gymmonk-schema 0.16.0 → 0.18.0

package/README.md

@@ -0,0 +1,43 @@
+# gymmonk-schema
+
+Shared **Zod** schemas, enums and domain types for **GymMonk** (fitness SaaS).
+Single source of truth (SSOT) consumed by both `gymmonk-backend` and
+`gymmonk-web-client`, so validation, wire types and enums never drift between
+the API and the app.
+
+## What's inside
+
+- **Common** (`common.ts`) — reusable primitives: `objectIdSchema`,
+  `paginationSchema`, `optionalTrimmedString`, `emptyStringToUndefined`.
+- Domain modules (workouts, training library, membership, check-in, …) are
+  added here as they land, each re-exported through `src/index.ts`.
+
+## Build & publish (npm-first)
+
+```bash
+npm install
+npm run build          # tsc -> dist/
+npm publish --access public
+```
+
+`prepublishOnly` runs `build` + `check` (type-check + biome) as the publish gate.
+`--access public` is a CLI flag, not a manifest field.
+
+## Consume
+
+In `gymmonk-backend` and `gymmonk-web-client`:
+
+```bash
+npm install gymmonk-schema@<version>
+# then delete any nested Zod dup so a single Zod instance is used:
+rm -rf node_modules/gymmonk-schema/node_modules
+```
+
+Bump the caret pin in each consumer's `package.json` on every publish (a `0.x`
+caret locks to the same minor, so `npm install` won't auto-pick a new minor).
+
+## Convention
+
+Mirrors the jansathi schema family (`dating-schema`, `near-me-schema`) exactly:
+pure ESM, `tsc`-only build, Zod is a **peer** dependency (`^4.4.0`), NodeNext
+`.js` import specifiers, const-object enums fed to `z.enum(...)`.

package/dist/chat.d.ts

@@ -0,0 +1,235 @@
+/**
+ * gymmonk-schema — Chat
+ * =====================
+ * THE wire contract between `gymmonk-web-client` and `gymmonk-chat-server`, and
+ * the only place either is allowed to name a socket event.
+ *
+ * It lives here rather than in the chat server because three codebases need it
+ * and none of them owns the other two: the client emits, the chat server
+ * handles, and gymmonk-backend mints the tokens that let the two meet. An event
+ * name that differs by one character between any pair of them produces a
+ * message nobody receives and no error anywhere, which is exactly the class of
+ * bug a shared package exists to make impossible.
+ *
+ * @module gymmonk-schema/chat
+ */
+import { z } from 'zod';
+/**
+ * Every socket event name.
+ *
+ * String literals rather than an enum, so both sides put the identical bytes on
+ * the wire without either importing the other's runtime.
+ */
+export declare const CHAT_SOCKET_EVENTS: {
+    /** Server → client, on connect. The socket is up and awaiting auth. */
+    readonly HELLO: "hello";
+    /** Client → server. `{ token }`. Must arrive inside the auth window. */
+    readonly AUTH: "auth";
+    /** Server → client. `{ userId }` on success. */
+    readonly AUTH_OK: "auth:ok";
+    /** Server → client. `{ code, message }` for any failure, auth or otherwise. */
+    readonly ERROR: "error";
+    /** Client → server. Open a conversation and start receiving it live. */
+    readonly CONVERSATION_JOIN: "conversation:join";
+    /** Client → server. Leave it (navigated away). */
+    readonly CONVERSATION_LEAVE: "conversation:leave";
+    /** Client → server. `{ conversationId, clientMessageId, text }`. */
+    readonly MESSAGE_SEND: "message:send";
+    /** Server → everyone in the room, and the recipients' own rooms. */
+    readonly MESSAGE_NEW: "message:new";
+    /** Server → sender only. Their send, acknowledged and stored. */
+    readonly MESSAGE_SENT: "message:sent";
+    /** Client → server. Mark everything up to now as read. */
+    readonly MESSAGE_READ: "message:read";
+    /** Server → the room. `{ conversationId, userId, readAt }`. */
+    readonly MESSAGE_READ_BY: "message:read-by";
+    /** Client → server. `{ conversationId, typing }`. */
+    readonly TYPING: "typing";
+    /** Server → the other participants. `{ conversationId, userId, typing }`. */
+    readonly TYPING_UPDATE: "typing:update";
+    /** Server → the room. Who currently has this conversation open. */
+    readonly PRESENCE_UPDATE: "presence:update";
+};
+export type ChatSocketEvent = (typeof CHAT_SOCKET_EVENTS)[keyof typeof CHAT_SOCKET_EVENTS];
+/** Stable codes on the `error` event. The client branches on these; the message is for logs. */
+export declare const CHAT_ERROR: {
+    readonly AUTH_TIMEOUT: "AUTH_TIMEOUT";
+    readonly AUTH_FAILED: "AUTH_FAILED";
+    readonly NOT_AUTHENTICATED: "NOT_AUTHENTICATED";
+    readonly NOT_A_PARTICIPANT: "NOT_A_PARTICIPANT";
+    readonly CONVERSATION_NOT_FOUND: "CONVERSATION_NOT_FOUND";
+    readonly INVALID_PAYLOAD: "INVALID_PAYLOAD";
+    readonly RATE_LIMITED: "RATE_LIMITED";
+    readonly SERVER_ERROR: "SERVER_ERROR";
+};
+export type ChatErrorCode = (typeof CHAT_ERROR)[keyof typeof CHAT_ERROR];
+/** Longest message body accepted. Matches the column cap in the model. */
+export declare const MAX_MESSAGE_LENGTH = 4000;
+/** Messages per page of history. */
+export declare const MESSAGE_PAGE_SIZE = 50;
+/**
+ * Messages one socket may send per minute.
+ *
+ * Not an anti-abuse boundary on its own: a member can only ever write to a
+ * conversation their own backend authorised. This is what stops a broken client
+ * looping a send from filling a collection.
+ */
+export declare const MESSAGE_RATE_PER_MINUTE = 60;
+/** How long an unauthenticated socket may hold a connection, in ms. */
+export declare const CHAT_AUTH_TIMEOUT_MS = 10000;
+/**
+ * How long a typing indicator survives without a refresh, in ms.
+ *
+ * Someone who closes the app mid-sentence never sends `typing: false`, so the
+ * indicator has to expire on its own or it stays on screen forever. The sender
+ * re-emits well inside this window while they are still typing.
+ */
+export declare const TYPING_TIMEOUT_MS = 4000;
+/** How often the sender re-emits `typing: true` while typing, in ms. */
+export declare const TYPING_THROTTLE_MS = 2000;
+/** A participant, denormalised onto the conversation so a list renders without joins. */
+export declare const chatParticipantSchema: z.ZodObject<{
+    userId: z.ZodString;
+    displayName: z.ZodString;
+    avatarUrl: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type ChatParticipant = z.infer<typeof chatParticipantSchema>;
+/** A message as every client sees it. */
+export declare const chatMessageSchema: z.ZodObject<{
+    id: z.ZodString;
+    conversationId: z.ZodString;
+    senderId: z.ZodString;
+    text: z.ZodString;
+    clientMessageId: z.ZodString;
+    sentAt: z.ZodISODateTime;
+    readAt: z.ZodNullable<z.ZodISODateTime>;
+    deleted: z.ZodBoolean;
+}, z.core.$strip>;
+export type ChatMessage = z.infer<typeof chatMessageSchema>;
+/** The one-line preview a conversation row shows. */
+export declare const chatLastMessageSchema: z.ZodObject<{
+    text: z.ZodString;
+    senderId: z.ZodString;
+    sentAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type ChatLastMessage = z.infer<typeof chatLastMessageSchema>;
+/**
+ * A conversation as the list screen sees it.
+ *
+ * `unreadCount` is the CALLER's, not a global figure: the same row means
+ * different things to the two people in it.
+ */
+export declare const chatConversationSchema: z.ZodObject<{
+    id: z.ZodString;
+    participants: z.ZodArray<z.ZodObject<{
+        userId: z.ZodString;
+        displayName: z.ZodString;
+        avatarUrl: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    lastMessage: z.ZodNullable<z.ZodObject<{
+        text: z.ZodString;
+        senderId: z.ZodString;
+        sentAt: z.ZodISODateTime;
+    }, z.core.$strip>>;
+    unreadCount: z.ZodNumber;
+    createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
+    frozen: z.ZodBoolean;
+}, z.core.$strip>;
+export type ChatConversation = z.infer<typeof chatConversationSchema>;
+export interface ChatAuthPayload {
+    token: string;
+}
+export interface ChatConversationRoomPayload {
+    conversationId: string;
+}
+export interface ChatMessageSendPayload {
+    conversationId: string;
+    /** Client-generated idempotency key. A retry with the same value is not a second message. */
+    clientMessageId: string;
+    text: string;
+}
+export interface ChatMessageReadPayload {
+    conversationId: string;
+}
+export interface ChatTypingPayload {
+    conversationId: string;
+    typing: boolean;
+}
+export interface ChatServerToClientEvents {
+    [CHAT_SOCKET_EVENTS.HELLO]: (payload: {
+        message: string;
+    }) => void;
+    [CHAT_SOCKET_EVENTS.AUTH_OK]: (payload: {
+        userId: string;
+    }) => void;
+    [CHAT_SOCKET_EVENTS.ERROR]: (payload: {
+        code: string;
+        message: string;
+    }) => void;
+    [CHAT_SOCKET_EVENTS.MESSAGE_NEW]: (message: ChatMessage) => void;
+    [CHAT_SOCKET_EVENTS.MESSAGE_SENT]: (payload: {
+        clientMessageId: string;
+        message: ChatMessage;
+    }) => void;
+    [CHAT_SOCKET_EVENTS.MESSAGE_READ_BY]: (payload: {
+        conversationId: string;
+        userId: string;
+        readAt: string;
+    }) => void;
+    [CHAT_SOCKET_EVENTS.TYPING_UPDATE]: (payload: {
+        conversationId: string;
+        userId: string;
+        typing: boolean;
+    }) => void;
+    [CHAT_SOCKET_EVENTS.PRESENCE_UPDATE]: (payload: {
+        conversationId: string;
+        userIds: string[];
+    }) => void;
+}
+export interface ChatClientToServerEvents {
+    [CHAT_SOCKET_EVENTS.AUTH]: (payload: ChatAuthPayload) => void;
+    [CHAT_SOCKET_EVENTS.CONVERSATION_JOIN]: (payload: ChatConversationRoomPayload) => void;
+    [CHAT_SOCKET_EVENTS.CONVERSATION_LEAVE]: (payload: ChatConversationRoomPayload) => void;
+    [CHAT_SOCKET_EVENTS.MESSAGE_SEND]: (payload: ChatMessageSendPayload) => void;
+    [CHAT_SOCKET_EVENTS.MESSAGE_READ]: (payload: ChatMessageReadPayload) => void;
+    [CHAT_SOCKET_EVENTS.TYPING]: (payload: ChatTypingPayload) => void;
+}
+/** `GET /api/v1/chat/config` — where chat lives, whether it is on, and who the caller is. */
+export declare const chatConfigSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    url: z.ZodNullable<z.ZodString>;
+    userId: z.ZodString;
+}, z.core.$strip>;
+export type ChatConfig = z.infer<typeof chatConfigSchema>;
+/** `POST /api/v1/chat/auth-token` */
+export declare const chatAuthTokenSchema: z.ZodObject<{
+    token: z.ZodString;
+    expiresAt: z.ZodISODateTime;
+    expiresIn: z.ZodNumber;
+}, z.core.$strip>;
+export type ChatAuthToken = z.infer<typeof chatAuthTokenSchema>;
+/** `POST /api/v1/chat/invitation` — permission to open a conversation with someone. */
+export declare const chatInvitationBodySchema: z.ZodObject<{
+    userId: z.ZodString;
+}, z.core.$strip>;
+export type ChatInvitationBody = z.infer<typeof chatInvitationBodySchema>;
+export declare const chatInvitationSchema: z.ZodObject<{
+    invitationToken: z.ZodString;
+    expiresAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type ChatInvitation = z.infer<typeof chatInvitationSchema>;
+/** `POST /api/v1/chat/notify` — chat-server telling the backend to notify people. */
+export declare const chatNotifyBodySchema: z.ZodObject<{
+    recipientIds: z.ZodArray<z.ZodString>;
+    conversationId: z.ZodString;
+    senderId: z.ZodString;
+    senderName: z.ZodString;
+    text: z.ZodString;
+}, z.core.$strip>;
+export type ChatNotifyBody = z.infer<typeof chatNotifyBodySchema>;
+/** JWT `aud` on every chat token. chat-server accepts exactly this. */
+export declare const CHAT_TOKEN_AUDIENCE = "gymmonk-chat-server";
+/** `purpose` claim marking an invitation. Auth tokens carry no purpose. */
+export declare const CHAT_INVITATION_PURPOSE = "invitation";
+//# sourceMappingURL=chat.d.ts.map

package/dist/chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../src/chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB;IAC7B,uEAAuE;;IAEvE,wEAAwE;;IAExE,gDAAgD;;IAEhD,+EAA+E;;IAG/E,wEAAwE;;IAExE,kDAAkD;;IAGlD,oEAAoE;;IAEpE,oEAAoE;;IAEpE,iEAAiE;;IAEjE,0DAA0D;;IAE1D,+DAA+D;;IAG/D,qDAAqD;;IAErD,6EAA6E;;IAG7E,mEAAmE;;CAE3D,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAI3F,gGAAgG;AAChG,eAAO,MAAM,UAAU;;;;;;;;;CASb,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAIzE,0EAA0E;AAC1E,eAAO,MAAM,kBAAkB,OAAO,CAAC;AAEvC,oCAAoC;AACpC,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C,uEAAuE;AACvE,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAE3C;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,OAAQ,CAAC;AAEvC,wEAAwE;AACxE,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AAIxC,yFAAyF;AACzF,eAAO,MAAM,qBAAqB;;;;iBAIhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,yCAAyC;AACzC,eAAO,MAAM,iBAAiB;;;;;;;;;iBAW5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,qDAAqD;AACrD,eAAO,MAAM,qBAAqB;;;;iBAIhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;iBAmBjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAItE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,2BAA2B;IAC1C,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;CACjB;AAMD,MAAM,WAAW,wBAAwB;IACvC,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACnE,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACpE,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACjF,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;IACjE,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE;QAC3C,eAAe,EAAE,MAAM,CAAC;QACxB,OAAO,EAAE,WAAW,CAAC;KACtB,KAAK,IAAI,CAAC;IACX,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE;QAC9C,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,IAAI,CAAC;IACX,CAAC,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE;QAC5C,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,OAAO,CAAC;KACjB,KAAK,IAAI,CAAC;IACX,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE;QAC9C,cAAc,EAAE,MAAM,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,KAAK,IAAI,CAAC;CACZ;AAED,MAAM,WAAW,wBAAwB;IACvC,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;IAC9D,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,2BAA2B,KAAK,IAAI,CAAC;IACvF,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,2BAA2B,KAAK,IAAI,CAAC;IACxF,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAC7E,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAC7E,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,IAAI,CAAC;CACnE;AAID,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB;;;;iBAW3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,qCAAqC;AACrC,eAAO,MAAM,mBAAmB;;;;iBAK9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,uFAAuF;AACvF,eAAO,MAAM,wBAAwB;;iBAEnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,oBAAoB;;;iBAG/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,qFAAqF;AACrF,eAAO,MAAM,oBAAoB;;;;;;iBAM/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,uEAAuE;AACvE,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AAEzD,2EAA2E;AAC3E,eAAO,MAAM,uBAAuB,eAAe,CAAC"}

package/dist/chat.js

@@ -0,0 +1,185 @@
+/**
+ * gymmonk-schema — Chat
+ * =====================
+ * THE wire contract between `gymmonk-web-client` and `gymmonk-chat-server`, and
+ * the only place either is allowed to name a socket event.
+ *
+ * It lives here rather than in the chat server because three codebases need it
+ * and none of them owns the other two: the client emits, the chat server
+ * handles, and gymmonk-backend mints the tokens that let the two meet. An event
+ * name that differs by one character between any pair of them produces a
+ * message nobody receives and no error anywhere, which is exactly the class of
+ * bug a shared package exists to make impossible.
+ *
+ * @module gymmonk-schema/chat
+ */
+import { z } from 'zod';
+import { isoDateTimeSchema, objectIdSchema } from './common.js';
+// ─── Socket events ───────────────────────────────────────────────────────────
+/**
+ * Every socket event name.
+ *
+ * String literals rather than an enum, so both sides put the identical bytes on
+ * the wire without either importing the other's runtime.
+ */
+export const CHAT_SOCKET_EVENTS = {
+    /** Server → client, on connect. The socket is up and awaiting auth. */
+    HELLO: 'hello',
+    /** Client → server. `{ token }`. Must arrive inside the auth window. */
+    AUTH: 'auth',
+    /** Server → client. `{ userId }` on success. */
+    AUTH_OK: 'auth:ok',
+    /** Server → client. `{ code, message }` for any failure, auth or otherwise. */
+    ERROR: 'error',
+    /** Client → server. Open a conversation and start receiving it live. */
+    CONVERSATION_JOIN: 'conversation:join',
+    /** Client → server. Leave it (navigated away). */
+    CONVERSATION_LEAVE: 'conversation:leave',
+    /** Client → server. `{ conversationId, clientMessageId, text }`. */
+    MESSAGE_SEND: 'message:send',
+    /** Server → everyone in the room, and the recipients' own rooms. */
+    MESSAGE_NEW: 'message:new',
+    /** Server → sender only. Their send, acknowledged and stored. */
+    MESSAGE_SENT: 'message:sent',
+    /** Client → server. Mark everything up to now as read. */
+    MESSAGE_READ: 'message:read',
+    /** Server → the room. `{ conversationId, userId, readAt }`. */
+    MESSAGE_READ_BY: 'message:read-by',
+    /** Client → server. `{ conversationId, typing }`. */
+    TYPING: 'typing',
+    /** Server → the other participants. `{ conversationId, userId, typing }`. */
+    TYPING_UPDATE: 'typing:update',
+    /** Server → the room. Who currently has this conversation open. */
+    PRESENCE_UPDATE: 'presence:update',
+};
+// ─── Error codes ─────────────────────────────────────────────────────────────
+/** Stable codes on the `error` event. The client branches on these; the message is for logs. */
+export const CHAT_ERROR = {
+    AUTH_TIMEOUT: 'AUTH_TIMEOUT',
+    AUTH_FAILED: 'AUTH_FAILED',
+    NOT_AUTHENTICATED: 'NOT_AUTHENTICATED',
+    NOT_A_PARTICIPANT: 'NOT_A_PARTICIPANT',
+    CONVERSATION_NOT_FOUND: 'CONVERSATION_NOT_FOUND',
+    INVALID_PAYLOAD: 'INVALID_PAYLOAD',
+    RATE_LIMITED: 'RATE_LIMITED',
+    SERVER_ERROR: 'SERVER_ERROR',
+};
+// ─── Limits ──────────────────────────────────────────────────────────────────
+/** Longest message body accepted. Matches the column cap in the model. */
+export const MAX_MESSAGE_LENGTH = 4000;
+/** Messages per page of history. */
+export const MESSAGE_PAGE_SIZE = 50;
+/**
+ * Messages one socket may send per minute.
+ *
+ * Not an anti-abuse boundary on its own: a member can only ever write to a
+ * conversation their own backend authorised. This is what stops a broken client
+ * looping a send from filling a collection.
+ */
+export const MESSAGE_RATE_PER_MINUTE = 60;
+/** How long an unauthenticated socket may hold a connection, in ms. */
+export const CHAT_AUTH_TIMEOUT_MS = 10_000;
+/**
+ * How long a typing indicator survives without a refresh, in ms.
+ *
+ * Someone who closes the app mid-sentence never sends `typing: false`, so the
+ * indicator has to expire on its own or it stays on screen forever. The sender
+ * re-emits well inside this window while they are still typing.
+ */
+export const TYPING_TIMEOUT_MS = 4_000;
+/** How often the sender re-emits `typing: true` while typing, in ms. */
+export const TYPING_THROTTLE_MS = 2_000;
+// ─── Wire shapes ─────────────────────────────────────────────────────────────
+/** A participant, denormalised onto the conversation so a list renders without joins. */
+export const chatParticipantSchema = z.object({
+    userId: objectIdSchema,
+    displayName: z.string(),
+    avatarUrl: z.string().nullable(),
+});
+/** A message as every client sees it. */
+export const chatMessageSchema = z.object({
+    id: objectIdSchema,
+    conversationId: objectIdSchema,
+    senderId: objectIdSchema,
+    text: z.string(),
+    /** Echoed back so the sender can reconcile its optimistic row. */
+    clientMessageId: z.string(),
+    sentAt: isoDateTimeSchema,
+    readAt: isoDateTimeSchema.nullable(),
+    /** Deleted for everyone. `text` is then empty. */
+    deleted: z.boolean(),
+});
+/** The one-line preview a conversation row shows. */
+export const chatLastMessageSchema = z.object({
+    text: z.string(),
+    senderId: objectIdSchema,
+    sentAt: isoDateTimeSchema,
+});
+/**
+ * A conversation as the list screen sees it.
+ *
+ * `unreadCount` is the CALLER's, not a global figure: the same row means
+ * different things to the two people in it.
+ */
+export const chatConversationSchema = z.object({
+    id: objectIdSchema,
+    participants: z.array(chatParticipantSchema),
+    lastMessage: chatLastMessageSchema.nullable(),
+    unreadCount: z.number().int().nonnegative(),
+    createdAt: isoDateTimeSchema,
+    /** Last activity. The inbox sorts on this, newest first. */
+    updatedAt: isoDateTimeSchema,
+    /**
+     * Closed to new messages. True once one participant blocks the other.
+     *
+     * History still reads: freezing stops the next message, and deleting what was
+     * already said is a different and much larger decision. The client uses this
+     * to disable its composer rather than letting a send fail at the server.
+     *
+     * RECOVERED from the published 0.17.0 `.d.ts`, not from its sourcemap — that
+     * map's `sourcesContent` predates this field and dropped it silently.
+     */
+    frozen: z.boolean(),
+});
+// ─── Backend bridge ──────────────────────────────────────────────────────────
+/** `GET /api/v1/chat/config` — where chat lives, whether it is on, and who the caller is. */
+export const chatConfigSchema = z.object({
+    enabled: z.boolean(),
+    url: z.string().nullable(),
+    /**
+     * The caller's id AS CHAT-SERVER WILL SEE IT.
+     *
+     * Sourced from the same place that mints the token rather than from the
+     * client session, because the two must agree or "is this message mine" is
+     * wrong for somebody.
+     */
+    userId: objectIdSchema,
+});
+/** `POST /api/v1/chat/auth-token` */
+export const chatAuthTokenSchema = z.object({
+    token: z.string(),
+    expiresAt: isoDateTimeSchema,
+    /** Seconds, so a client can schedule a refresh without parsing a date. */
+    expiresIn: z.number().int().positive(),
+});
+/** `POST /api/v1/chat/invitation` — permission to open a conversation with someone. */
+export const chatInvitationBodySchema = z.object({
+    userId: objectIdSchema,
+});
+export const chatInvitationSchema = z.object({
+    invitationToken: z.string(),
+    expiresAt: isoDateTimeSchema,
+});
+/** `POST /api/v1/chat/notify` — chat-server telling the backend to notify people. */
+export const chatNotifyBodySchema = z.object({
+    recipientIds: z.array(objectIdSchema).min(1),
+    conversationId: objectIdSchema,
+    senderId: objectIdSchema,
+    senderName: z.string(),
+    text: z.string(),
+});
+/** JWT `aud` on every chat token. chat-server accepts exactly this. */
+export const CHAT_TOKEN_AUDIENCE = 'gymmonk-chat-server';
+/** `purpose` claim marking an invitation. Auth tokens carry no purpose. */
+export const CHAT_INVITATION_PURPOSE = 'invitation';
+//# sourceMappingURL=chat.js.map

package/dist/chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.js","sourceRoot":"","sources":["../src/chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEhE,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,uEAAuE;IACvE,KAAK,EAAE,OAAO;IACd,wEAAwE;IACxE,IAAI,EAAE,MAAM;IACZ,gDAAgD;IAChD,OAAO,EAAE,SAAS;IAClB,+EAA+E;IAC/E,KAAK,EAAE,OAAO;IAEd,wEAAwE;IACxE,iBAAiB,EAAE,mBAAmB;IACtC,kDAAkD;IAClD,kBAAkB,EAAE,oBAAoB;IAExC,oEAAoE;IACpE,YAAY,EAAE,cAAc;IAC5B,oEAAoE;IACpE,WAAW,EAAE,aAAa;IAC1B,iEAAiE;IACjE,YAAY,EAAE,cAAc;IAC5B,0DAA0D;IAC1D,YAAY,EAAE,cAAc;IAC5B,+DAA+D;IAC/D,eAAe,EAAE,iBAAiB;IAElC,qDAAqD;IACrD,MAAM,EAAE,QAAQ;IAChB,6EAA6E;IAC7E,aAAa,EAAE,eAAe;IAE9B,mEAAmE;IACnE,eAAe,EAAE,iBAAiB;CAC1B,CAAC;AAIX,gFAAgF;AAEhF,gGAAgG;AAChG,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,YAAY,EAAE,cAAc;IAC5B,WAAW,EAAE,aAAa;IAC1B,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;IACtC,sBAAsB,EAAE,wBAAwB;IAChD,eAAe,EAAE,iBAAiB;IAClC,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;CACpB,CAAC;AAIX,gFAAgF;AAEhF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEvC,oCAAoC;AACpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAE1C,uEAAuE;AACvE,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC,wEAAwE;AACxE,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAExC,gFAAgF;AAEhF,yFAAyF;AACzF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,cAAc;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,yCAAyC;AACzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,cAAc;IAClB,cAAc,EAAE,cAAc;IAC9B,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,kEAAkE;IAClE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACpC,kDAAkD;IAClD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAGH,qDAAqD;AACrD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,iBAAiB;CAC1B,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,cAAc;IAClB,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAC5C,WAAW,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC3C,SAAS,EAAE,iBAAiB;IAC5B,4DAA4D;IAC5D,SAAS,EAAE,iBAAiB;IAC5B;;;;;;;;;OASG;IACH,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;CACpB,CAAC,CAAC;AAmEH,gFAAgF;AAEhF,6FAA6F;AAC7F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B;;;;;;OAMG;IACH,MAAM,EAAE,cAAc;CACvB,CAAC,CAAC;AAGH,qCAAqC;AACrC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,iBAAiB;IAC5B,0EAA0E;IAC1E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,uFAAuF;AACvF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,cAAc;CACvB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,SAAS,EAAE,iBAAiB;CAC7B,CAAC,CAAC;AAGH,qFAAqF;AACrF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,cAAc,EAAE,cAAc;IAC9B,QAAQ,EAAE,cAAc;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAGH,uEAAuE;AACvE,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAEzD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAC","sourcesContent":["/**\r\n * gymmonk-schema — Chat\r\n * =====================\r\n * THE wire contract between `gymmonk-web-client` and `gymmonk-chat-server`, and\r\n * the only place either is allowed to name a socket event.\r\n *\r\n * It lives here rather than in the chat server because three codebases need it\r\n * and none of them owns the other two: the client emits, the chat server\r\n * handles, and gymmonk-backend mints the tokens that let the two meet. An event\r\n * name that differs by one character between any pair of them produces a\r\n * message nobody receives and no error anywhere, which is exactly the class of\r\n * bug a shared package exists to make impossible.\r\n *\r\n * @module gymmonk-schema/chat\r\n */\r\n\r\nimport { z } from 'zod';\r\nimport { isoDateTimeSchema, objectIdSchema } from './common.js';\r\n\r\n// ─── Socket events ───────────────────────────────────────────────────────────\r\n\r\n/**\r\n * Every socket event name.\r\n *\r\n * String literals rather than an enum, so both sides put the identical bytes on\r\n * the wire without either importing the other's runtime.\r\n */\r\nexport const CHAT_SOCKET_EVENTS = {\r\n  /** Server → client, on connect. The socket is up and awaiting auth. */\r\n  HELLO: 'hello',\r\n  /** Client → server. `{ token }`. Must arrive inside the auth window. */\r\n  AUTH: 'auth',\r\n  /** Server → client. `{ userId }` on success. */\r\n  AUTH_OK: 'auth:ok',\r\n  /** Server → client. `{ code, message }` for any failure, auth or otherwise. */\r\n  ERROR: 'error',\r\n\r\n  /** Client → server. Open a conversation and start receiving it live. */\r\n  CONVERSATION_JOIN: 'conversation:join',\r\n  /** Client → server. Leave it (navigated away). */\r\n  CONVERSATION_LEAVE: 'conversation:leave',\r\n\r\n  /** Client → server. `{ conversationId, clientMessageId, text }`. */\r\n  MESSAGE_SEND: 'message:send',\r\n  /** Server → everyone in the room, and the recipients' own rooms. */\r\n  MESSAGE_NEW: 'message:new',\r\n  /** Server → sender only. Their send, acknowledged and stored. */\r\n  MESSAGE_SENT: 'message:sent',\r\n  /** Client → server. Mark everything up to now as read. */\r\n  MESSAGE_READ: 'message:read',\r\n  /** Server → the room. `{ conversationId, userId, readAt }`. */\r\n  MESSAGE_READ_BY: 'message:read-by',\r\n\r\n  /** Client → server. `{ conversationId, typing }`. */\r\n  TYPING: 'typing',\r\n  /** Server → the other participants. `{ conversationId, userId, typing }`. */\r\n  TYPING_UPDATE: 'typing:update',\r\n\r\n  /** Server → the room. Who currently has this conversation open. */\r\n  PRESENCE_UPDATE: 'presence:update',\r\n} as const;\r\n\r\nexport type ChatSocketEvent = (typeof CHAT_SOCKET_EVENTS)[keyof typeof CHAT_SOCKET_EVENTS];\r\n\r\n// ─── Error codes ─────────────────────────────────────────────────────────────\r\n\r\n/** Stable codes on the `error` event. The client branches on these; the message is for logs. */\r\nexport const CHAT_ERROR = {\r\n  AUTH_TIMEOUT: 'AUTH_TIMEOUT',\r\n  AUTH_FAILED: 'AUTH_FAILED',\r\n  NOT_AUTHENTICATED: 'NOT_AUTHENTICATED',\r\n  NOT_A_PARTICIPANT: 'NOT_A_PARTICIPANT',\r\n  CONVERSATION_NOT_FOUND: 'CONVERSATION_NOT_FOUND',\r\n  INVALID_PAYLOAD: 'INVALID_PAYLOAD',\r\n  RATE_LIMITED: 'RATE_LIMITED',\r\n  SERVER_ERROR: 'SERVER_ERROR',\r\n} as const;\r\n\r\nexport type ChatErrorCode = (typeof CHAT_ERROR)[keyof typeof CHAT_ERROR];\r\n\r\n// ─── Limits ──────────────────────────────────────────────────────────────────\r\n\r\n/** Longest message body accepted. Matches the column cap in the model. */\r\nexport const MAX_MESSAGE_LENGTH = 4000;\r\n\r\n/** Messages per page of history. */\r\nexport const MESSAGE_PAGE_SIZE = 50;\r\n\r\n/**\r\n * Messages one socket may send per minute.\r\n *\r\n * Not an anti-abuse boundary on its own: a member can only ever write to a\r\n * conversation their own backend authorised. This is what stops a broken client\r\n * looping a send from filling a collection.\r\n */\r\nexport const MESSAGE_RATE_PER_MINUTE = 60;\r\n\r\n/** How long an unauthenticated socket may hold a connection, in ms. */\r\nexport const CHAT_AUTH_TIMEOUT_MS = 10_000;\r\n\r\n/**\r\n * How long a typing indicator survives without a refresh, in ms.\r\n *\r\n * Someone who closes the app mid-sentence never sends `typing: false`, so the\r\n * indicator has to expire on its own or it stays on screen forever. The sender\r\n * re-emits well inside this window while they are still typing.\r\n */\r\nexport const TYPING_TIMEOUT_MS = 4_000;\r\n\r\n/** How often the sender re-emits `typing: true` while typing, in ms. */\r\nexport const TYPING_THROTTLE_MS = 2_000;\r\n\r\n// ─── Wire shapes ─────────────────────────────────────────────────────────────\r\n\r\n/** A participant, denormalised onto the conversation so a list renders without joins. */\r\nexport const chatParticipantSchema = z.object({\r\n  userId: objectIdSchema,\r\n  displayName: z.string(),\r\n  avatarUrl: z.string().nullable(),\r\n});\r\nexport type ChatParticipant = z.infer<typeof chatParticipantSchema>;\r\n\r\n/** A message as every client sees it. */\r\nexport const chatMessageSchema = z.object({\r\n  id: objectIdSchema,\r\n  conversationId: objectIdSchema,\r\n  senderId: objectIdSchema,\r\n  text: z.string(),\r\n  /** Echoed back so the sender can reconcile its optimistic row. */\r\n  clientMessageId: z.string(),\r\n  sentAt: isoDateTimeSchema,\r\n  readAt: isoDateTimeSchema.nullable(),\r\n  /** Deleted for everyone. `text` is then empty. */\r\n  deleted: z.boolean(),\r\n});\r\nexport type ChatMessage = z.infer<typeof chatMessageSchema>;\r\n\r\n/** The one-line preview a conversation row shows. */\r\nexport const chatLastMessageSchema = z.object({\r\n  text: z.string(),\r\n  senderId: objectIdSchema,\r\n  sentAt: isoDateTimeSchema,\r\n});\r\nexport type ChatLastMessage = z.infer<typeof chatLastMessageSchema>;\r\n\r\n/**\r\n * A conversation as the list screen sees it.\r\n *\r\n * `unreadCount` is the CALLER's, not a global figure: the same row means\r\n * different things to the two people in it.\r\n */\r\nexport const chatConversationSchema = z.object({\r\n  id: objectIdSchema,\r\n  participants: z.array(chatParticipantSchema),\r\n  lastMessage: chatLastMessageSchema.nullable(),\r\n  unreadCount: z.number().int().nonnegative(),\r\n  createdAt: isoDateTimeSchema,\r\n  /** Last activity. The inbox sorts on this, newest first. */\r\n  updatedAt: isoDateTimeSchema,\r\n  /**\r\n   * Closed to new messages. True once one participant blocks the other.\r\n   *\r\n   * History still reads: freezing stops the next message, and deleting what was\r\n   * already said is a different and much larger decision. The client uses this\r\n   * to disable its composer rather than letting a send fail at the server.\r\n   *\r\n   * RECOVERED from the published 0.17.0 `.d.ts`, not from its sourcemap — that\r\n   * map's `sourcesContent` predates this field and dropped it silently.\r\n   */\r\n  frozen: z.boolean(),\r\n});\r\nexport type ChatConversation = z.infer<typeof chatConversationSchema>;\r\n\r\n// ─── Event payloads ──────────────────────────────────────────────────────────\r\n\r\nexport interface ChatAuthPayload {\r\n  token: string;\r\n}\r\n\r\nexport interface ChatConversationRoomPayload {\r\n  conversationId: string;\r\n}\r\n\r\nexport interface ChatMessageSendPayload {\r\n  conversationId: string;\r\n  /** Client-generated idempotency key. A retry with the same value is not a second message. */\r\n  clientMessageId: string;\r\n  text: string;\r\n}\r\n\r\nexport interface ChatMessageReadPayload {\r\n  conversationId: string;\r\n}\r\n\r\nexport interface ChatTypingPayload {\r\n  conversationId: string;\r\n  typing: boolean;\r\n}\r\n\r\n// ─── Typed event maps ────────────────────────────────────────────────────────\r\n// Socket.io takes these as generics on both ends, so an event emitted with the\r\n// wrong payload is a compile error rather than a message nobody receives.\r\n\r\nexport interface ChatServerToClientEvents {\r\n  [CHAT_SOCKET_EVENTS.HELLO]: (payload: { message: string }) => void;\r\n  [CHAT_SOCKET_EVENTS.AUTH_OK]: (payload: { userId: string }) => void;\r\n  [CHAT_SOCKET_EVENTS.ERROR]: (payload: { code: string; message: string }) => void;\r\n  [CHAT_SOCKET_EVENTS.MESSAGE_NEW]: (message: ChatMessage) => void;\r\n  [CHAT_SOCKET_EVENTS.MESSAGE_SENT]: (payload: {\r\n    clientMessageId: string;\r\n    message: ChatMessage;\r\n  }) => void;\r\n  [CHAT_SOCKET_EVENTS.MESSAGE_READ_BY]: (payload: {\r\n    conversationId: string;\r\n    userId: string;\r\n    readAt: string;\r\n  }) => void;\r\n  [CHAT_SOCKET_EVENTS.TYPING_UPDATE]: (payload: {\r\n    conversationId: string;\r\n    userId: string;\r\n    typing: boolean;\r\n  }) => void;\r\n  [CHAT_SOCKET_EVENTS.PRESENCE_UPDATE]: (payload: {\r\n    conversationId: string;\r\n    userIds: string[];\r\n  }) => void;\r\n}\r\n\r\nexport interface ChatClientToServerEvents {\r\n  [CHAT_SOCKET_EVENTS.AUTH]: (payload: ChatAuthPayload) => void;\r\n  [CHAT_SOCKET_EVENTS.CONVERSATION_JOIN]: (payload: ChatConversationRoomPayload) => void;\r\n  [CHAT_SOCKET_EVENTS.CONVERSATION_LEAVE]: (payload: ChatConversationRoomPayload) => void;\r\n  [CHAT_SOCKET_EVENTS.MESSAGE_SEND]: (payload: ChatMessageSendPayload) => void;\r\n  [CHAT_SOCKET_EVENTS.MESSAGE_READ]: (payload: ChatMessageReadPayload) => void;\r\n  [CHAT_SOCKET_EVENTS.TYPING]: (payload: ChatTypingPayload) => void;\r\n}\r\n\r\n// ─── Backend bridge ──────────────────────────────────────────────────────────\r\n\r\n/** `GET /api/v1/chat/config` — where chat lives, whether it is on, and who the caller is. */\r\nexport const chatConfigSchema = z.object({\r\n  enabled: z.boolean(),\r\n  url: z.string().nullable(),\r\n  /**\r\n   * The caller's id AS CHAT-SERVER WILL SEE IT.\r\n   *\r\n   * Sourced from the same place that mints the token rather than from the\r\n   * client session, because the two must agree or \"is this message mine\" is\r\n   * wrong for somebody.\r\n   */\r\n  userId: objectIdSchema,\r\n});\r\nexport type ChatConfig = z.infer<typeof chatConfigSchema>;\r\n\r\n/** `POST /api/v1/chat/auth-token` */\r\nexport const chatAuthTokenSchema = z.object({\r\n  token: z.string(),\r\n  expiresAt: isoDateTimeSchema,\r\n  /** Seconds, so a client can schedule a refresh without parsing a date. */\r\n  expiresIn: z.number().int().positive(),\r\n});\r\nexport type ChatAuthToken = z.infer<typeof chatAuthTokenSchema>;\r\n\r\n/** `POST /api/v1/chat/invitation` — permission to open a conversation with someone. */\r\nexport const chatInvitationBodySchema = z.object({\r\n  userId: objectIdSchema,\r\n});\r\nexport type ChatInvitationBody = z.infer<typeof chatInvitationBodySchema>;\r\n\r\nexport const chatInvitationSchema = z.object({\r\n  invitationToken: z.string(),\r\n  expiresAt: isoDateTimeSchema,\r\n});\r\nexport type ChatInvitation = z.infer<typeof chatInvitationSchema>;\r\n\r\n/** `POST /api/v1/chat/notify` — chat-server telling the backend to notify people. */\r\nexport const chatNotifyBodySchema = z.object({\r\n  recipientIds: z.array(objectIdSchema).min(1),\r\n  conversationId: objectIdSchema,\r\n  senderId: objectIdSchema,\r\n  senderName: z.string(),\r\n  text: z.string(),\r\n});\r\nexport type ChatNotifyBody = z.infer<typeof chatNotifyBodySchema>;\r\n\r\n/** JWT `aud` on every chat token. chat-server accepts exactly this. */\r\nexport const CHAT_TOKEN_AUDIENCE = 'gymmonk-chat-server';\r\n\r\n/** `purpose` claim marking an invitation. Auth tokens carry no purpose. */\r\nexport const CHAT_INVITATION_PURPOSE = 'invitation';\r\n"]}

package/dist/index.d.ts

@@ -12,6 +12,7 @@ export * from './add-person-form.js';
 export * from './announcement.js';
 export * from './area.js';
 export * from './center.js';
+export * from './chat.js';
 export * from './check-in.js';
 export * from './common.js';
 export * from './equipment.js';
@@ -36,6 +37,7 @@ export * from './platform.js';
 export * from './pricing.js';
 export * from './session.js';
 export * from './shared.js';
+export * from './social.js';
 export * from './staff.js';
 export * from './subscription.js';
 export * from './user.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAElC,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAE5B,cAAc,eAAe,CAAC;AAE9B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAE/B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAE9B,cAAc,WAAW,CAAC;AAE1B,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAE9B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AAExC,cAAc,eAAe,CAAC;AAE9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,sBAAsB,CAAC;AAErC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAElC,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAE5B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAE9B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAE/B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAE9B,cAAc,WAAW,CAAC;AAE1B,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAE9B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AAExC,cAAc,eAAe,CAAC;AAE9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,sBAAsB,CAAC;AAErC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC"}

package/dist/index.js

@@ -15,6 +15,7 @@ export * from './announcement.js';
 export * from './area.js';
 export * from './center.js';
 // ─── Check-in QR (poster payload shared by owner, member and backend) ────────
+export * from './chat.js';
 export * from './check-in.js';
 // ─── Foundation ──────────────────────────────────────────────────────────────
 export * from './common.js';
@@ -50,6 +51,7 @@ export * from './platform.js';
 export * from './pricing.js';
 export * from './session.js';
 export * from './shared.js';
+export * from './social.js';
 export * from './staff.js';
 export * from './subscription.js';
 export * from './user.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,gFAAgF;AAChF,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,6EAA6E;AAC7E,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,gFAAgF;AAChF,cAAc,eAAe,CAAC;AAC9B,gFAAgF;AAChF,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,gFAAgF;AAChF,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,gFAAgF;AAChF,cAAc,WAAW,CAAC;AAC1B,gFAAgF;AAChF,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,gFAAgF;AAChF,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,gFAAgF;AAChF,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,gFAAgF;AAChF,cAAc,eAAe,CAAC;AAC9B,gFAAgF;AAChF,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,gFAAgF;AAChF,cAAc,sBAAsB,CAAC;AACrC,gFAAgF;AAChF,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,gFAAgF;AAChF,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC","sourcesContent":["/**\n * gymmonk-schema — Public API\n * ===========================\n * Shared Zod schemas, enums and domain types for GymMonk (fitness SaaS).\n * Single source of truth (SSOT) for data shapes, TypeScript types and\n * validation, consumed by both gymmonk-backend and gymmonk-web-client.\n *\n * Every domain module is re-exported through this barrel. Import names are\n * globally unique across modules, so `export *` composes without collisions.\n */\n\n// ─── Owner desk-entry FORM validation (client-side working shapes) ───────────\nexport * from './add-person-form.js';\nexport * from './announcement.js';\n// ─── Location master data (the address picker's lookup API) ───────────────\nexport * from './area.js';\nexport * from './center.js';\n// ─── Check-in QR (poster payload shared by owner, member and backend) ────────\nexport * from './check-in.js';\n// ─── Foundation ──────────────────────────────────────────────────────────────\nexport * from './common.js';\nexport * from './equipment.js';\n// ─── Training ────────────────────────────────────────────────────────────────\nexport * from './exercise.js';\nexport * from './feedback.js';\n// ─── Uploads ─────────────────────────────────────────────────────────────────\nexport * from './file.js';\n// ─── \"List your gym\" — a member registers the business they run ──────────────\nexport * from './gym-registration.js';\nexport * from './home.js';\nexport * from './insights.js';\n// ─── People ──────────────────────────────────────────────────────────────────\nexport * from './member.js';\nexport * from './member-profile.js';\nexport * from './membership.js';\n// ─── Membership ──────────────────────────────────────────────────────────────\nexport * from './membership-plan.js';\nexport * from './membership-request.js';\n// ─── API result messages + error codes ───────────────────────────────────────\nexport * from './messages.js';\n// ─── Engagement & analytics ──────────────────────────────────────────────────\nexport * from './notification.js';\nexport * from './onboarding.js';\n// ─── Onboarding wizard FORM validation (client-side working shapes) ──────────\nexport * from './onboarding-form.js';\n// ─── Gym structure & onboarding ──────────────────────────────────────────────\nexport * from './organisation.js';\nexport * from './owner-profile.js';\n// ─── Platform console (people + gyms directories, role keys) ─────────────────\nexport * from './platform.js';\nexport * from './pricing.js';\nexport * from './session.js';\nexport * from './shared.js';\nexport * from './staff.js';\nexport * from './subscription.js';\nexport * from './user.js';\nexport * from './workout-plan.js';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,gFAAgF;AAChF,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,6EAA6E;AAC7E,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,gFAAgF;AAChF,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,gFAAgF;AAChF,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,gFAAgF;AAChF,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,gFAAgF;AAChF,cAAc,WAAW,CAAC;AAC1B,gFAAgF;AAChF,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,gFAAgF;AAChF,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,gFAAgF;AAChF,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,gFAAgF;AAChF,cAAc,eAAe,CAAC;AAC9B,gFAAgF;AAChF,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,gFAAgF;AAChF,cAAc,sBAAsB,CAAC;AACrC,gFAAgF;AAChF,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,gFAAgF;AAChF,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC","sourcesContent":["/**\r\n * gymmonk-schema — Public API\r\n * ===========================\r\n * Shared Zod schemas, enums and domain types for GymMonk (fitness SaaS).\r\n * Single source of truth (SSOT) for data shapes, TypeScript types and\r\n * validation, consumed by both gymmonk-backend and gymmonk-web-client.\r\n *\r\n * Every domain module is re-exported through this barrel. Import names are\r\n * globally unique across modules, so `export *` composes without collisions.\r\n */\r\n\r\n// ─── Owner desk-entry FORM validation (client-side working shapes) ───────────\r\nexport * from './add-person-form.js';\r\nexport * from './announcement.js';\r\n// ─── Location master data (the address picker's lookup API) ───────────────\r\nexport * from './area.js';\r\nexport * from './center.js';\r\n// ─── Check-in QR (poster payload shared by owner, member and backend) ────────\r\nexport * from './chat.js';\r\nexport * from './check-in.js';\r\n// ─── Foundation ──────────────────────────────────────────────────────────────\r\nexport * from './common.js';\r\nexport * from './equipment.js';\r\n// ─── Training ────────────────────────────────────────────────────────────────\r\nexport * from './exercise.js';\r\nexport * from './feedback.js';\r\n// ─── Uploads ─────────────────────────────────────────────────────────────────\r\nexport * from './file.js';\r\n// ─── \"List your gym\" — a member registers the business they run ──────────────\r\nexport * from './gym-registration.js';\r\nexport * from './home.js';\r\nexport * from './insights.js';\r\n// ─── People ──────────────────────────────────────────────────────────────────\r\nexport * from './member.js';\r\nexport * from './member-profile.js';\r\nexport * from './membership.js';\r\n// ─── Membership ──────────────────────────────────────────────────────────────\r\nexport * from './membership-plan.js';\r\nexport * from './membership-request.js';\r\n// ─── API result messages + error codes ───────────────────────────────────────\r\nexport * from './messages.js';\r\n// ─── Engagement & analytics ──────────────────────────────────────────────────\r\nexport * from './notification.js';\r\nexport * from './onboarding.js';\r\n// ─── Onboarding wizard FORM validation (client-side working shapes) ──────────\r\nexport * from './onboarding-form.js';\r\n// ─── Gym structure & onboarding ──────────────────────────────────────────────\r\nexport * from './organisation.js';\r\nexport * from './owner-profile.js';\r\n// ─── Platform console (people + gyms directories, role keys) ─────────────────\r\nexport * from './platform.js';\r\nexport * from './pricing.js';\r\nexport * from './session.js';\r\nexport * from './shared.js';\r\nexport * from './social.js';\r\nexport * from './staff.js';\r\nexport * from './subscription.js';\r\nexport * from './user.js';\r\nexport * from './workout-plan.js';\r\n"]}

package/dist/social.d.ts

@@ -0,0 +1,172 @@
+/**
+ * gymmonk-schema — Social graph (follow)
+ * ======================================
+ * The follow relationship and the people list it feeds.
+ *
+ * A follow is UNILATERAL: one row, one direction, no acceptance step. A mutual
+ * follow is two independent rows. That is what makes "do I follow them" and
+ * "do they follow me" separately answerable, and therefore what makes
+ * "Follow back" a state the UI can offer at all.
+ *
+ * @module gymmonk-schema/social
+ */
+import { z } from 'zod';
+/**
+ * How the viewer stands with one other person.
+ *
+ * Both directions are carried, and both timestamps with them. `followedYouAt`
+ * is what the Followers list shows as "· 2w", and `followsViewer` is the only
+ * thing that distinguishes a "Follow" button from a "Follow back" button.
+ */
+export declare const viewerSocialStateSchema: z.ZodObject<{
+    following: z.ZodBoolean;
+    followsViewer: z.ZodBoolean;
+    followedAt: z.ZodNullable<z.ZodISODateTime>;
+    followedYouAt: z.ZodNullable<z.ZodISODateTime>;
+}, z.core.$strip>;
+export type ViewerSocialState = z.infer<typeof viewerSocialStateSchema>;
+/** Nobody follows anybody. The shape a missing lookup falls back to. */
+export declare const EMPTY_VIEWER_SOCIAL_STATE: ViewerSocialState;
+/**
+ * "Followed by Priya, Rahul and 3 more" — the people the viewer and this person
+ * both follow.
+ *
+ * `count` is the TOTAL; `avatars` and `sampleNames` carry only the handful
+ * actually rendered. Sending every mutual so the client can count them would
+ * put an unbounded array on a list row for one line of secondary text.
+ */
+export declare const mutualsSchema: z.ZodObject<{
+    count: z.ZodNumber;
+    avatars: z.ZodArray<z.ZodNullable<z.ZodString>>;
+    sampleNames: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type Mutuals = z.infer<typeof mutualsSchema>;
+/** How many faces and names a mutuals line carries. */
+export declare const MUTUALS_SAMPLE_SIZE = 3;
+/**
+ * Why this person is in the viewer's list.
+ *
+ *   `gym`        at the viewer's gym, not followed
+ *   `following`  followed by the viewer, and NOT at their gym any more
+ *   `both`       at the gym AND followed
+ *
+ * The distinction is load-bearing rather than cosmetic. Messaging is gated on
+ * sharing a gym, so a `following` row must not offer a Message button the
+ * backend will refuse. jansathi has no equivalent because its People tab is the
+ * whole community and there is no second axis to be on the wrong side of.
+ */
+export declare const buddyRelationSchema: z.ZodEnum<{
+    gym: "gym";
+    following: "following";
+    both: "both";
+}>;
+export type BuddyRelation = z.infer<typeof buddyRelationSchema>;
+/** Which slice of the list the caller asked for. */
+export declare const buddyFilterSchema: z.ZodEnum<{
+    all: "all";
+    gym: "gym";
+    following: "following";
+    followers: "followers";
+}>;
+export type BuddyFilter = z.infer<typeof buddyFilterSchema>;
+export declare const BUDDY_FILTER_VALUES: readonly ["all", "gym", "following", "followers"];
+/**
+ * One person as a peer is allowed to see them.
+ *
+ * Deliberately NOT derived from the owner's member projection. That one carries
+ * phone numbers, addresses, emergency contacts, dues and attendance, and the
+ * only reliable way to guarantee none of it reaches a peer is for this to be a
+ * separate shape rather than the same one with fields removed.
+ */
+export declare const buddySchema: z.ZodObject<{
+    userId: z.ZodString;
+    name: z.ZodString;
+    avatarUrl: z.ZodNullable<z.ZodString>;
+    memberSince: z.ZodNullable<z.ZodString>;
+    lastActiveAt: z.ZodNullable<z.ZodISODateTime>;
+    relation: z.ZodEnum<{
+        gym: "gym";
+        following: "following";
+        both: "both";
+    }>;
+    viewer: z.ZodObject<{
+        following: z.ZodBoolean;
+        followsViewer: z.ZodBoolean;
+        followedAt: z.ZodNullable<z.ZodISODateTime>;
+        followedYouAt: z.ZodNullable<z.ZodISODateTime>;
+    }, z.core.$strip>;
+    mutuals: z.ZodNullable<z.ZodObject<{
+        count: z.ZodNumber;
+        avatars: z.ZodArray<z.ZodNullable<z.ZodString>>;
+        sampleNames: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type Buddy = z.infer<typeof buddySchema>;
+/** `GET /api/v1/members/at-my-gym?filter=` */
+export declare const buddyListQuerySchema: z.ZodObject<{
+    filter: z.ZodDefault<z.ZodEnum<{
+        all: "all";
+        gym: "gym";
+        following: "following";
+        followers: "followers";
+    }>>;
+}, z.core.$strip>;
+export type BuddyListQuery = z.infer<typeof buddyListQuerySchema>;
+/**
+ * The state AFTER a toggle.
+ *
+ * A toggle rather than separate follow and unfollow endpoints: a button acting
+ * on stale state can send the wrong one, and then the server has to decide
+ * whether a double unfollow is an error. A toggle has one meaning whatever the
+ * client believed, and this response says what is now true.
+ */
+export declare const toggleFollowResultSchema: z.ZodObject<{
+    targetUserId: z.ZodString;
+    following: z.ZodBoolean;
+    followerCount: z.ZodNumber;
+}, z.core.$strip>;
+export type ToggleFollowResult = z.infer<typeof toggleFollowResultSchema>;
+/** `GET /api/v1/users/:id/social` — one person's relationship plus their totals. */
+export declare const socialSnapshotSchema: z.ZodObject<{
+    person: z.ZodObject<{
+        userId: z.ZodString;
+        name: z.ZodString;
+        avatarUrl: z.ZodNullable<z.ZodString>;
+        memberSince: z.ZodNullable<z.ZodString>;
+        lastActiveAt: z.ZodNullable<z.ZodISODateTime>;
+        relation: z.ZodEnum<{
+            gym: "gym";
+            following: "following";
+            both: "both";
+        }>;
+        viewer: z.ZodObject<{
+            following: z.ZodBoolean;
+            followsViewer: z.ZodBoolean;
+            followedAt: z.ZodNullable<z.ZodISODateTime>;
+            followedYouAt: z.ZodNullable<z.ZodISODateTime>;
+        }, z.core.$strip>;
+        mutuals: z.ZodNullable<z.ZodObject<{
+            count: z.ZodNumber;
+            avatars: z.ZodArray<z.ZodNullable<z.ZodString>>;
+            sampleNames: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    followerCount: z.ZodNumber;
+    followingCount: z.ZodNumber;
+}, z.core.$strip>;
+export type SocialSnapshot = z.infer<typeof socialSnapshotSchema>;
+/** One row of the viewer's block list. */
+export declare const blockedUserSchema: z.ZodObject<{
+    userId: z.ZodString;
+    name: z.ZodString;
+    avatarUrl: z.ZodNullable<z.ZodString>;
+    blockedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type BlockedUser = z.infer<typeof blockedUserSchema>;
+/** `POST /api/v1/users/:id/block` — the state AFTER the toggle. */
+export declare const toggleBlockResultSchema: z.ZodObject<{
+    targetUserId: z.ZodString;
+    blocked: z.ZodBoolean;
+}, z.core.$strip>;
+export type ToggleBlockResult = z.infer<typeof toggleBlockResultSchema>;
+//# sourceMappingURL=social.d.ts.map

package/dist/social.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"social.d.ts","sourceRoot":"","sources":["../src/social.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB;;;;;iBASlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,wEAAwE;AACxE,eAAO,MAAM,yBAAyB,EAAE,iBAKvC,CAAC;AAIF;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa;;;;iBAMxB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,uDAAuD;AACvD,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAIrC;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB;;;;EAAuC,CAAC;AACxE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,oDAAoD;AACpD,eAAO,MAAM,iBAAiB;;;;;EAAmD,CAAC;AAClF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,mBAAmB,mDAAoD,CAAC;AAErF;;;;;;;GAOG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;iBAmBtB,CAAC;AACH,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD,8CAA8C;AAC9C,eAAO,MAAM,oBAAoB;;;;;;;iBAE/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB;;;;iBAInC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,oFAAoF;AACpF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAe/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAOlE,0CAA0C;AAC1C,eAAO,MAAM,iBAAiB;;;;;iBAK5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/social.js

@@ -0,0 +1,154 @@
+/**
+ * gymmonk-schema — Social graph (follow)
+ * ======================================
+ * The follow relationship and the people list it feeds.
+ *
+ * A follow is UNILATERAL: one row, one direction, no acceptance step. A mutual
+ * follow is two independent rows. That is what makes "do I follow them" and
+ * "do they follow me" separately answerable, and therefore what makes
+ * "Follow back" a state the UI can offer at all.
+ *
+ * @module gymmonk-schema/social
+ */
+import { z } from 'zod';
+import { isoDateTimeSchema, objectIdSchema } from './common.js';
+// ─── Viewer state ────────────────────────────────────────────────────────────
+/**
+ * How the viewer stands with one other person.
+ *
+ * Both directions are carried, and both timestamps with them. `followedYouAt`
+ * is what the Followers list shows as "· 2w", and `followsViewer` is the only
+ * thing that distinguishes a "Follow" button from a "Follow back" button.
+ */
+export const viewerSocialStateSchema = z.object({
+    /** The viewer follows them. */
+    following: z.boolean(),
+    /** They follow the viewer. */
+    followsViewer: z.boolean(),
+    /** When the viewer started following them. Null when they do not. */
+    followedAt: isoDateTimeSchema.nullable(),
+    /** When they started following the viewer. Null when they do not. */
+    followedYouAt: isoDateTimeSchema.nullable(),
+});
+/** Nobody follows anybody. The shape a missing lookup falls back to. */
+export const EMPTY_VIEWER_SOCIAL_STATE = {
+    following: false,
+    followsViewer: false,
+    followedAt: null,
+    followedYouAt: null,
+};
+// ─── Mutuals ─────────────────────────────────────────────────────────────────
+/**
+ * "Followed by Priya, Rahul and 3 more" — the people the viewer and this person
+ * both follow.
+ *
+ * `count` is the TOTAL; `avatars` and `sampleNames` carry only the handful
+ * actually rendered. Sending every mutual so the client can count them would
+ * put an unbounded array on a list row for one line of secondary text.
+ */
+export const mutualsSchema = z.object({
+    count: z.number().int().nonnegative(),
+    /** Up to three, for the stacked faces. An entry is null when that person has no photo. */
+    avatars: z.array(z.string().nullable()),
+    /** Up to three names, for the sentence. */
+    sampleNames: z.array(z.string()),
+});
+/** How many faces and names a mutuals line carries. */
+export const MUTUALS_SAMPLE_SIZE = 3;
+// ─── People list ─────────────────────────────────────────────────────────────
+/**
+ * Why this person is in the viewer's list.
+ *
+ *   `gym`        at the viewer's gym, not followed
+ *   `following`  followed by the viewer, and NOT at their gym any more
+ *   `both`       at the gym AND followed
+ *
+ * The distinction is load-bearing rather than cosmetic. Messaging is gated on
+ * sharing a gym, so a `following` row must not offer a Message button the
+ * backend will refuse. jansathi has no equivalent because its People tab is the
+ * whole community and there is no second axis to be on the wrong side of.
+ */
+export const buddyRelationSchema = z.enum(['gym', 'following', 'both']);
+/** Which slice of the list the caller asked for. */
+export const buddyFilterSchema = z.enum(['all', 'gym', 'following', 'followers']);
+export const BUDDY_FILTER_VALUES = ['all', 'gym', 'following', 'followers'];
+/**
+ * One person as a peer is allowed to see them.
+ *
+ * Deliberately NOT derived from the owner's member projection. That one carries
+ * phone numbers, addresses, emergency contacts, dues and attendance, and the
+ * only reliable way to guarantee none of it reaches a peer is for this to be a
+ * separate shape rather than the same one with fields removed.
+ */
+export const buddySchema = z.object({
+    /** The USER id. This is who you follow and message, not a profile row. */
+    userId: objectIdSchema,
+    name: z.string(),
+    avatarUrl: z.string().nullable(),
+    /** "Member since Mar 2025", or null for someone with no membership history here. */
+    memberSince: z.string().nullable(),
+    /**
+     * When this person was last seen in the app. Null if never.
+     *
+     * Carried so the list can offer a "Recently active" sort. It is deliberately
+     * a raw instant rather than a rendered "2h ago": the client is the only side
+     * that knows what time it is where the reader is sitting, and a string
+     * formatted on the server goes stale the moment it is cached.
+     */
+    lastActiveAt: isoDateTimeSchema.nullable(),
+    relation: buddyRelationSchema,
+    viewer: viewerSocialStateSchema,
+    mutuals: mutualsSchema.nullable(),
+});
+/** `GET /api/v1/members/at-my-gym?filter=` */
+export const buddyListQuerySchema = z.object({
+    filter: buddyFilterSchema.default('all'),
+});
+// ─── Toggle ──────────────────────────────────────────────────────────────────
+/**
+ * The state AFTER a toggle.
+ *
+ * A toggle rather than separate follow and unfollow endpoints: a button acting
+ * on stale state can send the wrong one, and then the server has to decide
+ * whether a double unfollow is an error. A toggle has one meaning whatever the
+ * client believed, and this response says what is now true.
+ */
+export const toggleFollowResultSchema = z.object({
+    targetUserId: objectIdSchema,
+    following: z.boolean(),
+    followerCount: z.number().int().nonnegative(),
+});
+/** `GET /api/v1/users/:id/social` — one person's relationship plus their totals. */
+export const socialSnapshotSchema = z.object({
+    /**
+     * The person themselves, in the SAME shape as a people-list row.
+     *
+     * The profile screen and the row show the same facts and offer the same
+     * actions, so two shapes would be two places to add a field and one of them
+     * being forgotten. `viewer` lives inside it.
+     *
+     * RECOVERED from the published 0.17.0 `.d.ts`, not from its sourcemap — that
+     * map's `sourcesContent` predates this field and dropped it silently, which
+     * would have broken the peer-profile screen on the next publish.
+     */
+    person: buddySchema,
+    followerCount: z.number().int().nonnegative(),
+    followingCount: z.number().int().nonnegative(),
+});
+// ─── Blocking ────────────────────────────────────────────────────────────────
+//
+// RECOVERED from the published 0.17.0 build, not from its sourcemap: that map's
+// `sourcesContent` predates these two and would have dropped them silently.
+/** One row of the viewer's block list. */
+export const blockedUserSchema = z.object({
+    userId: objectIdSchema,
+    name: z.string(),
+    avatarUrl: z.string().nullable(),
+    blockedAt: isoDateTimeSchema,
+});
+/** `POST /api/v1/users/:id/block` — the state AFTER the toggle. */
+export const toggleBlockResultSchema = z.object({
+    targetUserId: objectIdSchema,
+    blocked: z.boolean(),
+});
+//# sourceMappingURL=social.js.map

package/dist/social.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"social.js","sourceRoot":"","sources":["../src/social.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEhE,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,+BAA+B;IAC/B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,8BAA8B;IAC9B,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,qEAAqE;IACrE,UAAU,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACxC,qEAAqE;IACrE,aAAa,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAGH,wEAAwE;AACxE,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,SAAS,EAAE,KAAK;IAChB,aAAa,EAAE,KAAK;IACpB,UAAU,EAAE,IAAI;IAChB,aAAa,EAAE,IAAI;CACpB,CAAC;AAEF,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,0FAA0F;IAC1F,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;IACvC,2CAA2C;IAC3C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACjC,CAAC,CAAC;AAGH,uDAAuD;AACvD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,gFAAgF;AAEhF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AAGxE,oDAAoD;AACpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAGlF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAErF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,0EAA0E;IAC1E,MAAM,EAAE,cAAc;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,oFAAoF;IACpF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC;;;;;;;OAOG;IACH,YAAY,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,mBAAmB;IAC7B,MAAM,EAAE,uBAAuB;IAC/B,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,8CAA8C;AAC9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC;CACzC,CAAC,CAAC;AAGH,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,YAAY,EAAE,cAAc;IAC5B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC9C,CAAC,CAAC;AAGH,oFAAoF;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C;;;;;;;;;;OAUG;IACH,MAAM,EAAE,WAAW;IACnB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC/C,CAAC,CAAC;AAGH,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAE5E,0CAA0C;AAC1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,cAAc;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,iBAAiB;CAC7B,CAAC,CAAC;AAGH,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,YAAY,EAAE,cAAc;IAC5B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC","sourcesContent":["/**\r\n * gymmonk-schema — Social graph (follow)\r\n * ======================================\r\n * The follow relationship and the people list it feeds.\r\n *\r\n * A follow is UNILATERAL: one row, one direction, no acceptance step. A mutual\r\n * follow is two independent rows. That is what makes \"do I follow them\" and\r\n * \"do they follow me\" separately answerable, and therefore what makes\r\n * \"Follow back\" a state the UI can offer at all.\r\n *\r\n * @module gymmonk-schema/social\r\n */\r\n\r\nimport { z } from 'zod';\r\nimport { isoDateTimeSchema, objectIdSchema } from './common.js';\r\n\r\n// ─── Viewer state ────────────────────────────────────────────────────────────\r\n\r\n/**\r\n * How the viewer stands with one other person.\r\n *\r\n * Both directions are carried, and both timestamps with them. `followedYouAt`\r\n * is what the Followers list shows as \"· 2w\", and `followsViewer` is the only\r\n * thing that distinguishes a \"Follow\" button from a \"Follow back\" button.\r\n */\r\nexport const viewerSocialStateSchema = z.object({\r\n  /** The viewer follows them. */\r\n  following: z.boolean(),\r\n  /** They follow the viewer. */\r\n  followsViewer: z.boolean(),\r\n  /** When the viewer started following them. Null when they do not. */\r\n  followedAt: isoDateTimeSchema.nullable(),\r\n  /** When they started following the viewer. Null when they do not. */\r\n  followedYouAt: isoDateTimeSchema.nullable(),\r\n});\r\nexport type ViewerSocialState = z.infer<typeof viewerSocialStateSchema>;\r\n\r\n/** Nobody follows anybody. The shape a missing lookup falls back to. */\r\nexport const EMPTY_VIEWER_SOCIAL_STATE: ViewerSocialState = {\r\n  following: false,\r\n  followsViewer: false,\r\n  followedAt: null,\r\n  followedYouAt: null,\r\n};\r\n\r\n// ─── Mutuals ─────────────────────────────────────────────────────────────────\r\n\r\n/**\r\n * \"Followed by Priya, Rahul and 3 more\" — the people the viewer and this person\r\n * both follow.\r\n *\r\n * `count` is the TOTAL; `avatars` and `sampleNames` carry only the handful\r\n * actually rendered. Sending every mutual so the client can count them would\r\n * put an unbounded array on a list row for one line of secondary text.\r\n */\r\nexport const mutualsSchema = z.object({\r\n  count: z.number().int().nonnegative(),\r\n  /** Up to three, for the stacked faces. An entry is null when that person has no photo. */\r\n  avatars: z.array(z.string().nullable()),\r\n  /** Up to three names, for the sentence. */\r\n  sampleNames: z.array(z.string()),\r\n});\r\nexport type Mutuals = z.infer<typeof mutualsSchema>;\r\n\r\n/** How many faces and names a mutuals line carries. */\r\nexport const MUTUALS_SAMPLE_SIZE = 3;\r\n\r\n// ─── People list ─────────────────────────────────────────────────────────────\r\n\r\n/**\r\n * Why this person is in the viewer's list.\r\n *\r\n *   `gym`        at the viewer's gym, not followed\r\n *   `following`  followed by the viewer, and NOT at their gym any more\r\n *   `both`       at the gym AND followed\r\n *\r\n * The distinction is load-bearing rather than cosmetic. Messaging is gated on\r\n * sharing a gym, so a `following` row must not offer a Message button the\r\n * backend will refuse. jansathi has no equivalent because its People tab is the\r\n * whole community and there is no second axis to be on the wrong side of.\r\n */\r\nexport const buddyRelationSchema = z.enum(['gym', 'following', 'both']);\r\nexport type BuddyRelation = z.infer<typeof buddyRelationSchema>;\r\n\r\n/** Which slice of the list the caller asked for. */\r\nexport const buddyFilterSchema = z.enum(['all', 'gym', 'following', 'followers']);\r\nexport type BuddyFilter = z.infer<typeof buddyFilterSchema>;\r\n\r\nexport const BUDDY_FILTER_VALUES = ['all', 'gym', 'following', 'followers'] as const;\r\n\r\n/**\r\n * One person as a peer is allowed to see them.\r\n *\r\n * Deliberately NOT derived from the owner's member projection. That one carries\r\n * phone numbers, addresses, emergency contacts, dues and attendance, and the\r\n * only reliable way to guarantee none of it reaches a peer is for this to be a\r\n * separate shape rather than the same one with fields removed.\r\n */\r\nexport const buddySchema = z.object({\r\n  /** The USER id. This is who you follow and message, not a profile row. */\r\n  userId: objectIdSchema,\r\n  name: z.string(),\r\n  avatarUrl: z.string().nullable(),\r\n  /** \"Member since Mar 2025\", or null for someone with no membership history here. */\r\n  memberSince: z.string().nullable(),\r\n  /**\r\n   * When this person was last seen in the app. Null if never.\r\n   *\r\n   * Carried so the list can offer a \"Recently active\" sort. It is deliberately\r\n   * a raw instant rather than a rendered \"2h ago\": the client is the only side\r\n   * that knows what time it is where the reader is sitting, and a string\r\n   * formatted on the server goes stale the moment it is cached.\r\n   */\r\n  lastActiveAt: isoDateTimeSchema.nullable(),\r\n  relation: buddyRelationSchema,\r\n  viewer: viewerSocialStateSchema,\r\n  mutuals: mutualsSchema.nullable(),\r\n});\r\nexport type Buddy = z.infer<typeof buddySchema>;\r\n\r\n/** `GET /api/v1/members/at-my-gym?filter=` */\r\nexport const buddyListQuerySchema = z.object({\r\n  filter: buddyFilterSchema.default('all'),\r\n});\r\nexport type BuddyListQuery = z.infer<typeof buddyListQuerySchema>;\r\n\r\n// ─── Toggle ──────────────────────────────────────────────────────────────────\r\n\r\n/**\r\n * The state AFTER a toggle.\r\n *\r\n * A toggle rather than separate follow and unfollow endpoints: a button acting\r\n * on stale state can send the wrong one, and then the server has to decide\r\n * whether a double unfollow is an error. A toggle has one meaning whatever the\r\n * client believed, and this response says what is now true.\r\n */\r\nexport const toggleFollowResultSchema = z.object({\r\n  targetUserId: objectIdSchema,\r\n  following: z.boolean(),\r\n  followerCount: z.number().int().nonnegative(),\r\n});\r\nexport type ToggleFollowResult = z.infer<typeof toggleFollowResultSchema>;\r\n\r\n/** `GET /api/v1/users/:id/social` — one person's relationship plus their totals. */\r\nexport const socialSnapshotSchema = z.object({\r\n  /**\r\n   * The person themselves, in the SAME shape as a people-list row.\r\n   *\r\n   * The profile screen and the row show the same facts and offer the same\r\n   * actions, so two shapes would be two places to add a field and one of them\r\n   * being forgotten. `viewer` lives inside it.\r\n   *\r\n   * RECOVERED from the published 0.17.0 `.d.ts`, not from its sourcemap — that\r\n   * map's `sourcesContent` predates this field and dropped it silently, which\r\n   * would have broken the peer-profile screen on the next publish.\r\n   */\r\n  person: buddySchema,\r\n  followerCount: z.number().int().nonnegative(),\r\n  followingCount: z.number().int().nonnegative(),\r\n});\r\nexport type SocialSnapshot = z.infer<typeof socialSnapshotSchema>;\r\n\r\n// ─── Blocking ────────────────────────────────────────────────────────────────\r\n//\r\n// RECOVERED from the published 0.17.0 build, not from its sourcemap: that map's\r\n// `sourcesContent` predates these two and would have dropped them silently.\r\n\r\n/** One row of the viewer's block list. */\r\nexport const blockedUserSchema = z.object({\r\n  userId: objectIdSchema,\r\n  name: z.string(),\r\n  avatarUrl: z.string().nullable(),\r\n  blockedAt: isoDateTimeSchema,\r\n});\r\nexport type BlockedUser = z.infer<typeof blockedUserSchema>;\r\n\r\n/** `POST /api/v1/users/:id/block` — the state AFTER the toggle. */\r\nexport const toggleBlockResultSchema = z.object({\r\n  targetUserId: objectIdSchema,\r\n  blocked: z.boolean(),\r\n});\r\nexport type ToggleBlockResult = z.infer<typeof toggleBlockResultSchema>;\r\n"]}

package/dist/workout-plan.d.ts

@@ -100,6 +100,7 @@ export declare const workoutPlanSummarySchema: z.ZodObject<{
     centerId: z.ZodString;
     name: z.ZodString;
     description: z.ZodNullable<z.ZodString>;
+    goals: z.ZodNullable<z.ZodString>;
     focusTags: z.ZodArray<z.ZodString>;
     createdAt: z.ZodISODateTime;
     updatedAt: z.ZodISODateTime;
@@ -110,6 +111,7 @@ export declare const workoutPlanSchema: z.ZodObject<{
     centerId: z.ZodString;
     name: z.ZodString;
     description: z.ZodNullable<z.ZodString>;
+    goals: z.ZodNullable<z.ZodString>;
     focusTags: z.ZodArray<z.ZodString>;
     createdAt: z.ZodISODateTime;
     updatedAt: z.ZodISODateTime;
@@ -177,6 +179,7 @@ export type CreateWorkoutPlanBody = z.infer<typeof createWorkoutPlanBodySchema>;
 export declare const updateWorkoutPlanBodySchema: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
     description: z.ZodOptional<z.ZodPreprocess<z.ZodOptional<z.ZodString>>>;
+    goals: z.ZodOptional<z.ZodPreprocess<z.ZodOptional<z.ZodString>>>;
     focusTags: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
     days: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
         weekday: z.ZodEnum<{
@@ -195,7 +198,6 @@ export declare const updateWorkoutPlanBodySchema: z.ZodObject<{
             restSec: z.ZodNumber;
         }, z.core.$strip>>>;
     }, z.core.$strip>>>>;
-    goals: z.ZodOptional<z.ZodPreprocess<z.ZodOptional<z.ZodString>>>;
 }, z.core.$strip>;
 export type UpdateWorkoutPlanBody = z.infer<typeof updateWorkoutPlanBodySchema>;
 //# sourceMappingURL=workout-plan.d.ts.map

package/dist/workout-plan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workout-plan.d.ts","sourceRoot":"","sources":["../src/workout-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,uEAAuE;AACvE,eAAO,MAAM,uBAAuB;;;;;iBAKlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;iBAGpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAI5E,6EAA6E;AAC7E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;iBAY7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGxB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAIpD,eAAO,MAAM,wBAAwB;;;;;;;;iBAQnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAE5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAI5D,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;iBAOtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;iBAE5B,CAAC;AACb,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}
+{"version":3,"file":"workout-plan.d.ts","sourceRoot":"","sources":["../src/workout-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,uEAAuE;AACvE,eAAO,MAAM,uBAAuB;;;;;iBAKlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;iBAGpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAI5E,6EAA6E;AAC7E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;iBAY7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGxB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAIpD,eAAO,MAAM,wBAAwB;;;;;;;;;iBAkBnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAE5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAI5D,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;iBAOtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;iBAE5B,CAAC;AACb,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/workout-plan.js

@@ -49,6 +49,16 @@ export const workoutPlanSummarySchema = z.object({
     centerId: objectIdSchema,
     name: z.string(),
     description: z.string().nullable(),
+    /**
+     * What the plan is FOR ("Strength, Endurance"), as distinct from
+     * `description`, the prose blurb on the plan card.
+     *
+     * `createWorkoutPlanBodySchema` has accepted `goals` from the start but no
+     * read shape carried it, so the owner's Goals / Focus field was write-only —
+     * and, until the Mongoose model gained the path, not even written. Reading it
+     * back is what lets the plan be edited without silently clearing the field.
+     */
+    goals: z.string().nullable(),
     focusTags: z.array(z.string()),
     createdAt: isoDateTimeSchema,
     updatedAt: isoDateTimeSchema,

package/dist/workout-plan.js.map

@@ -1 +1 @@
-{"version":3,"file":"workout-plan.js","sourceRoot":"","sources":["../src/workout-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,gFAAgF;AAEhF,uEAAuE;AACvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,UAAU,EAAE,cAAc;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;CAC3C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,aAAa;IACtB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAChE,CAAC,CAAC;AAGH,gFAAgF;AAEhF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,cAAc;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,gBAAgB;IAC5B,QAAQ,EAAE,sBAAsB;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC1B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,aAAa;IACtB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACvC,CAAC,CAAC;AAGH,gFAAgF;AAEhF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,cAAc;IAClB,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9B,SAAS,EAAE,iBAAiB;IAC5B,SAAS,EAAE,iBAAiB;CAC7B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,MAAM,CAAC;IAC/D,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;CAC7B,CAAC,CAAC;AAGH,gFAAgF;AAEhF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChE,WAAW,EAAE,qBAAqB,CAAC,IAAI,CAAC;IACxC,KAAK,EAAE,qBAAqB,CAAC,GAAG,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC5D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,2BAA2B;KACnE,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KACxB,OAAO,EAAE,CAAC","sourcesContent":["/**\n * gymmonk-schema — Workout plans (routines)\n * ==========================================\n * A weekly training routine an owner builds from library exercises and assigns\n * to members. Each day carries prescribed exercises (sets / reps / rest). The\n * prescription is stored by exercise ref; the API populates a summary for\n * rendering.\n *\n * @module gymmonk-schema/workout-plan\n */\n\nimport { z } from 'zod';\nimport { isoDateTimeSchema, objectIdSchema, optionalTrimmedString } from './common.js';\nimport { difficultySchema, exerciseCategorySchema } from './exercise.js';\nimport { weekdaySchema } from './shared.js';\n\n// ─── Prescription (stored input) ─────────────────────────────────────────────\n\n/** One exercise slot in a plan day, referencing a library exercise. */\nexport const planExerciseInputSchema = z.object({\n  exerciseId: objectIdSchema,\n  sets: z.number().int().min(1).max(20),\n  reps: z.string().trim().min(1).max(40),\n  restSec: z.number().int().min(0).max(3600),\n});\nexport type PlanExerciseInput = z.infer<typeof planExerciseInputSchema>;\n\nexport const workoutPlanDayInputSchema = z.object({\n  weekday: weekdaySchema,\n  exercises: z.array(planExerciseInputSchema).max(30).default([]),\n});\nexport type WorkoutPlanDayInput = z.infer<typeof workoutPlanDayInputSchema>;\n\n// ─── Populated response shapes ───────────────────────────────────────────────\n\n/** A plan-day exercise with its populated library summary + prescription. */\nexport const planExerciseSchema = z.object({\n  exerciseId: objectIdSchema,\n  slug: z.string(),\n  name: z.string(),\n  description: z.string(),\n  thumbnailUrl: z.string().nullable(),\n  difficulty: difficultySchema,\n  category: exerciseCategorySchema,\n  targetArea: z.string(),\n  sets: z.number().int(),\n  reps: z.string(),\n  restSec: z.number().int(),\n});\nexport type PlanExercise = z.infer<typeof planExerciseSchema>;\n\nexport const planDaySchema = z.object({\n  weekday: weekdaySchema,\n  exercises: z.array(planExerciseSchema),\n});\nexport type PlanDay = z.infer<typeof planDaySchema>;\n\n// ─── Entity ──────────────────────────────────────────────────────────────────\n\nexport const workoutPlanSummarySchema = z.object({\n  id: objectIdSchema,\n  centerId: objectIdSchema,\n  name: z.string(),\n  description: z.string().nullable(),\n  focusTags: z.array(z.string()),\n  createdAt: isoDateTimeSchema,\n  updatedAt: isoDateTimeSchema,\n});\nexport type WorkoutPlanSummary = z.infer<typeof workoutPlanSummarySchema>;\n\nexport const workoutPlanSchema = workoutPlanSummarySchema.extend({\n  days: z.array(planDaySchema),\n});\nexport type WorkoutPlan = z.infer<typeof workoutPlanSchema>;\n\n// ─── Create / update body ────────────────────────────────────────────────────\n\nexport const createWorkoutPlanBodySchema = z.object({\n  centerId: objectIdSchema,\n  name: z.string().trim().min(1, 'Plan name is required').max(120),\n  description: optionalTrimmedString(2000),\n  goals: optionalTrimmedString(400),\n  focusTags: z.array(z.string().trim().max(40)).max(20).default([]),\n  days: z.array(workoutPlanDayInputSchema).max(7).default([]),\n});\nexport type CreateWorkoutPlanBody = z.infer<typeof createWorkoutPlanBodySchema>;\n\nexport const updateWorkoutPlanBodySchema = createWorkoutPlanBodySchema\n  .omit({ centerId: true })\n  .partial();\nexport type UpdateWorkoutPlanBody = z.infer<typeof updateWorkoutPlanBodySchema>;\n"]}
+{"version":3,"file":"workout-plan.js","sourceRoot":"","sources":["../src/workout-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,gFAAgF;AAEhF,uEAAuE;AACvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,UAAU,EAAE,cAAc;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;CAC3C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,aAAa;IACtB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAChE,CAAC,CAAC;AAGH,gFAAgF;AAEhF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,cAAc;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,gBAAgB;IAC5B,QAAQ,EAAE,sBAAsB;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC1B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,aAAa;IACtB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACvC,CAAC,CAAC;AAGH,gFAAgF;AAEhF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,cAAc;IAClB,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC;;;;;;;;OAQG;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9B,SAAS,EAAE,iBAAiB;IAC5B,SAAS,EAAE,iBAAiB;CAC7B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,MAAM,CAAC;IAC/D,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;CAC7B,CAAC,CAAC;AAGH,gFAAgF;AAEhF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChE,WAAW,EAAE,qBAAqB,CAAC,IAAI,CAAC;IACxC,KAAK,EAAE,qBAAqB,CAAC,GAAG,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC5D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,2BAA2B;KACnE,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KACxB,OAAO,EAAE,CAAC","sourcesContent":["/**\n * gymmonk-schema — Workout plans (routines)\n * ==========================================\n * A weekly training routine an owner builds from library exercises and assigns\n * to members. Each day carries prescribed exercises (sets / reps / rest). The\n * prescription is stored by exercise ref; the API populates a summary for\n * rendering.\n *\n * @module gymmonk-schema/workout-plan\n */\n\nimport { z } from 'zod';\nimport { isoDateTimeSchema, objectIdSchema, optionalTrimmedString } from './common.js';\nimport { difficultySchema, exerciseCategorySchema } from './exercise.js';\nimport { weekdaySchema } from './shared.js';\n\n// ─── Prescription (stored input) ─────────────────────────────────────────────\n\n/** One exercise slot in a plan day, referencing a library exercise. */\nexport const planExerciseInputSchema = z.object({\n  exerciseId: objectIdSchema,\n  sets: z.number().int().min(1).max(20),\n  reps: z.string().trim().min(1).max(40),\n  restSec: z.number().int().min(0).max(3600),\n});\nexport type PlanExerciseInput = z.infer<typeof planExerciseInputSchema>;\n\nexport const workoutPlanDayInputSchema = z.object({\n  weekday: weekdaySchema,\n  exercises: z.array(planExerciseInputSchema).max(30).default([]),\n});\nexport type WorkoutPlanDayInput = z.infer<typeof workoutPlanDayInputSchema>;\n\n// ─── Populated response shapes ───────────────────────────────────────────────\n\n/** A plan-day exercise with its populated library summary + prescription. */\nexport const planExerciseSchema = z.object({\n  exerciseId: objectIdSchema,\n  slug: z.string(),\n  name: z.string(),\n  description: z.string(),\n  thumbnailUrl: z.string().nullable(),\n  difficulty: difficultySchema,\n  category: exerciseCategorySchema,\n  targetArea: z.string(),\n  sets: z.number().int(),\n  reps: z.string(),\n  restSec: z.number().int(),\n});\nexport type PlanExercise = z.infer<typeof planExerciseSchema>;\n\nexport const planDaySchema = z.object({\n  weekday: weekdaySchema,\n  exercises: z.array(planExerciseSchema),\n});\nexport type PlanDay = z.infer<typeof planDaySchema>;\n\n// ─── Entity ──────────────────────────────────────────────────────────────────\n\nexport const workoutPlanSummarySchema = z.object({\n  id: objectIdSchema,\n  centerId: objectIdSchema,\n  name: z.string(),\n  description: z.string().nullable(),\n  /**\n   * What the plan is FOR (\"Strength, Endurance\"), as distinct from\n   * `description`, the prose blurb on the plan card.\n   *\n   * `createWorkoutPlanBodySchema` has accepted `goals` from the start but no\n   * read shape carried it, so the owner's Goals / Focus field was write-only —\n   * and, until the Mongoose model gained the path, not even written. Reading it\n   * back is what lets the plan be edited without silently clearing the field.\n   */\n  goals: z.string().nullable(),\n  focusTags: z.array(z.string()),\n  createdAt: isoDateTimeSchema,\n  updatedAt: isoDateTimeSchema,\n});\nexport type WorkoutPlanSummary = z.infer<typeof workoutPlanSummarySchema>;\n\nexport const workoutPlanSchema = workoutPlanSummarySchema.extend({\n  days: z.array(planDaySchema),\n});\nexport type WorkoutPlan = z.infer<typeof workoutPlanSchema>;\n\n// ─── Create / update body ────────────────────────────────────────────────────\n\nexport const createWorkoutPlanBodySchema = z.object({\n  centerId: objectIdSchema,\n  name: z.string().trim().min(1, 'Plan name is required').max(120),\n  description: optionalTrimmedString(2000),\n  goals: optionalTrimmedString(400),\n  focusTags: z.array(z.string().trim().max(40)).max(20).default([]),\n  days: z.array(workoutPlanDayInputSchema).max(7).default([]),\n});\nexport type CreateWorkoutPlanBody = z.infer<typeof createWorkoutPlanBodySchema>;\n\nexport const updateWorkoutPlanBodySchema = createWorkoutPlanBodySchema\n  .omit({ centerId: true })\n  .partial();\nexport type UpdateWorkoutPlanBody = z.infer<typeof updateWorkoutPlanBodySchema>;\n"]}

package/package.json

@@ -1,49 +1,49 @@
 {
-	"name": "gymmonk-schema",
-	"version": "0.16.0",
-	"description": "Shared Zod schemas, enums and domain types for GymMonk (fitness SaaS) — single source of truth (SSOT) consumed by gymmonk-backend and gymmonk-web-client.",
-	"type": "module",
-	"main": "./dist/index.js",
-	"module": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js",
-			"require": "./dist/index.js"
-		}
-	},
-	"files": [
-		"dist",
-		"README.md"
-	],
-	"sideEffects": false,
-	"scripts": {
-		"build": "tsc -p tsconfig.json",
-		"type-check": "tsc --noEmit",
-		"lint": "biome lint .",
-		"format": "biome format --write .",
-		"check": "npm run type-check && biome check --write .",
-		"check:staged": "biome check --staged --write --no-errors-on-unmatched",
-		"prepublishOnly": "npm run build && npm run check"
-	},
-	"keywords": [
-		"zod",
-		"schema",
-		"gymmonk",
-		"gym",
-		"fitness",
-		"typescript"
-	],
-	"author": "Hari",
-	"license": "MIT",
-	"peerDependencies": {
-		"zod": "^4.4.0"
-	},
-	"devDependencies": {
-		"@biomejs/biome": "^2.4.2",
-		"@types/node": "^24.10.1",
-		"typescript": "^5.9.3",
-		"zod": "^4.4.3"
-	}
+  "name": "gymmonk-schema",
+  "version": "0.18.0",
+  "description": "Shared Zod schemas, enums and domain types for GymMonk (fitness SaaS) — single source of truth (SSOT) consumed by gymmonk-backend and gymmonk-web-client.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "type-check": "tsc --noEmit",
+    "lint": "biome lint .",
+    "format": "biome format --write .",
+    "check": "npm run type-check && biome check --write .",
+    "check:staged": "biome check --staged --write --no-errors-on-unmatched",
+    "prepublishOnly": "npm run build && npm run check"
+  },
+  "keywords": [
+    "zod",
+    "schema",
+    "gymmonk",
+    "gym",
+    "fitness",
+    "typescript"
+  ],
+  "author": "Hari",
+  "license": "MIT",
+  "peerDependencies": {
+    "zod": "^4.4.0"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.4.2",
+    "@types/node": "^24.10.1",
+    "typescript": "^5.9.3",
+    "zod": "^4.4.3"
+  }
 }