founder-schema 0.3.0 → 0.5.0

package/dist/domains/support/support.js

@@ -0,0 +1,129 @@
+/**
+ * founder-schema: support
+ *
+ * A member asks for help; a support agent answers. One conversation per
+ * problem, a ticket, with its messages in order.
+ *
+ *   POST /api/v1/support/tickets                       { subject, category, body }
+ *   GET  /api/v1/support/tickets                       ?scope&status&assignee&limit&cursor
+ *   GET  /api/v1/support/tickets/:ticketId
+ *   POST /api/v1/support/tickets/:ticketId/messages    { body }   reply
+ *   POST /api/v1/support/tickets/:ticketId/claim                  an agent takes it
+ *   POST /api/v1/support/tickets/:ticketId/resolve                closed as solved
+ *   POST /api/v1/support/tickets/:ticketId/reopen                 the member reopens
+ *
+ *   GET    /api/v1/support/saved-replies
+ *   POST   /api/v1/support/saved-replies                { title, body }
+ *   PUT    /api/v1/support/saved-replies/:replyId       { title, body }
+ *   DELETE /api/v1/support/saved-replies/:replyId
+ *
+ * THE STATES
+ *   open      waiting on support: new, or the member wrote last
+ *   waiting   waiting on the member: an agent wrote last
+ *   resolved  closed; the member can reopen it, and writing reopens it
+ *
+ * `scope=mine` is the tickets the asker raised, whatever role they act as;
+ * `scope=queue` is every ticket the active role may read (all of them for a
+ * support agent or manager, only their own for a member). An agent replying to
+ * an unclaimed ticket claims it.
+ *
+ * Every message is free text from a person: untrusted, shown as text.
+ *
+ * @module founder-schema/domains/support
+ */
+import { z } from 'zod';
+import { emptyStringToUndefined, objectIdSchema, paginationQuerySchema, } from '../../core/common.js';
+import { SAVED_REPLY_BODY_MAX, SAVED_REPLY_TITLE_MAX, TICKET_MESSAGE_MAX, TICKET_SUBJECT_MAX, TICKET_SUBJECT_MIN, } from '../../core/limits.js';
+import { paginatedSchema } from '../../core/responses.js';
+/** What the problem is about: routes it, and lets the team see patterns. Append only. */
+export const TICKET_CATEGORY_VALUES = [
+    'account',
+    'profile',
+    'feed',
+    'chat',
+    'safety',
+    'bug',
+    'other',
+];
+export const ticketCategorySchema = z.enum(TICKET_CATEGORY_VALUES);
+export const TICKET_STATUS_VALUES = ['open', 'waiting', 'resolved'];
+export const ticketStatusSchema = z.enum(TICKET_STATUS_VALUES);
+export const TICKET_SCOPE_VALUES = ['mine', 'queue'];
+export const ticketScopeSchema = z.enum(TICKET_SCOPE_VALUES);
+/** The queue's assignee filter: mine, nobody's, or anyone's. */
+export const TICKET_ASSIGNEE_FILTER_VALUES = ['me', 'unassigned', 'any'];
+export const ticketAssigneeFilterSchema = z.enum(TICKET_ASSIGNEE_FILTER_VALUES);
+const person = z.object({ id: objectIdSchema, displayName: z.string() });
+/** One message. `from` says which side wrote it; the agent's name is shown to the member. */
+export const ticketMessageSchema = z.object({
+    id: objectIdSchema,
+    from: z.enum(['member', 'agent']),
+    author: person,
+    body: z.string(),
+    at: z.iso.datetime(),
+});
+/** A ticket in a list. */
+export const ticketSummarySchema = z.object({
+    id: objectIdSchema,
+    subject: z.string(),
+    category: ticketCategorySchema,
+    status: ticketStatusSchema,
+    member: person.extend({ avatarUrl: z.url().nullable() }),
+    assignee: person.nullable(),
+    messageCount: z.number().int().min(1),
+    createdAt: z.iso.datetime(),
+    lastMessageAt: z.iso.datetime(),
+    /** Who wrote last, so a list can say "Support replied" or "Waiting on support". */
+    lastFrom: z.enum(['member', 'agent']),
+});
+export const ticketPageSchema = paginatedSchema(ticketSummarySchema);
+/** A ticket with its whole conversation and what the asker may do with it. */
+export const ticketDetailSchema = ticketSummarySchema.extend({
+    messages: z.array(ticketMessageSchema).min(1),
+    resolvedAt: z.iso.datetime().nullable(),
+    viewer: z.object({
+        canReply: z.boolean(),
+        canClaim: z.boolean(),
+        canResolve: z.boolean(),
+        canReopen: z.boolean(),
+        /** Replying as the agent side (the reply is shown as Support's). */
+        asAgent: z.boolean(),
+    }),
+});
+/** `:ticketId` in the paths above. */
+export const ticketParamsSchema = z.object({ ticketId: objectIdSchema });
+/** `GET /support/tickets`. Mine by default; status and assignee narrow it. */
+export const ticketListQuerySchema = paginationQuerySchema.extend({
+    scope: z.preprocess(emptyStringToUndefined, ticketScopeSchema.default('mine')),
+    status: z.preprocess(emptyStringToUndefined, ticketStatusSchema.optional()),
+    assignee: z.preprocess(emptyStringToUndefined, ticketAssigneeFilterSchema.default('any')),
+});
+const messageBody = z.string().trim().min(1).max(TICKET_MESSAGE_MAX);
+/** `POST /support/tickets`: what went wrong, in the member's words. */
+export const createTicketBodySchema = z.object({
+    subject: z.string().trim().min(TICKET_SUBJECT_MIN).max(TICKET_SUBJECT_MAX),
+    category: ticketCategorySchema,
+    body: messageBody,
+});
+/** `POST /support/tickets/:ticketId/messages`. */
+export const replyTicketBodySchema = z.object({ body: messageBody });
+// ─── Saved replies ───────────────────────────────────────────────────────────
+/** An answer the support team reuses. Inserted into a reply, then edited, never sent as is. */
+export const savedReplySchema = z.object({
+    id: objectIdSchema,
+    title: z.string(),
+    body: z.string(),
+    author: person,
+    updatedAt: z.iso.datetime(),
+    viewer: z.object({ canEdit: z.boolean(), canDelete: z.boolean() }),
+});
+/** Every saved reply, by title. Bounded by `SAVED_REPLIES_MAX`, so not paged. */
+export const savedReplyListSchema = z.object({ items: z.array(savedReplySchema) });
+/** `:replyId` in the paths above. */
+export const savedReplyParamsSchema = z.object({ replyId: objectIdSchema });
+/** `POST` and `PUT /support/saved-replies`. */
+export const savedReplyBodySchema = z.object({
+    title: z.string().trim().min(1).max(SAVED_REPLY_TITLE_MAX),
+    body: z.string().trim().min(1).max(SAVED_REPLY_BODY_MAX),
+});
+//# sourceMappingURL=support.js.map

package/dist/domains/support/support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"support.js","sourceRoot":"","sources":["../../../src/domains/support/support.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,yFAAyF;AACzF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,SAAS;IACT,SAAS;IACT,MAAM;IACN,MAAM;IACN,QAAQ;IACR,KAAK;IACL,OAAO;CACC,CAAC;AACX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AAGnE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC;AAC7E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAG/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,OAAO,CAAU,CAAC;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAG7D,gEAAgE;AAChE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAU,CAAC;AAClF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;AAGhF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEzE,6FAA6F;AAC7F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CACrB,CAAC,CAAC;AAGH,0BAA0B;AAC1B,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,cAAc;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,oBAAoB;IAC9B,MAAM,EAAE,kBAAkB;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IACxD,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC/B,mFAAmF;IACnF,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;CACtC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,eAAe,CAAC,mBAAmB,CAAC,CAAC;AAGrE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,MAAM,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;QACrB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;QACrB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;QACvB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;QACtB,oEAAoE;QACpE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;KACrB,CAAC;CACH,CAAC,CAAC;AAGH,sCAAsC;AACtC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;AAGzE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,qBAAqB,CAAC,MAAM,CAAC;IAChE,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9E,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC;IAC3E,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,0BAA0B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;CAC1F,CAAC,CAAC;AAIH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAErE,uEAAuE;AACvE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC1E,QAAQ,EAAE,oBAAoB;IAC9B,IAAI,EAAE,WAAW;CAClB,CAAC,CAAC;AAGH,kDAAkD;AAClD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AAGrE,gFAAgF;AAEhF,+FAA+F;AAC/F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,cAAc;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,MAAM;IACd,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;CACnE,CAAC,CAAC;AAGH,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;AAGnF,qCAAqC;AACrC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;AAG5E,+CAA+C;AAC/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAC1D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;CACzD,CAAC,CAAC","sourcesContent":["/**\n * founder-schema: support\n *\n * A member asks for help; a support agent answers. One conversation per\n * problem, a ticket, with its messages in order.\n *\n *   POST /api/v1/support/tickets                       { subject, category, body }\n *   GET  /api/v1/support/tickets                       ?scope&status&assignee&limit&cursor\n *   GET  /api/v1/support/tickets/:ticketId\n *   POST /api/v1/support/tickets/:ticketId/messages    { body }   reply\n *   POST /api/v1/support/tickets/:ticketId/claim                  an agent takes it\n *   POST /api/v1/support/tickets/:ticketId/resolve                closed as solved\n *   POST /api/v1/support/tickets/:ticketId/reopen                 the member reopens\n *\n *   GET    /api/v1/support/saved-replies\n *   POST   /api/v1/support/saved-replies                { title, body }\n *   PUT    /api/v1/support/saved-replies/:replyId       { title, body }\n *   DELETE /api/v1/support/saved-replies/:replyId\n *\n * THE STATES\n *   open      waiting on support: new, or the member wrote last\n *   waiting   waiting on the member: an agent wrote last\n *   resolved  closed; the member can reopen it, and writing reopens it\n *\n * `scope=mine` is the tickets the asker raised, whatever role they act as;\n * `scope=queue` is every ticket the active role may read (all of them for a\n * support agent or manager, only their own for a member). An agent replying to\n * an unclaimed ticket claims it.\n *\n * Every message is free text from a person: untrusted, shown as text.\n *\n * @module founder-schema/domains/support\n */\n\nimport { z } from 'zod';\nimport {\n  emptyStringToUndefined,\n  objectIdSchema,\n  paginationQuerySchema,\n} from '../../core/common.js';\nimport {\n  SAVED_REPLY_BODY_MAX,\n  SAVED_REPLY_TITLE_MAX,\n  TICKET_MESSAGE_MAX,\n  TICKET_SUBJECT_MAX,\n  TICKET_SUBJECT_MIN,\n} from '../../core/limits.js';\nimport { paginatedSchema } from '../../core/responses.js';\n\n/** What the problem is about: routes it, and lets the team see patterns. Append only. */\nexport const TICKET_CATEGORY_VALUES = [\n  'account',\n  'profile',\n  'feed',\n  'chat',\n  'safety',\n  'bug',\n  'other',\n] as const;\nexport const ticketCategorySchema = z.enum(TICKET_CATEGORY_VALUES);\nexport type TicketCategory = z.infer<typeof ticketCategorySchema>;\n\nexport const TICKET_STATUS_VALUES = ['open', 'waiting', 'resolved'] as const;\nexport const ticketStatusSchema = z.enum(TICKET_STATUS_VALUES);\nexport type TicketStatus = z.infer<typeof ticketStatusSchema>;\n\nexport const TICKET_SCOPE_VALUES = ['mine', 'queue'] as const;\nexport const ticketScopeSchema = z.enum(TICKET_SCOPE_VALUES);\nexport type TicketScope = z.infer<typeof ticketScopeSchema>;\n\n/** The queue's assignee filter: mine, nobody's, or anyone's. */\nexport const TICKET_ASSIGNEE_FILTER_VALUES = ['me', 'unassigned', 'any'] as const;\nexport const ticketAssigneeFilterSchema = z.enum(TICKET_ASSIGNEE_FILTER_VALUES);\nexport type TicketAssigneeFilter = z.infer<typeof ticketAssigneeFilterSchema>;\n\nconst person = z.object({ id: objectIdSchema, displayName: z.string() });\n\n/** One message. `from` says which side wrote it; the agent's name is shown to the member. */\nexport const ticketMessageSchema = z.object({\n  id: objectIdSchema,\n  from: z.enum(['member', 'agent']),\n  author: person,\n  body: z.string(),\n  at: z.iso.datetime(),\n});\nexport type TicketMessage = z.infer<typeof ticketMessageSchema>;\n\n/** A ticket in a list. */\nexport const ticketSummarySchema = z.object({\n  id: objectIdSchema,\n  subject: z.string(),\n  category: ticketCategorySchema,\n  status: ticketStatusSchema,\n  member: person.extend({ avatarUrl: z.url().nullable() }),\n  assignee: person.nullable(),\n  messageCount: z.number().int().min(1),\n  createdAt: z.iso.datetime(),\n  lastMessageAt: z.iso.datetime(),\n  /** Who wrote last, so a list can say \"Support replied\" or \"Waiting on support\". */\n  lastFrom: z.enum(['member', 'agent']),\n});\nexport type TicketSummary = z.infer<typeof ticketSummarySchema>;\n\nexport const ticketPageSchema = paginatedSchema(ticketSummarySchema);\nexport type TicketPage = z.infer<typeof ticketPageSchema>;\n\n/** A ticket with its whole conversation and what the asker may do with it. */\nexport const ticketDetailSchema = ticketSummarySchema.extend({\n  messages: z.array(ticketMessageSchema).min(1),\n  resolvedAt: z.iso.datetime().nullable(),\n  viewer: z.object({\n    canReply: z.boolean(),\n    canClaim: z.boolean(),\n    canResolve: z.boolean(),\n    canReopen: z.boolean(),\n    /** Replying as the agent side (the reply is shown as Support's). */\n    asAgent: z.boolean(),\n  }),\n});\nexport type TicketDetail = z.infer<typeof ticketDetailSchema>;\n\n/** `:ticketId` in the paths above. */\nexport const ticketParamsSchema = z.object({ ticketId: objectIdSchema });\nexport type TicketParams = z.infer<typeof ticketParamsSchema>;\n\n/** `GET /support/tickets`. Mine by default; status and assignee narrow it. */\nexport const ticketListQuerySchema = paginationQuerySchema.extend({\n  scope: z.preprocess(emptyStringToUndefined, ticketScopeSchema.default('mine')),\n  status: z.preprocess(emptyStringToUndefined, ticketStatusSchema.optional()),\n  assignee: z.preprocess(emptyStringToUndefined, ticketAssigneeFilterSchema.default('any')),\n});\nexport type TicketListQuery = z.infer<typeof ticketListQuerySchema>;\nexport type TicketListQueryInput = z.input<typeof ticketListQuerySchema>;\n\nconst messageBody = z.string().trim().min(1).max(TICKET_MESSAGE_MAX);\n\n/** `POST /support/tickets`: what went wrong, in the member's words. */\nexport const createTicketBodySchema = z.object({\n  subject: z.string().trim().min(TICKET_SUBJECT_MIN).max(TICKET_SUBJECT_MAX),\n  category: ticketCategorySchema,\n  body: messageBody,\n});\nexport type CreateTicketBody = z.infer<typeof createTicketBodySchema>;\n\n/** `POST /support/tickets/:ticketId/messages`. */\nexport const replyTicketBodySchema = z.object({ body: messageBody });\nexport type ReplyTicketBody = z.infer<typeof replyTicketBodySchema>;\n\n// ─── Saved replies ───────────────────────────────────────────────────────────\n\n/** An answer the support team reuses. Inserted into a reply, then edited, never sent as is. */\nexport const savedReplySchema = z.object({\n  id: objectIdSchema,\n  title: z.string(),\n  body: z.string(),\n  author: person,\n  updatedAt: z.iso.datetime(),\n  viewer: z.object({ canEdit: z.boolean(), canDelete: z.boolean() }),\n});\nexport type SavedReply = z.infer<typeof savedReplySchema>;\n\n/** Every saved reply, by title. Bounded by `SAVED_REPLIES_MAX`, so not paged. */\nexport const savedReplyListSchema = z.object({ items: z.array(savedReplySchema) });\nexport type SavedReplyList = z.infer<typeof savedReplyListSchema>;\n\n/** `:replyId` in the paths above. */\nexport const savedReplyParamsSchema = z.object({ replyId: objectIdSchema });\nexport type SavedReplyParams = z.infer<typeof savedReplyParamsSchema>;\n\n/** `POST` and `PUT /support/saved-replies`. */\nexport const savedReplyBodySchema = z.object({\n  title: z.string().trim().min(1).max(SAVED_REPLY_TITLE_MAX),\n  body: z.string().trim().min(1).max(SAVED_REPLY_BODY_MAX),\n});\nexport type SavedReplyBody = z.infer<typeof savedReplyBodySchema>;\n"]}

package/dist/domains/team/team.d.ts

@@ -0,0 +1,79 @@
+/**
+ * founder-schema: the staff team
+ *
+ *   GET    /api/v1/team                    the people holding a platform role
+ *   PUT    /api/v1/team/:memberId/roles    set someone's platform roles
+ *   DELETE /api/v1/team/:memberId/mpin     clear a forgotten MPIN (superadmin;
+ *                                          answers `IdResponse`)
+ *
+ * Setting roles sends the person's WHOLE set, so the request says what they
+ * should end up with rather than a list of changes to replay. Every role that
+ * changes must be one the actor's active role may grant (`ROLE_GRANTED_BY`);
+ * nobody changes their own; superadmin is never in a request. Each change is
+ * written to the audit log.
+ *
+ * @module founder-schema/domains/team
+ */
+import { z } from 'zod';
+/** `:memberId` in the paths above. */
+export declare const teamMemberParamsSchema: z.ZodObject<{
+    memberId: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+}, z.core.$strip>;
+export type TeamMemberParams = z.infer<typeof teamMemberParamsSchema>;
+/** One person on the team, as the Team screens list them. */
+export declare const teamMemberSchema: z.ZodObject<{
+    id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    displayName: z.ZodString;
+    avatarUrl: z.ZodNullable<z.ZodURL>;
+    email: z.ZodNullable<z.ZodString>;
+    roles: z.ZodArray<z.ZodEnum<{
+        superadmin: "superadmin";
+        manager: "manager";
+        moderator: "moderator";
+        support_agent: "support_agent";
+    }>>;
+    mpinSet: z.ZodBoolean;
+}, z.core.$strip>;
+export type TeamMember = z.infer<typeof teamMemberSchema>;
+export declare const teamPageSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        displayName: z.ZodString;
+        avatarUrl: z.ZodNullable<z.ZodURL>;
+        email: z.ZodNullable<z.ZodString>;
+        roles: z.ZodArray<z.ZodEnum<{
+            superadmin: "superadmin";
+            manager: "manager";
+            moderator: "moderator";
+            support_agent: "support_agent";
+        }>>;
+        mpinSet: z.ZodBoolean;
+    }, z.core.$strip>>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type TeamPage = z.infer<typeof teamPageSchema>;
+/**
+ * `PUT /team/:memberId/roles`: the platform roles the person should hold.
+ * Empty takes every staff role away. No duplicates; no superadmin (a server
+ * script grants it, never the product).
+ */
+export declare const setMemberRolesBodySchema: z.ZodObject<{
+    roles: z.ZodArray<z.ZodEnum<{
+        manager: "manager";
+        moderator: "moderator";
+        support_agent: "support_agent";
+    }>>;
+}, z.core.$strip>;
+export type SetMemberRolesBody = z.infer<typeof setMemberRolesBodySchema>;
+/** What `PUT /team/:memberId/roles` answers: the roles the person now holds, highest first. */
+export declare const setMemberRolesResponseSchema: z.ZodObject<{
+    id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    roles: z.ZodArray<z.ZodEnum<{
+        superadmin: "superadmin";
+        manager: "manager";
+        moderator: "moderator";
+        support_agent: "support_agent";
+    }>>;
+}, z.core.$strip>;
+export type SetMemberRolesResponse = z.infer<typeof setMemberRolesResponseSchema>;
+//# sourceMappingURL=team.d.ts.map

package/dist/domains/team/team.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team.d.ts","sourceRoot":"","sources":["../../../src/domains/team/team.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,sCAAsC;AACtC,eAAO,MAAM,sBAAsB;;iBAAyC,CAAC;AAC7E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;iBAS3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;iBAAoC,CAAC;AAChE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;;;;;iBAOnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,+FAA+F;AAC/F,eAAO,MAAM,4BAA4B;;;;;;;;iBAGvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/domains/team/team.js

@@ -0,0 +1,54 @@
+/**
+ * founder-schema: the staff team
+ *
+ *   GET    /api/v1/team                    the people holding a platform role
+ *   PUT    /api/v1/team/:memberId/roles    set someone's platform roles
+ *   DELETE /api/v1/team/:memberId/mpin     clear a forgotten MPIN (superadmin;
+ *                                          answers `IdResponse`)
+ *
+ * Setting roles sends the person's WHOLE set, so the request says what they
+ * should end up with rather than a list of changes to replay. Every role that
+ * changes must be one the actor's active role may grant (`ROLE_GRANTED_BY`);
+ * nobody changes their own; superadmin is never in a request. Each change is
+ * written to the audit log.
+ *
+ * @module founder-schema/domains/team
+ */
+import { z } from 'zod';
+import { PLATFORM_ROLE_VALUES, platformRoleSchema } from '../../access/roles.js';
+import { objectIdSchema } from '../../core/common.js';
+import { paginatedSchema } from '../../core/responses.js';
+import { VALIDATION_MESSAGE } from '../../core/validation.js';
+/** `:memberId` in the paths above. */
+export const teamMemberParamsSchema = z.object({ memberId: objectIdSchema });
+/** One person on the team, as the Team screens list them. */
+export const teamMemberSchema = z.object({
+    id: objectIdSchema,
+    displayName: z.string(),
+    /** Server-set or from the login provider, like every avatar on the wire: a plain URL check. */
+    avatarUrl: z.url().nullable(),
+    email: z.string().nullable(),
+    /** Their platform roles, highest first. Never empty in this list. */
+    roles: z.array(platformRoleSchema).min(1),
+    mpinSet: z.boolean(),
+});
+export const teamPageSchema = paginatedSchema(teamMemberSchema);
+/**
+ * `PUT /team/:memberId/roles`: the platform roles the person should hold.
+ * Empty takes every staff role away. No duplicates; no superadmin (a server
+ * script grants it, never the product).
+ */
+export const setMemberRolesBodySchema = z.object({
+    roles: z
+        .array(platformRoleSchema.exclude(['superadmin']))
+        .max(PLATFORM_ROLE_VALUES.length)
+        .refine((roles) => new Set(roles).size === roles.length, {
+        error: VALIDATION_MESSAGE.rolesDuplicate,
+    }),
+});
+/** What `PUT /team/:memberId/roles` answers: the roles the person now holds, highest first. */
+export const setMemberRolesResponseSchema = z.object({
+    id: objectIdSchema,
+    roles: z.array(platformRoleSchema),
+});
+//# sourceMappingURL=team.js.map

package/dist/domains/team/team.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team.js","sourceRoot":"","sources":["../../../src/domains/team/team.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,sCAAsC;AACtC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;AAG7E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,cAAc;IAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,+FAA+F;IAC/F,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,qEAAqE;IACrE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;AAGhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;SACjD,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC;SAChC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE;QACvD,KAAK,EAAE,kBAAkB,CAAC,cAAc;KACzC,CAAC;CACL,CAAC,CAAC;AAGH,+FAA+F;AAC/F,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,EAAE,EAAE,cAAc;IAClB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACnC,CAAC,CAAC","sourcesContent":["/**\n * founder-schema: the staff team\n *\n *   GET    /api/v1/team                    the people holding a platform role\n *   PUT    /api/v1/team/:memberId/roles    set someone's platform roles\n *   DELETE /api/v1/team/:memberId/mpin     clear a forgotten MPIN (superadmin;\n *                                          answers `IdResponse`)\n *\n * Setting roles sends the person's WHOLE set, so the request says what they\n * should end up with rather than a list of changes to replay. Every role that\n * changes must be one the actor's active role may grant (`ROLE_GRANTED_BY`);\n * nobody changes their own; superadmin is never in a request. Each change is\n * written to the audit log.\n *\n * @module founder-schema/domains/team\n */\n\nimport { z } from 'zod';\nimport { PLATFORM_ROLE_VALUES, platformRoleSchema } from '../../access/roles.js';\nimport { objectIdSchema } from '../../core/common.js';\nimport { paginatedSchema } from '../../core/responses.js';\nimport { VALIDATION_MESSAGE } from '../../core/validation.js';\n\n/** `:memberId` in the paths above. */\nexport const teamMemberParamsSchema = z.object({ memberId: objectIdSchema });\nexport type TeamMemberParams = z.infer<typeof teamMemberParamsSchema>;\n\n/** One person on the team, as the Team screens list them. */\nexport const teamMemberSchema = z.object({\n  id: objectIdSchema,\n  displayName: z.string(),\n  /** Server-set or from the login provider, like every avatar on the wire: a plain URL check. */\n  avatarUrl: z.url().nullable(),\n  email: z.string().nullable(),\n  /** Their platform roles, highest first. Never empty in this list. */\n  roles: z.array(platformRoleSchema).min(1),\n  mpinSet: z.boolean(),\n});\nexport type TeamMember = z.infer<typeof teamMemberSchema>;\n\nexport const teamPageSchema = paginatedSchema(teamMemberSchema);\nexport type TeamPage = z.infer<typeof teamPageSchema>;\n\n/**\n * `PUT /team/:memberId/roles`: the platform roles the person should hold.\n * Empty takes every staff role away. No duplicates; no superadmin (a server\n * script grants it, never the product).\n */\nexport const setMemberRolesBodySchema = z.object({\n  roles: z\n    .array(platformRoleSchema.exclude(['superadmin']))\n    .max(PLATFORM_ROLE_VALUES.length)\n    .refine((roles) => new Set(roles).size === roles.length, {\n      error: VALIDATION_MESSAGE.rolesDuplicate,\n    }),\n});\nexport type SetMemberRolesBody = z.infer<typeof setMemberRolesBodySchema>;\n\n/** What `PUT /team/:memberId/roles` answers: the roles the person now holds, highest first. */\nexport const setMemberRolesResponseSchema = z.object({\n  id: objectIdSchema,\n  roles: z.array(platformRoleSchema),\n});\nexport type SetMemberRolesResponse = z.infer<typeof setMemberRolesResponseSchema>;\n"]}

package/dist/domains/uploads/uploads.d.ts

@@ -0,0 +1,101 @@
+/**
+ * founder-schema — Uploads: asking for a slot, and finishing one
+ *
+ * The routes, in order (the whole pipeline is described in `media`):
+ *
+ *   POST   /api/v1/uploads/presign            -> a media id and a presigned PUT URL
+ *   PUT    <url>                              -> the bytes, straight to storage
+ *   POST   /api/v1/uploads/:mediaId/complete  -> the processed image
+ *   DELETE /api/v1/uploads/:mediaId           -> discard an unattached upload
+ *
+ * Its own module so that `feed`, `onboarding` and `profile` can all depend on
+ * it without a cycle.
+ *
+ * @module founder-schema/domains/uploads
+ */
+import { z } from 'zod';
+/**
+ * File extensions a picker offers, and the content type each is uploaded as.
+ * For a file input's `accept`, and for a file whose `type` the browser left
+ * empty. Images only: video is shared as a link in the post text, a product
+ * decision of 2026-09-21, not an unfinished uploader.
+ */
+export declare const UPLOAD_KEY_EXTENSIONS: readonly ["jpg", "jpeg", "png", "webp", "gif"];
+export declare const uploadKeyExtensionSchema: z.ZodEnum<{
+    jpg: "jpg";
+    jpeg: "jpeg";
+    png: "png";
+    webp: "webp";
+    gif: "gif";
+}>;
+export type UploadKeyExtension = z.infer<typeof uploadKeyExtensionSchema>;
+export declare const UPLOAD_CONTENT_TYPES: {
+    readonly jpg: "image/jpeg";
+    readonly jpeg: "image/jpeg";
+    readonly png: "image/png";
+    readonly webp: "image/webp";
+    readonly gif: "image/gif";
+};
+/**
+ * @deprecated Since 0.5.0 no route takes or returns a storage key: a client
+ * carries a media id (`objectIdSchema`). Kept only because this package never
+ * removes an export without a ruling (TEAM.md 5a, `public-surface.test.ts`).
+ */
+export declare const UPLOAD_KEY_MAX_CHARS = 300;
+/** @deprecated See `UPLOAD_KEY_MAX_CHARS`. The 0.4.0 key format, `media/<userId>/<uuid>.<ext>`. */
+export declare const UPLOAD_KEY_PATTERN: RegExp;
+/** @deprecated See `UPLOAD_KEY_MAX_CHARS`. */
+export declare const uploadKeySchema: z.ZodString;
+/** @deprecated See `UPLOAD_KEY_MAX_CHARS`. */
+export type UploadKey = z.infer<typeof uploadKeySchema>;
+/**
+ * Asking for an upload slot: `POST /api/v1/uploads/presign`.
+ *
+ * The server chooses where the file goes (a folder named for the caller,
+ * which no CDN can read) and how long the URL lives; the client says only what
+ * it is for and what it is sending.
+ *
+ * `contentType` and `contentLength` are SIGNED INTO the URL: storage refuses a
+ * PUT with any other type or any other number of bytes. `contentLength` is the
+ * exact size of the bytes about to be sent, after any client-side shrinking.
+ */
+export declare const uploadPresignBodySchema: z.ZodObject<{
+    purpose: z.ZodEnum<{
+        post: "post";
+        avatar: "avatar";
+    }>;
+    contentType: z.ZodEnum<{
+        "image/jpeg": "image/jpeg";
+        "image/png": "image/png";
+        "image/webp": "image/webp";
+        "image/gif": "image/gif";
+    }>;
+    contentLength: z.ZodNumber;
+}, z.core.$strip>;
+export type UploadPresignBody = z.infer<typeof uploadPresignBodySchema>;
+/**
+ * The upload slot.
+ *
+ * Send `method` to `url` with every one of `headers` verbatim and a body of
+ * exactly `contentLength` bytes; the headers are part of the signature, not
+ * advice, and anything else is a signature mismatch. Then complete `mediaId`.
+ * The URL works for `expiresIn` seconds. It is not single-use, which is why the
+ * server reads the file exactly once, when it claims the upload to process it.
+ *
+ * Completing answers 409 `UPLOAD_PROCESSING` if another request is already
+ * processing the same upload; complete again in a moment.
+ */
+export declare const uploadPresignResponseSchema: z.ZodObject<{
+    mediaId: z.ZodString;
+    url: z.ZodURL;
+    method: z.ZodLiteral<"PUT">;
+    headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    expiresIn: z.ZodNumber;
+}, z.core.$strip>;
+export type UploadPresignResponse = z.infer<typeof uploadPresignResponseSchema>;
+/** `:mediaId` on `/uploads/:mediaId/complete` and `DELETE /uploads/:mediaId`. */
+export declare const uploadParamsSchema: z.ZodObject<{
+    mediaId: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+}, z.core.$strip>;
+export type UploadParams = z.infer<typeof uploadParamsSchema>;
+//# sourceMappingURL=uploads.d.ts.map

package/dist/domains/uploads/uploads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploads.d.ts","sourceRoot":"","sources":["../../../src/domains/uploads/uploads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,gDAAiD,CAAC;AACpF,eAAO,MAAM,wBAAwB;;;;;;EAAgC,CAAC;AACtE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,oBAAoB;;;;;;CAMiC,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC,mGAAmG;AACnG,eAAO,MAAM,kBAAkB,QAE9B,CAAC;AAEF,8CAA8C;AAC9C,eAAO,MAAM,eAAe,aAMuD,CAAC;AACpF,8CAA8C;AAC9C,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;iBAIlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B;;;;;;iBAMtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,iFAAiF;AACjF,eAAO,MAAM,kBAAkB;;iBAAwC,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/domains/uploads/uploads.js

@@ -0,0 +1,89 @@
+/**
+ * founder-schema — Uploads: asking for a slot, and finishing one
+ *
+ * The routes, in order (the whole pipeline is described in `media`):
+ *
+ *   POST   /api/v1/uploads/presign            -> a media id and a presigned PUT URL
+ *   PUT    <url>                              -> the bytes, straight to storage
+ *   POST   /api/v1/uploads/:mediaId/complete  -> the processed image
+ *   DELETE /api/v1/uploads/:mediaId           -> discard an unattached upload
+ *
+ * Its own module so that `feed`, `onboarding` and `profile` can all depend on
+ * it without a cycle.
+ *
+ * @module founder-schema/domains/uploads
+ */
+import { z } from 'zod';
+import { objectIdSchema } from '../../core/common.js';
+import { UPLOAD_MAX_BYTES } from '../../core/limits.js';
+import { VALIDATION_MESSAGE } from '../../core/validation.js';
+import { mediaPurposeSchema, mediaUploadContentTypeSchema } from '../media/media.js';
+/**
+ * File extensions a picker offers, and the content type each is uploaded as.
+ * For a file input's `accept`, and for a file whose `type` the browser left
+ * empty. Images only: video is shared as a link in the post text, a product
+ * decision of 2026-09-21, not an unfinished uploader.
+ */
+export const UPLOAD_KEY_EXTENSIONS = ['jpg', 'jpeg', 'png', 'webp', 'gif'];
+export const uploadKeyExtensionSchema = z.enum(UPLOAD_KEY_EXTENSIONS);
+export const UPLOAD_CONTENT_TYPES = {
+    jpg: 'image/jpeg',
+    jpeg: 'image/jpeg',
+    png: 'image/png',
+    webp: 'image/webp',
+    gif: 'image/gif',
+};
+/**
+ * @deprecated Since 0.5.0 no route takes or returns a storage key: a client
+ * carries a media id (`objectIdSchema`). Kept only because this package never
+ * removes an export without a ruling (TEAM.md 5a, `public-surface.test.ts`).
+ */
+export const UPLOAD_KEY_MAX_CHARS = 300;
+/** @deprecated See `UPLOAD_KEY_MAX_CHARS`. The 0.4.0 key format, `media/<userId>/<uuid>.<ext>`. */
+export const UPLOAD_KEY_PATTERN = new RegExp(`^media/[0-9a-f]{24}/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\\.(${UPLOAD_KEY_EXTENSIONS.join('|')})$`);
+/** @deprecated See `UPLOAD_KEY_MAX_CHARS`. */
+export const uploadKeySchema = z
+    .string()
+    .trim()
+    .min(1)
+    .max(UPLOAD_KEY_MAX_CHARS)
+    .regex(UPLOAD_KEY_PATTERN, VALIDATION_MESSAGE.uploadKeyInvalid)
+    .refine((k) => !k.includes('..'), { error: VALIDATION_MESSAGE.uploadKeyInvalid });
+/**
+ * Asking for an upload slot: `POST /api/v1/uploads/presign`.
+ *
+ * The server chooses where the file goes (a folder named for the caller,
+ * which no CDN can read) and how long the URL lives; the client says only what
+ * it is for and what it is sending.
+ *
+ * `contentType` and `contentLength` are SIGNED INTO the URL: storage refuses a
+ * PUT with any other type or any other number of bytes. `contentLength` is the
+ * exact size of the bytes about to be sent, after any client-side shrinking.
+ */
+export const uploadPresignBodySchema = z.object({
+    purpose: mediaPurposeSchema,
+    contentType: mediaUploadContentTypeSchema,
+    contentLength: z.number().int().min(1).max(UPLOAD_MAX_BYTES),
+});
+/**
+ * The upload slot.
+ *
+ * Send `method` to `url` with every one of `headers` verbatim and a body of
+ * exactly `contentLength` bytes; the headers are part of the signature, not
+ * advice, and anything else is a signature mismatch. Then complete `mediaId`.
+ * The URL works for `expiresIn` seconds. It is not single-use, which is why the
+ * server reads the file exactly once, when it claims the upload to process it.
+ *
+ * Completing answers 409 `UPLOAD_PROCESSING` if another request is already
+ * processing the same upload; complete again in a moment.
+ */
+export const uploadPresignResponseSchema = z.object({
+    mediaId: z.string(),
+    url: z.url(),
+    method: z.literal('PUT'),
+    headers: z.record(z.string(), z.string()),
+    expiresIn: z.number().int().positive(),
+});
+/** `:mediaId` on `/uploads/:mediaId/complete` and `DELETE /uploads/:mediaId`. */
+export const uploadParamsSchema = z.object({ mediaId: objectIdSchema });
+//# sourceMappingURL=uploads.js.map

package/dist/domains/uploads/uploads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploads.js","sourceRoot":"","sources":["../../../src/domains/uploads/uploads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAErF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAU,CAAC;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAGtE,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;CACgD,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAExC,mGAAmG;AACnG,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,MAAM,CAC1C,uFAAuF,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAC3H,CAAC;AAEF,8CAA8C;AAC9C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,oBAAoB,CAAC;KACzB,KAAK,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,gBAAgB,CAAC;KAC9D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,kBAAkB,CAAC,gBAAgB,EAAE,CAAC,CAAC;AAIpF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,kBAAkB;IAC3B,WAAW,EAAE,4BAA4B;IACzC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;CAC7D,CAAC,CAAC;AAGH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;IACZ,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — Uploads: asking for a slot, and finishing one\n *\n * The routes, in order (the whole pipeline is described in `media`):\n *\n *   POST   /api/v1/uploads/presign            -> a media id and a presigned PUT URL\n *   PUT    <url>                              -> the bytes, straight to storage\n *   POST   /api/v1/uploads/:mediaId/complete  -> the processed image\n *   DELETE /api/v1/uploads/:mediaId           -> discard an unattached upload\n *\n * Its own module so that `feed`, `onboarding` and `profile` can all depend on\n * it without a cycle.\n *\n * @module founder-schema/domains/uploads\n */\n\nimport { z } from 'zod';\nimport { objectIdSchema } from '../../core/common.js';\nimport { UPLOAD_MAX_BYTES } from '../../core/limits.js';\nimport { VALIDATION_MESSAGE } from '../../core/validation.js';\nimport { mediaPurposeSchema, mediaUploadContentTypeSchema } from '../media/media.js';\n\n/**\n * File extensions a picker offers, and the content type each is uploaded as.\n * For a file input's `accept`, and for a file whose `type` the browser left\n * empty. Images only: video is shared as a link in the post text, a product\n * decision of 2026-09-21, not an unfinished uploader.\n */\nexport const UPLOAD_KEY_EXTENSIONS = ['jpg', 'jpeg', 'png', 'webp', 'gif'] as const;\nexport const uploadKeyExtensionSchema = z.enum(UPLOAD_KEY_EXTENSIONS);\nexport type UploadKeyExtension = z.infer<typeof uploadKeyExtensionSchema>;\n\nexport const UPLOAD_CONTENT_TYPES = {\n  jpg: 'image/jpeg',\n  jpeg: 'image/jpeg',\n  png: 'image/png',\n  webp: 'image/webp',\n  gif: 'image/gif',\n} as const satisfies Record<UploadKeyExtension, `image/${string}`>;\n\n/**\n * @deprecated Since 0.5.0 no route takes or returns a storage key: a client\n * carries a media id (`objectIdSchema`). Kept only because this package never\n * removes an export without a ruling (TEAM.md 5a, `public-surface.test.ts`).\n */\nexport const UPLOAD_KEY_MAX_CHARS = 300;\n\n/** @deprecated See `UPLOAD_KEY_MAX_CHARS`. The 0.4.0 key format, `media/<userId>/<uuid>.<ext>`. */\nexport const UPLOAD_KEY_PATTERN = new RegExp(\n  `^media/[0-9a-f]{24}/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\\\\.(${UPLOAD_KEY_EXTENSIONS.join('|')})$`,\n);\n\n/** @deprecated See `UPLOAD_KEY_MAX_CHARS`. */\nexport const uploadKeySchema = z\n  .string()\n  .trim()\n  .min(1)\n  .max(UPLOAD_KEY_MAX_CHARS)\n  .regex(UPLOAD_KEY_PATTERN, VALIDATION_MESSAGE.uploadKeyInvalid)\n  .refine((k) => !k.includes('..'), { error: VALIDATION_MESSAGE.uploadKeyInvalid });\n/** @deprecated See `UPLOAD_KEY_MAX_CHARS`. */\nexport type UploadKey = z.infer<typeof uploadKeySchema>;\n\n/**\n * Asking for an upload slot: `POST /api/v1/uploads/presign`.\n *\n * The server chooses where the file goes (a folder named for the caller,\n * which no CDN can read) and how long the URL lives; the client says only what\n * it is for and what it is sending.\n *\n * `contentType` and `contentLength` are SIGNED INTO the URL: storage refuses a\n * PUT with any other type or any other number of bytes. `contentLength` is the\n * exact size of the bytes about to be sent, after any client-side shrinking.\n */\nexport const uploadPresignBodySchema = z.object({\n  purpose: mediaPurposeSchema,\n  contentType: mediaUploadContentTypeSchema,\n  contentLength: z.number().int().min(1).max(UPLOAD_MAX_BYTES),\n});\nexport type UploadPresignBody = z.infer<typeof uploadPresignBodySchema>;\n\n/**\n * The upload slot.\n *\n * Send `method` to `url` with every one of `headers` verbatim and a body of\n * exactly `contentLength` bytes; the headers are part of the signature, not\n * advice, and anything else is a signature mismatch. Then complete `mediaId`.\n * The URL works for `expiresIn` seconds. It is not single-use, which is why the\n * server reads the file exactly once, when it claims the upload to process it.\n *\n * Completing answers 409 `UPLOAD_PROCESSING` if another request is already\n * processing the same upload; complete again in a moment.\n */\nexport const uploadPresignResponseSchema = z.object({\n  mediaId: z.string(),\n  url: z.url(),\n  method: z.literal('PUT'),\n  headers: z.record(z.string(), z.string()),\n  expiresIn: z.number().int().positive(),\n});\nexport type UploadPresignResponse = z.infer<typeof uploadPresignResponseSchema>;\n\n/** `:mediaId` on `/uploads/:mediaId/complete` and `DELETE /uploads/:mediaId`. */\nexport const uploadParamsSchema = z.object({ mediaId: objectIdSchema });\nexport type UploadParams = z.infer<typeof uploadParamsSchema>;\n"]}

package/dist/env.d.ts

@@ -0,0 +1,85 @@
+/**
+ * founder-schema/env — how an environment variable is checked.
+ *
+ * Each Founder Circle app lists ITS OWN variables (configuration belongs to the
+ * app: adding one never needs a schema publish, and the web never learns the
+ * backend's setting names) and builds each one from the fields below, so the
+ * rules live here once and no app writes a validation rule of its own:
+ *
+ *   import { envVar, readEnv } from 'founder-schema/env';
+ *   export const env = readEnv(
+ *     { PORT: envVar.port(6010), MONGODB_URI: envVar.mongoUri() },
+ *     process.env,
+ *   );
+ *
+ * The rules every field follows:
+ *   - EMPTY IS UNSET. `FOO=` in a file or an unset variable both mean "not
+ *     given", so a blank line in an env file cannot pass for a value.
+ *   - A FALLBACK IS FOR LOCAL DEVELOPMENT ONLY. A deployment sets every value
+ *     from its own secret store; never "fix" a deployed mismatch by changing a
+ *     fallback, which would make the wrong value the default everywhere.
+ *   - FAIL FAST AND SAY WHICH. `readEnv` reports every bad variable by NAME,
+ *     never by value (a value can be a secret), so a misconfigured process
+ *     stops at start-up rather than three layers down.
+ *
+ * A separate entry point so a browser bundle never loads it unless it asks.
+ *
+ * @module founder-schema/env
+ */
+import { z } from 'zod';
+/** The field builders. Each returns the rule for one variable. */
+export declare const envVar: {
+    /** Required text. With `fallback`, the text used when unset. */
+    readonly text: (fallback?: string) => z.ZodPreprocess<z.ZodString, unknown> | z.ZodPreprocess<z.ZodDefault<z.ZodString>, unknown>;
+    /** Text that may be unset (`undefined`). */
+    readonly optionalText: () => z.ZodPreprocess<z.ZodOptional<z.ZodString>, unknown>;
+    /** A URL. With `fallback`, the URL used when unset. */
+    readonly url: (fallback?: string) => z.ZodPreprocess<z.ZodURL, unknown> | z.ZodPreprocess<z.ZodDefault<z.ZodURL>, unknown>;
+    /** A URL that may be unset (`undefined`). */
+    readonly optionalUrl: () => z.ZodPreprocess<z.ZodOptional<z.ZodURL>, unknown>;
+    /** A MongoDB connection string. Always required: there is no safe default database. */
+    readonly mongoUri: () => z.ZodPreprocess<z.ZodString, unknown>;
+    /** A TCP port. */
+    readonly port: (fallback: number) => z.ZodPreprocess<z.ZodDefault<z.ZodCoercedNumber<unknown>>, unknown>;
+    /** A whole number above zero: a count, a duration in milliseconds. */
+    readonly positiveInt: (fallback: number) => z.ZodPreprocess<z.ZodDefault<z.ZodCoercedNumber<unknown>>, unknown>;
+    /**
+     * On or off: `true`/`false`, `1`/`0` or `yes`/`no`, in any case. Anything
+     * else is refused, so a typo cannot quietly turn a safeguard off.
+     */
+    readonly flag: (fallback: boolean) => z.ZodPreprocess<z.ZodPipe<z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<boolean, string>>>, z.ZodTransform<boolean, boolean | undefined>>, unknown>;
+    /** One of a fixed set of words. */
+    readonly oneOf: <const T extends readonly [string, ...string[]]>(values: T, fallback?: T[number]) => z.ZodPreprocess<z.ZodEnum<{ [k_1 in T[number]]: k_1; } extends infer T_1 ? { [k in keyof T_1]: T_1[k]; } : never>, unknown> | z.ZodPreprocess<z.ZodDefault<z.ZodEnum<{ [k_1 in T[number]]: k_1; } extends infer T_2 ? { [k in keyof T_2]: T_2[k]; } : never>>, unknown>;
+    /** Comma-separated text, as a list with blanks dropped: `a, b,` is `['a', 'b']`. */
+    readonly list: (fallback: string) => z.ZodPreprocess<z.ZodPipe<z.ZodDefault<z.ZodString>, z.ZodTransform<string[], string>>, unknown>;
+    /** A required secret of at least `minLength` characters. */
+    readonly secret: (minLength: number) => z.ZodPreprocess<z.ZodString, unknown>;
+    /**
+     * A secret that may be unset, which then reads as `''` so the feature it
+     * guards can check one value and switch itself off. When set it must be at
+     * least `minLength` characters: a short secret is a mistake, not a choice.
+     */
+    readonly optionalSecret: (minLength: number) => z.ZodPreprocess<z.ZodPipe<z.ZodOptional<z.ZodString>, z.ZodTransform<string, string | undefined>>, unknown>;
+};
+/** One variable that failed, by name. Never carries the value. */
+export interface EnvProblem {
+    variable: string;
+    problem: string;
+}
+/** Thrown by `readEnv` when any variable is missing or wrong. */
+export declare class EnvError extends Error {
+    readonly problems: EnvProblem[];
+    constructor(problems: EnvProblem[]);
+}
+/** What `readEnv` returns: every variable as its field's output. */
+export type EnvValues<F extends Record<string, z.ZodType>> = {
+    [K in keyof F]: z.output<F[K]>;
+};
+/**
+ * Check every variable in `fields` against `source` (normally `process.env`)
+ * and return them typed. Throws `EnvError` naming EVERY bad variable at once,
+ * so a misconfiguration is fixed in one pass, not one restart per variable.
+ * Variables in `source` that `fields` does not list are ignored.
+ */
+export declare function readEnv<F extends Record<string, z.ZodType>>(fields: F, source: Record<string, string | undefined>): EnvValues<F>;
+//# sourceMappingURL=env.d.ts.map

package/dist/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,kEAAkE;AAClE,eAAO,MAAM,MAAM;IACjB,gEAAgE;+BAChD,MAAM;IAMtB,4CAA4C;;IAK5C,uDAAuD;8BACxC,MAAM;IAKrB,6CAA6C;;IAK7C,uFAAuF;;IAWvF,kBAAkB;8BACH,MAAM;IAIrB,sEAAsE;qCAChD,MAAM;IAI5B;;;OAGG;8BACY,OAAO;IAgBtB,mCAAmC;2BACvB,CAAC,SAAS,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;IAKrF,oFAAoF;8BACrE,MAAM;IAcrB,4DAA4D;iCAC1C,MAAM;IAQxB;;;;OAIG;yCACuB,MAAM;CASxB,CAAC;AAEX,kEAAkE;AAClE,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,iEAAiE;AACjE,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC;gBAEpB,QAAQ,EAAE,UAAU,EAAE;CAOnC;AAED,oEAAoE;AACpE,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,CAAC;AAEhG;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EACzD,MAAM,EAAE,CAAC,EACT,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACzC,SAAS,CAAC,CAAC,CAAC,CASd"}