founder-schema 0.3.0 → 0.4.0

package/dist/core/common.js

@@ -0,0 +1,340 @@
+/**
+ * founder-schema — Shared helpers and core enums
+ *
+ * The stable building blocks reused across every Founder Circle schema.
+ * Anything that both the backend and a client need to agree on lives here.
+ *
+ * @module founder-schema/core/common
+ */
+import { z } from 'zod';
+import { CITY_MAX, COUNTRY_MAX, LINK_URL_MAX, PAGE_SIZE_DEFAULT, PAGE_SIZE_MAX, STATE_MAX, } from './limits.js';
+import { VALIDATION_MESSAGE } from './validation.js';
+// ─── String helpers ──────────────────────────────────────────────────────────
+/**
+ * Converts empty / whitespace-only strings to `undefined` so Zod `.optional()`
+ * treats them as "not provided".
+ *
+ * Why this exists: an HTML form submits `""` for a cleared field, and without
+ * this an optional field would be stored as an empty string rather than left
+ * alone. Jansathi shipped that bug in dating onboarding.
+ */
+export const emptyStringToUndefined = (value) => {
+    if (typeof value === 'string' && value.trim() === '')
+        return undefined;
+    return value;
+};
+/** Optional trimmed string. Empty strings are coerced to `undefined`. */
+export const optionalTrimmedString = (maxLength = 100) => z.preprocess(emptyStringToUndefined, z.string().trim().max(maxLength).optional());
+/** A Mongo ObjectId as it crosses the wire: 24 lowercase hex characters. */
+export const objectIdSchema = z
+    .string()
+    .regex(/^[0-9a-f]{24}$/i, VALIDATION_MESSAGE.invalidId)
+    .transform((v) => v.toLowerCase());
+// ─── URLs ────────────────────────────────────────────────────────────────────
+/**
+ * A URL safe to store and, after the consumer's own check, to render.
+ *
+ * Use this for EVERY member-supplied URL. Never bare `z.url()`: it accepts any
+ * scheme the URL parser accepts, so `javascript:alert(document.cookie)`,
+ * `data:text/html,<script>...`, `vbscript:` and `file:///etc/passwd` all pass.
+ * Each of those is stored XSS the moment a client renders it as an `href`, and
+ * `data:` is the same in an `<img src>`.
+ *
+ * `hostname` is restricted too, not only the scheme. A bare host like
+ * `localhost` or a literal IP is refused, which closes server-side request
+ * forgery: this product runs on EC2 with an instance role, so a member-supplied
+ * `http://169.254.169.254/latest/meta-data/` that anything server-side ever
+ * fetches is a credential read.
+ *
+ * Validating here is necessary and not sufficient. A consumer still treats a
+ * stored URL as untrusted at render time, because rows written before this
+ * existed were never checked.
+ *
+ * ⚠️ IF THIS EVER GROWS A HOST ALLOWLIST, compare the PARSED hostname for
+ * exact equality. Never `includes`, never `endsWith`, never a regex over the
+ * whole URL. Each of these is a real bypass of a naive "is it YouTube" check,
+ * and all three read as obviously fine:
+ *
+ *   https://evil.example/?next=youtube.com/watch  contains the string
+ *   youtube.com.evil.example                      starts with it
+ *   youtu.be.evil.example                         a suffix check passes it
+ *
+ * The same mistake in the opposite direction to the `javascript:` hole: there
+ * the scheme was too permissive, here the host check only LOOKS strict.
+ * (krish hit this rendering inline video, 2026-09-21, and handles it by parsing
+ * and comparing the hostname exactly.)
+ */
+export const safeUrlSchema = z.url({
+    protocol: /^https?$/,
+    hostname: z.regexes.domain,
+    error: VALIDATION_MESSAGE.urlInvalid,
+});
+/**
+ * A URL a member TYPES: `safeUrlSchema` plus the `LINK_URL_MAX` ceiling, so
+ * every member URL carries the same cap and no consumer has to remember it.
+ *
+ * Two schemas, not one, because the cap is about what a person types and is
+ * wrong for what the server reads from elsewhere. Until 0.2.0 there was only
+ * this one, and it capped a link preview's CDN image URL too: one 314-character
+ * `imageUrl` would have failed a whole feed page.
+ */
+export const httpUrlSchema = safeUrlSchema.max(LINK_URL_MAX);
+// ─── Username ────────────────────────────────────────────────────────────────
+/**
+ * Public handle. Derived by the server at onboarding, changeable later.
+ *
+ * Rules are deliberately narrow because the handle appears in URLs and in
+ * mentions: lowercase letters, digits, underscore and a single dot, 3 to 30
+ * characters, must start with a letter.
+ *
+ * This is the FORMAT, and it is what every read shape uses. A handle being
+ * CHOSEN must also not be reserved: that is `chosenUsernameSchema`.
+ */
+export const USERNAME_MIN = 3;
+export const USERNAME_MAX = 30;
+export const usernameSchema = z
+    .string()
+    .trim()
+    .toLowerCase()
+    // Plain bounds: the client words them from the issue's own minimum/maximum.
+    .min(USERNAME_MIN)
+    .max(USERNAME_MAX)
+    .regex(/^[a-z][a-z0-9_]*(\.[a-z0-9_]+)?$/, VALIDATION_MESSAGE.usernameInvalid);
+/**
+ * Handles this product keeps for itself: route names a handle would shadow,
+ * and words that would let a member pass as staff.
+ *
+ * ⚠ HERE, IN THE CONTRACT, since 0.2.0. It used to live in the backend so it
+ * could grow without a publish, and nothing ever read it: the server derived
+ * handles without checking it, so a member called "Support" was handed
+ * `support`. One list, read by the server when it derives a handle and by any
+ * form that lets a member choose one, is worth a publish per addition.
+ *
+ * Matched exactly, after lowercasing.
+ */
+export const RESERVED_USERNAMES = [
+    'admin',
+    'about',
+    'api',
+    'chat',
+    'discover',
+    'feed',
+    'founder',
+    'foundercircle',
+    'help',
+    'home',
+    'me',
+    'meetup',
+    'moderator',
+    'onboarding',
+    'settings',
+    'staff',
+    'superadmin',
+    'support',
+    'system',
+    'team',
+];
+const RESERVED = new Set(RESERVED_USERNAMES);
+export function isReservedUsername(handle) {
+    return RESERVED.has(handle.trim().toLowerCase());
+}
+/**
+ * A handle a member is CHOOSING: the format, and not reserved.
+ *
+ * ⚠ Not used on read shapes, deliberately. A handle stored before the reserved
+ * check existed must still READ, or one member's old handle would fail every
+ * page that shows their name.
+ */
+export const chosenUsernameSchema = usernameSchema.refine((u) => !isReservedUsername(u), {
+    error: VALIDATION_MESSAGE.usernameReserved,
+});
+// ─── Founder-facing enums ────────────────────────────────────────────────────
+/**
+ * Stage of the founder's current venture.
+ *
+ * Ordered from earliest to latest so a range filter can compare by index. Add
+ * new stages at the END or the stored ordinal of existing rows shifts.
+ */
+export const STARTUP_STAGE_VALUES = [
+    'idea',
+    'validation',
+    'mvp',
+    'pre_seed',
+    'seed',
+    'series_a_plus',
+    'profitable',
+    'exited',
+];
+export const startupStageSchema = z.enum(STARTUP_STAGE_VALUES);
+/**
+ * Industry the venture operates in. Kept as a closed list so Discover filters
+ * are a single indexed equality match rather than a text search.
+ */
+export const INDUSTRY_VALUES = [
+    'agritech',
+    'ai_ml',
+    'b2b_saas',
+    'consumer',
+    'climate',
+    'd2c',
+    'deeptech',
+    'edtech',
+    'fintech',
+    'gaming',
+    'healthtech',
+    'logistics',
+    'manufacturing',
+    'marketplace',
+    'media',
+    'mobility',
+    'proptech',
+    'robotics',
+    'services',
+    'space',
+    'other',
+];
+export const industrySchema = z.enum(INDUSTRY_VALUES);
+/**
+ * What the founder brings. Free-text skills were considered and rejected: two
+ * people typing "growth" and "Growth Marketing" would never match each other in
+ * a filter, and the Discover tab is the whole point of the product.
+ */
+export const SKILL_VALUES = [
+    'engineering',
+    'product',
+    'design',
+    'data',
+    'growth',
+    'sales',
+    'marketing',
+    'operations',
+    'finance',
+    'legal',
+    'hr_people',
+    'supply_chain',
+    'research',
+    'fundraising',
+    'community',
+];
+export const skillSchema = z.enum(SKILL_VALUES);
+/**
+ * What the member is here for. ONE list, replacing three.
+ *
+ * This was `lookingFor` with six values. The design draws eight "Goals &
+ * Passion" tiles and four more on the business step; all three were the same
+ * idea at three grains, and shipping them together would have meant nobody
+ * could say which one Discover filters on - the answer settled by whichever
+ * query got written first. Merged on hary's ruling, 2026-09-21, while there
+ * were still no rows in any database.
+ *
+ * ⚠️ Stored per member and used as a Mongoose enum. Append only; removing a
+ * value orphans documents already saved with it.
+ *
+ * ⚠️ `start_company` READS ODDLY next to its neighbours and is correct. It was
+ * queried on the grounds that it restates `venture.stage: 'idea'`; it does not,
+ * and the reason is worth keeping so nobody re-opens it. Inferring it from the
+ * venture works only for a member who ALREADY HAS a venture row, and somebody
+ * who wants to start a company is precisely the member with no venture at all,
+ * so there is nothing to infer from. It also cannot express a founder with a
+ * running company who wants to start another. Every other value is an ask of
+ * other people and this one is an ask of the product, which is the whole of the
+ * oddness. (hary, 2026-09-21.)
+ */
+export const GOAL_VALUES = [
+    'find_cofounder',
+    'find_investors',
+    'find_customers',
+    'hiring',
+    'partnerships',
+    'mentorship',
+    'grow_network',
+    'business_ideas',
+    'market_insights',
+    'learn_startup',
+    'start_company',
+];
+export const goalSchema = z.enum(GOAL_VALUES);
+// ─── Gender ──────────────────────────────────────────────────────────────────
+/**
+ * Demographic only. Nothing here computes anything from it, unlike the sibling
+ * gym product where gender feeds body-metric maths.
+ *
+ * Takes the family's three values and ADDS one rather than renaming any: a
+ * network for founders should let somebody decline the question without having
+ * to describe themselves as "other".
+ */
+export const GENDER_VALUES = ['male', 'female', 'other', 'prefer_not_to_say'];
+export const genderSchema = z.enum(GENDER_VALUES);
+// ─── Phone ───────────────────────────────────────────────────────────────────
+/**
+ * Indian mobile number: ten raw digits, no country code, matching the standard
+ * used across this family. Display adds the `+91`.
+ *
+ * ⚠️ WHERE IT IS STORED IS NOT A SCHEMA QUESTION, and it has been ruled: the
+ * phone lives on the account mirror, never as a second copy on the profile.
+ * Two stored copies drift the first time somebody edits one, and the profile's
+ * would be the copy nobody keeps in sync.
+ */
+export const phoneSchema = z
+    .string()
+    .trim()
+    .regex(/^[6-9]\d{9}$/, VALIDATION_MESSAGE.phoneInvalid);
+// ─── Location ────────────────────────────────────────────────────────────────
+/**
+ * Where the founder is based. City and country are what Discover filters on.
+ *
+ * ONE SHAPE for the profile, the Me tab's patch, onboarding's finish and the
+ * location suggestion. It was written out three times until 0.2.0, the same
+ * kind of copy that let the profile model lose Instagram.
+ *
+ * ⚠ `country` is REQUIRED and has NO default. A default here (it used to be
+ * `'India'`) is destructive on every write path: a founder in Berlin who
+ * corrects only their city would be moved to India by a value they never saw.
+ * A body that carries a location carries the whole location. Every stored
+ * location has a country, because the model requires one, so the read side
+ * loses nothing.
+ *
+ * This is a DECLARED location, not a GPS reading. Jansathi's rule applies
+ * here too: never write a declared location from a GPS capture.
+ */
+export const locationSchema = z.object({
+    city: z.string().trim().min(1).max(CITY_MAX),
+    state: optionalTrimmedString(STATE_MAX),
+    country: z.string().trim().min(1).max(COUNTRY_MAX),
+});
+/**
+ * `GET /api/v1/location/areas/reverse?lat=&lng=`: plain decimal degrees.
+ *
+ * A QUERY, so coercion is right here: everything in a URL is a string. An
+ * emptied parameter is "missing", never 0, because 0,0 is a real place in the
+ * Gulf of Guinea and would be looked up rather than refused.
+ */
+export const coordinatesQuerySchema = z.object({
+    lat: z.preprocess(emptyStringToUndefined, z.coerce.number().min(-90).max(90)),
+    lng: z.preprocess(emptyStringToUndefined, z.coerce.number().min(-180).max(180)),
+});
+/**
+ * The city these coordinates look like, for the member to CONFIRM, or `null`
+ * when the lookup could not place them confidently (or they are outside India,
+ * whose area data is all there is). A suggestion, never a write: only what the
+ * member then submits becomes their location.
+ */
+export const suggestedLocationSchema = locationSchema.nullable();
+// ─── Pagination ──────────────────────────────────────────────────────────────
+/**
+ * Cursor pagination query. Feed and Discover both use it.
+ *
+ * Cursor, not page number: the community feed changes under the reader, and an
+ * offset would repeat or skip posts as new ones land.
+ */
+export const paginationQuerySchema = z.object({
+    /**
+     * `?limit=` with nothing after it is treated as "not provided", not as a
+     * validation failure. A client that clears the control sends the empty
+     * string, and `z.coerce.number()` turns that into 0, which then fails
+     * `.min(1)`: the member sees a 400 for a page they never asked to size.
+     */
+    limit: z.preprocess(emptyStringToUndefined, z.coerce.number().int().min(1).max(PAGE_SIZE_MAX).default(PAGE_SIZE_DEFAULT)),
+    cursor: z.string().trim().min(1).optional(),
+});
+//# sourceMappingURL=common.js.map

package/dist/core/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/core/common.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAW,EAAE;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACvE,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,EAAE,CACvD,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEpF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,KAAK,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,SAAS,CAAC;KACtD,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAIrC,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC;IACjC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM;IAC1B,KAAK,EAAE,kBAAkB,CAAC,UAAU;CACrC,CAAC,CAAC;AAGH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAG7D,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAE/B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,WAAW,EAAE;IACd,4EAA4E;KAC3E,GAAG,CAAC,YAAY,CAAC;KACjB,GAAG,CAAC,YAAY,CAAC;KACjB,KAAK,CAAC,kCAAkC,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;AAGjF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,OAAO;IACP,OAAO;IACP,KAAK;IACL,MAAM;IACN,UAAU;IACV,MAAM;IACN,SAAS;IACT,eAAe;IACf,MAAM;IACN,MAAM;IACN,IAAI;IACJ,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,UAAU;IACV,OAAO;IACP,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,MAAM;CACE,CAAC;AAEX,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,kBAAkB,CAAC,CAAC;AAErD,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE;IACvF,KAAK,EAAE,kBAAkB,CAAC,gBAAgB;CAC3C,CAAC,CAAC;AAEH,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,MAAM;IACN,YAAY;IACZ,KAAK;IACL,UAAU;IACV,MAAM;IACN,eAAe;IACf,YAAY;IACZ,QAAQ;CACA,CAAC;AACX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAG/D;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU;IACV,OAAO;IACP,UAAU;IACV,UAAU;IACV,SAAS;IACT,KAAK;IACL,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,eAAe;IACf,aAAa;IACb,OAAO;IACP,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,OAAO;IACP,OAAO;CACC,CAAC;AACX,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAGtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,aAAa;IACb,SAAS;IACT,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,OAAO;IACP,WAAW;IACX,YAAY;IACZ,SAAS;IACT,OAAO;IACP,WAAW;IACX,cAAc;IACd,UAAU;IACV,aAAa;IACb,WAAW;CACH,CAAC;AACX,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAGhD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,QAAQ;IACR,cAAc;IACd,YAAY;IACZ,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IACjB,eAAe;IACf,eAAe;CACP,CAAC;AACX,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAG9C,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAU,CAAC;AACvF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAGlD,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,cAAc,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;AAG1D,gFAAgF;AAEhF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC5C,KAAK,EAAE,qBAAqB,CAAC,SAAS,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;CACnD,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;CAChF,CAAC,CAAC;AAIH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC;AAGjE,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C;;;;;OAKG;IACH,KAAK,EAAE,CAAC,CAAC,UAAU,CACjB,sBAAsB,EACtB,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAC7E;IACD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — Shared helpers and core enums\n *\n * The stable building blocks reused across every Founder Circle schema.\n * Anything that both the backend and a client need to agree on lives here.\n *\n * @module founder-schema/core/common\n */\n\nimport { z } from 'zod';\nimport {\n  CITY_MAX,\n  COUNTRY_MAX,\n  LINK_URL_MAX,\n  PAGE_SIZE_DEFAULT,\n  PAGE_SIZE_MAX,\n  STATE_MAX,\n} from './limits.js';\nimport { VALIDATION_MESSAGE } from './validation.js';\n\n// ─── String helpers ──────────────────────────────────────────────────────────\n\n/**\n * Converts empty / whitespace-only strings to `undefined` so Zod `.optional()`\n * treats them as \"not provided\".\n *\n * Why this exists: an HTML form submits `\"\"` for a cleared field, and without\n * this an optional field would be stored as an empty string rather than left\n * alone. Jansathi shipped that bug in dating onboarding.\n */\nexport const emptyStringToUndefined = (value: unknown): unknown => {\n  if (typeof value === 'string' && value.trim() === '') return undefined;\n  return value;\n};\n\n/** Optional trimmed string. Empty strings are coerced to `undefined`. */\nexport const optionalTrimmedString = (maxLength = 100) =>\n  z.preprocess(emptyStringToUndefined, z.string().trim().max(maxLength).optional());\n\n/** A Mongo ObjectId as it crosses the wire: 24 lowercase hex characters. */\nexport const objectIdSchema = z\n  .string()\n  .regex(/^[0-9a-f]{24}$/i, VALIDATION_MESSAGE.invalidId)\n  .transform((v) => v.toLowerCase());\n/** Named for what it is on the wire, so it never collides with Mongoose's `ObjectId`. */\nexport type ObjectIdString = z.infer<typeof objectIdSchema>;\n\n// ─── URLs ────────────────────────────────────────────────────────────────────\n\n/**\n * A URL safe to store and, after the consumer's own check, to render.\n *\n * Use this for EVERY member-supplied URL. Never bare `z.url()`: it accepts any\n * scheme the URL parser accepts, so `javascript:alert(document.cookie)`,\n * `data:text/html,<script>...`, `vbscript:` and `file:///etc/passwd` all pass.\n * Each of those is stored XSS the moment a client renders it as an `href`, and\n * `data:` is the same in an `<img src>`.\n *\n * `hostname` is restricted too, not only the scheme. A bare host like\n * `localhost` or a literal IP is refused, which closes server-side request\n * forgery: this product runs on EC2 with an instance role, so a member-supplied\n * `http://169.254.169.254/latest/meta-data/` that anything server-side ever\n * fetches is a credential read.\n *\n * Validating here is necessary and not sufficient. A consumer still treats a\n * stored URL as untrusted at render time, because rows written before this\n * existed were never checked.\n *\n * ⚠️ IF THIS EVER GROWS A HOST ALLOWLIST, compare the PARSED hostname for\n * exact equality. Never `includes`, never `endsWith`, never a regex over the\n * whole URL. Each of these is a real bypass of a naive \"is it YouTube\" check,\n * and all three read as obviously fine:\n *\n *   https://evil.example/?next=youtube.com/watch  contains the string\n *   youtube.com.evil.example                      starts with it\n *   youtu.be.evil.example                         a suffix check passes it\n *\n * The same mistake in the opposite direction to the `javascript:` hole: there\n * the scheme was too permissive, here the host check only LOOKS strict.\n * (krish hit this rendering inline video, 2026-09-21, and handles it by parsing\n * and comparing the hostname exactly.)\n */\nexport const safeUrlSchema = z.url({\n  protocol: /^https?$/,\n  hostname: z.regexes.domain,\n  error: VALIDATION_MESSAGE.urlInvalid,\n});\nexport type SafeUrl = z.infer<typeof safeUrlSchema>;\n\n/**\n * A URL a member TYPES: `safeUrlSchema` plus the `LINK_URL_MAX` ceiling, so\n * every member URL carries the same cap and no consumer has to remember it.\n *\n * Two schemas, not one, because the cap is about what a person types and is\n * wrong for what the server reads from elsewhere. Until 0.2.0 there was only\n * this one, and it capped a link preview's CDN image URL too: one 314-character\n * `imageUrl` would have failed a whole feed page.\n */\nexport const httpUrlSchema = safeUrlSchema.max(LINK_URL_MAX);\nexport type HttpUrl = z.infer<typeof httpUrlSchema>;\n\n// ─── Username ────────────────────────────────────────────────────────────────\n\n/**\n * Public handle. Derived by the server at onboarding, changeable later.\n *\n * Rules are deliberately narrow because the handle appears in URLs and in\n * mentions: lowercase letters, digits, underscore and a single dot, 3 to 30\n * characters, must start with a letter.\n *\n * This is the FORMAT, and it is what every read shape uses. A handle being\n * CHOSEN must also not be reserved: that is `chosenUsernameSchema`.\n */\nexport const USERNAME_MIN = 3;\nexport const USERNAME_MAX = 30;\n\nexport const usernameSchema = z\n  .string()\n  .trim()\n  .toLowerCase()\n  // Plain bounds: the client words them from the issue's own minimum/maximum.\n  .min(USERNAME_MIN)\n  .max(USERNAME_MAX)\n  .regex(/^[a-z][a-z0-9_]*(\\.[a-z0-9_]+)?$/, VALIDATION_MESSAGE.usernameInvalid);\nexport type Username = z.infer<typeof usernameSchema>;\n\n/**\n * Handles this product keeps for itself: route names a handle would shadow,\n * and words that would let a member pass as staff.\n *\n * ⚠ HERE, IN THE CONTRACT, since 0.2.0. It used to live in the backend so it\n * could grow without a publish, and nothing ever read it: the server derived\n * handles without checking it, so a member called \"Support\" was handed\n * `support`. One list, read by the server when it derives a handle and by any\n * form that lets a member choose one, is worth a publish per addition.\n *\n * Matched exactly, after lowercasing.\n */\nexport const RESERVED_USERNAMES = [\n  'admin',\n  'about',\n  'api',\n  'chat',\n  'discover',\n  'feed',\n  'founder',\n  'foundercircle',\n  'help',\n  'home',\n  'me',\n  'meetup',\n  'moderator',\n  'onboarding',\n  'settings',\n  'staff',\n  'superadmin',\n  'support',\n  'system',\n  'team',\n] as const;\n\nconst RESERVED = new Set<string>(RESERVED_USERNAMES);\n\nexport function isReservedUsername(handle: string): boolean {\n  return RESERVED.has(handle.trim().toLowerCase());\n}\n\n/**\n * A handle a member is CHOOSING: the format, and not reserved.\n *\n * ⚠ Not used on read shapes, deliberately. A handle stored before the reserved\n * check existed must still READ, or one member's old handle would fail every\n * page that shows their name.\n */\nexport const chosenUsernameSchema = usernameSchema.refine((u) => !isReservedUsername(u), {\n  error: VALIDATION_MESSAGE.usernameReserved,\n});\n\n// ─── Founder-facing enums ────────────────────────────────────────────────────\n\n/**\n * Stage of the founder's current venture.\n *\n * Ordered from earliest to latest so a range filter can compare by index. Add\n * new stages at the END or the stored ordinal of existing rows shifts.\n */\nexport const STARTUP_STAGE_VALUES = [\n  'idea',\n  'validation',\n  'mvp',\n  'pre_seed',\n  'seed',\n  'series_a_plus',\n  'profitable',\n  'exited',\n] as const;\nexport const startupStageSchema = z.enum(STARTUP_STAGE_VALUES);\nexport type StartupStage = z.infer<typeof startupStageSchema>;\n\n/**\n * Industry the venture operates in. Kept as a closed list so Discover filters\n * are a single indexed equality match rather than a text search.\n */\nexport const INDUSTRY_VALUES = [\n  'agritech',\n  'ai_ml',\n  'b2b_saas',\n  'consumer',\n  'climate',\n  'd2c',\n  'deeptech',\n  'edtech',\n  'fintech',\n  'gaming',\n  'healthtech',\n  'logistics',\n  'manufacturing',\n  'marketplace',\n  'media',\n  'mobility',\n  'proptech',\n  'robotics',\n  'services',\n  'space',\n  'other',\n] as const;\nexport const industrySchema = z.enum(INDUSTRY_VALUES);\nexport type Industry = z.infer<typeof industrySchema>;\n\n/**\n * What the founder brings. Free-text skills were considered and rejected: two\n * people typing \"growth\" and \"Growth Marketing\" would never match each other in\n * a filter, and the Discover tab is the whole point of the product.\n */\nexport const SKILL_VALUES = [\n  'engineering',\n  'product',\n  'design',\n  'data',\n  'growth',\n  'sales',\n  'marketing',\n  'operations',\n  'finance',\n  'legal',\n  'hr_people',\n  'supply_chain',\n  'research',\n  'fundraising',\n  'community',\n] as const;\nexport const skillSchema = z.enum(SKILL_VALUES);\nexport type Skill = z.infer<typeof skillSchema>;\n\n/**\n * What the member is here for. ONE list, replacing three.\n *\n * This was `lookingFor` with six values. The design draws eight \"Goals &\n * Passion\" tiles and four more on the business step; all three were the same\n * idea at three grains, and shipping them together would have meant nobody\n * could say which one Discover filters on - the answer settled by whichever\n * query got written first. Merged on hary's ruling, 2026-09-21, while there\n * were still no rows in any database.\n *\n * ⚠️ Stored per member and used as a Mongoose enum. Append only; removing a\n * value orphans documents already saved with it.\n *\n * ⚠️ `start_company` READS ODDLY next to its neighbours and is correct. It was\n * queried on the grounds that it restates `venture.stage: 'idea'`; it does not,\n * and the reason is worth keeping so nobody re-opens it. Inferring it from the\n * venture works only for a member who ALREADY HAS a venture row, and somebody\n * who wants to start a company is precisely the member with no venture at all,\n * so there is nothing to infer from. It also cannot express a founder with a\n * running company who wants to start another. Every other value is an ask of\n * other people and this one is an ask of the product, which is the whole of the\n * oddness. (hary, 2026-09-21.)\n */\nexport const GOAL_VALUES = [\n  'find_cofounder',\n  'find_investors',\n  'find_customers',\n  'hiring',\n  'partnerships',\n  'mentorship',\n  'grow_network',\n  'business_ideas',\n  'market_insights',\n  'learn_startup',\n  'start_company',\n] as const;\nexport const goalSchema = z.enum(GOAL_VALUES);\nexport type Goal = z.infer<typeof goalSchema>;\n\n// ─── Gender ──────────────────────────────────────────────────────────────────\n\n/**\n * Demographic only. Nothing here computes anything from it, unlike the sibling\n * gym product where gender feeds body-metric maths.\n *\n * Takes the family's three values and ADDS one rather than renaming any: a\n * network for founders should let somebody decline the question without having\n * to describe themselves as \"other\".\n */\nexport const GENDER_VALUES = ['male', 'female', 'other', 'prefer_not_to_say'] as const;\nexport const genderSchema = z.enum(GENDER_VALUES);\nexport type Gender = z.infer<typeof genderSchema>;\n\n// ─── Phone ───────────────────────────────────────────────────────────────────\n\n/**\n * Indian mobile number: ten raw digits, no country code, matching the standard\n * used across this family. Display adds the `+91`.\n *\n * ⚠️ WHERE IT IS STORED IS NOT A SCHEMA QUESTION, and it has been ruled: the\n * phone lives on the account mirror, never as a second copy on the profile.\n * Two stored copies drift the first time somebody edits one, and the profile's\n * would be the copy nobody keeps in sync.\n */\nexport const phoneSchema = z\n  .string()\n  .trim()\n  .regex(/^[6-9]\\d{9}$/, VALIDATION_MESSAGE.phoneInvalid);\nexport type Phone = z.infer<typeof phoneSchema>;\n\n// ─── Location ────────────────────────────────────────────────────────────────\n\n/**\n * Where the founder is based. City and country are what Discover filters on.\n *\n * ONE SHAPE for the profile, the Me tab's patch, onboarding's finish and the\n * location suggestion. It was written out three times until 0.2.0, the same\n * kind of copy that let the profile model lose Instagram.\n *\n * ⚠ `country` is REQUIRED and has NO default. A default here (it used to be\n * `'India'`) is destructive on every write path: a founder in Berlin who\n * corrects only their city would be moved to India by a value they never saw.\n * A body that carries a location carries the whole location. Every stored\n * location has a country, because the model requires one, so the read side\n * loses nothing.\n *\n * This is a DECLARED location, not a GPS reading. Jansathi's rule applies\n * here too: never write a declared location from a GPS capture.\n */\nexport const locationSchema = z.object({\n  city: z.string().trim().min(1).max(CITY_MAX),\n  state: optionalTrimmedString(STATE_MAX),\n  country: z.string().trim().min(1).max(COUNTRY_MAX),\n});\nexport type FounderLocation = z.infer<typeof locationSchema>;\n\n/**\n * `GET /api/v1/location/areas/reverse?lat=&lng=`: plain decimal degrees.\n *\n * A QUERY, so coercion is right here: everything in a URL is a string. An\n * emptied parameter is \"missing\", never 0, because 0,0 is a real place in the\n * Gulf of Guinea and would be looked up rather than refused.\n */\nexport const coordinatesQuerySchema = z.object({\n  lat: z.preprocess(emptyStringToUndefined, z.coerce.number().min(-90).max(90)),\n  lng: z.preprocess(emptyStringToUndefined, z.coerce.number().min(-180).max(180)),\n});\nexport type CoordinatesQuery = z.infer<typeof coordinatesQuerySchema>;\nexport type CoordinatesQueryInput = z.input<typeof coordinatesQuerySchema>;\n\n/**\n * The city these coordinates look like, for the member to CONFIRM, or `null`\n * when the lookup could not place them confidently (or they are outside India,\n * whose area data is all there is). A suggestion, never a write: only what the\n * member then submits becomes their location.\n */\nexport const suggestedLocationSchema = locationSchema.nullable();\nexport type SuggestedLocation = z.infer<typeof suggestedLocationSchema>;\n\n// ─── Pagination ──────────────────────────────────────────────────────────────\n\n/**\n * Cursor pagination query. Feed and Discover both use it.\n *\n * Cursor, not page number: the community feed changes under the reader, and an\n * offset would repeat or skip posts as new ones land.\n */\nexport const paginationQuerySchema = z.object({\n  /**\n   * `?limit=` with nothing after it is treated as \"not provided\", not as a\n   * validation failure. A client that clears the control sends the empty\n   * string, and `z.coerce.number()` turns that into 0, which then fails\n   * `.min(1)`: the member sees a 400 for a page they never asked to size.\n   */\n  limit: z.preprocess(\n    emptyStringToUndefined,\n    z.coerce.number().int().min(1).max(PAGE_SIZE_MAX).default(PAGE_SIZE_DEFAULT),\n  ),\n  cursor: z.string().trim().min(1).optional(),\n});\nexport type PaginationQuery = z.infer<typeof paginationQuerySchema>;\n/** What a client may put IN the URL: every field optional, numbers as strings. */\nexport type PaginationQueryInput = z.input<typeof paginationQuerySchema>;\n"]}

package/dist/core/errors.d.ts

@@ -0,0 +1,105 @@
+/**
+ * founder-schema — Every error code the API answers with
+ *
+ * THE CODE IS WHAT A CLIENT ACTS ON; the `message` beside it is English for
+ * logs and for a client too old to know the code. A client words each code in
+ * the member's language, and a test on the web side asserts every value here
+ * has a message in every locale it ships.
+ *
+ * Before 0.2.0 the backend kept this list to itself, and every domain refusal
+ * (a closed poll, a reply to a reply, the edit window) went out as
+ * `VALIDATION_ERROR` with an English sentence, so the only way for a client to
+ * tell them apart was to match on the wording.
+ *
+ * WHEN TO USE WHICH:
+ *   - A request that does not match its schema: `VALIDATION_ERROR`, with every
+ *     problem in `error.details.issues`.
+ *   - A well-formed request the current STATE of things refuses: its own code
+ *     below. These carry no issues; the code says it all.
+ *
+ * ⚠ Append freely; remove deliberately. A code removed here that an older
+ * server still sends fails the client's parse of the error envelope.
+ *
+ * @module founder-schema/core/errors
+ */
+import { z } from 'zod';
+/**
+ * As a tuple, the way `GENDER_VALUES` is, so a consumer can iterate it (a
+ * translation-coverage test does exactly that) and TypeScript keeps the union.
+ */
+export declare const API_ERROR_CODE_VALUES: readonly ["INTERNAL_ERROR", "VALIDATION_ERROR", "NOT_FOUND", "CONFLICT", "RATE_LIMITED", "SERVICE_UNAVAILABLE", "UNAUTHORIZED", "INVALID_TOKEN", "TOKEN_EXPIRED", "SESSION_INVALIDATED", "FORBIDDEN", "ONBOARDING_INCOMPLETE", "ALREADY_ONBOARDED", "UNDER_AGE", "UPLOAD_NOT_ATTACHABLE", "UPLOAD_TOO_LARGE", "UPLOAD_WRONG_TYPE", "EDIT_WINDOW_CLOSED", "POLL_NOT_EDITABLE", "POLL_CLOSED", "POLL_CHOICE_INVALID", "REPLY_TOO_DEEP", "CANNOT_REPORT_OWN", "CHAT_WITH_SELF", "ACCOUNT_SUSPENDED", "ROLE_NOT_HELD", "MPIN_NOT_SET", "MPIN_ALREADY_SET", "MPIN_INCORRECT", "MPIN_LOCKED", "CANNOT_CHANGE_OWN_ROLES", "ROLE_NOT_GRANTABLE", "TICKET_FULL", "SAVED_REPLIES_FULL"];
+export declare const apiErrorCodeSchema: z.ZodEnum<{
+    INTERNAL_ERROR: "INTERNAL_ERROR";
+    VALIDATION_ERROR: "VALIDATION_ERROR";
+    NOT_FOUND: "NOT_FOUND";
+    CONFLICT: "CONFLICT";
+    RATE_LIMITED: "RATE_LIMITED";
+    SERVICE_UNAVAILABLE: "SERVICE_UNAVAILABLE";
+    UNAUTHORIZED: "UNAUTHORIZED";
+    INVALID_TOKEN: "INVALID_TOKEN";
+    TOKEN_EXPIRED: "TOKEN_EXPIRED";
+    SESSION_INVALIDATED: "SESSION_INVALIDATED";
+    FORBIDDEN: "FORBIDDEN";
+    ONBOARDING_INCOMPLETE: "ONBOARDING_INCOMPLETE";
+    ALREADY_ONBOARDED: "ALREADY_ONBOARDED";
+    UNDER_AGE: "UNDER_AGE";
+    UPLOAD_NOT_ATTACHABLE: "UPLOAD_NOT_ATTACHABLE";
+    UPLOAD_TOO_LARGE: "UPLOAD_TOO_LARGE";
+    UPLOAD_WRONG_TYPE: "UPLOAD_WRONG_TYPE";
+    EDIT_WINDOW_CLOSED: "EDIT_WINDOW_CLOSED";
+    POLL_NOT_EDITABLE: "POLL_NOT_EDITABLE";
+    POLL_CLOSED: "POLL_CLOSED";
+    POLL_CHOICE_INVALID: "POLL_CHOICE_INVALID";
+    REPLY_TOO_DEEP: "REPLY_TOO_DEEP";
+    CANNOT_REPORT_OWN: "CANNOT_REPORT_OWN";
+    CHAT_WITH_SELF: "CHAT_WITH_SELF";
+    ACCOUNT_SUSPENDED: "ACCOUNT_SUSPENDED";
+    ROLE_NOT_HELD: "ROLE_NOT_HELD";
+    MPIN_NOT_SET: "MPIN_NOT_SET";
+    MPIN_ALREADY_SET: "MPIN_ALREADY_SET";
+    MPIN_INCORRECT: "MPIN_INCORRECT";
+    MPIN_LOCKED: "MPIN_LOCKED";
+    CANNOT_CHANGE_OWN_ROLES: "CANNOT_CHANGE_OWN_ROLES";
+    ROLE_NOT_GRANTABLE: "ROLE_NOT_GRANTABLE";
+    TICKET_FULL: "TICKET_FULL";
+    SAVED_REPLIES_FULL: "SAVED_REPLIES_FULL";
+}>;
+export type ApiErrorCode = z.infer<typeof apiErrorCodeSchema>;
+/** The same codes by name: `API_ERROR_CODE.POLL_CLOSED`. */
+export declare const API_ERROR_CODE: {
+    INTERNAL_ERROR: "INTERNAL_ERROR";
+    VALIDATION_ERROR: "VALIDATION_ERROR";
+    NOT_FOUND: "NOT_FOUND";
+    CONFLICT: "CONFLICT";
+    RATE_LIMITED: "RATE_LIMITED";
+    SERVICE_UNAVAILABLE: "SERVICE_UNAVAILABLE";
+    UNAUTHORIZED: "UNAUTHORIZED";
+    INVALID_TOKEN: "INVALID_TOKEN";
+    TOKEN_EXPIRED: "TOKEN_EXPIRED";
+    SESSION_INVALIDATED: "SESSION_INVALIDATED";
+    FORBIDDEN: "FORBIDDEN";
+    ONBOARDING_INCOMPLETE: "ONBOARDING_INCOMPLETE";
+    ALREADY_ONBOARDED: "ALREADY_ONBOARDED";
+    UNDER_AGE: "UNDER_AGE";
+    UPLOAD_NOT_ATTACHABLE: "UPLOAD_NOT_ATTACHABLE";
+    UPLOAD_TOO_LARGE: "UPLOAD_TOO_LARGE";
+    UPLOAD_WRONG_TYPE: "UPLOAD_WRONG_TYPE";
+    EDIT_WINDOW_CLOSED: "EDIT_WINDOW_CLOSED";
+    POLL_NOT_EDITABLE: "POLL_NOT_EDITABLE";
+    POLL_CLOSED: "POLL_CLOSED";
+    POLL_CHOICE_INVALID: "POLL_CHOICE_INVALID";
+    REPLY_TOO_DEEP: "REPLY_TOO_DEEP";
+    CANNOT_REPORT_OWN: "CANNOT_REPORT_OWN";
+    CHAT_WITH_SELF: "CHAT_WITH_SELF";
+    ACCOUNT_SUSPENDED: "ACCOUNT_SUSPENDED";
+    ROLE_NOT_HELD: "ROLE_NOT_HELD";
+    MPIN_NOT_SET: "MPIN_NOT_SET";
+    MPIN_ALREADY_SET: "MPIN_ALREADY_SET";
+    MPIN_INCORRECT: "MPIN_INCORRECT";
+    MPIN_LOCKED: "MPIN_LOCKED";
+    CANNOT_CHANGE_OWN_ROLES: "CANNOT_CHANGE_OWN_ROLES";
+    ROLE_NOT_GRANTABLE: "ROLE_NOT_GRANTABLE";
+    TICKET_FULL: "TICKET_FULL";
+    SAVED_REPLIES_FULL: "SAVED_REPLIES_FULL";
+};
+//# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,qBAAqB,+oBAyFxB,CAAC;AAEX,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAgC,CAAC;AAChE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,4DAA4D;AAC5D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAA0B,CAAC"}

package/dist/core/errors.js

@@ -0,0 +1,115 @@
+/**
+ * founder-schema — Every error code the API answers with
+ *
+ * THE CODE IS WHAT A CLIENT ACTS ON; the `message` beside it is English for
+ * logs and for a client too old to know the code. A client words each code in
+ * the member's language, and a test on the web side asserts every value here
+ * has a message in every locale it ships.
+ *
+ * Before 0.2.0 the backend kept this list to itself, and every domain refusal
+ * (a closed poll, a reply to a reply, the edit window) went out as
+ * `VALIDATION_ERROR` with an English sentence, so the only way for a client to
+ * tell them apart was to match on the wording.
+ *
+ * WHEN TO USE WHICH:
+ *   - A request that does not match its schema: `VALIDATION_ERROR`, with every
+ *     problem in `error.details.issues`.
+ *   - A well-formed request the current STATE of things refuses: its own code
+ *     below. These carry no issues; the code says it all.
+ *
+ * ⚠ Append freely; remove deliberately. A code removed here that an older
+ * server still sends fails the client's parse of the error envelope.
+ *
+ * @module founder-schema/core/errors
+ */
+import { z } from 'zod';
+/**
+ * As a tuple, the way `GENDER_VALUES` is, so a consumer can iterate it (a
+ * translation-coverage test does exactly that) and TypeScript keeps the union.
+ */
+export const API_ERROR_CODE_VALUES = [
+    // ── Anything ──
+    /** A bug or an outage on our side. The message says nothing more on purpose. */
+    'INTERNAL_ERROR',
+    /** The request did not match its schema. `details.issues` says where. */
+    'VALIDATION_ERROR',
+    /** No such thing, or not one you may see. Deliberately the same answer. */
+    'NOT_FOUND',
+    /** Two writes raced for something unique; retrying usually succeeds. */
+    'CONFLICT',
+    /** Too many requests from this member or address. Wait, then retry. */
+    'RATE_LIMITED',
+    /** Something we depend on (the chat server) is down or not switched on. */
+    'SERVICE_UNAVAILABLE',
+    // ── Who you are ──
+    /** No credential at all. */
+    'UNAUTHORIZED',
+    /** A credential that is not ours, or not readable. */
+    'INVALID_TOKEN',
+    /** A credential that was ours and has expired. Refresh and retry. */
+    'TOKEN_EXPIRED',
+    /** Signed out everywhere, or the account changed. Sign in again. */
+    'SESSION_INVALIDATED',
+    /** Signed in, and not allowed to do this. */
+    'FORBIDDEN',
+    // ── Onboarding ──
+    /** Finish onboarding first. The client routes here instead of showing an error. */
+    'ONBOARDING_INCOMPLETE',
+    /** Onboarding is already finished; there is nothing to save or finish again. */
+    'ALREADY_ONBOARDED',
+    /** Under `MIN_AGE_YEARS`. Refused at the draft and again at finish. */
+    'UNDER_AGE',
+    // ── Uploads, at the moment one is attached ──
+    /** Not an upload of yours, or nothing was ever uploaded under that key. */
+    'UPLOAD_NOT_ATTACHABLE',
+    /** Larger than `UPLOAD_MAX_BYTES`. */
+    'UPLOAD_TOO_LARGE',
+    /** Not one of the image types this product accepts, or not an image at all. */
+    'UPLOAD_WRONG_TYPE',
+    // ── The feed ──
+    /** The post is older than `EDIT_WINDOW_MS`. */
+    'EDIT_WINDOW_CLOSED',
+    /** A poll is never editable: people have already voted on it. */
+    'POLL_NOT_EDITABLE',
+    /** The poll has closed, by the server's clock. */
+    'POLL_CLOSED',
+    /** No option, several on a single-choice poll, or an option that does not exist. */
+    'POLL_CHOICE_INVALID',
+    /** A reply to a reply. One level of nesting only. */
+    'REPLY_TOO_DEEP',
+    /** Reporting your own post, poll or comment. */
+    'CANNOT_REPORT_OWN',
+    // ── Chat ──
+    /** Opening a conversation with yourself. */
+    'CHAT_WITH_SELF',
+    // ── The account ──
+    /** Staff suspended this account: nothing in the product works until it is lifted. */
+    'ACCOUNT_SUSPENDED',
+    // ── Roles and the MPIN ──
+    /**
+     * Switching to a role this person does not hold (or no longer holds), or
+     * setting an MPIN while holding no staff role at all.
+     */
+    'ROLE_NOT_HELD',
+    /** A staff role needs an MPIN, and none has been set yet. Set one first. */
+    'MPIN_NOT_SET',
+    /** An MPIN is set once; changing it needs the current one. */
+    'MPIN_ALREADY_SET',
+    /** The MPIN is wrong. `details.attemptsLeft` says how many tries remain. */
+    'MPIN_INCORRECT',
+    /** Too many wrong MPINs. `details.lockedUntil` says when to try again. */
+    'MPIN_LOCKED',
+    /** Changing your own roles. Someone else has to. */
+    'CANNOT_CHANGE_OWN_ROLES',
+    /** Granting or revoking a role the role you act as may not touch. */
+    'ROLE_NOT_GRANTABLE',
+    // ── Support ──
+    /** The ticket holds `TICKET_MESSAGES_MAX` messages. Open a new one. */
+    'TICKET_FULL',
+    /** The team keeps `SAVED_REPLIES_MAX` saved replies. Delete one first. */
+    'SAVED_REPLIES_FULL',
+];
+export const apiErrorCodeSchema = z.enum(API_ERROR_CODE_VALUES);
+/** The same codes by name: `API_ERROR_CODE.POLL_CLOSED`. */
+export const API_ERROR_CODE = apiErrorCodeSchema.enum;
+//# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,iBAAiB;IACjB,gFAAgF;IAChF,gBAAgB;IAChB,yEAAyE;IACzE,kBAAkB;IAClB,2EAA2E;IAC3E,WAAW;IACX,wEAAwE;IACxE,UAAU;IACV,uEAAuE;IACvE,cAAc;IACd,2EAA2E;IAC3E,qBAAqB;IAErB,oBAAoB;IACpB,4BAA4B;IAC5B,cAAc;IACd,sDAAsD;IACtD,eAAe;IACf,qEAAqE;IACrE,eAAe;IACf,oEAAoE;IACpE,qBAAqB;IACrB,6CAA6C;IAC7C,WAAW;IAEX,mBAAmB;IACnB,mFAAmF;IACnF,uBAAuB;IACvB,gFAAgF;IAChF,mBAAmB;IACnB,uEAAuE;IACvE,WAAW;IAEX,+CAA+C;IAC/C,2EAA2E;IAC3E,uBAAuB;IACvB,sCAAsC;IACtC,kBAAkB;IAClB,+EAA+E;IAC/E,mBAAmB;IAEnB,iBAAiB;IACjB,+CAA+C;IAC/C,oBAAoB;IACpB,iEAAiE;IACjE,mBAAmB;IACnB,kDAAkD;IAClD,aAAa;IACb,oFAAoF;IACpF,qBAAqB;IACrB,qDAAqD;IACrD,gBAAgB;IAChB,gDAAgD;IAChD,mBAAmB;IAEnB,aAAa;IACb,4CAA4C;IAC5C,gBAAgB;IAEhB,oBAAoB;IACpB,qFAAqF;IACrF,mBAAmB;IAEnB,2BAA2B;IAC3B;;;OAGG;IACH,eAAe;IACf,4EAA4E;IAC5E,cAAc;IACd,8DAA8D;IAC9D,kBAAkB;IAClB,4EAA4E;IAC5E,gBAAgB;IAChB,0EAA0E;IAC1E,aAAa;IACb,oDAAoD;IACpD,yBAAyB;IACzB,qEAAqE;IACrE,oBAAoB;IAEpB,gBAAgB;IAChB,uEAAuE;IACvE,aAAa;IACb,0EAA0E;IAC1E,oBAAoB;CACZ,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAGhE,4DAA4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC","sourcesContent":["/**\n * founder-schema — Every error code the API answers with\n *\n * THE CODE IS WHAT A CLIENT ACTS ON; the `message` beside it is English for\n * logs and for a client too old to know the code. A client words each code in\n * the member's language, and a test on the web side asserts every value here\n * has a message in every locale it ships.\n *\n * Before 0.2.0 the backend kept this list to itself, and every domain refusal\n * (a closed poll, a reply to a reply, the edit window) went out as\n * `VALIDATION_ERROR` with an English sentence, so the only way for a client to\n * tell them apart was to match on the wording.\n *\n * WHEN TO USE WHICH:\n *   - A request that does not match its schema: `VALIDATION_ERROR`, with every\n *     problem in `error.details.issues`.\n *   - A well-formed request the current STATE of things refuses: its own code\n *     below. These carry no issues; the code says it all.\n *\n * ⚠ Append freely; remove deliberately. A code removed here that an older\n * server still sends fails the client's parse of the error envelope.\n *\n * @module founder-schema/core/errors\n */\n\nimport { z } from 'zod';\n\n/**\n * As a tuple, the way `GENDER_VALUES` is, so a consumer can iterate it (a\n * translation-coverage test does exactly that) and TypeScript keeps the union.\n */\nexport const API_ERROR_CODE_VALUES = [\n  // ── Anything ──\n  /** A bug or an outage on our side. The message says nothing more on purpose. */\n  'INTERNAL_ERROR',\n  /** The request did not match its schema. `details.issues` says where. */\n  'VALIDATION_ERROR',\n  /** No such thing, or not one you may see. Deliberately the same answer. */\n  'NOT_FOUND',\n  /** Two writes raced for something unique; retrying usually succeeds. */\n  'CONFLICT',\n  /** Too many requests from this member or address. Wait, then retry. */\n  'RATE_LIMITED',\n  /** Something we depend on (the chat server) is down or not switched on. */\n  'SERVICE_UNAVAILABLE',\n\n  // ── Who you are ──\n  /** No credential at all. */\n  'UNAUTHORIZED',\n  /** A credential that is not ours, or not readable. */\n  'INVALID_TOKEN',\n  /** A credential that was ours and has expired. Refresh and retry. */\n  'TOKEN_EXPIRED',\n  /** Signed out everywhere, or the account changed. Sign in again. */\n  'SESSION_INVALIDATED',\n  /** Signed in, and not allowed to do this. */\n  'FORBIDDEN',\n\n  // ── Onboarding ──\n  /** Finish onboarding first. The client routes here instead of showing an error. */\n  'ONBOARDING_INCOMPLETE',\n  /** Onboarding is already finished; there is nothing to save or finish again. */\n  'ALREADY_ONBOARDED',\n  /** Under `MIN_AGE_YEARS`. Refused at the draft and again at finish. */\n  'UNDER_AGE',\n\n  // ── Uploads, at the moment one is attached ──\n  /** Not an upload of yours, or nothing was ever uploaded under that key. */\n  'UPLOAD_NOT_ATTACHABLE',\n  /** Larger than `UPLOAD_MAX_BYTES`. */\n  'UPLOAD_TOO_LARGE',\n  /** Not one of the image types this product accepts, or not an image at all. */\n  'UPLOAD_WRONG_TYPE',\n\n  // ── The feed ──\n  /** The post is older than `EDIT_WINDOW_MS`. */\n  'EDIT_WINDOW_CLOSED',\n  /** A poll is never editable: people have already voted on it. */\n  'POLL_NOT_EDITABLE',\n  /** The poll has closed, by the server's clock. */\n  'POLL_CLOSED',\n  /** No option, several on a single-choice poll, or an option that does not exist. */\n  'POLL_CHOICE_INVALID',\n  /** A reply to a reply. One level of nesting only. */\n  'REPLY_TOO_DEEP',\n  /** Reporting your own post, poll or comment. */\n  'CANNOT_REPORT_OWN',\n\n  // ── Chat ──\n  /** Opening a conversation with yourself. */\n  'CHAT_WITH_SELF',\n\n  // ── The account ──\n  /** Staff suspended this account: nothing in the product works until it is lifted. */\n  'ACCOUNT_SUSPENDED',\n\n  // ── Roles and the MPIN ──\n  /**\n   * Switching to a role this person does not hold (or no longer holds), or\n   * setting an MPIN while holding no staff role at all.\n   */\n  'ROLE_NOT_HELD',\n  /** A staff role needs an MPIN, and none has been set yet. Set one first. */\n  'MPIN_NOT_SET',\n  /** An MPIN is set once; changing it needs the current one. */\n  'MPIN_ALREADY_SET',\n  /** The MPIN is wrong. `details.attemptsLeft` says how many tries remain. */\n  'MPIN_INCORRECT',\n  /** Too many wrong MPINs. `details.lockedUntil` says when to try again. */\n  'MPIN_LOCKED',\n  /** Changing your own roles. Someone else has to. */\n  'CANNOT_CHANGE_OWN_ROLES',\n  /** Granting or revoking a role the role you act as may not touch. */\n  'ROLE_NOT_GRANTABLE',\n\n  // ── Support ──\n  /** The ticket holds `TICKET_MESSAGES_MAX` messages. Open a new one. */\n  'TICKET_FULL',\n  /** The team keeps `SAVED_REPLIES_MAX` saved replies. Delete one first. */\n  'SAVED_REPLIES_FULL',\n] as const;\n\nexport const apiErrorCodeSchema = z.enum(API_ERROR_CODE_VALUES);\nexport type ApiErrorCode = z.infer<typeof apiErrorCodeSchema>;\n\n/** The same codes by name: `API_ERROR_CODE.POLL_CLOSED`. */\nexport const API_ERROR_CODE = apiErrorCodeSchema.enum;\n"]}