founder-schema 0.14.0 → 0.16.0

package/README.md

@@ -99,6 +99,88 @@ instance; this package must not bring its own.
 
 ---
 
+## Breaking in 0.16.0: onboarding in nine steps (2026-10-18)
+
+The user's rework of onboarding. The finish body takes the same answers plus one.
+
+- **Breaking:** `ONBOARDING_STEP_KEYS` is nine: `basics` (full name, gender,
+  date of birth, nothing else), `photo`, `professional` (title, about, skills),
+  then `contact`, `location`, `goals`, `interests`, `business`, `guidelines` as
+  before. `identity` and `ONBOARDING_STEP_SCHEMAS.identity` are gone;
+  `ONBOARDING_TOTAL_STEPS` is 9. The resume cursor is an index into this list:
+  the backend translates a cursor saved under the seven steps once, by step
+  name (its progress rows carry `stepsVersion`), so nobody resumes on the wrong
+  step or loses an answer.
+- **Breaking:** `onboardingFormSchema` gains `legalStructure` (nullable), so a
+  form built from it must hold the key.
+- **New:** `LEGAL_STRUCTURE_VALUES` / `legalStructureSchema` / `LegalStructure`:
+  how a venture is registered in India (sole proprietorship, partnership, LLP,
+  OPC, private and public limited, Section 8, trust or society, co-operative),
+  or not yet, or outside India. Optional on the finish body and the business
+  step; stored on the profile's venture beside `businessType`, and shown only
+  to the member (below).
+- **New: the member's private answers in Me** (`domains/profile/my-profile.ts`,
+  the user, 2026-10-18): `GET`/`PUT /profiles/me/business` (`myBusinessSchema`,
+  `putMyBusinessBodySchema`: the WHOLE venture with its `businessType` and
+  `legalStructure`, which are `myVentureSchema`, or `null` to remove it) and
+  `GET`/`PUT /profiles/me/interests` (`myInterestsSchema`,
+  `putMyInterestsBodySchema`). Owner only: none of the three is on
+  `founderProfileSchema`, a card, a byline or a member's page.
+- **Stricter:** `interestsSchema` is the ONE interests rule, used by the finish
+  body and the Me editor, and it now refuses a topic twice (`topicsDuplicate`):
+  three copies of one topic met the minimum of three. Neither client sends one.
+- **New:** `splitFullName(fullName)`: the first and last name a full name
+  deduces to, at the first space; a one-word name is whole. Derived, never
+  stored: `displayName` stays the one owner of a name.
+- **Appended:** `GOAL_VALUES` +7 (`get_feedback`, `find_testers`,
+  `mentor_others`, `invest_in_startups`, `join_startup`,
+  `find_service_providers`, `attend_events`); `BUSINESS_TYPE_VALUES` +5
+  (`freelancer`, `agency`, `social_enterprise`, `family_business`, `franchise`).
+  Nothing renamed or removed.
+- **Deploy order: the backend, then the web straight after.** A 0.15 backend
+  refuses the `legalStructure` draft key and steps above 7, so a 0.16 web on it
+  is stuck at the business step; a 0.15 web cannot parse a 9-step status or a
+  card holding a new goal. Open tabs and an installed app's cached copy keep the
+  old bundle until they update.
+- **Rollback floor:** once a member saves a new goal, a build below 0.16
+  cannot parse their card, member page or own profile; roll back only after a
+  backfill. A new business type or registration travels on none of those (only
+  on the owner's own `/profiles/me/business`, new in 0.16), so it does not
+  move the floor.
+- **Backend, at deploy:** no new index and no migration (old cursors are
+  translated on the member's next visit).
+
+## Breaking in 0.15.0: the launch waitlist (2026-10-16)
+
+Until the launch instant `FC_LAUNCH_AT` (a server-only env on BOTH the backend
+and the web; AWS main only: Tuesday 20 October 2026, 12:00 noon IST), joining is
+signing in, and the first `FOUNDING_PLACES` places get the membership free
+(0.14.0). Unset means launched, so nothing changes where it is not set. Design:
+`founder-circle-backend/docs/waitlist.md`. No export is removed.
+
+- **New:** `src/domains/waitlist/waitlist.ts`, in route order:
+  `waitlistStatusSchema` for `GET /waitlist` (public: `waiting`, `launchAt`,
+  `foundingPlaces`, `foundingPlacesLeft`); `myWaitlistSchema` for
+  `GET /waitlist/me` (`place` or null, `canJoin`, `refusal`: `closed` |
+  `staff` | `place_used` or null); `waitlistPlaceSchema` for
+  `POST /waitlist/join` (`place`, `joinedAt`, `founding`).
+- **New error codes, so a client's exhaustive word map must add them:**
+  `NOT_LAUNCHED` (403; every write but the waitlist's few, while waiting, for
+  everyone, staff included), `WAITLIST_CLOSED` (409; joining after the launch),
+  `WAITLIST_STAFF` (403; staff never take a place), `WAITLIST_PLACE_USED` (409;
+  one place per inbox and per sign-in, ever: addresses reaching one inbox
+  (`x+1@`, Gmail's dots) share one, and so does a deleted account's sign-in).
+- **New:** `refundWindowEndsAt(paidAt)`: the refund window's last moment, the
+  end of the 7th day after the paying day in India (the server and the staff
+  screen share it).
+- **Breaking on main while waiting:** a 0.14.0 web cannot parse `NOT_LAUNCHED`.
+  Deploy the backend and the web together, both on 0.15.0, with `FC_LAUNCH_AT`
+  ALREADY in both env files: started without it, main runs launched (fully
+  open) until it is set.
+- **Backend, at deploy:** new collections `waitlist_entries` (unique
+  `waitlist_by_user`, `waitlist_by_place`) and `waitlist_counters`; run
+  `sync-indexes` (the dry run must say 0 differing).
+
 ## Changes in 0.14.0: founding places come from the launch waitlist (2026-10-16)
 
 The user's rule: the first `FOUNDING_PLACES` (100) people to join the launch
@@ -543,8 +625,13 @@ is imported, so a server process still up on 1 January rejects the new year unti
 somebody restarts it.
 
 **Changing a member of an enum array is a data change, not a type change.** The
-four `*_VALUES` arrays are Mongoose `enum` constraints in the backend. Removing or
-renaming a value orphans documents already saved with it. Appending is safe.
+`*_VALUES` arrays the backend's profile model uses (stage, industry, skill, goal,
+gender, topic, business type, legal structure) are Mongoose `enum` constraints.
+Removing or renaming a value orphans documents already saved with it. Appending
+is safe for the database, but not for an OLDER CLIENT, which parses strictly and
+refuses a value it does not know: deploy the readers (backend, then web) before
+anything can write the new value, and a rollback below the version that added it
+needs a backfill first.
 `STARTUP_STAGE_VALUES` is ordered earliest to latest and that order is load
 bearing, so append at the end and never insert.
 
@@ -553,7 +640,7 @@ bearing, so append at the end and never insert.
 ## Settled since the scaffold
 
 - **The npm name and the first publish:** `founder-schema`, 0.1.0, by the user.
-- **The onboarding steps:** seven, ruled 2026-09-22; see `src/domains/onboarding/onboarding.ts`.
+- **The onboarding steps:** nine since 0.16.0 (the user, 2026-10-18), seven before (ruled 2026-09-22); see `src/domains/onboarding/onboarding.ts`.
 
 ## Contract decisions, 2026-09-21
 

package/dist/core/common.d.ts

@@ -238,11 +238,12 @@ export type Skill = z.infer<typeof skillSchema>;
  * venture works only for a member who ALREADY HAS a venture row, and somebody
  * who wants to start a company is precisely the member with no venture at all,
  * so there is nothing to infer from. It also cannot express a founder with a
- * running company who wants to start another. Every other value is an ask of
- * other people and this one is an ask of the product, which is the whole of the
- * oddness. (hary, 2026-09-21.)
+ * running company who wants to start another. The others were all asks of other
+ * people and this one an ask of the product, which is the whole of the oddness.
+ * (hary, 2026-09-21.) Since 0.16.0 the list also holds offers (`mentor_others`,
+ * `invest_in_startups`) and a second ask of the product (`attend_events`).
  */
-export declare const GOAL_VALUES: readonly ["find_cofounder", "find_investors", "find_customers", "hiring", "partnerships", "mentorship", "grow_network", "business_ideas", "market_insights", "learn_startup", "start_company"];
+export declare const GOAL_VALUES: readonly ["find_cofounder", "find_investors", "find_customers", "hiring", "partnerships", "mentorship", "grow_network", "business_ideas", "market_insights", "learn_startup", "start_company", "get_feedback", "find_testers", "mentor_others", "invest_in_startups", "join_startup", "find_service_providers", "attend_events"];
 export declare const goalSchema: z.ZodEnum<{
     find_cofounder: "find_cofounder";
     find_investors: "find_investors";
@@ -255,6 +256,13 @@ export declare const goalSchema: z.ZodEnum<{
     market_insights: "market_insights";
     learn_startup: "learn_startup";
     start_company: "start_company";
+    get_feedback: "get_feedback";
+    find_testers: "find_testers";
+    mentor_others: "mentor_others";
+    invest_in_startups: "invest_in_startups";
+    join_startup: "join_startup";
+    find_service_providers: "find_service_providers";
+    attend_events: "attend_events";
 }>;
 export type Goal = z.infer<typeof goalSchema>;
 /**
@@ -281,6 +289,24 @@ export type Gender = z.infer<typeof genderSchema>;
  * words it.
  */
 export declare const displayNameSchema: z.ZodString;
+/**
+ * A full name's first and last name, DEDUCED, never asked (the user,
+ * 2026-10-18: onboarding asks one "Full name" and works the two out from the
+ * space). The first word is the first name and everything after the first
+ * space is the last name, kept as written ("Asha Rao Kulkarni" is Asha and
+ * Rao Kulkarni).
+ *
+ * ⚠ A ONE-WORD NAME IS A WHOLE NAME. Many people in India go by a single name,
+ * so `lastName` is then `''`, and nothing may refuse it for that.
+ *
+ * Derived wherever it is needed, never stored as a second copy of the name:
+ * `displayName` stays the one owner of a member's name, so a rename can never
+ * leave a stale first name behind.
+ */
+export declare function splitFullName(fullName: string): {
+    firstName: string;
+    lastName: string;
+};
 /**
  * Indian mobile number: ten raw digits, no country code, matching the standard
  * used across this family. Display adds the `+91`.

package/dist/core/common.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/core/common.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAcxB;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,GAAI,OAAO,OAAO,KAAG,OAGvD,CAAC;AAEF,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,GAAI,kBAAe,yDAC8B,CAAC;AAEpF;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,KAAK,MAAM,2DAKlC,CAAC;AAEzC,4EAA4E;AAC5E,eAAO,MAAM,cAAc,wDAGS,CAAC;AACrC,yFAAyF;AACzF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAI5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,aAAa,UAIxB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa,UAAkC,CAAC;AAC7D,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAM1E;AAED,2EAA2E;AAC3E,eAAO,MAAM,cAAc,GAAI,OAAO,SAAS,MAAM,EAAE,EAAE,SAAS,MAAM,aACI,CAAC;AAE7E;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,4CAA6C,CAAC;AAC7F,eAAO,MAAM,+BAA+B;;;;EAA6C,CAAC;AAC1F,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF;;;;GAIG;AACH,eAAO,MAAM,aAAa,8HAQhB,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAgBzD;AAID;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,IAAI,CAAC;AAC9B,eAAO,MAAM,YAAY,KAAK,CAAC;AAE/B,eAAO,MAAM,cAAc,aAOqD,CAAC;AACjF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kBAAkB,uNAqBrB,CAAC;AAIX,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,aAE/B,CAAC;AAIH;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,qGASvB,CAAC;AACX,eAAO,MAAM,kBAAkB;;;;;;;;;EAA+B,CAAC;AAC/D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,eAAe,2PAsBlB,CAAC;AACX,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;EAA0B,CAAC;AACtD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,YAAY,8LAgBf,CAAC;AACX,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;EAAuB,CAAC;AAChD,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,WAAW,gMAYd,CAAC;AACX,eAAO,MAAM,UAAU;;;;;;;;;;;;EAAsB,CAAC;AAC9C,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAI9C;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,2DAA4D,CAAC;AACvF,eAAO,MAAM,YAAY;;;;;EAAwB,CAAC;AAClD,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAIlD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,aAAiD,CAAC;AAIhF;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW,aAGiC,CAAC;AAC1D,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAIhD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,cAAc;;;;iBAIzB,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE7D;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;;;iBAGjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB;;;;kBAA4B,CAAC;AACjE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAIxE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;iBAYhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,kFAAkF;AAClF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/core/common.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAcxB;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,GAAI,OAAO,OAAO,KAAG,OAGvD,CAAC;AAEF,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,GAAI,kBAAe,yDAC8B,CAAC;AAEpF;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,KAAK,MAAM,2DAKlC,CAAC;AAEzC,4EAA4E;AAC5E,eAAO,MAAM,cAAc,wDAGS,CAAC;AACrC,yFAAyF;AACzF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAI5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,aAAa,UAIxB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa,UAAkC,CAAC;AAC7D,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAM1E;AAED,2EAA2E;AAC3E,eAAO,MAAM,cAAc,GAAI,OAAO,SAAS,MAAM,EAAE,EAAE,SAAS,MAAM,aACI,CAAC;AAE7E;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,4CAA6C,CAAC;AAC7F,eAAO,MAAM,+BAA+B;;;;EAA6C,CAAC;AAC1F,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF;;;;GAIG;AACH,eAAO,MAAM,aAAa,8HAQhB,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAgBzD;AAID;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,IAAI,CAAC;AAC9B,eAAO,MAAM,YAAY,KAAK,CAAC;AAE/B,eAAO,MAAM,cAAc,aAOqD,CAAC;AACjF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kBAAkB,uNAqBrB,CAAC;AAIX,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,aAE/B,CAAC;AAIH;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,qGASvB,CAAC;AACX,eAAO,MAAM,kBAAkB;;;;;;;;;EAA+B,CAAC;AAC/D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,eAAe,2PAsBlB,CAAC;AACX,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;EAA0B,CAAC;AACtD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,YAAY,8LAgBf,CAAC;AACX,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;EAAuB,CAAC;AAChD,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,WAAW,kUAwBd,CAAC;AACX,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;EAAsB,CAAC;AAC9C,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAI9C;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,2DAA4D,CAAC;AACvF,eAAO,MAAM,YAAY;;;;;EAAwB,CAAC;AAClD,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAIlD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,aAAiD,CAAC;AAEhF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAMvF;AAID;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW,aAGiC,CAAC;AAC1D,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAIhD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,cAAc;;;;iBAIzB,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE7D;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;;;iBAGjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB;;;;kBAA4B,CAAC;AACjE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAIxE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;iBAYhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,kFAAkF;AAClF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/core/common.js

@@ -312,9 +312,10 @@ export const skillSchema = z.enum(SKILL_VALUES);
  * venture works only for a member who ALREADY HAS a venture row, and somebody
  * who wants to start a company is precisely the member with no venture at all,
  * so there is nothing to infer from. It also cannot express a founder with a
- * running company who wants to start another. Every other value is an ask of
- * other people and this one is an ask of the product, which is the whole of the
- * oddness. (hary, 2026-09-21.)
+ * running company who wants to start another. The others were all asks of other
+ * people and this one an ask of the product, which is the whole of the oddness.
+ * (hary, 2026-09-21.) Since 0.16.0 the list also holds offers (`mentor_others`,
+ * `invest_in_startups`) and a second ask of the product (`attend_events`).
  */
 export const GOAL_VALUES = [
     'find_cofounder',
@@ -328,6 +329,18 @@ export const GOAL_VALUES = [
     'market_insights',
     'learn_startup',
     'start_company',
+    // 0.16.0 (the user, 2026-10-18: "a few more ... cover most of the goals"):
+    // the journey's own asks (feedback on an idea, early testers), the other
+    // side of mentorship and of fundraising (mentoring, investing), and three
+    // more a founder network is asked for: joining a startup, finding
+    // service providers, and events. Appended, per the rule above.
+    'get_feedback',
+    'find_testers',
+    'mentor_others',
+    'invest_in_startups',
+    'join_startup',
+    'find_service_providers',
+    'attend_events',
 ];
 export const goalSchema = z.enum(GOAL_VALUES);
 // ─── Gender ──────────────────────────────────────────────────────────────────
@@ -350,6 +363,27 @@ export const genderSchema = z.enum(GENDER_VALUES);
  * words it.
  */
 export const displayNameSchema = z.string().trim().min(1).max(DISPLAY_NAME_MAX);
+/**
+ * A full name's first and last name, DEDUCED, never asked (the user,
+ * 2026-10-18: onboarding asks one "Full name" and works the two out from the
+ * space). The first word is the first name and everything after the first
+ * space is the last name, kept as written ("Asha Rao Kulkarni" is Asha and
+ * Rao Kulkarni).
+ *
+ * ⚠ A ONE-WORD NAME IS A WHOLE NAME. Many people in India go by a single name,
+ * so `lastName` is then `''`, and nothing may refuse it for that.
+ *
+ * Derived wherever it is needed, never stored as a second copy of the name:
+ * `displayName` stays the one owner of a member's name, so a rename can never
+ * leave a stale first name behind.
+ */
+export function splitFullName(fullName) {
+    const name = fullName.trim().replace(/\s+/g, ' ');
+    const space = name.indexOf(' ');
+    return space === -1
+        ? { firstName: name, lastName: '' }
+        : { firstName: name.slice(0, space), lastName: name.slice(space + 1) };
+}
 // ─── Phone ───────────────────────────────────────────────────────────────────
 /**
  * Indian mobile number: ten raw digits, no country code, matching the standard

package/dist/core/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/core/common.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAW,EAAE;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACvE,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,EAAE,CACvD,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEpF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAsB,KAAQ,EAAE,GAAW,EAAE,EAAE,CAC5E,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEzC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,KAAK,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,SAAS,CAAC;KACtD,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAIrC,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC;IACjC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM;IAC1B,KAAK,EAAE,kBAAkB,CAAC,UAAU;CACrC,CAAC,CAAC;AAGH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAG7D;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,KAAwB;IAC/D,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAwB,EAAE,OAAe,EAAE,EAAE,CAC1E,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAU,CAAC;AAC7F,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;AAG1F;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,aAAa;IACb,iBAAiB;IACjB,eAAe;IACf,UAAU;IACV,+CAA+C;IAC/C,sBAAsB;IACtB,0BAA0B;CAClB,CAAC;AAEX;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,CAAE,aAAmC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,MAAM,EAAE,GACN,IAAI,KAAK,UAAU;QACjB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACpC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ;YACvB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YACzB,CAAC,CAAC,CAAC,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC5E,OAAO,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAE/B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,WAAW,EAAE;IACd,4EAA4E;KAC3E,GAAG,CAAC,YAAY,CAAC;KACjB,GAAG,CAAC,YAAY,CAAC;KACjB,KAAK,CAAC,kCAAkC,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;AAGjF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,OAAO;IACP,OAAO;IACP,KAAK;IACL,MAAM;IACN,UAAU;IACV,MAAM;IACN,SAAS;IACT,eAAe;IACf,MAAM;IACN,MAAM;IACN,IAAI;IACJ,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,UAAU;IACV,OAAO;IACP,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,MAAM;CACE,CAAC;AAEX,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,kBAAkB,CAAC,CAAC;AAErD,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE;IACvF,KAAK,EAAE,kBAAkB,CAAC,gBAAgB;CAC3C,CAAC,CAAC;AAEH,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,MAAM;IACN,YAAY;IACZ,KAAK;IACL,UAAU;IACV,MAAM;IACN,eAAe;IACf,YAAY;IACZ,QAAQ;CACA,CAAC;AACX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAG/D;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU;IACV,OAAO;IACP,UAAU;IACV,UAAU;IACV,SAAS;IACT,KAAK;IACL,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,eAAe;IACf,aAAa;IACb,OAAO;IACP,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,OAAO;IACP,OAAO;CACC,CAAC;AACX,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAGtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,aAAa;IACb,SAAS;IACT,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,OAAO;IACP,WAAW;IACX,YAAY;IACZ,SAAS;IACT,OAAO;IACP,WAAW;IACX,cAAc;IACd,UAAU;IACV,aAAa;IACb,WAAW;CACH,CAAC;AACX,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAGhD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,QAAQ;IACR,cAAc;IACd,YAAY;IACZ,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IACjB,eAAe;IACf,eAAe;CACP,CAAC;AACX,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAG9C,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAU,CAAC;AACvF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAGlD,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAEhF,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,cAAc,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;AAG1D,gFAAgF;AAEhF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC5C,KAAK,EAAE,qBAAqB,CAAC,SAAS,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;CACnD,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;CAChF,CAAC,CAAC;AAIH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC;AAGjE,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C;;;;;OAKG;IACH,KAAK,EAAE,CAAC,CAAC,UAAU,CACjB,sBAAsB,EACtB,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAC7E;IACD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — Shared helpers and core enums\n *\n * The stable building blocks reused across every Founder Circle schema.\n * Anything that both the backend and a client need to agree on lives here.\n *\n * @module founder-schema/core/common\n */\n\nimport { z } from 'zod';\nimport {\n  CITY_MAX,\n  COUNTRY_MAX,\n  DISPLAY_NAME_MAX,\n  LINK_URL_MAX,\n  PAGE_SIZE_DEFAULT,\n  PAGE_SIZE_MAX,\n  STATE_MAX,\n} from './limits.js';\nimport { VALIDATION_MESSAGE } from './validation.js';\n\n// ─── String helpers ──────────────────────────────────────────────────────────\n\n/**\n * Converts empty / whitespace-only strings to `undefined` so Zod `.optional()`\n * treats them as \"not provided\".\n *\n * Why this exists: an HTML form submits `\"\"` for a cleared field, and without\n * this an optional field would be stored as an empty string rather than left\n * alone. Jansathi shipped that bug in dating onboarding.\n */\nexport const emptyStringToUndefined = (value: unknown): unknown => {\n  if (typeof value === 'string' && value.trim() === '') return undefined;\n  return value;\n};\n\n/** Optional trimmed string. Empty strings are coerced to `undefined`. */\nexport const optionalTrimmedString = (maxLength = 100) =>\n  z.preprocess(emptyStringToUndefined, z.string().trim().max(maxLength).optional());\n\n/**\n * A repeated query param (`?skill=growth&skill=sales`) or a single value,\n * always as an array, at most `max` values.\n *\n * Express gives `string` for one occurrence and `string[]` for several, so\n * without this the same URL shape parses two different ways. EMPTY values are\n * dropped (`?industry=` is a select the member just reset): asking for fewer\n * filters is never a 400.\n */\nexport const multiValueQuery = <T extends z.ZodType>(inner: T, max: number) =>\n  z.preprocess((value) => {\n    if (value === undefined || value === null) return undefined;\n    const list = (Array.isArray(value) ? value : [value]).filter((v) => v !== '');\n    return list.length > 0 ? list : undefined;\n  }, z.array(inner).max(max).optional());\n\n/** A Mongo ObjectId as it crosses the wire: 24 lowercase hex characters. */\nexport const objectIdSchema = z\n  .string()\n  .regex(/^[0-9a-f]{24}$/i, VALIDATION_MESSAGE.invalidId)\n  .transform((v) => v.toLowerCase());\n/** Named for what it is on the wire, so it never collides with Mongoose's `ObjectId`. */\nexport type ObjectIdString = z.infer<typeof objectIdSchema>;\n\n// ─── URLs ────────────────────────────────────────────────────────────────────\n\n/**\n * A URL safe to store and, after the consumer's own check, to render.\n *\n * Use this for EVERY member-supplied URL. Never bare `z.url()`: it accepts any\n * scheme the URL parser accepts, so `javascript:alert(document.cookie)`,\n * `data:text/html,<script>...`, `vbscript:` and `file:///etc/passwd` all pass.\n * Each of those is stored XSS the moment a client renders it as an `href`, and\n * `data:` is the same in an `<img src>`.\n *\n * `hostname` is restricted too, not only the scheme. A bare host like\n * `localhost` or a literal IP is refused, which closes server-side request\n * forgery: this product runs on EC2 with an instance role, so a member-supplied\n * `http://169.254.169.254/latest/meta-data/` that anything server-side ever\n * fetches is a credential read.\n *\n * Validating here is necessary and not sufficient. A consumer still treats a\n * stored URL as untrusted at render time, because rows written before this\n * existed were never checked.\n *\n * ⚠️ IF THIS EVER GROWS A HOST ALLOWLIST, compare the PARSED hostname for\n * exact equality. Never `includes`, never `endsWith`, never a regex over the\n * whole URL. Each of these is a real bypass of a naive \"is it YouTube\" check,\n * and all three read as obviously fine:\n *\n *   https://evil.example/?next=youtube.com/watch  contains the string\n *   youtube.com.evil.example                      starts with it\n *   youtu.be.evil.example                         a suffix check passes it\n *\n * The same mistake in the opposite direction to the `javascript:` hole: there\n * the scheme was too permissive, here the host check only LOOKS strict.\n * (krish hit this rendering inline video, 2026-09-21, and handles it by parsing\n * and comparing the hostname exactly.)\n */\nexport const safeUrlSchema = z.url({\n  protocol: /^https?$/,\n  hostname: z.regexes.domain,\n  error: VALIDATION_MESSAGE.urlInvalid,\n});\nexport type SafeUrl = z.infer<typeof safeUrlSchema>;\n\n/**\n * A URL a member TYPES: `safeUrlSchema` plus the `LINK_URL_MAX` ceiling, so\n * every member URL carries the same cap and no consumer has to remember it.\n *\n * Two schemas, not one, because the cap is about what a person types and is\n * wrong for what the server reads from elsewhere. Until 0.2.0 there was only\n * this one, and it capped a link preview's CDN image URL too: one 314-character\n * `imageUrl` would have failed a whole feed page.\n */\nexport const httpUrlSchema = safeUrlSchema.max(LINK_URL_MAX);\nexport type HttpUrl = z.infer<typeof httpUrlSchema>;\n\n/**\n * True when `url` parses and its hostname is EXACTLY one of `hosts`\n * (lowercase). The one host check in this package, written the way the warning\n * on `safeUrlSchema` demands: parsed, compared for equality, never matched as\n * text. `youtube.com.evil.example` and `evil.example/?u=youtube.com` are refused.\n */\nexport function isUrlOnHost(url: string, hosts: readonly string[]): boolean {\n  try {\n    return hosts.includes(new URL(url).hostname.toLowerCase());\n  } catch {\n    return false;\n  }\n}\n\n/** A typed URL (`httpUrlSchema`) that must also live on one of `hosts`. */\nexport const httpUrlOnHosts = (hosts: readonly string[], message: string) =>\n  httpUrlSchema.refine((url) => isUrlOnHost(url, hosts), { error: message });\n\n/**\n * What a product needs before it can be listed in Discover (0.6.0). Here, not\n * in the products domain, because an error's details carry it\n * (`PRODUCT_NOT_LISTABLE` -> `details.missing`) and core never imports a domain.\n */\nexport const PRODUCT_LISTING_REQUIREMENT_VALUES = ['logo', 'tagline', 'screenshot'] as const;\nexport const productListingRequirementSchema = z.enum(PRODUCT_LISTING_REQUIREMENT_VALUES);\nexport type ProductListingRequirement = z.infer<typeof productListingRequirementSchema>;\n\n/**\n * The hosts a shared video may come from. The user's ruling (2026-09-21): video\n * is shared as a link and played in the card, never uploaded. The web plays it\n * through youtube-nocookie.com, the one video frame its CSP admits.\n */\nexport const YOUTUBE_HOSTS = [\n  'youtube.com',\n  'www.youtube.com',\n  'm.youtube.com',\n  'youtu.be',\n  // The privacy-mode player's own links (0.7.0).\n  'youtube-nocookie.com',\n  'www.youtube-nocookie.com',\n] as const;\n\n/**\n * The 11-character id of a YouTube VIDEO link, or null for anything else (a\n * channel, a playlist, the home page, another site): what a page can embed.\n * Reads `youtu.be/<id>`, `/watch?v=<id>`, and `/shorts/`, `/embed/`, `/live/<id>`\n * on a `YOUTUBE_HOSTS` host (0.7.0).\n */\nexport function youtubeVideoId(url: string): string | null {\n  let u: URL;\n  try {\n    u = new URL(url);\n  } catch {\n    return null;\n  }\n  const host = u.hostname.toLowerCase();\n  if (!(YOUTUBE_HOSTS as readonly string[]).includes(host)) return null;\n  const id =\n    host === 'youtu.be'\n      ? (u.pathname.split('/')[1] ?? null)\n      : u.pathname === '/watch'\n        ? u.searchParams.get('v')\n        : (/^\\/(?:shorts|embed|live)\\/([^/]+)/.exec(u.pathname)?.[1] ?? null);\n  return id && /^[A-Za-z0-9_-]{11}$/.test(id) ? id : null;\n}\n\n// ─── Username ────────────────────────────────────────────────────────────────\n\n/**\n * Public handle. Derived by the server at onboarding, changeable later.\n *\n * Rules are deliberately narrow because the handle appears in URLs and in\n * mentions: lowercase letters, digits, underscore and a single dot, 3 to 30\n * characters, must start with a letter.\n *\n * This is the FORMAT, and it is what every read shape uses. A handle being\n * CHOSEN must also not be reserved: that is `chosenUsernameSchema`.\n */\nexport const USERNAME_MIN = 3;\nexport const USERNAME_MAX = 30;\n\nexport const usernameSchema = z\n  .string()\n  .trim()\n  .toLowerCase()\n  // Plain bounds: the client words them from the issue's own minimum/maximum.\n  .min(USERNAME_MIN)\n  .max(USERNAME_MAX)\n  .regex(/^[a-z][a-z0-9_]*(\\.[a-z0-9_]+)?$/, VALIDATION_MESSAGE.usernameInvalid);\nexport type Username = z.infer<typeof usernameSchema>;\n\n/**\n * Handles this product keeps for itself: route names a handle would shadow,\n * and words that would let a member pass as staff.\n *\n * ⚠ HERE, IN THE CONTRACT, since 0.2.0. It used to live in the backend so it\n * could grow without a publish, and nothing ever read it: the server derived\n * handles without checking it, so a member called \"Support\" was handed\n * `support`. One list, read by the server when it derives a handle and by any\n * form that lets a member choose one, is worth a publish per addition.\n *\n * Matched exactly, after lowercasing.\n */\nexport const RESERVED_USERNAMES = [\n  'admin',\n  'about',\n  'api',\n  'chat',\n  'discover',\n  'feed',\n  'founder',\n  'foundercircle',\n  'help',\n  'home',\n  'me',\n  'meetup',\n  'moderator',\n  'onboarding',\n  'settings',\n  'staff',\n  'superadmin',\n  'support',\n  'system',\n  'team',\n] as const;\n\nconst RESERVED = new Set<string>(RESERVED_USERNAMES);\n\nexport function isReservedUsername(handle: string): boolean {\n  return RESERVED.has(handle.trim().toLowerCase());\n}\n\n/**\n * A handle a member is CHOOSING: the format, and not reserved.\n *\n * ⚠ Not used on read shapes, deliberately. A handle stored before the reserved\n * check existed must still READ, or one member's old handle would fail every\n * page that shows their name.\n */\nexport const chosenUsernameSchema = usernameSchema.refine((u) => !isReservedUsername(u), {\n  error: VALIDATION_MESSAGE.usernameReserved,\n});\n\n// ─── Founder-facing enums ────────────────────────────────────────────────────\n\n/**\n * Stage of the founder's current venture.\n *\n * Ordered from earliest to latest so a range filter can compare by index. Add\n * new stages at the END or the stored ordinal of existing rows shifts.\n */\nexport const STARTUP_STAGE_VALUES = [\n  'idea',\n  'validation',\n  'mvp',\n  'pre_seed',\n  'seed',\n  'series_a_plus',\n  'profitable',\n  'exited',\n] as const;\nexport const startupStageSchema = z.enum(STARTUP_STAGE_VALUES);\nexport type StartupStage = z.infer<typeof startupStageSchema>;\n\n/**\n * Industry the venture operates in. Kept as a closed list so Discover filters\n * are a single indexed equality match rather than a text search.\n */\nexport const INDUSTRY_VALUES = [\n  'agritech',\n  'ai_ml',\n  'b2b_saas',\n  'consumer',\n  'climate',\n  'd2c',\n  'deeptech',\n  'edtech',\n  'fintech',\n  'gaming',\n  'healthtech',\n  'logistics',\n  'manufacturing',\n  'marketplace',\n  'media',\n  'mobility',\n  'proptech',\n  'robotics',\n  'services',\n  'space',\n  'other',\n] as const;\nexport const industrySchema = z.enum(INDUSTRY_VALUES);\nexport type Industry = z.infer<typeof industrySchema>;\n\n/**\n * What the founder brings. Free-text skills were considered and rejected: two\n * people typing \"growth\" and \"Growth Marketing\" would never match each other in\n * a filter, and the Discover tab is the whole point of the product.\n */\nexport const SKILL_VALUES = [\n  'engineering',\n  'product',\n  'design',\n  'data',\n  'growth',\n  'sales',\n  'marketing',\n  'operations',\n  'finance',\n  'legal',\n  'hr_people',\n  'supply_chain',\n  'research',\n  'fundraising',\n  'community',\n] as const;\nexport const skillSchema = z.enum(SKILL_VALUES);\nexport type Skill = z.infer<typeof skillSchema>;\n\n/**\n * What the member is here for. ONE list, replacing three.\n *\n * This was `lookingFor` with six values. The design draws eight \"Goals &\n * Passion\" tiles and four more on the business step; all three were the same\n * idea at three grains, and shipping them together would have meant nobody\n * could say which one Discover filters on - the answer settled by whichever\n * query got written first. Merged on hary's ruling, 2026-09-21, while there\n * were still no rows in any database.\n *\n * ⚠️ Stored per member and used as a Mongoose enum. Append only; removing a\n * value orphans documents already saved with it.\n *\n * ⚠️ `start_company` READS ODDLY next to its neighbours and is correct. It was\n * queried on the grounds that it restates `venture.stage: 'idea'`; it does not,\n * and the reason is worth keeping so nobody re-opens it. Inferring it from the\n * venture works only for a member who ALREADY HAS a venture row, and somebody\n * who wants to start a company is precisely the member with no venture at all,\n * so there is nothing to infer from. It also cannot express a founder with a\n * running company who wants to start another. Every other value is an ask of\n * other people and this one is an ask of the product, which is the whole of the\n * oddness. (hary, 2026-09-21.)\n */\nexport const GOAL_VALUES = [\n  'find_cofounder',\n  'find_investors',\n  'find_customers',\n  'hiring',\n  'partnerships',\n  'mentorship',\n  'grow_network',\n  'business_ideas',\n  'market_insights',\n  'learn_startup',\n  'start_company',\n] as const;\nexport const goalSchema = z.enum(GOAL_VALUES);\nexport type Goal = z.infer<typeof goalSchema>;\n\n// ─── Gender ──────────────────────────────────────────────────────────────────\n\n/**\n * Demographic only. Nothing here computes anything from it, unlike the sibling\n * gym product where gender feeds body-metric maths.\n *\n * Takes the family's three values and ADDS one rather than renaming any: a\n * network for founders should let somebody decline the question without having\n * to describe themselves as \"other\".\n */\nexport const GENDER_VALUES = ['male', 'female', 'other', 'prefer_not_to_say'] as const;\nexport const genderSchema = z.enum(GENDER_VALUES);\nexport type Gender = z.infer<typeof genderSchema>;\n\n// ─── Display name ────────────────────────────────────────────────────────────\n\n/**\n * The name a member is shown by. ONE rule for every body that writes it:\n * onboarding's finish, the profile patch and the personal-details patch, so a\n * name one accepts the others can never refuse. Plain bounds, no custom\n * message: `too_small` with minimum 1 already says \"required\", and the client\n * words it.\n */\nexport const displayNameSchema = z.string().trim().min(1).max(DISPLAY_NAME_MAX);\n\n// ─── Phone ───────────────────────────────────────────────────────────────────\n\n/**\n * Indian mobile number: ten raw digits, no country code, matching the standard\n * used across this family. Display adds the `+91`.\n *\n * ⚠️ WHERE IT IS STORED IS NOT A SCHEMA QUESTION, and it has been ruled: the\n * phone lives on the account mirror, never as a second copy on the profile.\n * Two stored copies drift the first time somebody edits one, and the profile's\n * would be the copy nobody keeps in sync.\n */\nexport const phoneSchema = z\n  .string()\n  .trim()\n  .regex(/^[6-9]\\d{9}$/, VALIDATION_MESSAGE.phoneInvalid);\nexport type Phone = z.infer<typeof phoneSchema>;\n\n// ─── Location ────────────────────────────────────────────────────────────────\n\n/**\n * Where the founder is based. City and country are what Discover filters on.\n *\n * ONE SHAPE for the profile, the Me tab's patch, onboarding's finish and the\n * location suggestion. It was written out three times until 0.2.0, the same\n * kind of copy that let the profile model lose Instagram.\n *\n * ⚠ `country` is REQUIRED and has NO default. A default here (it used to be\n * `'India'`) is destructive on every write path: a founder in Berlin who\n * corrects only their city would be moved to India by a value they never saw.\n * A body that carries a location carries the whole location. Every stored\n * location has a country, because the model requires one, so the read side\n * loses nothing.\n *\n * This is a DECLARED location, not a GPS reading. Jansathi's rule applies\n * here too: never write a declared location from a GPS capture.\n */\nexport const locationSchema = z.object({\n  city: z.string().trim().min(1).max(CITY_MAX),\n  state: optionalTrimmedString(STATE_MAX),\n  country: z.string().trim().min(1).max(COUNTRY_MAX),\n});\nexport type FounderLocation = z.infer<typeof locationSchema>;\n\n/**\n * `GET /api/v1/location/areas/reverse?lat=&lng=`: plain decimal degrees.\n *\n * A QUERY, so coercion is right here: everything in a URL is a string. An\n * emptied parameter is \"missing\", never 0, because 0,0 is a real place in the\n * Gulf of Guinea and would be looked up rather than refused.\n */\nexport const coordinatesQuerySchema = z.object({\n  lat: z.preprocess(emptyStringToUndefined, z.coerce.number().min(-90).max(90)),\n  lng: z.preprocess(emptyStringToUndefined, z.coerce.number().min(-180).max(180)),\n});\nexport type CoordinatesQuery = z.infer<typeof coordinatesQuerySchema>;\nexport type CoordinatesQueryInput = z.input<typeof coordinatesQuerySchema>;\n\n/**\n * The city these coordinates look like, for the member to CONFIRM, or `null`\n * when the lookup could not place them confidently (or they are outside India,\n * whose area data is all there is). A suggestion, never a write: only what the\n * member then submits becomes their location.\n */\nexport const suggestedLocationSchema = locationSchema.nullable();\nexport type SuggestedLocation = z.infer<typeof suggestedLocationSchema>;\n\n// ─── Pagination ──────────────────────────────────────────────────────────────\n\n/**\n * Cursor pagination query. Feed and Discover both use it.\n *\n * Cursor, not page number: the community feed changes under the reader, and an\n * offset would repeat or skip posts as new ones land.\n */\nexport const paginationQuerySchema = z.object({\n  /**\n   * `?limit=` with nothing after it is treated as \"not provided\", not as a\n   * validation failure. A client that clears the control sends the empty\n   * string, and `z.coerce.number()` turns that into 0, which then fails\n   * `.min(1)`: the member sees a 400 for a page they never asked to size.\n   */\n  limit: z.preprocess(\n    emptyStringToUndefined,\n    z.coerce.number().int().min(1).max(PAGE_SIZE_MAX).default(PAGE_SIZE_DEFAULT),\n  ),\n  cursor: z.string().trim().min(1).optional(),\n});\nexport type PaginationQuery = z.infer<typeof paginationQuerySchema>;\n/** What a client may put IN the URL: every field optional, numbers as strings. */\nexport type PaginationQueryInput = z.input<typeof paginationQuerySchema>;\n"]}
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/core/common.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAW,EAAE;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACvE,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,EAAE,CACvD,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEpF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAsB,KAAQ,EAAE,GAAW,EAAE,EAAE,CAC5E,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEzC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,KAAK,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,SAAS,CAAC;KACtD,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAIrC,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC;IACjC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM;IAC1B,KAAK,EAAE,kBAAkB,CAAC,UAAU;CACrC,CAAC,CAAC;AAGH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAG7D;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,KAAwB;IAC/D,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAwB,EAAE,OAAe,EAAE,EAAE,CAC1E,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAU,CAAC;AAC7F,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;AAG1F;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,aAAa;IACb,iBAAiB;IACjB,eAAe;IACf,UAAU;IACV,+CAA+C;IAC/C,sBAAsB;IACtB,0BAA0B;CAClB,CAAC;AAEX;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,CAAE,aAAmC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,MAAM,EAAE,GACN,IAAI,KAAK,UAAU;QACjB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACpC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ;YACvB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YACzB,CAAC,CAAC,CAAC,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC5E,OAAO,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAE/B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,WAAW,EAAE;IACd,4EAA4E;KAC3E,GAAG,CAAC,YAAY,CAAC;KACjB,GAAG,CAAC,YAAY,CAAC;KACjB,KAAK,CAAC,kCAAkC,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;AAGjF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,OAAO;IACP,OAAO;IACP,KAAK;IACL,MAAM;IACN,UAAU;IACV,MAAM;IACN,SAAS;IACT,eAAe;IACf,MAAM;IACN,MAAM;IACN,IAAI;IACJ,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,UAAU;IACV,OAAO;IACP,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,MAAM;CACE,CAAC;AAEX,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,kBAAkB,CAAC,CAAC;AAErD,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE;IACvF,KAAK,EAAE,kBAAkB,CAAC,gBAAgB;CAC3C,CAAC,CAAC;AAEH,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,MAAM;IACN,YAAY;IACZ,KAAK;IACL,UAAU;IACV,MAAM;IACN,eAAe;IACf,YAAY;IACZ,QAAQ;CACA,CAAC;AACX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAG/D;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU;IACV,OAAO;IACP,UAAU;IACV,UAAU;IACV,SAAS;IACT,KAAK;IACL,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,eAAe;IACf,aAAa;IACb,OAAO;IACP,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,OAAO;IACP,OAAO;CACC,CAAC;AACX,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAGtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,aAAa;IACb,SAAS;IACT,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,OAAO;IACP,WAAW;IACX,YAAY;IACZ,SAAS;IACT,OAAO;IACP,WAAW;IACX,cAAc;IACd,UAAU;IACV,aAAa;IACb,WAAW;CACH,CAAC;AACX,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAGhD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,QAAQ;IACR,cAAc;IACd,YAAY;IACZ,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IACjB,eAAe;IACf,eAAe;IACf,2EAA2E;IAC3E,yEAAyE;IACzE,0EAA0E;IAC1E,kEAAkE;IAClE,+DAA+D;IAC/D,cAAc;IACd,cAAc;IACd,eAAe;IACf,oBAAoB;IACpB,cAAc;IACd,wBAAwB;IACxB,eAAe;CACP,CAAC;AACX,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAG9C,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAU,CAAC;AACvF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAGlD,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAEhF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,KAAK,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;QACnC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,cAAc,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;AAG1D,gFAAgF;AAEhF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC5C,KAAK,EAAE,qBAAqB,CAAC,SAAS,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;CACnD,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;CAChF,CAAC,CAAC;AAIH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC;AAGjE,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C;;;;;OAKG;IACH,KAAK,EAAE,CAAC,CAAC,UAAU,CACjB,sBAAsB,EACtB,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAC7E;IACD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — Shared helpers and core enums\n *\n * The stable building blocks reused across every Founder Circle schema.\n * Anything that both the backend and a client need to agree on lives here.\n *\n * @module founder-schema/core/common\n */\n\nimport { z } from 'zod';\nimport {\n  CITY_MAX,\n  COUNTRY_MAX,\n  DISPLAY_NAME_MAX,\n  LINK_URL_MAX,\n  PAGE_SIZE_DEFAULT,\n  PAGE_SIZE_MAX,\n  STATE_MAX,\n} from './limits.js';\nimport { VALIDATION_MESSAGE } from './validation.js';\n\n// ─── String helpers ──────────────────────────────────────────────────────────\n\n/**\n * Converts empty / whitespace-only strings to `undefined` so Zod `.optional()`\n * treats them as \"not provided\".\n *\n * Why this exists: an HTML form submits `\"\"` for a cleared field, and without\n * this an optional field would be stored as an empty string rather than left\n * alone. Jansathi shipped that bug in dating onboarding.\n */\nexport const emptyStringToUndefined = (value: unknown): unknown => {\n  if (typeof value === 'string' && value.trim() === '') return undefined;\n  return value;\n};\n\n/** Optional trimmed string. Empty strings are coerced to `undefined`. */\nexport const optionalTrimmedString = (maxLength = 100) =>\n  z.preprocess(emptyStringToUndefined, z.string().trim().max(maxLength).optional());\n\n/**\n * A repeated query param (`?skill=growth&skill=sales`) or a single value,\n * always as an array, at most `max` values.\n *\n * Express gives `string` for one occurrence and `string[]` for several, so\n * without this the same URL shape parses two different ways. EMPTY values are\n * dropped (`?industry=` is a select the member just reset): asking for fewer\n * filters is never a 400.\n */\nexport const multiValueQuery = <T extends z.ZodType>(inner: T, max: number) =>\n  z.preprocess((value) => {\n    if (value === undefined || value === null) return undefined;\n    const list = (Array.isArray(value) ? value : [value]).filter((v) => v !== '');\n    return list.length > 0 ? list : undefined;\n  }, z.array(inner).max(max).optional());\n\n/** A Mongo ObjectId as it crosses the wire: 24 lowercase hex characters. */\nexport const objectIdSchema = z\n  .string()\n  .regex(/^[0-9a-f]{24}$/i, VALIDATION_MESSAGE.invalidId)\n  .transform((v) => v.toLowerCase());\n/** Named for what it is on the wire, so it never collides with Mongoose's `ObjectId`. */\nexport type ObjectIdString = z.infer<typeof objectIdSchema>;\n\n// ─── URLs ────────────────────────────────────────────────────────────────────\n\n/**\n * A URL safe to store and, after the consumer's own check, to render.\n *\n * Use this for EVERY member-supplied URL. Never bare `z.url()`: it accepts any\n * scheme the URL parser accepts, so `javascript:alert(document.cookie)`,\n * `data:text/html,<script>...`, `vbscript:` and `file:///etc/passwd` all pass.\n * Each of those is stored XSS the moment a client renders it as an `href`, and\n * `data:` is the same in an `<img src>`.\n *\n * `hostname` is restricted too, not only the scheme. A bare host like\n * `localhost` or a literal IP is refused, which closes server-side request\n * forgery: this product runs on EC2 with an instance role, so a member-supplied\n * `http://169.254.169.254/latest/meta-data/` that anything server-side ever\n * fetches is a credential read.\n *\n * Validating here is necessary and not sufficient. A consumer still treats a\n * stored URL as untrusted at render time, because rows written before this\n * existed were never checked.\n *\n * ⚠️ IF THIS EVER GROWS A HOST ALLOWLIST, compare the PARSED hostname for\n * exact equality. Never `includes`, never `endsWith`, never a regex over the\n * whole URL. Each of these is a real bypass of a naive \"is it YouTube\" check,\n * and all three read as obviously fine:\n *\n *   https://evil.example/?next=youtube.com/watch  contains the string\n *   youtube.com.evil.example                      starts with it\n *   youtu.be.evil.example                         a suffix check passes it\n *\n * The same mistake in the opposite direction to the `javascript:` hole: there\n * the scheme was too permissive, here the host check only LOOKS strict.\n * (krish hit this rendering inline video, 2026-09-21, and handles it by parsing\n * and comparing the hostname exactly.)\n */\nexport const safeUrlSchema = z.url({\n  protocol: /^https?$/,\n  hostname: z.regexes.domain,\n  error: VALIDATION_MESSAGE.urlInvalid,\n});\nexport type SafeUrl = z.infer<typeof safeUrlSchema>;\n\n/**\n * A URL a member TYPES: `safeUrlSchema` plus the `LINK_URL_MAX` ceiling, so\n * every member URL carries the same cap and no consumer has to remember it.\n *\n * Two schemas, not one, because the cap is about what a person types and is\n * wrong for what the server reads from elsewhere. Until 0.2.0 there was only\n * this one, and it capped a link preview's CDN image URL too: one 314-character\n * `imageUrl` would have failed a whole feed page.\n */\nexport const httpUrlSchema = safeUrlSchema.max(LINK_URL_MAX);\nexport type HttpUrl = z.infer<typeof httpUrlSchema>;\n\n/**\n * True when `url` parses and its hostname is EXACTLY one of `hosts`\n * (lowercase). The one host check in this package, written the way the warning\n * on `safeUrlSchema` demands: parsed, compared for equality, never matched as\n * text. `youtube.com.evil.example` and `evil.example/?u=youtube.com` are refused.\n */\nexport function isUrlOnHost(url: string, hosts: readonly string[]): boolean {\n  try {\n    return hosts.includes(new URL(url).hostname.toLowerCase());\n  } catch {\n    return false;\n  }\n}\n\n/** A typed URL (`httpUrlSchema`) that must also live on one of `hosts`. */\nexport const httpUrlOnHosts = (hosts: readonly string[], message: string) =>\n  httpUrlSchema.refine((url) => isUrlOnHost(url, hosts), { error: message });\n\n/**\n * What a product needs before it can be listed in Discover (0.6.0). Here, not\n * in the products domain, because an error's details carry it\n * (`PRODUCT_NOT_LISTABLE` -> `details.missing`) and core never imports a domain.\n */\nexport const PRODUCT_LISTING_REQUIREMENT_VALUES = ['logo', 'tagline', 'screenshot'] as const;\nexport const productListingRequirementSchema = z.enum(PRODUCT_LISTING_REQUIREMENT_VALUES);\nexport type ProductListingRequirement = z.infer<typeof productListingRequirementSchema>;\n\n/**\n * The hosts a shared video may come from. The user's ruling (2026-09-21): video\n * is shared as a link and played in the card, never uploaded. The web plays it\n * through youtube-nocookie.com, the one video frame its CSP admits.\n */\nexport const YOUTUBE_HOSTS = [\n  'youtube.com',\n  'www.youtube.com',\n  'm.youtube.com',\n  'youtu.be',\n  // The privacy-mode player's own links (0.7.0).\n  'youtube-nocookie.com',\n  'www.youtube-nocookie.com',\n] as const;\n\n/**\n * The 11-character id of a YouTube VIDEO link, or null for anything else (a\n * channel, a playlist, the home page, another site): what a page can embed.\n * Reads `youtu.be/<id>`, `/watch?v=<id>`, and `/shorts/`, `/embed/`, `/live/<id>`\n * on a `YOUTUBE_HOSTS` host (0.7.0).\n */\nexport function youtubeVideoId(url: string): string | null {\n  let u: URL;\n  try {\n    u = new URL(url);\n  } catch {\n    return null;\n  }\n  const host = u.hostname.toLowerCase();\n  if (!(YOUTUBE_HOSTS as readonly string[]).includes(host)) return null;\n  const id =\n    host === 'youtu.be'\n      ? (u.pathname.split('/')[1] ?? null)\n      : u.pathname === '/watch'\n        ? u.searchParams.get('v')\n        : (/^\\/(?:shorts|embed|live)\\/([^/]+)/.exec(u.pathname)?.[1] ?? null);\n  return id && /^[A-Za-z0-9_-]{11}$/.test(id) ? id : null;\n}\n\n// ─── Username ────────────────────────────────────────────────────────────────\n\n/**\n * Public handle. Derived by the server at onboarding, changeable later.\n *\n * Rules are deliberately narrow because the handle appears in URLs and in\n * mentions: lowercase letters, digits, underscore and a single dot, 3 to 30\n * characters, must start with a letter.\n *\n * This is the FORMAT, and it is what every read shape uses. A handle being\n * CHOSEN must also not be reserved: that is `chosenUsernameSchema`.\n */\nexport const USERNAME_MIN = 3;\nexport const USERNAME_MAX = 30;\n\nexport const usernameSchema = z\n  .string()\n  .trim()\n  .toLowerCase()\n  // Plain bounds: the client words them from the issue's own minimum/maximum.\n  .min(USERNAME_MIN)\n  .max(USERNAME_MAX)\n  .regex(/^[a-z][a-z0-9_]*(\\.[a-z0-9_]+)?$/, VALIDATION_MESSAGE.usernameInvalid);\nexport type Username = z.infer<typeof usernameSchema>;\n\n/**\n * Handles this product keeps for itself: route names a handle would shadow,\n * and words that would let a member pass as staff.\n *\n * ⚠ HERE, IN THE CONTRACT, since 0.2.0. It used to live in the backend so it\n * could grow without a publish, and nothing ever read it: the server derived\n * handles without checking it, so a member called \"Support\" was handed\n * `support`. One list, read by the server when it derives a handle and by any\n * form that lets a member choose one, is worth a publish per addition.\n *\n * Matched exactly, after lowercasing.\n */\nexport const RESERVED_USERNAMES = [\n  'admin',\n  'about',\n  'api',\n  'chat',\n  'discover',\n  'feed',\n  'founder',\n  'foundercircle',\n  'help',\n  'home',\n  'me',\n  'meetup',\n  'moderator',\n  'onboarding',\n  'settings',\n  'staff',\n  'superadmin',\n  'support',\n  'system',\n  'team',\n] as const;\n\nconst RESERVED = new Set<string>(RESERVED_USERNAMES);\n\nexport function isReservedUsername(handle: string): boolean {\n  return RESERVED.has(handle.trim().toLowerCase());\n}\n\n/**\n * A handle a member is CHOOSING: the format, and not reserved.\n *\n * ⚠ Not used on read shapes, deliberately. A handle stored before the reserved\n * check existed must still READ, or one member's old handle would fail every\n * page that shows their name.\n */\nexport const chosenUsernameSchema = usernameSchema.refine((u) => !isReservedUsername(u), {\n  error: VALIDATION_MESSAGE.usernameReserved,\n});\n\n// ─── Founder-facing enums ────────────────────────────────────────────────────\n\n/**\n * Stage of the founder's current venture.\n *\n * Ordered from earliest to latest so a range filter can compare by index. Add\n * new stages at the END or the stored ordinal of existing rows shifts.\n */\nexport const STARTUP_STAGE_VALUES = [\n  'idea',\n  'validation',\n  'mvp',\n  'pre_seed',\n  'seed',\n  'series_a_plus',\n  'profitable',\n  'exited',\n] as const;\nexport const startupStageSchema = z.enum(STARTUP_STAGE_VALUES);\nexport type StartupStage = z.infer<typeof startupStageSchema>;\n\n/**\n * Industry the venture operates in. Kept as a closed list so Discover filters\n * are a single indexed equality match rather than a text search.\n */\nexport const INDUSTRY_VALUES = [\n  'agritech',\n  'ai_ml',\n  'b2b_saas',\n  'consumer',\n  'climate',\n  'd2c',\n  'deeptech',\n  'edtech',\n  'fintech',\n  'gaming',\n  'healthtech',\n  'logistics',\n  'manufacturing',\n  'marketplace',\n  'media',\n  'mobility',\n  'proptech',\n  'robotics',\n  'services',\n  'space',\n  'other',\n] as const;\nexport const industrySchema = z.enum(INDUSTRY_VALUES);\nexport type Industry = z.infer<typeof industrySchema>;\n\n/**\n * What the founder brings. Free-text skills were considered and rejected: two\n * people typing \"growth\" and \"Growth Marketing\" would never match each other in\n * a filter, and the Discover tab is the whole point of the product.\n */\nexport const SKILL_VALUES = [\n  'engineering',\n  'product',\n  'design',\n  'data',\n  'growth',\n  'sales',\n  'marketing',\n  'operations',\n  'finance',\n  'legal',\n  'hr_people',\n  'supply_chain',\n  'research',\n  'fundraising',\n  'community',\n] as const;\nexport const skillSchema = z.enum(SKILL_VALUES);\nexport type Skill = z.infer<typeof skillSchema>;\n\n/**\n * What the member is here for. ONE list, replacing three.\n *\n * This was `lookingFor` with six values. The design draws eight \"Goals &\n * Passion\" tiles and four more on the business step; all three were the same\n * idea at three grains, and shipping them together would have meant nobody\n * could say which one Discover filters on - the answer settled by whichever\n * query got written first. Merged on hary's ruling, 2026-09-21, while there\n * were still no rows in any database.\n *\n * ⚠️ Stored per member and used as a Mongoose enum. Append only; removing a\n * value orphans documents already saved with it.\n *\n * ⚠️ `start_company` READS ODDLY next to its neighbours and is correct. It was\n * queried on the grounds that it restates `venture.stage: 'idea'`; it does not,\n * and the reason is worth keeping so nobody re-opens it. Inferring it from the\n * venture works only for a member who ALREADY HAS a venture row, and somebody\n * who wants to start a company is precisely the member with no venture at all,\n * so there is nothing to infer from. It also cannot express a founder with a\n * running company who wants to start another. The others were all asks of other\n * people and this one an ask of the product, which is the whole of the oddness.\n * (hary, 2026-09-21.) Since 0.16.0 the list also holds offers (`mentor_others`,\n * `invest_in_startups`) and a second ask of the product (`attend_events`).\n */\nexport const GOAL_VALUES = [\n  'find_cofounder',\n  'find_investors',\n  'find_customers',\n  'hiring',\n  'partnerships',\n  'mentorship',\n  'grow_network',\n  'business_ideas',\n  'market_insights',\n  'learn_startup',\n  'start_company',\n  // 0.16.0 (the user, 2026-10-18: \"a few more ... cover most of the goals\"):\n  // the journey's own asks (feedback on an idea, early testers), the other\n  // side of mentorship and of fundraising (mentoring, investing), and three\n  // more a founder network is asked for: joining a startup, finding\n  // service providers, and events. Appended, per the rule above.\n  'get_feedback',\n  'find_testers',\n  'mentor_others',\n  'invest_in_startups',\n  'join_startup',\n  'find_service_providers',\n  'attend_events',\n] as const;\nexport const goalSchema = z.enum(GOAL_VALUES);\nexport type Goal = z.infer<typeof goalSchema>;\n\n// ─── Gender ──────────────────────────────────────────────────────────────────\n\n/**\n * Demographic only. Nothing here computes anything from it, unlike the sibling\n * gym product where gender feeds body-metric maths.\n *\n * Takes the family's three values and ADDS one rather than renaming any: a\n * network for founders should let somebody decline the question without having\n * to describe themselves as \"other\".\n */\nexport const GENDER_VALUES = ['male', 'female', 'other', 'prefer_not_to_say'] as const;\nexport const genderSchema = z.enum(GENDER_VALUES);\nexport type Gender = z.infer<typeof genderSchema>;\n\n// ─── Display name ────────────────────────────────────────────────────────────\n\n/**\n * The name a member is shown by. ONE rule for every body that writes it:\n * onboarding's finish, the profile patch and the personal-details patch, so a\n * name one accepts the others can never refuse. Plain bounds, no custom\n * message: `too_small` with minimum 1 already says \"required\", and the client\n * words it.\n */\nexport const displayNameSchema = z.string().trim().min(1).max(DISPLAY_NAME_MAX);\n\n/**\n * A full name's first and last name, DEDUCED, never asked (the user,\n * 2026-10-18: onboarding asks one \"Full name\" and works the two out from the\n * space). The first word is the first name and everything after the first\n * space is the last name, kept as written (\"Asha Rao Kulkarni\" is Asha and\n * Rao Kulkarni).\n *\n * ⚠ A ONE-WORD NAME IS A WHOLE NAME. Many people in India go by a single name,\n * so `lastName` is then `''`, and nothing may refuse it for that.\n *\n * Derived wherever it is needed, never stored as a second copy of the name:\n * `displayName` stays the one owner of a member's name, so a rename can never\n * leave a stale first name behind.\n */\nexport function splitFullName(fullName: string): { firstName: string; lastName: string } {\n  const name = fullName.trim().replace(/\\s+/g, ' ');\n  const space = name.indexOf(' ');\n  return space === -1\n    ? { firstName: name, lastName: '' }\n    : { firstName: name.slice(0, space), lastName: name.slice(space + 1) };\n}\n\n// ─── Phone ───────────────────────────────────────────────────────────────────\n\n/**\n * Indian mobile number: ten raw digits, no country code, matching the standard\n * used across this family. Display adds the `+91`.\n *\n * ⚠️ WHERE IT IS STORED IS NOT A SCHEMA QUESTION, and it has been ruled: the\n * phone lives on the account mirror, never as a second copy on the profile.\n * Two stored copies drift the first time somebody edits one, and the profile's\n * would be the copy nobody keeps in sync.\n */\nexport const phoneSchema = z\n  .string()\n  .trim()\n  .regex(/^[6-9]\\d{9}$/, VALIDATION_MESSAGE.phoneInvalid);\nexport type Phone = z.infer<typeof phoneSchema>;\n\n// ─── Location ────────────────────────────────────────────────────────────────\n\n/**\n * Where the founder is based. City and country are what Discover filters on.\n *\n * ONE SHAPE for the profile, the Me tab's patch, onboarding's finish and the\n * location suggestion. It was written out three times until 0.2.0, the same\n * kind of copy that let the profile model lose Instagram.\n *\n * ⚠ `country` is REQUIRED and has NO default. A default here (it used to be\n * `'India'`) is destructive on every write path: a founder in Berlin who\n * corrects only their city would be moved to India by a value they never saw.\n * A body that carries a location carries the whole location. Every stored\n * location has a country, because the model requires one, so the read side\n * loses nothing.\n *\n * This is a DECLARED location, not a GPS reading. Jansathi's rule applies\n * here too: never write a declared location from a GPS capture.\n */\nexport const locationSchema = z.object({\n  city: z.string().trim().min(1).max(CITY_MAX),\n  state: optionalTrimmedString(STATE_MAX),\n  country: z.string().trim().min(1).max(COUNTRY_MAX),\n});\nexport type FounderLocation = z.infer<typeof locationSchema>;\n\n/**\n * `GET /api/v1/location/areas/reverse?lat=&lng=`: plain decimal degrees.\n *\n * A QUERY, so coercion is right here: everything in a URL is a string. An\n * emptied parameter is \"missing\", never 0, because 0,0 is a real place in the\n * Gulf of Guinea and would be looked up rather than refused.\n */\nexport const coordinatesQuerySchema = z.object({\n  lat: z.preprocess(emptyStringToUndefined, z.coerce.number().min(-90).max(90)),\n  lng: z.preprocess(emptyStringToUndefined, z.coerce.number().min(-180).max(180)),\n});\nexport type CoordinatesQuery = z.infer<typeof coordinatesQuerySchema>;\nexport type CoordinatesQueryInput = z.input<typeof coordinatesQuerySchema>;\n\n/**\n * The city these coordinates look like, for the member to CONFIRM, or `null`\n * when the lookup could not place them confidently (or they are outside India,\n * whose area data is all there is). A suggestion, never a write: only what the\n * member then submits becomes their location.\n */\nexport const suggestedLocationSchema = locationSchema.nullable();\nexport type SuggestedLocation = z.infer<typeof suggestedLocationSchema>;\n\n// ─── Pagination ──────────────────────────────────────────────────────────────\n\n/**\n * Cursor pagination query. Feed and Discover both use it.\n *\n * Cursor, not page number: the community feed changes under the reader, and an\n * offset would repeat or skip posts as new ones land.\n */\nexport const paginationQuerySchema = z.object({\n  /**\n   * `?limit=` with nothing after it is treated as \"not provided\", not as a\n   * validation failure. A client that clears the control sends the empty\n   * string, and `z.coerce.number()` turns that into 0, which then fails\n   * `.min(1)`: the member sees a 400 for a page they never asked to size.\n   */\n  limit: z.preprocess(\n    emptyStringToUndefined,\n    z.coerce.number().int().min(1).max(PAGE_SIZE_MAX).default(PAGE_SIZE_DEFAULT),\n  ),\n  cursor: z.string().trim().min(1).optional(),\n});\nexport type PaginationQuery = z.infer<typeof paginationQuerySchema>;\n/** What a client may put IN the URL: every field optional, numbers as strings. */\nexport type PaginationQueryInput = z.input<typeof paginationQuerySchema>;\n"]}

package/dist/core/errors.d.ts

@@ -27,7 +27,7 @@ import { z } from 'zod';
  * As a tuple, the way `GENDER_VALUES` is, so a consumer can iterate it (a
  * translation-coverage test does exactly that) and TypeScript keeps the union.
  */
-export declare const API_ERROR_CODE_VALUES: readonly ["INTERNAL_ERROR", "VALIDATION_ERROR", "NOT_FOUND", "CONFLICT", "RATE_LIMITED", "SERVICE_UNAVAILABLE", "UNAUTHORIZED", "INVALID_TOKEN", "TOKEN_EXPIRED", "SESSION_INVALIDATED", "FORBIDDEN", "ONBOARDING_INCOMPLETE", "ALREADY_ONBOARDED", "UNDER_AGE", "UPLOAD_NOT_ATTACHABLE", "UPLOAD_TOO_LARGE", "UPLOAD_WRONG_TYPE", "UPLOAD_NOT_RECEIVED", "UPLOAD_PROCESSING", "UPLOAD_UNREADABLE", "UPLOAD_TOO_MANY_PIXELS", "UPLOAD_LIMIT_REACHED", "UPLOAD_IN_USE", "EDIT_WINDOW_CLOSED", "POLL_NOT_EDITABLE", "POLL_CLOSED", "POLL_CHOICE_INVALID", "REPLY_TOO_DEEP", "CANNOT_REPORT_OWN", "FEEDBACK_NOT_MARKABLE", "CANNOT_REPOST_OWN", "CANNOT_REPOST_A_REPOST", "ALREADY_REPOSTED", "PRODUCT_LIMIT_REACHED", "PRODUCT_NOT_LISTABLE", "PRODUCT_ARCHIVED", "PRODUCT_NOT_YOURS", "PRODUCT_ALREADY_MEMBER", "PRODUCT_MEMBER_NOT_INVITABLE", "PRODUCT_NOT_ON_TEAM", "PRODUCT_OWNER_MUST_TRANSFER", "PRODUCT_OWN_TEAM", "TESTER_NOT_ELIGIBLE", "PRODUCT_PAUSED", "MEMBERSHIP_REQUIRED", "PLAN_REQUIRED", "ALREADY_MEMBER", "MEMBERSHIP_NOT_REVOCABLE", "COUPON_INVALID", "COUPON_NOT_APPLICABLE", "COUPON_EXHAUSTED", "COUPON_ALREADY_USED", "COUPON_CODE_TAKEN", "USERNAME_TAKEN", "COUPON_FOUNDING_EXISTS", "COUPON_FOUNDING_RETIRED", "PLAN_UPGRADE_INSTEAD", "PLAN_NOTHING_TO_UPGRADE", "PLAN_TERM_LIMIT", "PLAN_CHANGED", "PAYMENTS_UNAVAILABLE", "PAYMENT_NOT_VERIFIED", "ORDER_EXPIRED", "REFUND_WINDOW_CLOSED", "PAYMENT_NOT_REFUNDABLE", "REFUND_FAILED", "MESSAGE_ALLOWANCE_EXHAUSTED", "MESSAGE_ALLOWANCE_UNCONFIRMED", "MESSAGE_NOT_ACCEPTED", "COMMUNITY_JOIN_REQUIRED", "COMMUNITY_NAME_TAKEN", "COMMUNITY_ALREADY_MEMBER", "COMMUNITY_MEMBER_NOT_INVITABLE", "COMMUNITY_MEMBER_BANNED", "COMMUNITY_INVITE_NOT_NEEDED", "COMMUNITY_LAST_ADMIN", "COMMUNITY_ARCHIVED", "COMMUNITY_EXPOSURE_UNCONFIRMED", "COMMUNITY_PINS_FULL", "COMMUNITY_ANNOUNCE_TOO_SOON", "COMMUNITY_CONTENT_NOT_REPOSTABLE", "COMMUNITY_SUGGESTIONS_FULL", "COMMUNITY_SUGGESTION_DECIDED", "REVIEW_EXISTS", "REVIEW_OWN_VOTE", "MODERATION_ACTION_INVALID", "CHAT_WITH_SELF", "ACCOUNT_SUSPENDED", "ROLE_NOT_HELD", "MPIN_NOT_SET", "MPIN_ALREADY_SET", "MPIN_INCORRECT", "MPIN_LOCKED", "CANNOT_CHANGE_OWN_ROLES", "ROLE_NOT_GRANTABLE", "CANNOT_CHANGE_OWN_CAPABILITIES", "CAPABILITY_NOT_GRANTABLE", "TICKET_FULL", "SAVED_REPLIES_FULL"];
+export declare const API_ERROR_CODE_VALUES: readonly ["INTERNAL_ERROR", "VALIDATION_ERROR", "NOT_FOUND", "CONFLICT", "RATE_LIMITED", "SERVICE_UNAVAILABLE", "UNAUTHORIZED", "INVALID_TOKEN", "TOKEN_EXPIRED", "SESSION_INVALIDATED", "FORBIDDEN", "ONBOARDING_INCOMPLETE", "ALREADY_ONBOARDED", "UNDER_AGE", "UPLOAD_NOT_ATTACHABLE", "UPLOAD_TOO_LARGE", "UPLOAD_WRONG_TYPE", "UPLOAD_NOT_RECEIVED", "UPLOAD_PROCESSING", "UPLOAD_UNREADABLE", "UPLOAD_TOO_MANY_PIXELS", "UPLOAD_LIMIT_REACHED", "UPLOAD_IN_USE", "EDIT_WINDOW_CLOSED", "POLL_NOT_EDITABLE", "POLL_CLOSED", "POLL_CHOICE_INVALID", "REPLY_TOO_DEEP", "CANNOT_REPORT_OWN", "FEEDBACK_NOT_MARKABLE", "CANNOT_REPOST_OWN", "CANNOT_REPOST_A_REPOST", "ALREADY_REPOSTED", "PRODUCT_LIMIT_REACHED", "PRODUCT_NOT_LISTABLE", "PRODUCT_ARCHIVED", "PRODUCT_NOT_YOURS", "PRODUCT_ALREADY_MEMBER", "PRODUCT_MEMBER_NOT_INVITABLE", "PRODUCT_NOT_ON_TEAM", "PRODUCT_OWNER_MUST_TRANSFER", "PRODUCT_OWN_TEAM", "TESTER_NOT_ELIGIBLE", "PRODUCT_PAUSED", "MEMBERSHIP_REQUIRED", "PLAN_REQUIRED", "ALREADY_MEMBER", "MEMBERSHIP_NOT_REVOCABLE", "COUPON_INVALID", "COUPON_NOT_APPLICABLE", "COUPON_EXHAUSTED", "COUPON_ALREADY_USED", "COUPON_CODE_TAKEN", "USERNAME_TAKEN", "COUPON_FOUNDING_EXISTS", "COUPON_FOUNDING_RETIRED", "PLAN_UPGRADE_INSTEAD", "PLAN_NOTHING_TO_UPGRADE", "PLAN_TERM_LIMIT", "PLAN_CHANGED", "PAYMENTS_UNAVAILABLE", "PAYMENT_NOT_VERIFIED", "ORDER_EXPIRED", "REFUND_WINDOW_CLOSED", "PAYMENT_NOT_REFUNDABLE", "REFUND_FAILED", "MESSAGE_ALLOWANCE_EXHAUSTED", "MESSAGE_ALLOWANCE_UNCONFIRMED", "MESSAGE_NOT_ACCEPTED", "COMMUNITY_JOIN_REQUIRED", "COMMUNITY_NAME_TAKEN", "COMMUNITY_ALREADY_MEMBER", "COMMUNITY_MEMBER_NOT_INVITABLE", "COMMUNITY_MEMBER_BANNED", "COMMUNITY_INVITE_NOT_NEEDED", "COMMUNITY_LAST_ADMIN", "COMMUNITY_ARCHIVED", "COMMUNITY_EXPOSURE_UNCONFIRMED", "COMMUNITY_PINS_FULL", "COMMUNITY_ANNOUNCE_TOO_SOON", "COMMUNITY_CONTENT_NOT_REPOSTABLE", "COMMUNITY_SUGGESTIONS_FULL", "COMMUNITY_SUGGESTION_DECIDED", "REVIEW_EXISTS", "REVIEW_OWN_VOTE", "MODERATION_ACTION_INVALID", "CHAT_WITH_SELF", "ACCOUNT_SUSPENDED", "ROLE_NOT_HELD", "MPIN_NOT_SET", "MPIN_ALREADY_SET", "MPIN_INCORRECT", "MPIN_LOCKED", "CANNOT_CHANGE_OWN_ROLES", "ROLE_NOT_GRANTABLE", "CANNOT_CHANGE_OWN_CAPABILITIES", "CAPABILITY_NOT_GRANTABLE", "TICKET_FULL", "SAVED_REPLIES_FULL", "NOT_LAUNCHED", "WAITLIST_CLOSED", "WAITLIST_STAFF", "WAITLIST_PLACE_USED"];
 export declare const apiErrorCodeSchema: z.ZodEnum<{
     INTERNAL_ERROR: "INTERNAL_ERROR";
     VALIDATION_ERROR: "VALIDATION_ERROR";
@@ -128,6 +128,10 @@ export declare const apiErrorCodeSchema: z.ZodEnum<{
     CAPABILITY_NOT_GRANTABLE: "CAPABILITY_NOT_GRANTABLE";
     TICKET_FULL: "TICKET_FULL";
     SAVED_REPLIES_FULL: "SAVED_REPLIES_FULL";
+    NOT_LAUNCHED: "NOT_LAUNCHED";
+    WAITLIST_CLOSED: "WAITLIST_CLOSED";
+    WAITLIST_STAFF: "WAITLIST_STAFF";
+    WAITLIST_PLACE_USED: "WAITLIST_PLACE_USED";
 }>;
 export type ApiErrorCode = z.infer<typeof apiErrorCodeSchema>;
 /** The same codes by name: `API_ERROR_CODE.POLL_CLOSED`. */
@@ -231,5 +235,9 @@ export declare const API_ERROR_CODE: {
     CAPABILITY_NOT_GRANTABLE: "CAPABILITY_NOT_GRANTABLE";
     TICKET_FULL: "TICKET_FULL";
     SAVED_REPLIES_FULL: "SAVED_REPLIES_FULL";
+    NOT_LAUNCHED: "NOT_LAUNCHED";
+    WAITLIST_CLOSED: "WAITLIST_CLOSED";
+    WAITLIST_STAFF: "WAITLIST_STAFF";
+    WAITLIST_PLACE_USED: "WAITLIST_PLACE_USED";
 };
 //# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,qBAAqB,ksEAsUxB,CAAC;AAEX,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAgC,CAAC;AAChE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,4DAA4D;AAC5D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAA0B,CAAC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,qBAAqB,8wEA0VxB,CAAC;AAEX,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAgC,CAAC;AAChE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,4DAA4D;AAC5D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAA0B,CAAC"}

package/dist/core/errors.js

@@ -340,6 +340,25 @@ export const API_ERROR_CODE_VALUES = [
     'TICKET_FULL',
     /** The team keeps `SAVED_REPLIES_MAX` saved replies. Delete one first. */
     'SAVED_REPLIES_FULL',
+    // ── Waitlist (0.15.0) ──
+    /**
+     * Founder Circle has not opened yet (`FC_LAUNCH_AT` is still ahead). Until
+     * it does, only joining the waitlist, onboarding and your profile, uploads
+     * for it and deleting your account work, for everyone, staff included. 403.
+     */
+    'NOT_LAUNCHED',
+    /** Joining the waitlist after the launch: it closed then (the user, 2026-10-16). 409. */
+    'WAITLIST_CLOSED',
+    /** A staff account joining the waitlist: staff never take a place (the user, 2026-10-16). 403. */
+    'WAITLIST_STAFF',
+    /**
+     * Joining when this email's inbox or this sign-in already had a place: one
+     * place per inbox (`x+1@`, `x+2@`, Gmail's dots are one inbox) and per
+     * sign-in, ever, deleted accounts included, so neither new addresses nor
+     * deleting and joining again take the free places one by one (the user,
+     * 2026-10-16; the security review, 2026-10-18). 409.
+     */
+    'WAITLIST_PLACE_USED',
 ];
 export const apiErrorCodeSchema = z.enum(API_ERROR_CODE_VALUES);
 /** The same codes by name: `API_ERROR_CODE.POLL_CLOSED`. */

package/dist/core/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,iBAAiB;IACjB,gFAAgF;IAChF,gBAAgB;IAChB,yEAAyE;IACzE,kBAAkB;IAClB,2EAA2E;IAC3E,WAAW;IACX,wEAAwE;IACxE,UAAU;IACV,uEAAuE;IACvE,cAAc;IACd,2EAA2E;IAC3E,qBAAqB;IAErB,oBAAoB;IACpB,4BAA4B;IAC5B,cAAc;IACd,sDAAsD;IACtD,eAAe;IACf,qEAAqE;IACrE,eAAe;IACf,oEAAoE;IACpE,qBAAqB;IACrB,6CAA6C;IAC7C,WAAW;IAEX,mBAAmB;IACnB,mFAAmF;IACnF,uBAAuB;IACvB,gFAAgF;IAChF,mBAAmB;IACnB,uEAAuE;IACvE,WAAW;IAEX,kDAAkD;IAClD;;;;;OAKG;IACH,uBAAuB;IACvB,sCAAsC;IACtC,kBAAkB;IAClB;;;OAGG;IACH,mBAAmB;IACnB,2EAA2E;IAC3E,qBAAqB;IACrB;;;;OAIG;IACH,mBAAmB;IACnB,0FAA0F;IAC1F,mBAAmB;IACnB,mEAAmE;IACnE,wBAAwB;IACxB,sEAAsE;IACtE,sBAAsB;IACtB,wFAAwF;IACxF,eAAe;IAEf,iBAAiB;IACjB,+CAA+C;IAC/C,oBAAoB;IACpB,iEAAiE;IACjE,mBAAmB;IACnB,kDAAkD;IAClD,aAAa;IACb,oFAAoF;IACpF,qBAAqB;IACrB,qDAAqD;IACrD,gBAAgB;IAChB,8FAA8F;IAC9F,mBAAmB;IACnB;;;;OAIG;IACH,uBAAuB;IACvB,+CAA+C;IAC/C,mBAAmB;IACnB,8DAA8D;IAC9D,wBAAwB;IACxB,kFAAkF;IAClF,kBAAkB;IAElB,iBAAiB;IACjB;;;;;OAKG;IACH,uBAAuB;IACvB;;;OAGG;IACH,sBAAsB;IACtB;;;;OAIG;IACH,kBAAkB;IAClB,gFAAgF;IAChF,mBAAmB;IACnB,sEAAsE;IACtE,wBAAwB;IACxB;;;OAGG;IACH,8BAA8B;IAC9B,8FAA8F;IAC9F,qBAAqB;IACrB;;;OAGG;IACH,6BAA6B;IAC7B,yFAAyF;IACzF,kBAAkB;IAClB,6EAA6E;IAC7E,qBAAqB;IACrB;;;;OAIG;IACH,gBAAgB;IAEhB,sCAAsC;IACtC;;;;OAIG;IACH,qBAAqB;IACrB;;;OAGG;IACH,eAAe;IACf,8DAA8D;IAC9D,gBAAgB;IAChB;;;OAGG;IACH,0BAA0B;IAC1B,gGAAgG;IAChG,gBAAgB;IAChB,+FAA+F;IAC/F,uBAAuB;IACvB,oDAAoD;IACpD,kBAAkB;IAClB,iDAAiD;IACjD,qBAAqB;IACrB,iFAAiF;IACjF,mBAAmB;IACnB,qEAAqE;IACrE,gBAAgB;IAChB;;;OAGG;IACH,wBAAwB;IACxB;;;;OAIG;IACH,yBAAyB;IACzB,2FAA2F;IAC3F,sBAAsB;IACtB,yEAAyE;IACzE,yBAAyB;IACzB,qFAAqF;IACrF,iBAAiB;IACjB;;;;OAIG;IACH,cAAc;IACd,2FAA2F;IAC3F,sBAAsB;IACtB;;;;OAIG;IACH,sBAAsB;IACtB,yFAAyF;IACzF,eAAe;IACf,kEAAkE;IAClE,sBAAsB;IACtB,wDAAwD;IACxD,wBAAwB;IACxB,oGAAoG;IACpG,eAAe;IAEf,kDAAkD;IAClD,6EAA6E;IAC7E,6BAA6B;IAC7B;;;OAGG;IACH,+BAA+B;IAC/B;;;OAGG;IACH,sBAAsB;IAEtB,4BAA4B;IAC5B;;;;;;;OAOG;IACH,yBAAyB;IACzB,8EAA8E;IAC9E,sBAAsB;IACtB,yGAAyG;IACzG,0BAA0B;IAC1B;;;OAGG;IACH,gCAAgC;IAChC,qEAAqE;IACrE,yBAAyB;IACzB,oFAAoF;IACpF,6BAA6B;IAC7B;;;;OAIG;IACH,sBAAsB;IACtB;;;;OAIG;IACH,oBAAoB;IACpB;;;OAGG;IACH,gCAAgC;IAChC,8EAA8E;IAC9E,qBAAqB;IACrB;;;OAGG;IACH,6BAA6B;IAC7B,yFAAyF;IACzF,kCAAkC;IAClC,mFAAmF;IACnF,4BAA4B;IAC5B,yEAAyE;IACzE,8BAA8B;IAC9B,gBAAgB;IAChB,6DAA6D;IAC7D,eAAe;IACf,sCAAsC;IACtC,iBAAiB;IAEjB,mBAAmB;IACnB;;;OAGG;IACH,2BAA2B;IAE3B,aAAa;IACb,4CAA4C;IAC5C,gBAAgB;IAEhB,oBAAoB;IACpB,qFAAqF;IACrF,mBAAmB;IAEnB,2BAA2B;IAC3B;;;OAGG;IACH,eAAe;IACf,4EAA4E;IAC5E,cAAc;IACd,8DAA8D;IAC9D,kBAAkB;IAClB,4EAA4E;IAC5E,gBAAgB;IAChB,0EAA0E;IAC1E,aAAa;IACb,oDAAoD;IACpD,yBAAyB;IACzB,qEAAqE;IACrE,oBAAoB;IACpB,mEAAmE;IACnE,gCAAgC;IAChC,mFAAmF;IACnF,0BAA0B;IAE1B,gBAAgB;IAChB,uEAAuE;IACvE,aAAa;IACb,0EAA0E;IAC1E,oBAAoB;CACZ,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAGhE,4DAA4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC","sourcesContent":["/**\n * founder-schema — Every error code the API answers with\n *\n * THE CODE IS WHAT A CLIENT ACTS ON; the `message` beside it is English for\n * logs and for a client too old to know the code. A client words each code in\n * the member's language, and a test on the web side asserts every value here\n * has a message in every locale it ships.\n *\n * Before 0.2.0 the backend kept this list to itself, and every domain refusal\n * (a closed poll, a reply to a reply, the edit window) went out as\n * `VALIDATION_ERROR` with an English sentence, so the only way for a client to\n * tell them apart was to match on the wording.\n *\n * WHEN TO USE WHICH:\n *   - A request that does not match its schema: `VALIDATION_ERROR`, with every\n *     problem in `error.details.issues`.\n *   - A well-formed request the current STATE of things refuses: its own code\n *     below. These carry no issues; the code says it all.\n *\n * ⚠ Append freely; remove deliberately. A code removed here that an older\n * server still sends fails the client's parse of the error envelope.\n *\n * @module founder-schema/core/errors\n */\n\nimport { z } from 'zod';\n\n/**\n * As a tuple, the way `GENDER_VALUES` is, so a consumer can iterate it (a\n * translation-coverage test does exactly that) and TypeScript keeps the union.\n */\nexport const API_ERROR_CODE_VALUES = [\n  // ── Anything ──\n  /** A bug or an outage on our side. The message says nothing more on purpose. */\n  'INTERNAL_ERROR',\n  /** The request did not match its schema. `details.issues` says where. */\n  'VALIDATION_ERROR',\n  /** No such thing, or not one you may see. Deliberately the same answer. */\n  'NOT_FOUND',\n  /** Two writes raced for something unique; retrying usually succeeds. */\n  'CONFLICT',\n  /** Too many requests from this member or address. Wait, then retry. */\n  'RATE_LIMITED',\n  /** Something we depend on (the chat server) is down or not switched on. */\n  'SERVICE_UNAVAILABLE',\n\n  // ── Who you are ──\n  /** No credential at all. */\n  'UNAUTHORIZED',\n  /** A credential that is not ours, or not readable. */\n  'INVALID_TOKEN',\n  /** A credential that was ours and has expired. Refresh and retry. */\n  'TOKEN_EXPIRED',\n  /** Signed out everywhere, or the account changed. Sign in again. */\n  'SESSION_INVALIDATED',\n  /** Signed in, and not allowed to do this. */\n  'FORBIDDEN',\n\n  // ── Onboarding ──\n  /** Finish onboarding first. The client routes here instead of showing an error. */\n  'ONBOARDING_INCOMPLETE',\n  /** Onboarding is already finished; there is nothing to save or finish again. */\n  'ALREADY_ONBOARDED',\n  /** Under `MIN_AGE_YEARS`. Refused at the draft and again at finish. */\n  'UNDER_AGE',\n\n  // ── Uploads: completing one, and attaching it ──\n  /**\n   * Not an upload of yours, not processed yet, already attached somewhere, or\n   * for the other purpose (an avatar upload on a post). One code for all of\n   * them on purpose: telling \"someone else's\" apart from \"does not exist\" would\n   * let a caller probe other members' media ids.\n   */\n  'UPLOAD_NOT_ATTACHABLE',\n  /** Larger than `UPLOAD_MAX_BYTES`. */\n  'UPLOAD_TOO_LARGE',\n  /**\n   * Not one of the image types this product accepts (by the file's own bytes,\n   * whatever its name or declared type), or not an image at all.\n   */\n  'UPLOAD_WRONG_TYPE',\n  /** Completed before the file reached storage: upload it, then complete. */\n  'UPLOAD_NOT_RECEIVED',\n  /**\n   * Another request is processing this upload right now (a retry or a double\n   * tap). Nothing is wrong: complete again in a moment and it answers with\n   * the image. 409.\n   */\n  'UPLOAD_PROCESSING',\n  /** A JPEG, PNG, WebP or GIF by its bytes that cannot be decoded: truncated or corrupt. */\n  'UPLOAD_UNREADABLE',\n  /** More than `MEDIA_MAX_INPUT_PIXELS`; refused before decoding. */\n  'UPLOAD_TOO_MANY_PIXELS',\n  /** `MEDIA_PENDING_MAX` uploads are already waiting to be attached. */\n  'UPLOAD_LIMIT_REACHED',\n  /** Discarding an upload that is attached: remove it from its post or avatar instead. */\n  'UPLOAD_IN_USE',\n\n  // ── The feed ──\n  /** The post is older than `EDIT_WINDOW_MS`. */\n  'EDIT_WINDOW_CLOSED',\n  /** A poll is never editable: people have already voted on it. */\n  'POLL_NOT_EDITABLE',\n  /** The poll has closed, by the server's clock. */\n  'POLL_CLOSED',\n  /** No option, several on a single-choice poll, or an option that does not exist. */\n  'POLL_CHOICE_INVALID',\n  /** A reply to a reply. One level of nesting only. */\n  'REPLY_TOO_DEEP',\n  /** Reporting your own post, poll or comment (or, since 0.6.0, your own product or review). */\n  'CANNOT_REPORT_OWN',\n  /**\n   * Marking a comment \"this helped\" that is not feedback on your product: the\n   * post is not tagged with a product you are on, or the comment is your own\n   * team's.\n   */\n  'FEEDBACK_NOT_MARKABLE',\n  /** Reposting your own post or poll (0.8.0). */\n  'CANNOT_REPOST_OWN',\n  /** Reposting a repost (0.8.0): share the original instead. */\n  'CANNOT_REPOST_A_REPOST',\n  /** You already have an active repost of this item (0.8.0). Undo it first. 409. */\n  'ALREADY_REPOSTED',\n\n  // ── Products ──\n  /**\n   * Their plan's number of LIVE products is reached (0.12.0: 1 for a member,\n   * 5 on Premium, unlimited on Business; was `PRODUCTS_OWNED_MAX` for\n   * everyone). Creating a product, making a paused one live, or being handed\n   * one. `details.limit`. Pause one, or upgrade.\n   */\n  'PRODUCT_LIMIT_REACHED',\n  /**\n   * Listing a product that is not ready for Discover, or removing what keeps a\n   * listed one ready. `details.missing`: some of `logo`, `tagline`, `screenshot`.\n   */\n  'PRODUCT_NOT_LISTABLE',\n  /**\n   * The product is archived and frozen until its owner restores it: no new\n   * posts about it, reviews, upvotes, replies, helpful marks, testers or\n   * invitations.\n   */\n  'PRODUCT_ARCHIVED',\n  /** Tagging a post with, or acting for, a product you are not on the team of. */\n  'PRODUCT_NOT_YOURS',\n  /** Inviting someone who is already on the team or already invited. */\n  'PRODUCT_ALREADY_MEMBER',\n  /**\n   * Inviting someone who cannot join a team: not finished onboarding, paused,\n   * suspended or deleted. One code for all four, so it reveals none of them.\n   */\n  'PRODUCT_MEMBER_NOT_INVITABLE',\n  /** Handing over to, or re-roling, someone who is not on the team (or invited, for a role). */\n  'PRODUCT_NOT_ON_TEAM',\n  /**\n   * The owner leaving, being removed, or having their role changed. Ownership\n   * moves only by handing the product to someone first.\n   */\n  'PRODUCT_OWNER_MUST_TRANSFER',\n  /** Upvoting, reviewing or confirming yourself as a tester of your own team's product. */\n  'PRODUCT_OWN_TEAM',\n  /** Confirming as a tester someone who has given this product no feedback. */\n  'TESTER_NOT_ELIGIBLE',\n  /**\n   * The product is paused (0.12.0): its owner's plan has fewer live places\n   * than they own products. Only its team sees it; nothing new is tagged with\n   * it until its owner makes it live again.\n   */\n  'PRODUCT_PAUSED',\n\n  // ── Membership and plans (0.12.0) ──\n  /**\n   * Taking part needs a membership: a viewer posting, commenting, reacting,\n   * voting, saving, joining, chatting or listing a product. 403. Also the\n   * reason on the refusing rule, so the web offers the membership.\n   */\n  'MEMBERSHIP_REQUIRED',\n  /**\n   * Starting a conversation with someone you do not know needs Premium or\n   * Business. 403. Also the reason on the refusing rule.\n   */\n  'PLAN_REQUIRED',\n  /** Buying or claiming a membership while holding one. 409. */\n  'ALREADY_MEMBER',\n  /**\n   * Revoking a membership staff may not revoke: a paid one (refund the\n   * payment instead) or a staff member's, which comes with the role. 409.\n   */\n  'MEMBERSHIP_NOT_REVOCABLE',\n  /** No such coupon, or it is switched off, not started or over. One code for all, on purpose. */\n  'COUPON_INVALID',\n  /** A real coupon that does not apply to what is being bought (a membership code on a plan). */\n  'COUPON_NOT_APPLICABLE',\n  /** Every redemption of the coupon is taken. 409. */\n  'COUPON_EXHAUSTED',\n  /** This account already used the coupon. 409. */\n  'COUPON_ALREADY_USED',\n  /** Staff creating a coupon whose code another coupon has (case ignored). 409. */\n  'COUPON_CODE_TAKEN',\n  /** A member choosing a username someone else holds (0.13.0). 409. */\n  'USERNAME_TAKEN',\n  /**\n   * Staff creating a second FOUNDING coupon (0.13.0): founding numbers count\n   * up on the one founding coupon, so a second would hand out #1 again. 409.\n   */\n  'COUPON_FOUNDING_EXISTS',\n  /**\n   * Staff creating ANY founding coupon (0.14.0): founding places come from the\n   * launch waitlist alone (the user, 2026-10-16), so no code may hand one out.\n   * 409.\n   */\n  'COUPON_FOUNDING_RETIRED',\n  /** Buying Business while on Premium: that is an upgrade, priced as the difference. 409. */\n  'PLAN_UPGRADE_INSTEAD',\n  /** Asking to upgrade with no Premium time to turn into Business. 409. */\n  'PLAN_NOTHING_TO_UPGRADE',\n  /** The purchase would hold plan time more than `PLAN_AHEAD_MAX_YEARS` ahead. 409. */\n  'PLAN_TERM_LIMIT',\n  /**\n   * The plan changed between the quote and the payment (another purchase\n   * moved the Premium an upgrade was priced on, or the quote is over a day\n   * old): the payment is not applied, and is refunded in full by itself. 409.\n   */\n  'PLAN_CHANGED',\n  /** Payments are not switched on here (no gateway keys). 503. A free coupon still works. */\n  'PAYMENTS_UNAVAILABLE',\n  /**\n   * What came back from checkout does not prove this payment: a bad\n   * signature, or another order's ids. 400. If money was taken, the webhook\n   * still settles it.\n   */\n  'PAYMENT_NOT_VERIFIED',\n  /** The checkout was not paid within its time (`ORDER_TTL_MINUTES`). Start again. 409. */\n  'ORDER_EXPIRED',\n  /** More than `REFUND_WINDOW_DAYS` days since the payment. 409. */\n  'REFUND_WINDOW_CLOSED',\n  /** Not a captured payment, or already refunded. 409. */\n  'PAYMENT_NOT_REFUNDABLE',\n  /** The gateway refused the refund. Nothing changed; try again or refund from its dashboard. 502. */\n  'REFUND_FAILED',\n\n  // ── Messaging people you do not know (0.12.0) ──\n  /** This month's allowance of new people is used. `details.resetsAt`. 403. */\n  'MESSAGE_ALLOWANCE_EXHAUSTED',\n  /**\n   * Opening a conversation that would use the allowance, without saying so\n   * (`useAllowance: true`). `details.left`. 409. Nothing was spent.\n   */\n  'MESSAGE_ALLOWANCE_UNCONFIRMED',\n  /**\n   * They do not take conversations from people they do not know, or they\n   * cannot chat at all (not a member). One code for both, on purpose. 403.\n   */\n  'MESSAGE_NOT_ACCEPTED',\n\n  // ── Communities (0.9.0) ──\n  /**\n   * Something in a community you can SEE but must join first: taking part in\n   * it (posting into it, commenting, reacting, voting, saving, reporting,\n   * editing), or reading a private community's feed, pinned posts or\n   * members. Join (public) or request to join (private). 403. What you cannot\n   * see at all answers NOT_FOUND, as content of a private or hidden community\n   * looked up by its id does.\n   */\n  'COMMUNITY_JOIN_REQUIRED',\n  /** A live community already has this name (case and spacing ignored). 409. */\n  'COMMUNITY_NAME_TAKEN',\n  /** Joining, requesting or inviting someone who is already a member, has requested or is invited. 409. */\n  'COMMUNITY_ALREADY_MEMBER',\n  /**\n   * Inviting someone who cannot join: not finished onboarding, paused,\n   * suspended or deleted. One code for all four, so it reveals none of them.\n   */\n  'COMMUNITY_MEMBER_NOT_INVITABLE',\n  /** Inviting someone banned from this community. Unban them first. */\n  'COMMUNITY_MEMBER_BANNED',\n  /** Inviting into a public community: anyone can join it, share its link instead. */\n  'COMMUNITY_INVITE_NOT_NEEDED',\n  /**\n   * The last admin leaving, stepping down or being removed, or deleting their\n   * account while someone else could be made admin. Make someone else admin\n   * first. On an account deletion, `details.communities` names them.\n   */\n  'COMMUNITY_LAST_ADMIN',\n  /**\n   * The community is archived (read-only): no new posts, polls, comments,\n   * reactions, votes, saves, reports, edits, joins, approvals, invitations\n   * or pins. Its moderators may still hide what breaks its rules.\n   */\n  'COMMUNITY_ARCHIVED',\n  /**\n   * A type change that exposes what was already posted (toward public, or\n   * hidden to private) sent without `confirmExposure: true`.\n   */\n  'COMMUNITY_EXPOSURE_UNCONFIRMED',\n  /** `COMMUNITY_PINS_MAX` announcements are pinned already. Unpin one first. */\n  'COMMUNITY_PINS_FULL',\n  /**\n   * Notifying every member again within `COMMUNITY_ANNOUNCE_INTERVAL_MS`.\n   * `details.nextAt` says when it is allowed. Pinning without notifying works.\n   */\n  'COMMUNITY_ANNOUNCE_TOO_SOON',\n  /** Reposting a post or poll that lives in a community: community content stays in it. */\n  'COMMUNITY_CONTENT_NOT_REPOSTABLE',\n  /** `COMMUNITY_SUGGESTIONS_OPEN_MAX` suggestions are already waiting for review. */\n  'COMMUNITY_SUGGESTIONS_FULL',\n  /** Approving or declining a suggestion that was already decided. 409. */\n  'COMMUNITY_SUGGESTION_DECIDED',\n  // ── Reviews ──\n  /** One review per member per product. Edit yours instead. */\n  'REVIEW_EXISTS',\n  /** Voting your own review helpful. */\n  'REVIEW_OWN_VOTE',\n\n  // ── Moderation ──\n  /**\n   * A decision that does not apply to that kind of thing: removing a product\n   * (staff hide one, never delete it). `MODERATION_ACTIONS_BY_TARGET_KIND`.\n   */\n  'MODERATION_ACTION_INVALID',\n\n  // ── Chat ──\n  /** Opening a conversation with yourself. */\n  'CHAT_WITH_SELF',\n\n  // ── The account ──\n  /** Staff suspended this account: nothing in the product works until it is lifted. */\n  'ACCOUNT_SUSPENDED',\n\n  // ── Roles and the MPIN ──\n  /**\n   * Switching to a role this person does not hold (or no longer holds), or\n   * setting an MPIN while holding no staff role at all.\n   */\n  'ROLE_NOT_HELD',\n  /** A staff role needs an MPIN, and none has been set yet. Set one first. */\n  'MPIN_NOT_SET',\n  /** An MPIN is set once; changing it needs the current one. */\n  'MPIN_ALREADY_SET',\n  /** The MPIN is wrong. `details.attemptsLeft` says how many tries remain. */\n  'MPIN_INCORRECT',\n  /** Too many wrong MPINs. `details.lockedUntil` says when to try again. */\n  'MPIN_LOCKED',\n  /** Changing your own roles. Someone else has to. */\n  'CANNOT_CHANGE_OWN_ROLES',\n  /** Granting or revoking a role the role you act as may not touch. */\n  'ROLE_NOT_GRANTABLE',\n  /** Changing your own capabilities (0.9.0). Someone else has to. */\n  'CANNOT_CHANGE_OWN_CAPABILITIES',\n  /** Granting or revoking a capability the role you act as may not touch (0.9.0). */\n  'CAPABILITY_NOT_GRANTABLE',\n\n  // ── Support ──\n  /** The ticket holds `TICKET_MESSAGES_MAX` messages. Open a new one. */\n  'TICKET_FULL',\n  /** The team keeps `SAVED_REPLIES_MAX` saved replies. Delete one first. */\n  'SAVED_REPLIES_FULL',\n] as const;\n\nexport const apiErrorCodeSchema = z.enum(API_ERROR_CODE_VALUES);\nexport type ApiErrorCode = z.infer<typeof apiErrorCodeSchema>;\n\n/** The same codes by name: `API_ERROR_CODE.POLL_CLOSED`. */\nexport const API_ERROR_CODE = apiErrorCodeSchema.enum;\n"]}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,iBAAiB;IACjB,gFAAgF;IAChF,gBAAgB;IAChB,yEAAyE;IACzE,kBAAkB;IAClB,2EAA2E;IAC3E,WAAW;IACX,wEAAwE;IACxE,UAAU;IACV,uEAAuE;IACvE,cAAc;IACd,2EAA2E;IAC3E,qBAAqB;IAErB,oBAAoB;IACpB,4BAA4B;IAC5B,cAAc;IACd,sDAAsD;IACtD,eAAe;IACf,qEAAqE;IACrE,eAAe;IACf,oEAAoE;IACpE,qBAAqB;IACrB,6CAA6C;IAC7C,WAAW;IAEX,mBAAmB;IACnB,mFAAmF;IACnF,uBAAuB;IACvB,gFAAgF;IAChF,mBAAmB;IACnB,uEAAuE;IACvE,WAAW;IAEX,kDAAkD;IAClD;;;;;OAKG;IACH,uBAAuB;IACvB,sCAAsC;IACtC,kBAAkB;IAClB;;;OAGG;IACH,mBAAmB;IACnB,2EAA2E;IAC3E,qBAAqB;IACrB;;;;OAIG;IACH,mBAAmB;IACnB,0FAA0F;IAC1F,mBAAmB;IACnB,mEAAmE;IACnE,wBAAwB;IACxB,sEAAsE;IACtE,sBAAsB;IACtB,wFAAwF;IACxF,eAAe;IAEf,iBAAiB;IACjB,+CAA+C;IAC/C,oBAAoB;IACpB,iEAAiE;IACjE,mBAAmB;IACnB,kDAAkD;IAClD,aAAa;IACb,oFAAoF;IACpF,qBAAqB;IACrB,qDAAqD;IACrD,gBAAgB;IAChB,8FAA8F;IAC9F,mBAAmB;IACnB;;;;OAIG;IACH,uBAAuB;IACvB,+CAA+C;IAC/C,mBAAmB;IACnB,8DAA8D;IAC9D,wBAAwB;IACxB,kFAAkF;IAClF,kBAAkB;IAElB,iBAAiB;IACjB;;;;;OAKG;IACH,uBAAuB;IACvB;;;OAGG;IACH,sBAAsB;IACtB;;;;OAIG;IACH,kBAAkB;IAClB,gFAAgF;IAChF,mBAAmB;IACnB,sEAAsE;IACtE,wBAAwB;IACxB;;;OAGG;IACH,8BAA8B;IAC9B,8FAA8F;IAC9F,qBAAqB;IACrB;;;OAGG;IACH,6BAA6B;IAC7B,yFAAyF;IACzF,kBAAkB;IAClB,6EAA6E;IAC7E,qBAAqB;IACrB;;;;OAIG;IACH,gBAAgB;IAEhB,sCAAsC;IACtC;;;;OAIG;IACH,qBAAqB;IACrB;;;OAGG;IACH,eAAe;IACf,8DAA8D;IAC9D,gBAAgB;IAChB;;;OAGG;IACH,0BAA0B;IAC1B,gGAAgG;IAChG,gBAAgB;IAChB,+FAA+F;IAC/F,uBAAuB;IACvB,oDAAoD;IACpD,kBAAkB;IAClB,iDAAiD;IACjD,qBAAqB;IACrB,iFAAiF;IACjF,mBAAmB;IACnB,qEAAqE;IACrE,gBAAgB;IAChB;;;OAGG;IACH,wBAAwB;IACxB;;;;OAIG;IACH,yBAAyB;IACzB,2FAA2F;IAC3F,sBAAsB;IACtB,yEAAyE;IACzE,yBAAyB;IACzB,qFAAqF;IACrF,iBAAiB;IACjB;;;;OAIG;IACH,cAAc;IACd,2FAA2F;IAC3F,sBAAsB;IACtB;;;;OAIG;IACH,sBAAsB;IACtB,yFAAyF;IACzF,eAAe;IACf,kEAAkE;IAClE,sBAAsB;IACtB,wDAAwD;IACxD,wBAAwB;IACxB,oGAAoG;IACpG,eAAe;IAEf,kDAAkD;IAClD,6EAA6E;IAC7E,6BAA6B;IAC7B;;;OAGG;IACH,+BAA+B;IAC/B;;;OAGG;IACH,sBAAsB;IAEtB,4BAA4B;IAC5B;;;;;;;OAOG;IACH,yBAAyB;IACzB,8EAA8E;IAC9E,sBAAsB;IACtB,yGAAyG;IACzG,0BAA0B;IAC1B;;;OAGG;IACH,gCAAgC;IAChC,qEAAqE;IACrE,yBAAyB;IACzB,oFAAoF;IACpF,6BAA6B;IAC7B;;;;OAIG;IACH,sBAAsB;IACtB;;;;OAIG;IACH,oBAAoB;IACpB;;;OAGG;IACH,gCAAgC;IAChC,8EAA8E;IAC9E,qBAAqB;IACrB;;;OAGG;IACH,6BAA6B;IAC7B,yFAAyF;IACzF,kCAAkC;IAClC,mFAAmF;IACnF,4BAA4B;IAC5B,yEAAyE;IACzE,8BAA8B;IAC9B,gBAAgB;IAChB,6DAA6D;IAC7D,eAAe;IACf,sCAAsC;IACtC,iBAAiB;IAEjB,mBAAmB;IACnB;;;OAGG;IACH,2BAA2B;IAE3B,aAAa;IACb,4CAA4C;IAC5C,gBAAgB;IAEhB,oBAAoB;IACpB,qFAAqF;IACrF,mBAAmB;IAEnB,2BAA2B;IAC3B;;;OAGG;IACH,eAAe;IACf,4EAA4E;IAC5E,cAAc;IACd,8DAA8D;IAC9D,kBAAkB;IAClB,4EAA4E;IAC5E,gBAAgB;IAChB,0EAA0E;IAC1E,aAAa;IACb,oDAAoD;IACpD,yBAAyB;IACzB,qEAAqE;IACrE,oBAAoB;IACpB,mEAAmE;IACnE,gCAAgC;IAChC,mFAAmF;IACnF,0BAA0B;IAE1B,gBAAgB;IAChB,uEAAuE;IACvE,aAAa;IACb,0EAA0E;IAC1E,oBAAoB;IAEpB,0BAA0B;IAC1B;;;;OAIG;IACH,cAAc;IACd,yFAAyF;IACzF,iBAAiB;IACjB,kGAAkG;IAClG,gBAAgB;IAChB;;;;;;OAMG;IACH,qBAAqB;CACb,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAGhE,4DAA4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC","sourcesContent":["/**\n * founder-schema — Every error code the API answers with\n *\n * THE CODE IS WHAT A CLIENT ACTS ON; the `message` beside it is English for\n * logs and for a client too old to know the code. A client words each code in\n * the member's language, and a test on the web side asserts every value here\n * has a message in every locale it ships.\n *\n * Before 0.2.0 the backend kept this list to itself, and every domain refusal\n * (a closed poll, a reply to a reply, the edit window) went out as\n * `VALIDATION_ERROR` with an English sentence, so the only way for a client to\n * tell them apart was to match on the wording.\n *\n * WHEN TO USE WHICH:\n *   - A request that does not match its schema: `VALIDATION_ERROR`, with every\n *     problem in `error.details.issues`.\n *   - A well-formed request the current STATE of things refuses: its own code\n *     below. These carry no issues; the code says it all.\n *\n * ⚠ Append freely; remove deliberately. A code removed here that an older\n * server still sends fails the client's parse of the error envelope.\n *\n * @module founder-schema/core/errors\n */\n\nimport { z } from 'zod';\n\n/**\n * As a tuple, the way `GENDER_VALUES` is, so a consumer can iterate it (a\n * translation-coverage test does exactly that) and TypeScript keeps the union.\n */\nexport const API_ERROR_CODE_VALUES = [\n  // ── Anything ──\n  /** A bug or an outage on our side. The message says nothing more on purpose. */\n  'INTERNAL_ERROR',\n  /** The request did not match its schema. `details.issues` says where. */\n  'VALIDATION_ERROR',\n  /** No such thing, or not one you may see. Deliberately the same answer. */\n  'NOT_FOUND',\n  /** Two writes raced for something unique; retrying usually succeeds. */\n  'CONFLICT',\n  /** Too many requests from this member or address. Wait, then retry. */\n  'RATE_LIMITED',\n  /** Something we depend on (the chat server) is down or not switched on. */\n  'SERVICE_UNAVAILABLE',\n\n  // ── Who you are ──\n  /** No credential at all. */\n  'UNAUTHORIZED',\n  /** A credential that is not ours, or not readable. */\n  'INVALID_TOKEN',\n  /** A credential that was ours and has expired. Refresh and retry. */\n  'TOKEN_EXPIRED',\n  /** Signed out everywhere, or the account changed. Sign in again. */\n  'SESSION_INVALIDATED',\n  /** Signed in, and not allowed to do this. */\n  'FORBIDDEN',\n\n  // ── Onboarding ──\n  /** Finish onboarding first. The client routes here instead of showing an error. */\n  'ONBOARDING_INCOMPLETE',\n  /** Onboarding is already finished; there is nothing to save or finish again. */\n  'ALREADY_ONBOARDED',\n  /** Under `MIN_AGE_YEARS`. Refused at the draft and again at finish. */\n  'UNDER_AGE',\n\n  // ── Uploads: completing one, and attaching it ──\n  /**\n   * Not an upload of yours, not processed yet, already attached somewhere, or\n   * for the other purpose (an avatar upload on a post). One code for all of\n   * them on purpose: telling \"someone else's\" apart from \"does not exist\" would\n   * let a caller probe other members' media ids.\n   */\n  'UPLOAD_NOT_ATTACHABLE',\n  /** Larger than `UPLOAD_MAX_BYTES`. */\n  'UPLOAD_TOO_LARGE',\n  /**\n   * Not one of the image types this product accepts (by the file's own bytes,\n   * whatever its name or declared type), or not an image at all.\n   */\n  'UPLOAD_WRONG_TYPE',\n  /** Completed before the file reached storage: upload it, then complete. */\n  'UPLOAD_NOT_RECEIVED',\n  /**\n   * Another request is processing this upload right now (a retry or a double\n   * tap). Nothing is wrong: complete again in a moment and it answers with\n   * the image. 409.\n   */\n  'UPLOAD_PROCESSING',\n  /** A JPEG, PNG, WebP or GIF by its bytes that cannot be decoded: truncated or corrupt. */\n  'UPLOAD_UNREADABLE',\n  /** More than `MEDIA_MAX_INPUT_PIXELS`; refused before decoding. */\n  'UPLOAD_TOO_MANY_PIXELS',\n  /** `MEDIA_PENDING_MAX` uploads are already waiting to be attached. */\n  'UPLOAD_LIMIT_REACHED',\n  /** Discarding an upload that is attached: remove it from its post or avatar instead. */\n  'UPLOAD_IN_USE',\n\n  // ── The feed ──\n  /** The post is older than `EDIT_WINDOW_MS`. */\n  'EDIT_WINDOW_CLOSED',\n  /** A poll is never editable: people have already voted on it. */\n  'POLL_NOT_EDITABLE',\n  /** The poll has closed, by the server's clock. */\n  'POLL_CLOSED',\n  /** No option, several on a single-choice poll, or an option that does not exist. */\n  'POLL_CHOICE_INVALID',\n  /** A reply to a reply. One level of nesting only. */\n  'REPLY_TOO_DEEP',\n  /** Reporting your own post, poll or comment (or, since 0.6.0, your own product or review). */\n  'CANNOT_REPORT_OWN',\n  /**\n   * Marking a comment \"this helped\" that is not feedback on your product: the\n   * post is not tagged with a product you are on, or the comment is your own\n   * team's.\n   */\n  'FEEDBACK_NOT_MARKABLE',\n  /** Reposting your own post or poll (0.8.0). */\n  'CANNOT_REPOST_OWN',\n  /** Reposting a repost (0.8.0): share the original instead. */\n  'CANNOT_REPOST_A_REPOST',\n  /** You already have an active repost of this item (0.8.0). Undo it first. 409. */\n  'ALREADY_REPOSTED',\n\n  // ── Products ──\n  /**\n   * Their plan's number of LIVE products is reached (0.12.0: 1 for a member,\n   * 5 on Premium, unlimited on Business; was `PRODUCTS_OWNED_MAX` for\n   * everyone). Creating a product, making a paused one live, or being handed\n   * one. `details.limit`. Pause one, or upgrade.\n   */\n  'PRODUCT_LIMIT_REACHED',\n  /**\n   * Listing a product that is not ready for Discover, or removing what keeps a\n   * listed one ready. `details.missing`: some of `logo`, `tagline`, `screenshot`.\n   */\n  'PRODUCT_NOT_LISTABLE',\n  /**\n   * The product is archived and frozen until its owner restores it: no new\n   * posts about it, reviews, upvotes, replies, helpful marks, testers or\n   * invitations.\n   */\n  'PRODUCT_ARCHIVED',\n  /** Tagging a post with, or acting for, a product you are not on the team of. */\n  'PRODUCT_NOT_YOURS',\n  /** Inviting someone who is already on the team or already invited. */\n  'PRODUCT_ALREADY_MEMBER',\n  /**\n   * Inviting someone who cannot join a team: not finished onboarding, paused,\n   * suspended or deleted. One code for all four, so it reveals none of them.\n   */\n  'PRODUCT_MEMBER_NOT_INVITABLE',\n  /** Handing over to, or re-roling, someone who is not on the team (or invited, for a role). */\n  'PRODUCT_NOT_ON_TEAM',\n  /**\n   * The owner leaving, being removed, or having their role changed. Ownership\n   * moves only by handing the product to someone first.\n   */\n  'PRODUCT_OWNER_MUST_TRANSFER',\n  /** Upvoting, reviewing or confirming yourself as a tester of your own team's product. */\n  'PRODUCT_OWN_TEAM',\n  /** Confirming as a tester someone who has given this product no feedback. */\n  'TESTER_NOT_ELIGIBLE',\n  /**\n   * The product is paused (0.12.0): its owner's plan has fewer live places\n   * than they own products. Only its team sees it; nothing new is tagged with\n   * it until its owner makes it live again.\n   */\n  'PRODUCT_PAUSED',\n\n  // ── Membership and plans (0.12.0) ──\n  /**\n   * Taking part needs a membership: a viewer posting, commenting, reacting,\n   * voting, saving, joining, chatting or listing a product. 403. Also the\n   * reason on the refusing rule, so the web offers the membership.\n   */\n  'MEMBERSHIP_REQUIRED',\n  /**\n   * Starting a conversation with someone you do not know needs Premium or\n   * Business. 403. Also the reason on the refusing rule.\n   */\n  'PLAN_REQUIRED',\n  /** Buying or claiming a membership while holding one. 409. */\n  'ALREADY_MEMBER',\n  /**\n   * Revoking a membership staff may not revoke: a paid one (refund the\n   * payment instead) or a staff member's, which comes with the role. 409.\n   */\n  'MEMBERSHIP_NOT_REVOCABLE',\n  /** No such coupon, or it is switched off, not started or over. One code for all, on purpose. */\n  'COUPON_INVALID',\n  /** A real coupon that does not apply to what is being bought (a membership code on a plan). */\n  'COUPON_NOT_APPLICABLE',\n  /** Every redemption of the coupon is taken. 409. */\n  'COUPON_EXHAUSTED',\n  /** This account already used the coupon. 409. */\n  'COUPON_ALREADY_USED',\n  /** Staff creating a coupon whose code another coupon has (case ignored). 409. */\n  'COUPON_CODE_TAKEN',\n  /** A member choosing a username someone else holds (0.13.0). 409. */\n  'USERNAME_TAKEN',\n  /**\n   * Staff creating a second FOUNDING coupon (0.13.0): founding numbers count\n   * up on the one founding coupon, so a second would hand out #1 again. 409.\n   */\n  'COUPON_FOUNDING_EXISTS',\n  /**\n   * Staff creating ANY founding coupon (0.14.0): founding places come from the\n   * launch waitlist alone (the user, 2026-10-16), so no code may hand one out.\n   * 409.\n   */\n  'COUPON_FOUNDING_RETIRED',\n  /** Buying Business while on Premium: that is an upgrade, priced as the difference. 409. */\n  'PLAN_UPGRADE_INSTEAD',\n  /** Asking to upgrade with no Premium time to turn into Business. 409. */\n  'PLAN_NOTHING_TO_UPGRADE',\n  /** The purchase would hold plan time more than `PLAN_AHEAD_MAX_YEARS` ahead. 409. */\n  'PLAN_TERM_LIMIT',\n  /**\n   * The plan changed between the quote and the payment (another purchase\n   * moved the Premium an upgrade was priced on, or the quote is over a day\n   * old): the payment is not applied, and is refunded in full by itself. 409.\n   */\n  'PLAN_CHANGED',\n  /** Payments are not switched on here (no gateway keys). 503. A free coupon still works. */\n  'PAYMENTS_UNAVAILABLE',\n  /**\n   * What came back from checkout does not prove this payment: a bad\n   * signature, or another order's ids. 400. If money was taken, the webhook\n   * still settles it.\n   */\n  'PAYMENT_NOT_VERIFIED',\n  /** The checkout was not paid within its time (`ORDER_TTL_MINUTES`). Start again. 409. */\n  'ORDER_EXPIRED',\n  /** More than `REFUND_WINDOW_DAYS` days since the payment. 409. */\n  'REFUND_WINDOW_CLOSED',\n  /** Not a captured payment, or already refunded. 409. */\n  'PAYMENT_NOT_REFUNDABLE',\n  /** The gateway refused the refund. Nothing changed; try again or refund from its dashboard. 502. */\n  'REFUND_FAILED',\n\n  // ── Messaging people you do not know (0.12.0) ──\n  /** This month's allowance of new people is used. `details.resetsAt`. 403. */\n  'MESSAGE_ALLOWANCE_EXHAUSTED',\n  /**\n   * Opening a conversation that would use the allowance, without saying so\n   * (`useAllowance: true`). `details.left`. 409. Nothing was spent.\n   */\n  'MESSAGE_ALLOWANCE_UNCONFIRMED',\n  /**\n   * They do not take conversations from people they do not know, or they\n   * cannot chat at all (not a member). One code for both, on purpose. 403.\n   */\n  'MESSAGE_NOT_ACCEPTED',\n\n  // ── Communities (0.9.0) ──\n  /**\n   * Something in a community you can SEE but must join first: taking part in\n   * it (posting into it, commenting, reacting, voting, saving, reporting,\n   * editing), or reading a private community's feed, pinned posts or\n   * members. Join (public) or request to join (private). 403. What you cannot\n   * see at all answers NOT_FOUND, as content of a private or hidden community\n   * looked up by its id does.\n   */\n  'COMMUNITY_JOIN_REQUIRED',\n  /** A live community already has this name (case and spacing ignored). 409. */\n  'COMMUNITY_NAME_TAKEN',\n  /** Joining, requesting or inviting someone who is already a member, has requested or is invited. 409. */\n  'COMMUNITY_ALREADY_MEMBER',\n  /**\n   * Inviting someone who cannot join: not finished onboarding, paused,\n   * suspended or deleted. One code for all four, so it reveals none of them.\n   */\n  'COMMUNITY_MEMBER_NOT_INVITABLE',\n  /** Inviting someone banned from this community. Unban them first. */\n  'COMMUNITY_MEMBER_BANNED',\n  /** Inviting into a public community: anyone can join it, share its link instead. */\n  'COMMUNITY_INVITE_NOT_NEEDED',\n  /**\n   * The last admin leaving, stepping down or being removed, or deleting their\n   * account while someone else could be made admin. Make someone else admin\n   * first. On an account deletion, `details.communities` names them.\n   */\n  'COMMUNITY_LAST_ADMIN',\n  /**\n   * The community is archived (read-only): no new posts, polls, comments,\n   * reactions, votes, saves, reports, edits, joins, approvals, invitations\n   * or pins. Its moderators may still hide what breaks its rules.\n   */\n  'COMMUNITY_ARCHIVED',\n  /**\n   * A type change that exposes what was already posted (toward public, or\n   * hidden to private) sent without `confirmExposure: true`.\n   */\n  'COMMUNITY_EXPOSURE_UNCONFIRMED',\n  /** `COMMUNITY_PINS_MAX` announcements are pinned already. Unpin one first. */\n  'COMMUNITY_PINS_FULL',\n  /**\n   * Notifying every member again within `COMMUNITY_ANNOUNCE_INTERVAL_MS`.\n   * `details.nextAt` says when it is allowed. Pinning without notifying works.\n   */\n  'COMMUNITY_ANNOUNCE_TOO_SOON',\n  /** Reposting a post or poll that lives in a community: community content stays in it. */\n  'COMMUNITY_CONTENT_NOT_REPOSTABLE',\n  /** `COMMUNITY_SUGGESTIONS_OPEN_MAX` suggestions are already waiting for review. */\n  'COMMUNITY_SUGGESTIONS_FULL',\n  /** Approving or declining a suggestion that was already decided. 409. */\n  'COMMUNITY_SUGGESTION_DECIDED',\n  // ── Reviews ──\n  /** One review per member per product. Edit yours instead. */\n  'REVIEW_EXISTS',\n  /** Voting your own review helpful. */\n  'REVIEW_OWN_VOTE',\n\n  // ── Moderation ──\n  /**\n   * A decision that does not apply to that kind of thing: removing a product\n   * (staff hide one, never delete it). `MODERATION_ACTIONS_BY_TARGET_KIND`.\n   */\n  'MODERATION_ACTION_INVALID',\n\n  // ── Chat ──\n  /** Opening a conversation with yourself. */\n  'CHAT_WITH_SELF',\n\n  // ── The account ──\n  /** Staff suspended this account: nothing in the product works until it is lifted. */\n  'ACCOUNT_SUSPENDED',\n\n  // ── Roles and the MPIN ──\n  /**\n   * Switching to a role this person does not hold (or no longer holds), or\n   * setting an MPIN while holding no staff role at all.\n   */\n  'ROLE_NOT_HELD',\n  /** A staff role needs an MPIN, and none has been set yet. Set one first. */\n  'MPIN_NOT_SET',\n  /** An MPIN is set once; changing it needs the current one. */\n  'MPIN_ALREADY_SET',\n  /** The MPIN is wrong. `details.attemptsLeft` says how many tries remain. */\n  'MPIN_INCORRECT',\n  /** Too many wrong MPINs. `details.lockedUntil` says when to try again. */\n  'MPIN_LOCKED',\n  /** Changing your own roles. Someone else has to. */\n  'CANNOT_CHANGE_OWN_ROLES',\n  /** Granting or revoking a role the role you act as may not touch. */\n  'ROLE_NOT_GRANTABLE',\n  /** Changing your own capabilities (0.9.0). Someone else has to. */\n  'CANNOT_CHANGE_OWN_CAPABILITIES',\n  /** Granting or revoking a capability the role you act as may not touch (0.9.0). */\n  'CAPABILITY_NOT_GRANTABLE',\n\n  // ── Support ──\n  /** The ticket holds `TICKET_MESSAGES_MAX` messages. Open a new one. */\n  'TICKET_FULL',\n  /** The team keeps `SAVED_REPLIES_MAX` saved replies. Delete one first. */\n  'SAVED_REPLIES_FULL',\n\n  // ── Waitlist (0.15.0) ──\n  /**\n   * Founder Circle has not opened yet (`FC_LAUNCH_AT` is still ahead). Until\n   * it does, only joining the waitlist, onboarding and your profile, uploads\n   * for it and deleting your account work, for everyone, staff included. 403.\n   */\n  'NOT_LAUNCHED',\n  /** Joining the waitlist after the launch: it closed then (the user, 2026-10-16). 409. */\n  'WAITLIST_CLOSED',\n  /** A staff account joining the waitlist: staff never take a place (the user, 2026-10-16). 403. */\n  'WAITLIST_STAFF',\n  /**\n   * Joining when this email's inbox or this sign-in already had a place: one\n   * place per inbox (`x+1@`, `x+2@`, Gmail's dots are one inbox) and per\n   * sign-in, ever, deleted accounts included, so neither new addresses nor\n   * deleting and joining again take the free places one by one (the user,\n   * 2026-10-16; the security review, 2026-10-18). 409.\n   */\n  'WAITLIST_PLACE_USED',\n] as const;\n\nexport const apiErrorCodeSchema = z.enum(API_ERROR_CODE_VALUES);\nexport type ApiErrorCode = z.infer<typeof apiErrorCodeSchema>;\n\n/** The same codes by name: `API_ERROR_CODE.POLL_CLOSED`. */\nexport const API_ERROR_CODE = apiErrorCodeSchema.enum;\n"]}

package/dist/core/limits.d.ts

@@ -143,6 +143,17 @@ export declare const PRODUCT_TEAM_SHOWN = 12;
 export declare const PRODUCT_ASK_OPEN_DAYS = 14;
 /** Days after a payment within which it is refunded in full on request (the user's ruling). */
 export declare const REFUND_WINDOW_DAYS = 7;
+/**
+ * The LAST moment a payment made at `paidAt` may be asked to be refunded
+ * (0.15.0). The user's rule: seven days, "counted from the day I paid". So
+ * the window runs to the END of the seventh day after the day of paying, in
+ * India's time: paid at 00:10 on 1 October, refundable until 23:59:59.999 on
+ * 8 October. That is the date a member is shown, so the date shown and the
+ * moment enforced can never disagree (before 0.15.0 the server cut off at
+ * exactly 7 x 24 hours after the payment while the page showed only a date).
+ * Inclusive: an ask AT this instant is in time.
+ */
+export declare function refundWindowEndsAt(paidAt: Date | string): Date;
 /** Minutes a checkout stays payable. After that it is expired and a new one is opened. */
 export declare const ORDER_TTL_MINUTES = 30;
 /** Plan time one member may hold ahead of today, in years. Bounds what is prepaid. */

package/dist/core/limits.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/core/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,YAAY,MAAM,CAAC;AAChC,eAAO,MAAM,SAAS,OAAO,CAAC;AAC9B,0DAA0D;AAC1D,eAAO,MAAM,UAAU,IAAI,CAAC;AAC5B,gFAAgF;AAChF,eAAO,MAAM,SAAS,IAAI,CAAC;AAI3B,eAAO,MAAM,QAAQ,KAAK,CAAC;AAC3B,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,eAAO,MAAM,WAAW,KAAK,CAAC;AAI9B,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,uCAAuC;AACvC,eAAO,MAAM,aAAa,IAAI,CAAC;AAC/B,eAAO,MAAM,aAAa,SAAU,CAAC;AACrC,mFAAmF;AACnF,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAIrC;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,MAAM,CAAC;AAIhC,kFAAkF;AAClF,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,sCAAsC;AACtC,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,kFAAkF;AAClF,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,iFAAiF;AACjF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAI1C,kFAAkF;AAClF,eAAO,MAAM,qBAAqB,IAAI,CAAC;AACvC,eAAO,MAAM,qBAAqB,MAAM,CAAC;AACzC,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAIrC,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,2DAA2D;AAC3D,eAAO,MAAM,kBAAkB,OAAO,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAIrC;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,QAAmB,CAAC;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,WAAa,CAAC;AAEjD;;;GAGG;AACH,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAE7C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,6EAA6E;AAC7E,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAIzC,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,sEAAsE;AACtE,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,oDAAoD;AACpD,eAAO,MAAM,aAAa,KAAK,CAAC;AAChC,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAIpC;;;GAGG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAIzC,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,KAAK,CAAC;AACtC,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,2EAA2E;AAC3E,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC;;;GAGG;AACH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAIxC,+FAA+F;AAC/F,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,0FAA0F;AAC1F,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,sFAAsF;AACtF,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAC5C,eAAO,MAAM,eAAe,IAAI,CAAC;AACjC,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,+DAA+D;AAC/D,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,uFAAuF;AACvF,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,yDAAyD;AACzD,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,sEAAsE;AACtE,eAAO,MAAM,kBAAkB,iBAAkB,CAAC;AAIlD,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,6CAA6C;AAC7C,eAAO,MAAM,mBAAmB,KAAK,CAAC;AACtC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,0EAA0E;AAC1E,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,+EAA+E;AAC/E,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAC9C,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAI5C;;;GAGG;AACH,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,eAAO,MAAM,gBAAgB,OAAO,CAAC;AACrC;;;GAGG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAI1C,kFAAkF;AAClF,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAC5C;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C;;;GAGG;AACH,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,oCAAoC;AACpC,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAIhD,kFAAkF;AAClF,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAI9C;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,mEAAmE;AACnE,eAAO,MAAM,wBAAwB,MAAM,CAAC"}
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/core/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,YAAY,MAAM,CAAC;AAChC,eAAO,MAAM,SAAS,OAAO,CAAC;AAC9B,0DAA0D;AAC1D,eAAO,MAAM,UAAU,IAAI,CAAC;AAC5B,gFAAgF;AAChF,eAAO,MAAM,SAAS,IAAI,CAAC;AAI3B,eAAO,MAAM,QAAQ,KAAK,CAAC;AAC3B,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,eAAO,MAAM,WAAW,KAAK,CAAC;AAI9B,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,uCAAuC;AACvC,eAAO,MAAM,aAAa,IAAI,CAAC;AAC/B,eAAO,MAAM,aAAa,SAAU,CAAC;AACrC,mFAAmF;AACnF,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAIrC;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,MAAM,CAAC;AAIhC,kFAAkF;AAClF,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,sCAAsC;AACtC,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,kFAAkF;AAClF,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,iFAAiF;AACjF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAI1C,kFAAkF;AAClF,eAAO,MAAM,qBAAqB,IAAI,CAAC;AACvC,eAAO,MAAM,qBAAqB,MAAM,CAAC;AACzC,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAIrC,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,2DAA2D;AAC3D,eAAO,MAAM,kBAAkB,OAAO,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAIrC;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,QAAmB,CAAC;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,WAAa,CAAC;AAEjD;;;GAGG;AACH,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAE7C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,6EAA6E;AAC7E,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAIzC,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,sEAAsE;AACtE,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,oDAAoD;AACpD,eAAO,MAAM,aAAa,KAAK,CAAC;AAChC,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAIpC;;;GAGG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAIzC,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,KAAK,CAAC;AACtC,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,2EAA2E;AAC3E,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC;;;GAGG;AACH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAIxC,+FAA+F;AAC/F,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAMpC;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAK9D;AACD,0FAA0F;AAC1F,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,sFAAsF;AACtF,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAC5C,eAAO,MAAM,eAAe,IAAI,CAAC;AACjC,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,+DAA+D;AAC/D,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,uFAAuF;AACvF,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,yDAAyD;AACzD,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,sEAAsE;AACtE,eAAO,MAAM,kBAAkB,iBAAkB,CAAC;AAIlD,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,6CAA6C;AAC7C,eAAO,MAAM,mBAAmB,KAAK,CAAC;AACtC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,0EAA0E;AAC1E,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,+EAA+E;AAC/E,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAC9C,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAI5C;;;GAGG;AACH,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,eAAO,MAAM,gBAAgB,OAAO,CAAC;AACrC;;;GAGG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAI1C,kFAAkF;AAClF,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAC5C;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C;;;GAGG;AACH,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,oCAAoC;AACpC,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAIhD,kFAAkF;AAClF,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAI9C;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,mEAAmE;AACnE,eAAO,MAAM,wBAAwB,MAAM,CAAC"}