founder-schema 0.4.0 → 0.5.0

package/README.md

@@ -91,7 +91,7 @@ SAME schema object, so the two can never disagree about what is allowed.
 - **Bodies are typed JSON; only queries coerce.** `teamSize: "5"` is refused in a
   body, and `?limit=5` is read as 5.
 - **Shapes are derived, never copied.** One `locationSchema`, one
-  `founderLinksSchema`, one `ventureSchema`, one `uploadKeySchema`; the other
+  `founderLinksSchema`, one `ventureSchema`, one `mediaImageSchema`; the other
   places pick, omit or reuse them, and a test checks by object identity.
 
 `zod` is a **peer** dependency (`^4.4.0`), on purpose. The consumer owns the Zod
@@ -99,6 +99,31 @@ instance; this package must not bring its own.
 
 ---
 
+## Breaking in 0.5.0: the media pipeline
+
+No export was removed (268 -> 282). Images are now processed on the server:
+uploaded, then COMPLETED (decoded, metadata stripped, re-encoded as WebP sizes),
+and referenced by a media id. The whole flow is in `domains/media/media.ts` and
+in founder-circle-backend `docs/media.md`.
+
+| What | Before | Now |
+|---|---|---|
+| `uploadPresignBodySchema` | `{ extension, contentLength }` | `{ purpose, contentType, contentLength }` |
+| `uploadPresignResponseSchema` | `{ key, url, headers, expiresIn }` | `{ mediaId, url, method: 'PUT', headers, expiresIn }` |
+| `attachedMediaSchema` (post media) | `{ uploadKey, alt? }` | `{ mediaId, alt? }`; no id twice in one post |
+| `completeOnboardingBodySchema` | `avatarUploadKey` | `avatarMediaId` (an upload with purpose `avatar`) |
+| `feedImageSchema` | `{ kind, url, width, height, thumbnailUrl?, alt? }` | `mediaImageSchema` (`id`, `variants`, `placeholder`) + `kind`, `thumbnailUrl`, `alt` |
+| `founderProfileSchema` | `avatarUrl` | `avatarUrl` (upload's 192 px size, else the sign-in picture) and `avatar` (the uploaded set) |
+| Error codes | `UPLOAD_NOT_ATTACHABLE`, `_TOO_LARGE`, `_WRONG_TYPE` | plus `UPLOAD_NOT_RECEIVED`, `_PROCESSING`, `_UNREADABLE`, `_TOO_MANY_PIXELS`, `_LIMIT_REACHED`, `_IN_USE` |
+
+New: `POST /uploads/:mediaId/complete`, `DELETE /uploads/:mediaId`,
+`GET /profiles/me`, `PUT|DELETE /profiles/me/avatar`.
+
+Deprecated, unused by any route: `uploadKeySchema`, `UPLOAD_KEY_PATTERN`,
+`UPLOAD_KEY_MAX_CHARS`, `UploadKey` (the 0.4.0 storage key).
+
+---
+
 ## Breaking in 0.2.0
 
 No export was removed; these change BEHAVIOUR or a field's shape. Every one is a

package/dist/core/errors.d.ts

@@ -27,7 +27,7 @@ import { z } from 'zod';
  * As a tuple, the way `GENDER_VALUES` is, so a consumer can iterate it (a
  * translation-coverage test does exactly that) and TypeScript keeps the union.
  */
-export declare const API_ERROR_CODE_VALUES: readonly ["INTERNAL_ERROR", "VALIDATION_ERROR", "NOT_FOUND", "CONFLICT", "RATE_LIMITED", "SERVICE_UNAVAILABLE", "UNAUTHORIZED", "INVALID_TOKEN", "TOKEN_EXPIRED", "SESSION_INVALIDATED", "FORBIDDEN", "ONBOARDING_INCOMPLETE", "ALREADY_ONBOARDED", "UNDER_AGE", "UPLOAD_NOT_ATTACHABLE", "UPLOAD_TOO_LARGE", "UPLOAD_WRONG_TYPE", "EDIT_WINDOW_CLOSED", "POLL_NOT_EDITABLE", "POLL_CLOSED", "POLL_CHOICE_INVALID", "REPLY_TOO_DEEP", "CANNOT_REPORT_OWN", "CHAT_WITH_SELF", "ACCOUNT_SUSPENDED", "ROLE_NOT_HELD", "MPIN_NOT_SET", "MPIN_ALREADY_SET", "MPIN_INCORRECT", "MPIN_LOCKED", "CANNOT_CHANGE_OWN_ROLES", "ROLE_NOT_GRANTABLE", "TICKET_FULL", "SAVED_REPLIES_FULL"];
+export declare const API_ERROR_CODE_VALUES: readonly ["INTERNAL_ERROR", "VALIDATION_ERROR", "NOT_FOUND", "CONFLICT", "RATE_LIMITED", "SERVICE_UNAVAILABLE", "UNAUTHORIZED", "INVALID_TOKEN", "TOKEN_EXPIRED", "SESSION_INVALIDATED", "FORBIDDEN", "ONBOARDING_INCOMPLETE", "ALREADY_ONBOARDED", "UNDER_AGE", "UPLOAD_NOT_ATTACHABLE", "UPLOAD_TOO_LARGE", "UPLOAD_WRONG_TYPE", "UPLOAD_NOT_RECEIVED", "UPLOAD_PROCESSING", "UPLOAD_UNREADABLE", "UPLOAD_TOO_MANY_PIXELS", "UPLOAD_LIMIT_REACHED", "UPLOAD_IN_USE", "EDIT_WINDOW_CLOSED", "POLL_NOT_EDITABLE", "POLL_CLOSED", "POLL_CHOICE_INVALID", "REPLY_TOO_DEEP", "CANNOT_REPORT_OWN", "CHAT_WITH_SELF", "ACCOUNT_SUSPENDED", "ROLE_NOT_HELD", "MPIN_NOT_SET", "MPIN_ALREADY_SET", "MPIN_INCORRECT", "MPIN_LOCKED", "CANNOT_CHANGE_OWN_ROLES", "ROLE_NOT_GRANTABLE", "TICKET_FULL", "SAVED_REPLIES_FULL"];
 export declare const apiErrorCodeSchema: z.ZodEnum<{
     INTERNAL_ERROR: "INTERNAL_ERROR";
     VALIDATION_ERROR: "VALIDATION_ERROR";
@@ -46,6 +46,12 @@ export declare const apiErrorCodeSchema: z.ZodEnum<{
     UPLOAD_NOT_ATTACHABLE: "UPLOAD_NOT_ATTACHABLE";
     UPLOAD_TOO_LARGE: "UPLOAD_TOO_LARGE";
     UPLOAD_WRONG_TYPE: "UPLOAD_WRONG_TYPE";
+    UPLOAD_NOT_RECEIVED: "UPLOAD_NOT_RECEIVED";
+    UPLOAD_PROCESSING: "UPLOAD_PROCESSING";
+    UPLOAD_UNREADABLE: "UPLOAD_UNREADABLE";
+    UPLOAD_TOO_MANY_PIXELS: "UPLOAD_TOO_MANY_PIXELS";
+    UPLOAD_LIMIT_REACHED: "UPLOAD_LIMIT_REACHED";
+    UPLOAD_IN_USE: "UPLOAD_IN_USE";
     EDIT_WINDOW_CLOSED: "EDIT_WINDOW_CLOSED";
     POLL_NOT_EDITABLE: "POLL_NOT_EDITABLE";
     POLL_CLOSED: "POLL_CLOSED";
@@ -84,6 +90,12 @@ export declare const API_ERROR_CODE: {
     UPLOAD_NOT_ATTACHABLE: "UPLOAD_NOT_ATTACHABLE";
     UPLOAD_TOO_LARGE: "UPLOAD_TOO_LARGE";
     UPLOAD_WRONG_TYPE: "UPLOAD_WRONG_TYPE";
+    UPLOAD_NOT_RECEIVED: "UPLOAD_NOT_RECEIVED";
+    UPLOAD_PROCESSING: "UPLOAD_PROCESSING";
+    UPLOAD_UNREADABLE: "UPLOAD_UNREADABLE";
+    UPLOAD_TOO_MANY_PIXELS: "UPLOAD_TOO_MANY_PIXELS";
+    UPLOAD_LIMIT_REACHED: "UPLOAD_LIMIT_REACHED";
+    UPLOAD_IN_USE: "UPLOAD_IN_USE";
     EDIT_WINDOW_CLOSED: "EDIT_WINDOW_CLOSED";
     POLL_NOT_EDITABLE: "POLL_NOT_EDITABLE";
     POLL_CLOSED: "POLL_CLOSED";

package/dist/core/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,qBAAqB,+oBAyFxB,CAAC;AAEX,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAgC,CAAC;AAChE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,4DAA4D;AAC5D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAA0B,CAAC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,qBAAqB,mxBAiHxB,CAAC;AAEX,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAgC,CAAC;AAChE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,4DAA4D;AAC5D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAA0B,CAAC"}

package/dist/core/errors.js

@@ -59,13 +59,37 @@ export const API_ERROR_CODE_VALUES = [
     'ALREADY_ONBOARDED',
     /** Under `MIN_AGE_YEARS`. Refused at the draft and again at finish. */
     'UNDER_AGE',
-    // ── Uploads, at the moment one is attached ──
-    /** Not an upload of yours, or nothing was ever uploaded under that key. */
+    // ── Uploads: completing one, and attaching it ──
+    /**
+     * Not an upload of yours, not processed yet, already attached somewhere, or
+     * for the other purpose (an avatar upload on a post). One code for all of
+     * them on purpose: telling "someone else's" apart from "does not exist" would
+     * let a caller probe other members' media ids.
+     */
     'UPLOAD_NOT_ATTACHABLE',
     /** Larger than `UPLOAD_MAX_BYTES`. */
     'UPLOAD_TOO_LARGE',
-    /** Not one of the image types this product accepts, or not an image at all. */
+    /**
+     * Not one of the image types this product accepts (by the file's own bytes,
+     * whatever its name or declared type), or not an image at all.
+     */
     'UPLOAD_WRONG_TYPE',
+    /** Completed before the file reached storage: upload it, then complete. */
+    'UPLOAD_NOT_RECEIVED',
+    /**
+     * Another request is processing this upload right now (a retry or a double
+     * tap). Nothing is wrong: complete again in a moment and it answers with
+     * the image. 409.
+     */
+    'UPLOAD_PROCESSING',
+    /** A JPEG, PNG, WebP or GIF by its bytes that cannot be decoded: truncated or corrupt. */
+    'UPLOAD_UNREADABLE',
+    /** More than `MEDIA_MAX_INPUT_PIXELS`; refused before decoding. */
+    'UPLOAD_TOO_MANY_PIXELS',
+    /** `MEDIA_PENDING_MAX` uploads are already waiting to be attached. */
+    'UPLOAD_LIMIT_REACHED',
+    /** Discarding an upload that is attached: remove it from its post or avatar instead. */
+    'UPLOAD_IN_USE',
     // ── The feed ──
     /** The post is older than `EDIT_WINDOW_MS`. */
     'EDIT_WINDOW_CLOSED',

package/dist/core/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,iBAAiB;IACjB,gFAAgF;IAChF,gBAAgB;IAChB,yEAAyE;IACzE,kBAAkB;IAClB,2EAA2E;IAC3E,WAAW;IACX,wEAAwE;IACxE,UAAU;IACV,uEAAuE;IACvE,cAAc;IACd,2EAA2E;IAC3E,qBAAqB;IAErB,oBAAoB;IACpB,4BAA4B;IAC5B,cAAc;IACd,sDAAsD;IACtD,eAAe;IACf,qEAAqE;IACrE,eAAe;IACf,oEAAoE;IACpE,qBAAqB;IACrB,6CAA6C;IAC7C,WAAW;IAEX,mBAAmB;IACnB,mFAAmF;IACnF,uBAAuB;IACvB,gFAAgF;IAChF,mBAAmB;IACnB,uEAAuE;IACvE,WAAW;IAEX,+CAA+C;IAC/C,2EAA2E;IAC3E,uBAAuB;IACvB,sCAAsC;IACtC,kBAAkB;IAClB,+EAA+E;IAC/E,mBAAmB;IAEnB,iBAAiB;IACjB,+CAA+C;IAC/C,oBAAoB;IACpB,iEAAiE;IACjE,mBAAmB;IACnB,kDAAkD;IAClD,aAAa;IACb,oFAAoF;IACpF,qBAAqB;IACrB,qDAAqD;IACrD,gBAAgB;IAChB,gDAAgD;IAChD,mBAAmB;IAEnB,aAAa;IACb,4CAA4C;IAC5C,gBAAgB;IAEhB,oBAAoB;IACpB,qFAAqF;IACrF,mBAAmB;IAEnB,2BAA2B;IAC3B;;;OAGG;IACH,eAAe;IACf,4EAA4E;IAC5E,cAAc;IACd,8DAA8D;IAC9D,kBAAkB;IAClB,4EAA4E;IAC5E,gBAAgB;IAChB,0EAA0E;IAC1E,aAAa;IACb,oDAAoD;IACpD,yBAAyB;IACzB,qEAAqE;IACrE,oBAAoB;IAEpB,gBAAgB;IAChB,uEAAuE;IACvE,aAAa;IACb,0EAA0E;IAC1E,oBAAoB;CACZ,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAGhE,4DAA4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC","sourcesContent":["/**\n * founder-schema — Every error code the API answers with\n *\n * THE CODE IS WHAT A CLIENT ACTS ON; the `message` beside it is English for\n * logs and for a client too old to know the code. A client words each code in\n * the member's language, and a test on the web side asserts every value here\n * has a message in every locale it ships.\n *\n * Before 0.2.0 the backend kept this list to itself, and every domain refusal\n * (a closed poll, a reply to a reply, the edit window) went out as\n * `VALIDATION_ERROR` with an English sentence, so the only way for a client to\n * tell them apart was to match on the wording.\n *\n * WHEN TO USE WHICH:\n *   - A request that does not match its schema: `VALIDATION_ERROR`, with every\n *     problem in `error.details.issues`.\n *   - A well-formed request the current STATE of things refuses: its own code\n *     below. These carry no issues; the code says it all.\n *\n * ⚠ Append freely; remove deliberately. A code removed here that an older\n * server still sends fails the client's parse of the error envelope.\n *\n * @module founder-schema/core/errors\n */\n\nimport { z } from 'zod';\n\n/**\n * As a tuple, the way `GENDER_VALUES` is, so a consumer can iterate it (a\n * translation-coverage test does exactly that) and TypeScript keeps the union.\n */\nexport const API_ERROR_CODE_VALUES = [\n  // ── Anything ──\n  /** A bug or an outage on our side. The message says nothing more on purpose. */\n  'INTERNAL_ERROR',\n  /** The request did not match its schema. `details.issues` says where. */\n  'VALIDATION_ERROR',\n  /** No such thing, or not one you may see. Deliberately the same answer. */\n  'NOT_FOUND',\n  /** Two writes raced for something unique; retrying usually succeeds. */\n  'CONFLICT',\n  /** Too many requests from this member or address. Wait, then retry. */\n  'RATE_LIMITED',\n  /** Something we depend on (the chat server) is down or not switched on. */\n  'SERVICE_UNAVAILABLE',\n\n  // ── Who you are ──\n  /** No credential at all. */\n  'UNAUTHORIZED',\n  /** A credential that is not ours, or not readable. */\n  'INVALID_TOKEN',\n  /** A credential that was ours and has expired. Refresh and retry. */\n  'TOKEN_EXPIRED',\n  /** Signed out everywhere, or the account changed. Sign in again. */\n  'SESSION_INVALIDATED',\n  /** Signed in, and not allowed to do this. */\n  'FORBIDDEN',\n\n  // ── Onboarding ──\n  /** Finish onboarding first. The client routes here instead of showing an error. */\n  'ONBOARDING_INCOMPLETE',\n  /** Onboarding is already finished; there is nothing to save or finish again. */\n  'ALREADY_ONBOARDED',\n  /** Under `MIN_AGE_YEARS`. Refused at the draft and again at finish. */\n  'UNDER_AGE',\n\n  // ── Uploads, at the moment one is attached ──\n  /** Not an upload of yours, or nothing was ever uploaded under that key. */\n  'UPLOAD_NOT_ATTACHABLE',\n  /** Larger than `UPLOAD_MAX_BYTES`. */\n  'UPLOAD_TOO_LARGE',\n  /** Not one of the image types this product accepts, or not an image at all. */\n  'UPLOAD_WRONG_TYPE',\n\n  // ── The feed ──\n  /** The post is older than `EDIT_WINDOW_MS`. */\n  'EDIT_WINDOW_CLOSED',\n  /** A poll is never editable: people have already voted on it. */\n  'POLL_NOT_EDITABLE',\n  /** The poll has closed, by the server's clock. */\n  'POLL_CLOSED',\n  /** No option, several on a single-choice poll, or an option that does not exist. */\n  'POLL_CHOICE_INVALID',\n  /** A reply to a reply. One level of nesting only. */\n  'REPLY_TOO_DEEP',\n  /** Reporting your own post, poll or comment. */\n  'CANNOT_REPORT_OWN',\n\n  // ── Chat ──\n  /** Opening a conversation with yourself. */\n  'CHAT_WITH_SELF',\n\n  // ── The account ──\n  /** Staff suspended this account: nothing in the product works until it is lifted. */\n  'ACCOUNT_SUSPENDED',\n\n  // ── Roles and the MPIN ──\n  /**\n   * Switching to a role this person does not hold (or no longer holds), or\n   * setting an MPIN while holding no staff role at all.\n   */\n  'ROLE_NOT_HELD',\n  /** A staff role needs an MPIN, and none has been set yet. Set one first. */\n  'MPIN_NOT_SET',\n  /** An MPIN is set once; changing it needs the current one. */\n  'MPIN_ALREADY_SET',\n  /** The MPIN is wrong. `details.attemptsLeft` says how many tries remain. */\n  'MPIN_INCORRECT',\n  /** Too many wrong MPINs. `details.lockedUntil` says when to try again. */\n  'MPIN_LOCKED',\n  /** Changing your own roles. Someone else has to. */\n  'CANNOT_CHANGE_OWN_ROLES',\n  /** Granting or revoking a role the role you act as may not touch. */\n  'ROLE_NOT_GRANTABLE',\n\n  // ── Support ──\n  /** The ticket holds `TICKET_MESSAGES_MAX` messages. Open a new one. */\n  'TICKET_FULL',\n  /** The team keeps `SAVED_REPLIES_MAX` saved replies. Delete one first. */\n  'SAVED_REPLIES_FULL',\n] as const;\n\nexport const apiErrorCodeSchema = z.enum(API_ERROR_CODE_VALUES);\nexport type ApiErrorCode = z.infer<typeof apiErrorCodeSchema>;\n\n/** The same codes by name: `API_ERROR_CODE.POLL_CLOSED`. */\nexport const API_ERROR_CODE = apiErrorCodeSchema.enum;\n"]}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,iBAAiB;IACjB,gFAAgF;IAChF,gBAAgB;IAChB,yEAAyE;IACzE,kBAAkB;IAClB,2EAA2E;IAC3E,WAAW;IACX,wEAAwE;IACxE,UAAU;IACV,uEAAuE;IACvE,cAAc;IACd,2EAA2E;IAC3E,qBAAqB;IAErB,oBAAoB;IACpB,4BAA4B;IAC5B,cAAc;IACd,sDAAsD;IACtD,eAAe;IACf,qEAAqE;IACrE,eAAe;IACf,oEAAoE;IACpE,qBAAqB;IACrB,6CAA6C;IAC7C,WAAW;IAEX,mBAAmB;IACnB,mFAAmF;IACnF,uBAAuB;IACvB,gFAAgF;IAChF,mBAAmB;IACnB,uEAAuE;IACvE,WAAW;IAEX,kDAAkD;IAClD;;;;;OAKG;IACH,uBAAuB;IACvB,sCAAsC;IACtC,kBAAkB;IAClB;;;OAGG;IACH,mBAAmB;IACnB,2EAA2E;IAC3E,qBAAqB;IACrB;;;;OAIG;IACH,mBAAmB;IACnB,0FAA0F;IAC1F,mBAAmB;IACnB,mEAAmE;IACnE,wBAAwB;IACxB,sEAAsE;IACtE,sBAAsB;IACtB,wFAAwF;IACxF,eAAe;IAEf,iBAAiB;IACjB,+CAA+C;IAC/C,oBAAoB;IACpB,iEAAiE;IACjE,mBAAmB;IACnB,kDAAkD;IAClD,aAAa;IACb,oFAAoF;IACpF,qBAAqB;IACrB,qDAAqD;IACrD,gBAAgB;IAChB,gDAAgD;IAChD,mBAAmB;IAEnB,aAAa;IACb,4CAA4C;IAC5C,gBAAgB;IAEhB,oBAAoB;IACpB,qFAAqF;IACrF,mBAAmB;IAEnB,2BAA2B;IAC3B;;;OAGG;IACH,eAAe;IACf,4EAA4E;IAC5E,cAAc;IACd,8DAA8D;IAC9D,kBAAkB;IAClB,4EAA4E;IAC5E,gBAAgB;IAChB,0EAA0E;IAC1E,aAAa;IACb,oDAAoD;IACpD,yBAAyB;IACzB,qEAAqE;IACrE,oBAAoB;IAEpB,gBAAgB;IAChB,uEAAuE;IACvE,aAAa;IACb,0EAA0E;IAC1E,oBAAoB;CACZ,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAGhE,4DAA4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC","sourcesContent":["/**\n * founder-schema — Every error code the API answers with\n *\n * THE CODE IS WHAT A CLIENT ACTS ON; the `message` beside it is English for\n * logs and for a client too old to know the code. A client words each code in\n * the member's language, and a test on the web side asserts every value here\n * has a message in every locale it ships.\n *\n * Before 0.2.0 the backend kept this list to itself, and every domain refusal\n * (a closed poll, a reply to a reply, the edit window) went out as\n * `VALIDATION_ERROR` with an English sentence, so the only way for a client to\n * tell them apart was to match on the wording.\n *\n * WHEN TO USE WHICH:\n *   - A request that does not match its schema: `VALIDATION_ERROR`, with every\n *     problem in `error.details.issues`.\n *   - A well-formed request the current STATE of things refuses: its own code\n *     below. These carry no issues; the code says it all.\n *\n * ⚠ Append freely; remove deliberately. A code removed here that an older\n * server still sends fails the client's parse of the error envelope.\n *\n * @module founder-schema/core/errors\n */\n\nimport { z } from 'zod';\n\n/**\n * As a tuple, the way `GENDER_VALUES` is, so a consumer can iterate it (a\n * translation-coverage test does exactly that) and TypeScript keeps the union.\n */\nexport const API_ERROR_CODE_VALUES = [\n  // ── Anything ──\n  /** A bug or an outage on our side. The message says nothing more on purpose. */\n  'INTERNAL_ERROR',\n  /** The request did not match its schema. `details.issues` says where. */\n  'VALIDATION_ERROR',\n  /** No such thing, or not one you may see. Deliberately the same answer. */\n  'NOT_FOUND',\n  /** Two writes raced for something unique; retrying usually succeeds. */\n  'CONFLICT',\n  /** Too many requests from this member or address. Wait, then retry. */\n  'RATE_LIMITED',\n  /** Something we depend on (the chat server) is down or not switched on. */\n  'SERVICE_UNAVAILABLE',\n\n  // ── Who you are ──\n  /** No credential at all. */\n  'UNAUTHORIZED',\n  /** A credential that is not ours, or not readable. */\n  'INVALID_TOKEN',\n  /** A credential that was ours and has expired. Refresh and retry. */\n  'TOKEN_EXPIRED',\n  /** Signed out everywhere, or the account changed. Sign in again. */\n  'SESSION_INVALIDATED',\n  /** Signed in, and not allowed to do this. */\n  'FORBIDDEN',\n\n  // ── Onboarding ──\n  /** Finish onboarding first. The client routes here instead of showing an error. */\n  'ONBOARDING_INCOMPLETE',\n  /** Onboarding is already finished; there is nothing to save or finish again. */\n  'ALREADY_ONBOARDED',\n  /** Under `MIN_AGE_YEARS`. Refused at the draft and again at finish. */\n  'UNDER_AGE',\n\n  // ── Uploads: completing one, and attaching it ──\n  /**\n   * Not an upload of yours, not processed yet, already attached somewhere, or\n   * for the other purpose (an avatar upload on a post). One code for all of\n   * them on purpose: telling \"someone else's\" apart from \"does not exist\" would\n   * let a caller probe other members' media ids.\n   */\n  'UPLOAD_NOT_ATTACHABLE',\n  /** Larger than `UPLOAD_MAX_BYTES`. */\n  'UPLOAD_TOO_LARGE',\n  /**\n   * Not one of the image types this product accepts (by the file's own bytes,\n   * whatever its name or declared type), or not an image at all.\n   */\n  'UPLOAD_WRONG_TYPE',\n  /** Completed before the file reached storage: upload it, then complete. */\n  'UPLOAD_NOT_RECEIVED',\n  /**\n   * Another request is processing this upload right now (a retry or a double\n   * tap). Nothing is wrong: complete again in a moment and it answers with\n   * the image. 409.\n   */\n  'UPLOAD_PROCESSING',\n  /** A JPEG, PNG, WebP or GIF by its bytes that cannot be decoded: truncated or corrupt. */\n  'UPLOAD_UNREADABLE',\n  /** More than `MEDIA_MAX_INPUT_PIXELS`; refused before decoding. */\n  'UPLOAD_TOO_MANY_PIXELS',\n  /** `MEDIA_PENDING_MAX` uploads are already waiting to be attached. */\n  'UPLOAD_LIMIT_REACHED',\n  /** Discarding an upload that is attached: remove it from its post or avatar instead. */\n  'UPLOAD_IN_USE',\n\n  // ── The feed ──\n  /** The post is older than `EDIT_WINDOW_MS`. */\n  'EDIT_WINDOW_CLOSED',\n  /** A poll is never editable: people have already voted on it. */\n  'POLL_NOT_EDITABLE',\n  /** The poll has closed, by the server's clock. */\n  'POLL_CLOSED',\n  /** No option, several on a single-choice poll, or an option that does not exist. */\n  'POLL_CHOICE_INVALID',\n  /** A reply to a reply. One level of nesting only. */\n  'REPLY_TOO_DEEP',\n  /** Reporting your own post, poll or comment. */\n  'CANNOT_REPORT_OWN',\n\n  // ── Chat ──\n  /** Opening a conversation with yourself. */\n  'CHAT_WITH_SELF',\n\n  // ── The account ──\n  /** Staff suspended this account: nothing in the product works until it is lifted. */\n  'ACCOUNT_SUSPENDED',\n\n  // ── Roles and the MPIN ──\n  /**\n   * Switching to a role this person does not hold (or no longer holds), or\n   * setting an MPIN while holding no staff role at all.\n   */\n  'ROLE_NOT_HELD',\n  /** A staff role needs an MPIN, and none has been set yet. Set one first. */\n  'MPIN_NOT_SET',\n  /** An MPIN is set once; changing it needs the current one. */\n  'MPIN_ALREADY_SET',\n  /** The MPIN is wrong. `details.attemptsLeft` says how many tries remain. */\n  'MPIN_INCORRECT',\n  /** Too many wrong MPINs. `details.lockedUntil` says when to try again. */\n  'MPIN_LOCKED',\n  /** Changing your own roles. Someone else has to. */\n  'CANNOT_CHANGE_OWN_ROLES',\n  /** Granting or revoking a role the role you act as may not touch. */\n  'ROLE_NOT_GRANTABLE',\n\n  // ── Support ──\n  /** The ticket holds `TICKET_MESSAGES_MAX` messages. Open a new one. */\n  'TICKET_FULL',\n  /** The team keeps `SAVED_REPLIES_MAX` saved replies. Delete one first. */\n  'SAVED_REPLIES_FULL',\n] as const;\n\nexport const apiErrorCodeSchema = z.enum(API_ERROR_CODE_VALUES);\nexport type ApiErrorCode = z.infer<typeof apiErrorCodeSchema>;\n\n/** The same codes by name: `API_ERROR_CODE.POLL_CLOSED`. */\nexport const API_ERROR_CODE = apiErrorCodeSchema.enum;\n"]}

package/dist/core/limits.d.ts

@@ -78,12 +78,35 @@ export declare const SAVED_REPLIES_MAX = 200;
 /**
  * Largest file accepted for upload: 10 MB.
  *
- * Checked on BOTH sides and for different reasons. The server refuses a bigger
- * object when it is attached. The client checks before uploading, because a
- * presigned PUT caps the content type but not the size, so a member on a phone
- * connection would otherwise watch a 40 MB upload finish and then fail.
+ * Enforced three times. The upload-slot body refuses a bigger `contentLength`;
+ * the size is SIGNED INTO the upload URL, so storage refuses a body of any other
+ * size; and the server checks the stored object again before processing it.
+ * The client checks first only to fail fast: it shrinks a photo well below this
+ * before uploading (see `MEDIA_SIZES`), so a member rarely meets the limit.
  */
 export declare const UPLOAD_MAX_BYTES: number;
+/**
+ * Largest image, in pixels, the server will decode: 50 megapixels, one frame.
+ *
+ * Bytes do not bound memory. A 50,000 x 50,000 PNG of one colour compresses to
+ * a few kilobytes and decodes to ten gigabytes. The server reads the dimensions
+ * first and refuses anything above this before decoding (`UPLOAD_TOO_MANY_PIXELS`).
+ * 50 MP admits every phone camera's full-resolution photo up to 48 MP.
+ */
+export declare const MEDIA_MAX_INPUT_PIXELS = 50000000;
+/**
+ * Hours an upload may wait to be attached to a post or set as an avatar. After
+ * that the server deletes it: the composer was abandoned, or the tab closed.
+ */
+export declare const MEDIA_UNATTACHED_TTL_HOURS = 24;
+/**
+ * Uploads one member may have waiting (requested or processed, not yet
+ * attached) at once. A full post is `POST_MAX_MEDIA` (10); this leaves room for
+ * a retry or two without letting one account fill storage.
+ */
+export declare const MEDIA_PENDING_MAX = 30;
+/** Longest placeholder string: a base64 ThumbHash is about 30 characters. */
+export declare const MEDIA_PLACEHOLDER_MAX = 100;
 /** Values one Discover multi-select filter may carry (`?skill=a&skill=b`). */
 export declare const DISCOVER_FILTER_VALUES_MAX = 10;
 /** Discover's free-text inputs: the name search, city and country. */

package/dist/core/limits.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/core/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,YAAY,MAAM,CAAC;AAChC,eAAO,MAAM,SAAS,OAAO,CAAC;AAC9B,0DAA0D;AAC1D,eAAO,MAAM,UAAU,IAAI,CAAC;AAC5B,gFAAgF;AAChF,eAAO,MAAM,SAAS,IAAI,CAAC;AAI3B,eAAO,MAAM,QAAQ,KAAK,CAAC;AAC3B,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,eAAO,MAAM,WAAW,KAAK,CAAC;AAI9B,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,uCAAuC;AACvC,eAAO,MAAM,aAAa,IAAI,CAAC;AAC/B,eAAO,MAAM,aAAa,SAAU,CAAC;AACrC,mFAAmF;AACnF,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAIrC;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,MAAM,CAAC;AAIhC,kFAAkF;AAClF,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,sCAAsC;AACtC,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,kFAAkF;AAClF,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,iFAAiF;AACjF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAI1C,kFAAkF;AAClF,eAAO,MAAM,qBAAqB,IAAI,CAAC;AACvC,eAAO,MAAM,qBAAqB,MAAM,CAAC;AACzC,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAIrC,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,2DAA2D;AAC3D,eAAO,MAAM,kBAAkB,OAAO,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAIrC;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,QAAmB,CAAC;AAIjD,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,sEAAsE;AACtE,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,oDAAoD;AACpD,eAAO,MAAM,aAAa,KAAK,CAAC;AAChC,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAIpC;;;GAGG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC"}
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/core/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,YAAY,MAAM,CAAC;AAChC,eAAO,MAAM,SAAS,OAAO,CAAC;AAC9B,0DAA0D;AAC1D,eAAO,MAAM,UAAU,IAAI,CAAC;AAC5B,gFAAgF;AAChF,eAAO,MAAM,SAAS,IAAI,CAAC;AAI3B,eAAO,MAAM,QAAQ,KAAK,CAAC;AAC3B,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,eAAO,MAAM,WAAW,KAAK,CAAC;AAI9B,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,uCAAuC;AACvC,eAAO,MAAM,aAAa,IAAI,CAAC;AAC/B,eAAO,MAAM,aAAa,SAAU,CAAC;AACrC,mFAAmF;AACnF,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAIrC;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,MAAM,CAAC;AAIhC,kFAAkF;AAClF,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,sCAAsC;AACtC,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,kFAAkF;AAClF,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,iFAAiF;AACjF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAI1C,kFAAkF;AAClF,eAAO,MAAM,qBAAqB,IAAI,CAAC;AACvC,eAAO,MAAM,qBAAqB,MAAM,CAAC;AACzC,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAIrC,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,2DAA2D;AAC3D,eAAO,MAAM,kBAAkB,OAAO,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAIrC;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,QAAmB,CAAC;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,WAAa,CAAC;AAEjD;;;GAGG;AACH,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAE7C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,6EAA6E;AAC7E,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAIzC,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,sEAAsE;AACtE,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,oDAAoD;AACpD,eAAO,MAAM,aAAa,KAAK,CAAC;AAChC,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAIpC;;;GAGG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC"}

package/dist/core/limits.js

@@ -86,12 +86,35 @@ export const SAVED_REPLIES_MAX = 200;
 /**
  * Largest file accepted for upload: 10 MB.
  *
- * Checked on BOTH sides and for different reasons. The server refuses a bigger
- * object when it is attached. The client checks before uploading, because a
- * presigned PUT caps the content type but not the size, so a member on a phone
- * connection would otherwise watch a 40 MB upload finish and then fail.
+ * Enforced three times. The upload-slot body refuses a bigger `contentLength`;
+ * the size is SIGNED INTO the upload URL, so storage refuses a body of any other
+ * size; and the server checks the stored object again before processing it.
+ * The client checks first only to fail fast: it shrinks a photo well below this
+ * before uploading (see `MEDIA_SIZES`), so a member rarely meets the limit.
  */
 export const UPLOAD_MAX_BYTES = 10 * 1024 * 1024;
+/**
+ * Largest image, in pixels, the server will decode: 50 megapixels, one frame.
+ *
+ * Bytes do not bound memory. A 50,000 x 50,000 PNG of one colour compresses to
+ * a few kilobytes and decodes to ten gigabytes. The server reads the dimensions
+ * first and refuses anything above this before decoding (`UPLOAD_TOO_MANY_PIXELS`).
+ * 50 MP admits every phone camera's full-resolution photo up to 48 MP.
+ */
+export const MEDIA_MAX_INPUT_PIXELS = 50_000_000;
+/**
+ * Hours an upload may wait to be attached to a post or set as an avatar. After
+ * that the server deletes it: the composer was abandoned, or the tab closed.
+ */
+export const MEDIA_UNATTACHED_TTL_HOURS = 24;
+/**
+ * Uploads one member may have waiting (requested or processed, not yet
+ * attached) at once. A full post is `POST_MAX_MEDIA` (10); this leaves room for
+ * a retry or two without letting one account fill storage.
+ */
+export const MEDIA_PENDING_MAX = 30;
+/** Longest placeholder string: a base64 ThumbHash is about 30 characters. */
+export const MEDIA_PLACEHOLDER_MAX = 100;
 // ─── Lists and search ────────────────────────────────────────────────────────
 /** Values one Discover multi-select filter may carry (`?skill=a&skill=b`). */
 export const DISCOVER_FILTER_VALUES_MAX = 10;

package/dist/core/limits.js.map

@@ -1 +1 @@
-{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../src/core/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAChC,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC;AAC9B,0DAA0D;AAC1D,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAC5B,gFAAgF;AAChF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AAE3B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,QAAQ,GAAG,EAAE,CAAC;AAC3B,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAC5B,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAE9B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AACpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,uCAAuC;AACvC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AACrC,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAEhC,gFAAgF;AAEhF,kFAAkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AACjC,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAChD,sCAAsC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,kFAAkF;AAClF,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,iFAAiF;AACjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,gFAAgF;AAEhF,kFAAkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AACvC,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,gFAAgF;AAEhF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AACvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD,gFAAgF;AAEhF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C,sEAAsE;AACtE,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,oDAAoD;AACpD,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAChC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC","sourcesContent":["/**\n * founder-schema — Every length, size and count limit, by name\n *\n * ONE PLACE FOR EVERY NUMBER a client and the server must agree on. Before this,\n * the limits lived inline (`.max(80)`, `.max(1000)`) where nothing else could\n * read them, so the web client re-typed each one for its counters and the\n * backend re-typed them as Mongoose `maxlength`. Three copies of one number is\n * how the image alt text came to be 280 here and 500 in the backend.\n *\n * The rule from 0.2.0: a schema uses one of these constants, a consumer imports\n * the same constant, and nobody writes the digits again.\n *\n * Imports nothing, so any module here can use it without a cycle. Limits that\n * already had a name in their own module (POST_MAX_BODY_CHARS, POLL_*,\n * USERNAME_*, INTERESTS_*, MIN_AGE_YEARS...) stay where they are and keep their\n * names; this file holds the ones that had none.\n *\n * ⚠️ Lowering a limit is a breaking change for stored data: a value that was\n * valid when written fails the next edit. Raise freely; lower deliberately.\n *\n * @module founder-schema/core/limits\n */\n\n// ─── Profile ─────────────────────────────────────────────────────────────────\n\nexport const DISPLAY_NAME_MAX = 80;\nexport const HEADLINE_MAX = 120;\nexport const ABOUT_MAX = 1000;\n/** Skills a member may list. Discover filters on them. */\nexport const SKILLS_MAX = 8;\n/** Goals a member must pick at onboarding. The list itself caps the maximum. */\nexport const GOALS_MIN = 1;\n\n// ─── Location ────────────────────────────────────────────────────────────────\n\nexport const CITY_MAX = 80;\nexport const STATE_MAX = 80;\nexport const COUNTRY_MAX = 80;\n\n// ─── Venture ─────────────────────────────────────────────────────────────────\n\nexport const VENTURE_NAME_MAX = 120;\nexport const VENTURE_TAGLINE_MAX = 160;\n/** Team size including the founder. */\nexport const TEAM_SIZE_MIN = 1;\nexport const TEAM_SIZE_MAX = 100_000;\n/** Earliest founding year accepted. The ceiling is \"this year\", read per parse. */\nexport const FOUNDED_YEAR_MIN = 1900;\n\n// ─── Links ───────────────────────────────────────────────────────────────────\n\n/**\n * Longest URL a member may TYPE. Applied by `httpUrlSchema` itself, so every\n * member URL carries it: profile links, a venture website.\n *\n * ⚠ NOT applied to URLs the server reads from elsewhere (a link preview's\n * page or image), which use `safeUrlSchema`: a 314-character CDN image URL is\n * ordinary, and one of them would otherwise fail a whole feed page.\n */\nexport const LINK_URL_MAX = 300;\n\n// ─── Feed and moderation ─────────────────────────────────────────────────────\n\n/** Author-supplied image description. The backend's stored copy uses this too. */\nexport const MEDIA_ALT_MAX = 280;\nexport const LINK_PREVIEW_TITLE_MAX = 200;\nexport const LINK_PREVIEW_DESCRIPTION_MAX = 500;\n/** The free-text note on a report. */\nexport const REPORT_NOTE_MAX = 1000;\n/** A moderator's note on a decision (why it was hidden, removed or dismissed). */\nexport const MODERATION_NOTE_MAX = 500;\n/** What a post, poll or comment is shown as in a staff list: its first words. */\nexport const MODERATION_EXCERPT_MAX = 160;\n\n// ─── Staff ───────────────────────────────────────────────────────────────────\n\n/** Why a member was suspended. Shown to staff, and on record in the audit log. */\nexport const SUSPENSION_REASON_MIN = 3;\nexport const SUSPENSION_REASON_MAX = 500;\n/** The staff member directory's search box (a name, a handle or an email). */\nexport const MEMBER_SEARCH_MAX = 120;\n\n// ─── Support ─────────────────────────────────────────────────────────────────\n\nexport const TICKET_SUBJECT_MIN = 3;\nexport const TICKET_SUBJECT_MAX = 120;\n/** One message in a ticket, the member's or an agent's. */\nexport const TICKET_MESSAGE_MAX = 4000;\n/**\n * Messages one ticket may hold. A conversation that long is a new problem, so\n * the member is asked to open a new ticket rather than the thread growing\n * without bound.\n */\nexport const TICKET_MESSAGES_MAX = 200;\nexport const SAVED_REPLY_TITLE_MAX = 80;\nexport const SAVED_REPLY_BODY_MAX = 4000;\n/** Saved replies kept in all: a team's library, not an archive. */\nexport const SAVED_REPLIES_MAX = 200;\n\n// ─── Uploads ─────────────────────────────────────────────────────────────────\n\n/**\n * Largest file accepted for upload: 10 MB.\n *\n * Checked on BOTH sides and for different reasons. The server refuses a bigger\n * object when it is attached. The client checks before uploading, because a\n * presigned PUT caps the content type but not the size, so a member on a phone\n * connection would otherwise watch a 40 MB upload finish and then fail.\n */\nexport const UPLOAD_MAX_BYTES = 10 * 1024 * 1024;\n\n// ─── Lists and search ────────────────────────────────────────────────────────\n\n/** Values one Discover multi-select filter may carry (`?skill=a&skill=b`). */\nexport const DISCOVER_FILTER_VALUES_MAX = 10;\n/** Discover's free-text inputs: the name search, city and country. */\nexport const DISCOVER_TEXT_MAX = 80;\n/** Page size bounds for every cursor-paged list. */\nexport const PAGE_SIZE_MAX = 50;\nexport const PAGE_SIZE_DEFAULT = 20;\n\n// ─── Chat ────────────────────────────────────────────────────────────────────\n\n/**\n * Members one participants lookup may name. Bounded so the lookup cannot be\n * used to page through the directory.\n */\nexport const CHAT_PARTICIPANTS_MAX = 100;\n"]}
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../src/core/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAChC,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC;AAC9B,0DAA0D;AAC1D,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAC5B,gFAAgF;AAChF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AAE3B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,QAAQ,GAAG,EAAE,CAAC;AAC3B,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAC5B,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAE9B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AACpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,uCAAuC;AACvC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AACrC,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAEhC,gFAAgF;AAEhF,kFAAkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AACjC,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAChD,sCAAsC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,kFAAkF;AAClF,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,iFAAiF;AACjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,gFAAgF;AAEhF,kFAAkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AACvC,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,gFAAgF;AAEhF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AACvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAEjD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC,gFAAgF;AAEhF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C,sEAAsE;AACtE,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,oDAAoD;AACpD,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAChC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC","sourcesContent":["/**\n * founder-schema — Every length, size and count limit, by name\n *\n * ONE PLACE FOR EVERY NUMBER a client and the server must agree on. Before this,\n * the limits lived inline (`.max(80)`, `.max(1000)`) where nothing else could\n * read them, so the web client re-typed each one for its counters and the\n * backend re-typed them as Mongoose `maxlength`. Three copies of one number is\n * how the image alt text came to be 280 here and 500 in the backend.\n *\n * The rule from 0.2.0: a schema uses one of these constants, a consumer imports\n * the same constant, and nobody writes the digits again.\n *\n * Imports nothing, so any module here can use it without a cycle. Limits that\n * already had a name in their own module (POST_MAX_BODY_CHARS, POLL_*,\n * USERNAME_*, INTERESTS_*, MIN_AGE_YEARS...) stay where they are and keep their\n * names; this file holds the ones that had none.\n *\n * ⚠️ Lowering a limit is a breaking change for stored data: a value that was\n * valid when written fails the next edit. Raise freely; lower deliberately.\n *\n * @module founder-schema/core/limits\n */\n\n// ─── Profile ─────────────────────────────────────────────────────────────────\n\nexport const DISPLAY_NAME_MAX = 80;\nexport const HEADLINE_MAX = 120;\nexport const ABOUT_MAX = 1000;\n/** Skills a member may list. Discover filters on them. */\nexport const SKILLS_MAX = 8;\n/** Goals a member must pick at onboarding. The list itself caps the maximum. */\nexport const GOALS_MIN = 1;\n\n// ─── Location ────────────────────────────────────────────────────────────────\n\nexport const CITY_MAX = 80;\nexport const STATE_MAX = 80;\nexport const COUNTRY_MAX = 80;\n\n// ─── Venture ─────────────────────────────────────────────────────────────────\n\nexport const VENTURE_NAME_MAX = 120;\nexport const VENTURE_TAGLINE_MAX = 160;\n/** Team size including the founder. */\nexport const TEAM_SIZE_MIN = 1;\nexport const TEAM_SIZE_MAX = 100_000;\n/** Earliest founding year accepted. The ceiling is \"this year\", read per parse. */\nexport const FOUNDED_YEAR_MIN = 1900;\n\n// ─── Links ───────────────────────────────────────────────────────────────────\n\n/**\n * Longest URL a member may TYPE. Applied by `httpUrlSchema` itself, so every\n * member URL carries it: profile links, a venture website.\n *\n * ⚠ NOT applied to URLs the server reads from elsewhere (a link preview's\n * page or image), which use `safeUrlSchema`: a 314-character CDN image URL is\n * ordinary, and one of them would otherwise fail a whole feed page.\n */\nexport const LINK_URL_MAX = 300;\n\n// ─── Feed and moderation ─────────────────────────────────────────────────────\n\n/** Author-supplied image description. The backend's stored copy uses this too. */\nexport const MEDIA_ALT_MAX = 280;\nexport const LINK_PREVIEW_TITLE_MAX = 200;\nexport const LINK_PREVIEW_DESCRIPTION_MAX = 500;\n/** The free-text note on a report. */\nexport const REPORT_NOTE_MAX = 1000;\n/** A moderator's note on a decision (why it was hidden, removed or dismissed). */\nexport const MODERATION_NOTE_MAX = 500;\n/** What a post, poll or comment is shown as in a staff list: its first words. */\nexport const MODERATION_EXCERPT_MAX = 160;\n\n// ─── Staff ───────────────────────────────────────────────────────────────────\n\n/** Why a member was suspended. Shown to staff, and on record in the audit log. */\nexport const SUSPENSION_REASON_MIN = 3;\nexport const SUSPENSION_REASON_MAX = 500;\n/** The staff member directory's search box (a name, a handle or an email). */\nexport const MEMBER_SEARCH_MAX = 120;\n\n// ─── Support ─────────────────────────────────────────────────────────────────\n\nexport const TICKET_SUBJECT_MIN = 3;\nexport const TICKET_SUBJECT_MAX = 120;\n/** One message in a ticket, the member's or an agent's. */\nexport const TICKET_MESSAGE_MAX = 4000;\n/**\n * Messages one ticket may hold. A conversation that long is a new problem, so\n * the member is asked to open a new ticket rather than the thread growing\n * without bound.\n */\nexport const TICKET_MESSAGES_MAX = 200;\nexport const SAVED_REPLY_TITLE_MAX = 80;\nexport const SAVED_REPLY_BODY_MAX = 4000;\n/** Saved replies kept in all: a team's library, not an archive. */\nexport const SAVED_REPLIES_MAX = 200;\n\n// ─── Uploads ─────────────────────────────────────────────────────────────────\n\n/**\n * Largest file accepted for upload: 10 MB.\n *\n * Enforced three times. The upload-slot body refuses a bigger `contentLength`;\n * the size is SIGNED INTO the upload URL, so storage refuses a body of any other\n * size; and the server checks the stored object again before processing it.\n * The client checks first only to fail fast: it shrinks a photo well below this\n * before uploading (see `MEDIA_SIZES`), so a member rarely meets the limit.\n */\nexport const UPLOAD_MAX_BYTES = 10 * 1024 * 1024;\n\n/**\n * Largest image, in pixels, the server will decode: 50 megapixels, one frame.\n *\n * Bytes do not bound memory. A 50,000 x 50,000 PNG of one colour compresses to\n * a few kilobytes and decodes to ten gigabytes. The server reads the dimensions\n * first and refuses anything above this before decoding (`UPLOAD_TOO_MANY_PIXELS`).\n * 50 MP admits every phone camera's full-resolution photo up to 48 MP.\n */\nexport const MEDIA_MAX_INPUT_PIXELS = 50_000_000;\n\n/**\n * Hours an upload may wait to be attached to a post or set as an avatar. After\n * that the server deletes it: the composer was abandoned, or the tab closed.\n */\nexport const MEDIA_UNATTACHED_TTL_HOURS = 24;\n\n/**\n * Uploads one member may have waiting (requested or processed, not yet\n * attached) at once. A full post is `POST_MAX_MEDIA` (10); this leaves room for\n * a retry or two without letting one account fill storage.\n */\nexport const MEDIA_PENDING_MAX = 30;\n\n/** Longest placeholder string: a base64 ThumbHash is about 30 characters. */\nexport const MEDIA_PLACEHOLDER_MAX = 100;\n\n// ─── Lists and search ────────────────────────────────────────────────────────\n\n/** Values one Discover multi-select filter may carry (`?skill=a&skill=b`). */\nexport const DISCOVER_FILTER_VALUES_MAX = 10;\n/** Discover's free-text inputs: the name search, city and country. */\nexport const DISCOVER_TEXT_MAX = 80;\n/** Page size bounds for every cursor-paged list. */\nexport const PAGE_SIZE_MAX = 50;\nexport const PAGE_SIZE_DEFAULT = 20;\n\n// ─── Chat ────────────────────────────────────────────────────────────────────\n\n/**\n * Members one participants lookup may name. Bounded so the lookup cannot be\n * used to page through the directory.\n */\nexport const CHAT_PARTICIPANTS_MAX = 100;\n"]}

package/dist/core/responses.d.ts

@@ -60,6 +60,12 @@ export declare const apiErrorSchema: z.ZodObject<{
         UPLOAD_NOT_ATTACHABLE: "UPLOAD_NOT_ATTACHABLE";
         UPLOAD_TOO_LARGE: "UPLOAD_TOO_LARGE";
         UPLOAD_WRONG_TYPE: "UPLOAD_WRONG_TYPE";
+        UPLOAD_NOT_RECEIVED: "UPLOAD_NOT_RECEIVED";
+        UPLOAD_PROCESSING: "UPLOAD_PROCESSING";
+        UPLOAD_UNREADABLE: "UPLOAD_UNREADABLE";
+        UPLOAD_TOO_MANY_PIXELS: "UPLOAD_TOO_MANY_PIXELS";
+        UPLOAD_LIMIT_REACHED: "UPLOAD_LIMIT_REACHED";
+        UPLOAD_IN_USE: "UPLOAD_IN_USE";
         EDIT_WINDOW_CLOSED: "EDIT_WINDOW_CLOSED";
         POLL_NOT_EDITABLE: "POLL_NOT_EDITABLE";
         POLL_CLOSED: "POLL_CLOSED";
@@ -126,6 +132,12 @@ export declare const errorResponseSchema: z.ZodObject<{
             UPLOAD_NOT_ATTACHABLE: "UPLOAD_NOT_ATTACHABLE";
             UPLOAD_TOO_LARGE: "UPLOAD_TOO_LARGE";
             UPLOAD_WRONG_TYPE: "UPLOAD_WRONG_TYPE";
+            UPLOAD_NOT_RECEIVED: "UPLOAD_NOT_RECEIVED";
+            UPLOAD_PROCESSING: "UPLOAD_PROCESSING";
+            UPLOAD_UNREADABLE: "UPLOAD_UNREADABLE";
+            UPLOAD_TOO_MANY_PIXELS: "UPLOAD_TOO_MANY_PIXELS";
+            UPLOAD_LIMIT_REACHED: "UPLOAD_LIMIT_REACHED";
+            UPLOAD_IN_USE: "UPLOAD_IN_USE";
             EDIT_WINDOW_CLOSED: "EDIT_WINDOW_CLOSED";
             POLL_NOT_EDITABLE: "POLL_NOT_EDITABLE";
             POLL_CLOSED: "POLL_CLOSED";

package/dist/core/responses.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"responses.d.ts","sourceRoot":"","sources":["../../src/core/responses.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;iBAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,mDAAmD;AACnD,eAAO,MAAM,qBAAqB,GAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC;;;;iBAK9D,CAAC;AAEL,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAG9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC;;;iBAIxD,CAAC;AAEL;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;iBAAmC,CAAC;AACjE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}
+{"version":3,"file":"responses.d.ts","sourceRoot":"","sources":["../../src/core/responses.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;iBAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,mDAAmD;AACnD,eAAO,MAAM,qBAAqB,GAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC;;;;iBAK9D,CAAC;AAEL,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAG9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC;;;iBAIxD,CAAC;AAEL;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;iBAAmC,CAAC;AACjE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/core/validation.d.ts

@@ -57,6 +57,8 @@ export declare const VALIDATION_MESSAGE: {
     readonly foundedYearFuture: "foundedYearFuture";
     /** An upload key that is not one this product mints. */
     readonly uploadKeyInvalid: "uploadKeyInvalid";
+    /** The same uploaded image attached twice to one post. */
+    readonly mediaDuplicate: "mediaDuplicate";
     /** A post with neither text nor media. */
     readonly postEmpty: "postEmpty";
     /** Two poll options with the same label. */

package/dist/core/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/core/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB;IAC7B,6BAA6B;;IAE7B,6DAA6D;;IAE7D,2CAA2C;;IAE3C,+BAA+B;;IAE/B,uDAAuD;;IAEvD,6BAA6B;;IAE7B,8DAA8D;;IAE9D,uCAAuC;;IAEvC,wDAAwD;;IAExD,0CAA0C;;IAE1C,4CAA4C;;IAE5C,uEAAuE;;IAEvE,uFAAuF;;IAEvF,sEAAsE;;IAEtE,yEAAyE;;IAEzE,8CAA8C;;IAE9C,4CAA4C;;IAE5C,kDAAkD;;IAElD,uCAAuC;;CAE/B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAEhG;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,sCAAuC,CAAC;AACxE,eAAO,MAAM,iBAAiB;;;;EAA8B,CAAC;AAC7D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;iBAkBhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,6EAA6E;AAC7E,UAAU,YAAY;IACpB,IAAI,EAAE,SAAS,WAAW,EAAE,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAKD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE;IAAE,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,EAC1C,QAAQ,CAAC,EAAE,WAAW,GACrB,eAAe,EAAE,CAkBnB"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/core/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB;IAC7B,6BAA6B;;IAE7B,6DAA6D;;IAE7D,2CAA2C;;IAE3C,+BAA+B;;IAE/B,uDAAuD;;IAEvD,6BAA6B;;IAE7B,8DAA8D;;IAE9D,uCAAuC;;IAEvC,wDAAwD;;IAExD,0DAA0D;;IAE1D,0CAA0C;;IAE1C,4CAA4C;;IAE5C,uEAAuE;;IAEvE,uFAAuF;;IAEvF,sEAAsE;;IAEtE,yEAAyE;;IAEzE,8CAA8C;;IAE9C,4CAA4C;;IAE5C,kDAAkD;;IAElD,uCAAuC;;CAE/B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAEhG;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,sCAAuC,CAAC;AACxE,eAAO,MAAM,iBAAiB;;;;EAA8B,CAAC;AAC7D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;iBAkBhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,6EAA6E;AAC7E,UAAU,YAAY;IACpB,IAAI,EAAE,SAAS,WAAW,EAAE,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAKD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE;IAAE,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,EAC1C,QAAQ,CAAC,EAAE,WAAW,GACrB,eAAe,EAAE,CAkBnB"}

package/dist/core/validation.js

@@ -57,6 +57,8 @@ export const VALIDATION_MESSAGE = {
     foundedYearFuture: 'foundedYearFuture',
     /** An upload key that is not one this product mints. */
     uploadKeyInvalid: 'uploadKeyInvalid',
+    /** The same uploaded image attached twice to one post. */
+    mediaDuplicate: 'mediaDuplicate',
     /** A post with neither text nor media. */
     postEmpty: 'postEmpty',
     /** Two poll options with the same label. */

package/dist/core/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/core/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,6BAA6B;IAC7B,SAAS,EAAE,WAAW;IACtB,6DAA6D;IAC7D,eAAe,EAAE,iBAAiB;IAClC,2CAA2C;IAC3C,YAAY,EAAE,cAAc;IAC5B,+BAA+B;IAC/B,WAAW,EAAE,aAAa;IAC1B,uDAAuD;IACvD,UAAU,EAAE,YAAY;IACxB,6BAA6B;IAC7B,WAAW,EAAE,aAAa;IAC1B,8DAA8D;IAC9D,SAAS,EAAE,WAAW;IACtB,uCAAuC;IACvC,iBAAiB,EAAE,mBAAmB;IACtC,wDAAwD;IACxD,gBAAgB,EAAE,kBAAkB;IACpC,0CAA0C;IAC1C,SAAS,EAAE,WAAW;IACtB,4CAA4C;IAC5C,oBAAoB,EAAE,sBAAsB;IAC5C,uEAAuE;IACvE,aAAa,EAAE,eAAe;IAC9B,uFAAuF;IACvF,UAAU,EAAE,YAAY;IACxB,sEAAsE;IACtE,gBAAgB,EAAE,kBAAkB;IACpC,yEAAyE;IACzE,kBAAkB,EAAE,oBAAoB;IACxC,8CAA8C;IAC9C,WAAW,EAAE,aAAa;IAC1B,4CAA4C;IAC5C,YAAY,EAAE,cAAc;IAC5B,kDAAkD;IAClD,YAAY,EAAE,cAAc;IAC5B,uCAAuC;IACvC,cAAc,EAAE,gBAAgB;CACxB,CAAC;AAGX;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAG7D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,iFAAiF;IACjF,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACtC;;;OAGG;IACH,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,8CAA8C;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,4CAA4C;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,wDAAwD;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,oEAAoE;IACpE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAcH,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAsB,EAAE,CAClD,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAA0C,EAC1C,QAAsB;IAEtB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,GAAG,GAAoB;YAC3B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACzB,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CACpF;YACD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACjD,IAAI,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACjD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAChE,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAChE,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * founder-schema — How a validation failure is described, on both sides\n *\n * TWO RULES, and they are what let the web client show any error, its own or\n * the server's, on the right field in the member's language:\n *\n *  1. A CUSTOM MESSAGE IS A KEY, NEVER A SENTENCE. Where a schema needs its own\n *     message (a refine, a regex), the message is one of `VALIDATION_MESSAGE`,\n *     such as `phoneInvalid`. The client turns the key into text in English or\n *     Hindi. Before 0.2.0 these were English sentences, so a Hindi screen showed\n *     an English error, and a client that wanted to translate one had to match\n *     on the wording.\n *\n *     Plain bounds carry NO custom message. `.min(1)` and `.max(80)` produce\n *     Zod's own `too_small` / `too_big` issues, which already say which bound\n *     and what it was (`minimum`, `maximum`, `origin`), and the client words\n *     them from those. A hand-written \"at most 80 characters\" would only\n *     restate the number in one language.\n *\n *  2. THE SERVER SENDS EVERY ISSUE, IN THIS SHAPE. A 400 answers with\n *     `error.details.issues`, built by `toValidationIssues`, so the client can\n *     put each one under its field. Until 0.2.0 the backend sent only the\n *     first issue's message, with no path at all.\n *\n * ⚠️ `toValidationIssues` COPIES A WHITELIST OF FIELDS, it never spreads an\n * issue. Zod can carry the rejected `input` on an issue, and these bodies hold a\n * date of birth and a phone number. Echoing them into an error response sends\n * them back to the client, into logs and into any proxy in between. A test\n * proves `input` never survives.\n *\n * @module founder-schema/core/validation\n */\n\nimport { z } from 'zod';\n\n/**\n * Every custom message a schema in this package can produce. Each is a\n * translation key the clients define in every language they ship.\n *\n * ⚠️ Append only, and add the translation in the same change. Renaming one\n * shows the raw key to every member until each client ships the new name.\n */\nexport const VALIDATION_MESSAGE = {\n  /** Not a 24-hex Mongo id. */\n  invalidId: 'invalidId',\n  /** Handle: wrong characters, or a dot in the wrong place. */\n  usernameInvalid: 'usernameInvalid',\n  /** Not a 10-digit Indian mobile number. */\n  phoneInvalid: 'phoneInvalid',\n  /** Not a `YYYY-MM-DD` date. */\n  dateInvalid: 'dateInvalid',\n  /** A date that does not exist, such as 30 February. */\n  dobInvalid: 'dobInvalid',\n  /** Under the minimum age. */\n  dobUnderAge: 'dobUnderAge',\n  /** Over the sanity ceiling: almost always a mistyped year. */\n  dobTooOld: 'dobTooOld',\n  /** A founding year after this year. */\n  foundedYearFuture: 'foundedYearFuture',\n  /** An upload key that is not one this product mints. */\n  uploadKeyInvalid: 'uploadKeyInvalid',\n  /** A post with neither text nor media. */\n  postEmpty: 'postEmpty',\n  /** Two poll options with the same label. */\n  pollOptionsDuplicate: 'pollOptionsDuplicate',\n  /** An empty string sent to clear a patch field; clearing is `null`. */\n  clearWithNull: 'clearWithNull',\n  /** Not a plain http(s) URL on a real domain (`javascript:`, `localhost`, an IP...). */\n  urlInvalid: 'urlInvalid',\n  /** A handle this product keeps for itself (`admin`, `support`...). */\n  usernameReserved: 'usernameReserved',\n  /** Agreed to a version of the guidelines that is not the current one. */\n  guidelinesOutdated: 'guidelinesOutdated',\n  /** An MPIN that is not exactly six digits. */\n  mpinInvalid: 'mpinInvalid',\n  /** The MPIN and its confirmation differ. */\n  mpinMismatch: 'mpinMismatch',\n  /** Switching to a staff role without the MPIN. */\n  mpinRequired: 'mpinRequired',\n  /** The same role twice in one list. */\n  rolesDuplicate: 'rolesDuplicate',\n} as const;\nexport type ValidationMessageKey = (typeof VALIDATION_MESSAGE)[keyof typeof VALIDATION_MESSAGE];\n\n/**\n * Which part of the request an issue is about.\n *\n * ONE PATH CONVENTION: `path` is ALWAYS relative to this part, so a body field\n * reads `['venture', 'name']` with `location: 'body'`, never\n * `['body', 'venture', 'name']`. A form maps body issues straight onto its\n * fields without stripping a prefix, and a client that sees `query` or\n * `params` knows the problem is the URL, not anything the member typed.\n */\nexport const REQUEST_PART_VALUES = ['body', 'query', 'params'] as const;\nexport const requestPartSchema = z.enum(REQUEST_PART_VALUES);\nexport type RequestPart = z.infer<typeof requestPartSchema>;\n\n/**\n * One problem with one field, as it crosses the wire.\n *\n * `code` is Zod's issue code (`too_small`, `too_big`, `invalid_type`,\n * `invalid_format`, `custom`...). `message` is either one of\n * `VALIDATION_MESSAGE` or, for a plain bound, Zod's own English text, which the\n * client ignores in favour of `code` plus `minimum` / `maximum`.\n */\nexport const validationIssueSchema = z.object({\n  /** Set by the server on every issue it sends; absent on a client's own parse. */\n  location: requestPartSchema.optional(),\n  /**\n   * Where the problem is, RELATIVE TO `location`: `['venture', 'name']`,\n   * `['options', 2, 'label']`, `['contentId']`.\n   */\n  path: z.array(z.union([z.string(), z.number()])),\n  code: z.string(),\n  message: z.string(),\n  /** `too_small`: the bound that was missed. */\n  minimum: z.number().optional(),\n  /** `too_big`: the bound that was passed. */\n  maximum: z.number().optional(),\n  /** What was measured: `string`, `array`, `number`... */\n  origin: z.string().optional(),\n  /** `invalid_format`: which format, e.g. `url`, `regex`, `email`. */\n  format: z.string().optional(),\n});\nexport type ValidationIssue = z.infer<typeof validationIssueSchema>;\n\n/** The loosest shape this needs from a Zod issue, so it works across 4.x. */\ninterface ZodIssueLike {\n  path: readonly PropertyKey[];\n  code: string;\n  message: string;\n  minimum?: unknown;\n  maximum?: unknown;\n  origin?: unknown;\n  format?: unknown;\n}\n\nconst toNumber = (v: unknown): number | undefined =>\n  typeof v === 'number' ? v : typeof v === 'bigint' ? Number(v) : undefined;\n\n/**\n * A Zod error as the wire shape. Use this on the server for every 400, and on\n * the client to treat its own errors and the server's the same way.\n *\n * `location` is stamped on every issue when given; the server always gives it.\n *\n * Copies a WHITELIST of fields (see the module note). A path segment that is a\n * symbol, which JSON cannot carry, becomes its description.\n */\nexport function toValidationIssues(\n  error: { issues: readonly ZodIssueLike[] },\n  location?: RequestPart,\n): ValidationIssue[] {\n  return error.issues.map((issue) => {\n    const out: ValidationIssue = {\n      ...(location ? { location } : {}),\n      path: issue.path.map((p) =>\n        typeof p === 'number' ? p : typeof p === 'string' ? p : String(p.description ?? ''),\n      ),\n      code: issue.code,\n      message: issue.message,\n    };\n    const minimum = toNumber(issue.minimum);\n    const maximum = toNumber(issue.maximum);\n    if (minimum !== undefined) out.minimum = minimum;\n    if (maximum !== undefined) out.maximum = maximum;\n    if (typeof issue.origin === 'string') out.origin = issue.origin;\n    if (typeof issue.format === 'string') out.format = issue.format;\n    return out;\n  });\n}\n"]}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/core/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,6BAA6B;IAC7B,SAAS,EAAE,WAAW;IACtB,6DAA6D;IAC7D,eAAe,EAAE,iBAAiB;IAClC,2CAA2C;IAC3C,YAAY,EAAE,cAAc;IAC5B,+BAA+B;IAC/B,WAAW,EAAE,aAAa;IAC1B,uDAAuD;IACvD,UAAU,EAAE,YAAY;IACxB,6BAA6B;IAC7B,WAAW,EAAE,aAAa;IAC1B,8DAA8D;IAC9D,SAAS,EAAE,WAAW;IACtB,uCAAuC;IACvC,iBAAiB,EAAE,mBAAmB;IACtC,wDAAwD;IACxD,gBAAgB,EAAE,kBAAkB;IACpC,0DAA0D;IAC1D,cAAc,EAAE,gBAAgB;IAChC,0CAA0C;IAC1C,SAAS,EAAE,WAAW;IACtB,4CAA4C;IAC5C,oBAAoB,EAAE,sBAAsB;IAC5C,uEAAuE;IACvE,aAAa,EAAE,eAAe;IAC9B,uFAAuF;IACvF,UAAU,EAAE,YAAY;IACxB,sEAAsE;IACtE,gBAAgB,EAAE,kBAAkB;IACpC,yEAAyE;IACzE,kBAAkB,EAAE,oBAAoB;IACxC,8CAA8C;IAC9C,WAAW,EAAE,aAAa;IAC1B,4CAA4C;IAC5C,YAAY,EAAE,cAAc;IAC5B,kDAAkD;IAClD,YAAY,EAAE,cAAc;IAC5B,uCAAuC;IACvC,cAAc,EAAE,gBAAgB;CACxB,CAAC;AAGX;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAG7D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,iFAAiF;IACjF,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACtC;;;OAGG;IACH,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,8CAA8C;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,4CAA4C;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,wDAAwD;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,oEAAoE;IACpE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAcH,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAsB,EAAE,CAClD,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAA0C,EAC1C,QAAsB;IAEtB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,GAAG,GAAoB;YAC3B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACzB,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CACpF;YACD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACjD,IAAI,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACjD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAChE,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAChE,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * founder-schema — How a validation failure is described, on both sides\n *\n * TWO RULES, and they are what let the web client show any error, its own or\n * the server's, on the right field in the member's language:\n *\n *  1. A CUSTOM MESSAGE IS A KEY, NEVER A SENTENCE. Where a schema needs its own\n *     message (a refine, a regex), the message is one of `VALIDATION_MESSAGE`,\n *     such as `phoneInvalid`. The client turns the key into text in English or\n *     Hindi. Before 0.2.0 these were English sentences, so a Hindi screen showed\n *     an English error, and a client that wanted to translate one had to match\n *     on the wording.\n *\n *     Plain bounds carry NO custom message. `.min(1)` and `.max(80)` produce\n *     Zod's own `too_small` / `too_big` issues, which already say which bound\n *     and what it was (`minimum`, `maximum`, `origin`), and the client words\n *     them from those. A hand-written \"at most 80 characters\" would only\n *     restate the number in one language.\n *\n *  2. THE SERVER SENDS EVERY ISSUE, IN THIS SHAPE. A 400 answers with\n *     `error.details.issues`, built by `toValidationIssues`, so the client can\n *     put each one under its field. Until 0.2.0 the backend sent only the\n *     first issue's message, with no path at all.\n *\n * ⚠️ `toValidationIssues` COPIES A WHITELIST OF FIELDS, it never spreads an\n * issue. Zod can carry the rejected `input` on an issue, and these bodies hold a\n * date of birth and a phone number. Echoing them into an error response sends\n * them back to the client, into logs and into any proxy in between. A test\n * proves `input` never survives.\n *\n * @module founder-schema/core/validation\n */\n\nimport { z } from 'zod';\n\n/**\n * Every custom message a schema in this package can produce. Each is a\n * translation key the clients define in every language they ship.\n *\n * ⚠️ Append only, and add the translation in the same change. Renaming one\n * shows the raw key to every member until each client ships the new name.\n */\nexport const VALIDATION_MESSAGE = {\n  /** Not a 24-hex Mongo id. */\n  invalidId: 'invalidId',\n  /** Handle: wrong characters, or a dot in the wrong place. */\n  usernameInvalid: 'usernameInvalid',\n  /** Not a 10-digit Indian mobile number. */\n  phoneInvalid: 'phoneInvalid',\n  /** Not a `YYYY-MM-DD` date. */\n  dateInvalid: 'dateInvalid',\n  /** A date that does not exist, such as 30 February. */\n  dobInvalid: 'dobInvalid',\n  /** Under the minimum age. */\n  dobUnderAge: 'dobUnderAge',\n  /** Over the sanity ceiling: almost always a mistyped year. */\n  dobTooOld: 'dobTooOld',\n  /** A founding year after this year. */\n  foundedYearFuture: 'foundedYearFuture',\n  /** An upload key that is not one this product mints. */\n  uploadKeyInvalid: 'uploadKeyInvalid',\n  /** The same uploaded image attached twice to one post. */\n  mediaDuplicate: 'mediaDuplicate',\n  /** A post with neither text nor media. */\n  postEmpty: 'postEmpty',\n  /** Two poll options with the same label. */\n  pollOptionsDuplicate: 'pollOptionsDuplicate',\n  /** An empty string sent to clear a patch field; clearing is `null`. */\n  clearWithNull: 'clearWithNull',\n  /** Not a plain http(s) URL on a real domain (`javascript:`, `localhost`, an IP...). */\n  urlInvalid: 'urlInvalid',\n  /** A handle this product keeps for itself (`admin`, `support`...). */\n  usernameReserved: 'usernameReserved',\n  /** Agreed to a version of the guidelines that is not the current one. */\n  guidelinesOutdated: 'guidelinesOutdated',\n  /** An MPIN that is not exactly six digits. */\n  mpinInvalid: 'mpinInvalid',\n  /** The MPIN and its confirmation differ. */\n  mpinMismatch: 'mpinMismatch',\n  /** Switching to a staff role without the MPIN. */\n  mpinRequired: 'mpinRequired',\n  /** The same role twice in one list. */\n  rolesDuplicate: 'rolesDuplicate',\n} as const;\nexport type ValidationMessageKey = (typeof VALIDATION_MESSAGE)[keyof typeof VALIDATION_MESSAGE];\n\n/**\n * Which part of the request an issue is about.\n *\n * ONE PATH CONVENTION: `path` is ALWAYS relative to this part, so a body field\n * reads `['venture', 'name']` with `location: 'body'`, never\n * `['body', 'venture', 'name']`. A form maps body issues straight onto its\n * fields without stripping a prefix, and a client that sees `query` or\n * `params` knows the problem is the URL, not anything the member typed.\n */\nexport const REQUEST_PART_VALUES = ['body', 'query', 'params'] as const;\nexport const requestPartSchema = z.enum(REQUEST_PART_VALUES);\nexport type RequestPart = z.infer<typeof requestPartSchema>;\n\n/**\n * One problem with one field, as it crosses the wire.\n *\n * `code` is Zod's issue code (`too_small`, `too_big`, `invalid_type`,\n * `invalid_format`, `custom`...). `message` is either one of\n * `VALIDATION_MESSAGE` or, for a plain bound, Zod's own English text, which the\n * client ignores in favour of `code` plus `minimum` / `maximum`.\n */\nexport const validationIssueSchema = z.object({\n  /** Set by the server on every issue it sends; absent on a client's own parse. */\n  location: requestPartSchema.optional(),\n  /**\n   * Where the problem is, RELATIVE TO `location`: `['venture', 'name']`,\n   * `['options', 2, 'label']`, `['contentId']`.\n   */\n  path: z.array(z.union([z.string(), z.number()])),\n  code: z.string(),\n  message: z.string(),\n  /** `too_small`: the bound that was missed. */\n  minimum: z.number().optional(),\n  /** `too_big`: the bound that was passed. */\n  maximum: z.number().optional(),\n  /** What was measured: `string`, `array`, `number`... */\n  origin: z.string().optional(),\n  /** `invalid_format`: which format, e.g. `url`, `regex`, `email`. */\n  format: z.string().optional(),\n});\nexport type ValidationIssue = z.infer<typeof validationIssueSchema>;\n\n/** The loosest shape this needs from a Zod issue, so it works across 4.x. */\ninterface ZodIssueLike {\n  path: readonly PropertyKey[];\n  code: string;\n  message: string;\n  minimum?: unknown;\n  maximum?: unknown;\n  origin?: unknown;\n  format?: unknown;\n}\n\nconst toNumber = (v: unknown): number | undefined =>\n  typeof v === 'number' ? v : typeof v === 'bigint' ? Number(v) : undefined;\n\n/**\n * A Zod error as the wire shape. Use this on the server for every 400, and on\n * the client to treat its own errors and the server's the same way.\n *\n * `location` is stamped on every issue when given; the server always gives it.\n *\n * Copies a WHITELIST of fields (see the module note). A path segment that is a\n * symbol, which JSON cannot carry, becomes its description.\n */\nexport function toValidationIssues(\n  error: { issues: readonly ZodIssueLike[] },\n  location?: RequestPart,\n): ValidationIssue[] {\n  return error.issues.map((issue) => {\n    const out: ValidationIssue = {\n      ...(location ? { location } : {}),\n      path: issue.path.map((p) =>\n        typeof p === 'number' ? p : typeof p === 'string' ? p : String(p.description ?? ''),\n      ),\n      code: issue.code,\n      message: issue.message,\n    };\n    const minimum = toNumber(issue.minimum);\n    const maximum = toNumber(issue.maximum);\n    if (minimum !== undefined) out.minimum = minimum;\n    if (maximum !== undefined) out.maximum = maximum;\n    if (typeof issue.origin === 'string') out.origin = issue.origin;\n    if (typeof issue.format === 'string') out.format = issue.format;\n    return out;\n  });\n}\n"]}

package/dist/domains/account/account.d.ts

@@ -20,6 +20,8 @@ import { z } from 'zod';
  *   - their reactions, bookmarks and their votes on polls still open are
  *     withdrawn (a closed poll's result is final and is not rewritten);
  *   - their messages are erased from chat and they leave every conversation;
+ *   - every image they uploaded (their photo, their posts' images) is deleted
+ *     from storage, so a copied image link stops working too;
  *   - the onboarding draft is discarded.
  *
  * Signing in to Founder Circle again later starts a NEW, empty account.

package/dist/domains/account/account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../../src/domains/account/account.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,2BAA2B;;iBAEtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../../src/domains/account/account.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,2BAA2B;;iBAEtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/domains/account/account.js

@@ -20,6 +20,8 @@ import { z } from 'zod';
  *   - their reactions, bookmarks and their votes on polls still open are
  *     withdrawn (a closed poll's result is final and is not rewritten);
  *   - their messages are erased from chat and they leave every conversation;
+ *   - every image they uploaded (their photo, their posts' images) is deleted
+ *     from storage, so a copied image link stops working too;
  *   - the onboarding draft is discarded.
  *
  * Signing in to Founder Circle again later starts a NEW, empty account.

package/dist/domains/account/account.js.map

@@ -1 +1 @@
-{"version":3,"file":"account.js","sourceRoot":"","sources":["../../../src/domains/account/account.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACzB,CAAC,CAAC","sourcesContent":["/**\n * The member's Founder Circle account\n * ===================================\n * Deleting it is PER PRODUCT. It removes the member from Founder Circle and\n * leaves their central-auth account, and every other product they use,\n * exactly as it was. Central auth deleting the whole account arrives here as\n * its `user.deleted` webhook and has the same outcome.\n *\n * @module founder-schema/domains/account\n */\n\nimport { z } from 'zod';\n\n/**\n * `DELETE /api/v1/users/me`. No body: the confirmation (typing the account's\n * email) is the client's, and the server's check is the signed-in session.\n *\n * What it does, all of it before it answers:\n *   - the founder profile stops being listed or reachable;\n *   - the member's posts, polls and comments are deleted, and the comment\n *     counts on other people's posts go down with them;\n *   - their reactions, bookmarks and their votes on polls still open are\n *     withdrawn (a closed poll's result is final and is not rewritten);\n *   - their messages are erased from chat and they leave every conversation;\n *   - the onboarding draft is discarded.\n *\n * Signing in to Founder Circle again later starts a NEW, empty account.\n *\n * Refusals: `SERVICE_UNAVAILABLE` (503) when the chat server could not erase\n * the messages. NOTHING was deleted then, and retrying is safe.\n * `RATE_LIMITED` (429). `UNAUTHORIZED` / `TOKEN_EXPIRED` /\n * `SESSION_INVALIDATED` (401) and `FORBIDDEN` (403, an account that is not\n * active) as for every signed-in call.\n *\n * The client signs out after a success: the account is gone, the cookies on\n * the device are not.\n */\nexport const deleteAccountResponseSchema = z.object({\n  deleted: z.literal(true),\n});\nexport type DeleteAccountResponse = z.infer<typeof deleteAccountResponseSchema>;\n"]}
+{"version":3,"file":"account.js","sourceRoot":"","sources":["../../../src/domains/account/account.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACzB,CAAC,CAAC","sourcesContent":["/**\n * The member's Founder Circle account\n * ===================================\n * Deleting it is PER PRODUCT. It removes the member from Founder Circle and\n * leaves their central-auth account, and every other product they use,\n * exactly as it was. Central auth deleting the whole account arrives here as\n * its `user.deleted` webhook and has the same outcome.\n *\n * @module founder-schema/domains/account\n */\n\nimport { z } from 'zod';\n\n/**\n * `DELETE /api/v1/users/me`. No body: the confirmation (typing the account's\n * email) is the client's, and the server's check is the signed-in session.\n *\n * What it does, all of it before it answers:\n *   - the founder profile stops being listed or reachable;\n *   - the member's posts, polls and comments are deleted, and the comment\n *     counts on other people's posts go down with them;\n *   - their reactions, bookmarks and their votes on polls still open are\n *     withdrawn (a closed poll's result is final and is not rewritten);\n *   - their messages are erased from chat and they leave every conversation;\n *   - every image they uploaded (their photo, their posts' images) is deleted\n *     from storage, so a copied image link stops working too;\n *   - the onboarding draft is discarded.\n *\n * Signing in to Founder Circle again later starts a NEW, empty account.\n *\n * Refusals: `SERVICE_UNAVAILABLE` (503) when the chat server could not erase\n * the messages. NOTHING was deleted then, and retrying is safe.\n * `RATE_LIMITED` (429). `UNAUTHORIZED` / `TOKEN_EXPIRED` /\n * `SESSION_INVALIDATED` (401) and `FORBIDDEN` (403, an account that is not\n * active) as for every signed-in call.\n *\n * The client signs out after a success: the account is gone, the cookies on\n * the device are not.\n */\nexport const deleteAccountResponseSchema = z.object({\n  deleted: z.literal(true),\n});\nexport type DeleteAccountResponse = z.infer<typeof deleteAccountResponseSchema>;\n"]}