@tbs-fitness/contract 0.3.0 → 0.5.0

package/dist/cjs/coach/coach-auth.dto.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.coachLoginResponseSchema = exports.coachProfileSchema = exports.resetTokenResponseSchema = exports.signupVerifiedResponseSchema = exports.otpDispatchResponseSchema = exports.resetPasswordSchema = exports.coachLoginSchema = exports.verifyOtpSchema = exports.otpEmailSchema = exports.coachSignupSchema = void 0;
+exports.coachLoginResponseSchema = exports.coachProfileSchema = exports.coachLoginSchema = exports.coachSignupSchema = void 0;
 const zod_1 = require("zod");
 const auth_dto_js_1 = require("../auth/auth.dto.js");
 const contact_schema_js_1 = require("../common/contact.schema.js");
@@ -15,12 +15,6 @@ exports.coachSignupSchema = zod_1.z.strictObject({
     /** The browser's time zone. Missing or unusable becomes UTC on the server. */
     timezone: date_time_schema_js_1.detectedTimezoneSchema,
 });
-/** Used by both resend endpoints and by forgot-password. */
-exports.otpEmailSchema = zod_1.z.strictObject({ email: contact_schema_js_1.emailSchema });
-exports.verifyOtpSchema = zod_1.z.strictObject({
-    email: contact_schema_js_1.emailSchema,
-    code: auth_dto_js_1.otpCodeSchema,
-});
 /**
  * Coaches sign in from the browser, so the refresh token always travels in an
  * HttpOnly cookie. `rememberMe: false` makes that cookie end with the browser
@@ -36,29 +30,6 @@ exports.coachLoginSchema = auth_dto_js_1.loginSchema
      */
     timezone: date_time_schema_js_1.detectedTimezoneSchema,
 });
-exports.resetPasswordSchema = zod_1.z.strictObject({
-    resetToken: auth_dto_js_1.opaqueTokenSchema,
-    newPassword: auth_dto_js_1.newPasswordSchema,
-});
-/**
- * Says what the client needs to drive the code screen, and nothing about
- * whether the email belongs to an account: the same values are returned either
- * way.
- */
-exports.otpDispatchResponseSchema = zod_1.z.object({
-    message: zod_1.z.string(),
-    otpLength: zod_1.z.number().int(),
-    expiresInSeconds: zod_1.z.number().int(),
-    resendAvailableInSeconds: zod_1.z.number().int(),
-});
-exports.signupVerifiedResponseSchema = zod_1.z.object({
-    message: zod_1.z.string(),
-});
-/** Issued only after a recovery code is verified. It can reset a password once. */
-exports.resetTokenResponseSchema = zod_1.z.object({
-    resetToken: zod_1.z.string(),
-    expiresInSeconds: zod_1.z.number().int(),
-});
 exports.coachProfileSchema = zod_1.z
     .object({
     id: zod_1.z.uuid(),

package/dist/cjs/coach/index.d.ts

@@ -1 +1,2 @@
+export * from '../auth/otp.dto.js';
 export * from './coach-auth.dto.js';

package/dist/cjs/coach/index.js

@@ -14,4 +14,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("../auth/otp.dto.js"), exports);
 __exportStar(require("./coach-auth.dto.js"), exports);

package/dist/cjs/communication/index.d.ts

@@ -0,0 +1,2 @@
+export * from './message-catalogue.js';
+export * from './template.dto.js';

package/dist/cjs/communication/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./message-catalogue.js"), exports);
+__exportStar(require("./template.dto.js"), exports);

package/dist/cjs/communication/message-catalogue.d.ts

@@ -0,0 +1,26 @@
+import type { CommunicationChannel, MessageType } from '../enums/index.js';
+/**
+ * What the platform knows about each message type: the channels that may carry
+ * it, the channels switched on by default, and the variables its sender
+ * supplies. A template may only use supplied variables, and must use the
+ * required ones, so an admin can never activate a template the system cannot
+ * fill.
+ */
+export interface MessageTypeDefinition {
+    label: string;
+    description: string;
+    channels: readonly CommunicationChannel[];
+    defaultChannels: Readonly<Record<CommunicationChannel, boolean>>;
+    /** Every variable the sender passes, with a sample value for previews. */
+    variables: Readonly<Record<string, {
+        description: string;
+        example: string;
+    }>>;
+    /** Variables every template for this type must use. */
+    requiredVariables: readonly string[];
+}
+export declare const MESSAGE_CATALOGUE: Readonly<Record<MessageType, MessageTypeDefinition>>;
+/** The longest SMS body a template may have: four concatenated GSM-7 segments. */
+export declare const MAX_SMS_LENGTH = 612;
+/** One GSM-7 segment. Longer messages are split and cost more. */
+export declare const SMS_SEGMENT_LENGTH = 160;

package/dist/cjs/communication/message-catalogue.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SMS_SEGMENT_LENGTH = exports.MAX_SMS_LENGTH = exports.MESSAGE_CATALOGUE = void 0;
+const OTP_VARIABLES = {
+    code: { description: 'The one-time code', example: '482915' },
+    fullName: { description: "The recipient's name", example: 'Biki Singh' },
+    expiresInMinutes: {
+        description: 'Minutes until the code expires',
+        example: '10',
+    },
+    appName: { description: 'The product name', example: 'TBS' },
+};
+exports.MESSAGE_CATALOGUE = {
+    'auth.otp.signup_verification': {
+        label: 'Sign-up verification code',
+        description: 'Sent when a coach signs up, to verify their email address.',
+        channels: ['EMAIL', 'SMS'],
+        defaultChannels: { EMAIL: true, SMS: false },
+        variables: OTP_VARIABLES,
+        requiredVariables: ['code'],
+    },
+    'auth.otp.password_reset': {
+        label: 'Password recovery code',
+        description: 'Sent when a coach asks to reset a forgotten password.',
+        channels: ['EMAIL', 'SMS'],
+        defaultChannels: { EMAIL: true, SMS: false },
+        variables: OTP_VARIABLES,
+        requiredVariables: ['code'],
+    },
+    'auth.password_reset_link': {
+        label: 'Password reset link',
+        description: 'Sent when an administrator account requests a reset link.',
+        channels: ['EMAIL'],
+        defaultChannels: { EMAIL: true, SMS: false },
+        variables: {
+            resetUrl: {
+                description: 'The single-use reset link',
+                example: 'https://app.example.com/reset-password?token=…',
+            },
+            fullName: { description: "The recipient's name", example: 'Biki Singh' },
+            expiresInMinutes: {
+                description: 'Minutes until the link expires',
+                example: '30',
+            },
+            appName: { description: 'The product name', example: 'TBS' },
+        },
+        requiredVariables: ['resetUrl'],
+    },
+};
+/** The longest SMS body a template may have: four concatenated GSM-7 segments. */
+exports.MAX_SMS_LENGTH = 612;
+/** One GSM-7 segment. Longer messages are split and cost more. */
+exports.SMS_SEGMENT_LENGTH = 160;

package/dist/cjs/communication/template.dto.d.ts

@@ -0,0 +1,240 @@
+import { z } from 'zod';
+import { type CommunicationChannel, type MessageType } from '../enums/index.js';
+/** The variable names used as `{{name}}` in a piece of template text, in order, without repeats. */
+export declare function templatePlaceholders(text: string): string[];
+/** True when the text has a `{{` or `}}` that is not part of a valid placeholder. */
+export declare function hasMalformedPlaceholder(text: string): boolean;
+/** A variable a template declares. Its value is supplied when the message is sent. */
+export declare const templateVariableSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    example: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type TemplateVariable = z.output<typeof templateVariableSchema>;
+interface TemplateShape {
+    messageType: MessageType;
+    channel: CommunicationChannel;
+    subject?: string | null | undefined;
+    bodyText: string;
+    bodyHtml?: string | null | undefined;
+    variables: {
+        name: string;
+    }[];
+}
+/**
+ * The rules every template must meet before it is saved: the declared
+ * variables match the placeholders exactly, every one is supplied by the
+ * message type, and the type's required variables are used. Shared by the
+ * server and the admin editor, so both report the same problems.
+ */
+export declare function templateProblems(template: TemplateShape): {
+    path: string;
+    message: string;
+}[];
+/** A new draft. Saved templates are never edited; a change is a new version. */
+export declare const createTemplateSchema: z.ZodObject<{
+    messageType: z.ZodEnum<{
+        "auth.otp.signup_verification": "auth.otp.signup_verification";
+        "auth.otp.password_reset": "auth.otp.password_reset";
+        "auth.password_reset_link": "auth.password_reset_link";
+    }>;
+    channel: z.ZodEnum<{
+        EMAIL: "EMAIL";
+        SMS: "SMS";
+    }>;
+    name: z.ZodPipe<z.ZodString, z.ZodString>;
+    subject: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    bodyText: z.ZodString;
+    bodyHtml: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    variables: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        example: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type CreateTemplateInput = z.input<typeof createTemplateSchema>;
+export type CreateTemplateBody = z.output<typeof createTemplateSchema>;
+export declare const templateListQuerySchema: z.ZodObject<{
+    messageType: z.ZodOptional<z.ZodEnum<{
+        "auth.otp.signup_verification": "auth.otp.signup_verification";
+        "auth.otp.password_reset": "auth.otp.password_reset";
+        "auth.password_reset_link": "auth.password_reset_link";
+    }>>;
+    channel: z.ZodOptional<z.ZodEnum<{
+        EMAIL: "EMAIL";
+        SMS: "SMS";
+    }>>;
+}, z.core.$strict>;
+export type TemplateListQuery = z.output<typeof templateListQuerySchema>;
+export declare const templateResponseSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    messageType: z.ZodEnum<{
+        "auth.otp.signup_verification": "auth.otp.signup_verification";
+        "auth.otp.password_reset": "auth.otp.password_reset";
+        "auth.password_reset_link": "auth.password_reset_link";
+    }>;
+    channel: z.ZodEnum<{
+        EMAIL: "EMAIL";
+        SMS: "SMS";
+    }>;
+    version: z.ZodNumber;
+    name: z.ZodString;
+    subject: z.ZodNullable<z.ZodString>;
+    bodyText: z.ZodString;
+    bodyHtml: z.ZodNullable<z.ZodString>;
+    variables: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        example: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    status: z.ZodEnum<{
+        active: "active";
+        draft: "draft";
+        archived: "archived";
+    }>;
+    createdBy: z.ZodNullable<z.ZodUUID>;
+    createdAt: z.ZodISODateTime;
+    activatedBy: z.ZodNullable<z.ZodUUID>;
+    activatedAt: z.ZodNullable<z.ZodISODateTime>;
+}, z.core.$strip>;
+export type TemplateResponse = z.output<typeof templateResponseSchema>;
+export declare const templateListResponseSchema: z.ZodArray<z.ZodObject<{
+    id: z.ZodUUID;
+    messageType: z.ZodEnum<{
+        "auth.otp.signup_verification": "auth.otp.signup_verification";
+        "auth.otp.password_reset": "auth.otp.password_reset";
+        "auth.password_reset_link": "auth.password_reset_link";
+    }>;
+    channel: z.ZodEnum<{
+        EMAIL: "EMAIL";
+        SMS: "SMS";
+    }>;
+    version: z.ZodNumber;
+    name: z.ZodString;
+    subject: z.ZodNullable<z.ZodString>;
+    bodyText: z.ZodString;
+    bodyHtml: z.ZodNullable<z.ZodString>;
+    variables: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        example: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    status: z.ZodEnum<{
+        active: "active";
+        draft: "draft";
+        archived: "archived";
+    }>;
+    createdBy: z.ZodNullable<z.ZodUUID>;
+    createdAt: z.ZodISODateTime;
+    activatedBy: z.ZodNullable<z.ZodUUID>;
+    activatedAt: z.ZodNullable<z.ZodISODateTime>;
+}, z.core.$strip>>;
+/** Renders unsaved text, or a saved version, with the catalogue's sample values. */
+export declare const previewTemplateSchema: z.ZodUnion<readonly [z.ZodObject<{
+    templateId: z.ZodUUID;
+}, z.core.$strict>, z.ZodObject<{
+    messageType: z.ZodEnum<{
+        "auth.otp.signup_verification": "auth.otp.signup_verification";
+        "auth.otp.password_reset": "auth.otp.password_reset";
+        "auth.password_reset_link": "auth.password_reset_link";
+    }>;
+    channel: z.ZodEnum<{
+        EMAIL: "EMAIL";
+        SMS: "SMS";
+    }>;
+    name: z.ZodPipe<z.ZodString, z.ZodString>;
+    subject: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    bodyText: z.ZodString;
+    bodyHtml: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    variables: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        example: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>]>;
+export type PreviewTemplateInput = z.input<typeof previewTemplateSchema>;
+export type PreviewTemplateBody = z.output<typeof previewTemplateSchema>;
+export declare const renderedMessageSchema: z.ZodObject<{
+    channel: z.ZodEnum<{
+        EMAIL: "EMAIL";
+        SMS: "SMS";
+    }>;
+    subject: z.ZodNullable<z.ZodString>;
+    bodyText: z.ZodString;
+    bodyHtml: z.ZodNullable<z.ZodString>;
+    smsSegments: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+export type RenderedMessage = z.output<typeof renderedMessageSchema>;
+export declare const testSendResponseSchema: z.ZodObject<{
+    channel: z.ZodEnum<{
+        EMAIL: "EMAIL";
+        SMS: "SMS";
+    }>;
+    sentTo: z.ZodString;
+}, z.core.$strip>;
+export type TestSendResponse = z.output<typeof testSendResponseSchema>;
+/** A catalogue entry, with the built-in default template for each channel. */
+export declare const messageTypeResponseSchema: z.ZodObject<{
+    type: z.ZodEnum<{
+        "auth.otp.signup_verification": "auth.otp.signup_verification";
+        "auth.otp.password_reset": "auth.otp.password_reset";
+        "auth.password_reset_link": "auth.password_reset_link";
+    }>;
+    label: z.ZodString;
+    description: z.ZodString;
+    channels: z.ZodArray<z.ZodEnum<{
+        EMAIL: "EMAIL";
+        SMS: "SMS";
+    }>>;
+    variables: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodString;
+        example: z.ZodString;
+    }, z.core.$strip>>;
+    requiredVariables: z.ZodArray<z.ZodString>;
+    defaults: z.ZodArray<z.ZodObject<{
+        channel: z.ZodEnum<{
+            EMAIL: "EMAIL";
+            SMS: "SMS";
+        }>;
+        subject: z.ZodNullable<z.ZodString>;
+        bodyText: z.ZodString;
+        bodyHtml: z.ZodNullable<z.ZodString>;
+        variables: z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type MessageTypeResponse = z.output<typeof messageTypeResponseSchema>;
+export declare const messageTypeListResponseSchema: z.ZodArray<z.ZodObject<{
+    type: z.ZodEnum<{
+        "auth.otp.signup_verification": "auth.otp.signup_verification";
+        "auth.otp.password_reset": "auth.otp.password_reset";
+        "auth.password_reset_link": "auth.password_reset_link";
+    }>;
+    label: z.ZodString;
+    description: z.ZodString;
+    channels: z.ZodArray<z.ZodEnum<{
+        EMAIL: "EMAIL";
+        SMS: "SMS";
+    }>>;
+    variables: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodString;
+        example: z.ZodString;
+    }, z.core.$strip>>;
+    requiredVariables: z.ZodArray<z.ZodString>;
+    defaults: z.ZodArray<z.ZodObject<{
+        channel: z.ZodEnum<{
+            EMAIL: "EMAIL";
+            SMS: "SMS";
+        }>;
+        subject: z.ZodNullable<z.ZodString>;
+        bodyText: z.ZodString;
+        bodyHtml: z.ZodNullable<z.ZodString>;
+        variables: z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>>;
+export {};

package/dist/cjs/communication/template.dto.js

@@ -0,0 +1,206 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.messageTypeListResponseSchema = exports.messageTypeResponseSchema = exports.testSendResponseSchema = exports.renderedMessageSchema = exports.previewTemplateSchema = exports.templateListResponseSchema = exports.templateResponseSchema = exports.templateListQuerySchema = exports.createTemplateSchema = exports.templateVariableSchema = void 0;
+exports.templatePlaceholders = templatePlaceholders;
+exports.hasMalformedPlaceholder = hasMalformedPlaceholder;
+exports.templateProblems = templateProblems;
+const zod_1 = require("zod");
+const date_time_schema_js_1 = require("../common/date-time.schema.js");
+const safe_text_schema_js_1 = require("../common/safe-text.schema.js");
+const index_js_1 = require("../enums/index.js");
+const message_catalogue_js_1 = require("./message-catalogue.js");
+const PLACEHOLDER = /\{\{\s*([A-Za-z][A-Za-z0-9_]*)\s*\}\}/g;
+/** The variable names used as `{{name}}` in a piece of template text, in order, without repeats. */
+function templatePlaceholders(text) {
+    const names = new Set();
+    for (const match of text.matchAll(PLACEHOLDER)) {
+        names.add(match[1]);
+    }
+    return [...names];
+}
+/** True when the text has a `{{` or `}}` that is not part of a valid placeholder. */
+function hasMalformedPlaceholder(text) {
+    const rest = text.replace(PLACEHOLDER, '');
+    return rest.includes('{{') || rest.includes('}}');
+}
+const MAX_SUBJECT_LENGTH = 200;
+const MAX_BODY_LENGTH = 20000;
+/** A variable a template declares. Its value is supplied when the message is sent. */
+exports.templateVariableSchema = zod_1.z.strictObject({
+    name: zod_1.z
+        .string()
+        .regex(/^[A-Za-z][A-Za-z0-9_]*$/, {
+        error: 'Use letters, digits and underscores, starting with a letter',
+    })
+        .max(64),
+    description: (0, safe_text_schema_js_1.safeTextSchema)(200).optional(),
+    example: zod_1.z.string().max(500).optional(),
+});
+const templateFields = {
+    messageType: zod_1.z.enum(index_js_1.MESSAGE_TYPES),
+    channel: zod_1.z.enum(index_js_1.COMMUNICATION_CHANNELS),
+    name: (0, safe_text_schema_js_1.safeTextSchema)(100).pipe(zod_1.z.string().min(1, { error: 'Name it' })),
+    subject: zod_1.z.string().max(MAX_SUBJECT_LENGTH).nullish(),
+    bodyText: zod_1.z
+        .string()
+        .min(1, { error: 'Write the message' })
+        .max(MAX_BODY_LENGTH),
+    bodyHtml: zod_1.z.string().max(MAX_BODY_LENGTH).nullish(),
+    variables: zod_1.z.array(exports.templateVariableSchema).max(20),
+};
+/**
+ * The rules every template must meet before it is saved: the declared
+ * variables match the placeholders exactly, every one is supplied by the
+ * message type, and the type's required variables are used. Shared by the
+ * server and the admin editor, so both report the same problems.
+ */
+function templateProblems(template) {
+    const problems = [];
+    const definition = message_catalogue_js_1.MESSAGE_CATALOGUE[template.messageType];
+    const isEmail = template.channel === 'EMAIL';
+    if (!definition.channels.includes(template.channel)) {
+        problems.push({
+            path: 'channel',
+            message: `${definition.label} cannot be sent by ${template.channel}`,
+        });
+    }
+    if (isEmail && !template.subject?.trim()) {
+        problems.push({ path: 'subject', message: 'An email needs a subject' });
+    }
+    if (!isEmail && (template.subject || template.bodyHtml)) {
+        problems.push({
+            path: 'bodyHtml',
+            message: 'Only email templates have a subject or HTML',
+        });
+    }
+    if (template.channel === 'SMS' && template.bodyText.length > message_catalogue_js_1.MAX_SMS_LENGTH) {
+        problems.push({
+            path: 'bodyText',
+            message: `An SMS can be at most ${String(message_catalogue_js_1.MAX_SMS_LENGTH)} characters`,
+        });
+    }
+    const texts = [
+        template.subject ?? '',
+        template.bodyText,
+        template.bodyHtml ?? '',
+    ];
+    if (texts.some(hasMalformedPlaceholder)) {
+        problems.push({
+            path: 'bodyText',
+            message: 'Write placeholders as {{name}}, with matching braces',
+        });
+    }
+    const used = new Set(texts.flatMap(templatePlaceholders));
+    const declared = template.variables.map((variable) => variable.name);
+    const declaredSet = new Set(declared);
+    if (declaredSet.size !== declared.length) {
+        problems.push({ path: 'variables', message: 'Declare each variable once' });
+    }
+    for (const name of used) {
+        if (!declaredSet.has(name)) {
+            problems.push({
+                path: 'variables',
+                message: `{{${name}}} is used but not declared`,
+            });
+        }
+    }
+    for (const name of declaredSet) {
+        if (!used.has(name)) {
+            problems.push({
+                path: 'variables',
+                message: `${name} is declared but not used`,
+            });
+        }
+        if (!(name in definition.variables)) {
+            problems.push({
+                path: 'variables',
+                message: `${definition.label} does not supply ${name}`,
+            });
+        }
+    }
+    for (const name of definition.requiredVariables) {
+        if (!declaredSet.has(name)) {
+            problems.push({
+                path: 'variables',
+                message: `${definition.label} must include {{${name}}}`,
+            });
+        }
+    }
+    return problems;
+}
+/** A new draft. Saved templates are never edited; a change is a new version. */
+exports.createTemplateSchema = zod_1.z
+    .strictObject(templateFields)
+    .superRefine((template, ctx) => {
+    for (const problem of templateProblems(template)) {
+        ctx.addIssue({
+            code: 'custom',
+            path: [problem.path],
+            message: problem.message,
+        });
+    }
+});
+exports.templateListQuerySchema = zod_1.z.strictObject({
+    messageType: zod_1.z.enum(index_js_1.MESSAGE_TYPES).optional(),
+    channel: zod_1.z.enum(index_js_1.COMMUNICATION_CHANNELS).optional(),
+});
+exports.templateResponseSchema = zod_1.z.object({
+    id: zod_1.z.uuid(),
+    messageType: zod_1.z.enum(index_js_1.MESSAGE_TYPES),
+    channel: zod_1.z.enum(index_js_1.COMMUNICATION_CHANNELS),
+    version: zod_1.z.number().int(),
+    name: zod_1.z.string(),
+    subject: zod_1.z.string().nullable(),
+    bodyText: zod_1.z.string(),
+    bodyHtml: zod_1.z.string().nullable(),
+    variables: zod_1.z.array(zod_1.z.object({
+        name: zod_1.z.string(),
+        description: zod_1.z.string().optional(),
+        example: zod_1.z.string().optional(),
+    })),
+    status: zod_1.z.enum(index_js_1.TEMPLATE_STATUSES),
+    createdBy: zod_1.z.uuid().nullable(),
+    createdAt: date_time_schema_js_1.utcTimestampSchema,
+    activatedBy: zod_1.z.uuid().nullable(),
+    activatedAt: date_time_schema_js_1.utcTimestampSchema.nullable(),
+});
+exports.templateListResponseSchema = zod_1.z.array(exports.templateResponseSchema);
+/** Renders unsaved text, or a saved version, with the catalogue's sample values. */
+exports.previewTemplateSchema = zod_1.z.union([
+    zod_1.z.strictObject({ templateId: zod_1.z.uuid() }),
+    zod_1.z.strictObject(templateFields),
+]);
+exports.renderedMessageSchema = zod_1.z.object({
+    channel: zod_1.z.enum(index_js_1.COMMUNICATION_CHANNELS),
+    subject: zod_1.z.string().nullable(),
+    bodyText: zod_1.z.string(),
+    bodyHtml: zod_1.z.string().nullable(),
+    /** SMS only: how many 160-character segments it takes. */
+    smsSegments: zod_1.z.number().int().nullable(),
+});
+exports.testSendResponseSchema = zod_1.z.object({
+    channel: zod_1.z.enum(index_js_1.COMMUNICATION_CHANNELS),
+    /** The signed-in admin's own address, masked, such as `b***@tbs.coach`. */
+    sentTo: zod_1.z.string(),
+});
+/** A catalogue entry, with the built-in default template for each channel. */
+exports.messageTypeResponseSchema = zod_1.z.object({
+    type: zod_1.z.enum(index_js_1.MESSAGE_TYPES),
+    label: zod_1.z.string(),
+    description: zod_1.z.string(),
+    channels: zod_1.z.array(zod_1.z.enum(index_js_1.COMMUNICATION_CHANNELS)),
+    variables: zod_1.z.array(zod_1.z.object({
+        name: zod_1.z.string(),
+        description: zod_1.z.string(),
+        example: zod_1.z.string(),
+    })),
+    requiredVariables: zod_1.z.array(zod_1.z.string()),
+    defaults: zod_1.z.array(zod_1.z.object({
+        channel: zod_1.z.enum(index_js_1.COMMUNICATION_CHANNELS),
+        subject: zod_1.z.string().nullable(),
+        bodyText: zod_1.z.string(),
+        bodyHtml: zod_1.z.string().nullable(),
+        variables: zod_1.z.array(zod_1.z.object({ name: zod_1.z.string() })),
+    })),
+});
+exports.messageTypeListResponseSchema = zod_1.z.array(exports.messageTypeResponseSchema);

package/dist/cjs/enums/index.d.ts

@@ -1,7 +1,7 @@
 export declare const APP_ENVIRONMENTS: readonly ["development", "staging", "production"];
 export type AppEnvironment = (typeof APP_ENVIRONMENTS)[number];
 /** Each user has exactly one role. A new role is added here and nowhere else. */
-export declare const ROLES: readonly ["ADMIN", "COACH", "CUSTOMER"];
+export declare const ROLES: readonly ["ADMIN", "COACH", "CLIENT"];
 export type Role = (typeof ROLES)[number];
 /**
  * `pending_verification` is a self-registered user who has not yet proved they
@@ -23,5 +23,24 @@ export declare const TOKEN_TRANSPORTS: readonly ["body", "cookie"];
 export type TokenTransport = (typeof TOKEN_TRANSPORTS)[number];
 export declare const AUDIT_OUTCOMES: readonly ["success", "failure"];
 export type AuditOutcome = (typeof AUDIT_OUTCOMES)[number];
-export declare const FEATURE_FLAG_RULE_TYPES: readonly ["user", "customer", "trainer", "role"];
+export declare const FEATURE_FLAG_RULE_TYPES: readonly ["user", "client", "trainer", "role"];
 export type FeatureFlagRuleType = (typeof FEATURE_FLAG_RULE_TYPES)[number];
+/**
+ * The ways a message can reach someone. WhatsApp and push are added here when
+ * their channel modules are built.
+ */
+export declare const COMMUNICATION_CHANNELS: readonly ["EMAIL", "SMS"];
+export type CommunicationChannel = (typeof COMMUNICATION_CHANNELS)[number];
+/**
+ * Every message the platform sends. Each has a catalogue entry in
+ * `@tbs-fitness/contract/communication` saying which channels may carry it and
+ * which variables its sender supplies.
+ */
+export declare const MESSAGE_TYPES: readonly ["auth.otp.signup_verification", "auth.otp.password_reset", "auth.password_reset_link"];
+export type MessageType = (typeof MESSAGE_TYPES)[number];
+/** What happened to one message on one channel. */
+export declare const DELIVERY_STATUSES: readonly ["sent", "skipped_disabled", "skipped_unreachable", "failed", "failed_missing_variables"];
+export type DeliveryStatus = (typeof DELIVERY_STATUSES)[number];
+/** Only one version of a template per message type and channel is active. */
+export declare const TEMPLATE_STATUSES: readonly ["draft", "active", "archived"];
+export type TemplateStatus = (typeof TEMPLATE_STATUSES)[number];