founder-schema 0.8.0 → 0.10.0

package/dist/core/errors.js

@@ -149,6 +149,59 @@ export const API_ERROR_CODE_VALUES = [
     'PRODUCT_OWN_TEAM',
     /** Confirming as a tester someone who has given this product no feedback. */
     'TESTER_NOT_ELIGIBLE',
+    // ── Communities (0.9.0) ──
+    /**
+     * Something in a community you can SEE but must join first: taking part in
+     * it (posting into it, commenting, reacting, voting, saving, reporting,
+     * editing), or reading a private community's feed, pinned posts or
+     * members. Join (public) or request to join (private). 403. What you cannot
+     * see at all answers NOT_FOUND, as content of a private or hidden community
+     * looked up by its id does.
+     */
+    'COMMUNITY_JOIN_REQUIRED',
+    /** A live community already has this name (case and spacing ignored). 409. */
+    'COMMUNITY_NAME_TAKEN',
+    /** Joining, requesting or inviting someone who is already a member, has requested or is invited. 409. */
+    'COMMUNITY_ALREADY_MEMBER',
+    /**
+     * Inviting someone who cannot join: not finished onboarding, paused,
+     * suspended or deleted. One code for all four, so it reveals none of them.
+     */
+    'COMMUNITY_MEMBER_NOT_INVITABLE',
+    /** Inviting someone banned from this community. Unban them first. */
+    'COMMUNITY_MEMBER_BANNED',
+    /** Inviting into a public community: anyone can join it, share its link instead. */
+    'COMMUNITY_INVITE_NOT_NEEDED',
+    /**
+     * The last admin leaving, stepping down or being removed, or deleting their
+     * account while someone else could be made admin. Make someone else admin
+     * first. On an account deletion, `details.communities` names them.
+     */
+    'COMMUNITY_LAST_ADMIN',
+    /**
+     * The community is archived (read-only): no new posts, polls, comments,
+     * reactions, votes, saves, reports, edits, joins, approvals, invitations
+     * or pins. Its moderators may still hide what breaks its rules.
+     */
+    'COMMUNITY_ARCHIVED',
+    /**
+     * A type change that exposes what was already posted (toward public, or
+     * hidden to private) sent without `confirmExposure: true`.
+     */
+    'COMMUNITY_EXPOSURE_UNCONFIRMED',
+    /** `COMMUNITY_PINS_MAX` announcements are pinned already. Unpin one first. */
+    'COMMUNITY_PINS_FULL',
+    /**
+     * Notifying every member again within `COMMUNITY_ANNOUNCE_INTERVAL_MS`.
+     * `details.nextAt` says when it is allowed. Pinning without notifying works.
+     */
+    'COMMUNITY_ANNOUNCE_TOO_SOON',
+    /** Reposting a post or poll that lives in a community: community content stays in it. */
+    'COMMUNITY_CONTENT_NOT_REPOSTABLE',
+    /** `COMMUNITY_SUGGESTIONS_OPEN_MAX` suggestions are already waiting for review. */
+    'COMMUNITY_SUGGESTIONS_FULL',
+    /** Approving or declining a suggestion that was already decided. 409. */
+    'COMMUNITY_SUGGESTION_DECIDED',
     // ── Reviews ──
     /** One review per member per product. Edit yours instead. */
     'REVIEW_EXISTS',
@@ -184,6 +237,10 @@ export const API_ERROR_CODE_VALUES = [
     'CANNOT_CHANGE_OWN_ROLES',
     /** Granting or revoking a role the role you act as may not touch. */
     'ROLE_NOT_GRANTABLE',
+    /** Changing your own capabilities (0.9.0). Someone else has to. */
+    'CANNOT_CHANGE_OWN_CAPABILITIES',
+    /** Granting or revoking a capability the role you act as may not touch (0.9.0). */
+    'CAPABILITY_NOT_GRANTABLE',
     // ── Support ──
     /** The ticket holds `TICKET_MESSAGES_MAX` messages. Open a new one. */
     'TICKET_FULL',

package/dist/core/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,iBAAiB;IACjB,gFAAgF;IAChF,gBAAgB;IAChB,yEAAyE;IACzE,kBAAkB;IAClB,2EAA2E;IAC3E,WAAW;IACX,wEAAwE;IACxE,UAAU;IACV,uEAAuE;IACvE,cAAc;IACd,2EAA2E;IAC3E,qBAAqB;IAErB,oBAAoB;IACpB,4BAA4B;IAC5B,cAAc;IACd,sDAAsD;IACtD,eAAe;IACf,qEAAqE;IACrE,eAAe;IACf,oEAAoE;IACpE,qBAAqB;IACrB,6CAA6C;IAC7C,WAAW;IAEX,mBAAmB;IACnB,mFAAmF;IACnF,uBAAuB;IACvB,gFAAgF;IAChF,mBAAmB;IACnB,uEAAuE;IACvE,WAAW;IAEX,kDAAkD;IAClD;;;;;OAKG;IACH,uBAAuB;IACvB,sCAAsC;IACtC,kBAAkB;IAClB;;;OAGG;IACH,mBAAmB;IACnB,2EAA2E;IAC3E,qBAAqB;IACrB;;;;OAIG;IACH,mBAAmB;IACnB,0FAA0F;IAC1F,mBAAmB;IACnB,mEAAmE;IACnE,wBAAwB;IACxB,sEAAsE;IACtE,sBAAsB;IACtB,wFAAwF;IACxF,eAAe;IAEf,iBAAiB;IACjB,+CAA+C;IAC/C,oBAAoB;IACpB,iEAAiE;IACjE,mBAAmB;IACnB,kDAAkD;IAClD,aAAa;IACb,oFAAoF;IACpF,qBAAqB;IACrB,qDAAqD;IACrD,gBAAgB;IAChB,8FAA8F;IAC9F,mBAAmB;IACnB;;;;OAIG;IACH,uBAAuB;IACvB,+CAA+C;IAC/C,mBAAmB;IACnB,8DAA8D;IAC9D,wBAAwB;IACxB,kFAAkF;IAClF,kBAAkB;IAElB,iBAAiB;IACjB,qFAAqF;IACrF,uBAAuB;IACvB;;;OAGG;IACH,sBAAsB;IACtB;;;;OAIG;IACH,kBAAkB;IAClB,gFAAgF;IAChF,mBAAmB;IACnB,sEAAsE;IACtE,wBAAwB;IACxB;;;OAGG;IACH,8BAA8B;IAC9B,8FAA8F;IAC9F,qBAAqB;IACrB;;;OAGG;IACH,6BAA6B;IAC7B,yFAAyF;IACzF,kBAAkB;IAClB,6EAA6E;IAC7E,qBAAqB;IAErB,gBAAgB;IAChB,6DAA6D;IAC7D,eAAe;IACf,sCAAsC;IACtC,iBAAiB;IAEjB,mBAAmB;IACnB;;;OAGG;IACH,2BAA2B;IAE3B,aAAa;IACb,4CAA4C;IAC5C,gBAAgB;IAEhB,oBAAoB;IACpB,qFAAqF;IACrF,mBAAmB;IAEnB,2BAA2B;IAC3B;;;OAGG;IACH,eAAe;IACf,4EAA4E;IAC5E,cAAc;IACd,8DAA8D;IAC9D,kBAAkB;IAClB,4EAA4E;IAC5E,gBAAgB;IAChB,0EAA0E;IAC1E,aAAa;IACb,oDAAoD;IACpD,yBAAyB;IACzB,qEAAqE;IACrE,oBAAoB;IAEpB,gBAAgB;IAChB,uEAAuE;IACvE,aAAa;IACb,0EAA0E;IAC1E,oBAAoB;CACZ,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAGhE,4DAA4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC","sourcesContent":["/**\n * founder-schema — Every error code the API answers with\n *\n * THE CODE IS WHAT A CLIENT ACTS ON; the `message` beside it is English for\n * logs and for a client too old to know the code. A client words each code in\n * the member's language, and a test on the web side asserts every value here\n * has a message in every locale it ships.\n *\n * Before 0.2.0 the backend kept this list to itself, and every domain refusal\n * (a closed poll, a reply to a reply, the edit window) went out as\n * `VALIDATION_ERROR` with an English sentence, so the only way for a client to\n * tell them apart was to match on the wording.\n *\n * WHEN TO USE WHICH:\n *   - A request that does not match its schema: `VALIDATION_ERROR`, with every\n *     problem in `error.details.issues`.\n *   - A well-formed request the current STATE of things refuses: its own code\n *     below. These carry no issues; the code says it all.\n *\n * ⚠ Append freely; remove deliberately. A code removed here that an older\n * server still sends fails the client's parse of the error envelope.\n *\n * @module founder-schema/core/errors\n */\n\nimport { z } from 'zod';\n\n/**\n * As a tuple, the way `GENDER_VALUES` is, so a consumer can iterate it (a\n * translation-coverage test does exactly that) and TypeScript keeps the union.\n */\nexport const API_ERROR_CODE_VALUES = [\n  // ── Anything ──\n  /** A bug or an outage on our side. The message says nothing more on purpose. */\n  'INTERNAL_ERROR',\n  /** The request did not match its schema. `details.issues` says where. */\n  'VALIDATION_ERROR',\n  /** No such thing, or not one you may see. Deliberately the same answer. */\n  'NOT_FOUND',\n  /** Two writes raced for something unique; retrying usually succeeds. */\n  'CONFLICT',\n  /** Too many requests from this member or address. Wait, then retry. */\n  'RATE_LIMITED',\n  /** Something we depend on (the chat server) is down or not switched on. */\n  'SERVICE_UNAVAILABLE',\n\n  // ── Who you are ──\n  /** No credential at all. */\n  'UNAUTHORIZED',\n  /** A credential that is not ours, or not readable. */\n  'INVALID_TOKEN',\n  /** A credential that was ours and has expired. Refresh and retry. */\n  'TOKEN_EXPIRED',\n  /** Signed out everywhere, or the account changed. Sign in again. */\n  'SESSION_INVALIDATED',\n  /** Signed in, and not allowed to do this. */\n  'FORBIDDEN',\n\n  // ── Onboarding ──\n  /** Finish onboarding first. The client routes here instead of showing an error. */\n  'ONBOARDING_INCOMPLETE',\n  /** Onboarding is already finished; there is nothing to save or finish again. */\n  'ALREADY_ONBOARDED',\n  /** Under `MIN_AGE_YEARS`. Refused at the draft and again at finish. */\n  'UNDER_AGE',\n\n  // ── Uploads: completing one, and attaching it ──\n  /**\n   * Not an upload of yours, not processed yet, already attached somewhere, or\n   * for the other purpose (an avatar upload on a post). One code for all of\n   * them on purpose: telling \"someone else's\" apart from \"does not exist\" would\n   * let a caller probe other members' media ids.\n   */\n  'UPLOAD_NOT_ATTACHABLE',\n  /** Larger than `UPLOAD_MAX_BYTES`. */\n  'UPLOAD_TOO_LARGE',\n  /**\n   * Not one of the image types this product accepts (by the file's own bytes,\n   * whatever its name or declared type), or not an image at all.\n   */\n  'UPLOAD_WRONG_TYPE',\n  /** Completed before the file reached storage: upload it, then complete. */\n  'UPLOAD_NOT_RECEIVED',\n  /**\n   * Another request is processing this upload right now (a retry or a double\n   * tap). Nothing is wrong: complete again in a moment and it answers with\n   * the image. 409.\n   */\n  'UPLOAD_PROCESSING',\n  /** A JPEG, PNG, WebP or GIF by its bytes that cannot be decoded: truncated or corrupt. */\n  'UPLOAD_UNREADABLE',\n  /** More than `MEDIA_MAX_INPUT_PIXELS`; refused before decoding. */\n  'UPLOAD_TOO_MANY_PIXELS',\n  /** `MEDIA_PENDING_MAX` uploads are already waiting to be attached. */\n  'UPLOAD_LIMIT_REACHED',\n  /** Discarding an upload that is attached: remove it from its post or avatar instead. */\n  'UPLOAD_IN_USE',\n\n  // ── The feed ──\n  /** The post is older than `EDIT_WINDOW_MS`. */\n  'EDIT_WINDOW_CLOSED',\n  /** A poll is never editable: people have already voted on it. */\n  'POLL_NOT_EDITABLE',\n  /** The poll has closed, by the server's clock. */\n  'POLL_CLOSED',\n  /** No option, several on a single-choice poll, or an option that does not exist. */\n  'POLL_CHOICE_INVALID',\n  /** A reply to a reply. One level of nesting only. */\n  'REPLY_TOO_DEEP',\n  /** Reporting your own post, poll or comment (or, since 0.6.0, your own product or review). */\n  'CANNOT_REPORT_OWN',\n  /**\n   * Marking a comment \"this helped\" that is not feedback on your product: the\n   * post is not tagged with a product you are on, or the comment is your own\n   * team's.\n   */\n  'FEEDBACK_NOT_MARKABLE',\n  /** Reposting your own post or poll (0.8.0). */\n  'CANNOT_REPOST_OWN',\n  /** Reposting a repost (0.8.0): share the original instead. */\n  'CANNOT_REPOST_A_REPOST',\n  /** You already have an active repost of this item (0.8.0). Undo it first. 409. */\n  'ALREADY_REPOSTED',\n\n  // ── Products ──\n  /** Founders own at most `PRODUCTS_OWNED_MAX` products. Delete one to add another. */\n  'PRODUCT_LIMIT_REACHED',\n  /**\n   * Listing a product that is not ready for Discover, or removing what keeps a\n   * listed one ready. `details.missing`: some of `logo`, `tagline`, `screenshot`.\n   */\n  'PRODUCT_NOT_LISTABLE',\n  /**\n   * The product is archived and frozen until its owner restores it: no new\n   * posts about it, reviews, upvotes, replies, helpful marks, testers or\n   * invitations.\n   */\n  'PRODUCT_ARCHIVED',\n  /** Tagging a post with, or acting for, a product you are not on the team of. */\n  'PRODUCT_NOT_YOURS',\n  /** Inviting someone who is already on the team or already invited. */\n  'PRODUCT_ALREADY_MEMBER',\n  /**\n   * Inviting someone who cannot join a team: not finished onboarding, paused,\n   * suspended or deleted. One code for all four, so it reveals none of them.\n   */\n  'PRODUCT_MEMBER_NOT_INVITABLE',\n  /** Handing over to, or re-roling, someone who is not on the team (or invited, for a role). */\n  'PRODUCT_NOT_ON_TEAM',\n  /**\n   * The owner leaving, being removed, or having their role changed. Ownership\n   * moves only by handing the product to someone first.\n   */\n  'PRODUCT_OWNER_MUST_TRANSFER',\n  /** Upvoting, reviewing or confirming yourself as a tester of your own team's product. */\n  'PRODUCT_OWN_TEAM',\n  /** Confirming as a tester someone who has given this product no feedback. */\n  'TESTER_NOT_ELIGIBLE',\n\n  // ── Reviews ──\n  /** One review per member per product. Edit yours instead. */\n  'REVIEW_EXISTS',\n  /** Voting your own review helpful. */\n  'REVIEW_OWN_VOTE',\n\n  // ── Moderation ──\n  /**\n   * A decision that does not apply to that kind of thing: removing a product\n   * (staff hide one, never delete it). `MODERATION_ACTIONS_BY_TARGET_KIND`.\n   */\n  'MODERATION_ACTION_INVALID',\n\n  // ── Chat ──\n  /** Opening a conversation with yourself. */\n  'CHAT_WITH_SELF',\n\n  // ── The account ──\n  /** Staff suspended this account: nothing in the product works until it is lifted. */\n  'ACCOUNT_SUSPENDED',\n\n  // ── Roles and the MPIN ──\n  /**\n   * Switching to a role this person does not hold (or no longer holds), or\n   * setting an MPIN while holding no staff role at all.\n   */\n  'ROLE_NOT_HELD',\n  /** A staff role needs an MPIN, and none has been set yet. Set one first. */\n  'MPIN_NOT_SET',\n  /** An MPIN is set once; changing it needs the current one. */\n  'MPIN_ALREADY_SET',\n  /** The MPIN is wrong. `details.attemptsLeft` says how many tries remain. */\n  'MPIN_INCORRECT',\n  /** Too many wrong MPINs. `details.lockedUntil` says when to try again. */\n  'MPIN_LOCKED',\n  /** Changing your own roles. Someone else has to. */\n  'CANNOT_CHANGE_OWN_ROLES',\n  /** Granting or revoking a role the role you act as may not touch. */\n  'ROLE_NOT_GRANTABLE',\n\n  // ── Support ──\n  /** The ticket holds `TICKET_MESSAGES_MAX` messages. Open a new one. */\n  'TICKET_FULL',\n  /** The team keeps `SAVED_REPLIES_MAX` saved replies. Delete one first. */\n  'SAVED_REPLIES_FULL',\n] as const;\n\nexport const apiErrorCodeSchema = z.enum(API_ERROR_CODE_VALUES);\nexport type ApiErrorCode = z.infer<typeof apiErrorCodeSchema>;\n\n/** The same codes by name: `API_ERROR_CODE.POLL_CLOSED`. */\nexport const API_ERROR_CODE = apiErrorCodeSchema.enum;\n"]}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,iBAAiB;IACjB,gFAAgF;IAChF,gBAAgB;IAChB,yEAAyE;IACzE,kBAAkB;IAClB,2EAA2E;IAC3E,WAAW;IACX,wEAAwE;IACxE,UAAU;IACV,uEAAuE;IACvE,cAAc;IACd,2EAA2E;IAC3E,qBAAqB;IAErB,oBAAoB;IACpB,4BAA4B;IAC5B,cAAc;IACd,sDAAsD;IACtD,eAAe;IACf,qEAAqE;IACrE,eAAe;IACf,oEAAoE;IACpE,qBAAqB;IACrB,6CAA6C;IAC7C,WAAW;IAEX,mBAAmB;IACnB,mFAAmF;IACnF,uBAAuB;IACvB,gFAAgF;IAChF,mBAAmB;IACnB,uEAAuE;IACvE,WAAW;IAEX,kDAAkD;IAClD;;;;;OAKG;IACH,uBAAuB;IACvB,sCAAsC;IACtC,kBAAkB;IAClB;;;OAGG;IACH,mBAAmB;IACnB,2EAA2E;IAC3E,qBAAqB;IACrB;;;;OAIG;IACH,mBAAmB;IACnB,0FAA0F;IAC1F,mBAAmB;IACnB,mEAAmE;IACnE,wBAAwB;IACxB,sEAAsE;IACtE,sBAAsB;IACtB,wFAAwF;IACxF,eAAe;IAEf,iBAAiB;IACjB,+CAA+C;IAC/C,oBAAoB;IACpB,iEAAiE;IACjE,mBAAmB;IACnB,kDAAkD;IAClD,aAAa;IACb,oFAAoF;IACpF,qBAAqB;IACrB,qDAAqD;IACrD,gBAAgB;IAChB,8FAA8F;IAC9F,mBAAmB;IACnB;;;;OAIG;IACH,uBAAuB;IACvB,+CAA+C;IAC/C,mBAAmB;IACnB,8DAA8D;IAC9D,wBAAwB;IACxB,kFAAkF;IAClF,kBAAkB;IAElB,iBAAiB;IACjB,qFAAqF;IACrF,uBAAuB;IACvB;;;OAGG;IACH,sBAAsB;IACtB;;;;OAIG;IACH,kBAAkB;IAClB,gFAAgF;IAChF,mBAAmB;IACnB,sEAAsE;IACtE,wBAAwB;IACxB;;;OAGG;IACH,8BAA8B;IAC9B,8FAA8F;IAC9F,qBAAqB;IACrB;;;OAGG;IACH,6BAA6B;IAC7B,yFAAyF;IACzF,kBAAkB;IAClB,6EAA6E;IAC7E,qBAAqB;IAErB,4BAA4B;IAC5B;;;;;;;OAOG;IACH,yBAAyB;IACzB,8EAA8E;IAC9E,sBAAsB;IACtB,yGAAyG;IACzG,0BAA0B;IAC1B;;;OAGG;IACH,gCAAgC;IAChC,qEAAqE;IACrE,yBAAyB;IACzB,oFAAoF;IACpF,6BAA6B;IAC7B;;;;OAIG;IACH,sBAAsB;IACtB;;;;OAIG;IACH,oBAAoB;IACpB;;;OAGG;IACH,gCAAgC;IAChC,8EAA8E;IAC9E,qBAAqB;IACrB;;;OAGG;IACH,6BAA6B;IAC7B,yFAAyF;IACzF,kCAAkC;IAClC,mFAAmF;IACnF,4BAA4B;IAC5B,yEAAyE;IACzE,8BAA8B;IAC9B,gBAAgB;IAChB,6DAA6D;IAC7D,eAAe;IACf,sCAAsC;IACtC,iBAAiB;IAEjB,mBAAmB;IACnB;;;OAGG;IACH,2BAA2B;IAE3B,aAAa;IACb,4CAA4C;IAC5C,gBAAgB;IAEhB,oBAAoB;IACpB,qFAAqF;IACrF,mBAAmB;IAEnB,2BAA2B;IAC3B;;;OAGG;IACH,eAAe;IACf,4EAA4E;IAC5E,cAAc;IACd,8DAA8D;IAC9D,kBAAkB;IAClB,4EAA4E;IAC5E,gBAAgB;IAChB,0EAA0E;IAC1E,aAAa;IACb,oDAAoD;IACpD,yBAAyB;IACzB,qEAAqE;IACrE,oBAAoB;IACpB,mEAAmE;IACnE,gCAAgC;IAChC,mFAAmF;IACnF,0BAA0B;IAE1B,gBAAgB;IAChB,uEAAuE;IACvE,aAAa;IACb,0EAA0E;IAC1E,oBAAoB;CACZ,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAGhE,4DAA4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC","sourcesContent":["/**\n * founder-schema — Every error code the API answers with\n *\n * THE CODE IS WHAT A CLIENT ACTS ON; the `message` beside it is English for\n * logs and for a client too old to know the code. A client words each code in\n * the member's language, and a test on the web side asserts every value here\n * has a message in every locale it ships.\n *\n * Before 0.2.0 the backend kept this list to itself, and every domain refusal\n * (a closed poll, a reply to a reply, the edit window) went out as\n * `VALIDATION_ERROR` with an English sentence, so the only way for a client to\n * tell them apart was to match on the wording.\n *\n * WHEN TO USE WHICH:\n *   - A request that does not match its schema: `VALIDATION_ERROR`, with every\n *     problem in `error.details.issues`.\n *   - A well-formed request the current STATE of things refuses: its own code\n *     below. These carry no issues; the code says it all.\n *\n * ⚠ Append freely; remove deliberately. A code removed here that an older\n * server still sends fails the client's parse of the error envelope.\n *\n * @module founder-schema/core/errors\n */\n\nimport { z } from 'zod';\n\n/**\n * As a tuple, the way `GENDER_VALUES` is, so a consumer can iterate it (a\n * translation-coverage test does exactly that) and TypeScript keeps the union.\n */\nexport const API_ERROR_CODE_VALUES = [\n  // ── Anything ──\n  /** A bug or an outage on our side. The message says nothing more on purpose. */\n  'INTERNAL_ERROR',\n  /** The request did not match its schema. `details.issues` says where. */\n  'VALIDATION_ERROR',\n  /** No such thing, or not one you may see. Deliberately the same answer. */\n  'NOT_FOUND',\n  /** Two writes raced for something unique; retrying usually succeeds. */\n  'CONFLICT',\n  /** Too many requests from this member or address. Wait, then retry. */\n  'RATE_LIMITED',\n  /** Something we depend on (the chat server) is down or not switched on. */\n  'SERVICE_UNAVAILABLE',\n\n  // ── Who you are ──\n  /** No credential at all. */\n  'UNAUTHORIZED',\n  /** A credential that is not ours, or not readable. */\n  'INVALID_TOKEN',\n  /** A credential that was ours and has expired. Refresh and retry. */\n  'TOKEN_EXPIRED',\n  /** Signed out everywhere, or the account changed. Sign in again. */\n  'SESSION_INVALIDATED',\n  /** Signed in, and not allowed to do this. */\n  'FORBIDDEN',\n\n  // ── Onboarding ──\n  /** Finish onboarding first. The client routes here instead of showing an error. */\n  'ONBOARDING_INCOMPLETE',\n  /** Onboarding is already finished; there is nothing to save or finish again. */\n  'ALREADY_ONBOARDED',\n  /** Under `MIN_AGE_YEARS`. Refused at the draft and again at finish. */\n  'UNDER_AGE',\n\n  // ── Uploads: completing one, and attaching it ──\n  /**\n   * Not an upload of yours, not processed yet, already attached somewhere, or\n   * for the other purpose (an avatar upload on a post). One code for all of\n   * them on purpose: telling \"someone else's\" apart from \"does not exist\" would\n   * let a caller probe other members' media ids.\n   */\n  'UPLOAD_NOT_ATTACHABLE',\n  /** Larger than `UPLOAD_MAX_BYTES`. */\n  'UPLOAD_TOO_LARGE',\n  /**\n   * Not one of the image types this product accepts (by the file's own bytes,\n   * whatever its name or declared type), or not an image at all.\n   */\n  'UPLOAD_WRONG_TYPE',\n  /** Completed before the file reached storage: upload it, then complete. */\n  'UPLOAD_NOT_RECEIVED',\n  /**\n   * Another request is processing this upload right now (a retry or a double\n   * tap). Nothing is wrong: complete again in a moment and it answers with\n   * the image. 409.\n   */\n  'UPLOAD_PROCESSING',\n  /** A JPEG, PNG, WebP or GIF by its bytes that cannot be decoded: truncated or corrupt. */\n  'UPLOAD_UNREADABLE',\n  /** More than `MEDIA_MAX_INPUT_PIXELS`; refused before decoding. */\n  'UPLOAD_TOO_MANY_PIXELS',\n  /** `MEDIA_PENDING_MAX` uploads are already waiting to be attached. */\n  'UPLOAD_LIMIT_REACHED',\n  /** Discarding an upload that is attached: remove it from its post or avatar instead. */\n  'UPLOAD_IN_USE',\n\n  // ── The feed ──\n  /** The post is older than `EDIT_WINDOW_MS`. */\n  'EDIT_WINDOW_CLOSED',\n  /** A poll is never editable: people have already voted on it. */\n  'POLL_NOT_EDITABLE',\n  /** The poll has closed, by the server's clock. */\n  'POLL_CLOSED',\n  /** No option, several on a single-choice poll, or an option that does not exist. */\n  'POLL_CHOICE_INVALID',\n  /** A reply to a reply. One level of nesting only. */\n  'REPLY_TOO_DEEP',\n  /** Reporting your own post, poll or comment (or, since 0.6.0, your own product or review). */\n  'CANNOT_REPORT_OWN',\n  /**\n   * Marking a comment \"this helped\" that is not feedback on your product: the\n   * post is not tagged with a product you are on, or the comment is your own\n   * team's.\n   */\n  'FEEDBACK_NOT_MARKABLE',\n  /** Reposting your own post or poll (0.8.0). */\n  'CANNOT_REPOST_OWN',\n  /** Reposting a repost (0.8.0): share the original instead. */\n  'CANNOT_REPOST_A_REPOST',\n  /** You already have an active repost of this item (0.8.0). Undo it first. 409. */\n  'ALREADY_REPOSTED',\n\n  // ── Products ──\n  /** Founders own at most `PRODUCTS_OWNED_MAX` products. Delete one to add another. */\n  'PRODUCT_LIMIT_REACHED',\n  /**\n   * Listing a product that is not ready for Discover, or removing what keeps a\n   * listed one ready. `details.missing`: some of `logo`, `tagline`, `screenshot`.\n   */\n  'PRODUCT_NOT_LISTABLE',\n  /**\n   * The product is archived and frozen until its owner restores it: no new\n   * posts about it, reviews, upvotes, replies, helpful marks, testers or\n   * invitations.\n   */\n  'PRODUCT_ARCHIVED',\n  /** Tagging a post with, or acting for, a product you are not on the team of. */\n  'PRODUCT_NOT_YOURS',\n  /** Inviting someone who is already on the team or already invited. */\n  'PRODUCT_ALREADY_MEMBER',\n  /**\n   * Inviting someone who cannot join a team: not finished onboarding, paused,\n   * suspended or deleted. One code for all four, so it reveals none of them.\n   */\n  'PRODUCT_MEMBER_NOT_INVITABLE',\n  /** Handing over to, or re-roling, someone who is not on the team (or invited, for a role). */\n  'PRODUCT_NOT_ON_TEAM',\n  /**\n   * The owner leaving, being removed, or having their role changed. Ownership\n   * moves only by handing the product to someone first.\n   */\n  'PRODUCT_OWNER_MUST_TRANSFER',\n  /** Upvoting, reviewing or confirming yourself as a tester of your own team's product. */\n  'PRODUCT_OWN_TEAM',\n  /** Confirming as a tester someone who has given this product no feedback. */\n  'TESTER_NOT_ELIGIBLE',\n\n  // ── Communities (0.9.0) ──\n  /**\n   * Something in a community you can SEE but must join first: taking part in\n   * it (posting into it, commenting, reacting, voting, saving, reporting,\n   * editing), or reading a private community's feed, pinned posts or\n   * members. Join (public) or request to join (private). 403. What you cannot\n   * see at all answers NOT_FOUND, as content of a private or hidden community\n   * looked up by its id does.\n   */\n  'COMMUNITY_JOIN_REQUIRED',\n  /** A live community already has this name (case and spacing ignored). 409. */\n  'COMMUNITY_NAME_TAKEN',\n  /** Joining, requesting or inviting someone who is already a member, has requested or is invited. 409. */\n  'COMMUNITY_ALREADY_MEMBER',\n  /**\n   * Inviting someone who cannot join: not finished onboarding, paused,\n   * suspended or deleted. One code for all four, so it reveals none of them.\n   */\n  'COMMUNITY_MEMBER_NOT_INVITABLE',\n  /** Inviting someone banned from this community. Unban them first. */\n  'COMMUNITY_MEMBER_BANNED',\n  /** Inviting into a public community: anyone can join it, share its link instead. */\n  'COMMUNITY_INVITE_NOT_NEEDED',\n  /**\n   * The last admin leaving, stepping down or being removed, or deleting their\n   * account while someone else could be made admin. Make someone else admin\n   * first. On an account deletion, `details.communities` names them.\n   */\n  'COMMUNITY_LAST_ADMIN',\n  /**\n   * The community is archived (read-only): no new posts, polls, comments,\n   * reactions, votes, saves, reports, edits, joins, approvals, invitations\n   * or pins. Its moderators may still hide what breaks its rules.\n   */\n  'COMMUNITY_ARCHIVED',\n  /**\n   * A type change that exposes what was already posted (toward public, or\n   * hidden to private) sent without `confirmExposure: true`.\n   */\n  'COMMUNITY_EXPOSURE_UNCONFIRMED',\n  /** `COMMUNITY_PINS_MAX` announcements are pinned already. Unpin one first. */\n  'COMMUNITY_PINS_FULL',\n  /**\n   * Notifying every member again within `COMMUNITY_ANNOUNCE_INTERVAL_MS`.\n   * `details.nextAt` says when it is allowed. Pinning without notifying works.\n   */\n  'COMMUNITY_ANNOUNCE_TOO_SOON',\n  /** Reposting a post or poll that lives in a community: community content stays in it. */\n  'COMMUNITY_CONTENT_NOT_REPOSTABLE',\n  /** `COMMUNITY_SUGGESTIONS_OPEN_MAX` suggestions are already waiting for review. */\n  'COMMUNITY_SUGGESTIONS_FULL',\n  /** Approving or declining a suggestion that was already decided. 409. */\n  'COMMUNITY_SUGGESTION_DECIDED',\n  // ── Reviews ──\n  /** One review per member per product. Edit yours instead. */\n  'REVIEW_EXISTS',\n  /** Voting your own review helpful. */\n  'REVIEW_OWN_VOTE',\n\n  // ── Moderation ──\n  /**\n   * A decision that does not apply to that kind of thing: removing a product\n   * (staff hide one, never delete it). `MODERATION_ACTIONS_BY_TARGET_KIND`.\n   */\n  'MODERATION_ACTION_INVALID',\n\n  // ── Chat ──\n  /** Opening a conversation with yourself. */\n  'CHAT_WITH_SELF',\n\n  // ── The account ──\n  /** Staff suspended this account: nothing in the product works until it is lifted. */\n  'ACCOUNT_SUSPENDED',\n\n  // ── Roles and the MPIN ──\n  /**\n   * Switching to a role this person does not hold (or no longer holds), or\n   * setting an MPIN while holding no staff role at all.\n   */\n  'ROLE_NOT_HELD',\n  /** A staff role needs an MPIN, and none has been set yet. Set one first. */\n  'MPIN_NOT_SET',\n  /** An MPIN is set once; changing it needs the current one. */\n  'MPIN_ALREADY_SET',\n  /** The MPIN is wrong. `details.attemptsLeft` says how many tries remain. */\n  'MPIN_INCORRECT',\n  /** Too many wrong MPINs. `details.lockedUntil` says when to try again. */\n  'MPIN_LOCKED',\n  /** Changing your own roles. Someone else has to. */\n  'CANNOT_CHANGE_OWN_ROLES',\n  /** Granting or revoking a role the role you act as may not touch. */\n  'ROLE_NOT_GRANTABLE',\n  /** Changing your own capabilities (0.9.0). Someone else has to. */\n  'CANNOT_CHANGE_OWN_CAPABILITIES',\n  /** Granting or revoking a capability the role you act as may not touch (0.9.0). */\n  'CAPABILITY_NOT_GRANTABLE',\n\n  // ── Support ──\n  /** The ticket holds `TICKET_MESSAGES_MAX` messages. Open a new one. */\n  'TICKET_FULL',\n  /** The team keeps `SAVED_REPLIES_MAX` saved replies. Delete one first. */\n  'SAVED_REPLIES_FULL',\n] as const;\n\nexport const apiErrorCodeSchema = z.enum(API_ERROR_CODE_VALUES);\nexport type ApiErrorCode = z.infer<typeof apiErrorCodeSchema>;\n\n/** The same codes by name: `API_ERROR_CODE.POLL_CLOSED`. */\nexport const API_ERROR_CODE = apiErrorCodeSchema.enum;\n"]}

package/dist/core/limits.d.ts

@@ -139,6 +139,18 @@ export declare const PRODUCT_TEAM_SHOWN = 12;
  * launch, ideas) shelf. Each new post with that ask restarts the clock.
  */
 export declare const PRODUCT_ASK_OPEN_DAYS = 14;
+export declare const COMMUNITY_NAME_MIN = 3;
+export declare const COMMUNITY_NAME_MAX = 60;
+export declare const COMMUNITY_DESCRIPTION_MAX = 500;
+/** Rules on one community, each one line. */
+export declare const COMMUNITY_RULES_MAX = 10;
+export declare const COMMUNITY_RULE_MAX = 200;
+/** What a suggester says the community is for, beyond its description. */
+export declare const COMMUNITY_SUGGESTION_WHY_MAX = 500;
+/** A declined suggestion says why: long enough to be a reason, not a novel. */
+export declare const COMMUNITY_DECLINE_REASON_MIN = 3;
+export declare const COMMUNITY_DECLINE_REASON_MAX = 500;
+export declare const COMMUNITY_BAN_REASON_MAX = 500;
 /**
  * A review says WHY. A star with no reason does not help the founder, which is
  * the whole point of reviewing here, so the text is required and has a floor.

package/dist/core/limits.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/core/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,YAAY,MAAM,CAAC;AAChC,eAAO,MAAM,SAAS,OAAO,CAAC;AAC9B,0DAA0D;AAC1D,eAAO,MAAM,UAAU,IAAI,CAAC;AAC5B,gFAAgF;AAChF,eAAO,MAAM,SAAS,IAAI,CAAC;AAI3B,eAAO,MAAM,QAAQ,KAAK,CAAC;AAC3B,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,eAAO,MAAM,WAAW,KAAK,CAAC;AAI9B,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,uCAAuC;AACvC,eAAO,MAAM,aAAa,IAAI,CAAC;AAC/B,eAAO,MAAM,aAAa,SAAU,CAAC;AACrC,mFAAmF;AACnF,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAIrC;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,MAAM,CAAC;AAIhC,kFAAkF;AAClF,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,sCAAsC;AACtC,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,kFAAkF;AAClF,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,iFAAiF;AACjF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAI1C,kFAAkF;AAClF,eAAO,MAAM,qBAAqB,IAAI,CAAC;AACvC,eAAO,MAAM,qBAAqB,MAAM,CAAC;AACzC,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAIrC,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,2DAA2D;AAC3D,eAAO,MAAM,kBAAkB,OAAO,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAIrC;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,QAAmB,CAAC;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,WAAa,CAAC;AAEjD;;;GAGG;AACH,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAE7C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,6EAA6E;AAC7E,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAIzC,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,sEAAsE;AACtE,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,oDAAoD;AACpD,eAAO,MAAM,aAAa,KAAK,CAAC;AAChC,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAIpC;;;GAGG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAIzC,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,KAAK,CAAC;AACtC,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,2EAA2E;AAC3E,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC;;;GAGG;AACH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAIxC;;;GAGG;AACH,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,eAAO,MAAM,gBAAgB,OAAO,CAAC;AACrC;;;GAGG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAI1C,kFAAkF;AAClF,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAC5C;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C;;;GAGG;AACH,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,oCAAoC;AACpC,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAIhD,kFAAkF;AAClF,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,mEAAmE;AACnE,eAAO,MAAM,wBAAwB,MAAM,CAAC"}
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/core/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,YAAY,MAAM,CAAC;AAChC,eAAO,MAAM,SAAS,OAAO,CAAC;AAC9B,0DAA0D;AAC1D,eAAO,MAAM,UAAU,IAAI,CAAC;AAC5B,gFAAgF;AAChF,eAAO,MAAM,SAAS,IAAI,CAAC;AAI3B,eAAO,MAAM,QAAQ,KAAK,CAAC;AAC3B,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,eAAO,MAAM,WAAW,KAAK,CAAC;AAI9B,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,uCAAuC;AACvC,eAAO,MAAM,aAAa,IAAI,CAAC;AAC/B,eAAO,MAAM,aAAa,SAAU,CAAC;AACrC,mFAAmF;AACnF,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAIrC;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,MAAM,CAAC;AAIhC,kFAAkF;AAClF,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,sCAAsC;AACtC,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,kFAAkF;AAClF,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,iFAAiF;AACjF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAI1C,kFAAkF;AAClF,eAAO,MAAM,qBAAqB,IAAI,CAAC;AACvC,eAAO,MAAM,qBAAqB,MAAM,CAAC;AACzC,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAIrC,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,2DAA2D;AAC3D,eAAO,MAAM,kBAAkB,OAAO,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAIrC;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,QAAmB,CAAC;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,WAAa,CAAC;AAEjD;;;GAGG;AACH,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAE7C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,6EAA6E;AAC7E,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAIzC,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,sEAAsE;AACtE,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,oDAAoD;AACpD,eAAO,MAAM,aAAa,KAAK,CAAC;AAChC,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAIpC;;;GAGG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAIzC,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,KAAK,CAAC;AACtC,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,2EAA2E;AAC3E,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC;;;GAGG;AACH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAIxC,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,6CAA6C;AAC7C,eAAO,MAAM,mBAAmB,KAAK,CAAC;AACtC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,0EAA0E;AAC1E,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,+EAA+E;AAC/E,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAC9C,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAI5C;;;GAGG;AACH,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,eAAO,MAAM,gBAAgB,OAAO,CAAC;AACrC;;;GAGG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAI1C,kFAAkF;AAClF,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAC5C;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C;;;GAGG;AACH,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,oCAAoC;AACpC,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAIhD,kFAAkF;AAClF,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,mEAAmE;AACnE,eAAO,MAAM,wBAAwB,MAAM,CAAC"}

package/dist/core/limits.js

@@ -150,6 +150,19 @@ export const PRODUCT_TEAM_SHOWN = 12;
  * launch, ideas) shelf. Each new post with that ask restarts the clock.
  */
 export const PRODUCT_ASK_OPEN_DAYS = 14;
+// ─── Communities (0.9.0) ─────────────────────────────────────────────────────
+export const COMMUNITY_NAME_MIN = 3;
+export const COMMUNITY_NAME_MAX = 60;
+export const COMMUNITY_DESCRIPTION_MAX = 500;
+/** Rules on one community, each one line. */
+export const COMMUNITY_RULES_MAX = 10;
+export const COMMUNITY_RULE_MAX = 200;
+/** What a suggester says the community is for, beyond its description. */
+export const COMMUNITY_SUGGESTION_WHY_MAX = 500;
+/** A declined suggestion says why: long enough to be a reason, not a novel. */
+export const COMMUNITY_DECLINE_REASON_MIN = 3;
+export const COMMUNITY_DECLINE_REASON_MAX = 500;
+export const COMMUNITY_BAN_REASON_MAX = 500;
 // ─── Reviews ─────────────────────────────────────────────────────────────────
 /**
  * A review says WHY. A star with no reason does not help the founder, which is

package/dist/core/limits.js.map

@@ -1 +1 @@
-{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../src/core/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAChC,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC;AAC9B,0DAA0D;AAC1D,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAC5B,gFAAgF;AAChF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AAE3B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,QAAQ,GAAG,EAAE,CAAC;AAC3B,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAC5B,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAE9B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AACpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,uCAAuC;AACvC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AACrC,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAEhC,gFAAgF;AAEhF,kFAAkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AACjC,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAChD,sCAAsC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,kFAAkF;AAClF,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,iFAAiF;AACjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,gFAAgF;AAEhF,kFAAkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AACvC,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,gFAAgF;AAEhF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AACvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAEjD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC,gFAAgF;AAEhF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C,sEAAsE;AACtE,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,oDAAoD;AACpD,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAChC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,gFAAgF;AAChF,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AACtC,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAC5C,2EAA2E;AAC3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AACzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AACrC;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAExC,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,gFAAgF;AAEhF,kFAAkF;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAC5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAC1C;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAC/C,iEAAiE;AACjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,oCAAoC;AACpC,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAEhD,gFAAgF;AAEhF,kFAAkF;AAClF,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAC9C,mEAAmE;AACnE,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC","sourcesContent":["/**\n * founder-schema — Every length, size and count limit, by name\n *\n * ONE PLACE FOR EVERY NUMBER a client and the server must agree on. Before this,\n * the limits lived inline (`.max(80)`, `.max(1000)`) where nothing else could\n * read them, so the web client re-typed each one for its counters and the\n * backend re-typed them as Mongoose `maxlength`. Three copies of one number is\n * how the image alt text came to be 280 here and 500 in the backend.\n *\n * The rule from 0.2.0: a schema uses one of these constants, a consumer imports\n * the same constant, and nobody writes the digits again.\n *\n * Imports nothing, so any module here can use it without a cycle. Limits that\n * already had a name in their own module (POST_MAX_BODY_CHARS, POLL_*,\n * USERNAME_*, INTERESTS_*, MIN_AGE_YEARS...) stay where they are and keep their\n * names; this file holds the ones that had none.\n *\n * ⚠️ Lowering a limit is a breaking change for stored data: a value that was\n * valid when written fails the next edit. Raise freely; lower deliberately.\n *\n * @module founder-schema/core/limits\n */\n\n// ─── Profile ─────────────────────────────────────────────────────────────────\n\nexport const DISPLAY_NAME_MAX = 80;\nexport const HEADLINE_MAX = 120;\nexport const ABOUT_MAX = 1000;\n/** Skills a member may list. Discover filters on them. */\nexport const SKILLS_MAX = 8;\n/** Goals a member must pick at onboarding. The list itself caps the maximum. */\nexport const GOALS_MIN = 1;\n\n// ─── Location ────────────────────────────────────────────────────────────────\n\nexport const CITY_MAX = 80;\nexport const STATE_MAX = 80;\nexport const COUNTRY_MAX = 80;\n\n// ─── Venture ─────────────────────────────────────────────────────────────────\n\nexport const VENTURE_NAME_MAX = 120;\nexport const VENTURE_TAGLINE_MAX = 160;\n/** Team size including the founder. */\nexport const TEAM_SIZE_MIN = 1;\nexport const TEAM_SIZE_MAX = 100_000;\n/** Earliest founding year accepted. The ceiling is \"this year\", read per parse. */\nexport const FOUNDED_YEAR_MIN = 1900;\n\n// ─── Links ───────────────────────────────────────────────────────────────────\n\n/**\n * Longest URL a member may TYPE. Applied by `httpUrlSchema` itself, so every\n * member URL carries it: profile links, a venture website.\n *\n * ⚠ NOT applied to URLs the server reads from elsewhere (a link preview's\n * page or image), which use `safeUrlSchema`: a 314-character CDN image URL is\n * ordinary, and one of them would otherwise fail a whole feed page.\n */\nexport const LINK_URL_MAX = 300;\n\n// ─── Feed and moderation ─────────────────────────────────────────────────────\n\n/** Author-supplied image description. The backend's stored copy uses this too. */\nexport const MEDIA_ALT_MAX = 280;\nexport const LINK_PREVIEW_TITLE_MAX = 200;\nexport const LINK_PREVIEW_DESCRIPTION_MAX = 500;\n/** The free-text note on a report. */\nexport const REPORT_NOTE_MAX = 1000;\n/** A moderator's note on a decision (why it was hidden, removed or dismissed). */\nexport const MODERATION_NOTE_MAX = 500;\n/** What a post, poll or comment is shown as in a staff list: its first words. */\nexport const MODERATION_EXCERPT_MAX = 160;\n\n// ─── Staff ───────────────────────────────────────────────────────────────────\n\n/** Why a member was suspended. Shown to staff, and on record in the audit log. */\nexport const SUSPENSION_REASON_MIN = 3;\nexport const SUSPENSION_REASON_MAX = 500;\n/** The staff member directory's search box (a name, a handle or an email). */\nexport const MEMBER_SEARCH_MAX = 120;\n\n// ─── Support ─────────────────────────────────────────────────────────────────\n\nexport const TICKET_SUBJECT_MIN = 3;\nexport const TICKET_SUBJECT_MAX = 120;\n/** One message in a ticket, the member's or an agent's. */\nexport const TICKET_MESSAGE_MAX = 4000;\n/**\n * Messages one ticket may hold. A conversation that long is a new problem, so\n * the member is asked to open a new ticket rather than the thread growing\n * without bound.\n */\nexport const TICKET_MESSAGES_MAX = 200;\nexport const SAVED_REPLY_TITLE_MAX = 80;\nexport const SAVED_REPLY_BODY_MAX = 4000;\n/** Saved replies kept in all: a team's library, not an archive. */\nexport const SAVED_REPLIES_MAX = 200;\n\n// ─── Uploads ─────────────────────────────────────────────────────────────────\n\n/**\n * Largest file accepted for upload: 10 MB.\n *\n * Enforced three times. The upload-slot body refuses a bigger `contentLength`;\n * the size is SIGNED INTO the upload URL, so storage refuses a body of any other\n * size; and the server checks the stored object again before processing it.\n * The client checks first only to fail fast: it shrinks a photo well below this\n * before uploading (see `MEDIA_SIZES`), so a member rarely meets the limit.\n */\nexport const UPLOAD_MAX_BYTES = 10 * 1024 * 1024;\n\n/**\n * Largest image, in pixels, the server will decode: 50 megapixels, one frame.\n *\n * Bytes do not bound memory. A 50,000 x 50,000 PNG of one colour compresses to\n * a few kilobytes and decodes to ten gigabytes. The server reads the dimensions\n * first and refuses anything above this before decoding (`UPLOAD_TOO_MANY_PIXELS`).\n * 50 MP admits every phone camera's full-resolution photo up to 48 MP.\n */\nexport const MEDIA_MAX_INPUT_PIXELS = 50_000_000;\n\n/**\n * Hours an upload may wait to be attached to a post or set as an avatar. After\n * that the server deletes it: the composer was abandoned, or the tab closed.\n */\nexport const MEDIA_UNATTACHED_TTL_HOURS = 24;\n\n/**\n * Uploads one member may have waiting (requested or processed, not yet\n * attached) at once. A full post is `POST_MAX_MEDIA` (10); this leaves room for\n * a retry or two without letting one account fill storage.\n */\nexport const MEDIA_PENDING_MAX = 30;\n\n/** Longest placeholder string: a base64 ThumbHash is about 30 characters. */\nexport const MEDIA_PLACEHOLDER_MAX = 100;\n\n// ─── Lists and search ────────────────────────────────────────────────────────\n\n/** Values one Discover multi-select filter may carry (`?skill=a&skill=b`). */\nexport const DISCOVER_FILTER_VALUES_MAX = 10;\n/** Discover's free-text inputs: the name search, city and country. */\nexport const DISCOVER_TEXT_MAX = 80;\n/** Page size bounds for every cursor-paged list. */\nexport const PAGE_SIZE_MAX = 50;\nexport const PAGE_SIZE_DEFAULT = 20;\n\n// ─── Chat ────────────────────────────────────────────────────────────────────\n\n/**\n * Members one participants lookup may name. Bounded so the lookup cannot be\n * used to page through the directory.\n */\nexport const CHAT_PARTICIPANTS_MAX = 100;\n\n// ─── Products ────────────────────────────────────────────────────────────────\n\nexport const PRODUCT_NAME_MAX = 60;\n/** One line on a Discover card: short enough to never wrap twice on a phone. */\nexport const PRODUCT_TAGLINE_MAX = 80;\nexport const PRODUCT_DESCRIPTION_MAX = 3000;\n/** Screenshots on one product page. The first is its cover on Discover. */\nexport const PRODUCT_SCREENSHOTS_MAX = 8;\nexport const PRODUCT_CAPTION_MAX = 140;\n/**\n * Products one founder may OWN at once (archived ones count; deleting frees a\n * place). Being on someone else's team is not counted: the user ruled there is\n * no limit on a product's team, and so none on how many teams one joins.\n */\nexport const PRODUCTS_OWNED_MAX = 5;\n/** Team members a product page shows; the rest are one tap away (`/team`). */\nexport const PRODUCT_TEAM_SHOWN = 12;\n/**\n * Days a post's ask keeps its product on the \"asking for testers\" (or feedback,\n * launch, ideas) shelf. Each new post with that ask restarts the clock.\n */\nexport const PRODUCT_ASK_OPEN_DAYS = 14;\n\n// ─── Reviews ─────────────────────────────────────────────────────────────────\n\n/**\n * A review says WHY. A star with no reason does not help the founder, which is\n * the whole point of reviewing here, so the text is required and has a floor.\n */\nexport const REVIEW_TEXT_MIN = 30;\nexport const REVIEW_TEXT_MAX = 2000;\nexport const REVIEW_REPLY_MAX = 1000;\n/**\n * Reviews before a product shows an average (and enters \"Top rated\"). One or two\n * ratings say more about who wrote them than about the product.\n */\nexport const REVIEW_AVERAGE_MIN_COUNT = 3;\n\n// ─── Contribution ────────────────────────────────────────────────────────────\n\n/** Points one review can earn its writer through other members' Helpful votes. */\nexport const REVIEW_HELPFUL_POINTS_MAX = 10;\n/**\n * @deprecated 0.7.0: writing a review earns no points (the score counts only\n * what OTHER members recognise), so nothing reads this. Kept so no export is\n * removed.\n */\nexport const REVIEWS_REWARDED_PER_DAY = 3;\n/**\n * Points one member can earn from ONE other member over any 30 days, all kinds\n * together, so two founders cannot farm each other by trading Helpful marks.\n */\nexport const CONTRIBUTION_PAIR_POINTS_MAX = 30;\n/** Window of the \"this month\" score and the top-helpers list. */\nexport const CONTRIBUTION_RECENT_DAYS = 30;\n/** Rows on the top-helpers list. */\nexport const CONTRIBUTION_LEADERBOARD_SIZE = 20;\n\n// ─── Notifications ───────────────────────────────────────────────────────────\n\n/** Days a notification is kept. Neither Jansathi nor GymMonk ever deletes one. */\nexport const NOTIFICATION_RETENTION_DAYS = 90;\n/** The first words of a comment or review a notification shows. */\nexport const NOTIFICATION_EXCERPT_MAX = 140;\n"]}
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../src/core/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAChC,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC;AAC9B,0DAA0D;AAC1D,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAC5B,gFAAgF;AAChF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AAE3B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,QAAQ,GAAG,EAAE,CAAC;AAC3B,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAC5B,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAE9B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AACpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,uCAAuC;AACvC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AACrC,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAEhC,gFAAgF;AAEhF,kFAAkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AACjC,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAChD,sCAAsC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,kFAAkF;AAClF,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,iFAAiF;AACjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,gFAAgF;AAEhF,kFAAkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AACvC,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,gFAAgF;AAEhF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AACvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAEjD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC,gFAAgF;AAEhF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C,sEAAsE;AACtE,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,oDAAoD;AACpD,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAChC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,gFAAgF;AAChF,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AACtC,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAC5C,2EAA2E;AAC3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AACzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AACrC;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAExC,gFAAgF;AAEhF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AACrC,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAC7C,6CAA6C;AAC7C,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AACtC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAChD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAC9C,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAChD,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAE5C,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,gFAAgF;AAEhF,kFAAkF;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAC5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAC1C;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAC/C,iEAAiE;AACjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,oCAAoC;AACpC,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAEhD,gFAAgF;AAEhF,kFAAkF;AAClF,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAC9C,mEAAmE;AACnE,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC","sourcesContent":["/**\n * founder-schema — Every length, size and count limit, by name\n *\n * ONE PLACE FOR EVERY NUMBER a client and the server must agree on. Before this,\n * the limits lived inline (`.max(80)`, `.max(1000)`) where nothing else could\n * read them, so the web client re-typed each one for its counters and the\n * backend re-typed them as Mongoose `maxlength`. Three copies of one number is\n * how the image alt text came to be 280 here and 500 in the backend.\n *\n * The rule from 0.2.0: a schema uses one of these constants, a consumer imports\n * the same constant, and nobody writes the digits again.\n *\n * Imports nothing, so any module here can use it without a cycle. Limits that\n * already had a name in their own module (POST_MAX_BODY_CHARS, POLL_*,\n * USERNAME_*, INTERESTS_*, MIN_AGE_YEARS...) stay where they are and keep their\n * names; this file holds the ones that had none.\n *\n * ⚠️ Lowering a limit is a breaking change for stored data: a value that was\n * valid when written fails the next edit. Raise freely; lower deliberately.\n *\n * @module founder-schema/core/limits\n */\n\n// ─── Profile ─────────────────────────────────────────────────────────────────\n\nexport const DISPLAY_NAME_MAX = 80;\nexport const HEADLINE_MAX = 120;\nexport const ABOUT_MAX = 1000;\n/** Skills a member may list. Discover filters on them. */\nexport const SKILLS_MAX = 8;\n/** Goals a member must pick at onboarding. The list itself caps the maximum. */\nexport const GOALS_MIN = 1;\n\n// ─── Location ────────────────────────────────────────────────────────────────\n\nexport const CITY_MAX = 80;\nexport const STATE_MAX = 80;\nexport const COUNTRY_MAX = 80;\n\n// ─── Venture ─────────────────────────────────────────────────────────────────\n\nexport const VENTURE_NAME_MAX = 120;\nexport const VENTURE_TAGLINE_MAX = 160;\n/** Team size including the founder. */\nexport const TEAM_SIZE_MIN = 1;\nexport const TEAM_SIZE_MAX = 100_000;\n/** Earliest founding year accepted. The ceiling is \"this year\", read per parse. */\nexport const FOUNDED_YEAR_MIN = 1900;\n\n// ─── Links ───────────────────────────────────────────────────────────────────\n\n/**\n * Longest URL a member may TYPE. Applied by `httpUrlSchema` itself, so every\n * member URL carries it: profile links, a venture website.\n *\n * ⚠ NOT applied to URLs the server reads from elsewhere (a link preview's\n * page or image), which use `safeUrlSchema`: a 314-character CDN image URL is\n * ordinary, and one of them would otherwise fail a whole feed page.\n */\nexport const LINK_URL_MAX = 300;\n\n// ─── Feed and moderation ─────────────────────────────────────────────────────\n\n/** Author-supplied image description. The backend's stored copy uses this too. */\nexport const MEDIA_ALT_MAX = 280;\nexport const LINK_PREVIEW_TITLE_MAX = 200;\nexport const LINK_PREVIEW_DESCRIPTION_MAX = 500;\n/** The free-text note on a report. */\nexport const REPORT_NOTE_MAX = 1000;\n/** A moderator's note on a decision (why it was hidden, removed or dismissed). */\nexport const MODERATION_NOTE_MAX = 500;\n/** What a post, poll or comment is shown as in a staff list: its first words. */\nexport const MODERATION_EXCERPT_MAX = 160;\n\n// ─── Staff ───────────────────────────────────────────────────────────────────\n\n/** Why a member was suspended. Shown to staff, and on record in the audit log. */\nexport const SUSPENSION_REASON_MIN = 3;\nexport const SUSPENSION_REASON_MAX = 500;\n/** The staff member directory's search box (a name, a handle or an email). */\nexport const MEMBER_SEARCH_MAX = 120;\n\n// ─── Support ─────────────────────────────────────────────────────────────────\n\nexport const TICKET_SUBJECT_MIN = 3;\nexport const TICKET_SUBJECT_MAX = 120;\n/** One message in a ticket, the member's or an agent's. */\nexport const TICKET_MESSAGE_MAX = 4000;\n/**\n * Messages one ticket may hold. A conversation that long is a new problem, so\n * the member is asked to open a new ticket rather than the thread growing\n * without bound.\n */\nexport const TICKET_MESSAGES_MAX = 200;\nexport const SAVED_REPLY_TITLE_MAX = 80;\nexport const SAVED_REPLY_BODY_MAX = 4000;\n/** Saved replies kept in all: a team's library, not an archive. */\nexport const SAVED_REPLIES_MAX = 200;\n\n// ─── Uploads ─────────────────────────────────────────────────────────────────\n\n/**\n * Largest file accepted for upload: 10 MB.\n *\n * Enforced three times. The upload-slot body refuses a bigger `contentLength`;\n * the size is SIGNED INTO the upload URL, so storage refuses a body of any other\n * size; and the server checks the stored object again before processing it.\n * The client checks first only to fail fast: it shrinks a photo well below this\n * before uploading (see `MEDIA_SIZES`), so a member rarely meets the limit.\n */\nexport const UPLOAD_MAX_BYTES = 10 * 1024 * 1024;\n\n/**\n * Largest image, in pixels, the server will decode: 50 megapixels, one frame.\n *\n * Bytes do not bound memory. A 50,000 x 50,000 PNG of one colour compresses to\n * a few kilobytes and decodes to ten gigabytes. The server reads the dimensions\n * first and refuses anything above this before decoding (`UPLOAD_TOO_MANY_PIXELS`).\n * 50 MP admits every phone camera's full-resolution photo up to 48 MP.\n */\nexport const MEDIA_MAX_INPUT_PIXELS = 50_000_000;\n\n/**\n * Hours an upload may wait to be attached to a post or set as an avatar. After\n * that the server deletes it: the composer was abandoned, or the tab closed.\n */\nexport const MEDIA_UNATTACHED_TTL_HOURS = 24;\n\n/**\n * Uploads one member may have waiting (requested or processed, not yet\n * attached) at once. A full post is `POST_MAX_MEDIA` (10); this leaves room for\n * a retry or two without letting one account fill storage.\n */\nexport const MEDIA_PENDING_MAX = 30;\n\n/** Longest placeholder string: a base64 ThumbHash is about 30 characters. */\nexport const MEDIA_PLACEHOLDER_MAX = 100;\n\n// ─── Lists and search ────────────────────────────────────────────────────────\n\n/** Values one Discover multi-select filter may carry (`?skill=a&skill=b`). */\nexport const DISCOVER_FILTER_VALUES_MAX = 10;\n/** Discover's free-text inputs: the name search, city and country. */\nexport const DISCOVER_TEXT_MAX = 80;\n/** Page size bounds for every cursor-paged list. */\nexport const PAGE_SIZE_MAX = 50;\nexport const PAGE_SIZE_DEFAULT = 20;\n\n// ─── Chat ────────────────────────────────────────────────────────────────────\n\n/**\n * Members one participants lookup may name. Bounded so the lookup cannot be\n * used to page through the directory.\n */\nexport const CHAT_PARTICIPANTS_MAX = 100;\n\n// ─── Products ────────────────────────────────────────────────────────────────\n\nexport const PRODUCT_NAME_MAX = 60;\n/** One line on a Discover card: short enough to never wrap twice on a phone. */\nexport const PRODUCT_TAGLINE_MAX = 80;\nexport const PRODUCT_DESCRIPTION_MAX = 3000;\n/** Screenshots on one product page. The first is its cover on Discover. */\nexport const PRODUCT_SCREENSHOTS_MAX = 8;\nexport const PRODUCT_CAPTION_MAX = 140;\n/**\n * Products one founder may OWN at once (archived ones count; deleting frees a\n * place). Being on someone else's team is not counted: the user ruled there is\n * no limit on a product's team, and so none on how many teams one joins.\n */\nexport const PRODUCTS_OWNED_MAX = 5;\n/** Team members a product page shows; the rest are one tap away (`/team`). */\nexport const PRODUCT_TEAM_SHOWN = 12;\n/**\n * Days a post's ask keeps its product on the \"asking for testers\" (or feedback,\n * launch, ideas) shelf. Each new post with that ask restarts the clock.\n */\nexport const PRODUCT_ASK_OPEN_DAYS = 14;\n\n// ─── Communities (0.9.0) ─────────────────────────────────────────────────────\n\nexport const COMMUNITY_NAME_MIN = 3;\nexport const COMMUNITY_NAME_MAX = 60;\nexport const COMMUNITY_DESCRIPTION_MAX = 500;\n/** Rules on one community, each one line. */\nexport const COMMUNITY_RULES_MAX = 10;\nexport const COMMUNITY_RULE_MAX = 200;\n/** What a suggester says the community is for, beyond its description. */\nexport const COMMUNITY_SUGGESTION_WHY_MAX = 500;\n/** A declined suggestion says why: long enough to be a reason, not a novel. */\nexport const COMMUNITY_DECLINE_REASON_MIN = 3;\nexport const COMMUNITY_DECLINE_REASON_MAX = 500;\nexport const COMMUNITY_BAN_REASON_MAX = 500;\n\n// ─── Reviews ─────────────────────────────────────────────────────────────────\n\n/**\n * A review says WHY. A star with no reason does not help the founder, which is\n * the whole point of reviewing here, so the text is required and has a floor.\n */\nexport const REVIEW_TEXT_MIN = 30;\nexport const REVIEW_TEXT_MAX = 2000;\nexport const REVIEW_REPLY_MAX = 1000;\n/**\n * Reviews before a product shows an average (and enters \"Top rated\"). One or two\n * ratings say more about who wrote them than about the product.\n */\nexport const REVIEW_AVERAGE_MIN_COUNT = 3;\n\n// ─── Contribution ────────────────────────────────────────────────────────────\n\n/** Points one review can earn its writer through other members' Helpful votes. */\nexport const REVIEW_HELPFUL_POINTS_MAX = 10;\n/**\n * @deprecated 0.7.0: writing a review earns no points (the score counts only\n * what OTHER members recognise), so nothing reads this. Kept so no export is\n * removed.\n */\nexport const REVIEWS_REWARDED_PER_DAY = 3;\n/**\n * Points one member can earn from ONE other member over any 30 days, all kinds\n * together, so two founders cannot farm each other by trading Helpful marks.\n */\nexport const CONTRIBUTION_PAIR_POINTS_MAX = 30;\n/** Window of the \"this month\" score and the top-helpers list. */\nexport const CONTRIBUTION_RECENT_DAYS = 30;\n/** Rows on the top-helpers list. */\nexport const CONTRIBUTION_LEADERBOARD_SIZE = 20;\n\n// ─── Notifications ───────────────────────────────────────────────────────────\n\n/** Days a notification is kept. Neither Jansathi nor GymMonk ever deletes one. */\nexport const NOTIFICATION_RETENTION_DAYS = 90;\n/** The first words of a comment or review a notification shows. */\nexport const NOTIFICATION_EXCERPT_MAX = 140;\n"]}

package/dist/core/responses.d.ts

@@ -40,6 +40,11 @@ export declare const apiErrorDetailsSchema: z.ZodObject<{
         tagline: "tagline";
         screenshot: "screenshot";
     }>>>;
+    nextAt: z.ZodOptional<z.ZodISODateTime>;
+    communities: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        name: z.ZodString;
+    }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type ApiErrorDetails = z.infer<typeof apiErrorDetailsSchema>;
 /**
@@ -91,6 +96,20 @@ export declare const apiErrorSchema: z.ZodObject<{
         PRODUCT_OWNER_MUST_TRANSFER: "PRODUCT_OWNER_MUST_TRANSFER";
         PRODUCT_OWN_TEAM: "PRODUCT_OWN_TEAM";
         TESTER_NOT_ELIGIBLE: "TESTER_NOT_ELIGIBLE";
+        COMMUNITY_JOIN_REQUIRED: "COMMUNITY_JOIN_REQUIRED";
+        COMMUNITY_NAME_TAKEN: "COMMUNITY_NAME_TAKEN";
+        COMMUNITY_ALREADY_MEMBER: "COMMUNITY_ALREADY_MEMBER";
+        COMMUNITY_MEMBER_NOT_INVITABLE: "COMMUNITY_MEMBER_NOT_INVITABLE";
+        COMMUNITY_MEMBER_BANNED: "COMMUNITY_MEMBER_BANNED";
+        COMMUNITY_INVITE_NOT_NEEDED: "COMMUNITY_INVITE_NOT_NEEDED";
+        COMMUNITY_LAST_ADMIN: "COMMUNITY_LAST_ADMIN";
+        COMMUNITY_ARCHIVED: "COMMUNITY_ARCHIVED";
+        COMMUNITY_EXPOSURE_UNCONFIRMED: "COMMUNITY_EXPOSURE_UNCONFIRMED";
+        COMMUNITY_PINS_FULL: "COMMUNITY_PINS_FULL";
+        COMMUNITY_ANNOUNCE_TOO_SOON: "COMMUNITY_ANNOUNCE_TOO_SOON";
+        COMMUNITY_CONTENT_NOT_REPOSTABLE: "COMMUNITY_CONTENT_NOT_REPOSTABLE";
+        COMMUNITY_SUGGESTIONS_FULL: "COMMUNITY_SUGGESTIONS_FULL";
+        COMMUNITY_SUGGESTION_DECIDED: "COMMUNITY_SUGGESTION_DECIDED";
         REVIEW_EXISTS: "REVIEW_EXISTS";
         REVIEW_OWN_VOTE: "REVIEW_OWN_VOTE";
         MODERATION_ACTION_INVALID: "MODERATION_ACTION_INVALID";
@@ -103,6 +122,8 @@ export declare const apiErrorSchema: z.ZodObject<{
         MPIN_LOCKED: "MPIN_LOCKED";
         CANNOT_CHANGE_OWN_ROLES: "CANNOT_CHANGE_OWN_ROLES";
         ROLE_NOT_GRANTABLE: "ROLE_NOT_GRANTABLE";
+        CANNOT_CHANGE_OWN_CAPABILITIES: "CANNOT_CHANGE_OWN_CAPABILITIES";
+        CAPABILITY_NOT_GRANTABLE: "CAPABILITY_NOT_GRANTABLE";
         TICKET_FULL: "TICKET_FULL";
         SAVED_REPLIES_FULL: "SAVED_REPLIES_FULL";
     }>;
@@ -129,6 +150,11 @@ export declare const apiErrorSchema: z.ZodObject<{
             tagline: "tagline";
             screenshot: "screenshot";
         }>>>;
+        nextAt: z.ZodOptional<z.ZodISODateTime>;
+        communities: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+            name: z.ZodString;
+        }, z.core.$strip>>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type ApiError = z.infer<typeof apiErrorSchema>;
@@ -185,6 +211,20 @@ export declare const errorResponseSchema: z.ZodObject<{
             PRODUCT_OWNER_MUST_TRANSFER: "PRODUCT_OWNER_MUST_TRANSFER";
             PRODUCT_OWN_TEAM: "PRODUCT_OWN_TEAM";
             TESTER_NOT_ELIGIBLE: "TESTER_NOT_ELIGIBLE";
+            COMMUNITY_JOIN_REQUIRED: "COMMUNITY_JOIN_REQUIRED";
+            COMMUNITY_NAME_TAKEN: "COMMUNITY_NAME_TAKEN";
+            COMMUNITY_ALREADY_MEMBER: "COMMUNITY_ALREADY_MEMBER";
+            COMMUNITY_MEMBER_NOT_INVITABLE: "COMMUNITY_MEMBER_NOT_INVITABLE";
+            COMMUNITY_MEMBER_BANNED: "COMMUNITY_MEMBER_BANNED";
+            COMMUNITY_INVITE_NOT_NEEDED: "COMMUNITY_INVITE_NOT_NEEDED";
+            COMMUNITY_LAST_ADMIN: "COMMUNITY_LAST_ADMIN";
+            COMMUNITY_ARCHIVED: "COMMUNITY_ARCHIVED";
+            COMMUNITY_EXPOSURE_UNCONFIRMED: "COMMUNITY_EXPOSURE_UNCONFIRMED";
+            COMMUNITY_PINS_FULL: "COMMUNITY_PINS_FULL";
+            COMMUNITY_ANNOUNCE_TOO_SOON: "COMMUNITY_ANNOUNCE_TOO_SOON";
+            COMMUNITY_CONTENT_NOT_REPOSTABLE: "COMMUNITY_CONTENT_NOT_REPOSTABLE";
+            COMMUNITY_SUGGESTIONS_FULL: "COMMUNITY_SUGGESTIONS_FULL";
+            COMMUNITY_SUGGESTION_DECIDED: "COMMUNITY_SUGGESTION_DECIDED";
             REVIEW_EXISTS: "REVIEW_EXISTS";
             REVIEW_OWN_VOTE: "REVIEW_OWN_VOTE";
             MODERATION_ACTION_INVALID: "MODERATION_ACTION_INVALID";
@@ -197,6 +237,8 @@ export declare const errorResponseSchema: z.ZodObject<{
             MPIN_LOCKED: "MPIN_LOCKED";
             CANNOT_CHANGE_OWN_ROLES: "CANNOT_CHANGE_OWN_ROLES";
             ROLE_NOT_GRANTABLE: "ROLE_NOT_GRANTABLE";
+            CANNOT_CHANGE_OWN_CAPABILITIES: "CANNOT_CHANGE_OWN_CAPABILITIES";
+            CAPABILITY_NOT_GRANTABLE: "CAPABILITY_NOT_GRANTABLE";
             TICKET_FULL: "TICKET_FULL";
             SAVED_REPLIES_FULL: "SAVED_REPLIES_FULL";
         }>;
@@ -223,6 +265,11 @@ export declare const errorResponseSchema: z.ZodObject<{
                 tagline: "tagline";
                 screenshot: "screenshot";
             }>>>;
+            nextAt: z.ZodOptional<z.ZodISODateTime>;
+            communities: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+                name: z.ZodString;
+            }, z.core.$strip>>>;
         }, z.core.$strip>>;
     }, z.core.$strip>;
 }, z.core.$strip>;

package/dist/core/responses.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"responses.d.ts","sourceRoot":"","sources":["../../src/core/responses.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;iBAQhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,mDAAmD;AACnD,eAAO,MAAM,qBAAqB,GAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC;;;;iBAK9D,CAAC;AAEL,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAG9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC;;;iBAIxD,CAAC;AAEL;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;iBAAmC,CAAC;AACjE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}
+{"version":3,"file":"responses.d.ts","sourceRoot":"","sources":["../../src/core/responses.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAehC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,mDAAmD;AACnD,eAAO,MAAM,qBAAqB,GAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC;;;;iBAK9D,CAAC;AAEL,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAG9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC;;;iBAIxD,CAAC;AAEL;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;iBAAmC,CAAC;AACjE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/core/responses.js

@@ -29,6 +29,13 @@ export const apiErrorDetailsSchema = z.object({
     lockedUntil: z.iso.datetime().optional(),
     /** `PRODUCT_NOT_LISTABLE`: what the product lacks to be (or stay) listed. */
     missing: z.array(productListingRequirementSchema).optional(),
+    /** `COMMUNITY_ANNOUNCE_TOO_SOON` (0.9.0): when notifying every member is allowed again. */
+    nextAt: z.iso.datetime().optional(),
+    /**
+     * `COMMUNITY_LAST_ADMIN` on an account deletion (0.9.0): the communities the
+     * member is the only admin of, to hand over first.
+     */
+    communities: z.array(z.object({ id: objectIdSchema, name: z.string() })).optional(),
 });
 /**
  * `code` is one of `API_ERROR_CODE_VALUES`, and it is what a client acts on.

package/dist/core/responses.js.map

@@ -1 +1 @@
-{"version":3,"file":"responses.js","sourceRoot":"","sources":["../../src/core/responses.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACjD,gEAAgE;IAChE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,uDAAuD;IACvD,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,6EAA6E;IAC7E,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;CAC7D,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAGH,mDAAmD;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAsB,IAAO,EAAE,EAAE,CACpE,CAAC,CAAC,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxB,IAAI;IACJ,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACzB,KAAK,EAAE,cAAc;CACtB,CAAC,CAAC;AAGH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAsB,IAAO,EAAE,EAAE,CAC9D,CAAC,CAAC,MAAM,CAAC;IACP,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEL;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — API response envelope\n *\n * Every Founder Circle endpoint answers in this shape. The clients read the\n * failure reason at `error.message`, so a handler must never return a bare\n * string body.\n *\n * @module founder-schema/core/responses\n */\n\nimport { z } from 'zod';\nimport { objectIdSchema, productListingRequirementSchema } from './common.js';\nimport { apiErrorCodeSchema } from './errors.js';\nimport { validationIssueSchema } from './validation.js';\n\n/**\n * What an error carries beyond its code, each field named by the code that\n * sends it. Declared here, not loosely typed, because a client parses errors\n * with this schema and Zod drops a key the schema does not name.\n *\n * `issues` is EVERY problem of a 400, each with its path, built on the server\n * by `toValidationIssues`. Until 0.2.0 this was typed as a record of strings\n * that nothing ever sent, while the real 400s carried only the first issue's\n * message, so a client could not tell which field to mark.\n */\nexport const apiErrorDetailsSchema = z.object({\n  issues: z.array(validationIssueSchema).optional(),\n  /** `MPIN_INCORRECT`: wrong tries left before the MPIN locks. */\n  attemptsLeft: z.number().int().min(0).optional(),\n  /** `MPIN_LOCKED`: when the MPIN can be tried again. */\n  lockedUntil: z.iso.datetime().optional(),\n  /** `PRODUCT_NOT_LISTABLE`: what the product lacks to be (or stay) listed. */\n  missing: z.array(productListingRequirementSchema).optional(),\n});\nexport type ApiErrorDetails = z.infer<typeof apiErrorDetailsSchema>;\n\n/**\n * `code` is one of `API_ERROR_CODE_VALUES`, and it is what a client acts on.\n * `message` is English, for logs and for a client that predates the code.\n */\nexport const apiErrorSchema = z.object({\n  code: apiErrorCodeSchema,\n  message: z.string(),\n  details: apiErrorDetailsSchema.optional(),\n});\nexport type ApiError = z.infer<typeof apiErrorSchema>;\n\n/** Success envelope. `T` is the payload schema. */\nexport const successResponseSchema = <T extends z.ZodType>(data: T) =>\n  z.object({\n    success: z.literal(true),\n    data,\n    message: z.string().optional(),\n  });\n\nexport const errorResponseSchema = z.object({\n  success: z.literal(false),\n  error: apiErrorSchema,\n});\nexport type ErrorResponse = z.infer<typeof errorResponseSchema>;\n\n/**\n * Cursor-paginated list envelope.\n *\n * `nextCursor` is REQUIRED and is `null` at the end of the list. Omitting the\n * key is not the same thing and does not validate: a handler must decide\n * whether there is another page and say so, because \"the key is missing\" and\n * \"there are no more results\" are indistinguishable to a client that has to\n * choose between showing a Load more button and not showing one.\n *\n * An earlier version of this comment said absence and null were equivalent.\n * They never were; the schema has always required the key. Corrected\n * 2026-09-21, and pinned by a test.\n */\nexport const paginatedSchema = <T extends z.ZodType>(item: T) =>\n  z.object({\n    items: z.array(item),\n    nextCursor: z.string().nullable(),\n  });\n\n/**\n * What a create, an edit or a delete answers: the id of the thing it touched.\n * A client that needs the whole item reads it, so a write never ships a second\n * projection of it that could drift from the read path's.\n */\nexport const idResponseSchema = z.object({ id: objectIdSchema });\nexport type IdResponse = z.infer<typeof idResponseSchema>;\n"]}
+{"version":3,"file":"responses.js","sourceRoot":"","sources":["../../src/core/responses.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACjD,gEAAgE;IAChE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,uDAAuD;IACvD,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,6EAA6E;IAC7E,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;IAC5D,2FAA2F;IAC3F,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnC;;;OAGG;IACH,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpF,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAGH,mDAAmD;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAsB,IAAO,EAAE,EAAE,CACpE,CAAC,CAAC,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxB,IAAI;IACJ,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACzB,KAAK,EAAE,cAAc;CACtB,CAAC,CAAC;AAGH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAsB,IAAO,EAAE,EAAE,CAC9D,CAAC,CAAC,MAAM,CAAC;IACP,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEL;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC","sourcesContent":["/**\n * founder-schema — API response envelope\n *\n * Every Founder Circle endpoint answers in this shape. The clients read the\n * failure reason at `error.message`, so a handler must never return a bare\n * string body.\n *\n * @module founder-schema/core/responses\n */\n\nimport { z } from 'zod';\nimport { objectIdSchema, productListingRequirementSchema } from './common.js';\nimport { apiErrorCodeSchema } from './errors.js';\nimport { validationIssueSchema } from './validation.js';\n\n/**\n * What an error carries beyond its code, each field named by the code that\n * sends it. Declared here, not loosely typed, because a client parses errors\n * with this schema and Zod drops a key the schema does not name.\n *\n * `issues` is EVERY problem of a 400, each with its path, built on the server\n * by `toValidationIssues`. Until 0.2.0 this was typed as a record of strings\n * that nothing ever sent, while the real 400s carried only the first issue's\n * message, so a client could not tell which field to mark.\n */\nexport const apiErrorDetailsSchema = z.object({\n  issues: z.array(validationIssueSchema).optional(),\n  /** `MPIN_INCORRECT`: wrong tries left before the MPIN locks. */\n  attemptsLeft: z.number().int().min(0).optional(),\n  /** `MPIN_LOCKED`: when the MPIN can be tried again. */\n  lockedUntil: z.iso.datetime().optional(),\n  /** `PRODUCT_NOT_LISTABLE`: what the product lacks to be (or stay) listed. */\n  missing: z.array(productListingRequirementSchema).optional(),\n  /** `COMMUNITY_ANNOUNCE_TOO_SOON` (0.9.0): when notifying every member is allowed again. */\n  nextAt: z.iso.datetime().optional(),\n  /**\n   * `COMMUNITY_LAST_ADMIN` on an account deletion (0.9.0): the communities the\n   * member is the only admin of, to hand over first.\n   */\n  communities: z.array(z.object({ id: objectIdSchema, name: z.string() })).optional(),\n});\nexport type ApiErrorDetails = z.infer<typeof apiErrorDetailsSchema>;\n\n/**\n * `code` is one of `API_ERROR_CODE_VALUES`, and it is what a client acts on.\n * `message` is English, for logs and for a client that predates the code.\n */\nexport const apiErrorSchema = z.object({\n  code: apiErrorCodeSchema,\n  message: z.string(),\n  details: apiErrorDetailsSchema.optional(),\n});\nexport type ApiError = z.infer<typeof apiErrorSchema>;\n\n/** Success envelope. `T` is the payload schema. */\nexport const successResponseSchema = <T extends z.ZodType>(data: T) =>\n  z.object({\n    success: z.literal(true),\n    data,\n    message: z.string().optional(),\n  });\n\nexport const errorResponseSchema = z.object({\n  success: z.literal(false),\n  error: apiErrorSchema,\n});\nexport type ErrorResponse = z.infer<typeof errorResponseSchema>;\n\n/**\n * Cursor-paginated list envelope.\n *\n * `nextCursor` is REQUIRED and is `null` at the end of the list. Omitting the\n * key is not the same thing and does not validate: a handler must decide\n * whether there is another page and say so, because \"the key is missing\" and\n * \"there are no more results\" are indistinguishable to a client that has to\n * choose between showing a Load more button and not showing one.\n *\n * An earlier version of this comment said absence and null were equivalent.\n * They never were; the schema has always required the key. Corrected\n * 2026-09-21, and pinned by a test.\n */\nexport const paginatedSchema = <T extends z.ZodType>(item: T) =>\n  z.object({\n    items: z.array(item),\n    nextCursor: z.string().nullable(),\n  });\n\n/**\n * What a create, an edit or a delete answers: the id of the thing it touched.\n * A client that needs the whole item reads it, so a write never ships a second\n * projection of it that could drift from the read path's.\n */\nexport const idResponseSchema = z.object({ id: objectIdSchema });\nexport type IdResponse = z.infer<typeof idResponseSchema>;\n"]}

package/dist/core/validation.d.ts

@@ -93,6 +93,12 @@ export declare const VALIDATION_MESSAGE: {
     readonly screenshotsDuplicate: "screenshotsDuplicate";
     /** The same platform twice in one list. */
     readonly platformsDuplicate: "platformsDuplicate";
+    /** The same topic twice in one list (0.9.0). */
+    readonly topicsDuplicate: "topicsDuplicate";
+    /** A post or poll in a community naming a product or an ask (0.9.0): community content carries neither. */
+    readonly communityWithProduct: "communityWithProduct";
+    /** The same capability twice in one list (0.9.0). */
+    readonly capabilitiesDuplicate: "capabilitiesDuplicate";
 };
 export type ValidationMessageKey = (typeof VALIDATION_MESSAGE)[keyof typeof VALIDATION_MESSAGE];
 /**

package/dist/core/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/core/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB;IAC7B,6BAA6B;;IAE7B,6DAA6D;;IAE7D,2CAA2C;;IAE3C,+BAA+B;;IAE/B,uDAAuD;;IAEvD,6BAA6B;;IAE7B,8DAA8D;;IAE9D,uCAAuC;;IAEvC,wDAAwD;;IAExD,0DAA0D;;IAE1D,0CAA0C;;IAE1C,4CAA4C;;IAE5C,uEAAuE;;IAEvE,uFAAuF;;IAEvF,sEAAsE;;IAEtE,yEAAyE;;IAEzE,8CAA8C;;IAE9C,4CAA4C;;IAE5C,kDAAkD;;IAElD,uCAAuC;;IAEvC,yEAAyE;;IAEzE,uDAAuD;;IAEvD,wDAAwD;;IAExD,+CAA+C;;IAE/C,gFAAgF;;IAEhF,gDAAgD;;IAEhD,2CAA2C;;CAEnC,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAEhG;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,sCAAuC,CAAC;AACxE,eAAO,MAAM,iBAAiB;;;;EAA8B,CAAC;AAC7D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;iBAkBhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,6EAA6E;AAC7E,UAAU,YAAY;IACpB,IAAI,EAAE,SAAS,WAAW,EAAE,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAKD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE;IAAE,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,EAC1C,QAAQ,CAAC,EAAE,WAAW,GACrB,eAAe,EAAE,CAkBnB"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/core/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB;IAC7B,6BAA6B;;IAE7B,6DAA6D;;IAE7D,2CAA2C;;IAE3C,+BAA+B;;IAE/B,uDAAuD;;IAEvD,6BAA6B;;IAE7B,8DAA8D;;IAE9D,uCAAuC;;IAEvC,wDAAwD;;IAExD,0DAA0D;;IAE1D,0CAA0C;;IAE1C,4CAA4C;;IAE5C,uEAAuE;;IAEvE,uFAAuF;;IAEvF,sEAAsE;;IAEtE,yEAAyE;;IAEzE,8CAA8C;;IAE9C,4CAA4C;;IAE5C,kDAAkD;;IAElD,uCAAuC;;IAEvC,yEAAyE;;IAEzE,uDAAuD;;IAEvD,wDAAwD;;IAExD,+CAA+C;;IAE/C,gFAAgF;;IAEhF,gDAAgD;;IAEhD,2CAA2C;;IAE3C,gDAAgD;;IAEhD,2GAA2G;;IAE3G,qDAAqD;;CAE7C,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAEhG;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,sCAAuC,CAAC;AACxE,eAAO,MAAM,iBAAiB;;;;EAA8B,CAAC;AAC7D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;iBAkBhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,6EAA6E;AAC7E,UAAU,YAAY;IACpB,IAAI,EAAE,SAAS,WAAW,EAAE,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAKD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE;IAAE,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,EAC1C,QAAQ,CAAC,EAAE,WAAW,GACrB,eAAe,EAAE,CAkBnB"}

package/dist/core/validation.js

@@ -93,6 +93,12 @@ export const VALIDATION_MESSAGE = {
     screenshotsDuplicate: 'screenshotsDuplicate',
     /** The same platform twice in one list. */
     platformsDuplicate: 'platformsDuplicate',
+    /** The same topic twice in one list (0.9.0). */
+    topicsDuplicate: 'topicsDuplicate',
+    /** A post or poll in a community naming a product or an ask (0.9.0): community content carries neither. */
+    communityWithProduct: 'communityWithProduct',
+    /** The same capability twice in one list (0.9.0). */
+    capabilitiesDuplicate: 'capabilitiesDuplicate',
 };
 /**
  * Which part of the request an issue is about.

package/dist/core/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/core/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,6BAA6B;IAC7B,SAAS,EAAE,WAAW;IACtB,6DAA6D;IAC7D,eAAe,EAAE,iBAAiB;IAClC,2CAA2C;IAC3C,YAAY,EAAE,cAAc;IAC5B,+BAA+B;IAC/B,WAAW,EAAE,aAAa;IAC1B,uDAAuD;IACvD,UAAU,EAAE,YAAY;IACxB,6BAA6B;IAC7B,WAAW,EAAE,aAAa;IAC1B,8DAA8D;IAC9D,SAAS,EAAE,WAAW;IACtB,uCAAuC;IACvC,iBAAiB,EAAE,mBAAmB;IACtC,wDAAwD;IACxD,gBAAgB,EAAE,kBAAkB;IACpC,0DAA0D;IAC1D,cAAc,EAAE,gBAAgB;IAChC,0CAA0C;IAC1C,SAAS,EAAE,WAAW;IACtB,4CAA4C;IAC5C,oBAAoB,EAAE,sBAAsB;IAC5C,uEAAuE;IACvE,aAAa,EAAE,eAAe;IAC9B,uFAAuF;IACvF,UAAU,EAAE,YAAY;IACxB,sEAAsE;IACtE,gBAAgB,EAAE,kBAAkB;IACpC,yEAAyE;IACzE,kBAAkB,EAAE,oBAAoB;IACxC,8CAA8C;IAC9C,WAAW,EAAE,aAAa;IAC1B,4CAA4C;IAC5C,YAAY,EAAE,cAAc;IAC5B,kDAAkD;IAClD,YAAY,EAAE,cAAc;IAC5B,uCAAuC;IACvC,cAAc,EAAE,gBAAgB;IAChC,yEAAyE;IACzE,iBAAiB,EAAE,mBAAmB;IACtC,uDAAuD;IACvD,gBAAgB,EAAE,kBAAkB;IACpC,wDAAwD;IACxD,iBAAiB,EAAE,mBAAmB;IACtC,+CAA+C;IAC/C,cAAc,EAAE,gBAAgB;IAChC,gFAAgF;IAChF,aAAa,EAAE,eAAe;IAC9B,gDAAgD;IAChD,oBAAoB,EAAE,sBAAsB;IAC5C,2CAA2C;IAC3C,kBAAkB,EAAE,oBAAoB;CAChC,CAAC;AAGX;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAG7D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,iFAAiF;IACjF,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACtC;;;OAGG;IACH,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,8CAA8C;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,4CAA4C;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,wDAAwD;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,oEAAoE;IACpE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAcH,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAsB,EAAE,CAClD,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAA0C,EAC1C,QAAsB;IAEtB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,GAAG,GAAoB;YAC3B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACzB,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CACpF;YACD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACjD,IAAI,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACjD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAChE,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAChE,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * founder-schema — How a validation failure is described, on both sides\n *\n * TWO RULES, and they are what let the web client show any error, its own or\n * the server's, on the right field in the member's language:\n *\n *  1. A CUSTOM MESSAGE IS A KEY, NEVER A SENTENCE. Where a schema needs its own\n *     message (a refine, a regex), the message is one of `VALIDATION_MESSAGE`,\n *     such as `phoneInvalid`. The client turns the key into text in English or\n *     Hindi. Before 0.2.0 these were English sentences, so a Hindi screen showed\n *     an English error, and a client that wanted to translate one had to match\n *     on the wording.\n *\n *     Plain bounds carry NO custom message. `.min(1)` and `.max(80)` produce\n *     Zod's own `too_small` / `too_big` issues, which already say which bound\n *     and what it was (`minimum`, `maximum`, `origin`), and the client words\n *     them from those. A hand-written \"at most 80 characters\" would only\n *     restate the number in one language.\n *\n *  2. THE SERVER SENDS EVERY ISSUE, IN THIS SHAPE. A 400 answers with\n *     `error.details.issues`, built by `toValidationIssues`, so the client can\n *     put each one under its field. Until 0.2.0 the backend sent only the\n *     first issue's message, with no path at all.\n *\n * ⚠️ `toValidationIssues` COPIES A WHITELIST OF FIELDS, it never spreads an\n * issue. Zod can carry the rejected `input` on an issue, and these bodies hold a\n * date of birth and a phone number. Echoing them into an error response sends\n * them back to the client, into logs and into any proxy in between. A test\n * proves `input` never survives.\n *\n * @module founder-schema/core/validation\n */\n\nimport { z } from 'zod';\n\n/**\n * Every custom message a schema in this package can produce. Each is a\n * translation key the clients define in every language they ship.\n *\n * ⚠️ Append only, and add the translation in the same change. Renaming one\n * shows the raw key to every member until each client ships the new name.\n */\nexport const VALIDATION_MESSAGE = {\n  /** Not a 24-hex Mongo id. */\n  invalidId: 'invalidId',\n  /** Handle: wrong characters, or a dot in the wrong place. */\n  usernameInvalid: 'usernameInvalid',\n  /** Not a 10-digit Indian mobile number. */\n  phoneInvalid: 'phoneInvalid',\n  /** Not a `YYYY-MM-DD` date. */\n  dateInvalid: 'dateInvalid',\n  /** A date that does not exist, such as 30 February. */\n  dobInvalid: 'dobInvalid',\n  /** Under the minimum age. */\n  dobUnderAge: 'dobUnderAge',\n  /** Over the sanity ceiling: almost always a mistyped year. */\n  dobTooOld: 'dobTooOld',\n  /** A founding year after this year. */\n  foundedYearFuture: 'foundedYearFuture',\n  /** An upload key that is not one this product mints. */\n  uploadKeyInvalid: 'uploadKeyInvalid',\n  /** The same uploaded image attached twice to one post. */\n  mediaDuplicate: 'mediaDuplicate',\n  /** A post with neither text nor media. */\n  postEmpty: 'postEmpty',\n  /** Two poll options with the same label. */\n  pollOptionsDuplicate: 'pollOptionsDuplicate',\n  /** An empty string sent to clear a patch field; clearing is `null`. */\n  clearWithNull: 'clearWithNull',\n  /** Not a plain http(s) URL on a real domain (`javascript:`, `localhost`, an IP...). */\n  urlInvalid: 'urlInvalid',\n  /** A handle this product keeps for itself (`admin`, `support`...). */\n  usernameReserved: 'usernameReserved',\n  /** Agreed to a version of the guidelines that is not the current one. */\n  guidelinesOutdated: 'guidelinesOutdated',\n  /** An MPIN that is not exactly six digits. */\n  mpinInvalid: 'mpinInvalid',\n  /** The MPIN and its confirmation differ. */\n  mpinMismatch: 'mpinMismatch',\n  /** Switching to a staff role without the MPIN. */\n  mpinRequired: 'mpinRequired',\n  /** The same role twice in one list. */\n  rolesDuplicate: 'rolesDuplicate',\n  /** An ask (\"testers wanted\") on a post or poll that names no product. */\n  askWithoutProduct: 'askWithoutProduct',\n  /** An App Store link that is not on apps.apple.com. */\n  appStoreLinkHost: 'appStoreLinkHost',\n  /** A Play Store link that is not on play.google.com. */\n  playStoreLinkHost: 'playStoreLinkHost',\n  /** A GitHub link that is not on github.com. */\n  githubLinkHost: 'githubLinkHost',\n  /** A demo video that is not a YouTube link. Video is shared, never uploaded. */\n  videoLinkHost: 'videoLinkHost',\n  /** The same screenshot twice in one gallery. */\n  screenshotsDuplicate: 'screenshotsDuplicate',\n  /** The same platform twice in one list. */\n  platformsDuplicate: 'platformsDuplicate',\n} as const;\nexport type ValidationMessageKey = (typeof VALIDATION_MESSAGE)[keyof typeof VALIDATION_MESSAGE];\n\n/**\n * Which part of the request an issue is about.\n *\n * ONE PATH CONVENTION: `path` is ALWAYS relative to this part, so a body field\n * reads `['venture', 'name']` with `location: 'body'`, never\n * `['body', 'venture', 'name']`. A form maps body issues straight onto its\n * fields without stripping a prefix, and a client that sees `query` or\n * `params` knows the problem is the URL, not anything the member typed.\n */\nexport const REQUEST_PART_VALUES = ['body', 'query', 'params'] as const;\nexport const requestPartSchema = z.enum(REQUEST_PART_VALUES);\nexport type RequestPart = z.infer<typeof requestPartSchema>;\n\n/**\n * One problem with one field, as it crosses the wire.\n *\n * `code` is Zod's issue code (`too_small`, `too_big`, `invalid_type`,\n * `invalid_format`, `custom`...). `message` is either one of\n * `VALIDATION_MESSAGE` or, for a plain bound, Zod's own English text, which the\n * client ignores in favour of `code` plus `minimum` / `maximum`.\n */\nexport const validationIssueSchema = z.object({\n  /** Set by the server on every issue it sends; absent on a client's own parse. */\n  location: requestPartSchema.optional(),\n  /**\n   * Where the problem is, RELATIVE TO `location`: `['venture', 'name']`,\n   * `['options', 2, 'label']`, `['contentId']`.\n   */\n  path: z.array(z.union([z.string(), z.number()])),\n  code: z.string(),\n  message: z.string(),\n  /** `too_small`: the bound that was missed. */\n  minimum: z.number().optional(),\n  /** `too_big`: the bound that was passed. */\n  maximum: z.number().optional(),\n  /** What was measured: `string`, `array`, `number`... */\n  origin: z.string().optional(),\n  /** `invalid_format`: which format, e.g. `url`, `regex`, `email`. */\n  format: z.string().optional(),\n});\nexport type ValidationIssue = z.infer<typeof validationIssueSchema>;\n\n/** The loosest shape this needs from a Zod issue, so it works across 4.x. */\ninterface ZodIssueLike {\n  path: readonly PropertyKey[];\n  code: string;\n  message: string;\n  minimum?: unknown;\n  maximum?: unknown;\n  origin?: unknown;\n  format?: unknown;\n}\n\nconst toNumber = (v: unknown): number | undefined =>\n  typeof v === 'number' ? v : typeof v === 'bigint' ? Number(v) : undefined;\n\n/**\n * A Zod error as the wire shape. Use this on the server for every 400, and on\n * the client to treat its own errors and the server's the same way.\n *\n * `location` is stamped on every issue when given; the server always gives it.\n *\n * Copies a WHITELIST of fields (see the module note). A path segment that is a\n * symbol, which JSON cannot carry, becomes its description.\n */\nexport function toValidationIssues(\n  error: { issues: readonly ZodIssueLike[] },\n  location?: RequestPart,\n): ValidationIssue[] {\n  return error.issues.map((issue) => {\n    const out: ValidationIssue = {\n      ...(location ? { location } : {}),\n      path: issue.path.map((p) =>\n        typeof p === 'number' ? p : typeof p === 'string' ? p : String(p.description ?? ''),\n      ),\n      code: issue.code,\n      message: issue.message,\n    };\n    const minimum = toNumber(issue.minimum);\n    const maximum = toNumber(issue.maximum);\n    if (minimum !== undefined) out.minimum = minimum;\n    if (maximum !== undefined) out.maximum = maximum;\n    if (typeof issue.origin === 'string') out.origin = issue.origin;\n    if (typeof issue.format === 'string') out.format = issue.format;\n    return out;\n  });\n}\n"]}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/core/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,6BAA6B;IAC7B,SAAS,EAAE,WAAW;IACtB,6DAA6D;IAC7D,eAAe,EAAE,iBAAiB;IAClC,2CAA2C;IAC3C,YAAY,EAAE,cAAc;IAC5B,+BAA+B;IAC/B,WAAW,EAAE,aAAa;IAC1B,uDAAuD;IACvD,UAAU,EAAE,YAAY;IACxB,6BAA6B;IAC7B,WAAW,EAAE,aAAa;IAC1B,8DAA8D;IAC9D,SAAS,EAAE,WAAW;IACtB,uCAAuC;IACvC,iBAAiB,EAAE,mBAAmB;IACtC,wDAAwD;IACxD,gBAAgB,EAAE,kBAAkB;IACpC,0DAA0D;IAC1D,cAAc,EAAE,gBAAgB;IAChC,0CAA0C;IAC1C,SAAS,EAAE,WAAW;IACtB,4CAA4C;IAC5C,oBAAoB,EAAE,sBAAsB;IAC5C,uEAAuE;IACvE,aAAa,EAAE,eAAe;IAC9B,uFAAuF;IACvF,UAAU,EAAE,YAAY;IACxB,sEAAsE;IACtE,gBAAgB,EAAE,kBAAkB;IACpC,yEAAyE;IACzE,kBAAkB,EAAE,oBAAoB;IACxC,8CAA8C;IAC9C,WAAW,EAAE,aAAa;IAC1B,4CAA4C;IAC5C,YAAY,EAAE,cAAc;IAC5B,kDAAkD;IAClD,YAAY,EAAE,cAAc;IAC5B,uCAAuC;IACvC,cAAc,EAAE,gBAAgB;IAChC,yEAAyE;IACzE,iBAAiB,EAAE,mBAAmB;IACtC,uDAAuD;IACvD,gBAAgB,EAAE,kBAAkB;IACpC,wDAAwD;IACxD,iBAAiB,EAAE,mBAAmB;IACtC,+CAA+C;IAC/C,cAAc,EAAE,gBAAgB;IAChC,gFAAgF;IAChF,aAAa,EAAE,eAAe;IAC9B,gDAAgD;IAChD,oBAAoB,EAAE,sBAAsB;IAC5C,2CAA2C;IAC3C,kBAAkB,EAAE,oBAAoB;IACxC,gDAAgD;IAChD,eAAe,EAAE,iBAAiB;IAClC,2GAA2G;IAC3G,oBAAoB,EAAE,sBAAsB;IAC5C,qDAAqD;IACrD,qBAAqB,EAAE,uBAAuB;CACtC,CAAC;AAGX;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAG7D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,iFAAiF;IACjF,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACtC;;;OAGG;IACH,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,8CAA8C;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,4CAA4C;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,wDAAwD;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,oEAAoE;IACpE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAcH,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAsB,EAAE,CAClD,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAA0C,EAC1C,QAAsB;IAEtB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,GAAG,GAAoB;YAC3B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACzB,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CACpF;YACD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACjD,IAAI,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACjD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAChE,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAChE,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * founder-schema — How a validation failure is described, on both sides\n *\n * TWO RULES, and they are what let the web client show any error, its own or\n * the server's, on the right field in the member's language:\n *\n *  1. A CUSTOM MESSAGE IS A KEY, NEVER A SENTENCE. Where a schema needs its own\n *     message (a refine, a regex), the message is one of `VALIDATION_MESSAGE`,\n *     such as `phoneInvalid`. The client turns the key into text in English or\n *     Hindi. Before 0.2.0 these were English sentences, so a Hindi screen showed\n *     an English error, and a client that wanted to translate one had to match\n *     on the wording.\n *\n *     Plain bounds carry NO custom message. `.min(1)` and `.max(80)` produce\n *     Zod's own `too_small` / `too_big` issues, which already say which bound\n *     and what it was (`minimum`, `maximum`, `origin`), and the client words\n *     them from those. A hand-written \"at most 80 characters\" would only\n *     restate the number in one language.\n *\n *  2. THE SERVER SENDS EVERY ISSUE, IN THIS SHAPE. A 400 answers with\n *     `error.details.issues`, built by `toValidationIssues`, so the client can\n *     put each one under its field. Until 0.2.0 the backend sent only the\n *     first issue's message, with no path at all.\n *\n * ⚠️ `toValidationIssues` COPIES A WHITELIST OF FIELDS, it never spreads an\n * issue. Zod can carry the rejected `input` on an issue, and these bodies hold a\n * date of birth and a phone number. Echoing them into an error response sends\n * them back to the client, into logs and into any proxy in between. A test\n * proves `input` never survives.\n *\n * @module founder-schema/core/validation\n */\n\nimport { z } from 'zod';\n\n/**\n * Every custom message a schema in this package can produce. Each is a\n * translation key the clients define in every language they ship.\n *\n * ⚠️ Append only, and add the translation in the same change. Renaming one\n * shows the raw key to every member until each client ships the new name.\n */\nexport const VALIDATION_MESSAGE = {\n  /** Not a 24-hex Mongo id. */\n  invalidId: 'invalidId',\n  /** Handle: wrong characters, or a dot in the wrong place. */\n  usernameInvalid: 'usernameInvalid',\n  /** Not a 10-digit Indian mobile number. */\n  phoneInvalid: 'phoneInvalid',\n  /** Not a `YYYY-MM-DD` date. */\n  dateInvalid: 'dateInvalid',\n  /** A date that does not exist, such as 30 February. */\n  dobInvalid: 'dobInvalid',\n  /** Under the minimum age. */\n  dobUnderAge: 'dobUnderAge',\n  /** Over the sanity ceiling: almost always a mistyped year. */\n  dobTooOld: 'dobTooOld',\n  /** A founding year after this year. */\n  foundedYearFuture: 'foundedYearFuture',\n  /** An upload key that is not one this product mints. */\n  uploadKeyInvalid: 'uploadKeyInvalid',\n  /** The same uploaded image attached twice to one post. */\n  mediaDuplicate: 'mediaDuplicate',\n  /** A post with neither text nor media. */\n  postEmpty: 'postEmpty',\n  /** Two poll options with the same label. */\n  pollOptionsDuplicate: 'pollOptionsDuplicate',\n  /** An empty string sent to clear a patch field; clearing is `null`. */\n  clearWithNull: 'clearWithNull',\n  /** Not a plain http(s) URL on a real domain (`javascript:`, `localhost`, an IP...). */\n  urlInvalid: 'urlInvalid',\n  /** A handle this product keeps for itself (`admin`, `support`...). */\n  usernameReserved: 'usernameReserved',\n  /** Agreed to a version of the guidelines that is not the current one. */\n  guidelinesOutdated: 'guidelinesOutdated',\n  /** An MPIN that is not exactly six digits. */\n  mpinInvalid: 'mpinInvalid',\n  /** The MPIN and its confirmation differ. */\n  mpinMismatch: 'mpinMismatch',\n  /** Switching to a staff role without the MPIN. */\n  mpinRequired: 'mpinRequired',\n  /** The same role twice in one list. */\n  rolesDuplicate: 'rolesDuplicate',\n  /** An ask (\"testers wanted\") on a post or poll that names no product. */\n  askWithoutProduct: 'askWithoutProduct',\n  /** An App Store link that is not on apps.apple.com. */\n  appStoreLinkHost: 'appStoreLinkHost',\n  /** A Play Store link that is not on play.google.com. */\n  playStoreLinkHost: 'playStoreLinkHost',\n  /** A GitHub link that is not on github.com. */\n  githubLinkHost: 'githubLinkHost',\n  /** A demo video that is not a YouTube link. Video is shared, never uploaded. */\n  videoLinkHost: 'videoLinkHost',\n  /** The same screenshot twice in one gallery. */\n  screenshotsDuplicate: 'screenshotsDuplicate',\n  /** The same platform twice in one list. */\n  platformsDuplicate: 'platformsDuplicate',\n  /** The same topic twice in one list (0.9.0). */\n  topicsDuplicate: 'topicsDuplicate',\n  /** A post or poll in a community naming a product or an ask (0.9.0): community content carries neither. */\n  communityWithProduct: 'communityWithProduct',\n  /** The same capability twice in one list (0.9.0). */\n  capabilitiesDuplicate: 'capabilitiesDuplicate',\n} as const;\nexport type ValidationMessageKey = (typeof VALIDATION_MESSAGE)[keyof typeof VALIDATION_MESSAGE];\n\n/**\n * Which part of the request an issue is about.\n *\n * ONE PATH CONVENTION: `path` is ALWAYS relative to this part, so a body field\n * reads `['venture', 'name']` with `location: 'body'`, never\n * `['body', 'venture', 'name']`. A form maps body issues straight onto its\n * fields without stripping a prefix, and a client that sees `query` or\n * `params` knows the problem is the URL, not anything the member typed.\n */\nexport const REQUEST_PART_VALUES = ['body', 'query', 'params'] as const;\nexport const requestPartSchema = z.enum(REQUEST_PART_VALUES);\nexport type RequestPart = z.infer<typeof requestPartSchema>;\n\n/**\n * One problem with one field, as it crosses the wire.\n *\n * `code` is Zod's issue code (`too_small`, `too_big`, `invalid_type`,\n * `invalid_format`, `custom`...). `message` is either one of\n * `VALIDATION_MESSAGE` or, for a plain bound, Zod's own English text, which the\n * client ignores in favour of `code` plus `minimum` / `maximum`.\n */\nexport const validationIssueSchema = z.object({\n  /** Set by the server on every issue it sends; absent on a client's own parse. */\n  location: requestPartSchema.optional(),\n  /**\n   * Where the problem is, RELATIVE TO `location`: `['venture', 'name']`,\n   * `['options', 2, 'label']`, `['contentId']`.\n   */\n  path: z.array(z.union([z.string(), z.number()])),\n  code: z.string(),\n  message: z.string(),\n  /** `too_small`: the bound that was missed. */\n  minimum: z.number().optional(),\n  /** `too_big`: the bound that was passed. */\n  maximum: z.number().optional(),\n  /** What was measured: `string`, `array`, `number`... */\n  origin: z.string().optional(),\n  /** `invalid_format`: which format, e.g. `url`, `regex`, `email`. */\n  format: z.string().optional(),\n});\nexport type ValidationIssue = z.infer<typeof validationIssueSchema>;\n\n/** The loosest shape this needs from a Zod issue, so it works across 4.x. */\ninterface ZodIssueLike {\n  path: readonly PropertyKey[];\n  code: string;\n  message: string;\n  minimum?: unknown;\n  maximum?: unknown;\n  origin?: unknown;\n  format?: unknown;\n}\n\nconst toNumber = (v: unknown): number | undefined =>\n  typeof v === 'number' ? v : typeof v === 'bigint' ? Number(v) : undefined;\n\n/**\n * A Zod error as the wire shape. Use this on the server for every 400, and on\n * the client to treat its own errors and the server's the same way.\n *\n * `location` is stamped on every issue when given; the server always gives it.\n *\n * Copies a WHITELIST of fields (see the module note). A path segment that is a\n * symbol, which JSON cannot carry, becomes its description.\n */\nexport function toValidationIssues(\n  error: { issues: readonly ZodIssueLike[] },\n  location?: RequestPart,\n): ValidationIssue[] {\n  return error.issues.map((issue) => {\n    const out: ValidationIssue = {\n      ...(location ? { location } : {}),\n      path: issue.path.map((p) =>\n        typeof p === 'number' ? p : typeof p === 'string' ? p : String(p.description ?? ''),\n      ),\n      code: issue.code,\n      message: issue.message,\n    };\n    const minimum = toNumber(issue.minimum);\n    const maximum = toNumber(issue.maximum);\n    if (minimum !== undefined) out.minimum = minimum;\n    if (maximum !== undefined) out.maximum = maximum;\n    if (typeof issue.origin === 'string') out.origin = issue.origin;\n    if (typeof issue.format === 'string') out.format = issue.format;\n    return out;\n  });\n}\n"]}