founder-schema 0.18.0 → 0.20.0

package/dist/common.d.ts

@@ -1,304 +0,0 @@
-/**
- * founder-schema — Shared helpers and core enums
- *
- * The stable building blocks reused across every Founder Circle schema.
- * Anything that both the backend and a client need to agree on lives here.
- *
- * @module founder-schema/common
- */
-import { z } from 'zod';
-/**
- * Converts empty / whitespace-only strings to `undefined` so Zod `.optional()`
- * treats them as "not provided".
- *
- * Why this exists: an HTML form submits `""` for a cleared field, and without
- * this an optional field would be stored as an empty string rather than left
- * alone. Jansathi shipped that bug in dating onboarding.
- */
-export declare const emptyStringToUndefined: (value: unknown) => unknown;
-/** Optional trimmed string. Empty strings are coerced to `undefined`. */
-export declare const optionalTrimmedString: (maxLength?: number) => z.ZodPreprocess<z.ZodOptional<z.ZodString>, unknown>;
-/** A Mongo ObjectId as it crosses the wire: 24 lowercase hex characters. */
-export declare const objectIdSchema: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
-/** Named for what it is on the wire, so it never collides with Mongoose's `ObjectId`. */
-export type ObjectIdString = z.infer<typeof objectIdSchema>;
-/**
- * A URL safe to store and, after the consumer's own check, to render.
- *
- * Use this for EVERY member-supplied URL. Never bare `z.url()`: it accepts any
- * scheme the URL parser accepts, so `javascript:alert(document.cookie)`,
- * `data:text/html,<script>...`, `vbscript:` and `file:///etc/passwd` all pass.
- * Each of those is stored XSS the moment a client renders it as an `href`, and
- * `data:` is the same in an `<img src>`.
- *
- * `hostname` is restricted too, not only the scheme. A bare host like
- * `localhost` or a literal IP is refused, which closes server-side request
- * forgery: this product runs on EC2 with an instance role, so a member-supplied
- * `http://169.254.169.254/latest/meta-data/` that anything server-side ever
- * fetches is a credential read.
- *
- * Validating here is necessary and not sufficient. A consumer still treats a
- * stored URL as untrusted at render time, because rows written before this
- * existed were never checked.
- *
- * ⚠️ IF THIS EVER GROWS A HOST ALLOWLIST, compare the PARSED hostname for
- * exact equality. Never `includes`, never `endsWith`, never a regex over the
- * whole URL. Each of these is a real bypass of a naive "is it YouTube" check,
- * and all three read as obviously fine:
- *
- *   https://evil.example/?next=youtube.com/watch  contains the string
- *   youtube.com.evil.example                      starts with it
- *   youtu.be.evil.example                         a suffix check passes it
- *
- * The same mistake in the opposite direction to the `javascript:` hole: there
- * the scheme was too permissive, here the host check only LOOKS strict.
- * (krish hit this rendering inline video, 2026-09-21, and handles it by parsing
- * and comparing the hostname exactly.)
- */
-export declare const safeUrlSchema: z.ZodURL;
-export type SafeUrl = z.infer<typeof safeUrlSchema>;
-/**
- * A URL a member TYPES: `safeUrlSchema` plus the `LINK_URL_MAX` ceiling, so
- * every member URL carries the same cap and no consumer has to remember it.
- *
- * Two schemas, not one, because the cap is about what a person types and is
- * wrong for what the server reads from elsewhere. Until 0.2.0 there was only
- * this one, and it capped a link preview's CDN image URL too: one 314-character
- * `imageUrl` would have failed a whole feed page.
- */
-export declare const httpUrlSchema: z.ZodURL;
-export type HttpUrl = z.infer<typeof httpUrlSchema>;
-/**
- * Public handle. Derived by the server at onboarding, changeable later.
- *
- * Rules are deliberately narrow because the handle appears in URLs and in
- * mentions: lowercase letters, digits, underscore and a single dot, 3 to 30
- * characters, must start with a letter.
- *
- * This is the FORMAT, and it is what every read shape uses. A handle being
- * CHOSEN must also not be reserved: that is `chosenUsernameSchema`.
- */
-export declare const USERNAME_MIN = 3;
-export declare const USERNAME_MAX = 30;
-export declare const usernameSchema: z.ZodString;
-export type Username = z.infer<typeof usernameSchema>;
-/**
- * Handles this product keeps for itself: route names a handle would shadow,
- * and words that would let a member pass as staff.
- *
- * ⚠ HERE, IN THE CONTRACT, since 0.2.0. It used to live in the backend so it
- * could grow without a publish, and nothing ever read it: the server derived
- * handles without checking it, so a member called "Support" was handed
- * `support`. One list, read by the server when it derives a handle and by any
- * form that lets a member choose one, is worth a publish per addition.
- *
- * Matched exactly, after lowercasing.
- */
-export declare const RESERVED_USERNAMES: readonly ["admin", "about", "api", "chat", "discover", "feed", "founder", "foundercircle", "help", "home", "me", "meetup", "moderator", "onboarding", "settings", "staff", "superadmin", "support", "system", "team"];
-export declare function isReservedUsername(handle: string): boolean;
-/**
- * A handle a member is CHOOSING: the format, and not reserved.
- *
- * ⚠ Not used on read shapes, deliberately. A handle stored before the reserved
- * check existed must still READ, or one member's old handle would fail every
- * page that shows their name.
- */
-export declare const chosenUsernameSchema: z.ZodString;
-/**
- * Stage of the founder's current venture.
- *
- * Ordered from earliest to latest so a range filter can compare by index. Add
- * new stages at the END or the stored ordinal of existing rows shifts.
- */
-export declare const STARTUP_STAGE_VALUES: readonly ["idea", "validation", "mvp", "pre_seed", "seed", "series_a_plus", "profitable", "exited"];
-export declare const startupStageSchema: z.ZodEnum<{
-    idea: "idea";
-    validation: "validation";
-    mvp: "mvp";
-    pre_seed: "pre_seed";
-    seed: "seed";
-    series_a_plus: "series_a_plus";
-    profitable: "profitable";
-    exited: "exited";
-}>;
-export type StartupStage = z.infer<typeof startupStageSchema>;
-/**
- * Industry the venture operates in. Kept as a closed list so Discover filters
- * are a single indexed equality match rather than a text search.
- */
-export declare const INDUSTRY_VALUES: readonly ["agritech", "ai_ml", "b2b_saas", "consumer", "climate", "d2c", "deeptech", "edtech", "fintech", "gaming", "healthtech", "logistics", "manufacturing", "marketplace", "media", "mobility", "proptech", "robotics", "services", "space", "other"];
-export declare const industrySchema: z.ZodEnum<{
-    agritech: "agritech";
-    ai_ml: "ai_ml";
-    b2b_saas: "b2b_saas";
-    consumer: "consumer";
-    climate: "climate";
-    d2c: "d2c";
-    deeptech: "deeptech";
-    edtech: "edtech";
-    fintech: "fintech";
-    gaming: "gaming";
-    healthtech: "healthtech";
-    logistics: "logistics";
-    manufacturing: "manufacturing";
-    marketplace: "marketplace";
-    media: "media";
-    mobility: "mobility";
-    proptech: "proptech";
-    robotics: "robotics";
-    services: "services";
-    space: "space";
-    other: "other";
-}>;
-export type Industry = z.infer<typeof industrySchema>;
-/**
- * What the founder brings. Free-text skills were considered and rejected: two
- * people typing "growth" and "Growth Marketing" would never match each other in
- * a filter, and the Discover tab is the whole point of the product.
- */
-export declare const SKILL_VALUES: readonly ["engineering", "product", "design", "data", "growth", "sales", "marketing", "operations", "finance", "legal", "hr_people", "supply_chain", "research", "fundraising", "community"];
-export declare const skillSchema: z.ZodEnum<{
-    engineering: "engineering";
-    product: "product";
-    design: "design";
-    data: "data";
-    growth: "growth";
-    sales: "sales";
-    marketing: "marketing";
-    operations: "operations";
-    finance: "finance";
-    legal: "legal";
-    hr_people: "hr_people";
-    supply_chain: "supply_chain";
-    research: "research";
-    fundraising: "fundraising";
-    community: "community";
-}>;
-export type Skill = z.infer<typeof skillSchema>;
-/**
- * What the member is here for. ONE list, replacing three.
- *
- * This was `lookingFor` with six values. The design draws eight "Goals &
- * Passion" tiles and four more on the business step; all three were the same
- * idea at three grains, and shipping them together would have meant nobody
- * could say which one Discover filters on - the answer settled by whichever
- * query got written first. Merged on hary's ruling, 2026-09-21, while there
- * were still no rows in any database.
- *
- * ⚠️ Stored per member and used as a Mongoose enum. Append only; removing a
- * value orphans documents already saved with it.
- *
- * ⚠️ `start_company` READS ODDLY next to its neighbours and is correct. It was
- * queried on the grounds that it restates `venture.stage: 'idea'`; it does not,
- * and the reason is worth keeping so nobody re-opens it. Inferring it from the
- * venture works only for a member who ALREADY HAS a venture row, and somebody
- * who wants to start a company is precisely the member with no venture at all,
- * so there is nothing to infer from. It also cannot express a founder with a
- * running company who wants to start another. Every other value is an ask of
- * other people and this one is an ask of the product, which is the whole of the
- * oddness. (hary, 2026-09-21.)
- */
-export declare const GOAL_VALUES: readonly ["find_cofounder", "find_investors", "find_customers", "hiring", "partnerships", "mentorship", "grow_network", "business_ideas", "market_insights", "learn_startup", "start_company"];
-export declare const goalSchema: z.ZodEnum<{
-    find_cofounder: "find_cofounder";
-    find_investors: "find_investors";
-    find_customers: "find_customers";
-    hiring: "hiring";
-    partnerships: "partnerships";
-    mentorship: "mentorship";
-    grow_network: "grow_network";
-    business_ideas: "business_ideas";
-    market_insights: "market_insights";
-    learn_startup: "learn_startup";
-    start_company: "start_company";
-}>;
-export type Goal = z.infer<typeof goalSchema>;
-/**
- * Demographic only. Nothing here computes anything from it, unlike the sibling
- * gym product where gender feeds body-metric maths.
- *
- * Takes the family's three values and ADDS one rather than renaming any: a
- * network for founders should let somebody decline the question without having
- * to describe themselves as "other".
- */
-export declare const GENDER_VALUES: readonly ["male", "female", "other", "prefer_not_to_say"];
-export declare const genderSchema: z.ZodEnum<{
-    other: "other";
-    male: "male";
-    female: "female";
-    prefer_not_to_say: "prefer_not_to_say";
-}>;
-export type Gender = z.infer<typeof genderSchema>;
-/**
- * Indian mobile number: ten raw digits, no country code, matching the standard
- * used across this family. Display adds the `+91`.
- *
- * ⚠️ WHERE IT IS STORED IS NOT A SCHEMA QUESTION, and it has been ruled: the
- * phone lives on the account mirror, never as a second copy on the profile.
- * Two stored copies drift the first time somebody edits one, and the profile's
- * would be the copy nobody keeps in sync.
- */
-export declare const phoneSchema: z.ZodString;
-export type Phone = z.infer<typeof phoneSchema>;
-/**
- * Where the founder is based. City and country are what Discover filters on.
- *
- * ONE SHAPE for the profile, the Me tab's patch, onboarding's finish and the
- * location suggestion. It was written out three times until 0.2.0, the same
- * kind of copy that let the profile model lose Instagram.
- *
- * ⚠ `country` is REQUIRED and has NO default. A default here (it used to be
- * `'India'`) is destructive on every write path: a founder in Berlin who
- * corrects only their city would be moved to India by a value they never saw.
- * A body that carries a location carries the whole location. Every stored
- * location has a country, because the model requires one, so the read side
- * loses nothing.
- *
- * This is a DECLARED location, not a GPS reading. Jansathi's rule applies
- * here too: never write a declared location from a GPS capture.
- */
-export declare const locationSchema: z.ZodObject<{
-    city: z.ZodString;
-    state: z.ZodPreprocess<z.ZodOptional<z.ZodString>, unknown>;
-    country: z.ZodString;
-}, z.core.$strip>;
-export type FounderLocation = z.infer<typeof locationSchema>;
-/**
- * `GET /api/v1/location/areas/reverse?lat=&lng=`: plain decimal degrees.
- *
- * A QUERY, so coercion is right here: everything in a URL is a string. An
- * emptied parameter is "missing", never 0, because 0,0 is a real place in the
- * Gulf of Guinea and would be looked up rather than refused.
- */
-export declare const coordinatesQuerySchema: z.ZodObject<{
-    lat: z.ZodPreprocess<z.ZodCoercedNumber<unknown>, unknown>;
-    lng: z.ZodPreprocess<z.ZodCoercedNumber<unknown>, unknown>;
-}, z.core.$strip>;
-export type CoordinatesQuery = z.infer<typeof coordinatesQuerySchema>;
-export type CoordinatesQueryInput = z.input<typeof coordinatesQuerySchema>;
-/**
- * The city these coordinates look like, for the member to CONFIRM, or `null`
- * when the lookup could not place them confidently (or they are outside India,
- * whose area data is all there is). A suggestion, never a write: only what the
- * member then submits becomes their location.
- */
-export declare const suggestedLocationSchema: z.ZodNullable<z.ZodObject<{
-    city: z.ZodString;
-    state: z.ZodPreprocess<z.ZodOptional<z.ZodString>, unknown>;
-    country: z.ZodString;
-}, z.core.$strip>>;
-export type SuggestedLocation = z.infer<typeof suggestedLocationSchema>;
-/**
- * Cursor pagination query. Feed and Discover both use it.
- *
- * Cursor, not page number: the community feed changes under the reader, and an
- * offset would repeat or skip posts as new ones land.
- */
-export declare const paginationQuerySchema: z.ZodObject<{
-    limit: z.ZodPreprocess<z.ZodDefault<z.ZodCoercedNumber<unknown>>, unknown>;
-    cursor: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-export type PaginationQuery = z.infer<typeof paginationQuerySchema>;
-/** What a client may put IN the URL: every field optional, numbers as strings. */
-export type PaginationQueryInput = z.input<typeof paginationQuerySchema>;
-//# sourceMappingURL=common.d.ts.map

package/dist/common.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,GAAI,OAAO,OAAO,KAAG,OAGvD,CAAC;AAEF,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,GAAI,kBAAe,yDAC8B,CAAC;AAEpF,4EAA4E;AAC5E,eAAO,MAAM,cAAc,wDAGS,CAAC;AACrC,yFAAyF;AACzF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAI5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,aAAa,UAIxB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa,UAAkC,CAAC;AAC7D,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAIpD;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,IAAI,CAAC;AAC9B,eAAO,MAAM,YAAY,KAAK,CAAC;AAE/B,eAAO,MAAM,cAAc,aAOqD,CAAC;AACjF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kBAAkB,uNAqBrB,CAAC;AAIX,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,aAE/B,CAAC;AAIH;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,qGASvB,CAAC;AACX,eAAO,MAAM,kBAAkB;;;;;;;;;EAA+B,CAAC;AAC/D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,eAAe,2PAsBlB,CAAC;AACX,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;EAA0B,CAAC;AACtD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,YAAY,8LAgBf,CAAC;AACX,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;EAAuB,CAAC;AAChD,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,WAAW,gMAYd,CAAC;AACX,eAAO,MAAM,UAAU;;;;;;;;;;;;EAAsB,CAAC;AAC9C,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAI9C;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,2DAA4D,CAAC;AACvF,eAAO,MAAM,YAAY;;;;;EAAwB,CAAC;AAClD,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAIlD;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW,aAGiC,CAAC;AAC1D,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAIhD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,cAAc;;;;iBAIzB,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE7D;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;;;iBAGjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB;;;;kBAA4B,CAAC;AACjE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAIxE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;iBAYhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,kFAAkF;AAClF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/common.js

@@ -1,340 +0,0 @@
-/**
- * founder-schema — Shared helpers and core enums
- *
- * The stable building blocks reused across every Founder Circle schema.
- * Anything that both the backend and a client need to agree on lives here.
- *
- * @module founder-schema/common
- */
-import { z } from 'zod';
-import { CITY_MAX, COUNTRY_MAX, LINK_URL_MAX, PAGE_SIZE_DEFAULT, PAGE_SIZE_MAX, STATE_MAX, } from './limits.js';
-import { VALIDATION_MESSAGE } from './validation.js';
-// ─── String helpers ──────────────────────────────────────────────────────────
-/**
- * Converts empty / whitespace-only strings to `undefined` so Zod `.optional()`
- * treats them as "not provided".
- *
- * Why this exists: an HTML form submits `""` for a cleared field, and without
- * this an optional field would be stored as an empty string rather than left
- * alone. Jansathi shipped that bug in dating onboarding.
- */
-export const emptyStringToUndefined = (value) => {
-    if (typeof value === 'string' && value.trim() === '')
-        return undefined;
-    return value;
-};
-/** Optional trimmed string. Empty strings are coerced to `undefined`. */
-export const optionalTrimmedString = (maxLength = 100) => z.preprocess(emptyStringToUndefined, z.string().trim().max(maxLength).optional());
-/** A Mongo ObjectId as it crosses the wire: 24 lowercase hex characters. */
-export const objectIdSchema = z
-    .string()
-    .regex(/^[0-9a-f]{24}$/i, VALIDATION_MESSAGE.invalidId)
-    .transform((v) => v.toLowerCase());
-// ─── URLs ────────────────────────────────────────────────────────────────────
-/**
- * A URL safe to store and, after the consumer's own check, to render.
- *
- * Use this for EVERY member-supplied URL. Never bare `z.url()`: it accepts any
- * scheme the URL parser accepts, so `javascript:alert(document.cookie)`,
- * `data:text/html,<script>...`, `vbscript:` and `file:///etc/passwd` all pass.
- * Each of those is stored XSS the moment a client renders it as an `href`, and
- * `data:` is the same in an `<img src>`.
- *
- * `hostname` is restricted too, not only the scheme. A bare host like
- * `localhost` or a literal IP is refused, which closes server-side request
- * forgery: this product runs on EC2 with an instance role, so a member-supplied
- * `http://169.254.169.254/latest/meta-data/` that anything server-side ever
- * fetches is a credential read.
- *
- * Validating here is necessary and not sufficient. A consumer still treats a
- * stored URL as untrusted at render time, because rows written before this
- * existed were never checked.
- *
- * ⚠️ IF THIS EVER GROWS A HOST ALLOWLIST, compare the PARSED hostname for
- * exact equality. Never `includes`, never `endsWith`, never a regex over the
- * whole URL. Each of these is a real bypass of a naive "is it YouTube" check,
- * and all three read as obviously fine:
- *
- *   https://evil.example/?next=youtube.com/watch  contains the string
- *   youtube.com.evil.example                      starts with it
- *   youtu.be.evil.example                         a suffix check passes it
- *
- * The same mistake in the opposite direction to the `javascript:` hole: there
- * the scheme was too permissive, here the host check only LOOKS strict.
- * (krish hit this rendering inline video, 2026-09-21, and handles it by parsing
- * and comparing the hostname exactly.)
- */
-export const safeUrlSchema = z.url({
-    protocol: /^https?$/,
-    hostname: z.regexes.domain,
-    error: VALIDATION_MESSAGE.urlInvalid,
-});
-/**
- * A URL a member TYPES: `safeUrlSchema` plus the `LINK_URL_MAX` ceiling, so
- * every member URL carries the same cap and no consumer has to remember it.
- *
- * Two schemas, not one, because the cap is about what a person types and is
- * wrong for what the server reads from elsewhere. Until 0.2.0 there was only
- * this one, and it capped a link preview's CDN image URL too: one 314-character
- * `imageUrl` would have failed a whole feed page.
- */
-export const httpUrlSchema = safeUrlSchema.max(LINK_URL_MAX);
-// ─── Username ────────────────────────────────────────────────────────────────
-/**
- * Public handle. Derived by the server at onboarding, changeable later.
- *
- * Rules are deliberately narrow because the handle appears in URLs and in
- * mentions: lowercase letters, digits, underscore and a single dot, 3 to 30
- * characters, must start with a letter.
- *
- * This is the FORMAT, and it is what every read shape uses. A handle being
- * CHOSEN must also not be reserved: that is `chosenUsernameSchema`.
- */
-export const USERNAME_MIN = 3;
-export const USERNAME_MAX = 30;
-export const usernameSchema = z
-    .string()
-    .trim()
-    .toLowerCase()
-    // Plain bounds: the client words them from the issue's own minimum/maximum.
-    .min(USERNAME_MIN)
-    .max(USERNAME_MAX)
-    .regex(/^[a-z][a-z0-9_]*(\.[a-z0-9_]+)?$/, VALIDATION_MESSAGE.usernameInvalid);
-/**
- * Handles this product keeps for itself: route names a handle would shadow,
- * and words that would let a member pass as staff.
- *
- * ⚠ HERE, IN THE CONTRACT, since 0.2.0. It used to live in the backend so it
- * could grow without a publish, and nothing ever read it: the server derived
- * handles without checking it, so a member called "Support" was handed
- * `support`. One list, read by the server when it derives a handle and by any
- * form that lets a member choose one, is worth a publish per addition.
- *
- * Matched exactly, after lowercasing.
- */
-export const RESERVED_USERNAMES = [
-    'admin',
-    'about',
-    'api',
-    'chat',
-    'discover',
-    'feed',
-    'founder',
-    'foundercircle',
-    'help',
-    'home',
-    'me',
-    'meetup',
-    'moderator',
-    'onboarding',
-    'settings',
-    'staff',
-    'superadmin',
-    'support',
-    'system',
-    'team',
-];
-const RESERVED = new Set(RESERVED_USERNAMES);
-export function isReservedUsername(handle) {
-    return RESERVED.has(handle.trim().toLowerCase());
-}
-/**
- * A handle a member is CHOOSING: the format, and not reserved.
- *
- * ⚠ Not used on read shapes, deliberately. A handle stored before the reserved
- * check existed must still READ, or one member's old handle would fail every
- * page that shows their name.
- */
-export const chosenUsernameSchema = usernameSchema.refine((u) => !isReservedUsername(u), {
-    error: VALIDATION_MESSAGE.usernameReserved,
-});
-// ─── Founder-facing enums ────────────────────────────────────────────────────
-/**
- * Stage of the founder's current venture.
- *
- * Ordered from earliest to latest so a range filter can compare by index. Add
- * new stages at the END or the stored ordinal of existing rows shifts.
- */
-export const STARTUP_STAGE_VALUES = [
-    'idea',
-    'validation',
-    'mvp',
-    'pre_seed',
-    'seed',
-    'series_a_plus',
-    'profitable',
-    'exited',
-];
-export const startupStageSchema = z.enum(STARTUP_STAGE_VALUES);
-/**
- * Industry the venture operates in. Kept as a closed list so Discover filters
- * are a single indexed equality match rather than a text search.
- */
-export const INDUSTRY_VALUES = [
-    'agritech',
-    'ai_ml',
-    'b2b_saas',
-    'consumer',
-    'climate',
-    'd2c',
-    'deeptech',
-    'edtech',
-    'fintech',
-    'gaming',
-    'healthtech',
-    'logistics',
-    'manufacturing',
-    'marketplace',
-    'media',
-    'mobility',
-    'proptech',
-    'robotics',
-    'services',
-    'space',
-    'other',
-];
-export const industrySchema = z.enum(INDUSTRY_VALUES);
-/**
- * What the founder brings. Free-text skills were considered and rejected: two
- * people typing "growth" and "Growth Marketing" would never match each other in
- * a filter, and the Discover tab is the whole point of the product.
- */
-export const SKILL_VALUES = [
-    'engineering',
-    'product',
-    'design',
-    'data',
-    'growth',
-    'sales',
-    'marketing',
-    'operations',
-    'finance',
-    'legal',
-    'hr_people',
-    'supply_chain',
-    'research',
-    'fundraising',
-    'community',
-];
-export const skillSchema = z.enum(SKILL_VALUES);
-/**
- * What the member is here for. ONE list, replacing three.
- *
- * This was `lookingFor` with six values. The design draws eight "Goals &
- * Passion" tiles and four more on the business step; all three were the same
- * idea at three grains, and shipping them together would have meant nobody
- * could say which one Discover filters on - the answer settled by whichever
- * query got written first. Merged on hary's ruling, 2026-09-21, while there
- * were still no rows in any database.
- *
- * ⚠️ Stored per member and used as a Mongoose enum. Append only; removing a
- * value orphans documents already saved with it.
- *
- * ⚠️ `start_company` READS ODDLY next to its neighbours and is correct. It was
- * queried on the grounds that it restates `venture.stage: 'idea'`; it does not,
- * and the reason is worth keeping so nobody re-opens it. Inferring it from the
- * venture works only for a member who ALREADY HAS a venture row, and somebody
- * who wants to start a company is precisely the member with no venture at all,
- * so there is nothing to infer from. It also cannot express a founder with a
- * running company who wants to start another. Every other value is an ask of
- * other people and this one is an ask of the product, which is the whole of the
- * oddness. (hary, 2026-09-21.)
- */
-export const GOAL_VALUES = [
-    'find_cofounder',
-    'find_investors',
-    'find_customers',
-    'hiring',
-    'partnerships',
-    'mentorship',
-    'grow_network',
-    'business_ideas',
-    'market_insights',
-    'learn_startup',
-    'start_company',
-];
-export const goalSchema = z.enum(GOAL_VALUES);
-// ─── Gender ──────────────────────────────────────────────────────────────────
-/**
- * Demographic only. Nothing here computes anything from it, unlike the sibling
- * gym product where gender feeds body-metric maths.
- *
- * Takes the family's three values and ADDS one rather than renaming any: a
- * network for founders should let somebody decline the question without having
- * to describe themselves as "other".
- */
-export const GENDER_VALUES = ['male', 'female', 'other', 'prefer_not_to_say'];
-export const genderSchema = z.enum(GENDER_VALUES);
-// ─── Phone ───────────────────────────────────────────────────────────────────
-/**
- * Indian mobile number: ten raw digits, no country code, matching the standard
- * used across this family. Display adds the `+91`.
- *
- * ⚠️ WHERE IT IS STORED IS NOT A SCHEMA QUESTION, and it has been ruled: the
- * phone lives on the account mirror, never as a second copy on the profile.
- * Two stored copies drift the first time somebody edits one, and the profile's
- * would be the copy nobody keeps in sync.
- */
-export const phoneSchema = z
-    .string()
-    .trim()
-    .regex(/^[6-9]\d{9}$/, VALIDATION_MESSAGE.phoneInvalid);
-// ─── Location ────────────────────────────────────────────────────────────────
-/**
- * Where the founder is based. City and country are what Discover filters on.
- *
- * ONE SHAPE for the profile, the Me tab's patch, onboarding's finish and the
- * location suggestion. It was written out three times until 0.2.0, the same
- * kind of copy that let the profile model lose Instagram.
- *
- * ⚠ `country` is REQUIRED and has NO default. A default here (it used to be
- * `'India'`) is destructive on every write path: a founder in Berlin who
- * corrects only their city would be moved to India by a value they never saw.
- * A body that carries a location carries the whole location. Every stored
- * location has a country, because the model requires one, so the read side
- * loses nothing.
- *
- * This is a DECLARED location, not a GPS reading. Jansathi's rule applies
- * here too: never write a declared location from a GPS capture.
- */
-export const locationSchema = z.object({
-    city: z.string().trim().min(1).max(CITY_MAX),
-    state: optionalTrimmedString(STATE_MAX),
-    country: z.string().trim().min(1).max(COUNTRY_MAX),
-});
-/**
- * `GET /api/v1/location/areas/reverse?lat=&lng=`: plain decimal degrees.
- *
- * A QUERY, so coercion is right here: everything in a URL is a string. An
- * emptied parameter is "missing", never 0, because 0,0 is a real place in the
- * Gulf of Guinea and would be looked up rather than refused.
- */
-export const coordinatesQuerySchema = z.object({
-    lat: z.preprocess(emptyStringToUndefined, z.coerce.number().min(-90).max(90)),
-    lng: z.preprocess(emptyStringToUndefined, z.coerce.number().min(-180).max(180)),
-});
-/**
- * The city these coordinates look like, for the member to CONFIRM, or `null`
- * when the lookup could not place them confidently (or they are outside India,
- * whose area data is all there is). A suggestion, never a write: only what the
- * member then submits becomes their location.
- */
-export const suggestedLocationSchema = locationSchema.nullable();
-// ─── Pagination ──────────────────────────────────────────────────────────────
-/**
- * Cursor pagination query. Feed and Discover both use it.
- *
- * Cursor, not page number: the community feed changes under the reader, and an
- * offset would repeat or skip posts as new ones land.
- */
-export const paginationQuerySchema = z.object({
-    /**
-     * `?limit=` with nothing after it is treated as "not provided", not as a
-     * validation failure. A client that clears the control sends the empty
-     * string, and `z.coerce.number()` turns that into 0, which then fails
-     * `.min(1)`: the member sees a 400 for a page they never asked to size.
-     */
-    limit: z.preprocess(emptyStringToUndefined, z.coerce.number().int().min(1).max(PAGE_SIZE_MAX).default(PAGE_SIZE_DEFAULT)),
-    cursor: z.string().trim().min(1).optional(),
-});
-//# sourceMappingURL=common.js.map