founder-schema 0.18.0 → 0.20.0

package/dist/founder-profile.js

@@ -1,180 +0,0 @@
-/**
- * founder-schema — The founder profile
- *
- * One member, one profile. The central auth account owns identity (email,
- * verification, deletion); this owns everything Founder Circle shows.
- *
- * @module founder-schema/founder-profile
- */
-import { z } from 'zod';
-import { chosenUsernameSchema, GOAL_VALUES, goalSchema, httpUrlSchema, industrySchema, locationSchema, optionalTrimmedString, skillSchema, startupStageSchema, usernameSchema, } from './common.js';
-import { ABOUT_MAX, DISPLAY_NAME_MAX, FOUNDED_YEAR_MIN, HEADLINE_MAX, SKILLS_MAX, TEAM_SIZE_MAX, TEAM_SIZE_MIN, VENTURE_NAME_MAX, VENTURE_TAGLINE_MAX, } from './limits.js';
-import { VALIDATION_MESSAGE } from './validation.js';
-// ─── Venture ─────────────────────────────────────────────────────────────────
-/**
- * ⚠ NUMBERS ARE NUMBERS, never coerced. This is a BODY, which arrives as JSON
- * and already carries types. `z.coerce.number()` here accepted `teamSize: true`
- * as 1 and `"  "` as 0, and made the schema's input type `unknown`, so a form
- * typed against it could put anything in the field. Coercion belongs to query
- * strings, where everything is text; a form converts its text input before it
- * builds the body.
- */
-export const ventureSchema = z.object({
-    name: z.string().trim().min(1).max(VENTURE_NAME_MAX),
-    tagline: optionalTrimmedString(VENTURE_TAGLINE_MAX),
-    website: httpUrlSchema.optional(),
-    industry: industrySchema,
-    stage: startupStageSchema,
-    /** Team size including the founder. Optional: a solo pre-idea founder has none to report. */
-    teamSize: z.number().int().min(TEAM_SIZE_MIN).max(TEAM_SIZE_MAX).optional(),
-    /**
-     * Not in the future. The bound is read per parse, never captured once.
-     *
-     * `.max(new Date().getUTCFullYear())` looks equivalent and is not: it is
-     * evaluated when this module is imported, so a server process still up on
-     * 1 January rejects the new year until somebody restarts it. The backend's
-     * Mongoose model deliberately carries no upper bound for the same reason, a
-     * `max` there being frozen at schema construction. This is where the ceiling
-     * lives.
-     */
-    foundedYear: z
-        .number()
-        .int()
-        .min(FOUNDED_YEAR_MIN)
-        .refine((year) => year <= new Date().getUTCFullYear(), {
-        error: VALIDATION_MESSAGE.foundedYearFuture,
-    })
-        .optional(),
-});
-// ─── Profile ─────────────────────────────────────────────────────────────────
-/**
- * The founder's off-platform links. ONE shape: onboarding's contact step picks
- * its three from this, so a link one side knows can never be missing on the
- * other. (It was written twice until 0.2.0, and the profile side lacked
- * Instagram, which onboarding collected.)
- *
- * Defined without a default, because the read side wants one and the write
- * side must not have one; each adds its own.
- */
-export const founderLinksSchema = z.object({
-    linkedin: httpUrlSchema.optional(),
-    x: httpUrlSchema.optional(),
-    instagram: httpUrlSchema.optional(),
-    github: httpUrlSchema.optional(),
-    website: httpUrlSchema.optional(),
-});
-/**
- * The profile as the owner sees it. A peer sees the redacted projection
- * (`founderCardSchema`), which is built on the server and never by dropping
- * fields on the client.
- */
-export const founderProfileSchema = z.object({
-    id: z.string(),
-    userId: z.string(),
-    username: usernameSchema,
-    displayName: z.string().trim().min(1).max(DISPLAY_NAME_MAX),
-    headline: optionalTrimmedString(HEADLINE_MAX),
-    about: optionalTrimmedString(ABOUT_MAX),
-    /**
-     * Plain `z.url()`, NOT `httpUrlSchema`, and the difference is deliberate.
-     *
-     * No member can write this field: it appears in no write body, and
-     * `public-surface.test.ts` asserts that and will fail the day somebody adds it
-     * to a form. So the scheme restriction would be defending a field that takes
-     * no member input, while refusing hosts we legitimately serve avatars from,
-     * our own dev host among them. A read schema that rejects our own response is
-     * a self-inflicted outage.
-     *
-     * ⚠️ That argument holds only while nothing member-supplied reaches this
-     * field. Two sources write an avatar today and NEITHER is a member typing a
-     * URL: our own upload path, and the central-auth `user.created` /
-     * `user.updated` webhook, which carries the Google OAuth picture. If a
-     * "paste a link to your photo" control is ever added, this goes back to
-     * `httpUrlSchema` and the ruling behind it is void.
-     */
-    avatarUrl: z.url().optional(),
-    location: locationSchema.optional(),
-    venture: ventureSchema.optional(),
-    skills: z.array(skillSchema).max(SKILLS_MAX).default([]),
-    goals: z.array(goalSchema).max(GOAL_VALUES.length).default([]),
-    links: founderLinksSchema.default({}),
-    /** Onboarding is finished and the member is visible in Discover. */
-    isOnboarded: z.boolean().default(false),
-    /** Member paused their own profile. Hidden from Discover, keeps their data. */
-    isActive: z.boolean().default(true),
-    createdAt: z.iso.datetime(),
-    updatedAt: z.iso.datetime(),
-});
-/**
- * What one founder sees of another in Discover and on a profile page.
- *
- * Built server-side. Keep it a strict subset of `founderProfileSchema` — if a
- * private field ever needs to show here, that is a product decision, not an
- * accident of spreading the full document.
- */
-export const founderCardSchema = founderProfileSchema.pick({
-    id: true,
-    username: true,
-    displayName: true,
-    headline: true,
-    avatarUrl: true,
-    location: true,
-    venture: true,
-    skills: true,
-    goals: true,
-});
-// ─── Write bodies ────────────────────────────────────────────────────────────
-/**
- * A text field the member is allowed to empty.
- *
- * Three states, and they are deliberately distinct:
- *   absent  do not touch this field
- *   null    clear it (the backend turns this into an `$unset`)
- *   ""      REJECTED
- *
- * The empty string is refused on purpose. A form that forgets to convert a
- * cleared input to `null` then fails loudly at the boundary, instead of being
- * silently dropped and leaving the member staring at text they just deleted.
- * `optionalTrimmedString` does the dropping, which is right for a create body
- * and wrong for a patch.
- */
-const clearableText = (maxLength) => z.string().trim().min(1, VALIDATION_MESSAGE.clearWithNull).max(maxLength).nullable().optional();
-/**
- * Patch body for the Me tab. Only the keys the member actually changed.
- *
- * ⚠️ Written as its own object ON PURPOSE. Do NOT rebuild it as
- * `founderProfileSchema.pick({...}).partial()`: `.partial()` does not switch
- * off `.default()`, so `skills`, `goals` and `links` would materialise as
- * `[]`, `[]` and `{}` on every request, including an empty one. Under a `$set`
- * that wipes a member's skills and every one of their links the moment they
- * edit their display name. `tsc` cannot see it and the request looks correct in
- * the network tab.
- *
- * The rule this comes from: defaults belong on the READ side. A write body
- * states what the caller sent and nothing else.
- */
-export const updateFounderProfileBodySchema = z.object({
-    displayName: z.string().trim().min(1).max(DISPLAY_NAME_MAX).optional(),
-    headline: clearableText(HEADLINE_MAX),
-    about: clearableText(ABOUT_MAX),
-    /** Carries the whole location; `locationSchema` has no default to fill a gap. */
-    location: locationSchema.optional(),
-    venture: ventureSchema.optional(),
-    skills: z.array(skillSchema).max(SKILLS_MAX).optional(),
-    goals: z.array(goalSchema).max(GOAL_VALUES.length).optional(),
-    /** Sent whole. To drop one link, send the object without that key. */
-    links: founderLinksSchema.optional(),
-});
-/**
- * Username change. Separate from the profile patch because it needs a
- * uniqueness check, and it refuses a reserved handle (`chosenUsernameSchema`).
- */
-export const updateUsernameBodySchema = z.object({ username: chosenUsernameSchema });
-/** Availability probe behind the username field. */
-export const usernameAvailabilitySchema = z.object({
-    username: usernameSchema,
-    available: z.boolean(),
-    /** Present when unavailable: `taken` or `reserved`. */
-    reason: z.enum(['taken', 'reserved']).optional(),
-});
-//# sourceMappingURL=founder-profile.js.map

package/dist/founder-profile.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"founder-profile.js","sourceRoot":"","sources":["../src/founder-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,UAAU,EACV,aAAa,EACb,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,WAAW,EACX,kBAAkB,EAClB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACpD,OAAO,EAAE,qBAAqB,CAAC,mBAAmB,CAAC;IACnD,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,cAAc;IACxB,KAAK,EAAE,kBAAkB;IACzB,6FAA6F;IAC7F,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IAC3E;;;;;;;;;OASG;IACH,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,gBAAgB,CAAC;SACrB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE;QACrD,KAAK,EAAE,kBAAkB,CAAC,iBAAiB;KAC5C,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAGH,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE;IAClC,CAAC,EAAE,aAAa,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,aAAa,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,cAAc;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC3D,QAAQ,EAAE,qBAAqB,CAAC,YAAY,CAAC;IAC7C,KAAK,EAAE,qBAAqB,CAAC,SAAS,CAAC;IACvC;;;;;;;;;;;;;;;;OAgBG;IACH,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D,KAAK,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,oEAAoE;IACpE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,+EAA+E;IAC/E,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,IAAI,CAAC;IACzD,EAAE,EAAE,IAAI;IACR,QAAQ,EAAE,IAAI;IACd,WAAW,EAAE,IAAI;IACjB,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,IAAI;IACZ,KAAK,EAAE,IAAI;CACZ,CAAC,CAAC;AAGH,gFAAgF;AAEhF;;;;;;;;;;;;;GAaG;AACH,MAAM,aAAa,GAAG,CAAC,SAAiB,EAAE,EAAE,CAC1C,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC;AAElG;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IACtE,QAAQ,EAAE,aAAa,CAAC,YAAY,CAAC;IACrC,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC;IAC/B,iFAAiF;IACjF,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;IACvD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IAC7D,sEAAsE;IACtE,KAAK,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAGrF,oDAAoD;AACpD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,uDAAuD;IACvD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — The founder profile\n *\n * One member, one profile. The central auth account owns identity (email,\n * verification, deletion); this owns everything Founder Circle shows.\n *\n * @module founder-schema/founder-profile\n */\n\nimport { z } from 'zod';\nimport {\n  chosenUsernameSchema,\n  GOAL_VALUES,\n  goalSchema,\n  httpUrlSchema,\n  industrySchema,\n  locationSchema,\n  optionalTrimmedString,\n  skillSchema,\n  startupStageSchema,\n  usernameSchema,\n} from './common.js';\nimport {\n  ABOUT_MAX,\n  DISPLAY_NAME_MAX,\n  FOUNDED_YEAR_MIN,\n  HEADLINE_MAX,\n  SKILLS_MAX,\n  TEAM_SIZE_MAX,\n  TEAM_SIZE_MIN,\n  VENTURE_NAME_MAX,\n  VENTURE_TAGLINE_MAX,\n} from './limits.js';\nimport { VALIDATION_MESSAGE } from './validation.js';\n\n// ─── Venture ─────────────────────────────────────────────────────────────────\n\n/**\n * ⚠ NUMBERS ARE NUMBERS, never coerced. This is a BODY, which arrives as JSON\n * and already carries types. `z.coerce.number()` here accepted `teamSize: true`\n * as 1 and `\"  \"` as 0, and made the schema's input type `unknown`, so a form\n * typed against it could put anything in the field. Coercion belongs to query\n * strings, where everything is text; a form converts its text input before it\n * builds the body.\n */\nexport const ventureSchema = z.object({\n  name: z.string().trim().min(1).max(VENTURE_NAME_MAX),\n  tagline: optionalTrimmedString(VENTURE_TAGLINE_MAX),\n  website: httpUrlSchema.optional(),\n  industry: industrySchema,\n  stage: startupStageSchema,\n  /** Team size including the founder. Optional: a solo pre-idea founder has none to report. */\n  teamSize: z.number().int().min(TEAM_SIZE_MIN).max(TEAM_SIZE_MAX).optional(),\n  /**\n   * Not in the future. The bound is read per parse, never captured once.\n   *\n   * `.max(new Date().getUTCFullYear())` looks equivalent and is not: it is\n   * evaluated when this module is imported, so a server process still up on\n   * 1 January rejects the new year until somebody restarts it. The backend's\n   * Mongoose model deliberately carries no upper bound for the same reason, a\n   * `max` there being frozen at schema construction. This is where the ceiling\n   * lives.\n   */\n  foundedYear: z\n    .number()\n    .int()\n    .min(FOUNDED_YEAR_MIN)\n    .refine((year) => year <= new Date().getUTCFullYear(), {\n      error: VALIDATION_MESSAGE.foundedYearFuture,\n    })\n    .optional(),\n});\nexport type Venture = z.infer<typeof ventureSchema>;\n\n// ─── Profile ─────────────────────────────────────────────────────────────────\n\n/**\n * The founder's off-platform links. ONE shape: onboarding's contact step picks\n * its three from this, so a link one side knows can never be missing on the\n * other. (It was written twice until 0.2.0, and the profile side lacked\n * Instagram, which onboarding collected.)\n *\n * Defined without a default, because the read side wants one and the write\n * side must not have one; each adds its own.\n */\nexport const founderLinksSchema = z.object({\n  linkedin: httpUrlSchema.optional(),\n  x: httpUrlSchema.optional(),\n  instagram: httpUrlSchema.optional(),\n  github: httpUrlSchema.optional(),\n  website: httpUrlSchema.optional(),\n});\nexport type FounderLinks = z.infer<typeof founderLinksSchema>;\n\n/**\n * The profile as the owner sees it. A peer sees the redacted projection\n * (`founderCardSchema`), which is built on the server and never by dropping\n * fields on the client.\n */\nexport const founderProfileSchema = z.object({\n  id: z.string(),\n  userId: z.string(),\n  username: usernameSchema,\n  displayName: z.string().trim().min(1).max(DISPLAY_NAME_MAX),\n  headline: optionalTrimmedString(HEADLINE_MAX),\n  about: optionalTrimmedString(ABOUT_MAX),\n  /**\n   * Plain `z.url()`, NOT `httpUrlSchema`, and the difference is deliberate.\n   *\n   * No member can write this field: it appears in no write body, and\n   * `public-surface.test.ts` asserts that and will fail the day somebody adds it\n   * to a form. So the scheme restriction would be defending a field that takes\n   * no member input, while refusing hosts we legitimately serve avatars from,\n   * our own dev host among them. A read schema that rejects our own response is\n   * a self-inflicted outage.\n   *\n   * ⚠️ That argument holds only while nothing member-supplied reaches this\n   * field. Two sources write an avatar today and NEITHER is a member typing a\n   * URL: our own upload path, and the central-auth `user.created` /\n   * `user.updated` webhook, which carries the Google OAuth picture. If a\n   * \"paste a link to your photo\" control is ever added, this goes back to\n   * `httpUrlSchema` and the ruling behind it is void.\n   */\n  avatarUrl: z.url().optional(),\n  location: locationSchema.optional(),\n  venture: ventureSchema.optional(),\n  skills: z.array(skillSchema).max(SKILLS_MAX).default([]),\n  goals: z.array(goalSchema).max(GOAL_VALUES.length).default([]),\n  links: founderLinksSchema.default({}),\n  /** Onboarding is finished and the member is visible in Discover. */\n  isOnboarded: z.boolean().default(false),\n  /** Member paused their own profile. Hidden from Discover, keeps their data. */\n  isActive: z.boolean().default(true),\n  createdAt: z.iso.datetime(),\n  updatedAt: z.iso.datetime(),\n});\nexport type FounderProfile = z.infer<typeof founderProfileSchema>;\n\n/**\n * What one founder sees of another in Discover and on a profile page.\n *\n * Built server-side. Keep it a strict subset of `founderProfileSchema` — if a\n * private field ever needs to show here, that is a product decision, not an\n * accident of spreading the full document.\n */\nexport const founderCardSchema = founderProfileSchema.pick({\n  id: true,\n  username: true,\n  displayName: true,\n  headline: true,\n  avatarUrl: true,\n  location: true,\n  venture: true,\n  skills: true,\n  goals: true,\n});\nexport type FounderCard = z.infer<typeof founderCardSchema>;\n\n// ─── Write bodies ────────────────────────────────────────────────────────────\n\n/**\n * A text field the member is allowed to empty.\n *\n * Three states, and they are deliberately distinct:\n *   absent  do not touch this field\n *   null    clear it (the backend turns this into an `$unset`)\n *   \"\"      REJECTED\n *\n * The empty string is refused on purpose. A form that forgets to convert a\n * cleared input to `null` then fails loudly at the boundary, instead of being\n * silently dropped and leaving the member staring at text they just deleted.\n * `optionalTrimmedString` does the dropping, which is right for a create body\n * and wrong for a patch.\n */\nconst clearableText = (maxLength: number) =>\n  z.string().trim().min(1, VALIDATION_MESSAGE.clearWithNull).max(maxLength).nullable().optional();\n\n/**\n * Patch body for the Me tab. Only the keys the member actually changed.\n *\n * ⚠️ Written as its own object ON PURPOSE. Do NOT rebuild it as\n * `founderProfileSchema.pick({...}).partial()`: `.partial()` does not switch\n * off `.default()`, so `skills`, `goals` and `links` would materialise as\n * `[]`, `[]` and `{}` on every request, including an empty one. Under a `$set`\n * that wipes a member's skills and every one of their links the moment they\n * edit their display name. `tsc` cannot see it and the request looks correct in\n * the network tab.\n *\n * The rule this comes from: defaults belong on the READ side. A write body\n * states what the caller sent and nothing else.\n */\nexport const updateFounderProfileBodySchema = z.object({\n  displayName: z.string().trim().min(1).max(DISPLAY_NAME_MAX).optional(),\n  headline: clearableText(HEADLINE_MAX),\n  about: clearableText(ABOUT_MAX),\n  /** Carries the whole location; `locationSchema` has no default to fill a gap. */\n  location: locationSchema.optional(),\n  venture: ventureSchema.optional(),\n  skills: z.array(skillSchema).max(SKILLS_MAX).optional(),\n  goals: z.array(goalSchema).max(GOAL_VALUES.length).optional(),\n  /** Sent whole. To drop one link, send the object without that key. */\n  links: founderLinksSchema.optional(),\n});\nexport type UpdateFounderProfileBody = z.infer<typeof updateFounderProfileBodySchema>;\n\n/**\n * Username change. Separate from the profile patch because it needs a\n * uniqueness check, and it refuses a reserved handle (`chosenUsernameSchema`).\n */\nexport const updateUsernameBodySchema = z.object({ username: chosenUsernameSchema });\nexport type UpdateUsernameBody = z.infer<typeof updateUsernameBodySchema>;\n\n/** Availability probe behind the username field. */\nexport const usernameAvailabilitySchema = z.object({\n  username: usernameSchema,\n  available: z.boolean(),\n  /** Present when unavailable: `taken` or `reserved`. */\n  reason: z.enum(['taken', 'reserved']).optional(),\n});\nexport type UsernameAvailability = z.infer<typeof usernameAvailabilitySchema>;\n"]}

package/dist/limits.d.ts

@@ -1,76 +0,0 @@
-/**
- * founder-schema — Every length, size and count limit, by name
- *
- * ONE PLACE FOR EVERY NUMBER a client and the server must agree on. Before this,
- * the limits lived inline (`.max(80)`, `.max(1000)`) where nothing else could
- * read them, so the web client re-typed each one for its counters and the
- * backend re-typed them as Mongoose `maxlength`. Three copies of one number is
- * how the image alt text came to be 280 here and 500 in the backend.
- *
- * The rule from 0.2.0: a schema uses one of these constants, a consumer imports
- * the same constant, and nobody writes the digits again.
- *
- * Imports nothing, so any module here can use it without a cycle. Limits that
- * already had a name in their own module (POST_MAX_BODY_CHARS, POLL_*,
- * USERNAME_*, INTERESTS_*, MIN_AGE_YEARS...) stay where they are and keep their
- * names; this file holds the ones that had none.
- *
- * ⚠️ Lowering a limit is a breaking change for stored data: a value that was
- * valid when written fails the next edit. Raise freely; lower deliberately.
- *
- * @module founder-schema/limits
- */
-export declare const DISPLAY_NAME_MAX = 80;
-export declare const HEADLINE_MAX = 120;
-export declare const ABOUT_MAX = 1000;
-/** Skills a member may list. Discover filters on them. */
-export declare const SKILLS_MAX = 8;
-/** Goals a member must pick at onboarding. The list itself caps the maximum. */
-export declare const GOALS_MIN = 1;
-export declare const CITY_MAX = 80;
-export declare const STATE_MAX = 80;
-export declare const COUNTRY_MAX = 80;
-export declare const VENTURE_NAME_MAX = 120;
-export declare const VENTURE_TAGLINE_MAX = 160;
-/** Team size including the founder. */
-export declare const TEAM_SIZE_MIN = 1;
-export declare const TEAM_SIZE_MAX = 100000;
-/** Earliest founding year accepted. The ceiling is "this year", read per parse. */
-export declare const FOUNDED_YEAR_MIN = 1900;
-/**
- * Longest URL a member may TYPE. Applied by `httpUrlSchema` itself, so every
- * member URL carries it: profile links, a venture website.
- *
- * ⚠ NOT applied to URLs the server reads from elsewhere (a link preview's
- * page or image), which use `safeUrlSchema`: a 314-character CDN image URL is
- * ordinary, and one of them would otherwise fail a whole feed page.
- */
-export declare const LINK_URL_MAX = 300;
-/** Author-supplied image description. The backend's stored copy uses this too. */
-export declare const MEDIA_ALT_MAX = 280;
-export declare const LINK_PREVIEW_TITLE_MAX = 200;
-export declare const LINK_PREVIEW_DESCRIPTION_MAX = 500;
-/** The free-text note on a report. */
-export declare const REPORT_NOTE_MAX = 1000;
-/**
- * Largest file accepted for upload: 10 MB.
- *
- * Checked on BOTH sides and for different reasons. The server refuses a bigger
- * object when it is attached. The client checks before uploading, because a
- * presigned PUT caps the content type but not the size, so a member on a phone
- * connection would otherwise watch a 40 MB upload finish and then fail.
- */
-export declare const UPLOAD_MAX_BYTES: number;
-/** Values one Discover multi-select filter may carry (`?skill=a&skill=b`). */
-export declare const DISCOVER_FILTER_VALUES_MAX = 10;
-/** Discover's free-text inputs: the name search, city and country. */
-export declare const DISCOVER_TEXT_MAX = 80;
-/** Page size bounds for every cursor-paged list. */
-export declare const PAGE_SIZE_MAX = 50;
-export declare const PAGE_SIZE_DEFAULT = 20;
-/**
- * Members one participants lookup may name. Bounded so the lookup cannot be
- * used to page through the directory.
- */
-export declare const CHAT_PARTICIPANTS_MAX = 100;
-//# sourceMappingURL=limits.d.ts.map

package/dist/limits.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../src/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,YAAY,MAAM,CAAC;AAChC,eAAO,MAAM,SAAS,OAAO,CAAC;AAC9B,0DAA0D;AAC1D,eAAO,MAAM,UAAU,IAAI,CAAC;AAC5B,gFAAgF;AAChF,eAAO,MAAM,SAAS,IAAI,CAAC;AAI3B,eAAO,MAAM,QAAQ,KAAK,CAAC;AAC3B,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,eAAO,MAAM,WAAW,KAAK,CAAC;AAI9B,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,uCAAuC;AACvC,eAAO,MAAM,aAAa,IAAI,CAAC;AAC/B,eAAO,MAAM,aAAa,SAAU,CAAC;AACrC,mFAAmF;AACnF,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAIrC;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,MAAM,CAAC;AAIhC,kFAAkF;AAClF,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,sCAAsC;AACtC,eAAO,MAAM,eAAe,OAAO,CAAC;AAIpC;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,QAAmB,CAAC;AAIjD,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,sEAAsE;AACtE,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,oDAAoD;AACpD,eAAO,MAAM,aAAa,KAAK,CAAC;AAChC,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAIpC;;;GAGG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC"}

package/dist/limits.js

@@ -1,84 +0,0 @@
-/**
- * founder-schema — Every length, size and count limit, by name
- *
- * ONE PLACE FOR EVERY NUMBER a client and the server must agree on. Before this,
- * the limits lived inline (`.max(80)`, `.max(1000)`) where nothing else could
- * read them, so the web client re-typed each one for its counters and the
- * backend re-typed them as Mongoose `maxlength`. Three copies of one number is
- * how the image alt text came to be 280 here and 500 in the backend.
- *
- * The rule from 0.2.0: a schema uses one of these constants, a consumer imports
- * the same constant, and nobody writes the digits again.
- *
- * Imports nothing, so any module here can use it without a cycle. Limits that
- * already had a name in their own module (POST_MAX_BODY_CHARS, POLL_*,
- * USERNAME_*, INTERESTS_*, MIN_AGE_YEARS...) stay where they are and keep their
- * names; this file holds the ones that had none.
- *
- * ⚠️ Lowering a limit is a breaking change for stored data: a value that was
- * valid when written fails the next edit. Raise freely; lower deliberately.
- *
- * @module founder-schema/limits
- */
-// ─── Profile ─────────────────────────────────────────────────────────────────
-export const DISPLAY_NAME_MAX = 80;
-export const HEADLINE_MAX = 120;
-export const ABOUT_MAX = 1000;
-/** Skills a member may list. Discover filters on them. */
-export const SKILLS_MAX = 8;
-/** Goals a member must pick at onboarding. The list itself caps the maximum. */
-export const GOALS_MIN = 1;
-// ─── Location ────────────────────────────────────────────────────────────────
-export const CITY_MAX = 80;
-export const STATE_MAX = 80;
-export const COUNTRY_MAX = 80;
-// ─── Venture ─────────────────────────────────────────────────────────────────
-export const VENTURE_NAME_MAX = 120;
-export const VENTURE_TAGLINE_MAX = 160;
-/** Team size including the founder. */
-export const TEAM_SIZE_MIN = 1;
-export const TEAM_SIZE_MAX = 100_000;
-/** Earliest founding year accepted. The ceiling is "this year", read per parse. */
-export const FOUNDED_YEAR_MIN = 1900;
-// ─── Links ───────────────────────────────────────────────────────────────────
-/**
- * Longest URL a member may TYPE. Applied by `httpUrlSchema` itself, so every
- * member URL carries it: profile links, a venture website.
- *
- * ⚠ NOT applied to URLs the server reads from elsewhere (a link preview's
- * page or image), which use `safeUrlSchema`: a 314-character CDN image URL is
- * ordinary, and one of them would otherwise fail a whole feed page.
- */
-export const LINK_URL_MAX = 300;
-// ─── Feed and moderation ─────────────────────────────────────────────────────
-/** Author-supplied image description. The backend's stored copy uses this too. */
-export const MEDIA_ALT_MAX = 280;
-export const LINK_PREVIEW_TITLE_MAX = 200;
-export const LINK_PREVIEW_DESCRIPTION_MAX = 500;
-/** The free-text note on a report. */
-export const REPORT_NOTE_MAX = 1000;
-// ─── Uploads ─────────────────────────────────────────────────────────────────
-/**
- * Largest file accepted for upload: 10 MB.
- *
- * Checked on BOTH sides and for different reasons. The server refuses a bigger
- * object when it is attached. The client checks before uploading, because a
- * presigned PUT caps the content type but not the size, so a member on a phone
- * connection would otherwise watch a 40 MB upload finish and then fail.
- */
-export const UPLOAD_MAX_BYTES = 10 * 1024 * 1024;
-// ─── Lists and search ────────────────────────────────────────────────────────
-/** Values one Discover multi-select filter may carry (`?skill=a&skill=b`). */
-export const DISCOVER_FILTER_VALUES_MAX = 10;
-/** Discover's free-text inputs: the name search, city and country. */
-export const DISCOVER_TEXT_MAX = 80;
-/** Page size bounds for every cursor-paged list. */
-export const PAGE_SIZE_MAX = 50;
-export const PAGE_SIZE_DEFAULT = 20;
-// ─── Chat ────────────────────────────────────────────────────────────────────
-/**
- * Members one participants lookup may name. Bounded so the lookup cannot be
- * used to page through the directory.
- */
-export const CHAT_PARTICIPANTS_MAX = 100;
-//# sourceMappingURL=limits.js.map

package/dist/limits.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"limits.js","sourceRoot":"","sources":["../src/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAChC,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC;AAC9B,0DAA0D;AAC1D,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAC5B,gFAAgF;AAChF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AAE3B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,QAAQ,GAAG,EAAE,CAAC;AAC3B,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAC5B,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAE9B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AACpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,uCAAuC;AACvC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AACrC,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAEhC,gFAAgF;AAEhF,kFAAkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AACjC,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAChD,sCAAsC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAEpC,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD,gFAAgF;AAEhF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C,sEAAsE;AACtE,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,oDAAoD;AACpD,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAChC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC","sourcesContent":["/**\n * founder-schema — Every length, size and count limit, by name\n *\n * ONE PLACE FOR EVERY NUMBER a client and the server must agree on. Before this,\n * the limits lived inline (`.max(80)`, `.max(1000)`) where nothing else could\n * read them, so the web client re-typed each one for its counters and the\n * backend re-typed them as Mongoose `maxlength`. Three copies of one number is\n * how the image alt text came to be 280 here and 500 in the backend.\n *\n * The rule from 0.2.0: a schema uses one of these constants, a consumer imports\n * the same constant, and nobody writes the digits again.\n *\n * Imports nothing, so any module here can use it without a cycle. Limits that\n * already had a name in their own module (POST_MAX_BODY_CHARS, POLL_*,\n * USERNAME_*, INTERESTS_*, MIN_AGE_YEARS...) stay where they are and keep their\n * names; this file holds the ones that had none.\n *\n * ⚠️ Lowering a limit is a breaking change for stored data: a value that was\n * valid when written fails the next edit. Raise freely; lower deliberately.\n *\n * @module founder-schema/limits\n */\n\n// ─── Profile ─────────────────────────────────────────────────────────────────\n\nexport const DISPLAY_NAME_MAX = 80;\nexport const HEADLINE_MAX = 120;\nexport const ABOUT_MAX = 1000;\n/** Skills a member may list. Discover filters on them. */\nexport const SKILLS_MAX = 8;\n/** Goals a member must pick at onboarding. The list itself caps the maximum. */\nexport const GOALS_MIN = 1;\n\n// ─── Location ────────────────────────────────────────────────────────────────\n\nexport const CITY_MAX = 80;\nexport const STATE_MAX = 80;\nexport const COUNTRY_MAX = 80;\n\n// ─── Venture ─────────────────────────────────────────────────────────────────\n\nexport const VENTURE_NAME_MAX = 120;\nexport const VENTURE_TAGLINE_MAX = 160;\n/** Team size including the founder. */\nexport const TEAM_SIZE_MIN = 1;\nexport const TEAM_SIZE_MAX = 100_000;\n/** Earliest founding year accepted. The ceiling is \"this year\", read per parse. */\nexport const FOUNDED_YEAR_MIN = 1900;\n\n// ─── Links ───────────────────────────────────────────────────────────────────\n\n/**\n * Longest URL a member may TYPE. Applied by `httpUrlSchema` itself, so every\n * member URL carries it: profile links, a venture website.\n *\n * ⚠ NOT applied to URLs the server reads from elsewhere (a link preview's\n * page or image), which use `safeUrlSchema`: a 314-character CDN image URL is\n * ordinary, and one of them would otherwise fail a whole feed page.\n */\nexport const LINK_URL_MAX = 300;\n\n// ─── Feed and moderation ─────────────────────────────────────────────────────\n\n/** Author-supplied image description. The backend's stored copy uses this too. */\nexport const MEDIA_ALT_MAX = 280;\nexport const LINK_PREVIEW_TITLE_MAX = 200;\nexport const LINK_PREVIEW_DESCRIPTION_MAX = 500;\n/** The free-text note on a report. */\nexport const REPORT_NOTE_MAX = 1000;\n\n// ─── Uploads ─────────────────────────────────────────────────────────────────\n\n/**\n * Largest file accepted for upload: 10 MB.\n *\n * Checked on BOTH sides and for different reasons. The server refuses a bigger\n * object when it is attached. The client checks before uploading, because a\n * presigned PUT caps the content type but not the size, so a member on a phone\n * connection would otherwise watch a 40 MB upload finish and then fail.\n */\nexport const UPLOAD_MAX_BYTES = 10 * 1024 * 1024;\n\n// ─── Lists and search ────────────────────────────────────────────────────────\n\n/** Values one Discover multi-select filter may carry (`?skill=a&skill=b`). */\nexport const DISCOVER_FILTER_VALUES_MAX = 10;\n/** Discover's free-text inputs: the name search, city and country. */\nexport const DISCOVER_TEXT_MAX = 80;\n/** Page size bounds for every cursor-paged list. */\nexport const PAGE_SIZE_MAX = 50;\nexport const PAGE_SIZE_DEFAULT = 20;\n\n// ─── Chat ────────────────────────────────────────────────────────────────────\n\n/**\n * Members one participants lookup may name. Bounded so the lookup cannot be\n * used to page through the directory.\n */\nexport const CHAT_PARTICIPANTS_MAX = 100;\n"]}