gymmonk-schema 0.3.1 → 0.5.0

package/dist/common.d.ts

@@ -24,6 +24,12 @@ export declare const paginationSchema: z.ZodObject<{
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
 }, z.core.$strip>;
 export type Pagination = z.infer<typeof paginationSchema>;
+/**
+ * The raw patterns, exported so the onboarding FORM schemas validate a typed
+ * value exactly the way the API schemas below do — one rule, both sides.
+ */
+export declare const PHONE_REGEX: RegExp;
+export declare const PINCODE_REGEX: RegExp;
 /**
  * A bare 10-digit Indian mobile number. Stored RAW (no `+91`) app-wide — the
  * country code is display-only. Mirrors the jansathi phone-number standard.

package/dist/common.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;GAGG;AACH,eAAO,MAAM,sBAAsB,GAAI,OAAO,OAAO,KAAG,OAGvD,CAAC;AAEF,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,GAAI,kBAAe,gDAC8B,CAAC;AAIpF,kDAAkD;AAClD,eAAO,MAAM,cAAc,aAGgB,CAAC;AAC5C,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAI5D,4DAA4D;AAC5D,eAAO,MAAM,gBAAgB;;;iBAG3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAI1D;;;GAGG;AACH,eAAO,MAAM,WAAW,aAGwC,CAAC;AACjE,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD,6DAA6D;AAC7D,eAAO,MAAM,mBAAmB,6CAA+D,CAAC;AAEhG,wCAAwC;AACxC,eAAO,MAAM,aAAa,aAG0B,CAAC;AACrD,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,6EAA6E;AAC7E,eAAO,MAAM,mBAAmB,4CAG/B,CAAC;AAIF,4DAA4D;AAC5D,eAAO,MAAM,aAAa,aAGoC,CAAC;AAC/D,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,kEAAkE;AAClE,eAAO,MAAM,iBAAiB,kBAAmC,CAAC;AAClE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,sCAAsC;AACtC,eAAO,MAAM,eAAe,aAGmC,CAAC;AAChE,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAIxD;;;GAGG;AACH,eAAO,MAAM,cAAc,aAA0B,CAAC;AACtD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;GAGG;AACH,eAAO,MAAM,sBAAsB,GAAI,OAAO,OAAO,KAAG,OAGvD,CAAC;AAEF,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,GAAI,kBAAe,gDAC8B,CAAC;AAIpF,kDAAkD;AAClD,eAAO,MAAM,cAAc,aAGgB,CAAC;AAC5C,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAI5D,4DAA4D;AAC5D,eAAO,MAAM,gBAAgB;;;iBAG3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAI1D;;;GAGG;AACH,eAAO,MAAM,WAAW,QAAiB,CAAC;AAC1C,eAAO,MAAM,aAAa,QAAY,CAAC;AAEvC;;;GAGG;AACH,eAAO,MAAM,WAAW,aAGqC,CAAC;AAC9D,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD,6DAA6D;AAC7D,eAAO,MAAM,mBAAmB,6CAA+D,CAAC;AAEhG,wCAAwC;AACxC,eAAO,MAAM,aAAa,aAG8B,CAAC;AACzD,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,6EAA6E;AAC7E,eAAO,MAAM,mBAAmB,4CAG/B,CAAC;AAIF,4DAA4D;AAC5D,eAAO,MAAM,aAAa,aAGoC,CAAC;AAC/D,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,kEAAkE;AAClE,eAAO,MAAM,iBAAiB,kBAAmC,CAAC;AAClE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,sCAAsC;AACtC,eAAO,MAAM,eAAe,aAGmC,CAAC;AAChE,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAIxD;;;GAGG;AACH,eAAO,MAAM,cAAc,aAA0B,CAAC;AACtD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/common.js

@@ -33,6 +33,12 @@ export const paginationSchema = z.object({
     limit: z.coerce.number().int().min(1).max(100).default(20),
 });
 // ─── Contact primitives (India) ──────────────────────────────────────────────
+/**
+ * The raw patterns, exported so the onboarding FORM schemas validate a typed
+ * value exactly the way the API schemas below do — one rule, both sides.
+ */
+export const PHONE_REGEX = /^[6-9]\d{9}$/;
+export const PINCODE_REGEX = /^\d{6}$/;
 /**
  * A bare 10-digit Indian mobile number. Stored RAW (no `+91`) app-wide — the
  * country code is display-only. Mirrors the jansathi phone-number standard.
@@ -40,14 +46,14 @@ export const paginationSchema = z.object({
 export const phoneSchema = z
     .string()
     .trim()
-    .regex(/^[6-9]\d{9}$/, 'Enter a valid 10-digit mobile number');
+    .regex(PHONE_REGEX, 'Enter a valid 10-digit mobile number');
 /** Optional phone — empty/whitespace becomes `undefined`. */
 export const optionalPhoneSchema = z.preprocess(emptyStringToUndefined, phoneSchema.optional());
 /** A 6-digit Indian postal PIN code. */
 export const pincodeSchema = z
     .string()
     .trim()
-    .regex(/^\d{6}$/, 'Enter a valid 6-digit pincode');
+    .regex(PINCODE_REGEX, 'Enter a valid 6-digit pincode');
 /** Optional email — empty/whitespace becomes `undefined`, else validated. */
 export const optionalEmailSchema = z.preprocess(emptyStringToUndefined, z.email('Enter a valid email').optional());
 // ─── Date & time primitives ──────────────────────────────────────────────────

package/dist/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAW,EAAE;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACvE,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,EAAE,CACvD,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEpF,gFAAgF;AAEhF,kDAAkD;AAClD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;AAG5C,gFAAgF;AAEhF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC3D,CAAC,CAAC;AAGH,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,cAAc,EAAE,sCAAsC,CAAC,CAAC;AAGjE,6DAA6D;AAC7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEhG,wCAAwC;AACxC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;AAGrD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,UAAU,CAC7C,sBAAsB,EACtB,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE,CAC1C,CAAC;AAEF,gFAAgF;AAEhF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,CAAC;AAG/D,kEAAkE;AAClE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAGlE,sCAAsC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,2BAA2B,EAAE,wBAAwB,CAAC,CAAC;AAGhE,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC","sourcesContent":["/**\n * gymmonk-schema — Shared helpers and primitives\n * ==============================================\n * The stable building blocks reused across every GymMonk domain schema.\n * Mirrors the `dating-schema` / `near-me-schema` idiom: pure Zod, const-object\n * enums fed to `z.enum(...)`, NodeNext `.js` import specifiers.\n *\n * @module gymmonk-schema/common\n */\n\nimport { z } from 'zod';\n\n// ─── String helpers ──────────────────────────────────────────────────────────\n\n/**\n * Converts empty / whitespace-only strings to `undefined`\n * so Zod `.optional()` treats them as \"not provided\".\n */\nexport const emptyStringToUndefined = (value: unknown): unknown => {\n  if (typeof value === 'string' && value.trim() === '') return undefined;\n  return value;\n};\n\n/** Optional trimmed string. Empty strings are coerced to `undefined`. */\nexport const optionalTrimmedString = (maxLength = 100) =>\n  z.preprocess(emptyStringToUndefined, z.string().trim().max(maxLength).optional());\n\n// ─── Identifiers ─────────────────────────────────────────────────────────────\n\n/** A 24-character hex MongoDB ObjectId string. */\nexport const objectIdSchema = z\n  .string()\n  .trim()\n  .regex(/^[0-9a-fA-F]{24}$/, 'Invalid id');\nexport type ObjectIdString = z.infer<typeof objectIdSchema>;\n\n// ─── Pagination ──────────────────────────────────────────────────────────────\n\n/** Pagination query params shared across list endpoints. */\nexport const paginationSchema = z.object({\n  page: z.coerce.number().int().min(1).default(1),\n  limit: z.coerce.number().int().min(1).max(100).default(20),\n});\nexport type Pagination = z.infer<typeof paginationSchema>;\n\n// ─── Contact primitives (India) ──────────────────────────────────────────────\n\n/**\n * A bare 10-digit Indian mobile number. Stored RAW (no `+91`) app-wide — the\n * country code is display-only. Mirrors the jansathi phone-number standard.\n */\nexport const phoneSchema = z\n  .string()\n  .trim()\n  .regex(/^[6-9]\\d{9}$/, 'Enter a valid 10-digit mobile number');\nexport type Phone = z.infer<typeof phoneSchema>;\n\n/** Optional phone — empty/whitespace becomes `undefined`. */\nexport const optionalPhoneSchema = z.preprocess(emptyStringToUndefined, phoneSchema.optional());\n\n/** A 6-digit Indian postal PIN code. */\nexport const pincodeSchema = z\n  .string()\n  .trim()\n  .regex(/^\\d{6}$/, 'Enter a valid 6-digit pincode');\nexport type Pincode = z.infer<typeof pincodeSchema>;\n\n/** Optional email — empty/whitespace becomes `undefined`, else validated. */\nexport const optionalEmailSchema = z.preprocess(\n  emptyStringToUndefined,\n  z.email('Enter a valid email').optional(),\n);\n\n// ─── Date & time primitives ──────────────────────────────────────────────────\n\n/** A calendar date with no time component, `YYYY-MM-DD`. */\nexport const isoDateSchema = z\n  .string()\n  .trim()\n  .regex(/^\\d{4}-\\d{2}-\\d{2}$/, 'Expected an YYYY-MM-DD date');\nexport type IsoDate = z.infer<typeof isoDateSchema>;\n\n/** A full ISO-8601 timestamp, e.g. `2026-08-06T09:30:00.000Z`. */\nexport const isoDateTimeSchema = z.iso.datetime({ offset: true });\nexport type IsoDateTime = z.infer<typeof isoDateTimeSchema>;\n\n/** Time of day in 24-hour `HH:MM`. */\nexport const timeOfDaySchema = z\n  .string()\n  .trim()\n  .regex(/^([01]\\d|2[0-3]):[0-5]\\d$/, 'Expected an HH:MM time');\nexport type TimeOfDay = z.infer<typeof timeOfDaySchema>;\n\n// ─── Money ───────────────────────────────────────────────────────────────────\n\n/**\n * A whole-rupee (INR) amount. GymMonk prices are whole rupees; format with a\n * `₹` and grouping at the edge, never store the formatted string.\n */\nexport const priceInrSchema = z.number().int().min(0);\nexport type PriceInr = z.infer<typeof priceInrSchema>;\n"]}
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAW,EAAE;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACvE,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,EAAE,CACvD,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEpF,gFAAgF;AAEhF,kDAAkD;AAClD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;AAG5C,gFAAgF;AAEhF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC3D,CAAC,CAAC;AAGH,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,cAAc,CAAC;AAC1C,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AAEvC;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,WAAW,EAAE,sCAAsC,CAAC,CAAC;AAG9D,6DAA6D;AAC7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,UAAU,CAAC,sBAAsB,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEhG,wCAAwC;AACxC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;AAGzD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,UAAU,CAC7C,sBAAsB,EACtB,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE,CAC1C,CAAC;AAEF,gFAAgF;AAEhF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,CAAC;AAG/D,kEAAkE;AAClE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAGlE,sCAAsC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,2BAA2B,EAAE,wBAAwB,CAAC,CAAC;AAGhE,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC","sourcesContent":["/**\n * gymmonk-schema — Shared helpers and primitives\n * ==============================================\n * The stable building blocks reused across every GymMonk domain schema.\n * Mirrors the `dating-schema` / `near-me-schema` idiom: pure Zod, const-object\n * enums fed to `z.enum(...)`, NodeNext `.js` import specifiers.\n *\n * @module gymmonk-schema/common\n */\n\nimport { z } from 'zod';\n\n// ─── String helpers ──────────────────────────────────────────────────────────\n\n/**\n * Converts empty / whitespace-only strings to `undefined`\n * so Zod `.optional()` treats them as \"not provided\".\n */\nexport const emptyStringToUndefined = (value: unknown): unknown => {\n  if (typeof value === 'string' && value.trim() === '') return undefined;\n  return value;\n};\n\n/** Optional trimmed string. Empty strings are coerced to `undefined`. */\nexport const optionalTrimmedString = (maxLength = 100) =>\n  z.preprocess(emptyStringToUndefined, z.string().trim().max(maxLength).optional());\n\n// ─── Identifiers ─────────────────────────────────────────────────────────────\n\n/** A 24-character hex MongoDB ObjectId string. */\nexport const objectIdSchema = z\n  .string()\n  .trim()\n  .regex(/^[0-9a-fA-F]{24}$/, 'Invalid id');\nexport type ObjectIdString = z.infer<typeof objectIdSchema>;\n\n// ─── Pagination ──────────────────────────────────────────────────────────────\n\n/** Pagination query params shared across list endpoints. */\nexport const paginationSchema = z.object({\n  page: z.coerce.number().int().min(1).default(1),\n  limit: z.coerce.number().int().min(1).max(100).default(20),\n});\nexport type Pagination = z.infer<typeof paginationSchema>;\n\n// ─── Contact primitives (India) ──────────────────────────────────────────────\n\n/**\n * The raw patterns, exported so the onboarding FORM schemas validate a typed\n * value exactly the way the API schemas below do — one rule, both sides.\n */\nexport const PHONE_REGEX = /^[6-9]\\d{9}$/;\nexport const PINCODE_REGEX = /^\\d{6}$/;\n\n/**\n * A bare 10-digit Indian mobile number. Stored RAW (no `+91`) app-wide — the\n * country code is display-only. Mirrors the jansathi phone-number standard.\n */\nexport const phoneSchema = z\n  .string()\n  .trim()\n  .regex(PHONE_REGEX, 'Enter a valid 10-digit mobile number');\nexport type Phone = z.infer<typeof phoneSchema>;\n\n/** Optional phone — empty/whitespace becomes `undefined`. */\nexport const optionalPhoneSchema = z.preprocess(emptyStringToUndefined, phoneSchema.optional());\n\n/** A 6-digit Indian postal PIN code. */\nexport const pincodeSchema = z\n  .string()\n  .trim()\n  .regex(PINCODE_REGEX, 'Enter a valid 6-digit pincode');\nexport type Pincode = z.infer<typeof pincodeSchema>;\n\n/** Optional email — empty/whitespace becomes `undefined`, else validated. */\nexport const optionalEmailSchema = z.preprocess(\n  emptyStringToUndefined,\n  z.email('Enter a valid email').optional(),\n);\n\n// ─── Date & time primitives ──────────────────────────────────────────────────\n\n/** A calendar date with no time component, `YYYY-MM-DD`. */\nexport const isoDateSchema = z\n  .string()\n  .trim()\n  .regex(/^\\d{4}-\\d{2}-\\d{2}$/, 'Expected an YYYY-MM-DD date');\nexport type IsoDate = z.infer<typeof isoDateSchema>;\n\n/** A full ISO-8601 timestamp, e.g. `2026-08-06T09:30:00.000Z`. */\nexport const isoDateTimeSchema = z.iso.datetime({ offset: true });\nexport type IsoDateTime = z.infer<typeof isoDateTimeSchema>;\n\n/** Time of day in 24-hour `HH:MM`. */\nexport const timeOfDaySchema = z\n  .string()\n  .trim()\n  .regex(/^([01]\\d|2[0-3]):[0-5]\\d$/, 'Expected an HH:MM time');\nexport type TimeOfDay = z.infer<typeof timeOfDaySchema>;\n\n// ─── Money ───────────────────────────────────────────────────────────────────\n\n/**\n * A whole-rupee (INR) amount. GymMonk prices are whole rupees; format with a\n * `₹` and grouping at the edge, never store the formatted string.\n */\nexport const priceInrSchema = z.number().int().min(0);\nexport type PriceInr = z.infer<typeof priceInrSchema>;\n"]}

package/dist/file.d.ts

@@ -0,0 +1,116 @@
+/**
+ * gymmonk-schema — File uploads
+ * =============================
+ * Contracts for the signed-URL upload flow. GymMonk never streams file bytes
+ * through the API: the browser asks the backend for a short-lived v4 signed
+ * PUT URL, uploads straight to Google Cloud Storage, and stores the returned
+ * PERMANENT public URL.
+ *
+ * The download URL is deliberately NOT signed. A signed read URL expires,
+ * which would rot every image reference already written to Mongo; the bucket
+ * instead grants `allUsers` object-viewer and we store the plain public URL.
+ *
+ * Mirrors reform-backend's `shared/schemas/file.schema.ts`.
+ *
+ * @module gymmonk-schema/file
+ */
+import { z } from 'zod';
+/**
+ * Every folder an upload may target. This is an allow-list, not a hint: the
+ * backend rejects anything outside it, so a compromised client cannot scatter
+ * objects across the bucket. Adding a new upload surface means adding it here
+ * FIRST, then publishing the package.
+ *
+ * `userId` is appended by the backend, so the effective path is
+ * `<folder>/<userId>/<timestamp>-<random><ext>`. That per-user prefix is what
+ * makes ownership checkable on cleanup.
+ */
+export declare const UPLOAD_FOLDERS: readonly ["profile-photos", "center-photos", "logos", "member-documents", "equipment-photos", "announcement-media", "exercise-media", "progress-photos", "feedback-media"];
+export declare const uploadFolderSchema: z.ZodEnum<{
+    "profile-photos": "profile-photos";
+    "center-photos": "center-photos";
+    logos: "logos";
+    "member-documents": "member-documents";
+    "equipment-photos": "equipment-photos";
+    "announcement-media": "announcement-media";
+    "exercise-media": "exercise-media";
+    "progress-photos": "progress-photos";
+    "feedback-media": "feedback-media";
+}>;
+export type UploadFolder = z.infer<typeof uploadFolderSchema>;
+/** MIME types the signed-URL endpoint will sign for. */
+export declare const ALLOWED_UPLOAD_MIME_TYPES: readonly ["image/jpeg", "image/png", "image/webp", "image/gif", "application/pdf"];
+export declare const uploadMimeTypeSchema: z.ZodEnum<{
+    "image/jpeg": "image/jpeg";
+    "image/png": "image/png";
+    "image/webp": "image/webp";
+    "image/gif": "image/gif";
+    "application/pdf": "application/pdf";
+}>;
+export type UploadMimeType = z.infer<typeof uploadMimeTypeSchema>;
+/**
+ * Default per-file ceiling, in MB. Validation runs on the RAW pick, before the
+ * client-side optimizer shrinks it — a modern phone camera produces 8-12 MB
+ * JPEGs that compress to well under 1 MB, so a tighter cap would reject
+ * perfectly ordinary photos.
+ */
+export declare const MAX_UPLOAD_SIZE_MB = 10;
+/** Per-folder overrides. Documents may be larger scans than a photo. */
+export declare const FOLDER_MAX_SIZE_MB: Partial<Record<UploadFolder, number>>;
+/**
+ * Request body for `POST /api/v1/files/signed-url`.
+ *
+ * `fileName` is restricted to a safe charset because it becomes part of the GCS
+ * object path — the client sanitises before sending, and this rejects anything
+ * that slipped through (path separators, control characters, unicode tricks).
+ */
+export declare const signedUploadUrlBodySchema: z.ZodObject<{
+    fileName: z.ZodString;
+    contentType: z.ZodEnum<{
+        "image/jpeg": "image/jpeg";
+        "image/png": "image/png";
+        "image/webp": "image/webp";
+        "image/gif": "image/gif";
+        "application/pdf": "application/pdf";
+    }>;
+    folder: z.ZodEnum<{
+        "profile-photos": "profile-photos";
+        "center-photos": "center-photos";
+        logos: "logos";
+        "member-documents": "member-documents";
+        "equipment-photos": "equipment-photos";
+        "announcement-media": "announcement-media";
+        "exercise-media": "exercise-media";
+        "progress-photos": "progress-photos";
+        "feedback-media": "feedback-media";
+    }>;
+    fileSize: z.ZodNumber;
+}, z.core.$strip>;
+export type SignedUploadUrlBody = z.infer<typeof signedUploadUrlBodySchema>;
+/** Response of `POST /api/v1/files/signed-url`. */
+export declare const signedUploadUrlResponseSchema: z.ZodObject<{
+    uploadUrl: z.ZodString;
+    downloadUrl: z.ZodString;
+    filePath: z.ZodString;
+    expiresAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type SignedUploadUrlResponse = z.infer<typeof signedUploadUrlResponseSchema>;
+/**
+ * Body for `POST /api/v1/files/cleanup-uploads`. Called when a user removes a
+ * photo they uploaded but never saved, so the orphaned object does not sit in
+ * the bucket forever.
+ *
+ * Ownership is enforced per-path from the `userId` segment the backend embedded
+ * at signing time. Paths belonging to someone else are skipped silently rather
+ * than 403-ing, so one foreign entry cannot void a legitimate batch.
+ */
+export declare const cleanupUploadsBodySchema: z.ZodObject<{
+    filePaths: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type CleanupUploadsBody = z.infer<typeof cleanupUploadsBodySchema>;
+export declare const cleanupUploadsResponseSchema: z.ZodObject<{
+    deleted: z.ZodNumber;
+    skipped: z.ZodNumber;
+}, z.core.$strip>;
+export type CleanupUploadsResponse = z.infer<typeof cleanupUploadsResponseSchema>;
+//# sourceMappingURL=file.d.ts.map

package/dist/file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../src/file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,4KAmBjB,CAAC;AAEX,eAAO,MAAM,kBAAkB;;;;;;;;;;EAAyB,CAAC;AACzD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D,wDAAwD;AACxD,eAAO,MAAM,yBAAyB,oFAM5B,CAAC;AAEX,eAAO,MAAM,oBAAoB;;;;;;EAAoC,CAAC;AACtE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,wEAAwE;AACxE,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAEpE,CAAC;AAMF;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;iBA0BlC,CAAC;AAEL,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,mDAAmD;AACnD,eAAO,MAAM,6BAA6B;;;;;iBAUxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAIpF;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB;;iBAEnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,4BAA4B;;;iBAGvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/file.js

@@ -0,0 +1,137 @@
+/**
+ * gymmonk-schema — File uploads
+ * =============================
+ * Contracts for the signed-URL upload flow. GymMonk never streams file bytes
+ * through the API: the browser asks the backend for a short-lived v4 signed
+ * PUT URL, uploads straight to Google Cloud Storage, and stores the returned
+ * PERMANENT public URL.
+ *
+ * The download URL is deliberately NOT signed. A signed read URL expires,
+ * which would rot every image reference already written to Mongo; the bucket
+ * instead grants `allUsers` object-viewer and we store the plain public URL.
+ *
+ * Mirrors reform-backend's `shared/schemas/file.schema.ts`.
+ *
+ * @module gymmonk-schema/file
+ */
+import { z } from 'zod';
+// ─── Folders ─────────────────────────────────────────────────────────────────
+/**
+ * Every folder an upload may target. This is an allow-list, not a hint: the
+ * backend rejects anything outside it, so a compromised client cannot scatter
+ * objects across the bucket. Adding a new upload surface means adding it here
+ * FIRST, then publishing the package.
+ *
+ * `userId` is appended by the backend, so the effective path is
+ * `<folder>/<userId>/<timestamp>-<random><ext>`. That per-user prefix is what
+ * makes ownership checkable on cleanup.
+ */
+export const UPLOAD_FOLDERS = [
+    /** Member + owner + staff avatars. Square, cropped round in the UI. */
+    'profile-photos',
+    /** Gym/center gallery photos. Multi-select, uncropped. */
+    'center-photos',
+    /** Organisation and center logos. */
+    'logos',
+    /** Member ID proof / address proof captured at the front desk. */
+    'member-documents',
+    /** Equipment photos in the gym inventory. */
+    'equipment-photos',
+    /** Images attached to an announcement. */
+    'announcement-media',
+    /** Custom exercise thumbnails added by a gym. */
+    'exercise-media',
+    /** Progress photos a member uploads against a measurement entry. */
+    'progress-photos',
+    /** Screenshots and photos attached to feedback or a complaint. */
+    'feedback-media',
+];
+export const uploadFolderSchema = z.enum(UPLOAD_FOLDERS);
+// ─── Content types ───────────────────────────────────────────────────────────
+/** MIME types the signed-URL endpoint will sign for. */
+export const ALLOWED_UPLOAD_MIME_TYPES = [
+    'image/jpeg',
+    'image/png',
+    'image/webp',
+    'image/gif',
+    'application/pdf',
+];
+export const uploadMimeTypeSchema = z.enum(ALLOWED_UPLOAD_MIME_TYPES);
+// ─── Size limits ─────────────────────────────────────────────────────────────
+/**
+ * Default per-file ceiling, in MB. Validation runs on the RAW pick, before the
+ * client-side optimizer shrinks it — a modern phone camera produces 8-12 MB
+ * JPEGs that compress to well under 1 MB, so a tighter cap would reject
+ * perfectly ordinary photos.
+ */
+export const MAX_UPLOAD_SIZE_MB = 10;
+/** Per-folder overrides. Documents may be larger scans than a photo. */
+export const FOLDER_MAX_SIZE_MB = {
+    'member-documents': 20,
+};
+const HARD_CAP_MB = Math.max(MAX_UPLOAD_SIZE_MB, ...Object.values(FOLDER_MAX_SIZE_MB));
+// ─── Signed upload URL ───────────────────────────────────────────────────────
+/**
+ * Request body for `POST /api/v1/files/signed-url`.
+ *
+ * `fileName` is restricted to a safe charset because it becomes part of the GCS
+ * object path — the client sanitises before sending, and this rejects anything
+ * that slipped through (path separators, control characters, unicode tricks).
+ */
+export const signedUploadUrlBodySchema = z
+    .object({
+    fileName: z
+        .string()
+        .min(1)
+        .max(255)
+        .regex(/^[a-zA-Z0-9_.-]+$/, 'Invalid file name'),
+    contentType: uploadMimeTypeSchema,
+    folder: uploadFolderSchema,
+    fileSize: z
+        .number()
+        .int()
+        .min(1)
+        .max(HARD_CAP_MB * 1024 * 1024, `File must be smaller than ${HARD_CAP_MB}MB`),
+})
+    .superRefine((data, ctx) => {
+    // Tighten to the per-folder cap. The outer `.max` is only the widest
+    // ceiling any folder allows; this is the one that actually applies.
+    const capMb = FOLDER_MAX_SIZE_MB[data.folder] ?? MAX_UPLOAD_SIZE_MB;
+    if (data.fileSize > capMb * 1024 * 1024) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['fileSize'],
+            message: `File must be smaller than ${capMb}MB for ${data.folder}`,
+        });
+    }
+});
+/** Response of `POST /api/v1/files/signed-url`. */
+export const signedUploadUrlResponseSchema = z.object({
+    /** Short-lived v4 signed URL — PUT the bytes here. */
+    uploadUrl: z.string(),
+    /** Permanent public URL. This is what gets stored in Mongo. */
+    downloadUrl: z.string(),
+    /** Object path inside the bucket, without the bucket prefix. Used to
+     *  delete an object the user abandoned before saving. */
+    filePath: z.string(),
+    /** When `uploadUrl` stops working. */
+    expiresAt: z.iso.datetime(),
+});
+// ─── Cleanup ─────────────────────────────────────────────────────────────────
+/**
+ * Body for `POST /api/v1/files/cleanup-uploads`. Called when a user removes a
+ * photo they uploaded but never saved, so the orphaned object does not sit in
+ * the bucket forever.
+ *
+ * Ownership is enforced per-path from the `userId` segment the backend embedded
+ * at signing time. Paths belonging to someone else are skipped silently rather
+ * than 403-ing, so one foreign entry cannot void a legitimate batch.
+ */
+export const cleanupUploadsBodySchema = z.object({
+    filePaths: z.array(z.string().min(1)).min(1).max(20),
+});
+export const cleanupUploadsResponseSchema = z.object({
+    deleted: z.number().int().min(0),
+    skipped: z.number().int().min(0),
+});
+//# sourceMappingURL=file.js.map

package/dist/file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.js","sourceRoot":"","sources":["../src/file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,uEAAuE;IACvE,gBAAgB;IAChB,0DAA0D;IAC1D,eAAe;IACf,qCAAqC;IACrC,OAAO;IACP,kEAAkE;IAClE,kBAAkB;IAClB,6CAA6C;IAC7C,kBAAkB;IAClB,0CAA0C;IAC1C,oBAAoB;IACpB,iDAAiD;IACjD,gBAAgB;IAChB,oEAAoE;IACpE,iBAAiB;IACjB,kEAAkE;IAClE,gBAAgB;CACR,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAGzD,gFAAgF;AAEhF,wDAAwD;AACxD,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,WAAW;IACX,iBAAiB;CACT,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;AAGtE,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAErC,wEAAwE;AACxE,MAAM,CAAC,MAAM,kBAAkB,GAA0C;IACvE,kBAAkB,EAAE,EAAE;CACvB,CAAC;AAEF,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAEvF,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,WAAW,EAAE,oBAAoB;IACjC,MAAM,EAAE,kBAAkB;IAC1B,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,WAAW,GAAG,IAAI,GAAG,IAAI,EAAE,6BAA6B,WAAW,IAAI,CAAC;CAChF,CAAC;KACD,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC;IACpE,IAAI,IAAI,CAAC,QAAQ,GAAG,KAAK,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QACxC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EAAE,6BAA6B,KAAK,UAAU,IAAI,CAAC,MAAM,EAAE;SACnE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIL,mDAAmD;AACnD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,sDAAsD;IACtD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,+DAA+D;IAC/D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB;6DACyD;IACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,sCAAsC;IACtC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAIH,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACrD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC","sourcesContent":["/**\n * gymmonk-schema — File uploads\n * =============================\n * Contracts for the signed-URL upload flow. GymMonk never streams file bytes\n * through the API: the browser asks the backend for a short-lived v4 signed\n * PUT URL, uploads straight to Google Cloud Storage, and stores the returned\n * PERMANENT public URL.\n *\n * The download URL is deliberately NOT signed. A signed read URL expires,\n * which would rot every image reference already written to Mongo; the bucket\n * instead grants `allUsers` object-viewer and we store the plain public URL.\n *\n * Mirrors reform-backend's `shared/schemas/file.schema.ts`.\n *\n * @module gymmonk-schema/file\n */\n\nimport { z } from 'zod';\n\n// ─── Folders ─────────────────────────────────────────────────────────────────\n\n/**\n * Every folder an upload may target. This is an allow-list, not a hint: the\n * backend rejects anything outside it, so a compromised client cannot scatter\n * objects across the bucket. Adding a new upload surface means adding it here\n * FIRST, then publishing the package.\n *\n * `userId` is appended by the backend, so the effective path is\n * `<folder>/<userId>/<timestamp>-<random><ext>`. That per-user prefix is what\n * makes ownership checkable on cleanup.\n */\nexport const UPLOAD_FOLDERS = [\n  /** Member + owner + staff avatars. Square, cropped round in the UI. */\n  'profile-photos',\n  /** Gym/center gallery photos. Multi-select, uncropped. */\n  'center-photos',\n  /** Organisation and center logos. */\n  'logos',\n  /** Member ID proof / address proof captured at the front desk. */\n  'member-documents',\n  /** Equipment photos in the gym inventory. */\n  'equipment-photos',\n  /** Images attached to an announcement. */\n  'announcement-media',\n  /** Custom exercise thumbnails added by a gym. */\n  'exercise-media',\n  /** Progress photos a member uploads against a measurement entry. */\n  'progress-photos',\n  /** Screenshots and photos attached to feedback or a complaint. */\n  'feedback-media',\n] as const;\n\nexport const uploadFolderSchema = z.enum(UPLOAD_FOLDERS);\nexport type UploadFolder = z.infer<typeof uploadFolderSchema>;\n\n// ─── Content types ───────────────────────────────────────────────────────────\n\n/** MIME types the signed-URL endpoint will sign for. */\nexport const ALLOWED_UPLOAD_MIME_TYPES = [\n  'image/jpeg',\n  'image/png',\n  'image/webp',\n  'image/gif',\n  'application/pdf',\n] as const;\n\nexport const uploadMimeTypeSchema = z.enum(ALLOWED_UPLOAD_MIME_TYPES);\nexport type UploadMimeType = z.infer<typeof uploadMimeTypeSchema>;\n\n// ─── Size limits ─────────────────────────────────────────────────────────────\n\n/**\n * Default per-file ceiling, in MB. Validation runs on the RAW pick, before the\n * client-side optimizer shrinks it — a modern phone camera produces 8-12 MB\n * JPEGs that compress to well under 1 MB, so a tighter cap would reject\n * perfectly ordinary photos.\n */\nexport const MAX_UPLOAD_SIZE_MB = 10;\n\n/** Per-folder overrides. Documents may be larger scans than a photo. */\nexport const FOLDER_MAX_SIZE_MB: Partial<Record<UploadFolder, number>> = {\n  'member-documents': 20,\n};\n\nconst HARD_CAP_MB = Math.max(MAX_UPLOAD_SIZE_MB, ...Object.values(FOLDER_MAX_SIZE_MB));\n\n// ─── Signed upload URL ───────────────────────────────────────────────────────\n\n/**\n * Request body for `POST /api/v1/files/signed-url`.\n *\n * `fileName` is restricted to a safe charset because it becomes part of the GCS\n * object path — the client sanitises before sending, and this rejects anything\n * that slipped through (path separators, control characters, unicode tricks).\n */\nexport const signedUploadUrlBodySchema = z\n  .object({\n    fileName: z\n      .string()\n      .min(1)\n      .max(255)\n      .regex(/^[a-zA-Z0-9_.-]+$/, 'Invalid file name'),\n    contentType: uploadMimeTypeSchema,\n    folder: uploadFolderSchema,\n    fileSize: z\n      .number()\n      .int()\n      .min(1)\n      .max(HARD_CAP_MB * 1024 * 1024, `File must be smaller than ${HARD_CAP_MB}MB`),\n  })\n  .superRefine((data, ctx) => {\n    // Tighten to the per-folder cap. The outer `.max` is only the widest\n    // ceiling any folder allows; this is the one that actually applies.\n    const capMb = FOLDER_MAX_SIZE_MB[data.folder] ?? MAX_UPLOAD_SIZE_MB;\n    if (data.fileSize > capMb * 1024 * 1024) {\n      ctx.addIssue({\n        code: 'custom',\n        path: ['fileSize'],\n        message: `File must be smaller than ${capMb}MB for ${data.folder}`,\n      });\n    }\n  });\n\nexport type SignedUploadUrlBody = z.infer<typeof signedUploadUrlBodySchema>;\n\n/** Response of `POST /api/v1/files/signed-url`. */\nexport const signedUploadUrlResponseSchema = z.object({\n  /** Short-lived v4 signed URL — PUT the bytes here. */\n  uploadUrl: z.string(),\n  /** Permanent public URL. This is what gets stored in Mongo. */\n  downloadUrl: z.string(),\n  /** Object path inside the bucket, without the bucket prefix. Used to\n   *  delete an object the user abandoned before saving. */\n  filePath: z.string(),\n  /** When `uploadUrl` stops working. */\n  expiresAt: z.iso.datetime(),\n});\n\nexport type SignedUploadUrlResponse = z.infer<typeof signedUploadUrlResponseSchema>;\n\n// ─── Cleanup ─────────────────────────────────────────────────────────────────\n\n/**\n * Body for `POST /api/v1/files/cleanup-uploads`. Called when a user removes a\n * photo they uploaded but never saved, so the orphaned object does not sit in\n * the bucket forever.\n *\n * Ownership is enforced per-path from the `userId` segment the backend embedded\n * at signing time. Paths belonging to someone else are skipped silently rather\n * than 403-ing, so one foreign entry cannot void a legitimate batch.\n */\nexport const cleanupUploadsBodySchema = z.object({\n  filePaths: z.array(z.string().min(1)).min(1).max(20),\n});\n\nexport type CleanupUploadsBody = z.infer<typeof cleanupUploadsBodySchema>;\n\nexport const cleanupUploadsResponseSchema = z.object({\n  deleted: z.number().int().min(0),\n  skipped: z.number().int().min(0),\n});\n\nexport type CleanupUploadsResponse = z.infer<typeof cleanupUploadsResponseSchema>;\n"]}

package/dist/index.d.ts

@@ -14,14 +14,17 @@ export * from './common.js';
 export * from './equipment.js';
 export * from './exercise.js';
 export * from './feedback.js';
+export * from './file.js';
 export * from './home.js';
 export * from './insights.js';
 export * from './member.js';
 export * from './member-profile.js';
 export * from './membership.js';
 export * from './membership-plan.js';
+export * from './messages.js';
 export * from './notification.js';
 export * from './onboarding.js';
+export * from './onboarding-form.js';
 export * from './organisation.js';
 export * from './owner-profile.js';
 export * from './pricing.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAE5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAE/B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAE9B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,sBAAsB,CAAC;AAErC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAE5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAE/B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAE9B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAE9B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,sBAAsB,CAAC;AAErC,cAAc,eAAe,CAAC;AAE9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,sBAAsB,CAAC;AAErC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC"}

package/dist/index.js

@@ -16,6 +16,8 @@ export * from './equipment.js';
 // ─── Training ────────────────────────────────────────────────────────────────
 export * from './exercise.js';
 export * from './feedback.js';
+// ─── Uploads ─────────────────────────────────────────────────────────────────
+export * from './file.js';
 export * from './home.js';
 export * from './insights.js';
 // ─── People ──────────────────────────────────────────────────────────────────
@@ -24,9 +26,13 @@ export * from './member-profile.js';
 export * from './membership.js';
 // ─── Membership ──────────────────────────────────────────────────────────────
 export * from './membership-plan.js';
+// ─── API result messages + error codes ───────────────────────────────────────
+export * from './messages.js';
 // ─── Engagement & analytics ──────────────────────────────────────────────────
 export * from './notification.js';
 export * from './onboarding.js';
+// ─── Onboarding wizard FORM validation (client-side working shapes) ──────────
+export * from './onboarding-form.js';
 // ─── Gym structure & onboarding ──────────────────────────────────────────────
 export * from './organisation.js';
 export * from './owner-profile.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,gFAAgF;AAChF,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,gFAAgF;AAChF,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,gFAAgF;AAChF,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,gFAAgF;AAChF,cAAc,sBAAsB,CAAC;AACrC,gFAAgF;AAChF,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,gFAAgF;AAChF,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC","sourcesContent":["/**\n * gymmonk-schema — Public API\n * ===========================\n * Shared Zod schemas, enums and domain types for GymMonk (fitness SaaS).\n * Single source of truth (SSOT) for data shapes, TypeScript types and\n * validation, consumed by both gymmonk-backend and gymmonk-web-client.\n *\n * Every domain module is re-exported through this barrel. Import names are\n * globally unique across modules, so `export *` composes without collisions.\n */\n\nexport * from './announcement.js';\nexport * from './center.js';\n// ─── Foundation ──────────────────────────────────────────────────────────────\nexport * from './common.js';\nexport * from './equipment.js';\n// ─── Training ────────────────────────────────────────────────────────────────\nexport * from './exercise.js';\nexport * from './feedback.js';\nexport * from './home.js';\nexport * from './insights.js';\n// ─── People ──────────────────────────────────────────────────────────────────\nexport * from './member.js';\nexport * from './member-profile.js';\nexport * from './membership.js';\n// ─── Membership ──────────────────────────────────────────────────────────────\nexport * from './membership-plan.js';\n// ─── Engagement & analytics ──────────────────────────────────────────────────\nexport * from './notification.js';\nexport * from './onboarding.js';\n// ─── Gym structure & onboarding ──────────────────────────────────────────────\nexport * from './organisation.js';\nexport * from './owner-profile.js';\nexport * from './pricing.js';\nexport * from './session.js';\nexport * from './shared.js';\nexport * from './staff.js';\nexport * from './subscription.js';\nexport * from './user.js';\nexport * from './workout-plan.js';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,gFAAgF;AAChF,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,gFAAgF;AAChF,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,gFAAgF;AAChF,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,gFAAgF;AAChF,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,gFAAgF;AAChF,cAAc,sBAAsB,CAAC;AACrC,gFAAgF;AAChF,cAAc,eAAe,CAAC;AAC9B,gFAAgF;AAChF,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,gFAAgF;AAChF,cAAc,sBAAsB,CAAC;AACrC,gFAAgF;AAChF,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC","sourcesContent":["/**\n * gymmonk-schema — Public API\n * ===========================\n * Shared Zod schemas, enums and domain types for GymMonk (fitness SaaS).\n * Single source of truth (SSOT) for data shapes, TypeScript types and\n * validation, consumed by both gymmonk-backend and gymmonk-web-client.\n *\n * Every domain module is re-exported through this barrel. Import names are\n * globally unique across modules, so `export *` composes without collisions.\n */\n\nexport * from './announcement.js';\nexport * from './center.js';\n// ─── Foundation ──────────────────────────────────────────────────────────────\nexport * from './common.js';\nexport * from './equipment.js';\n// ─── Training ────────────────────────────────────────────────────────────────\nexport * from './exercise.js';\nexport * from './feedback.js';\n// ─── Uploads ─────────────────────────────────────────────────────────────────\nexport * from './file.js';\nexport * from './home.js';\nexport * from './insights.js';\n// ─── People ──────────────────────────────────────────────────────────────────\nexport * from './member.js';\nexport * from './member-profile.js';\nexport * from './membership.js';\n// ─── Membership ──────────────────────────────────────────────────────────────\nexport * from './membership-plan.js';\n// ─── API result messages + error codes ───────────────────────────────────────\nexport * from './messages.js';\n// ─── Engagement & analytics ──────────────────────────────────────────────────\nexport * from './notification.js';\nexport * from './onboarding.js';\n// ─── Onboarding wizard FORM validation (client-side working shapes) ──────────\nexport * from './onboarding-form.js';\n// ─── Gym structure & onboarding ──────────────────────────────────────────────\nexport * from './organisation.js';\nexport * from './owner-profile.js';\nexport * from './pricing.js';\nexport * from './session.js';\nexport * from './shared.js';\nexport * from './staff.js';\nexport * from './subscription.js';\nexport * from './user.js';\nexport * from './workout-plan.js';\n"]}

package/dist/messages.d.ts

@@ -0,0 +1,184 @@
+/**
+ * gymmonk-schema — API result messages
+ * ====================================
+ * Single source of truth for every user-facing SUCCESS and ERROR message the
+ * product shows, plus the API error codes both sides key off.
+ *
+ * Why it lives here: the schema package is already the SSOT for data shapes,
+ * types and validation. Result copy is part of that contract — the backend
+ * raises a message, the client shows it, and neither should invent its own
+ * wording. Both repos import from here, so copy changes land in one place and
+ * can never drift between server and client.
+ *
+ * Usage:
+ *   backend  → `throw new BadRequestError(ERROR_MESSAGE.centerAddressRequired)`
+ *   frontend → `showSuccess(...toast(SUCCESS_MESSAGE.profileUpdated))`
+ *
+ * @module gymmonk-schema/messages
+ */
+/**
+ * Machine-readable error codes returned in the API envelope
+ * (`{ success: false, error: { code, message } }`). The client can branch on a
+ * code; the message is what a human reads.
+ */
+export declare const ERROR_CODE: {
+    readonly INTERNAL_ERROR: "INTERNAL_ERROR";
+    readonly VALIDATION_ERROR: "VALIDATION_ERROR";
+    readonly NOT_FOUND: "NOT_FOUND";
+    readonly INVALID_TOKEN: "INVALID_TOKEN";
+    readonly TOKEN_EXPIRED: "TOKEN_EXPIRED";
+    readonly UNAUTHORIZED: "UNAUTHORIZED";
+    readonly FORBIDDEN: "FORBIDDEN";
+    readonly SESSION_INVALIDATED: "SESSION_INVALIDATED";
+    readonly USER_NOT_FOUND: "USER_NOT_FOUND";
+    readonly USER_ALREADY_EXISTS: "USER_ALREADY_EXISTS";
+    readonly INVALID_ROLE: "INVALID_ROLE";
+    readonly RATE_LIMITED: "RATE_LIMITED";
+    readonly RATE_LIMIT_EXCEEDED: "RATE_LIMIT_EXCEEDED";
+    readonly SERVICE_UNAVAILABLE: "SERVICE_UNAVAILABLE";
+};
+export type ErrorCode = (typeof ERROR_CODE)[keyof typeof ERROR_CODE];
+/** A result message: a headline and an optional quieter second line. */
+export interface ResultMessage {
+    title: string;
+    description?: string;
+}
+/**
+ * Confirmation shown after a write succeeds, keyed by action. Interpolating
+ * entries are functions so the caller supplies the value without re-wording.
+ */
+export declare const SUCCESS_MESSAGE: {
+    readonly memberOnboardingComplete: {
+        readonly title: "You're all set";
+        readonly description: "Welcome to GymMonk.";
+    };
+    readonly ownerOnboardingComplete: {
+        readonly title: "Your gym is ready";
+        readonly description: "Welcome to GymMonk.";
+    };
+    readonly profileUpdated: {
+        readonly title: "Profile updated";
+    };
+    readonly organisationUpdated: {
+        readonly title: "Organisation updated";
+    };
+    readonly centerAdded: {
+        readonly title: "Center added";
+    };
+    readonly centerUpdated: {
+        readonly title: "Center updated";
+    };
+    readonly membershipPlanCreated: {
+        readonly title: "Membership plan created";
+    };
+    readonly membershipUpdated: {
+        readonly title: "Membership updated";
+    };
+    readonly membershipRenewed: {
+        readonly title: "Membership renewed";
+    };
+    readonly membershipCancelled: {
+        readonly title: "Membership cancelled";
+    };
+    readonly membershipPauseRequested: {
+        readonly title: "Pause request sent";
+        readonly description: "Your gym will confirm the pause.";
+    };
+    readonly subscriptionUpdated: {
+        readonly title: "Subscription updated";
+    };
+    readonly workoutPlanCreated: {
+        readonly title: "Workout plan created";
+    };
+    readonly workoutCreated: {
+        readonly title: "Workout created";
+    };
+    readonly workoutPlanAssigned: {
+        readonly title: "Workout plan assigned";
+    };
+    readonly checkedIn: {
+        readonly title: "Checked in";
+        readonly description: "Your session has started.";
+    };
+    readonly checkedOut: {
+        readonly title: "Checked out";
+        readonly description: "Session saved.";
+    };
+    readonly feedbackSubmitted: {
+        readonly title: "Feedback sent";
+        readonly description: "Thank you for helping us improve.";
+    };
+    readonly complaintSubmitted: {
+        readonly title: "Complaint submitted";
+        readonly description: "Your gym will look into it.";
+    };
+    readonly announcementSent: {
+        readonly title: "Announcement sent";
+    };
+    readonly announcementScheduled: {
+        readonly title: "Announcement scheduled";
+    };
+    readonly announcementDraftSaved: {
+        readonly title: "Draft saved";
+    };
+    readonly mpinSet: {
+        readonly title: "PIN set";
+    };
+    readonly mpinReset: {
+        readonly title: "Your PIN has been reset.";
+    };
+    readonly mpinResetLinkSent: {
+        readonly title: "We've emailed you a reset link";
+        readonly description: "Check your inbox.";
+    };
+};
+export type SuccessMessageKey = keyof typeof SUCCESS_MESSAGE;
+/** Success messages that name the thing they acted on. */
+export declare const SUCCESS_MESSAGE_FOR: {
+    readonly memberAdded: (name: string) => ResultMessage;
+    readonly staffAdded: (name: string) => ResultMessage;
+    readonly inviteClaimed: (gymName: string) => ResultMessage;
+    readonly roleSwitched: (roleLabel: string) => ResultMessage;
+};
+/**
+ * Failure copy. Transport entries describe a request that never reached the
+ * API; the rest are domain rules the backend enforces and the client can also
+ * check up-front — same wording either way.
+ */
+export declare const ERROR_MESSAGE: {
+    readonly generic: "Something went wrong. Please try again.";
+    readonly network: "Network error. Check your connection and try again.";
+    readonly timeout: "That took too long. Please try again.";
+    readonly sessionExpired: "Your session expired. Please sign in again.";
+    readonly formInvalid: "Please check the highlighted fields.";
+    readonly roleRequired: "Choose a role to continue";
+    readonly memberOnboardingFailed: "We could not save your details. Please try again.";
+    readonly ownerOnboardingFailed: "We could not create your gym. Please try again.";
+    readonly centerRequiredForPlan: "Pick the center this plan belongs to.";
+    readonly organisationAddressRequired: "Add your organisation address before creating a center.";
+    readonly noCenterForPlans: "No gym center found. Add a center before creating plans.";
+    readonly noCenterForWorkouts: "No gym center found. Add a center before creating workouts.";
+    readonly noCenterForAnnouncements: "No gym center found. Add a center before sending announcements.";
+    readonly planUnavailable: "That plan is not available right now.";
+    readonly workoutPlanRequired: "Choose a plan to assign";
+    readonly checkInFailed: "Could not check you in. Please try again.";
+    readonly checkOutFailed: "Could not check you out. Please try again.";
+    readonly feedbackRatingRequired: "Choose a rating to submit your feedback";
+    readonly complaintIssueRequired: "Choose the issue you are reporting";
+    readonly mpinIncorrect: "Incorrect PIN.";
+    readonly mpinVerifyFailed: "Couldn't verify. Try again.";
+    readonly mpinSetFailed: "Couldn't set your PIN. Try again.";
+    readonly mpinMismatch: "Those didn't match. Try again.";
+    readonly mpinResetLinkFailed: "Couldn't send the reset link. Try again.";
+    readonly mpinResetFailed: "Couldn't reset your PIN. Try again.";
+    readonly imageUploadFailed: "Could not upload that image. Please try again.";
+    readonly imageProcessFailed: "Could not process that image. Please try again.";
+};
+export type ErrorMessageKey = keyof typeof ERROR_MESSAGE;
+/** Error messages that name a limit or value. */
+export declare const ERROR_MESSAGE_FOR: {
+    readonly maxPhotos: (max: number) => string;
+    /** Role-switch PIN lockout, in whole minutes remaining. */
+    readonly mpinLockedOut: (minutes: number) => string;
+};
+//# sourceMappingURL=messages.d.ts.map

package/dist/messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../src/messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH;;;;GAIG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;CAwBb,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAIrE,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiDsB,CAAC;AAEnD,MAAM,MAAM,iBAAiB,GAAG,MAAM,OAAO,eAAe,CAAC;AAE7D,0DAA0D;AAC1D,eAAO,MAAM,mBAAmB;iCACV,MAAM,KAAG,aAAa;gCAIvB,MAAM,KAAG,aAAa;sCAIhB,MAAM,KAAG,aAAa;uCAIrB,MAAM,KAAG,aAAa;CAGxC,CAAC;AAIX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+CiB,CAAC;AAE5C,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,aAAa,CAAC;AAEzD,iDAAiD;AACjD,eAAO,MAAM,iBAAiB;8BACX,MAAM,KAAG,MAAM;IAChC,2DAA2D;sCAClC,MAAM,KAAG,MAAM;CAEhC,CAAC"}