   * consumer moves.
+   */
+  stateCode: string18().trim().uppercase().optional().nullable().label("State Code"),
+  /** Fully-qualified ISO 3166-2, e.g. `IN-KA` (upstream `iso3166_2`). */
+  stateCodeIso: string18().trim().uppercase().optional().nullable().label("ISO 3166-2 Code"),
+  fipsCode: string18().trim().optional().nullable().label("FIPS Code"),
+  /** Upstream's own word for the subdivision: "province", "state", "district", … */
+  type: string18().trim().optional().nullable().label("Type"),
+  level: number10().integer().optional().nullable().label("Level"),
+  parentId: number10().integer().optional().nullable().label("Parent ID"),
+  /** The name in its own script. Stored, but NOT searchable; see `searchByLocale`. */
+  native: string18().trim().optional().nullable().label("Native Name"),
+  /** Numbers, not the strings upstream ships. See `CountrySchema.latitude`. */
+  latitude: number10().optional().nullable().label("Latitude"),
+  longitude: number10().optional().nullable().label("Longitude"),
+  timezone: string18().trim().optional().nullable().label("Timezone"),
+  /** Localized names keyed by locale. Unshaped; see `CountrySchema.translations`. */
+  translations: object22().optional().nullable().label("Translations"),
+  /**
+   * The name field searched for the DEFAULT (English) locale: the canonical
+   * `name`, and nothing else.
+   *
+   * Search is scoped to ONE locale, so the searchable names are split across
+   * this field and `searchByLocale` rather than pooled into one array. A pooled
+   * field would make every locale's search implicitly a search of all 19
+   * languages: a French UI searching "Inde" would also match German "Indien".
+   */
+  searchDefault: array13().of(string18().required()).optional().default([]).label("Search Default"),
+  /**
+   * Per-locale name fields, keyed by lowercased BCP-47 tag (`de`, `pt-br`).
+   * Each carries ONLY that locale's translation, which is what makes
+   * `?locale=de` German and not "German plus everything that looks similar".
+   *
+   * Unshaped for the same reason as `translations`: the key set is upstream's.
+   *
+   * `native` is deliberately NOT indexed here. It cannot be attributed to a
+   * language with this data — 84% of city native names equal SEVERAL locales'
+   * translations (Latin spellings coinciding across de/it/nl/hr/pl) while
+   * distinctive non-Latin names like `भारत` match none — so filing `कर्नाटक`
+   * under German would be worse than not indexing it at all.
+   *
+   * The 19 upstream locales are br, ko, pt-BR, pt, nl, hr, fa, de, es, fr, ja,
+   * it, zh-CN, tr, ru, uk, pl, hi, ar. **`sv` is absent**, so a Swedish search
+   * matches nothing. That is the accepted cost of strict scoping.
+   */
+  searchByLocale: object22().optional().nullable().label("Search By Locale"),
+  /** Epoch ms of the run that last wrote this row. Drives the stale-row prune. */
+  syncedAt: number10().optional().nullable().label("Synced At")
+}).label("State");
+
+// src/geo/city.schema.ts
+import { array as array14, number as number11, object as object23, string as string19 } from "yup";
+var CitySchema = object23({
+  /** The upstream dr5hn id. Stable, and the key every upsert matches on. */
+  id: number11().integer().required().label("ID"),
+  name: string19().trim().required().label("Name"),
+  stateId: number11().integer().optional().nullable().label("State ID"),
+  /** The BARE subdivision code. Only meaningful paired with `countryCode`; see `StateSchema`. */
+  stateCode: string19().trim().uppercase().optional().nullable().label("State Code"),
+  /**
+   * Fully-qualified ISO 3166-2, e.g. `IN-KA`.
+   *
+   * DERIVED on ingest as `${countryCode}-${stateCode}`, because the upstream city
+   * record carries only the bare `state_code` — unlike the state record, which
+   * ships `iso3166_2` directly. Stored anyway so the `@todo STATE-CODE-ISO-PREFIX`
+   * migration can re-point the cities route without a 153k-row re-ingest.
+   * Null when either half is missing.
+   */
+  stateCodeIso: string19().trim().uppercase().optional().nullable().label("ISO 3166-2 Code"),
+  stateName: string19().trim().optional().nullable().label("State Name"),
+  countryId: number11().integer().optional().nullable().label("Country ID"),
+  /** ISO 3166-1 alpha-2 of the parent, UPPERCASE. See `CountrySchema.countryCode`. */
+  countryCode: string19().trim().uppercase().length(2).required().label("Country Code"),
+  countryName: string19().trim().optional().nullable().label("Country Name"),
+  /** Numbers, not the strings upstream ships. See `CountrySchema.latitude`. */
+  latitude: number11().optional().nullable().label("Latitude"),
+  longitude: number11().optional().nullable().label("Longitude"),
+  /** The name in its own script. Stored, but NOT searchable; see `searchByLocale`. */
+  native: string19().trim().optional().nullable().label("Native Name"),
+  type: string19().trim().optional().nullable().label("Type"),
+  level: number11().integer().optional().nullable().label("Level"),
+  parentId: number11().integer().optional().nullable().label("Parent ID"),
+  /**
+   * Null on most rows. Worth keeping (it is a good relevance signal when
+   * present) but never worth SORTING by alone, since a null-heavy sort buries
+   * every city upstream has no figure for.
+   */
+  population: number11().optional().nullable().label("Population"),
+  timezone: string19().trim().optional().nullable().label("Timezone"),
+  /** Localized names keyed by locale. Unshaped; see `CountrySchema.translations`. */
+  translations: object23().optional().nullable().label("Translations"),
+  /**
+   * The name field searched for the DEFAULT (English) locale: the canonical
+   * `name`, and nothing else.
+   *
+   * Search is scoped to ONE locale, so the searchable names are split across
+   * this field and `searchByLocale` rather than pooled into one array. A pooled
+   * field would make every locale's search implicitly a search of all 19
+   * languages: a French UI searching "Inde" would also match German "Indien".
+   */
+  searchDefault: array14().of(string19().required()).optional().default([]).label("Search Default"),
+  /**
+   * Per-locale name fields, keyed by lowercased BCP-47 tag (`de`, `pt-br`).
+   * Each carries ONLY that locale's translation, which is what makes
+   * `?locale=de` German and not "German plus everything that looks similar".
+   *
+   * Unshaped for the same reason as `translations`: the key set is upstream's.
+   *
+   * `native` is deliberately NOT indexed here. It cannot be attributed to a
+   * language with this data — 84% of city native names equal SEVERAL locales'
+   * translations (Latin spellings coinciding across de/it/nl/hr/pl) while
+   * distinctive non-Latin names like `भारत` match none — so filing `कर्नाटक`
+   * under German would be worse than not indexing it at all.
+   *
+   * The 19 upstream locales are br, ko, pt-BR, pt, nl, hr, fa, de, es, fr, ja,
+   * it, zh-CN, tr, ru, uk, pl, hi, ar. **`sv` is absent**, so a Swedish search
+   * matches nothing. That is the accepted cost of strict scoping.
+   */
+  searchByLocale: object23().optional().nullable().label("Search By Locale"),
+  /** Epoch ms of the run that last wrote this row. Drives the stale-row prune. */
+  syncedAt: number11().optional().nullable().label("Synced At")
+}).label("City");
+
+// src/geo/country-filter.schema.ts
+import { object as object24 } from "yup";
+var CountryFilterShape = object24({
+  /** ISO 3166-1 alpha-2 codes, e.g. `IN`. Uppercased, matching how they are stored. */
+  countryCodes: codeTokens("Country Codes"),
+  /** ISO 3166-1 alpha-3 codes, e.g. `IND`. */
+  iso3s: codeTokens("ISO3 Codes"),
+  /**
+   * `tokens`, NOT `codeTokens`: a region is a display string ("Asia", "Europe"),
+   * and uppercasing it would match nothing.
+   */
+  regions: tokens("Regions"),
+  subregions: tokens("Subregions"),
+  /** Display names, matched exactly. Free-text matching is `?search=`. */
+  names: tokens("Names")
+}).label("Country Filter");
+var CountryFilterSchema = rejectUnknownKeys(
+  CountryFilterShape,
+  () => Object.keys(CountryFilterShape.fields)
+);
+
+// src/geo/state-filter.schema.ts
+import { object as object25 } from "yup";
+var StateFilterShape = object25({
+  /** ISO 3166-1 alpha-2 of the parent country, e.g. `IN`. */
+  countryCodes: codeTokens("Country Codes"),
+  /**
+   * BARE subdivision codes, e.g. `KA`.
+   *
+   * `@todo STATE-CODE-ISO-PREFIX` — not globally unique, so this facet ALONE is
+   * an ambiguous question: `stateCodes[0]=BDS` matches Badakhshan in Afghanistan
+   * and every other `BDS` elsewhere. Pair it with `countryCodes` to mean one
+   * place. See `StateSchema.stateCode`.
+   */
+  stateCodes: codeTokens("State Codes"),
+  /** Display names, matched exactly. Free-text matching is `?search=`. */
+  names: tokens("Names"),
+  /**
+   * Upstream's own subdivision word: "province", "state", "district", …
+   *
+   * `tokens`, NOT `codeTokens`: these are lowercase display strings and
+   * uppercasing them would match nothing. An OPEN vocabulary rather than an
+   * `enumFacet`, because upstream ships 30-odd values and adding one should not
+   * require a schema release here.
+   */
+  types: tokens("Types")
+}).label("State Filter");
+var StateFilterSchema = rejectUnknownKeys(
+  StateFilterShape,
+  () => Object.keys(StateFilterShape.fields)
+);
+
+// src/geo/city-filter.schema.ts
+import { object as object26 } from "yup";
+var CityFilterShape = object26({
+  /** ISO 3166-1 alpha-2 of the parent country, e.g. `IN`. */
+  countryCodes: codeTokens("Country Codes"),
+  /**
+   * BARE subdivision codes, e.g. `KA`. Ambiguous without `countryCodes`; see
+   * `StateFilterSchema.stateCodes` and `@todo STATE-CODE-ISO-PREFIX`.
+   */
+  stateCodes: codeTokens("State Codes"),
+  /** Display names, matched exactly. Free-text matching is `?search=`. */
+  names: tokens("Names")
+}).label("City Filter");
+var CityFilterSchema = rejectUnknownKeys(
+  CityFilterShape,
+  () => Object.keys(CityFilterShape.fields)
+);
+
+// src/geo/geo-sync.schema.ts
+import { boolean as boolean14, mixed as mixed4, number as number12, object as object27, string as string20 } from "yup";
+var GeoSyncCountsSchema = object27({
+  read: number12().integer().min(0).default(0).label("Read"),
+  upserted: number12().integer().min(0).default(0).label("Upserted"),
+  modified: number12().integer().min(0).default(0).label("Modified"),
+  matched: number12().integer().min(0).default(0).label("Matched"),
+  /** Rows removed because upstream dropped them. See `prunedSkipped`. */
+  pruned: number12().integer().min(0).default(0).label("Pruned"),
+  /**
+   * True when the stale-row prune was REFUSED because it would have removed more
+   * than its safety threshold of the collection. A partial fetch that looked
+   * like a success must not be able to empty the table, so the run reports the
+   * refusal rather than acting on it.
+   */
+  prunedSkipped: boolean14().default(false).label("Prune Skipped")
+}).label("Sync Counts");
+var GeoSyncRunSchema = object27({
+  jobId: string20().required().label("Job ID"),
+  status: mixed4().oneOf(SupportedGeoSyncStatuses).required().label("Status"),
+  trigger: mixed4().oneOf(SupportedGeoSyncTriggers).optional().label("Trigger"),
+  /** Whether the caller asked to run even though the release tag was unchanged. */
+  force: boolean14().default(false).label("Force"),
+  /**
+   * The upstream release tag this run fetched, e.g. `v3.2-export.7`.
+   *
+   * Null only when the tag could not be read AND `force` was set — a run that
+   * cannot tell what version it is fetching is otherwise a failure, not a
+   * refresh, so it is not allowed to proceed unattended.
+   */
+  releaseTag: string20().optional().nullable().label("Release Tag"),
+  /** The tag of the last successful run, i.e. what this one is replacing. */
+  previousReleaseTag: string20().optional().nullable().label("Previous Release Tag"),
+  startedAt: number12().required().label("Started At"),
+  finishedAt: number12().optional().nullable().label("Finished At"),
+  durationMs: number12().optional().nullable().label("Duration (ms)"),
+  phase: mixed4().oneOf(SupportedGeoSyncPhases).optional().nullable().label("Phase"),
+  /**
+   * Live progress for the dashboard bar.
+   *
+   * `total` is an ESTIMATE — the previous successful run's count for the same
+   * collection, or a hardcoded fallback on the very first run, since the true
+   * total is not known until the stream ends. The UI should render it as one.
+   */
+  progress: object27({
+    collection: string20().optional().nullable().label("Collection"),
+    processed: number12().integer().min(0).default(0).label("Processed"),
+    total: number12().integer().min(0).optional().nullable().label("Total")
+  }).optional().nullable().label("Progress"),
+  counts: object27({
+    countries: GeoSyncCountsSchema.optional().nullable().label("Countries"),
+    states: GeoSyncCountsSchema.optional().nullable().label("States"),
+    cities: GeoSyncCountsSchema.optional().nullable().label("Cities")
+  }).optional().nullable().label("Counts"),
+  /** Why a `skipped` run was skipped, in words the dashboard can show verbatim. */
+  reason: string20().optional().nullable().label("Reason"),
+  /** The failure message on a `failed` run. Surfaced verbatim to the admin. */
+  error: string20().optional().nullable().label("Error")
+}).label("Geo Sync Run");
+
+// src/language/language-filter.schema.ts
+import { object as object28 } from "yup";
+var LanguageFilterShape = object28({
+  /** Language names, matched exactly. Free-text matching is `?search=`. */
+  names: tokens("Names")
+}).label("Language Filter");
+var LanguageFilterSchema = rejectUnknownKeys(
+  LanguageFilterShape,
+  () => Object.keys(LanguageFilterShape.fields)
+);
+
+// src/page/page-filter.schema.ts
+import { boolean as boolean15, object as object29 } from "yup";
+var PageFilterShape = object29({
+  /**
+   * `type`, NOT `pageType`.
+   *
+   * The enum constant is named `PageType`, which makes `pageType` the obvious
+   * guess, and it is wrong: the stored key is `type` (verified — `pageType`
+   * exists on 0 of 1,449 documents, while `type` splits 1,198 company / 251
+   * institute). The name of a constant is not the name of a field.
+   */
+  type: enumFacet(SupportedPageTypes, "Page Type"),
+  /**
+   * Publication state. Worth knowing when filtering: 69 documents carry NO
+   * `status` at all and some carry `null`, so `status: ['published']` is a real
+   * narrowing (1,379 of 1,449) and absent means "no constraint", not "published".
+   */
+  status: enumFacet(SupportedPageStatuses, "Status"),
+  // ── Flags ───────────────────────────────────────────────────────────────────
+  // No `.default(false)`: absent means no constraint. Note `isFeatured` is
+  // present on only 55 documents, so combining it with `status: ['published']`
+  // leaves 11 pages — a legitimate filter that returns almost nothing.
+  isFeatured: boolean15().optional().label("Featured Only"),
+  /** Lowercase (`in`, `se`, `ww`), like groups. See `GroupFilterSchema`. */
+  featuredMarkets: tokens("Featured Markets"),
+  /** Page SLUGS. A company is matched by slug: a display name breaks on rename. */
+  slugs: tokens("Slugs")
+}).label("Page Filter");
+var PAGE_FILTER_KEYS = Object.keys(PageFilterShape.fields);
+var PageFilterSchema = rejectUnknownKeys(
+  PageFilterShape,
+  () => PAGE_FILTER_KEYS
 );
-var SignupContextSource = /* @__PURE__ */ ((SignupContextSource2) => {
-  SignupContextSource2["CfHeader"] = "cf-header";
-  SignupContextSource2["Location"] = "location";
-  SignupContextSource2["Default"] = "default";
-  return SignupContextSource2;
-})(SignupContextSource || {});
-var SupportedSignupContextSources = Object.values(SignupContextSource);
-var UserDetailType = /* @__PURE__ */ ((UserDetailType2) => {
-  UserDetailType2["Overview"] = "overview";
-  UserDetailType2["AdditionalInfo"] = "additionalInfo";
-  UserDetailType2["General"] = "general";
-  UserDetailType2["SocialAccounts"] = "socialAccounts";
-  UserDetailType2["WorkExperiences"] = "workExperiences";
-  UserDetailType2["Educations"] = "educations";
-  UserDetailType2["Skills"] = "skills";
-  UserDetailType2["Languages"] = "languages";
-  UserDetailType2["Certifications"] = "certifications";
-  UserDetailType2["Interests"] = "interests";
-  UserDetailType2["Projects"] = "projects";
-  return UserDetailType2;
-})(UserDetailType || {});
-var ProficiencyLevel = /* @__PURE__ */ ((ProficiencyLevel2) => {
-  ProficiencyLevel2["BasicAwareness"] = "basic_awareness";
-  ProficiencyLevel2["Beginner"] = "beginner";
-  ProficiencyLevel2["Intermediate"] = "intermediate";
-  ProficiencyLevel2["Advanced"] = "advanced";
-  ProficiencyLevel2["Expert"] = "expert";
-  return ProficiencyLevel2;
-})(ProficiencyLevel || {});
-var SupportedProficiencyLevels = Object.values(ProficiencyLevel);
-var JobSearchUrgency = /* @__PURE__ */ ((JobSearchUrgency2) => {
-  JobSearchUrgency2["Asap"] = "asap";
-  JobSearchUrgency2["WithinThreeMonths"] = "within_3_months";
-  JobSearchUrgency2["WithinSixMonths"] = "within_6_months";
-  JobSearchUrgency2["PassivelyBrowsing"] = "passively_browsing";
-  return JobSearchUrgency2;
-})(JobSearchUrgency || {});
-var SupportedJobSearchUrgencies = Object.values(JobSearchUrgency);
-var ReferralSource = /* @__PURE__ */ ((ReferralSource2) => {
-  ReferralSource2["Recruiter"] = "recruiter";
-  ReferralSource2["LinkedIn"] = "linkedin";
-  ReferralSource2["TikTokInstagram"] = "tiktok_instagram";
-  ReferralSource2["Google"] = "google";
-  ReferralSource2["Reddit"] = "reddit";
-  ReferralSource2["ChatGptGemini"] = "chatgpt_gemini";
-  ReferralSource2["Friend"] = "friend";
-  ReferralSource2["Other"] = "other";
-  return ReferralSource2;
-})(ReferralSource || {});
-var SupportedReferralSources = Object.values(ReferralSource);
-var JobAlertFrequency = /* @__PURE__ */ ((JobAlertFrequency2) => {
-  JobAlertFrequency2["Off"] = "off";
-  JobAlertFrequency2["Daily"] = "daily";
-  JobAlertFrequency2["Weekly"] = "weekly";
-  return JobAlertFrequency2;
-})(JobAlertFrequency || {});
-var SupportedJobAlertFrequencies = Object.values(JobAlertFrequency);
-var NotificationChannel = /* @__PURE__ */ ((NotificationChannel2) => {
-  NotificationChannel2["GroupActivity"] = "groupActivity";
-  NotificationChannel2["JobActivity"] = "jobActivity";
-  NotificationChannel2["ApplicationUpdates"] = "applicationUpdates";
-  NotificationChannel2["ProductUpdates"] = "productUpdates";
-  return NotificationChannel2;
-})(NotificationChannel || {});
-var SupportedNotificationChannels = Object.values(NotificationChannel);
-var SupportedSalaryCurrencies = ["USD", "EUR", "GBP", "SEK", "INR"];
-var MIN_SALARY_LOWER_BOUND = 0;
-var MIN_SALARY_UPPER_BOUND = 1e6;
-var PREFILL_MIRRORED_KEYS = [
-  "headline",
-  "aboutMe",
-  "mobile",
-  "location",
-  "experienceLevel",
-  "socialAccounts",
-  "workExperiences",
-  "educations"
-];
-var PRIVATE_PROFILE_FIELDS = [
-  "email",
-  "emailVerified",
-  "mobile",
-  "additionalInfo"
-];
+
+// src/marketing/marketing.schema.ts
+import { array as array16, boolean as boolean17, lazy as lazy2, mixed as mixed5, number as number14, object as object31, string as string22 } from "yup";
 
 // src/marketing/marketing.constant.ts
 var CampaignStatus = /* @__PURE__ */ ((CampaignStatus2) => {
   CampaignStatus2["Draft"] = "draft";
-  CampaignStatus2["Sending"] = "sending";
-  CampaignStatus2["Sent"] = "sent";
+  CampaignStatus2["Running"] = "running";
+  CampaignStatus2["Paused"] = "paused";
+  CampaignStatus2["Stopped"] = "stopped";
+  CampaignStatus2["Completed"] = "completed";
   CampaignStatus2["Failed"] = "failed";
   return CampaignStatus2;
 })(CampaignStatus || {});
 var SupportedCampaignStatuses = Object.values(CampaignStatus);
+var TerminalCampaignStatuses = [
+  "stopped" /* Stopped */,
+  "completed" /* Completed */,
+  "failed" /* Failed */
+];
+var CampaignStatusTransitions = {
+  ["draft" /* Draft */]: ["running" /* Running */],
+  ["running" /* Running */]: [
+    "paused" /* Paused */,
+    "stopped" /* Stopped */,
+    "completed" /* Completed */,
+    "failed" /* Failed */
+  ],
+  ["paused" /* Paused */]: ["running" /* Running */, "stopped" /* Stopped */],
+  ["stopped" /* Stopped */]: [],
+  ["completed" /* Completed */]: [],
+  ["failed" /* Failed */]: []
+};
+function canTransitionCampaign(from, to) {
+  return CampaignStatusTransitions[from]?.includes(to) ?? false;
+}
 var CampaignTriggerKind = /* @__PURE__ */ ((CampaignTriggerKind2) => {
   CampaignTriggerKind2["Manual"] = "manual";
   CampaignTriggerKind2["Once"] = "once";
   CampaignTriggerKind2["Schedule"] = "schedule";
-  CampaignTriggerKind2["Lifecycle"] = "lifecycle";
   return CampaignTriggerKind2;
 })(CampaignTriggerKind || {});
 var SupportedCampaignTriggerKinds = Object.values(CampaignTriggerKind);
@@ -2079,21 +2886,16 @@ var CampaignEndKind = /* @__PURE__ */ ((CampaignEndKind2) => {
   return CampaignEndKind2;
 })(CampaignEndKind || {});
 var SupportedCampaignEndKinds = Object.values(CampaignEndKind);
-var CampaignAnchorField = /* @__PURE__ */ ((CampaignAnchorField2) => {
-  CampaignAnchorField2["CreatedAt"] = "createdAt";
-  CampaignAnchorField2["OnboardingCompletedAt"] = "onboardingCompletedAt";
-  CampaignAnchorField2["MarketingConsentUpdatedAt"] = "marketingConsent.updatedAt";
-  return CampaignAnchorField2;
-})(CampaignAnchorField || {});
-var SupportedCampaignAnchorFields = Object.values(CampaignAnchorField);
-var BindingKind = /* @__PURE__ */ ((BindingKind2) => {
-  BindingKind2["Static"] = "static";
-  BindingKind2["Recipient"] = "recipient";
-  BindingKind2["Url"] = "url";
-  BindingKind2["Source"] = "source";
-  return BindingKind2;
-})(BindingKind || {});
-var SupportedBindingKinds = Object.values(BindingKind);
+var TemplateVariableBindingKind = /* @__PURE__ */ ((TemplateVariableBindingKind2) => {
+  TemplateVariableBindingKind2["Static"] = "static";
+  TemplateVariableBindingKind2["Recipient"] = "recipient";
+  TemplateVariableBindingKind2["Url"] = "url";
+  TemplateVariableBindingKind2["Source"] = "source";
+  return TemplateVariableBindingKind2;
+})(TemplateVariableBindingKind || {});
+var SupportedTemplateVariableBindingKinds = Object.values(
+  TemplateVariableBindingKind
+);
 var OccurrenceStatus = /* @__PURE__ */ ((OccurrenceStatus2) => {
   OccurrenceStatus2["Pending"] = "pending";
   OccurrenceStatus2["Running"] = "running";
@@ -2105,24 +2907,50 @@ var OccurrenceStatus = /* @__PURE__ */ ((OccurrenceStatus2) => {
 var SupportedOccurrenceStatuses = Object.values(OccurrenceStatus);
 var CAMPAIGN_MAX_RECIPIENTS_CEILING = 5e3;
 
-// src/marketing/marketing.schema.ts
-var tokens = (label) => array10().of(string15().trim().required()).optional().default([]).label(label);
-var enumFacet = (values, label) => array10().of(string15().oneOf(values).required()).optional().default([]).label(label);
-var days = (label) => number7().integer().min(0).max(3650).optional().default(void 0).label(label);
-var months = (label) => number7().integer().min(0).max(1200).optional().default(void 0).label(label);
-var percent = (label) => number7().integer().min(0).max(100).optional().default(void 0).label(label);
-var epoch = (label) => number7().integer().min(0).optional().default(void 0).label(label);
-var salaryBound = (label) => number7().integer().min(0).optional().default(void 0).label(label).when("salaryCurrencies", {
-  is: (v) => !Array.isArray(v) || v.length !== 1,
-  then: (s) => s.test(
-    "requires-single-currency",
-    "Pick exactly one salary currency to filter by salary",
-    (value) => value === void 0 || value === null
-  )
-});
-var ListFilterBranchSchema = object18({
+// src/user/user-filter.schema.ts
+import { array as array15, boolean as boolean16, number as number13, object as object30, string as string21 } from "yup";
+var UserFilterBranchShape = object30({
+  /**
+   * Exact email addresses. An IDENTITY lookup, not a search.
+   *
+   * The admin `search` box already matches email, but as a case-insensitive
+   * unanchored regex over email + first + last, which no index can seek: it
+   * scans every key. Measured against 103,680 users, finding one person by
+   * their full address examined all 103,680 documents and took 552ms, where the
+   * same lookup as an exact match on the indexed `email` field is 0ms and
+   * examines 1.
+   *
+   * So this is for when the caller ALREADY KNOWS the address (previewing what
+   * one named recipient will receive, reconciling a bounce) and `search` is for
+   * when a human is typing a fragment.
+   *
+   * Values are LOWER-CASED before matching, not matched case-insensitively: all
+   * 103,680 stored addresses are already lower case (verified), so normalising
+   * the input keeps the match an indexed equality instead of a regex that would
+   * put the scan straight back.
+   */
+  emails: array15().of(string21().required()).optional().default([]).label("Email Addresses"),
+  /**
+   * Better Auth account ids. An IDENTITY lookup like `emails`, and for the same
+   * reason: the caller already knows the exact value.
+   *
+   * BACKEND-ONLY, despite living beside the human-facing facets. The consumer
+   * is hono-auth, which holds an account id and needs the profile's `shortId`
+   * to sign into the JWT it is minting. It cannot use `GET /me` (it is the one
+   * issuing the token) and cannot use `GET /users/:shortId` (the shortId is
+   * precisely what it lacks), so the list route with a facet is the lookup.
+   *
+   * Matched as an indexed equality on `authAccountId`, which is already indexed
+   * as the mirror's link key. No case normalisation, unlike `emails`: these are
+   * opaque generated ids, stored exactly as Better Auth issued them, so folding
+   * case could only ever turn a hit into a miss.
+   *
+   * The admin filter panel builds its controls explicitly rather than from this
+   * shape, so declaring it here does not put an account-id box in the UI.
+   */
+  authAccountIds: array15().of(string21().required()).optional().default([]).label("Auth Account IDs"),
   // ── Enum facets (closed vocabularies, chip pickers) ─────────────────────────
-  countries: array10().of(string15().required()).optional().default([]).label("Countries"),
+  countries: array15().of(string21().required()).optional().default([]).label("Countries"),
   roles: enumFacet(SupportedUserRoles, "Roles"),
   // The user's own current seniority (UserSchema.experienceLevel).
   experienceLevels: enumFacet(SupportedExperienceLevels, "Experience Levels"),
@@ -2138,40 +2966,112 @@ var ListFilterBranchSchema = object18({
     SupportedUserProfileVisibilities,
     "Profile Visibility"
   ),
-  // Proficiency held on any skill entry (skills[].proficiencyLevel).
-  skillProficiencyLevels: enumFacet(
-    SupportedProficiencyLevels,
-    "Skill Proficiency"
-  ),
-  // Proficiency held on any language entry (languages[].proficiencyLevel).
-  languageProficiencyLevels: enumFacet(
-    SupportedProficiencyLevels,
-    "Language Proficiency"
-  ),
   // Mode of any education entry (educations[].studyType).
+  //
+  // Left as a STANDALONE enum, unlike skill/language proficiency above: it is a
+  // property of a person's education in general ("studied full time"), and the
+  // measured divergence against pairing it with `courses` was 1 user out of
+  // 3,465. Pairing is for qualifiers that are MEANINGLESS alone; this one is
+  // not, so it stays cheap to use.
   studyTypes: enumFacet(SupportedStudyTypes, "Study Type"),
   // Platforms the user linked a social account for (socialAccounts[].type).
   socialAccountTypes: enumFacet(SupportedSocialAccounts, "Social Accounts"),
   // Currency of the user's salary floor (minSalaryCurrency).
   salaryCurrencies: enumFacet(SupportedSalaryCurrencies, "Salary Currency"),
   // ── Free-text token facets (nested profile arrays) ──────────────────────────
-  skills: tokens("Skills"),
-  languages: tokens("Languages"),
+  // Skill and language each carry their OWN proficiency, because a level is
+  // only meaningful attached to the thing it qualifies. See `qualified`:
+  // as two independent facets, "python + expert" returned 301 users where only
+  // 103 were actually expert at Python.
+  //
+  // `[{ name: 'python', proficiencyLevel: 'expert' }]` — the level is optional,
+  // so naming a skill without one still filters on the skill alone.
+  skills: qualified(SupportedProficiencyLevels, "proficiencyLevel", "Skills"),
+  languages: qualified(SupportedProficiencyLevels, "proficiencyLevel", "Languages"),
   interests: tokens("Interests"),
-  companies: tokens("Companies"),
+  // LOOSE forms, kept deliberately. Each of these is a real question on its own
+  // ("worked at Google", "was an engineer somewhere"), and asking for two of
+  // them usually does mean "has each of these somewhere in their history".
+  // They AND across the whole array, so different entries may satisfy each.
+  //
+  // `companyName` / `instituteName`, NOT the `company` widget the job filter
+  // uses. Both are PICKED from real pages — a profile stores the whole
+  // `PageSchema.pick(["name","slug","type","logo"])` object, not free text — but
+  // the facet matches `workExperiences.company.name`, so the value to store is
+  // the page's NAME. Storing its slug would be a picker that matches nothing.
+  companies: tokens("Companies").meta({ widget: "companyName" }),
   designations: tokens("Job Titles / Designations"),
-  institutes: tokens("Institutes"),
+  institutes: tokens("Institutes").meta({ widget: "instituteName" }),
   courses: tokens("Courses"),
   fieldsOfStudy: tokens("Fields of Study"),
-  certifications: tokens("Certifications"),
-  certificationAuthorities: tokens("Certification Authorities"),
+  // PRECISE forms: all parts must describe ONE entry.
+  //
+  // The narrower question the loose facets above cannot express. "Engineer AT
+  // Google" as `companies=Google & designations=engineer` also matches someone
+  // who was an engineer at Acme and a designer at Google, because Mongo
+  // satisfies each path from a different array entry. Measured on production:
+  // VIT + B.Tech returned 71 users where 64 had one education entry that was
+  // both, and Infosys + Test Engineer returned 7 where 6 actually matched.
+  //
+  // Additive rather than a replacement: both readings are legitimate, so the
+  // vocabulary carries both and the caller says which it means. 1,573 users
+  // have two or more work entries and 1,761 have two or more educations, so the
+  // distinction is real and grows as profiles fill in.
+  //
+  // The fields mirror what the profile form actually collects for one entry
+  // (`WorkExperienceSchema` / `EducationSchema`), minus the parts that cannot
+  // narrow an audience: `description` is prose, and a per-entry `location`
+  // duplicates the top-level geography facets against a much emptier path.
+  //
+  // `isCurrent` reads `duration.isActive`, which is what the profile form calls
+  // "I currently work here". It is the field that makes this facet worth having
+  // per entry: "engineer at Google" and "engineer at Google NOW" are different
+  // audiences, and only the second is reachable without it. Live counts:
+  // 2,190 users have a current job against 4,527 with a past one, 1,456 have a
+  // remote entry, 4,088 are still studying.
+  workHistory: conjunction(
+    [
+      "company",
+      "designation",
+      { name: "isCurrent", type: "boolean" },
+      { name: "isRemote", type: "boolean" }
+    ],
+    "Work History"
+  ),
+  educationHistory: conjunction(
+    [
+      "institute",
+      "course",
+      "fieldOfStudy",
+      { name: "studyType", type: "string", oneOf: SupportedStudyTypes },
+      { name: "isCurrent", type: "boolean" },
+      { name: "isDistanceLearning", type: "boolean" }
+    ],
+    "Education History"
+  ),
+  // The issuing body belongs to the certificate, not to the person: "AWS SA"
+  // plus "Microsoft" as two facets matches someone holding an AWS cert AND any
+  // unrelated Microsoft one. 38% of users with a certification hold two or more,
+  // so the entries are there to diverge.
+  //
+  // `authority` is free text rather than a closed vocabulary, hence `"open"`.
+  certifications: qualified("open", "authority", "Certifications"),
   projects: tokens("Projects"),
   jobRoles: tokens("Target Roles"),
   jobLocations: tokens("Preferred Job Locations"),
   // Companies a recruiter is hiring for (recruiterProfile.hiringFor[].page.name).
-  hiringForCompanies: tokens("Hiring For (Companies)"),
+  // A picked page (`recruiterProfile.hiringFor.page`), matched on `.name`.
+  //
+  // `pageName`, which searches BOTH page types: `RecruiterPageLinkSchema` picks
+  // `PageSchema` without constraining `type`, so a recruiter may be hiring for
+  // an institute as legitimately as for a company. Production carries exactly
+  // that on the coordinator side — a `coordinatesAt` entry holding a company —
+  // so scoping either of these to one type would hide real data.
+  hiringForCompanies: tokens("Hiring For").meta({ widget: "pageName" }),
   // Institutes a coordinator works at (coordinatorProfile.coordinatesAt[].page.name).
-  coordinatesAtInstitutes: tokens("Coordinates At (Institutes)"),
+  // Same: a picked page (`coordinatorProfile.coordinatesAt.page`), on `.name`,
+  // and likewise unconstrained in `type`.
+  coordinatesAtInstitutes: tokens("Coordinates At").meta({ widget: "pageName" }),
   // Case-insensitive keyword match against headline + aboutMe.
   keywords: tokens("Profile Keywords"),
   // ── Range / boolean facets ──────────────────────────────────────────────────
@@ -2179,14 +3079,16 @@ var ListFilterBranchSchema = object18({
   // integer and 50000 SEK is not 50000 USD, so an un-currencied range matches
   // across currencies and quietly means nothing. Requiring exactly one currency
   // alongside a bound is what makes the comparison sound.
-  minSalaryFloor: salaryBound("Min Salary \u2265"),
-  minSalaryCeil: salaryBound("Min Salary \u2264"),
-  openToWorkOnly: boolean11().optional().default(false).label("Open to Work Only"),
-  remoteExperienceOnly: boolean11().optional().default(false).label("Has Remote Experience"),
-  hasResumeOnly: boolean11().optional().default(false).label("Has Resume"),
-  onboardingCompletedOnly: boolean11().optional().default(false).label("Onboarding Completed"),
-  emailVerifiedOnly: boolean11().optional().default(false).label("Email Verified Only"),
-  mobileVerifiedOnly: boolean11().optional().default(false).label("Mobile Verified Only"),
+  // The sibling currency facet is named explicitly: this bound is inert without
+  // it, so the dependency is stated rather than assumed.
+  minSalaryFloor: currencyBound("Min Salary \u2265", "salaryCurrencies"),
+  minSalaryCeil: currencyBound("Min Salary \u2264", "salaryCurrencies"),
+  openToWorkOnly: boolean16().optional().default(false).label("Open to Work Only"),
+  remoteExperienceOnly: boolean16().optional().default(false).label("Has Remote Experience"),
+  hasResumeOnly: boolean16().optional().default(false).label("Has Resume"),
+  onboardingCompletedOnly: boolean16().optional().default(false).label("Onboarding Completed"),
+  emailVerifiedOnly: boolean16().optional().default(false).label("Email Verified Only"),
+  mobileVerifiedOnly: boolean16().optional().default(false).label("Mobile Verified Only"),
   // ── Lifecycle windows ───────────────────────────────────────────────────────
   // Relative, because a saved list is resolved fresh on every send: a stored
   // absolute epoch would freeze at authoring time and the audience would decay
@@ -2214,10 +3116,10 @@ var ListFilterBranchSchema = object18({
   // Radius search around a point, against location.geo. All three required
   // together; validated as a group rather than field-by-field so a half-filled
   // radius cannot silently match everyone.
-  withinRadius: object18({
-    lat: number7().min(-90).max(90).required().label("Latitude"),
-    lng: number7().min(-180).max(180).required().label("Longitude"),
-    km: number7().moreThan(0).max(2e4).required().label("Radius (km)")
+  withinRadius: object30({
+    lat: number13().min(-90).max(90).required().label("Latitude"),
+    lng: number13().min(-180).max(180).required().label("Longitude"),
+    km: number13().moreThan(0).max(2e4).required().label("Radius (km)")
   }).optional().default(void 0).label("Within Radius"),
   // ── Signup context (immutable market / locale) ──────────────────────────────
   signupCountries: tokens("Signup Countries"),
@@ -2228,14 +3130,27 @@ var ListFilterBranchSchema = object18({
   // match — filtering on this necessarily excludes them.
   educationLevels: enumFacet(SupportedEducationLevels, "Education Level"),
   // ── Consent metadata ────────────────────────────────────────────────────────
-  // `marketingConsent.subscribed` is NOT a facet: it is a hard opt-in gate
-  // applied unconditionally by user-service and is not relaxable from here.
+  // `marketingSubscribed` IS a facet, and deliberately so. It used to be a hard
+  // opt-in gate applied unconditionally by user-service; that gate was removed
+  // when user-service became a pure data source, so consent is now an ordinary
+  // filter that marketing-service defaults to `true` in `resolveAudience`.
+  //
+  // NO `.default()` HERE, unlike every other boolean facet. The send spreads its
+  // default first and lets a stored value win, so this must distinguish "the
+  // list said nothing" (absent -> default applies) from "the list said false"
+  // (override -> mails users who never opted in). A `.default(false)` would
+  // materialise the second case on every list that never chose it.
+  //
+  // @todo CONSENT-FILTER-ENFORCEMENT — nothing enforces consent anywhere now.
+  marketingSubscribed: boolean16().optional().label("Marketing Subscribed"),
   jobAlertFrequencies: enumFacet(
     SupportedJobAlertFrequencies,
     "Job Alert Frequency"
   ),
   consentSources: tokens("Consent Source"),
   consentUpdatedWithinDays: days("Consent Updated Within (days)"),
+  /** The absolute bound `consentUpdatedWithinDays` resolves into (epoch ms). */
+  consentUpdatedAfter: epoch("Consent Updated After"),
   // ── Notification preferences ────────────────────────────────────────────────
   // Read as opt-IN (`=== true`), matching marketingConsent and NOT the `!== false`
   // reading used for transactional notification routing. A campaign is bulk mail,
@@ -2243,19 +3158,31 @@ var ListFilterBranchSchema = object18({
   // `productUpdates` defaults to false on the user document, so targeting it
   // selects only people who deliberately turned it on.
   notificationChannelsEnabled: enumFacet(
-    SupportedNotificationChannels,
+    SupportedNotificationTypes,
     "Notification Channels Enabled"
   ),
   // ── Tenure / recency ────────────────────────────────────────────────────────
   // Against workExperiences[].duration and educations[].duration ("YYYY-MM").
-  currentlyEmployed: boolean11().optional().default(false).label("Currently Employed"),
+  currentlyEmployed: boolean16().optional().default(false).label("Currently Employed"),
   graduatedWithinMonths: months("Graduated Within (months)"),
   skillUsedWithinMonths: months("Skill Used Within (months)"),
+  // The ABSOLUTE bounds the three relative windows above resolve into
+  // (`graduatedWithinMonths` -> `graduatedAfter`, and so on). Both forms are
+  // accepted: a caller may send either, and user-service derives the bound when
+  // only the window is given.
+  //
+  // A UI should offer the WINDOW, not these. A saved list is re-resolved on
+  // every send, so a stored absolute date rots — "graduated after 2024-03" keeps
+  // meaning that forever, while "within 18 months" keeps meaning what the admin
+  // intended. They are declared because the vocabulary must be complete, not
+  // because a list should store one.
+  graduatedAfter: string21().trim().optional().label("Graduated After"),
+  skillUsedAfter: string21().trim().optional().label("Skill Used After"),
   // ── Profile richness ────────────────────────────────────────────────────────
-  hasImage: boolean11().optional().default(false).label("Has Photo"),
-  hasHeadline: boolean11().optional().default(false).label("Has Headline"),
-  hasAboutMe: boolean11().optional().default(false).label("Has About Me"),
-  hasMobile: boolean11().optional().default(false).label("Has Mobile Number"),
+  hasImage: boolean16().optional().default(false).label("Has Photo"),
+  hasHeadline: boolean16().optional().default(false).label("Has Headline"),
+  hasAboutMe: boolean16().optional().default(false).label("Has About Me"),
+  hasMobile: boolean16().optional().default(false).label("Has Mobile Number"),
   // Segment by WHICH profile section is missing (profileCompleteness.missing[]),
   // rather than only by the overall percentage.
   missingSections: tokens("Missing Profile Sections"),
@@ -2267,50 +3194,39 @@ var ListFilterBranchSchema = object18({
   // data lives in other services' collections. Tri-state: `false` is a real
   // filter ("has NO job alert"), which is the audience an alert nudge wants, so
   // these are `undefined` when unset rather than defaulting to false.
-  hasJobAlert: boolean11().optional().default(void 0).label("Has a Job Alert"),
-  hasApplied: boolean11().optional().default(void 0).label("Has Applied"),
-  appliedWithinDays: days("Applied Within (days)"),
-  // ── Free-text search (name / email) ─────────────────────────────────────────
-  search: string15().trim().optional().label("Search")
+  hasJobAlert: boolean16().optional().default(void 0).label("Has a Job Alert"),
+  hasApplied: boolean16().optional().default(void 0).label("Has Applied"),
+  appliedWithinDays: days("Applied Within (days)")
+  // `search` is NOT here. It is free text over name/email, not a facet: it names
+  // no field on a user document, user-service treats it as a RESERVED PARAM
+  // beside the filter rather than a filter key, and it is meaningless inside an
+  // `or` branch (a union of "matches this text" with a facet clause). It travels
+  // as a sibling of the filter — see `PreviewFilterSchema` in marketing-service —
+  // so a saved audience cannot carry free text it would silently re-run later.
 }).label("Audience Filter Branch");
-var rejectUnknownKeys = (schema, allowed) => schema.test(
-  "no-unknown-filter-keys",
-  ({ value, label }) => {
-    const known = new Set(allowed());
-    const bad = Object.keys(value ?? {}).filter(
-      (k) => !known.has(k)
-    );
-    return `${label} has unsupported keys: ${bad.join(", ")}`;
-  },
-  (value) => {
-    if (value == null) return true;
-    const known = new Set(allowed());
-    return Object.keys(value).every(
-      (k) => known.has(k)
-    );
-  }
-);
-var BRANCH_KEYS = Object.keys(ListFilterBranchSchema.fields);
-var ListFilterBranch = rejectUnknownKeys(
-  ListFilterBranchSchema,
-  () => BRANCH_KEYS
-);
-var ListFilterSchema = rejectUnknownKeys(
-  ListFilterBranchSchema.shape({
-    or: array10().of(ListFilterBranch).optional().default([]).label("Or Any Of")
-  }).label("Audience Filter"),
+var BRANCH_KEYS = Object.keys(UserFilterBranchShape.fields);
+var UserFilterBranch = rejectUnknownKeys(UserFilterBranchShape, () => BRANCH_KEYS);
+var UserFilterSchema = rejectUnknownKeys(
+  UserFilterBranchShape.shape({
+    or: array15().of(UserFilterBranch).optional().default([]).label("Or Any Of")
+  }).label("User Filter"),
   () => [...BRANCH_KEYS, "or"]
 );
-var MailingListSchema = object18({
-  name: string15().required().min(1).max(120).label("Name"),
-  description: string15().optional().max(500).label("Description"),
-  filter: ListFilterSchema.default(() => ListFilterSchema.getDefault())
+
+// src/marketing/marketing.schema.ts
+var MailingListFilterSchema = UserFilterSchema;
+var MailingListSchema = object31({
+  name: string22().required().min(1).max(120).label("Name"),
+  description: string22().optional().max(500).label("Description"),
+  filter: MailingListFilterSchema.default(
+    () => MailingListFilterSchema.getDefault()
+  )
 }).label("Mailing List");
-var CampaignTriggerSchema = object18({
-  kind: string15().oneOf(SupportedCampaignTriggerKinds).required().default("manual" /* Manual */).label("Trigger"),
+var CampaignTriggerSchema = object31({
+  kind: string22().oneOf(SupportedCampaignTriggerKinds).required().default("manual" /* Manual */).label("Trigger"),
   // IANA zone, e.g. "Asia/Kolkata". Local wall-clock times are interpreted in it,
   // so occurrences land at the intended hour across DST rather than drifting.
-  timezone: string15().optional().default("UTC").label("Timezone").when("kind", {
+  timezone: string22().optional().default("UTC").label("Timezone").when("kind", {
     is: (k) => k !== "manual" /* Manual */,
     then: (s) => s.required()
   }),
@@ -2324,26 +3240,26 @@ var CampaignTriggerSchema = object18({
     is: "schedule" /* Schedule */,
     then: (s) => s.required()
   }),
-  interval: object18({
-    every: number7().integer().min(1).max(365).required().label("Every"),
-    unit: string15().oneOf(SupportedCampaignIntervalUnits).required().label("Unit")
+  interval: object31({
+    every: number14().integer().min(1).max(365).required().label("Every"),
+    unit: string22().oneOf(SupportedCampaignIntervalUnits).required().label("Unit")
   }).optional().default(void 0).label("Repeats").when("kind", {
     is: "schedule" /* Schedule */,
     then: (s) => s.required()
   }),
   /** Local wall-clock send time, "HH:mm" in `timezone`. */
-  timeOfDay: string15().matches(/^([01]\d|2[0-3]):[0-5]\d$/, "Use HH:mm").optional().default("09:00").label("Time of Day"),
+  timeOfDay: string22().matches(/^([01]\d|2[0-3]):[0-5]\d$/, "Use HH:mm").optional().default("09:00").label("Time of Day"),
   /** For weekly intervals: ISO weekdays, 1 = Monday .. 7 = Sunday. */
-  byWeekday: array10().of(number7().integer().min(1).max(7).required()).optional().default([]).label("On Days"),
+  byWeekday: array16().of(number14().integer().min(1).max(7).required()).optional().default([]).label("On Days"),
   /**
    * For monthly intervals: 1-31, or -1 meaning "last day of the month". A month
    * shorter than the chosen day is clamped to its last day, so 31 in February
    * fires on the 28th/29th rather than being skipped.
    */
-  byMonthday: number7().integer().min(-1).max(31).notOneOf([0]).optional().default(void 0).label("Day of Month"),
-  end: object18({
-    kind: string15().oneOf(SupportedCampaignEndKinds).required().label("Ends"),
-    occurrences: number7().integer().min(1).max(1e4).optional().default(void 0).label("After N Sends").when("kind", {
+  byMonthday: number14().integer().min(-1).max(31).notOneOf([0]).optional().default(void 0).label("Day of Month"),
+  end: object31({
+    kind: string22().oneOf(SupportedCampaignEndKinds).required().label("Ends"),
+    occurrences: number14().integer().min(1).max(1e4).optional().default(void 0).label("After N Sends").when("kind", {
       is: "afterOccurrences" /* AfterOccurrences */,
       then: (s) => s.required()
     }),
@@ -2351,52 +3267,80 @@ var CampaignTriggerSchema = object18({
       is: "onDate" /* OnDate */,
       then: (s) => s.required()
     })
-  }).optional().default(() => ({ kind: "never" /* Never */ })).label("End Condition"),
-  // kind: lifecycle
-  anchorField: string15().oneOf(SupportedCampaignAnchorFields).optional().default(void 0).label("Anchor Date").when("kind", {
-    is: "lifecycle" /* Lifecycle */,
-    then: (s) => s.required()
-  }),
-  /** Days after the anchor at which this user becomes eligible. */
-  offsetDays: number7().integer().min(0).max(3650).optional().default(void 0).label("Days After Anchor").when("kind", {
-    is: "lifecycle" /* Lifecycle */,
-    then: (s) => s.required()
-  }),
+  }).optional().default(() => ({ kind: "never" /* Never */ })).label("End Condition")
+}).label("Trigger");
+var CampaignDataSourceSchema = object31({
+  id: string22().required().label("Data Source"),
   /**
-   * How long a user stays eligible after crossing the offset. Needed because the
-   * scheduler samples periodically and a zero-width window would miss anyone not
-   * observed on the exact day. A user inside the window on several ticks is still
-   * mailed once: the permanent idempotency key, not this value, guarantees that.
+   * Derive this source's filter per recipient from their profile, instead of
+   * using the admin-entered `params` for everyone.
+   *
+   * A second AXIS on a datasource, not a datasource of its own: a
+   * personalisation filter is an ordinary filter for that source, the only
+   * difference being who wrote it. Jobs previously shipped the two modes as
+   * two registry entries (`recent-jobs` / `matched-jobs`), which let them drift
+   * apart down to their output names.
+   *
+   * Optional, and absent reads as false, so every existing campaign stays
+   * un-personalised. Whether a source can honour it at all is declared by the
+   * source itself (`supportsPersonalisation`), which this package cannot see.
    */
-  windowDays: number7().integer().min(1).max(90).optional().default(2).label("Eligibility Window (days)")
-}).label("Trigger");
-var BindingSchema = object18({
-  kind: string15().oneOf(SupportedBindingKinds).required().label("Source"),
-  value: string15().required().min(1).max(2e3).label("Value")
-}).label("Binding");
-var CampaignSchema = object18({
-  name: string15().required().min(1).max(200).label("Campaign Name"),
+  personalised: boolean17().optional().label("Personalised"),
+  /**
+   * A free-form bag whose keys are defined by the chosen source's OWN
+   * `paramsSchema`, which this package cannot see. Same `lazy` treatment as
+   * `bindings` above, and for the same reason: a bare `object()` has no known
+   * keys, so under `stripUnknown: true` every param is "unknown" and the bag
+   * arrives as `{}` — a campaign configured to mail remote Python roles in
+   * Bangalore silently saves as an unfiltered platform-wide digest.
+   *
+   * Values stay unvalidated here on purpose; the marketing service validates
+   * them against the real source schema in `checkCampaignConfig`, which is the
+   * only place that knows what a given source accepts.
+   */
+  params: lazy2((value) => {
+    const keys = value && typeof value === "object" ? Object.keys(value) : [];
+    return object31(
+      Object.fromEntries(keys.map((k) => [k, mixed5().optional()]))
+    ).optional().default(() => ({})).label("Parameters");
+  })
+}).label("Data Source");
+var TemplateVariableBindingSchema = object31({
+  kind: string22().oneOf(SupportedTemplateVariableBindingKinds).required().label("Source"),
+  value: string22().required().min(1).max(2e3).label("Value")
+}).label("Template Variable Binding");
+var CampaignSchema = object31({
+  name: string22().required().min(1).max(200).label("Campaign Name"),
   // The template renders its own subject; an override is only needed for the
   // inline-HTML path, hence not required when a template is chosen.
-  subject: string15().optional().max(255).label("Subject").when("templateKey", {
+  subject: string22().optional().max(255).label("Subject").when("templateKey", {
     is: (v) => !v,
     then: (s) => s.required().min(1)
   }),
   /**
    * Inline HTML body; may contain {{unsubscribe_url}}. Optional now that a
    * campaign can instead name a registry template — exactly one of the two is
-   * required. Scheduled and lifecycle campaigns must use a template: the
-   * registry path is the one with a compliance-checked footer and a render test,
+   * required. Scheduled campaigns must use a template: the registry path is the
+   * one with a compliance-checked footer and a render test,
    * and hand-pasted HTML that repeats forever is a mistake that repeats forever.
    */
-  html: string15().optional().label("HTML Body").when("templateKey", {
+  html: string22().optional().label("HTML Body").when("templateKey", {
     is: (v) => !v,
     then: (s) => s.required().min(1)
   }),
-  text: string15().optional().label("Plain-text Body"),
-  listId: string15().required().label("Mailing List"),
+  text: string22().optional().label("Plain-text Body"),
+  listId: string22().required().label("Mailing List"),
+  /**
+   * Where the campaign is in its life. See `CampaignStatus` for the transitions.
+   *
+   * Declared here so the enum is ENFORCED on write. It was previously written
+   * straight onto the document by the service with no schema behind it, and a
+   * value the enum never contained (`scheduled`) reached production rows and
+   * rendered in the admin list as though it were real.
+   */
+  status: string22().oneOf(SupportedCampaignStatuses).optional().default("draft" /* Draft */).label("Status"),
   /** Key from email-service's template registry. Mutually exclusive with `html`. */
-  templateKey: string15().optional().label("Email Template"),
+  templateKey: string22().optional().label("Email Template"),
   /**
    * One entry per variable the chosen template declares. Validated at save time
    * against the template's own `variables`, so a missing required binding is a
@@ -2413,56 +3357,50 @@ var CampaignSchema = object18({
    */
   bindings: lazy2((value) => {
     const keys = value && typeof value === "object" ? Object.keys(value) : [];
-    return object18(
-      Object.fromEntries(keys.map((k) => [k, BindingSchema.required()]))
+    return object31(
+      Object.fromEntries(keys.map((k) => [k, TemplateVariableBindingSchema.required()]))
     ).optional().default(() => ({})).label("Template Data");
   }),
-  /** Registered data source supplying per-recipient content, plus its params. */
-  dataSource: object18({
-    id: string15().required().label("Data Source"),
-    /**
-     * A free-form bag whose keys are defined by the chosen source's OWN
-     * `paramsSchema`, which this package cannot see. Same `lazy` treatment as
-     * `bindings` above, and for the same reason: a bare `object()` has no known
-     * keys, so under `stripUnknown: true` every param is "unknown" and the bag
-     * arrives as `{}` — a campaign configured to mail remote Python roles in
-     * Bangalore silently saves as an unfiltered platform-wide digest.
-     *
-     * Values stay unvalidated here on purpose; the marketing service validates
-     * them against the real source schema in `checkCampaignConfig`, which is the
-     * only place that knows what a given source accepts.
-     */
-    params: lazy2((value) => {
-      const keys = value && typeof value === "object" ? Object.keys(value) : [];
-      return object18(
-        Object.fromEntries(keys.map((k) => [k, mixed4().optional()]))
-      ).optional().default(() => ({})).label("Parameters");
-    })
-  }).optional().default(void 0).label("Data Source"),
+  /**
+   * The data sources this campaign draws content from.
+   *
+   * SEVERAL, because one mail may combine them. Each source's outputs are
+   * NAMESPACED by its id in the rendered payload (`jobs.jobCount`,
+   * `groups.groupCount`), so two sources providing the same name cannot
+   * overwrite each other and a template says which one it means.
+   */
+  dataSources: array16().of(CampaignDataSourceSchema).optional().default(void 0).label("Data Sources"),
   trigger: CampaignTriggerSchema.default(
     () => CampaignTriggerSchema.getDefault()
   ),
   // ── Safety ──────────────────────────────────────────────────────────────────
-  // Both default to the safe position: a new campaign neither runs nor sends
-  // until someone deliberately says so, and says so twice.
-  enabled: boolean11().optional().default(false).label("Enabled"),
-  dryRun: boolean11().optional().default(true).label("Dry Run"),
-  maxRecipients: number7().integer().min(1).max(CAMPAIGN_MAX_RECIPIENTS_CEILING).optional().default(void 0).label("Max Recipients"),
-  utm: object18({
-    campaign: string15().optional().max(120).label("utm_campaign"),
-    content: string15().optional().max(120).label("utm_content")
+  /**
+   * Still TWO deliberate acts before mail leaves, as before: a campaign must be
+   * activated (`status: running`) AND taken out of dry run.
+   *
+   * The first half used to be a separate `enabled` boolean living alongside the
+   * status, which meant two fields encoding one idea and able to disagree — an
+   * `enabled: false` campaign whose status said it was sending was
+   * representable, and the admin list showed exactly that. Activation is a
+   * state transition, so it belongs in the state.
+   */
+  dryRun: boolean17().optional().default(true).label("Dry Run"),
+  maxRecipients: number14().integer().min(1).max(CAMPAIGN_MAX_RECIPIENTS_CEILING).optional().default(void 0).label("Max Recipients"),
+  utm: object31({
+    campaign: string22().optional().max(120).label("utm_campaign"),
+    content: string22().optional().max(120).label("utm_content")
   }).optional().default(void 0).label("Link Tagging")
 }).label("Campaign");
 
 // src/pagination/pagination.schema.ts
-import { number as number8, object as object19, string as string16 } from "yup";
-var PaginationSchema = object19().shape({
-  page: number8().required().min(1).label("Page").default(1),
-  limit: number8().required().min(1).max(100).label("Limit").default(10),
-  sortBy: string16().notOneOf([""]).optional().label("SortBy"),
-  nextPage: string16().optional().label("Next Page Token"),
-  prevPage: string16().optional().label("Previous Page Token"),
-  sortDirection: string16().oneOf(["asc", "desc"]).optional().label("Sort Direction")
+import { number as number15, object as object32, string as string23 } from "yup";
+var PaginationSchema = object32().shape({
+  page: number15().required().min(1).label("Page").default(1),
+  limit: number15().required().min(1).max(100).label("Limit").default(10),
+  sortBy: string23().notOneOf([""]).optional().label("SortBy"),
+  nextPage: string23().optional().label("Next Page Token"),
+  prevPage: string23().optional().label("Previous Page Token"),
+  sortDirection: string23().oneOf(["asc", "desc"]).optional().label("Sort Direction")
 });
 
 // src/pagination/pagination.constant.ts
@@ -2478,7 +3416,7 @@ var DefaultPaginationOptions = {
 };
 
 // src/saved-search/saved-search.schema.ts
-import { number as number9, object as object20, string as string17 } from "yup";
+import { number as number16, object as object33, string as string24 } from "yup";
 
 // src/saved-search/saved-search.constant.ts
 var SavedSearchStatus = /* @__PURE__ */ ((SavedSearchStatus2) => {
@@ -2489,21 +3427,21 @@ var SavedSearchStatus = /* @__PURE__ */ ((SavedSearchStatus2) => {
 var SupportedSavedSearchStatuses = Object.values(SavedSearchStatus);
 
 // src/saved-search/saved-search.schema.ts
-var SavedSearchSchema = object20({
+var SavedSearchSchema = object33({
   /** Public identifier. Server-assigned. */
-  shortId: string17().trim().label("Short Id"),
+  shortId: string24().trim().label("Short Id"),
   /**
    * Owner's Better Auth account id. Server-assigned from the verified token,
    * never accepted from a request body.
    */
-  ownerUserId: string17().trim().label("Owner"),
+  ownerUserId: string24().trim().label("Owner"),
   /** What the user calls this search, e.g. "Remote React roles". */
-  label: string17().trim().max(120).required().label("Label"),
+  label: string24().trim().max(120).required().label("Label"),
   /**
    * The free-text query. Optional because a search can be filters-only ("all
    * remote jobs in Sweden"), which is a legitimate alert to want.
    */
-  search: string17().trim().max(500).optional().label("Search Text"),
+  search: string24().trim().max(500).optional().label("Search Text"),
   /**
    * Field filters, in the same `{ field: values }` shape the search endpoint
    * parses from `filter[field]=a,b`. Held as a free-form object rather than a
@@ -2511,7 +3449,7 @@ var SavedSearchSchema = object20({
    * change independently; validating them here would put this package in the
    * business of tracking that vocabulary.
    */
-  filter: object20().optional().default({}).label("Filters"),
+  filter: object33().optional().default({}).label("Filters"),
   /**
    * How often to mail matches. `off` keeps the search saved but silent, which is
    * the difference between "I don't want mail" and "delete my search".
@@ -2520,26 +3458,26 @@ var SavedSearchSchema = object20({
    * than defining a second one: two vocabularies for the same concept is how
    * they drift.
    */
-  frequency: string17().oneOf(SupportedJobAlertFrequencies).default("off" /* Off */).label("Alert Frequency"),
-  status: string17().oneOf(SupportedSavedSearchStatuses).default("active" /* Active */).label("Status"),
+  frequency: string24().oneOf(SupportedJobAlertFrequencies).default("off" /* Off */).label("Alert Frequency"),
+  status: string24().oneOf(SupportedSavedSearchStatuses).default("active" /* Active */).label("Status"),
   /**
    * Epoch ms of the last alert sent for this search. The matching sweep reads it
    * to decide whether the cadence is due, and writes it only AFTER a successful
    * publish, so a failed run retries next tick rather than silently skipping a
    * period.
    */
-  lastNotifiedAt: number9().optional().label("Last Notified At"),
+  lastNotifiedAt: number16().optional().label("Last Notified At"),
   /**
    * Epoch ms high-water mark: only jobs created after this are "new" for the
    * next alert. Kept separate from `lastNotifiedAt` because a run that finds no
    * matches should still advance what counts as new, without implying mail was
    * sent.
    */
-  lastMatchedAt: number9().optional().label("Last Matched At")
+  lastMatchedAt: number16().optional().label("Last Matched At")
 }).noUnknown().strict();
 
 // src/report/report.schema.ts
-import { mixed as mixed5, object as object21, string as string18 } from "yup";
+import { mixed as mixed6, object as object34, string as string25 } from "yup";
 
 // src/report/report.constant.ts
 var ResourceType = /* @__PURE__ */ ((ResourceType3) => {
@@ -2563,15 +3501,15 @@ var ReportReason = /* @__PURE__ */ ((ReportReason3) => {
 var SupportedReportReasons = Object.values(ReportReason);
 
 // src/report/report.schema.ts
-var ReportSchema = object21({
-  type: mixed5().oneOf(SupportedResourceTypes).required().label("Type"),
-  resourceId: string18().required().label("Resource ID"),
-  reason: mixed5().oneOf(SupportedReportReasons).required("Please choose a reason").label("Reason"),
-  comment: string18().max(1e3).optional().label("Comment")
+var ReportSchema = object34({
+  type: mixed6().oneOf(SupportedResourceTypes).required().label("Type"),
+  resourceId: string25().required().label("Resource ID"),
+  reason: mixed6().oneOf(SupportedReportReasons).required("Please choose a reason").label("Reason"),
+  comment: string25().max(1e3).optional().label("Comment")
 }).label("Report Schema");
 
-// src/feedback/feedback.schema.ts
-import { mixed as mixed6, object as object22, string as string19 } from "yup";
+// src/feedback/feedback-filter.schema.ts
+import { object as object35 } from "yup";
 
 // src/feedback/feedback.constant.ts
 var FeedbackType = /* @__PURE__ */ ((FeedbackType3) => {
@@ -2593,64 +3531,317 @@ var FeedbackStatus = /* @__PURE__ */ ((FeedbackStatus3) => {
 var SupportedFeedbackStatuses = Object.values(FeedbackStatus);
 var FEEDBACK_MESSAGE_MAX = 4e3;
 
+// src/feedback/feedback-filter.schema.ts
+var FeedbackFilterShape = object35({
+  type: enumFacet(SupportedFeedbackTypes, "Type"),
+  status: enumFacet(SupportedFeedbackStatuses, "Status")
+}).label("Feedback Filter");
+var FeedbackFilterSchema = rejectUnknownKeys(
+  FeedbackFilterShape,
+  () => Object.keys(FeedbackFilterShape.fields)
+);
+
 // src/feedback/feedback.schema.ts
-var FeedbackSchema = object22({
-  type: mixed6().oneOf(SupportedFeedbackTypes).required().label("Type"),
-  message: string19().trim().required("Please enter a message").max(FEEDBACK_MESSAGE_MAX).label("Message"),
-  email: string19().email().optional().label("Email"),
-  pageUrl: string19().optional().label("Page URL"),
-  status: mixed6().oneOf(SupportedFeedbackStatuses).optional().label("Status")
+import { mixed as mixed7, object as object36, string as string26 } from "yup";
+var FeedbackSchema = object36({
+  type: mixed7().oneOf(SupportedFeedbackTypes).required().label("Type"),
+  message: string26().trim().required("Please enter a message").max(FEEDBACK_MESSAGE_MAX).label("Message"),
+  email: string26().email().optional().label("Email"),
+  pageUrl: string26().optional().label("Page URL"),
+  status: mixed7().oneOf(SupportedFeedbackStatuses).optional().label("Status")
 }).label("Feedback Schema");
 
+// src/skill/skill-filter.schema.ts
+import { object as object37 } from "yup";
+var SkillFilterShape = object37({
+  /** Display names, matched exactly. Free-text matching is `?search=`. */
+  names: tokens("Names"),
+  /**
+   * Taxonomy concept ids, e.g. "power-bi".
+   *
+   * `tokens`, NOT `codeTokens`: a conceptId is a lowercase slug, and
+   * uppercasing it would match nothing.
+   */
+  conceptIds: tokens("Concept IDs"),
+  tags: tokens("Tags")
+}).label("Skill Filter");
+var SkillFilterSchema = rejectUnknownKeys(
+  SkillFilterShape,
+  () => Object.keys(SkillFilterShape.fields)
+);
+
+// src/billing/billing.schema.ts
+import { array as array17, boolean as boolean18, number as number17, object as object38, string as string27 } from "yup";
+
+// src/billing/billing.constant.ts
+var PlanKind = /* @__PURE__ */ ((PlanKind2) => {
+  PlanKind2["Subscription"] = "subscription";
+  PlanKind2["OneOff"] = "one-off";
+  return PlanKind2;
+})(PlanKind || {});
+var SupportedPlanKinds = Object.values(PlanKind);
+var PlanStatus = /* @__PURE__ */ ((PlanStatus2) => {
+  PlanStatus2["Draft"] = "draft";
+  PlanStatus2["Active"] = "active";
+  PlanStatus2["Archived"] = "archived";
+  return PlanStatus2;
+})(PlanStatus || {});
+var SupportedPlanStatuses = Object.values(PlanStatus);
+var GrantType = /* @__PURE__ */ ((GrantType2) => {
+  GrantType2["Boolean"] = "boolean";
+  GrantType2["Quota"] = "quota";
+  GrantType2["Credit"] = "credit";
+  return GrantType2;
+})(GrantType || {});
+var SupportedGrantTypes = Object.values(GrantType);
+var QuotaPeriod = /* @__PURE__ */ ((QuotaPeriod2) => {
+  QuotaPeriod2["Month"] = "month";
+  QuotaPeriod2["Year"] = "year";
+  QuotaPeriod2["Lifetime"] = "lifetime";
+  return QuotaPeriod2;
+})(QuotaPeriod || {});
+var SupportedQuotaPeriods = Object.values(QuotaPeriod);
+var BillingPeriod = /* @__PURE__ */ ((BillingPeriod2) => {
+  BillingPeriod2["Month"] = "month";
+  BillingPeriod2["Year"] = "year";
+  return BillingPeriod2;
+})(BillingPeriod || {});
+var SupportedBillingPeriods = Object.values(BillingPeriod);
+var SubscriptionStatus = /* @__PURE__ */ ((SubscriptionStatus2) => {
+  SubscriptionStatus2["Active"] = "active";
+  SubscriptionStatus2["Trialing"] = "trialing";
+  SubscriptionStatus2["PastDue"] = "past_due";
+  SubscriptionStatus2["Paused"] = "paused";
+  SubscriptionStatus2["Canceled"] = "canceled";
+  return SubscriptionStatus2;
+})(SubscriptionStatus || {});
+var SupportedSubscriptionStatuses = Object.values(SubscriptionStatus);
+var EntitlingSubscriptionStatuses = [
+  "active" /* Active */,
+  "trialing" /* Trialing */,
+  "past_due" /* PastDue */
+];
+var TransactionStatus = /* @__PURE__ */ ((TransactionStatus2) => {
+  TransactionStatus2["Draft"] = "draft";
+  TransactionStatus2["Ready"] = "ready";
+  TransactionStatus2["Billed"] = "billed";
+  TransactionStatus2["Paid"] = "paid";
+  TransactionStatus2["Completed"] = "completed";
+  TransactionStatus2["Canceled"] = "canceled";
+  TransactionStatus2["PastDue"] = "past_due";
+  return TransactionStatus2;
+})(TransactionStatus || {});
+var SupportedTransactionStatuses = Object.values(TransactionStatus);
+var PaddleEnvironment = /* @__PURE__ */ ((PaddleEnvironment2) => {
+  PaddleEnvironment2["Sandbox"] = "sandbox";
+  PaddleEnvironment2["Production"] = "production";
+  return PaddleEnvironment2;
+})(PaddleEnvironment || {});
+var SupportedPaddleEnvironments = Object.values(PaddleEnvironment);
+var FeatureKey = /* @__PURE__ */ ((FeatureKey2) => {
+  FeatureKey2["JobPost"] = "job.post";
+  FeatureKey2["JobAlerts"] = "job.alerts";
+  FeatureKey2["PageCreate"] = "page.create";
+  FeatureKey2["GroupCreate"] = "group.create";
+  FeatureKey2["CandidateFinder"] = "candidate.finder";
+  FeatureKey2["SearchAdvanced"] = "search.advanced";
+  FeatureKey2["GetDiscovered"] = "get-discovered";
+  return FeatureKey2;
+})(FeatureKey || {});
+var SupportedFeatureKeys = Object.values(FeatureKey);
+var EntitlementDenialReason = /* @__PURE__ */ ((EntitlementDenialReason2) => {
+  EntitlementDenialReason2["NotEntitled"] = "not-entitled";
+  EntitlementDenialReason2["QuotaExhausted"] = "quota-exhausted";
+  EntitlementDenialReason2["NoCredits"] = "no-credits";
+  return EntitlementDenialReason2;
+})(EntitlementDenialReason || {});
+var SupportedEntitlementDenialReasons = Object.values(
+  EntitlementDenialReason
+);
+var GRANT_MAX_LIMIT = 1e5;
+var CONSUME_MAX_UNITS = 1e3;
+
+// src/billing/billing.schema.ts
+var MoneySchema = object38({
+  amountMinor: number17().integer().min(0).required().label("Amount (minor units)"),
+  /**
+   * ISO-4217, as returned by Paddle. Deliberately NOT constrained to
+   * `SupportedSalaryCurrencies`: that list is the job-salary vocabulary, and
+   * Paddle bills in currencies it does not contain. Constraining it here would
+   * reject real payments.
+   */
+  currencyCode: string27().trim().uppercase().required().label("Currency")
+}).label("Money");
+var PlanGrantSchema = object38({
+  /**
+   * The gated capability, e.g. `job.post`. A free string on purpose: see the
+   * note on `FeatureKey` in `billing.constant.ts`. Adding a feature to the
+   * paywall must not require releasing this package.
+   */
+  feature: string27().trim().required().min(1).max(64).label("Feature"),
+  type: string27().oneOf(SupportedGrantTypes).required().default("boolean" /* Boolean */).label("Grant Type"),
+  /** Uses per period. Required for `quota`, meaningless otherwise. */
+  limit: number17().integer().min(1).max(GRANT_MAX_LIMIT).optional().label("Limit").when("type", {
+    is: "quota" /* Quota */,
+    then: (s) => s.required("A quota grant needs a limit")
+  }),
+  period: string27().oneOf(SupportedQuotaPeriods).optional().default("month" /* Month */).label("Period").when("type", {
+    is: "quota" /* Quota */,
+    then: (s) => s.required("A quota grant needs a period")
+  }),
+  /** Non-expiring uses granted per purchase. Required for `credit`. */
+  amount: number17().integer().min(1).max(GRANT_MAX_LIMIT).optional().label("Amount").when("type", {
+    is: "credit" /* Credit */,
+    then: (s) => s.required("A credit grant needs an amount")
+  })
+}).label("Plan Grant");
+var PaddlePriceIdsSchema = object38({
+  sandbox: array17().of(string27().required()).optional().default([]).label("Sandbox Price IDs"),
+  live: array17().of(string27().required()).optional().default([]).label("Live Price IDs")
+}).label("Paddle Price IDs");
+var PlanSchema = object38({
+  /** Stable slug, e.g. `employer-pro`. The identifier everything else references. */
+  key: string27().trim().lowercase().required().min(2).max(64).label("Key"),
+  name: string27().required().min(1).max(120).label("Name"),
+  description: string27().optional().max(500).label("Description"),
+  kind: string27().oneOf(SupportedPlanKinds).required().default("subscription" /* Subscription */).label("Kind"),
+  status: string27().oneOf(SupportedPlanStatuses).required().default("draft" /* Draft */).label("Status"),
+  paddlePriceIds: PaddlePriceIdsSchema.default(
+    () => PaddlePriceIdsSchema.getDefault()
+  ),
+  grants: array17().of(PlanGrantSchema.required()).required().min(1, "A plan must grant at least one feature").label("Grants"),
+  /** Display price for the pricing page. Billing is always Paddle's own figure. */
+  price: MoneySchema.optional().default(void 0).label("Price"),
+  /**
+   * How often this plan bills, for the pricing page's monthly/yearly toggle and
+   * for rendering `price` with the right suffix.
+   *
+   * Display only: Paddle owns the real billing interval, and this never drives a
+   * charge. It is optional because one-off plans have no interval, and because
+   * plans seeded before this field existed must keep validating. Treat absent on
+   * a subscription as "monthly" at the use site rather than defaulting it here,
+   * so an unset value stays visible as unset.
+   */
+  billingPeriod: string27().oneOf(SupportedBillingPeriods).optional().label("Billing Period"),
+  /** Ordering on the pricing page, ascending. */
+  sortOrder: number17().integer().optional().default(0).label("Sort Order"),
+  createdAt: number17().optional().label("Created At"),
+  updatedAt: number17().optional().label("Updated At")
+}).label("Plan");
+var BillingSubscriptionSchema = object38({
+  userId: string27().required().label("User ID"),
+  paddleSubscriptionId: string27().required().label("Paddle Subscription ID"),
+  paddleCustomerId: string27().required().label("Paddle Customer ID"),
+  planKey: string27().required().label("Plan Key"),
+  priceIds: array17().of(string27().required()).required().label("Price IDs"),
+  status: string27().oneOf(SupportedSubscriptionStatuses).required().label("Status"),
+  /** Start of the period the quota is anchored to. */
+  currentPeriodStart: number17().optional().label("Current Period Start"),
+  currentPeriodEnd: number17().optional().label("Current Period End"),
+  /** Set when a cancellation is scheduled; access continues until the period ends. */
+  canceledAt: number17().optional().label("Canceled At"),
+  /** `occurred_at` of the newest Paddle event applied. Guards out-of-order writes. */
+  lastEventAt: number17().required().default(0).label("Last Event At"),
+  createdAt: number17().optional().label("Created At"),
+  updatedAt: number17().optional().label("Updated At")
+}).label("Billing Subscription");
+var BillingTransactionSchema = object38({
+  userId: string27().required().label("User ID"),
+  paddleTransactionId: string27().required().label("Paddle Transaction ID"),
+  paddleCustomerId: string27().optional().label("Paddle Customer ID"),
+  paddleSubscriptionId: string27().optional().label("Paddle Subscription ID"),
+  planKey: string27().optional().label("Plan Key"),
+  priceIds: array17().of(string27().required()).required().label("Price IDs"),
+  status: string27().oneOf(SupportedTransactionStatuses).required().label("Status"),
+  total: MoneySchema.optional().default(void 0).label("Total"),
+  billedAt: number17().optional().label("Billed At"),
+  lastEventAt: number17().required().default(0).label("Last Event At"),
+  createdAt: number17().optional().label("Created At"),
+  updatedAt: number17().optional().label("Updated At")
+}).label("Billing Transaction");
+var FeatureEntitlementSchema = object38({
+  feature: string27().required().label("Feature"),
+  type: string27().oneOf(SupportedGrantTypes).required().label("Grant Type"),
+  /** Whether the feature may be used AT ALL right now. */
+  allowed: boolean18().required().default(false).label("Allowed"),
+  /** Quota ceiling for the period. Absent for boolean grants. */
+  limit: number17().integer().optional().label("Limit"),
+  used: number17().integer().optional().label("Used"),
+  /** Quota remaining plus any credit balance. Absent for boolean grants. */
+  remaining: number17().integer().optional().label("Remaining"),
+  /** Non-expiring balance from one-off purchases. */
+  credits: number17().integer().optional().label("Credits"),
+  /** When the quota next refreshes. */
+  resetsAt: number17().optional().label("Resets At")
+}).label("Feature Entitlement");
+var EntitlementDenialSchema = object38({
+  feature: string27().required().label("Feature"),
+  reason: string27().oneOf(SupportedEntitlementDenialReasons).required().label("Reason"),
+  limit: number17().integer().optional().label("Limit"),
+  used: number17().integer().optional().label("Used"),
+  resetsAt: number17().optional().label("Resets At"),
+  upgradeUrl: string27().optional().label("Upgrade URL")
+}).label("Entitlement Denial");
+var EntitlementConsumeSchema = object38({
+  userId: string27().required().label("User ID"),
+  feature: string27().trim().required().min(1).max(64).label("Feature"),
+  units: number17().integer().min(1).max(CONSUME_MAX_UNITS).required().default(1).label("Units"),
+  /**
+   * Caller-supplied de-duplication key. Makes a spend exactly-once across the
+   * retries that at-least-once delivery and ordinary network failures produce.
+   */
+  idempotencyKey: string27().trim().required().min(8).max(128).label("Idempotency Key")
+}).label("Entitlement Consume");
+
 // src/user/user.schema.ts
-import { array as array14, boolean as boolean15, number as number12, object as object34, string as string32 } from "yup";
+import { array as array21, boolean as boolean22, number as number20, object as object51, string as string40 } from "yup";
 
 // src/user/work-experience.schema.ts
-import { boolean as boolean12, object as object23, string as string20 } from "yup";
-var WorkExperienceSchema = object23().shape({
+import { boolean as boolean19, object as object39, string as string28 } from "yup";
+var WorkExperienceSchema = object39().shape({
   company: PageSchema.pick(["name", "slug", "type", "logo"]).deepPartial().concat(PageSchema.pick(["name", "type"])).required().label("Company"),
-  designation: string20().trim().required().label("Designation"),
+  designation: string28().trim().required().label("Designation"),
   duration: DurationSchema({
     format: "YYYY-MM",
     startLabel: "Start Date",
     endLabel: "End Date"
   }).required().label("Duration"),
-  description: string20().trim().max(3e3).optional().label("Description"),
+  description: string28().trim().max(3e3).optional().label("Description"),
   location: LocationSchema.required().label("Location"),
-  isRemote: boolean12().oneOf([true, false]).default(false).label("Is Remote")
+  isRemote: boolean19().oneOf([true, false]).default(false).label("Is Remote")
 }).noUnknown().strict().label("Work Experience");
 
 // src/user/education.schema.ts
-import { boolean as boolean13, object as object24, string as string21 } from "yup";
-var EducationSchema = object24({
+import { boolean as boolean20, object as object40, string as string29 } from "yup";
+var EducationSchema = object40({
   institute: PageSchema.pick(["name", "slug", "type", "logo"]).deepPartial().concat(PageSchema.pick(["name", "type"])).required().label("Institute"),
-  course: string21().trim().required().label("Course"),
-  fieldOfStudy: string21().trim().required().label("Field of Study"),
+  course: string29().trim().required().label("Course"),
+  fieldOfStudy: string29().trim().required().label("Field of Study"),
   duration: DurationSchema({
     format: "YYYY-MM",
     startLabel: "Start Date",
     endLabel: "End Date"
   }).required().label("Duration"),
-  description: string21().trim().max(3e3).optional().label("Description"),
-  isDistanceLearning: boolean13().default(false).label("Is Distance Learning"),
+  description: string29().trim().max(3e3).optional().label("Description"),
+  isDistanceLearning: boolean20().default(false).label("Is Distance Learning"),
   location: LocationSchema.required().label("Location"),
-  studyType: string21().oneOf(SupportedStudyTypes).trim().max(50).required().label("Study Type")
+  studyType: string29().oneOf(SupportedStudyTypes).trim().max(50).required().label("Study Type")
 }).noUnknown().strict().label("Education");
 
 // src/user/user-skill.schema.ts
-import { object as object25, string as string22 } from "yup";
-var UserSkillSchema = object25({
-  name: string22().required().label("Name"),
-  proficiencyLevel: string22().oneOf(SupportedProficiencyLevels).required().label("Proficiency Level"),
+import { object as object41, string as string30 } from "yup";
+var UserSkillSchema = object41({
+  name: string30().required().label("Name"),
+  proficiencyLevel: string30().oneOf(SupportedProficiencyLevels).required().label("Proficiency Level"),
   lastUsed: dateString().format("YYYY-MM").nullable().optional().label("Last Used")
 }).noUnknown().strict().label("Skill");
 
 // src/user/project.schema.ts
-import { object as object26, string as string23 } from "yup";
-var UserProjectSchema = object26({
-  name: string23().trim().max(50).required().label("Name"),
-  url: string23().optional().label("URL"),
-  description: string23().trim().min(100).max(3e3).required().label("Description"),
+import { object as object42, string as string31 } from "yup";
+var UserProjectSchema = object42({
+  name: string31().trim().max(50).required().label("Name"),
+  url: string31().optional().label("URL"),
+  description: string31().trim().min(100).max(3e3).required().label("Description"),
   duration: DurationSchema({
     format: "YYYY-MM",
     startLabel: "Start Date",
@@ -2659,54 +3850,68 @@ var UserProjectSchema = object26({
 }).noUnknown().strict().label("Project");
 
 // src/user/user-certification.schema.ts
-import { object as object27, string as string24 } from "yup";
-var UserCertificationSchema = object27({
-  name: string24().trim().max(100).required().label("Name"),
+import { object as object43, string as string32 } from "yup";
+var UserCertificationSchema = object43({
+  name: string32().trim().max(100).required().label("Name"),
   // TODO: Add validation for authority
-  authority: string24().trim().max(100).required().label("Authority"),
-  licenseNumber: string24().trim().max(50).optional().label("License Number"),
+  authority: string32().trim().max(100).required().label("Authority"),
+  licenseNumber: string32().trim().max(50).optional().label("License Number"),
   duration: DurationSchema({
     format: "YYYY-MM",
     startLabel: "Start Date",
     endLabel: "End Date"
   }).optional().nullable().label("Duration"),
-  url: string24().optional().label("URL")
+  url: string32().optional().label("URL")
 }).noUnknown().strict().label("Certification");
 
 // src/user/user-interest.schema.ts
-import { string as string25 } from "yup";
-var UserInterestSchema = string25().trim().required().label("Interest");
+import { object as object44, string as string33 } from "yup";
+var UserInterestSchema = object44({
+  /** The taxonomy entry's id. */
+  id: string33().trim().required().label("Interest Id"),
+  /** Display name, e.g. "Cloud Computing". */
+  name: string33().trim().required().label("Interest"),
+  /** Material-symbols icon name, e.g. "cloud". */
+  logo: string33().trim().required().label("Interest Logo")
+}).required().label("Interest");
 
 // src/user/user-language.schema.ts
-import { object as object28, string as string26 } from "yup";
-var UserLanguageSchema = object28({
-  name: string26().trim().required().label("Name"),
-  proficiencyLevel: string26().oneOf(SupportedProficiencyLevels).trim().max(50).required().label("Proficiency Level")
+import { object as object45, string as string34 } from "yup";
+var UserLanguageSchema = object45({
+  name: string34().trim().required().label("Name"),
+  proficiencyLevel: string34().oneOf(SupportedProficiencyLevels).trim().max(50).required().label("Proficiency Level")
 }).noUnknown().strict().label("Language");
 
 // src/user/user-additional-info.schema.ts
-import { object as object29, string as string27 } from "yup";
-var UserAdditionalInfoSchema = object29({
-  title: string27().trim().max(60).required().label("Title"),
-  description: string27().trim().max(1e3).required().label("Description")
+import { object as object46, string as string35 } from "yup";
+var UserAdditionalInfoSchema = object46({
+  title: string35().trim().max(60).required().label("Title"),
+  description: string35().trim().max(1e3).required().label("Description")
 }).noUnknown().strict().label("User Additional Info");
 
 // src/user/general-detail.schema.ts
-import { number as number10, object as object30, string as string28 } from "yup";
-var UserGeneralDetailSchema = object30({
-  id: string28().optional().label("ID"),
-  name: object30().shape({
-    first: string28().trim().max(50).required().label("First Name"),
-    last: string28().trim().max(50).optional().label("Last Name")
+import { number as number18, object as object47, string as string36 } from "yup";
+var UserGeneralDetailSchema = object47({
+  id: string36().optional().label("ID"),
+  name: object47().shape({
+    first: string36().trim().max(50).required().label("First Name"),
+    last: string36().trim().max(50).optional().label("Last Name")
   }).required().label("Name"),
-  headline: string28().trim().max(200).optional().label("Headline"),
-  image: string28().optional().label("Image"),
-  aboutMe: string28().trim().max(3e3).optional().label("About Me"),
-  email: string28().required().label("Email"),
-  mobile: string28().nullable().optional().label("Mobile"),
-  emailVerified: string28().nullable().optional().label("Email Verified"),
-  mobileVerified: string28().nullable().optional().label("Mobile Verified"),
-  experienceLevel: string28().oneOf(SupportedExperienceLevels).required().label("Experience level"),
+  headline: string36().trim().max(200).optional().label("Headline"),
+  image: string36().optional().label("Image"),
+  // The DISPLAYED avatar (`image`) is a flattened export with any status frame
+  // ("#OpenToWork", …) already burned into the pixels. `imageOriginal` keeps the
+  // un-framed source the user uploaded, so the image builder can reopen it and
+  // apply a DIFFERENT frame instead of stacking a second one on top of the first.
+  // Optional and absent on every pre-existing user: treat a missing value as
+  // "only the flattened image is available".
+  imageOriginal: string36().optional().label("Original Image"),
+  aboutMe: string36().trim().max(3e3).optional().label("About Me"),
+  email: string36().required().label("Email"),
+  mobile: string36().nullable().optional().label("Mobile"),
+  emailVerified: string36().nullable().optional().label("Email Verified"),
+  mobileVerified: string36().nullable().optional().label("Mobile Verified"),
+  experienceLevel: string36().oneOf(SupportedExperienceLevels).required().label("Experience level"),
   /**
    * The user's HIGHEST qualification, e.g. `bachelor`.
    *
@@ -2725,7 +3930,7 @@ var UserGeneralDetailSchema = object30({
    * UNCONSTRAINED on education rather than filtering the user out — the same
    * opt-out reasoning `notificationPrefs` uses.
    */
-  educationLevel: string28().oneOf(SupportedEducationLevels).optional().label("Education level"),
+  educationLevel: string36().oneOf(SupportedEducationLevels).optional().label("Education level"),
   location: LocationSchema.required().label("Location"),
   /**
    * Where the account was created, captured once and never rewritten.
@@ -2741,38 +3946,38 @@ var UserGeneralDetailSchema = object30({
    *   - `location`   derived from the user's self-entered profile location
    *   - `default`    assumed (no signal available); presumption, not evidence
    */
-  signupContext: object30().shape({
+  signupContext: object47().shape({
     // ISO 3166-1 alpha-2, uppercase — the shape `cf-ipcountry` returns, so
     // measured and inferred values are directly comparable.
-    country: string28().trim().uppercase().length(2).required().label("Signup Country"),
-    locale: string28().trim().required().label("Signup Locale"),
-    source: string28().oneOf(SupportedSignupContextSources).required().label("Signup Context Source"),
-    at: number10().required().label("Signup Context At")
+    country: string36().trim().uppercase().length(2).required().label("Signup Country"),
+    locale: string36().trim().required().label("Signup Locale"),
+    source: string36().oneOf(SupportedSignupContextSources).required().label("Signup Context Source"),
+    at: number18().required().label("Signup Context At")
   }).optional().default(void 0).label("Signup Context"),
-  profileVisibility: string28().oneOf(SupportedUserProfileVisibilities).default("public" /* Public */).label("Profile Visibility")
+  profileVisibility: string36().oneOf(SupportedUserProfileVisibilities).default("public" /* Public */).label("Profile Visibility")
 }).noUnknown().strict().label("General Detail");
 
 // src/user/user-job-preferences.schema.ts
-import { array as array11, boolean as boolean14, date as date2, number as number11, object as object31, string as string29 } from "yup";
-var UserJobPreferencesSchema = object31({
+import { array as array18, boolean as boolean21, date as date2, number as number19, object as object48, string as string37 } from "yup";
+var UserJobPreferencesSchema = object48({
   /**
    * Whether the job seeker is openly signalling availability. Surfaces the
    * "Open to work" badge on the public profile and boosts visibility in
    * recruiter search. Defaults to `false` - users must opt in.
    */
-  openToWork: boolean14().default(false).label("Open to Work"),
+  openToWork: boolean21().default(false).label("Open to Work"),
   /**
    * How urgently the user is looking for their next job. Drives match scoring
    * and can downgrade the visibility of expired or low-relevance postings for
    * users in `passively_browsing` mode.
    */
-  jobSearchUrgency: string29().oneOf(SupportedJobSearchUrgencies).required().label("Job Search Urgency"),
+  jobSearchUrgency: string37().oneOf(SupportedJobSearchUrgencies).required().label("Job Search Urgency"),
   /**
    * Locations the user wants to work in. Stores the full `LocationSchema`
    * shape (country, city, state, geo, etc.) as returned by the locations
    * autocomplete API.
    */
-  jobLocations: array11().of(LocationSchema.required().label("Job Location")).min(1, "Pick at least one preferred location.").required().label("Job Locations"),
+  jobLocations: array18().of(LocationSchema.required().label("Job Location")).min(1, "Pick at least one preferred location.").required().label("Job Locations"),
   /**
    * Seniority levels the user wants jobs to be matched against. Multi-select
    * (up to 2) for borderline candidates.
@@ -2783,7 +3988,7 @@ var UserJobPreferencesSchema = object31({
    * Both reuse the same `ExperienceLevel` taxonomy from `common.constant.ts`
    * so search/match logic doesn't have to translate between two vocabularies.
    */
-  targetExperienceLevels: array11().of(string29().oneOf(SupportedExperienceLevels).required()).min(1, "Pick at least one experience level.").max(2, "You can select at most 2 experience levels.").required().label("Target Experience Levels"),
+  targetExperienceLevels: array18().of(string37().oneOf(SupportedExperienceLevels).required()).min(1, "Pick at least one experience level.").max(2, "You can select at most 2 experience levels.").required().label("Target Experience Levels"),
   /**
    * Specializations the user is searching for - free-form titles.
    *
@@ -2792,19 +3997,19 @@ var UserJobPreferencesSchema = object31({
    * surfaces a curated "Popular Roles" picker for discovery, but the user
    * can ultimately add any title; matching/normalization happens downstream.
    */
-  jobRoles: array11().of(string29().trim().max(120).required()).min(1, "Pick at least one role.").required().label("Job Roles"),
+  jobRoles: array18().of(string37().trim().max(120).required()).min(1, "Pick at least one role.").required().label("Job Roles"),
   /**
    * Minimum acceptable annual base salary, in `minSalaryCurrency`.
    * Stored as an integer in the currency's major unit (e.g. dollars, not cents).
    * Defaults to 0 ("any salary") rather than being optional - every job-seeker
    * has a floor, even if it's zero.
    */
-  minSalary: number11().integer().min(MIN_SALARY_LOWER_BOUND).max(MIN_SALARY_UPPER_BOUND).default(0).required().label("Minimum Salary"),
-  minSalaryCurrency: string29().oneOf(SupportedSalaryCurrencies).default("USD").required().label("Minimum Salary Currency"),
+  minSalary: number19().integer().min(MIN_SALARY_LOWER_BOUND).max(MIN_SALARY_UPPER_BOUND).default(0).required().label("Minimum Salary"),
+  minSalaryCurrency: string37().oneOf(SupportedSalaryCurrencies).default("USD").required().label("Minimum Salary Currency"),
   /**
    * Marketing-attribution capture from the final onboarding step.
    */
-  referralSource: string29().oneOf(SupportedReferralSources).required().label("Referral Source"),
+  referralSource: string37().oneOf(SupportedReferralSources).required().label("Referral Source"),
   /**
    * Resumes the user has uploaded. Embedded directly on the user document
    * (capped at 5) - they're cheap to denormalize, every wizard step that
@@ -2818,18 +4023,18 @@ var UserJobPreferencesSchema = object31({
    * AI resume-builder flow - onboarding uploads land here, AI-built resumes
    * live in their own collection.
    */
-  resumes: array11().of(
-    object31({
+  resumes: array18().of(
+    object48({
       // Stable id assigned on upload - used to address a specific entry
       // for delete / set-primary operations without exposing the GCS URL
       // as a route key.
-      id: string29().required().label("ID"),
-      url: string29().required().label("Resume URL"),
-      filename: string29().trim().max(255).optional().label("Filename"),
-      sizeBytes: number11().integer().min(0).optional().label("Size (bytes)"),
-      mimeType: string29().trim().max(120).optional().label("MIME Type"),
+      id: string37().required().label("ID"),
+      url: string37().required().label("Resume URL"),
+      filename: string37().trim().max(255).optional().label("Filename"),
+      sizeBytes: number19().integer().min(0).optional().label("Size (bytes)"),
+      mimeType: string37().trim().max(120).optional().label("MIME Type"),
       uploadedAt: date2().required().label("Uploaded At"),
-      isPrimary: boolean14().default(false).label("Is Primary")
+      isPrimary: boolean21().default(false).label("Is Primary")
     }).noUnknown().strict().label("Resume")
   ).max(5, "You can keep at most 5 resumes on file.").default([]).label("Resumes"),
   /**
@@ -2856,92 +4061,92 @@ var UserJobPreferencesSchema = object31({
    *   APIs. If `user.<field>` is empty there, the correct behavior is empty,
    *   because the user has not confirmed it yet.
    */
-  pendingPrefill: object31({
-    headline: string29().trim().optional().label("Pending Headline"),
-    aboutMe: string29().trim().optional().label("Pending About Me"),
-    mobile: string29().trim().optional().label("Pending Mobile"),
+  pendingPrefill: object48({
+    headline: string37().trim().optional().label("Pending Headline"),
+    aboutMe: string37().trim().optional().label("Pending About Me"),
+    mobile: string37().trim().optional().label("Pending Mobile"),
     location: LocationSchema.optional().default(void 0).label("Pending Location"),
-    experienceLevel: string29().oneOf(SupportedExperienceLevels).optional().label("Pending Experience Level"),
-    socialAccounts: array11().of(SocialAccountSchema.required()).optional().label("Pending Social Accounts"),
-    workExperiences: array11().of(WorkExperienceSchema.required()).optional().label("Pending Work Experiences"),
-    educations: array11().of(EducationSchema.required()).optional().label("Pending Educations")
+    experienceLevel: string37().oneOf(SupportedExperienceLevels).optional().label("Pending Experience Level"),
+    socialAccounts: array18().of(SocialAccountSchema.required()).optional().label("Pending Social Accounts"),
+    workExperiences: array18().of(WorkExperienceSchema.required()).optional().label("Pending Work Experiences"),
+    educations: array18().of(EducationSchema.required()).optional().label("Pending Educations")
   }).nullable().optional().default(void 0).label("Pending Prefill")
 }).noUnknown().strict().label("User Job Preferences Schema");
 
 // src/user/user-recruiter-profile.schema.ts
-import { array as array12, object as object32, string as string30 } from "yup";
-var RecruiterPageLinkSchema = object32({
+import { array as array19, object as object49, string as string38 } from "yup";
+var RecruiterPageLinkSchema = object49({
   page: PageSchema.pick(["name", "slug", "type", "logo"]).deepPartial().concat(PageSchema.pick(["name", "type"])).required().label("Company Page"),
-  jobTitle: string30().trim().max(100).optional().label("Job Title")
+  jobTitle: string38().trim().max(100).optional().label("Job Title")
 }).noUnknown().strict().label("Recruiter Page Link");
-var UserRecruiterProfileSchema = object32({
-  recruiterProfile: object32({
-    hiringFor: array12().of(RecruiterPageLinkSchema).default([]).label("Hiring For")
+var UserRecruiterProfileSchema = object49({
+  recruiterProfile: object49({
+    hiringFor: array19().of(RecruiterPageLinkSchema).default([]).label("Hiring For")
   }).optional().default(void 0).label("Recruiter Profile")
 }).noUnknown().strict().label("User Recruiter Profile");
 
 // src/user/user-coordinator-profile.schema.ts
-import { array as array13, object as object33, string as string31 } from "yup";
-var CoordinatorPageLinkSchema = object33({
+import { array as array20, object as object50, string as string39 } from "yup";
+var CoordinatorPageLinkSchema = object50({
   page: PageSchema.pick(["name", "slug", "type", "logo"]).deepPartial().concat(PageSchema.pick(["name", "type"])).required().label("Institute Page"),
-  jobTitle: string31().trim().max(100).optional().label("Job Title")
+  jobTitle: string39().trim().max(100).optional().label("Job Title")
 }).noUnknown().strict().label("Coordinator Page Link");
-var UserCoordinatorProfileSchema = object33({
-  coordinatorProfile: object33({
-    coordinatesAt: array13().of(CoordinatorPageLinkSchema).default([]).label("Coordinates At")
+var UserCoordinatorProfileSchema = object50({
+  coordinatorProfile: object50({
+    coordinatesAt: array20().of(CoordinatorPageLinkSchema).default([]).label("Coordinates At")
   }).optional().default(void 0).label("Coordinator Profile")
 }).noUnknown().strict().label("User Coordinator Profile");
 
 // src/user/user.schema.ts
-var UserSchema = object34({
+var UserSchema = object51({
   /**
    * Related auth account id from auth Server (e.g. Better auth https://auth.thejob.dev)
    */
-  authAccountId: string32().required().label("Auth Account ID"),
+  authAccountId: string40().required().label("Auth Account ID"),
   /**
    * Social media information about the user (e.g. LinkedIn, GitHub, etc.)
    */
-  socialAccounts: array14().of(SocialAccountSchema).default([]).label("Social Accounts"),
+  socialAccounts: array21().of(SocialAccountSchema).default([]).label("Social Accounts"),
   /**
    * Work experience information about the user
    */
-  workExperiences: array14().of(WorkExperienceSchema).required().default([]).label("Work Experiences"),
+  workExperiences: array21().of(WorkExperienceSchema).required().default([]).label("Work Experiences"),
   /**
    * Education information about the user
    */
-  educations: array14().of(EducationSchema).required().default([]).label("Educations"),
+  educations: array21().of(EducationSchema).required().default([]).label("Educations"),
   /**
    * Skills information about the user
    */
-  skills: array14().of(UserSkillSchema).required().default([]).label("Skills"),
+  skills: array21().of(UserSkillSchema).required().default([]).label("Skills"),
   /**
    * Projects information about the user
    */
-  projects: array14().of(UserProjectSchema).default([]).label("Projects"),
+  projects: array21().of(UserProjectSchema).default([]).label("Projects"),
   /**
    * Certifications information about the user
    */
-  certifications: array14().of(UserCertificationSchema).default([]).label("Certifications"),
+  certifications: array21().of(UserCertificationSchema).default([]).label("Certifications"),
   /**
    * Interests information about the user.
    */
-  interests: array14().of(UserInterestSchema).optional().default([]).label("Interests"),
+  interests: array21().of(UserInterestSchema).optional().default([]).label("Interests"),
   /**
    * Languages information about the user
    */
-  languages: array14().of(UserLanguageSchema).required().default([]).label("Languages"),
+  languages: array21().of(UserLanguageSchema).required().default([]).label("Languages"),
   /**
    * Additional information about the user
    */
-  additionalInfo: array14().of(UserAdditionalInfoSchema).default([]).label("Additional Information"),
+  additionalInfo: array21().of(UserAdditionalInfoSchema).default([]).label("Additional Information"),
   /**
    * Status of the user account
    */
-  status: string32().oneOf(SupportedUserStatuses).required().label("Status"),
+  status: string40().oneOf(SupportedUserStatuses).required().label("Status"),
   /**
    * Roles assigned to the user
    */
-  roles: array14().of(string32().oneOf(SupportedUserRoles)).required().default(DefaultUserRoles).label("Roles"),
+  roles: array21().of(string40().oneOf(SupportedUserRoles)).required().default(DefaultUserRoles).label("Roles"),
   /**
    * Explicit consent to receive marketing email (newsletters, job alerts by
    * broadcast, product updates). Marketing sends are HARD-GATED on
@@ -2953,18 +4158,18 @@ var UserSchema = object34({
    * unsubscribe sets `subscribed=false` so consent and the email-service
    * suppression list stay consistent. Defaults to NOT subscribed (opt-in).
    */
-  marketingConsent: object34({
-    subscribed: boolean15().default(false).label("Subscribed to marketing email"),
+  marketingConsent: object51({
+    subscribed: boolean22().default(false).label("Subscribed to marketing email"),
     /** Epoch ms of the last consent change (opt-in or opt-out). */
-    updatedAt: number12().optional().label("Consent updated at"),
+    updatedAt: number20().optional().label("Consent updated at"),
     /** Where the consent change originated, e.g. `onboarding`, `unsubscribe`, `settings`. */
-    source: string32().optional().label("Consent source"),
+    source: string40().optional().label("Consent source"),
     /**
      * How often the user receives job-alert emails. `off` disables job alerts
      * only; other marketing stays governed by `subscribed`. Unset means the
      * user has not chosen a cadence yet.
      */
-    jobAlertFrequency: string32().oneOf(SupportedJobAlertFrequencies).optional().label("Job alert frequency")
+    jobAlertFrequency: string40().oneOf(SupportedJobAlertFrequencies).optional().label("Job alert frequency")
   }).default({ subscribed: false }).label("Marketing Consent"),
   /**
    * Per-channel toggles for NOTIFICATION email — mail about activity on the
@@ -2979,31 +4184,132 @@ var UserSchema = object34({
    *
    * Transactional mail (magic-link, verification) ignores this object entirely.
    */
-  notificationPrefs: object34({
-    groupActivity: boolean15().default(true).label("Group activity email"),
-    jobActivity: boolean15().default(true).label("Job activity email"),
-    applicationUpdates: boolean15().default(true).label("Application update email"),
-    productUpdates: boolean15().default(false).label("Product update email")
+  notificationPrefs: object51({
+    groupActivity: boolean22().default(true).label("Group activity email"),
+    jobActivity: boolean22().default(true).label("Job activity email"),
+    applicationUpdates: boolean22().default(true).label("Application update email"),
+    productUpdates: boolean22().default(false).label("Product update email")
   }).default({
     groupActivity: true,
     jobActivity: true,
     applicationUpdates: true,
     productUpdates: false
   }).label("Notification Preferences"),
+  /**
+   * Consent to receive WEB PUSH notifications.
+   *
+   * Push is a TRANSPORT, not a category: it carries the same notifications
+   * `notificationPrefs` already governs, delivered to a device instead of an
+   * inbox. That is why no push value is added to `NotificationType` — the user
+   * chooses whether push is used at all, and WHICH kinds are worth pushing
+   * stays a product decision.
+   *
+   * Opt-IN, and it must not be folded into `notificationPrefs`: those are
+   * opt-OUT and read `!== false`, so an absent value means ENABLED. Applied to
+   * push, every user who predates this field would read as having granted
+   * permission they were never asked for. This mirrors `marketingConsent`
+   * instead, which is the opt-in shape in this file, down to the provenance
+   * fields.
+   *
+   * Consent alone never delivers anything: a push send also needs a live
+   * subscription (see `PushSubscriptionSchema`). This flag is the user's
+   * intent, the subscription is the browser grant, and both are required.
+   */
+  pushConsent: object51({
+    subscribed: boolean22().default(false).label("Subscribed to push notifications"),
+    /** Epoch ms of the last consent change (opt-in or opt-out). */
+    updatedAt: number20().optional().label("Push consent updated at"),
+    /** Where the change originated, e.g. `onboarding`, `settings`, `prompt`. */
+    source: string40().optional().label("Push consent source")
+  }).default({ subscribed: false }).label("Push Consent"),
   /**
    * Vector embedding of the user's profile for semantic/hybrid search.
    * Generated from a structured summary of skills, experience, education, etc.
    * Only generated for public profiles with sufficient completeness (≥60%).
    */
-  embedding: object34({
-    vector: array14(number12().required()).optional().label("Embedding vector"),
-    model: string32().optional().label("Embedding model")
-  }).nullable().optional().label("Embedding")
+  embedding: object51({
+    vector: array21(number20().required()).optional().label("Embedding vector"),
+    model: string40().optional().label("Embedding model")
+  }).nullable().optional().label("Embedding"),
+  /**
+   * Epoch ms the account was created, assigned by the storing service.
+   *
+   * Declared here, matching `GroupSchema`, because it is not merely stored: all
+   * 103,608 user documents carry it, `UserFilterSchema` filters on it
+   * (`createdAtWithinDays` / `createdAtOlderThanDays`), and the admin grid sorts
+   * and displays it. It was absent, so a consumer deriving its row type from
+   * this schema could not name the column it renders, and this object is
+   * `.noUnknown().strict()` — an undeclared key is stripped on validation.
+   *
+   * `updatedAt` is deliberately NOT added alongside it: nothing derives from it
+   * yet, and an optional field is only safe to add when something needs it.
+   */
+  createdAt: number20().optional().label("Created At")
 }).concat(UserGeneralDetailSchema).concat(UserJobPreferencesSchema).concat(UserRecruiterProfileSchema).concat(UserCoordinatorProfileSchema).noUnknown().strict().label("User Schema");
 
+// src/user/push-subscription.schema.ts
+import { number as number21, object as object52, string as string41 } from "yup";
+var PushSubscriptionSchema = object52({
+  /**
+   * The user this subscription belongs to, by the `shortId` every service
+   * keys a user on, matching `UserSchema.shortId`.
+   *
+   * NOT the Better Auth account id. That id is meaningful only inside the auth
+   * service, and owning these rows by one would force the service that sends
+   * push to translate an id it has no other use for. The signed-in browser
+   * gets its own shortId straight off the JWT claim.
+   *
+   * Named `userShortId` rather than `shortId` because a stored row has a
+   * `shortId` of its OWN (see `PushSubscriptionRecord`); one field cannot be
+   * both the row's id and its owner's.
+   */
+  userShortId: string41().required().label("User Short ID"),
+  /**
+   * The push service URL the browser issued. Vendor-specific (FCM, Mozilla,
+   * Apple) and effectively unbounded in length, so it carries no length cap.
+   *
+   * This is the IDENTITY of a subscription: it is what a re-subscribing
+   * browser sends back unchanged, and what a 404/410 response identifies as
+   * dead. Upserts and deletes both key on it.
+   */
+  endpoint: string41().required().label("Push Endpoint"),
+  /**
+   * Encryption material from the browser. Web Push payloads are encrypted to
+   * these keys, so a row missing either one cannot be delivered to at all.
+   */
+  keys: object52({
+    /** Client public key, base64url. */
+    p256dh: string41().required().label("P256DH Key"),
+    /** Client auth secret, base64url. */
+    auth: string41().required().label("Auth Secret")
+  }).required().label("Push Keys"),
+  /**
+   * Epoch ms the push service says the subscription expires, when it says
+   * anything at all. Usually absent — most browsers return null — so this is
+   * informational and never the basis for pruning. A 404/410 on send is the
+   * only reliable death signal.
+   */
+  expirationTime: number21().nullable().optional().label("Expiration Time"),
+  /**
+   * The subscribing browser's user agent, kept so a user can recognise their
+   * own devices in a "where you receive notifications" list. Display only:
+   * never parsed, and never used to decide delivery.
+   */
+  userAgent: string41().optional().label("User Agent"),
+  /** Epoch ms the subscription was first registered. */
+  createdAt: number21().optional().label("Created At"),
+  /**
+   * Epoch ms this subscription was last confirmed live, refreshed when the
+   * browser re-registers it. A subscription that stops being refreshed is a
+   * device that stopped visiting, which is useful for pruning rows that never
+   * fail loudly enough to be caught by a 410.
+   */
+  lastSeenAt: number21().optional().label("Last Seen At")
+}).noUnknown().strict().label("Push Subscription Schema");
+
 // src/user/user-completeness.schema.ts
-import { object as object35 } from "yup";
-var UserCompletenessSchema = object35({
+import { object as object53 } from "yup";
+var UserCompletenessSchema = object53({
   additionalInfo: CompletenessScoreSchema(0).label("Additional Info"),
   // Optional
   certifications: CompletenessScoreSchema(0).label("Certifications"),
@@ -3027,22 +4333,29 @@ var StudentCompletenessSchema = UserCompletenessSchema.omit([
 export {
   AnswerChoiceType,
   ApplicationReceivePreference,
-  BindingKind,
-  BindingSchema,
+  BillingPeriod,
+  BillingSubscriptionSchema,
+  BillingTransactionSchema,
   CAMPAIGN_MAX_RECIPIENTS_CEILING,
-  CampaignAnchorField,
+  CONSUME_MAX_UNITS,
+  CampaignDataSourceSchema,
   CampaignEndKind,
   CampaignIntervalUnit,
   CampaignSchema,
   CampaignStatus,
+  CampaignStatusTransitions,
   CampaignTriggerKind,
   CampaignTriggerSchema,
   ChoiceQuestionSchema,
+  CityFilterSchema,
+  CitySchema,
   Common,
   CompensationType,
   CompletenessScoreSchema,
   ContactTypes,
   CoordinatorPageLinkSchema,
+  CountryFilterSchema,
+  CountrySchema,
   DISPLAY_DATE_FORMAT,
   DISPLAY_DATE_FORMAT_SHORT,
   DateStringSchema,
@@ -3056,12 +4369,29 @@ export {
   EducationSchema,
   EmployeeCount,
   EmploymentType,
+  EntitlementConsumeSchema,
+  EntitlementDenialReason,
+  EntitlementDenialSchema,
+  EntitlingSubscriptionStatuses,
   ExperienceLevel,
   FEEDBACK_MESSAGE_MAX,
+  FeatureEntitlementSchema,
+  FeatureKey,
+  FeedbackFilterSchema,
   FeedbackSchema,
   FeedbackStatus,
   FeedbackType,
+  GEO_COLLECTIONS,
+  GEO_SEARCH_MAX,
+  GRANT_MAX_LIMIT,
   GeneraDetailFields,
+  GeoKind,
+  GeoSyncPhase,
+  GeoSyncRunSchema,
+  GeoSyncStatus,
+  GeoSyncTrigger,
+  GrantType,
+  GroupFilterSchema,
   GroupManagedBy,
   GroupMembershipSchema,
   GroupMembershipStatus,
@@ -3073,31 +4403,41 @@ export {
   JOB_TAXONOMY,
   JobAlertFrequency,
   JobCategory,
+  JobFilterSchema,
   JobIndustry,
   JobSchema,
   JobSearchUrgency,
   JobStatus,
   JobSubCategory,
-  ListFilterBranch,
-  ListFilterBranchSchema,
-  ListFilterSchema,
+  LanguageFilterSchema,
   LocationSchema,
   MIN_SALARY_LOWER_BOUND,
   MIN_SALARY_UPPER_BOUND,
+  MailingListFilterSchema,
   MailingListSchema,
-  NotificationChannel,
+  MoneySchema,
+  NotificationType,
   OccurrenceStatus,
   PREFILL_MIRRORED_KEYS,
   PRIVATE_PROFILE_FIELDS,
+  PaddleEnvironment,
+  PaddlePriceIdsSchema,
+  PageFilterSchema,
   PageSchema,
   PageStatus,
   PageType,
   PaginationSchema,
+  PlanGrantSchema,
+  PlanKind,
+  PlanSchema,
+  PlanStatus,
   PostSchema,
   PostStatus,
   ProficiencyLevel,
+  PushSubscriptionSchema,
   QuestionSchema,
   QuestionType,
+  QuotaPeriod,
   ReadAndAcknowledgeQuestionSchema,
   RecruiterPageLinkSchema,
   ReferralSource,
@@ -3109,15 +4449,18 @@ export {
   SavedSearchSchema,
   SavedSearchStatus,
   SignupContextSource,
+  SkillFilterSchema,
   SkillSchema,
   SocialAccount,
   SocialAccountSchema,
+  StateFilterSchema,
+  StateSchema,
   StudentCompletenessSchema,
   StudyType,
+  SubscriptionStatus,
   SupportedAnswerChoiceTypes,
   SupportedApplicationReceivePreferences,
-  SupportedBindingKinds,
-  SupportedCampaignAnchorFields,
+  SupportedBillingPeriods,
   SupportedCampaignEndKinds,
   SupportedCampaignIntervalUnits,
   SupportedCampaignStatuses,
@@ -3127,22 +4470,37 @@ export {
   SupportedEducationLevels,
   SupportedEmployeeCounts,
   SupportedEmploymentTypes,
+  SupportedEntitlementDenialReasons,
   SupportedExperienceLevels,
+  SupportedFeatureKeys,
   SupportedFeedbackStatuses,
   SupportedFeedbackTypes,
+  SupportedGeoKinds,
+  SupportedGeoSyncPhases,
+  SupportedGeoSyncStatuses,
+  SupportedGeoSyncTriggers,
+  SupportedGrantTypes,
+  SupportedGroupManagedBy,
+  SupportedGroupMembershipStatuses,
+  SupportedGroupStatuses,
+  SupportedGroupVisibilities,
   SupportedJobAlertFrequencies,
   SupportedJobCategories,
   SupportedJobIndustries,
   SupportedJobSearchUrgencies,
   SupportedJobStatuses,
   SupportedJobSubCategories,
-  SupportedNotificationChannels,
+  SupportedNotificationTypes,
   SupportedOccurrenceStatuses,
+  SupportedPaddleEnvironments,
   SupportedPageStatuses,
   SupportedPageTypes,
+  SupportedPlanKinds,
+  SupportedPlanStatuses,
   SupportedPostStatuses,
   SupportedProficiencyLevels,
   SupportedQuestionTypes,
+  SupportedQuotaPeriods,
   SupportedReferralSources,
   SupportedReportReasons,
   SupportedResourceTypes,
@@ -3151,17 +4509,26 @@ export {
   SupportedSignupContextSources,
   SupportedSocialAccounts,
   SupportedStudyTypes,
+  SupportedSubscriptionStatuses,
+  SupportedTemplateVariableBindingKinds,
+  SupportedTransactionStatuses,
   SupportedUserProfileVisibilities,
   SupportedUserRoles,
   SupportedUserStatuses,
   SupportedWorkModes,
   TAXONOMY_LABELS,
+  TemplateVariableBindingKind,
+  TemplateVariableBindingSchema,
+  TerminalCampaignStatuses,
+  TerminalGeoSyncStatuses,
   TermsAcceptedSchema,
+  TransactionStatus,
   UserAdditionalInfoSchema,
   UserCertificationSchema,
   UserCompletenessSchema,
   UserCoordinatorProfileSchema,
   UserDetailType,
+  UserFilterSchema,
   UserGeneralDetailSchema,
   UserIdAndCreatedAtSchema,
   UserInterestSchema,
@@ -3176,12 +4543,24 @@ export {
   UserStatus,
   WorkExperienceSchema,
   WorkMode,
+  canTransitionCampaign,
   categoryOfIndustry,
   categoryOfSubCategory,
+  codeTokens,
+  conjunction,
+  currencyBound,
   dateString,
+  days,
   deriveIndustry,
+  enumFacet,
+  epoch,
   getSchemaByQuestion,
   industriesOfCategory,
   industryOfSubCategory,
-  subCategoriesOfIndustry
+  months,
+  percent,
+  qualified,
+  rejectUnknownKeys,
+  subCategoriesOfIndustry,
+  tokens
 };