founder-schema 0.3.0 → 0.5.0

package/dist/domains/profile/founder-profile.js

@@ -0,0 +1,202 @@
+/**
+ * founder-schema — The founder profile
+ *
+ * One member, one profile. The central auth account owns identity (email,
+ * verification, deletion); this owns everything Founder Circle shows.
+ *
+ * @module founder-schema/domains/profile
+ */
+import { z } from 'zod';
+import { chosenUsernameSchema, GOAL_VALUES, goalSchema, httpUrlSchema, industrySchema, locationSchema, objectIdSchema, optionalTrimmedString, skillSchema, startupStageSchema, usernameSchema, } from '../../core/common.js';
+import { ABOUT_MAX, DISPLAY_NAME_MAX, FOUNDED_YEAR_MIN, HEADLINE_MAX, SKILLS_MAX, TEAM_SIZE_MAX, TEAM_SIZE_MIN, VENTURE_NAME_MAX, VENTURE_TAGLINE_MAX, } from '../../core/limits.js';
+import { VALIDATION_MESSAGE } from '../../core/validation.js';
+import { mediaImageSchema } from '../media/media.js';
+// ─── Venture ─────────────────────────────────────────────────────────────────
+/**
+ * ⚠ NUMBERS ARE NUMBERS, never coerced. This is a BODY, which arrives as JSON
+ * and already carries types. `z.coerce.number()` here accepted `teamSize: true`
+ * as 1 and `"  "` as 0, and made the schema's input type `unknown`, so a form
+ * typed against it could put anything in the field. Coercion belongs to query
+ * strings, where everything is text; a form converts its text input before it
+ * builds the body.
+ */
+export const ventureSchema = z.object({
+    name: z.string().trim().min(1).max(VENTURE_NAME_MAX),
+    tagline: optionalTrimmedString(VENTURE_TAGLINE_MAX),
+    website: httpUrlSchema.optional(),
+    industry: industrySchema,
+    stage: startupStageSchema,
+    /** Team size including the founder. Optional: a solo pre-idea founder has none to report. */
+    teamSize: z.number().int().min(TEAM_SIZE_MIN).max(TEAM_SIZE_MAX).optional(),
+    /**
+     * Not in the future. The bound is read per parse, never captured once.
+     *
+     * `.max(new Date().getUTCFullYear())` looks equivalent and is not: it is
+     * evaluated when this module is imported, so a server process still up on
+     * 1 January rejects the new year until somebody restarts it. The backend's
+     * Mongoose model deliberately carries no upper bound for the same reason, a
+     * `max` there being frozen at schema construction. This is where the ceiling
+     * lives.
+     */
+    foundedYear: z
+        .number()
+        .int()
+        .min(FOUNDED_YEAR_MIN)
+        .refine((year) => year <= new Date().getUTCFullYear(), {
+        error: VALIDATION_MESSAGE.foundedYearFuture,
+    })
+        .optional(),
+});
+// ─── Profile ─────────────────────────────────────────────────────────────────
+/**
+ * The founder's off-platform links. ONE shape: onboarding's contact step picks
+ * its three from this, so a link one side knows can never be missing on the
+ * other. (It was written twice until 0.2.0, and the profile side lacked
+ * Instagram, which onboarding collected.)
+ *
+ * Defined without a default, because the read side wants one and the write
+ * side must not have one; each adds its own.
+ */
+export const founderLinksSchema = z.object({
+    linkedin: httpUrlSchema.optional(),
+    x: httpUrlSchema.optional(),
+    instagram: httpUrlSchema.optional(),
+    github: httpUrlSchema.optional(),
+    website: httpUrlSchema.optional(),
+});
+/**
+ * The profile as the owner sees it. A peer sees the redacted projection
+ * (`founderCardSchema`), which is built on the server and never by dropping
+ * fields on the client.
+ */
+export const founderProfileSchema = z.object({
+    id: z.string(),
+    userId: z.string(),
+    username: usernameSchema,
+    displayName: z.string().trim().min(1).max(DISPLAY_NAME_MAX),
+    headline: optionalTrimmedString(HEADLINE_MAX),
+    about: optionalTrimmedString(ABOUT_MAX),
+    /**
+     * Plain `z.url()`, NOT `httpUrlSchema`, and the difference is deliberate.
+     *
+     * No member can write this field: it appears in no write body, and
+     * `public-surface.test.ts` asserts that and will fail the day somebody adds it
+     * to a form. So the scheme restriction would be defending a field that takes
+     * no member input, while refusing hosts we legitimately serve avatars from,
+     * our own dev host among them. A read schema that rejects our own response is
+     * a self-inflicted outage.
+     *
+     * ⚠️ That argument holds only while nothing member-supplied reaches this
+     * field. Two sources write an avatar today and NEITHER is a member typing a
+     * URL: our own upload path, and the central-auth `user.created` /
+     * `user.updated` webhook, which carries the Google OAuth picture. If a
+     * "paste a link to your photo" control is ever added, this goes back to
+     * `httpUrlSchema` and the ruling behind it is void.
+     *
+     * WHICH picture: the member's uploaded photo at its small size (192, see
+     * `MEDIA_SIZES.avatar`), else their sign-in provider's picture, else absent.
+     * Every surface that shows this member resolves it the same way.
+     */
+    avatarUrl: z.url().optional(),
+    /**
+     * The uploaded photo itself, every size, when the member has one. Absent
+     * means `avatarUrl` (if any) is the sign-in provider's picture, so a client
+     * offers "Remove photo" only when this is present. Not on `founderCardSchema`:
+     * a card needs one small picture, not the set.
+     */
+    avatar: mediaImageSchema.optional(),
+    location: locationSchema.optional(),
+    venture: ventureSchema.optional(),
+    skills: z.array(skillSchema).max(SKILLS_MAX).default([]),
+    goals: z.array(goalSchema).max(GOAL_VALUES.length).default([]),
+    links: founderLinksSchema.default({}),
+    /** Onboarding is finished and the member is visible in Discover. */
+    isOnboarded: z.boolean().default(false),
+    /** Member paused their own profile. Hidden from Discover, keeps their data. */
+    isActive: z.boolean().default(true),
+    createdAt: z.iso.datetime(),
+    updatedAt: z.iso.datetime(),
+});
+/**
+ * What one founder sees of another in Discover and on a profile page.
+ *
+ * Built server-side. Keep it a strict subset of `founderProfileSchema` — if a
+ * private field ever needs to show here, that is a product decision, not an
+ * accident of spreading the full document.
+ */
+export const founderCardSchema = founderProfileSchema.pick({
+    id: true,
+    username: true,
+    displayName: true,
+    headline: true,
+    avatarUrl: true,
+    location: true,
+    venture: true,
+    skills: true,
+    goals: true,
+});
+// ─── Write bodies ────────────────────────────────────────────────────────────
+/**
+ * A text field the member is allowed to empty.
+ *
+ * Three states, and they are deliberately distinct:
+ *   absent  do not touch this field
+ *   null    clear it (the backend turns this into an `$unset`)
+ *   ""      REJECTED
+ *
+ * The empty string is refused on purpose. A form that forgets to convert a
+ * cleared input to `null` then fails loudly at the boundary, instead of being
+ * silently dropped and leaving the member staring at text they just deleted.
+ * `optionalTrimmedString` does the dropping, which is right for a create body
+ * and wrong for a patch.
+ */
+const clearableText = (maxLength) => z.string().trim().min(1, VALIDATION_MESSAGE.clearWithNull).max(maxLength).nullable().optional();
+/**
+ * Patch body for the Me tab. Only the keys the member actually changed.
+ *
+ * ⚠️ Written as its own object ON PURPOSE. Do NOT rebuild it as
+ * `founderProfileSchema.pick({...}).partial()`: `.partial()` does not switch
+ * off `.default()`, so `skills`, `goals` and `links` would materialise as
+ * `[]`, `[]` and `{}` on every request, including an empty one. Under a `$set`
+ * that wipes a member's skills and every one of their links the moment they
+ * edit their display name. `tsc` cannot see it and the request looks correct in
+ * the network tab.
+ *
+ * The rule this comes from: defaults belong on the READ side. A write body
+ * states what the caller sent and nothing else.
+ */
+export const updateFounderProfileBodySchema = z.object({
+    displayName: z.string().trim().min(1).max(DISPLAY_NAME_MAX).optional(),
+    headline: clearableText(HEADLINE_MAX),
+    about: clearableText(ABOUT_MAX),
+    /** Carries the whole location; `locationSchema` has no default to fill a gap. */
+    location: locationSchema.optional(),
+    venture: ventureSchema.optional(),
+    skills: z.array(skillSchema).max(SKILLS_MAX).optional(),
+    goals: z.array(goalSchema).max(GOAL_VALUES.length).optional(),
+    /** Sent whole. To drop one link, send the object without that key. */
+    links: founderLinksSchema.optional(),
+});
+/**
+ * Username change. Separate from the profile patch because it needs a
+ * uniqueness check, and it refuses a reserved handle (`chosenUsernameSchema`).
+ */
+export const updateUsernameBodySchema = z.object({ username: chosenUsernameSchema });
+/** Availability probe behind the username field. */
+export const usernameAvailabilitySchema = z.object({
+    username: usernameSchema,
+    available: z.boolean(),
+    /** Present when unavailable: `taken` or `reserved`. */
+    reason: z.enum(['taken', 'reserved']).optional(),
+});
+// ─── The member's own photo ──────────────────────────────────────────────────
+/**
+ * `PUT /api/v1/profiles/me/avatar`: use a completed upload (purpose `avatar`)
+ * as the member's photo. Answers with the updated `founderProfileSchema`.
+ *
+ * The previous photo is deleted from storage, not merely unlinked, so its old
+ * address stops working. `DELETE /api/v1/profiles/me/avatar` removes the photo
+ * the same way and the member falls back to their sign-in provider's picture.
+ */
+export const setAvatarBodySchema = z.object({ mediaId: objectIdSchema });
+//# sourceMappingURL=founder-profile.js.map

package/dist/domains/profile/founder-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"founder-profile.js","sourceRoot":"","sources":["../../../src/domains/profile/founder-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,UAAU,EACV,aAAa,EACb,cAAc,EACd,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,WAAW,EACX,kBAAkB,EAClB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACpD,OAAO,EAAE,qBAAqB,CAAC,mBAAmB,CAAC;IACnD,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,cAAc;IACxB,KAAK,EAAE,kBAAkB;IACzB,6FAA6F;IAC7F,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IAC3E;;;;;;;;;OASG;IACH,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,gBAAgB,CAAC;SACrB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE;QACrD,KAAK,EAAE,kBAAkB,CAAC,iBAAiB;KAC5C,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAGH,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE;IAClC,CAAC,EAAE,aAAa,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,aAAa,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,cAAc;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC3D,QAAQ,EAAE,qBAAqB,CAAC,YAAY,CAAC;IAC7C,KAAK,EAAE,qBAAqB,CAAC,SAAS,CAAC;IACvC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B;;;;;OAKG;IACH,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D,KAAK,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,oEAAoE;IACpE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,+EAA+E;IAC/E,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,IAAI,CAAC;IACzD,EAAE,EAAE,IAAI;IACR,QAAQ,EAAE,IAAI;IACd,WAAW,EAAE,IAAI;IACjB,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,IAAI;IACZ,KAAK,EAAE,IAAI;CACZ,CAAC,CAAC;AAGH,gFAAgF;AAEhF;;;;;;;;;;;;;GAaG;AACH,MAAM,aAAa,GAAG,CAAC,SAAiB,EAAE,EAAE,CAC1C,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC;AAElG;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IACtE,QAAQ,EAAE,aAAa,CAAC,YAAY,CAAC;IACrC,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC;IAC/B,iFAAiF;IACjF,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;IACvD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IAC7D,sEAAsE;IACtE,KAAK,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAGrF,oDAAoD;AACpD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,uDAAuD;IACvD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAGH,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — The founder profile\n *\n * One member, one profile. The central auth account owns identity (email,\n * verification, deletion); this owns everything Founder Circle shows.\n *\n * @module founder-schema/domains/profile\n */\n\nimport { z } from 'zod';\nimport {\n  chosenUsernameSchema,\n  GOAL_VALUES,\n  goalSchema,\n  httpUrlSchema,\n  industrySchema,\n  locationSchema,\n  objectIdSchema,\n  optionalTrimmedString,\n  skillSchema,\n  startupStageSchema,\n  usernameSchema,\n} from '../../core/common.js';\nimport {\n  ABOUT_MAX,\n  DISPLAY_NAME_MAX,\n  FOUNDED_YEAR_MIN,\n  HEADLINE_MAX,\n  SKILLS_MAX,\n  TEAM_SIZE_MAX,\n  TEAM_SIZE_MIN,\n  VENTURE_NAME_MAX,\n  VENTURE_TAGLINE_MAX,\n} from '../../core/limits.js';\nimport { VALIDATION_MESSAGE } from '../../core/validation.js';\nimport { mediaImageSchema } from '../media/media.js';\n\n// ─── Venture ─────────────────────────────────────────────────────────────────\n\n/**\n * ⚠ NUMBERS ARE NUMBERS, never coerced. This is a BODY, which arrives as JSON\n * and already carries types. `z.coerce.number()` here accepted `teamSize: true`\n * as 1 and `\"  \"` as 0, and made the schema's input type `unknown`, so a form\n * typed against it could put anything in the field. Coercion belongs to query\n * strings, where everything is text; a form converts its text input before it\n * builds the body.\n */\nexport const ventureSchema = z.object({\n  name: z.string().trim().min(1).max(VENTURE_NAME_MAX),\n  tagline: optionalTrimmedString(VENTURE_TAGLINE_MAX),\n  website: httpUrlSchema.optional(),\n  industry: industrySchema,\n  stage: startupStageSchema,\n  /** Team size including the founder. Optional: a solo pre-idea founder has none to report. */\n  teamSize: z.number().int().min(TEAM_SIZE_MIN).max(TEAM_SIZE_MAX).optional(),\n  /**\n   * Not in the future. The bound is read per parse, never captured once.\n   *\n   * `.max(new Date().getUTCFullYear())` looks equivalent and is not: it is\n   * evaluated when this module is imported, so a server process still up on\n   * 1 January rejects the new year until somebody restarts it. The backend's\n   * Mongoose model deliberately carries no upper bound for the same reason, a\n   * `max` there being frozen at schema construction. This is where the ceiling\n   * lives.\n   */\n  foundedYear: z\n    .number()\n    .int()\n    .min(FOUNDED_YEAR_MIN)\n    .refine((year) => year <= new Date().getUTCFullYear(), {\n      error: VALIDATION_MESSAGE.foundedYearFuture,\n    })\n    .optional(),\n});\nexport type Venture = z.infer<typeof ventureSchema>;\n\n// ─── Profile ─────────────────────────────────────────────────────────────────\n\n/**\n * The founder's off-platform links. ONE shape: onboarding's contact step picks\n * its three from this, so a link one side knows can never be missing on the\n * other. (It was written twice until 0.2.0, and the profile side lacked\n * Instagram, which onboarding collected.)\n *\n * Defined without a default, because the read side wants one and the write\n * side must not have one; each adds its own.\n */\nexport const founderLinksSchema = z.object({\n  linkedin: httpUrlSchema.optional(),\n  x: httpUrlSchema.optional(),\n  instagram: httpUrlSchema.optional(),\n  github: httpUrlSchema.optional(),\n  website: httpUrlSchema.optional(),\n});\nexport type FounderLinks = z.infer<typeof founderLinksSchema>;\n\n/**\n * The profile as the owner sees it. A peer sees the redacted projection\n * (`founderCardSchema`), which is built on the server and never by dropping\n * fields on the client.\n */\nexport const founderProfileSchema = z.object({\n  id: z.string(),\n  userId: z.string(),\n  username: usernameSchema,\n  displayName: z.string().trim().min(1).max(DISPLAY_NAME_MAX),\n  headline: optionalTrimmedString(HEADLINE_MAX),\n  about: optionalTrimmedString(ABOUT_MAX),\n  /**\n   * Plain `z.url()`, NOT `httpUrlSchema`, and the difference is deliberate.\n   *\n   * No member can write this field: it appears in no write body, and\n   * `public-surface.test.ts` asserts that and will fail the day somebody adds it\n   * to a form. So the scheme restriction would be defending a field that takes\n   * no member input, while refusing hosts we legitimately serve avatars from,\n   * our own dev host among them. A read schema that rejects our own response is\n   * a self-inflicted outage.\n   *\n   * ⚠️ That argument holds only while nothing member-supplied reaches this\n   * field. Two sources write an avatar today and NEITHER is a member typing a\n   * URL: our own upload path, and the central-auth `user.created` /\n   * `user.updated` webhook, which carries the Google OAuth picture. If a\n   * \"paste a link to your photo\" control is ever added, this goes back to\n   * `httpUrlSchema` and the ruling behind it is void.\n   *\n   * WHICH picture: the member's uploaded photo at its small size (192, see\n   * `MEDIA_SIZES.avatar`), else their sign-in provider's picture, else absent.\n   * Every surface that shows this member resolves it the same way.\n   */\n  avatarUrl: z.url().optional(),\n  /**\n   * The uploaded photo itself, every size, when the member has one. Absent\n   * means `avatarUrl` (if any) is the sign-in provider's picture, so a client\n   * offers \"Remove photo\" only when this is present. Not on `founderCardSchema`:\n   * a card needs one small picture, not the set.\n   */\n  avatar: mediaImageSchema.optional(),\n  location: locationSchema.optional(),\n  venture: ventureSchema.optional(),\n  skills: z.array(skillSchema).max(SKILLS_MAX).default([]),\n  goals: z.array(goalSchema).max(GOAL_VALUES.length).default([]),\n  links: founderLinksSchema.default({}),\n  /** Onboarding is finished and the member is visible in Discover. */\n  isOnboarded: z.boolean().default(false),\n  /** Member paused their own profile. Hidden from Discover, keeps their data. */\n  isActive: z.boolean().default(true),\n  createdAt: z.iso.datetime(),\n  updatedAt: z.iso.datetime(),\n});\nexport type FounderProfile = z.infer<typeof founderProfileSchema>;\n\n/**\n * What one founder sees of another in Discover and on a profile page.\n *\n * Built server-side. Keep it a strict subset of `founderProfileSchema` — if a\n * private field ever needs to show here, that is a product decision, not an\n * accident of spreading the full document.\n */\nexport const founderCardSchema = founderProfileSchema.pick({\n  id: true,\n  username: true,\n  displayName: true,\n  headline: true,\n  avatarUrl: true,\n  location: true,\n  venture: true,\n  skills: true,\n  goals: true,\n});\nexport type FounderCard = z.infer<typeof founderCardSchema>;\n\n// ─── Write bodies ────────────────────────────────────────────────────────────\n\n/**\n * A text field the member is allowed to empty.\n *\n * Three states, and they are deliberately distinct:\n *   absent  do not touch this field\n *   null    clear it (the backend turns this into an `$unset`)\n *   \"\"      REJECTED\n *\n * The empty string is refused on purpose. A form that forgets to convert a\n * cleared input to `null` then fails loudly at the boundary, instead of being\n * silently dropped and leaving the member staring at text they just deleted.\n * `optionalTrimmedString` does the dropping, which is right for a create body\n * and wrong for a patch.\n */\nconst clearableText = (maxLength: number) =>\n  z.string().trim().min(1, VALIDATION_MESSAGE.clearWithNull).max(maxLength).nullable().optional();\n\n/**\n * Patch body for the Me tab. Only the keys the member actually changed.\n *\n * ⚠️ Written as its own object ON PURPOSE. Do NOT rebuild it as\n * `founderProfileSchema.pick({...}).partial()`: `.partial()` does not switch\n * off `.default()`, so `skills`, `goals` and `links` would materialise as\n * `[]`, `[]` and `{}` on every request, including an empty one. Under a `$set`\n * that wipes a member's skills and every one of their links the moment they\n * edit their display name. `tsc` cannot see it and the request looks correct in\n * the network tab.\n *\n * The rule this comes from: defaults belong on the READ side. A write body\n * states what the caller sent and nothing else.\n */\nexport const updateFounderProfileBodySchema = z.object({\n  displayName: z.string().trim().min(1).max(DISPLAY_NAME_MAX).optional(),\n  headline: clearableText(HEADLINE_MAX),\n  about: clearableText(ABOUT_MAX),\n  /** Carries the whole location; `locationSchema` has no default to fill a gap. */\n  location: locationSchema.optional(),\n  venture: ventureSchema.optional(),\n  skills: z.array(skillSchema).max(SKILLS_MAX).optional(),\n  goals: z.array(goalSchema).max(GOAL_VALUES.length).optional(),\n  /** Sent whole. To drop one link, send the object without that key. */\n  links: founderLinksSchema.optional(),\n});\nexport type UpdateFounderProfileBody = z.infer<typeof updateFounderProfileBodySchema>;\n\n/**\n * Username change. Separate from the profile patch because it needs a\n * uniqueness check, and it refuses a reserved handle (`chosenUsernameSchema`).\n */\nexport const updateUsernameBodySchema = z.object({ username: chosenUsernameSchema });\nexport type UpdateUsernameBody = z.infer<typeof updateUsernameBodySchema>;\n\n/** Availability probe behind the username field. */\nexport const usernameAvailabilitySchema = z.object({\n  username: usernameSchema,\n  available: z.boolean(),\n  /** Present when unavailable: `taken` or `reserved`. */\n  reason: z.enum(['taken', 'reserved']).optional(),\n});\nexport type UsernameAvailability = z.infer<typeof usernameAvailabilitySchema>;\n\n// ─── The member's own photo ──────────────────────────────────────────────────\n\n/**\n * `PUT /api/v1/profiles/me/avatar`: use a completed upload (purpose `avatar`)\n * as the member's photo. Answers with the updated `founderProfileSchema`.\n *\n * The previous photo is deleted from storage, not merely unlinked, so its old\n * address stops working. `DELETE /api/v1/profiles/me/avatar` removes the photo\n * the same way and the member falls back to their sign-in provider's picture.\n */\nexport const setAvatarBodySchema = z.object({ mediaId: objectIdSchema });\nexport type SetAvatarBody = z.infer<typeof setAvatarBodySchema>;\n"]}

package/dist/domains/support/support.d.ts

@@ -0,0 +1,305 @@
+/**
+ * founder-schema: support
+ *
+ * A member asks for help; a support agent answers. One conversation per
+ * problem, a ticket, with its messages in order.
+ *
+ *   POST /api/v1/support/tickets                       { subject, category, body }
+ *   GET  /api/v1/support/tickets                       ?scope&status&assignee&limit&cursor
+ *   GET  /api/v1/support/tickets/:ticketId
+ *   POST /api/v1/support/tickets/:ticketId/messages    { body }   reply
+ *   POST /api/v1/support/tickets/:ticketId/claim                  an agent takes it
+ *   POST /api/v1/support/tickets/:ticketId/resolve                closed as solved
+ *   POST /api/v1/support/tickets/:ticketId/reopen                 the member reopens
+ *
+ *   GET    /api/v1/support/saved-replies
+ *   POST   /api/v1/support/saved-replies                { title, body }
+ *   PUT    /api/v1/support/saved-replies/:replyId       { title, body }
+ *   DELETE /api/v1/support/saved-replies/:replyId
+ *
+ * THE STATES
+ *   open      waiting on support: new, or the member wrote last
+ *   waiting   waiting on the member: an agent wrote last
+ *   resolved  closed; the member can reopen it, and writing reopens it
+ *
+ * `scope=mine` is the tickets the asker raised, whatever role they act as;
+ * `scope=queue` is every ticket the active role may read (all of them for a
+ * support agent or manager, only their own for a member). An agent replying to
+ * an unclaimed ticket claims it.
+ *
+ * Every message is free text from a person: untrusted, shown as text.
+ *
+ * @module founder-schema/domains/support
+ */
+import { z } from 'zod';
+/** What the problem is about: routes it, and lets the team see patterns. Append only. */
+export declare const TICKET_CATEGORY_VALUES: readonly ["account", "profile", "feed", "chat", "safety", "bug", "other"];
+export declare const ticketCategorySchema: z.ZodEnum<{
+    chat: "chat";
+    feed: "feed";
+    other: "other";
+    account: "account";
+    profile: "profile";
+    safety: "safety";
+    bug: "bug";
+}>;
+export type TicketCategory = z.infer<typeof ticketCategorySchema>;
+export declare const TICKET_STATUS_VALUES: readonly ["open", "waiting", "resolved"];
+export declare const ticketStatusSchema: z.ZodEnum<{
+    open: "open";
+    waiting: "waiting";
+    resolved: "resolved";
+}>;
+export type TicketStatus = z.infer<typeof ticketStatusSchema>;
+export declare const TICKET_SCOPE_VALUES: readonly ["mine", "queue"];
+export declare const ticketScopeSchema: z.ZodEnum<{
+    mine: "mine";
+    queue: "queue";
+}>;
+export type TicketScope = z.infer<typeof ticketScopeSchema>;
+/** The queue's assignee filter: mine, nobody's, or anyone's. */
+export declare const TICKET_ASSIGNEE_FILTER_VALUES: readonly ["me", "unassigned", "any"];
+export declare const ticketAssigneeFilterSchema: z.ZodEnum<{
+    any: "any";
+    me: "me";
+    unassigned: "unassigned";
+}>;
+export type TicketAssigneeFilter = z.infer<typeof ticketAssigneeFilterSchema>;
+/** One message. `from` says which side wrote it; the agent's name is shown to the member. */
+export declare const ticketMessageSchema: z.ZodObject<{
+    id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    from: z.ZodEnum<{
+        member: "member";
+        agent: "agent";
+    }>;
+    author: z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        displayName: z.ZodString;
+    }, z.core.$strip>;
+    body: z.ZodString;
+    at: z.ZodISODateTime;
+}, z.core.$strip>;
+export type TicketMessage = z.infer<typeof ticketMessageSchema>;
+/** A ticket in a list. */
+export declare const ticketSummarySchema: z.ZodObject<{
+    id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    subject: z.ZodString;
+    category: z.ZodEnum<{
+        chat: "chat";
+        feed: "feed";
+        other: "other";
+        account: "account";
+        profile: "profile";
+        safety: "safety";
+        bug: "bug";
+    }>;
+    status: z.ZodEnum<{
+        open: "open";
+        waiting: "waiting";
+        resolved: "resolved";
+    }>;
+    member: z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        displayName: z.ZodString;
+        avatarUrl: z.ZodNullable<z.ZodURL>;
+    }, z.core.$strip>;
+    assignee: z.ZodNullable<z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        displayName: z.ZodString;
+    }, z.core.$strip>>;
+    messageCount: z.ZodNumber;
+    createdAt: z.ZodISODateTime;
+    lastMessageAt: z.ZodISODateTime;
+    lastFrom: z.ZodEnum<{
+        member: "member";
+        agent: "agent";
+    }>;
+}, z.core.$strip>;
+export type TicketSummary = z.infer<typeof ticketSummarySchema>;
+export declare const ticketPageSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        subject: z.ZodString;
+        category: z.ZodEnum<{
+            chat: "chat";
+            feed: "feed";
+            other: "other";
+            account: "account";
+            profile: "profile";
+            safety: "safety";
+            bug: "bug";
+        }>;
+        status: z.ZodEnum<{
+            open: "open";
+            waiting: "waiting";
+            resolved: "resolved";
+        }>;
+        member: z.ZodObject<{
+            id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+            displayName: z.ZodString;
+            avatarUrl: z.ZodNullable<z.ZodURL>;
+        }, z.core.$strip>;
+        assignee: z.ZodNullable<z.ZodObject<{
+            id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+            displayName: z.ZodString;
+        }, z.core.$strip>>;
+        messageCount: z.ZodNumber;
+        createdAt: z.ZodISODateTime;
+        lastMessageAt: z.ZodISODateTime;
+        lastFrom: z.ZodEnum<{
+            member: "member";
+            agent: "agent";
+        }>;
+    }, z.core.$strip>>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type TicketPage = z.infer<typeof ticketPageSchema>;
+/** A ticket with its whole conversation and what the asker may do with it. */
+export declare const ticketDetailSchema: z.ZodObject<{
+    id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    subject: z.ZodString;
+    category: z.ZodEnum<{
+        chat: "chat";
+        feed: "feed";
+        other: "other";
+        account: "account";
+        profile: "profile";
+        safety: "safety";
+        bug: "bug";
+    }>;
+    status: z.ZodEnum<{
+        open: "open";
+        waiting: "waiting";
+        resolved: "resolved";
+    }>;
+    member: z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        displayName: z.ZodString;
+        avatarUrl: z.ZodNullable<z.ZodURL>;
+    }, z.core.$strip>;
+    assignee: z.ZodNullable<z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        displayName: z.ZodString;
+    }, z.core.$strip>>;
+    messageCount: z.ZodNumber;
+    createdAt: z.ZodISODateTime;
+    lastMessageAt: z.ZodISODateTime;
+    lastFrom: z.ZodEnum<{
+        member: "member";
+        agent: "agent";
+    }>;
+    messages: z.ZodArray<z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        from: z.ZodEnum<{
+            member: "member";
+            agent: "agent";
+        }>;
+        author: z.ZodObject<{
+            id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+            displayName: z.ZodString;
+        }, z.core.$strip>;
+        body: z.ZodString;
+        at: z.ZodISODateTime;
+    }, z.core.$strip>>;
+    resolvedAt: z.ZodNullable<z.ZodISODateTime>;
+    viewer: z.ZodObject<{
+        canReply: z.ZodBoolean;
+        canClaim: z.ZodBoolean;
+        canResolve: z.ZodBoolean;
+        canReopen: z.ZodBoolean;
+        asAgent: z.ZodBoolean;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type TicketDetail = z.infer<typeof ticketDetailSchema>;
+/** `:ticketId` in the paths above. */
+export declare const ticketParamsSchema: z.ZodObject<{
+    ticketId: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+}, z.core.$strip>;
+export type TicketParams = z.infer<typeof ticketParamsSchema>;
+/** `GET /support/tickets`. Mine by default; status and assignee narrow it. */
+export declare const ticketListQuerySchema: z.ZodObject<{
+    limit: z.ZodPreprocess<z.ZodDefault<z.ZodCoercedNumber<unknown>>, unknown>;
+    cursor: z.ZodOptional<z.ZodString>;
+    scope: z.ZodPreprocess<z.ZodDefault<z.ZodEnum<{
+        mine: "mine";
+        queue: "queue";
+    }>>, unknown>;
+    status: z.ZodPreprocess<z.ZodOptional<z.ZodEnum<{
+        open: "open";
+        waiting: "waiting";
+        resolved: "resolved";
+    }>>, unknown>;
+    assignee: z.ZodPreprocess<z.ZodDefault<z.ZodEnum<{
+        any: "any";
+        me: "me";
+        unassigned: "unassigned";
+    }>>, unknown>;
+}, z.core.$strip>;
+export type TicketListQuery = z.infer<typeof ticketListQuerySchema>;
+export type TicketListQueryInput = z.input<typeof ticketListQuerySchema>;
+/** `POST /support/tickets`: what went wrong, in the member's words. */
+export declare const createTicketBodySchema: z.ZodObject<{
+    subject: z.ZodString;
+    category: z.ZodEnum<{
+        chat: "chat";
+        feed: "feed";
+        other: "other";
+        account: "account";
+        profile: "profile";
+        safety: "safety";
+        bug: "bug";
+    }>;
+    body: z.ZodString;
+}, z.core.$strip>;
+export type CreateTicketBody = z.infer<typeof createTicketBodySchema>;
+/** `POST /support/tickets/:ticketId/messages`. */
+export declare const replyTicketBodySchema: z.ZodObject<{
+    body: z.ZodString;
+}, z.core.$strip>;
+export type ReplyTicketBody = z.infer<typeof replyTicketBodySchema>;
+/** An answer the support team reuses. Inserted into a reply, then edited, never sent as is. */
+export declare const savedReplySchema: z.ZodObject<{
+    id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    title: z.ZodString;
+    body: z.ZodString;
+    author: z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        displayName: z.ZodString;
+    }, z.core.$strip>;
+    updatedAt: z.ZodISODateTime;
+    viewer: z.ZodObject<{
+        canEdit: z.ZodBoolean;
+        canDelete: z.ZodBoolean;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type SavedReply = z.infer<typeof savedReplySchema>;
+/** Every saved reply, by title. Bounded by `SAVED_REPLIES_MAX`, so not paged. */
+export declare const savedReplyListSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        title: z.ZodString;
+        body: z.ZodString;
+        author: z.ZodObject<{
+            id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+            displayName: z.ZodString;
+        }, z.core.$strip>;
+        updatedAt: z.ZodISODateTime;
+        viewer: z.ZodObject<{
+            canEdit: z.ZodBoolean;
+            canDelete: z.ZodBoolean;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type SavedReplyList = z.infer<typeof savedReplyListSchema>;
+/** `:replyId` in the paths above. */
+export declare const savedReplyParamsSchema: z.ZodObject<{
+    replyId: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+}, z.core.$strip>;
+export type SavedReplyParams = z.infer<typeof savedReplyParamsSchema>;
+/** `POST` and `PUT /support/saved-replies`. */
+export declare const savedReplyBodySchema: z.ZodObject<{
+    title: z.ZodString;
+    body: z.ZodString;
+}, z.core.$strip>;
+export type SavedReplyBody = z.infer<typeof savedReplyBodySchema>;
+//# sourceMappingURL=support.d.ts.map

package/dist/domains/support/support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"support.d.ts","sourceRoot":"","sources":["../../../src/domains/support/support.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,2EAQzB,CAAC;AACX,eAAO,MAAM,oBAAoB;;;;;;;;EAAiC,CAAC;AACnE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,oBAAoB,0CAA2C,CAAC;AAC7E,eAAO,MAAM,kBAAkB;;;;EAA+B,CAAC;AAC/D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,mBAAmB,4BAA6B,CAAC;AAC9D,eAAO,MAAM,iBAAiB;;;EAA8B,CAAC;AAC7D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,gEAAgE;AAChE,eAAO,MAAM,6BAA6B,sCAAuC,CAAC;AAClF,eAAO,MAAM,0BAA0B;;;;EAAwC,CAAC;AAChF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAI9E,6FAA6F;AAC7F,eAAO,MAAM,mBAAmB;;;;;;;;;;;;iBAM9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,0BAA0B;AAC1B,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAY9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAuC,CAAC;AACrE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAW7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,sCAAsC;AACtC,eAAO,MAAM,kBAAkB;;iBAAyC,CAAC;AACzE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;iBAIhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAIzE,uEAAuE;AACvE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;iBAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,kDAAkD;AAClD,eAAO,MAAM,qBAAqB;;iBAAkC,CAAC;AACrE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAIpE,+FAA+F;AAC/F,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;iBAO3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,iFAAiF;AACjF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;iBAAiD,CAAC;AACnF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,qCAAqC;AACrC,eAAO,MAAM,sBAAsB;;iBAAwC,CAAC;AAC5E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,+CAA+C;AAC/C,eAAO,MAAM,oBAAoB;;;iBAG/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}