founder-schema 0.4.0 → 0.5.0

package/dist/domains/media/media.d.ts

@@ -0,0 +1,134 @@
+/**
+ * founder-schema — Media: what an uploaded image becomes
+ *
+ * THE PIPELINE, end to end (0.5.0):
+ *
+ *   1. The client shrinks the photo (long edge at most the largest size in
+ *      `MEDIA_SIZES`, WebP or JPEG) and asks for an upload slot:
+ *      `POST /api/v1/uploads/presign` with a purpose, a content type and the
+ *      exact byte count (`uploadPresignBodySchema`).
+ *   2. It PUTs the bytes straight to storage, with the headers it was given.
+ *      Nothing passes through the API server.
+ *   3. It calls `POST /api/v1/uploads/:mediaId/complete`. The server checks the
+ *      file, decodes it fully, applies the photo's rotation, REMOVES EVERY
+ *      PIECE OF METADATA (GPS position, camera, timestamps), re-encodes it as
+ *      WebP at each size in `MEDIA_SIZES`, deletes the raw upload, and answers
+ *      with `uploadedMediaSchema`.
+ *   4. A post (`attachedMediaSchema`) or the avatar (`setAvatarBodySchema`,
+ *      onboarding's `avatarMediaId`) takes the media id. One upload is used
+ *      once, by its owner, for the purpose it was uploaded for.
+ *
+ * What nobody sees: the raw upload. It sits in a folder the CDN cannot reach
+ * and is deleted when processing finishes, or by storage itself after a day.
+ * Only the re-encoded sizes are ever served.
+ *
+ * An image never attached is deleted after `MEDIA_UNATTACHED_TTL_HOURS`; a
+ * deleted post's images, a replaced avatar, and an erased account's images are
+ * deleted from storage by the server, so a copied link stops working.
+ *
+ * @module founder-schema/domains/media
+ */
+import { z } from 'zod';
+/** What an upload is for. It decides the sizes made and where it may be attached. */
+export declare const MEDIA_PURPOSE_VALUES: readonly ["post", "avatar"];
+export declare const mediaPurposeSchema: z.ZodEnum<{
+    post: "post";
+    avatar: "avatar";
+}>;
+export type MediaPurpose = z.infer<typeof mediaPurposeSchema>;
+/**
+ * The content types a member may upload. Every one is decoded and re-encoded
+ * to WebP before anyone sees it, so this list is about what the server can
+ * DECODE safely, not what it serves.
+ *
+ * Not HEIC: an iPhone's photo picker converts HEIC to JPEG for the web, and a
+ * client that shrinks the photo first re-encodes it anyway. SVG never: it is a
+ * document that can carry script, not an image.
+ */
+export declare const MEDIA_UPLOAD_CONTENT_TYPES: readonly ["image/jpeg", "image/png", "image/webp", "image/gif"];
+export declare const mediaUploadContentTypeSchema: z.ZodEnum<{
+    "image/jpeg": "image/jpeg";
+    "image/png": "image/png";
+    "image/webp": "image/webp";
+    "image/gif": "image/gif";
+}>;
+export type MediaUploadContentType = z.infer<typeof mediaUploadContentTypeSchema>;
+/**
+ * The sizes each purpose is stored at, smallest first.
+ *
+ *   - post: the LONG edge, aspect kept. 540 for a feed card on a plain screen,
+ *     1080 for the same card on a phone's dense screen, 2048 for the full-screen
+ *     view. An image smaller than a size is never enlarged, so a small image
+ *     has fewer sizes.
+ *   - avatar: a SQUARE, cropped around the most interesting region (usually a
+ *     face). 192 for every small circle (bylines, lists, chat) up to 64 CSS
+ *     pixels on a 3x screen, 512 for a profile header.
+ *
+ * A client shrinks a photo to the largest size here before uploading: anything
+ * bigger is thrown away by the server anyway, and costs the member data.
+ */
+export declare const MEDIA_SIZES: {
+    readonly post: readonly [540, 1080, 2048];
+    readonly avatar: readonly [192, 512];
+};
+/** One stored size of an image. */
+export declare const mediaVariantSchema: z.ZodObject<{
+    width: z.ZodNumber;
+    height: z.ZodNumber;
+    url: z.ZodURL;
+}, z.core.$strip>;
+export type MediaVariant = z.infer<typeof mediaVariantSchema>;
+/**
+ * A processed image, as every read shows it.
+ *
+ * `variants` is a ready-made `srcset`: smallest first, each with its own pixel
+ * width. `url`, `width` and `height` repeat the largest one, so a client that
+ * ignores `variants` still renders correctly and can reserve the image's box
+ * from the aspect ratio before it loads (no layout shift).
+ *
+ * `placeholder` is a ThumbHash (base64): a ~30 character blurred preview a
+ * client can paint instantly while the image loads.
+ *
+ * URLs point at our media CDN. They come from our own pipeline, never from a
+ * member, so a plain `z.url()`.
+ */
+export declare const mediaImageSchema: z.ZodObject<{
+    id: z.ZodString;
+    url: z.ZodURL;
+    width: z.ZodNumber;
+    height: z.ZodNumber;
+    variants: z.ZodArray<z.ZodObject<{
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+        url: z.ZodURL;
+    }, z.core.$strip>>;
+    placeholder: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type MediaImage = z.infer<typeof mediaImageSchema>;
+/**
+ * `POST /api/v1/uploads/:mediaId/complete` answers with this: the image as it
+ * will appear, not yet attached to anything.
+ *
+ * `expiresAt` is when the server deletes it if it is still unattached
+ * (`MEDIA_UNATTACHED_TTL_HOURS` after the slot was issued). A composer left
+ * open longer than that must upload again.
+ */
+export declare const uploadedMediaSchema: z.ZodObject<{
+    id: z.ZodString;
+    url: z.ZodURL;
+    width: z.ZodNumber;
+    height: z.ZodNumber;
+    variants: z.ZodArray<z.ZodObject<{
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+        url: z.ZodURL;
+    }, z.core.$strip>>;
+    placeholder: z.ZodOptional<z.ZodString>;
+    purpose: z.ZodEnum<{
+        post: "post";
+        avatar: "avatar";
+    }>;
+    expiresAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type UploadedMedia = z.infer<typeof uploadedMediaSchema>;
+//# sourceMappingURL=media.d.ts.map

package/dist/domains/media/media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../../src/domains/media/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,qFAAqF;AACrF,eAAO,MAAM,oBAAoB,6BAA8B,CAAC;AAChE,eAAO,MAAM,kBAAkB;;;EAA+B,CAAC;AAC/D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,iEAK7B,CAAC;AACX,eAAO,MAAM,4BAA4B;;;;;EAAqC,CAAC;AAC/E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,WAAW;;;CAGoC,CAAC;AAE7D,mCAAmC;AACnC,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;iBAO3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;iBAG9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/domains/media/media.js

@@ -0,0 +1,110 @@
+/**
+ * founder-schema — Media: what an uploaded image becomes
+ *
+ * THE PIPELINE, end to end (0.5.0):
+ *
+ *   1. The client shrinks the photo (long edge at most the largest size in
+ *      `MEDIA_SIZES`, WebP or JPEG) and asks for an upload slot:
+ *      `POST /api/v1/uploads/presign` with a purpose, a content type and the
+ *      exact byte count (`uploadPresignBodySchema`).
+ *   2. It PUTs the bytes straight to storage, with the headers it was given.
+ *      Nothing passes through the API server.
+ *   3. It calls `POST /api/v1/uploads/:mediaId/complete`. The server checks the
+ *      file, decodes it fully, applies the photo's rotation, REMOVES EVERY
+ *      PIECE OF METADATA (GPS position, camera, timestamps), re-encodes it as
+ *      WebP at each size in `MEDIA_SIZES`, deletes the raw upload, and answers
+ *      with `uploadedMediaSchema`.
+ *   4. A post (`attachedMediaSchema`) or the avatar (`setAvatarBodySchema`,
+ *      onboarding's `avatarMediaId`) takes the media id. One upload is used
+ *      once, by its owner, for the purpose it was uploaded for.
+ *
+ * What nobody sees: the raw upload. It sits in a folder the CDN cannot reach
+ * and is deleted when processing finishes, or by storage itself after a day.
+ * Only the re-encoded sizes are ever served.
+ *
+ * An image never attached is deleted after `MEDIA_UNATTACHED_TTL_HOURS`; a
+ * deleted post's images, a replaced avatar, and an erased account's images are
+ * deleted from storage by the server, so a copied link stops working.
+ *
+ * @module founder-schema/domains/media
+ */
+import { z } from 'zod';
+import { MEDIA_PLACEHOLDER_MAX } from '../../core/limits.js';
+/** What an upload is for. It decides the sizes made and where it may be attached. */
+export const MEDIA_PURPOSE_VALUES = ['post', 'avatar'];
+export const mediaPurposeSchema = z.enum(MEDIA_PURPOSE_VALUES);
+/**
+ * The content types a member may upload. Every one is decoded and re-encoded
+ * to WebP before anyone sees it, so this list is about what the server can
+ * DECODE safely, not what it serves.
+ *
+ * Not HEIC: an iPhone's photo picker converts HEIC to JPEG for the web, and a
+ * client that shrinks the photo first re-encodes it anyway. SVG never: it is a
+ * document that can carry script, not an image.
+ */
+export const MEDIA_UPLOAD_CONTENT_TYPES = [
+    'image/jpeg',
+    'image/png',
+    'image/webp',
+    'image/gif',
+];
+export const mediaUploadContentTypeSchema = z.enum(MEDIA_UPLOAD_CONTENT_TYPES);
+/**
+ * The sizes each purpose is stored at, smallest first.
+ *
+ *   - post: the LONG edge, aspect kept. 540 for a feed card on a plain screen,
+ *     1080 for the same card on a phone's dense screen, 2048 for the full-screen
+ *     view. An image smaller than a size is never enlarged, so a small image
+ *     has fewer sizes.
+ *   - avatar: a SQUARE, cropped around the most interesting region (usually a
+ *     face). 192 for every small circle (bylines, lists, chat) up to 64 CSS
+ *     pixels on a 3x screen, 512 for a profile header.
+ *
+ * A client shrinks a photo to the largest size here before uploading: anything
+ * bigger is thrown away by the server anyway, and costs the member data.
+ */
+export const MEDIA_SIZES = {
+    post: [540, 1080, 2048],
+    avatar: [192, 512],
+};
+/** One stored size of an image. */
+export const mediaVariantSchema = z.object({
+    width: z.number().int().positive(),
+    height: z.number().int().positive(),
+    url: z.url(),
+});
+/**
+ * A processed image, as every read shows it.
+ *
+ * `variants` is a ready-made `srcset`: smallest first, each with its own pixel
+ * width. `url`, `width` and `height` repeat the largest one, so a client that
+ * ignores `variants` still renders correctly and can reserve the image's box
+ * from the aspect ratio before it loads (no layout shift).
+ *
+ * `placeholder` is a ThumbHash (base64): a ~30 character blurred preview a
+ * client can paint instantly while the image loads.
+ *
+ * URLs point at our media CDN. They come from our own pipeline, never from a
+ * member, so a plain `z.url()`.
+ */
+export const mediaImageSchema = z.object({
+    id: z.string(),
+    url: z.url(),
+    width: z.number().int().positive(),
+    height: z.number().int().positive(),
+    variants: z.array(mediaVariantSchema).min(1).max(MEDIA_SIZES.post.length),
+    placeholder: z.string().max(MEDIA_PLACEHOLDER_MAX).optional(),
+});
+/**
+ * `POST /api/v1/uploads/:mediaId/complete` answers with this: the image as it
+ * will appear, not yet attached to anything.
+ *
+ * `expiresAt` is when the server deletes it if it is still unattached
+ * (`MEDIA_UNATTACHED_TTL_HOURS` after the slot was issued). A composer left
+ * open longer than that must upload again.
+ */
+export const uploadedMediaSchema = mediaImageSchema.extend({
+    purpose: mediaPurposeSchema,
+    expiresAt: z.iso.datetime(),
+});
+//# sourceMappingURL=media.js.map

package/dist/domains/media/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../../src/domains/media/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,qFAAqF;AACrF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAU,CAAC;AAChE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAG/D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,WAAW;CACH,CAAC;AACX,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAG/E;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC;IACvB,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;CACwC,CAAC;AAE7D,mCAAmC;AACnC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;CACb,CAAC,CAAC;AAGH;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;IACzE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;CAC9D,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,MAAM,CAAC;IACzD,OAAO,EAAE,kBAAkB;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — Media: what an uploaded image becomes\n *\n * THE PIPELINE, end to end (0.5.0):\n *\n *   1. The client shrinks the photo (long edge at most the largest size in\n *      `MEDIA_SIZES`, WebP or JPEG) and asks for an upload slot:\n *      `POST /api/v1/uploads/presign` with a purpose, a content type and the\n *      exact byte count (`uploadPresignBodySchema`).\n *   2. It PUTs the bytes straight to storage, with the headers it was given.\n *      Nothing passes through the API server.\n *   3. It calls `POST /api/v1/uploads/:mediaId/complete`. The server checks the\n *      file, decodes it fully, applies the photo's rotation, REMOVES EVERY\n *      PIECE OF METADATA (GPS position, camera, timestamps), re-encodes it as\n *      WebP at each size in `MEDIA_SIZES`, deletes the raw upload, and answers\n *      with `uploadedMediaSchema`.\n *   4. A post (`attachedMediaSchema`) or the avatar (`setAvatarBodySchema`,\n *      onboarding's `avatarMediaId`) takes the media id. One upload is used\n *      once, by its owner, for the purpose it was uploaded for.\n *\n * What nobody sees: the raw upload. It sits in a folder the CDN cannot reach\n * and is deleted when processing finishes, or by storage itself after a day.\n * Only the re-encoded sizes are ever served.\n *\n * An image never attached is deleted after `MEDIA_UNATTACHED_TTL_HOURS`; a\n * deleted post's images, a replaced avatar, and an erased account's images are\n * deleted from storage by the server, so a copied link stops working.\n *\n * @module founder-schema/domains/media\n */\n\nimport { z } from 'zod';\nimport { MEDIA_PLACEHOLDER_MAX } from '../../core/limits.js';\n\n/** What an upload is for. It decides the sizes made and where it may be attached. */\nexport const MEDIA_PURPOSE_VALUES = ['post', 'avatar'] as const;\nexport const mediaPurposeSchema = z.enum(MEDIA_PURPOSE_VALUES);\nexport type MediaPurpose = z.infer<typeof mediaPurposeSchema>;\n\n/**\n * The content types a member may upload. Every one is decoded and re-encoded\n * to WebP before anyone sees it, so this list is about what the server can\n * DECODE safely, not what it serves.\n *\n * Not HEIC: an iPhone's photo picker converts HEIC to JPEG for the web, and a\n * client that shrinks the photo first re-encodes it anyway. SVG never: it is a\n * document that can carry script, not an image.\n */\nexport const MEDIA_UPLOAD_CONTENT_TYPES = [\n  'image/jpeg',\n  'image/png',\n  'image/webp',\n  'image/gif',\n] as const;\nexport const mediaUploadContentTypeSchema = z.enum(MEDIA_UPLOAD_CONTENT_TYPES);\nexport type MediaUploadContentType = z.infer<typeof mediaUploadContentTypeSchema>;\n\n/**\n * The sizes each purpose is stored at, smallest first.\n *\n *   - post: the LONG edge, aspect kept. 540 for a feed card on a plain screen,\n *     1080 for the same card on a phone's dense screen, 2048 for the full-screen\n *     view. An image smaller than a size is never enlarged, so a small image\n *     has fewer sizes.\n *   - avatar: a SQUARE, cropped around the most interesting region (usually a\n *     face). 192 for every small circle (bylines, lists, chat) up to 64 CSS\n *     pixels on a 3x screen, 512 for a profile header.\n *\n * A client shrinks a photo to the largest size here before uploading: anything\n * bigger is thrown away by the server anyway, and costs the member data.\n */\nexport const MEDIA_SIZES = {\n  post: [540, 1080, 2048],\n  avatar: [192, 512],\n} as const satisfies Record<MediaPurpose, readonly number[]>;\n\n/** One stored size of an image. */\nexport const mediaVariantSchema = z.object({\n  width: z.number().int().positive(),\n  height: z.number().int().positive(),\n  url: z.url(),\n});\nexport type MediaVariant = z.infer<typeof mediaVariantSchema>;\n\n/**\n * A processed image, as every read shows it.\n *\n * `variants` is a ready-made `srcset`: smallest first, each with its own pixel\n * width. `url`, `width` and `height` repeat the largest one, so a client that\n * ignores `variants` still renders correctly and can reserve the image's box\n * from the aspect ratio before it loads (no layout shift).\n *\n * `placeholder` is a ThumbHash (base64): a ~30 character blurred preview a\n * client can paint instantly while the image loads.\n *\n * URLs point at our media CDN. They come from our own pipeline, never from a\n * member, so a plain `z.url()`.\n */\nexport const mediaImageSchema = z.object({\n  id: z.string(),\n  url: z.url(),\n  width: z.number().int().positive(),\n  height: z.number().int().positive(),\n  variants: z.array(mediaVariantSchema).min(1).max(MEDIA_SIZES.post.length),\n  placeholder: z.string().max(MEDIA_PLACEHOLDER_MAX).optional(),\n});\nexport type MediaImage = z.infer<typeof mediaImageSchema>;\n\n/**\n * `POST /api/v1/uploads/:mediaId/complete` answers with this: the image as it\n * will appear, not yet attached to anything.\n *\n * `expiresAt` is when the server deletes it if it is still unattached\n * (`MEDIA_UNATTACHED_TTL_HOURS` after the slot was issued). A composer left\n * open longer than that must upload again.\n */\nexport const uploadedMediaSchema = mediaImageSchema.extend({\n  purpose: mediaPurposeSchema,\n  expiresAt: z.iso.datetime(),\n});\nexport type UploadedMedia = z.infer<typeof uploadedMediaSchema>;\n"]}

package/dist/domains/onboarding/onboarding.d.ts

@@ -274,7 +274,7 @@ export declare const onboardingFormSchema: z.ZodObject<{
     dateOfBirth: z.ZodString;
     headline: z.ZodString;
     about: z.ZodString;
-    avatarUploadKey: z.ZodNullable<z.ZodString>;
+    avatarMediaId: z.ZodNullable<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
     skills: z.ZodArray<z.ZodEnum<{
         engineering: "engineering";
         product: "product";
@@ -442,8 +442,8 @@ export declare const EMPTY_ONBOARDING_VENTURE: OnboardingForm['venture'];
  * Every field is checked against its own vocabulary and cut to its own limit;
  * one that does not fit becomes "not answered" (`''`, `null`, `[]`) and the
  * rest of the draft survives. Never coerced into a different answer: a value
- * outside a vocabulary is dropped, not mapped to the nearest one. A photo key
- * is never restored (see `avatarUploadKey`), and agreement only counts for the
+ * outside a vocabulary is dropped, not mapped to the nearest one. A photo
+ * is never restored (see `avatarMediaId`), and agreement only counts for the
  * CURRENT guidelines.
  *
  * It fills in no answer the member did not give: a blank country stays blank.
@@ -478,7 +478,7 @@ export declare const completeOnboardingBodySchema: z.ZodObject<{
     dateOfBirth: z.ZodString;
     headline: z.ZodPreprocess<z.ZodOptional<z.ZodString>, unknown>;
     about: z.ZodPreprocess<z.ZodOptional<z.ZodString>, unknown>;
-    avatarUploadKey: z.ZodOptional<z.ZodString>;
+    avatarMediaId: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
     phone: z.ZodString;
     links: z.ZodOptional<z.ZodObject<{
         linkedin: z.ZodOptional<z.ZodURL>;
@@ -684,7 +684,7 @@ export declare const ONBOARDING_STEP_SCHEMAS: {
             prefer_not_to_say: "prefer_not_to_say";
         }>;
         dateOfBirth: z.ZodString;
-        avatarUploadKey: z.ZodOptional<z.ZodString>;
+        avatarMediaId: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
     }, z.core.$strip>;
     readonly contact: z.ZodObject<{
         links: z.ZodOptional<z.ZodObject<{
@@ -898,12 +898,12 @@ export declare const onboardingDraftKeySchema: z.ZodEnum<{
     interests: "interests";
     gender: "gender";
     dateOfBirth: "dateOfBirth";
-    avatarUploadKey: "avatarUploadKey";
+    avatarMediaId: "avatarMediaId";
     phone: "phone";
     businessType: "businessType";
     guidelinesVersion: "guidelinesVersion";
 }>;
-export declare const ONBOARDING_DRAFT_KEYS: ("location" | "about" | "displayName" | "headline" | "venture" | "skills" | "goals" | "links" | "interests" | "gender" | "dateOfBirth" | "avatarUploadKey" | "phone" | "businessType" | "guidelinesVersion")[];
+export declare const ONBOARDING_DRAFT_KEYS: ("location" | "about" | "displayName" | "headline" | "venture" | "skills" | "goals" | "links" | "interests" | "gender" | "dateOfBirth" | "avatarMediaId" | "phone" | "businessType" | "guidelinesVersion")[];
 export type OnboardingDraftKey = z.infer<typeof onboardingDraftKeySchema>;
 /**
  * Where the member got to, kept in its own collection, separate from the
@@ -932,7 +932,7 @@ export declare const onboardingDraftSchema: z.ZodRecord<z.ZodEnum<{
     interests: "interests";
     gender: "gender";
     dateOfBirth: "dateOfBirth";
-    avatarUploadKey: "avatarUploadKey";
+    avatarMediaId: "avatarMediaId";
     phone: "phone";
     businessType: "businessType";
     guidelinesVersion: "guidelinesVersion";
@@ -952,7 +952,7 @@ export declare const onboardingProgressSchema: z.ZodObject<{
         interests: "interests";
         gender: "gender";
         dateOfBirth: "dateOfBirth";
-        avatarUploadKey: "avatarUploadKey";
+        avatarMediaId: "avatarMediaId";
         phone: "phone";
         businessType: "businessType";
         guidelinesVersion: "guidelinesVersion";
@@ -978,7 +978,7 @@ export declare const onboardingProgressUpdateSchema: z.ZodObject<{
         interests: "interests";
         gender: "gender";
         dateOfBirth: "dateOfBirth";
-        avatarUploadKey: "avatarUploadKey";
+        avatarMediaId: "avatarMediaId";
         phone: "phone";
         businessType: "businessType";
         guidelinesVersion: "guidelinesVersion";
@@ -1008,7 +1008,7 @@ export declare const onboardingStatusSchema: z.ZodObject<{
         interests: "interests";
         gender: "gender";
         dateOfBirth: "dateOfBirth";
-        avatarUploadKey: "avatarUploadKey";
+        avatarMediaId: "avatarMediaId";
         phone: "phone";
         businessType: "businessType";
         guidelinesVersion: "guidelinesVersion";

package/dist/domains/onboarding/onboarding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../../../src/domains/onboarding/onboarding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmCxB;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,KAAK,CAAC;AAChC,qEAAqE;AACrE,eAAO,MAAM,aAAa,MAAM,CAAC;AAEjC;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG,MAAM,CAgB1E;AAED,4DAA4D;AAC5D,eAAO,MAAM,aAAa,aAGqC,CAAC;AAChE,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAYpD;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,aAG2D,CAAC;AAC1F,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAI5D,eAAO,MAAM,oBAAoB,2CAA4C,CAAC;AAC9E,eAAO,MAAM,kBAAkB;;;;EAA+B,CAAC;AAC/D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,YAAY,iiCA6Ef,CAAC;AACX,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAuB,CAAC;AAChD,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,yEAOtB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,gBAAgB,CAAC;IACtB,oFAAoF;IACpF,QAAQ,EAAE,mBAAmB,gBAAgB,EAAE,CAAC;IAChD,MAAM,EAAE,SAAS,KAAK,EAAE,CAAC;CAC1B;AAQD,eAAO,MAAM,gBAAgB,EAAE,SAAS,aAAa,EAmFpD,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa,IAAI,CAAC;AAC/B,eAAO,MAAM,aAAa,KAAK,CAAC;AAIhC;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,8FAQvB,CAAC;AACX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAItE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kBAAkB,EAAG,YAAqB,CAAC;AACxD,eAAO,MAAM,uBAAuB,4BAElC,CAAC;AAIH;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,6EAA6E;AAC7E,eAAO,MAAM,oBAAoB,QAA+B,CAAC;AAIjE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqD/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAqFlE,mDAAmD;AACnD,eAAO,MAAM,wBAAwB,EAAE,cAAc,CAAC,SAAS,CAM9D,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAGlE;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyDvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,8DAA8D;AAC9D,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAIvF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmBuB,CAAC;AAE5D,wFAAwF;AACxF,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,iBAAiB,IAAI,CAAC,CAAC,KAAK,CACnE,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC,CAAC,CACpC,CAAC;AAEF,gCAAgC;AAChC,MAAM,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,sFAAsF;IACtF,GAAG,EAAE,iBAAiB,CAAC;IACvB,sEAAsE;IACtE,QAAQ,EAAE,oBAAoB,iBAAiB,QAAQ,CAAC;IACxD,OAAO,EAAE,oBAAoB,iBAAiB,OAAO,CAAC;IACtD,4DAA4D;IAC5D,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IACnC;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,eAAO,MAAM,wBAAwB,EAAE,SAAS,oBAAoB,EAWnE,CAAC;AAEF,eAAO,MAAM,sBAAsB,QAAkC,CAAC;AAEtE,wEAAwE;AACxE,eAAO,MAAM,sBAAsB,EAAE,SAAS,CAAC,SAAS,eAAe,EAAE,CAAC,EAC3B,CAAC;AAEhD,kFAAkF;AAClF,eAAO,MAAM,gCAAgC;;;iBAG3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAI1F;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;EAA+B,CAAC;AACrE,eAAO,MAAM,qBAAqB,gNAAmC,CAAC;AACtE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;mCAAyD,CAAC;AAC5F,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;iBAGnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;iBAGzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;iBAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../../../src/domains/onboarding/onboarding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmCxB;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,KAAK,CAAC;AAChC,qEAAqE;AACrE,eAAO,MAAM,aAAa,MAAM,CAAC;AAEjC;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG,MAAM,CAgB1E;AAED,4DAA4D;AAC5D,eAAO,MAAM,aAAa,aAGqC,CAAC;AAChE,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAYpD;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,aAG2D,CAAC;AAC1F,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAI5D,eAAO,MAAM,oBAAoB,2CAA4C,CAAC;AAC9E,eAAO,MAAM,kBAAkB;;;;EAA+B,CAAC;AAC/D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,YAAY,iiCA6Ef,CAAC;AACX,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAuB,CAAC;AAChD,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,yEAOtB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,gBAAgB,CAAC;IACtB,oFAAoF;IACpF,QAAQ,EAAE,mBAAmB,gBAAgB,EAAE,CAAC;IAChD,MAAM,EAAE,SAAS,KAAK,EAAE,CAAC;CAC1B;AAQD,eAAO,MAAM,gBAAgB,EAAE,SAAS,aAAa,EAmFpD,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa,IAAI,CAAC;AAC/B,eAAO,MAAM,aAAa,KAAK,CAAC;AAIhC;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,8FAQvB,CAAC;AACX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAItE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kBAAkB,EAAG,YAAqB,CAAC;AACxD,eAAO,MAAM,uBAAuB,4BAElC,CAAC;AAIH;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,6EAA6E;AAC7E,eAAO,MAAM,oBAAoB,QAA+B,CAAC;AAIjE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsD/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAqFlE,mDAAmD;AACnD,eAAO,MAAM,wBAAwB,EAAE,cAAc,CAAC,SAAS,CAM9D,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAGlE;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyDvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,8DAA8D;AAC9D,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAIvF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmBuB,CAAC;AAE5D,wFAAwF;AACxF,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,iBAAiB,IAAI,CAAC,CAAC,KAAK,CACnE,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC,CAAC,CACpC,CAAC;AAEF,gCAAgC;AAChC,MAAM,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,sFAAsF;IACtF,GAAG,EAAE,iBAAiB,CAAC;IACvB,sEAAsE;IACtE,QAAQ,EAAE,oBAAoB,iBAAiB,QAAQ,CAAC;IACxD,OAAO,EAAE,oBAAoB,iBAAiB,OAAO,CAAC;IACtD,4DAA4D;IAC5D,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IACnC;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,eAAO,MAAM,wBAAwB,EAAE,SAAS,oBAAoB,EAWnE,CAAC;AAEF,eAAO,MAAM,sBAAsB,QAAkC,CAAC;AAEtE,wEAAwE;AACxE,eAAO,MAAM,sBAAsB,EAAE,SAAS,CAAC,SAAS,eAAe,EAAE,CAAC,EAC3B,CAAC;AAEhD,kFAAkF;AAClF,eAAO,MAAM,gCAAgC;;;iBAG3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAI1F;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;EAA+B,CAAC;AACrE,eAAO,MAAM,qBAAqB,8MAAmC,CAAC;AACtE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;mCAAyD,CAAC;AAC5F,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;iBAGnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;iBAGzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;iBAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/domains/onboarding/onboarding.js

@@ -24,11 +24,10 @@
  * @module founder-schema/domains/onboarding
  */
 import { z } from 'zod';
-import { GENDER_VALUES, GOAL_VALUES, genderSchema, goalSchema, INDUSTRY_VALUES, industrySchema, locationSchema, optionalTrimmedString, phoneSchema, SKILL_VALUES, STARTUP_STAGE_VALUES, skillSchema, startupStageSchema, } from '../../core/common.js';
+import { GENDER_VALUES, GOAL_VALUES, genderSchema, goalSchema, INDUSTRY_VALUES, industrySchema, locationSchema, objectIdSchema, optionalTrimmedString, phoneSchema, SKILL_VALUES, STARTUP_STAGE_VALUES, skillSchema, startupStageSchema, } from '../../core/common.js';
 import { ABOUT_MAX, CITY_MAX, COUNTRY_MAX, DISPLAY_NAME_MAX, GOALS_MIN, HEADLINE_MAX, LINK_URL_MAX, SKILLS_MAX, STATE_MAX, TEAM_SIZE_MAX, VENTURE_NAME_MAX, } from '../../core/limits.js';
 import { VALIDATION_MESSAGE } from '../../core/validation.js';
 import { founderLinksSchema, ventureSchema } from '../profile/founder-profile.js';
-import { uploadKeySchema } from '../uploads/uploads.js';
 // ─── Age ─────────────────────────────────────────────────────────────────────
 /**
  * 18, ruled by the user 2026-09-21. Under-18 would pull in parental-consent
@@ -399,12 +398,13 @@ export const onboardingFormSchema = z.object({
     headline: z.string().max(HEADLINE_MAX),
     about: z.string().max(ABOUT_MAX),
     /**
-     * Allowed as a key, and NEVER restored by `readOnboardingDraft`: an upload
-     * not attached within a day is deleted by the storage lifecycle rule, so a
-     * key from an older draft would fail at Finish, on the last screen, about a
-     * photo picked days ago. Clients hold it for the visit and do not save it.
+     * The completed upload's id (`media`, purpose `avatar`). Allowed in the form,
+     * and NEVER restored by `readOnboardingDraft`: an upload not attached within
+     * `MEDIA_UNATTACHED_TTL_HOURS` is deleted, so an id from an older draft would
+     * fail at Finish, on the last screen, about a photo picked days ago. Clients
+     * hold it for the visit and do not save it.
      */
-    avatarUploadKey: uploadKeySchema.nullable(),
+    avatarMediaId: objectIdSchema.nullable(),
     skills: z.array(skillSchema).max(SKILLS_MAX),
     /** As typed; the finish body takes `phoneSchema`'s ten digits. */
     phone: z.string(),
@@ -476,7 +476,7 @@ const draftReaderSchema = z.object({
     dateOfBirth: draftText(DATE_INPUT_MAX),
     headline: draftText(HEADLINE_MAX),
     about: draftText(ABOUT_MAX),
-    avatarUploadKey: z
+    avatarMediaId: z
         .unknown()
         .optional()
         .transform(() => null),
@@ -525,8 +525,8 @@ export const EMPTY_ONBOARDING_VENTURE = {
  * Every field is checked against its own vocabulary and cut to its own limit;
  * one that does not fit becomes "not answered" (`''`, `null`, `[]`) and the
  * rest of the draft survives. Never coerced into a different answer: a value
- * outside a vocabulary is dropped, not mapped to the nearest one. A photo key
- * is never restored (see `avatarUploadKey`), and agreement only counts for the
+ * outside a vocabulary is dropped, not mapped to the nearest one. A photo
+ * is never restored (see `avatarMediaId`), and agreement only counts for the
  * CURRENT guidelines.
  *
  * It fills in no answer the member did not give: a blank country stays blank.
@@ -578,11 +578,11 @@ export const completeOnboardingBodySchema = z.object({
     headline: optionalTrimmedString(HEADLINE_MAX),
     about: optionalTrimmedString(ABOUT_MAX),
     /**
-     * The key the presign handed out, in the minted format. It was a bare
-     * string until 0.2.0, so `'../../etc/passwd'` passed this schema and only
-     * the server's own commit check stood in the way.
+     * A completed avatar upload (`media`, purpose `avatar`). The server attaches
+     * it inside the same transaction that creates the profile, so a refused
+     * Finish leaves the upload unattached (and swept), never half-used.
      */
-    avatarUploadKey: uploadKeySchema.optional(),
+    avatarMediaId: objectIdSchema.optional(),
     phone: phoneSchema,
     links: contactLinksSchema.optional(),
     /** Absent when the member skipped the step or refused the permission. */
@@ -629,7 +629,7 @@ export const ONBOARDING_STEP_SCHEMAS = {
         dateOfBirth: true,
         headline: true,
         about: true,
-        avatarUploadKey: true,
+        avatarMediaId: true,
         // Here because ruling D8 folded the design's orphan "title, achievements,
         // skills" screen into step one. It was on no step until 0.2.0, which made
         // it the one finish field no step owned.