founder-schema 0.1.0 → 0.2.0

package/dist/common.js

@@ -7,6 +7,8 @@
  * @module founder-schema/common
  */
 import { z } from 'zod';
+import { CITY_MAX, COUNTRY_MAX, LINK_URL_MAX, PAGE_SIZE_DEFAULT, PAGE_SIZE_MAX, STATE_MAX, } from './limits.js';
+import { VALIDATION_MESSAGE } from './validation.js';
 // ─── String helpers ──────────────────────────────────────────────────────────
 /**
  * Converts empty / whitespace-only strings to `undefined` so Zod `.optional()`
@@ -26,7 +28,7 @@ export const optionalTrimmedString = (maxLength = 100) => z.preprocess(emptyStri
 /** A Mongo ObjectId as it crosses the wire: 24 lowercase hex characters. */
 export const objectIdSchema = z
     .string()
-    .regex(/^[0-9a-f]{24}$/i, 'Invalid id')
+    .regex(/^[0-9a-f]{24}$/i, VALIDATION_MESSAGE.invalidId)
     .transform((v) => v.toLowerCase());
 // ─── URLs ────────────────────────────────────────────────────────────────────
 /**
@@ -62,18 +64,31 @@ export const objectIdSchema = z
  * (krish hit this rendering inline video, 2026-09-21, and handles it by parsing
  * and comparing the hostname exactly.)
  */
-export const httpUrlSchema = z.url({
+export const safeUrlSchema = z.url({
     protocol: /^https?$/,
     hostname: z.regexes.domain,
+    error: VALIDATION_MESSAGE.urlInvalid,
 });
+/**
+ * A URL a member TYPES: `safeUrlSchema` plus the `LINK_URL_MAX` ceiling, so
+ * every member URL carries the same cap and no consumer has to remember it.
+ *
+ * Two schemas, not one, because the cap is about what a person types and is
+ * wrong for what the server reads from elsewhere. Until 0.2.0 there was only
+ * this one, and it capped a link preview's CDN image URL too: one 314-character
+ * `imageUrl` would have failed a whole feed page.
+ */
+export const httpUrlSchema = safeUrlSchema.max(LINK_URL_MAX);
 // ─── Username ────────────────────────────────────────────────────────────────
 /**
- * Public handle a founder picks and can change later.
+ * Public handle. Derived by the server at onboarding, changeable later.
  *
  * Rules are deliberately narrow because the handle appears in URLs and in
  * mentions: lowercase letters, digits, underscore and a single dot, 3 to 30
- * characters, must start with a letter. Reserved words are refused by the
- * backend, not here, so the list can change without a schema publish.
+ * characters, must start with a letter.
+ *
+ * This is the FORMAT, and it is what every read shape uses. A handle being
+ * CHOSEN must also not be reserved: that is `chosenUsernameSchema`.
  */
 export const USERNAME_MIN = 3;
 export const USERNAME_MAX = 30;
@@ -81,9 +96,58 @@ export const usernameSchema = z
     .string()
     .trim()
     .toLowerCase()
-    .min(USERNAME_MIN, `Username must be at least ${USERNAME_MIN} characters`)
-    .max(USERNAME_MAX, `Username must be at most ${USERNAME_MAX} characters`)
-    .regex(/^[a-z][a-z0-9_]*(\.[a-z0-9_]+)?$/, 'Use letters, numbers and underscore. One dot allowed, and it cannot start with a dot.');
+    // Plain bounds: the client words them from the issue's own minimum/maximum.
+    .min(USERNAME_MIN)
+    .max(USERNAME_MAX)
+    .regex(/^[a-z][a-z0-9_]*(\.[a-z0-9_]+)?$/, VALIDATION_MESSAGE.usernameInvalid);
+/**
+ * Handles this product keeps for itself: route names a handle would shadow,
+ * and words that would let a member pass as staff.
+ *
+ * ⚠ HERE, IN THE CONTRACT, since 0.2.0. It used to live in the backend so it
+ * could grow without a publish, and nothing ever read it: the server derived
+ * handles without checking it, so a member called "Support" was handed
+ * `support`. One list, read by the server when it derives a handle and by any
+ * form that lets a member choose one, is worth a publish per addition.
+ *
+ * Matched exactly, after lowercasing.
+ */
+export const RESERVED_USERNAMES = [
+    'admin',
+    'about',
+    'api',
+    'chat',
+    'discover',
+    'feed',
+    'founder',
+    'foundercircle',
+    'help',
+    'home',
+    'me',
+    'meetup',
+    'moderator',
+    'onboarding',
+    'settings',
+    'staff',
+    'superadmin',
+    'support',
+    'system',
+    'team',
+];
+const RESERVED = new Set(RESERVED_USERNAMES);
+export function isReservedUsername(handle) {
+    return RESERVED.has(handle.trim().toLowerCase());
+}
+/**
+ * A handle a member is CHOOSING: the format, and not reserved.
+ *
+ * ⚠ Not used on read shapes, deliberately. A handle stored before the reserved
+ * check existed must still READ, or one member's old handle would fail every
+ * page that shows their name.
+ */
+export const chosenUsernameSchema = usernameSchema.refine((u) => !isReservedUsername(u), {
+    error: VALIDATION_MESSAGE.usernameReserved,
+});
 // ─── Founder-facing enums ────────────────────────────────────────────────────
 /**
  * Stage of the founder's current venture.
@@ -214,20 +278,48 @@ export const genderSchema = z.enum(GENDER_VALUES);
 export const phoneSchema = z
     .string()
     .trim()
-    .regex(/^[6-9]\d{9}$/, 'Enter a 10 digit mobile number');
+    .regex(/^[6-9]\d{9}$/, VALIDATION_MESSAGE.phoneInvalid);
 // ─── Location ────────────────────────────────────────────────────────────────
 /**
- * Where the founder is based. City and country are what Discover filters on;
- * coordinates are optional and only present when the member granted location.
+ * Where the founder is based. City and country are what Discover filters on.
+ *
+ * ONE SHAPE for the profile, the Me tab's patch, onboarding's finish and the
+ * location suggestion. It was written out three times until 0.2.0, the same
+ * kind of copy that let the profile model lose Instagram.
  *
- * Note for later: this is a DECLARED location, not a GPS reading. Jansathi's
- * rule applies here too — never write a declared location from a GPS capture.
+ * ⚠ `country` is REQUIRED and has NO default. A default here (it used to be
+ * `'India'`) is destructive on every write path: a founder in Berlin who
+ * corrects only their city would be moved to India by a value they never saw.
+ * A body that carries a location carries the whole location. Every stored
+ * location has a country, because the model requires one, so the read side
+ * loses nothing.
+ *
+ * This is a DECLARED location, not a GPS reading. Jansathi's rule applies
+ * here too: never write a declared location from a GPS capture.
  */
 export const locationSchema = z.object({
-    city: z.string().trim().min(1).max(80),
-    state: optionalTrimmedString(80),
-    country: z.string().trim().min(1).max(80).default('India'),
+    city: z.string().trim().min(1).max(CITY_MAX),
+    state: optionalTrimmedString(STATE_MAX),
+    country: z.string().trim().min(1).max(COUNTRY_MAX),
+});
+/**
+ * `GET /api/v1/location/areas/reverse?lat=&lng=`: plain decimal degrees.
+ *
+ * A QUERY, so coercion is right here: everything in a URL is a string. An
+ * emptied parameter is "missing", never 0, because 0,0 is a real place in the
+ * Gulf of Guinea and would be looked up rather than refused.
+ */
+export const coordinatesQuerySchema = z.object({
+    lat: z.preprocess(emptyStringToUndefined, z.coerce.number().min(-90).max(90)),
+    lng: z.preprocess(emptyStringToUndefined, z.coerce.number().min(-180).max(180)),
 });
+/**
+ * The city these coordinates look like, for the member to CONFIRM, or `null`
+ * when the lookup could not place them confidently (or they are outside India,
+ * whose area data is all there is). A suggestion, never a write: only what the
+ * member then submits becomes their location.
+ */
+export const suggestedLocationSchema = locationSchema.nullable();
 // ─── Pagination ──────────────────────────────────────────────────────────────
 /**
  * Cursor pagination query. Feed and Discover both use it.
@@ -242,7 +334,7 @@ export const paginationQuerySchema = z.object({
      * string, and `z.coerce.number()` turns that into 0, which then fails
      * `.min(1)`: the member sees a 400 for a page they never asked to size.
      */
-    limit: z.preprocess(emptyStringToUndefined, z.coerce.number().int().min(1).max(50).default(20)),
+    limit: z.preprocess(emptyStringToUndefined, z.coerce.number().int().min(1).max(PAGE_SIZE_MAX).default(PAGE_SIZE_DEFAULT)),
     cursor: z.string().trim().min(1).optional(),
 });
 //# sourceMappingURL=common.js.map

package/dist/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAW,EAAE;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACvE,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,EAAE,CACvD,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEpF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,KAAK,CAAC,iBAAiB,EAAE,YAAY,CAAC;KACtC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAErC,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC;IACjC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM;CAC3B,CAAC,CAAC;AAEH,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAE/B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,WAAW,EAAE;KACb,GAAG,CAAC,YAAY,EAAE,6BAA6B,YAAY,aAAa,CAAC;KACzE,GAAG,CAAC,YAAY,EAAE,4BAA4B,YAAY,aAAa,CAAC;KACxE,KAAK,CACJ,kCAAkC,EAClC,uFAAuF,CACxF,CAAC;AAGJ,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,MAAM;IACN,YAAY;IACZ,KAAK;IACL,UAAU;IACV,MAAM;IACN,eAAe;IACf,YAAY;IACZ,QAAQ;CACA,CAAC;AACX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAG/D;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU;IACV,OAAO;IACP,UAAU;IACV,UAAU;IACV,SAAS;IACT,KAAK;IACL,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,eAAe;IACf,aAAa;IACb,OAAO;IACP,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,OAAO;IACP,OAAO;CACC,CAAC;AACX,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAGtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,aAAa;IACb,SAAS;IACT,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,OAAO;IACP,WAAW;IACX,YAAY;IACZ,SAAS;IACT,OAAO;IACP,WAAW;IACX,cAAc;IACd,UAAU;IACV,aAAa;IACb,WAAW;CACH,CAAC;AACX,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAGhD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,QAAQ;IACR,cAAc;IACd,YAAY;IACZ,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IACjB,eAAe;IACf,eAAe;CACP,CAAC;AACX,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAG9C,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAU,CAAC;AACvF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAGlD,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;AAE3D,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACtC,KAAK,EAAE,qBAAqB,CAAC,EAAE,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;CAC3D,CAAC,CAAC;AAGH,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C;;;;;OAKG;IACH,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/F,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — Shared helpers and core enums\n *\n * The stable building blocks reused across every Founder Circle schema.\n * Anything that both the backend and a client need to agree on lives here.\n *\n * @module founder-schema/common\n */\n\nimport { z } from 'zod';\n\n// ─── String helpers ──────────────────────────────────────────────────────────\n\n/**\n * Converts empty / whitespace-only strings to `undefined` so Zod `.optional()`\n * treats them as \"not provided\".\n *\n * Why this exists: an HTML form submits `\"\"` for a cleared field, and without\n * this an optional field would be stored as an empty string rather than left\n * alone. Jansathi shipped that bug in dating onboarding.\n */\nexport const emptyStringToUndefined = (value: unknown): unknown => {\n  if (typeof value === 'string' && value.trim() === '') return undefined;\n  return value;\n};\n\n/** Optional trimmed string. Empty strings are coerced to `undefined`. */\nexport const optionalTrimmedString = (maxLength = 100) =>\n  z.preprocess(emptyStringToUndefined, z.string().trim().max(maxLength).optional());\n\n/** A Mongo ObjectId as it crosses the wire: 24 lowercase hex characters. */\nexport const objectIdSchema = z\n  .string()\n  .regex(/^[0-9a-f]{24}$/i, 'Invalid id')\n  .transform((v) => v.toLowerCase());\n\n// ─── URLs ────────────────────────────────────────────────────────────────────\n\n/**\n * A URL safe to store and, after the consumer's own check, to render.\n *\n * Use this for EVERY member-supplied URL. Never bare `z.url()`: it accepts any\n * scheme the URL parser accepts, so `javascript:alert(document.cookie)`,\n * `data:text/html,<script>...`, `vbscript:` and `file:///etc/passwd` all pass.\n * Each of those is stored XSS the moment a client renders it as an `href`, and\n * `data:` is the same in an `<img src>`.\n *\n * `hostname` is restricted too, not only the scheme. A bare host like\n * `localhost` or a literal IP is refused, which closes server-side request\n * forgery: this product runs on EC2 with an instance role, so a member-supplied\n * `http://169.254.169.254/latest/meta-data/` that anything server-side ever\n * fetches is a credential read.\n *\n * Validating here is necessary and not sufficient. A consumer still treats a\n * stored URL as untrusted at render time, because rows written before this\n * existed were never checked.\n *\n * ⚠️ IF THIS EVER GROWS A HOST ALLOWLIST, compare the PARSED hostname for\n * exact equality. Never `includes`, never `endsWith`, never a regex over the\n * whole URL. Each of these is a real bypass of a naive \"is it YouTube\" check,\n * and all three read as obviously fine:\n *\n *   https://evil.example/?next=youtube.com/watch  contains the string\n *   youtube.com.evil.example                      starts with it\n *   youtu.be.evil.example                         a suffix check passes it\n *\n * The same mistake in the opposite direction to the `javascript:` hole: there\n * the scheme was too permissive, here the host check only LOOKS strict.\n * (krish hit this rendering inline video, 2026-09-21, and handles it by parsing\n * and comparing the hostname exactly.)\n */\nexport const httpUrlSchema = z.url({\n  protocol: /^https?$/,\n  hostname: z.regexes.domain,\n});\n\n// ─── Username ────────────────────────────────────────────────────────────────\n\n/**\n * Public handle a founder picks and can change later.\n *\n * Rules are deliberately narrow because the handle appears in URLs and in\n * mentions: lowercase letters, digits, underscore and a single dot, 3 to 30\n * characters, must start with a letter. Reserved words are refused by the\n * backend, not here, so the list can change without a schema publish.\n */\nexport const USERNAME_MIN = 3;\nexport const USERNAME_MAX = 30;\n\nexport const usernameSchema = z\n  .string()\n  .trim()\n  .toLowerCase()\n  .min(USERNAME_MIN, `Username must be at least ${USERNAME_MIN} characters`)\n  .max(USERNAME_MAX, `Username must be at most ${USERNAME_MAX} characters`)\n  .regex(\n    /^[a-z][a-z0-9_]*(\\.[a-z0-9_]+)?$/,\n    'Use letters, numbers and underscore. One dot allowed, and it cannot start with a dot.',\n  );\nexport type Username = z.infer<typeof usernameSchema>;\n\n// ─── Founder-facing enums ────────────────────────────────────────────────────\n\n/**\n * Stage of the founder's current venture.\n *\n * Ordered from earliest to latest so a range filter can compare by index. Add\n * new stages at the END or the stored ordinal of existing rows shifts.\n */\nexport const STARTUP_STAGE_VALUES = [\n  'idea',\n  'validation',\n  'mvp',\n  'pre_seed',\n  'seed',\n  'series_a_plus',\n  'profitable',\n  'exited',\n] as const;\nexport const startupStageSchema = z.enum(STARTUP_STAGE_VALUES);\nexport type StartupStage = z.infer<typeof startupStageSchema>;\n\n/**\n * Industry the venture operates in. Kept as a closed list so Discover filters\n * are a single indexed equality match rather than a text search.\n */\nexport const INDUSTRY_VALUES = [\n  'agritech',\n  'ai_ml',\n  'b2b_saas',\n  'consumer',\n  'climate',\n  'd2c',\n  'deeptech',\n  'edtech',\n  'fintech',\n  'gaming',\n  'healthtech',\n  'logistics',\n  'manufacturing',\n  'marketplace',\n  'media',\n  'mobility',\n  'proptech',\n  'robotics',\n  'services',\n  'space',\n  'other',\n] as const;\nexport const industrySchema = z.enum(INDUSTRY_VALUES);\nexport type Industry = z.infer<typeof industrySchema>;\n\n/**\n * What the founder brings. Free-text skills were considered and rejected: two\n * people typing \"growth\" and \"Growth Marketing\" would never match each other in\n * a filter, and the Discover tab is the whole point of the product.\n */\nexport const SKILL_VALUES = [\n  'engineering',\n  'product',\n  'design',\n  'data',\n  'growth',\n  'sales',\n  'marketing',\n  'operations',\n  'finance',\n  'legal',\n  'hr_people',\n  'supply_chain',\n  'research',\n  'fundraising',\n  'community',\n] as const;\nexport const skillSchema = z.enum(SKILL_VALUES);\nexport type Skill = z.infer<typeof skillSchema>;\n\n/**\n * What the member is here for. ONE list, replacing three.\n *\n * This was `lookingFor` with six values. The design draws eight \"Goals &\n * Passion\" tiles and four more on the business step; all three were the same\n * idea at three grains, and shipping them together would have meant nobody\n * could say which one Discover filters on - the answer settled by whichever\n * query got written first. Merged on hary's ruling, 2026-09-21, while there\n * were still no rows in any database.\n *\n * ⚠️ Stored per member and used as a Mongoose enum. Append only; removing a\n * value orphans documents already saved with it.\n *\n * ⚠️ `start_company` READS ODDLY next to its neighbours and is correct. It was\n * queried on the grounds that it restates `venture.stage: 'idea'`; it does not,\n * and the reason is worth keeping so nobody re-opens it. Inferring it from the\n * venture works only for a member who ALREADY HAS a venture row, and somebody\n * who wants to start a company is precisely the member with no venture at all,\n * so there is nothing to infer from. It also cannot express a founder with a\n * running company who wants to start another. Every other value is an ask of\n * other people and this one is an ask of the product, which is the whole of the\n * oddness. (hary, 2026-09-21.)\n */\nexport const GOAL_VALUES = [\n  'find_cofounder',\n  'find_investors',\n  'find_customers',\n  'hiring',\n  'partnerships',\n  'mentorship',\n  'grow_network',\n  'business_ideas',\n  'market_insights',\n  'learn_startup',\n  'start_company',\n] as const;\nexport const goalSchema = z.enum(GOAL_VALUES);\nexport type Goal = z.infer<typeof goalSchema>;\n\n// ─── Gender ──────────────────────────────────────────────────────────────────\n\n/**\n * Demographic only. Nothing here computes anything from it, unlike the sibling\n * gym product where gender feeds body-metric maths.\n *\n * Takes the family's three values and ADDS one rather than renaming any: a\n * network for founders should let somebody decline the question without having\n * to describe themselves as \"other\".\n */\nexport const GENDER_VALUES = ['male', 'female', 'other', 'prefer_not_to_say'] as const;\nexport const genderSchema = z.enum(GENDER_VALUES);\nexport type Gender = z.infer<typeof genderSchema>;\n\n// ─── Phone ───────────────────────────────────────────────────────────────────\n\n/**\n * Indian mobile number: ten raw digits, no country code, matching the standard\n * used across this family. Display adds the `+91`.\n *\n * ⚠️ WHERE IT IS STORED IS NOT A SCHEMA QUESTION, and it has been ruled: the\n * phone lives on the account mirror, never as a second copy on the profile.\n * Two stored copies drift the first time somebody edits one, and the profile's\n * would be the copy nobody keeps in sync.\n */\nexport const phoneSchema = z\n  .string()\n  .trim()\n  .regex(/^[6-9]\\d{9}$/, 'Enter a 10 digit mobile number');\n\n// ─── Location ────────────────────────────────────────────────────────────────\n\n/**\n * Where the founder is based. City and country are what Discover filters on;\n * coordinates are optional and only present when the member granted location.\n *\n * Note for later: this is a DECLARED location, not a GPS reading. Jansathi's\n * rule applies here too — never write a declared location from a GPS capture.\n */\nexport const locationSchema = z.object({\n  city: z.string().trim().min(1).max(80),\n  state: optionalTrimmedString(80),\n  country: z.string().trim().min(1).max(80).default('India'),\n});\nexport type FounderLocation = z.infer<typeof locationSchema>;\n\n// ─── Pagination ──────────────────────────────────────────────────────────────\n\n/**\n * Cursor pagination query. Feed and Discover both use it.\n *\n * Cursor, not page number: the community feed changes under the reader, and an\n * offset would repeat or skip posts as new ones land.\n */\nexport const paginationQuerySchema = z.object({\n  /**\n   * `?limit=` with nothing after it is treated as \"not provided\", not as a\n   * validation failure. A client that clears the control sends the empty\n   * string, and `z.coerce.number()` turns that into 0, which then fails\n   * `.min(1)`: the member sees a 400 for a page they never asked to size.\n   */\n  limit: z.preprocess(emptyStringToUndefined, z.coerce.number().int().min(1).max(50).default(20)),\n  cursor: z.string().trim().min(1).optional(),\n});\nexport type PaginationQuery = z.infer<typeof paginationQuerySchema>;\n"]}
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAW,EAAE;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACvE,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,EAAE,CACvD,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEpF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,KAAK,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,SAAS,CAAC;KACtD,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAIrC,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC;IACjC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM;IAC1B,KAAK,EAAE,kBAAkB,CAAC,UAAU;CACrC,CAAC,CAAC;AAGH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAG7D,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAE/B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,WAAW,EAAE;IACd,4EAA4E;KAC3E,GAAG,CAAC,YAAY,CAAC;KACjB,GAAG,CAAC,YAAY,CAAC;KACjB,KAAK,CAAC,kCAAkC,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;AAGjF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,OAAO;IACP,OAAO;IACP,KAAK;IACL,MAAM;IACN,UAAU;IACV,MAAM;IACN,SAAS;IACT,eAAe;IACf,MAAM;IACN,MAAM;IACN,IAAI;IACJ,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,UAAU;IACV,OAAO;IACP,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,MAAM;CACE,CAAC;AAEX,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,kBAAkB,CAAC,CAAC;AAErD,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE;IACvF,KAAK,EAAE,kBAAkB,CAAC,gBAAgB;CAC3C,CAAC,CAAC;AAEH,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,MAAM;IACN,YAAY;IACZ,KAAK;IACL,UAAU;IACV,MAAM;IACN,eAAe;IACf,YAAY;IACZ,QAAQ;CACA,CAAC;AACX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAG/D;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU;IACV,OAAO;IACP,UAAU;IACV,UAAU;IACV,SAAS;IACT,KAAK;IACL,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,eAAe;IACf,aAAa;IACb,OAAO;IACP,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,OAAO;IACP,OAAO;CACC,CAAC;AACX,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAGtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,aAAa;IACb,SAAS;IACT,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,OAAO;IACP,WAAW;IACX,YAAY;IACZ,SAAS;IACT,OAAO;IACP,WAAW;IACX,cAAc;IACd,UAAU;IACV,aAAa;IACb,WAAW;CACH,CAAC;AACX,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAGhD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,QAAQ;IACR,cAAc;IACd,YAAY;IACZ,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IACjB,eAAe;IACf,eAAe;CACP,CAAC;AACX,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAG9C,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAU,CAAC;AACvF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAGlD,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,cAAc,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;AAG1D,gFAAgF;AAEhF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC5C,KAAK,EAAE,qBAAqB,CAAC,SAAS,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;CACnD,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;CAChF,CAAC,CAAC;AAIH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC;AAGjE,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C;;;;;OAKG;IACH,KAAK,EAAE,CAAC,CAAC,UAAU,CACjB,sBAAsB,EACtB,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAC7E;IACD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — Shared helpers and core enums\n *\n * The stable building blocks reused across every Founder Circle schema.\n * Anything that both the backend and a client need to agree on lives here.\n *\n * @module founder-schema/common\n */\n\nimport { z } from 'zod';\nimport {\n  CITY_MAX,\n  COUNTRY_MAX,\n  LINK_URL_MAX,\n  PAGE_SIZE_DEFAULT,\n  PAGE_SIZE_MAX,\n  STATE_MAX,\n} from './limits.js';\nimport { VALIDATION_MESSAGE } from './validation.js';\n\n// ─── String helpers ──────────────────────────────────────────────────────────\n\n/**\n * Converts empty / whitespace-only strings to `undefined` so Zod `.optional()`\n * treats them as \"not provided\".\n *\n * Why this exists: an HTML form submits `\"\"` for a cleared field, and without\n * this an optional field would be stored as an empty string rather than left\n * alone. Jansathi shipped that bug in dating onboarding.\n */\nexport const emptyStringToUndefined = (value: unknown): unknown => {\n  if (typeof value === 'string' && value.trim() === '') return undefined;\n  return value;\n};\n\n/** Optional trimmed string. Empty strings are coerced to `undefined`. */\nexport const optionalTrimmedString = (maxLength = 100) =>\n  z.preprocess(emptyStringToUndefined, z.string().trim().max(maxLength).optional());\n\n/** A Mongo ObjectId as it crosses the wire: 24 lowercase hex characters. */\nexport const objectIdSchema = z\n  .string()\n  .regex(/^[0-9a-f]{24}$/i, VALIDATION_MESSAGE.invalidId)\n  .transform((v) => v.toLowerCase());\n/** Named for what it is on the wire, so it never collides with Mongoose's `ObjectId`. */\nexport type ObjectIdString = z.infer<typeof objectIdSchema>;\n\n// ─── URLs ────────────────────────────────────────────────────────────────────\n\n/**\n * A URL safe to store and, after the consumer's own check, to render.\n *\n * Use this for EVERY member-supplied URL. Never bare `z.url()`: it accepts any\n * scheme the URL parser accepts, so `javascript:alert(document.cookie)`,\n * `data:text/html,<script>...`, `vbscript:` and `file:///etc/passwd` all pass.\n * Each of those is stored XSS the moment a client renders it as an `href`, and\n * `data:` is the same in an `<img src>`.\n *\n * `hostname` is restricted too, not only the scheme. A bare host like\n * `localhost` or a literal IP is refused, which closes server-side request\n * forgery: this product runs on EC2 with an instance role, so a member-supplied\n * `http://169.254.169.254/latest/meta-data/` that anything server-side ever\n * fetches is a credential read.\n *\n * Validating here is necessary and not sufficient. A consumer still treats a\n * stored URL as untrusted at render time, because rows written before this\n * existed were never checked.\n *\n * ⚠️ IF THIS EVER GROWS A HOST ALLOWLIST, compare the PARSED hostname for\n * exact equality. Never `includes`, never `endsWith`, never a regex over the\n * whole URL. Each of these is a real bypass of a naive \"is it YouTube\" check,\n * and all three read as obviously fine:\n *\n *   https://evil.example/?next=youtube.com/watch  contains the string\n *   youtube.com.evil.example                      starts with it\n *   youtu.be.evil.example                         a suffix check passes it\n *\n * The same mistake in the opposite direction to the `javascript:` hole: there\n * the scheme was too permissive, here the host check only LOOKS strict.\n * (krish hit this rendering inline video, 2026-09-21, and handles it by parsing\n * and comparing the hostname exactly.)\n */\nexport const safeUrlSchema = z.url({\n  protocol: /^https?$/,\n  hostname: z.regexes.domain,\n  error: VALIDATION_MESSAGE.urlInvalid,\n});\nexport type SafeUrl = z.infer<typeof safeUrlSchema>;\n\n/**\n * A URL a member TYPES: `safeUrlSchema` plus the `LINK_URL_MAX` ceiling, so\n * every member URL carries the same cap and no consumer has to remember it.\n *\n * Two schemas, not one, because the cap is about what a person types and is\n * wrong for what the server reads from elsewhere. Until 0.2.0 there was only\n * this one, and it capped a link preview's CDN image URL too: one 314-character\n * `imageUrl` would have failed a whole feed page.\n */\nexport const httpUrlSchema = safeUrlSchema.max(LINK_URL_MAX);\nexport type HttpUrl = z.infer<typeof httpUrlSchema>;\n\n// ─── Username ────────────────────────────────────────────────────────────────\n\n/**\n * Public handle. Derived by the server at onboarding, changeable later.\n *\n * Rules are deliberately narrow because the handle appears in URLs and in\n * mentions: lowercase letters, digits, underscore and a single dot, 3 to 30\n * characters, must start with a letter.\n *\n * This is the FORMAT, and it is what every read shape uses. A handle being\n * CHOSEN must also not be reserved: that is `chosenUsernameSchema`.\n */\nexport const USERNAME_MIN = 3;\nexport const USERNAME_MAX = 30;\n\nexport const usernameSchema = z\n  .string()\n  .trim()\n  .toLowerCase()\n  // Plain bounds: the client words them from the issue's own minimum/maximum.\n  .min(USERNAME_MIN)\n  .max(USERNAME_MAX)\n  .regex(/^[a-z][a-z0-9_]*(\\.[a-z0-9_]+)?$/, VALIDATION_MESSAGE.usernameInvalid);\nexport type Username = z.infer<typeof usernameSchema>;\n\n/**\n * Handles this product keeps for itself: route names a handle would shadow,\n * and words that would let a member pass as staff.\n *\n * ⚠ HERE, IN THE CONTRACT, since 0.2.0. It used to live in the backend so it\n * could grow without a publish, and nothing ever read it: the server derived\n * handles without checking it, so a member called \"Support\" was handed\n * `support`. One list, read by the server when it derives a handle and by any\n * form that lets a member choose one, is worth a publish per addition.\n *\n * Matched exactly, after lowercasing.\n */\nexport const RESERVED_USERNAMES = [\n  'admin',\n  'about',\n  'api',\n  'chat',\n  'discover',\n  'feed',\n  'founder',\n  'foundercircle',\n  'help',\n  'home',\n  'me',\n  'meetup',\n  'moderator',\n  'onboarding',\n  'settings',\n  'staff',\n  'superadmin',\n  'support',\n  'system',\n  'team',\n] as const;\n\nconst RESERVED = new Set<string>(RESERVED_USERNAMES);\n\nexport function isReservedUsername(handle: string): boolean {\n  return RESERVED.has(handle.trim().toLowerCase());\n}\n\n/**\n * A handle a member is CHOOSING: the format, and not reserved.\n *\n * ⚠ Not used on read shapes, deliberately. A handle stored before the reserved\n * check existed must still READ, or one member's old handle would fail every\n * page that shows their name.\n */\nexport const chosenUsernameSchema = usernameSchema.refine((u) => !isReservedUsername(u), {\n  error: VALIDATION_MESSAGE.usernameReserved,\n});\n\n// ─── Founder-facing enums ────────────────────────────────────────────────────\n\n/**\n * Stage of the founder's current venture.\n *\n * Ordered from earliest to latest so a range filter can compare by index. Add\n * new stages at the END or the stored ordinal of existing rows shifts.\n */\nexport const STARTUP_STAGE_VALUES = [\n  'idea',\n  'validation',\n  'mvp',\n  'pre_seed',\n  'seed',\n  'series_a_plus',\n  'profitable',\n  'exited',\n] as const;\nexport const startupStageSchema = z.enum(STARTUP_STAGE_VALUES);\nexport type StartupStage = z.infer<typeof startupStageSchema>;\n\n/**\n * Industry the venture operates in. Kept as a closed list so Discover filters\n * are a single indexed equality match rather than a text search.\n */\nexport const INDUSTRY_VALUES = [\n  'agritech',\n  'ai_ml',\n  'b2b_saas',\n  'consumer',\n  'climate',\n  'd2c',\n  'deeptech',\n  'edtech',\n  'fintech',\n  'gaming',\n  'healthtech',\n  'logistics',\n  'manufacturing',\n  'marketplace',\n  'media',\n  'mobility',\n  'proptech',\n  'robotics',\n  'services',\n  'space',\n  'other',\n] as const;\nexport const industrySchema = z.enum(INDUSTRY_VALUES);\nexport type Industry = z.infer<typeof industrySchema>;\n\n/**\n * What the founder brings. Free-text skills were considered and rejected: two\n * people typing \"growth\" and \"Growth Marketing\" would never match each other in\n * a filter, and the Discover tab is the whole point of the product.\n */\nexport const SKILL_VALUES = [\n  'engineering',\n  'product',\n  'design',\n  'data',\n  'growth',\n  'sales',\n  'marketing',\n  'operations',\n  'finance',\n  'legal',\n  'hr_people',\n  'supply_chain',\n  'research',\n  'fundraising',\n  'community',\n] as const;\nexport const skillSchema = z.enum(SKILL_VALUES);\nexport type Skill = z.infer<typeof skillSchema>;\n\n/**\n * What the member is here for. ONE list, replacing three.\n *\n * This was `lookingFor` with six values. The design draws eight \"Goals &\n * Passion\" tiles and four more on the business step; all three were the same\n * idea at three grains, and shipping them together would have meant nobody\n * could say which one Discover filters on - the answer settled by whichever\n * query got written first. Merged on hary's ruling, 2026-09-21, while there\n * were still no rows in any database.\n *\n * ⚠️ Stored per member and used as a Mongoose enum. Append only; removing a\n * value orphans documents already saved with it.\n *\n * ⚠️ `start_company` READS ODDLY next to its neighbours and is correct. It was\n * queried on the grounds that it restates `venture.stage: 'idea'`; it does not,\n * and the reason is worth keeping so nobody re-opens it. Inferring it from the\n * venture works only for a member who ALREADY HAS a venture row, and somebody\n * who wants to start a company is precisely the member with no venture at all,\n * so there is nothing to infer from. It also cannot express a founder with a\n * running company who wants to start another. Every other value is an ask of\n * other people and this one is an ask of the product, which is the whole of the\n * oddness. (hary, 2026-09-21.)\n */\nexport const GOAL_VALUES = [\n  'find_cofounder',\n  'find_investors',\n  'find_customers',\n  'hiring',\n  'partnerships',\n  'mentorship',\n  'grow_network',\n  'business_ideas',\n  'market_insights',\n  'learn_startup',\n  'start_company',\n] as const;\nexport const goalSchema = z.enum(GOAL_VALUES);\nexport type Goal = z.infer<typeof goalSchema>;\n\n// ─── Gender ──────────────────────────────────────────────────────────────────\n\n/**\n * Demographic only. Nothing here computes anything from it, unlike the sibling\n * gym product where gender feeds body-metric maths.\n *\n * Takes the family's three values and ADDS one rather than renaming any: a\n * network for founders should let somebody decline the question without having\n * to describe themselves as \"other\".\n */\nexport const GENDER_VALUES = ['male', 'female', 'other', 'prefer_not_to_say'] as const;\nexport const genderSchema = z.enum(GENDER_VALUES);\nexport type Gender = z.infer<typeof genderSchema>;\n\n// ─── Phone ───────────────────────────────────────────────────────────────────\n\n/**\n * Indian mobile number: ten raw digits, no country code, matching the standard\n * used across this family. Display adds the `+91`.\n *\n * ⚠️ WHERE IT IS STORED IS NOT A SCHEMA QUESTION, and it has been ruled: the\n * phone lives on the account mirror, never as a second copy on the profile.\n * Two stored copies drift the first time somebody edits one, and the profile's\n * would be the copy nobody keeps in sync.\n */\nexport const phoneSchema = z\n  .string()\n  .trim()\n  .regex(/^[6-9]\\d{9}$/, VALIDATION_MESSAGE.phoneInvalid);\nexport type Phone = z.infer<typeof phoneSchema>;\n\n// ─── Location ────────────────────────────────────────────────────────────────\n\n/**\n * Where the founder is based. City and country are what Discover filters on.\n *\n * ONE SHAPE for the profile, the Me tab's patch, onboarding's finish and the\n * location suggestion. It was written out three times until 0.2.0, the same\n * kind of copy that let the profile model lose Instagram.\n *\n * ⚠ `country` is REQUIRED and has NO default. A default here (it used to be\n * `'India'`) is destructive on every write path: a founder in Berlin who\n * corrects only their city would be moved to India by a value they never saw.\n * A body that carries a location carries the whole location. Every stored\n * location has a country, because the model requires one, so the read side\n * loses nothing.\n *\n * This is a DECLARED location, not a GPS reading. Jansathi's rule applies\n * here too: never write a declared location from a GPS capture.\n */\nexport const locationSchema = z.object({\n  city: z.string().trim().min(1).max(CITY_MAX),\n  state: optionalTrimmedString(STATE_MAX),\n  country: z.string().trim().min(1).max(COUNTRY_MAX),\n});\nexport type FounderLocation = z.infer<typeof locationSchema>;\n\n/**\n * `GET /api/v1/location/areas/reverse?lat=&lng=`: plain decimal degrees.\n *\n * A QUERY, so coercion is right here: everything in a URL is a string. An\n * emptied parameter is \"missing\", never 0, because 0,0 is a real place in the\n * Gulf of Guinea and would be looked up rather than refused.\n */\nexport const coordinatesQuerySchema = z.object({\n  lat: z.preprocess(emptyStringToUndefined, z.coerce.number().min(-90).max(90)),\n  lng: z.preprocess(emptyStringToUndefined, z.coerce.number().min(-180).max(180)),\n});\nexport type CoordinatesQuery = z.infer<typeof coordinatesQuerySchema>;\nexport type CoordinatesQueryInput = z.input<typeof coordinatesQuerySchema>;\n\n/**\n * The city these coordinates look like, for the member to CONFIRM, or `null`\n * when the lookup could not place them confidently (or they are outside India,\n * whose area data is all there is). A suggestion, never a write: only what the\n * member then submits becomes their location.\n */\nexport const suggestedLocationSchema = locationSchema.nullable();\nexport type SuggestedLocation = z.infer<typeof suggestedLocationSchema>;\n\n// ─── Pagination ──────────────────────────────────────────────────────────────\n\n/**\n * Cursor pagination query. Feed and Discover both use it.\n *\n * Cursor, not page number: the community feed changes under the reader, and an\n * offset would repeat or skip posts as new ones land.\n */\nexport const paginationQuerySchema = z.object({\n  /**\n   * `?limit=` with nothing after it is treated as \"not provided\", not as a\n   * validation failure. A client that clears the control sends the empty\n   * string, and `z.coerce.number()` turns that into 0, which then fails\n   * `.min(1)`: the member sees a 400 for a page they never asked to size.\n   */\n  limit: z.preprocess(\n    emptyStringToUndefined,\n    z.coerce.number().int().min(1).max(PAGE_SIZE_MAX).default(PAGE_SIZE_DEFAULT),\n  ),\n  cursor: z.string().trim().min(1).optional(),\n});\nexport type PaginationQuery = z.infer<typeof paginationQuerySchema>;\n/** What a client may put IN the URL: every field optional, numbers as strings. */\nexport type PaginationQueryInput = z.input<typeof paginationQuerySchema>;\n"]}

package/dist/discover.d.ts

@@ -76,10 +76,105 @@ export declare const discoverQuerySchema: z.ZodObject<{
     country: z.ZodPreprocess<z.ZodOptional<z.ZodString>, unknown>;
 }, z.core.$strip>;
 export type DiscoverQuery = z.infer<typeof discoverQuerySchema>;
+export type DiscoverQueryInput = z.input<typeof discoverQuerySchema>;
+/** A page of founder cards, most recently updated first. */
+export declare const discoverPageSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        location: z.ZodOptional<z.ZodObject<{
+            city: z.ZodString;
+            state: z.ZodPreprocess<z.ZodOptional<z.ZodString>, unknown>;
+            country: z.ZodString;
+        }, z.core.$strip>>;
+        username: z.ZodString;
+        displayName: z.ZodString;
+        avatarUrl: z.ZodOptional<z.ZodURL>;
+        id: z.ZodString;
+        headline: z.ZodPreprocess<z.ZodOptional<z.ZodString>, unknown>;
+        venture: z.ZodOptional<z.ZodObject<{
+            name: z.ZodString;
+            tagline: z.ZodPreprocess<z.ZodOptional<z.ZodString>, unknown>;
+            website: z.ZodOptional<z.ZodURL>;
+            industry: z.ZodEnum<{
+                agritech: "agritech";
+                ai_ml: "ai_ml";
+                b2b_saas: "b2b_saas";
+                consumer: "consumer";
+                climate: "climate";
+                d2c: "d2c";
+                deeptech: "deeptech";
+                edtech: "edtech";
+                fintech: "fintech";
+                gaming: "gaming";
+                healthtech: "healthtech";
+                logistics: "logistics";
+                manufacturing: "manufacturing";
+                marketplace: "marketplace";
+                media: "media";
+                mobility: "mobility";
+                proptech: "proptech";
+                robotics: "robotics";
+                services: "services";
+                space: "space";
+                other: "other";
+            }>;
+            stage: z.ZodEnum<{
+                idea: "idea";
+                validation: "validation";
+                mvp: "mvp";
+                pre_seed: "pre_seed";
+                seed: "seed";
+                series_a_plus: "series_a_plus";
+                profitable: "profitable";
+                exited: "exited";
+            }>;
+            teamSize: z.ZodOptional<z.ZodNumber>;
+            foundedYear: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        skills: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            engineering: "engineering";
+            product: "product";
+            design: "design";
+            data: "data";
+            growth: "growth";
+            sales: "sales";
+            marketing: "marketing";
+            operations: "operations";
+            finance: "finance";
+            legal: "legal";
+            hr_people: "hr_people";
+            supply_chain: "supply_chain";
+            research: "research";
+            fundraising: "fundraising";
+            community: "community";
+        }>>>;
+        goals: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            find_cofounder: "find_cofounder";
+            find_investors: "find_investors";
+            find_customers: "find_customers";
+            hiring: "hiring";
+            partnerships: "partnerships";
+            mentorship: "mentorship";
+            grow_network: "grow_network";
+            business_ideas: "business_ideas";
+            market_insights: "market_insights";
+            learn_startup: "learn_startup";
+            start_company: "start_company";
+        }>>>;
+    }, z.core.$strip>>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type DiscoverPage = z.infer<typeof discoverPageSchema>;
 /**
- * The filter set the Discover UI renders. Served by the backend rather than
- * hard-coded in each client, so adding an industry does not need three
- * releases.
+ * The filter options the Discover drawer offers, with counts. The VALUES come
+ * from the enums here, so the options cannot disagree with what the query
+ * accepts.
+ *
+ * ⚠ NO LABELS. The value IS the translation key (`industries.<value>`,
+ * `stages.<value>`, `skills.<value>`), and a client words it in the member's
+ * language. Until 0.2.0 the server also sent an English `label` per option,
+ * built by capitalising the value ("Ai ml"), which no client read and which
+ * would have been wrong in Hindi if one had. Cities are member-typed place
+ * names, so their value is shown as it is.
  */
 export declare const discoverFacetsSchema: z.ZodObject<{
     industries: z.ZodArray<z.ZodObject<{
@@ -106,7 +201,6 @@ export declare const discoverFacetsSchema: z.ZodObject<{
             space: "space";
             other: "other";
         }>;
-        label: z.ZodString;
         count: z.ZodNumber;
     }, z.core.$strip>>;
     skills: z.ZodArray<z.ZodObject<{
@@ -127,7 +221,6 @@ export declare const discoverFacetsSchema: z.ZodObject<{
             fundraising: "fundraising";
             community: "community";
         }>;
-        label: z.ZodString;
         count: z.ZodNumber;
     }, z.core.$strip>>;
     stages: z.ZodArray<z.ZodObject<{
@@ -141,7 +234,6 @@ export declare const discoverFacetsSchema: z.ZodObject<{
             profitable: "profitable";
             exited: "exited";
         }>;
-        label: z.ZodString;
         count: z.ZodNumber;
     }, z.core.$strip>>;
     cities: z.ZodArray<z.ZodObject<{

package/dist/discover.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../src/discover.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsBxB;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQ9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAS/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../src/discover.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAyBxB;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQ9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAErE,4DAA4D;AAC5D,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAqC,CAAC;AACrE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAM9D;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/discover.js

@@ -9,6 +9,9 @@
  */
 import { z } from 'zod';
 import { industrySchema, optionalTrimmedString, paginationQuerySchema, skillSchema, startupStageSchema, } from './common.js';
+import { founderCardSchema } from './founder-profile.js';
+import { DISCOVER_FILTER_VALUES_MAX, DISCOVER_TEXT_MAX } from './limits.js';
+import { paginatedSchema } from './responses/common.js';
 /**
  * Accepts a repeated query param (`?skill=growth&skill=sales`) or a single
  * value, and always produces an array.
@@ -20,7 +23,7 @@ const multiValue = (inner) => z.preprocess((value) => {
     if (value === undefined || value === null)
         return undefined;
     return Array.isArray(value) ? value : [value];
-}, z.array(inner).max(10).optional());
+}, z.array(inner).max(DISCOVER_FILTER_VALUES_MAX).optional());
 /**
  * Every free-text filter here is `optionalTrimmedString`, so an EMPTY one is
  * treated as "not provided" rather than as a validation failure.
@@ -33,22 +36,33 @@ const multiValue = (inner) => z.preprocess((value) => {
  */
 export const discoverQuerySchema = paginationQuerySchema.extend({
     /** Free-text name search. Matched against display name and username. */
-    q: optionalTrimmedString(80),
+    q: optionalTrimmedString(DISCOVER_TEXT_MAX),
     industry: multiValue(industrySchema),
     skill: multiValue(skillSchema),
     stage: multiValue(startupStageSchema),
-    city: optionalTrimmedString(80),
-    country: optionalTrimmedString(80),
+    city: optionalTrimmedString(DISCOVER_TEXT_MAX),
+    country: optionalTrimmedString(DISCOVER_TEXT_MAX),
 });
+/** A page of founder cards, most recently updated first. */
+export const discoverPageSchema = paginatedSchema(founderCardSchema);
+/** One filter option and how many listed founders match it. */
+const facetOption = (value) => z.object({ value, count: z.number().int().nonnegative() });
 /**
- * The filter set the Discover UI renders. Served by the backend rather than
- * hard-coded in each client, so adding an industry does not need three
- * releases.
+ * The filter options the Discover drawer offers, with counts. The VALUES come
+ * from the enums here, so the options cannot disagree with what the query
+ * accepts.
+ *
+ * ⚠ NO LABELS. The value IS the translation key (`industries.<value>`,
+ * `stages.<value>`, `skills.<value>`), and a client words it in the member's
+ * language. Until 0.2.0 the server also sent an English `label` per option,
+ * built by capitalising the value ("Ai ml"), which no client read and which
+ * would have been wrong in Hindi if one had. Cities are member-typed place
+ * names, so their value is shown as it is.
  */
 export const discoverFacetsSchema = z.object({
-    industries: z.array(z.object({ value: industrySchema, label: z.string(), count: z.number().int() })),
-    skills: z.array(z.object({ value: skillSchema, label: z.string(), count: z.number().int() })),
-    stages: z.array(z.object({ value: startupStageSchema, label: z.string(), count: z.number().int() })),
-    cities: z.array(z.object({ value: z.string(), count: z.number().int() })),
+    industries: z.array(facetOption(industrySchema)),
+    skills: z.array(facetOption(skillSchema)),
+    stages: z.array(facetOption(startupStageSchema)),
+    cities: z.array(facetOption(z.string())),
 });
 //# sourceMappingURL=discover.js.map

package/dist/discover.js.map

@@ -1 +1 @@
-{"version":3,"file":"discover.js","sourceRoot":"","sources":["../src/discover.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,qBAAqB,EACrB,WAAW,EACX,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAsB,KAAQ,EAAE,EAAE,CACnD,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAExC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,MAAM,CAAC;IAC9D,wEAAwE;IACxE,CAAC,EAAE,qBAAqB,CAAC,EAAE,CAAC;IAC5B,QAAQ,EAAE,UAAU,CAAC,cAAc,CAAC;IACpC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC;IAC9B,KAAK,EAAE,UAAU,CAAC,kBAAkB,CAAC;IACrC,IAAI,EAAE,qBAAqB,CAAC,EAAE,CAAC;IAC/B,OAAO,EAAE,qBAAqB,CAAC,EAAE,CAAC;CACnC,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,CAAC,CAAC,KAAK,CACjB,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAChF;IACD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7F,MAAM,EAAE,CAAC,CAAC,KAAK,CACb,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CACpF;IACD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;CAC1E,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — Discover search and filters\n *\n * Search is by name; the filters are industry, skill, startup stage and\n * location. The community surface the Discover tab will grow later is not\n * modelled yet.\n *\n * @module founder-schema/discover\n */\n\nimport { z } from 'zod';\nimport {\n  industrySchema,\n  optionalTrimmedString,\n  paginationQuerySchema,\n  skillSchema,\n  startupStageSchema,\n} from './common.js';\n\n/**\n * Accepts a repeated query param (`?skill=growth&skill=sales`) or a single\n * value, and always produces an array.\n *\n * Express gives `string` for one occurrence and `string[]` for several, so\n * without this the same URL shape parses two different ways.\n */\nconst multiValue = <T extends z.ZodType>(inner: T) =>\n  z.preprocess((value) => {\n    if (value === undefined || value === null) return undefined;\n    return Array.isArray(value) ? value : [value];\n  }, z.array(inner).max(10).optional());\n\n/**\n * Every free-text filter here is `optionalTrimmedString`, so an EMPTY one is\n * treated as \"not provided\" rather than as a validation failure.\n *\n * A search box the member has just cleared sends `?q=`, and a select they reset\n * sends `?city=`. Refusing those turns an ordinary interaction into a 400 with\n * nothing useful to show for it: the member asked for fewer filters, not for an\n * error. This is the one place the create-body rule and the patch-body rule\n * agree, because a query has nothing to erase.\n */\nexport const discoverQuerySchema = paginationQuerySchema.extend({\n  /** Free-text name search. Matched against display name and username. */\n  q: optionalTrimmedString(80),\n  industry: multiValue(industrySchema),\n  skill: multiValue(skillSchema),\n  stage: multiValue(startupStageSchema),\n  city: optionalTrimmedString(80),\n  country: optionalTrimmedString(80),\n});\nexport type DiscoverQuery = z.infer<typeof discoverQuerySchema>;\n\n/**\n * The filter set the Discover UI renders. Served by the backend rather than\n * hard-coded in each client, so adding an industry does not need three\n * releases.\n */\nexport const discoverFacetsSchema = z.object({\n  industries: z.array(\n    z.object({ value: industrySchema, label: z.string(), count: z.number().int() }),\n  ),\n  skills: z.array(z.object({ value: skillSchema, label: z.string(), count: z.number().int() })),\n  stages: z.array(\n    z.object({ value: startupStageSchema, label: z.string(), count: z.number().int() }),\n  ),\n  cities: z.array(z.object({ value: z.string(), count: z.number().int() })),\n});\nexport type DiscoverFacets = z.infer<typeof discoverFacetsSchema>;\n"]}
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../src/discover.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,qBAAqB,EACrB,WAAW,EACX,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAsB,KAAQ,EAAE,EAAE,CACnD,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEhE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,MAAM,CAAC;IAC9D,wEAAwE;IACxE,CAAC,EAAE,qBAAqB,CAAC,iBAAiB,CAAC;IAC3C,QAAQ,EAAE,UAAU,CAAC,cAAc,CAAC;IACpC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC;IAC9B,KAAK,EAAE,UAAU,CAAC,kBAAkB,CAAC;IACrC,IAAI,EAAE,qBAAqB,CAAC,iBAAiB,CAAC;IAC9C,OAAO,EAAE,qBAAqB,CAAC,iBAAiB,CAAC;CAClD,CAAC,CAAC;AAIH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC,iBAAiB,CAAC,CAAC;AAGrE,+DAA+D;AAC/D,MAAM,WAAW,GAAG,CAAsB,KAAQ,EAAE,EAAE,CACpD,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;CACzC,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — Discover search and filters\n *\n * Search is by name; the filters are industry, skill, startup stage and\n * location. The community surface the Discover tab will grow later is not\n * modelled yet.\n *\n * @module founder-schema/discover\n */\n\nimport { z } from 'zod';\nimport {\n  industrySchema,\n  optionalTrimmedString,\n  paginationQuerySchema,\n  skillSchema,\n  startupStageSchema,\n} from './common.js';\nimport { founderCardSchema } from './founder-profile.js';\nimport { DISCOVER_FILTER_VALUES_MAX, DISCOVER_TEXT_MAX } from './limits.js';\nimport { paginatedSchema } from './responses/common.js';\n\n/**\n * Accepts a repeated query param (`?skill=growth&skill=sales`) or a single\n * value, and always produces an array.\n *\n * Express gives `string` for one occurrence and `string[]` for several, so\n * without this the same URL shape parses two different ways.\n */\nconst multiValue = <T extends z.ZodType>(inner: T) =>\n  z.preprocess((value) => {\n    if (value === undefined || value === null) return undefined;\n    return Array.isArray(value) ? value : [value];\n  }, z.array(inner).max(DISCOVER_FILTER_VALUES_MAX).optional());\n\n/**\n * Every free-text filter here is `optionalTrimmedString`, so an EMPTY one is\n * treated as \"not provided\" rather than as a validation failure.\n *\n * A search box the member has just cleared sends `?q=`, and a select they reset\n * sends `?city=`. Refusing those turns an ordinary interaction into a 400 with\n * nothing useful to show for it: the member asked for fewer filters, not for an\n * error. This is the one place the create-body rule and the patch-body rule\n * agree, because a query has nothing to erase.\n */\nexport const discoverQuerySchema = paginationQuerySchema.extend({\n  /** Free-text name search. Matched against display name and username. */\n  q: optionalTrimmedString(DISCOVER_TEXT_MAX),\n  industry: multiValue(industrySchema),\n  skill: multiValue(skillSchema),\n  stage: multiValue(startupStageSchema),\n  city: optionalTrimmedString(DISCOVER_TEXT_MAX),\n  country: optionalTrimmedString(DISCOVER_TEXT_MAX),\n});\nexport type DiscoverQuery = z.infer<typeof discoverQuerySchema>;\nexport type DiscoverQueryInput = z.input<typeof discoverQuerySchema>;\n\n/** A page of founder cards, most recently updated first. */\nexport const discoverPageSchema = paginatedSchema(founderCardSchema);\nexport type DiscoverPage = z.infer<typeof discoverPageSchema>;\n\n/** One filter option and how many listed founders match it. */\nconst facetOption = <T extends z.ZodType>(value: T) =>\n  z.object({ value, count: z.number().int().nonnegative() });\n\n/**\n * The filter options the Discover drawer offers, with counts. The VALUES come\n * from the enums here, so the options cannot disagree with what the query\n * accepts.\n *\n * ⚠ NO LABELS. The value IS the translation key (`industries.<value>`,\n * `stages.<value>`, `skills.<value>`), and a client words it in the member's\n * language. Until 0.2.0 the server also sent an English `label` per option,\n * built by capitalising the value (\"Ai ml\"), which no client read and which\n * would have been wrong in Hindi if one had. Cities are member-typed place\n * names, so their value is shown as it is.\n */\nexport const discoverFacetsSchema = z.object({\n  industries: z.array(facetOption(industrySchema)),\n  skills: z.array(facetOption(skillSchema)),\n  stages: z.array(facetOption(startupStageSchema)),\n  cities: z.array(facetOption(z.string())),\n});\nexport type DiscoverFacets = z.infer<typeof discoverFacetsSchema>;\n"]}

package/dist/errors.d.ts

@@ -0,0 +1,85 @@
+/**
+ * founder-schema — Every error code the API answers with
+ *
+ * THE CODE IS WHAT A CLIENT ACTS ON; the `message` beside it is English for
+ * logs and for a client too old to know the code. A client words each code in
+ * the member's language, and a test on the web side asserts every value here
+ * has a message in every locale it ships.
+ *
+ * Before 0.2.0 the backend kept this list to itself, and every domain refusal
+ * (a closed poll, a reply to a reply, the edit window) went out as
+ * `VALIDATION_ERROR` with an English sentence, so the only way for a client to
+ * tell them apart was to match on the wording.
+ *
+ * WHEN TO USE WHICH:
+ *   - A request that does not match its schema: `VALIDATION_ERROR`, with every
+ *     problem in `error.details.issues`.
+ *   - A well-formed request the current STATE of things refuses: its own code
+ *     below. These carry no issues; the code says it all.
+ *
+ * ⚠ Append freely; remove deliberately. A code removed here that an older
+ * server still sends fails the client's parse of the error envelope.
+ *
+ * @module founder-schema/errors
+ */
+import { z } from 'zod';
+/**
+ * As a tuple, the way `GENDER_VALUES` is, so a consumer can iterate it (a
+ * translation-coverage test does exactly that) and TypeScript keeps the union.
+ */
+export declare const API_ERROR_CODE_VALUES: readonly ["INTERNAL_ERROR", "VALIDATION_ERROR", "NOT_FOUND", "CONFLICT", "RATE_LIMITED", "SERVICE_UNAVAILABLE", "UNAUTHORIZED", "INVALID_TOKEN", "TOKEN_EXPIRED", "SESSION_INVALIDATED", "FORBIDDEN", "ONBOARDING_INCOMPLETE", "ALREADY_ONBOARDED", "UNDER_AGE", "UPLOAD_NOT_ATTACHABLE", "UPLOAD_TOO_LARGE", "UPLOAD_WRONG_TYPE", "EDIT_WINDOW_CLOSED", "POLL_NOT_EDITABLE", "POLL_CLOSED", "POLL_CHOICE_INVALID", "REPLY_TOO_DEEP", "CANNOT_REPORT_OWN", "CHAT_WITH_SELF"];
+export declare const apiErrorCodeSchema: z.ZodEnum<{
+    INTERNAL_ERROR: "INTERNAL_ERROR";
+    VALIDATION_ERROR: "VALIDATION_ERROR";
+    NOT_FOUND: "NOT_FOUND";
+    CONFLICT: "CONFLICT";
+    RATE_LIMITED: "RATE_LIMITED";
+    SERVICE_UNAVAILABLE: "SERVICE_UNAVAILABLE";
+    UNAUTHORIZED: "UNAUTHORIZED";
+    INVALID_TOKEN: "INVALID_TOKEN";
+    TOKEN_EXPIRED: "TOKEN_EXPIRED";
+    SESSION_INVALIDATED: "SESSION_INVALIDATED";
+    FORBIDDEN: "FORBIDDEN";
+    ONBOARDING_INCOMPLETE: "ONBOARDING_INCOMPLETE";
+    ALREADY_ONBOARDED: "ALREADY_ONBOARDED";
+    UNDER_AGE: "UNDER_AGE";
+    UPLOAD_NOT_ATTACHABLE: "UPLOAD_NOT_ATTACHABLE";
+    UPLOAD_TOO_LARGE: "UPLOAD_TOO_LARGE";
+    UPLOAD_WRONG_TYPE: "UPLOAD_WRONG_TYPE";
+    EDIT_WINDOW_CLOSED: "EDIT_WINDOW_CLOSED";
+    POLL_NOT_EDITABLE: "POLL_NOT_EDITABLE";
+    POLL_CLOSED: "POLL_CLOSED";
+    POLL_CHOICE_INVALID: "POLL_CHOICE_INVALID";
+    REPLY_TOO_DEEP: "REPLY_TOO_DEEP";
+    CANNOT_REPORT_OWN: "CANNOT_REPORT_OWN";
+    CHAT_WITH_SELF: "CHAT_WITH_SELF";
+}>;
+export type ApiErrorCode = z.infer<typeof apiErrorCodeSchema>;
+/** The same codes by name: `API_ERROR_CODE.POLL_CLOSED`. */
+export declare const API_ERROR_CODE: {
+    INTERNAL_ERROR: "INTERNAL_ERROR";
+    VALIDATION_ERROR: "VALIDATION_ERROR";
+    NOT_FOUND: "NOT_FOUND";
+    CONFLICT: "CONFLICT";
+    RATE_LIMITED: "RATE_LIMITED";
+    SERVICE_UNAVAILABLE: "SERVICE_UNAVAILABLE";
+    UNAUTHORIZED: "UNAUTHORIZED";
+    INVALID_TOKEN: "INVALID_TOKEN";
+    TOKEN_EXPIRED: "TOKEN_EXPIRED";
+    SESSION_INVALIDATED: "SESSION_INVALIDATED";
+    FORBIDDEN: "FORBIDDEN";
+    ONBOARDING_INCOMPLETE: "ONBOARDING_INCOMPLETE";
+    ALREADY_ONBOARDED: "ALREADY_ONBOARDED";
+    UNDER_AGE: "UNDER_AGE";
+    UPLOAD_NOT_ATTACHABLE: "UPLOAD_NOT_ATTACHABLE";
+    UPLOAD_TOO_LARGE: "UPLOAD_TOO_LARGE";
+    UPLOAD_WRONG_TYPE: "UPLOAD_WRONG_TYPE";
+    EDIT_WINDOW_CLOSED: "EDIT_WINDOW_CLOSED";
+    POLL_NOT_EDITABLE: "POLL_NOT_EDITABLE";
+    POLL_CLOSED: "POLL_CLOSED";
+    POLL_CHOICE_INVALID: "POLL_CHOICE_INVALID";
+    REPLY_TOO_DEEP: "REPLY_TOO_DEEP";
+    CANNOT_REPORT_OWN: "CANNOT_REPORT_OWN";
+    CHAT_WITH_SELF: "CHAT_WITH_SELF";
+};
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,qBAAqB,8cA4DxB,CAAC;AAEX,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;EAAgC,CAAC;AAChE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,4DAA4D;AAC5D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;CAA0B,CAAC"}